StackRadar

CVE-2026-18508

Medium

Advisory

Published 3 Aug 2026In the index since 5 Sept 2026
Severity
Medium
worst across findings
CVSS
4.4
base score, highest
EPSS
0.001
3rd percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
2,583
of 17,844 indexed, latest versions
Container images
2,576
deployed by those charts
Fix available
1 of 1
affected package

The matching OSV records carry no description.

Carried by container images the latest versions of 2,583 of 17,844 indexed charts deploy, on 2,576 images.

Affected packageAffected versionsFixed inImages
tardeb1.27.1-1, 1.27.1-1ubuntu0.1, 1.28-2.1ubuntu0.1, 1.28-2.1ubuntu0.2+31 more1.35+dfsg-3.1+e52,576
OSV records
DEBIAN-CVE-2026-18508UBUNTU-CVE-2026-18508ECHO-94ec-2dbe-8b73

Charts affected

2,583 by stars
ChartLatestAffected imagesRadar Score
sdtdgeek-cookbookVerified publisher0.3.21 of 1See more

sdtd geek-cookbook 0.3.2

1 of the 1 container images this version deploys carry CVE-2026-18508.

Container imageDigestPackageFixed in
ghcr.io/reitermarkus/7d2d:main39953b387b61
tar@1.35+dfsg-3.1
no fix listed

Open the chart page →

2,652
seafilegeek-cookbookVerified publisher3.2.01 of 1See more

seafile geek-cookbook 3.2.0

1 of the 1 container images this version deploys carry CVE-2026-18508.

Container imageDigestPackageFixed in
seafileltd/seafile-mc:8.0.7ed0fcda5e6a9
tar@1.30+dfsg-7ubuntu0.20.04.1
no fix listed

Open the chart page →

101,468
skypilotgeek-cookbookVerified publisher0.0.11 of 3See more

skypilot geek-cookbook 0.0.1

1 of the 3 container images this version deploys carry CVE-2026-18508.

Container imageDigestPackageFixed in
berkeleyskypilot/skypilot-nightly:latest8da2f3cda472
tar@1.35+dfsg-3.1
no fix listed

Open the chart page →

9,482
teedygeek-cookbookVerified publisher6.2.01 of 1See more

teedy geek-cookbook 6.2.0

1 of the 1 container images this version deploys carry CVE-2026-18508.

Container imageDigestPackageFixed in
sismics/docs:v1.10f4b0ef019cf1
tar@1.29b-2
no fix listed

Open the chart page →

27,575
transmissiongeek-cookbookVerified publisher8.4.31 of 1See more

transmission geek-cookbook 8.4.3

1 of the 1 container images this version deploys carry CVE-2026-18508.

Container imageDigestPackageFixed in
ghcr.io/k8s-at-home/transmission:v3.006011182e3946
tar@1.30+dfsg-7ubuntu0.20.04.2
no fix listed

Open the chart page →

12,395
xtevegeek-cookbookVerified publisher8.4.21 of 1See more

xteve geek-cookbook 8.4.2

1 of the 1 container images this version deploys carry CVE-2026-18508.

Container imageDigestPackageFixed in
ghcr.io/k8s-at-home/xteve:v2.2.0.200292b3614670f
tar@1.30+dfsg-7ubuntu0.20.04.2
no fix listed

Open the chart page →

18,609
chproxygeneral-helm-chartsVerified publisher0.0.21 of 1See more

chproxy general-helm-charts 0.0.2

1 of the 1 container images this version deploys carry CVE-2026-18508.

Container imageDigestPackageFixed in
contentsquareplatform/chproxy:v1.26.524555f22d4be
tar@1.34+dfsg-1.2+deb12u1
no fix listed

Open the chart page →

3,865
mongogengxiankun-charts0.1.01 of 1See more

mongo gengxiankun-charts 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-18508.

