StackRadar

CVE-2026-13757

Medium

Advisory

Published 29 Jun 2026In the index since 5 Sept 2026
Severity
Medium
worst across findings
CVSS
6.2
base score, highest
EPSS
0.001
4th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
2,230
of 17,813 indexed, latest versions
Container images
2,262
deployed by those charts
Fix available
2 of 2
affected packages

Red Hat Security Advisory: p11-kit security update

Carried by container images the latest versions of 2,230 of 17,813 indexed charts deploy, on 2,262 images.

Affected packageAffected versionsFixed inImages
p11-kitdeb0.23.9-2, 0.23.9-2ubuntu0.1, 0.23.20-1build1, 0.23.20-1ubuntu0.1+8 more0.23.9-2ubuntu0.1+esm1, 0.23.20-1ubuntu0.1+esm1, 0.24.0-6ubuntu0.1, 0.25.3-4ubuntu2.2+1 more2,099
p11-kitrpm0.24.1-2.el9, 0.25.0-1.azl3, 0.25.3-2.el9, 0.25.3-3.el9_5+2 more0:0.26.4-1.el9_8, 0:0.26.4-1.el10_2, 0.26.5-1163
OSV records
DEBIAN-CVE-2026-13757RHSA-2026:49667RHSA-2026:49668RLSA-2026:49667RLSA-2026:49668UBUNTU-CVE-2026-13757AZL-91743ECHO-e3a5-7704-649f
Also known as
USN-8687-1

Charts affected

2,230 by stars
ChartLatestAffected imagesRadar Score

Container images carrying it

2,262 by charts deploying them

A fixed version is listed for 2 of the 2 affected packages.

Container imageDigestPackageFixed inUsed by
registry.gitlab.com/xrow-public/developer-operator/developer-operator-controller:2.1.2301847adfe16
p11-kit@0.25.3-3.el9_5
0:0.26.4-1.el9_8
1
registry.gitlab.com/xrow-public/helm-iframely/iframely:2.3.5fcf07d5ff7e2
p11-kit@0.25.3-3.el9_5
0:0.26.4-1.el9_8
1
registry.gitlab.com/xrow-public/velero-client/velero-client:1.4.203015f863a3e
p11-kit@0.26.2-1.el10
0:0.26.4-1.el10_2
1
registry.k8s.io/csi-secrets-store/driver:v1.6.1b48d7d13dd06
p11-kit@0.24.1-2
no fix listed
1
registry.k8s.io/git-sync/git-sync:v4.5.00e64aedb0d0a
p11-kit@0.25.5-3
no fix listed
1
registry.k8s.io/git-sync/git-sync:v4.1.0fd9722fd02e3
p11-kit@0.24.1-2
no fix listed
1
registry.k8s.io/node-problem-detector/node-problem-detector:v0.8.2052f0618e9bc2
p11-kit@0.24.1-2
no fix listed
1
registry.k8s.io/node-problem-detector/node-problem-detector:v1.35.1c380751accc5
p11-kit@0.24.1-2
no fix listed
1
registry.k8s.io/sig-storage/local-volume-provisioner:v2.8.03e2bf2eaef9f
p11-kit@0.24.1-2
no fix listed
1
registry.k8s.io/sig-storage/local-volume-provisioner:v2.9.0f9d65db8bda2
p11-kit@0.24.1-2
no fix listed
1
registry.k8s.io/sig-storage/nfsplugin:v4.13.41eb5a85180a4
p11-kit@0.24.1-2
no fix listed
1
registry.k8s.io/sig-storage/nfsplugin:v4.11.0ce5b5ccd5eb0
p11-kit@0.24.1-2
no fix listed
1

syft 1.42.1 · advisories as of 19 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.