StackRadar

CVE-2026-15308

High

Advisory

Published 9 Jul 2026In the index since 5 Sept 2026
Severity
High
worst across findings
CVSS
8.7
base score, highest
EPSS
0.006
49th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
865
of 17,787 indexed, latest versions
Container images
896
deployed by those charts
Fix available
17 of 18
affected packages

Incremental HTMLParser feed() allows CPU-exhaustion DoS via repeated unterminated markup declarations

Carried by container images the latest versions of 865 of 17,787 indexed charts deploy, on 896 images.

Affected packageAffected versionsFixed inImages
python-3.14apk3.14.2-r2, 3.14.4-r2, 3.14.6-r03.14.6-r46
pythonbitnami3.11.11-0, 3.12.8-0, 3.13.5-13.10.213
python-3.13apk3.13.7-r0, 3.13.10-r0, 3.13.12-r23.13.14-r33
python-3.12apk3.12.0-r1, 3.12.9-r13.12.14-r22
python3.11deb3.11.0~rc1-1~22.04, 3.11.0~rc1-1~22.04.1, 3.11.2-6, 3.11.2-6+deb12u2+6 more3.11.0~rc1-1~22.04.1+esm2180
python3rpm3.6.8-15.1.el8, 3.6.8-23.el8, 3.6.8-24.el8_2, 3.6.8-24.el8_2.2+28 more0:3.6.8-77.el8_10, 0:3.6.8-77.el8_10.rocky.0, 3.12.14-1136
python3.8deb3.8.5-1~20.04, 3.8.5-1~20.04.2, 3.8.5-1~20.04.3, 3.8.10-0ubuntu1~20.04+11 more3.8.10-0ubuntu1~20.04.18+esm7100
python3.12deb3.12.3-1, 3.12.3-1ubuntu0.2, 3.12.3-1ubuntu0.3, 3.12.3-1ubuntu0.4+10 more3.12.3-1ubuntu0.1785
python3.10deb3.10.4-3, 3.10.4-3ubuntu0.1, 3.10.6-1~22.04, 3.10.6-1~22.04.1+16 more3.10.12-1~22.04.1880
python3apk3.11.12-r1, 3.12.8-r1, 3.12.9-r0, 3.12.10-r0+7 more3.12.14-r0, 3.14.7-r075
python3.13deb3.13.5-2, 3.13.5-2+deb13u2, 3.13.5-2+deb13u4no fix listed73
python3.9rpm3.9.16-1.el9, 3.9.16-1.el9_2.1, 3.9.16-1.el9_2.2, 3.9.18-1.el9_3.1+15 more0:3.9.25-7.el9_8.255
python3.6deb3.6.6-1~18.04, 3.6.7-1~18.04, 3.6.9-1~18.04, 3.6.9-1~18.04ubuntu1+7 more3.6.9-1~18.04ubuntu1.13+esm1044
python2.7deb2.7.6-8, 2.7.6-8ubuntu0.4, 2.7.12-1ubuntu0~16.04.2, 2.7.12-1ubuntu0~16.04.3+9 more2.7.6-8ubuntu0.6+esm30, 2.7.12-1ubuntu0~16.04.18+esm22, 2.7.17-1~18.04ubuntu1.13+esm15, 2.7.18-13ubuntu1.5+esm943
python3.5deb3.5.2-2ubuntu0~16.04.1, 3.5.2-2ubuntu0~16.04.4, 3.5.2-2ubuntu0~16.04.5, 3.5.2-2ubuntu0~16.04.93.5.2-2ubuntu0~16.04.13+esm2525
python3.14deb3.14.4-1, 3.14.4-1ubuntu0.13.14.4-1ubuntu0.28
python3.4deb3.4.0-2ubuntu1, 3.4.3-1ubuntu1~14.04.5, 3.4.3-1ubuntu1~14.04.6, 3.4.3-1ubuntu1~14.04.73.4.3-1ubuntu1~14.04.7+esm217
python3.12rpm3.12.5-2.el9_5.20:3.12.13-3.el9_8.11
OSV records
ALPINE-CVE-2026-15308BIT-python-2026-15308CGA-2v5h-4pjx-m2vpCGA-7fq5-cfqp-92mfCGA-8wxj-3m53-wmwrDEBIAN-CVE-2026-15308RHSA-2026:39320RHSA-2026:39771RHSA-2026:39798RLSA-2026:39320RLSA-2026:39798UBUNTU-CVE-2026-15308AZL-92271
Also known as
BIT-libpython-2026-15308, BIT-python-min-2026-15308, CGA-qq9v-hh37-fr79, CGA-vh53-c7h5-695j, CGA-xm2p-hf9g-qw3m, PSF-2026-33, RHSA-2026:50064, RHSA-2026:50065, RHSA-2026:50816, USN-8744-1

