StackRadar

CVE-2026-33165

Medium

Advisory

Published 20 Mar 2026In the index since 5 Sept 2026
Severity
Medium
worst across findings
CVSS
5.5
base score, highest
EPSS
0.002
14th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
367
of 17,781 indexed, latest versions
Container images
253
deployed by those charts
Fix available
1 of 1
affected package

The matching OSV records carry no description.

Carried by container images the latest versions of 367 of 17,781 indexed charts deploy, on 253 images.

Affected packageAffected versionsFixed inImages
libde265deb1.0.4-1build1, 1.0.4-1ubuntu0.4, 1.0.8-1, 1.0.8-1ubuntu0.1+9 more1.0.4-1ubuntu0.4+esm2, 1.0.8-1ubuntu0.3+esm2, 1.0.15-1+deb13u2, 1.0.15-1ubuntu0.1+1 more253
OSV records
DEBIAN-CVE-2026-33165UBUNTU-CVE-2026-33165
Also known as
USN-8573-1

Charts affected

367 by stars
ChartLatestAffected imagesRadar Score
paperless-ngxcharts-derwitt-devVerified publisher2.1.41 of 1See more

paperless-ngx charts-derwitt-dev 2.1.4

1 of the 1 container images this version deploys carry CVE-2026-33165.

Container imageDigestPackageFixed in
ghcr.io/paperless-ngx/paperless-ngx:3.1.3aa810a36942c
libde265@1.0.15-1+deb13u1
1.0.15-1+deb13u2

Open the chart page →

4,626
mysqld-exporterchoerodon0.1.01 of 1See more

mysqld-exporter choerodon 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-33165.

Container imageDigestPackageFixed in
library/nginx:stabled5792f71a949
libde265@1.0.15-1+deb13u1
1.0.15-1+deb13u2

Open the chart page →

1,827
helmchartclouddrove1.4.01 of 1See more

helmchart clouddrove 1.4.0

1 of the 1 container images this version deploys carry CVE-2026-33165.

Container imageDigestPackageFixed in
library/nginx:latest05b8cb60c354
libde265@1.0.15-1+deb13u1
1.0.15-1+deb13u2

Open the chart page →

1,827
kube-acp-stackcloudentity2.28.01 of 7See more

kube-acp-stack cloudentity 2.28.0

1 of the 7 container images this version deploys carry CVE-2026-33165.

Container imageDigestPackageFixed in
timescale/timescaledb-ha:pg17.2-ts2.18.2e8d0a9cc3db5
libde265@1.0.8-1ubuntu0.3
1.0.8-1ubuntu0.3+esm2

Open the chart page →

20,900
rundeckcloudnativeapp0.1.01 of 2See more

rundeck cloudnativeapp 0.1.0

1 of the 2 container images this version deploys carry CVE-2026-33165.

Container imageDigestPackageFixed in
library/nginx:stabled5792f71a949
libde265@1.0.15-1+deb13u1
1.0.15-1+deb13u2

Open the chart page →

23,665
metaflowcluster-deploy0.2.21 of 1See more

metaflow cluster-deploy 0.2.2

1 of the 1 container images this version deploys carry CVE-2026-33165.

Container imageDigestPackageFixed in
public.ecr.aws/outerbounds/metaflow_metadata_service:v2.4.13f7567ce3419d
libde265@1.0.11-1+deb12u2
no fix listed

Open the chart page →

8,009
pbcore-utilcluster-deploy0.0.11 of 1See more

pbcore-util cluster-deploy 0.0.1

1 of the 1 container images this version deploys carry CVE-2026-33165.

Container imageDigestPackageFixed in
ghcr.io/wgbh-mla/pbcore-util:pr-66e04659a3baa
libde265@1.0.11-1+deb12u2
no fix listed

Open the chart page →

9,128
web-chartcms-ktcloudlab0.1.01 of 1See more

web-chart cms-ktcloudlab 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-33165.

Container imageDigestPackageFixed in
library/nginx:latest05b8cb60c354
libde265@1.0.15-1+deb13u1
1.0.15-1+deb13u2

Open the chart page →

1,827
appcnapVerified publisher1.2.01 of 1See more

app cnap 1.2.0

1 of the 1 container images this version deploys carry CVE-2026-33165.

