StackRadar

CVE-2026-44705

High

Advisory

Published 27 May 2026In the index since 6 Sept 2026
Severity
High
worst across findings
CVSS
8.7
base score, highest
EPSS
0.004
37th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
178
of 17,781 indexed, latest versions
Container images
174
deployed by those charts
Fix available
1 of 1
affected package

tmp has Path Traversal via unsanitized prefix/postfix that enables directory escape

Carried by container images the latest versions of 178 of 17,781 indexed charts deploy, on 174 images.

Affected packageAffected versionsFixed inImages
tmpnpm0.0.23, 0.0.28, 0.0.29, 0.0.30+6 more0.2.6174
OSV records
GHSA-ph9p-34f9-6g65

Charts affected

178 by stars
ChartLatestAffected imagesRadar Score
ibm-microclimateibm-charts0.1.01 of 8See more

ibm-microclimate ibm-charts 0.1.0

1 of the 8 container images this version deploys carry CVE-2026-44705.

Container imageDigestPackageFixed in
ibmcom/microclimate-portal:latested5505e5c7ec
tmp@0.0.29
0.2.6

Open the chart page →

57,669
dtlinfradao0.0.11 of 1See more

dtl infradao 0.0.1

1 of the 1 container images this version deploys carry CVE-2026-44705.

Container imageDigestPackageFixed in
ethereumoptimism/data-transport-layer:0.5.56e07968a0e686
tmp@0.0.33
0.2.6

Open the chart page →

4,944
backstageirembo-backstage-helmVerified publisher1.0.51 of 3See more

backstage irembo-backstage-helm 1.0.5

1 of the 3 container images this version deploys carry CVE-2026-44705.

Container imageDigestPackageFixed in
roadiehq/community-backstage-image:latestef355bf5b639
tmp@0.0.33
0.2.6

Open the chart page →

7,232
n8njanip81-helm-chartsVerified publisher0.1.41 of 1See more

n8n janip81-helm-charts 0.1.4

1 of the 1 container images this version deploys carry CVE-2026-44705.

Container imageDigestPackageFixed in
n8nio/n8n:1.86.08b39ed5a2de9
tmp@0.2.3
0.2.6

Open the chart page →

5,826
monocularjenkins-x0.6.41 of 4See more

monocular jenkins-x 0.6.4

1 of the 4 container images this version deploys carry CVE-2026-44705.

Container imageDigestPackageFixed in
migmartri/prerender:latest486aacfd5aa9
tmp@0.0.28
0.2.6

Open the chart page →

4,614
yapijoelee2012Verified publisher0.2.01 of 1See more

yapi joelee2012 0.2.0

1 of the 1 container images this version deploys carry CVE-2026-44705.

Container imageDigestPackageFixed in
jayfong/yapi:1.10.2163e5d621910
tmp@0.0.33
0.2.6

Open the chart page →

6,454
kube-admission-controller-starterk8s-validating-webhook0.2.01 of 2See more

kube-admission-controller-starter k8s-validating-webhook 0.2.0

1 of the 2 container images this version deploys carry CVE-2026-44705.

Container imageDigestPackageFixed in
ghcr.io/curium-rocks/kube-admission-controller-starter:maine9716966f30b
tmp@0.2.1
0.2.6

Open the chart page →

2,166
skoonerkfirfer0.0.61 of 1See more

skooner kfirfer 0.0.6

1 of the 1 container images this version deploys carry CVE-2026-44705.

Container imageDigestPackageFixed in
ghcr.io/skooner-k8s/skooner:stable60c1562e4d51
tmp@0.2.1
0.2.6

Open the chart page →

1,341
visual-regression-trackerkokuwa5.1.01 of 4See more

visual-regression-tracker kokuwa 5.1.0

1 of the 4 container images this version deploys carry CVE-2026-44705.

Container imageDigestPackageFixed in
visualregressiontracker/api:5.0.11941aeb8c8bf9
tmp@0.0.33
0.2.6

Open the chart page →

9,098
kubeflowkromanow94-kubeflow0.5.11 of 30See more

kubeflow kromanow94-kubeflow 0.5.1

1 of the 30 container images this version deploys carry CVE-2026-44705.

