StackRadar

CVE-2026-18739

Low

Advisory

Published 4 Aug 2026In the index since 5 Sept 2026
Severity
Low
worst across findings
CVSS
2.5
base score, highest
EPSS
0.001
1st percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
196
of 17,781 indexed, latest versions
Container images
150
deployed by those charts
Fix available
None
affected package

The matching OSV records carry no description.

Carried by container images the latest versions of 196 of 17,781 indexed charts deploy, on 150 images.

Affected packageAffected versionsFixed inImages
poptdeb1.16-8ubuntu1, 1.16-10, 1.16-11, 1.16-14+5 moreno fix listed150
OSV records
DEBIAN-CVE-2026-18739UBUNTU-CVE-2026-18739

Charts affected

196 by stars
ChartLatestAffected imagesRadar Score
skypilotgeek-cookbookVerified publisher0.0.11 of 3See more

skypilot geek-cookbook 0.0.1

1 of the 3 container images this version deploys carry CVE-2026-18739.

Container imageDigestPackageFixed in
berkeleyskypilot/skypilot-nightly:latest8da2f3cda472
popt@1.19+dfsg-2
no fix listed

Open the chart page →

8,923
transmissiongeek-cookbookVerified publisher8.4.31 of 1See more

transmission geek-cookbook 8.4.3

1 of the 1 container images this version deploys carry CVE-2026-18739.

Container imageDigestPackageFixed in
ghcr.io/k8s-at-home/transmission:v3.006011182e3946
popt@1.16-14
no fix listed

Open the chart page →

11,861
genieacsgenieacsVerified publisher0.5.11 of 2See more

genieacs genieacs 0.5.1

1 of the 2 container images this version deploys carry CVE-2026-18739.

Container imageDigestPackageFixed in
drumsergio/genieacs:1.2.16.028244054e1bf
popt@1.19+dfsg-1
no fix listed

Open the chart page →

4,259
glpiglpi-chart0.1.11 of 3See more

glpi glpi-chart 0.1.1

1 of the 3 container images this version deploys carry CVE-2026-18739.

Container imageDigestPackageFixed in
library/mariadb:latestdd9b303aed4f
popt@1.19+dfsg-1build1
no fix listed

Open the chart page →

12,170
video-analytics-demogpu-operator0.1.91 of 3See more

video-analytics-demo gpu-operator 0.1.9

1 of the 3 container images this version deploys carry CVE-2026-18739.

Container imageDigestPackageFixed in
anguda/ant-media:2.5c435285fc241
popt@1.16-14
no fix listed

Open the chart page →

15,722
appwritehelmforgeVerified publisher1.3.41 of 5See more

appwrite helmforge 1.3.4

1 of the 5 container images this version deploys carry CVE-2026-18739.

Container imageDigestPackageFixed in
library/mariadb:12.3.3dd9b303aed4f
popt@1.19+dfsg-1build1
no fix listed

Open the chart page →

6,952
booklorehelmforgeVerified publisher2.0.11 of 3See more

booklore helmforge 2.0.1

1 of the 3 container images this version deploys carry CVE-2026-18739.

Container imageDigestPackageFixed in
library/mariadb:12.3.3dd9b303aed4f
popt@1.19+dfsg-1build1
no fix listed

Open the chart page →

2,280
castopodhelmforgeVerified publisher1.2.71 of 3See more

castopod helmforge 1.2.7

1 of the 3 container images this version deploys carry CVE-2026-18739.

Container imageDigestPackageFixed in
library/mariadb:12.3.3dd9b303aed4f
popt@1.19+dfsg-1build1
no fix listed

Open the chart page →

9,342
countlyhelmforgeVerified publisher1.2.61 of 3See more

countly helmforge 1.2.6

1 of the 3 container images this version deploys carry CVE-2026-18739.

Container imageDigestPackageFixed in
countly/countly-server:25.05.4e3c238248f99
popt@1.16-14
no fix listed

Open the chart page →

18,813
discount-bandithelmforgeVerified publisher2.0.81 of 3See more

discount-bandit helmforge 2.0.8

1 of the 3 container images this version deploys carry CVE-2026-18739.

