CVE-2026-18477

Medium

Advisory

Published 3 Aug 2026In the index since 5 Sept 2026

Severity: Medium; worst across findings
CVSS: 4.4; base score, highest
EPSS: 0.001; 0th percentile
CISA KEV: Not listed; no confirmed exploitation
Charts affected: 2,412; of 17,787 indexed, latest versions
Container images: 2,381; deployed by those charts
Fix available: 1 of 1; affected package

The matching OSV records carry no description.

Carried by container images the latest versions of 2,412 of 17,787 indexed charts deploy, on 2,381 images.

Affected package	Affected versions	Fixed in	Images
tardeb	1.27.1-1, 1.27.1-1ubuntu0.1, 1.28-2.1ubuntu0.1, 1.28-2.1ubuntu0.2+31 more	1.35+dfsg-3.1+e5	2,381

OSV records: DEBIAN-CVE-2026-18477 UBUNTU-CVE-2026-18477 ECHO-b8d2-238f-d46b

Charts affected

2,412 by stars

Chart

Latest

Affected images

Radar Score

dltloggingassist-iot-logging-auditing

0.2.0

3 of 9 See more

dltlogging assist-iot-logging-auditing 0.2.0

3 of the 9 container images this version deploys carry CVE-2026-18477.

Container image	Digest	Package	Fixed in
hyperledger/fabric-ca :latest	a70b6ba64a08	tar@1.34+dfsg-1ubuntu0.1.22.04.3	no fix listed
hyperledger/fabric-ca-tools :latest	4ce6f43ded2e	tar@1.28-2.1ubuntu0.1	no fix listed
hyperledger/fabric-couchdb :0.4.15	f6c724592abf	tar@1.28-2.1ubuntu0.1	no fix listed

Open the chart page →

77,687

astradnsastradns

0.2.9

1 of 2 See more

astradns astradns 0.2.9

1 of the 2 container images this version deploys carry CVE-2026-18477.

Container image	Digest	Package	Fixed in
ghcr.io/astradns/astradns-agent :v0.2.9-unbound	6ba69487f1b0	tar@1.34+dfsg-1.2+deb12u1	no fix listed

Open the chart page →

2,613

music-assistantbdclark-helm-charts

0.4.13

1 of 1 See more

music-assistant bdclark-helm-charts 0.4.13

1 of the 1 container images this version deploys carry CVE-2026-18477.

Container image	Digest	Package	Fixed in
ghcr.io/music-assistant/server :2.10.3	885872224fa5	tar@1.35+dfsg-3.1	no fix listed

Open the chart page →

3,657

open-elevationbeeinventor

0.1.0

1 of 2 See more

open-elevation beeinventor 0.1.0

1 of the 2 container images this version deploys carry CVE-2026-18477.

Container image	Digest	Package	Fixed in
openelevation/open-elevation :latest	82fb21612e86	tar@1.30+dfsg-7ubuntu0.20.04.1	no fix listed

Open the chart page →

13,145

aramid-indexerbiatec-repo

3.9.0

4 of 5 See more

aramid-indexer biatec-repo 3.9.0

4 of the 5 container images this version deploys carry CVE-2026-18477.

Container image	Digest	Package	Fixed in
library/postgres :14	156f0b253fd6	tar@1.35+dfsg-3.1	no fix listed
scholtz2/aramid-algo-follow-node :v4.3.0-stable	1ec63eca86b6	tar@1.35+dfsg-3build1	no fix listed
scholtz2/aramid-conduit :v1.9.0-stable	3a3b3d3277d2	tar@1.35+dfsg-4ubuntu0.1	no fix listed
scholtz2/aramid-indexer :v3.9.0-stable	6770214bc881	tar@1.35+dfsg-4ubuntu0.1	no fix listed

Open the chart page →

13,357

aramid-participationbiatec-repo

4.4.1

1 of 1 See more

aramid-participation biatec-repo 4.4.1

1 of the 1 container images this version deploys carry CVE-2026-18477.

Container image	Digest	Package	Fixed in
scholtz2/algorand-participation-aramidmain-extended :4.4.1-stable	f12ce1cfb72e	tar@1.34+dfsg-1ubuntu0.1.22.04.2	no fix listed

Open the chart page →

7,190

aramid-relaybiatec-repo

4.4.1

1 of 1 See more

aramid-relay biatec-repo 4.4.1

1 of the 1 container images this version deploys carry CVE-2026-18477.

