StackRadar

CVE-2026-56391

Medium

Advisory

Published 24 Jul 2026In the index since 5 Sept 2026
Severity
Medium
worst across findings
CVSS
6.1
base score, highest
EPSS
0.001
3rd percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
1,470
of 17,790 indexed, latest versions
Container images
1,352
deployed by those charts
Fix available
2 of 2
affected packages

The matching OSV records carry no description.

Carried by container images the latest versions of 1,470 of 17,790 indexed charts deploy, on 1,352 images.

Affected packageAffected versionsFixed inImages
coreutilsdeb9.1-1, 9.7-3, 9.7-3+dhi3, 9.7-3+dhi4+2 more9.7-3+e4, 9.7-3ubuntu2.11,342
coreutils-fromdeb9.5-1ubuntu2+0.0.0~ubuntu259.7-3ubuntu2.171
OSV records
DEBIAN-CVE-2026-56391UBUNTU-CVE-2026-56391ECHO-3699-27c7-123e
Also known as
USN-8697-1

Charts affected

1,470 by stars
ChartLatestAffected imagesRadar Score
komgarubxkubeVerified publisher0.1.31 of 1See more

komga rubxkube 0.1.3

1 of the 1 container images this version deploys carry CVE-2026-56391.

Container imageDigestPackageFixed in
gotson/komga:1.26.36c2a967bbe9a
coreutils@9.7-3ubuntu2
coreutils-from@9.5-1ubuntu2+0.0.0~ubuntu25
9.7-3ubuntu2.1
9.7-3ubuntu2.1

Open the chart page →

2,300
linkdingrubxkubeVerified publisher1.2.31 of 1See more

linkding rubxkube 1.2.3

1 of the 1 container images this version deploys carry CVE-2026-56391.

Container imageDigestPackageFixed in
sissbruecker/linkding:1.46.20c0a9a04c7eb
coreutils@9.7-3
no fix listed

Open the chart page →

2,063
simple-coffeerubxkubeVerified publisher0.1.01 of 1See more

simple-coffee rubxkube 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-56391.

Container imageDigestPackageFixed in
qjoly/kubernetes-coffee-image:simpleec94d3bdc035
coreutils@9.7-3
no fix listed

Open the chart page →

2,458
trmnl-serverrubxkubeVerified publisher0.1.01 of 2See more

trmnl-server rubxkube 0.1.0

1 of the 2 container images this version deploys carry CVE-2026-56391.

Container imageDigestPackageFixed in
library/python:3.14-slimcad9a2c87176
coreutils@9.7-3
no fix listed

Open the chart page →

2,753
uptime-kumarubxkubeVerified publisher1.2.11 of 1See more

uptime-kuma rubxkube 1.2.1

1 of the 1 container images this version deploys carry CVE-2026-56391.

Container imageDigestPackageFixed in
louislam/uptime-kuma:2.4.091e963bfda56
coreutils@9.1-1
no fix listed

Open the chart page →

29,870
vaultwardenrubxkubeVerified publisher1.2.41 of 1See more

vaultwarden rubxkube 1.2.4

1 of the 1 container images this version deploys carry CVE-2026-56391.

Container imageDigestPackageFixed in
vaultwarden/server:1.37.2094b5689ed81
coreutils@9.7-3
no fix listed

Open the chart page →

1,756
your-spotifyrubxkubeVerified publisher1.0.11 of 3See more

your-spotify rubxkube 1.0.1

1 of the 3 container images this version deploys carry CVE-2026-56391.

Container imageDigestPackageFixed in
bitnamilegacy/mongodb:latestb0652af9c8d0
coreutils@9.1-1
no fix listed

Open the chart page →

4,966
runwhen-localrunwhen-contribVerified publisher0.6.171 of 3See more

runwhen-local runwhen-contrib 0.6.17

1 of the 3 container images this version deploys carry CVE-2026-56391.

Container imageDigestPackageFixed in
ghcr.io/runwhen-contrib/runwhen-local:0.12.0533ce58c6e02
coreutils@9.7-3
no fix listed

Open the chart page →

3,673
rybbitrybbit-helm1.3.01 of 7See more

rybbit rybbit-helm 1.3.0

1 of the 7 container images this version deploys carry CVE-2026-56391.

