StackRadar

CVE-2026-56208

High

Advisory

Published 19 Jun 2026In the index since 5 Sept 2026
Severity
High
worst across findings
CVSS
7.6
base score, highest
EPSS
0.004
36th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
254
of 17,781 indexed, latest versions
Container images
262
deployed by those charts
Fix available
1 of 1
affected package

The matching OSV records carry no description.

Carried by container images the latest versions of 254 of 17,781 indexed charts deploy, on 262 images.

Affected packageAffected versionsFixed inImages
aomdeb1.0.0.errata1-3+deb11u1build0.20.04.1, 1.0.0.errata1-3build1, 3.1.0-0ubuntu1~20.04.sav0, 3.3.0-1+8 more3.6.0-1+deb12u3, 3.12.1-1+deb13u1262
OSV records
DEBIAN-CVE-2026-56208UBUNTU-CVE-2026-56208

Charts affected

254 by stars
ChartLatestAffected imagesRadar Score
napcatredish101Verified publisher0.1.31 of 1See more

napcat redish101 0.1.3

1 of the 1 container images this version deploys carry CVE-2026-56208.

Container imageDigestPackageFixed in
mlikiowa/napcat-docker:latest1336a777f9a4
aom@3.3.0-1
no fix listed

Open the chart page →

7,405
rocketadminrocketadminOfficialVerified publisher1.0.421 of 1See more

rocketadmin rocketadmin 1.0.42

1 of the 1 container images this version deploys carry CVE-2026-56208.

Container imageDigestPackageFixed in
rocketadmin/rocketadmin:1.17.710955ef540b9
aom@3.6.0-1+deb12u2
3.6.0-1+deb12u3

Open the chart page →

5,482
routehub-client-hubroutehub-helm1.0.01 of 3See more

routehub-client-hub routehub-helm 1.0.0

1 of the 3 container images this version deploys carry CVE-2026-56208.

Container imageDigestPackageFixed in
timescale/timescaledb-ha:pg16d7db8f1085a3
aom@3.3.0-1ubuntu0.1
no fix listed

Open the chart page →

12,930
rstudio-pmrstudioVerified publisher0.20.51 of 1See more

rstudio-pm rstudio 0.20.5

1 of the 1 container images this version deploys carry CVE-2026-56208.

Container imageDigestPackageFixed in
posit/package-manager:2026.09.0-ubuntu-24.04527493ef621b
aom@3.8.2-2ubuntu0.1
no fix listed

Open the chart page →

1,324
baikalrubxkubeVerified publisher1.3.11 of 1See more

baikal rubxkube 1.3.1

1 of the 1 container images this version deploys carry CVE-2026-56208.

Container imageDigestPackageFixed in
ckulka/baikal:0.10.1-nginx434bdd162247
aom@3.6.0-1+deb12u1
3.6.0-1+deb12u3

Open the chart page →

5,315
kyoorubxkubeVerified publisher0.1.102 of 9See more

kyoo rubxkube 0.1.10

2 of the 9 container images this version deploys carry CVE-2026-56208.

Container imageDigestPackageFixed in
ghcr.io/zoriya/kyoo_autosync:4.7.1fbba58ddb1a6
aom@3.6.0-1+deb12u1
3.6.0-1+deb12u3
ghcr.io/zoriya/kyoo_scanner:4.7.17dc0ee57b628
aom@3.6.0-1+deb12u1
3.6.0-1+deb12u3

Open the chart page →

30,234
sentry-k8ssentry-k8sVerified publisher1.4.11 of 11See more

sentry-k8s sentry-k8s 1.4.1

1 of the 11 container images this version deploys carry CVE-2026-56208.

Container imageDigestPackageFixed in
ghcr.io/getsentry/taskbroker:26.7.264d0da74a578
aom@3.6.0-1+deb12u2
3.6.0-1+deb12u3

Open the chart page →

16,449
smarter-demosmarterOfficialVerified publisher0.1.52 of 7See more

smarter-demo smarter 0.1.5

2 of the 7 container images this version deploys carry CVE-2026-56208.

