StackRadar

CVE-2026-56289

Medium

Advisory

Published 9 Jul 2026In the index since 5 Sept 2026
Severity
Medium
worst across findings
CVSS
5.5
base score, highest
EPSS
0.002
6th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
376
of 17,781 indexed, latest versions
Container images
374
deployed by those charts
Fix available
None
affected package

The matching OSV records carry no description.

Carried by container images the latest versions of 376 of 17,781 indexed charts deploy, on 374 images.

Affected packageAffected versionsFixed inImages
patchdeb2.7.1-4ubuntu1, 2.7.1-4ubuntu2.3, 2.7.1-4ubuntu2.4, 2.7.5-1+10 moreno fix listed374
OSV records
DEBIAN-CVE-2026-56289UBUNTU-CVE-2026-56289

Charts affected

376 by stars
ChartLatestAffected imagesRadar Score
planectlplanectlVerified publisher0.7.02 of 10See more

planectl planectl 0.7.0

2 of the 10 container images this version deploys carry CVE-2026-56289.

Container imageDigestPackageFixed in
library/node:208f693eaa7e0a
patch@2.7.6-7
no fix listed
quay.io/argoproj/argocd:v2.14.115fc69e31c755
patch@2.7.6-7build3
no fix listed

Open the chart page →

25,934
pod-birdspod-birds0.1.01 of 1See more

pod-birds pod-birds 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-56289.

Container imageDigestPackageFixed in
teknas09/bird-pod:latest12a1fa85c4aa
patch@2.7.6-7
no fix listed

Open the chart page →

12,912
agentpolyaxon2.16.43 of 4See more

agent polyaxon 2.16.4

3 of the 4 container images this version deploys carry CVE-2026-56289.

Container imageDigestPackageFixed in
polyaxon/polyaxon-agent:2.16.4eca6952b20e6
patch@2.8-2
no fix listed
polyaxon/polyaxon-cli:2.16.4024ff3fa775e
patch@2.8-2
no fix listed
polyaxon/polyaxon-streams:2.16.4c186bd9834c0
patch@2.8-2
no fix listed

Open the chart page →

10,046
polyaxonpolyaxon2.16.43 of 5See more

polyaxon polyaxon 2.16.4

3 of the 5 container images this version deploys carry CVE-2026-56289.

Container imageDigestPackageFixed in
polyaxon/polyaxon-agent:2.16.4eca6952b20e6
patch@2.8-2
no fix listed
polyaxon/polyaxon-api:2.16.42b55c3265a90
patch@2.8-2
no fix listed
polyaxon/polyaxon-cli:2.16.4024ff3fa775e
patch@2.8-2
no fix listed

Open the chart page →

13,741
prefect-agentprefectVerified publisher2024.8.301638221 of 1See more

prefect-agent prefect 2024.8.30163822

1 of the 1 container images this version deploys carry CVE-2026-56289.

Container imageDigestPackageFixed in
prefecthq/prefect:2.20.4-python3.101df4b5b6238a
patch@2.7.6-7
no fix listed

Open the chart page →

5,451
wp-chartprojet-devops0.1.01 of 2See more

wp-chart projet-devops 0.1.0

1 of the 2 container images this version deploys carry CVE-2026-56289.

Container imageDigestPackageFixed in
library/wordpress:latest5a93c470ae82
patch@2.8-2
no fix listed

Open the chart page →

5,203
game-serverpvillaverdeVerified publisher1.0.51 of 1See more

game-server pvillaverde 1.0.5

1 of the 1 container images this version deploys carry CVE-2026-56289.

Container imageDigestPackageFixed in
ghcr.io/itzg/minecraft-server:latestc1a267d9ed6d
patch@2.7.6-7build3
no fix listed

Open the chart page →

4,253
pyredispyredis-helm0.1.01 of 2See more

pyredis pyredis-helm 0.1.0

1 of the 2 container images this version deploys carry CVE-2026-56289.

Container imageDigestPackageFixed in
avinash263/pyredis263:latestaa2b8727f1a6
patch@2.7.6-7
no fix listed

Open the chart page →

14,537
mychartpythonweb0.1.01 of 1See more

mychart pythonweb 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-56289.

