StackRadar

CVE-2026-15308

High

Advisory

Published 9 Jul 2026In the index since 5 Sept 2026
Severity
High
worst across findings
CVSS
8.7
base score, highest
EPSS
0.006
49th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
865
of 17,787 indexed, latest versions
Container images
896
deployed by those charts
Fix available
17 of 18
affected packages

Incremental HTMLParser feed() allows CPU-exhaustion DoS via repeated unterminated markup declarations

Carried by container images the latest versions of 865 of 17,787 indexed charts deploy, on 896 images.

Affected packageAffected versionsFixed inImages
python-3.14apk3.14.2-r2, 3.14.4-r2, 3.14.6-r03.14.6-r46
pythonbitnami3.11.11-0, 3.12.8-0, 3.13.5-13.10.213
python-3.13apk3.13.7-r0, 3.13.10-r0, 3.13.12-r23.13.14-r33
python-3.12apk3.12.0-r1, 3.12.9-r13.12.14-r22
python3.11deb3.11.0~rc1-1~22.04, 3.11.0~rc1-1~22.04.1, 3.11.2-6, 3.11.2-6+deb12u2+6 more3.11.0~rc1-1~22.04.1+esm2180
python3rpm3.6.8-15.1.el8, 3.6.8-23.el8, 3.6.8-24.el8_2, 3.6.8-24.el8_2.2+28 more0:3.6.8-77.el8_10, 0:3.6.8-77.el8_10.rocky.0, 3.12.14-1136
python3.8deb3.8.5-1~20.04, 3.8.5-1~20.04.2, 3.8.5-1~20.04.3, 3.8.10-0ubuntu1~20.04+11 more3.8.10-0ubuntu1~20.04.18+esm7100
python3.12deb3.12.3-1, 3.12.3-1ubuntu0.2, 3.12.3-1ubuntu0.3, 3.12.3-1ubuntu0.4+10 more3.12.3-1ubuntu0.1785
python3.10deb3.10.4-3, 3.10.4-3ubuntu0.1, 3.10.6-1~22.04, 3.10.6-1~22.04.1+16 more3.10.12-1~22.04.1880
python3apk3.11.12-r1, 3.12.8-r1, 3.12.9-r0, 3.12.10-r0+7 more3.12.14-r0, 3.14.7-r075
python3.13deb3.13.5-2, 3.13.5-2+deb13u2, 3.13.5-2+deb13u4no fix listed73
python3.9rpm3.9.16-1.el9, 3.9.16-1.el9_2.1, 3.9.16-1.el9_2.2, 3.9.18-1.el9_3.1+15 more0:3.9.25-7.el9_8.255
python3.6deb3.6.6-1~18.04, 3.6.7-1~18.04, 3.6.9-1~18.04, 3.6.9-1~18.04ubuntu1+7 more3.6.9-1~18.04ubuntu1.13+esm1044
python2.7deb2.7.6-8, 2.7.6-8ubuntu0.4, 2.7.12-1ubuntu0~16.04.2, 2.7.12-1ubuntu0~16.04.3+9 more2.7.6-8ubuntu0.6+esm30, 2.7.12-1ubuntu0~16.04.18+esm22, 2.7.17-1~18.04ubuntu1.13+esm15, 2.7.18-13ubuntu1.5+esm943
python3.5deb3.5.2-2ubuntu0~16.04.1, 3.5.2-2ubuntu0~16.04.4, 3.5.2-2ubuntu0~16.04.5, 3.5.2-2ubuntu0~16.04.93.5.2-2ubuntu0~16.04.13+esm2525
python3.14deb3.14.4-1, 3.14.4-1ubuntu0.13.14.4-1ubuntu0.28
python3.4deb3.4.0-2ubuntu1, 3.4.3-1ubuntu1~14.04.5, 3.4.3-1ubuntu1~14.04.6, 3.4.3-1ubuntu1~14.04.73.4.3-1ubuntu1~14.04.7+esm217
python3.12rpm3.12.5-2.el9_5.20:3.12.13-3.el9_8.11
OSV records
ALPINE-CVE-2026-15308BIT-python-2026-15308CGA-2v5h-4pjx-m2vpCGA-7fq5-cfqp-92mfCGA-8wxj-3m53-wmwrDEBIAN-CVE-2026-15308RHSA-2026:39320RHSA-2026:39771RHSA-2026:39798RLSA-2026:39320RLSA-2026:39798UBUNTU-CVE-2026-15308AZL-92271
Also known as
BIT-libpython-2026-15308, BIT-python-min-2026-15308, CGA-qq9v-hh37-fr79, CGA-vh53-c7h5-695j, CGA-xm2p-hf9g-qw3m, PSF-2026-33, RHSA-2026:50064, RHSA-2026:50065, RHSA-2026:50816, USN-8744-1

Charts affected

865 by stars
ChartLatestAffected imagesRadar Score
akto-central-setupakto1.1.101 of 5See more

akto-central-setup akto 1.1.10

1 of the 5 container images this version deploys carry CVE-2026-15308.

