StackRadar

CVE-2026-22185

Medium

Advisory

Published 7 Jan 2026In the index since 5 Sept 2026
Severity
Medium
worst across findings
CVSS
4.6
base score, highest
EPSS
0.001
4th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
1,077
of 17,781 indexed, latest versions
Container images
873
deployed by those charts
Fix available
None
affected packages

The matching OSV records carry no description.

Carried by container images the latest versions of 1,077 of 17,781 indexed charts deploy, on 873 images.

Affected packageAffected versionsFixed inImages
openldapdeb2.5.13+dfsg-5, 2.6.10+dfsg-1, 2.6.10+dfsg-1+b1, 2.6.10+dfsg-1+dhi1no fix listed749
lmdbdeb0.9.17-3, 0.9.21-1ubuntu0.1, 0.9.24-1, 0.9.24-1build2+3 moreno fix listed152
OSV records
DEBIAN-CVE-2026-22185UBUNTU-CVE-2026-22185

Charts affected

1,077 by stars
ChartLatestAffected imagesRadar Score
openbaogitlabVerified publisher0.18.11 of 1See more

openbao gitlab 0.18.1

1 of the 1 container images this version deploys carry CVE-2026-22185.

Container imageDigestPackageFixed in
registry.gitlab.com/gitlab-org/build/cng/gitlab-openbao:v2.5.5-gitlab25b7636dfba3f
openldap@2.6.10+dfsg-1
no fix listed

Open the chart page →

1,769
castopodh2mVerified publisher1.12.101 of 3See more

castopod h2m 1.12.10

1 of the 3 container images this version deploys carry CVE-2026-22185.

Container imageDigestPackageFixed in
castopod/castopod:1.12.101fd37280cbb2
openldap@2.5.13+dfsg-5
no fix listed

Open the chart page →

10,072
harp-proxyharp0.8.11 of 1See more

harp-proxy harp 0.8.1

1 of the 1 container images this version deploys carry CVE-2026-22185.

Container imageDigestPackageFixed in
makersquad/harp-proxy:0.8.1a40dd258c527
openldap@2.5.13+dfsg-5
no fix listed

Open the chart page →

6,374
hawkhawk1.1.51 of 4See more

hawk hawk 1.1.5

1 of the 4 container images this version deploys carry CVE-2026-22185.

Container imageDigestPackageFixed in
library/postgres:16.109f23e02d766
openldap@2.5.13+dfsg-5
no fix listed

Open the chart page →

13,610
hello-helmhellok8s0.1.01 of 2See more

hello-helm hellok8s 0.1.0

1 of the 2 container images this version deploys carry CVE-2026-22185.

Container imageDigestPackageFixed in
library/nginx:latest05b8cb60c354
openldap@2.6.10+dfsg-1
no fix listed

Open the chart page →

2,000
guacamolehelmforgeVerified publisher1.5.22 of 5See more

guacamole helmforge 1.5.2

2 of the 5 container images this version deploys carry CVE-2026-22185.

Container imageDigestPackageFixed in
library/postgres:18.6-trixie4ef4dbc939d6
openldap@2.6.10+dfsg-1
no fix listed
library/postgres:17.5-bookwormfbcea1bd13b6
openldap@2.5.13+dfsg-5
no fix listed

Open the chart page →

8,716
matomohelmforgeVerified publisher2.3.01 of 3See more

matomo helmforge 2.3.0

1 of the 3 container images this version deploys carry CVE-2026-22185.

Container imageDigestPackageFixed in
library/matomo:5.13.0-apache8e6bdd396496
openldap@2.6.10+dfsg-1
no fix listed

Open the chart page →

2,680
vaultwardenhelmforgeVerified publisher1.13.11 of 1See more

vaultwarden helmforge 1.13.1

1 of the 1 container images this version deploys carry CVE-2026-22185.

Container imageDigestPackageFixed in
vaultwarden/server:1.37.2094b5689ed81
openldap@2.6.10+dfsg-1
no fix listed

Open the chart page →

1,744
mywebapphelm-nginxVerified publisher0.1.01 of 1See more

mywebapp helm-nginx 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-22185.

