StackRadar

CVE-2026-56209

High

Advisory

Published 19 Jun 2026In the index since 5 Sept 2026
Severity
High
worst across findings
CVSS
7.1
base score, highest
EPSS
0.004
28th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
254
of 17,781 indexed, latest versions
Container images
262
deployed by those charts
Fix available
1 of 1
affected package

The matching OSV records carry no description.

Carried by container images the latest versions of 254 of 17,781 indexed charts deploy, on 262 images.

Affected packageAffected versionsFixed inImages
aomdeb1.0.0.errata1-3+deb11u1build0.20.04.1, 1.0.0.errata1-3build1, 3.1.0-0ubuntu1~20.04.sav0, 3.3.0-1+8 more3.6.0-1+deb12u3, 3.12.1-1+deb13u1262
OSV records
DEBIAN-CVE-2026-56209UBUNTU-CVE-2026-56209

Charts affected

254 by stars
ChartLatestAffected imagesRadar Score
juicefs-csi-driverwenerme0.32.51 of 5See more

juicefs-csi-driver wenerme 0.32.5

1 of the 5 container images this version deploys carry CVE-2026-56209.

Container imageDigestPackageFixed in
juicedata/juicefs-csi-driver:v0.32.595008ba63318
aom@3.6.0-1+deb12u2
3.6.0-1+deb12u3

Open the chart page →

9,117
playwright-synthetic-monitoringwork-adventure1.0.11 of 1See more

playwright-synthetic-monitoring work-adventure 1.0.1

1 of the 1 container images this version deploys carry CVE-2026-56209.

Container imageDigestPackageFixed in
workadventure/playwright-synthetic-monitoring:main92b664c2a06f
aom@3.3.0-1
no fix listed

Open the chart page →

14,100
tabbyxdVerified publisher1.0.61 of 2See more

tabby xd 1.0.6

1 of the 2 container images this version deploys carry CVE-2026-56209.

Container imageDigestPackageFixed in
library/nginx:1.25a484819eb602
aom@3.6.0-1
3.6.0-1+deb12u3

Open the chart page →

7,673
zoo-project-druzoo-projectOfficialVerified publisher0.10.41 of 6See more

zoo-project-dru zoo-project 0.10.4

1 of the 6 container images this version deploys carry CVE-2026-56209.

Container imageDigestPackageFixed in
zooproject/zoo-project:dru-19f3c4eed7c9ec9d1f0375bbe59f9d204a42bd3a9a507cb7e2dd
aom@3.3.0-1ubuntu0.1
no fix listed

Open the chart page →

7,849

Container images carrying it

262 by charts deploying them

A fixed version is listed for 1 of the 1 affected package.

