StackRadar

CVE-2026-24049

High

Advisory

Published 22 Jan 2026In the index since 5 Sept 2026
Severity
High
worst across findings
CVSS
7.1
base score, highest
EPSS
0.003
25th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
491
of 17,781 indexed, latest versions
Container images
508
deployed by those charts
Fix available
3 of 4
affected packages

Wheel Affected by Arbitrary File Permission Modification via Path Traversal in wheel unpack

Carried by container images the latest versions of 491 of 17,781 indexed charts deploy, on 508 images.

Affected packageAffected versionsFixed inImages
wheelpypi0.40.0, 0.41.0, 0.41.1, 0.41.2+7 more0.46.2445
python-pipdeb1.5.4-1ubuntu4, 8.1.1-2ubuntu0.4, 9.0.1-2.3~ubuntu1, 9.0.1-2.3~ubuntu1.18.04.1+12 moreno fix listed64
wheeldeb0.42.0-2, 0.46.1-20.42.0-2ubuntu0.1~esm126
py3-setuptoolsapk75.8.0-r0, 80.9.0-r280.10.2-r02
OSV records
CGA-8262-rvw7-ph6vCGA-m596-w84m-mmc5GHSA-8rrh-rw8j-w5fxUBUNTU-CVE-2026-24049DEBIAN-CVE-2026-24049
Also known as
CGA-pc3r-mrfq-gqw5, CGA-qh9c-67fv-jhj9, PYSEC-2026-2047, USN-8221-1

Charts affected

491 by stars
ChartLatestAffected imagesRadar Score
seafilederp3.2.01 of 1See more

seafile derp 3.2.0

1 of the 1 container images this version deploys carry CVE-2026-24049.

Container imageDigestPackageFixed in
seafileltd/seafile-mc:10.0.170628f29c663
python-pip@20.0.2-5ubuntu1.9
no fix listed

Open the chart page →

14,856
ai-agentdevtron0.0.11 of 1See more

ai-agent devtron 0.0.1

1 of the 1 container images this version deploys carry CVE-2026-24049.

Container imageDigestPackageFixed in
quay.io/devtron/ai-agent:0.0.16545dac92173
wheel@0.44.0
0.46.2

Open the chart page →

9,607
ai-agentdevtron-labs0.0.11 of 1See more

ai-agent devtron-labs 0.0.1

1 of the 1 container images this version deploys carry CVE-2026-24049.

Container imageDigestPackageFixed in
quay.io/devtron/ai-agent:0.0.16545dac92173
wheel@0.44.0
0.46.2

Open the chart page →

9,607
difydify1.0.03 of 4See more

dify dify 1.0.0

3 of the 4 container images this version deploys carry CVE-2026-24049.

Container imageDigestPackageFixed in
langgenius/dify-api:1.0.0066035f93856
wheel@0.43.0
0.46.2
langgenius/dify-plugin-daemon:main-localda995c129e2f
wheel@0.42.0-2
wheel@0.42.0
0.42.0-2ubuntu0.1~esm1
0.46.2
langgenius/dify-sandbox:0.2.009b7e8705673
wheel@0.43.0
0.46.2

Open the chart page →

19,224
adventurelogdjjudas21Verified publisher0.1.11 of 3See more

adventurelog djjudas21 0.1.1

1 of the 3 container images this version deploys carry CVE-2026-24049.

Container imageDigestPackageFixed in
ghcr.io/seanmorley15/adventurelog-backend:v0.13.00250d9cb0d74
wheel@0.45.1
0.46.2

Open the chart page →

7,459
alertifydjjudas21Verified publisher0.1.01 of 1See more

alertify djjudas21 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-24049.

Container imageDigestPackageFixed in
djjudas21/alertify:0.1.0ba22be670c37
wheel@0.45.1
0.46.2

Open the chart page →

2,378
autonodelabeldjjudas21Verified publisher0.0.101 of 1See more

autonodelabel djjudas21 0.0.10

1 of the 1 container images this version deploys carry CVE-2026-24049.

Container imageDigestPackageFixed in
djjudas21/autonodelabel:0.0.6f17233350c4f
wheel@0.40.0
0.46.2

Open the chart page →

1,304
spoolmandjjudas21Verified publisher0.1.81 of 1See more

spoolman djjudas21 0.1.8

1 of the 1 container images this version deploys carry CVE-2026-24049.

