StackRadar

CVE-2026-54876

High

Advisory

Published 5 Aug 2026In the index since 6 Sept 2026
Severity
High
worst across findings
CVSS
7.5
base score, highest
EPSS
0.003
18th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
33
of 17,781 indexed, latest versions
Container images
39
deployed by those charts
Fix available
1 of 2
affected packages

The matching OSV records carry no description.

Carried by container images the latest versions of 33 of 17,781 indexed charts deploy, on 39 images.

Affected packageAffected versionsFixed inImages
opensslapk3.2.0-r0, 3.3.1-r4, 3.3.2-r0, 3.3.2-r2+11 more3.6.3-r428
nodejsdeb4.2.6~dfsg-1ubuntu4.1, 7.10.1-2nodesource1~xenial1, 8.9.4-1nodesource1, 8.10.0~dfsg-2ubuntu0.4+3 moreno fix listed11
OSV records
CGA-6vrx-5w7p-6phjCGA-grqg-gfcr-5crgUBUNTU-CVE-2026-54876
Also known as
CGA-84m7-gr58-qpr9, CGA-8jjq-8272-f698, CGA-hj4r-gx8v-pjh5, CGA-ww7q-7x3h-9x2q

Charts affected

33 by stars
ChartLatestAffected imagesRadar Score
falcofalcosecurity9.1.01 of 3See more

falco falcosecurity 9.1.0

1 of the 3 container images this version deploys carry CVE-2026-54876.

Container imageDigestPackageFixed in
falcosecurity/falco:0.44.1d0cfe422d6ac
openssl@3.6.3-r0
3.6.3-r4

Open the chart page →

5,227
concourseconcourseVerified publisher20.3.01 of 2See more

concourse concourse 20.3.0

1 of the 2 container images this version deploys carry CVE-2026-54876.

Container imageDigestPackageFixed in
concourse/concourse:8.3.040a143ce5873
openssl@3.6.3-r3
3.6.3-r4

Open the chart page →

2,022
gocdgocdOfficialVerified publisher2.18.12 of 2See more

gocd gocd 2.18.1

2 of the 2 container images this version deploys carry CVE-2026-54876.

Container imageDigestPackageFixed in
gocd/gocd-agent-wolfi:v26.1.0753b9f696f45
openssl@3.6.3-r3
3.6.3-r4
gocd/gocd-server:v26.1.0720d1012b93f
openssl@3.6.3-r3
3.6.3-r4

Open the chart page →

1,362
syftopenmined0.9.52 of 6See more

syft openmined 0.9.5

2 of the 6 container images this version deploys carry CVE-2026-54876.

Container imageDigestPackageFixed in
openmined/syft-backend:0.9.5b72f74a68b32
openssl@3.4.1-r0
3.6.3-r4
openmined/syft-frontend:0.9.5d11524a3854a
openssl@3.4.1-r0
3.6.3-r4

Open the chart page →

17,245
calibregeek-cookbookVerified publisher5.4.21 of 1See more

calibre geek-cookbook 5.4.2

1 of the 1 container images this version deploys carry CVE-2026-54876.

Container imageDigestPackageFixed in
linuxserver/calibre:version-v5.21.0a847b5b2d860
nodejs@14.17.0-1nodesource1
no fix listed

Open the chart page →

22,773
ipfix-generatorjfwenischVerified publisher0.3.16-feature-helm-package.01 of 1See more

ipfix-generator jfwenisch 0.3.16-feature-helm-package.0

1 of the 1 container images this version deploys carry CVE-2026-54876.

Container imageDigestPackageFixed in
ghcr.io/jfwenisch/ipfix-generator:latesta1b05567dbf6
openssl@3.6.2-r5
3.6.3-r4

Open the chart page →

697
litellmlitellm-helm0.2.01 of 1See more

litellm litellm-helm 0.2.0

1 of the 1 container images this version deploys carry CVE-2026-54876.

