StackRadar

CVE-2026-48736

Medium

Advisory

Published 15 Jun 2026In the index since 6 Sept 2026
Severity
Medium
worst across findings
CVSS
6.3
base score, highest
EPSS
0.006
45th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
36
of 17,781 indexed, latest versions
Container images
31
deployed by those charts
Fix available
2 of 2
affected packages

Symfony: IpUtils::PRIVATE_SUBNETS Omits IPv6 Transition Forms (6to4, NAT64, Teredo, IPv4-compatible): SSRF Bypass in NoPrivateNetworkHttpClient

Carried by container images the latest versions of 36 of 17,781 indexed charts deploy, on 31 images.

Affected packageAffected versionsFixed inImages
symfony/http-foundationcomposerv6.4.2, v6.4.3, v6.4.7, v6.4.14+13 more6.4.41, 7.4.13, 8.0.1319
symfony/http-clientcomposerv5.4.0, v5.4.1, v5.4.2, v5.4.3+2 more5.4.5312
OSV records
GHSA-38cx-cq6f-5755

Charts affected

36 by stars
ChartLatestAffected imagesRadar Score
monicamonicaOfficialVerified publisher1.0.151 of 1See more

monica monica 1.0.15

1 of the 1 container images this version deploys carry CVE-2026-48736.

Container imageDigestPackageFixed in
ghcr.io/monicahq/monica-next:main8be69156acbb
symfony/http-foundation@v7.3.2
7.4.13

Open the chart page →

5,634
bookstackgabe565Verified publisher0.20.01 of 1See more

bookstack gabe565 0.20.0

1 of the 1 container images this version deploys carry CVE-2026-48736.

Container imageDigestPackageFixed in
ghcr.io/linuxserver/bookstack:version-v24.12.1cc795b254b73
symfony/http-foundation@v6.4.16
6.4.41

Open the chart page →

2,811
repmanszpadel-chartsVerified publisher3.52.171 of 3See more

repman szpadel-charts 3.52.17

1 of the 3 container images this version deploys carry CVE-2026-48736.

Container imageDigestPackageFixed in
buddy/repman:1.4.0097c897f8b54
symfony/http-client@v5.4.2
5.4.53

Open the chart page →

7,052
typo3christianhuthVerified publisher7.7.01 of 2See more

typo3 christianhuth 7.7.0

1 of the 2 container images this version deploys carry CVE-2026-48736.

Container imageDigestPackageFixed in
martinhelmich/typo3:12.4c83a4f3fd7ae
symfony/http-foundation@v6.4.29
6.4.41

Open the chart page →

8,466
contactcataloguscontact-catalogus1.0.01 of 3See more

contactcatalogus contact-catalogus 1.0.0

1 of the 3 container images this version deploys carry CVE-2026-48736.

Container imageDigestPackageFixed in
ghcr.io/conductionnl/contactcatalogus-php:latesteeb625bd660c
symfony/http-client@v5.4.8
5.4.53

Open the chart page →

7,303
tasmo-admincrystalnetVerified publisher3.0.111 of 1See more

tasmo-admin crystalnet 3.0.11

1 of the 1 container images this version deploys carry CVE-2026-48736.

Container imageDigestPackageFixed in
ghcr.io/tasmoadmin/tasmoadmin:v3.3.205aeefbdac2b
symfony/http-foundation@v6.4.2
6.4.41

Open the chart page →

891
digispoof-interfacedigispoof-interface1.0.01 of 3See more

digispoof-interface digispoof-interface 1.0.0

1 of the 3 container images this version deploys carry CVE-2026-48736.

Container imageDigestPackageFixed in
ghcr.io/conductionnl/digispoof-interface-php:latest03aba499950f
symfony/http-client@v5.4.1
5.4.53

Open the chart page →

7,779
matomodigitalist-open-cloud-matomo12.0.201 of 3See more

matomo digitalist-open-cloud-matomo 12.0.20

1 of the 3 container images this version deploys carry CVE-2026-48736.

Container imageDigestPackageFixed in
digitalist/matomo:5.12.0bc4aeeaea769
symfony/http-foundation@v6.4.34
6.4.41

Open the chart page →

3,539
akauntingf3k-techVerified publisher1.3121.01 of 4See more

akaunting f3k-tech 1.3121.0

1 of the 4 container images this version deploys carry CVE-2026-48736.

Container imageDigestPackageFixed in
akaunting/akaunting:3.1.21-fpm-alpine-nginxe7d5c245b1a0
symfony/http-foundation@v6.4.30
6.4.41

Open the chart page →

4,333
monicageek-cookbookVerified publisher8.2.01 of 1See more

monica geek-cookbook 8.2.0

1 of the 1 container images this version deploys carry CVE-2026-48736.

