StackRadar

CVE-2026-56392

Medium

Advisory

Published 24 Jul 2026In the index since 5 Sept 2026
Severity
Medium
worst across findings
CVSS
6.1
base score, highest
EPSS
0.001
4th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
1,761
of 17,803 indexed, latest versions
Container images
1,759
deployed by those charts
Fix available
1 of 2
affected packages

Red Hat Bug Fix Advisory: coreutils bug fix and enhancement update

Carried by container images the latest versions of 1,761 of 17,803 indexed charts deploy, on 1,759 images.

Affected packageAffected versionsFixed inImages
coreutilsdeb9.1-1, 9.7-3, 9.7-3+dhi3, 9.7-3+dhi4no fix listed1,271
coreutilsrpm8.30-6.el8, 8.30-6.el8_1.1, 8.30-7.el8_2.1, 8.30-8.el8+11 more0:8.30-20.el8_10, 0:8.32-41.el9_8.1488
OSV records
DEBIAN-CVE-2026-56392RHBA-2026:47115RHSA-2026:66403RLSA-2026:66403

Charts affected

1,761 by stars
ChartLatestAffected imagesRadar Score
spacecapybara-chartspacecapy1.0.491 of 2See more

spacecapybara-chart spacecapy 1.0.49

1 of the 2 container images this version deploys carry CVE-2026-56392.

Container imageDigestPackageFixed in
sashafefler/spacecapybara_app:latestf96d7804c0ca
coreutils@9.1-1
no fix listed

Open the chart page →

11,974
strimzi-user-operatorspartan0.4.01 of 1See more

strimzi-user-operator spartan 0.4.0

1 of the 1 container images this version deploys carry CVE-2026-56392.

Container imageDigestPackageFixed in
quay.io/strimzi/operator:0.45.158c727cd2e68
coreutils@8.32-39.el9
0:8.32-41.el9_8.1

Open the chart page →

1,862
speckle-preview-service-branch-testing6speckleVerified publisher2.23.14-branch.testing6.334655-b4e04ee1 of 1See more

speckle-preview-service-branch-testing6 speckle 2.23.14-branch.testing6.334655-b4e04ee

1 of the 1 container images this version deploys carry CVE-2026-56392.

Container imageDigestPackageFixed in
speckle/speckle-preview-service:2.23.14-branch.testing6.334655-b4e04ee6dee853ba74a
coreutils@9.1-1
no fix listed

Open the chart page →

5,987
speckle-server-branch-hotfix-2.19.1speckleVerified publisher2.19.2-branch.hotfix-2.19.1.124125-665e7e12 of 5See more

speckle-server-branch-hotfix-2.19.1 speckle 2.19.2-branch.hotfix-2.19.1.124125-665e7e1

2 of the 5 container images this version deploys carry CVE-2026-56392.

Container imageDigestPackageFixed in
speckle/speckle-preview-service:2.19.2-branch.hotfix-2.19.1.124125-665e7e1c102b087481a
coreutils@9.1-1
no fix listed
speckle/speckle-server:2.19.2-branch.hotfix-2.19.1.124125-665e7e14b6a0750d5aa
coreutils@9.1-1
no fix listed

Open the chart page →

16,487
speckle-server-branch-hotfix-2.20.2speckleVerified publisher2.20.3-branch.hotfix-2.20.2.149555-37ea0cb2 of 5See more

speckle-server-branch-hotfix-2.20.2 speckle 2.20.3-branch.hotfix-2.20.2.149555-37ea0cb

2 of the 5 container images this version deploys carry CVE-2026-56392.

Container imageDigestPackageFixed in
speckle/speckle-preview-service:2.20.3-branch.hotfix-2.20.2.149555-37ea0cbd3da0a84de98
coreutils@9.1-1
no fix listed
speckle/speckle-server:2.20.3-branch.hotfix-2.20.2.149555-37ea0cb52f8eabf5cea
coreutils@9.1-1
no fix listed

Open the chart page →

16,519
speckle-server-branch-testingspeckleVerified publisher2.17.14-branch.testing.72707.921a5f82 of 5See more

speckle-server-branch-testing speckle 2.17.14-branch.testing.72707.921a5f8

2 of the 5 container images this version deploys carry CVE-2026-56392.