Container imageDigestPackageFixed in
cybrarist/discount-bandit:v4.0.4e9e2447ac666
popt@1.19+dfsg-2
no fix listed

Open the chart page →

29,817
medikeephelmforgeVerified publisher2.0.01 of 3See more

medikeep helmforge 2.0.0

1 of the 3 container images this version deploys carry CVE-2026-18739.

Container imageDigestPackageFixed in
ghcr.io/afairgiant/medikeep:v0.69.0766699daa9ac
popt@1.19+dfsg-1
no fix listed

Open the chart page →

6,022
minecrafthelmforgeVerified publisher1.5.31 of 1See more

minecraft helmforge 1.5.3

1 of the 1 container images this version deploys carry CVE-2026-18739.

Container imageDigestPackageFixed in
itzg/minecraft-server:2026.9.04e29d14082d9
popt@1.19+dfsg-1build1
no fix listed

Open the chart page →

4,639
pimcorehelmforgeVerified publisher2.0.11 of 6See more

pimcore helmforge 2.0.1

1 of the 6 container images this version deploys carry CVE-2026-18739.

Container imageDigestPackageFixed in
library/mariadb:12.3.3dd9b303aed4f
popt@1.19+dfsg-1build1
no fix listed

Open the chart page →

3,156
uptime-kumahelmforgeVerified publisher1.5.121 of 1See more

uptime-kuma helmforge 1.5.12

1 of the 1 container images this version deploys carry CVE-2026-18739.

Container imageDigestPackageFixed in
louislam/uptime-kuma:2.5.33e24e96c89ef
popt@1.19+dfsg-1
no fix listed

Open the chart page →

30,099
mariadbhuangchengwu-helm-chart0.1.01 of 1See more

mariadb huangchengwu-helm-chart 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-18739.

Container imageDigestPackageFixed in
library/mariadb:latestdd9b303aed4f
popt@1.19+dfsg-1build1
no fix listed

Open the chart page →

1,875
ibexaibexaVerified publisher3.11.11 of 10See more

ibexa ibexa 3.11.1

1 of the 10 container images this version deploys carry CVE-2026-18739.

Container imageDigestPackageFixed in
boky/postfix:4.4.0f3f247fd4252
popt@1.19+dfsg-1
no fix listed

Open the chart page →

5,959
ibm-swift-sampleibm-charts1.1.21 of 1See more

ibm-swift-sample ibm-charts 1.1.2

1 of the 1 container images this version deploys carry CVE-2026-18739.

Container imageDigestPackageFixed in
ibmcom/icp-swift-sample:latestb5d8c6714dbc
popt@1.16-10
no fix listed

Open the chart page →

25,160
infisicalinfisical-charts0.4.21 of 3See more

infisical infisical-charts 0.4.2

1 of the 3 container images this version deploys carry CVE-2026-18739.

Container imageDigestPackageFixed in
infisical/infisical:latest02082bf13163
popt@1.19+dfsg-2
no fix listed

Open the chart page →

3,014
homebridgejespernohrVerified publisher0.2.01 of 1See more

homebridge jespernohr 0.2.0

1 of the 1 container images this version deploys carry CVE-2026-18739.

Container imageDigestPackageFixed in
homebridge/homebridge:latest77c685a40911
popt@1.19+dfsg-1build1
no fix listed

Open the chart page →

2,149
unifik8sonlabVerified publisher0.3.71 of 1See more

unifi k8sonlab 0.3.7

1 of the 1 container images this version deploys carry CVE-2026-18739.

Container imageDigestPackageFixed in
jacobalberty/unifi:v10.0.162896c0ab82d33
popt@1.16-14
no fix listed

Open the chart page →

7,268
music-assistantkarljorgensen0.1.31 of 1See more

music-assistant karljorgensen 0.1.3

1 of the 1 container images this version deploys carry CVE-2026-18739.

Container imageDigestPackageFixed in
ghcr.io/music-assistant/server:2.8.7eef3ee7810d0
popt@1.19+dfsg-1
no fix listed

Open the chart page →

7,081
huekatool1.0.81 of 1See more

hue katool 1.0.8

1 of the 1 container images this version deploys carry CVE-2026-18739.