Container imageDigestPackageFixed in
library/nginx:latest05b8cb60c354
openldap@2.6.10+dfsg-1
no fix listed

Open the chart page →

1,827
helmuphelmupVerified publisher0.1.02 of 3See more

helmup helmup 0.1.0

2 of the 3 container images this version deploys carry CVE-2026-22185.

Container imageDigestPackageFixed in
sirrend/helmup-engine:0.1.13699e79e3d4e2
openldap@2.5.13+dfsg-5
no fix listed
sirrend/helmup-github-scraper:0.1.47ca688c7abf5
openldap@2.5.13+dfsg-5
no fix listed

Open the chart page →

16,514
htnn-controllerhtnnVerified publisher0.5.01 of 1See more

htnn-controller htnn 0.5.0

1 of the 1 container images this version deploys carry CVE-2026-22185.

Container imageDigestPackageFixed in
ghcr.io/mosn/htnn-controller:v0.3.1c379e66246be
lmdb@0.9.24-1build2
no fix listed

Open the chart page →

4,300
huehue1.0.31 of 3See more

hue hue 1.0.3

1 of the 3 container images this version deploys carry CVE-2026-22185.

Container imageDigestPackageFixed in
gethue/hue:latest7d5c1b9f8a79
lmdb@0.9.24-1build2
no fix listed

Open the chart page →

12,397
backendikusi-bk-chart1.0.31 of 3See more

backend ikusi-bk-chart 1.0.3

1 of the 3 container images this version deploys carry CVE-2026-22185.

Container imageDigestPackageFixed in
library/postgres:159b1d34adbce1
openldap@2.6.10+dfsg-1
no fix listed

Open the chart page →

5,940
odooimioVerified publisher3.0.21 of 3See more

odoo imio 3.0.2

1 of the 3 container images this version deploys carry CVE-2026-22185.

Container imageDigestPackageFixed in
library/postgres:17.10ebba4f4de37f
openldap@2.6.10+dfsg-1
no fix listed

Open the chart page →

3,068
immichimmich-helm0.3.02 of 4See more

immich immich-helm 0.3.0

2 of the 4 container images this version deploys carry CVE-2026-22185.

Container imageDigestPackageFixed in
ghcr.io/immich-app/immich-server:v2.3.1f8d06a32b1b2
openldap@2.6.10+dfsg-1
no fix listed
ghcr.io/immich-app/postgres:14-vectorchord0.4.3-pgvectors0.2.0bcf63357191b
openldap@2.5.13+dfsg-5
no fix listed

Open the chart page →

15,712
iris-webappiris-webapp0.2.41 of 2See more

iris-webapp iris-webapp 0.2.4

1 of the 2 container images this version deploys carry CVE-2026-22185.

Container imageDigestPackageFixed in
ghcr.io/dfir-iris/iriswebapp_app:v2.4.26e59ebde55709
openldap@2.6.10+dfsg-1
no fix listed

Open the chart page →

11,764
cniistio1.10.31 of 1See more

cni istio 1.10.3

1 of the 1 container images this version deploys carry CVE-2026-22185.

Container imageDigestPackageFixed in
istio/install-cni:1.10.32232f365aed6
lmdb@0.9.21-1ubuntu0.1
no fix listed

Open the chart page →

10,400
discoveryistio1.10.31 of 1See more

discovery istio 1.10.3

1 of the 1 container images this version deploys carry CVE-2026-22185.

Container imageDigestPackageFixed in
istio/pilot:1.10.3e7e110a421c2
lmdb@0.9.21-1ubuntu0.1
no fix listed

Open the chart page →

10,475
egressistio1.10.31 of 1See more

egress istio 1.10.3

1 of the 1 container images this version deploys carry CVE-2026-22185.

Container imageDigestPackageFixed in
istio/proxyv2:1.10.3a78b7a165744
lmdb@0.9.21-1ubuntu0.1
no fix listed

Open the chart page →

10,421
ingressistio1.10.31 of 1See more

ingress istio 1.10.3

1 of the 1 container images this version deploys carry CVE-2026-22185.

Container imageDigestPackageFixed in
istio/proxyv2:1.10.3a78b7a165744
lmdb@0.9.21-1ubuntu0.1
no fix listed

Open the chart page →

10,421
operatoristio1.10.31 of 1See more

operator istio 1.10.3

1 of the 1 container images this version deploys carry CVE-2026-22185.