Container imageDigestPackageFixed in
qichenxu4pd/pythonexample:1.0f3a8502bc21b
patch@2.7.6-7
no fix listed

Open the chart page →

12,566
mypythonpythonweb0.1.01 of 1See more

mypython pythonweb 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-56289.

Container imageDigestPackageFixed in
qichenxu4pd/pythonexample:1.0f3a8502bc21b
patch@2.7.6-7
no fix listed

Open the chart page →

12,566
esphomeretsamedocVerified publisher2026.2.51 of 1See more

esphome retsamedoc 2026.2.5

1 of the 1 container images this version deploys carry CVE-2026-56289.

Container imageDigestPackageFixed in
esphome/esphome:2024.3.09ab8cc88b28c
patch@2.7.6-7
no fix listed

Open the chart page →

7,431
juicepassproxyretsamedocVerified publisher2026.2.41 of 1See more

juicepassproxy retsamedoc 2026.2.4

1 of the 1 container images this version deploys carry CVE-2026-56289.

Container imageDigestPackageFixed in
ghcr.io/juicerescue/juicepassproxy:0.5.1984dc4f19162
patch@2.7.6-7
no fix listed

Open the chart page →

3,938
kresusrm3lVerified publisher0.2.11 of 3See more

kresus rm3l 0.2.1

1 of the 3 container images this version deploys carry CVE-2026-56289.

Container imageDigestPackageFixed in
bnjbvr/kresus:0.22.137e216b182c8
patch@2.7.6-7
no fix listed

Open the chart page →

15,591
reviewboardrock8sVerified publisher0.0.11 of 3See more

reviewboard rock8s 0.0.1

1 of the 3 container images this version deploys carry CVE-2026-56289.

Container imageDigestPackageFixed in
beanbag/reviewboard:latest6b840f546e1c
patch@2.7.6-7build2
no fix listed

Open the chart page →

6,084
rocketchat-voiprocketchat-server0.1.01 of 1See more

rocketchat-voip rocketchat-server 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-56289.

Container imageDigestPackageFixed in
rocketchat/freeswitch:stablecfba5c20a5cc
patch@2.7.6-7
no fix listed

Open the chart page →

5,683
ai-agentromholdings0.0.11 of 1See more

ai-agent romholdings 0.0.1

1 of the 1 container images this version deploys carry CVE-2026-56289.

Container imageDigestPackageFixed in
quay.io/devtron/ai-agent:0.0.16545dac92173
patch@2.7.6-7
no fix listed

Open the chart page →

9,607
argocd-certificate-refreshromholdings0.10.81 of 1See more

argocd-certificate-refresh romholdings 0.10.8

1 of the 1 container images this version deploys carry CVE-2026-56289.

Container imageDigestPackageFixed in
quay.io/devtron/argocd-cert-refresh:v102b6db27eaf3d
patch@2.7.6-7build2
no fix listed

Open the chart page →

12,949
devtron-enterpriseromholdings48.0.02 of 28See more

devtron-enterprise romholdings 48.0.0

2 of the 28 container images this version deploys carry CVE-2026-56289.

Container imageDigestPackageFixed in
quay.io/devtron/devtron:9450794d-930-394159795f3f9f031
patch@2.7.6-7build3
no fix listed
quay.io/devtron/notifier:9804331c-372-39294709c7da19c5a
patch@2.7.6-7
no fix listed

Open the chart page →

68,240
simple-coffeerubxkubeVerified publisher0.1.01 of 1See more

simple-coffee rubxkube 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-56289.

Container imageDigestPackageFixed in
qjoly/kubernetes-coffee-image:simpleec94d3bdc035
patch@2.8-2
no fix listed

Open the chart page →

2,460
nadekobotryuunosukeds30.1.21 of 2See more

nadekobot ryuunosukeds3 0.1.2

1 of the 2 container images this version deploys carry CVE-2026-56289.

Container imageDigestPackageFixed in
ryuunosukeds3/nadeko-bot-docker:latestc0398f13e8a9
patch@2.7.6-7build2
no fix listed

Open the chart page →

8,619
transmissionryuunosukeds31.6.21 of 2See more

transmission ryuunosukeds3 1.6.2

1 of the 2 container images this version deploys carry CVE-2026-56289.