Container imageDigestPackageFixed in
library/mongo:5.041108d183e97
tar@1.30+dfsg-7ubuntu0.20.04.4
no fix listed

Open the chart page →

4,166
redisgengxiankun-charts0.2.01 of 1See more

redis gengxiankun-charts 0.2.0

1 of the 1 container images this version deploys carry CVE-2026-18508.

Container imageDigestPackageFixed in
library/redis:latest718f745deb7d
tar@1.35+dfsg-3.1
no fix listed

Open the chart page →

619
rocketmqgengxiankun-charts0.3.01 of 1See more

rocketmq gengxiankun-charts 0.3.0

1 of the 1 container images this version deploys carry CVE-2026-18508.

Container imageDigestPackageFixed in
apache/rocketmq:5.3.0434d8398f996
tar@1.35+dfsg-3build1
no fix listed

Open the chart page →

5,078
genieacsgenieacsVerified publisher0.5.11 of 2See more

genieacs genieacs 0.5.1

1 of the 2 container images this version deploys carry CVE-2026-18508.

Container imageDigestPackageFixed in
drumsergio/genieacs:1.2.16.028244054e1bf
tar@1.34+dfsg-1.2+deb12u1
no fix listed

Open the chart page →

4,464
geomapfishgeomapfish0.8.01 of 3See more

geomapfish geomapfish 0.8.0

1 of the 3 container images this version deploys carry CVE-2026-18508.

Container imageDigestPackageFixed in
camptocamp/geomapfishapp-geoportal:latestae874f70cc16
tar@1.35+dfsg-3ubuntu0.4
no fix listed

Open the chart page →

6,671
geonetwork-k8sgeonetwork-k8sVerified publisher4.2.84 of 5See more

geonetwork-k8s geonetwork-k8s 4.2.8

4 of the 5 container images this version deploys carry CVE-2026-18508.

Container imageDigestPackageFixed in
geonetwork/gn-cloud-ogc-api-records-service:4.2.8-020c9bb761f67
tar@1.29b-2ubuntu0.4
no fix listed
jingking/geonetwork-hnap:4.2.843e74ab234e1
tar@1.30+dfsg-7ubuntu0.20.04.4
no fix listed
library/elasticsearch:7.17.1588c2ec10c7f2
tar@1.30+dfsg-7ubuntu0.20.04.4
no fix listed
library/kibana:7.17.150172f1c538e7
tar@1.30+dfsg-7ubuntu0.20.04.4
no fix listed

Open the chart page →

35,686
istiogetindataVerified publisher1.11.12 of 2See more

istio getindata 1.11.1

2 of the 2 container images this version deploys carry CVE-2026-18508.

Container imageDigestPackageFixed in
gcr.io/istio-release/pilot:1.11.1c552478f8f11
tar@1.30+dfsg-7ubuntu0.20.04.1
no fix listed
gcr.io/istio-release/proxyv2:1.11.19538fabe49fd
tar@1.30+dfsg-7ubuntu0.20.04.1
no fix listed

Open the chart page →

17,177
ghostghostVerified publisher0.1.01 of 4See more

ghost ghost 0.1.0

1 of the 4 container images this version deploys carry CVE-2026-18508.

Container imageDigestPackageFixed in
library/ghost:5.79.083f7bf209844
tar@1.34+dfsg-1.2
no fix listed

Open the chart page →

9,121
qryn-helmgigapipeVerified publisher0.1.91 of 1See more

qryn-helm gigapipe 0.1.9

1 of the 1 container images this version deploys carry CVE-2026-18508.

Container imageDigestPackageFixed in
qxip/qryn:3.2.3977acc9c7a9fd
tar@1.34+dfsg-1.2+deb12u1
no fix listed

Open the chart page →

3,165
redis-uigin0.0.11 of 1See more

redis-ui gin 0.0.1

1 of the 1 container images this version deploys carry CVE-2026-18508.

Container imageDigestPackageFixed in
patrikx3/p3x-redis-ui:latestf19eb45b0694
tar@1.34+dfsg-1.2+deb12u1
no fix listed

Open the chart page →

1,177
rabbitmqginger-society0.1.01 of 2See more

rabbitmq ginger-society 0.1.0

1 of the 2 container images this version deploys carry CVE-2026-18508.

