StackRadar

CVE-2026-35388

Low

Advisory

Published 2 Apr 2026In the index since 5 Sept 2026
Severity
Low
worst across findings
CVSS
2.5
base score, highest
EPSS
0.001
3rd percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
242
of 17,787 indexed, latest versions
Container images
236
deployed by those charts
Fix available
1 of 1
affected package

The matching OSV records carry no description.

Carried by container images the latest versions of 242 of 17,787 indexed charts deploy, on 236 images.

Affected packageAffected versionsFixed inImages
opensshdeb1:6.6p1-2ubuntu2, 1:6.6p1-2ubuntu2.13, 1:7.2p2-4ubuntu2.2, 1:7.2p2-4ubuntu2.4+44 more1:8.9p1-3ubuntu0.15, 1:9.2p1-2+deb12u10, 1:9.6p1-3ubuntu13.16, 1:9.6p1-3ubuntu13.16+Fips1+1 more236
OSV records
DEBIAN-CVE-2026-35388UBUNTU-CVE-2026-35388
Also known as
USN-8222-1

Charts affected

242 by stars
ChartLatestAffected imagesRadar Score
airflowairflow-helmVerified publisher8.9.01 of 4See more

airflow airflow-helm 8.9.0

1 of the 4 container images this version deploys carry CVE-2026-35388.

Container imageDigestPackageFixed in
apache/airflow:2.8.4-python3.964e58748b6b9
openssh@1:9.2p1-2+deb12u2
1:9.2p1-2+deb12u10

Open the chart page →

11,372
difydoubanVerified publisher0.10.01 of 6See more

dify douban 0.10.0

1 of the 6 container images this version deploys carry CVE-2026-35388.

Container imageDigestPackageFixed in
langgenius/dify-plugin-daemon:0.5.1-local8269050f192e
openssh@1:9.6p1-3ubuntu13.14
1:9.6p1-3ubuntu13.16

Open the chart page →

19,497
difydify-helmVerified publisher0.38.01 of 11See more

dify dify-helm 0.38.0

1 of the 11 container images this version deploys carry CVE-2026-35388.

Container imageDigestPackageFixed in
langgenius/dify-plugin-daemon:0.6.3-local3c694329357b
openssh@1:9.6p1-3ubuntu13.16
1:9.6p1-3ubuntu13.16+Fips1

Open the chart page →

22,115
openprojectopenproject-helm-chartsOfficialVerified publisher13.11.01 of 5See more

openproject openproject-helm-charts 13.11.0

1 of the 5 container images this version deploys carry CVE-2026-35388.

Container imageDigestPackageFixed in
openproject/hocuspocus:release-338001b288dc1359dfb5
openssh@1:9.2p1-2+deb12u7
1:9.2p1-2+deb12u10

Open the chart page →

19,998
stacks-blockchain-apihirosystemsVerified publisher6.5.11 of 5See more

stacks-blockchain-api hirosystems 6.5.1

1 of the 5 container images this version deploys carry CVE-2026-35388.

Container imageDigestPackageFixed in
hirosystems/stacks-blockchain-api:8.13.29c98b23c1515
openssh@1:9.2p1-2+deb12u7
1:9.2p1-2+deb12u10

Open the chart page →

8,387
argocdnicklasfrahm-argocdVerified publisher0.3.01 of 2See more

argocd nicklasfrahm-argocd 0.3.0

1 of the 2 container images this version deploys carry CVE-2026-35388.

Container imageDigestPackageFixed in
quay.io/argoproj/argocd:v3.1.1a36ab0c0860c
openssh@1:9.6p1-3ubuntu13.13
1:9.6p1-3ubuntu13.16

Open the chart page →

5,278
stackstorm-hastackstormVerified publisher1.1.011 of 17See more

stackstorm-ha stackstorm 1.1.0

11 of the 17 container images this version deploys carry CVE-2026-35388.

