StackRadar

CVE-2026-30227

Medium

Advisory

Published 5 Mar 2026In the index since 6 Sept 2026
Severity
Medium
worst across findings
CVSS
6.9
base score, highest
EPSS
0.011
63rd percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
23
of 17,781 indexed, latest versions
Container images
24
deployed by those charts
Fix available
1 of 1
affected package

MimeKit has CRLF Injection in Quoted Local-Part that Enables SMTP Command Injection and Email Forgery

Carried by container images the latest versions of 23 of 17,781 indexed charts deploy, on 24 images.

Affected packageAffected versionsFixed inImages
MimeKitnuget2.0.5, 2.3.1.0, 2.10.1, 2.10.1.0+7 more4.15.124
OSV records
GHSA-g7hc-96xr-gvvx

Charts affected

23 by stars
ChartLatestAffected imagesRadar Score
servarrservarr1.0.23 of 10See more

servarr servarr 1.0.2

3 of the 10 container images this version deploys carry CVE-2026-30227.

Container imageDigestPackageFixed in
ghcr.io/onedr0p/prowlarr-develop:1.14.0.4286c77d84ebf7a6
MimeKit@3.6.0
4.15.1
ghcr.io/onedr0p/radarr:5.3.6.86128d299e59fce7
MimeKit@3.6.0
4.15.1
ghcr.io/onedr0p/sonarr:4.0.2.118327ffdcc8a937
MimeKit@3.6.0
4.15.1

Open the chart page →

14,238
radarrloeken-at-homeVerified publisher5.27.0-nightly1 of 1See more

radarr loeken-at-home 5.27.0-nightly

1 of the 1 container images this version deploys carry CVE-2026-30227.

Container imageDigestPackageFixed in
loeken/radarr:5.27.0-nightlya24409d3846d
MimeKit@4.8.0
4.15.1

Open the chart page →

586
duplicaticronce0.1.01 of 1See more

duplicati cronce 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-30227.

Container imageDigestPackageFixed in
duplicati/duplicati:2.0.5.111_canary_2020-09-268660f0eda7c9
MimeKit@2.3.1.0
4.15.1

Open the chart page →

3,026
prowlarrgeek-cookbookVerified publisher4.5.21 of 1See more

prowlarr geek-cookbook 4.5.2

1 of the 1 container images this version deploys carry CVE-2026-30227.

Container imageDigestPackageFixed in
ghcr.io/k8s-at-home/prowlarr:v0.3.0.1710c863aa9875fa
MimeKit@3.1.1
4.15.1

Open the chart page →

11,558
sonarrgeek-cookbookVerified publisher16.3.21 of 1See more

sonarr geek-cookbook 16.3.2

1 of the 1 container images this version deploys carry CVE-2026-30227.

Container imageDigestPackageFixed in
ghcr.io/k8s-at-home/sonarr:v3.0.8.15070eb230e2381a
MimeKit@2.10.1.0
4.15.1

Open the chart page →

13,025
readarrk8s-home-lab-repo7.2.11 of 1See more

readarr k8s-home-lab-repo 7.2.1

1 of the 1 container images this version deploys carry CVE-2026-30227.

Container imageDigestPackageFixed in
ghcr.io/home-operations/readarr:0.4.188f7551205fbd
MimeKit@4.8.0
4.15.1

Open the chart page →

1,099
sonarrk8s-home-lab-repo17.3.11 of 1See more

sonarr k8s-home-lab-repo 17.3.1

1 of the 1 container images this version deploys carry CVE-2026-30227.

Container imageDigestPackageFixed in
ghcr.io/home-operations/sonarr:4.0.171989718e9fce
MimeKit@4.8.0
4.15.1

Open the chart page →

765
radarrpanzer1119Verified publisher0.2.21 of 1See more

radarr panzer1119 0.2.2

1 of the 1 container images this version deploys carry CVE-2026-30227.

Container imageDigestPackageFixed in
ghcr.io/linuxserver/radarr:6.0.4.10291-ls2896c0948b42c14
MimeKit@4.13.0
4.15.1

Open the chart page →

949
sonarrpanzer1119Verified publisher0.2.21 of 1See more

sonarr panzer1119 0.2.2

1 of the 1 container images this version deploys carry CVE-2026-30227.

