StackRadar

CVE-2026-56391

Medium

Advisory

Published 24 Jul 2026In the index since 5 Sept 2026
Severity
Medium
worst across findings
CVSS
6.1
base score, highest
EPSS
0.001
3rd percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
1,470
of 17,790 indexed, latest versions
Container images
1,352
deployed by those charts
Fix available
2 of 2
affected packages

The matching OSV records carry no description.

Carried by container images the latest versions of 1,470 of 17,790 indexed charts deploy, on 1,352 images.

Affected packageAffected versionsFixed inImages
coreutilsdeb9.1-1, 9.7-3, 9.7-3+dhi3, 9.7-3+dhi4+2 more9.7-3+e4, 9.7-3ubuntu2.11,342
coreutils-fromdeb9.5-1ubuntu2+0.0.0~ubuntu259.7-3ubuntu2.171
OSV records
DEBIAN-CVE-2026-56391UBUNTU-CVE-2026-56391ECHO-3699-27c7-123e
Also known as
USN-8697-1

Charts affected

1,470 by stars
ChartLatestAffected imagesRadar Score
mychartpythonweb0.1.01 of 1See more

mychart pythonweb 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-56391.

Container imageDigestPackageFixed in
qichenxu4pd/pythonexample:1.0f3a8502bc21b
coreutils@9.1-1
no fix listed

Open the chart page →

11,400
mypythonpythonweb0.1.01 of 1See more

mypython pythonweb 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-56391.

Container imageDigestPackageFixed in
qichenxu4pd/pythonexample:1.0f3a8502bc21b
coreutils@9.1-1
no fix listed

Open the chart page →

11,400
qantas-apiqantas-helm0.1.01 of 3See more

qantas-api qantas-helm 0.1.0

1 of the 3 container images this version deploys carry CVE-2026-56391.

Container imageDigestPackageFixed in
library/postgres:1767f41722b7a8
coreutils@9.7-3
no fix listed

Open the chart page →

1,638
open-terminalqaoruVerified publisher0.2.41 of 1See more

open-terminal qaoru 0.2.4

1 of the 1 container images this version deploys carry CVE-2026-56391.

Container imageDigestPackageFixed in
ghcr.io/open-webui/open-terminal:0.13.0-slimdec44673c865
coreutils@9.7-3
no fix listed

Open the chart page →

2,000
qubivaqubiva0.3.21 of 3See more

qubiva qubiva 0.3.2

1 of the 3 container images this version deploys carry CVE-2026-56391.

Container imageDigestPackageFixed in
ghcr.io/qubiva/qubiva:v0.3.2cdf1e3329bfe
coreutils@9.7-3
no fix listed

Open the chart page →

4,231
cupsr2dlan-helm-chartsVerified publisher0.1.01 of 1See more

cups r2dlan-helm-charts 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-56391.

Container imageDigestPackageFixed in
anujdatar/cups:25.07.01685df04a643b
coreutils@9.1-1
no fix listed

Open the chart page →

7,691
nginx-chartrabsnginx0.1.01 of 1See more

nginx-chart rabsnginx 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-56391.

Container imageDigestPackageFixed in
library/nginx:1.276784fb0834aa
coreutils@9.1-1
no fix listed

Open the chart page →

4,117
rada-platformrada-platform0.1.01 of 7See more

rada-platform rada-platform 0.1.0

1 of the 7 container images this version deploys carry CVE-2026-56391.

Container imageDigestPackageFixed in
apache/airflow:2.10.2-python3.9ce90bdc3d2af
coreutils@9.1-1
no fix listed

Open the chart page →

20,812
management-portalradar-baseVerified publisher1.7.01 of 1See more

management-portal radar-base 1.7.0

1 of the 1 container images this version deploys carry CVE-2026-56391.

Container imageDigestPackageFixed in
ghcr.io/radar-base/managementportal/management-portal:3.0.0c1b37e821f72
coreutils@9.7-3ubuntu2
coreutils-from@9.5-1ubuntu2+0.0.0~ubuntu25
9.7-3ubuntu2.1
9.7-3ubuntu2.1

Open the chart page →

3,221
rawfile-localpvrawfile0.15.21 of 6See more

rawfile-localpv rawfile 0.15.2

1 of the 6 container images this version deploys carry CVE-2026-56391.

