StackRadar

CVE-2026-55200

High

Advisory

Published 17 Jun 2026In the index since 5 Sept 2026
Severity
High
worst across findings
CVSS
8.3
base score, highest
EPSS
0.040
90th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
121
of 17,781 indexed, latest versions
Container images
105
deployed by those charts
Fix available
2 of 2
affected packages

The matching OSV records carry no description.

Carried by container images the latest versions of 121 of 17,781 indexed charts deploy, on 105 images.

Affected packageAffected versionsFixed inImages
libssh2deb1.11.1-1, 1.11.1-1+e1, 1.11.1-1build1, 1.11.1-1build2+1 more1.11.1-1+deb13u1, 1.11.1-1+e4, 1.11.1-1ubuntu0.25.10.2, 1.11.1-1ubuntu0.26.04.296
libssh2apk1.11.1-r0, 1.11.1-r11.11.1-r2, 1.11.1-r39
OSV records
ALPINE-CVE-2026-55200DEBIAN-CVE-2026-55200UBUNTU-CVE-2026-55200ECHO-81b6-9726-71c6
Also known as
USN-8486-1

Charts affected

121 by stars
ChartLatestAffected imagesRadar Score
maildocker-postfixVerified publisher5.1.01 of 1See more

mail docker-postfix 5.1.0

1 of the 1 container images this version deploys carry CVE-2026-55200.

Container imageDigestPackageFixed in
boky/postfix:5.1.0aafc77238423
libssh2@1.11.1-1
1.11.1-1+deb13u1

Open the chart page →

5,366
gatekeepergatekeeperVerified publisher3.23.11 of 3See more

gatekeeper gatekeeper 3.23.1

1 of the 3 container images this version deploys carry CVE-2026-55200.

Container imageDigestPackageFixed in
curlimages/curl:8.20.0b3f1fb2a51d9
libssh2@1.11.1-r1
1.11.1-r3

Open the chart page →

495
emqxemqx-operator5.8.91 of 1See more

emqx emqx-operator 5.8.9

1 of the 1 container images this version deploys carry CVE-2026-55200.

Container imageDigestPackageFixed in
emqx/emqx:5.8.935b46f7aa7a0
libssh2@1.11.1-1
1.11.1-1+deb13u1

Open the chart page →

2,705
pulsarapache4.7.01 of 10See more

pulsar apache 4.7.0

1 of the 10 container images this version deploys carry CVE-2026-55200.

Container imageDigestPackageFixed in
curlimages/curl:8.18.0d94d07ba9e7d
libssh2@1.11.1-r1
1.11.1-r3

Open the chart page →

9,864
monicamonicaOfficialVerified publisher1.0.151 of 1See more

monica monica 1.0.15

1 of the 1 container images this version deploys carry CVE-2026-55200.

Container imageDigestPackageFixed in
ghcr.io/monicahq/monica-next:main8be69156acbb
libssh2@1.11.1-1
1.11.1-1+deb13u1

Open the chart page →

5,634
nautobotnautobotOfficialVerified publisher3.1.21 of 1See more

nautobot nautobot 3.1.2

1 of the 1 container images this version deploys carry CVE-2026-55200.

Container imageDigestPackageFixed in
networktocode/nautobot:3.0-py3.13ed484336b1ad
libssh2@1.11.1-1
1.11.1-1+deb13u1

Open the chart page →

4,332
rekorsigstoreVerified publisher1.8.51 of 9See more

rekor sigstore 1.8.5

1 of the 9 container images this version deploys carry CVE-2026-55200.

Container imageDigestPackageFixed in
curlimages/curldigest-pinned935d9100e9ba
libssh2@1.11.1-r0
1.11.1-r2

Open the chart page →

5,415
thehivestrangebee-helmOfficialVerified publisher1.0.61 of 7See more

thehive strangebee-helm 1.0.6

1 of the 7 container images this version deploys carry CVE-2026-55200.

Container imageDigestPackageFixed in
curlimages/curl:8.17.0935d9100e9ba
libssh2@1.11.1-r0
1.11.1-r2

Open the chart page →

16,210
jellyfindjjudas21Verified publisher4.0.81 of 1See more

jellyfin djjudas21 4.0.8

1 of the 1 container images this version deploys carry CVE-2026-55200.

