CVE-2026-19445
CriticalAdvisory
Published 30 Sept 2026In the index since 1 Oct 2026
- Severity
- Critical
- worst across findings
- CVSS
- 9.2
- base score, highest
- EPSS
- —
- probability of exploitation
- CISA KEV
- Not listed
- no confirmed exploitation
- Charts affected
- 275
- of 17,966 indexed, latest versions
- Container images
- 270
- deployed by those charts
- Fix available
- None
- affected packages
The matching OSV records carry no description.
Carried by container images the latest versions of 275 of 17,966 indexed charts deploy, on 270 images.
| Affected package | Affected versions | Fixed in | Images |
|---|---|---|---|
| python3.11deb | 3.11.2-6, 3.11.2-6+deb12u2, 3.11.2-6+deb12u3, 3.11.2-6+deb12u4+4 more | no fix listed | 190 |
| python3.13deb | 3.13.5-2, 3.13.5-2+deb13u2, 3.13.5-2+deb13u4, 3.13.5-2+deb13u5 | no fix listed | 80 |
- OSV records
- DEBIAN-CVE-2026-19445
Charts affected
275 by stars
| Chart | Latest | Affected images | Radar Score |
|---|---|---|---|
| nextcloudnextcloud | 9.4.0 | 1 of 1See more | 4,361 |
| uptime-kumauptime-kumaVerified publisher | 4.2.0 | 1 of 1See more | 33,386 |
| airflowairflow-helmVerified publisher | 8.9.0 | 1 of 4See more | 12,078 |
| netdatanetdataVerified publisher | 3.7.175 | 1 of 1See more | 2,618 |
| maildocker-postfixVerified publisher | 5.1.0 | 1 of 1See more | 6,264 |
| csi-driver-nfscsi-driver-nfsVerified publisher | 4.13.4 | 1 of 6See more | 3,678 |
| clearmlallegroaiOfficialVerified publisher | 7.15.0 | 1 of 4See more | 11,179 |
| dragonflydragonflyVerified publisher | 1.8.5 | 1 of 3See more | 4,401 |
| difydify-helmVerified publisher | 0.38.0 | 1 of 11See more | 71,370 |
| openprojectopenproject-helm-chartsOfficialVerified publisher | 13.13.0 | 1 of 5See more | 20,439 |
| wazuhwazuh-helm-morgovedVerified publisher | 2.0.7 | 1 of 5See more | 12,346 |
| csi-driver-smbcsi-driver-smbVerified publisher | 1.20.3 | 1 of 6See more | 3,257 |
| netbirdjaconiVerified publisher | 0.15.1 | 1 of 4See more | 8,781 |
| gotenbergmaikumoriVerified publisher | 1.25.0 | 1 of 1See more | 12,376 |
| openclawopenclaw-helmVerified publisher | 1.5.40 | 1 of 2See more | 6,458 |
| supabasetokens-studioVerified publisher | 1.0.0 | 1 of 14See more | 24,811 |
| renterdartur9010Verified publisher | 1.4.4 | 1 of 2See more | 9,022 |
| paperless-ngxfmjstudios | 0.2.8 | 1 of 5See more | 32,948 |
| devtron-operatordevtron | 0.23.3 | 1 of 11See more | 34,366 |
| nextcloudgroundhog2k | 0.22.8 | 1 of 3See more | 4,361 |
| wazuh-agentavistoVerified publisher | 4.12.2 | 1 of 1See more | 7,038 |
| passboltpassbolt | 2.2.0 | 1 of 6See more | 12,916 |
| uffizzi-controlleruffizzi-controller | 2.4.6 | 1 of 11See more | 14,728 |
| geonode-k8sgeonode-k8sVerified publisher | 2.0.0 | 1 of 10See more | 61,375 |
| gitops-promotergitops-promoterOfficialVerified publisher | 0.21.0 | 1 of 2See more | 3,264 |
| glpiglpi-conteiner | 0.1.0 | 1 of 3See more | 12,233 |
| kubeflowkubeflow | 1.6.2 | 1 of 45See more | 164,427 |
| uffizzi-appuffizzi-app | 1.3.0 | 1 of 14See more | 20,358 |
| grafana-pdf-exporterwiremindVerified publisher | 2.1.1 | 1 of 1See more | 10,353 |
| convertigoconvertigoOfficialVerified publisher | 8.4.5 | 1 of 5See more | 16,268 |
| cosmocosmo-platformOfficialVerified publisher | 0.20.0 | 1 of 10See more | 31,649 |
| dask-kubernetes-operatordask | 2026.3.0 | 1 of 1See more | 10,458 |
| hermes-agenthermes-agentVerified publisher | 1.16.0 | 1 of 1See more | 6,235 |
| coreinstill-aiOfficialVerified publisher | 0.1.75 | 3 of 15See more | 32,776 |
| pretixtechwolf12Verified publisher | 2026.7.0 | 1 of 3See more | 11,305 |
| paperless-ngxadnoctemVerified publisher | 0.4.2 | 1 of 5See more | 23,678 |
| agentareaagentareaVerified publisher | 0.0.25 | 1 of 17See more | 12,510 |
| hermes-agentankra-chartsVerified publisher | 0.3.1 | 1 of 1See more | 6,947 |
| music-assistantbdclark-helm-chartsVerified publisher | 0.4.13 | 1 of 1See more | 4,242 |
| dawarichcogitriVerified publisher | 2.9.2 | 1 of 3See more | 6,600 |
| cosmotech-copilot-apicosmotech-apiVerified publisher | 0.1.1 | 1 of 1See more | 12,501 |
| dragonfly-stackdragonflyVerified publisher | 0.1.2 | 1 of 7See more | 19,521 |
| enbuildenbuildVerified publisher | 0.0.50 | 1 of 6See more | 34,052 |
| roundcubeencircle360-ossVerified publisher | 0.8.3 | 1 of 1See more | 6,278 |
| iobrokereugen | 0.2.6 | 1 of 1See more | 12,125 |
| valheimgeek-cookbookVerified publisher | 4.4.2 | 1 of 1See more | 3,039 |
| castopodh2mVerified publisher | 1.12.10 | 1 of 3See more | 10,849 |
| harp-proxyharp | 0.8.1 | 1 of 1See more | 6,994 |
| uptime-kumahelmforgeVerified publisher | 1.5.15 | 1 of 1See more | 33,235 |
| iris-webappiris-webapp | 0.2.4 | 1 of 2See more | 12,951 |
Container images carrying it
270 by charts deploying them
A fixed version is listed for 0 of the 2 affected packages.
