CVE-2026-19553

High

Advisory

Published 30 Sept 2026In the index since 1 Oct 2026

Severity: High; worst across findings
CVSS: 7.6; base score, highest
EPSS: —; probability of exploitation
CISA KEV: Not listed; no confirmed exploitation
Charts affected: 275; of 17,966 indexed, latest versions
Container images: 270; deployed by those charts
Fix available: None; affected packages

The matching OSV records carry no description.

Carried by container images the latest versions of 275 of 17,966 indexed charts deploy, on 270 images.

Affected package	Affected versions	Fixed in	Images
python3.11deb	3.11.2-6, 3.11.2-6+deb12u2, 3.11.2-6+deb12u3, 3.11.2-6+deb12u4+4 more	no fix listed	190
python3.13deb	3.13.5-2, 3.13.5-2+deb13u2, 3.13.5-2+deb13u4, 3.13.5-2+deb13u5	no fix listed	80

OSV records: DEBIAN-CVE-2026-19553

Charts affected

275 by stars

Chart

Latest

Affected images

Radar Score

paperlesshp

0.1.2

1 of 5 See more

paperless hp 0.1.2

1 of the 5 container images this version deploys carry CVE-2026-19553.

Container image	Digest	Package	Fixed in
gotenberg/gotenberg :8.34	67097317623a	python3.13@3.13.5-2+deb13u2	no fix listed

Open the chart page →

30,498

hydrahydra

0.9.5

1 of 2 See more

hydra hydra 0.9.5

1 of the 2 container images this version deploys carry CVE-2026-19553.

Container image	Digest	Package	Fixed in
ghcr.io/smarter-project/hydra/isolated-vm :main	4457b79b24cd	python3.11@3.11.2-6+deb12u6	no fix listed

Open the chart page →

9,943

isolated-vmhydra

0.9.4

1 of 1 See more

isolated-vm hydra 0.9.4

1 of the 1 container images this version deploys carry CVE-2026-19553.

Container image	Digest	Package	Fixed in
ghcr.io/smarter-project/hydra/isolated-vm :main	4457b79b24cd	python3.11@3.11.2-6+deb12u6	no fix listed

Open the chart page →

8,516

ibexaibexa

3.11.1

1 of 10 See more

ibexa ibexa 3.11.1

1 of the 10 container images this version deploys carry CVE-2026-19553.

Container image	Digest	Package	Fixed in
boky/postfix :4.4.0	f3f247fd4252	python3.11@3.11.2-6+deb12u5	no fix listed

Open the chart page →

6,468

ilum-unity-catalogilum

0.1.0

1 of 4 See more

ilum-unity-catalog ilum 0.1.0

1 of the 4 container images this version deploys carry CVE-2026-19553.

Container image	Digest	Package	Fixed in
unitycatalog/unitycatalog-ui :main-aadc6fc	3a688197b218	python3.11@3.11.2-6+deb12u6	no fix listed

Open the chart page →

12,791

intelowlintelowl-helm

6.6.1-01-06-2026

1 of 5 See more

intelowl intelowl-helm 6.6.1-01-06-2026

1 of the 5 container images this version deploys carry CVE-2026-19553.

Container image	Digest	Package	Fixed in
intelowlproject/intelowl :v6.6.1	0b22e547ea6b	python3.11@3.11.2-6	no fix listed

Open the chart page →

19,848

inventreeinventree

0.4.30

1 of 2 See more

inventree inventree 0.4.30

1 of the 2 container images this version deploys carry CVE-2026-19553.

Container image	Digest	Package	Fixed in
inventree/inventree :1.5.6	b61e6a7534bf	python3.13@3.13.5-2+deb13u5	no fix listed

Open the chart page →

5,820

tekton-git-listeneritsmethemojo

0.1.1

1 of 1 See more

tekton-git-listener itsmethemojo 0.1.1

1 of the 1 container images this version deploys carry CVE-2026-19553.

Container image	Digest	Package	Fixed in
library/buildpack-deps :scm	d4850751e438	python3.13@3.13.5-2+deb13u5	no fix listed

Open the chart page →

1,913

thehiveittrident-oss

0.1.0

1 of 6 See more

thehive ittrident-oss 0.1.0

1 of the 6 container images this version deploys carry CVE-2026-19553.

