StackRadar

CVE-2026-35549

Medium

Advisory

Published 3 Apr 2026In the index since 5 Sept 2026
Severity
Medium
worst across findings
CVSS
6.5
base score, highest
EPSS
0.003
17th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
62
of 17,781 indexed, latest versions
Container images
45
deployed by those charts
Fix available
4 of 7
affected packages

The matching OSV records carry no description.

Carried by container images the latest versions of 62 of 17,781 indexed charts deploy, on 45 images.

Affected packageAffected versionsFixed inImages
mariadbdeb1:10.11.8-0ubuntu0.24.04.1, 1:10.11.14-0ubuntu0.24.04.1, 1:11.4.13+maria~ubu2404, 1:11.7.2+maria~ubu2404+7 more1:11.8.6-0+deb13u125
mariadbbitnami10.6.12-2, 10.6.12-3, 10.11.4-1, 11.2.6-0+7 more11.4.1012
mysql-clientbitnami10.6.11-1, 10.11.10-0, 12.0.2-011.4.103
MariaDBbitnami10.11.4, 11.3.2-511.4.102
mariadb-10.1deb1:10.1.47-0ubuntu0.18.04.1, 1:10.1.48-0ubuntu0.18.04.1no fix listed2
mariadb-10.6deb1:10.6.7-2ubuntu1, 1:10.6.28+maria~ubu2204no fix listed2
mariadb-10.3deb1:10.3.34-0ubuntu0.20.04.1no fix listed1
OSV records
BIT-mariadb-2026-35549BIT-mysql-client-2026-35549DEBIAN-CVE-2026-35549UBUNTU-CVE-2026-35549
Also known as
BIT-mariadb-min-2026-35549

Charts affected

62 by stars
ChartLatestAffected imagesRadar Score
open-vpnopenvpn0.0.11 of 1See more

open-vpn openvpn 0.0.1

1 of the 1 container images this version deploys carry CVE-2026-35549.

Container imageDigestPackageFixed in
ghcr.io/linuxserver/openvpn-as:version-2.8.6-916f8e7d-ubuntu184ee0764310e7
mariadb-10.1@1:10.1.47-0ubuntu0.18.04.1
no fix listed

Open the chart page →

15,592
vaultwardenpascaliskeVerified publisher2.0.01 of 1See more

vaultwarden pascaliske 2.0.0

1 of the 1 container images this version deploys carry CVE-2026-35549.

Container imageDigestPackageFixed in
ghcr.io/dani-garcia/vaultwarden:1.35.2d89a6d21e361
mariadb@1:11.8.3-0+deb13u1
1:11.8.6-0+deb13u1

Open the chart page →

3,408
matomopetbattle11.0.12 of 2See more

matomo petbattle 11.0.1

2 of the 2 container images this version deploys carry CVE-2026-35549.

Container imageDigestPackageFixed in
bitnamilegacy/mariadb:12.0.2-debian-12-r0888cdaae3cb9
mariadb@12.0.2-0
11.4.10
bitnamilegacy/matomo:5.3.2-debian-12-r13f02c000c54b1
mysql-client@12.0.2-0
11.4.10

Open the chart page →

11,061
mariadbpetersandor15.2.51 of 1See more

mariadb petersandor 15.2.5

1 of the 1 container images this version deploys carry CVE-2026-35549.

Container imageDigestPackageFixed in
bitnami/mariadb:11.7.216a7dae804fb
mariadb@11.7.2-0
11.4.10

Open the chart page →

2,873
rommromm-helm-chartVerified publisher1.5.51 of 3See more

romm romm-helm-chart 1.5.5

1 of the 3 container images this version deploys carry CVE-2026-35549.

Container imageDigestPackageFixed in
library/mariadb:112439dcd7d140
mariadb@1:11.8.9+maria~ubu2404
no fix listed

Open the chart page →

3,370
paperless-ngxrtomik-helm-chartsVerified publisher0.0.51 of 1See more

paperless-ngx rtomik-helm-charts 0.0.5

1 of the 1 container images this version deploys carry CVE-2026-35549.

Container imageDigestPackageFixed in
ghcr.io/paperless-ngx/paperless-ngx:2.20.357ad9565bff3
mariadb@1:11.8.3-0+deb13u1
1:11.8.6-0+deb13u1

Open the chart page →

10,605
transmissionryuunosukeds31.6.21 of 2See more

transmission ryuunosukeds3 1.6.2

1 of the 2 container images this version deploys carry CVE-2026-35549.

