StackRadar

CVE-2026-22185

Medium

Advisory

Published 7 Jan 2026In the index since 5 Sept 2026
Severity
Medium
worst across findings
CVSS
4.6
base score, highest
EPSS
0.001
4th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
1,069
of 17,787 indexed, latest versions
Container images
861
deployed by those charts
Fix available
None
affected packages

The matching OSV records carry no description.

Carried by container images the latest versions of 1,069 of 17,787 indexed charts deploy, on 861 images.

Affected packageAffected versionsFixed inImages
openldapdeb2.5.13+dfsg-5, 2.6.10+dfsg-1, 2.6.10+dfsg-1+b1, 2.6.10+dfsg-1+dhi1no fix listed737
lmdbdeb0.9.17-3, 0.9.21-1ubuntu0.1, 0.9.24-1, 0.9.24-1build2+3 moreno fix listed151
OSV records
DEBIAN-CVE-2026-22185UBUNTU-CVE-2026-22185

Charts affected

1,069 by stars
ChartLatestAffected imagesRadar Score
apim3graviteeioVerified publisher4.12.192 of 4See more

apim3 graviteeio 4.12.19

2 of the 4 container images this version deploys carry CVE-2026-22185.

Container imageDigestPackageFixed in
graviteeio/apim-gateway:4.12.19-debian05fd67a93056
openldap@2.6.10+dfsg-1
no fix listed
graviteeio/apim-management-api:4.12.19-debian27374522cd04
openldap@2.6.10+dfsg-1
no fix listed

Open the chart page →

4,806
wordpressgroundhog2k0.16.41 of 1See more

wordpress groundhog2k 0.16.4

1 of the 1 container images this version deploys carry CVE-2026-22185.

Container imageDigestPackageFixed in
library/wordpress:7.1.0-apache5a93c470ae82
openldap@2.6.10+dfsg-1
no fix listed

Open the chart page →

3,685
stackstorm-hastackstormVerified publisher1.1.01 of 17See more

stackstorm-ha stackstorm 1.1.0

1 of the 17 container images this version deploys carry CVE-2026-22185.

Container imageDigestPackageFixed in
stackstorm/st2actionrunner:3.888235ba70cad
lmdb@0.9.24-1
no fix listed

Open the chart page →

96,419
supabasetokens-studioVerified publisher1.0.02 of 14See more

supabase tokens-studio 1.0.0

2 of the 14 container images this version deploys carry CVE-2026-22185.

Container imageDigestPackageFixed in
supabase/realtime:v2.33.8d207e6e23ad3
openldap@2.5.13+dfsg-5
no fix listed
supabase/studio:20241021-9f9b08326d8070c55e9
openldap@2.5.13+dfsg-5
no fix listed

Open the chart page →

23,123
renterdartur9010Verified publisher1.4.41 of 2See more

renterd artur9010 1.4.4

1 of the 2 container images this version deploys carry CVE-2026-22185.

Container imageDigestPackageFixed in
artur9010/wait-for:v1.0.06b4de3ce8b0e
openldap@2.5.13+dfsg-5
no fix listed

Open the chart page →

8,493
budibasebudibase0.0.0-master2 of 7See more

budibase budibase 0.0.0-master

2 of the 7 container images this version deploys carry CVE-2026-22185.

Container imageDigestPackageFixed in
budibase/database:2.1.0d90f656261c9
openldap@2.5.13+dfsg-5
no fix listed
budibase/proxy:3.41.38d780b6ee602
lmdb@0.9.31-1+b2
openldap@2.6.10+dfsg-1
no fix listed
no fix listed

Open the chart page →

10,775
quickwitquickwit0.8.161 of 1See more

quickwit quickwit 0.8.16

1 of the 1 container images this version deploys carry CVE-2026-22185.

Container imageDigestPackageFixed in
quickwit/quickwit:v0.8.2363ff56ce456
openldap@2.5.13+dfsg-5
no fix listed

Open the chart page →

3,480
transmission-openvpnutkuozdemirVerified publisher2.5.01 of 1See more

transmission-openvpn utkuozdemir 2.5.0

1 of the 1 container images this version deploys carry CVE-2026-22185.

