StackRadar

CVE-2026-18495

Medium

Advisory

Published 11 Sept 2026In the index since 13 Sept 2026
Severity
Medium
worst across findings
CVSS
6.1
base score, highest
EPSS
0.001
2nd percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
569
of 17,790 indexed, latest versions
Container images
458
deployed by those charts
Fix available
None
affected package

The matching OSV records carry no description.

Carried by container images the latest versions of 569 of 17,790 indexed charts deploy, on 458 images.

Affected packageAffected versionsFixed inImages
tiffdeb4.0.3-7ubuntu0.9, 4.0.6-1ubuntu0.2, 4.0.6-1ubuntu0.4, 4.0.6-1ubuntu0.5+46 moreno fix listed458
OSV records
DEBIAN-CVE-2026-18495UBUNTU-CVE-2026-18495
Trending
Rank 14 in indexed charts, since 13 Sept 2026. See the ranking →

Charts affected

569 by stars
ChartLatestAffected imagesRadar Score
kbot-self-hostedkbot-self-hostedVerified publisher0.1.81 of 7See more

kbot-self-hosted kbot-self-hosted 0.1.8

1 of the 7 container images this version deploys carry CVE-2026-18495.

Container imageDigestPackageFixed in
gotenberg/gotenberg:8.30206a6c708fc6
tiff@4.7.0-3+deb13u1
no fix listed

Open the chart page →

32,812
kc-chartkc-chart1.0.01 of 3See more

kc-chart kc-chart 1.0.0

1 of the 3 container images this version deploys carry CVE-2026-18495.

Container imageDigestPackageFixed in
jhoncytech/bookworm-apache-wordpress:latest18c3ca1f411e
tiff@4.5.0-6+deb12u1
no fix listed

Open the chart page →

8,877
web-chartkcilab0.1.01 of 1See more

web-chart kcilab 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-18495.

Container imageDigestPackageFixed in
library/nginx:latest05b8cb60c354
tiff@4.7.0-3+deb13u3
no fix listed

Open the chart page →

1,849
web-chartkgw-ktcloudlab0.1.01 of 1See more

web-chart kgw-ktcloudlab 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-18495.

Container imageDigestPackageFixed in
library/nginx:latest05b8cb60c354
tiff@4.7.0-3+deb13u3
no fix listed

Open the chart page →

1,849
nginx-chartkosunjo-nginx0.1.01 of 1See more

nginx-chart kosunjo-nginx 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-18495.

Container imageDigestPackageFixed in
library/nginx:latest05b8cb60c354
tiff@4.7.0-3+deb13u3
no fix listed

Open the chart page →

1,849
kubeflowkromanow94-kubeflow0.5.12 of 30See more

kubeflow kromanow94-kubeflow 0.5.1

2 of the 30 container images this version deploys carry CVE-2026-18495.

Container imageDigestPackageFixed in
library/python:3.7eedf63967cdb
tiff@4.5.0-6
no fix listed
gcr.io/ml-pipeline/metadata-writer:2.3.09bcfd2abc361
tiff@4.5.0-6+deb12u1
no fix listed

Open the chart page →

70,968
mindsdbkronkltdVerified publisher0.1.01 of 1See more

mindsdb kronkltd 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-18495.

Container imageDigestPackageFixed in
mindsdb/mindsdb:latest163011c09299
tiff@4.7.0-3+deb13u2
no fix listed

Open the chart page →

9,698
web-chartktcloudhelm0.1.01 of 1See more

web-chart ktcloudhelm 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-18495.

Container imageDigestPackageFixed in
library/nginx:latest05b8cb60c354
tiff@4.7.0-3+deb13u3
no fix listed

Open the chart page →

1,849
web-chartktcloudlab0.1.01 of 1See more

web-chart ktcloudlab 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-18495.

Container imageDigestPackageFixed in
library/nginx:latest05b8cb60c354
tiff@4.7.0-3+deb13u3
no fix listed

Open the chart page →

1,849
web-chartktcloudlabstudent0.1.01 of 1See more

web-chart ktcloudlabstudent 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-18495.

Container imageDigestPackageFixed in
library/nginx:latest05b8cb60c354
tiff@4.7.0-3+deb13u3
no fix listed

Open the chart page →

1,849
web-chartktcloudljw0.1.01 of 1See more

web-chart ktcloudljw 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-18495.