Container imageDigestPackageFixed in
library/nginx:latest05b8cb60c354
libde265@1.0.15-1+deb13u1
1.0.15-1+deb13u2

Open the chart page →

1,827
genericcolearendt0.2.71 of 1See more

generic colearendt 0.2.7

1 of the 1 container images this version deploys carry CVE-2026-33165.

Container imageDigestPackageFixed in
library/nginx:latest05b8cb60c354
libde265@1.0.15-1+deb13u1
1.0.15-1+deb13u2

Open the chart page →

1,827
datumcosmicrocks1.0.51 of 2See more

datum cosmicrocks 1.0.5

1 of the 2 container images this version deploys carry CVE-2026-33165.

Container imageDigestPackageFixed in
ghcr.io/cosmicrocks/datum:v0.4.0beta76771c3cc8c3
libde265@1.0.15-1build3
1.0.15-1ubuntu0.1

Open the chart page →

2,944
dev-code-servercosmoVerified publisher0.0.71 of 2See more

dev-code-server cosmo 0.0.7

1 of the 2 container images this version deploys carry CVE-2026-33165.

Container imageDigestPackageFixed in
ghcr.io/cosmo-workspace/dev-code-server:v0.0.316fda01ae58a
libde265@1.0.11-1+deb12u2
no fix listed

Open the chart page →

14,559
rtcsic-charts0.1.11 of 5See more

rt csic-charts 0.1.1

1 of the 5 container images this version deploys carry CVE-2026-33165.

Container imageDigestPackageFixed in
firefart/requesttracker:5.0.40d6249906d8c
libde265@1.0.11-1
no fix listed

Open the chart page →

15,380
cypikcypik-app0.1.02 of 2See more

cypik cypik-app 0.1.0

2 of the 2 container images this version deploys carry CVE-2026-33165.

Container imageDigestPackageFixed in
library/nginx:latest05b8cb60c354
libde265@1.0.15-1+deb13u1
1.0.15-1+deb13u2
library/nginx:1.25a484819eb602
libde265@1.0.11-1+deb12u2
no fix listed

Open the chart page →

7,503
view-cadvisorcypik-helm-chart0.1.01 of 1See more

view-cadvisor cypik-helm-chart 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-33165.

Container imageDigestPackageFixed in
library/nginx:latest05b8cb60c354
libde265@1.0.15-1+deb13u1
1.0.15-1+deb13u2

Open the chart page →

1,827
nginx-chartdaeho12Verified publisher0.1.01 of 1See more

nginx-chart daeho12 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-33165.

Container imageDigestPackageFixed in
library/nginx:latest05b8cb60c354
libde265@1.0.15-1+deb13u1
1.0.15-1+deb13u2

Open the chart page →

1,827
damap-chartdamapVerified publisher0.3.01 of 5See more

damap-chart damap 0.3.0

1 of the 5 container images this version deploys carry CVE-2026-33165.

Container imageDigestPackageFixed in
ghcr.io/damap-org/damap-frontend:5.0.1609f48af4efc
libde265@1.0.15-1+b3
1.0.15-1+deb13u2

Open the chart page →

13,936
helm-chart-testdasmeta0.1.41 of 1See more

helm-chart-test dasmeta 0.1.4

1 of the 1 container images this version deploys carry CVE-2026-33165.

Container imageDigestPackageFixed in
library/nginx:stabled5792f71a949
libde265@1.0.15-1+deb13u1
1.0.15-1+deb13u2

Open the chart page →

1,827
db-connection-testdb-connection-testVerified publisher0.1.01 of 1See more

db-connection-test db-connection-test 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-33165.

Container imageDigestPackageFixed in
felipecs8/app-db-connection-test:v129e06c9c6385
libde265@1.0.11-1+deb12u2
no fix listed

Open the chart page →

10,090
linkdingdeimosfr-charts1.0.31 of 1See more

linkding deimosfr-charts 1.0.3

1 of the 1 container images this version deploys carry CVE-2026-33165.

