StackRadar

CVE-2026-18508

Medium

Advisory

Published 3 Aug 2026In the index since 5 Sept 2026
Severity
Medium
worst across findings
CVSS
4.4
base score, highest
EPSS
0.001
3rd percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
2,556
of 17,879 indexed, latest versions
Container images
2,537
deployed by those charts
Fix available
1 of 1
affected package

The matching OSV records carry no description.

Carried by container images the latest versions of 2,556 of 17,879 indexed charts deploy, on 2,537 images.

Affected packageAffected versionsFixed inImages
tardeb1.27.1-1, 1.27.1-1ubuntu0.1, 1.28-2.1ubuntu0.1, 1.28-2.1ubuntu0.2+31 more1.35+dfsg-3.1+e52,537
OSV records
DEBIAN-CVE-2026-18508UBUNTU-CVE-2026-18508ECHO-94ec-2dbe-8b73

Charts affected

2,556 by stars
ChartLatestAffected imagesRadar Score
arbitrumdysnixVerified publisher0.1.11 of 1See more

arbitrum dysnix 0.1.1

1 of the 1 container images this version deploys carry CVE-2026-18508.

Container imageDigestPackageFixed in
offchainlabs/nitro-node:v3.1.0-7d1d84ce95865866129
tar@1.34+dfsg-1.2+deb12u1
no fix listed

Open the chart page →

9,680
base-consensusdysnixVerified publisher0.2.01 of 1See more

base-consensus dysnix 0.2.0

1 of the 1 container images this version deploys carry CVE-2026-18508.

Container imageDigestPackageFixed in
ghcr.io/base/node-reth:v1.1.18eb6e492fe3c
tar@1.35+dfsg-3build1
no fix listed

Open the chart page →

1,952
bitcoinddysnixVerified publisher0.4.31 of 2See more

bitcoind dysnix 0.4.3

1 of the 2 container images this version deploys carry CVE-2026-18508.

Container imageDigestPackageFixed in
ghcr.io/dysnix/docker-bitcoind:0.29.0490ca8e3dd21
tar@1.35+dfsg-3build1
no fix listed

Open the chart page →

2,099
gcp-local-nvme-raiddysnixVerified publisher0.2.01 of 2See more

gcp-local-nvme-raid dysnix 0.2.0

1 of the 2 container images this version deploys carry CVE-2026-18508.

Container imageDigestPackageFixed in
library/ubuntu:24.04008173c23f95
tar@1.35+dfsg-3ubuntu0.4
no fix listed

Open the chart page →

441
gcp-local-ssd-raiddysnixVerified publisher0.1.71 of 2See more

gcp-local-ssd-raid dysnix 0.1.7

1 of the 2 container images this version deploys carry CVE-2026-18508.

Container imageDigestPackageFixed in
registry.k8s.io/sig-storage/local-volume-provisioner:v2.8.03e2bf2eaef9f
tar@1.34+dfsg-1.2+deb12u1
no fix listed

Open the chart page →

2,367
rethdysnixVerified publisher0.0.111 of 2See more

reth dysnix 0.0.11

1 of the 2 container images this version deploys carry CVE-2026-18508.

Container imageDigestPackageFixed in
ghcr.io/paradigmxyz/reth:v2.2.0505fca5e87d6
tar@1.35+dfsg-3build1
no fix listed

Open the chart page →

1,169
aerios-k8s-shimeclipse-aeriosVerified publisher1.0.01 of 1See more

aerios-k8s-shim eclipse-aerios 1.0.0

1 of the 1 container images this version deploys carry CVE-2026-18508.

Container imageDigestPackageFixed in
eclipseaerios/aerios-k8s-shim:v1.0.0d4ed3d8e5db4
tar@1.35+dfsg-3.1
no fix listed

Open the chart page →

1,607
hlo-allocatoreclipse-aeriosVerified publisher3.0.01 of 1See more

hlo-allocator eclipse-aerios 3.0.0

1 of the 1 container images this version deploys carry CVE-2026-18508.

Container imageDigestPackageFixed in
eclipseaerios/hlo-allocator:v3.0.03cc1d94cfe96
tar@1.35+dfsg-3.1
no fix listed

Open the chart page →

1,619
hlo-data-aggregatoreclipse-aeriosVerified publisher3.0.01 of 1See more

hlo-data-aggregator eclipse-aerios 3.0.0

1 of the 1 container images this version deploys carry CVE-2026-18508.

