StackRadarChart IndexLive demo

CVE-2026-42371

Medium

Advisory

Published 27 Apr 2026In the index since 6 Sept 2026

Severity: Medium; worst across findings
CVSS: 5.1; base score, highest
EPSS: 0.002; 7th percentile
CISA KEV: Not listed; no confirmed exploitation
Charts affected: 24; of 17,781 indexed, latest versions
Container images: 22; deployed by those charts
Fix available: None; affected package

The matching OSV records carry no description.

Carried by container images the latest versions of 24 of 17,781 indexed charts deploy, on 22 images.

Affected package	Affected versions	Fixed in	Images
uriparserdeb	0.8.4-1, 0.9.3-2, 0.9.6+dfsg-1, 0.9.7+dfsg-2+3 more	no fix listed	22

OSV records: DEBIAN-CVE-2026-42371 UBUNTU-CVE-2026-42371

Charts affected

24 by stars

Chart

Latest

Affected images

Radar Score

photoprismandrenarchy

1 of 1 See more

photoprism andrenarchy 8.15.0

1 of the 1 container images this version deploys carry CVE-2026-42371.

Container image	Digest	Package	Fixed in
photoprism/photoprism :260728	958642220223	uriparser@0.9.8+dfsg-2build1	no fix listed

Open the chart page →

8,825

nominatimrobjuz

1 of 4 See more

nominatim robjuz 6.4.1

1 of the 4 container images this version deploys carry CVE-2026-42371.

Container image	Digest	Package	Fixed in
mediagis/nominatim :5.3.2	7923a8e67197	uriparser@0.9.7+dfsg-2build1	no fix listed

Open the chart page →

8,690

routehub-client-hubroutehub-helm

1 of 3 See more

routehub-client-hub routehub-helm 1.0.0

1 of the 3 container images this version deploys carry CVE-2026-42371.

Container image	Digest	Package	Fixed in
timescale/timescaledb-ha :pg16	d7db8f1085a3	uriparser@0.9.6+dfsg-1	no fix listed

Open the chart page →

12,930

astrotrekastria

1 of 4 See more

astrotrek astria 0.0.2

1 of the 4 container images this version deploys carry CVE-2026-42371.

Container image	Digest	Package	Fixed in
timescale/timescaledb-ha :pg15-latest	a8e3322e1cf9	uriparser@0.9.6+dfsg-1	no fix listed

Open the chart page →

32,501

kube-acp-stackcloudentity

1 of 7 See more

kube-acp-stack cloudentity 2.28.0

1 of the 7 container images this version deploys carry CVE-2026-42371.

Container image	Digest	Package	Fixed in
timescale/timescaledb-ha :pg17.2-ts2.18.2	e8d0a9cc3db5	uriparser@0.9.6+dfsg-1	no fix listed

Open the chart page →

20,900

opencloudcommunity-opencloud

1 of 11 See more

opencloud community-opencloud 3.0.0

1 of the 11 container images this version deploys carry CVE-2026-42371.

Container image	Digest	Package	Fixed in
apache/tika :latest-full	80072bb73dd3	uriparser@0.9.8+dfsg-2build1	no fix listed

Open the chart page →

3,773

datacubedatacube-charts

1 of 1 See more

datacube datacube-charts 0.18.2

1 of the 1 container images this version deploys carry CVE-2026-42371.

Container image	Digest	Package	Fixed in
opendatacube/wms :latest	1b90cdf68831	uriparser@0.8.4-1	no fix listed

Open the chart page →

27,728

datacube-datadatacube-charts

1 of 1 See more

datacube-data datacube-charts 0.2.6

1 of the 1 container images this version deploys carry CVE-2026-42371.

Container image	Digest	Package	Fixed in
geoscienceaustralia/dea-k8s-data :latest	f4039b45572a	uriparser@0.8.4-1	no fix listed

Open the chart page →

18,863

datacube-processingdatacube-charts

1 of 2 See more

datacube-processing datacube-charts 0.1.1

1 of the 2 container images this version deploys carry CVE-2026-42371.

Container image	Digest	Package	Fixed in
opendatacube/pipelines :wofs-1.22	5d810e8504b8	uriparser@0.8.4-1	no fix listed

Open the chart page →

22,405

restcubedatacube-charts

1 of 1 See more

restcube datacube-charts 0.2.9

1 of the 1 container images this version deploys carry CVE-2026-42371.

