StackRadar

CVE-2026-17591

Unscored

Advisory

Published 17 Oct 2026In the index since 18 Oct 2026
Severity
Unscored
worst across findings
CVSS
—
base score, highest
EPSS
0.001
1st percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
33
of 18,176 indexed, latest versions
Container images
27
deployed by those charts
Fix available
None
affected package

The matching OSV records carry no description.

Carried by container images the latest versions of 33 of 18,176 indexed charts deploy, on 27 images.

Affected packageAffected versionsFixed inImages
libarchivedeb3.6.2-1, 3.6.2-1+deb12u1, 3.6.2-1+deb12u3, 3.6.2-1+deb12u4+3 moreno fix listed27
OSV records
DEBIAN-CVE-2026-17591

Charts affected

33 by stars
ChartLatestAffected imagesRadar Score
openprojectopenproject-helm-chartsOfficialVerified publisher13.14.01 of 5See more

openproject openproject-helm-charts 13.14.0

1 of the 5 container images this version deploys carry CVE-2026-17591.

Container imageDigestPackageFixed in
openproject/openproject:17.9.2-slim7b50be7ff67d
libarchive@3.7.4-4+deb13u1
no fix listed

Open the chart page →

22,446
paperless-ngxfmjstudios0.2.81 of 5See more

paperless-ngx fmjstudios 0.2.8

1 of the 5 container images this version deploys carry CVE-2026-17591.

Container imageDigestPackageFixed in
ghcr.io/paperless-ngx/paperless-ngx:2.10.1a132c2ac7c57
libarchive@3.6.2-1+deb12u1
no fix listed

Open the chart page →

35,957
paperless-ngxpaperless-ngxVerified publisher0.3.241 of 3See more

paperless-ngx paperless-ngx 0.3.24

1 of the 3 container images this version deploys carry CVE-2026-17591.

Container imageDigestPackageFixed in
ghcr.io/paperless-ngx/paperless-ngx:3.3.06b94799bc769
libarchive@3.7.4-4+deb13u1
no fix listed

Open the chart page →

9,665
paperlesszekker6Verified publisher11.13.01 of 1See more

paperless zekker6 11.13.0

1 of the 1 container images this version deploys carry CVE-2026-17591.

Container imageDigestPackageFixed in
ghcr.io/paperless-ngx/paperless-ngx:3.3.2d232cba37cc0
libarchive@3.7.4-4+deb13u1
no fix listed

Open the chart page →

5,493
paperless-ngxadnoctemVerified publisher0.5.11 of 5See more

paperless-ngx adnoctem 0.5.1

1 of the 5 container images this version deploys carry CVE-2026-17591.

Container imageDigestPackageFixed in
ghcr.io/paperless-ngx/paperless-ngx:3.3.2d232cba37cc0
libarchive@3.7.4-4+deb13u1
no fix listed

Open the chart page →

27,512
paperless-ngxalexmorbo-paperless-ngxVerified publisher0.2.01 of 2See more

paperless-ngx alexmorbo-paperless-ngx 0.2.0

1 of the 2 container images this version deploys carry CVE-2026-17591.

Container imageDigestPackageFixed in
ghcr.io/paperless-ngx/paperless-ngx:2.20.5665f2f5cc548
libarchive@3.7.4-4
no fix listed

Open the chart page →

14,872
hermes-agentankra-chartsVerified publisher0.3.11 of 1See more

hermes-agent ankra-charts 0.3.1

1 of the 1 container images this version deploys carry CVE-2026-17591.

Container imageDigestPackageFixed in
nousresearch/hermes-agent:v2026.8.27e0df6adebddf
libarchive@3.7.4-4+deb13u1
no fix listed

Open the chart page →

7,895
dawarichcogitriVerified publisher2.9.31 of 3See more

dawarich cogitri 2.9.3

1 of the 3 container images this version deploys carry CVE-2026-17591.

Container imageDigestPackageFixed in
freikin/dawarich:1.15.3589e3606b11b
libarchive@3.7.4-4+deb13u1
no fix listed

Open the chart page →

7,158
paperless-ngxcrystalnetVerified publisher0.2.221 of 3See more

paperless-ngx crystalnet 0.2.22

1 of the 3 container images this version deploys carry CVE-2026-17591.

