CVE-2026-18477

Medium

Advisory

Published 3 Aug 2026In the index since 5 Sept 2026

Severity: Medium; worst across findings
CVSS: 4.4; base score, highest
EPSS: 0.001; 0th percentile
CISA KEV: Not listed; no confirmed exploitation
Charts affected: 2,541; of 17,828 indexed, latest versions
Container images: 2,543; deployed by those charts
Fix available: 1 of 1; affected package

The matching OSV records carry no description.

Carried by container images the latest versions of 2,541 of 17,828 indexed charts deploy, on 2,543 images.

Affected package	Affected versions	Fixed in	Images
tardeb	1.27.1-1, 1.27.1-1ubuntu0.1, 1.28-2.1ubuntu0.1, 1.28-2.1ubuntu0.2+31 more	1.35+dfsg-3.1+e5	2,543

OSV records: DEBIAN-CVE-2026-18477 UBUNTU-CVE-2026-18477 ECHO-b8d2-238f-d46b

Charts affected

2,541 by stars

Chart

Latest

Affected images

Radar Score

paperless-ngxadnoctem

0.4.2

3 of 5 See more

paperless-ngx adnoctem 0.4.2

3 of the 5 container images this version deploys carry CVE-2026-18477.

Container image	Digest	Package	Fixed in
apache/tika :2.9.0.0	92d055a84e9e	tar@1.34+dfsg-1ubuntu0.1.22.04.1	no fix listed
gotenberg/gotenberg :8.36.0	87c16b9f3642	tar@1.35+dfsg-3.1	no fix listed
ghcr.io/paperless-ngx/paperless-ngx :3.1.3	aa810a36942c	tar@1.35+dfsg-3.1	no fix listed

Open the chart page →

20,504

github-actions-runneradwerx

0.10.3

1 of 1 See more

github-actions-runner adwerx 0.10.3

1 of the 1 container images this version deploys carry CVE-2026-18477.

Container image	Digest	Package	Fixed in
adwerx/github-actions-runner :2.276.1-20.04-1	840d2b078682	tar@1.30+dfsg-7ubuntu0.20.04.1	no fix listed

Open the chart page →

13,693

agentareaagentarea

0.0.19

4 of 16 See more

agentarea agentarea 0.0.19

4 of the 16 container images this version deploys carry CVE-2026-18477.

Container image	Digest	Package	Fixed in
agentarea/agentarea-api :latest	026beb34f72f	tar@1.35+dfsg-3.1	no fix listed
agentarea/agentarea-mcp-runner :latest	615da5917632	tar@1.34+dfsg-1.2+deb12u1	no fix listed
agentarea/agentarea-worker :latest	0331c6ce491f	tar@1.35+dfsg-3.1	no fix listed
valkey/valkey :9.0.1	546304417fea	tar@1.35+dfsg-3.1	no fix listed

Open the chart page →

13,039

akeyless-api-gatewayakeyless-services-helm

1.62.26

1 of 1 See more

akeyless-api-gateway akeyless-services-helm 1.62.26

1 of the 1 container images this version deploys carry CVE-2026-18477.

Container image	Digest	Package	Fixed in
akeyless/base :latest	759e4289fae8	tar@1.35+dfsg-3build1	no fix listed

Open the chart page →

2,497

icat-k8salba-helm-charts

1.1.0

1 of 4 See more

icat-k8s alba-helm-charts 1.1.0

1 of the 4 container images this version deploys carry CVE-2026-18477.

Container image	Digest	Package	Fixed in
payara/server-full :7.2026.2-jdk25	31f1253f0cf8	tar@1.34+dfsg-1ubuntu0.1.22.04.2	no fix listed

Open the chart page →

3,805

jellyfinalekc

0.9.0

1 of 1 See more

jellyfin alekc 0.9.0

1 of the 1 container images this version deploys carry CVE-2026-18477.

Container image	Digest	Package	Fixed in
jellyfin/jellyfin :10.11.11	aefb67e6a7ff	tar@1.35+dfsg-3.1	no fix listed

Open the chart page →

2,681

paperless-ngxalexmorbo-paperless-ngx

0.2.0

2 of 2 See more

paperless-ngx alexmorbo-paperless-ngx 0.2.0

2 of the 2 container images this version deploys carry CVE-2026-18477.

