StackRadar

CVE-2026-39155

Medium

Advisory

Published 23 Jul 2026In the index since 6 Sept 2026
Severity
Medium
worst across findings
CVSS
6.5
base score, highest
EPSS
0.002
5th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
30
of 17,781 indexed, latest versions
Container images
32
deployed by those charts
Fix available
None
affected package

The matching OSV records carry no description.

Carried by container images the latest versions of 30 of 17,781 indexed charts deploy, on 32 images.

Affected packageAffected versionsFixed inImages
knotdeb2.1.1-1build1, 2.6.5-3, 2.7.8-1, 3.1.6-1ubuntu1+2 moreno fix listed32
OSV records
DEBIAN-CVE-2026-39155UBUNTU-CVE-2026-39155

Charts affected

30 by stars
ChartLatestAffected imagesRadar Score
istiocloudposse1.1.02 of 8See more

istio cloudposse 1.1.0

2 of the 8 container images this version deploys carry CVE-2026-39155.

Container imageDigestPackageFixed in
gcr.io/istio-release/pilot:release-1.0-latest-daily5ea7b7f3632a
knot@2.1.1-1build1
no fix listed
gcr.io/istio-release/proxyv2:release-1.0-latest-daily8f9ff98fdbef
knot@2.1.1-1build1
no fix listed

Open the chart page →

23,964
istio-operatorwiremindVerified publisher1.18.21 of 1See more

istio-operator wiremind 1.18.2

1 of the 1 container images this version deploys carry CVE-2026-39155.

Container imageDigestPackageFixed in
istio/operator:1.18.270f9d1fe5fff
knot@3.1.6-1ubuntu1
no fix listed

Open the chart page →

5,630
kubeflowkubeflow1.6.22 of 45See more

kubeflow kubeflow 1.6.2

2 of the 45 container images this version deploys carry CVE-2026-39155.

Container imageDigestPackageFixed in
istio/proxyv2:1.9.687a9db561d2e
knot@2.6.5-3
no fix listed
istio/proxyv2:1.14.1df69c1a7af7c
knot@2.7.8-1
no fix listed

Open the chart page →

96,941
htnn-controllerhtnnVerified publisher0.5.01 of 1See more

htnn-controller htnn 0.5.0

1 of the 1 container images this version deploys carry CVE-2026-39155.

Container imageDigestPackageFixed in
ghcr.io/mosn/htnn-controller:v0.3.1c379e66246be
knot@3.1.6-1ubuntu1
no fix listed

Open the chart page →

4,300
cniistio1.10.31 of 1See more

cni istio 1.10.3

1 of the 1 container images this version deploys carry CVE-2026-39155.

Container imageDigestPackageFixed in
istio/install-cni:1.10.32232f365aed6
knot@2.6.5-3
no fix listed

Open the chart page →

10,400
discoveryistio1.10.31 of 1See more

discovery istio 1.10.3

1 of the 1 container images this version deploys carry CVE-2026-39155.

Container imageDigestPackageFixed in
istio/pilot:1.10.3e7e110a421c2
knot@2.6.5-3
no fix listed

Open the chart page →

10,475
egressistio1.10.31 of 1See more

egress istio 1.10.3

1 of the 1 container images this version deploys carry CVE-2026-39155.

Container imageDigestPackageFixed in
istio/proxyv2:1.10.3a78b7a165744
knot@2.6.5-3
no fix listed

Open the chart page →

10,421
ingressistio1.10.31 of 1See more

ingress istio 1.10.3

1 of the 1 container images this version deploys carry CVE-2026-39155.

Container imageDigestPackageFixed in
istio/proxyv2:1.10.3a78b7a165744
knot@2.6.5-3
no fix listed

Open the chart page →

10,421
operatoristio1.10.31 of 1See more

operator istio 1.10.3

1 of the 1 container images this version deploys carry CVE-2026-39155.