Container image	Digest	Package	Fixed in
scholtz2/aramid-algo-node :v4.4.1-stable	70263d8fab5b	tar@1.35+dfsg-3build1	no fix listed

Open the chart page →

5,059

voimain-participationbiatec-repo

4.4.1

1 of 1 See more

voimain-participation biatec-repo 4.4.1

1 of the 1 container images this version deploys carry CVE-2026-18477.

Container image	Digest	Package	Fixed in
scholtz2/algorand-participation-voimain-extended :4.4.1-stable	64966de56d9f	tar@1.34+dfsg-1ubuntu0.1.22.04.2	no fix listed

Open the chart page →

7,190

self-hostbitwarden

2.4.0

1 of 11 See more

self-host bitwarden 2.4.0

1 of the 11 container images this version deploys carry CVE-2026-18477.

Container image	Digest	Package	Fixed in
mcr.microsoft.com/mssql/server :2025-CU5-ubuntu-24.04	cee0f4db03b5	tar@1.35+dfsg-3build1	no fix listed

Open the chart page →

5,190

prometheus-airbyte-exporterbotify-helm-charts

0.7.1

1 of 1 See more

prometheus-airbyte-exporter botify-helm-charts 0.7.1

1 of the 1 container images this version deploys carry CVE-2026-18477.

Container image	Digest	Package	Fixed in
ghcr.io/botify-labs/airbyte_exporter :2.3.0	2105b1f33013	tar@1.34+dfsg-1.2	no fix listed

Open the chart page →

2,897

plexbrandan-schmitz-helm-charts

1.5.1

1 of 1 See more

plex brandan-schmitz-helm-charts 1.5.1

1 of the 1 container images this version deploys carry CVE-2026-18477.

Container image	Digest	Package	Fixed in
linuxserver/plex :1.43.2	2785a6ad64d3	tar@1.35+dfsg-3ubuntu0.2	no fix listed

Open the chart page →

1,119

brightdata-exporterbrightdata-charts

0.2.17

1 of 1 See more

brightdata-exporter brightdata-charts 0.2.17

1 of the 1 container images this version deploys carry CVE-2026-18477.

Container image	Digest	Package	Fixed in
ghcr.io/danielgines/brightdata-exporter :0.2.17	6920d17cf6ff	tar@1.35+dfsg-3.1	no fix listed

Open the chart page →

1,284

nacosbytectl

0.1.6

1 of 1 See more

nacos bytectl 0.1.6

1 of the 1 container images this version deploys carry CVE-2026-18477.

Container image	Digest	Package	Fixed in
nacos/nacos-server :latest	1c191c30c8cd	tar@1.35+dfsg-4ubuntu0.4	no fix listed

Open the chart page →

1,767

pgcagriekin

2.1.0

1 of 2 See more

pg cagriekin 2.1.0

1 of the 2 container images this version deploys carry CVE-2026-18477.

Container image	Digest	Package	Fixed in
cagriekin/pg-ha :2.0.1-pg18	99e17aa165df	tar@1.35+dfsg-3.1	no fix listed

Open the chart page →

2,280

pgvectorcagriekin

2.1.0

2 of 3 See more

pgvector cagriekin 2.1.0

2 of the 3 container images this version deploys carry CVE-2026-18477.

Container image	Digest	Package	Fixed in
cagriekin/pg-ha :2.0.1-pg18	99e17aa165df	tar@1.35+dfsg-3.1	no fix listed
pgvector/pgvector :0.8.5-pg18-trixie	9d2e61c7352b	tar@1.35+dfsg-3.1	no fix listed

Open the chart page →

4,004

geoserver-cloudcamptocamp2

0.0.5

6 of 11 See more

geoserver-cloud camptocamp2 0.0.5

6 of the 11 container images this version deploys carry CVE-2026-18477.

Container image	Digest	Package	Fixed in
geoservercloud/geoserver-cloud-gateway :1.0-RC3	756559ee788a	tar@1.30+dfsg-7ubuntu0.20.04.1	no fix listed
geoservercloud/geoserver-cloud-rest :1.0-RC3	99540eef78ad	tar@1.30+dfsg-7ubuntu0.20.04.1	no fix listed
geoservercloud/geoserver-cloud-wcs :1.0-RC3	5c254c53a357	tar@1.30+dfsg-7ubuntu0.20.04.1	no fix listed
geoservercloud/geoserver-cloud-webui :1.0-RC3	c687b1cbc891	tar@1.30+dfsg-7ubuntu0.20.04.1	no fix listed
geoservercloud/geoserver-cloud-wfs :1.0-RC3	5288f320cf36	tar@1.30+dfsg-7ubuntu0.20.04.1	no fix listed
geoservercloud/geoserver-cloud-wms :1.0-RC3	a30a60ac6cd0	tar@1.30+dfsg-7ubuntu0.20.04.1	no fix listed

Open the chart page →

84,444

geoserverCloudcamptocamp2

0.0.6

6 of 11 See more

geoserverCloud camptocamp2 0.0.6

6 of the 11 container images this version deploys carry CVE-2026-18477.

