StackRadar

CVE-2026-15308

High

Advisory

Published 9 Jul 2026In the index since 5 Sept 2026
Severity
High
worst across findings
CVSS
8.7
base score, highest
EPSS
0.006
49th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
869
of 17,781 indexed, latest versions
Container images
899
deployed by those charts
Fix available
17 of 18
affected packages

Incremental HTMLParser feed() allows CPU-exhaustion DoS via repeated unterminated markup declarations

Carried by container images the latest versions of 869 of 17,781 indexed charts deploy, on 899 images.

Affected packageAffected versionsFixed inImages
python-3.14apk3.14.2-r2, 3.14.4-r2, 3.14.6-r03.14.6-r46
pythonbitnami3.11.11-0, 3.12.8-0, 3.13.5-13.10.213
python-3.13apk3.13.7-r0, 3.13.10-r0, 3.13.12-r23.13.14-r33
python-3.12apk3.12.0-r1, 3.12.9-r13.12.14-r22
python3.11deb3.11.0~rc1-1~22.04, 3.11.0~rc1-1~22.04.1, 3.11.2-6, 3.11.2-6+deb12u2+6 more3.11.0~rc1-1~22.04.1+esm2181
python3rpm3.6.8-15.1.el8, 3.6.8-23.el8, 3.6.8-24.el8_2, 3.6.8-24.el8_2.2+28 more0:3.6.8-77.el8_10, 0:3.6.8-77.el8_10.rocky.0, 3.12.14-1136
python3.8deb3.8.5-1~20.04, 3.8.5-1~20.04.2, 3.8.5-1~20.04.3, 3.8.10-0ubuntu1~20.04+11 more3.8.10-0ubuntu1~20.04.18+esm7100
python3.12deb3.12.3-1, 3.12.3-1ubuntu0.2, 3.12.3-1ubuntu0.3, 3.12.3-1ubuntu0.4+10 more3.12.3-1ubuntu0.1787
python3.10deb3.10.4-3, 3.10.4-3ubuntu0.1, 3.10.6-1~22.04, 3.10.6-1~22.04.1+16 more3.10.12-1~22.04.1880
python3apk3.11.12-r1, 3.12.8-r1, 3.12.9-r0, 3.12.10-r0+7 more3.12.14-r0, 3.14.7-r075
python3.13deb3.13.5-2, 3.13.5-2+deb13u2, 3.13.5-2+deb13u4no fix listed73
python3.9rpm3.9.16-1.el9, 3.9.16-1.el9_2.1, 3.9.16-1.el9_2.2, 3.9.18-1.el9_3.1+15 more0:3.9.25-7.el9_8.255
python3.6deb3.6.6-1~18.04, 3.6.7-1~18.04, 3.6.9-1~18.04, 3.6.9-1~18.04ubuntu1+7 more3.6.9-1~18.04ubuntu1.13+esm1044
python2.7deb2.7.6-8, 2.7.6-8ubuntu0.4, 2.7.12-1ubuntu0~16.04.2, 2.7.12-1ubuntu0~16.04.3+9 more2.7.6-8ubuntu0.6+esm30, 2.7.12-1ubuntu0~16.04.18+esm22, 2.7.17-1~18.04ubuntu1.13+esm15, 2.7.18-13ubuntu1.5+esm943
python3.5deb3.5.2-2ubuntu0~16.04.1, 3.5.2-2ubuntu0~16.04.4, 3.5.2-2ubuntu0~16.04.5, 3.5.2-2ubuntu0~16.04.93.5.2-2ubuntu0~16.04.13+esm2525
python3.14deb3.14.4-1, 3.14.4-1ubuntu0.13.14.4-1ubuntu0.28
python3.4deb3.4.0-2ubuntu1, 3.4.3-1ubuntu1~14.04.5, 3.4.3-1ubuntu1~14.04.6, 3.4.3-1ubuntu1~14.04.73.4.3-1ubuntu1~14.04.7+esm217
python3.12rpm3.12.5-2.el9_5.20:3.12.13-3.el9_8.11
OSV records
ALPINE-CVE-2026-15308BIT-python-2026-15308CGA-2v5h-4pjx-m2vpCGA-7fq5-cfqp-92mfCGA-8wxj-3m53-wmwrDEBIAN-CVE-2026-15308RHSA-2026:39320RHSA-2026:39771RHSA-2026:39798RLSA-2026:39320RLSA-2026:39798UBUNTU-CVE-2026-15308AZL-92271
Also known as
BIT-libpython-2026-15308, BIT-python-min-2026-15308, CGA-qq9v-hh37-fr79, CGA-vh53-c7h5-695j, CGA-xm2p-hf9g-qw3m, PSF-2026-33, RHSA-2026:50064, RHSA-2026:50065, RHSA-2026:50816, USN-8744-1

