StackRadar

CVE-2026-56391

Medium

Advisory

Published 24 Jul 2026In the index since 5 Sept 2026
Severity
Medium
worst across findings
CVSS
6.1
base score, highest
EPSS
0.001
3rd percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
1,459
of 17,792 indexed, latest versions
Container images
1,332
deployed by those charts
Fix available
2 of 2
affected packages

The matching OSV records carry no description.

Carried by container images the latest versions of 1,459 of 17,792 indexed charts deploy, on 1,332 images.

Affected packageAffected versionsFixed inImages
coreutilsdeb9.1-1, 9.7-3, 9.7-3+dhi3, 9.7-3+dhi4+2 more9.7-3+e4, 9.7-3ubuntu2.11,321
coreutils-fromdeb9.5-1ubuntu2+0.0.0~ubuntu259.7-3ubuntu2.171
OSV records
DEBIAN-CVE-2026-56391UBUNTU-CVE-2026-56391ECHO-3699-27c7-123e
Also known as
USN-8697-1

Charts affected

1,459 by stars
ChartLatestAffected imagesRadar Score
matrixzekker6Verified publisher3.30.01 of 4See more

matrix zekker6 3.30.0

1 of the 4 container images this version deploys carry CVE-2026-56391.

Container imageDigestPackageFixed in
matrixdotorg/synapse:v1.160.078de1d10bef0
coreutils@9.7-3
no fix listed

Open the chart page →

5,579
zenmlzenml0.96.41 of 1See more

zenml zenml 0.96.4

1 of the 1 container images this version deploys carry CVE-2026-56391.

Container imageDigestPackageFixed in
zenmldocker/zenml-server:0.96.409027a6312ee
coreutils@9.1-1
no fix listed

Open the chart page →

1,294
changedetectionalekcVerified publisher0.14.41 of 1See more

changedetection alekc 0.14.4

1 of the 1 container images this version deploys carry CVE-2026-56391.

Container imageDigestPackageFixed in
ghcr.io/dgtlmoon/changedetection.io:0.60.6eb4a9f718801
coreutils@9.1-1
no fix listed

Open the chart page →

2,612
vaultwardenandrenarchyVerified publisher6.28.01 of 1See more

vaultwarden andrenarchy 6.28.0

1 of the 1 container images this version deploys carry CVE-2026-56391.

Container imageDigestPackageFixed in
vaultwarden/server:1.37.31587c45feaa4
coreutils@9.7-3
no fix listed

Open the chart page →

1,503
tt-rssangelnu7.0.01 of 2See more

tt-rss angelnu 7.0.0

1 of the 2 container images this version deploys carry CVE-2026-56391.

Container imageDigestPackageFixed in
ghcr.io/angelnu/tt-rss:2.0.10068d332ae2410f8
coreutils@9.7-3ubuntu2
coreutils-from@9.5-1ubuntu2+0.0.0~ubuntu25
9.7-3ubuntu2.1
9.7-3ubuntu2.1

Open the chart page →

1,234
limesurveyarea-42Verified publisher0.3.952 of 2See more

limesurvey area-42 0.3.95

2 of the 2 container images this version deploys carry CVE-2026-56391.

Container imageDigestPackageFixed in
adamzammit/limesurvey:7.1.1fdb06d62c22e
coreutils@9.7-3
no fix listed
bitnamilegacy/mariadb:12.0.2-debian-12-r0888cdaae3cb9
coreutils@9.1-1
no fix listed

Open the chart page →

4,775
geoservercloudcamptocamp23.0.17 of 7See more

geoservercloud camptocamp2 3.0.1

7 of the 7 container images this version deploys carry CVE-2026-56391.

