StackRadar

CVE-2026-40356

High

Advisory

Published 28 Apr 2026In the index since 5 Sept 2026
Severity
High
worst across findings
CVSS
7.5
base score, highest
EPSS
0.006
47th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
939
of 17,787 indexed, latest versions
Container images
1,000
deployed by those charts
Fix available
2 of 2
affected packages

Red Hat Security Advisory: krb5 security update

Carried by container images the latest versions of 939 of 17,787 indexed charts deploy, on 1,000 images.

Affected packageAffected versionsFixed inImages
krb5deb1.19.2-2, 1.19.2-2ubuntu0.1, 1.19.2-2ubuntu0.2, 1.19.2-2ubuntu0.3+20 more1.19.2-2ubuntu0.8, 1.20.1-2+deb12u5, 1.20.1-6ubuntu2.7, 1.21.3-5+deb13u1+2 more970
krb5rpm1.20.1-8.el9, 1.20.1-9.el9_2, 1.21.1-1.el9, 1.21.1-2.el9_4+2 more0:1.20.1-9.el9_2.6, 0:1.21.1-2.el9_4.5, 0:1.21.1-8.el9_6.230
OSV records
DEBIAN-CVE-2026-40356RHSA-2026:24683RHSA-2026:24685RHSA-2026:24686UBUNTU-CVE-2026-40356ECHO-874c-29e0-d62b
Also known as
USN-8585-1

Charts affected

939 by stars
ChartLatestAffected imagesRadar Score
idmassist-iot-identity-manager0.1.01 of 2See more

idm assist-iot-identity-manager 0.1.0

1 of the 2 container images this version deploys carry CVE-2026-40356.

Container imageDigestPackageFixed in
assistiot/identity-manager_db:latest0d3e6d35f168
krb5@1.20.1-2+deb12u1
1.20.1-2+deb12u5

Open the chart page →

12,799
locationprocessingassist-iot-location-processing1.0.01 of 3See more

locationprocessing assist-iot-location-processing 1.0.0

1 of the 3 container images this version deploys carry CVE-2026-40356.

Container imageDigestPackageFixed in
assistiot/location_processing:lateste9bae124095f
krb5@1.19.2-2
1.19.2-2ubuntu0.8

Open the chart page →

10,101
openapiassist-iot-open-api-management0.2.21 of 6See more

openapi assist-iot-open-api-management 0.2.2

1 of the 6 container images this version deploys carry CVE-2026-40356.

Container imageDigestPackageFixed in
assistiot/open_api_backend:1.1.230812ba93555
krb5@1.19.2-2ubuntu0.3
1.19.2-2ubuntu0.8

Open the chart page →

18,331
smartorchestratorassist-iot-smart-orchestrator4.0.03 of 14See more

smartorchestrator assist-iot-smart-orchestrator 4.0.0

3 of the 14 container images this version deploys carry CVE-2026-40356.

Container imageDigestPackageFixed in
assistiot/smart-orchestrator_mcs:latest7d6a0d534c7f
krb5@1.20.1-2+deb12u1
1.20.1-2+deb12u5
assistiot/smart-orchestrator_scheduler:latest38b003e55ff3
krb5@1.20.1-2+deb12u1
1.20.1-2+deb12u5
assistiot/smart-orchestrator_scheduler_mc:latestb1dbe4d62a03
krb5@1.20.1-2
1.20.1-2+deb12u5

Open the chart page →

42,460
astrotrekastria0.0.22 of 4See more

astrotrek astria 0.0.2

2 of the 4 container images this version deploys carry CVE-2026-40356.

Container imageDigestPackageFixed in
timescale/timescaledb-ha:pg15-latesta8e3322e1cf9
krb5@1.19.2-2ubuntu0.1
1.19.2-2ubuntu0.8
ghcr.io/astriaorg/astrotrek:0.1.05889bea38e56
krb5@1.20.1-2+deb12u2
1.20.1-2+deb12u5

Open the chart page →

31,807
hyperlane-agentsastria0.1.41 of 2See more

hyperlane-agents astria 0.1.4

1 of the 2 container images this version deploys carry CVE-2026-40356.

Container imageDigestPackageFixed in
gcr.io/abacus-labs-dev/hyperlane-agent:10c0ab1-20231215-220639f33e88324a40
krb5@1.19.2-2ubuntu0.3
1.19.2-2ubuntu0.8

Open the chart page →

2,537
asya-playgroundasya1.1.31 of 1See more

asya-playground asya 1.1.3

1 of the 1 container images this version deploys carry CVE-2026-40356.

