StackRadar

CVE-2026-55599

Medium

Advisory

Published 16 Jun 2026In the index since 6 Sept 2026
Severity
Medium
worst across findings
CVSS
5.8
base score, highest
EPSS
0.002
12th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
49
of 17,781 indexed, latest versions
Container images
44
deployed by those charts
Fix available
1 of 1
affected package

phpseclib: X.509 certificate validation sends attacker-controlled outbound requests (server-side request forgery) via Authority Information Access

Carried by container images the latest versions of 49 of 17,781 indexed charts deploy, on 44 images.

Affected packageAffected versionsFixed inImages
phpseclib/phpseclibcomposer2.0.15, 2.0.27, 2.0.29, 2.0.34+21 more2.0.55, 3.0.5444
OSV records
GHSA-m557-wrgg-6rp4

Charts affected

49 by stars
ChartLatestAffected imagesRadar Score
snipeitt3n3.4.11 of 2See more

snipeit t3n 3.4.1

1 of the 2 container images this version deploys carry CVE-2026-55599.

Container imageDigestPackageFixed in
snipe/snipe-it:v6.0.1455fb7636a98c
phpseclib/phpseclib@3.0.14
3.0.54

Open the chart page →

18,509
mauticone-acre-fundVerified publisher0.1.71 of 3See more

mautic one-acre-fund 0.1.7

1 of the 3 container images this version deploys carry CVE-2026-55599.

Container imageDigestPackageFixed in
mautic/mautic:v4-apache94ea4acf4049
phpseclib/phpseclib@3.0.37
3.0.54

Open the chart page →

2,667
monicamonicaOfficialVerified publisher1.0.151 of 1See more

monica monica 1.0.15

1 of the 1 container images this version deploys carry CVE-2026-55599.

Container imageDigestPackageFixed in
ghcr.io/monicahq/monica-next:main8be69156acbb
phpseclib/phpseclib@3.0.46
3.0.54

Open the chart page →

5,634
passboltcnieg1.1.171 of 2See more

passbolt cnieg 1.1.17

1 of the 2 container images this version deploys carry CVE-2026-55599.

Container imageDigestPackageFixed in
passbolt/passbolt:3.4.0-ce-non-root655547e17263
phpseclib/phpseclib@2.0.34
2.0.55

Open the chart page →

3,543
bookstackgabe565Verified publisher0.20.01 of 1See more

bookstack gabe565 0.20.0

1 of the 1 container images this version deploys carry CVE-2026-55599.

Container imageDigestPackageFixed in
ghcr.io/linuxserver/bookstack:version-v24.12.1cc795b254b73
phpseclib/phpseclib@3.0.43
3.0.54

Open the chart page →

2,811
invoiceninjainvoiceninjaVerified publisher0.10.21 of 5See more

invoiceninja invoiceninja 0.10.2

1 of the 5 container images this version deploys carry CVE-2026-55599.

Container imageDigestPackageFixed in
invoiceninja/invoiceninja:5.6.241437916dee01
phpseclib/phpseclib@3.0.21
3.0.54

Open the chart page →

2,709
passboltpassbolt2.1.11 of 6See more

passbolt passbolt 2.1.1

1 of the 6 container images this version deploys carry CVE-2026-55599.

Container imageDigestPackageFixed in
passbolt/passbolt:5.13.0-1-ceaf3a620902a0
phpseclib/phpseclib@3.0.52
3.0.54

Open the chart page →

13,350
bookstackbookstack-mgVerified publisher0.3.11 of 2See more

bookstack bookstack-mg 0.3.1

1 of the 2 container images this version deploys carry CVE-2026-55599.

Container imageDigestPackageFixed in
linuxserver/bookstack:26.05.202605282ebf97852661
phpseclib/phpseclib@3.0.52
3.0.54

Open the chart page →

1,896
passbolt-hachristianhuthVerified publisher6.0.11 of 4See more

passbolt-ha christianhuth 6.0.1

1 of the 4 container images this version deploys carry CVE-2026-55599.

