StackRadar

CVE-2026-18508

Medium

Advisory

Published 3 Aug 2026In the index since 5 Sept 2026
Severity
Medium
worst across findings
CVSS
4.4
base score, highest
EPSS
0.001
4th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
2,451
of 17,792 indexed, latest versions
Container images
2,427
deployed by those charts
Fix available
1 of 1
affected package

The matching OSV records carry no description.

Carried by container images the latest versions of 2,451 of 17,792 indexed charts deploy, on 2,427 images.

Affected packageAffected versionsFixed inImages
tardeb1.27.1-1, 1.27.1-1ubuntu0.1, 1.28-2.1ubuntu0.1, 1.28-2.1ubuntu0.2+31 more1.35+dfsg-3.1+e52,427
OSV records
DEBIAN-CVE-2026-18508UBUNTU-CVE-2026-18508ECHO-94ec-2dbe-8b73

Charts affected

2,451 by stars
ChartLatestAffected imagesRadar Score
ojp-serverojp0.1.51 of 1See more

ojp-server ojp 0.1.5

1 of the 1 container images this version deploys carry CVE-2026-18508.

Container imageDigestPackageFixed in
rrobetti/ojp:0.1.0-beta1141bd88232b
tar@1.35+dfsg-3build1
no fix listed

Open the chart page →

2,644
automx2oleds-helm-chartsVerified publisher1.0.51 of 1See more

automx2 oleds-helm-charts 1.0.5

1 of the 1 container images this version deploys carry CVE-2026-18508.

Container imageDigestPackageFixed in
oled01/automx2:2025.1.105d3e398e675
tar@1.34+dfsg-1.2+deb12u1
no fix listed

Open the chart page →

5,352
cmsmsoleds-helm-chartsVerified publisher0.1.61 of 1See more

cmsms oleds-helm-charts 0.1.6

1 of the 1 container images this version deploys carry CVE-2026-18508.

Container imageDigestPackageFixed in
bitnamilegacy/mariadb:11.4.7-debian-12-r290dc6acb7b2e
tar@1.34+dfsg-1.2+deb12u1
no fix listed

Open the chart page →

2,879
db-backupoleds-helm-chartsVerified publisher0.1.01 of 1See more

db-backup oleds-helm-charts 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-18508.

Container imageDigestPackageFixed in
oled01/db-backup:0.1.06302fd2b5333
tar@1.34+dfsg-1build3
no fix listed

Open the chart page →

8,140
pulsarolehrgfVerified publisher0.0.51 of 2See more

pulsar olehrgf 0.0.5

1 of the 2 container images this version deploys carry CVE-2026-18508.

Container imageDigestPackageFixed in
apachepulsar/pulsar:3.1.016f9fdab3fa6
tar@1.34+dfsg-1ubuntu0.1.22.04.1
no fix listed

Open the chart page →

9,083
laravel-appoli-the-devVerified publisher2.0.171 of 1See more

laravel-app oli-the-dev 2.0.17

1 of the 1 container images this version deploys carry CVE-2026-18508.

Container imageDigestPackageFixed in
serversideup/php:8.5-fpm-nginx8f8c2f010ac5
tar@1.35+dfsg-3.1
no fix listed

Open the chart page →

2,841
node-appoli-the-devVerified publisher1.0.01 of 1See more

node-app oli-the-dev 1.0.0

1 of the 1 container images this version deploys carry CVE-2026-18508.

Container imageDigestPackageFixed in
library/node:22-bookworm-slim83f487e0a634
tar@1.34+dfsg-1.2+deb12u1
no fix listed

Open the chart page →

1,179
paperless-ngxoli-the-devVerified publisher1.1.11 of 1See more

paperless-ngx oli-the-dev 1.1.1

1 of the 1 container images this version deploys carry CVE-2026-18508.

Container imageDigestPackageFixed in
ghcr.io/paperless-ngx/paperless-ngx:3.1.3aa810a36942c
tar@1.35+dfsg-3.1
no fix listed

Open the chart page →

4,664
cron-jobonechart-slVerified publisher0.73.71 of 1See more

cron-job onechart-sl 0.73.7

1 of the 1 container images this version deploys carry CVE-2026-18508.