Container imageDigestPackageFixed in
ghcr.io/paperless-ngx/paperless-ngx:2.13.10642357c5dbd
libarchive@3.6.2-1+deb12u1
no fix listed

Open the chart page →

16,416
iobrokereugen0.2.61 of 1See more

iobroker eugen 0.2.6

1 of the 1 container images this version deploys carry CVE-2026-17591.

Container imageDigestPackageFixed in
ghcr.io/buanet/iobroker:v9.1.2ca7dc7362968
libarchive@3.6.2-1+deb12u1
no fix listed

Open the chart page →

13,398
paperless-ngxpaperlessVerified publisher0.4.01 of 3See more

paperless-ngx paperless 0.4.0

1 of the 3 container images this version deploys carry CVE-2026-17591.

Container imageDigestPackageFixed in
ghcr.io/paperless-ngx/paperless-ngxdigest-pinnedaa810a36942c
libarchive@3.7.4-4+deb13u1
no fix listed

Open the chart page →

11,412
fluent-bitromanow-helm-chartsVerified publisher1.7.31 of 1See more

fluent-bit romanow-helm-charts 1.7.3

1 of the 1 container images this version deploys carry CVE-2026-17591.

Container imageDigestPackageFixed in
fluent/fluent-bit:4.0-debuge76397ef3983
libarchive@3.6.2-1+deb12u3
no fix listed

Open the chart page →

8,635
asya-playgroundasya1.1.31 of 1See more

asya-playground asya 1.1.3

1 of the 1 container images this version deploys carry CVE-2026-17591.

Container imageDigestPackageFixed in
localstack/localstack:3.19d278167f2b7
libarchive@3.6.2-1
no fix listed

Open the chart page →

11,025
paperless-ngxcharts-derwitt-devVerified publisher2.1.81 of 1See more

paperless-ngx charts-derwitt-dev 2.1.8

1 of the 1 container images this version deploys carry CVE-2026-17591.

Container imageDigestPackageFixed in
ghcr.io/paperless-ngx/paperless-ngx:3.3.2d232cba37cc0
libarchive@3.7.4-4+deb13u1
no fix listed

Open the chart page →

5,493
fluxer-helmfluxer-helm0.3.01 of 18See more

fluxer-helm fluxer-helm 0.3.0

1 of the 18 container images this version deploys carry CVE-2026-17591.

Container imageDigestPackageFixed in
ghcr.io/fluxerapp/fluxer-media-proxy:2026.820.164955ced7544e6b3f
libarchive@3.7.4-4+deb13u1
no fix listed

Open the chart page →

34,259
scanservjsgabe565Verified publisher0.9.21 of 1See more

scanservjs gabe565 0.9.2

1 of the 1 container images this version deploys carry CVE-2026-17591.

Container imageDigestPackageFixed in
sbs20/scanservjs:release-v3.0.3dad1fd6e9a98
libarchive@3.6.2-1
no fix listed

Open the chart page →

15,405
icinga2geek-cookbookVerified publisher4.2.01 of 1See more

icinga2 geek-cookbook 4.2.0

1 of the 1 container images this version deploys carry CVE-2026-17591.

Container imageDigestPackageFixed in
jordan/icinga2:latestf75025fe8ea8
libarchive@3.6.2-1+deb12u4
no fix listed

Open the chart page →

11,031
archiveboxhelmforgeVerified publisher1.1.141 of 1See more

archivebox helmforge 1.1.14

1 of the 1 container images this version deploys carry CVE-2026-17591.

Container imageDigestPackageFixed in
archivebox/archivebox:0.9.73d4720d86c0e9
libarchive@3.7.4-4+deb13u1
no fix listed

Open the chart page →

6,421
dawarichhelmforgeVerified publisher1.0.51 of 4See more

dawarich helmforge 1.0.5

1 of the 4 container images this version deploys carry CVE-2026-17591.

Container imageDigestPackageFixed in
freikin/dawarich:1.15.3589e3606b11b
libarchive@3.7.4-4+deb13u1
no fix listed

Open the chart page →

12,690
hermes-agenthelmforgeVerified publisher1.0.11 of 1See more

hermes-agent helmforge 1.0.1

1 of the 1 container images this version deploys carry CVE-2026-17591.

Container imageDigestPackageFixed in
nousresearch/hermes-agent:v2026.9.24fca358f12efd
libarchive@3.7.4-4+deb13u1
no fix listed

Open the chart page →

7,200
medikeephelmforgeVerified publisher2.0.31 of 3See more

medikeep helmforge 2.0.3

1 of the 3 container images this version deploys carry CVE-2026-17591.

