StackRadarChart IndexLive demo

CVE-2026-54570

Medium

Advisory

Published 17 Jul 2026In the index since 8 Sept 2026

Severity: Medium; worst across findings
CVSS: 6.9; base score, highest
EPSS: 0.002; 16th percentile
CISA KEV: Not listed; no confirmed exploitation
Charts affected: 13; of 17,781 indexed, latest versions
Container images: 13; deployed by those charts
Fix available: 1 of 1; affected package

AngleSharp HTML5 Spec Compliance: mXSS via annotation-xml HTML Integration Point Bypass

Carried by container images the latest versions of 13 of 17,781 indexed charts deploy, on 13 images.

Affected package	Affected versions	Fixed in	Images
AngleSharpnuget	0.14.0, 0.16.1, 1.0.1, 1.0.6+3 more	1.5.0	13

OSV records: GHSA-pgww-w46g-26qg

Charts affected

13 by stars

Chart

Latest

Affected images

Radar Score

servarrservarr

1 of 10 See more

servarr servarr 1.0.2

1 of the 10 container images this version deploys carry CVE-2026-54570.

Container image	Digest	Package	Fixed in
ghcr.io/onedr0p/prowlarr-develop :1.14.0.4286	c77d84ebf7a6	AngleSharp@1.0.6	1.5.0

Open the chart page →

14,238

prowlarrgeek-cookbook

1 of 1 See more

prowlarr geek-cookbook 4.5.2

1 of the 1 container images this version deploys carry CVE-2026-54570.

Container image	Digest	Package	Fixed in
ghcr.io/k8s-at-home/prowlarr :v0.3.0.1710	c863aa9875fa	AngleSharp@0.16.1	1.5.0

Open the chart page →

11,558

prowlarrpanzer1119

1 of 2 See more

prowlarr panzer1119 0.4.18

1 of the 2 container images this version deploys carry CVE-2026-54570.

Container image	Digest	Package	Fixed in
linuxserver/prowlarr :2.4.0.5397-ls149	a46d0ce0a823	AngleSharp@1.4.0	1.5.0

Open the chart page →

1,001

prowlarrbeluga-cloud

1 of 1 See more

prowlarr beluga-cloud 1.0.1

1 of the 1 container images this version deploys carry CVE-2026-54570.

Container image	Digest	Package	Fixed in
ghcr.io/beluga-cloud/prowlarr/prowlarr :1.4.1.3258	aa774b3c3425	AngleSharp@1.0.1	1.5.0

Open the chart page →

169

prowlarrbrandan-schmitz-helm-charts

1 of 1 See more

prowlarr brandan-schmitz-helm-charts 2.1.0

1 of the 1 container images this version deploys carry CVE-2026-54570.

Container image	Digest	Package	Fixed in
linuxserver/prowlarr :version-2.4.0.5397	4fd7a166c8f4	AngleSharp@1.4.0	1.5.0

Open the chart page →

413

jackettdefault-gh

1 of 1 See more

jackett default-gh 1.3.0

1 of the 1 container images this version deploys carry CVE-2026-54570.

Container image	Digest	Package	Fixed in
linuxserver/jackett :0.24.2092	9bca08e2e6f1	AngleSharp@1.4.0	1.5.0

Open the chart page →

497

archisteamfarmg0dscookie

1 of 2 See more

archisteamfarm g0dscookie 0.3.0

1 of the 2 container images this version deploys carry CVE-2026-54570.

Container image	Digest	Package	Fixed in
ghcr.io/justarchinet/archisteamfarm :5.2.5.4	c7c0a52303cb	AngleSharp@0.14.0	1.5.0

Open the chart page →

966

jackettgeek-cookbook

1 of 1 See more

jackett geek-cookbook 11.7.2

1 of the 1 container images this version deploys carry CVE-2026-54570.