Container imageDigestPackageFixed in
public.ecr.aws/aktosecurity/confluentinc-cp-kafka:8.2.28e01c0305844
python3.9@3.9.25-7.el9_8
0:3.9.25-7.el9_8.2

Open the chart page →

4,905
akto-hybrid-redactakto1.44.61See more

akto-hybrid-redact akto 1.44.6

1 container image this version deploys carries CVE-2026-15308.

Container imageDigestPackageFixed in
public.ecr.aws/aktosecurity/confluentinc-cp-kafka:8.1.1-1-ubi9d20bd62f0182
python3.9@3.9.23-2.el9
0:3.9.25-7.el9_8.2

Open the chart page →

—
akto-k8s-ebpfakto0.1.31 of 1See more

akto-k8s-ebpf akto 0.1.3

1 of the 1 container images this version deploys carry CVE-2026-15308.

Container imageDigestPackageFixed in
aktosecurity/mirror-api-logging:k8s_ebpffcf8be10bead
python3@3.12.13-r0
3.12.14-r0

Open the chart page →

838
akto-k8s-ebpf-openshiftakto0.1.11 of 1See more

akto-k8s-ebpf-openshift akto 0.1.1

1 of the 1 container images this version deploys carry CVE-2026-15308.

Container imageDigestPackageFixed in
public.ecr.aws/aktosecurity/mirror-api-logging:k8s_ebpf_core_impd94ce715f051
python3@3.12.12-r0
3.12.14-r0

Open the chart page →

1,276
akto-mini-runtimeakto0.7.221 of 3See more

akto-mini-runtime akto 0.7.22

1 of the 3 container images this version deploys carry CVE-2026-15308.

Container imageDigestPackageFixed in
public.ecr.aws/aktosecurity/confluentinc-cp-kafka:8.2.2-1-ubi98e01c0305844
python3.9@3.9.25-7.el9_8
0:3.9.25-7.el9_8.2

Open the chart page →

2,741
akto-mini-runtime-shaakto0.7.231 of 3See more

akto-mini-runtime-sha akto 0.7.23

1 of the 3 container images this version deploys carry CVE-2026-15308.

Container imageDigestPackageFixed in
public.ecr.aws/aktosecurity/confluentinc-cp-kafkadigest-pinnedd20bd62f0182
python3.9@3.9.23-2.el9
0:3.9.25-7.el9_8.2

Open the chart page →

3,217
akto-mini-testingakto1.45.72 of 5See more

akto-mini-testing akto 1.45.7

2 of the 5 container images this version deploys carry CVE-2026-15308.

Container imageDigestPackageFixed in
public.ecr.aws/aktosecurity/akto-puppeteer-replay:1.49.4_latestf1c5763d565e
python3@3.12.13-r0
3.12.14-r0
public.ecr.aws/aktosecurity/confluentinc-cp-kafka:8.2.2-1-ubi98e01c0305844
python3.9@3.9.25-7.el9_8
0:3.9.25-7.el9_8.2

Open the chart page →

6,486
akto-mini-testing-kafkaakto1.42.12 of 5See more

akto-mini-testing-kafka akto 1.42.1

2 of the 5 container images this version deploys carry CVE-2026-15308.

Container imageDigestPackageFixed in
confluentinc/cp-kafka:7.8.0-3-ubi8adc392d28a1e
python3@3.6.8-69.el8_10
0:3.6.8-77.el8_10
confluentinc/cp-zookeeper:7.8.0-3-ubi85ca5f3269814
python3@3.6.8-69.el8_10
0:3.6.8-77.el8_10

Open the chart page →

6,397
akto-mrs-runtime-combinedakto0.0.21 of 2See more

akto-mrs-runtime-combined akto 0.0.2

1 of the 2 container images this version deploys carry CVE-2026-15308.

Container imageDigestPackageFixed in
public.ecr.aws/aktosecurity/confluentinc-cp-kafka:8.1.0-1-ubi99026dbbf280d
python3.9@3.9.21-2.el9_6.2
0:3.9.25-7.el9_8.2

Open the chart page →

1,826
akto-protectionakto0.1.02 of 4See more

akto-protection akto 0.1.0

2 of the 4 container images this version deploys carry CVE-2026-15308.

