StackRadar

CVE-2026-35352

High

Advisory

Published 22 Apr 2026In the index since 5 Sept 2026
Severity
High
worst across findings
CVSS
7.0
base score, highest
EPSS
0.001
4th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
77
of 17,781 indexed, latest versions
Container images
75
deployed by those charts
Fix available
None
affected package

The matching OSV records carry no description.

Carried by container images the latest versions of 77 of 17,781 indexed charts deploy, on 75 images.

Affected packageAffected versionsFixed inImages
rust-coreutilsdeb0.2.2-0ubuntu2.1, 0.8.0-0ubuntu3no fix listed75
OSV records
UBUNTU-CVE-2026-35352

Charts affected

77 by stars
ChartLatestAffected imagesRadar Score
plexbryopsida0.2.01 of 1See more

plex bryopsida 0.2.0

1 of the 1 container images this version deploys carry CVE-2026-35352.

Container imageDigestPackageFixed in
ghcr.io/linuxserver/plex:latest7f9a1d574958
rust-coreutils@0.8.0-0ubuntu3
no fix listed

Open the chart page →

810
ciliumcilium21.20.11 of 3See more

cilium cilium2 1.20.1

1 of the 3 container images this version deploys carry CVE-2026-35352.

Container imageDigestPackageFixed in
quay.io/cilium/cilium:v1.20.1ae9ea21f7427
rust-coreutils@0.8.0-0ubuntu3
no fix listed

Open the chart page →

1,708
cronjobclouddrove1.0.11 of 1See more

cronjob clouddrove 1.0.1

1 of the 1 container images this version deploys carry CVE-2026-35352.

Container imageDigestPackageFixed in
library/ubuntu:latest2260313b31c8
rust-coreutils@0.8.0-0ubuntu3
no fix listed

Open the chart page →

694
argo-cdcluster-deploy0.3.21 of 3See more

argo-cd cluster-deploy 0.3.2

1 of the 3 container images this version deploys carry CVE-2026-35352.

Container imageDigestPackageFixed in
quay.io/argoproj/argocd:v3.5.10deb1a1c9176
rust-coreutils@0.8.0-0ubuntu3
no fix listed

Open the chart page →

3,693
clusterplexclusterplexVerified publisher1.1.101 of 3See more

clusterplex clusterplex 1.1.10

1 of the 3 container images this version deploys carry CVE-2026-35352.

Container imageDigestPackageFixed in
ghcr.io/linuxserver/plex:latest7f9a1d574958
rust-coreutils@0.8.0-0ubuntu3
no fix listed

Open the chart page →

3,868
opencloudcommunity-opencloud3.0.01 of 11See more

opencloud community-opencloud 3.0.0

1 of the 11 container images this version deploys carry CVE-2026-35352.

Container imageDigestPackageFixed in
apache/tika:latest-full80072bb73dd3
rust-coreutils@0.8.0-0ubuntu3
no fix listed

Open the chart page →

3,773
nvidia-gpu-exporterdanchevVerified publisher1.0.31 of 1See more

nvidia-gpu-exporter danchev 1.0.3

1 of the 1 container images this version deploys carry CVE-2026-35352.

Container imageDigestPackageFixed in
ghcr.io/utkuozdemir/nvidia_gpu_exporter:1.5.0d75967a4dd72
rust-coreutils@0.8.0-0ubuntu3
no fix listed

Open the chart page →

1,184
nethermindethereum-helm-chartsVerified publisher1.1.21 of 2See more

nethermind ethereum-helm-charts 1.1.2

1 of the 2 container images this version deploys carry CVE-2026-35352.

Container imageDigestPackageFixed in
nethermind/nethermind:latest1b6b01419de4
rust-coreutils@0.8.0-0ubuntu3
no fix listed

Open the chart page →

933
web3signerethereum-helm-chartsVerified publisher1.0.61 of 4See more

web3signer ethereum-helm-charts 1.0.6

1 of the 4 container images this version deploys carry CVE-2026-35352.

Container imageDigestPackageFixed in
consensys/web3signer:latestf146a51a1ba3
rust-coreutils@0.8.0-0ubuntu3
no fix listed

Open the chart page →

1,997
komgahelmforgeVerified publisher1.4.151 of 1See more

komga helmforge 1.4.15

1 of the 1 container images this version deploys carry CVE-2026-35352.

Container imageDigestPackageFixed in
gotson/komga:1.26.36c2a967bbe9a
rust-coreutils@0.8.0-0ubuntu3
no fix listed

Open the chart page →

2,261
netboxhelmforgeVerified publisher2.0.11 of 4See more

netbox helmforge 2.0.1

1 of the 4 container images this version deploys carry CVE-2026-35352.

Container imageDigestPackageFixed in
netboxcommunity/netbox:v4.6.10-5.0.291b823a05cb5
rust-coreutils@0.8.0-0ubuntu3
no fix listed

Open the chart page →

4,243
paperlesshpVerified publisher0.1.11 of 5See more

paperless hp 0.1.1

1 of the 5 container images this version deploys carry CVE-2026-35352.

