StackRadar

CVE-2026-4878

High

Advisory

Published 7 Apr 2026In the index since 5 Sept 2026
Severity
High
worst across findings
CVSS
7.0
base score, highest
EPSS
0.002
11th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
1,597
of 17,787 indexed, latest versions
Container images
1,823
deployed by those charts
Fix available
3 of 3
affected packages

Red Hat Security Advisory: libcap security update

Carried by container images the latest versions of 1,597 of 17,787 indexed charts deploy, on 1,823 images.

Affected packageAffected versionsFixed inImages
libcap2deb1:2.24-0ubuntu2, 1:2.24-12, 1:2.25-1.2, 1:2.32-1+16 more1:2.24-0ubuntu2+esm2, 1:2.24-12ubuntu0.1~esm2, 1:2.25-1.2ubuntu0.1~esm2, 1:2.32-1ubuntu0.2+esm1+6 more1,411
libcapapk2.70-r0, 2.71-r0, 2.76-r0, 2.77-r02.78-r039
libcaprpm2.25-9.el8, 2.25-lp151.3.70, 2.26-1.el8, 2.26-3.el8+16 more0:2.48-6.el8_10.1, 0:2.48-10.el9_7.1, 0:2.48-10.el9_8.1, 0:2.69-7.el10_1.1+3 more373
OSV records
ALPINE-CVE-2026-4878DEBIAN-CVE-2026-4878RHSA-2026:12423RHSA-2026:12441RHSA-2026:13285RHSA-2026:19346RLSA-2026:12441RLSA-2026:13285UBUNTU-CVE-2026-4878AZL-82425ECHO-beb9-6eea-f967openSUSE-SU-2026:10536-1SUSE-SU-2026:1432-1
Also known as
RHSA-2026:19458, RHSA-2026:20595, RHSA-2026:21254, RHSA-2026:22957, RHSA-2026:24346, RLSA-2026:19346, USN-8193-1, USN-8193-2

Charts affected

1,597 by stars
ChartLatestAffected imagesRadar Score
cp-schema-registrycp-schema-registryVerified publisher1.0.01 of 1See more

cp-schema-registry cp-schema-registry 1.0.0

1 of the 1 container images this version deploys carry CVE-2026-4878.

Container imageDigestPackageFixed in
ghcr.io/devops-ia/cp-schema-registry:8.1.1-msk-iam-auth2.3.530d1a445acc7
libcap@2.48-10.el9
0:2.48-10.el9_7.1

Open the chart page →

1,883
sops-operatorcraftypathVerified publisher0.8.01 of 1See more

sops-operator craftypath 0.8.0

1 of the 1 container images this version deploys carry CVE-2026-4878.

Container imageDigestPackageFixed in
craftypath/sops-operator:v0.8.0402a0024c732
libcap@2.26-4.el8
0:2.48-6.el8_10.1

Open the chart page →

6,473
cryptlex-enterprisecryptlex3.21.251 of 8See more

cryptlex-enterprise cryptlex 3.21.25

1 of the 8 container images this version deploys carry CVE-2026-4878.

Container imageDigestPackageFixed in
minio/minio:RELEASE.2025-03-12T18-04-18Z46b3009bf704
libcap@2.48-9.el9_2
0:2.48-10.el9_7.1

Open the chart page →

2,345
paperless-ngxcrystalnetVerified publisher0.2.221 of 3See more

paperless-ngx crystalnet 0.2.22

1 of the 3 container images this version deploys carry CVE-2026-4878.

Container imageDigestPackageFixed in
ghcr.io/paperless-ngx/paperless-ngx:2.13.10642357c5dbd
libcap2@1:2.66-4
1:2.66-4+deb12u3

Open the chart page →

12,924
nifid4nVerified publisher2.0.01 of 5See more

nifi d4n 2.0.0

1 of the 5 container images this version deploys carry CVE-2026-4878.

Container imageDigestPackageFixed in
apache/nifi-registry:1.26.07cdfd8deec92
libcap2@1:2.44-1ubuntu0.22.04.1
1:2.44-1ubuntu0.22.04.3

Open the chart page →

5,438
aibrixdanchevVerified publisher0.7.01 of 5See more

aibrix danchev 0.7.0

1 of the 5 container images this version deploys carry CVE-2026-4878.

Container imageDigestPackageFixed in
aibrix/metadata-service:v0.7.063fb81a64377
libcap2@1:2.66-4
1:2.66-4+deb12u3

Open the chart page →

5,298
datacube-explorerdatacube-charts0.5.321 of 1See more

datacube-explorer datacube-charts 0.5.32

1 of the 1 container images this version deploys carry CVE-2026-4878.

