StackRadar

CVE-2026-1757

Medium

Advisory

Published 2 Feb 2026In the index since 5 Sept 2026
Severity
Medium
worst across findings
CVSS
6.2
base score, highest
EPSS
0.002
10th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
403
of 17,781 indexed, latest versions
Container images
375
deployed by those charts
Fix available
1 of 1
affected package

The matching OSV records carry no description.

Carried by container images the latest versions of 403 of 17,781 indexed charts deploy, on 375 images.

Affected packageAffected versionsFixed inImages
libxml2deb2.9.14+dfsg-1.2, 2.9.14+dfsg-1.3~deb12u1, 2.9.14+dfsg-1.3~deb12u2, 2.9.14+dfsg-1.3~deb12u4+5 more2.9.14+dfsg-1.3~deb12u6, 2.12.7+dfsg+really2.9.14-2.1+deb13u3, 2.14.5+dfsg-0.2ubuntu0.2375
OSV records
DEBIAN-CVE-2026-1757UBUNTU-CVE-2026-1757
Also known as
USN-8460-1

Charts affected

403 by stars
ChartLatestAffected imagesRadar Score
keycloakwiremindVerified publisher25.3.11 of 2See more

keycloak wiremind 25.3.1

1 of the 2 container images this version deploys carry CVE-2026-1757.

Container imageDigestPackageFixed in
bitnamilegacy/postgresql:17.6.0-debian-12-r4926356130b77
libxml2@2.9.14+dfsg-1.3~deb12u2
2.9.14+dfsg-1.3~deb12u6

Open the chart page →

7,624
workshop-pipelinesworkshop-pipelines0.1.61 of 2See more

workshop-pipelines workshop-pipelines 0.1.6

1 of the 2 container images this version deploys carry CVE-2026-1757.

Container imageDigestPackageFixed in
ghcr.io/bat-bs/bitnami-pgvector:pg1619ebe07b4daf
libxml2@2.9.14+dfsg-1.3~deb12u1
2.9.14+dfsg-1.3~deb12u6

Open the chart page →

11,577
tabbyxdVerified publisher1.0.61 of 2See more

tabby xd 1.0.6

1 of the 2 container images this version deploys carry CVE-2026-1757.

Container imageDigestPackageFixed in
library/nginx:1.25a484819eb602
libxml2@2.9.14+dfsg-1.3~deb12u1
2.9.14+dfsg-1.3~deb12u6

Open the chart page →

7,673

Container images carrying it

375 by charts deploying them

A fixed version is listed for 1 of the 1 affected package.

