StackRadar

CVE-2026-18508

Medium

Advisory

Published 3 Aug 2026In the index since 5 Sept 2026
Severity
Medium
worst across findings
CVSS
4.4
base score, highest
EPSS
0.001
4th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
2,516
of 17,837 indexed, latest versions
Container images
2,481
deployed by those charts
Fix available
1 of 1
affected package

The matching OSV records carry no description.

Carried by container images the latest versions of 2,516 of 17,837 indexed charts deploy, on 2,481 images.

Affected packageAffected versionsFixed inImages
tardeb1.27.1-1, 1.27.1-1ubuntu0.1, 1.28-2.1ubuntu0.1, 1.28-2.1ubuntu0.2+31 more1.35+dfsg-3.1+e52,481
OSV records
DEBIAN-CVE-2026-18508UBUNTU-CVE-2026-18508ECHO-94ec-2dbe-8b73

Charts affected

2,516 by stars
ChartLatestAffected imagesRadar Score

Container images carrying it

2,481 by charts deploying them

A fixed version is listed for 1 of the 1 affected package.

Container imageDigestPackageFixed inUsed by
socialmediamacroscope/topic_modeling:0.1.3fa490acac2f8
tar@1.34+dfsg-1.2
no fix listed
1
softwaremill/bootzooka:latest845b5e8f8056
tar@1.35+dfsg-4
no fix listed
1
solarwinds/solarwinds-otel-collector:0.152.3-k8s3c1110e8bdfb
tar@1.34+dfsg-1.2+deb12u1
no fix listed
1
soldevelo/kafka:4.0.0-debian-12-r0cfdc08c2f577
tar@1.34+dfsg-1.2+deb12u1
no fix listed
1
soldevelo/pgpool:4.6.3-debian-12-r0044d16a65129
tar@1.34+dfsg-1.2+deb12u1
no fix listed
1
soldevelo/postgresql-repmgr:17.6.0-debian-12-r03eaab21e40e5
tar@1.34+dfsg-1.2+deb12u1
no fix listed
1
someblackmagic/k8s-testing-multitool:v0.1.06eca64b6b440
tar@1.30+dfsg-7ubuntu0.20.04.2
no fix listed
1
somnathmore/custom-nginx:v2bdfc06cad4ec
tar@1.34+dfsg-1.2+deb12u1
no fix listed
1
sondresjo/altinnendata-api:v1.8.1d90ca67f028d
tar@1.35+dfsg-3ubuntu0.4
no fix listed
1
sondresjo/altinnendata-app:v1.9.2caa49ba0d92a
tar@1.35+dfsg-3.1
no fix listed
1
sondresjo/bobby-api:latestfe534731909a
tar@1.34+dfsg-1.2+deb12u1
no fix listed
1
sondresjo/garge-api:v2.12.762dfd5c9b2e4
tar@1.35+dfsg-3ubuntu0.4
no fix listed
1
sondresjo/garge-app:v1.20.861bc5b249b62
tar@1.35+dfsg-3.1
no fix listed
1
sondresjo/garge-operator:v1.9.5c17f4ecd1adf
tar@1.35+dfsg-3ubuntu0.4
no fix listed
1
sondresjo/nstuning-api:v1.6.12ca4e311d2712
tar@1.35+dfsg-3ubuntu0.4
no fix listed
1
sondresjo/nstuning-app:v1.6.1249cb4535a2fd
tar@1.35+dfsg-3.1
no fix listed
1
sondresjo/pyttogpanne-api:v1.0.18248b508de68
tar@1.35+dfsg-3ubuntu0.4
no fix listed
1
sondresjo/pyttogpanne-app:v1.0.0ef6ee3d8912c
tar@1.35+dfsg-3.1
no fix listed
1
sonroyaalmerol/docker-sogo:5.12.43f60f3abe990
tar@1.35+dfsg-3.1
no fix listed
1
speckle/speckle-preview-service:2.26.3092384dba45d
tar@1.34+dfsg-1.2+deb12u1
no fix listed
1
speckle/speckle-preview-service:2.20.2-branch.testing4.134160-9fad4b21f897ca906ea
tar@1.34+dfsg-1.2+deb12u1
no fix listed
1
speckle/speckle-preview-service:2.21.3-branch.testing5.219631-2153bef52cad5e3293e
tar@1.34+dfsg-1.2+deb12u1
no fix listed
