StackRadar

CVE-2026-3172

High

Advisory

Published 25 Feb 2026In the index since 28 Sept 2026
Severity
High
worst across findings
CVSS
8.1
base score, highest
EPSS
0.006
45th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
2
of 17,926 indexed, latest versions
Container images
1
deployed by those charts
Fix available
None
affected package

The matching OSV records carry no description.

Carried by container images the latest versions of 2 of 17,926 indexed charts deploy, on 1 image.

Affected packageAffected versionsFixed inImages
pgvectordeb0.8.6-1.pgdg13+1no fix listed1
OSV records
DEBIAN-CVE-2026-3172

Charts affected

2 by stars
ChartLatestAffected imagesRadar Score
forgejoforgejo-captnbp-helm1.2.61 of 2See more

forgejo forgejo-captnbp-helm 1.2.6

1 of the 2 container images this version deploys carry CVE-2026-3172.

Container imageDigestPackageFixed in
ghcr.io/cloudnative-pg/postgresql:18.4-system-trixie42708a75345b
pgvector@0.8.6-1.pgdg13+1
no fix listed

Open the chart page →

1,882
vaultwardenvaultwarden-helmVerified publisher1.2.71 of 2See more

vaultwarden vaultwarden-helm 1.2.7

1 of the 2 container images this version deploys carry CVE-2026-3172.

Container imageDigestPackageFixed in
ghcr.io/cloudnative-pg/postgresql:18.4-system-trixie42708a75345b
pgvector@0.8.6-1.pgdg13+1
no fix listed

Open the chart page →

1,882

Container images carrying it

1 by charts deploying them

A fixed version is listed for 0 of the 1 affected package.

Container imageDigestPackageFixed inUsed by
ghcr.io/cloudnative-pg/postgresql:18.4-system-trixie42708a75345b
pgvector@0.8.6-1.pgdg13+1
no fix listed
2

syft 1.42.1 · advisories as of 28 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.