Container imageDigestPackageFixed in
jellyfin/jellyfin:10.11.11aefb67e6a7ff
libssh2@1.11.1-1
1.11.1-1+deb13u1

Open the chart page →

2,604
fulciosigstoreVerified publisher2.11.11 of 6See more

fulcio sigstore 2.11.1

1 of the 6 container images this version deploys carry CVE-2026-55200.

Container imageDigestPackageFixed in
curlimages/curl:8.17.0935d9100e9ba
libssh2@1.11.1-r0
1.11.1-r2

Open the chart page →

3,490
dask-kubernetes-operatordask2026.3.01 of 1See more

dask-kubernetes-operator dask 2026.3.0

1 of the 1 container images this version deploys carry CVE-2026-55200.

Container imageDigestPackageFixed in
ghcr.io/dask/dask-kubernetes-operator:2026.3.03225d2bc6b3c
libssh2@1.11.1-1
1.11.1-1+deb13u1

Open the chart page →

9,316
duplistatusduplistatusVerified publisher1.2.01 of 2See more

duplistatus duplistatus 1.2.0

1 of the 2 container images this version deploys carry CVE-2026-55200.

Container imageDigestPackageFixed in
curlimages/curl:8.18.0d94d07ba9e7d
libssh2@1.11.1-r1
1.11.1-r3

Open the chart page →

1,870
coreinstill-aiOfficialVerified publisher0.1.753 of 15See more

core instill-ai 0.1.75

3 of the 15 container images this version deploys carry CVE-2026-55200.

Container imageDigestPackageFixed in
instill/artifact-backend:b28766ac4a393e601ed
libssh2@1.11.1-1
1.11.1-1+deb13u1
instill/mgmt-backend:d0933d4ebe12f77a3f9
libssh2@1.11.1-1
1.11.1-1+deb13u1
instill/model-backend:611f0f2e980125e5ba5
libssh2@1.11.1-1
1.11.1-1+deb13u1

Open the chart page →

30,816
home-assistantk8s-home-lab-repo16.3.11 of 1See more

home-assistant k8s-home-lab-repo 16.3.1

1 of the 1 container images this version deploys carry CVE-2026-55200.

Container imageDigestPackageFixed in
ghcr.io/home-operations/home-assistant:2026.3.1067e54e2e107
libssh2@1.11.1-r1
1.11.1-r3

Open the chart page →

4,634
oesopsmxVerified publisher4.0.321 of 25See more

oes opsmx 4.0.32

1 of the 25 container images this version deploys carry CVE-2026-55200.

Container imageDigestPackageFixed in
quay.io/opsmxpublic/ubi8-oes-datascience:isd-spin-2025.10.01-af26a30d4-202511261054d8f66f4117fe
libssh2@1.11.1-1
1.11.1-1+deb13u1

Open the chart page →

107,811
icat-k8salba-helm-chartsVerified publisher1.1.01 of 4See more

icat-k8s alba-helm-charts 1.1.0

1 of the 4 container images this version deploys carry CVE-2026-55200.

Container imageDigestPackageFixed in
curlimages/curl:8.18.0d94d07ba9e7d
libssh2@1.11.1-r1
1.11.1-r3

Open the chart page →

3,697
jellyfinalekcVerified publisher0.9.01 of 1See more

jellyfin alekc 0.9.0

1 of the 1 container images this version deploys carry CVE-2026-55200.

Container imageDigestPackageFixed in
jellyfin/jellyfin:10.11.11aefb67e6a7ff
libssh2@1.11.1-1
1.11.1-1+deb13u1

Open the chart page →

2,604
paperless-ngxalexmorbo-paperless-ngxVerified publisher0.2.01 of 2See more

paperless-ngx alexmorbo-paperless-ngx 0.2.0

1 of the 2 container images this version deploys carry CVE-2026-55200.

Container imageDigestPackageFixed in
ghcr.io/paperless-ngx/paperless-ngx:2.20.5665f2f5cc548
libssh2@1.11.1-1
1.11.1-1+deb13u1

Open the chart page →

12,037
aramid-indexerbiatec-repoVerified publisher3.9.02 of 5See more

aramid-indexer biatec-repo 3.9.0

2 of the 5 container images this version deploys carry CVE-2026-55200.

