StackRadar

CVE-2026-56391

Medium

Advisory

Published 24 Jul 2026In the index since 5 Sept 2026
Severity
Medium
worst across findings
CVSS
6.1
base score, highest
EPSS
0.001
3rd percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
1,459
of 17,792 indexed, latest versions
Container images
1,332
deployed by those charts
Fix available
2 of 2
affected packages

The matching OSV records carry no description.

Carried by container images the latest versions of 1,459 of 17,792 indexed charts deploy, on 1,332 images.

Affected packageAffected versionsFixed inImages
coreutilsdeb9.1-1, 9.7-3, 9.7-3+dhi3, 9.7-3+dhi4+2 more9.7-3+e4, 9.7-3ubuntu2.11,321
coreutils-fromdeb9.5-1ubuntu2+0.0.0~ubuntu259.7-3ubuntu2.171
OSV records
DEBIAN-CVE-2026-56391UBUNTU-CVE-2026-56391ECHO-3699-27c7-123e
Also known as
USN-8697-1

Charts affected

1,459 by stars
ChartLatestAffected imagesRadar Score
helm-redchefredchef0.1.01 of 3See more

helm-redchef redchef 0.1.0

1 of the 3 container images this version deploys carry CVE-2026-56391.

Container imageDigestPackageFixed in
sharanalwar/redchef-backend:latest8d3cab80df49
coreutils@9.1-1
no fix listed

Open the chart page →

4,782
regoregoOfficialVerified publisher0.1.31 of 1See more

rego rego 0.1.3

1 of the 1 container images this version deploys carry CVE-2026-56391.

Container imageDigestPackageFixed in
drorivry4/rego:lateste035d49b15ca
coreutils@9.1-1
no fix listed

Open the chart page →

2,941
relfinder-reformedrelfinderreformed2.0.01 of 2See more

relfinder-reformed relfinderreformed 2.0.0

1 of the 2 container images this version deploys carry CVE-2026-56391.

Container imageDigestPackageFixed in
ghcr.io/woodenmaiden/relfinderreformedfront:latest344f53763b25
coreutils@9.1-1
no fix listed

Open the chart page →

6,315
my-nginx-apprepo-for-helm-nginx-app0.1.01 of 1See more

my-nginx-app repo-for-helm-nginx-app 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-56391.

Container imageDigestPackageFixed in
library/nginx:stabled5792f71a949
coreutils@9.7-3
no fix listed

Open the chart page →

1,849
redminerestic-pvc-backupVerified publisher0.2.61 of 1See more

redmine restic-pvc-backup 0.2.6

1 of the 1 container images this version deploys carry CVE-2026-56391.

Container imageDigestPackageFixed in
library/redmine:6.1.3-trixief474a901faec
coreutils@9.7-3
no fix listed

Open the chart page →

4,273
searxngrestic-pvc-backupVerified publisher0.1.111 of 3See more

searxng restic-pvc-backup 0.1.11

1 of the 3 container images this version deploys carry CVE-2026-56391.

Container imageDigestPackageFixed in
valkey/valkey:9.1.1-trixie64e361b630ec
coreutils@9.7-3
no fix listed

Open the chart page →

829
esphomeretsamedocVerified publisher2026.2.51 of 1See more

esphome retsamedoc 2026.2.5

1 of the 1 container images this version deploys carry CVE-2026-56391.

Container imageDigestPackageFixed in
esphome/esphome:2024.3.09ab8cc88b28c
coreutils@9.1-1
no fix listed

Open the chart page →

7,459
juicepassproxyretsamedocVerified publisher2026.2.41 of 1See more

juicepassproxy retsamedoc 2026.2.4

1 of the 1 container images this version deploys carry CVE-2026-56391.

Container imageDigestPackageFixed in
ghcr.io/juicerescue/juicepassproxy:0.5.1984dc4f19162
coreutils@9.1-1
no fix listed

Open the chart page →

3,955
retromretsamedocVerified publisher2026.2.51 of 1See more

retrom retsamedoc 2026.2.5

1 of the 1 container images this version deploys carry CVE-2026-56391.

