StackRadar

CVE-2026-19553

High

Advisory

Published 30 Sept 2026In the index since 1 Oct 2026
Severity
High
worst across findings
CVSS
7.6
base score, highest
EPSS
—
probability of exploitation
CISA KEV
Not listed
no confirmed exploitation
Charts affected
275
of 17,966 indexed, latest versions
Container images
270
deployed by those charts
Fix available
None
affected packages

The matching OSV records carry no description.

Carried by container images the latest versions of 275 of 17,966 indexed charts deploy, on 270 images.

Affected packageAffected versionsFixed inImages
python3.11deb3.11.2-6, 3.11.2-6+deb12u2, 3.11.2-6+deb12u3, 3.11.2-6+deb12u4+4 moreno fix listed190
python3.13deb3.13.5-2, 3.13.5-2+deb13u2, 3.13.5-2+deb13u4, 3.13.5-2+deb13u5no fix listed80
OSV records
DEBIAN-CVE-2026-19553

Charts affected

275 by stars
ChartLatestAffected imagesRadar Score
nextcloudnextcloud9.4.01 of 1See more

nextcloud nextcloud 9.4.0

1 of the 1 container images this version deploys carry CVE-2026-19553.

Container imageDigestPackageFixed in
library/nextcloud:35.0.1-apacheb1ae671e9815
python3.13@3.13.5-2+deb13u5
no fix listed

Open the chart page →

4,361
uptime-kumauptime-kumaVerified publisher4.2.01 of 1See more

uptime-kuma uptime-kuma 4.2.0

1 of the 1 container images this version deploys carry CVE-2026-19553.

Container imageDigestPackageFixed in
louislam/uptime-kuma:2.5.0a8610b3b4c38
python3.11@3.11.2-6+deb12u7
no fix listed

Open the chart page →

33,386
airflowairflow-helmVerified publisher8.9.01 of 4See more

airflow airflow-helm 8.9.0

1 of the 4 container images this version deploys carry CVE-2026-19553.

Container imageDigestPackageFixed in
apache/airflow:2.8.4-python3.964e58748b6b9
python3.11@3.11.2-6
no fix listed

Open the chart page →

12,078
netdatanetdataVerified publisher3.7.1751 of 1See more

netdata netdata 3.7.175

1 of the 1 container images this version deploys carry CVE-2026-19553.

Container imageDigestPackageFixed in
netdata/netdata:v2.12.01e50cc0b11f0
python3.13@3.13.5-2+deb13u5
no fix listed

Open the chart page →

2,618
maildocker-postfixVerified publisher5.1.01 of 1See more

mail docker-postfix 5.1.0

1 of the 1 container images this version deploys carry CVE-2026-19553.

Container imageDigestPackageFixed in
boky/postfix:v5.1.0aafc77238423
python3.13@3.13.5-2
no fix listed

Open the chart page →

6,264
csi-driver-nfscsi-driver-nfsVerified publisher4.13.41 of 6See more

csi-driver-nfs csi-driver-nfs 4.13.4

1 of the 6 container images this version deploys carry CVE-2026-19553.

Container imageDigestPackageFixed in
registry.k8s.io/sig-storage/nfsplugin:v4.13.41eb5a85180a4
python3.11@3.11.2-6+deb12u7
no fix listed

Open the chart page →

3,678
clearmlallegroaiOfficialVerified publisher7.15.01 of 4See more

clearml allegroai 7.15.0

1 of the 4 container images this version deploys carry CVE-2026-19553.

Container imageDigestPackageFixed in
allegroai/clearml:2.0.0-613713ae38f7daf
python3.11@3.11.2-6+deb12u4
no fix listed

Open the chart page →

11,179
dragonflydragonflyVerified publisher1.8.51 of 3See more

dragonfly dragonfly 1.8.5

1 of the 3 container images this version deploys carry CVE-2026-19553.

