StackRadar

CVE-2026-24049

High

Advisory

Published 22 Jan 2026In the index since 5 Sept 2026
Severity
High
worst across findings
CVSS
7.1
base score, highest
EPSS
0.003
25th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
491
of 17,781 indexed, latest versions
Container images
508
deployed by those charts
Fix available
3 of 4
affected packages

Wheel Affected by Arbitrary File Permission Modification via Path Traversal in wheel unpack

Carried by container images the latest versions of 491 of 17,781 indexed charts deploy, on 508 images.

Affected packageAffected versionsFixed inImages
wheelpypi0.40.0, 0.41.0, 0.41.1, 0.41.2+7 more0.46.2445
python-pipdeb1.5.4-1ubuntu4, 8.1.1-2ubuntu0.4, 9.0.1-2.3~ubuntu1, 9.0.1-2.3~ubuntu1.18.04.1+12 moreno fix listed64
wheeldeb0.42.0-2, 0.46.1-20.42.0-2ubuntu0.1~esm126
py3-setuptoolsapk75.8.0-r0, 80.9.0-r280.10.2-r02
OSV records
CGA-8262-rvw7-ph6vCGA-m596-w84m-mmc5GHSA-8rrh-rw8j-w5fxUBUNTU-CVE-2026-24049DEBIAN-CVE-2026-24049
Also known as
CGA-pc3r-mrfq-gqw5, CGA-qh9c-67fv-jhj9, PYSEC-2026-2047, USN-8221-1

Charts affected

491 by stars
ChartLatestAffected imagesRadar Score
palworldpalworld-server-chartVerified publisher2.7.11 of 1See more

palworld palworld-server-chart 2.7.1

1 of the 1 container images this version deploys carry CVE-2026-24049.

Container imageDigestPackageFixed in
thijsvanloef/palworld-server-docker:v2.7.1401d3eb5c053
wheel@0.46.1
wheel@0.46.1-2
0.46.2
no fix listed

Open the chart page →

3,681
peertubepeertubeVerified publisher0.1.31 of 1See more

peertube peertube 0.1.3

1 of the 1 container images this version deploys carry CVE-2026-24049.

Container imageDigestPackageFixed in
chocobozzz/peertube:v8.1.5052712130691
wheel@0.46.1
wheel@0.46.1-2
0.46.2
no fix listed

Open the chart page →

7,035
phonebook-chartphonebook-chart0.1.02 of 3See more

phonebook-chart phonebook-chart 0.1.0

2 of the 3 container images this version deploys carry CVE-2026-24049.

Container imageDigestPackageFixed in
ahmetgrbzz/result_server:2.035c37ae2bafd
wheel@0.43.0
0.46.2
ahmetgrbzz/web_server:2.0f018bafd2b0c
wheel@0.43.0
0.46.2

Open the chart page →

3,034
phpipamphpipam-helmVerified publisher1.0.121 of 3See more

phpipam phpipam-helm 1.0.12

1 of the 3 container images this version deploys carry CVE-2026-24049.

Container imageDigestPackageFixed in
library/mysql:8.0.40d58ac93387f6
wheel@0.43.0
0.46.2

Open the chart page →

3,778
portraitportraitVerified publisher0.2.131 of 8See more

portrait portrait 0.2.13

1 of the 8 container images this version deploys carry CVE-2026-24049.

Container imageDigestPackageFixed in
treskon/portrait-web-setup:DEV-latesta475d80e4ecf
wheel@0.43.0
0.46.2

Open the chart page →

31,844
privacyideaprivacyidea1.0.61 of 2See more

privacyidea privacyidea 1.0.6

1 of the 2 container images this version deploys carry CVE-2026-24049.

Container imageDigestPackageFixed in
gpappsoft/privacyidea-docker:3.12.2af7841adad26
wheel@0.45.1
0.46.2

Open the chart page →

5,440
kyoorubxkubeVerified publisher0.1.101 of 9See more

kyoo rubxkube 0.1.10

1 of the 9 container images this version deploys carry CVE-2026-24049.

