StackRadar

CVE-2026-18739

Low

Advisory

Published 4 Aug 2026In the index since 5 Sept 2026
Severity
Low
worst across findings
CVSS
2.5
base score, highest
EPSS
0.001
1st percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
196
of 17,781 indexed, latest versions
Container images
150
deployed by those charts
Fix available
None
affected package

The matching OSV records carry no description.

Carried by container images the latest versions of 196 of 17,781 indexed charts deploy, on 150 images.

Affected packageAffected versionsFixed inImages
poptdeb1.16-8ubuntu1, 1.16-10, 1.16-11, 1.16-14+5 moreno fix listed150
OSV records
DEBIAN-CVE-2026-18739UBUNTU-CVE-2026-18739

Charts affected

196 by stars
ChartLatestAffected imagesRadar Score
skypilotgeek-cookbookVerified publisher0.0.11 of 3See more

skypilot geek-cookbook 0.0.1

1 of the 3 container images this version deploys carry CVE-2026-18739.

Container imageDigestPackageFixed in
berkeleyskypilot/skypilot-nightly:latest8da2f3cda472
popt@1.19+dfsg-2
no fix listed

Open the chart page →

8,923
transmissiongeek-cookbookVerified publisher8.4.31 of 1See more

transmission geek-cookbook 8.4.3

1 of the 1 container images this version deploys carry CVE-2026-18739.

Container imageDigestPackageFixed in
ghcr.io/k8s-at-home/transmission:v3.006011182e3946
popt@1.16-14
no fix listed

Open the chart page →

11,861
genieacsgenieacsVerified publisher0.5.11 of 2See more

genieacs genieacs 0.5.1

1 of the 2 container images this version deploys carry CVE-2026-18739.

Container imageDigestPackageFixed in
drumsergio/genieacs:1.2.16.028244054e1bf
popt@1.19+dfsg-1
no fix listed

Open the chart page →

4,259
glpiglpi-chart0.1.11 of 3See more

glpi glpi-chart 0.1.1

1 of the 3 container images this version deploys carry CVE-2026-18739.

Container imageDigestPackageFixed in
library/mariadb:latestdd9b303aed4f
popt@1.19+dfsg-1build1
no fix listed

Open the chart page →

12,170
video-analytics-demogpu-operator0.1.91 of 3See more

video-analytics-demo gpu-operator 0.1.9

1 of the 3 container images this version deploys carry CVE-2026-18739.

Container imageDigestPackageFixed in
anguda/ant-media:2.5c435285fc241
popt@1.16-14
no fix listed

Open the chart page →

15,722
appwritehelmforgeVerified publisher1.3.41 of 5See more

appwrite helmforge 1.3.4

1 of the 5 container images this version deploys carry CVE-2026-18739.

Container imageDigestPackageFixed in
library/mariadb:12.3.3dd9b303aed4f
popt@1.19+dfsg-1build1
no fix listed

Open the chart page →

6,952
booklorehelmforgeVerified publisher2.0.11 of 3See more

booklore helmforge 2.0.1

1 of the 3 container images this version deploys carry CVE-2026-18739.

Container imageDigestPackageFixed in
library/mariadb:12.3.3dd9b303aed4f
popt@1.19+dfsg-1build1
no fix listed

Open the chart page →

2,280
castopodhelmforgeVerified publisher1.2.71 of 3See more

castopod helmforge 1.2.7

1 of the 3 container images this version deploys carry CVE-2026-18739.

Container imageDigestPackageFixed in
library/mariadb:12.3.3dd9b303aed4f
popt@1.19+dfsg-1build1
no fix listed

Open the chart page →

9,342
countlyhelmforgeVerified publisher1.2.61 of 3See more

countly helmforge 1.2.6

1 of the 3 container images this version deploys carry CVE-2026-18739.

Container imageDigestPackageFixed in
countly/countly-server:25.05.4e3c238248f99
popt@1.16-14
no fix listed

Open the chart page →

18,813
discount-bandithelmforgeVerified publisher2.0.81 of 3See more

discount-bandit helmforge 2.0.8

1 of the 3 container images this version deploys carry CVE-2026-18739.

