CVE-2026-45232

Low

Advisory

Published 20 May 2026In the index since 5 Sept 2026

Severity: Low; worst across findings
CVSS: 3.7; base score, highest
EPSS: 0.003; 27th percentile
CISA KEV: Not listed; no confirmed exploitation
Charts affected: 103; of 17,781 indexed, latest versions
Container images: 79; deployed by those charts
Fix available: 2 of 2; affected packages

The matching OSV records carry no description.

Carried by container images the latest versions of 103 of 17,781 indexed charts deploy, on 79 images.

Affected package	Affected versions	Fixed in	Images
rsyncdeb	3.1.0-2ubuntu0.1, 3.1.0-2ubuntu0.4, 3.1.1-3ubuntu1.1, 3.1.1-3ubuntu1.2+24 more	3.1.0-2ubuntu0.4+esm3, 3.1.1-3ubuntu1.3+esm5, 3.1.2-2.1ubuntu1.6+esm3, 3.1.3-8ubuntu0.9+esm1+5 more	75
rsyncapk	3.4.1-r1, 3.4.1-r2, 3.4.2-r0	3.4.3-r0	4

OSV records: ALPINE-CVE-2026-45232 DEBIAN-CVE-2026-45232 UBUNTU-CVE-2026-45232
Also known as: USN-8283-1, USN-8349-1, USN-8349-2, USN-8349-3

Charts affected

103 by stars

Chart

Latest

Affected images

Radar Score

nextcloudth-charts

0.4.0

1 of 1 See more

nextcloud th-charts 0.4.0

1 of the 1 container images this version deploys carry CVE-2026-45232.

Container image	Digest	Package	Fixed in
library/nextcloud :31.0.6-apache	588609d76b21	rsync@3.2.7-1+deb12u2	3.2.7-1+deb12u6

Open the chart page →

10,086

bugsinkvictorlane

0.3.7

1 of 2 See more

bugsink victorlane 0.3.7

1 of the 2 container images this version deploys carry CVE-2026-45232.

Container image	Digest	Package	Fixed in
library/mariadb :12.0-noble	607835cd628b	rsync@3.2.7-1ubuntu1.2	3.2.7-1ubuntu1.4

Open the chart page →

4,054

twenty-crmvictorlane

0.0.1

1 of 3 See more

twenty-crm victorlane 0.0.1

1 of the 3 container images this version deploys carry CVE-2026-45232.

Container image	Digest	Package	Fixed in
twentycrm/twenty-postgres-spilo :latest	2f78405a78be	rsync@3.2.7-0ubuntu0.22.04.2	3.2.7-0ubuntu0.22.04.6

Open the chart page →

13,459

Container images carrying it

79 by charts deploying them

A fixed version is listed for 2 of the 2 affected packages.

