StackRadar

CVE-2026-17084

Medium

Advisory

Published 18 Aug 2026In the index since 5 Sept 2026
Severity
Medium
worst across findings
CVSS
6.0
base score, highest
EPSS
0.006
47th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
676
of 17,787 indexed, latest versions
Container images
653
deployed by those charts
Fix available
4 of 15
affected packages

stringprep.map_table_b2() deviates from RFC 3454 Table B.2

Carried by container images the latest versions of 676 of 17,787 indexed charts deploy, on 653 images.

Affected packageAffected versionsFixed inImages
python3.11deb3.11.0~rc1-1~22.04, 3.11.0~rc1-1~22.04.1, 3.11.2-6, 3.11.2-6+deb12u2+6 moreno fix listed181
python3.8deb3.8.5-1~20.04, 3.8.5-1~20.04.2, 3.8.5-1~20.04.3, 3.8.10-0ubuntu1~20.04+11 moreno fix listed100
python3.12deb3.12.3-1, 3.12.3-1ubuntu0.1, 3.12.3-1ubuntu0.2, 3.12.3-1ubuntu0.3+12 moreno fix listed89
python3.10deb3.10.4-3, 3.10.4-3ubuntu0.1, 3.10.6-1~22.04, 3.10.6-1~22.04.1+16 moreno fix listed80
python3.13deb3.13.5-2, 3.13.5-2+deb13u2, 3.13.5-2+deb13u4, 3.13.5-2+deb13u5+1 more3.13.5-2+e3476
python2.7deb2.7.6-8, 2.7.6-8ubuntu0.4, 2.7.12-1ubuntu0~16.04.2, 2.7.12-1ubuntu0~16.04.3+12 moreno fix listed54
python3.6deb3.6.6-1~18.04, 3.6.7-1~18.04, 3.6.9-1~18.04, 3.6.9-1~18.04ubuntu1+7 moreno fix listed44
python3.5deb3.5.2-2ubuntu0~16.04.1, 3.5.2-2ubuntu0~16.04.4, 3.5.2-2ubuntu0~16.04.5, 3.5.2-2ubuntu0~16.04.9no fix listed25
python3.14deb3.14.4-1, 3.14.4-1ubuntu0.1, 3.14.4-1ubuntu0.2no fix listed9
python-3.13apk3.13.7-r0, 3.13.10-r0, 3.13.12-r2, 3.13.15-r1+2 more3.13.15-r68
python-3.14apk3.14.2-r2, 3.14.4-r2, 3.14.6-r0, 3.14.7-r1+1 more3.14.7-r68
python3.4deb3.4.0-2ubuntu1, 3.4.3-1ubuntu1~14.04.5, 3.4.3-1ubuntu1~14.04.6, 3.4.3-1ubuntu1~14.04.7no fix listed7
python-3.12apk3.12.0-r1, 3.12.9-r1, 3.12.14-r23.12.14-r64
pythonbitnami3.11.11-0, 3.12.8-0, 3.13.5-1no fix listed3
python3rpm3.12.9-13.azl3no fix listed1
OSV records
BIT-python-2026-17084CGA-64p9-h54m-42mhCGA-84hv-hfvq-hmvjCGA-frwv-vx6c-v3pwDEBIAN-CVE-2026-17084UBUNTU-CVE-2026-17084AZL-96870ECHO-fca2-5d51-7d6d
Also known as
BIT-libpython-2026-17084, BIT-python-min-2026-17084, CGA-9rhv-6g64-g4wj, CGA-f85r-7wwr-mwx5, CGA-w566-m8x9-2f9r, PSF-2026-37

Charts affected

676 by stars
ChartLatestAffected imagesRadar Score
ethereumcloudnativeapp1.0.01 of 3See more

ethereum cloudnativeapp 1.0.0

1 of the 3 container images this version deploys carry CVE-2026-17084.

Container imageDigestPackageFixed in
ethereumex/eth-stats-dashboard:v0.0.1a7603aa8df4c
python2.7@2.7.12-1ubuntu0~16.04.2
no fix listed

Open the chart page →

27,434
guestbookcloudnativeapp0.2.01 of 3See more

guestbook cloudnativeapp 0.2.0

1 of the 3 container images this version deploys carry CVE-2026-17084.

