StackRadar

CVE-2026-22185

Medium

Advisory

Published 7 Jan 2026In the index since 5 Sept 2026
Severity
Medium
worst across findings
CVSS
4.6
base score, highest
EPSS
0.001
4th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
1,080
of 17,787 indexed, latest versions
Container images
877
deployed by those charts
Fix available
None
affected packages

The matching OSV records carry no description.

Carried by container images the latest versions of 1,080 of 17,787 indexed charts deploy, on 877 images.

Affected packageAffected versionsFixed inImages
openldapdeb2.5.13+dfsg-5, 2.6.10+dfsg-1, 2.6.10+dfsg-1+b1, 2.6.10+dfsg-1+dhi1no fix listed753
lmdbdeb0.9.17-3, 0.9.21-1ubuntu0.1, 0.9.24-1, 0.9.24-1build2+3 moreno fix listed152
OSV records
DEBIAN-CVE-2026-22185UBUNTU-CVE-2026-22185

Charts affected

1,080 by stars
ChartLatestAffected imagesRadar Score
nginx-charteoc-chartsVerified publisher2.0.01 of 1See more

nginx-chart eoc-charts 2.0.0

1 of the 1 container images this version deploys carry CVE-2026-22185.

Container imageDigestPackageFixed in
library/nginx:latest05b8cb60c354
openldap@2.6.10+dfsg-1
no fix listed

Open the chart page →

1,839
wordpresseoc-chartsVerified publisher0.14.41 of 1See more

wordpress eoc-charts 0.14.4

1 of the 1 container images this version deploys carry CVE-2026-22185.

Container imageDigestPackageFixed in
library/wordpress:6.8.3-apache30bff39330d1
openldap@2.6.10+dfsg-1
no fix listed

Open the chart page →

7,265
matomoeosc-lot-1Verified publisher0.2.01 of 1See more

matomo eosc-lot-1 0.2.0

1 of the 1 container images this version deploys carry CVE-2026-22185.

Container imageDigestPackageFixed in
library/matomo:5.1.2-apache2415789e1602
openldap@2.5.13+dfsg-5
no fix listed

Open the chart page →

5,316
espocrmespocrmVerified publisher1.0.11 of 2See more

espocrm espocrm 1.0.1

1 of the 2 container images this version deploys carry CVE-2026-22185.

Container imageDigestPackageFixed in
espocrm/espocrm:9.3.101b5a24504ed9
openldap@2.6.10+dfsg-1
no fix listed

Open the chart page →

6,475
assertoorethereum-helm-chartsVerified publisher1.2.01 of 1See more

assertoor ethereum-helm-charts 1.2.0

1 of the 1 container images this version deploys carry CVE-2026-22185.

Container imageDigestPackageFixed in
ethpandaops/assertoor:latest1efa2fba6711
openldap@2.6.10+dfsg-1
no fix listed

Open the chart page →

2,903
powfaucetethereum-helm-chartsVerified publisher1.2.11 of 1See more

powfaucet ethereum-helm-charts 1.2.1

1 of the 1 container images this version deploys carry CVE-2026-22185.

Container imageDigestPackageFixed in
pk910/powfaucet:v2-stable3dcae6a62896
openldap@2.5.13+dfsg-5
no fix listed

Open the chart page →

4,117
beeport-uiethersphereVerified publisher0.76.22 of 3See more

beeport-ui ethersphere 0.76.2

2 of the 3 container images this version deploys carry CVE-2026-22185.

Container imageDigestPackageFixed in
library/nginx:latest05b8cb60c354
openldap@2.6.10+dfsg-1
no fix listed
library/node:ltsbe23f54a88d3
openldap@2.5.13+dfsg-5
no fix listed

Open the chart page →

7,406
multichain-uiethersphereVerified publisher0.73.12 of 3See more

multichain-ui ethersphere 0.73.1

2 of the 3 container images this version deploys carry CVE-2026-22185.

Container imageDigestPackageFixed in
library/nginx:latest05b8cb60c354
openldap@2.6.10+dfsg-1
no fix listed
library/node:ltsbe23f54a88d3
openldap@2.5.13+dfsg-5
no fix listed

Open the chart page →

7,406
static-siteethersphereVerified publisher0.73.12 of 2See more

static-site ethersphere 0.73.1

2 of the 2 container images this version deploys carry CVE-2026-22185.