Charts affected

865 by stars
ChartLatestAffected imagesRadar Score
nextcloudnextcloud9.2.61 of 1See more

nextcloud nextcloud 9.2.6

1 of the 1 container images this version deploys carry CVE-2026-15308.

Container imageDigestPackageFixed in
library/nextcloud:34.0.3-apacheb97df9e0e1ee
python3.13@3.13.5-2+deb13u4
no fix listed

Open the chart page →

4,507
metallbmetallbVerified publisher0.16.11 of 4See more

metallb metallb 0.16.1

1 of the 4 container images this version deploys carry CVE-2026-15308.

Container imageDigestPackageFixed in
quay.io/frrouting/frr:10.4.38745af1f9bbb
python3@3.12.12-r0
3.12.14-r0

Open the chart page →

2,127
argocd-image-updaterargoOfficialVerified publisher1.3.11 of 1See more

argocd-image-updater argo 1.3.1

1 of the 1 container images this version deploys carry CVE-2026-15308.

Container imageDigestPackageFixed in
quay.io/argoprojlabs/argocd-image-updater:v1.3.0cb009167015c
python3@3.14.5-r0
3.14.7-r0

Open the chart page →

718
uptime-kumauptime-kumaVerified publisher4.2.01 of 1See more

uptime-kuma uptime-kuma 4.2.0

1 of the 1 container images this version deploys carry CVE-2026-15308.

Container imageDigestPackageFixed in
louislam/uptime-kuma:2.5.0a8610b3b4c38
python3.11@3.11.2-6+deb12u7
no fix listed

Open the chart page →

30,159
airflowairflow-helmVerified publisher8.9.01 of 4See more

airflow airflow-helm 8.9.0

1 of the 4 container images this version deploys carry CVE-2026-15308.

Container imageDigestPackageFixed in
apache/airflow:2.8.4-python3.964e58748b6b9
python3.11@3.11.2-6
no fix listed

Open the chart page →

11,367
keycloakcodecentricVerified publisher18.10.01 of 3See more

keycloak codecentric 18.10.0

1 of the 3 container images this version deploys carry CVE-2026-15308.

Container imageDigestPackageFixed in
quay.io/keycloak/keycloak:17.0.1-legacy68f9f38c8f30
python3@3.6.8-41.el8
0:3.6.8-77.el8_10

Open the chart page →

7,713
jiraatlassian-data-centerVerified publisher2.0.151 of 2See more

jira atlassian-data-center 2.0.15

1 of the 2 container images this version deploys carry CVE-2026-15308.

Container imageDigestPackageFixed in
atlassian/jira-software:11.3.11e5548cd4eea8
python3.12@3.12.3-1ubuntu0.16
3.12.3-1ubuntu0.17

Open the chart page →

1,490
zabbixzabbix-communityVerified publisher7.1.01 of 5See more

zabbix zabbix-community 7.1.0

1 of the 5 container images this version deploys carry CVE-2026-15308.

Container imageDigestPackageFixed in
zabbix/zabbix-web-nginx-pgsql:ubuntu-7.0.237d4d58086515
python3.12@3.12.3-1ubuntu0.11
3.12.3-1ubuntu0.17

Open the chart page →

13,664
netdatanetdataVerified publisher3.7.1731 of 1See more

netdata netdata 3.7.173

1 of the 1 container images this version deploys carry CVE-2026-15308.

Container imageDigestPackageFixed in
netdata/netdata:v2.11.0c45c71eb23ff
python3.13@3.13.5-2+deb13u4
no fix listed

Open the chart page →

3,092
maildocker-postfixVerified publisher5.1.01 of 1See more

mail docker-postfix 5.1.0

1 of the 1 container images this version deploys carry CVE-2026-15308.

