StackRadar

CVE-2026-47892

Critical

Advisory

Published 27 Aug 2026In the index since 8 Oct 2026
Severity
Critical
worst across findings
CVSS
9.8
base score, highest
EPSS
0.005
43rd percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
86
of 18,053 indexed, latest versions
Container images
97
deployed by those charts
Fix available
1 of 1
affected package

Spring Framework Header Predicate Bypass in WebFlux Functional Endpoints

Carried by container images the latest versions of 86 of 18,053 indexed charts deploy, on 97 images.

Affected packageAffected versionsFixed inImages
spring-webfluxmaven5.2.7.RELEASE, 5.2.8.RELEASE, 5.3.1, 5.3.5+36 more7.0.997
OSV records
GHSA-9qf2-26p9-2q2q

Charts affected

86 by stars
ChartLatestAffected imagesRadar Score
kafka-uikafka-uiVerified publisher1.6.51 of 1See more

kafka-ui kafka-ui 1.6.5

1 of the 1 container images this version deploys carry CVE-2026-47892.

Container imageDigestPackageFixed in
ghcr.io/kafbat/kafka-ui:v1.5.07cda86a33344
spring-webflux@6.2.17
no fix listed

Open the chart page →

950
spring-petclinic-cloudplatform9-communityVerified publisher0.2.02 of 6See more

spring-petclinic-cloud platform9-community 0.2.0

2 of the 6 container images this version deploys carry CVE-2026-47892.

Container imageDigestPackageFixed in
platform9community/admin-server:latestde3fa9b70df1
spring-webflux@5.2.7.RELEASE
no fix listed
platform9community/api-gateway:latest40a4970de568
spring-webflux@5.2.7.RELEASE
no fix listed

Open the chart page →

48,333
tbmq-clustertbmq-helm-chartOfficialVerified publisher2.3.02 of 3See more

tbmq-cluster tbmq-helm-chart 2.3.0

2 of the 3 container images this version deploys carry CVE-2026-47892.

Container imageDigestPackageFixed in
thingsboard/tbmq-integration-executor:2.4.0b5a9c1addf80
spring-webflux@6.2.19
no fix listed
thingsboard/tbmq-node:2.4.070661025dba5
spring-webflux@6.2.19
no fix listed

Open the chart page →

3,961
hertzbeathertzbeatOfficialVerified publisher1.8.11 of 4See more

hertzbeat hertzbeat 1.8.1

1 of the 4 container images this version deploys carry CVE-2026-47892.

Container imageDigestPackageFixed in
apache/hertzbeat:1.8.075d48a62748f
spring-webflux@6.2.2
no fix listed

Open the chart page →

16,409
geoservercloudcamptocamp23.0.16 of 7See more

geoservercloud camptocamp2 3.0.1

6 of the 7 container images this version deploys carry CVE-2026-47892.

Container imageDigestPackageFixed in
geoservercloud/geoserver-cloud-gwc:3.0.1.1b04ed89b5d2b
spring-webflux@7.0.8
7.0.9
geoservercloud/geoserver-cloud-rest:3.0.1.1318254b52f96
spring-webflux@7.0.8
7.0.9
geoservercloud/geoserver-cloud-wcs:3.0.1.14f077124f591
spring-webflux@7.0.8
7.0.9
geoservercloud/geoserver-cloud-webui:3.0.1.14f91e3048ac8
spring-webflux@7.0.8
7.0.9
geoservercloud/geoserver-cloud-wfs:3.0.1.1299f0d6232d1
spring-webflux@7.0.8
7.0.9
geoservercloud/geoserver-cloud-wms:3.0.1.15164f687ce4d
spring-webflux@7.0.8
7.0.9

Open the chart page →

14,787
thingsboardcetic0.1.21 of 2See more

thingsboard cetic 0.1.2

1 of the 2 container images this version deploys carry CVE-2026-47892.