Container imageDigestPackageFixed in
gethue/hue:4.11.011b649636e68
popt@1.16-14
no fix listed

Open the chart page →

16,417
kube-ovnkube-ovn-test1.14.01 of 1See more

kube-ovn kube-ovn-test 1.14.0

1 of the 1 container images this version deploys carry CVE-2026-18739.

Container imageDigestPackageFixed in
kubeovn/kube-ovn:v1.14.06722b54eb5c0
popt@1.19+dfsg-1build1
no fix listed

Open the chart page →

4,940
firefly-iiikubernetes-homelab-helm-chartsVerified publisher0.1.31 of 3See more

firefly-iii kubernetes-homelab-helm-charts 0.1.3

1 of the 3 container images this version deploys carry CVE-2026-18739.

Container imageDigestPackageFixed in
fireflyiii/core:version-6.6.6ae69fdd95cde
popt@1.19+dfsg-2
no fix listed

Open the chart page →

4,382
homebridgelbenicio-communityVerified publisher0.1.151 of 1See more

homebridge lbenicio-community 0.1.15

1 of the 1 container images this version deploys carry CVE-2026-18739.

Container imageDigestPackageFixed in
homebridge/homebridge:latest77c685a40911
popt@1.19+dfsg-1build1
no fix listed

Open the chart page →

2,149
uptime-kumalbenicio-communityVerified publisher0.1.11 of 1See more

uptime-kuma lbenicio-community 0.1.1

1 of the 1 container images this version deploys carry CVE-2026-18739.

Container imageDigestPackageFixed in
louislam/uptime-kuma:2.3.29aeb4e51d038
popt@1.19+dfsg-1
no fix listed

Open the chart page →

33,242
linkdinglinkding0.2.31 of 1See more

linkding linkding 0.2.3

1 of the 1 container images this version deploys carry CVE-2026-18739.

Container imageDigestPackageFixed in
sissbruecker/linkding:1.41.0-plusa222fb777e1f
popt@1.19+dfsg-1
no fix listed

Open the chart page →

37,942
uptime-kumaloeken-at-homeVerified publisher2.3.21 of 1See more

uptime-kuma loeken-at-home 2.3.2

1 of the 1 container images this version deploys carry CVE-2026-18739.

Container imageDigestPackageFixed in
louislam/uptime-kuma:2.3.29aeb4e51d038
popt@1.19+dfsg-1
no fix listed

Open the chart page →

33,242
apica-ascentlogiqai2.0.41 of 19See more

apica-ascent logiqai 2.0.4

1 of the 19 container images this version deploys carry CVE-2026-18739.

Container imageDigestPackageFixed in
logiqai/flash:v3.10.265b996bc7bdc
popt@1.19+dfsg-1
no fix listed

Open the chart page →

23,613
unifimidokura-communityVerified publisher0.0.61 of 1See more

unifi midokura-community 0.0.6

1 of the 1 container images this version deploys carry CVE-2026-18739.

Container imageDigestPackageFixed in
linuxserver/unifi-controller:7.3.83ab105cc50322
popt@1.16-14
no fix listed

Open the chart page →

11,188
mariadbmmontesVerified publisher0.3.01 of 1See more

mariadb mmontes 0.3.0

1 of the 1 container images this version deploys carry CVE-2026-18739.

Container imageDigestPackageFixed in
library/mariadb:10.7.307e06f2e7ae9
popt@1.16-14
no fix listed

Open the chart page →

10,065
uptime-kumancsaVerified publisher1.7.21 of 1See more

uptime-kuma ncsa 1.7.2

1 of the 1 container images this version deploys carry CVE-2026-18739.

Container imageDigestPackageFixed in
louislam/uptime-kuma:2.5.4917318f9d7be
popt@1.19+dfsg-1
no fix listed

Open the chart page →

30,028
node-debug-dashboardnode-debug-dashboardVerified publisher0.3.21 of 1See more

node-debug-dashboard node-debug-dashboard 0.3.2

1 of the 1 container images this version deploys carry CVE-2026-18739.