Container imageDigestPackageFixed in
passbolt/passbolt:3.4.0-ce-non-root655547e17263
phpseclib/phpseclib@2.0.34
2.0.55

Open the chart page →

10,817
matomodigitalist-open-cloud-matomo12.0.201 of 3See more

matomo digitalist-open-cloud-matomo 12.0.20

1 of the 3 container images this version deploys carry CVE-2026-55599.

Container imageDigestPackageFixed in
digitalist/matomo:5.12.0bc4aeeaea769
phpseclib/phpseclib@3.0.36
3.0.54

Open the chart page →

3,539
firefly-iiigeek-cookbookVerified publisher0.3.01 of 1See more

firefly-iii geek-cookbook 0.3.0

1 of the 1 container images this version deploys carry CVE-2026-55599.

Container imageDigestPackageFixed in
fireflyiii/core:version-5.6.142f4283bd0cf7
phpseclib/phpseclib@3.0.13
3.0.54

Open the chart page →

2,076
monicageek-cookbookVerified publisher8.2.01 of 1See more

monica geek-cookbook 8.2.0

1 of the 1 container images this version deploys carry CVE-2026-55599.

Container imageDigestPackageFixed in
library/monica:3.7.0-apacheceb1ba4196ab
phpseclib/phpseclib@3.0.13
3.0.54

Open the chart page →

2,096
leantimegissilabs1.3.01 of 2See more

leantime gissilabs 1.3.0

1 of the 2 container images this version deploys carry CVE-2026-55599.

Container imageDigestPackageFixed in
leantime/leantime:3.3.3ad4bfb0699d3
phpseclib/phpseclib@3.0.42
3.0.54

Open the chart page →

6,416
castopodh2mVerified publisher1.12.101 of 3See more

castopod h2m 1.12.10

1 of the 3 container images this version deploys carry CVE-2026-55599.

Container imageDigestPackageFixed in
castopod/castopod:1.12.101fd37280cbb2
phpseclib/phpseclib@2.0.47
2.0.55

Open the chart page →

10,072
owncloudkubernetes-homelab-helm-chartsVerified publisher0.1.01 of 3See more

owncloud kubernetes-homelab-helm-charts 0.1.0

1 of the 3 container images this version deploys carry CVE-2026-55599.

Container imageDigestPackageFixed in
owncloud/server:10.16.274c53d341076
phpseclib/phpseclib@3.0.50
3.0.54

Open the chart page →

9,858
librenmsmidokura-communityVerified publisher0.3.21 of 6See more

librenms midokura-community 0.3.2

1 of the 6 container images this version deploys carry CVE-2026-55599.

Container imageDigestPackageFixed in
librenms/librenms:22.4.14f1f3d667cc7
phpseclib/phpseclib@3.0.12
3.0.54

Open the chart page →

8,967
linkstackadnoctemVerified publisher0.4.01 of 1See more

linkstack adnoctem 0.4.0

1 of the 1 container images this version deploys carry CVE-2026-55599.

Container imageDigestPackageFixed in
linkstackorg/linkstack:latest1c8b05399ee4
phpseclib/phpseclib@3.0.49
3.0.54

Open the chart page →

2,092
appwriteappwrite-helmVerified publisher1.3.21 of 8See more

appwrite appwrite-helm 1.3.2

1 of the 8 container images this version deploys carry CVE-2026-55599.

Container imageDigestPackageFixed in
appwrite/appwrite:1.9.01aaa70127114
phpseclib/phpseclib@3.0.50
3.0.54

Open the chart page →

9,847
dokuwikiarea-42Verified publisher0.1.81 of 1See more

dokuwiki area-42 0.1.8

1 of the 1 container images this version deploys carry CVE-2026-55599.

Container imageDigestPackageFixed in
dokuwiki/dokuwiki:2025-05-14af08ecfdda239
phpseclib/phpseclib@3.0.43
3.0.54

Open the chart page →

7,489
nextcloudcloudve1.13.01 of 2See more

nextcloud cloudve 1.13.0

1 of the 2 container images this version deploys carry CVE-2026-55599.

Container imageDigestPackageFixed in
library/nextcloud:17.0.0-apache96104cb965fc
phpseclib/phpseclib@2.0.15
2.0.55

Open the chart page →

3,016
openldapcsic-charts0.1.11 of 2See more

openldap csic-charts 0.1.1

1 of the 2 container images this version deploys carry CVE-2026-55599.