Container imageDigestPackageFixed in
localstack/localstack:3.19d278167f2b7
krb5@1.20.1-2+deb12u1
1.20.1-2+deb12u5

Open the chart page →

8,555
istio-discoveryaveshaVerified publisher1.16.01 of 1See more

istio-discovery avesha 1.16.0

1 of the 1 container images this version deploys carry CVE-2026-40356.

Container imageDigestPackageFixed in
istio/pilot:1.16.0ac0284d75ec9
krb5@1.19.2-2
1.19.2-2ubuntu0.8

Open the chart page →

6,948
webappavzi-webapp0.1.01 of 1See more

webapp avzi-webapp 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-40356.

Container imageDigestPackageFixed in
avzini/web-app:latestf40b30210ed0
krb5@1.20.1-2+deb12u1
1.20.1-2+deb12u5

Open the chart page →

5,291
aws9helmaws9helm0.1.04 of 4See more

aws9helm aws9helm 0.1.0

4 of the 4 container images this version deploys carry CVE-2026-40356.

Container imageDigestPackageFixed in
kuzwolka/aws9:main1ad759b961b1
krb5@1.20.1-2+deb12u2
1.20.1-2+deb12u5
kuzwolka/aws9:news3e8880fbbb96
krb5@1.20.1-2+deb12u2
1.20.1-2+deb12u5
kuzwolka/aws9:blog4a7707410bf1
krb5@1.20.1-2+deb12u2
1.20.1-2+deb12u5
kuzwolka/aws9:shop84a9d9766345
krb5@1.20.1-2+deb12u2
1.20.1-2+deb12u5

Open the chart page →

16,920
azp-agentazp-agent1.2.01 of 1See more

azp-agent azp-agent 1.2.0

1 of the 1 container images this version deploys carry CVE-2026-40356.

Container imageDigestPackageFixed in
cheveo/azp-agent:1.0.282240f890884
krb5@1.19.2-2ubuntu0.6
1.19.2-2ubuntu0.8

Open the chart page →

3,308
ragflowbaboulinet0.1.11 of 5See more

ragflow baboulinet 0.1.1

1 of the 5 container images this version deploys carry CVE-2026-40356.

Container imageDigestPackageFixed in
infiniflow/infinity:v0.7.0992c87a68612
krb5@1.19.2-2ubuntu0.7
1.19.2-2ubuntu0.8

Open the chart page →

5,860
backstage-pyactionsbackstage-pyactionsVerified publisher0.1.01 of 1See more

backstage-pyactions backstage-pyactions 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-40356.

Container imageDigestPackageFixed in
mawad98/backstage-pyactions:demo99422c56a274
krb5@1.21.3-5
1.21.3-5+deb13u1

Open the chart page →

2,750
basic-auth-s3-nginxbasic-auth-s3-nginxVerified publisher1.0.01 of 1See more

basic-auth-s3-nginx basic-auth-s3-nginx 1.0.0

1 of the 1 container images this version deploys carry CVE-2026-40356.

Container imageDigestPackageFixed in
dachichang/basic-auth-s3-nginx:1.0.07ccac90a935e
krb5@1.20.1-2+deb12u1
1.20.1-2+deb12u5

Open the chart page →

6,310
algorand-participationbiatec-repoVerified publisher4.4.11 of 1See more

algorand-participation biatec-repo 4.4.1

1 of the 1 container images this version deploys carry CVE-2026-40356.

Container imageDigestPackageFixed in
scholtz2/algorand-participation-mainnet-extended:4.4.1-stable5aaa5d4ab8b8
krb5@1.19.2-2ubuntu0.4
1.19.2-2ubuntu0.8

Open the chart page →

7,239
algorand-relaybiatec-repoVerified publisher4.4.11 of 1See more

algorand-relay biatec-repo 4.4.1

1 of the 1 container images this version deploys carry CVE-2026-40356.

Container imageDigestPackageFixed in
scholtz2/algorand-relay-mainnet:4.4.1-stablee9af7d8ff6bb
krb5@1.20.1-6ubuntu2.6
1.20.1-6ubuntu2.7

Open the chart page →

5,108
baserowblackbird-cloudVerified publisher1.0.171 of 6See more

baserow blackbird-cloud 1.0.17

1 of the 6 container images this version deploys carry CVE-2026-40356.

