StackRadar

CVE-2026-56208

High

Advisory

Published 19 Jun 2026In the index since 5 Sept 2026
Severity
High
worst across findings
CVSS
7.6
base score, highest
EPSS
0.004
36th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
254
of 17,781 indexed, latest versions
Container images
262
deployed by those charts
Fix available
1 of 1
affected package

The matching OSV records carry no description.

Carried by container images the latest versions of 254 of 17,781 indexed charts deploy, on 262 images.

Affected packageAffected versionsFixed inImages
aomdeb1.0.0.errata1-3+deb11u1build0.20.04.1, 1.0.0.errata1-3build1, 3.1.0-0ubuntu1~20.04.sav0, 3.3.0-1+8 more3.6.0-1+deb12u3, 3.12.1-1+deb13u1262
OSV records
DEBIAN-CVE-2026-56208UBUNTU-CVE-2026-56208

Charts affected

254 by stars
ChartLatestAffected imagesRadar Score
wizarrdjjudas21Verified publisher0.1.51 of 1See more

wizarr djjudas21 0.1.5

1 of the 1 container images this version deploys carry CVE-2026-56208.

Container imageDigestPackageFixed in
ghcr.io/wizarrrr/wizarr:4.2.0-beta.3d19d886d5090
aom@3.6.0-1
3.6.0-1+deb12u3

Open the chart page →

14,627
dominodomino-iisasVerified publisher0.3.11 of 3See more

domino domino-iisas 0.3.1

1 of the 3 container images this version deploys carry CVE-2026-56208.

Container imageDigestPackageFixed in
ghcr.io/iisas/domino-frontend:k8s8e53861be292
aom@3.6.0-1+deb12u2
3.6.0-1+deb12u3

Open the chart page →

10,270
codecovdoubanVerified publisher0.2.41 of 8See more

codecov douban 0.2.4

1 of the 8 container images this version deploys carry CVE-2026-56208.

Container imageDigestPackageFixed in
timescale/timescaledb-ha:pg14.6-ts2.9.1-p1cdb9ae118899
aom@3.3.0-1
no fix listed

Open the chart page →

24,917
drogue-cloud-examplesdrogue-iotVerified publisher0.7.111 of 6See more

drogue-cloud-examples drogue-iot 0.7.11

1 of the 6 container images this version deploys carry CVE-2026-56208.

Container imageDigestPackageFixed in
timescale/timescaledb-ha:pg14-ts2.6-latested719c0cd19d
aom@3.3.0-1
no fix listed

Open the chart page →

30,699
kube-ecp-stackemqx-operator2.5.11 of 16See more

kube-ecp-stack emqx-operator 2.5.1

1 of the 16 container images this version deploys carry CVE-2026-56208.

Container imageDigestPackageFixed in
emqx/ecp-ui:2.5.1e33e9816f147
aom@3.6.0-1+deb12u1
3.6.0-1+deb12u3

Open the chart page →

23,685
wordpresseoc-chartsVerified publisher0.14.41 of 1See more

wordpress eoc-charts 0.14.4

1 of the 1 container images this version deploys carry CVE-2026-56208.

Container imageDigestPackageFixed in
library/wordpress:6.8.3-apache30bff39330d1
aom@3.12.1-1
3.12.1-1+deb13u1

Open the chart page →

7,233
powfaucetethereum-helm-chartsVerified publisher1.2.11 of 1See more

powfaucet ethereum-helm-charts 1.2.1

1 of the 1 container images this version deploys carry CVE-2026-56208.

Container imageDigestPackageFixed in
pk910/powfaucet:v2-stable3dcae6a62896
aom@3.6.0-1+deb12u1
3.6.0-1+deb12u3

Open the chart page →

4,456
beeport-uiethersphereVerified publisher0.76.21 of 3See more

beeport-ui ethersphere 0.76.2

1 of the 3 container images this version deploys carry CVE-2026-56208.

Container imageDigestPackageFixed in
library/node:ltsbe23f54a88d3
aom@3.6.0-1+deb12u2
3.6.0-1+deb12u3

Open the chart page →

7,368
multichain-uiethersphereVerified publisher0.73.11 of 3See more

multichain-ui ethersphere 0.73.1

1 of the 3 container images this version deploys carry CVE-2026-56208.

