StackRadar

CVE-2026-43078

High

Advisory

Published 6 May 2026In the index since 6 Sept 2026
Severity
High
worst across findings
CVSS
7.8
base score, highest
EPSS
0.001
3rd percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
114
of 17,813 indexed, latest versions
Container images
121
deployed by those charts
Fix available
1 of 1
affected package

The matching OSV records carry no description.

Carried by container images the latest versions of 114 of 17,813 indexed charts deploy, on 121 images.

Affected packageAffected versionsFixed inImages
linuxdeb4.15.0-38.41, 4.15.0-46.49, 4.15.0-50.54, 4.15.0-74.84+73 more4.15.0-250.262, 5.4.0-230.250, 5.15.0-179.189, 6.8.0-117.117+1 more121
OSV records
UBUNTU-CVE-2026-43078
Also known as
USN-8277-1, USN-8278-1, USN-8279-1, USN-8280-1, USN-8281-1

Charts affected

114 by stars
ChartLatestAffected imagesRadar Score
ocean-network-clientspot1.1.61 of 1See more

ocean-network-client spot 1.1.6

1 of the 1 container images this version deploys carry CVE-2026-43078.

Container imageDigestPackageFixed in
public.ecr.aws/spotinst/spot-network-client:1.0.1486380a01587d
linux@6.8.0-100.100
6.8.0-117.117

Open the chart page →

51,218
spotinst-ocean-network-clientspot1.0.01 of 1See more

spotinst-ocean-network-client spot 1.0.0

1 of the 1 container images this version deploys carry CVE-2026-43078.

Container imageDigestPackageFixed in
public.ecr.aws/spotinst/spot-network-client:1.0.0-8-lb_endpoint-d0ec127efcecf98b912
linux@4.15.0-191.202
4.15.0-250.262

Open the chart page →

66,239
sn-platform-slimstreamnative1.11.441 of 6See more

sn-platform-slim streamnative 1.11.44

1 of the 6 container images this version deploys carry CVE-2026-43078.

Container imageDigestPackageFixed in
streamnative/apache-pulsar-grafana-dashboard-k8s:0.1.20e6d7aa3ef32
linux@5.4.0-182.202
5.4.0-230.250

Open the chart page →

66,879
maxscalesvtech-public-helm-charts1.0.01 of 2See more

maxscale svtech-public-helm-charts 1.0.0

1 of the 2 container images this version deploys carry CVE-2026-43078.

Container imageDigestPackageFixed in
svtechnmaa/svtech_maxscale:v1.0.3410a25b51f9f
linux@5.15.0-92.102
5.15.0-179.189

Open the chart page →

75,790
rundecksvtech-public-helm-charts1.0.01 of 2See more

rundeck svtech-public-helm-charts 1.0.0

1 of the 2 container images this version deploys carry CVE-2026-43078.

Container imageDigestPackageFixed in
svtechnmaa/svtech_rundeck:v1.2.26e368ace0977
linux@5.4.0-176.196
5.4.0-230.250

Open the chart page →

76,156
istio-discoverytemp-charts0.3.31 of 1See more

istio-discovery temp-charts 0.3.3

1 of the 1 container images this version deploys carry CVE-2026-43078.

Container imageDigestPackageFixed in
istio/pilot:1.10.0294ca55bd1cc
linux@4.15.0-143.147
4.15.0-250.262

Open the chart page →

75,347
istio-ingresstemp-charts0.3.31 of 1See more

istio-ingress temp-charts 0.3.3

1 of the 1 container images this version deploys carry CVE-2026-43078.

Container imageDigestPackageFixed in
istio/proxyv2:1.10.088c6c693e67a
linux@4.15.0-143.147
4.15.0-250.262

Open the chart page →

75,293
tensor_apptensor-app0.2.21 of 3See more

tensor_app tensor-app 0.2.2

1 of the 3 container images this version deploys carry CVE-2026-43078.

Container imageDigestPackageFixed in
xeladock/mysql_dns:latest4baf531453f1
linux@5.15.0-25.25
5.15.0-179.189

Open the chart page →

109,723
tdarrvhdirkVerified publisher5.0.52 of 2See more

tdarr vhdirk 5.0.5

2 of the 2 container images this version deploys carry CVE-2026-43078.

