StackRadar

CVE-2026-18839

Low

Advisory

Published 5 Aug 2026In the index since 5 Sept 2026
Severity
Low
worst across findings
CVSS
2.2
base score, highest
EPSS
0.001
0th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
197
of 17,787 indexed, latest versions
Container images
151
deployed by those charts
Fix available
None
affected package

The matching OSV records carry no description.

Carried by container images the latest versions of 197 of 17,787 indexed charts deploy, on 151 images.

Affected packageAffected versionsFixed inImages
poptdeb1.16-8ubuntu1, 1.16-10, 1.16-11, 1.16-14+5 moreno fix listed151
OSV records
DEBIAN-CVE-2026-18839UBUNTU-CVE-2026-18839

Charts affected

197 by stars
ChartLatestAffected imagesRadar Score
nextcloudnextcloud9.2.61 of 1See more

nextcloud nextcloud 9.2.6

1 of the 1 container images this version deploys carry CVE-2026-18839.

Container imageDigestPackageFixed in
library/nextcloud:34.0.3-apacheb97df9e0e1ee
popt@1.19+dfsg-2
no fix listed

Open the chart page →

4,538
uptime-kumauptime-kumaVerified publisher4.2.01 of 1See more

uptime-kuma uptime-kuma 4.2.0

1 of the 1 container images this version deploys carry CVE-2026-18839.

Container imageDigestPackageFixed in
louislam/uptime-kuma:2.5.0a8610b3b4c38
popt@1.19+dfsg-1
no fix listed

Open the chart page →

30,167
airflowairflow-helmVerified publisher8.9.01 of 4See more

airflow airflow-helm 8.9.0

1 of the 4 container images this version deploys carry CVE-2026-18839.

Container imageDigestPackageFixed in
apache/airflow:2.8.4-python3.964e58748b6b9
popt@1.19+dfsg-1
no fix listed

Open the chart page →

11,372
maildocker-postfixVerified publisher5.1.01 of 1See more

mail docker-postfix 5.1.0

1 of the 1 container images this version deploys carry CVE-2026-18839.

Container imageDigestPackageFixed in
boky/postfix:5.1.0aafc77238423
popt@1.19+dfsg-2
no fix listed

Open the chart page →

5,378
zammadzammadOfficialVerified publisher18.2.01 of 5See more

zammad zammad 18.2.0

1 of the 5 container images this version deploys carry CVE-2026-18839.

Container imageDigestPackageFixed in
ghcr.io/zammad/zammad:7.1.3-0011e65123a43ecc
popt@1.19+dfsg-2
no fix listed

Open the chart page →

6,849
mariadbcloudpirates-mariadbVerified publisher0.16.141 of 1See more

mariadb cloudpirates-mariadb 0.16.14

1 of the 1 container images this version deploys carry CVE-2026-18839.

Container imageDigestPackageFixed in
library/mariadb:12.3.3ab1c3dd38194
popt@1.19+dfsg-1build1
no fix listed

Open the chart page →

1,661
openvpn-asstenicVerified publisher0.1.91 of 1See more

openvpn-as stenic 0.1.9

1 of the 1 container images this version deploys carry CVE-2026-18839.

Container imageDigestPackageFixed in
ghcr.io/linuxserver/openvpn-as:version-2.8.6-916f8e7d-ubuntu184ee0764310e7
popt@1.16-11
no fix listed

Open the chart page →

15,607
stackstorm-hastackstormVerified publisher1.1.01 of 17See more

stackstorm-ha stackstorm 1.1.0

1 of the 17 container images this version deploys carry CVE-2026-18839.

Container imageDigestPackageFixed in
stackstorm/st2actionrunner:3.888235ba70cad
popt@1.16-14
no fix listed

Open the chart page →

96,984
transmission-openvpnutkuozdemirVerified publisher2.5.01 of 1See more

transmission-openvpn utkuozdemir 2.5.0

1 of the 1 container images this version deploys carry CVE-2026-18839.

Container imageDigestPackageFixed in
haugene/transmission-openvpn:4.0059216cfae4b
popt@1.16-14
no fix listed

Open the chart page →

11,453
nextcloudgroundhog2k0.22.51 of 3See more

nextcloud groundhog2k 0.22.5

1 of the 3 container images this version deploys carry CVE-2026-18839.

