CVE-2026-19553
HighAdvisory
Published 30 Sept 2026In the index since 1 Oct 2026
- Severity
- High
- worst across findings
- CVSS
- 7.6
- base score, highest
- EPSS
- —
- probability of exploitation
- CISA KEV
- Not listed
- no confirmed exploitation
- Charts affected
- 275
- of 17,966 indexed, latest versions
- Container images
- 270
- deployed by those charts
- Fix available
- None
- affected packages
The matching OSV records carry no description.
Carried by container images the latest versions of 275 of 17,966 indexed charts deploy, on 270 images.
| Affected package | Affected versions | Fixed in | Images |
|---|---|---|---|
| python3.11deb | 3.11.2-6, 3.11.2-6+deb12u2, 3.11.2-6+deb12u3, 3.11.2-6+deb12u4+4 more | no fix listed | 190 |
| python3.13deb | 3.13.5-2, 3.13.5-2+deb13u2, 3.13.5-2+deb13u4, 3.13.5-2+deb13u5 | no fix listed | 80 |
- OSV records
- DEBIAN-CVE-2026-19553
Charts affected
275 by stars
| Chart | Latest | Affected images | Radar Score |
|---|---|---|---|
| nextcloudnextcloud | 9.4.0 | 1 of 1See more | 4,361 |
| uptime-kumauptime-kumaVerified publisher | 4.2.0 | 1 of 1See more | 33,386 |
| airflowairflow-helmVerified publisher | 8.9.0 | 1 of 4See more | 12,078 |
| netdatanetdataVerified publisher | 3.7.175 | 1 of 1See more | 2,618 |
| maildocker-postfixVerified publisher | 5.1.0 | 1 of 1See more | 6,264 |
| csi-driver-nfscsi-driver-nfsVerified publisher | 4.13.4 | 1 of 6See more | 3,678 |
| clearmlallegroaiOfficialVerified publisher | 7.15.0 | 1 of 4See more | 11,179 |
| dragonflydragonflyVerified publisher | 1.8.5 | 1 of 3See more | 4,401 |
| difydify-helmVerified publisher | 0.38.0 | 1 of 11See more | 71,370 |
| openprojectopenproject-helm-chartsOfficialVerified publisher | 13.13.0 | 1 of 5See more | 20,439 |
| wazuhwazuh-helm-morgovedVerified publisher | 2.0.7 | 1 of 5See more | 12,346 |
| csi-driver-smbcsi-driver-smbVerified publisher | 1.20.3 | 1 of 6See more | 3,257 |
| netbirdjaconiVerified publisher | 0.15.1 | 1 of 4See more | 8,781 |
| gotenbergmaikumoriVerified publisher | 1.25.0 | 1 of 1See more | 12,376 |
| openclawopenclaw-helmVerified publisher | 1.5.40 | 1 of 2See more | 6,458 |
| supabasetokens-studioVerified publisher | 1.0.0 | 1 of 14See more | 24,811 |
| renterdartur9010Verified publisher | 1.4.4 | 1 of 2See more | 9,022 |
| paperless-ngxfmjstudios | 0.2.8 | 1 of 5See more | 32,948 |
| devtron-operatordevtron | 0.23.3 | 1 of 11See more | 34,366 |
| nextcloudgroundhog2k | 0.22.8 | 1 of 3See more | 4,361 |
| wazuh-agentavistoVerified publisher | 4.12.2 | 1 of 1See more | 7,038 |
| passboltpassbolt | 2.2.0 | 1 of 6See more | 12,916 |
| uffizzi-controlleruffizzi-controller | 2.4.6 | 1 of 11See more | 14,728 |
| geonode-k8sgeonode-k8sVerified publisher | 2.0.0 | 1 of 10See more | 61,375 |
| gitops-promotergitops-promoterOfficialVerified publisher | 0.21.0 | 1 of 2See more | 3,264 |
| glpiglpi-conteiner | 0.1.0 | 1 of 3See more | 12,233 |
| kubeflowkubeflow | 1.6.2 | 1 of 45See more | 164,427 |
| uffizzi-appuffizzi-app | 1.3.0 | 1 of 14See more | 20,358 |
| grafana-pdf-exporterwiremindVerified publisher | 2.1.1 | 1 of 1See more | 10,353 |
| convertigoconvertigoOfficialVerified publisher | 8.4.5 | 1 of 5See more | 16,268 |
| cosmocosmo-platformOfficialVerified publisher | 0.20.0 | 1 of 10See more | 31,649 |
| dask-kubernetes-operatordask | 2026.3.0 | 1 of 1See more | 10,458 |
| hermes-agenthermes-agentVerified publisher | 1.16.0 | 1 of 1See more | 6,235 |
| coreinstill-aiOfficialVerified publisher | 0.1.75 | 3 of 15See more | 32,776 |
| pretixtechwolf12Verified publisher | 2026.7.0 | 1 of 3See more | 11,305 |
| paperless-ngxadnoctemVerified publisher | 0.4.2 | 1 of 5See more | 23,678 |
| agentareaagentareaVerified publisher | 0.0.25 | 1 of 17See more | 12,510 |
| hermes-agentankra-chartsVerified publisher | 0.3.1 | 1 of 1See more | 6,947 |
| music-assistantbdclark-helm-chartsVerified publisher | 0.4.13 | 1 of 1See more | 4,242 |
| dawarichcogitriVerified publisher | 2.9.2 | 1 of 3See more | 6,600 |
| cosmotech-copilot-apicosmotech-apiVerified publisher | 0.1.1 | 1 of 1See more | 12,501 |
| dragonfly-stackdragonflyVerified publisher | 0.1.2 | 1 of 7See more | 19,521 |
| enbuildenbuildVerified publisher | 0.0.50 | 1 of 6See more | 34,052 |
| roundcubeencircle360-ossVerified publisher | 0.8.3 | 1 of 1See more | 6,278 |
| iobrokereugen | 0.2.6 | 1 of 1See more | 12,125 |
| valheimgeek-cookbookVerified publisher | 4.4.2 | 1 of 1See more | 3,039 |
| castopodh2mVerified publisher | 1.12.10 | 1 of 3See more | 10,849 |
| harp-proxyharp | 0.8.1 | 1 of 1See more | 6,994 |
| uptime-kumahelmforgeVerified publisher | 1.5.15 | 1 of 1See more | 33,235 |
| iris-webappiris-webapp | 0.2.4 | 1 of 2See more | 12,951 |
Container images carrying it
270 by charts deploying them
A fixed version is listed for 0 of the 2 affected packages.