Container imageDigestPackageFixed in
ghcr.io/samr037/node-debug-dashboard:0.3.0c79b2e64a211
popt@1.19+dfsg-1
no fix listed

Open the chart page →

6,854
zookeeper-helm-chartnotesprojectchart0.1.01 of 1See more

zookeeper-helm-chart notesprojectchart 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-18739.

Container imageDigestPackageFixed in
wurstmeister/zookeeper:latest7a7fd44a7210
popt@1.16-8ubuntu1
no fix listed

Open the chart page →

41,427
splashntppoolVerified publisher1.0.41 of 1See more

splash ntppool 1.0.4

1 of the 1 container images this version deploys carry CVE-2026-18739.

Container imageDigestPackageFixed in
scrapinghub/splash:3.4.1a5f89bc84606
popt@1.16-11
no fix listed

Open the chart page →

27,633
db-backupoleds-helm-chartsVerified publisher0.1.01 of 1See more

db-backup oleds-helm-charts 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-18739.

Container imageDigestPackageFixed in
oled01/db-backup:0.1.06302fd2b5333
popt@1.18-3build1
no fix listed

Open the chart page →

8,090
laravel-appoli-the-devVerified publisher2.0.171 of 1See more

laravel-app oli-the-dev 2.0.17

1 of the 1 container images this version deploys carry CVE-2026-18739.

Container imageDigestPackageFixed in
serversideup/php:8.5-fpm-nginx8f8c2f010ac5
popt@1.19+dfsg-2
no fix listed

Open the chart page →

2,660
cdn-remoteopencord0.2.41 of 3See more

cdn-remote opencord 0.2.4

1 of the 3 container images this version deploys carry CVE-2026-18739.

Container imageDigestPackageFixed in
omecproject/cdn-video-repo:1.0.0d59ccb138ffb
popt@1.16-10
no fix listed

Open the chart page →

63,223
comacopencord1.0.01 of 9See more

comac opencord 1.0.0

1 of the 9 container images this version deploys carry CVE-2026-18739.

Container imageDigestPackageFixed in
omecproject/onos-progran:1.0.05715e5648aa0
popt@1.16-10
no fix listed

Open the chart page →

88,546
mcord-cdn-remoteopencord0.1.61 of 2See more

mcord-cdn-remote opencord 0.1.6

1 of the 2 container images this version deploys carry CVE-2026-18739.

Container imageDigestPackageFixed in
omecproject/cdn-video-repo:remote-v3d59ccb138ffb
popt@1.16-10
no fix listed

Open the chart page →

42,614
mcord-cdn-remote-freeopencord0.1.31 of 1See more

mcord-cdn-remote-free opencord 0.1.3

1 of the 1 container images this version deploys carry CVE-2026-18739.

Container imageDigestPackageFixed in
omecproject/cdn-video-repo:remote-v3d59ccb138ffb
popt@1.16-10
no fix listed

Open the chart page →

29,124
onos-progranopencord1.2.71 of 2See more

onos-progran opencord 1.2.7

1 of the 2 container images this version deploys carry CVE-2026-18739.

Container imageDigestPackageFixed in
muluder/prograncontrollermcord:0.1.843b597a93da7
popt@1.16-10
no fix listed

Open the chart page →

38,865
sebaopencord1.0.01 of 17See more

seba opencord 1.0.0

1 of the 17 container images this version deploys carry CVE-2026-18739.

Container imageDigestPackageFixed in
voltha/voltha-envoy:1.6.059ab2a00f712
popt@1.16-8ubuntu1
no fix listed

Open the chart page →

93,855
fineractopenshift0.1.11 of 4See more

fineract openshift 0.1.1

1 of the 4 container images this version deploys carry CVE-2026-18739.

Container imageDigestPackageFixed in
library/mariadb:11.4611a2fcc5fa7
popt@1.19+dfsg-1build1
no fix listed

Open the chart page →

7,792
open-vpnopenvpn0.0.11 of 1See more

open-vpn openvpn 0.0.1

1 of the 1 container images this version deploys carry CVE-2026-18739.