Container image	Digest	Package	Fixed in
geoservercloud/geoserver-cloud-gateway :1.0-RC3	756559ee788a	tar@1.30+dfsg-7ubuntu0.20.04.1	no fix listed
geoservercloud/geoserver-cloud-rest :1.0-RC3	99540eef78ad	tar@1.30+dfsg-7ubuntu0.20.04.1	no fix listed
geoservercloud/geoserver-cloud-wcs :1.0-RC3	5c254c53a357	tar@1.30+dfsg-7ubuntu0.20.04.1	no fix listed
geoservercloud/geoserver-cloud-webui :1.0-RC3	c687b1cbc891	tar@1.30+dfsg-7ubuntu0.20.04.1	no fix listed
geoservercloud/geoserver-cloud-wfs :1.0-RC3	5288f320cf36	tar@1.30+dfsg-7ubuntu0.20.04.1	no fix listed
geoservercloud/geoserver-cloud-wms :1.0-RC3	a30a60ac6cd0	tar@1.30+dfsg-7ubuntu0.20.04.1	no fix listed

Open the chart page →

84,444

carbone-eecarbone

1.0.6

1 of 1 See more

carbone-ee carbone 1.0.6

1 of the 1 container images this version deploys carry CVE-2026-18477.

Container image	Digest	Package	Fixed in
carbone/carbone-ee :full-5.11.0	518172cbad49	tar@1.35+dfsg-3.1	no fix listed

Open the chart page →

1,619

cbioportalcbioportal

1.1.0

1 of 1 See more

cbioportal cbioportal 1.1.0

1 of the 1 container images this version deploys carry CVE-2026-18477.

Container image	Digest	Package	Fixed in
cbioportal/cbioportal :6.4.1-web-shenandoah	08debbd2dbf9	tar@1.35+dfsg-3build1	no fix listed

Open the chart page →

3,674

cert-vaultcert-vault

2.12.0

6 of 7 See more

cert-vault cert-vault 2.12.0

6 of the 7 container images this version deploys carry CVE-2026-18477.

Container image	Digest	Package	Fixed in
bitnamilegacy/postgres-exporter :0.17.1-debian-12-r2	0cca9d93a617	tar@1.34+dfsg-1.2+deb12u1	no fix listed
bitnamilegacy/postgresql :17.4.0-debian-12-r11	fb3806e823c2	tar@1.34+dfsg-1.2+deb12u1	no fix listed
bitnamilegacy/redis :7.4.2-debian-12-r6	6a5b1d0b5942	tar@1.34+dfsg-1.2+deb12u1	no fix listed
bitnamilegacy/redis-exporter :1.69.0-debian-12-r1	a006df1fd47e	tar@1.34+dfsg-1.2+deb12u1	no fix listed
library/postgres :17	67f41722b7a8	tar@1.35+dfsg-3.1	no fix listed
ghcr.io/gregperlinli/certvault :2.12.0	a7d0cc9e260a	tar@1.35+dfsg-3build1	no fix listed

Open the chart page →

15,863

home-assistant-matter-servercharts-derwitt-dev

4.2.1

1 of 2 See more

home-assistant-matter-server charts-derwitt-dev 4.2.1

1 of the 2 container images this version deploys carry CVE-2026-18477.

Container image	Digest	Package	Fixed in
ghcr.io/matter-js/matterjs-server :1.4.0	54232d0d3e7d	tar@1.35+dfsg-3.1	no fix listed

Open the chart page →

2,360

passbolt-hachristianhuth

6.0.1

3 of 4 See more

passbolt-ha christianhuth 6.0.1

3 of the 4 container images this version deploys carry CVE-2026-18477.

Container image	Digest	Package	Fixed in
bitnamilegacy/mysql :9.4.0-debian-12-r1	ec13e229247a	tar@1.34+dfsg-1.2+deb12u1	no fix listed
bitnamilegacy/os-shell :12-debian-12-r50	e328cff6e450	tar@1.34+dfsg-1.2+deb12u1	no fix listed
proxysql/proxysql :3.0.11	0e95d1b7cc32	tar@1.35+dfsg-3.1	no fix listed

Open the chart page →

10,817

squestchristianhuth

6.6.7

3 of 4 See more

squest christianhuth 6.6.7

3 of the 4 container images this version deploys carry CVE-2026-18477.