Container image	Digest	Package	Fixed in
valkey/valkey :9.0.2	930b41430fb7	tar@1.35+dfsg-3.1	no fix listed
ghcr.io/paperless-ngx/paperless-ngx :2.20.5	665f2f5cc548	tar@1.35+dfsg-3.1	no fix listed

Open the chart page →

12,332

clearml-agentallegroai

5.3.3

1 of 1 See more

clearml-agent allegroai 5.3.3

1 of the 1 container images this version deploys carry CVE-2026-18477.

Container image	Digest	Package	Fixed in
allegroai/clearml-agent-k8s-base :1.24-21	772827a01bb5	tar@1.29b-2ubuntu0.3	no fix listed

Open the chart page →

69,570

mariadbalphani-helm-charts

10.10.3

1 of 1 See more

mariadb alphani-helm-charts 10.10.3

1 of the 1 container images this version deploys carry CVE-2026-18477.

Container image	Digest	Package	Fixed in
library/mariadb :10.10.2	bfc25a68e113	tar@1.34+dfsg-1build3	no fix listed

Open the chart page →

8,448

hermes-agentankra-charts

0.3.1

1 of 1 See more

hermes-agent ankra-charts 0.3.1

1 of the 1 container images this version deploys carry CVE-2026-18477.

Container image	Digest	Package	Fixed in
nousresearch/hermes-agent :v2026.8.27	e0df6adebddf	tar@1.35+dfsg-3.1	no fix listed

Open the chart page →

5,932

alazanteon

0.12.0

1 of 1 See more

alaz anteon 0.12.0

1 of the 1 container images this version deploys carry CVE-2026-18477.

Container image	Digest	Package	Fixed in
ddosify/alaz :v0.12.0	ea602056d9ce	tar@1.34+dfsg-1.2+deb12u1	no fix listed

Open the chart page →

3,428

anteonanteon

2.6.4

2 of 13 See more

anteon anteon 2.6.4

2 of the 13 container images this version deploys carry CVE-2026-18477.

Container image	Digest	Package	Fixed in
ddosify/selfhosted_backend :3.2.9	3c11e3182652	tar@1.34+dfsg-1.2+deb12u1	no fix listed
ddosify/selfhosted_hammermanager :2.0.2	b796b8c73011	tar@1.34+dfsg-1.2+deb12u1	no fix listed

Open the chart page →

22,669

antreaantrea

2.7.0

2 of 2 See more

antrea antrea 2.7.0

2 of the 2 container images this version deploys carry CVE-2026-18477.

Container image	Digest	Package	Fixed in
antrea/antrea-agent-ubuntu :v2.7.0	c10bc45c6272	tar@1.35+dfsg-3ubuntu0.4	no fix listed
antrea/antrea-controller-ubuntu :v2.7.0	f1373d39217c	tar@1.35+dfsg-3ubuntu0.4	no fix listed

Open the chart page →

3,900

apache-rangerapache-ranger

0.1.0

1 of 2 See more

apache-ranger apache-ranger 0.1.0

1 of the 2 container images this version deploys carry CVE-2026-18477.

Container image	Digest	Package	Fixed in
apache/ranger :2.7.0	76c176e8a0e4	tar@1.34+dfsg-1ubuntu0.1.22.04.2	no fix listed

Open the chart page →

7,867

argocd-backup-s3argocd-backup-s3

0.9.5

1 of 1 See more

argocd-backup-s3 argocd-backup-s3 0.9.5

1 of the 1 container images this version deploys carry CVE-2026-18477.

Container image	Digest	Package	Fixed in
ghcr.io/oguzhan-yilmaz/argocd-backup-s3 :latest	b61c750ade19	tar@1.34+dfsg-1.2+deb12u1	no fix listed

Open the chart page →

5,274

s3dartur9010

1.0.1

1 of 1 See more

s3d artur9010 1.0.1

1 of the 1 container images this version deploys carry CVE-2026-18477.

Container image	Digest	Package	Fixed in
ghcr.io/siafoundation/s3d :bf33bf3	b3fcc85f7282	tar@1.34+dfsg-1.2+deb12u1	no fix listed

Open the chart page →

1,758

arvancloud-webhookarvancloud-webhook

1.0.0

1 of 1 See more

arvancloud-webhook arvancloud-webhook 1.0.0

1 of the 1 container images this version deploys carry CVE-2026-18477.

