StackRadar

CVE-2026-22185

Medium

Advisory

Published 7 Jan 2026In the index since 5 Sept 2026
Severity
Medium
worst across findings
CVSS
4.6
base score, highest
EPSS
0.001
4th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
1,080
of 17,787 indexed, latest versions
Container images
877
deployed by those charts
Fix available
None
affected packages

The matching OSV records carry no description.

Carried by container images the latest versions of 1,080 of 17,787 indexed charts deploy, on 877 images.

Affected packageAffected versionsFixed inImages
openldapdeb2.5.13+dfsg-5, 2.6.10+dfsg-1, 2.6.10+dfsg-1+b1, 2.6.10+dfsg-1+dhi1no fix listed753
lmdbdeb0.9.17-3, 0.9.21-1ubuntu0.1, 0.9.24-1, 0.9.24-1build2+3 moreno fix listed152
OSV records
DEBIAN-CVE-2026-22185UBUNTU-CVE-2026-22185

Charts affected

1,080 by stars
ChartLatestAffected imagesRadar Score
pgcatdasmeta0.1.31 of 2See more

pgcat dasmeta 0.1.3

1 of the 2 container images this version deploys carry CVE-2026-22185.

Container imageDigestPackageFixed in
ghcr.io/postgresml/pgcat:v1.2.0627761f6dcbc
openldap@2.5.13+dfsg-5
no fix listed

Open the chart page →

2,924
proxysqldasmeta1.2.31 of 1See more

proxysql dasmeta 1.2.3

1 of the 1 container images this version deploys carry CVE-2026-22185.

Container imageDigestPackageFixed in
proxysql/proxysql:2.7.3a4d6c35c2949
openldap@2.5.13+dfsg-5
no fix listed

Open the chart page →

2,749
redashdasmeta0.1.01 of 1See more

redash dasmeta 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-22185.

Container imageDigestPackageFixed in
redash/redash:26.3.0c5c9148f5c38
openldap@2.5.13+dfsg-5
no fix listed

Open the chart page →

4,914
sentry-relaydasmeta0.1.21 of 1See more

sentry-relay dasmeta 0.1.2

1 of the 1 container images this version deploys carry CVE-2026-22185.

Container imageDigestPackageFixed in
getsentry/relay:24.10.0ba7bf9163219
openldap@2.5.13+dfsg-5
no fix listed

Open the chart page →

3,401
datacube-dashboarddatacube-charts0.5.101 of 2See more

datacube-dashboard datacube-charts 0.5.10

1 of the 2 container images this version deploys carry CVE-2026-22185.

Container imageDigestPackageFixed in
library/postgres:latest4ef4dbc939d6
openldap@2.6.10+dfsg-1
no fix listed

Open the chart page →

1,638
eg-edge-stackdatawire0.0.11 of 7See more

eg-edge-stack datawire 0.0.1

1 of the 7 container images this version deploys carry CVE-2026-22185.

Container imageDigestPackageFixed in
istio/kubectl:1.5.10dbb7726d1bf0
lmdb@0.9.21-1ubuntu0.1
no fix listed

Open the chart page →

15,781
db-connection-testdb-connection-testVerified publisher0.1.01 of 1See more

db-connection-test db-connection-test 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-22185.

Container imageDigestPackageFixed in
felipecs8/app-db-connection-test:v129e06c9c6385
openldap@2.5.13+dfsg-5
no fix listed

Open the chart page →

10,116
linkdingdeimosfr-charts1.0.31 of 1See more

linkding deimosfr-charts 1.0.3

1 of the 1 container images this version deploys carry CVE-2026-22185.

Container imageDigestPackageFixed in
sissbruecker/linkding:1.35.00c5dddf0b37c
openldap@2.5.13+dfsg-5
no fix listed

Open the chart page →

5,656
technitiumdeimosfr-charts15.4.01 of 1See more

technitium deimosfr-charts 15.4.0

1 of the 1 container images this version deploys carry CVE-2026-22185.

Container imageDigestPackageFixed in
technitium/dns-server:15.4.0df7d90ef0f7b
lmdb@0.9.31-1build1
no fix listed

Open the chart page →

1,225
supersetdeliveryheroVerified publisher1.1.31 of 1See more

superset deliveryhero 1.1.3

1 of the 1 container images this version deploys carry CVE-2026-22185.