Container imageDigestPackageFixed in
confluentinc/cp-kafka:6.2.11-1-ubi8ac776fad95a5
python3@3.6.8-51.el8_8.1
0:3.6.8-77.el8_10
confluentinc/cp-zookeeper:6.2.11-1-ubi8cae577096489
python3@3.6.8-51.el8_8.1
0:3.6.8-77.el8_10

Open the chart page →

11,285
akto-regional-setupakto1.3.12 of 9See more

akto-regional-setup akto 1.3.1

2 of the 9 container images this version deploys carry CVE-2026-15308.

Container imageDigestPackageFixed in
redis/redis-stack-server:7.4.072035434f455
python3.10@3.10.12-1~22.04.6
3.10.12-1~22.04.18
public.ecr.aws/aktosecurity/confluentinc-cp-kafka:8.2.28e01c0305844
python3.9@3.9.25-7.el9_8
0:3.9.25-7.el9_8.2

Open the chart page →

7,603
akto-runtimeakto0.1.81 of 2See more

akto-runtime akto 0.1.8

1 of the 2 container images this version deploys carry CVE-2026-15308.

Container imageDigestPackageFixed in
public.ecr.aws/aktosecurity/confluentinc-cp-kafka:8.2.2-1-ubi98e01c0305844
python3.9@3.9.25-7.el9_8
0:3.9.25-7.el9_8.2

Open the chart page →

1,411
akto-threat-backendakto0.1.51 of 2See more

akto-threat-backend akto 0.1.5

1 of the 2 container images this version deploys carry CVE-2026-15308.

Container imageDigestPackageFixed in
public.ecr.aws/aktosecurity/confluentinc-cp-kafka:8.2.2-1-ubi98e01c0305844
python3.9@3.9.25-7.el9_8
0:3.9.25-7.el9_8.2

Open the chart page →

1,490
akto-threat-clientakto0.2.01 of 2See more

akto-threat-client akto 0.2.0

1 of the 2 container images this version deploys carry CVE-2026-15308.

Container imageDigestPackageFixed in
public.ecr.aws/aktosecurity/confluentinc-cp-kafka:8.2.2-1-ubi98e01c0305844
python3.9@3.9.25-7.el9_8
0:3.9.25-7.el9_8.2

Open the chart page →

1,523
esphomealexmorbo-esphomeVerified publisher1.0.01 of 1See more

esphome alexmorbo-esphome 1.0.0

1 of the 1 container images this version deploys carry CVE-2026-15308.

Container imageDigestPackageFixed in
esphome/esphome:2024.12.2b2c6322700ac
python3.11@3.11.2-6+deb12u4
no fix listed

Open the chart page →

6,324
amorphieamorphie0.1.21 of 18See more

amorphie amorphie 0.1.2

1 of the 18 container images this version deploys carry CVE-2026-15308.

Container imageDigestPackageFixed in
hazelcast/management-center:5.3.2f9d34300d330
python3@3.6.8-51.el8_8.1
0:3.6.8-77.el8_10

Open the chart page →

28,131
anchore-admission-controlleranchore-charts0.8.51See more

anchore-admission-controller anchore-charts 0.8.5

1 container image this version deploys carries CVE-2026-15308.

Container imageDigestPackageFixed in
cfssl/cfssl:v1.6.5c9018c2ddf0b
python3.11@3.11.2-6
no fix listed

Open the chart page →

—
music-assistant-serverandibraeuVerified publisher2.1.21 of 1See more

music-assistant-server andibraeu 2.1.2

1 of the 1 container images this version deploys carry CVE-2026-15308.

Container imageDigestPackageFixed in
ghcr.io/music-assistant/server:2.9.950666a6f8d7f
python3.11@3.11.2-6+deb12u7
no fix listed

Open the chart page →

5,817
mathesarandrenarchyVerified publisher1.8.01 of 1See more

mathesar andrenarchy 1.8.0

1 of the 1 container images this version deploys carry CVE-2026-15308.

Container imageDigestPackageFixed in
mathesar/mathesar:0.12.0091757cb01fe
python3.11@3.11.2-6+deb12u7
no fix listed

Open the chart page →

7,239
speech-to-phraseandrenarchyVerified publisher1.3.01 of 1See more

speech-to-phrase andrenarchy 1.3.0

1 of the 1 container images this version deploys carry CVE-2026-15308.

Container imageDigestPackageFixed in
rhasspy/wyoming-speech-to-phrase:1.4.3e532f0dbc6b2
python3.11@3.11.2-6+deb12u6
no fix listed

Open the chart page →

3,991
games-on-whalesangelnu2.0.02 of 7See more

games-on-whales angelnu 2.0.0

2 of the 7 container images this version deploys carry CVE-2026-15308.

