StackRadar

CVE-2026-18508

Medium

Advisory

Published 3 Aug 2026In the index since 5 Sept 2026
Severity
Medium
worst across findings
CVSS
4.4
base score, highest
EPSS
0.001
4th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
2,442
of 17,781 indexed, latest versions
Container images
2,414
deployed by those charts
Fix available
1 of 1
affected package

The matching OSV records carry no description.

Carried by container images the latest versions of 2,442 of 17,781 indexed charts deploy, on 2,414 images.

Affected packageAffected versionsFixed inImages
tardeb1.27.1-1, 1.27.1-1ubuntu0.1, 1.28-2.1ubuntu0.1, 1.28-2.1ubuntu0.2+31 more1.35+dfsg-3.1+e52,414
OSV records
DEBIAN-CVE-2026-18508UBUNTU-CVE-2026-18508ECHO-94ec-2dbe-8b73

Charts affected

2,442 by stars
ChartLatestAffected imagesRadar Score
mealiedeimosfr-charts1.0.151 of 1See more

mealie deimosfr-charts 1.0.15

1 of the 1 container images this version deploys carry CVE-2026-18508.

Container imageDigestPackageFixed in
ghcr.io/mealie-recipes/mealie:v3.24.00b08ac3a9f0a
tar@1.35+dfsg-3.1
no fix listed

Open the chart page →

4,028
kubedashdevopstalesOfficialVerified publisher4.0.03 of 8See more

kubedash devopstales 4.0.0

3 of the 8 container images this version deploys carry CVE-2026-18508.

Container imageDigestPackageFixed in
library/postgres:18.3a9abf4275f9e
tar@1.35+dfsg-3.1
no fix listed
library/redis:8.6.2009cc37796fb
tar@1.35+dfsg-3.1
no fix listed
patrikx3/p3x-redis-ui:latestf19eb45b0694
tar@1.34+dfsg-1.2+deb12u1
no fix listed

Open the chart page →

9,205
dial-coredialOfficialVerified publisher6.0.01 of 2See more

dial-core dial 6.0.0

1 of the 2 container images this version deploys carry CVE-2026-18508.

Container imageDigestPackageFixed in
valkey/valkey:9.0.2930b41430fb7
tar@1.35+dfsg-3.1
no fix listed

Open the chart page →

1,521
powershelluniversaldigitalhubVerified publisher0.1.21 of 1See more

powershelluniversal digitalhub 0.1.2

1 of the 1 container images this version deploys carry CVE-2026-18508.

Container imageDigestPackageFixed in
ironmansoftware/universal:3.3.1-ubuntu-20.041943c73cce31
tar@1.30+dfsg-7ubuntu0.20.04.2
no fix listed

Open the chart page →

6,940
directusdirectus-io2.1.02 of 3See more

directus directus-io 2.1.0

2 of the 3 container images this version deploys carry CVE-2026-18508.

Container imageDigestPackageFixed in
bitnamilegacy/mysql:9.4.0-debian-12-r1ec13e229247a
tar@1.34+dfsg-1.2+deb12u1
no fix listed
bitnamilegacy/redis:8.2.1-debian-12-r025bf63f3caf7
tar@1.34+dfsg-1.2+deb12u1
no fix listed

Open the chart page →

7,473
jellystatdjjudas21Verified publisher0.1.121 of 1See more

jellystat djjudas21 0.1.12

1 of the 1 container images this version deploys carry CVE-2026-18508.

Container imageDigestPackageFixed in
cyfershepard/jellystat:1.1.11c4e2dfa8bddf
tar@1.34+dfsg-1.2+deb12u1
no fix listed

Open the chart page →

1,722
dominodominoVerified publisher0.1.112 of 3See more

domino domino 0.1.11

2 of the 3 container images this version deploys carry CVE-2026-18508.

Container imageDigestPackageFixed in
library/postgres:134689940c6838
tar@1.35+dfsg-3.1
no fix listed
ghcr.io/tauffer-consulting/domino-rest:latest8bf880fe8c73
tar@1.34+dfsg-1.2+deb12u1
no fix listed

Open the chart page →

8,823
seafiledr300481Verified publisher0.12.11 of 1See more

seafile dr300481 0.12.1

1 of the 1 container images this version deploys carry CVE-2026-18508.