Container imageDigestPackageFixed in
opendatacube/explorer:latest120457ffcd69
libcap2@1:2.66-5ubuntu2.2
1:2.66-5ubuntu2.4

Open the chart page →

4,909
extendeddaemonsetdatadogVerified publisher0.3.31 of 1See more

extendeddaemonset datadog 0.3.3

1 of the 1 container images this version deploys carry CVE-2026-4878.

Container imageDigestPackageFixed in
datadog/extendeddaemonset:v0.8.0513a4377aed5
libcap@2.26-5.el8
0:2.48-6.el8_10.1

Open the chart page →

4,759
dbrepodbrepo1.13.315 of 25See more

dbrepo dbrepo 1.13.3

15 of the 25 container images this version deploys carry CVE-2026-4878.

Container imageDigestPackageFixed in
bitnamilegacy/grafana:11.4.0-debian-12-r0cb8ab5515676
libcap2@1:2.66-4
1:2.66-4+deb12u3
bitnamilegacy/mariadb:11.4.5-debian-12-r128bc50a0961a7
libcap2@1:2.66-4
1:2.66-4+deb12u3
bitnamilegacy/mariadb-galera:11.3.2-debian-12-r9aee9c668098f
libcap2@1:2.66-4
1:2.66-4+deb12u3
bitnamilegacy/mysqld-exporter:0.15.1-debian-12-r2611a5f0b79e79
libcap2@1:2.66-4
1:2.66-4+deb12u3
bitnamilegacy/nginx:1.28.0-debian-12-r0eaf9066e86f6
libcap2@1:2.66-4
1:2.66-4+deb12u3
bitnamilegacy/openldap:2.6.8-debian-12-r16e412c178ef9
libcap2@1:2.66-4
1:2.66-4+deb12u3
bitnamilegacy/opensearch:2.18.0-debian-12-r0d8440eb6b290
libcap2@1:2.66-4
1:2.66-4+deb12u3
bitnamilegacy/os-shell:12-debian-12-r3217444b4b2c96
libcap2@1:2.66-4
1:2.66-4+deb12u3
bitnamilegacy/postgres-exporter:0.15.0-debian-12-r44e7e1b3a90682
libcap2@1:2.66-4
1:2.66-4+deb12u3
bitnamilegacy/postgresql:17.0.0-debian-12-r9d885ac277163
libcap2@1:2.66-4
1:2.66-4+deb12u3
bitnamilegacy/postgresql:17.6.0-debian-12-r0de520acd66fc
libcap2@1:2.66-4+deb12u1
1:2.66-4+deb12u3
bitnamilegacy/prometheus:2.54.1-debian-12-r408b1b7cb6a5b
libcap2@1:2.66-4
1:2.66-4+deb12u3
bitnamilegacy/rabbitmq:3.13.7-debian-12-r2cd593809e359
libcap2@1:2.66-4
1:2.66-4+deb12u3
bitnamilegacy/seaweedfs:3.87.0-debian-12-r10cb31d0fc356
libcap2@1:2.66-4
1:2.66-4+deb12u3
bitnamilegacy/valkey:latest0384ca2eec63
libcap2@1:2.66-4+deb12u1
1:2.66-4+deb12u3

Open the chart page →

50,281
developer-operatordeveloper-operatorVerified publisher2.1.21 of 1See more

developer-operator developer-operator 2.1.2

1 of the 1 container images this version deploys carry CVE-2026-4878.

Container imageDigestPackageFixed in
registry.gitlab.com/xrow-public/developer-operator/developer-operator-controller:2.1.2301847adfe16
libcap@2.48-9.el9_2
0:2.48-10.el9_7.1

Open the chart page →

1,845
kubedashdevopstalesOfficialVerified publisher4.0.02 of 8See more

kubedash devopstales 4.0.0

2 of the 8 container images this version deploys carry CVE-2026-4878.

Container imageDigestPackageFixed in
library/postgres:18.3a9abf4275f9e
libcap2@1:2.75-10+b8
1:2.75-10+deb13u1
library/redis:8.6.2009cc37796fb
libcap2@1:2.75-10+b8
1:2.75-10+deb13u1

Open the chart page →

9,239
calicodevtron0.1.11 of 4See more

calico devtron 0.1.1

1 of the 4 container images this version deploys carry CVE-2026-4878.