Container imageDigestPackageFixed in
eclipseaerios/hlo-data-aggregator:v3.0.0b433c2b9f5dc
tar@1.35+dfsg-3.1
no fix listed

Open the chart page →

1,788
hlo-deployment-engineeclipse-aeriosVerified publisher3.0.01 of 1See more

hlo-deployment-engine eclipse-aerios 3.0.0

1 of the 1 container images this version deploys carry CVE-2026-18508.

Container imageDigestPackageFixed in
eclipseaerios/hlo-deployment-engine:v3.0.0d582d39208c7
tar@1.35+dfsg-3.1
no fix listed

Open the chart page →

1,798
hlo-fe-engineeclipse-aeriosVerified publisher3.0.01 of 1See more

hlo-fe-engine eclipse-aerios 3.0.0

1 of the 1 container images this version deploys carry CVE-2026-18508.

Container imageDigestPackageFixed in
eclipseaerios/hlo-fe-engine:v3.0.08ed2df4ca692
tar@1.35+dfsg-3.1
no fix listed

Open the chart page →

1,788
idmeclipse-aeriosVerified publisher2.0.01 of 2See more

idm eclipse-aerios 2.0.0

1 of the 2 container images this version deploys carry CVE-2026-18508.

Container imageDigestPackageFixed in
library/postgres:16.4e62fbf9d3e2b
tar@1.34+dfsg-1.2+deb12u1
no fix listed

Open the chart page →

4,865
iotaeclipse-aeriosVerified publisher1.0.21 of 4See more

iota eclipse-aerios 1.0.2

1 of the 4 container images this version deploys carry CVE-2026-18508.

Container imageDigestPackageFixed in
eclipseaerios/iota-messages-api:lateste7f5ba0bc64d
tar@1.35+dfsg-3.1
no fix listed

Open the chart page →

14,253
orion-ldeclipse-aeriosVerified publisher1.0.01 of 2See more

orion-ld eclipse-aerios 1.0.0

1 of the 2 container images this version deploys carry CVE-2026-18508.

Container imageDigestPackageFixed in
library/mongo:7.0.12ae1cf99fa7bf
tar@1.34+dfsg-1ubuntu0.1.22.04.2
no fix listed

Open the chart page →

10,037
redpandaeclipse-aeriosVerified publisher5.7.81 of 4See more

redpanda eclipse-aerios 5.7.8

1 of the 4 container images this version deploys carry CVE-2026-18508.

Container imageDigestPackageFixed in
redpandadata/redpanda:latest9e83cfa99278
tar@1.35+dfsg-3.1
no fix listed

Open the chart page →

1,151
self-awarenesseclipse-aeriosVerified publisher1.4.41 of 2See more

self-awareness eclipse-aerios 1.4.4

1 of the 2 container images this version deploys carry CVE-2026-18508.

Container imageDigestPackageFixed in
eclipseaerios/self-awareness-hardware-info:1.4.434b72f45b46a
tar@1.35+dfsg-3.1
no fix listed

Open the chart page →

2,391
self-orchestratoreclipse-aeriosVerified publisher1.2.01 of 1See more

self-orchestrator eclipse-aerios 1.2.0

1 of the 1 container images this version deploys carry CVE-2026-18508.

Container imageDigestPackageFixed in
eclipseaerios/self-orchestrator:1.2.08b123bec5679
tar@1.34+dfsg-1.2+deb12u1
no fix listed

Open the chart page →

2,551
trustmanagereclipse-aeriosVerified publisher1.0.01 of 1See more

trustmanager eclipse-aerios 1.0.0

1 of the 1 container images this version deploys carry CVE-2026-18508.

Container imageDigestPackageFixed in
eclipseaerios/trust-manager:1.0.0f55442e2c0ed
tar@1.35+dfsg-3.1
no fix listed

Open the chart page →

2,072
marblerunedgelesssysVerified publisher1.9.21 of 1See more

marblerun edgelesssys 1.9.2

1 of the 1 container images this version deploys carry CVE-2026-18508.

Container imageDigestPackageFixed in
ghcr.io/edgelesssys/marblerun/coordinator:v1.9.2e589db0d0a2c
tar@1.34+dfsg-1ubuntu0.1.22.04.6
no fix listed

Open the chart page →

1,969
marblerun-coordinatoredgelesssysVerified publisher0.5.01 of 1See more

marblerun-coordinator edgelesssys 0.5.0

1 of the 1 container images this version deploys carry CVE-2026-18508.

Container imageDigestPackageFixed in
ghcr.io/edgelesssys/coordinator:v0.5.0bcd5b8d4c45c
tar@1.29b-2ubuntu0.2
no fix listed

Open the chart page →

11,265
pagesedgwarepages1.0.02 of 3See more

pages edgwarepages 1.0.0

2 of the 3 container images this version deploys carry CVE-2026-18508.