Container imageDigestPackageFixed in
library/monica:3.7.0-apacheceb1ba4196ab
symfony/http-client@v5.4.3
5.4.53

Open the chart page →

2,096
leantimegissilabs1.3.01 of 2See more

leantime gissilabs 1.3.0

1 of the 2 container images this version deploys carry CVE-2026-48736.

Container imageDigestPackageFixed in
leantime/leantime:3.3.3ad4bfb0699d3
symfony/http-foundation@v6.4.15
6.4.41

Open the chart page →

6,416
repmanrepman-helmchartVerified publisher1.0.121 of 3See more

repman repman-helmchart 1.0.12

1 of the 3 container images this version deploys carry CVE-2026-48736.

Container imageDigestPackageFixed in
buddy/repman:1.4.0097c897f8b54
symfony/http-client@v5.4.2
5.4.53

Open the chart page →

3,596
user-componentuser-component1.2.01 of 4See more

user-component user-component 1.2.0

1 of the 4 container images this version deploys carry CVE-2026-48736.

Container imageDigestPackageFixed in
ghcr.io/conductionnl/user-component-php:latest198db44fabb5
symfony/http-client@v5.4.0
5.4.53

Open the chart page →

7,303
linkstackadnoctemVerified publisher0.4.01 of 1See more

linkstack adnoctem 0.4.0

1 of the 1 container images this version deploys carry CVE-2026-48736.

Container imageDigestPackageFixed in
linkstackorg/linkstack:latest1c8b05399ee4
symfony/http-client@v5.4.49
5.4.53

Open the chart page →

2,092
berichtserviceberichtservice1.0.01 of 3See more

berichtservice berichtservice 1.0.0

1 of the 3 container images this version deploys carry CVE-2026-48736.

Container imageDigestPackageFixed in
ghcr.io/conductionnl/berichtservice-php:latestee6a21e66ff0
symfony/http-client@v5.4.8
5.4.53

Open the chart page →

7,342
cspconsolecspconsole1.3.111 of 5See more

cspconsole cspconsole 1.3.11

1 of the 5 container images this version deploys carry CVE-2026-48736.

Container imageDigestPackageFixed in
cspconsole/csp-control-center:1.0.1046dda4a31bd6
symfony/http-foundation@v6.4.35
6.4.41

Open the chart page →

12,274
eav-componenteav-component1.0.01 of 3See more

eav-component eav-component 1.0.0

1 of the 3 container images this version deploys carry CVE-2026-48736.

Container imageDigestPackageFixed in
ghcr.io/conductionnl/eav-component-php:latest24bbca4a52a8
symfony/http-client@v5.4.8
5.4.53

Open the chart page →

7,255
education-componenteducation-component1.0.01 of 3See more

education-component education-component 1.0.0

1 of the 3 container images this version deploys carry CVE-2026-48736.

Container imageDigestPackageFixed in
ghcr.io/conductionnl/education-component-php:latestda6b05a1a601
symfony/http-client@v5.4.8
5.4.53

Open the chart page →

7,327
heimdallegebackVerified publisher2.0.41 of 1See more

heimdall egeback 2.0.4

1 of the 1 container images this version deploys carry CVE-2026-48736.

Container imageDigestPackageFixed in
linuxserver/heimdall:2.6.371597f4461e4
symfony/http-foundation@v6.4.3
6.4.41

Open the chart page →

1,664
espocrmespocrmVerified publisher1.0.11 of 2See more

espocrm espocrm 1.0.1

1 of the 2 container images this version deploys carry CVE-2026-48736.

Container imageDigestPackageFixed in
espocrm/espocrm:9.3.101b5a24504ed9
symfony/http-foundation@v7.4.3
7.4.13

Open the chart page →

6,431
firefly-iiifirefly-iii1.10.11 of 1See more

firefly-iii firefly-iii 1.10.1

1 of the 1 container images this version deploys carry CVE-2026-48736.

Container imageDigestPackageFixed in
fireflyiii/core:version-6.5.9fe4ecec4c2ba
symfony/http-foundation@v7.4.7
7.4.13

Open the chart page →

5,039
firefly-iii-stackfirefly-iii0.10.22 of 4See more

firefly-iii-stack firefly-iii 0.10.2

2 of the 4 container images this version deploys carry CVE-2026-48736.

Container imageDigestPackageFixed in
fireflyiii/core:version-6.5.9fe4ecec4c2ba
symfony/http-foundation@v7.4.7
7.4.13
fireflyiii/data-importer:version-2.2.3ab52bf932546
symfony/http-foundation@v8.0.8
8.0.13

Open the chart page →

10,260
importerfirefly-iii1.6.01 of 1See more

importer firefly-iii 1.6.0

1 of the 1 container images this version deploys carry CVE-2026-48736.

