StackRadar

CVE-2026-57585

High

Advisory

Published 19 Jun 2026In the index since 6 Sept 2026
Severity
High
worst across findings
CVSS
7.5
base score, highest
EPSS
0.005
41st percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
273
of 17,781 indexed, latest versions
Container images
274
deployed by those charts
Fix available
1 of 3
affected packages

MessagePack for Python: Out-of-bounds read / crash on Unpacker reuse after a caught error

Carried by container images the latest versions of 273 of 17,781 indexed charts deploy, on 274 images.

Affected packageAffected versionsFixed inImages
msgpackpypi0.5.6, 0.6.0, 0.6.1, 0.6.2+10 more1.2.1181
python-pipdeb1.5.4-1ubuntu4, 8.1.1-2ubuntu0.4, 9.0.1-2.3~ubuntu1, 9.0.1-2.3~ubuntu1.18.04.1+22 moreno fix listed107
python-msgpackdeb1.0.3-1build1, 1.0.3-2+b1, 1.0.3-3build2no fix listed8
OSV records
DEBIAN-CVE-2026-57585GHSA-6v7p-g79w-8964UBUNTU-CVE-2026-57585
Also known as
PYSEC-2026-3625

Charts affected

273 by stars
ChartLatestAffected imagesRadar Score
paperless-ngxcrystalnetVerified publisher0.2.221 of 3See more

paperless-ngx crystalnet 0.2.22

1 of the 3 container images this version deploys carry CVE-2026-57585.

Container imageDigestPackageFixed in
ghcr.io/paperless-ngx/paperless-ngx:2.13.10642357c5dbd
msgpack@1.1.0
1.2.1

Open the chart page →

13,761
datacube-explorerdatacube-charts0.5.321 of 1See more

datacube-explorer datacube-charts 0.5.32

1 of the 1 container images this version deploys carry CVE-2026-57585.

Container imageDigestPackageFixed in
opendatacube/explorer:latest120457ffcd69
msgpack@1.1.2
1.2.1

Open the chart page →

4,854
seafiledr300481Verified publisher0.12.11 of 1See more

seafile dr300481 0.12.1

1 of the 1 container images this version deploys carry CVE-2026-57585.

Container imageDigestPackageFixed in
seafileltd/seafile-mc:11.0.12d0c66e4621bd
python-pip@22.0.2+dfsg-1ubuntu0.4
no fix listed

Open the chart page →

10,858
craftycontrollerdrewburr-labs-helm-chartsVerified publisher0.3.01 of 1See more

craftycontroller drewburr-labs-helm-charts 0.3.0

1 of the 1 container images this version deploys carry CVE-2026-57585.

Container imageDigestPackageFixed in
registry.gitlab.com/crafty-controller/crafty-4:latest166a06f73d8c
python-pip@24.0+dfsg-1ubuntu1.3
no fix listed

Open the chart page →

3,671
obicogabe565Verified publisher0.6.01 of 3See more

obico gabe565 0.6.0

1 of the 3 container images this version deploys carry CVE-2026-57585.

Container imageDigestPackageFixed in
ghcr.io/gabe565/obico/web:latesta5c1daef46c0
msgpack@1.1.0
1.2.1

Open the chart page →

1,965
homebridgegeek-cookbookVerified publisher5.3.21 of 1See more

homebridge geek-cookbook 5.3.2

1 of the 1 container images this version deploys carry CVE-2026-57585.

Container imageDigestPackageFixed in
ghcr.io/oznu/homebridge:2022-07-08ff2af53897e7
python-pip@20.0.2-5ubuntu1.6
no fix listed

Open the chart page →

15,653
kube-ops-viewgeek-cookbookVerified publisher1.2.21 of 1See more

kube-ops-view geek-cookbook 1.2.2

1 of the 1 container images this version deploys carry CVE-2026-57585.

Container imageDigestPackageFixed in
hjacobs/kube-ops-view:20.4.058221b57d4d2
msgpack@1.0.0
1.2.1

Open the chart page →

1,848
paperlessgeek-cookbookVerified publisher9.2.01 of 1See more

paperless geek-cookbook 9.2.0

1 of the 1 container images this version deploys carry CVE-2026-57585.