Container imageDigestPackageFixed in
dragonflyoss/client:v1.5.59fe2a1d6206f
python3.11@3.11.2-6+deb12u8
no fix listed

Open the chart page →

4,401
difydify-helmVerified publisher0.38.01 of 11See more

dify dify-helm 0.38.0

1 of the 11 container images this version deploys carry CVE-2026-19553.

Container imageDigestPackageFixed in
langgenius/dify-api:1.16.1dcefa5f7c47c
python3.11@3.11.2-6+deb12u8
no fix listed

Open the chart page →

71,370
openprojectopenproject-helm-chartsOfficialVerified publisher13.13.01 of 5See more

openproject openproject-helm-charts 13.13.0

1 of the 5 container images this version deploys carry CVE-2026-19553.

Container imageDigestPackageFixed in
openproject/hocuspocus:release-338001b288dc1359dfb5
python3.11@3.11.2-6+deb12u6
no fix listed

Open the chart page →

20,439
wazuhwazuh-helm-morgovedVerified publisher2.0.71 of 5See more

wazuh wazuh-helm-morgoved 2.0.7

1 of the 5 container images this version deploys carry CVE-2026-19553.

Container imageDigestPackageFixed in
kinseii/wazuh-agent:4.14.17160eb143728
python3.11@3.11.2-6+deb12u6
no fix listed

Open the chart page →

12,346
csi-driver-smbcsi-driver-smbVerified publisher1.20.31 of 6See more

csi-driver-smb csi-driver-smb 1.20.3

1 of the 6 container images this version deploys carry CVE-2026-19553.

Container imageDigestPackageFixed in
registry.k8s.io/sig-storage/smbplugin:v1.20.3dc7746bb081e
python3.11@3.11.2-6+deb12u7
no fix listed

Open the chart page →

3,257
netbirdjaconiVerified publisher0.15.11 of 4See more

netbird jaconi 0.15.1

1 of the 4 container images this version deploys carry CVE-2026-19553.

Container imageDigestPackageFixed in
library/golang:latest3680233e3204
python3.13@3.13.5-2+deb13u5
no fix listed

Open the chart page →

8,781
gotenbergmaikumoriVerified publisher1.25.01 of 1See more

gotenberg maikumori 1.25.0

1 of the 1 container images this version deploys carry CVE-2026-19553.

Container imageDigestPackageFixed in
gotenberg/gotenberg:8.36.087c16b9f3642
python3.13@3.13.5-2+deb13u4
no fix listed

Open the chart page →

12,376
openclawopenclaw-helmVerified publisher1.5.401 of 2See more

openclaw openclaw-helm 1.5.40

1 of the 2 container images this version deploys carry CVE-2026-19553.

Container imageDigestPackageFixed in
ghcr.io/openclaw/openclaw:2026.5.22dcfd14877740
python3.11@3.11.2-6+deb12u7
no fix listed

Open the chart page →

6,458
supabasetokens-studioVerified publisher1.0.01 of 14See more

supabase tokens-studio 1.0.0

1 of the 14 container images this version deploys carry CVE-2026-19553.

Container imageDigestPackageFixed in
supabase/studio:20241021-9f9b08326d8070c55e9
python3.11@3.11.2-6+deb12u3
no fix listed

Open the chart page →

24,811
renterdartur9010Verified publisher1.4.41 of 2See more

renterd artur9010 1.4.4

1 of the 2 container images this version deploys carry CVE-2026-19553.

Container imageDigestPackageFixed in
artur9010/wait-for:v1.0.06b4de3ce8b0e
python3.11@3.11.2-6
no fix listed

Open the chart page →

9,022
paperless-ngxfmjstudios0.2.81 of 5See more

paperless-ngx fmjstudios 0.2.8

1 of the 5 container images this version deploys carry CVE-2026-19553.

Container imageDigestPackageFixed in
gotenberg/gotenberg:8.0.1cf0b9a7ca3cf
python3.11@3.11.2-6
no fix listed

Open the chart page →

32,948
devtron-operatordevtron0.23.31 of 11See more

devtron-operator devtron 0.23.3

1 of the 11 container images this version deploys carry CVE-2026-19553.