Container imageDigestPackageFixed in
haugene/transmission-openvpn:4.0059216cfae4b
lmdb@0.9.24-1
no fix listed

Open the chart page →

11,405
hedgedocadfinisVerified publisher0.6.11 of 2See more

hedgedoc adfinis 0.6.1

1 of the 2 container images this version deploys carry CVE-2026-22185.

Container imageDigestPackageFixed in
library/postgres:18.48ff36f3c6637
openldap@2.6.10+dfsg-1
no fix listed

Open the chart page →

2,938
devtron-operatordevtron0.23.32 of 11See more

devtron-operator devtron 0.23.3

2 of the 11 container images this version deploys carry CVE-2026-22185.

Container imageDigestPackageFixed in
quay.io/devtron/devtron-utils:dup-chart-repo-v1.1.095d6f0e05636
openldap@2.5.13+dfsg-5
no fix listed
quay.io/devtron/postgres:14.91b594392f7cb
openldap@2.5.13+dfsg-5
no fix listed

Open the chart page →

32,902
nextcloudgroundhog2k0.22.51 of 3See more

nextcloud groundhog2k 0.22.5

1 of the 3 container images this version deploys carry CVE-2026-22185.

Container imageDigestPackageFixed in
library/nextcloud:34.0.3:34.0.3-apacheb97df9e0e1ee
openldap@2.6.10+dfsg-1
no fix listed

Open the chart page →

4,507
ilumilumOfficialVerified publisher6.7.32 of 19See more

ilum ilum 6.7.3

2 of the 19 container images this version deploys carry CVE-2026-22185.

Container imageDigestPackageFixed in
bitnamilegacy/minio:2025.3.12-debian-12-r0ba9f3b4b0b00
openldap@2.5.13+dfsg-5
no fix listed
bitnamilegacy/postgresql:16233f361c5819
openldap@2.5.13+dfsg-5
no fix listed

Open the chart page →

23,228
lakekeeperlakekeeperVerified publisher0.12.01 of 2See more

lakekeeper lakekeeper 0.12.0

1 of the 2 container images this version deploys carry CVE-2026-22185.

Container imageDigestPackageFixed in
library/postgres:18.4a02db8cac496
openldap@2.6.10+dfsg-1
no fix listed

Open the chart page →

1,918
litmuslitmuschaos3.30.02 of 6See more

litmus litmuschaos 3.30.0

2 of the 6 container images this version deploys carry CVE-2026-22185.

Container imageDigestPackageFixed in
bitnamilegacy/mongodb:8.0.13-debian-12-r02579e968033e
openldap@2.5.13+dfsg-5
no fix listed
bitnamilegacy/os-shell:12-debian-12-r5177e65e9d633e
openldap@2.5.13+dfsg-5
no fix listed

Open the chart page →

7,007
monicamonicaOfficialVerified publisher1.0.151 of 1See more

monica monica 1.0.15

1 of the 1 container images this version deploys carry CVE-2026-22185.

Container imageDigestPackageFixed in
ghcr.io/monicahq/monica-next:main8be69156acbb
openldap@2.6.10+dfsg-1
no fix listed

Open the chart page →

5,634
nautobotnautobotOfficialVerified publisher3.1.21 of 1See more

nautobot nautobot 3.1.2

1 of the 1 container images this version deploys carry CVE-2026-22185.

Container imageDigestPackageFixed in
networktocode/nautobot:3.0-py3.13ed484336b1ad
openldap@2.6.10+dfsg-1
no fix listed

Open the chart page →

4,332
syftopenmined0.9.51 of 6See more

syft openmined 0.9.5

1 of the 6 container images this version deploys carry CVE-2026-22185.

Container imageDigestPackageFixed in
library/postgres:16.109f23e02d766
openldap@2.5.13+dfsg-5
no fix listed

Open the chart page →

17,245
paperless-ngxpaperless-ngxVerified publisher0.3.222 of 3See more

paperless-ngx paperless-ngx 0.3.22

2 of the 3 container images this version deploys carry CVE-2026-22185.

