StackRadar

CVE-2026-44656

Medium

Advisory

Published 8 May 2026In the index since 5 Sept 2026
Severity
Medium
worst across findings
CVSS
5.3
base score, highest
EPSS
0.009
58th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
138
of 17,781 indexed, latest versions
Container images
115
deployed by those charts
Fix available
1 of 1
affected package

The matching OSV records carry no description.

Carried by container images the latest versions of 138 of 17,781 indexed charts deploy, on 115 images.

Affected packageAffected versionsFixed inImages
vimdeb2:7.4.052-1ubuntu3, 2:7.4.052-1ubuntu3.1, 2:7.4.1689-3ubuntu1.2, 2:8.0.1453-1ubuntu1+29 more2:7.4.052-1ubuntu3.1+esm26, 2:7.4.1689-3ubuntu1.5+esm32, 2:8.0.1453-1ubuntu1.13+esm17, 2:8.1.2269-1ubuntu5.32+esm5+2 more115
OSV records
DEBIAN-CVE-2026-44656UBUNTU-CVE-2026-44656
Also known as
USN-8304-1

Charts affected

138 by stars
ChartLatestAffected imagesRadar Score
terminalmancloudve0.3.41 of 1See more

terminalman cloudve 0.3.4

1 of the 1 container images this version deploys carry CVE-2026-44656.

Container imageDigestPackageFixed in
cloudve/ttyd:latestd79c1c5881c0
vim@2:8.0.1453-1ubuntu1.3
2:8.0.1453-1ubuntu1.13+esm17

Open the chart page →

13,156
dev-code-servercosmoVerified publisher0.0.71 of 2See more

dev-code-server cosmo 0.0.7

1 of the 2 container images this version deploys carry CVE-2026-44656.

Container imageDigestPackageFixed in
ghcr.io/cosmo-workspace/dev-code-server:v0.0.316fda01ae58a
vim@2:9.0.1378-2+deb12u2
no fix listed

Open the chart page →

14,559
jupyterhubd4nVerified publisher3.3.71 of 7See more

jupyterhub d4n 3.3.7

1 of the 7 container images this version deploys carry CVE-2026-44656.

Container imageDigestPackageFixed in
aristidetm/basic-notebook:3.6.5469dbc951224
vim@2:9.0.1378-2
no fix listed

Open the chart page →

16,604
seafilederp3.2.01 of 1See more

seafile derp 3.2.0

1 of the 1 container images this version deploys carry CVE-2026-44656.

Container imageDigestPackageFixed in
seafileltd/seafile-mc:10.0.170628f29c663
vim@2:8.1.2269-1ubuntu5.15
2:8.1.2269-1ubuntu5.32+esm5

Open the chart page →

14,856
argocd-certificate-refreshdevtron0.10.81 of 1See more

argocd-certificate-refresh devtron 0.10.8

1 of the 1 container images this version deploys carry CVE-2026-44656.

Container imageDigestPackageFixed in
quay.io/devtron/argocd-cert-refresh:v102b6db27eaf3d
vim@2:8.2.3995-1ubuntu2.3
2:8.2.3995-1ubuntu2.30

Open the chart page →

12,949
argocd-certificate-refreshdevtron-labs0.10.81 of 1See more

argocd-certificate-refresh devtron-labs 0.10.8

1 of the 1 container images this version deploys carry CVE-2026-44656.

Container imageDigestPackageFixed in
quay.io/devtron/argocd-cert-refresh:v102b6db27eaf3d
vim@2:8.2.3995-1ubuntu2.3
2:8.2.3995-1ubuntu2.30

Open the chart page →

12,949
truecommanddjjudas21Verified publisher0.1.01 of 1See more

truecommand djjudas21 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-44656.

Container imageDigestPackageFixed in
ixsystems/truecommand:3.2.019c218455cd2
vim@2:9.1.1230-2
no fix listed

Open the chart page →

5,174
dominodomino-iisasVerified publisher0.3.11 of 3See more

domino domino-iisas 0.3.1

1 of the 3 container images this version deploys carry CVE-2026-44656.

