StackRadar

CVE-2026-18477

Medium

Advisory

Published 3 Aug 2026In the index since 5 Sept 2026
Severity
Medium
worst across findings
CVSS
4.4
base score, highest
EPSS
0.001
0th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
2,442
of 17,797 indexed, latest versions
Container images
2,413
deployed by those charts
Fix available
1 of 1
affected package

The matching OSV records carry no description.

Carried by container images the latest versions of 2,442 of 17,797 indexed charts deploy, on 2,413 images.

Affected packageAffected versionsFixed inImages
tardeb1.27.1-1, 1.27.1-1ubuntu0.1, 1.28-2.1ubuntu0.1, 1.28-2.1ubuntu0.2+31 more1.35+dfsg-3.1+e52,413
OSV records
DEBIAN-CVE-2026-18477UBUNTU-CVE-2026-18477ECHO-b8d2-238f-d46b

Charts affected

2,442 by stars
ChartLatestAffected imagesRadar Score
skypilotgeek-cookbookVerified publisher0.0.11 of 3See more

skypilot geek-cookbook 0.0.1

1 of the 3 container images this version deploys carry CVE-2026-18477.

Container imageDigestPackageFixed in
berkeleyskypilot/skypilot-nightly:latest8da2f3cda472
tar@1.35+dfsg-3.1
no fix listed

Open the chart page →

9,010
teedygeek-cookbookVerified publisher6.2.01 of 1See more

teedy geek-cookbook 6.2.0

1 of the 1 container images this version deploys carry CVE-2026-18477.

Container imageDigestPackageFixed in
sismics/docs:v1.10f4b0ef019cf1
tar@1.29b-2
no fix listed

Open the chart page →

27,026
transmissiongeek-cookbookVerified publisher8.4.31 of 1See more

transmission geek-cookbook 8.4.3

1 of the 1 container images this version deploys carry CVE-2026-18477.

Container imageDigestPackageFixed in
ghcr.io/k8s-at-home/transmission:v3.006011182e3946
tar@1.30+dfsg-7ubuntu0.20.04.2
no fix listed

Open the chart page →

11,927
xtevegeek-cookbookVerified publisher8.4.21 of 1See more

xteve geek-cookbook 8.4.2

1 of the 1 container images this version deploys carry CVE-2026-18477.

Container imageDigestPackageFixed in
ghcr.io/k8s-at-home/xteve:v2.2.0.200292b3614670f
tar@1.30+dfsg-7ubuntu0.20.04.2
no fix listed

Open the chart page →

17,985
chproxygeneral-helm-chartsVerified publisher0.0.21 of 1See more

chproxy general-helm-charts 0.0.2

1 of the 1 container images this version deploys carry CVE-2026-18477.

Container imageDigestPackageFixed in
contentsquareplatform/chproxy:v1.26.524555f22d4be
tar@1.34+dfsg-1.2+deb12u1
no fix listed

Open the chart page →

3,739
mongogengxiankun-charts0.1.01 of 1See more

mongo gengxiankun-charts 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-18477.

Container imageDigestPackageFixed in
library/mongo:5.041108d183e97
tar@1.30+dfsg-7ubuntu0.20.04.4
no fix listed

Open the chart page →

4,017
redisgengxiankun-charts0.2.01 of 1See more

redis gengxiankun-charts 0.2.0

1 of the 1 container images this version deploys carry CVE-2026-18477.

Container imageDigestPackageFixed in
library/redis:latest298e5b3bc566
tar@1.35+dfsg-3.1
no fix listed

Open the chart page →

985
rocketmqgengxiankun-charts0.3.01 of 1See more

rocketmq gengxiankun-charts 0.3.0

1 of the 1 container images this version deploys carry CVE-2026-18477.

Container imageDigestPackageFixed in
apache/rocketmq:5.3.0434d8398f996
tar@1.35+dfsg-3build1
no fix listed

Open the chart page →

4,978
genieacsgenieacsVerified publisher0.5.11 of 2See more

genieacs genieacs 0.5.1

1 of the 2 container images this version deploys carry CVE-2026-18477.

Container imageDigestPackageFixed in
drumsergio/genieacs:1.2.16.028244054e1bf
tar@1.34+dfsg-1.2+deb12u1
no fix listed

Open the chart page →

4,275
geonetwork-k8sgeonetwork-k8sVerified publisher4.2.84 of 5See more

geonetwork-k8s geonetwork-k8s 4.2.8

4 of the 5 container images this version deploys carry CVE-2026-18477.

