StackRadar

CVE-2026-55200

High

Advisory

Published 17 Jun 2026In the index since 5 Sept 2026
Severity
High
worst across findings
CVSS
8.3
base score, highest
EPSS
0.040
90th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
121
of 17,781 indexed, latest versions
Container images
105
deployed by those charts
Fix available
2 of 2
affected packages

The matching OSV records carry no description.

Carried by container images the latest versions of 121 of 17,781 indexed charts deploy, on 105 images.

Affected packageAffected versionsFixed inImages
libssh2deb1.11.1-1, 1.11.1-1+e1, 1.11.1-1build1, 1.11.1-1build2+1 more1.11.1-1+deb13u1, 1.11.1-1+e4, 1.11.1-1ubuntu0.25.10.2, 1.11.1-1ubuntu0.26.04.296
libssh2apk1.11.1-r0, 1.11.1-r11.11.1-r2, 1.11.1-r39
OSV records
ALPINE-CVE-2026-55200DEBIAN-CVE-2026-55200UBUNTU-CVE-2026-55200ECHO-81b6-9726-71c6
Also known as
USN-8486-1

Charts affected

121 by stars
ChartLatestAffected imagesRadar Score
k8s-oidc-discovery-providerpnnl-miscscripts0.1.22 of 2See more

k8s-oidc-discovery-provider pnnl-miscscripts 0.1.2

2 of the 2 container images this version deploys carry CVE-2026-55200.

Container imageDigestPackageFixed in
curlimages/curl:8.17.0935d9100e9ba
libssh2@1.11.1-r0
1.11.1-r2
library/nginx:1.29.49dd288848f44
libssh2@1.11.1-1
1.11.1-1+deb13u1

Open the chart page →

4,260
management-portalradar-baseVerified publisher1.7.01 of 1See more

management-portal radar-base 1.7.0

1 of the 1 container images this version deploys carry CVE-2026-55200.

Container imageDigestPackageFixed in
ghcr.io/radar-base/managementportal/management-portal:3.0.0c1b37e821f72
libssh2@1.11.1-1build2
1.11.1-1ubuntu0.26.04.2

Open the chart page →

3,182
radar-hydraradar-baseVerified publisher0.3.41 of 2See more

radar-hydra radar-base 0.3.4

1 of the 2 container images this version deploys carry CVE-2026-55200.

Container imageDigestPackageFixed in
curlimages/curl:8.15.04026b29997dc
libssh2@1.11.1-r0
1.11.1-r2

Open the chart page →

2,177
vsl-rpcrss30.3.41 of 4See more

vsl-rpc rss3 0.3.4

1 of the 4 container images this version deploys carry CVE-2026-55200.

Container imageDigestPackageFixed in
quay.io/curl/curl:8.16.0b17b13321678
libssh2@1.11.1-r0
1.11.1-r2

Open the chart page →

4,610
vsl-sequencerrss30.3.41 of 4See more

vsl-sequencer rss3 0.3.4

1 of the 4 container images this version deploys carry CVE-2026-55200.

Container imageDigestPackageFixed in
quay.io/curl/curl:8.16.0b17b13321678
libssh2@1.11.1-r0
1.11.1-r2

Open the chart page →

4,610
paperless-ngxrtomik-helm-chartsVerified publisher0.0.51 of 1See more

paperless-ngx rtomik-helm-charts 0.0.5

1 of the 1 container images this version deploys carry CVE-2026-55200.

Container imageDigestPackageFixed in
ghcr.io/paperless-ngx/paperless-ngx:2.20.357ad9565bff3
libssh2@1.11.1-1
1.11.1-1+deb13u1

Open the chart page →

10,605
jellyfinrubxkubeVerified publisher1.3.11 of 1See more

jellyfin rubxkube 1.3.1

1 of the 1 container images this version deploys carry CVE-2026-55200.

Container imageDigestPackageFixed in
jellyfin/jellyfin:10.11.11aefb67e6a7ff
libssh2@1.11.1-1
1.11.1-1+deb13u1

Open the chart page →

2,604
transmissionryuunosukeds31.6.21 of 2See more

transmission ryuunosukeds3 1.6.2

1 of the 2 container images this version deploys carry CVE-2026-55200.