Container image	Digest	Package	Fixed in
bitnamilegacy/mariadb :12.0.2-debian-12-r0	888cdaae3cb9	tar@1.34+dfsg-1.2+deb12u1	no fix listed
bitnamilegacy/rabbitmq :4.1.3-debian-12-r1	9e635efba431	tar@1.34+dfsg-1.2+deb12u1	no fix listed
bitnamilegacy/redis :8.2.1-debian-12-r0	25bf63f3caf7	tar@1.34+dfsg-1.2+deb12u1	no fix listed

Open the chart page →

9,971

typo3christianhuth

7.7.0

2 of 2 See more

typo3 christianhuth 7.7.0

2 of the 2 container images this version deploys carry CVE-2026-18477.

Container image	Digest	Package	Fixed in
bitnamilegacy/mysql :9.4.0-debian-12-r1	ec13e229247a	tar@1.34+dfsg-1.2+deb12u1	no fix listed
martinhelmich/typo3 :12.4	c83a4f3fd7ae	tar@1.34+dfsg-1.2+deb12u1	no fix listed

Open the chart page →

8,466

chromadbchromadb-helm

0.2.2

1 of 1 See more

chromadb chromadb-helm 0.2.2

1 of the 1 container images this version deploys carry CVE-2026-18477.

Container image	Digest	Package	Fixed in
ghcr.io/chroma-core/chroma :1.5.3	cfd193653bd6	tar@1.35+dfsg-3.1	no fix listed

Open the chart page →

1,432

nethermindchronicle

0.0.13

1 of 1 See more

nethermind chronicle 0.0.13

1 of the 1 container images this version deploys carry CVE-2026-18477.

Container image	Digest	Package	Fixed in
nethermind/nethermind :1.31.9	aeca3b55bda5	tar@1.35+dfsg-3build1	no fix listed

Open the chart page →

2,031

claude-code-hubclaude-code-hub

0.1.0

1 of 4 See more

claude-code-hub claude-code-hub 0.1.0

1 of the 4 container images this version deploys carry CVE-2026-18477.

Container image	Digest	Package	Fixed in
ghcr.io/ding113/claude-code-hub :latest	87f9e8a92bd7	tar@1.35+dfsg-3.1	no fix listed

Open the chart page →

2,173

cloudflared-ingress-operatorcloudflared-ingress-operator

0.3.2

1 of 1 See more

cloudflared-ingress-operator cloudflared-ingress-operator 0.3.2

1 of the 1 container images this version deploys carry CVE-2026-18477.

Container image	Digest	Package	Fixed in
ghcr.io/livepeer/cloudflared-ingress-operator :latest	c179cdcaa050	tar@1.35+dfsg-3.1	no fix listed

Open the chart page →

1,724

tensorflow-notebookcloudnativeapp

0.1.2

1 of 1 See more

tensorflow-notebook cloudnativeapp 0.1.2

1 of the 1 container images this version deploys carry CVE-2026-18477.

Container image	Digest	Package	Fixed in
tensorflow/tensorflow :1.6.0-devel	1e3172090703	tar@1.28-2.1ubuntu0.1	no fix listed

Open the chart page →

36,094

clustereye-stackclustereye

0.1.1

1 of 5 See more

clustereye-stack clustereye 0.1.1

1 of the 5 container images this version deploys carry CVE-2026-18477.

Container image	Digest	Package	Fixed in
envoyproxy/envoy :v1.31.0	2bf7f042e396	tar@1.34+dfsg-1ubuntu0.1.22.04.2	no fix listed

Open the chart page →

4,855

cluster-setupcluster-setup

1.5.0

1 of 8 See more

cluster-setup cluster-setup 1.5.0

1 of the 8 container images this version deploys carry CVE-2026-18477.

Container image	Digest	Package	Fixed in
quay.io/argoproj/argocd :v3.0.3	95b5cf7ba6fe	tar@1.35+dfsg-3build1	no fix listed

Open the chart page →

10,037

commonground-gatewaycommonground-gateway

1.5.4

1 of 7 See more

commonground-gateway commonground-gateway 1.5.4

1 of the 7 container images this version deploys carry CVE-2026-18477.

Container image	Digest	Package	Fixed in
ghcr.io/conductionnl/gateway-ui :stag	6a5594b7b32c	tar@1.34+dfsg-1.2	no fix listed

Open the chart page →

9,724

cosmotech-copilot-apicosmotech-api

0.1.1

1 of 1 See more

cosmotech-copilot-api cosmotech-api 0.1.1

1 of the 1 container images this version deploys carry CVE-2026-18477.