Container imageDigestPackageFixed in
fireflyiii/data-importer:version-2.2.3ab52bf932546
symfony/http-foundation@v8.0.8
8.0.13

Open the chart page →

4,829
monicagabe565Verified publisher0.10.01 of 2See more

monica gabe565 0.10.0

1 of the 2 container images this version deploys carry CVE-2026-48736.

Container imageDigestPackageFixed in
library/monica:4.1.2-fpm-alpine6d1b2bd0947e
symfony/http-foundation@v6.4.7
6.4.41

Open the chart page →

1,173
wallabaghelmforgeVerified publisher1.3.61 of 3See more

wallabag helmforge 1.3.6

1 of the 3 container images this version deploys carry CVE-2026-48736.

Container imageDigestPackageFixed in
wallabag/wallabag:2.6.144a527e027e0d
symfony/http-client@v5.4.49
5.4.53

Open the chart page →

2,762
wallabaghpVerified publisher0.1.71 of 1See more

wallabag hp 0.1.7

1 of the 1 container images this version deploys carry CVE-2026-48736.

Container imageDigestPackageFixed in
wallabag/wallabag:2.6.144a527e027e0d
symfony/http-client@v5.4.49
5.4.53

Open the chart page →

1,136
docker-mailservermailserverVerified publisher0.2.651 of 9See more

docker-mailserver mailserver 0.2.65

1 of the 9 container images this version deploys carry CVE-2026-48736.

Container imageDigestPackageFixed in
jeboehm/mailserver-web:5.0.929da13edf5aa8
symfony/http-foundation@v7.3.3
7.4.13

Open the chart page →

10,897
medewerkercatalogusmedewerkercatalogus1.0.01 of 3See more

medewerkercatalogus medewerkercatalogus 1.0.0

1 of the 3 container images this version deploys carry CVE-2026-48736.

Container imageDigestPackageFixed in
ghcr.io/conductionnl/medewerkercatalogus-php:latest1ea5412bed26
symfony/http-client@v5.4.8
5.4.53

Open the chart page →

7,327
librenmsnimbolus0.5.11 of 3See more

librenms nimbolus 0.5.1

1 of the 3 container images this version deploys carry CVE-2026-48736.

Container imageDigestPackageFixed in
librenms/librenms:24.11.00920bc9117a8
symfony/http-foundation@v6.4.14
6.4.41

Open the chart page →

2,293
nextcloudsb-helm-charts0.4.01 of 2See more

nextcloud sb-helm-charts 0.4.0

1 of the 2 container images this version deploys carry CVE-2026-48736.

Container imageDigestPackageFixed in
library/nextcloud:31.0.10-apacheb7faa1653c39
symfony/http-foundation@v6.4.18
6.4.41

Open the chart page →

9,755
snipeitschmitzis6.1.01 of 2See more

snipeit schmitzis 6.1.0

1 of the 2 container images this version deploys carry CVE-2026-48736.

Container imageDigestPackageFixed in
snipe/snipe-it:v8.3.1141ebf2386fe
symfony/http-foundation@v7.3.1
7.4.13

Open the chart page →

6,094
wallabagsebtiz13-chartsVerified publisher0.6.01 of 1See more

wallabag sebtiz13-charts 0.6.0

1 of the 1 container images this version deploys carry CVE-2026-48736.

Container imageDigestPackageFixed in
wallabag/wallabag:2.6.144a527e027e0d
symfony/http-client@v5.4.49
5.4.53

Open the chart page →

1,136
repmanteam-blueVerified publisher0.3.01 of 5See more

repman team-blue 0.3.0

1 of the 5 container images this version deploys carry CVE-2026-48736.

Container imageDigestPackageFixed in
buddy/repman:1.4.0097c897f8b54
symfony/http-client@v5.4.2
5.4.53

Open the chart page →

3,993
nextcloudth-chartsVerified publisher0.4.01 of 1See more

nextcloud th-charts 0.4.0

1 of the 1 container images this version deploys carry CVE-2026-48736.

Container imageDigestPackageFixed in
library/nextcloud:31.0.6-apache588609d76b21
symfony/http-foundation@v6.4.18
6.4.41

Open the chart page →

10,086
webresourcecataloguswebresourcecatalogus1.1.01 of 4See more

webresourcecatalogus webresourcecatalogus 1.1.0

1 of the 4 container images this version deploys carry CVE-2026-48736.

