CVE-2026-1519

High

Advisory

Published 25 Mar 2026In the index since 5 Sept 2026

Severity: High; worst across findings
CVSS: 7.5; base score, highest
EPSS: 0.016; 74th percentile
CISA KEV: Not listed; no confirmed exploitation
Charts affected: 152; of 17,781 indexed, latest versions
Container images: 126; deployed by those charts
Fix available: 4 of 6; affected packages

Red Hat Security Advisory: bind security update

Carried by container images the latest versions of 152 of 17,781 indexed charts deploy, on 126 images.

Affected package	Affected versions	Fixed in	Images
bind9deb	1:9.10.3.dfsg.P4-8ubuntu1.6, 1:9.10.3.dfsg.P4-8ubuntu1.9, 1:9.10.3.dfsg.P4-8ubuntu1.10, 1:9.10.3.dfsg.P4-8ubuntu1.11+40 more	1:9.18.39-0ubuntu0.22.04.3, 1:9.18.39-0ubuntu0.24.04.3, 1:9.18.47-1~deb12u1, 1:9.20.11-1ubuntu2.2+1 more	98
bindrpm	32:9.11.13-6.el8_2.4, 32:9.11.26-4.el8_4, 32:9.11.26-4.el8_4.1, 32:9.11.36-3.el8_6.5+8 more	2:9.11.36-16.el8_10.7, 32:9.11.26-4.el8_4.9, 32:9.11.36-3.el8_6.12, 32:9.11.36-8.el8_8.9+3 more	15
bindapk	9.18.33-r0, 9.18.35-r0, 9.18.37-r0, 9.18.39-r0+5 more	9.18.47-r0, 9.20.21-r0	11
bind9.18rpm	32:9.18.29-5.el9_7.2	32:9.18.29-5.el9_7.4	1
bind9-libsdeb	1:9.11.19+dfsg-2.1ubuntu3	no fix listed	1
isc-dhcpdeb	4.3.5-3ubuntu7.1	no fix listed	1

OSV records: ALPINE-CVE-2026-1519 DEBIAN-CVE-2026-1519 RHSA-2026:15890 RHSA-2026:16060 RHSA-2026:16064 RHSA-2026:25214 RHSA-2026:7915 RHSA-2026:8075 RHSA-2026:8352 RLSA-2026:8352 UBUNTU-CVE-2026-1519
Also known as: DSA-6181-1, USN-8124-1

Charts affected

152 by stars

Chart

Latest

Affected images

Radar Score

lightstepupdater-lightstep-satellite

1.2.2

1 of 1 See more

lightstep updater-lightstep-satellite 1.2.2

1 of the 1 container images this version deploys carry CVE-2026-1519.

Container image	Digest	Package	Fixed in
lightstep/collector :2021-01-26_23-02-36Z	11c5569aaf3b	bind9@1:9.10.3.dfsg.P4-8ubuntu1.12	no fix listed

Open the chart page →

15,330

longhornwenerme

1.2.3

1 of 2 See more

longhorn wenerme 1.2.3

1 of the 2 container images this version deploys carry CVE-2026-1519.

Container image	Digest	Package	Fixed in
longhornio/longhorn-manager :v1.2.3	dca34321452c	bind9@1:9.16.1-0ubuntu2.9	no fix listed

Open the chart page →

15,230

Container images carrying it

126 by charts deploying them

A fixed version is listed for 4 of the 6 affected packages.