Container imageDigestPackageFixed in
ghcr.io/linuxserver/sonarr:4.0.16.2944-ls3008b9f2138ec50
MimeKit@4.8.0
4.15.1

Open the chart page →

947
readarrpree-helm-chartsVerified publisher1.17.11 of 1See more

readarr pree-helm-charts 1.17.1

1 of the 1 container images this version deploys carry CVE-2026-30227.

Container imageDigestPackageFixed in
ghcr.io/home-operations/readarr:0.4.18.28058f7551205fbd
MimeKit@4.8.0
4.15.1

Open the chart page →

1,099
lidarralexmorbo-lidarrVerified publisher0.1.21 of 1See more

lidarr alexmorbo-lidarr 0.1.2

1 of the 1 container images this version deploys carry CVE-2026-30227.

Container imageDigestPackageFixed in
ghcr.io/home-operations/lidarr:3.1.2.4902dab0e07502a3
MimeKit@4.14.0
4.15.1

Open the chart page →

1,870
lidarrbdclark-helm-chartsVerified publisher0.1.01 of 1See more

lidarr bdclark-helm-charts 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-30227.

Container imageDigestPackageFixed in
linuxserver/lidarr:3.1.0c74c32408fdf
MimeKit@4.14.0
4.15.1

Open the chart page →

377
prowlarrbeluga-cloudVerified publisher1.0.11 of 1See more

prowlarr beluga-cloud 1.0.1

1 of the 1 container images this version deploys carry CVE-2026-30227.

Container imageDigestPackageFixed in
ghcr.io/beluga-cloud/prowlarr/prowlarr:1.4.1.3258aa774b3c3425
MimeKit@3.6.0
4.15.1

Open the chart page →

169
sonarrbeluga-cloudVerified publisher2.0.41 of 1See more

sonarr beluga-cloud 2.0.4

1 of the 1 container images this version deploys carry CVE-2026-30227.

Container imageDigestPackageFixed in
ghcr.io/beluga-cloud/sonarr/sonarr:3.0.10.1567339c63adcc4a
MimeKit@2.10.1.0
4.15.1

Open the chart page →

100
sonarrbrandan-schmitz-helm-chartsVerified publisher2.0.101 of 1See more

sonarr brandan-schmitz-helm-charts 2.0.10

1 of the 1 container images this version deploys carry CVE-2026-30227.

Container imageDigestPackageFixed in
linuxserver/sonarr:version-4.0.17.295202bc962946fe
MimeKit@4.8.0
4.15.1

Open the chart page →

866
ombibryanalves0.4.01 of 1See more

ombi bryanalves 0.4.0

1 of the 1 container images this version deploys carry CVE-2026-30227.

Container imageDigestPackageFixed in
linuxserver/ombi:3.0.4572-ls452fbb21fb4903
MimeKit@2.0.5
4.15.1

Open the chart page →

10,776
lidarrgeek-cookbookVerified publisher14.2.21 of 1See more

lidarr geek-cookbook 14.2.2

1 of the 1 container images this version deploys carry CVE-2026-30227.

Container imageDigestPackageFixed in
ghcr.io/k8s-at-home/lidarr:v1.0.0.225554ebc1f90963
MimeKit@2.10.1
4.15.1

Open the chart page →

14,283
radarrgeek-cookbookVerified publisher16.3.21 of 1See more

radarr geek-cookbook 16.3.2

1 of the 1 container images this version deploys carry CVE-2026-30227.

Container imageDigestPackageFixed in
ghcr.io/k8s-at-home/radarr:v4.1.0.61754273dfaf0295
MimeKit@2.15.0
4.15.1

Open the chart page →

10,379
smtp4devimioVerified publisher0.1.11 of 1See more

smtp4dev imio 0.1.1

1 of the 1 container images this version deploys carry CVE-2026-30227.

Container imageDigestPackageFixed in
rnwood/smtp4dev:3.6.1912304153668
MimeKit@4.5.0
4.15.1

Open the chart page →

3,192
servarrjacobcolvinVerified publisher0.1.21 of 2See more

servarr jacobcolvin 0.1.2

1 of the 2 container images this version deploys carry CVE-2026-30227.

Container imageDigestPackageFixed in
linuxserver/radarr:4.2.42f7a7b7a0ca6
MimeKit@2.15.0
4.15.1

Open the chart page →

206
sonarrloeken-at-homeVerified publisher4.0.171 of 1See more

sonarr loeken-at-home 4.0.17

1 of the 1 container images this version deploys carry CVE-2026-30227.

