StackRadar

CVE-2026-18508

Medium

Advisory

Published 3 Aug 2026In the index since 5 Sept 2026
Severity
Medium
worst across findings
CVSS
4.4
base score, highest
EPSS
0.001
4th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
2,554
of 17,832 indexed, latest versions
Container images
2,553
deployed by those charts
Fix available
1 of 1
affected package

The matching OSV records carry no description.

Carried by container images the latest versions of 2,554 of 17,832 indexed charts deploy, on 2,553 images.

Affected packageAffected versionsFixed inImages
tardeb1.27.1-1, 1.27.1-1ubuntu0.1, 1.28-2.1ubuntu0.1, 1.28-2.1ubuntu0.2+31 more1.35+dfsg-3.1+e52,553
OSV records
DEBIAN-CVE-2026-18508UBUNTU-CVE-2026-18508ECHO-94ec-2dbe-8b73

Charts affected

2,554 by stars
ChartLatestAffected imagesRadar Score
NEW_APPzekker6Verified publisher0.0.01 of 1See more

NEW_APP zekker6 0.0.0

1 of the 1 container images this version deploys carry CVE-2026-18508.

Container imageDigestPackageFixed in
library/nginx:latestabe47724e466
tar@1.35+dfsg-3.1
no fix listed

Open the chart page →

1,623
sockpuppetbrowserzekker6Verified publisher0.1.01 of 1See more

sockpuppetbrowser zekker6 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-18508.

Container imageDigestPackageFixed in
dgtlmoon/sockpuppetbrowser:latest1d8f72d2ce20
tar@1.34+dfsg-1.2+deb12u1
no fix listed

Open the chart page →

4,628
clickhousezloi-space1.2.02 of 3See more

clickhouse zloi-space 1.2.0

2 of the 3 container images this version deploys carry CVE-2026-18508.

Container imageDigestPackageFixed in
yandex/clickhouse-client:21.3863f94a0f607
tar@1.29b-2ubuntu0.2
no fix listed
yandex/clickhouse-server:21.3.204eccfffb01d7
tar@1.30+dfsg-7ubuntu0.20.04.1
no fix listed

Open the chart page →

9,357
zoo-project-druzoo-projectOfficialVerified publisher0.10.41 of 6See more

zoo-project-dru zoo-project 0.10.4

1 of the 6 container images this version deploys carry CVE-2026-18508.

Container imageDigestPackageFixed in
zooproject/zoo-project:dru-19f3c4eed7c9ec9d1f0375bbe59f9d204a42bd3a9a507cb7e2dd
tar@1.34+dfsg-1ubuntu0.1.22.04.6
no fix listed

Open the chart page →

8,128

Container images carrying it

2,553 by charts deploying them

A fixed version is listed for 1 of the 1 affected package.