Container imageDigestPackageFixed in
ghcr.io/berriai/litellm-database:litellm_stable_release_branch-v1.75.5-stableab63d26a8a2c
openssl@3.5.2-r0
3.6.3-r4

Open the chart page →

4,292
privacyideaprivacyidea1.0.61 of 2See more

privacyidea privacyidea 1.0.6

1 of the 2 container images this version deploys carry CVE-2026-54876.

Container imageDigestPackageFixed in
gpappsoft/privacyidea-docker:3.12.2af7841adad26
openssl@3.6.0-r4
3.6.3-r4

Open the chart page →

5,440
huebigdata-chartsVerified publisher1.0.41 of 2See more

hue bigdata-charts 1.0.4

1 of the 2 container images this version deploys carry CVE-2026-54876.

Container imageDigestPackageFixed in
gethue/hue:4.10.05702b2c37ff9
nodejs@14.17.0-1nodesource1
no fix listed

Open the chart page →

22,891
otbrcharts-derwitt-devVerified publisher0.2.01 of 1See more

otbr charts-derwitt-dev 0.2.0

1 of the 1 container images this version deploys carry CVE-2026-54876.

Container imageDigestPackageFixed in
openthread/otbr:latestf307f59f6432
nodejs@8.10.0~dfsg-2ubuntu0.4
no fix listed

Open the chart page →

12,779
ethereumcloudnativeapp1.0.01 of 3See more

ethereum cloudnativeapp 1.0.0

1 of the 3 container images this version deploys carry CVE-2026-54876.

Container imageDigestPackageFixed in
ethereumex/eth-stats-dashboard:v0.0.1a7603aa8df4c
nodejs@4.2.6~dfsg-1ubuntu4.1
no fix listed

Open the chart page →

27,417
webpagetest-agentcloudnativeapp0.2.01 of 1See more

webpagetest-agent cloudnativeapp 0.2.0

1 of the 1 container images this version deploys carry CVE-2026-54876.

Container imageDigestPackageFixed in
timothyclarke/wptagent:2018-01-2322c41e5ca7e2
nodejs@7.10.1-2nodesource1~xenial1
no fix listed

Open the chart page →

77,758
crabka-operatorcrabka0.4.01 of 1See more

crabka-operator crabka 0.4.0

1 of the 1 container images this version deploys carry CVE-2026-54876.

Container imageDigestPackageFixed in
ghcr.io/robot-head/crabka-operator:0.4.07a79c146bfa7
openssl@3.6.3-r3
3.6.3-r4

Open the chart page →

33
dapr-agentsdapr-agents-devVerified publisher0.1.51 of 31See more

dapr-agents dapr-agents-dev 0.1.5

1 of the 31 container images this version deploys carry CVE-2026-54876.

Container imageDigestPackageFixed in
ghcr.io/kagent-dev/doc2vec/mcp:1.1.14ace1de323f4a
openssl@3.6.0-r4
3.6.3-r4

Open the chart page →

22,193
deployhubdeployhubVerified publisher10.0.4154 of 11See more

deployhub deployhub 10.0.415

4 of the 11 container images this version deploys carry CVE-2026-54876.

Container imageDigestPackageFixed in
quay.io/ortelius/ms-compitem-crud:main-v10.0.1566-gf3f81597b7f49eec76
openssl@3.6.0-r6
3.6.3-r4
quay.io/ortelius/ms-dep-pkg-r:main-v10.0.1705-g21b3dc8a4150e94a45
openssl@3.6.0-r6
3.6.3-r4
quay.io/ortelius/ms-textfile-crud:main-v10.0.1635-g5076aaf5c4c8adfc82
openssl@3.6.0-r6
3.6.3-r4
quay.io/ortelius/ms-validate-user:main-v10.0.1694-g98ed94b5054bd4e97a
openssl@3.6.0-r6
3.6.3-r4

Open the chart page →

11,160
adventurelogdjjudas21Verified publisher0.1.11 of 3See more

adventurelog djjudas21 0.1.1

1 of the 3 container images this version deploys carry CVE-2026-54876.

Container imageDigestPackageFixed in
ghcr.io/seanmorley15/adventurelog-frontend:v0.13.051ee22428b41
openssl@3.6.3-r1
3.6.3-r4

Open the chart page →

7,459
7dtdhelm-7dtd0.1.01 of 1See more

7dtd helm-7dtd 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-54876.