Container imageDigestPackageFixed in
sissbruecker/linkding:1.35.00c5dddf0b37c
libde265@1.0.11-1+deb12u2
no fix listed

Open the chart page →

6,075
my-helm-chartdemohelm20.1.01 of 1See more

my-helm-chart demohelm2 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-33165.

Container imageDigestPackageFixed in
library/nginx:latest05b8cb60c354
libde265@1.0.15-1+deb13u1
1.0.15-1+deb13u2

Open the chart page →

1,827
apachedevops0.1.01 of 4See more

apache devops 0.1.0

1 of the 4 container images this version deploys carry CVE-2026-33165.

Container imageDigestPackageFixed in
ghcr.io/codingducksrl/laravel:8.15be52524664c
libde265@1.0.8-1
1.0.8-1ubuntu0.3+esm2

Open the chart page →

30,031
laraveldevops0.10.31 of 4See more

laravel devops 0.10.3

1 of the 4 container images this version deploys carry CVE-2026-33165.

Container imageDigestPackageFixed in
ghcr.io/codingducksrl/laravel:8.15be52524664c
libde265@1.0.8-1
1.0.8-1ubuntu0.3+esm2

Open the chart page →

29,033
devtron-enterprisedevtron48.0.01 of 28See more

devtron-enterprise devtron 48.0.0

1 of the 28 container images this version deploys carry CVE-2026-33165.

Container imageDigestPackageFixed in
quay.io/devtron/notifier:9804331c-372-39294709c7da19c5a
libde265@1.0.11-1+deb12u2
no fix listed

Open the chart page →

68,240
devtron-enterprisedevtron-labs48.0.01 of 28See more

devtron-enterprise devtron-labs 48.0.0

1 of the 28 container images this version deploys carry CVE-2026-33165.

Container imageDigestPackageFixed in
quay.io/devtron/notifier:9804331c-372-39294709c7da19c5a
libde265@1.0.11-1+deb12u2
no fix listed

Open the chart page →

68,240
adventurelogdjjudas21Verified publisher0.1.11 of 3See more

adventurelog djjudas21 0.1.1

1 of the 3 container images this version deploys carry CVE-2026-33165.

Container imageDigestPackageFixed in
ghcr.io/seanmorley15/adventurelog-backend:v0.13.00250d9cb0d74
libde265@1.0.15-1+deb13u1
1.0.15-1+deb13u2

Open the chart page →

7,459
ownclouddjjudas21Verified publisher0.3.231 of 3See more

owncloud djjudas21 0.3.23

1 of the 3 container images this version deploys carry CVE-2026-33165.

Container imageDigestPackageFixed in
owncloud/server:10.16.3b3f9efdcd7f7
libde265@1.0.8-1ubuntu0.3
1.0.8-1ubuntu0.3+esm2

Open the chart page →

10,035
photoprismdjjudas21Verified publisher99.99.991 of 1See more

photoprism djjudas21 99.99.99

1 of the 1 container images this version deploys carry CVE-2026-33165.

Container imageDigestPackageFixed in
photoprism/photoprism:240711-cefc6fd632ca74
libde265@1.0.15-1build3
1.0.15-1ubuntu0.1

Open the chart page →

16,954
webtreesdjjudas21Verified publisher3.0.01 of 1See more

webtrees djjudas21 3.0.0

1 of the 1 container images this version deploys carry CVE-2026-33165.

Container imageDigestPackageFixed in
ghcr.io/nathanvaughn/webtrees:2.2.6034151b61a80
libde265@1.0.15-1+b3
1.0.15-1+deb13u2

Open the chart page →

5,966
wizarrdjjudas21Verified publisher0.1.51 of 1See more

wizarr djjudas21 0.1.5

1 of the 1 container images this version deploys carry CVE-2026-33165.

Container imageDigestPackageFixed in
ghcr.io/wizarrrr/wizarr:4.2.0-beta.3d19d886d5090
libde265@1.0.11-1
no fix listed

Open the chart page →

14,627
dominodomino-iisasVerified publisher0.3.11 of 3See more

domino domino-iisas 0.3.1

1 of the 3 container images this version deploys carry CVE-2026-33165.

