StackRadar

CVE-2026-31685

Critical

Advisory

Published 25 Apr 2026In the index since 6 Sept 2026
Severity
Critical
worst across findings
CVSS
9.4
base score, highest
EPSS
0.003
27th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
153
of 17,803 indexed, latest versions
Container images
153
deployed by those charts
Fix available
1 of 1
affected package

The matching OSV records carry no description.

Carried by container images the latest versions of 153 of 17,803 indexed charts deploy, on 153 images.

Affected packageAffected versionsFixed inImages
linuxdeb3.13.0-46.77, 3.13.0-126.175, 3.13.0-149.199, 3.13.0-170.220+89 more3.13.0-215.266, 4.4.0-283.317, 4.15.0-253.265, 5.4.0-233.253+3 more153
OSV records
UBUNTU-CVE-2026-31685
Also known as
USN-8490-1, USN-8492-1, USN-8493-1, USN-8529-1, USN-8548-2, USN-8615-1, USN-8634-1

Charts affected

153 by stars
ChartLatestAffected imagesRadar Score
twenty-crmvictorlane0.0.11 of 3See more

twenty-crm victorlane 0.0.1

1 of the 3 container images this version deploys carry CVE-2026-31685.

Container imageDigestPackageFixed in
twentycrm/twenty-postgres-spilo:latest2f78405a78be
linux@5.15.0-134.145
5.15.0-185.195

Open the chart page →

64,741
kongwallarmVerified publisher4.6.31 of 7See more

kong wallarm 4.6.3

1 of the 7 container images this version deploys carry CVE-2026-31685.

Container imageDigestPackageFixed in
wallarm/kong:3.1.0-ubuntu-4.6.0ea9608c82e40
linux@5.4.0-144.161
5.4.0-233.253

Open the chart page →

70,298
emissary-ingresswenerme8.12.21 of 2See more

emissary-ingress wenerme 8.12.2

1 of the 2 container images this version deploys carry CVE-2026-31685.

Container imageDigestPackageFixed in
istio/kubectl:1.5.10dbb7726d1bf0
linux@4.15.0-112.113
4.15.0-253.265

Open the chart page →

72,845

Container images carrying it

153 by charts deploying them

A fixed version is listed for 1 of the 1 affected package.