Container imageDigestPackageFixed in
library/debian:stable-slim04634311a8d5
tar@1.35+dfsg-3.1
no fix listed

Open the chart page →

985
onedevonedev11.9.01 of 1See more

onedev onedev 11.9.0

1 of the 1 container images this version deploys carry CVE-2026-18508.

Container imageDigestPackageFixed in
1dev/server:11.9.0cd5b12fe5471
tar@1.35+dfsg-3build1
no fix listed

Open the chart page →

6,108
ontoserverontoserverVerified publisher0.5.21 of 2See more

ontoserver ontoserver 0.5.2

1 of the 2 container images this version deploys carry CVE-2026-18508.

Container imageDigestPackageFixed in
library/postgres:16f1c3376c26f2
tar@1.35+dfsg-3.1
no fix listed

Open the chart page →

1,667
onyx-stackonyx0.3.11 of 12See more

onyx-stack onyx 0.3.1

1 of the 12 container images this version deploys carry CVE-2026-18508.

Container imageDigestPackageFixed in
onyxdotapp/onyx-backend:latest473fdffe4e67
tar@1.35+dfsg-3.1
no fix listed

Open the chart page →

6,422
commonground-gatewayopencatalogi1.5.31 of 7See more

commonground-gateway opencatalogi 1.5.3

1 of the 7 container images this version deploys carry CVE-2026-18508.

Container imageDigestPackageFixed in
ghcr.io/conductionnl/gateway-ui:stag6a5594b7b32c
tar@1.34+dfsg-1.2
no fix listed

Open the chart page →

9,766
opentickopenchartVerified publisher0.1.01 of 1See more

opentick openchart 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-18508.

Container imageDigestPackageFixed in
library/nginx:1.25.5a484819eb602
tar@1.34+dfsg-1.2+deb12u1
no fix listed

Open the chart page →

5,716
jobopen-charts2.0.01 of 1See more

job open-charts 2.0.0

1 of the 1 container images this version deploys carry CVE-2026-18508.

Container imageDigestPackageFixed in
library/ubuntu:latest2260313b31c8
tar@1.35+dfsg-4ubuntu0.4
no fix listed

Open the chart page →

749
bbsimopencord4.8.111 of 1See more

bbsim opencord 4.8.11

1 of the 1 container images this version deploys carry CVE-2026-18508.

Container imageDigestPackageFixed in
voltha/bbsim:1.16.7d90403d58016
tar@1.29b-2ubuntu0.4
no fix listed

Open the chart page →

3,915
bbsim-sadis-serveropencord0.3.51 of 1See more

bbsim-sadis-server opencord 0.3.5

1 of the 1 container images this version deploys carry CVE-2026-18508.

Container imageDigestPackageFixed in
voltha/bbsim-sadis-server:0.4.0762b272d439e
tar@1.29b-2ubuntu0.4
no fix listed

Open the chart page →

3,729
cdn-remoteopencord0.2.42 of 3See more

cdn-remote opencord 0.2.4

2 of the 3 container images this version deploys carry CVE-2026-18508.

Container imageDigestPackageFixed in
omecproject/cdn-antmedia:1.0.0b4ae7d0d6b74
tar@1.29b-2ubuntu0.1
no fix listed
omecproject/cdn-video-repo:1.0.0d59ccb138ffb
tar@1.28-2.1ubuntu0.1
no fix listed

Open the chart page →

63,509
comacopencord1.0.03 of 9See more

comac opencord 1.0.0

3 of the 9 container images this version deploys carry CVE-2026-18508.

Container imageDigestPackageFixed in
omecproject/mcord-synchronizer:comac-1.0.0cfdb566dd949
tar@1.28-2.1ubuntu0.1
no fix listed
omecproject/onos-progran:1.0.05715e5648aa0
tar@1.28-2.1ubuntu0.1
no fix listed
omecproject/progran-synchronizer:comac-1.0.0d109a8e57e71
tar@1.28-2.1ubuntu0.1
no fix listed

Open the chart page →

88,857
comac-cuopencord0.1.11 of 4See more

comac-cu opencord 0.1.1

1 of the 4 container images this version deploys carry CVE-2026-18508.