Container image	Digest	Package	Fixed in
library/cassandra :4.0	3a4876cc7f18	python3.11@3.11.2-6+deb12u8	no fix listed

Open the chart page →

6,280

deconzjanip81-helm-charts

0.1.1

1 of 1 See more

deconz janip81-helm-charts 0.1.1

1 of the 1 container images this version deploys carry CVE-2026-19553.

Container image	Digest	Package	Fixed in
deconzcommunity/deconz :2.29.2	062de2362641	python3.11@3.11.2-6+deb12u5	no fix listed

Open the chart page →

11,626

jasperjasper

1.0.209

1 of 2 See more

jasper jasper 1.0.209

1 of the 2 container images this version deploys carry CVE-2026-19553.

Container image	Digest	Package	Fixed in
ghcr.io/cjmalloy/jasper :v1.3.282	726a947bb65b	python3.11@3.11.2-6+deb12u8	no fix listed

Open the chart page →

10,174

image-storage-servicejtekt

0.5.1

1 of 4 See more

image-storage-service jtekt 0.5.1

1 of the 4 container images this version deploys carry CVE-2026-19553.

Container image	Digest	Package	Fixed in
public.ecr.aws/jtekt-corporation/image-storage-service :v1.16.17	b1493760c716	python3.11@3.11.2-6+deb12u3	no fix listed

Open the chart page →

24,098

shinsei-managerjtekt

0.2.0

4 of 8 See more

shinsei-manager jtekt 0.2.0

4 of the 8 container images this version deploys carry CVE-2026-19553.

Container image	Digest	Package	Fixed in
moreillon/api-proxy :latest	d7d4a5463525	python3.11@3.11.2-6+deb12u6	no fix listed
moreillon/group-manager :latest	3caa8f710ee0	python3.11@3.11.2-6+deb12u6	no fix listed
moreillon/user-manager :v5.0.2	e1c9bfab5c16	python3.11@3.11.2-6	no fix listed
public.ecr.aws/jtekt-corporation/shinsei-manager :v2.8.1	5cd62142d6ed	python3.11@3.11.2-6	no fix listed

Open the chart page →

68,380

time-series-storagejtekt

0.1.10

1 of 2 See more

time-series-storage jtekt 0.1.10

1 of the 2 container images this version deploys carry CVE-2026-19553.

Container image	Digest	Package	Fixed in
public.ecr.aws/jtekt-corporation/time-series-storage-service :v1.5.1	046ef5c9ed50	python3.11@3.11.2-6	no fix listed

Open the chart page →

17,437

palworld-serverk8s-charts

1.2.1

1 of 1 See more

palworld-server k8s-charts 1.2.1

1 of the 1 container images this version deploys carry CVE-2026-19553.

Container image	Digest	Package	Fixed in
thijsvanloef/palworld-server-docker :v2.5.0	b4ac9ee22483	python3.13@3.13.5-2+deb13u2	no fix listed

Open the chart page →

3,855

jupyterhub-chartk8s-jupyterhub

0.1.0

1 of 1 See more

jupyterhub-chart k8s-jupyterhub 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-19553.

Container image	Digest	Package	Fixed in
truebyteinnovationllp/jupyterhub-k8s :5.5.0	6bf978b96279	python3.13@3.13.5-2+deb13u2	no fix listed

Open the chart page →

1,803

music-assistantkarljorgensen

0.1.3

1 of 1 See more

music-assistant karljorgensen 0.1.3

1 of the 1 container images this version deploys carry CVE-2026-19553.

Container image	Digest	Package	Fixed in
ghcr.io/music-assistant/server :2.8.7	eef3ee7810d0	python3.11@3.11.2-6+deb12u6	no fix listed

Open the chart page →

7,907

kbot-self-hostedkbot-self-hosted

0.1.8

1 of 7 See more

kbot-self-hosted kbot-self-hosted 0.1.8

1 of the 7 container images this version deploys carry CVE-2026-19553.

