StackRadar

CVE-2026-56392

Medium

Advisory

Published 24 Jul 2026In the index since 5 Sept 2026
Severity
Medium
worst across findings
CVSS
6.1
base score, highest
EPSS
0.001
4th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
1,756
of 17,792 indexed, latest versions
Container images
1,748
deployed by those charts
Fix available
1 of 2
affected packages

Red Hat Bug Fix Advisory: coreutils bug fix and enhancement update

Carried by container images the latest versions of 1,756 of 17,792 indexed charts deploy, on 1,748 images.

Affected packageAffected versionsFixed inImages
coreutilsdeb9.1-1, 9.7-3, 9.7-3+dhi3, 9.7-3+dhi4no fix listed1,258
coreutilsrpm8.30-6.el8, 8.30-6.el8_1.1, 8.30-7.el8_2.1, 8.30-8.el8+11 more0:8.30-20.el8_10, 0:8.32-41.el9_8.1490
OSV records
DEBIAN-CVE-2026-56392RHBA-2026:47115RHSA-2026:66403RLSA-2026:66403

Charts affected

1,756 by stars
ChartLatestAffected imagesRadar Score
my-nginx-appyasser-nginx-app0.1.01 of 1See more

my-nginx-app yasser-nginx-app 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-56392.

Container imageDigestPackageFixed in
library/nginx:stabled5792f71a949
coreutils@9.7-3
no fix listed

Open the chart page →

1,849
api-snapyoukadevVerified publisher0.1.11 of 1See more

api-snap youkadev 0.1.1

1 of the 1 container images this version deploys carry CVE-2026-56392.

Container imageDigestPackageFixed in
youkadev/api-snap:0.1.14db0f9428e67
coreutils@9.1-1
no fix listed

Open the chart page →

2,684
keycloakxzaks2.2.01 of 1See more

keycloakx zaks 2.2.0

1 of the 1 container images this version deploys carry CVE-2026-56392.

Container imageDigestPackageFixed in
quay.io/keycloak/keycloak:20.0.3b8f2a453a17a
coreutils@8.30-13.el8
0:8.30-20.el8_10

Open the chart page →

6,016
posthogzeet0.23.21 of 9See more

posthog zeet 0.23.2

1 of the 9 container images this version deploys carry CVE-2026-56392.

Container imageDigestPackageFixed in
altinity/clickhouse-operator:0.19.07a85f522c5bc
coreutils@8.30-13.el8
0:8.30-20.el8_10

Open the chart page →

3,697
changedetection-iozekker6Verified publisher1.99.01 of 1See more

changedetection-io zekker6 1.99.0

1 of the 1 container images this version deploys carry CVE-2026-56392.

Container imageDigestPackageFixed in
ghcr.io/dgtlmoon/changedetection.io:0.60.47bb6963b730d
coreutils@9.1-1
no fix listed

Open the chart page →

2,612
NEW_APPzekker6Verified publisher0.0.01 of 1See more

NEW_APP zekker6 0.0.0

1 of the 1 container images this version deploys carry CVE-2026-56392.

Container imageDigestPackageFixed in
library/nginx:latest05b8cb60c354
coreutils@9.7-3
no fix listed

Open the chart page →

1,849

Container images carrying it

1,748 by charts deploying them

A fixed version is listed for 1 of the 2 affected packages.