Container imageDigestPackageFixed in
ngick8stesting/c3po-mmeinit:latest1e764eab77b4
tar@1.29b-2
no fix listed

Open the chart page →

8,065
comac-platformopencord0.0.171 of 11See more

comac-platform opencord 0.0.17

1 of the 11 container images this version deploys carry CVE-2026-18508.

Container imageDigestPackageFixed in
omecproject/mcord-synchronizer:comac-1.0.0cfdb566dd949
tar@1.28-2.1ubuntu0.1
no fix listed

Open the chart page →

26,316
freeradiusopencord1.0.41 of 1See more

freeradius opencord 1.0.4

1 of the 1 container images this version deploys carry CVE-2026-18508.

Container imageDigestPackageFixed in
freeradius/freeradius-server:3.0.2121c8bfa904d8
tar@1.29b-2ubuntu0.1
no fix listed

Open the chart page →

15,738
mcord-cdn-remoteopencord0.1.62 of 2See more

mcord-cdn-remote opencord 0.1.6

2 of the 2 container images this version deploys carry CVE-2026-18508.

Container imageDigestPackageFixed in
omecproject/cdn-video-repo:remote-v3d59ccb138ffb
tar@1.28-2.1ubuntu0.1
no fix listed
woojoong/wowza:latestec230db19652
tar@1.29b-2
no fix listed

Open the chart page →

42,879
mcord-cdn-remote-freeopencord0.1.31 of 1See more

mcord-cdn-remote-free opencord 0.1.3

1 of the 1 container images this version deploys carry CVE-2026-18508.

Container imageDigestPackageFixed in
omecproject/cdn-video-repo:remote-v3d59ccb138ffb
tar@1.28-2.1ubuntu0.1
no fix listed

Open the chart page →

29,359
mcord-control-planeopencord0.2.22 of 5See more

mcord-control-plane opencord 0.2.2

2 of the 5 container images this version deploys carry CVE-2026-18508.

Container imageDigestPackageFixed in
ngick8stesting/c3po-mme:mwca-mme-debug8dd6dea45be4
tar@1.28-2.1ubuntu0.1
no fix listed
ngick8stesting/c3po-mmeinit:latest1e764eab77b4
tar@1.29b-2
no fix listed

Open the chart page →

15,684
oaisimopencord0.1.72 of 3See more

oaisim opencord 0.1.7

2 of the 3 container images this version deploys carry CVE-2026-18508.

Container imageDigestPackageFixed in
omecproject/lte-softmodem:1.1.0b5ddd36ec20c
tar@1.29b-2ubuntu0.1
no fix listed
omecproject/lte-uesoftmodem:1.1.0686f8bc37d8c
tar@1.29b-2ubuntu0.2
no fix listed

Open the chart page →

14,574
omec-control-planeopencord0.1.315 of 8See more

omec-control-plane opencord 0.1.31

5 of the 8 container images this version deploys carry CVE-2026-18508.

Container imageDigestPackageFixed in
omecproject/c3po-hss:master-latest638671ef4842
tar@1.28-2.1ubuntu0.2
no fix listed
omecproject/c3po-hssdb:master-latest28a90cc26716
tar@1.30+dfsg-7ubuntu0.20.04.1
no fix listed
omecproject/mme-exporter:paging-latestbcc5f19fd676
tar@1.29b-2ubuntu0.1
no fix listed
omecproject/ngic-cp:central-cp-multi-upfs-latest24a389a0a4fe
tar@1.29b-2ubuntu0.1
no fix listed
omecproject/openmme:master-latest64776cb9edb3
tar@1.28-2.1ubuntu0.1
no fix listed

Open the chart page →

40,941
onosopencord3.0.21 of 1See more

onos opencord 3.0.2

1 of the 1 container images this version deploys carry CVE-2026-18508.