Container imageDigestPackageFixed in
boky/postfix:5.1.0aafc77238423
python3.13@3.13.5-2
no fix listed

Open the chart page →

5,366
csi-driver-nfscsi-driver-nfsVerified publisher4.13.41 of 6See more

csi-driver-nfs csi-driver-nfs 4.13.4

1 of the 6 container images this version deploys carry CVE-2026-15308.

Container imageDigestPackageFixed in
registry.k8s.io/sig-storage/nfsplugin:v4.13.41eb5a85180a4
python3.11@3.11.2-6+deb12u7
no fix listed

Open the chart page →

3,324
netboxbootcVerified publisher4.1.11 of 4See more

netbox bootc 4.1.1

1 of the 4 container images this version deploys carry CVE-2026-15308.

Container imageDigestPackageFixed in
netboxcommunity/netbox:v3.2.83d652dca5351
python3.10@3.10.4-3ubuntu0.1
3.10.12-1~22.04.18

Open the chart page →

9,145
milvusmilvus4.0.311 of 5See more

milvus milvus 4.0.31

1 of the 5 container images this version deploys carry CVE-2026-15308.

Container imageDigestPackageFixed in
apachepulsar/pulsar:2.8.2d538416d5afe
python3.8@3.8.10-0ubuntu1~20.04.2
3.8.10-0ubuntu1~20.04.18+esm7

Open the chart page →

32,259
clearmlallegroaiOfficialVerified publisher7.15.01 of 4See more

clearml allegroai 7.15.0

1 of the 4 container images this version deploys carry CVE-2026-15308.

Container imageDigestPackageFixed in
allegroai/clearml:2.0.0-613713ae38f7daf
python3.11@3.11.2-6+deb12u4
no fix listed

Open the chart page →

10,622
penpotpenpotOfficialVerified publisher1.9.01 of 4See more

penpot penpot 1.9.0

1 of the 4 container images this version deploys carry CVE-2026-15308.

Container imageDigestPackageFixed in
penpotapp/exporter:2.17.272a8061e8806
python3.14@3.14.4-1ubuntu0.1
3.14.4-1ubuntu0.2

Open the chart page →

4,314
semaphoresemaphoreuiOfficialVerified publisher16.2.21 of 1See more

semaphore semaphoreui 16.2.2

1 of the 1 container images this version deploys carry CVE-2026-15308.

Container imageDigestPackageFixed in
semaphoreui/semaphore:v2.18.3e9260bfa8255
python3@3.12.13-r0
3.12.14-r0

Open the chart page →

2,221
node-rednode-redVerified publisher0.40.21 of 1See more

node-red node-red 0.40.2

1 of the 1 container images this version deploys carry CVE-2026-15308.

Container imageDigestPackageFixed in
nodered/node-red:4.1.2216e7403aab9
python3@3.12.12-r0
3.12.14-r0

Open the chart page →

2,172
difydoubanVerified publisher0.10.01 of 6See more

dify douban 0.10.0

1 of the 6 container images this version deploys carry CVE-2026-15308.

Container imageDigestPackageFixed in
langgenius/dify-plugin-daemon:0.5.1-local8269050f192e
python3.12@3.12.3-1ubuntu0.9
3.12.3-1ubuntu0.17

Open the chart page →

19,391
dragonflydragonflyVerified publisher1.8.41 of 3See more

dragonfly dragonfly 1.8.4

1 of the 3 container images this version deploys carry CVE-2026-15308.

Container imageDigestPackageFixed in
dragonflyoss/client:v1.5.4a1b52779c4dd
python3.11@3.11.2-6+deb12u8
no fix listed

Open the chart page →

3,787
pulsarapache4.7.01 of 10See more

pulsar apache 4.7.0

1 of the 10 container images this version deploys carry CVE-2026-15308.

Container imageDigestPackageFixed in
alpine/k8s:1.32.12048f8d9c8cc7
python3@3.12.12-r0
3.14.7-r0

Open the chart page →

9,864
difydify-helmVerified publisher0.38.02 of 11See more

dify dify-helm 0.38.0

2 of the 11 container images this version deploys carry CVE-2026-15308.

Container imageDigestPackageFixed in
langgenius/dify-api:1.16.1dcefa5f7c47c
python3.11@3.11.2-6+deb12u8
no fix listed
langgenius/dify-plugin-daemon:0.6.3-local3c694329357b
python3.12@3.12.3-1ubuntu0.13
3.12.3-1ubuntu0.17

Open the chart page →

22,002
volsyncbackube-helm-chartsVerified publisher0.16.01 of 1See more

volsync backube-helm-charts 0.16.0

1 of the 1 container images this version deploys carry CVE-2026-15308.