Container imageDigestPackageFixed in
ghcr.io/jmberesford/retrom-service:retrom-v0.7.144d763d58f11d
coreutils@9.1-1
no fix listed

Open the chart page →

7,116
spoolmanretsamedocVerified publisher26.9.01 of 1See more

spoolman retsamedoc 26.9.0

1 of the 1 container images this version deploys carry CVE-2026-56391.

Container imageDigestPackageFixed in
ghcr.io/donkie/spoolman:0.26.1cf9b41e17b93
coreutils@9.1-1
no fix listed

Open the chart page →

1,797
claude-relayrevolution10.1.371 of 4See more

claude-relay revolution1 0.1.37

1 of the 4 container images this version deploys carry CVE-2026-56391.

Container imageDigestPackageFixed in
library/redis:8.2.2f0957bcaa75f
coreutils@9.1-1
no fix listed

Open the chart page →

4,624
revwallet-apirevwallet0.7.121 of 1See more

revwallet-api revwallet 0.7.12

1 of the 1 container images this version deploys carry CVE-2026-56391.

Container imageDigestPackageFixed in
arthurjguerra18/revwallet:v0.7.12f540af20b307
coreutils@9.1-1
no fix listed

Open the chart page →

5,869
istio-helloworldrgnu1.0.12 of 2See more

istio-helloworld rgnu 1.0.1

2 of the 2 container images this version deploys carry CVE-2026-56391.

Container imageDigestPackageFixed in
istio/examples-helloworld-v1:latest328b237e4fb1
coreutils@9.1-1
no fix listed
istio/examples-helloworld-v2:latest0a7f02b2c7c9
coreutils@9.1-1
no fix listed

Open the chart page →

9,452
rke2-ciliumrke2-charts1.20.2001See more

rke2-cilium rke2-charts 1.20.200

1 container image this version deploys carries CVE-2026-56391.

Container imageDigestPackageFixed in
quay.io/cilium/cilium:v1.20.22939231d0d3e
coreutils-from@9.5-1ubuntu2+0.0.0~ubuntu25
9.7-3ubuntu2.1

Open the chart page →

—
kube-web-viewrlex0.5.01 of 1See more

kube-web-view rlex 0.5.0

1 of the 1 container images this version deploys carry CVE-2026-56391.

Container imageDigestPackageFixed in
hjacobs/kube-web-view:23.8.0431f1bf013d0
coreutils@9.1-1
no fix listed

Open the chart page →

4,925
kresusrm3lVerified publisher0.2.12 of 3See more

kresus rm3l 0.2.1

2 of the 3 container images this version deploys carry CVE-2026-56391.

Container imageDigestPackageFixed in
bitnamilegacy/postgresql:17.5.0-debian-12-r16687034f33da6
coreutils@9.1-1
no fix listed
bnjbvr/kresus:0.22.137e216b182c8
coreutils@9.1-1
no fix listed

Open the chart page →

15,681
web-checkrm3lVerified publisher0.1.01 of 1See more

web-check rm3l 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-56391.

Container imageDigestPackageFixed in
ghcr.io/lissy93/web-check:latesta4e021c0f6a9
coreutils@9.1-1
no fix listed

Open the chart page →

9,327
matrix-stackrock8sVerified publisher0.8.11 of 7See more

matrix-stack rock8s 0.8.1

1 of the 7 container images this version deploys carry CVE-2026-56391.

Container imageDigestPackageFixed in
matrixdotorg/synapse:v1.127.1c3c4a9de2a0b
coreutils@9.1-1
no fix listed

Open the chart page →

9,299
reviewboardrock8sVerified publisher0.0.11 of 3See more

reviewboard rock8s 0.0.1

1 of the 3 container images this version deploys carry CVE-2026-56391.

