StackRadar

CVE-2026-27205

Medium

Advisory

Published 19 Feb 2026In the index since 5 Sept 2026
Severity
Medium
worst across findings
CVSS
4.3
base score, highest
EPSS
0.003
28th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
293
of 17,781 indexed, latest versions
Container images
289
deployed by those charts
Fix available
2 of 2
affected packages

The matching OSV records carry no description.

Carried by container images the latest versions of 293 of 17,781 indexed charts deploy, on 289 images.

Affected packageAffected versionsFixed inImages
flaskpypi0.10.1, 0.11.1, 0.12, 0.12.2+27 more3.1.3289
flaskdeb1.1.1-21.1.1-2ubuntu0.1+esm11
OSV records
PYSEC-2026-2151UBUNTU-CVE-2026-27205
Also known as
GHSA-68rp-wp8r-4726, USN-8104-1

Charts affected

293 by stars
ChartLatestAffected imagesRadar Score
speedtest-exporterspeedtest-exporter0.2.21 of 1See more

speedtest-exporter speedtest-exporter 0.2.2

1 of the 1 container images this version deploys carry CVE-2026-27205.

Container imageDigestPackageFixed in
ghcr.io/miguelndecarvalho/speedtest-exporter:v3.5.4f1064d49124c
flask@2.3.2
3.1.3

Open the chart page →

741
ambassador-manifestssqream-chartsVerified publisher0.6.31 of 1See more

ambassador-manifests sqream-charts 0.6.3

1 of the 1 container images this version deploys carry CVE-2026-27205.

Container imageDigestPackageFixed in
datawire/aes:3.11.195ec30b3c732
flask@3.0.3
3.1.3

Open the chart page →

2,416
servicexssl-hep1.8.56 of 16See more

servicex ssl-hep 1.8.5

6 of the 16 container images this version deploys carry CVE-2026-27205.

Container imageDigestPackageFixed in
sslhep/servicex_app:v1.8.51d12f943cec5
flask@2.3.3
3.1.3
sslhep/servicex_code_gen_atlas_xaod:v1.8.5e7aff7f97b89
flask@2.3.3
3.1.3
sslhep/servicex_code_gen_func_adl_uproot:v1.8.5b01b8ee966ed
flask@2.3.3
3.1.3
sslhep/servicex_code_gen_python:v1.8.50e4175a4e1eb
flask@2.3.3
3.1.3
sslhep/servicex_code_gen_raw_uproot:v1.8.5671980005c57
flask@2.3.3
3.1.3
sslhep/servicex_code_gen_topcp:v1.8.5596db2abdd09
flask@2.3.3
3.1.3

Open the chart page →

66,266
pgadminstakaterVerified publisher0.1.141 of 1See more

pgadmin stakater 0.1.14

1 of the 1 container images this version deploys carry CVE-2026-27205.

Container imageDigestPackageFixed in
dpage/pgadmin4:4.5a5a656e1d5fd
flask@1.0.2
3.1.3

Open the chart page →

2,060
stakefishstakefish0.1.01 of 8See more

stakefish stakefish 0.1.0

1 of the 8 container images this version deploys carry CVE-2026-27205.

Container imageDigestPackageFixed in
thongngo3301/stakefish:latesta341af5976e3
flask@2.2.5
3.1.3

Open the chart page →

20,223
datapusherstatcan1.0.01 of 1See more

datapusher statcan 1.0.0

1 of the 1 container images this version deploys carry CVE-2026-27205.

Container imageDigestPackageFixed in
keitaro/ckan-datapusher:0.0.175bf1a45f45c1
flask@1.1.2
3.1.3

Open the chart page →

3,044
storageclass-routerstorageclass-routerVerified publisher0.4.11 of 1See more

storageclass-router storageclass-router 0.4.1

1 of the 1 container images this version deploys carry CVE-2026-27205.

Container imageDigestPackageFixed in
quay.io/maxiv/storageclass-router:0.4.160725dab588c
flask@3.0.2
3.1.3

Open the chart page →

1,058
studygovernorstudy-governorVerified publisher0.1.381 of 3See more

studygovernor study-governor 0.1.38

1 of the 3 container images this version deploys carry CVE-2026-27205.

Container imageDigestPackageFixed in
registry.gitlab.com/radiology/infrastructure/study-governor:8.0.04e7faf6f8d5f
flask@2.0.3
3.1.3

Open the chart page →

1,447
3d-printing-cost-calculatorssudo-kraken-3d-printing-cost-calculatorsVerified publisher0.1.41 of 1See more

3d-printing-cost-calculators sudo-kraken-3d-printing-cost-calculators 0.1.4

1 of the 1 container images this version deploys carry CVE-2026-27205.

