StackRadar

CVE-2026-58051

High

Advisory

Published 28 Jun 2026In the index since 5 Sept 2026
Severity
High
worst across findings
CVSS
8.3
base score, highest
EPSS
0.003
20th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
796
of 17,787 indexed, latest versions
Container images
658
deployed by those charts
Fix available
1 of 1
affected package

The matching OSV records carry no description.

Carried by container images the latest versions of 796 of 17,787 indexed charts deploy, on 658 images.

Affected packageAffected versionsFixed inImages
libssh2deb1.5.0-2ubuntu0.1, 1.8.0-2.1build1, 1.10.0-3, 1.10.0-3+b1+9 more1.10.0-3+deb12u1, 1.11.0-4.1ubuntu0.24.04.3, 1.11.1-1+deb13u2, 1.11.1-1+e4+1 more658
OSV records
DEBIAN-CVE-2026-58051UBUNTU-CVE-2026-58051ECHO-b4f1-7845-4dda
Also known as
USN-8532-1

Charts affected

796 by stars
ChartLatestAffected imagesRadar Score
video-analytics-demo-l4tgpu-operator0.1.31 of 3See more

video-analytics-demo-l4t gpu-operator 0.1.3

1 of the 3 container images this version deploys carry CVE-2026-58051.

Container imageDigestPackageFixed in
library/nginx:latest05b8cb60c354
libssh2@1.11.1-1+deb13u1
1.11.1-1+deb13u2

Open the chart page →

1,839
temporalgroundcover1.12.3591 of 2See more

temporal groundcover 1.12.359

1 of the 2 container images this version deploys carry CVE-2026-58051.

Container imageDigestPackageFixed in
public.ecr.aws/groundcovercom/temporalio/server:1.29.6-mini-20260702-170f191d0a80e
libssh2@1.11.1-1+e1
1.11.1-1+e4

Open the chart page →

2,001
gwangju_2-3gwangju2-30.1.01 of 5See more

gwangju_2-3 gwangju2-3 0.1.0

1 of the 5 container images this version deploys carry CVE-2026-58051.

Container imageDigestPackageFixed in
fluent/fluent-bit:latestd792375ca8e5
libssh2@1.11.1-1+deb13u1
1.11.1-1+deb13u2

Open the chart page →

6,450
hatchet-hahatchetOfficialVerified publisher0.18.01 of 8See more

hatchet-ha hatchet 0.18.0

1 of the 8 container images this version deploys carry CVE-2026-58051.

Container imageDigestPackageFixed in
bitnamilegacy/rabbitmq:4.1.3-debian-12-r19e635efba431
libssh2@1.10.0-3+b1
1.10.0-3+deb12u1

Open the chart page →

7,374
hatchet-stackhatchetOfficialVerified publisher0.18.01 of 8See more

hatchet-stack hatchet 0.18.0

1 of the 8 container images this version deploys carry CVE-2026-58051.

Container imageDigestPackageFixed in
bitnamilegacy/rabbitmq:4.1.3-debian-12-r19e635efba431
libssh2@1.10.0-3+b1
1.10.0-3+deb12u1

Open the chart page →

7,374
web-charthcpark-ktcloudlab0.1.01 of 1See more

web-chart hcpark-ktcloudlab 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-58051.

Container imageDigestPackageFixed in
library/nginx:latest05b8cb60c354
libssh2@1.11.1-1+deb13u1
1.11.1-1+deb13u2

Open the chart page →

1,839
heliconehelicone0.1.421 of 14See more

helicone helicone 0.1.42

1 of the 14 container images this version deploys carry CVE-2026-58051.

Container imageDigestPackageFixed in
helicone/supabase-migration-runner:v2025.03.05-14a913936c97b
libssh2@1.10.0-3+b1
1.10.0-3+deb12u1

Open the chart page →

23,472
helixhelix1.4.31 of 2See more

helix helix 1.4.3

1 of the 2 container images this version deploys carry CVE-2026-58051.

Container imageDigestPackageFixed in
quay.io/jupyterhub/k8s-hub:4.3.492f883d09270
libssh2@1.10.0-3+b1
1.10.0-3+deb12u1

Open the chart page →

5,287
test-apphellnet0.1.11 of 1See more

test-app hellnet 0.1.1

1 of the 1 container images this version deploys carry CVE-2026-58051.

Container imageDigestPackageFixed in
library/nginx:latest05b8cb60c354
libssh2@1.11.1-1+deb13u1
1.11.1-1+deb13u2

Open the chart page →

1,839
hello-worldhello-world-pponyVerified publisher0.3.01 of 1See more

hello-world hello-world-ppony 0.3.0

1 of the 1 container images this version deploys carry CVE-2026-58051.

Container imageDigestPackageFixed in
library/nginx:1.25.49ff236ed47fe
libssh2@1.10.0-3+b1
1.10.0-3+deb12u1

Open the chart page →

5,851
my_web1helm-chart-by-piyush0.1.01 of 1See more

my_web1 helm-chart-by-piyush 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-58051.