Container imageDigestPackageFixed in
onosproject/onos:2.2.144914a8d4b3f
tar@1.29b-2ubuntu0.1
no fix listed

Open the chart page →

12,953
onos-progranopencord1.2.71 of 2See more

onos-progran opencord 1.2.7

1 of the 2 container images this version deploys carry CVE-2026-18508.

Container imageDigestPackageFixed in
muluder/prograncontrollermcord:0.1.843b597a93da7
tar@1.28-2.1ubuntu0.1
no fix listed

Open the chart page →

38,966
ovspluginopencord1.0.21 of 1See more

ovsplugin opencord 1.0.2

1 of the 1 container images this version deploys carry CVE-2026-18508.

Container imageDigestPackageFixed in
gopinatht/ovs-plugin-installer:latest632cb2e9c399
tar@1.28-2.1ubuntu0.1
no fix listed

Open the chart page →

4,180
ponsimv2opencord1.2.31 of 2See more

ponsimv2 opencord 1.2.3

1 of the 2 container images this version deploys carry CVE-2026-18508.

Container imageDigestPackageFixed in
voltha/voltha-tester:1.7.0655c3048a602
tar@1.28-2.1ubuntu0.1
no fix listed

Open the chart page →

12,646
sebaopencord1.0.06 of 17See more

seba opencord 1.0.0

6 of the 17 container images this version deploys carry CVE-2026-18508.

Container imageDigestPackageFixed in
tpdock/freeradius:2.2.93da600c95a49
tar@1.28-2.1ubuntu0.1
no fix listed
voltha/voltha-cli:1.6.0c4e41e92f046
tar@1.28-2.1ubuntu0.1
no fix listed
voltha/voltha-envoy:1.6.059ab2a00f712
tar@1.27.1-1ubuntu0.1
no fix listed
voltha/voltha-netconf:1.6.037f80524c207
tar@1.28-2.1ubuntu0.1
no fix listed
voltha/voltha-ofagent:1.6.09ee8c1f4428c
tar@1.28-2.1ubuntu0.1
no fix listed
voltha/voltha-voltha:1.6.0ff596b62de59
tar@1.28-2.1ubuntu0.1
no fix listed

Open the chart page →

94,117
voltha-infraopencord2.14.04 of 10See more

voltha-infra opencord 2.14.0

4 of the 10 container images this version deploys carry CVE-2026-18508.

Container imageDigestPackageFixed in
freeradius/freeradius-server:3.0.2121c8bfa904d8
tar@1.29b-2ubuntu0.1
no fix listed
library/ubuntu:16.041f1a2d56de1d
tar@1.28-2.1ubuntu0.2
no fix listed
voltha/bbsim-sadis-server:0.3.5259fc3a03f4e
tar@1.29b-2ubuntu0.4
no fix listed
voltha/voltha-onos:5.1.8e038acb950d3
tar@1.29b-2ubuntu0.1
no fix listed

Open the chart page →

41,148
opencost-parquet-exporteropencostVerified publisher0.3.11 of 1See more

opencost-parquet-exporter opencost 0.3.1

1 of the 1 container images this version deploys carry CVE-2026-18508.

Container imageDigestPackageFixed in
ghcr.io/opencost/opencost-parquet-exporter:v0.2.1ce85ef0ce665
tar@1.34+dfsg-1.2+deb12u1
no fix listed

Open the chart page →

11,064
dokuopenlit0.1.41 of 3See more

doku openlit 0.1.4

1 of the 3 container images this version deploys carry CVE-2026-18508.

Container imageDigestPackageFixed in
clickhouse/clickhouse-server:latestfa394da808cc
tar@1.34+dfsg-1ubuntu0.1.22.04.6
no fix listed

Open the chart page →

1,744
openlitopenlit1.24.01 of 3See more

openlit openlit 1.24.0

1 of the 3 container images this version deploys carry CVE-2026-18508.

Container imageDigestPackageFixed in
clickhouse/clickhouse-server:24.4.12e6587b81a26
tar@1.30+dfsg-7ubuntu0.20.04.4
no fix listed

Open the chart page →

5,083
openlit-controlleropenlit0.10.01 of 1See more

openlit-controller openlit 0.10.0

1 of the 1 container images this version deploys carry CVE-2026-18508.