Container image	Digest	Package	Fixed in
gotenberg/gotenberg :8.30	206a6c708fc6	python3.13@3.13.5-2	no fix listed

Open the chart page →

35,703

cdashkitware

0.20.0

1 of 3 See more

cdash kitware 0.20.0

1 of the 3 container images this version deploys carry CVE-2026-19553.

Container image	Digest	Package	Fixed in
kitware/cdash :v5.4.0	da5abe941506	python3.13@3.13.5-2+deb13u5	no fix listed

Open the chart page →

12,503

finops-database-handlerkrateo

0.5.4

1 of 1 See more

finops-database-handler krateo 0.5.4

1 of the 1 container images this version deploys carry CVE-2026-19553.

Container image	Digest	Package	Fixed in
ghcr.io/krateoplatformops/finops-database-handler :0.5.3	2550427988e3	python3.11@3.11.2-6	no fix listed

Open the chart page →

13,336

finops-webservice-api-mockkrateo

0.1.0

1 of 1 See more

finops-webservice-api-mock krateo 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-19553.

Container image	Digest	Package	Fixed in
ghcr.io/krateoplatformops/finops-webservice-api-mock :0.1.0	0877e9452d14	python3.11@3.11.2-6	no fix listed

Open the chart page →

13,543

oasgen-providerkrateo

0.11.1

1 of 1 See more

oasgen-provider krateo 0.11.1

1 of the 1 container images this version deploys carry CVE-2026-19553.

Container image	Digest	Package	Fixed in
ghcr.io/krateoplatformops/oasgen-provider :0.10.0	656ec60c6407	python3.13@3.13.5-2	no fix listed

Open the chart page →

5,035

kubeflowkromanow94-kubeflow

0.5.1

2 of 30 See more

kubeflow kromanow94-kubeflow 0.5.1

2 of the 30 container images this version deploys carry CVE-2026-19553.

Container image	Digest	Package	Fixed in
library/python :3.7	eedf63967cdb	python3.11@3.11.2-6	no fix listed
gcr.io/ml-pipeline/metadata-writer :2.3.0	9bcfd2abc361	python3.11@3.11.2-6+deb12u3	no fix listed

Open the chart page →

74,698

mindsdbkronkltd

0.1.0

1 of 1 See more

mindsdb kronkltd 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-19553.

Container image	Digest	Package	Fixed in
mindsdb/mindsdb :latest	163011c09299	python3.13@3.13.5-2	no fix listed

Open the chart page →

10,835

uptime-kumakubernetes-homelab-helm-charts

0.1.2

1 of 1 See more

uptime-kuma kubernetes-homelab-helm-charts 0.1.2

1 of the 1 container images this version deploys carry CVE-2026-19553.

Container image	Digest	Package	Fixed in
louislam/uptime-kuma :2.2.1-slim	059b49d64739	python3.11@3.11.2-6+deb12u6	no fix listed

Open the chart page →

7,121

kubiya-runnerkubiya-helm-charts

0.9.4

1 of 9 See more

kubiya-runner kubiya-helm-charts 0.9.4

1 of the 9 container images this version deploys carry CVE-2026-19553.

Container image	Digest	Package	Fixed in
ghcr.io/kubiyabot/agent-manager :v0.4.13	757bdd779345	python3.13@3.13.5-2	no fix listed

Open the chart page →

21,535

uptime-kumalbenicio-community

0.1.1

1 of 1 See more

uptime-kuma lbenicio-community 0.1.1

1 of the 1 container images this version deploys carry CVE-2026-19553.

Container image	Digest	Package	Fixed in
louislam/uptime-kuma :2.3.2	9aeb4e51d038	python3.11@3.11.2-6+deb12u6	no fix listed

Open the chart page →

36,677

linkdinglinkding

0.2.3

1 of 1 See more

linkding linkding 0.2.3

1 of the 1 container images this version deploys carry CVE-2026-19553.

Container image	Digest	Package	Fixed in
sissbruecker/linkding :1.41.0-plus	a222fb777e1f	python3.11@3.11.2-6+deb12u6	no fix listed

Open the chart page →

41,238

uptime-kumaloeken-at-home

2.3.2

1 of 1 See more

uptime-kuma loeken-at-home 2.3.2

1 of the 1 container images this version deploys carry CVE-2026-19553.