Container imageDigestPackageFixed in
cybrarist/discount-bandit:v4.0.4e9e2447ac666
popt@1.19+dfsg-2
no fix listed

Open the chart page →

29,817
medikeephelmforgeVerified publisher2.0.01 of 3See more

medikeep helmforge 2.0.0

1 of the 3 container images this version deploys carry CVE-2026-18739.

Container imageDigestPackageFixed in
ghcr.io/afairgiant/medikeep:v0.69.0766699daa9ac
popt@1.19+dfsg-1
no fix listed

Open the chart page →

6,022
minecrafthelmforgeVerified publisher1.5.31 of 1See more

minecraft helmforge 1.5.3

1 of the 1 container images this version deploys carry CVE-2026-18739.

Container imageDigestPackageFixed in
itzg/minecraft-server:2026.9.04e29d14082d9
popt@1.19+dfsg-1build1
no fix listed

Open the chart page →

4,639
pimcorehelmforgeVerified publisher2.0.11 of 6See more

pimcore helmforge 2.0.1

1 of the 6 container images this version deploys carry CVE-2026-18739.

Container imageDigestPackageFixed in
library/mariadb:12.3.3dd9b303aed4f
popt@1.19+dfsg-1build1
no fix listed

Open the chart page →

3,156
uptime-kumahelmforgeVerified publisher1.5.121 of 1See more

uptime-kuma helmforge 1.5.12

1 of the 1 container images this version deploys carry CVE-2026-18739.

Container imageDigestPackageFixed in
louislam/uptime-kuma:2.5.33e24e96c89ef
popt@1.19+dfsg-1
no fix listed

Open the chart page →

30,099
mariadbhuangchengwu-helm-chart0.1.01 of 1See more

mariadb huangchengwu-helm-chart 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-18739.

Container imageDigestPackageFixed in
library/mariadb:latestdd9b303aed4f
popt@1.19+dfsg-1build1
no fix listed

Open the chart page →

1,875
ibexaibexaVerified publisher3.11.11 of 10See more

ibexa ibexa 3.11.1

1 of the 10 container images this version deploys carry CVE-2026-18739.

Container imageDigestPackageFixed in
boky/postfix:4.4.0f3f247fd4252
popt@1.19+dfsg-1
no fix listed

Open the chart page →

5,959
ibm-swift-sampleibm-charts1.1.21 of 1See more

ibm-swift-sample ibm-charts 1.1.2

1 of the 1 container images this version deploys carry CVE-2026-18739.

Container imageDigestPackageFixed in
ibmcom/icp-swift-sample:latestb5d8c6714dbc
popt@1.16-10
no fix listed

Open the chart page →

25,160
infisicalinfisical-charts0.4.21 of 3See more

infisical infisical-charts 0.4.2

1 of the 3 container images this version deploys carry CVE-2026-18739.

Container imageDigestPackageFixed in
infisical/infisical:latest02082bf13163
popt@1.19+dfsg-2
no fix listed

Open the chart page →

3,014
homebridgejespernohrVerified publisher0.2.01 of 1See more

homebridge jespernohr 0.2.0

1 of the 1 container images this version deploys carry CVE-2026-18739.

Container imageDigestPackageFixed in
homebridge/homebridge:latest77c685a40911
popt@1.19+dfsg-1build1
no fix listed

Open the chart page →

2,149
unifik8sonlabVerified publisher0.3.71 of 1See more

unifi k8sonlab 0.3.7

1 of the 1 container images this version deploys carry CVE-2026-18739.

Container imageDigestPackageFixed in
jacobalberty/unifi:v10.0.162896c0ab82d33
popt@1.16-14
no fix listed

Open the chart page →

7,268
music-assistantkarljorgensen0.1.31 of 1See more

music-assistant karljorgensen 0.1.3

1 of the 1 container images this version deploys carry CVE-2026-18739.