Container imageDigestPackageFixed in
ghcr.io/donkie/spoolman:0.24.042135965c42d
wheel@0.45.1
0.46.2

Open the chart page →

1,833
wizarrdjjudas21Verified publisher0.1.51 of 1See more

wizarr djjudas21 0.1.5

1 of the 1 container images this version deploys carry CVE-2026-24049.

Container imageDigestPackageFixed in
ghcr.io/wizarrrr/wizarr:4.2.0-beta.3d19d886d5090
wheel@0.42.0
0.46.2

Open the chart page →

14,627
dnation-kubernetes-jsonnet-translatordnationcloud2.0.11 of 1See more

dnation-kubernetes-jsonnet-translator dnationcloud 2.0.1

1 of the 1 container images this version deploys carry CVE-2026-24049.

Container imageDigestPackageFixed in
dnationcloud/kubernetes-jsonnet-translator:2.0.178fed4f3c130
wheel@0.44.0
0.46.2

Open the chart page →

3,822
dnation-kubernetes-monitoringdnationcloud3.0.21 of 1See more

dnation-kubernetes-monitoring dnationcloud 3.0.2

1 of the 1 container images this version deploys carry CVE-2026-24049.

Container imageDigestPackageFixed in
dnationcloud/kubernetes-jsonnet-translator:2.0.178fed4f3c130
wheel@0.44.0
0.46.2

Open the chart page →

3,822
dnation-kubernetes-monitoring-stackdnationcloud4.0.22 of 17See more

dnation-kubernetes-monitoring-stack dnationcloud 4.0.2

2 of the 17 container images this version deploys carry CVE-2026-24049.

Container imageDigestPackageFixed in
dnationcloud/kubernetes-jsonnet-translator:2.0.178fed4f3c130
wheel@0.44.0
0.46.2
kiwigrid/k8s-sidecar:1.28.04166a019eeaf
wheel@0.43.0
0.46.2

Open the chart page →

21,641
codecovdoubanVerified publisher0.2.42 of 8See more

codecov douban 0.2.4

2 of the 8 container images this version deploys carry CVE-2026-24049.

Container imageDigestPackageFixed in
codecov/self-hosted-api:24.4.10475cb1c3136
wheel@0.40.0
0.46.2
codecov/self-hosted-worker:24.4.1837f546b479b
wheel@0.43.0
0.46.2

Open the chart page →

24,917
aerios-k8s-shimeclipse-aeriosVerified publisher1.0.01 of 1See more

aerios-k8s-shim eclipse-aerios 1.0.0

1 of the 1 container images this version deploys carry CVE-2026-24049.

Container imageDigestPackageFixed in
eclipseaerios/aerios-k8s-shim:v1.0.0d4ed3d8e5db4
wheel@0.45.1
0.46.2

Open the chart page →

1,434
hlo-allocatoreclipse-aeriosVerified publisher3.0.01 of 1See more

hlo-allocator eclipse-aerios 3.0.0

1 of the 1 container images this version deploys carry CVE-2026-24049.

Container imageDigestPackageFixed in
eclipseaerios/hlo-allocator:v3.0.03cc1d94cfe96
wheel@0.43.0
0.46.2

Open the chart page →

1,500
hlo-data-aggregatoreclipse-aeriosVerified publisher3.0.01 of 1See more

hlo-data-aggregator eclipse-aerios 3.0.0

1 of the 1 container images this version deploys carry CVE-2026-24049.

Container imageDigestPackageFixed in
eclipseaerios/hlo-data-aggregator:v3.0.0b433c2b9f5dc
wheel@0.43.0
0.46.2

Open the chart page →

1,643
hlo-deployment-engineeclipse-aeriosVerified publisher3.0.01 of 1See more

hlo-deployment-engine eclipse-aerios 3.0.0

1 of the 1 container images this version deploys carry CVE-2026-24049.

Container imageDigestPackageFixed in
eclipseaerios/hlo-deployment-engine:v3.0.0d582d39208c7
wheel@0.43.0
0.46.2

Open the chart page →

1,653
hlo-fe-engineeclipse-aeriosVerified publisher3.0.01 of 1See more

hlo-fe-engine eclipse-aerios 3.0.0

1 of the 1 container images this version deploys carry CVE-2026-24049.

Container imageDigestPackageFixed in
eclipseaerios/hlo-fe-engine:v3.0.08ed2df4ca692
wheel@0.43.0
0.46.2

Open the chart page →

1,643
iotaeclipse-aeriosVerified publisher1.0.21 of 4See more

iota eclipse-aerios 1.0.2

1 of the 4 container images this version deploys carry CVE-2026-24049.