Container imageDigestPackageFixed in
library/nginx:latest05b8cb60c354
openldap@2.6.10+dfsg-1
no fix listed
library/node:latestf5d1cc40abc1
openldap@2.6.10+dfsg-1
no fix listed

Open the chart page →

6,894
supportpalevilgn0me0.1.61 of 1See more

supportpal evilgn0me 0.1.6

1 of the 1 container images this version deploys carry CVE-2026-22185.

Container imageDigestPackageFixed in
public.ecr.aws/supportpal/helpdesk-monolithic:4.0.4573779e57fae
lmdb@0.9.24-1
no fix listed

Open the chart page →

20,987
yelbfairwinds-incubator0.1.11 of 5See more

yelb fairwinds-incubator 0.1.1

1 of the 5 container images this version deploys carry CVE-2026-22185.

Container imageDigestPackageFixed in
library/postgres:latest4ef4dbc939d6
openldap@2.6.10+dfsg-1
no fix listed

Open the chart page →

5,101
event-generatorfalcosecurity0.4.01 of 1See more

event-generator falcosecurity 0.4.0

1 of the 1 container images this version deploys carry CVE-2026-22185.

Container imageDigestPackageFixed in
falcosecurity/event-generator:latest932956d86c99
openldap@2.5.13+dfsg-5
no fix listed

Open the chart page →

3,651
jenkinsfatihtepe-jenkins1.0.01 of 1See more

jenkins fatihtepe-jenkins 1.0.0

1 of the 1 container images this version deploys carry CVE-2026-22185.

Container imageDigestPackageFixed in
jenkins/jenkins:ltsc1e4c349365f
openldap@2.6.10+dfsg-1
no fix listed

Open the chart page →

2,487
quickstartfeatureformVerified publisher0.1.11 of 3See more

quickstart featureform 0.1.1

1 of the 3 container images this version deploys carry CVE-2026-22185.

Container imageDigestPackageFixed in
library/postgres:latest4ef4dbc939d6
openldap@2.6.10+dfsg-1
no fix listed

Open the chart page →

3,554
rospoferama0.4.31 of 1See more

rospo ferama 0.4.3

1 of the 1 container images this version deploys carry CVE-2026-22185.

Container imageDigestPackageFixed in
ghcr.io/ferama/rospo:v0.12.0ab40c1745534
lmdb@0.9.24-1
openldap@2.5.13+dfsg-5
no fix listed
no fix listed

Open the chart page →

5,300
ferriscompanyferriscompany0.1.01 of 1See more

ferriscompany ferriscompany 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-22185.

Container imageDigestPackageFixed in
ghcr.io/libreconnect/ferriscompany:0.1.0-rc6ed86db9f0efe
openldap@2.5.13+dfsg-5
no fix listed

Open the chart page →

10,119
infrafibonacci-cluster-infraVerified publisher1.0.01 of 4See more

infra fibonacci-cluster-infra 1.0.0

1 of the 4 container images this version deploys carry CVE-2026-22185.

Container imageDigestPackageFixed in
library/postgres:16.4e62fbf9d3e2b
openldap@2.5.13+dfsg-5
no fix listed

Open the chart page →

12,510
fineractfineract-openshift0.1.11 of 4See more

fineract fineract-openshift 0.1.1

1 of the 4 container images this version deploys carry CVE-2026-22185.

Container imageDigestPackageFixed in
library/nginx:latest05b8cb60c354
openldap@2.6.10+dfsg-1
no fix listed

Open the chart page →

7,848
firefly-iiifirefly-iii1.10.11 of 1See more

firefly-iii firefly-iii 1.10.1

1 of the 1 container images this version deploys carry CVE-2026-22185.

Container imageDigestPackageFixed in
fireflyiii/core:version-6.5.9fe4ecec4c2ba
openldap@2.6.10+dfsg-1
no fix listed

Open the chart page →

5,038
firefly-iii-stackfirefly-iii0.10.22 of 4See more

firefly-iii-stack firefly-iii 0.10.2

2 of the 4 container images this version deploys carry CVE-2026-22185.

