StackRadar

CVE-2026-45077

Critical

Advisory

Published 27 May 2026In the index since 6 Sept 2026
Severity
Critical
worst across findings
CVSS
9.3
base score, highest
EPSS
0.007
50th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
19
of 17,781 indexed, latest versions
Container images
9
deployed by those charts
Fix available
2 of 2
affected packages

Symfony has Unauthenticated PHP Object Deserialization in MonologBridge server:log Listener

Carried by container images the latest versions of 19 of 17,781 indexed charts deploy, on 9 images.

Affected packageAffected versionsFixed inImages
symfony/monolog-bridgecomposerv2.8.34, v4.4.37, v5.2.12, v5.3.7+3 more5.4.52, 7.4.128
symfony/symfonycomposerv3.4.475.4.521
OSV records
GHSA-m7v2-7gxm-vc2v

Charts affected

19 by stars
ChartLatestAffected imagesRadar Score
mauticone-acre-fundVerified publisher0.1.71 of 3See more

mautic one-acre-fund 0.1.7

1 of the 3 container images this version deploys carry CVE-2026-45077.

Container imageDigestPackageFixed in
mautic/mautic:v4-apache94ea4acf4049
symfony/monolog-bridge@v4.4.37
5.4.52

Open the chart page →

2,667
repmanszpadel-chartsVerified publisher3.52.171 of 3See more

repman szpadel-charts 3.52.17

1 of the 3 container images this version deploys carry CVE-2026-45077.

Container imageDigestPackageFixed in
buddy/repman:1.4.0097c897f8b54
symfony/monolog-bridge@v5.4.0
5.4.52

Open the chart page →

7,052
commonground-gatewaycommonground-gateway1.5.41 of 7See more

commonground-gateway commonground-gateway 1.5.4

1 of the 7 container images this version deploys carry CVE-2026-45077.

Container imageDigestPackageFixed in
ghcr.io/conductionnl/commonground-gateway-php:latest947882bf2c37
symfony/monolog-bridge@v5.3.14
5.4.52

Open the chart page →

9,724
opencatalogiopencatalogi1.0.61 of 8See more

opencatalogi opencatalogi 1.0.6

1 of the 8 container images this version deploys carry CVE-2026-45077.

Container imageDigestPackageFixed in
ghcr.io/conductionnl/commonground-gateway-php:latest947882bf2c37
symfony/monolog-bridge@v5.3.14
5.4.52

Open the chart page →

14,838
repmanrepman-helmchartVerified publisher1.0.121 of 3See more

repman repman-helmchart 1.0.12

1 of the 3 container images this version deploys carry CVE-2026-45077.

Container imageDigestPackageFixed in
buddy/repman:1.4.0097c897f8b54
symfony/monolog-bridge@v5.4.0
5.4.52

Open the chart page →

3,596
robot-shopcloud-native-toolkit1.1.11 of 12See more

robot-shop cloud-native-toolkit 1.1.1

1 of the 12 container images this version deploys carry CVE-2026-45077.

Container imageDigestPackageFixed in
robotshop/rs-ratings:latest4899c686c249
symfony/monolog-bridge@v5.3.7
5.4.52

Open the chart page →

29,555
commonground-gatewaycommonground-gateway-frontend0.1.51 of 4See more

commonground-gateway commonground-gateway-frontend 0.1.5

1 of the 4 container images this version deploys carry CVE-2026-45077.

Container imageDigestPackageFixed in
ghcr.io/conductionnl/commonground-gateway-php:latest947882bf2c37
symfony/monolog-bridge@v5.3.14
5.4.52

Open the chart page →

2,825
mauticdevtron0.1.31 of 3See more

mautic devtron 0.1.3

1 of the 3 container images this version deploys carry CVE-2026-45077.

Container imageDigestPackageFixed in
mautic/mautic:2.13-apachea954c5868d76
symfony/monolog-bridge@v2.8.34
5.4.52

Open the chart page →

2,939
mauticdevtron-labs0.1.31 of 3See more

mautic devtron-labs 0.1.3

1 of the 3 container images this version deploys carry CVE-2026-45077.

Container imageDigestPackageFixed in
mautic/mautic:2.13-apachea954c5868d76
symfony/monolog-bridge@v2.8.34
5.4.52

Open the chart page →

2,939
wallabaggeek-cookbookVerified publisher7.2.01 of 1See more

wallabag geek-cookbook 7.2.0

1 of the 1 container images this version deploys carry CVE-2026-45077.

