StackRadar

CVE-2026-57175

Medium

Advisory

Published 24 Sept 2026In the index since 25 Sept 2026
Severity
Medium
worst across findings
CVSS
6.4
base score, highest
EPSS
—
probability of exploitation
CISA KEV
Not listed
no confirmed exploitation
Charts affected
422
of 17,844 indexed, latest versions
Container images
393
deployed by those charts
Fix available
1 of 10
affected packages

social-auth-core has an Improper Authentication issue

Carried by container images the latest versions of 422 of 17,844 indexed charts deploy, on 393 images.

Affected packageAffected versionsFixed inImages
social-auth-corepypi3.2.0, 3.3.3, 4.3.0, 4.5.2+5 more5.0.010
python3.8deb3.8.0-3ubuntu1~18.04.2, 3.8.5-1~20.04, 3.8.5-1~20.04.2, 3.8.5-1~20.04.3+12 moreno fix listed102
python3.12deb3.12.3-1, 3.12.3-1ubuntu0.1, 3.12.3-1ubuntu0.2, 3.12.3-1ubuntu0.3+12 moreno fix listed89
python3.10deb3.10.4-3, 3.10.4-3ubuntu0.1, 3.10.6-1~22.04, 3.10.6-1~22.04.1+17 moreno fix listed80
python2.7deb2.7.6-8, 2.7.6-8ubuntu0.4, 2.7.12-1ubuntu0~16.04.2, 2.7.12-1ubuntu0~16.04.3+14 moreno fix listed62
python3.6deb3.6.6-1~18.04, 3.6.7-1~18.04, 3.6.9-1~18.04, 3.6.9-1~18.04ubuntu1+7 moreno fix listed52
python3.5deb3.5.2-2ubuntu0~16.04.1, 3.5.2-2ubuntu0~16.04.4, 3.5.2-2ubuntu0~16.04.5, 3.5.2-2ubuntu0~16.04.9no fix listed23
python3.14deb3.14.4-1, 3.14.4-1ubuntu0.1, 3.14.4-1ubuntu0.2no fix listed9
python3.4deb3.4.0-2ubuntu1, 3.4.3-1ubuntu1~14.04.5, 3.4.3-1ubuntu1~14.04.6, 3.4.3-1ubuntu1~14.04.7no fix listed7
python3.11deb3.11.0~rc1-1~22.04, 3.11.0~rc1-1~22.04.1no fix listed2
OSV records
GHSA-vq6g-g6c7-5f2jUBUNTU-CVE-2026-57175
Trending
Rank 27 in indexed charts, since 25 Sept 2026. See the ranking →

Charts affected

422 by stars
ChartLatestAffected imagesRadar Score
todoapitodoapi-appVerified publisher0.1.01 of 2See more

todoapi todoapi-app 0.1.0

1 of the 2 container images this version deploys carry CVE-2026-57175.

Container imageDigestPackageFixed in
mcr.microsoft.com/mssql/server:2017-latestfbf79e0fea59
python2.7@2.7.17-1~18.04ubuntu1.11
python3.6@3.6.9-1~18.04ubuntu1.12
no fix listed
no fix listed

Open the chart page →

7,191
twentytwenty-crm0.1.111 of 4See more

twenty twenty-crm 0.1.11

1 of the 4 container images this version deploys carry CVE-2026-57175.

Container imageDigestPackageFixed in
redis/redis-stack-server:7.2.0-v10e44b2b49d059
python3.10@3.10.12-1~22.04.3
no fix listed

Open the chart page →

5,748
opencloudunxwaresVerified publisher0.2.31 of 13See more

opencloud unxwares 0.2.3

1 of the 13 container images this version deploys carry CVE-2026-57175.

Container imageDigestPackageFixed in
apache/tika:2.9.2.1-fullae0b86d3c4d0
python3.12@3.12.3-1
no fix listed

Open the chart page →

46,049
lightstepupdater-lightstep-satellite1.2.21 of 1See more

lightstep updater-lightstep-satellite 1.2.2

1 of the 1 container images this version deploys carry CVE-2026-57175.

