StackRadar

CVE-2026-3276

Medium

Advisory

Published 3 Jun 2026In the index since 5 Sept 2026
Severity
Medium
worst across findings
CVSS
6.3
base score, highest
EPSS
0.005
40th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
580
of 17,781 indexed, latest versions
Container images
557
deployed by those charts
Fix available
10 of 16
affected packages

Potential DoS via quadratic complexity in unicodedata.normalize()

Carried by container images the latest versions of 580 of 17,781 indexed charts deploy, on 557 images.

Affected packageAffected versionsFixed inImages
python3.11deb3.11.0~rc1-1~22.04, 3.11.0~rc1-1~22.04.1, 3.11.2-6, 3.11.2-6+deb12u2+6 moreno fix listed181
python3.8deb3.8.5-1~20.04, 3.8.5-1~20.04.2, 3.8.5-1~20.04.3, 3.8.10-0ubuntu1~20.04+11 moreno fix listed100
python3.10deb3.10.4-3, 3.10.4-3ubuntu0.1, 3.10.6-1~22.04, 3.10.6-1~22.04.1+14 more3.10.12-1~22.04.1671
python2.7deb2.7.6-8, 2.7.6-8ubuntu0.4, 2.7.12-1ubuntu0~16.04.2, 2.7.12-1ubuntu0~16.04.3+12 moreno fix listed54
python3.12deb3.12.3-1, 3.12.3-1ubuntu0.2, 3.12.3-1ubuntu0.3, 3.12.3-1ubuntu0.4+8 more3.12.3-1ubuntu0.1548
python3.6deb3.6.6-1~18.04, 3.6.7-1~18.04, 3.6.9-1~18.04, 3.6.9-1~18.04ubuntu1+7 moreno fix listed44
python3.13deb3.13.5-2, 3.13.5-2+deb13u2, 3.13.5-2+e30, 3.13.7-1ubuntu0.13.13.5-2+deb13u3, 3.13.5-2+e3634
python3.5deb3.5.2-2ubuntu0~16.04.1, 3.5.2-2ubuntu0~16.04.4, 3.5.2-2ubuntu0~16.04.5, 3.5.2-2ubuntu0~16.04.9no fix listed25
python3apk3.12.12-r0, 3.14.3-r0, 3.14.5-r0, 3.14.5-r13.14.7-r012
python3.4deb3.4.0-2ubuntu1, 3.4.3-1ubuntu1~14.04.5, 3.4.3-1ubuntu1~14.04.6, 3.4.3-1ubuntu1~14.04.7no fix listed7
python-3.14apk3.14.2-r2, 3.14.4-r23.14.6-r05
pythonbitnami3.11.11-0, 3.12.8-0, 3.13.5-13.10.213
python-3.13apk3.13.7-r0, 3.13.10-r0, 3.13.12-r23.13.14-r03
python-3.12apk3.12.0-r1, 3.12.9-r13.12.13-r82
python3.14deb3.14.4-13.14.4-1ubuntu0.12
python3rpm3.12.9-13.azl33.12.9-141
OSV records
ALPINE-CVE-2026-3276BIT-python-2026-3276CGA-698r-r6xg-jhcrCGA-fxc6-vp6h-gfxxCGA-g99p-cv4c-h3m9DEBIAN-CVE-2026-3276UBUNTU-CVE-2026-3276AZL-89466ECHO-3bd2-a10b-bc48
Also known as
BIT-libpython-2026-3276, BIT-python-min-2026-3276, CGA-j778-9cjq-6hm2, CGA-q294-94q5-6qv5, CGA-xvwf-hrxf-jcvh, PSF-2026-25, USN-8509-1

Charts affected

580 by stars
ChartLatestAffected imagesRadar Score
unitycatalogunitycatalogVerified publisher0.0.21 of 4See more

unitycatalog unitycatalog 0.0.2

1 of the 4 container images this version deploys carry CVE-2026-3276.

Container imageDigestPackageFixed in
ghcr.io/sdwbgn/unitycatalog-helm/docker/unitycatalog-ui:0.2.1-5d668c1ed07e7ca098d
python3.11@3.11.2-6+deb12u5
no fix listed

Open the chart page →

12,581
varnish-cachevarnishVerified publisher1.1.11 of 1See more

varnish-cache varnish 1.1.1

1 of the 1 container images this version deploys carry CVE-2026-3276.

