StackRadar

CVE-2026-28419

Medium

Advisory

Published 27 Feb 2026In the index since 5 Sept 2026
Severity
Medium
worst across findings
CVSS
6.6
base score, highest
EPSS
0.002
6th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
136
of 17,781 indexed, latest versions
Container images
111
deployed by those charts
Fix available
1 of 1
affected package

The matching OSV records carry no description.

Carried by container images the latest versions of 136 of 17,781 indexed charts deploy, on 111 images.

Affected packageAffected versionsFixed inImages
vimdeb2:7.4.052-1ubuntu3, 2:7.4.052-1ubuntu3.1, 2:7.4.1689-3ubuntu1.2, 2:8.0.1453-1ubuntu1+27 more2:7.4.052-1ubuntu3.1+esm23, 2:7.4.1689-3ubuntu1.5+esm29, 2:8.0.1453-1ubuntu1.13+esm14, 2:8.1.2269-1ubuntu5.32+esm2+2 more111
OSV records
DEBIAN-CVE-2026-28419UBUNTU-CVE-2026-28419
Also known as
USN-8101-1

Charts affected

136 by stars
ChartLatestAffected imagesRadar Score
seafilephybros-helm-charts4.0.11 of 1See more

seafile phybros-helm-charts 4.0.1

1 of the 1 container images this version deploys carry CVE-2026-28419.

Container imageDigestPackageFixed in
seafileltd/seafile-mc:9.0.97ac833196f60
vim@2:8.1.2269-1ubuntu5.9
2:8.1.2269-1ubuntu5.32+esm2

Open the chart page →

22,084
substreams-sink-kvpinaxVerified publisher0.0.41 of 1See more

substreams-sink-kv pinax 0.0.4

1 of the 1 container images this version deploys carry CVE-2026-28419.

Container imageDigestPackageFixed in
ghcr.io/streamingfast/substreams-sink-kv:v2.3.026953ec68d5d
vim@2:8.1.2269-1ubuntu5.29
2:8.1.2269-1ubuntu5.32+esm2

Open the chart page →

6,641
substreams-sink-nooppinaxVerified publisher0.0.31 of 1See more

substreams-sink-noop pinax 0.0.3

1 of the 1 container images this version deploys carry CVE-2026-28419.

Container imageDigestPackageFixed in
ghcr.io/streamingfast/substreams-sink-noop:v1.4.0d7c43c3135c6
vim@2:8.1.2269-1ubuntu5.29
2:8.1.2269-1ubuntu5.32+esm2

Open the chart page →

6,587
agentpolyaxon2.16.43 of 4See more

agent polyaxon 2.16.4

3 of the 4 container images this version deploys carry CVE-2026-28419.

Container imageDigestPackageFixed in
polyaxon/polyaxon-agent:2.16.4eca6952b20e6
vim@2:9.1.1230-2
no fix listed
polyaxon/polyaxon-cli:2.16.4024ff3fa775e
vim@2:9.1.1230-2
no fix listed
polyaxon/polyaxon-streams:2.16.4c186bd9834c0
vim@2:9.1.1230-2
no fix listed

Open the chart page →

10,046
polyaxonpolyaxon2.16.43 of 5See more

polyaxon polyaxon 2.16.4

3 of the 5 container images this version deploys carry CVE-2026-28419.

Container imageDigestPackageFixed in
polyaxon/polyaxon-agent:2.16.4eca6952b20e6
vim@2:9.1.1230-2
no fix listed
polyaxon/polyaxon-api:2.16.42b55c3265a90
vim@2:9.1.1230-2
no fix listed
polyaxon/polyaxon-cli:2.16.4024ff3fa775e
vim@2:9.1.1230-2
no fix listed

Open the chart page →

13,741
rocketchat-voiprocketchat-server0.1.01 of 1See more

rocketchat-voip rocketchat-server 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-28419.

Container imageDigestPackageFixed in
rocketchat/freeswitch:stablecfba5c20a5cc
vim@2:9.0.1378-2+deb12u2
no fix listed

Open the chart page →

5,683
argocd-certificate-refreshromholdings0.10.81 of 1See more

argocd-certificate-refresh romholdings 0.10.8

1 of the 1 container images this version deploys carry CVE-2026-28419.

Container imageDigestPackageFixed in
quay.io/devtron/argocd-cert-refresh:v102b6db27eaf3d
vim@2:8.2.3995-1ubuntu2.3
2:8.2.3995-1ubuntu2.26

Open the chart page →

12,949
flaresolverrrubxkubeVerified publisher0.1.11 of 1See more

flaresolverr rubxkube 0.1.1

1 of the 1 container images this version deploys carry CVE-2026-28419.

