StackRadar

CVE-2026-3219

Medium

Advisory

Published 20 Apr 2026In the index since 5 Sept 2026
Severity
Medium
worst across findings
CVSS
4.6
base score, highest
EPSS
0.001
4th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
1,265
of 17,781 indexed, latest versions
Container images
1,215
deployed by those charts
Fix available
2 of 3
affected packages

pip has an interpretation conflict due to handling both concatenated tar and ZIP files as ZIP files

Carried by container images the latest versions of 1,265 of 17,781 indexed charts deploy, on 1,215 images.

Affected packageAffected versionsFixed inImages
pippypi1.5.4, 8.1.1, 8.1.2, 9.0.0+65 more26.11,207
python-pipdeb1.5.4-1ubuntu4, 8.1.1-2ubuntu0.4, 9.0.1-2.3~ubuntu1, 9.0.1-2.3~ubuntu1.18.04.1+24 moreno fix listed140
py3-pipapk25.0.1-r0, 25.2-r0, 25.3-r2, 25.3-r3+2 more26.1.1-r09
OSV records
CGA-33rw-387h-r2wcCGA-7cc7-f2g6-2gq5CGA-hjw3-7v3m-86rwDEBIAN-CVE-2026-3219GHSA-58qw-9mgm-455vUBUNTU-CVE-2026-3219
Also known as
CGA-4gf9-hhmr-5wj7, CGA-7j43-qmq2-2j84, CGA-cp2g-x5m2-rpp9, CGA-fm73-hhr9-j3j7, CGA-jx64-c9rw-9jqr, CGA-m77r-p4v4-p976, CGA-p26j-w2gh-vcv5, CGA-pj9j-7m5w-p5w7, CGA-vpj3-hmwp-h3qf, PYSEC-2026-2875

Charts affected

1,265 by stars
ChartLatestAffected imagesRadar Score
palworldpalworld-server-chartVerified publisher2.7.11 of 1See more

palworld palworld-server-chart 2.7.1

1 of the 1 container images this version deploys carry CVE-2026-3219.

Container imageDigestPackageFixed in
thijsvanloef/palworld-server-docker:v2.7.1401d3eb5c053
pip@25.1.1
python-pip@25.1.1+dfsg-1
26.1
no fix listed

Open the chart page →

3,681
peertubepeertubeVerified publisher0.1.31 of 1See more

peertube peertube 0.1.3

1 of the 1 container images this version deploys carry CVE-2026-3219.

Container imageDigestPackageFixed in
chocobozzz/peertube:v8.1.5052712130691
pip@25.1.1
python-pip@25.1.1+dfsg-1
26.1
no fix listed

Open the chart page →

7,035
phonebook-chartphonebook-chart0.1.03 of 3See more

phonebook-chart phonebook-chart 0.1.0

3 of the 3 container images this version deploys carry CVE-2026-3219.

Container imageDigestPackageFixed in
ahmetgrbzz/result_server:2.035c37ae2bafd
pip@24.0
26.1
ahmetgrbzz/web_server:2.0f018bafd2b0c
pip@24.0
26.1
library/mysql:5.74bc6bc963e6d
pip@23.0.1
26.1

Open the chart page →

3,034
portraitportraitVerified publisher0.2.131 of 8See more

portrait portrait 0.2.13

1 of the 8 container images this version deploys carry CVE-2026-3219.

Container imageDigestPackageFixed in
treskon/portrait-web-setup:DEV-latesta475d80e4ecf
pip@24.3.1
26.1

Open the chart page →

31,844
home-assistantpree-helm-chartsVerified publisher1.80.01 of 1See more

home-assistant pree-helm-charts 1.80.0

1 of the 1 container images this version deploys carry CVE-2026-3219.

Container imageDigestPackageFixed in
ghcr.io/home-assistant/home-assistant:2026.9.2a1bc133af84e
pip@26.0.1
26.1

Open the chart page →

2,133
pritunl-slack-apppritunl-slack-appVerified publisher0.1.71 of 1See more

pritunl-slack-app pritunl-slack-app 0.1.7

1 of the 1 container images this version deploys carry CVE-2026-3219.

Container imageDigestPackageFixed in
nathanielvarona/pritunl-slack-app:0.1.10b746a34e5597
pip@22.2.2
26.1

Open the chart page →

2,871
privacyideaprivacyidea1.0.61 of 2See more

privacyidea privacyidea 1.0.6

1 of the 2 container images this version deploys carry CVE-2026-3219.