Container imageDigestPackageFixed inUsed by
library/python:3.8d41127070014
libxml2@2.9.14+dfsg-1.3~deb12u1
2.9.14+dfsg-1.3~deb12u6
1
library/python:3.9da5aee29682d
libxml2@2.12.7+dfsg+really2.9.14-2.1+deb13u1
2.12.7+dfsg+really2.9.14-2.1+deb13u3
1
library/redmine:6.1.204ac44a2595b
libxml2@2.12.7+dfsg+really2.9.14-2.1+deb13u2
2.12.7+dfsg+really2.9.14-2.1+deb13u3
1
library/wordpress:6.4.3-apache8ae66efb09a2
libxml2@2.9.14+dfsg-1.3~deb12u1
2.9.14+dfsg-1.3~deb12u6
1
library/wordpress:6.9.4-fpmad4a8bae2eb4
libxml2@2.12.7+dfsg+really2.9.14-2.1+deb13u2
2.12.7+dfsg+really2.9.14-2.1+deb13u3
1
library/wordpress:php8.1-apachef73396626d2f
libxml2@2.12.7+dfsg+really2.9.14-2.1+deb13u2
2.12.7+dfsg+really2.9.14-2.1+deb13u3
1
lis314/project-zomboid-docker:latestaa2089c37920
libxml2@2.9.14+dfsg-1.3~deb12u1
2.9.14+dfsg-1.3~deb12u6
1
localstack/localstack:3.19d278167f2b7
libxml2@2.9.14+dfsg-1.3~deb12u1
2.9.14+dfsg-1.3~deb12u6
1
louislam/uptime-kuma:2.5.33e24e96c89ef
libxml2@2.9.14+dfsg-1.3~deb12u5
2.9.14+dfsg-1.3~deb12u6
1
louislam/uptime-kuma:2.0.24c364ef96aad
libxml2@2.9.14+dfsg-1.3~deb12u4
2.9.14+dfsg-1.3~deb12u6
1
louislam/uptime-kuma:2.4.091e963bfda56
libxml2@2.9.14+dfsg-1.3~deb12u5
2.9.14+dfsg-1.3~deb12u6
1
martinhelmich/typo3:12.4c83a4f3fd7ae
libxml2@2.9.14+dfsg-1.3~deb12u5
2.9.14+dfsg-1.3~deb12u6
1
mathesar/mathesar:0.12.0091757cb01fe
libxml2@2.9.14+dfsg-1.3~deb12u5
2.9.14+dfsg-1.3~deb12u6
1
matrixdotorg/synapse:v1.127.1c3c4a9de2a0b
libxml2@2.9.14+dfsg-1.3~deb12u1
2.9.14+dfsg-1.3~deb12u6
1
mautic/mautic:7-apacheeb8cc73d97e1
libxml2@2.9.14+dfsg-1.3~deb12u5
2.9.14+dfsg-1.3~deb12u6
1
merlos/zookeeper:3.9.3a38fc7e09ed7
libxml2@2.9.14+dfsg-1.3~deb12u1
2.9.14+dfsg-1.3~deb12u6
1
middlewareeng/middleware:0.3.1747d880812f1
libxml2@2.9.14+dfsg-1.3~deb12u1
2.9.14+dfsg-1.3~deb12u6
1
mindsdb/mindsdb:latest163011c09299
libxml2@2.12.7+dfsg+really2.9.14-2.1+deb13u2
2.12.7+dfsg+really2.9.14-2.1+deb13u3
1
mintproject/model-catalog-fastapi:7dd88dc5bf1fe6a6d4703ea0a077afee45cb256102260d20a21f
libxml2@2.9.14+dfsg-1.3~deb12u1
2.9.14+dfsg-1.3~deb12u6
1
moreillon/api-proxy:latestd7d4a5463525
libxml2@2.9.14+dfsg-1.3~deb12u1
2.9.14+dfsg-1.3~deb12u6
1
moreillon/camera-viewer:lateste418cc694bd5
libxml2@2.9.14+dfsg-1.3~deb12u1
2.9.14+dfsg-1.3~deb12u6
1
moreillon/food-manager:lateste8fd856e593d
libxml2@2.9.14+dfsg-1.3~deb12u1
2.9.14+dfsg-1.3~deb12u6
1
moreillon/group-manager:latest3caa8f710ee0
libxml2@2.9.14+dfsg-1.3~deb12u5
2.9.14+dfsg-1.3~deb12u6
1
moreillon/group-manager-front:latest5f0a38498271
libxml2@2.12.7+dfsg+really2.9.14-2.1+deb13u2
2.12.7+dfsg+really2.9.14-2.1+deb13u3
1
moreillon/user-manager-front:v5.1.06597e6b98d21