Container image	Digest	Package	Fixed in
ghcr.io/cosmo-tech/cosmotech-copilot-api :latest	a2be95de450c	tar@1.35+dfsg-3.1	no fix listed

Open the chart page →

11,205

paperless-ngxcrystalnet

0.2.22

1 of 3 See more

paperless-ngx crystalnet 0.2.22

1 of the 3 container images this version deploys carry CVE-2026-18477.

Container image	Digest	Package	Fixed in
ghcr.io/paperless-ngx/paperless-ngx :2.13.1	0642357c5dbd	tar@1.34+dfsg-1.2+deb12u1	no fix listed

Open the chart page →

13,761

nifid4n

2.0.0

1 of 5 See more

nifi d4n 2.0.0

1 of the 5 container images this version deploys carry CVE-2026-18477.

Container image	Digest	Package	Fixed in
apache/nifi-registry :1.26.0	7cdfd8deec92	tar@1.34+dfsg-1ubuntu0.1.22.04.2	no fix listed

Open the chart page →

5,398

dagster-cloud-agentdagster-cloud

1.13.22

1 of 1 See more

dagster-cloud-agent dagster-cloud 1.13.22

1 of the 1 container images this version deploys carry CVE-2026-18477.

Container image	Digest	Package	Fixed in
dagster/dagster-cloud-agent :1.13.22	9674f3b94a3b	tar@1.35+dfsg-3.1	no fix listed

Open the chart page →

1,082

aibrixdanchev

0.7.0

2 of 5 See more

aibrix danchev 0.7.0

2 of the 5 container images this version deploys carry CVE-2026-18477.

Container image	Digest	Package	Fixed in
aibrix/metadata-service :v0.7.0	63fb81a64377	tar@1.34+dfsg-1.2+deb12u1	no fix listed
library/redis :7.4	71da9275c5f3	tar@1.34+dfsg-1.2+deb12u1	no fix listed

Open the chart page →

5,274

data-fairdata354-helm

1.1.2

2 of 12 See more

data-fair data354-helm 1.1.2

2 of the 12 container images this version deploys carry CVE-2026-18477.

Container image	Digest	Package	Fixed in
library/mongo :4.4	4be76f674fc4	tar@1.30+dfsg-7ubuntu0.20.04.4	no fix listed
ghcr.io/data-fair/elasticsearch :7.17.1	aa45adaf59a7	tar@1.30+dfsg-7ubuntu0.20.04.1	no fix listed

Open the chart page →

38,346

datacube-explorerdatacube-charts

0.5.32

1 of 1 See more

datacube-explorer datacube-charts 0.5.32

1 of the 1 container images this version deploys carry CVE-2026-18477.

Container image	Digest	Package	Fixed in
opendatacube/explorer :latest	120457ffcd69	tar@1.35+dfsg-3build1	no fix listed

Open the chart page →

4,854

dbrepodbrepo

1.13.3

15 of 25 See more

dbrepo dbrepo 1.13.3

15 of the 25 container images this version deploys carry CVE-2026-18477.

Container image	Digest	Package	Fixed in
bitnamilegacy/grafana :11.4.0-debian-12-r0	cb8ab5515676	tar@1.34+dfsg-1.2+deb12u1	no fix listed
bitnamilegacy/mariadb :11.4.5-debian-12-r12	8bc50a0961a7	tar@1.34+dfsg-1.2+deb12u1	no fix listed
bitnamilegacy/mariadb-galera :11.3.2-debian-12-r9	aee9c668098f	tar@1.34+dfsg-1.2+deb12u1	no fix listed
bitnamilegacy/mysqld-exporter :0.15.1-debian-12-r26	11a5f0b79e79	tar@1.34+dfsg-1.2+deb12u1	no fix listed
bitnamilegacy/nginx :1.28.0-debian-12-r0	eaf9066e86f6	tar@1.34+dfsg-1.2+deb12u1	no fix listed
bitnamilegacy/openldap :2.6.8-debian-12-r1	6e412c178ef9	tar@1.34+dfsg-1.2+deb12u1	no fix listed
bitnamilegacy/opensearch :2.18.0-debian-12-r0	d8440eb6b290	tar@1.34+dfsg-1.2+deb12u1	no fix listed
bitnamilegacy/os-shell :12-debian-12-r32	17444b4b2c96	tar@1.34+dfsg-1.2+deb12u1	no fix listed
bitnamilegacy/postgres-exporter :0.15.0-debian-12-r44	e7e1b3a90682	tar@1.34+dfsg-1.2+deb12u1	no fix listed
bitnamilegacy/postgresql :17.0.0-debian-12-r9	d885ac277163	tar@1.34+dfsg-1.2+deb12u1	no fix listed
bitnamilegacy/postgresql :17.6.0-debian-12-r0	de520acd66fc	tar@1.34+dfsg-1.2+deb12u1	no fix listed
bitnamilegacy/prometheus :2.54.1-debian-12-r4	08b1b7cb6a5b	tar@1.34+dfsg-1.2+deb12u1	no fix listed
bitnamilegacy/rabbitmq :3.13.7-debian-12-r2	cd593809e359	tar@1.34+dfsg-1.2+deb12u1	no fix listed
bitnamilegacy/seaweedfs :3.87.0-debian-12-r1	0cb31d0fc356	tar@1.34+dfsg-1.2+deb12u1	no fix listed
bitnamilegacy/valkey :latest	0384ca2eec63	tar@1.34+dfsg-1.2+deb12u1	no fix listed