Container imageDigestPackageFixed in
eclipseaerios/iota-messages-api:lateste7f5ba0bc64d
wheel@0.45.1
0.46.2

Open the chart page →

13,391
trustmanagereclipse-aeriosVerified publisher1.0.01 of 1See more

trustmanager eclipse-aerios 1.0.0

1 of the 1 container images this version deploys carry CVE-2026-24049.

Container imageDigestPackageFixed in
eclipseaerios/trust-manager:1.0.0f55442e2c0ed
wheel@0.45.1
0.46.2

Open the chart page →

1,895
seafileeleksbai0.1.11 of 3See more

seafile eleksbai 0.1.1

1 of the 3 container images this version deploys carry CVE-2026-24049.

Container imageDigestPackageFixed in
seafileltd/seafile-mc:9.0.106693911bcc40
python-pip@20.0.2-5ubuntu1.6
no fix listed

Open the chart page →

25,122
flywayeosc-lot-1Verified publisher0.7.01 of 3See more

flyway eosc-lot-1 0.7.0

1 of the 3 container images this version deploys carry CVE-2026-24049.

Container imageDigestPackageFixed in
flyway/flyway:9.1545b5d7cdc75a
python-pip@20.0.2-5ubuntu1.8
no fix listed

Open the chart page →

9,334
upgrade-responderepinioVerified publisher0.2.01 of 5See more

upgrade-responder epinio 0.2.0

1 of the 5 container images this version deploys carry CVE-2026-24049.

Container imageDigestPackageFixed in
quay.io/kiwigrid/k8s-sidecar:1.25.2cb4c638ffb1f
wheel@0.41.2
0.46.2

Open the chart page →

7,329
external-secrets-reloaderexternal-secrets-reloader0.1.01 of 1See more

external-secrets-reloader external-secrets-reloader 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-24049.

Container imageDigestPackageFixed in
ghcr.io/bensoer/external-secrets-reloader:v0.1.38e31b5a81853
wheel@0.45.1
0.46.2

Open the chart page →

1,030
datadog-apmfairwinds-incubator2.0.01 of 1See more

datadog-apm fairwinds-incubator 2.0.0

1 of the 1 container images this version deploys carry CVE-2026-24049.

Container imageDigestPackageFixed in
public.ecr.aws/datadog/agent:7.73.0f4925b15ce94
wheel@0.45.1
0.46.2

Open the chart page →

2,785
route53syncfairwinds-incubator0.1.21 of 1See more

route53sync fairwinds-incubator 0.1.2

1 of the 1 container images this version deploys carry CVE-2026-24049.

Container imageDigestPackageFixed in
library/python:3.7-alpinef3d31c8677d0
wheel@0.41.2
0.46.2

Open the chart page →

797
farm-observabilityfarm-observabilityOfficialVerified publisher0.27.21 of 18See more

farm-observability farm-observability 0.27.2

1 of the 18 container images this version deploys carry CVE-2026-24049.

Container imageDigestPackageFixed in
quay.io/kiwigrid/k8s-sidecar:2.5.0a6b3f707f883
wheel@0.45.1
0.46.2

Open the chart page →

13,255
findery-marketfindery-market0.1.01 of 7See more

findery-market findery-market 0.1.0

1 of the 7 container images this version deploys carry CVE-2026-24049.

Container imageDigestPackageFixed in
chandanteekinavar/findery-market-product-service:1.0c49ff7c141c0
wheel@0.45.1
0.46.2

Open the chart page →

7,691
business-api-ecosystemfiware1.1.01 of 4See more

business-api-ecosystem fiware 1.1.0

1 of the 4 container images this version deploys carry CVE-2026-24049.

Container imageDigestPackageFixed in
fiware/biz-ecosystem-charging-backend:11.7.029456835bb2c
python-pip@20.0.2-5ubuntu1.11
no fix listed

Open the chart page →

64,489
batchrunnerflanksourceVerified publisher1.0.441 of 1See more

batchrunner flanksource 1.0.44

1 of the 1 container images this version deploys carry CVE-2026-24049.

Container imageDigestPackageFixed in
flanksource/batch-runner:v1.0.44689687a7cf95
wheel@0.45.1
0.46.2

Open the chart page →

5,292
flask-appflask-mysqlVerified publisher1.0.11 of 2See more

flask-app flask-mysql 1.0.1

1 of the 2 container images this version deploys carry CVE-2026-24049.