Container imageDigestPackageFixed in
bitnamilegacy/postgresql:17.6.0-debian-12-r4926356130b77
openldap@2.5.13+dfsg-5
no fix listed
ghcr.io/paperless-ngx/paperless-ngx:3.1.3aa810a36942c
openldap@2.6.10+dfsg-1
no fix listed

Open the chart page →

8,489
puppetserverpuppetserver9.5.21 of 5See more

puppetserver puppetserver 9.5.2

1 of the 5 container images this version deploys carry CVE-2026-22185.

Container imageDigestPackageFixed in
ghcr.io/voxpupuli/container-puppetdb:7.18.0-v1.5.0a56dfe91f5b1
lmdb@0.9.24-1build2
no fix listed

Open the chart page →

14,184
tbmq-clustertbmq-helm-chartOfficialVerified publisher2.1.02 of 3See more

tbmq-cluster tbmq-helm-chart 2.1.0

2 of the 3 container images this version deploys carry CVE-2026-22185.

Container imageDigestPackageFixed in
thingsboard/tbmq-integration-executor:2.4.0b5a9c1addf80
openldap@2.6.10+dfsg-1
no fix listed
thingsboard/tbmq-node:2.4.070661025dba5
openldap@2.6.10+dfsg-1
no fix listed

Open the chart page →

3,534
istio-operatorwiremindVerified publisher1.18.21 of 1See more

istio-operator wiremind 1.18.2

1 of the 1 container images this version deploys carry CVE-2026-22185.

Container imageDigestPackageFixed in
istio/operator:1.18.270f9d1fe5fff
lmdb@0.9.24-1build2
no fix listed

Open the chart page →

5,630
phpmyadminalekcVerified publisher0.3.11 of 1See more

phpmyadmin alekc 0.3.1

1 of the 1 container images this version deploys carry CVE-2026-22185.

Container imageDigestPackageFixed in
library/phpmyadmin:5.2.3-apache3a8a8d6b5289
openldap@2.6.10+dfsg-1
no fix listed

Open the chart page →

2,582
wazuh-agentavistoVerified publisher4.12.21 of 1See more

wazuh-agent avisto 4.12.2

1 of the 1 container images this version deploys carry CVE-2026-22185.

Container imageDigestPackageFixed in
ghcr.io/avistotelecom/docker-wazuh-agent:4.12.08766ba08bf1a
openldap@2.5.13+dfsg-5
no fix listed

Open the chart page →

6,457
convoyconvoyVerified publisher3.7.131 of 3See more

convoy convoy 3.7.13

1 of the 3 container images this version deploys carry CVE-2026-22185.

Container imageDigestPackageFixed in
bitnamilegacy/postgresql:17.6.0-debian-12-r4926356130b77
openldap@2.5.13+dfsg-5
no fix listed

Open the chart page →

5,896
cortexcortex3.3.81 of 4See more

cortex cortex 3.3.8

1 of the 4 container images this version deploys carry CVE-2026-22185.

Container imageDigestPackageFixed in
library/nginx:1.3105b8cb60c354
openldap@2.6.10+dfsg-1
no fix listed

Open the chart page →

3,897
docmosthelmforgeVerified publisher1.2.112 of 4See more

docmost helmforge 1.2.11

2 of the 4 container images this version deploys carry CVE-2026-22185.

Container imageDigestPackageFixed in
docmost/docmost:0.95.041c8d777cf23
openldap@2.5.13+dfsg-5
no fix listed
library/postgres:18.6-trixie4ef4dbc939d6
openldap@2.6.10+dfsg-1
no fix listed

Open the chart page →

5,564
wordpresshelmforgeVerified publisher3.0.61 of 3See more

wordpress helmforge 3.0.6

1 of the 3 container images this version deploys carry CVE-2026-22185.