Container imageDigestPackageFixed in
thingsboard/tb-postgres:latest2d17e4e36edc
spring-webflux@6.2.11
no fix listed

Open the chart page →

5,982
oesopsmxVerified publisher4.0.321 of 25See more

oes opsmx 4.0.32

1 of the 25 container images this version deploys carry CVE-2026-47892.

Container imageDigestPackageFixed in
quay.io/opsmxpublic/ubi8-gate:isd-spin-2025.10.01-5c720954-2025112608102b3554029737
spring-webflux@6.0.11
no fix listed

Open the chart page →

110,743
feedbacksystemthm-mni-iiVerified publisher0.48.21 of 14See more

feedbacksystem thm-mni-ii 0.48.2

1 of the 14 container images this version deploys carry CVE-2026-47892.

Container imageDigestPackageFixed in
ghcr.io/thm-mni-ii/fbs-core:v2.0.734fd2032724c
spring-webflux@5.3.27
no fix listed

Open the chart page →

27,978
vrijbrpvrijbrpVerified publisher0.1.51 of 5See more

vrijbrp vrijbrp 0.1.5

1 of the 5 container images this version deploys carry CVE-2026-47892.

Container imageDigestPackageFixed in
vrijbrp/haal-centraal-brp-bevragen:develop5c770c2ae48c
spring-webflux@5.3.27
no fix listed

Open the chart page →

8,996
geoserver-cloudcamptocamp20.0.56 of 11See more

geoserver-cloud camptocamp2 0.0.5

6 of the 11 container images this version deploys carry CVE-2026-47892.

Container imageDigestPackageFixed in
geoservercloud/geoserver-cloud-gateway:1.0-RC3756559ee788a
spring-webflux@5.2.8.RELEASE
no fix listed
geoservercloud/geoserver-cloud-rest:1.0-RC399540eef78ad
spring-webflux@5.2.8.RELEASE
no fix listed
geoservercloud/geoserver-cloud-wcs:1.0-RC35c254c53a357
spring-webflux@5.2.8.RELEASE
no fix listed
geoservercloud/geoserver-cloud-webui:1.0-RC3c687b1cbc891
spring-webflux@5.2.8.RELEASE
no fix listed
geoservercloud/geoserver-cloud-wfs:1.0-RC35288f320cf36
spring-webflux@5.2.8.RELEASE
no fix listed
geoservercloud/geoserver-cloud-wms:1.0-RC3a30a60ac6cd0
spring-webflux@5.2.8.RELEASE
no fix listed

Open the chart page →

87,435
geoserverCloudcamptocamp20.0.66 of 11See more

geoserverCloud camptocamp2 0.0.6

6 of the 11 container images this version deploys carry CVE-2026-47892.

Container imageDigestPackageFixed in
geoservercloud/geoserver-cloud-gateway:1.0-RC3756559ee788a
spring-webflux@5.2.8.RELEASE
no fix listed
geoservercloud/geoserver-cloud-rest:1.0-RC399540eef78ad
spring-webflux@5.2.8.RELEASE
no fix listed
geoservercloud/geoserver-cloud-wcs:1.0-RC35c254c53a357
spring-webflux@5.2.8.RELEASE
no fix listed
geoservercloud/geoserver-cloud-webui:1.0-RC3c687b1cbc891
spring-webflux@5.2.8.RELEASE
no fix listed
geoservercloud/geoserver-cloud-wfs:1.0-RC35288f320cf36
spring-webflux@5.2.8.RELEASE
no fix listed
geoservercloud/geoserver-cloud-wms:1.0-RC3a30a60ac6cd0
spring-webflux@5.2.8.RELEASE
no fix listed

Open the chart page →

87,435
enavenav-service-architectureVerified publisher0.0.75 of 10See more

enav enav-service-architecture 0.0.7

5 of the 10 container images this version deploys carry CVE-2026-47892.