Container imageDigestPackageFixed in
istio/operator:1.10.3655eefa11c84
knot@2.6.5-3
no fix listed

Open the chart page →

10,701
knot-resolverknot-resolverVerified publisher1.0.51 of 1See more

knot-resolver knot-resolver 1.0.5

1 of the 1 container images this version deploys carry CVE-2026-39155.

Container imageDigestPackageFixed in
cznic/knot-resolver:v6.4.2fe71c5214fdc
knot@3.5.6-cznic.1~trixie
no fix listed

Open the chart page →

2,049
stornxstornxVerified publisher1.1.11 of 9See more

stornx stornx 1.1.1

1 of the 9 container images this version deploys carry CVE-2026-39155.

Container imageDigestPackageFixed in
istio/pilot:1.29.1f8b0e412ac4a
knot@3.3.4-1.1build2
no fix listed

Open the chart page →

11,574
istio-discoveryaveshaVerified publisher1.16.01 of 1See more

istio-discovery avesha 1.16.0

1 of the 1 container images this version deploys carry CVE-2026-39155.

Container imageDigestPackageFixed in
istio/pilot:1.16.0ac0284d75ec9
knot@3.1.6-1ubuntu1
no fix listed

Open the chart page →

6,908
eg-edge-stackdatawire0.0.11 of 7See more

eg-edge-stack datawire 0.0.1

1 of the 7 container images this version deploys carry CVE-2026-39155.

Container imageDigestPackageFixed in
istio/kubectl:1.5.10dbb7726d1bf0
knot@2.6.5-3
no fix listed

Open the chart page →

10,666
istiogetindataVerified publisher1.11.12 of 2See more

istio getindata 1.11.1

2 of the 2 container images this version deploys carry CVE-2026-39155.

Container imageDigestPackageFixed in
gcr.io/istio-release/pilot:1.11.1c552478f8f11
knot@2.7.8-1
no fix listed
gcr.io/istio-release/proxyv2:1.11.19538fabe49fd
knot@2.7.8-1
no fix listed

Open the chart page →

16,756
knativegitlabVerified publisher0.10.03 of 10See more

knative gitlab 0.10.0

3 of the 10 container images this version deploys carry CVE-2026-39155.

Container imageDigestPackageFixed in
istio/node-agent-k8s:1.2.9268ab879ea51
knot@2.1.1-1build1
no fix listed
istio/pilot:1.2.9c09319753454
knot@2.1.1-1build1
no fix listed
istio/proxyv2:1.2.90c78be035e98
knot@2.1.1-1build1
no fix listed

Open the chart page →

36,102
istio-aws-private-ingress-customizedistio-aws-private-ingress-customized1.0.01 of 1See more

istio-aws-private-ingress-customized istio-aws-private-ingress-customized 1.0.0

1 of the 1 container images this version deploys carry CVE-2026-39155.

Container imageDigestPackageFixed in
istio/proxyv2:1.18.0757d28c24100
knot@3.1.6-1ubuntu1
no fix listed

Open the chart page →

5,530
istio-azure-private-ingress-customizedistio-azure-private-ingress-customized1.0.01 of 1See more

istio-azure-private-ingress-customized istio-azure-private-ingress-customized 1.0.0

1 of the 1 container images this version deploys carry CVE-2026-39155.

Container imageDigestPackageFixed in
istio/proxyv2:1.18.0757d28c24100
knot@3.1.6-1ubuntu1
no fix listed

Open the chart page →

5,530
ztunnelistio-ztunnelVerified publisher1.25.01 of 1See more

ztunnel istio-ztunnel 1.25.0

1 of the 1 container images this version deploys carry CVE-2026-39155.

Container imageDigestPackageFixed in
istio/ztunnel:1.25.005f3972d80a9
knot@3.3.4-1.1build2
no fix listed

Open the chart page →

2,457
kiaekiae0.1.61 of 9See more

kiae kiae 0.1.6

1 of the 9 container images this version deploys carry CVE-2026-39155.