Container imageDigestPackageFixed in
library/varnish:7.5.04d0bb287d87b
python3.11@3.11.2-6+deb12u5
no fix listed

Open the chart page →

4,249
vaultwarden-kubernetes-secretsvaultwarden-kubernetes-secrets0.0.0-main1 of 2See more

vaultwarden-kubernetes-secrets vaultwarden-kubernetes-secrets 0.0.0-main

1 of the 2 container images this version deploys carry CVE-2026-3276.

Container imageDigestPackageFixed in
ghcr.io/antoniolago/vaultwarden-kubernetes-secrets:0.0.0-main13e267ad7d94
python3.12@3.12.3-1ubuntu0.10
3.12.3-1ubuntu0.15

Open the chart page →

4,010
tdarrvhdirkVerified publisher5.0.52 of 2See more

tdarr vhdirk 5.0.5

2 of the 2 container images this version deploys carry CVE-2026-3276.

Container imageDigestPackageFixed in
haveagitgat/tdarr_node:2.17.013ff0913202dd
python2.7@2.7.18-1~20.04.3
python3.8@3.8.10-0ubuntu1~20.04.8
no fix listed
no fix listed
ghcr.io/haveagitgat/tdarr:2.00.18.23fbe4c29d14c
python2.7@2.7.18-1~20.04.1
python3.8@3.8.10-0ubuntu1~20.04.4
no fix listed
no fix listed

Open the chart page →

26,657
kafka-devwikimedia0.2.01 of 1See more

kafka-dev wikimedia 0.2.0

1 of the 1 container images this version deploys carry CVE-2026-3276.

Container imageDigestPackageFixed in
wurstmeister/zookeeper:latest7a7fd44a7210
python2.7@2.7.6-8
python3.4@3.4.0-2ubuntu1
no fix listed
no fix listed

Open the chart page →

41,427
spark-operatorwikimedia2.2.71 of 1See more

spark-operator wikimedia 2.2.7

1 of the 1 container images this version deploys carry CVE-2026-3276.

Container imageDigestPackageFixed in
ghcr.io/kubeflow/spark-operator/controller:2.2.1865ff4da5686
python3.8@3.8.10-0ubuntu1~20.04.18
no fix listed

Open the chart page →

7,835
wordpress-helmwordpress-helm0.2.91 of 4See more

wordpress-helm wordpress-helm 0.2.9

1 of the 4 container images this version deploys carry CVE-2026-3276.

Container imageDigestPackageFixed in
aapjeisbaas/wp-frankenphp:v0.2.26b261abc7fb0
python3.13@3.13.5-2+deb13u2
3.13.5-2+deb13u3

Open the chart page →

8,217
youtubedl-materialyoutubedl-materialVerified publisher0.0.11 of 1See more

youtubedl-material youtubedl-material 0.0.1

1 of the 1 container images this version deploys carry CVE-2026-3276.

Container imageDigestPackageFixed in
tzahi12345/youtubedl-material:latest2f943d584711
python3.10@3.10.6-1~22.04.2ubuntu1
3.10.12-1~22.04.16

Open the chart page →

9,783
acos-prometheus-exporter-helm-charta10-prometheus-exporter0.1.01 of 1See more

acos-prometheus-exporter-helm-chart a10-prometheus-exporter 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-3276.

Container imageDigestPackageFixed in
a10networks/acos-prometheus-exporter:latest8dc58d434d71
python3.6@3.6.9-1~18.04ubuntu1
no fix listed

Open the chart page →

12,007
open5gsadaptivenetlabVerified publisher1.0.31 of 3See more

open5gs adaptivenetlab 1.0.3

1 of the 3 container images this version deploys carry CVE-2026-3276.

Container imageDigestPackageFixed in
registry.gitlab.com/infinitydon/registry/open5gs-aio:v2.2.2f6385712935f
python3.8@3.8.5-1~20.04.2
no fix listed

Open the chart page →

25,443
uptime-kumaadnoctemVerified publisher0.4.11 of 1See more

uptime-kuma adnoctem 0.4.1

1 of the 1 container images this version deploys carry CVE-2026-3276.