Container imageDigestPackageFixed in
ldapaccountmanager/lam:8.0.1d46cf25d1dda
phpseclib/phpseclib@3.0.12
3.0.54

Open the chart page →

5,293
cspconsolecspconsole1.3.111 of 5See more

cspconsole cspconsole 1.3.11

1 of the 5 container images this version deploys carry CVE-2026-55599.

Container imageDigestPackageFixed in
cspconsole/csp-control-center:1.0.1046dda4a31bd6
phpseclib/phpseclib@3.0.52
3.0.54

Open the chart page →

12,274
ownclouddjjudas21Verified publisher0.3.231 of 3See more

owncloud djjudas21 0.3.23

1 of the 3 container images this version deploys carry CVE-2026-55599.

Container imageDigestPackageFixed in
owncloud/server:10.16.3b3f9efdcd7f7
phpseclib/phpseclib@3.0.52
3.0.54

Open the chart page →

10,035
espocrmespocrmVerified publisher1.0.11 of 2See more

espocrm espocrm 1.0.1

1 of the 2 container images this version deploys carry CVE-2026-55599.

Container imageDigestPackageFixed in
espocrm/espocrm:9.3.101b5a24504ed9
phpseclib/phpseclib@3.0.48
3.0.54

Open the chart page →

6,431
firefly-iiifirefly-iii1.10.11 of 1See more

firefly-iii firefly-iii 1.10.1

1 of the 1 container images this version deploys carry CVE-2026-55599.

Container imageDigestPackageFixed in
fireflyiii/core:version-6.5.9fe4ecec4c2ba
phpseclib/phpseclib@3.0.50
3.0.54

Open the chart page →

5,039
firefly-iii-stackfirefly-iii0.10.21 of 4See more

firefly-iii-stack firefly-iii 0.10.2

1 of the 4 container images this version deploys carry CVE-2026-55599.

Container imageDigestPackageFixed in
fireflyiii/core:version-6.5.9fe4ecec4c2ba
phpseclib/phpseclib@3.0.50
3.0.54

Open the chart page →

10,260
passboltg0dscookie0.5.21 of 2See more

passbolt g0dscookie 0.5.2

1 of the 2 container images this version deploys carry CVE-2026-55599.

Container imageDigestPackageFixed in
passbolt/passbolt:3.9.0-2-ce-non-rootec046e112d5c
phpseclib/phpseclib@3.0.18
3.0.54

Open the chart page →

7,940
monicagabe565Verified publisher0.10.01 of 2See more

monica gabe565 0.10.0

1 of the 2 container images this version deploys carry CVE-2026-55599.

Container imageDigestPackageFixed in
library/monica:4.1.2-fpm-alpine6d1b2bd0947e
phpseclib/phpseclib@3.0.37
3.0.54

Open the chart page →

1,173
anonaddygeek-cookbookVerified publisher6.0.01 of 1See more

anonaddy geek-cookbook 6.0.0

1 of the 1 container images this version deploys carry CVE-2026-55599.

Container imageDigestPackageFixed in
anonaddy/anonaddy:0.12.3957a95565166
phpseclib/phpseclib@3.0.14
3.0.54

Open the chart page →

4,788
bookstackgeek-cookbookVerified publisher5.2.01 of 1See more

bookstack geek-cookbook 5.2.0

1 of the 1 container images this version deploys carry CVE-2026-55599.

Container imageDigestPackageFixed in
ghcr.io/linuxserver/bookstack:version-v21.12f05447347ff1
phpseclib/phpseclib@3.0.12
3.0.54

Open the chart page →

1,269
dokuwikigeek-cookbookVerified publisher1.2.21 of 1See more

dokuwiki geek-cookbook 1.2.2

1 of the 1 container images this version deploys carry CVE-2026-55599.

Container imageDigestPackageFixed in
linuxserver/dokuwiki:version-2020-07-2925b2b2c18125
phpseclib/phpseclib@2.0.27
2.0.55

Open the chart page →

136
openemrgeek-cookbookVerified publisher5.2.01 of 1See more

openemr geek-cookbook 5.2.0

1 of the 1 container images this version deploys carry CVE-2026-55599.