Container imageDigestPackageFixed in
resouer/redis-slave:v2e2f198b49ba7
python2.7@2.7.6-8
python3.4@3.4.0-2ubuntu1
no fix listed
no fix listed

Open the chart page →

36,866
hlf-couchdbcloudnativeapp1.0.61 of 1See more

hlf-couchdb cloudnativeapp 1.0.6

1 of the 1 container images this version deploys carry CVE-2026-17084.

Container imageDigestPackageFixed in
hyperledger/fabric-couchdb:0.4.10c65891b6c237
python2.7@2.7.12-1ubuntu0~16.04.3
python3.5@3.5.2-2ubuntu0~16.04.4
no fix listed
no fix listed

Open the chart page →

34,014
seleniumcloudnativeapp1.0.81 of 1See more

selenium cloudnativeapp 1.0.8

1 of the 1 container images this version deploys carry CVE-2026-17084.

Container imageDigestPackageFixed in
selenium/hub:3.141.5902f251d48d5f
python3.8@3.8.10-0ubuntu1~20.04
no fix listed

Open the chart page →

11,831
webpagetest-agentcloudnativeapp0.2.01 of 1See more

webpagetest-agent cloudnativeapp 0.2.0

1 of the 1 container images this version deploys carry CVE-2026-17084.

Container imageDigestPackageFixed in
timothyclarke/wptagent:2018-01-2322c41e5ca7e2
python2.7@2.7.12-1ubuntu0~16.04.3
python3.5@3.5.2-2ubuntu0~16.04.4
no fix listed
no fix listed

Open the chart page →

77,798
cloudlaunchcloudve0.6.01 of 5See more

cloudlaunch cloudve 0.6.0

1 of the 5 container images this version deploys carry CVE-2026-17084.

Container imageDigestPackageFixed in
cloudve/cloudlaunch-server:latest4a3d7fae90bb
python3.8@3.8.10-0ubuntu1~20.04.1
no fix listed

Open the chart page →

12,505
cloudlaunch-servercloudve0.2.01 of 5See more

cloudlaunch-server cloudve 0.2.0

1 of the 5 container images this version deploys carry CVE-2026-17084.

Container imageDigestPackageFixed in
cloudve/cloudlaunch-server:latest4a3d7fae90bb
python3.8@3.8.10-0ubuntu1~20.04.1
no fix listed

Open the chart page →

12,176
cloudlaunchservercloudve0.6.01 of 4See more

cloudlaunchserver cloudve 0.6.0

1 of the 4 container images this version deploys carry CVE-2026-17084.

Container imageDigestPackageFixed in
cloudve/cloudlaunch-server:latest4a3d7fae90bb
python3.8@3.8.10-0ubuntu1~20.04.1
no fix listed

Open the chart page →

11,640
galaxykubemancloudve2.10.11 of 7See more

galaxykubeman cloudve 2.10.1

1 of the 7 container images this version deploys carry CVE-2026-17084.

Container imageDigestPackageFixed in
galaxy/cloudman-server:lateste5c265fe9fcd
python3.8@3.8.10-0ubuntu1~20.04.5
no fix listed

Open the chart page →

16,117
galaxy-stablecloudve2.0.02 of 5See more

galaxy-stable cloudve 2.0.0

2 of the 5 container images this version deploys carry CVE-2026-17084.

Container imageDigestPackageFixed in
galaxy/galaxy-init:v18.010267bad550e6
python2.7@2.7.6-8ubuntu0.4
python3.4@3.4.3-1ubuntu1~14.04.6
no fix listed
no fix listed
galaxy/galaxy-stable:v18.018e577a626dfd
python2.7@2.7.6-8ubuntu0.4
python3.4@3.4.3-1ubuntu1~14.04.6
no fix listed
no fix listed

Open the chart page →

70,968
janisterminalcloudve0.1.01 of 2See more

janisterminal cloudve 0.1.0

1 of the 2 container images this version deploys carry CVE-2026-17084.