Container imageDigestPackageFixed in
library/python:3.9da5aee29682d
patch@2.8-2
no fix listed

Open the chart page →

9,534
safe-stacksafe-global0.1.01 of 9See more

safe-stack safe-global 0.1.0

1 of the 9 container images this version deploys carry CVE-2026-56289.

Container imageDigestPackageFixed in
gjeanmart/safe-ganache-node:latest926264c8f2d1
patch@2.7.6-7
no fix listed

Open the chart page →

19,560
safe-transaction-servicesafe-global0.1.01 of 6See more

safe-transaction-service safe-global 0.1.0

1 of the 6 container images this version deploys carry CVE-2026-56289.

Container imageDigestPackageFixed in
gjeanmart/safe-ganache-node:latest926264c8f2d1
patch@2.7.6-7
no fix listed

Open the chart page →

16,620
evsantisbon0.2.02 of 5See more

ev santisbon 0.2.0

2 of the 5 container images this version deploys carry CVE-2026-56289.

Container imageDigestPackageFixed in
santisbon/evwatcher:latestc4e994ca4540
patch@2.7.6-7
no fix listed
santisbon/evworker:lateste807283f8d69
patch@2.7.6-7
no fix listed

Open the chart page →

14,179
speedtestsantisbon0.1.01 of 3See more

speedtest santisbon 0.1.0

1 of the 3 container images this version deploys carry CVE-2026-56289.

Container imageDigestPackageFixed in
santisbon/speedtest:latest8ee3a1697227
patch@2.7.6-7
no fix listed

Open the chart page →

12,668
nextcloudsb-helm-charts0.4.01 of 2See more

nextcloud sb-helm-charts 0.4.0

1 of the 2 container images this version deploys carry CVE-2026-56289.

Container imageDigestPackageFixed in
library/nextcloud:31.0.10-apacheb7faa1653c39
patch@2.8-2
no fix listed

Open the chart page →

9,755
phpmyadminsb-helm-charts0.3.01 of 1See more

phpmyadmin sb-helm-charts 0.3.0

1 of the 1 container images this version deploys carry CVE-2026-56289.

Container imageDigestPackageFixed in
library/phpmyadmin:5.2.16e75aa8f767c
patch@2.7.6-7
no fix listed

Open the chart page →

5,315
wordpresssb-helm-charts0.4.01 of 2See more

wordpress sb-helm-charts 0.4.0

1 of the 2 container images this version deploys carry CVE-2026-56289.

Container imageDigestPackageFixed in
library/wordpress:6.4.3-apache8ae66efb09a2
patch@2.7.6-7
no fix listed

Open the chart page →

13,510
wordpressschichtelVerified publisher0.10.101 of 2See more

wordpress schichtel 0.10.10

1 of the 2 container images this version deploys carry CVE-2026-56289.

Container imageDigestPackageFixed in
library/wordpress:6.9.4-fpmad4a8bae2eb4
patch@2.8-2
no fix listed

Open the chart page →

8,184
snipeitschmitzis6.1.01 of 2See more

snipeit schmitzis 6.1.0

1 of the 2 container images this version deploys carry CVE-2026-56289.

Container imageDigestPackageFixed in
snipe/snipe-it:v8.3.1141ebf2386fe
patch@2.7.6-7build3
no fix listed

Open the chart page →

6,094
typo3schoolguys-helmcharts0.4.21 of 1See more

typo3 schoolguys-helmcharts 0.4.2

1 of the 1 container images this version deploys carry CVE-2026-56289.

Container imageDigestPackageFixed in
registry.gitlab.com/school_guy/docker-typo3:13.4.30-197d868ed76185d7270d
patch@2.7.6-7
no fix listed

Open the chart page →

4,836
seldon-core-loadtestingseldon0.2.01 of 1See more

seldon-core-loadtesting seldon 0.2.0

1 of the 1 container images this version deploys carry CVE-2026-56289.