Container imageDigestPackageFixed in
fireflyiii/core:version-6.5.9fe4ecec4c2ba
openldap@2.6.10+dfsg-1
no fix listed
fireflyiii/data-importer:version-2.2.3ab52bf932546
openldap@2.6.10+dfsg-1
no fix listed

Open the chart page →

10,258
importerfirefly-iii1.6.01 of 1See more

importer firefly-iii 1.6.0

1 of the 1 container images this version deploys carry CVE-2026-22185.

Container imageDigestPackageFixed in
fireflyiii/data-importer:version-2.2.3ab52bf932546
openldap@2.6.10+dfsg-1
no fix listed

Open the chart page →

4,828
flask-contactsfirst-idror-chart1.0.11 of 3See more

flask-contacts first-idror-chart 1.0.1

1 of the 3 container images this version deploys carry CVE-2026-22185.

Container imageDigestPackageFixed in
library/phpmyadmin:latest3a8a8d6b5289
openldap@2.6.10+dfsg-1
no fix listed

Open the chart page →

5,624
business-api-ecosystemfiware1.1.02 of 4See more

business-api-ecosystem fiware 1.1.0

2 of the 4 container images this version deploys carry CVE-2026-22185.

Container imageDigestPackageFixed in
fiware/biz-ecosystem-charging-backend:11.7.029456835bb2c
lmdb@0.9.24-1
no fix listed
fiware/biz-ecosystem-logic-proxy:11.20.3d551a13e8278
openldap@2.5.13+dfsg-5
no fix listed

Open the chart page →

64,192
apm-hubflanksourceVerified publisher0.0.471 of 2See more

apm-hub flanksource 0.0.47

1 of the 2 container images this version deploys carry CVE-2026-22185.

Container imageDigestPackageFixed in
library/postgres:14156f0b253fd6
openldap@2.6.10+dfsg-1
no fix listed

Open the chart page →

6,129
mission-controlflanksourceVerified publisher0.1.3361 of 8See more

mission-control flanksource 0.1.336

1 of the 8 container images this version deploys carry CVE-2026-22185.

Container imageDigestPackageFixed in
ghcr.io/flanksource/postgres:17.6-497383cebcf66281fc1
openldap@2.5.13+dfsg-5
no fix listed

Open the chart page →

8,831
flask-contactsflask-contacts-generic1.0.11 of 3See more

flask-contacts flask-contacts-generic 1.0.1

1 of the 3 container images this version deploys carry CVE-2026-22185.

Container imageDigestPackageFixed in
library/phpmyadmin:latest3a8a8d6b5289
openldap@2.6.10+dfsg-1
no fix listed

Open the chart page →

5,624
fluent-bit-aggregatorfluent-bit-aggregatorOfficialVerified publisher1.1.21 of 1See more

fluent-bit-aggregator fluent-bit-aggregator 1.1.2

1 of the 1 container images this version deploys carry CVE-2026-22185.

Container imageDigestPackageFixed in
fluent/fluent-bit:5.1.2d792375ca8e5
openldap@2.6.10+dfsg-1
no fix listed

Open the chart page →

896
fluent-bit-collectorfluent-bit-collectorOfficialVerified publisher1.1.21 of 1See more

fluent-bit-collector fluent-bit-collector 1.1.2

1 of the 1 container images this version deploys carry CVE-2026-22185.

Container imageDigestPackageFixed in
fluent/fluent-bit:5.1.2d792375ca8e5
openldap@2.6.10+dfsg-1
no fix listed

Open the chart page →

896
fluentd-aggregatorfluentd-aggregatorOfficialVerified publisher1.0.01 of 2See more

fluentd-aggregator fluentd-aggregator 1.0.0

1 of the 2 container images this version deploys carry CVE-2026-22185.

Container imageDigestPackageFixed in
ghcr.io/fluent/fluentd-aggregator-docker-image:2.1.0ad25916eebbb
openldap@2.6.10+dfsg-1
no fix listed

Open the chart page →

1,712
fr24feederfnzv0.1.21 of 1See more

fr24feeder fnzv 0.1.2

1 of the 1 container images this version deploys carry CVE-2026-22185.