Container imageDigestPackageFixed in
library/rabbitmq:4-managementddc75301edf5
tar@1.35+dfsg-3ubuntu0.4
no fix listed

Open the chart page →

1,346
knativegitlabVerified publisher0.10.03 of 10See more

knative gitlab 0.10.0

3 of the 10 container images this version deploys carry CVE-2026-18508.

Container imageDigestPackageFixed in
istio/node-agent-k8s:1.2.9268ab879ea51
tar@1.28-2.1ubuntu0.1
no fix listed
istio/pilot:1.2.9c09319753454
tar@1.28-2.1ubuntu0.1
no fix listed
istio/proxyv2:1.2.90c78be035e98
tar@1.28-2.1ubuntu0.1
no fix listed

Open the chart page →

204,525
glassflow-etlglassflowVerified publisher0.5.211 of 16See more

glassflow-etl glassflow 0.5.21

1 of the 16 container images this version deploys carry CVE-2026-18508.

Container imageDigestPackageFixed in
ghcr.io/glassflow/glassflow-notifier:v1.0.3d1b0ce10b513
tar@1.35+dfsg-3.1
no fix listed

Open the chart page →

12,279
pgbouncerglassflowVerified publisher0.1.01 of 1See more

pgbouncer glassflow 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-18508.

Container imageDigestPackageFixed in
bitnamilegacy/pgbouncer:1.23.192356da09704
tar@1.34+dfsg-1.2+deb12u1
no fix listed

Open the chart page →

3,448
glauthglauthVerified publisher0.3.171 of 2See more

glauth glauth 0.3.17

1 of the 2 container images this version deploys carry CVE-2026-18508.

Container imageDigestPackageFixed in
nouchka/sqlite3:latestce0d90cbe832
tar@1.35+dfsg-3.1
no fix listed

Open the chart page →

2,778
glpiglpi-chart0.1.13 of 3See more

glpi glpi-chart 0.1.1

3 of the 3 container images this version deploys carry CVE-2026-18508.

Container imageDigestPackageFixed in
library/mariadb:latestd4fdec0510ad
tar@1.35+dfsg-4ubuntu0.4
no fix listed
library/phpmyadmin:latest9e915766488a
tar@1.35+dfsg-3.1
no fix listed
vdiogov/glpi-conteiner:latest6945f84f0058
tar@1.34+dfsg-1.2+deb12u1
no fix listed

Open the chart page →

11,902
goofy-chartgoofy-chart0.1.01 of 1See more

goofy-chart goofy-chart 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-18508.

Container imageDigestPackageFixed in
library/nginx:latestabe47724e466
tar@1.35+dfsg-3.1
no fix listed

Open the chart page →

1,668
platformgoofy-chart0.1.01 of 1See more

platform goofy-chart 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-18508.

Container imageDigestPackageFixed in
devopsgoofy/k8s-platform:latestad865312099f
tar@1.34+dfsg-1.2+deb12u1
no fix listed

Open the chart page →

2,955
googly-logingoogly-login0.1.01 of 2See more

googly-login googly-login 0.1.0

1 of the 2 container images this version deploys carry CVE-2026-18508.

Container imageDigestPackageFixed in
library/postgres:16a3b7f434b2dc
tar@1.35+dfsg-3.1
no fix listed

Open the chart page →

1,319
Governify-Bluejaygovernify0.1.02 of 12See more

Governify-Bluejay governify 0.1.0

2 of the 12 container images this version deploys carry CVE-2026-18508.

Container imageDigestPackageFixed in
library/mongo:latest5d7043a4ffe0
tar@1.35+dfsg-3ubuntu0.4
no fix listed
library/redis:latest718f745deb7d
tar@1.35+dfsg-3.1
no fix listed

Open the chart page →

22,188
Governify-Falcongovernify0.1.01 of 10See more

Governify-Falcon governify 0.1.0

1 of the 10 container images this version deploys carry CVE-2026-18508.