Container imageDigestPackageFixed in
stackstorm/st2actionrunner:3.888235ba70cad
openssh@1:8.2p1-4ubuntu0.9
no fix listed
stackstorm/st2api:3.86f56d239d280
openssh@1:8.2p1-4ubuntu0.9
no fix listed
stackstorm/st2auth:3.833ecfda16608
openssh@1:8.2p1-4ubuntu0.9
no fix listed
stackstorm/st2garbagecollector:3.84e3f8c7ca52d
openssh@1:8.2p1-4ubuntu0.9
no fix listed
stackstorm/st2notifier:3.8f190a6212195
openssh@1:8.2p1-4ubuntu0.9
no fix listed
stackstorm/st2rulesengine:3.8259503496ff9
openssh@1:8.2p1-4ubuntu0.9
no fix listed
stackstorm/st2scheduler:3.8b1de2055c362
openssh@1:8.2p1-4ubuntu0.9
no fix listed
stackstorm/st2sensorcontainer:3.8b1a338f64773
openssh@1:8.2p1-4ubuntu0.9
no fix listed
stackstorm/st2stream:3.81c8904a3bf67
openssh@1:8.2p1-4ubuntu0.9
no fix listed
stackstorm/st2timersengine:3.81bf35bfaf00c
openssh@1:8.2p1-4ubuntu0.9
no fix listed
stackstorm/st2workflowengine:3.819fdfffdbba8
openssh@1:8.2p1-4ubuntu0.9
no fix listed

Open the chart page →

96,984
renterdartur9010Verified publisher1.4.41 of 2See more

renterd artur9010 1.4.4

1 of the 2 container images this version deploys carry CVE-2026-35388.

Container imageDigestPackageFixed in
artur9010/wait-for:v1.0.06b4de3ce8b0e
openssh@1:9.2p1-2+deb12u2
1:9.2p1-2+deb12u10

Open the chart page →

8,530
transmission-openvpnutkuozdemirVerified publisher2.5.01 of 1See more

transmission-openvpn utkuozdemir 2.5.0

1 of the 1 container images this version deploys carry CVE-2026-35388.

Container imageDigestPackageFixed in
haugene/transmission-openvpn:4.0059216cfae4b
openssh@1:8.2p1-4ubuntu0.3
no fix listed

Open the chart page →

11,453
devtron-operatordevtron0.23.31 of 11See more

devtron-operator devtron 0.23.3

1 of the 11 container images this version deploys carry CVE-2026-35388.

Container imageDigestPackageFixed in
quay.io/devtron/devtron-utils:dup-chart-repo-v1.1.095d6f0e05636
openssh@1:9.2p1-2+deb12u1
1:9.2p1-2+deb12u10

Open the chart page →

31,447
uffizzi-controlleruffizzi-controller2.4.61 of 11See more

uffizzi-controller uffizzi-controller 2.4.6

1 of the 11 container images this version deploys carry CVE-2026-35388.

Container imageDigestPackageFixed in
uffizzi/controller:latest0344805f267b
openssh@1:9.2p1-2+deb12u2
1:9.2p1-2+deb12u10

Open the chart page →

14,266
seafiledatamateVerified publisher0.6.01 of 6See more

seafile datamate 0.6.0

1 of the 6 container images this version deploys carry CVE-2026-35388.

Container imageDigestPackageFixed in
datamate/seafile-professional:11.0.202dd66b722464
openssh@1:8.9p1-3ubuntu0.13
1:8.9p1-3ubuntu0.15

Open the chart page →

27,358
hertzbeathertzbeatOfficialVerified publisher1.8.12 of 4See more

hertzbeat hertzbeat 1.8.1

2 of the 4 container images this version deploys carry CVE-2026-35388.

Container imageDigestPackageFixed in
apache/hertzbeat:1.8.075d48a62748f
openssh@1:9.6p1-3ubuntu13.14
1:9.6p1-3ubuntu13.16
apache/hertzbeat-collector:1.8.0a2bab1be574c
openssh@1:9.6p1-3ubuntu13.14
1:9.6p1-3ubuntu13.16

Open the chart page →

14,109
kubeflowkubeflow1.6.21 of 45See more

kubeflow kubeflow 1.6.2

1 of the 45 container images this version deploys carry CVE-2026-35388.