Container imageDigestPackageFixed in
ghcr.io/paperless-ngx/paperless-ngx:1.8.09bbc9a90641e
msgpack@1.0.4
1.2.1

Open the chart page →

3,924
powerdnsadminhalkeye0.3.11 of 1See more

powerdnsadmin halkeye 0.3.1

1 of the 1 container images this version deploys carry CVE-2026-57585.

Container imageDigestPackageFixed in
ngoduykhanh/powerdns-admin:0.2.3099371dd9ba6
msgpack@1.0.0
1.2.1

Open the chart page →

3,345
hpe-greenlake-file-csi-driverhpe-storageVerified publisher2.6.41 of 7See more

hpe-greenlake-file-csi-driver hpe-storage 2.6.4

1 of the 7 container images this version deploys carry CVE-2026-57585.

Container imageDigestPackageFixed in
quay.io/hpestorage/filex-csi-driver:2.6.4b7f960bbf472
msgpack@1.1.2
1.2.1

Open the chart page →

6,095
huehue1.0.31 of 3See more

hue hue 1.0.3

1 of the 3 container images this version deploys carry CVE-2026-57585.

Container imageDigestPackageFixed in
gethue/hue:latest7d5c1b9f8a79
msgpack@1.1.2
python-pip@22.0.2+dfsg-1ubuntu0.6
1.2.1
no fix listed

Open the chart page →

12,397
supersetinseefrlab1.4.01 of 4See more

superset inseefrlab 1.4.0

1 of the 4 container images this version deploys carry CVE-2026-57585.

Container imageDigestPackageFixed in
apache/superset:9cdaa280429ec297db16d56c94fd77b5d2aff107975ab033580d
msgpack@1.0.2
1.2.1

Open the chart page →

7,129
jessejesse-chartVerified publisher0.0.461 of 6See more

jesse jesse-chart 0.0.46

1 of the 6 container images this version deploys carry CVE-2026-57585.

Container imageDigestPackageFixed in
salehmir/jesse:1.10.101afa95f979e9
msgpack@1.1.1
1.2.1

Open the chart page →

3,421
kuma-ingress-watcherkuma-ingress-watcherVerified publisher1.4.01 of 1See more

kuma-ingress-watcher kuma-ingress-watcher 1.4.0

1 of the 1 container images this version deploys carry CVE-2026-57585.

Container imageDigestPackageFixed in
ghcr.io/squent/kuma-ingress-watcher:1.7.014d45b2a1f00
msgpack@1.1.0
1.2.1

Open the chart page →

2,662
music-assistant-serverlmatfyVerified publisher0.1.91 of 1See more

music-assistant-server lmatfy 0.1.9

1 of the 1 container images this version deploys carry CVE-2026-57585.

Container imageDigestPackageFixed in
ghcr.io/music-assistant/server:2.7.53522e8a7a8f0
msgpack@1.1.2
1.2.1

Open the chart page →

7,201
locustlocustVerified publisher0.1.41 of 1See more

locust locust 0.1.4

1 of the 1 container images this version deploys carry CVE-2026-57585.

Container imageDigestPackageFixed in
hansehe/locust:1.1.0bc8e45262bc4
msgpack@1.1.0
1.2.1

Open the chart page →

2,757
librenmsmidokura-communityVerified publisher0.3.21 of 6See more

librenms midokura-community 0.3.2

1 of the 6 container images this version deploys carry CVE-2026-57585.

Container imageDigestPackageFixed in
librenms/librenms:22.4.14f1f3d667cc7
msgpack@1.0.2
1.2.1

Open the chart page →

8,967
clowder2ncsaVerified publisher1.9.73 of 12See more

clowder2 ncsa 1.9.7

3 of the 12 container images this version deploys carry CVE-2026-57585.

