StackRadar

CVE-2026-15308

High

Advisory

Published 9 Jul 2026In the index since 5 Sept 2026
Severity
High
worst across findings
CVSS
8.7
base score, highest
EPSS
0.006
49th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
865
of 17,787 indexed, latest versions
Container images
896
deployed by those charts
Fix available
17 of 18
affected packages

Incremental HTMLParser feed() allows CPU-exhaustion DoS via repeated unterminated markup declarations

Carried by container images the latest versions of 865 of 17,787 indexed charts deploy, on 896 images.

Affected packageAffected versionsFixed inImages
python-3.14apk3.14.2-r2, 3.14.4-r2, 3.14.6-r03.14.6-r46
pythonbitnami3.11.11-0, 3.12.8-0, 3.13.5-13.10.213
python-3.13apk3.13.7-r0, 3.13.10-r0, 3.13.12-r23.13.14-r33
python-3.12apk3.12.0-r1, 3.12.9-r13.12.14-r22
python3.11deb3.11.0~rc1-1~22.04, 3.11.0~rc1-1~22.04.1, 3.11.2-6, 3.11.2-6+deb12u2+6 more3.11.0~rc1-1~22.04.1+esm2180
python3rpm3.6.8-15.1.el8, 3.6.8-23.el8, 3.6.8-24.el8_2, 3.6.8-24.el8_2.2+28 more0:3.6.8-77.el8_10, 0:3.6.8-77.el8_10.rocky.0, 3.12.14-1136
python3.8deb3.8.5-1~20.04, 3.8.5-1~20.04.2, 3.8.5-1~20.04.3, 3.8.10-0ubuntu1~20.04+11 more3.8.10-0ubuntu1~20.04.18+esm7100
python3.12deb3.12.3-1, 3.12.3-1ubuntu0.2, 3.12.3-1ubuntu0.3, 3.12.3-1ubuntu0.4+10 more3.12.3-1ubuntu0.1785
python3.10deb3.10.4-3, 3.10.4-3ubuntu0.1, 3.10.6-1~22.04, 3.10.6-1~22.04.1+16 more3.10.12-1~22.04.1880
python3apk3.11.12-r1, 3.12.8-r1, 3.12.9-r0, 3.12.10-r0+7 more3.12.14-r0, 3.14.7-r075
python3.13deb3.13.5-2, 3.13.5-2+deb13u2, 3.13.5-2+deb13u4no fix listed73
python3.9rpm3.9.16-1.el9, 3.9.16-1.el9_2.1, 3.9.16-1.el9_2.2, 3.9.18-1.el9_3.1+15 more0:3.9.25-7.el9_8.255
python3.6deb3.6.6-1~18.04, 3.6.7-1~18.04, 3.6.9-1~18.04, 3.6.9-1~18.04ubuntu1+7 more3.6.9-1~18.04ubuntu1.13+esm1044
python2.7deb2.7.6-8, 2.7.6-8ubuntu0.4, 2.7.12-1ubuntu0~16.04.2, 2.7.12-1ubuntu0~16.04.3+9 more2.7.6-8ubuntu0.6+esm30, 2.7.12-1ubuntu0~16.04.18+esm22, 2.7.17-1~18.04ubuntu1.13+esm15, 2.7.18-13ubuntu1.5+esm943
python3.5deb3.5.2-2ubuntu0~16.04.1, 3.5.2-2ubuntu0~16.04.4, 3.5.2-2ubuntu0~16.04.5, 3.5.2-2ubuntu0~16.04.93.5.2-2ubuntu0~16.04.13+esm2525
python3.14deb3.14.4-1, 3.14.4-1ubuntu0.13.14.4-1ubuntu0.28
python3.4deb3.4.0-2ubuntu1, 3.4.3-1ubuntu1~14.04.5, 3.4.3-1ubuntu1~14.04.6, 3.4.3-1ubuntu1~14.04.73.4.3-1ubuntu1~14.04.7+esm217
python3.12rpm3.12.5-2.el9_5.20:3.12.13-3.el9_8.11
OSV records
ALPINE-CVE-2026-15308BIT-python-2026-15308CGA-2v5h-4pjx-m2vpCGA-7fq5-cfqp-92mfCGA-8wxj-3m53-wmwrDEBIAN-CVE-2026-15308RHSA-2026:39320RHSA-2026:39771RHSA-2026:39798RLSA-2026:39320RLSA-2026:39798UBUNTU-CVE-2026-15308AZL-92271
Also known as
BIT-libpython-2026-15308, BIT-python-min-2026-15308, CGA-qq9v-hh37-fr79, CGA-vh53-c7h5-695j, CGA-xm2p-hf9g-qw3m, PSF-2026-33, RHSA-2026:50064, RHSA-2026:50065, RHSA-2026:50816, USN-8744-1

Charts affected

865 by stars
ChartLatestAffected imagesRadar Score
comac-platformopencord0.0.171 of 11See more

comac-platform opencord 0.0.17

1 of the 11 container images this version deploys carry CVE-2026-15308.