Container imageDigestPackageFixed in
istio/operator:1.10.3655eefa11c84
lmdb@0.9.21-1ubuntu0.1
no fix listed

Open the chart page →

10,701
jellyfinjellyfinVerified publisher0.3.301 of 1See more

jellyfin jellyfin 0.3.30

1 of the 1 container images this version deploys carry CVE-2026-22185.

Container imageDigestPackageFixed in
ghcr.io/jellyfin/jellyfin:10.11.1145f648c382a0
openldap@2.6.10+dfsg-1
no fix listed

Open the chart page →

2,604
jenkinsjkimVerified publisher5.5.141 of 2See more

jenkins jkim 5.5.14

1 of the 2 container images this version deploys carry CVE-2026-22185.

Container imageDigestPackageFixed in
jenkins/jenkins:2.462.2-jdk1795313257a8cd
openldap@2.5.13+dfsg-5
no fix listed

Open the chart page →

7,387
web-chartkbt-ktcloudlab0.1.01 of 1See more

web-chart kbt-ktcloudlab 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-22185.

Container imageDigestPackageFixed in
library/nginx:latest05b8cb60c354
openldap@2.6.10+dfsg-1
no fix listed

Open the chart page →

1,827
kdiffkdiff-snapshotsVerified publisher0.0.2031 of 2See more

kdiff kdiff-snapshots 0.0.203

1 of the 2 container images this version deploys carry CVE-2026-22185.

Container imageDigestPackageFixed in
ghcr.io/oguzhan-yilmaz/kdiff-snapshots:0.0.2035bc5ca66d55a
openldap@2.5.13+dfsg-5
no fix listed

Open the chart page →

5,508
kdiff-snapshotskdiff-snapshotsVerified publisher0.0.551 of 1See more

kdiff-snapshots kdiff-snapshots 0.0.55

1 of the 1 container images this version deploys carry CVE-2026-22185.

Container imageDigestPackageFixed in
ghcr.io/oguzhan-yilmaz/kdiff-snapshots:0.0.55d7f93d2182fe
openldap@2.5.13+dfsg-5
no fix listed

Open the chart page →

5,789
app-componentkeltio-helm-chartsVerified publisher3.14.01 of 1See more

app-component keltio-helm-charts 3.14.0

1 of the 1 container images this version deploys carry CVE-2026-22185.

Container imageDigestPackageFixed in
library/nginx:latest05b8cb60c354
openldap@2.6.10+dfsg-1
no fix listed

Open the chart page →

1,827
kenerkenerVerified publisher0.2.01 of 1See more

kener kener 0.2.0

1 of the 1 container images this version deploys carry CVE-2026-22185.

Container imageDigestPackageFixed in
rajnandan1/kener:3.2.1930407afca731
openldap@2.5.13+dfsg-5
no fix listed

Open the chart page →

5,228
kikplatekikplateVerified publisher0.22.01 of 3See more

kikplate kikplate 0.22.0

1 of the 3 container images this version deploys carry CVE-2026-22185.

Container imageDigestPackageFixed in
library/postgres:16f1c3376c26f2
openldap@2.6.10+dfsg-1
no fix listed

Open the chart page →

2,770
glpikitsune-itopsVerified publisher1.0.71 of 3See more

glpi kitsune-itops 1.0.7

1 of the 3 container images this version deploys carry CVE-2026-22185.

Container imageDigestPackageFixed in
glpi/glpi:latest4b681082a79e
openldap@2.6.10+dfsg-1
no fix listed

Open the chart page →

4,802
powerdns-recursorklicktippVerified publisher0.4.101 of 1See more

powerdns-recursor klicktipp 0.4.10

1 of the 1 container images this version deploys carry CVE-2026-22185.

Container imageDigestPackageFixed in
powerdns/pdns-recursor-54:5.4.533aadc74a8d6
openldap@2.6.10+dfsg-1
no fix listed

Open the chart page →

1,873
knot-resolverknot-resolverVerified publisher1.0.51 of 1See more

knot-resolver knot-resolver 1.0.5

1 of the 1 container images this version deploys carry CVE-2026-22185.