Container imageDigestPackageFixed in
library/python:3.7eedf63967cdb
openssh@1:9.2p1-2
1:9.2p1-2+deb12u10

Open the chart page →

97,040
uffizzi-appuffizzi-app1.3.01 of 14See more

uffizzi-app uffizzi-app 1.3.0

1 of the 14 container images this version deploys carry CVE-2026-35388.

Container imageDigestPackageFixed in
uffizzi/controller:latest0344805f267b
openssh@1:9.2p1-2+deb12u2
1:9.2p1-2+deb12u10

Open the chart page →

19,363
code-serveralekcVerified publisher0.1.11 of 1See more

code-server alekc 0.1.1

1 of the 1 container images this version deploys carry CVE-2026-35388.

Container imageDigestPackageFixed in
linuxserver/code-server:4.10.1a5e43a05ae79
openssh@1:8.9p1-3ubuntu0.1
1:8.9p1-3ubuntu0.15

Open the chart page →

8,251
cosmocosmo-platformOfficialVerified publisher0.20.01 of 10See more

cosmo cosmo-platform 0.20.0

1 of the 10 container images this version deploys carry CVE-2026-35388.

Container imageDigestPackageFixed in
ghcr.io/wundergraph/cosmo/otelcollector:0.18.15a6fe78d4d15
openssh@1:9.2p1-2+deb12u4
1:9.2p1-2+deb12u10

Open the chart page →

27,984
dask-kubernetes-operatordask2026.3.01 of 1See more

dask-kubernetes-operator dask 2026.3.0

1 of the 1 container images this version deploys carry CVE-2026-35388.

Container imageDigestPackageFixed in
ghcr.io/dask/dask-kubernetes-operator:2026.3.03225d2bc6b3c
openssh@1:10.0p1-7
1:10.0p1-7+deb13u3

Open the chart page →

9,348
calibregeek-cookbookVerified publisher5.4.21 of 1See more

calibre geek-cookbook 5.4.2

1 of the 1 container images this version deploys carry CVE-2026-35388.

Container imageDigestPackageFixed in
linuxserver/calibre:version-v5.21.0a847b5b2d860
openssh@1:7.6p1-4ubuntu0.3
no fix listed

Open the chart page →

22,812
coreinstill-aiOfficialVerified publisher0.1.753 of 15See more

core instill-ai 0.1.75

3 of the 15 container images this version deploys carry CVE-2026-35388.

Container imageDigestPackageFixed in
instill/artifact-backend:b28766ac4a393e601ed
openssh@1:10.0p1-7
1:10.0p1-7+deb13u3
instill/mgmt-backend:d0933d4ebe12f77a3f9
openssh@1:10.0p1-7
1:10.0p1-7+deb13u3
instill/model-backend:611f0f2e980125e5ba5
openssh@1:10.0p1-7
1:10.0p1-7+deb13u3

Open the chart page →

30,920
kubeservice-lxcfs-webhookkubservice-chartsVerified publisher1.6.01 of 6See more

kubeservice-lxcfs-webhook kubservice-charts 1.6.0

1 of the 6 container images this version deploys carry CVE-2026-35388.

Container imageDigestPackageFixed in
dongjiang1989/lxcfs:v6.0.34bf9ae391948
openssh@1:8.2p1-4ubuntu0.13
no fix listed

Open the chart page →

11,630
oesopsmxVerified publisher4.0.321 of 25See more

oes opsmx 4.0.32

1 of the 25 container images this version deploys carry CVE-2026-35388.

Container imageDigestPackageFixed in
quay.io/opsmxpublic/spin-sample-pipeline:v1.0.1c6a934439421
openssh@1:7.2p2-4ubuntu2.10
no fix listed

Open the chart page →

107,899
nominatimrobjuz6.4.11 of 4See more

nominatim robjuz 6.4.1

1 of the 4 container images this version deploys carry CVE-2026-35388.

Container imageDigestPackageFixed in
mediagis/nominatim:5.3.27923a8e67197
openssh@1:9.6p1-3ubuntu13.16
1:9.6p1-3ubuntu13.16+Fips1

Open the chart page →

8,760
argocdtwomartensVerified publisher0.1.11 of 3See more

argocd twomartens 0.1.1

1 of the 3 container images this version deploys carry CVE-2026-35388.