Container imageDigestPackageFixed in
cloudve/janis-terminal:latestaf56e77ca587
python3.6@3.6.9-1~18.04ubuntu1
no fix listed

Open the chart page →

14,285
pulsarcloudve0.2.01 of 2See more

pulsar cloudve 0.2.0

1 of the 2 container images this version deploys carry CVE-2026-17084.

Container imageDigestPackageFixed in
galaxy/pulsar-kubernetes:0.15.7e50a890e24c9
python3.11@3.11.2-6+deb12u5
no fix listed

Open the chart page →

5,994
terminalmancloudve0.3.41 of 1See more

terminalman cloudve 0.3.4

1 of the 1 container images this version deploys carry CVE-2026-17084.

Container imageDigestPackageFixed in
cloudve/ttyd:latestd79c1c5881c0
python3.6@3.6.9-1~18.04ubuntu1
no fix listed

Open the chart page →

13,170
pbcore-utilcluster-deploy0.0.11 of 1See more

pbcore-util cluster-deploy 0.0.1

1 of the 1 container images this version deploys carry CVE-2026-17084.

Container imageDigestPackageFixed in
ghcr.io/wgbh-mla/pbcore-util:pr-66e04659a3baa
python3.11@3.11.2-6+deb12u6
no fix listed

Open the chart page →

8,806
ms-emails-grpccodedesignplus-chartsVerified publisher0.0.241 of 1See more

ms-emails-grpc codedesignplus-charts 0.0.24

1 of the 1 container images this version deploys carry CVE-2026-17084.

Container imageDigestPackageFixed in
codedesignplus/ms-emails-grpc:lateste336012bc781
python3.11@3.11.2-6+deb12u8
no fix listed

Open the chart page →

9,378
ms-emails-restcodedesignplus-chartsVerified publisher0.0.241 of 1See more

ms-emails-rest codedesignplus-charts 0.0.24

1 of the 1 container images this version deploys carry CVE-2026-17084.

Container imageDigestPackageFixed in
codedesignplus/ms-emails-rest:latestac84661c605e
python3.11@3.11.2-6+deb12u8
no fix listed

Open the chart page →

9,378
codehubcodehubVerified publisher6.2.181 of 5See more

codehub codehub 6.2.18

1 of the 5 container images this version deploys carry CVE-2026-17084.

Container imageDigestPackageFixed in
jupyterhub/jupyterhub:5.4.63974ba945e65
python3.12@3.12.3-1ubuntu0.13
no fix listed

Open the chart page →

13,286
cohdicohdi0.2.21 of 3See more

cohdi cohdi 0.2.2

1 of the 3 container images this version deploys carry CVE-2026-17084.

Container imageDigestPackageFixed in
ghcr.io/cohdi/composable-dra-driver:v0.2.28c05f7366981
python3.13@3.13.5-2+deb13u2
no fix listed

Open the chart page →

3,680
opencloudcommunity-opencloud3.0.01 of 11See more

opencloud community-opencloud 3.0.0

1 of the 11 container images this version deploys carry CVE-2026-17084.

Container imageDigestPackageFixed in
apache/tika:latest-full80072bb73dd3
python3.14@3.14.4-1ubuntu0.1
no fix listed

Open the chart page →

3,850
ConvertServiceWeb-Helm-Buildconvertserviceweb-helm-build0.1.11 of 7See more

ConvertServiceWeb-Helm-Build convertserviceweb-helm-build 0.1.1

1 of the 7 container images this version deploys carry CVE-2026-17084.

Container imageDigestPackageFixed in
library/rabbitmq:3.11.5-management1b0f675d2f24
python3.8@3.8.10-0ubuntu1~20.04.6
no fix listed

Open the chart page →

10,151
dev-code-servercosmoVerified publisher0.0.71 of 2See more

dev-code-server cosmo 0.0.7

1 of the 2 container images this version deploys carry CVE-2026-17084.

Container imageDigestPackageFixed in
ghcr.io/cosmo-workspace/dev-code-server:v0.0.316fda01ae58a
python3.11@3.11.2-6+deb12u5
no fix listed

Open the chart page →

14,587
rtcsic-charts0.1.11 of 5See more

rt csic-charts 0.1.1

1 of the 5 container images this version deploys carry CVE-2026-17084.

