StackRadar

CVE-2026-58051

High

Advisory

Published 28 Jun 2026In the index since 5 Sept 2026
Severity
High
worst across findings
CVSS
8.3
base score, highest
EPSS
0.003
20th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
797
of 17,781 indexed, latest versions
Container images
660
deployed by those charts
Fix available
1 of 1
affected package

The matching OSV records carry no description.

Carried by container images the latest versions of 797 of 17,781 indexed charts deploy, on 660 images.

Affected packageAffected versionsFixed inImages
libssh2deb1.5.0-2ubuntu0.1, 1.8.0-2.1build1, 1.10.0-3, 1.10.0-3+b1+9 more1.10.0-3+deb12u1, 1.11.0-4.1ubuntu0.24.04.3, 1.11.1-1+deb13u2, 1.11.1-1+e4+1 more660
OSV records
DEBIAN-CVE-2026-58051UBUNTU-CVE-2026-58051ECHO-b4f1-7845-4dda
Also known as
USN-8532-1

Charts affected

797 by stars
ChartLatestAffected imagesRadar Score
jenkinsjenkinsciOfficialVerified publisher5.9.581 of 2See more

jenkins jenkinsci 5.9.58

1 of the 2 container images this version deploys carry CVE-2026-58051.

Container imageDigestPackageFixed in
jenkins/jenkins:2.568.3-jdk21c1e4c349365f
libssh2@1.11.1-1+deb13u1
1.11.1-1+deb13u2

Open the chart page →

2,665
nextcloudnextcloud9.2.61 of 1See more

nextcloud nextcloud 9.2.6

1 of the 1 container images this version deploys carry CVE-2026-58051.

Container imageDigestPackageFixed in
library/nextcloud:34.0.3-apacheb97df9e0e1ee
libssh2@1.11.1-1+deb13u1
1.11.1-1+deb13u2

Open the chart page →

4,507
giteagiteaOfficialVerified publisher12.7.01 of 4See more

gitea gitea 12.7.0

1 of the 4 container images this version deploys carry CVE-2026-58051.

Container imageDigestPackageFixed in
bitnamilegacy/postgresql-repmgr:17.6.0-debian-12-r2f12387ec882b
libssh2@1.10.0-3+b1
1.10.0-3+deb12u1

Open the chart page →

8,811
authentikgoauthentikOfficialVerified publisher2026.8.21 of 1See more

authentik goauthentik 2026.8.2

1 of the 1 container images this version deploys carry CVE-2026-58051.

Container imageDigestPackageFixed in
ghcr.io/goauthentik/server:2026.8.2ff8489a5af4f
libssh2@1.11.1-1+deb13u1
1.11.1-1+deb13u2

Open the chart page →

1,257
jupyterhubjupyterhubOfficialVerified publisher4.4.22 of 7See more

jupyterhub jupyterhub 4.4.2

2 of the 7 container images this version deploys carry CVE-2026-58051.

Container imageDigestPackageFixed in
quay.io/jupyterhub/k8s-hub:4.4.2108fbb01c3fe
libssh2@1.10.0-3+b1
1.10.0-3+deb12u1
quay.io/jupyterhub/k8s-singleuser-sample:4.4.265e1b09fc8c9
libssh2@1.10.0-3+b1
1.10.0-3+deb12u1

Open the chart page →

7,894
uptime-kumauptime-kumaVerified publisher4.2.01 of 1See more

uptime-kuma uptime-kuma 4.2.0

1 of the 1 container images this version deploys carry CVE-2026-58051.

Container imageDigestPackageFixed in
louislam/uptime-kuma:2.5.0a8610b3b4c38
libssh2@1.10.0-3+b1
1.10.0-3+deb12u1

Open the chart page →

30,159
airflowairflow-helmVerified publisher8.9.01 of 4See more

airflow airflow-helm 8.9.0

1 of the 4 container images this version deploys carry CVE-2026-58051.

Container imageDigestPackageFixed in
apache/airflow:2.8.4-python3.964e58748b6b9
libssh2@1.10.0-3+b1
1.10.0-3+deb12u1

Open the chart page →

11,367
falcofalcosecurity9.1.01 of 3See more

falco falcosecurity 9.1.0

1 of the 3 container images this version deploys carry CVE-2026-58051.