Container imageDigestPackageFixed in
library/httpd:latest979c38c2228d
libssh2@1.11.1-1+deb13u1
1.11.1-1+deb13u2

Open the chart page →

1,693
esphomehelm-chart-roeiVerified publisher2025.3.01 of 1See more

esphome helm-chart-roei 2025.3.0

1 of the 1 container images this version deploys carry CVE-2026-58051.

Container imageDigestPackageFixed in
esphome/esphome:2025.3.0def8b6e4f517
libssh2@1.10.0-3+b1
1.10.0-3+deb12u1

Open the chart page →

6,014
home-assistant-matter-hubhelm-chart-roeiVerified publisher3.0.21 of 1See more

home-assistant-matter-hub helm-chart-roei 3.0.2

1 of the 1 container images this version deploys carry CVE-2026-58051.

Container imageDigestPackageFixed in
luligu/matterbridge:3.0.28f97884bebc2
libssh2@1.10.0-3+b1
1.10.0-3+deb12u1

Open the chart page →

3,818
hello-world-charthelm-chart-test-hello-world0.1.01 of 1See more

hello-world-chart helm-chart-test-hello-world 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-58051.

Container imageDigestPackageFixed in
library/nginx:stabled5792f71a949
libssh2@1.11.1-1+deb13u1
1.11.1-1+deb13u2

Open the chart page →

1,839
mywebhelmchartwebapp0.0.51 of 1See more

myweb helmchartwebapp 0.0.5

1 of the 1 container images this version deploys carry CVE-2026-58051.

Container imageDigestPackageFixed in
library/httpd:latest979c38c2228d
libssh2@1.11.1-1+deb13u1
1.11.1-1+deb13u2

Open the chart page →

1,693
my-apphelm-demo85640.2.71 of 2See more

my-app helm-demo8564 0.2.7

1 of the 2 container images this version deploys carry CVE-2026-58051.

Container imageDigestPackageFixed in
library/nginx:latest05b8cb60c354
libssh2@1.11.1-1+deb13u1
1.11.1-1+deb13u2

Open the chart page →

1,839
chart-bookhelm-deploy-book0.1.01 of 3See more

chart-book helm-deploy-book 0.1.0

1 of the 3 container images this version deploys carry CVE-2026-58051.

Container imageDigestPackageFixed in
dannielkil/book-frontend:latest937993927694
libssh2@1.10.0-3+b1
1.10.0-3+deb12u1

Open the chart page →

8,618
apachehelmforgeVerified publisher1.0.61 of 1See more

apache helmforge 1.0.6

1 of the 1 container images this version deploys carry CVE-2026-58051.

Container imageDigestPackageFixed in
library/httpd:2.4.68979c38c2228d
libssh2@1.11.1-1+deb13u1
1.11.1-1+deb13u2

Open the chart page →

1,693
archiveboxhelmforgeVerified publisher1.1.121 of 1See more

archivebox helmforge 1.1.12

1 of the 1 container images this version deploys carry CVE-2026-58051.

Container imageDigestPackageFixed in
archivebox/archivebox:0.7.41a5a37331091
libssh2@1.10.0-3+b1
1.10.0-3+deb12u1

Open the chart page →

7,648
castopodhelmforgeVerified publisher1.2.71 of 3See more

castopod helmforge 1.2.7

1 of the 3 container images this version deploys carry CVE-2026-58051.

Container imageDigestPackageFixed in
castopod/castopod:1.15.54e4f0440520f
libssh2@1.11.1-1
1.11.1-1+deb13u2

Open the chart page →

9,422
chiefonboardinghelmforgeVerified publisher1.1.141 of 3See more

chiefonboarding helmforge 1.1.14

1 of the 3 container images this version deploys carry CVE-2026-58051.

Container imageDigestPackageFixed in
chiefonboarding/chiefonboarding:v2.4.159bc7aa60fe7
libssh2@1.11.1-1
1.11.1-1+deb13u2

Open the chart page →

10,898
ckanhelmforgeVerified publisher1.3.81 of 6See more

ckan helmforge 1.3.8

1 of the 6 container images this version deploys carry CVE-2026-58051.

Container imageDigestPackageFixed in
ckan/ckan-base:2.12.087ecf3f27ad6
libssh2@1.10.0-3+b1
1.10.0-3+deb12u1

Open the chart page →

9,991
dawarichhelmforgeVerified publisher1.0.01 of 4See more

dawarich helmforge 1.0.0

1 of the 4 container images this version deploys carry CVE-2026-58051.

Container imageDigestPackageFixed in
postgis/postgis:18-3.67e00e8c3539f
libssh2@1.11.1-1+deb13u1
1.11.1-1+deb13u2

Open the chart page →

4,698
discount-bandithelmforgeVerified publisher2.0.81 of 3See more

discount-bandit helmforge 2.0.8

1 of the 3 container images this version deploys carry CVE-2026-58051.

