StackRadar

CVE-2026-27606

Critical

Advisory

Published 25 Feb 2026In the index since 6 Sept 2026
Severity
Critical
worst across findings
CVSS
9.3
base score, highest
EPSS
0.015
72nd percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
66
of 17,781 indexed, latest versions
Container images
64
deployed by those charts
Fix available
1 of 1
affected package

Rollup 4 has Arbitrary File Write via Path Traversal

Carried by container images the latest versions of 66 of 17,781 indexed charts deploy, on 64 images.

Affected packageAffected versionsFixed inImages
rollupnpm0.50.1, 1.32.1, 2.71.1, 2.72.1+28 more2.80.0, 3.30.0, 4.59.064
OSV records
GHSA-mw96-cpmx-2vgc

Charts affected

66 by stars
ChartLatestAffected imagesRadar Score
lemmyananace-chartsVerified publisher0.6.151 of 5See more

lemmy ananace-charts 0.6.15

1 of the 5 container images this version deploys carry CVE-2026-27606.

Container imageDigestPackageFixed in
dessalines/lemmy-ui:0.19.20ee4c620d8e93
rollup@2.79.1
2.80.0

Open the chart page →

7,210
outlineoutline0.0.91 of 4See more

outline outline 0.0.9

1 of the 4 container images this version deploys carry CVE-2026-27606.

Container imageDigestPackageFixed in
outlinewiki/outline:0.69.1d060dcd8f9aa
rollup@3.14.0
3.30.0

Open the chart page →

4,431
outlinekubitodevVerified publisher1.2.21 of 4See more

outline kubitodev 1.2.2

1 of the 4 container images this version deploys carry CVE-2026-27606.

Container imageDigestPackageFixed in
outlinewiki/outline:0.82.0494dfb9249a6
rollup@4.5.1
4.59.0

Open the chart page →

5,352
supabasetokens-studioVerified publisher1.0.01 of 14See more

supabase tokens-studio 1.0.0

1 of the 14 container images this version deploys carry CVE-2026-27606.

Container imageDigestPackageFixed in
supabase/studio:20241021-9f9b08326d8070c55e9
rollup@3.29.5
3.30.0

Open the chart page →

23,123
syftopenmined0.9.51 of 6See more

syft openmined 0.9.5

1 of the 6 container images this version deploys carry CVE-2026-27606.

Container imageDigestPackageFixed in
openmined/syft-frontend:0.9.5d11524a3854a
rollup@3.29.4
3.30.0

Open the chart page →

17,245
headplanenbcloudVerified publisher0.1.21 of 4See more

headplane nbcloud 0.1.2

1 of the 4 container images this version deploys carry CVE-2026-27606.

Container imageDigestPackageFixed in
ghcr.io/tale/headplane:0.5.50dbc52cffc19
rollup@4.29.1
4.59.0

Open the chart page →

7,949
cosmocosmo-platformOfficialVerified publisher0.20.01 of 10See more

cosmo cosmo-platform 0.20.0

1 of the 10 container images this version deploys carry CVE-2026-27606.

Container imageDigestPackageFixed in
ghcr.io/wundergraph/cosmo/studio:0.111.0454f4384713a
rollup@3.29.5
3.30.0

Open the chart page →

28,839
graphql-hivegraphql-hive1.0.01 of 17See more

graphql-hive graphql-hive 1.0.0

1 of the 17 container images this version deploys carry CVE-2026-27606.

Container imageDigestPackageFixed in
ghcr.io/kamilkisiela/graphql-hive/app:59b64c36c866b3555c135c70de76a884e63f8619a4a3639899f7
rollup@2.78.0
2.80.0

Open the chart page →

10,311
feedbacksystemthm-mni-iiVerified publisher0.47.11 of 10See more

feedbacksystem thm-mni-ii 0.47.1

1 of the 10 container images this version deploys carry CVE-2026-27606.

Container imageDigestPackageFixed in
thmmniii/fbs-qcm-frontend:v1.27.1a347f7f4d144
rollup@2.79.2
2.80.0

Open the chart page →

28,534
aapbaapbVerified publisher0.1.31 of 1See more

aapb aapb 0.1.3

1 of the 1 container images this version deploys carry CVE-2026-27606.