Container imageDigestPackageFixed in
ghcr.io/sudo-kraken/3d-printing-cost-calculators:v1.1.1220c5e4e1a3d
flask@3.1.2
3.1.3

Open the chart page →

2,675
authentik-webfinger-proxysudo-kraken-authentik-webfinger-proxyVerified publisher0.1.41 of 1See more

authentik-webfinger-proxy sudo-kraken-authentik-webfinger-proxy 0.1.4

1 of the 1 container images this version deploys carry CVE-2026-27205.

Container imageDigestPackageFixed in
ghcr.io/sudo-kraken/authentik-webfinger-proxy:v1.1.1e1351a977607
flask@3.1.2
3.1.3

Open the chart page →

2,755
fantasy-dice-chambersudo-kraken-fantasy-dice-chamberVerified publisher0.1.31 of 1See more

fantasy-dice-chamber sudo-kraken-fantasy-dice-chamber 0.1.3

1 of the 1 container images this version deploys carry CVE-2026-27205.

Container imageDigestPackageFixed in
ghcr.io/sudo-kraken/fantasy-dice-chamber:v1.3.299fd4cb0f4fe
flask@3.1.2
3.1.3

Open the chart page →

2,787
finances-trackersudo-kraken-finances-trackerVerified publisher0.1.51 of 1See more

finances-tracker sudo-kraken-finances-tracker 0.1.5

1 of the 1 container images this version deploys carry CVE-2026-27205.

Container imageDigestPackageFixed in
ghcr.io/sudo-kraken/finances-tracker:v1.1.1c73527cde81c
flask@3.1.2
3.1.3

Open the chart page →

2,755
jf-pushover-webhooksudo-kraken-jf-pushover-webhookVerified publisher0.1.31 of 1See more

jf-pushover-webhook sudo-kraken-jf-pushover-webhook 0.1.3

1 of the 1 container images this version deploys carry CVE-2026-27205.

Container imageDigestPackageFixed in
ghcr.io/sudo-kraken/jf-pushover-webhook:v1.1.0ee9cf22a39ab
flask@3.1.2
3.1.3

Open the chart page →

2,755
csv-viewsvtech-public-helm-charts1.0.01 of 1See more

csv-view svtech-public-helm-charts 1.0.0

1 of the 1 container images this version deploys carry CVE-2026-27205.

Container imageDigestPackageFixed in
svtechnmaa/svtech_csv:v1.0.1b9d7ecf8de24
flask@2.0.3
3.1.3

Open the chart page →

1,220
rundecksvtech-public-helm-charts1.0.01 of 2See more

rundeck svtech-public-helm-charts 1.0.0

1 of the 2 container images this version deploys carry CVE-2026-27205.

Container imageDigestPackageFixed in
svtechnmaa/svtech_rundeck:v1.2.26e368ace0977
flask@2.0.3
3.1.3

Open the chart page →

18,756
rundeck-option-providersvtech-public-helm-charts1.0.01 of 2See more

rundeck-option-provider svtech-public-helm-charts 1.0.0

1 of the 2 container images this version deploys carry CVE-2026-27205.

Container imageDigestPackageFixed in
svtechnmaa/svtech_rundeck_option_provider:v1.1.1674fad30a51f
flask@2.0.3
3.1.3

Open the chart page →

1,428
democharttech-challenge0.1.01 of 4See more

demochart tech-challenge 0.1.0

1 of the 4 container images this version deploys carry CVE-2026-27205.

Container imageDigestPackageFixed in
alexvm6/pythonalex:latest89a05786879c
flask@2.3.2
3.1.3

Open the chart page →

3,632
krokiteochenglim1.0.11 of 5See more

kroki teochenglim 1.0.1

1 of the 5 container images this version deploys carry CVE-2026-27205.

Container imageDigestPackageFixed in
yuzutech/kroki-blockdiag:0.16.07c1917c66d96
flask@2.0.2
3.1.3

Open the chart page →

8,715
flask-contactstest-configmap1.0.11 of 3See more

flask-contacts test-configmap 1.0.1

1 of the 3 container images this version deploys carry CVE-2026-27205.

Container imageDigestPackageFixed in
shashkist/flask-contacts-app:latest581de1fd6084
flask@3.0.3
3.1.3

Open the chart page →

5,704
webapp1test-helm-chart-10.1.01 of 1See more

webapp1 test-helm-chart-1 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-27205.