Container image	Digest	Package	Fixed in
louislam/uptime-kuma :2.3.2	9aeb4e51d038	python3.11@3.11.2-6+deb12u6	no fix listed

Open the chart page →

36,677

0.1.0

1 of 2 See more

login-test-backend login-test-backend 0.1.0

1 of the 2 container images this version deploys carry CVE-2026-19553.

Container image	Digest	Package	Fixed in
aboogie/login_test_backend :new	9c41a4483ac8	python3.11@3.11.2-6+deb12u2	no fix listed

Open the chart page →

6,887

apica-ascentlogiqai

2.0.4

1 of 19 See more

apica-ascent logiqai 2.0.4

1 of the 19 container images this version deploys carry CVE-2026-19553.

Container image	Digest	Package	Fixed in
logiqai/flash :v3.10.2	65b996bc7bdc	python3.11@3.11.2-6+deb12u3	no fix listed

Open the chart page →

17,472

lsdisklsdisk

2.0.7

1 of 4 See more

lsdisk lsdisk 2.0.7

1 of the 4 container images this version deploys carry CVE-2026-19553.

Container image	Digest	Package	Fixed in
danialnabiyan1382/lsdisk :v2.0.8	f96a7ebf1f42	python3.11@3.11.2-6+deb12u6	no fix listed

Open the chart page →

5,406

mauticmautic-chart

1.0.2

1 of 3 See more

mautic mautic-chart 1.0.2

1 of the 3 container images this version deploys carry CVE-2026-19553.

Container image	Digest	Package	Fixed in
mautic/mautic :7-apache	eb8cc73d97e1	python3.11@3.11.2-6+deb12u7	no fix listed

Open the chart page →

9,174

mcp-homeassistantmcp-helm

0.2.4

1 of 1 See more

mcp-homeassistant mcp-helm 0.2.4

1 of the 1 container images this version deploys carry CVE-2026-19553.

Container image	Digest	Package	Fixed in
voska/hass-mcp :latest	7142a431e2c5	python3.11@3.11.2-6+deb12u5	no fix listed

Open the chart page →

11,372

mcp-kubernetesmcp-helm

0.2.7

1 of 1 See more

mcp-kubernetes mcp-helm 0.2.7

1 of the 1 container images this version deploys carry CVE-2026-19553.

Container image	Digest	Package	Fixed in
mcp/kubernetes :latest	5ffbf7f0a8aa	python3.11@3.11.2-6+deb12u7	no fix listed

Open the chart page →

6,233

mcpomcp-helm

0.2.8

1 of 1 See more

mcpo mcp-helm 0.2.8

1 of the 1 container images this version deploys carry CVE-2026-19553.

Container image	Digest	Package	Fixed in
ghcr.io/open-webui/mcpo :git-39b4867	f06525afac6b	python3.11@3.11.2-6+deb12u6	no fix listed

Open the chart page →

5,000

backstagemcwarman

0.10.10

1 of 2 See more

backstage mcwarman 0.10.10

1 of the 2 container images this version deploys carry CVE-2026-19553.

Container image	Digest	Package	Fixed in
ghcr.io/mcwarman/backstage-sample-app/backend :main	07aba09a594f	python3.11@3.11.2-6+deb12u6	no fix listed

Open the chart page →

10,709

tinymediamanagermedia-servarr

1.6.4

1 of 2 See more

tinymediamanager media-servarr 1.6.4

1 of the 2 container images this version deploys carry CVE-2026-19553.

Container image	Digest	Package	Fixed in
tinymediamanager/tinymediamanager :5.3.3	6f332431a2ae	python3.13@3.13.5-2	no fix listed

Open the chart page →

9,442

mediawikimediawiki

0.4.1

1 of 1 See more

mediawiki mediawiki 0.4.1

1 of the 1 container images this version deploys carry CVE-2026-19553.