Container imageDigestPackageFixed in
falcosecurity/falco-driver-loader:0.44.17df783d5269a
libssh2@1.10.0-3+b1
1.10.0-3+deb12u1

Open the chart page →

5,227
zabbixzabbix-communityVerified publisher7.1.01 of 5See more

zabbix zabbix-community 7.1.0

1 of the 5 container images this version deploys carry CVE-2026-58051.

Container imageDigestPackageFixed in
zabbix/zabbix-server-pgsql:ubuntu-7.0.237e8c8e059533
libssh2@1.11.0-4.1build2
1.11.0-4.1ubuntu0.24.04.3

Open the chart page →

13,664
netdatanetdataVerified publisher3.7.1731 of 1See more

netdata netdata 3.7.173

1 of the 1 container images this version deploys carry CVE-2026-58051.

Container imageDigestPackageFixed in
netdata/netdata:v2.11.0c45c71eb23ff
libssh2@1.11.1-1+deb13u1
1.11.1-1+deb13u2

Open the chart page →

3,092
maildocker-postfixVerified publisher5.1.01 of 1See more

mail docker-postfix 5.1.0

1 of the 1 container images this version deploys carry CVE-2026-58051.

Container imageDigestPackageFixed in
boky/postfix:5.1.0aafc77238423
libssh2@1.11.1-1
1.11.1-1+deb13u2

Open the chart page →

5,366
vaultwardengissilabs1.4.21 of 1See more

vaultwarden gissilabs 1.4.2

1 of the 1 container images this version deploys carry CVE-2026-58051.

Container imageDigestPackageFixed in
vaultwarden/server:1.37.2094b5689ed81
libssh2@1.11.1-1+deb13u1
1.11.1-1+deb13u2

Open the chart page →

1,744
zammadzammadOfficialVerified publisher18.0.51 of 5See more

zammad zammad 18.0.5

1 of the 5 container images this version deploys carry CVE-2026-58051.

Container imageDigestPackageFixed in
ghcr.io/zammad/zammad:7.1.3-0011e65123a43ecc
libssh2@1.11.1-1+deb13u1
1.11.1-1+deb13u2

Open the chart page →

6,887
clearmlallegroaiOfficialVerified publisher7.15.01 of 4See more

clearml allegroai 7.15.0

1 of the 4 container images this version deploys carry CVE-2026-58051.

Container imageDigestPackageFixed in
allegroai/clearml:2.0.0-613713ae38f7daf
libssh2@1.10.0-3+b1
1.10.0-3+deb12u1

Open the chart page →

10,622
emqxemqx-operator5.8.91 of 1See more

emqx emqx-operator 5.8.9

1 of the 1 container images this version deploys carry CVE-2026-58051.

Container imageDigestPackageFixed in
emqx/emqx:5.8.935b46f7aa7a0
libssh2@1.11.1-1
1.11.1-1+deb13u2

Open the chart page →

2,705
bitcoin-corehirosystemsVerified publisher2.1.71 of 1See more

bitcoin-core hirosystems 2.1.7

1 of the 1 container images this version deploys carry CVE-2026-58051.

Container imageDigestPackageFixed in
dobtc/bitcoin:25.1a870f7cb1105
libssh2@1.10.0-3+b1
1.10.0-3+deb12u1

Open the chart page →

4,802
dragonflydragonflyVerified publisher1.8.41 of 3See more

dragonfly dragonfly 1.8.4

1 of the 3 container images this version deploys carry CVE-2026-58051.

Container imageDigestPackageFixed in
dragonflyoss/client:v1.5.4a1b52779c4dd
libssh2@1.10.0-3+b1
1.10.0-3+deb12u1

Open the chart page →

3,787
vertical-pod-autoscalercowboysysopVerified publisher11.1.11 of 4See more

vertical-pod-autoscaler cowboysysop 11.1.1

1 of the 4 container images this version deploys carry CVE-2026-58051.