Container imageDigestPackageFixed in
library/nextcloud:34.0.3:34.0.3-apacheb97df9e0e1ee
popt@1.19+dfsg-2
no fix listed

Open the chart page →

4,538
unifiunifiVerified publisher1.16.01 of 1See more

unifi unifi 1.16.0

1 of the 1 container images this version deploys carry CVE-2026-18839.

Container imageDigestPackageFixed in
jacobalberty/unifi:v10.0.162896c0ab82d33
popt@1.16-14
no fix listed

Open the chart page →

7,333
passboltpassbolt2.1.11 of 6See more

passbolt passbolt 2.1.1

1 of the 6 container images this version deploys carry CVE-2026-18839.

Container imageDigestPackageFixed in
library/mariadb:latestdd9b303aed4f
popt@1.19+dfsg-1build1
no fix listed

Open the chart page →

13,455
photoprismandrenarchyVerified publisher8.15.01 of 1See more

photoprism andrenarchy 8.15.0

1 of the 1 container images this version deploys carry CVE-2026-18839.

Container imageDigestPackageFixed in
photoprism/photoprism:260728958642220223
popt@1.19+dfsg-2build1
no fix listed

Open the chart page →

8,907
seafiledatamateVerified publisher0.6.02 of 6See more

seafile datamate 0.6.0

2 of the 6 container images this version deploys carry CVE-2026-18839.

Container imageDigestPackageFixed in
bitnamilegacy/mariadb-galera:11.4.3-debian-12-r0cb8beb6dbb58
popt@1.19+dfsg-1
no fix listed
datamate/seafile-professional:11.0.202dd66b722464
popt@1.18-3build1
no fix listed

Open the chart page →

27,358
glpiglpi-conteiner0.1.01 of 3See more

glpi glpi-conteiner 0.1.0

1 of the 3 container images this version deploys carry CVE-2026-18839.

Container imageDigestPackageFixed in
library/mariadb:latestdd9b303aed4f
popt@1.19+dfsg-1build1
no fix listed

Open the chart page →

12,270
unifi-controllerqonstruktVerified publisher2.6.11 of 1See more

unifi-controller qonstrukt 2.6.1

1 of the 1 container images this version deploys carry CVE-2026-18839.

Container imageDigestPackageFixed in
linuxserver/unifi-controller:8.0.240ae315a3a456
popt@1.16-14
no fix listed

Open the chart page →

10,536
ghostcloudpirates-ghostVerified publisher0.20.222 of 3See more

ghost cloudpirates-ghost 0.20.22

2 of the 3 container images this version deploys carry CVE-2026-18839.

Container imageDigestPackageFixed in
library/mariadb:12.0.25b6a1eac15b8
popt@1.19+dfsg-1build1
no fix listed
library/mariadb:12.3.3ab1c3dd38194
popt@1.19+dfsg-1build1
no fix listed

Open the chart page →

7,182
unifigeek-cookbookVerified publisher5.1.31 of 1See more

unifi geek-cookbook 5.1.3

1 of the 1 container images this version deploys carry CVE-2026-18839.

Container imageDigestPackageFixed in
jacobalberty/unifi:v7.4.162b3edc809a3ff
popt@1.16-11
no fix listed

Open the chart page →

11,873
mariadbmariadbVerified publisher0.4.01 of 1See more

mariadb mariadb 0.4.0

1 of the 1 container images this version deploys carry CVE-2026-18839.

Container imageDigestPackageFixed in
library/mariadb:10.11ce66c7be32a0
popt@1.18-3build1
no fix listed

Open the chart page →

2,455
oesopsmxVerified publisher4.0.321 of 25See more

oes opsmx 4.0.32

1 of the 25 container images this version deploys carry CVE-2026-18839.

Container imageDigestPackageFixed in
quay.io/opsmxpublic/spin-sample-pipeline:v1.0.1c6a934439421
popt@1.16-10
no fix listed

Open the chart page →

107,899
skypilotskypilotOfficialVerified publisher0.13.01 of 3See more

skypilot skypilot 0.13.0

1 of the 3 container images this version deploys carry CVE-2026-18839.

