StackRadar

CVE-2026-52989

High

Advisory

Published 24 Jun 2026In the index since 6 Sept 2026
Severity
High
worst across findings
CVSS
7.1
base score, highest
EPSS
0.004
29th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
86
of 17,803 indexed, latest versions
Container images
96
deployed by those charts
Fix available
1 of 1
affected package

The matching OSV records carry no description.

Carried by container images the latest versions of 86 of 17,803 indexed charts deploy, on 96 images.

Affected packageAffected versionsFixed inImages
linuxdeb5.4.0-62.70, 5.4.0-65.73, 5.4.0-67.75, 5.4.0-74.83+57 more5.4.0-234.254, 5.15.0-187.197, 6.8.0-136.136, 7.0.0-28.2896
OSV records
UBUNTU-CVE-2026-52989
Also known as
USN-8566-1, USN-8567-1, USN-8631-1, USN-8666-1

Charts affected

86 by stars
ChartLatestAffected imagesRadar Score
heliconehelicone0.1.421 of 14See more

helicone helicone 0.1.42

1 of the 14 container images this version deploys carry CVE-2026-52989.

Container imageDigestPackageFixed in
helicone/clickhouse-migration-runner:v2025.03.05-14c69b971a7e4
linux@5.4.0-200.220
5.4.0-234.254

Open the chart page →

72,363
countlyhelmforgeVerified publisher1.2.61 of 3See more

countly helmforge 1.2.6

1 of the 3 container images this version deploys carry CVE-2026-52989.

Container imageDigestPackageFixed in
countly/countly-server:25.05.4e3c238248f99
linux@5.4.0-189.209
5.4.0-234.254

Open the chart page →

69,307
httpbin2022httpbin2022Verified publisher0.1.11 of 1See more

httpbin2022 httpbin2022 0.1.1

1 of the 1 container images this version deploys carry CVE-2026-52989.

Container imageDigestPackageFixed in
mshanley80/httpbin2022:latest5b189a70c0fb
linux@5.4.0-135.152
5.4.0-234.254

Open the chart page →

71,556
ikigaiikigai-chartVerified publisher0.0.91 of 58See more

ikigai ikigai-chart 0.0.9

1 of the 58 container images this version deploys carry CVE-2026-52989.

Container imageDigestPackageFixed in
jupyterhub/k8s-hub:1.2.0e4770285aaf7
linux@5.4.0-89.100
5.4.0-234.254

Open the chart page →

108,761
gmaintelVerified publisher0.1.01 of 1See more

gma intel 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-52989.

Container imageDigestPackageFixed in
smartedge/generic-multi-access-network-virtualization:1.04cd63c22ce36
linux@5.4.0-131.147
5.4.0-234.254

Open the chart page →

71,556
itm-servicesintelVerified publisher2.0.01 of 8See more

itm-services intel 2.0.0

1 of the 8 container images this version deploys carry CVE-2026-52989.

Container imageDigestPackageFixed in
intel/dlstreamer-pipeline-server:2022.1.1-ubuntu20aa8f5483a2ef
linux@5.4.0-120.136
5.4.0-234.254

Open the chart page →

84,573
map5gintelVerified publisher1.0.01 of 1See more

map5g intel 1.0.0

1 of the 1 container images this version deploys carry CVE-2026-52989.

Container imageDigestPackageFixed in
smartedge/generic-multi-access-network-virtualization:1.04cd63c22ce36
linux@5.4.0-131.147
5.4.0-234.254

Open the chart page →

71,556
multimodal-data-visualizationintelVerified publisher3.0.01 of 2See more

multimodal-data-visualization intel 3.0.0

1 of the 2 container images this version deploys carry CVE-2026-52989.

Container imageDigestPackageFixed in
intel/multimodal-data-visualization-streaming:3.01a89327e499b
linux@5.4.0-122.138
5.4.0-234.254

Open the chart page →

77,320
valheim-serverk8s-chartsVerified publisher1.3.01 of 1See more

valheim-server k8s-charts 1.3.0

1 of the 1 container images this version deploys carry CVE-2026-52989.

Container imageDigestPackageFixed in
mbround18/valheim:3.1.070bd4da591cd
linux@5.15.0-133.144
5.15.0-187.197

Open the chart page →

57,344
k8s-dev-podk8s-dev-pod0.3.11 of 1See more

k8s-dev-pod k8s-dev-pod 0.3.1

1 of the 1 container images this version deploys carry CVE-2026-52989.