Container imageDigestPackageFixed in
apache/superset:latest16b50bbef664
openldap@2.5.13+dfsg-5
no fix listed

Open the chart page →

2,214
my-helm-chartdemohelm20.1.01 of 1See more

my-helm-chart demohelm2 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-22185.

Container imageDigestPackageFixed in
library/nginx:latest05b8cb60c354
openldap@2.6.10+dfsg-1
no fix listed

Open the chart page →

1,839
challengedeneme0.1.01 of 2See more

challenge deneme 0.1.0

1 of the 2 container images this version deploys carry CVE-2026-22185.

Container imageDigestPackageFixed in
library/postgres:latest4ef4dbc939d6
openldap@2.6.10+dfsg-1
no fix listed

Open the chart page →

2,699
seafilederp3.2.01 of 1See more

seafile derp 3.2.0

1 of the 1 container images this version deploys carry CVE-2026-22185.

Container imageDigestPackageFixed in
seafileltd/seafile-mc:10.0.170628f29c663
lmdb@0.9.24-1
no fix listed

Open the chart page →

14,910
ai-agentdevtron0.0.11 of 1See more

ai-agent devtron 0.0.1

1 of the 1 container images this version deploys carry CVE-2026-22185.

Container imageDigestPackageFixed in
quay.io/devtron/ai-agent:0.0.16545dac92173
openldap@2.5.13+dfsg-5
no fix listed

Open the chart page →

9,152
argocd-certificate-refreshdevtron0.10.81 of 1See more

argocd-certificate-refresh devtron 0.10.8

1 of the 1 container images this version deploys carry CVE-2026-22185.

Container imageDigestPackageFixed in
quay.io/devtron/argocd-cert-refresh:v102b6db27eaf3d
lmdb@0.9.24-1build2
no fix listed

Open the chart page →

12,999
devtron-enterprisedevtron48.0.03 of 28See more

devtron-enterprise devtron 48.0.0

3 of the 28 container images this version deploys carry CVE-2026-22185.

Container imageDigestPackageFixed in
quay.io/devtron/devtron-utils:dup-chart-repo-v1.1.095d6f0e05636
openldap@2.5.13+dfsg-5
no fix listed
quay.io/devtron/notifier:9804331c-372-39294709c7da19c5a
openldap@2.5.13+dfsg-5
no fix listed
quay.io/devtron/postgres:14.91b594392f7cb
openldap@2.5.13+dfsg-5
no fix listed

Open the chart page →

66,542
migration-incluster-cddevtron0.10.01 of 1See more

migration-incluster-cd devtron 0.10.0

1 of the 1 container images this version deploys carry CVE-2026-22185.

Container imageDigestPackageFixed in
library/postgres:122f2a8c2a7d10
openldap@2.5.13+dfsg-5
no fix listed

Open the chart page →

3,699
ai-agentdevtron-labs0.0.11 of 1See more

ai-agent devtron-labs 0.0.1

1 of the 1 container images this version deploys carry CVE-2026-22185.

Container imageDigestPackageFixed in
quay.io/devtron/ai-agent:0.0.16545dac92173
openldap@2.5.13+dfsg-5
no fix listed

Open the chart page →

9,152
argocd-certificate-refreshdevtron-labs0.10.81 of 1See more

argocd-certificate-refresh devtron-labs 0.10.8

1 of the 1 container images this version deploys carry CVE-2026-22185.

Container imageDigestPackageFixed in
quay.io/devtron/argocd-cert-refresh:v102b6db27eaf3d
lmdb@0.9.24-1build2
no fix listed

Open the chart page →

12,999
devtron-enterprisedevtron-labs48.0.03 of 28See more

devtron-enterprise devtron-labs 48.0.0

3 of the 28 container images this version deploys carry CVE-2026-22185.