Container imageDigestPackageFixed in
apache/tika:3.3.1.090b7fa1dc018
rust-coreutils@0.8.0-0ubuntu3
no fix listed

Open the chart page →

26,612
jenkinshuangchengwu-helm-chart0.1.01 of 2See more

jenkins huangchengwu-helm-chart 0.1.0

1 of the 2 container images this version deploys carry CVE-2026-35352.

Container imageDigestPackageFixed in
library/ubuntu:latest2260313b31c8
rust-coreutils@0.8.0-0ubuntu3
no fix listed

Open the chart page →

694
steamcmdjfwenischVerified publisher0.0.51 of 1See more

steamcmd jfwenisch 0.0.5

1 of the 1 container images this version deploys carry CVE-2026-35352.

Container imageDigestPackageFixed in
steamcmd/steamcmd:latest5028a25268e7
rust-coreutils@0.8.0-0ubuntu3
no fix listed

Open the chart page →

694
kube-bootkube-bootVerified publisher1.2.21 of 1See more

kube-boot kube-boot 1.2.2

1 of the 1 container images this version deploys carry CVE-2026-35352.

Container imageDigestPackageFixed in
library/eclipse-temurin:2185f00967bcc6
rust-coreutils@0.8.0-0ubuntu3
no fix listed

Open the chart page →

1,190
plex-rclone-wireguardluiscajl1.0.191 of 2See more

plex-rclone-wireguard luiscajl 1.0.19

1 of the 2 container images this version deploys carry CVE-2026-35352.

Container imageDigestPackageFixed in
ghcr.io/linuxserver/plex:latest7f9a1d574958
rust-coreutils@0.8.0-0ubuntu3
no fix listed

Open the chart page →

810
base-jobnn-coVerified publisher0.1.01 of 4See more

base-job nn-co 0.1.0

1 of the 4 container images this version deploys carry CVE-2026-35352.

Container imageDigestPackageFixed in
library/ubuntu:latest2260313b31c8
rust-coreutils@0.8.0-0ubuntu3
no fix listed

Open the chart page →

694
jobopen-charts2.0.01 of 1See more

job open-charts 2.0.0

1 of the 1 container images this version deploys carry CVE-2026-35352.

Container imageDigestPackageFixed in
library/ubuntu:latest2260313b31c8
rust-coreutils@0.8.0-0ubuntu3
no fix listed

Open the chart page →

694
unifiqaoruVerified publisher1.1.21 of 2See more

unifi qaoru 1.1.2

1 of the 2 container images this version deploys carry CVE-2026-35352.

Container imageDigestPackageFixed in
linuxserver/unifi-network-application:10.6.101-ls144b6ce6968ee45
rust-coreutils@0.8.0-0ubuntu3
no fix listed

Open the chart page →

3,642
management-portalradar-baseVerified publisher1.7.01 of 1See more

management-portal radar-base 1.7.0

1 of the 1 container images this version deploys carry CVE-2026-35352.

Container imageDigestPackageFixed in
ghcr.io/radar-base/managementportal/management-portal:3.0.0c1b37e821f72
rust-coreutils@0.8.0-0ubuntu3
no fix listed

Open the chart page →

3,182
rke2-ciliumrke2-charts1.20.1031 of 3See more

rke2-cilium rke2-charts 1.20.103

1 of the 3 container images this version deploys carry CVE-2026-35352.

Container imageDigestPackageFixed in
quay.io/cilium/cilium:v1.20.1ae9ea21f7427
rust-coreutils@0.8.0-0ubuntu3
no fix listed

Open the chart page →

1,034
komgarubxkubeVerified publisher0.1.31 of 1See more

komga rubxkube 0.1.3

1 of the 1 container images this version deploys carry CVE-2026-35352.

Container imageDigestPackageFixed in
gotson/komga:1.26.36c2a967bbe9a
rust-coreutils@0.8.0-0ubuntu3
no fix listed

Open the chart page →

2,261
nadekobotryuunosukeds30.1.21 of 2See more

nadekobot ryuunosukeds3 0.1.2

1 of the 2 container images this version deploys carry CVE-2026-35352.

Container imageDigestPackageFixed in
library/ubuntu:latest2260313b31c8
rust-coreutils@0.8.0-0ubuntu3
no fix listed

Open the chart page →

8,619
photoprismschoolguys-helmcharts0.3.81 of 1See more

photoprism schoolguys-helmcharts 0.3.8

1 of the 1 container images this version deploys carry CVE-2026-35352.

Container imageDigestPackageFixed in
photoprism/photoprism:260601650c6ad5a651
rust-coreutils@0.8.0-0ubuntu3
no fix listed

Open the chart page →

10,348
bootzookasoftwaremillVerified publisher0.2.11 of 2See more

bootzooka softwaremill 0.2.1

1 of the 2 container images this version deploys carry CVE-2026-35352.