Container imageDigestPackageFixed in
ghcr.io/gla-rad/enav-api-gateway:latest8f4345c77dda
spring-webflux@7.0.6
7.0.9
ghcr.io/gla-rad/enav-aton-admin-service:latest8b963221a007
spring-webflux@7.0.7
7.0.9
ghcr.io/gla-rad/enav-aton-service:latest3ffe10cd9cef
spring-webflux@7.0.7
7.0.9
ghcr.io/gla-rad/enav-eureka:latest05002092c621
spring-webflux@7.0.6
7.0.9
ghcr.io/gla-rad/enav-msg-broker:latest5c0966fa0257
spring-webflux@7.0.6
7.0.9

Open the chart page →

12,625
pitchforkexpediagroup0.1.41 of 1See more

pitchfork expediagroup 0.1.4

1 of the 1 container images this version deploys carry CVE-2026-47892.

Container imageDigestPackageFixed in
expediagroup/pitchfork:1.314f2cf61e7de9
spring-webflux@5.3.10
no fix listed

Open the chart page →

3,911
gentrace-self-hostedgentrace-self-hostedVerified publisher0.1.31 of 9See more

gentrace-self-hosted gentrace-self-hosted 0.1.3

1 of the 9 container images this version deploys carry CVE-2026-47892.

Container imageDigestPackageFixed in
provectuslabs/kafka-ui:latest8f2ff02d64b0
spring-webflux@6.0.11
no fix listed

Open the chart page →

16,628
hawkhawk1.1.51 of 4See more

hawk hawk 1.1.5

1 of the 4 container images this version deploys carry CVE-2026-47892.

Container imageDigestPackageFixed in
ghcr.io/privacyengineering/hawk-service:latestbfedf47bb5e0
spring-webflux@6.1.1
no fix listed

Open the chart page →

16,965
mcpmcp-chartsVerified publisher0.0.231 of 7See more

mcp mcp-charts 0.0.23

1 of the 7 container images this version deploys carry CVE-2026-47892.

Container imageDigestPackageFixed in
glarad/mc-service-registry:latest7b02b9e7f1ef
spring-webflux@7.0.8
7.0.9

Open the chart page →

8,420
portraitportraitVerified publisher0.2.131 of 8See more

portrait portrait 0.2.13

1 of the 8 container images this version deploys carry CVE-2026-47892.

Container imageDigestPackageFixed in
treskon/portrait:DEV-latest88e813f22347
spring-webflux@6.1.15
no fix listed

Open the chart page →

36,374
reservation-appreservation-app1.0.91 of 4See more

reservation-app reservation-app 1.0.9

1 of the 4 container images this version deploys carry CVE-2026-47892.

Container imageDigestPackageFixed in
zbalogh/reservation-api-server:1.0.97c247e399a1f
spring-webflux@5.3.23
no fix listed

Open the chart page →

8,535
dev-feedrm3lVerified publisher3.1.21 of 3See more

dev-feed rm3l 3.1.2

1 of the 3 container images this version deploys carry CVE-2026-47892.

Container imageDigestPackageFixed in
rm3l/dev-feed-api:latest896635ecc91f
spring-webflux@5.3.23
no fix listed

Open the chart page →

10,660
service-names-port-numbersrm3lVerified publisher0.26.11 of 1See more

service-names-port-numbers rm3l 0.26.1

1 of the 1 container images this version deploys carry CVE-2026-47892.

Container imageDigestPackageFixed in
rm3l/service-names-port-numbers:0.12.162d1cc4223e5
spring-webflux@5.3.13
no fix listed

Open the chart page →

10,546
starwhalestarwhaleVerified publisher0.6.151 of 4See more

starwhale starwhale 0.6.15

1 of the 4 container images this version deploys carry CVE-2026-47892.

Container imageDigestPackageFixed in
ghcr.io/star-whale/server:0.6.158368359c8dd0
spring-webflux@5.3.24
no fix listed

Open the chart page →

14,263
gatewayaccount-serviceVerified publisher0.4.21 of 1See more

gateway account-service 0.4.2

1 of the 1 container images this version deploys carry CVE-2026-47892.