Container imageDigestPackageFixed in
ghcr.io/zoriya/kyoo_scanner:4.7.17dc0ee57b628
wheel@0.43.0
0.46.2

Open the chart page →

30,234
devpisb-helm-charts0.3.01 of 1See more

devpi sb-helm-charts 0.3.0

1 of the 1 container images this version deploys carry CVE-2026-24049.

Container imageDigestPackageFixed in
jonasal/devpi-server:6.17.0-alpineec1eee99a18d
wheel@0.45.1
0.46.2

Open the chart page →

920
sentry-k8ssentry-k8sVerified publisher1.4.12 of 11See more

sentry-k8s sentry-k8s 1.4.1

2 of the 11 container images this version deploys carry CVE-2026-24049.

Container imageDigestPackageFixed in
confluentinc/cp-kafka:7.6.683dbca3efd2a
wheel@0.43.0
0.46.2
ghcr.io/getsentry/snuba:26.7.210f8d164109b
wheel@0.45.1
0.46.2

Open the chart page →

16,449
vuiseriohub1.0.62 of 3See more

vui seriohub 1.0.6

2 of the 3 container images this version deploys carry CVE-2026-24049.

Container imageDigestPackageFixed in
dserio83/velero-api:0.3.16b3d9115fee2
wheel@0.45.1
0.46.2
dserio83/velero-watchdog:0.1.8d5deae589229
wheel@0.45.1
0.46.2

Open the chart page →

11,532
k8s-appliershlomibendavidOfficialVerified publisher1.0.11 of 1See more

k8s-applier shlomibendavid 1.0.1

1 of the 1 container images this version deploys carry CVE-2026-24049.

Container imageDigestPackageFixed in
shlomibendavid/k8s-applier:0311240529a22ffbe0f04e
wheel@0.40.0
0.46.2

Open the chart page →

1,206
smallest-self-hostsmallest-self-hostVerified publisher0.2.21 of 12See more

smallest-self-host smallest-self-host 0.2.2

1 of the 12 container images this version deploys carry CVE-2026-24049.

Container imageDigestPackageFixed in
quay.io/kiwigrid/k8s-sidecar:1.26.1b8d5067137fe
wheel@0.42.0
0.46.2

Open the chart page →

7,685
smarter-demosmarterOfficialVerified publisher0.1.52 of 7See more

smarter-demo smarter 0.1.5

2 of the 7 container images this version deploys carry CVE-2026-24049.

Container imageDigestPackageFixed in
ghcr.io/smarter-project/audio-client:v3.1.23c8375dc5487
python-pip@20.0.2-5ubuntu1.6
no fix listed
ghcr.io/smarter-project/image-detector:v2.5.31dcca70c6446
python-pip@20.0.2-5ubuntu1.6
no fix listed

Open the chart page →

45,832
healthchecksstackhelmVerified publisher0.1.01 of 2See more

healthchecks stackhelm 0.1.0

1 of the 2 container images this version deploys carry CVE-2026-24049.

Container imageDigestPackageFixed in
healthchecks/healthchecks:v2.8.1e82bb0836e30
wheel@0.40.0
0.46.2

Open the chart page →

2,236
ckanstatcan0.0.351 of 8See more

ckan statcan 0.0.35

1 of the 8 container images this version deploys carry CVE-2026-24049.

Container imageDigestPackageFixed in
statcan/ckan:2.93921305425b8
python-pip@20.0.2-5ubuntu1.5
no fix listed

Open the chart page →

24,930
streamlit-appstreamlit-appVerified publisher0.2.01 of 1See more

streamlit-app streamlit-app 0.2.0

1 of the 1 container images this version deploys carry CVE-2026-24049.

Container imageDigestPackageFixed in
sruthitanneru/pi-sample:ui-lateste565ea454ffd
wheel@0.43.0
0.46.2

Open the chart page →

1,696
jenkinstestchart0.1.91 of 2See more

jenkins testchart 0.1.9

1 of the 2 container images this version deploys carry CVE-2026-24049.

Container imageDigestPackageFixed in
kiwigrid/k8s-sidecar:1.24.44138bea678f0
wheel@0.40.0
0.46.2

Open the chart page →

9,102
jenkinstest-jenkins9.1.01 of 2See more

jenkins test-jenkins 9.1.0

1 of the 2 container images this version deploys carry CVE-2026-24049.