libxml2@2.9.14+dfsg-1.3~deb12u1
2.9.14+dfsg-1.3~deb12u6
1
moreillon/user-manager-mongoose:v5.0.1d2ee0423b797
libxml2@2.9.14+dfsg-1.3~deb12u1
2.9.14+dfsg-1.3~deb12u6
1
muhammedgamal/fp23:latest74b4cd69b6fa
libxml2@2.9.14+dfsg-1.3~deb12u1
2.9.14+dfsg-1.3~deb12u6
1
networktocode/nautobot:3.0-py3.13ed484336b1ad
libxml2@2.12.7+dfsg+really2.9.14-2.1+deb13u2
2.12.7+dfsg+really2.9.14-2.1+deb13u3
1
nginxinc/nginx-unprivileged:1.29.5c5b989ebc150
libxml2@2.12.7+dfsg+really2.9.14-2.1+deb13u2
2.12.7+dfsg+really2.9.14-2.1+deb13u3
1
nirmalnaveen/supermario:latest8541a39162f3
libxml2@2.9.14+dfsg-1.3~deb12u1
2.9.14+dfsg-1.3~deb12u6
1
offchainlabs/nitro-node:v3.7.6-c0fe95e9f779fa84b7b
libxml2@2.9.14+dfsg-1.3~deb12u4
2.9.14+dfsg-1.3~deb12u6
1
offchainlabs/nitro-node:v3.1.0-7d1d84ce95865866129
libxml2@2.9.14+dfsg-1.3~deb12u1
2.9.14+dfsg-1.3~deb12u6
1
opea/chatqna:1.038c51b791efa
libxml2@2.9.14+dfsg-1.3~deb12u1
2.9.14+dfsg-1.3~deb12u6
1
opea/codegen:1.058f91683892d
libxml2@2.9.14+dfsg-1.3~deb12u1
2.9.14+dfsg-1.3~deb12u6
1
opea/codegen-ui:1.02bee4eb66f3e
libxml2@2.9.14+dfsg-1.3~deb12u1
2.9.14+dfsg-1.3~deb12u6
1
opea/codetrans:1.0e2436483b73d
libxml2@2.9.14+dfsg-1.3~deb12u1
2.9.14+dfsg-1.3~deb12u6
1
opea/codetrans-ui:1.03ef121f34610
libxml2@2.9.14+dfsg-1.3~deb12u1
2.9.14+dfsg-1.3~deb12u6
1
opea/docsum:1.03eaa91849512
libxml2@2.9.14+dfsg-1.3~deb12u1
2.9.14+dfsg-1.3~deb12u6
1
opea/docsum-ui:1.07f854e9bffaf
libxml2@2.9.14+dfsg-1.3~deb12u1
2.9.14+dfsg-1.3~deb12u6
1
opea/guardrails-tgi:1.0262c6048aab8
libxml2@2.9.14+dfsg-1.3~deb12u1
2.9.14+dfsg-1.3~deb12u6
1
opea/guardrails-tgi:latestf68bec6a1271
libxml2@2.9.14+dfsg-1.3~deb12u1
2.9.14+dfsg-1.3~deb12u6
1
opea/llm-docsum-tgi:1.002f9e8fa5d71
libxml2@2.9.14+dfsg-1.3~deb12u1
2.9.14+dfsg-1.3~deb12u6
1
opea/speecht5:1.0249afad3d268
libxml2@2.9.14+dfsg-1.3~deb12u1
2.9.14+dfsg-1.3~deb12u6
1
opea/web-retriever-chroma:1.0fe08165d7770
libxml2@2.9.14+dfsg-1.3~deb12u1
2.9.14+dfsg-1.3~deb12u6
1
opencsghq/agenticflow:ee-v0.6-52f03fead54db
libxml2@2.9.14+dfsg-1.3~deb12u5
2.9.14+dfsg-1.3~deb12u6
1
opencsghq/kubectl:latestb6d87e1048c2
libxml2@2.9.14+dfsg-1.3~deb12u1
2.9.14+dfsg-1.3~deb12u6
1
openproject/hocuspocus:release-338001b288dc1359dfb5
libxml2@2.9.14+dfsg-1.3~deb12u2
2.9.14+dfsg-1.3~deb12u6
1
passbolt/passbolt:5.13.0-1-ceaf3a620902a0
libxml2@2.12.7+dfsg+really2.9.14-2.1+deb13u2
2.12.7+dfsg+really2.9.14-2.1+deb13u3
1
phan2410/dummy-service:0.0.89c6ed6de26ca
libxml2@2.9.14+dfsg-1.3~deb12u1
2.9.14+dfsg-1.3~deb12u6
1
photoprism/photoprism:251130db16ee6b1ba3
libxml2@2.14.5+dfsg-0.2
2.14.5+dfsg-0.2ubuntu0.2
1

syft 1.42.1 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.