Container image	Digest	Package	Fixed in
opendatacube/restcube :latest	91870111837c	uriparser@0.8.4-1	no fix listed

Open the chart page →

24,335

adventurelogdjjudas21

1 of 3 See more

adventurelog djjudas21 0.1.1

1 of the 3 container images this version deploys carry CVE-2026-42371.

Container image	Digest	Package	Fixed in
ghcr.io/seanmorley15/adventurelog-backend :v0.13.0	0250d9cb0d74	uriparser@0.9.8+dfsg-2	no fix listed

Open the chart page →

7,459

1 of 8 See more

codecov douban 0.2.4

1 of the 8 container images this version deploys carry CVE-2026-42371.

Container image	Digest	Package	Fixed in
timescale/timescaledb-ha :pg14.6-ts2.9.1-p1	cdb9ae118899	uriparser@0.9.6+dfsg-1	no fix listed

Open the chart page →

24,917

drogue-cloud-examplesdrogue-iot

1 of 6 See more

drogue-cloud-examples drogue-iot 0.7.11

1 of the 6 container images this version deploys carry CVE-2026-42371.

Container image	Digest	Package	Fixed in
timescale/timescaledb-ha :pg14-ts2.6-latest	ed719c0cd19d	uriparser@0.9.6+dfsg-1	no fix listed

Open the chart page →

30,699

icinga2geek-cookbook

1 of 1 See more

icinga2 geek-cookbook 4.2.0

1 of the 1 container images this version deploys carry CVE-2026-42371.

Container image	Digest	Package	Fixed in
jordan/icinga2 :latest	f75025fe8ea8	uriparser@0.9.7+dfsg-2	no fix listed

Open the chart page →

9,077

dawarichhelmforge

1 of 4 See more

dawarich helmforge 1.0.0

1 of the 4 container images this version deploys carry CVE-2026-42371.

Container image	Digest	Package	Fixed in
postgis/postgis :18-3.6	7e00e8c3539f	uriparser@0.9.8+dfsg-2	no fix listed

Open the chart page →

4,742

nominatimheywood8-helm-charts

1 of 3 See more

nominatim heywood8-helm-charts 3.10.8

1 of the 3 container images this version deploys carry CVE-2026-42371.

Container image	Digest	Package	Fixed in
mediagis/nominatim :4.2	d0eae7b51374	uriparser@0.9.6+dfsg-1	no fix listed

Open the chart page →

14,290

opencloudjacobcolvin

1 of 13 See more

opencloud jacobcolvin 0.2.3

1 of the 13 container images this version deploys carry CVE-2026-42371.

Container image	Digest	Package	Fixed in
apache/tika :2.9.2.1-full	ae0b86d3c4d0	uriparser@0.9.7+dfsg-2build1	no fix listed

Open the chart page →

45,239

nominatimnominatim-chart

1 of 3 See more

nominatim nominatim-chart 1.3.0

1 of the 3 container images this version deploys carry CVE-2026-42371.

Container image	Digest	Package	Fixed in
mediagis/nominatim :3.7	c15e941485ef	uriparser@0.9.3-2	no fix listed

Open the chart page →

22,658

photoprismschoolguys-helmcharts

1 of 1 See more

photoprism schoolguys-helmcharts 0.3.8

1 of the 1 container images this version deploys carry CVE-2026-42371.

Container image	Digest	Package	Fixed in
photoprism/photoprism :260601	650c6ad5a651	uriparser@0.9.8+dfsg-2build1	no fix listed

Open the chart page →

10,348

backendsignalen

1 of 4 See more

backend signalen 4.24.0

1 of the 4 container images this version deploys carry CVE-2026-42371.

Container image	Digest	Package	Fixed in
signalen/backend :2.50.14	760256000738	uriparser@0.9.7+dfsg-2	no fix listed

Open the chart page →

11,636

kurento_webrtc_demostunner

1 of 2 See more

kurento_webrtc_demo stunner 0.1.0

1 of the 2 container images this version deploys carry CVE-2026-42371.

Container image	Digest	Package	Fixed in
kurento/kurento-media-server :latest	03c0d34d0828	uriparser@0.9.7+dfsg-2build1	no fix listed

Open the chart page →

12,460

stunner-kurento-one2one-callstunner

1 of 2 See more

stunner-kurento-one2one-call stunner 0.1.0

1 of the 2 container images this version deploys carry CVE-2026-42371.