Container imageDigestPackageFixed in
library/nginx:latest05b8cb60c354
coreutils@9.7-3
no fix listed

Open the chart page →

6,159
rocketchat-voiprocketchat-server0.1.01 of 1See more

rocketchat-voip rocketchat-server 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-56391.

Container imageDigestPackageFixed in
rocketchat/freeswitch:stablecfba5c20a5cc
coreutils@9.1-1
no fix listed

Open the chart page →

5,763
ai-agentromholdings0.0.11 of 1See more

ai-agent romholdings 0.0.1

1 of the 1 container images this version deploys carry CVE-2026-56391.

Container imageDigestPackageFixed in
quay.io/devtron/ai-agent:0.0.16545dac92173
coreutils@9.1-1
no fix listed

Open the chart page →

9,685
devtron-enterpriseromholdings48.0.03 of 28See more

devtron-enterprise romholdings 48.0.0

3 of the 28 container images this version deploys carry CVE-2026-56391.

Container imageDigestPackageFixed in
quay.io/devtron/devtron-utils:dup-chart-repo-v1.1.095d6f0e05636
coreutils@9.1-1
no fix listed
quay.io/devtron/notifier:9804331c-372-39294709c7da19c5a
coreutils@9.1-1
no fix listed
quay.io/devtron/postgres:14.91b594392f7cb
coreutils@9.1-1
no fix listed

Open the chart page →

68,695
devtron-operatorromholdings0.23.32 of 11See more

devtron-operator romholdings 0.23.3

2 of the 11 container images this version deploys carry CVE-2026-56391.

Container imageDigestPackageFixed in
quay.io/devtron/devtron-utils:dup-chart-repo-v1.1.095d6f0e05636
coreutils@9.1-1
no fix listed
quay.io/devtron/postgres:14.91b594392f7cb
coreutils@9.1-1
no fix listed

Open the chart page →

33,180
migration-incluster-cdromholdings0.10.01 of 1See more

migration-incluster-cd romholdings 0.10.0

1 of the 1 container images this version deploys carry CVE-2026-56391.

Container imageDigestPackageFixed in
library/postgres:122f2a8c2a7d10
coreutils@9.1-1
no fix listed

Open the chart page →

3,908
beaconrotationalVerified publisher0.2.01 of 1See more

beacon rotational 0.2.0

1 of the 1 container images this version deploys carry CVE-2026-56391.

Container imageDigestPackageFixed in
rotationalio/beacon:0.2.0f8d8b694515a
coreutils@9.7-3+dhi4
no fix listed

Open the chart page →

968
endeavorrotationalVerified publisher1.3.12 of 2See more

endeavor rotational 1.3.1

2 of the 2 container images this version deploys carry CVE-2026-56391.

Container imageDigestPackageFixed in
rotationalio/endeavor:1.3.0ac566baddc06
coreutils@9.1-1
no fix listed
rotationalio/quarterdeck:0.16.00e7ad3a031dc
coreutils@9.1-1
no fix listed

Open the chart page →

2,240
genoarotationalVerified publisher1.4.01 of 1See more

genoa rotational 1.4.0

1 of the 1 container images this version deploys carry CVE-2026-56391.

Container imageDigestPackageFixed in
rotationalio/genoa:1.2.03ab583519215
coreutils@9.1-1
no fix listed

Open the chart page →

990
geopingrotationalVerified publisher1.3.21 of 1See more

geoping rotational 1.3.2

1 of the 1 container images this version deploys carry CVE-2026-56391.

Container imageDigestPackageFixed in
rotationalio/geoping:1.3.034bcb6fc3cb7
coreutils@9.7-3
no fix listed

Open the chart page →

1,592
honurotationalVerified publisher0.5.31 of 1See more

honu rotational 0.5.3

1 of the 1 container images this version deploys carry CVE-2026-56391.

Container imageDigestPackageFixed in
rotationalio/honu:0.5.069fd30c2e31c
coreutils@9.1-1
no fix listed

Open the chart page →

2,180
imgtagrotationalVerified publisher0.2.01 of 1See more

imgtag rotational 0.2.0

1 of the 1 container images this version deploys carry CVE-2026-56391.