Container imageDigestPackageFixed in
bitnamilegacy/kubectl:1.29.3f5fc0d561d9e
libssh2@1.10.0-3+b1
1.10.0-3+deb12u1

Open the chart page →

6,927
difydify-helmVerified publisher0.38.03 of 11See more

dify dify-helm 0.38.0

3 of the 11 container images this version deploys carry CVE-2026-58051.

Container imageDigestPackageFixed in
langgenius/dify-agent-local-sandbox:1.16.1bf8027ddccf3
libssh2@1.10.0-3+b1
1.10.0-3+deb12u1
langgenius/dify-api:1.16.1dcefa5f7c47c
libssh2@1.10.0-3+b1
1.10.0-3+deb12u1
library/nginx:latest05b8cb60c354
libssh2@1.11.1-1+deb13u1
1.11.1-1+deb13u2

Open the chart page →

22,002
oktetooktetoOfficialVerified publisher0.0.0-2026-08-031 of 10See more

okteto okteto 0.0.0-2026-08-03

1 of the 10 container images this version deploys carry CVE-2026-58051.

Container imageDigestPackageFixed in
ghcr.io/okteto/pipeline-runner:0.0.0-2026-08-033e56bdd1b90d
libssh2@1.11.1-1+deb13u1
1.11.1-1+deb13u2

Open the chart page →

5,750
yourlsyourlsOfficialVerified publisher8.9.111 of 2See more

yourls yourls 8.9.11

1 of the 2 container images this version deploys carry CVE-2026-58051.

Container imageDigestPackageFixed in
ghcr.io/yourls/yourls:1.10.69b220ea83329
libssh2@1.11.1-1+deb13u1
1.11.1-1+deb13u2

Open the chart page →

2,203
openprojectopenproject-helm-chartsOfficialVerified publisher13.11.02 of 5See more

openproject openproject-helm-charts 13.11.0

2 of the 5 container images this version deploys carry CVE-2026-58051.

Container imageDigestPackageFixed in
openproject/hocuspocus:release-338001b288dc1359dfb5
libssh2@1.10.0-3+b1
1.10.0-3+deb12u1
openproject/openproject:17.8.0-slim48952034215d
libssh2@1.11.1-1+deb13u1
1.11.1-1+deb13u2

Open the chart page →

19,926
wazuhwazuh-helm-morgovedVerified publisher2.0.71 of 5See more

wazuh wazuh-helm-morgoved 2.0.7

1 of the 5 container images this version deploys carry CVE-2026-58051.

Container imageDigestPackageFixed in
kinseii/wazuh-agent:4.14.17160eb143728
libssh2@1.10.0-3+b1
1.10.0-3+deb12u1

Open the chart page →

11,384
lemmyananace-chartsVerified publisher0.6.152 of 5See more

lemmy ananace-charts 0.6.15

2 of the 5 container images this version deploys carry CVE-2026-58051.

Container imageDigestPackageFixed in
dessalines/lemmy:0.19.2079e9f02c286c
libssh2@1.10.0-3+b1
1.10.0-3+deb12u1
dessalines/lemmy-ui:0.19.20ee4c620d8e93
libssh2@1.11.1-1+deb13u1
1.11.1-1+deb13u2

Open the chart page →

7,210
synapsehalkeye0.40.01 of 2See more

synapse halkeye 0.40.0

1 of the 2 container images this version deploys carry CVE-2026-58051.

Container imageDigestPackageFixed in
ghcr.io/element-hq/synapse:v1.111.022ae556e0de4
libssh2@1.10.0-3+b1
1.10.0-3+deb12u1

Open the chart page →

6,543
stacks-blockchain-apihirosystemsVerified publisher6.5.11 of 5See more

stacks-blockchain-api hirosystems 6.5.1

1 of the 5 container images this version deploys carry CVE-2026-58051.

Container imageDigestPackageFixed in
hirosystems/stacks-blockchain-api:8.13.29c98b23c1515
libssh2@1.10.0-3+b1
1.10.0-3+deb12u1

Open the chart page →

8,364
redashredash4.2.01 of 3See more

redash redash 4.2.0

1 of the 3 container images this version deploys carry CVE-2026-58051.

