StackRadar

CVE-2026-56391

Medium

Advisory

Published 24 Jul 2026In the index since 5 Sept 2026
Severity
Medium
worst across findings
CVSS
6.1
base score, highest
EPSS
0.001
3rd percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
1,483
of 17,790 indexed, latest versions
Container images
1,374
deployed by those charts
Fix available
2 of 2
affected packages

The matching OSV records carry no description.

Carried by container images the latest versions of 1,483 of 17,790 indexed charts deploy, on 1,374 images.

Affected packageAffected versionsFixed inImages
coreutilsdeb9.1-1, 9.7-3, 9.7-3+dhi3, 9.7-3+dhi4+2 more9.7-3+e4, 9.7-3ubuntu2.11,362
coreutils-fromdeb9.5-1ubuntu2+0.0.0~ubuntu259.7-3ubuntu2.173
OSV records
DEBIAN-CVE-2026-56391UBUNTU-CVE-2026-56391ECHO-3699-27c7-123e
Also known as
USN-8697-1

Charts affected

1,483 by stars
ChartLatestAffected imagesRadar Score
resource-servicemicroservices-learningVerified publisher1.5.01 of 2See more

resource-service microservices-learning 1.5.0

1 of the 2 container images this version deploys carry CVE-2026-56391.

Container imageDigestPackageFixed in
library/postgres:latest4ef4dbc939d6
coreutils@9.7-3
no fix listed

Open the chart page →

5,154
song-servicemicroservices-learningVerified publisher1.2.01 of 2See more

song-service microservices-learning 1.2.0

1 of the 2 container images this version deploys carry CVE-2026-56391.

Container imageDigestPackageFixed in
library/postgres:latest4ef4dbc939d6
coreutils@9.7-3
no fix listed

Open the chart page →

4,625
parent-chartmid-proje0.1.01 of 3See more

parent-chart mid-proje 0.1.0

1 of the 3 container images this version deploys carry CVE-2026-56391.

Container imageDigestPackageFixed in
youssef11gaber10/flask-service:latest9c727fcfde76
coreutils@9.7-3
no fix listed

Open the chart page →

1,796
teimilvus-helm1.6.01 of 1See more

tei milvus-helm 1.6.0

1 of the 1 container images this version deploys carry CVE-2026-56391.

Container imageDigestPackageFixed in
ghcr.io/huggingface/text-embeddings-inference:cpu-1.666db77d7856c
coreutils@9.1-1
no fix listed

Open the chart page →

3,301
mini-blogmini-blog-helm0.1.02 of 3See more

mini-blog mini-blog-helm 0.1.0

2 of the 3 container images this version deploys carry CVE-2026-56391.

Container imageDigestPackageFixed in
beyzkaya/blog-backend:v1.0.112a6a3d1c5f9
coreutils@9.1-1
no fix listed
library/postgres:159b1d34adbce1
coreutils@9.7-3
no fix listed

Open the chart page →

13,107
MINTmint8.0.23 of 15See more

MINT mint 8.0.2

3 of the 15 container images this version deploys carry CVE-2026-56391.

Container imageDigestPackageFixed in
library/nginx:latest05b8cb60c354
coreutils@9.7-3
no fix listed
library/redis:latest298e5b3bc566
coreutils@9.7-3
no fix listed
mintproject/model-catalog-fastapi:7dd88dc5bf1fe6a6d4703ea0a077afee45cb256102260d20a21f
coreutils@9.1-1
no fix listed

Open the chart page →

43,532
aws-api-gateway-operatormintel0.1.21 of 11See more

aws-api-gateway-operator mintel 0.1.2

1 of the 11 container images this version deploys carry CVE-2026-56391.

Container imageDigestPackageFixed in
localstack/localstack-pro:latest4aef81c53168
coreutils@9.7-3
no fix listed

Open the chart page →

10,683
standard-application-stackmintel11.4.11 of 12See more

standard-application-stack mintel 11.4.1

1 of the 12 container images this version deploys carry CVE-2026-56391.

Container imageDigestPackageFixed in
localstack/localstack:latest3fe5b51caec8
coreutils@9.7-3
no fix listed

Open the chart page →

10,613
session-scalermiqm0.1.01 of 1See more

session-scaler miqm 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-56391.