Container imageDigestPackageFixed in
ghcr.io/iisas/domino-frontend:k8s8e53861be292
vim@2:9.0.1378-2+deb12u2
no fix listed

Open the chart page →

10,270
arbitrumdysnixVerified publisher0.1.11 of 1See more

arbitrum dysnix 0.1.1

1 of the 1 container images this version deploys carry CVE-2026-44656.

Container imageDigestPackageFixed in
offchainlabs/nitro-node:v3.1.0-7d1d84ce95865866129
vim@2:9.0.1378-2
no fix listed

Open the chart page →

9,244
seafileeleksbai0.1.11 of 3See more

seafile eleksbai 0.1.1

1 of the 3 container images this version deploys carry CVE-2026-44656.

Container imageDigestPackageFixed in
seafileltd/seafile-mc:9.0.106693911bcc40
vim@2:8.1.2269-1ubuntu5.9
2:8.1.2269-1ubuntu5.32+esm5

Open the chart page →

25,122
elasticsearch-umbrellaempathyco0.8.121 of 3See more

elasticsearch-umbrella empathyco 0.8.12

1 of the 3 container images this version deploys carry CVE-2026-44656.

Container imageDigestPackageFixed in
empathyco/elasticsearch:7.17.2-memlock03e724e41eeb
vim@2:8.1.2269-1ubuntu5.7
2:8.1.2269-1ubuntu5.32+esm5

Open the chart page →

10,564
supportpalevilgn0me0.1.61 of 1See more

supportpal evilgn0me 0.1.6

1 of the 1 container images this version deploys carry CVE-2026-44656.

Container imageDigestPackageFixed in
public.ecr.aws/supportpal/helpdesk-monolithic:4.0.4573779e57fae
vim@2:8.1.2269-1ubuntu5
2:8.1.2269-1ubuntu5.32+esm5

Open the chart page →

20,933
apache-musicindexgeek-cookbookVerified publisher2.4.21 of 1See more

apache-musicindex geek-cookbook 2.4.2

1 of the 1 container images this version deploys carry CVE-2026-44656.

Container imageDigestPackageFixed in
ghcr.io/k8s-at-home/apache-musicindex:v1.4.1-2c9bd82dc5fda
vim@2:8.1.2269-1ubuntu5.7
2:8.1.2269-1ubuntu5.32+esm5

Open the chart page →

14,659
jackettgeek-cookbookVerified publisher11.7.21 of 1See more

jackett geek-cookbook 11.7.2

1 of the 1 container images this version deploys carry CVE-2026-44656.

Container imageDigestPackageFixed in
ghcr.io/k8s-at-home/jackett:v0.20.13163a4715b46aa2
vim@2:8.1.2269-1ubuntu5.7
2:8.1.2269-1ubuntu5.32+esm5

Open the chart page →

9,698
nzbgetgeek-cookbookVerified publisher12.4.21 of 1See more

nzbget geek-cookbook 12.4.2

1 of the 1 container images this version deploys carry CVE-2026-44656.

Container imageDigestPackageFixed in
ghcr.io/k8s-at-home/nzbget:v21.1e5571acd10ce
vim@2:8.2.3995-1ubuntu2
2:8.2.3995-1ubuntu2.30

Open the chart page →

12,076
puppeteergeek-cookbookVerified publisher1.2.21 of 1See more

puppeteer geek-cookbook 1.2.2

1 of the 1 container images this version deploys carry CVE-2026-44656.

Container imageDigestPackageFixed in
ghcr.io/jr0dd/puppeteer:v13.3.26047599cd78e
vim@2:8.1.2269-1ubuntu5.7
2:8.1.2269-1ubuntu5.32+esm5

Open the chart page →

15,730
qbittorrentgeek-cookbookVerified publisher13.5.21 of 1See more

qbittorrent geek-cookbook 13.5.2

1 of the 1 container images this version deploys carry CVE-2026-44656.

Container imageDigestPackageFixed in
ghcr.io/k8s-at-home/qbittorrent:v4.4.261deadd1ec78
vim@2:8.1.2269-1ubuntu5.7
2:8.1.2269-1ubuntu5.32+esm5

Open the chart page →

11,807
radarrgeek-cookbookVerified publisher16.3.21 of 1See more

radarr geek-cookbook 16.3.2

1 of the 1 container images this version deploys carry CVE-2026-44656.