Container imageDigestPackageFixed in
redash/redash:25.8.000d813437db5
libssh2@1.10.0-3+b1
1.10.0-3+deb12u1

Open the chart page →

5,987
factorio-server-chartsfactorio-server-chartsVerified publisher2.5.21 of 1See more

factorio-server-charts factorio-server-charts 2.5.2

1 of the 1 container images this version deploys carry CVE-2026-58051.

Container imageDigestPackageFixed in
factoriotools/factorio:lateste9227748c507
libssh2@1.11.1-1+deb13u1
1.11.1-1+deb13u2

Open the chart page →

1,437
netbirdjaconiVerified publisher0.15.11 of 4See more

netbird jaconi 0.15.1

1 of the 4 container images this version deploys carry CVE-2026-58051.

Container imageDigestPackageFixed in
library/golang:latest512690a56605
libssh2@1.11.1-1+deb13u1
1.11.1-1+deb13u2

Open the chart page →

8,390
localstacklocalstack0.7.01 of 1See more

localstack localstack 0.7.0

1 of the 1 container images this version deploys carry CVE-2026-58051.

Container imageDigestPackageFixed in
localstack/localstack-pro:latest4aef81c53168
libssh2@1.11.1-1+deb13u1
1.11.1-1+deb13u2

Open the chart page →

2,156
gotenbergmaikumoriVerified publisher1.25.01 of 1See more

gotenberg maikumori 1.25.0

1 of the 1 container images this version deploys carry CVE-2026-58051.

Container imageDigestPackageFixed in
gotenberg/gotenberg:8.36.087c16b9f3642
libssh2@1.11.1-1+deb13u1
1.11.1-1+deb13u2

Open the chart page →

9,683
openclawopenclaw-helmVerified publisher1.5.401 of 2See more

openclaw openclaw-helm 1.5.40

1 of the 2 container images this version deploys carry CVE-2026-58051.

Container imageDigestPackageFixed in
ghcr.io/openclaw/openclaw:2026.5.22dcfd14877740
libssh2@1.10.0-3+b1
1.10.0-3+deb12u1

Open the chart page →

5,660
stalwart-mailstalwart-mailVerified publisher2.0.101 of 1See more

stalwart-mail stalwart-mail 2.0.10

1 of the 1 container images this version deploys carry CVE-2026-58051.

Container imageDigestPackageFixed in
stalwartlabs/stalwart:v0.16.2074ca4f7f6885
libssh2@1.11.1-1+deb13u1
1.11.1-1+deb13u2

Open the chart page →

1,403
prefect-serverprefectVerified publisher2026.9.32126051 of 2See more

prefect-server prefect 2026.9.3212605

1 of the 2 container images this version deploys carry CVE-2026-58051.

Container imageDigestPackageFixed in
prefecthq/prefect:3.8.5-python3.110018d02259bc
libssh2@1.11.1-1+deb13u1
1.11.1-1+deb13u2

Open the chart page →

5,786
codefreshcodefresh-onpremOfficialVerified publisher2.12.132 of 42See more

codefresh codefresh-onprem 2.12.13

2 of the 42 container images this version deploys carry CVE-2026-58051.

Container imageDigestPackageFixed in
bitnamilegacy/mongodb:7.0.14-debian-12-r321e8f8baa432
libssh2@1.10.0-3+b1
1.10.0-3+deb12u1
bitnamilegacy/rabbitmq:4.1.39e635efba431
libssh2@1.10.0-3+b1
1.10.0-3+deb12u1

Open the chart page →

14,956
apim3graviteeioVerified publisher4.12.192 of 4See more

apim3 graviteeio 4.12.19

2 of the 4 container images this version deploys carry CVE-2026-58051.

Container imageDigestPackageFixed in
graviteeio/apim-gateway:4.12.19-debian05fd67a93056
libssh2@1.11.1-1+deb13u1
1.11.1-1+deb13u2
graviteeio/apim-management-api:4.12.19-debian27374522cd04
libssh2@1.11.1-1+deb13u1
1.11.1-1+deb13u2

Open the chart page →

4,806
wordpressgroundhog2k0.16.41 of 1See more

wordpress groundhog2k 0.16.4

1 of the 1 container images this version deploys carry CVE-2026-58051.

