StackRadar

CVE-2026-4897

Medium

Advisory

Published 26 Mar 2026In the index since 6 Sept 2026
Severity
Medium
worst across findings
CVSS
5.5
base score, highest
EPSS
0.002
5th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
38
of 17,781 indexed, latest versions
Container images
37
deployed by those charts
Fix available
1 of 1
affected package

The matching OSV records carry no description.

Carried by container images the latest versions of 38 of 17,781 indexed charts deploy, on 37 images.

Affected packageAffected versionsFixed inImages
policykit-1deb0.105-14.1, 0.105-14.1ubuntu0.4, 0.105-26ubuntu1, 0.105-26ubuntu1.1+6 more0.105-33ubuntu0.1, 124-2ubuntu1.24.04.337
OSV records
DEBIAN-CVE-2026-4897UBUNTU-CVE-2026-4897
Also known as
USN-8173-1

Charts affected

38 by stars
ChartLatestAffected imagesRadar Score
seafiledatamateVerified publisher0.6.01 of 6See more

seafile datamate 0.6.0

1 of the 6 container images this version deploys carry CVE-2026-4897.

Container imageDigestPackageFixed in
datamate/seafile-professional:11.0.202dd66b722464
policykit-1@0.105-33
0.105-33ubuntu0.1

Open the chart page →

27,267
browserless-chromesagikazarmarkVerified publisher0.0.51 of 1See more

browserless-chrome sagikazarmark 0.0.5

1 of the 1 container images this version deploys carry CVE-2026-4897.

Container imageDigestPackageFixed in
browserless/chrome:1.48.0-chrome-stablec81ae5585b47
policykit-1@0.105-26ubuntu1.1
no fix listed

Open the chart page →

24,488
github-actions-runneradwerx0.10.31 of 1See more

github-actions-runner adwerx 0.10.3

1 of the 1 container images this version deploys carry CVE-2026-4897.

Container imageDigestPackageFixed in
adwerx/github-actions-runner:2.276.1-20.04-1840d2b078682
policykit-1@0.105-26ubuntu1
no fix listed

Open the chart page →

13,635
seafiledr300481Verified publisher0.12.11 of 1See more

seafile dr300481 0.12.1

1 of the 1 container images this version deploys carry CVE-2026-4897.

Container imageDigestPackageFixed in
seafileltd/seafile-mc:11.0.12d0c66e4621bd
policykit-1@0.105-33
0.105-33ubuntu0.1

Open the chart page →

10,858
games-on-whalesgeek-cookbookVerified publisher1.8.21 of 7See more

games-on-whales geek-cookbook 1.8.2

1 of the 7 container images this version deploys carry CVE-2026-4897.

Container imageDigestPackageFixed in
ghcr.io/games-on-whales/retroarch:1.0.0103fbcec2314
policykit-1@0.105-26ubuntu1.1
no fix listed

Open the chart page →

35,305
tdarrgeek-cookbookVerified publisher4.6.22 of 2See more

tdarr geek-cookbook 4.6.2

2 of the 2 container images this version deploys carry CVE-2026-4897.

Container imageDigestPackageFixed in
haveagitgat/tdarr:2.00.181256348872ce
policykit-1@0.105-26ubuntu1.3
no fix listed
haveagitgat/tdarr_node:2.00.101e3f9328327d
policykit-1@0.105-26ubuntu1
no fix listed

Open the chart page →

31,000
tdarrvhdirkVerified publisher5.0.52 of 2See more

tdarr vhdirk 5.0.5

2 of the 2 container images this version deploys carry CVE-2026-4897.

Container imageDigestPackageFixed in
haveagitgat/tdarr_node:2.17.013ff0913202dd
policykit-1@0.105-26ubuntu1.3
no fix listed
ghcr.io/haveagitgat/tdarr:2.00.18.23fbe4c29d14c
policykit-1@0.105-26ubuntu1.3
no fix listed

Open the chart page →

26,657
games-on-whalesangelnu2.0.02 of 7See more

games-on-whales angelnu 2.0.0

2 of the 7 container images this version deploys carry CVE-2026-4897.