Container image	Digest	Package	Fixed in
ghcr.io/parmincloud/arvancloud-certmanager-issuer :v1.0.0	0b97452674a3	tar@1.35+dfsg-3.1	no fix listed

Open the chart page →

2,366

soarv113assist-iot-cybersecurity-monitoring-soar

0.1.3

1 of 5 See more

soarv113 assist-iot-cybersecurity-monitoring-soar 0.1.3

1 of the 5 container images this version deploys carry CVE-2026-18477.

Container image	Digest	Package	Fixed in
assistiot/cybersecurity-monitoring_ir-cas :latest	6a107f224c34	tar@1.30+dfsg-7ubuntu0.20.04.3	no fix listed

Open the chart page →

18,082

dltbrokerassist-iot-distributed-broker

0.2.0

3 of 9 See more

dltbroker assist-iot-distributed-broker 0.2.0

3 of the 9 container images this version deploys carry CVE-2026-18477.

Container image	Digest	Package	Fixed in
hyperledger/fabric-ca :latest	a70b6ba64a08	tar@1.34+dfsg-1ubuntu0.1.22.04.3	no fix listed
hyperledger/fabric-ca-tools :latest	4ce6f43ded2e	tar@1.28-2.1ubuntu0.1	no fix listed
hyperledger/fabric-couchdb :0.4.15	f6c724592abf	tar@1.28-2.1ubuntu0.1	no fix listed

Open the chart page →

188,990

dltloggingassist-iot-logging-auditing

0.2.0

3 of 9 See more

dltlogging assist-iot-logging-auditing 0.2.0

3 of the 9 container images this version deploys carry CVE-2026-18477.

Container image	Digest	Package	Fixed in
hyperledger/fabric-ca :latest	a70b6ba64a08	tar@1.34+dfsg-1ubuntu0.1.22.04.3	no fix listed
hyperledger/fabric-ca-tools :latest	4ce6f43ded2e	tar@1.28-2.1ubuntu0.1	no fix listed
hyperledger/fabric-couchdb :0.4.15	f6c724592abf	tar@1.28-2.1ubuntu0.1	no fix listed

Open the chart page →

188,970

astradnsastradns

0.2.9

1 of 2 See more

astradns astradns 0.2.9

1 of the 2 container images this version deploys carry CVE-2026-18477.

Container image	Digest	Package	Fixed in
ghcr.io/astradns/astradns-agent :v0.2.9-unbound	6ba69487f1b0	tar@1.34+dfsg-1.2+deb12u1	no fix listed

Open the chart page →

2,708

music-assistantbdclark-helm-charts

0.4.13

1 of 1 See more

music-assistant bdclark-helm-charts 0.4.13

1 of the 1 container images this version deploys carry CVE-2026-18477.

Container image	Digest	Package	Fixed in
ghcr.io/music-assistant/server :2.10.3	885872224fa5	tar@1.35+dfsg-3.1	no fix listed

Open the chart page →

3,746

open-elevationbeeinventor

0.1.0

1 of 2 See more

open-elevation beeinventor 0.1.0

1 of the 2 container images this version deploys carry CVE-2026-18477.

Container image	Digest	Package	Fixed in
openelevation/open-elevation :latest	82fb21612e86	tar@1.30+dfsg-7ubuntu0.20.04.1	no fix listed

Open the chart page →

87,444

aramid-indexerbiatec-repo

3.9.0

4 of 5 See more

aramid-indexer biatec-repo 3.9.0

4 of the 5 container images this version deploys carry CVE-2026-18477.

Container image	Digest	Package	Fixed in
library/postgres :14	816cf7d06ec3	tar@1.35+dfsg-3.1	no fix listed
scholtz2/aramid-algo-follow-node :v4.3.0-stable	1ec63eca86b6	tar@1.35+dfsg-3build1	no fix listed
scholtz2/aramid-conduit :v1.9.0-stable	3a3b3d3277d2	tar@1.35+dfsg-4ubuntu0.1	no fix listed
scholtz2/aramid-indexer :v3.9.0-stable	6770214bc881	tar@1.35+dfsg-4ubuntu0.1	no fix listed

Open the chart page →

13,831

aramid-participationbiatec-repo

4.4.1

1 of 1 See more

aramid-participation biatec-repo 4.4.1

1 of the 1 container images this version deploys carry CVE-2026-18477.

