StackRadar

CVE-2026-18508

Medium

Advisory

Published 3 Aug 2026In the index since 5 Sept 2026
Severity
Medium
worst across findings
CVSS
4.4
base score, highest
EPSS
0.001
3rd percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
2,583
of 17,844 indexed, latest versions
Container images
2,576
deployed by those charts
Fix available
1 of 1
affected package

The matching OSV records carry no description.

Carried by container images the latest versions of 2,583 of 17,844 indexed charts deploy, on 2,576 images.

Affected packageAffected versionsFixed inImages
tardeb1.27.1-1, 1.27.1-1ubuntu0.1, 1.28-2.1ubuntu0.1, 1.28-2.1ubuntu0.2+31 more1.35+dfsg-3.1+e52,576
OSV records
DEBIAN-CVE-2026-18508UBUNTU-CVE-2026-18508ECHO-94ec-2dbe-8b73

Charts affected

2,583 by stars
ChartLatestAffected imagesRadar Score
stirling-pdfrubxkubeVerified publisher0.1.21 of 1See more

stirling-pdf rubxkube 0.1.2

1 of the 1 container images this version deploys carry CVE-2026-18508.

Container imageDigestPackageFixed in
ghcr.io/stirling-tools/stirling-pdf:2.14.33b3670fce70b
tar@1.35+dfsg-3build1
no fix listed

Open the chart page →

6,956
suwayomirubxkubeVerified publisher0.1.21 of 1See more

suwayomi rubxkube 0.1.2

1 of the 1 container images this version deploys carry CVE-2026-18508.

Container imageDigestPackageFixed in
ghcr.io/suwayomi/suwayomi-server:v2.3.2320d2c3218c7f9f
tar@1.35+dfsg-3ubuntu0.4
no fix listed

Open the chart page →

1,880
trmnl-serverrubxkubeVerified publisher0.1.01 of 2See more

trmnl-server rubxkube 0.1.0

1 of the 2 container images this version deploys carry CVE-2026-18508.

Container imageDigestPackageFixed in
library/python:3.14-slimcaaf356f4066
tar@1.35+dfsg-3.1
no fix listed

Open the chart page →

2,739
uptime-kumarubxkubeVerified publisher1.2.11 of 1See more

uptime-kuma rubxkube 1.2.1

1 of the 1 container images this version deploys carry CVE-2026-18508.

Container imageDigestPackageFixed in
louislam/uptime-kuma:2.4.091e963bfda56
tar@1.34+dfsg-1.2+deb12u1
no fix listed

Open the chart page →

32,015
vaultwardenrubxkubeVerified publisher1.2.41 of 1See more

vaultwarden rubxkube 1.2.4

1 of the 1 container images this version deploys carry CVE-2026-18508.

Container imageDigestPackageFixed in
vaultwarden/server:1.37.2094b5689ed81
tar@1.35+dfsg-3.1
no fix listed

Open the chart page →

1,879
your-spotifyrubxkubeVerified publisher1.0.11 of 3See more

your-spotify rubxkube 1.0.1

1 of the 3 container images this version deploys carry CVE-2026-18508.

Container imageDigestPackageFixed in
bitnamilegacy/mongodb:latestb0652af9c8d0
tar@1.34+dfsg-1.2+deb12u1
no fix listed

Open the chart page →

5,691
runwhen-localrunwhen-contribVerified publisher0.6.181 of 3See more

runwhen-local runwhen-contrib 0.6.18

1 of the 3 container images this version deploys carry CVE-2026-18508.

Container imageDigestPackageFixed in
ghcr.io/runwhen-contrib/runwhen-local:0.12.2b0a48c74cdcb
tar@1.35+dfsg-3.1
no fix listed

Open the chart page →

3,497
rybbitrybbit-helm1.3.21 of 7See more

rybbit rybbit-helm 1.3.2

1 of the 7 container images this version deploys carry CVE-2026-18508.

Container imageDigestPackageFixed in
valkey/valkey:9.1.164e361b630ec
tar@1.35+dfsg-3.1
no fix listed

Open the chart page →

6,481
nadekobotryuunosukeds30.1.22 of 2See more

nadekobot ryuunosukeds3 0.1.2

2 of the 2 container images this version deploys carry CVE-2026-18508.