Container imageDigestPackageFixed in
quay.io/backube/volsync:0.16.00d03a6aad575
python3.9@3.9.25-7.el9_8
0:3.9.25-7.el9_8.2

Open the chart page →

1,346
istiocloudposse1.1.02 of 8See more

istio cloudposse 1.1.0

2 of the 8 container images this version deploys carry CVE-2026-15308.

Container imageDigestPackageFixed in
gcr.io/istio-release/pilot:release-1.0-latest-daily5ea7b7f3632a
python3.5@3.5.2-2ubuntu0~16.04.5
3.5.2-2ubuntu0~16.04.13+esm25
gcr.io/istio-release/proxyv2:release-1.0-latest-daily8f9ff98fdbef
python3.5@3.5.2-2ubuntu0~16.04.5
3.5.2-2ubuntu0~16.04.13+esm25

Open the chart page →

23,964
oncallgrafana1.16.51 of 12See more

oncall grafana 1.16.5

1 of the 12 container images this version deploys carry CVE-2026-15308.

Container imageDigestPackageFixed in
grafana/oncall:v1.16.5499851658393
python3@3.12.11-r0
3.12.14-r0

Open the chart page →

16,251
openprojectopenproject-helm-chartsOfficialVerified publisher13.11.01 of 5See more

openproject openproject-helm-charts 13.11.0

1 of the 5 container images this version deploys carry CVE-2026-15308.

Container imageDigestPackageFixed in
openproject/hocuspocus:release-338001b288dc1359dfb5
python3.11@3.11.2-6+deb12u6
no fix listed

Open the chart page →

19,926
wazuhwazuh-helm-morgovedVerified publisher2.0.71 of 5See more

wazuh wazuh-helm-morgoved 2.0.7

1 of the 5 container images this version deploys carry CVE-2026-15308.

Container imageDigestPackageFixed in
kinseii/wazuh-agent:4.14.17160eb143728
python3.11@3.11.2-6+deb12u6
no fix listed

Open the chart page →

11,384
zabbixcetic3.1.31 of 5See more

zabbix cetic 3.1.3

1 of the 5 container images this version deploys carry CVE-2026-15308.

Container imageDigestPackageFixed in
zabbix/zabbix-web-nginx-pgsql:ubuntu-6.0.899e9a090b516
python3.10@3.10.4-3ubuntu0.1
3.10.12-1~22.04.18

Open the chart page →

33,725
csi-driver-smbcsi-driver-smbVerified publisher1.20.31 of 6See more

csi-driver-smb csi-driver-smb 1.20.3

1 of the 6 container images this version deploys carry CVE-2026-15308.

Container imageDigestPackageFixed in
registry.k8s.io/sig-storage/smbplugin:v1.20.3dc7746bb081e
python3.11@3.11.2-6+deb12u7
no fix listed

Open the chart page →

2,945
netbirdjaconiVerified publisher0.15.11 of 4See more

netbird jaconi 0.15.1

1 of the 4 container images this version deploys carry CVE-2026-15308.

Container imageDigestPackageFixed in
library/golang:latest512690a56605
python3.13@3.13.5-2+deb13u4
no fix listed

Open the chart page →

8,390
gotenbergmaikumoriVerified publisher1.25.01 of 1See more

gotenberg maikumori 1.25.0

1 of the 1 container images this version deploys carry CVE-2026-15308.

Container imageDigestPackageFixed in
gotenberg/gotenberg:8.36.087c16b9f3642
python3.13@3.13.5-2+deb13u4
no fix listed

Open the chart page →

9,683
oneuptimeoneuptimeOfficialVerified publisher13.0.41 of 7See more

oneuptime oneuptime 13.0.4

1 of the 7 container images this version deploys carry CVE-2026-15308.

Container imageDigestPackageFixed in
oneuptime/probe:release6b2d98713711
python3.11@3.11.2-6+deb12u8
no fix listed

Open the chart page →

11,192
openclawopenclaw-helmVerified publisher1.5.401 of 2See more

openclaw openclaw-helm 1.5.40

1 of the 2 container images this version deploys carry CVE-2026-15308.