Container imageDigestPackageFixed in
jjorozco20/flask-mysql-app:1.0.0b5e44e3ba09c
wheel@0.45.1
0.46.2

Open the chart page →

4,073
flaskappflaskwebapp0.1.01 of 1See more

flaskapp flaskwebapp 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-24049.

Container imageDigestPackageFixed in
nabinchhetri/flask-app:v2.0be189fbf3411
wheel@0.40.0
0.46.2

Open the chart page →

512
changedetection-iogabe565Verified publisher0.12.01 of 2See more

changedetection-io gabe565 0.12.0

1 of the 2 container images this version deploys carry CVE-2026-24049.

Container imageDigestPackageFixed in
ghcr.io/dgtlmoon/changedetection.io:latestecacd9fd0c66
wheel@0.45.1
0.46.2

Open the chart page →

2,595
tandoorgabe565Verified publisher0.9.91 of 2See more

tandoor gabe565 0.9.9

1 of the 2 container images this version deploys carry CVE-2026-24049.

Container imageDigestPackageFixed in
ghcr.io/tandoorrecipes/recipes:1.5.31063eb446e298
wheel@0.42.0
0.46.2

Open the chart page →

2,183
mqtt-exportergeek-cookbookVerified publisher1.1.21 of 1See more

mqtt-exporter geek-cookbook 1.1.2

1 of the 1 container images this version deploys carry CVE-2026-24049.

Container imageDigestPackageFixed in
kpetrem/mqtt-exporter:latestdca3255f3531
wheel@0.45.1
0.46.2

Open the chart page →

488
seafilegeek-cookbookVerified publisher3.2.01 of 1See more

seafile geek-cookbook 3.2.0

1 of the 1 container images this version deploys carry CVE-2026-24049.

Container imageDigestPackageFixed in
seafileltd/seafile-mc:8.0.7ed0fcda5e6a9
python-pip@20.0.2-5ubuntu1.6
no fix listed

Open the chart page →

24,293
skypilotgeek-cookbookVerified publisher0.0.11 of 3See more

skypilot geek-cookbook 0.0.1

1 of the 3 container images this version deploys carry CVE-2026-24049.

Container imageDigestPackageFixed in
berkeleyskypilot/skypilot-nightly:latest8da2f3cda472
wheel@0.45.1
0.46.2

Open the chart page →

8,923
volume-autoscalergke-volume-autoscaler3.0.21 of 1See more

volume-autoscaler gke-volume-autoscaler 3.0.2

1 of the 1 container images this version deploys carry CVE-2026-24049.

Container imageDigestPackageFixed in
shadowrhyder/gke-volume-autoscaler:3.0.24aae9270356a
wheel@0.41.2
0.46.2

Open the chart page →

901
glassflow-etlglassflowVerified publisher0.5.211 of 16See more

glassflow-etl glassflow 0.5.21

1 of the 16 container images this version deploys carry CVE-2026-24049.

Container imageDigestPackageFixed in
ghcr.io/glassflow/glassflow-notifier:v1.0.3d1b0ce10b513
wheel@0.45.1
0.46.2

Open the chart page →

12,056
gnp-stackgnp-stack0.0.51 of 14See more

gnp-stack gnp-stack 0.0.5

1 of the 14 container images this version deploys carry CVE-2026-24049.

Container imageDigestPackageFixed in
quay.io/kiwigrid/k8s-sidecar:1.30.10835d79d8fbae
wheel@0.45.1
0.46.2

Open the chart page →

7,659
platformgoofy-chart0.1.01 of 1See more

platform goofy-chart 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-24049.

Container imageDigestPackageFixed in
devopsgoofy/k8s-platform:latestad865312099f
wheel@0.43.0
0.46.2

Open the chart page →

2,789
opentelemetry-demogpg-dev0.33.82 of 27See more

opentelemetry-demo gpg-dev 0.33.8

2 of the 27 container images this version deploys carry CVE-2026-24049.

Container imageDigestPackageFixed in
ghcr.io/open-telemetry/demo:1.12.0-loadgenerator85c9935ff31b
wheel@0.43.0
0.46.2
ghcr.io/open-telemetry/demo:1.12.0-recommendationserviceb294a4278407
wheel@0.43.0
0.46.2

Open the chart page →

49,025
gwangju_2-3gwangju2-30.1.03 of 5See more

gwangju_2-3 gwangju2-3 0.1.0

3 of the 5 container images this version deploys carry CVE-2026-24049.