Container imageDigestPackageFixed in
geonetwork/gn-cloud-ogc-api-records-service:4.2.8-020c9bb761f67
tar@1.29b-2ubuntu0.4
no fix listed
jingking/geonetwork-hnap:4.2.843e74ab234e1
tar@1.30+dfsg-7ubuntu0.20.04.4
no fix listed
library/elasticsearch:7.17.1588c2ec10c7f2
tar@1.30+dfsg-7ubuntu0.20.04.4
no fix listed
library/kibana:7.17.150172f1c538e7
tar@1.30+dfsg-7ubuntu0.20.04.4
no fix listed

Open the chart page →

34,936
istiogetindataVerified publisher1.11.12 of 2See more

istio getindata 1.11.1

2 of the 2 container images this version deploys carry CVE-2026-18477.

Container imageDigestPackageFixed in
gcr.io/istio-release/pilot:1.11.1c552478f8f11
tar@1.30+dfsg-7ubuntu0.20.04.1
no fix listed
gcr.io/istio-release/proxyv2:1.11.19538fabe49fd
tar@1.30+dfsg-7ubuntu0.20.04.1
no fix listed

Open the chart page →

16,870
ghostghostVerified publisher0.1.01 of 4See more

ghost ghost 0.1.0

1 of the 4 container images this version deploys carry CVE-2026-18477.

Container imageDigestPackageFixed in
library/ghost:5.79.083f7bf209844
tar@1.34+dfsg-1.2
no fix listed

Open the chart page →

9,097
qryn-helmgigapipeVerified publisher0.1.91 of 1See more

qryn-helm gigapipe 0.1.9

1 of the 1 container images this version deploys carry CVE-2026-18477.

Container imageDigestPackageFixed in
qxip/qryn:3.2.3977acc9c7a9fd
tar@1.34+dfsg-1.2+deb12u1
no fix listed

Open the chart page →

3,003
redis-uigin0.0.11 of 1See more

redis-ui gin 0.0.1

1 of the 1 container images this version deploys carry CVE-2026-18477.

Container imageDigestPackageFixed in
patrikx3/p3x-redis-ui:latestf19eb45b0694
tar@1.34+dfsg-1.2+deb12u1
no fix listed

Open the chart page →

1,083
rabbitmqginger-society0.1.01 of 2See more

rabbitmq ginger-society 0.1.0

1 of the 2 container images this version deploys carry CVE-2026-18477.

Container imageDigestPackageFixed in
library/rabbitmq:4-managementffd1b50c522a
tar@1.35+dfsg-3ubuntu0.4
no fix listed

Open the chart page →

1,525
knativegitlabVerified publisher0.10.03 of 10See more

knative gitlab 0.10.0

3 of the 10 container images this version deploys carry CVE-2026-18477.

Container imageDigestPackageFixed in
istio/node-agent-k8s:1.2.9268ab879ea51
tar@1.28-2.1ubuntu0.1
no fix listed
istio/pilot:1.2.9c09319753454
tar@1.28-2.1ubuntu0.1
no fix listed
istio/proxyv2:1.2.90c78be035e98
tar@1.28-2.1ubuntu0.1
no fix listed

Open the chart page →

36,198
glassflow-etlglassflowVerified publisher0.5.211 of 16See more

glassflow-etl glassflow 0.5.21

1 of the 16 container images this version deploys carry CVE-2026-18477.

Container imageDigestPackageFixed in
ghcr.io/glassflow/glassflow-notifier:v1.0.3d1b0ce10b513
tar@1.35+dfsg-3.1
no fix listed

Open the chart page →

12,125
pgbouncerglassflowVerified publisher0.1.01 of 1See more

pgbouncer glassflow 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-18477.

Container imageDigestPackageFixed in
bitnamilegacy/pgbouncer:1.23.192356da09704
tar@1.34+dfsg-1.2+deb12u1
no fix listed

Open the chart page →

3,297
glauthglauthVerified publisher0.3.171 of 2See more

glauth glauth 0.3.17

1 of the 2 container images this version deploys carry CVE-2026-18477.