Container imageDigestPackageFixed in
quay.io/devtron/calico-networking:node-v3.19.1bc4aa22272ef
libcap@2.26-4.el8
0:2.48-6.el8_10.1

Open the chart page →

10,073
clairdevtron0.1.141 of 2See more

clair devtron 0.1.14

1 of the 2 container images this version deploys carry CVE-2026-4878.

Container imageDigestPackageFixed in
quay.io/devtron/clair:4.3.675fb847ac045
libcap@2.26-5.el8
0:2.48-6.el8_10.1

Open the chart page →

6,237
dial-coredialOfficialVerified publisher6.0.01 of 2See more

dial-core dial 6.0.0

1 of the 2 container images this version deploys carry CVE-2026-4878.

Container imageDigestPackageFixed in
valkey/valkey:9.0.2930b41430fb7
libcap2@1:2.75-10+b3
1:2.75-10+deb13u1

Open the chart page →

1,533
directusdirectus-io2.1.02 of 3See more

directus directus-io 2.1.0

2 of the 3 container images this version deploys carry CVE-2026-4878.

Container imageDigestPackageFixed in
bitnamilegacy/mysql:9.4.0-debian-12-r1ec13e229247a
libcap2@1:2.66-4+deb12u1
1:2.66-4+deb12u3
bitnamilegacy/redis:8.2.1-debian-12-r025bf63f3caf7
libcap2@1:2.66-4+deb12u1
1:2.66-4+deb12u3

Open the chart page →

7,518
dominodominoVerified publisher0.1.112 of 3See more

domino domino 0.1.11

2 of the 3 container images this version deploys carry CVE-2026-4878.

Container imageDigestPackageFixed in
library/postgres:134689940c6838
libcap2@1:2.75-10+b1
1:2.75-10+deb13u1
ghcr.io/tauffer-consulting/domino-rest:latest8bf880fe8c73
libcap2@1:2.66-4
1:2.66-4+deb12u3

Open the chart page →

8,842
seafiledr300481Verified publisher0.12.11 of 1See more

seafile dr300481 0.12.1

1 of the 1 container images this version deploys carry CVE-2026-4878.

Container imageDigestPackageFixed in
seafileltd/seafile-mc:11.0.12d0c66e4621bd
libcap2@1:2.44-1ubuntu0.22.04.1
1:2.44-1ubuntu0.22.04.3

Open the chart page →

10,884
dragonfly-stackdragonflyVerified publisher0.1.21 of 7See more

dragonfly-stack dragonfly 0.1.2

1 of the 7 container images this version deploys carry CVE-2026-4878.

Container imageDigestPackageFixed in
dragonflyoss/client:v0.1.82edf3e921f4e0
libcap2@1:2.66-4
1:2.66-4+deb12u3

Open the chart page →

18,402
rstudiodsri-helm-charts0.1.281 of 1See more

rstudio dsri-helm-charts 0.1.28

1 of the 1 container images this version deploys carry CVE-2026-4878.

Container imageDigestPackageFixed in
ghcr.io/maastrichtu-ids/rstudio:latest981aa4c109e1
libcap2@1:2.66-5ubuntu2.2
1:2.66-5ubuntu2.4

Open the chart page →

5,724
elchi-stackelchi1.13.02 of 10See more

elchi-stack elchi 1.13.0

2 of the 10 container images this version deploys carry CVE-2026-4878.

Container imageDigestPackageFixed in
envoyproxy/envoy:v1.33.056da5afd7df3
libcap2@1:2.44-1ubuntu0.22.04.1
1:2.44-1ubuntu0.22.04.3
library/mongo:6.0.12646902910d6a
libcap2@1:2.44-1ubuntu0.22.04.1
1:2.44-1ubuntu0.22.04.3

Open the chart page →

15,501
enbuildenbuildVerified publisher0.0.503 of 6See more

enbuild enbuild 0.0.50

3 of the 6 container images this version deploys carry CVE-2026-4878.

Container imageDigestPackageFixed in
registry.gitlab.com/enbuild-staging/vivsoft-platform-ui/enbuild-frontend:1.0.3166353ce9bf98
libcap2@1:2.75-10+b8
1:2.75-10+deb13u1
registry.gitlab.com/enbuild-staging/vivsoft-platform-ui/mongodb:4.4.5cf72810d33f5
libcap@2.26-4.el8
0:2.48-6.el8_10.1
registry.gitlab.com/enbuild-staging/vivsoft-platform-ui/rabbitmq:3.12.145a9334f371f3
libcap2@1:2.66-4
1:2.66-4+deb12u3

Open the chart page →

31,572
beaconchain-explorerethereum-helm-chartsVerified publisher0.1.61 of 2See more

beaconchain-explorer ethereum-helm-charts 0.1.6

1 of the 2 container images this version deploys carry CVE-2026-4878.