Container imageDigestPackageFixed in
valkey/valkey:9.1.164e361b630ec
coreutils@9.7-3
no fix listed

Open the chart page →

5,833
nadekobotryuunosukeds30.1.21 of 2See more

nadekobot ryuunosukeds3 0.1.2

1 of the 2 container images this version deploys carry CVE-2026-56391.

Container imageDigestPackageFixed in
library/ubuntu:latest2260313b31c8
coreutils@9.7-3ubuntu2
coreutils-from@9.5-1ubuntu2+0.0.0~ubuntu25
9.7-3ubuntu2.1
9.7-3ubuntu2.1

Open the chart page →

8,720
orbitalryuunosukeds30.2.01 of 1See more

orbital ryuunosukeds3 0.2.0

1 of the 1 container images this version deploys carry CVE-2026-56391.

Container imageDigestPackageFixed in
ryuunosukeds3/orbital:latest0879f7261b10
coreutils@9.1-1
no fix listed

Open the chart page →

2,556
transmissionryuunosukeds31.6.21 of 2See more

transmission ryuunosukeds3 1.6.2

1 of the 2 container images this version deploys carry CVE-2026-56391.

Container imageDigestPackageFixed in
library/python:3.9da5aee29682d
coreutils@9.7-3
no fix listed

Open the chart page →

9,421
test-helm-app1saam-helm-test0.1.01 of 1See more

test-helm-app1 saam-helm-test 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-56391.

Container imageDigestPackageFixed in
hamidyousefi93/saam-test:latestc34f071f6ed0
coreutils@9.1-1
no fix listed

Open the chart page →

3,374
hivechart-1sabryp3-charts0.2.01 of 2See more

hivechart-1 sabryp3-charts 0.2.0

1 of the 2 container images this version deploys carry CVE-2026-56391.

Container imageDigestPackageFixed in
valkey/valkey:latestc123e3715db6
coreutils@9.7-3
no fix listed

Open the chart page →

804
safe-config-servicesafe-global0.1.01 of 3See more

safe-config-service safe-global 0.1.0

1 of the 3 container images this version deploys carry CVE-2026-56391.

Container imageDigestPackageFixed in
safeglobal/safe-config-service:latest09a5e495c219
coreutils@9.7-3
no fix listed

Open the chart page →

1,581
safe-stacksafe-global0.1.03 of 9See more

safe-stack safe-global 0.1.0

3 of the 9 container images this version deploys carry CVE-2026-56391.

Container imageDigestPackageFixed in
gjeanmart/safe-ganache-node:latest926264c8f2d1
coreutils@9.1-1
no fix listed
safeglobal/safe-config-service:latest09a5e495c219
coreutils@9.7-3
no fix listed
safeglobal/safe-transaction-service:latest80db836cc5d5
coreutils@9.7-3
no fix listed

Open the chart page →

17,736
safe-transaction-servicesafe-global0.1.02 of 6See more

safe-transaction-service safe-global 0.1.0

2 of the 6 container images this version deploys carry CVE-2026-56391.

Container imageDigestPackageFixed in
gjeanmart/safe-ganache-node:latest926264c8f2d1
coreutils@9.1-1
no fix listed
safeglobal/safe-transaction-service:latest80db836cc5d5
coreutils@9.7-3
no fix listed

Open the chart page →

14,792
sagawisesagawiseVerified publisher0.1.01 of 3See more

sagawise sagawise 0.1.0

1 of the 3 container images this version deploys carry CVE-2026-56391.

Container imageDigestPackageFixed in
venturenox/redis:latest83b471c193ba
coreutils@9.1-1
no fix listed

Open the chart page →

4,104
evsantisbon0.2.02 of 5See more

ev santisbon 0.2.0

2 of the 5 container images this version deploys carry CVE-2026-56391.

Container imageDigestPackageFixed in
santisbon/evwatcher:latestc4e994ca4540
coreutils@9.1-1
no fix listed
santisbon/evworker:lateste807283f8d69
coreutils@9.1-1
no fix listed

Open the chart page →

12,090
speedtestsantisbon0.1.02 of 3See more

speedtest santisbon 0.1.0

2 of the 3 container images this version deploys carry CVE-2026-56391.