Container imageDigestPackageFixed in
ghcr.io/smarter-project/gstreamer:v1.0.25ecb16015aa8
aom@1.0.0.errata1-3build1
no fix listed
ghcr.io/smarter-project/image-detector:v2.5.31dcca70c6446
aom@1.0.0.errata1-3build1
no fix listed

Open the chart page →

45,832
sogosogoVerified publisher0.3.51 of 2See more

sogo sogo 0.3.5

1 of the 2 container images this version deploys carry CVE-2026-56208.

Container imageDigestPackageFixed in
sonroyaalmerol/docker-sogo:5.12.43f60f3abe990
aom@3.12.1-1
3.12.1-1+deb13u1

Open the chart page →

7,126
nginx-chartsomnath-chartVerified publisher0.1.91 of 1See more

nginx-chart somnath-chart 0.1.9

1 of the 1 container images this version deploys carry CVE-2026-56208.

Container imageDigestPackageFixed in
somnathmore/custom-nginx:v2bdfc06cad4ec
aom@3.6.0-1
3.6.0-1+deb12u3

Open the chart page →

5,676
app-fullsynkubeVerified publisher1.0.01 of 1See more

app-full synkube 1.0.0

1 of the 1 container images this version deploys carry CVE-2026-56208.

Container imageDigestPackageFixed in
library/nginx:latest6e23479198b9
aom@3.12.1-1
3.12.1-1+deb13u1

Open the chart page →

3,240
unitycatalogunitycatalogVerified publisher0.0.21 of 4See more

unitycatalog unitycatalog 0.0.2

1 of the 4 container images this version deploys carry CVE-2026-56208.

Container imageDigestPackageFixed in
ghcr.io/sdwbgn/unitycatalog-helm/docker/unitycatalog-ui:0.2.1-5d668c1ed07e7ca098d
aom@3.6.0-1+deb12u1
3.6.0-1+deb12u3

Open the chart page →

12,581
wordpress-e2e-setupwoocommerce-e2e-setup0.1.11 of 2See more

wordpress-e2e-setup woocommerce-e2e-setup 0.1.1

1 of the 2 container images this version deploys carry CVE-2026-56208.

Container imageDigestPackageFixed in
library/wordpress:6.8-apache30bff39330d1
aom@3.12.1-1
3.12.1-1+deb13u1

Open the chart page →

7,696
wordpress-helmwordpress-helm0.2.91 of 4See more

wordpress-helm wordpress-helm 0.2.9

1 of the 4 container images this version deploys carry CVE-2026-56208.

Container imageDigestPackageFixed in
aapjeisbaas/wp-frankenphp:v0.2.26b261abc7fb0
aom@3.12.1-1
3.12.1-1+deb13u1

Open the chart page →

8,217
music-assistant-serverandibraeuVerified publisher2.1.21 of 1See more

music-assistant-server andibraeu 2.1.2

1 of the 1 container images this version deploys carry CVE-2026-56208.

Container imageDigestPackageFixed in
ghcr.io/music-assistant/server:2.9.950666a6f8d7f
aom@3.6.0-1+deb12u2
3.6.0-1+deb12u3

Open the chart page →

5,817
mathesarandrenarchyVerified publisher1.8.01 of 1See more

mathesar andrenarchy 1.8.0

1 of the 1 container images this version deploys carry CVE-2026-56208.

Container imageDigestPackageFixed in
mathesar/mathesar:0.12.0091757cb01fe
aom@3.6.0-1+deb12u2
3.6.0-1+deb12u3

Open the chart page →

7,239
games-on-whalesangelnu2.0.02 of 7See more

games-on-whales angelnu 2.0.0

2 of the 7 container images this version deploys carry CVE-2026-56208.