Container imageDigestPackageFixed in
ghcr.io/music-assistant/server:2.8.7eef3ee7810d0
popt@1.19+dfsg-1
no fix listed

Open the chart page →

7,081
huekatool1.0.81 of 1See more

hue katool 1.0.8

1 of the 1 container images this version deploys carry CVE-2026-18739.

Container imageDigestPackageFixed in
gethue/hue:4.11.011b649636e68
popt@1.16-14
no fix listed

Open the chart page →

16,417
kube-ovnkube-ovn-test1.14.01 of 1See more

kube-ovn kube-ovn-test 1.14.0

1 of the 1 container images this version deploys carry CVE-2026-18739.

Container imageDigestPackageFixed in
kubeovn/kube-ovn:v1.14.06722b54eb5c0
popt@1.19+dfsg-1build1
no fix listed

Open the chart page →

4,940
firefly-iiikubernetes-homelab-helm-chartsVerified publisher0.1.31 of 3See more

firefly-iii kubernetes-homelab-helm-charts 0.1.3

1 of the 3 container images this version deploys carry CVE-2026-18739.

Container imageDigestPackageFixed in
fireflyiii/core:version-6.6.6ae69fdd95cde
popt@1.19+dfsg-2
no fix listed

Open the chart page →

4,382
homebridgelbenicio-communityVerified publisher0.1.151 of 1See more

homebridge lbenicio-community 0.1.15

1 of the 1 container images this version deploys carry CVE-2026-18739.

Container imageDigestPackageFixed in
homebridge/homebridge:latest77c685a40911
popt@1.19+dfsg-1build1
no fix listed

Open the chart page →

2,149
uptime-kumalbenicio-communityVerified publisher0.1.11 of 1See more

uptime-kuma lbenicio-community 0.1.1

1 of the 1 container images this version deploys carry CVE-2026-18739.

Container imageDigestPackageFixed in
louislam/uptime-kuma:2.3.29aeb4e51d038
popt@1.19+dfsg-1
no fix listed

Open the chart page →

33,242
linkdinglinkding0.2.31 of 1See more

linkding linkding 0.2.3

1 of the 1 container images this version deploys carry CVE-2026-18739.

Container imageDigestPackageFixed in
sissbruecker/linkding:1.41.0-plusa222fb777e1f
popt@1.19+dfsg-1
no fix listed

Open the chart page →

37,942
uptime-kumaloeken-at-homeVerified publisher2.3.21 of 1See more

uptime-kuma loeken-at-home 2.3.2

1 of the 1 container images this version deploys carry CVE-2026-18739.

Container imageDigestPackageFixed in
louislam/uptime-kuma:2.3.29aeb4e51d038
popt@1.19+dfsg-1
no fix listed

Open the chart page →

33,242
apica-ascentlogiqai2.0.41 of 19See more

apica-ascent logiqai 2.0.4

1 of the 19 container images this version deploys carry CVE-2026-18739.

Container imageDigestPackageFixed in
logiqai/flash:v3.10.265b996bc7bdc
popt@1.19+dfsg-1
no fix listed

Open the chart page →

23,613
unifimidokura-communityVerified publisher0.0.61 of 1See more

unifi midokura-community 0.0.6

1 of the 1 container images this version deploys carry CVE-2026-18739.

Container imageDigestPackageFixed in
linuxserver/unifi-controller:7.3.83ab105cc50322
popt@1.16-14
no fix listed

Open the chart page →

11,188
mariadbmmontesVerified publisher0.3.01 of 1See more

mariadb mmontes 0.3.0

1 of the 1 container images this version deploys carry CVE-2026-18739.

Container imageDigestPackageFixed in
library/mariadb:10.7.307e06f2e7ae9
popt@1.16-14
no fix listed

Open the chart page →

10,065
uptime-kumancsaVerified publisher1.7.21 of 1See more

uptime-kuma ncsa 1.7.2

1 of the 1 container images this version deploys carry CVE-2026-18739.