Container imageDigestPackageFixed in
flaresolverr/flaresolverr:v3.5.0139dfee1c6f8
vim@2:9.0.1378-2+deb12u2
no fix listed

Open the chart page →

27,274
runwhen-localrunwhen-contribVerified publisher0.6.171 of 3See more

runwhen-local runwhen-contrib 0.6.17

1 of the 3 container images this version deploys carry CVE-2026-28419.

Container imageDigestPackageFixed in
ghcr.io/runwhen-contrib/runwhen-local:0.12.0533ce58c6e02
vim@2:9.1.1230-2
no fix listed

Open the chart page →

3,707
snipeitschmitzis6.1.01 of 2See more

snipeit schmitzis 6.1.0

1 of the 2 container images this version deploys carry CVE-2026-28419.

Container imageDigestPackageFixed in
snipe/snipe-it:v8.3.1141ebf2386fe
vim@2:9.1.0016-1ubuntu7.8
2:9.1.0016-1ubuntu7.10

Open the chart page →

6,094
aafsmo-helm-chart6.0.01 of 14See more

aaf smo-helm-chart 6.0.0

1 of the 14 container images this version deploys carry CVE-2026-28419.

Container imageDigestPackageFixed in
oomk8s/readiness-check:2.0.2875814cc853d
vim@2:7.4.1689-3ubuntu1.2
2:7.4.1689-3ubuntu1.5+esm29

Open the chart page →

25,769
aaismo-helm-chart6.0.01 of 14See more

aai smo-helm-chart 6.0.0

1 of the 14 container images this version deploys carry CVE-2026-28419.

Container imageDigestPackageFixed in
oomk8s/readiness-check:2.0.2875814cc853d
vim@2:7.4.1689-3ubuntu1.2
2:7.4.1689-3ubuntu1.5+esm29

Open the chart page →

25,803
dgbuildersmo-helm-chart6.0.01 of 3See more

dgbuilder smo-helm-chart 6.0.0

1 of the 3 container images this version deploys carry CVE-2026-28419.

Container imageDigestPackageFixed in
oomk8s/readiness-check:2.0.07daa08b81954
vim@2:7.4.1689-3ubuntu1.2
2:7.4.1689-3ubuntu1.5+esm29

Open the chart page →

28,470
dmaap-listenersmo-helm-chart6.0.01 of 3See more

dmaap-listener smo-helm-chart 6.0.0

1 of the 3 container images this version deploys carry CVE-2026-28419.

Container imageDigestPackageFixed in
oomk8s/readiness-check:2.0.2875814cc853d
vim@2:7.4.1689-3ubuntu1.2
2:7.4.1689-3ubuntu1.5+esm29

Open the chart page →

25,769
elasticsearchsmo-helm-chart6.0.01 of 5See more

elasticsearch smo-helm-chart 6.0.0

1 of the 5 container images this version deploys carry CVE-2026-28419.

Container imageDigestPackageFixed in
oomk8s/readiness-check:2.0.2875814cc853d
vim@2:7.4.1689-3ubuntu1.2
2:7.4.1689-3ubuntu1.5+esm29

Open the chart page →

24,776
logsmo-helm-chart6.0.01 of 6See more

log smo-helm-chart 6.0.0

1 of the 6 container images this version deploys carry CVE-2026-28419.

Container imageDigestPackageFixed in
oomk8s/readiness-check:2.0.07daa08b81954
vim@2:7.4.1689-3ubuntu1.2
2:7.4.1689-3ubuntu1.5+esm29

Open the chart page →

29,220
mariadb-initsmo-helm-chart6.0.01 of 2See more

mariadb-init smo-helm-chart 6.0.0

1 of the 2 container images this version deploys carry CVE-2026-28419.

Container imageDigestPackageFixed in
oomk8s/readiness-check:2.0.2875814cc853d
vim@2:7.4.1689-3ubuntu1.2
2:7.4.1689-3ubuntu1.5+esm29

Open the chart page →

24,776
msbsmo-helm-chart6.0.01 of 6See more

msb smo-helm-chart 6.0.0

1 of the 6 container images this version deploys carry CVE-2026-28419.

Container imageDigestPackageFixed in
oomk8s/readiness-check:2.0.07daa08b81954
vim@2:7.4.1689-3ubuntu1.2
2:7.4.1689-3ubuntu1.5+esm29

Open the chart page →

27,477
pndasmo-helm-chart6.0.01 of 3See more

pnda smo-helm-chart 6.0.0

1 of the 3 container images this version deploys carry CVE-2026-28419.