Container imageDigestPackageFixed in
gcr.io/rotationalio-habanero/imgtag:89ec287a534a3170d03
coreutils@9.1-1
no fix listed

Open the chart page →

3,329
quarterdeckrotationalVerified publisher0.16.01 of 1See more

quarterdeck rotational 0.16.0

1 of the 1 container images this version deploys carry CVE-2026-56391.

Container imageDigestPackageFixed in
rotationalio/quarterdeck:0.16.00e7ad3a031dc
coreutils@9.1-1
no fix listed

Open the chart page →

1,161
rotational-apirotationalVerified publisher1.3.11 of 1See more

rotational-api rotational 1.3.1

1 of the 1 container images this version deploys carry CVE-2026-56391.

Container imageDigestPackageFixed in
rotationalio/rotational-api:1.3.0f1a2d05d8fff
coreutils@9.7-3
no fix listed

Open the chart page →

1,590
vanityrotationalVerified publisher1.2.21 of 1See more

vanity rotational 1.2.2

1 of the 1 container images this version deploys carry CVE-2026-56391.

Container imageDigestPackageFixed in
rotationalio/vanity:1.2.0d77350f69b45
coreutils@9.7-3
no fix listed

Open the chart page →

1,221
routehub-serverroutehub-helm1.0.11 of 3See more

routehub-server routehub-helm 1.0.1

1 of the 3 container images this version deploys carry CVE-2026-56391.

Container imageDigestPackageFixed in
library/postgres:latest4ef4dbc939d6
coreutils@9.7-3
no fix listed

Open the chart page →

6,954
agentdatarss30.1.01 of 1See more

agentdata rss3 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-56391.

Container imageDigestPackageFixed in
ghcr.io/rss3-network/agentdata:0.1.0fd8d3e6e4cdf
coreutils@9.1-1
no fix listed

Open the chart page →

3,529
noderss30.7.21 of 3See more

node rss3 0.7.2

1 of the 3 container images this version deploys carry CVE-2026-56391.

Container imageDigestPackageFixed in
ghcr.io/rss3-network/agentdata:0.1.0fd8d3e6e4cdf
coreutils@9.1-1
no fix listed

Open the chart page →

4,735
paperless-ngxrtomik-helm-chartsVerified publisher0.0.51 of 1See more

paperless-ngx rtomik-helm-charts 0.0.5

1 of the 1 container images this version deploys carry CVE-2026-56391.

Container imageDigestPackageFixed in
ghcr.io/paperless-ngx/paperless-ngx:2.20.357ad9565bff3
coreutils@9.7-3
no fix listed

Open the chart page →

10,638
flaresolverrrubxkubeVerified publisher0.1.11 of 1See more

flaresolverr rubxkube 0.1.1

1 of the 1 container images this version deploys carry CVE-2026-56391.

Container imageDigestPackageFixed in
flaresolverr/flaresolverr:v3.5.0139dfee1c6f8
coreutils@9.1-1
no fix listed

Open the chart page →

27,554
jellyfinrubxkubeVerified publisher1.3.11 of 1See more

jellyfin rubxkube 1.3.1

1 of the 1 container images this version deploys carry CVE-2026-56391.

Container imageDigestPackageFixed in
jellyfin/jellyfin:10.11.11aefb67e6a7ff
coreutils@9.7-3
no fix listed

Open the chart page →

2,626
joplinrubxkubeVerified publisher1.3.11 of 2See more

joplin rubxkube 1.3.1

1 of the 2 container images this version deploys carry CVE-2026-56391.

Container imageDigestPackageFixed in
bitnamilegacy/postgresql:17.2.0-debian-12-r2e6fa49bb0347
coreutils@9.1-1
no fix listed

Open the chart page →

7,440
komgarubxkubeVerified publisher0.1.31 of 1See more

komga rubxkube 0.1.3

1 of the 1 container images this version deploys carry CVE-2026-56391.