Container image	Digest	Package	Fixed in
scholtz2/algorand-participation-aramidmain-extended :4.4.1-stable	f12ce1cfb72e	tar@1.34+dfsg-1ubuntu0.1.22.04.2	no fix listed

Open the chart page →

7,469

aramid-relaybiatec-repo

4.4.1

1 of 1 See more

aramid-relay biatec-repo 4.4.1

1 of the 1 container images this version deploys carry CVE-2026-18477.

Container image	Digest	Package	Fixed in
scholtz2/aramid-algo-node :v4.4.1-stable	70263d8fab5b	tar@1.35+dfsg-3build1	no fix listed

Open the chart page →

5,339

voimain-participationbiatec-repo

4.4.1

1 of 1 See more

voimain-participation biatec-repo 4.4.1

1 of the 1 container images this version deploys carry CVE-2026-18477.

Container image	Digest	Package	Fixed in
scholtz2/algorand-participation-voimain-extended :4.4.1-stable	64966de56d9f	tar@1.34+dfsg-1ubuntu0.1.22.04.2	no fix listed

Open the chart page →

7,469

pysequilabiodatageeks

0.1.3

1 of 7 See more

pysequila biodatageeks 0.1.3

1 of the 7 container images this version deploys carry CVE-2026-18477.

Container image	Digest	Package	Fixed in
jupyterhub/k8s-hub :0.9.1	ec78bdae0fed	tar@1.29b-2ubuntu0.1	no fix listed

Open the chart page →

84,866

self-hostbitwarden

2.4.2

1 of 11 See more

self-host bitwarden 2.4.2

1 of the 11 container images this version deploys carry CVE-2026-18477.

Container image	Digest	Package	Fixed in
mcr.microsoft.com/mssql/server :2025-CU5-ubuntu-24.04	cee0f4db03b5	tar@1.35+dfsg-3build1	no fix listed

Open the chart page →

3,600

prometheus-airbyte-exporterbotify-helm-charts

0.7.1

1 of 1 See more

prometheus-airbyte-exporter botify-helm-charts 0.7.1

1 of the 1 container images this version deploys carry CVE-2026-18477.

Container image	Digest	Package	Fixed in
ghcr.io/botify-labs/airbyte_exporter :2.3.0	2105b1f33013	tar@1.34+dfsg-1.2	no fix listed

Open the chart page →

2,942

plexbrandan-schmitz-helm-charts

1.5.1

1 of 1 See more

plex brandan-schmitz-helm-charts 1.5.1

1 of the 1 container images this version deploys carry CVE-2026-18477.

Container image	Digest	Package	Fixed in
linuxserver/plex :1.43.2	2785a6ad64d3	tar@1.35+dfsg-3ubuntu0.2	no fix listed

Open the chart page →

1,206

brightdata-exporterbrightdata-charts

0.2.17

1 of 1 See more

brightdata-exporter brightdata-charts 0.2.17

1 of the 1 container images this version deploys carry CVE-2026-18477.

Container image	Digest	Package	Fixed in
ghcr.io/danielgines/brightdata-exporter :0.2.17	6920d17cf6ff	tar@1.35+dfsg-3.1	no fix listed

Open the chart page →

1,354

nacosbytectl

0.1.6

1 of 1 See more

nacos bytectl 0.1.6

1 of the 1 container images this version deploys carry CVE-2026-18477.

Container image	Digest	Package	Fixed in
nacos/nacos-server :latest	1c191c30c8cd	tar@1.35+dfsg-4ubuntu0.4	no fix listed

Open the chart page →

1,965

pgcagriekin

2.1.1

1 of 2 See more

pg cagriekin 2.1.1

1 of the 2 container images this version deploys carry CVE-2026-18477.

Container image	Digest	Package	Fixed in
cagriekin/pg-ha :2.0.1-pg18	99e17aa165df	tar@1.35+dfsg-3.1	no fix listed

Open the chart page →

2,486

pgvectorcagriekin

2.1.1

2 of 3 See more

pgvector cagriekin 2.1.1

2 of the 3 container images this version deploys carry CVE-2026-18477.