Charts affected

869 by stars
ChartLatestAffected imagesRadar Score
piepieVerified publisher0.11.11 of 1See more

pie pie 0.11.1

1 of the 1 container images this version deploys carry CVE-2026-15308.

Container imageDigestPackageFixed in
ghcr.io/topolvm/pie:0.18.0aa467443e407
python3.10@3.10.12-1~22.04.17
3.10.12-1~22.04.18

Open the chart page →

2,100
firehose-ethereumpinaxVerified publisher0.3.21 of 2See more

firehose-ethereum pinax 0.3.2

1 of the 2 container images this version deploys carry CVE-2026-15308.

Container imageDigestPackageFixed in
ghcr.io/streamingfast/firehose-ethereum:v2.12.4-gethd7bdfa7b41da
python3.12@3.12.3-1ubuntu0.7
3.12.3-1ubuntu0.17

Open the chart page →

7,062
subgraph-oraclepinaxVerified publisher0.0.11 of 1See more

subgraph-oracle pinax 0.0.1

1 of the 1 container images this version deploys carry CVE-2026-15308.

Container imageDigestPackageFixed in
ghcr.io/graphprotocol/availability-oracle:sha-28312fd472a25038957
python3.11@3.11.2-6+deb12u2
no fix listed

Open the chart page →

11,347
substreams-sink-kvpinaxVerified publisher0.0.41 of 1See more

substreams-sink-kv pinax 0.0.4

1 of the 1 container images this version deploys carry CVE-2026-15308.

Container imageDigestPackageFixed in
ghcr.io/streamingfast/substreams-sink-kv:v2.3.026953ec68d5d
python3.8@3.8.10-0ubuntu1~20.04.13
3.8.10-0ubuntu1~20.04.18+esm7

Open the chart page →

6,641
substreams-sink-nooppinaxVerified publisher0.0.31 of 1See more

substreams-sink-noop pinax 0.0.3

1 of the 1 container images this version deploys carry CVE-2026-15308.

Container imageDigestPackageFixed in
ghcr.io/streamingfast/substreams-sink-noop:v1.4.0d7c43c3135c6
python3.8@3.8.10-0ubuntu1~20.04.13
3.8.10-0ubuntu1~20.04.18+esm7

Open the chart page →

6,587
substreams-tier-2pinaxVerified publisher0.0.81 of 1See more

substreams-tier-2 pinax 0.0.8

1 of the 1 container images this version deploys carry CVE-2026-15308.

Container imageDigestPackageFixed in
ghcr.io/streamingfast/firehose-ethereum:v2.12.489969b78fb07
python3.12@3.12.3-1ubuntu0.7
3.12.3-1ubuntu0.17

Open the chart page →

4,889
pingdom-operatorpingdom-operator0.0.201 of 1See more

pingdom-operator pingdom-operator 0.0.20

1 of the 1 container images this version deploys carry CVE-2026-15308.

Container imageDigestPackageFixed in
ghcr.io/nefelim4ag/pingdom-operator:0.0.15f8c7afdcf439
python3.11@3.11.2-6+deb12u2
no fix listed

Open the chart page →

11,923
planectlplanectlVerified publisher0.7.01 of 10See more

planectl planectl 0.7.0

1 of the 10 container images this version deploys carry CVE-2026-15308.

Container imageDigestPackageFixed in
library/node:208f693eaa7e0a
python3.11@3.11.2-6+deb12u6
no fix listed

Open the chart page →

25,934
gitlab-runner-operatorpnnl-miscscripts0.1.61 of 1See more

gitlab-runner-operator pnnl-miscscripts 0.1.6

1 of the 1 container images this version deploys carry CVE-2026-15308.