Container imageDigestPackageFixed in
ghcr.io/linuxserver/openvpn-as:version-2.8.6-916f8e7d-ubuntu184ee0764310e7
popt@1.16-11
no fix listed

Open the chart page →

15,592
issuegenopsmxVerified publisher1.0.21 of 1See more

issuegen opsmx 1.0.2

1 of the 1 container images this version deploys carry CVE-2026-18739.

Container imageDigestPackageFixed in
opsmx11/issuegen:v2.1.05c50ca123d88
popt@1.16-8ubuntu1
no fix listed

Open the chart page →

26,339
grrosdfir-infrastructureVerified publisher1.0.31 of 5See more

grr osdfir-infrastructure 1.0.3

1 of the 5 container images this version deploys carry CVE-2026-18739.

Container imageDigestPackageFixed in
library/mariadb:11.3.2e101f9db3191
popt@1.18-3build1
no fix listed

Open the chart page →

10,896
osdfir-infrastructureosdfir-infrastructureVerified publisher2.15.01 of 40See more

osdfir-infrastructure osdfir-infrastructure 2.15.0

1 of the 40 container images this version deploys carry CVE-2026-18739.

Container imageDigestPackageFixed in
library/mariadb:11.3.2e101f9db3191
popt@1.18-3build1
no fix listed

Open the chart page →

71,208
minecraftpaul1365972-mc3.0.11 of 1See more

minecraft paul1365972-mc 3.0.1

1 of the 1 container images this version deploys carry CVE-2026-18739.

Container imageDigestPackageFixed in
itzg/minecraft-server:latest8672e335dbef
popt@1.19+dfsg-1build1
no fix listed

Open the chart page →

4,253
matomopetbattle11.0.11 of 2See more

matomo petbattle 11.0.1

1 of the 2 container images this version deploys carry CVE-2026-18739.

Container imageDigestPackageFixed in
bitnamilegacy/matomo:5.3.2-debian-12-r13f02c000c54b1
popt@1.19+dfsg-1
no fix listed

Open the chart page →

11,061

Container images carrying it

150 by charts deploying them

A fixed version is listed for 0 of the 1 affected package.