Container imageDigestPackageFixed in
vitalii1992/api-gateway-service:latestaabe6ac39356
spring-webflux@6.0.9
no fix listed

Open the chart page →

2,985
alibaba-rsocket-brokeralibaba-rsocket-brokerVerified publisher0.1.31 of 1See more

alibaba-rsocket-broker alibaba-rsocket-broker 0.1.3

1 of the 1 container images this version deploys carry CVE-2026-47892.

Container imageDigestPackageFixed in
linuxchina/alibaba-rsocket-broker:1.1.3-k8sf758e2e567ee
spring-webflux@5.3.18
no fix listed

Open the chart page →

93,949
amorphieamorphie0.1.21 of 18See more

amorphie amorphie 0.1.2

1 of the 18 container images this version deploys carry CVE-2026-47892.

Container imageDigestPackageFixed in
camunda/zeebe:8.4.5ab5abc09e407
spring-webflux@6.1.4
no fix listed

Open the chart page →

33,484
apimap-apiapimapOfficialVerified publisher1.8.111 of 1See more

apimap-api apimap 1.8.11

1 of the 1 container images this version deploys carry CVE-2026-47892.

Container imageDigestPackageFixed in
apimap/api:v1.8.11ae2b3ab00177
spring-webflux@5.3.23
no fix listed

Open the chart page →

2,525
kafka-uiappscodeVerified publisher2026.3.301 of 1See more

kafka-ui appscode 2026.3.30

1 of the 1 container images this version deploys carry CVE-2026-47892.

Container imageDigestPackageFixed in
ghcr.io/kafbat/kafka-ui:v1.5.07cda86a33344
spring-webflux@6.2.17
no fix listed

Open the chart page →

950
automatedconfigurationassist-iot-automated-configuration1.0.01 of 5See more

automatedconfiguration assist-iot-automated-configuration 1.0.0

1 of the 5 container images this version deploys carry CVE-2026-47892.

Container imageDigestPackageFixed in
provectuslabs/kafka-ui:latest8f2ff02d64b0
spring-webflux@6.0.11
no fix listed

Open the chart page →

16,340
bluerange-serverbluerangeOfficialVerified publisher1.4.01 of 1See more

bluerange-server bluerange 1.4.0

1 of the 1 container images this version deploys carry CVE-2026-47892.

Container imageDigestPackageFixed in
bluerange/bluerange:26.2.0503577ef9143
spring-webflux@6.2.6
no fix listed

Open the chart page →

2,059
geoservercamptocamp20.0.36 of 12See more

geoserver camptocamp2 0.0.3

6 of the 12 container images this version deploys carry CVE-2026-47892.

Container imageDigestPackageFixed in
geoservercloud/geoserver-cloud-gateway:1.0-RC2ca58b74529cd
spring-webflux@5.2.8.RELEASE
no fix listed
geoservercloud/geoserver-cloud-rest:1.0-RC25dc0c93a1710
spring-webflux@5.2.8.RELEASE
no fix listed
geoservercloud/geoserver-cloud-wcs:1.0-RC247ae1bdb4bcc
spring-webflux@5.2.8.RELEASE
no fix listed
geoservercloud/geoserver-cloud-webui:1.0-RC228c3e5a8c5a3
spring-webflux@5.2.8.RELEASE
no fix listed
geoservercloud/geoserver-cloud-wfs:1.0-RC28c70ee06d5ab
spring-webflux@5.2.8.RELEASE
no fix listed
geoservercloud/geoserver-cloud-wms:1.0-RC242775ba6a4da
spring-webflux@5.2.8.RELEASE
no fix listed

Open the chart page →

92,280
eoloplannerdfa-amm-eoloplannerVerified publisher0.1.01 of 7See more

eoloplanner dfa-amm-eoloplanner 0.1.0

1 of the 7 container images this version deploys carry CVE-2026-47892.

Container imageDigestPackageFixed in
oscarsotosanchez/toposervice:v1.0d4d020e9f272
spring-webflux@5.3.1
no fix listed

Open the chart page →

31,853
kafka-uidoubanVerified publisher1.5.21 of 1See more

kafka-ui douban 1.5.2

1 of the 1 container images this version deploys carry CVE-2026-47892.