Container imageDigestPackageFixed in
ghcr.io/k8s-at-home/radarr:v4.1.0.61754273dfaf0295
vim@2:8.2.3995-1ubuntu2
2:8.2.3995-1ubuntu2.30

Open the chart page →

10,379
seafilegeek-cookbookVerified publisher3.2.01 of 1See more

seafile geek-cookbook 3.2.0

1 of the 1 container images this version deploys carry CVE-2026-44656.

Container imageDigestPackageFixed in
seafileltd/seafile-mc:8.0.7ed0fcda5e6a9
vim@2:8.1.2269-1ubuntu5
2:8.1.2269-1ubuntu5.32+esm5

Open the chart page →

24,293
teedygeek-cookbookVerified publisher6.2.01 of 1See more

teedy geek-cookbook 6.2.0

1 of the 1 container images this version deploys carry CVE-2026-44656.

Container imageDigestPackageFixed in
sismics/docs:v1.10f4b0ef019cf1
vim@2:8.0.1453-1ubuntu1
2:8.0.1453-1ubuntu1.13+esm17

Open the chart page →

26,944
transmissiongeek-cookbookVerified publisher8.4.31 of 1See more

transmission geek-cookbook 8.4.3

1 of the 1 container images this version deploys carry CVE-2026-44656.

Container imageDigestPackageFixed in
ghcr.io/k8s-at-home/transmission:v3.006011182e3946
vim@2:8.1.2269-1ubuntu5.7
2:8.1.2269-1ubuntu5.32+esm5

Open the chart page →

11,861
xtevegeek-cookbookVerified publisher8.4.21 of 1See more

xteve geek-cookbook 8.4.2

1 of the 1 container images this version deploys carry CVE-2026-44656.

Container imageDigestPackageFixed in
ghcr.io/k8s-at-home/xteve:v2.2.0.200292b3614670f
vim@2:8.1.2269-1ubuntu5.7
2:8.1.2269-1ubuntu5.32+esm5

Open the chart page →

17,929
helixhelix1.4.31 of 2See more

helix helix 1.4.3

1 of the 2 container images this version deploys carry CVE-2026-44656.

Container imageDigestPackageFixed in
quay.io/jupyterhub/k8s-hub:4.3.492f883d09270
vim@2:9.0.1378-2+deb12u2
no fix listed

Open the chart page →

5,568
countlyhelmforgeVerified publisher1.2.61 of 3See more

countly helmforge 1.2.6

1 of the 3 container images this version deploys carry CVE-2026-44656.

Container imageDigestPackageFixed in
countly/countly-server:25.05.4e3c238248f99
vim@2:8.1.2269-1ubuntu5.7
2:8.1.2269-1ubuntu5.32+esm5

Open the chart page →

18,813
jupyterhubhelmforgeVerified publisher1.0.61 of 3See more

jupyterhub helmforge 1.0.6

1 of the 3 container images this version deploys carry CVE-2026-44656.

Container imageDigestPackageFixed in
quay.io/jupyterhub/k8s-hub:4.3.5113e372cf71b
vim@2:9.0.1378-2+deb12u2
no fix listed

Open the chart page →

5,341
hyperglance-helmhyperglance-helmVerified publisher10.0.53 of 6See more

hyperglance-helm hyperglance-helm 10.0.5

3 of the 6 container images this version deploys carry CVE-2026-44656.

Container imageDigestPackageFixed in
hyperglance/init:wildfly467ad8491bc3
vim@2:8.2.3995-1ubuntu2.27
2:8.2.3995-1ubuntu2.30
hyperglance/init:postgres9fd5faf1fe80
vim@2:8.2.3995-1ubuntu2.27
2:8.2.3995-1ubuntu2.30
hyperglance/init:apacheb2f8c6d52623
vim@2:8.2.3995-1ubuntu2.27
2:8.2.3995-1ubuntu2.30

Open the chart page →

10,967
ibm-swift-sampleibm-charts1.1.21 of 1See more

ibm-swift-sample ibm-charts 1.1.2

1 of the 1 container images this version deploys carry CVE-2026-44656.