Container imageDigestPackageFixed in
library/python:3.9da5aee29682d
libssh2@1.11.1-1
1.11.1-1+deb13u1

Open the chart page →

9,534
nextcloudsb-helm-charts0.4.01 of 2See more

nextcloud sb-helm-charts 0.4.0

1 of the 2 container images this version deploys carry CVE-2026-55200.

Container imageDigestPackageFixed in
library/nextcloud:31.0.10-apacheb7faa1653c39
libssh2@1.11.1-1
1.11.1-1+deb13u1

Open the chart page →

9,755
factorioschichtelVerified publisher0.1.11 of 1See more

factorio schichtel 0.1.1

1 of the 1 container images this version deploys carry CVE-2026-55200.

Container imageDigestPackageFixed in
factoriotools/factorio:2.0.67-rootlessf7909f7361d6
libssh2@1.11.1-1
1.11.1-1+deb13u1

Open the chart page →

2,971
s3-backupschichtelVerified publisher0.10.01 of 1See more

s3-backup schichtel 0.10.0

1 of the 1 container images this version deploys carry CVE-2026-55200.

Container imageDigestPackageFixed in
ghcr.io/pschichtel/s3-backup:0.7.017666811f6a7
libssh2@1.11.1-1
1.11.1-1+deb13u1

Open the chart page →

2,343
wordpressschichtelVerified publisher0.10.102 of 2See more

wordpress schichtel 0.10.10

2 of the 2 container images this version deploys carry CVE-2026-55200.

Container imageDigestPackageFixed in
library/wordpress:6.9.4-fpmad4a8bae2eb4
libssh2@1.11.1-1
1.11.1-1+deb13u1
nginxinc/nginx-unprivileged:1.29.5c5b989ebc150
libssh2@1.11.1-1
1.11.1-1+deb13u1

Open the chart page →

8,184
jellyfinschoolguys-helmcharts0.4.21 of 1See more

jellyfin schoolguys-helmcharts 0.4.2

1 of the 1 container images this version deploys carry CVE-2026-55200.

Container imageDigestPackageFixed in
jellyfin/jellyfin:10.11.81694ff069f0c
libssh2@1.11.1-1
1.11.1-1+deb13u1

Open the chart page →

3,001
photoprismschoolguys-helmcharts0.3.81 of 1See more

photoprism schoolguys-helmcharts 0.3.8

1 of the 1 container images this version deploys carry CVE-2026-55200.

Container imageDigestPackageFixed in
photoprism/photoprism:260601650c6ad5a651
libssh2@1.11.1-1ubuntu0.26.04.1
1.11.1-1ubuntu0.26.04.2

Open the chart page →

10,348
ctlogsigstoreVerified publisher0.2.681 of 4See more

ctlog sigstore 0.2.68

1 of the 4 container images this version deploys carry CVE-2026-55200.

Container imageDigestPackageFixed in
curlimages/curl:8.17.0935d9100e9ba
libssh2@1.11.1-r0
1.11.1-r2

Open the chart page →

2,728
slothsloth0.16.01 of 2See more

sloth sloth 0.16.0

1 of the 2 container images this version deploys carry CVE-2026-55200.

Container imageDigestPackageFixed in
registry.k8s.io/git-sync/git-sync:v4.5.00e64aedb0d0a
libssh2@1.11.1-1
1.11.1-1+deb13u1

Open the chart page →

3,962
bootzookasoftwaremillVerified publisher0.2.11 of 2See more

bootzooka softwaremill 0.2.1

1 of the 2 container images this version deploys carry CVE-2026-55200.

Container imageDigestPackageFixed in
softwaremill/bootzooka:latest845b5e8f8056
libssh2@1.11.1-1build2
1.11.1-1ubuntu0.26.04.2

Open the chart page →

3,003
squadsquadVerified publisher0.1.111 of 1See more

squad squad 0.1.11

1 of the 1 container images this version deploys carry CVE-2026-55200.

Container imageDigestPackageFixed in
cm2network/squad:latest8cba47f53df5
libssh2@1.11.1-1
1.11.1-1+deb13u1

Open the chart page →

2,487
jellyfinsudo-kraken-jellyfinVerified publisher2.1.31 of 1See more

jellyfin sudo-kraken-jellyfin 2.1.3

1 of the 1 container images this version deploys carry CVE-2026-55200.