Container imageDigestPackageFixed in
ghcr.io/openlit/openlit-controller:0.10.0165efd4469ea
tar@1.34+dfsg-1.2+deb12u1
no fix listed

Open the chart page →

1,384
openpanelopenpanel0.9.01 of 6See more

openpanel openpanel 0.9.0

1 of the 6 container images this version deploys carry CVE-2026-18508.

Container imageDigestPackageFixed in
clickhouse/clickhouse-server:25.10.2.65e019438e1e05
tar@1.34+dfsg-1ubuntu0.1.22.04.2
no fix listed

Open the chart page →

3,472
llm-stackopenproject-helm-chartsVerified publisher1.1.02 of 2See more

llm-stack openproject-helm-charts 1.1.0

2 of the 2 container images this version deploys carry CVE-2026-18508.

Container imageDigestPackageFixed in
apache/apisix:3.16.0-ubuntu5e47692cac00
tar@1.35+dfsg-3build1
no fix listed
library/python:3.12-slim78387bc3881b
tar@1.35+dfsg-3.1
no fix listed

Open the chart page →

2,009
fineractopenshift0.1.12 of 4See more

fineract openshift 0.1.1

2 of the 4 container images this version deploys carry CVE-2026-18508.

Container imageDigestPackageFixed in
library/mariadb:11.4611a2fcc5fa7
tar@1.35+dfsg-3ubuntu0.4
no fix listed
library/nginx:latest05b8cb60c354
tar@1.35+dfsg-3.1
no fix listed

Open the chart page →

7,889
sohaopensohaVerified publisher0.1.91 of 2See more

soha opensoha 0.1.9

1 of the 2 container images this version deploys carry CVE-2026-18508.

Container imageDigestPackageFixed in
pgvector/pgvector:0.8.5-pg18-trixie9d2e61c7352b
tar@1.35+dfsg-3.1
no fix listed

Open the chart page →

1,799
open-vpnopenvpn0.0.11 of 1See more

open-vpn openvpn 0.0.1

1 of the 1 container images this version deploys carry CVE-2026-18508.

Container imageDigestPackageFixed in
ghcr.io/linuxserver/openvpn-as:version-2.8.6-916f8e7d-ubuntu184ee0764310e7
tar@1.29b-2ubuntu0.1
no fix listed

Open the chart page →

15,622
openvscode-serveropenvscode-server-helmVerified publisher2.7.371 of 2See more

openvscode-server openvscode-server-helm 2.7.37

1 of the 2 container images this version deploys carry CVE-2026-18508.

Container imageDigestPackageFixed in
antiantiops/vscode-browser-docker:1.137.0eeff80a99d92
tar@1.35+dfsg-3ubuntu0.4
no fix listed

Open the chart page →

4,321
terminalsopen-webui0.7.02 of 2See more

terminals open-webui 0.7.0

2 of the 2 container images this version deploys carry CVE-2026-18508.

Container imageDigestPackageFixed in
ghcr.io/open-webui/terminals:latest5d2fd44366a4
tar@1.35+dfsg-3.1
no fix listed
ghcr.io/open-webui/terminals-operator:latest6287ce8be502
tar@1.35+dfsg-3.1
no fix listed

Open the chart page →

2,060
openwhiskopenwhisk1.0.01 of 10See more

openwhisk openwhisk 1.0.0

1 of the 10 container images this version deploys carry CVE-2026-18508.

Container imageDigestPackageFixed in
openwhisk/ow-utils:1.0.0c80dba0de3aa
tar@1.29b-2ubuntu0.1
no fix listed

Open the chart page →

36,335
issuegenopsmxVerified publisher1.0.21 of 1See more

issuegen opsmx 1.0.2

1 of the 1 container images this version deploys carry CVE-2026-18508.

Container imageDigestPackageFixed in
opsmx11/issuegen:v2.1.05c50ca123d88
tar@1.27.1-1ubuntu0.1
no fix listed

Open the chart page →

26,374
hiveopstty0.1.91 of 4See more

hive opstty 0.1.9

1 of the 4 container images this version deploys carry CVE-2026-18508.

