StackRadar

CVE-2026-32316

High

Advisory

Published 13 Apr 2026In the index since 5 Sept 2026
Severity
High
worst across findings
CVSS
8.2
base score, highest
EPSS
0.006
48th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
361
of 17,787 indexed, latest versions
Container images
290
deployed by those charts
Fix available
2 of 2
affected packages

The matching OSV records carry no description.

Carried by container images the latest versions of 361 of 17,787 indexed charts deploy, on 290 images.

Affected packageAffected versionsFixed inImages
jqdeb1.5+dfsg-1, 1.5+dfsg-1ubuntu0.1, 1.5+dfsg-2, 1.6-1ubuntu0.20.04.1+9 more1.5+dfsg-1ubuntu0.1+esm4, 1.5+dfsg-2ubuntu0.1~esm2, 1.6-1ubuntu0.20.04.1+esm2, 1.6-2.1+deb12u2+4 more185
jqapk1.7.1-r0, 1.8.0-r0, 1.8.1-r01.8.2-r0105
OSV records
ALPINE-CVE-2026-32316DEBIAN-CVE-2026-32316UBUNTU-CVE-2026-32316
Also known as
USN-8202-1

Charts affected

361 by stars
ChartLatestAffected imagesRadar Score
owncloudth-chartsVerified publisher0.2.11 of 1See more

owncloud th-charts 0.2.1

1 of the 1 container images this version deploys carry CVE-2026-32316.

Container imageDigestPackageFixed in
owncloud/server:10.15.051d9b74fc2a8
jq@1.6-1ubuntu0.20.04.1
1.6-1ubuntu0.20.04.1+esm2

Open the chart page →

10,006
traefik-secrets-exportertraefik-secrets-exporter0.0.21 of 1See more

traefik-secrets-exporter traefik-secrets-exporter 0.0.2

1 of the 1 container images this version deploys carry CVE-2026-32316.

Container imageDigestPackageFixed in
ghcr.io/reiche-world/traefik-secrets-exporter:0.0.21485ff93cbf9
jq@1.8.1-r0
1.8.2-r0

Open the chart page →

1,675
twentytwenty-crm0.1.111 of 4See more

twenty twenty-crm 0.1.11

1 of the 4 container images this version deploys carry CVE-2026-32316.

Container imageDigestPackageFixed in
twentycrm/twenty:v2.22.0e7d9948bf284
jq@1.8.1-r0
1.8.2-r0

Open the chart page →

5,550
simple-mongodbtyk-helm0.1.11 of 1See more

simple-mongodb tyk-helm 0.1.1

1 of the 1 container images this version deploys carry CVE-2026-32316.

Container imageDigestPackageFixed in
library/mongo:4.44be76f674fc4
jq@1.6-1ubuntu0.20.04.1
1.6-1ubuntu0.20.04.1+esm2

Open the chart page →

4,087
jupyterhubuninettsigma21.6.01 of 5See more

jupyterhub uninettsigma2 1.6.0

1 of the 5 container images this version deploys carry CVE-2026-32316.

Container imageDigestPackageFixed in
bitnamilegacy/kubectl:1.301249fc292e84
jq@1.6-2.1
1.6-2.1+deb12u2

Open the chart page →

8,607
unmanicvhdirkVerified publisher0.1.41 of 1See more

unmanic vhdirk 0.1.4

1 of the 1 container images this version deploys carry CVE-2026-32316.

Container imageDigestPackageFixed in
josh5/unmanic:0.2.64d49c4816260
jq@1.6-2.1ubuntu3
1.6-2.1ubuntu3.2

Open the chart page →

9,347
twenty-crmvictorlane0.0.11 of 3See more

twenty-crm victorlane 0.0.1

1 of the 3 container images this version deploys carry CVE-2026-32316.

Container imageDigestPackageFixed in
twentycrm/twenty-postgres-spilo:latest2f78405a78be
jq@1.6-2.1ubuntu3
1.6-2.1ubuntu3.2

Open the chart page →

13,459
calibre-webvista0.1.31 of 1See more

calibre-web vista 0.1.3

1 of the 1 container images this version deploys carry CVE-2026-32316.

Container imageDigestPackageFixed in
linuxserver/calibre-web:0.6.24241009026e6f
jq@1.7.1-3ubuntu0.24.04.1
1.7.1-3ubuntu0.24.04.2

Open the chart page →

7,628
ciliumvks-helm-chartsVerified publisher1.17.141 of 3See more

cilium vks-helm-charts 1.17.14

1 of the 3 container images this version deploys carry CVE-2026-32316.