Container imageDigestPackageFixed inUsed by
library/mariadb:12.3.3:latest:ltsdd9b303aed4f
popt@1.19+dfsg-1build1
no fix listed
12
oomk8s/readiness-check:2.0.2875814cc853d
popt@1.16-10
no fix listed
11
library/mariadb:10:10.11ce66c7be32a0
popt@1.18-3build1
no fix listed
6
oomk8s/readiness-check:2.0.07daa08b81954
popt@1.16-10
no fix listed
6
hyperledger/fabric-ca-tools:latest4ce6f43ded2e
popt@1.16-10
no fix listed
4
hyperledger/fabric-couchdb:0.4.15f6c724592abf
popt@1.16-10
no fix listed
4
jacobalberty/unifi:v10.0.162896c0ab82d33
popt@1.16-14
no fix listed
3
omecproject/cdn-video-repo:1.0.0:remote-v3d59ccb138ffb
popt@1.16-10
no fix listed
3
cagriekin/pg-ha:2.0.1-pg1899e17aa165df
popt@1.19+dfsg-2
no fix listed
2
fireflyiii/core:version-6.5.9fe4ecec4c2ba
popt@1.19+dfsg-2
no fix listed
2
fireflyiii/data-importer:version-2.2.3ab52bf932546
popt@1.19+dfsg-2
no fix listed
2
homebridge/homebridge:latest77c685a40911
popt@1.19+dfsg-1build1
no fix listed
2
infisical/infisical:latest:v0.165.602082bf13163
popt@1.19+dfsg-2
no fix listed
2
library/mariadb:10.8.30abf60f81588
popt@1.18-3build1
no fix listed
2
library/mariadb:10.10334b315c10e5
popt@1.18-3build1
no fix listed
2
library/mariadb:12.0.2:12.0-noble607835cd628b
popt@1.19+dfsg-1build1
no fix listed
2
library/mariadb:11.4611a2fcc5fa7
popt@1.19+dfsg-1build1
no fix listed
2
library/mariadb:10.692e50059ea0a
popt@1.18-3build1
no fix listed
2
library/mariadb:12.3.3ab1c3dd38194
popt@1.19+dfsg-1build1
no fix listed
2
library/mariadb:11.3.2e101f9db3191
popt@1.18-3build1
no fix listed
2
library/nextcloud:34.0.3:34.0.3-apacheb97df9e0e1ee
popt@1.19+dfsg-2
no fix listed
2
louislam/uptime-kuma:2.5.4917318f9d7be
popt@1.19+dfsg-1
no fix listed
2
louislam/uptime-kuma:2.3.29aeb4e51d038
popt@1.19+dfsg-1
no fix listed
2
louislam/uptime-kuma:2.5.0a8610b3b4c38
popt@1.19+dfsg-1
no fix listed
2
wurstmeister/zookeeper:latest7a7fd44a7210
popt@1.16-8ubuntu1
no fix listed
2
ghcr.io/codingducksrl/laravel:8.15be52524664c
popt@1.18-3build1
no fix listed
2
ghcr.io/linuxserver/openvpn-as:version-2.8.6-916f8e7d-ubuntu184ee0764310e7
popt@1.16-11
no fix listed
2
akeyless/base:latest759e4289fae8
popt@1.19+dfsg-1build1
no fix listed
1
anguda/ant-media:2.5c435285fc241
popt@1.16-14
no fix listed
1
antrea/antrea-agent-ubuntu:v2.7.0c10bc45c6272
popt@1.19+dfsg-1build1
no fix listed
1
apache/airflow:2.8.4-python3.964e58748b6b9
popt@1.19+dfsg-1
no fix listed
1
apache/airflow:2.10.2-python3.9ce90bdc3d2af
popt@1.19+dfsg-1
no fix listed
1
apache/airflow:2.8.1e5560ad0b86e
popt@1.19+dfsg-1
no fix listed
1
berkeleyskypilot/skypilot:0.13.03bc8bf8f4d83
popt@1.19+dfsg-2
no fix listed
1
berkeleyskypilot/skypilot-nightly:latest8da2f3cda472
popt@1.19+dfsg-2
no fix listed
1
bitnamilegacy/mariadb-galera:11.3.2-debian-12-r9aee9c668098f
popt@1.19+dfsg-1
no fix listed
1
bitnamilegacy/mariadb-galera:11.4.3-debian-12-r0cb8beb6dbb58
popt@1.19+dfsg-1
no fix listed
1
bitnamilegacy/matomo:5.3.2-debian-12-r13f02c000c54b1
popt@1.19+dfsg-1
no fix listed
1
boky/postfix:5.1.0aafc77238423
popt@1.19+dfsg-2
no fix listed
1
boky/postfix:4.4.0f3f247fd4252
popt@1.19+dfsg-1
no fix listed
1
checkmk/check-mk-community:2.5.0p6c11b422210c4
popt@1.18-3build1
no fix listed
1
chetangautamm/repo:Opensips_Buildb4b94155ff5a
popt@1.16-8ubuntu1
no fix listed
1
cheyang/distributed-tf:1.6.046cc34755493
popt@1.16-10
no fix listed
1
codedesignplus/ms-emails-grpc:lateste336012bc781
popt@1.19+dfsg-1
no fix listed
1
codedesignplus/ms-emails-rest:latestac84661c605e
popt@1.19+dfsg-1
no fix listed
1
countly/countly-server:25.05.4e3c238248f99
popt@1.16-14
no fix listed
1
cybrarist/discount-bandit:v4.0.4e9e2447ac666
popt@1.19+dfsg-2
no fix listed
1
dasmeta/mongodb-bi-connector:1.0.3fa657960dfec
popt@1.16-11
no fix listed
1
datamate/seafile-professional:11.0.202dd66b722464
popt@1.18-3build1
no fix listed
1
dblaci/ubuntu-ssh-rsync:20231020eea697611af4
popt@1.18-3build1
no fix listed
1

syft 1.42.1 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.