CVE-2026-2219

High

Advisory

Published 5 Mar 2026In the index since 5 Sept 2026

Severity: High; worst across findings
CVSS: 7.5; base score, highest
EPSS: 0.004; 35th percentile
CISA KEV: Not listed; no confirmed exploitation
Charts affected: 853; of 17,790 indexed, latest versions
Container images: 946; deployed by those charts
Fix available: 2 of 2; affected packages

Security update for dpkg

Carried by container images the latest versions of 853 of 17,790 indexed charts deploy, on 946 images.

Affected package	Affected versions	Fixed in	Images
dpkgdeb	1.21.22, 1.22.6ubuntu6, 1.22.6ubuntu6.1, 1.22.6ubuntu6.2+3 more	1.21.23, 1.22.6ubuntu6.6, 1.22.21+e1, 1.22.21ubuntu3.2+1 more	945
update-alternativesrpm	1.22.21-160000.2.2	1.22.21-160000.3.1	1

OSV records: DEBIAN-CVE-2026-2219 UBUNTU-CVE-2026-2219 ECHO-d2d4-4737-f820 SUSE-SU-2026:22085-1
Also known as: USN-8249-1

Charts affected

853 by stars

Chart

Latest

Affected images

Radar Score

xkopsxkops

0.1.0

3 of 5 See more

xkops xkops 0.1.0

3 of the 5 container images this version deploys carry CVE-2026-2219.

Container image	Digest	Package	Fixed in
hamzaarshad10/querybackend :1.6.2	2c1c3b86a8e7	dpkg@1.21.22	1.21.23
hamzaarshad10/querypodpy :1.7	154f38e8668e	dpkg@1.21.22	1.21.23
murtazashah46/helmfile :latest	4d11726cf803	dpkg@1.21.22	1.21.23

Open the chart page →

13,783

xlinexline

0.0.1

1 of 1 See more

xline xline 0.0.1

1 of the 1 container images this version deploys carry CVE-2026-2219.

Container image	Digest	Package	Fixed in
ghcr.io/liangyuanpeng/xline :latest	3d2eceb44a3b	dpkg@1.22.6ubuntu6	1.22.6ubuntu6.6

Open the chart page →

2,142

api-snapyoukadev

0.1.1

1 of 1 See more

api-snap youkadev 0.1.1

1 of the 1 container images this version deploys carry CVE-2026-2219.

Container image	Digest	Package	Fixed in
youkadev/api-snap :0.1.1	4db0f9428e67	dpkg@1.21.22	1.21.23

Open the chart page →

2,684

Container images carrying it

946 by charts deploying them

A fixed version is listed for 2 of the 2 affected packages.