Container imageDigestPackageFixed in
scholtz2/aramid-conduit:v1.9.0-stable3a3b3d3277d2
libssh2@1.11.1-1ubuntu0.26.04.1
1.11.1-1ubuntu0.26.04.2
scholtz2/aramid-indexer:v3.9.0-stable6770214bc881
libssh2@1.11.1-1ubuntu0.26.04.1
1.11.1-1ubuntu0.26.04.2

Open the chart page →

13,357
cosmotech-copilot-apicosmotech-apiVerified publisher0.1.11 of 1See more

cosmotech-copilot-api cosmotech-api 0.1.1

1 of the 1 container images this version deploys carry CVE-2026-55200.

Container imageDigestPackageFixed in
ghcr.io/cosmo-tech/cosmotech-copilot-api:latesta2be95de450c
libssh2@1.11.1-1
1.11.1-1+deb13u1

Open the chart page →

11,205
enbuildenbuildVerified publisher0.0.501 of 6See more

enbuild enbuild 0.0.50

1 of the 6 container images this version deploys carry CVE-2026-55200.

Container imageDigestPackageFixed in
registry.gitlab.com/enbuild-staging/vivsoft-platform-ui/enbuild-frontend:1.0.3166353ce9bf98
libssh2@1.11.1-1
1.11.1-1+deb13u1

Open the chart page →

31,510
valheimgeek-cookbookVerified publisher4.4.21 of 1See more

valheim geek-cookbook 4.4.2

1 of the 1 container images this version deploys carry CVE-2026-55200.

Container imageDigestPackageFixed in
ghcr.io/lloesche/valheim-server:latest20fde516ce31
libssh2@1.11.1-1
1.11.1-1+deb13u1

Open the chart page →

4,879
immichimmich-helm0.3.01 of 4See more

immich immich-helm 0.3.0

1 of the 4 container images this version deploys carry CVE-2026-55200.

Container imageDigestPackageFixed in
ghcr.io/immich-app/immich-server:v2.3.1f8d06a32b1b2
libssh2@1.11.1-1
1.11.1-1+deb13u1

Open the chart page →

15,712
iris-webappiris-webapp0.2.41 of 2See more

iris-webapp iris-webapp 0.2.4

1 of the 2 container images this version deploys carry CVE-2026-55200.

Container imageDigestPackageFixed in
ghcr.io/dfir-iris/iriswebapp_app:v2.4.26e59ebde55709
libssh2@1.11.1-1
1.11.1-1+deb13u1

Open the chart page →

11,764
jellyfinjellyfinVerified publisher0.3.301 of 1See more

jellyfin jellyfin 0.3.30

1 of the 1 container images this version deploys carry CVE-2026-55200.

Container imageDigestPackageFixed in
ghcr.io/jellyfin/jellyfin:10.11.1145f648c382a0
libssh2@1.11.1-1
1.11.1-1+deb13u1

Open the chart page →

2,604
jellyfinmedia-servarrVerified publisher0.16.01 of 2See more

jellyfin media-servarr 0.16.0

1 of the 2 container images this version deploys carry CVE-2026-55200.

Container imageDigestPackageFixed in
jellyfin/jellyfin:10.11.11aefb67e6a7ff
libssh2@1.11.1-1
1.11.1-1+deb13u1

Open the chart page →

2,753
photoprismmmontesVerified publisher0.14.01 of 1See more

photoprism mmontes 0.14.0

1 of the 1 container images this version deploys carry CVE-2026-55200.

Container imageDigestPackageFixed in
photoprism/photoprism:251130db16ee6b1ba3
libssh2@1.11.1-1build1
1.11.1-1ubuntu0.25.10.2

Open the chart page →

11,103
redminemt1905027.3.41 of 3See more

redmine mt190502 7.3.4

1 of the 3 container images this version deploys carry CVE-2026-55200.

Container imageDigestPackageFixed in
library/redmine:6.1.204ac44a2595b
libssh2@1.11.1-1
1.11.1-1+deb13u1

Open the chart page →

7,527
opikopikOfficialVerified publisher2.2.591 of 13See more

opik opik 2.2.59

1 of the 13 container images this version deploys carry CVE-2026-55200.

Container imageDigestPackageFixed in
curlimages/curl:8.12.194e9e444bcba
libssh2@1.11.1-r0
1.11.1-r2

Open the chart page →

14,334
palworldpalworld-server-chartVerified publisher2.7.11 of 1See more

palworld palworld-server-chart 2.7.1

1 of the 1 container images this version deploys carry CVE-2026-55200.