Container imageDigestPackageFixed in
berkeleyskypilot/skypilot:0.13.03bc8bf8f4d83
popt@1.19+dfsg-2
no fix listed

Open the chart page →

5,889
akeyless-api-gatewayakeyless-services-helmVerified publisher1.62.221 of 1See more

akeyless-api-gateway akeyless-services-helm 1.62.22

1 of the 1 container images this version deploys carry CVE-2026-18839.

Container imageDigestPackageFixed in
akeyless/base:latest759e4289fae8
popt@1.19+dfsg-1build1
no fix listed

Open the chart page →

2,406
mariadbalphani-helm-chartsVerified publisher10.10.31 of 1See more

mariadb alphani-helm-charts 10.10.3

1 of the 1 container images this version deploys carry CVE-2026-18839.

Container imageDigestPackageFixed in
library/mariadb:10.10.2bfc25a68e113
popt@1.18-3build1
no fix listed

Open the chart page →

8,384
antreaantreaVerified publisher2.7.01 of 2See more

antrea antrea 2.7.0

1 of the 2 container images this version deploys carry CVE-2026-18839.

Container imageDigestPackageFixed in
antrea/antrea-agent-ubuntu:v2.7.0c10bc45c6272
popt@1.19+dfsg-1build1
no fix listed

Open the chart page →

3,514
dltbrokerassist-iot-distributed-broker0.2.02 of 9See more

dltbroker assist-iot-distributed-broker 0.2.0

2 of the 9 container images this version deploys carry CVE-2026-18839.

Container imageDigestPackageFixed in
hyperledger/fabric-ca-tools:latest4ce6f43ded2e
popt@1.16-10
no fix listed
hyperledger/fabric-couchdb:0.4.15f6c724592abf
popt@1.16-10
no fix listed

Open the chart page →

77,821
dltloggingassist-iot-logging-auditing0.2.02 of 9See more

dltlogging assist-iot-logging-auditing 0.2.0

2 of the 9 container images this version deploys carry CVE-2026-18839.

Container imageDigestPackageFixed in
hyperledger/fabric-ca-tools:latest4ce6f43ded2e
popt@1.16-10
no fix listed
hyperledger/fabric-couchdb:0.4.15f6c724592abf
popt@1.16-10
no fix listed

Open the chart page →

77,802
music-assistantbdclark-helm-chartsVerified publisher0.4.131 of 1See more

music-assistant bdclark-helm-charts 0.4.13

1 of the 1 container images this version deploys carry CVE-2026-18839.

Container imageDigestPackageFixed in
ghcr.io/music-assistant/server:2.10.3885872224fa5
popt@1.19+dfsg-2
no fix listed

Open the chart page →

3,617
pgcagriekinVerified publisher2.1.01 of 2See more

pg cagriekin 2.1.0

1 of the 2 container images this version deploys carry CVE-2026-18839.

Container imageDigestPackageFixed in
cagriekin/pg-ha:2.0.1-pg1899e17aa165df
popt@1.19+dfsg-2
no fix listed

Open the chart page →

2,292
pgvectorcagriekinVerified publisher2.1.01 of 3See more

pgvector cagriekin 2.1.0

1 of the 3 container images this version deploys carry CVE-2026-18839.

Container imageDigestPackageFixed in
cagriekin/pg-ha:2.0.1-pg1899e17aa165df
popt@1.19+dfsg-2
no fix listed

Open the chart page →

4,028
tensorflow-notebookcloudnativeapp0.1.21 of 1See more

tensorflow-notebook cloudnativeapp 0.1.2

1 of the 1 container images this version deploys carry CVE-2026-18839.

Container imageDigestPackageFixed in
tensorflow/tensorflow:1.6.0-devel1e3172090703
popt@1.16-10
no fix listed

Open the chart page →

36,132
dbrepodbrepo1.13.31 of 25See more

dbrepo dbrepo 1.13.3

1 of the 25 container images this version deploys carry CVE-2026-18839.

Container imageDigestPackageFixed in
bitnamilegacy/mariadb-galera:11.3.2-debian-12-r9aee9c668098f
popt@1.19+dfsg-1
no fix listed

Open the chart page →

50,281
seafiledr300481Verified publisher0.12.11 of 1See more

seafile dr300481 0.12.1

1 of the 1 container images this version deploys carry CVE-2026-18839.