Container image	Digest	Package	Fixed in
cagriekin/pg-ha :2.0.1-pg18	99e17aa165df	tar@1.35+dfsg-3.1	no fix listed
pgvector/pgvector :0.8.5-pg18-trixie	9d2e61c7352b	tar@1.35+dfsg-3.1	no fix listed

Open the chart page →

4,280

geoserver-cloudcamptocamp2

0.0.5

6 of 11 See more

geoserver-cloud camptocamp2 0.0.5

6 of the 11 container images this version deploys carry CVE-2026-18477.

Container image	Digest	Package	Fixed in
geoservercloud/geoserver-cloud-gateway :1.0-RC3	756559ee788a	tar@1.30+dfsg-7ubuntu0.20.04.1	no fix listed
geoservercloud/geoserver-cloud-rest :1.0-RC3	99540eef78ad	tar@1.30+dfsg-7ubuntu0.20.04.1	no fix listed
geoservercloud/geoserver-cloud-wcs :1.0-RC3	5c254c53a357	tar@1.30+dfsg-7ubuntu0.20.04.1	no fix listed
geoservercloud/geoserver-cloud-webui :1.0-RC3	c687b1cbc891	tar@1.30+dfsg-7ubuntu0.20.04.1	no fix listed
geoservercloud/geoserver-cloud-wfs :1.0-RC3	5288f320cf36	tar@1.30+dfsg-7ubuntu0.20.04.1	no fix listed
geoservercloud/geoserver-cloud-wms :1.0-RC3	a30a60ac6cd0	tar@1.30+dfsg-7ubuntu0.20.04.1	no fix listed

Open the chart page →

85,036

geoserverCloudcamptocamp2

0.0.6

6 of 11 See more

geoserverCloud camptocamp2 0.0.6

6 of the 11 container images this version deploys carry CVE-2026-18477.

Container image	Digest	Package	Fixed in
geoservercloud/geoserver-cloud-gateway :1.0-RC3	756559ee788a	tar@1.30+dfsg-7ubuntu0.20.04.1	no fix listed
geoservercloud/geoserver-cloud-rest :1.0-RC3	99540eef78ad	tar@1.30+dfsg-7ubuntu0.20.04.1	no fix listed
geoservercloud/geoserver-cloud-wcs :1.0-RC3	5c254c53a357	tar@1.30+dfsg-7ubuntu0.20.04.1	no fix listed
geoservercloud/geoserver-cloud-webui :1.0-RC3	c687b1cbc891	tar@1.30+dfsg-7ubuntu0.20.04.1	no fix listed
geoservercloud/geoserver-cloud-wfs :1.0-RC3	5288f320cf36	tar@1.30+dfsg-7ubuntu0.20.04.1	no fix listed
geoservercloud/geoserver-cloud-wms :1.0-RC3	a30a60ac6cd0	tar@1.30+dfsg-7ubuntu0.20.04.1	no fix listed

Open the chart page →

85,036

carbone-eecarbone

1.0.6

1 of 1 See more

carbone-ee carbone 1.0.6

1 of the 1 container images this version deploys carry CVE-2026-18477.

Container image	Digest	Package	Fixed in
carbone/carbone-ee :full-5.11.0	518172cbad49	tar@1.35+dfsg-3.1	no fix listed

Open the chart page →

1,844

cbioportalcbioportal

1.1.0

1 of 1 See more

cbioportal cbioportal 1.1.0

1 of the 1 container images this version deploys carry CVE-2026-18477.

Container image	Digest	Package	Fixed in
cbioportal/cbioportal :6.4.1-web-shenandoah	08debbd2dbf9	tar@1.35+dfsg-3build1	no fix listed

Open the chart page →

3,872

cert-vaultcert-vault

2.12.0

6 of 7 See more

cert-vault cert-vault 2.12.0

6 of the 7 container images this version deploys carry CVE-2026-18477.

