StackRadar

CVE-2026-1703

Low

Advisory

Published 2 Feb 2026In the index since 5 Sept 2026
Severity
Low
worst across findings
CVSS
2.0
base score, highest
EPSS
0.004
34th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
1,241
of 17,787 indexed, latest versions
Container images
1,190
deployed by those charts
Fix available
1 of 2
affected packages

pip Path Traversal vulnerability

Carried by container images the latest versions of 1,241 of 17,787 indexed charts deploy, on 1,190 images.

Affected packageAffected versionsFixed inImages
pippypi1.5.4, 8.1.1, 8.1.2, 9.0.0+63 more26.01,183
python-pipdeb1.5.4-1ubuntu4, 8.1.1-2ubuntu0.4, 9.0.1-2.3~ubuntu1, 9.0.1-2.3~ubuntu1.18.04.1+25 moreno fix listed141
OSV records
DEBIAN-CVE-2026-1703GHSA-6vgw-5pg2-w6jpUBUNTU-CVE-2026-1703
Also known as
PYSEC-2026-1796

Charts affected

1,241 by stars
ChartLatestAffected imagesRadar Score
azure-app-exporterazure-app-exporterVerified publisher0.4.21 of 2See more

azure-app-exporter azure-app-exporter 0.4.2

1 of the 2 container images this version deploys carry CVE-2026-1703.

Container imageDigestPackageFixed in
ghcr.io/dodevops/azure-app-exporter/azure-app-exporter:0.1.38b472877847f5
pip@21.2.4
26.0

Open the chart page →

1,790
ambassadorazureorkestra6.7.91 of 2See more

ambassador azureorkestra 6.7.9

1 of the 2 container images this version deploys carry CVE-2026-1703.

Container imageDigestPackageFixed in
datawire/aes:1.13.62beb65062c8b
pip@20.2.4
26.0

Open the chart page →

5,521
aks-helloworldazure-sample0.1.11 of 1See more

aks-helloworld azure-sample 0.1.1

1 of the 1 container images this version deploys carry CVE-2026-1703.

Container imageDigestPackageFixed in
neilpeterson/aks-helloworld:v1fb47732ef36b
pip@9.0.1
26.0

Open the chart page →

4,270
azure-voteazure-sample0.1.11 of 2See more

azure-vote azure-sample 0.1.1

1 of the 2 container images this version deploys carry CVE-2026-1703.

Container imageDigestPackageFixed in
neilpeterson/azure-vote-front:v384062718347c
pip@9.0.1
26.0

Open the chart page →

5,238
azure-vote-osbaazure-sample0.1.01 of 1See more

azure-vote-osba azure-sample 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-1703.

Container imageDigestPackageFixed in
neilpeterson/azure-vote-front:v384062718347c
pip@9.0.1
26.0

Open the chart page →

4,270
osba-container-instances-demoazure-sample0.1.01 of 1See more

osba-container-instances-demo azure-sample 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-1703.

Container imageDigestPackageFixed in
neilpeterson/osba-container-instances-demo:latest6527b05d5d03
pip@9.0.1
26.0

Open the chart page →

3,212
osba-cosmos-mongodb-demoazure-sample0.1.01 of 1See more

osba-cosmos-mongodb-demo azure-sample 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-1703.

Container imageDigestPackageFixed in
neilpeterson/osba-cosmos-mongodb-demo:latestf4940e84ed05
pip@9.0.1
26.0

Open the chart page →

2,904
osba-mysql-demoazure-sample0.1.01 of 1See more

osba-mysql-demo azure-sample 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-1703.

Container imageDigestPackageFixed in
neilpeterson/osba-mysql-demo:latest5859d68a6c9f
pip@9.0.2
26.0

Open the chart page →

2,895
osba-storage-demoazure-sample0.1.01 of 1See more

osba-storage-demo azure-sample 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-1703.

Container imageDigestPackageFixed in
neilpeterson/osba-storage-demo:latest29d229ab446e
pip@9.0.1
26.0

Open the chart page →

3,425
osba-text-analytics-demoazure-sample0.1.01 of 1See more

osba-text-analytics-demo azure-sample 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-1703.