Container imageDigestPackageFixed in
omecproject/mcord-synchronizer:comac-1.0.0cfdb566dd949
python2.7@2.7.12-1ubuntu0~16.04.4
python3.5@3.5.2-2ubuntu0~16.04.5
2.7.12-1ubuntu0~16.04.18+esm22
3.5.2-2ubuntu0~16.04.13+esm25

Open the chart page →

26,211
freeradiusopencord1.0.41 of 1See more

freeradius opencord 1.0.4

1 of the 1 container images this version deploys carry CVE-2026-15308.

Container imageDigestPackageFixed in
freeradius/freeradius-server:3.0.2121c8bfa904d8
python2.7@2.7.17-1~18.04
2.7.17-1~18.04ubuntu1.13+esm15

Open the chart page →

15,702
mcord-cdn-remoteopencord0.1.62 of 2See more

mcord-cdn-remote opencord 0.1.6

2 of the 2 container images this version deploys carry CVE-2026-15308.

Container imageDigestPackageFixed in
omecproject/cdn-video-repo:remote-v3d59ccb138ffb
python2.7@2.7.12-1ubuntu0~16.04.4
2.7.12-1ubuntu0~16.04.18+esm22
woojoong/wowza:latestec230db19652
python2.7@2.7.15~rc1-1ubuntu0.1
2.7.17-1~18.04ubuntu1.13+esm15

Open the chart page →

42,614
mcord-cdn-remote-freeopencord0.1.31 of 1See more

mcord-cdn-remote-free opencord 0.1.3

1 of the 1 container images this version deploys carry CVE-2026-15308.

Container imageDigestPackageFixed in
omecproject/cdn-video-repo:remote-v3d59ccb138ffb
python2.7@2.7.12-1ubuntu0~16.04.4
2.7.12-1ubuntu0~16.04.18+esm22

Open the chart page →

29,124
omec-control-planeopencord0.1.311 of 8See more

omec-control-plane opencord 0.1.31

1 of the 8 container images this version deploys carry CVE-2026-15308.

Container imageDigestPackageFixed in
omecproject/mme-exporter:paging-latestbcc5f19fd676
python3.6@3.6.9-1~18.04
3.6.9-1~18.04ubuntu1.13+esm10

Open the chart page →

40,715
onos-progranopencord1.2.71 of 2See more

onos-progran opencord 1.2.7

1 of the 2 container images this version deploys carry CVE-2026-15308.

Container imageDigestPackageFixed in
muluder/prograncontrollermcord:0.1.843b597a93da7
python2.7@2.7.12-1ubuntu0~16.04.3
python3.5@3.5.2-2ubuntu0~16.04.4
2.7.12-1ubuntu0~16.04.18+esm22
3.5.2-2ubuntu0~16.04.13+esm25

Open the chart page →

38,865
ponsimv2opencord1.2.31 of 2See more

ponsimv2 opencord 1.2.3

1 of the 2 container images this version deploys carry CVE-2026-15308.

Container imageDigestPackageFixed in
voltha/voltha-tester:1.7.0655c3048a602
python2.7@2.7.12-1ubuntu0~16.04.4
2.7.12-1ubuntu0~16.04.18+esm22

Open the chart page →

12,609
sebaopencord1.0.06 of 17See more

seba opencord 1.0.0

6 of the 17 container images this version deploys carry CVE-2026-15308.

Container imageDigestPackageFixed in
tpdock/freeradius:2.2.93da600c95a49
python2.7@2.7.12-1ubuntu0~16.04.2
python3.5@3.5.2-2ubuntu0~16.04.4
2.7.12-1ubuntu0~16.04.18+esm22
3.5.2-2ubuntu0~16.04.13+esm25
voltha/voltha-cli:1.6.0c4e41e92f046
python2.7@2.7.12-1ubuntu0~16.04.3
python3.5@3.5.2-2ubuntu0~16.04.5
2.7.12-1ubuntu0~16.04.18+esm22
3.5.2-2ubuntu0~16.04.13+esm25
voltha/voltha-envoy:1.6.059ab2a00f712
python3.4@3.4.3-1ubuntu1~14.04.5
3.4.3-1ubuntu1~14.04.7+esm21
voltha/voltha-netconf:1.6.037f80524c207
python2.7@2.7.12-1ubuntu0~16.04.3
2.7.12-1ubuntu0~16.04.18+esm22
voltha/voltha-ofagent:1.6.09ee8c1f4428c
python2.7@2.7.12-1ubuntu0~16.04.3
2.7.12-1ubuntu0~16.04.18+esm22
voltha/voltha-voltha:1.6.0ff596b62de59
python2.7@2.7.12-1ubuntu0~16.04.3
2.7.12-1ubuntu0~16.04.18+esm22

