StackRadar

CVE-2026-56210

High

Advisory

Published 19 Jun 2026In the index since 5 Sept 2026
Severity
High
worst across findings
CVSS
7.1
base score, highest
EPSS
0.003
23rd percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
254
of 17,781 indexed, latest versions
Container images
262
deployed by those charts
Fix available
1 of 1
affected package

The matching OSV records carry no description.

Carried by container images the latest versions of 254 of 17,781 indexed charts deploy, on 262 images.

Affected packageAffected versionsFixed inImages
aomdeb1.0.0.errata1-3+deb11u1build0.20.04.1, 1.0.0.errata1-3build1, 3.1.0-0ubuntu1~20.04.sav0, 3.3.0-1+8 more3.6.0-1+deb12u3, 3.12.1-1+deb13u1262
OSV records
DEBIAN-CVE-2026-56210UBUNTU-CVE-2026-56210

Charts affected

254 by stars
ChartLatestAffected imagesRadar Score
juicefs-csi-driverwenerme0.32.51 of 5See more

juicefs-csi-driver wenerme 0.32.5

1 of the 5 container images this version deploys carry CVE-2026-56210.

Container imageDigestPackageFixed in
juicedata/juicefs-csi-driver:v0.32.595008ba63318
aom@3.6.0-1+deb12u2
3.6.0-1+deb12u3

Open the chart page →

9,117
playwright-synthetic-monitoringwork-adventure1.0.11 of 1See more

playwright-synthetic-monitoring work-adventure 1.0.1

1 of the 1 container images this version deploys carry CVE-2026-56210.

Container imageDigestPackageFixed in
workadventure/playwright-synthetic-monitoring:main92b664c2a06f
aom@3.3.0-1
no fix listed

Open the chart page →

14,100
tabbyxdVerified publisher1.0.61 of 2See more

tabby xd 1.0.6

1 of the 2 container images this version deploys carry CVE-2026-56210.

Container imageDigestPackageFixed in
library/nginx:1.25a484819eb602
aom@3.6.0-1
3.6.0-1+deb12u3

Open the chart page →

7,673
zoo-project-druzoo-projectOfficialVerified publisher0.10.41 of 6See more

zoo-project-dru zoo-project 0.10.4

1 of the 6 container images this version deploys carry CVE-2026-56210.

Container imageDigestPackageFixed in
zooproject/zoo-project:dru-19f3c4eed7c9ec9d1f0375bbe59f9d204a42bd3a9a507cb7e2dd
aom@3.3.0-1ubuntu0.1
no fix listed

Open the chart page →

7,849

Container images carrying it

262 by charts deploying them

A fixed version is listed for 1 of the 1 affected package.