Container imageDigestPackageFixed inUsed by
seldonio/locust-core:0.81d0da98a2d76
linux@4.4.0-148.174
4.4.0-283.317
1
shaowenchen/ops-server:latest315444f703f4
linux@5.15.0-153.163
5.15.0-185.195
1
snipe/snipe-it:v8.3.1141ebf2386fe
linux@6.8.0-79.79
6.8.0-134.134
1
snipe/snipe-it:v6.0.1455fb7636a98c
linux@5.4.0-131.147
5.4.0-233.253
1
socialmediamacroscope/autophrase:0.1.570fb11d4f531
linux@5.4.0-163.180
5.4.0-233.253
1
socialmediamacroscope/collect_reddit_comment:0.1.219d3d26d53ee
linux@4.15.0-210.221
4.15.0-253.265
1
socialmediamacroscope/image_crawler:0.1.2f508216be63c
linux@4.15.0-210.221
4.15.0-253.265
1
someblackmagic/k8s-testing-multitool:v0.1.06eca64b6b440
linux@5.4.0-117.132
5.4.0-233.253
1
stackstorm/st2actionrunner:3.888235ba70cad
linux@5.4.0-169.187
5.4.0-233.253
1
stackstorm/st2api:3.86f56d239d280
linux@5.4.0-169.187
5.4.0-233.253
1
stackstorm/st2auth:3.833ecfda16608
linux@5.4.0-169.187
5.4.0-233.253
1
stackstorm/st2garbagecollector:3.84e3f8c7ca52d
linux@5.4.0-169.187
5.4.0-233.253
1
stackstorm/st2notifier:3.8f190a6212195
linux@5.4.0-169.187
5.4.0-233.253
1
stackstorm/st2rulesengine:3.8259503496ff9
linux@5.4.0-169.187
5.4.0-233.253
1
stackstorm/st2scheduler:3.8b1de2055c362
linux@5.4.0-169.187
5.4.0-233.253
1
stackstorm/st2sensorcontainer:3.8b1a338f64773
linux@5.4.0-169.187
5.4.0-233.253
1
stackstorm/st2stream:3.81c8904a3bf67
linux@5.4.0-169.187
5.4.0-233.253
1
stackstorm/st2timersengine:3.81bf35bfaf00c
linux@5.4.0-169.187
5.4.0-233.253
1
stackstorm/st2workflowengine:3.819fdfffdbba8
linux@5.4.0-169.187
5.4.0-233.253
1
statcan/ckan:2.93921305425b8
linux@5.4.0-74.83
5.4.0-233.253
1
streamnative/apache-pulsar-grafana-dashboard-k8s:0.0.1611bceacec8fb
linux@5.4.0-77.86
5.4.0-233.253
1
svtechnmaa/svtech_maxscale:v1.0.3410a25b51f9f
linux@5.15.0-92.102
5.15.0-185.195
1
svtechnmaa/svtech_rundeck:v1.2.26e368ace0977
linux@5.4.0-176.196
5.4.0-233.253
1
tensorflow/tensorflow:1.6.0-devel1e3172090703
linux@4.4.0-116.140
4.4.0-283.317
1
timothyclarke/wptagent:2018-01-2322c41e5ca7e2
linux@4.4.0-112.135
4.4.0-283.317
1
twentycrm/twenty-postgres-spilo:latest2f78405a78be
linux@5.15.0-134.145
5.15.0-185.195
1
vinanrra/7dtd-server:v0.4.4f9534490bd2b
linux@4.15.0-204.215
4.15.0-253.265
1
voltha/voltha-cli:1.6.0c4e41e92f046
linux@4.4.0-137.163
4.4.0-283.317
1
voltha/voltha-envoy:1.6.059ab2a00f712
linux@3.13.0-126.175
3.13.0-215.266
1
voltha/voltha-netconf:1.6.037f80524c207
linux@4.4.0-137.163
4.4.0-283.317
1
voltha/voltha-ofagent:1.6.09ee8c1f4428c
linux@4.4.0-137.163
4.4.0-283.317
1
voltha/voltha-tester:1.7.0655c3048a602
linux@4.4.0-154.181
4.4.0-283.317
1
voltha/voltha-voltha:1.6.0ff596b62de59
linux@4.4.0-137.163
4.4.0-283.317
1
wallarm/kong:3.1.0-ubuntu-4.6.0ea9608c82e40
linux@5.4.0-144.161
5.4.0-233.253
1
xeladock/mysql_dns:latest4baf531453f1
linux@5.15.0-25.25
5.15.0-185.195
1
gcr.io/flink-operator/deployer:webhook-cert809338a69bd5
linux@4.15.0-88.88
4.15.0-253.265
1
gcr.io/istio-release/pilot:release-1.0-latest-daily5ea7b7f3632a
linux@4.4.0-150.176
4.4.0-283.317
1
gcr.io/istio-release/proxyv2:release-1.0-latest-daily8f9ff98fdbef
linux@4.4.0-150.176
4.4.0-283.317
1
ghcr.io/cosmicrocks/datum:v0.4.0beta76771c3cc8c3
linux@6.8.0-90.91
6.8.0-134.134
1
ghcr.io/haveagitgat/tdarr:2.00.18.23fbe4c29d14c
linux@5.4.0-110.124
5.4.0-233.253
1
ghcr.io/kubeflow/spark-operator/controller:2.2.1865ff4da5686
linux@5.4.0-214.234
5.4.0-233.253
1
ghcr.io/kvaps/opennebula:v5.12.0.4-1e28e0e7de11b
linux@5.4.0-80.90
5.4.0-233.253
1
ghcr.io/kvaps/opennebula-flow:v5.12.0.4-1600221f0f43f
linux@5.4.0-80.90
5.4.0-233.253
1
ghcr.io/maastrichtu-ids/rstudio:latest981aa4c109e1
linux@6.8.0-57.59
6.8.0-134.134
1
ghcr.io/oznu/homebridge:2022-07-08ff2af53897e7
linux@5.4.0-121.137
5.4.0-233.253
1
ghcr.io/smarter-project/audio-client:v3.1.23c8375dc5487
linux@5.4.0-131.147
5.4.0-233.253
1
ghcr.io/smarter-project/gstreamer:v1.0.25ecb16015aa8
linux@5.4.0-131.147
5.4.0-233.253
1
ghcr.io/smarter-project/image-detector:v2.5.31dcca70c6446
linux@5.4.0-131.147
5.4.0-233.253
1
ghcr.io/streamingfast/substreams-sink-kv:v2.3.026953ec68d5d
linux@5.4.0-200.220
5.4.0-233.253
1
ghcr.io/streamingfast/substreams-sink-noop:v1.4.0d7c43c3135c6
linux@5.4.0-200.220
5.4.0-233.253
1

syft 1.42.1 · advisories as of 18 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.