CVE-2026-18508
MediumAdvisory
Published 3 Aug 2026In the index since 5 Sept 2026
- Severity
- Medium
- worst across findings
- CVSS
- 4.4
- base score, highest
- EPSS
- 0.001
- 4th percentile
- CISA KEV
- Not listed
- no confirmed exploitation
- Charts affected
- 2,521
- of 17,837 indexed, latest versions
- Container images
- 2,500
- deployed by those charts
- Fix available
- 1 of 1
- affected package
The matching OSV records carry no description.
Carried by container images the latest versions of 2,521 of 17,837 indexed charts deploy, on 2,500 images.
| Affected package | Affected versions | Fixed in | Images |
|---|---|---|---|
| tardeb | 1.27.1-1, 1.27.1-1ubuntu0.1, 1.28-2.1ubuntu0.1, 1.28-2.1ubuntu0.2+31 more | 1.35+dfsg-3.1+e5 | 2,500 |
Charts affected
2,521 by stars
| Chart | Latest | Affected images | Radar Score |
|---|
Container images carrying it
2,500 by charts deploying them
A fixed version is listed for 1 of the 1 affected package.
| Container image | Digest | Package | Fixed in | Used by |
|---|---|---|---|---|
| nethermind/ | 93e57917371a | tar | no fix listed | 1 |
| nethermind/ | aeca3b55bda5 | tar | no fix listed | 1 |
| netrisai/ | c271efe749d0 | tar | no fix listed | 1 |
| netrisai/ | 53178bf173c2 | tar | no fix listed | 1 |
| netrisai/ | 14d82948a8b2 | tar | no fix listed | 1 |
| netrisai/ | 55e826ef9a5d | tar | no fix listed | 1 |
| netrisai/ | a030a31289f4 | tar | no fix listed | 1 |
| netskopeprivateaccess/ | 0b43204c37d6 | tar | no fix listed | 1 |
| networkboot/ | e99bbfbd6fb2 | tar | no fix listed | 1 |
| networkstatic/ | 5b99d62400dc | tar | no fix listed | 1 |
| networktocode/ | ed484336b1ad | tar | no fix listed | 1 |
| newrelic/ | 1a448492b55a | tar | no fix listed | 1 |
| ngick8stesting/ | 8dd6dea45be4 | tar | no fix listed | 1 |
| nginxinc/ | c5b989ebc150 | tar | no fix listed | 1 |
| nginx/ | 3e97f06dce1c | tar | no fix listed | 1 |
| nginx/ | 520d439f9a9a | tar | no fix listed | 1 |
| nirmalnaveen/ | 8541a39162f3 | tar | no fix listed | 1 |
| nouchka/ | ce0d90cbe832 | tar | no fix listed | 1 |
| nousresearch/ | e0df6adebddf | tar | no fix listed | 1 |
| nvidia/ | 91b20b66d1cd | tar | no fix listed | 1 |
| nvidia/ | 964847cc3fd8 | tar | no fix listed | 1 |
| oamdev/ | 9dd8be44ffc9 | tar | no fix listed | 1 |
| obolnetwork/ | cb7e97d39d46 | tar | no fix listed | 1 |
| offchainlabs/ | 9f779fa84b7b | tar | no fix listed | 1 |
| offchainlabs/ | e95865866129 | tar | no fix listed | 1 |
| oled01/ | 05d3e398e675 | tar | no fix listed | 1 |
| oled01/ | 6302fd2b5333 | tar | no fix listed | 1 |
| olvid/ | e0e6b165d879 | tar | no fix listed | 1 |
| omecproject/ | 638671ef4842 | tar | no fix listed | 1 |
| omecproject/ | 28a90cc26716 | tar | no fix listed | 1 |
| omecproject/ | b4ae7d0d6b74 | tar | no fix listed | 1 |
| omecproject/ | b5ddd36ec20c | tar | no fix listed | 1 |
| omecproject/ | 686f8bc37d8c | tar | no fix listed | 1 |
| omecproject/ | bcc5f19fd676 | tar | no fix listed | 1 |
| omecproject/ | 24a389a0a4fe | tar | no fix listed | 1 |
| omecproject/ | 5715e5648aa0 | tar | no fix listed | 1 |
| omecproject/ | 64776cb9edb3 | tar | no fix listed | 1 |
| omecproject/ | d109a8e57e71 | tar | no fix listed | 1 |
| omkara25/ | 8327546c7aac | tar | no fix listed | 1 |
| omkara25/ | afff40172b6b | tar | no fix listed | 1 |
| omkara25/ | d62cba548580 | tar | no fix listed | 1 |
| ondrejsika/ | d95eaeee2172 | tar | no fix listed | 1 |
| oneuptime/ | ff73ab57aa59 | tar | no fix listed | 1 |
| oneuptime/ | 8301892d9c17 | tar | no fix listed | 1 |
| onosproject/ | 44914a8d4b3f | tar | no fix listed | 1 |
| onyxdotapp/ | 60e83a098ae4 | tar | no fix listed | 1 |
| oomk8s/ | 3adf3d21ad3b | tar | no fix listed | 1 |
| opea/ | 25dd26d9cd09 | tar | no fix listed | 1 |
| opea/ | 38c51b791efa | tar | no fix listed | 1 |
| opea/ | 58f91683892d | tar | no fix listed | 1 |