Container imageDigestPackageFixed in
seldonio/locust-core:0.81d0da98a2d76
patch@2.7.5-1ubuntu0.16.04.1
no fix listed

Open the chart page →

23,007
wordpress-mysqlsikalabs0.1.21 of 2See more

wordpress-mysql sikalabs 0.1.2

1 of the 2 container images this version deploys carry CVE-2026-56289.

Container imageDigestPackageFixed in
library/wordpress:latest5a93c470ae82
patch@2.8-2
no fix listed

Open the chart page →

3,826
aafsmo-helm-chart6.0.01 of 14See more

aaf smo-helm-chart 6.0.0

1 of the 14 container images this version deploys carry CVE-2026-56289.

Container imageDigestPackageFixed in
oomk8s/readiness-check:2.0.2875814cc853d
patch@2.7.5-1ubuntu0.16.04.1
no fix listed

Open the chart page →

25,769
aaismo-helm-chart6.0.01 of 14See more

aai smo-helm-chart 6.0.0

1 of the 14 container images this version deploys carry CVE-2026-56289.

Container imageDigestPackageFixed in
oomk8s/readiness-check:2.0.2875814cc853d
patch@2.7.5-1ubuntu0.16.04.1
no fix listed

Open the chart page →

25,803
dgbuildersmo-helm-chart6.0.01 of 3See more

dgbuilder smo-helm-chart 6.0.0

1 of the 3 container images this version deploys carry CVE-2026-56289.

Container imageDigestPackageFixed in
oomk8s/readiness-check:2.0.07daa08b81954
patch@2.7.5-1
no fix listed

Open the chart page →

28,470
dmaap-listenersmo-helm-chart6.0.01 of 3See more

dmaap-listener smo-helm-chart 6.0.0

1 of the 3 container images this version deploys carry CVE-2026-56289.

Container imageDigestPackageFixed in
oomk8s/readiness-check:2.0.2875814cc853d
patch@2.7.5-1ubuntu0.16.04.1
no fix listed

Open the chart page →

25,769
elasticsearchsmo-helm-chart6.0.01 of 5See more

elasticsearch smo-helm-chart 6.0.0

1 of the 5 container images this version deploys carry CVE-2026-56289.

Container imageDigestPackageFixed in
oomk8s/readiness-check:2.0.2875814cc853d
patch@2.7.5-1ubuntu0.16.04.1
no fix listed

Open the chart page →

24,776
logsmo-helm-chart6.0.01 of 6See more

log smo-helm-chart 6.0.0

1 of the 6 container images this version deploys carry CVE-2026-56289.

Container imageDigestPackageFixed in
oomk8s/readiness-check:2.0.07daa08b81954
patch@2.7.5-1
no fix listed

Open the chart page →

29,220
mariadb-initsmo-helm-chart6.0.01 of 2See more

mariadb-init smo-helm-chart 6.0.0

1 of the 2 container images this version deploys carry CVE-2026-56289.

Container imageDigestPackageFixed in
oomk8s/readiness-check:2.0.2875814cc853d
patch@2.7.5-1ubuntu0.16.04.1
no fix listed

Open the chart page →

24,776
msbsmo-helm-chart6.0.01 of 6See more

msb smo-helm-chart 6.0.0

1 of the 6 container images this version deploys carry CVE-2026-56289.

Container imageDigestPackageFixed in
oomk8s/readiness-check:2.0.07daa08b81954
patch@2.7.5-1
no fix listed

Open the chart page →

27,477
pndasmo-helm-chart6.0.01 of 3See more

pnda smo-helm-chart 6.0.0

1 of the 3 container images this version deploys carry CVE-2026-56289.

Container imageDigestPackageFixed in
oomk8s/readiness-check:2.0.07daa08b81954
patch@2.7.5-1
no fix listed

Open the chart page →

27,477
pombasmo-helm-chart6.0.01 of 17See more

pomba smo-helm-chart 6.0.0

1 of the 17 container images this version deploys carry CVE-2026-56289.

Container imageDigestPackageFixed in
oomk8s/readiness-check:2.0.07daa08b81954
patch@2.7.5-1
no fix listed

Open the chart page →

29,220
portalsmo-helm-chart6.0.01 of 8See more

portal smo-helm-chart 6.0.0

1 of the 8 container images this version deploys carry CVE-2026-56289.

