StackRadar

CVE-2026-15176

Critical

Advisory

Published 14 Oct 2026In the index since 15 Oct 2026
Severity
Critical
worst across findings
CVSS
9.2
base score, highest
EPSS
0.005
43rd percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
224
of 18,137 indexed, latest versions
Container images
92
deployed by those charts
Fix available
None
affected package

The matching OSV records carry no description.

Carried by container images the latest versions of 224 of 18,137 indexed charts deploy, on 92 images.

Affected packageAffected versionsFixed inImages
nginxdeb1.22.1-9, 1.22.1-9+deb12u2, 1.22.1-9+deb12u3, 1.22.1-9+deb12u10+32 moreno fix listed92
OSV records
DEBIAN-CVE-2026-15176

Charts affected

224 by stars
ChartLatestAffected imagesRadar Score
substra-frontendsubstraVerified publisher1.2.31 of 1See more

substra-frontend substra 1.2.3

1 of the 1 container images this version deploys carry CVE-2026-15176.

Container imageDigestPackageFixed in
ghcr.io/substra/substra-frontend:1.0.0e230e6ac0722
nginx@1.25.4-1~bookworm
no fix listed

Open the chart page →

3,278
nginx-chartsuin-nginx0.1.01 of 1See more

nginx-chart suin-nginx 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-15176.

Container imageDigestPackageFixed in
library/nginx:latestf9ea18bfa4fa
nginx@1.31.6-1~trixie
no fix listed

Open the chart page →

1,815
app-startersynkubeVerified publisher1.4.11 of 1See more

app-starter synkube 1.4.1

1 of the 1 container images this version deploys carry CVE-2026-15176.

Container imageDigestPackageFixed in
library/nginx:latest6e23479198b9
nginx@1.29.8-1~trixie
no fix listed

Open the chart page →

3,888
nginx-charttaeseon-nginx0.1.01 of 1See more

nginx-chart taeseon-nginx 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-15176.

Container imageDigestPackageFixed in
library/nginx:latestf9ea18bfa4fa
nginx@1.31.6-1~trixie
no fix listed

Open the chart page →

1,815
repmanteam-blueVerified publisher0.3.01 of 5See more

repman team-blue 0.3.0

1 of the 5 container images this version deploys carry CVE-2026-15176.

Container imageDigestPackageFixed in
nginxinc/nginx-unprivileged:stabled715f7a85cdf
nginx@1.30.5-1~trixie
no fix listed

Open the chart page →

4,111
super-mariotechpreta0.1.11 of 1See more

super-mario techpreta 0.1.1

1 of the 1 container images this version deploys carry CVE-2026-15176.

Container imageDigestPackageFixed in
nirmalnaveen/supermario:latest8541a39162f3
nginx@1.25.3-1~bookworm
no fix listed

Open the chart page →

6,799
functionstest-helm-chart-hoanganht1k27Verified publisher0.1.11 of 1See more

functions test-helm-chart-hoanganht1k27 0.1.1

1 of the 1 container images this version deploys carry CVE-2026-15176.

Container imageDigestPackageFixed in
library/nginx:latestabe47724e466
nginx@1.31.6-1~trixie
no fix listed

Open the chart page →

2,014
myfirstcharttest-helm-charts0.2.01 of 1See more

myfirstchart test-helm-charts 0.2.0

1 of the 1 container images this version deploys carry CVE-2026-15176.

Container imageDigestPackageFixed in
library/nginx:latestf9ea18bfa4fa
nginx@1.31.6-1~trixie
no fix listed

Open the chart page →

1,815
chatqnatest-opea1.0.01 of 11See more

chatqna test-opea 1.0.0

1 of the 11 container images this version deploys carry CVE-2026-15176.

Container imageDigestPackageFixed in
library/nginx:1.27.1287ff321f9e3
nginx@1.27.1-1~bookworm
no fix listed

Open the chart page →

43,058
codegentest-opea1.0.01 of 5See more

codegen test-opea 1.0.0

1 of the 5 container images this version deploys carry CVE-2026-15176.

