StackRadar

CVE-2026-57585

High

Advisory

Published 19 Jun 2026In the index since 6 Sept 2026
Severity
High
worst across findings
CVSS
7.5
base score, highest
EPSS
0.005
41st percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
273
of 17,781 indexed, latest versions
Container images
274
deployed by those charts
Fix available
1 of 3
affected packages

MessagePack for Python: Out-of-bounds read / crash on Unpacker reuse after a caught error

Carried by container images the latest versions of 273 of 17,781 indexed charts deploy, on 274 images.

Affected packageAffected versionsFixed inImages
msgpackpypi0.5.6, 0.6.0, 0.6.1, 0.6.2+10 more1.2.1181
python-pipdeb1.5.4-1ubuntu4, 8.1.1-2ubuntu0.4, 9.0.1-2.3~ubuntu1, 9.0.1-2.3~ubuntu1.18.04.1+22 moreno fix listed107
python-msgpackdeb1.0.3-1build1, 1.0.3-2+b1, 1.0.3-3build2no fix listed8
OSV records
DEBIAN-CVE-2026-57585GHSA-6v7p-g79w-8964UBUNTU-CVE-2026-57585
Also known as
PYSEC-2026-3625

Charts affected

273 by stars
ChartLatestAffected imagesRadar Score
locustdeliveryheroVerified publisher0.35.01 of 1See more

locust deliveryhero 0.35.0

1 of the 1 container images this version deploys carry CVE-2026-57585.

Container imageDigestPackageFixed in
locustio/locust:2.32.2a0d4b88e42c1
msgpack@1.1.0
1.2.1

Open the chart page →

2,800
difydoubanVerified publisher0.10.01 of 6See more

dify douban 0.10.0

1 of the 6 container images this version deploys carry CVE-2026-57585.

Container imageDigestPackageFixed in
langgenius/dify-plugin-daemon:0.5.1-local8269050f192e
python-pip@24.0+dfsg-1ubuntu1.3
no fix listed

Open the chart page →

19,391
difydify-helmVerified publisher0.38.01 of 11See more

dify dify-helm 0.38.0

1 of the 11 container images this version deploys carry CVE-2026-57585.

Container imageDigestPackageFixed in
langgenius/dify-plugin-daemon:0.6.3-local3c694329357b
python-pip@24.0+dfsg-1ubuntu1.3
no fix listed

Open the chart page →

22,002
ambassadordatawire6.9.51 of 2See more

ambassador datawire 6.9.5

1 of the 2 container images this version deploys carry CVE-2026-57585.

Container imageDigestPackageFixed in
datawire/aes:1.14.48588eafe6862
msgpack@1.0.0
1.2.1

Open the chart page →

4,086
oncallgrafana1.16.51 of 12See more

oncall grafana 1.16.5

1 of the 12 container images this version deploys carry CVE-2026-57585.

Container imageDigestPackageFixed in
grafana/oncall:v1.16.5499851658393
msgpack@1.1.0
1.2.1

Open the chart page →

16,251
emissary-ingressdatawire7.1.8-ea1 of 1See more

emissary-ingress datawire 7.1.8-ea

1 of the 1 container images this version deploys carry CVE-2026-57585.

Container imageDigestPackageFixed in
datawire/emissary:2.0.2-ea9716efbdd24b
msgpack@1.0.0
1.2.1

Open the chart page →

4,918
kube-downscalerdeliveryheroVerified publisher0.7.61 of 1See more

kube-downscaler deliveryhero 0.7.6

1 of the 1 container images this version deploys carry CVE-2026-57585.

Container imageDigestPackageFixed in
hjacobs/kube-downscaler:23.2.0-6-gc9b88e84b2147f47425
msgpack@1.0.5
1.2.1

Open the chart page →

4,293
home-assistantgeek-cookbookVerified publisher13.5.01 of 1See more

home-assistant geek-cookbook 13.5.0

1 of the 1 container images this version deploys carry CVE-2026-57585.