Container imageDigestPackageFixed in
softwaremill/bootzooka:latest845b5e8f8056
rust-coreutils@0.8.0-0ubuntu3
no fix listed

Open the chart page →

3,003
stresssudermanjr0.2.01 of 1See more

stress sudermanjr 0.2.0

1 of the 1 container images this version deploys carry CVE-2026-35352.

Container imageDigestPackageFixed in
library/ubuntu:latest2260313b31c8
rust-coreutils@0.8.0-0ubuntu3
no fix listed

Open the chart page →

694
tekton-stash-and-cachetekton-stash-and-cacheVerified publisher0.2.21 of 1See more

tekton-stash-and-cache tekton-stash-and-cache 0.2.2

1 of the 1 container images this version deploys carry CVE-2026-35352.

Container imageDigestPackageFixed in
quay.io/poundex/tekton-stash-and-cache:0.2.2e854423caa09
rust-coreutils@0.8.0-0ubuntu3
no fix listed

Open the chart page →

1,082

Container images carrying it

75 by charts deploying them

A fixed version is listed for 0 of the 1 affected package.

Container imageDigestPackageFixed inUsed by
ghcr.io/kubelauncher/kafka43e1085cd0a8
rust-coreutils@0.8.0-0ubuntu3
no fix listed
1
ghcr.io/kubelauncher/keycloakafe3bd73d7cf
rust-coreutils@0.8.0-0ubuntu3
no fix listed
1
ghcr.io/kubelauncher/kubectl7280594a2f18
rust-coreutils@0.8.0-0ubuntu3
no fix listed
1
ghcr.io/kubelauncher/mariadbe25056a6ec52
rust-coreutils@0.8.0-0ubuntu3
no fix listed
1
ghcr.io/kubelauncher/memcachedb599ca6b3ff3
rust-coreutils@0.8.0-0ubuntu3
no fix listed
1
ghcr.io/kubelauncher/mongodb9bc37ed78a8b
rust-coreutils@0.8.0-0ubuntu3
no fix listed
1
ghcr.io/kubelauncher/mysqle9609bd50416
rust-coreutils@0.8.0-0ubuntu3
no fix listed
1
ghcr.io/kubelauncher/postgresql1a27e11e5925
rust-coreutils@0.8.0-0ubuntu3
no fix listed
1
ghcr.io/kubelauncher/redisbcd8e9a6224f
rust-coreutils@0.8.0-0ubuntu3
no fix listed
1
ghcr.io/kubelauncher/zookeeper7826e9caa461
rust-coreutils@0.8.0-0ubuntu3
no fix listed
1
ghcr.io/maritimeconnectivity/identityregistry:latest5009fd419742
rust-coreutils@0.8.0-0ubuntu3
no fix listed
1
ghcr.io/netbox-community/netbox:v4.7.01685e91c61bb
rust-coreutils@0.8.0-0ubuntu3
no fix listed
1
ghcr.io/radar-base/managementportal/management-portal:3.0.0c1b37e821f72
rust-coreutils@0.8.0-0ubuntu3
no fix listed
1
ghcr.io/utkuozdemir/nvidia_gpu_exporter:1.5.0d75967a4dd72
rust-coreutils@0.8.0-0ubuntu3
no fix listed
1
public.ecr.aws/aktosecurity/akto-api-security-mini-runtime:latest5d55a742a2bc
rust-coreutils@0.8.0-0ubuntu3
no fix listed
1
public.ecr.aws/aktosecurity/akto-api-security-mini-runtime:latest8be3ed26f746
rust-coreutils@0.8.0-0ubuntu3
no fix listed
1
public.ecr.aws/aktosecurity/akto-api-security-mini-runtime:1.74.1_localf2e2d816ef82
rust-coreutils@0.8.0-0ubuntu3
no fix listed
1
public.ecr.aws/aktosecurity/akto-api-security-mini-testing:1.72.6_local43316f900242
rust-coreutils@0.8.0-0ubuntu3
no fix listed
1
public.ecr.aws/aktosecurity/akto-api-security-mini-testing:1.74.1_local75f00caa6f3f
rust-coreutils@0.8.0-0ubuntu3
no fix listed
1
public.ecr.aws/aktosecurity/akto-threat-detection:latest3f103ce347ce
rust-coreutils@0.8.0-0ubuntu3
no fix listed
1
public.ecr.aws/aktosecurity/akto-threat-detection:1.16.2a47eb6cc17ea
rust-coreutils@0.8.0-0ubuntu3
no fix listed
1
quay.io/argoproj/argocd:v3.5.10deb1a1c9176
rust-coreutils@0.8.0-0ubuntu3
no fix listed
1
quay.io/isindir/sops-secrets-operator:0.21.27bba7083dfa0
rust-coreutils@0.8.0-0ubuntu3
no fix listed
1
quay.io/poundex/tekton-stash-and-cache:0.2.2e854423caa09
rust-coreutils@0.8.0-0ubuntu3
no fix listed
1
registry.gitlab.com/dyff/workflows-aggregator:0.16.9b7984253b128
rust-coreutils@0.8.0-0ubuntu3
no fix listed
1

syft 1.42.1 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.