Container image	Digest	Package	Fixed in
bitnamilegacy/postgres-exporter :0.17.1-debian-12-r2	0cca9d93a617	tar@1.34+dfsg-1.2+deb12u1	no fix listed
bitnamilegacy/postgresql :17.4.0-debian-12-r11	fb3806e823c2	tar@1.34+dfsg-1.2+deb12u1	no fix listed
bitnamilegacy/redis :7.4.2-debian-12-r6	6a5b1d0b5942	tar@1.34+dfsg-1.2+deb12u1	no fix listed
bitnamilegacy/redis-exporter :1.69.0-debian-12-r1	a006df1fd47e	tar@1.34+dfsg-1.2+deb12u1	no fix listed
library/postgres :17	f4c66b820c6f	tar@1.35+dfsg-3.1	no fix listed
ghcr.io/gregperlinli/certvault :2.12.0	a7d0cc9e260a	tar@1.35+dfsg-3build1	no fix listed

Open the chart page →

15,886

home-assistant-matter-servercharts-derwitt-dev

4.2.1

1 of 2 See more

home-assistant-matter-server charts-derwitt-dev 4.2.1

1 of the 2 container images this version deploys carry CVE-2026-18477.

Container image	Digest	Package	Fixed in
ghcr.io/matter-js/matterjs-server :1.4.0	54232d0d3e7d	tar@1.35+dfsg-3.1	no fix listed

Open the chart page →

2,313

passbolt-hachristianhuth

6.0.1

3 of 4 See more

passbolt-ha christianhuth 6.0.1

3 of the 4 container images this version deploys carry CVE-2026-18477.

Container image	Digest	Package	Fixed in
bitnamilegacy/mysql :9.4.0-debian-12-r1	ec13e229247a	tar@1.34+dfsg-1.2+deb12u1	no fix listed
bitnamilegacy/os-shell :12-debian-12-r50	e328cff6e450	tar@1.34+dfsg-1.2+deb12u1	no fix listed
proxysql/proxysql :3.0.11	0e95d1b7cc32	tar@1.35+dfsg-3.1	no fix listed

Open the chart page →

11,069

squestchristianhuth

6.6.8

3 of 4 See more

squest christianhuth 6.6.8

3 of the 4 container images this version deploys carry CVE-2026-18477.

Container image	Digest	Package	Fixed in
bitnamilegacy/mariadb :12.0.2-debian-12-r0	888cdaae3cb9	tar@1.34+dfsg-1.2+deb12u1	no fix listed
bitnamilegacy/rabbitmq :4.1.3-debian-12-r1	9e635efba431	tar@1.34+dfsg-1.2+deb12u1	no fix listed
bitnamilegacy/redis :8.2.1-debian-12-r0	25bf63f3caf7	tar@1.34+dfsg-1.2+deb12u1	no fix listed

Open the chart page →

10,172

typo3christianhuth

7.7.4

2 of 2 See more

typo3 christianhuth 7.7.4

2 of the 2 container images this version deploys carry CVE-2026-18477.

Container image	Digest	Package	Fixed in
bitnamilegacy/mysql :9.4.0-debian-12-r1	ec13e229247a	tar@1.34+dfsg-1.2+deb12u1	no fix listed
martinhelmich/typo3 :12.4	c83a4f3fd7ae	tar@1.34+dfsg-1.2+deb12u1	no fix listed

Open the chart page →

8,795

chromadbchromadb-helm

0.2.2

1 of 1 See more

chromadb chromadb-helm 0.2.2

1 of the 1 container images this version deploys carry CVE-2026-18477.

Container image	Digest	Package	Fixed in
ghcr.io/chroma-core/chroma :1.5.3	cfd193653bd6	tar@1.35+dfsg-3.1	no fix listed

Open the chart page →

1,486

nethermindchronicle

0.0.13

1 of 1 See more

nethermind chronicle 0.0.13

1 of the 1 container images this version deploys carry CVE-2026-18477.

Container image	Digest	Package	Fixed in
nethermind/nethermind :1.31.9	aeca3b55bda5	tar@1.35+dfsg-3build1	no fix listed

Open the chart page →

2,124

claude-code-hubclaude-code-hub

0.1.0

1 of 4 See more

claude-code-hub claude-code-hub 0.1.0

1 of the 4 container images this version deploys carry CVE-2026-18477.

Container image	Digest	Package	Fixed in
ghcr.io/ding113/claude-code-hub :latest	87f9e8a92bd7	tar@1.35+dfsg-3.1	no fix listed

Open the chart page →

1,897

clickhouseclickhouse-alerthawk

26.5.0

1 of 1 See more

clickhouse clickhouse-alerthawk 26.5.0

1 of the 1 container images this version deploys carry CVE-2026-18477.