Container imageDigestPackageFixed in
ghcr.io/bryopsida/k8s-dev-pod:main82d0b161161d
linux@6.8.0-60.63
6.8.0-136.136

Open the chart page →

62,809
huekatool1.0.81 of 1See more

hue katool 1.0.8

1 of the 1 container images this version deploys carry CVE-2026-52989.

Container imageDigestPackageFixed in
gethue/hue:4.11.011b649636e68
linux@5.4.0-136.153
5.4.0-234.254

Open the chart page →

79,018
kubernetes-netskope-publisherkubernetes-netskope-publisherVerified publisher1.5.01 of 2See more

kubernetes-netskope-publisher kubernetes-netskope-publisher 1.5.0

1 of the 2 container images this version deploys carry CVE-2026-52989.

Container imageDigestPackageFixed in
netskopeprivateaccess/publisher_u22:latest93e2fd164a93
linux@5.15.0-186.196
5.15.0-187.197

Open the chart page →

35,292
pulsarkubesphere-stable2.7.131 of 3See more

pulsar kubesphere-stable 2.7.13

1 of the 3 container images this version deploys carry CVE-2026-52989.

Container imageDigestPackageFixed in
streamnative/apache-pulsar-grafana-dashboard-k8s:0.0.1611bceacec8fb
linux@5.4.0-77.86
5.4.0-234.254

Open the chart page →

86,937
kusionkusionstackVerified publisher0.14.11 of 3See more

kusion kusionstack 0.14.1

1 of the 3 container images this version deploys carry CVE-2026-52989.

Container imageDigestPackageFixed in
kusionstack/kusion:v0.14.0126c8f0b0976
linux@5.15.0-130.140
5.15.0-187.197

Open the chart page →

59,153
nublado2lsst-sqre0.8.51 of 2See more

nublado2 lsst-sqre 0.8.5

1 of the 2 container images this version deploys carry CVE-2026-52989.

Container imageDigestPackageFixed in
lsstsqre/nublado2:2.0.1b75bf8aaafa4
linux@5.4.0-100.113
5.4.0-234.254

Open the chart page →

86,968
MINTmint8.0.21 of 15See more

MINT mint 8.0.2

1 of the 15 container images this version deploys carry CVE-2026-52989.

Container imageDigestPackageFixed in
mintproject/graphql-engine:305c0dbeba1878eafe348f21fc300fbfc017d9dc83aade2c1855
linux@5.4.0-117.132
5.4.0-234.254

Open the chart page →

110,158
chirpstackmosquitto-helm-chart0.5.01 of 8See more

chirpstack mosquitto-helm-chart 0.5.0

1 of the 8 container images this version deploys carry CVE-2026-52989.

Container imageDigestPackageFixed in
apachepulsar/pulsar:2.9.0d056c89b7131
linux@5.4.0-90.101
5.4.0-234.254

Open the chart page →

96,742
danboorumy0nVerified publisher0.0.21 of 1See more

danbooru my0n 0.0.2

1 of the 1 container images this version deploys carry CVE-2026-52989.

Container imageDigestPackageFixed in
ghcr.io/danbooru/danbooru:9cab67c0ac72a8c52289302c519715ceec2372d95f545698e907
linux@5.15.0-46.49
5.15.0-187.197

Open the chart page →

97,407
danbooru-stackmy0nVerified publisher0.0.31 of 4See more

danbooru-stack my0n 0.0.3

1 of the 4 container images this version deploys carry CVE-2026-52989.

Container imageDigestPackageFixed in
ghcr.io/danbooru/danbooru:9cab67c0ac72a8c52289302c519715ceec2372d95f545698e907
linux@5.15.0-46.49
5.15.0-187.197

Open the chart page →

97,407
smilencsaVerified publisher1.1.01 of 23See more

smile ncsa 1.1.0

1 of the 23 container images this version deploys carry CVE-2026-52989.

Container imageDigestPackageFixed in
socialmediamacroscope/autophrase:0.1.570fb11d4f531
linux@5.4.0-163.180
5.4.0-234.254

Open the chart page →

265,360
seafilephybros-helm-charts4.0.11 of 1See more

seafile phybros-helm-charts 4.0.1

1 of the 1 container images this version deploys carry CVE-2026-52989.