Container imageDigestPackageFixed in
library/wordpress:7.1.0-apache5a93c470ae82
openldap@2.6.10+dfsg-1
no fix listed

Open the chart page →

4,148
coturnjaconiVerified publisher1.0.51 of 1See more

coturn jaconi 1.0.5

1 of the 1 container images this version deploys carry CVE-2026-22185.

Container imageDigestPackageFixed in
coturn/coturn:4.10.0-r1f4c2af06c3c5
lmdb@0.9.31-1+b2
openldap@2.6.10+dfsg-1
no fix listed
no fix listed

Open the chart page →

2,901
technitium-dnsserverobeoneVerified publisher1.13.01 of 1See more

technitium-dnsserver obeone 1.13.0

1 of the 1 container images this version deploys carry CVE-2026-22185.

Container imageDigestPackageFixed in
technitium/dns-server:15.4.0df7d90ef0f7b
lmdb@0.9.31-1build1
no fix listed

Open the chart page →

1,187
passboltpassbolt2.1.11 of 6See more

passbolt passbolt 2.1.1

1 of the 6 container images this version deploys carry CVE-2026-22185.

Container imageDigestPackageFixed in
passbolt/passbolt:5.13.0-1-ceaf3a620902a0
openldap@2.6.10+dfsg-1
no fix listed

Open the chart page →

13,350
thehivestrangebee-helmOfficialVerified publisher1.0.63 of 7See more

thehive strangebee-helm 1.0.6

3 of the 7 container images this version deploys carry CVE-2026-22185.

Container imageDigestPackageFixed in
bitnamilegacy/elasticsearch:9.1.2-debian-12-r000176a47afa0
openldap@2.5.13+dfsg-5
no fix listed
bitnamilegacy/os-shell:12-debian-12-r5177e65e9d633e
openldap@2.5.13+dfsg-5
no fix listed
strangebee/thehive:5.7.6-1e77b713124dd
openldap@2.5.13+dfsg-5
no fix listed

Open the chart page →

16,210
uffizzi-controlleruffizzi-controller2.4.61 of 11See more

uffizzi-controller uffizzi-controller 2.4.6

1 of the 11 container images this version deploys carry CVE-2026-22185.

Container imageDigestPackageFixed in
uffizzi/controller:latest0344805f267b
openldap@2.5.13+dfsg-5
no fix listed

Open the chart page →

14,240
minecraft-overvieweralphani-helm-chartsVerified publisher0.1.01 of 3See more

minecraft-overviewer alphani-helm-charts 0.1.0

1 of the 3 container images this version deploys carry CVE-2026-22185.

Container imageDigestPackageFixed in
library/nginx:stabled5792f71a949
openldap@2.6.10+dfsg-1
no fix listed

Open the chart page →

3,380
photoprismandrenarchyVerified publisher8.15.01 of 1See more

photoprism andrenarchy 8.15.0

1 of the 1 container images this version deploys carry CVE-2026-22185.

Container imageDigestPackageFixed in
photoprism/photoprism:260728958642220223
lmdb@0.9.31-1build2
no fix listed

Open the chart page →

8,825
baserowbaserow-chartVerified publisher1.0.563 of 6See more

baserow baserow-chart 1.0.56

3 of the 6 container images this version deploys carry CVE-2026-22185.

Container imageDigestPackageFixed in
baserow/backend:2.3.37c00549b3a6f
openldap@2.6.10+dfsg-1
no fix listed
bitnamilegacy/minio:2024.7.4-debian-12-r0952f86d1116c
openldap@2.5.13+dfsg-5
no fix listed
bitnamilegacy/postgresql:16.4.0-debian-12-r1494bc968141e7
openldap@2.5.13+dfsg-5
no fix listed

Open the chart page →

17,263
fadicetic0.3.12 of 25See more

fadi cetic 0.3.1

2 of the 25 container images this version deploys carry CVE-2026-22185.

Container imageDigestPackageFixed in
jupyterhub/k8s-hub:0.11.1b6b4a1a34bf0
lmdb@0.9.24-1
no fix listed
jupyterhub/k8s-singleuser-sample:0.11.1e3e6f3051df8
lmdb@0.9.24-1
no fix listed

Open the chart page →

52,919
headwind-mdmchristianhuthVerified publisher5.10.11 of 2See more

headwind-mdm christianhuth 5.10.1

1 of the 2 container images this version deploys carry CVE-2026-22185.