Container imageDigestPackageFixed in
kiwigrid/k8s-sidecar:1.24.44138bea678f0
wheel@0.40.0
0.46.2

Open the chart page →

9,102
tocktock0.6.31 of 9See more

tock tock 0.6.3

1 of the 9 container images this version deploys carry CVE-2026-24049.

Container imageDigestPackageFixed in
tock/gen-ai-orchestrator-server:25.10.7abf7880e0449
wheel@0.45.1
0.46.2

Open the chart page →

12,907
taigaunxwaresVerified publisher2026.3.82 of 6See more

taiga unxwares 2026.3.8

2 of the 6 container images this version deploys carry CVE-2026-24049.

Container imageDigestPackageFixed in
taigaio/taiga-back:latest4beed8f62c9f
wheel@0.45.1
0.46.2
taigaio/taiga-protected:latestfd4568a97a59
wheel@0.45.1
0.46.2

Open the chart page →

9,148
upbot-operatorupbot-operator0.0.201 of 2See more

upbot-operator upbot-operator 0.0.20

1 of the 2 container images this version deploys carry CVE-2026-24049.

Container imageDigestPackageFixed in
alpine/k8s:1.28.13e5c0b053fed7
wheel@0.43.0
0.46.2

Open the chart page →

4,460
urunnerurunnerOfficialVerified publisher0.7.01 of 1See more

urunner urunner 0.7.0

1 of the 1 container images this version deploys carry CVE-2026-24049.

Container imageDigestPackageFixed in
ghcr.io/texano00/urunner:0.6.07c8be1dae3cd
wheel@0.45.1
0.46.2

Open the chart page →

501
spark-operatorwikimedia2.2.71 of 1See more

spark-operator wikimedia 2.2.7

1 of the 1 container images this version deploys carry CVE-2026-24049.

Container imageDigestPackageFixed in
ghcr.io/kubeflow/spark-operator/controller:2.2.1865ff4da5686
python-pip@20.0.2-5ubuntu1.11
no fix listed

Open the chart page →

7,835
aeneabotygdrassilOfficialVerified publisher0.2.01 of 2See more

aeneabot ygdrassil 0.2.0

1 of the 2 container images this version deploys carry CVE-2026-24049.

Container imageDigestPackageFixed in
elautoestopista/aeneabot:4.2.1125ba620d528
wheel@0.45.1
0.46.2

Open the chart page →

1,697
qleverzazukoVerified publisher0.7.01 of 2See more

qlever zazuko 0.7.0

1 of the 2 container images this version deploys carry CVE-2026-24049.

Container imageDigestPackageFixed in
ghcr.io/zazukoians/qlever-ui:v0.10.034c7b540a095
wheel@0.43.0
0.46.2

Open the chart page →

2,900
changedetection-iozekker6Verified publisher1.99.01 of 1See more

changedetection-io zekker6 1.99.0

1 of the 1 container images this version deploys carry CVE-2026-24049.

Container imageDigestPackageFixed in
ghcr.io/dgtlmoon/changedetection.io:0.60.47bb6963b730d
wheel@0.45.1
0.46.2

Open the chart page →

2,595
plausible-analyticszekker6Verified publisher1.4.01 of 2See more

plausible-analytics zekker6 1.4.0

1 of the 2 container images this version deploys carry CVE-2026-24049.

Container imageDigestPackageFixed in
ghcr.io/plausible/community-edition:v3.2.133e60bfb40f2
wheel@0.45.1
0.46.2

Open the chart page →

1,170
acos-prometheus-exporter-helm-charta10-prometheus-exporter0.1.01 of 1See more

acos-prometheus-exporter-helm-chart a10-prometheus-exporter 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-24049.

Container imageDigestPackageFixed in
a10networks/acos-prometheus-exporter:latest8dc58d434d71
python-pip@9.0.1-2.3~ubuntu1.18.04.1
no fix listed

Open the chart page →

12,007
open5gsadaptivenetlabVerified publisher1.0.31 of 3See more

open5gs adaptivenetlab 1.0.3

1 of the 3 container images this version deploys carry CVE-2026-24049.