Container imageDigestPackageFixed in
quay.io/argoproj/argocd:v2.8.6acaf37352569
openssh@1:8.9p1-3ubuntu0.4
1:8.9p1-3ubuntu0.15

Open the chart page →

10,355
clearml-agentallegroaiVerified publisher5.3.31 of 1See more

clearml-agent allegroai 5.3.3

1 of the 1 container images this version deploys carry CVE-2026-35388.

Container imageDigestPackageFixed in
allegroai/clearml-agent-k8s-base:1.24-21772827a01bb5
openssh@1:7.6p1-4ubuntu0.7
no fix listed

Open the chart page →

12,061
apache-rangerapache-ranger0.1.01 of 2See more

apache-ranger apache-ranger 0.1.0

1 of the 2 container images this version deploys carry CVE-2026-35388.

Container imageDigestPackageFixed in
apache/ranger:2.7.076c176e8a0e4
openssh@1:8.9p1-3ubuntu0.13
1:8.9p1-3ubuntu0.15

Open the chart page →

7,790
dltbrokerassist-iot-distributed-broker0.2.02 of 9See more

dltbroker assist-iot-distributed-broker 0.2.0

2 of the 9 container images this version deploys carry CVE-2026-35388.

Container imageDigestPackageFixed in
hyperledger/fabric-ca-tools:latest4ce6f43ded2e
openssh@1:7.2p2-4ubuntu2.4
no fix listed
hyperledger/fabric-couchdb:0.4.15f6c724592abf
openssh@1:7.2p2-4ubuntu2.8
no fix listed

Open the chart page →

77,821
dltloggingassist-iot-logging-auditing0.2.02 of 9See more

dltlogging assist-iot-logging-auditing 0.2.0

2 of the 9 container images this version deploys carry CVE-2026-35388.

Container imageDigestPackageFixed in
hyperledger/fabric-ca-tools:latest4ce6f43ded2e
openssh@1:7.2p2-4ubuntu2.4
no fix listed
hyperledger/fabric-couchdb:0.4.15f6c724592abf
openssh@1:7.2p2-4ubuntu2.8
no fix listed

Open the chart page →

77,802
aramid-indexerbiatec-repoVerified publisher3.9.01 of 5See more

aramid-indexer biatec-repo 3.9.0

1 of the 5 container images this version deploys carry CVE-2026-35388.

Container imageDigestPackageFixed in
scholtz2/aramid-algo-follow-node:v4.3.0-stable1ec63eca86b6
openssh@1:9.6p1-3ubuntu13.14
1:9.6p1-3ubuntu13.16

Open the chart page →

13,513
aramid-participationbiatec-repoVerified publisher4.4.11 of 1See more

aramid-participation biatec-repo 4.4.1

1 of the 1 container images this version deploys carry CVE-2026-35388.

Container imageDigestPackageFixed in
scholtz2/algorand-participation-aramidmain-extended:4.4.1-stablef12ce1cfb72e
openssh@1:8.9p1-3ubuntu0.10
1:8.9p1-3ubuntu0.15

Open the chart page →

7,239
aramid-relaybiatec-repoVerified publisher4.4.11 of 1See more

aramid-relay biatec-repo 4.4.1

1 of the 1 container images this version deploys carry CVE-2026-35388.

Container imageDigestPackageFixed in
scholtz2/aramid-algo-node:v4.4.1-stable70263d8fab5b
openssh@1:9.6p1-3ubuntu13.14
1:9.6p1-3ubuntu13.16

Open the chart page →

5,108
voimain-participationbiatec-repoVerified publisher4.4.11 of 1See more

voimain-participation biatec-repo 4.4.1

1 of the 1 container images this version deploys carry CVE-2026-35388.

Container imageDigestPackageFixed in
scholtz2/algorand-participation-voimain-extended:4.4.1-stable64966de56d9f
openssh@1:8.9p1-3ubuntu0.10
1:8.9p1-3ubuntu0.15

Open the chart page →

7,239
cluster-setupcluster-setup1.5.01 of 8See more

cluster-setup cluster-setup 1.5.0

1 of the 8 container images this version deploys carry CVE-2026-35388.