Container imageDigestPackageFixed in
andrewmackrodt/firefox-x11:142.0.1-r133f9080470c9
python3.10@3.10.12-1~22.04.11
3.10.12-1~22.04.18
ghcr.io/games-on-whales/retroarch:1.0.0103fbcec2314
python3.8@3.8.10-0ubuntu1~20.04
3.8.10-0ubuntu1~20.04.18+esm7

Open the chart page →

42,126
ansible-inspecansible-inspec0.2.171 of 2See more

ansible-inspec ansible-inspec 0.2.17

1 of the 2 container images this version deploys carry CVE-2026-15308.

Container imageDigestPackageFixed in
ghcr.io/htunn/ansible-inspec:0.2.12cd25a5cc3f1b
python3.13@3.13.5-2
no fix listed

Open the chart page →

5,558
antigenic-docuseal-helm-chartantigenic-docuseal-helm-chartVerified publisher0.2.01 of 1See more

antigenic-docuseal-helm-chart antigenic-docuseal-helm-chart 0.2.0

1 of the 1 container images this version deploys carry CVE-2026-15308.

Container imageDigestPackageFixed in
docuseal/docuseal:2.4.17493fd7f6728
python3@3.12.12-r0
3.12.14-r0

Open the chart page →

2,766
monitoringantmediaVerified publisher1.0.01 of 6See more

monitoring antmedia 1.0.0

1 of the 6 container images this version deploys carry CVE-2026-15308.

Container imageDigestPackageFixed in
confluentinc/cp-zookeeper:latest7610a50b13e7
python3@3.6.8-69.el8_10
0:3.6.8-77.el8_10

Open the chart page →

2,453
apishiftapishiftVerified publisher0.3.02 of 4See more

apishift apishift 0.3.0

2 of the 4 container images this version deploys carry CVE-2026-15308.

Container imageDigestPackageFixed in
quay.io/everythingascode/apishift:v0.3.08fbbcd23b902
python3.9@3.9.25-7.el9_8
0:3.9.25-7.el9_8.2
quay.io/everythingascode/apishift-backend:v0.3.014ff275b2e61
python3.9@3.9.21-1.el9_5
0:3.9.25-7.el9_8.2

Open the chart page →

2,902
app-mobilityappmo0.1.01 of 5See more

app-mobility appmo 0.1.0

1 of the 5 container images this version deploys carry CVE-2026-15308.

Container imageDigestPackageFixed in
dellemc/csm-application-mobility-controller:v0.1.0148ada9060a9
python3@3.6.8-47.el8_6
0:3.6.8-77.el8_10

Open the chart page →

12,521
inbox-server-distributedappscodeVerified publisher2025.12.252 of 4See more

inbox-server-distributed appscode 2025.12.25

2 of the 4 container images this version deploys carry CVE-2026-15308.

Container imageDigestPackageFixed in
library/cassandra:4.1.37cbcec0086ac
python3.10@3.10.12-1~22.04.3
3.10.12-1~22.04.18
library/rabbitmq:3.12.1-managementf020c06da226
python3.10@3.10.6-1~22.04.2ubuntu1.1
3.10.12-1~22.04.18

Open the chart page →

15,573
james-komposeappscodeVerified publisher0.1.02 of 4See more

james-kompose appscode 0.1.0

2 of the 4 container images this version deploys carry CVE-2026-15308.

Container imageDigestPackageFixed in
library/cassandra:4.1.37cbcec0086ac
python3.10@3.10.12-1~22.04.3
3.10.12-1~22.04.18
library/rabbitmq:3.12.1-managementf020c06da226
python3.10@3.10.6-1~22.04.2ubuntu1.1
3.10.12-1~22.04.18

Open the chart page →

16,975
platform-apiappscodeVerified publisher2026.9.111 of 3See more

platform-api appscode 2026.9.11

1 of the 3 container images this version deploys carry CVE-2026-15308.

Container imageDigestPackageFixed in
ghcr.io/appscode/gotenberg:8.25f9104080d9a7
python3.13@3.13.5-2
no fix listed

Open the chart page →

37,268
maxscaleappuio2.0.11 of 1See more

maxscale appuio 2.0.1

1 of the 1 container images this version deploys carry CVE-2026-15308.