Container imageDigestPackageFixed in
thijsvanloef/palworld-server-docker:v2.7.1401d3eb5c053
libssh2@1.11.1-1
1.11.1-1+deb13u1

Open the chart page →

3,681
peertubepeertubeVerified publisher0.1.31 of 1See more

peertube peertube 0.1.3

1 of the 1 container images this version deploys carry CVE-2026-55200.

Container imageDigestPackageFixed in
chocobozzz/peertube:v8.1.5052712130691
libssh2@1.11.1-1
1.11.1-1+deb13u1

Open the chart page →

7,035
scaffoldsigstoreVerified publisher0.6.1141 of 15See more

scaffold sigstore 0.6.114

1 of the 15 container images this version deploys carry CVE-2026-55200.

Container imageDigestPackageFixed in
curlimages/curldigest-pinned:8.17.0935d9100e9ba
libssh2@1.11.1-r0
1.11.1-r2

Open the chart page →

7,710
sogosogoVerified publisher0.3.51 of 2See more

sogo sogo 0.3.5

1 of the 2 container images this version deploys carry CVE-2026-55200.

Container imageDigestPackageFixed in
sonroyaalmerol/docker-sogo:5.12.43f60f3abe990
libssh2@1.11.1-1
1.11.1-1+deb13u1

Open the chart page →

7,126
app-fullsynkubeVerified publisher1.0.01 of 1See more

app-full synkube 1.0.0

1 of the 1 container images this version deploys carry CVE-2026-55200.

Container imageDigestPackageFixed in
library/nginx:latest6e23479198b9
libssh2@1.11.1-1
1.11.1-1+deb13u1

Open the chart page →

3,240
wordpress-e2e-setupwoocommerce-e2e-setup0.1.11 of 2See more

wordpress-e2e-setup woocommerce-e2e-setup 0.1.1

1 of the 2 container images this version deploys carry CVE-2026-55200.

Container imageDigestPackageFixed in
library/wordpress:6.8-apache30bff39330d1
libssh2@1.11.1-1
1.11.1-1+deb13u1

Open the chart page →

7,696
wordpress-helmwordpress-helm0.2.91 of 4See more

wordpress-helm wordpress-helm 0.2.9

1 of the 4 container images this version deploys carry CVE-2026-55200.

Container imageDigestPackageFixed in
aapjeisbaas/wp-frankenphp:v0.2.26b261abc7fb0
libssh2@1.11.1-1
1.11.1-1+deb13u1

Open the chart page →

8,217
esphomealekcVerified publisher2.8.11 of 1See more

esphome alekc 2.8.1

1 of the 1 container images this version deploys carry CVE-2026-55200.

Container imageDigestPackageFixed in
esphome/esphome:2026.8.285abea33854b
libssh2@1.11.1-1
1.11.1-1+deb13u1

Open the chart page →

3,112
ansible-inspecansible-inspec0.2.171 of 2See more

ansible-inspec ansible-inspec 0.2.17

1 of the 2 container images this version deploys carry CVE-2026-55200.

Container imageDigestPackageFixed in
ghcr.io/htunn/ansible-inspec:0.2.12cd25a5cc3f1b
libssh2@1.11.1-1
1.11.1-1+deb13u1

Open the chart page →

5,558
antrea-uiantreaVerified publisher0.8.01 of 2See more

antrea-ui antrea 0.8.0

1 of the 2 container images this version deploys carry CVE-2026-55200.

Container imageDigestPackageFixed in
antrea/antrea-ui-frontend:v0.8.0ee9686bcefb8
libssh2@1.11.1-1
1.11.1-1+deb13u1

Open the chart page →

3,239
platform-apiappscodeVerified publisher2026.9.111 of 3See more

platform-api appscode 2026.9.11

1 of the 3 container images this version deploys carry CVE-2026-55200.

Container imageDigestPackageFixed in
ghcr.io/appscode/gotenberg:8.25f9104080d9a7
libssh2@1.11.1-1
1.11.1-1+deb13u1

Open the chart page →

37,268
dokuwikiarea-42Verified publisher0.1.81 of 1See more

dokuwiki area-42 0.1.8

1 of the 1 container images this version deploys carry CVE-2026-55200.

Container imageDigestPackageFixed in
dokuwiki/dokuwiki:2025-05-14af08ecfdda239
libssh2@1.11.1-1
1.11.1-1+deb13u1

Open the chart page →

7,489
backstage-pyactionsbackstage-pyactionsVerified publisher0.1.01 of 1See more

backstage-pyactions backstage-pyactions 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-55200.