Container imageDigestPackageFixed in
quay.io/argoproj/argocd:v3.0.395b5cf7ba6fe
openssh@1:9.6p1-3ubuntu13.11
1:9.6p1-3ubuntu13.16

Open the chart page →

10,076
cosmotech-copilot-apicosmotech-apiVerified publisher0.1.11 of 1See more

cosmotech-copilot-api cosmotech-api 0.1.1

1 of the 1 container images this version deploys carry CVE-2026-35388.

Container imageDigestPackageFixed in
ghcr.io/cosmo-tech/cosmotech-copilot-api:latesta2be95de450c
openssh@1:10.0p1-7
1:10.0p1-7+deb13u3

Open the chart page →

11,236
powershelluniversaldigitalhubVerified publisher0.1.21 of 1See more

powershelluniversal digitalhub 0.1.2

1 of the 1 container images this version deploys carry CVE-2026-35388.

Container imageDigestPackageFixed in
ironmansoftware/universal:3.3.1-ubuntu-20.041943c73cce31
openssh@1:8.2p1-4ubuntu0.5
no fix listed

Open the chart page →

6,978
seafiledr300481Verified publisher0.12.11 of 1See more

seafile dr300481 0.12.1

1 of the 1 container images this version deploys carry CVE-2026-35388.

Container imageDigestPackageFixed in
seafileltd/seafile-mc:11.0.12d0c66e4621bd
openssh@1:8.9p1-3ubuntu0.10
1:8.9p1-3ubuntu0.15

Open the chart page →

10,884
flink-operatorflink-operator0.1.11 of 2See more

flink-operator flink-operator 0.1.1

1 of the 2 container images this version deploys carry CVE-2026-35388.

Container imageDigestPackageFixed in
gcr.io/flink-operator/deployer:webhook-cert809338a69bd5
openssh@1:7.6p1-4ubuntu0.3
no fix listed

Open the chart page →

12,914
homebridgegeek-cookbookVerified publisher5.3.21 of 1See more

homebridge geek-cookbook 5.3.2

1 of the 1 container images this version deploys carry CVE-2026-35388.

Container imageDigestPackageFixed in
ghcr.io/oznu/homebridge:2022-07-08ff2af53897e7
openssh@1:8.2p1-4ubuntu0.5
no fix listed

Open the chart page →

15,717
tdarrgeek-cookbookVerified publisher4.6.21 of 2See more

tdarr geek-cookbook 4.6.2

1 of the 2 container images this version deploys carry CVE-2026-35388.

Container imageDigestPackageFixed in
haveagitgat/tdarr:2.00.181256348872ce
openssh@1:8.2p1-4ubuntu0.4
no fix listed

Open the chart page →

31,178
valheimgeek-cookbookVerified publisher4.4.21 of 1See more

valheim geek-cookbook 4.4.2

1 of the 1 container images this version deploys carry CVE-2026-35388.

Container imageDigestPackageFixed in
ghcr.io/lloesche/valheim-server:latest20fde516ce31
openssh@1:10.0p1-7+deb13u1
1:10.0p1-7+deb13u3

Open the chart page →

4,893
IMgrycapOfficialVerified publisher1.8.01 of 3See more

IM grycap 1.8.0

1 of the 3 container images this version deploys carry CVE-2026-35388.

Container imageDigestPackageFixed in
ghcr.io/grycap/im:latest06a16d4f279f
openssh@1:9.6p1-3ubuntu13.14
1:9.6p1-3ubuntu13.16

Open the chart page →

4,180
castopodh2mVerified publisher1.12.101 of 3See more

castopod h2m 1.12.10

1 of the 3 container images this version deploys carry CVE-2026-35388.

Container imageDigestPackageFixed in
castopod/castopod:1.12.101fd37280cbb2
openssh@1:9.2p1-2+deb12u3
1:9.2p1-2+deb12u10

Open the chart page →

10,106
helmuphelmupVerified publisher0.1.02 of 3See more

helmup helmup 0.1.0

2 of the 3 container images this version deploys carry CVE-2026-35388.