Container imageDigestPackageFixed in
quay.io/devtron/devtron-utils:dup-chart-repo-v1.1.095d6f0e05636
python3.11@3.11.2-6
no fix listed

Open the chart page →

34,366
nextcloudgroundhog2k0.22.81 of 3See more

nextcloud groundhog2k 0.22.8

1 of the 3 container images this version deploys carry CVE-2026-19553.

Container imageDigestPackageFixed in
library/nextcloud:35.0.1:35.0.1-apacheb1ae671e9815
python3.13@3.13.5-2+deb13u5
no fix listed

Open the chart page →

4,361
wazuh-agentavistoVerified publisher4.12.21 of 1See more

wazuh-agent avisto 4.12.2

1 of the 1 container images this version deploys carry CVE-2026-19553.

Container imageDigestPackageFixed in
ghcr.io/avistotelecom/docker-wazuh-agent:4.12.08766ba08bf1a
python3.11@3.11.2-6+deb12u6
no fix listed

Open the chart page →

7,038
passboltpassbolt2.2.01 of 6See more

passbolt passbolt 2.2.0

1 of the 6 container images this version deploys carry CVE-2026-19553.

Container imageDigestPackageFixed in
passbolt/passbolt:5.16.0-1-ce1768916a04b1
python3.13@3.13.5-2+deb13u5
no fix listed

Open the chart page →

12,916
uffizzi-controlleruffizzi-controller2.4.61 of 11See more

uffizzi-controller uffizzi-controller 2.4.6

1 of the 11 container images this version deploys carry CVE-2026-19553.

Container imageDigestPackageFixed in
uffizzi/controller:latest0344805f267b
python3.11@3.11.2-6
no fix listed

Open the chart page →

14,728
geonode-k8sgeonode-k8sVerified publisher2.0.01 of 10See more

geonode-k8s geonode-k8s 2.0.0

1 of the 10 container images this version deploys carry CVE-2026-19553.

Container imageDigestPackageFixed in
geopython/pycsw:3.0.0-beta284662ea6b78b
python3.11@3.11.2-6+deb12u6
no fix listed

Open the chart page →

61,375
gitops-promotergitops-promoterOfficialVerified publisher0.21.01 of 2See more

gitops-promoter gitops-promoter 0.21.0

1 of the 2 container images this version deploys carry CVE-2026-19553.

Container imageDigestPackageFixed in
quay.io/argoprojlabs/gitops-promoter:v0.42.0105b74aaf5e9
python3.13@3.13.5-2+deb13u4
no fix listed

Open the chart page →

3,264
glpiglpi-conteiner0.1.01 of 3See more

glpi glpi-conteiner 0.1.0

1 of the 3 container images this version deploys carry CVE-2026-19553.

Container imageDigestPackageFixed in
vdiogov/glpi-conteiner:latest6945f84f0058
python3.11@3.11.2-6+deb12u2
no fix listed

Open the chart page →

12,233
kubeflowkubeflow1.6.21 of 45See more

kubeflow kubeflow 1.6.2

1 of the 45 container images this version deploys carry CVE-2026-19553.

Container imageDigestPackageFixed in
library/python:3.7eedf63967cdb
python3.11@3.11.2-6
no fix listed

Open the chart page →

164,427
uffizzi-appuffizzi-app1.3.01 of 14See more

uffizzi-app uffizzi-app 1.3.0

1 of the 14 container images this version deploys carry CVE-2026-19553.

Container imageDigestPackageFixed in
uffizzi/controller:latest0344805f267b
python3.11@3.11.2-6
no fix listed

Open the chart page →

20,358
grafana-pdf-exporterwiremindVerified publisher2.1.11 of 1See more

grafana-pdf-exporter wiremind 2.1.1

1 of the 1 container images this version deploys carry CVE-2026-19553.