Container imageDigestPackageFixed in
quay.io/cilium/cilium:v1.17.14cdcfab5b4466
jq@1.7.1-3ubuntu0.24.04.1
1.7.1-3ubuntu0.24.04.2

Open the chart page →

4,046
webhookie-allwebhookie0.1.21 of 3See more

webhookie-all webhookie 0.1.2

1 of the 3 container images this version deploys carry CVE-2026-32316.

Container imageDigestPackageFixed in
library/mongo:4.44be76f674fc4
jq@1.6-1ubuntu0.20.04.1
1.6-1ubuntu0.20.04.1+esm2

Open the chart page →

28,605
wexa-studiowexa-studio1.2.01 of 15See more

wexa-studio wexa-studio 1.2.0

1 of the 15 container images this version deploys carry CVE-2026-32316.

Container imageDigestPackageFixed in
temporalio/admin-tools:1.29.1-tctl-1.18.4-cli-1.5.0a3a52e6ca122
jq@1.8.0-r0
1.8.2-r0

Open the chart page →

14,983

Container images carrying it

290 by charts deploying them

A fixed version is listed for 2 of the 2 affected packages.

Container imageDigestPackageFixed inUsed by
twentycrm/twenty:v2.22.0e7d9948bf284
jq@1.8.1-r0
1.8.2-r0
1
twentycrm/twenty-postgres-spilo:latest2f78405a78be
jq@1.6-2.1ubuntu3
1.6-2.1ubuntu3.2
1
unitycatalog/unitycatalog-ui:main-aadc6fc3a688197b218
jq@1.6-2.1
1.6-2.1+deb12u2
1
vinanrra/7dtd-server:v0.4.4f9534490bd2b
jq@1.5+dfsg-2
1.5+dfsg-2ubuntu0.1~esm2
1
wolveix/satisfactory-server:v1.9.1199be1064b18
jq@1.6-2.1ubuntu3
1.6-2.1ubuntu3.2
1
wolveix/satisfactory-server:v1.9.9464d11e36e10
jq@1.6-2.1ubuntu3
1.6-2.1ubuntu3.2
1
ghcr.io/aardbol/opencode-server:v1.18.23-alpine7930061993f7
jq@1.8.1-r0
1.8.2-r0
1
ghcr.io/angelscloud/prometheus-optimizer:latest744bc929a579
jq@1.6-2.1
1.6-2.1+deb12u2
1
ghcr.io/avistotelecom/docker-wazuh-agent:4.12.08766ba08bf1a
jq@1.6-2.1
1.6-2.1+deb12u2
1
ghcr.io/base-org/node:v0.11.11aba0ffe55ea
jq@1.6-2.1ubuntu3
1.6-2.1ubuntu3.2
1
ghcr.io/bitmagnet-io/bitmagnet:v0.10b6373349a301
jq@1.8.1-r0
1.8.2-r0
1
ghcr.io/brittonhayes/arma-reforger:latest6fde1edc0983
jq@1.6-1ubuntu0.20.04.1
1.6-1ubuntu0.20.04.1+esm2
1
ghcr.io/buanet/iobroker:v9.1.2ca7dc7362968
jq@1.6-2.1
1.6-2.1+deb12u2
1
ghcr.io/celestiaorg/celestia-app:v6.1.0-rc0a604aefa3fae
jq@1.8.0-r0
1.8.2-r0
1
ghcr.io/cjmalloy/jasper-ui:v1.3.623246dc2160efe
jq@1.7.1-6+deb13u2
1.7.1-6+deb13u3
1
ghcr.io/cloudscript-technology/dumpscript:v0.0.42-alpine-edgefce5b6fd161c
jq@1.8.1-r0
1.8.2-r0
1
ghcr.io/cloudtty/cloudshell:v0.8.900984ba0f0eb
jq@1.8.0-r0
1.8.2-r0
1
ghcr.io/devops-ia/steampipe:v2.4.1a982103d91d3
jq@1.6-2.1+deb12u1
1.6-2.1+deb12u2
1
ghcr.io/drakkan/sftpgo:v2.7.46cb60f08fede
jq@1.7.1-6+deb13u2
1.7.1-6+deb13u3
1
ghcr.io/ethpandaops/syncoor:master233aa9808fc7
jq@1.8.1-r0