Container imageDigestPackageFixed in
geoservercloud/geoserver-cloud-gateway:3.0.1.1de0b20bd2a43
coreutils@9.7-3ubuntu2
coreutils-from@9.5-1ubuntu2+0.0.0~ubuntu25
9.7-3ubuntu2.1
9.7-3ubuntu2.1
geoservercloud/geoserver-cloud-gwc:3.0.1.1b04ed89b5d2b
coreutils@9.7-3ubuntu2
coreutils-from@9.5-1ubuntu2+0.0.0~ubuntu25
9.7-3ubuntu2.1
9.7-3ubuntu2.1
geoservercloud/geoserver-cloud-rest:3.0.1.1318254b52f96
coreutils@9.7-3ubuntu2
coreutils-from@9.5-1ubuntu2+0.0.0~ubuntu25
9.7-3ubuntu2.1
9.7-3ubuntu2.1
geoservercloud/geoserver-cloud-wcs:3.0.1.14f077124f591
coreutils@9.7-3ubuntu2
coreutils-from@9.5-1ubuntu2+0.0.0~ubuntu25
9.7-3ubuntu2.1
9.7-3ubuntu2.1
geoservercloud/geoserver-cloud-webui:3.0.1.14f91e3048ac8
coreutils@9.7-3ubuntu2
coreutils-from@9.5-1ubuntu2+0.0.0~ubuntu25
9.7-3ubuntu2.1
9.7-3ubuntu2.1
geoservercloud/geoserver-cloud-wfs:3.0.1.1299f0d6232d1
coreutils@9.7-3ubuntu2
coreutils-from@9.5-1ubuntu2+0.0.0~ubuntu25
9.7-3ubuntu2.1
9.7-3ubuntu2.1
geoservercloud/geoserver-cloud-wms:3.0.1.15164f687ce4d
coreutils@9.7-3ubuntu2
coreutils-from@9.5-1ubuntu2+0.0.0~ubuntu25
9.7-3ubuntu2.1
9.7-3ubuntu2.1

Open the chart page →

10,861
thingsboardcetic0.1.21 of 2See more

thingsboard cetic 0.1.2

1 of the 2 container images this version deploys carry CVE-2026-56391.

Container imageDigestPackageFixed in
thingsboard/tb-postgres:latest2d17e4e36edc
coreutils@9.1-1
no fix listed

Open the chart page →

5,256
collabora-codechrisingenhaag2.6.01 of 1See more

collabora-code chrisingenhaag 2.6.0

1 of the 1 container images this version deploys carry CVE-2026-56391.

Container imageDigestPackageFixed in
collabora/code:23.05.10.1.105299b452f7f
coreutils@9.1-1
no fix listed

Open the chart page →

4,194
ghostcloudpirates-ghostVerified publisher0.20.221 of 3See more

ghost cloudpirates-ghost 0.20.22

1 of the 3 container images this version deploys carry CVE-2026-56391.

Container imageDigestPackageFixed in
library/ghost:6.63.0e05bc1169fb2
coreutils@9.1-1
no fix listed

Open the chart page →

7,267
clowardenclowarden0.2.31 of 4See more

clowarden clowarden 0.2.3

1 of the 4 container images this version deploys carry CVE-2026-56391.

Container imageDigestPackageFixed in
artifacthub/postgres:latest4fd34fa635cc
coreutils@9.7-3
no fix listed

Open the chart page →

5,632
convertigoconvertigoOfficialVerified publisher8.4.32 of 5See more

convertigo convertigo 8.4.3

2 of the 5 container images this version deploys carry CVE-2026-56391.

Container imageDigestPackageFixed in
baserow/baserow:1.30.1df0c42eb67e8
coreutils@9.1-1
no fix listed
library/couchdb:3.4.22817ad50b5c5
coreutils@9.1-1
no fix listed

Open the chart page →

17,569
cosmocosmo-platformOfficialVerified publisher0.20.05 of 10See more

cosmo cosmo-platform 0.20.0

5 of the 10 container images this version deploys carry CVE-2026-56391.

Container imageDigestPackageFixed in
bitnamilegacy/clickhouse:24.6.2-debian-12-r3dcc172c6c55f
coreutils@9.1-1
no fix listed
bitnamilegacy/minio:2025.7.23-debian-12-r56dabb4a2088c
coreutils@9.1-1
no fix listed
bitnamilegacy/redis:7.2.4-debian-12-r1670cafc5a71e8
coreutils@9.1-1
no fix listed
ghcr.io/wundergraph/cosmo/cdn:0.14.1d86fcf169f15
coreutils@9.1-1
no fix listed
ghcr.io/wundergraph/cosmo/otelcollector:0.18.15a6fe78d4d15
coreutils@9.1-1
no fix listed

Open the chart page →

29,070
crossviewcrossviewOfficialVerified publisher4.6.01 of 2See more

crossview crossview 4.6.0

1 of the 2 container images this version deploys carry CVE-2026-56391.

Container imageDigestPackageFixed in
library/postgres:latest4ef4dbc939d6
coreutils@9.7-3
no fix listed

Open the chart page →

1,814
dask-kubernetes-operatordask2026.3.01 of 1See more

dask-kubernetes-operator dask 2026.3.0

1 of the 1 container images this version deploys carry CVE-2026-56391.