Container imageDigestPackageFixed in
haveagitgat/tdarr_node:2.17.013ff0913202dd
linux@5.4.0-163.180
5.4.0-230.250
ghcr.io/haveagitgat/tdarr:2.00.18.23fbe4c29d14c
linux@5.4.0-110.124
5.4.0-230.250

Open the chart page →

159,238
unmanicvhdirkVerified publisher0.1.41 of 1See more

unmanic vhdirk 0.1.4

1 of the 1 container images this version deploys carry CVE-2026-43078.

Container imageDigestPackageFixed in
josh5/unmanic:0.2.64d49c4816260
linux@5.15.0-100.110
5.15.0-179.189

Open the chart page →

77,180
twenty-crmvictorlane0.0.11 of 3See more

twenty-crm victorlane 0.0.1

1 of the 3 container images this version deploys carry CVE-2026-43078.

Container imageDigestPackageFixed in
twentycrm/twenty-postgres-spilo:latest2f78405a78be
linux@5.15.0-134.145
5.15.0-179.189

Open the chart page →

69,387
kongwallarmVerified publisher4.6.31 of 7See more

kong wallarm 4.6.3

1 of the 7 container images this version deploys carry CVE-2026-43078.

Container imageDigestPackageFixed in
wallarm/kong:3.1.0-ubuntu-4.6.0ea9608c82e40
linux@5.4.0-144.161
5.4.0-230.250

Open the chart page →

74,867
emissary-ingresswener8.12.21 of 2See more

emissary-ingress wener 8.12.2

1 of the 2 container images this version deploys carry CVE-2026-43078.

Container imageDigestPackageFixed in
istio/kubectl:1.5.10dbb7726d1bf0
linux@4.15.0-112.113
4.15.0-250.262

Open the chart page →

77,296
emissary-ingresswenerme8.12.21 of 2See more

emissary-ingress wenerme 8.12.2

1 of the 2 container images this version deploys carry CVE-2026-43078.

Container imageDigestPackageFixed in
istio/kubectl:1.5.10dbb7726d1bf0
linux@4.15.0-112.113
4.15.0-250.262

Open the chart page →

77,296

Container images carrying it

121 by charts deploying them

A fixed version is listed for 1 of the 1 affected package.