Container imageDigestPackageFixed in
ibmcom/icp-swift-sample:latestb5d8c6714dbc
vim@2:7.4.1689-3ubuntu1.2
2:7.4.1689-3ubuntu1.5+esm32

Open the chart page →

25,160
ibm-ws-dyn-agent-devibm-charts1.0.01 of 1See more

ibm-ws-dyn-agent-dev ibm-charts 1.0.0

1 of the 1 container images this version deploys carry CVE-2026-44656.

Container imageDigestPackageFixed in
ibmcom/ibm-workload-scheduler-agent-dynamic-dev:9.4.0.047e4dc1e27cdf
vim@2:7.4.1689-3ubuntu1.2
2:7.4.1689-3ubuntu1.5+esm32

Open the chart page →

19,295
bluesky-pdsijmacd1.0.01 of 2See more

bluesky-pds ijmacd 1.0.0

1 of the 2 container images this version deploys carry CVE-2026-44656.

Container imageDigestPackageFixed in
arunvelsriram/utils:latest655ad18fd8d6
vim@2:9.1.0016-1ubuntu7.8
2:9.1.0016-1ubuntu7.14

Open the chart page →

8,967
ikigaiikigai-chartVerified publisher0.0.91 of 58See more

ikigai ikigai-chart 0.0.9

1 of the 58 container images this version deploys carry CVE-2026-44656.

Container imageDigestPackageFixed in
jupyterhub/k8s-hub:1.2.0e4770285aaf7
vim@2:8.1.2269-1ubuntu5.3
2:8.1.2269-1ubuntu5.32+esm5

Open the chart page →

37,671
kore-boardimprowisedVerified publisher0.5.81 of 4See more

kore-board improwised 0.5.8

1 of the 4 container images this version deploys carry CVE-2026-44656.

Container imageDigestPackageFixed in
ghcr.io/kore3lab/kore-board.terminal:v0.5.5f52e66eff50b
vim@2:8.0.1453-1ubuntu1.9
2:8.0.1453-1ubuntu1.13+esm17

Open the chart page →

16,212
cloudshellinseefrlab4.3.01 of 2See more

cloudshell inseefrlab 4.3.0

1 of the 2 container images this version deploys carry CVE-2026-44656.

Container imageDigestPackageFixed in
inseefrlab/shelly:cloudshell31f04ca7436b
vim@2:8.2.3995-1ubuntu2.15
2:8.2.3995-1ubuntu2.30

Open the chart page →

10,494
intelowlintelowl-helm6.6.1-01-06-20261 of 5See more

intelowl intelowl-helm 6.6.1-01-06-2026

1 of the 5 container images this version deploys carry CVE-2026-44656.

Container imageDigestPackageFixed in
intelowlproject/intelowl:v6.6.10b22e547ea6b
vim@2:9.0.1378-2+deb12u2
no fix listed

Open the chart page →

17,852
dayz-dedicated-server-razorbladex401jespernohrVerified publisher1.0.31 of 1See more

dayz-dedicated-server-razorbladex401 jespernohr 1.0.3

1 of the 1 container images this version deploys carry CVE-2026-44656.

Container imageDigestPackageFixed in
razorbladex401/dayz:latest6a4d79248e7d
vim@2:8.2.3995-1ubuntu2.16
2:8.2.3995-1ubuntu2.30

Open the chart page →

5,208
k8s-dev-podk8s-dev-pod0.3.11 of 1See more

k8s-dev-pod k8s-dev-pod 0.3.1

1 of the 1 container images this version deploys carry CVE-2026-44656.

Container imageDigestPackageFixed in
ghcr.io/bryopsida/k8s-dev-pod:main82d0b161161d
vim@2:9.1.0016-1ubuntu7.8
2:9.1.0016-1ubuntu7.14

Open the chart page →

8,811
flaresolverrk8s-home-lab-repo6.2.01 of 1See more

flaresolverr k8s-home-lab-repo 6.2.0

1 of the 1 container images this version deploys carry CVE-2026-44656.

Container imageDigestPackageFixed in
flaresolverr/flaresolverr:v3.5.0139dfee1c6f8
vim@2:9.0.1378-2+deb12u2
no fix listed

Open the chart page →

27,274
phppgadminkfirfer0.1.121 of 1See more

phppgadmin kfirfer 0.1.12

1 of the 1 container images this version deploys carry CVE-2026-44656.

