StackRadarChart IndexLive demo

CVE-2026-34214

High

Advisory

Published 29 Mar 2026In the index since 8 Sept 2026

Severity: High; worst across findings
CVSS: 7.7; base score, highest
EPSS: 0.002; 9th percentile
CISA KEV: Not listed; no confirmed exploitation
Charts affected: 3; of 17,781 indexed, latest versions
Container images: 3; deployed by those charts
Fix available: 1 of 1; affected package

Trino: Iceberg REST catalog static and vended credentials are accessible via query JSON

Carried by container images the latest versions of 3 of 17,781 indexed charts deploy, on 3 images.

Affected package	Affected versions	Fixed in	Images
trino-icebergmaven	450, 470, 479	480	3

OSV records: GHSA-x27p-5f68-m644

Charts affected

3 by stars

Chart

Latest

Affected images

Radar Score

resurfaceresurfaceio

1 of 3 See more

resurface resurfaceio 3.9.0

1 of the 3 container images this version deploys carry CVE-2026-34214.

Container image	Digest	Package	Fixed in
resurfaceio/resurface :3.7.84	d5cda2f64109	trino-iceberg@470	480

Open the chart page →

7,432

trinopresto-loadbalancer

1 of 2 See more

trino presto-loadbalancer 0.2.10

1 of the 2 container images this version deploys carry CVE-2026-34214.

Container image	Digest	Package	Fixed in
trinodb/trino :479	6af989b0846d	trino-iceberg@479	480

Open the chart page →

2,264

rada-platformrada-platform

1 of 7 See more

rada-platform rada-platform 0.1.0

1 of the 7 container images this version deploys carry CVE-2026-34214.

Container image	Digest	Package	Fixed in
trinodb/trino :450	38c6f24ab1a4	trino-iceberg@450	480

Open the chart page →

21,211

Container images carrying it

3 by charts deploying them

A fixed version is listed for 1 of the 1 affected package.

Container image	Digest	Package	Fixed in	Used by
resurfaceio/resurface :3.7.84	d5cda2f64109	trino-iceberg@470	480	1
trinodb/trino :450	38c6f24ab1a4	trino-iceberg@450	480	1
trinodb/trino :479	6af989b0846d	trino-iceberg@479	480	1