Container imageDigestPackageFixed in
firefart/requesttracker:5.0.40d6249906d8c
python3.11@3.11.2-6
no fix listed

Open the chart page →

14,206
wazuhcsic-charts0.1.01 of 4See more

wazuh csic-charts 0.1.0

1 of the 4 container images this version deploys carry CVE-2026-17084.

Container imageDigestPackageFixed in
wazuh/wazuh-manager:4.4.121994f40e0da
python3.8@3.8.10-0ubuntu1~20.04.7
no fix listed

Open the chart page →

13,937
damap-chartdamapVerified publisher0.3.01 of 5See more

damap-chart damap 0.3.0

1 of the 5 container images this version deploys carry CVE-2026-17084.

Container imageDigestPackageFixed in
gotenberg/gotenberg:8f29984bd1e22
python3.13@3.13.5-2+deb13u4
no fix listed

Open the chart page →

13,859
datacubedatacube-charts0.18.21 of 1See more

datacube datacube-charts 0.18.2

1 of the 1 container images this version deploys carry CVE-2026-17084.

Container imageDigestPackageFixed in
opendatacube/wms:latest1b90cdf68831
python3.6@3.6.7-1~18.04
no fix listed

Open the chart page →

27,749
datacube-datadatacube-charts0.2.61 of 1See more

datacube-data datacube-charts 0.2.6

1 of the 1 container images this version deploys carry CVE-2026-17084.

Container imageDigestPackageFixed in
geoscienceaustralia/dea-k8s-data:latestf4039b45572a
python3.6@3.6.9-1~18.04ubuntu1.1
no fix listed

Open the chart page →

18,884
datacube-indexdatacube-charts0.4.41 of 2See more

datacube-index datacube-charts 0.4.4

1 of the 2 container images this version deploys carry CVE-2026-17084.

Container imageDigestPackageFixed in
opendatacube/ows:latest668cbb41473c
python3.12@3.12.3-1ubuntu0.3
no fix listed

Open the chart page →

6,177
datacube-owsdatacube-charts0.20.11 of 1See more

datacube-ows datacube-charts 0.20.1

1 of the 1 container images this version deploys carry CVE-2026-17084.

Container imageDigestPackageFixed in
opendatacube/ows:latest668cbb41473c
python3.12@3.12.3-1ubuntu0.3
no fix listed

Open the chart page →

6,028
datacube-processingdatacube-charts0.1.11 of 2See more

datacube-processing datacube-charts 0.1.1

1 of the 2 container images this version deploys carry CVE-2026-17084.

Container imageDigestPackageFixed in
opendatacube/pipelines:wofs-1.225d810e8504b8
python3.6@3.6.7-1~18.04
no fix listed

Open the chart page →

22,425
datacube-wpsdatacube-charts0.9.01 of 1See more

datacube-wps datacube-charts 0.9.0

1 of the 1 container images this version deploys carry CVE-2026-17084.

Container imageDigestPackageFixed in
opendatacube/wps:latest80df355a660b
python3.10@3.10.12-1~22.04.10
no fix listed

Open the chart page →

6,226
restcubedatacube-charts0.2.91 of 1See more

restcube datacube-charts 0.2.9

1 of the 1 container images this version deploys carry CVE-2026-17084.

Container imageDigestPackageFixed in
opendatacube/restcube:latest91870111837c
python3.6@3.6.7-1~18.04
no fix listed

Open the chart page →

24,356
eg-edge-stackdatawire0.0.11 of 7See more

eg-edge-stack datawire 0.0.1

1 of the 7 container images this version deploys carry CVE-2026-17084.

Container imageDigestPackageFixed in
istio/kubectl:1.5.10dbb7726d1bf0
python3.6@3.6.9-1~18.04ubuntu1.1
no fix listed

Open the chart page →

15,781
db-connection-testdb-connection-testVerified publisher0.1.01 of 1See more

db-connection-test db-connection-test 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-17084.