Container imageDigestPackageFixed in
gpappsoft/privacyidea-docker:3.12.2af7841adad26
pip@25.3
py3-pip@25.3-r2
26.1
26.1.1-r0

Open the chart page →

5,440
prowlerprowler-appVerified publisher0.0.91 of 5See more

prowler prowler-app 0.0.9

1 of the 5 container images this version deploys carry CVE-2026-3219.

Container imageDigestPackageFixed in
prowlercloud/prowler-api:5.31.14f252d579be2
pip@25.0.1
26.1

Open the chart page →

8,158
pvc-exporterpvc-exporter0.1.31 of 1See more

pvc-exporter pvc-exporter 0.1.3

1 of the 1 container images this version deploys carry CVE-2026-3219.

Container imageDigestPackageFixed in
dockerid31415926/pvc-exporter:v0.1.35a1dd17e0e07
pip@21.2.4
26.1

Open the chart page →

1,762
kube-resource-reportrlex0.10.11 of 2See more

kube-resource-report rlex 0.10.1

1 of the 2 container images this version deploys carry CVE-2026-3219.

Container imageDigestPackageFixed in
hjacobs/kube-resource-report:22.11.0c173cd02f5af
pip@22.2.2
26.1

Open the chart page →

1,266
routehub-client-hubroutehub-helm1.0.01 of 3See more

routehub-client-hub routehub-helm 1.0.0

1 of the 3 container images this version deploys carry CVE-2026-3219.

Container imageDigestPackageFixed in
timescale/timescaledb-ha:pg16d7db8f1085a3
pip@22.0.2
python-pip@22.0.2+dfsg-1ubuntu0.7
26.1
no fix listed

Open the chart page →

12,930
mealiertomik-helm-chartsVerified publisher0.0.21 of 1See more

mealie rtomik-helm-charts 0.0.2

1 of the 1 container images this version deploys carry CVE-2026-3219.

Container imageDigestPackageFixed in
ghcr.io/mealie-recipes/mealie:v3.2.1322369a5b748
pip@25.0.1
26.1

Open the chart page →

3,929
kyoorubxkubeVerified publisher0.1.102 of 9See more

kyoo rubxkube 0.1.10

2 of the 9 container images this version deploys carry CVE-2026-3219.

Container imageDigestPackageFixed in
ghcr.io/zoriya/kyoo_autosync:4.7.1fbba58ddb1a6
pip@24.3.1
26.1
ghcr.io/zoriya/kyoo_scanner:4.7.17dc0ee57b628
pip@24.3.1
26.1

Open the chart page →

30,234
devpisb-helm-charts0.3.01 of 1See more

devpi sb-helm-charts 0.3.0

1 of the 1 container images this version deploys carry CVE-2026-3219.

Container imageDigestPackageFixed in
jonasal/devpi-server:6.17.0-alpineec1eee99a18d
pip@25.3
26.1

Open the chart page →

920
iopsciencemeshVerified publisher0.4.01 of 2See more

iop sciencemesh 0.4.0

1 of the 2 container images this version deploys carry CVE-2026-3219.

Container imageDigestPackageFixed in
cs3org/wopiserver:v9.4.202a9e78757b4
pip@23.0.1
26.1

Open the chart page →

4,052
viya4-home-dir-builderselerityVerified publisher1.1.01 of 2See more

viya4-home-dir-builder selerity 1.1.0

1 of the 2 container images this version deploys carry CVE-2026-3219.

Container imageDigestPackageFixed in
library/python:3.12-slim78387bc3881b
pip@25.0.1
26.1

Open the chart page →

852
sentry-k8ssentry-k8sVerified publisher1.4.13 of 11See more

sentry-k8s sentry-k8s 1.4.1

3 of the 11 container images this version deploys carry CVE-2026-3219.

Container imageDigestPackageFixed in
confluentinc/cp-kafka:7.6.683dbca3efd2a
pip@20.2.4
26.1
ghcr.io/getsentry/sentry:26.7.27c5052aa4e3c
pip@24.3.1
26.1
ghcr.io/getsentry/snuba:26.7.210f8d164109b
pip@25.3
26.1

Open the chart page →

16,449
vuiseriohub1.0.62 of 3See more

vui seriohub 1.0.6

2 of the 3 container images this version deploys carry CVE-2026-3219.