Container imageDigestPackageFixed in
kubeflownotebookswg/centraldashboard:v1.9.2af55c22ef5de
tmp@0.2.1
0.2.6

Open the chart page →

70,530
ohmyformkrzwiatrzyk0.0.11 of 1See more

ohmyform krzwiatrzyk 0.0.1

1 of the 1 container images this version deploys carry CVE-2026-44705.

Container imageDigestPackageFixed in
ohmyform/ohmyform:1.0.3afe53f4acdb1
tmp@0.0.33
0.2.6

Open the chart page →

4,230
tooljetkrzwiatrzyk1.1.11 of 2See more

tooljet krzwiatrzyk 1.1.1

1 of the 2 container images this version deploys carry CVE-2026-44705.

Container imageDigestPackageFixed in
tooljet/tooljet-ce:v1.18.0c85a4720e42e
tmp@0.2.1
0.2.6

Open the chart page →

5,410
component-storekubebb0.0.231 of 1See more

component-store kubebb 0.0.23

1 of the 1 container images this version deploys carry CVE-2026-44705.

Container imageDigestPackageFixed in
kubebb/component-store:latestfd8ecbd73213
tmp@0.2.1
0.2.6

Open the chart page →

2,178
u4a-componentkubebb0.2.101 of 8See more

u4a-component kubebb 0.2.10

1 of the 8 container images this version deploys carry CVE-2026-44705.

Container imageDigestPackageFixed in
kubebb/bff-server:v0.2.0-202312040fbb732379bc
tmp@0.2.1
0.2.6

Open the chart page →

13,819
homepagekubernetes-homelab-helm-chartsVerified publisher0.1.01 of 1See more

homepage kubernetes-homelab-helm-charts 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-44705.

Container imageDigestPackageFixed in
ghcr.io/gethomepage/homepage:v1.13.1d8d784e50901
tmp@0.2.3
0.2.6

Open the chart page →

1,378
kyso-frontkyso1.0.01 of 1See more

kyso-front kyso 1.0.0

1 of the 1 container images this version deploys carry CVE-2026-44705.

Container imageDigestPackageFixed in
kyso/kyso-front:lateste52595c5c16f
tmp@0.0.33
0.2.6

Open the chart page →

2,685
nodecg-chartmarathon-charts0.1.51 of 2See more

nodecg-chart marathon-charts 0.1.5

1 of the 2 container images this version deploys carry CVE-2026-44705.

Container imageDigestPackageFixed in
ghcr.io/rodg/nodecg-base:latest31be4bf87070
tmp@0.0.33
0.2.6

Open the chart page →

7,315
mauticmautic-chartVerified publisher1.0.21 of 3See more

mautic mautic-chart 1.0.2

1 of the 3 container images this version deploys carry CVE-2026-44705.

Container imageDigestPackageFixed in
mautic/mautic:7-apacheeb8cc73d97e1
tmp@0.2.5
0.2.6

Open the chart page →

8,303
eoloplantmca-eoloplaner0.1.01 of 7See more

eoloplant mca-eoloplaner 0.1.0

1 of the 7 container images this version deploys carry CVE-2026-44705.

Container imageDigestPackageFixed in
hugohg34/server:0.0.2503e5d8960ff
tmp@0.2.1
0.2.6

Open the chart page →

29,588
kommandermesosphere-stable0.39.21 of 29See more

kommander mesosphere-stable 0.39.2

1 of the 29 container images this version deploys carry CVE-2026-44705.

Container imageDigestPackageFixed in
mesosphere/kommander:6.100.13917e82333a9
tmp@0.2.1
0.2.6

Open the chart page →

68,284
opsportalmesosphere-stable0.9.51 of 3See more

opsportal mesosphere-stable 0.9.5

1 of the 3 container images this version deploys carry CVE-2026-44705.

Container imageDigestPackageFixed in
mesosphere/kommander:6.100.13917e82333a9
tmp@0.2.1
0.2.6

Open the chart page →

7,027
middleware-odigosmiddleware-labsVerified publisher0.2.411 of 6See more

middleware-odigos middleware-labs 0.2.41

1 of the 6 container images this version deploys carry CVE-2026-44705.