Container imageDigestPackageFixed in
ghcr.io/iisas/domino-frontend:k8s8e53861be292
libde265@1.0.11-1+deb12u2
no fix listed

Open the chart page →

10,270
codecovdoubanVerified publisher0.2.41 of 8See more

codecov douban 0.2.4

1 of the 8 container images this version deploys carry CVE-2026-33165.

Container imageDigestPackageFixed in
timescale/timescaledb-ha:pg14.6-ts2.9.1-p1cdb9ae118899
libde265@1.0.8-1
1.0.8-1ubuntu0.3+esm2

Open the chart page →

24,917
drogue-cloud-examplesdrogue-iotVerified publisher0.7.111 of 6See more

drogue-cloud-examples drogue-iot 0.7.11

1 of the 6 container images this version deploys carry CVE-2026-33165.

Container imageDigestPackageFixed in
timescale/timescaledb-ha:pg14-ts2.6-latested719c0cd19d
libde265@1.0.8-1
1.0.8-1ubuntu0.3+esm2

Open the chart page →

30,699
rundeckdwardu-helm-charts0.3.41 of 2See more

rundeck dwardu-helm-charts 0.3.4

1 of the 2 container images this version deploys carry CVE-2026-33165.

Container imageDigestPackageFixed in
library/nginx:stabled5792f71a949
libde265@1.0.15-1+deb13u1
1.0.15-1+deb13u2

Open the chart page →

19,802
iotaeclipse-aeriosVerified publisher1.0.21 of 4See more

iota eclipse-aerios 1.0.2

1 of the 4 container images this version deploys carry CVE-2026-33165.

Container imageDigestPackageFixed in
eclipseaerios/iota-messages-api:lateste7f5ba0bc64d
libde265@1.0.15-1+b3
1.0.15-1+deb13u2

Open the chart page →

13,391
kube-ecp-stackemqx-operator2.5.11 of 16See more

kube-ecp-stack emqx-operator 2.5.1

1 of the 16 container images this version deploys carry CVE-2026-33165.

Container imageDigestPackageFixed in
emqx/ecp-ui:2.5.1e33e9816f147
libde265@1.0.11-1+deb12u2
no fix listed

Open the chart page →

23,685
nginx-charteoc-chartsVerified publisher2.0.01 of 1See more

nginx-chart eoc-charts 2.0.0

1 of the 1 container images this version deploys carry CVE-2026-33165.

Container imageDigestPackageFixed in
library/nginx:latest05b8cb60c354
libde265@1.0.15-1+deb13u1
1.0.15-1+deb13u2

Open the chart page →

1,827
wordpresseoc-chartsVerified publisher0.14.41 of 1See more

wordpress eoc-charts 0.14.4

1 of the 1 container images this version deploys carry CVE-2026-33165.

Container imageDigestPackageFixed in
library/wordpress:6.8.3-apache30bff39330d1
libde265@1.0.15-1+b3
1.0.15-1+deb13u2

Open the chart page →

7,233
powfaucetethereum-helm-chartsVerified publisher1.2.11 of 1See more

powfaucet ethereum-helm-charts 1.2.1

1 of the 1 container images this version deploys carry CVE-2026-33165.

Container imageDigestPackageFixed in
pk910/powfaucet:v2-stable3dcae6a62896
libde265@1.0.11-1+deb12u2
no fix listed

Open the chart page →

4,456
beeport-uiethersphereVerified publisher0.76.22 of 3See more

beeport-ui ethersphere 0.76.2

2 of the 3 container images this version deploys carry CVE-2026-33165.

Container imageDigestPackageFixed in
library/nginx:latest05b8cb60c354
libde265@1.0.15-1+deb13u1
1.0.15-1+deb13u2
library/node:ltsbe23f54a88d3
libde265@1.0.11-1+deb12u2
no fix listed

Open the chart page →

7,368
multichain-uiethersphereVerified publisher0.73.12 of 3See more

multichain-ui ethersphere 0.73.1

2 of the 3 container images this version deploys carry CVE-2026-33165.

Container imageDigestPackageFixed in
library/nginx:latest05b8cb60c354
libde265@1.0.15-1+deb13u1
1.0.15-1+deb13u2
library/node:ltsbe23f54a88d3
libde265@1.0.11-1+deb12u2
no fix listed

Open the chart page →

7,368
static-siteethersphereVerified publisher0.73.12 of 2See more

static-site ethersphere 0.73.1

2 of the 2 container images this version deploys carry CVE-2026-33165.