Container imageDigestPackageFixed in
louislam/uptime-kuma:2.5.4917318f9d7be
python3.11@3.11.2-6+deb12u7
no fix listed

Open the chart page →

30,028
graphserviceaerospike-helmVerified publisher3.3.01 of 1See more

graphservice aerospike-helm 3.3.0

1 of the 1 container images this version deploys carry CVE-2026-3276.

Container imageDigestPackageFixed in
aerospike/aerospike-graph-service:3.3.0f35739b97a46
python3@3.14.5-r0
3.14.7-r0

Open the chart page →

453
akto-ai-guardrails-v2akto0.3.01 of 6See more

akto-ai-guardrails-v2 akto 0.3.0

1 of the 6 container images this version deploys carry CVE-2026-3276.

Container imageDigestPackageFixed in
redis/redis-stack-server:7.4.0-v172035434f455
python3.10@3.10.12-1~22.04.6
3.10.12-1~22.04.16

Open the chart page →

9,321
akto-regional-setupakto1.3.11 of 9See more

akto-regional-setup akto 1.3.1

1 of the 9 container images this version deploys carry CVE-2026-3276.

Container imageDigestPackageFixed in
redis/redis-stack-server:7.4.072035434f455
python3.10@3.10.12-1~22.04.6
3.10.12-1~22.04.16

Open the chart page →

7,603
esphomealexmorbo-esphomeVerified publisher1.0.01 of 1See more

esphome alexmorbo-esphome 1.0.0

1 of the 1 container images this version deploys carry CVE-2026-3276.

Container imageDigestPackageFixed in
esphome/esphome:2024.12.2b2c6322700ac
python3.11@3.11.2-6+deb12u4
no fix listed

Open the chart page →

6,324
anchore-admission-controlleranchore-charts0.8.41 of 2See more

anchore-admission-controller anchore-charts 0.8.4

1 of the 2 container images this version deploys carry CVE-2026-3276.

Container imageDigestPackageFixed in
cfssl/cfssl:v1.6.5c9018c2ddf0b
python3.11@3.11.2-6
no fix listed

Open the chart page →

7,852
music-assistant-serverandibraeuVerified publisher2.1.21 of 1See more

music-assistant-server andibraeu 2.1.2

1 of the 1 container images this version deploys carry CVE-2026-3276.

Container imageDigestPackageFixed in
ghcr.io/music-assistant/server:2.9.950666a6f8d7f
python3.11@3.11.2-6+deb12u7
no fix listed

Open the chart page →

5,817
mathesarandrenarchyVerified publisher1.8.01 of 1See more

mathesar andrenarchy 1.8.0

1 of the 1 container images this version deploys carry CVE-2026-3276.

Container imageDigestPackageFixed in
mathesar/mathesar:0.12.0091757cb01fe
python3.11@3.11.2-6+deb12u7
no fix listed

Open the chart page →

7,239
speech-to-phraseandrenarchyVerified publisher1.3.01 of 1See more

speech-to-phrase andrenarchy 1.3.0

1 of the 1 container images this version deploys carry CVE-2026-3276.

Container imageDigestPackageFixed in
rhasspy/wyoming-speech-to-phrase:1.4.3e532f0dbc6b2
python3.11@3.11.2-6+deb12u6
no fix listed

Open the chart page →

3,991
games-on-whalesangelnu2.0.02 of 7See more

games-on-whales angelnu 2.0.0

2 of the 7 container images this version deploys carry CVE-2026-3276.

Container imageDigestPackageFixed in
andrewmackrodt/firefox-x11:142.0.1-r133f9080470c9
python3.10@3.10.12-1~22.04.11
3.10.12-1~22.04.16
ghcr.io/games-on-whales/retroarch:1.0.0103fbcec2314
python3.8@3.8.10-0ubuntu1~20.04
no fix listed

Open the chart page →

42,126
ansible-inspecansible-inspec0.2.171 of 2See more

ansible-inspec ansible-inspec 0.2.17

1 of the 2 container images this version deploys carry CVE-2026-3276.