Container imageDigestPackageFixed in
cznic/knot-resolver:v6.4.2fe71c5214fdc
lmdb@0.9.31-1+b2
no fix listed

Open the chart page →

2,049
difykubeblocksVerified publisher0.5.11 of 5See more

dify kubeblocks 0.5.1

1 of the 5 container images this version deploys carry CVE-2026-22185.

Container imageDigestPackageFixed in
langgenius/dify-api:0.6.11fca918260dd6
openldap@2.5.13+dfsg-5
no fix listed

Open the chart page →

20,403
owncloudkubernetes-homelab-helm-chartsVerified publisher0.1.01 of 3See more

owncloud kubernetes-homelab-helm-charts 0.1.0

1 of the 3 container images this version deploys carry CVE-2026-22185.

Container imageDigestPackageFixed in
owncloud/server:10.16.274c53d341076
lmdb@0.9.24-1build2
no fix listed

Open the chart page →

9,858
overpass-apil4gVerified publisher0.1.21 of 1See more

overpass-api l4g 0.1.2

1 of the 1 container images this version deploys carry CVE-2026-22185.

Container imageDigestPackageFixed in
wiktorn/overpass-api:latest9bb5f4a9b54c
openldap@2.5.13+dfsg-5
no fix listed

Open the chart page →

3,544
checkoutlabs64io-helm-chartsVerified publisher0.8.01 of 3See more

checkout labs64io-helm-charts 0.8.0

1 of the 3 container images this version deploys carry CVE-2026-22185.

Container imageDigestPackageFixed in
library/postgres:184ef4dbc939d6
openldap@2.6.10+dfsg-1
no fix listed

Open the chart page →

1,626
payment-gatewaylabs64io-helm-chartsVerified publisher0.8.01 of 2See more

payment-gateway labs64io-helm-charts 0.8.0

1 of the 2 container images this version deploys carry CVE-2026-22185.

Container imageDigestPackageFixed in
library/postgres:184ef4dbc939d6
openldap@2.6.10+dfsg-1
no fix listed

Open the chart page →

2,657
langflow-idelangflow0.1.21 of 2See more

langflow-ide langflow 0.1.2

1 of the 2 container images this version deploys carry CVE-2026-22185.

Container imageDigestPackageFixed in
langflowai/langflow-frontend:latest54f67f1961fe
openldap@2.5.13+dfsg-5
no fix listed

Open the chart page →

3,980
flaresolverrlib42Verified publisher2.0.01 of 1See more

flaresolverr lib42 2.0.0

1 of the 1 container images this version deploys carry CVE-2026-22185.

Container imageDigestPackageFixed in
ghcr.io/flaresolverr/flaresolverr:v3.4.0ab535d1fef5d
openldap@2.5.13+dfsg-5
no fix listed

Open the chart page →

35,050
music-assistant-serverlmatfyVerified publisher0.1.91 of 1See more

music-assistant-server lmatfy 0.1.9

1 of the 1 container images this version deploys carry CVE-2026-22185.

Container imageDigestPackageFixed in
ghcr.io/music-assistant/server:2.7.53522e8a7a8f0
openldap@2.5.13+dfsg-5
no fix listed

Open the chart page →

7,201
flaresolverrm0nsterrr-flaresolverrVerified publisher2.4.11 of 1See more

flaresolverr m0nsterrr-flaresolverr 2.4.1

1 of the 1 container images this version deploys carry CVE-2026-22185.

Container imageDigestPackageFixed in
ghcr.io/flaresolverr/flaresolverr:v3.5.2c80ae007ce2c
openldap@2.5.13+dfsg-5
no fix listed

Open the chart page →

6,136
jellyfinmedia-servarrVerified publisher0.16.01 of 2See more

jellyfin media-servarr 0.16.0

1 of the 2 container images this version deploys carry CVE-2026-22185.

Container imageDigestPackageFixed in
jellyfin/jellyfin:10.11.11aefb67e6a7ff
openldap@2.6.10+dfsg-1
no fix listed

Open the chart page →

2,753
photoprismmmontesVerified publisher0.14.01 of 1See more

photoprism mmontes 0.14.0

1 of the 1 container images this version deploys carry CVE-2026-22185.