1.8.2-r0
1
ghcr.io/flanksource/postgres:17.6-497383cebcf66281fc1
jq@1.6-2.1+deb12u1
1.6-2.1+deb12u2
1
ghcr.io/fluxcd/flagger-loadtester:0.39.06a8546993cb5
jq@1.8.1-r0
1.8.2-r0
1
ghcr.io/grafana/helm-chart-toolbox-kubectl:0.1.2c7adcc4db378
jq@1.8.0-r0
1.8.2-r0
1
ghcr.io/helmfile/helmfile:v1.7.4f20e612d5a98
jq@1.8.1-r0
1.8.2-r0
1
ghcr.io/home-assistant/home-assistant:2026.9.0372d991e5888
jq@1.8.1-r0
1.8.2-r0
1
ghcr.io/home-assistant/home-assistant:2026.8.256690a89c79a
jq@1.8.1-r0
1.8.2-r0
1
ghcr.io/home-assistant/home-assistant:2025.12.59a5a3eb4a213
jq@1.8.1-r0
1.8.2-r0
1
ghcr.io/home-operations/bazarr:1.5.680cb090162b4
jq@1.8.1-r0
1.8.2-r0
1
ghcr.io/home-operations/bazarr:1.6.0cd63bbd0986c
jq@1.8.1-r0
1.8.2-r0
1
ghcr.io/home-operations/beets:2.3.1cc4975f1a0be
jq@1.7.1-r0
1.8.2-r0
1
ghcr.io/home-operations/home-assistant:2026.3.1067e54e2e107
jq@1.8.1-r0
1.8.2-r0
1
ghcr.io/home-operations/lidarr:3.1.29df1e14c8e09
jq@1.8.1-r0
1.8.2-r0
1
ghcr.io/home-operations/lidarr:3.1.2.4902dab0e07502a3
jq@1.8.1-r0
1.8.2-r0
1
ghcr.io/home-operations/plex:1.43.1a9c3723cb31c
jq@1.7.1-3ubuntu0.24.04.1
1.7.1-3ubuntu0.24.04.2
1
ghcr.io/home-operations/prowlarr:2.3.01a8a4b11972b
jq@1.8.1-r0
1.8.2-r0
1
ghcr.io/home-operations/prowlarr:2.4.0b7da6e9defbe
jq@1.8.1-r0
1.8.2-r0
1
ghcr.io/home-operations/qbittorrent:5.2.224f2d793cb7f
jq@1.8.1-r0
1.8.2-r0
1
ghcr.io/home-operations/qbittorrent:5.2.34fcf15b7f265
jq@1.8.1-r0
1.8.2-r0
1
ghcr.io/home-operations/qbittorrent:5.1.4bb82ad6668f8
jq@1.8.1-r0
1.8.2-r0
1
ghcr.io/home-operations/radarr:6.4.3:6.4.3.106450ebb4ae26ee9
jq@1.8.1-r0
1.8.2-r0
1
ghcr.io/home-operations/radarr:6.2.1a566e7d364b9
jq@1.8.1-r0
1.8.2-r0
1
ghcr.io/home-operations/sonarr:4.0.171989718e9fce
jq@1.8.1-r0
1.8.2-r0
1
ghcr.io/home-operations/tautulli:2.17.12183820d45a1
jq@1.8.1-r0
1.8.2-r0
1
ghcr.io/hotio/qbittorrent:release-5.2.007198d49e5b4
jq@1.8.1-r0
1.8.2-r0
1
ghcr.io/k8s-at-home/apache-musicindex:v1.4.1-2c9bd82dc5fda
jq@1.6-1ubuntu0.20.04.1
1.6-1ubuntu0.20.04.1+esm2
1
ghcr.io/k8s-at-home/jackett:v0.20.13163a4715b46aa2
jq@1.6-1ubuntu0.20.04.1
1.6-1ubuntu0.20.04.1+esm2
1
ghcr.io/k8s-at-home/nzbget:v21.1e5571acd10ce
jq@1.6-2.1ubuntu3
1.6-2.1ubuntu3.2
1
ghcr.io/k8s-at-home/plex:v1.28.0.5999-97678ded3ef756c7d784b
jq@1.6-1ubuntu0.20.04.1
1.6-1ubuntu0.20.04.1+esm2
1
ghcr.io/k8s-at-home/qbittorrent:v4.4.261deadd1ec78
jq@1.6-1ubuntu0.20.04.1
1.6-1ubuntu0.20.04.1+esm2
1
ghcr.io/k8s-at-home/radarr:v4.1.0.61754273dfaf0295
jq@1.6-2.1ubuntu3
1.6-2.1ubuntu3.2
1

syft 1.42.1 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.