Container imageDigestPackageFixed in
ghcr.io/home-assistant/home-assistant:2022.5.4ec6d67fbedfa
msgpack@1.0.3
1.2.1

Open the chart page →

7,705
synapsehalkeye0.40.01 of 2See more

synapse halkeye 0.40.0

1 of the 2 container images this version deploys carry CVE-2026-57585.

Container imageDigestPackageFixed in
ghcr.io/element-hq/synapse:v1.111.022ae556e0de4
msgpack@1.0.8
1.2.1

Open the chart page →

6,543
redashredash4.2.01 of 3See more

redash redash 4.2.0

1 of the 3 container images this version deploys carry CVE-2026-57585.

Container imageDigestPackageFixed in
redash/redash:25.8.000d813437db5
msgpack@1.1.0
1.2.1

Open the chart page →

5,987
daskdask2024.1.12 of 2See more

dask dask 2024.1.1

2 of the 2 container images this version deploys carry CVE-2026-57585.

Container imageDigestPackageFixed in
ghcr.io/dask/dask:2024.1.0080150de7d86
msgpack@1.0.7
1.2.1
ghcr.io/dask/dask-notebook:2024.1.0f53bde3acd4f
msgpack@1.0.7
1.2.1

Open the chart page →

12,746
homeassistantvolker-raschekVerified publisher0.2.31 of 1See more

homeassistant volker-raschek 0.2.3

1 of the 1 container images this version deploys carry CVE-2026-57585.

Container imageDigestPackageFixed in
homeassistant/home-assistant:2023.12.48d000332b09b
msgpack@1.0.7
1.2.1

Open the chart page →

6,041
edge-stackdatawire7.1.8-ea1 of 2See more

edge-stack datawire 7.1.8-ea

1 of the 2 container images this version deploys carry CVE-2026-57585.

Container imageDigestPackageFixed in
datawire/aes:2.0.3-ea07f8fe4f4f8e
msgpack@1.0.0
1.2.1

Open the chart page →

5,173
milvusmilvus-helm5.0.271 of 4See more

milvus milvus-helm 5.0.27

1 of the 4 container images this version deploys carry CVE-2026-57585.

Container imageDigestPackageFixed in
apachepulsar/pulsar:3.0.79c9947de139d
python-pip@22.0.2+dfsg-1ubuntu0.4
no fix listed

Open the chart page →

10,670
supersetcloudposse1.2.01 of 1See more

superset cloudposse 1.2.0

1 of the 1 container images this version deploys carry CVE-2026-57585.

Container imageDigestPackageFixed in
amancevice/superset:0.35.212a0a9e66550
msgpack@0.6.1
1.2.1

Open the chart page →

5,851
memgraphmemgraphVerified publisher1.0.61 of 2See more

memgraph memgraph 1.0.6

1 of the 2 container images this version deploys carry CVE-2026-57585.

Container imageDigestPackageFixed in
memgraph/memgraph:3.13.0a1dc375774ed
python-pip@24.0+dfsg-1ubuntu1.3
no fix listed

Open the chart page →

1,373
stackstorm-hastackstormVerified publisher1.1.011 of 17See more

stackstorm-ha stackstorm 1.1.0

11 of the 17 container images this version deploys carry CVE-2026-57585.

Container imageDigestPackageFixed in
stackstorm/st2actionrunner:3.888235ba70cad
msgpack@1.0.7
1.2.1
stackstorm/st2api:3.86f56d239d280
msgpack@1.0.7
1.2.1
stackstorm/st2auth:3.833ecfda16608
msgpack@1.0.7
1.2.1
stackstorm/st2garbagecollector:3.84e3f8c7ca52d
msgpack@1.0.7
1.2.1
stackstorm/st2notifier:3.8f190a6212195
msgpack@1.0.7
1.2.1
stackstorm/st2rulesengine:3.8259503496ff9
msgpack@1.0.7
1.2.1
stackstorm/st2scheduler:3.8b1de2055c362
msgpack@1.0.7
1.2.1
stackstorm/st2sensorcontainer:3.8b1a338f64773
msgpack@1.0.7
1.2.1
stackstorm/st2stream:3.81c8904a3bf67
msgpack@1.0.7
1.2.1
stackstorm/st2timersengine:3.81bf35bfaf00c
msgpack@1.0.7
1.2.1
stackstorm/st2workflowengine:3.819fdfffdbba8
msgpack@1.0.7
1.2.1