Container imageDigestPackageFixed in
loeken/sonarr:4.0.17b940520a2236
MimeKit@4.8.0
4.15.1

Open the chart page →

866
radarr-testpanzer1119Verified publisher0.1.21 of 2See more

radarr-test panzer1119 0.1.2

1 of the 2 container images this version deploys carry CVE-2026-30227.

Container imageDigestPackageFixed in
ghcr.io/linuxserver/radarr:6.0.4c8a55bd83672
MimeKit@4.13.0
4.15.1

Open the chart page →

1,288
prowlarrsudo-kraken-prowlarrVerified publisher3.2.11 of 1See more

prowlarr sudo-kraken-prowlarr 3.2.1

1 of the 1 container images this version deploys carry CVE-2026-30227.

Container imageDigestPackageFixed in
ghcr.io/home-operations/prowlarr:2.3.01a8a4b11972b
MimeKit@4.14.0
4.15.1

Open the chart page →

876

Container images carrying it

24 by charts deploying them

A fixed version is listed for 1 of the 1 affected package.

Container imageDigestPackageFixed inUsed by
ghcr.io/home-operations/readarr:0.4.18:0.4.18.28058f7551205fbd
MimeKit@4.8.0
4.15.1
2
duplicati/duplicati:2.0.5.111_canary_2020-09-268660f0eda7c9
MimeKit@2.3.1.0
4.15.1
1
linuxserver/lidarr:3.1.0c74c32408fdf
MimeKit@4.14.0
4.15.1
1
linuxserver/ombi:3.0.4572-ls452fbb21fb4903
MimeKit@2.0.5
4.15.1
1
linuxserver/radarr:4.2.42f7a7b7a0ca6
MimeKit@2.15.0
4.15.1
1
linuxserver/sonarr:version-4.0.17.295202bc962946fe
MimeKit@4.8.0
4.15.1
1
loeken/radarr:5.27.0-nightlya24409d3846d
MimeKit@4.8.0
4.15.1
1
loeken/sonarr:4.0.17b940520a2236
MimeKit@4.8.0
4.15.1
1
rnwood/smtp4dev:3.6.1912304153668
MimeKit@4.5.0
4.15.1
1
ghcr.io/beluga-cloud/prowlarr/prowlarr:1.4.1.3258aa774b3c3425
MimeKit@3.6.0
4.15.1
1
ghcr.io/beluga-cloud/sonarr/sonarr:3.0.10.1567339c63adcc4a
MimeKit@2.10.1.0
4.15.1
1
ghcr.io/home-operations/lidarr:3.1.2.4902dab0e07502a3
MimeKit@4.14.0
4.15.1
1
ghcr.io/home-operations/prowlarr:2.3.01a8a4b11972b
MimeKit@4.14.0
4.15.1
1
ghcr.io/home-operations/sonarr:4.0.171989718e9fce
MimeKit@4.8.0
4.15.1
1
ghcr.io/k8s-at-home/lidarr:v1.0.0.225554ebc1f90963
MimeKit@2.10.1
4.15.1
1
ghcr.io/k8s-at-home/prowlarr:v0.3.0.1710c863aa9875fa
MimeKit@3.1.1
4.15.1
1
ghcr.io/k8s-at-home/radarr:v4.1.0.61754273dfaf0295
MimeKit@2.15.0
4.15.1
1
ghcr.io/k8s-at-home/sonarr:v3.0.8.15070eb230e2381a
MimeKit@2.10.1.0
4.15.1
1
ghcr.io/linuxserver/radarr:6.0.4.10291-ls2896c0948b42c14
MimeKit@4.13.0
4.15.1
1
ghcr.io/linuxserver/radarr:6.0.4c8a55bd83672
MimeKit@4.13.0
4.15.1
1
ghcr.io/linuxserver/sonarr:4.0.16.2944-ls3008b9f2138ec50
MimeKit@4.8.0
4.15.1
1
ghcr.io/onedr0p/prowlarr-develop:1.14.0.4286c77d84ebf7a6
MimeKit@3.6.0
4.15.1
1
ghcr.io/onedr0p/radarr:5.3.6.86128d299e59fce7
MimeKit@3.6.0
4.15.1
1
ghcr.io/onedr0p/sonarr:4.0.2.118327ffdcc8a937
MimeKit@3.6.0
4.15.1
1

syft 1.42.1 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.