Container imageDigestPackageFixed in
oomk8s/readiness-check:2.0.07daa08b81954
patch@2.7.5-1
no fix listed

Open the chart page →

27,477
sdcsmo-helm-chart6.0.01 of 14See more

sdc smo-helm-chart 6.0.0

1 of the 14 container images this version deploys carry CVE-2026-56289.

Container imageDigestPackageFixed in
oomk8s/readiness-check:2.0.2875814cc853d
patch@2.7.5-1ubuntu0.16.04.1
no fix listed

Open the chart page →

25,769
sdnc-ansible-serversmo-helm-chart6.0.01 of 3See more

sdnc-ansible-server smo-helm-chart 6.0.0

1 of the 3 container images this version deploys carry CVE-2026-56289.

Container imageDigestPackageFixed in
oomk8s/readiness-check:2.0.2875814cc853d
patch@2.7.5-1ubuntu0.16.04.1
no fix listed

Open the chart page →

25,769
sdnc-portalsmo-helm-chart6.0.01 of 3See more

sdnc-portal smo-helm-chart 6.0.0

1 of the 3 container images this version deploys carry CVE-2026-56289.

Container imageDigestPackageFixed in
oomk8s/readiness-check:2.0.2875814cc853d
patch@2.7.5-1ubuntu0.16.04.1
no fix listed

Open the chart page →

25,769
sdnc-promsmo-helm-chart6.0.01 of 2See more

sdnc-prom smo-helm-chart 6.0.0

1 of the 2 container images this version deploys carry CVE-2026-56289.

Container imageDigestPackageFixed in
oomk8s/readiness-check:2.0.2875814cc853d
patch@2.7.5-1ubuntu0.16.04.1
no fix listed

Open the chart page →

24,776
sdnc-websmo-helm-chart6.0.01 of 3See more

sdnc-web smo-helm-chart 6.0.0

1 of the 3 container images this version deploys carry CVE-2026-56289.

Container imageDigestPackageFixed in
oomk8s/readiness-check:2.0.2875814cc853d
patch@2.7.5-1ubuntu0.16.04.1
no fix listed

Open the chart page →

24,776
ueb-listenersmo-helm-chart6.0.01 of 3See more

ueb-listener smo-helm-chart 6.0.0

1 of the 3 container images this version deploys carry CVE-2026-56289.

Container imageDigestPackageFixed in
oomk8s/readiness-check:2.0.2875814cc853d
patch@2.7.5-1ubuntu0.16.04.1
no fix listed

Open the chart page →

25,769

Container images carrying it

374 by charts deploying them

A fixed version is listed for 0 of the 1 affected package.