Container imageDigestPackageFixed in
registry.gitlab.com/infinitydon/registry/open5gs-aio:v2.2.2f6385712935f
python-pip@20.0.2-5ubuntu1.1
no fix listed

Open the chart page →

25,443
gotenbergadnoctemVerified publisher0.5.01 of 1See more

gotenberg adnoctem 0.5.0

1 of the 1 container images this version deploys carry CVE-2026-24049.

Container imageDigestPackageFixed in
gotenberg/gotenberg:8.37.0f29984bd1e22
wheel@0.45.1
0.46.2

Open the chart page →

5,582
airbyteairbyte-v2Verified publisher2.2.01 of 10See more

airbyte airbyte-v2 2.2.0

1 of the 10 container images this version deploys carry CVE-2026-24049.

Container imageDigestPackageFixed in
airbyte/manifest-server:7.23.73b3a670af168
wheel@0.45.1
0.46.2

Open the chart page →

12,473
akto-ai-guardrails-v2akto0.3.01 of 6See more

akto-ai-guardrails-v2 akto 0.3.0

1 of the 6 container images this version deploys carry CVE-2026-24049.

Container imageDigestPackageFixed in
aktosecurity/akto-agent-guard-embedder:1.1.4dbc566b2376c
wheel@0.45.1
0.46.2

Open the chart page →

9,321
akto-mini-testingakto1.45.71 of 5See more

akto-mini-testing akto 1.45.7

1 of the 5 container images this version deploys carry CVE-2026-24049.

Container imageDigestPackageFixed in
public.ecr.aws/aktosecurity/akto-ai-automated-testing:latest5a5d32281374
wheel@0.45.1
0.46.2

Open the chart page →

6,486
akto-mini-testing-kafkaakto1.42.12 of 5See more

akto-mini-testing-kafka akto 1.42.1

2 of the 5 container images this version deploys carry CVE-2026-24049.

Container imageDigestPackageFixed in
confluentinc/cp-kafka:7.8.0-3-ubi8adc392d28a1e
wheel@0.43.0
0.46.2
confluentinc/cp-zookeeper:7.8.0-3-ubi85ca5f3269814
wheel@0.43.0
0.46.2

Open the chart page →

6,397
browserlessalekcVerified publisher1.2.71 of 1See more

browserless alekc 1.2.7

1 of the 1 container images this version deploys carry CVE-2026-24049.

Container imageDigestPackageFixed in
ghcr.io/browserless/chrome:v2.56.7d600eac6283f
wheel@0.42.0-2
wheel@0.42.0
0.42.0-2ubuntu0.1~esm1
0.46.2

Open the chart page →

2,078
flaresolverralexmorbo-flaresolverrVerified publisher0.2.01 of 1See more

flaresolverr alexmorbo-flaresolverr 0.2.0

1 of the 1 container images this version deploys carry CVE-2026-24049.

Container imageDigestPackageFixed in
flaresolverr/flaresolverr:v3.5.0139dfee1c6f8
wheel@0.45.1
0.46.2

Open the chart page →

27,274
ddosifyanteonVerified publisher1.7.53 of 13See more

ddosify anteon 1.7.5

3 of the 13 container images this version deploys carry CVE-2026-24049.

Container imageDigestPackageFixed in
ddosify/selfhosted_alaz_backend:1.0.6a43c5155fa1c
wheel@0.43.0
0.46.2
ddosify/selfhosted_backend:2.6.11ac323d52bfb4
wheel@0.43.0
0.46.2
ddosify/selfhosted_hammermanager:1.2.471b8768f49bc
wheel@0.40.0
0.46.2

Open the chart page →

25,669
monitoringantmediaVerified publisher1.0.01 of 6See more

monitoring antmedia 1.0.0

1 of the 6 container images this version deploys carry CVE-2026-24049.

Container imageDigestPackageFixed in
confluentinc/cp-zookeeper:latest7610a50b13e7
wheel@0.43.0
0.46.2

Open the chart page →

2,453
pgadminappscodeVerified publisher2026.3.301 of 1See more

pgadmin appscode 2026.3.30

1 of the 1 container images this version deploys carry CVE-2026-24049.