Container imageDigestPackageFixed in
ghcr.io/wgbh-mla/dream-aapb:main288a4774aa90
rollup@4.57.1
4.59.0

Open the chart page →

1,044
mastodondefault-ghVerified publisher0.3.11 of 3See more

mastodon default-gh 0.3.1

1 of the 3 container images this version deploys carry CVE-2026-27606.

Container imageDigestPackageFixed in
ghcr.io/mastodon/mastodon:v4.1.26b18e6d0eda4
rollup@2.72.1
2.80.0

Open the chart page →

5,056
joplin-serverdjjudas21Verified publisher5.5.81 of 1See more

joplin-server djjudas21 5.5.8

1 of the 1 container images this version deploys carry CVE-2026-27606.

Container imageDigestPackageFixed in
joplin/server:2.14.2-betab87564ef34e9
rollup@0.50.1
2.80.0

Open the chart page →

3,925
recipesgeek-cookbookVerified publisher6.6.21 of 2See more

recipes geek-cookbook 6.6.2

1 of the 2 container images this version deploys carry CVE-2026-27606.

Container imageDigestPackageFixed in
vabene1111/recipes:1.0.5.2ec4e9e2905b0
rollup@1.32.1
2.80.0

Open the chart page →

7,801
kenerkenerVerified publisher0.2.01 of 1See more

kener kener 0.2.0

1 of the 1 container images this version deploys carry CVE-2026-27606.

Container imageDigestPackageFixed in
rajnandan1/kener:3.2.1930407afca731
rollup@3.29.5
3.30.0

Open the chart page →

5,228
openvaultopenvaultVerified publisher0.8.11 of 2See more

openvault openvault 0.8.1

1 of the 2 container images this version deploys carry CVE-2026-27606.

Container imageDigestPackageFixed in
ghcr.io/wgbh-mla/ov-frontend:v1.1.0bfc3118f6565
rollup@4.38.0
4.59.0

Open the chart page →

6,873
unitycatalogunitycatalogVerified publisher0.0.21 of 4See more

unitycatalog unitycatalog 0.0.2

1 of the 4 container images this version deploys carry CVE-2026-27606.

Container imageDigestPackageFixed in
ghcr.io/sdwbgn/unitycatalog-helm/docker/unitycatalog-ui:0.2.1-5d668c1ed07e7ca098d
rollup@2.79.1
2.80.0

Open the chart page →

12,581
qleverzazukoVerified publisher0.7.01 of 2See more

qlever zazuko 0.7.0

1 of the 2 container images this version deploys carry CVE-2026-27606.

Container imageDigestPackageFixed in
ghcr.io/zazukoians/qlever-ui:v0.10.034c7b540a095
rollup@4.34.8
4.59.0

Open the chart page →

2,900
openapiassist-iot-open-api-management0.2.21 of 6See more

openapi assist-iot-open-api-management 0.2.2

1 of the 6 container images this version deploys carry CVE-2026-27606.

Container imageDigestPackageFixed in
assistiot/open_api_frontend:1.0.1f11d82defc70
rollup@2.79.1
2.80.0

Open the chart page →

18,277
astrotrekastria0.0.21 of 4See more

astrotrek astria 0.0.2

1 of the 4 container images this version deploys carry CVE-2026-27606.

Container imageDigestPackageFixed in
ghcr.io/astriaorg/astrotrek:0.1.05889bea38e56
rollup@4.12.0
4.59.0

Open the chart page →

32,501
cloudpremcloudprem0.0.0-build.00306ba7288bb8d46dd8c6190af79ef5b6fbdbad3 of 6See more

cloudprem cloudprem 0.0.0-build.00306ba7288bb8d46dd8c6190af79ef5b6fbdbad

3 of the 6 container images this version deploys carry CVE-2026-27606.

Container imageDigestPackageFixed in
ghcr.io/formancehq/console:console-on.v1.1.1a4d32c2f68b3
rollup@4.27.4
4.59.0
ghcr.io/formancehq/console-v3:v1.16.0c99e8ef2c545
rollup@4.44.0
4.59.0
ghcr.io/formancehq/portal:v1.16.06efef5d19d56
rollup@4.44.0
4.59.0

Open the chart page →

18,293
conduction-uiconduction-ui0.1.01 of 6See more

conduction-ui conduction-ui 0.1.0

1 of the 6 container images this version deploys carry CVE-2026-27606.