Container imageDigestPackageFixed in
lightstep/collector:2021-01-26_23-02-36Z11c5569aaf3b
python3.5@3.5.2-2ubuntu0~16.04.5
no fix listed

Open the chart page →

15,790
tdarrvhdirkVerified publisher5.0.52 of 2See more

tdarr vhdirk 5.0.5

2 of the 2 container images this version deploys carry CVE-2026-57175.

Container imageDigestPackageFixed in
haveagitgat/tdarr_node:2.17.013ff0913202dd
python2.7@2.7.18-1~20.04.3
python3.8@3.8.10-0ubuntu1~20.04.8
no fix listed
no fix listed
ghcr.io/haveagitgat/tdarr:2.00.18.23fbe4c29d14c
python2.7@2.7.18-1~20.04.1
python3.8@3.8.10-0ubuntu1~20.04.4
no fix listed
no fix listed

Open the chart page →

160,419
unmanicvhdirkVerified publisher0.1.41 of 1See more

unmanic vhdirk 0.1.4

1 of the 1 container images this version deploys carry CVE-2026-57175.

Container imageDigestPackageFixed in
josh5/unmanic:0.2.64d49c4816260
python3.10@3.10.12-1~22.04.3
no fix listed

Open the chart page →

78,951
browserlessvictorlane0.2.01 of 1See more

browserless victorlane 0.2.0

1 of the 1 container images this version deploys carry CVE-2026-57175.

Container imageDigestPackageFixed in
ghcr.io/browserless/chromium:v2.43.0853e6f105b51
python3.12@3.12.3-1ubuntu0.12
no fix listed

Open the chart page →

4,699
twenty-crmvictorlane0.0.12 of 3See more

twenty-crm victorlane 0.0.1

2 of the 3 container images this version deploys carry CVE-2026-57175.

Container imageDigestPackageFixed in
redis/redis-stack-server:latest798ab84d9f26
python3.10@3.10.12-1~22.04.11
no fix listed
twentycrm/twenty-postgres-spilo:latest2f78405a78be
python3.10@3.10.12-1~22.04.3
no fix listed

Open the chart page →

71,522
calibre-webvista0.1.31 of 1See more

calibre-web vista 0.1.3

1 of the 1 container images this version deploys carry CVE-2026-57175.

Container imageDigestPackageFixed in
linuxserver/calibre-web:0.6.24241009026e6f
python3.12@3.12.3-1ubuntu0.8
no fix listed

Open the chart page →

8,304
wazuh-manager-filebeatwazuh-manager-filebeat0.1.0-gamma1 of 1See more

wazuh-manager-filebeat wazuh-manager-filebeat 0.1.0-gamma

1 of the 1 container images this version deploys carry CVE-2026-57175.

Container imageDigestPackageFixed in
iosifache/wazuh-manager-filebeat:latest85df3f04b5da
python3.8@3.8.10-0ubuntu1~20.04.2
no fix listed

Open the chart page →

11,472
myweatherhelmwebapp11.3.502 of 8See more

myweatherhelm webapp1 1.3.50

2 of the 8 container images this version deploys carry CVE-2026-57175.

Container imageDigestPackageFixed in
library/rabbitmq:3-managemente582c0bc7766
python3.12@3.12.3-1ubuntu0.9
no fix listed
mcr.microsoft.com/azure-sql-edge:latest902628a8be89
python3.8@3.8.10-0ubuntu1~20.04.8
no fix listed

Open the chart page →

9,760
myweatherhelm-schedulingwebapp11.3.922 of 9See more

myweatherhelm-scheduling webapp1 1.3.92

2 of the 9 container images this version deploys carry CVE-2026-57175.