Container imageDigestPackageFixed in
openemr/openemr:6.1.089eaa6d9a4e3
phpseclib/phpseclib@2.0.35
2.0.55

Open the chart page →

8,392
wallabaggeek-cookbookVerified publisher7.2.01 of 1See more

wallabag geek-cookbook 7.2.0

1 of the 1 container images this version deploys carry CVE-2026-55599.

Container imageDigestPackageFixed in
wallabag/wallabag:2.4.25e4c26a7fb4a
phpseclib/phpseclib@3.0.6
3.0.54

Open the chart page →

4,358
castopodhelmforgeVerified publisher1.2.71 of 3See more

castopod helmforge 1.2.7

1 of the 3 container images this version deploys carry CVE-2026-55599.

Container imageDigestPackageFixed in
castopod/castopod:1.15.54e4f0440520f
phpseclib/phpseclib@2.0.51
2.0.55

Open the chart page →

9,342
wallabaghelmforgeVerified publisher1.3.61 of 3See more

wallabag helmforge 1.3.6

1 of the 3 container images this version deploys carry CVE-2026-55599.

Container imageDigestPackageFixed in
wallabag/wallabag:2.6.144a527e027e0d
phpseclib/phpseclib@3.0.46
3.0.54

Open the chart page →

2,762
wallabaghpVerified publisher0.1.71 of 1See more

wallabag hp 0.1.7

1 of the 1 container images this version deploys carry CVE-2026-55599.

Container imageDigestPackageFixed in
wallabag/wallabag:2.6.144a527e027e0d
phpseclib/phpseclib@3.0.46
3.0.54

Open the chart page →

1,136
laravel-chartlaravel-application0.2.01 of 1See more

laravel-chart laravel-application 0.2.0

1 of the 1 container images this version deploys carry CVE-2026-55599.

Container imageDigestPackageFixed in
ibarreche/cloud-back-ci:lateste16a469c5791
phpseclib/phpseclib@2.0.29
2.0.55

Open the chart page →

1,835
librenmsnimbolus0.5.11 of 3See more

librenms nimbolus 0.5.1

1 of the 3 container images this version deploys carry CVE-2026-55599.

Container imageDigestPackageFixed in
librenms/librenms:24.11.00920bc9117a8
phpseclib/phpseclib@3.0.42
3.0.54

Open the chart page →

2,293
openldapopenldap0.1.11 of 2See more

openldap openldap 0.1.1

1 of the 2 container images this version deploys carry CVE-2026-55599.

Container imageDigestPackageFixed in
ldapaccountmanager/lam:8.0.1d46cf25d1dda
phpseclib/phpseclib@3.0.12
3.0.54

Open the chart page →

5,293
firefly-iiiphntom0.2.101 of 2See more

firefly-iii phntom 0.2.10

1 of the 2 container images this version deploys carry CVE-2026-55599.

Container imageDigestPackageFixed in
phntom/fireflyiii:version-5.7.5f881ea5fbbf1
phpseclib/phpseclib@3.0.14
3.0.54

Open the chart page →

1,813
libretimepodzone-chartsVerified publisher0.4.11 of 9See more

libretime podzone-charts 0.4.1

1 of the 9 container images this version deploys carry CVE-2026-55599.

Container imageDigestPackageFixed in
ghcr.io/libretime/libretime-legacy:latest35b4531189c2
phpseclib/phpseclib@3.0.42
3.0.54

Open the chart page →

11,149
nextcloudsb-helm-charts0.4.01 of 2See more

nextcloud sb-helm-charts 0.4.0

1 of the 2 container images this version deploys carry CVE-2026-55599.

Container imageDigestPackageFixed in
library/nextcloud:31.0.10-apacheb7faa1653c39
phpseclib/phpseclib@2.0.48
2.0.55

Open the chart page →

9,755
bookstackschmitzis0.1.11 of 1See more

bookstack schmitzis 0.1.1

1 of the 1 container images this version deploys carry CVE-2026-55599.