Container imageDigestPackageFixed in
quay.io/devtron/devtron-utils:dup-chart-repo-v1.1.095d6f0e05636
openldap@2.5.13+dfsg-5
no fix listed
quay.io/devtron/notifier:9804331c-372-39294709c7da19c5a
openldap@2.5.13+dfsg-5
no fix listed
quay.io/devtron/postgres:14.91b594392f7cb
openldap@2.5.13+dfsg-5
no fix listed

Open the chart page →

66,542
devtron-operatordevtron-labs0.23.32 of 11See more

devtron-operator devtron-labs 0.23.3

2 of the 11 container images this version deploys carry CVE-2026-22185.

Container imageDigestPackageFixed in
quay.io/devtron/devtron-utils:dup-chart-repo-v1.1.095d6f0e05636
openldap@2.5.13+dfsg-5
no fix listed
quay.io/devtron/postgres:14.91b594392f7cb
openldap@2.5.13+dfsg-5
no fix listed

Open the chart page →

31,447
migration-incluster-cddevtron-labs0.10.01 of 1See more

migration-incluster-cd devtron-labs 0.10.0

1 of the 1 container images this version deploys carry CVE-2026-22185.

Container imageDigestPackageFixed in
library/postgres:122f2a8c2a7d10
openldap@2.5.13+dfsg-5
no fix listed

Open the chart page →

3,699
dial-admindialVerified publisher0.18.01 of 3See more

dial-admin dial 0.18.0

1 of the 3 container images this version deploys carry CVE-2026-22185.

Container imageDigestPackageFixed in
bitnamilegacy/postgresql:17.5.0-debian-12-r1285198aae0aed
openldap@2.5.13+dfsg-5
no fix listed

Open the chart page →

4,053
difydify1.0.01 of 4See more

dify dify 1.0.0

1 of the 4 container images this version deploys carry CVE-2026-22185.

Container imageDigestPackageFixed in
langgenius/dify-api:1.0.0066035f93856
openldap@2.5.13+dfsg-5
no fix listed

Open the chart page →

19,063
adventurelogdjjudas21Verified publisher0.1.11 of 3See more

adventurelog djjudas21 0.1.1

1 of the 3 container images this version deploys carry CVE-2026-22185.

Container imageDigestPackageFixed in
ghcr.io/seanmorley15/adventurelog-backend:v0.13.00250d9cb0d74
openldap@2.6.10+dfsg-1
no fix listed

Open the chart page →

7,480
domainmoddjjudas21Verified publisher1.0.01 of 1See more

domainmod djjudas21 1.0.0

1 of the 1 container images this version deploys carry CVE-2026-22185.

Container imageDigestPackageFixed in
domainmod/domainmod:4.23.04017bfe4c597
openldap@2.5.13+dfsg-5
no fix listed

Open the chart page →

7,167
ownclouddjjudas21Verified publisher0.3.231 of 3See more

owncloud djjudas21 0.3.23

1 of the 3 container images this version deploys carry CVE-2026-22185.

Container imageDigestPackageFixed in
owncloud/server:10.16.3b3f9efdcd7f7
lmdb@0.9.24-1build2
no fix listed

Open the chart page →

10,129
photoprismdjjudas21Verified publisher99.99.991 of 1See more

photoprism djjudas21 99.99.99

1 of the 1 container images this version deploys carry CVE-2026-22185.

Container imageDigestPackageFixed in
photoprism/photoprism:240711-cefc6fd632ca74
lmdb@0.9.31-1build1
no fix listed

Open the chart page →

17,053
truecommanddjjudas21Verified publisher0.1.01 of 1See more

truecommand djjudas21 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-22185.

Container imageDigestPackageFixed in
ixsystems/truecommand:3.2.019c218455cd2
lmdb@0.9.31-1+b2
openldap@2.6.10+dfsg-1
no fix listed
no fix listed

Open the chart page →

5,144
webtreesdjjudas21Verified publisher3.0.01 of 1See more

webtrees djjudas21 3.0.0

1 of the 1 container images this version deploys carry CVE-2026-22185.

Container imageDigestPackageFixed in
ghcr.io/nathanvaughn/webtrees:2.2.6034151b61a80
openldap@2.6.10+dfsg-1
no fix listed

Open the chart page →

5,885
wizarrdjjudas21Verified publisher0.1.51 of 1See more

wizarr djjudas21 0.1.5

1 of the 1 container images this version deploys carry CVE-2026-22185.