Container imageDigestPackageFixed in
bitnamilegacy/postgresql:16233f361c5819
tar@1.34+dfsg-1.2+deb12u1
no fix listed

Open the chart page →

4,569
grrosdfir-infrastructureVerified publisher1.0.32 of 5See more

grr osdfir-infrastructure 1.0.3

2 of the 5 container images this version deploys carry CVE-2026-18508.

Container imageDigestPackageFixed in
library/mariadb:11.3.2e101f9db3191
tar@1.34+dfsg-1ubuntu0.1.22.04.2
no fix listed
ghcr.io/google/fleetspeak:v0.1.17cd264d33efd4
tar@1.34+dfsg-1.2+deb12u1
no fix listed

Open the chart page →

11,020
osdfir-infrastructureosdfir-infrastructureVerified publisher2.15.025 of 40See more

osdfir-infrastructure osdfir-infrastructure 2.15.0

25 of the 40 container images this version deploys carry CVE-2026-18508.

Container imageDigestPackageFixed in
bitnamilegacy/git:latest4b08d0c5af8d
tar@1.34+dfsg-1.2+deb12u1
no fix listed
chromadb/chroma:1.5.7fc8dc8e11fb2
tar@1.35+dfsg-3.1
no fix listed
library/mariadb:11.3.2e101f9db3191
tar@1.34+dfsg-1ubuntu0.1.22.04.2
no fix listed
yetiplatform/yeti:2.9.09bcbe2650a14
tar@1.35+dfsg-3.1
no fix listed
yetiplatform/yeti-frontend:2.9.0873ef15d267b
tar@1.35+dfsg-3.1
no fix listed
ghcr.io/google/fleetspeak:v0.1.17cd264d33efd4
tar@1.34+dfsg-1.2+deb12u1
no fix listed
ghcr.io/openrelik/openrelik-mediator:latest42efc445b19e
tar@1.34+dfsg-1.2+deb12u1
no fix listed
ghcr.io/openrelik/openrelik-metrics:latest3d0f1ddeebf5
tar@1.34+dfsg-1.2+deb12u1
no fix listed
ghcr.io/openrelik/openrelik-server:latestce1132261523
tar@1.34+dfsg-1.2+deb12u1
no fix listed
ghcr.io/openrelik/openrelik-worker-analyzer-config:latest1269d3d8d2c2
tar@1.35+dfsg-3build1
no fix listed
ghcr.io/openrelik/openrelik-worker-analyzer-logs:latestb175cc61959a
tar@1.35+dfsg-3build1
no fix listed
ghcr.io/openrelik/openrelik-worker-bulkextractor:latest67498ee2e639
tar@1.35+dfsg-3build1
no fix listed
ghcr.io/openrelik/openrelik-worker-capa:latest71323a4f3fc5
tar@1.35+dfsg-3build1
no fix listed
ghcr.io/openrelik/openrelik-worker-chromecreds:latest76d4fbcc6ff0
tar@1.35+dfsg-3build1
no fix listed
ghcr.io/openrelik/openrelik-worker-cloud-logs:latesta5d7e3cf71d3
tar@1.35+dfsg-3build1
no fix listed
ghcr.io/openrelik/openrelik-worker-containers:latesta6d5abe94706
tar@1.35+dfsg-3build1
no fix listed
ghcr.io/openrelik/openrelik-worker-dfindexeddb:latest31966a825782
tar@1.35+dfsg-3build1
no fix listed
ghcr.io/openrelik/openrelik-worker-extraction:latestec9fc5864cd5
tar@1.35+dfsg-3build1
no fix listed
ghcr.io/openrelik/openrelik-worker-floss:latest7a331eb83c6a
tar@1.35+dfsg-3build1
no fix listed
ghcr.io/openrelik/openrelik-worker-grep:latest470ff3529746
tar@1.35+dfsg-3build1
no fix listed
ghcr.io/openrelik/openrelik-worker-os-creds:latest7fc7ec101f08
tar@1.35+dfsg-3build1
no fix listed
ghcr.io/openrelik/openrelik-worker-plaso:latest75537ea8c851
tar@1.35+dfsg-3build1
no fix listed
ghcr.io/openrelik/openrelik-worker-strings:latest6e05055b701f
tar@1.35+dfsg-3build1
no fix listed
ghcr.io/openrelik/openrelik-worker-timesketch:latest4cb88b603cdc
tar@1.35+dfsg-3build1
no fix listed
ghcr.io/openrelik/openrelik-worker-yara:latestbd7fbf4505b5
tar@1.35+dfsg-3build1
no fix listed