Container imageDigestPackageFixed in
ghcr.io/kafbat/kafka-ui:v1.2.0185da4ad3e88
spring-webflux@6.2.3
no fix listed

Open the chart page →

1,474
eoloplannerdreyg-jescribanob-chart-eoloplanner0.1.01 of 7See more

eoloplanner dreyg-jescribanob-chart-eoloplanner 0.1.0

1 of the 7 container images this version deploys carry CVE-2026-47892.

Container imageDigestPackageFixed in
oscarsotosanchez/toposervice:v1.0d4d020e9f272
spring-webflux@5.3.1
no fix listed

Open the chart page →

28,290
eolicplantseolicplantsVerified publisher0.1.01 of 7See more

eolicplants eolicplants 0.1.0

1 of the 7 container images this version deploys carry CVE-2026-47892.

Container imageDigestPackageFixed in
oscarsotosanchez/toposervice:v1.0d4d020e9f272
spring-webflux@5.3.1
no fix listed

Open the chart page →

31,466
eoloPlanteolo-plannerVerified publisher0.1.01 of 7See more

eoloPlant eolo-planner 0.1.0

1 of the 7 container images this version deploys carry CVE-2026-47892.

Container imageDigestPackageFixed in
codeurjc/toposervice:v1.239fb4c11e6a49
spring-webflux@6.0.2
no fix listed

Open the chart page →

30,507
eoloplannereoloplannerVerified publisher0.1.01 of 7See more

eoloplanner eoloplanner 0.1.0

1 of the 7 container images this version deploys carry CVE-2026-47892.

Container imageDigestPackageFixed in
codeurjc/toposervice:v1.09fb4c11e6a49
spring-webflux@6.0.2
no fix listed

Open the chart page →

36,869
eoloPlannerCommunicationsKubernetes3eoloplannercommunicationskuberneteshelmVerified publisher0.1.01 of 7See more

eoloPlannerCommunicationsKubernetes3 eoloplannercommunicationskuberneteshelm 0.1.0

1 of the 7 container images this version deploys carry CVE-2026-47892.

Container imageDigestPackageFixed in
codeurjc/toposervice:v1.239fb4c11e6a49
spring-webflux@6.0.2
no fix listed

Open the chart page →

30,634
eoloplanner-mcaeoloplanner-mcaVerified publisher0.1.01 of 7See more

eoloplanner-mca eoloplanner-mca 0.1.0

1 of the 7 container images this version deploys carry CVE-2026-47892.

Container imageDigestPackageFixed in
oscarsotosanchez/toposervice:v1.0d4d020e9f272
spring-webflux@5.3.1
no fix listed

Open the chart page →

31,416
eoloplannereoloplanner-molynx-gat0.1.01 of 7See more

eoloplanner eoloplanner-molynx-gat 0.1.0

1 of the 7 container images this version deploys carry CVE-2026-47892.

Container imageDigestPackageFixed in
codeurjc/toposervice:v1.09fb4c11e6a49
spring-webflux@6.0.2
no fix listed

Open the chart page →

33,190
eolo-plannereolo-planner-repo0.1.01 of 7See more

eolo-planner eolo-planner-repo 0.1.0

1 of the 7 container images this version deploys carry CVE-2026-47892.

Container imageDigestPackageFixed in
codeurjc/toposervice:v1.09fb4c11e6a49
spring-webflux@6.0.2
no fix listed

Open the chart page →

32,635
eoloplanteoloplant1.0.01 of 7See more

eoloplant eoloplant 1.0.0

1 of the 7 container images this version deploys carry CVE-2026-47892.

Container imageDigestPackageFixed in
codeurjc/toposervice:v1.239fb4c11e6a49
spring-webflux@6.0.2
no fix listed

Open the chart page →

30,634
eoloplantseoloplants-urjcVerified publisher0.1.01 of 7See more

eoloplants eoloplants-urjc 0.1.0

1 of the 7 container images this version deploys carry CVE-2026-47892.