Container imageDigestPackageFixed in
openebs/rawfile-localpv:v0.15.2a39ef27ea28b
coreutils@9.7-3
no fix listed

Open the chart page →

2,794
helm-redchefredchef0.1.01 of 3See more

helm-redchef redchef 0.1.0

1 of the 3 container images this version deploys carry CVE-2026-56391.

Container imageDigestPackageFixed in
sharanalwar/redchef-backend:latest8d3cab80df49
coreutils@9.1-1
no fix listed

Open the chart page →

4,658
regoregoOfficialVerified publisher0.1.31 of 1See more

rego rego 0.1.3

1 of the 1 container images this version deploys carry CVE-2026-56391.

Container imageDigestPackageFixed in
drorivry4/rego:lateste035d49b15ca
coreutils@9.1-1
no fix listed

Open the chart page →

2,706
relfinder-reformedrelfinderreformed2.0.01 of 2See more

relfinder-reformed relfinderreformed 2.0.0

1 of the 2 container images this version deploys carry CVE-2026-56391.

Container imageDigestPackageFixed in
ghcr.io/woodenmaiden/relfinderreformedfront:latest344f53763b25
coreutils@9.1-1
no fix listed

Open the chart page →

5,928
my-nginx-apprepo-for-helm-nginx-app0.1.01 of 1See more

my-nginx-app repo-for-helm-nginx-app 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-56391.

Container imageDigestPackageFixed in
library/nginx:stabled5792f71a949
coreutils@9.7-3
no fix listed

Open the chart page →

1,839
redminerestic-pvc-backupVerified publisher0.2.61 of 1See more

redmine restic-pvc-backup 0.2.6

1 of the 1 container images this version deploys carry CVE-2026-56391.

Container imageDigestPackageFixed in
library/redmine:6.1.3-trixief474a901faec
coreutils@9.7-3
no fix listed

Open the chart page →

4,252
searxngrestic-pvc-backupVerified publisher0.1.111 of 3See more

searxng restic-pvc-backup 0.1.11

1 of the 3 container images this version deploys carry CVE-2026-56391.

Container imageDigestPackageFixed in
valkey/valkey:9.1.1-trixie64e361b630ec
coreutils@9.7-3
no fix listed

Open the chart page →

818
esphomeretsamedocVerified publisher2026.2.51 of 1See more

esphome retsamedoc 2026.2.5

1 of the 1 container images this version deploys carry CVE-2026-56391.

Container imageDigestPackageFixed in
esphome/esphome:2024.3.09ab8cc88b28c
coreutils@9.1-1
no fix listed

Open the chart page →

6,562
juicepassproxyretsamedocVerified publisher2026.2.41 of 1See more

juicepassproxy retsamedoc 2026.2.4

1 of the 1 container images this version deploys carry CVE-2026-56391.

Container imageDigestPackageFixed in
ghcr.io/juicerescue/juicepassproxy:0.5.1984dc4f19162
coreutils@9.1-1
no fix listed

Open the chart page →

3,753
retromretsamedocVerified publisher2026.2.51 of 1See more

retrom retsamedoc 2026.2.5

1 of the 1 container images this version deploys carry CVE-2026-56391.

Container imageDigestPackageFixed in
ghcr.io/jmberesford/retrom-service:retrom-v0.7.144d763d58f11d
coreutils@9.1-1
no fix listed

Open the chart page →

6,794
spoolmanretsamedocVerified publisher26.9.01 of 1See more

spoolman retsamedoc 26.9.0

1 of the 1 container images this version deploys carry CVE-2026-56391.

Container imageDigestPackageFixed in
ghcr.io/donkie/spoolman:0.26.1cf9b41e17b93
coreutils@9.1-1
no fix listed

Open the chart page →

1,786
claude-relayrevolution10.1.371 of 4See more

claude-relay revolution1 0.1.37

1 of the 4 container images this version deploys carry CVE-2026-56391.