Container imageDigestPackageFixed in
andrewmackrodt/firefox-x11:142.0.1-r133f9080470c9
policykit-1@0.105-33
0.105-33ubuntu0.1
ghcr.io/games-on-whales/retroarch:1.0.0103fbcec2314
policykit-1@0.105-26ubuntu1.1
no fix listed

Open the chart page →

42,126
arma-reforgerarma-reforger0.5.31 of 8See more

arma-reforger arma-reforger 0.5.3

1 of the 8 container images this version deploys carry CVE-2026-4897.

Container imageDigestPackageFixed in
ghcr.io/brittonhayes/arma-reforger:latest6fde1edc0983
policykit-1@0.105-26ubuntu1.3
no fix listed

Open the chart page →

23,353
videoaugmentationassist-iot-video-augmentation0.1.01 of 3See more

videoaugmentation assist-iot-video-augmentation 0.1.0

1 of the 3 container images this version deploys carry CVE-2026-4897.

Container imageDigestPackageFixed in
assistiot/video_augmentation:runner-cpu-lateste5ae539ce2cb
policykit-1@0.105-26ubuntu1.3
no fix listed

Open the chart page →

13,913
webpagetest-agentcloudnativeapp0.2.01 of 1See more

webpagetest-agent cloudnativeapp 0.2.0

1 of the 1 container images this version deploys carry CVE-2026-4897.

Container imageDigestPackageFixed in
timothyclarke/wptagent:2018-01-2322c41e5ca7e2
policykit-1@0.105-14.1
no fix listed

Open the chart page →

77,758
ms-emails-grpccodedesignplus-chartsVerified publisher0.0.241 of 1See more

ms-emails-grpc codedesignplus-charts 0.0.24

1 of the 1 container images this version deploys carry CVE-2026-4897.

Container imageDigestPackageFixed in
codedesignplus/ms-emails-grpc:lateste336012bc781
policykit-1@122-3
no fix listed

Open the chart page →

9,367
ms-emails-restcodedesignplus-chartsVerified publisher0.0.241 of 1See more

ms-emails-rest codedesignplus-charts 0.0.24

1 of the 1 container images this version deploys carry CVE-2026-4897.

Container imageDigestPackageFixed in
codedesignplus/ms-emails-rest:latestac84661c605e
policykit-1@122-3
no fix listed

Open the chart page →

9,367
seafilederp3.2.01 of 1See more

seafile derp 3.2.0

1 of the 1 container images this version deploys carry CVE-2026-4897.

Container imageDigestPackageFixed in
seafileltd/seafile-mc:10.0.170628f29c663
policykit-1@0.105-26ubuntu1.3
no fix listed

Open the chart page →

14,856
seafileeleksbai0.1.11 of 3See more

seafile eleksbai 0.1.1

1 of the 3 container images this version deploys carry CVE-2026-4897.

Container imageDigestPackageFixed in
seafileltd/seafile-mc:9.0.106693911bcc40
policykit-1@0.105-26ubuntu1
no fix listed

Open the chart page →

25,122
supportpalevilgn0me0.1.61 of 1See more

supportpal evilgn0me 0.1.6

1 of the 1 container images this version deploys carry CVE-2026-4897.

Container imageDigestPackageFixed in
public.ecr.aws/supportpal/helpdesk-monolithic:4.0.4573779e57fae
policykit-1@0.105-26ubuntu1
no fix listed

Open the chart page →

20,933
event-generatorfalcosecurity0.4.01 of 1See more

event-generator falcosecurity 0.4.0

1 of the 1 container images this version deploys carry CVE-2026-4897.

Container imageDigestPackageFixed in
falcosecurity/event-generator:latest932956d86c99
policykit-1@122-3
no fix listed

Open the chart page →

3,773
business-api-ecosystemfiware1.1.01 of 4See more

business-api-ecosystem fiware 1.1.0

1 of the 4 container images this version deploys carry CVE-2026-4897.

Container imageDigestPackageFixed in
fiware/biz-ecosystem-charging-backend:11.7.029456835bb2c
policykit-1@0.105-26ubuntu1.3
no fix listed

Open the chart page →

64,489
airsonicgeek-cookbookVerified publisher6.4.21 of 1See more

airsonic geek-cookbook 6.4.2

1 of the 1 container images this version deploys carry CVE-2026-4897.