Container imageDigestPackageFixed in
baserow/backend:1.31.1e0b3c8130b91
krb5@1.20.1-2+deb12u2
1.20.1-2+deb12u5

Open the chart page →

10,171
colosseumbook-k8sinfra-v21.0.183 of 5See more

colosseum book-k8sinfra-v2 1.0.18

3 of the 5 container images this version deploys carry CVE-2026-40356.

Container imageDigestPackageFixed in
sysnet4admin/colosseum-agg:logbc25b152d88e
krb5@1.19.2-2ubuntu0.7
1.19.2-2ubuntu0.8
sysnet4admin/colosseum-cms:loge74b43c7f492
krb5@1.20.1-2+deb12u3
1.20.1-2+deb12u5
sysnet4admin/colosseum-prm:log5802bfcd7fed
krb5@1.20.1-2+deb12u3
1.20.1-2+deb12u5

Open the chart page →

26,266
csi-driver-nfsbook-k8sinfra-v24.12.11 of 6See more

csi-driver-nfs book-k8sinfra-v2 4.12.1

1 of the 6 container images this version deploys carry CVE-2026-40356.

Container imageDigestPackageFixed in
registry.k8s.io/sig-storage/nfsplugin:v4.11.0ce5b5ccd5eb0
krb5@1.20.1-2+deb12u2
1.20.1-2+deb12u5

Open the chart page →

6,063
jaegerbook-k8sinfra-v23.4.01 of 5See more

jaeger book-k8sinfra-v2 3.4.0

1 of the 5 container images this version deploys carry CVE-2026-40356.

Container imageDigestPackageFixed in
jaegertracing/jaeger-cassandra-schema:1.53.0d48d6dab2c65
krb5@1.19.2-2ubuntu0.3
1.19.2-2ubuntu0.8

Open the chart page →

19,291
jenkinsbook-k8sinfra-v25.1.121 of 2See more

jenkins book-k8sinfra-v2 5.1.12

1 of the 2 container images this version deploys carry CVE-2026-40356.

Container imageDigestPackageFixed in
jenkins/jenkins:2.440.3-jdk17de4fea113221
krb5@1.20.1-2+deb12u1
1.20.1-2+deb12u5

Open the chart page →

7,627
flaresolverrbrandan-schmitz-helm-chartsVerified publisher1.4.01 of 1See more

flaresolverr brandan-schmitz-helm-charts 1.4.0

1 of the 1 container images this version deploys carry CVE-2026-40356.

Container imageDigestPackageFixed in
flaresolverr/flaresolverr:v3.5.0139dfee1c6f8
krb5@1.20.1-2+deb12u4
1.20.1-2+deb12u5

Open the chart page →

27,282
node-appbryopsida0.5.11 of 2See more

node-app bryopsida 0.5.1

1 of the 2 container images this version deploys carry CVE-2026-40356.

Container imageDigestPackageFixed in
ghcr.io/bryopsida/k8s-dev-pod:main82d0b161161d
krb5@1.20.1-6ubuntu2.6
1.20.1-6ubuntu2.7

Open the chart page →

14,446
mariadbbysamioVerified publisher1.0.21 of 1See more

mariadb bysamio 1.0.2

1 of the 1 container images this version deploys carry CVE-2026-40356.

Container imageDigestPackageFixed in
library/mariadb:12.0.2607835cd628b
krb5@1.20.1-6ubuntu2.6
1.20.1-6ubuntu2.7

Open the chart page →

2,942
ct-singlecalltelemetry0.8.41 of 7See more

ct-single calltelemetry 0.8.4

1 of the 7 container images this version deploys carry CVE-2026-40356.

Container imageDigestPackageFixed in
calltelemetry/web:0.8.1-rc7205d13269e350
krb5@1.20.1-2+deb12u2
1.20.1-2+deb12u5

Open the chart page →

10,442
camellia-redis-proxycamellia-redis-proxy1.4.01 of 2See more

camellia-redis-proxy camellia-redis-proxy 1.4.0

1 of the 2 container images this version deploys carry CVE-2026-40356.

Container imageDigestPackageFixed in
48n6e/camellia-redis-proxy:1.4.0-jdk-21-0.0.1a6ed886fddfc
krb5@1.20.1-2+deb12u4
1.20.1-2+deb12u5

Open the chart page →

7,329
geoservercamptocamp20.0.31 of 12See more

geoserver camptocamp2 0.0.3

1 of the 12 container images this version deploys carry CVE-2026-40356.