Container imageDigestPackageFixed in
gobitfly/eth2-beaconchain-explorer:latest1d08a7986348
libcap2@1:2.44-1ubuntu0.22.04.2
1:2.44-1ubuntu0.22.04.3

Open the chart page →

3,087
iobrokereugen0.2.61 of 1See more

iobroker eugen 0.2.6

1 of the 1 container images this version deploys carry CVE-2026-4878.

Container imageDigestPackageFixed in
ghcr.io/buanet/iobroker:v9.1.2ca7dc7362968
libcap2@1:2.66-4
1:2.66-4+deb12u3

Open the chart page →

11,483
akauntingf3k-techVerified publisher1.3121.01 of 4See more

akaunting f3k-tech 1.3121.0

1 of the 4 container images this version deploys carry CVE-2026-4878.

Container imageDigestPackageFixed in
bitnamilegacy/mariadb:latestbbd4e17f1ef8
libcap2@1:2.66-4+deb12u1
1:2.66-4+deb12u3

Open the chart page →

4,345
cap-captcha-serverf3k-techVerified publisher0.21.01 of 1See more

cap-captcha-server f3k-tech 0.21.0

1 of the 1 container images this version deploys carry CVE-2026-4878.

Container imageDigestPackageFixed in
tiago2/cap:2.159f5ae4e261e
libcap2@1:2.75-10+b3
1:2.75-10+deb13u1

Open the chart page →

1,676
fastapi-microservice-appfast-api-microservice-app1.3.03 of 4See more

fastapi-microservice-app fast-api-microservice-app 1.3.0

3 of the 4 container images this version deploys carry CVE-2026-4878.

Container imageDigestPackageFixed in
omkara25/simple-microservice-app-order-service:v2.18327546c7aac
libcap2@1:2.66-4+deb12u1
1:2.66-4+deb12u3
omkara25/simple-microservice-app-payment-service:v2afff40172b6b
libcap2@1:2.66-4+deb12u1
1:2.66-4+deb12u3
omkara25/simple-microservice-app-user-service:v2d62cba548580
libcap2@1:2.66-4+deb12u1
1:2.66-4+deb12u3

Open the chart page →

9,619
federidfederidOfficialVerified publisher0.1.21 of 1See more

federid federid 0.1.2

1 of the 1 container images this version deploys carry CVE-2026-4878.

Container imageDigestPackageFixed in
federid/webhook:0.1.0fbfb7c6510a7
libcap2@1:2.66-4
1:2.66-4+deb12u3

Open the chart page →

2,076
taigafermosit0.0.111 of 7See more

taiga fermosit 0.0.11

1 of the 7 container images this version deploys carry CVE-2026-4878.

Container imageDigestPackageFixed in
taigaio/taiga-protected:latestfd4568a97a59
libcap2@1:2.75-10+b8
1:2.75-10+deb13u1

Open the chart page →

8,520
zabbix-server-mysqlfermosit3.0.23 of 4See more

zabbix-server-mysql fermosit 3.0.2

3 of the 4 container images this version deploys carry CVE-2026-4878.

Container imageDigestPackageFixed in
zabbix/zabbix-agent:ubuntu-6.4-latest349b924472a7
libcap2@1:2.66-5ubuntu2
1:2.66-5ubuntu2.4
zabbix/zabbix-server-mysql:ubuntu-6.4-latest55d074b6b031
libcap2@1:2.66-5ubuntu2.1
1:2.66-5ubuntu2.4
zabbix/zabbix-web-nginx-mysql:ubuntu-6.4-latest0e5f69c4c54e
libcap2@1:2.66-5ubuntu2.1
1:2.66-5ubuntu2.4

Open the chart page →

12,988
games-on-whalesgeek-cookbookVerified publisher1.8.23 of 7See more

games-on-whales geek-cookbook 1.8.2

3 of the 7 container images this version deploys carry CVE-2026-4878.

Container imageDigestPackageFixed in
ghcr.io/games-on-whales/pulseaudio:1.0.0f34f98405c10
libcap2@1:2.32-1
1:2.32-1ubuntu0.2+esm1
ghcr.io/games-on-whales/retroarch:1.0.0103fbcec2314
libcap2@1:2.32-1
1:2.32-1ubuntu0.2+esm1
ghcr.io/games-on-whales/steam:1.0.09b6105be7ad0
libcap2@1:2.32-1
1:2.32-1ubuntu0.2+esm1

Open the chart page →

35,464
homebridgegeek-cookbookVerified publisher5.3.21 of 1See more

homebridge geek-cookbook 5.3.2

1 of the 1 container images this version deploys carry CVE-2026-4878.