Container imageDigestPackageFixed in
library/redis:8.2.2f0957bcaa75f
coreutils@9.1-1
no fix listed

Open the chart page →

4,546
revwallet-apirevwallet0.7.121 of 1See more

revwallet-api revwallet 0.7.12

1 of the 1 container images this version deploys carry CVE-2026-56391.

Container imageDigestPackageFixed in
arthurjguerra18/revwallet:v0.7.12f540af20b307
coreutils@9.1-1
no fix listed

Open the chart page →

5,341
istio-helloworldrgnu1.0.12 of 2See more

istio-helloworld rgnu 1.0.1

2 of the 2 container images this version deploys carry CVE-2026-56391.

Container imageDigestPackageFixed in
istio/examples-helloworld-v1:latest328b237e4fb1
coreutils@9.1-1
no fix listed
istio/examples-helloworld-v2:latest0a7f02b2c7c9
coreutils@9.1-1
no fix listed

Open the chart page →

8,298
rke2-ciliumrke2-charts1.20.1031 of 3See more

rke2-cilium rke2-charts 1.20.103

1 of the 3 container images this version deploys carry CVE-2026-56391.

Container imageDigestPackageFixed in
quay.io/cilium/cilium:v1.20.1ae9ea21f7427
coreutils@9.7-3ubuntu2
coreutils-from@9.5-1ubuntu2+0.0.0~ubuntu25
9.7-3ubuntu2.1
9.7-3ubuntu2.1

Open the chart page →

1,073
kube-web-viewrlex0.5.01 of 1See more

kube-web-view rlex 0.5.0

1 of the 1 container images this version deploys carry CVE-2026-56391.

Container imageDigestPackageFixed in
hjacobs/kube-web-view:23.8.0431f1bf013d0
coreutils@9.1-1
no fix listed

Open the chart page →

4,315
kresusrm3lVerified publisher0.2.12 of 3See more

kresus rm3l 0.2.1

2 of the 3 container images this version deploys carry CVE-2026-56391.

Container imageDigestPackageFixed in
bitnamilegacy/postgresql:17.5.0-debian-12-r16687034f33da6
coreutils@9.1-1
no fix listed
bnjbvr/kresus:0.22.137e216b182c8
coreutils@9.1-1
no fix listed

Open the chart page →

15,623
web-checkrm3lVerified publisher0.1.01 of 1See more

web-check rm3l 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-56391.

Container imageDigestPackageFixed in
ghcr.io/lissy93/web-check:latesta4e021c0f6a9
coreutils@9.1-1
no fix listed

Open the chart page →

8,798
matrix-stackrock8sVerified publisher0.8.11 of 7See more

matrix-stack rock8s 0.8.1

1 of the 7 container images this version deploys carry CVE-2026-56391.

Container imageDigestPackageFixed in
matrixdotorg/synapse:v1.127.1c3c4a9de2a0b
coreutils@9.1-1
no fix listed

Open the chart page →

9,275
reviewboardrock8sVerified publisher0.0.11 of 3See more

reviewboard rock8s 0.0.1

1 of the 3 container images this version deploys carry CVE-2026-56391.

Container imageDigestPackageFixed in
library/nginx:latest05b8cb60c354
coreutils@9.7-3
no fix listed

Open the chart page →

6,154
rocketchat-voiprocketchat-server0.1.01 of 1See more

rocketchat-voip rocketchat-server 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-56391.

Container imageDigestPackageFixed in
rocketchat/freeswitch:stablecfba5c20a5cc
coreutils@9.1-1
no fix listed

Open the chart page →

5,329
ai-agentromholdings0.0.11 of 1See more

ai-agent romholdings 0.0.1

1 of the 1 container images this version deploys carry CVE-2026-56391.

Container imageDigestPackageFixed in
quay.io/devtron/ai-agent:0.0.16545dac92173
coreutils@9.1-1
no fix listed

Open the chart page →

9,152
devtron-enterpriseromholdings48.0.03 of 28See more

devtron-enterprise romholdings 48.0.0

3 of the 28 container images this version deploys carry CVE-2026-56391.