Container imageDigestPackageFixed in
dellcloud/pages:monitor6ba7b22caacd
tar@1.30+dfsg-7ubuntu0.20.04.1
no fix listed
flyway/flyway:6.4.422d97ceb0c47
tar@1.29b-2ubuntu0.1
no fix listed

Open the chart page →

20,585
deploy-elibraryeducative-helm-bookapp0.5.01 of 1See more

deploy-elibrary educative-helm-bookapp 0.5.0

1 of the 1 container images this version deploys carry CVE-2026-18508.

Container imageDigestPackageFixed in
maksymhencha/educative-helm-bookapp:0.0.27f096a681192
tar@1.30+dfsg-7ubuntu0.20.04.4
no fix listed

Open the chart page →

5,347
vaultwardenedudip0.11.01 of 1See more

vaultwarden edudip 0.11.0

1 of the 1 container images this version deploys carry CVE-2026-18508.

Container imageDigestPackageFixed in
vaultwarden/server:1.37.1ebdfe70701c6
tar@1.35+dfsg-3.1
no fix listed

Open the chart page →

2,182
esphomeegebackVerified publisher2.0.251 of 1See more

esphome egeback 2.0.25

1 of the 1 container images this version deploys carry CVE-2026-18508.

Container imageDigestPackageFixed in
esphome/esphome:2026.7.44866347cb5b4
tar@1.35+dfsg-3.1
no fix listed

Open the chart page →

3,393
teslamateegebackVerified publisher2.1.91 of 1See more

teslamate egeback 2.1.9

1 of the 1 container images this version deploys carry CVE-2026-18508.

Container imageDigestPackageFixed in
teslamate/teslamate:4.1.1cc87082e7d67
tar@1.35+dfsg-3.1
no fix listed

Open the chart page →

1,134
unifiegebackVerified publisher2.1.61 of 1See more

unifi egeback 2.1.6

1 of the 1 container images this version deploys carry CVE-2026-18508.

Container imageDigestPackageFixed in
jacobalberty/unifi:v10.0.162896c0ab82d33
tar@1.30+dfsg-7ubuntu0.20.04.4
no fix listed

Open the chart page →

7,817
uptime-kumaegebackVerified publisher2.0.121 of 1See more

uptime-kuma egeback 2.0.12

1 of the 1 container images this version deploys carry CVE-2026-18508.

Container imageDigestPackageFixed in
louislam/uptime-kuma:2.5.0a8610b3b4c38
tar@1.34+dfsg-1.2+deb12u1
no fix listed

Open the chart page →

31,953
egressgatewayegressgateway0.6.92 of 2See more

egressgateway egressgateway 0.6.9

2 of the 2 container images this version deploys carry CVE-2026-18508.

Container imageDigestPackageFixed in
ghcr.io/spidernet-io/egressgateway-agent:v0.6.9a8ec2f74c9d0
tar@1.35+dfsg-3build1
no fix listed
ghcr.io/spidernet-io/egressgateway-controller:v0.6.99deda7b68c34
tar@1.35+dfsg-3build1
no fix listed

Open the chart page →

4,209
mongodb-charteks-3-tier-app-chart0.1.01 of 1See more

mongodb-chart eks-3-tier-app-chart 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-18508.

Container imageDigestPackageFixed in
library/mongo:4.4.66efa05203990
tar@1.29b-2ubuntu0.2
no fix listed

Open the chart page →

8,185
postgresqleks-storageclass0.1.01 of 1See more

postgresql eks-storageclass 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-18508.

Container imageDigestPackageFixed in
library/postgres:17f4c66b820c6f
tar@1.35+dfsg-3.1
no fix listed

Open the chart page →

1,319
netobserv-flowelastiflowVerified publisher0.11.01 of 1See more

netobserv-flow elastiflow 0.11.0

1 of the 1 container images this version deploys carry CVE-2026-18508.

Container imageDigestPackageFixed in
elastiflow/flow-collector:7.26.0fee67842e16b
tar@1.35+dfsg-3build1
no fix listed

Open the chart page →

1,595
seafileeleksbai0.1.13 of 3See more

seafile eleksbai 0.1.1

3 of the 3 container images this version deploys carry CVE-2026-18508.

Container imageDigestPackageFixed in
library/mariadb:10.640153feb479c
tar@1.34+dfsg-1ubuntu0.1.22.04.6
no fix listed
library/memcached:1.6405a445c7c81
tar@1.35+dfsg-3.1
no fix listed
seafileltd/seafile-mc:9.0.106693911bcc40
tar@1.30+dfsg-7ubuntu0.20.04.1
no fix listed

Open the chart page →

92,674
rabbitmqemberstackVerified publisher1.0.211 of 1See more

rabbitmq emberstack 1.0.21

1 of the 1 container images this version deploys carry CVE-2026-18508.

