StackRadar

CVE-2026-56210

High

Advisory

Published 19 Jun 2026In the index since 5 Sept 2026
Severity
High
worst across findings
CVSS
7.1
base score, highest
EPSS
0.003
23rd percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
254
of 17,781 indexed, latest versions
Container images
262
deployed by those charts
Fix available
1 of 1
affected package

The matching OSV records carry no description.

Carried by container images the latest versions of 254 of 17,781 indexed charts deploy, on 262 images.

Affected packageAffected versionsFixed inImages
aomdeb1.0.0.errata1-3+deb11u1build0.20.04.1, 1.0.0.errata1-3build1, 3.1.0-0ubuntu1~20.04.sav0, 3.3.0-1+8 more3.6.0-1+deb12u3, 3.12.1-1+deb13u1262
OSV records
DEBIAN-CVE-2026-56210UBUNTU-CVE-2026-56210

Charts affected

254 by stars
ChartLatestAffected imagesRadar Score
juicefs-csi-driverwenerme0.32.51 of 5See more

juicefs-csi-driver wenerme 0.32.5

1 of the 5 container images this version deploys carry CVE-2026-56210.

Container imageDigestPackageFixed in
juicedata/juicefs-csi-driver:v0.32.595008ba63318
aom@3.6.0-1+deb12u2
3.6.0-1+deb12u3

Open the chart page →

9,117
playwright-synthetic-monitoringwork-adventure1.0.11 of 1See more

playwright-synthetic-monitoring work-adventure 1.0.1

1 of the 1 container images this version deploys carry CVE-2026-56210.

Container imageDigestPackageFixed in
workadventure/playwright-synthetic-monitoring:main92b664c2a06f
aom@3.3.0-1
no fix listed

Open the chart page →

14,100
tabbyxdVerified publisher1.0.61 of 2See more

tabby xd 1.0.6

1 of the 2 container images this version deploys carry CVE-2026-56210.

Container imageDigestPackageFixed in
library/nginx:1.25a484819eb602
aom@3.6.0-1
3.6.0-1+deb12u3

Open the chart page →

7,673
zoo-project-druzoo-projectOfficialVerified publisher0.10.41 of 6See more

zoo-project-dru zoo-project 0.10.4

1 of the 6 container images this version deploys carry CVE-2026-56210.

Container imageDigestPackageFixed in
zooproject/zoo-project:dru-19f3c4eed7c9ec9d1f0375bbe59f9d204a42bd3a9a507cb7e2dd
aom@3.3.0-1ubuntu0.1
no fix listed

Open the chart page →

7,849

Container images carrying it

262 by charts deploying them

A fixed version is listed for 1 of the 1 affected package.