Container imageDigestPackageFixed in
devopsjourney1/mywebapp:latestbd1ec6838570
flask@2.2.2
3.1.3

Open the chart page →

1,469
tezos-nodetezos-nodeVerified publisher1.0.01 of 4See more

tezos-node tezos-node 1.0.0

1 of the 4 container images this version deploys carry CVE-2026-27205.

Container imageDigestPackageFixed in
oxheadalpha/tezos-k8s-utils:5.3.4d9faed45bf1c
flask@2.0.2
3.1.3

Open the chart page →

5,321
thanhvt27-lab-k8sthanh-vtVerified publisher0.1.41 of 5See more

thanhvt27-lab-k8s thanh-vt 0.1.4

1 of the 5 container images this version deploys carry CVE-2026-27205.

Container imageDigestPackageFixed in
pysga1996/python-redis-web:latestfdeec30ad482
flask@2.2.3
3.1.3

Open the chart page →

4,661
todolist-charttodolist-chart0.1.71 of 10See more

todolist-chart todolist-chart 0.1.7

1 of the 10 container images this version deploys carry CVE-2026-27205.

Container imageDigestPackageFixed in
erenozcan17/flask_analytics:v3.1c9b6f0dfbffc
flask@3.1.1
3.1.3

Open the chart page →

6,973
test0tohlejezkouska0.1.01 of 2See more

test0 tohlejezkouska 0.1.0

1 of the 2 container images this version deploys carry CVE-2026-27205.

Container imageDigestPackageFixed in
devopsjourney1/mywebapp:latestbd1ec6838570
flask@2.2.2
3.1.3

Open the chart page →

3,296
phonebook-chartusuladams2Verified publisher0.2.12 of 3See more

phonebook-chart usuladams2 0.2.1

2 of the 3 container images this version deploys carry CVE-2026-27205.

Container imageDigestPackageFixed in
paulkellerman/resultserver-app:1.0381eeccb0618
flask@2.2.2
3.1.3
paulkellerman/webserver-app:latest5a37b74f61b9
flask@2.2.2
3.1.3

Open the chart page →

3,176
demo-backendv2flyVerified publisher0.0.31 of 1See more

demo-backend v2fly 0.0.3

1 of the 1 container images this version deploys carry CVE-2026-27205.

Container imageDigestPackageFixed in
quay.io/yushiwho/api:e1f9d77e0d9b93dbf2b
flask@3.0.0
3.1.3

Open the chart page →

14,358
simple-prima-notavcnngrVerified publisher0.5.31 of 4See more

simple-prima-nota vcnngr 0.5.3

1 of the 4 container images this version deploys carry CVE-2026-27205.

Container imageDigestPackageFixed in
dpage/pgadmin4:9.252cb72a9e3da
flask@3.1.0
3.1.3

Open the chart page →

4,768
telegram-rebotvcnngrVerified publisher1.0.02 of 3See more

telegram-rebot vcnngr 1.0.0

2 of the 3 container images this version deploys carry CVE-2026-27205.

Container imageDigestPackageFixed in
vcnngr/telegram-login:latest1a849a997b6d
flask@2.3.3
3.1.3
vcnngr/telegram-rebot:latest30f1f05e57a6
flask@2.3.3
3.1.3

Open the chart page →

5,026
calibre-webvista0.1.31 of 1See more

calibre-web vista 0.1.3

1 of the 1 container images this version deploys carry CVE-2026-27205.

Container imageDigestPackageFixed in
linuxserver/calibre-web:0.6.24241009026e6f
flask@3.0.3
3.1.3

Open the chart page →

7,628
vote-appvote-appVerified publisher1.0.71 of 6See more

vote-app vote-app 1.0.7

1 of the 6 container images this version deploys carry CVE-2026-27205.

Container imageDigestPackageFixed in
thecloudspark/app-vote:1.0c7da7417a86a
flask@3.0.3
3.1.3

Open the chart page →

3,031
voteappvoting-app-helm-charts-repoVerified publisher1.0.01 of 5See more

voteapp voting-app-helm-charts-repo 1.0.0

1 of the 5 container images this version deploys carry CVE-2026-27205.

Container imageDigestPackageFixed in
kodekloud/examplevotingapp_vote:v13a856afb02a3
flask@2.2.2
3.1.3

Open the chart page →

8,262
voteappvoting-app-helm-charts-repo-cloudVerified publisher1.0.01 of 5See more

voteapp voting-app-helm-charts-repo-cloud 1.0.0

1 of the 5 container images this version deploys carry CVE-2026-27205.