Container imageDigestPackageFixed in
ghcr.io/htunn/ansible-inspec:0.2.12cd25a5cc3f1b
python3.13@3.13.5-2
3.13.5-2+deb13u3

Open the chart page →

5,558
inbox-server-distributedappscodeVerified publisher2025.12.252 of 4See more

inbox-server-distributed appscode 2025.12.25

2 of the 4 container images this version deploys carry CVE-2026-3276.

Container imageDigestPackageFixed in
library/cassandra:4.1.37cbcec0086ac
python3.10@3.10.12-1~22.04.3
3.10.12-1~22.04.16
library/rabbitmq:3.12.1-managementf020c06da226
python3.10@3.10.6-1~22.04.2ubuntu1.1
3.10.12-1~22.04.16

Open the chart page →

15,573
james-komposeappscodeVerified publisher0.1.02 of 4See more

james-kompose appscode 0.1.0

2 of the 4 container images this version deploys carry CVE-2026-3276.

Container imageDigestPackageFixed in
library/cassandra:4.1.37cbcec0086ac
python3.10@3.10.12-1~22.04.3
3.10.12-1~22.04.16
library/rabbitmq:3.12.1-managementf020c06da226
python3.10@3.10.6-1~22.04.2ubuntu1.1
3.10.12-1~22.04.16

Open the chart page →

16,975
platform-apiappscodeVerified publisher2026.9.111 of 3See more

platform-api appscode 2026.9.11

1 of the 3 container images this version deploys carry CVE-2026-3276.

Container imageDigestPackageFixed in
ghcr.io/appscode/gotenberg:8.25f9104080d9a7
python3.13@3.13.5-2
3.13.5-2+deb13u3

Open the chart page →

37,268
arlas-aiasarlas-stackVerified publisher28.8.01 of 22See more

arlas-aias arlas-stack 28.8.0

1 of the 22 container images this version deploys carry CVE-2026-3276.

Container imageDigestPackageFixed in
ghcr.io/developmentseed/titiler:0.22.48ac53eb38393
python@3.12.8-0
3.10.21

Open the chart page →

40,238
arma-reforgerarma-reforger0.5.31 of 8See more

arma-reforger arma-reforger 0.5.3

1 of the 8 container images this version deploys carry CVE-2026-3276.

Container imageDigestPackageFixed in
ghcr.io/brittonhayes/arma-reforger:latest6fde1edc0983
python3.8@3.8.10-0ubuntu1~20.04.6
no fix listed

Open the chart page →

23,353
keystonearzu0.2.293 of 4See more

keystone arzu 0.2.29

3 of the 4 container images this version deploys carry CVE-2026-3276.

Container imageDigestPackageFixed in
library/rabbitmq:3.7-managementb6dd45cc35b3
python3.6@3.6.9-1~18.04ubuntu1.1
no fix listed
openstackhelm/heat:wallaby-ubuntu_focalf728510bab3c
python3.8@3.8.10-0ubuntu1~20.04.8
no fix listed
openstackhelm/keystone:wallaby-ubuntu_focale07d75953d2e
python3.8@3.8.10-0ubuntu1~20.04.8
no fix listed

Open the chart page →

22,568
assemblylineassemblylineVerified publisher7.4.171 of 12See more

assemblyline assemblyline 7.4.17

1 of the 12 container images this version deploys carry CVE-2026-3276.

Container imageDigestPackageFixed in
cccs/assemblyline-rust:4.7.4.stable17468326853ec5
python3.11@3.11.2-6+deb12u8
no fix listed

Open the chart page →

12,898
dltkvassist-iot-data-integrity-verification0.2.02 of 9See more

dltkv assist-iot-data-integrity-verification 0.2.0

2 of the 9 container images this version deploys carry CVE-2026-3276.

Container imageDigestPackageFixed in
hyperledger/fabric-ca-tools:latest4ce6f43ded2e
python2.7@2.7.12-1ubuntu0~16.04.3
python3.5@3.5.2-2ubuntu0~16.04.4
no fix listed
no fix listed
hyperledger/fabric-couchdb:0.4.15f6c724592abf
python2.7@2.7.12-1ubuntu0~16.04.4
python3.5@3.5.2-2ubuntu0~16.04.5
no fix listed
no fix listed

Open the chart page →

77,706
dltflassist-iot-dlt-based-fl0.2.02 of 9See more

dltfl assist-iot-dlt-based-fl 0.2.0

2 of the 9 container images this version deploys carry CVE-2026-3276.