Container imageDigestPackageFixed in
louislam/uptime-kuma:2.5.4917318f9d7be
popt@1.19+dfsg-1
no fix listed

Open the chart page →

30,028
node-debug-dashboardnode-debug-dashboardVerified publisher0.3.21 of 1See more

node-debug-dashboard node-debug-dashboard 0.3.2

1 of the 1 container images this version deploys carry CVE-2026-18739.

Container imageDigestPackageFixed in
ghcr.io/samr037/node-debug-dashboard:0.3.0c79b2e64a211
popt@1.19+dfsg-1
no fix listed

Open the chart page →

6,854
zookeeper-helm-chartnotesprojectchart0.1.01 of 1See more

zookeeper-helm-chart notesprojectchart 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-18739.

Container imageDigestPackageFixed in
wurstmeister/zookeeper:latest7a7fd44a7210
popt@1.16-8ubuntu1
no fix listed

Open the chart page →

41,427
splashntppoolVerified publisher1.0.41 of 1See more

splash ntppool 1.0.4

1 of the 1 container images this version deploys carry CVE-2026-18739.

Container imageDigestPackageFixed in
scrapinghub/splash:3.4.1a5f89bc84606
popt@1.16-11
no fix listed

Open the chart page →

27,633
db-backupoleds-helm-chartsVerified publisher0.1.01 of 1See more

db-backup oleds-helm-charts 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-18739.

Container imageDigestPackageFixed in
oled01/db-backup:0.1.06302fd2b5333
popt@1.18-3build1
no fix listed

Open the chart page →

8,090
laravel-appoli-the-devVerified publisher2.0.171 of 1See more

laravel-app oli-the-dev 2.0.17

1 of the 1 container images this version deploys carry CVE-2026-18739.

Container imageDigestPackageFixed in
serversideup/php:8.5-fpm-nginx8f8c2f010ac5
popt@1.19+dfsg-2
no fix listed

Open the chart page →

2,660
cdn-remoteopencord0.2.41 of 3See more

cdn-remote opencord 0.2.4

1 of the 3 container images this version deploys carry CVE-2026-18739.

Container imageDigestPackageFixed in
omecproject/cdn-video-repo:1.0.0d59ccb138ffb
popt@1.16-10
no fix listed

Open the chart page →

63,223
comacopencord1.0.01 of 9See more

comac opencord 1.0.0

1 of the 9 container images this version deploys carry CVE-2026-18739.

Container imageDigestPackageFixed in
omecproject/onos-progran:1.0.05715e5648aa0
popt@1.16-10
no fix listed

Open the chart page →

88,546
mcord-cdn-remoteopencord0.1.61 of 2See more

mcord-cdn-remote opencord 0.1.6

1 of the 2 container images this version deploys carry CVE-2026-18739.

Container imageDigestPackageFixed in
omecproject/cdn-video-repo:remote-v3d59ccb138ffb
popt@1.16-10
no fix listed

Open the chart page →

42,614
mcord-cdn-remote-freeopencord0.1.31 of 1See more

mcord-cdn-remote-free opencord 0.1.3

1 of the 1 container images this version deploys carry CVE-2026-18739.

Container imageDigestPackageFixed in
omecproject/cdn-video-repo:remote-v3d59ccb138ffb
popt@1.16-10
no fix listed

Open the chart page →

29,124
onos-progranopencord1.2.71 of 2See more

onos-progran opencord 1.2.7

1 of the 2 container images this version deploys carry CVE-2026-18739.

Container imageDigestPackageFixed in
muluder/prograncontrollermcord:0.1.843b597a93da7
popt@1.16-10
no fix listed

Open the chart page →

38,865
sebaopencord1.0.01 of 17See more

seba opencord 1.0.0

1 of the 17 container images this version deploys carry CVE-2026-18739.

Container imageDigestPackageFixed in
voltha/voltha-envoy:1.6.059ab2a00f712
popt@1.16-8ubuntu1
no fix listed

Open the chart page →

93,855
fineractopenshift0.1.11 of 4See more

fineract openshift 0.1.1

1 of the 4 container images this version deploys carry CVE-2026-18739.

