StackRadar

CVE-2026-21948

Medium

Advisory

Published 20 Jan 2026In the index since 6 Sept 2026
Severity
Medium
worst across findings
CVSS
4.9
base score, highest
EPSS
0.004
29th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
54
of 17,781 indexed, latest versions
Container images
55
deployed by those charts
Fix available
1 of 4
affected packages

The matching OSV records carry no description.

Carried by container images the latest versions of 54 of 17,781 indexed charts deploy, on 55 images.

Affected packageAffected versionsFixed inImages
mysql-8.0deb8.0.23-0ubuntu0.20.04.1, 8.0.25-0ubuntu0.20.04.1, 8.0.26-0ubuntu0.20.04.2, 8.0.26-0ubuntu0.20.04.3+23 more8.0.45-0ubuntu0.20.04.1+esm2, 8.0.45-0ubuntu0.22.04.1, 8.0.45-0ubuntu0.24.04.147
mysql-5.7deb5.7.20-0ubuntu0.16.04.1, 5.7.29-0ubuntu0.18.04.1, 5.7.32-0ubuntu0.18.04.1, 5.7.33-0ubuntu0.18.04.1+2 moreno fix listed6
mysql-5.5deb5.5.60-0ubuntu0.14.04.1, 5.5.62-0ubuntu0.14.04.1no fix listed2
mariadb-10.3deb1:10.3.34-0ubuntu0.20.04.1no fix listed1
OSV records
UBUNTU-CVE-2026-21948
Also known as
USN-7994-1, USN-8006-1

Charts affected

54 by stars
ChartLatestAffected imagesRadar Score
rundecksvtech-public-helm-charts1.0.01 of 2See more

rundeck svtech-public-helm-charts 1.0.0

1 of the 2 container images this version deploys carry CVE-2026-21948.

Container imageDigestPackageFixed in
svtechnmaa/svtech_rundeck:v1.2.26e368ace0977
mysql-8.0@8.0.36-0ubuntu0.20.04.1
8.0.45-0ubuntu0.20.04.1+esm2

Open the chart page →

18,756
opencloudunxwaresVerified publisher0.2.31 of 13See more

opencloud unxwares 0.2.3

1 of the 13 container images this version deploys carry CVE-2026-21948.

Container imageDigestPackageFixed in
apache/tika:2.9.2.1-fullae0b86d3c4d0
mysql-8.0@8.0.36-2ubuntu3
8.0.45-0ubuntu0.24.04.1

Open the chart page →

45,239
twenty-crmvictorlane0.0.11 of 3See more

twenty-crm victorlane 0.0.1

1 of the 3 container images this version deploys carry CVE-2026-21948.

Container imageDigestPackageFixed in
twentycrm/twenty-postgres-spilo:latest2f78405a78be
mysql-8.0@8.0.41-0ubuntu0.22.04.1
8.0.45-0ubuntu0.22.04.1

Open the chart page →

13,459
wbaas-backupwbstack0.1.01 of 1See more

wbaas-backup wbstack 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-21948.

Container imageDigestPackageFixed in
ghcr.io/wmde/wbaas-backup:v0.1.78e6a9516eac0
mysql-5.7@5.7.38-0ubuntu0.18.04.1
no fix listed

Open the chart page →

9,743

Container images carrying it

55 by charts deploying them

A fixed version is listed for 1 of the 4 affected packages.