Container imageDigestPackageFixed in
clowder/clowder2-backend:2.0.0-beta.411f3d844e4c0
msgpack@1.1.0
1.2.1
clowder/clowder2-heartbeat:2.0.0-beta.414155326c7b9
msgpack@1.1.0
1.2.1
clowder/clowder2-messages:2.0.0-beta.4bf146f1ca24f
msgpack@1.1.0
1.2.1

Open the chart page →

37,373
opsopsVerified publisher1.2.02 of 2See more

ops ops 1.2.0

2 of the 2 container images this version deploys carry CVE-2026-57585.

Container imageDigestPackageFixed in
shaowenchen/ops-controller-manager:latest26da43bb5b66
python-pip@22.0.2+dfsg-1ubuntu0.7
no fix listed
shaowenchen/ops-server:latest315444f703f4
python-pip@22.0.2+dfsg-1ubuntu0.6
no fix listed

Open the chart page →

8,939
ovh-snapshoterovh-snapshoterOfficialVerified publisher0.4.101 of 1See more

ovh-snapshoter ovh-snapshoter 0.4.10

1 of the 1 container images this version deploys carry CVE-2026-57585.

Container imageDigestPackageFixed in
ghcr.io/hoverkraft-tech/ovh-snapshoter/app:0.4.1010d271f08ab3
msgpack@1.1.0
1.2.1

Open the chart page →

761
palworldpalworld-server-chartVerified publisher2.7.11 of 1See more

palworld palworld-server-chart 2.7.1

1 of the 1 container images this version deploys carry CVE-2026-57585.

Container imageDigestPackageFixed in
thijsvanloef/palworld-server-docker:v2.7.1401d3eb5c053
msgpack@1.1.2
1.2.1

Open the chart page →

3,681
kube-resource-reportrlex0.10.11 of 2See more

kube-resource-report rlex 0.10.1

1 of the 2 container images this version deploys carry CVE-2026-57585.

Container imageDigestPackageFixed in
hjacobs/kube-resource-report:22.11.0c173cd02f5af
msgpack@1.0.4
1.2.1

Open the chart page →

1,266
routehub-client-hubroutehub-helm1.0.01 of 3See more

routehub-client-hub routehub-helm 1.0.0

1 of the 3 container images this version deploys carry CVE-2026-57585.

Container imageDigestPackageFixed in
timescale/timescaledb-ha:pg16d7db8f1085a3
python-pip@22.0.2+dfsg-1ubuntu0.7
no fix listed

Open the chart page →

12,930
kube-resource-reportslamdev0.1.31 of 2See more

kube-resource-report slamdev 0.1.3

1 of the 2 container images this version deploys carry CVE-2026-57585.

Container imageDigestPackageFixed in
hjacobs/kube-resource-report:21.2.145f93491c434
msgpack@1.0.2
1.2.1

Open the chart page →

1,534
smarter-demosmarterOfficialVerified publisher0.1.52 of 7See more

smarter-demo smarter 0.1.5

2 of the 7 container images this version deploys carry CVE-2026-57585.

Container imageDigestPackageFixed in
ghcr.io/smarter-project/audio-client:v3.1.23c8375dc5487
python-pip@20.0.2-5ubuntu1.6
no fix listed
ghcr.io/smarter-project/image-detector:v2.5.31dcca70c6446
python-pip@20.0.2-5ubuntu1.6
no fix listed

Open the chart page →

45,832
alertasomeblackmagic0.2.31 of 2See more

alerta someblackmagic 0.2.3

1 of the 2 container images this version deploys carry CVE-2026-57585.

Container imageDigestPackageFixed in
alerta/alerta-web:8.5.04786b9eaa606
msgpack@1.0.2
1.2.1

Open the chart page →

3,162
ckanstatcan0.0.351 of 8See more

ckan statcan 0.0.35

1 of the 8 container images this version deploys carry CVE-2026-57585.

Container imageDigestPackageFixed in
statcan/ckan:2.93921305425b8
python-pip@20.0.2-5ubuntu1.5
no fix listed

Open the chart page →

24,930
prometheus-pve-exporterstenicVerified publisher0.1.11 of 1See more

prometheus-pve-exporter stenic 0.1.1

1 of the 1 container images this version deploys carry CVE-2026-57585.