Container imageDigestPackageFixed in
library/influxdb:2.7b8d940ca9376
coreutils@9.1-1
no fix listed
santisbon/speedtest:latest8ee3a1697227
coreutils@9.1-1
no fix listed

Open the chart page →

11,314
airflowsb-helm-charts0.3.01 of 1See more

airflow sb-helm-charts 0.3.0

1 of the 1 container images this version deploys carry CVE-2026-56391.

Container imageDigestPackageFixed in
apache/airflow:2.8.1e5560ad0b86e
coreutils@9.1-1
no fix listed

Open the chart page →

9,340
jellyfinsb-helm-charts0.4.01 of 1See more

jellyfin sb-helm-charts 0.4.0

1 of the 1 container images this version deploys carry CVE-2026-56391.

Container imageDigestPackageFixed in
jellyfin/jellyfin:10.10.317c3a8d9dddb
coreutils@9.1-1
no fix listed

Open the chart page →

3,864
mlflowsb-helm-charts0.3.01 of 1See more

mlflow sb-helm-charts 0.3.0

1 of the 1 container images this version deploys carry CVE-2026-56391.

Container imageDigestPackageFixed in
library/python:3.11-slim9534e5a8e315
coreutils@9.7-3
no fix listed

Open the chart page →

885
nextcloudsb-helm-charts0.4.01 of 2See more

nextcloud sb-helm-charts 0.4.0

1 of the 2 container images this version deploys carry CVE-2026-56391.

Container imageDigestPackageFixed in
library/nextcloud:31.0.10-apacheb7faa1653c39
coreutils@9.7-3
no fix listed

Open the chart page →

9,687
phpmyadminsb-helm-charts0.3.01 of 1See more

phpmyadmin sb-helm-charts 0.3.0

1 of the 1 container images this version deploys carry CVE-2026-56391.

Container imageDigestPackageFixed in
library/phpmyadmin:5.2.16e75aa8f767c
coreutils@9.1-1
no fix listed

Open the chart page →

5,065
postgresqlsb-helm-charts0.4.01 of 1See more

postgresql sb-helm-charts 0.4.0

1 of the 1 container images this version deploys carry CVE-2026-56391.

Container imageDigestPackageFixed in
library/postgres:16.11468e1f126ca5
coreutils@9.7-3
no fix listed

Open the chart page →

2,345
rsshubsb-helm-charts0.3.01 of 1See more

rsshub sb-helm-charts 0.3.0

1 of the 1 container images this version deploys carry CVE-2026-56391.

Container imageDigestPackageFixed in
diygod/rsshub:2025-11-097a6312cac0d5
coreutils@9.1-1
no fix listed

Open the chart page →

4,559
vaultwardensb-helm-charts0.4.01 of 1See more

vaultwarden sb-helm-charts 0.4.0

1 of the 1 container images this version deploys carry CVE-2026-56391.

Container imageDigestPackageFixed in
vaultwarden/server:1.34.384fd8a47f58d
coreutils@9.1-1
no fix listed

Open the chart page →

3,210
wordpresssb-helm-charts0.4.02 of 2See more

wordpress sb-helm-charts 0.4.0

2 of the 2 container images this version deploys carry CVE-2026-56391.

Container imageDigestPackageFixed in
library/mysql:8.0-debian9382e4f6f7f0
coreutils@9.1-1
no fix listed
library/wordpress:6.4.3-apache8ae66efb09a2
coreutils@9.1-1
no fix listed

Open the chart page →

12,009
postgresscalified-postgresVerified publisher18.4.01 of 1See more

postgres scalified-postgres 18.4.0

1 of the 1 container images this version deploys carry CVE-2026-56391.

Container imageDigestPackageFixed in
library/postgres:18.4a02db8cac496
coreutils@9.7-3
no fix listed

Open the chart page →

1,673
factorioschichtelVerified publisher0.1.11 of 1See more

factorio schichtel 0.1.1

1 of the 1 container images this version deploys carry CVE-2026-56391.

