StackRadar

CVE-2026-56391

Medium

Advisory

Published 24 Jul 2026In the index since 5 Sept 2026
Severity
Medium
worst across findings
CVSS
6.1
base score, highest
EPSS
0.001
3rd percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
1,459
of 17,792 indexed, latest versions
Container images
1,332
deployed by those charts
Fix available
2 of 2
affected packages

The matching OSV records carry no description.

Carried by container images the latest versions of 1,459 of 17,792 indexed charts deploy, on 1,332 images.

Affected packageAffected versionsFixed inImages
coreutilsdeb9.1-1, 9.7-3, 9.7-3+dhi3, 9.7-3+dhi4+2 more9.7-3+e4, 9.7-3ubuntu2.11,321
coreutils-fromdeb9.5-1ubuntu2+0.0.0~ubuntu259.7-3ubuntu2.171
OSV records
DEBIAN-CVE-2026-56391UBUNTU-CVE-2026-56391ECHO-3699-27c7-123e
Also known as
USN-8697-1

Charts affected

1,459 by stars
ChartLatestAffected imagesRadar Score
glpiglpi-chart0.1.12 of 3See more

glpi glpi-chart 0.1.1

2 of the 3 container images this version deploys carry CVE-2026-56391.

Container imageDigestPackageFixed in
library/phpmyadmin:latest3a8a8d6b5289
coreutils@9.7-3
no fix listed
vdiogov/glpi-conteiner:latest6945f84f0058
coreutils@9.1-1
no fix listed

Open the chart page →

12,359
goofy-chartgoofy-chart0.1.01 of 1See more

goofy-chart goofy-chart 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-56391.

Container imageDigestPackageFixed in
library/nginx:latest05b8cb60c354
coreutils@9.7-3
no fix listed

Open the chart page →

1,849
platformgoofy-chart0.1.01 of 1See more

platform goofy-chart 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-56391.

Container imageDigestPackageFixed in
devopsgoofy/k8s-platform:latestad865312099f
coreutils@9.1-1
no fix listed

Open the chart page →

2,806
googly-logingoogly-login0.1.01 of 2See more

googly-login googly-login 0.1.0

1 of the 2 container images this version deploys carry CVE-2026-56391.

Container imageDigestPackageFixed in
library/postgres:16f1c3376c26f2
coreutils@9.7-3
no fix listed

Open the chart page →

1,649
Governify-Bluejaygovernify0.1.01 of 12See more

Governify-Bluejay governify 0.1.0

1 of the 12 container images this version deploys carry CVE-2026-56391.

Container imageDigestPackageFixed in
library/redis:latest298e5b3bc566
coreutils@9.7-3
no fix listed

Open the chart page →

22,587
openclawgpg-dev1.5.361 of 2See more

openclaw gpg-dev 1.5.36

1 of the 2 container images this version deploys carry CVE-2026-56391.

Container imageDigestPackageFixed in
chromedp/headless-shell:148.0.7778.97313ed7255ae1
coreutils@9.7-3
no fix listed

Open the chart page →

1,656
opentelemetry-demogpg-dev0.33.87 of 27See more

opentelemetry-demo gpg-dev 0.33.8

7 of the 27 container images this version deploys carry CVE-2026-56391.

Container imageDigestPackageFixed in
ghcr.io/open-telemetry/demo:1.12.0-imageprovider4e322858fe56
coreutils@9.1-1
no fix listed
ghcr.io/open-telemetry/demo:1.12.0-accountingservice6d051840bb29
coreutils@9.1-1
no fix listed
ghcr.io/open-telemetry/demo:1.12.0-loadgenerator85c9935ff31b
coreutils@9.1-1
no fix listed
ghcr.io/open-telemetry/demo:1.12.0-quoteservice87eb325d306f
coreutils@9.1-1
no fix listed
ghcr.io/open-telemetry/demo:1.12.0-emailservicea1f5cebb5240
coreutils@9.1-1
no fix listed
ghcr.io/open-telemetry/demo:1.12.0-shippingservicea3ca4c02a5df
coreutils@9.1-1
no fix listed
ghcr.io/open-telemetry/demo:1.12.0-recommendationserviceb294a4278407
coreutils@9.1-1
no fix listed

Open the chart page →

49,362
video-analytics-demogpu-operator0.1.91 of 3See more

video-analytics-demo gpu-operator 0.1.9

1 of the 3 container images this version deploys carry CVE-2026-56391.