Open the chart page →

52,635

defguarddefguard

2.1.0

1 of 2 See more

defguard defguard 2.1.0

1 of the 2 container images this version deploys carry CVE-2026-18477.

Container image	Digest	Package	Fixed in
ghcr.io/defguard/defguard :2.1.0	df2e31d3b4f5	tar@1.35+dfsg-3.1	no fix listed

Open the chart page →

807

mealiedeimosfr-charts

1.0.15

1 of 1 See more

mealie deimosfr-charts 1.0.15

1 of the 1 container images this version deploys carry CVE-2026-18477.

Container image	Digest	Package	Fixed in
ghcr.io/mealie-recipes/mealie :v3.24.0	0b08ac3a9f0a	tar@1.35+dfsg-3.1	no fix listed

Open the chart page →

4,028

kubedashdevopstales

4.0.0

3 of 8 See more

kubedash devopstales 4.0.0

3 of the 8 container images this version deploys carry CVE-2026-18477.

Container image	Digest	Package	Fixed in
library/postgres :18.3	a9abf4275f9e	tar@1.35+dfsg-3.1	no fix listed
library/redis :8.6.2	009cc37796fb	tar@1.35+dfsg-3.1	no fix listed
patrikx3/p3x-redis-ui :latest	f19eb45b0694	tar@1.34+dfsg-1.2+deb12u1	no fix listed

Open the chart page →

9,205

dial-coredial

6.0.0

1 of 2 See more

dial-core dial 6.0.0

1 of the 2 container images this version deploys carry CVE-2026-18477.

Container image	Digest	Package	Fixed in
valkey/valkey :9.0.2	930b41430fb7	tar@1.35+dfsg-3.1	no fix listed

Open the chart page →

1,521

powershelluniversaldigitalhub

0.1.2

1 of 1 See more

powershelluniversal digitalhub 0.1.2

1 of the 1 container images this version deploys carry CVE-2026-18477.

Container image	Digest	Package	Fixed in
ironmansoftware/universal :3.3.1-ubuntu-20.04	1943c73cce31	tar@1.30+dfsg-7ubuntu0.20.04.2	no fix listed

Open the chart page →

6,940

directusdirectus-io

2.1.0

2 of 3 See more

directus directus-io 2.1.0

2 of the 3 container images this version deploys carry CVE-2026-18477.

Container image	Digest	Package	Fixed in
bitnamilegacy/mysql :9.4.0-debian-12-r1	ec13e229247a	tar@1.34+dfsg-1.2+deb12u1	no fix listed
bitnamilegacy/redis :8.2.1-debian-12-r0	25bf63f3caf7	tar@1.34+dfsg-1.2+deb12u1	no fix listed

Open the chart page →

7,473

jellystatdjjudas21

0.1.12

1 of 1 See more

jellystat djjudas21 0.1.12

1 of the 1 container images this version deploys carry CVE-2026-18477.

Container image	Digest	Package	Fixed in
cyfershepard/jellystat :1.1.11	c4e2dfa8bddf	tar@1.34+dfsg-1.2+deb12u1	no fix listed

Open the chart page →

1,722

dominodomino

0.1.11

2 of 3 See more

domino domino 0.1.11

2 of the 3 container images this version deploys carry CVE-2026-18477.