Container imageDigestPackageFixed in
vinanrra/7dtd-server:v0.4.4f9534490bd2b
nodejs@16.19.1-deb-1nodesource1
no fix listed

Open the chart page →

10,627
twampyhelm-charts-darox0.0.21 of 1See more

twampy helm-charts-darox 0.0.2

1 of the 1 container images this version deploys carry CVE-2026-54876.

Container imageDigestPackageFixed in
dariomader/twampy:v0.0.2d2f4a8c5e690
openssl@3.2.0-r0
3.6.3-r4

Open the chart page →

2,057
ibm-microclimateibm-charts0.1.01 of 8See more

ibm-microclimate ibm-charts 0.1.0

1 of the 8 container images this version deploys carry CVE-2026-54876.

Container imageDigestPackageFixed in
ibmcom/microclimate-theia:lateste17bdccc5030
nodejs@4.2.6~dfsg-1ubuntu4.1
no fix listed

Open the chart page →

57,669
proxerajfwenischVerified publisher0.12.201 of 1See more

proxera jfwenisch 0.12.20

1 of the 1 container images this version deploys carry CVE-2026-54876.

Container imageDigestPackageFixed in
ghcr.io/wenisch-tech/proxera:0.12.205ac0e9f6b42f
openssl@3.6.3-r3
3.6.3-r4

Open the chart page →

185
karbkarbVerified publisher1.0.31 of 1See more

karb karb 1.0.3

1 of the 1 container images this version deploys carry CVE-2026-54876.

Container imageDigestPackageFixed in
ghcr.io/xeor/karb:main647a3c938d31
openssl@3.6.3-r1
3.6.3-r4

Open the chart page →

625
karb-chartkarbVerified publisher1.0.61 of 1See more

karb-chart karb 1.0.6

1 of the 1 container images this version deploys carry CVE-2026-54876.

Container imageDigestPackageFixed in
ghcr.io/xeor/karb:1.0.6647a3c938d31
openssl@3.6.3-r1
3.6.3-r4

Open the chart page →

625
example-dev-toolsnoygal0.2.81 of 3See more

example-dev-tools noygal 0.2.8

1 of the 3 container images this version deploys carry CVE-2026-54876.

Container imageDigestPackageFixed in
linuxserver/codimd:latestb801bbcf6386
nodejs@10.23.0-1nodesource1
no fix listed

Open the chart page →

27,465
comacopencord1.0.01 of 9See more

comac opencord 1.0.0

1 of the 9 container images this version deploys carry CVE-2026-54876.

Container imageDigestPackageFixed in
omecproject/onos-progran:1.0.05715e5648aa0
nodejs@8.9.4-1nodesource1
no fix listed

Open the chart page →

88,546
onos-progranopencord1.2.71 of 2See more

onos-progran opencord 1.2.7

1 of the 2 container images this version deploys carry CVE-2026-54876.

Container imageDigestPackageFixed in
muluder/prograncontrollermcord:0.1.843b597a93da7
nodejs@8.9.4-1nodesource1
no fix listed

Open the chart page →

38,865
openwhiskopenwhisk1.0.01 of 10See more

openwhisk openwhisk 1.0.0

1 of the 10 container images this version deploys carry CVE-2026-54876.

Container imageDigestPackageFixed in
openwhisk/ow-utils:1.0.0c80dba0de3aa
nodejs@8.10.0~dfsg-2ubuntu0.4
no fix listed

Open the chart page →

36,215
opslevelopslevelVerified publisher2025.1.221 of 10See more

opslevel opslevel 2025.1.22

1 of the 10 container images this version deploys carry CVE-2026-54876.

Container imageDigestPackageFixed in
replicated/replicated-sdk:1.0.0-beta.318751b4963250
openssl@3.3.2-r2
3.6.3-r4

Open the chart page →

5,554
kubecostradar-baseVerified publisher1.0.02 of 7See more

kubecost radar-base 1.0.0

2 of the 7 container images this version deploys carry CVE-2026-54876.