Container imageDigestPackageFixed in
andrewmackrodt/firefox-x11:142.0.1-r133f9080470c9
aom@3.3.0-1ubuntu0.1
no fix listed
ghcr.io/games-on-whales/retroarch:1.0.0103fbcec2314
aom@1.0.0.errata1-3build1
no fix listed

Open the chart page →

42,126
antrea-uiantreaVerified publisher0.8.01 of 2See more

antrea-ui antrea 0.8.0

1 of the 2 container images this version deploys carry CVE-2026-56208.

Container imageDigestPackageFixed in
antrea/antrea-ui-frontend:v0.8.0ee9686bcefb8
aom@3.12.1-1
3.12.1-1+deb13u1

Open the chart page →

3,239
dokuwikiarea-42Verified publisher0.1.81 of 1See more

dokuwiki area-42 0.1.8

1 of the 1 container images this version deploys carry CVE-2026-56208.

Container imageDigestPackageFixed in
dokuwiki/dokuwiki:2025-05-14af08ecfdda239
aom@3.12.1-1
3.12.1-1+deb13u1

Open the chart page →

7,489
smartorchestratorassist-iot-smart-orchestrator4.0.01 of 14See more

smartorchestrator assist-iot-smart-orchestrator 4.0.0

1 of the 14 container images this version deploys carry CVE-2026-56208.

Container imageDigestPackageFixed in
assistiot/smart-orchestrator_scheduler_mc:latestb1dbe4d62a03
aom@3.6.0-1
3.6.0-1+deb12u3

Open the chart page →

45,363
videoaugmentationassist-iot-video-augmentation0.1.01 of 3See more

videoaugmentation assist-iot-video-augmentation 0.1.0

1 of the 3 container images this version deploys carry CVE-2026-56208.

Container imageDigestPackageFixed in
assistiot/video_augmentation:runner-cpu-lateste5ae539ce2cb
aom@1.0.0.errata1-3+deb11u1build0.20.04.1
no fix listed

Open the chart page →

13,913
astrotrekastria0.0.22 of 4See more

astrotrek astria 0.0.2

2 of the 4 container images this version deploys carry CVE-2026-56208.

Container imageDigestPackageFixed in
timescale/timescaledb-ha:pg15-latesta8e3322e1cf9
aom@3.3.0-1
no fix listed
ghcr.io/astriaorg/astrotrek:0.1.05889bea38e56
aom@3.6.0-1+deb12u1
3.6.0-1+deb12u3

Open the chart page →

32,501
webappavzi-webapp0.1.01 of 1See more

webapp avzi-webapp 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-56208.

Container imageDigestPackageFixed in
avzini/web-app:latestf40b30210ed0
aom@3.6.0-1
3.6.0-1+deb12u3

Open the chart page →

6,297
aws9helmaws9helm0.1.04 of 4See more

aws9helm aws9helm 0.1.0

4 of the 4 container images this version deploys carry CVE-2026-56208.

Container imageDigestPackageFixed in
kuzwolka/aws9:main1ad759b961b1
aom@3.6.0-1+deb12u1
3.6.0-1+deb12u3
kuzwolka/aws9:news3e8880fbbb96
aom@3.6.0-1+deb12u1
3.6.0-1+deb12u3
kuzwolka/aws9:blog4a7707410bf1
aom@3.6.0-1+deb12u1
3.6.0-1+deb12u3
kuzwolka/aws9:shop84a9d9766345
aom@3.6.0-1+deb12u1
3.6.0-1+deb12u3

Open the chart page →

18,344
basic-auth-s3-nginxbasic-auth-s3-nginxVerified publisher1.0.01 of 1See more

basic-auth-s3-nginx basic-auth-s3-nginx 1.0.0

1 of the 1 container images this version deploys carry CVE-2026-56208.

Container imageDigestPackageFixed in
dachichang/basic-auth-s3-nginx:1.0.07ccac90a935e
aom@3.6.0-1
3.6.0-1+deb12u3

Open the chart page →

6,297
colosseumbook-k8sinfra-v21.0.182 of 5See more

colosseum book-k8sinfra-v2 1.0.18

2 of the 5 container images this version deploys carry CVE-2026-56208.