Container imageDigestPackageFixed in
library/mongo:latest5d7043a4ffe0
tar@1.35+dfsg-3ubuntu0.4
no fix listed

Open the chart page →

24,409
jaegergpg-dev3.3.32 of 5See more

jaeger gpg-dev 3.3.3

2 of the 5 container images this version deploys carry CVE-2026-18508.

Container imageDigestPackageFixed in
jaegertracing/jaeger-cassandra-schema:1.53.0d48d6dab2c65
tar@1.34+dfsg-1ubuntu0.1.22.04.2
no fix listed
library/cassandra:3.11.65aa8400b4b3b
tar@1.29b-2ubuntu0.1
no fix listed

Open the chart page →

19,801
kubernetes-dashboardgpg-dev7.5.01 of 5See more

kubernetes-dashboard gpg-dev 7.5.0

1 of the 5 container images this version deploys carry CVE-2026-18508.

Container imageDigestPackageFixed in
library/kong:3.6a42d2b4503e7
tar@1.34+dfsg-1ubuntu0.1.22.04.2
no fix listed

Open the chart page →

6,237
openclawgpg-dev1.5.361 of 2See more

openclaw gpg-dev 1.5.36

1 of the 2 container images this version deploys carry CVE-2026-18508.

Container imageDigestPackageFixed in
chromedp/headless-shell:148.0.7778.97313ed7255ae1
tar@1.35+dfsg-3.1
no fix listed

Open the chart page →

1,775
opentelemetry-demogpg-dev0.33.89 of 27See more

opentelemetry-demo gpg-dev 0.33.8

9 of the 27 container images this version deploys carry CVE-2026-18508.

Container imageDigestPackageFixed in
ghcr.io/open-telemetry/demo:1.12.0-imageprovider4e322858fe56
tar@1.34+dfsg-1.2+deb12u1
no fix listed
ghcr.io/open-telemetry/demo:1.12.0-accountingservice6d051840bb29
tar@1.34+dfsg-1.2+deb12u1
no fix listed
ghcr.io/open-telemetry/demo:1.12.0-loadgenerator85c9935ff31b
tar@1.34+dfsg-1.2+deb12u1
no fix listed
ghcr.io/open-telemetry/demo:1.12.0-quoteservice87eb325d306f
tar@1.34+dfsg-1.2+deb12u1
no fix listed
ghcr.io/open-telemetry/demo:1.12.0-frontendproxy9fdec1be03e4
tar@1.34+dfsg-1ubuntu0.1.22.04.2
no fix listed
ghcr.io/open-telemetry/demo:1.12.0-emailservicea1f5cebb5240
tar@1.34+dfsg-1.2
no fix listed
ghcr.io/open-telemetry/demo:1.12.0-shippingservicea3ca4c02a5df
tar@1.34+dfsg-1.2+deb12u1
no fix listed
ghcr.io/open-telemetry/demo:1.12.0-adservicea59e5eead495
tar@1.35+dfsg-3build1
no fix listed
ghcr.io/open-telemetry/demo:1.12.0-recommendationserviceb294a4278407
tar@1.34+dfsg-1.2+deb12u1
no fix listed

Open the chart page →

51,596
video-analytics-demogpu-operator0.1.92 of 3See more

video-analytics-demo gpu-operator 0.1.9

2 of the 3 container images this version deploys carry CVE-2026-18508.

Container imageDigestPackageFixed in
anguda/ant-media:2.5c435285fc241
tar@1.30+dfsg-7ubuntu0.20.04.3
no fix listed
library/nginx:latestabe47724e466
tar@1.35+dfsg-3.1
no fix listed

Open the chart page →

15,940
video-analytics-demo-l4tgpu-operator0.1.31 of 3See more

video-analytics-demo-l4t gpu-operator 0.1.3

1 of the 3 container images this version deploys carry CVE-2026-18508.

