StackRadar

CVE-2026-33630

High

Advisory

Published 9 Jul 2026In the index since 5 Sept 2026
Severity
High
worst across findings
CVSS
7.5
base score, highest
EPSS
0.005
38th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
416
of 17,781 indexed, latest versions
Container images
384
deployed by those charts
Fix available
2 of 3
affected packages

Important: c-ares security update

Carried by container images the latest versions of 416 of 17,781 indexed charts deploy, on 384 images.

Affected packageAffected versionsFixed inImages
c-aresapk1.34.3-r0, 1.34.4-r0, 1.34.5-r0, 1.34.6-r01.34.8-r0358
c-aresdeb1.14.0-1, 1.14.0-1ubuntu0.2, 1.15.0-1ubuntu0.1, 1.15.0-1ubuntu0.4+6 moreno fix listed25
c-aresrpm1.34.6-1.el100:1.34.6-2.el10_21
OSV records
ALPINE-CVE-2026-33630DEBIAN-CVE-2026-33630RLSA-2026:42096UBUNTU-CVE-2026-33630

Charts affected

416 by stars
ChartLatestAffected imagesRadar Score
truefoundry-monitoringtruefoundryVerified publisher0.1.61 of 8See more

truefoundry-monitoring truefoundry 0.1.6

1 of the 8 container images this version deploys carry CVE-2026-33630.

Container imageDigestPackageFixed in
grafana/grafana:12.3.070d9599b186c
c-ares@1.34.5-r0
1.34.8-r0

Open the chart page →

4,526
twentytwenty-crm0.1.111 of 4See more

twenty twenty-crm 0.1.11

1 of the 4 container images this version deploys carry CVE-2026-33630.

Container imageDigestPackageFixed in
twentycrm/twenty:v2.22.0e7d9948bf284
c-ares@1.34.6-r0
1.34.8-r0

Open the chart page →

5,550
deep-learning-toolsuninettsigma29.1.21 of 3See more

deep-learning-tools uninettsigma2 9.1.2

1 of the 3 container images this version deploys carry CVE-2026-33630.

Container imageDigestPackageFixed in
library/nginx:1.29.3-alpineb3c656d55d7a
c-ares@1.34.5-r0
1.34.8-r0

Open the chart page →

1,567
excalidashunxwaresVerified publisher2026.2.51 of 2See more

excalidash unxwares 2026.2.5

1 of the 2 container images this version deploys carry CVE-2026-33630.

Container imageDigestPackageFixed in
zimengxiong/excalidash-frontend:0.4.27242629350b06
c-ares@1.34.6-r0
1.34.8-r0

Open the chart page →

2,620
evolution-apivcnngrVerified publisher1.0.01 of 5See more

evolution-api vcnngr 1.0.0

1 of the 5 container images this version deploys carry CVE-2026-33630.

Container imageDigestPackageFixed in
evoapicloud/evolution-manager:latestcbfeb314afb9
c-ares@1.34.5-r0
1.34.8-r0

Open the chart page →

3,746
simple-prima-notavcnngrVerified publisher0.5.32 of 4See more

simple-prima-nota vcnngr 0.5.3

2 of the 4 container images this version deploys carry CVE-2026-33630.

Container imageDigestPackageFixed in
vcnngr/pnbackend:latesteaf44ad0ad1f
c-ares@1.34.5-r0
1.34.8-r0
vcnngr/pnfrontend:latest4e4979ab8c41
c-ares@1.34.5-r0
1.34.8-r0

Open the chart page →

4,768
colanodevictorlane0.3.31 of 3See more

colanode victorlane 0.3.3

1 of the 3 container images this version deploys carry CVE-2026-33630.

Container imageDigestPackageFixed in
ghcr.io/colanode/web:latestbcad696f03ee
c-ares@1.34.5-r0
1.34.8-r0

Open the chart page →

2,076
twenty-crmvictorlane0.0.11 of 3See more

twenty-crm victorlane 0.0.1

1 of the 3 container images this version deploys carry CVE-2026-33630.

Container imageDigestPackageFixed in
twentycrm/twenty-postgres-spilo:latest2f78405a78be
c-ares@1.18.1-1ubuntu0.22.04.2
no fix listed

Open the chart page →

13,459
squawkvojtechpastyrikVerified publisher0.1.101 of 1See more

squawk vojtechpastyrik 0.1.10

1 of the 1 container images this version deploys carry CVE-2026-33630.