Container imageDigestPackageFixed in
solidnerd/bookstack:21.12762ffd5c51d3
phpseclib/phpseclib@3.0.12
3.0.54

Open the chart page →

2,751
snipeitschmitzis6.1.01 of 2See more

snipeit schmitzis 6.1.0

1 of the 2 container images this version deploys carry CVE-2026-55599.

Container imageDigestPackageFixed in
snipe/snipe-it:v8.3.1141ebf2386fe
phpseclib/phpseclib@3.0.46
3.0.54

Open the chart page →

6,094
wallabagsebtiz13-chartsVerified publisher0.6.01 of 1See more

wallabag sebtiz13-charts 0.6.0

1 of the 1 container images this version deploys carry CVE-2026-55599.

Container imageDigestPackageFixed in
wallabag/wallabag:2.6.144a527e027e0d
phpseclib/phpseclib@3.0.46
3.0.54

Open the chart page →

1,136
phpmyadminsitepilot1.0.11 of 1See more

phpmyadmin sitepilot 1.0.1

1 of the 1 container images this version deploys carry CVE-2026-55599.

Container imageDigestPackageFixed in
phpmyadmin/phpmyadmin:5.138437e021deb
phpseclib/phpseclib@2.0.37
2.0.55

Open the chart page →

1,724
nextcloudth-chartsVerified publisher0.4.01 of 1See more

nextcloud th-charts 0.4.0

1 of the 1 container images this version deploys carry CVE-2026-55599.

Container imageDigestPackageFixed in
library/nextcloud:31.0.6-apache588609d76b21
phpseclib/phpseclib@2.0.48
2.0.55

Open the chart page →

10,086
owncloudth-chartsVerified publisher0.2.11 of 1See more

owncloud th-charts 0.2.1

1 of the 1 container images this version deploys carry CVE-2026-55599.

Container imageDigestPackageFixed in
owncloud/server:10.15.051d9b74fc2a8
phpseclib/phpseclib@3.0.39
3.0.54

Open the chart page →

10,006
apiwbstack0.36.01 of 1See more

api wbstack 0.36.0

1 of the 1 container images this version deploys carry CVE-2026-55599.

Container imageDigestPackageFixed in
ghcr.io/wbstack/api:8x.9.11eee94f9f7a53
phpseclib/phpseclib@3.0.14
3.0.54

Open the chart page →

2,019

Container images carrying it

44 by charts deploying them

A fixed version is listed for 1 of the 1 affected package.