Container imageDigestPackageFixed in
clsen2024/gwangju_2-3:service-b-10ba9eff852c5
wheel@0.43.0
0.46.2
clsen2024/gwangju_2-3:service-a-151b1d45961cd
wheel@0.43.0
0.46.2
clsen2024/gwangju_2-3:service-c-1efb1586c8299
wheel@0.43.0
0.46.2

Open the chart page →

6,491
librechat-exporterhajowielandVerified publisher1.0.01 of 1See more

librechat-exporter hajowieland 1.0.0

1 of the 1 container images this version deploys carry CVE-2026-24049.

Container imageDigestPackageFixed in
ghcr.io/virtuos/librechat_exporter:2.0.050ea1cf0086f
wheel@0.45.1
0.46.2

Open the chart page →

2,284
hawk-envoy-pluginhawk0.1.01 of 4See more

hawk-envoy-plugin hawk 0.1.0

1 of the 4 container images this version deploys carry CVE-2026-24049.

Container imageDigestPackageFixed in
kong/httpbin:latesta6ac46531193
wheel@0.45.1
0.46.2

Open the chart page →

9,096
heliconehelicone0.1.421 of 14See more

helicone helicone 0.1.42

1 of the 14 container images this version deploys carry CVE-2026-24049.

Container imageDigestPackageFixed in
helicone/clickhouse-migration-runner:v2025.03.05-14c69b971a7e4
python-pip@20.0.2-5ubuntu1.11
no fix listed

Open the chart page →

24,995
home-assistanthelm-chart-roeiVerified publisher2025.3.01 of 1See more

home-assistant helm-chart-roei 2025.3.0

1 of the 1 container images this version deploys carry CVE-2026-24049.

Container imageDigestPackageFixed in
ghcr.io/home-assistant/home-assistant:2025.3.026c51e44d932
wheel@0.43.0
0.46.2

Open the chart page →

4,647
kube-downscalerhelm-charts-nr0.7.61 of 1See more

kube-downscaler helm-charts-nr 0.7.6

1 of the 1 container images this version deploys carry CVE-2026-24049.

Container imageDigestPackageFixed in
hjacobs/kube-downscaler:23.2.0-6-gc9b88e84b2147f47425
wheel@0.40.0
0.46.2

Open the chart page →

4,293
locusthelm-charts-nr0.32.41 of 1See more

locust helm-charts-nr 0.32.4

1 of the 1 container images this version deploys carry CVE-2026-24049.

Container imageDigestPackageFixed in
locustio/locust:2.32.2a0d4b88e42c1
wheel@0.44.0
0.46.2

Open the chart page →

2,800
supersethelm-charts-nr1.1.31 of 1See more

superset helm-charts-nr 1.1.3

1 of the 1 container images this version deploys carry CVE-2026-24049.

Container imageDigestPackageFixed in
apache/superset:latest16b50bbef664
wheel@0.45.1
0.46.2

Open the chart page →

2,305

Container images carrying it

508 by charts deploying them

A fixed version is listed for 3 of the 4 affected packages.