Container imageDigestPackageFixed in
ghcr.io/middleware-labs/odigos-ui:middleware-test-0.0.787120a4561a9
tmp@0.2.1
0.2.6

Open the chart page →

8,370
middleware-visionmiddleware-labsVerified publisher0.2.651 of 6See more

middleware-vision middleware-labs 0.2.65

1 of the 6 container images this version deploys carry CVE-2026-44705.

Container imageDigestPackageFixed in
ghcr.io/middleware-labs/vision-ui:middleware-test-0.0.853772b7b42c7
tmp@0.2.1
0.2.6

Open the chart page →

8,361
account-lookup-servicemojaloop13.0.02 of 4See more

account-lookup-service mojaloop 13.0.0

2 of the 4 container images this version deploys carry CVE-2026-44705.

Container imageDigestPackageFixed in
mojaloop/account-lookup-service:v11.8.0b06d3287ea82
tmp@0.2.1
0.2.6
mojaloop/event-sidecar:v11.0.189b8ab71b74b
tmp@0.2.1
0.2.6

Open the chart page →

11,695
account-lookup-service-adminmojaloop13.0.02 of 4See more

account-lookup-service-admin mojaloop 13.0.0

2 of the 4 container images this version deploys carry CVE-2026-44705.

Container imageDigestPackageFixed in
mojaloop/account-lookup-service:v11.8.0b06d3287ea82
tmp@0.2.1
0.2.6
mojaloop/event-sidecar:v11.0.189b8ab71b74b
tmp@0.2.1
0.2.6

Open the chart page →

11,695
admin-api-svcmojaloop12.0.02 of 4See more

admin-api-svc mojaloop 12.0.0

2 of the 4 container images this version deploys carry CVE-2026-44705.

Container imageDigestPackageFixed in
mojaloop/central-ledger:v13.14.01abc8a7aa71c
tmp@0.2.1
0.2.6
mojaloop/event-sidecar:v11.0.189b8ab71b74b
tmp@0.2.1
0.2.6

Open the chart page →

12,108
finance-portalmojaloop5.1.42 of 11See more

finance-portal mojaloop 5.1.4

2 of the 11 container images this version deploys carry CVE-2026-44705.

Container imageDigestPackageFixed in
mojaloop/reporting:v12.1.0d480a62103d6
tmp@0.2.3
0.2.6
mojaloop/reporting-hub-bop-api-svc:v4.1.2b45a2d6f0f2a
tmp@0.0.33
0.2.6

Open the chart page →

14,809
fspiop-transfer-api-svcmojaloop12.0.12 of 3See more

fspiop-transfer-api-svc mojaloop 12.0.1

2 of the 3 container images this version deploys carry CVE-2026-44705.

Container imageDigestPackageFixed in
mojaloop/event-sidecar:v11.0.189b8ab71b74b
tmp@0.2.1
0.2.6
mojaloop/ml-api-adapter:v11.1.6fb71d233c742
tmp@0.2.1
0.2.6

Open the chart page →

11,479
mojaloopmojaloop14.0.04 of 6See more

mojaloop mojaloop 14.0.0

4 of the 6 container images this version deploys carry CVE-2026-44705.

Container imageDigestPackageFixed in
mojaloop/account-lookup-service:v11.8.0b06d3287ea82
tmp@0.2.1
0.2.6
mojaloop/central-ledger:v13.14.01abc8a7aa71c
tmp@0.2.1
0.2.6
mojaloop/event-sidecar:v11.0.189b8ab71b74b
tmp@0.2.1
0.2.6
mojaloop/ml-api-adapter:v11.1.6fb71d233c742
tmp@0.2.1
0.2.6

Open the chart page →

19,226
reporting-hub-bop-api-svcmojaloop4.1.31 of 1See more

reporting-hub-bop-api-svc mojaloop 4.1.3

1 of the 1 container images this version deploys carry CVE-2026-44705.

Container imageDigestPackageFixed in
mojaloop/reporting-hub-bop-api-svc:v4.1.2b45a2d6f0f2a
tmp@0.0.33
0.2.6

Open the chart page →

1,661
reporting-legacy-apimojaloop2.2.01 of 1See more

reporting-legacy-api mojaloop 2.2.0

1 of the 1 container images this version deploys carry CVE-2026-44705.