Container imageDigestPackageFixed in
library/nginx:latestabe47724e466
tar@1.35+dfsg-3.1
no fix listed

Open the chart page →

1,668
grafana-samplinggrafana1.1.71 of 2See more

grafana-sampling grafana 1.1.7

1 of the 2 container images this version deploys carry CVE-2026-18508.

Container imageDigestPackageFixed in
grafana/alloy:v1.11.38c7256f412fe
tar@1.35+dfsg-3build1
no fix listed

Open the chart page →

3,520
grapple-installergrapple-installer0.3.221 of 1See more

grapple-installer grapple-installer 0.3.22

1 of the 1 container images this version deploys carry CVE-2026-18508.

Container imageDigestPackageFixed in
grpl/grapple-cli:0.2.127c00aafee6629
tar@1.35+dfsg-3build1
no fix listed

Open the chart page →

86,764
gravitino-iceberg-rest-server-helmgravitino-iceberg-rest-server1.3.111 of 1See more

gravitino-iceberg-rest-server-helm gravitino-iceberg-rest-server 1.3.11

1 of the 1 container images this version deploys carry CVE-2026-18508.

Container imageDigestPackageFixed in
apache/gravitino-iceberg-rest:1.3.080136ae753ee
tar@1.34+dfsg-1ubuntu0.1.22.04.2
no fix listed

Open the chart page →

4,996
grayloggraylogVerified publisher1.0.22 of 4See more

graylog graylog 1.0.2

2 of the 4 container images this version deploys carry CVE-2026-18508.

Container imageDigestPackageFixed in
graylog/graylog:6.1.1019de1aff48c2
tar@1.34+dfsg-1ubuntu0.1.22.04.2
no fix listed
library/mongo:85d7043a4ffe0
tar@1.35+dfsg-3ubuntu0.4
no fix listed

Open the chart page →

5,319
gridgain9gridgainVerified publisher1.1.101 of 2See more

gridgain9 gridgain 1.1.10

1 of the 2 container images this version deploys carry CVE-2026-18508.

Container imageDigestPackageFixed in
library/debian:12.12-slimd5d3f9c23164
tar@1.34+dfsg-1.2+deb12u1
no fix listed

Open the chart page →

3,509
routergroundcover1.12.3952 of 7See more

router groundcover 1.12.395

2 of the 7 container images this version deploys carry CVE-2026-18508.

Container imageDigestPackageFixed in
public.ecr.aws/groundcovercom/postgres:18.1-20260208b7d7910c0bb0
tar@1.35+dfsg-3.1+e3
1.35+dfsg-3.1+e5
quay.io/groundcover/tools:20260719b705e0cbe171
tar@1.35+dfsg-3.1+e4
1.35+dfsg-3.1+e5

Open the chart page →

2,652
temporalgroundcover1.12.3951 of 2See more

temporal groundcover 1.12.395

1 of the 2 container images this version deploys carry CVE-2026-18508.

Container imageDigestPackageFixed in
public.ecr.aws/groundcovercom/temporalio/admin-tools:1.29.7-20260730-1af8cea3b8538
tar@1.35+dfsg-3.1+e4
1.35+dfsg-3.1+e5

Open the chart page →

2,334
librechat-exporterhajowielandVerified publisher1.0.01 of 1See more

librechat-exporter hajowieland 1.0.0

1 of the 1 container images this version deploys carry CVE-2026-18508.

Container imageDigestPackageFixed in
ghcr.io/virtuos/librechat_exporter:2.0.050ea1cf0086f
tar@1.34+dfsg-1.2+deb12u1
no fix listed

Open the chart page →

2,440
rag-apihajowielandVerified publisher1.0.01 of 1See more

rag-api hajowieland 1.0.0

1 of the 1 container images this version deploys carry CVE-2026-18508.

Container imageDigestPackageFixed in
ghcr.io/danny-avila/librechat-rag-api-dev-lite:latest6f2ea2aae300
tar@1.35+dfsg-3.1
no fix listed

Open the chart page →

1,267
web-checkhajowielandVerified publisher1.0.11 of 1See more

web-check hajowieland 1.0.1

1 of the 1 container images this version deploys carry CVE-2026-18508.