Container imageDigestPackageFixed in
ghcr.io/oznu/homebridge:2022-07-08ff2af53897e7
libcap2@1:2.32-1
1:2.32-1ubuntu0.2+esm1

Open the chart page →

15,717
ombigeek-cookbookVerified publisher11.5.21 of 1See more

ombi geek-cookbook 11.5.2

1 of the 1 container images this version deploys carry CVE-2026-4878.

Container imageDigestPackageFixed in
ghcr.io/linuxserver/ombi:4.16.124c1b67cf39af
libcap2@1:2.44-1build3
1:2.44-1ubuntu0.22.04.3

Open the chart page →

5,175
sonarrgeek-cookbookVerified publisher16.3.21 of 1See more

sonarr geek-cookbook 16.3.2

1 of the 1 container images this version deploys carry CVE-2026-4878.

Container imageDigestPackageFixed in
ghcr.io/k8s-at-home/sonarr:v3.0.8.15070eb230e2381a
libcap2@1:2.44-1build3
1:2.44-1ubuntu0.22.04.3

Open the chart page →

13,071
tdarrgeek-cookbookVerified publisher4.6.22 of 2See more

tdarr geek-cookbook 4.6.2

2 of the 2 container images this version deploys carry CVE-2026-4878.

Container imageDigestPackageFixed in
haveagitgat/tdarr:2.00.181256348872ce
libcap2@1:2.32-1
1:2.32-1ubuntu0.2+esm1
haveagitgat/tdarr_node:2.00.101e3f9328327d
libcap2@1:2.32-1
1:2.32-1ubuntu0.2+esm1

Open the chart page →

31,178
valheimgeek-cookbookVerified publisher4.4.21 of 1See more

valheim geek-cookbook 4.4.2

1 of the 1 container images this version deploys carry CVE-2026-4878.

Container imageDigestPackageFixed in
ghcr.io/lloesche/valheim-server:latest20fde516ce31
libcap2@1:2.75-10+b8
1:2.75-10+deb13u1

Open the chart page →

4,893
wireguardgeek-cookbookVerified publisher1.4.21 of 1See more

wireguard geek-cookbook 1.4.2

1 of the 1 container images this version deploys carry CVE-2026-4878.

Container imageDigestPackageFixed in
ghcr.io/k8s-at-home/wireguard:v1.0.20210424448045c4270b
libcap2@1:2.32-1
1:2.32-1ubuntu0.2+esm1

Open the chart page →

7,698
gentrace-self-hostedgentrace-self-hostedVerified publisher0.1.33 of 9See more

gentrace-self-hosted gentrace-self-hosted 0.1.3

3 of the 9 container images this version deploys carry CVE-2026-4878.

Container imageDigestPackageFixed in
confluentinc/cp-kafka:7.4.4c0224a1adf7a
libcap@2.48-5.el8_8
0:2.48-6.el8_10.1
library/postgres:15.38775adb39f0d
libcap2@1:2.66-4
1:2.66-4+deb12u3
minio/minio:latest14cea493d9a3
libcap@2.48-9.el9_2
0:2.48-10.el9_7.1

Open the chart page →

15,606
leantimegissilabs1.3.01 of 2See more

leantime gissilabs 1.3.0

1 of the 2 container images this version deploys carry CVE-2026-4878.

Container imageDigestPackageFixed in
library/mariadb:10.6.218a16204dc96c
libcap2@1:2.32-1ubuntu0.2
1:2.32-1ubuntu0.2+esm1

Open the chart page →

6,458
meta-monitoringgrafana1.3.01 of 2See more

meta-monitoring grafana 1.3.0

1 of the 2 container images this version deploys carry CVE-2026-4878.

Container imageDigestPackageFixed in
grafana/alloy:v1.4.306bdcbb51fc2
libcap2@1:2.66-5ubuntu2
1:2.66-5ubuntu2.4

Open the chart page →

3,556
IMgrycapOfficialVerified publisher1.8.01 of 3See more

IM grycap 1.8.0

1 of the 3 container images this version deploys carry CVE-2026-4878.

Container imageDigestPackageFixed in
ghcr.io/grycap/im:latest06a16d4f279f
libcap2@1:2.66-5ubuntu2.2
1:2.66-5ubuntu2.4

Open the chart page →

4,180
castopodh2mVerified publisher1.12.101 of 3See more

castopod h2m 1.12.10

1 of the 3 container images this version deploys carry CVE-2026-4878.