Container imageDigestPackageFixed in
dpage/pgadmin4:9.11.050700ac17936
wheel@0.45.1
0.46.2

Open the chart page →

1,565
platform-apiappscodeVerified publisher2026.9.111 of 3See more

platform-api appscode 2026.9.11

1 of the 3 container images this version deploys carry CVE-2026-24049.

Container imageDigestPackageFixed in
ghcr.io/appscode/gotenberg:8.25f9104080d9a7
wheel@0.45.1
0.46.2

Open the chart page →

37,268
appwriteappwrite-helmVerified publisher1.3.21 of 8See more

appwrite appwrite-helm 1.3.2

1 of the 8 container images this version deploys carry CVE-2026-24049.

Container imageDigestPackageFixed in
appwrite/appwrite:1.9.01aaa70127114
wheel@0.45.1
0.46.2

Open the chart page →

9,847
keystonearzu0.2.292 of 4See more

keystone arzu 0.2.29

2 of the 4 container images this version deploys carry CVE-2026-24049.

Container imageDigestPackageFixed in
openstackhelm/heat:wallaby-ubuntu_focalf728510bab3c
wheel@0.41.2
0.46.2
openstackhelm/keystone:wallaby-ubuntu_focale07d75953d2e
wheel@0.41.2
0.46.2

Open the chart page →

22,568
fllocaloperationsassist-iot-fl-local-operations1.1.01 of 3See more

fllocaloperations assist-iot-fl-local-operations 1.1.0

1 of the 3 container images this version deploys carry CVE-2026-24049.

Container imageDigestPackageFixed in
assistiot/fl_local_operations_inference:latest0518b63a2e69
wheel@0.40.0
0.46.2

Open the chart page →

3,786
openapiassist-iot-open-api-management0.2.21 of 6See more

openapi assist-iot-open-api-management 0.2.2

1 of the 6 container images this version deploys carry CVE-2026-24049.

Container imageDigestPackageFixed in
assistiot/open_api_backend:1.1.230812ba93555
wheel@0.42.0
0.46.2

Open the chart page →

18,277
resource-provisioningassist-iot-resource-provisioning1.0.03 of 7See more

resource-provisioning assist-iot-resource-provisioning 1.0.0

3 of the 7 container images this version deploys carry CVE-2026-24049.

Container imageDigestPackageFixed in
assistiot/resource-provisioning_api:1.0.044a37b00d4f8
wheel@0.41.2
0.46.2
assistiot/resource-provisioning_im:1.0.0a942dc14030a
wheel@0.42.0
0.46.2
assistiot/resource-provisioning_prc:1.0.08b5d118bdf0e
wheel@0.40.0
0.46.2

Open the chart page →

8,032
smartorchestratorassist-iot-smart-orchestrator4.0.03 of 14See more

smartorchestrator assist-iot-smart-orchestrator 4.0.0

3 of the 14 container images this version deploys carry CVE-2026-24049.

Container imageDigestPackageFixed in
assistiot/smart-orchestrator_mcs:latest7d6a0d534c7f
wheel@0.43.0
0.46.2
assistiot/smart-orchestrator_scheduler:latest38b003e55ff3
wheel@0.43.0
0.46.2
assistiot/smart-orchestrator_scheduler_mc:latestb1dbe4d62a03
wheel@0.41.2
0.46.2

Open the chart page →

45,363
traffic-classificationassist-iot-traffic-classification2.0.01 of 2See more

traffic-classification assist-iot-traffic-classification 2.0.0

1 of the 2 container images this version deploys carry CVE-2026-24049.

Container imageDigestPackageFixed in
assistiot/traffic-classification_api:2.0.0e32b87786142
wheel@0.43.0
0.46.2

Open the chart page →

1,166
videoaugmentationassist-iot-video-augmentation0.1.01 of 3See more

videoaugmentation assist-iot-video-augmentation 0.1.0

1 of the 3 container images this version deploys carry CVE-2026-24049.