Container imageDigestPackageFixed in
sysnet4admin/colosseum-cms:loge74b43c7f492
aom@3.6.0-1+deb12u1
3.6.0-1+deb12u3
sysnet4admin/colosseum-prm:log5802bfcd7fed
aom@3.6.0-1+deb12u1
3.6.0-1+deb12u3

Open the chart page →

26,996
node-appbryopsida0.5.12 of 2See more

node-app bryopsida 0.5.1

2 of the 2 container images this version deploys carry CVE-2026-56208.

Container imageDigestPackageFixed in
library/node:ltsbe23f54a88d3
aom@3.6.0-1+deb12u2
3.6.0-1+deb12u3
ghcr.io/bryopsida/k8s-dev-pod:main82d0b161161d
aom@3.8.2-2ubuntu0.1
no fix listed

Open the chart page →

14,352
nginx-s3-gatewaycamptocamp31.0.01 of 1See more

nginx-s3-gateway camptocamp3 1.0.0

1 of the 1 container images this version deploys carry CVE-2026-56208.

Container imageDigestPackageFixed in
ghcr.io/nginxinc/nginx-s3-gateway/nginx-oss-s3-gateway:unprivileged-oss-202503313db8145349a3
aom@3.6.0-1+deb12u1
3.6.0-1+deb12u3

Open the chart page →

5,039
tetragon-policy-buildercamptocamp30.1.11 of 1See more

tetragon-policy-builder camptocamp3 0.1.1

1 of the 1 container images this version deploys carry CVE-2026-56208.

Container imageDigestPackageFixed in
ghcr.io/camptocamp/tetragon-policy-builder:master0e99f12bb040
aom@3.6.0-1+deb12u1
3.6.0-1+deb12u3

Open the chart page →

10,776
caninecanine0.1.101 of 7See more

canine canine 0.1.10

1 of the 7 container images this version deploys carry CVE-2026-56208.

Container imageDigestPackageFixed in
ghcr.io/caninehq/canine:latesta058034ca006
aom@3.6.0-1+deb12u2
3.6.0-1+deb12u3

Open the chart page →

14,130
calibre-webcharts-derwitt-devVerified publisher1.1.21 of 1See more

calibre-web charts-derwitt-dev 1.1.2

1 of the 1 container images this version deploys carry CVE-2026-56208.

Container imageDigestPackageFixed in
ghcr.io/wittdennis/calibre-web:1.1.1aa7d5d5dd6be
aom@3.6.0-1+deb12u2
3.6.0-1+deb12u3

Open the chart page →

4,911
kube-acp-stackcloudentity2.28.01 of 7See more

kube-acp-stack cloudentity 2.28.0

1 of the 7 container images this version deploys carry CVE-2026-56208.

Container imageDigestPackageFixed in
timescale/timescaledb-ha:pg17.2-ts2.18.2e8d0a9cc3db5
aom@3.3.0-1
no fix listed

Open the chart page →

20,900
metaflowcluster-deploy0.2.21 of 1See more

metaflow cluster-deploy 0.2.2

1 of the 1 container images this version deploys carry CVE-2026-56208.

Container imageDigestPackageFixed in
public.ecr.aws/outerbounds/metaflow_metadata_service:v2.4.13f7567ce3419d
aom@3.6.0-1+deb12u1
3.6.0-1+deb12u3

Open the chart page →

8,009
pbcore-utilcluster-deploy0.0.11 of 1See more

pbcore-util cluster-deploy 0.0.1

1 of the 1 container images this version deploys carry CVE-2026-56208.

Container imageDigestPackageFixed in
ghcr.io/wgbh-mla/pbcore-util:pr-66e04659a3baa
aom@3.6.0-1+deb12u2
3.6.0-1+deb12u3

Open the chart page →

9,128
opencloudcommunity-opencloud3.0.01 of 11See more

opencloud community-opencloud 3.0.0

1 of the 11 container images this version deploys carry CVE-2026-56208.