Container imageDigestPackageFixed in
hyperledger/fabric-ca-tools:latest4ce6f43ded2e
python2.7@2.7.12-1ubuntu0~16.04.3
python3.5@3.5.2-2ubuntu0~16.04.4
no fix listed
no fix listed
hyperledger/fabric-couchdb:0.4.15f6c724592abf
python2.7@2.7.12-1ubuntu0~16.04.4
python3.5@3.5.2-2ubuntu0~16.04.5
no fix listed
no fix listed

Open the chart page →

77,706
openapiassist-iot-open-api-management0.2.21 of 6See more

openapi assist-iot-open-api-management 0.2.2

1 of the 6 container images this version deploys carry CVE-2026-3276.

Container imageDigestPackageFixed in
assistiot/open_api_backend:1.1.230812ba93555
python3.10@3.10.12-1~22.04.3
3.10.12-1~22.04.16

Open the chart page →

18,277
smartorchestratorassist-iot-smart-orchestrator4.0.03 of 14See more

smartorchestrator assist-iot-smart-orchestrator 4.0.0

3 of the 14 container images this version deploys carry CVE-2026-3276.

Container imageDigestPackageFixed in
assistiot/smart-orchestrator_mcs:latest7d6a0d534c7f
python3.11@3.11.2-6
no fix listed
assistiot/smart-orchestrator_scheduler:latest38b003e55ff3
python3.11@3.11.2-6
no fix listed
assistiot/smart-orchestrator_scheduler_mc:latestb1dbe4d62a03
python3.11@3.11.2-6
no fix listed

Open the chart page →

45,363
videoaugmentationassist-iot-video-augmentation0.1.01 of 3See more

videoaugmentation assist-iot-video-augmentation 0.1.0

1 of the 3 container images this version deploys carry CVE-2026-3276.

Container imageDigestPackageFixed in
assistiot/video_augmentation:runner-cpu-lateste5ae539ce2cb
python3.8@3.8.10-0ubuntu1~20.04.7
no fix listed

Open the chart page →

13,913
astrotrekastria0.0.22 of 4See more

astrotrek astria 0.0.2

2 of the 4 container images this version deploys carry CVE-2026-3276.

Container imageDigestPackageFixed in
timescale/timescaledb-ha:pg15-latesta8e3322e1cf9
python3.10@3.10.6-1~22.04.2ubuntu1
3.10.12-1~22.04.16
ghcr.io/astriaorg/astrotrek:0.1.05889bea38e56
python3.11@3.11.2-6+deb12u3
no fix listed

Open the chart page →

32,501
nas-appsawesomeVerified publisher2.0.01 of 8See more

nas-apps awesome 2.0.0

1 of the 8 container images this version deploys carry CVE-2026-3276.

Container imageDigestPackageFixed in
wettyoss/wetty:latest7423b3d40ba2
python3@3.14.5-r0
3.14.7-r0

Open the chart page →

7,152
algorand-participationbiatec-repoVerified publisher4.4.11 of 1See more

algorand-participation biatec-repo 4.4.1

1 of the 1 container images this version deploys carry CVE-2026-3276.

Container imageDigestPackageFixed in
scholtz2/algorand-participation-mainnet-extended:4.4.1-stable5aaa5d4ab8b8
python3.10@3.10.12-1~22.04.6
3.10.12-1~22.04.16

Open the chart page →

7,190
algorand-relaybiatec-repoVerified publisher4.4.11 of 1See more

algorand-relay biatec-repo 4.4.1

1 of the 1 container images this version deploys carry CVE-2026-3276.

Container imageDigestPackageFixed in
scholtz2/algorand-relay-mainnet:4.4.1-stablee9af7d8ff6bb
python3.12@3.12.3-1ubuntu0.8
3.12.3-1ubuntu0.15

Open the chart page →

5,059
mx-nodebicarus-labs0.1.01 of 1See more

mx-node bicarus-labs 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-3276.