Container imageDigestPackageFixed in
neilpeterson/osba-text-analytics-demo:latest969af3cb8466
pip@10.0.1
26.0

Open the chart page →

3,089
twitter-sentimentazure-sample0.1.03 of 3See more

twitter-sentiment azure-sample 0.1.0

3 of the 3 container images this version deploys carry CVE-2026-1703.

Container imageDigestPackageFixed in
neilpeterson/chart-tweet:latest64fd8dab075f
pip@9.0.1
26.0
neilpeterson/get-tweet:v28b645ac1a23e
pip@10.0.1
26.0
neilpeterson/process-tweet:latest39ce9f92e899
pip@10.0.1
26.0

Open the chart page →

11,833
backstage-pyactionsbackstage-pyactionsVerified publisher0.1.01 of 1See more

backstage-pyactions backstage-pyactions 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-1703.

Container imageDigestPackageFixed in
mawad98/backstage-pyactions:demo99422c56a274
pip@24.0
26.0

Open the chart page →

2,750
balance-registrationbalance-registration0.1.01 of 4See more

balance-registration balance-registration 0.1.0

1 of the 4 container images this version deploys carry CVE-2026-1703.

Container imageDigestPackageFixed in
conduction/balance-registration-varnish:dev07c44005da9d
pip@9.0.1
26.0

Open the chart page →

8,408
pvc-exporterbalihb-pvc-exporterVerified publisher0.2.42 of 2See more

pvc-exporter balihb-pvc-exporter 0.2.4

2 of the 2 container images this version deploys carry CVE-2026-1703.

Container imageDigestPackageFixed in
balihb/block-pvc-scanner:0.2.45b95e1cf1158
pip@21.2.4
26.0
balihb/pod-pvc-mapping:0.2.4ee48e79f5d76
pip@21.2.4
26.0

Open the chart page →

2,765
bookinfobasictechno0.1.01 of 6See more

bookinfo basictechno 0.1.0

1 of the 6 container images this version deploys carry CVE-2026-1703.

Container imageDigestPackageFixed in
istio/examples-bookinfo-productpage-v1:1.17.06668bcf42ef0
pip@20.1.1
26.0

Open the chart page →

20,785
mealiebdclark-helm-chartsVerified publisher0.1.151 of 1See more

mealie bdclark-helm-charts 0.1.15

1 of the 1 container images this version deploys carry CVE-2026-1703.

Container imageDigestPackageFixed in
ghcr.io/mealie-recipes/mealie:v3.25.16066c29eca95
pip@25.0.1
26.0

Open the chart page →

4,042
wyoming-piperbdclark-helm-chartsVerified publisher0.1.41 of 1See more

wyoming-piper bdclark-helm-charts 0.1.4

1 of the 1 container images this version deploys carry CVE-2026-1703.

Container imageDigestPackageFixed in
rhasspy/wyoming-piper:2.5.27d39aafac409
pip@25.1.1
python-pip@25.1.1+dfsg-1
26.0
no fix listed

Open the chart page →

1,176
helm-samplebehnambm-helm-chart1.0.12 of 3See more

helm-sample behnambm-helm-chart 1.0.1

2 of the 3 container images this version deploys carry CVE-2026-1703.

Container imageDigestPackageFixed in
behnambm/docker-sample:v1bd3ad88afff9
pip@23.0.1
26.0
library/mysql:8b3b90af2a655
pip@25.3
26.0

Open the chart page →

2,738
pagesberrutig-pages1.0.01 of 3See more

pages berrutig-pages 1.0.0

1 of the 3 container images this version deploys carry CVE-2026-1703.

Container imageDigestPackageFixed in
library/mysql:8.07dcddc01f13b
pip@25.3
26.0

Open the chart page →

20,233
mx-nodebicarus-labs0.1.01 of 1See more

mx-node bicarus-labs 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-1703.