Container imageDigestPackageFixed in
ghcr.io/dask/dask-kubernetes-operator:2026.3.03225d2bc6b3c
coreutils@9.7-3
no fix listed

Open the chart page →

9,395
defectdojodefectdojo1.9.521 of 4See more

defectdojo defectdojo 1.9.52

1 of the 4 container images this version deploys carry CVE-2026-56391.

Container imageDigestPackageFixed in
defectdojo/defectdojo-django:3.3.100c597abdbb535
coreutils@9.7-3
no fix listed

Open the chart page →

2,400
dyff-apidyff-apiVerified publisher0.57.51 of 1See more

dyff-api dyff-api 0.57.5

1 of the 1 container images this version deploys carry CVE-2026-56391.

Container imageDigestPackageFixed in
registry.gitlab.com/dyff/dyff-api:0.57.5b6c44d969163
coreutils@9.1-1
no fix listed

Open the chart page →

1,336
flyte-binaryflyte2.0.481 of 4See more

flyte-binary flyte 2.0.48

1 of the 4 container images this version deploys carry CVE-2026-56391.

Container imageDigestPackageFixed in
ghcr.io/flyteorg/flyte-connectors:py3.12-v2.3.6896fc7b18b1b
coreutils@9.1-1
no fix listed

Open the chart page →

4,723
rsshubgabe565Verified publisher0.8.01 of 3See more

rsshub gabe565 0.8.0

1 of the 3 container images this version deploys carry CVE-2026-56391.

Container imageDigestPackageFixed in
diygod/rsshub:latest1d4b508b6357
coreutils@9.7-3
no fix listed

Open the chart page →

1,739
gitvotegitvoteVerified publisher1.5.01 of 6See more

gitvote gitvote 1.5.0

1 of the 6 container images this version deploys carry CVE-2026-56391.

Container imageDigestPackageFixed in
artifacthub/postgres:latest4fd34fa635cc
coreutils@9.7-3
no fix listed

Open the chart page →

5,639
apimgraviteeioVerified publisher4.12.192 of 4See more

apim graviteeio 4.12.19

2 of the 4 container images this version deploys carry CVE-2026-56391.

Container imageDigestPackageFixed in
graviteeio/apim-gateway:4.12.19-debian05fd67a93056
coreutils@9.7-3
no fix listed
graviteeio/apim-management-api:4.12.19-debian27374522cd04
coreutils@9.7-3
no fix listed

Open the chart page →

4,852
nacosgujunxiang0.1.51 of 1See more

nacos gujunxiang 0.1.5

1 of the 1 container images this version deploys carry CVE-2026-56391.

Container imageDigestPackageFixed in
nacos/nacos-server:latest1c191c30c8cd
coreutils@9.7-3ubuntu2
coreutils-from@9.5-1ubuntu2+0.0.0~ubuntu25
9.7-3ubuntu2.1
9.7-3ubuntu2.1

Open the chart page →

1,827
terrariahalkeye0.4.21 of 2See more

terraria halkeye 0.4.2

1 of the 2 container images this version deploys carry CVE-2026-56391.

Container imageDigestPackageFixed in
ryshe/terraria:latestb1c89f7f359a
coreutils@9.1-1
no fix listed

Open the chart page →

4,190
netbirdhelmforgeVerified publisher1.0.101 of 4See more

netbird helmforge 1.0.10

1 of the 4 container images this version deploys carry CVE-2026-56391.

Container imageDigestPackageFixed in
library/postgres:18.6-trixie4ef4dbc939d6
coreutils@9.7-3
no fix listed

Open the chart page →

3,035
redishelmforgeVerified publisher3.0.01 of 1See more

redis helmforge 3.0.0

1 of the 1 container images this version deploys carry CVE-2026-56391.

Container imageDigestPackageFixed in
library/redis:8.10.1298e5b3bc566
coreutils@9.7-3
no fix listed

Open the chart page →

978
simple-krr-dashboardhelm-simple-krr-dashboardVerified publisher1.6.21 of 3See more

simple-krr-dashboard helm-simple-krr-dashboard 1.6.2

1 of the 3 container images this version deploys carry CVE-2026-56391.

Container imageDigestPackageFixed in
robustadev/krr:v1.30.0b8d782e568c7
coreutils@9.7-3
no fix listed

Open the chart page →

2,255
infrahub-enterpriseinfrahub-enterpriseVerified publisher4.19.24 of 5See more

infrahub-enterprise infrahub-enterprise 4.19.2

4 of the 5 container images this version deploys carry CVE-2026-56391.