Container imageDigestPackageFixed in
codeurjc/toposervice:v1.09fb4c11e6a49
spring-webflux@6.0.2
no fix listed

Open the chart page →

32,409
servereoloserverVerified publisher0.1.01 of 7See more

server eoloserver 0.1.0

1 of the 7 container images this version deploys carry CVE-2026-47892.

Container imageDigestPackageFixed in
codeurjc/toposervice:v1.09fb4c11e6a49
spring-webflux@6.0.2
no fix listed

Open the chart page →

36,869
spring-boot-adminevryfs-ossVerified publisher0.1.101 of 1See more

spring-boot-admin evryfs-oss 0.1.10

1 of the 1 container images this version deploys carry CVE-2026-47892.

Container imageDigestPackageFixed in
quay.io/evryfs/spring-boot-admin:2.7.1060950ef63764
spring-webflux@5.3.24
no fix listed

Open the chart page →

6,406
scorpio-brokerfiware0.3.39 of 10See more

scorpio-broker fiware 0.3.3

9 of the 10 container images this version deploys carry CVE-2026-47892.

Container imageDigestPackageFixed in
scorpiobroker/scorpio:RegistrySubscriptionManager_2.1.001e11d800459
spring-webflux@5.3.13
no fix listed
scorpiobroker/scorpio:eureka-server_2.1.03f05a113a4be
spring-webflux@5.3.13
no fix listed
scorpiobroker/scorpio:AtContextServer_2.1.05073ceef2fa0
spring-webflux@5.3.13
no fix listed
scorpiobroker/scorpio:gateway_2.1.062dae3dd0eeb
spring-webflux@5.3.13
no fix listed
scorpiobroker/scorpio:RegistryManager_2.1.0a2cfcf0947fd
spring-webflux@5.3.13
no fix listed
scorpiobroker/scorpio:QueryManager_2.1.0b742a53b2803
spring-webflux@5.3.13
no fix listed
scorpiobroker/scorpio:HistoryManager_2.1.0b7fe27a06ff5
spring-webflux@5.3.13
no fix listed
scorpiobroker/scorpio:SubscriptionManager_2.1.0e08036670d66
spring-webflux@5.3.13
no fix listed
scorpiobroker/scorpio:EntityManager_2.1.0f02e8a429a08
spring-webflux@5.3.13
no fix listed

Open the chart page →

61,360
scorpiobrokerfiware0.1.29 of 10See more

scorpiobroker fiware 0.1.2

9 of the 10 container images this version deploys carry CVE-2026-47892.

Container imageDigestPackageFixed in
scorpiobroker/scorpio:RegistrySubscriptionManager_2.1.001e11d800459
spring-webflux@5.3.13
no fix listed
scorpiobroker/scorpio:eureka-server_2.1.03f05a113a4be
spring-webflux@5.3.13
no fix listed
scorpiobroker/scorpio:AtContextServer_2.1.05073ceef2fa0
spring-webflux@5.3.13
no fix listed
scorpiobroker/scorpio:gateway_2.1.062dae3dd0eeb
spring-webflux@5.3.13
no fix listed
scorpiobroker/scorpio:RegistryManager_2.1.0a2cfcf0947fd
spring-webflux@5.3.13
no fix listed
scorpiobroker/scorpio:QueryManager_2.1.0b742a53b2803
spring-webflux@5.3.13
no fix listed
scorpiobroker/scorpio:HistoryManager_2.1.0b7fe27a06ff5
spring-webflux@5.3.13
no fix listed
scorpiobroker/scorpio:SubscriptionManager_2.1.0e08036670d66
spring-webflux@5.3.13
no fix listed
scorpiobroker/scorpio:EntityManager_2.1.0f02e8a429a08
spring-webflux@5.3.13
no fix listed

Open the chart page →

61,360
scorpio-broker-aaiofiware0.4.151 of 1See more

scorpio-broker-aaio fiware 0.4.15

1 of the 1 container images this version deploys carry CVE-2026-47892.