Container imageDigestPackageFixed in
library/python:3.9da5aee29682d
mariadb@1:11.8.3-0+deb13u1
1:11.8.6-0+deb13u1

Open the chart page →

9,534
mariadbsitepilot1.0.31 of 1See more

mariadb sitepilot 1.0.3

1 of the 1 container images this version deploys carry CVE-2026-35549.

Container imageDigestPackageFixed in
library/mariadb:10.692e50059ea0a
mariadb-10.6@1:10.6.28+maria~ubu2204
no fix listed

Open the chart page →

2,818
bugsinkvictorlane0.3.71 of 2See more

bugsink victorlane 0.3.7

1 of the 2 container images this version deploys carry CVE-2026-35549.

Container imageDigestPackageFixed in
library/mariadb:12.0-noble607835cd628b
mariadb@1:12.0.2+maria~ubu2404
no fix listed

Open the chart page →

4,054
wbaas-backupwbstack0.1.01 of 1See more

wbaas-backup wbstack 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-35549.

Container imageDigestPackageFixed in
ghcr.io/wmde/wbaas-backup:v0.1.78e6a9516eac0
mariadb-10.1@1:10.1.48-0ubuntu0.18.04.1
no fix listed

Open the chart page →

9,743
wordpress-alpinewordpress-alpine1.5.181 of 6See more

wordpress-alpine wordpress-alpine 1.5.18

1 of the 6 container images this version deploys carry CVE-2026-35549.

Container imageDigestPackageFixed in
library/mariadb:12.3.2628f228f0fd5
mariadb@1:12.3.2+maria~ubu2404
no fix listed

Open the chart page →

3,990
Wordpresswordpress-mariadb1.0.21 of 2See more

Wordpress wordpress-mariadb 1.0.2

1 of the 2 container images this version deploys carry CVE-2026-35549.

Container imageDigestPackageFixed in
library/mariadb:ltsdd9b303aed4f
mariadb@1:12.3.3+maria~ubu2404
no fix listed

Open the chart page →

5,560

Container images carrying it

45 by charts deploying them

A fixed version is listed for 4 of the 7 affected packages.