Container imageDigestPackageFixed in
nouchka/sqlite3:latestd183308f201c
tar@1.35+dfsg-3.1
no fix listed

Open the chart page →

2,648
glpiglpi-chart0.1.13 of 3See more

glpi glpi-chart 0.1.1

3 of the 3 container images this version deploys carry CVE-2026-18477.

Container imageDigestPackageFixed in
library/mariadb:latestdd9b303aed4f
tar@1.35+dfsg-3ubuntu0.4
no fix listed
library/phpmyadmin:latest3a8a8d6b5289
tar@1.35+dfsg-3.1
no fix listed
vdiogov/glpi-conteiner:latest6945f84f0058
tar@1.34+dfsg-1.2+deb12u1
no fix listed

Open the chart page →

12,399
goofy-chartgoofy-chart0.1.01 of 1See more

goofy-chart goofy-chart 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-18477.

Container imageDigestPackageFixed in
library/nginx:latest05b8cb60c354
tar@1.35+dfsg-3.1
no fix listed

Open the chart page →

1,861
platformgoofy-chart0.1.01 of 1See more

platform goofy-chart 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-18477.

Container imageDigestPackageFixed in
devopsgoofy/k8s-platform:latestad865312099f
tar@1.34+dfsg-1.2+deb12u1
no fix listed

Open the chart page →

2,813
googly-logingoogly-login0.1.01 of 2See more

googly-login googly-login 0.1.0

1 of the 2 container images this version deploys carry CVE-2026-18477.

Container imageDigestPackageFixed in
library/postgres:16f1c3376c26f2
tar@1.35+dfsg-3.1
no fix listed

Open the chart page →

1,667
Governify-Bluejaygovernify0.1.02 of 12See more

Governify-Bluejay governify 0.1.0

2 of the 12 container images this version deploys carry CVE-2026-18477.

Container imageDigestPackageFixed in
library/mongo:latest5211c51171f5
tar@1.35+dfsg-3ubuntu0.4
no fix listed
library/redis:latest298e5b3bc566
tar@1.35+dfsg-3.1
no fix listed

Open the chart page →

22,665
Governify-Falcongovernify0.1.01 of 10See more

Governify-Falcon governify 0.1.0

1 of the 10 container images this version deploys carry CVE-2026-18477.

Container imageDigestPackageFixed in
library/mongo:latest5211c51171f5
tar@1.35+dfsg-3ubuntu0.4
no fix listed

Open the chart page →

24,462
jaegergpg-dev3.3.32 of 5See more

jaeger gpg-dev 3.3.3

2 of the 5 container images this version deploys carry CVE-2026-18477.

Container imageDigestPackageFixed in
jaegertracing/jaeger-cassandra-schema:1.53.0d48d6dab2c65
tar@1.34+dfsg-1ubuntu0.1.22.04.2
no fix listed
library/cassandra:3.11.65aa8400b4b3b
tar@1.29b-2ubuntu0.1
no fix listed

Open the chart page →

19,351
kubernetes-dashboardgpg-dev7.5.01 of 5See more

kubernetes-dashboard gpg-dev 7.5.0

1 of the 5 container images this version deploys carry CVE-2026-18477.

Container imageDigestPackageFixed in
library/kong:3.6a42d2b4503e7
tar@1.34+dfsg-1ubuntu0.1.22.04.2
no fix listed

Open the chart page →

6,087
openclawgpg-dev1.5.361 of 2See more

openclaw gpg-dev 1.5.36

1 of the 2 container images this version deploys carry CVE-2026-18477.

Container imageDigestPackageFixed in
chromedp/headless-shell:148.0.7778.97313ed7255ae1
tar@1.35+dfsg-3.1
no fix listed

Open the chart page →

1,665
opentelemetry-demogpg-dev0.33.89 of 27See more

opentelemetry-demo gpg-dev 0.33.8

9 of the 27 container images this version deploys carry CVE-2026-18477.