Container imageDigestPackageFixed inUsed by
library/influxdb:latest05d6fb735bc2
tar@1.34+dfsg-1.2+deb12u1
no fix listed
1
library/influxdb:3.10.5-core695a8063ff10
tar@1.35+dfsg-3ubuntu0.4
no fix listed
1
library/influxdb:3.11.2-enterprise6ce2bf22499b
tar@1.35+dfsg-3ubuntu0.4
no fix listed
1
library/influxdb:1.12.3-meta8812029260b5
tar@1.34+dfsg-1.2+deb12u1
no fix listed
1
library/influxdb:2.8af89d51080c9
tar@1.34+dfsg-1.2+deb12u1
no fix listed
1
library/influxdb:1.12.3-datab0f9fc41ed79
tar@1.34+dfsg-1.2+deb12u1
no fix listed
1
library/kibana:7.17.150172f1c538e7
tar@1.30+dfsg-7ubuntu0.20.04.4
no fix listed
1
library/kibana:8.18.004c0fc150f3a
tar@1.30+dfsg-7ubuntu0.20.04.4
no fix listed
1
library/kibana:7.17.8c5781ba340ef
tar@1.30+dfsg-7ubuntu0.20.04.2
no fix listed
1
library/kibana:7.17.3e2e2031c15be
tar@1.30+dfsg-7ubuntu0.20.04.2
no fix listed
1
library/kong:3.9:latest2a8cf3b110cd
tar@1.35+dfsg-3ubuntu0.4
no fix listed
1
library/kong:3.8.0fd78090e9e77
tar@1.34+dfsg-1ubuntu0.1.22.04.6
no fix listed
1
library/logstash:7.17.817a4f64e9cf5
tar@1.30+dfsg-7ubuntu0.20.04.2
no fix listed
1
library/mariadb:10.7.307e06f2e7ae9
tar@1.30+dfsg-7ubuntu0.20.04.2
no fix listed
1
library/mariadb:10.11.21c33370a599c
tar@1.34+dfsg-1ubuntu0.1.22.04.1
no fix listed
1
library/mariadb:10.422edfe1c7834
tar@1.30+dfsg-7ubuntu0.20.04.4
no fix listed
1
library/mariadb:10.8.2-focal490f01279be1
tar@1.30+dfsg-7ubuntu0.20.04.1
no fix listed
1
library/mariadb:12.0.25b6a1eac15b8
tar@1.35+dfsg-3build1
no fix listed
1
library/mariadb:12.3.2628f228f0fd5
tar@1.35+dfsg-3build1
no fix listed
1
library/mariadb:11.8.46b848cb24fbb
tar@1.35+dfsg-3build1
no fix listed
1
library/mariadb:1179d59758afc9
tar@1.35+dfsg-3ubuntu0.4
no fix listed
1
library/mariadb:10.6.218a16204dc96c
tar@1.30+dfsg-7ubuntu0.20.04.4
no fix listed
1
library/mariadb:10.79a48ac9f196f
tar@1.30+dfsg-7ubuntu0.20.04.3
no fix listed
1
library/mariadb:12.3.2a02fe89cb597
tar@1.35+dfsg-3ubuntu0.4
no fix listed
1
library/mariadb:12.3.3ab1c3dd38194
tar@1.35+dfsg-3ubuntu0.4
no fix listed
1
library/mariadb:12.2.2b1cb255a9939
tar@1.35+dfsg-3build1
no fix listed
1
library/mariadb:10.10.2bfc25a68e113
tar@1.34+dfsg-1build3
no fix listed
1
library/mariadb:10.6.15e22328f4d714
tar@1.30+dfsg-7ubuntu0.20.04.3
no fix listed
1
library/mariadb:10.9.4fbb8456ebdb1
tar@1.34+dfsg-1build3
no fix listed
1
library/mariadb:11.7.2fcc7fcd7114a
tar@1.35+dfsg-3build1
no fix listed
1
library/matomo:5.1.2-apache2415789e1602
tar@1.34+dfsg-1.2+deb12u1
no fix listed
1
library/matomo:5.13.0-apache369723bd31cd
tar@1.35+dfsg-3.1
no fix listed
1
library/memcached:1.6.4226983a43c918
tar@1.35+dfsg-3.1
no fix listed
1
library/memcached:1.6.409ae868852d0b
tar@1.35+dfsg-3.1
no fix listed
1
library/memcached:1.6.40cc523a19da58
tar@1.35+dfsg-3.1
no fix listed
1
library/memcached:1.6.45dc561d52bb8a
tar@1.35+dfsg-3.1
no fix listed
1
library/memcached:1.6.42-trixiee2a8683c7fbb
tar@1.35+dfsg-3.1
no fix listed
1
library/mongo:7.0.140032d2ca20db
tar@1.34+dfsg-1ubuntu0.1.22.04.2
no fix listed
1
library/mongo:8.002a0cc7939f5
tar@1.35+dfsg-3ubuntu0.4
no fix listed
1
library/mongo:4.4.1305678ae4e5e1
tar@1.30+dfsg-7ubuntu0.20.04.2
no fix listed
1
library/mongo:3.6146c1fd999a6
tar@1.28-2.1ubuntu0.2
no fix listed
1
library/mongo:5.0.32-focal3b6c281e1c08
tar@1.30+dfsg-7ubuntu0.20.04.4
no fix listed
1
library/mongo:4.4-bionic3d0e6df9fd5b
tar@1.29b-2ubuntu0.2
no fix listed
1
library/mongo:5.0.14-focal50cae5081ab4
tar@1.30+dfsg-7ubuntu0.20.04.2
no fix listed
1
library/mongo:6.0.12646902910d6a
tar@1.34+dfsg-1ubuntu0.1.22.04.2
no fix listed
1
library/mongo:4.2699d652ed674
tar@1.29b-2ubuntu0.4
no fix listed
1
library/mongo:4.2.16ca49afbcb2b
tar@1.29b-2ubuntu0.1
no fix listed
1
library/mongo:noble6ede2806c78e
tar@1.35+dfsg-3ubuntu0.4
no fix listed
1
library/mongo:6.0.271a63fc2438e
tar@1.30+dfsg-7ubuntu0.20.04.2
no fix listed
1
library/mongo:5.0.217c81758cb295
tar@1.30+dfsg-7ubuntu0.20.04.3
no fix listed
1

syft 1.42.1 · advisories as of 23 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.