Open the chart page →

96,419
openclawopenclawVerified publisher1.91.31 of 2See more

openclaw openclaw 1.91.3

1 of the 2 container images this version deploys carry CVE-2026-57585.

Container imageDigestPackageFixed in
ghcr.io/browserless/chromium:v2.56.7b1ba7b054af2
python-pip@24.0+dfsg-1ubuntu1.3
no fix listed

Open the chart page →

2,977
netris-controllernetrisai2.8.21 of 14See more

netris-controller netrisai 2.8.2

1 of the 14 container images this version deploys carry CVE-2026-57585.

Container imageDigestPackageFixed in
graphiteapp/graphite-statsd:1.1.7-604a0037cc2ae
msgpack@0.6.2
1.2.1

Open the chart page →

30,326
syftopenmined0.9.51 of 6See more

syft openmined 0.9.5

1 of the 6 container images this version deploys carry CVE-2026-57585.

Container imageDigestPackageFixed in
openmined/syft-backend:0.9.5b72f74a68b32
msgpack@1.1.0
1.2.1

Open the chart page →

17,245
py-kube-downscalerpy-kube-downscalerVerified publisher0.3.121 of 1See more

py-kube-downscaler py-kube-downscaler 0.3.12

1 of the 1 container images this version deploys carry CVE-2026-57585.

Container imageDigestPackageFixed in
ghcr.io/caas-team/py-kube-downscaler:26.4.0af05a098b0d2
msgpack@1.1.2
1.2.1

Open the chart page →

731
fadicetic0.3.12 of 25See more

fadi cetic 0.3.1

2 of the 25 container images this version deploys carry CVE-2026-57585.

Container imageDigestPackageFixed in
amancevice/superset:0.35.212a0a9e66550
msgpack@0.6.1
1.2.1
jupyterhub/k8s-hub:0.11.1b6b4a1a34bf0
python-pip@20.0.2-5ubuntu1.1
no fix listed

Open the chart page →

52,919
daskhubdask2024.1.11 of 9See more

daskhub dask 2024.1.1

1 of the 9 container images this version deploys carry CVE-2026-57585.

Container imageDigestPackageFixed in
pangeo/base-notebook:2024.01.155fbe688a4f80
msgpack@1.0.7
1.2.1

Open the chart page →

14,094
seafiledatamateVerified publisher0.6.01 of 6See more

seafile datamate 0.6.0

1 of the 6 container images this version deploys carry CVE-2026-57585.

Container imageDigestPackageFixed in
datamate/seafile-professional:11.0.202dd66b722464
python-pip@22.0.2+dfsg-1ubuntu0.6
no fix listed

Open the chart page →

27,267
geonode-k8sgeonode-k8sVerified publisher2.0.01 of 10See more

geonode-k8s geonode-k8s 2.0.0

1 of the 10 container images this version deploys carry CVE-2026-57585.

Container imageDigestPackageFixed in
geonode/geoserver:2.28.4-latest81b1d431b7e9
python-pip@22.0.2+dfsg-1ubuntu0.7
no fix listed

Open the chart page →

13,953
karakeephelmforgeVerified publisher1.2.91 of 3See more

karakeep helmforge 1.2.9

1 of the 3 container images this version deploys carry CVE-2026-57585.

Container imageDigestPackageFixed in
ghcr.io/browserless/chromium:v2.55.42ed0183564d7
python-pip@24.0+dfsg-1ubuntu1.3
no fix listed

Open the chart page →

9,460
netbird-dashboardjaconiVerified publisher1.2.11 of 1See more

netbird-dashboard jaconi 1.2.1

1 of the 1 container images this version deploys carry CVE-2026-57585.