Container imageDigestPackageFixed in
library/node:ltsbe23f54a88d3
aom@3.6.0-1+deb12u2
3.6.0-1+deb12u3

Open the chart page →

7,368
ferriscompanyferriscompany0.1.01 of 1See more

ferriscompany ferriscompany 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-56208.

Container imageDigestPackageFixed in
ghcr.io/libreconnect/ferriscompany:0.1.0-rc6ed86db9f0efe
aom@3.6.0-1+deb12u1
3.6.0-1+deb12u3

Open the chart page →

10,741
business-api-ecosystemfiware1.1.01 of 4See more

business-api-ecosystem fiware 1.1.0

1 of the 4 container images this version deploys carry CVE-2026-56208.

Container imageDigestPackageFixed in
fiware/biz-ecosystem-logic-proxy:11.20.3d551a13e8278
aom@3.6.0-1+deb12u1
3.6.0-1+deb12u3

Open the chart page →

64,489
scanservjsgabe565Verified publisher0.9.21 of 1See more

scanservjs gabe565 0.9.2

1 of the 1 container images this version deploys carry CVE-2026-56208.

Container imageDigestPackageFixed in
sbs20/scanservjs:release-v3.0.3dad1fd6e9a98
aom@3.6.0-1
3.6.0-1+deb12u3

Open the chart page →

13,241
airsonicgeek-cookbookVerified publisher6.4.21 of 1See more

airsonic geek-cookbook 6.4.2

1 of the 1 container images this version deploys carry CVE-2026-56208.

Container imageDigestPackageFixed in
airsonicadvanced/airsonic-advanced:latestf7cbafac2806
aom@3.1.0-0ubuntu1~20.04.sav0
no fix listed

Open the chart page →

18,230
icinga2geek-cookbookVerified publisher4.2.01 of 1See more

icinga2 geek-cookbook 4.2.0

1 of the 1 container images this version deploys carry CVE-2026-56208.

Container imageDigestPackageFixed in
jordan/icinga2:latestf75025fe8ea8
aom@3.6.0-1+deb12u2
3.6.0-1+deb12u3

Open the chart page →

9,077
lidarrgeek-cookbookVerified publisher14.2.21 of 1See more

lidarr geek-cookbook 14.2.2

1 of the 1 container images this version deploys carry CVE-2026-56208.

Container imageDigestPackageFixed in
ghcr.io/k8s-at-home/lidarr:v1.0.0.225554ebc1f90963
aom@1.0.0.errata1-3build1
no fix listed

Open the chart page →

14,283
mopidygeek-cookbookVerified publisher0.1.21 of 1See more

mopidy geek-cookbook 0.1.2

1 of the 1 container images this version deploys carry CVE-2026-56208.

Container imageDigestPackageFixed in
jaedb/iris:latest048cfbf58d57
aom@3.6.0-1+deb12u1
3.6.0-1+deb12u3

Open the chart page →

12,958
photoprismgeek-cookbookVerified publisher7.2.01 of 1See more

photoprism geek-cookbook 7.2.0

1 of the 1 container images this version deploys carry CVE-2026-56208.

Container imageDigestPackageFixed in
photoprism/photoprism:220629-jammy2954334adbda
aom@3.3.0-1
no fix listed

Open the chart page →

19,503
xtevegeek-cookbookVerified publisher8.4.21 of 1See more

xteve geek-cookbook 8.4.2

1 of the 1 container images this version deploys carry CVE-2026-56208.

Container imageDigestPackageFixed in
ghcr.io/k8s-at-home/xteve:v2.2.0.200292b3614670f
aom@1.0.0.errata1-3build1
no fix listed

Open the chart page →

17,929
opentelemetry-demogpg-dev0.33.81 of 27See more

opentelemetry-demo gpg-dev 0.33.8

1 of the 27 container images this version deploys carry CVE-2026-56208.