Container imageDigestPackageFixed in
library/postgres:122f2a8c2a7d10
krb5@1.20.1-2+deb12u2
1.20.1-2+deb12u5

Open the chart page →

88,377
httpd-ldapauth-proxycamptocamp31.0.21 of 1See more

httpd-ldapauth-proxy camptocamp3 1.0.2

1 of the 1 container images this version deploys carry CVE-2026-40356.

Container imageDigestPackageFixed in
library/httpd:2.4.631ae8051591a5
krb5@1.20.1-2+deb12u3
1.20.1-2+deb12u5

Open the chart page →

3,165
nginx-s3-gatewaycamptocamp31.0.01 of 1See more

nginx-s3-gateway camptocamp3 1.0.0

1 of the 1 container images this version deploys carry CVE-2026-40356.

Container imageDigestPackageFixed in
ghcr.io/nginxinc/nginx-s3-gateway/nginx-oss-s3-gateway:unprivileged-oss-202503313db8145349a3
krb5@1.20.1-2+deb12u2
1.20.1-2+deb12u5

Open the chart page →

5,051
puppetservercamptocamp31.0.11 of 2See more

puppetserver camptocamp3 1.0.1

1 of the 2 container images this version deploys carry CVE-2026-40356.

Container imageDigestPackageFixed in
ghcr.io/voxpupuli/puppetserver:8.7.0-main63873f3f698e
krb5@1.19.2-2ubuntu0.4
1.19.2-2ubuntu0.8

Open the chart page →

5,932
tetragon-policy-buildercamptocamp30.1.11 of 1See more

tetragon-policy-builder camptocamp3 0.1.1

1 of the 1 container images this version deploys carry CVE-2026-40356.

Container imageDigestPackageFixed in
ghcr.io/camptocamp/tetragon-policy-builder:master0e99f12bb040
krb5@1.20.1-2+deb12u2
1.20.1-2+deb12u5

Open the chart page →

10,318
caninecanine0.1.101 of 7See more

canine canine 0.1.10

1 of the 7 container images this version deploys carry CVE-2026-40356.

Container imageDigestPackageFixed in
ghcr.io/caninehq/canine:latesta058034ca006
krb5@1.20.1-2+deb12u2
1.20.1-2+deb12u5

Open the chart page →

13,363
getoutlinecfi20171.2.01 of 4See more

getoutline cfi2017 1.2.0

1 of the 4 container images this version deploys carry CVE-2026-40356.

Container imageDigestPackageFixed in
library/postgres:18.06f3e42ad37de
krb5@1.21.3-5
1.21.3-5+deb13u1

Open the chart page →

4,329
opencvecfi20170.1.22 of 7See more

opencve cfi2017 0.1.2

2 of the 7 container images this version deploys carry CVE-2026-40356.

Container imageDigestPackageFixed in
library/postgres:18.06f3e42ad37de
krb5@1.21.3-5
1.21.3-5+deb13u1
ghcr.io/cfi2017/opencve-scheduler:3.0.08d943799621b
krb5@1.20.1-2+deb12u2
1.20.1-2+deb12u5

Open the chart page →

14,964
charon-relaycharonOfficialVerified publisher0.8.01 of 2See more

charon-relay charon 0.8.0

1 of the 2 container images this version deploys carry CVE-2026-40356.

Container imageDigestPackageFixed in
obolnetwork/charon:v1.10.0278c7e2897b6
krb5@1.21.3-5
1.21.3-5+deb13u1

Open the chart page →

4,409
dv-podcharonOfficialVerified publisher0.19.12 of 5See more

dv-pod charon 0.19.1

2 of the 5 container images this version deploys carry CVE-2026-40356.

Container imageDigestPackageFixed in
obolnetwork/charon:v1.10.0278c7e2897b6
krb5@1.21.3-5
1.21.3-5+deb13u1
sigp/lighthouse:v8.1.344aa773dcf27
krb5@1.19.2-2ubuntu0.7
1.19.2-2ubuntu0.8

Open the chart page →

7,457
helioscharonVerified publisher0.1.51 of 1See more

helios charon 0.1.5

1 of the 1 container images this version deploys carry CVE-2026-40356.

