StackRadar

CVE-2026-18743

Low

Advisory

Published 1 Sept 2026In the index since 5 Sept 2026
Severity
Low
worst across findings
CVSS
2.5
base score, highest
EPSS
0.001
4th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
196
of 17,781 indexed, latest versions
Container images
150
deployed by those charts
Fix available
None
affected package

The matching OSV records carry no description.

Carried by container images the latest versions of 196 of 17,781 indexed charts deploy, on 150 images.

Affected packageAffected versionsFixed inImages
poptdeb1.16-8ubuntu1, 1.16-10, 1.16-11, 1.16-14+5 moreno fix listed150
OSV records
DEBIAN-CVE-2026-18743UBUNTU-CVE-2026-18743

Charts affected

196 by stars
ChartLatestAffected imagesRadar Score
skypilotgeek-cookbookVerified publisher0.0.11 of 3See more

skypilot geek-cookbook 0.0.1

1 of the 3 container images this version deploys carry CVE-2026-18743.

Container imageDigestPackageFixed in
berkeleyskypilot/skypilot-nightly:latest8da2f3cda472
popt@1.19+dfsg-2
no fix listed

Open the chart page →

8,923
transmissiongeek-cookbookVerified publisher8.4.31 of 1See more

transmission geek-cookbook 8.4.3

1 of the 1 container images this version deploys carry CVE-2026-18743.

Container imageDigestPackageFixed in
ghcr.io/k8s-at-home/transmission:v3.006011182e3946
popt@1.16-14
no fix listed

Open the chart page →

11,861
genieacsgenieacsVerified publisher0.5.11 of 2See more

genieacs genieacs 0.5.1

1 of the 2 container images this version deploys carry CVE-2026-18743.

Container imageDigestPackageFixed in
drumsergio/genieacs:1.2.16.028244054e1bf
popt@1.19+dfsg-1
no fix listed

Open the chart page →

4,259
glpiglpi-chart0.1.11 of 3See more

glpi glpi-chart 0.1.1

1 of the 3 container images this version deploys carry CVE-2026-18743.

Container imageDigestPackageFixed in
library/mariadb:latestdd9b303aed4f
popt@1.19+dfsg-1build1
no fix listed

Open the chart page →

12,170
video-analytics-demogpu-operator0.1.91 of 3See more

video-analytics-demo gpu-operator 0.1.9

1 of the 3 container images this version deploys carry CVE-2026-18743.

Container imageDigestPackageFixed in
anguda/ant-media:2.5c435285fc241
popt@1.16-14
no fix listed

Open the chart page →

15,722
appwritehelmforgeVerified publisher1.3.41 of 5See more

appwrite helmforge 1.3.4

1 of the 5 container images this version deploys carry CVE-2026-18743.

Container imageDigestPackageFixed in
library/mariadb:12.3.3dd9b303aed4f
popt@1.19+dfsg-1build1
no fix listed

Open the chart page →

6,952
booklorehelmforgeVerified publisher2.0.11 of 3See more

booklore helmforge 2.0.1

1 of the 3 container images this version deploys carry CVE-2026-18743.

Container imageDigestPackageFixed in
library/mariadb:12.3.3dd9b303aed4f
popt@1.19+dfsg-1build1
no fix listed

Open the chart page →

2,280
castopodhelmforgeVerified publisher1.2.71 of 3See more

castopod helmforge 1.2.7

1 of the 3 container images this version deploys carry CVE-2026-18743.

Container imageDigestPackageFixed in
library/mariadb:12.3.3dd9b303aed4f
popt@1.19+dfsg-1build1
no fix listed

Open the chart page →

9,342
countlyhelmforgeVerified publisher1.2.61 of 3See more

countly helmforge 1.2.6

1 of the 3 container images this version deploys carry CVE-2026-18743.

Container imageDigestPackageFixed in
countly/countly-server:25.05.4e3c238248f99
popt@1.16-14
no fix listed

Open the chart page →

18,813
discount-bandithelmforgeVerified publisher2.0.81 of 3See more

discount-bandit helmforge 2.0.8

1 of the 3 container images this version deploys carry CVE-2026-18743.