Container imageDigestPackageFixed in
mojaloop/reporting:v12.1.0d480a62103d6
tmp@0.2.3
0.2.6

Open the chart page →

1,948
sample-appmongodb-helm-charts0.1.01 of 2See more

sample-app mongodb-helm-charts 0.1.0

1 of the 2 container images this version deploys carry CVE-2026-44705.

Container imageDigestPackageFixed in
quay.io/mongodb/farm-intro-frontend:0.199ccdfd543e1
tmp@0.0.33
0.2.6

Open the chart page →

6,438
monocularmonocular1.4.152 of 5See more

monocular monocular 1.4.15

2 of the 5 container images this version deploys carry CVE-2026-44705.

Container imageDigestPackageFixed in
migmartri/prerender:latest486aacfd5aa9
tmp@0.0.28
0.2.6
quay.io/helmpack/monocular-ui:v1.10.086b71e90319f
tmp@0.0.28
0.2.6

Open the chart page →

7,048
sentence-collectormozilla0.1.21 of 2See more

sentence-collector mozilla 0.1.2

1 of the 2 container images this version deploys carry CVE-2026-44705.

Container imageDigestPackageFixed in
mozilla/sentencecollector:2.0.91da6ff5c4895
tmp@0.0.33
0.2.6

Open the chart page →

6,684
tianjimsgbyte0.1.171 of 2See more

tianji msgbyte 0.1.17

1 of the 2 container images this version deploys carry CVE-2026-44705.

Container imageDigestPackageFixed in
moonrailgun/tianji:1.11.2b528c8f8fcc4
tmp@0.0.33
0.2.6

Open the chart page →

4,560
dashynas-helm-chartsVerified publisher1.0.41 of 1See more

dashy nas-helm-charts 1.0.4

1 of the 1 container images this version deploys carry CVE-2026-44705.

Container imageDigestPackageFixed in
lissy93/dashy:2.0.51991f7be5ed0
tmp@0.0.33
0.2.6

Open the chart page →

3,269
example-dev-toolsnoygal0.2.82 of 3See more

example-dev-tools noygal 0.2.8

2 of the 3 container images this version deploys carry CVE-2026-44705.

Container imageDigestPackageFixed in
linuxserver/cloud9:latest45c5fe102ff3
tmp@0.0.33
0.2.6
linuxserver/codimd:latestb801bbcf6386
tmp@0.0.33
0.2.6

Open the chart page →

27,465
ferdi-serverobeoneVerified publisher1.0.31 of 2See more

ferdi-server obeone 1.0.3

1 of the 2 container images this version deploys carry CVE-2026-44705.

Container imageDigestPackageFixed in
getferdi/ferdi-server:1.3.26e620b85afaa
tmp@0.0.33
0.2.6

Open the chart page →

1,866
nocodbone-acre-fundVerified publisher0.4.61 of 3See more

nocodb one-acre-fund 0.4.6

1 of the 3 container images this version deploys carry CVE-2026-44705.

Container imageDigestPackageFixed in
nocodb/nocodb:0.258.06779a4ddedf2
tmp@0.0.33
0.2.6

Open the chart page →

4,219
flomesh-consoleopenshift0.70.0-30-ubi81 of 2See more

flomesh-console openshift 0.70.0-30-ubi8

1 of the 2 container images this version deploys carry CVE-2026-44705.

Container imageDigestPackageFixed in
quay.io/flomesh/flomesh-console-ubi8:0.70.0-30ce6938ff6709
tmp@0.2.1
0.2.6

Open the chart page →

9,968
osdfir-infrastructureosdfir-infrastructureVerified publisher2.15.01 of 40See more

osdfir-infrastructure osdfir-infrastructure 2.15.0

1 of the 40 container images this version deploys carry CVE-2026-44705.

Container imageDigestPackageFixed in
library/arangodb:3.11.81e75d74954a4
tmp@0.0.33
0.2.6

Open the chart page →

71,208
yetiosdfir-infrastructureVerified publisher1.0.51 of 4See more

yeti osdfir-infrastructure 1.0.5

1 of the 4 container images this version deploys carry CVE-2026-44705.