Container imageDigestPackageFixed in
conduction/conduction-ui-app:devd591f5e6f2a9
rollup@1.32.1
2.80.0

Open the chart page →

12,907
containers-security-chartscontainers-security0.1.01 of 7See more

containers-security-charts containers-security 0.1.0

1 of the 7 container images this version deploys carry CVE-2026-27606.

Container imageDigestPackageFixed in
coldatom/containers-security-front:latest7c2fbbb41bcf
rollup@2.79.1
2.80.0

Open the chart page →

9,146
directusdirectusVerified publisher0.9.101 of 4See more

directus directus 0.9.10

1 of the 4 container images this version deploys carry CVE-2026-27606.

Container imageDigestPackageFixed in
directus/directus:11.1.0e3c8bb975350
rollup@4.17.2
4.59.0

Open the chart page →

4,551
dumpstoredumpstore0.1.11 of 2See more

dumpstore dumpstore 0.1.1

1 of the 2 container images this version deploys carry CVE-2026-27606.

Container imageDigestPackageFixed in
ghcr.io/manzil-infinity180/frontend-dumpstore:226f28ca3efa6d3691044813cd09085e28d4a7b44e6394b715d9
rollup@4.24.0
4.59.0

Open the chart page →

4,251
frontend-charteks-3-tier-app-chart0.1.01 of 1See more

frontend-chart eks-3-tier-app-chart 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-27606.

Container imageDigestPackageFixed in
arfath29/3-tier-app-frontend:latest384b3e377f47
rollup@1.32.1
2.80.0

Open the chart page →

3,744
lodestarethereum-helm-chartsVerified publisher1.2.21 of 2See more

lodestar ethereum-helm-charts 1.2.2

1 of the 2 container images this version deploys carry CVE-2026-27606.

Container imageDigestPackageFixed in
chainsafe/lodestar:latest5593f6e97912
rollup@4.52.5
4.59.0

Open the chart page →

2,522
hive-appgraphql-hive1.0.01 of 1See more

hive-app graphql-hive 1.0.0

1 of the 1 container images this version deploys carry CVE-2026-27606.

Container imageDigestPackageFixed in
ghcr.io/kamilkisiela/graphql-hive/app:59b64c36c866b3555c135c70de76a884e63f8619a4a3639899f7
rollup@2.78.0
2.80.0

Open the chart page →

2,682
hive-appgraphql-hive-subcharts1.0.01 of 1See more

hive-app graphql-hive-subcharts 1.0.0

1 of the 1 container images this version deploys carry CVE-2026-27606.

Container imageDigestPackageFixed in
ghcr.io/kamilkisiela/graphql-hive/app:59b64c36c866b3555c135c70de76a884e63f8619a4a3639899f7
rollup@2.78.0
2.80.0

Open the chart page →

2,682
automatischhelmforgeVerified publisher1.3.71 of 4See more

automatisch helmforge 1.3.7

1 of the 4 container images this version deploys carry CVE-2026-27606.

Container imageDigestPackageFixed in
automatischio/automatisch:0.15.03bace7a12d5f
rollup@4.40.1
4.59.0

Open the chart page →

5,769
ryothelmforgeVerified publisher1.0.01 of 2See more

ryot helmforge 1.0.0

1 of the 2 container images this version deploys carry CVE-2026-27606.

Container imageDigestPackageFixed in
ghcr.io/ignisda/ryot:v10.5.0a752b6aee537
rollup@4.32.1
4.59.0

Open the chart page →

6,012
openbashelm-openbasVerified publisher1.8.141 of 7See more

openbas helm-openbas 1.8.14

1 of the 7 container images this version deploys carry CVE-2026-27606.

Container imageDigestPackageFixed in
openbas/caldera-server:5.1.0a277796d9724
rollup@2.71.1
2.80.0

Open the chart page →

25,017
ilum-unity-catalogilumVerified publisher0.1.01 of 4See more

ilum-unity-catalog ilum 0.1.0

1 of the 4 container images this version deploys carry CVE-2026-27606.