Container imageDigestPackageFixed in
miqm/session-scaler:0.1.0c5c211717d9b
coreutils@9.1-1
no fix listed

Open the chart page →

3,202
helmmirasys-chart0.1.02 of 4See more

helm mirasys-chart 0.1.0

2 of the 4 container images this version deploys carry CVE-2026-56391.

Container imageDigestPackageFixed in
library/redis:latest298e5b3bc566
coreutils@9.7-3
no fix listed
sepehrmdn/mirasys-assignment:1.0.12567228e33c8
coreutils@9.1-1
no fix listed

Open the chart page →

4,382
simplewebappmlohrVerified publisher1.1.01 of 1See more

simplewebapp mlohr 1.1.0

1 of the 1 container images this version deploys carry CVE-2026-56391.

Container imageDigestPackageFixed in
library/nginx:latest05b8cb60c354
coreutils@9.7-3
no fix listed

Open the chart page →

1,849
backendmojaloop0.1.01 of 6See more

backend mojaloop 0.1.0

1 of the 6 container images this version deploys carry CVE-2026-56391.

Container imageDigestPackageFixed in
bitnamilegacy/mysql:8.4.5-debian-12-r07089d796fc9b
coreutils@9.1-1
no fix listed

Open the chart page →

16,299
mollysocketmollysocketVerified publisher0.2.81 of 1See more

mollysocket mollysocket 0.2.8

1 of the 1 container images this version deploys carry CVE-2026-56391.

Container imageDigestPackageFixed in
ghcr.io/mollyim/mollysocket:1.1.12a687393f8c8
coreutils@9.1-1
no fix listed

Open the chart page →

3,039
mollysocketmollysocket-wrenixVerified publisher0.1.141 of 2See more

mollysocket mollysocket-wrenix 0.1.14

1 of the 2 container images this version deploys carry CVE-2026-56391.

Container imageDigestPackageFixed in
ghcr.io/mollyim/mollysocket:1.7.1c675622546a4
coreutils@9.1-1
no fix listed

Open the chart page →

2,540
mongo-compassmongo-compass-webVerified publisher1.1.41 of 1See more

mongo-compass mongo-compass-web 1.1.4

1 of the 1 container images this version deploys carry CVE-2026-56391.

Container imageDigestPackageFixed in
haohanyang/compass-web:0.5.1f4f8fe4e21f1
coreutils@9.1-1
no fix listed

Open the chart page →

1,781
mongo-compassmongo-compass-web-helm1.1.01 of 1See more

mongo-compass mongo-compass-web-helm 1.1.0

1 of the 1 container images this version deploys carry CVE-2026-56391.

Container imageDigestPackageFixed in
haohanyang/compass-web:0.5.054f2112602ee
coreutils@9.1-1
no fix listed

Open the chart page →

2,419
moodlemoodle1.0.31 of 2See more

moodle moodle 1.0.3

1 of the 2 container images this version deploys carry CVE-2026-56391.

Container imageDigestPackageFixed in
cloudtooling/moodle:5.2.3f4f04e0fc401
coreutils@9.1-1
no fix listed

Open the chart page →

3,972
camera-viewermoreillonVerified publisher0.2.11 of 4See more

camera-viewer moreillon 0.2.1

1 of the 4 container images this version deploys carry CVE-2026-56391.

Container imageDigestPackageFixed in
moreillon/camera-viewer:lateste418cc694bd5
coreutils@9.1-1
no fix listed

Open the chart page →

11,708
group-managermoreillonVerified publisher0.4.41 of 3See more

group-manager moreillon 0.4.4

1 of the 3 container images this version deploys carry CVE-2026-56391.

Container imageDigestPackageFixed in
moreillon/group-manager-front:v3.3.1c9f85db3baa5
coreutils@9.1-1
no fix listed

Open the chart page →

9,900
user-manager-mongodbmoreillonVerified publisher0.6.22 of 4See more

user-manager-mongodb moreillon 0.6.2

2 of the 4 container images this version deploys carry CVE-2026-56391.