Container imageDigestPackageFixed inUsed by
library/mariadb:12.3.3:latest:ltsdd9b303aed4f
mariadb@1:12.3.3+maria~ubu2404
no fix listed
12
bitnamilegacy/mariadb:12.0.2-debian-12-r0888cdaae3cb9
mariadb@12.0.2-0
11.4.10
4
bitnamilegacy/mariadb:11.4.5-debian-12-r933ce23601fc9
mariadb@11.4.5-2
11.4.10
2
library/mariadb:12.0.2:12.0-noble607835cd628b
mariadb@1:12.0.2+maria~ubu2404
no fix listed
2
library/mariadb:11.4611a2fcc5fa7
mariadb@1:11.4.13+maria~ubu2404
no fix listed
2
library/mariadb:10.692e50059ea0a
mariadb-10.6@1:10.6.28+maria~ubu2204
no fix listed
2
library/mariadb:12.3.3ab1c3dd38194
mariadb@1:12.3.3+maria~ubu2404
no fix listed
2
yzhou442/equiz:latesta3f7ca69e28d
mysql-client@10.6.11-1
11.4.10
2
ghcr.io/linuxserver/openvpn-as:version-2.8.6-916f8e7d-ubuntu184ee0764310e7
mariadb-10.1@1:10.1.47-0ubuntu0.18.04.1
no fix listed
2
bitnamilegacy/grafana:11.4.0-debian-12-r0cb8ab5515676
mysql-client@10.11.10-0
11.4.10
1
bitnamilegacy/mariadb:10.6.12-debian-11-r1315edb5643b73
mariadb@10.6.12-2
11.4.10
1
bitnamilegacy/mariadb:11.3.2-debian-12-r9320c70dfd914
mariadb@11.3.2-5
MariaDB@11.3.2-5
11.4.10
11.4.10
1
bitnamilegacy/mariadb:11.2.6-debian-12-r0373c3c260571
mariadb@11.2.6-0
11.4.10
1
bitnamilegacy/mariadb:10.6.12-debian-11-r1678847062532a
mariadb@10.6.12-3
11.4.10
1
bitnamilegacy/mariadb:11.4.3-debian-12-r08b3778160e34
mariadb@11.4.3-0
11.4.10
1
bitnamilegacy/mariadb:11.4.5-debian-12-r128bc50a0961a7
mariadb@11.4.5-2
11.4.10
1
bitnamilegacy/mariadb:11.4.7-debian-12-r290dc6acb7b2e
mariadb@11.4.7-0
11.4.10
1
bitnamilegacy/mariadb:latestbbd4e17f1ef8
mariadb@11.8.2-0
11.4.10
1
bitnamilegacy/matomo:5.3.2-debian-12-r13f02c000c54b1
mysql-client@12.0.2-0
11.4.10
1
bitnami/mariadb:11.7.216a7dae804fb
mariadb@11.7.2-0
11.4.10
1
boky/postfix:5.1.0aafc77238423
mariadb@1:11.8.3-0+deb13u1
1:11.8.6-0+deb13u1
1
eclipseaerios/iota-messages-api:lateste7f5ba0bc64d
mariadb@1:11.8.3-0+deb13u1
1:11.8.6-0+deb13u1
1
library/mariadb:112439dcd7d140
mariadb@1:11.8.9+maria~ubu2404
no fix listed
1
library/mariadb:12.0.25b6a1eac15b8
mariadb@1:12.0.2+maria~ubu2404
no fix listed
1
library/mariadb:12.3.2628f228f0fd5
mariadb@1:12.3.2+maria~ubu2404
no fix listed
1
library/mariadb:12.3.2a02fe89cb597
mariadb@1:12.3.2+maria~ubu2404
no fix listed
1
library/mariadb:12.2.2b1cb255a9939
mariadb@1:12.2.2+maria~ubu2404
no fix listed
1
library/mariadb:11.7.2fcc7fcd7114a
mariadb@1:11.7.2+maria~ubu2404
no fix listed
1
library/python:3.9da5aee29682d
mariadb@1:11.8.3-0+deb13u1
1:11.8.6-0+deb13u1
1
mintproject/graphql-engine:305c0dbeba1878eafe348f21fc300fbfc017d9dc83aade2c1855
mariadb-10.3@1:10.3.34-0ubuntu0.20.04.1
no fix listed
1
netrisai/mariadb:10.11.4-debian-11-r460aa742a0b906
mariadb@10.11.4-1
MariaDB@10.11.4
11.4.10
11.4.10
1
openvpn/openvpn-as:latest2253c10ec652
mariadb@1:10.11.14-0ubuntu0.24.04.1
no fix listed
1
photoprism/photoprism:220629-jammy2954334adbda
mariadb-10.6@1:10.6.7-2ubuntu1
no fix listed
1
photoprism/photoprism:251130db16ee6b1ba3
mariadb@1:11.8.3-1build1
no fix listed
1
photoprism/photoprism:240711-cefc6fd632ca74
mariadb@1:10.11.8-0ubuntu0.24.04.1
no fix listed
1
sonroyaalmerol/docker-sogo:5.12.43f60f3abe990
mariadb@1:11.8.3-0+deb13u1
1:11.8.6-0+deb13u1
1
vaultwarden/server:1.35.443498a94b22f
mariadb@1:11.8.3-0+deb13u1
1:11.8.6-0+deb13u1
1
ghcr.io/cosmo-tech/cosmotech-copilot-api:latesta2be95de450c
mariadb@1:11.8.3-0+deb13u1
1:11.8.6-0+deb13u1
1
ghcr.io/dani-garcia/vaultwarden:1.35.2d89a6d21e361
mariadb@1:11.8.3-0+deb13u1
1:11.8.6-0+deb13u1
1
ghcr.io/dask/dask-kubernetes-operator:2026.3.03225d2bc6b3c
mariadb@1:11.8.3-0+deb13u1
1:11.8.6-0+deb13u1
1
ghcr.io/dfir-iris/iriswebapp_app:v2.4.26e59ebde55709
mariadb@1:11.8.3-0+deb13u1
1:11.8.6-0+deb13u1
1
ghcr.io/paperless-ngx/paperless-ngx:2.20.357ad9565bff3
mariadb@1:11.8.3-0+deb13u1
1:11.8.6-0+deb13u1
1
ghcr.io/paperless-ngx/paperless-ngx:2.20.5665f2f5cc548
mariadb@1:11.8.3-0+deb13u1
1:11.8.6-0+deb13u1
1
ghcr.io/wmde/wbaas-backup:v0.1.78e6a9516eac0
mariadb-10.1@1:10.1.48-0ubuntu0.18.04.1
no fix listed
1
registry.gitlab.com/crafty-controller/crafty-4:latest166a06f73d8c
mariadb@1:10.11.14-0ubuntu0.24.04.1
no fix listed
1

syft 1.42.1 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.