StackRadar

CVE-2026-18477

Medium

Advisory

Published 3 Aug 2026In the index since 5 Sept 2026
Severity
Medium
worst across findings
CVSS
4.4
base score, highest
EPSS
0.001
0th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
2,481
of 17,828 indexed, latest versions
Container images
2,473
deployed by those charts
Fix available
1 of 1
affected package

The matching OSV records carry no description.

Carried by container images the latest versions of 2,481 of 17,828 indexed charts deploy, on 2,473 images.

Affected packageAffected versionsFixed inImages
tardeb1.27.1-1, 1.27.1-1ubuntu0.1, 1.28-2.1ubuntu0.1, 1.28-2.1ubuntu0.2+31 more1.35+dfsg-3.1+e52,473
OSV records
DEBIAN-CVE-2026-18477UBUNTU-CVE-2026-18477ECHO-b8d2-238f-d46b

Charts affected

2,481 by stars
ChartLatestAffected imagesRadar Score

Container images carrying it

2,473 by charts deploying them

A fixed version is listed for 1 of the 1 affected package.

Container imageDigestPackageFixed inUsed by
frankescobar/allure-docker-service:2.19.0cafa03b94dac
tar@1.29b-2ubuntu0.1
no fix listed
1
frankescobar/allure-docker-service:latestdc171ec796d5
tar@1.35+dfsg-3build1
no fix listed
1
free5gmano/nextepc-mongodb:latest36f806935519
tar@1.28-2.1ubuntu0.1
no fix listed
1
freedom98/flask:k3.0d7ce1533f297
tar@1.34+dfsg-1.2+deb12u1
no fix listed
1
freeradius/freeradius-server:3.2.8af6fd34a5b78
tar@1.34+dfsg-1ubuntu0.1.22.04.2
no fix listed
1
galaxy/cloudman-server:lateste5c265fe9fcd
tar@1.30+dfsg-7ubuntu0.20.04.2
no fix listed
1
galaxy/galaxy-init:v18.010267bad550e6
tar@1.27.1-1ubuntu0.1
no fix listed
1
galaxy/galaxy-stable:v18.018e577a626dfd
tar@1.27.1-1ubuntu0.1
no fix listed
1
galaxy/pulsar-kubernetes:0.15.7e50a890e24c9
tar@1.34+dfsg-1.2+deb12u1
no fix listed
1
galexrt/extended-ceph-exporter:v1.8.05373078a3a08
tar@1.35+dfsg-3.1
no fix listed
1
gchq/accumulo:2.0.1c460bb587d6d
tar@1.35+dfsg-3build1
no fix listed
1
geonetwork/gn-cloud-ogc-api-records-service:4.2.8-020c9bb761f67
tar@1.29b-2ubuntu0.4
no fix listed
1
geonode/geoserver:2.28.4-latest81b1d431b7e9
tar@1.34+dfsg-1ubuntu0.1.22.04.2
no fix listed
1
geopython/pycsw:3.0.0-beta284662ea6b78b
tar@1.34+dfsg-1.2+deb12u1
no fix listed
1
geoscienceaustralia/dea-k8s-data:latestf4039b45572a
tar@1.29b-2ubuntu0.1
no fix listed
1
geoservercloud/geoserver-cloud-gateway:1.0-RC2ca58b74529cd
tar@1.30+dfsg-7ubuntu0.20.04.1
no fix listed
1
geoservercloud/geoserver-cloud-gateway:3.0.1.1de0b20bd2a43
tar@1.35+dfsg-4ubuntu0.4
no fix listed
1
geoservercloud/geoserver-cloud-gwc:3.0.1.1b04ed89b5d2b
tar@1.35+dfsg-4ubuntu0.4
no fix listed
1
geoservercloud/geoserver-cloud-rest:3.0.1.1318254b52f96
tar@1.35+dfsg-4ubuntu0.4
no fix listed
1