Container imageDigestPackageFixed in
kfirfer/phppgadmin:7.13.0-22efb4a5d74a3
vim@2:8.1.2269-1ubuntu5.11
2:8.1.2269-1ubuntu5.32+esm5

Open the chart page →

10,248
cdashkitwareVerified publisher0.19.01 of 3See more

cdash kitware 0.19.0

1 of the 3 container images this version deploys carry CVE-2026-44656.

Container imageDigestPackageFixed in
kitware/cdash:v5.3.0d7767d9b9da4
vim@2:9.1.1230-2
no fix listed

Open the chart page →

12,062
flaresolverrkubernetes-homelab-helm-chartsVerified publisher0.1.21 of 1See more

flaresolverr kubernetes-homelab-helm-charts 0.1.2

1 of the 1 container images this version deploys carry CVE-2026-44656.

Container imageDigestPackageFixed in
ghcr.io/flaresolverr/flaresolverr:v3.4.67962759d99d7
vim@2:9.0.1378-2+deb12u2
no fix listed

Open the chart page →

33,583
longhornkvalitetsitVerified publisher1.1.1-01 of 2See more

longhorn kvalitetsit 1.1.1-0

1 of the 2 container images this version deploys carry CVE-2026-44656.

Container imageDigestPackageFixed in
longhornio/longhorn-manager:v1.1.1ede61fe2a472
vim@2:8.0.1453-1ubuntu1.4
2:8.0.1453-1ubuntu1.13+esm17

Open the chart page →

16,520
ladeitladeit0.4.01 of 2See more

ladeit ladeit 0.4.0

1 of the 2 container images this version deploys carry CVE-2026-44656.

Container imageDigestPackageFixed in
kubeoperator/webkubectl:v2.4.0be8f0d624640
vim@2:8.0.1453-1ubuntu1.3
2:8.0.1453-1ubuntu1.13+esm17

Open the chart page →

26,356
nightingalelogic3579Verified publisher0.3.11 of 6See more

nightingale logic3579 0.3.1

1 of the 6 container images this version deploys carry CVE-2026-44656.

Container imageDigestPackageFixed in
flashcatcloud/categraf:latest42e6ab16472e
vim@2:9.1.0016-1ubuntu7.10
2:9.1.0016-1ubuntu7.14

Open the chart page →

8,938
flaresolverrluiscajl0.0.31 of 1See more

flaresolverr luiscajl 0.0.3

1 of the 1 container images this version deploys carry CVE-2026-44656.

Container imageDigestPackageFixed in
flaresolverr/flaresolverr:latest139dfee1c6f8
vim@2:9.0.1378-2+deb12u2
no fix listed

Open the chart page →

27,274
flaresolverrmedia-servarrVerified publisher0.18.11 of 1See more

flaresolverr media-servarr 0.18.1

1 of the 1 container images this version deploys carry CVE-2026-44656.

Container imageDigestPackageFixed in
ghcr.io/flaresolverr/flaresolverr:v3.5.2c80ae007ce2c
vim@2:9.0.1378-2+deb12u2
no fix listed

Open the chart page →

6,136
localpathprovisionermesosphere-stable0.1.21 of 1See more

localpathprovisioner mesosphere-stable 0.1.2

1 of the 1 container images this version deploys carry CVE-2026-44656.

Container imageDigestPackageFixed in
rancher/local-path-provisioner:v0.0.5e66f32d19eb9
vim@2:7.4.1689-3ubuntu1.2
2:7.4.1689-3ubuntu1.5+esm32

Open the chart page →

17,942
elasticsearch-chartmy-elasticsearch0.1.01 of 2See more

elasticsearch-chart my-elasticsearch 0.1.0

1 of the 2 container images this version deploys carry CVE-2026-44656.

Container imageDigestPackageFixed in
library/elasticsearch:7.17.35e6ac15bf6a5
vim@2:8.1.2269-1ubuntu5.7
2:8.1.2269-1ubuntu5.32+esm5

Open the chart page →

9,300
node-debug-dashboardnode-debug-dashboardVerified publisher0.3.21 of 1See more

node-debug-dashboard node-debug-dashboard 0.3.2

1 of the 1 container images this version deploys carry CVE-2026-44656.