Container image	Digest	Package	Fixed in
library/postgres :13	4689940c6838	tar@1.35+dfsg-3.1	no fix listed
ghcr.io/tauffer-consulting/domino-rest :latest	8bf880fe8c73	tar@1.34+dfsg-1.2+deb12u1	no fix listed

Open the chart page →

8,823

seafiledr300481

0.12.1

1 of 1 See more

seafile dr300481 0.12.1

1 of the 1 container images this version deploys carry CVE-2026-18477.

Container image	Digest	Package	Fixed in
seafileltd/seafile-mc :11.0.12	d0c66e4621bd	tar@1.34+dfsg-1ubuntu0.1.22.04.2	no fix listed

Open the chart page →

10,858

dragonfly-stackdragonfly

0.1.2

1 of 7 See more

dragonfly-stack dragonfly 0.1.2

1 of the 7 container images this version deploys carry CVE-2026-18477.

Container image	Digest	Package	Fixed in
dragonflyoss/client :v0.1.82	edf3e921f4e0	tar@1.34+dfsg-1.2+deb12u1	no fix listed

Open the chart page →

18,376

Container images carrying it

2,381 by charts deploying them

A fixed version is listed for 1 of the 1 affected package.

Container image	Digest	Package	Fixed in	Used by
ghcr.io/astriaorg/conductor :latest	3ea8164b0eae	tar@1.34+dfsg-1.2+deb12u1	no fix listed	2
ghcr.io/browserless/chromium :v2.56.7	b1ba7b054af2	tar@1.35+dfsg-3ubuntu0.4	no fix listed	2
ghcr.io/bryopsida/k8s-dev-pod :main	82d0b161161d	tar@1.35+dfsg-3build1	no fix listed	2
ghcr.io/chroma-core/chroma :1.5.9	1e0b73a187a2	tar@1.35+dfsg-3.1	no fix listed	2
ghcr.io/codingducksrl/laravel :8.1	5be52524664c	tar@1.34+dfsg-1build3	no fix listed	2
ghcr.io/danbooru/danbooru :9cab67c0ac72a8c52289302c519715ceec2372d9	5f545698e907	tar@1.34+dfsg-1build3	no fix listed	2
ghcr.io/dgtlmoon/changedetection.io :0.60.3 :latest	ecacd9fd0c66	tar@1.34+dfsg-1.2+deb12u1	no fix listed	2
ghcr.io/flaresolverr/flaresolverr :v3.4.6	7962759d99d7	tar@1.34+dfsg-1.2+deb12u1	no fix listed	2
ghcr.io/flaresolverr/flaresolverr :v3.5.2	c80ae007ce2c	tar@1.34+dfsg-1.2+deb12u1	no fix listed	2
ghcr.io/flyteorg/flyte-connectors :py3.12-v2.3.6	896fc7b18b1b	tar@1.34+dfsg-1.2+deb12u1	no fix listed	2
ghcr.io/games-on-whales/pulseaudio :1.0.0	f34f98405c10	tar@1.30+dfsg-7ubuntu0.20.04.1	no fix listed	2
ghcr.io/games-on-whales/retroarch :1.0.0	103fbcec2314	tar@1.30+dfsg-7ubuntu0.20.04.1	no fix listed	2
ghcr.io/games-on-whales/steam :1.0.0	9b6105be7ad0	tar@1.30+dfsg-7ubuntu0.20.04.1	no fix listed	2
ghcr.io/google/fleetspeak :v0.1.17	cd264d33efd4	tar@1.34+dfsg-1.2+deb12u1	no fix listed	2
ghcr.io/immich-app/postgres :14-vectorchord0.4.3-pgvectors0.2.0	bcf63357191b	tar@1.34+dfsg-1.2+deb12u1	no fix listed	2
ghcr.io/libredb/libredb-studio :0.15.0	4b696f960ac1	tar@1.35+dfsg-3.1	no fix listed	2
ghcr.io/linuxserver/openvpn-as :version-2.8.6-916f8e7d-ubuntu18	4ee0764310e7	tar@1.29b-2ubuntu0.1	no fix listed	2
ghcr.io/lissy93/web-check :latest	a4e021c0f6a9	tar@1.34+dfsg-1.2+deb12u1	no fix listed	2
ghcr.io/mumble-voip/mumble-server :v1.6.870	02fd613b6a35	tar@1.35+dfsg-3build1	no fix listed	2