Container imageDigestPackageFixed in
oomk8s/readiness-check:2.0.07daa08b81954
vim@2:7.4.1689-3ubuntu1.2
2:7.4.1689-3ubuntu1.5+esm29

Open the chart page →

27,477
pombasmo-helm-chart6.0.01 of 17See more

pomba smo-helm-chart 6.0.0

1 of the 17 container images this version deploys carry CVE-2026-28419.

Container imageDigestPackageFixed in
oomk8s/readiness-check:2.0.07daa08b81954
vim@2:7.4.1689-3ubuntu1.2
2:7.4.1689-3ubuntu1.5+esm29

Open the chart page →

29,220
portalsmo-helm-chart6.0.01 of 8See more

portal smo-helm-chart 6.0.0

1 of the 8 container images this version deploys carry CVE-2026-28419.

Container imageDigestPackageFixed in
oomk8s/readiness-check:2.0.07daa08b81954
vim@2:7.4.1689-3ubuntu1.2
2:7.4.1689-3ubuntu1.5+esm29

Open the chart page →

27,477
sdcsmo-helm-chart6.0.01 of 14See more

sdc smo-helm-chart 6.0.0

1 of the 14 container images this version deploys carry CVE-2026-28419.

Container imageDigestPackageFixed in
oomk8s/readiness-check:2.0.2875814cc853d
vim@2:7.4.1689-3ubuntu1.2
2:7.4.1689-3ubuntu1.5+esm29

Open the chart page →

25,769
sdnc-ansible-serversmo-helm-chart6.0.01 of 3See more

sdnc-ansible-server smo-helm-chart 6.0.0

1 of the 3 container images this version deploys carry CVE-2026-28419.

Container imageDigestPackageFixed in
oomk8s/readiness-check:2.0.2875814cc853d
vim@2:7.4.1689-3ubuntu1.2
2:7.4.1689-3ubuntu1.5+esm29

Open the chart page →

25,769
sdnc-portalsmo-helm-chart6.0.01 of 3See more

sdnc-portal smo-helm-chart 6.0.0

1 of the 3 container images this version deploys carry CVE-2026-28419.

Container imageDigestPackageFixed in
oomk8s/readiness-check:2.0.2875814cc853d
vim@2:7.4.1689-3ubuntu1.2
2:7.4.1689-3ubuntu1.5+esm29

Open the chart page →

25,769
sdnc-promsmo-helm-chart6.0.01 of 2See more

sdnc-prom smo-helm-chart 6.0.0

1 of the 2 container images this version deploys carry CVE-2026-28419.

Container imageDigestPackageFixed in
oomk8s/readiness-check:2.0.2875814cc853d
vim@2:7.4.1689-3ubuntu1.2
2:7.4.1689-3ubuntu1.5+esm29

Open the chart page →

24,776
sdnc-websmo-helm-chart6.0.01 of 3See more

sdnc-web smo-helm-chart 6.0.0

1 of the 3 container images this version deploys carry CVE-2026-28419.

Container imageDigestPackageFixed in
oomk8s/readiness-check:2.0.2875814cc853d
vim@2:7.4.1689-3ubuntu1.2
2:7.4.1689-3ubuntu1.5+esm29

Open the chart page →

24,776
ueb-listenersmo-helm-chart6.0.01 of 3See more

ueb-listener smo-helm-chart 6.0.0

1 of the 3 container images this version deploys carry CVE-2026-28419.

Container imageDigestPackageFixed in
oomk8s/readiness-check:2.0.2875814cc853d
vim@2:7.4.1689-3ubuntu1.2
2:7.4.1689-3ubuntu1.5+esm29

Open the chart page →

25,769
testing-multitoolsomeblackmagic0.1.21 of 1See more

testing-multitool someblackmagic 0.1.2

1 of the 1 container images this version deploys carry CVE-2026-28419.

Container imageDigestPackageFixed in
someblackmagic/k8s-testing-multitool:v0.1.06eca64b6b440
vim@2:8.1.2269-1ubuntu5.7
2:8.1.2269-1ubuntu5.32+esm2

Open the chart page →

30,687
flaresolverrsudo-kraken-flaresolverrVerified publisher2.1.41 of 1See more

flaresolverr sudo-kraken-flaresolverr 2.1.4

1 of the 1 container images this version deploys carry CVE-2026-28419.

Container imageDigestPackageFixed in
ghcr.io/flaresolverr/flaresolverr:v3.4.67962759d99d7
vim@2:9.0.1378-2+deb12u2
no fix listed

Open the chart page →

33,583
convert-datasvtechVerified publisher0.13.21 of 3See more

convert-data svtech 0.13.2

1 of the 3 container images this version deploys carry CVE-2026-28419.