Container imageDigestPackageFixed in
airsonicadvanced/airsonic-advanced:latestf7cbafac2806
policykit-1@0.105-26ubuntu1.1
no fix listed

Open the chart page →

18,230
seafilegeek-cookbookVerified publisher3.2.01 of 1See more

seafile geek-cookbook 3.2.0

1 of the 1 container images this version deploys carry CVE-2026-4897.

Container imageDigestPackageFixed in
seafileltd/seafile-mc:8.0.7ed0fcda5e6a9
policykit-1@0.105-26ubuntu1
no fix listed

Open the chart page →

24,293
countlyhelmforgeVerified publisher1.2.61 of 3See more

countly helmforge 1.2.6

1 of the 3 container images this version deploys carry CVE-2026-4897.

Container imageDigestPackageFixed in
countly/countly-server:25.05.4e3c238248f99
policykit-1@0.105-26ubuntu1.3
no fix listed

Open the chart page →

18,813
discount-bandithelmforgeVerified publisher2.0.81 of 3See more

discount-bandit helmforge 2.0.8

1 of the 3 container images this version deploys carry CVE-2026-4897.

Container imageDigestPackageFixed in
cybrarist/discount-bandit:v4.0.4e9e2447ac666
policykit-1@126-2
no fix listed

Open the chart page →

29,817
itm-servicesintelVerified publisher2.0.01 of 8See more

itm-services intel 2.0.0

1 of the 8 container images this version deploys carry CVE-2026-4897.

Container imageDigestPackageFixed in
intel/dlstreamer-pipeline-server:2022.1.1-ubuntu20aa8f5483a2ef
policykit-1@0.105-26ubuntu1.3
no fix listed

Open the chart page →

18,066
opencloudjacobcolvinVerified publisher0.2.31 of 13See more

opencloud jacobcolvin 0.2.3

1 of the 13 container images this version deploys carry CVE-2026-4897.

Container imageDigestPackageFixed in
apache/tika:2.9.2.1-fullae0b86d3c4d0
policykit-1@124-2ubuntu1
124-2ubuntu1.24.04.3

Open the chart page →

45,239
steamcmd-managerjfwenischVerified publisher0.4.51 of 1See more

steamcmd-manager jfwenisch 0.4.5

1 of the 1 container images this version deploys carry CVE-2026-4897.

Container imageDigestPackageFixed in
ghcr.io/jfwenisch/steamcmd-manager:v0.4.5dab685e668d9
policykit-1@124-2ubuntu1
124-2ubuntu1.24.04.3

Open the chart page →

6,586
webtoolsjfwenischVerified publisher0.1.41 of 1See more

webtools jfwenisch 0.1.4

1 of the 1 container images this version deploys carry CVE-2026-4897.

Container imageDigestPackageFixed in
ghcr.io/jfwenisch/webtools:v0.1.44569cae83c70
policykit-1@124-2ubuntu1
124-2ubuntu1.24.04.3

Open the chart page →

6,568
linkdinglinkding0.2.31 of 1See more

linkding linkding 0.2.3

1 of the 1 container images this version deploys carry CVE-2026-4897.

Container imageDigestPackageFixed in
sissbruecker/linkding:1.41.0-plusa222fb777e1f
policykit-1@122-3
no fix listed

Open the chart page →

37,942
cdn-remoteopencord0.2.41 of 3See more

cdn-remote opencord 0.2.4

1 of the 3 container images this version deploys carry CVE-2026-4897.

Container imageDigestPackageFixed in
omecproject/cdn-video-repo:1.0.0d59ccb138ffb
policykit-1@0.105-14.1ubuntu0.4
no fix listed

Open the chart page →

63,223
mcord-cdn-remoteopencord0.1.61 of 2See more

mcord-cdn-remote opencord 0.1.6

1 of the 2 container images this version deploys carry CVE-2026-4897.

Container imageDigestPackageFixed in
omecproject/cdn-video-repo:remote-v3d59ccb138ffb
policykit-1@0.105-14.1ubuntu0.4
no fix listed

Open the chart page →

42,614
mcord-cdn-remote-freeopencord0.1.31 of 1See more

mcord-cdn-remote-free opencord 0.1.3

1 of the 1 container images this version deploys carry CVE-2026-4897.