Container imageDigestPackageFixed in
bicarus/elrond-rosetta:v1.3.50.0b1dab0721e1c
python3.8@3.8.10-0ubuntu1~20.04.6
no fix listed

Open the chart page →

7,956
huebigdata-chartsVerified publisher1.0.41 of 2See more

hue bigdata-charts 1.0.4

1 of the 2 container images this version deploys carry CVE-2026-3276.

Container imageDigestPackageFixed in
gethue/hue:4.10.05702b2c37ff9
python2.7@2.7.17-1~18.04ubuntu1.6
python3.6@3.6.9-1~18.04ubuntu1.4
no fix listed
no fix listed

Open the chart page →

22,891
baserowblackbird-cloudVerified publisher1.0.171 of 6See more

baserow blackbird-cloud 1.0.17

1 of the 6 container images this version deploys carry CVE-2026-3276.

Container imageDigestPackageFixed in
baserow/backend:1.31.1e0b3c8130b91
python3.11@3.11.2-6+deb12u5
no fix listed

Open the chart page →

10,145
colosseumbook-k8sinfra-v21.0.182 of 5See more

colosseum book-k8sinfra-v2 1.0.18

2 of the 5 container images this version deploys carry CVE-2026-3276.

Container imageDigestPackageFixed in
sysnet4admin/colosseum-cms:loge74b43c7f492
python3.11@3.11.2-6+deb12u6
no fix listed
sysnet4admin/colosseum-prm:log5802bfcd7fed
python3.11@3.11.2-6+deb12u6
no fix listed

Open the chart page →

26,996
csi-driver-nfsbook-k8sinfra-v24.12.11 of 6See more

csi-driver-nfs book-k8sinfra-v2 4.12.1

1 of the 6 container images this version deploys carry CVE-2026-3276.

Container imageDigestPackageFixed in
registry.k8s.io/sig-storage/nfsplugin:v4.11.0ce5b5ccd5eb0
python3.11@3.11.2-6+deb12u5
no fix listed

Open the chart page →

6,220
jaegerbook-k8sinfra-v23.4.02 of 5See more

jaeger book-k8sinfra-v2 3.4.0

2 of the 5 container images this version deploys carry CVE-2026-3276.

Container imageDigestPackageFixed in
jaegertracing/jaeger-cassandra-schema:1.53.0d48d6dab2c65
python3.10@3.10.12-1~22.04.3
3.10.12-1~22.04.16
library/cassandra:3.11.65aa8400b4b3b
python2.7@2.7.17-1~18.04ubuntu1.1
no fix listed

Open the chart page →

19,229
node-appbryopsida0.5.12 of 2See more

node-app bryopsida 0.5.1

2 of the 2 container images this version deploys carry CVE-2026-3276.

Container imageDigestPackageFixed in
library/node:ltsbe23f54a88d3
python3.11@3.11.2-6+deb12u8
no fix listed
ghcr.io/bryopsida/k8s-dev-pod:main82d0b161161d
python3.12@3.12.3-1ubuntu0.5
3.12.3-1ubuntu0.15

Open the chart page →

14,352
prometheus-puppetdb-sdcamptocamp38.0.21 of 2See more

prometheus-puppetdb-sd camptocamp3 8.0.2

1 of the 2 container images this version deploys carry CVE-2026-3276.

Container imageDigestPackageFixed in
puppet/puppet-agent:7.14.00b6fd9a6b7da
python3.6@3.6.9-1~18.04ubuntu1.6
no fix listed

Open the chart page →

6,143
tetragon-policy-buildercamptocamp30.1.11 of 1See more

tetragon-policy-builder camptocamp3 0.1.1

1 of the 1 container images this version deploys carry CVE-2026-3276.

Container imageDigestPackageFixed in
ghcr.io/camptocamp/tetragon-policy-builder:master0e99f12bb040
python3.11@3.11.2-6+deb12u5
no fix listed

Open the chart page →

10,776
cassandra-clustercassandra-clusterVerified publisher0.1.01 of 1See more

cassandra-cluster cassandra-cluster 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-3276.

Container imageDigestPackageFixed in
library/cassandra:3.11.10b095ff3248c6
python2.7@2.7.18-1~20.04.1
no fix listed

Open the chart page →

9,473
opencvecfi20170.1.21 of 7See more

opencve cfi2017 0.1.2

1 of the 7 container images this version deploys carry CVE-2026-3276.