Container imageDigestPackageFixed in
pnnlmiscscripts/gitlab-runner-operator:0.1.3-1155131891741
python3@3.6.8-15.1.el8
0:3.6.8-77.el8_10

Open the chart page →

11,151
tenant-namespace-operatorpnnl-miscscripts0.1.281 of 1See more

tenant-namespace-operator pnnl-miscscripts 0.1.28

1 of the 1 container images this version deploys carry CVE-2026-15308.

Container imageDigestPackageFixed in
pnnlmiscscripts/tenant-namespace-operator:0.1.24-18af4b7551d40
python3@3.6.8-51.el8_8.1
0:3.6.8-77.el8_10

Open the chart page →

12,754
pod-birdspod-birds0.1.01 of 1See more

pod-birds pod-birds 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-15308.

Container imageDigestPackageFixed in
teknas09/bird-pod:latest12a1fa85c4aa
python3.11@3.11.2-6
no fix listed

Open the chart page →

12,912
Practica_4_helmpr04helm0.1.02 of 7See more

Practica_4_helm pr04helm 0.1.0

2 of the 7 container images this version deploys carry CVE-2026-15308.

Container imageDigestPackageFixed in
codeurjc/server:v1.0310bea5b1ee7
python3@3.6.8-48.el8_7
0:3.6.8-77.el8_10
library/rabbitmq:3.9-management8a279e9396a8
python3.10@3.10.12-1~22.04.3
3.10.12-1~22.04.18

Open the chart page →

27,558
practica-helmpractica-helm0.1.01 of 7See more

practica-helm practica-helm 0.1.0

1 of the 7 container images this version deploys carry CVE-2026-15308.

Container imageDigestPackageFixed in
library/rabbitmq:3-management-alpine606d8c0d6b3c
python3@3.12.12-r0
3.12.14-r0

Open the chart page →

28,484
priceapp-chartpriceapp0.1.01 of 1See more

priceapp-chart priceapp 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-15308.

Container imageDigestPackageFixed in
ildarmukhametzyanov/priceapp:0.115d23720a3ee
python3.11@3.11.2-6
no fix listed

Open the chart page →

8,169
prismeai-appsprismeai0.7.11 of 4See more

prismeai-apps prismeai 0.7.1

1 of the 4 container images this version deploys carry CVE-2026-15308.

Container imageDigestPackageFixed in
registry.gitlab.com/prisme.ai/prisme.ai/prisme.ai-infra:latestb1198ea741d1
python3@3.12.12-r0
3.12.14-r0

Open the chart page →

2,751
prismeai-coreprismeai1.12.11 of 7See more

prismeai-core prismeai 1.12.1

1 of the 7 container images this version deploys carry CVE-2026-15308.

Container imageDigestPackageFixed in
registry.gitlab.com/prisme.ai/prisme.ai/prisme.ai-infra:latestb1198ea741d1
python3@3.12.12-r0
3.12.14-r0

Open the chart page →

3,270
game-serverpvillaverdeVerified publisher1.0.51 of 1See more

game-server pvillaverde 1.0.5

1 of the 1 container images this version deploys carry CVE-2026-15308.

Container imageDigestPackageFixed in
ghcr.io/itzg/minecraft-server:latestc1a267d9ed6d
python3.12@3.12.3-1ubuntu0.16
3.12.3-1ubuntu0.17

Open the chart page →

4,253
pyredispyredis-helm0.1.01 of 2See more

pyredis pyredis-helm 0.1.0

1 of the 2 container images this version deploys carry CVE-2026-15308.

Container imageDigestPackageFixed in
avinash263/pyredis263:latestaa2b8727f1a6
python3.11@3.11.2-6
no fix listed

Open the chart page →

14,537
mychartpythonweb0.1.01 of 1See more

mychart pythonweb 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-15308.

Container imageDigestPackageFixed in
qichenxu4pd/pythonexample:1.0f3a8502bc21b
python3.11@3.11.2-6
no fix listed

Open the chart page →

12,566
mypythonpythonweb0.1.01 of 1See more

mypython pythonweb 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-15308.

Container imageDigestPackageFixed in
qichenxu4pd/pythonexample:1.0f3a8502bc21b
python3.11@3.11.2-6
no fix listed

Open the chart page →

12,566
cupsr2dlan-helm-chartsVerified publisher0.1.01 of 1See more

cups r2dlan-helm-charts 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-15308.