Container imageDigestPackageFixed in
ghcr.io/vojtechpastyrik/squawk:0.1.104005df5f7229
c-ares@1.34.6-r0
1.34.8-r0

Open the chart page →

400
aih-scannerwallarmVerified publisher2.7.111 of 2See more

aih-scanner wallarm 2.7.11

1 of the 2 container images this version deploys carry CVE-2026-33630.

Container imageDigestPackageFixed in
wallarm/aih-scanner:2.7.11f1cb26db1f5b
c-ares@1.34.5-1+deb13u1
no fix listed

Open the chart page →

3,911
wexa-studiowexa-studio1.2.03 of 15See more

wexa-studio wexa-studio 1.2.0

3 of the 15 container images this version deploys carry CVE-2026-33630.

Container imageDigestPackageFixed in
temporalio/admin-tools:1.29.1-tctl-1.18.4-cli-1.5.0a3a52e6ca122
c-ares@1.34.5-r0
1.34.8-r0
temporalio/server:1.29.1c1e3326b2ce1
c-ares@1.34.5-r0
1.34.8-r0
temporalio/ui:2.44.00b36e00aad30
c-ares@1.34.6-r0
1.34.8-r0

Open the chart page →

14,983
wikiwikijs3.0.01 of 2See more

wiki wikijs 3.0.0

1 of the 2 container images this version deploys carry CVE-2026-33630.

Container imageDigestPackageFixed in
requarks/wiki:268f0d1848261
c-ares@1.34.6-r0
1.34.8-r0

Open the chart page →

5,459
metabasewiremindVerified publisher2.27.5-wiremind01 of 1See more

metabase wiremind 2.27.5-wiremind0

1 of the 1 container images this version deploys carry CVE-2026-33630.

Container imageDigestPackageFixed in
metabase/metabase:v0.61.1.x9491ed11c901
c-ares@1.34.6-r0
1.34.8-r0

Open the chart page →

1,639
postgres-operatorwiremindVerified publisher1.14.0-wiremind01 of 1See more

postgres-operator wiremind 1.14.0-wiremind0

1 of the 1 container images this version deploys carry CVE-2026-33630.

Container imageDigestPackageFixed in
ghcr.io/zalando/postgres-operator:v1.14.04f40cfc2283b
c-ares@1.34.3-r0
1.34.8-r0

Open the chart page →

1,286
language-toolzekker6Verified publisher1.12.11 of 2See more

language-tool zekker6 1.12.1

1 of the 2 container images this version deploys carry CVE-2026-33630.

Container imageDigestPackageFixed in
erikvl87/languagetool:6.7-dockerupdate-3e1ea6a975388
c-ares@1.34.6-r0
1.34.8-r0

Open the chart page →

1,571
zoo-project-druzoo-projectOfficialVerified publisher0.10.42 of 6See more

zoo-project-dru zoo-project 0.10.4

2 of the 6 container images this version deploys carry CVE-2026-33630.

Container imageDigestPackageFixed in
curlimages/curl:8.21.07c12af72ceb3
c-ares@1.34.6-r0
1.34.8-r0
library/postgres:18.4-alpine3.249a8afca54e78
c-ares@1.34.6-r0
1.34.8-r0

Open the chart page →

7,849

Container images carrying it

384 by charts deploying them

A fixed version is listed for 2 of the 3 affected packages.