Container imageDigestPackageFixed in
prompve/prometheus-pve-exporter:2.0.1ff6749eb03b0
msgpack@1.0.0
1.2.1

Open the chart page →

2,469
synapsesudermanjr1.1.51 of 1See more

synapse sudermanjr 1.1.5

1 of the 1 container images this version deploys carry CVE-2026-57585.

Container imageDigestPackageFixed in
matrixdotorg/synapse:v1.53.0cb89c0f17ba1
msgpack@1.0.3
1.2.1

Open the chart page →

3,332
spark-operatorwikimedia2.2.71 of 1See more

spark-operator wikimedia 2.2.7

1 of the 1 container images this version deploys carry CVE-2026-57585.

Container imageDigestPackageFixed in
ghcr.io/kubeflow/spark-operator/controller:2.2.1865ff4da5686
python-pip@20.0.2-5ubuntu1.11
no fix listed

Open the chart page →

7,835
pghoardwiremindVerified publisher0.8.11 of 1See more

pghoard wiremind 0.8.1

1 of the 1 container images this version deploys carry CVE-2026-57585.

Container imageDigestPackageFixed in
wiremind/pghoard:12-2019-11-264dea42c8166c
msgpack@0.6.2
1.2.1

Open the chart page →

2,952
youtubedl-materialyoutubedl-materialVerified publisher0.0.11 of 1See more

youtubedl-material youtubedl-material 0.0.1

1 of the 1 container images this version deploys carry CVE-2026-57585.

Container imageDigestPackageFixed in
tzahi12345/youtubedl-material:latest2f943d584711
python-pip@22.0.2+dfsg-1ubuntu0.2
no fix listed

Open the chart page →

9,783
qleverzazukoVerified publisher0.7.01 of 2See more

qlever zazuko 0.7.0

1 of the 2 container images this version deploys carry CVE-2026-57585.

Container imageDigestPackageFixed in
ghcr.io/zazukoians/qlever-server:v0.10.0f10fd24b2290
python-pip@24.0+dfsg-1ubuntu1.3
no fix listed

Open the chart page →

2,900
acos-prometheus-exporter-helm-charta10-prometheus-exporter0.1.01 of 1See more

acos-prometheus-exporter-helm-chart a10-prometheus-exporter 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-57585.

Container imageDigestPackageFixed in
a10networks/acos-prometheus-exporter:latest8dc58d434d71
python-pip@9.0.1-2.3~ubuntu1.18.04.1
no fix listed

Open the chart page →

12,007
open5gsadaptivenetlabVerified publisher1.0.31 of 3See more

open5gs adaptivenetlab 1.0.3

1 of the 3 container images this version deploys carry CVE-2026-57585.

Container imageDigestPackageFixed in
registry.gitlab.com/infinitydon/registry/open5gs-aio:v2.2.2f6385712935f
python-pip@20.0.2-5ubuntu1.1
no fix listed

Open the chart page →

25,443
browserlessalekcVerified publisher1.2.71 of 1See more

browserless alekc 1.2.7

1 of the 1 container images this version deploys carry CVE-2026-57585.

Container imageDigestPackageFixed in
ghcr.io/browserless/chrome:v2.56.7d600eac6283f
python-pip@24.0+dfsg-1ubuntu1.3
no fix listed

Open the chart page →

2,078
ddosifyanteonVerified publisher1.7.52 of 13See more

ddosify anteon 1.7.5

2 of the 13 container images this version deploys carry CVE-2026-57585.

Container imageDigestPackageFixed in
ddosify/selfhosted_alaz_backend:1.0.6a43c5155fa1c
msgpack@1.0.8
1.2.1
ddosify/selfhosted_backend:2.6.11ac323d52bfb4
msgpack@1.0.8
1.2.1

Open the chart page →

25,669
pgadminarunalakmalVerified publisher0.1.01 of 1See more

pgadmin arunalakmal 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-57585.