Container imageDigestPackageFixed in
library/arangodb:3.11.81e75d74954a4
tmp@0.0.33
0.2.6

Open the chart page →

6,583
mishtip2p-avs0.1.01 of 2See more

mishti p2p-avs 0.1.0

1 of the 2 container images this version deploys carry CVE-2026-44705.

Container imageDigestPackageFixed in
mishtinetwork/operator:latestbb3fe67a5f7c
tmp@0.0.33
0.2.6

Open the chart page →

3,999
ungatep2p-avs0.1.01 of 3See more

ungate p2p-avs 0.1.0

1 of the 3 container images this version deploys carry CVE-2026-44705.

Container imageDigestPackageFixed in
xom4ekp2p/infini-route-attestators-public-mainnet-attester:latestd0e0aa238b02
tmp@0.0.33
0.2.6

Open the chart page →

27,373
blockscoutparadeum-teamVerified publisher0.1.51 of 1See more

blockscout paradeum-team 0.1.5

1 of the 1 container images this version deploys carry CVE-2026-44705.

Container imageDigestPackageFixed in
quay.io/netwarps/blockscoutdigest-pinnedbecd3e39360a
tmp@0.0.33
0.2.6

Open the chart page →

3,448
codimdphntom0.1.121 of 3See more

codimd phntom 0.1.12

1 of the 3 container images this version deploys carry CVE-2026-44705.

Container imageDigestPackageFixed in
phntom/codimd:2.4.31b9aafbb62e6
tmp@0.0.33
0.2.6

Open the chart page →

6,524
helm-redchefredchef0.1.01 of 3See more

helm-redchef redchef 0.1.0

1 of the 3 container images this version deploys carry CVE-2026-44705.

Container imageDigestPackageFixed in
sharanalwar/redchef-frontend:latest5e82950b16b7
tmp@0.2.3
0.2.6

Open the chart page →

4,763
relfinder-reformedrelfinderreformed2.0.01 of 2See more

relfinder-reformed relfinderreformed 2.0.0

1 of the 2 container images this version deploys carry CVE-2026-44705.

Container imageDigestPackageFixed in
ghcr.io/woodenmaiden/relfinderreformedapi:1.1.20708d30433d4
tmp@0.0.33
0.2.6

Open the chart page →

6,282
gristrlex0.1.01 of 1See more

grist rlex 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-44705.

Container imageDigestPackageFixed in
gristlabs/grist:0.7.96e71b1914a7e
tmp@0.2.1
0.2.6

Open the chart page →

5,215
safe-stacksafe-global0.1.02 of 9See more

safe-stack safe-global 0.1.0

2 of the 9 container images this version deploys carry CVE-2026-44705.

Container imageDigestPackageFixed in
gjeanmart/safe-ganache-node:latest926264c8f2d1
tmp@0.0.33
0.2.6
safeglobal/safe-client-gateway-nest:v1.51.012ccfd93fcaf
tmp@0.0.33
0.2.6

Open the chart page →

19,560

Container images carrying it

174 by charts deploying them

A fixed version is listed for 1 of the 1 affected package.