Container imageDigestPackageFixed in
dserio83/velero-api:0.3.16b3d9115fee2
pip@25.1.1
python-pip@23.0.1+dfsg-1
26.1
no fix listed
dserio83/velero-watchdog:0.1.8d5deae589229
pip@23.0.1
26.1

Open the chart page →

11,532
k8s-appliershlomibendavidOfficialVerified publisher1.0.11 of 1See more

k8s-applier shlomibendavid 1.0.1

1 of the 1 container images this version deploys carry CVE-2026-3219.

Container imageDigestPackageFixed in
shlomibendavid/k8s-applier:0311240529a22ffbe0f04e
pip@24.0
26.1

Open the chart page →

1,206
kube-resource-reportslamdev0.1.31 of 2See more

kube-resource-report slamdev 0.1.3

1 of the 2 container images this version deploys carry CVE-2026-3219.

Container imageDigestPackageFixed in
hjacobs/kube-resource-report:21.2.145f93491c434
pip@21.0.1
26.1

Open the chart page →

1,534
slo-reportingslo-reportingVerified publisher0.3.341 of 2See more

slo-reporting slo-reporting 0.3.34

1 of the 2 container images this version deploys carry CVE-2026-3219.

Container imageDigestPackageFixed in
ghcr.io/colenio/slo-reporting:0.3.316b64d194a27d
pip@24.3.1
26.1

Open the chart page →

2,928
smallest-self-hostsmallest-self-hostVerified publisher0.2.21 of 12See more

smallest-self-host smallest-self-host 0.2.2

1 of the 12 container images this version deploys carry CVE-2026-3219.

Container imageDigestPackageFixed in
quay.io/kiwigrid/k8s-sidecar:1.26.1b8d5067137fe
pip@24.0
26.1

Open the chart page →

7,685
smarter-demosmarterOfficialVerified publisher0.1.52 of 7See more

smarter-demo smarter 0.1.5

2 of the 7 container images this version deploys carry CVE-2026-3219.

Container imageDigestPackageFixed in
ghcr.io/smarter-project/audio-client:v3.1.23c8375dc5487
pip@20.0.2
python-pip@20.0.2-5ubuntu1.6
26.1
no fix listed
ghcr.io/smarter-project/image-detector:v2.5.31dcca70c6446
pip@20.0.2
python-pip@20.0.2-5ubuntu1.6
26.1
no fix listed

Open the chart page →

45,832
snappasssnappassVerified publisher0.4.31 of 3See more

snappass snappass 0.4.3

1 of the 3 container images this version deploys carry CVE-2026-3219.

Container imageDigestPackageFixed in
lmacka/snappass:2.1.293f5c048b7d4
pip@25.0.1
26.1

Open the chart page →

2,995
mysql-backupsoftonic2.2.31 of 1See more

mysql-backup softonic 2.2.3

1 of the 1 container images this version deploys carry CVE-2026-3219.

Container imageDigestPackageFixed in
softonic/mysql-backup:0.4.0d9487a8dd70f
pip@18.1
26.1

Open the chart page →

547
alertasomeblackmagic0.2.31 of 2See more

alerta someblackmagic 0.2.3

1 of the 2 container images this version deploys carry CVE-2026-3219.

Container imageDigestPackageFixed in
alerta/alerta-web:8.5.04786b9eaa606
pip@20.1.1
26.1

Open the chart page →

3,162
healthchecksstackhelmVerified publisher0.1.01 of 2See more

healthchecks stackhelm 0.1.0

1 of the 2 container images this version deploys carry CVE-2026-3219.

Container imageDigestPackageFixed in
healthchecks/healthchecks:v2.8.1e82bb0836e30
pip@23.0.1
26.1

Open the chart page →

2,236
deschedulerstakaterVerified publisher1.0.101 of 1See more

descheduler stakater 1.0.10

1 of the 1 container images this version deploys carry CVE-2026-3219.

Container imageDigestPackageFixed in
stakater/descheduler:v0.3.0a47e96ebb285
pip@9.0.1
26.1

Open the chart page →

170
ckanstatcan0.0.351 of 8See more

ckan statcan 0.0.35

1 of the 8 container images this version deploys carry CVE-2026-3219.

Container imageDigestPackageFixed in
statcan/ckan:2.93921305425b8
pip@21.1.2
python-pip@20.0.2-5ubuntu1.5
26.1
no fix listed

Open the chart page →

24,930
prometheus-pve-exporterstenicVerified publisher0.1.11 of 1See more

prometheus-pve-exporter stenic 0.1.1

1 of the 1 container images this version deploys carry CVE-2026-3219.