Container imageDigestPackageFixed inUsed by
wallabag/wallabag:2.6.144a527e027e0d
phpseclib/phpseclib@3.0.46
3.0.54
3
fireflyiii/core:version-6.5.9fe4ecec4c2ba
phpseclib/phpseclib@3.0.50
3.0.54
2
ldapaccountmanager/lam:8.0.1d46cf25d1dda
phpseclib/phpseclib@3.0.12
3.0.54
2
passbolt/passbolt:3.4.0-ce-non-root655547e17263
phpseclib/phpseclib@2.0.34
2.0.55
2
anonaddy/anonaddy:0.12.3957a95565166
phpseclib/phpseclib@3.0.14
3.0.54
1
appwrite/appwrite:1.9.01aaa70127114
phpseclib/phpseclib@3.0.50
3.0.54
1
castopod/castopod:1.12.101fd37280cbb2
phpseclib/phpseclib@2.0.47
2.0.55
1
castopod/castopod:1.15.54e4f0440520f
phpseclib/phpseclib@2.0.51
2.0.55
1
cspconsole/csp-control-center:1.0.1046dda4a31bd6
phpseclib/phpseclib@3.0.52
3.0.54
1
digitalist/matomo:5.12.0bc4aeeaea769
phpseclib/phpseclib@3.0.36
3.0.54
1
dokuwiki/dokuwiki:2025-05-14af08ecfdda239
phpseclib/phpseclib@3.0.43
3.0.54
1
espocrm/espocrm:9.3.101b5a24504ed9
phpseclib/phpseclib@3.0.48
3.0.54
1
fireflyiii/core:version-5.6.142f4283bd0cf7
phpseclib/phpseclib@3.0.13
3.0.54
1
ibarreche/cloud-back-ci:lateste16a469c5791
phpseclib/phpseclib@2.0.29
2.0.55
1
invoiceninja/invoiceninja:5.6.241437916dee01
phpseclib/phpseclib@3.0.21
3.0.54
1
leantime/leantime:3.3.3ad4bfb0699d3
phpseclib/phpseclib@3.0.42
3.0.54
1
library/monica:4.1.2-fpm-alpine6d1b2bd0947e
phpseclib/phpseclib@3.0.37
3.0.54
1
library/monica:3.7.0-apacheceb1ba4196ab
phpseclib/phpseclib@3.0.13
3.0.54
1
library/nextcloud:31.0.6-apache588609d76b21
phpseclib/phpseclib@2.0.48
2.0.55
1
library/nextcloud:17.0.0-apache96104cb965fc
phpseclib/phpseclib@2.0.15
2.0.55
1
library/nextcloud:31.0.10-apacheb7faa1653c39
phpseclib/phpseclib@2.0.48
2.0.55
1
librenms/librenms:24.11.00920bc9117a8
phpseclib/phpseclib@3.0.42
3.0.54
1
librenms/librenms:22.4.14f1f3d667cc7
phpseclib/phpseclib@3.0.12
3.0.54
1
linkstackorg/linkstack:latest1c8b05399ee4
phpseclib/phpseclib@3.0.49
3.0.54
1
linuxserver/bookstack:26.05.202605282ebf97852661
phpseclib/phpseclib@3.0.52
3.0.54
1
linuxserver/dokuwiki:version-2020-07-2925b2b2c18125
phpseclib/phpseclib@2.0.27
2.0.55
1
mautic/mautic:v4-apache94ea4acf4049
phpseclib/phpseclib@3.0.37
3.0.54
1
openemr/openemr:6.1.089eaa6d9a4e3
phpseclib/phpseclib@2.0.35
2.0.55
1
owncloud/server:10.15.051d9b74fc2a8
phpseclib/phpseclib@3.0.39
3.0.54
1
owncloud/server:10.16.274c53d341076
phpseclib/phpseclib@3.0.50
3.0.54
1
owncloud/server:10.16.3b3f9efdcd7f7
phpseclib/phpseclib@3.0.52
3.0.54
1
passbolt/passbolt:5.13.0-1-ceaf3a620902a0
phpseclib/phpseclib@3.0.52
3.0.54
1
passbolt/passbolt:3.9.0-2-ce-non-rootec046e112d5c
phpseclib/phpseclib@3.0.18
3.0.54
1
phntom/fireflyiii:version-5.7.5f881ea5fbbf1
phpseclib/phpseclib@3.0.14
3.0.54
1
phpmyadmin/phpmyadmin:5.138437e021deb
phpseclib/phpseclib@2.0.37
2.0.55
1
snipe/snipe-it:v8.3.1141ebf2386fe
phpseclib/phpseclib@3.0.46
3.0.54
1
snipe/snipe-it:v6.0.1455fb7636a98c
phpseclib/phpseclib@3.0.14
3.0.54
1
solidnerd/bookstack:21.12762ffd5c51d3
phpseclib/phpseclib@3.0.12
3.0.54
1
wallabag/wallabag:2.4.25e4c26a7fb4a
phpseclib/phpseclib@3.0.6
3.0.54
1
ghcr.io/libretime/libretime-legacy:latest35b4531189c2
phpseclib/phpseclib@3.0.42
3.0.54
1
ghcr.io/linuxserver/bookstack:version-v24.12.1cc795b254b73
phpseclib/phpseclib@3.0.43
3.0.54
1
ghcr.io/linuxserver/bookstack:version-v21.12f05447347ff1
phpseclib/phpseclib@3.0.12
3.0.54
1
ghcr.io/monicahq/monica-next:main8be69156acbb
phpseclib/phpseclib@3.0.46
3.0.54
1
ghcr.io/wbstack/api:8x.9.11eee94f9f7a53
phpseclib/phpseclib@3.0.14
3.0.54
1

syft 1.42.1 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.