Container imageDigestPackageFixed in
sirrend/helmup-engine:0.1.13699e79e3d4e2
openssh@1:9.2p1-2+deb12u3
1:9.2p1-2+deb12u10
sirrend/helmup-github-scraper:0.1.47ca688c7abf5
openssh@1:9.2p1-2+deb12u3
1:9.2p1-2+deb12u10

Open the chart page →

16,532
huehue1.0.31 of 3See more

hue hue 1.0.3

1 of the 3 container images this version deploys carry CVE-2026-35388.

Container imageDigestPackageFixed in
gethue/hue:latest7d5c1b9f8a79
openssh@1:8.9p1-3ubuntu0.13
1:8.9p1-3ubuntu0.15

Open the chart page →

12,461
iris-webappiris-webapp0.2.41 of 2See more

iris-webapp iris-webapp 0.2.4

1 of the 2 container images this version deploys carry CVE-2026-35388.

Container imageDigestPackageFixed in
ghcr.io/dfir-iris/iriswebapp_app:v2.4.26e59ebde55709
openssh@1:10.0p1-7
1:10.0p1-7+deb13u3

Open the chart page →

11,794
jenkinsjkimVerified publisher5.5.141 of 2See more

jenkins jkim 5.5.14

1 of the 2 container images this version deploys carry CVE-2026-35388.

Container imageDigestPackageFixed in
jenkins/jenkins:2.462.2-jdk1795313257a8cd
openssh@1:9.2p1-2+deb12u3
1:9.2p1-2+deb12u10

Open the chart page →

7,393
kdiffkdiff-snapshotsVerified publisher0.0.2031 of 2See more

kdiff kdiff-snapshots 0.0.203

1 of the 2 container images this version deploys carry CVE-2026-35388.

Container imageDigestPackageFixed in
ghcr.io/oguzhan-yilmaz/kdiff-snapshots:0.0.2035bc5ca66d55a
openssh@1:9.2p1-2+deb12u7
1:9.2p1-2+deb12u10

Open the chart page →

5,515
kdiff-snapshotskdiff-snapshotsVerified publisher0.0.551 of 1See more

kdiff-snapshots kdiff-snapshots 0.0.55

1 of the 1 container images this version deploys carry CVE-2026-35388.

Container imageDigestPackageFixed in
ghcr.io/oguzhan-yilmaz/kdiff-snapshots:0.0.55d7f93d2182fe
openssh@1:9.2p1-2+deb12u6
1:9.2p1-2+deb12u10

Open the chart page →

5,795
kubefarmkvaps0.13.41 of 6See more

kubefarm kvaps 0.13.4

1 of the 6 container images this version deploys carry CVE-2026-35388.

Container imageDigestPackageFixed in
ghcr.io/kvaps/kubefarm-ltsp:v0.13.424efef013a53
openssh@1:8.2p1-4ubuntu0.4
no fix listed

Open the chart page →

12,477
opennebulakvaps2.1.15 of 9See more

opennebula kvaps 2.1.1

5 of the 9 container images this version deploys carry CVE-2026-35388.

Container imageDigestPackageFixed in
ghcr.io/kvaps/opennebula:v5.12.0.4-1e28e0e7de11b
openssh@1:8.2p1-4ubuntu0.2
no fix listed
ghcr.io/kvaps/opennebula-exporter:v5.12.0.401563adc95fd
openssh@1:8.2p1-4ubuntu0.2
no fix listed
ghcr.io/kvaps/opennebula-exporter:v5.12.0.4-12b92df1143b9
openssh@1:8.2p1-4ubuntu0.2
no fix listed
ghcr.io/kvaps/opennebula-flow:v5.12.0.4-1600221f0f43f
openssh@1:8.2p1-4ubuntu0.2
no fix listed
ghcr.io/kvaps/opennebula-gate:v5.12.0.4-1a85e03d8bc1d
openssh@1:8.2p1-4ubuntu0.2
no fix listed

Open the chart page →

114,025

Container images carrying it

236 by charts deploying them

A fixed version is listed for 1 of the 1 affected package.

