CVE-2026-1519

High

Advisory

Published 25 Mar 2026In the index since 5 Sept 2026

Severity: High; worst across findings
CVSS: 7.5; base score, highest
EPSS: 0.016; 74th percentile
CISA KEV: Not listed; no confirmed exploitation
Charts affected: 152; of 17,781 indexed, latest versions
Container images: 126; deployed by those charts
Fix available: 4 of 6; affected packages

Red Hat Security Advisory: bind security update

Carried by container images the latest versions of 152 of 17,781 indexed charts deploy, on 126 images.

Affected package	Affected versions	Fixed in	Images
bind9deb	1:9.10.3.dfsg.P4-8ubuntu1.6, 1:9.10.3.dfsg.P4-8ubuntu1.9, 1:9.10.3.dfsg.P4-8ubuntu1.10, 1:9.10.3.dfsg.P4-8ubuntu1.11+40 more	1:9.18.39-0ubuntu0.22.04.3, 1:9.18.39-0ubuntu0.24.04.3, 1:9.18.47-1~deb12u1, 1:9.20.11-1ubuntu2.2+1 more	98
bindrpm	32:9.11.13-6.el8_2.4, 32:9.11.26-4.el8_4, 32:9.11.26-4.el8_4.1, 32:9.11.36-3.el8_6.5+8 more	2:9.11.36-16.el8_10.7, 32:9.11.26-4.el8_4.9, 32:9.11.36-3.el8_6.12, 32:9.11.36-8.el8_8.9+3 more	15
bindapk	9.18.33-r0, 9.18.35-r0, 9.18.37-r0, 9.18.39-r0+5 more	9.18.47-r0, 9.20.21-r0	11
bind9.18rpm	32:9.18.29-5.el9_7.2	32:9.18.29-5.el9_7.4	1
bind9-libsdeb	1:9.11.19+dfsg-2.1ubuntu3	no fix listed	1
isc-dhcpdeb	4.3.5-3ubuntu7.1	no fix listed	1

OSV records: ALPINE-CVE-2026-1519 DEBIAN-CVE-2026-1519 RHSA-2026:15890 RHSA-2026:16060 RHSA-2026:16064 RHSA-2026:25214 RHSA-2026:7915 RHSA-2026:8075 RHSA-2026:8352 RLSA-2026:8352 UBUNTU-CVE-2026-1519
Also known as: DSA-6181-1, USN-8124-1

Charts affected

152 by stars

Chart

Latest

Affected images

Radar Score

lightstepupdater-lightstep-satellite

1.2.2

1 of 1 See more

lightstep updater-lightstep-satellite 1.2.2

1 of the 1 container images this version deploys carry CVE-2026-1519.

Container image	Digest	Package	Fixed in
lightstep/collector :2021-01-26_23-02-36Z	11c5569aaf3b	bind9@1:9.10.3.dfsg.P4-8ubuntu1.12	no fix listed

Open the chart page →

15,330

longhornwenerme

1.2.3

1 of 2 See more

longhorn wenerme 1.2.3

1 of the 2 container images this version deploys carry CVE-2026-1519.

Container image	Digest	Package	Fixed in
longhornio/longhorn-manager :v1.2.3	dca34321452c	bind9@1:9.16.1-0ubuntu2.9	no fix listed

Open the chart page →

15,230

Container images carrying it

126 by charts deploying them

A fixed version is listed for 4 of the 6 affected packages.