Container imageDigestPackageFixed in
library/rabbitmq:3-managemente582c0bc7766
python3.12@3.12.3-1ubuntu0.9
no fix listed
mcr.microsoft.com/azure-sql-edge:latest902628a8be89
python3.8@3.8.10-0ubuntu1~20.04.8
no fix listed

Open the chart page →

9,760
webhookiewebhookie0.1.21 of 1See more

webhookie webhookie 0.1.2

1 of the 1 container images this version deploys carry CVE-2026-57175.

Container imageDigestPackageFixed in
hookiesolutions/webhookie:latest0629694246ba
python3.8@3.8.10-0ubuntu1~20.04.1
no fix listed

Open the chart page →

14,815
webhookie-allwebhookie0.1.21 of 3See more

webhookie-all webhookie 0.1.2

1 of the 3 container images this version deploys carry CVE-2026-57175.

Container imageDigestPackageFixed in
hookiesolutions/webhookie:latest0629694246ba
python3.8@3.8.10-0ubuntu1~20.04.1
no fix listed

Open the chart page →

29,371
emissary-ingresswener8.12.21 of 2See more

emissary-ingress wener 8.12.2

1 of the 2 container images this version deploys carry CVE-2026-57175.

Container imageDigestPackageFixed in
istio/kubectl:1.5.10dbb7726d1bf0
python3.6@3.6.9-1~18.04ubuntu1.1
no fix listed

Open the chart page →

77,130
longhornwener1.2.31 of 2See more

longhorn wener 1.2.3

1 of the 2 container images this version deploys carry CVE-2026-57175.

Container imageDigestPackageFixed in
longhornio/longhorn-manager:v1.2.3dca34321452c
python3.8@3.8.10-0ubuntu1~20.04.2
no fix listed

Open the chart page →

15,767
emissary-ingresswenerme8.12.21 of 2See more

emissary-ingress wenerme 8.12.2

1 of the 2 container images this version deploys carry CVE-2026-57175.

Container imageDigestPackageFixed in
istio/kubectl:1.5.10dbb7726d1bf0
python3.6@3.6.9-1~18.04ubuntu1.1
no fix listed

Open the chart page →

77,130
longhornwenerme1.2.31 of 2See more

longhorn wenerme 1.2.3

1 of the 2 container images this version deploys carry CVE-2026-57175.

Container imageDigestPackageFixed in
longhornio/longhorn-manager:v1.2.3dca34321452c
python3.8@3.8.10-0ubuntu1~20.04.2
no fix listed

Open the chart page →

15,767
jaegerwikimedia3.1.21 of 4See more

jaeger wikimedia 3.1.2

1 of the 4 container images this version deploys carry CVE-2026-57175.

Container imageDigestPackageFixed in
jaegertracing/jaeger-cassandra-schema:1.53.0d48d6dab2c65
python3.10@3.10.12-1~22.04.3
no fix listed

Open the chart page →

9,589
playwright-synthetic-monitoringwork-adventure1.0.11 of 1See more

playwright-synthetic-monitoring work-adventure 1.0.1

1 of the 1 container images this version deploys carry CVE-2026-57175.

Container imageDigestPackageFixed in
workadventure/playwright-synthetic-monitoring:main92b664c2a06f
python3.10@3.10.12-1~22.04.3
no fix listed

Open the chart page →

14,813
nightingalexxl-job-adminVerified publisher0.2.111 of 6See more

nightingale xxl-job-admin 0.2.11

1 of the 6 container images this version deploys carry CVE-2026-57175.

Container imageDigestPackageFixed in
flashcatcloud/categraf:latest42e6ab16472e
python3.12@3.12.3-1ubuntu0.12
no fix listed

Open the chart page →

10,103
zoo-project-druzoo-projectOfficialVerified publisher0.10.41 of 6See more

zoo-project-dru zoo-project 0.10.4

1 of the 6 container images this version deploys carry CVE-2026-57175.