Container imageDigestPackageFixed in
ghcr.io/openclaw/openclaw:2026.5.22dcfd14877740
python3.11@3.11.2-6+deb12u7
no fix listed

Open the chart page →

5,660
openvpn-asstenicVerified publisher0.1.91 of 1See more

openvpn-as stenic 0.1.9

1 of the 1 container images this version deploys carry CVE-2026-15308.

Container imageDigestPackageFixed in
ghcr.io/linuxserver/openvpn-as:version-2.8.6-916f8e7d-ubuntu184ee0764310e7
python2.7@2.7.17-1~18.04ubuntu1.2
2.7.17-1~18.04ubuntu1.13+esm15

Open the chart page →

15,592
milvusmilvus-helm5.0.281See more

milvus milvus-helm 5.0.28

1 container image this version deploys carries CVE-2026-15308.

Container imageDigestPackageFixed in
apachepulsar/pulsar:3.0.79c9947de139d
python3.10@3.10.12-1~22.04.6
3.10.12-1~22.04.18

Open the chart page →

—
snipeitt3n3.4.11 of 2See more

snipeit t3n 3.4.1

1 of the 2 container images this version deploys carry CVE-2026-15308.

Container imageDigestPackageFixed in
snipe/snipe-it:v6.0.1455fb7636a98c
python3.8@3.8.10-0ubuntu1~20.04.5
3.8.10-0ubuntu1~20.04.18+esm7

Open the chart page →

18,509
apicurio-registryapicurio-registry-helmVerified publisher3.8.01 of 2See more

apicurio-registry apicurio-registry-helm 3.8.0

1 of the 2 container images this version deploys carry CVE-2026-15308.

Container imageDigestPackageFixed in
quay.io/apicurio/apicurio-registry-mem:2.5.8.Final3b036692d546
python3@3.6.8-56.el8_9
0:3.6.8-77.el8_10

Open the chart page →

6,675
bitbucketatlassian-data-centerVerified publisher2.0.151 of 1See more

bitbucket atlassian-data-center 2.0.15

1 of the 1 container images this version deploys carry CVE-2026-15308.

Container imageDigestPackageFixed in
atlassian/bitbucket:10.2.705933f2b1cfd
python3.12@3.12.3-1ubuntu0.16
3.12.3-1ubuntu0.17

Open the chart page →

1,444
stackstorm-hastackstormVerified publisher1.1.011 of 17See more

stackstorm-ha stackstorm 1.1.0

11 of the 17 container images this version deploys carry CVE-2026-15308.

Container imageDigestPackageFixed in
stackstorm/st2actionrunner:3.888235ba70cad
python3.8@3.8.10-0ubuntu1~20.04.9
3.8.10-0ubuntu1~20.04.18+esm7
stackstorm/st2api:3.86f56d239d280
python3.8@3.8.10-0ubuntu1~20.04.9
3.8.10-0ubuntu1~20.04.18+esm7
stackstorm/st2auth:3.833ecfda16608
python3.8@3.8.10-0ubuntu1~20.04.9
3.8.10-0ubuntu1~20.04.18+esm7
stackstorm/st2garbagecollector:3.84e3f8c7ca52d
python3.8@3.8.10-0ubuntu1~20.04.9
3.8.10-0ubuntu1~20.04.18+esm7
stackstorm/st2notifier:3.8f190a6212195
python3.8@3.8.10-0ubuntu1~20.04.9
3.8.10-0ubuntu1~20.04.18+esm7
stackstorm/st2rulesengine:3.8259503496ff9
python3.8@3.8.10-0ubuntu1~20.04.9
3.8.10-0ubuntu1~20.04.18+esm7
stackstorm/st2scheduler:3.8b1de2055c362
python3.8@3.8.10-0ubuntu1~20.04.9
3.8.10-0ubuntu1~20.04.18+esm7
stackstorm/st2sensorcontainer:3.8b1a338f64773
python3.8@3.8.10-0ubuntu1~20.04.9
3.8.10-0ubuntu1~20.04.18+esm7
stackstorm/st2stream:3.81c8904a3bf67
python3.8@3.8.10-0ubuntu1~20.04.9
3.8.10-0ubuntu1~20.04.18+esm7
stackstorm/st2timersengine:3.81bf35bfaf00c
python3.8@3.8.10-0ubuntu1~20.04.9
3.8.10-0ubuntu1~20.04.18+esm7
stackstorm/st2workflowengine:3.819fdfffdbba8
python3.8@3.8.10-0ubuntu1~20.04.9
3.8.10-0ubuntu1~20.04.18+esm7

Open the chart page →

96,419
supabasetokens-studioVerified publisher1.0.01 of 14See more

supabase tokens-studio 1.0.0

1 of the 14 container images this version deploys carry CVE-2026-15308.