Container imageDigestPackageFixed in
ghcr.io/afairgiant/medikeep:v0.72.09285e26f6d0d
libarchive@3.6.2-1+deb12u5
no fix listed

Open the chart page →

6,472
paperlesshomelabcihelmchartstestVerified publisher9.1.91 of 1See more

paperless homelabcihelmchartstest 9.1.9

1 of the 1 container images this version deploys carry CVE-2026-17591.

Container imageDigestPackageFixed in
ghcr.io/paperless-ngx/paperless-ngx:2.0.1ab255bea133e
libarchive@3.6.2-1
no fix listed

Open the chart page →

18,955
paperlesshpVerified publisher0.1.21 of 5See more

paperless hp 0.1.2

1 of the 5 container images this version deploys carry CVE-2026-17591.

Container imageDigestPackageFixed in
ghcr.io/paperless-ngx/paperless-ngx:3.1.3aa810a36942c
libarchive@3.7.4-4+deb13u1
no fix listed

Open the chart page →

36,240
infisicalinfisical-charts0.4.21 of 3See more

infisical infisical-charts 0.4.2

1 of the 3 container images this version deploys carry CVE-2026-17591.

Container imageDigestPackageFixed in
infisical/infisical:latest3f014f284cb9
libarchive@3.7.4-4+deb13u1
no fix listed

Open the chart page →

3,191
deltabadgerk8s-chartsVerified publisher2.0.01 of 1See more

deltabadger k8s-charts 2.0.0

1 of the 1 container images this version deploys carry CVE-2026-17591.

Container imageDigestPackageFixed in
ghcr.io/deltabadger/deltabadger:2.23.3bffe3c22fabc
libarchive@3.7.4-4+deb13u1
no fix listed

Open the chart page →

7,413
paperlessk8s-home-lab-repo11.0.11 of 1See more

paperless k8s-home-lab-repo 11.0.1

1 of the 1 container images this version deploys carry CVE-2026-17591.

Container imageDigestPackageFixed in
ghcr.io/paperless-ngx/paperless-ngx:2.20.14b89f83345532
libarchive@3.7.4-4
no fix listed

Open the chart page →

11,580
rspamdklicktippVerified publisher1.6.11 of 1See more

rspamd klicktipp 1.6.1

1 of the 1 container images this version deploys carry CVE-2026-17591.

Container imageDigestPackageFixed in
rspamd/rspamd:4.1.4e870599c970d
libarchive@3.7.4-4+deb13u1
no fix listed

Open the chart page →

2,172
paperless-ngxmt1905027.6.141 of 4See more

paperless-ngx mt190502 7.6.14

1 of the 4 container images this version deploys carry CVE-2026-17591.

Container imageDigestPackageFixed in
ghcr.io/paperless-ngx/paperless-ngx:2.20.134b05bcd28e69
libarchive@3.7.4-4
no fix listed

Open the chart page →

14,561
paperless-ngxoli-the-devVerified publisher1.3.11 of 1See more

paperless-ngx oli-the-dev 1.3.1

1 of the 1 container images this version deploys carry CVE-2026-17591.

Container imageDigestPackageFixed in
ghcr.io/paperless-ngx/paperless-ngx:3.3.06b94799bc769
libarchive@3.7.4-4+deb13u1
no fix listed

Open the chart page →

5,531
paperless-ngxrtomik-helm-chartsVerified publisher0.0.51 of 1See more

paperless-ngx rtomik-helm-charts 0.0.5

1 of the 1 container images this version deploys carry CVE-2026-17591.

Container imageDigestPackageFixed in
ghcr.io/paperless-ngx/paperless-ngx:2.20.357ad9565bff3
libarchive@3.7.4-4
no fix listed

Open the chart page →

13,153
dawarichschichtelVerified publisher0.4.01 of 1See more

dawarich schichtel 0.4.0

1 of the 1 container images this version deploys carry CVE-2026-17591.

Container imageDigestPackageFixed in
freikin/dawarich:1.15.3589e3606b11b
libarchive@3.7.4-4+deb13u1
no fix listed

Open the chart page →

6,935
infisicalsinextraVerified publisher0.7.21 of 1See more

infisical sinextra 0.7.2

1 of the 1 container images this version deploys carry CVE-2026-17591.