Container imageDigestPackageFixed in
cybrarist/discount-bandit:v4.0.4e9e2447ac666
popt@1.19+dfsg-2
no fix listed

Open the chart page →

29,817
medikeephelmforgeVerified publisher2.0.01 of 3See more

medikeep helmforge 2.0.0

1 of the 3 container images this version deploys carry CVE-2026-18743.

Container imageDigestPackageFixed in
ghcr.io/afairgiant/medikeep:v0.69.0766699daa9ac
popt@1.19+dfsg-1
no fix listed

Open the chart page →

6,022
minecrafthelmforgeVerified publisher1.5.31 of 1See more

minecraft helmforge 1.5.3

1 of the 1 container images this version deploys carry CVE-2026-18743.

Container imageDigestPackageFixed in
itzg/minecraft-server:2026.9.04e29d14082d9
popt@1.19+dfsg-1build1
no fix listed

Open the chart page →

4,639
pimcorehelmforgeVerified publisher2.0.11 of 6See more

pimcore helmforge 2.0.1

1 of the 6 container images this version deploys carry CVE-2026-18743.

Container imageDigestPackageFixed in
library/mariadb:12.3.3dd9b303aed4f
popt@1.19+dfsg-1build1
no fix listed

Open the chart page →

3,156
uptime-kumahelmforgeVerified publisher1.5.121 of 1See more

uptime-kuma helmforge 1.5.12

1 of the 1 container images this version deploys carry CVE-2026-18743.

Container imageDigestPackageFixed in
louislam/uptime-kuma:2.5.33e24e96c89ef
popt@1.19+dfsg-1
no fix listed

Open the chart page →

30,099
mariadbhuangchengwu-helm-chart0.1.01 of 1See more

mariadb huangchengwu-helm-chart 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-18743.

Container imageDigestPackageFixed in
library/mariadb:latestdd9b303aed4f
popt@1.19+dfsg-1build1
no fix listed

Open the chart page →

1,875
ibexaibexaVerified publisher3.11.11 of 10See more

ibexa ibexa 3.11.1

1 of the 10 container images this version deploys carry CVE-2026-18743.

Container imageDigestPackageFixed in
boky/postfix:4.4.0f3f247fd4252
popt@1.19+dfsg-1
no fix listed

Open the chart page →

5,959
ibm-swift-sampleibm-charts1.1.21 of 1See more

ibm-swift-sample ibm-charts 1.1.2

1 of the 1 container images this version deploys carry CVE-2026-18743.

Container imageDigestPackageFixed in
ibmcom/icp-swift-sample:latestb5d8c6714dbc
popt@1.16-10
no fix listed

Open the chart page →

25,160
infisicalinfisical-charts0.4.21 of 3See more

infisical infisical-charts 0.4.2

1 of the 3 container images this version deploys carry CVE-2026-18743.

Container imageDigestPackageFixed in
infisical/infisical:latest02082bf13163
popt@1.19+dfsg-2
no fix listed

Open the chart page →

3,014
homebridgejespernohrVerified publisher0.2.01 of 1See more

homebridge jespernohr 0.2.0

1 of the 1 container images this version deploys carry CVE-2026-18743.

Container imageDigestPackageFixed in
homebridge/homebridge:latest77c685a40911
popt@1.19+dfsg-1build1
no fix listed

Open the chart page →

2,149
unifik8sonlabVerified publisher0.3.71 of 1See more

unifi k8sonlab 0.3.7

1 of the 1 container images this version deploys carry CVE-2026-18743.

Container imageDigestPackageFixed in
jacobalberty/unifi:v10.0.162896c0ab82d33
popt@1.16-14
no fix listed

Open the chart page →

7,268
music-assistantkarljorgensen0.1.31 of 1See more

music-assistant karljorgensen 0.1.3

1 of the 1 container images this version deploys carry CVE-2026-18743.

Container imageDigestPackageFixed in
ghcr.io/music-assistant/server:2.8.7eef3ee7810d0
popt@1.19+dfsg-1
no fix listed

Open the chart page →

7,081
huekatool1.0.81 of 1See more

hue katool 1.0.8

1 of the 1 container images this version deploys carry CVE-2026-18743.