Container imageDigestPackageFixed in
bicarus/elrond-rosetta:v1.3.50.0b1dab0721e1c
pip@20.0.2
python-pip@20.0.2-5ubuntu1.6
26.0
no fix listed

Open the chart page →

8,004
huebigdata-chartsVerified publisher1.0.41 of 2See more

hue bigdata-charts 1.0.4

1 of the 2 container images this version deploys carry CVE-2026-1703.

Container imageDigestPackageFixed in
gethue/hue:4.10.05702b2c37ff9
pip@21.1.2
python-pip@9.0.1-2.3~ubuntu1.18.04.5
26.0
no fix listed

Open the chart page →

22,916
baserowblackbird-cloudVerified publisher1.0.171 of 6See more

baserow blackbird-cloud 1.0.17

1 of the 6 container images this version deploys carry CVE-2026-1703.

Container imageDigestPackageFixed in
baserow/backend:1.31.1e0b3c8130b91
pip@23.0.1
python-pip@23.0.1+dfsg-1
26.0
no fix listed

Open the chart page →

10,171
istio-bookinfobookinfo1.2.21 of 6See more

istio-bookinfo bookinfo 1.2.2

1 of the 6 container images this version deploys carry CVE-2026-1703.

Container imageDigestPackageFixed in
istio/examples-bookinfo-productpage-v1:1.15.00a5eb4795952
pip@19.1.1
26.0

Open the chart page →

18,998
colosseumbook-k8sinfra-v21.0.181 of 5See more

colosseum book-k8sinfra-v2 1.0.18

1 of the 5 container images this version deploys carry CVE-2026-1703.

Container imageDigestPackageFixed in
sysnet4admin/colosseum-rwd:log74ded2d92f07
pip@23.0.1
26.0

Open the chart page →

26,266
jenkinsbook-k8sinfra-v25.1.121 of 2See more

jenkins book-k8sinfra-v2 5.1.12

1 of the 2 container images this version deploys carry CVE-2026-1703.

Container imageDigestPackageFixed in
kiwigrid/k8s-sidecar:1.26.2e271016441af
pip@24.0
26.0

Open the chart page →

7,627
kube-prometheus-stackbook-k8sinfra-v265.5.11 of 6See more

kube-prometheus-stack book-k8sinfra-v2 65.5.1

1 of the 6 container images this version deploys carry CVE-2026-1703.

Container imageDigestPackageFixed in
kiwigrid/k8s-sidecar:1.28.04166a019eeaf
pip@24.2
26.0

Open the chart page →

6,035
puppetboardbootcVerified publisher0.1.41 of 1See more

puppetboard bootc 0.1.4

1 of the 1 container images this version deploys carry CVE-2026-1703.

Container imageDigestPackageFixed in
bootc/puppetboard:1.1.0f1383295e7be
pip@19.2.3
26.0

Open the chart page →

1,292
flaresolverrbrandan-schmitz-helm-chartsVerified publisher1.4.01 of 1See more

flaresolverr brandan-schmitz-helm-charts 1.4.0

1 of the 1 container images this version deploys carry CVE-2026-1703.

Container imageDigestPackageFixed in
flaresolverr/flaresolverr:v3.5.0139dfee1c6f8
pip@24.0
26.0

Open the chart page →

27,282
pagesbrian-pages1.0.01 of 3See more

pages brian-pages 1.0.0

1 of the 3 container images this version deploys carry CVE-2026-1703.

Container imageDigestPackageFixed in
library/mysql:8.07dcddc01f13b
pip@25.3
26.0

Open the chart page →

20,233
pagesbrixton-mayuribhavsar23-pages1.0.01 of 3See more

pages brixton-mayuribhavsar23-pages 1.0.0

1 of the 3 container images this version deploys carry CVE-2026-1703.

Container imageDigestPackageFixed in
library/mysql:8.07dcddc01f13b
pip@25.3
26.0

Open the chart page →

20,233
pagesbrixton-pages1.0.01 of 3See more

pages brixton-pages 1.0.0

1 of the 3 container images this version deploys carry CVE-2026-1703.

Container imageDigestPackageFixed in
library/mysql:8.07dcddc01f13b
pip@25.3
26.0

Open the chart page →

20,233
couchpotatobryanalves0.3.01 of 1See more

couchpotato bryanalves 0.3.0

1 of the 1 container images this version deploys carry CVE-2026-1703.