Container imageDigestPackageFixed in
kodekloud/examplevotingapp_vote:v13a856afb02a3
flask@2.2.2
3.1.3

Open the chart page →

8,262
wazuh-manager-filebeatwazuh-manager-filebeat0.1.0-gamma1 of 1See more

wazuh-manager-filebeat wazuh-manager-filebeat 0.1.0-gamma

1 of the 1 container images this version deploys carry CVE-2026-27205.

Container imageDigestPackageFixed in
iosifache/wazuh-manager-filebeat:latest85df3f04b5da
flask@1.1.2
3.1.3

Open the chart page →

11,119
supersetwbstack0.1.01 of 1See more

superset wbstack 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-27205.

Container imageDigestPackageFixed in
apache/superset:4.0.1ab9467fd712c
flask@2.2.5
3.1.3

Open the chart page →

7,085
weather-chartweather-web-app0.1.01 of 1See more

weather-chart weather-web-app 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-27205.

Container imageDigestPackageFixed in
zohardocker12/weather_app_flask:latestb86d60dbb68d
flask@2.0.3
3.1.3

Open the chart page →

2,670
welcome-elos-webappwelcome-elos-webappVerified publisher2.0.01 of 1See more

welcome-elos-webapp welcome-elos-webapp 2.0.0

1 of the 1 container images this version deploys carry CVE-2026-27205.

Container imageDigestPackageFixed in
pococze/python-hello-elos:2.0.07a1aab425e51
flask@3.0.3
3.1.3

Open the chart page →

2,678
ambassadorwenerme6.9.51 of 2See more

ambassador wenerme 6.9.5

1 of the 2 container images this version deploys carry CVE-2026-27205.

Container imageDigestPackageFixed in
datawire/aes:1.14.48588eafe6862
flask@1.1.2
3.1.3

Open the chart page →

4,086
emissary-ingresswenerme8.12.21 of 2See more

emissary-ingress wenerme 8.12.2

1 of the 2 container images this version deploys carry CVE-2026-27205.

Container imageDigestPackageFixed in
datawire/emissary:3.12.21f67a1292d2a
flask@3.0.3
3.1.3

Open the chart page →

10,843
ceph-csi-cephfswikimedia0.1.81 of 5See more

ceph-csi-cephfs wikimedia 0.1.8

1 of the 5 container images this version deploys carry CVE-2026-27205.

Container imageDigestPackageFixed in
quay.io/cephcsi/cephcsi:v3.7.2f7f8228f17cc
flask@0.12.2
3.1.3

Open the chart page →

10,285
ceph-csi-rbdwikimedia0.1.131 of 6See more

ceph-csi-rbd wikimedia 0.1.13

1 of the 6 container images this version deploys carry CVE-2026-27205.

Container imageDigestPackageFixed in
quay.io/cephcsi/cephcsi:v3.7.2f7f8228f17cc
flask@0.12.2
3.1.3

Open the chart page →

11,784
powerdnsadminwitcom-gmbh0.3.41 of 1See more

powerdnsadmin witcom-gmbh 0.3.4

1 of the 1 container images this version deploys carry CVE-2026-27205.

Container imageDigestPackageFixed in
ngoduykhanh/powerdns-admin:v0.2.4ba36ab196d3d
flask@1.1.2
3.1.3

Open the chart page →

2,643
xkopsxkops0.1.01 of 5See more

xkops xkops 0.1.0

1 of the 5 container images this version deploys carry CVE-2026-27205.

Container imageDigestPackageFixed in
hamzaarshad10/querybackend:1.6.22c1c3b86a8e7
flask@3.0.3
3.1.3

Open the chart page →

13,677
zerossl-cert-managerzerossl-cert-manager0.1.01 of 2See more

zerossl-cert-manager zerossl-cert-manager 0.1.0

1 of the 2 container images this version deploys carry CVE-2026-27205.

Container imageDigestPackageFixed in
andreymileshin/zerossl-issuer:v1.0.0e0825acc9e48
flask@3.1.0
3.1.3

Open the chart page →

570

Container images carrying it

289 by charts deploying them

A fixed version is listed for 2 of the 2 affected packages.