Container imageDigestPackageFixed in
ghcr.io/conductionnl/webresourcecatalogus-php:latest8f1bbd5cda85
symfony/http-client@v5.4.8
5.4.53

Open the chart page →

7,552
xboardxboard0.2.01 of 1See more

xboard xboard 0.2.0

1 of the 1 container images this version deploys carry CVE-2026-48736.

Container imageDigestPackageFixed in
ghcr.io/cedar2025/xboard:latest896e4926e0d7
symfony/http-foundation@v7.4.7
7.4.13

Open the chart page →

1,042

Container images carrying it

31 by charts deploying them

A fixed version is listed for 2 of the 2 affected packages.

Container imageDigestPackageFixed inUsed by
buddy/repman:1.4.0097c897f8b54
symfony/http-client@v5.4.2
5.4.53
3
wallabag/wallabag:2.6.144a527e027e0d
symfony/http-client@v5.4.49
5.4.53
3
fireflyiii/core:version-6.5.9fe4ecec4c2ba
symfony/http-foundation@v7.4.7
7.4.13
2
fireflyiii/data-importer:version-2.2.3ab52bf932546
symfony/http-foundation@v8.0.8
8.0.13
2
akaunting/akaunting:3.1.21-fpm-alpine-nginxe7d5c245b1a0
symfony/http-foundation@v6.4.30
6.4.41
1
cspconsole/csp-control-center:1.0.1046dda4a31bd6
symfony/http-foundation@v6.4.35
6.4.41
1
digitalist/matomo:5.12.0bc4aeeaea769
symfony/http-foundation@v6.4.34
6.4.41
1
espocrm/espocrm:9.3.101b5a24504ed9
symfony/http-foundation@v7.4.3
7.4.13
1
jeboehm/mailserver-web:5.0.929da13edf5aa8
symfony/http-foundation@v7.3.3
7.4.13
1
leantime/leantime:3.3.3ad4bfb0699d3
symfony/http-foundation@v6.4.15
6.4.41
1
library/monica:4.1.2-fpm-alpine6d1b2bd0947e
symfony/http-foundation@v6.4.7
6.4.41
1
library/monica:3.7.0-apacheceb1ba4196ab
symfony/http-client@v5.4.3
5.4.53
1
library/nextcloud:31.0.6-apache588609d76b21
symfony/http-foundation@v6.4.18
6.4.41
1
library/nextcloud:31.0.10-apacheb7faa1653c39
symfony/http-foundation@v6.4.18
6.4.41
1
librenms/librenms:24.11.00920bc9117a8
symfony/http-foundation@v6.4.14
6.4.41
1
linkstackorg/linkstack:latest1c8b05399ee4
symfony/http-client@v5.4.49
5.4.53
1
linuxserver/heimdall:2.6.371597f4461e4
symfony/http-foundation@v6.4.3
6.4.41
1
martinhelmich/typo3:12.4c83a4f3fd7ae
symfony/http-foundation@v6.4.29
6.4.41
1
snipe/snipe-it:v8.3.1141ebf2386fe
symfony/http-foundation@v7.3.1
7.4.13
1
ghcr.io/cedar2025/xboard:latest896e4926e0d7
symfony/http-foundation@v7.4.7
7.4.13
1
ghcr.io/conductionnl/berichtservice-php:latestee6a21e66ff0
symfony/http-client@v5.4.8
5.4.53
1
ghcr.io/conductionnl/contactcatalogus-php:latesteeb625bd660c
symfony/http-client@v5.4.8
5.4.53
1
ghcr.io/conductionnl/digispoof-interface-php:latest03aba499950f
symfony/http-client@v5.4.1
5.4.53
1
ghcr.io/conductionnl/eav-component-php:latest24bbca4a52a8
symfony/http-client@v5.4.8
5.4.53
1
ghcr.io/conductionnl/education-component-php:latestda6b05a1a601
symfony/http-client@v5.4.8
5.4.53
1
ghcr.io/conductionnl/medewerkercatalogus-php:latest1ea5412bed26
symfony/http-client@v5.4.8
5.4.53
1
ghcr.io/conductionnl/user-component-php:latest198db44fabb5
symfony/http-client@v5.4.0
5.4.53
1
ghcr.io/conductionnl/webresourcecatalogus-php:latest8f1bbd5cda85
symfony/http-client@v5.4.8
5.4.53
1
ghcr.io/linuxserver/bookstack:version-v24.12.1cc795b254b73
symfony/http-foundation@v6.4.16
6.4.41
1
ghcr.io/monicahq/monica-next:main8be69156acbb
symfony/http-foundation@v7.3.2
7.4.13
1
ghcr.io/tasmoadmin/tasmoadmin:v3.3.205aeefbdac2b
symfony/http-foundation@v6.4.2
6.4.41
1

syft 1.42.1 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.