Container imageDigestPackageFixed in
gethue/hue:4.11.011b649636e68
popt@1.16-14
no fix listed

Open the chart page →

16,417
kube-ovnkube-ovn-test1.14.01 of 1See more

kube-ovn kube-ovn-test 1.14.0

1 of the 1 container images this version deploys carry CVE-2026-18743.

Container imageDigestPackageFixed in
kubeovn/kube-ovn:v1.14.06722b54eb5c0
popt@1.19+dfsg-1build1
no fix listed

Open the chart page →

4,940
firefly-iiikubernetes-homelab-helm-chartsVerified publisher0.1.31 of 3See more

firefly-iii kubernetes-homelab-helm-charts 0.1.3

1 of the 3 container images this version deploys carry CVE-2026-18743.

Container imageDigestPackageFixed in
fireflyiii/core:version-6.6.6ae69fdd95cde
popt@1.19+dfsg-2
no fix listed

Open the chart page →

4,382
homebridgelbenicio-communityVerified publisher0.1.151 of 1See more

homebridge lbenicio-community 0.1.15

1 of the 1 container images this version deploys carry CVE-2026-18743.

Container imageDigestPackageFixed in
homebridge/homebridge:latest77c685a40911
popt@1.19+dfsg-1build1
no fix listed

Open the chart page →

2,149
uptime-kumalbenicio-communityVerified publisher0.1.11 of 1See more

uptime-kuma lbenicio-community 0.1.1

1 of the 1 container images this version deploys carry CVE-2026-18743.

Container imageDigestPackageFixed in
louislam/uptime-kuma:2.3.29aeb4e51d038
popt@1.19+dfsg-1
no fix listed

Open the chart page →

33,242
linkdinglinkding0.2.31 of 1See more

linkding linkding 0.2.3

1 of the 1 container images this version deploys carry CVE-2026-18743.

Container imageDigestPackageFixed in
sissbruecker/linkding:1.41.0-plusa222fb777e1f
popt@1.19+dfsg-1
no fix listed

Open the chart page →

37,942
uptime-kumaloeken-at-homeVerified publisher2.3.21 of 1See more

uptime-kuma loeken-at-home 2.3.2

1 of the 1 container images this version deploys carry CVE-2026-18743.

Container imageDigestPackageFixed in
louislam/uptime-kuma:2.3.29aeb4e51d038
popt@1.19+dfsg-1
no fix listed

Open the chart page →

33,242
apica-ascentlogiqai2.0.41 of 19See more

apica-ascent logiqai 2.0.4

1 of the 19 container images this version deploys carry CVE-2026-18743.

Container imageDigestPackageFixed in
logiqai/flash:v3.10.265b996bc7bdc
popt@1.19+dfsg-1
no fix listed

Open the chart page →

23,613
unifimidokura-communityVerified publisher0.0.61 of 1See more

unifi midokura-community 0.0.6

1 of the 1 container images this version deploys carry CVE-2026-18743.

Container imageDigestPackageFixed in
linuxserver/unifi-controller:7.3.83ab105cc50322
popt@1.16-14
no fix listed

Open the chart page →

11,188
mariadbmmontesVerified publisher0.3.01 of 1See more

mariadb mmontes 0.3.0

1 of the 1 container images this version deploys carry CVE-2026-18743.

Container imageDigestPackageFixed in
library/mariadb:10.7.307e06f2e7ae9
popt@1.16-14
no fix listed

Open the chart page →

10,065
uptime-kumancsaVerified publisher1.7.21 of 1See more

uptime-kuma ncsa 1.7.2

1 of the 1 container images this version deploys carry CVE-2026-18743.

Container imageDigestPackageFixed in
louislam/uptime-kuma:2.5.4917318f9d7be
popt@1.19+dfsg-1
no fix listed

Open the chart page →

30,028
node-debug-dashboardnode-debug-dashboardVerified publisher0.3.21 of 1See more

node-debug-dashboard node-debug-dashboard 0.3.2

1 of the 1 container images this version deploys carry CVE-2026-18743.