Container imageDigestPackageFixed in
apache/tika:latest-full80072bb73dd3
aom@3.13.1-2
no fix listed

Open the chart page →

3,773
datumcosmicrocks1.0.51 of 2See more

datum cosmicrocks 1.0.5

1 of the 2 container images this version deploys carry CVE-2026-56208.

Container imageDigestPackageFixed in
ghcr.io/cosmicrocks/datum:v0.4.0beta76771c3cc8c3
aom@3.8.2-2ubuntu0.1
no fix listed

Open the chart page →

2,944
dev-code-servercosmoVerified publisher0.0.71 of 2See more

dev-code-server cosmo 0.0.7

1 of the 2 container images this version deploys carry CVE-2026-56208.

Container imageDigestPackageFixed in
ghcr.io/cosmo-workspace/dev-code-server:v0.0.316fda01ae58a
aom@3.6.0-1+deb12u1
3.6.0-1+deb12u3

Open the chart page →

14,559
csghubcsghubVerified publisher2.4.31 of 34See more

csghub csghub 2.4.3

1 of the 34 container images this version deploys carry CVE-2026-56208.

Container imageDigestPackageFixed in
opencsghq/agenticflow:ee-v0.6-52f03fead54db
aom@3.6.0-1+deb12u2
3.6.0-1+deb12u3

Open the chart page →

58,897
rtcsic-charts0.1.11 of 5See more

rt csic-charts 0.1.1

1 of the 5 container images this version deploys carry CVE-2026-56208.

Container imageDigestPackageFixed in
firefart/requesttracker:5.0.40d6249906d8c
aom@3.6.0-1
3.6.0-1+deb12u3

Open the chart page →

15,380
cypikcypik-app0.1.01 of 2See more

cypik cypik-app 0.1.0

1 of the 2 container images this version deploys carry CVE-2026-56208.

Container imageDigestPackageFixed in
library/nginx:1.25a484819eb602
aom@3.6.0-1
3.6.0-1+deb12u3

Open the chart page →

7,503
damap-chartdamapVerified publisher0.3.01 of 5See more

damap-chart damap 0.3.0

1 of the 5 container images this version deploys carry CVE-2026-56208.

Container imageDigestPackageFixed in
ghcr.io/damap-org/damap-frontend:5.0.1609f48af4efc
aom@3.12.1-1
3.12.1-1+deb13u1

Open the chart page →

13,936
db-connection-testdb-connection-testVerified publisher0.1.01 of 1See more

db-connection-test db-connection-test 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-56208.

Container imageDigestPackageFixed in
felipecs8/app-db-connection-test:v129e06c9c6385
aom@3.6.0-1+deb12u1
3.6.0-1+deb12u3

Open the chart page →

10,090
linkdingdeimosfr-charts1.0.31 of 1See more

linkding deimosfr-charts 1.0.3

1 of the 1 container images this version deploys carry CVE-2026-56208.

Container imageDigestPackageFixed in
sissbruecker/linkding:1.35.00c5dddf0b37c
aom@3.6.0-1+deb12u1
3.6.0-1+deb12u3

Open the chart page →

6,075
apachedevops0.1.01 of 4See more

apache devops 0.1.0

1 of the 4 container images this version deploys carry CVE-2026-56208.

Container imageDigestPackageFixed in
ghcr.io/codingducksrl/laravel:8.15be52524664c
aom@3.3.0-1
no fix listed

Open the chart page →

30,031
laraveldevops0.10.31 of 4See more

laravel devops 0.10.3

1 of the 4 container images this version deploys carry CVE-2026-56208.

Container imageDigestPackageFixed in
ghcr.io/codingducksrl/laravel:8.15be52524664c
aom@3.3.0-1
no fix listed

Open the chart page →

29,033
devtron-enterprisedevtron48.0.01 of 28See more

devtron-enterprise devtron 48.0.0

1 of the 28 container images this version deploys carry CVE-2026-56208.