Container image	Digest	Package	Fixed in	Used by
oomk8s/readiness-check :2.0.2	875814cc853d	bind9@1:9.10.3.dfsg.P4-8ubuntu1.12	no fix listed	11
oomk8s/readiness-check :2.0.0	7daa08b81954	bind9@1:9.10.3.dfsg.P4-8ubuntu1.10	no fix listed	6
hyperledger/fabric-ca-tools :latest	4ce6f43ded2e	bind9@1:9.10.3.dfsg.P4-8ubuntu1.10	no fix listed	4
hyperledger/fabric-couchdb :0.4.15	f6c724592abf	bind9@1:9.10.3.dfsg.P4-8ubuntu1.12	no fix listed	4
omecproject/cdn-video-repo :1.0.0 :remote-v3	d59ccb138ffb	bind9@1:9.10.3.dfsg.P4-8ubuntu1.11	no fix listed	3
quay.io/devtron/argocd-cert-refresh :v10	2b6db27eaf3d	bind9@1:9.18.1-1ubuntu1.3	1:9.18.39-0ubuntu0.22.04.3	3
quay.io/openshift/origin-oauth-proxy :4.14	a7dff785d821	bind@32:9.11.36-3.el8_6.5	32:9.11.36-3.el8_6.12	3
gradiant/ueransim :3.2.6	015b30d5fa0f	bind9@1:9.18.30-0ubuntu0.22.04.1	1:9.18.39-0ubuntu0.22.04.3	2
kurento/kurento-media-server :latest	03c0d34d0828	bind9@1:9.18.39-0ubuntu0.24.04.2	1:9.18.39-0ubuntu0.24.04.3	2
lightstep/collector :2021-01-26_23-02-36Z	11c5569aaf3b	bind9@1:9.10.3.dfsg.P4-8ubuntu1.12	no fix listed	2
ngick8stesting/c3po-mmeinit :latest	1e764eab77b4	bind9@1:9.11.3+dfsg-1ubuntu1.1	no fix listed	2
omecproject/mcord-synchronizer :comac-1.0.0	cfdb566dd949	bind9@1:9.10.3.dfsg.P4-8ubuntu1.11	no fix listed	2
svtechnmaa/svtech_debuger :v1.0.0	b2987abe57d3	bind9@1:9.18.1-1ubuntu1.1	1:9.18.39-0ubuntu0.22.04.3	2
ghcr.io/linuxserver/openvpn-as :version-2.8.6-916f8e7d-ubuntu18	4ee0764310e7	bind9@1:9.11.3+dfsg-1ubuntu1.13 isc-dhcp@4.3.5-3ubuntu7.1	no fix listed no fix listed	2
quay.io/openshift/origin-cli :4.7	464a3af4dfe0	bind@32:9.11.26-4.el8_4.1	32:9.11.26-4.el8_4.9	2
quay.io/openshift/origin-cli :4.8	bb5e052770e5	bind@32:9.11.26-4.el8_4.1	32:9.11.26-4.el8_4.9	2
andrianrf/backoffice :latest	047a7837651e	bind@32:9.11.36-14.el8_10	32:9.11.36-16.el8_10.7	1
apachepulsar/pulsar :3.1.0	16f9fdab3fa6	bind9@1:9.18.12-0ubuntu0.22.04.2	1:9.18.39-0ubuntu0.22.04.3	1
apachepulsar/pulsar :2.10.0	3b262ab7a7d9	bind9@1:9.16.1-0ubuntu2.9	no fix listed	1
apachepulsar/pulsar :3.0.7	9c9947de139d	bind9@1:9.18.28-0ubuntu0.22.04.1	1:9.18.39-0ubuntu0.22.04.3	1
apachepulsar/pulsar :2.9.0	d056c89b7131	bind9@1:9.16.1-0ubuntu2.9	no fix listed	1
apachepulsar/pulsar :2.8.2	d538416d5afe	bind9@1:9.16.1-0ubuntu2.9	no fix listed	1
arunvelsriram/utils :latest	655ad18fd8d6	bind9@1:9.18.30-0ubuntu0.24.04.2	1:9.18.39-0ubuntu0.24.04.3	1