Container imageDigestPackageFixed in
gcr.io/kubecost1/frontend:prod-2.6.3a535f7de024b
openssl@3.4.1-r0
3.6.3-r4
gcr.io/kubecost1/kubecost-network-costs:v0.17.6ab6a54c53fd8
openssl@3.3.2-r0
3.6.3-r4

Open the chart page →

9,355
kubewatchrobusta3.5.01 of 1See more

kubewatch robusta 3.5.0

1 of the 1 container images this version deploys carry CVE-2026-54876.

Container imageDigestPackageFixed in
robustadev/kubewatch:v2.9.00457a51e36e8
openssl@3.3.2-r0
3.6.3-r4

Open the chart page →

1,766
showroom-docs-mcpshowroom-docs-mcpVerified publisher2.1.01 of 4See more

showroom-docs-mcp showroom-docs-mcp 2.1.0

1 of the 4 container images this version deploys carry CVE-2026-54876.

Container imageDigestPackageFixed in
litellm/litellm-non_root:v1.82.3-stable09b217802ded
openssl@3.6.1-r3
3.6.3-r4

Open the chart page →

5,201
cost-analyzersoftonic2.5.51 of 6See more

cost-analyzer softonic 2.5.5

1 of the 6 container images this version deploys carry CVE-2026-54876.

Container imageDigestPackageFixed in
gcr.io/kubecost1/frontend:prod-2.5.5991c1465c658
openssl@3.4.1-r2
3.6.3-r4

Open the chart page →

7,901
tarkatarkaOfficialVerified publisher0.4.12 of 4See more

tarka tarka 0.4.1

2 of the 4 container images this version deploys carry CVE-2026-54876.

Container imageDigestPackageFixed in
ghcr.io/tarkyaio/tarka:0.4.1e8d3f1512f06
openssl@3.6.2-r2
3.6.3-r4
ghcr.io/tarkyaio/tarka-ui:0.4.1b2dfabe13cfe
openssl@3.6.2-r2
3.6.3-r4

Open the chart page →

1,556
giropops-senhas-prdtechpreta0.1.01 of 2See more

giropops-senhas-prd techpreta 0.1.0

1 of the 2 container images this version deploys carry CVE-2026-54876.

Container imageDigestPackageFixed in
nataliagranato/redis:v1.0.052bd9b79a8f2
openssl@3.3.1-r4
3.6.3-r4

Open the chart page →

913

Container images carrying it

39 by charts deploying them

A fixed version is listed for 1 of the 2 affected packages.