Container imageDigestPackageFixed in
unitycatalog/unitycatalog-ui:main-aadc6fc3a688197b218
rollup@2.79.2
2.80.0

Open the chart page →

11,812
dtlinfradao0.0.11 of 1See more

dtl infradao 0.0.1

1 of the 1 container images this version deploys carry CVE-2026-27606.

Container imageDigestPackageFixed in
ethereumoptimism/data-transport-layer:0.5.56e07968a0e686
rollup@3.12.0
3.30.0

Open the chart page →

4,944
kenerkener-chart0.0.71 of 1See more

kener kener-chart 0.0.7

1 of the 1 container images this version deploys carry CVE-2026-27606.

Container imageDigestPackageFixed in
ghcr.io/rajnandan1/kener:3.2.182b993cb232eb
rollup@3.29.5
3.30.0

Open the chart page →

5,228
sample-appmongodb-helm-charts0.1.01 of 2See more

sample-app mongodb-helm-charts 0.1.0

1 of the 2 container images this version deploys carry CVE-2026-27606.

Container imageDigestPackageFixed in
quay.io/mongodb/farm-intro-frontend:0.199ccdfd543e1
rollup@1.32.1
2.80.0

Open the chart page →

6,438
tianjimsgbyte0.1.171 of 2See more

tianji msgbyte 0.1.17

1 of the 2 container images this version deploys carry CVE-2026-27606.

Container imageDigestPackageFixed in
moonrailgun/tianji:1.11.2b528c8f8fcc4
rollup@4.9.5
4.59.0

Open the chart page →

4,560
myawesomeappmyawesomapp-mitchxxx0.1.11 of 1See more

myawesomeapp myawesomapp-mitchxxx 0.1.1

1 of the 1 container images this version deploys carry CVE-2026-27606.

Container imageDigestPackageFixed in
mitchxxx/amazon:214e72480ec63a
rollup@2.79.1
2.80.0

Open the chart page →

2,116
myawesomeapp14myawesomeapp140.1.11 of 1See more

myawesomeapp14 myawesomeapp14 0.1.1

1 of the 1 container images this version deploys carry CVE-2026-27606.

Container imageDigestPackageFixed in
ccjacobs14/amazon:59a9b14a6f09e
rollup@2.79.1
2.80.0

Open the chart page →

2,116
myawesomeapp-janmyawesomeapp-jan0.1.11 of 1See more

myawesomeapp-jan myawesomeapp-jan 0.1.1

1 of the 1 container images this version deploys carry CVE-2026-27606.

Container imageDigestPackageFixed in
ooghenekaro/amazon:latest03394ba1d6d8
rollup@2.79.1
2.80.0

Open the chart page →

2,144
myawesomeapp-marmyawesomeapp-mar0.1.11 of 1See more

myawesomeapp-mar myawesomeapp-mar 0.1.1

1 of the 1 container images this version deploys carry CVE-2026-27606.

Container imageDigestPackageFixed in
winfred008/amazon:910a68de5b398
rollup@2.79.1
2.80.0

Open the chart page →

2,116
myweatherhelmmyweather1.3.111 of 7See more

myweatherhelm myweather 1.3.11

1 of the 7 container images this version deploys carry CVE-2026-27606.

Container imageDigestPackageFixed in
hecrom/myweatherprocessingreactclient:1.3.115454b54d5b28
rollup@2.79.1
2.80.0

Open the chart page →

17,929
indexer-toolsnodeifyVerified publisher2.1.11 of 1See more

indexer-tools nodeify 2.1.1

1 of the 1 container images this version deploys carry CVE-2026-27606.

Container imageDigestPackageFixed in
ghcr.io/vincenttaglia/indexer-tools:v3.4.45bae30456ddb
rollup@2.79.1
2.80.0

Open the chart page →

2,919
notes-admin-front-helm-chartnotesprojectchart0.1.01 of 1See more

notes-admin-front-helm-chart notesprojectchart 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-27606.