Container imageDigestPackageFixed in
library/nginx:latest05b8cb60c354
coreutils@9.7-3
no fix listed

Open the chart page →

15,797
video-analytics-demo-l4tgpu-operator0.1.31 of 3See more

video-analytics-demo-l4t gpu-operator 0.1.3

1 of the 3 container images this version deploys carry CVE-2026-56391.

Container imageDigestPackageFixed in
library/nginx:latest05b8cb60c354
coreutils@9.7-3
no fix listed

Open the chart page →

1,849
gridgain9gridgainVerified publisher1.1.101 of 2See more

gridgain9 gridgain 1.1.10

1 of the 2 container images this version deploys carry CVE-2026-56391.

Container imageDigestPackageFixed in
library/debian:12.12-slimd5d3f9c23164
coreutils@9.1-1
no fix listed

Open the chart page →

3,221
routergroundcover1.12.3702See more

router groundcover 1.12.370

2 container images this version deploys carry CVE-2026-56391.

Container imageDigestPackageFixed in
public.ecr.aws/groundcovercom/postgres:18.1-20260208b7d7910c0bb0
coreutils@9.7-3+e3
9.7-3+e4
quay.io/groundcover/tools:20260719b705e0cbe171
coreutils@9.7-3+e3
9.7-3+e4

Open the chart page →

—
temporalgroundcover1.12.3701See more

temporal groundcover 1.12.370

1 container image this version deploys carries CVE-2026-56391.

Container imageDigestPackageFixed in
public.ecr.aws/groundcovercom/temporalio/server:1.29.6-mini-20260702-170f191d0a80e
coreutils@9.7-3+e3
9.7-3+e4

Open the chart page →

—
librechat-exporterhajowielandVerified publisher1.0.01 of 1See more

librechat-exporter hajowieland 1.0.0

1 of the 1 container images this version deploys carry CVE-2026-56391.

Container imageDigestPackageFixed in
ghcr.io/virtuos/librechat_exporter:2.0.050ea1cf0086f
coreutils@9.1-1
no fix listed

Open the chart page →

2,301
rag-apihajowielandVerified publisher1.0.01 of 1See more

rag-api hajowieland 1.0.0

1 of the 1 container images this version deploys carry CVE-2026-56391.

Container imageDigestPackageFixed in
ghcr.io/danny-avila/librechat-rag-api-dev-lite:latestf9f34c8ed688
coreutils@9.7-3
no fix listed

Open the chart page →

1,705
web-checkhajowielandVerified publisher1.0.11 of 1See more

web-check hajowieland 1.0.1

1 of the 1 container images this version deploys carry CVE-2026-56391.

Container imageDigestPackageFixed in
ghcr.io/lissy93/web-check:latesta4e021c0f6a9
coreutils@9.1-1
no fix listed

Open the chart page →

9,327
hatchet-apihatchetOfficialVerified publisher0.19.01 of 4See more

hatchet-api hatchet 0.19.0

1 of the 4 container images this version deploys carry CVE-2026-56391.

Container imageDigestPackageFixed in
library/postgres:latest4ef4dbc939d6
coreutils@9.7-3
no fix listed

Open the chart page →

1,689
hatchet-hahatchetOfficialVerified publisher0.19.03 of 8See more

hatchet-ha hatchet 0.19.0

3 of the 8 container images this version deploys carry CVE-2026-56391.

Container imageDigestPackageFixed in
bitnamilegacy/postgresql:17.6.0-debian-12-r4926356130b77
coreutils@9.1-1
no fix listed
bitnamilegacy/rabbitmq:4.1.3-debian-12-r19e635efba431
coreutils@9.1-1
no fix listed
library/postgres:latest4ef4dbc939d6
coreutils@9.7-3
no fix listed

Open the chart page →

7,407
hatchet-stackhatchetOfficialVerified publisher0.19.03 of 8See more

hatchet-stack hatchet 0.19.0

3 of the 8 container images this version deploys carry CVE-2026-56391.