Container imageDigestPackageFixed inUsed by
apache/tika:2.9.2.1-fullae0b86d3c4d0
mysql-8.0@8.0.36-2ubuntu3
8.0.45-0ubuntu0.24.04.1
2
freeradius/freeradius-server:3.0.2121c8bfa904d8
mysql-5.7@5.7.29-0ubuntu0.18.04.1
no fix listed
2
kurento/kurento-media-server:latest03c0d34d0828
mysql-8.0@8.0.44-0ubuntu0.24.04.1
8.0.45-0ubuntu0.24.04.1
2
library/mariadb:10.8.30abf60f81588
mysql-8.0@8.0.30-0ubuntu0.22.04.1
8.0.45-0ubuntu0.22.04.1
2
ghcr.io/codingducksrl/laravel:8.15be52524664c
mysql-8.0@8.0.31-0ubuntu0.22.04.1
8.0.45-0ubuntu0.22.04.1
2
ghcr.io/linuxserver/openvpn-as:version-2.8.6-916f8e7d-ubuntu184ee0764310e7
mysql-5.7@5.7.32-0ubuntu0.18.04.1
no fix listed
2
arunvelsriram/utils:latest655ad18fd8d6
mysql-8.0@8.0.42-0ubuntu0.24.04.2
8.0.45-0ubuntu0.24.04.1
1
chetangautamm/repo:Opensips_Buildb4b94155ff5a
mysql-5.5@5.5.62-0ubuntu0.14.04.1
no fix listed
1
datamate/seafile-professional:11.0.202dd66b722464
mysql-8.0@8.0.43-0ubuntu0.22.04.1
8.0.45-0ubuntu0.22.04.1
1
engrmth/bnkr:2.1.06d8464e6f0e8
mysql-8.0@8.0.23-0ubuntu0.20.04.1
8.0.45-0ubuntu0.20.04.1+esm2
1
fiware/biz-ecosystem-charging-backend:11.7.029456835bb2c
mysql-8.0@8.0.42-0ubuntu0.20.04.1
8.0.45-0ubuntu0.20.04.1+esm2
1
freeradius/freeradius-server:3.2.8af6fd34a5b78
mysql-8.0@8.0.43-0ubuntu0.22.04.1
8.0.45-0ubuntu0.22.04.1
1
galaxy/galaxy-stable:v18.018e577a626dfd
mysql-5.5@5.5.60-0ubuntu0.14.04.1
no fix listed
1
gethue/hue:4.11.011b649636e68
mysql-8.0@8.0.31-0ubuntu0.20.04.2
8.0.45-0ubuntu0.20.04.1+esm2
1
gethue/hue:4.10.05702b2c37ff9
mysql-5.7@5.7.34-0ubuntu0.18.04.1
no fix listed
1
gethue/hue:latest7d5c1b9f8a79
mysql-8.0@8.0.42-0ubuntu0.22.04.1
8.0.45-0ubuntu0.22.04.1
1
huginn/huginn-single-process:4d17829cf6b15b004ad3f4be196303dca4944810c794eddc7b47
mysql-5.7@5.7.33-0ubuntu0.18.04.1
no fix listed
1
library/mariadb:10.7.307e06f2e7ae9
mysql-8.0@8.0.28-0ubuntu0.20.04.3
8.0.45-0ubuntu0.20.04.1+esm2
1
library/mariadb:10.8.2-focal490f01279be1
mysql-8.0@8.0.28-0ubuntu0.20.04.3
8.0.45-0ubuntu0.20.04.1+esm2
1
library/mariadb:10.10.2bfc25a68e113
mysql-8.0@8.0.32-0ubuntu0.22.04.2
8.0.45-0ubuntu0.22.04.1
1
library/mariadb:10.9.4fbb8456ebdb1
mysql-8.0@8.0.32-0ubuntu0.22.04.2
8.0.45-0ubuntu0.22.04.1
1
mediagis/nominatim:3.7c15e941485ef
mysql-8.0@8.0.30-0ubuntu0.20.04.2
8.0.45-0ubuntu0.20.04.1+esm2
1
mediagis/nominatim:4.2d0eae7b51374
mysql-8.0@8.0.36-0ubuntu0.22.04.1
8.0.45-0ubuntu0.22.04.1
1
mintproject/graphql-engine:305c0dbeba1878eafe348f21fc300fbfc017d9dc83aade2c1855
mariadb-10.3@1:10.3.34-0ubuntu0.20.04.1
mysql-8.0@8.0.29-0ubuntu0.20.04.3
no fix listed
8.0.45-0ubuntu0.20.04.1+esm2
1
oled01/db-backup:0.1.06302fd2b5333
mysql-8.0@8.0.31-0ubuntu0.22.04.1
8.0.45-0ubuntu0.22.04.1
1
openkm/openkm-ce:6.3.113bc465a7461b
mysql-8.0@8.0.30-0ubuntu0.20.04.2