Container imageDigestPackageFixed in
netbirdio/dashboard:v2.90.2332cc31f5f35
msgpack@1.0.2
1.2.1

Open the chart page →

585
borgserverlib42Verified publisher0.1.01 of 1See more

borgserver lib42 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-57585.

Container imageDigestPackageFixed in
lib42/borgserver:latestc9d081647df4
msgpack@1.0.3
1.2.1

Open the chart page →

18
alerta-webalerta-webVerified publisher0.1.121 of 2See more

alerta-web alerta-web 0.1.12

1 of the 2 container images this version deploys carry CVE-2026-57585.

Container imageDigestPackageFixed in
hayk96/alerta-web:9.0.486377705e9e3
msgpack@1.0.8
1.2.1

Open the chart page →

3,569
backup-zenbzen0.1.41 of 1See more

backup-zen bzen 0.1.4

1 of the 1 container images this version deploys carry CVE-2026-57585.

Container imageDigestPackageFixed in
rezachalak/bzen-mongo:1.0.034f694325191
python-pip@20.0.2-5ubuntu1.9
no fix listed

Open the chart page →

7,960
convertigoconvertigoOfficialVerified publisher8.4.31 of 5See more

convertigo convertigo 8.4.3

1 of the 5 container images this version deploys carry CVE-2026-57585.

Container imageDigestPackageFixed in
baserow/baserow:1.30.1df0c42eb67e8
msgpack@1.0.8
1.2.1

Open the chart page →

17,404
dask-kubernetes-operatordask2026.3.01 of 1See more

dask-kubernetes-operator dask 2026.3.0

1 of the 1 container images this version deploys carry CVE-2026-57585.

Container imageDigestPackageFixed in
ghcr.io/dask/dask-kubernetes-operator:2026.3.03225d2bc6b3c
msgpack@1.1.2
1.2.1

Open the chart page →

9,316
zabbix-kubernetes-discoverydjerfyVerified publisher1.4.201 of 1See more

zabbix-kubernetes-discovery djerfy 1.4.20

1 of the 1 container images this version deploys carry CVE-2026-57585.

Container imageDigestPackageFixed in
ghcr.io/djerfy/zabbix-kubernetes-discovery:v1.4.207a50c07e7c69
python-pip@24.0+dfsg-1ubuntu1.1
no fix listed

Open the chart page →

4,147
flyte-binaryflyte2.0.481 of 4See more

flyte-binary flyte 2.0.48

1 of the 4 container images this version deploys carry CVE-2026-57585.

Container imageDigestPackageFixed in
ghcr.io/flyteorg/flyte-connectors:py3.12-v2.3.6896fc7b18b1b
msgpack@1.1.2
1.2.1

Open the chart page →

4,641
frigategeek-cookbookVerified publisher8.2.21 of 1See more

frigate geek-cookbook 8.2.2

1 of the 1 container images this version deploys carry CVE-2026-57585.

Container imageDigestPackageFixed in
blakeblackshear/frigate:0.10.0-amd64ae269270ad9e
python-pip@20.0.2-5ubuntu1.6
no fix listed

Open the chart page →

10,598
mealiegeek-cookbookVerified publisher5.1.21 of 2See more

mealie geek-cookbook 5.1.2

1 of the 2 container images this version deploys carry CVE-2026-57585.

Container imageDigestPackageFixed in
hkotel/mealie:api-v1.0.0beta-2a7e6b6abe087
msgpack@1.0.3
1.2.1

Open the chart page →

7,579
netbirdhelmforgeVerified publisher1.0.101 of 4See more

netbird helmforge 1.0.10

1 of the 4 container images this version deploys carry CVE-2026-57585.