Container imageDigestPackageFixed in
ghcr.io/wizarrrr/wizarr:4.2.0-beta.3d19d886d5090
openldap@2.5.13+dfsg-5
no fix listed

Open the chart page →

13,031
dnation-kubernetes-jsonnet-translatordnationcloud2.0.11 of 1See more

dnation-kubernetes-jsonnet-translator dnationcloud 2.0.1

1 of the 1 container images this version deploys carry CVE-2026-22185.

Container imageDigestPackageFixed in
dnationcloud/kubernetes-jsonnet-translator:2.0.178fed4f3c130
openldap@2.5.13+dfsg-5
no fix listed

Open the chart page →

3,626
dnation-kubernetes-monitoringdnationcloud3.0.21 of 1See more

dnation-kubernetes-monitoring dnationcloud 3.0.2

1 of the 1 container images this version deploys carry CVE-2026-22185.

Container imageDigestPackageFixed in
dnationcloud/kubernetes-jsonnet-translator:2.0.178fed4f3c130
openldap@2.5.13+dfsg-5
no fix listed

Open the chart page →

3,626
dnation-kubernetes-monitoring-stackdnationcloud4.0.21 of 17See more

dnation-kubernetes-monitoring-stack dnationcloud 4.0.2

1 of the 17 container images this version deploys carry CVE-2026-22185.

Container imageDigestPackageFixed in
dnationcloud/kubernetes-jsonnet-translator:2.0.178fed4f3c130
openldap@2.5.13+dfsg-5
no fix listed

Open the chart page →

21,455
dominodomino-iisasVerified publisher0.3.12 of 3See more

domino domino-iisas 0.3.1

2 of the 3 container images this version deploys carry CVE-2026-22185.

Container imageDigestPackageFixed in
library/postgres:134689940c6838
openldap@2.6.10+dfsg-1
no fix listed
ghcr.io/iisas/domino-frontend:k8s8e53861be292
openldap@2.5.13+dfsg-5
no fix listed

Open the chart page →

10,307
healthchecksdoubanVerified publisher1.0.101 of 2See more

healthchecks douban 1.0.10

1 of the 2 container images this version deploys carry CVE-2026-22185.

Container imageDigestPackageFixed in
healthchecks/healthchecks:latestaa08a61b0dcf
openldap@2.6.10+dfsg-1
no fix listed

Open the chart page →

1,721
duckdb-uiduckdb-ui0.5.21 of 1See more

duckdb-ui duckdb-ui 0.5.2

1 of the 1 container images this version deploys carry CVE-2026-22185.

Container imageDigestPackageFixed in
ghcr.io/beslovas/duckdb-ui:1.3.272f35584026d
openldap@2.5.13+dfsg-5
no fix listed

Open the chart page →

4,283
postgres-backup-localduck-helm0.1.51 of 1See more

postgres-backup-local duck-helm 0.1.5

1 of the 1 container images this version deploys carry CVE-2026-22185.

Container imageDigestPackageFixed in
prodrigestivill/postgres-backup-local:latestf70742ebe42b
openldap@2.6.10+dfsg-1
no fix listed

Open the chart page →

3,426
rundeckdwardu-helm-charts0.3.41 of 2See more

rundeck dwardu-helm-charts 0.3.4

1 of the 2 container images this version deploys carry CVE-2026-22185.

Container imageDigestPackageFixed in
library/nginx:stabled5792f71a949
openldap@2.6.10+dfsg-1
no fix listed

Open the chart page →

19,820
arbitrumdysnixVerified publisher0.1.11 of 1See more

arbitrum dysnix 0.1.1

1 of the 1 container images this version deploys carry CVE-2026-22185.

Container imageDigestPackageFixed in
offchainlabs/nitro-node:v3.1.0-7d1d84ce95865866129
lmdb@0.9.24-1
openldap@2.5.13+dfsg-5
no fix listed
no fix listed

Open the chart page →

9,251
idmeclipse-aeriosVerified publisher2.0.01 of 2See more

idm eclipse-aerios 2.0.0

1 of the 2 container images this version deploys carry CVE-2026-22185.