1
speckle/speckle-preview-service:2.23.14-branch.testing6.334655-b4e04ee6dee853ba74a
tar@1.34+dfsg-1.2+deb12u1
no fix listed
1
speckle/speckle-preview-service:2.25.10-branch.testing6.645-b125c1e787adcb20a3a
tar@1.34+dfsg-1.2+deb12u1
no fix listed
1
speckle/speckle-preview-service:2.17.14-branch.testing.72707.921a5f884fc39bca0c8
tar@1.34+dfsg-1.2
no fix listed
1
speckle/speckle-preview-service:2.20.6-branch.testing1.154030-9b091148f3c1ea153ba
tar@1.34+dfsg-1.2+deb12u1
no fix listed
1
speckle/speckle-preview-service:2.19.2-branch.hotfix-2.19.1.124125-665e7e1c102b087481a
tar@1.34+dfsg-1.2+deb12u1
no fix listed
1
speckle/speckle-preview-service:2.20.3-branch.hotfix-2.20.2.149555-37ea0cbd3da0a84de98
tar@1.34+dfsg-1.2+deb12u1
no fix listed
1
speckle/speckle-server:2.17.14-branch.testing.72707.921a5f849d10dcdfb91
tar@1.34+dfsg-1.2
no fix listed
1
speckle/speckle-server:2.19.2-branch.hotfix-2.19.1.124125-665e7e14b6a0750d5aa
tar@1.34+dfsg-1.2+deb12u1
no fix listed
1
speckle/speckle-server:2.20.3-branch.hotfix-2.20.2.149555-37ea0cb52f8eabf5cea
tar@1.34+dfsg-1.2+deb12u1
no fix listed
1
speckle/speckle-server:2.20.2-branch.testing4.134160-9fad4b2687f43ab16f3
tar@1.34+dfsg-1.2+deb12u1
no fix listed
1
speckle/speckle-server:2.18.12-branch.testing3.88744-f55b34189a5872375f9
tar@1.34+dfsg-1.2+deb12u1
no fix listed
1
speckle/speckle-server:2.18.11-branch.testing2.88634-335d469bf6a501b2210
tar@1.34+dfsg-1.2+deb12u1
no fix listed
1
speckle/speckle-server:2.20.6-branch.testing1.154030-9b09114e8413f57b327
tar@1.34+dfsg-1.2+deb12u1
no fix listed
1
spy86/rabbitmq-stomp:latestea649101b9fb
tar@1.30+dfsg-7ubuntu0.20.04.3
no fix listed
1
stackstorm/st2actionrunner:3.888235ba70cad
tar@1.30+dfsg-7ubuntu0.20.04.3
no fix listed
1
stackstorm/st2api:3.86f56d239d280
tar@1.30+dfsg-7ubuntu0.20.04.3
no fix listed
1
stackstorm/st2auth:3.833ecfda16608
tar@1.30+dfsg-7ubuntu0.20.04.3
no fix listed
1
stackstorm/st2garbagecollector:3.84e3f8c7ca52d
tar@1.30+dfsg-7ubuntu0.20.04.3
no fix listed
1
stackstorm/st2notifier:3.8f190a6212195
tar@1.30+dfsg-7ubuntu0.20.04.3
no fix listed
1
stackstorm/st2rulesengine:3.8259503496ff9
tar@1.30+dfsg-7ubuntu0.20.04.3
no fix listed
1
stackstorm/st2scheduler:3.8b1de2055c362
tar@1.30+dfsg-7ubuntu0.20.04.3
no fix listed
1
stackstorm/st2sensorcontainer:3.8b1a338f64773
tar@1.30+dfsg-7ubuntu0.20.04.3
no fix listed
1
stackstorm/st2stream:3.81c8904a3bf67
tar@1.30+dfsg-7ubuntu0.20.04.3
no fix listed
1
stackstorm/st2timersengine:3.81bf35bfaf00c
tar@1.30+dfsg-7ubuntu0.20.04.3
no fix listed
1
stackstorm/st2web:3.809989a26c8b7
tar@1.30+dfsg-7ubuntu0.20.04.3
no fix listed
1
stackstorm/st2workflowengine:3.819fdfffdbba8
tar@1.30+dfsg-7ubuntu0.20.04.3
no fix listed
1
stalwartlabs/stalwart:v0.16.1425001929f36a
tar@1.35+dfsg-3.1
no fix listed
1
stalwartlabs/stalwart:v0.16.2074ca4f7f6885
tar@1.35+dfsg-3.1
no fix listed
1

syft 1.42.1 · advisories as of 23 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.