Container imageDigestPackageFixed in
library/nginx:latest05b8cb60c354
tiff@4.7.0-3+deb13u3
no fix listed

Open the chart page →

1,849
flaresolverrkubernetes-homelab-helm-chartsVerified publisher0.1.21 of 1See more

flaresolverr kubernetes-homelab-helm-charts 0.1.2

1 of the 1 container images this version deploys carry CVE-2026-18495.

Container imageDigestPackageFixed in
ghcr.io/flaresolverr/flaresolverr:v3.4.67962759d99d7
tiff@4.5.0-6+deb12u3
no fix listed

Open the chart page →

33,864
kubernetes-kiosk-chromiumkubernetes-kiosk-chromium0.1.21 of 1See more

kubernetes-kiosk-chromium kubernetes-kiosk-chromium 0.1.2

1 of the 1 container images this version deploys carry CVE-2026-18495.

Container imageDigestPackageFixed in
ghcr.io/yurymkomarov/docker/kubernetes-kiosk-chromium:0.1.27bff29dcec72
tiff@4.5.0-6+deb12u4
no fix listed

Open the chart page →

29,124
kubernetes-netskope-publisherkubernetes-netskope-publisherVerified publisher1.5.01 of 2See more

kubernetes-netskope-publisher kubernetes-netskope-publisher 1.5.0

1 of the 2 container images this version deploys carry CVE-2026-18495.

Container imageDigestPackageFixed in
netskopeprivateaccess/publisher_u22:latest93e2fd164a93
tiff@4.3.0-6ubuntu0.13
no fix listed

Open the chart page →

3,586
kube-httpcachekubernetes-replicator0.9.11 of 1See more

kube-httpcache kubernetes-replicator 0.9.1

1 of the 1 container images this version deploys carry CVE-2026-18495.

Container imageDigestPackageFixed in
quay.io/mittwald/kube-httpcache:stable2169032c5840
tiff@4.5.0-6+deb12u2
no fix listed

Open the chart page →

4,463
kube-wordpress-mysqlkube-wordpress-mysql0.1.01 of 2See more

kube-wordpress-mysql kube-wordpress-mysql 0.1.0

1 of the 2 container images this version deploys carry CVE-2026-18495.

Container imageDigestPackageFixed in
library/wordpress:php8.1-apachef73396626d2f
tiff@4.7.0-3+deb13u1
no fix listed

Open the chart page →

8,767
penpotkubitodevVerified publisher1.2.12 of 5See more

penpot kubitodev 1.2.1

2 of the 5 container images this version deploys carry CVE-2026-18495.

Container imageDigestPackageFixed in
penpotapp/backend:2.2.147853d9bb9dd
tiff@4.3.0-6ubuntu0.10
no fix listed
penpotapp/exporter:2.2.15c835ffd87ab
tiff@4.3.0-6ubuntu0.10
no fix listed

Open the chart page →

16,976
kusionkusionstackVerified publisher0.14.11 of 3See more

kusion kusionstack 0.14.1

1 of the 3 container images this version deploys carry CVE-2026-18495.

Container imageDigestPackageFixed in
kusionstack/kusion:v0.14.0126c8f0b0976
tiff@4.3.0-6ubuntu0.10
no fix listed

Open the chart page →

6,913
nginx-chartkyb-nginx0.1.01 of 1See more

nginx-chart kyb-nginx 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-18495.

Container imageDigestPackageFixed in
library/nginx:latest05b8cb60c354
tiff@4.7.0-3+deb13u3
no fix listed

Open the chart page →

1,849
homebridgelbenicio-communityVerified publisher0.1.151 of 1See more

homebridge lbenicio-community 0.1.15

1 of the 1 container images this version deploys carry CVE-2026-18495.

Container imageDigestPackageFixed in
homebridge/homebridge:latest77c685a40911
tiff@4.5.1+git230720-4ubuntu2.5
no fix listed

Open the chart page →

2,215
uptime-kumalbenicio-communityVerified publisher0.1.11 of 1See more

uptime-kuma lbenicio-community 0.1.1

1 of the 1 container images this version deploys carry CVE-2026-18495.

Container imageDigestPackageFixed in
louislam/uptime-kuma:2.3.29aeb4e51d038
tiff@4.5.0-6+deb12u4
no fix listed

Open the chart page →

33,540
linkdinglinkding0.2.31 of 1See more

linkding linkding 0.2.3

1 of the 1 container images this version deploys carry CVE-2026-18495.