Container imageDigestPackageFixed inUsed by
library/nextcloud:31.0.10-apacheb7faa1653c39
patch@2.8-2
no fix listed
1
library/node:208f693eaa7e0a
patch@2.7.6-7
no fix listed
1
library/node:latestf5d1cc40abc1
patch@2.8-2
no fix listed
1
library/php:8.4-fpm59fa733c9af6
patch@2.8-2
no fix listed
1
library/python:3.1070c9cc675605
patch@2.8-2
no fix listed
1
library/python:3.8d41127070014
patch@2.7.6-7
no fix listed
1
library/python:3.9da5aee29682d
patch@2.8-2
no fix listed
1
library/wordpress:6.4.3-apache8ae66efb09a2
patch@2.7.6-7
no fix listed
1
library/wordpress:6.9.4-fpmad4a8bae2eb4
patch@2.8-2
no fix listed
1
library/wordpress:php8.1-apachef73396626d2f
patch@2.8-2
no fix listed
1
linuxserver/code-server:4.10.1a5e43a05ae79
patch@2.7.6-7build2
no fix listed
1
lsstsqre/nublado2:2.0.1b75bf8aaafa4
patch@2.7.6-6
no fix listed
1
makersquad/harp-proxy:0.8.1a40dd258c527
patch@2.7.6-7
no fix listed
1
maksymhencha/educative-helm-bookapp:0.0.27f096a681192
patch@2.7.6-6
no fix listed
1
martinhelmich/typo3:12.4c83a4f3fd7ae
patch@2.7.6-7
no fix listed
1
mathesar/mathesar:0.12.0091757cb01fe
patch@2.7.6-7
no fix listed
1
mautic/mautic:7-apacheeb8cc73d97e1
patch@2.7.6-7
no fix listed
1
mbround18/valheim:3.1.070bd4da591cd
patch@2.7.6-7build2
no fix listed
1
mediagis/nominatim:5.3.27923a8e67197
patch@2.7.6-7build3
no fix listed
1
mediagis/nominatim:3.7c15e941485ef
patch@2.7.6-6
no fix listed
1
mediagis/nominatim:4.2d0eae7b51374
patch@2.7.6-7build2
no fix listed
1
middlewareeng/middleware:0.3.1747d880812f1
patch@2.7.6-7
no fix listed
1
mindsdb/mindsdb:latest163011c09299
patch@2.8-2
no fix listed
1
mintproject/model-catalog-fastapi:7dd88dc5bf1fe6a6d4703ea0a077afee45cb256102260d20a21f
patch@2.7.6-7
no fix listed
1
moodlehq/moodle-php-apache:8.4-bookworm922af5166835
patch@2.7.6-7
no fix listed
1
moreillon/api-proxy:latestd7d4a5463525
patch@2.7.6-7
no fix listed
1
moreillon/food-manager:lateste8fd856e593d
patch@2.7.6-7
no fix listed
1
moreillon/group-manager:latest3caa8f710ee0
patch@2.7.6-7
no fix listed
1
moreillon/user-manager-mongoose:v5.0.1d2ee0423b797
patch@2.7.6-7
no fix listed
1
mshanley80/httpbin2022:latest5b189a70c0fb
patch@2.7.6-6
no fix listed
1
muhammedgamal/fp23:latest74b4cd69b6fa
patch@2.7.6-7
no fix listed
1
muluder/prograncontrollermcord:0.1.843b597a93da7
patch@2.7.5-1
no fix listed
1
oled01/automx2:2025.1.105d3e398e675
patch@2.7.6-7
no fix listed
1
omecproject/mme-exporter:paging-latestbcc5f19fd676
patch@2.7.6-2ubuntu1.1
no fix listed
1
omecproject/onos-progran:1.0.05715e5648aa0
patch@2.7.5-1
no fix listed
1
omecproject/progran-synchronizer:comac-1.0.0d109a8e57e71
patch@2.7.5-1ubuntu0.16.04.1
no fix listed
1
oneuptime/runner:release4accc516d800
patch@2.8-2
no fix listed
1
opea/codegen-ui:1.02bee4eb66f3e
patch@2.7.6-7
no fix listed
1
opea/codetrans-ui:1.03ef121f34610
patch@2.7.6-7
no fix listed
1
opea/docsum-ui:1.07f854e9bffaf
patch@2.7.6-7
no fix listed
1
openbas/caldera-server:5.1.0a277796d9724
patch@2.7.6-7
no fix listed
1
openelevation/open-elevation:latest82fb21612e86
patch@2.7.6-6
no fix listed
1
opennode/waldur-mastermind:8.1.24c82b15d9042
patch@2.8-2
no fix listed
1
openproject/hocuspocus:release-338001b288dc1359dfb5
patch@2.7.6-7
no fix listed
1
openthread/otbr:latestf307f59f6432
patch@2.7.6-2ubuntu1.1
no fix listed
1
openwhisk/ow-utils:1.0.0c80dba0de3aa
patch@2.7.6-2ubuntu1.1
no fix listed
1
phan2410/dummy-service:0.0.89c6ed6de26ca
patch@2.7.6-7
no fix listed
1
phan2410/falcon-asgi-server:0.1.04a86d138832d
patch@2.7.6-7
no fix listed
1
photoprism/photoprism:240711-cefc6fd632ca74
patch@2.7.6-7build3
no fix listed
1
phpmyadmin/phpmyadmin:5.2.342a200db07b4
patch@2.8-2
no fix listed
1

syft 1.42.1 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.