Container imageDigestPackageFixed in
photoprism/photoprism:251130db16ee6b1ba3
lmdb@0.9.31-1build1
no fix listed

Open the chart page →

11,103
food-managermoreillonVerified publisher0.5.01 of 2See more

food-manager moreillon 0.5.0

1 of the 2 container images this version deploys carry CVE-2026-22185.

Container imageDigestPackageFixed in
moreillon/food-manager:lateste8fd856e593d
openldap@2.5.13+dfsg-5
no fix listed

Open the chart page →

13,738
redminemt1905027.3.42 of 3See more

redmine mt190502 7.3.4

2 of the 3 container images this version deploys carry CVE-2026-22185.

Container imageDigestPackageFixed in
library/postgres:184ef4dbc939d6
openldap@2.6.10+dfsg-1
no fix listed
library/redmine:6.1.204ac44a2595b
openldap@2.6.10+dfsg-1
no fix listed

Open the chart page →

7,527
12factormyaVerified publisher24.1.21 of 1See more

12factor mya 24.1.2

1 of the 1 container images this version deploys carry CVE-2026-22185.

Container imageDigestPackageFixed in
library/nginx:latest05b8cb60c354
openldap@2.6.10+dfsg-1
no fix listed

Open the chart page →

1,827
my-react-appmy-react-app0.1.51 of 1See more

my-react-app my-react-app 0.1.5

1 of the 1 container images this version deploys carry CVE-2026-22185.

Container imageDigestPackageFixed in
library/nginx:latest05b8cb60c354
openldap@2.6.10+dfsg-1
no fix listed

Open the chart page →

1,827
n3uronn3uronVerified publisher0.3.51 of 1See more

n3uron n3uron 0.3.5

1 of the 1 container images this version deploys carry CVE-2026-22185.

Container imageDigestPackageFixed in
n3uronhub/n3uron:v1.22.4423a0bdd9cb9
openldap@2.6.10+dfsg-1
no fix listed

Open the chart page →

1,879
spring-helmnaveenalla-springboot1.0.01 of 2See more

spring-helm naveenalla-springboot 1.0.0

1 of the 2 container images this version deploys carry CVE-2026-22185.

Container imageDigestPackageFixed in
library/postgres:latest4ef4dbc939d6
openldap@2.6.10+dfsg-1
no fix listed

Open the chart page →

1,626
clowder2ncsaVerified publisher1.9.72 of 12See more

clowder2 ncsa 1.9.7

2 of the 12 container images this version deploys carry CVE-2026-22185.

Container imageDigestPackageFixed in
bitnamilegacy/elasticsearch:8.12.215d4647fd491
openldap@2.5.13+dfsg-5
no fix listed
bitnamilegacy/os-shell:12-debian-12-r16d24925821dd2
openldap@2.5.13+dfsg-5
no fix listed

Open the chart page →

37,373

Container images carrying it

873 by charts deploying them

A fixed version is listed for 0 of the 2 affected packages.