Container imageDigestPackageFixed in
seafileltd/seafile-mc:9.0.97ac833196f60
linux@5.4.0-125.141
5.4.0-234.254

Open the chart page →

88,025
substreams-sink-kvpinaxVerified publisher0.0.41 of 1See more

substreams-sink-kv pinax 0.0.4

1 of the 1 container images this version deploys carry CVE-2026-52989.

Container imageDigestPackageFixed in
ghcr.io/streamingfast/substreams-sink-kv:v2.3.026953ec68d5d
linux@5.4.0-200.220
5.4.0-234.254

Open the chart page →

53,858
substreams-sink-nooppinaxVerified publisher0.0.31 of 1See more

substreams-sink-noop pinax 0.0.3

1 of the 1 container images this version deploys carry CVE-2026-52989.

Container imageDigestPackageFixed in
ghcr.io/streamingfast/substreams-sink-noop:v1.4.0d7c43c3135c6
linux@5.4.0-200.220
5.4.0-234.254

Open the chart page →

53,799
podnat-state-storepodnat-controller0.3.21 of 1See more

podnat-state-store podnat-controller 0.3.2

1 of the 1 container images this version deploys carry CVE-2026-52989.

Container imageDigestPackageFixed in
dgraziotin/nginx-webdav-nononsense:1.23.138f2de42bed0
linux@5.4.0-122.138
5.4.0-234.254

Open the chart page →

75,390
snipeitschmitzis6.1.01 of 2See more

snipeit schmitzis 6.1.0

1 of the 2 container images this version deploys carry CVE-2026-52989.

Container imageDigestPackageFixed in
snipe/snipe-it:v8.3.1141ebf2386fe
linux@6.8.0-79.79
6.8.0-136.136

Open the chart page →

58,090
photoprismschoolguys-helmcharts0.3.81 of 1See more

photoprism schoolguys-helmcharts 0.3.8

1 of the 1 container images this version deploys carry CVE-2026-52989.

Container imageDigestPackageFixed in
photoprism/photoprism:260601650c6ad5a651
linux@7.0.0-22.22
7.0.0-28.28

Open the chart page →

47,649
testing-multitoolsomeblackmagic0.1.21 of 1See more

testing-multitool someblackmagic 0.1.2

1 of the 1 container images this version deploys carry CVE-2026-52989.

Container imageDigestPackageFixed in
someblackmagic/k8s-testing-multitool:v0.1.06eca64b6b440
linux@5.4.0-117.132
5.4.0-234.254

Open the chart page →

97,304
ocean-network-clientspot1.1.61 of 1See more

ocean-network-client spot 1.1.6

1 of the 1 container images this version deploys carry CVE-2026-52989.

Container imageDigestPackageFixed in
public.ecr.aws/spotinst/spot-network-client:1.0.1486380a01587d
linux@6.8.0-100.100
6.8.0-136.136

Open the chart page →

46,567
sn-platform-slimstreamnative1.11.441 of 6See more

sn-platform-slim streamnative 1.11.44

1 of the 6 container images this version deploys carry CVE-2026-52989.

Container imageDigestPackageFixed in
streamnative/apache-pulsar-grafana-dashboard-k8s:0.1.20e6d7aa3ef32
linux@5.4.0-182.202
5.4.0-234.254

Open the chart page →

62,314
maxscalesvtech-public-helm-charts1.0.01 of 2See more

maxscale svtech-public-helm-charts 1.0.0

1 of the 2 container images this version deploys carry CVE-2026-52989.

Container imageDigestPackageFixed in
svtechnmaa/svtech_maxscale:v1.0.3410a25b51f9f
linux@5.15.0-92.102
5.15.0-187.197

Open the chart page →

71,130
rundecksvtech-public-helm-charts1.0.01 of 2See more

rundeck svtech-public-helm-charts 1.0.0

1 of the 2 container images this version deploys carry CVE-2026-52989.

Container imageDigestPackageFixed in
svtechnmaa/svtech_rundeck:v1.2.26e368ace0977
linux@5.4.0-176.196
5.4.0-234.254

Open the chart page →

71,563
tensor_apptensor-app0.2.21 of 3See more

tensor_app tensor-app 0.2.2

1 of the 3 container images this version deploys carry CVE-2026-52989.