Container imageDigestPackageFixed in
library/wordpress:7.1.0-apache5a93c470ae82
libssh2@1.11.1-1+deb13u1
1.11.1-1+deb13u2

Open the chart page →

3,685
supabasetokens-studioVerified publisher1.0.02 of 14See more

supabase tokens-studio 1.0.0

2 of the 14 container images this version deploys carry CVE-2026-58051.

Container imageDigestPackageFixed in
supabase/realtime:v2.33.8d207e6e23ad3
libssh2@1.10.0-3+b1
1.10.0-3+deb12u1
supabase/studio:20241021-9f9b08326d8070c55e9
libssh2@1.10.0-3+b1
1.10.0-3+deb12u1

Open the chart page →

23,123
renterdartur9010Verified publisher1.4.41 of 2See more

renterd artur9010 1.4.4

1 of the 2 container images this version deploys carry CVE-2026-58051.

Container imageDigestPackageFixed in
artur9010/wait-for:v1.0.06b4de3ce8b0e
libssh2@1.10.0-3+b1
1.10.0-3+deb12u1

Open the chart page →

8,493
budibasebudibase0.0.0-master2 of 7See more

budibase budibase 0.0.0-master

2 of the 7 container images this version deploys carry CVE-2026-58051.

Container imageDigestPackageFixed in
budibase/database:2.1.0d90f656261c9
libssh2@1.10.0-3+b1
1.10.0-3+deb12u1
budibase/proxy:3.41.38d780b6ee602
libssh2@1.11.1-1+deb13u1
1.11.1-1+deb13u2

Open the chart page →

10,775
quickwitquickwit0.8.161 of 1See more

quickwit quickwit 0.8.16

1 of the 1 container images this version deploys carry CVE-2026-58051.

Container imageDigestPackageFixed in
quickwit/quickwit:v0.8.2363ff56ce456
libssh2@1.10.0-3+b1
1.10.0-3+deb12u1

Open the chart page →

3,480
devtron-operatordevtron0.23.31 of 11See more

devtron-operator devtron 0.23.3

1 of the 11 container images this version deploys carry CVE-2026-58051.

Container imageDigestPackageFixed in
quay.io/devtron/devtron-utils:dup-chart-repo-v1.1.095d6f0e05636
libssh2@1.10.0-3+b1
1.10.0-3+deb12u1

Open the chart page →

32,902
nextcloudgroundhog2k0.22.51 of 3See more

nextcloud groundhog2k 0.22.5

1 of the 3 container images this version deploys carry CVE-2026-58051.

Container imageDigestPackageFixed in
library/nextcloud:34.0.3:34.0.3-apacheb97df9e0e1ee
libssh2@1.11.1-1+deb13u1
1.11.1-1+deb13u2

Open the chart page →

4,507
ilumilumOfficialVerified publisher6.7.31 of 19See more

ilum ilum 6.7.3

1 of the 19 container images this version deploys carry CVE-2026-58051.

Container imageDigestPackageFixed in
bitnamilegacy/minio:2025.3.12-debian-12-r0ba9f3b4b0b00
libssh2@1.10.0-3+b1
1.10.0-3+deb12u1

Open the chart page →

23,228
litmuslitmuschaos3.30.02 of 6See more

litmus litmuschaos 3.30.0

2 of the 6 container images this version deploys carry CVE-2026-58051.

Container imageDigestPackageFixed in
bitnamilegacy/mongodb:8.0.13-debian-12-r02579e968033e
libssh2@1.10.0-3+b1
1.10.0-3+deb12u1
bitnamilegacy/os-shell:12-debian-12-r5177e65e9d633e
libssh2@1.10.0-3+b1
1.10.0-3+deb12u1

Open the chart page →

7,007
monicamonicaOfficialVerified publisher1.0.151 of 1See more

monica monica 1.0.15

1 of the 1 container images this version deploys carry CVE-2026-58051.