Container imageDigestPackageFixed inUsed by
ghcr.io/xeor/karb:1.0.6:main647a3c938d31
openssl@3.6.3-r1
3.6.3-r4
2
concourse/concourse:8.3.040a143ce5873
openssl@3.6.3-r3
3.6.3-r4
1
dariomader/twampy:v0.0.2d2f4a8c5e690
openssl@3.2.0-r0
3.6.3-r4
1
ethereumex/eth-stats-dashboard:v0.0.1a7603aa8df4c
nodejs@4.2.6~dfsg-1ubuntu4.1
no fix listed
1
falcosecurity/falco:0.44.1d0cfe422d6ac
openssl@3.6.3-r0
3.6.3-r4
1
gethue/hue:4.10.05702b2c37ff9
nodejs@14.17.0-1nodesource1
no fix listed
1
gocd/gocd-agent-wolfi:v26.1.0753b9f696f45
openssl@3.6.3-r3
3.6.3-r4
1
gocd/gocd-server:v26.1.0720d1012b93f
openssl@3.6.3-r3
3.6.3-r4
1
gpappsoft/privacyidea-docker:3.12.2af7841adad26
openssl@3.6.0-r4
3.6.3-r4
1
ibmcom/microclimate-theia:lateste17bdccc5030
nodejs@4.2.6~dfsg-1ubuntu4.1
no fix listed
1
linuxserver/calibre:version-v5.21.0a847b5b2d860
nodejs@14.17.0-1nodesource1
no fix listed
1
linuxserver/codimd:latestb801bbcf6386
nodejs@10.23.0-1nodesource1
no fix listed
1
litellm/litellm-non_root:v1.82.3-stable09b217802ded
openssl@3.6.1-r3
3.6.3-r4
1
muluder/prograncontrollermcord:0.1.843b597a93da7
nodejs@8.9.4-1nodesource1
no fix listed
1
nataliagranato/redis:v1.0.052bd9b79a8f2
openssl@3.3.1-r4
3.6.3-r4
1
omecproject/onos-progran:1.0.05715e5648aa0
nodejs@8.9.4-1nodesource1
no fix listed
1
openmined/syft-backend:0.9.5b72f74a68b32
openssl@3.4.1-r0
3.6.3-r4
1
openmined/syft-frontend:0.9.5d11524a3854a
openssl@3.4.1-r0
3.6.3-r4
1
openthread/otbr:latestf307f59f6432
nodejs@8.10.0~dfsg-2ubuntu0.4
no fix listed
1
openwhisk/ow-utils:1.0.0c80dba0de3aa
nodejs@8.10.0~dfsg-2ubuntu0.4
no fix listed
1
replicated/replicated-sdk:1.0.0-beta.318751b4963250
openssl@3.3.2-r2
3.6.3-r4
1
robustadev/kubewatch:v2.9.00457a51e36e8
openssl@3.3.2-r0
3.6.3-r4
1
timothyclarke/wptagent:2018-01-2322c41e5ca7e2
nodejs@7.10.1-2nodesource1~xenial1
no fix listed
1
vinanrra/7dtd-server:v0.4.4f9534490bd2b
nodejs@16.19.1-deb-1nodesource1
no fix listed
1
gcr.io/kubecost1/frontend:prod-2.5.5991c1465c658
openssl@3.4.1-r2
3.6.3-r4
1
gcr.io/kubecost1/frontend:prod-2.6.3a535f7de024b
openssl@3.4.1-r0
3.6.3-r4
1
gcr.io/kubecost1/kubecost-network-costs:v0.17.6ab6a54c53fd8
openssl@3.3.2-r0
3.6.3-r4
1
ghcr.io/berriai/litellm-database:litellm_stable_release_branch-v1.75.5-stableab63d26a8a2c
openssl@3.5.2-r0
3.6.3-r4
1
ghcr.io/jfwenisch/ipfix-generator:latesta1b05567dbf6
openssl@3.6.2-r5
3.6.3-r4
1
ghcr.io/kagent-dev/doc2vec/mcp:1.1.14ace1de323f4a
openssl@3.6.0-r4
3.6.3-r4
1
ghcr.io/robot-head/crabka-operator:0.4.07a79c146bfa7
openssl@3.6.3-r3
3.6.3-r4
1
ghcr.io/seanmorley15/adventurelog-frontend:v0.13.051ee22428b41
openssl@3.6.3-r1
3.6.3-r4
1
ghcr.io/tarkyaio/tarka:0.4.1e8d3f1512f06
openssl@3.6.2-r2
3.6.3-r4
1
ghcr.io/tarkyaio/tarka-ui:0.4.1b2dfabe13cfe
openssl@3.6.2-r2
3.6.3-r4
1
ghcr.io/wenisch-tech/proxera:0.12.205ac0e9f6b42f
openssl@3.6.3-r3
3.6.3-r4
1
quay.io/ortelius/ms-compitem-crud:main-v10.0.1566-gf3f81597b7f49eec76
openssl@3.6.0-r6
3.6.3-r4
1
quay.io/ortelius/ms-dep-pkg-r:main-v10.0.1705-g21b3dc8a4150e94a45
openssl@3.6.0-r6
3.6.3-r4
1
quay.io/ortelius/ms-textfile-crud:main-v10.0.1635-g5076aaf5c4c8adfc82
openssl@3.6.0-r6
3.6.3-r4
1
quay.io/ortelius/ms-validate-user:main-v10.0.1694-g98ed94b5054bd4e97a
openssl@3.6.0-r6
3.6.3-r4
1

syft 1.42.1 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.