Container imageDigestPackageFixed in
dpage/pgadmin4:6.12781369df9994
msgpack@1.0.2
1.2.1

Open the chart page →

2,418
swdpgadminarunalakmalVerified publisher0.1.01 of 1See more

swdpgadmin arunalakmal 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-57585.

Container imageDigestPackageFixed in
dpage/pgadmin4:6.12781369df9994
msgpack@1.0.2
1.2.1

Open the chart page →

2,418
keystonearzu0.2.292 of 4See more

keystone arzu 0.2.29

2 of the 4 container images this version deploys carry CVE-2026-57585.

Container imageDigestPackageFixed in
openstackhelm/heat:wallaby-ubuntu_focalf728510bab3c
msgpack@1.0.2
1.2.1
openstackhelm/keystone:wallaby-ubuntu_focale07d75953d2e
msgpack@1.0.2
1.2.1

Open the chart page →

22,568
locationprocessingassist-iot-location-processing1.0.01 of 3See more

locationprocessing assist-iot-location-processing 1.0.0

1 of the 3 container images this version deploys carry CVE-2026-57585.

Container imageDigestPackageFixed in
dpage/pgadmin4:6.12781369df9994
msgpack@1.0.2
1.2.1

Open the chart page →

10,061
openapiassist-iot-open-api-management0.2.21 of 6See more

openapi assist-iot-open-api-management 0.2.2

1 of the 6 container images this version deploys carry CVE-2026-57585.

Container imageDigestPackageFixed in
assistiot/open_api_backend:1.1.230812ba93555
python-pip@22.0.2+dfsg-1ubuntu0.4
no fix listed

Open the chart page →

18,277
videoaugmentationassist-iot-video-augmentation0.1.01 of 3See more

videoaugmentation assist-iot-video-augmentation 0.1.0

1 of the 3 container images this version deploys carry CVE-2026-57585.

Container imageDigestPackageFixed in
assistiot/video_augmentation:runner-cpu-lateste5ae539ce2cb
python-pip@20.0.2-5ubuntu1.8
no fix listed

Open the chart page →

13,913
shynetatrox0.1.11 of 1See more

shynet atrox 0.1.1

1 of the 1 container images this version deploys carry CVE-2026-57585.

Container imageDigestPackageFixed in
milesmcc/shynet:v0.12.0e821e31140f7
msgpack@1.0.3
1.2.1

Open the chart page →

5,507
ecr-exporteraws-exportersVerified publisher0.2.41 of 1See more

ecr-exporter aws-exporters 0.2.4

1 of the 1 container images this version deploys carry CVE-2026-57585.

Container imageDigestPackageFixed in
ghcr.io/aws-exporters/prometheus-ecr-exporter:0.1.442b0c87470d6
msgpack@1.0.2
1.2.1

Open the chart page →

1,622
inspector-exporteraws-exportersVerified publisher0.0.21 of 1See more

inspector-exporter aws-exporters 0.0.2

1 of the 1 container images this version deploys carry CVE-2026-57585.

Container imageDigestPackageFixed in
ghcr.io/aws-exporters/prometheus-inspector-exporter:0.0.29c7c11293b3c
msgpack@1.0.2
1.2.1

Open the chart page →

1,622
ambassadorazureorkestra6.7.91 of 2See more

ambassador azureorkestra 6.7.9

1 of the 2 container images this version deploys carry CVE-2026-57585.

Container imageDigestPackageFixed in
datawire/aes:1.13.62beb65062c8b
msgpack@1.0.0
1.2.1

Open the chart page →

5,521
mx-nodebicarus-labs0.1.01 of 1See more

mx-node bicarus-labs 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-57585.

Container imageDigestPackageFixed in
bicarus/elrond-rosetta:v1.3.50.0b1dab0721e1c
python-pip@20.0.2-5ubuntu1.6
no fix listed

Open the chart page →

7,956
huebigdata-chartsVerified publisher1.0.41 of 2See more

hue bigdata-charts 1.0.4

1 of the 2 container images this version deploys carry CVE-2026-57585.