Container imageDigestPackageFixed in
quay.io/devtron/devtron-utils:dup-chart-repo-v1.1.095d6f0e05636
coreutils@9.1-1
no fix listed
quay.io/devtron/notifier:9804331c-372-39294709c7da19c5a
coreutils@9.1-1
no fix listed
quay.io/devtron/postgres:14.91b594392f7cb
coreutils@9.1-1
no fix listed

Open the chart page →

66,542
devtron-operatorromholdings0.23.32 of 11See more

devtron-operator romholdings 0.23.3

2 of the 11 container images this version deploys carry CVE-2026-56391.

Container imageDigestPackageFixed in
quay.io/devtron/devtron-utils:dup-chart-repo-v1.1.095d6f0e05636
coreutils@9.1-1
no fix listed
quay.io/devtron/postgres:14.91b594392f7cb
coreutils@9.1-1
no fix listed

Open the chart page →

31,447
migration-incluster-cdromholdings0.10.01 of 1See more

migration-incluster-cd romholdings 0.10.0

1 of the 1 container images this version deploys carry CVE-2026-56391.

Container imageDigestPackageFixed in
library/postgres:122f2a8c2a7d10
coreutils@9.1-1
no fix listed

Open the chart page →

3,699
beaconrotationalVerified publisher0.2.01 of 1See more

beacon rotational 0.2.0

1 of the 1 container images this version deploys carry CVE-2026-56391.

Container imageDigestPackageFixed in
rotationalio/beacon:0.2.0f8d8b694515a
coreutils@9.7-3+dhi4
no fix listed

Open the chart page →

951
endeavorrotationalVerified publisher1.3.12 of 2See more

endeavor rotational 1.3.1

2 of the 2 container images this version deploys carry CVE-2026-56391.

Container imageDigestPackageFixed in
rotationalio/endeavor:1.3.0ac566baddc06
coreutils@9.1-1
no fix listed
rotationalio/quarterdeck:0.16.00e7ad3a031dc
coreutils@9.1-1
no fix listed

Open the chart page →

2,092
genoarotationalVerified publisher1.4.01 of 1See more

genoa rotational 1.4.0

1 of the 1 container images this version deploys carry CVE-2026-56391.

Container imageDigestPackageFixed in
rotationalio/genoa:1.2.03ab583519215
coreutils@9.1-1
no fix listed

Open the chart page →

916
geopingrotationalVerified publisher1.3.21 of 1See more

geoping rotational 1.3.2

1 of the 1 container images this version deploys carry CVE-2026-56391.

Container imageDigestPackageFixed in
rotationalio/geoping:1.3.034bcb6fc3cb7
coreutils@9.7-3
no fix listed

Open the chart page →

1,575
honurotationalVerified publisher0.5.31 of 1See more

honu rotational 0.5.3

1 of the 1 container images this version deploys carry CVE-2026-56391.

Container imageDigestPackageFixed in
rotationalio/honu:0.5.069fd30c2e31c
coreutils@9.1-1
no fix listed

Open the chart page →

2,169
imgtagrotationalVerified publisher0.2.01 of 1See more

imgtag rotational 0.2.0

1 of the 1 container images this version deploys carry CVE-2026-56391.

Container imageDigestPackageFixed in
gcr.io/rotationalio-habanero/imgtag:89ec287a534a3170d03
coreutils@9.1-1
no fix listed

Open the chart page →

3,318
quarterdeckrotationalVerified publisher0.16.01 of 1See more

quarterdeck rotational 0.16.0

1 of the 1 container images this version deploys carry CVE-2026-56391.

Container imageDigestPackageFixed in
rotationalio/quarterdeck:0.16.00e7ad3a031dc
coreutils@9.1-1
no fix listed

Open the chart page →

1,087
rotational-apirotationalVerified publisher1.3.11 of 1See more

rotational-api rotational 1.3.1

1 of the 1 container images this version deploys carry CVE-2026-56391.