Container imageDigestPackageFixed in
anujdatar/cups:25.07.01685df04a643b
python3.11@3.11.2-6+deb12u6
no fix listed

Open the chart page →

7,685
rada-platformrada-platform0.1.03 of 7See more

rada-platform rada-platform 0.1.0

3 of the 7 container images this version deploys carry CVE-2026-15308.

Container imageDigestPackageFixed in
apache/airflow:2.10.2-python3.9ce90bdc3d2af
python3.11@3.11.2-6+deb12u3
no fix listed
trinodb/trino:45038c6f24ab1a4
python3.9@3.9.18-3.el9
0:3.9.25-7.el9_8.2
ghcr.io/projectnessie/nessie:0.92.19efe3c74d55f
python3.9@3.9.18-3.el9_4.1
0:3.9.25-7.el9_8.2

Open the chart page →

21,211
kubecostradar-baseVerified publisher1.0.01 of 7See more

kubecost radar-base 1.0.0

1 of the 7 container images this version deploys carry CVE-2026-15308.

Container imageDigestPackageFixed in
gcr.io/kubecost1/kubecost-modeling:v0.1.22a461dc5cb96a
python3.9@3.9.21-1.el9_5
0:3.9.25-7.el9_8.2

Open the chart page →

9,355
radar-cp-ksql-serverradar-baseVerified publisher0.0.21 of 2See more

radar-cp-ksql-server radar-base 0.0.2

1 of the 2 container images this version deploys carry CVE-2026-15308.

Container imageDigestPackageFixed in
confluentinc/cp-ksqldb-server:7.6.08ec46c27982f
python3@3.6.8-56.el8_9.3
0:3.6.8-77.el8_10

Open the chart page →

5,269
radar-kafkaradar-baseVerified publisher0.4.11 of 2See more

radar-kafka radar-base 0.4.1

1 of the 2 container images this version deploys carry CVE-2026-15308.

Container imageDigestPackageFixed in
quay.io/strimzi/operator:0.46.0ac434a48ac2b
python3.9@3.9.21-1.el9_5
0:3.9.25-7.el9_8.2

Open the chart page →

4,219
strimzi-kafka-operatorradar-baseVerified publisher0.46.01 of 1See more

strimzi-kafka-operator radar-base 0.46.0

1 of the 1 container images this version deploys carry CVE-2026-15308.

Container imageDigestPackageFixed in
quay.io/strimzi/operator:0.46.0ac434a48ac2b
python3.9@3.9.21-1.el9_5
0:3.9.25-7.el9_8.2

Open the chart page →

1,951
rawfile-localpvrawfile0.15.21 of 6See more

rawfile-localpv rawfile 0.15.2

1 of the 6 container images this version deploys carry CVE-2026-15308.

Container imageDigestPackageFixed in
openebs/rawfile-localpv:v0.15.2a39ef27ea28b
python3.13@3.13.5-2+deb13u4
no fix listed

Open the chart page →

2,769
javareact-java0.1.01 of 1See more

java react-java 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-15308.

Container imageDigestPackageFixed in
project2team4/react:latest3ff031a08887
python3.8@3.8.10-0ubuntu1~20.04.4
3.8.10-0ubuntu1~20.04.18+esm7

Open the chart page →

15,520
ibm-mongodb-enterprise-helmredhat0.3.01 of 1See more

ibm-mongodb-enterprise-helm redhat 0.3.0

1 of the 1 container images this version deploys carry CVE-2026-15308.

Container imageDigestPackageFixed in
ibmcom/ibm-enterprise-mongodb-ppc64le:4.4d28bf361327a
python3@3.6.8-31.el8
0:3.6.8-77.el8_10

Open the chart page →

12,248
ansible-automation-platformredhat-cop0.0.91 of 1See more

ansible-automation-platform redhat-cop 0.0.9

1 of the 1 container images this version deploys carry CVE-2026-15308.

Container imageDigestPackageFixed in
quay.io/openshift/origin-cli:4.7464a3af4dfe0
python3@3.6.8-39.el8_4.1
0:3.6.8-77.el8_10

Open the chart page →

15,291
argocd-operatorredhat-cop1.2.21 of 1See more

argocd-operator redhat-cop 1.2.2

1 of the 1 container images this version deploys carry CVE-2026-15308.