| Container image | Digest | Package | Fixed in | Used by |
|---|---|---|---|---|
| truebyteinnovationllp/ | 6bf978b96279 | python3.13 | no fix listed | 1 |
| unitycatalog/ | 3a688197b218 | python3.11 | no fix listed | 1 |
| vlebediantsev/ | 007c6670ff48 | python3.11 | no fix listed | 1 |
| vlebediantsev/ | 945675fd2636 | python3.11 | no fix listed | 1 |
| vlebediantsev/ | 54f69d116c50 | python3.11 | no fix listed | 1 |
| voska/ | 7142a431e2c5 | python3.11 | no fix listed | 1 |
| wallarm/ | b39795d50e83 | python3.13 | no fix listed | 1 |
| wiktorn/ | 9bb5f4a9b54c | python3.11 | no fix listed | 1 |
| xom4ekp2p/ | d0e0aa238b02 | python3.11 | no fix listed | 1 |
| xom4ekp2p/ | 2745b5fd8785 | python3.11 | no fix listed | 1 |
| gcr.io/ | 9bcfd2abc361 | python3.11 | no fix listed | 1 |
| ghcr.io/ | f9104080d9a7 | python3.13 | no fix listed | 1 |
| ghcr.io/ | 5889bea38e56 | python3.11 | no fix listed | 1 |
| ghcr.io/ | 8766ba08bf1a | python3.11 | no fix listed | 1 |
| ghcr.io/ | 72f35584026d | python3.11 | no fix listed | 1 |
| ghcr.io/ | ca7dc7362968 | python3.11 | no fix listed | 1 |
| ghcr.io/ | 0e99f12bb040 | python3.11 | no fix listed | 1 |
| ghcr.io/ | 8d943799621b | python3.11 | no fix listed | 1 |
| ghcr.io/ | 726a947bb65b | python3.11 | no fix listed | 1 |
| ghcr.io/ | 8c05f7366981 | python3.13 | no fix listed | 1 |
| ghcr.io/ | a2be95de450c | python3.13 | no fix listed | 1 |
| ghcr.io/ | 16fda01ae58a | python3.11 | no fix listed | 1 |
| ghcr.io/ | 3225d2bc6b3c | python3.13 | no fix listed | 1 |
| ghcr.io/ | e59ebde55709 | python3.13 | no fix listed | 1 |
| ghcr.io/ | 6e82914e1051 | python3.11 | no fix listed | 1 |
| ghcr.io/ | a0323f4283e5 | python3.11 | no fix listed | 1 |
| ghcr.io/ | ebcf66281fc1 | python3.11 | no fix listed | 1 |
| ghcr.io/ | 10f8d164109b | python3.13 | no fix listed | 1 |
| ghcr.io/ | 472a25038957 | python3.11 | no fix listed | 1 |
| ghcr.io/ | cd25a5cc3f1b | python3.13 | no fix listed | 1 |
| ghcr.io/ | 6d4106724d56 | python3.11 | no fix listed | 1 |
| ghcr.io/ | 2550427988e3 | python3.11 | no fix listed | 1 |
| ghcr.io/ | 0877e9452d14 | python3.11 | no fix listed | 1 |
| ghcr.io/ | 656ec60c6407 | python3.13 | no fix listed | 1 |
| ghcr.io/ | 757bdd779345 | python3.13 | no fix listed | 1 |
| ghcr.io/ | ed86db9f0efe | python3.11 | no fix listed | 1 |
| ghcr.io/ | c885aa902faf | python3.13 | no fix listed | 1 |
| ghcr.io/ | 07aba09a594f | python3.11 | no fix listed | 1 |
| ghcr.io/ | 3522e8a7a8f0 | python3.11 | no fix listed | 1 |
| ghcr.io/ | 50666a6f8d7f | python3.11 | no fix listed | 1 |
| ghcr.io/ | 885872224fa5 | python3.13 | no fix listed | 1 |
| ghcr.io/ | eef3ee7810d0 | python3.11 | no fix listed | 1 |
| ghcr.io/ | 034151b61a80 | python3.13 | no fix listed | 1 |
| ghcr.io/ | f8c7afdcf439 | python3.11 | no fix listed | 1 |
| ghcr.io/ | dcfd14877740 | python3.11 | no fix listed | 1 |
| ghcr.io/ | ce85ef0ce665 | python3.11 | no fix listed | 1 |
| ghcr.io/ | f06525afac6b | python3.11 | no fix listed | 1 |
| ghcr.io/ | 2c1ec86675d4 | python3.13 | no fix listed | 1 |
| ghcr.io/ | c79b2e64a211 | python3.11 | no fix listed | 1 |
| ghcr.io/ | 3e0fbd0274eb | python3.13 | no fix listed | 1 |