Container image	Digest	Package	Fixed in	Used by
louislam/uptime-kuma :2.0.2	4c364ef96aad	rsync@3.2.7-1+deb12u2	3.2.7-1+deb12u6	1
louislam/uptime-kuma :2.4.0	91e963bfda56	rsync@3.2.7-1+deb12u5	3.2.7-1+deb12u6	1
mathesar/mathesar :0.12.0	091757cb01fe	rsync@3.2.7-1+deb12u5	3.2.7-1+deb12u6	1
muluder/prograncontrollermcord :0.1.8	43b597a93da7	rsync@3.1.1-3ubuntu1.2	3.1.1-3ubuntu1.3+esm5	1
offchainlabs/nitro-node :v3.7.6-c0fe95e	9f779fa84b7b	rsync@3.2.7-1+deb12u2	3.2.7-1+deb12u6	1
offchainlabs/nitro-node :v3.1.0-7d1d84c	e95865866129	rsync@3.2.7-1	3.2.7-1+deb12u6	1
oled01/db-backup :0.1.0	6302fd2b5333	rsync@3.2.3-8ubuntu3.1	3.2.7-0ubuntu0.22.04.6	1
omecproject/onos-progran :1.0.0	5715e5648aa0	rsync@3.1.1-3ubuntu1.2	3.1.1-3ubuntu1.3+esm5	1
photoprism/photoprism :251130	db16ee6b1ba3	rsync@3.4.1+ds1-5ubuntu1	3.4.1+ds1-5ubuntu1.2	1
photoprism/photoprism :240711-ce	fc6fd632ca74	rsync@3.2.7-1ubuntu1	3.2.7-1ubuntu1.4	1
resouer/redis-slave :v2	e2f198b49ba7	rsync@3.1.0-2ubuntu0.1	3.1.0-2ubuntu0.4+esm3	1
roundcube/roundcubemail :1.6.16-apache-nonroot	17d9d9580962	rsync@3.4.1+ds1-5+deb13u3	3.4.1+ds1-5+deb13u4	1
scrapinghub/splash :3.4.1	a5f89bc84606	rsync@3.1.2-2.1ubuntu1	3.1.2-2.1ubuntu1.6+esm3	1
seldonio/locust-core :0.8	1d0da98a2d76	rsync@3.1.1-3ubuntu1.2	3.1.1-3ubuntu1.3+esm5	1
semaphoreui/semaphore :v2.18.3	e9260bfa8255	rsync@3.4.2-r0	3.4.3-r0	1
stackstorm/st2actionrunner :3.8	88235ba70cad	rsync@3.1.3-8ubuntu0.7	3.1.3-8ubuntu0.9+esm1	1
svtechnmaa/svtech_nagvis :v1.2.1	18394b08e6c3	rsync@3.2.7-1	3.2.7-1+deb12u6	1
svtechnmaa/svtech_rundeck :v1.2.2	6e368ace0977	rsync@3.1.3-8ubuntu0.7	3.1.3-8ubuntu0.9+esm1	1
tensorflow/tensorflow :1.6.0-devel	1e3172090703	rsync@3.1.1-3ubuntu1.2	3.1.1-3ubuntu1.3+esm5	1
twentycrm/twenty-postgres-spilo :latest	2f78405a78be	rsync@3.2.7-0ubuntu0.22.04.2	3.2.7-0ubuntu0.22.04.6	1
ghcr.io/cfi2017/opencve-scheduler :3.0.0	8d943799621b	rsync@3.2.7-1	3.2.7-1+deb12u6	1
ghcr.io/dfir-iris/iriswebapp_app :v2.4.26	e59ebde55709	rsync@3.4.1+ds1-5	3.4.1+ds1-5+deb13u4	1
ghcr.io/k8s-at-home/transmission :v3.00	6011182e3946	rsync@3.1.3-8ubuntu0.3	3.1.3-8ubuntu0.9+esm1	1
ghcr.io/kokuwaio/gcloud-mysql :v3.2.19	63098135c550	rsync@3.4.1-r2	3.4.3-r0	1
ghcr.io/kvaps/opennebula :v5.12.0.4-1	e28e0e7de11b	rsync@3.1.3-8	3.1.3-8ubuntu0.9+esm1	1
ghcr.io/kvaps/opennebula-flow :v5.12.0.4-1	600221f0f43f	rsync@3.1.3-8	3.1.3-8ubuntu0.9+esm1	1
ghcr.io/lloesche/valheim-server :latest	20fde516ce31	rsync@3.4.1+ds1-5+deb13u1	3.4.1+ds1-5+deb13u4	1
ghcr.io/radar-base/radar-schemas/radar-schemas-tools :0.8.16	c442e8bfe6b4	rsync@3.2.7-1ubuntu1.2	3.2.7-1ubuntu1.4	1
quay.io/opsmxpublic/spin-sample-pipeline :v1.0.1	c6a934439421	rsync@3.1.1-3ubuntu1.3	3.1.1-3ubuntu1.3+esm5	1