Container imageDigestPackageFixed in
ghcr.io/wiremind/grafana-pdf-exporter:v1.7dbaa8527bf4c
python3.11@3.11.2-6
no fix listed

Open the chart page →

10,353
convertigoconvertigoOfficialVerified publisher8.4.51 of 5See more

convertigo convertigo 8.4.5

1 of the 5 container images this version deploys carry CVE-2026-19553.

Container imageDigestPackageFixed in
baserow/baserow:1.30.1df0c42eb67e8
python3.11@3.11.2-6+deb12u4
no fix listed

Open the chart page →

16,268
cosmocosmo-platformOfficialVerified publisher0.20.01 of 10See more

cosmo cosmo-platform 0.20.0

1 of the 10 container images this version deploys carry CVE-2026-19553.

Container imageDigestPackageFixed in
ghcr.io/wundergraph/cosmo/otelcollector:0.18.15a6fe78d4d15
python3.11@3.11.2-6+deb12u5
no fix listed

Open the chart page →

31,649
dask-kubernetes-operatordask2026.3.01 of 1See more

dask-kubernetes-operator dask 2026.3.0

1 of the 1 container images this version deploys carry CVE-2026-19553.

Container imageDigestPackageFixed in
ghcr.io/dask/dask-kubernetes-operator:2026.3.03225d2bc6b3c
python3.13@3.13.5-2
no fix listed

Open the chart page →

10,458
hermes-agenthermes-agentVerified publisher1.16.01 of 1See more

hermes-agent hermes-agent 1.16.0

1 of the 1 container images this version deploys carry CVE-2026-19553.

Container imageDigestPackageFixed in
nousresearch/hermes-agent:v2026.9.24fca358f12efd
python3.13@3.13.5-2+deb13u4
no fix listed

Open the chart page →

6,235
coreinstill-aiOfficialVerified publisher0.1.753 of 15See more

core instill-ai 0.1.75

3 of the 15 container images this version deploys carry CVE-2026-19553.

Container imageDigestPackageFixed in
instill/artifact-backend:b28766ac4a393e601ed
python3.13@3.13.5-2
no fix listed
instill/mgmt-backend:d0933d4ebe12f77a3f9
python3.13@3.13.5-2
no fix listed
instill/model-backend:611f0f2e980125e5ba5
python3.13@3.13.5-2
no fix listed

Open the chart page →

32,776
pretixtechwolf12Verified publisher2026.7.01 of 3See more

pretix techwolf12 2026.7.0

1 of the 3 container images this version deploys carry CVE-2026-19553.

Container imageDigestPackageFixed in
pretix/standalone:2026.7.05df3b7aa852e
python3.13@3.13.5-2+deb13u4
no fix listed

Open the chart page →

11,305
paperless-ngxadnoctemVerified publisher0.4.21 of 5See more

paperless-ngx adnoctem 0.4.2

1 of the 5 container images this version deploys carry CVE-2026-19553.

Container imageDigestPackageFixed in
gotenberg/gotenberg:8.36.087c16b9f3642
python3.13@3.13.5-2+deb13u4
no fix listed

Open the chart page →

23,678
agentareaagentareaVerified publisher0.0.251 of 17See more

agentarea agentarea 0.0.25

1 of the 17 container images this version deploys carry CVE-2026-19553.

Container imageDigestPackageFixed in
agentarea/agentarea-mcp-runner:latestbe4a11f799b2
python3.11@3.11.2-6+deb12u8
no fix listed

Open the chart page →

12,510
hermes-agentankra-chartsVerified publisher0.3.11 of 1See more

hermes-agent ankra-charts 0.3.1

1 of the 1 container images this version deploys carry CVE-2026-19553.

Container imageDigestPackageFixed in
nousresearch/hermes-agent:v2026.8.27e0df6adebddf
python3.13@3.13.5-2+deb13u4
no fix listed

Open the chart page →

6,947
music-assistantbdclark-helm-chartsVerified publisher0.4.131 of 1See more

music-assistant bdclark-helm-charts 0.4.13

1 of the 1 container images this version deploys carry CVE-2026-19553.