Container imageDigestPackageFixed in
mawad98/backstage-pyactions:demo99422c56a274
libssh2@1.11.1-1
1.11.1-1+deb13u1

Open the chart page →

2,738
kitchenowlchart-kitchenowl0.1.121 of 2See more

kitchenowl chart-kitchenowl 0.1.12

1 of the 2 container images this version deploys carry CVE-2026-55200.

Container imageDigestPackageFixed in
tombursch/kitchenowl-backend:v0.7.8b48e4ab727cd
libssh2@1.11.1-1
1.11.1-1+deb13u1

Open the chart page →

4,803
clusterfactoryclusterfactory0.2.01 of 5See more

clusterfactory clusterfactory 0.2.0

1 of the 5 container images this version deploys carry CVE-2026-55200.

Container imageDigestPackageFixed in
jenkins/jenkins:2.541.3-jdk21c4098086090c
libssh2@1.11.1-1
1.11.1-1+deb13u1

Open the chart page →

7,168
gitea-jenkinsclusterfactory0.1.11 of 5See more

gitea-jenkins clusterfactory 0.1.1

1 of the 5 container images this version deploys carry CVE-2026-55200.

Container imageDigestPackageFixed in
jenkins/jenkins:2.541.3-jdk21c4098086090c
libssh2@1.11.1-1
1.11.1-1+deb13u1

Open the chart page →

5,238
cohdicohdi0.2.21 of 3See more

cohdi cohdi 0.2.2

1 of the 3 container images this version deploys carry CVE-2026-55200.

Container imageDigestPackageFixed in
ghcr.io/cohdi/composable-dra-driver:v0.2.28c05f7366981
libssh2@1.11.1-1
1.11.1-1+deb13u1

Open the chart page →

3,694
truecommanddjjudas21Verified publisher0.1.01 of 1See more

truecommand djjudas21 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-55200.

Container imageDigestPackageFixed in
ixsystems/truecommand:3.2.019c218455cd2
libssh2@1.11.1-1
1.11.1-1+deb13u1

Open the chart page →

5,174
webtreesdjjudas21Verified publisher3.0.01 of 1See more

webtrees djjudas21 3.0.0

1 of the 1 container images this version deploys carry CVE-2026-55200.

Container imageDigestPackageFixed in
ghcr.io/nathanvaughn/webtrees:2.2.6034151b61a80
libssh2@1.11.1-1
1.11.1-1+deb13u1

Open the chart page →

5,966
postgres-backup-localduck-helm0.1.51 of 1See more

postgres-backup-local duck-helm 0.1.5

1 of the 1 container images this version deploys carry CVE-2026-55200.

Container imageDigestPackageFixed in
prodrigestivill/postgres-backup-local:latestf70742ebe42b
libssh2@1.11.1-1
1.11.1-1+deb13u1

Open the chart page →

3,455
iotaeclipse-aeriosVerified publisher1.0.21 of 4See more

iota eclipse-aerios 1.0.2

1 of the 4 container images this version deploys carry CVE-2026-55200.

Container imageDigestPackageFixed in
eclipseaerios/iota-messages-api:lateste7f5ba0bc64d
libssh2@1.11.1-1
1.11.1-1+deb13u1

Open the chart page →

13,391

Container images carrying it

105 by charts deploying them

A fixed version is listed for 2 of the 2 affected packages.

Container imageDigestPackageFixed inUsed by
ghcr.io/sissbruecker/linkding:1.45.061b2eb9eed8e
libssh2@1.11.1-1
1.11.1-1+deb13u1
1
public.ecr.aws/groundcovercom/temporalio/server:1.29.6-mini-20260702-170f191d0a80e
libssh2@1.11.1-1+e1
1.11.1-1+e4
1
quay.io/opsmxpublic/ubi8-oes-datascience:isd-spin-2025.10.01-af26a30d4-202511261054d8f66f4117fe
libssh2@1.11.1-1
1.11.1-1+deb13u1
1
registry.gitlab.com/enbuild-staging/vivsoft-platform-ui/enbuild-frontend:1.0.3166353ce9bf98
libssh2@1.11.1-1
1.11.1-1+deb13u1
1
registry.k8s.io/git-sync/git-sync:v4.5.00e64aedb0d0a
libssh2@1.11.1-1
1.11.1-1+deb13u1
1

syft 1.42.1 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.