Container imageDigestPackageFixed in
factoriotools/factorio:2.0.67-rootlessf7909f7361d6
coreutils@9.7-3
no fix listed

Open the chart page →

2,983
s3-backupschichtelVerified publisher0.10.01 of 1See more

s3-backup schichtel 0.10.0

1 of the 1 container images this version deploys carry CVE-2026-56391.

Container imageDigestPackageFixed in
ghcr.io/pschichtel/s3-backup:0.7.017666811f6a7
coreutils@9.7-3
no fix listed

Open the chart page →

2,322
vaultwardenschichtelVerified publisher0.9.21 of 1See more

vaultwarden schichtel 0.9.2

1 of the 1 container images this version deploys carry CVE-2026-56391.

Container imageDigestPackageFixed in
vaultwarden/server:1.37.2094b5689ed81
coreutils@9.7-3
no fix listed

Open the chart page →

1,756
wordpressschichtelVerified publisher0.10.102 of 2See more

wordpress schichtel 0.10.10

2 of the 2 container images this version deploys carry CVE-2026-56391.

Container imageDigestPackageFixed in
library/wordpress:6.9.4-fpmad4a8bae2eb4
coreutils@9.7-3
no fix listed
nginxinc/nginx-unprivileged:1.29.5c5b989ebc150
coreutils@9.7-3
no fix listed

Open the chart page →

8,082
otterwikischmitzis0.1.01 of 1See more

otterwiki schmitzis 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-56391.

Container imageDigestPackageFixed in
redimp/otterwiki:2778bf30da3da
coreutils@9.1-1
no fix listed

Open the chart page →

3,019
jellyfinschoolguys-helmcharts0.4.21 of 1See more

jellyfin schoolguys-helmcharts 0.4.2

1 of the 1 container images this version deploys carry CVE-2026-56391.

Container imageDigestPackageFixed in
jellyfin/jellyfin:10.11.81694ff069f0c
coreutils@9.7-3
no fix listed

Open the chart page →

2,967
photoprismschoolguys-helmcharts0.3.81 of 1See more

photoprism schoolguys-helmcharts 0.3.8

1 of the 1 container images this version deploys carry CVE-2026-56391.

Container imageDigestPackageFixed in
photoprism/photoprism:260601650c6ad5a651
coreutils@9.7-3ubuntu2
coreutils-from@9.5-1ubuntu2+0.0.0~ubuntu25
9.7-3ubuntu2.1
9.7-3ubuntu2.1

Open the chart page →

10,429
typo3schoolguys-helmcharts0.4.21 of 1See more

typo3 schoolguys-helmcharts 0.4.2

1 of the 1 container images this version deploys carry CVE-2026-56391.

Container imageDigestPackageFixed in
registry.gitlab.com/school_guy/docker-typo3:13.4.30-197d868ed76185d7270d
coreutils@9.1-1
no fix listed

Open the chart page →

4,630
unboundschoolguys-helmcharts0.1.11 of 1See more

unbound schoolguys-helmcharts 0.1.1

1 of the 1 container images this version deploys carry CVE-2026-56391.

Container imageDigestPackageFixed in
mvance/unbound:1.20.04bf67b567f39
coreutils@9.1-1
no fix listed

Open the chart page →

2,748
wyoming-faster-whisperschoolguys-helmcharts0.1.41 of 1See more

wyoming-faster-whisper schoolguys-helmcharts 0.1.4

1 of the 1 container images this version deploys carry CVE-2026-56391.

Container imageDigestPackageFixed in
rhasspy/wyoming-whisper:3.5.0308b7959a925
coreutils@9.1-1
no fix listed

Open the chart page →

2,196
wyoming-piperschoolguys-helmcharts0.1.41 of 1See more

wyoming-piper schoolguys-helmcharts 0.1.4

1 of the 1 container images this version deploys carry CVE-2026-56391.

Container imageDigestPackageFixed in
rhasspy/wyoming-piper:2.3.169b7f797ae3a
coreutils@9.1-1
no fix listed

Open the chart page →

1,770
sealed-secrets-uisealed-secrets-uiVerified publisher0.0.81 of 1See more

sealed-secrets-ui sealed-secrets-ui 0.0.8

1 of the 1 container images this version deploys carry CVE-2026-56391.