Container imageDigestPackageFixed inUsed by
socialmediamacroscope/preprocessing:0.1.3ca863306314b
openssh@1:9.2p1-2
1:9.2p1-2+deb12u10
1
socialmediamacroscope/topic_modeling:0.1.3fa490acac2f8
openssh@1:9.2p1-2
1:9.2p1-2+deb12u10
1
stackstorm/st2actionrunner:3.888235ba70cad
openssh@1:8.2p1-4ubuntu0.9
no fix listed
1
stackstorm/st2api:3.86f56d239d280
openssh@1:8.2p1-4ubuntu0.9
no fix listed
1
stackstorm/st2auth:3.833ecfda16608
openssh@1:8.2p1-4ubuntu0.9
no fix listed
1
stackstorm/st2garbagecollector:3.84e3f8c7ca52d
openssh@1:8.2p1-4ubuntu0.9
no fix listed
1
stackstorm/st2notifier:3.8f190a6212195
openssh@1:8.2p1-4ubuntu0.9
no fix listed
1
stackstorm/st2rulesengine:3.8259503496ff9
openssh@1:8.2p1-4ubuntu0.9
no fix listed
1
stackstorm/st2scheduler:3.8b1de2055c362
openssh@1:8.2p1-4ubuntu0.9
no fix listed
1
stackstorm/st2sensorcontainer:3.8b1a338f64773
openssh@1:8.2p1-4ubuntu0.9
no fix listed
1
stackstorm/st2stream:3.81c8904a3bf67
openssh@1:8.2p1-4ubuntu0.9
no fix listed
1
stackstorm/st2timersengine:3.81bf35bfaf00c
openssh@1:8.2p1-4ubuntu0.9
no fix listed
1
stackstorm/st2workflowengine:3.819fdfffdbba8
openssh@1:8.2p1-4ubuntu0.9
no fix listed
1
statcan/ckan:2.93921305425b8
openssh@1:8.2p1-4ubuntu0.2
no fix listed
1
substratusai/verba:v0.4.0-baseURL261695be635eb
openssh@1:9.2p1-2+deb12u2
1:9.2p1-2+deb12u10
1
svtechnmaa/svtech_debuger:v1.0.3a934ffd63d25
openssh@1:8.9p1-3ubuntu0.7
1:8.9p1-3ubuntu0.15
1
svtechnmaa/svtech_rundeck:v1.2.26e368ace0977
openssh@1:8.2p1-4ubuntu0.7
no fix listed
1
sysnet4admin/colosseum-cms:loge74b43c7f492
openssh@1:9.2p1-2+deb12u6
1:9.2p1-2+deb12u10
1
sysnet4admin/colosseum-prm:log5802bfcd7fed
openssh@1:9.2p1-2+deb12u6
1:9.2p1-2+deb12u10
1
teknas09/bird-pod:latest12a1fa85c4aa
openssh@1:9.2p1-2+deb12u2
1:9.2p1-2+deb12u10
1
theradius/loggia:0.463ba348546ec
openssh@1:9.2p1-2+deb12u2
1:9.2p1-2+deb12u10
1
thongngo3301/stakefish:latesta341af5976e3
openssh@1:9.2p1-2
1:9.2p1-2+deb12u10
1
treskon/portrait-web-setup:DEV-latesta475d80e4ecf
openssh@1:9.2p1-2+deb12u5
1:9.2p1-2+deb12u10
1
unitycatalog/unitycatalog-ui:main-aadc6fc3a688197b218
openssh@1:9.2p1-2+deb12u6
1:9.2p1-2+deb12u10
1
vlebediantsev/notes-admin-front:latest007c6670ff48
openssh@1:9.2p1-2
1:9.2p1-2+deb12u10
1
vlebediantsev/notes-project-front:latest945675fd2636
openssh@1:9.2p1-2
1:9.2p1-2+deb12u10
1
vlebediantsev/registration-ms-front-app-host:latest54f69d116c50
openssh@1:9.2p1-2
1:9.2p1-2+deb12u10