Container imageDigestPackageFixed in
ghcr.io/open-telemetry/demo:1.12.0-imageprovider4e322858fe56
aom@3.6.0-1
3.6.0-1+deb12u3

Open the chart page →

49,025
heliconehelicone0.1.421 of 14See more

helicone helicone 0.1.42

1 of the 14 container images this version deploys carry CVE-2026-56208.

Container imageDigestPackageFixed in
helicone/supabase-migration-runner:v2025.03.05-14a913936c97b
aom@3.6.0-1
3.6.0-1+deb12u3

Open the chart page →

24,995
hello-worldhello-world-pponyVerified publisher0.3.01 of 1See more

hello-world hello-world-ppony 0.3.0

1 of the 1 container images this version deploys carry CVE-2026-56208.

Container imageDigestPackageFixed in
library/nginx:1.25.49ff236ed47fe
aom@3.6.0-1
3.6.0-1+deb12u3

Open the chart page →

5,839
chart-bookhelm-deploy-book0.1.01 of 3See more

chart-book helm-deploy-book 0.1.0

1 of the 3 container images this version deploys carry CVE-2026-56208.

Container imageDigestPackageFixed in
dannielkil/book-frontend:latest937993927694
aom@3.6.0-1+deb12u1
3.6.0-1+deb12u3

Open the chart page →

9,122
archiveboxhelmforgeVerified publisher1.1.121 of 1See more

archivebox helmforge 1.1.12

1 of the 1 container images this version deploys carry CVE-2026-56208.

Container imageDigestPackageFixed in
archivebox/archivebox:0.7.41a5a37331091
aom@3.6.0-1+deb12u2
3.6.0-1+deb12u3

Open the chart page →

7,633
castopodhelmforgeVerified publisher1.2.71 of 3See more

castopod helmforge 1.2.7

1 of the 3 container images this version deploys carry CVE-2026-56208.

Container imageDigestPackageFixed in
castopod/castopod:1.15.54e4f0440520f
aom@3.12.1-1
3.12.1-1+deb13u1

Open the chart page →

9,342
drupalhelmforgeVerified publisher1.2.131 of 2See more

drupal helmforge 1.2.13

1 of the 2 container images this version deploys carry CVE-2026-56208.

Container imageDigestPackageFixed in
library/drupal:11.4.6-php8.5-apache-bookworm28f7931ecbcb
aom@3.6.0-1+deb12u2
3.6.0-1+deb12u3

Open the chart page →

3,802
entehelmforgeVerified publisher1.0.21 of 4See more

ente helmforge 1.0.2

1 of the 4 container images this version deploys carry CVE-2026-56208.

Container imageDigestPackageFixed in
ghcr.io/ente/web:5ab0c5b4c7a89c4e470ef6f793600da33cebf35d3f4864eb7f11
aom@3.12.1-1
3.12.1-1+deb13u1

Open the chart page →

4,201
immichhelmforgeVerified publisher1.2.81 of 5See more

immich helmforge 1.2.8

1 of the 5 container images this version deploys carry CVE-2026-56208.

Container imageDigestPackageFixed in
ghcr.io/immich-app/immich-server:v3.1.0b434cb9287ee
aom@3.12.1-1
3.12.1-1+deb13u1

Open the chart page →

11,042
komgahelmforgeVerified publisher1.4.151 of 1See more

komga helmforge 1.4.15

1 of the 1 container images this version deploys carry CVE-2026-56208.

Container imageDigestPackageFixed in
gotson/komga:1.26.36c2a967bbe9a
aom@3.13.1-2
no fix listed

Open the chart page →

2,261
minecrafthelmforgeVerified publisher1.5.31 of 1See more

minecraft helmforge 1.5.3

1 of the 1 container images this version deploys carry CVE-2026-56208.

Container imageDigestPackageFixed in
itzg/minecraft-server:2026.9.04e29d14082d9
aom@3.8.2-2ubuntu0.1
no fix listed

Open the chart page →

4,639
myapphelmingapp0.1.01 of 1See more

myapp helmingapp 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-56208.