Container imageDigestPackageFixed in
library/ubuntu:latestda6fc2be5478
tar@1.35+dfsg-4ubuntu0.4
no fix listed
ryuunosukeds3/nadeko-bot-docker:latestc0398f13e8a9
tar@1.34+dfsg-1ubuntu0.1.22.04.2
no fix listed

Open the chart page →

8,919
orbitalryuunosukeds30.2.01 of 1See more

orbital ryuunosukeds3 0.2.0

1 of the 1 container images this version deploys carry CVE-2026-18508.

Container imageDigestPackageFixed in
ryuunosukeds3/orbital:latest0879f7261b10
tar@1.34+dfsg-1.2+deb12u1
no fix listed

Open the chart page →

2,794
transmissionryuunosukeds31.7.01 of 2See more

transmission ryuunosukeds3 1.7.0

1 of the 2 container images this version deploys carry CVE-2026-18508.

Container imageDigestPackageFixed in
library/python:3.9da5aee29682d
tar@1.35+dfsg-3.1
no fix listed

Open the chart page →

10,373
vrisingryuunosukeds30.1.01 of 1See more

vrising ryuunosukeds3 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-18508.

Container imageDigestPackageFixed in
trueosiris/vrising:latest9356f98ad561
tar@1.34+dfsg-1ubuntu0.1.22.04.2
no fix listed

Open the chart page →

7,872
test-helm-app1saam-helm-test0.1.01 of 1See more

test-helm-app1 saam-helm-test 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-18508.

Container imageDigestPackageFixed in
hamidyousefi93/saam-test:latestc34f071f6ed0
tar@1.34+dfsg-1.2
no fix listed

Open the chart page →

4,084
hivechart-1sabryp3-charts0.2.01 of 2See more

hivechart-1 sabryp3-charts 0.2.0

1 of the 2 container images this version deploys carry CVE-2026-18508.

Container imageDigestPackageFixed in
valkey/valkey:latest418652cfb58e
tar@1.35+dfsg-3.1
no fix listed

Open the chart page →

619
safe-config-servicesafe-global0.1.01 of 3See more

safe-config-service safe-global 0.1.0

1 of the 3 container images this version deploys carry CVE-2026-18508.

Container imageDigestPackageFixed in
safeglobal/safe-config-service:latest09a5e495c219
tar@1.35+dfsg-3.1
no fix listed

Open the chart page →

1,750
safe-stacksafe-global0.1.03 of 9See more

safe-stack safe-global 0.1.0

3 of the 9 container images this version deploys carry CVE-2026-18508.

Container imageDigestPackageFixed in
gjeanmart/safe-ganache-node:latest926264c8f2d1
tar@1.34+dfsg-1.2
no fix listed
safeglobal/safe-config-service:latest09a5e495c219
tar@1.35+dfsg-3.1
no fix listed
safeglobal/safe-transaction-service:latest7b576c73f865
tar@1.35+dfsg-3.1
no fix listed

Open the chart page →

19,946
safe-transaction-servicesafe-global0.1.02 of 6See more

safe-transaction-service safe-global 0.1.0

2 of the 6 container images this version deploys carry CVE-2026-18508.

Container imageDigestPackageFixed in
gjeanmart/safe-ganache-node:latest926264c8f2d1
tar@1.34+dfsg-1.2
no fix listed
safeglobal/safe-transaction-service:latest7b576c73f865
tar@1.35+dfsg-3.1
no fix listed

Open the chart page →

16,757
sagawisesagawiseVerified publisher0.1.01 of 3See more

sagawise sagawise 0.1.0

1 of the 3 container images this version deploys carry CVE-2026-18508.

Container imageDigestPackageFixed in
venturenox/redis:latest83b471c193ba
tar@1.34+dfsg-1.2+deb12u1
no fix listed

Open the chart page →

4,393
fmtok8s-conference-chartsalaboy0.1.41 of 6See more

fmtok8s-conference-chart salaboy 0.1.4

1 of the 6 container images this version deploys carry CVE-2026-18508.

