StackRadar

CVE-2026-27205

Medium

Advisory

Published 19 Feb 2026In the index since 5 Sept 2026
Severity
Medium
worst across findings
CVSS
4.3
base score, highest
EPSS
0.003
28th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
293
of 17,781 indexed, latest versions
Container images
289
deployed by those charts
Fix available
2 of 2
affected packages

The matching OSV records carry no description.

Carried by container images the latest versions of 293 of 17,781 indexed charts deploy, on 289 images.

Affected packageAffected versionsFixed inImages
flaskpypi0.10.1, 0.11.1, 0.12, 0.12.2+27 more3.1.3289
flaskdeb1.1.1-21.1.1-2ubuntu0.1+esm11
OSV records
PYSEC-2026-2151UBUNTU-CVE-2026-27205
Also known as
GHSA-68rp-wp8r-4726, USN-8104-1

Charts affected

293 by stars
ChartLatestAffected imagesRadar Score
speedtest-exporterspeedtest-exporter0.2.21 of 1See more

speedtest-exporter speedtest-exporter 0.2.2

1 of the 1 container images this version deploys carry CVE-2026-27205.

Container imageDigestPackageFixed in
ghcr.io/miguelndecarvalho/speedtest-exporter:v3.5.4f1064d49124c
flask@2.3.2
3.1.3

Open the chart page →

741
ambassador-manifestssqream-chartsVerified publisher0.6.31 of 1See more

ambassador-manifests sqream-charts 0.6.3

1 of the 1 container images this version deploys carry CVE-2026-27205.

Container imageDigestPackageFixed in
datawire/aes:3.11.195ec30b3c732
flask@3.0.3
3.1.3

Open the chart page →

2,416
servicexssl-hep1.8.56 of 16See more

servicex ssl-hep 1.8.5

6 of the 16 container images this version deploys carry CVE-2026-27205.

Container imageDigestPackageFixed in
sslhep/servicex_app:v1.8.51d12f943cec5
flask@2.3.3
3.1.3
sslhep/servicex_code_gen_atlas_xaod:v1.8.5e7aff7f97b89
flask@2.3.3
3.1.3
sslhep/servicex_code_gen_func_adl_uproot:v1.8.5b01b8ee966ed
flask@2.3.3
3.1.3
sslhep/servicex_code_gen_python:v1.8.50e4175a4e1eb
flask@2.3.3
3.1.3
sslhep/servicex_code_gen_raw_uproot:v1.8.5671980005c57
flask@2.3.3
3.1.3
sslhep/servicex_code_gen_topcp:v1.8.5596db2abdd09
flask@2.3.3
3.1.3

Open the chart page →

66,266
pgadminstakaterVerified publisher0.1.141 of 1See more

pgadmin stakater 0.1.14

1 of the 1 container images this version deploys carry CVE-2026-27205.

Container imageDigestPackageFixed in
dpage/pgadmin4:4.5a5a656e1d5fd
flask@1.0.2
3.1.3

Open the chart page →

2,060
stakefishstakefish0.1.01 of 8See more

stakefish stakefish 0.1.0

1 of the 8 container images this version deploys carry CVE-2026-27205.

Container imageDigestPackageFixed in
thongngo3301/stakefish:latesta341af5976e3
flask@2.2.5
3.1.3

Open the chart page →

20,223
datapusherstatcan1.0.01 of 1See more

datapusher statcan 1.0.0

1 of the 1 container images this version deploys carry CVE-2026-27205.

Container imageDigestPackageFixed in
keitaro/ckan-datapusher:0.0.175bf1a45f45c1
flask@1.1.2
3.1.3

Open the chart page →

3,044
storageclass-routerstorageclass-routerVerified publisher0.4.11 of 1See more

storageclass-router storageclass-router 0.4.1

1 of the 1 container images this version deploys carry CVE-2026-27205.