Container image	Digest	Package	Fixed in
clickhouse/clickhouse-server :26.5	84d05b9c205e	tar@1.34+dfsg-1ubuntu0.1.22.04.6	no fix listed

Open the chart page →

1,784

cloudflared-ingress-operatorcloudflared-ingress-operator

0.3.2

1 of 1 See more

cloudflared-ingress-operator cloudflared-ingress-operator 0.3.2

1 of the 1 container images this version deploys carry CVE-2026-18477.

Container image	Digest	Package	Fixed in
ghcr.io/livepeer/cloudflared-ingress-operator :latest	c179cdcaa050	tar@1.35+dfsg-3.1	no fix listed

Open the chart page →

1,778

tensorflow-notebookcloudnativeapp

0.1.2

1 of 1 See more

tensorflow-notebook cloudnativeapp 0.1.2

1 of the 1 container images this version deploys carry CVE-2026-18477.

Container image	Digest	Package	Fixed in
tensorflow/tensorflow :1.6.0-devel	1e3172090703	tar@1.28-2.1ubuntu0.1	no fix listed

Open the chart page →

93,202

Container images carrying it

2,543 by charts deploying them

A fixed version is listed for 1 of the 1 affected package.

Container image	Digest	Package	Fixed in	Used by
quay.io/jupyterhub/k8s-hub :4.3.5	113e372cf71b	tar@1.34+dfsg-1.2+deb12u1	no fix listed	1
quay.io/jupyterhub/k8s-hub :4.3.4	92f883d09270	tar@1.34+dfsg-1.2+deb12u1	no fix listed	1
quay.io/jupyterhub/k8s-singleuser-sample :4.4.2	65e1b09fc8c9	tar@1.34+dfsg-1.2+deb12u1	no fix listed	1
quay.io/maxiv/pieeat :0.9.3	099715479210	tar@1.35+dfsg-3.1	no fix listed	1
quay.io/mittwald/kube-httpcache :stable	2169032c5840	tar@1.34+dfsg-1.2+deb12u1	no fix listed	1
quay.io/mittwald/kube-mail :latest	04f1099241fc	tar@1.34+dfsg-1.2+deb12u1	no fix listed	1
quay.io/mongodb/mongodb-enterprise-operator :1.8.2	a1c3843b03bc	tar@1.28-2.1ubuntu0.1	no fix listed	1
quay.io/ocellusai/operator :v0.10.5	9ff01f642e2b	tar@1.35+dfsg-3.1	no fix listed	1
quay.io/opsmxpublic/rabbitmq :4.2-management	3408107e5cc4	tar@1.35+dfsg-3build1	no fix listed	1
quay.io/opsmxpublic/spin-sample-pipeline :v1.0.1	c6a934439421	tar@1.28-2.1ubuntu0.1	no fix listed	1
quay.io/opsmxpublic/ubi8-oes-datascience :isd-spin-2025.10.01-af26a30d4-202511261054	d8f66f4117fe	tar@1.35+dfsg-3.1	no fix listed	1
quay.io/poundex/tekton-stash-and-cache :0.2.2	e854423caa09	tar@1.35+dfsg-4ubuntu0.4	no fix listed	1
quay.io/seamware/onboarding :0.2.2	b406475f9f00	tar@1.34+dfsg-1.2+deb12u1	no fix listed	1
quay.io/wi_stefan/consent-manager :0.0.6	56399619568b	tar@1.34+dfsg-1.2+deb12u1	no fix listed	1
quay.io/yushiwho/api :e1f9d77	e0d9b93dbf2b	tar@1.34+dfsg-1.2	no fix listed	1
registry.gitlab.com/crafty-controller/crafty-4 :latest	7b6e87514259	tar@1.35+dfsg-3ubuntu0.4	no fix listed	1
registry.gitlab.com/dyff/dyff-api :0.57.5	b6c44d969163	tar@1.34+dfsg-1.2+deb12u1	no fix listed	1
registry.gitlab.com/dyff/dyff-orchestrator :0.22.19	9bd5d93aaff7	tar@1.34+dfsg-1.2+deb12u1	no fix listed	1