Container imageDigestPackageFixed in
moreillon/user-manager-front:v5.0.3b067dbbbb6af
coreutils@9.1-1
no fix listed
moreillon/user-manager-mongoose:v5.0.1d2ee0423b797
coreutils@9.1-1
no fix listed

Open the chart page →

25,844
user-manager-neo4jmoreillonVerified publisher0.9.73 of 6See more

user-manager-neo4j moreillon 0.9.7

3 of the 6 container images this version deploys carry CVE-2026-56391.

Container imageDigestPackageFixed in
moreillon/group-manager-front:v3.3.1c9f85db3baa5
coreutils@9.1-1
no fix listed
moreillon/user-manager:v5.0.2e1c9bfab5c16
coreutils@9.1-1
no fix listed
moreillon/user-manager-front:v5.1.06597e6b98d21
coreutils@9.1-1
no fix listed

Open the chart page →

30,524
genericmorremeyer8.0.01 of 1See more

generic morremeyer 8.0.0

1 of the 1 container images this version deploys carry CVE-2026-56391.

Container imageDigestPackageFixed in
library/nginx:1.25.167f9a4f10d14
coreutils@9.1-1
no fix listed

Open the chart page →

6,877
codimdmt1905027.2.21 of 3See more

codimd mt190502 7.2.2

1 of the 3 container images this version deploys carry CVE-2026-56391.

Container imageDigestPackageFixed in
library/postgres:184ef4dbc939d6
coreutils@9.7-3
no fix listed

Open the chart page →

1,649
commafeedmt1905028.2.02 of 3See more

commafeed mt190502 8.2.0

2 of the 3 container images this version deploys carry CVE-2026-56391.

Container imageDigestPackageFixed in
athou/commafeed:6.2.0-postgresql5e388351df1a
coreutils@9.7-3
no fix listed
library/postgres:184ef4dbc939d6
coreutils@9.7-3
no fix listed

Open the chart page →

3,733
filestashmt1905024.0.01 of 1See more

filestash mt190502 4.0.0

1 of the 1 container images this version deploys carry CVE-2026-56391.

Container imageDigestPackageFixed in
machines/filestash:latest0b8fc005e52e
coreutils@9.7-3
no fix listed

Open the chart page →

3,536
ghostmt1905028.25.11 of 3See more

ghost mt190502 8.25.1

1 of the 3 container images this version deploys carry CVE-2026-56391.

Container imageDigestPackageFixed in
library/ghost:6.25.12654b1e90413
coreutils@9.1-1
no fix listed

Open the chart page →

4,982
keycloakmt1905021.4.61 of 3See more

keycloak mt190502 1.4.6

1 of the 3 container images this version deploys carry CVE-2026-56391.

Container imageDigestPackageFixed in
library/postgres:184ef4dbc939d6
coreutils@9.7-3
no fix listed

Open the chart page →

2,924
memosmt1905027.3.21 of 3See more

memos mt190502 7.3.2

1 of the 3 container images this version deploys carry CVE-2026-56391.

Container imageDigestPackageFixed in
library/postgres:184ef4dbc939d6
coreutils@9.7-3
no fix listed

Open the chart page →

2,473
minifluxmt1905021.1.61 of 3See more

miniflux mt190502 1.1.6

1 of the 3 container images this version deploys carry CVE-2026-56391.

Container imageDigestPackageFixed in
library/postgres:184ef4dbc939d6
coreutils@9.7-3
no fix listed

Open the chart page →

2,692
open-webuimt1905022.3.101 of 3See more

open-webui mt190502 2.3.10

1 of the 3 container images this version deploys carry CVE-2026-56391.

Container imageDigestPackageFixed in
library/postgres:184ef4dbc939d6
coreutils@9.7-3
no fix listed

Open the chart page →

1,649
paperless-ngxmt1905027.6.143 of 4See more

paperless-ngx mt190502 7.6.14

3 of the 4 container images this version deploys carry CVE-2026-56391.

Container imageDigestPackageFixed in
library/postgres:184ef4dbc939d6
coreutils@9.7-3
no fix listed
library/redis:771da9275c5f3
coreutils@9.1-1
no fix listed
ghcr.io/paperless-ngx/paperless-ngx:2.20.134b05bcd28e69
coreutils@9.7-3
no fix listed

Open the chart page →

12,027
umamimt1905028.1.41 of 3See more

umami mt190502 8.1.4

1 of the 3 container images this version deploys carry CVE-2026-56391.