Container imageDigestPackageFixed in
ghcr.io/salaboy/fmtok8s-frontend:v0.1.103fd01b4f56e
tar@1.34+dfsg-1build3
no fix listed

Open the chart page →

16,664
fmtok8s-frontendsalaboy0.1.31 of 1See more

fmtok8s-frontend salaboy 0.1.3

1 of the 1 container images this version deploys carry CVE-2026-18508.

Container imageDigestPackageFixed in
ghcr.io/salaboy/fmtok8s-frontend:v0.1.103fd01b4f56e
tar@1.34+dfsg-1build3
no fix listed

Open the chart page →

8,364
pagessamanvithkaranth1.0.02 of 3See more

pages samanvithkaranth 1.0.0

2 of the 3 container images this version deploys carry CVE-2026-18508.

Container imageDigestPackageFixed in
dellcloud/pages:monitor6ba7b22caacd
tar@1.30+dfsg-7ubuntu0.20.04.1
no fix listed
flyway/flyway:6.4.422d97ceb0c47
tar@1.29b-2ubuntu0.1
no fix listed

Open the chart page →

20,585
samplesample0.1.01 of 2See more

sample sample 0.1.0

1 of the 2 container images this version deploys carry CVE-2026-18508.

Container imageDigestPackageFixed in
library/mongo:noble02eb14a1130c
tar@1.35+dfsg-3ubuntu0.4
no fix listed

Open the chart page →

2,071
evsantisbon0.2.02 of 5See more

ev santisbon 0.2.0

2 of the 5 container images this version deploys carry CVE-2026-18508.

Container imageDigestPackageFixed in
santisbon/evwatcher:latestc4e994ca4540
tar@1.34+dfsg-1.2
no fix listed
santisbon/evworker:lateste807283f8d69
tar@1.34+dfsg-1.2
no fix listed

Open the chart page →

14,895
speedtestsantisbon0.1.02 of 3See more

speedtest santisbon 0.1.0

2 of the 3 container images this version deploys carry CVE-2026-18508.

Container imageDigestPackageFixed in
library/influxdb:2.7b8d940ca9376
tar@1.34+dfsg-1.2+deb12u1
no fix listed
santisbon/speedtest:latest8ee3a1697227
tar@1.34+dfsg-1.2
no fix listed

Open the chart page →

13,076
pagessarubits-pages1.0.02 of 3See more

pages sarubits-pages 1.0.0

2 of the 3 container images this version deploys carry CVE-2026-18508.

Container imageDigestPackageFixed in
dellcloud/pages:monitor6ba7b22caacd
tar@1.30+dfsg-7ubuntu0.20.04.1
no fix listed
flyway/flyway:6.4.422d97ceb0c47
tar@1.29b-2ubuntu0.1
no fix listed

Open the chart page →

20,585
airflowsb-helm-charts0.3.01 of 1See more

airflow sb-helm-charts 0.3.0

1 of the 1 container images this version deploys carry CVE-2026-18508.

Container imageDigestPackageFixed in
apache/airflow:2.8.1e5560ad0b86e
tar@1.34+dfsg-1.2+deb12u1
no fix listed

Open the chart page →

10,655
jellyfinsb-helm-charts0.4.01 of 1See more

jellyfin sb-helm-charts 0.4.0

1 of the 1 container images this version deploys carry CVE-2026-18508.

Container imageDigestPackageFixed in
jellyfin/jellyfin:10.10.317c3a8d9dddb
tar@1.34+dfsg-1.2+deb12u1
no fix listed

Open the chart page →

4,317
mlflowsb-helm-charts0.3.01 of 1See more

mlflow sb-helm-charts 0.3.0

1 of the 1 container images this version deploys carry CVE-2026-18508.

Container imageDigestPackageFixed in
library/python:3.11-slimda047cb8f9d1
tar@1.35+dfsg-3.1
no fix listed

Open the chart page →

703
mongodbsb-helm-charts0.4.01 of 1See more

mongodb sb-helm-charts 0.4.0

1 of the 1 container images this version deploys carry CVE-2026-18508.

Container imageDigestPackageFixed in
library/mongo:7.0.140032d2ca20db
tar@1.34+dfsg-1ubuntu0.1.22.04.2
no fix listed

Open the chart page →

4,248
nextcloudsb-helm-charts0.4.01 of 2See more

nextcloud sb-helm-charts 0.4.0

1 of the 2 container images this version deploys carry CVE-2026-18508.