Open the chart page →

93,855
voltha-infraopencord2.14.01 of 10See more

voltha-infra opencord 2.14.0

1 of the 10 container images this version deploys carry CVE-2026-15308.

Container imageDigestPackageFixed in
freeradius/freeradius-server:3.0.2121c8bfa904d8
python2.7@2.7.17-1~18.04
2.7.17-1~18.04ubuntu1.13+esm15

Open the chart page →

41,044
opencost-parquet-exporteropencostVerified publisher0.3.11 of 1See more

opencost-parquet-exporter opencost 0.3.1

1 of the 1 container images this version deploys carry CVE-2026-15308.

Container imageDigestPackageFixed in
ghcr.io/opencost/opencost-parquet-exporter:v0.2.1ce85ef0ce665
python3.11@3.11.2-6+deb12u5
no fix listed

Open the chart page →

10,978
akeyless-api-gatewayopenshift1.41.21 of 1See more

akeyless-api-gateway openshift 1.41.2

1 of the 1 container images this version deploys carry CVE-2026-15308.

Container imageDigestPackageFixed in
akeyless/base-rhel:0.0.14ba8900a0061
python3@3.6.8-56.el8_9.3
0:3.6.8-77.el8_10

Open the chart page →

11,796
bpjstk-serviceopenshift1.0.03 of 6See more

bpjstk-service openshift 1.0.0

3 of the 6 container images this version deploys carry CVE-2026-15308.

Container imageDigestPackageFixed in
andrianrf/backoffice:latest047a7837651e
python3@3.6.8-62.el8_10
0:3.6.8-77.el8_10
andrianrf/backoffice-be:latest6036614803d4
python3.9@3.9.16-1.el9
0:3.9.25-7.el9_8.2
andrianrf/iso-server:latest7da47f525c7d
python3.9@3.9.16-1.el9
0:3.9.25-7.el9_8.2

Open the chart page →

34,671
canvas-oamportalopenshift4.0.01 of 1See more

canvas-oamportal openshift 4.0.0

1 of the 1 container images this version deploys carry CVE-2026-15308.

Container imageDigestPackageFixed in
gurolakman/oam:4.0.0ed8fd2062548
python3@3.6.8-62.el8_10
0:3.6.8-77.el8_10

Open the chart page →

7,519
chatbot-ai-sampleopenshift0.1.62 of 4See more

chatbot-ai-sample openshift 0.1.6

2 of the 4 container images this version deploys carry CVE-2026-15308.

Container imageDigestPackageFixed in
quay.io/ai-lab/llamacpp_python:latest70d138997acd
python3.9@3.9.18-3.el9_4.5
0:3.9.25-7.el9_8.2
quay.io/redhat-ai-dev/chatbot:latest59fe607dfdf2
python3.9@3.9.18-3.el9
0:3.9.25-7.el9_8.2

Open the chart page →

18,922
exporteropenshift1.0.473 of 3See more

exporter openshift 1.0.47

3 of the 3 container images this version deploys carry CVE-2026-15308.

Container imageDigestPackageFixed in
public.ecr.aws/perfectscale-io/kube-state-metrics:4.1.14-redhat849e235e2d3e
python3@3.6.8-67.el8_10
0:3.6.8-77.el8_10
public.ecr.aws/perfectscale-io/psc-exporter:v1.0.45-redhat9083e60c38bc
python3.9@3.9.19-8.el9_5.1
0:3.9.25-7.el9_8.2
public.ecr.aws/perfectscale-io/ubi9/ubi:9.5d7c3def9252b
python3.9@3.9.19-8.el9_5.1
0:3.9.25-7.el9_8.2

Open the chart page →

13,000
flomesh-consoleopenshift0.70.0-30-ubi82 of 2See more

flomesh-console openshift 0.70.0-30-ubi8

2 of the 2 container images this version deploys carry CVE-2026-15308.