Container imageDigestPackageFixed inUsed by
ghcr.io/blakeblackshear/frigate:0.13.07a5244e4c8dc
flask@2.3.3
3.1.3
1
ghcr.io/blakeblackshear/frigate:0.12.0c862771e38e8
flask@2.2.3
3.1.3
1
ghcr.io/camptocamp/tetragon-policy-builder:master0e99f12bb040
flask@3.1.0
3.1.3
1
ghcr.io/cfi2017/opencve-scheduler:3.0.08d943799621b
flask@2.2.5
3.1.3
1
ghcr.io/comet-ml/opik/opik-python-backend:2.2.59269d0e55ea97
flask@3.1.0
3.1.3
1
ghcr.io/ctfd/ctfd:3.8.2870e396fddf8
flask@2.1.3
3.1.3
1
ghcr.io/dfir-iris/iriswebapp_app:v2.4.26e59ebde55709
flask@2.3.2
3.1.3
1
ghcr.io/dgtlmoon/changedetection.io:0.39.4f1ce4c56ccaa
flask@1.1.4
3.1.3
1
ghcr.io/facebook/threatexchange/hma:1.0.1784d09c6b75a7
flask@3.1.0
3.1.3
1
ghcr.io/grycap/im:latest06a16d4f279f
flask@3.1.2
3.1.3
1
ghcr.io/home-assistant/home-assistant:2025.3.026c51e44d932
flask@3.1.0
3.1.3
1
ghcr.io/home-assistant/home-assistant:2025.12.59a5a3eb4a213
flask@3.1.2
3.1.3
1
ghcr.io/home-assistant/home-assistant:2022.5.4ec6d67fbedfa
flask@2.1.2
3.1.3
1
ghcr.io/home-assistant/home-assistant:2023.11.3feffc0b8227d
flask@3.0.0
3.1.3
1
ghcr.io/home-operations/bazarr:1.5.680cb090162b4
flask@3.0.3
3.1.3
1
ghcr.io/home-operations/beets:2.3.1cc4975f1a0be
flask@2.3.3
3.1.3
1
ghcr.io/liturgical-app/calendar-api:0.0.9688a685e2bde
flask@3.0.3
3.1.3
1
ghcr.io/liturgical-app/liturgical-app:1.2.041f25aded572
flask@3.1.2
3.1.3
1
ghcr.io/miguelndecarvalho/speedtest-exporter:v3.2.29e36964bce26
flask@2.0.1
3.1.3
1
ghcr.io/mlops-for-all/mlflow-tracking-server:3.8-1.30.1-v1.0.0d30e631684c3
flask@2.3.2
3.1.3
1
ghcr.io/mshade/kronic:v0.1.466e3043851cd
flask@3.0.2
3.1.3
1
ghcr.io/noahburrell0/sealed-secrets-ui:v0.1.47e7368fb472d
flask@2.2.3
3.1.3
1
ghcr.io/open-telemetry/demo:1.12.0-loadgenerator85c9935ff31b
flask@3.0.0
3.1.3
1
ghcr.io/remla23-team17/app:1.0.05816dbddf47d
flask@2.3.2
3.1.3
1
ghcr.io/remla23-team17/model-service:1.0.0aa59fe2c4f6a
flask@2.3.2
3.1.3
1
ghcr.io/smarter-project/image-detector:v2.5.31dcca70c6446
flask@1.1.1-2
flask@1.1.1
1.1.1-2ubuntu0.1+esm1
3.1.3
1
ghcr.io/sudo-kraken/3d-printing-cost-calculators:v1.1.1220c5e4e1a3d
flask@3.1.2
3.1.3
1
ghcr.io/sudo-kraken/authentik-webfinger-proxy:v1.1.1e1351a977607
flask@3.1.2
3.1.3
1
ghcr.io/sudo-kraken/fantasy-dice-chamber:v1.3.299fd4cb0f4fe
flask@3.1.2
3.1.3
1
ghcr.io/sudo-kraken/finances-tracker:v1.1.1c73527cde81c
flask@3.1.2
3.1.3
1
ghcr.io/sudo-kraken/jf-pushover-webhook:v1.1.0ee9cf22a39ab
flask@3.1.2
3.1.3
1
ghcr.io/wasi-master/13ft:0.3.4563ce7794a71
flask@3.0.3
3.1.3
1
ghcr.io/wizarrrr/wizarr:4.2.0-beta.3d19d886d5090
flask@2.3.3
3.1.3
1
quay.io/ceph/ceph:v21.1.05ff3692d2f3f
flask@3.1.2
3.1.3
1
quay.io/cloudnativetoolkit/cloud-pak-deployer:latest13aaae779248
flask@2.0.3
3.1.3
1
quay.io/maxiv/storageclass-router:0.4.160725dab588c
flask@3.0.2
3.1.3
1
quay.io/opsmxpublic/ubi8-oes-datascience:isd-spin-2025.10.01-af26a30d4-202511261054d8f66f4117fe
flask@3.1.0
3.1.3
1
quay.io/yushiwho/api:e1f9d77e0d9b93dbf2b
flask@3.0.0
3.1.3
1
registry.gitlab.com/radiology/infrastructure/study-governor:8.0.04e7faf6f8d5f
flask@2.0.3
3.1.3
1

syft 1.42.1 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.