Container imageDigestPackageFixed in
quay.io/openshift/origin-cli:4.7464a3af4dfe0
python3@3.6.8-39.el8_4.1
0:3.6.8-77.el8_10

Open the chart page →

15,291
ploigosredhat-cop0.0.91 of 2See more

ploigos redhat-cop 0.0.9

1 of the 2 container images this version deploys carry CVE-2026-15308.

Container imageDigestPackageFixed in
quay.io/openshift/origin-cli:4.66722d5041b47
python3@3.6.8-24.el8_2
0:3.6.8-77.el8_10

Open the chart page →

11,437
sonatype-nexusredhat-cop1.1.131 of 2See more

sonatype-nexus redhat-cop 1.1.13

1 of the 2 container images this version deploys carry CVE-2026-15308.

Container imageDigestPackageFixed in
quay.io/openshift/origin-jenkins-agent-base:latestc241c971aef8
python3@3.6.8-47.el8_6.4
0:3.6.8-77.el8_10

Open the chart page →

16,047
stackrox-chartredhat-cop0.0.101 of 1See more

stackrox-chart redhat-cop 0.0.10

1 of the 1 container images this version deploys carry CVE-2026-15308.

Container imageDigestPackageFixed in
quay.io/rht-labs/stack-do500:3.0.86ba82beff18e
python3@3.6.8-37.el8
0:3.6.8-77.el8_10

Open the chart page →

29,227
redminerestic-pvc-backupVerified publisher0.2.61 of 1See more

redmine restic-pvc-backup 0.2.6

1 of the 1 container images this version deploys carry CVE-2026-15308.

Container imageDigestPackageFixed in
library/redmine:6.1.3-trixief474a901faec
python3.13@3.13.5-2+deb13u4
no fix listed

Open the chart page →

4,240
esphomeretsamedocVerified publisher2026.2.51 of 1See more

esphome retsamedoc 2026.2.5

1 of the 1 container images this version deploys carry CVE-2026-15308.

Container imageDigestPackageFixed in
esphome/esphome:2024.3.09ab8cc88b28c
python3.11@3.11.2-6
no fix listed

Open the chart page →

7,431
httpbinrgnu1.0.01 of 1See more

httpbin rgnu 1.0.0

1 of the 1 container images this version deploys carry CVE-2026-15308.

Container imageDigestPackageFixed in
citizenstig/httpbin:latestb81c818ccb86
python3.5@3.5.2-2ubuntu0~16.04.1
3.5.2-2ubuntu0~16.04.13+esm25

Open the chart page →

11,422
rhbk-neurofacerhbk-neurofaceVerified publisher1.0.02 of 4See more

rhbk-neuroface rhbk-neuroface 1.0.0

2 of the 4 container images this version deploys carry CVE-2026-15308.

Container imageDigestPackageFixed in
quay.io/maximilianopizarro/neuroface-backend:latestcba71dc08c8a
python3.9@3.9.25-7.el9_8
0:3.9.25-7.el9_8.2
quay.io/maximilianopizarro/neuroface-frontend:latestdcf24040cc77
python3.9@3.9.25-2.el9_7
0:3.9.25-7.el9_8.2

Open the chart page →

3,781
kresusrm3lVerified publisher0.2.11 of 3See more

kresus rm3l 0.2.1

1 of the 3 container images this version deploys carry CVE-2026-15308.

Container imageDigestPackageFixed in
bnjbvr/kresus:0.22.137e216b182c8
python3.11@3.11.2-6+deb12u4
no fix listed

Open the chart page →

15,591
reviewboardrock8sVerified publisher0.0.11 of 3See more

reviewboard rock8s 0.0.1

1 of the 3 container images this version deploys carry CVE-2026-15308.

Container imageDigestPackageFixed in
beanbag/reviewboard:latest6b840f546e1c
python3.10@3.10.12-1~22.04.17
python3.11@3.11.0~rc1-1~22.04.1
3.10.12-1~22.04.18
3.11.0~rc1-1~22.04.1+esm2

Open the chart page →

6,084
argocd-certificate-refreshromholdings0.10.81 of 1See more

argocd-certificate-refresh romholdings 0.10.8

1 of the 1 container images this version deploys carry CVE-2026-15308.