Container imageDigestPackageFixed in
omecproject/cdn-video-repo:remote-v3d59ccb138ffb
policykit-1@0.105-14.1ubuntu0.4
no fix listed

Open the chart page →

29,124
seafilephybros-helm-charts4.0.11 of 1See more

seafile phybros-helm-charts 4.0.1

1 of the 1 container images this version deploys carry CVE-2026-4897.

Container imageDigestPackageFixed in
seafileltd/seafile-mc:9.0.97ac833196f60
policykit-1@0.105-26ubuntu1
no fix listed

Open the chart page →

22,084
cupsr2dlan-helm-chartsVerified publisher0.1.01 of 1See more

cups r2dlan-helm-charts 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-4897.

Container imageDigestPackageFixed in
anujdatar/cups:25.07.01685df04a643b
policykit-1@122-3
no fix listed

Open the chart page →

7,685
javareact-java0.1.01 of 1See more

java react-java 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-4897.

Container imageDigestPackageFixed in
project2team4/react:latest3ff031a08887
policykit-1@0.105-26ubuntu1.3
no fix listed

Open the chart page →

15,520
testing-multitoolsomeblackmagic0.1.21 of 1See more

testing-multitool someblackmagic 0.1.2

1 of the 1 container images this version deploys carry CVE-2026-4897.

Container imageDigestPackageFixed in
someblackmagic/k8s-testing-multitool:v0.1.06eca64b6b440
policykit-1@0.105-26ubuntu1.3
no fix listed

Open the chart page →

30,687
rundecksvtech-public-helm-charts1.0.01 of 2See more

rundeck svtech-public-helm-charts 1.0.0

1 of the 2 container images this version deploys carry CVE-2026-4897.

Container imageDigestPackageFixed in
svtechnmaa/svtech_rundeck:v1.2.26e368ace0977
policykit-1@0.105-26ubuntu1.3
no fix listed

Open the chart page →

18,756
opencloudunxwaresVerified publisher0.2.31 of 13See more

opencloud unxwares 0.2.3

1 of the 13 container images this version deploys carry CVE-2026-4897.

Container imageDigestPackageFixed in
apache/tika:2.9.2.1-fullae0b86d3c4d0
policykit-1@124-2ubuntu1
124-2ubuntu1.24.04.3

Open the chart page →

45,239
browserlessvictorlane0.2.01 of 1See more

browserless victorlane 0.2.0

1 of the 1 container images this version deploys carry CVE-2026-4897.

Container imageDigestPackageFixed in
ghcr.io/browserless/chromium:v2.43.0853e6f105b51
policykit-1@124-2ubuntu1.24.04.2
124-2ubuntu1.24.04.3

Open the chart page →

4,305
juicefs-csi-driverwenerme0.32.51 of 5See more

juicefs-csi-driver wenerme 0.32.5

1 of the 5 container images this version deploys carry CVE-2026-4897.

Container imageDigestPackageFixed in
juicedata/juicefs-csi-driver:v0.32.595008ba63318
policykit-1@122-3
no fix listed

Open the chart page →

9,117

Container images carrying it

37 by charts deploying them

A fixed version is listed for 1 of the 1 affected package.