Container imageDigestPackageFixed in
seafileltd/seafile-mc:11.0.12d0c66e4621bd
tar@1.34+dfsg-1ubuntu0.1.22.04.2
no fix listed

Open the chart page →

10,858
dragonfly-stackdragonflyVerified publisher0.1.21 of 7See more

dragonfly-stack dragonfly 0.1.2

1 of the 7 container images this version deploys carry CVE-2026-18508.

Container imageDigestPackageFixed in
dragonflyoss/client:v0.1.82edf3e921f4e0
tar@1.34+dfsg-1.2+deb12u1
no fix listed

Open the chart page →

18,376
craftycontrollerdrewburr-labs-helm-chartsVerified publisher0.3.01 of 1See more

craftycontroller drewburr-labs-helm-charts 0.3.0

1 of the 1 container images this version deploys carry CVE-2026-18508.

Container imageDigestPackageFixed in
registry.gitlab.com/crafty-controller/crafty-4:latest166a06f73d8c
tar@1.35+dfsg-3build1
no fix listed

Open the chart page →

3,671
nginx-phpfpmdrpsychickVerified publisher0.1.11 of 2See more

nginx-phpfpm drpsychick 0.1.1

1 of the 2 container images this version deploys carry CVE-2026-18508.

Container imageDigestPackageFixed in
library/nginx:latest05b8cb60c354
tar@1.35+dfsg-3.1
no fix listed

Open the chart page →

1,967
rstudiodsri-helm-charts0.1.281 of 1See more

rstudio dsri-helm-charts 0.1.28

1 of the 1 container images this version deploys carry CVE-2026-18508.

Container imageDigestPackageFixed in
ghcr.io/maastrichtu-ids/rstudio:latest981aa4c109e1
tar@1.35+dfsg-3build1
no fix listed

Open the chart page →

5,670
dyff-orchestratordyff-orchestratorVerified publisher0.22.191 of 1See more

dyff-orchestrator dyff-orchestrator 0.22.19

1 of the 1 container images this version deploys carry CVE-2026-18508.

Container imageDigestPackageFixed in
registry.gitlab.com/dyff/dyff-orchestrator:0.22.199bd5d93aaff7
tar@1.34+dfsg-1.2+deb12u1
no fix listed

Open the chart page →

1,354
jenkinsedu2.7.11 of 2See more

jenkins edu 2.7.1

1 of the 2 container images this version deploys carry CVE-2026-18508.

Container imageDigestPackageFixed in
jenkins/jenkins:ltsc1e4c349365f
tar@1.35+dfsg-3.1
no fix listed

Open the chart page →

4,423
glpieftechcombr-glpiVerified publisher2.12.02 of 5See more

glpi eftechcombr-glpi 2.12.0

2 of the 5 container images this version deploys carry CVE-2026-18508.

Container imageDigestPackageFixed in
library/mariadb:12.3.2a02fe89cb597
tar@1.35+dfsg-3ubuntu0.4
no fix listed
valkey/valkey:9.1.08e8d64b405ce
tar@1.35+dfsg-3.1
no fix listed

Open the chart page →

4,341
elastalert2elastalert22.31.01 of 1See more

elastalert2 elastalert2 2.31.0

1 of the 1 container images this version deploys carry CVE-2026-18508.

Container imageDigestPackageFixed in
jertel/elastalert2:2.31.03cbf63f9b7dc
tar@1.35+dfsg-3.1
no fix listed

Open the chart page →

1,801
elchi-stackelchi1.13.03 of 10See more

elchi-stack elchi 1.13.0

3 of the 10 container images this version deploys carry CVE-2026-18508.

Container imageDigestPackageFixed in
clickhouse/clickhouse-server:24.81ffa82edee00
tar@1.30+dfsg-7ubuntu0.20.04.4
no fix listed
envoyproxy/envoy:v1.33.056da5afd7df3
tar@1.34+dfsg-1ubuntu0.1.22.04.2
no fix listed
library/mongo:6.0.12646902910d6a
tar@1.34+dfsg-1ubuntu0.1.22.04.2
no fix listed

Open the chart page →

15,383
emqx-enterpriseemqx-operator6.3.01 of 1See more

emqx-enterprise emqx-operator 6.3.0

1 of the 1 container images this version deploys carry CVE-2026-18508.