Container imageDigestPackageFixed in
felipecs8/app-db-connection-test:v129e06c9c6385
python3.11@3.11.2-6+deb12u4
no fix listed

Open the chart page →

10,116
intel-gpu-exporterdefault-ghVerified publisher0.1.01 of 1See more

intel-gpu-exporter default-gh 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-17084.

Container imageDigestPackageFixed in
andrewgolikov55/intel-gpu-exporter:latestfcc001b61c0e
python3.10@3.10.12-1~22.04.2
no fix listed

Open the chart page →

4,846
csi-driver-smbdeimosfr-charts1.20.31 of 5See more

csi-driver-smb deimosfr-charts 1.20.3

1 of the 5 container images this version deploys carry CVE-2026-17084.

Container imageDigestPackageFixed in
registry.k8s.io/sig-storage/smbplugin:v1.20.3dc7746bb081e
python3.11@3.11.2-6+deb12u7
no fix listed

Open the chart page →

2,952
deploy-elibrarydeploy-elibrary-helm0.1.01 of 1See more

deploy-elibrary deploy-elibrary-helm 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-17084.

Container imageDigestPackageFixed in
psorab/elibrary:latest53b68896c4ce
python3.8@3.8.10-0ubuntu1~20.04.7
no fix listed

Open the chart page →

7,259
deploy-elibrarydeploy-elibrary-oo0.1.01 of 1See more

deploy-elibrary deploy-elibrary-oo 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-17084.

Container imageDigestPackageFixed in
jedi132000/nextapp:latestdc2a81e92f23
python3.8@3.8.10-0ubuntu1~20.04.5
no fix listed

Open the chart page →

8,154
deployhubdeployhubVerified publisher10.0.4154 of 11See more

deployhub deployhub 10.0.415

4 of the 11 container images this version deploys carry CVE-2026-17084.

Container imageDigestPackageFixed in
quay.io/ortelius/ms-compitem-crud:main-v10.0.1566-gf3f81597b7f49eec76
python-3.14@3.14.2-r2
3.14.7-r6
quay.io/ortelius/ms-dep-pkg-r:main-v10.0.1705-g21b3dc8a4150e94a45
python-3.14@3.14.2-r2
3.14.7-r6
quay.io/ortelius/ms-textfile-crud:main-v10.0.1635-g5076aaf5c4c8adfc82
python-3.14@3.14.2-r2
3.14.7-r6
quay.io/ortelius/ms-validate-user:main-v10.0.1694-g98ed94b5054bd4e97a
python-3.14@3.14.2-r2
3.14.7-r6

Open the chart page →

11,161
seafilederp3.2.01 of 1See more

seafile derp 3.2.0

1 of the 1 container images this version deploys carry CVE-2026-17084.

Container imageDigestPackageFixed in
seafileltd/seafile-mc:10.0.170628f29c663
python3.8@3.8.10-0ubuntu1~20.04.8
no fix listed

Open the chart page →

14,910
apachedevops0.1.01 of 4See more

apache devops 0.1.0

1 of the 4 container images this version deploys carry CVE-2026-17084.

Container imageDigestPackageFixed in
ghcr.io/codingducksrl/laravel:8.15be52524664c
python2.7@2.7.18-13ubuntu1.1
python3.10@3.10.6-1~22.04
no fix listed
no fix listed

Open the chart page →

30,150
laraveldevops0.10.31 of 4See more

laravel devops 0.10.3

1 of the 4 container images this version deploys carry CVE-2026-17084.

Container imageDigestPackageFixed in
ghcr.io/codingducksrl/laravel:8.15be52524664c
python2.7@2.7.18-13ubuntu1.1
python3.10@3.10.6-1~22.04
no fix listed
no fix listed

Open the chart page →

29,151
argocd-certificate-refreshdevtron0.10.81 of 1See more

argocd-certificate-refresh devtron 0.10.8

1 of the 1 container images this version deploys carry CVE-2026-17084.

