StackRadar

CVE-2026-56392

Medium

Advisory

Published 24 Jul 2026In the index since 5 Sept 2026
Severity
Medium
worst across findings
CVSS
6.1
base score, highest
EPSS
0.001
4th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
1,756
of 17,792 indexed, latest versions
Container images
1,748
deployed by those charts
Fix available
1 of 2
affected packages

Red Hat Bug Fix Advisory: coreutils bug fix and enhancement update

Carried by container images the latest versions of 1,756 of 17,792 indexed charts deploy, on 1,748 images.

Affected packageAffected versionsFixed inImages
coreutilsdeb9.1-1, 9.7-3, 9.7-3+dhi3, 9.7-3+dhi4no fix listed1,258
coreutilsrpm8.30-6.el8, 8.30-6.el8_1.1, 8.30-7.el8_2.1, 8.30-8.el8+11 more0:8.30-20.el8_10, 0:8.32-41.el9_8.1490
OSV records
DEBIAN-CVE-2026-56392RHBA-2026:47115RHSA-2026:66403RLSA-2026:66403

Charts affected

1,756 by stars
ChartLatestAffected imagesRadar Score
my-nginx-appyasser-nginx-app0.1.01 of 1See more

my-nginx-app yasser-nginx-app 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-56392.

Container imageDigestPackageFixed in
library/nginx:stabled5792f71a949
coreutils@9.7-3
no fix listed

Open the chart page →

1,849
api-snapyoukadevVerified publisher0.1.11 of 1See more

api-snap youkadev 0.1.1

1 of the 1 container images this version deploys carry CVE-2026-56392.

Container imageDigestPackageFixed in
youkadev/api-snap:0.1.14db0f9428e67
coreutils@9.1-1
no fix listed

Open the chart page →

2,684
keycloakxzaks2.2.01 of 1See more

keycloakx zaks 2.2.0

1 of the 1 container images this version deploys carry CVE-2026-56392.

Container imageDigestPackageFixed in
quay.io/keycloak/keycloak:20.0.3b8f2a453a17a
coreutils@8.30-13.el8
0:8.30-20.el8_10

Open the chart page →

6,016
posthogzeet0.23.21 of 9See more

posthog zeet 0.23.2

1 of the 9 container images this version deploys carry CVE-2026-56392.

Container imageDigestPackageFixed in
altinity/clickhouse-operator:0.19.07a85f522c5bc
coreutils@8.30-13.el8
0:8.30-20.el8_10

Open the chart page →

3,697
changedetection-iozekker6Verified publisher1.99.01 of 1See more

changedetection-io zekker6 1.99.0

1 of the 1 container images this version deploys carry CVE-2026-56392.

Container imageDigestPackageFixed in
ghcr.io/dgtlmoon/changedetection.io:0.60.47bb6963b730d
coreutils@9.1-1
no fix listed

Open the chart page →

2,612
NEW_APPzekker6Verified publisher0.0.01 of 1See more

NEW_APP zekker6 0.0.0

1 of the 1 container images this version deploys carry CVE-2026-56392.

Container imageDigestPackageFixed in
library/nginx:latest05b8cb60c354
coreutils@9.7-3
no fix listed

Open the chart page →

1,849

Container images carrying it

1,748 by charts deploying them

A fixed version is listed for 1 of the 2 affected packages.