Container imageDigestPackageFixed in
speckle/speckle-preview-service:2.17.14-branch.testing.72707.921a5f884fc39bca0c8
coreutils@9.1-1
no fix listed
speckle/speckle-server:2.17.14-branch.testing.72707.921a5f849d10dcdfb91
coreutils@9.1-1
no fix listed

Open the chart page →

14,767
speckle-server-branch-testing1speckleVerified publisher2.20.6-branch.testing1.154030-9b091142 of 5See more

speckle-server-branch-testing1 speckle 2.20.6-branch.testing1.154030-9b09114

2 of the 5 container images this version deploys carry CVE-2026-56392.

Container imageDigestPackageFixed in
speckle/speckle-preview-service:2.20.6-branch.testing1.154030-9b091148f3c1ea153ba
coreutils@9.1-1
no fix listed
speckle/speckle-server:2.20.6-branch.testing1.154030-9b09114e8413f57b327
coreutils@9.1-1
no fix listed

Open the chart page →

16,519
speckle-server-branch-testing2speckleVerified publisher2.18.11-branch.testing2.88634-335d4692 of 5See more

speckle-server-branch-testing2 speckle 2.18.11-branch.testing2.88634-335d469

2 of the 5 container images this version deploys carry CVE-2026-56392.

Container imageDigestPackageFixed in
speckle/speckle-preview-service:2.18.11-branch.testing2.88634-335d4694bd113093583
coreutils@9.1-1
no fix listed
speckle/speckle-server:2.18.11-branch.testing2.88634-335d469bf6a501b2210
coreutils@9.1-1
no fix listed

Open the chart page →

14,309
speckle-server-branch-testing3speckleVerified publisher2.18.12-branch.testing3.88744-f55b3412 of 5See more

speckle-server-branch-testing3 speckle 2.18.12-branch.testing3.88744-f55b341

2 of the 5 container images this version deploys carry CVE-2026-56392.

Container imageDigestPackageFixed in
speckle/speckle-preview-service:2.18.12-branch.testing3.88744-f55b3414bd113093583
coreutils@9.1-1
no fix listed
speckle/speckle-server:2.18.12-branch.testing3.88744-f55b34189a5872375f9
coreutils@9.1-1
no fix listed

Open the chart page →

14,309
speckle-server-branch-testing4speckleVerified publisher2.20.2-branch.testing4.134160-9fad4b22 of 5See more

speckle-server-branch-testing4 speckle 2.20.2-branch.testing4.134160-9fad4b2

2 of the 5 container images this version deploys carry CVE-2026-56392.

Container imageDigestPackageFixed in
speckle/speckle-preview-service:2.20.2-branch.testing4.134160-9fad4b21f897ca906ea
coreutils@9.1-1
no fix listed
speckle/speckle-server:2.20.2-branch.testing4.134160-9fad4b2687f43ab16f3
coreutils@9.1-1
no fix listed

Open the chart page →

16,138
speckle-server-branch-testing5speckleVerified publisher2.21.3-branch.testing5.219631-2153bef1 of 5See more

speckle-server-branch-testing5 speckle 2.21.3-branch.testing5.219631-2153bef

1 of the 5 container images this version deploys carry CVE-2026-56392.

Container imageDigestPackageFixed in
speckle/speckle-preview-service:2.21.3-branch.testing5.219631-2153bef52cad5e3293e
coreutils@9.1-1
no fix listed

Open the chart page →

15,749
speckle-server-branch-testing6speckleVerified publisher2.25.10-branch.testing6.645-b125c1e1 of 4See more

speckle-server-branch-testing6 speckle 2.25.10-branch.testing6.645-b125c1e

1 of the 4 container images this version deploys carry CVE-2026-56392.

Container imageDigestPackageFixed in
speckle/speckle-preview-service:2.25.10-branch.testing6.645-b125c1e787adcb20a3a
coreutils@9.1-1
no fix listed

Open the chart page →

11,214
spoolmanspoolmanVerified publisher0.2.61 of 1See more

spoolman spoolman 0.2.6

1 of the 1 container images this version deploys carry CVE-2026-56392.