Container imageDigestPackageFixed in
bitnamilegacy/postgresql:14.13.0df6ec02e2b9a
coreutils@9.1-1
no fix listed
bitnamilegacy/rabbitmq:4.1.3-debian-12-r19e635efba431
coreutils@9.1-1
no fix listed
bitnamilegacy/redis:8.2.1-debian-12-r025bf63f3caf7
coreutils@9.1-1
no fix listed
library/neo4j:2026.05.0-enterprise2caf944aa4a5
coreutils@9.7-3
no fix listed

Open the chart page →

10,625
coreinstill-aiOfficialVerified publisher0.1.753 of 15See more

core instill-ai 0.1.75

3 of the 15 container images this version deploys carry CVE-2026-56391.

Container imageDigestPackageFixed in
instill/artifact-backend:b28766ac4a393e601ed
coreutils@9.7-3
no fix listed
instill/mgmt-backend:d0933d4ebe12f77a3f9
coreutils@9.7-3
no fix listed
instill/model-backend:611f0f2e980125e5ba5
coreutils@9.7-3
no fix listed

Open the chart page →

31,122
webdavk8s-webdavVerified publisher0.0.71 of 1See more

webdav k8s-webdav 0.0.7

1 of the 1 container images this version deploys carry CVE-2026-56391.

Container imageDigestPackageFixed in
library/httpd:2.4979c38c2228d
coreutils@9.7-3
no fix listed

Open the chart page →

1,703
klancesklances0.1.41 of 1See more

klances klances 0.1.4

1 of the 1 container images this version deploys carry CVE-2026-56391.

Container imageDigestPackageFixed in
ghcr.io/nicolargo/klances:0.1.374d6d33376eb
coreutils@9.7-3
no fix listed

Open the chart page →

1,715
kraken-cikraken-ciVerified publisher1.7.361 of 10See more

kraken-ci kraken-ci 1.7.36

1 of the 10 container images this version deploys carry CVE-2026-56391.

Container imageDigestPackageFixed in
library/redis:6143f7bfc2358
coreutils@9.1-1
no fix listed

Open the chart page →

7,303
kubecostmesosphere-stable0.37.51 of 9See more

kubecost mesosphere-stable 0.37.5

1 of the 9 container images this version deploys carry CVE-2026-56391.

Container imageDigestPackageFixed in
bitnamilegacy/kubectl:1.30.5744f84cf7493
coreutils@9.1-1
no fix listed

Open the chart page →

17,799
mogenius-operatormogeniusOfficialVerified publisher2.30.01See more

mogenius-operator mogenius 2.30.0

1 container image this version deploys carries CVE-2026-56391.

Container imageDigestPackageFixed in
valkey/valkey:9.1.2c123e3715db6
coreutils@9.7-3
no fix listed

Open the chart page →

—
nebraskanebraska3.0.01 of 2See more

nebraska nebraska 3.0.0

1 of the 2 container images this version deploys carry CVE-2026-56391.

Container imageDigestPackageFixed in
bitnamilegacy/postgresql:17.5.042a8200d3597
coreutils@9.1-1
no fix listed

Open the chart page →

4,077
observalobservalVerified publisher1.13.12 of 8See more

observal observal 1.13.1

2 of the 8 container images this version deploys carry CVE-2026-56391.

Container imageDigestPackageFixed in
library/postgres:16f1c3376c26f2
coreutils@9.7-3
no fix listed
ghcr.io/observal/observal-api:1.13.1153b8b893232
coreutils@9.7-3
no fix listed

Open the chart page →

5,916
openclaw-with-brainopenclaw-with-brainVerified publisher0.1.671 of 3See more

openclaw-with-brain openclaw-with-brain 0.1.67

1 of the 3 container images this version deploys carry CVE-2026-56391.

Container imageDigestPackageFixed in
ghcr.io/openclaw/openclaw:2026.6.10af7ea052cf21
coreutils@9.1-1
no fix listed

Open the chart page →

5,244
oesopsmxVerified publisher4.0.321 of 25See more

oes opsmx 4.0.32

1 of the 25 container images this version deploys carry CVE-2026-56391.

Container imageDigestPackageFixed in
quay.io/opsmxpublic/ubi8-oes-datascience:isd-spin-2025.10.01-af26a30d4-202511261054d8f66f4117fe
coreutils@9.7-3
no fix listed

Open the chart page →

108,315
part-dbpart-dbVerified publisher0.1.21 of 1See more

part-db part-db 0.1.2

1 of the 1 container images this version deploys carry CVE-2026-56391.

Container imageDigestPackageFixed in
jbtronics/part-db1:latest5db71f6db59d
coreutils@9.1-1
no fix listed

Open the chart page →

3,344
redispascaliskeVerified publisher2.1.01 of 1See more

redis pascaliske 2.1.0

1 of the 1 container images this version deploys carry CVE-2026-56391.