Container imageDigestPackageFixed in
vlebediantsev/notes-admin-front:latest007c6670ff48
rollup@2.79.1
2.80.0

Open the chart page →

15,132
notes-project-fromt-helm-chartnotesprojectchart0.1.01 of 1See more

notes-project-fromt-helm-chart notesprojectchart 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-27606.

Container imageDigestPackageFixed in
vlebediantsev/notes-project-front:latest945675fd2636
rollup@2.79.1
2.80.0

Open the chart page →

15,206
registration-ms-front-helm-chartnotesprojectchart0.1.01 of 1See more

registration-ms-front-helm-chart notesprojectchart 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-27606.

Container imageDigestPackageFixed in
vlebediantsev/registration-ms-front-app-host:latest54f69d116c50
rollup@2.79.1
2.80.0

Open the chart page →

15,187
recipe-apprecipe-app0.1.01 of 2See more

recipe-app recipe-app 0.1.0

1 of the 2 container images this version deploys carry CVE-2026-27606.

Container imageDigestPackageFixed in
anamskenneth/recipe_frontend:2025-06-079ecf04f42cc3
rollup@4.21.2
4.59.0

Open the chart page →

3,271
helm-redchefredchef0.1.01 of 3See more

helm-redchef redchef 0.1.0

1 of the 3 container images this version deploys carry CVE-2026-27606.

Container imageDigestPackageFixed in
sharanalwar/redchef-frontend:latest5e82950b16b7
rollup@4.40.0
4.59.0

Open the chart page →

4,763
retromretsamedocVerified publisher2026.2.51 of 1See more

retrom retsamedoc 2026.2.5

1 of the 1 container images this version deploys carry CVE-2026-27606.

Container imageDigestPackageFixed in
ghcr.io/jmberesford/retrom-service:retrom-v0.7.144d763d58f11d
rollup@4.21.2
4.59.0

Open the chart page →

7,084
claude-relayrevolution10.1.371 of 4See more

claude-relay revolution1 0.1.37

1 of the 4 container images this version deploys carry CVE-2026-27606.

Container imageDigestPackageFixed in
ghcr.io/wei-shaw/claude-relay-service:v1.1.292398c34934453
rollup@4.46.1
4.59.0

Open the chart page →

4,600
mastodonrivals-spaceVerified publisher3.1.21 of 3See more

mastodon rivals-space 3.1.2

1 of the 3 container images this version deploys carry CVE-2026-27606.

Container imageDigestPackageFixed in
ghcr.io/rivals-space/rivals-mastodon:1.6.143b23d55e4be
rollup@2.72.1
2.80.0

Open the chart page →

6,026

Container images carrying it

64 by charts deploying them

A fixed version is listed for 1 of the 1 affected package.