Container imageDigestPackageFixed in
prompve/prometheus-pve-exporter:2.0.1ff6749eb03b0
pip@20.1.1
26.1

Open the chart page →

2,469
streamlit-appstreamlit-appVerified publisher0.2.01 of 1See more

streamlit-app streamlit-app 0.2.0

1 of the 1 container images this version deploys carry CVE-2026-3219.

Container imageDigestPackageFixed in
sruthitanneru/pi-sample:ui-lateste565ea454ffd
pip@24.3.1
26.1

Open the chart page →

1,696
synapsesudermanjr1.1.51 of 1See more

synapse sudermanjr 1.1.5

1 of the 1 container images this version deploys carry CVE-2026-3219.

Container imageDigestPackageFixed in
matrixdotorg/synapse:v1.53.0cb89c0f17ba1
pip@21.2.4
26.1

Open the chart page →

3,332
jenkinstestchart0.1.91 of 2See more

jenkins testchart 0.1.9

1 of the 2 container images this version deploys carry CVE-2026-3219.

Container imageDigestPackageFixed in
kiwigrid/k8s-sidecar:1.24.44138bea678f0
pip@23.1.2
26.1

Open the chart page →

9,102
jenkinstest-jenkins9.1.01 of 2See more

jenkins test-jenkins 9.1.0

1 of the 2 container images this version deploys carry CVE-2026-3219.

Container imageDigestPackageFixed in
kiwigrid/k8s-sidecar:1.24.44138bea678f0
pip@23.1.2
26.1

Open the chart page →

9,102
tocktock0.6.31 of 9See more

tock tock 0.6.3

1 of the 9 container images this version deploys carry CVE-2026-3219.

Container imageDigestPackageFixed in
tock/gen-ai-orchestrator-server:25.10.7abf7880e0449
pip@24.0
26.1

Open the chart page →

12,907
taigaunxwaresVerified publisher2026.3.82 of 6See more

taiga unxwares 2026.3.8

2 of the 6 container images this version deploys carry CVE-2026-3219.

Container imageDigestPackageFixed in
taigaio/taiga-back:latest4beed8f62c9f
pip@24.0
26.1
taigaio/taiga-protected:latestfd4568a97a59
pip@24.0
26.1

Open the chart page →

9,148
upbot-operatorupbot-operator0.0.201 of 2See more

upbot-operator upbot-operator 0.0.20

1 of the 2 container images this version deploys carry CVE-2026-3219.

Container imageDigestPackageFixed in
alpine/k8s:1.28.13e5c0b053fed7
pip@24.2
26.1

Open the chart page →

4,460
urunnerurunnerOfficialVerified publisher0.7.01 of 1See more

urunner urunner 0.7.0

1 of the 1 container images this version deploys carry CVE-2026-3219.

Container imageDigestPackageFixed in
ghcr.io/texano00/urunner:0.6.07c8be1dae3cd
pip@25.0.1
26.1

Open the chart page →

501
phonebook-chartusuladamsVerified publisher0.1.53 of 3See more

phonebook-chart usuladams 0.1.5

3 of the 3 container images this version deploys carry CVE-2026-3219.

Container imageDigestPackageFixed in
library/mysql:5.74bc6bc963e6d
pip@23.0.1
26.1
paulkellerman/resultserver-app:1.0381eeccb0618
pip@22.3
26.1
paulkellerman/webserver-app:latest5a37b74f61b9
pip@22.3
26.1

Open the chart page →

3,176
verbacapverbacapVerified publisher1.0.71 of 1See more

verbacap verbacap 1.0.7

1 of the 1 container images this version deploys carry CVE-2026-3219.

Container imageDigestPackageFixed in
ghcr.io/mirio/verbacap:v1.5.084928e2fc4f2
pip@23.3.1
26.1

Open the chart page →

2,233
sysbindingswallarmOfficialVerified publisher0.9.91 of 1See more

sysbindings wallarm 0.9.9

1 of the 1 container images this version deploys carry CVE-2026-3219.

Container imageDigestPackageFixed in
wallarm/sysbindings:v0.9.9c527865df85d
pip@22.2.1
26.1

Open the chart page →

657
yugabytewenerme2026.1.11 of 1See more

yugabyte wenerme 2026.1.1

1 of the 1 container images this version deploys carry CVE-2026-3219.

Container imageDigestPackageFixed in
yugabytedb/yugabyte:2026.1.1.0-b91de2e00278645
pip@9.0.3
26.1

Open the chart page →

351
spark-operatorwikimedia2.2.71 of 1See more

spark-operator wikimedia 2.2.7

1 of the 1 container images this version deploys carry CVE-2026-3219.

