StackRadar

CVE-2026-3593

Critical

Advisory

Published 20 May 2026In the index since 5 Sept 2026
Severity
Critical
worst across findings
CVSS
9.8
base score, highest
EPSS
0.015
73rd percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
11
of 17,781 indexed, latest versions
Container images
11
deployed by those charts
Fix available
2 of 2
affected packages

The matching OSV records carry no description.

Carried by container images the latest versions of 11 of 17,781 indexed charts deploy, on 11 images.

Affected packageAffected versionsFixed inImages
bindapk9.20.13-r0, 9.20.16-r0, 9.20.18-r0, 9.20.20-r0+1 more9.20.23-r07
bind9deb1:9.20.11-1ubuntu2.1, 1:9.20.11-4, 1:9.20.15-1~deb13u1, 1:9.20.21-1~deb13u11:9.20.11-1ubuntu2.4, 1:9.20.23-1~deb13u14
OSV records
ALPINE-CVE-2026-3593DEBIAN-CVE-2026-3593UBUNTU-CVE-2026-3593
Also known as
USN-8293-1

Charts affected

11 by stars
ChartLatestAffected imagesRadar Score
maildocker-postfixVerified publisher5.1.01 of 1See more

mail docker-postfix 5.1.0

1 of the 1 container images this version deploys carry CVE-2026-3593.

Container imageDigestPackageFixed in
boky/postfix:5.1.0aafc77238423
bind9@1:9.20.15-1~deb13u1
1:9.20.23-1~deb13u1

Open the chart page →

5,366
coturnjaconiVerified publisher1.0.51 of 1See more

coturn jaconi 1.0.5

1 of the 1 container images this version deploys carry CVE-2026-3593.

Container imageDigestPackageFixed in
coturn/coturn:4.10.0-r1f4c2af06c3c5
bind9@1:9.20.21-1~deb13u1
1:9.20.23-1~deb13u1

Open the chart page →

2,901
unboundunbound-helmchartVerified publisher0.2.21 of 1See more

unbound unbound-helmchart 0.2.2

1 of the 1 container images this version deploys carry CVE-2026-3593.

Container imageDigestPackageFixed in
ghcr.io/pixelfederation/unbound:1.24.2_0fce820a03964
bind@9.20.20-r0
9.20.23-r0

Open the chart page →

1,494
home-assistantk8s-home-lab-repo16.3.11 of 1See more

home-assistant k8s-home-lab-repo 16.3.1

1 of the 1 container images this version deploys carry CVE-2026-3593.

Container imageDigestPackageFixed in
ghcr.io/home-operations/home-assistant:2026.3.1067e54e2e107
bind@9.20.18-r0
9.20.23-r0

Open the chart page →

4,634
cloudttycloudtty0.8.91 of 2See more

cloudtty cloudtty 0.8.9

1 of the 2 container images this version deploys carry CVE-2026-3593.

Container imageDigestPackageFixed in
ghcr.io/cloudtty/cloudshell:v0.8.900984ba0f0eb
bind@9.20.18-r0
9.20.23-r0

Open the chart page →

3,951
dnsbl-exporterluzillaVerified publisher0.5.01 of 2See more

dnsbl-exporter luzilla 0.5.0

1 of the 2 container images this version deploys carry CVE-2026-3593.

Container imageDigestPackageFixed in
ghcr.io/luzilla/unbound:v0.12.04fd8da9dc13c
bind@9.20.22-r0
9.20.23-r0

Open the chart page →

1,146
photoprismmmontesVerified publisher0.14.01 of 1See more

photoprism mmontes 0.14.0

1 of the 1 container images this version deploys carry CVE-2026-3593.

Container imageDigestPackageFixed in
photoprism/photoprism:251130db16ee6b1ba3
bind9@1:9.20.11-1ubuntu2.1
1:9.20.11-1ubuntu2.4

Open the chart page →

11,103
truecommanddjjudas21Verified publisher0.1.01 of 1See more

truecommand djjudas21 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-3593.

Container imageDigestPackageFixed in
ixsystems/truecommand:3.2.019c218455cd2
bind9@1:9.20.11-4
1:9.20.23-1~deb13u1

Open the chart page →

5,174
gridgain9gridgainVerified publisher1.1.101 of 2See more

gridgain9 gridgain 1.1.10

1 of the 2 container images this version deploys carry CVE-2026-3593.

Container imageDigestPackageFixed in
gridgain/gridgain9:9.1.1895018390077b
bind@9.20.18-r0
9.20.23-r0

Open the chart page →

3,199
cloudflaredpascaliskeVerified publisher3.0.01 of 1See more

cloudflared pascaliske 3.0.0

1 of the 1 container images this version deploys carry CVE-2026-3593.

Container imageDigestPackageFixed in
ghcr.io/crazy-max/cloudflared:2025.9.19b4e856d18f6
bind@9.20.13-r0
9.20.23-r0

Open the chart page →

2,028
home-assistantpascaliskeVerified publisher0.1.11 of 1See more

home-assistant pascaliske 0.1.1

1 of the 1 container images this version deploys carry CVE-2026-3593.

Container imageDigestPackageFixed in
ghcr.io/home-assistant/home-assistant:2025.12.59a5a3eb4a213
bind@9.20.16-r0
9.20.23-r0

Open the chart page →

4,749

Container images carrying it

11 by charts deploying them

A fixed version is listed for 2 of the 2 affected packages.

Container imageDigestPackageFixed inUsed by
boky/postfix:5.1.0aafc77238423
bind9@1:9.20.15-1~deb13u1
1:9.20.23-1~deb13u1
1
coturn/coturn:4.10.0-r1f4c2af06c3c5
bind9@1:9.20.21-1~deb13u1
1:9.20.23-1~deb13u1
1
gridgain/gridgain9:9.1.1895018390077b
bind@9.20.18-r0
9.20.23-r0
1
ixsystems/truecommand:3.2.019c218455cd2
bind9@1:9.20.11-4
1:9.20.23-1~deb13u1
1
photoprism/photoprism:251130db16ee6b1ba3
bind9@1:9.20.11-1ubuntu2.1
1:9.20.11-1ubuntu2.4
1
ghcr.io/cloudtty/cloudshell:v0.8.900984ba0f0eb
bind@9.20.18-r0
9.20.23-r0
1
ghcr.io/crazy-max/cloudflared:2025.9.19b4e856d18f6
bind@9.20.13-r0
9.20.23-r0
1
ghcr.io/home-assistant/home-assistant:2025.12.59a5a3eb4a213
bind@9.20.16-r0
9.20.23-r0
1
ghcr.io/home-operations/home-assistant:2026.3.1067e54e2e107
bind@9.20.18-r0
9.20.23-r0
1
ghcr.io/luzilla/unbound:v0.12.04fd8da9dc13c
bind@9.20.22-r0
9.20.23-r0
1
ghcr.io/pixelfederation/unbound:1.24.2_0fce820a03964
bind@9.20.20-r0
9.20.23-r0
1

syft 1.42.1 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.