bloxstaking/ssv-node :v2.2.0	bf6d7d2fdc93	bind9@1:9.18.33-1~deb12u2	1:9.18.47-1~deb12u1	1
boky/postfix :5.1.0	aafc77238423	bind9@1:9.20.15-1~deb13u1	1:9.20.21-1~deb13u1	1
checkmk/check-mk-community :2.5.0p6	c11b422210c4	bind9@1:9.18.39-0ubuntu0.22.04.4	no fix listed	1
codetogether/codetogether :latest	4348c8a38752	bind@32:9.16.23-18.el9_4.1	32:9.16.23-18.el9_4.11	1
datamate/seafile-professional :11.0.20	2dd66b722464	bind9@1:9.18.30-0ubuntu0.22.04.2	1:9.18.39-0ubuntu0.22.04.3	1
dragonflyoss/client :v0.1.82	edf3e921f4e0	bind9@1:9.18.24-1	1:9.18.47-1~deb12u1	1
ethereumex/eth-stats-dashboard :v0.0.1	a7603aa8df4c	bind9@1:9.10.3.dfsg.P4-8ubuntu1.9	no fix listed	1
fiware/biz-ecosystem-charging-backend :11.7.0	29456835bb2c	bind9@1:9.18.30-0ubuntu0.20.04.2	no fix listed	1
fluent/fluent-bit :4.0-debug	e76397ef3983	bind9@1:9.18.41-1~deb12u1	1:9.18.47-1~deb12u1	1
gethue/hue :4.11.0	11b649636e68	bind9@1:9.16.1-0ubuntu2.11	no fix listed	1
gethue/hue :latest	7d5c1b9f8a79	bind9@1:9.18.30-0ubuntu0.22.04.2	1:9.18.39-0ubuntu0.22.04.3	1
gridgain/gridgain9 :9.1.18	95018390077b	bind@9.20.18-r0	9.20.21-r0	1
haugene/transmission-openvpn :4.0	059216cfae4b	bind9@1:9.16.1-0ubuntu2.8	no fix listed	1
hyperledger/fabric-couchdb :0.4.10	c65891b6c237	bind9@1:9.10.3.dfsg.P4-8ubuntu1.10	no fix listed	1
ibmcom/icp-swift-sample :latest	b5d8c6714dbc	bind9@1:9.10.3.dfsg.P4-8ubuntu1.10	no fix listed	1
ibmcom/microclimate-theia :latest	e17bdccc5030	bind9@1:9.10.3.dfsg.P4-8ubuntu1.9	no fix listed	1
ixsystems/truecommand :3.2.0	19c218455cd2	bind9@1:9.20.11-4	1:9.20.21-1~deb13u1	1
jupyterhub/k8s-hub :0.11.1	b6b4a1a34bf0	bind9@1:9.16.1-0ubuntu2.4	no fix listed	1
jupyterhub/k8s-hub :1.2.0	e4770285aaf7	bind9@1:9.16.1-0ubuntu2.9	no fix listed	1
jupyterhub/k8s-singleuser-sample :0.11.1	e3e6f3051df8	bind9@1:9.16.1-0ubuntu2.4	no fix listed	1
kubeoperator/webkubectl :v2.4.0	be8f0d624640	bind9@1:9.11.3+dfsg-1ubuntu1.12	no fix listed	1
kubeovn/kube-ovn :v1.14.0	6722b54eb5c0	bind9@1:9.18.30-0ubuntu0.24.04.2	1:9.18.39-0ubuntu0.24.04.3	1
linuxserver/smokeping :2.8.2	b7f906899cd3	bind@9.18.37-r0	9.18.47-r0	1
longhornio/longhorn-manager :v1.2.3	dca34321452c	bind9@1:9.16.1-0ubuntu2.9	no fix listed	1
longhornio/longhorn-manager :v1.1.1	ede61fe2a472	bind9@1:9.11.3+dfsg-1ubuntu1.14	no fix listed	1
mariadb/maxscale :23.02.2	56c5e0908148	bind@32:9.11.36-8.el8	2:9.11.36-16.el8_10.7	1
mathnao/certs :2.1.3	b900e6b64684	bind@9.18.39-r0	9.18.47-r0	1