Container imageDigestPackageFixed in
netbirdio/dashboard:v2.90.101b59e1c905c9
msgpack@1.0.2
1.2.1

Open the chart page →

2,962
calibre-webk8s-home-lab-repo9.1.11 of 1See more

calibre-web k8s-home-lab-repo 9.1.1

1 of the 1 container images this version deploys carry CVE-2026-57585.

Container imageDigestPackageFixed in
ghcr.io/linuxserver/calibre-web:0.6.267c0464228f2f
python-pip@24.0+dfsg-1ubuntu1.3
no fix listed

Open the chart page →

4,477
home-assistantk8s-home-lab-repo16.3.11 of 1See more

home-assistant k8s-home-lab-repo 16.3.1

1 of the 1 container images this version deploys carry CVE-2026-57585.

Container imageDigestPackageFixed in
ghcr.io/home-operations/home-assistant:2026.3.1067e54e2e107
msgpack@1.1.2
1.2.1

Open the chart page →

4,634
kubeservice-lxcfs-webhookkubservice-chartsVerified publisher1.6.01 of 6See more

kubeservice-lxcfs-webhook kubservice-charts 1.6.0

1 of the 6 container images this version deploys carry CVE-2026-57585.

Container imageDigestPackageFixed in
dongjiang1989/lxcfs:v6.0.34bf9ae391948
python-pip@20.0.2-5ubuntu1.11
no fix listed

Open the chart page →

11,582
memgraph-high-availabilitymemgraphVerified publisher1.4.01 of 2See more

memgraph-high-availability memgraph 1.4.0

1 of the 2 container images this version deploys carry CVE-2026-57585.

Container imageDigestPackageFixed in
memgraph/memgraph:3.13.0a1dc375774ed
python-pip@24.0+dfsg-1ubuntu1.3
no fix listed

Open the chart page →

1,373
oesopsmxVerified publisher4.0.322 of 25See more

oes opsmx 4.0.32

2 of the 25 container images this version deploys carry CVE-2026-57585.

Container imageDigestPackageFixed in
quay.io/opsmxpublic/awsgit:v2-openssh0d21ba756f44
msgpack@1.0.2
1.2.1
quay.io/opsmxpublic/awsgit:v3-js15a6faada3d4
msgpack@1.0.2
1.2.1

Open the chart page →

107,811
nominatimrobjuz6.4.11 of 4See more

nominatim robjuz 6.4.1

1 of the 4 container images this version deploys carry CVE-2026-57585.

Container imageDigestPackageFixed in
mediagis/nominatim:5.3.27923a8e67197
python-pip@24.0+dfsg-1ubuntu1.3
no fix listed

Open the chart page →

8,690
sn-platformstreamnative1.11.441 of 9See more

sn-platform streamnative 1.11.44

1 of the 9 container images this version deploys carry CVE-2026-57585.

Container imageDigestPackageFixed in
streamnative/apache-pulsar-grafana-dashboard-k8s:0.1.20e6d7aa3ef32
python-pip@20.0.2-5ubuntu1.10
no fix listed

Open the chart page →

15,477
paperless-ngxalexmorbo-paperless-ngxVerified publisher0.2.01 of 2See more

paperless-ngx alexmorbo-paperless-ngx 0.2.0

1 of the 2 container images this version deploys carry CVE-2026-57585.

Container imageDigestPackageFixed in
ghcr.io/paperless-ngx/paperless-ngx:2.20.5665f2f5cc548
msgpack@1.1.1
1.2.1

Open the chart page →

12,037
clearml-agentallegroaiVerified publisher5.3.31 of 1See more

clearml-agent allegroai 5.3.3

1 of the 1 container images this version deploys carry CVE-2026-57585.

Container imageDigestPackageFixed in
allegroai/clearml-agent-k8s-base:1.24-21772827a01bb5
python-pip@9.0.1-2.3~ubuntu1.18.04.5
no fix listed

Open the chart page →

12,046
anteonanteonVerified publisher2.6.42 of 13See more

anteon anteon 2.6.4

2 of the 13 container images this version deploys carry CVE-2026-57585.