Container imageDigestPackageFixed in
obolnetwork/helios:e10e753cb7e97d39d46
krb5@1.20.1-6ubuntu2.6
1.20.1-6ubuntu2.7

Open the chart page →

2,127
chart-dnazarenochart-dnazareno0.1.01 of 3See more

chart-dnazareno chart-dnazareno 0.1.0

1 of the 3 container images this version deploys carry CVE-2026-40356.

Container imageDigestPackageFixed in
library/phpmyadmin:5.2.16e75aa8f767c
krb5@1.20.1-2+deb12u2
1.20.1-2+deb12u5

Open the chart page →

5,528
kitchenowlchart-kitchenowl0.1.121 of 2See more

kitchenowl chart-kitchenowl 0.1.12

1 of the 2 container images this version deploys carry CVE-2026-40356.

Container imageDigestPackageFixed in
tombursch/kitchenowl-backend:v0.7.8b48e4ab727cd
krb5@1.21.3-5
1.21.3-5+deb13u1

Open the chart page →

4,783
chat-searchchat-searchVerified publisher0.1.71 of 1See more

chat-search chat-search 0.1.7

1 of the 1 container images this version deploys carry CVE-2026-40356.

Container imageDigestPackageFixed in
ghcr.io/hemslo/chat-search:latest39d48995a5bd
krb5@1.20.1-2+deb12u2
1.20.1-2+deb12u5

Open the chart page →

4,048
polrchristianhuthVerified publisher4.3.01 of 2See more

polr christianhuth 4.3.0

1 of the 2 container images this version deploys carry CVE-2026-40356.

Container imageDigestPackageFixed in
bitnamilegacy/mysql:9.4.0-debian-12-r1ec13e229247a
krb5@1.20.1-2+deb12u3
1.20.1-2+deb12u5

Open the chart page →

5,936
arbitrumchronicleVerified publisher0.3.41 of 1See more

arbitrum chronicle 0.3.4

1 of the 1 container images this version deploys carry CVE-2026-40356.

Container imageDigestPackageFixed in
offchainlabs/nitro-node:v3.7.6-c0fe95e9f779fa84b7b
krb5@1.20.1-2+deb12u4
1.20.1-2+deb12u5

Open the chart page →

7,006
basechronicleVerified publisher0.0.81 of 1See more

base chronicle 0.0.8

1 of the 1 container images this version deploys carry CVE-2026-40356.

Container imageDigestPackageFixed in
ghcr.io/base-org/node:v0.11.11aba0ffe55ea
krb5@1.19.2-2ubuntu0.4
1.19.2-2ubuntu0.8

Open the chart page →

4,858
rpc-routerchronicleVerified publisher0.2.91 of 1See more

rpc-router chronicle 0.2.9

1 of the 1 container images this version deploys carry CVE-2026-40356.

Container imageDigestPackageFixed in
drpcorg/dshackle:0.54.08858fae1859d
krb5@1.19.2-2ubuntu0.2
1.19.2-2ubuntu0.8

Open the chart page →

6,487
zksyncchronicleVerified publisher0.1.01 of 2See more

zksync chronicle 0.1.0

1 of the 2 container images this version deploys carry CVE-2026-40356.

Container imageDigestPackageFixed in
matterlabs/external-node:v24.0.06cbfea4c694a
krb5@1.20.1-2+deb12u1
1.20.1-2+deb12u5

Open the chart page →

5,550
kamaji-etcdclastixVerified publisher0.17.01 of 4See more

kamaji-etcd clastix 0.17.0

1 of the 4 container images this version deploys carry CVE-2026-40356.

Container imageDigestPackageFixed in
cfssl/cfssl:latestc9018c2ddf0b
krb5@1.20.1-2+deb12u1
1.20.1-2+deb12u5

Open the chart page →

12,021
kube-acp-stackcloudentity2.28.01 of 7See more

kube-acp-stack cloudentity 2.28.0

1 of the 7 container images this version deploys carry CVE-2026-40356.

Container imageDigestPackageFixed in
timescale/timescaledb-ha:pg17.2-ts2.18.2e8d0a9cc3db5
krb5@1.19.2-2ubuntu0.5
1.19.2-2ubuntu0.8

Open the chart page →

20,936
cloudpremcloudprem0.0.0-build.00306ba7288bb8d46dd8c6190af79ef5b6fbdbad1 of 6See more

cloudprem cloudprem 0.0.0-build.00306ba7288bb8d46dd8c6190af79ef5b6fbdbad

1 of the 6 container images this version deploys carry CVE-2026-40356.