Container imageDigestPackageFixed in
ghcr.io/samr037/node-debug-dashboard:0.3.0c79b2e64a211
vim@2:9.0.1378-2+deb12u2
no fix listed

Open the chart page →

6,854
zookeeper-helm-chartnotesprojectchart0.1.01 of 1See more

zookeeper-helm-chart notesprojectchart 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-44656.

Container imageDigestPackageFixed in
wurstmeister/zookeeper:latest7a7fd44a7210
vim@2:7.4.052-1ubuntu3
2:7.4.052-1ubuntu3.1+esm26

Open the chart page →

41,427
comacopencord1.0.01 of 9See more

comac opencord 1.0.0

1 of the 9 container images this version deploys carry CVE-2026-44656.

Container imageDigestPackageFixed in
omecproject/onos-progran:1.0.05715e5648aa0
vim@2:7.4.1689-3ubuntu1.2
2:7.4.1689-3ubuntu1.5+esm32

Open the chart page →

88,546
onos-progranopencord1.2.71 of 2See more

onos-progran opencord 1.2.7

1 of the 2 container images this version deploys carry CVE-2026-44656.

Container imageDigestPackageFixed in
muluder/prograncontrollermcord:0.1.843b597a93da7
vim@2:7.4.1689-3ubuntu1.2
2:7.4.1689-3ubuntu1.5+esm32

Open the chart page →

38,865

Container images carrying it

115 by charts deploying them

A fixed version is listed for 1 of the 1 affected package.

Container imageDigestPackageFixed inUsed by
ghcr.io/k8s-at-home/sonarr:v3.0.8.15070eb230e2381a
vim@2:8.2.3995-1ubuntu2
2:8.2.3995-1ubuntu2.30
1
ghcr.io/k8s-at-home/transmission:v3.006011182e3946
vim@2:8.1.2269-1ubuntu5.7
2:8.1.2269-1ubuntu5.32+esm5
1
ghcr.io/k8s-at-home/xteve:v2.2.0.200292b3614670f
vim@2:8.1.2269-1ubuntu5.7
2:8.1.2269-1ubuntu5.32+esm5
1
ghcr.io/k8s-home-lab/wireguard:v1.0.20210914779858b5e11d
vim@2:8.1.2269-1ubuntu5.15
2:8.1.2269-1ubuntu5.32+esm5
1
ghcr.io/kore3lab/kore-board.terminal:v0.5.5f52e66eff50b
vim@2:8.0.1453-1ubuntu1.9
2:8.0.1453-1ubuntu1.13+esm17
1
ghcr.io/runwhen-contrib/runwhen-local:0.12.0533ce58c6e02
vim@2:9.1.1230-2
no fix listed
1
ghcr.io/samr037/node-debug-dashboard:0.3.0c79b2e64a211
vim@2:9.0.1378-2+deb12u2
no fix listed
1
ghcr.io/sergelogvinov/postgresql:16.15fafb72e98f22
vim@2:9.0.1378-2+deb12u2
no fix listed
1
ghcr.io/streamingfast/substreams-sink-kv:v2.3.026953ec68d5d
vim@2:8.1.2269-1ubuntu5.29
2:8.1.2269-1ubuntu5.32+esm5
1
ghcr.io/streamingfast/substreams-sink-noop:v1.4.0d7c43c3135c6
vim@2:8.1.2269-1ubuntu5.29
2:8.1.2269-1ubuntu5.32+esm5
1
public.ecr.aws/supportpal/helpdesk-monolithic:4.0.4573779e57fae
vim@2:8.1.2269-1ubuntu5
2:8.1.2269-1ubuntu5.32+esm5
1
quay.io/galaxyproject/galaxy-min:26.1.12c324c9789f5
vim@2:9.1.1230-2
no fix listed
1
quay.io/jupyterhub/k8s-hub:4.4.2108fbb01c3fe
vim@2:9.0.1378-2+deb12u2
no fix listed
1
quay.io/jupyterhub/k8s-hub:4.3.5113e372cf71b
vim@2:9.0.1378-2+deb12u2
no fix listed
1
quay.io/jupyterhub/k8s-hub:4.3.492f883d09270
vim@2:9.0.1378-2+deb12u2
no fix listed
1

syft 1.42.1 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.