Container imageDigestPackageFixed in
assistiot/video_augmentation:runner-cpu-lateste5ae539ce2cb
python-pip@20.0.2-5ubuntu1.8
wheel@0.40.0
no fix listed
0.46.2

Open the chart page →

13,913
asya-playgroundasya1.1.31 of 1See more

asya-playground asya 1.1.3

1 of the 1 container images this version deploys carry CVE-2026-24049.

Container imageDigestPackageFixed in
localstack/localstack:3.19d278167f2b7
wheel@0.42.0
0.46.2

Open the chart page →

9,412
aws-secrets-synchronizeraws-secrets-synchronizer0.2.11 of 1See more

aws-secrets-synchronizer aws-secrets-synchronizer 0.2.1

1 of the 1 container images this version deploys carry CVE-2026-24049.

Container imageDigestPackageFixed in
ghcr.io/reezogit/aws-secrets-synchronizer:0.2.1111ed7cf7b39
wheel@0.42.0
0.46.2

Open the chart page →

956

Container images carrying it

508 by charts deploying them

A fixed version is listed for 3 of the 4 affected packages.

Container imageDigestPackageFixed inUsed by
ghcr.io/oguzhan-yilmaz/argocd-backup-s3:latestb61c750ade19
wheel@0.45.1
0.46.2
1
ghcr.io/oguzhan-yilmaz/kdiff-snapshots:0.0.2035bc5ca66d55a
wheel@0.45.1
0.46.2
1
ghcr.io/oguzhan-yilmaz/kdiff-snapshots:0.0.55d7f93d2182fe
wheel@0.45.1
0.46.2
1
ghcr.io/openappsec/openappsec-waf-webhook:1.1.345b979b962043
wheel@0.45.1
0.46.2
1
ghcr.io/opencost/opencost-parquet-exporter:v0.2.1ce85ef0ce665
wheel@0.45.1
0.46.2
1
ghcr.io/openrelik/openrelik-worker-analyzer-config:latest1269d3d8d2c2
wheel@0.42.0-2
wheel@0.42.0
0.42.0-2ubuntu0.1~esm1
0.46.2
1
ghcr.io/openrelik/openrelik-worker-analyzer-logs:latestb175cc61959a
wheel@0.42.0-2
wheel@0.42.0
0.42.0-2ubuntu0.1~esm1
0.46.2
1
ghcr.io/openrelik/openrelik-worker-containers:latesta6d5abe94706
wheel@0.42.0-2
wheel@0.42.0
0.42.0-2ubuntu0.1~esm1
0.46.2
1
ghcr.io/openrelik/openrelik-worker-os-creds:latest7fc7ec101f08
wheel@0.42.0-2
wheel@0.42.0
0.42.0-2ubuntu0.1~esm1
0.46.2
1
ghcr.io/openrelik/openrelik-worker-plaso:latest75537ea8c851
wheel@0.42.0-2
wheel@0.42.0
0.42.0-2ubuntu0.1~esm1
0.46.2
1
ghcr.io/open-telemetry/demo:1.12.0-loadgenerator85c9935ff31b
wheel@0.43.0
0.46.2
1
ghcr.io/open-telemetry/demo:1.12.0-recommendationserviceb294a4278407
wheel@0.43.0
0.46.2
1
ghcr.io/oznu/homebridge:2022-07-08ff2af53897e7
python-pip@20.0.2-5ubuntu1.6
no fix listed
1
ghcr.io/paperless-ngx/paperless-ngx:2.13.10642357c5dbd
wheel@0.43.0
0.46.2
1
ghcr.io/paperless-ngx/paperless-ngx:2.0.1ab255bea133e
wheel@0.42.0
0.46.2
1
ghcr.io/port-labs/port-agent:v0.8.12c92d1e223f5c
wheel@0.45.1
0.46.2
1
ghcr.io/qubiva/qubiva:v0.3.2cdf1e3329bfe
wheel@0.45.1
0.46.2
1