Container imageDigestPackageFixed in
ghcr.io/lissy93/web-check:latest7e2ef5261764
tar@1.34+dfsg-1.2+deb12u1
no fix listed

Open the chart page →

6,849
hatchet-apihatchetOfficialVerified publisher0.19.01 of 4See more

hatchet-api hatchet 0.19.0

1 of the 4 container images this version deploys carry CVE-2026-18508.

Container imageDigestPackageFixed in
library/postgres:latest4ef4dbc939d6
tar@1.35+dfsg-3.1
no fix listed

Open the chart page →

1,833
hatchet-hahatchetOfficialVerified publisher0.19.03 of 8See more

hatchet-ha hatchet 0.19.0

3 of the 8 container images this version deploys carry CVE-2026-18508.

Container imageDigestPackageFixed in
bitnamilegacy/postgresql:17.6.0-debian-12-r4926356130b77
tar@1.34+dfsg-1.2+deb12u1
no fix listed
bitnamilegacy/rabbitmq:4.1.3-debian-12-r19e635efba431
tar@1.34+dfsg-1.2+deb12u1
no fix listed
library/postgres:latest4ef4dbc939d6
tar@1.35+dfsg-3.1
no fix listed

Open the chart page →

8,011
hatchet-stackhatchetOfficialVerified publisher0.19.03 of 8See more

hatchet-stack hatchet 0.19.0

3 of the 8 container images this version deploys carry CVE-2026-18508.

Container imageDigestPackageFixed in
bitnamilegacy/postgresql:17.6.0-debian-12-r4926356130b77
tar@1.34+dfsg-1.2+deb12u1
no fix listed
bitnamilegacy/rabbitmq:4.1.3-debian-12-r19e635efba431
tar@1.34+dfsg-1.2+deb12u1
no fix listed
library/postgres:latest4ef4dbc939d6
tar@1.35+dfsg-3.1
no fix listed

Open the chart page →

8,011
hawk-envoy-pluginhawk0.1.01 of 4See more

hawk-envoy-plugin hawk 0.1.0

1 of the 4 container images this version deploys carry CVE-2026-18508.

Container imageDigestPackageFixed in
kong/httpbin:latesta6ac46531193
tar@1.34+dfsg-1ubuntu0.1.22.04.2
no fix listed

Open the chart page →

68,102
web-charthcpark-ktcloudlab0.1.01 of 1See more

web-chart hcpark-ktcloudlab 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-18508.

Container imageDigestPackageFixed in
library/nginx:latestabe47724e466
tar@1.35+dfsg-3.1
no fix listed

Open the chart page →

1,668
hdx-oss-v2hdx-oss-v20.8.41 of 5See more

hdx-oss-v2 hdx-oss-v2 0.8.4

1 of the 5 container images this version deploys carry CVE-2026-18508.

Container imageDigestPackageFixed in
library/mongo:5.0.14-focal50cae5081ab4
tar@1.30+dfsg-7ubuntu0.20.04.2
no fix listed

Open the chart page →

6,921

Container images carrying it

2,576 by charts deploying them

A fixed version is listed for 1 of the 1 affected package.