Container imageDigestPackageFixed in
ghcr.io/sdr-enthusiasts/docker-flightradar24:latest917e53402d51
lmdb@0.9.31-1+b2
openldap@2.6.10+dfsg-1
no fix listed
no fix listed

Open the chart page →

2,246
ff-testfrankframework0.7.61 of 2See more

ff-test frankframework 0.7.6

1 of the 2 container images this version deploys carry CVE-2026-22185.

Container imageDigestPackageFixed in
library/postgres:17-bookworm051f7b7b3abd
openldap@2.5.13+dfsg-5
no fix listed

Open the chart page →

1,657
frank2examplefrankframework0.7.41 of 2See more

frank2example frankframework 0.7.4

1 of the 2 container images this version deploys carry CVE-2026-22185.

Container imageDigestPackageFixed in
library/postgres:17-bookworm051f7b7b3abd
openldap@2.5.13+dfsg-5
no fix listed

Open the chart page →

1,657
esphomegabe565Verified publisher0.15.01 of 1See more

esphome gabe565 0.15.0

1 of the 1 container images this version deploys carry CVE-2026-22185.

Container imageDigestPackageFixed in
ghcr.io/esphome/esphome:latest000c5ee5ee96
openldap@2.6.10+dfsg-1
no fix listed

Open the chart page →

3,143
scanservjsgabe565Verified publisher0.9.21 of 1See more

scanservjs gabe565 0.9.2

1 of the 1 container images this version deploys carry CVE-2026-22185.

Container imageDigestPackageFixed in
sbs20/scanservjs:release-v3.0.3dad1fd6e9a98
openldap@2.5.13+dfsg-5
no fix listed

Open the chart page →

13,247
guacamolegabibbo970.3.01 of 3See more

guacamole gabibbo97 0.3.0

1 of the 3 container images this version deploys carry CVE-2026-22185.

Container imageDigestPackageFixed in
library/postgres:134689940c6838
openldap@2.6.10+dfsg-1
no fix listed

Open the chart page →

6,425
airsonicgeek-cookbookVerified publisher6.4.21 of 1See more

airsonic geek-cookbook 6.4.2

1 of the 1 container images this version deploys carry CVE-2026-22185.

Container imageDigestPackageFixed in
airsonicadvanced/airsonic-advanced:latestf7cbafac2806
lmdb@0.9.24-1
no fix listed

Open the chart page →

18,217
apache-musicindexgeek-cookbookVerified publisher2.4.21 of 1See more

apache-musicindex geek-cookbook 2.4.2

1 of the 1 container images this version deploys carry CVE-2026-22185.

Container imageDigestPackageFixed in
ghcr.io/k8s-at-home/apache-musicindex:v1.4.1-2c9bd82dc5fda
lmdb@0.9.24-1
no fix listed

Open the chart page →

14,698
factoriogeek-cookbookVerified publisher1.2.21 of 2See more

factorio geek-cookbook 1.2.2

1 of the 2 container images this version deploys carry CVE-2026-22185.

Container imageDigestPackageFixed in
factoriotools/factorio:stablec6092b912bd1
openldap@2.6.10+dfsg-1
no fix listed

Open the chart page →

1,449
icinga2geek-cookbookVerified publisher4.2.01 of 1See more

icinga2 geek-cookbook 4.2.0

1 of the 1 container images this version deploys carry CVE-2026-22185.

Container imageDigestPackageFixed in
jordan/icinga2:latestf75025fe8ea8
lmdb@0.9.24-1
openldap@2.5.13+dfsg-5
no fix listed
no fix listed

Open the chart page →

9,103
jackettgeek-cookbookVerified publisher11.7.21 of 1See more

jackett geek-cookbook 11.7.2

1 of the 1 container images this version deploys carry CVE-2026-22185.

Container imageDigestPackageFixed in
ghcr.io/k8s-at-home/jackett:v0.20.13163a4715b46aa2
lmdb@0.9.24-1
no fix listed

Open the chart page →

9,736
lidarrgeek-cookbookVerified publisher14.2.21 of 1See more

lidarr geek-cookbook 14.2.2

1 of the 1 container images this version deploys carry CVE-2026-22185.