Container imageDigestPackageFixed inUsed by
kennethreitz/httpbin:latest599fe5e50731
python-pip@9.0.1-2.3~ubuntu1
no fix listed
1
kfirfer/gcloud-mysql:1.0.3c257c1e0e8b9
wheel@0.42.0
0.46.2
1
kfirfer/slackgpt:0.0.15461331bd838e
wheel@0.41.2
0.46.2
1
kiwigrid/k8s-sidecar:1.27.6db85bd553253
wheel@0.44.0
0.46.2
1
kiwigrid/k8s-sidecar:1.26.2e271016441af
wheel@0.43.0
0.46.2
1
knspar/phronetis:0.1.4609499d2dc91a
wheel@0.45.1
0.46.2
1
knspar/phronetis-operator:0.1.60c4f0543ee58
wheel@0.43.0
0.46.2
1
kong/httpbin:latesta6ac46531193
wheel@0.45.1
0.46.2
1
kpetrem/mqtt-exporter:latestdca3255f3531
wheel@0.45.1
0.46.2
1
kserve/models-web-app:v0.13.073486345a602
wheel@0.43.0
0.46.2
1
kubeflownotebookswg/jupyter-web-app:v1.9.2afb52057c997
wheel@0.44.0
0.46.2
1
kubeflownotebookswg/tensorboards-web-app:v1.9.277f07f52a84a
wheel@0.44.0
0.46.2
1
kubeflownotebookswg/volumes-web-app:v1.9.2f63c3e550af3
wheel@0.44.0
0.46.2
1
kyovint/kyoimgtransactions:1.0.048c19e3ae9a3
wheel@0.45.1
0.46.2
1
kyovint/kyoimgusers:1.0.080084149156e
wheel@0.45.1
0.46.2
1
langgenius/dify-api:1.0.0066035f93856
wheel@0.43.0
0.46.2
1
langgenius/dify-api:0.6.11fca918260dd6
wheel@0.43.0
0.46.2
1
langgenius/dify-plugin-daemon:0.6.3-local3c694329357b
wheel@0.42.0-2
wheel@0.42.0
0.42.0-2ubuntu0.1~esm1
0.46.2
1
langgenius/dify-plugin-daemon:0.5.1-local8269050f192e
wheel@0.42.0-2
wheel@0.42.0
0.42.0-2ubuntu0.1~esm1
0.46.2
1
langgenius/dify-plugin-daemon:main-localda995c129e2f
wheel@0.42.0-2
wheel@0.42.0
0.42.0-2ubuntu0.1~esm1
0.46.2
1
langgenius/dify-sandbox:0.2.124e65e8a351a2
wheel@0.45.1
0.46.2
1
library/mysql:8.4.3106d5197fd8e
wheel@0.43.0
0.46.2
1
library/mysql:8.0.41bf577825b52a
wheel@0.43.0
0.46.2
1
library/mysql:8.0.40d58ac93387f6
wheel@0.43.0
0.46.2
1
library/python:3.8-alpine3d93b1f77efc
wheel@0.44.0
0.46.2
1
library/python:3.1070c9cc675605
wheel@0.45.1
0.46.2
1
library/python:3.11-slim9534e5a8e315
wheel@0.45.1
0.46.2
1
library/python:3.8d41127070014
wheel@0.44.0
0.46.2
1
library/python:3.9da5aee29682d
wheel@0.45.1
0.46.2
1
librenms/librenms:24.11.00920bc9117a8
wheel@0.43.0
0.46.2
1
librenms/librenms:26.8.28194a4a9ff49
wheel@0.45.1
0.46.2
1
libretranslate/libretranslate:v1.9.61de2d7056bb8
wheel@0.45.1
0.46.2
1
linuxserver/calibre-web:0.6.24241009026e6f
wheel@0.45.1
0.46.2
1
linuxserver/deluge:libtorrentv1-2.2.0-ls40052eac68ccc0
wheel@0.45.1
0.46.2
1
linuxserver/healthchecks:2.7.2023033194696dab3c50
wheel@0.40.0
0.46.2
1
linuxserver/yq:3.2.26f5b9586a93e
wheel@0.41.2
0.46.2
1
lnbitsdocker/lnbits-legend:latest26fae6327477
wheel@0.42.0
0.46.2
1
localstack/localstack:3.19d278167f2b7
wheel@0.42.0
0.46.2
1
locustio/locust:2.24.151d866285170
wheel@0.43.0
0.46.2
1
lsstsqre/nublado2:2.0.1b75bf8aaafa4
python-pip@20.0.2-5ubuntu1.6
no fix listed
1
makeplane/plane-mcp-server:v0.3.071b7252adef0
wheel@0.45.1
0.46.2
1
matrixdotorg/synapse:v1.127.1c3c4a9de2a0b
wheel@0.43.0
0.46.2
1
mawad98/backstage-pyactions:demo99422c56a274
wheel@0.45.1
0.46.2
1
mediagis/nominatim:5.3.27923a8e67197
wheel@0.42.0-2
wheel@0.42.0
0.42.0-2ubuntu0.1~esm1
0.46.2
1
mediagis/nominatim:3.7c15e941485ef
python-pip@20.0.2-5ubuntu1.6
no fix listed
1
mher/flower:2.051c3c3db5be3
wheel@0.41.1
0.46.2
1
middlewareeng/middleware:0.3.1747d880812f1
wheel@0.45.1
0.46.2
1
mindsdb/mindsdb:latest163011c09299
wheel@0.45.1
0.46.2
1
mintproject/model-catalog-fastapi:7dd88dc5bf1fe6a6d4703ea0a077afee45cb256102260d20a21f
wheel@0.45.1
0.46.2
1
mondata/mlflow:v2.3.0.s3.gc6f94c6caf8bf
wheel@0.40.0
0.46.2
1

syft 1.42.1 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.