Container imageDigestPackageFixed in
ghcr.io/open-telemetry/demo:1.12.0-imageprovider4e322858fe56
tar@1.34+dfsg-1.2+deb12u1
no fix listed
ghcr.io/open-telemetry/demo:1.12.0-accountingservice6d051840bb29
tar@1.34+dfsg-1.2+deb12u1
no fix listed
ghcr.io/open-telemetry/demo:1.12.0-loadgenerator85c9935ff31b
tar@1.34+dfsg-1.2+deb12u1
no fix listed
ghcr.io/open-telemetry/demo:1.12.0-quoteservice87eb325d306f
tar@1.34+dfsg-1.2+deb12u1
no fix listed
ghcr.io/open-telemetry/demo:1.12.0-frontendproxy9fdec1be03e4
tar@1.34+dfsg-1ubuntu0.1.22.04.2
no fix listed
ghcr.io/open-telemetry/demo:1.12.0-emailservicea1f5cebb5240
tar@1.34+dfsg-1.2
no fix listed
ghcr.io/open-telemetry/demo:1.12.0-shippingservicea3ca4c02a5df
tar@1.34+dfsg-1.2+deb12u1
no fix listed
ghcr.io/open-telemetry/demo:1.12.0-adservicea59e5eead495
tar@1.35+dfsg-3build1
no fix listed
ghcr.io/open-telemetry/demo:1.12.0-recommendationserviceb294a4278407
tar@1.34+dfsg-1.2+deb12u1
no fix listed

Open the chart page →

49,501
video-analytics-demogpu-operator0.1.92 of 3See more

video-analytics-demo gpu-operator 0.1.9

2 of the 3 container images this version deploys carry CVE-2026-18477.

Container imageDigestPackageFixed in
anguda/ant-media:2.5c435285fc241
tar@1.30+dfsg-7ubuntu0.20.04.3
no fix listed
library/nginx:latest05b8cb60c354
tar@1.35+dfsg-3.1
no fix listed

Open the chart page →

15,820
video-analytics-demo-l4tgpu-operator0.1.31 of 3See more

video-analytics-demo-l4t gpu-operator 0.1.3

1 of the 3 container images this version deploys carry CVE-2026-18477.

Container imageDigestPackageFixed in
library/nginx:latest05b8cb60c354
tar@1.35+dfsg-3.1
no fix listed

Open the chart page →

1,861
grafana-samplinggrafana1.1.71 of 2See more

grafana-sampling grafana 1.1.7

1 of the 2 container images this version deploys carry CVE-2026-18477.

Container imageDigestPackageFixed in
grafana/alloy:v1.11.38c7256f412fe
tar@1.35+dfsg-3build1
no fix listed

Open the chart page →

3,381
grapple-installergrapple-installer0.3.221 of 1See more

grapple-installer grapple-installer 0.3.22

1 of the 1 container images this version deploys carry CVE-2026-18477.

Container imageDigestPackageFixed in
grpl/grapple-cli:0.2.127c00aafee6629
tar@1.35+dfsg-3build1
no fix listed

Open the chart page →

8,012
gravitino-iceberg-rest-server-helmgravitino-iceberg-rest-server1.3.111 of 1See more

gravitino-iceberg-rest-server-helm gravitino-iceberg-rest-server 1.3.11

1 of the 1 container images this version deploys carry CVE-2026-18477.

Container imageDigestPackageFixed in
apache/gravitino-iceberg-rest:1.3.080136ae753ee
tar@1.34+dfsg-1ubuntu0.1.22.04.2
no fix listed

Open the chart page →

4,687
grayloggraylogVerified publisher1.0.22 of 4See more

graylog graylog 1.0.2

2 of the 4 container images this version deploys carry CVE-2026-18477.

Container imageDigestPackageFixed in
graylog/graylog:6.1.1019de1aff48c2
tar@1.34+dfsg-1ubuntu0.1.22.04.2
no fix listed
library/mongo:85211c51171f5
tar@1.35+dfsg-3ubuntu0.4
no fix listed

Open the chart page →

5,366
gridgain9gridgainVerified publisher1.1.101 of 2See more

gridgain9 gridgain 1.1.10

1 of the 2 container images this version deploys carry CVE-2026-18477.

Container imageDigestPackageFixed in
library/debian:12.12-slimd5d3f9c23164
tar@1.34+dfsg-1.2+deb12u1
no fix listed

Open the chart page →

3,229
routergroundcover1.12.3753See more

router groundcover 1.12.375

3 container images this version deploys carry CVE-2026-18477.