Container imageDigestPackageFixed in
quay.io/devtron/argocd-cert-refresh:v102b6db27eaf3d
python3.10@3.10.6-1~22.04.2
no fix listed

Open the chart page →

12,999
devtron-enterprisedevtron48.0.02 of 28See more

devtron-enterprise devtron 48.0.0

2 of the 28 container images this version deploys carry CVE-2026-17084.

Container imageDigestPackageFixed in
quay.io/devtron/devtron-utils:dup-chart-repo-v1.1.095d6f0e05636
python3.11@3.11.2-6
no fix listed
quay.io/devtron/notifier:9804331c-372-39294709c7da19c5a
python3.11@3.11.2-6+deb12u6
no fix listed

Open the chart page →

66,542
dgraphdevtron0.0.201 of 1See more

dgraph devtron 0.0.20

1 of the 1 container images this version deploys carry CVE-2026-17084.

Container imageDigestPackageFixed in
dgraph/dgraph:v21.12.03b55ea83fffe
python3.8@3.8.10-0ubuntu1~20.04
no fix listed

Open the chart page →

11,957
argocd-certificate-refreshdevtron-labs0.10.81 of 1See more

argocd-certificate-refresh devtron-labs 0.10.8

1 of the 1 container images this version deploys carry CVE-2026-17084.

Container imageDigestPackageFixed in
quay.io/devtron/argocd-cert-refresh:v102b6db27eaf3d
python3.10@3.10.6-1~22.04.2
no fix listed

Open the chart page →

12,999
devtron-enterprisedevtron-labs48.0.02 of 28See more

devtron-enterprise devtron-labs 48.0.0

2 of the 28 container images this version deploys carry CVE-2026-17084.

Container imageDigestPackageFixed in
quay.io/devtron/devtron-utils:dup-chart-repo-v1.1.095d6f0e05636
python3.11@3.11.2-6
no fix listed
quay.io/devtron/notifier:9804331c-372-39294709c7da19c5a
python3.11@3.11.2-6+deb12u6
no fix listed

Open the chart page →

66,542
devtron-operatordevtron-labs0.23.31 of 11See more

devtron-operator devtron-labs 0.23.3

1 of the 11 container images this version deploys carry CVE-2026-17084.

Container imageDigestPackageFixed in
quay.io/devtron/devtron-utils:dup-chart-repo-v1.1.095d6f0e05636
python3.11@3.11.2-6
no fix listed

Open the chart page →

31,447
dgraphdevtron-labs0.0.201 of 1See more

dgraph devtron-labs 0.0.20

1 of the 1 container images this version deploys carry CVE-2026-17084.

Container imageDigestPackageFixed in
dgraph/dgraph:v21.12.03b55ea83fffe
python3.8@3.8.10-0ubuntu1~20.04
no fix listed

Open the chart page →

11,957
eoloplannerdfa-amm-eoloplannerVerified publisher0.1.01 of 7See more

eoloplanner dfa-amm-eoloplanner 0.1.0

1 of the 7 container images this version deploys carry CVE-2026-17084.

Container imageDigestPackageFixed in
library/rabbitmq:3-managemente582c0bc7766
python3.12@3.12.3-1ubuntu0.9
no fix listed

Open the chart page →

27,608
difydify1.0.01 of 4See more

dify dify 1.0.0

1 of the 4 container images this version deploys carry CVE-2026-17084.

Container imageDigestPackageFixed in
langgenius/dify-plugin-daemon:main-localda995c129e2f
python3.12@3.12.3-1ubuntu0.16
no fix listed

Open the chart page →

19,063

Container images carrying it

653 by charts deploying them

A fixed version is listed for 4 of the 15 affected packages.

Container imageDigestPackageFixed inUsed by
registry.gitlab.com/infinitydon/registry/open5gs-aio:v2.2.2f6385712935f
python3.8@3.8.5-1~20.04.2
no fix listed
1
registry.k8s.io/sig-storage/nfsplugin:v4.13.41eb5a85180a4
python3.11@3.11.2-6+deb12u7
no fix listed
1
registry.k8s.io/sig-storage/nfsplugin:v4.11.0ce5b5ccd5eb0
python3.11@3.11.2-6+deb12u5
no fix listed
1

syft 1.42.1 · advisories as of 15 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.