Container imageDigestPackageFixed in
linuxserver/couchpotato:75e576ee-ls32c4d2766b9eb7
pip@19.3.1
26.0

Open the chart page →

2,018
medusabryanalves0.1.01 of 1See more

medusa bryanalves 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-1703.

Container imageDigestPackageFixed in
linuxserver/medusa:v0.3.9-ls340a5f5114128b
pip@19.2.3
26.0

Open the chart page →

147
sickchillbryanalves0.3.01 of 1See more

sickchill bryanalves 0.3.0

1 of the 1 container images this version deploys carry CVE-2026-1703.

Container imageDigestPackageFixed in
linuxserver/sickchill:v2020.08.07-1-ls40e48b479c1891
pip@19.3.1
26.0

Open the chart page →

2,505
sickragebryanalves0.1.01 of 1See more

sickrage bryanalves 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-1703.

Container imageDigestPackageFixed in
bryanalves/sickrage:latest42f0a130001d
pip@9.0.0
26.0

Open the chart page →

923
frigatebryopsida0.2.11 of 2See more

frigate bryopsida 0.2.1

1 of the 2 container images this version deploys carry CVE-2026-1703.

Container imageDigestPackageFixed in
blakeblackshear/frigate:0.11.18330b0a265b8
pip@20.3.4
26.0

Open the chart page →

2,573
pagescamden-pages1.0.01 of 3See more

pages camden-pages 1.0.0

1 of the 3 container images this version deploys carry CVE-2026-1703.

Container imageDigestPackageFixed in
library/mysql:8.07dcddc01f13b
pip@25.3
26.0

Open the chart page →

20,233
camerahubcamerahub0.10.211 of 2See more

camerahub camerahub 0.10.21

1 of the 2 container images this version deploys carry CVE-2026-1703.

Container imageDigestPackageFixed in
camerahub/camerahub:0.36.23a5af37dd6e1b
pip@22.0.4
26.0

Open the chart page →

2,507
bucket-clonercamptocamp31.0.41 of 1See more

bucket-cloner camptocamp3 1.0.4

1 of the 1 container images this version deploys carry CVE-2026-1703.

Container imageDigestPackageFixed in
camptocamp/bucket-cloner:latestacfafc308d88
pip@21.2.1
26.0

Open the chart page →

4,518
ekorrecamptocamp30.1.11 of 1See more

ekorre camptocamp3 0.1.1

1 of the 1 container images this version deploys carry CVE-2026-1703.

Container imageDigestPackageFixed in
camptocamp/ekorre:0.1.035c91d5fda04
pip@20.0.2
26.0

Open the chart page →

3,891
pghoardcamptocamp35.8.11 of 1See more

pghoard camptocamp3 5.8.1

1 of the 1 container images this version deploys carry CVE-2026-1703.

Container imageDigestPackageFixed in
camptocamp/pghoard:10bff736b15623
pip@18.1
26.0

Open the chart page →

2,813
prometheus-operatorcamptocamp35.15.11 of 5See more

prometheus-operator camptocamp3 5.15.1

1 of the 5 container images this version deploys carry CVE-2026-1703.

Container imageDigestPackageFixed in
kiwigrid/k8s-sidecar:0.0.16899ccd0b1f54
pip@19.0.3
26.0

Open the chart page →

2,490
snow-webhookcamptocamp31.0.01 of 1See more

snow-webhook camptocamp3 1.0.0

1 of the 1 container images this version deploys carry CVE-2026-1703.

Container imageDigestPackageFixed in
camptocamp/snow-webhook:latest2924b43dbf40
pip@18.1
26.0

Open the chart page →

1,310
tetragon-policy-buildercamptocamp30.1.11 of 1See more

tetragon-policy-builder camptocamp3 0.1.1

1 of the 1 container images this version deploys carry CVE-2026-1703.