Container imageDigestPackageFixed in
sissbruecker/linkding:1.41.0-plusa222fb777e1f
tiff@4.5.0-6+deb12u2
no fix listed

Open the chart page →

38,239
weblinzhengen0.1.71 of 1See more

web linzhengen 0.1.7

1 of the 1 container images this version deploys carry CVE-2026-18495.

Container imageDigestPackageFixed in
library/nginx:latest05b8cb60c354
tiff@4.7.0-3+deb13u3
no fix listed

Open the chart page →

1,849
ingresslivekit-server1.2.21 of 1See more

ingress livekit-server 1.2.2

1 of the 1 container images this version deploys carry CVE-2026-18495.

Container imageDigestPackageFixed in
livekit/ingress:v1.2.21ab01641b366
tiff@4.3.0-6ubuntu0.4
no fix listed

Open the chart page →

10,780
web-chartljw-ktcloudlab0.1.01 of 1See more

web-chart ljw-ktcloudlab 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-18495.

Container imageDigestPackageFixed in
library/nginx:latest05b8cb60c354
tiff@4.7.0-3+deb13u3
no fix listed

Open the chart page →

1,849
uptime-kumaloeken-at-homeVerified publisher2.3.21 of 1See more

uptime-kuma loeken-at-home 2.3.2

1 of the 1 container images this version deploys carry CVE-2026-18495.

Container imageDigestPackageFixed in
louislam/uptime-kuma:2.3.29aeb4e51d038
tiff@4.5.0-6+deb12u4
no fix listed

Open the chart page →

33,540
apica-ascentlogiqai2.0.41 of 19See more

apica-ascent logiqai 2.0.4

1 of the 19 container images this version deploys carry CVE-2026-18495.

Container imageDigestPackageFixed in
logiqai/flash:v3.10.265b996bc7bdc
tiff@4.5.0-6+deb12u1
no fix listed

Open the chart page →

23,689
elastictranscoderluiscajl0.46.02 of 4See more

elastictranscoder luiscajl 0.46.0

2 of the 4 container images this version deploys carry CVE-2026-18495.

Container imageDigestPackageFixed in
elastictranscoder/transcoder:627e21dcb4a0327029e6
tiff@4.0.9-5ubuntu0.4
no fix listed
elastictranscoder/transcoder-handler:627e21dc5b75d19e2733
tiff@4.0.9-5ubuntu0.4
no fix listed

Open the chart page →

58,245
flaresolverrluiscajl0.0.31 of 1See more

flaresolverr luiscajl 0.0.3

1 of the 1 container images this version deploys carry CVE-2026-18495.

Container imageDigestPackageFixed in
flaresolverr/flaresolverr:latest139dfee1c6f8
tiff@4.5.0-6+deb12u4
no fix listed

Open the chart page →

27,554
demoshopmakaira2.4.01 of 4See more

demoshop makaira 2.4.0

1 of the 4 container images this version deploys carry CVE-2026-18495.

Container imageDigestPackageFixed in
library/nginx:stabled5792f71a949
tiff@4.7.0-3+deb13u3
no fix listed

Open the chart page →

4,489
nginxmatic-insurance1.1.11 of 1See more

nginx matic-insurance 1.1.1

1 of the 1 container images this version deploys carry CVE-2026-18495.

Container imageDigestPackageFixed in
library/nginx:stabled5792f71a949
tiff@4.7.0-3+deb13u3
no fix listed

Open the chart page →

1,849
backstagemcwarmanVerified publisher0.10.101 of 2See more

backstage mcwarman 0.10.10

1 of the 2 container images this version deploys carry CVE-2026-18495.

Container imageDigestPackageFixed in
ghcr.io/mcwarman/backstage-sample-app/app:mainfae3c1f04311
tiff@4.7.0-3+deb13u1
no fix listed

Open the chart page →

9,765
flaresolverrmedia-servarrVerified publisher0.18.11 of 1See more

flaresolverr media-servarr 0.18.1

1 of the 1 container images this version deploys carry CVE-2026-18495.