Container imageDigestPackageFixed in
scorpiobroker/scorpio:scorpio-aaio_2.1.0db55012043df
spring-webflux@5.3.13
no fix listed

Open the chart page →

5,848
cc-spring-appgridgainVerified publisher1.0.61 of 1See more

cc-spring-app gridgain 1.0.6

1 of the 1 container images this version deploys carry CVE-2026-47892.

Container imageDigestPackageFixed in
gridgain/cloud-connector:2025.5.15ab838d7d3cb
spring-webflux@6.2.15
no fix listed

Open the chart page →

1,984
komgahelmforgeVerified publisher1.4.161 of 1See more

komga helmforge 1.4.16

1 of the 1 container images this version deploys carry CVE-2026-47892.

Container imageDigestPackageFixed in
gotson/komga:1.27.19cf102f5fb78
spring-webflux@6.2.19
no fix listed

Open the chart page →

36,012
openaevhelm-openbasVerified publisher2.0.111 of 7See more

openaev helm-openbas 2.0.11

1 of the 7 container images this version deploys carry CVE-2026-47892.

Container imageDigestPackageFixed in
openaev/platform:3.261005.0eaf26c4106a1
spring-webflux@6.2.19
no fix listed

Open the chart page →

21,120
openbashelm-openbasVerified publisher1.8.141 of 7See more

openbas helm-openbas 1.8.14

1 of the 7 container images this version deploys carry CVE-2026-47892.

Container imageDigestPackageFixed in
openbas/platform:2.0.5d986d80b0a75
spring-webflux@6.1.16
no fix listed

Open the chart page →

25,875

Container images carrying it

97 by charts deploying them

A fixed version is listed for 1 of the 1 affected package.