Container imageDigestPackageFixed in
library/nextcloud:31.0.10-apacheb7faa1653c39
tar@1.35+dfsg-3.1
no fix listed

Open the chart page →

10,299
phpmyadminsb-helm-charts0.3.01 of 1See more

phpmyadmin sb-helm-charts 0.3.0

1 of the 1 container images this version deploys carry CVE-2026-18508.

Container imageDigestPackageFixed in
library/phpmyadmin:5.2.16e75aa8f767c
tar@1.34+dfsg-1.2+deb12u1
no fix listed

Open the chart page →

5,631
postgresqlsb-helm-charts0.4.01 of 1See more

postgresql sb-helm-charts 0.4.0

1 of the 1 container images this version deploys carry CVE-2026-18508.

Container imageDigestPackageFixed in
library/postgres:16.11468e1f126ca5
tar@1.35+dfsg-3.1
no fix listed

Open the chart page →

2,553
promtailsb-helm-charts0.4.01 of 1See more

promtail sb-helm-charts 0.4.0

1 of the 1 container images this version deploys carry CVE-2026-18508.

Container imageDigestPackageFixed in
grafana/promtail:3.6.18dcfdf466da0
tar@1.35+dfsg-3build1
no fix listed

Open the chart page →

2,387
rsshubsb-helm-charts0.3.01 of 1See more

rsshub sb-helm-charts 0.3.0

1 of the 1 container images this version deploys carry CVE-2026-18508.

Container imageDigestPackageFixed in
diygod/rsshub:2025-11-097a6312cac0d5
tar@1.34+dfsg-1.2+deb12u1
no fix listed

Open the chart page →

4,946
vaultwardensb-helm-charts0.4.01 of 1See more

vaultwarden sb-helm-charts 0.4.0

1 of the 1 container images this version deploys carry CVE-2026-18508.

Container imageDigestPackageFixed in
vaultwarden/server:1.34.384fd8a47f58d
tar@1.34+dfsg-1.2+deb12u1
no fix listed

Open the chart page →

3,505
wordpresssb-helm-charts0.4.02 of 2See more

wordpress sb-helm-charts 0.4.0

2 of the 2 container images this version deploys carry CVE-2026-18508.

Container imageDigestPackageFixed in
library/mysql:8.0-debian9382e4f6f7f0
tar@1.34+dfsg-1.2+deb12u1
no fix listed
library/wordpress:6.4.3-apache8ae66efb09a2
tar@1.34+dfsg-1.2+deb12u1
no fix listed

Open the chart page →

14,230
postgresscalified-postgresVerified publisher18.4.01 of 1See more

postgres scalified-postgres 18.4.0

1 of the 1 container images this version deploys carry CVE-2026-18508.

Container imageDigestPackageFixed in
library/postgres:18.4a02db8cac496
tar@1.35+dfsg-3.1
no fix listed

Open the chart page →

1,823
redisscalified-redisVerified publisher0.0.51 of 2See more

redis scalified-redis 0.0.5

1 of the 2 container images this version deploys carry CVE-2026-18508.

Container imageDigestPackageFixed in
library/redis:8.10.18a1efc5f4795
tar@1.35+dfsg-3.1
no fix listed

Open the chart page →

619
factorioschichtelVerified publisher0.1.11 of 1See more

factorio schichtel 0.1.1

1 of the 1 container images this version deploys carry CVE-2026-18508.

Container imageDigestPackageFixed in
factoriotools/factorio:2.0.67-rootlessf7909f7361d6
tar@1.35+dfsg-3.1
no fix listed

Open the chart page →

3,122
mindustryschichtelVerified publisher0.1.11 of 1See more

mindustry schichtel 0.1.1

1 of the 1 container images this version deploys carry CVE-2026-18508.

Container imageDigestPackageFixed in
pschichtel/mindustry-server:v145.1b543e9c2d371
tar@1.34+dfsg-1ubuntu0.1.22.04.2
no fix listed

Open the chart page →

3,434
photonschichtelVerified publisher0.2.01 of 1See more

photon schichtel 0.2.0

1 of the 1 container images this version deploys carry CVE-2026-18508.