Container imageDigestPackageFixed in
jellyfin/jellyfin:10.11.6333b64771663
libssh2@1.11.1-1
1.11.1-1+deb13u1

Open the chart page →

3,389
app-startersynkubeVerified publisher1.4.11 of 1See more

app-starter synkube 1.4.1

1 of the 1 container images this version deploys carry CVE-2026-55200.

Container imageDigestPackageFixed in
library/nginx:latest6e23479198b9
libssh2@1.11.1-1
1.11.1-1+deb13u1

Open the chart page →

3,240
wallarm-gatewaywallarmVerified publisher0.4.01 of 1See more

wallarm-gateway wallarm 0.4.0

1 of the 1 container images this version deploys carry CVE-2026-55200.

Container imageDigestPackageFixed in
wallarm/gateway-controller:0.4.09c6ed23e2f0e
libssh2@1.11.1-1
1.11.1-1+deb13u1

Open the chart page →

2,018

Container images carrying it

105 by charts deploying them

A fixed version is listed for 2 of the 2 affected packages.

Container imageDigestPackageFixed inUsed by
library/wordpress:php8.1-apachef73396626d2f
libssh2@1.11.1-1
1.11.1-1+deb13u1
1
mawad98/backstage-pyactions:demo99422c56a274
libssh2@1.11.1-1
1.11.1-1+deb13u1
1
mindsdb/mindsdb:latest163011c09299
libssh2@1.11.1-1
1.11.1-1+deb13u1
1
moreillon/group-manager-front:latest5f0a38498271
libssh2@1.11.1-1
1.11.1-1+deb13u1
1
networktocode/nautobot:3.0-py3.13ed484336b1ad
libssh2@1.11.1-1
1.11.1-1+deb13u1
1
newrelic/newrelic-agent-control-cli:0.48.01a448492b55a
libssh2@1.11.1-1
1.11.1-1+deb13u1
1
nginxinc/nginx-unprivileged:1.29.5c5b989ebc150
libssh2@1.11.1-1
1.11.1-1+deb13u1
1
photoprism/photoprism:260601650c6ad5a651
libssh2@1.11.1-1ubuntu0.26.04.1
1.11.1-1ubuntu0.26.04.2
1
photoprism/photoprism:251130db16ee6b1ba3
libssh2@1.11.1-1build1
1.11.1-1ubuntu0.25.10.2
1
phpmyadmin/phpmyadmin:5.2.342a200db07b4
libssh2@1.11.1-1
1.11.1-1+deb13u1
1
prodrigestivill/postgres-backup-local:latestf70742ebe42b
libssh2@1.11.1-1
1.11.1-1+deb13u1
1
reallibrephotos/librephotos-proxy:1.0.398a13dabbadc
libssh2@1.11.1-1
1.11.1-1+deb13u1
1
scholtz2/aramid-conduit:v1.9.0-stable3a3b3d3277d2
libssh2@1.11.1-1ubuntu0.26.04.1
1.11.1-1ubuntu0.26.04.2
1
scholtz2/aramid-indexer:v3.9.0-stable6770214bc881
libssh2@1.11.1-1ubuntu0.26.04.1
1.11.1-1ubuntu0.26.04.2
1
softwaremill/bootzooka:latest845b5e8f8056
libssh2@1.11.1-1build2
1.11.1-1ubuntu0.26.04.2
1
sonroyaalmerol/docker-sogo:5.12.43f60f3abe990
libssh2@1.11.1-1
1.11.1-1+deb13u1
1
thijsvanloef/palworld-server-docker:v2.7.1401d3eb5c053
libssh2@1.11.1-1
1.11.1-1+deb13u1
1
thijsvanloef/palworld-server-docker:v2.5.0b4ac9ee22483
libssh2@1.11.1-1
1.11.1-1+deb13u1
1
tinymediamanager/tinymediamanager:5.3.22b34dc85099e
libssh2@1.11.1-1
1.11.1-1+deb13u1
1
tombursch/kitchenowl-backend:v0.7.8b48e4ab727cd
libssh2@1.11.1-1
1.11.1-1+deb13u1
1