Container imageDigestPackageFixed in
zooproject/zoo-project:dru-19f3c4eed7c9ec9d1f0375bbe59f9d204a42bd3a9a507cb7e2dd
python3.10@3.10.12-1~22.04.16
no fix listed

Open the chart page →

8,360

Container images carrying it

393 by charts deploying them

A fixed version is listed for 1 of the 10 affected packages.

Container imageDigestPackageFixed inUsed by
seafileltd/seafile-mc:9.0.106693911bcc40
python3.8@3.8.10-0ubuntu1~20.04.5
no fix listed
1
seafileltd/seafile-mc:10.0.170628f29c663
python3.8@3.8.10-0ubuntu1~20.04.8
no fix listed
1
seafileltd/seafile-mc:9.0.97ac833196f60
python3.8@3.8.10-0ubuntu1~20.04.5
no fix listed
1
seafileltd/seafile-mc:11.0.12d0c66e4621bd
python3.10@3.10.12-1~22.04.5
no fix listed
1
seafileltd/seafile-mc:8.0.7ed0fcda5e6a9
python3.8@3.8.10-0ubuntu1~20.04
no fix listed
1
seldonio/locust-core:0.81d0da98a2d76
python2.7@2.7.12-1ubuntu0~16.04.4
no fix listed
1
shaowenchen/ops-controller-manager:latest35575d4f2bfe
python3.10@3.10.12-1~22.04.18
no fix listed
1
shaowenchen/ops-server:latest6bac5cebd125
python3.10@3.10.12-1~22.04.11
no fix listed
1
sismics/docs:v1.10f4b0ef019cf1
python3.6@3.6.6-1~18.04
no fix listed
1
snipe/snipe-it:v8.3.1141ebf2386fe
python3.12@3.12.3-1ubuntu0.8
no fix listed
1
socialmediamacroscope/autophrase:0.1.570fb11d4f531
python3.8@3.8.10-0ubuntu1~20.04.8
no fix listed
1
socialmediamacroscope/collect_reddit_comment:0.1.219d3d26d53ee
python3.6@3.6.9-1~18.04ubuntu1.12
no fix listed
1
socialmediamacroscope/image_crawler:0.1.2f508216be63c
python3.6@3.6.9-1~18.04ubuntu1.12
no fix listed
1
someblackmagic/k8s-testing-multitool:v0.1.06eca64b6b440
python3.8@3.8.10-0ubuntu1~20.04.4
no fix listed
1
stackstorm/st2actionrunner:3.888235ba70cad
python3.8@3.8.10-0ubuntu1~20.04.9
no fix listed
1
stackstorm/st2api:3.86f56d239d280
python3.8@3.8.10-0ubuntu1~20.04.9
no fix listed
1
stackstorm/st2auth:3.833ecfda16608
python3.8@3.8.10-0ubuntu1~20.04.9
no fix listed
1
stackstorm/st2garbagecollector:3.84e3f8c7ca52d
python3.8@3.8.10-0ubuntu1~20.04.9
no fix listed
1
stackstorm/st2notifier:3.8f190a6212195
python3.8@3.8.10-0ubuntu1~20.04.9
no fix listed
1
stackstorm/st2rulesengine:3.8259503496ff9
python3.8@3.8.10-0ubuntu1~20.04.9
no fix listed
1
stackstorm/st2scheduler:3.8b1de2055c362
python3.8@3.8.10-0ubuntu1~20.04.9
no fix listed
1
stackstorm/st2sensorcontainer:3.8b1a338f64773
python3.8@3.8.10-0ubuntu1~20.04.9
no fix listed
1
stackstorm/st2stream:3.81c8904a3bf67
python3.8@3.8.10-0ubuntu1~20.04.9
no fix listed
1
stackstorm/st2timersengine:3.81bf35bfaf00c
python3.8@3.8.10-0ubuntu1~20.04.9
no fix listed
1
stackstorm/st2workflowengine:3.819fdfffdbba8