Container imageDigestPackageFixed inUsed by
library/buildpack-deps:scmac978b783657
openldap@2.6.10+dfsg-1
no fix listed
1
library/couchdb:3.4.22817ad50b5c5
openldap@2.5.13+dfsg-5
no fix listed
1
library/drupal:11.4.6-php8.5-apache-bookworm28f7931ecbcb
openldap@2.5.13+dfsg-5
no fix listed
1
library/golang:latest512690a56605
openldap@2.6.10+dfsg-1
no fix listed
1
library/httpd:2.4.631ae8051591a5
openldap@2.5.13+dfsg-5
no fix listed
1
library/influxdb:2.8571eb4514977
openldap@2.5.13+dfsg-5
no fix listed
1
library/influxdb:1.12.3-meta8812029260b5
openldap@2.5.13+dfsg-5
no fix listed
1
library/influxdb:1.12.3-datab0f9fc41ed79
openldap@2.5.13+dfsg-5
no fix listed
1
library/influxdb:latestf75e48af0598
openldap@2.5.13+dfsg-5
no fix listed
1
library/matomo:5.1.2-apache2415789e1602
openldap@2.5.13+dfsg-5
no fix listed
1
library/matomo:5.13.0-apache8e6bdd396496
openldap@2.6.10+dfsg-1
no fix listed
1
library/mysql:8.0-debian9382e4f6f7f0
openldap@2.5.13+dfsg-5
no fix listed
1
library/nextcloud:31.0.6-apache588609d76b21
openldap@2.5.13+dfsg-5
no fix listed
1
library/nextcloud:31.0.10-apacheb7faa1653c39
openldap@2.6.10+dfsg-1
no fix listed
1
library/nginx:1.27.409369da6b103
openldap@2.5.13+dfsg-5
no fix listed
1
library/nginx:1.291881968aff6f
openldap@2.6.10+dfsg-1
no fix listed
1
library/nginx:1.276784fb0834aa
openldap@2.5.13+dfsg-5
no fix listed
1
library/nginx:1.25.167f9a4f10d14
openldap@2.5.13+dfsg-5
no fix listed
1
library/nginx:1.25.49ff236ed47fe
openldap@2.5.13+dfsg-5
no fix listed
1
library/nginx:1.27.3fb197595ebe7
openldap@2.5.13+dfsg-5
no fix listed
1
library/node:208f693eaa7e0a
openldap@2.5.13+dfsg-5
no fix listed
1
library/node:latestf5d1cc40abc1
openldap@2.6.10+dfsg-1
no fix listed
1
library/php:8.4-fpm59fa733c9af6
openldap@2.6.10+dfsg-1
no fix listed
1
library/postgres:18.0073e7c8b84e2
openldap@2.6.10+dfsg-1
no fix listed
1
library/postgres:17.4304ab8135187
openldap@2.5.13+dfsg-5
no fix listed
1
library/postgres:18.43a82e1f56c8f
openldap@2.6.10+dfsg-1
no fix listed
1
library/postgres:16.11468e1f126ca5
openldap@2.6.10+dfsg-1
no fix listed
1
library/postgres:16.6557fea37a744
openldap@2.5.13+dfsg-5
no fix listed
1
library/postgres:18.369e8582b781c
openldap@2.6.10+dfsg-1
no fix listed
1
library/postgres:15.186eb0add3b77c
openldap@2.6.10+dfsg-1
no fix listed
1
library/postgres:15.38775adb39f0d
openldap@2.5.13+dfsg-5
no fix listed
1
library/postgres:18.48ff36f3c6637
openldap@2.6.10+dfsg-1
no fix listed
1
library/postgres:18.3a9abf4275f9e
openldap@2.6.10+dfsg-1
no fix listed
1
library/postgres:17.5aadf2c0696f5
openldap@2.6.10+dfsg-1
no fix listed
1
library/postgres:13.12ced3ba927f4c
openldap@2.5.13+dfsg-5
no fix listed
1
library/postgres:15.18-bookworme8db9bd3e9e1
openldap@2.5.13+dfsg-5
no fix listed
1
library/postgres:14.22eba8ddbdd837
openldap@2.6.10+dfsg-1
no fix listed
1
library/postgres:17.10ebba4f4de37f
openldap@2.6.10+dfsg-1
no fix listed
1
library/postgres:17.5-bookwormfbcea1bd13b6
openldap@2.5.13+dfsg-5
no fix listed
1
library/python:3.1070c9cc675605
openldap@2.6.10+dfsg-1
no fix listed
1
library/python:3.8d41127070014
openldap@2.5.13+dfsg-5
no fix listed
1
library/python:3.9da5aee29682d
openldap@2.6.10+dfsg-1
no fix listed
1
library/redmine:6.1.204ac44a2595b
openldap@2.6.10+dfsg-1
no fix listed
1
library/telegraf:1.27507a3eecf809
openldap@2.5.13+dfsg-5
no fix listed
1
library/wordpress:6.4.3-apache8ae66efb09a2
openldap@2.5.13+dfsg-5
no fix listed
1
library/wordpress:6.9.4-fpmad4a8bae2eb4
openldap@2.6.10+dfsg-1
no fix listed
1
library/wordpress:php8.1-apachef73396626d2f
openldap@2.6.10+dfsg-1
no fix listed
1
lis314/project-zomboid-docker:latestaa2089c37920
openldap@2.5.13+dfsg-5
no fix listed
1
localstack/localstack:3.19d278167f2b7
openldap@2.5.13+dfsg-5
no fix listed
1
longhornio/longhorn-manager:v1.2.3dca34321452c
lmdb@0.9.24-1
no fix listed
1

syft 1.42.1 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.