Container imageDigestPackageFixed in
rotationalio/rotational-api:1.3.0f1a2d05d8fff
coreutils@9.7-3
no fix listed

Open the chart page →

1,558
vanityrotationalVerified publisher1.2.21 of 1See more

vanity rotational 1.2.2

1 of the 1 container images this version deploys carry CVE-2026-56391.

Container imageDigestPackageFixed in
rotationalio/vanity:1.2.0d77350f69b45
coreutils@9.7-3
no fix listed

Open the chart page →

1,195
routehub-serverroutehub-helm1.0.11 of 3See more

routehub-server routehub-helm 1.0.1

1 of the 3 container images this version deploys carry CVE-2026-56391.

Container imageDigestPackageFixed in
library/postgres:latest4ef4dbc939d6
coreutils@9.7-3
no fix listed

Open the chart page →

6,940
agentdatarss30.1.01 of 1See more

agentdata rss3 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-56391.

Container imageDigestPackageFixed in
ghcr.io/rss3-network/agentdata:0.1.0fd8d3e6e4cdf
coreutils@9.1-1
no fix listed

Open the chart page →

3,406
noderss30.7.21 of 3See more

node rss3 0.7.2

1 of the 3 container images this version deploys carry CVE-2026-56391.

Container imageDigestPackageFixed in
ghcr.io/rss3-network/agentdata:0.1.0fd8d3e6e4cdf
coreutils@9.1-1
no fix listed

Open the chart page →

4,612
paperless-ngxrtomik-helm-chartsVerified publisher0.0.51 of 1See more

paperless-ngx rtomik-helm-charts 0.0.5

1 of the 1 container images this version deploys carry CVE-2026-56391.

Container imageDigestPackageFixed in
ghcr.io/paperless-ngx/paperless-ngx:2.20.357ad9565bff3
coreutils@9.7-3
no fix listed

Open the chart page →

10,492
flaresolverrrubxkubeVerified publisher0.1.11 of 1See more

flaresolverr rubxkube 0.1.1

1 of the 1 container images this version deploys carry CVE-2026-56391.

Container imageDigestPackageFixed in
flaresolverr/flaresolverr:v3.5.0139dfee1c6f8
coreutils@9.1-1
no fix listed

Open the chart page →

27,282
jellyfinrubxkubeVerified publisher1.3.11 of 1See more

jellyfin rubxkube 1.3.1

1 of the 1 container images this version deploys carry CVE-2026-56391.

Container imageDigestPackageFixed in
jellyfin/jellyfin:10.11.11aefb67e6a7ff
coreutils@9.7-3
no fix listed

Open the chart page →

2,615
joplinrubxkubeVerified publisher1.3.11 of 2See more

joplin rubxkube 1.3.1

1 of the 2 container images this version deploys carry CVE-2026-56391.

Container imageDigestPackageFixed in
bitnamilegacy/postgresql:17.2.0-debian-12-r2e6fa49bb0347
coreutils@9.1-1
no fix listed

Open the chart page →

7,429

Container images carrying it

1,352 by charts deploying them

A fixed version is listed for 2 of the 2 affected packages.