Container image	Digest	Package	Fixed in	Used by
ghcr.io/k8s-at-home/jackett :v0.20.1316	3a4715b46aa2	bind9@1:9.16.1-0ubuntu2.10	no fix listed	1
ghcr.io/k8s-at-home/lidarr :v1.0.0.2255	54ebc1f90963	bind9@1:9.16.1-0ubuntu2.8	no fix listed	1
ghcr.io/k8s-at-home/nzbget :v21.1	e5571acd10ce	bind9@1:9.18.1-1ubuntu1.1	1:9.18.39-0ubuntu0.22.04.3	1
ghcr.io/k8s-at-home/plex :v1.28.0.5999-97678ded3	ef756c7d784b	bind9@1:9.16.1-0ubuntu2.10	no fix listed	1
ghcr.io/k8s-at-home/prowlarr :v0.3.0.1710	c863aa9875fa	bind9@1:9.16.1-0ubuntu2.10	no fix listed	1
ghcr.io/k8s-at-home/qbittorrent :v4.4.2	61deadd1ec78	bind9@1:9.16.1-0ubuntu2.10	no fix listed	1
ghcr.io/k8s-at-home/radarr :v4.1.0.6175	4273dfaf0295	bind9@1:9.18.1-1ubuntu1.1	1:9.18.39-0ubuntu0.22.04.3	1
ghcr.io/k8s-at-home/sonarr :v3.0.8.1507	0eb230e2381a	bind9@1:9.18.1-1ubuntu1.1	1:9.18.39-0ubuntu0.22.04.3	1
ghcr.io/k8s-at-home/tautulli :v2.7.7	4ea617c30397	bind9@1:9.16.1-0ubuntu2.8	no fix listed	1
ghcr.io/k8s-at-home/transmission :v3.00	6011182e3946	bind9@1:9.16.1-0ubuntu2.10	no fix listed	1
ghcr.io/k8s-at-home/xteve :v2.2.0.200	292b3614670f	bind9@1:9.16.1-0ubuntu2.10	no fix listed	1
ghcr.io/k8s-home-lab/wireguard :v1.0.20210914	779858b5e11d	bind9@1:9.16.1-0ubuntu2.15	no fix listed	1
ghcr.io/kore3lab/kore-board.terminal :v0.5.5	f52e66eff50b	bind9@1:9.11.3+dfsg-1ubuntu1.18	no fix listed	1
ghcr.io/kubeflow/spark-operator/controller :2.2.1	865ff4da5686	bind9@1:9.18.30-0ubuntu0.20.04.2	no fix listed	1
ghcr.io/oznu/homebridge :2022-07-08	ff2af53897e7	bind9@1:9.16.1-0ubuntu2.10	no fix listed	1
ghcr.io/pixelfederation/unbound :1.24.2_0	fce820a03964	bind@9.20.20-r0	9.20.21-r0	1
ghcr.io/voxpupuli/container-puppetdb :7.18.0-v1.5.0	a56dfe91f5b1	bind9@1:9.18.18-0ubuntu0.22.04.2	1:9.18.39-0ubuntu0.22.04.3	1
public.ecr.aws/perfectscale-io/kube-state-metrics :4.1.14-redhat	849e235e2d3e	bind@32:9.11.36-16.el8_10.2	32:9.11.36-16.el8_10.7	1
quay.io/cloudnativetoolkit/cloud-pak-deployer :latest	13aaae779248	bind@32:9.11.36-8.el8_8.1	32:9.11.36-8.el8_8.9	1
quay.io/eformat/jenkins-agent-graalvm :latest	a3b9a07648b6	bind@32:9.11.26-4.el8_4	32:9.11.26-4.el8_4.9	1
quay.io/maximilianopizarro/neuralbank-frontend :latest	5f4572ef6d6f	bind9.18@32:9.18.29-5.el9_7.2	32:9.18.29-5.el9_7.4	1
quay.io/maximilianopizarro/nfl-wallet-webapp :1.0.1	3fead5702be7	bind@32:9.11.36-16.el8_10.6	32:9.11.36-16.el8_10.7	1
quay.io/openshift/origin-cli :4.6	6722d5041b47	bind@32:9.11.13-6.el8_2.4	32:9.11.36-16.el8_10.7	1
quay.io/openshift/origin-jenkins-agent-base :latest	c241c971aef8	bind@32:9.11.36-3.el8_6.5	32:9.11.36-3.el8_6.12	1
quay.io/opsmxpublic/spin-sample-pipeline :v1.0.1	c6a934439421	bind9@1:9.10.3.dfsg.P4-8ubuntu1.18	no fix listed	1
quay.io/rht-labs/stack-do500 :3.0.8	6ba82beff18e	bind@32:9.11.26-4.el8_4	32:9.11.26-4.el8_4.9	1