Container imageDigestPackageFixed in
library/postgres:16.4e62fbf9d3e2b
openldap@2.5.13+dfsg-5
no fix listed

Open the chart page →

4,593
iotaeclipse-aeriosVerified publisher1.0.21 of 4See more

iota eclipse-aerios 1.0.2

1 of the 4 container images this version deploys carry CVE-2026-22185.

Container imageDigestPackageFixed in
eclipseaerios/iota-messages-api:lateste7f5ba0bc64d
openldap@2.6.10+dfsg-1
no fix listed

Open the chart page →

13,422
redpandaeclipse-aeriosVerified publisher5.7.81 of 4See more

redpanda eclipse-aerios 5.7.8

1 of the 4 container images this version deploys carry CVE-2026-22185.

Container imageDigestPackageFixed in
redpandadata/redpanda:latest468bd13a9f2b
openldap@2.6.10+dfsg-1
no fix listed

Open the chart page →

1,551
vaultwardenedudip0.11.01 of 1See more

vaultwarden edudip 0.11.0

1 of the 1 container images this version deploys carry CVE-2026-22185.

Container imageDigestPackageFixed in
vaultwarden/server:1.37.1ebdfe70701c6
openldap@2.6.10+dfsg-1
no fix listed

Open the chart page →

2,032
esphomeegebackVerified publisher2.0.251 of 1See more

esphome egeback 2.0.25

1 of the 1 container images this version deploys carry CVE-2026-22185.

Container imageDigestPackageFixed in
esphome/esphome:2026.7.44866347cb5b4
openldap@2.6.10+dfsg-1
no fix listed

Open the chart page →

3,153
uptime-kumaegebackVerified publisher2.0.121 of 1See more

uptime-kuma egeback 2.0.12

1 of the 1 container images this version deploys carry CVE-2026-22185.

Container imageDigestPackageFixed in
louislam/uptime-kuma:2.5.0a8610b3b4c38
openldap@2.5.13+dfsg-5
no fix listed

Open the chart page →

30,167
postgresqleks-storageclass0.1.01 of 1See more

postgresql eks-storageclass 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-22185.

Container imageDigestPackageFixed in
library/postgres:1767f41722b7a8
openldap@2.6.10+dfsg-1
no fix listed

Open the chart page →

1,638
seafileeleksbai0.1.11 of 3See more

seafile eleksbai 0.1.1

1 of the 3 container images this version deploys carry CVE-2026-22185.

Container imageDigestPackageFixed in
seafileltd/seafile-mc:9.0.106693911bcc40
lmdb@0.9.24-1
no fix listed

Open the chart page →

25,239
kube-ecp-stackemqx-operator2.5.12 of 16See more

kube-ecp-stack emqx-operator 2.5.1

2 of the 16 container images this version deploys carry CVE-2026-22185.

Container imageDigestPackageFixed in
emqx/ecp-ui:2.5.1e33e9816f147
openldap@2.5.13+dfsg-5
no fix listed
library/telegraf:1.27507a3eecf809
openldap@2.5.13+dfsg-5
no fix listed

Open the chart page →

22,845
kube-packetloss-exporterenixVerified publisher0.2.11 of 2See more

kube-packetloss-exporter enix 0.2.1

1 of the 2 container images this version deploys carry CVE-2026-22185.

Container imageDigestPackageFixed in
bitnamilegacy/kubectl:1.3164614ef8290f
openldap@2.5.13+dfsg-5
no fix listed

Open the chart page →

6,154

Container images carrying it

877 by charts deploying them

A fixed version is listed for 0 of the 2 affected packages.