Container imageDigestPackageFixed inUsed by
library/golang:latest512690a56605
coreutils@9.7-3
no fix listed
1
library/haproxy:3.4.10f597665a2a6
coreutils@9.7-3
no fix listed
1
library/haproxy:3.1-bookworm49a0a0d6f0b8
coreutils@9.1-1
no fix listed
1
library/haproxy:2.8.288baa7d29a27a
coreutils@9.7-3
no fix listed
1
library/haproxy:2.9.6fc5748ff7c72
coreutils@9.1-1
no fix listed
1
library/httpd:2.4.631ae8051591a5
coreutils@9.1-1
no fix listed
1
library/influxdb:2.8571eb4514977
coreutils@9.1-1
no fix listed
1
library/influxdb:1.12.3-meta8812029260b5
coreutils@9.1-1
no fix listed
1
library/influxdb:1.12.3-datab0f9fc41ed79
coreutils@9.1-1
no fix listed
1
library/influxdb:latestf75e48af0598
coreutils@9.1-1
no fix listed
1
library/matomo:5.1.2-apache2415789e1602
coreutils@9.1-1
no fix listed
1
library/matomo:5.13.0-apache8e6bdd396496
coreutils@9.7-3
no fix listed
1
library/memcached:1.6.4226983a43c918
coreutils@9.7-3
no fix listed
1
library/memcached:1.6.409ae868852d0b
coreutils@9.7-3
no fix listed
1
library/memcached:1.6.40cc523a19da58
coreutils@9.7-3
no fix listed
1
library/memcached:1.6.45dc561d52bb8a
coreutils@9.7-3
no fix listed
1
library/memcached:1.6.42-trixiee2a8683c7fbb
coreutils@9.7-3
no fix listed
1
library/mysql:8.0-debian9382e4f6f7f0
coreutils@9.1-1
no fix listed
1
library/neo4j:2026.05.0-enterprise2caf944aa4a5
coreutils@9.7-3
no fix listed
1
library/neo4j:2026.02.25ab4ab0358cf
coreutils@9.7-3
no fix listed
1
library/neo4j:2026.05.06c162e2432f8
coreutils@9.7-3
no fix listed
1
library/nextcloud:31.0.6-apache588609d76b21
coreutils@9.1-1
no fix listed
1
library/nextcloud:31.0.10-apacheb7faa1653c39
coreutils@9.7-3
no fix listed
1
library/nextcloud:34.0.3:34.0.3-apacheb97df9e0e1ee
coreutils@9.7-3
no fix listed
1
library/nextcloud:34.0.4-apachede4ad9389386
coreutils@9.7-3
no fix listed
1
library/nginx:1.27.409369da6b103
coreutils@9.1-1
no fix listed
1
library/nginx:1.291881968aff6f
coreutils@9.7-3
no fix listed
1
library/nginx:1.276784fb0834aa
coreutils@9.1-1
no fix listed
1
library/nginx:1.25.167f9a4f10d14
coreutils@9.1-1
no fix listed
1
library/nginx:1.25.49ff236ed47fe
coreutils@9.1-1
no fix listed
1
library/nginx:1.27.3fb197595ebe7
coreutils@9.1-1
no fix listed
1
library/node:22-bookworm-slim83f487e0a634
coreutils@9.1-1
no fix listed
1
library/node:208f693eaa7e0a
coreutils@9.1-1
no fix listed
1
library/node:latestf5d1cc40abc1
coreutils@9.7-3
no fix listed
1
library/php:8.4-fpm59fa733c9af6
coreutils@9.7-3
no fix listed
1
library/postgres:18.0073e7c8b84e2
coreutils@9.7-3
no fix listed
1
library/postgres:17.4304ab8135187
coreutils@9.1-1
no fix listed
1
library/postgres:18.43a82e1f56c8f
coreutils@9.7-3
no fix listed
1
library/postgres:16.11468e1f126ca5
coreutils@9.7-3
no fix listed
1
library/postgres:16.6557fea37a744
coreutils@9.1-1
no fix listed
1
library/postgres:18.369e8582b781c
coreutils@9.7-3
no fix listed
1
library/postgres:15.186eb0add3b77c
coreutils@9.7-3
no fix listed
1
library/postgres:15.38775adb39f0d
coreutils@9.1-1
no fix listed
1
library/postgres:18.48ff36f3c6637
coreutils@9.7-3
no fix listed
1
library/postgres:18.3a9abf4275f9e
coreutils@9.7-3
no fix listed
1
library/postgres:17.5aadf2c0696f5
coreutils@9.7-3
no fix listed
1
library/postgres:13.12ced3ba927f4c
coreutils@9.1-1
no fix listed
1
library/postgres:15.18-bookworme8db9bd3e9e1
coreutils@9.1-1
no fix listed
1
library/postgres:14.22eba8ddbdd837
coreutils@9.7-3
no fix listed
1
library/postgres:17.10ebba4f4de37f
coreutils@9.7-3
no fix listed
1

syft 1.42.1 · advisories as of 15 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.