Container imageDigestPackageFixed in
emqx/emqx-enterprise:6.3.03b6d9c0c4199
tar@1.35+dfsg-3.1
no fix listed

Open the chart page →

862
enbuildenbuildVerified publisher0.0.503 of 6See more

enbuild enbuild 0.0.50

3 of the 6 container images this version deploys carry CVE-2026-18508.

Container imageDigestPackageFixed in
registry.gitlab.com/enbuild-staging/vivsoft-platform-ui/enbuild-frontend:1.0.3166353ce9bf98
tar@1.35+dfsg-3.1
no fix listed
registry.gitlab.com/enbuild-staging/vivsoft-platform-ui/enbuild-mq-consumer:1.0.310e3cd8c7776d
tar@1.34+dfsg-1.2+deb12u1
no fix listed
registry.gitlab.com/enbuild-staging/vivsoft-platform-ui/rabbitmq:3.12.145a9334f371f3
tar@1.34+dfsg-1.2+deb12u1
no fix listed

Open the chart page →

31,510
roundcubeencircle360-ossVerified publisher0.8.31 of 1See more

roundcube encircle360-oss 0.8.3

1 of the 1 container images this version deploys carry CVE-2026-18508.

Container imageDigestPackageFixed in
roundcube/roundcubemail:1.6.16-apache-nonroot17d9d9580962
tar@1.35+dfsg-3.1
no fix listed

Open the chart page →

5,584
eoapieoapiOfficialVerified publisher0.16.22 of 7See more

eoapi eoapi 0.16.2

2 of the 7 container images this version deploys carry CVE-2026-18508.

Container imageDigestPackageFixed in
ghcr.io/stac-utils/stac-fastapi-pgstac:6.4.0fa35b9519abb
tar@1.35+dfsg-3.1
no fix listed
ghcr.io/stac-utils/titiler-pgstac:3.1.0788173c5876d
tar@1.35+dfsg-3.1
no fix listed

Open the chart page →

6,250
paraerudikaVerified publisher0.3.01 of 1See more

para erudika 0.3.0

1 of the 1 container images this version deploys carry CVE-2026-18508.

Container imageDigestPackageFixed in
erudikaltd/para:latest_stable235e0bc53da2
tar@1.35+dfsg-4ubuntu0.4
no fix listed

Open the chart page →

1,086
beaconchain-explorerethereum-helm-chartsVerified publisher0.1.61 of 2See more

beaconchain-explorer ethereum-helm-charts 0.1.6

1 of the 2 container images this version deploys carry CVE-2026-18508.

Container imageDigestPackageFixed in
gobitfly/eth2-beaconchain-explorer:latest1d08a7986348
tar@1.34+dfsg-1ubuntu0.1.22.04.2
no fix listed

Open the chart page →

3,048
besuethereum-helm-chartsVerified publisher1.1.41 of 2See more

besu ethereum-helm-charts 1.1.4

1 of the 2 container images this version deploys carry CVE-2026-18508.

Container imageDigestPackageFixed in
hyperledger/besu:latest6f3f21ce5333
tar@1.35+dfsg-3ubuntu0.4
no fix listed

Open the chart page →

649
erigonethereum-helm-chartsVerified publisher2.0.21 of 2See more

erigon ethereum-helm-charts 2.0.2

1 of the 2 container images this version deploys carry CVE-2026-18508.

Container imageDigestPackageFixed in
erigontech/erigon:latest2252efdf9abe
tar@1.34+dfsg-1.2+deb12u1
no fix listed

Open the chart page →

1,100
lighthouseethereum-helm-chartsVerified publisher1.1.91 of 2See more

lighthouse ethereum-helm-charts 1.1.9

1 of the 2 container images this version deploys carry CVE-2026-18508.

Container imageDigestPackageFixed in
sigp/lighthouse:latest9a62bb870545
tar@1.34+dfsg-1ubuntu0.1.22.04.6
no fix listed

Open the chart page →

1,548
rethethereum-helm-chartsVerified publisher0.1.91 of 2See more

reth ethereum-helm-charts 0.1.9

1 of the 2 container images this version deploys carry CVE-2026-18508.

Container imageDigestPackageFixed in
ghcr.io/paradigmxyz/reth:latest68e76b32ad9a
tar@1.35+dfsg-3ubuntu0.4
no fix listed

Open the chart page →

634
iobrokereugen0.2.61 of 1See more

iobroker eugen 0.2.6

1 of the 1 container images this version deploys carry CVE-2026-18508.