Container imageDigestPackageFixed in
library/nginx:1.27.1287ff321f9e3
nginx@1.27.1-1~bookworm
no fix listed

Open the chart page →

32,442
codetranstest-opea1.0.01 of 5See more

codetrans test-opea 1.0.0

1 of the 5 container images this version deploys carry CVE-2026-15176.

Container imageDigestPackageFixed in
library/nginx:1.27.1287ff321f9e3
nginx@1.27.1-1~bookworm
no fix listed

Open the chart page →

31,936
docsumtest-opea1.0.01 of 5See more

docsum test-opea 1.0.0

1 of the 5 container images this version deploys carry CVE-2026-15176.

Container imageDigestPackageFixed in
library/nginx:1.27.1287ff321f9e3
nginx@1.27.1-1~bookworm
no fix listed

Open the chart page →

32,439
voyagertibuntu1.2.01 of 1See more

voyager tibuntu 1.2.0

1 of the 1 container images this version deploys carry CVE-2026-15176.

Container imageDigestPackageFixed in
ghcr.io/aeharding/voyager:latest8e9d9ed499e3
nginx@1.31.5-1~trixie
no fix listed

Open the chart page →

2,418
test0tohlejezkouska0.1.01 of 2See more

test0 tohlejezkouska 0.1.0

1 of the 2 container images this version deploys carry CVE-2026-15176.

Container imageDigestPackageFixed in
library/nginx:latestf9ea18bfa4fa
nginx@1.31.6-1~trixie
no fix listed

Open the chart page →

3,284
pr-previewtrainyard-pr-previewVerified publisher1.1.11 of 1See more

pr-preview trainyard-pr-preview 1.1.1

1 of the 1 container images this version deploys carry CVE-2026-15176.

Container imageDigestPackageFixed in
library/nginx:latestf9ea18bfa4fa
nginx@1.31.6-1~trixie
no fix listed

Open the chart page →

1,815
applicationuniversal-helm-chartVerified publisher0.4.51 of 1See more

application universal-helm-chart 0.4.5

1 of the 1 container images this version deploys carry CVE-2026-15176.

Container imageDigestPackageFixed in
library/nginx:latestf9ea18bfa4fa
nginx@1.31.6-1~trixie
no fix listed

Open the chart page →

1,815
unlaunla0.10.01 of 3See more

unla unla 0.10.0

1 of the 3 container images this version deploys carry CVE-2026-15176.

Container imageDigestPackageFixed in
ghcr.io/amoylab/unla/web:latesteac1df1c5e66
nginx@1.27.5-1~bookworm
no fix listed

Open the chart page →

11,093
opencloudunxwaresVerified publisher0.2.36 of 13See more

opencloud unxwares 0.2.3

6 of the 13 container images this version deploys carry CVE-2026-15176.

Container imageDigestPackageFixed in
opencloudeu/web-extensions:unzip-1.0.01691ad6612a3
nginx@1.27.4-1~bookworm
no fix listed
opencloudeu/web-extensions:draw-io-1.0.027cb9b952f0d
nginx@1.27.4-1~bookworm
no fix listed
opencloudeu/web-extensions:external-sites-1.0.05b176baa3694
nginx@1.27.4-1~bookworm
no fix listed
opencloudeu/web-extensions:importer-1.0.06e8b2df6c5a4
nginx@1.27.4-1~bookworm
no fix listed
opencloudeu/web-extensions:progress-bars-1.0.082f888a34440
nginx@1.27.4-1~bookworm
no fix listed
opencloudeu/web-extensions:json-viewer-1.0.0e0ac35a9576e
nginx@1.27.4-1~bookworm
no fix listed

Open the chart page →

49,338
argus-test-envvk-helm-charts2.0.01 of 1See more

argus-test-env vk-helm-charts 2.0.0

1 of the 1 container images this version deploys carry CVE-2026-15176.