Container imageDigestPackageFixed in
xeladock/mysql_dns:latest4baf531453f1
linux@5.15.0-25.25
5.15.0-187.197

Open the chart page →

105,025
tdarrvhdirkVerified publisher5.0.52 of 2See more

tdarr vhdirk 5.0.5

2 of the 2 container images this version deploys carry CVE-2026-52989.

Container imageDigestPackageFixed in
haveagitgat/tdarr_node:2.17.013ff0913202dd
linux@5.4.0-163.180
5.4.0-234.254
ghcr.io/haveagitgat/tdarr:2.00.18.23fbe4c29d14c
linux@5.4.0-110.124
5.4.0-234.254

Open the chart page →

150,073
unmanicvhdirkVerified publisher0.1.41 of 1See more

unmanic vhdirk 0.1.4

1 of the 1 container images this version deploys carry CVE-2026-52989.

Container imageDigestPackageFixed in
josh5/unmanic:0.2.64d49c4816260
linux@5.15.0-100.110
5.15.0-187.197

Open the chart page →

72,549
twenty-crmvictorlane0.0.11 of 3See more

twenty-crm victorlane 0.0.1

1 of the 3 container images this version deploys carry CVE-2026-52989.

Container imageDigestPackageFixed in
twentycrm/twenty-postgres-spilo:latest2f78405a78be
linux@5.15.0-134.145
5.15.0-187.197

Open the chart page →

64,741
kongwallarmVerified publisher4.6.31 of 7See more

kong wallarm 4.6.3

1 of the 7 container images this version deploys carry CVE-2026-52989.

Container imageDigestPackageFixed in
wallarm/kong:3.1.0-ubuntu-4.6.0ea9608c82e40
linux@5.4.0-144.161
5.4.0-234.254

Open the chart page →

70,298

Container images carrying it

96 by charts deploying them

A fixed version is listed for 1 of the 1 affected package.