Container imageDigestPackageFixed in
castopod/castopod:1.12.101fd37280cbb2
libcap2@1:2.66-4
1:2.66-4+deb12u3

Open the chart page →

10,106
haproxy-redis-sentinelhaproxy-redis-sentinelVerified publisher0.1.32 of 2See more

haproxy-redis-sentinel haproxy-redis-sentinel 0.1.3

2 of the 2 container images this version deploys carry CVE-2026-4878.

Container imageDigestPackageFixed in
library/haproxy:3.1-bookworm49a0a0d6f0b8
libcap2@1:2.66-4+deb12u1
1:2.66-4+deb12u3
ghcr.io/parmincloud/haproxy-redis-sentinel:1.0.040a00a6456ae
libcap2@1:2.66-4
1:2.66-4+deb12u3

Open the chart page →

4,295
harp-proxyharp0.8.11 of 1See more

harp-proxy harp 0.8.1

1 of the 1 container images this version deploys carry CVE-2026-4878.

Container imageDigestPackageFixed in
makersquad/harp-proxy:0.8.1a40dd258c527
libcap2@1:2.66-4
1:2.66-4+deb12u3

Open the chart page →

6,092
hawkhawk1.1.52 of 4See more

hawk hawk 1.1.5

2 of the 4 container images this version deploys carry CVE-2026-4878.

Container imageDigestPackageFixed in
library/postgres:16.109f23e02d766
libcap2@1:2.66-4
1:2.66-4+deb12u3
ghcr.io/privacyengineering/hawk-service:latestbfedf47bb5e0
libcap2@1:2.44-1ubuntu0.22.04.1
1:2.44-1ubuntu0.22.04.3

Open the chart page →

13,656
guacamolehelmforgeVerified publisher1.5.22 of 5See more

guacamole helmforge 1.5.2

2 of the 5 container images this version deploys carry CVE-2026-4878.

Container imageDigestPackageFixed in
guacamole/guacamole:1.6.0f344085e618b
libcap2@1:2.66-5ubuntu2.2
1:2.66-5ubuntu2.4
library/postgres:17.5-bookwormfbcea1bd13b6
libcap2@1:2.66-4+deb12u1
1:2.66-4+deb12u3

Open the chart page →

8,773
helm-operatorhelm-operatorVerified publisher0.0.21 of 1See more

helm-operator helm-operator 0.0.2

1 of the 1 container images this version deploys carry CVE-2026-4878.

Container imageDigestPackageFixed in
bsgrigorov/helm-operator:latest45ab095f09c8
libcap@2.26-4.el8
0:2.48-6.el8_10.1

Open the chart page →

6,977
helmuphelmupVerified publisher0.1.03 of 3See more

helmup helmup 0.1.0

3 of the 3 container images this version deploys carry CVE-2026-4878.

Container imageDigestPackageFixed in
sirrend/helmup-engine:0.1.13699e79e3d4e2
libcap2@1:2.66-4
1:2.66-4+deb12u3
sirrend/helmup-github-scraper:0.1.47ca688c7abf5
libcap2@1:2.66-4
1:2.66-4+deb12u3
sirrend/helmup-notifications-service:0.1.3997866417011
libcap2@1:2.66-4
1:2.66-4+deb12u3

Open the chart page →

16,532
hiverhiverVerified publisher0.1.451 of 10See more

hiver hiver 0.1.45

1 of the 10 container images this version deploys carry CVE-2026-4878.

Container imageDigestPackageFixed in
hiversh/gateway:0.1.45839226cc6e41
libcap2@1:2.44-1ubuntu0.22.04.2
1:2.44-1ubuntu0.22.04.3

Open the chart page →

21,779
hpe-greenlake-file-csi-driverhpe-storageVerified publisher2.6.42 of 7See more

hpe-greenlake-file-csi-driver hpe-storage 2.6.4

2 of the 7 container images this version deploys carry CVE-2026-4878.

Container imageDigestPackageFixed in
quay.io/hpestorage/filex-csi-driver:2.6.4b7f960bbf472
libcap@2.48-10.el9
0:2.48-10.el9_7.1
quay.io/hpestorage/filex-csi-init:2.6.42d867eefb233
libcap@2.48-9.el9_2
0:2.48-10.el9_7.1

Open the chart page →

6,131
htnn-controllerhtnnVerified publisher0.5.01 of 1See more

htnn-controller htnn 0.5.0

1 of the 1 container images this version deploys carry CVE-2026-4878.

