StackRadar

CVE-2026-18508

Medium

Advisory

Published 3 Aug 2026In the index since 5 Sept 2026
Severity
Medium
worst across findings
CVSS
4.4
base score, highest
EPSS
0.001
4th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
2,516
of 17,837 indexed, latest versions
Container images
2,481
deployed by those charts
Fix available
1 of 1
affected package

The matching OSV records carry no description.

Carried by container images the latest versions of 2,516 of 17,837 indexed charts deploy, on 2,481 images.

Affected packageAffected versionsFixed inImages
tardeb1.27.1-1, 1.27.1-1ubuntu0.1, 1.28-2.1ubuntu0.1, 1.28-2.1ubuntu0.2+31 more1.35+dfsg-3.1+e52,481
OSV records
DEBIAN-CVE-2026-18508UBUNTU-CVE-2026-18508ECHO-94ec-2dbe-8b73

Charts affected

2,516 by stars
ChartLatestAffected imagesRadar Score

Container images carrying it

2,481 by charts deploying them

A fixed version is listed for 1 of the 1 affected package.

Container imageDigestPackageFixed inUsed by
thomaszy2077/batch:1a271ab8a80bd
tar@1.34+dfsg-1.2+deb12u1
no fix listed
1
thongngo3301/stakefish:latesta341af5976e3
tar@1.34+dfsg-1.2
no fix listed
1
tiago2/cap:2.159f5ae4e261e
tar@1.35+dfsg-3.1
no fix listed
1
tianon/exim4:latestaa8ddf38e160
tar@1.35+dfsg-3.1
no fix listed
1
tibyandocker/serviceexample:latesta4ad592cea84
tar@1.34+dfsg-1.2+deb12u1
no fix listed
1
timescale/timescaledb-ha:pg164f288c0a5213
tar@1.34+dfsg-1ubuntu0.1.22.04.6
no fix listed
1
timescale/timescaledb-ha:pg15-latesta8e3322e1cf9
tar@1.34+dfsg-1ubuntu0.1.22.04.1
no fix listed
1
timescale/timescaledb-ha:pg14.6-ts2.9.1-p1cdb9ae118899
tar@1.34+dfsg-1build3
no fix listed
1
timescale/timescaledb-ha:pg17.2-ts2.18.2e8d0a9cc3db5
tar@1.34+dfsg-1ubuntu0.1.22.04.2
no fix listed
1
timescale/timescaledb-ha:pg14-ts2.6-latested719c0cd19d
tar@1.34+dfsg-1build3
no fix listed
1
timothyclarke/wptagent:2018-01-2322c41e5ca7e2
tar@1.28-2.1ubuntu0.1
no fix listed
1
tinymediamanager/tinymediamanager:5.3.22b34dc85099e
tar@1.35+dfsg-3.1
no fix listed
1
tock/gen-ai-orchestrator-server:25.10.7abf7880e0449
tar@1.35+dfsg-3.1
no fix listed
1
tombursch/kitchenowl-backend:v0.7.8b48e4ab727cd
tar@1.35+dfsg-3.1
no fix listed
1
tpdock/freeradius:2.2.93da600c95a49
tar@1.28-2.1ubuntu0.1
no fix listed
1
treskon/portrait:DEV-latest88e813f22347
tar@1.35+dfsg-4ubuntu0.4
no fix listed
1
treskon/portrait-web-setup:DEV-latesta475d80e4ecf
tar@1.34+dfsg-1.2+deb12u1
no fix listed
1
trinodb/trino:405ee80ab5eeab2
tar@1.34+dfsg-1build3
no fix listed
1
trueosiris/vrising:latest9356f98ad561
tar@1.34+dfsg-1ubuntu0.1.22.04.2
no fix listed
1
tussanakorndev/kube-pod-alerts:1.0.5216fdadadf9a