Container imageDigestPackageFixed inUsed by
inseefrlab/onyxia-api:v4.12.0b377aec3ead1
spring-webflux@6.2.18
no fix listed
1
lavandadelpatio/torznab-atomohd:latest214eaef5444c
spring-webflux@6.0.7
no fix listed
1
linuxchina/alibaba-rsocket-broker:1.1.3-k8sf758e2e567ee
spring-webflux@5.3.18
no fix listed
1
maksimkavalenka/microservices-learning.resource-processor:latest64a25afb8748
spring-webflux@6.0.12
no fix listed
1
maksimkavalenka/microservices-learning.resource-service:latest13ad9bb170a0
spring-webflux@6.0.12
no fix listed
1
openaev/platform:3.261005.0eaf26c4106a1
spring-webflux@6.2.19
no fix listed
1
openbas/platform:2.0.5d986d80b0a75
spring-webflux@6.1.16
no fix listed
1
platform9community/admin-server:latestde3fa9b70df1
spring-webflux@5.2.7.RELEASE
no fix listed
1
platform9community/api-gateway:latest40a4970de568
spring-webflux@5.2.7.RELEASE
no fix listed
1
redestroyder/authorization-service:0.0.1740364a619fd
spring-webflux@5.3.15
no fix listed
1
redestroyder/business-service:0.0.1db03499a0726
spring-webflux@5.3.15
no fix listed
1
rm3l/dev-feed-api:latest896635ecc91f
spring-webflux@5.3.23
no fix listed
1
rm3l/service-names-port-numbers:0.12.162d1cc4223e5
spring-webflux@5.3.13
no fix listed
1
salaboy/fmtok8s-monolith:v0.1.0f225568e6d03
spring-webflux@5.2.8.RELEASE
no fix listed
1
scorpiobroker/scorpio:scorpio-aaio_2.1.0db55012043df
spring-webflux@5.3.13
no fix listed
1
slagattollas/toposervice-practica:latestdc63973dae0d
spring-webflux@5.3.1
no fix listed
1
streamnative/private-cloud-console:v2.3.27-all91e54375e154
spring-webflux@6.1.19
no fix listed
1
thingsboard/tbmq-integration-executor:2.4.0b5a9c1addf80
spring-webflux@6.2.19
no fix listed
1
thingsboard/tbmq-node:2.4.070661025dba5
spring-webflux@6.2.19
no fix listed
1
thingsboard/tb-postgres:latest2d17e4e36edc
spring-webflux@6.2.11
no fix listed
1
treskon/portrait:DEV-latest88e813f22347
spring-webflux@6.1.15
no fix listed
1
vitalii1992/api-gateway-service:latestaabe6ac39356
spring-webflux@6.0.9
no fix listed
1
vlebediantsev/logic-ms:latestdf8bf38c535b
spring-webflux@5.3.21
no fix listed
1
vrijbrp/haal-centraal-brp-bevragen:develop5c770c2ae48c
spring-webflux@5.3.27
no fix listed
1
zahoriaut/zahori-server:0.1.17b2de13916f3e
spring-webflux@5.3.25
no fix listed
1
zbalogh/reservation-api-server:1.0.97c247e399a1f
spring-webflux@5.3.23
no fix listed
1
ghcr.io/curium-rocks/mitre-siphon:main503c00321502
spring-webflux@6.0.9
no fix listed
1
ghcr.io/gla-rad/enav-api-gateway:latest8f4345c77dda
spring-webflux@7.0.6
7.0.9
1
ghcr.io/gla-rad/enav-aton-admin-service:latest8b963221a007
spring-webflux@7.0.7
7.0.9
1
ghcr.io/gla-rad/enav-aton-service:latest3ffe10cd9cef
spring-webflux@7.0.7
7.0.9
1
ghcr.io/gla-rad/enav-eureka:latest05002092c621
spring-webflux@7.0.6
7.0.9
1
ghcr.io/gla-rad/enav-msg-broker:latest5c0966fa0257
spring-webflux@7.0.6
7.0.9
1
ghcr.io/it-at-m/dave-admin-portal/dave-adminportal:10.0.0cbff8141302f
spring-webflux@6.2.19
no fix listed
1
ghcr.io/it-at-m/dave-backend/dave-backend:10.0.0f66413e62afc
spring-webflux@6.2.19
no fix listed
1
ghcr.io/it-at-m/dave-document-storage/dave-document-storage:10.0.09c7fc07330c9
spring-webflux@6.2.19
no fix listed
1
ghcr.io/it-at-m/dave-frontend/dave-frontend:10.0.0a49fdb8d6f1b
spring-webflux@6.2.19
no fix listed
1
ghcr.io/it-at-m/dave-geodata-eai/dave-geodata-eai:10.0.06a3fe3136856
spring-webflux@6.2.19
no fix listed
1
ghcr.io/it-at-m/dave-selfservice-portal/dave-selfserviceportal:10.0.0d352df1b94b6
spring-webflux@6.2.19
no fix listed
1
ghcr.io/kafbat/kafka-ui:v1.2.0185da4ad3e88
spring-webflux@6.2.3
no fix listed
1
ghcr.io/privacyengineering/hawk-service:latestbfedf47bb5e0
spring-webflux@6.1.1
no fix listed
1
ghcr.io/star-whale/server:0.6.158368359c8dd0
spring-webflux@5.3.24
no fix listed
1
ghcr.io/thm-mni-ii/fbs-core:v2.0.734fd2032724c
spring-webflux@5.3.27
no fix listed
1
public.ecr.aws/aws-containers/retail-store-sample-ui:1.3.0ce3f2e935eb3
spring-webflux@6.2.10
no fix listed
1
quay.io/evryfs/spring-boot-admin:2.7.1060950ef63764
spring-webflux@5.3.24
no fix listed
1
quay.io/opsmxpublic/ubi8-gate:isd-spin-2025.10.01-5c720954-2025112608102b3554029737
spring-webflux@6.0.11
no fix listed
1
quay.io/poundex/tekton-ci-environment-injector:0.2.46dd65f22949c
spring-webflux@7.0.8
7.0.9
1
quay.io/poundex/tekton-stash-and-cache:0.2.2e854423caa09
spring-webflux@7.0.8
7.0.9
1

syft 1.42.1 · advisories as of 8 Oct 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.