Container imageDigestPackageFixed in
library/mariadb:11.4611a2fcc5fa7
popt@1.19+dfsg-1build1
no fix listed

Open the chart page →

7,792
open-vpnopenvpn0.0.11 of 1See more

open-vpn openvpn 0.0.1

1 of the 1 container images this version deploys carry CVE-2026-18739.

Container imageDigestPackageFixed in
ghcr.io/linuxserver/openvpn-as:version-2.8.6-916f8e7d-ubuntu184ee0764310e7
popt@1.16-11
no fix listed

Open the chart page →

15,592
issuegenopsmxVerified publisher1.0.21 of 1See more

issuegen opsmx 1.0.2

1 of the 1 container images this version deploys carry CVE-2026-18739.

Container imageDigestPackageFixed in
opsmx11/issuegen:v2.1.05c50ca123d88
popt@1.16-8ubuntu1
no fix listed

Open the chart page →

26,339
grrosdfir-infrastructureVerified publisher1.0.31 of 5See more

grr osdfir-infrastructure 1.0.3

1 of the 5 container images this version deploys carry CVE-2026-18739.

Container imageDigestPackageFixed in
library/mariadb:11.3.2e101f9db3191
popt@1.18-3build1
no fix listed

Open the chart page →

10,896
osdfir-infrastructureosdfir-infrastructureVerified publisher2.15.01 of 40See more

osdfir-infrastructure osdfir-infrastructure 2.15.0

1 of the 40 container images this version deploys carry CVE-2026-18739.

Container imageDigestPackageFixed in
library/mariadb:11.3.2e101f9db3191
popt@1.18-3build1
no fix listed

Open the chart page →

71,208
minecraftpaul1365972-mc3.0.11 of 1See more

minecraft paul1365972-mc 3.0.1

1 of the 1 container images this version deploys carry CVE-2026-18739.

Container imageDigestPackageFixed in
itzg/minecraft-server:latest8672e335dbef
popt@1.19+dfsg-1build1
no fix listed

Open the chart page →

4,253
matomopetbattle11.0.11 of 2See more

matomo petbattle 11.0.1

1 of the 2 container images this version deploys carry CVE-2026-18739.

Container imageDigestPackageFixed in
bitnamilegacy/matomo:5.3.2-debian-12-r13f02c000c54b1
popt@1.19+dfsg-1
no fix listed

Open the chart page →

11,061

Container images carrying it

150 by charts deploying them

A fixed version is listed for 0 of the 1 affected package.