Container imageDigestPackageFixed in
ghcr.io/cfi2017/opencve-scheduler:3.0.08d943799621b
python3.11@3.11.2-6+deb12u4
no fix listed

Open the chart page →

15,371
charon-relaycharonOfficialVerified publisher0.8.01 of 2See more

charon-relay charon 0.8.0

1 of the 2 container images this version deploys carry CVE-2026-3276.

Container imageDigestPackageFixed in
obolnetwork/charon:v1.10.0278c7e2897b6
python3.13@3.13.5-2
3.13.5-2+deb13u3

Open the chart page →

4,396
dv-podcharonOfficialVerified publisher0.19.11 of 5See more

dv-pod charon 0.19.1

1 of the 5 container images this version deploys carry CVE-2026-3276.

Container imageDigestPackageFixed in
obolnetwork/charon:v1.10.0278c7e2897b6
python3.13@3.13.5-2
3.13.5-2+deb13u3

Open the chart page →

7,405

Container images carrying it

557 by charts deploying them

A fixed version is listed for 10 of the 16 affected packages.

Container imageDigestPackageFixed inUsed by
baserow/baserow:1.30.1df0c42eb67e8
python3.11@3.11.2-6+deb12u4
no fix listed
1
bbernhard/signal-cli-rest-api:0.57549ad08d7e14
python3.8@3.8.10-0ubuntu1~20.04.2
no fix listed
1
beanbag/reviewboard:latest6b840f546e1c
python3.11@3.11.0~rc1-1~22.04.1
no fix listed
1
beyzkaya/blog-backend:v1.0.112a6a3d1c5f9
python3.11@3.11.2-6+deb12u6
no fix listed
1
bicarus/elrond-rosetta:v1.3.50.0b1dab0721e1c
python3.8@3.8.10-0ubuntu1~20.04.6
no fix listed
1
bitnamilegacy/cassandra:4.1.7-debian-12-r32b7a217999a1
python@3.11.11-0
3.10.21
1
blakeblackshear/frigate:0.10.0-amd64ae269270ad9e
python3.8@3.8.10-0ubuntu1~20.04.2
no fix listed
1
bloxstaking/ssv-node:v2.2.0bf6d7d2fdc93
python3.11@3.11.2-6+deb12u5
no fix listed
1
bnjbvr/kresus:0.22.137e216b182c8
python3.11@3.11.2-6+deb12u4
no fix listed
1
boky/postfix:5.1.0aafc77238423
python3.13@3.13.5-2
3.13.5-2+deb13u3
1
boky/postfix:4.4.0f3f247fd4252
python3.11@3.11.2-6+deb12u5
no fix listed
1
browserless/chrome:1.48.0-chrome-stablec81ae5585b47
python3.8@3.8.10-0ubuntu1~20.04
no fix listed
1
byjg/easy-haproxy:6.1.1230fdb7b00ae
python3@3.14.5-r0
3.14.7-r0
1
carlosmz87/test_helm_backend:latest8ffa63aa995d
python3.11@3.11.2-6+deb12u4
no fix listed
1
castopod/castopod:1.12.101fd37280cbb2
python3.11@3.11.2-6+deb12u3
no fix listed
1
cccs/assemblyline-rust:4.7.4.stable17468326853ec5
python3.11@3.11.2-6+deb12u8
no fix listed
1
checkmk/check-mk-community:2.5.0p6c11b422210c4
python3.10@3.10.12-1~22.04.15
3.10.12-1~22.04.16
1
chetangautamm/repo:Opensips_Buildb4b94155ff5a
python3.4@3.4.3-1ubuntu1~14.04.7
no fix listed
1
chetangautamm/repo:sipp.v3e7f7049e1544
python3.8@3.8.5-1~20.04
no fix listed
1
cheyang/distributed-tf:1.6.046cc34755493
python2.7@2.7.12-1ubuntu0~16.04.3
python3.5@3.5.2-2ubuntu0~16.04.4
no fix listed
no fix listed
1