Container imageDigestPackageFixed in
ghcr.io/appuio/maxscale-docker:6.4.613a01be102b0
python3@3.6.8-48.el8_7.1.rocky.0
0:3.6.8-77.el8_10.rocky.0

Open the chart page →

2,903
appwriteappwrite-helmVerified publisher1.3.21 of 8See more

appwrite appwrite-helm 1.3.2

1 of the 8 container images this version deploys carry CVE-2026-15308.

Container imageDigestPackageFixed in
appwrite/appwrite:1.9.01aaa70127114
python3@3.12.12-r0
3.12.14-r0

Open the chart page →

9,847
arlas-aiasarlas-stackVerified publisher28.8.01 of 22See more

arlas-aias arlas-stack 28.8.0

1 of the 22 container images this version deploys carry CVE-2026-15308.

Container imageDigestPackageFixed in
ghcr.io/developmentseed/titiler:0.22.48ac53eb38393
python@3.12.8-0
3.10.21

Open the chart page →

40,238
arma-reforgerarma-reforger0.5.31 of 8See more

arma-reforger arma-reforger 0.5.3

1 of the 8 container images this version deploys carry CVE-2026-15308.

Container imageDigestPackageFixed in
ghcr.io/brittonhayes/arma-reforger:latest6fde1edc0983
python3.8@3.8.10-0ubuntu1~20.04.6
3.8.10-0ubuntu1~20.04.18+esm7

Open the chart page →

23,353
keystonearzu0.2.293 of 4See more

keystone arzu 0.2.29

3 of the 4 container images this version deploys carry CVE-2026-15308.

Container imageDigestPackageFixed in
library/rabbitmq:3.7-managementb6dd45cc35b3
python3.6@3.6.9-1~18.04ubuntu1.1
3.6.9-1~18.04ubuntu1.13+esm10
openstackhelm/heat:wallaby-ubuntu_focalf728510bab3c
python3.8@3.8.10-0ubuntu1~20.04.8
3.8.10-0ubuntu1~20.04.18+esm7
openstackhelm/keystone:wallaby-ubuntu_focale07d75953d2e
python3.8@3.8.10-0ubuntu1~20.04.8
3.8.10-0ubuntu1~20.04.18+esm7

Open the chart page →

22,568
automatedconfigurationassist-iot-automated-configuration1.0.02 of 5See more

automatedconfiguration assist-iot-automated-configuration 1.0.0

2 of the 5 container images this version deploys carry CVE-2026-15308.

Container imageDigestPackageFixed in
confluentinc/cp-kafka:7.5.1dc9b972db002
python3@3.6.8-51.el8_8.1
0:3.6.8-77.el8_10
confluentinc/cp-zookeeper:7.5.10bec03c1f3ce
python3@3.6.8-51.el8_8.1
0:3.6.8-77.el8_10

Open the chart page →

14,728
dltkvassist-iot-data-integrity-verification0.2.02 of 9See more

dltkv assist-iot-data-integrity-verification 0.2.0

2 of the 9 container images this version deploys carry CVE-2026-15308.

Container imageDigestPackageFixed in
hyperledger/fabric-ca-tools:latest4ce6f43ded2e
python2.7@2.7.12-1ubuntu0~16.04.3
python3.5@3.5.2-2ubuntu0~16.04.4
2.7.12-1ubuntu0~16.04.18+esm22
3.5.2-2ubuntu0~16.04.13+esm25
hyperledger/fabric-couchdb:0.4.15f6c724592abf
python2.7@2.7.12-1ubuntu0~16.04.4
python3.5@3.5.2-2ubuntu0~16.04.5
2.7.12-1ubuntu0~16.04.18+esm22
3.5.2-2ubuntu0~16.04.13+esm25

Open the chart page →

77,706
dltflassist-iot-dlt-based-fl0.2.02 of 9See more

dltfl assist-iot-dlt-based-fl 0.2.0

2 of the 9 container images this version deploys carry CVE-2026-15308.

Container imageDigestPackageFixed in
hyperledger/fabric-ca-tools:latest4ce6f43ded2e
python2.7@2.7.12-1ubuntu0~16.04.3
python3.5@3.5.2-2ubuntu0~16.04.4
2.7.12-1ubuntu0~16.04.18+esm22
3.5.2-2ubuntu0~16.04.13+esm25
hyperledger/fabric-couchdb:0.4.15f6c724592abf
python2.7@2.7.12-1ubuntu0~16.04.4
python3.5@3.5.2-2ubuntu0~16.04.5
2.7.12-1ubuntu0~16.04.18+esm22
3.5.2-2ubuntu0~16.04.13+esm25

Open the chart page →

77,706
idmassist-iot-identity-manager0.1.01 of 2See more

idm assist-iot-identity-manager 0.1.0

1 of the 2 container images this version deploys carry CVE-2026-15308.

