StackRadar

CVE-2026-50152

Critical

Advisory

Published 28 Aug 2026In the index since 6 Sept 2026
Severity
Critical
worst across findings
CVSS
9.1
base score, highest
EPSS
0.002
6th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
11
of 17,781 indexed, latest versions
Container images
10
deployed by those charts
Fix available
None
affected package

The matching OSV records carry no description.

Carried by container images the latest versions of 11 of 17,781 indexed charts deploy, on 10 images.

Affected packageAffected versionsFixed inImages
cephdeb15.2.13-0ubuntu0.20.04.1, 16.2.15+ds-0+deb12u1, 16.2.15+ds-0+deb12u2, 17.2.7-0ubuntu0.22.04.2+2 moreno fix listed10
OSV records
DEBIAN-CVE-2026-50152UBUNTU-CVE-2026-50152

Charts affected

11 by stars
ChartLatestAffected imagesRadar Score
dragonflydragonflyVerified publisher1.8.41 of 3See more

dragonfly dragonfly 1.8.4

1 of the 3 container images this version deploys carry CVE-2026-50152.

Container imageDigestPackageFixed in
dragonflyoss/client:v1.5.4a1b52779c4dd
ceph@16.2.15+ds-0+deb12u2
no fix listed

Open the chart page →

3,787
seafiledatamateVerified publisher0.6.01 of 6See more

seafile datamate 0.6.0

1 of the 6 container images this version deploys carry CVE-2026-50152.

Container imageDigestPackageFixed in
datamate/seafile-professional:11.0.202dd66b722464
ceph@17.2.7-0ubuntu0.22.04.2
no fix listed

Open the chart page →

27,267
opennebulakvaps2.1.12 of 9See more

opennebula kvaps 2.1.1

2 of the 9 container images this version deploys carry CVE-2026-50152.

Container imageDigestPackageFixed in
ghcr.io/kvaps/opennebula:v5.12.0.4-1e28e0e7de11b
ceph@15.2.13-0ubuntu0.20.04.1
no fix listed
ghcr.io/kvaps/opennebula-flow:v5.12.0.4-1600221f0f43f
ceph@15.2.13-0ubuntu0.20.04.1
no fix listed

Open the chart page →

113,791
charon-relaycharonOfficialVerified publisher0.8.01 of 2See more

charon-relay charon 0.8.0

1 of the 2 container images this version deploys carry CVE-2026-50152.

Container imageDigestPackageFixed in
obolnetwork/charon:v1.10.0278c7e2897b6
ceph@18.2.7+ds-1
no fix listed

Open the chart page →

4,396
dv-podcharonOfficialVerified publisher0.19.11 of 5See more

dv-pod charon 0.19.1

1 of the 5 container images this version deploys carry CVE-2026-50152.

Container imageDigestPackageFixed in
obolnetwork/charon:v1.10.0278c7e2897b6
ceph@18.2.7+ds-1
no fix listed

Open the chart page →

7,405
extended-ceph-exporterextended-ceph-exporterVerified publisher1.10.01 of 2See more

extended-ceph-exporter extended-ceph-exporter 1.10.0

1 of the 2 container images this version deploys carry CVE-2026-50152.

Container imageDigestPackageFixed in
galexrt/extended-ceph-exporter:v1.8.05373078a3a08
ceph@18.2.7+ds-1
no fix listed

Open the chart page →

2,885
hydrahydraVerified publisher0.9.51 of 2See more

hydra hydra 0.9.5

1 of the 2 container images this version deploys carry CVE-2026-50152.

Container imageDigestPackageFixed in
ghcr.io/smarter-project/hydra/isolated-vm:main4457b79b24cd
ceph@16.2.15+ds-0+deb12u1
no fix listed

Open the chart page →

9,011
isolated-vmhydraVerified publisher0.9.41 of 1See more

isolated-vm hydra 0.9.4

1 of the 1 container images this version deploys carry CVE-2026-50152.

Container imageDigestPackageFixed in
ghcr.io/smarter-project/hydra/isolated-vm:main4457b79b24cd
ceph@16.2.15+ds-0+deb12u1
no fix listed

Open the chart page →

7,733
node-debug-dashboardnode-debug-dashboardVerified publisher0.3.21 of 1See more

node-debug-dashboard node-debug-dashboard 0.3.2

1 of the 1 container images this version deploys carry CVE-2026-50152.

Container imageDigestPackageFixed in
ghcr.io/samr037/node-debug-dashboard:0.3.0c79b2e64a211
ceph@16.2.15+ds-0+deb12u2
no fix listed

Open the chart page →

6,854
piepieVerified publisher0.11.11 of 1See more

pie pie 0.11.1

1 of the 1 container images this version deploys carry CVE-2026-50152.

Container imageDigestPackageFixed in
ghcr.io/topolvm/pie:0.18.0aa467443e407
ceph@17.2.9-0ubuntu0.22.04.3
no fix listed

Open the chart page →

2,100
juicefs-csi-driverwenerme0.32.51 of 5See more

juicefs-csi-driver wenerme 0.32.5

1 of the 5 container images this version deploys carry CVE-2026-50152.

Container imageDigestPackageFixed in
juicedata/juicefs-csi-driver:v0.32.595008ba63318
ceph@16.2.15+ds-0+deb12u2
no fix listed

Open the chart page →

9,117

Container images carrying it

10 by charts deploying them

A fixed version is listed for 0 of the 1 affected package.

Container imageDigestPackageFixed inUsed by
obolnetwork/charon:v1.10.0278c7e2897b6
ceph@18.2.7+ds-1
no fix listed
2
ghcr.io/smarter-project/hydra/isolated-vm:main4457b79b24cd
ceph@16.2.15+ds-0+deb12u1
no fix listed
2
datamate/seafile-professional:11.0.202dd66b722464
ceph@17.2.7-0ubuntu0.22.04.2
no fix listed
1
dragonflyoss/client:v1.5.4a1b52779c4dd
ceph@16.2.15+ds-0+deb12u2
no fix listed
1
galexrt/extended-ceph-exporter:v1.8.05373078a3a08
ceph@18.2.7+ds-1
no fix listed
1
juicedata/juicefs-csi-driver:v0.32.595008ba63318
ceph@16.2.15+ds-0+deb12u2
no fix listed
1
ghcr.io/kvaps/opennebula:v5.12.0.4-1e28e0e7de11b
ceph@15.2.13-0ubuntu0.20.04.1
no fix listed
1
ghcr.io/kvaps/opennebula-flow:v5.12.0.4-1600221f0f43f
ceph@15.2.13-0ubuntu0.20.04.1
no fix listed
1
ghcr.io/samr037/node-debug-dashboard:0.3.0c79b2e64a211
ceph@16.2.15+ds-0+deb12u2
no fix listed
1
ghcr.io/topolvm/pie:0.18.0aa467443e407
ceph@17.2.9-0ubuntu0.22.04.3
no fix listed
1

syft 1.42.1 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.