Container imageDigestPackageFixed in
ghcr.io/kubeflow/spark-operator/controller:2.2.1865ff4da5686
pip@20.0.2
python-pip@20.0.2-5ubuntu1.11
26.1
no fix listed

Open the chart page →

7,835
pghoardwiremindVerified publisher0.8.11 of 1See more

pghoard wiremind 0.8.1

1 of the 1 container images this version deploys carry CVE-2026-3219.

Container imageDigestPackageFixed in
wiremind/pghoard:12-2019-11-264dea42c8166c
pip@19.3.1
26.1

Open the chart page →

2,952
wordpress-e2e-setupwoocommerce-e2e-setup0.1.11 of 2See more

wordpress-e2e-setup woocommerce-e2e-setup 0.1.1

1 of the 2 container images this version deploys carry CVE-2026-3219.

Container imageDigestPackageFixed in
library/mysql:8.07dcddc01f13b
pip@25.3
26.1

Open the chart page →

7,696
wordpress-helmwordpress-helm0.2.91 of 4See more

wordpress-helm wordpress-helm 0.2.9

1 of the 4 container images this version deploys carry CVE-2026-3219.

Container imageDigestPackageFixed in
library/mysql:885b9bf2e29cf
pip@25.3
26.1

Open the chart page →

8,217
workflows-sinkworkflows-sinkVerified publisher0.16.31 of 1See more

workflows-sink workflows-sink 0.16.3

1 of the 1 container images this version deploys carry CVE-2026-3219.

Container imageDigestPackageFixed in
registry.gitlab.com/dyff/workflows-sink:0.16.3564718e28931
pip@25.0.1
26.1

Open the chart page →

1,397
aeneabotygdrassilOfficialVerified publisher0.2.01 of 2See more

aeneabot ygdrassil 0.2.0

1 of the 2 container images this version deploys carry CVE-2026-3219.

Container imageDigestPackageFixed in
elautoestopista/aeneabot:4.2.1125ba620d528
pip@25.0.1
26.1

Open the chart page →

1,697
raponchiygdrassilOfficialVerified publisher0.4.01 of 1See more

raponchi ygdrassil 0.4.0

1 of the 1 container images this version deploys carry CVE-2026-3219.

Container imageDigestPackageFixed in
elautoestopista/raponchi:0.3.0b6f74db9fc81
pip@24.0
26.1

Open the chart page →

1,315
youtubedl-materialyoutubedl-materialVerified publisher0.0.11 of 1See more

youtubedl-material youtubedl-material 0.0.1

1 of the 1 container images this version deploys carry CVE-2026-3219.

Container imageDigestPackageFixed in
tzahi12345/youtubedl-material:latest2f943d584711
pip@22.0.2
python-pip@22.0.2+dfsg-1ubuntu0.2
26.1
no fix listed

Open the chart page →

9,783

Container images carrying it

1,215 by charts deploying them

A fixed version is listed for 2 of the 3 affected packages.