Container imageDigestPackageFixed inUsed by
ghcr.io/zoriya/kyoo_scanner:4.7.17dc0ee57b628
openldap@2.5.13+dfsg-5
no fix listed
1
public.ecr.aws/aktosecurity/akto-ai-automated-testing:latest5a5d32281374
openldap@2.5.13+dfsg-5
no fix listed
1
public.ecr.aws/jtekt-corporation/image-storage-service:v1.16.17b1493760c716
openldap@2.5.13+dfsg-5
no fix listed
1
public.ecr.aws/jtekt-corporation/image-storage-service-gui:v1.9.434823c8abe00
openldap@2.5.13+dfsg-5
no fix listed
1
public.ecr.aws/jtekt-corporation/shinsei-manager:v2.8.15cd62142d6ed
openldap@2.5.13+dfsg-5
no fix listed
1
public.ecr.aws/jtekt-corporation/shinsei-manager-front:v1.5.5f8fb4eea4071
openldap@2.5.13+dfsg-5
no fix listed
1
public.ecr.aws/jtekt-corporation/time-series-storage-service:v1.5.1046ef5c9ed50
openldap@2.5.13+dfsg-5
no fix listed
1
public.ecr.aws/k2x0t8t6/kubeadapt/app/kubeadapt-k8s-pulse:v3.0.1dc5a516c2333
openldap@2.5.13+dfsg-5
no fix listed
1
public.ecr.aws/outerbounds/metaflow_metadata_service:v2.4.13f7567ce3419d
openldap@2.5.13+dfsg-5
no fix listed
1
public.ecr.aws/supportpal/helpdesk-monolithic:4.0.4573779e57fae
lmdb@0.9.24-1
no fix listed
1
public.ecr.aws/truefoundrycloud/async-service-distributor:5d48113bc678d694a0c8f8dabb2207c5aa2cfc53f74851ce31f5
openldap@2.5.13+dfsg-5
no fix listed
1
quay.io/argoprojlabs/gitops-promoter:v0.38.19c8a510dc25e
openldap@2.6.10+dfsg-1
no fix listed
1
quay.io/galaxyproject/galaxy-min:26.1.12c324c9789f5
openldap@2.6.10+dfsg-1
no fix listed
1
quay.io/jupyterhub/k8s-hub:4.4.2108fbb01c3fe
lmdb@0.9.24-1
openldap@2.5.13+dfsg-5
no fix listed
no fix listed
1
quay.io/jupyterhub/k8s-hub:4.3.5113e372cf71b
lmdb@0.9.24-1
openldap@2.5.13+dfsg-5
no fix listed
no fix listed
1
quay.io/jupyterhub/k8s-hub:4.3.492f883d09270
lmdb@0.9.24-1
openldap@2.5.13+dfsg-5
no fix listed
no fix listed
1
quay.io/jupyterhub/k8s-singleuser-sample:4.4.265e1b09fc8c9
lmdb@0.9.24-1
openldap@2.5.13+dfsg-5
no fix listed
no fix listed
1
quay.io/opsmxpublic/ubi8-oes-datascience:isd-spin-2025.10.01-af26a30d4-202511261054d8f66f4117fe
openldap@2.6.10+dfsg-1
no fix listed
1
quay.io/yushiwho/api:e1f9d77e0d9b93dbf2b
openldap@2.5.13+dfsg-5
no fix listed
1
registry.gitlab.com/enbuild-staging/vivsoft-platform-ui/enbuild-frontend:1.0.3166353ce9bf98
openldap@2.6.10+dfsg-1
no fix listed
1
registry.gitlab.com/enbuild-staging/vivsoft-platform-ui/enbuild-mq-consumer:1.0.310e3cd8c7776d
openldap@2.5.13+dfsg-5
no fix listed
1
registry.gitlab.com/gitlab-org/build/cng/gitlab-openbao:v2.5.5-gitlab25b7636dfba3f
openldap@2.6.10+dfsg-1
no fix listed
1
registry.gitlab.com/school_guy/docker-typo3:13.4.30-197d868ed76185d7270d
openldap@2.5.13+dfsg-5
no fix listed
1
registry.k8s.io/git-sync/git-sync:v4.5.00e64aedb0d0a
openldap@2.6.10+dfsg-1
no fix listed
1
registry.k8s.io/git-sync/git-sync:v4.1.0fd9722fd02e3
openldap@2.5.13+dfsg-5
no fix listed
1
registry.k8s.io/sig-storage/nfsplugin:v4.13.41eb5a85180a4
openldap@2.5.13+dfsg-5
no fix listed
1
registry.k8s.io/sig-storage/nfsplugin:v4.11.0ce5b5ccd5eb0
openldap@2.5.13+dfsg-5
no fix listed
1

syft 1.42.1 · advisories as of 15 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.