Container imageDigestPackageFixed in
quay.io/flomesh/flomesh-console-ubi8:0.70.0-30ce6938ff6709
python3@3.6.8-48.el8_7
0:3.6.8-77.el8_10
quay.io/flomesh/pipy-repo-ubi8:0.70.0-469912fdf6c183
python3@3.6.8-48.el8_7
0:3.6.8-77.el8_10

Open the chart page →

9,968
fsmopenshift0.1.8-ubi.61 of 6See more

fsm openshift 0.1.8-ubi.6

1 of the 6 container images this version deploys carry CVE-2026-15308.

Container imageDigestPackageFixed in
quay.io/flomesh/pipy-ubi8:0.50.0-8824352dca6672
python3@3.6.8-48.el8_7
0:3.6.8-77.el8_10

Open the chart page →

16,556
kb-cloud-installeropenshift2.1.351 of 1See more

kb-cloud-installer openshift 2.1.35

1 of the 1 container images this version deploys carry CVE-2026-15308.

Container imageDigestPackageFixed in
apecloud/kb-cloud-installer:v2.1.42-certified98abc64aa985
python3.9@3.9.25-2.el9_7
0:3.9.25-7.el9_8.2

Open the chart page →

4,127
kite-agentopenshift1.0.01 of 1See more

kite-agent openshift 1.0.0

1 of the 1 container images this version deploys carry CVE-2026-15308.

Container imageDigestPackageFixed in
quay.io/fengyuanxing/zte_endogenous_security/kite-agent:V2.0.0734808044936
python3@3.6.8-76.el8_10
0:3.6.8-77.el8_10

Open the chart page →

5,863
orion-ldopenshift1.0.31 of 2See more

orion-ld openshift 1.0.3

1 of the 2 container images this version deploys carry CVE-2026-15308.

Container imageDigestPackageFixed in
quay.io/fiware/orion-ld:1.0.1ea838e5b4051
python3@3.6.8-39.el8_4
0:3.6.8-77.el8_10

Open the chart page →

14,727
osm-edgeopenshift1.2.1-ubi81 of 7See more

osm-edge openshift 1.2.1-ubi8

1 of the 7 container images this version deploys carry CVE-2026-15308.

Container imageDigestPackageFixed in
quay.io/flomesh/pipy-ubi8:0.70.0-4635d87a381432
python3@3.6.8-48.el8_7
0:3.6.8-77.el8_10

Open the chart page →

19,455
redhat-trusted-application-pipelineopenshift1.0.21 of 2See more

redhat-trusted-application-pipeline openshift 1.0.2

1 of the 2 container images this version deploys carry CVE-2026-15308.

Container imageDigestPackageFixed in
quay.io/redhat-appstudio/appstudio-utils:dbbdd82734232e6289e8fbae5b4c858481a7c0577b4202c25b67
python3.9@3.9.16-1.el9_2.1
0:3.9.25-7.el9_8.2

Open the chart page →

8,599
smsf-configurationopenshift1.0.41 of 1See more

smsf-configuration openshift 1.0.4

1 of the 1 container images this version deploys carry CVE-2026-15308.

Container imageDigestPackageFixed in
gurolakman/smsf-configuration:1.0.49abb3882bcbd
python3@3.6.8-56.el8_9.2
0:3.6.8-77.el8_10

Open the chart page →

13,607
smsf-dispatcheropenshift1.0.41 of 1See more

smsf-dispatcher openshift 1.0.4

1 of the 1 container images this version deploys carry CVE-2026-15308.

Container imageDigestPackageFixed in
gurolakman/smsf-dispatcher:1.0.46537e8ed8de8
python3@3.6.8-56.el8_9.2
0:3.6.8-77.el8_10

Open the chart page →

11,738
smsf-momtopenshift1.0.41 of 1See more

smsf-momt openshift 1.0.4

1 of the 1 container images this version deploys carry CVE-2026-15308.

Container imageDigestPackageFixed in
gurolakman/smsf-momt:1.0.4ce23b20a8a17
python3@3.6.8-56.el8_9.2
0:3.6.8-77.el8_10

Open the chart page →

13,568
smsf-registrationopenshift1.0.41 of 1See more

smsf-registration openshift 1.0.4

1 of the 1 container images this version deploys carry CVE-2026-15308.

Container imageDigestPackageFixed in
gurolakman/smsf-registration:1.0.4b22e746edd5d
python3@3.6.8-56.el8_9.2
0:3.6.8-77.el8_10

Open the chart page →

13,551
ussigw-configurationopenshift1.0.41 of 1See more

ussigw-configuration openshift 1.0.4

1 of the 1 container images this version deploys carry CVE-2026-15308.

Container imageDigestPackageFixed in
gurolakman/ussigw-configuration:1.0.4bf18525c5ad9
python3@3.6.8-56.el8_9.2
0:3.6.8-77.el8_10

Open the chart page →

13,455
ussigw-coreopenshift1.0.41 of 1See more

ussigw-core openshift 1.0.4

1 of the 1 container images this version deploys carry CVE-2026-15308.