Container imageDigestPackageFixed in
ghcr.io/mosn/htnn-controller:v0.3.1c379e66246be
libcap2@1:2.44-1ubuntu0.22.04.1
1:2.44-1ubuntu0.22.04.3

Open the chart page →

4,339

Container images carrying it

1,823 by charts deploying them

A fixed version is listed for 3 of the 3 affected packages.

Container imageDigestPackageFixed inUsed by
ghcr.io/media-streaming-mesh/msm-dp:latest7ffcb25b4cfc
libcap2@1:2.66-5ubuntu2
1:2.66-5ubuntu2.4
1
ghcr.io/media-streaming-mesh/msm-nc:latest296fe4970e38
libcap2@1:2.66-5ubuntu2
1:2.66-5ubuntu2.4
1
ghcr.io/microboxlabs/miot-calendar:latest-jvm7157cdc0bf5b
libcap@2.48-10.el9
0:2.48-10.el9_7.1
1
ghcr.io/microboxlabs/miot-srv:latest4ec11d229028
libcap@2.48-10.el9
0:2.48-10.el9_7.1
1
ghcr.io/microboxlabs/miot-srv:latest5796553b41ae
libcap@2.48-10.el9
0:2.48-10.el9_7.1
1
ghcr.io/middleware-labs/mw-kube-agent:1.12.09c7bc0f9bb35
libcap2@1:2.66-5ubuntu2
1:2.66-5ubuntu2.4
1
ghcr.io/mollyim/mollysocket:1.1.12a687393f8c8
libcap2@1:2.66-4
1:2.66-4+deb12u3
1
ghcr.io/monicahq/monica-next:main8be69156acbb
libcap2@1:2.75-10+b1
1:2.75-10+deb13u1
1
ghcr.io/mosn/htnn-controller:v0.3.1c379e66246be
libcap2@1:2.44-1ubuntu0.22.04.1
1:2.44-1ubuntu0.22.04.3
1
ghcr.io/music-assistant/server:2.7.53522e8a7a8f0
libcap2@1:2.66-4+deb12u2
1:2.66-4+deb12u3
1
ghcr.io/music-assistant/server:2.8.7eef3ee7810d0
libcap2@1:2.66-4+deb12u2+b2
1:2.66-4+deb12u3
1
ghcr.io/nefelim4ag/k8s-ssh-bastion:0.5.04d337e14c80b
libcap2@1:2.66-5ubuntu2
1:2.66-5ubuntu2.4
1
ghcr.io/nefelim4ag/pingdom-operator:0.0.15f8c7afdcf439
libcap2@1:2.66-4
1:2.66-4+deb12u3
1
ghcr.io/nicolargo/klances:0.1.374d6d33376eb
libcap2@1:2.75-10+b3
1:2.75-10+deb13u1
1
ghcr.io/noahburrell0/sealed-secrets-ui:v0.1.47e7368fb472d
libcap2@1:2.66-4
1:2.66-4+deb12u3
1
ghcr.io/oguzhan-yilmaz/argocd-backup-s3:latestb61c750ade19
libcap2@1:2.66-4+deb12u2
1:2.66-4+deb12u3
1
ghcr.io/oguzhan-yilmaz/kdiff-snapshots:0.0.2035bc5ca66d55a
libcap2@1:2.66-4+deb12u2
1:2.66-4+deb12u3
1
ghcr.io/oguzhan-yilmaz/kdiff-snapshots:0.0.55d7f93d2182fe
libcap2@1:2.66-4+deb12u1
1:2.66-4+deb12u3
1
ghcr.io/ondrejsika/counter-frontend:latestc4166d2eb8eb
libcap2@1:2.66-4+deb12u2
1:2.66-4+deb12u3
1
ghcr.io/openappsec/openappsec-waf-webhook:1.1.345b979b962043
libcap2@1:2.75-10+b1
1:2.75-10+deb13u1
1
ghcr.io/opencatalogi/web-app:deva1a7f507f6ae
libcap2@1:2.66-4
1:2.66-4+deb12u3
1
ghcr.io/openclaw/openclaw:2026.5.22dcfd14877740
libcap2@1:2.66-4+deb12u2+b2
1:2.66-4+deb12u3
1
ghcr.io/opencost/opencost-parquet-exporter:v0.2.1ce85ef0ce665
libcap2@1:2.66-4
1:2.66-4+deb12u3
1
ghcr.io/openrelik/openrelik-metrics:latest3d0f1ddeebf5
libcap2@1:2.66-4+deb12u2+b2
1:2.66-4+deb12u3
1
