StackRadar

CVE-2026-41988

High

Advisory

Published 22 Apr 2026In the index since 5 Sept 2026
Severity
High
worst across findings
CVSS
7.5
base score, highest
EPSS
0.004
28th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
603
of 17,787 indexed, latest versions
Container images
602
deployed by those charts
Fix available
1 of 2
affected packages

uuid: Missing buffer bounds check in v3/v5/v6 when buf is provided

Carried by container images the latest versions of 603 of 17,787 indexed charts deploy, on 602 images.

Affected packageAffected versionsFixed inImages
uuidnpm2.0.2, 2.0.3, 3.0.1, 3.1.0+15 more11.1.1, 13.0.1600
node-uuiddeb1.4.0-1, 1.4.7-5, 3.3.2-2, 8.3.2+~8.3.3-4+1 moreno fix listed7
OSV records
GHSA-w5hq-g745-h8pqDEBIAN-CVE-2026-41988UBUNTU-CVE-2026-41988
Also known as
CVE-2026-41907

Charts affected

603 by stars
ChartLatestAffected imagesRadar Score
ygdrassil-monitoringygdrassilVerified publisher0.4.01 of 10See more

ygdrassil-monitoring ygdrassil 0.4.0

1 of the 10 container images this version deploys carry CVE-2026-41988.

Container imageDigestPackageFixed in
opensearchproject/opensearch-dashboards:2.18.00ecd8444add2
uuid@9.0.0
11.1.1

Open the chart page →

9,381
helloworldyotron-helm-charts0.1.01 of 1See more

helloworld yotron-helm-charts 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-41988.

Container imageDigestPackageFixed in
a5hut0sh/helloworld:1.02ae77620e616
uuid@3.3.2
11.1.1

Open the chart page →

1,309
alertmanager-matrix-forwarderzloi-space1.0.11 of 2See more

alertmanager-matrix-forwarder zloi-space 1.0.1

1 of the 2 container images this version deploys carry CVE-2026-41988.

Container imageDigestPackageFixed in
zl0i/alertmanager-matrix-forwarder:v1.0.0e94047931739
uuid@3.4.0
11.1.1

Open the chart page →

3,118

Container images carrying it

602 by charts deploying them

A fixed version is listed for 1 of the 2 affected packages.