Container imageDigestPackageFixed in
quay.io/devtron/argocd-cert-refresh:v102b6db27eaf3d
python3.10@3.10.6-1~22.04.2
3.10.12-1~22.04.18

Open the chart page →

12,949
devtron-enterpriseromholdings48.0.02 of 28See more

devtron-enterprise romholdings 48.0.0

2 of the 28 container images this version deploys carry CVE-2026-15308.

Container imageDigestPackageFixed in
quay.io/devtron/devtron-utils:dup-chart-repo-v1.1.095d6f0e05636
python3.11@3.11.2-6
no fix listed
quay.io/devtron/notifier:9804331c-372-39294709c7da19c5a
python3.11@3.11.2-6+deb12u6
no fix listed

Open the chart page →

68,240
devtron-operatorromholdings0.23.31 of 11See more

devtron-operator romholdings 0.23.3

1 of the 11 container images this version deploys carry CVE-2026-15308.

Container imageDigestPackageFixed in
quay.io/devtron/devtron-utils:dup-chart-repo-v1.1.095d6f0e05636
python3.11@3.11.2-6
no fix listed

Open the chart page →

32,902
dgraphromholdings0.0.201 of 1See more

dgraph romholdings 0.0.20

1 of the 1 container images this version deploys carry CVE-2026-15308.

Container imageDigestPackageFixed in
dgraph/dgraph:v21.12.03b55ea83fffe
python3.8@3.8.10-0ubuntu1~20.04
3.8.10-0ubuntu1~20.04.18+esm7

Open the chart page →

11,909
checkmkrtomik-helm-chartsVerified publisher0.1.01 of 1See more

checkmk rtomik-helm-charts 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-15308.

Container imageDigestPackageFixed in
checkmk/check-mk-community:2.5.0p6c11b422210c4
python3.10@3.10.12-1~22.04.15
3.10.12-1~22.04.18

Open the chart page →

7,436
karakeeprtomik-helm-chartsVerified publisher0.0.11 of 3See more

karakeep rtomik-helm-charts 0.0.1

1 of the 3 container images this version deploys carry CVE-2026-15308.

Container imageDigestPackageFixed in
ghcr.io/karakeep-app/karakeep:0.26.0f575a34ed3f8
python3@3.12.11-r0
3.12.14-r0

Open the chart page →

5,338
stirling-pdfrubxkubeVerified publisher0.1.21 of 1See more

stirling-pdf rubxkube 0.1.2

1 of the 1 container images this version deploys carry CVE-2026-15308.

Container imageDigestPackageFixed in
ghcr.io/stirling-tools/stirling-pdf:2.14.33b3670fce70b
python3.12@3.12.3-1ubuntu0.12
3.12.3-1ubuntu0.17

Open the chart page →

6,207
uptime-kumarubxkubeVerified publisher1.2.11 of 1See more

uptime-kuma rubxkube 1.2.1

1 of the 1 container images this version deploys carry CVE-2026-15308.

Container imageDigestPackageFixed in
louislam/uptime-kuma:2.4.091e963bfda56
python3.11@3.11.2-6+deb12u7
no fix listed

Open the chart page →

30,219
runwhen-localrunwhen-contribVerified publisher0.6.171 of 3See more

runwhen-local runwhen-contrib 0.6.17

1 of the 3 container images this version deploys carry CVE-2026-15308.

Container imageDigestPackageFixed in
ghcr.io/runwhen-contrib/runwhen-local:0.12.0533ce58c6e02
python3.13@3.13.5-2+deb13u4
no fix listed

Open the chart page →

3,707
rybbitrybbit-helm1.3.01 of 7See more

rybbit rybbit-helm 1.3.0

1 of the 7 container images this version deploys carry CVE-2026-15308.

Container imageDigestPackageFixed in
alpine/k8s:1.32.12048f8d9c8cc7
python3@3.12.12-r0
3.14.7-r0

Open the chart page →

5,819

Container images carrying it

899 by charts deploying them

A fixed version is listed for 17 of the 18 affected packages.