Container imageDigestPackageFixed in
gotson/komga:1.26.36c2a967bbe9a
coreutils@9.7-3ubuntu2
coreutils-from@9.5-1ubuntu2+0.0.0~ubuntu25
9.7-3ubuntu2.1
9.7-3ubuntu2.1

Open the chart page →

2,288
simple-coffeerubxkubeVerified publisher0.1.01 of 1See more

simple-coffee rubxkube 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-56391.

Container imageDigestPackageFixed in
qjoly/kubernetes-coffee-image:simpleec94d3bdc035
coreutils@9.7-3
no fix listed

Open the chart page →

2,528
trmnl-serverrubxkubeVerified publisher0.1.01 of 2See more

trmnl-server rubxkube 0.1.0

1 of the 2 container images this version deploys carry CVE-2026-56391.

Container imageDigestPackageFixed in
library/python:3.14-slimcad9a2c87176
coreutils@9.7-3
no fix listed

Open the chart page →

2,778
uptime-kumarubxkubeVerified publisher1.2.11 of 1See more

uptime-kuma rubxkube 1.2.1

1 of the 1 container images this version deploys carry CVE-2026-56391.

Container imageDigestPackageFixed in
louislam/uptime-kuma:2.4.091e963bfda56
coreutils@9.1-1
no fix listed

Open the chart page →

30,517
vaultwardenrubxkubeVerified publisher1.2.41 of 1See more

vaultwarden rubxkube 1.2.4

1 of the 1 container images this version deploys carry CVE-2026-56391.

Container imageDigestPackageFixed in
vaultwarden/server:1.37.2094b5689ed81
coreutils@9.7-3
no fix listed

Open the chart page →

1,766
your-spotifyrubxkubeVerified publisher1.0.11 of 3See more

your-spotify rubxkube 1.0.1

1 of the 3 container images this version deploys carry CVE-2026-56391.

Container imageDigestPackageFixed in
bitnamilegacy/mongodb:latestb0652af9c8d0
coreutils@9.1-1
no fix listed

Open the chart page →

5,102
runwhen-localrunwhen-contribVerified publisher0.6.171 of 3See more

runwhen-local runwhen-contrib 0.6.17

1 of the 3 container images this version deploys carry CVE-2026-56391.

Container imageDigestPackageFixed in
ghcr.io/runwhen-contrib/runwhen-local:0.12.0533ce58c6e02
coreutils@9.7-3
no fix listed

Open the chart page →

3,746
rybbitrybbit-helm1.3.01 of 7See more

rybbit rybbit-helm 1.3.0

1 of the 7 container images this version deploys carry CVE-2026-56391.

Container imageDigestPackageFixed in
valkey/valkey:9.1.164e361b630ec
coreutils@9.7-3
no fix listed

Open the chart page →

5,852
nadekobotryuunosukeds30.1.21 of 2See more

nadekobot ryuunosukeds3 0.1.2

1 of the 2 container images this version deploys carry CVE-2026-56391.

Container imageDigestPackageFixed in
library/ubuntu:latest2260313b31c8
coreutils@9.7-3ubuntu2
coreutils-from@9.5-1ubuntu2+0.0.0~ubuntu25
9.7-3ubuntu2.1
9.7-3ubuntu2.1

Open the chart page →

8,733
orbitalryuunosukeds30.2.01 of 1See more

orbital ryuunosukeds3 0.2.0

1 of the 1 container images this version deploys carry CVE-2026-56391.

Container imageDigestPackageFixed in
ryuunosukeds3/orbital:latest0879f7261b10
coreutils@9.1-1
no fix listed

Open the chart page →

2,649

Container images carrying it

1,332 by charts deploying them

A fixed version is listed for 2 of the 2 affected packages.

No deployed image carries CVE-2026-56391.

syft 1.42.1 · advisories as of 16 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.