Container image	Digest	Package	Fixed in
kurento/kurento-media-server :latest	03c0d34d0828	uriparser@0.9.7+dfsg-2build1	no fix listed

Open the chart page →

12,460

opencloudunxwares

1 of 13 See more

opencloud unxwares 0.2.3

1 of the 13 container images this version deploys carry CVE-2026-42371.

Container image	Digest	Package	Fixed in
apache/tika :2.9.2.1-full	ae0b86d3c4d0	uriparser@0.9.7+dfsg-2build1	no fix listed

Open the chart page →

45,239

zoo-project-druzoo-project

1 of 6 See more

zoo-project-dru zoo-project 0.10.4

1 of the 6 container images this version deploys carry CVE-2026-42371.

Container image	Digest	Package	Fixed in
zooproject/zoo-project :dru-19f3c4eed7c9ec9d1f0375bbe59f9d204a42bd3a	9a507cb7e2dd	uriparser@0.9.6+dfsg-1	no fix listed

Open the chart page →

7,849

Container images carrying it

22 by charts deploying them

A fixed version is listed for 0 of the 1 affected package.

Container image	Digest	Package	Fixed in	Used by
apache/tika :2.9.2.1-full	ae0b86d3c4d0	uriparser@0.9.7+dfsg-2build1	no fix listed	2
kurento/kurento-media-server :latest	03c0d34d0828	uriparser@0.9.7+dfsg-2build1	no fix listed	2
apache/tika :latest-full	80072bb73dd3	uriparser@0.9.8+dfsg-2build1	no fix listed	1
geoscienceaustralia/dea-k8s-data :latest	f4039b45572a	uriparser@0.8.4-1	no fix listed	1
jordan/icinga2 :latest	f75025fe8ea8	uriparser@0.9.7+dfsg-2	no fix listed	1
mediagis/nominatim :5.3.2	7923a8e67197	uriparser@0.9.7+dfsg-2build1	no fix listed	1
mediagis/nominatim :3.7	c15e941485ef	uriparser@0.9.3-2	no fix listed	1
mediagis/nominatim :4.2	d0eae7b51374	uriparser@0.9.6+dfsg-1	no fix listed	1
opendatacube/pipelines :wofs-1.22	5d810e8504b8	uriparser@0.8.4-1	no fix listed	1
opendatacube/restcube :latest	91870111837c	uriparser@0.8.4-1	no fix listed	1
opendatacube/wms :latest	1b90cdf68831	uriparser@0.8.4-1	no fix listed	1
photoprism/photoprism :260601	650c6ad5a651	uriparser@0.9.8+dfsg-2build1	no fix listed	1
photoprism/photoprism :260728	958642220223	uriparser@0.9.8+dfsg-2build1	no fix listed	1
postgis/postgis :18-3.6	7e00e8c3539f	uriparser@0.9.8+dfsg-2	no fix listed	1
signalen/backend :2.50.14	760256000738	uriparser@0.9.7+dfsg-2	no fix listed	1
timescale/timescaledb-ha :pg15-latest	a8e3322e1cf9	uriparser@0.9.6+dfsg-1	no fix listed	1
timescale/timescaledb-ha :pg14.6-ts2.9.1-p1	cdb9ae118899	uriparser@0.9.6+dfsg-1	no fix listed	1
timescale/timescaledb-ha :pg16	d7db8f1085a3	uriparser@0.9.6+dfsg-1	no fix listed	1
timescale/timescaledb-ha :pg17.2-ts2.18.2	e8d0a9cc3db5	uriparser@0.9.6+dfsg-1	no fix listed	1
timescale/timescaledb-ha :pg14-ts2.6-latest	ed719c0cd19d	uriparser@0.9.6+dfsg-1	no fix listed	1
zooproject/zoo-project :dru-19f3c4eed7c9ec9d1f0375bbe59f9d204a42bd3a	9a507cb7e2dd	uriparser@0.9.6+dfsg-1	no fix listed	1
ghcr.io/seanmorley15/adventurelog-backend :v0.13.0	0250d9cb0d74	uriparser@0.9.8+dfsg-2	no fix listed	1