ghcr.io/nginxinc/nginx-s3-gateway/nginx-oss-s3-gateway :unprivileged-oss :unprivileged-oss-20250331	3db8145349a3	tar@1.34+dfsg-1.2+deb12u1	no fix listed	2
ghcr.io/nucleuscloud/neosync/api :0.5.41	e2abb798f29f	tar@1.34+dfsg-1.2+deb12u1	no fix listed	2
ghcr.io/nucleuscloud/neosync/worker :0.5.41	96f42450c5b1	tar@1.34+dfsg-1.2+deb12u1	no fix listed	2
ghcr.io/postgresml/pgcat :main	245f9d2f5f5b	tar@1.34+dfsg-1.2	no fix listed	2
ghcr.io/rss3-network/agentdata :0.1.0	fd8d3e6e4cdf	tar@1.34+dfsg-1.2+deb12u1	no fix listed	2
ghcr.io/salaboy/fmtok8s-frontend :v0.1.1	03fd01b4f56e	tar@1.34+dfsg-1build3	no fix listed	2
ghcr.io/smarter-project/home-ha-mock :main	95ee018cf558	tar@1.34+dfsg-1.2+deb12u1	no fix listed	2
ghcr.io/smarter-project/hydra/isolated-vm :main	4457b79b24cd	tar@1.34+dfsg-1.2+deb12u1	no fix listed	2
mcr.microsoft.com/azure-sql-edge :latest	902628a8be89	tar@1.30+dfsg-7ubuntu0.20.04.3	no fix listed	2
public.ecr.aws/aktosecurity/akto-api-security-dashboard :1.69.2 :latest	b53a854bd7c1	tar@1.35+dfsg-3ubuntu0.4	no fix listed	2
public.ecr.aws/cloudnatix/llmariner/model-manager-loader :1.27.0	26ac7263a823	tar@1.35+dfsg-3.1	no fix listed	2
quay.io/argoproj/argocd :v2.14.11	5fc69e31c755	tar@1.35+dfsg-3build1	no fix listed	2
quay.io/cilium/cilium-envoy :v1.37.5-1786810558-766ccfb37260a43e9d228837aa84ce3faf9f64e7	75b8094c7127	tar@1.35+dfsg-3ubuntu0.4	no fix listed	2
registry.k8s.io/sig-storage/smbplugin :v1.20.3	dc7746bb081e	tar@1.34+dfsg-1.2+deb12u1	no fix listed	2
1dev/server :11.9.0	cd5b12fe5471	tar@1.35+dfsg-3build1	no fix listed	1
48n6e/camellia-redis-proxy :1.4.0-jdk-21-0.0.1	a6ed886fddfc	tar@1.34+dfsg-1.2	no fix listed	1
5200710/hadoop :3.2.3-java8	092d3088a5fb	tar@1.30+dfsg-7ubuntu0.20.04.4	no fix listed	1
a10networks/acos-prometheus-exporter :latest	8dc58d434d71	tar@1.29b-2ubuntu0.1	no fix listed	1
aapjeisbaas/wp-frankenphp :v0.2.2	6b261abc7fb0	tar@1.35+dfsg-3.1	no fix listed	1
aboogie/login_test_backend :new	9c41a4483ac8	tar@1.34+dfsg-1.2+deb12u1	no fix listed	1
actualbudget/actual-server :25.3.1	58fecd9088b7	tar@1.34+dfsg-1.2+deb12u1	no fix listed	1
adorsys/keycloak-config-cli :6.3.0-26.1.0	85be7a45a94c	tar@1.35+dfsg-3build1	no fix listed	1
adorsys/keycloak-config-cli :6.1.6-25.0.1	eb49a2dcbbb8	tar@1.35+dfsg-3build1	no fix listed	1
adwerx/github-actions-runner :2.276.1-20.04-1	840d2b078682	tar@1.30+dfsg-7ubuntu0.20.04.1	no fix listed	1
agentarea/agentarea-api :latest	9e15e16fa758	tar@1.35+dfsg-3.1	no fix listed	1
agentarea/agentarea-mcp-runner :latest	d3c209a5d531	tar@1.34+dfsg-1.2+deb12u1	no fix listed	1
agentarea/agentarea-worker :latest	1e5cb68ee77a	tar@1.35+dfsg-3.1	no fix listed	1
ahmetfurkandemir/iceberg-rest-fixture-postgresql :1.10.0	142231a0b8b7	tar@1.34+dfsg-1ubuntu0.1.22.04.2	no fix listed	1
aibrix/metadata-service :v0.7.0	63fb81a64377	tar@1.34+dfsg-1.2+deb12u1	no fix listed	1
airbyte/manifest-server :7.23.7	3b3a670af168	tar@1.34+dfsg-1.2+deb12u1	no fix listed	1
airbyte/pod-sweeper :1.5.1	98d2c39d512e	tar@1.34+dfsg-1.2+deb12u1	no fix listed	1