Container imageDigestPackageFixed in
ddosify/selfhosted_alaz_backend:2.3.11e5be48b37348
msgpack@1.0.8
1.2.1
ddosify/selfhosted_backend:3.2.93c11e3182652
msgpack@1.0.8
1.2.1

Open the chart page →

22,202
apache-rangerapache-ranger0.1.01 of 2See more

apache-ranger apache-ranger 0.1.0

1 of the 2 container images this version deploys carry CVE-2026-57585.

Container imageDigestPackageFixed in
apache/ranger:2.7.076c176e8a0e4
python-pip@22.0.2+dfsg-1ubuntu0.6
no fix listed

Open the chart page →

7,740
open-elevationbeeinventor0.1.01 of 2See more

open-elevation beeinventor 0.1.0

1 of the 2 container images this version deploys carry CVE-2026-57585.

Container imageDigestPackageFixed in
openelevation/open-elevation:latest82fb21612e86
python-pip@20.0.2-5ubuntu1.6
no fix listed

Open the chart page →

13,145
squestchristianhuthVerified publisher6.6.71 of 4See more

squest christianhuth 6.6.7

1 of the 4 container images this version deploys carry CVE-2026-57585.

Container imageDigestPackageFixed in
quay.io/hewlettpackardenterprise/squest:2.8.465694109877e
msgpack@1.1.2
1.2.1

Open the chart page →

9,971

Container images carrying it

274 by charts deploying them

A fixed version is listed for 1 of the 3 affected packages.