Container imageDigestPackageFixed in
ghcr.io/buanet/iobroker:v9.1.2ca7dc7362968
tar@1.34+dfsg-1.2+deb12u1
no fix listed

Open the chart page →

11,458
iperf3eugen0.2.21 of 1See more

iperf3 eugen 0.2.2

1 of the 1 container images this version deploys carry CVE-2026-18508.

Container imageDigestPackageFixed in
networkstatic/iperf3:latest0592f012c636
tar@1.35+dfsg-3.1
no fix listed

Open the chart page →

807
mcrouterevryfs-ossVerified publisher0.4.01 of 2See more

mcrouter evryfs-oss 0.4.0

1 of the 2 container images this version deploys carry CVE-2026-18508.

Container imageDigestPackageFixed in
quay.io/evryfs/docker-mcrouter:0.40.0-9a2d3a4c67b0f
tar@1.29b-2ubuntu0.3
no fix listed

Open the chart page →

6,500
akauntingf3k-techVerified publisher1.3121.01 of 4See more

akaunting f3k-tech 1.3121.0

1 of the 4 container images this version deploys carry CVE-2026-18508.

Container imageDigestPackageFixed in
bitnamilegacy/mariadb:latestbbd4e17f1ef8
tar@1.34+dfsg-1.2+deb12u1
no fix listed

Open the chart page →

4,333
cap-captcha-serverf3k-techVerified publisher0.21.01 of 1See more

cap-captcha-server f3k-tech 0.21.0

1 of the 1 container images this version deploys carry CVE-2026-18508.

Container imageDigestPackageFixed in
tiago2/cap:2.159f5ae4e261e
tar@1.35+dfsg-3.1
no fix listed

Open the chart page →

1,664
fastapi-microservice-appfast-api-microservice-app1.3.04 of 4See more

fastapi-microservice-app fast-api-microservice-app 1.3.0

4 of the 4 container images this version deploys carry CVE-2026-18508.

Container imageDigestPackageFixed in
library/mongo:7.0b6421fd6d1c5
tar@1.34+dfsg-1ubuntu0.1.22.04.6
no fix listed
omkara25/simple-microservice-app-order-service:v2.18327546c7aac
tar@1.34+dfsg-1.2+deb12u1
no fix listed
omkara25/simple-microservice-app-payment-service:v2afff40172b6b
tar@1.34+dfsg-1.2+deb12u1
no fix listed
omkara25/simple-microservice-app-user-service:v2d62cba548580
tar@1.34+dfsg-1.2+deb12u1
no fix listed

Open the chart page →

9,562
federidfederidOfficialVerified publisher0.1.21 of 1See more

federid federid 0.1.2

1 of the 1 container images this version deploys carry CVE-2026-18508.

Container imageDigestPackageFixed in
federid/webhook:0.1.0fbfb7c6510a7
tar@1.34+dfsg-1.2+deb12u1
no fix listed

Open the chart page →

2,064
taigafermosit0.0.112 of 7See more

taiga fermosit 0.0.11

2 of the 7 container images this version deploys carry CVE-2026-18508.

Container imageDigestPackageFixed in
taigaio/taiga-back:latest4beed8f62c9f
tar@1.35+dfsg-3.1
no fix listed
taigaio/taiga-protected:latestfd4568a97a59
tar@1.35+dfsg-3.1
no fix listed

Open the chart page →

8,496
zabbix-server-mysqlfermosit3.0.23 of 4See more

zabbix-server-mysql fermosit 3.0.2

3 of the 4 container images this version deploys carry CVE-2026-18508.

Container imageDigestPackageFixed in
zabbix/zabbix-agent:ubuntu-6.4-latest349b924472a7
tar@1.35+dfsg-3build1
no fix listed
zabbix/zabbix-server-mysql:ubuntu-6.4-latest55d074b6b031
tar@1.35+dfsg-3build1
no fix listed
zabbix/zabbix-web-nginx-mysql:ubuntu-6.4-latest0e5f69c4c54e
tar@1.35+dfsg-3build1
no fix listed

Open the chart page →

12,840
ferriskeyferriskey0.7.22 of 3See more

ferriskey ferriskey 0.7.2

2 of the 3 container images this version deploys carry CVE-2026-18508.