Container imageDigestPackageFixed in
ghcr.io/k8s-at-home/lidarr:v1.0.0.225554ebc1f90963
lmdb@0.9.24-1
no fix listed

Open the chart page →

14,328
mopidygeek-cookbookVerified publisher0.1.21 of 1See more

mopidy geek-cookbook 0.1.2

1 of the 1 container images this version deploys carry CVE-2026-22185.

Container imageDigestPackageFixed in
jaedb/iris:latest048cfbf58d57
openldap@2.5.13+dfsg-5
no fix listed

Open the chart page →

12,993
nzbgetgeek-cookbookVerified publisher12.4.21 of 1See more

nzbget geek-cookbook 12.4.2

1 of the 1 container images this version deploys carry CVE-2026-22185.

Container imageDigestPackageFixed in
ghcr.io/k8s-at-home/nzbget:v21.1e5571acd10ce
lmdb@0.9.24-1build2
no fix listed

Open the chart page →

12,124
qbittorrentgeek-cookbookVerified publisher13.5.21 of 1See more

qbittorrent geek-cookbook 13.5.2

1 of the 1 container images this version deploys carry CVE-2026-22185.

Container imageDigestPackageFixed in
ghcr.io/k8s-at-home/qbittorrent:v4.4.261deadd1ec78
lmdb@0.9.24-1
no fix listed

Open the chart page →

11,855
radarrgeek-cookbookVerified publisher16.3.21 of 1See more

radarr geek-cookbook 16.3.2

1 of the 1 container images this version deploys carry CVE-2026-22185.

Container imageDigestPackageFixed in
ghcr.io/k8s-at-home/radarr:v4.1.0.61754273dfaf0295
lmdb@0.9.24-1build2
no fix listed

Open the chart page →

10,418
sdtdgeek-cookbookVerified publisher0.3.21 of 1See more

sdtd geek-cookbook 0.3.2

1 of the 1 container images this version deploys carry CVE-2026-22185.

Container imageDigestPackageFixed in
ghcr.io/reitermarkus/7d2d:main39953b387b61
openldap@2.6.10+dfsg-1
no fix listed

Open the chart page →

2,523
seafilegeek-cookbookVerified publisher3.2.01 of 1See more

seafile geek-cookbook 3.2.0

1 of the 1 container images this version deploys carry CVE-2026-22185.

Container imageDigestPackageFixed in
seafileltd/seafile-mc:8.0.7ed0fcda5e6a9
lmdb@0.9.24-1
no fix listed

Open the chart page →

24,355
skypilotgeek-cookbookVerified publisher0.0.11 of 3See more

skypilot geek-cookbook 0.0.1

1 of the 3 container images this version deploys carry CVE-2026-22185.

Container imageDigestPackageFixed in
berkeleyskypilot/skypilot-nightly:latest8da2f3cda472
openldap@2.6.10+dfsg-1
no fix listed

Open the chart page →

8,955
transmissiongeek-cookbookVerified publisher8.4.31 of 1See more

transmission geek-cookbook 8.4.3

1 of the 1 container images this version deploys carry CVE-2026-22185.

Container imageDigestPackageFixed in
ghcr.io/k8s-at-home/transmission:v3.006011182e3946
lmdb@0.9.24-1
no fix listed

Open the chart page →

11,909
xtevegeek-cookbookVerified publisher8.4.21 of 1See more

xteve geek-cookbook 8.4.2

1 of the 1 container images this version deploys carry CVE-2026-22185.

Container imageDigestPackageFixed in
ghcr.io/k8s-at-home/xteve:v2.2.0.200292b3614670f
lmdb@0.9.24-1
no fix listed

Open the chart page →

17,996

Container images carrying it

877 by charts deploying them

A fixed version is listed for 0 of the 2 affected packages.