Container imageDigestPackageFixed in
library/rabbitmq:managementddc75301edf5
tar@1.35+dfsg-3ubuntu0.4
no fix listed

Open the chart page →

876
redisemberstackVerified publisher1.0.211 of 1See more

redis emberstack 1.0.21

1 of the 1 container images this version deploys carry CVE-2026-18508.

Container imageDigestPackageFixed in
library/redis:8.0.2b43d2dcbbdb1
tar@1.34+dfsg-1.2+deb12u1
no fix listed

Open the chart page →

2,121
elasticsearch-umbrellaempathyco0.8.121 of 3See more

elasticsearch-umbrella empathyco 0.8.12

1 of the 3 container images this version deploys carry CVE-2026-18508.

Container imageDigestPackageFixed in
empathyco/elasticsearch:7.17.2-memlock03e724e41eeb
tar@1.30+dfsg-7ubuntu0.20.04.2
no fix listed

Open the chart page →

10,868
kube-ecp-stackemqx-operator2.5.13 of 16See more

kube-ecp-stack emqx-operator 2.5.1

3 of the 16 container images this version deploys carry CVE-2026-18508.

Container imageDigestPackageFixed in
datalayers/datalayers:v2.2.1017b292079239
tar@1.34+dfsg-1ubuntu0.1.22.04.2
no fix listed
emqx/ecp-ui:2.5.1e33e9816f147
tar@1.34+dfsg-1.2+deb12u1
no fix listed
library/telegraf:1.27507a3eecf809
tar@1.34+dfsg-1.2+deb12u1
no fix listed

Open the chart page →

24,519
enclaveenclave0.1.11 of 1See more

enclave enclave 0.1.1

1 of the 1 container images this version deploys carry CVE-2026-18508.

Container imageDigestPackageFixed in
enclavenetworks/enclave:latest0a99759300d1
tar@1.30+dfsg-7ubuntu0.20.04.4
no fix listed

Open the chart page →

2,883
enderdash-agentenderdashVerified publisher0.1.61 of 1See more

enderdash-agent enderdash 0.1.6

1 of the 1 container images this version deploys carry CVE-2026-18508.

Container imageDigestPackageFixed in
ghcr.io/enderdash-com/enderdash-agent:latest818a0773d686
tar@1.35+dfsg-3ubuntu0.4
no fix listed

Open the chart page →

578
kube-packetloss-exporterenixVerified publisher0.2.11 of 2See more

kube-packetloss-exporter enix 0.2.1

1 of the 2 container images this version deploys carry CVE-2026-18508.

Container imageDigestPackageFixed in
bitnamilegacy/kubectl:1.3164614ef8290f
tar@1.34+dfsg-1.2+deb12u1
no fix listed

Open the chart page →

6,345
monitoring-proxyenixVerified publisher0.3.01 of 2See more

monitoring-proxy enix 0.3.0

1 of the 2 container images this version deploys carry CVE-2026-18508.

Container imageDigestPackageFixed in
library/haproxy:2.9.6fc5748ff7c72
tar@1.34+dfsg-1.2+deb12u1
no fix listed

Open the chart page →

4,106
topomatikenixVerified publisher1.3.11 of 1See more

topomatik enix 1.3.1

1 of the 1 container images this version deploys carry CVE-2026-18508.

Container imageDigestPackageFixed in
quay.io/enix/topomatik:1.3.1d9f0bec83ef0
tar@1.34+dfsg-1ubuntu0.1.22.04.2
no fix listed

Open the chart page →

2,280
backbone-helm-chartenmeshed-backboneVerified publisher7.2.11 of 7See more

backbone-helm-chart enmeshed-backbone 7.2.1

1 of the 7 container images this version deploys carry CVE-2026-18508.

Container imageDigestPackageFixed in
ghcr.io/nmshd/backbone-admin-cli:7.2.1f7d095c04a75
tar@1.35+dfsg-3ubuntu0.4
no fix listed

Open the chart page →

4,200
mariadbeoc-chartsVerified publisher0.3.141 of 1See more

mariadb eoc-charts 0.3.14

1 of the 1 container images this version deploys carry CVE-2026-18508.

Container imageDigestPackageFixed in
library/mariadb:10.6.15e22328f4d714
tar@1.30+dfsg-7ubuntu0.20.04.3
no fix listed

Open the chart page →

5,353
nginx-charteoc-chartsVerified publisher2.0.01 of 1See more

nginx-chart eoc-charts 2.0.0

1 of the 1 container images this version deploys carry CVE-2026-18508.