Container imageDigestPackageFixed in
istio/pilot:1.15.2db08d6963975
knot@3.1.6-1ubuntu1
no fix listed

Open the chart page →

19,168
istio-helm-cnimesosphere1.25.11 of 1See more

istio-helm-cni mesosphere 1.25.1

1 of the 1 container images this version deploys carry CVE-2026-39155.

Container imageDigestPackageFixed in
istio/install-cni:1.29.0ce27c9ce43c8
knot@3.3.4-1.1build2
no fix listed

Open the chart page →

2,533
istio-helm-istiodmesosphere1.25.11 of 2See more

istio-helm-istiod mesosphere 1.25.1

1 of the 2 container images this version deploys carry CVE-2026-39155.

Container imageDigestPackageFixed in
istio/pilot:1.29.0325156535773
knot@3.3.4-1.1build2
no fix listed

Open the chart page →

3,777
istio-helm-cnimesosphere-stable1.23.61 of 1See more

istio-helm-cni mesosphere-stable 1.23.6

1 of the 1 container images this version deploys carry CVE-2026-39155.

Container imageDigestPackageFixed in
istio/install-cni:1.23.6ab34c4740f44
knot@3.3.4-1.1build2
no fix listed

Open the chart page →

3,283
istio-helm-istiodmesosphere-stable1.23.61 of 2See more

istio-helm-istiod mesosphere-stable 1.23.6

1 of the 2 container images this version deploys carry CVE-2026-39155.

Container imageDigestPackageFixed in
istio/pilot:1.23.69c3d6a218181
knot@3.3.4-1.1build2
no fix listed

Open the chart page →

4,603
istio-operatormetakube1.12.01 of 1See more

istio-operator metakube 1.12.0

1 of the 1 container images this version deploys carry CVE-2026-39155.

Container imageDigestPackageFixed in
istio/operator:1.12.06cfce8a071b9
knot@2.7.8-1
no fix listed

Open the chart page →

8,902
istio-cniparticuleio1.1.01 of 1See more

istio-cni particuleio 1.1.0

1 of the 1 container images this version deploys carry CVE-2026-39155.

Container imageDigestPackageFixed in
gcr.io/istio-testing/install-cni:latestec6f9ea5757b
knot@3.3.4-1.1build2
no fix listed

Open the chart page →

809
istio-operatorparticuleio1.7.01 of 1See more

istio-operator particuleio 1.7.0

1 of the 1 container images this version deploys carry CVE-2026-39155.

Container imageDigestPackageFixed in
gcr.io/istio-testing/operator:latest8d4576f7b98f
knot@3.3.4-1.1build2
no fix listed

Open the chart page →

4,120
istio-discoverytemp-charts0.3.31 of 1See more

istio-discovery temp-charts 0.3.3

1 of the 1 container images this version deploys carry CVE-2026-39155.

Container imageDigestPackageFixed in
istio/pilot:1.10.0294ca55bd1cc
knot@2.6.5-3
no fix listed

Open the chart page →

10,568
istio-ingresstemp-charts0.3.31 of 1See more

istio-ingress temp-charts 0.3.3

1 of the 1 container images this version deploys carry CVE-2026-39155.

Container imageDigestPackageFixed in
istio/proxyv2:1.10.088c6c693e67a
knot@2.6.5-3
no fix listed

Open the chart page →

10,514
istio-service-meshwbstack0.0.11 of 1See more

istio-service-mesh wbstack 0.0.1

1 of the 1 container images this version deploys carry CVE-2026-39155.

Container imageDigestPackageFixed in
istio/pilot:1.17.1ce9d87606701
knot@3.1.6-1ubuntu1
no fix listed

Open the chart page →

6,232
emissary-ingresswenerme8.12.21 of 2See more

emissary-ingress wenerme 8.12.2

1 of the 2 container images this version deploys carry CVE-2026-39155.