Container imageDigestPackageFixed in
ghcr.io/samr037/node-debug-dashboard:0.3.0c79b2e64a211
popt@1.19+dfsg-1
no fix listed

Open the chart page →

6,854
zookeeper-helm-chartnotesprojectchart0.1.01 of 1See more

zookeeper-helm-chart notesprojectchart 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-18743.

Container imageDigestPackageFixed in
wurstmeister/zookeeper:latest7a7fd44a7210
popt@1.16-8ubuntu1
no fix listed

Open the chart page →

41,427
splashntppoolVerified publisher1.0.41 of 1See more

splash ntppool 1.0.4

1 of the 1 container images this version deploys carry CVE-2026-18743.

Container imageDigestPackageFixed in
scrapinghub/splash:3.4.1a5f89bc84606
popt@1.16-11
no fix listed

Open the chart page →

27,633
db-backupoleds-helm-chartsVerified publisher0.1.01 of 1See more

db-backup oleds-helm-charts 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-18743.

Container imageDigestPackageFixed in
oled01/db-backup:0.1.06302fd2b5333
popt@1.18-3build1
no fix listed

Open the chart page →

8,090
laravel-appoli-the-devVerified publisher2.0.171 of 1See more

laravel-app oli-the-dev 2.0.17

1 of the 1 container images this version deploys carry CVE-2026-18743.

Container imageDigestPackageFixed in
serversideup/php:8.5-fpm-nginx8f8c2f010ac5
popt@1.19+dfsg-2
no fix listed

Open the chart page →

2,660
cdn-remoteopencord0.2.41 of 3See more

cdn-remote opencord 0.2.4

1 of the 3 container images this version deploys carry CVE-2026-18743.

Container imageDigestPackageFixed in
omecproject/cdn-video-repo:1.0.0d59ccb138ffb
popt@1.16-10
no fix listed

Open the chart page →

63,223
comacopencord1.0.01 of 9See more

comac opencord 1.0.0

1 of the 9 container images this version deploys carry CVE-2026-18743.

Container imageDigestPackageFixed in
omecproject/onos-progran:1.0.05715e5648aa0
popt@1.16-10
no fix listed

Open the chart page →

88,546
mcord-cdn-remoteopencord0.1.61 of 2See more

mcord-cdn-remote opencord 0.1.6

1 of the 2 container images this version deploys carry CVE-2026-18743.

Container imageDigestPackageFixed in
omecproject/cdn-video-repo:remote-v3d59ccb138ffb
popt@1.16-10
no fix listed

Open the chart page →

42,614
mcord-cdn-remote-freeopencord0.1.31 of 1See more

mcord-cdn-remote-free opencord 0.1.3

1 of the 1 container images this version deploys carry CVE-2026-18743.

Container imageDigestPackageFixed in
omecproject/cdn-video-repo:remote-v3d59ccb138ffb
popt@1.16-10
no fix listed

Open the chart page →

29,124
onos-progranopencord1.2.71 of 2See more

onos-progran opencord 1.2.7

1 of the 2 container images this version deploys carry CVE-2026-18743.

Container imageDigestPackageFixed in
muluder/prograncontrollermcord:0.1.843b597a93da7
popt@1.16-10
no fix listed

Open the chart page →

38,865
sebaopencord1.0.01 of 17See more

seba opencord 1.0.0

1 of the 17 container images this version deploys carry CVE-2026-18743.

Container imageDigestPackageFixed in
voltha/voltha-envoy:1.6.059ab2a00f712
popt@1.16-8ubuntu1
no fix listed

Open the chart page →

93,855
fineractopenshift0.1.11 of 4See more

fineract openshift 0.1.1

1 of the 4 container images this version deploys carry CVE-2026-18743.

Container imageDigestPackageFixed in
library/mariadb:11.4611a2fcc5fa7
popt@1.19+dfsg-1build1
no fix listed

Open the chart page →

7,792
open-vpnopenvpn0.0.11 of 1See more

open-vpn openvpn 0.0.1

1 of the 1 container images this version deploys carry CVE-2026-18743.