| Container image | Digest | Package | Fixed in | Used by |
|---|---|---|---|---|
| quay.io/ | 95d6f0e05636 | python3.11 | no fix listed | 6 |
| library/ | 64af3819f927 | python3.11 | no fix listed | 3 |
| quay.io/ | 709c7da19c5a | python3.11 | no fix listed | 3 |
| cfssl/ | c9018c2ddf0b | python3.11 | no fix listed | 2 |
| freikin/ | e58334ca5697 | python3.13 | no fix listed | 2 |
| frinx/ | 9cd0147a09bd | python3.11 | no fix listed | 2 |
| gjeanmart/ | 926264c8f2d1 | python3.11 | no fix listed | 2 |
| gotenberg/ | 87c16b9f3642 | python3.13 | no fix listed | 2 |
| gotenberg/ | f29984bd1e22 | python3.13 | no fix listed | 2 |
| juicedata/ | f918e7331c05 | python3.11 | no fix listed | 2 |
| library/ | b1ae671e9815 | python3.13 | no fix listed | 2 |
| library/ | eedf63967cdb | python3.11 | no fix listed | 2 |
| library/ | f474a901faec | python3.13 | no fix listed | 2 |
| louislam/ | 917318f9d7be | python3.11 | no fix listed | 2 |
| louislam/ | 9aeb4e51d038 | python3.11 | no fix listed | 2 |
| louislam/ | a8610b3b4c38 | python3.11 | no fix listed | 2 |
| louislam/ | c74379ac4509 | python3.11 | no fix listed | 2 |
| moreillon/ | e1c9bfab5c16 | python3.11 | no fix listed | 2 |
| nousresearch/ | fca358f12efd | python3.13 | no fix listed | 2 |
| nutanix/ | 9c373718e1b1 | python3.13 | no fix listed | 2 |
| obolnetwork/ | 278c7e2897b6 | python3.13 | no fix listed | 2 |
| qichenxu4pd/ | f3a8502bc21b | python3.11 | no fix listed | 2 |
| uffizzi/ | 0344805f267b | python3.11 | no fix listed | 2 |
| vdiogov/ | 6945f84f0058 | python3.11 | no fix listed | 2 |
| ghcr.io/ | 42708a75345b | python3.13 | no fix listed | 2 |
| ghcr.io/ | cd264d33efd4 | python3.11 | no fix listed | 2 |
| ghcr.io/ | 4457b79b24cd | python3.11 | no fix listed | 2 |
| registry.k8s.io/ | dc7746bb081e | python3.11 | no fix listed | 2 |
| aapjeisbaas/ | 6b261abc7fb0 | python3.13 | no fix listed | 1 |
| aboogie/ | 9c41a4483ac8 | python3.11 | no fix listed | 1 |
| agentarea/ | be4a11f799b2 | python3.11 | no fix listed | 1 |
| allegroai/ | 713ae38f7daf | python3.11 | no fix listed | 1 |
| anujdatar/ | 685df04a643b | python3.11 | no fix listed | 1 |
| apache/ | 64e58748b6b9 | python3.11 | no fix listed | 1 |
| apache/ | ce90bdc3d2af | python3.11 | no fix listed | 1 |
| apache/ | e5560ad0b86e | python3.11 | no fix listed | 1 |
| artur9010/ | 6b4de3ce8b0e | python3.11 | no fix listed | 1 |
| assistiot/ | 7d6a0d534c7f | python3.11 | no fix listed | 1 |
| assistiot/ | 38b003e55ff3 | python3.11 | no fix listed | 1 |
| assistiot/ | b1dbe4d62a03 | python3.11 | no fix listed | 1 |
| avinash263/ | aa2b8727f1a6 | python3.11 | no fix listed | 1 |
| baserow/ | e0b3c8130b91 | python3.11 | no fix listed | 1 |
| baserow/ | df0c42eb67e8 | python3.11 | no fix listed | 1 |
| beyzkaya/ | 12a6a3d1c5f9 | python3.11 | no fix listed | 1 |
| bloxstaking/ | bf6d7d2fdc93 | python3.11 | no fix listed | 1 |
| bnjbvr/ | 37e216b182c8 | python3.11 | no fix listed | 1 |
| boky/ | aafc77238423 | python3.13 | no fix listed | 1 |
| boky/ | f3f247fd4252 | python3.11 | no fix listed | 1 |
| carlosmz87/ | 8ffa63aa995d | python3.11 | no fix listed | 1 |
| castopod/ | 1fd37280cbb2 | python3.11 | no fix listed | 1 |