Container imageDigestPackageFixed in
istio/kubectl:1.5.10dbb7726d1bf0
knot@2.6.5-3
no fix listed

Open the chart page →

10,843

Container images carrying it

32 by charts deploying them

A fixed version is listed for 0 of the 1 affected package.

Container imageDigestPackageFixed inUsed by
istio/kubectl:1.5.10dbb7726d1bf0
knot@2.6.5-3
no fix listed
2
istio/proxyv2:1.18.0757d28c24100
knot@3.1.6-1ubuntu1
no fix listed
2
istio/proxyv2:1.10.3a78b7a165744
knot@2.6.5-3
no fix listed
2
cznic/knot-resolver:v6.4.2fe71c5214fdc
knot@3.5.6-cznic.1~trixie
no fix listed
1
istio/install-cni:1.10.32232f365aed6
knot@2.6.5-3
no fix listed
1
istio/install-cni:1.23.6ab34c4740f44
knot@3.3.4-1.1build2
no fix listed
1
istio/install-cni:1.29.0ce27c9ce43c8
knot@3.3.4-1.1build2
no fix listed
1
istio/node-agent-k8s:1.2.9268ab879ea51
knot@2.1.1-1build1
no fix listed
1
istio/operator:1.10.3655eefa11c84
knot@2.6.5-3
no fix listed
1
istio/operator:1.12.06cfce8a071b9
knot@2.7.8-1
no fix listed
1
istio/operator:1.18.270f9d1fe5fff
knot@3.1.6-1ubuntu1
no fix listed
1
istio/pilot:1.10.0294ca55bd1cc
knot@2.6.5-3
no fix listed
1
istio/pilot:1.29.0325156535773
knot@3.3.4-1.1build2
no fix listed
1
istio/pilot:1.23.69c3d6a218181
knot@3.3.4-1.1build2
no fix listed
1
istio/pilot:1.16.0ac0284d75ec9
knot@3.1.6-1ubuntu1
no fix listed
1
istio/pilot:1.2.9c09319753454
knot@2.1.1-1build1
no fix listed
1
istio/pilot:1.17.1ce9d87606701
knot@3.1.6-1ubuntu1
no fix listed
1
istio/pilot:1.15.2db08d6963975
knot@3.1.6-1ubuntu1
no fix listed
1
istio/pilot:1.10.3e7e110a421c2
knot@2.6.5-3
no fix listed
1
istio/pilot:1.29.1f8b0e412ac4a
knot@3.3.4-1.1build2
no fix listed
1
istio/proxyv2:1.2.90c78be035e98
knot@2.1.1-1build1
no fix listed
1
istio/proxyv2:1.9.687a9db561d2e
knot@2.6.5-3
no fix listed
1
istio/proxyv2:1.10.088c6c693e67a
knot@2.6.5-3
no fix listed
1
istio/proxyv2:1.14.1df69c1a7af7c
knot@2.7.8-1
no fix listed
1
istio/ztunnel:1.25.005f3972d80a9
knot@3.3.4-1.1build2
no fix listed
1
gcr.io/istio-release/pilot:release-1.0-latest-daily5ea7b7f3632a
knot@2.1.1-1build1
no fix listed
1
gcr.io/istio-release/pilot:1.11.1c552478f8f11
knot@2.7.8-1
no fix listed
1
gcr.io/istio-release/proxyv2:release-1.0-latest-daily8f9ff98fdbef
knot@2.1.1-1build1
no fix listed
1
gcr.io/istio-release/proxyv2:1.11.19538fabe49fd
knot@2.7.8-1
no fix listed
1
gcr.io/istio-testing/install-cni:latestec6f9ea5757b
knot@3.3.4-1.1build2
no fix listed
1
gcr.io/istio-testing/operator:latest8d4576f7b98f
knot@3.3.4-1.1build2
no fix listed
1
ghcr.io/mosn/htnn-controller:v0.3.1c379e66246be
knot@3.1.6-1ubuntu1
no fix listed
1

syft 1.42.1 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.