Container imageDigestPackageFixed inUsed by
oomk8s/readiness-check:2.0.2875814cc853d
python2.7@2.7.12-1ubuntu0~16.04.4
python3.5@3.5.2-2ubuntu0~16.04.5
2.7.12-1ubuntu0~16.04.18+esm22
3.5.2-2ubuntu0~16.04.13+esm25
11
library/rabbitmq:3.9-management8a279e9396a8
python3.10@3.10.12-1~22.04.3
3.10.12-1~22.04.18
10
codeurjc/server:v1.0310bea5b1ee7
python3@3.6.8-48.el8_7
0:3.6.8-77.el8_10
8
library/rabbitmq:3.13-management:3-managemente582c0bc7766
python3.12@3.12.3-1ubuntu0.9
3.12.3-1ubuntu0.17
8
public.ecr.aws/aktosecurity/confluentinc-cp-kafka:8.2.2:8.2.2-1-ubi98e01c0305844
python3.9@3.9.25-7.el9_8
0:3.9.25-7.el9_8.2
7
oomk8s/readiness-check:2.0.07daa08b81954
python2.7@2.7.12-1ubuntu0~16.04.3
python3.5@3.5.2-2ubuntu0~16.04.4
2.7.12-1ubuntu0~16.04.18+esm22
3.5.2-2ubuntu0~16.04.13+esm25
6
quay.io/devtron/devtron-utils:dup-chart-repo-v1.1.095d6f0e05636
python3.11@3.11.2-6
no fix listed
6
hyperledger/fabric-ca-tools:latest4ce6f43ded2e
python2.7@2.7.12-1ubuntu0~16.04.3
python3.5@3.5.2-2ubuntu0~16.04.4
2.7.12-1ubuntu0~16.04.18+esm22
3.5.2-2ubuntu0~16.04.13+esm25
4
hyperledger/fabric-couchdb:0.4.15f6c724592abf
python2.7@2.7.12-1ubuntu0~16.04.4
python3.5@3.5.2-2ubuntu0~16.04.5
2.7.12-1ubuntu0~16.04.18+esm22
3.5.2-2ubuntu0~16.04.13+esm25
4
jaegertracing/jaeger-cassandra-schema:1.53.0d48d6dab2c65
python3.10@3.10.12-1~22.04.3
3.10.12-1~22.04.18
4
library/rabbitmq:3.13-management-alpine:3-management-alpine606d8c0d6b3c
python3@3.12.12-r0
3.12.14-r0
4
library/rabbitmq:3.11-managementc3f70098e01d
python3.10@3.10.12-1~22.04.3
3.10.12-1~22.04.18
4
mastercloudapps/server:v2.23f3d24dfe2686
python3@3.6.8-48.el8_7
0:3.6.8-77.el8_10
4
quay.io/strimzi/operator:0.37.052f376e64b9b
python3@3.6.8-51.el8_8.1
0:3.6.8-77.el8_10
4
cloudve/cloudlaunch-server:latest4a3d7fae90bb
python3.8@3.8.10-0ubuntu1~20.04.1
3.8.10-0ubuntu1~20.04.18+esm7
3
dgraph/dgraph:v21.12.03b55ea83fffe
python3.8@3.8.10-0ubuntu1~20.04
3.8.10-0ubuntu1~20.04.18+esm7
3
library/node:ltsbe23f54a88d3
python3.11@3.11.2-6+deb12u8
no fix listed
3
omecproject/cdn-video-repo:1.0.0:remote-v3d59ccb138ffb
python2.7@2.7.12-1ubuntu0~16.04.4
2.7.12-1ubuntu0~16.04.18+esm22
3
prompve/prometheus-pve-exporter:3.10.04867684c0a93
python3@3.14.5-r0
3.14.7-r0
3
selenium/hub:3.141.5902f251d48d5f
python3.8@3.8.10-0ubuntu1~20.04
3.8.10-0ubuntu1~20.04.18+esm7
3
quay.io/devtron/argocd-cert-refresh:v102b6db27eaf3d
python3.10@3.10.6-1~22.04.2
3.10.12-1~22.04.18
3
quay.io/devtron/notifier:9804331c-372-39294709c7da19c5a
python3.11@3.11.2-6+deb12u6
no fix listed
3
quay.io/openshift/origin-oauth-proxy:4.14a7dff785d821