Container imageDigestPackageFixed inUsed by
drumsergio/genieacs:1.2.16.028244054e1bf
popt@1.19+dfsg-1
no fix listed
1
engrmth/bnkr:2.1.06d8464e6f0e8
popt@1.16-14
no fix listed
1
ethereumex/eth-stats-dashboard:v0.0.1a7603aa8df4c
popt@1.16-10
no fix listed
1
fireflyiii/core:version-6.6.6ae69fdd95cde
popt@1.19+dfsg-2
no fix listed
1
fiware/biz-ecosystem-charging-backend:11.7.029456835bb2c
popt@1.16-14
no fix listed
1
fiware/biz-ecosystem-logic-proxy:11.20.3d551a13e8278
popt@1.19+dfsg-1
no fix listed
1
fluent/fluent-bit:4.0-debuge76397ef3983
popt@1.19+dfsg-1
no fix listed
1
galaxy/galaxy-init:v18.010267bad550e6
popt@1.16-8ubuntu1
no fix listed
1
galaxy/galaxy-stable:v18.018e577a626dfd
popt@1.16-8ubuntu1
no fix listed
1
galaxy/pulsar-kubernetes:0.15.7e50a890e24c9
popt@1.19+dfsg-1
no fix listed
1
gethue/hue:4.11.011b649636e68
popt@1.16-14
no fix listed
1
gethue/hue:4.10.05702b2c37ff9
popt@1.16-11
no fix listed
1
gethue/hue:latest7d5c1b9f8a79
popt@1.18-3build1
no fix listed
1
haugene/transmission-openvpn:4.0059216cfae4b
popt@1.16-14
no fix listed
1
hyperledger/fabric-couchdb:0.4.10c65891b6c237
popt@1.16-10
no fix listed
1
ibmcom/icp-swift-sample:latestb5d8c6714dbc
popt@1.16-10
no fix listed
1
itzg/minecraft-server:2026.9.04e29d14082d9
popt@1.19+dfsg-1build1
no fix listed
1
itzg/minecraft-server:latest8672e335dbef
popt@1.19+dfsg-1build1
no fix listed
1
jacobalberty/unifi:v7.1.664a3616625dda
popt@1.16-11
no fix listed
1
jacobalberty/unifi:v7.4.162b3edc809a3ff
popt@1.16-11
no fix listed
1
jordan/icinga2:latestf75025fe8ea8
popt@1.19+dfsg-1
no fix listed
1
kubeovn/kube-ovn:v1.14.06722b54eb5c0
popt@1.19+dfsg-1build1
no fix listed
1
library/mariadb:10.7.307e06f2e7ae9
popt@1.16-14
no fix listed
1
library/mariadb:10.11.21c33370a599c
popt@1.18-3build1
no fix listed
1
library/mariadb:10.422edfe1c7834
popt@1.16-14
no fix listed
1
library/mariadb:112439dcd7d140
popt@1.19+dfsg-1build1
no fix listed
1
library/mariadb:10.8.2-focal490f01279be1
popt@1.16-14
no fix listed
1
library/mariadb:12.0.25b6a1eac15b8
popt@1.19+dfsg-1build1
no fix listed
1
library/mariadb:12.3.2628f228f0fd5
popt@1.19+dfsg-1build1
no fix listed
1
library/mariadb:10.6.218a16204dc96c
popt@1.16-14
no fix listed
1
library/mariadb:10.79a48ac9f196f
popt@1.16-14
no fix listed
1
library/mariadb:12.3.2a02fe89cb597
popt@1.19+dfsg-1build1
no fix listed
1
library/mariadb:12.2.2b1cb255a9939
popt@1.19+dfsg-1build1
no fix listed
1
library/mariadb:10.10.2bfc25a68e113
popt@1.18-3build1
no fix listed
1
library/mariadb:10.6.15e22328f4d714
popt@1.16-14
no fix listed
1
library/mariadb:10.9.4fbb8456ebdb1
popt@1.18-3build1
no fix listed
1
library/mariadb:11.7.2fcc7fcd7114a
popt@1.19+dfsg-1build1
no fix listed
1
library/nextcloud:31.0.6-apache588609d76b21
popt@1.19+dfsg-1
no fix listed
1
library/nextcloud:31.0.10-apacheb7faa1653c39
popt@1.19+dfsg-2
no fix listed
1
linuxserver/unifi-controller:8.0.240ae315a3a456
popt@1.16-14
no fix listed
1
linuxserver/unifi-controller:7.3.83ab105cc50322
popt@1.16-14
no fix listed
1
linuxserver/unifi-network-application:10.6.101-ls144b6ce6968ee45
popt@1.19+dfsg-2build1
no fix listed
1
logiqai/flash:v3.10.265b996bc7bdc
popt@1.19+dfsg-1
no fix listed
1
louislam/uptime-kuma:2.5.33e24e96c89ef
popt@1.19+dfsg-1
no fix listed
1
louislam/uptime-kuma:2.0.24c364ef96aad
popt@1.19+dfsg-1
no fix listed
1
louislam/uptime-kuma:2.4.091e963bfda56
popt@1.19+dfsg-1
no fix listed
1
mathesar/mathesar:0.12.0091757cb01fe
popt@1.19+dfsg-1
no fix listed
1
muluder/prograncontrollermcord:0.1.843b597a93da7
popt@1.16-10
no fix listed
1
offchainlabs/nitro-node:v3.7.6-c0fe95e9f779fa84b7b
popt@1.19+dfsg-1
no fix listed
1
offchainlabs/nitro-node:v3.1.0-7d1d84ce95865866129
popt@1.19+dfsg-1
no fix listed
1

syft 1.42.1 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.