Container imageDigestPackageFixed in
muhammedgamal/fp23:latest74b4cd69b6fa
aom@3.6.0-1
3.6.0-1+deb12u3

Open the chart page →

12,607
openbashelm-openbasVerified publisher1.8.141 of 7See more

openbas helm-openbas 1.8.14

1 of the 7 container images this version deploys carry CVE-2026-56208.

Container imageDigestPackageFixed in
openbas/caldera-server:5.1.0a277796d9724
aom@3.6.0-1+deb12u1
3.6.0-1+deb12u3

Open the chart page →

25,017
samplehelmapphelmtraining3.0.01 of 1See more

samplehelmapp helmtraining 3.0.0

1 of the 1 container images this version deploys carry CVE-2026-56208.

Container imageDigestPackageFixed in
praravind1801/helmimages:3.0.0f29d637b9ce1
aom@3.6.0-1
3.6.0-1+deb12u3

Open the chart page →

5,973
nominatimheywood8-helm-chartsVerified publisher3.10.81 of 3See more

nominatim heywood8-helm-charts 3.10.8

1 of the 3 container images this version deploys carry CVE-2026-56208.

Container imageDigestPackageFixed in
mediagis/nominatim:4.2d0eae7b51374
aom@3.3.0-1
no fix listed

Open the chart page →

14,290
paperlesshomelabcihelmchartstestVerified publisher9.1.91 of 1See more

paperless homelabcihelmchartstest 9.1.9

1 of the 1 container images this version deploys carry CVE-2026-56208.

Container imageDigestPackageFixed in
ghcr.io/paperless-ngx/paperless-ngx:2.0.1ab255bea133e
aom@3.6.0-1
3.6.0-1+deb12u3

Open the chart page →

16,384
hydrahydraVerified publisher0.9.51 of 2See more

hydra hydra 0.9.5

1 of the 2 container images this version deploys carry CVE-2026-56208.

Container imageDigestPackageFixed in
ghcr.io/smarter-project/hydra/isolated-vm:main4457b79b24cd
aom@3.6.0-1+deb12u2
3.6.0-1+deb12u3

Open the chart page →

9,011
isolated-vmhydraVerified publisher0.9.41 of 1See more

isolated-vm hydra 0.9.4

1 of the 1 container images this version deploys carry CVE-2026-56208.

Container imageDigestPackageFixed in
ghcr.io/smarter-project/hydra/isolated-vm:main4457b79b24cd
aom@3.6.0-1+deb12u2
3.6.0-1+deb12u3

Open the chart page →

7,733
ilum-unity-catalogilumVerified publisher0.1.01 of 4See more

ilum-unity-catalog ilum 0.1.0

1 of the 4 container images this version deploys carry CVE-2026-56208.

Container imageDigestPackageFixed in
unitycatalog/unitycatalog-ui:main-aadc6fc3a688197b218
aom@3.6.0-1+deb12u1
3.6.0-1+deb12u3

Open the chart page →

11,812
itm-servicesintelVerified publisher2.0.01 of 8See more

itm-services intel 2.0.0

1 of the 8 container images this version deploys carry CVE-2026-56208.

Container imageDigestPackageFixed in
intel/dlstreamer-pipeline-server:2022.1.1-ubuntu20aa8f5483a2ef
aom@1.0.0.errata1-3build1
no fix listed

Open the chart page →

18,066
intelowlintelowl-helm6.6.1-01-06-20261 of 5See more

intelowl intelowl-helm 6.6.1-01-06-2026

1 of the 5 container images this version deploys carry CVE-2026-56208.

Container imageDigestPackageFixed in
intelowlproject/intelowl:v6.6.10b22e547ea6b
aom@3.6.0-1
3.6.0-1+deb12u3

Open the chart page →

17,852
opencloudjacobcolvinVerified publisher0.2.37 of 13See more

opencloud jacobcolvin 0.2.3

7 of the 13 container images this version deploys carry CVE-2026-56208.