tar@1.35+dfsg-3.1
no fix listed
1
twentycrm/twenty-postgres-spilo:latest2f78405a78be
tar@1.34+dfsg-1ubuntu0.1.22.04.2
no fix listed
1
typesense/typesense:0.25.1035ccfbc3fd8
tar@1.34+dfsg-1ubuntu0.1.22.04.1
no fix listed
1
typesense/typesense:0.23.03accb727cbe2
tar@1.28-2.1ubuntu0.2
no fix listed
1
typesense/typesense:30.191604dc128e2
tar@1.34+dfsg-1ubuntu0.1.22.04.2
no fix listed
1
typesense/typesense:28.0.rc35dea1b62b7b6e
tar@1.34+dfsg-1ubuntu0.1.22.04.2
no fix listed
1
ubuntu/bind9:9.16-20.04_beta5ee73f44e5d0
tar@1.30+dfsg-7ubuntu0.20.04.4
no fix listed
1
ubuntu/squid:5.2-22.04_beta723891b5bc74
tar@1.34+dfsg-1ubuntu0.1.22.04.2
no fix listed
1
unitbuilds/velocity-workflow:1.0.0f85a34f5bb28
tar@1.35+dfsg-3ubuntu0.4
no fix listed
1
unitycatalog/unitycatalog-ui:main-aadc6fc3a688197b218
tar@1.34+dfsg-1.2+deb12u1
no fix listed
1
utkuozdemir/nvidia_gpu_exporter:0.3.0149f9e7e7aa3
tar@1.30+dfsg-7ubuntu0.20.04.1
no fix listed
1
v3xl/kubesend:0.1.06f62ca96be82
tar@1.34+dfsg-1.2+deb12u1
no fix listed
1
valkey/valkey:8.1.61f84517eca8e
tar@1.35+dfsg-3.1
no fix listed
1
valkey/valkey:9.0.54c64dfeae602
tar@1.35+dfsg-3.1
no fix listed
1
valkey/valkey:8.0.1c5d4f082b76d
tar@1.34+dfsg-1.2+deb12u1
no fix listed
1
vaultwarden/server:1.35.443498a94b22f
tar@1.35+dfsg-3.1
no fix listed
1
vaultwarden/server:1.34.384fd8a47f58d
tar@1.34+dfsg-1.2+deb12u1
no fix listed
1
vaultwarden/server:1.35.79a8eec71f4a5
tar@1.35+dfsg-3.1
no fix listed
1
vcnngr/telegram-login:latest1a849a997b6d
tar@1.34+dfsg-1.2+deb12u1
no fix listed
1
vcnngr/telegram-rebot:latest30f1f05e57a6
tar@1.34+dfsg-1.2+deb12u1
no fix listed
1
veecode/devportal-admin-ui:0.4.30c69fd286b489
tar@1.34+dfsg-1.2+deb12u1
no fix listed
1
venturenox/redis:latest83b471c193ba
tar@1.34+dfsg-1.2+deb12u1
no fix listed
1
vexorian/dizquetv:1.4.37e2b99844a5c
tar@1.29b-2ubuntu0.2
no fix listed
1
vientoprojects/kubernetes-monitoring-telegram-bot:latesteb2a71531741
tar@1.29b-2ubuntu0.2
no fix listed
1
vinanrra/7dtd-server:v0.4.4f9534490bd2b
tar@1.29b-2ubuntu0.3
no fix listed
1
visualregressiontracker/api:5.0.11941aeb8c8bf9
tar@1.34+dfsg-1.2+deb12u1
no fix listed
1
vlebediantsev/notes-admin-front:latest007c6670ff48
tar@1.34+dfsg-1.2
no fix listed
1
vlebediantsev/notes-project-front:latest945675fd2636
tar@1.34+dfsg-1.2
no fix listed
1
vlebediantsev/registration-ms-front-app-host:latest54f69d116c50
tar@1.34+dfsg-1.2
no fix listed
1
voltha/bbsim:1.16.7d90403d58016
tar@1.29b-2ubuntu0.4
no fix listed
1
voltha/bbsim-sadis-server:0.3.5259fc3a03f4e
tar@1.29b-2ubuntu0.4
no fix listed
1

syft 1.42.1 · advisories as of 23 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.