Container imageDigestPackageFixed in
bitnamilegacy/postgresql:17.6.0-debian-12-r4926356130b77
openldap@2.5.13+dfsg-5
no fix listed

Open the chart page →

5,870
dolibarrcowboysysopVerified publisher9.0.31 of 3See more

dolibarr cowboysysop 9.0.3

1 of the 3 container images this version deploys carry CVE-2026-22185.

Container imageDigestPackageFixed in
dolibarr/dolibarr:22.0.47ad88fc9b13c
openldap@2.5.13+dfsg-5
no fix listed

Open the chart page →

9,106
seafiledatamateVerified publisher0.6.04 of 6See more

seafile datamate 0.6.0

4 of the 6 container images this version deploys carry CVE-2026-22185.

Container imageDigestPackageFixed in
bitnamilegacy/mariadb-galera:11.4.3-debian-12-r0cb8beb6dbb58
openldap@2.5.13+dfsg-5
no fix listed
bitnamilegacy/memcached:1.6.29-debian-12-r4ff0e7239c17c
openldap@2.5.13+dfsg-5
no fix listed
bitnamilegacy/minio:2024.8.3-debian-12-r15501c419f42e
openldap@2.5.13+dfsg-5
no fix listed
datamate/seafile-professional:11.0.202dd66b722464
lmdb@0.9.24-1build2
no fix listed

Open the chart page →

27,267
jellyfindjjudas21Verified publisher4.0.81 of 1See more

jellyfin djjudas21 4.0.8

1 of the 1 container images this version deploys carry CVE-2026-22185.

Container imageDigestPackageFixed in
jellyfin/jellyfin:10.11.11aefb67e6a7ff
openldap@2.6.10+dfsg-1
no fix listed

Open the chart page →

2,604
gitops-promotergitops-promoterOfficialVerified publisher0.17.01 of 2See more

gitops-promoter gitops-promoter 0.17.0

1 of the 2 container images this version deploys carry CVE-2026-22185.

Container imageDigestPackageFixed in
quay.io/argoprojlabs/gitops-promoter:v0.38.19c8a510dc25e
openldap@2.6.10+dfsg-1
no fix listed

Open the chart page →

2,814
glpiglpi-conteiner0.1.02 of 3See more

glpi glpi-conteiner 0.1.0

2 of the 3 container images this version deploys carry CVE-2026-22185.

Container imageDigestPackageFixed in
library/phpmyadmin:latest3a8a8d6b5289
openldap@2.6.10+dfsg-1
no fix listed
vdiogov/glpi-conteiner:latest6945f84f0058
openldap@2.5.13+dfsg-5
no fix listed

Open the chart page →

12,170
dolibarrhelmforgeVerified publisher1.2.181 of 3See more

dolibarr helmforge 1.2.18

1 of the 3 container images this version deploys carry CVE-2026-22185.

Container imageDigestPackageFixed in
dolibarr/dolibarr:24.0.069ec52e3b7ef
openldap@2.5.13+dfsg-5
no fix listed

Open the chart page →

4,109
karakeephelmforgeVerified publisher1.2.91 of 3See more

karakeep helmforge 1.2.9

1 of the 3 container images this version deploys carry CVE-2026-22185.

Container imageDigestPackageFixed in
ghcr.io/karakeep-app/karakeep:0.33.2b069e4307dec
openldap@2.5.13+dfsg-5
no fix listed

Open the chart page →

9,460
openhabhelmforgeVerified publisher1.2.01 of 1See more

openhab helmforge 1.2.0

1 of the 1 container images this version deploys carry CVE-2026-22185.

Container imageDigestPackageFixed in
openhab/openhab:5.2.1bfd4a60e90da
openldap@2.6.10+dfsg-1
no fix listed

Open the chart page →

3,641
postgresqlhelmforgeVerified publisher2.0.51 of 1See more

postgresql helmforge 2.0.5

1 of the 1 container images this version deploys carry CVE-2026-22185.