Container imageDigestPackageFixed in
ghcr.io/flaresolverr/flaresolverr:v3.5.2c80ae007ce2c
tiff@4.5.0-6+deb12u4
no fix listed

Open the chart page →

6,416
tinymediamanagermedia-servarrVerified publisher1.6.21 of 2See more

tinymediamanager media-servarr 1.6.2

1 of the 2 container images this version deploys carry CVE-2026-18495.

Container imageDigestPackageFixed in
tinymediamanager/tinymediamanager:5.3.22b34dc85099e
tiff@4.7.0-3+deb13u1
no fix listed

Open the chart page →

8,147
cameramedia-streaming-meshVerified publisher0.2.52 of 3See more

camera media-streaming-mesh 0.2.5

2 of the 3 container images this version deploys carry CVE-2026-18495.

Container imageDigestPackageFixed in
ciscolabs/rtsp-client:latesta7b60ec88285
tiff@4.1.0+git191117-2ubuntu0.20.04.5
no fix listed
ciscolabs/rtsp-server:latestb59fc10bb821
tiff@4.1.0+git191117-2ubuntu0.20.04.5
no fix listed

Open the chart page →

18,730
msm-rtspmedia-streaming-meshVerified publisher0.0.22 of 2See more

msm-rtsp media-streaming-mesh 0.0.2

2 of the 2 container images this version deploys carry CVE-2026-18495.

Container imageDigestPackageFixed in
ciscolabs/rtsp-client:latesta7b60ec88285
tiff@4.1.0+git191117-2ubuntu0.20.04.5
no fix listed
ciscolabs/rtsp-server:latestb59fc10bb821
tiff@4.1.0+git191117-2ubuntu0.20.04.5
no fix listed

Open the chart page →

18,730
rtspmedia-streaming-meshVerified publisher0.0.142 of 2See more

rtsp media-streaming-mesh 0.0.14

2 of the 2 container images this version deploys carry CVE-2026-18495.

Container imageDigestPackageFixed in
ciscolabs/rtsp-client:latesta7b60ec88285
tiff@4.1.0+git191117-2ubuntu0.20.04.5
no fix listed
ciscolabs/rtsp-server:latestb59fc10bb821
tiff@4.1.0+git191117-2ubuntu0.20.04.5
no fix listed

Open the chart page →

18,730
testmesosphere0.1.01 of 1See more

test mesosphere 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-18495.

Container imageDigestPackageFixed in
library/nginx:stabled5792f71a949
tiff@4.7.0-3+deb13u3
no fix listed

Open the chart page →

1,849
mini-blogmini-blog-helm0.1.01 of 3See more

mini-blog mini-blog-helm 0.1.0

1 of the 3 container images this version deploys carry CVE-2026-18495.

Container imageDigestPackageFixed in
beyzkaya/blog-backend:v1.0.112a6a3d1c5f9
tiff@4.5.0-6+deb12u2
no fix listed

Open the chart page →

13,107
MINTmint8.0.22 of 15See more

MINT mint 8.0.2

2 of the 15 container images this version deploys carry CVE-2026-18495.

Container imageDigestPackageFixed in
library/nginx:latest05b8cb60c354
tiff@4.7.0-3+deb13u3
no fix listed
mintproject/model-catalog-fastapi:7dd88dc5bf1fe6a6d4703ea0a077afee45cb256102260d20a21f
tiff@4.5.0-6+deb12u2
no fix listed

Open the chart page →

43,532
simplewebappmlohrVerified publisher1.1.01 of 1See more

simplewebapp mlohr 1.1.0

1 of the 1 container images this version deploys carry CVE-2026-18495.

Container imageDigestPackageFixed in
library/nginx:latest05b8cb60c354
tiff@4.7.0-3+deb13u3
no fix listed

Open the chart page →

1,849
moodlemoodle1.0.31 of 2See more

moodle moodle 1.0.3

1 of the 2 container images this version deploys carry CVE-2026-18495.

Container imageDigestPackageFixed in
cloudtooling/moodle:5.2.3f4f04e0fc401
tiff@4.5.0-6+deb12u4
no fix listed

Open the chart page →

3,972
camera-viewermoreillonVerified publisher0.2.11 of 4See more

camera-viewer moreillon 0.2.1

1 of the 4 container images this version deploys carry CVE-2026-18495.

Container imageDigestPackageFixed in
moreillon/camera-viewer:lateste418cc694bd5
tiff@4.5.0-6+deb12u2
no fix listed

Open the chart page →

11,708
group-managermoreillonVerified publisher0.4.41 of 3See more

group-manager moreillon 0.4.4

1 of the 3 container images this version deploys carry CVE-2026-18495.