Container imageDigestPackageFixed in
public.ecr.aws/groundcovercom/grafana-groundcover:v0.0.54-grafana11.3.7ee9d973e3952
tar@1.34+dfsg-1ubuntu0.1.22.04.2
no fix listed
public.ecr.aws/groundcovercom/postgres:18.1-20260208b7d7910c0bb0
tar@1.35+dfsg-3.1+e3
1.35+dfsg-3.1+e5
quay.io/groundcover/tools:20260719b705e0cbe171
tar@1.35+dfsg-3.1+e4
1.35+dfsg-3.1+e5

Open the chart page →

—
temporalgroundcover1.12.3751See more

temporal groundcover 1.12.375

1 container image this version deploys carries CVE-2026-18477.

Container imageDigestPackageFixed in
public.ecr.aws/groundcovercom/temporalio/admin-tools:1.29.7-20260730-1af8cea3b8538
tar@1.35+dfsg-3.1+e4
1.35+dfsg-3.1+e5

Open the chart page →

—
librechat-exporterhajowielandVerified publisher1.0.01 of 1See more

librechat-exporter hajowieland 1.0.0

1 of the 1 container images this version deploys carry CVE-2026-18477.

Container imageDigestPackageFixed in
ghcr.io/virtuos/librechat_exporter:2.0.050ea1cf0086f
tar@1.34+dfsg-1.2+deb12u1
no fix listed

Open the chart page →

2,308
rag-apihajowielandVerified publisher1.0.01 of 1See more

rag-api hajowieland 1.0.0

1 of the 1 container images this version deploys carry CVE-2026-18477.

Container imageDigestPackageFixed in
ghcr.io/danny-avila/librechat-rag-api-dev-lite:latestf9f34c8ed688
tar@1.35+dfsg-3.1
no fix listed

Open the chart page →

1,723
web-checkhajowielandVerified publisher1.0.11 of 1See more

web-check hajowieland 1.0.1

1 of the 1 container images this version deploys carry CVE-2026-18477.

Container imageDigestPackageFixed in
ghcr.io/lissy93/web-check:latesta4e021c0f6a9
tar@1.34+dfsg-1.2+deb12u1
no fix listed

Open the chart page →

9,434
hatchet-apihatchetOfficialVerified publisher0.19.01 of 4See more

hatchet-api hatchet 0.19.0

1 of the 4 container images this version deploys carry CVE-2026-18477.

Container imageDigestPackageFixed in
library/postgres:latest4ef4dbc939d6
tar@1.35+dfsg-3.1
no fix listed

Open the chart page →

1,707
hatchet-hahatchetOfficialVerified publisher0.19.03 of 8See more

hatchet-ha hatchet 0.19.0

3 of the 8 container images this version deploys carry CVE-2026-18477.

Container imageDigestPackageFixed in
bitnamilegacy/postgresql:17.6.0-debian-12-r4926356130b77
tar@1.34+dfsg-1.2+deb12u1
no fix listed
bitnamilegacy/rabbitmq:4.1.3-debian-12-r19e635efba431
tar@1.34+dfsg-1.2+deb12u1
no fix listed
library/postgres:latest4ef4dbc939d6
tar@1.35+dfsg-3.1
no fix listed

Open the chart page →

7,447
hatchet-stackhatchetOfficialVerified publisher0.19.03 of 8See more

hatchet-stack hatchet 0.19.0

3 of the 8 container images this version deploys carry CVE-2026-18477.

Container imageDigestPackageFixed in
bitnamilegacy/postgresql:17.6.0-debian-12-r4926356130b77
tar@1.34+dfsg-1.2+deb12u1
no fix listed
bitnamilegacy/rabbitmq:4.1.3-debian-12-r19e635efba431
tar@1.34+dfsg-1.2+deb12u1
no fix listed
library/postgres:latest4ef4dbc939d6
tar@1.35+dfsg-3.1
no fix listed

Open the chart page →

7,447
hawk-envoy-pluginhawk0.1.01 of 4See more

hawk-envoy-plugin hawk 0.1.0

1 of the 4 container images this version deploys carry CVE-2026-18477.

Container imageDigestPackageFixed in
kong/httpbin:latesta6ac46531193
tar@1.34+dfsg-1ubuntu0.1.22.04.2
no fix listed

Open the chart page →

9,233
web-charthcpark-ktcloudlab0.1.01 of 1See more

web-chart hcpark-ktcloudlab 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-18477.

Container imageDigestPackageFixed in
library/nginx:latest05b8cb60c354
tar@1.35+dfsg-3.1
no fix listed

Open the chart page →

1,861
hdx-oss-v2hdx-oss-v20.8.41 of 5See more

hdx-oss-v2 hdx-oss-v2 0.8.4

1 of the 5 container images this version deploys carry CVE-2026-18477.