Container imageDigestPackageFixed in
supabase/studio:20241021-9f9b08326d8070c55e9
python3.11@3.11.2-6+deb12u3
no fix listed

Open the chart page →

23,123
polarisapache-polarisOfficialVerified publisher1.3.0-incubating1 of 1See more

polaris apache-polaris 1.3.0-incubating

1 of the 1 container images this version deploys carry CVE-2026-15308.

Container imageDigestPackageFixed in
apache/polaris:lateste66366e783f1
python3.9@3.9.25-7.el9_8
0:3.9.25-7.el9_8.2

Open the chart page →

455
renterdartur9010Verified publisher1.4.41 of 2See more

renterd artur9010 1.4.4

1 of the 2 container images this version deploys carry CVE-2026-15308.

Container imageDigestPackageFixed in
artur9010/wait-for:v1.0.06b4de3ce8b0e
python3.11@3.11.2-6
no fix listed

Open the chart page →

8,493
cassandrakubelauncherVerified publisher0.1.271 of 1See more

cassandra kubelauncher 0.1.27

1 of the 1 container images this version deploys carry CVE-2026-15308.

Container imageDigestPackageFixed in
ghcr.io/kubelauncher/cassandradigest-pinnedb66aba320083
python3.14@3.14.4-1ubuntu0.1
3.14.4-1ubuntu0.2

Open the chart page →

1,442
minecraft-proxyminecraft-server-chartsVerified publisher3.10.01 of 1See more

minecraft-proxy minecraft-server-charts 3.10.0

1 of the 1 container images this version deploys carry CVE-2026-15308.

Container imageDigestPackageFixed in
itzg/bungeecord:latest1c59f9631f3b
python3.14@3.14.4-1ubuntu0.1
3.14.4-1ubuntu0.2

Open the chart page →

3,074
transmission-openvpnutkuozdemirVerified publisher2.5.01 of 1See more

transmission-openvpn utkuozdemir 2.5.0

1 of the 1 container images this version deploys carry CVE-2026-15308.

Container imageDigestPackageFixed in
haugene/transmission-openvpn:4.0059216cfae4b
python3.8@3.8.10-0ubuntu1~20.04
3.8.10-0ubuntu1~20.04.18+esm7

Open the chart page →

11,405
dependabot-gitlabdependabot-gitlabVerified publisher6.3.01 of 3See more

dependabot-gitlab dependabot-gitlab 6.3.0

1 of the 3 container images this version deploys carry CVE-2026-15308.

Container imageDigestPackageFixed in
andrcuns/dependabot-gitlab:7.7.0-alpha.143060f159f4c
python3.12@3.12.3-1ubuntu0.15
3.12.3-1ubuntu0.17

Open the chart page →

4,556
devtron-operatordevtron0.23.31 of 11See more

devtron-operator devtron 0.23.3

1 of the 11 container images this version deploys carry CVE-2026-15308.

Container imageDigestPackageFixed in
quay.io/devtron/devtron-utils:dup-chart-repo-v1.1.095d6f0e05636
python3.11@3.11.2-6
no fix listed

Open the chart page →

32,902
nextcloudgroundhog2k0.22.51 of 3See more

nextcloud groundhog2k 0.22.5

1 of the 3 container images this version deploys carry CVE-2026-15308.

Container imageDigestPackageFixed in
library/nextcloud:34.0.3:34.0.3-apacheb97df9e0e1ee
python3.13@3.13.5-2+deb13u4
no fix listed

Open the chart page →

4,507
syftopenmined0.9.51 of 6See more

syft openmined 0.9.5

1 of the 6 container images this version deploys carry CVE-2026-15308.

Container imageDigestPackageFixed in
openmined/syft-backend:0.9.5b72f74a68b32
python-3.12@3.12.9-r1
3.12.14-r2

Open the chart page →

17,245
selenium3selenium31.2.41 of 1See more

selenium3 selenium3 1.2.4

1 of the 1 container images this version deploys carry CVE-2026-15308.