Container imageDigestPackageFixed in
rtuszik/photon-docker:2.4.021549c60f9e6
tar@1.35+dfsg-3build1
no fix listed

Open the chart page →

3,091
s3-backupschichtelVerified publisher0.10.01 of 1See more

s3-backup schichtel 0.10.0

1 of the 1 container images this version deploys carry CVE-2026-18508.

Container imageDigestPackageFixed in
ghcr.io/pschichtel/s3-backup:0.7.017666811f6a7
tar@1.35+dfsg-3.1
no fix listed

Open the chart page →

2,543
satisfactoryschichtelVerified publisher0.3.31 of 1See more

satisfactory schichtel 0.3.3

1 of the 1 container images this version deploys carry CVE-2026-18508.

Container imageDigestPackageFixed in
wolveix/satisfactory-server:v1.9.9464d11e36e10
tar@1.34+dfsg-1ubuntu0.1.22.04.2
no fix listed

Open the chart page →

3,723
vaultwardenschichtelVerified publisher0.9.21 of 1See more

vaultwarden schichtel 0.9.2

1 of the 1 container images this version deploys carry CVE-2026-18508.

Container imageDigestPackageFixed in
vaultwarden/server:1.37.2094b5689ed81
tar@1.35+dfsg-3.1
no fix listed

Open the chart page →

1,879
wordpressschichtelVerified publisher0.10.102 of 2See more

wordpress schichtel 0.10.10

2 of the 2 container images this version deploys carry CVE-2026-18508.

Container imageDigestPackageFixed in
library/wordpress:6.9.4-fpmad4a8bae2eb4
tar@1.35+dfsg-3.1
no fix listed
nginxinc/nginx-unprivileged:1.29.5c5b989ebc150
tar@1.35+dfsg-3.1
no fix listed

Open the chart page →

8,915
otterwikischmitzis0.1.01 of 1See more

otterwiki schmitzis 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-18508.

Container imageDigestPackageFixed in
redimp/otterwiki:2d87a26b98d1a
tar@1.34+dfsg-1.2+deb12u1
no fix listed

Open the chart page →

3,175
snipeitschmitzis6.1.01 of 2See more

snipeit schmitzis 6.1.0

1 of the 2 container images this version deploys carry CVE-2026-18508.

Container imageDigestPackageFixed in
snipe/snipe-it:v8.3.1141ebf2386fe
tar@1.35+dfsg-3build1
no fix listed

Open the chart page →

66,296
vikunjaschmitzis1.0.01 of 3See more

vikunja schmitzis 1.0.0

1 of the 3 container images this version deploys carry CVE-2026-18508.

Container imageDigestPackageFixed in
typesense/typesense:0.25.1035ccfbc3fd8
tar@1.34+dfsg-1ubuntu0.1.22.04.1
no fix listed

Open the chart page →

4,294
jellyfinschoolguys-helmcharts0.4.21 of 1See more

jellyfin schoolguys-helmcharts 0.4.2

1 of the 1 container images this version deploys carry CVE-2026-18508.

Container imageDigestPackageFixed in
jellyfin/jellyfin:10.11.81694ff069f0c
tar@1.35+dfsg-3.1
no fix listed

Open the chart page →

3,208
photoprismschoolguys-helmcharts0.3.81 of 1See more

photoprism schoolguys-helmcharts 0.3.8

1 of the 1 container images this version deploys carry CVE-2026-18508.

Container imageDigestPackageFixed in
photoprism/photoprism:260601650c6ad5a651
tar@1.35+dfsg-4
no fix listed

Open the chart page →

57,124

Container images carrying it

2,576 by charts deploying them

A fixed version is listed for 1 of the 1 affected package.