Container imageDigestPackageFixed inUsed by
praravind1801/helmimages:3.0.0f29d637b9ce1
aom@3.6.0-1
3.6.0-1+deb12u3
1
qonstrukt/php:8.4-v8-apache089af7925aa1
aom@3.8.2-2ubuntu0.1
no fix listed
1
reallibrephotos/librephotos-proxy:1.0.398a13dabbadc
aom@3.12.1-1
3.12.1-1+deb13u1
1
rocketadmin/rocketadmin:1.17.710955ef540b9
aom@3.6.0-1+deb12u2
3.6.0-1+deb12u3
1
ryuunosukeds3/nadeko-bot-docker:latestc0398f13e8a9
aom@3.3.0-1
no fix listed
1
santisbon/evwatcher:latestc4e994ca4540
aom@3.6.0-1
3.6.0-1+deb12u3
1
santisbon/evworker:lateste807283f8d69
aom@3.6.0-1
3.6.0-1+deb12u3
1
santisbon/speedtest:latest8ee3a1697227
aom@3.6.0-1
3.6.0-1+deb12u3
1
sashafefler/spacecapybara_app:latestf96d7804c0ca
aom@3.6.0-1+deb12u1
3.6.0-1+deb12u3
1
sbs20/scanservjs:release-v3.0.3dad1fd6e9a98
aom@3.6.0-1
3.6.0-1+deb12u3
1
selenium/node-chrome:4.48.0-202609055ac71fd8dd1e
aom@3.8.2-2ubuntu0.1
no fix listed
1
selenium/node-firefox:4.48.0-2026090574a5c1c90f95
aom@3.8.2-2ubuntu0.1
no fix listed
1
shamimkuet/nginx:1.0.2b82902a76a04
aom@3.6.0-1
3.6.0-1+deb12u3
1
signalen/backend:2.50.14760256000738
aom@3.6.0-1+deb12u2
3.6.0-1+deb12u3
1
sissbruecker/linkding:1.35.00c5dddf0b37c
aom@3.6.0-1+deb12u1
3.6.0-1+deb12u3
1
sissbruecker/linkding:1.41.0-plusa222fb777e1f
aom@3.6.0-1+deb12u1
3.6.0-1+deb12u3
1
snipe/snipe-it:v8.3.1141ebf2386fe
aom@3.8.2-2ubuntu0.1
no fix listed
1
socialmediamacroscope/histogram:0.1.26418f9bdb4d2
aom@3.6.0-1
3.6.0-1+deb12u3
1
socialmediamacroscope/network_analysis:0.1.3b351c21422e6
aom@3.6.0-1
3.6.0-1+deb12u3
1
socialmediamacroscope/preprocessing:0.1.3ca863306314b
aom@3.6.0-1
3.6.0-1+deb12u3
1
socialmediamacroscope/topic_modeling:0.1.3fa490acac2f8
aom@3.6.0-1
3.6.0-1+deb12u3
1
somnathmore/custom-nginx:v2bdfc06cad4ec
aom@3.6.0-1
3.6.0-1+deb12u3
1
sonroyaalmerol/docker-sogo:5.12.43f60f3abe990
aom@3.12.1-1
3.12.1-1+deb13u1
1
stashapp/stash:latest24dbd7607174
aom@1.0.0.errata1-3build1
no fix listed
1
stashapp/stash-box:latesta534c8afdf39
aom@3.8.2-2ubuntu0.1
no fix listed
1
structurizr/onpremises:2025.11.094b5ffb5119c8
aom@3.8.2-2ubuntu0.1
no fix listed
1
substratusai/verba:v0.4.0-baseURL261695be635eb
aom@3.6.0-1
3.6.0-1+deb12u3
1
svtechnmaa/svtech_nagvis:v1.2.118394b08e6c3
aom@3.6.0-1
3.6.0-1+deb12u3
1
sysnet4admin/colosseum-cms:loge74b43c7f492
aom@3.6.0-1+deb12u1
3.6.0-1+deb12u3
1
sysnet4admin/colosseum-prm:log5802bfcd7fed
aom@3.6.0-1+deb12u1
3.6.0-1+deb12u3
1
teknas09/bird-pod:latest12a1fa85c4aa
aom@3.6.0-1
3.6.0-1+deb12u3
1
theradius/loggia:0.463ba348546ec
aom@3.6.0-1
3.6.0-1+deb12u3
1
thongngo3301/stakefish:latesta341af5976e3
aom@3.6.0-1
3.6.0-1+deb12u3
1
timescale/timescaledb-ha:pg15-latesta8e3322e1cf9
aom@3.3.0-1
no fix listed
1
timescale/timescaledb-ha:pg14.6-ts2.9.1-p1cdb9ae118899
aom@3.3.0-1
no fix listed
1
timescale/timescaledb-ha:pg16d7db8f1085a3
aom@3.3.0-1ubuntu0.1
no fix listed
1
timescale/timescaledb-ha:pg17.2-ts2.18.2e8d0a9cc3db5
aom@3.3.0-1
no fix listed
1
timescale/timescaledb-ha:pg14-ts2.6-latested719c0cd19d
aom@3.3.0-1
no fix listed
1
treskon/portrait-web-setup:DEV-latesta475d80e4ecf
aom@3.6.0-1+deb12u1
3.6.0-1+deb12u3
1
unitycatalog/unitycatalog-ui:main-aadc6fc3a688197b218
aom@3.6.0-1+deb12u1
3.6.0-1+deb12u3
1
vlebediantsev/notes-admin-front:latest007c6670ff48
aom@3.6.0-1
3.6.0-1+deb12u3
1
vlebediantsev/notes-project-front:latest945675fd2636
aom@3.6.0-1
3.6.0-1+deb12u3
1
vlebediantsev/registration-ms-front-app-host:latest54f69d116c50
aom@3.6.0-1
3.6.0-1+deb12u3
1
wiktorn/overpass-api:latest9bb5f4a9b54c
aom@3.6.0-1+deb12u2
3.6.0-1+deb12u3
1
workadventure/playwright-synthetic-monitoring:main92b664c2a06f
aom@3.3.0-1
no fix listed
1
xom4ekp2p/infini-route-attestators-public-mainnet-attester:latestd0e0aa238b02
aom@3.6.0-1
3.6.0-1+deb12u3
1
xom4ekp2p/infini-route-attestators-public-mainnet-avs-webapi:latest2745b5fd8785
aom@3.6.0-1
3.6.0-1+deb12u3
1
zabbix/zabbix-web-nginx-mysql:ubuntu-6.4-latest0e5f69c4c54e
aom@3.8.2-2ubuntu0.1
no fix listed
1
zabbix/zabbix-web-nginx-pgsql:ubuntu-7.0.237d4d58086515
aom@3.8.2-2ubuntu0.1
no fix listed
1
zooproject/zoo-project:dru-19f3c4eed7c9ec9d1f0375bbe59f9d204a42bd3a9a507cb7e2dd
aom@3.3.0-1ubuntu0.1
no fix listed
1

syft 1.42.1 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.