Container imageDigestPackageFixed in
library/postgres:1767f41722b7a8
tar@1.35+dfsg-3.1
no fix listed
ghcr.io/ferriskey/ferriskey-api:0.7.228b6adba10f8
tar@1.34+dfsg-1.2+deb12u1
no fix listed

Open the chart page →

3,262
flink-operatorflink-operator0.1.11 of 2See more

flink-operator flink-operator 0.1.1

1 of the 2 container images this version deploys carry CVE-2026-18508.

Container imageDigestPackageFixed in
gcr.io/flink-operator/deployer:webhook-cert809338a69bd5
tar@1.29b-2ubuntu0.1
no fix listed

Open the chart page →

12,908
rss-bridgegabe565Verified publisher0.5.21 of 1See more

rss-bridge gabe565 0.5.2

1 of the 1 container images this version deploys carry CVE-2026-18508.

Container imageDigestPackageFixed in
ghcr.io/rss-bridge/rss-bridge:latest606896116558
tar@1.34+dfsg-1.2+deb12u1
no fix listed

Open the chart page →

2,186
bazarrgeek-cookbookVerified publisher10.6.21 of 1See more

bazarr geek-cookbook 10.6.2

1 of the 1 container images this version deploys carry CVE-2026-18508.

Container imageDigestPackageFixed in
ghcr.io/k8s-at-home/bazarr:v1.0.3fdb5501cdfb9
tar@1.30+dfsg-7ubuntu0.20.04.1
no fix listed

Open the chart page →

17,377
games-on-whalesgeek-cookbookVerified publisher1.8.23 of 7See more

games-on-whales geek-cookbook 1.8.2

3 of the 7 container images this version deploys carry CVE-2026-18508.

Container imageDigestPackageFixed in
ghcr.io/games-on-whales/pulseaudio:1.0.0f34f98405c10
tar@1.30+dfsg-7ubuntu0.20.04.1
no fix listed
ghcr.io/games-on-whales/retroarch:1.0.0103fbcec2314
tar@1.30+dfsg-7ubuntu0.20.04.1
no fix listed
ghcr.io/games-on-whales/steam:1.0.09b6105be7ad0
tar@1.30+dfsg-7ubuntu0.20.04.1
no fix listed

Open the chart page →

35,305
homebridgegeek-cookbookVerified publisher5.3.21 of 1See more

homebridge geek-cookbook 5.3.2

1 of the 1 container images this version deploys carry CVE-2026-18508.

Container imageDigestPackageFixed in
ghcr.io/oznu/homebridge:2022-07-08ff2af53897e7
tar@1.30+dfsg-7ubuntu0.20.04.2
no fix listed

Open the chart page →

15,653
lazylibrariangeek-cookbookVerified publisher7.4.21 of 1See more

lazylibrarian geek-cookbook 7.4.2

1 of the 1 container images this version deploys carry CVE-2026-18508.

Container imageDigestPackageFixed in
linuxserver/lazylibrarian:version-1152df82f93d2560e233
tar@1.29b-2ubuntu0.2
no fix listed

Open the chart page →

11,662
omada-controllergeek-cookbookVerified publisher4.4.21 of 1See more

omada-controller geek-cookbook 4.4.2

1 of the 1 container images this version deploys carry CVE-2026-18508.

Container imageDigestPackageFixed in
mbentley/omada-controller:4.3f4e682274bed
tar@1.29b-2ubuntu0.4
no fix listed

Open the chart page →

11,553
ombigeek-cookbookVerified publisher11.5.21 of 1See more

ombi geek-cookbook 11.5.2

1 of the 1 container images this version deploys carry CVE-2026-18508.

Container imageDigestPackageFixed in
ghcr.io/linuxserver/ombi:4.16.124c1b67cf39af
tar@1.34+dfsg-1build3
no fix listed

Open the chart page →

5,136
protonmail-bridgegeek-cookbookVerified publisher5.4.21 of 1See more

protonmail-bridge geek-cookbook 5.4.2

1 of the 1 container images this version deploys carry CVE-2026-18508.

Container imageDigestPackageFixed in
shenxn/protonmail-bridge:1.8.7-1acf31af7c111
tar@1.29b-2ubuntu0.2
no fix listed

Open the chart page →

8,029
prowlarrgeek-cookbookVerified publisher4.5.21 of 1See more

prowlarr geek-cookbook 4.5.2

1 of the 1 container images this version deploys carry CVE-2026-18508.