Container imageDigestPackageFixed inUsed by
ethersphere/bzz-token-service:latest7624f11a72ad
tmp@0.0.33
0.2.6
1
ethpandaops/ethereumjs:masterfb84b718500f
tmp@0.0.33
0.2.6
1
evoapicloud/evolution-api:latest966625532d90
tmp@0.0.33
0.2.6
1
fanzynoodle/smeejas:0.0.15f9916c1a287
tmp@0.2.1
0.2.6
1
flagsmith/flagsmith-frontend:v2.6.0df02a29e8b0c
tmp@0.0.33
0.2.6
1
getferdi/ferdi-server:1.3.26e620b85afaa
tmp@0.0.33
0.2.6
1
globalping/globalping-probe:latest8acbd23009fd
tmp@0.0.33
0.2.6
1
governify/collector-dynamic:v1.3.06d3d1a5b46a9
tmp@0.2.1
0.2.6
1
gristlabs/grist:0.7.96e71b1914a7e
tmp@0.2.1
0.2.6
1
halkeye/irslackd:latest7638bfba70b0
tmp@0.0.33
0.2.6
1
heywood8/redisinsight:2.28.00bc9ab313d37
tmp@0.0.33
0.2.6
1
hkotel/mealie:frontend-v1.0.0beta-23c04c0e85039
tmp@0.0.33
0.2.6
1
hugohg34/server:0.0.2503e5d8960ff
tmp@0.2.1
0.2.6
1
ianw/quickchart:v1.7.1dc49dd460c37
tmp@0.0.33
0.2.6
1
ibarreche/cloud-front-ci:latestc8970ac1c8dc
tmp@0.0.30
0.2.6
1
ibmcom/app-nav-ui:1.0.1e2a86997b36b
tmp@0.0.33
0.2.6
1
ibmcom/microclimate-portal:latested5505e5c7ec
tmp@0.0.29
0.2.6
1
jayfong/yapi:1.10.2163e5d621910
tmp@0.0.33
0.2.6
1
konradkleine/docker-registry-frontend:v2181aad54ee64
tmp@0.0.23
0.2.6
1
kubebb/bff-server:v0.2.0-202312040fbb732379bc
tmp@0.2.1
0.2.6
1
kubebb/component-store:latestfd8ecbd73213
tmp@0.2.1
0.2.6
1
kubeflownotebookswg/centraldashboard:v1.6.137300551dea6
tmp@0.2.1
0.2.6
1
kubeflownotebookswg/centraldashboard:v1.9.2af55c22ef5de
tmp@0.2.1
0.2.6
1
kubevious/backend:1.2.22d9ba6eb46b6
tmp@0.2.1
0.2.6
1
kubevious/parser:1.2.299ae7a5168c2
tmp@0.2.1
0.2.6
1
kyleslugg/klusterview:latestba8c36dfdfbd
tmp@0.2.1
0.2.6
1
kyso/kyso-front:lateste52595c5c16f
tmp@0.0.33
0.2.6
1
leonardomulticloud/svc-vault-frontend:v1.0.0e42a341e0299
tmp@0.2.3
0.2.6
1
library/ghost:4.37.0767230c0f263
tmp@0.0.33
0.2.6
1
library/ghost:5.79.083f7bf209844
tmp@0.0.33
0.2.6
1
library/ghost:6.22.0-alpine3.23ac533a6988ee
tmp@0.0.33
0.2.6
1
library/kibana:8.18.004c0fc150f3a
tmp@0.0.33
0.2.6
1
linuxserver/cloud9:latest45c5fe102ff3
tmp@0.0.33
0.2.6
1
linuxserver/codimd:latestb801bbcf6386
tmp@0.0.33
0.2.6
1
lissy93/dashy:2.0.51991f7be5ed0
tmp@0.0.33
0.2.6
1
ltdstudio/terraforming-mars:latest0e76c6f4eac0
tmp@0.0.33
0.2.6
1
lukasreining/open-api-schema-collector:0.1.050e021c42e33
tmp@0.2.1
0.2.6
1
markdegroot/unifi-protect-arm64:latestd8445f2a0de6
tmp@0.0.33
0.2.6
1
mautic/mautic:7-apacheeb8cc73d97e1
tmp@0.2.5
0.2.6
1
minddocdev/hubot:0.1.96c60b11a4fa7
tmp@0.0.33
0.2.6
1
mishtinetwork/operator:latestbb3fe67a5f7c
tmp@0.0.33
0.2.6
1
misskey/misskey:12.110.1e08b7c478093
tmp@0.2.1
0.2.6
1
moonrailgun/tianji:1.11.2b528c8f8fcc4
tmp@0.0.33
0.2.6
1
mozilla/sentencecollector:2.0.91da6ff5c4895
tmp@0.0.33
0.2.6
1
n8nio/n8n:2.25.7761374d4eb84
tmp@0.2.4
0.2.6
1
n8nio/n8n:1.86.08b39ed5a2de9
tmp@0.2.3
0.2.6
1
n8nio/n8n:0.212.0a9195bc499a3
tmp@0.2.1
0.2.6
1
n8nio/n8n:1.33.1dd171d45102a
tmp@0.0.33
0.2.6
1
nocodb/nocodb:0.258.06779a4ddedf2
tmp@0.0.33
0.2.6
1
nocodb/nocodb:0.301.5d9516f0bf546
tmp@0.2.5
0.2.6
1

syft 1.42.1 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.