Container imageDigestPackageFixed inUsed by
hjacobs/kube-resource-report:22.11.0c173cd02f5af
pip@22.2.2
26.1
1
hjacobs/kube-web-view:23.8.0431f1bf013d0
pip@23.0.1
26.1
1
hjacobs/kube-web-view:20.10.0b44a9cf81a2f
pip@20.2.3
26.1
1
hkotel/mealie:api-v1.0.0beta-2a7e6b6abe087
pip@22.1.1
26.1
1
hmdmph/mongo-pod-labeler:1.0.1-alpine79e4a170f3dc
pip@19.0.3
26.1
1
hmdmph/redis-pod-labeler:1.0.0-alpine7f1381fe0f3b
pip@20.1.1
26.1
1
homeassistant/home-assistant:2023.10.3021e2afc6e57
pip@23.2.1
26.1
1
homeassistant/home-assistant:2026.75a531753cea9
pip@26.0.1
26.1
1
homeassistant/home-assistant:2023.12.48d000332b09b
pip@23.3.1
26.1
1
i4trust/activation-service:2.2.09f3719176893
pip@23.0.1
26.1
1
ibmcom/ibm-enterprise-mongodb-ppc64le:4.4d28bf361327a
pip@9.0.3
26.1
1
ibmcom/icp-sert-bats:3.2.0b558f2b444ae
pip@19.1.1
26.1
1
ihatemoney/ihatemoney:5.2.0457fda1feb32
pip@22.0.4
26.1
1
ilum/streamlit-example:1.0.0ce5dcdeb22ba
pip@25.2
26.1
1
improwised/erpnext-worker:v13.4.197280b55cbd4
pip@21.1.2
26.1
1
intel/dlstreamer-pipeline-server:2022.1.1-ubuntu20aa8f5483a2ef
pip@20.0.2
python-pip@20.0.2-5ubuntu1.6
26.1
no fix listed
1
intelowlproject/intelowl:v6.6.10b22e547ea6b
pip@26.0.1
26.1
1
iosifache/wazuh-manager-filebeat:latest85df3f04b5da
pip@21.1.3
26.1
1
irakli/ms-hello-python:latest9e7a91ba9ae0
pip@22.2.2
26.1
1
istio/examples-bookinfo-productpage-v1:1.17.06668bcf42ef0
pip@20.1.1
26.1
1
istio/examples-helloworld-v1:latest328b237e4fb1
pip@23.2.1
26.1
1
istio/examples-helloworld-v2:latest0a7f02b2c7c9
pip@23.2.1
26.1
1
jaedb/iris:latest048cfbf58d57
pip@23.0.1
python-pip@23.0.1+dfsg-1
26.1
no fix listed
1
jakuboskera/guestbook:v0.3.04989afa06e74
pip@21.2.4
26.1
1
jakuboskera/todo:v0.2.3714b1adbbc2d
pip@21.2.4
26.1
1
jamoos/kweather:history163e2e8a6e87
pip@23.0.1
26.1
1
jertel/elastalert2:2.2.34dcc0ef93efc
pip@21.2.4
26.1
1
jjorozco20/flask-mysql-app:1.0.0b5e44e3ba09c
pip@23.0.1
26.1
1
jmferrer/azure-devops-agent:latest030f68ec6998
pip@9.0.3
26.1
1
john19968010/fastapi-template:latest31a90f6bd69c
pip@22.3.1
26.1
1
jonasal/devpi-server:6.17.0-alpineec1eee99a18d
pip@25.3
26.1
1
josh5/unmanic:0.2.64d49c4816260
pip@22.0.2
python-pip@22.0.2+dfsg-1ubuntu0.4
26.1
no fix listed
1
juicedata/juicefs-csi-driver:v0.20.043978fc60798
pip@23.0.1
26.1
1
juicedata/juicefs-csi-driver:v0.32.595008ba63318
pip@23.0.1
26.1
1
julb/alertmanager-gchat-integration:1.0.5837c4038a0dd
pip@21.0.1
26.1
1
julb/http-reqtrace:1.1.00806409af397
pip@20.2.4
26.1
1
julb/kubernetes-configmap-sync:1.1.0d7d8836366ad
pip@20.2.4
26.1
1
jupyterhub/jupyterhub:5.4.63974ba945e65
pip@24.0
python-pip@24.0+dfsg-1ubuntu1.3
26.1
no fix listed
1
jupyterhub/k8s-hub:3.0.1-0.dev.git.6287.hbfb05cd65a0ceed1300a
pip@23.1.2
26.1
1
jupyterhub/k8s-hub:0.11.1b6b4a1a34bf0
pip@20.3.3
python-pip@20.0.2-5ubuntu1.1
26.1
no fix listed
1
jupyterhub/k8s-hub:1.2.0e4770285aaf7
pip@21.3.1
python-pip@20.0.2-5ubuntu1.6
26.1
no fix listed
1
jupyterhub/k8s-singleuser-sample:3.0.1-0.dev.git.6287.hbfb05cd68e4778efec8e
pip@23.1.2
26.1
1
jupyterhub/k8s-singleuser-sample:0.11.1e3e6f3051df8
pip@20.2.4
26.1
1
jvstein/bitcoin-prometheus-exporter:v0.5.07cc385d038b1
pip@20.0.2
26.1
1
keitaro/ckan-datapusher:0.0.175bf1a45f45c1
pip@20.2.3
26.1
1
kelvinsp/mlflow:1.26.1cd33e6db2a59
pip@21.1.3
26.1
1
kenchrcum/ansible-playbook-operator:0.1.712fb213debf1
pip@26.0.1
26.1
1
kenchrcum/grafana-dashboard-converter:0.3.105310497aea3f
pip@26.0.1
26.1
1
kenchrcum/hetzner-s3-operator:0.1.384dae7aeea5b
pip@26.0.1
26.1
1
kenchrcum/wasabi-s3-operator:0.2.7ce657c622ce5
pip@26.0.1
26.1
1

syft 1.42.1 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.