8.0.45-0ubuntu0.20.04.1+esm2
1
ptthanh1511/freeradius-server:3.0.26-netdebug5741cbde85ab
mysql-8.0@8.0.30-0ubuntu0.20.04.2
8.0.45-0ubuntu0.20.04.1+esm2
1
seafileltd/seafile-mc:9.0.106693911bcc40
mysql-8.0@8.0.31-0ubuntu0.20.04.2
8.0.45-0ubuntu0.20.04.1+esm2
1
seafileltd/seafile-mc:10.0.170628f29c663
mysql-8.0@8.0.33-0ubuntu0.20.04.2
8.0.45-0ubuntu0.20.04.1+esm2
1
seafileltd/seafile-mc:9.0.97ac833196f60
mysql-8.0@8.0.30-0ubuntu0.20.04.2
8.0.45-0ubuntu0.20.04.1+esm2
1
seafileltd/seafile-mc:11.0.12d0c66e4621bd
mysql-8.0@8.0.39-0ubuntu0.22.04.1
8.0.45-0ubuntu0.22.04.1
1
seafileltd/seafile-mc:8.0.7ed0fcda5e6a9
mysql-8.0@8.0.26-0ubuntu0.20.04.2
8.0.45-0ubuntu0.20.04.1+esm2
1
snipe/snipe-it:v8.3.1141ebf2386fe
mysql-8.0@8.0.43-0ubuntu0.24.04.1
8.0.45-0ubuntu0.24.04.1
1
snipe/snipe-it:v6.0.1455fb7636a98c
mysql-8.0@8.0.31-0ubuntu0.20.04.1
8.0.45-0ubuntu0.20.04.1+esm2
1
someblackmagic/k8s-testing-multitool:v0.1.06eca64b6b440
mysql-8.0@8.0.29-0ubuntu0.20.04.3
8.0.45-0ubuntu0.20.04.1+esm2
1
svtechnmaa/svtech_debuger:v1.0.3a934ffd63d25
mysql-8.0@8.0.36-0ubuntu0.22.04.1
8.0.45-0ubuntu0.22.04.1
1
svtechnmaa/svtech_rundeck:v1.2.26e368ace0977
mysql-8.0@8.0.36-0ubuntu0.20.04.1
8.0.45-0ubuntu0.20.04.1+esm2
1
timescale/timescaledb-ha:pg15-latesta8e3322e1cf9
mysql-8.0@8.0.32-0ubuntu0.22.04.2
8.0.45-0ubuntu0.22.04.1
1
timescale/timescaledb-ha:pg14.6-ts2.9.1-p1cdb9ae118899
mysql-8.0@8.0.31-0ubuntu0.22.04.1
8.0.45-0ubuntu0.22.04.1
1
timescale/timescaledb-ha:pg17.2-ts2.18.2e8d0a9cc3db5
mysql-8.0@8.0.41-0ubuntu0.22.04.1
8.0.45-0ubuntu0.22.04.1
1
timescale/timescaledb-ha:pg14-ts2.6-latested719c0cd19d
mysql-8.0@8.0.29-0ubuntu0.22.04.2
8.0.45-0ubuntu0.22.04.1
1
tpdock/freeradius:2.2.93da600c95a49
mysql-5.7@5.7.20-0ubuntu0.16.04.1
no fix listed
1
twentycrm/twenty-postgres-spilo:latest2f78405a78be
mysql-8.0@8.0.41-0ubuntu0.22.04.1
8.0.45-0ubuntu0.22.04.1
1
zabbix/zabbix-server-mysql:ubuntu-6.4-latest55d074b6b031
mysql-8.0@8.0.40-0ubuntu0.24.04.1
8.0.45-0ubuntu0.24.04.1
1
zabbix/zabbix-server-pgsql:ubuntu-5.4.66c946b1f45cd
mysql-8.0@8.0.26-0ubuntu0.20.04.3
8.0.45-0ubuntu0.20.04.1+esm2
1
zabbix/zabbix-web-nginx-mysql:ubuntu-6.4-latest0e5f69c4c54e
mysql-8.0@8.0.40-0ubuntu0.24.04.1
8.0.45-0ubuntu0.24.04.1
1
ghcr.io/grycap/im:latest06a16d4f279f
mysql-8.0@8.0.43-0ubuntu0.24.04.2
8.0.45-0ubuntu0.24.04.1
1
ghcr.io/k8s-at-home/apache-musicindex:v1.4.1-2c9bd82dc5fda
mysql-8.0@8.0.30-0ubuntu0.20.04.2
8.0.45-0ubuntu0.20.04.1+esm2
1
ghcr.io/k8s-at-home/network-ups-tools:v2.7.4-2479-g86a32237cbd5d4cc1245
mysql-8.0@8.0.25-0ubuntu0.20.04.1
8.0.45-0ubuntu0.20.04.1+esm2
1
ghcr.io/kvaps/opennebula:v5.12.0.4-1e28e0e7de11b
mysql-8.0@8.0.26-0ubuntu0.20.04.2
8.0.45-0ubuntu0.20.04.1+esm2
1

syft 1.42.1 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.