Open the chart page →

72,857
yetiosdfir-infrastructureVerified publisher1.0.52 of 4See more

yeti osdfir-infrastructure 1.0.5

2 of the 4 container images this version deploys carry CVE-2026-18508.

Container imageDigestPackageFixed in
yetiplatform/yeti:latest9c3006cedcca
tar@1.35+dfsg-3.1
no fix listed
yetiplatform/yeti-frontend:latest709064278c7e
tar@1.35+dfsg-3.1
no fix listed

Open the chart page →

6,707

Container images carrying it

2,427 by charts deploying them

A fixed version is listed for 1 of the 1 affected package.

Container imageDigestPackageFixed inUsed by
jodogne/orthanc-plugins:latest6ff510aa29c2
tar@1.35+dfsg-3.1
no fix listed
1
johly/airtrail:v3.11.19f702b91e0e7
tar@1.34+dfsg-1.2+deb12u1
no fix listed
1
joplin/server:latest3f7b852959aa
tar@1.34+dfsg-1.2+deb12u1
no fix listed
1
jordan/icinga2:latestf75025fe8ea8
tar@1.34+dfsg-1.2+deb12u1
no fix listed
1
josh5/unmanic:0.2.64d49c4816260
tar@1.34+dfsg-1ubuntu0.1.22.04.1
no fix listed
1
journeyapps/powersync-service:latestbf46f66e5dcc
tar@1.35+dfsg-3.1
no fix listed
1
jpgouin/openldap:2.6.9-fixbfdd0088c776
tar@1.34+dfsg-1.2+deb12u1
no fix listed
1
juicedata/juicefs-csi-driver:v0.33.0f918e7331c05
tar@1.34+dfsg-1.2+deb12u1
no fix listed
1
jupyterhub/jupyterhub:5.4.63974ba945e65
tar@1.35+dfsg-3build1
no fix listed
1
jupyterhub/k8s-hub:0.11.1b6b4a1a34bf0
tar@1.30+dfsg-7
no fix listed
1
jupyterhub/k8s-hub:1.2.0e4770285aaf7
tar@1.30+dfsg-7ubuntu0.20.04.1
no fix listed
1
jupyterhub/k8s-singleuser-sample:0.11.1e3e6f3051df8
tar@1.30+dfsg-7
no fix listed
1
kafkace/kafka:v3.7.1-63ba8d27adc206bf5a4
tar@1.35+dfsg-3build1
no fix listed
1
kafkakraft/kafka-connect:3.7.0062d697db7e5
tar@1.34+dfsg-1ubuntu0.1.22.04.2
no fix listed
1
kafkakraft/kafka-controller:3.7.0f261ad288fce
tar@1.34+dfsg-1ubuntu0.1.22.04.2
no fix listed
1
kafkakraft/kafkakraft:3.7.02e4b593b878b
tar@1.34+dfsg-1ubuntu0.1.22.04.2
no fix listed
1
kayrosuno/kping:latestf3bd44b29b0d
tar@1.35+dfsg-3build1
no fix listed
1
kennethreitz/httpbin:latest599fe5e50731
tar@1.29b-2
no fix listed
1
kfirfer/phppgadmin:7.13.0-22efb4a5d74a3
tar@1.30+dfsg-7ubuntu0.20.04.2
no fix listed
1
kimai/kimai2:2.67.03084f1e5ecdc
tar@1.34+dfsg-1.2+deb12u1
no fix listed
1
kinseii/wazuh-agent:4.14.17160eb143728
tar@1.34+dfsg-1.2+deb12u1
no fix listed
1
kitware/cdash:v5.3.0d7767d9b9da4
tar@1.35+dfsg-3.1
no fix listed
1
kixote/typemill4e9dff179519