Container imageDigestPackageFixed inUsed by
library/nginx:1.27.1287ff321f9e3
aom@3.6.0-1+deb12u1
3.6.0-1+deb12u3
4
ciscolabs/rtsp-client:latesta7b60ec88285
aom@1.0.0.errata1-3build1
no fix listed
3
ciscolabs/rtsp-server:latestb59fc10bb821
aom@1.0.0.errata1-3build1
no fix listed
3
library/nginx:1.25:1.25.5a484819eb602
aom@3.6.0-1
3.6.0-1+deb12u3
3
library/node:ltsbe23f54a88d3
aom@3.6.0-1+deb12u2
3.6.0-1+deb12u3
3
ghcr.io/conductionnl/gateway-ui:stag6a5594b7b32c
aom@3.6.0-1
3.6.0-1+deb12u3
3
quay.io/devtron/notifier:9804331c-372-39294709c7da19c5a
aom@3.6.0-1+deb12u2
3.6.0-1+deb12u3
3
apache/tika:2.9.2.1-fullae0b86d3c4d0
aom@3.8.2-2build1
no fix listed
2
gjeanmart/safe-ganache-node:latest926264c8f2d1
aom@3.6.0-1
3.6.0-1+deb12u3
2
gotson/komga:1.26.36c2a967bbe9a
aom@3.13.1-2
no fix listed
2
homebridge/homebridge:latest77c685a40911
aom@3.8.2-2ubuntu0.1
no fix listed
2
kurento/kurento-media-server:latest03c0d34d0828
aom@3.8.2-2ubuntu0.1
no fix listed
2
library/nginx:latest6e23479198b9
aom@3.12.1-1
3.12.1-1+deb13u1
2
library/nginx:1.27.098f8ec75657d
aom@3.6.0-1
3.6.0-1+deb12u3
2
library/nginx:1.29.49dd288848f44
aom@3.12.1-1
3.12.1-1+deb13u1
2
library/python:3.7eedf63967cdb
aom@3.6.0-1
3.6.0-1+deb12u3
2
library/wordpress:6.8.3-apache:6.8-apache30bff39330d1
aom@3.12.1-1
3.12.1-1+deb13u1
2
moreillon/group-manager-front:v3.3.1c9f85db3baa5
aom@3.6.0-1
3.6.0-1+deb12u3
2
moreillon/user-manager:v5.0.2e1c9bfab5c16
aom@3.6.0-1
3.6.0-1+deb12u3
2
moreillon/user-manager-front:v5.0.3b067dbbbb6af
aom@3.6.0-1
3.6.0-1+deb12u3
2
opencloudeu/web-extensions:unzip-1.0.01691ad6612a3
aom@3.6.0-1+deb12u1
3.6.0-1+deb12u3
2
opencloudeu/web-extensions:draw-io-1.0.027cb9b952f0d
aom@3.6.0-1+deb12u1
3.6.0-1+deb12u3
2
opencloudeu/web-extensions:external-sites-1.0.05b176baa3694
aom@3.6.0-1+deb12u1
3.6.0-1+deb12u3
2
opencloudeu/web-extensions:importer-1.0.06e8b2df6c5a4
aom@3.6.0-1+deb12u1
3.6.0-1+deb12u3
2
opencloudeu/web-extensions:progress-bars-1.0.082f888a34440
aom@3.6.0-1+deb12u1
3.6.0-1+deb12u3
2
opencloudeu/web-extensions:json-viewer-1.0.0e0ac35a9576e
aom@3.6.0-1+deb12u1
3.6.0-1+deb12u3
2
qichenxu4pd/pythonexample:1.0f3a8502bc21b
aom@3.6.0-1
3.6.0-1+deb12u3
2
ghcr.io/bryopsida/k8s-dev-pod:main82d0b161161d
aom@3.8.2-2ubuntu0.1
no fix listed
2
ghcr.io/codingducksrl/laravel:8.15be52524664c
aom@3.3.0-1
no fix listed
2
ghcr.io/danbooru/danbooru:9cab67c0ac72a8c52289302c519715ceec2372d95f545698e907
aom@3.3.0-1
no fix listed
2
ghcr.io/games-on-whales/retroarch:1.0.0103fbcec2314
aom@1.0.0.errata1-3build1
no fix listed
2
ghcr.io/nginxinc/nginx-s3-gateway/nginx-oss-s3-gateway:unprivileged-oss:unprivileged-oss-202503313db8145349a3
aom@3.6.0-1+deb12u1
3.6.0-1+deb12u3
2
ghcr.io/smarter-project/hydra/isolated-vm:main4457b79b24cd
aom@3.6.0-1+deb12u2
3.6.0-1+deb12u3
2
aapjeisbaas/wp-frankenphp:v0.2.26b261abc7fb0
aom@3.12.1-1
3.12.1-1+deb13u1
1
airsonicadvanced/airsonic-advanced:latestf7cbafac2806
aom@3.1.0-0ubuntu1~20.04.sav0
no fix listed
1
akaunting/akaunting:3.0.1552811b36ec3a
aom@3.6.0-1
3.6.0-1+deb12u3
1
allegroai/clearml:2.0.0-613713ae38f7daf
aom@3.6.0-1+deb12u1
3.6.0-1+deb12u3
1
andrewmackrodt/firefox-x11:142.0.1-r133f9080470c9
aom@3.3.0-1ubuntu0.1
no fix listed
1
antrea/antrea-ui-frontend:v0.8.0ee9686bcefb8
aom@3.12.1-1
3.12.1-1+deb13u1
1
anujdatar/cups:25.07.01685df04a643b
aom@3.6.0-1+deb12u1
3.6.0-1+deb12u3
1
apache/tika:latest-full80072bb73dd3
aom@3.13.1-2
no fix listed
1
archivebox/archivebox:0.7.41a5a37331091
aom@3.6.0-1+deb12u2
3.6.0-1+deb12u3
1
arthurjguerra18/revwallet:v0.7.12f540af20b307
aom@3.6.0-1+deb12u1
3.6.0-1+deb12u3
1
assistiot/smart-orchestrator_scheduler_mc:latestb1dbe4d62a03
aom@3.6.0-1
3.6.0-1+deb12u3
1
assistiot/video_augmentation:runner-cpu-lateste5ae539ce2cb
aom@1.0.0.errata1-3+deb11u1build0.20.04.1
no fix listed
1
avinash263/pyredis263:latestaa2b8727f1a6
aom@3.6.0-1
3.6.0-1+deb12u3
1
avzini/web-app:latestf40b30210ed0
aom@3.6.0-1
3.6.0-1+deb12u3
1
beyzkaya/blog-backend:v1.0.112a6a3d1c5f9
aom@3.6.0-1+deb12u1
3.6.0-1+deb12u3
1
bitnamilegacy/matomo:5.3.2-debian-12-r13f02c000c54b1
aom@3.6.0-1+deb12u1
3.6.0-1+deb12u3
1
bnjbvr/kresus:0.22.137e216b182c8
aom@3.6.0-1+deb12u1
3.6.0-1+deb12u3
1

syft 1.42.1 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.