Container imageDigestPackageFixed in
library/nginx:latestf9ea18bfa4fa
nginx@1.31.6-1~trixie
no fix listed

Open the chart page →

1,815
sirenwateim1.0.21 of 1See more

siren wateim 1.0.2

1 of the 1 container images this version deploys carry CVE-2026-15176.

Container imageDigestPackageFixed in
sigp/siren:v3.0.42c219b04758e
nginx@1.22.1-9+deb12u2
no fix listed

Open the chart page →

6,569
tabbyxdVerified publisher1.0.61 of 2See more

tabby xd 1.0.6

1 of the 2 container images this version deploys carry CVE-2026-15176.

Container imageDigestPackageFixed in
library/nginx:1.25a484819eb602
nginx@1.25.5-1~bookworm
no fix listed

Open the chart page →

8,888
nginx-chartxxoznge-nginx0.1.01 of 1See more

nginx-chart xxoznge-nginx 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-15176.

Container imageDigestPackageFixed in
library/nginx:latestf9ea18bfa4fa
nginx@1.31.6-1~trixie
no fix listed

Open the chart page →

1,815
my-nginx-appyasser-nginx-app0.1.01 of 1See more

my-nginx-app yasser-nginx-app 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-15176.

Container imageDigestPackageFixed in
library/nginx:stable9bf97bd7714f
nginx@1.30.5-1~trixie
no fix listed

Open the chart page →

1,815
NEW_APPzekker6Verified publisher0.0.01 of 1See more

NEW_APP zekker6 0.0.0

1 of the 1 container images this version deploys carry CVE-2026-15176.

Container imageDigestPackageFixed in
library/nginx:latestf9ea18bfa4fa
nginx@1.31.6-1~trixie
no fix listed

Open the chart page →

1,815

Container images carrying it

92 by charts deploying them

A fixed version is listed for 0 of the 1 affected package.