Container imageDigestPackageFixed in
ghcr.io/noahburrell0/sealed-secrets-ui:v0.1.47e7368fb472d
coreutils@9.1-1
no fix listed

Open the chart page →

4,570
search-proxysearch-proxy2026.38.01 of 1See more

search-proxy search-proxy 2026.38.0

1 of the 1 container images this version deploys carry CVE-2026-56391.

Container imageDigestPackageFixed in
ghcr.io/unique-ag/ai/search-proxy:2026.38.0aa6699b027bb
coreutils@9.7-3
no fix listed

Open the chart page →

1,262
seawise-dashboardseawiseVerified publisher1.7.11 of 1See more

seawise-dashboard seawise 1.7.1

1 of the 1 container images this version deploys carry CVE-2026-56391.

Container imageDigestPackageFixed in
shwcloud/seawise-backup:v1.7.1a97479a54df4
coreutils@9.7-3
no fix listed

Open the chart page →

1,078
postgresself-hosters-by-nightVerified publisher0.14.31 of 1See more

postgres self-hosters-by-night 0.14.3

1 of the 1 container images this version deploys carry CVE-2026-56391.

Container imageDigestPackageFixed in
library/postgres:18.11090bc3a8ccf
coreutils@9.7-3
no fix listed

Open the chart page →

2,386
valkeyself-hosters-by-nightVerified publisher0.1.01 of 1See more

valkey self-hosters-by-night 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-56391.

Container imageDigestPackageFixed in
valkey/valkey:9.1.164e361b630ec
coreutils@9.7-3
no fix listed

Open the chart page →

818
service-exampleservice-example-10.1.01 of 7See more

service-example service-example-1 0.1.0

1 of the 7 container images this version deploys carry CVE-2026-56391.

Container imageDigestPackageFixed in
library/redis:latest298e5b3bc566
coreutils@9.7-3
no fix listed

Open the chart page →

9,074
serviceexampleserviceexample-chart0.3.02 of 4See more

serviceexample serviceexample-chart 0.3.0

2 of the 4 container images this version deploys carry CVE-2026-56391.

Container imageDigestPackageFixed in
library/redis:latest298e5b3bc566
coreutils@9.7-3
no fix listed
tibyandocker/serviceexample:latesta4ad592cea84
coreutils@9.1-1
no fix listed

Open the chart page →

3,929
serviceexampleservice-example-helm-chart0.1.01 of 4See more

serviceexample service-example-helm-chart 0.1.0

1 of the 4 container images this version deploys carry CVE-2026-56391.

Container imageDigestPackageFixed in
library/redis:latest298e5b3bc566
coreutils@9.7-3
no fix listed

Open the chart page →

2,277
service-exampleservice-example-jt0.1.11 of 9See more

service-example service-example-jt 0.1.1

1 of the 9 container images this version deploys carry CVE-2026-56391.

Container imageDigestPackageFixed in
janzo83/serviceexample:latestfb3c4ac36f3e
coreutils@9.1-1
no fix listed

Open the chart page →

7,105

Container images carrying it

1,352 by charts deploying them

A fixed version is listed for 2 of the 2 affected packages.