Container imageDigestPackageFixed in
quay.io/maxiv/storageclass-router:0.4.160725dab588c
flask@3.0.2
3.1.3

Open the chart page →

1,058
studygovernorstudy-governorVerified publisher0.1.381 of 3See more

studygovernor study-governor 0.1.38

1 of the 3 container images this version deploys carry CVE-2026-27205.

Container imageDigestPackageFixed in
registry.gitlab.com/radiology/infrastructure/study-governor:8.0.04e7faf6f8d5f
flask@2.0.3
3.1.3

Open the chart page →

1,447
3d-printing-cost-calculatorssudo-kraken-3d-printing-cost-calculatorsVerified publisher0.1.41 of 1See more

3d-printing-cost-calculators sudo-kraken-3d-printing-cost-calculators 0.1.4

1 of the 1 container images this version deploys carry CVE-2026-27205.

Container imageDigestPackageFixed in
ghcr.io/sudo-kraken/3d-printing-cost-calculators:v1.1.1220c5e4e1a3d
flask@3.1.2
3.1.3

Open the chart page →

2,675
authentik-webfinger-proxysudo-kraken-authentik-webfinger-proxyVerified publisher0.1.41 of 1See more

authentik-webfinger-proxy sudo-kraken-authentik-webfinger-proxy 0.1.4

1 of the 1 container images this version deploys carry CVE-2026-27205.

Container imageDigestPackageFixed in
ghcr.io/sudo-kraken/authentik-webfinger-proxy:v1.1.1e1351a977607
flask@3.1.2
3.1.3

Open the chart page →

2,755
fantasy-dice-chambersudo-kraken-fantasy-dice-chamberVerified publisher0.1.31 of 1See more

fantasy-dice-chamber sudo-kraken-fantasy-dice-chamber 0.1.3

1 of the 1 container images this version deploys carry CVE-2026-27205.

Container imageDigestPackageFixed in
ghcr.io/sudo-kraken/fantasy-dice-chamber:v1.3.299fd4cb0f4fe
flask@3.1.2
3.1.3

Open the chart page →

2,787
finances-trackersudo-kraken-finances-trackerVerified publisher0.1.51 of 1See more

finances-tracker sudo-kraken-finances-tracker 0.1.5

1 of the 1 container images this version deploys carry CVE-2026-27205.

Container imageDigestPackageFixed in
ghcr.io/sudo-kraken/finances-tracker:v1.1.1c73527cde81c
flask@3.1.2
3.1.3

Open the chart page →

2,755
jf-pushover-webhooksudo-kraken-jf-pushover-webhookVerified publisher0.1.31 of 1See more

jf-pushover-webhook sudo-kraken-jf-pushover-webhook 0.1.3

1 of the 1 container images this version deploys carry CVE-2026-27205.

Container imageDigestPackageFixed in
ghcr.io/sudo-kraken/jf-pushover-webhook:v1.1.0ee9cf22a39ab
flask@3.1.2
3.1.3

Open the chart page →

2,755
csv-viewsvtech-public-helm-charts1.0.01 of 1See more

csv-view svtech-public-helm-charts 1.0.0

1 of the 1 container images this version deploys carry CVE-2026-27205.

Container imageDigestPackageFixed in
svtechnmaa/svtech_csv:v1.0.1b9d7ecf8de24
flask@2.0.3
3.1.3

Open the chart page →

1,220
rundecksvtech-public-helm-charts1.0.01 of 2See more

rundeck svtech-public-helm-charts 1.0.0

1 of the 2 container images this version deploys carry CVE-2026-27205.

Container imageDigestPackageFixed in
svtechnmaa/svtech_rundeck:v1.2.26e368ace0977
flask@2.0.3
3.1.3

Open the chart page →

18,756
rundeck-option-providersvtech-public-helm-charts1.0.01 of 2See more

rundeck-option-provider svtech-public-helm-charts 1.0.0

1 of the 2 container images this version deploys carry CVE-2026-27205.