Container imageDigestPackageFixed in
seafileltd/seafile-mc:11.0.12d0c66e4621bd
popt@1.18-3build1
no fix listed

Open the chart page →

10,884
glpieftechcombr-glpiVerified publisher2.12.01 of 5See more

glpi eftechcombr-glpi 2.12.0

1 of the 5 container images this version deploys carry CVE-2026-18839.

Container imageDigestPackageFixed in
library/mariadb:12.3.2a02fe89cb597
popt@1.19+dfsg-1build1
no fix listed

Open the chart page →

4,398
roundcubeencircle360-ossVerified publisher0.8.31 of 1See more

roundcube encircle360-oss 0.8.3

1 of the 1 container images this version deploys carry CVE-2026-18839.

Container imageDigestPackageFixed in
roundcube/roundcubemail:1.6.16-apache-nonroot17d9d9580962
popt@1.19+dfsg-2
no fix listed

Open the chart page →

5,615
homebridgegeek-cookbookVerified publisher5.3.21 of 1See more

homebridge geek-cookbook 5.3.2

1 of the 1 container images this version deploys carry CVE-2026-18839.

Container imageDigestPackageFixed in
ghcr.io/oznu/homebridge:2022-07-08ff2af53897e7
popt@1.16-14
no fix listed

Open the chart page →

15,717
valheimgeek-cookbookVerified publisher4.4.21 of 1See more

valheim geek-cookbook 4.4.2

1 of the 1 container images this version deploys carry CVE-2026-18839.

Container imageDigestPackageFixed in
ghcr.io/lloesche/valheim-server:latest20fde516ce31
popt@1.19+dfsg-2
no fix listed

Open the chart page →

4,893
leantimegissilabs1.3.01 of 2See more

leantime gissilabs 1.3.0

1 of the 2 container images this version deploys carry CVE-2026-18839.

Container imageDigestPackageFixed in
library/mariadb:10.6.218a16204dc96c
popt@1.16-14
no fix listed

Open the chart page →

6,458
mariadbhelmforgeVerified publisher2.1.11 of 1See more

mariadb helmforge 2.1.1

1 of the 1 container images this version deploys carry CVE-2026-18839.

Container imageDigestPackageFixed in
library/mariadb:12.3.3dd9b303aed4f
popt@1.19+dfsg-1build1
no fix listed

Open the chart page →

1,919
huehue1.0.31 of 3See more

hue hue 1.0.3

1 of the 3 container images this version deploys carry CVE-2026-18839.

Container imageDigestPackageFixed in
gethue/hue:latest7d5c1b9f8a79
popt@1.18-3build1
no fix listed

Open the chart page →

12,461
iris-webappiris-webapp0.2.41 of 2See more

iris-webapp iris-webapp 0.2.4

1 of the 2 container images this version deploys carry CVE-2026-18839.

Container imageDigestPackageFixed in
ghcr.io/dfir-iris/iriswebapp_app:v2.4.26e59ebde55709
popt@1.19+dfsg-2
no fix listed

Open the chart page →

11,794
glpikitsune-itopsVerified publisher1.0.71 of 3See more

glpi kitsune-itops 1.0.7

1 of the 3 container images this version deploys carry CVE-2026-18839.

Container imageDigestPackageFixed in
library/mariadb:latestdd9b303aed4f
popt@1.19+dfsg-1build1
no fix listed

Open the chart page →

4,878
owncloudkubernetes-homelab-helm-chartsVerified publisher0.1.02 of 3See more

owncloud kubernetes-homelab-helm-charts 0.1.0

2 of the 3 container images this version deploys carry CVE-2026-18839.

Container imageDigestPackageFixed in
library/mariadb:10.11ce66c7be32a0
popt@1.18-3build1
no fix listed
owncloud/server:10.16.274c53d341076
popt@1.18-3build1
no fix listed

Open the chart page →

9,975
kubefarmkvaps0.13.41 of 6See more

kubefarm kvaps 0.13.4

1 of the 6 container images this version deploys carry CVE-2026-18839.