Container imageDigestPackageFixed in
ghcr.io/donkie/spoolman:0.26.1cf9b41e17b93
coreutils@9.1-1
no fix listed

Open the chart page →

1,804
airflowsqream-chartsVerified publisher1.17.01 of 4See more

airflow sqream-charts 1.17.0

1 of the 4 container images this version deploys carry CVE-2026-56392.

Container imageDigestPackageFixed in
library/redis:7.2-bookworm74566c6910d1
coreutils@9.1-1
no fix listed

Open the chart page →

1,861
squadsquadVerified publisher0.1.111 of 1See more

squad squad 0.1.11

1 of the 1 container images this version deploys carry CVE-2026-56392.

Container imageDigestPackageFixed in
cm2network/squad:latest8cba47f53df5
coreutils@9.7-3
no fix listed

Open the chart page →

2,510
srebotsrebot0.14.01 of 2See more

srebot srebot 0.14.0

1 of the 2 container images this version deploys carry CVE-2026-56392.

Container imageDigestPackageFixed in
ghcr.io/shadrus/srebot:0.14.09b4415e937b2
coreutils@9.7-3
no fix listed

Open the chart page →

1,578
servicexssl-hep1.8.511 of 16See more

servicex ssl-hep 1.8.5

11 of the 16 container images this version deploys carry CVE-2026-56392.

Container imageDigestPackageFixed in
library/python:3.1070c9cc675605
coreutils@9.7-3
no fix listed
ncsa/checks:main0b738bbc8d70
coreutils@9.7-3
no fix listed
sslhep/servicex_app:v1.8.51d12f943cec5
coreutils@9.7-3
no fix listed
sslhep/servicex_code_gen_atlas_xaod:v1.8.5e7aff7f97b89
coreutils@9.7-3
no fix listed
sslhep/servicex_code_gen_func_adl_uproot:v1.8.5b01b8ee966ed
coreutils@9.7-3
no fix listed
sslhep/servicex_code_gen_python:v1.8.50e4175a4e1eb
coreutils@9.7-3
no fix listed
sslhep/servicex_code_gen_raw_uproot:v1.8.5671980005c57
coreutils@9.7-3
no fix listed
sslhep/servicex_code_gen_topcp:v1.8.5596db2abdd09
coreutils@9.7-3
no fix listed
sslhep/servicex-did-finder-atlasopenmagic:v1.8.554aaf1721d03
coreutils@9.7-3
no fix listed
sslhep/servicex-did-finder-cernopendata:v1.8.52cb88ceab5bb
coreutils@9.7-3
no fix listed
sslhep/servicex-did-finder-xrootd:v1.8.5c284442b44e3
coreutils@9.7-3
no fix listed

Open the chart page →

68,323
allurestakaterVerified publisher1.0.11 of 1See more

allure stakater 1.0.1

1 of the 1 container images this version deploys carry CVE-2026-56392.

Container imageDigestPackageFixed in
quay.io/eformat/jenkins-agent-graalvm:latesta3b9a07648b6
coreutils@8.30-8.el8
0:8.30-20.el8_10

Open the chart page →

28,515
jenkinsstakaterVerified publisher0.21.01 of 1See more

jenkins stakater 0.21.0

1 of the 1 container images this version deploys carry CVE-2026-56392.

Container imageDigestPackageFixed in
jenkins/jenkins:ltsc1e4c349365f
coreutils@9.7-3
no fix listed

Open the chart page →

2,498
nordmart-reviewstakaterVerified publisher0.0.61 of 3See more

nordmart-review stakater 0.0.6

1 of the 3 container images this version deploys carry CVE-2026-56392.

Container imageDigestPackageFixed in
stakater/stakater-nordmart-review:1.0.35954d2be66e95
coreutils@8.30-12.el8
0:8.30-20.el8_10

Open the chart page →

11,571
nordmart-review-instancestakaterVerified publisher1.0.01 of 3See more

nordmart-review-instance stakater 1.0.0

1 of the 3 container images this version deploys carry CVE-2026-56392.

Container imageDigestPackageFixed in
stakater/stakater-nordmart-review:1.0.35954d2be66e95
coreutils@8.30-12.el8
0:8.30-20.el8_10

Open the chart page →

11,571
workshop-operatorstakaterVerified publisher0.0.381 of 2See more

workshop-operator stakater 0.0.38

1 of the 2 container images this version deploys carry CVE-2026-56392.