vaultwarden/server:1.35.443498a94b22f
libssh2@1.11.1-1
1.11.1-1+deb13u1
1
vaultwarden/server:1.35.79a8eec71f4a5
libssh2@1.11.1-1
1.11.1-1+deb13u1
1
wallarm/gateway-controller:0.4.09c6ed23e2f0e
libssh2@1.11.1-1
1.11.1-1+deb13u1
1
ghcr.io/analogj/scrutiny:v0.9.2-web71be54e99608
libssh2@1.11.1-1
1.11.1-1+deb13u1
1
ghcr.io/appscode/gotenberg:8.25f9104080d9a7
libssh2@1.11.1-1
1.11.1-1+deb13u1
1
ghcr.io/cohdi/composable-dra-driver:v0.2.28c05f7366981
libssh2@1.11.1-1
1.11.1-1+deb13u1
1
ghcr.io/cosmo-tech/cosmotech-copilot-api:latesta2be95de450c
libssh2@1.11.1-1
1.11.1-1+deb13u1
1
ghcr.io/dani-garcia/vaultwarden:1.35.2d89a6d21e361
libssh2@1.11.1-1
1.11.1-1+deb13u1
1
ghcr.io/dask/dask-kubernetes-operator:2026.3.03225d2bc6b3c
libssh2@1.11.1-1
1.11.1-1+deb13u1
1
ghcr.io/dfir-iris/iriswebapp_app:v2.4.26e59ebde55709
libssh2@1.11.1-1
1.11.1-1+deb13u1
1
ghcr.io/esphome/esphome:latest000c5ee5ee96
libssh2@1.11.1-1
1.11.1-1+deb13u1
1
ghcr.io/goauthentik/server:2026.2.146a71d75dfd3
libssh2@1.11.1-1
1.11.1-1+deb13u1
1
ghcr.io/home-assistant/home-assistant:2025.3.026c51e44d932
libssh2@1.11.1-r0
1.11.1-r2
1
ghcr.io/home-assistant/home-assistant:2025.12.59a5a3eb4a213
libssh2@1.11.1-r0
1.11.1-r2
1
ghcr.io/home-operations/home-assistant:2026.3.1067e54e2e107
libssh2@1.11.1-r1
1.11.1-r3
1
ghcr.io/htunn/ansible-inspec:0.2.12cd25a5cc3f1b
libssh2@1.11.1-1
1.11.1-1+deb13u1
1
ghcr.io/immich-app/immich-server:v2.3.1f8d06a32b1b2
libssh2@1.11.1-1
1.11.1-1+deb13u1
1
ghcr.io/jellyfin/jellyfin:10.11.1145f648c382a0
libssh2@1.11.1-1
1.11.1-1+deb13u1
1
ghcr.io/kubiyabot/agent-manager:v0.4.13757bdd779345
libssh2@1.11.1-1
1.11.1-1+deb13u1
1
ghcr.io/lloesche/valheim-server:latest20fde516ce31
libssh2@1.11.1-1
1.11.1-1+deb13u1
1
ghcr.io/mcwarman/backstage-sample-app/app:mainfae3c1f04311
libssh2@1.11.1-1
1.11.1-1+deb13u1
1
ghcr.io/monicahq/monica-next:main8be69156acbb
libssh2@1.11.1-1
1.11.1-1+deb13u1
1
ghcr.io/nathanvaughn/webtrees:2.2.6034151b61a80
libssh2@1.11.1-1
1.11.1-1+deb13u1
1
ghcr.io/paperless-ngx/paperless-ngx:2.20.134b05bcd28e69
libssh2@1.11.1-1
1.11.1-1+deb13u1
1
ghcr.io/paperless-ngx/paperless-ngx:2.20.357ad9565bff3
libssh2@1.11.1-1
1.11.1-1+deb13u1
1
ghcr.io/paperless-ngx/paperless-ngx:2.20.5665f2f5cc548
libssh2@1.11.1-1
1.11.1-1+deb13u1
1
ghcr.io/paperless-ngx/paperless-ngx:2.20.14b89f83345532
libssh2@1.11.1-1
1.11.1-1+deb13u1
1
ghcr.io/pschichtel/s3-backup:0.7.017666811f6a7
libssh2@1.11.1-1
1.11.1-1+deb13u1
1
ghcr.io/radar-base/managementportal/management-portal:3.0.0c1b37e821f72
libssh2@1.11.1-1build2
1.11.1-1ubuntu0.26.04.2
1
ghcr.io/reitermarkus/7d2d:main39953b387b61
libssh2@1.11.1-1
1.11.1-1+deb13u1
1

syft 1.42.1 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.