Container imageDigestPackageFixed in
moreillon/group-manager-front:v3.3.1c9f85db3baa5
tiff@4.5.0-6+deb12u1
no fix listed

Open the chart page →

9,900
user-manager-mongodbmoreillonVerified publisher0.6.22 of 4See more

user-manager-mongodb moreillon 0.6.2

2 of the 4 container images this version deploys carry CVE-2026-18495.

Container imageDigestPackageFixed in
moreillon/user-manager-front:v5.0.3b067dbbbb6af
tiff@4.5.0-6
no fix listed
moreillon/user-manager-mongoose:v5.0.1d2ee0423b797
tiff@4.5.0-6
no fix listed

Open the chart page →

25,844
user-manager-neo4jmoreillonVerified publisher0.9.73 of 6See more

user-manager-neo4j moreillon 0.9.7

3 of the 6 container images this version deploys carry CVE-2026-18495.

Container imageDigestPackageFixed in
moreillon/group-manager-front:v3.3.1c9f85db3baa5
tiff@4.5.0-6+deb12u1
no fix listed
moreillon/user-manager:v5.0.2e1c9bfab5c16
tiff@4.5.0-6
no fix listed
moreillon/user-manager-front:v5.1.06597e6b98d21
tiff@4.5.0-6+deb12u1
no fix listed

Open the chart page →

30,524
genericmorremeyer8.0.01 of 1See more

generic morremeyer 8.0.0

1 of the 1 container images this version deploys carry CVE-2026-18495.

Container imageDigestPackageFixed in
library/nginx:1.25.167f9a4f10d14
tiff@4.5.0-6
no fix listed

Open the chart page →

6,877
filestashmt1905024.0.01 of 1See more

filestash mt190502 4.0.0

1 of the 1 container images this version deploys carry CVE-2026-18495.

Container imageDigestPackageFixed in
machines/filestash:latest0b8fc005e52e
tiff@4.7.0-3+deb13u3
no fix listed

Open the chart page →

3,536
paperless-ngxmt1905027.6.141 of 4See more

paperless-ngx mt190502 7.6.14

1 of the 4 container images this version deploys carry CVE-2026-18495.

Container imageDigestPackageFixed in
ghcr.io/paperless-ngx/paperless-ngx:2.20.134b05bcd28e69
tiff@4.7.0-3+deb13u1
no fix listed

Open the chart page →

12,027
backendmulti-chart-app0.1.01 of 1See more

backend multi-chart-app 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-18495.

Container imageDigestPackageFixed in
library/nginx:latest05b8cb60c354
tiff@4.7.0-3+deb13u3
no fix listed

Open the chart page →

1,849

Container images carrying it

458 by charts deploying them

A fixed version is listed for 0 of the 1 affected package.

Container imageDigestPackageFixed inUsed by
quay.io/go-skynet/local-ai:latestd78cd113b2bc
tiff@4.5.1+git230720-4ubuntu2.5
no fix listed
1
quay.io/mittwald/kube-httpcache:stable2169032c5840
tiff@4.5.0-6+deb12u2
no fix listed
1
quay.io/opsmxpublic/spin-sample-pipeline:v1.0.1c6a934439421
tiff@4.0.6-1ubuntu0.6
no fix listed
1
quay.io/yushiwho/api:e1f9d77e0d9b93dbf2b
tiff@4.5.0-6
no fix listed
1
registry.gitlab.com/crafty-controller/crafty-4:latest166a06f73d8c
tiff@4.5.1+git230720-4ubuntu2.5
no fix listed
1
registry.gitlab.com/enbuild-staging/vivsoft-platform-ui/enbuild-frontend:1.0.3166353ce9bf98
tiff@4.7.0-3+deb13u1
no fix listed
1
registry.gitlab.com/enbuild-staging/vivsoft-platform-ui/enbuild-mq-consumer:1.0.310e3cd8c7776d
tiff@4.5.0-6+deb12u4
no fix listed
1
registry.gitlab.com/school_guy/docker-typo3:13.4.30-197d868ed76185d7270d
tiff@4.5.0-6+deb12u4
no fix listed
1

syft 1.42.1 · advisories as of 16 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.