Container imageDigestPackageFixed in
ghcr.io/camptocamp/tetragon-policy-builder:master0e99f12bb040
pip@24.3.1
26.0

Open the chart page →

10,318
pagescarina-pages1.0.01 of 3See more

pages carina-pages 1.0.0

1 of the 3 container images this version deploys carry CVE-2026-1703.

Container imageDigestPackageFixed in
library/mysql:8.07dcddc01f13b
pip@25.3
26.0

Open the chart page →

20,233
pagescarmel-pages-dell1.0.01 of 3See more

pages carmel-pages-dell 1.0.0

1 of the 3 container images this version deploys carry CVE-2026-1703.

Container imageDigestPackageFixed in
library/mysql:8.07dcddc01f13b
pip@25.3
26.0

Open the chart page →

20,233
castai-hibernatecastaiVerified publisher0.2.121 of 1See more

castai-hibernate castai 0.2.12

1 of the 1 container images this version deploys carry CVE-2026-1703.

Container imageDigestPackageFixed in
castai/hibernate:v0.14da62858c8381
pip@23.0.1
26.0

Open the chart page →

1,158
temporalcastaiVerified publisher0.54.21 of 14See more

temporal castai 0.54.2

1 of the 14 container images this version deploys carry CVE-2026-1703.

Container imageDigestPackageFixed in
temporalio/admin-tools:1.26.237e2e33dbd7b
pip@24.0
26.0

Open the chart page →

16,197
catalyst-agentscatalyst-agents0.1.301 of 18See more

catalyst-agents catalyst-agents 0.1.30

1 of the 18 container images this version deploys carry CVE-2026-1703.

Container imageDigestPackageFixed in
alpine/k8s:1.32.3eec354133193
pip@25.0.1
26.0

Open the chart page →

14,865
tsoragecetic0.4.111 of 8See more

tsorage cetic 0.4.11

1 of the 8 container images this version deploys carry CVE-2026-1703.

Container imageDigestPackageFixed in
confluentinc/cp-kafka:5.0.1c87b1c07fb53
pip@8.1.2
26.0

Open the chart page →

12,018

Container images carrying it

1,190 by charts deploying them

A fixed version is listed for 1 of the 2 affected packages.