Container imageDigestPackageFixed in
library/nginx:latestabe47724e466
tar@1.35+dfsg-3.1
no fix listed

Open the chart page →

1,668
wordpresseoc-chartsVerified publisher0.14.41 of 1See more

wordpress eoc-charts 0.14.4

1 of the 1 container images this version deploys carry CVE-2026-18508.

Container imageDigestPackageFixed in
library/wordpress:6.8.3-apache30bff39330d1
tar@1.35+dfsg-3.1
no fix listed

Open the chart page →

7,828
eolicplantseolicplantsVerified publisher0.1.03 of 7See more

eolicplants eolicplants 0.1.0

3 of the 7 container images this version deploys carry CVE-2026-18508.

Container imageDigestPackageFixed in
library/mongo:4.2.12-bionic628741415fc9
tar@1.29b-2ubuntu0.2
no fix listed
library/rabbitmq:3-managemente582c0bc7766
tar@1.35+dfsg-3build1
no fix listed
oscarsotosanchez/weatherservice:v1.0911ec961d10b
tar@1.29b-2ubuntu0.2
no fix listed

Open the chart page →

28,182
eoloPlanteolo-plannerVerified publisher0.1.04 of 7See more

eoloPlant eolo-planner 0.1.0

4 of the 7 container images this version deploys carry CVE-2026-18508.

Container imageDigestPackageFixed in
codeurjc/toposervice:v1.239fb4c11e6a49
tar@1.29b-2ubuntu0.4
no fix listed
library/mongo:5.0-focal5e15a3f014ed
tar@1.30+dfsg-7ubuntu0.20.04.4
no fix listed
library/rabbitmq:3.11-managementc3f70098e01d
tar@1.34+dfsg-1ubuntu0.1.22.04.2
no fix listed
mastercloudapps/planner:v1.2340a950b311b2
tar@1.34+dfsg-1ubuntu0.1.22.04.1
no fix listed

Open the chart page →

28,753
eoloplannereoloplannerVerified publisher0.1.04 of 7See more

eoloplanner eoloplanner 0.1.0

4 of the 7 container images this version deploys carry CVE-2026-18508.

Container imageDigestPackageFixed in
codeurjc/planner:v1.0800cf520c245
tar@1.34+dfsg-1ubuntu0.1.22.04.1
no fix listed
codeurjc/toposervice:v1.09fb4c11e6a49
tar@1.29b-2ubuntu0.4
no fix listed
library/mongo:5.0.6-focal8e70544b6c76
tar@1.30+dfsg-7ubuntu0.20.04.2
no fix listed
library/rabbitmq:3.9-management8a279e9396a8
tar@1.34+dfsg-1ubuntu0.1.22.04.2
no fix listed

Open the chart page →

33,408
eoloPlannerCommunicationsKubernetes3eoloplannercommunicationskuberneteshelmVerified publisher0.1.04 of 7See more

eoloPlannerCommunicationsKubernetes3 eoloplannercommunicationskuberneteshelm 0.1.0

4 of the 7 container images this version deploys carry CVE-2026-18508.

Container imageDigestPackageFixed in
codeurjc/toposervice:v1.239fb4c11e6a49
tar@1.29b-2ubuntu0.4
no fix listed
library/mongo:5.0-focal5e15a3f014ed
tar@1.30+dfsg-7ubuntu0.20.04.4
no fix listed
library/rabbitmq:3.11-managementc3f70098e01d
tar@1.34+dfsg-1ubuntu0.1.22.04.2
no fix listed
mastercloudapps/planner:v1.2340a950b311b2
tar@1.34+dfsg-1ubuntu0.1.22.04.1
no fix listed

Open the chart page →

28,753
eoloplanner-mcaeoloplanner-mcaVerified publisher0.1.03 of 7See more

eoloplanner-mca eoloplanner-mca 0.1.0

3 of the 7 container images this version deploys carry CVE-2026-18508.

Container imageDigestPackageFixed in
library/mongo:4.2.12-bionic628741415fc9
tar@1.29b-2ubuntu0.2
no fix listed
library/rabbitmq:3-managemente582c0bc7766
tar@1.35+dfsg-3build1
no fix listed
oscarsotosanchez/weatherservice:v1.0911ec961d10b
tar@1.29b-2ubuntu0.2
no fix listed

Open the chart page →

28,147

Container images carrying it

2,537 by charts deploying them

A fixed version is listed for 1 of the 1 affected package.

No deployed image carries CVE-2026-18508.

syft 1.42.1 · advisories as of 25 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.