Container imageDigestPackageFixed in
svtechnmaa/svtech_rundeck_option_provider:v1.1.1674fad30a51f
flask@2.0.3
3.1.3

Open the chart page →

1,428
democharttech-challenge0.1.01 of 4See more

demochart tech-challenge 0.1.0

1 of the 4 container images this version deploys carry CVE-2026-27205.

Container imageDigestPackageFixed in
alexvm6/pythonalex:latest89a05786879c
flask@2.3.2
3.1.3

Open the chart page →

3,632
krokiteochenglim1.0.11 of 5See more

kroki teochenglim 1.0.1

1 of the 5 container images this version deploys carry CVE-2026-27205.

Container imageDigestPackageFixed in
yuzutech/kroki-blockdiag:0.16.07c1917c66d96
flask@2.0.2
3.1.3

Open the chart page →

8,715
flask-contactstest-configmap1.0.11 of 3See more

flask-contacts test-configmap 1.0.1

1 of the 3 container images this version deploys carry CVE-2026-27205.

Container imageDigestPackageFixed in
shashkist/flask-contacts-app:latest581de1fd6084
flask@3.0.3
3.1.3

Open the chart page →

5,704
webapp1test-helm-chart-10.1.01 of 1See more

webapp1 test-helm-chart-1 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-27205.

Container imageDigestPackageFixed in
devopsjourney1/mywebapp:latestbd1ec6838570
flask@2.2.2
3.1.3

Open the chart page →

1,469
tezos-nodetezos-nodeVerified publisher1.0.01 of 4See more

tezos-node tezos-node 1.0.0

1 of the 4 container images this version deploys carry CVE-2026-27205.

Container imageDigestPackageFixed in
oxheadalpha/tezos-k8s-utils:5.3.4d9faed45bf1c
flask@2.0.2
3.1.3

Open the chart page →

5,321
thanhvt27-lab-k8sthanh-vtVerified publisher0.1.41 of 5See more

thanhvt27-lab-k8s thanh-vt 0.1.4

1 of the 5 container images this version deploys carry CVE-2026-27205.

Container imageDigestPackageFixed in
pysga1996/python-redis-web:latestfdeec30ad482
flask@2.2.3
3.1.3

Open the chart page →

4,661
todolist-charttodolist-chart0.1.71 of 10See more

todolist-chart todolist-chart 0.1.7

1 of the 10 container images this version deploys carry CVE-2026-27205.

Container imageDigestPackageFixed in
erenozcan17/flask_analytics:v3.1c9b6f0dfbffc
flask@3.1.1
3.1.3

Open the chart page →

6,973
test0tohlejezkouska0.1.01 of 2See more

test0 tohlejezkouska 0.1.0

1 of the 2 container images this version deploys carry CVE-2026-27205.

Container imageDigestPackageFixed in
devopsjourney1/mywebapp:latestbd1ec6838570
flask@2.2.2
3.1.3

Open the chart page →

3,296
phonebook-chartusuladams2Verified publisher0.2.12 of 3See more

phonebook-chart usuladams2 0.2.1

2 of the 3 container images this version deploys carry CVE-2026-27205.

Container imageDigestPackageFixed in
paulkellerman/resultserver-app:1.0381eeccb0618
flask@2.2.2
3.1.3
paulkellerman/webserver-app:latest5a37b74f61b9
flask@2.2.2
3.1.3

Open the chart page →

3,176
demo-backendv2flyVerified publisher0.0.31 of 1See more

demo-backend v2fly 0.0.3

1 of the 1 container images this version deploys carry CVE-2026-27205.

Container imageDigestPackageFixed in
quay.io/yushiwho/api:e1f9d77e0d9b93dbf2b
flask@3.0.0
3.1.3

Open the chart page →

14,358
simple-prima-notavcnngrVerified publisher0.5.31 of 4See more

simple-prima-nota vcnngr 0.5.3

1 of the 4 container images this version deploys carry CVE-2026-27205.