Container imageDigestPackageFixed inUsed by
jupyterhub/k8s-hub:1.2.0e4770285aaf7
linux@5.4.0-89.100
5.4.0-230.250
1
jupyterhub/k8s-hub:0.9.1ec78bdae0fed
linux@4.15.0-96.97
4.15.0-250.262
1
kennethreitz/httpbin:latest599fe5e50731
linux@4.15.0-38.41
4.15.0-250.262
1
kong/httpbin:latesta6ac46531193
linux@5.15.0-130.140
5.15.0-179.189
1
kusionstack/kusion:v0.14.0126c8f0b0976
linux@5.15.0-130.140
5.15.0-179.189
1
langgenius/dify-plugin-daemon:0.5.1-local8269050f192e
linux@6.8.0-88.89
6.8.0-117.117
1
lsstsqre/nublado2:2.0.1b75bf8aaafa4
linux@5.4.0-100.113
5.4.0-230.250
1
mbround18/valheim:3.1.070bd4da591cd
linux@5.15.0-133.144
5.15.0-179.189
1
milvusdb/milvus:v2.2.13a3a55e1c1497
linux@5.4.0-131.147
5.4.0-230.250
1
mintproject/graphql-engine:305c0dbeba1878eafe348f21fc300fbfc017d9dc83aade2c1855
linux@5.4.0-117.132
5.4.0-230.250
1
mlikiowa/napcat-docker:latest2cc70b45244a
linux@5.15.0-124.134
5.15.0-179.189
1
mshanley80/httpbin2022:latest5b189a70c0fb
linux@5.4.0-135.152
5.4.0-230.250
1
nethermind/nethermind:1.14.615517708c3b6
linux@5.15.0-53.59
5.15.0-179.189
1
omecproject/mme-exporter:paging-latestbcc5f19fd676
linux@4.15.0-88.88
4.15.0-250.262
1
opendatacube/pipelines:wofs-1.225d810e8504b8
linux@4.15.0-46.49
4.15.0-250.262
1
opendatacube/restcube:latest91870111837c
linux@4.15.0-50.54
4.15.0-250.262
1
opendatacube/wms:latest1b90cdf68831
linux@4.15.0-50.54
4.15.0-250.262
1
openelevation/open-elevation:latest82fb21612e86
linux@5.4.0-80.90
5.4.0-230.250
1
openthread/otbr:latestf307f59f6432
linux@4.15.0-213.224
4.15.0-250.262
1
openwhisk/ow-utils:1.0.0c80dba0de3aa
linux@4.15.0-122.124
4.15.0-250.262
1
photoprism/photoprism:251130db16ee6b1ba3
linux@6.17.0-7.7
6.17.0-29.29
1
photoprism/photoprism:240711-cefc6fd632ca74
linux@6.8.0-38.38
6.8.0-117.117
1
rezachalak/bzen-mongo:1.0.034f694325191
linux@5.4.0-156.173
5.4.0-230.250
1
scrapinghub/splash:3.4.1a5f89bc84606
linux@4.15.0-74.84
4.15.0-250.262
1
seafileltd/seafile-mc:9.0.106693911bcc40
linux@5.4.0-135.152
5.4.0-230.250
1
seafileltd/seafile-mc:10.0.170628f29c663
linux@5.4.0-152.169
5.4.0-230.250
1
seafileltd/seafile-mc:9.0.97ac833196f60
linux@5.4.0-125.141
5.4.0-230.250
1
seafileltd/seafile-mc:11.0.12d0c66e4621bd
linux@5.15.0-118.128
5.15.0-179.189
1
seafileltd/seafile-mc:8.0.7ed0fcda5e6a9
linux@5.4.0-80.90
5.4.0-230.250
1
shaowenchen/ops-server:latest6bac5cebd125
linux@5.15.0-153.163
5.15.0-179.189
1
snipe/snipe-it:v8.3.1141ebf2386fe
linux@6.8.0-79.79
6.8.0-117.117
1
snipe/snipe-it:v6.0.1455fb7636a98c
linux@5.4.0-131.147
5.4.0-230.250
1
socialmediamacroscope/autophrase:0.1.570fb11d4f531
linux@5.4.0-163.180
5.4.0-230.250
1
socialmediamacroscope/collect_reddit_comment:0.1.219d3d26d53ee
linux@4.15.0-210.221
4.15.0-250.262
1
socialmediamacroscope/image_crawler:0.1.2f508216be63c
linux@4.15.0-210.221
4.15.0-250.262
1
someblackmagic/k8s-testing-multitool:v0.1.06eca64b6b440
linux@5.4.0-117.132
5.4.0-230.250
1
stackstorm/st2actionrunner:3.888235ba70cad
linux@5.4.0-169.187
5.4.0-230.250
1
stackstorm/st2api:3.86f56d239d280
linux@5.4.0-169.187
5.4.0-230.250
1
stackstorm/st2auth:3.833ecfda16608
linux@5.4.0-169.187
5.4.0-230.250
1
stackstorm/st2garbagecollector:3.84e3f8c7ca52d
linux@5.4.0-169.187
5.4.0-230.250
1
stackstorm/st2notifier:3.8f190a6212195
linux@5.4.0-169.187
5.4.0-230.250
1
stackstorm/st2rulesengine:3.8259503496ff9
linux@5.4.0-169.187
5.4.0-230.250
1
stackstorm/st2scheduler:3.8b1de2055c362
linux@5.4.0-169.187
5.4.0-230.250
1
stackstorm/st2sensorcontainer:3.8b1a338f64773
linux@5.4.0-169.187
5.4.0-230.250
1
stackstorm/st2stream:3.81c8904a3bf67
linux@5.4.0-169.187
5.4.0-230.250
1
stackstorm/st2timersengine:3.81bf35bfaf00c
linux@5.4.0-169.187
5.4.0-230.250
1
stackstorm/st2workflowengine:3.819fdfffdbba8
linux@5.4.0-169.187
5.4.0-230.250
1
statcan/ckan:2.93921305425b8
linux@5.4.0-74.83
5.4.0-230.250
1
streamnative/apache-pulsar-grafana-dashboard-k8s:0.0.1611bceacec8fb
linux@5.4.0-77.86
5.4.0-230.250
1
svtechnmaa/svtech_maxscale:v1.0.3410a25b51f9f
linux@5.15.0-92.102
5.15.0-179.189
1

syft 1.42.1 · advisories as of 20 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.