Container imageDigestPackageFixed inUsed by
ghcr.io/kamilkisiela/graphql-hive/app:59b64c36c866b3555c135c70de76a884e63f8619a4a3639899f7
rollup@2.78.0
2.80.0
3
outlinewiki/outline:0.69.1d060dcd8f9aa
rollup@3.14.0
3.30.0
2
rajnandan1/kener:3.2.1930407afca731
rollup@3.29.5
3.30.0
2
0hlov3/semaphore:v1.0.050f874ec096b
rollup@2.79.1
2.80.0
1
anamskenneth/recipe_frontend:2025-06-079ecf04f42cc3
rollup@4.21.2
4.59.0
1
arfath29/3-tier-app-frontend:latest384b3e377f47
rollup@1.32.1
2.80.0
1
assistiot/open_api_frontend:1.0.1f11d82defc70
rollup@2.79.1
2.80.0
1
automatischio/automatisch:0.15.03bace7a12d5f
rollup@4.40.1
4.59.0
1
ccjacobs14/amazon:59a9b14a6f09e
rollup@2.79.1
2.80.0
1
chainsafe/lodestar:latest5593f6e97912
rollup@4.52.5
4.59.0
1
chainsafe/lodestar:v1.27.07b9fe4aa8073
rollup@4.22.4
4.59.0
1
coldatom/containers-security-front:latest7c2fbbb41bcf
rollup@2.79.1
2.80.0
1
conduction/conduction-ui-app:devd591f5e6f2a9
rollup@1.32.1
2.80.0
1
dessalines/lemmy-ui:0.19.20ee4c620d8e93
rollup@2.79.1
2.80.0
1
directus/directus:11.1.0e3c8bb975350
rollup@4.17.2
4.59.0
1
ethereumoptimism/data-transport-layer:0.5.56e07968a0e686
rollup@3.12.0
3.30.0
1
evoapicloud/evolution-api:latest966625532d90
rollup@4.53.3
4.59.0
1
hecrom/myweatherprocessingreactclient:1.3.115454b54d5b28
rollup@2.79.1
2.80.0
1
helga09/shoes_ukr:v1.1.17999bc8b77c0
rollup@2.79.1
2.80.0
1
honglab/slack-emoji-maker:v0.0.1ca075a926fe1
rollup@3.29.5
3.30.0
1
joplin/server:3.0-beta52af57880c0e
rollup@4.2.0
4.59.0
1
joplin/server:2.14.2-betab87564ef34e9
rollup@0.50.1
2.80.0
1
leonardomulticloud/svc-vault-frontend:v1.0.0e42a341e0299
rollup@2.79.1
2.80.0
1
mitchxxx/amazon:214e72480ec63a
rollup@2.79.1
2.80.0
1
moonrailgun/tianji:1.11.2b528c8f8fcc4
rollup@4.9.5
4.59.0
1
ooghenekaro/amazon:latest03394ba1d6d8
rollup@2.79.1
2.80.0
1
opea/codegen-ui:1.02bee4eb66f3e
rollup@3.29.4
3.30.0
1
opea/codetrans-ui:1.03ef121f34610
rollup@4.22.0
4.59.0
1
opea/docsum-ui:1.07f854e9bffaf
rollup@4.22.0
4.59.0
1
openbas/caldera-server:5.1.0a277796d9724
rollup@2.71.1
2.80.0
1
openmined/syft-frontend:0.9.5d11524a3854a
rollup@3.29.4
3.30.0
1
outlinewiki/outline:0.82.0494dfb9249a6
rollup@4.5.1
4.59.0
1
samajh/alprfrontend:latest05ef4fddbb75
rollup@1.32.1
2.80.0
1
sharanalwar/redchef-frontend:latest5e82950b16b7
rollup@4.40.0
4.59.0
1
supabase/studio:20241021-9f9b08326d8070c55e9
rollup@3.29.5
3.30.0
1
thecodingmachine/workadventure-map-storage:v1.17.75bdab56da2fa
rollup@2.79.1
2.80.0
1
thmmniii/fbs-qcm-frontend:v1.27.1a347f7f4d144
rollup@2.79.2
2.80.0
1
unitycatalog/unitycatalog-ui:main-aadc6fc3a688197b218
rollup@2.79.2
2.80.0
1
vabene1111/recipes:1.0.5.2ec4e9e2905b0
rollup@1.32.1
2.80.0
1
vlebediantsev/notes-admin-front:latest007c6670ff48
rollup@2.79.1
2.80.0
1
vlebediantsev/notes-project-front:latest945675fd2636
rollup@2.79.1
2.80.0
1
vlebediantsev/registration-ms-front-app-host:latest54f69d116c50
rollup@2.79.1
2.80.0
1
winfred008/amazon:910a68de5b398
rollup@2.79.1
2.80.0
1
ghcr.io/astriaorg/astrotrek:0.1.05889bea38e56
rollup@4.12.0
4.59.0
1
ghcr.io/formancehq/console:console-on.v1.1.1a4d32c2f68b3
rollup@4.27.4
4.59.0
1
ghcr.io/formancehq/console-v3:v1.16.0c99e8ef2c545
rollup@4.44.0
4.59.0
1
ghcr.io/formancehq/portal:v1.16.06efef5d19d56
rollup@4.44.0
4.59.0
1
ghcr.io/ignisda/ryot:v10.5.0a752b6aee537
rollup@4.32.1
4.59.0
1
ghcr.io/jmberesford/retrom-service:retrom-v0.7.144d763d58f11d
rollup@4.21.2
4.59.0
1
ghcr.io/manzil-infinity180/frontend-dumpstore:226f28ca3efa6d3691044813cd09085e28d4a7b44e6394b715d9
rollup@4.24.0
4.59.0
1

syft 1.42.1 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.