Container imageDigestPackageFixed in
stakater/workshop-operator:v0.0.3897bf456cc97c
coreutils@8.30-12.el8
0:8.30-20.el8_10

Open the chart page →

6,678
stakefishstakefish0.1.01 of 8See more

stakefish stakefish 0.1.0

1 of the 8 container images this version deploys carry CVE-2026-56392.

Container imageDigestPackageFixed in
thongngo3301/stakefish:latesta341af5976e3
coreutils@9.1-1
no fix listed

Open the chart page →

20,317
erigonstakewise2.61.21 of 3See more

erigon stakewise 2.61.2

1 of the 3 container images this version deploys carry CVE-2026-56392.

Container imageDigestPackageFixed in
erigontech/erigon:v2.61.288706754b627
coreutils@9.1-1
no fix listed

Open the chart page →

2,975
lodestar-validatorstakewise1.2.01 of 1See more

lodestar-validator stakewise 1.2.0

1 of the 1 container images this version deploys carry CVE-2026-56392.

Container imageDigestPackageFixed in
chainsafe/lodestar:v1.27.07b9fe4aa8073
coreutils@9.1-1
no fix listed

Open the chart page →

4,082
ssv-nodestakewise2.2.01 of 2See more

ssv-node stakewise 2.2.0

1 of the 2 container images this version deploys carry CVE-2026-56392.

Container imageDigestPackageFixed in
bloxstaking/ssv-node:v2.2.0bf6d7d2fdc93
coreutils@9.1-1
no fix listed

Open the chart page →

6,951
verostakewise0.8.31 of 2See more

vero stakewise 0.8.3

1 of the 2 container images this version deploys carry CVE-2026-56392.

Container imageDigestPackageFixed in
ghcr.io/serenita-org/vero:v0.8.3e5a7ec714acc
coreutils@9.1-1
no fix listed

Open the chart page →

3,484
stalwartstalwart-helmVerified publisher0.7.181 of 2See more

stalwart stalwart-helm 0.7.18

1 of the 2 container images this version deploys carry CVE-2026-56392.

Container imageDigestPackageFixed in
stalwartlabs/stalwart:v0.16.22388dcb75a707
coreutils@9.7-3
no fix listed

Open the chart page →

1,425
multus-cnistartechnicaVerified publisher0.1.41 of 1See more

multus-cni startechnica 0.1.4

1 of the 1 container images this version deploys carry CVE-2026-56392.

Container imageDigestPackageFixed in
ghcr.io/k8snetworkplumbingwg/multus-cni:latest-thickb2136983532b
coreutils@9.7-3
no fix listed

Open the chart page →

1,036
open-appsec-injectorstartechnicaVerified publisher1.1.21 of 3See more

open-appsec-injector startechnica 1.1.2

1 of the 3 container images this version deploys carry CVE-2026-56392.

Container imageDigestPackageFixed in
ghcr.io/openappsec/openappsec-waf-webhook:1.1.345b979b962043
coreutils@9.7-3
no fix listed

Open the chart page →

4,335
minio-operatorstatcan4.1.01 of 2See more

minio-operator statcan 4.1.0

1 of the 2 container images this version deploys carry CVE-2026-56392.

Container imageDigestPackageFixed in
minio/operator:v4.1.02adc5be088f5
coreutils@8.30-8.el8
0:8.30-20.el8_10

Open the chart page →

6,596
steadybit-agentsteadybit3.1.1661See more

steadybit-agent steadybit 3.1.166

1 container image this version deploys carries CVE-2026-56392.

Container imageDigestPackageFixed in
ghcr.io/steadybit/agent:2.4.52bc7b260e44e
coreutils@9.7-3
no fix listed

Open the chart page →

—
its-mytabsstone0.3.01 of 1See more

its-mytabs stone 0.3.0

1 of the 1 container images this version deploys carry CVE-2026-56392.