Container imageDigestPackageFixed in
gethue/hue:4.10.05702b2c37ff9
msgpack@1.0.2
python-pip@9.0.1-2.3~ubuntu1.18.04.5
1.2.1
no fix listed

Open the chart page →

22,891
baserowblackbird-cloudVerified publisher1.0.171 of 6See more

baserow blackbird-cloud 1.0.17

1 of the 6 container images this version deploys carry CVE-2026-57585.

Container imageDigestPackageFixed in
baserow/backend:1.31.1e0b3c8130b91
msgpack@1.0.8
1.2.1

Open the chart page →

10,145

Container images carrying it

274 by charts deploying them

A fixed version is listed for 1 of the 3 affected packages.

Container imageDigestPackageFixed inUsed by
voltha/voltha-voltha:1.6.0ff596b62de59
python-pip@8.1.1-2ubuntu0.4
no fix listed
1
wallarm/ingress-collectd:4.2.1-124dc4ca1ee1b
msgpack@1.0.0
1.2.1
1
wallarm/ingress-collectd:4.6.0-1fcfa8ba405bd
msgpack@1.0.0
1.2.1
1
wallarm/ingress-python:4.6.0-15cb2ae08b40f
msgpack@0.5.6
1.2.1
1
wallarm/node-helpers:5.0.2-1097cadc42336
msgpack@1.0.3
1.2.1
1
wallarm/node-helpers:6.10.1aecd88b24c51
msgpack@1.0.8
1.2.1
1
wiremind/pghoard:12-2019-11-264dea42c8166c
msgpack@0.6.2
1.2.1
1
xeladock/mysql_dns:latest4baf531453f1
python-pip@22.0.2+dfsg-1
no fix listed
1
gcr.io/google-samples/microservices-demo/loadgenerator:v0.2.3360130ab5850
msgpack@1.0.0
1.2.1
1
gcr.io/kubecost1/kubecost-modeling:v0.1.24a2259b098b13
msgpack@1.1.0
1.2.1
1
gcr.io/kubecost1/kubecost-modeling:v0.1.22a461dc5cb96a
msgpack@1.1.0
1.2.1
1
ghcr.io/aws-exporters/prometheus-ecr-exporter:0.1.442b0c87470d6
msgpack@1.0.2
1.2.1
1
ghcr.io/aws-exporters/prometheus-inspector-exporter:0.0.29c7c11293b3c
msgpack@1.0.2
1.2.1
1
ghcr.io/borgmatic-collective/borgmatic:1.9.9835b72878606
msgpack@1.1.0
1.2.1
1
ghcr.io/browserless/chrome:v2.56.7d600eac6283f
python-pip@24.0+dfsg-1ubuntu1.3
no fix listed
1
ghcr.io/browserless/chromium:v2.55.42ed0183564d7
python-pip@24.0+dfsg-1ubuntu1.3
no fix listed
1
ghcr.io/browserless/chromium:v2.43.0853e6f105b51
python-pip@24.0+dfsg-1ubuntu1.3
no fix listed
1
ghcr.io/caas-team/py-kube-downscaler:26.4.0af05a098b0d2
msgpack@1.1.2
1.2.1
1
ghcr.io/cleanuparr/cleanuparr:2.10.5c7cd53ad559a
python-pip@24.0+dfsg-1ubuntu1.3
no fix listed
1
ghcr.io/dask/dask:2024.1.0080150de7d86
msgpack@1.0.7
1.2.1
1
ghcr.io/dask/dask-kubernetes-operator:2026.3.03225d2bc6b3c
msgpack@1.1.2
1.2.1
1
ghcr.io/dask/dask-notebook:2024.1.0f53bde3acd4f
msgpack@1.0.7
1.2.1
1
ghcr.io/djerfy/zabbix-kubernetes-discovery:v1.4.207a50c07e7c69
python-pip@24.0+dfsg-1ubuntu1.1
no fix listed
1
ghcr.io/element-hq/synapse:v1.111.022ae556e0de4
msgpack@1.0.8
1.2.1
1
ghcr.io/gabe565/obico/web:latesta5c1daef46c0