python3.8@3.8.10-0ubuntu1~20.04.9
no fix listed
1
stashapp/stash:latest24dbd7607174
python3.8@3.8.5-1~20.04.2
no fix listed
1
statcan/ckan:2.93921305425b8
python3.8@3.8.5-1~20.04.3
no fix listed
1
streamnative/apache-pulsar-grafana-dashboard-k8s:0.0.1611bceacec8fb
python3.8@3.8.5-1~20.04.3
no fix listed
1
svtechnmaa/svtech_debuger:v1.0.3a934ffd63d25
python3.10@3.10.12-1~22.04.3
no fix listed
1
svtechnmaa/svtech_grafana:v1.2.21d71314424aa
python2.7@2.7.18-1~20.04.3
no fix listed
1
svtechnmaa/svtech_rundeck:v1.2.26e368ace0977
python3.8@3.8.10-0ubuntu1~20.04.9
no fix listed
1
tensorflow/tensorflow:1.6.0-devel1e3172090703
python2.7@2.7.12-1ubuntu0~16.04.3
python3.5@3.5.2-2ubuntu0~16.04.4
no fix listed
no fix listed
1
timescale/timescaledb-ha:pg164f288c0a5213
python3.10@3.10.12-1~22.04.18
no fix listed
1
timescale/timescaledb-ha:pg15-latesta8e3322e1cf9
python3.10@3.10.6-1~22.04.2ubuntu1
no fix listed
1
timescale/timescaledb-ha:pg14.6-ts2.9.1-p1cdb9ae118899
python3.10@3.10.6-1~22.04.2
no fix listed
1
timescale/timescaledb-ha:pg17.2-ts2.18.2e8d0a9cc3db5
python3.10@3.10.12-1~22.04.9
no fix listed
1
timescale/timescaledb-ha:pg14-ts2.6-latested719c0cd19d
python3.10@3.10.4-3
no fix listed
1
timothyclarke/wptagent:2018-01-2322c41e5ca7e2
python2.7@2.7.12-1ubuntu0~16.04.3
python3.5@3.5.2-2ubuntu0~16.04.4
no fix listed
no fix listed
1
tpdock/freeradius:2.2.93da600c95a49
python2.7@2.7.12-1ubuntu0~16.04.2
python3.5@3.5.2-2ubuntu0~16.04.4
no fix listed
no fix listed
1
trinodb/trino:405ee80ab5eeab2
python3.10@3.10.6-1~22.04.2
no fix listed
1
trueosiris/vrising:latest9356f98ad561
python3.10@3.10.12-1~22.04.15
no fix listed
1
twentycrm/twenty-postgres-spilo:latest2f78405a78be
python3.10@3.10.12-1~22.04.3
no fix listed
1
vinanrra/7dtd-server:v0.4.4f9534490bd2b
python3.6@3.6.9-1~18.04ubuntu1.9
no fix listed
1
voltha/voltha-cli:1.6.0c4e41e92f046
python2.7@2.7.12-1ubuntu0~16.04.3
python3.5@3.5.2-2ubuntu0~16.04.5
no fix listed
no fix listed
1
voltha/voltha-envoy:1.6.059ab2a00f712
python3.4@3.4.3-1ubuntu1~14.04.5
no fix listed
1
voltha/voltha-netconf:1.6.037f80524c207
python2.7@2.7.12-1ubuntu0~16.04.3
no fix listed
1
voltha/voltha-ofagent:1.6.09ee8c1f4428c
python2.7@2.7.12-1ubuntu0~16.04.3
no fix listed
1
voltha/voltha-tester:1.7.0655c3048a602
python2.7@2.7.12-1ubuntu0~16.04.4
no fix listed
1
voltha/voltha-voltha:1.6.0ff596b62de59
python2.7@2.7.12-1ubuntu0~16.04.3
no fix listed
1
wazuh/wazuh-manager:4.4.121994f40e0da
python3.8@3.8.10-0ubuntu1~20.04.7
no fix listed
1

syft 1.42.1 · advisories as of 25 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.