Container imageDigestPackageFixed in
selenium/hub:3.141.5902f251d48d5f
python3.8@3.8.10-0ubuntu1~20.04
3.8.10-0ubuntu1~20.04.18+esm7

Open the chart page →

11,782
zabbix-serveraekondratievVerified publisher1.0.61 of 4See more

zabbix-server aekondratiev 1.0.6

1 of the 4 container images this version deploys carry CVE-2026-15308.

Container imageDigestPackageFixed in
zabbix/zabbix-web-nginx-pgsql:ubuntu-5.4.601de79c31391
python3.8@3.8.10-0ubuntu1~20.04.1
3.8.10-0ubuntu1~20.04.18+esm7

Open the chart page →

30,668

Container images carrying it

896 by charts deploying them

A fixed version is listed for 17 of the 18 affected packages.

Container imageDigestPackageFixed inUsed by
openvino/model_server:2025.2.11e7cd1d70cc1
python3.12@3.12.3-1ubuntu0.7
3.12.3-1ubuntu0.17
1
openvpn/openvpn-as:latest2253c10ec652
python3.12@3.12.3-1ubuntu0.15
3.12.3-1ubuntu0.17
1
openwhisk/ow-utils:1.0.0c80dba0de3aa
python2.7@2.7.17-1~18.04ubuntu1.2
2.7.17-1~18.04ubuntu1.13+esm15
1
opsmx11/issuegen:v2.1.05c50ca123d88
python3.4@3.4.3-1ubuntu1~14.04.6
3.4.3-1ubuntu1~14.04.7+esm21
1
owncloud/server:10.15.051d9b74fc2a8
python3.8@3.8.10-0ubuntu1~20.04.11
3.8.10-0ubuntu1~20.04.18+esm7
1
owncloud/server:10.16.274c53d341076
python3.10@3.10.12-1~22.04.15
3.10.12-1~22.04.18
1
owncloud/server:10.16.3b3f9efdcd7f7
python3.10@3.10.12-1~22.04.16
3.10.12-1~22.04.18
1
passbolt/passbolt:5.13.0-1-ceaf3a620902a0
python3.13@3.13.5-2+deb13u2
no fix listed
1
penpotapp/backend:2.2.147853d9bb9dd
python3.10@3.10.12-1~22.04.6
3.10.12-1~22.04.18
1
penpotapp/exporter:2.2.15c835ffd87ab
python3.10@3.10.12-1~22.04.6
3.10.12-1~22.04.18
1
penpotapp/exporter:2.17.272a8061e8806
python3.14@3.14.4-1ubuntu0.1
3.14.4-1ubuntu0.2
1
phan2410/dummy-service:0.0.89c6ed6de26ca
python3.11@3.11.2-6+deb12u5
no fix listed
1
phan2410/falcon-asgi-server:0.1.04a86d138832d
python3.11@3.11.2-6+deb12u5
no fix listed
1
photoprism/photoprism:240711-cefc6fd632ca74
python3.12@3.12.3-1
3.12.3-1ubuntu0.17
1
platzio/backend:v0.6.5d5e5972f344b
python3@3.12.11-r0
3.12.14-r0
1
pnnlmiscscripts/gitlab-runner-operator:0.1.3-1155131891741
python3@3.6.8-15.1.el8
0:3.6.8-77.el8_10
1
pnnlmiscscripts/ipmi-exporter:1.2.0-181e18992d8e3
python3@3.6.8-56.el8_9.rocky.0
0:3.6.8-77.el8_10.rocky.0
1
pnnlmiscscripts/tenant-namespace-operator:0.1.24-18af4b7551d40
python3@3.6.8-51.el8_8.1
0:3.6.8-77.el8_10
1
powerdns/pdns-recursor-54:5.4.533aadc74a8d6
python3.13@3.13.5-2+deb13u4
no fix listed
1
pretix/standalone:2026.7.05df3b7aa852e
python3.13@3.13.5-2+deb13u4
no fix listed
1
project2team4/react:latest3ff031a08887
python3.8@3.8.10-0ubuntu1~20.04.4
3.8.10-0ubuntu1~20.04.18+esm7
1
prompve/prometheus-pve-exporter:3.8.2e3d501a82df5
python3@3.12.12-r0
3.12.14-r0
1