Container imageDigestPackageFixed inUsed by
ghcr.io/open-telemetry/demo:3.0.0-quote6bc8f7f6809e
c-ares@1.34.6-r0
1.34.8-r0
1
ghcr.io/open-telemetry/demo:3.0.0-image-provider93e1585e97ac
c-ares@1.34.6-r0
1.34.8-r0
1
ghcr.io/pixelfederation/unbound:1.24.2_0fce820a03964
c-ares@1.34.6-r0
1.34.8-r0
1
ghcr.io/pocket-id/pocket-id:v2.7.045bdeaf3fcd6
c-ares@1.34.6-r0
1.34.8-r0
1
ghcr.io/prophetse7en/clonarr:latest9400d298b37a
c-ares@1.34.6-r0
1.34.8-r0
1
ghcr.io/ptrvsrg/csi-driver-ipfs:latest97d2d9ccd7a5
c-ares@1.34.6-r0
1.34.8-r0
1
ghcr.io/radar-base/radar-upload-source-connector/radar-upload-connect-frontend:0.6.47e27863545fc
c-ares@1.34.5-r0
1.34.8-r0
1
ghcr.io/reiche-world/traefik-secrets-exporter:0.0.21485ff93cbf9
c-ares@1.34.6-r0
1.34.8-r0
1
ghcr.io/sergelogvinov/ipsec:5.236f4e651d1fe
c-ares@1.34.6-r0
1.34.8-r0
1
ghcr.io/smarter-project/audio-client:v3.1.23c8375dc5487
c-ares@1.15.0-1ubuntu0.1
no fix listed
1
ghcr.io/smarter-project/image-detector:v2.5.31dcca70c6446
c-ares@1.15.0-1ubuntu0.1
no fix listed
1
ghcr.io/theconnman/docker-hub-rss:0.6.238eba84b2be8
c-ares@1.34.6-r0
1.34.8-r0
1
ghcr.io/umami-software/umami:3.0.328f263fe06f7
c-ares@1.34.5-r0
1.34.8-r0
1
ghcr.io/umami-software/umami:postgresql-v2.20.173ca19b41745
c-ares@1.34.5-r0
1.34.8-r0
1
ghcr.io/umami-software/umami:3.1.0e3f80c0625aa
c-ares@1.34.6-r0
1.34.8-r0
1
ghcr.io/vojtechpastyrik/squawk:0.1.104005df5f7229
c-ares@1.34.6-r0
1.34.8-r0
1
ghcr.io/wei-shaw/claude-relay-service:v1.1.292398c34934453
c-ares@1.34.5-r0
1.34.8-r0
1
ghcr.io/zalando/postgres-operator:v1.14.04f40cfc2283b
c-ares@1.34.3-r0
1.34.8-r0
1
ghcr.io/zystem-io/zymtrace-pub-ui:26.9.1e951adf792cd
c-ares@1.34.5-r0
1.34.8-r0
1
public.ecr.aws/aktosecurity/akto-puppeteer-replay:1.49.4_latestf1c5763d565e
c-ares@1.34.6-r0
1.34.8-r0
1
public.ecr.aws/aktosecurity/mirror-api-logging:k8s_ebpf_core_impd94ce715f051
c-ares@1.34.6-r0
1.34.8-r0
1
public.ecr.aws/buildkite/agent-metrics:v5.11.016e7f5c7161e
c-ares@1.34.5-r0
1.34.8-r0
1
quay.io/argoprojlabs/argocd-image-updater:v1.2.13c56f354fac5
c-ares@1.34.6-r0
1.34.8-r0
1
quay.io/ceph/ceph:v21.1.05ff3692d2f3f
c-ares@1.34.6-1.el10
0:1.34.6-2.el10_2
1
quay.io/deployhub/ms-nginx:svccat-v11.0.815-g717581d2d3400664e8
c-ares@1.34.6-r0
1.34.8-r0
1
quay.io/jupyterhub/configurable-http-proxy:5.1.0eb10d5bf045c
c-ares@1.34.5-r0
1.34.8-r0
1
quay.io/opsmxpublic/opa:opa-sidecar-v1.03dcbf3caa454
c-ares@1.34.6-r0
1.34.8-r0
1
registry.gitlab.com/shortlink-org/shortlink/bff:latestf2194e526915
c-ares@1.34.6-r0
1.34.8-r0
1
registry.gitlab.com/shortlink-org/shortlink/link:latest86d87291ffd4
c-ares@1.34.6-r0
1.34.8-r0
1
registry.gitlab.com/technostructures/posca/posca:latesta693021686ca
c-ares@1.34.6-r0
1.34.8-r0
1
registry.k8s.io/ingress-nginx/controller:v1.13.21f7eaeb01933
c-ares@1.34.5-r0
1.34.8-r0
1
registry.k8s.io/ingress-nginx/controller:v1.13.137e489b22ac7
c-ares@1.34.5-r0
1.34.8-r0
1
registry.k8s.io/ingress-nginx/controller:v1.12.0e6b8de175acd
c-ares@1.34.3-r0
1.34.8-r0
1
registry.k8s.io/provider-os/manila-csi-plugin:v1.36.0190976e2e2fe
c-ares@1.34.6-r0
1.34.8-r0
1

syft 1.42.1 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.