Container imageDigestPackageFixed in
assistiot/identity-manager_kc:latest0df4b4fa899a
python3@3.6.8-47.el8_6
0:3.6.8-77.el8_10

Open the chart page →

13,352
openapiassist-iot-open-api-management0.2.21 of 6See more

openapi assist-iot-open-api-management 0.2.2

1 of the 6 container images this version deploys carry CVE-2026-15308.

Container imageDigestPackageFixed in
assistiot/open_api_backend:1.1.230812ba93555
python3.10@3.10.12-1~22.04.3
3.10.12-1~22.04.18

Open the chart page →

18,277
smartorchestratorassist-iot-smart-orchestrator4.0.03 of 14See more

smartorchestrator assist-iot-smart-orchestrator 4.0.0

3 of the 14 container images this version deploys carry CVE-2026-15308.

Container imageDigestPackageFixed in
assistiot/smart-orchestrator_mcs:latest7d6a0d534c7f
python3.11@3.11.2-6
no fix listed
assistiot/smart-orchestrator_scheduler:latest38b003e55ff3
python3.11@3.11.2-6
no fix listed
assistiot/smart-orchestrator_scheduler_mc:latestb1dbe4d62a03
python3.11@3.11.2-6
no fix listed

Open the chart page →

45,363
videoaugmentationassist-iot-video-augmentation0.1.01 of 3See more

videoaugmentation assist-iot-video-augmentation 0.1.0

1 of the 3 container images this version deploys carry CVE-2026-15308.

Container imageDigestPackageFixed in
assistiot/video_augmentation:runner-cpu-lateste5ae539ce2cb
python3.8@3.8.10-0ubuntu1~20.04.7
3.8.10-0ubuntu1~20.04.18+esm7

Open the chart page →

13,913
astrotrekastria0.0.22 of 4See more

astrotrek astria 0.0.2

2 of the 4 container images this version deploys carry CVE-2026-15308.

Container imageDigestPackageFixed in
timescale/timescaledb-ha:pg15-latesta8e3322e1cf9
python3.10@3.10.6-1~22.04.2ubuntu1
3.10.12-1~22.04.18
ghcr.io/astriaorg/astrotrek:0.1.05889bea38e56
python3.11@3.11.2-6+deb12u3
no fix listed

Open the chart page →

32,501
bamboo-agentatlassian-data-centerVerified publisher2.0.151 of 1See more

bamboo-agent atlassian-data-center 2.0.15

1 of the 1 container images this version deploys carry CVE-2026-15308.

Container imageDigestPackageFixed in
atlassian/bamboo-agent-base:12.1.1151c2d7274eef
python3.12@3.12.3-1ubuntu0.16
3.12.3-1ubuntu0.17

Open the chart page →

1,581
nas-appsawesomeVerified publisher2.0.01 of 8See more

nas-apps awesome 2.0.0

1 of the 8 container images this version deploys carry CVE-2026-15308.

Container imageDigestPackageFixed in
wettyoss/wetty:latest7423b3d40ba2
python3@3.14.5-r0
3.14.7-r0

Open the chart page →

7,152
wyoming-piperbdclark-helm-chartsVerified publisher0.1.41 of 1See more

wyoming-piper bdclark-helm-charts 0.1.4

1 of the 1 container images this version deploys carry CVE-2026-15308.

Container imageDigestPackageFixed in
rhasspy/wyoming-piper:2.5.27d39aafac409
python3.13@3.13.5-2+deb13u4
no fix listed

Open the chart page →

1,170
algorand-participationbiatec-repoVerified publisher4.4.11 of 1See more

algorand-participation biatec-repo 4.4.1

1 of the 1 container images this version deploys carry CVE-2026-15308.

Container imageDigestPackageFixed in
scholtz2/algorand-participation-mainnet-extended:4.4.1-stable5aaa5d4ab8b8
python3.10@3.10.12-1~22.04.6
3.10.12-1~22.04.18

Open the chart page →

7,190
algorand-relaybiatec-repoVerified publisher4.4.11 of 1See more

algorand-relay biatec-repo 4.4.1

1 of the 1 container images this version deploys carry CVE-2026-15308.

Container imageDigestPackageFixed in
scholtz2/algorand-relay-mainnet:4.4.1-stablee9af7d8ff6bb
python3.12@3.12.3-1ubuntu0.8
3.12.3-1ubuntu0.17

Open the chart page →

5,059
mx-nodebicarus-labs0.1.01 of 1See more

mx-node bicarus-labs 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-15308.