Container imageDigestPackageFixed in
wallabag/wallabag:2.4.25e4c26a7fb4a
symfony/symfony@v3.4.47
5.4.52

Open the chart page →

4,358
wallabaghelmforgeVerified publisher1.3.61 of 3See more

wallabag helmforge 1.3.6

1 of the 3 container images this version deploys carry CVE-2026-45077.

Container imageDigestPackageFixed in
wallabag/wallabag:2.6.144a527e027e0d
symfony/monolog-bridge@v5.2.12
5.4.52

Open the chart page →

2,762
wallabaghpVerified publisher0.1.71 of 1See more

wallabag hp 0.1.7

1 of the 1 container images this version deploys carry CVE-2026-45077.

Container imageDigestPackageFixed in
wallabag/wallabag:2.6.144a527e027e0d
symfony/monolog-bridge@v5.2.12
5.4.52

Open the chart page →

1,136
docker-mailservermailserverVerified publisher0.2.651 of 9See more

docker-mailserver mailserver 0.2.65

1 of the 9 container images this version deploys carry CVE-2026-45077.

Container imageDigestPackageFixed in
jeboehm/mailserver-web:5.0.929da13edf5aa8
symfony/monolog-bridge@v7.3.3
7.4.12

Open the chart page →

10,897
commonground-gatewayopencatalogi1.5.31 of 7See more

commonground-gateway opencatalogi 1.5.3

1 of the 7 container images this version deploys carry CVE-2026-45077.

Container imageDigestPackageFixed in
ghcr.io/conductionnl/commonground-gateway-php:latest947882bf2c37
symfony/monolog-bridge@v5.3.14
5.4.52

Open the chart page →

9,724
shopwarerobjuz2.0.01 of 6See more

shopware robjuz 2.0.0

1 of the 6 container images this version deploys carry CVE-2026-45077.

Container imageDigestPackageFixed in
shyim/shopware:6.4.6.0a951c0e6b836
symfony/monolog-bridge@v5.3.7
5.4.52

Open the chart page →

2,972
mauticromholdings0.1.31 of 3See more

mautic romholdings 0.1.3

1 of the 3 container images this version deploys carry CVE-2026-45077.

Container imageDigestPackageFixed in
mautic/mautic:2.13-apachea954c5868d76
symfony/monolog-bridge@v2.8.34
5.4.52

Open the chart page →

2,939
wallabagsebtiz13-chartsVerified publisher0.6.01 of 1See more

wallabag sebtiz13-charts 0.6.0

1 of the 1 container images this version deploys carry CVE-2026-45077.

Container imageDigestPackageFixed in
wallabag/wallabag:2.6.144a527e027e0d
symfony/monolog-bridge@v5.2.12
5.4.52

Open the chart page →

1,136
commonground-gatewayskeleton-pip0.1.71 of 5See more

commonground-gateway skeleton-pip 0.1.7

1 of the 5 container images this version deploys carry CVE-2026-45077.

Container imageDigestPackageFixed in
ghcr.io/conductionnl/commonground-gateway-php:latest947882bf2c37
symfony/monolog-bridge@v5.3.14
5.4.52

Open the chart page →

2,825
repmanteam-blueVerified publisher0.3.01 of 5See more

repman team-blue 0.3.0

1 of the 5 container images this version deploys carry CVE-2026-45077.

Container imageDigestPackageFixed in
buddy/repman:1.4.0097c897f8b54
symfony/monolog-bridge@v5.4.0
5.4.52

Open the chart page →

3,993

Container images carrying it

9 by charts deploying them

A fixed version is listed for 2 of the 2 affected packages.

Container imageDigestPackageFixed inUsed by
ghcr.io/conductionnl/commonground-gateway-php:latest947882bf2c37
symfony/monolog-bridge@v5.3.14
5.4.52
5
buddy/repman:1.4.0097c897f8b54
symfony/monolog-bridge@v5.4.0
5.4.52
3
mautic/mautic:2.13-apachea954c5868d76
symfony/monolog-bridge@v2.8.34
5.4.52
3
wallabag/wallabag:2.6.144a527e027e0d
symfony/monolog-bridge@v5.2.12
5.4.52
3
jeboehm/mailserver-web:5.0.929da13edf5aa8
symfony/monolog-bridge@v7.3.3
7.4.12
1
mautic/mautic:v4-apache94ea4acf4049
symfony/monolog-bridge@v4.4.37
5.4.52
1
robotshop/rs-ratings:latest4899c686c249
symfony/monolog-bridge@v5.3.7
5.4.52
1
shyim/shopware:6.4.6.0a951c0e6b836
symfony/monolog-bridge@v5.3.7
5.4.52
1
wallabag/wallabag:2.4.25e4c26a7fb4a
symfony/symfony@v3.4.47
5.4.52
1

syft 1.42.1 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.