Container imageDigestPackageFixed in
ghcr.io/k8s-at-home/prowlarr:v0.3.0.1710c863aa9875fa
tar@1.30+dfsg-7ubuntu0.20.04.2
no fix listed

Open the chart page →

11,558
sabnzbdgeek-cookbookVerified publisher9.4.21 of 1See more

sabnzbd geek-cookbook 9.4.2

1 of the 1 container images this version deploys carry CVE-2026-18508.

Container imageDigestPackageFixed in
ghcr.io/k8s-at-home/sabnzbd:v3.3.1c2d6e775db5a
tar@1.30+dfsg-7ubuntu0.20.04.1
no fix listed

Open the chart page →

10,231
sonarrgeek-cookbookVerified publisher16.3.21 of 1See more

sonarr geek-cookbook 16.3.2

1 of the 1 container images this version deploys carry CVE-2026-18508.

Container imageDigestPackageFixed in
ghcr.io/k8s-at-home/sonarr:v3.0.8.15070eb230e2381a
tar@1.34+dfsg-1build3
no fix listed

Open the chart page →

13,025
stashgeek-cookbookVerified publisher3.4.21 of 1See more

stash geek-cookbook 3.4.2

1 of the 1 container images this version deploys carry CVE-2026-18508.

Container imageDigestPackageFixed in
stashapp/stash:latest24dbd7607174
tar@1.30+dfsg-7ubuntu0.20.04.1
no fix listed

Open the chart page →

15,856

Container images carrying it

2,414 by charts deploying them

A fixed version is listed for 1 of the 1 affected package.