Container imageDigestPackageFixed in
gurolakman/ussigw-core:1.0.48739565c3ea2
python3@3.6.8-56.el8_9.2
0:3.6.8-77.el8_10

Open the chart page →

13,100
openshift-integration-operatoropenshift-integration-operatorVerified publisher0.8.21 of 2See more

openshift-integration-operator openshift-integration-operator 0.8.2

1 of the 2 container images this version deploys carry CVE-2026-15308.

Container imageDigestPackageFixed in
quay.io/maximilianopizarro/openshift-integration-operator:v0.8.2d6fc43ac802e
python3.9@3.9.21-1.el9_5
0:3.9.25-7.el9_8.2

Open the chart page →

2,045
open-vpnopenvpn0.0.11 of 1See more

open-vpn openvpn 0.0.1

1 of the 1 container images this version deploys carry CVE-2026-15308.

Container imageDigestPackageFixed in
ghcr.io/linuxserver/openvpn-as:version-2.8.6-916f8e7d-ubuntu184ee0764310e7
python2.7@2.7.17-1~18.04ubuntu1.2
2.7.17-1~18.04ubuntu1.13+esm15

Open the chart page →

15,592
openvscode-serveropenvscode-server-helmVerified publisher2.7.371 of 2See more

openvscode-server openvscode-server-helm 2.7.37

1 of the 2 container images this version deploys carry CVE-2026-15308.

Container imageDigestPackageFixed in
antiantiops/vscode-browser-docker:1.137.0eeff80a99d92
python3.12@3.12.3-1ubuntu0.16
3.12.3-1ubuntu0.17

Open the chart page →

4,237
openwhiskopenwhisk1.0.01 of 10See more

openwhisk openwhisk 1.0.0

1 of the 10 container images this version deploys carry CVE-2026-15308.

Container imageDigestPackageFixed in
openwhisk/ow-utils:1.0.0c80dba0de3aa
python2.7@2.7.17-1~18.04ubuntu1.2
2.7.17-1~18.04ubuntu1.13+esm15

Open the chart page →

36,215
issuegenopsmxVerified publisher1.0.21 of 1See more

issuegen opsmx 1.0.2

1 of the 1 container images this version deploys carry CVE-2026-15308.

Container imageDigestPackageFixed in
opsmx11/issuegen:v2.1.05c50ca123d88
python3.4@3.4.3-1ubuntu1~14.04.6
3.4.3-1ubuntu1~14.04.7+esm21

Open the chart page →

26,339
grrosdfir-infrastructureVerified publisher1.0.31 of 5See more

grr osdfir-infrastructure 1.0.3

1 of the 5 container images this version deploys carry CVE-2026-15308.

Container imageDigestPackageFixed in
ghcr.io/google/fleetspeak:v0.1.17cd264d33efd4
python3.11@3.11.2-6+deb12u2
no fix listed

Open the chart page →

10,896
osdfir-infrastructureosdfir-infrastructureVerified publisher2.15.09 of 40See more

osdfir-infrastructure osdfir-infrastructure 2.15.0

9 of the 40 container images this version deploys carry CVE-2026-15308.

Container imageDigestPackageFixed in
ghcr.io/google/fleetspeak:v0.1.17cd264d33efd4
python3.11@3.11.2-6+deb12u2
no fix listed
ghcr.io/openrelik/openrelik-worker-analyzer-config:latest1269d3d8d2c2
python3.12@3.12.3-1ubuntu0.15
3.12.3-1ubuntu0.17
ghcr.io/openrelik/openrelik-worker-analyzer-logs:latestb175cc61959a
python3.12@3.12.3-1ubuntu0.15
3.12.3-1ubuntu0.17
ghcr.io/openrelik/openrelik-worker-bulkextractor:latest67498ee2e639
python3.12@3.12.3-1ubuntu0.15
3.12.3-1ubuntu0.17
ghcr.io/openrelik/openrelik-worker-containers:latesta6d5abe94706
python3.12@3.12.3-1ubuntu0.15
3.12.3-1ubuntu0.17
ghcr.io/openrelik/openrelik-worker-extraction:latestec9fc5864cd5
python3.12@3.12.3-1ubuntu0.15
3.12.3-1ubuntu0.17
ghcr.io/openrelik/openrelik-worker-os-creds:latest7fc7ec101f08
python3.12@3.12.3-1ubuntu0.15
3.12.3-1ubuntu0.17
ghcr.io/openrelik/openrelik-worker-plaso:latest75537ea8c851
python3.12@3.12.3-1ubuntu0.15
3.12.3-1ubuntu0.17
ghcr.io/openrelik/openrelik-worker-timesketch:latest4cb88b603cdc
python3.12@3.12.3-1ubuntu0.15
3.12.3-1ubuntu0.17

Open the chart page →

71,208
radiusp2p-avs0.1.01 of 1See more

radius p2p-avs 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-15308.