Container imageDigestPackageFixed inUsed by
registry.gitlab.com/dyff/dyff-orchestrator:0.22.199bd5d93aaff7
tar@1.34+dfsg-1.2+deb12u1
no fix listed
1
registry.gitlab.com/dyff/workflows-aggregator:0.16.9b7984253b128
tar@1.35+dfsg-4ubuntu0.4
no fix listed
1
registry.gitlab.com/dyff/workflows-sink:0.16.3564718e28931
tar@1.34+dfsg-1.2+deb12u1
no fix listed
1
registry.gitlab.com/egos-tech/smtp:latestc5faeae6b5d0
tar@1.35+dfsg-3.1
no fix listed
1
registry.gitlab.com/enbuild-staging/vivsoft-platform-ui/enbuild-frontend:1.0.3166353ce9bf98
tar@1.35+dfsg-3.1
no fix listed
1
registry.gitlab.com/enbuild-staging/vivsoft-platform-ui/enbuild-mq-consumer:1.0.310e3cd8c7776d
tar@1.34+dfsg-1.2+deb12u1
no fix listed
1
registry.gitlab.com/enbuild-staging/vivsoft-platform-ui/rabbitmq:3.12.145a9334f371f3
tar@1.34+dfsg-1.2+deb12u1
no fix listed
1
registry.gitlab.com/gitlab-org/build/cng/certificates:v19.4.104019bb2e325
tar@1.35+dfsg-3.1
no fix listed
1
registry.gitlab.com/gitlab-org/build/cng/gitaly:v19.4.198d46dc7e071
tar@1.35+dfsg-3.1
no fix listed
1
registry.gitlab.com/gitlab-org/build/cng/gitlab-base:v19.4.19df7d5aa03fe
tar@1.35+dfsg-3.1
no fix listed
1
registry.gitlab.com/gitlab-org/build/cng/gitlab-container-registry:v4.40.2-gitlabb21661438ee9
tar@1.34+dfsg-1.2+deb12u1
no fix listed
1
registry.gitlab.com/gitlab-org/build/cng/gitlab-exporter:17.0.25b0d50fcd5ea
tar@1.35+dfsg-3.1
no fix listed
1
registry.gitlab.com/gitlab-org/build/cng/gitlab-openbao:v2.6.2-gitlab1a80159109e74
tar@1.35+dfsg-3.1
no fix listed
1
registry.gitlab.com/gitlab-org/build/cng/gitlab-shell:v14.57.3180688274b2c
tar@1.35+dfsg-3.1
no fix listed
1
registry.gitlab.com/gitlab-org/build/cng/gitlab-workhorse-ee:v19.4.17419aa33eb17
tar@1.35+dfsg-3.1
no fix listed
1
registry.gitlab.com/gitlab-org/build/cng/kubectl:v19.4.1a072f0a41f28
tar@1.35+dfsg-3.1
no fix listed
1
registry.gitlab.com/infinitydon/registry/open5gs-aio:v2.2.2f6385712935f
tar@1.30+dfsg-7ubuntu0.20.04.1
no fix listed
1
registry.gitlab.com/school_guy/docker-typo3:13.4.30-197d868ed76185d7270d
tar@1.34+dfsg-1.2+deb12u1
no fix listed
1
registry.k8s.io/csi-secrets-store/driver:v1.6.1b48d7d13dd06
tar@1.34+dfsg-1.2+deb12u1
no fix listed
1
registry.k8s.io/git-sync/git-sync:v4.5.00e64aedb0d0a
tar@1.35+dfsg-3.1
no fix listed
1
registry.k8s.io/node-problem-detector/node-problem-detector:v0.8.2052f0618e9bc2
tar@1.34+dfsg-1.2+deb12u1
no fix listed
1
registry.k8s.io/node-problem-detector/node-problem-detector:v1.35.1c380751accc5
tar@1.34+dfsg-1.2+deb12u1
no fix listed
1
registry.k8s.io/sig-storage/local-volume-provisioner:v2.8.03e2bf2eaef9f
tar@1.34+dfsg-1.2+deb12u1
no fix listed
1
registry.k8s.io/sig-storage/local-volume-provisioner:v2.9.0f9d65db8bda2
tar@1.34+dfsg-1.2+deb12u1
no fix listed
1
registry.k8s.io/sig-storage/nfsplugin:v4.13.41eb5a85180a4
tar@1.34+dfsg-1.2+deb12u1
no fix listed
1
registry.k8s.io/sig-storage/nfsplugin:v4.11.0ce5b5ccd5eb0
tar@1.34+dfsg-1.2+deb12u1
no fix listed
1

syft 1.42.1 · advisories as of 25 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.