Container imageDigestPackageFixed in
dpage/pgadmin4:9.252cb72a9e3da
flask@3.1.0
3.1.3

Open the chart page →

4,768
telegram-rebotvcnngrVerified publisher1.0.02 of 3See more

telegram-rebot vcnngr 1.0.0

2 of the 3 container images this version deploys carry CVE-2026-27205.

Container imageDigestPackageFixed in
vcnngr/telegram-login:latest1a849a997b6d
flask@2.3.3
3.1.3
vcnngr/telegram-rebot:latest30f1f05e57a6
flask@2.3.3
3.1.3

Open the chart page →

5,026
calibre-webvista0.1.31 of 1See more

calibre-web vista 0.1.3

1 of the 1 container images this version deploys carry CVE-2026-27205.

Container imageDigestPackageFixed in
linuxserver/calibre-web:0.6.24241009026e6f
flask@3.0.3
3.1.3

Open the chart page →

7,628
vote-appvote-appVerified publisher1.0.71 of 6See more

vote-app vote-app 1.0.7

1 of the 6 container images this version deploys carry CVE-2026-27205.

Container imageDigestPackageFixed in
thecloudspark/app-vote:1.0c7da7417a86a
flask@3.0.3
3.1.3

Open the chart page →

3,031
voteappvoting-app-helm-charts-repoVerified publisher1.0.01 of 5See more

voteapp voting-app-helm-charts-repo 1.0.0

1 of the 5 container images this version deploys carry CVE-2026-27205.

Container imageDigestPackageFixed in
kodekloud/examplevotingapp_vote:v13a856afb02a3
flask@2.2.2
3.1.3

Open the chart page →

8,262
voteappvoting-app-helm-charts-repo-cloudVerified publisher1.0.01 of 5See more

voteapp voting-app-helm-charts-repo-cloud 1.0.0

1 of the 5 container images this version deploys carry CVE-2026-27205.

Container imageDigestPackageFixed in
kodekloud/examplevotingapp_vote:v13a856afb02a3
flask@2.2.2
3.1.3

Open the chart page →

8,262
wazuh-manager-filebeatwazuh-manager-filebeat0.1.0-gamma1 of 1See more

wazuh-manager-filebeat wazuh-manager-filebeat 0.1.0-gamma

1 of the 1 container images this version deploys carry CVE-2026-27205.

Container imageDigestPackageFixed in
iosifache/wazuh-manager-filebeat:latest85df3f04b5da
flask@1.1.2
3.1.3

Open the chart page →

11,119
supersetwbstack0.1.01 of 1See more

superset wbstack 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-27205.

Container imageDigestPackageFixed in
apache/superset:4.0.1ab9467fd712c
flask@2.2.5
3.1.3

Open the chart page →

7,085
weather-chartweather-web-app0.1.01 of 1See more

weather-chart weather-web-app 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-27205.

Container imageDigestPackageFixed in
zohardocker12/weather_app_flask:latestb86d60dbb68d
flask@2.0.3
3.1.3

Open the chart page →

2,670
welcome-elos-webappwelcome-elos-webappVerified publisher2.0.01 of 1See more

welcome-elos-webapp welcome-elos-webapp 2.0.0

1 of the 1 container images this version deploys carry CVE-2026-27205.

Container imageDigestPackageFixed in
pococze/python-hello-elos:2.0.07a1aab425e51
flask@3.0.3
3.1.3

Open the chart page →

2,678
ambassadorwenerme6.9.51 of 2See more

ambassador wenerme 6.9.5

1 of the 2 container images this version deploys carry CVE-2026-27205.

Container imageDigestPackageFixed in
datawire/aes:1.14.48588eafe6862
flask@1.1.2
3.1.3

Open the chart page →

4,086
emissary-ingresswenerme8.12.21 of 2See more

emissary-ingress wenerme 8.12.2

1 of the 2 container images this version deploys carry CVE-2026-27205.