Container imageDigestPackageFixed inUsed by
moreillon/user-manager-front:v5.1.06597e6b98d21
nginx@1.27.0-2~bookworm
no fix listed
1
nginxinc/nginx-unprivileged:1.29.5c5b989ebc150
nginx@1.29.5-1~trixie
no fix listed
1
nginxinc/nginx-unprivileged:latestce1317316e27
nginx@1.31.6-1~trixie
no fix listed
1
nginx/nginx-ingress:edge9b13f0b831ab
nginx@1.31.6-1~trixie
no fix listed
1
nginx/nginx-ingress:5.7.0c603a5cbac85
nginx@1.31.7-1~trixie
no fix listed
1
nirmalnaveen/supermario:latest8541a39162f3
nginx@1.25.3-1~bookworm
no fix listed
1
passbolt/passbolt:5.16.0-1-ce1768916a04b1
nginx@1.26.3-3+deb13u9
no fix listed
1
pk910/powfaucet:v2-stable3dcae6a62896
nginx@1.27.5-1~bookworm
no fix listed
1
polyaxon/polyaxon-api:2.17.0163707082036
nginx@1.26.3-3+deb13u9
no fix listed
1
polyaxon/polyaxon-streams:2.17.0a5fec70e757b
nginx@1.26.3-3+deb13u9
no fix listed
1
praravind1801/helmimages:3.0.0f29d637b9ce1
nginx@1.25.3-1~bookworm
no fix listed
1
pretix/standalone:2026.7.05df3b7aa852e
nginx@1.26.3-3+deb13u7
no fix listed
1
reallibrephotos/librephotos-proxy:1.2.1111203b9551a
nginx@1.30.5-1~trixie
no fix listed
1
redimp/otterwiki:21435c8cc536d
nginx@1.22.1-9+deb12u10
no fix listed
1
rocketadmin/rocketadmin:1.23.70bd1abb0bfd1
nginx@1.22.1-9+deb12u10
no fix listed
1
serversideup/php:8.5-fpm-nginx8f8c2f010ac5
nginx@1.30.4-1~trixie
no fix listed
1
shamimkuet/nginx:1.0.2b82902a76a04
nginx@1.27.0-2~bookworm
no fix listed
1
sigp/siren:v3.0.42c219b04758e
nginx@1.22.1-9+deb12u2
no fix listed
1
somnathmore/custom-nginx:v2bdfc06cad4ec
nginx@1.27.0-2~bookworm
no fix listed
1
tinymediamanager/tinymediamanager:5.3.448c15784a127
nginx@1.26.3-3+deb13u2
no fix listed
1
wiktorn/overpass-api:latest9bb5f4a9b54c
nginx@1.29.1-1~bookworm
no fix listed
1
yetiplatform/yeti-frontend:2.9.0873ef15d267b
nginx@1.31.4-1~trixie
no fix listed
1
yetiplatform/yeti-frontend:latestd602b1969a64
nginx@1.31.6-1~trixie
no fix listed
1
ghcr.io/aeharding/voyager:latest8e9d9ed499e3
nginx@1.31.5-1~trixie
no fix listed
1
ghcr.io/amoylab/unla/web:latesteac1df1c5e66
nginx@1.27.5-1~bookworm
no fix listed
1
ghcr.io/beslovas/duckdb-ui:1.3.272f35584026d
nginx@1.22.1-9+deb12u3
no fix listed
1
ghcr.io/cjmalloy/jasper-ui:v1.3.623246dc2160efe
nginx@1.31.3-1~trixie
no fix listed
1
ghcr.io/ente/web:5ab0c5b4c7a89c4e470ef6f793600da33cebf35d3f4864eb7f11
nginx@1.31.3-1~trixie
no fix listed
1
ghcr.io/iisas/domino-frontend:k8s8e53861be292
nginx@1.29.1-1~bookworm
no fix listed
1
ghcr.io/mcwarman/backstage-sample-app/app:mainfae3c1f04311
nginx@1.29.4-1~trixie
no fix listed
1
ghcr.io/opencatalogi/web-app:deva1a7f507f6ae
nginx@1.27.1-1~bookworm
no fix listed
1
ghcr.io/open-telemetry/demo:1.12.0-imageprovider4e322858fe56
nginx@1.27.0-2~bookworm
no fix listed
1
ghcr.io/rss-bridge/rss-bridge:latest8e84691e08d2
nginx@1.22.1-9+deb12u10
no fix listed
1
ghcr.io/sdr-enthusiasts/docker-flightradar24:latestb0b6b96adaa3
nginx@1.26.3-3+deb13u9
no fix listed
1
ghcr.io/seanmorley15/adventurelog-backend:v0.13.00250d9cb0d74
nginx@1.26.3-3+deb13u7
no fix listed
1
ghcr.io/substra/substra-frontend:1.0.0e230e6ac0722
nginx@1.25.4-1~bookworm
no fix listed
1
ghcr.io/wizarrrr/wizarr:4.2.0-beta.3d19d886d5090
nginx@1.22.1-9
no fix listed
1
ghcr.io/zammad/zammad:7.2.2-0003c3c1f2df6881
nginx@1.26.3-3+deb13u9
no fix listed
1
public.ecr.aws/jtekt-corporation/api-key-manager-gui:v0.1.10424fa47fbeb
nginx@1.31.6-1~trixie
no fix listed
1
public.ecr.aws/jtekt-corporation/image-storage-service-gui:v1.9.434823c8abe00
nginx@1.27.2-1~bookworm
no fix listed
1
public.ecr.aws/jtekt-corporation/shinsei-manager-front:v1.5.5f8fb4eea4071
nginx@1.25.3-1~bookworm
no fix listed
1
registry.gitlab.com/enbuild-staging/vivsoft-platform-ui/enbuild-frontend:1.0.3166353ce9bf98
nginx@1.29.7-1~trixie
no fix listed
1

syft 1.42.1 · advisories as of 15 Oct 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.