Container imageDigestPackageFixed inUsed by
gcr.io/ml-pipeline/metadata-writer:2.3.09bcfd2abc361
aom@3.6.0-1+deb12u1
3.6.0-1+deb12u3
1
ghcr.io/angelnu/tt-rss:2.0.10068d332ae2410f8
aom@3.13.1-2
no fix listed
1
ghcr.io/astriaorg/astrotrek:0.1.05889bea38e56
aom@3.6.0-1+deb12u1
3.6.0-1+deb12u3
1
ghcr.io/camptocamp/tetragon-policy-builder:master0e99f12bb040
aom@3.6.0-1+deb12u1
3.6.0-1+deb12u3
1
ghcr.io/caninehq/canine:latesta058034ca006
aom@3.6.0-1+deb12u2
3.6.0-1+deb12u3
1
ghcr.io/cjmalloy/jasper:v1.3.282726a947bb65b
aom@3.6.0-1+deb12u2
3.6.0-1+deb12u3
1
ghcr.io/cjmalloy/jasper-ui:v1.3.623246dc2160efe
aom@3.12.1-1
3.12.1-1+deb13u1
1
ghcr.io/cosmicrocks/datum:v0.4.0beta76771c3cc8c3
aom@3.8.2-2ubuntu0.1
no fix listed
1
ghcr.io/cosmo-workspace/dev-code-server:v0.0.316fda01ae58a
aom@3.6.0-1+deb12u1
3.6.0-1+deb12u3
1
ghcr.io/damap-org/damap-frontend:5.0.1609f48af4efc
aom@3.12.1-1
3.12.1-1+deb13u1
1
ghcr.io/drewburr-labs/mum-discord-bot:3.1.26e82914e1051
aom@3.6.0-1
3.6.0-1+deb12u3
1
ghcr.io/ente/web:5ab0c5b4c7a89c4e470ef6f793600da33cebf35d3f4864eb7f11
aom@3.12.1-1
3.12.1-1+deb13u1
1
ghcr.io/getsentry/taskbroker:26.7.264d0da74a578
aom@3.6.0-1+deb12u2
3.6.0-1+deb12u3
1
ghcr.io/graphprotocol/availability-oracle:sha-28312fd472a25038957
aom@3.6.0-1
3.6.0-1+deb12u3
1
ghcr.io/iisas/domino-frontend:k8s8e53861be292
aom@3.6.0-1+deb12u2
3.6.0-1+deb12u3
1
ghcr.io/immich-app/immich-server:v3.1.0b434cb9287ee
aom@3.12.1-1
3.12.1-1+deb13u1
1
ghcr.io/immich-app/immich-server:v2.3.1f8d06a32b1b2
aom@3.12.1-1
3.12.1-1+deb13u1
1
ghcr.io/itzg/minecraft-server:latestc1a267d9ed6d
aom@3.8.2-2ubuntu0.1
no fix listed
1
ghcr.io/jmberesford/retrom-service:retrom-v0.7.144d763d58f11d
aom@3.6.0-1+deb12u1
3.6.0-1+deb12u3
1
ghcr.io/k8s-at-home/bazarr:v1.0.3fdb5501cdfb9
aom@1.0.0.errata1-3build1
no fix listed
1
ghcr.io/k8s-at-home/lidarr:v1.0.0.225554ebc1f90963
aom@1.0.0.errata1-3build1
no fix listed
1
ghcr.io/k8s-at-home/xteve:v2.2.0.200292b3614670f
aom@1.0.0.errata1-3build1
no fix listed
1
ghcr.io/karakeep-app/karakeep:0.33.2b069e4307dec
aom@3.6.0-1+deb12u2
3.6.0-1+deb12u3
1
ghcr.io/libreconnect/ferriscompany:0.1.0-rc6ed86db9f0efe
aom@3.6.0-1+deb12u1
3.6.0-1+deb12u3
1
ghcr.io/linuxserver/calibre-web:0.6.267c0464228f2f
aom@3.8.2-2ubuntu0.1
no fix listed
1
ghcr.io/maybe-finance/maybe:0.5.0c6ab95ca9130
aom@3.6.0-1+deb12u1
3.6.0-1+deb12u3
1
ghcr.io/mcwarman/backstage-sample-app/app:mainfae3c1f04311
aom@3.12.1-1
3.12.1-1+deb13u1
1
ghcr.io/music-assistant/server:2.7.53522e8a7a8f0
aom@3.6.0-1+deb12u2
3.6.0-1+deb12u3
1
ghcr.io/music-assistant/server:2.9.950666a6f8d7f
aom@3.6.0-1+deb12u2
3.6.0-1+deb12u3
1
ghcr.io/music-assistant/server:2.8.7eef3ee7810d0
aom@3.6.0-1+deb12u2
3.6.0-1+deb12u3
1
ghcr.io/nefelim4ag/pingdom-operator:0.0.15f8c7afdcf439
aom@3.6.0-1
3.6.0-1+deb12u3
1
ghcr.io/opencatalogi/web-app:deva1a7f507f6ae
aom@3.6.0-1+deb12u1
3.6.0-1+deb12u3
1
ghcr.io/opencost/opencost-parquet-exporter:v0.2.1ce85ef0ce665
aom@3.6.0-1+deb12u1
3.6.0-1+deb12u3
1
ghcr.io/open-telemetry/demo:1.12.0-imageprovider4e322858fe56
aom@3.6.0-1
3.6.0-1+deb12u3
1
ghcr.io/paperless-ngx/paperless-ngx:2.13.10642357c5dbd
aom@3.6.0-1+deb12u1
3.6.0-1+deb12u3
1
ghcr.io/paperless-ngx/paperless-ngx:2.20.134b05bcd28e69
aom@3.12.1-1
3.12.1-1+deb13u1
1
ghcr.io/paperless-ngx/paperless-ngx:2.20.357ad9565bff3
aom@3.12.1-1
3.12.1-1+deb13u1
1
ghcr.io/paperless-ngx/paperless-ngx:2.20.5665f2f5cc548
aom@3.12.1-1
3.12.1-1+deb13u1
1
ghcr.io/paperless-ngx/paperless-ngx:2.0.1ab255bea133e
aom@3.6.0-1
3.6.0-1+deb12u3
1
ghcr.io/paperless-ngx/paperless-ngx:2.20.14b89f83345532
aom@3.12.1-1
3.12.1-1+deb13u1
1
ghcr.io/sdwbgn/unitycatalog-helm/docker/unitycatalog-ui:0.2.1-5d668c1ed07e7ca098d
aom@3.6.0-1+deb12u1
3.6.0-1+deb12u3
1
ghcr.io/smarter-project/gstreamer:v1.0.25ecb16015aa8
aom@1.0.0.errata1-3build1
no fix listed
1
ghcr.io/smarter-project/image-detector:v2.5.31dcca70c6446
aom@1.0.0.errata1-3build1
no fix listed
1
ghcr.io/stirling-tools/stirling-pdf:2.14.33b3670fce70b
aom@3.8.2-2ubuntu0.1
no fix listed
1
ghcr.io/wgbh-mla/pbcore-util:pr-66e04659a3baa
aom@3.6.0-1+deb12u2
3.6.0-1+deb12u3
1
ghcr.io/wittdennis/calibre-web:1.1.1aa7d5d5dd6be
aom@3.6.0-1+deb12u2
3.6.0-1+deb12u3
1
ghcr.io/wizarrrr/wizarr:4.2.0-beta.3d19d886d5090
aom@3.6.0-1
3.6.0-1+deb12u3
1
ghcr.io/zoriya/kyoo_autosync:4.7.1fbba58ddb1a6
aom@3.6.0-1+deb12u1
3.6.0-1+deb12u3
1
ghcr.io/zoriya/kyoo_scanner:4.7.17dc0ee57b628
aom@3.6.0-1+deb12u1
3.6.0-1+deb12u3
1
public.ecr.aws/jtekt-corporation/image-storage-service:v1.16.17b1493760c716
aom@3.6.0-1+deb12u1
3.6.0-1+deb12u3
1

syft 1.42.1 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.