Container imageDigestPackageFixed inUsed by
bitnamilegacy/postgresql:16233f361c5819
tar@1.34+dfsg-1.2+deb12u1
no fix listed
4
bitnamilegacy/postgresql:17.6.0-debian-12-r0de520acd66fc
tar@1.34+dfsg-1.2+deb12u1
no fix listed
4
bitnamilegacy/rabbitmq:4.1.2:4.1.2-debian-12-r1fac502149c40
tar@1.34+dfsg-1.2+deb12u1
no fix listed
4
hyperledger/fabric-ca:latesta70b6ba64a08
tar@1.34+dfsg-1ubuntu0.1.22.04.3
no fix listed
4
hyperledger/fabric-ca-tools:latest4ce6f43ded2e
tar@1.28-2.1ubuntu0.1
no fix listed
4
hyperledger/fabric-couchdb:0.4.15f6c724592abf
tar@1.28-2.1ubuntu0.1
no fix listed
4
jaegertracing/jaeger-cassandra-schema:1.53.0d48d6dab2c65
tar@1.34+dfsg-1ubuntu0.1.22.04.2
no fix listed
4
library/mongo:5.0-focal5e15a3f014ed
tar@1.30+dfsg-7ubuntu0.20.04.4
no fix listed
4
library/mongo:4.2.12-bionic628741415fc9
tar@1.29b-2ubuntu0.2
no fix listed
4
library/mongo:4.4.66efa05203990
tar@1.29b-2ubuntu0.2
no fix listed
4
library/nginx:1.27.1287ff321f9e3
tar@1.34+dfsg-1.2+deb12u1
no fix listed
4
library/postgres:134689940c6838
tar@1.35+dfsg-3.1
no fix listed
4
library/rabbitmq:3.11-managementc3f70098e01d
tar@1.34+dfsg-1ubuntu0.1.22.04.2
no fix listed
4
library/redis:7:7.4:7.4.1171da9275c5f3
tar@1.34+dfsg-1.2+deb12u1
no fix listed
4
mastercloudapps/planner:v1.2340a950b311b2
tar@1.34+dfsg-1ubuntu0.1.22.04.1
no fix listed
4
opea/llm-tgi:1.00c25aab3f106
tar@1.34+dfsg-1.2+deb12u1
no fix listed
4
oscarsotosanchez/weatherservice:v1.0911ec961d10b
tar@1.29b-2ubuntu0.2
no fix listed
4
shashkist/flask-contacts-app:latest581de1fd6084
tar@1.34+dfsg-1.2+deb12u1
no fix listed
4
valkey/valkey:9.0.2930b41430fb7
tar@1.35+dfsg-3.1
no fix listed
4
ghcr.io/foundry-rs/foundry:latest0c00cb0bda1a
tar@1.34+dfsg-1ubuntu0.1.22.04.2
no fix listed
4
ghcr.io/linuxserver/plex:latest7f9a1d574958
tar@1.35+dfsg-4ubuntu0.4
no fix listed
4
apache/superset:6.1.0:latest16b50bbef664
tar@1.34+dfsg-1.2+deb12u1
no fix listed
3
bitnamilegacy/kubectl:latestcd354d5b2556
tar@1.34+dfsg-1.2+deb12u1
no fix listed
3
bitnamilegacy/os-shell:12-debian-12-r5177e65e9d633e
tar@1.34+dfsg-1.2+deb12u1
no fix listed
3
bitnamilegacy/postgresql:14.13.0df6ec02e2b9a
tar@1.34+dfsg-1.2+deb12u1
no fix listed
3
ciscolabs/rtsp-client:latesta7b60ec88285
tar@1.30+dfsg-7ubuntu0.20.04.2
no fix listed
3
ciscolabs/rtsp-server:latestb59fc10bb821
tar@1.30+dfsg-7ubuntu0.20.04.2
no fix listed
3
cloudve/cloudlaunch-server:latest4a3d7fae90bb
tar@1.30+dfsg-7ubuntu0.20.04.1
no fix listed
3
codeurjc/planner:v1.0800cf520c245
tar@1.34+dfsg-1ubuntu0.1.22.04.1
no fix listed
3
dgraph/dgraph:v21.12.03b55ea83fffe
tar@1.30+dfsg-7ubuntu0.20.04.1
no fix listed
3
dnationcloud/kubernetes-jsonnet-translator:2.0.178fed4f3c130
tar@1.34+dfsg-1.2+deb12u1
no fix listed
3
envoyproxy/envoy:v1.31.02bf7f042e396
tar@1.34+dfsg-1ubuntu0.1.22.04.2
no fix listed
3
gchq/hdfs:3.3.35ec58edbb2db
tar@1.35+dfsg-3build1
no fix listed
3
guacamole/guacamole:1.6.0f344085e618b
tar@1.35+dfsg-3build1
no fix listed
3
jacobalberty/unifi:v10.0.162896c0ab82d33
tar@1.30+dfsg-7ubuntu0.20.04.4
no fix listed
3
library/nginx:1.25:1.25.5a484819eb602
tar@1.34+dfsg-1.2+deb12u1
no fix listed
3
library/node:ltsbe23f54a88d3
tar@1.34+dfsg-1.2+deb12u1
no fix listed
3
library/python:3.12-slim78387bc3881b
tar@1.35+dfsg-3.1
no fix listed
3
library/rabbitmq:4.3.5-management:4-management:managementffd1b50c522a
tar@1.35+dfsg-3ubuntu0.4
no fix listed
3
library/ubuntu:24.0433ceb71981b6
tar@1.35+dfsg-3ubuntu0.4
no fix listed
3
localstack/localstack-pro:latest4aef81c53168
tar@1.35+dfsg-3.1
no fix listed
3
mcp/grafana:latest9362bcf6aa0e
tar@1.34+dfsg-1.2+deb12u1
no fix listed
3
omecproject/cdn-video-repo:1.0.0:remote-v3d59ccb138ffb
tar@1.28-2.1ubuntu0.1
no fix listed
3
selenium/hub:3.141.5902f251d48d5f
tar@1.30+dfsg-7
no fix listed
3
sigp/lighthouse:latest-amd6450f66cfebb6d
tar@1.34+dfsg-1ubuntu0.1.22.04.2
no fix listed
3
vaultwarden/server:1.37.1ebdfe70701c6
tar@1.35+dfsg-3.1
no fix listed
3
xenondb/percona:5.7.330e26872a2b67
tar@1.30+dfsg-7ubuntu0.20.04.1
no fix listed
3
ghcr.io/bat-bs/bitnami-pgvector:pg1619ebe07b4daf
tar@1.34+dfsg-1.2+deb12u1
no fix listed
3
ghcr.io/conductionnl/gateway-ui:stag6a5594b7b32c
tar@1.34+dfsg-1.2
no fix listed
3
ghcr.io/donkie/spoolman:0.26.1cf9b41e17b93
tar@1.34+dfsg-1.2+deb12u1
no fix listed
3

syft 1.42.1 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.