ghcr.io/open-telemetry/demo:1.12.0-imageprovider4e322858fe56
libcap2@1:2.66-4
1:2.66-4+deb12u3
1
ghcr.io/open-telemetry/demo:1.12.0-accountingservice6d051840bb29
libcap2@1:2.66-4
1:2.66-4+deb12u3
1
ghcr.io/open-telemetry/demo:1.12.0-loadgenerator85c9935ff31b
libcap2@1:2.66-4
1:2.66-4+deb12u3
1
ghcr.io/open-telemetry/demo:1.12.0-quoteservice87eb325d306f
libcap2@1:2.66-4
1:2.66-4+deb12u3
1
ghcr.io/open-telemetry/demo:1.12.0-frontendproxy9fdec1be03e4
libcap2@1:2.44-1ubuntu0.22.04.1
1:2.44-1ubuntu0.22.04.3
1
ghcr.io/open-telemetry/demo:1.12.0-emailservicea1f5cebb5240
libcap2@1:2.66-4
1:2.66-4+deb12u3
1
ghcr.io/open-telemetry/demo:1.12.0-shippingservicea3ca4c02a5df
libcap2@1:2.66-4
1:2.66-4+deb12u3
1
ghcr.io/open-telemetry/demo:1.12.0-adservicea59e5eead495
libcap2@1:2.66-5ubuntu2
1:2.66-5ubuntu2.4
1
ghcr.io/open-telemetry/demo:1.12.0-recommendationserviceb294a4278407
libcap2@1:2.66-4
1:2.66-4+deb12u3
1
ghcr.io/open-telemetry/demo:3.0.0-ade6c593fe75eb
libcap2@1:2.66-5ubuntu2.2
1:2.66-5ubuntu2.4
1
ghcr.io/openunison/openunison-k8s-react:1.0.2afb3e9282952
libcap2@1:2.44-1ubuntu0.22.04.2
1:2.44-1ubuntu0.22.04.3
1
ghcr.io/oznu/homebridge:2022-07-08ff2af53897e7
libcap2@1:2.32-1
1:2.32-1ubuntu0.2+esm1
1
ghcr.io/pabloromeo/clusterplex_orchestrator:1.4.160fe80de2d22c
libcap2@1:2.66-4+deb12u2
1:2.66-4+deb12u3
1
ghcr.io/paperless-ngx/paperless-ngx:2.13.10642357c5dbd
libcap2@1:2.66-4
1:2.66-4+deb12u3
1
ghcr.io/paperless-ngx/paperless-ngx:2.20.134b05bcd28e69
libcap2@1:2.75-10+b1
1:2.75-10+deb13u1
1
ghcr.io/paperless-ngx/paperless-ngx:2.20.357ad9565bff3
libcap2@1:2.75-10+b1
1:2.75-10+deb13u1
1
ghcr.io/paperless-ngx/paperless-ngx:2.20.5665f2f5cc548
libcap2@1:2.75-10+b1
1:2.75-10+deb13u1
1
ghcr.io/paperless-ngx/paperless-ngx:2.0.1ab255bea133e
libcap2@1:2.66-4
1:2.66-4+deb12u3
1
ghcr.io/paperless-ngx/paperless-ngx:2.20.14b89f83345532
libcap2@1:2.75-10+b1
1:2.75-10+deb13u1
1
ghcr.io/paradigmxyz/reth:v1.3.121e5290e8b743
libcap2@1:2.44-1ubuntu0.22.04.2
1:2.44-1ubuntu0.22.04.3
1
ghcr.io/paradigmxyz/reth:v2.2.0505fca5e87d6
libcap2@1:2.66-5ubuntu2.2
1:2.66-5ubuntu2.4
1
ghcr.io/parmincloud/arvancloud-certmanager-issuer:v1.0.00b97452674a3
libcap2@1:2.75-10+b1
1:2.75-10+deb13u1
1
ghcr.io/parmincloud/haproxy-redis-sentinel:1.0.040a00a6456ae
libcap2@1:2.66-4
1:2.66-4+deb12u3
1
ghcr.io/postgresml/pgcat:v1.2.0627761f6dcbc
libcap2@1:2.66-4
1:2.66-4+deb12u3
1
ghcr.io/privacyengineering/hawk-service:latestbfedf47bb5e0
libcap2@1:2.44-1ubuntu0.22.04.1
1:2.44-1ubuntu0.22.04.3
1
ghcr.io/projectnessie/nessie:0.92.19efe3c74d55f
libcap@2.48-9.el9_2
0:2.48-10.el9_7.1
1

syft 1.42.1 · advisories as of 15 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.