Container imageDigestPackageFixed in
datawire/emissary:3.12.21f67a1292d2a
flask@3.0.3
3.1.3

Open the chart page →

10,843
ceph-csi-cephfswikimedia0.1.81 of 5See more

ceph-csi-cephfs wikimedia 0.1.8

1 of the 5 container images this version deploys carry CVE-2026-27205.

Container imageDigestPackageFixed in
quay.io/cephcsi/cephcsi:v3.7.2f7f8228f17cc
flask@0.12.2
3.1.3

Open the chart page →

10,285
ceph-csi-rbdwikimedia0.1.131 of 6See more

ceph-csi-rbd wikimedia 0.1.13

1 of the 6 container images this version deploys carry CVE-2026-27205.

Container imageDigestPackageFixed in
quay.io/cephcsi/cephcsi:v3.7.2f7f8228f17cc
flask@0.12.2
3.1.3

Open the chart page →

11,784
powerdnsadminwitcom-gmbh0.3.41 of 1See more

powerdnsadmin witcom-gmbh 0.3.4

1 of the 1 container images this version deploys carry CVE-2026-27205.

Container imageDigestPackageFixed in
ngoduykhanh/powerdns-admin:v0.2.4ba36ab196d3d
flask@1.1.2
3.1.3

Open the chart page →

2,643
xkopsxkops0.1.01 of 5See more

xkops xkops 0.1.0

1 of the 5 container images this version deploys carry CVE-2026-27205.

Container imageDigestPackageFixed in
hamzaarshad10/querybackend:1.6.22c1c3b86a8e7
flask@3.0.3
3.1.3

Open the chart page →

13,677
zerossl-cert-managerzerossl-cert-manager0.1.01 of 2See more

zerossl-cert-manager zerossl-cert-manager 0.1.0

1 of the 2 container images this version deploys carry CVE-2026-27205.

Container imageDigestPackageFixed in
andreymileshin/zerossl-issuer:v1.0.0e0825acc9e48
flask@3.1.0
3.1.3

Open the chart page →

570

Container images carrying it

289 by charts deploying them

A fixed version is listed for 2 of the 2 affected packages.