Container imageDigestPackageFixed inUsed by
josh5/unmanic:0.2.64d49c4816260
python-pip@22.0.2+dfsg-1ubuntu0.4
no fix listed
1
jupyterhub/jupyterhub:5.4.63974ba945e65
python-pip@24.0+dfsg-1ubuntu1.3
no fix listed
1
jupyterhub/k8s-hub:0.11.1b6b4a1a34bf0
python-pip@20.0.2-5ubuntu1.1
no fix listed
1
jupyterhub/k8s-hub:1.2.0e4770285aaf7
python-pip@20.0.2-5ubuntu1.6
no fix listed
1
kennethreitz/httpbin:latest599fe5e50731
python-pip@9.0.1-2.3~ubuntu1
no fix listed
1
kfirfer/scripts:0.0.2481e5c4e5d70e
msgpack@1.0.2
1.2.1
1
knspar/phronetis:0.1.4609499d2dc91a
msgpack@1.1.1
python-pip@24.0+dfsg-1ubuntu1.1
1.2.1
no fix listed
1
kong/httpbin:latesta6ac46531193
python-pip@22.0.2+dfsg-1ubuntu0.5
no fix listed
1
kusionstack/kusion:v0.14.0126c8f0b0976
python-pip@22.0.2+dfsg-1ubuntu0.5
no fix listed
1
langgenius/dify-api:1.0.0066035f93856
msgpack@1.1.0
1.2.1
1
langgenius/dify-plugin-daemon:0.6.3-local3c694329357b
python-pip@24.0+dfsg-1ubuntu1.3
no fix listed
1
langgenius/dify-plugin-daemon:0.5.1-local8269050f192e
python-pip@24.0+dfsg-1ubuntu1.3
no fix listed
1
langgenius/dify-plugin-daemon:main-localda995c129e2f
python-pip@24.0+dfsg-1ubuntu1.3
no fix listed
1
lib42/borgserver:latestc9d081647df4
msgpack@1.0.3
1.2.1
1
librenms/librenms:22.4.14f1f3d667cc7
msgpack@1.0.2
1.2.1
1
linuxserver/babybuddy:1.10.2f7d7c7704249
msgpack@1.0.2
1.2.1
1
linuxserver/calibre-web:0.6.24241009026e6f
python-pip@24.0+dfsg-1ubuntu1.2
no fix listed
1
linuxserver/sickchill:v2020.08.07-1-ls40e48b479c1891
msgpack@1.0.0
1.2.1
1
lnbitsdocker/lnbits-legend:latest26fae6327477
msgpack@1.0.7
1.2.1
1
lnbitsdocker/lnbits-legend:0.10.6a11aaa6d2b21
msgpack@1.0.5
1.2.1
1
locustio/locust:2.24.151d866285170
msgpack@1.0.8
1.2.1
1
lsstsqre/nublado2:2.0.1b75bf8aaafa4
python-pip@20.0.2-5ubuntu1.6
no fix listed
1
matrixdotorg/synapse:v1.127.1c3c4a9de2a0b
msgpack@1.1.0
1.2.1
1
matrixdotorg/synapse:v1.53.0cb89c0f17ba1
msgpack@1.0.3
1.2.1
1
matrixdotorg/synapse:v1.78.0def97fd537d8
msgpack@1.0.4
1.2.1
1
mediagis/nominatim:5.3.27923a8e67197
python-pip@24.0+dfsg-1ubuntu1.3
no fix listed
1
mediagis/nominatim:3.7c15e941485ef
python-pip@20.0.2-5ubuntu1.6
no fix listed
1
mediagis/nominatim:4.2d0eae7b51374
python-pip@22.0.2+dfsg-1ubuntu0.4
no fix listed
1
milesmcc/shynet:v0.13.1ba54f7797a6b
msgpack@1.0.5
1.2.1
1
milesmcc/shynet:v0.12.0e821e31140f7
msgpack@1.0.3
1.2.1
1
mshanley80/httpbin2022:latest5b189a70c0fb
python-pip@20.0.2-5ubuntu1.6
no fix listed
1
ncsapolyglot/converters-ebook-convert:latest438d82cdbdb5
msgpack@0.5.6
1.2.1
1
netbirdio/dashboard:v2.90.101b59e1c905c9
msgpack@1.0.2
1.2.1
1
netbirdio/dashboard:v2.90.2332cc31f5f35
msgpack@1.0.2
1.2.1
1
ngoduykhanh/powerdns-admin:0.2.3099371dd9ba6
msgpack@1.0.0
1.2.1
1
ngoduykhanh/powerdns-admin:latest9898a7cf37d2
msgpack@1.0.2
1.2.1
1
omecproject/mme-exporter:paging-latestbcc5f19fd676
python-pip@9.0.1-2.3~ubuntu1.18.04.1
no fix listed
1
omecproject/progran-synchronizer:comac-1.0.0d109a8e57e71
msgpack@0.5.6
python-pip@8.1.1-2ubuntu0.4
1.2.1
no fix listed
1
opencsghq/agenticflow:ee-v0.6-52f03fead54db
msgpack@1.1.1
1.2.1
1
opendatacube/explorer:latest120457ffcd69
msgpack@1.1.2
1.2.1
1
opendatacube/pipelines:wofs-1.225d810e8504b8
python-pip@9.0.1-2.3~ubuntu1
no fix listed
1
opendatacube/restcube:latest91870111837c
python-pip@9.0.1-2.3~ubuntu1
no fix listed
1
opendatacube/wms:latest1b90cdf68831
python-pip@9.0.1-2.3~ubuntu1
no fix listed
1
opendatacube/wps:latest80df355a660b
msgpack@1.1.0
1.2.1
1
openelevation/open-elevation:latest82fb21612e86
python-pip@20.0.2-5ubuntu1.6
no fix listed
1
openemr/openemr:6.1.089eaa6d9a4e3
msgpack@1.0.2
1.2.1
1
openmined/syft-backend:0.9.5b72f74a68b32
msgpack@1.1.0
1.2.1
1
openstackhelm/heat:wallaby-ubuntu_focalf728510bab3c
msgpack@1.0.2
1.2.1
1
openstackhelm/keystone:wallaby-ubuntu_focale07d75953d2e
msgpack@1.0.2
1.2.1
1
openwhisk/ow-utils:1.0.0c80dba0de3aa
python-pip@9.0.1-2.3~ubuntu1.18.04.4
no fix listed
1

syft 1.42.1 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.