geoservercloud/geoserver-cloud-rest:1.0-RC25dc0c93a1710
tar@1.30+dfsg-7ubuntu0.20.04.1
no fix listed
1
geoservercloud/geoserver-cloud-wcs:1.0-RC247ae1bdb4bcc
tar@1.30+dfsg-7ubuntu0.20.04.1
no fix listed
1
geoservercloud/geoserver-cloud-wcs:3.0.1.14f077124f591
tar@1.35+dfsg-4ubuntu0.4
no fix listed
1
geoservercloud/geoserver-cloud-webui:1.0-RC228c3e5a8c5a3
tar@1.30+dfsg-7ubuntu0.20.04.1
no fix listed
1
geoservercloud/geoserver-cloud-webui:3.0.1.14f91e3048ac8
tar@1.35+dfsg-4ubuntu0.4
no fix listed
1
geoservercloud/geoserver-cloud-wfs:3.0.1.1299f0d6232d1
tar@1.35+dfsg-4ubuntu0.4
no fix listed
1
geoservercloud/geoserver-cloud-wfs:1.0-RC28c70ee06d5ab
tar@1.30+dfsg-7ubuntu0.20.04.1
no fix listed
1
geoservercloud/geoserver-cloud-wms:1.0-RC242775ba6a4da
tar@1.30+dfsg-7ubuntu0.20.04.1
no fix listed
1
geoservercloud/geoserver-cloud-wms:3.0.1.15164f687ce4d
tar@1.35+dfsg-4ubuntu0.4
no fix listed
1
gethue/hue:4.11.011b649636e68
tar@1.30+dfsg-7ubuntu0.20.04.2
no fix listed
1
gethue/hue:4.10.05702b2c37ff9
tar@1.29b-2ubuntu0.2
no fix listed
1
gethue/hue:latest7d5c1b9f8a79
tar@1.34+dfsg-1ubuntu0.1.22.04.2
no fix listed
1
getsentry/relay:24.10.0ba7bf9163219
tar@1.34+dfsg-1.2+deb12u1
no fix listed
1
ghostfolio/ghostfolio:3.7.0e3c6ab53e49b
tar@1.34+dfsg-1.2+deb12u1
no fix listed
1
ghusta/postgres-world-db:latest879d0919fdcc
tar@1.35+dfsg-3.1
no fix listed
1
gitlab/gitlab-runner:v15.3.0860d4a3fec7a
tar@1.30+dfsg-7ubuntu0.20.04.2
no fix listed
1
glasskube/operator:0.12.2be5133100d63
tar@1.34+dfsg-1ubuntu0.1.22.04.1
no fix listed
1
glpi/glpi:latest7b50172cdb7d
tar@1.35+dfsg-3.1
no fix listed
1
gobitfly/eth2-beaconchain-explorer:latest1d08a7986348
tar@1.34+dfsg-1ubuntu0.1.22.04.2
no fix listed
1
golenski/fibonacci-msg-relay:1.0.0c863dcb0c513
tar@1.34+dfsg-1.2
no fix listed
1
golenski/fibonacci-task-manager:2.0.03a2b36df247b
tar@1.34+dfsg-1.2
no fix listed
1
golenski/fibonacci-worker:2.0.0954caf4aaf6a
tar@1.34+dfsg-1.2
no fix listed
1
gopaddle/gopaddle:5.0435359250b63
tar@1.34+dfsg-1ubuntu0.1.22.04.2
no fix listed
1
gopinatht/ovs-plugin-installer:latest632cb2e9c399
tar@1.28-2.1ubuntu0.1
no fix listed
1
gotenberg/gotenberg:8-chromium0d28ae9a9644
tar@1.35+dfsg-3.1
no fix listed
1
gotenberg/gotenberg:8.30206a6c708fc6
tar@1.35+dfsg-3.1
no fix listed
1
gotenberg/gotenberg:8.3467097317623a
tar@1.35+dfsg-3.1
no fix listed
1
gotenberg/gotenberg:8.0.1cf0b9a7ca3cf
tar@1.34+dfsg-1.2
no fix listed
1
gotson/komga:0.99.49b15ea6bfc30
tar@1.29b-2ubuntu0.1
no fix listed
1
gradiant/open5gs-dbctl:0.10.3332031245fce
tar@1.35+dfsg-3build1
no fix listed
1
grafana/agent:v0.44.23364714a2f64
tar@1.35+dfsg-3build1
no fix listed
1

syft 1.42.1 · advisories as of 21 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.