StackRadar

CVE-2026-18508

Medium

Advisory

Published 3 Aug 2026In the index since 5 Sept 2026
Severity
Medium
worst across findings
CVSS
4.4
base score, highest
EPSS
0.001
4th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
2,481
of 17,828 indexed, latest versions
Container images
2,473
deployed by those charts
Fix available
1 of 1
affected package

The matching OSV records carry no description.

Carried by container images the latest versions of 2,481 of 17,828 indexed charts deploy, on 2,473 images.

Affected packageAffected versionsFixed inImages
tardeb1.27.1-1, 1.27.1-1ubuntu0.1, 1.28-2.1ubuntu0.1, 1.28-2.1ubuntu0.2+31 more1.35+dfsg-3.1+e52,473
OSV records
DEBIAN-CVE-2026-18508UBUNTU-CVE-2026-18508ECHO-94ec-2dbe-8b73

Charts affected

2,481 by stars
ChartLatestAffected imagesRadar Score

Container images carrying it

2,473 by charts deploying them

A fixed version is listed for 1 of the 1 affected package.

Container imageDigestPackageFixed inUsed by
library/memcached:1.6.40cc523a19da58
tar@1.35+dfsg-3.1
no fix listed
1
library/memcached:1.6.45dc561d52bb8a
tar@1.35+dfsg-3.1
no fix listed
1
library/memcached:1.6.42-trixiee2a8683c7fbb
tar@1.35+dfsg-3.1
no fix listed
1
library/mongo:7.0.140032d2ca20db
tar@1.34+dfsg-1ubuntu0.1.22.04.2
no fix listed
1
library/mongo:8.002a0cc7939f5
tar@1.35+dfsg-3ubuntu0.4
no fix listed
1
library/mongo:4.4.1305678ae4e5e1
tar@1.30+dfsg-7ubuntu0.20.04.2
no fix listed
1
library/mongo:3.6146c1fd999a6
tar@1.28-2.1ubuntu0.2
no fix listed
1
library/mongo:5.0.32-focal3b6c281e1c08
tar@1.30+dfsg-7ubuntu0.20.04.4
no fix listed
1
library/mongo:4.4-bionic3d0e6df9fd5b
tar@1.29b-2ubuntu0.2
no fix listed
1
library/mongo:5.0.14-focal50cae5081ab4
tar@1.30+dfsg-7ubuntu0.20.04.2
no fix listed
1
library/mongo:6.0.12646902910d6a
tar@1.34+dfsg-1ubuntu0.1.22.04.2
no fix listed
1
library/mongo:4.2699d652ed674
tar@1.29b-2ubuntu0.4
no fix listed
1
library/mongo:4.2.16ca49afbcb2b
tar@1.29b-2ubuntu0.1
no fix listed
1
library/mongo:noble6ede2806c78e
tar@1.35+dfsg-3ubuntu0.4
no fix listed
1
library/mongo:6.0.271a63fc2438e
tar@1.30+dfsg-7ubuntu0.20.04.2
no fix listed
1
library/mongo:5.0.217c81758cb295
tar@1.30+dfsg-7ubuntu0.20.04.3
no fix listed
1
library/mongo:8.3.981a1c8842a09
tar@1.35+dfsg-3ubuntu0.4
no fix listed
1
library/mongo:7.0.28-jammy88785f6f665a
tar@1.34+dfsg-1ubuntu0.1.22.04.2
no fix listed
1
library/mongo:4.2.21-bionic9cb28f7291d9
tar@1.29b-2ubuntu0.3
no fix listed
1
library/mongo:7.0.12ae1cf99fa7bf
tar@1.34+dfsg-1ubuntu0.1.22.04.2
no fix listed
1
library/mongo:4.4.18d23ec07162ca
tar@1.30+dfsg-7ubuntu0.20.04.2
no fix listed
1
library/mongo:8.0.11dca8d11fe467
tar@1.35+dfsg-3build1
no fix listed
1
library/mysql:8.0-debian9382e4f6f7f0
tar@1.34+dfsg-1.2+deb12u1
no fix listed
1
library/neo4j:2026.05.0-enterprise2caf944aa4a5
tar@1.35+dfsg-3.1
no fix listed
1
library/neo4j:2026.02.25ab4ab0358cf
tar@1.35+dfsg-3.1
no fix listed
1
library/neo4j:2026.05.06c162e2432f8
tar@1.35+dfsg-3.1
no fix listed
1
library/nextcloud:35.0.0:35.0.0-apache3e9f6eaa5dc8
tar@1.35+dfsg-3.1
no fix listed
1
library/nextcloud:31.0.6-apache588609d76b21
tar@1.34+dfsg-1.2+deb12u1
no fix listed
1
library/nextcloud:34.0.4-apachea5ace30c695a
tar@1.35+dfsg-3.1
no fix listed
1
library/nextcloud:34.0.4-apacheb13a87affb7e
tar@1.35+dfsg-3.1
no fix listed
1
library/nextcloud:31.0.10-apacheb7faa1653c39
tar@1.35+dfsg-3.1
no fix listed
1
library/nginx:1.27.409369da6b103
tar@1.34+dfsg-1.2+deb12u1
no fix listed
1
library/nginx:1.291881968aff6f
tar@1.35+dfsg-3.1
no fix listed
1
library/nginx:1.276784fb0834aa
tar@1.34+dfsg-1.2+deb12u1
no fix listed
1
library/nginx:1.25.167f9a4f10d14
tar@1.34+dfsg-1.2
no fix listed
1
library/nginx:1.25.49ff236ed47fe
tar@1.34+dfsg-1.2+deb12u1
no fix listed
1
library/nginx:1.31a53fc6c27208
tar@1.35+dfsg-3.1
no fix listed
1
library/nginx:latestcfb8a89ac237
tar@1.35+dfsg-3.1
no fix listed
1
library/nginx:1.27.3fb197595ebe7
tar@1.34+dfsg-1.2+deb12u1
no fix listed
1
library/node:22-bookworm-slim48e4b67d85f8
tar@1.34+dfsg-1.2+deb12u1
no fix listed
1
library/node:208f693eaa7e0a
tar@1.34+dfsg-1.2+deb12u1
no fix listed
1
library/php:8.4-fpm59fa733c9af6
tar@1.35+dfsg-3.1
no fix listed
1
library/phpmyadmin:5.2.3-apacheadc486045303
tar@1.35+dfsg-3.1
no fix listed
1
library/postgres:18.0073e7c8b84e2
tar@1.35+dfsg-3.1
no fix listed
1
library/postgres:18:18.6-trixie10037cee1d5e
tar@1.35+dfsg-3.1
no fix listed
1
library/postgres:17.4304ab8135187
tar@1.34+dfsg-1.2+deb12u1
no fix listed
1
library/postgres:18.43a82e1f56c8f
tar@1.35+dfsg-3.1
no fix listed
1
library/postgres:16.11468e1f126ca5
tar@1.35+dfsg-3.1
no fix listed
1
library/postgres:16.6557fea37a744
tar@1.34+dfsg-1.2+deb12u1
no fix listed
1
library/postgres:18.369e8582b781c
tar@1.35+dfsg-3.1
no fix listed
1

syft 1.42.1 · advisories as of 21 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.