ghcr.io/reezogit/aws-secrets-synchronizer:0.2.1111ed7cf7b39
wheel@0.42.0
0.46.2
1
ghcr.io/remla23-team17/app:1.0.05816dbddf47d
wheel@0.40.0
0.46.2
1
ghcr.io/remla23-team17/model-service:1.0.0aa59fe2c4f6a
wheel@0.40.0
0.46.2
1
ghcr.io/rodg/rtmp-controller:latest67f99a5beab7
wheel@0.40.0
0.46.2
1
ghcr.io/seanmorley15/adventurelog-backend:v0.13.00250d9cb0d74
wheel@0.45.1
0.46.2
1
ghcr.io/serenita-org/vero:v0.8.3e5a7ec714acc
wheel@0.44.0
0.46.2
1
ghcr.io/smarter-project/audio-client:v3.1.23c8375dc5487
python-pip@20.0.2-5ubuntu1.6
no fix listed
1
ghcr.io/smarter-project/image-detector:v2.5.31dcca70c6446
python-pip@20.0.2-5ubuntu1.6
no fix listed
1
ghcr.io/substra/substra-backend:1.0.121967f54ec86
wheel@0.43.0
0.46.2
1
ghcr.io/tandoorrecipes/recipes:1.5.31063eb446e298
wheel@0.42.0
0.46.2
1
ghcr.io/tauffer-consulting/domino-rest:latest8bf880fe8c73
wheel@0.43.0
0.46.2
1
ghcr.io/texano00/urunner:0.6.07c8be1dae3cd
wheel@0.45.1
0.46.2
1
ghcr.io/timothepoznanski/poznote:6.80.0045035db3a20
wheel@0.45.1
0.46.2
1
ghcr.io/tremolosecurity/python-slim-nonroot/python3:1.0.079bb14620fe9
wheel@0.40.0
0.46.2
1
ghcr.io/virtuos/librechat_exporter:2.0.050ea1cf0086f
wheel@0.45.1
0.46.2
1
ghcr.io/wasi-master/13ft:0.3.4563ce7794a71
wheel@0.43.0
0.46.2
1
ghcr.io/wittdennis/homeassistant-otbr:4.2.31b53b0b3488e
wheel@0.46.1
wheel@0.46.1-2
0.46.2
no fix listed
1
ghcr.io/wizarrrr/wizarr:4.2.0-beta.3d19d886d5090
wheel@0.42.0
0.46.2
1
ghcr.io/yahoon/helm-demo:1.0.02930290a758c
wheel@0.45.1
0.46.2
1
ghcr.io/zazukoians/qlever-ui:v0.10.034c7b540a095
wheel@0.43.0
0.46.2
1
ghcr.io/zoriya/kyoo_scanner:4.7.17dc0ee57b628
wheel@0.43.0
0.46.2
1
public.ecr.aws/aktosecurity/akto-ai-automated-testing:latest5a5d32281374
wheel@0.45.1
0.46.2
1
public.ecr.aws/datadog/agent:7.73.0f4925b15ce94
wheel@0.45.1
0.46.2
1
public.ecr.aws/outerbounds/metaflow_metadata_service:v2.4.13f7567ce3419d
wheel@0.44.0
0.46.2
1
public.ecr.aws/r3m4q3r9/pleco:0.24.0651739583336
wheel@0.45.1
0.46.2
1
quay.io/clustersecret/clustersecret:0.0.14a9f835d1b241
wheel@0.43.0
0.46.2
1
quay.io/hpestorage/filex-csi-driver:2.6.4b7f960bbf472
wheel@0.45.1
0.46.2
1
quay.io/jupyterhub/k8s-hub:3.2.12528c6e57587
wheel@0.41.3
0.46.2
1
quay.io/kiali/kiali-operator:v2.31.0f837d8f25545
wheel@0.43.0
0.46.2
1
quay.io/kiwigrid/k8s-sidecar:1.30.349dcce269568
wheel@0.45.1
0.46.2
1
quay.io/kiwigrid/k8s-sidecar:1.30.10835d79d8fbae
wheel@0.45.1
0.46.2
1
quay.io/kiwigrid/k8s-sidecar:1.25.2cb4c638ffb1f
wheel@0.41.2
0.46.2
1
quay.io/maxiv/storageclass-router:0.4.160725dab588c
wheel@0.42.0
0.46.2
1

syft 1.42.1 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.