Container imageDigestPackageFixed inUsed by
rotationalio/beacon:0.2.0f8d8b694515a
coreutils@9.7-3+dhi4
no fix listed
1
rotationalio/endeavor:1.3.0ac566baddc06
coreutils@9.1-1
no fix listed
1
rotationalio/genoa:1.2.03ab583519215
coreutils@9.1-1
no fix listed
1
rotationalio/geoping:1.3.034bcb6fc3cb7
coreutils@9.7-3
no fix listed
1
rotationalio/honu:0.5.069fd30c2e31c
coreutils@9.1-1
no fix listed
1
rotationalio/rotational-api:1.3.0f1a2d05d8fff
coreutils@9.7-3
no fix listed
1
rotationalio/vanity:1.2.0d77350f69b45
coreutils@9.7-3
no fix listed
1
roundcube/roundcubemail:1.6.16-apache-nonroot17d9d9580962
coreutils@9.7-3
no fix listed
1
rspamd/rspamd:4.1.4e870599c970d
coreutils@9.7-3
no fix listed
1
rstmdb/rstmdb:lateste5187f2aaace
coreutils@9.1-1
no fix listed
1
ryshe/terraria:latestb1c89f7f359a
coreutils@9.1-1
no fix listed
1
ryuunosukeds3/orbital:latest0879f7261b10
coreutils@9.1-1
no fix listed
1
santisbon/evwatcher:latestc4e994ca4540
coreutils@9.1-1
no fix listed
1
santisbon/evworker:lateste807283f8d69
coreutils@9.1-1
no fix listed
1
santisbon/speedtest:latest8ee3a1697227
coreutils@9.1-1
no fix listed
1
sarwansharma/minio:v359d1da9385d1
coreutils@8.30-12.el8
0:8.30-20.el8_10
1
sashafefler/spacecapybara_app:latestf96d7804c0ca
coreutils@9.1-1
no fix listed
1
sbs20/scanservjs:release-v3.0.3dad1fd6e9a98
coreutils@9.1-1
no fix listed
1
scsibug/nostr-rs-relay:0.9.003f54bfbffff
coreutils@9.1-1
no fix listed
1
sebt3/kuberest:1.4.00ccce5d6d4d2
coreutils@9.1-1
no fix listed
1
seldonio/seldon-core-operator:1.19.0544e3bf71bd1
coreutils@8.32-39.el9
0:8.32-41.el9_8.1
1
seldonio/seldon-request-logger:1.11.24e985d2006a8
coreutils@8.30-8.el8
0:8.30-20.el8_10
1
seoulorigin/janus-ml-sidecar:v3.192cbaad0c540
coreutils@9.7-3
no fix listed
1
sepehrmdn/mirasys-assignment:1.0.12567228e33c8
coreutils@9.1-1
no fix listed
1
serversideup/php:8.5-fpm-nginx8f8c2f010ac5
coreutils@9.7-3
no fix listed
1
shamimkuet/nginx:1.0.2b82902a76a04
coreutils@9.1-1
no fix listed
1
sharanalwar/redchef-backend:latest8d3cab80df49
coreutils@9.1-1
no fix listed
1
shwcloud/seawise-backup:v1.7.1a97479a54df4
coreutils@9.7-3
no fix listed
1
sigma2as/minio:20240306-3a2e4f5c284ead9ec3e
coreutils@8.30-12.el8
0:8.30-20.el8_10
1
signalen/backend:2.50.14760256000738
coreutils@9.1-1
no fix listed
1
sigp/siren:v3.0.42c219b04758e
coreutils@9.1-1
no fix listed
1
sigscale/cse:latest67d0c886516b
coreutils@9.1-1
no fix listed
1
sigscale/ocs:latest3c1bdc9732e2
coreutils@9.1-1
no fix listed
1
sirrend/helmup-engine:0.1.13699e79e3d4e2
coreutils@9.1-1
no fix listed
1
sirrend/helmup-github-scraper:0.1.47ca688c7abf5
coreutils@9.1-1
no fix listed
1
sirrend/helmup-notifications-service:0.1.3997866417011
coreutils@9.1-1
no fix listed
1
sissbruecker/linkding:1.35.00c5dddf0b37c
coreutils@9.1-1
no fix listed
1
sissbruecker/linkding:1.41.0-plusa222fb777e1f
coreutils@9.1-1
no fix listed
1
socialmediamacroscope/histogram:0.1.26418f9bdb4d2
coreutils@9.1-1
no fix listed
1
socialmediamacroscope/network_analysis:0.1.3b351c21422e6
coreutils@9.1-1
no fix listed
1
socialmediamacroscope/preprocessing:0.1.3ca863306314b
coreutils@9.1-1
no fix listed
1
socialmediamacroscope/topic_modeling:0.1.3fa490acac2f8
coreutils@9.1-1
no fix listed
1
solarwinds/solarwinds-otel-collector:0.152.3-k8s3c1110e8bdfb
coreutils@9.1-1
no fix listed
1
soldevelo/kafka:4.0.0-debian-12-r0cfdc08c2f577
coreutils@9.1-1
no fix listed
1
soldevelo/pgpool:4.6.3-debian-12-r0044d16a65129
coreutils@9.1-1
no fix listed
1
soldevelo/postgresql-repmgr:17.6.0-debian-12-r03eaab21e40e5
coreutils@9.1-1
no fix listed
1
somnathmore/custom-nginx:v2bdfc06cad4ec
coreutils@9.1-1
no fix listed
1
sonatype/nexus3:3.53.04bd975493104
coreutils@8.30-13.el8
0:8.30-20.el8_10
1
sonatype/nexus3:3.58.1586060431b64
coreutils@8.30-15.el8
0:8.30-20.el8_10
1
sondresjo/altinnendata-app:v1.9.1c2707839d8a3
coreutils@9.1-1
no fix listed
1

syft 1.42.1 · advisories as of 16 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.