Container imageDigestPackageFixed in
ghcr.io/linuxserver/openvpn-as:version-2.8.6-916f8e7d-ubuntu184ee0764310e7
popt@1.16-11
no fix listed

Open the chart page →

15,592
issuegenopsmxVerified publisher1.0.21 of 1See more

issuegen opsmx 1.0.2

1 of the 1 container images this version deploys carry CVE-2026-18743.

Container imageDigestPackageFixed in
opsmx11/issuegen:v2.1.05c50ca123d88
popt@1.16-8ubuntu1
no fix listed

Open the chart page →

26,339
grrosdfir-infrastructureVerified publisher1.0.31 of 5See more

grr osdfir-infrastructure 1.0.3

1 of the 5 container images this version deploys carry CVE-2026-18743.

Container imageDigestPackageFixed in
library/mariadb:11.3.2e101f9db3191
popt@1.18-3build1
no fix listed

Open the chart page →

10,896
osdfir-infrastructureosdfir-infrastructureVerified publisher2.15.01 of 40See more

osdfir-infrastructure osdfir-infrastructure 2.15.0

1 of the 40 container images this version deploys carry CVE-2026-18743.

Container imageDigestPackageFixed in
library/mariadb:11.3.2e101f9db3191
popt@1.18-3build1
no fix listed

Open the chart page →

71,208
minecraftpaul1365972-mc3.0.11 of 1See more

minecraft paul1365972-mc 3.0.1

1 of the 1 container images this version deploys carry CVE-2026-18743.

Container imageDigestPackageFixed in
itzg/minecraft-server:latest8672e335dbef
popt@1.19+dfsg-1build1
no fix listed

Open the chart page →

4,253
matomopetbattle11.0.11 of 2See more

matomo petbattle 11.0.1

1 of the 2 container images this version deploys carry CVE-2026-18743.

Container imageDigestPackageFixed in
bitnamilegacy/matomo:5.3.2-debian-12-r13f02c000c54b1
popt@1.19+dfsg-1
no fix listed

Open the chart page →

11,061

Container images carrying it

150 by charts deploying them

A fixed version is listed for 0 of the 1 affected package.