Container imageDigestPackageFixed in
infisical/infisical:v0.166.8bb8352b71cea
libarchive@3.7.4-4+deb13u1
no fix listed

Open the chart page →

3,191
servicexssl-hep1.8.61 of 16See more

servicex ssl-hep 1.8.6

1 of the 16 container images this version deploys carry CVE-2026-17591.

Container imageDigestPackageFixed in
sslhep/servicex-did-finder-xrootd:v1.8.69a9fb17458f1
libarchive@3.7.4-4+deb13u1
no fix listed

Open the chart page →

69,014

Container images carrying it

27 by charts deploying them

A fixed version is listed for 0 of the 1 affected package.

Container imageDigestPackageFixed inUsed by
freikin/dawarich:1.15.3589e3606b11b
libarchive@3.7.4-4+deb13u1
no fix listed
3
ghcr.io/paperless-ngx/paperless-ngx:3.3.2d232cba37cc0
libarchive@3.7.4-4+deb13u1
no fix listed
3
ghcr.io/paperless-ngx/paperless-ngx:3.3.06b94799bc769
libarchive@3.7.4-4+deb13u1
no fix listed
2
ghcr.io/paperless-ngx/paperless-ngx:3.1.3aa810a36942c
libarchive@3.7.4-4+deb13u1
no fix listed
2
archivebox/archivebox:0.9.73d4720d86c0e9
libarchive@3.7.4-4+deb13u1
no fix listed
1
fluent/fluent-bit:4.0-debuge76397ef3983
libarchive@3.6.2-1+deb12u3
no fix listed
1
infisical/infisical:latest3f014f284cb9
libarchive@3.7.4-4+deb13u1
no fix listed
1
infisical/infisical:v0.166.8bb8352b71cea
libarchive@3.7.4-4+deb13u1
no fix listed
1
jordan/icinga2:latestf75025fe8ea8
libarchive@3.6.2-1+deb12u4
no fix listed
1
localstack/localstack:3.19d278167f2b7
libarchive@3.6.2-1
no fix listed
1
nousresearch/hermes-agent:v2026.8.27e0df6adebddf
libarchive@3.7.4-4+deb13u1
no fix listed
1
nousresearch/hermes-agent:v2026.9.24fca358f12efd
libarchive@3.7.4-4+deb13u1
no fix listed
1
openproject/openproject:17.9.2-slim7b50be7ff67d
libarchive@3.7.4-4+deb13u1
no fix listed
1
rspamd/rspamd:4.1.4e870599c970d
libarchive@3.7.4-4+deb13u1
no fix listed
1
sbs20/scanservjs:release-v3.0.3dad1fd6e9a98
libarchive@3.6.2-1
no fix listed
1
sslhep/servicex-did-finder-xrootd:v1.8.69a9fb17458f1
libarchive@3.7.4-4+deb13u1
no fix listed
1
ghcr.io/afairgiant/medikeep:v0.72.09285e26f6d0d
libarchive@3.6.2-1+deb12u5
no fix listed
1
ghcr.io/buanet/iobroker:v9.1.2ca7dc7362968
libarchive@3.6.2-1+deb12u1
no fix listed
1
ghcr.io/deltabadger/deltabadger:2.23.3bffe3c22fabc
libarchive@3.7.4-4+deb13u1
no fix listed
1
ghcr.io/fluxerapp/fluxer-media-proxy:2026.820.164955ced7544e6b3f
libarchive@3.7.4-4+deb13u1
no fix listed
1
ghcr.io/paperless-ngx/paperless-ngx:2.13.10642357c5dbd
libarchive@3.6.2-1+deb12u1
no fix listed
1
ghcr.io/paperless-ngx/paperless-ngx:2.20.134b05bcd28e69
libarchive@3.7.4-4
no fix listed
1
ghcr.io/paperless-ngx/paperless-ngx:2.20.357ad9565bff3
libarchive@3.7.4-4
no fix listed
1
ghcr.io/paperless-ngx/paperless-ngx:2.20.5665f2f5cc548
libarchive@3.7.4-4
no fix listed
1
ghcr.io/paperless-ngx/paperless-ngx:2.10.1a132c2ac7c57
libarchive@3.6.2-1+deb12u1
no fix listed
1
ghcr.io/paperless-ngx/paperless-ngx:2.0.1ab255bea133e
libarchive@3.6.2-1
no fix listed
1
ghcr.io/paperless-ngx/paperless-ngx:2.20.14b89f83345532
libarchive@3.7.4-4
no fix listed
1

syft 1.42.1 · advisories as of 18 Oct 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.