chiefonboarding/chiefonboarding:v2.4.159bc7aa60fe7
python3.13@3.13.5-2
3.13.5-2+deb13u3
1
chocobozzz/peertube:v8.1.5052712130691
python3.13@3.13.5-2+deb13u2
3.13.5-2+deb13u3
1
chriseaton/adventureworks:latest54c3384ce701
python3.10@3.10.12-1~22.04.9
3.10.12-1~22.04.16
1
citizenstig/httpbin:latestb81c818ccb86
python3.5@3.5.2-2ubuntu0~16.04.1
no fix listed
1
cloudve/janis-terminal:latestaf56e77ca587
python3.6@3.6.9-1~18.04ubuntu1
no fix listed
1
cloudve/ttyd:latestd79c1c5881c0
python3.6@3.6.9-1~18.04ubuntu1
no fix listed
1
codedesignplus/ms-emails-grpc:lateste336012bc781
python3.11@3.11.2-6+deb12u8
no fix listed
1
codedesignplus/ms-emails-rest:latestac84661c605e
python3.11@3.11.2-6+deb12u8
no fix listed
1
countly/countly-server:25.05.4e3c238248f99
python2.7@2.7.18-1~20.04.4
python3.8@3.8.10-0ubuntu1~20.04.2
no fix listed
no fix listed
1
cybrarist/discount-bandit:v4.0.4e9e2447ac666
python3.13@3.13.5-2+deb13u2
3.13.5-2+deb13u3
1
danialnabiyan1382/lsdisk:v2.0.8f96a7ebf1f42
python3.11@3.11.2-6+deb12u6
no fix listed
1
dariomader/twampy:v0.0.2d2f4a8c5e690
python-3.12@3.12.0-r1
3.12.13-r8
1
daskdev/dask-notebook:1.1.0052630f5ca04
python3.6@3.6.7-1~18.04
no fix listed
1
datamate/seafile-professional:11.0.202dd66b722464
python3.10@3.10.12-1~22.04.11
3.10.12-1~22.04.16
1
deconzcommunity/deconz:2.29.2062de2362641
python3.11@3.11.2-6+deb12u5
no fix listed
1
deimosfr/dnsmasq-k8s:1.4.1284c4040fc6d
python3.13@3.13.5-2
3.13.5-2+deb13u3
1
digitalist/matomo:5.12.0bc4aeeaea769
python3@3.14.5-r0
3.14.7-r0
1
dongjiang1989/lxcfs:v6.0.34bf9ae391948
python3.8@3.8.10-0ubuntu1~20.04.18
no fix listed
1
dragonflyoss/client:v1.5.4a1b52779c4dd
python3.11@3.11.2-6+deb12u8
no fix listed
1
dragonflyoss/client:v0.1.82edf3e921f4e0
python3.11@3.11.2-6
no fix listed
1
drumsergio/genieacs:1.2.16.028244054e1bf
python3.11@3.11.2-6+deb12u6
no fix listed
1
dserio83/velero-api:0.3.16b3d9115fee2
python3.11@3.11.2-6+deb12u6
no fix listed
1
eclipseaerios/iota-messages-api:lateste7f5ba0bc64d
python3.13@3.13.5-2
3.13.5-2+deb13u3
1
elastictranscoder/transcoder:627e21dcb4a0327029e6
python3.6@3.6.9-1~18.04ubuntu1.4
no fix listed
1
elastictranscoder/transcoder-handler:627e21dc5b75d19e2733
python3.6@3.6.9-1~18.04ubuntu1.4
no fix listed
1
esphome/esphome:2024.3.09ab8cc88b28c
python3.11@3.11.2-6
no fix listed
1
esphome/esphome:2024.12.2b2c6322700ac
python3.11@3.11.2-6+deb12u4
no fix listed
1
esphome/esphome:2025.3.0def8b6e4f517
python3.11@3.11.2-6+deb12u5
no fix listed
1
ethereumex/eth-stats-dashboard:v0.0.1a7603aa8df4c
python2.7@2.7.12-1ubuntu0~16.04.2
no fix listed
1
ethpandaops/assertoor:latest1efa2fba6711
python3.13@3.13.5-2+deb13u2
3.13.5-2+deb13u3
1

syft 1.42.1 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.