Container imageDigestPackageFixed in
library/mongo:5.0.14-focal50cae5081ab4
tar@1.30+dfsg-7ubuntu0.20.04.2
no fix listed

Open the chart page →

6,758
heliconehelicone0.1.423 of 14See more

helicone helicone 0.1.42

3 of the 14 container images this version deploys carry CVE-2026-18477.

Container imageDigestPackageFixed in
clickhouse/clickhouse-server:23.4.2.11dc5658853ce1
tar@1.34+dfsg-1ubuntu0.1.22.04.1
no fix listed
helicone/clickhouse-migration-runner:v2025.03.05-14c69b971a7e4
tar@1.30+dfsg-7ubuntu0.20.04.4
no fix listed
helicone/supabase-migration-runner:v2025.03.05-14a913936c97b
tar@1.34+dfsg-1.2
no fix listed

Open the chart page →

25,250
helixhelix1.4.31 of 2See more

helix helix 1.4.3

1 of the 2 container images this version deploys carry CVE-2026-18477.

Container imageDigestPackageFixed in
quay.io/jupyterhub/k8s-hub:4.3.492f883d09270
tar@1.34+dfsg-1.2+deb12u1
no fix listed

Open the chart page →

5,696
test-apphellnet0.1.11 of 1See more

test-app hellnet 0.1.1

1 of the 1 container images this version deploys carry CVE-2026-18477.

Container imageDigestPackageFixed in
library/nginx:latest05b8cb60c354
tar@1.35+dfsg-3.1
no fix listed

Open the chart page →

1,861

Container images carrying it

2,413 by charts deploying them

A fixed version is listed for 1 of the 1 affected package.

