CVE-2026-2219
HighAdvisory
Published 5 Mar 2026In the index since 5 Sept 2026
- Severity
- High
- worst across findings
- CVSS
- 7.5
- base score, highest
- EPSS
- 0.004
- 35th percentile
- CISA KEV
- Not listed
- no confirmed exploitation
- Charts affected
- 853
- of 17,787 indexed, latest versions
- Container images
- 946
- deployed by those charts
- Fix available
- 2 of 2
- affected packages
Security update for dpkg
Carried by container images the latest versions of 853 of 17,787 indexed charts deploy, on 946 images.
| Affected package | Affected versions | Fixed in | Images |
|---|---|---|---|
| dpkgdeb | 1.21.22, 1.22.6ubuntu6, 1.22.6ubuntu6.1, 1.22.6ubuntu6.2+3 more | 1.21.23, 1.22.6ubuntu6.6, 1.22.21+e1, 1.22.21ubuntu3.2+1 more | 945 |
| update-alternativesrpm | 1.22.21-160000.2.2 | 1.22.21-160000.3.1 | 1 |
- OSV records
- DEBIAN-CVE-2026-2219UBUNTU-CVE-2026-2219ECHO-d2d4-4737-f820SUSE-SU-2026:22085-1
- Also known as
- USN-8249-1
Charts affected
853 by stars
Container images carrying it
946 by charts deploying them
A fixed version is listed for 2 of the 2 affected packages.
| Container image | Digest | Package | Fixed in | Used by |
|---|---|---|---|---|
| openbas/ | a277796d9724 | dpkg | 1.21.23 | 1 |
| openbas/ | d986d80b0a75 | dpkg | 1.22.6ubuntu6.6 | 1 |
| opencsghq/ | 2f03fead54db | dpkg | 1.21.23 | 1 |
| opencsghq/ | 93ad59164d87 | dpkg | 1.21.23 | 1 |
| opencsghq/ | 302c9d45d8a8 | dpkg | 1.21.23 | 1 |
| opencsghq/ | 04121fd19ef9 | dpkg | 1.21.23 | 1 |
| opencsghq/ | bdd2c58b9744 | dpkg | 1.21.23 | 1 |
| opencsghq/ | f6d7e7d6be5d | dpkg | 1.21.23 | 1 |
| opencsghq/ | b6d87e1048c2 | dpkg | 1.21.23 | 1 |
| opendatacube/ | 120457ffcd69 | dpkg | 1.22.6ubuntu6.6 | 1 |
| openproject/ | 88dc1359dfb5 | dpkg | 1.21.23 | 1 |
| openvino/ | 1e7cd1d70cc1 | dpkg | 1.22.6ubuntu6.6 | 1 |
| outlinewiki/ | 494dfb9249a6 | dpkg | 1.21.23 | 1 |
| phan2410/ | 9c6ed6de26ca | dpkg | 1.21.23 | 1 |
| phan2410/ | 4a86d138832d | dpkg | 1.21.23 | 1 |
| photoprism/ | db16ee6b1ba3 | dpkg | 1.22.21ubuntu3.2 | 1 |
| photoprism/ | fc6fd632ca74 | dpkg | 1.22.6ubuntu6.6 | 1 |
| phpmyadmin/ | 42a200db07b4 | dpkg | 1.22.22 | 1 |
| pk910/ | 3dcae6a62896 | dpkg | 1.21.23 | 1 |
| pococze/ | 7a1aab425e51 | dpkg | 1.21.23 | 1 |
| praravind1801/ | f29d637b9ce1 | dpkg | 1.21.23 | 1 |
| prefecthq/ | 1df4b5b6238a | dpkg | 1.21.23 | 1 |
| prodrigestivill/ | f70742ebe42b | dpkg | 1.22.22 | 1 |
| prom/ | 71c2e988af06 | dpkg | 1.22.6ubuntu6.6 | 1 |
| promzeus/ | 82f6d56e280b | dpkg | 1.21.23 | 1 |
| proxysql/ | a4d6c35c2949 | dpkg | 1.21.23 | 1 |
| qdrant/ | 5f2a56b95266 | dpkg | 1.21.23 | 1 |
| qdrant/ | 66ee661d5241 | dpkg | 1.21.23 | 1 |
| quickwit/ | d29332bdadcc | dpkg | 1.21.23 | 1 |
| qxip/ | 77acc9c7a9fd | dpkg | 1.21.23 | 1 |
| radarbase/ | e1758508e033 | dpkg | 1.22.6ubuntu6.6 | 1 |
| radarbase/ | fcd973d4796d | dpkg | 1.22.6ubuntu6.6 | 1 |
| readysettech/ | 588f3507280e | dpkg | 1.22.6ubuntu6.6 | 1 |
| readysettech/ | 67a83203ce60 | dpkg | 1.22.6ubuntu6.6 | 1 |
| redash/ | 00d813437db5 | dpkg | 1.21.23 | 1 |
| redash/ | c5c9148f5c38 | dpkg | 1.21.23 | 1 |
| rhasspy/ | e532f0dbc6b2 | dpkg | 1.21.23 | 1 |
| rnwood/ | 912304153668 | dpkg | 1.21.23 | 1 |
| rocketadmin/ | 10955ef540b9 | dpkg | 1.21.23 | 1 |
| rocketchat/ | cfba5c20a5cc | dpkg | 1.21.23 | 1 |
| rotationalio/ | 69fd30c2e31c | dpkg | 1.21.23 | 1 |
| rrobetti/ | 1141bd88232b | dpkg | 1.22.6ubuntu6.6 | 1 |
| rtuszik/ | 21549c60f9e6 | dpkg | 1.22.6ubuntu6.6 | 1 |
| ryshe/ | b1c89f7f359a | dpkg | 1.21.23 | 1 |
| ryuunosukeds3/ | 0879f7261b10 | dpkg | 1.21.23 | 1 |
| santisbon/ | c4e994ca4540 | dpkg | 1.21.23 | 1 |
| santisbon/ | e807283f8d69 | dpkg | 1.21.23 | 1 |
| santisbon/ | 8ee3a1697227 | dpkg | 1.21.23 | 1 |
| sashafefler/ | f96d7804c0ca | dpkg | 1.21.23 | 1 |
| sbs20/ | dad1fd6e9a98 | dpkg | 1.21.23 | 1 |