Container imageDigestPackageFixed inUsed by
hhaluk/crypto-watchdog:0.4.0a6555953d941
uuid@8.3.2
11.1.1
1
hirosystems/stacks-blockchain-api:8.13.29c98b23c1515
uuid@8.3.2
11.1.1
1
hoppscotch/hoppscotch:2024.11.0538fe6ded4b6
uuid@10.0.0
11.1.1
1
hugohg34/server:0.0.2503e5d8960ff
uuid@8.3.2
11.1.1
1
hyperledger/fabric-couchdb:0.4.10c65891b6c237
uuid@3.1.0
11.1.1
1
i4trust/pdc-portal:2.0.03e77858e1219
uuid@3.4.0
11.1.1
1
ianw/quickchart:v1.7.1dc49dd460c37
uuid@3.4.0
11.1.1
1
ibarreche/cloud-front-ci:latestc8970ac1c8dc
uuid@3.4.0
11.1.1
1
ibarreche/cloud-indexer-ci:latestb7a08274e69f
uuid@3.3.2
11.1.1
1
ibmcom/app-nav-init:1.0.1240ff499eb5b
uuid@3.1.0
11.1.1
1
ibmcom/app-nav-ui:1.0.1e2a86997b36b
uuid@3.1.0
11.1.1
1
ibmcom/bai-admin-dev:19.0.202d882f2836e
uuid@3.3.2
11.1.1
1
ibmcom/bai-setup-dev:19.0.2b8e8df11072d
uuid@3.3.2
11.1.1
1
ibmcom/icp-sert-bats:3.2.0b558f2b444ae
uuid@3.3.2
11.1.1
1
ibmcom/microclimate-file-watcher:latestab3fd1fdfa18
uuid@3.1.0
11.1.1
1
ibmcom/microclimate-portal:latested5505e5c7ec
uuid@3.1.0
11.1.1
1
ibmcom/microclimate-theia:lateste17bdccc5030
uuid@3.2.1
11.1.1
1
ibmcom/voice-gateway-mr:1.0.5.00762ab1df6c1
uuid@3.3.2
11.1.1
1
improwised/erpnext-worker:v13.4.197280b55cbd4
uuid@3.3.3
11.1.1
1
instructure/kinesalite:latest34400d82f28f
uuid@7.0.3
11.1.1
1
interlayhq/interbtc-hydra-processor:master-2c6e16e-1637088364423d567d47aa
uuid@8.3.2
11.1.1
1
interlayhq/interbtc-hydra-processor:0.10.55b2c414307b9
uuid@3.4.0
11.1.1
1
istio/examples-bookinfo-ratings-v1:1.17.0b6a6b88d3578
uuid@3.3.3
11.1.1
1
jakowenko/double-take:1.6.0b858bac9e32a
uuid@8.3.2
11.1.1
1
jayfong/yapi:1.10.2163e5d621910
uuid@3.4.0
11.1.1
1
jesec/flood:4.7.03d1d0bec117a
uuid@3.4.0
11.1.1
1
jesec/flood:4.6.060bd59cfb4eb
uuid@3.4.0
11.1.1
1
jesec/rtorrent-flood:latestf0c894ec459e
uuid@3.4.0
11.1.1
1
joplin/server:latest3f7b852959aa
uuid@13.0.0
13.0.1
1
joplin/server:3.0-beta52af57880c0e
uuid@8.3.2
11.1.1
1
joplin/server:2.14.2-betab87564ef34e9
uuid@8.3.2
11.1.1
1
journeyapps/powersync-service:latestbf46f66e5dcc
uuid@8.3.2
11.1.1
1
junktext/getting-started:1.0.5a70936c04aed
uuid@3.4.0
11.1.1
1
junktext/getting-started:1.0.34d44adf5a4da2
uuid@3.4.0
11.1.1
1
jupyterhub/jupyterhub:5.4.63974ba945e65
uuid@8.3.2
node-uuid@8.3.2+~8.3.3-4
11.1.1
no fix listed
1
jupyterhub/k8s-singleuser-sample:0.11.1e3e6f3051df8
uuid@3.3.3
11.1.1
1
kitware/cdash:v5.3.0d7767d9b9da4
uuid@8.3.2
11.1.1
1
kobotoolbox/kpi:2.022.24dbcacc01bccd4
uuid@8.3.2
11.1.1
1
konradkleine/docker-registry-frontend:v2181aad54ee64
uuid@3.1.0
11.1.1
1
koumoul/capture:17108d47be3b2
uuid@3.3.2
11.1.1
1
koumoul/openapi-viewer:18eeca2e8285b
uuid@3.2.1
11.1.1
1
kubebb/bff-server:v0.2.0-202312040fbb732379bc
uuid@8.3.2
11.1.1
1
kubebb/component-store:latestfd8ecbd73213
uuid@9.0.0
11.1.1
1
kubebb/tamp-portal:v5.6.0fadac6d52470
uuid@3.4.0
11.1.1
1
kubebb/tdsf-portal:v5.7.0258458311bc9
uuid@3.4.0
11.1.1
1
kubeflownotebookswg/centraldashboard:v1.6.137300551dea6
uuid@3.3.3
11.1.1
1
kubeflownotebookswg/centraldashboard:v1.9.2af55c22ef5de
uuid@3.3.2
11.1.1
1
kubegems/chatgpt-api:latestf3c492a938ad
uuid@9.0.0
11.1.1
1
kubesphere/examples-bookinfo-ratings-v1:1.13.0f1b5bf878196
uuid@3.3.2
11.1.1
1
kubevious/backend:1.2.22d9ba6eb46b6
uuid@3.4.0
11.1.1
1

syft 1.42.1 · advisories as of 15 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.