StackRadarChart IndexLive demo

CVE-2026-16517

Low

Advisory

Published 21 Jul 2026In the index since 6 Sept 2026

Severity: Low; worst across findings
CVSS: 2.9; base score, highest
EPSS: 0.001; 0th percentile
CISA KEV: Not listed; no confirmed exploitation
Charts affected: 63; of 17,787 indexed, latest versions
Container images: 54; deployed by those charts
Fix available: 1 of 1; affected package

The matching OSV records carry no description.

Carried by container images the latest versions of 63 of 17,787 indexed charts deploy, on 54 images.

Affected package	Affected versions	Fixed in	Images
libarchivedeb	3.1.2-11ubuntu0.16.04.3, 3.4.0-2ubuntu1, 3.4.0-2ubuntu1.2, 3.4.0-2ubuntu1.5+19 more	3.6.2-1+deb12u5	54

OSV records: DEBIAN-CVE-2026-16517 UBUNTU-CVE-2026-16517

Charts affected

63 by stars

Chart

Latest

Affected images

Radar Score

paperless-ngxoli-the-dev

1 of 1 See more

paperless-ngx oli-the-dev 1.1.1

1 of the 1 container images this version deploys carry CVE-2026-16517.

Container image	Digest	Package	Fixed in
ghcr.io/paperless-ngx/paperless-ngx :3.1.3	aa810a36942c	libarchive@3.7.4-4+deb13u1	no fix listed

Open the chart page →

4,644

checkmkrtomik-helm-charts

1 of 1 See more

checkmk rtomik-helm-charts 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-16517.

Container image	Digest	Package	Fixed in
checkmk/check-mk-community :2.5.0p6	c11b422210c4	libarchive@3.6.0-1ubuntu1.7	no fix listed

Open the chart page →

7,491

paperless-ngxrtomik-helm-charts

1 of 1 See more

paperless-ngx rtomik-helm-charts 0.0.5

1 of the 1 container images this version deploys carry CVE-2026-16517.

Container image	Digest	Package	Fixed in
ghcr.io/paperless-ngx/paperless-ngx :2.20.3	57ad9565bff3	libarchive@3.7.4-4	no fix listed

Open the chart page →

10,492

stirling-pdfrubxkube

1 of 1 See more

stirling-pdf rubxkube 0.1.2

1 of the 1 container images this version deploys carry CVE-2026-16517.

Container image	Digest	Package	Fixed in
ghcr.io/stirling-tools/stirling-pdf :2.14.3	3b3670fce70b	libarchive@3.7.2-2ubuntu0.6	no fix listed

Open the chart page →

6,293

photoprismschoolguys-helmcharts

1 of 1 See more

photoprism schoolguys-helmcharts 0.3.8

1 of the 1 container images this version deploys carry CVE-2026-16517.

Container image	Digest	Package	Fixed in
photoprism/photoprism :260601	650c6ad5a651	libarchive@3.8.5-1ubuntu2.1	no fix listed

Open the chart page →

10,429

infisicalsinextra

1 of 1 See more

infisical sinextra 0.6.0

1 of the 1 container images this version deploys carry CVE-2026-16517.

Container image	Digest	Package	Fixed in
infisical/infisical :v0.165.6	02082bf13163	libarchive@3.7.4-4+deb13u1	no fix listed

Open the chart page →

2,954

servicexssl-hep

1 of 16 See more

servicex ssl-hep 1.8.5

1 of the 16 container images this version deploys carry CVE-2026-16517.

Container image	Digest	Package	Fixed in
sslhep/servicex-did-finder-xrootd :v1.8.5	c284442b44e3	libarchive@3.7.4-4+deb13u1	no fix listed

Open the chart page →

65,130

stash-boxswuuper-github

1 of 2 See more

stash-box swuuper-github 0.1.1

1 of the 2 container images this version deploys carry CVE-2026-16517.

Container image	Digest	Package	Fixed in
stashapp/stash-box :latest	a534c8afdf39	libarchive@3.7.2-2ubuntu0.4	no fix listed

Open the chart page →

8,251

owncloudth-charts

1 of 1 See more

owncloud th-charts 0.2.1

1 of the 1 container images this version deploys carry CVE-2026-16517.

Container image	Digest	Package	Fixed in
owncloud/server :10.15.0	51d9b74fc2a8	libarchive@3.4.0-2ubuntu1.2	no fix listed

Open the chart page →

10,065

opencloudunxwares

1 of 13 See more

opencloud unxwares 0.2.3

1 of the 13 container images this version deploys carry CVE-2026-16517.

Container image	Digest	Package	Fixed in
apache/tika :2.9.2.1-full	ae0b86d3c4d0	libarchive@3.7.2-2	no fix listed

Open the chart page →

45,392

myweatherhelmwebapp1

1 of 8 See more

myweatherhelm webapp1 1.3.50

1 of the 8 container images this version deploys carry CVE-2026-16517.

Container image	Digest	Package	Fixed in
mcr.microsoft.com/azure-sql-edge :latest	902628a8be89	libarchive@3.4.0-2ubuntu1.2	no fix listed

Open the chart page →

9,225

myweatherhelm-schedulingwebapp1

1 of 9 See more

myweatherhelm-scheduling webapp1 1.3.92

1 of the 9 container images this version deploys carry CVE-2026-16517.

Container image	Digest	Package	Fixed in
mcr.microsoft.com/azure-sql-edge :latest	902628a8be89	libarchive@3.4.0-2ubuntu1.2	no fix listed

Open the chart page →

9,225

zoo-project-druzoo-project

1 of 6 See more

zoo-project-dru zoo-project 0.10.4

1 of the 6 container images this version deploys carry CVE-2026-16517.

Container image	Digest	Package	Fixed in
zooproject/zoo-project :dru-19f3c4eed7c9ec9d1f0375bbe59f9d204a42bd3a	9a507cb7e2dd	libarchive@3.6.0-1ubuntu1.8	no fix listed

Open the chart page →

7,916

Container images carrying it

54 by charts deploying them

A fixed version is listed for 1 of the 1 affected package.

Container image	Digest	Package	Fixed in	Used by
mcr.microsoft.com/mssql/server :latest	4bab24f36c1e	libarchive@3.7.2-2ubuntu0.8	no fix listed	1
mcr.microsoft.com/mssql/server :2022-latest	ba4c8329f48f	libarchive@3.6.0-1ubuntu1.7	no fix listed	1
mcr.microsoft.com/mssql/server :2025-CU5-ubuntu-24.04	cee0f4db03b5	libarchive@3.7.2-2ubuntu0.6	no fix listed	1
registry.gitlab.com/infinitydon/registry/open5gs-aio :v2.2.2	f6385712935f	libarchive@3.4.0-2ubuntu1	no fix listed	1