Container imageDigestPackageFixed inUsed by
tachyongroup/mlflow-deployment-controller-ui:mlflow-controller-0.1.8f4f7fabe1037
pip@21.2.4
26.0
1
taemon1337/image-api:0.0.1247bc1dc4f07
pip@21.2.4
26.0
1
taigaio/taiga-back:6.4.29f97323cc150
pip@21.2.4
26.0
1
taigaio/taiga-protected:6.4.036318831b3e7
pip@21.2.4
26.0
1
tautulli/tautulli:v2.7.7c4da15f058ea
pip@21.2.4
26.0
1
teknas09/bird-pod:latest12a1fa85c4aa
pip@24.0
26.0
1
temporalio/admin-tools:1.22.4258958fe2ff2
pip@23.1.2
26.0
1
temporalio/admin-tools:1.15.135034611d981
pip@20.3.4
26.0
1
temporalio/admin-tools:1.26.237e2e33dbd7b
pip@24.0
26.0
1
temporalio/admin-tools:1.22.0836af062af30
pip@23.1.2
26.0
1
temporalio/admin-tools:1.25.0-tctl-1.18.1-cli-1.0.0cda4901bab53
pip@23.3.1
26.0
1
tenableofficial/nessus:latestc88e43fe1a8c
pip@9.0.3
26.0
1
tensorflow/tensorflow:1.6.0-devel1e3172090703
pip@9.0.1
26.0
1
thecloudspark/app-vote:1.0c7da7417a86a
pip@21.1.1
26.0
1
thelande/kasa_exporter:v0.2.3a1fdb8baa152
pip@24.0
26.0
1
thijsvanloef/palworld-server-docker:v2.7.1401d3eb5c053
pip@25.1.1
python-pip@25.1.1+dfsg-1
26.0
no fix listed
1
thijsvanloef/palworld-server-docker:v2.5.0b4ac9ee22483
pip@25.1.1
python-pip@25.1.1+dfsg-1
26.0
no fix listed
1
thingsboard/toolbox:1.13.01bd61a0da6d3
pip@23.1.2
26.0
1
thongngo3301/stakefish:latesta341af5976e3
pip@23.2.1
26.0
1
timescale/timescaledb-ha:pg16d7db8f1085a3
pip@22.0.2
python-pip@22.0.2+dfsg-1ubuntu0.7
26.0
no fix listed
1
timescale/timescaledb-ha:pg17.2-ts2.18.2e8d0a9cc3db5
pip@22.0.2
python-pip@22.0.2+dfsg-1ubuntu0.5
26.0
no fix listed
1
timothyclarke/wptagent:2018-01-2322c41e5ca7e2
pip@8.1.1
python-pip@8.1.1-2ubuntu0.4
26.0
no fix listed
1
tobiasbp/db-backup:0.0.314bee6e33a26
pip@20.1.1
26.0
1
tock/gen-ai-orchestrator-server:25.10.7abf7880e0449
pip@24.0
26.0
1
tomsajan/netio-exporter:0.0.5fb61907707b8
pip@24.0
26.0
1
tomsquest/docker-radicale:3.1.1.04759cc353a1d
pip@21.3.1
26.0
1
tomsquest/docker-radicale:3.6.1.0a594c624c5a6
pip@25.0.1
26.0
1
treskon/portrait-web-setup:DEV-latesta475d80e4ecf
pip@24.3.1
26.0
1
trungkien210493/icinga2-report:v1.7.12cc8c3763c4c
pip@20.1.1
26.0
1
tussanakorndev/kube-pod-alerts:1.0.5216fdadadf9a
pip@25.0.1
26.0
1
ubcctlt/barman:v2.19cbbbbc8ae16b
pip@22.0.4
26.0
1
vabene1111/recipes:2.3.50f8d061895e9
pip@25.3
26.0
1
vabene1111/recipes:1.0.5.2ec4e9e2905b0
pip@21.3.1
26.0
1
vcnngr/telegram-login:latest1a849a997b6d
pip@24.0
26.0
1
vcnngr/telegram-rebot:latest30f1f05e57a6
pip@24.0
26.0
1
veecode/devportalc443520aebf7
pip@22.3.1
26.0
1
viadee/docker-hub-rate-limit-exporter:version-1.52e27e3b3ee56
pip@21.0
26.0
1
voltha/voltha-cli:1.6.0c4e41e92f046
pip@8.1.1
python-pip@8.1.1-2ubuntu0.4
26.0
no fix listed
1
voltha/voltha-netconf:1.6.037f80524c207
pip@8.1.1
python-pip@8.1.1-2ubuntu0.4
26.0
no fix listed
1
voltha/voltha-ofagent:1.6.09ee8c1f4428c
pip@8.1.1
python-pip@8.1.1-2ubuntu0.4
26.0
no fix listed
1
voltha/voltha-tester:1.7.0655c3048a602
pip@8.1.1
python-pip@8.1.1-2ubuntu0.4
26.0
no fix listed
1
voltha/voltha-voltha:1.6.0ff596b62de59
pip@8.1.1
python-pip@8.1.1-2ubuntu0.4
26.0
no fix listed
1
wallarm/aih-scanner:2.7.11f1cb26db1f5b
pip@25.1.1
python-pip@25.1.1+dfsg-1
26.0
no fix listed
1
wallarm/sysbindings:v0.9.9c527865df85d
pip@22.2.1
26.0
1
wazuh/wazuh-manager:4.11.11da5c38c6a78
pip@23.3.2
26.0
1
wazuh/wazuh-manager:4.4.121994f40e0da
pip@23.0.1
26.0
1
wazuh/wazuh-manager:4.14.45a065930682d
pip@23.3.2
26.0
1
wazuh/wazuh-manager:4.14.3f09282d281f6
pip@23.3.2
26.0
1
weblate/weblate:3.11.3-182848df56ecd
pip@18.1
26.0
1
wiktorn/overpass-api:latest9bb5f4a9b54c
pip@23.0.1
python-pip@23.0.1+dfsg-1
26.0
no fix listed
1

syft 1.42.1 · advisories as of 15 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.