msgpack@1.1.0
1.2.1
1
ghcr.io/goauthentik/server:2026.2.146a71d75dfd3
msgpack@1.1.2
1.2.1
1
ghcr.io/goauthentik/server:2026.5.6ed120caf710c
msgpack@1.1.2
1.2.1
1
ghcr.io/home-assistant/home-assistant:2025.3.026c51e44d932
msgpack@1.1.0
1.2.1
1
ghcr.io/home-assistant/home-assistant:2025.12.59a5a3eb4a213
msgpack@1.1.2
1.2.1
1
ghcr.io/home-assistant/home-assistant:2022.5.4ec6d67fbedfa
msgpack@1.0.3
1.2.1
1
ghcr.io/home-assistant/home-assistant:2023.11.3feffc0b8227d
msgpack@1.0.7
1.2.1
1
ghcr.io/home-operations/bazarr:1.5.680cb090162b4
msgpack@1.1.0
1.2.1
1
ghcr.io/home-operations/home-assistant:2026.3.1067e54e2e107
msgpack@1.1.2
1.2.1
1
ghcr.io/hoverkraft-tech/ovh-snapshoter/app:0.4.1010d271f08ab3
msgpack@1.1.0
1.2.1
1
ghcr.io/kubeflow/spark-operator/controller:2.2.1865ff4da5686
python-pip@20.0.2-5ubuntu1.11
no fix listed
1
ghcr.io/linuxserver/calibre-web:0.6.267c0464228f2f
python-pip@24.0+dfsg-1ubuntu1.3
no fix listed
1
ghcr.io/linuxserver/mylar3:version-v0.5.3b96f0e97ab3f
msgpack@1.0.2
1.2.1
1
ghcr.io/mealie-recipes/mealie:v1.4.0b56da41cf178
msgpack@1.0.8
1.2.1
1
ghcr.io/music-assistant/server:2.7.53522e8a7a8f0
msgpack@1.1.2
1.2.1
1
ghcr.io/music-assistant/server:2.8.7eef3ee7810d0
msgpack@1.1.2
1.2.1
1
ghcr.io/openrelik/openrelik-worker-analyzer-config:latest1269d3d8d2c2
msgpack@1.0.3
python-msgpack@1.0.3-3build2
python-pip@24.0+dfsg-1ubuntu1.3
1.2.1
no fix listed
no fix listed
1
ghcr.io/openrelik/openrelik-worker-analyzer-logs:latestb175cc61959a
msgpack@1.0.3
python-msgpack@1.0.3-3build2
python-pip@24.0+dfsg-1ubuntu1.3
1.2.1
no fix listed
no fix listed
1
ghcr.io/openrelik/openrelik-worker-containers:latesta6d5abe94706
msgpack@1.0.3
python-msgpack@1.0.3-3build2
python-pip@24.0+dfsg-1ubuntu1.3
1.2.1
no fix listed
no fix listed
1
ghcr.io/openrelik/openrelik-worker-os-creds:latest7fc7ec101f08
msgpack@1.0.3
python-msgpack@1.0.3-3build2
python-pip@24.0+dfsg-1ubuntu1.3
1.2.1
no fix listed
no fix listed
1
ghcr.io/openrelik/openrelik-worker-plaso:latest75537ea8c851
msgpack@1.0.3
python-msgpack@1.0.3-3build2
python-pip@24.0+dfsg-1ubuntu1.3
1.2.1
no fix listed
no fix listed
1
ghcr.io/open-telemetry/demo:1.12.0-loadgenerator85c9935ff31b
msgpack@1.0.7
1.2.1
1
ghcr.io/oznu/homebridge:2022-07-08ff2af53897e7
python-pip@20.0.2-5ubuntu1.6
no fix listed
1
ghcr.io/paperless-ngx/paperless-ngx:2.13.10642357c5dbd
msgpack@1.1.0
1.2.1
1
ghcr.io/paperless-ngx/paperless-ngx:2.20.134b05bcd28e69
msgpack@1.1.1
1.2.1
1
ghcr.io/paperless-ngx/paperless-ngx:2.20.357ad9565bff3
msgpack@1.1.1
1.2.1
1

syft 1.42.1 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.