Container imageDigestPackageFixed in
bitnamilegacy/postgresql:17.6.0-debian-12-r4926356130b77
coreutils@9.1-1
no fix listed
bitnamilegacy/rabbitmq:4.1.3-debian-12-r19e635efba431
coreutils@9.1-1
no fix listed
library/postgres:latest4ef4dbc939d6
coreutils@9.7-3
no fix listed

Open the chart page →

7,407
web-charthcpark-ktcloudlab0.1.01 of 1See more

web-chart hcpark-ktcloudlab 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-56391.

Container imageDigestPackageFixed in
library/nginx:latest05b8cb60c354
coreutils@9.7-3
no fix listed

Open the chart page →

1,849
heliconehelicone0.1.421 of 14See more

helicone helicone 0.1.42

1 of the 14 container images this version deploys carry CVE-2026-56391.

Container imageDigestPackageFixed in
helicone/supabase-migration-runner:v2025.03.05-14a913936c97b
coreutils@9.1-1
no fix listed

Open the chart page →

25,183
helixhelix1.4.31 of 2See more

helix helix 1.4.3

1 of the 2 container images this version deploys carry CVE-2026-56391.

Container imageDigestPackageFixed in
quay.io/jupyterhub/k8s-hub:4.3.492f883d09270
coreutils@9.1-1
no fix listed

Open the chart page →

5,586
test-apphellnet0.1.11 of 1See more

test-app hellnet 0.1.1

1 of the 1 container images this version deploys carry CVE-2026-56391.

Container imageDigestPackageFixed in
library/nginx:latest05b8cb60c354
coreutils@9.7-3
no fix listed

Open the chart page →

1,849
hello-worldhello-world-pponyVerified publisher0.3.01 of 1See more

hello-world hello-world-ppony 0.3.0

1 of the 1 container images this version deploys carry CVE-2026-56391.

Container imageDigestPackageFixed in
library/nginx:1.25.49ff236ed47fe
coreutils@9.1-1
no fix listed

Open the chart page →

5,862
my_web1helm-chart-by-piyush0.1.01 of 1See more

my_web1 helm-chart-by-piyush 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-56391.

Container imageDigestPackageFixed in
library/httpd:latest979c38c2228d
coreutils@9.7-3
no fix listed

Open the chart page →

1,703
esphomehelm-chart-roeiVerified publisher2025.3.01 of 1See more

esphome helm-chart-roei 2025.3.0

1 of the 1 container images this version deploys carry CVE-2026-56391.

Container imageDigestPackageFixed in
esphome/esphome:2025.3.0def8b6e4f517
coreutils@9.1-1
no fix listed

Open the chart page →

6,036
home-assistant-matter-hubhelm-chart-roeiVerified publisher3.0.21 of 1See more

home-assistant-matter-hub helm-chart-roei 3.0.2

1 of the 1 container images this version deploys carry CVE-2026-56391.

Container imageDigestPackageFixed in
luligu/matterbridge:3.0.28f97884bebc2
coreutils@9.1-1
no fix listed

Open the chart page →

3,829
kube-downscalerhelm-charts-nr0.7.61 of 1See more

kube-downscaler helm-charts-nr 0.7.6

1 of the 1 container images this version deploys carry CVE-2026-56391.

Container imageDigestPackageFixed in
hjacobs/kube-downscaler:23.2.0-6-gc9b88e84b2147f47425
coreutils@9.1-1
no fix listed

Open the chart page →

4,310
locusthelm-charts-nr0.32.41 of 1See more

locust helm-charts-nr 0.32.4

1 of the 1 container images this version deploys carry CVE-2026-56391.

Container imageDigestPackageFixed in
locustio/locust:2.32.2a0d4b88e42c1
coreutils@9.1-1
no fix listed

Open the chart page →

2,817
node-local-dnshelm-charts-nr2.1.41 of 1See more

node-local-dns helm-charts-nr 2.1.4

1 of the 1 container images this version deploys carry CVE-2026-56391.

Container imageDigestPackageFixed in
registry.k8s.io/dns/k8s-dns-node-cache:1.23.1e3dccb1a21d1
coreutils@9.1-1
no fix listed

Open the chart page →

2,248
node-problem-detectorhelm-charts-nr2.3.171 of 1See more

node-problem-detector helm-charts-nr 2.3.17

1 of the 1 container images this version deploys carry CVE-2026-56391.