Container imageDigestPackageFixed inUsed by
smartedge/generic-multi-access-network-virtualization:1.04cd63c22ce36
linux@5.4.0-131.147
5.4.0-234.254
2
streamnative/apache-pulsar-grafana-dashboard-k8s:0.1.20e6d7aa3ef32
linux@5.4.0-182.202
5.4.0-234.254
2
ghcr.io/bryopsida/k8s-dev-pod:main82d0b161161d
linux@6.8.0-60.63
6.8.0-136.136
2
ghcr.io/codingducksrl/laravel:8.15be52524664c
linux@5.15.0-52.58
5.15.0-187.197
2
ghcr.io/danbooru/danbooru:9cab67c0ac72a8c52289302c519715ceec2372d95f545698e907
linux@5.15.0-46.49
5.15.0-187.197
2
ghcr.io/games-on-whales/retroarch:1.0.0103fbcec2314
linux@5.4.0-81.91
5.4.0-234.254
2
aktosecurity/data-ingestion-service213aded7adc5
linux@6.8.0-94.96
6.8.0-136.136
1
apachepulsar/pulsar:2.9.0d056c89b7131
linux@5.4.0-90.101
5.4.0-234.254
1
apachepulsar/pulsar:2.8.2d538416d5afe
linux@5.4.0-91.102
5.4.0-234.254
1
assistiot/open_api_backend:1.1.230812ba93555
linux@5.15.0-91.101
5.15.0-187.197
1
assistiot/video_augmentation:runner-cpu-lateste5ae539ce2cb
linux@5.4.0-144.161
5.4.0-234.254
1
bicarus/elrond-rosetta:v1.3.50.0b1dab0721e1c
linux@5.4.0-136.153
5.4.0-234.254
1
browserless/chrome:1.48.0-chrome-stablec81ae5585b47
linux@5.4.0-81.91
5.4.0-234.254
1
chetangautamm/repo:sipp.v3e7f7049e1544
linux@5.4.0-65.73
5.4.0-234.254
1
countly/countly-server:25.05.4e3c238248f99
linux@5.4.0-189.209
5.4.0-234.254
1
datamate/seafile-professional:11.0.202dd66b722464
linux@5.15.0-153.163
5.15.0-187.197
1
dgraziotin/nginx-webdav-nononsense:1.23.138f2de42bed0
linux@5.4.0-122.138
5.4.0-234.254
1
dongjiang1989/lxcfs:v6.0.34bf9ae391948
linux@5.4.0-216.236
5.4.0-234.254
1
fiware/biz-ecosystem-charging-backend:11.7.029456835bb2c
linux@5.4.0-216.236
5.4.0-234.254
1
flyway/flyway:9.1545b5d7cdc75a
linux@5.4.0-144.161
5.4.0-234.254
1
geonode/geoserver:2.28.4-latest81b1d431b7e9
linux@5.15.0-181.191
5.15.0-187.197
1
gethue/hue:4.11.011b649636e68
linux@5.4.0-136.153
5.4.0-234.254
1
gethue/hue:latest7d5c1b9f8a79
linux@5.15.0-143.153
5.15.0-187.197
1
grpl/grapple-cli:0.2.127c00aafee6629
linux@6.8.0-39.39
6.8.0-136.136
1
haveagitgat/tdarr:2.00.181256348872ce
linux@5.4.0-109.123
5.4.0-234.254
1
haveagitgat/tdarr_node:2.17.013ff0913202dd
linux@5.4.0-163.180
5.4.0-234.254
1
helicone/clickhouse-migration-runner:v2025.03.05-14c69b971a7e4
linux@5.4.0-200.220
5.4.0-234.254
1
intel/dlstreamer-pipeline-server:2022.1.1-ubuntu20aa8f5483a2ef
linux@5.4.0-120.136
5.4.0-234.254
1
intel/multimodal-data-visualization-streaming:3.01a89327e499b
linux@5.4.0-122.138
5.4.0-234.254
1
ironmansoftware/universal:3.3.1-ubuntu-20.041943c73cce31
linux@5.4.0-125.141
5.4.0-234.254
1
jakowenko/double-take:1.6.0b858bac9e32a
linux@5.4.0-89.100
5.4.0-234.254
1
josh5/unmanic:0.2.64d49c4816260
linux@5.15.0-100.110
5.15.0-187.197
1
jupyterhub/k8s-hub:0.11.1b6b4a1a34bf0
linux@5.4.0-62.70
5.4.0-234.254
1
jupyterhub/k8s-hub:1.2.0e4770285aaf7
linux@5.4.0-89.100
5.4.0-234.254
1
kong/httpbin:latesta6ac46531193
linux@5.15.0-130.140
5.15.0-187.197
1
kusionstack/kusion:v0.14.0126c8f0b0976
linux@5.15.0-130.140
5.15.0-187.197
1
langgenius/dify-plugin-daemon:0.6.3-local3c694329357b
linux@6.8.0-124.124
6.8.0-136.136
1
langgenius/dify-plugin-daemon:0.5.1-local8269050f192e
linux@6.8.0-88.89
6.8.0-136.136
1
lsstsqre/nublado2:2.0.1b75bf8aaafa4
linux@5.4.0-100.113
5.4.0-234.254
1
mbround18/valheim:3.1.070bd4da591cd
linux@5.15.0-133.144
5.15.0-187.197
1
mediagis/nominatim:5.3.27923a8e67197
linux@6.8.0-124.124
6.8.0-136.136
1
milvusdb/milvus:v2.2.13a3a55e1c1497
linux@5.4.0-131.147
5.4.0-234.254
1
mintproject/graphql-engine:305c0dbeba1878eafe348f21fc300fbfc017d9dc83aade2c1855
linux@5.4.0-117.132
5.4.0-234.254
1
mlikiowa/napcat-docker:latest1336a777f9a4
linux@5.15.0-124.134
5.15.0-187.197
1
mshanley80/httpbin2022:latest5b189a70c0fb
linux@5.4.0-135.152
5.4.0-234.254
1
nethermind/nethermind:1.14.615517708c3b6
linux@5.15.0-53.59
5.15.0-187.197
1
netskopeprivateaccess/publisher_u22:latest93e2fd164a93
linux@5.15.0-186.196
5.15.0-187.197
1
openelevation/open-elevation:latest82fb21612e86
linux@5.4.0-80.90
5.4.0-234.254
1
photoprism/photoprism:260601650c6ad5a651
linux@7.0.0-22.22
7.0.0-28.28
1
photoprism/photoprism:251130db16ee6b1ba3
linux@6.17.0-7.7
no fix listed
1

syft 1.42.1 · advisories as of 18 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.