Container imageDigestPackageFixed in
ghcr.io/monicahq/monica-next:main8be69156acbb
libssh2@1.11.1-1
1.11.1-1+deb13u2

Open the chart page →

5,634
nautobotnautobotOfficialVerified publisher3.1.21 of 1See more

nautobot nautobot 3.1.2

1 of the 1 container images this version deploys carry CVE-2026-58051.

Container imageDigestPackageFixed in
networktocode/nautobot:3.0-py3.13ed484336b1ad
libssh2@1.11.1-1
1.11.1-1+deb13u2

Open the chart page →

4,332
paperless-ngxpaperless-ngxVerified publisher0.3.221 of 3See more

paperless-ngx paperless-ngx 0.3.22

1 of the 3 container images this version deploys carry CVE-2026-58051.

Container imageDigestPackageFixed in
ghcr.io/paperless-ngx/paperless-ngx:3.1.3aa810a36942c
libssh2@1.11.1-1+deb13u1
1.11.1-1+deb13u2

Open the chart page →

8,489
tbmq-clustertbmq-helm-chartOfficialVerified publisher2.1.02 of 3See more

tbmq-cluster tbmq-helm-chart 2.1.0

2 of the 3 container images this version deploys carry CVE-2026-58051.

Container imageDigestPackageFixed in
thingsboard/tbmq-integration-executor:2.4.0b5a9c1addf80
libssh2@1.11.1-1+deb13u1
1.11.1-1+deb13u2
thingsboard/tbmq-node:2.4.070661025dba5
libssh2@1.11.1-1+deb13u1
1.11.1-1+deb13u2

Open the chart page →

3,534
phpmyadminalekcVerified publisher0.3.11 of 1See more

phpmyadmin alekc 0.3.1

1 of the 1 container images this version deploys carry CVE-2026-58051.

Container imageDigestPackageFixed in
library/phpmyadmin:5.2.3-apache3a8a8d6b5289
libssh2@1.11.1-1+deb13u1
1.11.1-1+deb13u2

Open the chart page →

2,582

Container images carrying it

660 by charts deploying them

A fixed version is listed for 1 of the 1 affected package.

Container imageDigestPackageFixed inUsed by
quay.io/jupyterhub/k8s-hub:4.3.492f883d09270
libssh2@1.10.0-3+b1
1.10.0-3+deb12u1
1
quay.io/jupyterhub/k8s-singleuser-sample:4.4.265e1b09fc8c9
libssh2@1.10.0-3+b1
1.10.0-3+deb12u1
1
quay.io/opsmxpublic/ubi8-oes-datascience:isd-spin-2025.10.01-af26a30d4-202511261054d8f66f4117fe
libssh2@1.11.1-1
1.11.1-1+deb13u2
1
quay.io/yushiwho/api:e1f9d77e0d9b93dbf2b
libssh2@1.10.0-3+b1
1.10.0-3+deb12u1
1
registry.gitlab.com/enbuild-staging/vivsoft-platform-ui/enbuild-frontend:1.0.3166353ce9bf98
libssh2@1.11.1-1
1.11.1-1+deb13u2
1
registry.gitlab.com/enbuild-staging/vivsoft-platform-ui/enbuild-mq-consumer:1.0.310e3cd8c7776d
libssh2@1.10.0-3+b1
1.10.0-3+deb12u1
1
registry.gitlab.com/gitlab-org/build/cng/gitlab-openbao:v2.5.5-gitlab25b7636dfba3f
libssh2@1.11.1-1+deb13u1
1.11.1-1+deb13u2
1
registry.gitlab.com/school_guy/docker-typo3:13.4.30-197d868ed76185d7270d
libssh2@1.10.0-3+b1
1.10.0-3+deb12u1
1
registry.k8s.io/git-sync/git-sync:v4.5.00e64aedb0d0a
libssh2@1.11.1-1
1.11.1-1+deb13u2
1
registry.k8s.io/git-sync/git-sync:v4.1.0fd9722fd02e3
libssh2@1.10.0-3+b1
1.10.0-3+deb12u1
1

syft 1.42.1 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.