Container imageDigestPackageFixed in
registry.k8s.io/node-problem-detector/node-problem-detector:v0.8.2052f0618e9bc2
coreutils@9.1-1
no fix listed

Open the chart page →

2,462
supersethelm-charts-nr1.1.31 of 1See more

superset helm-charts-nr 1.1.3

1 of the 1 container images this version deploys carry CVE-2026-56391.

Container imageDigestPackageFixed in
apache/superset:latest16b50bbef664
coreutils@9.1-1
no fix listed

Open the chart page →

2,328
hello-world-charthelm-chart-test-hello-world0.1.01 of 1See more

hello-world-chart helm-chart-test-hello-world 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-56391.

Container imageDigestPackageFixed in
library/nginx:stabled5792f71a949
coreutils@9.7-3
no fix listed

Open the chart page →

1,849
mywebhelmchartwebapp0.0.51 of 1See more

myweb helmchartwebapp 0.0.5

1 of the 1 container images this version deploys carry CVE-2026-56391.

Container imageDigestPackageFixed in
library/httpd:latest979c38c2228d
coreutils@9.7-3
no fix listed

Open the chart page →

1,703
my-apphelm-demo85640.2.71 of 2See more

my-app helm-demo8564 0.2.7

1 of the 2 container images this version deploys carry CVE-2026-56391.

Container imageDigestPackageFixed in
library/nginx:latest05b8cb60c354
coreutils@9.7-3
no fix listed

Open the chart page →

1,849
chart-bookhelm-deploy-book0.1.01 of 3See more

chart-book helm-deploy-book 0.1.0

1 of the 3 container images this version deploys carry CVE-2026-56391.

Container imageDigestPackageFixed in
dannielkil/book-frontend:latest937993927694
coreutils@9.1-1
no fix listed

Open the chart page →

9,148
affinehelmforgeVerified publisher1.0.03 of 3See more

affine helmforge 1.0.0

3 of the 3 container images this version deploys carry CVE-2026-56391.

Container imageDigestPackageFixed in
library/redis:8.10.1298e5b3bc566
coreutils@9.7-3
no fix listed
pgvector/pgvector:0.8.6-pg16-bookwormccc6e83d6e35
coreutils@9.1-1
no fix listed
ghcr.io/toeverything/affine:0.27.4b649f5ce2384
coreutils@9.1-1
no fix listed

Open the chart page →

4,081
alfiohelmforgeVerified publisher1.2.121 of 3See more

alfio helmforge 1.2.12

1 of the 3 container images this version deploys carry CVE-2026-56391.

Container imageDigestPackageFixed in
library/postgres:18.6-trixie4ef4dbc939d6
coreutils@9.7-3
no fix listed

Open the chart page →

2,114
apachehelmforgeVerified publisher1.0.61 of 1See more

apache helmforge 1.0.6

1 of the 1 container images this version deploys carry CVE-2026-56391.

Container imageDigestPackageFixed in
library/httpd:2.4.68979c38c2228d
coreutils@9.7-3
no fix listed

Open the chart page →

1,703
appwritehelmforgeVerified publisher2.0.02 of 5See more

appwrite helmforge 2.0.0

2 of the 5 container images this version deploys carry CVE-2026-56391.

Container imageDigestPackageFixed in
appwrite/new:1.1.96-self-hostedaf65a77db50e
coreutils@9.7-3
no fix listed
library/redis:8.10.1298e5b3bc566
coreutils@9.7-3
no fix listed

Open the chart page →

4,689
archiveboxhelmforgeVerified publisher1.1.121 of 1See more

archivebox helmforge 1.1.12

1 of the 1 container images this version deploys carry CVE-2026-56391.

Container imageDigestPackageFixed in
archivebox/archivebox:0.7.41a5a37331091
coreutils@9.1-1
no fix listed

Open the chart page →

7,675
automatischhelmforgeVerified publisher1.3.72 of 4See more

automatisch helmforge 1.3.7

2 of the 4 container images this version deploys carry CVE-2026-56391.