Container imageDigestPackageFixed in
ghcr.io/kvaps/kubefarm-ltsp:v0.13.424efef013a53
popt@1.16-14
no fix listed

Open the chart page →

12,477
opennebulakvaps2.1.12 of 9See more

opennebula kvaps 2.1.1

2 of the 9 container images this version deploys carry CVE-2026-18839.

Container imageDigestPackageFixed in
ghcr.io/kvaps/opennebula:v5.12.0.4-1e28e0e7de11b
popt@1.16-14
no fix listed
ghcr.io/kvaps/opennebula-flow:v5.12.0.4-1600221f0f43f
popt@1.16-14
no fix listed

Open the chart page →

114,025
music-assistant-serverlmatfyVerified publisher0.1.91 of 1See more

music-assistant-server lmatfy 0.1.9

1 of the 1 container images this version deploys carry CVE-2026-18839.

Container imageDigestPackageFixed in
ghcr.io/music-assistant/server:2.7.53522e8a7a8f0
popt@1.19+dfsg-1
no fix listed

Open the chart page →

7,216
magentomagento3.2.31 of 12See more

magento magento 3.2.3

1 of the 12 container images this version deploys carry CVE-2026-18839.

Container imageDigestPackageFixed in
library/mariadb:10.422edfe1c7834
popt@1.16-14
no fix listed

Open the chart page →

13,582
helm-composenousefreakVerified publisher0.1.31 of 2See more

helm-compose nousefreak 0.1.3

1 of the 2 container images this version deploys carry CVE-2026-18839.

Container imageDigestPackageFixed in
library/mariadb:10.8.2-focal490f01279be1
popt@1.16-14
no fix listed

Open the chart page →

14,324
matomopockostVerified publisher1.3.01 of 3See more

matomo pockost 1.3.0

1 of the 3 container images this version deploys carry CVE-2026-18839.

Container imageDigestPackageFixed in
library/mariadb:12.3.3dd9b303aed4f
popt@1.19+dfsg-1build1
no fix listed

Open the chart page →

5,102
privacyideaprivacyidea1.0.61 of 2See more

privacyidea privacyidea 1.0.6

1 of the 2 container images this version deploys carry CVE-2026-18839.

Container imageDigestPackageFixed in
library/mariadb:11.7.2fcc7fcd7114a
popt@1.19+dfsg-1build1
no fix listed

Open the chart page →

5,483
fluent-bitromanow-helm-chartsVerified publisher1.7.31 of 1See more

fluent-bit romanow-helm-charts 1.7.3

1 of the 1 container images this version deploys carry CVE-2026-18839.

Container imageDigestPackageFixed in
fluent/fluent-bit:4.0-debuge76397ef3983
popt@1.19+dfsg-1
no fix listed

Open the chart page →

7,767

Container images carrying it

151 by charts deploying them

A fixed version is listed for 0 of the 1 affected package.