Container imageDigestPackageFixed inUsed by
omecproject/cdn-video-repo:1.0.0:remote-v3d59ccb138ffb
policykit-1@0.105-14.1ubuntu0.4
no fix listed
3
apache/tika:2.9.2.1-fullae0b86d3c4d0
policykit-1@124-2ubuntu1
124-2ubuntu1.24.04.3
2
ghcr.io/games-on-whales/retroarch:1.0.0103fbcec2314
policykit-1@0.105-26ubuntu1.1
no fix listed
2
adwerx/github-actions-runner:2.276.1-20.04-1840d2b078682
policykit-1@0.105-26ubuntu1
no fix listed
1
airsonicadvanced/airsonic-advanced:latestf7cbafac2806
policykit-1@0.105-26ubuntu1.1
no fix listed
1
andrewmackrodt/firefox-x11:142.0.1-r133f9080470c9
policykit-1@0.105-33
0.105-33ubuntu0.1
1
anujdatar/cups:25.07.01685df04a643b
policykit-1@122-3
no fix listed
1
assistiot/video_augmentation:runner-cpu-lateste5ae539ce2cb
policykit-1@0.105-26ubuntu1.3
no fix listed
1
browserless/chrome:1.48.0-chrome-stablec81ae5585b47
policykit-1@0.105-26ubuntu1.1
no fix listed
1
codedesignplus/ms-emails-grpc:lateste336012bc781
policykit-1@122-3
no fix listed
1
codedesignplus/ms-emails-rest:latestac84661c605e
policykit-1@122-3
no fix listed
1
countly/countly-server:25.05.4e3c238248f99
policykit-1@0.105-26ubuntu1.3
no fix listed
1
cybrarist/discount-bandit:v4.0.4e9e2447ac666
policykit-1@126-2
no fix listed
1
datamate/seafile-professional:11.0.202dd66b722464
policykit-1@0.105-33
0.105-33ubuntu0.1
1
falcosecurity/event-generator:latest932956d86c99
policykit-1@122-3
no fix listed
1
fiware/biz-ecosystem-charging-backend:11.7.029456835bb2c
policykit-1@0.105-26ubuntu1.3
no fix listed
1
haveagitgat/tdarr:2.00.181256348872ce
policykit-1@0.105-26ubuntu1.3
no fix listed
1
haveagitgat/tdarr_node:2.00.101e3f9328327d
policykit-1@0.105-26ubuntu1
no fix listed
1
haveagitgat/tdarr_node:2.17.013ff0913202dd
policykit-1@0.105-26ubuntu1.3
no fix listed
1
intel/dlstreamer-pipeline-server:2022.1.1-ubuntu20aa8f5483a2ef
policykit-1@0.105-26ubuntu1.3
no fix listed
1
juicedata/juicefs-csi-driver:v0.32.595008ba63318
policykit-1@122-3
no fix listed
1
project2team4/react:latest3ff031a08887
policykit-1@0.105-26ubuntu1.3
no fix listed
1
seafileltd/seafile-mc:9.0.106693911bcc40
policykit-1@0.105-26ubuntu1
no fix listed
1
seafileltd/seafile-mc:10.0.170628f29c663
policykit-1@0.105-26ubuntu1.3
no fix listed
1
seafileltd/seafile-mc:9.0.97ac833196f60
policykit-1@0.105-26ubuntu1
no fix listed
1
seafileltd/seafile-mc:11.0.12d0c66e4621bd
policykit-1@0.105-33
0.105-33ubuntu0.1
1
seafileltd/seafile-mc:8.0.7ed0fcda5e6a9
policykit-1@0.105-26ubuntu1
no fix listed
1
sissbruecker/linkding:1.41.0-plusa222fb777e1f
policykit-1@122-3
no fix listed
1
someblackmagic/k8s-testing-multitool:v0.1.06eca64b6b440
policykit-1@0.105-26ubuntu1.3
no fix listed
1
svtechnmaa/svtech_rundeck:v1.2.26e368ace0977
policykit-1@0.105-26ubuntu1.3
no fix listed
1
timothyclarke/wptagent:2018-01-2322c41e5ca7e2
policykit-1@0.105-14.1
no fix listed
1
ghcr.io/brittonhayes/arma-reforger:latest6fde1edc0983
policykit-1@0.105-26ubuntu1.3
no fix listed
1
ghcr.io/browserless/chromium:v2.43.0853e6f105b51
policykit-1@124-2ubuntu1.24.04.2
124-2ubuntu1.24.04.3
1
ghcr.io/haveagitgat/tdarr:2.00.18.23fbe4c29d14c
policykit-1@0.105-26ubuntu1.3
no fix listed
1
ghcr.io/jfwenisch/steamcmd-manager:v0.4.5dab685e668d9
policykit-1@124-2ubuntu1
124-2ubuntu1.24.04.3
1
ghcr.io/jfwenisch/webtools:v0.1.44569cae83c70
policykit-1@124-2ubuntu1
124-2ubuntu1.24.04.3
1
public.ecr.aws/supportpal/helpdesk-monolithic:4.0.4573779e57fae
policykit-1@0.105-26ubuntu1
no fix listed
1

syft 1.42.1 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.