Container imageDigestPackageFixed in
louislam/its-mytabs:1.7.02e478d3170bd
coreutils@9.7-3
no fix listed

Open the chart page →

1,507
minkstoneshi-tscharts0.1.01 of 1See more

mink stoneshi-tscharts 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-56392.

Container imageDigestPackageFixed in
library/nginx:stabled5792f71a949
coreutils@9.7-3
no fix listed

Open the chart page →

1,861
wonder-mesh-netstrrl-helm2026.629.02 of 3See more

wonder-mesh-net strrl-helm 2026.629.0

2 of the 3 container images this version deploys carry CVE-2026-56392.

Container imageDigestPackageFixed in
ghcr.io/strrl/wonder-mesh-net:v2026.629.0625b140372fd
coreutils@9.1-1
no fix listed
quay.io/keycloak/keycloak:26.009a381c715ab
coreutils@8.32-36.el9
0:8.32-41.el9_8.1

Open the chart page →

5,130
artifactory-cleanupsubshellVerified publisher1.0.11 of 1See more

artifactory-cleanup subshell 1.0.1

1 of the 1 container images this version deploys carry CVE-2026-56392.

Container imageDigestPackageFixed in
devopshq/artifactory-cleanup:1.0.1830e093bffa91
coreutils@9.1-1
no fix listed

Open the chart page →

2,558
orchestratorsubstraVerified publisher8.8.01 of 3See more

orchestrator substra 8.8.0

1 of the 3 container images this version deploys carry CVE-2026-56392.

Container imageDigestPackageFixed in
library/postgres:1767f41722b7a8
coreutils@9.7-3
no fix listed

Open the chart page →

3,039
substra-backendsubstraVerified publisher26.15.31 of 7See more

substra-backend substra 26.15.3

1 of the 7 container images this version deploys carry CVE-2026-56392.

Container imageDigestPackageFixed in
library/postgres:1767f41722b7a8
coreutils@9.7-3
no fix listed

Open the chart page →

4,827
substra-frontendsubstraVerified publisher1.2.31 of 1See more

substra-frontend substra 1.2.3

1 of the 1 container images this version deploys carry CVE-2026-56392.

Container imageDigestPackageFixed in
ghcr.io/substra/substra-frontend:1.0.0e230e6ac0722
coreutils@9.1-1
no fix listed

Open the chart page →

3,071
verbasubstratusVerified publisher0.4.01 of 1See more

verba substratus 0.4.0

1 of the 1 container images this version deploys carry CVE-2026-56392.

Container imageDigestPackageFixed in
substratusai/verba:v0.4.0-baseURL261695be635eb
coreutils@9.1-1
no fix listed

Open the chart page →

13,476
3d-printing-cost-calculatorssudo-kraken-3d-printing-cost-calculatorsVerified publisher0.1.41 of 1See more

3d-printing-cost-calculators sudo-kraken-3d-printing-cost-calculators 0.1.4

1 of the 1 container images this version deploys carry CVE-2026-56392.

Container imageDigestPackageFixed in
ghcr.io/sudo-kraken/3d-printing-cost-calculators:v1.1.1220c5e4e1a3d
coreutils@9.1-1
no fix listed

Open the chart page →

2,697
authentik-webfinger-proxysudo-kraken-authentik-webfinger-proxyVerified publisher0.1.41 of 1See more

authentik-webfinger-proxy sudo-kraken-authentik-webfinger-proxy 0.1.4

1 of the 1 container images this version deploys carry CVE-2026-56392.

Container imageDigestPackageFixed in
ghcr.io/sudo-kraken/authentik-webfinger-proxy:v1.1.1e1351a977607
coreutils@9.1-1
no fix listed

Open the chart page →

2,777
fantasy-dice-chambersudo-kraken-fantasy-dice-chamberVerified publisher0.1.31 of 1See more

fantasy-dice-chamber sudo-kraken-fantasy-dice-chamber 0.1.3

1 of the 1 container images this version deploys carry CVE-2026-56392.

Container imageDigestPackageFixed in
ghcr.io/sudo-kraken/fantasy-dice-chamber:v1.3.299fd4cb0f4fe
coreutils@9.1-1
no fix listed

Open the chart page →

2,809
finances-trackersudo-kraken-finances-trackerVerified publisher0.1.51 of 1See more

finances-tracker sudo-kraken-finances-tracker 0.1.5

1 of the 1 container images this version deploys carry CVE-2026-56392.