Container image	Digest	Package	Fixed in
library/mediawiki :1.43.0	8b19e819f2e1	python3.11@3.11.2-6+deb12u5	no fix listed

Open the chart page →

9,463

mini-blogmini-blog-helm

0.1.0

1 of 3 See more

mini-blog mini-blog-helm 0.1.0

1 of the 3 container images this version deploys carry CVE-2026-19553.

Container image	Digest	Package	Fixed in
beyzkaya/blog-backend :v1.0.1	12a6a3d1c5f9	python3.11@3.11.2-6+deb12u6	no fix listed

Open the chart page →

13,740

MINTmint

8.0.2

1 of 15 See more

MINT mint 8.0.2

1 of the 15 container images this version deploys carry CVE-2026-19553.

Container image	Digest	Package	Fixed in
mintproject/model-catalog-fastapi :7dd88dc5bf1fe6a6d4703ea0a077afee45cb2561	02260d20a21f	python3.11@3.11.2-6+deb12u5	no fix listed

Open the chart page →

116,845

user-manager-mongodbmoreillon

0.6.2

1 of 4 See more

user-manager-mongodb moreillon 0.6.2

1 of the 4 container images this version deploys carry CVE-2026-19553.

Container image	Digest	Package	Fixed in
moreillon/user-manager-mongoose :v5.0.1	d2ee0423b797	python3.11@3.11.2-6	no fix listed

Open the chart page →

27,219

user-manager-neo4jmoreillon

0.9.7

1 of 6 See more

user-manager-neo4j moreillon 0.9.7

1 of the 6 container images this version deploys carry CVE-2026-19553.

Container image	Digest	Package	Fixed in
moreillon/user-manager :v5.0.2	e1c9bfab5c16	python3.11@3.11.2-6	no fix listed

Open the chart page →

32,461

mum-discord-botmum-discord-bot

0.3.7

1 of 1 See more

mum-discord-bot mum-discord-bot 0.3.7

1 of the 1 container images this version deploys carry CVE-2026-19553.

Container image	Digest	Package	Fixed in
ghcr.io/drewburr-labs/mum-discord-bot :3.1.2	6e82914e1051	python3.11@3.11.2-6	no fix listed

Open the chart page →

14,501

smilencsa

1.1.0

4 of 23 See more

smile ncsa 1.1.0

4 of the 23 container images this version deploys carry CVE-2026-19553.

Container image	Digest	Package	Fixed in
socialmediamacroscope/histogram :0.1.2	6418f9bdb4d2	python3.11@3.11.2-6	no fix listed
socialmediamacroscope/network_analysis :0.1.3	b351c21422e6	python3.11@3.11.2-6	no fix listed
socialmediamacroscope/preprocessing :0.1.3	ca863306314b	python3.11@3.11.2-6	no fix listed
socialmediamacroscope/topic_modeling :0.1.3	fa490acac2f8	python3.11@3.11.2-6	no fix listed

Open the chart page →

288,879

uptime-kumancsa

1.7.3

1 of 1 See more

uptime-kuma ncsa 1.7.3

1 of the 1 container images this version deploys carry CVE-2026-19553.

Container image	Digest	Package	Fixed in
louislam/uptime-kuma :2.5.5	c74379ac4509	python3.11@3.11.2-6+deb12u7	no fix listed

Open the chart page →

33,235

node-appnode-app-lili

1.0.0

1 of 1 See more

node-app node-app-lili 1.0.0

1 of the 1 container images this version deploys carry CVE-2026-19553.

Container image	Digest	Package	Fixed in
laly9999/node-app :1	dd0e503913e1	python3.11@3.11.2-6+deb12u6	no fix listed

Open the chart page →

11,067

node-debug-dashboardnode-debug-dashboard

0.3.2

1 of 1 See more

node-debug-dashboard node-debug-dashboard 0.3.2

1 of the 1 container images this version deploys carry CVE-2026-19553.

Container image	Digest	Package	Fixed in
ghcr.io/samr037/node-debug-dashboard :0.3.0	c79b2e64a211	python3.11@3.11.2-6+deb12u8	no fix listed

Open the chart page →

7,624

notes-admin-front-helm-chartnotesprojectchart

0.1.0

1 of 1 See more

notes-admin-front-helm-chart notesprojectchart 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-19553.