Container imageDigestPackageFixed in
library/postgres:184ef4dbc939d6
coreutils@9.7-3
no fix listed

Open the chart page →

4,041
vaultwardenmt1905027.3.42 of 3See more

vaultwarden mt190502 7.3.4

2 of the 3 container images this version deploys carry CVE-2026-56391.

Container imageDigestPackageFixed in
library/postgres:184ef4dbc939d6
coreutils@9.7-3
no fix listed
vaultwarden/server:1.35.443498a94b22f
coreutils@9.7-3
no fix listed

Open the chart page →

4,756
vikunjamt1905027.1.21 of 3See more

vikunja mt190502 7.1.2

1 of the 3 container images this version deploys carry CVE-2026-56391.

Container imageDigestPackageFixed in
library/postgres:184ef4dbc939d6
coreutils@9.7-3
no fix listed

Open the chart page →

2,991
backendmulti-chart-app0.1.01 of 1See more

backend multi-chart-app 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-56391.

Container imageDigestPackageFixed in
library/nginx:latest05b8cb60c354
coreutils@9.7-3
no fix listed

Open the chart page →

1,849
frontendmulti-chart-app0.1.01 of 1See more

frontend multi-chart-app 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-56391.

Container imageDigestPackageFixed in
library/nginx:latest05b8cb60c354
coreutils@9.7-3
no fix listed

Open the chart page →

1,849
my-multi-chart-appmulti-chart-app0.1.01 of 2See more

my-multi-chart-app multi-chart-app 0.1.0

1 of the 2 container images this version deploys carry CVE-2026-56391.

Container imageDigestPackageFixed in
library/nginx:latest05b8cb60c354
coreutils@9.7-3
no fix listed

Open the chart page →

3,836
mum-discord-botmum-discord-botVerified publisher0.3.71 of 1See more

mum-discord-bot mum-discord-bot 0.3.7

1 of the 1 container images this version deploys carry CVE-2026-56391.

Container imageDigestPackageFixed in
ghcr.io/drewburr-labs/mum-discord-bot:3.1.26e82914e1051
coreutils@9.1-1
no fix listed

Open the chart page →

13,759
devops-demomungari-development-charts1.0.41 of 4See more

devops-demo mungari-development-charts 1.0.4

1 of the 4 container images this version deploys carry CVE-2026-56391.

Container imageDigestPackageFixed in
library/postgres:latest4ef4dbc939d6
coreutils@9.7-3
no fix listed

Open the chart page →

8,976
my-helm-chartmy-helm-charts-2024Verified publisher0.1.01 of 1See more

my-helm-chart my-helm-charts-2024 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-56391.

Container imageDigestPackageFixed in
shamimkuet/nginx:1.0.2b82902a76a04
coreutils@9.1-1
no fix listed

Open the chart page →

5,394
nginx-chartmyk8scharts1.0.01 of 1See more

nginx-chart myk8scharts 1.0.0

1 of the 1 container images this version deploys carry CVE-2026-56391.

Container imageDigestPackageFixed in
library/nginx:latest05b8cb60c354
coreutils@9.7-3
no fix listed

Open the chart page →

1,849
nginx-appmy-nginx-app0.1.31 of 1See more

nginx-app my-nginx-app 0.1.3

1 of the 1 container images this version deploys carry CVE-2026-56391.

Container imageDigestPackageFixed in
library/nginx:latest05b8cb60c354
coreutils@9.7-3
no fix listed

Open the chart page →

1,849
influxdbmy-personal-influxdb20.1.01 of 1See more

influxdb my-personal-influxdb2 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-56391.

Container imageDigestPackageFixed in
library/influxdb:2.7b8d940ca9376
coreutils@9.1-1
no fix listed

Open the chart page →

3,892
helloworldmysql2s3bk0.1.01 of 1See more

helloworld mysql2s3bk 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-56391.