Container imageDigestPackageFixed in
quay.io/devtron/notifier:9804331c-372-39294709c7da19c5a
aom@3.6.0-1+deb12u2
3.6.0-1+deb12u3

Open the chart page →

68,240
devtron-enterprisedevtron-labs48.0.01 of 28See more

devtron-enterprise devtron-labs 48.0.0

1 of the 28 container images this version deploys carry CVE-2026-56208.

Container imageDigestPackageFixed in
quay.io/devtron/notifier:9804331c-372-39294709c7da19c5a
aom@3.6.0-1+deb12u2
3.6.0-1+deb12u3

Open the chart page →

68,240
difydify1.0.01 of 4See more

dify dify 1.0.0

1 of the 4 container images this version deploys carry CVE-2026-56208.

Container imageDigestPackageFixed in
langgenius/dify-plugin-daemon:main-localda995c129e2f
aom@3.8.2-2ubuntu0.1
no fix listed

Open the chart page →

19,224
ownclouddjjudas21Verified publisher0.3.231 of 3See more

owncloud djjudas21 0.3.23

1 of the 3 container images this version deploys carry CVE-2026-56208.

Container imageDigestPackageFixed in
owncloud/server:10.16.3b3f9efdcd7f7
aom@3.3.0-1ubuntu0.1
no fix listed

Open the chart page →

10,035
photoprismdjjudas21Verified publisher99.99.991 of 1See more

photoprism djjudas21 99.99.99

1 of the 1 container images this version deploys carry CVE-2026-56208.

Container imageDigestPackageFixed in
photoprism/photoprism:240711-cefc6fd632ca74
aom@3.8.2-2ubuntu0.1
no fix listed

Open the chart page →

16,954

Container images carrying it

262 by charts deploying them

A fixed version is listed for 1 of the 1 affected package.

Container imageDigestPackageFixed inUsed by
public.ecr.aws/jtekt-corporation/image-storage-service-gui:v1.9.434823c8abe00
aom@3.6.0-1+deb12u1
3.6.0-1+deb12u3
1
public.ecr.aws/jtekt-corporation/shinsei-manager:v2.8.15cd62142d6ed
aom@3.6.0-1
3.6.0-1+deb12u3
1
public.ecr.aws/jtekt-corporation/shinsei-manager-front:v1.5.5f8fb4eea4071
aom@3.6.0-1
3.6.0-1+deb12u3
1
public.ecr.aws/jtekt-corporation/time-series-storage-service:v1.5.1046ef5c9ed50
aom@3.6.0-1
3.6.0-1+deb12u3
1
public.ecr.aws/outerbounds/metaflow_metadata_service:v2.4.13f7567ce3419d
aom@3.6.0-1+deb12u1
3.6.0-1+deb12u3
1
public.ecr.aws/truefoundrycloud/async-service-distributor:5d48113bc678d694a0c8f8dabb2207c5aa2cfc53f74851ce31f5
aom@3.6.0-1
3.6.0-1+deb12u3
1
quay.io/go-skynet/local-ai:latestd78cd113b2bc
aom@3.8.2-2ubuntu0.1
no fix listed
1
quay.io/mittwald/kube-httpcache:stable2169032c5840
aom@3.6.0-1+deb12u1
3.6.0-1+deb12u3
1
quay.io/yushiwho/api:e1f9d77e0d9b93dbf2b
aom@3.6.0-1
3.6.0-1+deb12u3
1
registry.gitlab.com/enbuild-staging/vivsoft-platform-ui/enbuild-frontend:1.0.3166353ce9bf98
aom@3.12.1-1
3.12.1-1+deb13u1
1
registry.gitlab.com/enbuild-staging/vivsoft-platform-ui/enbuild-mq-consumer:1.0.310e3cd8c7776d
aom@3.6.0-1+deb12u2
3.6.0-1+deb12u3
1
registry.gitlab.com/school_guy/docker-typo3:13.4.30-197d868ed76185d7270d
aom@3.6.0-1+deb12u2
3.6.0-1+deb12u3
1

syft 1.42.1 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.