registry.gitlab.com/dyff/workflows-aggregator :0.16.9	b7984253b128	tar@1.35+dfsg-4ubuntu0.4	no fix listed	1
registry.gitlab.com/dyff/workflows-sink :0.16.3	564718e28931	tar@1.34+dfsg-1.2+deb12u1	no fix listed	1
registry.gitlab.com/egos-tech/smtp :latest	df842ed79211	tar@1.35+dfsg-3.1	no fix listed	1
registry.gitlab.com/enbuild-staging/vivsoft-platform-ui/enbuild-frontend :1.0.31	66353ce9bf98	tar@1.35+dfsg-3.1	no fix listed	1
registry.gitlab.com/enbuild-staging/vivsoft-platform-ui/enbuild-mq-consumer :1.0.31	0e3cd8c7776d	tar@1.34+dfsg-1.2+deb12u1	no fix listed	1
registry.gitlab.com/enbuild-staging/vivsoft-platform-ui/rabbitmq :3.12.14	5a9334f371f3	tar@1.34+dfsg-1.2+deb12u1	no fix listed	1
registry.gitlab.com/gitlab-org/build/cng/certificates :v19.4.0	1c38ad710b0c	tar@1.35+dfsg-3.1	no fix listed	1
registry.gitlab.com/gitlab-org/build/cng/gitaly :v19.4.0	704cd68566af	tar@1.35+dfsg-3.1	no fix listed	1
registry.gitlab.com/gitlab-org/build/cng/gitlab-base :v19.4.0	696d798a5c85	tar@1.35+dfsg-3.1	no fix listed	1
registry.gitlab.com/gitlab-org/build/cng/gitlab-container-registry :v4.40.2-gitlab	dc1a8972c640	tar@1.34+dfsg-1.2+deb12u1	no fix listed	1
registry.gitlab.com/gitlab-org/build/cng/gitlab-exporter :17.0.2	6645e014f75d	tar@1.35+dfsg-3.1	no fix listed	1
registry.gitlab.com/gitlab-org/build/cng/gitlab-openbao :v2.5.5-gitlab2	5b7636dfba3f	tar@1.35+dfsg-3.1	no fix listed	1
registry.gitlab.com/gitlab-org/build/cng/gitlab-shell :v14.57.3	aca1bb3d5b7e	tar@1.35+dfsg-3.1	no fix listed	1
registry.gitlab.com/gitlab-org/build/cng/gitlab-workhorse-ee :v19.4.0	2256b49461fa	tar@1.35+dfsg-3.1	no fix listed	1
registry.gitlab.com/gitlab-org/build/cng/kubectl :v19.4.0	48ee51dd67d4	tar@1.35+dfsg-3.1	no fix listed	1
registry.gitlab.com/infinitydon/registry/open5gs-aio :v2.2.2	f6385712935f	tar@1.30+dfsg-7ubuntu0.20.04.1	no fix listed	1
registry.gitlab.com/school_guy/docker-typo3 :13.4.30-197d868e	d76185d7270d	tar@1.34+dfsg-1.2+deb12u1	no fix listed	1
registry.k8s.io/csi-secrets-store/driver :v1.6.1	b48d7d13dd06	tar@1.34+dfsg-1.2+deb12u1	no fix listed	1
registry.k8s.io/git-sync/git-sync :v4.5.0	0e64aedb0d0a	tar@1.35+dfsg-3.1	no fix listed	1
registry.k8s.io/node-problem-detector/node-problem-detector :v0.8.20	52f0618e9bc2	tar@1.34+dfsg-1.2+deb12u1	no fix listed	1
registry.k8s.io/node-problem-detector/node-problem-detector :v1.35.1	c380751accc5	tar@1.34+dfsg-1.2+deb12u1	no fix listed	1
registry.k8s.io/sig-storage/local-volume-provisioner :v2.8.0	3e2bf2eaef9f	tar@1.34+dfsg-1.2+deb12u1	no fix listed	1
registry.k8s.io/sig-storage/local-volume-provisioner :v2.9.0	f9d65db8bda2	tar@1.34+dfsg-1.2+deb12u1	no fix listed	1
registry.k8s.io/sig-storage/nfsplugin :v4.13.4	1eb5a85180a4	tar@1.34+dfsg-1.2+deb12u1	no fix listed	1
registry.k8s.io/sig-storage/nfsplugin :v4.11.0	ce5b5ccd5eb0	tar@1.34+dfsg-1.2+deb12u1	no fix listed	1