Container imageDigestPackageFixed in
ghcr.io/music-assistant/server:2.10.3885872224fa5
python3.13@3.13.5-2+deb13u4
no fix listed

Open the chart page →

4,242
dawarichcogitriVerified publisher2.9.21 of 3See more

dawarich cogitri 2.9.2

1 of the 3 container images this version deploys carry CVE-2026-19553.

Container imageDigestPackageFixed in
freikin/dawarich:1.15.2e58334ca5697
python3.13@3.13.5-2+deb13u5
no fix listed

Open the chart page →

6,600
cosmotech-copilot-apicosmotech-apiVerified publisher0.1.11 of 1See more

cosmotech-copilot-api cosmotech-api 0.1.1

1 of the 1 container images this version deploys carry CVE-2026-19553.

Container imageDigestPackageFixed in
ghcr.io/cosmo-tech/cosmotech-copilot-api:latesta2be95de450c
python3.13@3.13.5-2
no fix listed

Open the chart page →

12,501
dragonfly-stackdragonflyVerified publisher0.1.21 of 7See more

dragonfly-stack dragonfly 0.1.2

1 of the 7 container images this version deploys carry CVE-2026-19553.

Container imageDigestPackageFixed in
dragonflyoss/client:v0.1.82edf3e921f4e0
python3.11@3.11.2-6
no fix listed

Open the chart page →

19,521
enbuildenbuildVerified publisher0.0.501 of 6See more

enbuild enbuild 0.0.50

1 of the 6 container images this version deploys carry CVE-2026-19553.

Container imageDigestPackageFixed in
registry.gitlab.com/enbuild-staging/vivsoft-platform-ui/enbuild-mq-consumer:1.0.310e3cd8c7776d
python3.11@3.11.2-6+deb12u7
no fix listed

Open the chart page →

34,052
roundcubeencircle360-ossVerified publisher0.8.31 of 1See more

roundcube encircle360-oss 0.8.3

1 of the 1 container images this version deploys carry CVE-2026-19553.

Container imageDigestPackageFixed in
roundcube/roundcubemail:1.6.16-apache-nonroot17d9d9580962
python3.13@3.13.5-2+deb13u2
no fix listed

Open the chart page →

6,278
iobrokereugen0.2.61 of 1See more

iobroker eugen 0.2.6

1 of the 1 container images this version deploys carry CVE-2026-19553.

Container imageDigestPackageFixed in
ghcr.io/buanet/iobroker:v9.1.2ca7dc7362968
python3.11@3.11.2-6+deb12u2
no fix listed

Open the chart page →

12,125
valheimgeek-cookbookVerified publisher4.4.21 of 1See more

valheim geek-cookbook 4.4.2

1 of the 1 container images this version deploys carry CVE-2026-19553.

Container imageDigestPackageFixed in
ghcr.io/lloesche/valheim-server:latestc885aa902faf
python3.13@3.13.5-2+deb13u5
no fix listed

Open the chart page →

3,039
castopodh2mVerified publisher1.12.101 of 3See more

castopod h2m 1.12.10

1 of the 3 container images this version deploys carry CVE-2026-19553.

Container imageDigestPackageFixed in
castopod/castopod:1.12.101fd37280cbb2
python3.11@3.11.2-6+deb12u3
no fix listed

Open the chart page →

10,849
harp-proxyharp0.8.11 of 1See more

harp-proxy harp 0.8.1

1 of the 1 container images this version deploys carry CVE-2026-19553.

Container imageDigestPackageFixed in
makersquad/harp-proxy:0.8.1a40dd258c527
python3.11@3.11.2-6+deb12u5
no fix listed

Open the chart page →

6,994
uptime-kumahelmforgeVerified publisher1.5.151 of 1See more

uptime-kuma helmforge 1.5.15

1 of the 1 container images this version deploys carry CVE-2026-19553.