Container imageDigestPackageFixed inUsed by
photoprism/photoprism:240711-cefc6fd632ca74
tar@1.35+dfsg-3build1
no fix listed
1
phpmyadmin/phpmyadmin:5.2.342a200db07b4
tar@1.35+dfsg-3.1
no fix listed
1
pk910/powfaucet:v2-stable3dcae6a62896
tar@1.34+dfsg-1.2+deb12u1
no fix listed
1
plantuml/plantuml-server:jetty-v1.2026.85f6f99ec2fc1
tar@1.35+dfsg-3build1
no fix listed
1
platform9community/admin-server:latestde3fa9b70df1
tar@1.29b-2ubuntu0.2
no fix listed
1
platform9community/api-gateway:latest40a4970de568
tar@1.29b-2ubuntu0.2
no fix listed
1
platform9community/customers-service:latest2089811e5cc6
tar@1.29b-2ubuntu0.2
no fix listed
1
platform9community/vets-service:latestd1165c94dfb3
tar@1.29b-2ubuntu0.2
no fix listed
1
platform9community/visits-service:latest8d11b50368c6
tar@1.29b-2ubuntu0.2
no fix listed
1
plexinc/pms-docker:1.25.4.5487-648a8f9f946ea59b96f2b
tar@1.30+dfsg-7ubuntu0.20.04.1
no fix listed
1
plexinc/pms-docker:1.43.3.10896-cb3ebc72d83a425ae9e13
tar@1.35+dfsg-3ubuntu0.4
no fix listed
1
plexinc/pms-docker:1.19.5.3112-b23ab3896b598abb134ad
tar@1.28-2.1ubuntu0.1
no fix listed
1
pockost/matomo:5.13.07f5d293cbe4e
tar@1.35+dfsg-3.1
no fix listed
1
pococze/python-hello-elos:2.0.07a1aab425e51
tar@1.34+dfsg-1.2+deb12u1
no fix listed
1
polyaxon/polyaxon-api:2.16.42b55c3265a90
tar@1.35+dfsg-3.1
no fix listed
1
polyaxon/polyaxon-streams:2.16.4c186bd9834c0
tar@1.35+dfsg-3.1
no fix listed
1
posit/package-manager:2026.09.0-ubuntu-24.04527493ef621b
tar@1.35+dfsg-3ubuntu0.4
no fix listed
1
postgis/postgis:18-3.67e00e8c3539f
tar@1.35+dfsg-3.1
no fix listed
1
powerdns/pdns-recursor-54:5.4.533aadc74a8d6
tar@1.35+dfsg-3.1
no fix listed
1
pozetroninc/keydb:v6.0.1653ae64f29da8
tar@1.29b-2ubuntu0.1
no fix listed
1
pposkrobko/risk-advisor:v1.0.0eaf260341dba
tar@1.28-2.1ubuntu0.1
no fix listed
1
praravind1801/helmimages:3.0.0f29d637b9ce1
tar@1.34+dfsg-1.2
no fix listed
1
prefecthq/prefect:2.20.4-python3.101df4b5b6238a
tar@1.34+dfsg-1.2+deb12u1
no fix listed
1
prefecthq/prefect:3.8.6-python3.11f518ebb9c353
tar@1.35+dfsg-3.1
no fix listed
1
prefecthq/prometheus-prefect-exporter:4.1.06e0e79cabdc2
tar@1.35+dfsg-3.1
no fix listed
1
pretix/standalone:2026.7.05df3b7aa852e
tar@1.35+dfsg-3.1
no fix listed
1
probely/farcaster-onprem-agent:v3741b34e8166f
tar@1.34+dfsg-1.2+deb12u1
no fix listed
1
prodrigestivill/postgres-backup-local:latestf70742ebe42b
tar@1.35+dfsg-3.1
no fix listed
1
project2team4/react:latest3ff031a08887
tar@1.30+dfsg-7ubuntu0.20.04.2
no fix listed
1
prom/cloudwatch-exporter:v0.16.071c2e988af06
tar@1.35+dfsg-3build1
no fix listed
1
promzeus/redis-sentinel-gateway:v182f6d56e280b
tar@1.34+dfsg-1.2+deb12u1
no fix listed
1
prowlercloud/prowler-api:5.31.14f252d579be2
tar@1.34+dfsg-1.2+deb12u1
no fix listed
1
proxysql/proxysql:3.0.8947a7abad45b
tar@1.35+dfsg-3.1
no fix listed
1
proxysql/proxysql:2.7.3a4d6c35c2949
tar@1.34+dfsg-1.2+deb12u1
no fix listed
1
pschichtel/mindustry-server:v145.1b543e9c2d371
tar@1.34+dfsg-1ubuntu0.1.22.04.2
no fix listed
1
psorab/elibrary:latest53b68896c4ce
tar@1.30+dfsg-7ubuntu0.20.04.3
no fix listed
1
ptthanh1511/freeradius-server:3.0.26-netdebug5741cbde85ab
tar@1.30+dfsg-7ubuntu0.20.04.2
no fix listed
1
puppet/puppet-agent:7.14.00b6fd9a6b7da
tar@1.29b-2ubuntu0.2
no fix listed
1
qdrant/qdrant:v1.7.45f2a56b95266
tar@1.34+dfsg-1.2
no fix listed
1
qdrant/qdrant:v1.4.166ee661d5241
tar@1.34+dfsg-1.2
no fix listed
1
qjoly/kubernetes-coffee-image:simpleec94d3bdc035
tar@1.35+dfsg-3.1
no fix listed
1
qonstrukt/php:8.4-v8-apache089af7925aa1
tar@1.35+dfsg-3ubuntu0.3
no fix listed
1
quickwit/quickwit:v0.8.1d29332bdadcc
tar@1.34+dfsg-1.2+deb12u1
no fix listed
1
qumine/minecraft-server:v0.1.15c0b650d51132
tar@1.34+dfsg-1build3
no fix listed
1
qxip/qryn:3.2.3977acc9c7a9fd
tar@1.34+dfsg-1.2+deb12u1
no fix listed
1
rabeh/apibootspring:1.0941007b6946e
tar@1.34+dfsg-1ubuntu0.1.22.04.1
no fix listed
1
radarbase/radar-push-endpoint:0.4.0e1758508e033
tar@1.35+dfsg-3build1
no fix listed
1
radarbase/radar-redcapintegration:1.0.6fcd973d4796d
tar@1.35+dfsg-3build1
no fix listed
1
radondb/clickhouse-server:v21.1.3.32-stable4732df471073
tar@1.29b-2ubuntu0.2
no fix listed
1
rancher/local-path-provisioner:v0.0.5e66f32d19eb9
tar@1.28-2.1ubuntu0.1
no fix listed
1

syft 1.42.1 · advisories as of 17 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.