1
voltha/voltha-cli:1.6.0c4e41e92f046
openssh@1:7.2p2-4ubuntu2.6
no fix listed
1
workadventure/playwright-synthetic-monitoring:main92b664c2a06f
openssh@1:8.9p1-3ubuntu0.10
1:8.9p1-3ubuntu0.15
1
xom4ekp2p/infini-route-attestators-public-mainnet-attester:latestd0e0aa238b02
openssh@1:9.2p1-2+deb12u3
1:9.2p1-2+deb12u10
1
xom4ekp2p/infini-route-attestators-public-mainnet-avs-webapi:latest2745b5fd8785
openssh@1:9.2p1-2+deb12u3
1:9.2p1-2+deb12u10
1
gcr.io/flink-operator/deployer:webhook-cert809338a69bd5
openssh@1:7.6p1-4ubuntu0.3
no fix listed
1
gcr.io/ml-pipeline/metadata-writer:2.3.09bcfd2abc361
openssh@1:9.2p1-2+deb12u3
1:9.2p1-2+deb12u10
1
ghcr.io/astriaorg/astrotrek:0.1.05889bea38e56
openssh@1:9.2p1-2+deb12u3
1:9.2p1-2+deb12u10
1
ghcr.io/brittonhayes/arma-reforger:latest6fde1edc0983
openssh@1:8.2p1-4ubuntu0.5
no fix listed
1
ghcr.io/browserless/chromium:v2.43.0853e6f105b51
openssh@1:9.6p1-3ubuntu13.14
1:9.6p1-3ubuntu13.16
1
ghcr.io/camptocamp/tetragon-policy-builder:master0e99f12bb040
openssh@1:9.2p1-2+deb12u5
1:9.2p1-2+deb12u10
1
ghcr.io/cfi2017/opencve-scheduler:3.0.08d943799621b
openssh@1:9.2p1-2+deb12u3
1:9.2p1-2+deb12u10
1
ghcr.io/cosmo-tech/cosmotech-copilot-api:latesta2be95de450c
openssh@1:10.0p1-7
1:10.0p1-7+deb13u3
1
ghcr.io/cosmo-workspace/dev-code-server:v0.0.316fda01ae58a
openssh@1:9.2p1-2+deb12u5
1:9.2p1-2+deb12u10
1
ghcr.io/dask/dask-kubernetes-operator:2026.3.03225d2bc6b3c
openssh@1:10.0p1-7
1:10.0p1-7+deb13u3
1
ghcr.io/dfir-iris/iriswebapp_app:v2.4.26e59ebde55709
openssh@1:10.0p1-7
1:10.0p1-7+deb13u3
1
ghcr.io/drewburr-labs/mum-discord-bot:3.1.26e82914e1051
openssh@1:9.2p1-2+deb12u1
1:9.2p1-2+deb12u10
1
ghcr.io/esphome/esphome:2026.4.078a82d810709
openssh@1:9.2p1-2+deb12u5
1:9.2p1-2+deb12u10
1
ghcr.io/graphprotocol/availability-oracle:sha-28312fd472a25038957
openssh@1:9.2p1-2+deb12u3
1:9.2p1-2+deb12u10
1
ghcr.io/grycap/im:latest06a16d4f279f
openssh@1:9.6p1-3ubuntu13.14
1:9.6p1-3ubuntu13.16
1
ghcr.io/haveagitgat/tdarr:2.00.18.23fbe4c29d14c
openssh@1:8.2p1-4ubuntu0.5
no fix listed
1
ghcr.io/htunn/ansible-inspec:0.2.12cd25a5cc3f1b
openssh@1:10.0p1-7
1:10.0p1-7+deb13u3
1
ghcr.io/juicerescue/juicepassproxy:0.5.1984dc4f19162
openssh@1:9.2p1-2+deb12u5
1:9.2p1-2+deb12u10
1
ghcr.io/kubiyabot/agent-manager:v0.4.13757bdd779345
openssh@1:10.0p1-7
1:10.0p1-7+deb13u3
1

syft 1.42.1 · advisories as of 15 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.