Container image	Digest	Package	Fixed in	Used by
ghcr.io/wundergraph/cosmo/cdn :0.14.1	d86fcf169f15	dpkg@1.21.22	1.21.23	1
ghcr.io/wundergraph/cosmo/otelcollector :0.18.1	5a6fe78d4d15	dpkg@1.21.22	1.21.23	1
ghcr.io/yurymkomarov/docker/kubernetes-kiosk-chromium :0.1.2	7bff29dcec72	dpkg@1.21.22	1.21.23	1
ghcr.io/zoriya/kyoo_autosync :4.7.1	fbba58ddb1a6	dpkg@1.21.22	1.21.23	1
ghcr.io/zoriya/kyoo_back :4.7.1	416e980f76a6	dpkg@1.21.22	1.21.23	1
ghcr.io/zoriya/kyoo_migrations :4.7.1	f7e607f24071	dpkg@1.21.22	1.21.23	1
ghcr.io/zoriya/kyoo_scanner :4.7.1	7dc0ee57b628	dpkg@1.21.22	1.21.23	1
public.ecr.aws/aktosecurity/akto-api-security-testing-db-layer :1.74.4_local	1ed844ecab29	dpkg@1.22.6ubuntu6.5	1.22.6ubuntu6.6	1
public.ecr.aws/aktosecurity/redis	47200b041382	dpkg@1.21.22	1.21.23	1
public.ecr.aws/datadog/agent :7.73.0	f4925b15ce94	dpkg@1.22.6ubuntu6.5	1.22.6ubuntu6.6	1
public.ecr.aws/decisiveai/valkey :9.0.1	59c7e728fb3a	dpkg@1.22.21	1.22.22	1
public.ecr.aws/flanksource/incident-manager-ui :v1.4.317	fea799d4fb2f	dpkg@1.21.22	1.21.23	1
public.ecr.aws/groundcovercom/postgres :18.1-20260208	b7d7910c0bb0	dpkg@1.22.21	1.22.21+e1	1
public.ecr.aws/jtekt-corporation/image-storage-service :v1.16.17	b1493760c716	dpkg@1.21.22	1.21.23	1
public.ecr.aws/jtekt-corporation/image-storage-service-gui :v1.9.4	34823c8abe00	dpkg@1.21.22	1.21.23	1
public.ecr.aws/jtekt-corporation/shinsei-manager :v2.8.1	5cd62142d6ed	dpkg@1.21.22	1.21.23	1
public.ecr.aws/jtekt-corporation/shinsei-manager-front :v1.5.5	f8fb4eea4071	dpkg@1.21.22	1.21.23	1
public.ecr.aws/jtekt-corporation/time-series-storage-service :v1.5.1	046ef5c9ed50	dpkg@1.21.22	1.21.23	1
public.ecr.aws/k2x0t8t6/kubeadapt/app/kubeadapt-k8s-pulse :v3.0.1	dc5a516c2333	dpkg@1.21.22	1.21.23	1
public.ecr.aws/k6v9y5g3/cluster-agent :master.575	36d051110158	dpkg@1.21.22	1.21.23	1
public.ecr.aws/k6v9y5g3/cluster-agent :cost_k8s_process.576	9e14a72b066d	dpkg@1.21.22	1.21.23	1
public.ecr.aws/outerbounds/metaflow_metadata_service :v2.4.13	f7567ce3419d	dpkg@1.21.22	1.21.23	1
public.ecr.aws/spotinst/spot-network-client :1.0.14	86380a01587d	dpkg@1.22.6ubuntu6.5	1.22.6ubuntu6.6	1
public.ecr.aws/truefoundrycloud/async-service-distributor :5d48113bc678d694a0c8f8dabb2207c5aa2cfc53	f74851ce31f5	dpkg@1.21.22	1.21.23	1
quay.io/argoproj/argocd :v3.0.3	95b5cf7ba6fe	dpkg@1.22.6ubuntu6.1	1.22.6ubuntu6.6	1
quay.io/argoproj/argocd :v3.1.1	a36ab0c0860c	dpkg@1.22.6ubuntu6.1	1.22.6ubuntu6.6	1
quay.io/cilium/cilium :v1.18.2	858f807ea4e2	dpkg@1.22.6ubuntu6.1	1.22.6ubuntu6.6	1
quay.io/cilium/cilium :v1.17.14	cdcfab5b4466	dpkg@1.22.6ubuntu6.5	1.22.6ubuntu6.6	1
quay.io/cilium/cilium-envoy :v1.35.9-1773656288-7b052e66eb2cfc5ac130ce0a5be66202a10d83be	60031f396695	dpkg@1.22.6ubuntu6.5	1.22.6ubuntu6.6	1
quay.io/cilium/cilium-envoy :v1.34.7-1757592137-1a52bb680a956879722f48c591a2ca90f7791324	7932d656b63f	dpkg@1.22.6ubuntu6.1	1.22.6ubuntu6.6	1
quay.io/clustersecret/clustersecret :0.0.14	a9f835d1b241	dpkg@1.21.22	1.21.23	1
quay.io/codefresh/redis :7.4.3-debian-12-r0	935f97598255	dpkg@1.21.22	1.21.23	1
quay.io/jupyterhub/k8s-hub :4.3.5	113e372cf71b	dpkg@1.21.22	1.21.23	1
quay.io/jupyterhub/k8s-hub :4.3.4	92f883d09270	dpkg@1.21.22	1.21.23	1
quay.io/mittwald/kube-httpcache :stable	2169032c5840	dpkg@1.21.22	1.21.23	1
quay.io/mittwald/kube-mail :latest	04f1099241fc	dpkg@1.21.22	1.21.23	1
quay.io/opsmxpublic/rabbitmq :4.2-management	3408107e5cc4	dpkg@1.22.6ubuntu6.5	1.22.6ubuntu6.6	1
quay.io/opsmxpublic/ubi8-oes-datascience :isd-spin-2025.10.01-af26a30d4-202511261054	d8f66f4117fe	dpkg@1.22.21	1.22.22	1
quay.io/yushiwho/api :e1f9d77	e0d9b93dbf2b	dpkg@1.21.22	1.21.23	1
registry.gitlab.com/enbuild-staging/vivsoft-platform-ui/rabbitmq :3.12.14	5a9334f371f3	dpkg@1.21.22	1.21.23	1
registry.k8s.io/git-sync/git-sync :v4.5.0	0e64aedb0d0a	dpkg@1.22.21	1.22.22	1
registry.k8s.io/git-sync/git-sync :v4.1.0	fd9722fd02e3	dpkg@1.21.22	1.21.23	1
registry.k8s.io/node-problem-detector/node-problem-detector :v0.8.20	52f0618e9bc2	dpkg@1.21.22	1.21.23	1
registry.k8s.io/node-problem-detector/node-problem-detector :v1.35.1	c380751accc5	dpkg@1.21.22	1.21.23	1
registry.k8s.io/sig-storage/local-volume-provisioner :v2.8.0	3e2bf2eaef9f	dpkg@1.21.22	1.21.23	1
registry.k8s.io/sig-storage/nfsplugin :v4.11.0	ce5b5ccd5eb0	dpkg@1.21.22	1.21.23	1