Container imageDigestPackageFixed inUsed by
library/postgres:17.5-bookwormfbcea1bd13b6
coreutils@9.1-1
no fix listed
1
library/python:3.1070c9cc675605
coreutils@9.7-3
no fix listed
1
library/python:3.11-slim9534e5a8e315
coreutils@9.7-3
no fix listed
1
library/python:3.8d41127070014
coreutils@9.1-1
no fix listed
1
library/python:3.9da5aee29682d
coreutils@9.7-3
no fix listed
1
library/redis:8.6.2009cc37796fb
coreutils@9.7-3
no fix listed
1
library/redis:8.8.0234c902a2db4
coreutils@9.7-3
no fix listed
1
library/redis:8.4.03906b477e4b6
coreutils@9.1-1
no fix listed
1
library/redis:8.8.1-trixie3eafabb4c93f
coreutils@9.7-3
no fix listed
1
library/redis:8.2.24521b581dbdd
coreutils@9.1-1
no fix listed
1
library/redis:8.6.34d25e2fe601f
coreutils@9.7-3
no fix listed
1
library/redis:8.2.15fa2edb1e408
coreutils@9.1-1
no fix listed
1
library/redis83edc2b8e9ff
coreutils@9.1-1
no fix listed
1
library/redis:8.48df317692c59
coreutils@9.7-3
no fix listed
1
library/redis:7.4.9a8f08480e1f8
coreutils@9.1-1
no fix listed
1
library/redis:8.0.2b43d2dcbbdb1
coreutils@9.1-1
no fix listed
1
library/redis:7.4.1bb142a9c18ac
coreutils@9.1-1
no fix listed
1
library/redis:8.0.3be0a135f1955
coreutils@9.1-1
no fix listed
1
library/redis:8.2.3d31852005202
coreutils@9.1-1
no fix listed
1
library/redmine:6.1.204ac44a2595b
coreutils@9.7-3
no fix listed
1
library/telegraf:1.27507a3eecf809
coreutils@9.1-1
no fix listed
1
library/varnish:7.5.04d0bb287d87b
coreutils@9.1-1
no fix listed
1
library/wordpress:6.4.3-apache8ae66efb09a2
coreutils@9.1-1
no fix listed
1
library/wordpress:6.9.4-fpmad4a8bae2eb4
coreutils@9.7-3
no fix listed
1
library/wordpress:php8.1-apachef73396626d2f
coreutils@9.7-3
no fix listed
1
libretranslate/libretranslate:v1.9.61de2d7056bb8
coreutils@9.1-1
no fix listed
1
linuxserver/plex:1.43.41f6f97d76e7b
coreutils-from@9.5-1ubuntu2+0.0.0~ubuntu25
9.7-3ubuntu2.1
1
lis314/project-zomboid-docker:latestaa2089c37920
coreutils@9.1-1
no fix listed
1
lmacka/snappass:2.1.293f5c048b7d4
coreutils@9.7-3
no fix listed
1
localstack/localstack:latest3fe5b51caec8
coreutils@9.7-3
no fix listed
1
localstack/localstack:3.19d278167f2b7
coreutils@9.1-1
no fix listed
1
locustio/locust:2.24.151d866285170
coreutils@9.1-1
no fix listed
1
logiqai/flash:v3.10.265b996bc7bdc
coreutils@9.1-1
no fix listed
1
louislam/its-mytabs:1.7.02e478d3170bd
coreutils@9.7-3
no fix listed
1
louislam/uptime-kuma:2.2.1-slim059b49d64739
coreutils@9.1-1
no fix listed
1
louislam/uptime-kuma:2.0.24c364ef96aad
coreutils@9.1-1
no fix listed
1
louislam/uptime-kuma:2.4.091e963bfda56
coreutils@9.1-1
no fix listed
1
louislam/uptime-kuma:2.0.2-slim-rootless9865163f92c1
coreutils@9.1-1
no fix listed
1
luligu/matterbridge:3.0.28f97884bebc2
coreutils@9.1-1
no fix listed
1
machines/filestash:latest0b8fc005e52e
coreutils@9.7-3
no fix listed
1
makemake1337/blutgang:latest8a55174fc830
coreutils@9.1-1
no fix listed
1
makeplane/plane-mcp-server:v0.3.071b7252adef0
coreutils@9.7-3
no fix listed
1
makersquad/harp-proxy:0.8.1a40dd258c527
coreutils@9.1-1
no fix listed
1
maponyacharles/sceptreai:mlflow-0.1.1242d418654ebd
coreutils@9.7-3
no fix listed
1
maponyacharles/sceptreai:api-0.1.127b37b092130a
coreutils@9.7-3
no fix listed
1
marcoimme/oidcmock:latestb6035c0721a8
coreutils@9.7-3
no fix listed
1
mariusm/vingress:0.5.0b3db186c3d72
coreutils@9.7-3
no fix listed
1
martinhelmich/typo3:12.4c83a4f3fd7ae
coreutils@9.1-1
no fix listed
1
mathesar/mathesar:0.12.0091757cb01fe
coreutils@9.1-1
no fix listed
1
matrixdotorg/synapse:v1.160.078de1d10bef0
coreutils@9.7-3
no fix listed
1

syft 1.42.1 · advisories as of 15 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.