Container imageDigestPackageFixed in
library/nginx:latest05b8cb60c354
coreutils@9.7-3
no fix listed

Open the chart page →

1,849
mystoremystore-chart0.1.02 of 3See more

mystore mystore-chart 0.1.0

2 of the 3 container images this version deploys carry CVE-2026-56391.

Container imageDigestPackageFixed in
hazegoodlife/haaze:veggiesite50f02d2d5d4d
coreutils@9.1-1
no fix listed
hazegoodlife/haaze:milksite8d4c63169e14
coreutils@9.1-1
no fix listed

Open the chart page →

9,556
myweatherhelmmyweather1.3.111 of 7See more

myweatherhelm myweather 1.3.11

1 of the 7 container images this version deploys carry CVE-2026-56391.

Container imageDigestPackageFixed in
hecrom/myweatherangularclient:1.3.11bb0372939c19
coreutils@9.1-1
no fix listed

Open the chart page →

18,042
my-nginxna-helm-chartsVerified publisher1.0.01 of 1See more

my-nginx na-helm-charts 1.0.0

1 of the 1 container images this version deploys carry CVE-2026-56391.

Container imageDigestPackageFixed in
library/nginx:latest05b8cb60c354
coreutils@9.7-3
no fix listed

Open the chart page →

1,849
dependency-tracknaj980.0.91 of 3See more

dependency-track naj98 0.0.9

1 of the 3 container images this version deploys carry CVE-2026-56391.

Container imageDigestPackageFixed in
dependencytrack/apiserver:latestf1da63ed610a
coreutils@9.7-3
no fix listed

Open the chart page →

2,489
akauntingnas-helm-chartsVerified publisher1.0.31 of 2See more

akaunting nas-helm-charts 1.0.3

1 of the 2 container images this version deploys carry CVE-2026-56391.

Container imageDigestPackageFixed in
akaunting/akaunting:3.0.1552811b36ec3a
coreutils@9.1-1
no fix listed

Open the chart page →

12,876
incorencsaVerified publisher1.38.02 of 29See more

incore ncsa 1.38.0

2 of the 29 container images this version deploys carry CVE-2026-56391.

Container imageDigestPackageFixed in
bitnamilegacy/keycloak:24.0.4cc599cbd15ff
coreutils@9.1-1
no fix listed
bitnamilegacy/postgresql:16.4.03ba6e6f11388
coreutils@9.1-1
no fix listed

Open the chart page →

15,429

Container images carrying it

1,374 by charts deploying them

A fixed version is listed for 2 of the 2 affected packages.