prowlercloud/prowler-api:5.31.14f252d579be2
python3.11@3.11.2-6+deb12u7
no fix listed
1
psorab/elibrary:latest53b68896c4ce
python3.8@3.8.10-0ubuntu1~20.04.7
3.8.10-0ubuntu1~20.04.18+esm7
1
puppet/puppet-agent:7.14.00b6fd9a6b7da
python3.6@3.6.9-1~18.04ubuntu1.6
3.6.9-1~18.04ubuntu1.13+esm10
1
qonstrukt/php:8.4-v8-apache089af7925aa1
python3.12@3.12.3-1ubuntu0.15
3.12.3-1ubuntu0.17
1
rancher/local-path-provisioner:v0.0.5e66f32d19eb9
python2.7@2.7.12-1ubuntu0~16.04.3
python3.5@3.5.2-2ubuntu0~16.04.4
2.7.12-1ubuntu0~16.04.18+esm22
3.5.2-2ubuntu0~16.04.13+esm25
1
razorbladex401/dayz:latest6a4d79248e7d
python3.10@3.10.12-1~22.04.3
3.10.12-1~22.04.18
1
redimp/otterwiki:2778bf30da3da
python3.11@3.11.2-6+deb12u8
no fix listed
1
redis/redis-stack-server:latest798ab84d9f26
python3.10@3.10.12-1~22.04.11
3.10.12-1~22.04.18
1
redis/redis-stack-server:7.4.0-v0887cf87cc744
python3.10@3.10.12-1~22.04.4
3.10.12-1~22.04.18
1
resouer/redis-slave:v2e2f198b49ba7
python2.7@2.7.6-8
python3.4@3.4.0-2ubuntu1
2.7.6-8ubuntu0.6+esm30
3.4.3-1ubuntu1~14.04.7+esm21
1
resurfaceio/resurface:3.7.84d5cda2f64109
python3.10@3.10.12-1~22.04.9
3.10.12-1~22.04.18
1
rezachalak/bzen-mongo:1.0.034f694325191
python3.8@3.8.10-0ubuntu1~20.04.8
3.8.10-0ubuntu1~20.04.18+esm7
1
rhasspy/wyoming-piper:2.3.169b7f797ae3a
python3.11@3.11.2-6+deb12u8
no fix listed
1
rhasspy/wyoming-piper:2.5.27d39aafac409
python3.13@3.13.5-2+deb13u4
no fix listed
1
rhasspy/wyoming-speech-to-phrase:1.4.3e532f0dbc6b2
python3.11@3.11.2-6+deb12u6
no fix listed
1
rhasspy/wyoming-whisper:3.5.0308b7959a925
python3.11@3.11.2-6+deb12u7
no fix listed
1
rm3l/dev-feed-api:latest9a7f732245a3
python3.9@3.9.16-1.el9_2.2
0:3.9.25-7.el9_8.2
1
rm3l/mac-oui:1.8.03a5e1f95c132
python3@3.6.8-56.el8_9.3
0:3.6.8-77.el8_10
1
rocketadmin/rocketadmin:1.17.710955ef540b9
python3.11@3.11.2-6+deb12u6
no fix listed
1
roundcube/roundcubemail:1.6.16-apache-nonroot17d9d9580962
python3.13@3.13.5-2+deb13u2
no fix listed
1
rtuszik/photon-docker:2.4.021549c60f9e6
python3.12@3.12.3-1ubuntu0.15
3.12.3-1ubuntu0.17
1
ryuunosukeds3/nadeko-bot-docker:latestc0398f13e8a9
python3.10@3.10.12-1~22.04.9
3.10.12-1~22.04.18
1
saidsef/scapy-containerised:v2025.02f17f7c435891
python3@3.12.9-r0
3.12.14-r0
1
santisbon/evwatcher:latestc4e994ca4540
python3.11@3.11.2-6
no fix listed
1
santisbon/evworker:lateste807283f8d69
python3.11@3.11.2-6
no fix listed
1
santisbon/speedtest:latest8ee3a1697227
python3.11@3.11.2-6
no fix listed
1
sashafefler/spacecapybara_app:latestf96d7804c0ca
python3.11@3.11.2-6+deb12u3
no fix listed
1
scholtz2/algorand-participation-aramidmain-extended:4.4.1-stablef12ce1cfb72e
python3.10@3.10.12-1~22.04.6
3.10.12-1~22.04.18
1

syft 1.42.1 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.