Container imageDigestPackageFixed in
theradius/loggia:0.463ba348546ec
python3.11@3.11.2-6
no fix listed

Open the chart page →

12,350
ungatep2p-avs0.1.02 of 3See more

ungate p2p-avs 0.1.0

2 of the 3 container images this version deploys carry CVE-2026-15308.

Container imageDigestPackageFixed in
xom4ekp2p/infini-route-attestators-public-mainnet-attester:latestd0e0aa238b02
python3.11@3.11.2-6+deb12u2
no fix listed
xom4ekp2p/infini-route-attestators-public-mainnet-avs-webapi:latest2745b5fd8785
python3.11@3.11.2-6+deb12u2
no fix listed

Open the chart page →

27,373
p4p40.1.02 of 7See more

p4 p4 0.1.0

2 of the 7 container images this version deploys carry CVE-2026-15308.

Container imageDigestPackageFixed in
library/rabbitmq:3.11-managementc3f70098e01d
python3.10@3.10.12-1~22.04.3
3.10.12-1~22.04.18
mastercloudapps/server:v2.23f3d24dfe2686
python3@3.6.8-48.el8_7
0:3.6.8-77.el8_10

Open the chart page →

27,537
minecraftpaul1365972-mc3.0.11 of 1See more

minecraft paul1365972-mc 3.0.1

1 of the 1 container images this version deploys carry CVE-2026-15308.

Container imageDigestPackageFixed in
itzg/minecraft-server:latest8672e335dbef
python3.12@3.12.3-1ubuntu0.16
3.12.3-1ubuntu0.17

Open the chart page →

4,253
pet-battle-infrapetbattle1.0.321 of 2See more

pet-battle-infra petbattle 1.0.32

1 of the 2 container images this version deploys carry CVE-2026-15308.

Container imageDigestPackageFixed in
quay.io/openshift/origin-cli:4.8bb5e052770e5
python3@3.6.8-39.el8_4.1
0:3.6.8-77.el8_10

Open the chart page →

15,466
pet-battle-tournamentpetbattle1.0.401 of 3See more

pet-battle-tournament petbattle 1.0.40

1 of the 3 container images this version deploys carry CVE-2026-15308.

Container imageDigestPackageFixed in
quay.io/openshift/origin-cli:4.8bb5e052770e5
python3@3.6.8-39.el8_4.1
0:3.6.8-77.el8_10

Open the chart page →

15,466
redis-stack-awsphamxuanduong0.1.01 of 1See more

redis-stack-aws phamxuanduong 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-15308.

Container imageDigestPackageFixed in
redis/redis-stack-server:7.4.0-v0887cf87cc744
python3.10@3.10.12-1~22.04.4
3.10.12-1~22.04.18

Open the chart page →

3,229
dummy-servicephanVerified publisher0.3.41 of 1See more

dummy-service phan 0.3.4

1 of the 1 container images this version deploys carry CVE-2026-15308.

Container imageDigestPackageFixed in
phan2410/dummy-service:0.0.89c6ed6de26ca
python3.11@3.11.2-6+deb12u5
no fix listed

Open the chart page →

5,706
falcon-asgi-serverphanVerified publisher0.1.01 of 1See more

falcon-asgi-server phan 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-15308.

Container imageDigestPackageFixed in
phan2410/falcon-asgi-server:0.1.04a86d138832d
python3.11@3.11.2-6+deb12u5
no fix listed

Open the chart page →

8,189
phronetisphronetis0.1.272 of 2See more

phronetis phronetis 0.1.27

2 of the 2 container images this version deploys carry CVE-2026-15308.

Container imageDigestPackageFixed in
knspar/phronetis:0.1.4609499d2dc91a
python3.12@3.12.3-1ubuntu0.5
3.12.3-1ubuntu0.17
knspar/phronetis-operator:0.1.60c4f0543ee58
python3.11@3.11.2-6
no fix listed

Open the chart page →

16,196
seafilephybros-helm-charts4.0.11 of 1See more

seafile phybros-helm-charts 4.0.1

1 of the 1 container images this version deploys carry CVE-2026-15308.