Container imageDigestPackageFixed in
library/nginx:latest05b8cb60c354
libde265@1.0.15-1+deb13u1
1.0.15-1+deb13u2
library/node:latestf5d1cc40abc1
libde265@1.0.15-1+deb13u1
1.0.15-1+deb13u2

Open the chart page →

6,851
ferriscompanyferriscompany0.1.01 of 1See more

ferriscompany ferriscompany 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-33165.

Container imageDigestPackageFixed in
ghcr.io/libreconnect/ferriscompany:0.1.0-rc6ed86db9f0efe
libde265@1.0.11-1+deb12u2
no fix listed

Open the chart page →

10,741
fineractfineract-openshift0.1.11 of 4See more

fineract fineract-openshift 0.1.1

1 of the 4 container images this version deploys carry CVE-2026-33165.

Container imageDigestPackageFixed in
library/nginx:latest05b8cb60c354
libde265@1.0.15-1+deb13u1
1.0.15-1+deb13u2

Open the chart page →

7,792
business-api-ecosystemfiware1.1.01 of 4See more

business-api-ecosystem fiware 1.1.0

1 of the 4 container images this version deploys carry CVE-2026-33165.

Container imageDigestPackageFixed in
fiware/biz-ecosystem-logic-proxy:11.20.3d551a13e8278
libde265@1.0.11-1+deb12u2
no fix listed

Open the chart page →

64,489
scanservjsgabe565Verified publisher0.9.21 of 1See more

scanservjs gabe565 0.9.2

1 of the 1 container images this version deploys carry CVE-2026-33165.

Container imageDigestPackageFixed in
sbs20/scanservjs:release-v3.0.3dad1fd6e9a98
libde265@1.0.11-1
no fix listed

Open the chart page →

13,241
icinga2geek-cookbookVerified publisher4.2.01 of 1See more

icinga2 geek-cookbook 4.2.0

1 of the 1 container images this version deploys carry CVE-2026-33165.

Container imageDigestPackageFixed in
jordan/icinga2:latestf75025fe8ea8
libde265@1.0.11-1+deb12u2
no fix listed

Open the chart page →

9,077
mopidygeek-cookbookVerified publisher0.1.21 of 1See more

mopidy geek-cookbook 0.1.2

1 of the 1 container images this version deploys carry CVE-2026-33165.

Container imageDigestPackageFixed in
jaedb/iris:latest048cfbf58d57
libde265@1.0.11-1+deb12u2
no fix listed

Open the chart page →

12,958
photoprismgeek-cookbookVerified publisher7.2.01 of 1See more

photoprism geek-cookbook 7.2.0

1 of the 1 container images this version deploys carry CVE-2026-33165.

Container imageDigestPackageFixed in
photoprism/photoprism:220629-jammy2954334adbda
libde265@1.0.8-1
1.0.8-1ubuntu0.3+esm2

Open the chart page →

19,503
goofy-chartgoofy-chart0.1.01 of 1See more

goofy-chart goofy-chart 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-33165.

Container imageDigestPackageFixed in
library/nginx:latest05b8cb60c354
libde265@1.0.15-1+deb13u1
1.0.15-1+deb13u2

Open the chart page →

1,827

Container images carrying it

253 by charts deploying them

A fixed version is listed for 1 of the 1 affected package.

Container imageDigestPackageFixed inUsed by
registry.gitlab.com/enbuild-staging/vivsoft-platform-ui/enbuild-frontend:1.0.3166353ce9bf98
libde265@1.0.15-1+b3
1.0.15-1+deb13u2
1
registry.gitlab.com/enbuild-staging/vivsoft-platform-ui/enbuild-mq-consumer:1.0.310e3cd8c7776d
libde265@1.0.11-1+deb12u2
no fix listed
1
registry.gitlab.com/school_guy/docker-typo3:13.4.30-197d868ed76185d7270d
libde265@1.0.11-1+deb12u2
no fix listed
1

syft 1.42.1 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.