Container imageDigestPackageFixed in
bicarus/elrond-rosetta:v1.3.50.0b1dab0721e1c
python3.8@3.8.10-0ubuntu1~20.04.6
3.8.10-0ubuntu1~20.04.18+esm7

Open the chart page →

7,956
huebigdata-chartsVerified publisher1.0.41 of 2See more

hue bigdata-charts 1.0.4

1 of the 2 container images this version deploys carry CVE-2026-15308.

Container imageDigestPackageFixed in
gethue/hue:4.10.05702b2c37ff9
python2.7@2.7.17-1~18.04ubuntu1.6
python3.6@3.6.9-1~18.04ubuntu1.4
2.7.17-1~18.04ubuntu1.13+esm15
3.6.9-1~18.04ubuntu1.13+esm10

Open the chart page →

22,891
baserowblackbird-cloudVerified publisher1.0.171 of 6See more

baserow blackbird-cloud 1.0.17

1 of the 6 container images this version deploys carry CVE-2026-15308.

Container imageDigestPackageFixed in
baserow/backend:1.31.1e0b3c8130b91
python3.11@3.11.2-6+deb12u5
no fix listed

Open the chart page →

10,145

Container images carrying it

896 by charts deploying them

A fixed version is listed for 17 of the 18 affected packages.