Container imageDigestPackageFixed in
seafileltd/seafile-mc:9.0.97ac833196f60
python3.8@3.8.10-0ubuntu1~20.04.5
3.8.10-0ubuntu1~20.04.18+esm7

Open the chart page →

22,084
piepieVerified publisher0.11.11 of 1See more

pie pie 0.11.1

1 of the 1 container images this version deploys carry CVE-2026-15308.

Container imageDigestPackageFixed in
ghcr.io/topolvm/pie:0.18.0aa467443e407
python3.10@3.10.12-1~22.04.17
3.10.12-1~22.04.18

Open the chart page →

2,100
firehose-ethereumpinaxVerified publisher0.3.21 of 2See more

firehose-ethereum pinax 0.3.2

1 of the 2 container images this version deploys carry CVE-2026-15308.

Container imageDigestPackageFixed in
ghcr.io/streamingfast/firehose-ethereum:v2.12.4-gethd7bdfa7b41da
python3.12@3.12.3-1ubuntu0.7
3.12.3-1ubuntu0.17

Open the chart page →

7,062
subgraph-oraclepinaxVerified publisher0.0.11 of 1See more

subgraph-oracle pinax 0.0.1

1 of the 1 container images this version deploys carry CVE-2026-15308.

Container imageDigestPackageFixed in
ghcr.io/graphprotocol/availability-oracle:sha-28312fd472a25038957
python3.11@3.11.2-6+deb12u2
no fix listed

Open the chart page →

11,347
substreams-sink-kvpinaxVerified publisher0.0.41 of 1See more

substreams-sink-kv pinax 0.0.4

1 of the 1 container images this version deploys carry CVE-2026-15308.

Container imageDigestPackageFixed in
ghcr.io/streamingfast/substreams-sink-kv:v2.3.026953ec68d5d
python3.8@3.8.10-0ubuntu1~20.04.13
3.8.10-0ubuntu1~20.04.18+esm7

Open the chart page →

6,641

Container images carrying it

896 by charts deploying them

A fixed version is listed for 17 of the 18 affected packages.