Container imageDigestPackageFixed inUsed by
registry.gitlab.com/dyff/dyff-orchestrator:0.22.199bd5d93aaff7
tar@1.34+dfsg-1.2+deb12u1
no fix listed
1
registry.gitlab.com/dyff/workflows-aggregator:0.16.9b7984253b128
tar@1.35+dfsg-4ubuntu0.4
no fix listed
1
registry.gitlab.com/dyff/workflows-sink:0.16.3564718e28931
tar@1.34+dfsg-1.2+deb12u1
no fix listed
1
registry.gitlab.com/egos-tech/smtp:latestc5faeae6b5d0
tar@1.35+dfsg-3.1
no fix listed
1
registry.gitlab.com/enbuild-staging/vivsoft-platform-ui/enbuild-frontend:1.0.3166353ce9bf98
tar@1.35+dfsg-3.1
no fix listed
1
registry.gitlab.com/enbuild-staging/vivsoft-platform-ui/enbuild-mq-consumer:1.0.310e3cd8c7776d
tar@1.34+dfsg-1.2+deb12u1
no fix listed
1
registry.gitlab.com/enbuild-staging/vivsoft-platform-ui/rabbitmq:3.12.145a9334f371f3
tar@1.34+dfsg-1.2+deb12u1
no fix listed
1
registry.gitlab.com/gitlab-org/build/cng/certificates:v19.4.104019bb2e325
tar@1.35+dfsg-3.1
no fix listed
1
registry.gitlab.com/gitlab-org/build/cng/gitaly:v19.4.198d46dc7e071
tar@1.35+dfsg-3.1
no fix listed
1
registry.gitlab.com/gitlab-org/build/cng/gitlab-base:v19.4.19df7d5aa03fe
tar@1.35+dfsg-3.1
no fix listed
1
registry.gitlab.com/gitlab-org/build/cng/gitlab-container-registry:v4.40.2-gitlabb21661438ee9
tar@1.34+dfsg-1.2+deb12u1
no fix listed
1
registry.gitlab.com/gitlab-org/build/cng/gitlab-exporter:17.0.25b0d50fcd5ea
tar@1.35+dfsg-3.1
no fix listed
1
registry.gitlab.com/gitlab-org/build/cng/gitlab-openbao:v2.6.2-gitlab1a80159109e74
tar@1.35+dfsg-3.1
no fix listed
1
registry.gitlab.com/gitlab-org/build/cng/gitlab-shell:v14.57.3180688274b2c
tar@1.35+dfsg-3.1
no fix listed
1
registry.gitlab.com/gitlab-org/build/cng/gitlab-workhorse-ee:v19.4.17419aa33eb17
tar@1.35+dfsg-3.1
no fix listed
1
registry.gitlab.com/gitlab-org/build/cng/kubectl:v19.4.1a072f0a41f28
tar@1.35+dfsg-3.1
no fix listed
1
registry.gitlab.com/infinitydon/registry/open5gs-aio:v2.2.2f6385712935f
tar@1.30+dfsg-7ubuntu0.20.04.1
no fix listed
1
registry.gitlab.com/school_guy/docker-typo3:13.4.30-197d868ed76185d7270d
tar@1.34+dfsg-1.2+deb12u1
no fix listed
1
registry.k8s.io/csi-secrets-store/driver:v1.6.1b48d7d13dd06
tar@1.34+dfsg-1.2+deb12u1
no fix listed
1
registry.k8s.io/git-sync/git-sync:v4.5.00e64aedb0d0a
tar@1.35+dfsg-3.1
no fix listed
1
registry.k8s.io/node-problem-detector/node-problem-detector:v0.8.2052f0618e9bc2
tar@1.34+dfsg-1.2+deb12u1
no fix listed
1
registry.k8s.io/node-problem-detector/node-problem-detector:v1.35.1c380751accc5
tar@1.34+dfsg-1.2+deb12u1
no fix listed
1
registry.k8s.io/sig-storage/local-volume-provisioner:v2.8.03e2bf2eaef9f
tar@1.34+dfsg-1.2+deb12u1
no fix listed
1
registry.k8s.io/sig-storage/local-volume-provisioner:v2.9.0f9d65db8bda2
tar@1.34+dfsg-1.2+deb12u1
no fix listed
1
registry.k8s.io/sig-storage/nfsplugin:v4.13.41eb5a85180a4
tar@1.34+dfsg-1.2+deb12u1
no fix listed
1
registry.k8s.io/sig-storage/nfsplugin:v4.11.0ce5b5ccd5eb0
tar@1.34+dfsg-1.2+deb12u1
no fix listed
1

syft 1.42.1 · advisories as of 25 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.