Container imageDigestPackageFixed inUsed by
drumsergio/genieacs:1.2.16.028244054e1bf
popt@1.19+dfsg-1
no fix listed
1
engrmth/bnkr:2.1.06d8464e6f0e8
popt@1.16-14
no fix listed
1
ethereumex/eth-stats-dashboard:v0.0.1a7603aa8df4c
popt@1.16-10
no fix listed
1
fireflyiii/core:version-6.6.6ae69fdd95cde
popt@1.19+dfsg-2
no fix listed
1
fiware/biz-ecosystem-charging-backend:11.7.029456835bb2c
popt@1.16-14
no fix listed
1
fiware/biz-ecosystem-logic-proxy:11.20.3d551a13e8278
popt@1.19+dfsg-1
no fix listed
1
fluent/fluent-bit:4.0-debuge76397ef3983
popt@1.19+dfsg-1
no fix listed
1
galaxy/galaxy-init:v18.010267bad550e6
popt@1.16-8ubuntu1
no fix listed
1
galaxy/galaxy-stable:v18.018e577a626dfd
popt@1.16-8ubuntu1
no fix listed
1
galaxy/pulsar-kubernetes:0.15.7e50a890e24c9
popt@1.19+dfsg-1
no fix listed
1
gethue/hue:4.11.011b649636e68
popt@1.16-14
no fix listed
1
gethue/hue:4.10.05702b2c37ff9
popt@1.16-11
no fix listed
1
gethue/hue:latest7d5c1b9f8a79
popt@1.18-3build1
no fix listed
1
haugene/transmission-openvpn:4.0059216cfae4b
popt@1.16-14
no fix listed
1
hyperledger/fabric-couchdb:0.4.10c65891b6c237
popt@1.16-10
no fix listed
1
ibmcom/icp-swift-sample:latestb5d8c6714dbc
popt@1.16-10
no fix listed
1
itzg/minecraft-server:2026.9.04e29d14082d9
popt@1.19+dfsg-1build1
no fix listed
1
itzg/minecraft-server:latest8672e335dbef
popt@1.19+dfsg-1build1
no fix listed
1
jacobalberty/unifi:v7.1.664a3616625dda
popt@1.16-11
no fix listed
1
jacobalberty/unifi:v7.4.162b3edc809a3ff
popt@1.16-11
no fix listed
1
jordan/icinga2:latestf75025fe8ea8
popt@1.19+dfsg-1
no fix listed
1
kubeovn/kube-ovn:v1.14.06722b54eb5c0
popt@1.19+dfsg-1build1
no fix listed
1
library/mariadb:10.7.307e06f2e7ae9
popt@1.16-14
no fix listed
1
library/mariadb:10.11.21c33370a599c
popt@1.18-3build1
no fix listed
1
library/mariadb:10.422edfe1c7834
popt@1.16-14
no fix listed
1
library/mariadb:112439dcd7d140
popt@1.19+dfsg-1build1
no fix listed
1
library/mariadb:10.8.2-focal490f01279be1
popt@1.16-14
no fix listed
1
library/mariadb:12.0.25b6a1eac15b8
popt@1.19+dfsg-1build1
no fix listed
1
library/mariadb:12.3.2628f228f0fd5
popt@1.19+dfsg-1build1
no fix listed
1
library/mariadb:10.6.218a16204dc96c
popt@1.16-14
no fix listed
1
library/mariadb:10.79a48ac9f196f
popt@1.16-14
no fix listed
1
library/mariadb:12.3.2a02fe89cb597
popt@1.19+dfsg-1build1
no fix listed
1
library/mariadb:12.2.2b1cb255a9939
popt@1.19+dfsg-1build1
no fix listed
1
library/mariadb:10.10.2bfc25a68e113
popt@1.18-3build1
no fix listed
1
library/mariadb:10.6.15e22328f4d714
popt@1.16-14
no fix listed
1
library/mariadb:10.9.4fbb8456ebdb1
popt@1.18-3build1
no fix listed
1
library/mariadb:11.7.2fcc7fcd7114a
popt@1.19+dfsg-1build1
no fix listed
1
library/nextcloud:31.0.6-apache588609d76b21
popt@1.19+dfsg-1
no fix listed
1
library/nextcloud:31.0.10-apacheb7faa1653c39
popt@1.19+dfsg-2
no fix listed
1
library/nextcloud:34.0.4-apachede4ad9389386
popt@1.19+dfsg-2
no fix listed
1
linuxserver/unifi-controller:8.0.240ae315a3a456
popt@1.16-14
no fix listed
1
linuxserver/unifi-controller:7.3.83ab105cc50322
popt@1.16-14
no fix listed
1
linuxserver/unifi-network-application:10.6.101-ls144b6ce6968ee45
popt@1.19+dfsg-2build1
no fix listed
1
logiqai/flash:v3.10.265b996bc7bdc
popt@1.19+dfsg-1
no fix listed
1
louislam/uptime-kuma:2.5.33e24e96c89ef
popt@1.19+dfsg-1
no fix listed
1
louislam/uptime-kuma:2.0.24c364ef96aad
popt@1.19+dfsg-1
no fix listed
1
louislam/uptime-kuma:2.4.091e963bfda56
popt@1.19+dfsg-1
no fix listed
1
mathesar/mathesar:0.12.0091757cb01fe
popt@1.19+dfsg-1
no fix listed
1
muluder/prograncontrollermcord:0.1.843b597a93da7
popt@1.16-10
no fix listed
1
offchainlabs/nitro-node:v3.7.6-c0fe95e9f779fa84b7b
popt@1.19+dfsg-1
no fix listed
1

syft 1.42.1 · advisories as of 15 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.