Container imageDigestPackageFixed in
ghcr.io/formancehq/membership:v1.11.024a0113d5fb0
krb5@1.19.2-2ubuntu0.7
1.19.2-2ubuntu0.8

Open the chart page →

18,256
galaxy-depscloudve1.1.11 of 7See more

galaxy-deps cloudve 1.1.1

1 of the 7 container images this version deploys carry CVE-2026-40356.

Container imageDigestPackageFixed in
bitnamilegacy/kubectl:latestcd354d5b2556
krb5@1.20.1-2+deb12u3
1.20.1-2+deb12u5

Open the chart page →

10,543
pulsarcloudve0.2.01 of 2See more

pulsar cloudve 0.2.0

1 of the 2 container images this version deploys carry CVE-2026-40356.

Container imageDigestPackageFixed in
galaxy/pulsar-kubernetes:0.15.7e50a890e24c9
krb5@1.20.1-2+deb12u2
1.20.1-2+deb12u5

Open the chart page →

5,994

Container images carrying it

1,000 by charts deploying them

A fixed version is listed for 2 of the 2 affected packages.

Container imageDigestPackageFixed inUsed by
olvid/bot-daemon:2.0.1e0e6b165d879
krb5@1.20.1-6ubuntu2.6
1.20.1-6ubuntu2.7
1
omkara25/simple-microservice-app-order-service:v2.18327546c7aac
krb5@1.20.1-2+deb12u3
1.20.1-2+deb12u5
1
omkara25/simple-microservice-app-payment-service:v2afff40172b6b
krb5@1.20.1-2+deb12u3
1.20.1-2+deb12u5
1
omkara25/simple-microservice-app-user-service:v2d62cba548580
krb5@1.20.1-2+deb12u3
1.20.1-2+deb12u5
1
opea/asr:1.025dd26d9cd09
krb5@1.20.1-2+deb12u2
1.20.1-2+deb12u5
1
opea/chatqna:1.038c51b791efa
krb5@1.20.1-2+deb12u2
1.20.1-2+deb12u5
1
opea/codegen:1.058f91683892d
krb5@1.20.1-2+deb12u2
1.20.1-2+deb12u5
1
opea/codegen-ui:1.02bee4eb66f3e
krb5@1.20.1-2+deb12u1
1.20.1-2+deb12u5
1
opea/codetrans:1.0e2436483b73d
krb5@1.20.1-2+deb12u2
1.20.1-2+deb12u5
1
opea/codetrans-ui:1.03ef121f34610
krb5@1.20.1-2+deb12u1
1.20.1-2+deb12u5
1
opea/docsum:1.03eaa91849512
krb5@1.20.1-2+deb12u2
1.20.1-2+deb12u5
1
opea/docsum-ui:1.07f854e9bffaf
krb5@1.20.1-2+deb12u1
1.20.1-2+deb12u5
1
opea/guardrails-tgi:1.0262c6048aab8
krb5@1.20.1-2+deb12u2
1.20.1-2+deb12u5
1
opea/guardrails-tgi:latestf68bec6a1271
krb5@1.20.1-2+deb12u2
1.20.1-2+deb12u5
1
opea/llm-docsum-tgi:1.002f9e8fa5d71
krb5@1.20.1-2+deb12u2
1.20.1-2+deb12u5
1
opea/speecht5:1.0249afad3d268
krb5@1.20.1-2+deb12u2
1.20.1-2+deb12u5
1
opea/tts:1.0257ae94709e9
krb5@1.20.1-2+deb12u2
1.20.1-2+deb12u5
1
opea/web-retriever-chroma:1.0fe08165d7770
krb5@1.20.1-2+deb12u2
1.20.1-2+deb12u5
1
openbas/caldera-server:5.1.0a277796d9724
krb5@1.20.1-2+deb12u2
1.20.1-2+deb12u5
1
openbas/platform:2.0.5d986d80b0a75
krb5@1.20.1-6ubuntu2.6
1.20.1-6ubuntu2.7
1
opencsghq/agenticflow:ee-v0.6-52f03fead54db
krb5@1.20.1-2+deb12u3
1.20.1-2+deb12u5