Container imageDigestPackageFixed in
ghcr.io/sudo-kraken/finances-tracker:v1.1.1c73527cde81c
coreutils@9.1-1
no fix listed

Open the chart page →

2,777
flaresolverrsudo-kraken-flaresolverrVerified publisher2.1.41 of 1See more

flaresolverr sudo-kraken-flaresolverr 2.1.4

1 of the 1 container images this version deploys carry CVE-2026-56392.

Container imageDigestPackageFixed in
ghcr.io/flaresolverr/flaresolverr:v3.4.67962759d99d7
coreutils@9.1-1
no fix listed

Open the chart page →

33,965
jellyfinsudo-kraken-jellyfinVerified publisher2.1.31 of 1See more

jellyfin sudo-kraken-jellyfin 2.1.3

1 of the 1 container images this version deploys carry CVE-2026-56392.

Container imageDigestPackageFixed in
jellyfin/jellyfin:10.11.6333b64771663
coreutils@9.7-3
no fix listed

Open the chart page →

3,424
jf-pushover-webhooksudo-kraken-jf-pushover-webhookVerified publisher0.1.31 of 1See more

jf-pushover-webhook sudo-kraken-jf-pushover-webhook 0.1.3

1 of the 1 container images this version deploys carry CVE-2026-56392.

Container imageDigestPackageFixed in
ghcr.io/sudo-kraken/jf-pushover-webhook:v1.1.0ee9cf22a39ab
coreutils@9.1-1
no fix listed

Open the chart page →

2,777
nginx-chartsuin-nginx0.1.01 of 1See more

nginx-chart suin-nginx 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-56392.

Container imageDigestPackageFixed in
library/nginx:latest05b8cb60c354
coreutils@9.7-3
no fix listed

Open the chart page →

1,861
surogate-hubsurogate-hubVerified publisher2.1.51 of 1See more

surogate-hub surogate-hub 2.1.5

1 of the 1 container images this version deploys carry CVE-2026-56392.

Container imageDigestPackageFixed in
ghcr.io/invergent-ai/surogate-hub:latest6d4106724d56
coreutils@9.1-1
no fix listed

Open the chart page →

3,474
svc-lb-muxsvc-lb-mux0.1.31 of 1See more

svc-lb-mux svc-lb-mux 0.1.3

1 of the 1 container images this version deploys carry CVE-2026-56392.

Container imageDigestPackageFixed in
ghcr.io/nowakeai/svc-lb-mux:0.1.37d8fb8e996b6
coreutils@9.7-3
no fix listed

Open the chart page →

1,454

Container images carrying it

1,759 by charts deploying them

A fixed version is listed for 1 of the 2 affected packages.

Container imageDigestPackageFixed inUsed by
registry.k8s.io/dns/k8s-dns-node-cache:1.23.1e3dccb1a21d1
coreutils@9.1-1
no fix listed
1
registry.k8s.io/git-sync/git-sync:v4.5.00e64aedb0d0a
coreutils@9.7-3
no fix listed
1
registry.k8s.io/git-sync/git-sync:v4.1.0fd9722fd02e3
coreutils@9.1-1
no fix listed
1
registry.k8s.io/node-problem-detector/node-problem-detector:v0.8.2052f0618e9bc2
coreutils@9.1-1
no fix listed
1
registry.k8s.io/node-problem-detector/node-problem-detector:v1.35.1c380751accc5
coreutils@9.1-1
no fix listed
1
registry.k8s.io/sig-storage/local-volume-provisioner:v2.8.03e2bf2eaef9f
coreutils@9.1-1
no fix listed
1
registry.k8s.io/sig-storage/local-volume-provisioner:v2.9.0f9d65db8bda2
coreutils@9.1-1
no fix listed
1
registry.k8s.io/sig-storage/nfsplugin:v4.13.41eb5a85180a4
coreutils@9.1-1
no fix listed
1
registry.k8s.io/sig-storage/nfsplugin:v4.11.0ce5b5ccd5eb0
coreutils@9.1-1
no fix listed
1

syft 1.42.1 · advisories as of 17 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.