Container imageDigestPackageFixed in
library/redis:8.0.3be0a135f1955
coreutils@9.1-1
no fix listed

Open the chart page →

1,869
phpmyadminphpmyadminVerified publisher1.0.31 of 1See more

phpmyadmin phpmyadmin 1.0.3

1 of the 1 container images this version deploys carry CVE-2026-56391.

Container imageDigestPackageFixed in
library/phpmyadmin:5.2.3-apache3a8a8d6b5289
coreutils@9.7-3
no fix listed

Open the chart page →

2,650
qgis-serverqgis-serverVerified publisher0.1.101 of 3See more

qgis-server qgis-server 0.1.10

1 of the 3 container images this version deploys carry CVE-2026-56391.

Container imageDigestPackageFixed in
library/nginx:1.27.409369da6b103
coreutils@9.1-1
no fix listed

Open the chart page →

5,465
repoflowrepoflow-helm-public0.9.11 of 8See more

repoflow repoflow-helm-public 0.9.1

1 of the 8 container images this version deploys carry CVE-2026-56391.

Container imageDigestPackageFixed in
library/postgres:16.24aea012537ed
coreutils@9.1-1
no fix listed

Open the chart page →

13,647
nominatimrobjuz6.4.21See more

nominatim robjuz 6.4.2

1 container image this version deploys carries CVE-2026-56391.

Container imageDigestPackageFixed in
bitnamilegacy/postgresql:16.4.0-debian-12-r1494bc968141e7
coreutils@9.1-1
no fix listed

Open the chart page →

—
lldapself-hosters-by-nightVerified publisher0.5.21 of 2See more

lldap self-hosters-by-night 0.5.2

1 of the 2 container images this version deploys carry CVE-2026-56391.

Container imageDigestPackageFixed in
library/postgres:18.11090bc3a8ccf
coreutils@9.7-3
no fix listed

Open the chart page →

3,423
skypilotskypilotOfficialVerified publisher0.13.01 of 3See more

skypilot skypilot 0.13.0

1 of the 3 container images this version deploys carry CVE-2026-56391.

Container imageDigestPackageFixed in
berkeleyskypilot/skypilot:0.13.03bc8bf8f4d83
coreutils@9.7-3
no fix listed

Open the chart page →

5,926
kafka-chartsoldevelo-kafka-chart32.4.41 of 1See more

kafka-chart soldevelo-kafka-chart 32.4.4

1 of the 1 container images this version deploys carry CVE-2026-56391.

Container imageDigestPackageFixed in
soldevelo/kafka:4.0.0-debian-12-r0cfdc08c2f577
coreutils@9.1-1
no fix listed

Open the chart page →

2,377
spartanspartan0.9.11 of 1See more

spartan spartan 0.9.1

1 of the 1 container images this version deploys carry CVE-2026-56391.

Container imageDigestPackageFixed in
library/nginx:latest05b8cb60c354
coreutils@9.7-3
no fix listed

Open the chart page →

1,849
repmanszpadel-chartsVerified publisher3.52.171 of 3See more

repman szpadel-charts 3.52.17

1 of the 3 container images this version deploys carry CVE-2026-56391.

Container imageDigestPackageFixed in
library/nginx:1.27.3fb197595ebe7
coreutils@9.1-1
no fix listed

Open the chart page →

7,075
pretixtechwolf12Verified publisher2026.7.03 of 3See more

pretix techwolf12 2026.7.0

3 of the 3 container images this version deploys carry CVE-2026-56391.

Container imageDigestPackageFixed in
library/postgres:18.4a02db8cac496
coreutils@9.7-3
no fix listed
pretix/standalone:2026.7.05df3b7aa852e
coreutils@9.7-3
no fix listed
valkey/valkey:9.1.08e8d64b405ce
coreutils@9.7-3
no fix listed

Open the chart page →

9,894
mealieth-chartsVerified publisher0.5.11 of 1See more

mealie th-charts 0.5.1

1 of the 1 container images this version deploys carry CVE-2026-56391.

Container imageDigestPackageFixed in
ghcr.io/mealie-recipes/mealie:v3.7.0bb2939094eed
coreutils@9.7-3
no fix listed

Open the chart page →

3,827

Container images carrying it

1,332 by charts deploying them

A fixed version is listed for 2 of the 2 affected packages.

No deployed image carries CVE-2026-56391.

syft 1.42.1 · advisories as of 16 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.