Container imageDigestPackageFixed inUsed by
kodekloud/webapp-color:latest99c3821ea49b
flask@1.0.2
3.1.3
1
kong/httpbin:latesta6ac46531193
flask@3.1.0
3.1.3
1
kserve/models-web-app:v0.8.063ea05e73842
flask@2.1.2
3.1.3
1
kserve/models-web-app:v0.13.073486345a602
flask@3.0.3
3.1.3
1
kubeflownotebookswg/jupyter-web-app:v1.9.2afb52057c997
flask@3.0.3
3.1.3
1
kubeflownotebookswg/jupyter-web-app:v1.6.1d762690e21c1
flask@2.2.2
3.1.3
1
kubeflownotebookswg/tensorboards-web-app:v1.6.10876fef1973b
flask@2.2.2
3.1.3
1
kubeflownotebookswg/tensorboards-web-app:v1.9.277f07f52a84a
flask@3.0.3
3.1.3
1
kubeflownotebookswg/volumes-web-app:v1.6.17299fa94db15
flask@2.2.2
3.1.3
1
kubeflownotebookswg/volumes-web-app:v1.9.2f63c3e550af3
flask@3.0.3
3.1.3
1
kubesphere/examples-bookinfo-productpage-v1:1.13.0378f49ec9c44
flask@0.12.4
3.1.3
1
kunchalavikram/connectedcity:v14a559a47579e
flask@1.1.2
3.1.3
1
kunchalavikram/connectedfactory:v152c13fb9b1d9
flask@1.1.2
3.1.3
1
kyso/kyso-nbdime:latest4aa9d38ee81d
flask@2.2.2
3.1.3
1
langgenius/dify-api:1.0.0066035f93856
flask@3.1.0
3.1.3
1
langgenius/dify-api:0.6.11fca918260dd6
flask@3.0.3
3.1.3
1
langgenius/dify-plugin-daemon:0.5.1-local8269050f192e
flask@3.0.3
3.1.3
1
libretranslate/libretranslate:v1.9.61de2d7056bb8
flask@2.2.5
3.1.3
1
linuxserver/beets:1.5.0e36d16f7341c
flask@2.0.2
3.1.3
1
linuxserver/calibre-web:0.6.24241009026e6f
flask@3.0.3
3.1.3
1
linuxserver/calibre-web:version-0.6.12938810eca3d3
flask@1.1.4
3.1.3
1
lmacka/snappass:2.1.293f5c048b7d4
flask@3.1.0
3.1.3
1
lncm/specter-desktop:v0.10.4bca14d04397d
flask@1.1.2
3.1.3
1
localstack/localstack:3.19d278167f2b7
flask@3.0.1
3.1.3
1
locustio/locust:2.24.151d866285170
flask@3.0.2
3.1.3
1
lsstsqre/squash-api:0.5.34879415ec6ac
flask@1.1.2
3.1.3
1
marcinkujawski/flask-app:2.0.1a455017b9d0e
flask@2.0.3
3.1.3
1
marcoimme/oidcmock:latestb6035c0721a8
flask@3.0.0
3.1.3
1
miltex/python-api:1.0.0dab12a7748d5
flask@1.1.4
3.1.3
1
mintproject/data-catalog:9be70359feabe03ed55bfdbf92c20a7e43ab928b67d2f2103085
flask@1.1.2
3.1.3
1
mondata/mlflow:v2.3.0.s3.gc6f94c6caf8bf
flask@2.2.3
3.1.3
1
mshanley80/httpbin2022:latest5b189a70c0fb
flask@2.2.2
3.1.3
1
muhammedgamal/fp23:latest74b4cd69b6fa
flask@3.0.3
3.1.3
1
nabinchhetri/flask-app:v2.0be189fbf3411
flask@2.2.3
3.1.3
1
nathanielvarona/pritunl-slack-app:0.1.10b746a34e5597
flask@2.3.3
3.1.3
1
neilpeterson/aks-helloworld:v1fb47732ef36b
flask@0.12.2
3.1.3
1
neilpeterson/chart-tweet:latest64fd8dab075f
flask@0.12.2
3.1.3
1
ngoduykhanh/powerdns-admin:0.2.3099371dd9ba6
flask@1.1.2
3.1.3
1
ngoduykhanh/powerdns-admin:latest9898a7cf37d2
flask@1.1.2
3.1.3
1
octoprint/octoprint:1.4.0106c26efcd8a
flask@0.12.5
3.1.3
1
octoprint/octoprint:1.6.1ea3bffae2470
flask@1.1.4
3.1.3
1
oled01/automx2:2025.1.105d3e398e675
flask@3.1.1
3.1.3
1
omecproject/mme-exporter:paging-latestbcc5f19fd676
flask@1.1.1
3.1.3
1
opencsghq/agenticflow:ee-v0.6-52f03fead54db
flask@3.1.1
3.1.3
1
opendatacube/explorer:latest120457ffcd69
flask@3.1.2
3.1.3
1
opendatacube/restcube:latest91870111837c
flask@1.1.1
3.1.3
1
opendatacube/wms:latest1b90cdf68831
flask@1.1.1
3.1.3
1
opendatacube/wps:latest80df355a660b
flask@3.1.0
3.1.3
1
openstackhelm/keystone:wallaby-ubuntu_focale07d75953d2e
flask@1.1.2
3.1.3
1
openwhisk/kafkaprovider:2.1.063dc3d2a0904
flask@0.11.1
3.1.3
1

syft 1.42.1 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.