Container imageDigestPackageFixed inUsed by
nousresearch/hermes-agent:v2026.8.27e0df6adebddf
coreutils@9.7-3
no fix listed
1
offchainlabs/nitro-node:v3.7.6-c0fe95e9f779fa84b7b
coreutils@9.1-1
no fix listed
1
offchainlabs/nitro-node:v3.1.0-7d1d84ce95865866129
coreutils@9.1-1
no fix listed
1
oled01/automx2:2025.1.105d3e398e675
coreutils@9.1-1
no fix listed
1
omkara25/simple-microservice-app-order-service:v2.18327546c7aac
coreutils@9.1-1
no fix listed
1
omkara25/simple-microservice-app-payment-service:v2afff40172b6b
coreutils@9.1-1
no fix listed
1
omkara25/simple-microservice-app-user-service:v2d62cba548580
coreutils@9.1-1
no fix listed
1
ondrejsika/counter:latestd95eaeee2172
coreutils@9.7-3
no fix listed
1
oneuptime/probe:release1069c9458fe7
coreutils@9.1-1
no fix listed
1
oneuptime/runner:releasef6f2c1c536bc
coreutils@9.7-3
no fix listed
1
onyxdotapp/onyx-backend:latest473fdffe4e67
coreutils@9.7-3
no fix listed
1
opea/asr:1.025dd26d9cd09
coreutils@9.1-1
no fix listed
1
opea/chatqna:1.038c51b791efa
coreutils@9.1-1
no fix listed
1
opea/codegen:1.058f91683892d
coreutils@9.1-1
no fix listed
1
opea/codegen-ui:1.02bee4eb66f3e
coreutils@9.1-1
no fix listed
1
opea/codetrans:1.0e2436483b73d
coreutils@9.1-1
no fix listed
1
opea/codetrans-ui:1.03ef121f34610
coreutils@9.1-1
no fix listed
1
opea/docsum:1.03eaa91849512
coreutils@9.1-1
no fix listed
1
opea/docsum-ui:1.07f854e9bffaf
coreutils@9.1-1
no fix listed
1
opea/guardrails-tgi:1.0262c6048aab8
coreutils@9.1-1
no fix listed
1
opea/guardrails-tgi:latestf68bec6a1271
coreutils@9.1-1
no fix listed
1
opea/llm-docsum-tgi:1.002f9e8fa5d71
coreutils@9.1-1
no fix listed
1
opea/speecht5:1.0249afad3d268
coreutils@9.1-1
no fix listed
1
opea/tts:1.0257ae94709e9
coreutils@9.1-1
no fix listed
1
opea/web-retriever-chroma:1.0fe08165d7770
coreutils@9.1-1
no fix listed
1
openbas/caldera-server:5.1.0a277796d9724
coreutils@9.1-1
no fix listed
1
opencsghq/agenticflow:ee-v0.6-52f03fead54db
coreutils@9.1-1
no fix listed
1
opencsghq/csgbot:v0.6.7-eeaf7191a9cf8a
coreutils@9.7-3
no fix listed
1
opencsghq/csghub-portal:v2.4.0-ee93ad59164d87
coreutils@9.1-1
no fix listed
1
opencsghq/csghub-server:v2.4.0-ee302c9d45d8a8
coreutils@9.1-1
no fix listed
1
opencsghq/csghub-xnet:v2.4.0-ee04121fd19ef9
coreutils@9.1-1
no fix listed
1
opencsghq/gitlab-gitaly:v17.5.0bdd2c58b9744
coreutils@9.1-1
no fix listed
1
opencsghq/gitlab-shell:v17.5.0f6d7e7d6be5d
coreutils@9.1-1
no fix listed
1
opencsghq/kubectl:latestb6d87e1048c2
coreutils@9.1-1
no fix listed
1
opencsghq/label-studio:v2.5.047e22aa71870
coreutils@9.7-3
no fix listed
1
opencsghq/label-studio:v2.4.0b4e849fcf94a
coreutils@9.7-3
no fix listed
1
opencsghq/postgres:15.1842578c9d3ebd
coreutils@9.7-3
no fix listed
1
openebs/rawfile-localpv:v0.15.2a39ef27ea28b
coreutils@9.7-3
no fix listed
1
openhab/openhab:5.2.1bfd4a60e90da
coreutils@9.7-3
no fix listed
1
opennode/waldur-mastermind:8.1.24c82b15d9042
coreutils@9.7-3
no fix listed
1
openproject/hocuspocus:release-338001b288dc1359dfb5
coreutils@9.1-1
no fix listed
1
openproject/openproject:17.8.0-slim48952034215d
coreutils@9.7-3
no fix listed
1
otwld/velero-ui:0.10.2d1954b759e47
coreutils@9.1-1
no fix listed
1
outlinewiki/outline:0.82.0494dfb9249a6
coreutils@9.1-1
no fix listed
1
outlinewiki/outline:1.10.1832051f039b4
coreutils@9.7-3
no fix listed
1
passbolt/passbolt:5.13.0-1-ceaf3a620902a0
coreutils@9.7-3
no fix listed
1
penpotapp/exporter:2.17.272a8061e8806
coreutils@9.7-3ubuntu2
coreutils-from@9.5-1ubuntu2+0.0.0~ubuntu25
9.7-3ubuntu2.1
9.7-3ubuntu2.1
1
penpotapp/mcp:2.17.284f3f07ead11
coreutils@9.7-3ubuntu2
coreutils-from@9.5-1ubuntu2+0.0.0~ubuntu25
9.7-3ubuntu2.1
9.7-3ubuntu2.1
1
pgvector/pgvector:pg17cf134a767f47
coreutils@9.1-1
no fix listed
1
phan2410/dummy-service:0.0.89c6ed6de26ca
coreutils@9.1-1
no fix listed
1

syft 1.42.1 · advisories as of 16 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.