Container imageDigestPackageFixed inUsed by
mautic/mautic:7-apacheeb8cc73d97e1
python3.11@3.11.2-6+deb12u7
no fix listed
1
mbround18/valheim:3.1.070bd4da591cd
python3.10@3.10.12-1~22.04.9
3.10.12-1~22.04.18
1
mediagis/nominatim:5.3.27923a8e67197
python3.12@3.12.3-1ubuntu0.13
3.12.3-1ubuntu0.17
1
mediagis/nominatim:3.7c15e941485ef
python3.8@3.8.10-0ubuntu1~20.04.5
3.8.10-0ubuntu1~20.04.18+esm7
1
mediagis/nominatim:4.2d0eae7b51374
python3.10@3.10.12-1~22.04.3
3.10.12-1~22.04.18
1
middlewareeng/middleware:0.3.1747d880812f1
python3.11@3.11.2-6+deb12u6
no fix listed
1
mindsdb/mindsdb:latest163011c09299
python3.13@3.13.5-2
no fix listed
1
minio/minio:RELEASE.2022-01-04T07-41-07Z1484c87239ea
python3@3.6.8-41.el8
0:3.6.8-77.el8_10
1
mintproject/model-catalog-fastapi:7dd88dc5bf1fe6a6d4703ea0a077afee45cb256102260d20a21f
python3.11@3.11.2-6+deb12u5
no fix listed
1
mlikiowa/napcat-docker:latest1336a777f9a4
python3.10@3.10.12-1~22.04.6
3.10.12-1~22.04.18
1
moreillon/api-proxy:latestd7d4a5463525
python3.11@3.11.2-6+deb12u6
no fix listed
1
moreillon/food-manager:lateste8fd856e593d
python3.11@3.11.2-6+deb12u6
no fix listed
1
moreillon/group-manager:latest3caa8f710ee0
python3.11@3.11.2-6+deb12u6
no fix listed
1
moreillon/user-manager-mongoose:v5.0.1d2ee0423b797
python3.11@3.11.2-6
no fix listed
1
mshanley80/httpbin2022:latest5b189a70c0fb
python3.8@3.8.10-0ubuntu1~20.04.6
3.8.10-0ubuntu1~20.04.18+esm7
1
muhammedgamal/fp23:latest74b4cd69b6fa
python3.11@3.11.2-6
no fix listed
1
muluder/prograncontrollermcord:0.1.843b597a93da7
python2.7@2.7.12-1ubuntu0~16.04.3
python3.5@3.5.2-2ubuntu0~16.04.4
2.7.12-1ubuntu0~16.04.18+esm22
3.5.2-2ubuntu0~16.04.13+esm25
1
netboxcommunity/netbox:v3.2.83d652dca5351
python3.10@3.10.4-3ubuntu0.1
3.10.12-1~22.04.18
1
netboxcommunity/netbox:v4.6.10-5.0.291b823a05cb5
python3.14@3.14.4-1ubuntu0.1
3.14.4-1ubuntu0.2
1
netdata/netdata:v2.11.0c45c71eb23ff
python3.13@3.13.5-2+deb13u4
no fix listed
1
netskopeprivateaccess/publisher_u22:latest93e2fd164a93
python3.10@3.10.12-1~22.04.16
3.10.12-1~22.04.18
1
nodered/node-red:5.0.410f40d0a83e7
python3@3.14.5-r0
3.14.7-r0
1
nodered/node-red:4.1.2216e7403aab9
python3@3.12.12-r0
3.12.14-r0
1
nousresearch/hermes-agent:v2026.8.27e0df6adebddf
python3.13@3.13.5-2+deb13u4
no fix listed
1
offchainlabs/nitro-node:v3.7.6-c0fe95e9f779fa84b7b
python3.11@3.11.2-6+deb12u6
no fix listed
1
offchainlabs/nitro-node:v3.1.0-7d1d84ce95865866129
python3.11@3.11.2-6+deb12u2
no fix listed
1
oled01/automx2:2025.1.105d3e398e675
python@3.13.5-1
python3.11@3.11.2-6+deb12u6
3.10.21
no fix listed
1
omecproject/mme-exporter:paging-latestbcc5f19fd676
python3.6@3.6.9-1~18.04
3.6.9-1~18.04ubuntu1.13+esm10
1
omecproject/onos-progran:1.0.05715e5648aa0
python2.7@2.7.12-1ubuntu0~16.04.3
python3.5@3.5.2-2ubuntu0~16.04.4
2.7.12-1ubuntu0~16.04.18+esm22
3.5.2-2ubuntu0~16.04.13+esm25
1
omecproject/progran-synchronizer:comac-1.0.0d109a8e57e71
python2.7@2.7.12-1ubuntu0~16.04.4
python3.5@3.5.2-2ubuntu0~16.04.5
2.7.12-1ubuntu0~16.04.18+esm22
3.5.2-2ubuntu0~16.04.13+esm25
1
oneuptime/probe:release6b2d98713711
python3.11@3.11.2-6+deb12u8
no fix listed
1
opea/codegen-ui:1.02bee4eb66f3e
python3.11@3.11.2-6
no fix listed
1
opea/codetrans-ui:1.03ef121f34610
python3.11@3.11.2-6
no fix listed
1
opea/docsum-ui:1.07f854e9bffaf
python3.11@3.11.2-6
no fix listed
1
opea/speecht5:1.0249afad3d268
python3.11@3.11.2-6+deb12u3
no fix listed
1
openbas/caldera-server:5.1.0a277796d9724
python3.11@3.11.2-6+deb12u5
no fix listed
1
opendatacube/explorer:latest120457ffcd69
python3.12@3.12.3-1ubuntu0.8
3.12.3-1ubuntu0.17
1
opendatacube/pipelines:wofs-1.225d810e8504b8
python3.6@3.6.7-1~18.04
3.6.9-1~18.04ubuntu1.13+esm10
1
opendatacube/restcube:latest91870111837c
python3.6@3.6.7-1~18.04
3.6.9-1~18.04ubuntu1.13+esm10
1
opendatacube/wms:latest1b90cdf68831
python3.6@3.6.7-1~18.04
3.6.9-1~18.04ubuntu1.13+esm10
1
opendatacube/wps:latest80df355a660b
python3.10@3.10.12-1~22.04.10
3.10.12-1~22.04.18
1
openebs/rawfile-localpv:v0.15.2a39ef27ea28b
python3.13@3.13.5-2+deb13u4
no fix listed
1
openelevation/open-elevation:latest82fb21612e86
python3.8@3.8.10-0ubuntu1~20.04
3.8.10-0ubuntu1~20.04.18+esm7
1
openkm/openkm-ce:6.3.113bc465a7461b
python3.8@3.8.10-0ubuntu1~20.04.5
3.8.10-0ubuntu1~20.04.18+esm7
1
openmined/syft-backend:0.9.5b72f74a68b32
python-3.12@3.12.9-r1
3.12.14-r2
1
opennode/waldur-mastermind:8.1.24c82b15d9042
python3.13@3.13.5-2+deb13u4
no fix listed
1
openproject/hocuspocus:release-338001b288dc1359dfb5
python3.11@3.11.2-6+deb12u6
no fix listed
1
openstackhelm/heat:wallaby-ubuntu_focalf728510bab3c
python3.8@3.8.10-0ubuntu1~20.04.8
3.8.10-0ubuntu1~20.04.18+esm7
1
openstackhelm/keystone:wallaby-ubuntu_focale07d75953d2e
python3.8@3.8.10-0ubuntu1~20.04.8
3.8.10-0ubuntu1~20.04.18+esm7
1
openthread/otbr:latestf307f59f6432
python2.7@2.7.17-1~18.04ubuntu1.11
python3.6@3.6.9-1~18.04ubuntu1.12
2.7.17-1~18.04ubuntu1.13+esm15
3.6.9-1~18.04ubuntu1.13+esm10
1

syft 1.42.1 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.