python3@3.6.8-47.el8_6.2
0:3.6.8-77.el8_10
3
alpine/k8s:1.32.12048f8d9c8cc7
python3@3.12.12-r0
3.14.7-r0
2
apache/tika:2.9.2.1-fullae0b86d3c4d0
python3.12@3.12.3-1
3.12.3-1ubuntu0.17
2
cfssl/cfssl:latest:v1.6.5c9018c2ddf0b
python3.11@3.11.2-6
no fix listed
2
confluentinc/cp-kafka:6.2.11-1-ubi8ac776fad95a5
python3@3.6.8-51.el8_8.1
0:3.6.8-77.el8_10
2
confluentinc/cp-zookeeper:latest7610a50b13e7
python3@3.6.8-69.el8_10
0:3.6.8-77.el8_10
2
confluentinc/cp-zookeeper:6.2.11-1-ubi8cae577096489
python3@3.6.8-51.el8_8.1
0:3.6.8-77.el8_10
2
freeradius/freeradius-server:3.0.2121c8bfa904d8
python2.7@2.7.17-1~18.04
2.7.17-1~18.04ubuntu1.13+esm15
2
gjeanmart/safe-ganache-node:latest926264c8f2d1
python3.11@3.11.2-6
no fix listed
2
gotenberg/gotenberg:8.36.087c16b9f3642
python3.13@3.13.5-2+deb13u4
no fix listed
2
gotenberg/gotenberg:8:8.37.0f29984bd1e22
python3.13@3.13.5-2+deb13u4
no fix listed
2
homebridge/homebridge:latest77c685a40911
python3.12@3.12.3-1ubuntu0.16
3.12.3-1ubuntu0.17
2
hookiesolutions/webhookie:latest0629694246ba
python3.8@3.8.10-0ubuntu1~20.04.1
3.8.10-0ubuntu1~20.04.18+esm7
2
istio/kubectl:1.5.10dbb7726d1bf0
python3.6@3.6.9-1~18.04ubuntu1.1
3.6.9-1~18.04ubuntu1.13+esm10
2
istio/proxyv2:1.10.3a78b7a165744
python3.6@3.6.9-1~18.04ubuntu1.4
3.6.9-1~18.04ubuntu1.13+esm10
2
library/cassandra:3.11.65aa8400b4b3b
python2.7@2.7.17-1~18.04ubuntu1.1
2.7.17-1~18.04ubuntu1.13+esm15
2
library/cassandra:4.1.37cbcec0086ac
python3.10@3.10.12-1~22.04.3
3.10.12-1~22.04.18
2
library/nextcloud:34.0.3:34.0.3-apacheb97df9e0e1ee
python3.13@3.13.5-2+deb13u4
no fix listed
2
library/python:3.7eedf63967cdb
python3.11@3.11.2-6
no fix listed
2
library/rabbitmq:4.1.0-management935b3f84c1e4
python3.12@3.12.3-1ubuntu0.5
3.12.3-1ubuntu0.17
2
library/rabbitmq:3.12.1-managementf020c06da226
python3.10@3.10.6-1~22.04.2ubuntu1.1
3.10.12-1~22.04.18
2
library/redmine:6.1.3-trixief474a901faec
python3.13@3.13.5-2+deb13u4
no fix listed
2
lightstep/collector:2021-01-26_23-02-36Z11c5569aaf3b
python3.5@3.5.2-2ubuntu0~16.04.5
3.5.2-2ubuntu0~16.04.13+esm25
2
louislam/uptime-kuma:2.5.4917318f9d7be
python3.11@3.11.2-6+deb12u7
no fix listed
2
louislam/uptime-kuma:2.3.29aeb4e51d038
python3.11@3.11.2-6+deb12u6
no fix listed
2
louislam/uptime-kuma:2.5.0a8610b3b4c38
python3.11@3.11.2-6+deb12u7
no fix listed
2
memgraph/memgraph:3.13.0a1dc375774ed
python3.12@3.12.3-1ubuntu0.16
3.12.3-1ubuntu0.17
2
minio/operator:v4.3.754393e03f3b2
python3@3.6.8-41.el8
0:3.6.8-77.el8_10
2

syft 1.42.1 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.