Container image	Digest	Package	Fixed in
ghcr.io/k8s-at-home/jackett :v0.20.1316	3a4715b46aa2	AngleSharp@0.16.1	1.5.0

Open the chart page →

9,698

prowlarrk8s-home-lab-repo

1 of 1 See more

prowlarr k8s-home-lab-repo 5.4.0

1 of the 1 container images this version deploys carry CVE-2026-54570.

Container image	Digest	Package	Fixed in
ghcr.io/home-operations/prowlarr :2.4.0	b7da6e9defbe	AngleSharp@1.4.0	1.5.0

Open the chart page →

685

1 of 1 See more

jackett lib42 1.1.0

1 of the 1 container images this version deploys carry CVE-2026-54570.

Container image	Digest	Package	Fixed in
lib42/jackett :latest	a55596cda383	AngleSharp@1.0.1	1.5.0

Open the chart page →

4,620

jackettrubxkube

1 of 1 See more

jackett rubxkube 1.4.1

1 of the 1 container images this version deploys carry CVE-2026-54570.

Container image	Digest	Package	Fixed in
linuxserver/jackett :0.24.2066	f1f23e0c9845	AngleSharp@1.4.0	1.5.0

Open the chart page →

497

nadekobotryuunosukeds3

1 of 2 See more

nadekobot ryuunosukeds3 0.1.2

1 of the 2 container images this version deploys carry CVE-2026-54570.

Container image	Digest	Package	Fixed in
ryuunosukeds3/nadeko-bot-docker :latest	c0398f13e8a9	AngleSharp@1.1.2	1.5.0

Open the chart page →

8,619

prowlarrsudo-kraken-prowlarr

1 of 1 See more

prowlarr sudo-kraken-prowlarr 3.2.1

1 of the 1 container images this version deploys carry CVE-2026-54570.

Container image	Digest	Package	Fixed in
ghcr.io/home-operations/prowlarr :2.3.0	1a8a4b11972b	AngleSharp@1.3.0	1.5.0

Open the chart page →

876

Container images carrying it

13 by charts deploying them

A fixed version is listed for 1 of the 1 affected package.

Container image	Digest	Package	Fixed in	Used by
lib42/jackett :latest	a55596cda383	AngleSharp@1.0.1	1.5.0	1
linuxserver/jackett :0.24.2092	9bca08e2e6f1	AngleSharp@1.4.0	1.5.0	1
linuxserver/jackett :0.24.2066	f1f23e0c9845	AngleSharp@1.4.0	1.5.0	1
linuxserver/prowlarr :version-2.4.0.5397	4fd7a166c8f4	AngleSharp@1.4.0	1.5.0	1
linuxserver/prowlarr :2.4.0.5397-ls149	a46d0ce0a823	AngleSharp@1.4.0	1.5.0	1
ryuunosukeds3/nadeko-bot-docker :latest	c0398f13e8a9	AngleSharp@1.1.2	1.5.0	1
ghcr.io/beluga-cloud/prowlarr/prowlarr :1.4.1.3258	aa774b3c3425	AngleSharp@1.0.1	1.5.0	1
ghcr.io/home-operations/prowlarr :2.3.0	1a8a4b11972b	AngleSharp@1.3.0	1.5.0	1
ghcr.io/home-operations/prowlarr :2.4.0	b7da6e9defbe	AngleSharp@1.4.0	1.5.0	1
ghcr.io/justarchinet/archisteamfarm :5.2.5.4	c7c0a52303cb	AngleSharp@0.14.0	1.5.0	1
ghcr.io/k8s-at-home/jackett :v0.20.1316	3a4715b46aa2	AngleSharp@0.16.1	1.5.0	1
ghcr.io/k8s-at-home/prowlarr :v0.3.0.1710	c863aa9875fa	AngleSharp@0.16.1	1.5.0	1
ghcr.io/onedr0p/prowlarr-develop :1.14.0.4286	c77d84ebf7a6	AngleSharp@1.0.6	1.5.0	1