Container imageDigestPackageFixed in
library/postgres:18.6-trixie4ef4dbc939d6
coreutils@9.7-3
no fix listed
library/redis:8.10.1298e5b3bc566
coreutils@9.7-3
no fix listed

Open the chart page →

5,816
castopodhelmforgeVerified publisher1.2.71 of 3See more

castopod helmforge 1.2.7

1 of the 3 container images this version deploys carry CVE-2026-56391.

Container imageDigestPackageFixed in
castopod/castopod:1.15.54e4f0440520f
coreutils@9.7-3
no fix listed

Open the chart page →

9,485
changedetectionhelmforgeVerified publisher1.1.161 of 1See more

changedetection helmforge 1.1.16

1 of the 1 container images this version deploys carry CVE-2026-56391.

Container imageDigestPackageFixed in
ghcr.io/dgtlmoon/changedetection.io:0.60.5f69554198005
coreutils@9.1-1
no fix listed

Open the chart page →

2,612
chiefonboardinghelmforgeVerified publisher1.1.152 of 3See more

chiefonboarding helmforge 1.1.15

2 of the 3 container images this version deploys carry CVE-2026-56391.

Container imageDigestPackageFixed in
chiefonboarding/chiefonboarding:v2.5.0d0964135ea82
coreutils@9.7-3
no fix listed
library/postgres:18.6-trixie4ef4dbc939d6
coreutils@9.7-3
no fix listed

Open the chart page →

7,086
ckanhelmforgeVerified publisher1.3.83 of 6See more

ckan helmforge 1.3.8

3 of the 6 container images this version deploys carry CVE-2026-56391.

Container imageDigestPackageFixed in
ckan/ckan-base:2.12.087ecf3f27ad6
coreutils@9.1-1
no fix listed
library/postgres:18.6-trixie4ef4dbc939d6
coreutils@9.7-3
no fix listed
library/redis:8.10.1298e5b3bc566
coreutils@9.7-3
no fix listed

Open the chart page →

10,027
dawarichhelmforgeVerified publisher1.0.13 of 4See more

dawarich helmforge 1.0.1

3 of the 4 container images this version deploys carry CVE-2026-56391.

Container imageDigestPackageFixed in
freikin/dawarich:1.14.511826c67e4b1
coreutils@9.7-3
no fix listed
library/redis:8.10.1298e5b3bc566
coreutils@9.7-3
no fix listed
postgis/postgis:18-3.67e00e8c3539f
coreutils@9.7-3
no fix listed

Open the chart page →

10,442
discount-bandithelmforgeVerified publisher2.0.81 of 3See more

discount-bandit helmforge 2.0.8

1 of the 3 container images this version deploys carry CVE-2026-56391.

Container imageDigestPackageFixed in
cybrarist/discount-bandit:v4.0.4e9e2447ac666
coreutils@9.7-3
no fix listed

Open the chart page →

29,930
druidhelmforgeVerified publisher1.3.61 of 4See more

druid helmforge 1.3.6

1 of the 4 container images this version deploys carry CVE-2026-56391.

Container imageDigestPackageFixed in
library/postgres:18.6-trixie4ef4dbc939d6
coreutils@9.7-3
no fix listed

Open the chart page →

8,623
drupalhelmforgeVerified publisher1.2.131 of 2See more

drupal helmforge 1.2.13

1 of the 2 container images this version deploys carry CVE-2026-56391.

Container imageDigestPackageFixed in
library/drupal:11.4.6-php8.5-apache-bookworm28f7931ecbcb
coreutils@9.1-1
no fix listed

Open the chart page →

3,884
entehelmforgeVerified publisher1.0.22 of 4See more

ente helmforge 1.0.2

2 of the 4 container images this version deploys carry CVE-2026-56391.

Container imageDigestPackageFixed in
library/postgres:18.6-trixie4ef4dbc939d6
coreutils@9.7-3
no fix listed
ghcr.io/ente/web:5ab0c5b4c7a89c4e470ef6f793600da33cebf35d3f4864eb7f11
coreutils@9.7-3
no fix listed

Open the chart page →

4,254

Container images carrying it

1,332 by charts deploying them

A fixed version is listed for 2 of the 2 affected packages.

No deployed image carries CVE-2026-56391.

syft 1.42.1 · advisories as of 16 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.