Container imageDigestPackageFixed in
library/postgres:18.6-trixie4ef4dbc939d6
openldap@2.6.10+dfsg-1
no fix listed

Open the chart page →

1,626
umamihelmforgeVerified publisher2.3.31 of 3See more

umami helmforge 2.3.3

1 of the 3 container images this version deploys carry CVE-2026-22185.

Container imageDigestPackageFixed in
library/postgres:18.6-trixie4ef4dbc939d6
openldap@2.6.10+dfsg-1
no fix listed

Open the chart page →

2,027
openctihelm-openctiVerified publisher3.0.91 of 8See more

opencti helm-opencti 3.0.9

1 of the 8 container images this version deploys carry CVE-2026-22185.

Container imageDigestPackageFixed in
bitnamilegacy/rabbitmq:4.1.2-debian-12-r1fac502149c40
openldap@2.5.13+dfsg-5
no fix listed

Open the chart page →

3,383
hertzbeathertzbeatOfficialVerified publisher1.8.11 of 4See more

hertzbeat hertzbeat 1.8.1

1 of the 4 container images this version deploys carry CVE-2026-22185.

Container imageDigestPackageFixed in
library/postgres:159b1d34adbce1
openldap@2.6.10+dfsg-1
no fix listed

Open the chart page →

14,000
infrahubinfrahubVerified publisher4.33.22 of 5See more

infrahub infrahub 4.33.2

2 of the 5 container images this version deploys carry CVE-2026-22185.

Container imageDigestPackageFixed in
bitnamilegacy/postgresql:14.13.0df6ec02e2b9a
openldap@2.5.13+dfsg-5
no fix listed
bitnamilegacy/rabbitmq:4.1.3-debian-12-r19e635efba431
openldap@2.5.13+dfsg-5
no fix listed

Open the chart page →

10,428

Container images carrying it

861 by charts deploying them

A fixed version is listed for 0 of the 2 affected packages.

Container imageDigestPackageFixed inUsed by
quay.io/jupyterhub/k8s-singleuser-sample:4.4.265e1b09fc8c9
lmdb@0.9.24-1
openldap@2.5.13+dfsg-5
no fix listed
no fix listed
1
quay.io/opsmxpublic/ubi8-oes-datascience:isd-spin-2025.10.01-af26a30d4-202511261054d8f66f4117fe
openldap@2.6.10+dfsg-1
no fix listed
1
quay.io/yushiwho/api:e1f9d77e0d9b93dbf2b
openldap@2.5.13+dfsg-5
no fix listed
1
registry.gitlab.com/enbuild-staging/vivsoft-platform-ui/enbuild-frontend:1.0.3166353ce9bf98
openldap@2.6.10+dfsg-1
no fix listed
1
registry.gitlab.com/enbuild-staging/vivsoft-platform-ui/enbuild-mq-consumer:1.0.310e3cd8c7776d
openldap@2.5.13+dfsg-5
no fix listed
1
registry.gitlab.com/gitlab-org/build/cng/gitlab-openbao:v2.5.5-gitlab25b7636dfba3f
openldap@2.6.10+dfsg-1
no fix listed
1
registry.gitlab.com/school_guy/docker-typo3:13.4.30-197d868ed76185d7270d
openldap@2.5.13+dfsg-5
no fix listed
1
registry.k8s.io/git-sync/git-sync:v4.5.00e64aedb0d0a
openldap@2.6.10+dfsg-1
no fix listed
1
registry.k8s.io/git-sync/git-sync:v4.1.0fd9722fd02e3
openldap@2.5.13+dfsg-5
no fix listed
1
registry.k8s.io/sig-storage/nfsplugin:v4.13.41eb5a85180a4
openldap@2.5.13+dfsg-5
no fix listed
1
registry.k8s.io/sig-storage/nfsplugin:v4.11.0ce5b5ccd5eb0
openldap@2.5.13+dfsg-5
no fix listed
1

syft 1.42.1 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.