Container image	Digest	Package	Fixed in
vlebediantsev/notes-admin-front :latest	007c6670ff48	python3.11@3.11.2-6	no fix listed

Open the chart page →

16,000

notes-project-fromt-helm-chartnotesprojectchart

0.1.0

1 of 1 See more

notes-project-fromt-helm-chart notesprojectchart 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-19553.

Container image	Digest	Package	Fixed in
vlebediantsev/notes-project-front :latest	945675fd2636	python3.11@3.11.2-6	no fix listed

Open the chart page →

16,076

Container images carrying it

270 by charts deploying them

A fixed version is listed for 0 of the 2 affected packages.

Container image	Digest	Package	Fixed in	Used by
ghcr.io/sdwbgn/unitycatalog-helm/docker/unitycatalog-ui :0.2.1-5d668c1	ed07e7ca098d	python3.11@3.11.2-6+deb12u5	no fix listed	1
ghcr.io/seanmorley15/adventurelog-backend :v0.13.0	0250d9cb0d74	python3.13@3.13.5-2+deb13u4	no fix listed	1
ghcr.io/tarampampam/video-dl-bot :1.4.3	6daa2dc7556b	python3.13@3.13.5-2+deb13u4	no fix listed	1
ghcr.io/wgbh-mla/pbcore-util :pr-6	6e04659a3baa	python3.11@3.11.2-6+deb12u6	no fix listed	1
ghcr.io/wiremind/grafana-pdf-exporter :v1.7	dbaa8527bf4c	python3.11@3.11.2-6	no fix listed	1
ghcr.io/wittdennis/homeassistant-otbr :4.2.5	282f840612d9	python3.13@3.13.5-2+deb13u5	no fix listed	1
ghcr.io/wizarrrr/wizarr :4.2.0-beta.3	d19d886d5090	python3.11@3.11.2-6	no fix listed	1
ghcr.io/wundergraph/cosmo/otelcollector :0.18.1	5a6fe78d4d15	python3.11@3.11.2-6+deb12u5	no fix listed	1
ghcr.io/zoriya/kyoo_autosync :4.7.1	fbba58ddb1a6	python3.11@3.11.2-6+deb12u4	no fix listed	1
ghcr.io/zoriya/kyoo_scanner :4.7.1	7dc0ee57b628	python3.11@3.11.2-6+deb12u4	no fix listed	1
public.ecr.aws/g4a0y2u8/unifie-store :staging-19925	a2057fabc948	python3.11@3.11.2-6	no fix listed	1
public.ecr.aws/jtekt-corporation/image-storage-service :v1.16.17	b1493760c716	python3.11@3.11.2-6+deb12u3	no fix listed	1
public.ecr.aws/jtekt-corporation/shinsei-manager :v2.8.1	5cd62142d6ed	python3.11@3.11.2-6	no fix listed	1
public.ecr.aws/jtekt-corporation/time-series-storage-service :v1.5.1	046ef5c9ed50	python3.11@3.11.2-6	no fix listed	1
public.ecr.aws/truefoundrycloud/async-service-distributor :5d48113bc678d694a0c8f8dabb2207c5aa2cfc53	f74851ce31f5	python3.11@3.11.2-6	no fix listed	1
quay.io/argoprojlabs/gitops-promoter :v0.42.0	105b74aaf5e9	python3.13@3.13.5-2+deb13u4	no fix listed	1
quay.io/yushiwho/api :e1f9d77	e0d9b93dbf2b	python3.11@3.11.2-6	no fix listed	1
registry.gitlab.com/enbuild-staging/vivsoft-platform-ui/enbuild-mq-consumer :1.0.31	0e3cd8c7776d	python3.11@3.11.2-6+deb12u7	no fix listed	1
registry.k8s.io/sig-storage/nfsplugin :v4.13.4	1eb5a85180a4	python3.11@3.11.2-6+deb12u7	no fix listed	1
registry.k8s.io/sig-storage/nfsplugin :v4.11.0	ce5b5ccd5eb0	python3.11@3.11.2-6+deb12u5	no fix listed	1