Container imageDigestPackageFixed inUsed by
confluentinc/cp-kafka:7.5.1dc9b972db002
python3@3.6.8-51.el8_8.1
0:3.6.8-77.el8_10
1
confluentinc/cp-kafka-connect:6.1.04bc70a83ca6f
python3@3.6.8-31.el8
0:3.6.8-77.el8_10
1
confluentinc/cp-kafka-rest:6.1.0b0b7aa26254a
python3@3.6.8-31.el8
0:3.6.8-77.el8_10
1
confluentinc/cp-ksqldb-server:7.6.08ec46c27982f
python3@3.6.8-56.el8_9.3
0:3.6.8-77.el8_10
1
confluentinc/cp-ksqldb-server:6.1.0ee403d5b9090
python3@3.6.8-31.el8
0:3.6.8-77.el8_10
1
confluentinc/cp-schema-registry:6.1.0b651d4b6185a
python3@3.6.8-31.el8
0:3.6.8-77.el8_10
1
confluentinc/cp-zookeeper:7.5.10bec03c1f3ce
python3@3.6.8-51.el8_8.1
0:3.6.8-77.el8_10
1
confluentinc/cp-zookeeper:7.8.0-3-ubi85ca5f3269814
python3@3.6.8-69.el8_10
0:3.6.8-77.el8_10
1
confluentinc/cp-zookeeper:6.1.078c190f4472c
python3@3.6.8-31.el8
0:3.6.8-77.el8_10
1
copyparty/ac:1.19.200a0a8605062c
python3@3.12.12-r0
3.12.14-r0
1
countly/countly-server:25.05.4e3c238248f99
python3.8@3.8.10-0ubuntu1~20.04.2
3.8.10-0ubuntu1~20.04.18+esm7
1
ctron/hawkbit-operator:0.1.48fdea8f76499
python3@3.6.8-23.el8
0:3.6.8-77.el8_10
1
cybrarist/discount-bandit:v4.0.4e9e2447ac666
python3.13@3.13.5-2+deb13u2
no fix listed
1
cznic/knot-resolver:v6.4.2fe71c5214fdc
python3.13@3.13.5-2+deb13u4
no fix listed
1
danialnabiyan1382/lsdisk:v2.0.8f96a7ebf1f42
python3.11@3.11.2-6+deb12u6
no fix listed
1
dariomader/twampy:v0.0.2d2f4a8c5e690
python-3.12@3.12.0-r1
3.12.14-r2
1
daskdev/dask-notebook:1.1.0052630f5ca04
python3.6@3.6.7-1~18.04
3.6.9-1~18.04ubuntu1.13+esm10
1
datamate/seafile-professional:11.0.202dd66b722464
python3.10@3.10.12-1~22.04.11
3.10.12-1~22.04.18
1
deconzcommunity/deconz:2.29.2062de2362641
python3.11@3.11.2-6+deb12u5
no fix listed
1
deimosfr/dnsmasq-k8s:1.4.1284c4040fc6d
python3.13@3.13.5-2
no fix listed
1
dellemc/csm-application-mobility-controller:v0.1.0148ada9060a9
python3@3.6.8-47.el8_6
0:3.6.8-77.el8_10
1
digitalist/matomo:5.12.0bc4aeeaea769
python3@3.14.5-r0
3.14.7-r0
1
docuseal/docuseal:2.4.17493fd7f6728
python3@3.12.12-r0
3.12.14-r0
1
dongjiang1989/lxcfs:v6.0.34bf9ae391948
python3.8@3.8.10-0ubuntu1~20.04.18
3.8.10-0ubuntu1~20.04.18+esm7
1
dpage/pgadmin4:9.252cb72a9e3da
python3@3.12.9-r0
3.12.14-r0
1
dragonflyoss/client:v1.5.4a1b52779c4dd
python3.11@3.11.2-6+deb12u8
no fix listed
1
dragonflyoss/client:v0.1.82edf3e921f4e0
python3.11@3.11.2-6
no fix listed
1
drumsergio/genieacs:1.2.16.028244054e1bf
python3.11@3.11.2-6+deb12u6
no fix listed
1
dserio83/velero-api:0.3.16b3d9115fee2
python3.11@3.11.2-6+deb12u6
no fix listed
1
eclipseaerios/iota-messages-api:lateste7f5ba0bc64d
python3.13@3.13.5-2
no fix listed
1
eftechcombr/glpi:php-fpm-12.0.0-rc1f3d0ed01709e
python3@3.12.12-r0
3.12.14-r0
1
elastictranscoder/transcoder:627e21dcb4a0327029e6
python3.6@3.6.9-1~18.04ubuntu1.4
3.6.9-1~18.04ubuntu1.13+esm10
1
elastictranscoder/transcoder-handler:627e21dc5b75d19e2733
python3.6@3.6.9-1~18.04ubuntu1.4
3.6.9-1~18.04ubuntu1.13+esm10
1
elautoestopista/aeneabot:4.2.1125ba620d528
python3@3.12.12-r0
3.12.14-r0
1
electriccoinco/lightwalletd:v0.5.42ae3a551e111
python3.13@3.13.5-2+deb13u4
no fix listed
1
esphome/esphome:2024.3.09ab8cc88b28c
python3.11@3.11.2-6
no fix listed
1
esphome/esphome:2024.12.2b2c6322700ac
python3.11@3.11.2-6+deb12u4
no fix listed
1
esphome/esphome:2025.3.0def8b6e4f517
python3.11@3.11.2-6+deb12u5
no fix listed
1
ethereumex/eth-stats-dashboard:v0.0.1a7603aa8df4c
python2.7@2.7.12-1ubuntu0~16.04.2
2.7.12-1ubuntu0~16.04.18+esm22
1
ethpandaops/assertoor:latest1efa2fba6711
python3.13@3.13.5-2+deb13u2
no fix listed
1
extrim/perlite:1.5.99cb7eb5598b6
python3@3.12.9-r0
3.12.14-r0
1
felipecs8/app-db-connection-test:v129e06c9c6385
python3.11@3.11.2-6+deb12u4
no fix listed
1
firefart/requesttracker:5.0.40d6249906d8c
python3.11@3.11.2-6
no fix listed
1
fiware/biz-ecosystem-charging-backend:11.7.029456835bb2c
python3.8@3.8.10-0ubuntu1~20.04.18
3.8.10-0ubuntu1~20.04.18+esm7
1
fiware/biz-ecosystem-logic-proxy:11.20.3d551a13e8278
python3.11@3.11.2-6+deb12u6
no fix listed
1
fiware/mintaka:0.7.092a3c5cf43c0
python3@3.6.8-45.el8
0:3.6.8-77.el8_10
1
fiware/mintaka:latestefc6793388cc
python3@3.6.8-45.el8
0:3.6.8-77.el8_10
1
fiware/orion-ld:1.10.03c490a746f65
python3@3.6.8-70.el8_10
0:3.6.8-77.el8_10
1
flanksource/batch-runner:v1.0.44689687a7cf95
python3.12@3.12.3-1ubuntu0.8
3.12.3-1ubuntu0.17
1
flashcatcloud/categraf:latest42e6ab16472e
python3.12@3.12.3-1ubuntu0.12
3.12.3-1ubuntu0.17
1

syft 1.42.1 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.