Container imageDigestPackageFixed in
apache/tika:2.9.2.1-fullae0b86d3c4d0
aom@3.8.2-2build1
no fix listed
opencloudeu/web-extensions:unzip-1.0.01691ad6612a3
aom@3.6.0-1+deb12u1
3.6.0-1+deb12u3
opencloudeu/web-extensions:draw-io-1.0.027cb9b952f0d
aom@3.6.0-1+deb12u1
3.6.0-1+deb12u3
opencloudeu/web-extensions:external-sites-1.0.05b176baa3694
aom@3.6.0-1+deb12u1
3.6.0-1+deb12u3
opencloudeu/web-extensions:importer-1.0.06e8b2df6c5a4
aom@3.6.0-1+deb12u1
3.6.0-1+deb12u3
opencloudeu/web-extensions:progress-bars-1.0.082f888a34440
aom@3.6.0-1+deb12u1
3.6.0-1+deb12u3
opencloudeu/web-extensions:json-viewer-1.0.0e0ac35a9576e
aom@3.6.0-1+deb12u1
3.6.0-1+deb12u3

Open the chart page →

45,239
deconzjanip81-helm-chartsVerified publisher0.1.11 of 1See more

deconz janip81-helm-charts 0.1.1

1 of the 1 container images this version deploys carry CVE-2026-56208.

Container imageDigestPackageFixed in
deconzcommunity/deconz:2.29.2062de2362641
aom@3.6.0-1+deb12u1
3.6.0-1+deb12u3

Open the chart page →

10,780
jasperjasperVerified publisher1.0.2021 of 2See more

jasper jasper 1.0.202

1 of the 2 container images this version deploys carry CVE-2026-56208.

Container imageDigestPackageFixed in
ghcr.io/cjmalloy/jasper:v1.3.282726a947bb65b
aom@3.6.0-1+deb12u2
3.6.0-1+deb12u3

Open the chart page →

5,998
jasper-uijasperVerified publisher1.0.341 of 1See more

jasper-ui jasper 1.0.34

1 of the 1 container images this version deploys carry CVE-2026-56208.

Container imageDigestPackageFixed in
ghcr.io/cjmalloy/jasper-ui:v1.3.623246dc2160efe
aom@3.12.1-1
3.12.1-1+deb13u1

Open the chart page →

2,559
homebridgejespernohrVerified publisher0.2.01 of 1See more

homebridge jespernohr 0.2.0

1 of the 1 container images this version deploys carry CVE-2026-56208.

Container imageDigestPackageFixed in
homebridge/homebridge:latest77c685a40911
aom@3.8.2-2ubuntu0.1
no fix listed

Open the chart page →

2,149
image-storage-servicejtektVerified publisher0.4.32 of 4See more

image-storage-service jtekt 0.4.3

2 of the 4 container images this version deploys carry CVE-2026-56208.

Container imageDigestPackageFixed in
public.ecr.aws/jtekt-corporation/image-storage-service:v1.16.17b1493760c716
aom@3.6.0-1+deb12u1
3.6.0-1+deb12u3
public.ecr.aws/jtekt-corporation/image-storage-service-gui:v1.9.434823c8abe00
aom@3.6.0-1+deb12u1
3.6.0-1+deb12u3

Open the chart page →

22,589
shinsei-managerjtektVerified publisher0.2.07 of 8See more

shinsei-manager jtekt 0.2.0

7 of the 8 container images this version deploys carry CVE-2026-56208.

Container imageDigestPackageFixed in
moreillon/api-proxy:latestd7d4a5463525
aom@3.6.0-1+deb12u1
3.6.0-1+deb12u3
moreillon/group-manager:latest3caa8f710ee0
aom@3.6.0-1+deb12u2
3.6.0-1+deb12u3
moreillon/group-manager-front:latest5f0a38498271
aom@3.12.1-1
3.12.1-1+deb13u1
moreillon/user-manager:v5.0.2e1c9bfab5c16
aom@3.6.0-1
3.6.0-1+deb12u3
moreillon/user-manager-front:v5.0.3b067dbbbb6af
aom@3.6.0-1
3.6.0-1+deb12u3
public.ecr.aws/jtekt-corporation/shinsei-manager:v2.8.15cd62142d6ed
aom@3.6.0-1
3.6.0-1+deb12u3
public.ecr.aws/jtekt-corporation/shinsei-manager-front:v1.5.5f8fb4eea4071
aom@3.6.0-1
3.6.0-1+deb12u3

Open the chart page →

63,461
time-series-storagejtektVerified publisher0.1.101 of 2See more

time-series-storage jtekt 0.1.10

1 of the 2 container images this version deploys carry CVE-2026-56208.