Container imageDigestPackageFixed inUsed by
shashkist/flask-contacts-app:latest581de1fd6084
coreutils@9.1-1
no fix listed
4
valkey/valkey:9.0.2930b41430fb7
coreutils@9.7-3
no fix listed
4
quay.io/keycloak/keycloak:26.7.3ff4257d0d64e
coreutils@8.32-41.el9_8
0:8.32-41.el9_8.1
4
quay.io/strimzi/operator:0.37.052f376e64b9b
coreutils@8.30-15.el8
0:8.30-20.el8_10
4
apache/superset:6.1.0:latest16b50bbef664
coreutils@9.1-1
no fix listed
3
bitnamilegacy/kubectl:latestcd354d5b2556
coreutils@9.1-1
no fix listed
3
bitnamilegacy/os-shell:12-debian-12-r5177e65e9d633e
coreutils@9.1-1
no fix listed
3
bitnamilegacy/postgresql:14.13.0df6ec02e2b9a
coreutils@9.1-1
no fix listed
3
cockroachdb/cockroach-self-signer-cert:1.1007a49acec18d
coreutils@8.30-17.el8_10
0:8.30-20.el8_10
3
dnationcloud/kubernetes-jsonnet-translator:2.0.178fed4f3c130
coreutils@9.1-1
no fix listed
3
library/ghost:6.63.0e05bc1169fb2
coreutils@9.1-1
no fix listed
3
library/nginx:1.25:1.25.5a484819eb602
coreutils@9.1-1
no fix listed
3
library/node:ltsbe23f54a88d3
coreutils@9.1-1
no fix listed
3
library/python:3.12-slim78387bc3881b
coreutils@9.7-3
no fix listed
3
louislam/uptime-kuma:2.5.4917318f9d7be
coreutils@9.1-1
no fix listed
3
mcp/grafana:latest9362bcf6aa0e
coreutils@9.1-1
no fix listed
3
minio/minio:RELEASE.2021-02-14T04-01-33Zbd11edda91f3
coreutils@8.30-8.el8
0:8.30-20.el8_10
3
opencsghq/postgres:15.19b98600564e07
coreutils@9.7-3
no fix listed
3
solace/solace-pubsub-standard:latest8e8ad105595e
coreutils@8.32-41.el9_8
0:8.32-41.el9_8.1
3
vaultwarden/server:1.37.1ebdfe70701c6
coreutils@9.7-3
no fix listed
3
ghcr.io/bat-bs/bitnami-pgvector:pg1619ebe07b4daf
coreutils@9.1-1
no fix listed
3
ghcr.io/conductionnl/gateway-ui:stag6a5594b7b32c
coreutils@9.1-1
no fix listed
3
ghcr.io/donkie/spoolman:0.26.1cf9b41e17b93
coreutils@9.1-1
no fix listed
3
ghcr.io/huggingface/text-embeddings-inference:cpu-1.50502794a4d86
coreutils@9.1-1
no fix listed
3
ghcr.io/smarter-project/hydra/crismux:main673d5229df1f
coreutils@9.1-1
no fix listed
3
quay.io/devtron/ai-agent:0.0.16545dac92173
coreutils@9.1-1
no fix listed
3
quay.io/devtron/calico-networking:node-v3.19.1bc4aa22272ef
coreutils@8.30-8.el8
0:8.30-20.el8_10
3
quay.io/devtron/clair:4.3.675fb847ac045
coreutils@8.30-12.el8
0:8.30-20.el8_10
3
quay.io/devtron/notifier:9804331c-372-39294709c7da19c5a
coreutils@9.1-1
no fix listed
3
quay.io/keycloak/keycloak-operator:26.7.3e3856fd1aeb4
coreutils@8.32-41.el9_8
0:8.32-41.el9_8.1
3
quay.io/openshift/origin-oauth-proxy:4.14a7dff785d821
coreutils@8.30-12.el8
0:8.30-20.el8_10
3
quay.io/redhat-cop/kube-rbac-proxy:v0.11.0c68135620167
coreutils@8.30-12.el8
0:8.30-20.el8_10
3
actualbudget/actual-server:26.9.0552beab3dec8
coreutils@9.1-1
no fix listed
2
apacherocketmq/rocketmq-dashboard:2.1.0ce78506bd6fe
coreutils@8.32-39.el9
0:8.32-41.el9_8.1
2
bitnamilegacy/elasticsearch:9.1.2-debian-12-r000176a47afa0
coreutils@9.1-1
no fix listed
2
bitnamilegacy/etcd:latest99b408c15272
coreutils@9.1-1
no fix listed
2
bitnamilegacy/mariadb:11.4.5-debian-12-r933ce23601fc9
coreutils@9.1-1
no fix listed
2
bitnamilegacy/pgpool:4.6.3-debian-12-r0d3bf3910f148
coreutils@9.1-1
no fix listed
2
bitnamilegacy/postgresql:16.4.0-debian-12-r1494bc968141e7
coreutils@9.1-1
no fix listed
2
bitnamilegacy/postgresql-repmgr:17.6.0-debian-12-r2f12387ec882b
coreutils@9.1-1
no fix listed
2
bitnamilegacy/redis:latest5927ff3702df
coreutils@9.1-1
no fix listed
2
bitnamilegacy/valkey-cluster:8.1.3-debian-12-r332869e769b7e
coreutils@9.1-1
no fix listed
2
bitnami/minideb:latestab4d5b45116e
coreutils@9.7-3
no fix listed
2
blockstack/stacks-core:3.2.0.0.0f79944317326
coreutils@9.1-1
no fix listed
2
cagriekin/pg-ha:2.0.1-pg1899e17aa165df
coreutils@9.7-3
no fix listed
2
cfssl/cfssl:latest:v1.6.5c9018c2ddf0b
coreutils@9.1-1
no fix listed
2
chromedp/headless-shell:148.0.7778.97313ed7255ae1
coreutils@9.7-3
no fix listed
2
confluentinc/cp-kafka:6.2.11-1-ubi8ac776fad95a5
coreutils@8.30-15.el8
0:8.30-20.el8_10
2
confluentinc/cp-zookeeper:latest7610a50b13e7
coreutils@8.30-15.el8
0:8.30-20.el8_10
2
confluentinc/cp-zookeeper:6.2.11-1-ubi8cae577096489
coreutils@8.30-15.el8
0:8.30-20.el8_10
2

syft 1.42.1 · advisories as of 16 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.