tar@1.35+dfsg-3.1
no fix listed
1
kixote/typemill628f79a08cc7
tar@1.35+dfsg-3.1
no fix listed
1
knspar/phronetis:0.1.4609499d2dc91a
tar@1.35+dfsg-3build1
no fix listed
1
knspar/phronetis-operator:0.1.60c4f0543ee58
tar@1.34+dfsg-1.2+deb12u1
no fix listed
1
kong/httpbin:latesta6ac46531193
tar@1.34+dfsg-1ubuntu0.1.22.04.2
no fix listed
1
kong/kong:3.9.16addf50e6bd8
tar@1.35+dfsg-3build1
no fix listed
1
kong/kong-ai-gateway:2.0.3367ed5985b76
tar@1.35+dfsg-3ubuntu0.4
no fix listed
1
krontechnology/aapm-agent:1.8.41cc7d5be6529
tar@1.34+dfsg-1ubuntu0.1.22.04.2
no fix listed
1
krontechnology/aapm-agent:1.1.07feef7d2ab42
tar@1.30+dfsg-7ubuntu0.20.04.3
no fix listed
1
krontechnology/aapm-service:1.1.39dd602db8baa
tar@1.34+dfsg-1ubuntu0.1.22.04.2
no fix listed
1
kserve/models-web-app:v0.13.073486345a602
tar@1.34+dfsg-1.2+deb12u1
no fix listed
1
kubeflownotebookswg/jupyter-web-app:v1.9.2afb52057c997
tar@1.34+dfsg-1.2+deb12u1
no fix listed
1
kubeflownotebookswg/tensorboards-web-app:v1.9.277f07f52a84a
tar@1.34+dfsg-1.2+deb12u1
no fix listed
1
kubeflownotebookswg/volumes-web-app:v1.9.2f63c3e550af3
tar@1.34+dfsg-1.2+deb12u1
no fix listed
1
kubegems/redis:7.2.5-debian-12-r2870ee3a77add
tar@1.34+dfsg-1.2+deb12u1
no fix listed
1
kubeoperator/webkubectl:v2.4.0be8f0d624640
tar@1.29b-2ubuntu0.1
no fix listed
1
kubeovn/kube-ovn:v1.14.06722b54eb5c0
tar@1.35+dfsg-3build1
no fix listed
1
kubeshop/bitnami-mongodb:8.3.8d48b172d99d8
tar@1.35+dfsg-3ubuntu0.4
no fix listed
1
kubeshop/testkube-minio:2025.10d8e1af6aca99
tar@1.34+dfsg-1.2+deb12u1
no fix listed
1
kubesphere/examples-bookinfo-reviews-v2:1.13.06d93129beb32
tar@1.28-2.1ubuntu0.1
no fix listed
1
kudobuilder/controller:v0.9.069072d979708
tar@1.29b-2ubuntu0.1
no fix listed
1
kusionstack/ctrlmesh-manager:v0.2.065e3c32b64d7
tar@1.30+dfsg-7ubuntu0.20.04.4
no fix listed
1
kusionstack/kusion:v0.14.0126c8f0b0976
tar@1.34+dfsg-1ubuntu0.1.22.04.2
no fix listed
1
kuzwolka/aws9:main1ad759b961b1
tar@1.34+dfsg-1.2+deb12u1
no fix listed
1
kuzwolka/aws9:news3e8880fbbb96
tar@1.34+dfsg-1.2+deb12u1
no fix listed
1
kuzwolka/aws9:blog4a7707410bf1
tar@1.34+dfsg-1.2+deb12u1
no fix listed
1
kuzwolka/aws9:shop84a9d9766345
tar@1.34+dfsg-1.2+deb12u1
no fix listed
1
kvalitetsit/stakit-backend:0.3.0f0af0ba589af
tar@1.34+dfsg-1ubuntu0.1.22.04.2
no fix listed
1

syft 1.42.1 · advisories as of 17 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.