1
opencsghq/csghub-server:v2.4.0-ee302c9d45d8a8
krb5@1.20.1-2+deb12u4
1.20.1-2+deb12u5
1
opencsghq/csghub-xnet:v2.4.0-ee04121fd19ef9
krb5@1.20.1-2+deb12u4
1.20.1-2+deb12u5
1
opencsghq/gitlab-gitaly:v17.5.0bdd2c58b9744
krb5@1.20.1-2+deb12u2
1.20.1-2+deb12u5
1
opencsghq/gitlab-shell:v17.5.0f6d7e7d6be5d
krb5@1.20.1-2+deb12u2
1.20.1-2+deb12u5
1
opencsghq/kubectl:latestb6d87e1048c2
krb5@1.20.1-2+deb12u3
1.20.1-2+deb12u5
1
opendatacube/explorer:latest120457ffcd69
krb5@1.20.1-6ubuntu2.6
1.20.1-6ubuntu2.7
1
opendatacube/wps:latest80df355a660b
krb5@1.19.2-2ubuntu0.7
1.19.2-2ubuntu0.8
1
openproject/hocuspocus:release-338001b288dc1359dfb5
krb5@1.20.1-2+deb12u3
1.20.1-2+deb12u5
1
openvino/model_server:2025.2.11e7cd1d70cc1
krb5@1.20.1-6ubuntu2.6
1.20.1-6ubuntu2.7
1
owncloud/server:10.16.274c53d341076
krb5@1.19.2-2ubuntu0.7
1.19.2-2ubuntu0.8
1
pangeo/base-notebook:2024.01.155fbe688a4f80
krb5@1.19.2-2ubuntu0.3
1.19.2-2ubuntu0.8
1
payara/server-full:7.2026.2-jdk2531f1253f0cf8
krb5@1.19.2-2ubuntu0.7
1.19.2-2ubuntu0.8
1
penpotapp/backend:2.2.147853d9bb9dd
krb5@1.19.2-2ubuntu0.4
1.19.2-2ubuntu0.8
1
penpotapp/exporter:2.2.15c835ffd87ab
krb5@1.19.2-2ubuntu0.4
1.19.2-2ubuntu0.8
1
percona/percona-server-mongodb-operator:1.20.1d09453ce7886
krb5@1.21.1-6.el9
0:1.21.1-8.el9_6.2
1
phan2410/dummy-service:0.0.89c6ed6de26ca
krb5@1.20.1-2+deb12u2
1.20.1-2+deb12u5
1
phan2410/falcon-asgi-server:0.1.04a86d138832d
krb5@1.20.1-2+deb12u2
1.20.1-2+deb12u5
1
phntom/mattermost-team-edition:9.3.051cf9da4aa2e
krb5@1.19.2-2ubuntu0.1
1.19.2-2ubuntu0.8
1
photoprism/photoprism:220629-jammy2954334adbda
krb5@1.19.2-2
1.19.2-2ubuntu0.8
1
photoprism/photoprism:260601650c6ad5a651
krb5@1.22.1-2ubuntu4
1.22.1-2ubuntu4.1
1
photoprism/photoprism:251130db16ee6b1ba3
krb5@1.21.3-5ubuntu2
no fix listed
1
photoprism/photoprism:240711-cefc6fd632ca74
krb5@1.20.1-6ubuntu2
1.20.1-6ubuntu2.7
1
phpmyadmin/phpmyadmin:5.2.342a200db07b4
krb5@1.21.3-5
1.21.3-5+deb13u1
1
pk910/powfaucet:v2-stable3dcae6a62896
krb5@1.20.1-2+deb12u3
1.20.1-2+deb12u5
1
plantuml/plantuml-server:jetty-v1.2026.85f6f99ec2fc1
krb5@1.20.1-6ubuntu2.6
1.20.1-6ubuntu2.7
1
pococze/python-hello-elos:2.0.07a1aab425e51
krb5@1.20.1-2+deb12u2
1.20.1-2+deb12u5
1
praravind1801/helmimages:3.0.0f29d637b9ce1
krb5@1.20.1-2+deb12u1
1.20.1-2+deb12u5
1
prefecthq/prefect:2.20.4-python3.101df4b5b6238a
krb5@1.20.1-2+deb12u2
1.20.1-2+deb12u5
1
prodrigestivill/postgres-backup-local:latestf70742ebe42b
krb5@1.21.3-5
1.21.3-5+deb13u1
1

syft 1.42.1 · advisories as of 15 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.