Container imageDigestPackageFixed inUsed by
ghcr.io/zoriya/kyoo_scanner:4.7.17dc0ee57b628
openldap@2.5.13+dfsg-5
no fix listed
1
public.ecr.aws/aktosecurity/akto-ai-automated-testing:latest5a5d32281374
openldap@2.5.13+dfsg-5
no fix listed
1
public.ecr.aws/jtekt-corporation/image-storage-service:v1.16.17b1493760c716
openldap@2.5.13+dfsg-5
no fix listed
1
public.ecr.aws/jtekt-corporation/image-storage-service-gui:v1.9.434823c8abe00
openldap@2.5.13+dfsg-5
no fix listed
1
public.ecr.aws/jtekt-corporation/shinsei-manager:v2.8.15cd62142d6ed
openldap@2.5.13+dfsg-5
no fix listed
1
public.ecr.aws/jtekt-corporation/shinsei-manager-front:v1.5.5f8fb4eea4071
openldap@2.5.13+dfsg-5
no fix listed
1
public.ecr.aws/jtekt-corporation/time-series-storage-service:v1.5.1046ef5c9ed50
openldap@2.5.13+dfsg-5
no fix listed
1
public.ecr.aws/k2x0t8t6/kubeadapt/app/kubeadapt-k8s-pulse:v3.0.1dc5a516c2333
openldap@2.5.13+dfsg-5
no fix listed
1
public.ecr.aws/outerbounds/metaflow_metadata_service:v2.4.13f7567ce3419d
openldap@2.5.13+dfsg-5
no fix listed
1
public.ecr.aws/supportpal/helpdesk-monolithic:4.0.4573779e57fae
lmdb@0.9.24-1
no fix listed
1
public.ecr.aws/truefoundrycloud/async-service-distributor:5d48113bc678d694a0c8f8dabb2207c5aa2cfc53f74851ce31f5
openldap@2.5.13+dfsg-5
no fix listed
1
quay.io/argoprojlabs/gitops-promoter:v0.38.19c8a510dc25e
openldap@2.6.10+dfsg-1
no fix listed
1
quay.io/galaxyproject/galaxy-min:26.1.12c324c9789f5
openldap@2.6.10+dfsg-1
no fix listed
1
quay.io/jupyterhub/k8s-hub:4.4.2108fbb01c3fe
lmdb@0.9.24-1
openldap@2.5.13+dfsg-5
no fix listed
no fix listed
1
quay.io/jupyterhub/k8s-hub:4.3.5113e372cf71b
lmdb@0.9.24-1
openldap@2.5.13+dfsg-5
no fix listed
no fix listed
1
quay.io/jupyterhub/k8s-hub:4.3.492f883d09270
lmdb@0.9.24-1
openldap@2.5.13+dfsg-5
no fix listed
no fix listed
1
quay.io/jupyterhub/k8s-singleuser-sample:4.4.265e1b09fc8c9
lmdb@0.9.24-1
openldap@2.5.13+dfsg-5
no fix listed
no fix listed
1
quay.io/opsmxpublic/ubi8-oes-datascience:isd-spin-2025.10.01-af26a30d4-202511261054d8f66f4117fe
openldap@2.6.10+dfsg-1
no fix listed
1
quay.io/yushiwho/api:e1f9d77e0d9b93dbf2b
openldap@2.5.13+dfsg-5
no fix listed
1
registry.gitlab.com/enbuild-staging/vivsoft-platform-ui/enbuild-frontend:1.0.3166353ce9bf98
openldap@2.6.10+dfsg-1
no fix listed
1
registry.gitlab.com/enbuild-staging/vivsoft-platform-ui/enbuild-mq-consumer:1.0.310e3cd8c7776d
openldap@2.5.13+dfsg-5
no fix listed
1
registry.gitlab.com/gitlab-org/build/cng/gitlab-openbao:v2.5.5-gitlab25b7636dfba3f
openldap@2.6.10+dfsg-1
no fix listed
1
registry.gitlab.com/school_guy/docker-typo3:13.4.30-197d868ed76185d7270d
openldap@2.5.13+dfsg-5
no fix listed
1
registry.k8s.io/git-sync/git-sync:v4.5.00e64aedb0d0a
openldap@2.6.10+dfsg-1
no fix listed
1
registry.k8s.io/git-sync/git-sync:v4.1.0fd9722fd02e3
openldap@2.5.13+dfsg-5
no fix listed
1
registry.k8s.io/sig-storage/nfsplugin:v4.13.41eb5a85180a4
openldap@2.5.13+dfsg-5
no fix listed
1
registry.k8s.io/sig-storage/nfsplugin:v4.11.0ce5b5ccd5eb0
openldap@2.5.13+dfsg-5
no fix listed
1

syft 1.42.1 · advisories as of 15 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.