Container imageDigestPackageFixed in
louislam/uptime-kuma:2.5.5c74379ac4509
python3.11@3.11.2-6+deb12u7
no fix listed

Open the chart page →

33,235
iris-webappiris-webapp0.2.41 of 2See more

iris-webapp iris-webapp 0.2.4

1 of the 2 container images this version deploys carry CVE-2026-19553.

Container imageDigestPackageFixed in
ghcr.io/dfir-iris/iriswebapp_app:v2.4.26e59ebde55709
python3.13@3.13.5-2
no fix listed

Open the chart page →

12,951

Container images carrying it

270 by charts deploying them

A fixed version is listed for 0 of the 2 affected packages.

Container imageDigestPackageFixed inUsed by
ghcr.io/sdwbgn/unitycatalog-helm/docker/unitycatalog-ui:0.2.1-5d668c1ed07e7ca098d
python3.11@3.11.2-6+deb12u5
no fix listed
1
ghcr.io/seanmorley15/adventurelog-backend:v0.13.00250d9cb0d74
python3.13@3.13.5-2+deb13u4
no fix listed
1
ghcr.io/tarampampam/video-dl-bot:1.4.36daa2dc7556b
python3.13@3.13.5-2+deb13u4
no fix listed
1
ghcr.io/wgbh-mla/pbcore-util:pr-66e04659a3baa
python3.11@3.11.2-6+deb12u6
no fix listed
1
ghcr.io/wiremind/grafana-pdf-exporter:v1.7dbaa8527bf4c
python3.11@3.11.2-6
no fix listed
1
ghcr.io/wittdennis/homeassistant-otbr:4.2.5282f840612d9
python3.13@3.13.5-2+deb13u5
no fix listed
1
ghcr.io/wizarrrr/wizarr:4.2.0-beta.3d19d886d5090
python3.11@3.11.2-6
no fix listed
1
ghcr.io/wundergraph/cosmo/otelcollector:0.18.15a6fe78d4d15
python3.11@3.11.2-6+deb12u5
no fix listed
1
ghcr.io/zoriya/kyoo_autosync:4.7.1fbba58ddb1a6
python3.11@3.11.2-6+deb12u4
no fix listed
1
ghcr.io/zoriya/kyoo_scanner:4.7.17dc0ee57b628
python3.11@3.11.2-6+deb12u4
no fix listed
1
public.ecr.aws/g4a0y2u8/unifie-store:staging-19925a2057fabc948
python3.11@3.11.2-6
no fix listed
1
public.ecr.aws/jtekt-corporation/image-storage-service:v1.16.17b1493760c716
python3.11@3.11.2-6+deb12u3
no fix listed
1
public.ecr.aws/jtekt-corporation/shinsei-manager:v2.8.15cd62142d6ed
python3.11@3.11.2-6
no fix listed
1
public.ecr.aws/jtekt-corporation/time-series-storage-service:v1.5.1046ef5c9ed50
python3.11@3.11.2-6
no fix listed
1
public.ecr.aws/truefoundrycloud/async-service-distributor:5d48113bc678d694a0c8f8dabb2207c5aa2cfc53f74851ce31f5
python3.11@3.11.2-6
no fix listed
1
quay.io/argoprojlabs/gitops-promoter:v0.42.0105b74aaf5e9
python3.13@3.13.5-2+deb13u4
no fix listed
1
quay.io/yushiwho/api:e1f9d77e0d9b93dbf2b
python3.11@3.11.2-6
no fix listed
1
registry.gitlab.com/enbuild-staging/vivsoft-platform-ui/enbuild-mq-consumer:1.0.310e3cd8c7776d
python3.11@3.11.2-6+deb12u7
no fix listed
1
registry.k8s.io/sig-storage/nfsplugin:v4.13.41eb5a85180a4
python3.11@3.11.2-6+deb12u7
no fix listed
1
registry.k8s.io/sig-storage/nfsplugin:v4.11.0ce5b5ccd5eb0
python3.11@3.11.2-6+deb12u5
no fix listed
1

syft 1.42.1 · advisories as of 1 Oct 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.