Container imageDigestPackageFixed in
svtechnmaa/svtech_debuger:v1.0.3a934ffd63d25
vim@2:8.2.3995-1ubuntu2.17
2:8.2.3995-1ubuntu2.26

Open the chart page →

7,588
elasticsearchsvtech-public-helm-charts1.0.01 of 1See more

elasticsearch svtech-public-helm-charts 1.0.0

1 of the 1 container images this version deploys carry CVE-2026-28419.

Container imageDigestPackageFixed in
svtechnmaa/svtech_debuger:v1.0.0b2987abe57d3
vim@2:8.2.3995-1ubuntu2
2:8.2.3995-1ubuntu2.26

Open the chart page →

12,048
preparationsvtech-public-helm-charts1.0.01 of 1See more

preparation svtech-public-helm-charts 1.0.0

1 of the 1 container images this version deploys carry CVE-2026-28419.

Container imageDigestPackageFixed in
svtechnmaa/svtech_debuger:v1.0.0b2987abe57d3
vim@2:8.2.3995-1ubuntu2
2:8.2.3995-1ubuntu2.26

Open the chart page →

12,048
rundecksvtech-public-helm-charts1.0.01 of 2See more

rundeck svtech-public-helm-charts 1.0.0

1 of the 2 container images this version deploys carry CVE-2026-28419.

Container imageDigestPackageFixed in
svtechnmaa/svtech_rundeck:v1.2.26e368ace0977
vim@2:8.1.2269-1ubuntu5.22
2:8.1.2269-1ubuntu5.32+esm2

Open the chart page →

18,756
lightstepupdater-lightstep-satellite1.2.21 of 1See more

lightstep updater-lightstep-satellite 1.2.2

1 of the 1 container images this version deploys carry CVE-2026-28419.

Container imageDigestPackageFixed in
lightstep/collector:2021-01-26_23-02-36Z11c5569aaf3b
vim@2:7.4.1689-3ubuntu1.2
2:7.4.1689-3ubuntu1.5+esm29

Open the chart page →

15,330
twenty-crmvictorlane0.0.11 of 3See more

twenty-crm victorlane 0.0.1

1 of the 3 container images this version deploys carry CVE-2026-28419.

Container imageDigestPackageFixed in
twentycrm/twenty-postgres-spilo:latest2f78405a78be
vim@2:8.2.3995-1ubuntu2.15
2:8.2.3995-1ubuntu2.26

Open the chart page →

13,459
longhornwenerme1.2.31 of 2See more

longhorn wenerme 1.2.3

1 of the 2 container images this version deploys carry CVE-2026-28419.

Container imageDigestPackageFixed in
longhornio/longhorn-manager:v1.2.3dca34321452c
vim@2:8.1.2269-1ubuntu5.4
2:8.1.2269-1ubuntu5.32+esm2

Open the chart page →

15,230

Container images carrying it

111 by charts deploying them

A fixed version is listed for 1 of the 1 affected package.

Container imageDigestPackageFixed inUsed by
ghcr.io/kore3lab/kore-board.terminal:v0.5.5f52e66eff50b
vim@2:8.0.1453-1ubuntu1.9
2:8.0.1453-1ubuntu1.13+esm14
1
ghcr.io/runwhen-contrib/runwhen-local:0.12.0533ce58c6e02
vim@2:9.1.1230-2
no fix listed
1
ghcr.io/samr037/node-debug-dashboard:0.3.0c79b2e64a211
vim@2:9.0.1378-2+deb12u2
no fix listed
1
ghcr.io/sergelogvinov/postgresql:16.15fafb72e98f22
vim@2:9.0.1378-2+deb12u2
no fix listed
1
ghcr.io/streamingfast/substreams-sink-kv:v2.3.026953ec68d5d
vim@2:8.1.2269-1ubuntu5.29
2:8.1.2269-1ubuntu5.32+esm2
1
ghcr.io/streamingfast/substreams-sink-noop:v1.4.0d7c43c3135c6
vim@2:8.1.2269-1ubuntu5.29
2:8.1.2269-1ubuntu5.32+esm2
1
public.ecr.aws/supportpal/helpdesk-monolithic:4.0.4573779e57fae
vim@2:8.1.2269-1ubuntu5
2:8.1.2269-1ubuntu5.32+esm2
1
quay.io/galaxyproject/galaxy-min:26.1.12c324c9789f5
vim@2:9.1.1230-2
no fix listed
1
quay.io/jupyterhub/k8s-hub:4.4.2108fbb01c3fe
vim@2:9.0.1378-2+deb12u2
no fix listed
1
quay.io/jupyterhub/k8s-hub:4.3.5113e372cf71b
vim@2:9.0.1378-2+deb12u2
no fix listed
1
quay.io/jupyterhub/k8s-hub:4.3.492f883d09270
vim@2:9.0.1378-2+deb12u2
no fix listed
1

syft 1.42.1 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.