Container imageDigestPackageFixed in
public.ecr.aws/jtekt-corporation/time-series-storage-service:v1.5.1046ef5c9ed50
aom@3.6.0-1
3.6.0-1+deb12u3

Open the chart page →

16,600
jupyter-hub-customizationsjupyter-jscVerified publisher0.27.171 of 4See more

jupyter-hub-customizations jupyter-jsc 0.27.17

1 of the 4 container images this version deploys carry CVE-2026-56208.

Container imageDigestPackageFixed in
library/nginx:1.291881968aff6f
aom@3.12.1-1
3.12.1-1+deb13u1

Open the chart page →

3,389
jupyter-nginxjupyter-jscVerified publisher0.1.31 of 1See more

jupyter-nginx jupyter-jsc 0.1.3

1 of the 1 container images this version deploys carry CVE-2026-56208.

Container imageDigestPackageFixed in
library/nginx:1.29.49dd288848f44
aom@3.12.1-1
3.12.1-1+deb13u1

Open the chart page →

3,508
k8s-dev-podk8s-dev-pod0.3.11 of 1See more

k8s-dev-pod k8s-dev-pod 0.3.1

1 of the 1 container images this version deploys carry CVE-2026-56208.

Container imageDigestPackageFixed in
ghcr.io/bryopsida/k8s-dev-pod:main82d0b161161d
aom@3.8.2-2ubuntu0.1
no fix listed

Open the chart page →

8,811

Container images carrying it

262 by charts deploying them

A fixed version is listed for 1 of the 1 affected package.

Container imageDigestPackageFixed inUsed by
public.ecr.aws/jtekt-corporation/image-storage-service-gui:v1.9.434823c8abe00
aom@3.6.0-1+deb12u1
3.6.0-1+deb12u3
1
public.ecr.aws/jtekt-corporation/shinsei-manager:v2.8.15cd62142d6ed
aom@3.6.0-1
3.6.0-1+deb12u3
1
public.ecr.aws/jtekt-corporation/shinsei-manager-front:v1.5.5f8fb4eea4071
aom@3.6.0-1
3.6.0-1+deb12u3
1
public.ecr.aws/jtekt-corporation/time-series-storage-service:v1.5.1046ef5c9ed50
aom@3.6.0-1
3.6.0-1+deb12u3
1
public.ecr.aws/outerbounds/metaflow_metadata_service:v2.4.13f7567ce3419d
aom@3.6.0-1+deb12u1
3.6.0-1+deb12u3
1
public.ecr.aws/truefoundrycloud/async-service-distributor:5d48113bc678d694a0c8f8dabb2207c5aa2cfc53f74851ce31f5
aom@3.6.0-1
3.6.0-1+deb12u3
1
quay.io/go-skynet/local-ai:latestd78cd113b2bc
aom@3.8.2-2ubuntu0.1
no fix listed
1
quay.io/mittwald/kube-httpcache:stable2169032c5840
aom@3.6.0-1+deb12u1
3.6.0-1+deb12u3
1
quay.io/yushiwho/api:e1f9d77e0d9b93dbf2b
aom@3.6.0-1
3.6.0-1+deb12u3
1
registry.gitlab.com/enbuild-staging/vivsoft-platform-ui/enbuild-frontend:1.0.3166353ce9bf98
aom@3.12.1-1
3.12.1-1+deb13u1
1
registry.gitlab.com/enbuild-staging/vivsoft-platform-ui/enbuild-mq-consumer:1.0.310e3cd8c7776d
aom@3.6.0-1+deb12u2
3.6.0-1+deb12u3
1
registry.gitlab.com/school_guy/docker-typo3:13.4.30-197d868ed76185d7270d
aom@3.6.0-1+deb12u2
3.6.0-1+deb12u3
1

syft 1.42.1 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.