Container imageDigestPackageFixed inUsed by
oled01/db-backup:0.1.06302fd2b5333
popt@1.18-3build1
no fix listed
1
omecproject/onos-progran:1.0.05715e5648aa0
popt@1.16-10
no fix listed
1
opsmx11/issuegen:v2.1.05c50ca123d88
popt@1.16-8ubuntu1
no fix listed
1
owncloud/server:10.15.051d9b74fc2a8
popt@1.16-14
no fix listed
1
owncloud/server:10.16.274c53d341076
popt@1.18-3build1
no fix listed
1
owncloud/server:10.16.3b3f9efdcd7f7
popt@1.18-3build1
no fix listed
1
photoprism/photoprism:260601650c6ad5a651
popt@1.19+dfsg-2build1
no fix listed
1
photoprism/photoprism:260728958642220223
popt@1.19+dfsg-2build1
no fix listed
1
photoprism/photoprism:240711-cefc6fd632ca74
popt@1.19+dfsg-1build1
no fix listed
1
resouer/redis-slave:v2e2f198b49ba7
popt@1.16-8ubuntu1
no fix listed
1
roundcube/roundcubemail:1.6.16-apache-nonroot17d9d9580962
popt@1.19+dfsg-2
no fix listed
1
scrapinghub/splash:3.4.1a5f89bc84606
popt@1.16-11
no fix listed
1
seafileltd/seafile-mc:9.0.106693911bcc40
popt@1.16-14
no fix listed
1
seafileltd/seafile-mc:10.0.170628f29c663
popt@1.16-14
no fix listed
1
seafileltd/seafile-mc:9.0.97ac833196f60
popt@1.16-14
no fix listed
1
seafileltd/seafile-mc:11.0.12d0c66e4621bd
popt@1.18-3build1
no fix listed
1
seafileltd/seafile-mc:8.0.7ed0fcda5e6a9
popt@1.16-14
no fix listed
1
seldonio/locust-core:0.81d0da98a2d76
popt@1.16-10
no fix listed
1
serversideup/php:8.5-fpm-nginx8f8c2f010ac5
popt@1.19+dfsg-2
no fix listed
1
sissbruecker/linkding:1.41.0-plusa222fb777e1f
popt@1.19+dfsg-1
no fix listed
1
someblackmagic/k8s-testing-multitool:v0.1.06eca64b6b440
popt@1.16-14
no fix listed
1
stackstorm/st2actionrunner:3.888235ba70cad
popt@1.16-14
no fix listed
1
svtechnmaa/svtech_nagvis:v1.2.118394b08e6c3
popt@1.19+dfsg-1
no fix listed
1
svtechnmaa/svtech_rundeck:v1.2.26e368ace0977
popt@1.16-14
no fix listed
1
tensorflow/tensorflow:1.6.0-devel1e3172090703
popt@1.16-10
no fix listed
1
trueosiris/vrising:latest9356f98ad561
popt@1.18-3build1
no fix listed
1
twentycrm/twenty-postgres-spilo:latest2f78405a78be
popt@1.18-3build1
no fix listed
1
ubuntu/squid:5.2-22.04_beta723891b5bc74
popt@1.18-3build1
no fix listed
1
voltha/voltha-envoy:1.6.059ab2a00f712
popt@1.16-8ubuntu1
no fix listed
1
ghcr.io/afairgiant/medikeep:v0.69.0766699daa9ac
popt@1.19+dfsg-1
no fix listed
1
ghcr.io/alexmorbo/dell_idrac_fan_controller:v0.1.6-1d110504d551d
popt@1.19+dfsg-1build1
no fix listed
1
ghcr.io/cfi2017/opencve-scheduler:3.0.08d943799621b
popt@1.19+dfsg-1
no fix listed
1
ghcr.io/dfir-iris/iriswebapp_app:v2.4.26e59ebde55709
popt@1.19+dfsg-2
no fix listed
1
ghcr.io/itzg/minecraft-server:latestc1a267d9ed6d
popt@1.19+dfsg-1build1
no fix listed
1
ghcr.io/k8s-at-home/transmission:v3.006011182e3946
popt@1.16-14
no fix listed
1
ghcr.io/kvaps/kubefarm-ltsp:v0.13.424efef013a53
popt@1.16-14
no fix listed
1
ghcr.io/kvaps/opennebula:v5.12.0.4-1e28e0e7de11b
popt@1.16-14
no fix listed
1
ghcr.io/kvaps/opennebula-flow:v5.12.0.4-1600221f0f43f
popt@1.16-14
no fix listed
1
ghcr.io/lloesche/valheim-server:latest20fde516ce31
popt@1.19+dfsg-2
no fix listed
1
ghcr.io/music-assistant/server:2.7.53522e8a7a8f0
popt@1.19+dfsg-1
no fix listed
1
ghcr.io/music-assistant/server:2.9.950666a6f8d7f
popt@1.19+dfsg-1
no fix listed
1
ghcr.io/music-assistant/server:2.10.3885872224fa5
popt@1.19+dfsg-2
no fix listed
1
ghcr.io/music-assistant/server:2.8.7eef3ee7810d0
popt@1.19+dfsg-1
no fix listed
1
ghcr.io/oznu/homebridge:2022-07-08ff2af53897e7
popt@1.16-14
no fix listed
1
ghcr.io/radar-base/radar-schemas/radar-schemas-tools:0.8.16c442e8bfe6b4
popt@1.19+dfsg-1build1
no fix listed
1
ghcr.io/samr037/node-debug-dashboard:0.3.0c79b2e64a211
popt@1.19+dfsg-1
no fix listed
1
ghcr.io/sergelogvinov/postgresql:16.15fafb72e98f22
popt@1.19+dfsg-1
no fix listed
1
ghcr.io/zammad/zammad:7.1.3-0011e65123a43ecc
popt@1.19+dfsg-2
no fix listed
1
public.ecr.aws/supportpal/helpdesk-monolithic:4.0.4573779e57fae
popt@1.16-14
no fix listed
1
quay.io/opsmxpublic/spin-sample-pipeline:v1.0.1c6a934439421
popt@1.16-10
no fix listed
1

syft 1.42.1 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.