Container imageDigestPackageFixed in
cybrarist/discount-bandit:v4.0.4e9e2447ac666
libssh2@1.11.1-1
1.11.1-1+deb13u2

Open the chart page →

29,852
drupalhelmforgeVerified publisher1.2.131 of 2See more

drupal helmforge 1.2.13

1 of the 2 container images this version deploys carry CVE-2026-58051.

Container imageDigestPackageFixed in
library/drupal:11.4.6-php8.5-apache-bookworm28f7931ecbcb
libssh2@1.10.0-3+b1
1.10.0-3+deb12u1

Open the chart page →

3,660
entehelmforgeVerified publisher1.0.21 of 4See more

ente helmforge 1.0.2

1 of the 4 container images this version deploys carry CVE-2026-58051.

Container imageDigestPackageFixed in
ghcr.io/ente/web:5ab0c5b4c7a89c4e470ef6f793600da33cebf35d3f4864eb7f11
libssh2@1.11.1-1+deb13u1
1.11.1-1+deb13u2

Open the chart page →

4,227
fastmcp-serverhelmforgeVerified publisher1.7.41 of 1See more

fastmcp-server helmforge 1.7.4

1 of the 1 container images this version deploys carry CVE-2026-58051.

Container imageDigestPackageFixed in
helmforge/fastmcp-server:0.11.2fcb7017327d6
libssh2@1.11.1-1
1.11.1-1+deb13u2

Open the chart page →

3,294
generichelmforgeVerified publisher3.1.51 of 1See more

generic helmforge 3.1.5

1 of the 1 container images this version deploys carry CVE-2026-58051.

Container imageDigestPackageFixed in
library/nginx:1.31.505b8cb60c354
libssh2@1.11.1-1+deb13u1
1.11.1-1+deb13u2

Open the chart page →

1,839
immichhelmforgeVerified publisher1.2.81 of 5See more

immich helmforge 1.2.8

1 of the 5 container images this version deploys carry CVE-2026-58051.

Container imageDigestPackageFixed in
ghcr.io/immich-app/immich-server:v3.1.0b434cb9287ee
libssh2@1.11.1-1+deb13u1
1.11.1-1+deb13u2

Open the chart page →

11,080
jenkinshelmforgeVerified publisher1.0.91 of 1See more

jenkins helmforge 1.0.9

1 of the 1 container images this version deploys carry CVE-2026-58051.

Container imageDigestPackageFixed in
jenkins/jenkins:2.568.3-lts-jdk21c1e4c349365f
libssh2@1.11.1-1+deb13u1
1.11.1-1+deb13u2

Open the chart page →

2,487
jupyterhubhelmforgeVerified publisher1.0.61 of 3See more

jupyterhub helmforge 1.0.6

1 of the 3 container images this version deploys carry CVE-2026-58051.

Container imageDigestPackageFixed in
quay.io/jupyterhub/k8s-hub:4.3.5113e372cf71b
libssh2@1.10.0-3+b1
1.10.0-3+deb12u1

Open the chart page →

5,350
mcp-serverhelmforgeVerified publisher1.0.01 of 1See more

mcp-server helmforge 1.0.0

1 of the 1 container images this version deploys carry CVE-2026-58051.

Container imageDigestPackageFixed in
helmforge/fastmcp-server:0.2.061f759a1421f
libssh2@1.11.1-1
1.11.1-1+deb13u2

Open the chart page →

3,442
medikeephelmforgeVerified publisher2.0.01 of 3See more

medikeep helmforge 2.0.0

1 of the 3 container images this version deploys carry CVE-2026-58051.

Container imageDigestPackageFixed in
ghcr.io/afairgiant/medikeep:v0.69.0766699daa9ac
libssh2@1.10.0-3+b1
1.10.0-3+deb12u1

Open the chart page →

6,041
middlewarehelmforgeVerified publisher1.2.61 of 4See more

middleware helmforge 1.2.6

1 of the 4 container images this version deploys carry CVE-2026-58051.

Container imageDigestPackageFixed in
middlewareeng/middleware:0.3.1747d880812f1
libssh2@1.10.0-3+b1
1.10.0-3+deb12u1

Open the chart page →

9,704
moodlehelmforgeVerified publisher1.1.01 of 2See more

moodle helmforge 1.1.0

1 of the 2 container images this version deploys carry CVE-2026-58051.

Container imageDigestPackageFixed in
moodlehq/moodle-php-apache:8.4-bookworm922af5166835
libssh2@1.10.0-3+b1
1.10.0-3+deb12u1

Open the chart page →

5,911
nextcloudhelmforgeVerified publisher1.0.01 of 3See more

nextcloud helmforge 1.0.0

1 of the 3 container images this version deploys carry CVE-2026-58051.

Container imageDigestPackageFixed in
library/nextcloud:34.0.4-apachede4ad9389386
libssh2@1.11.1-1+deb13u1
1.11.1-1+deb13u2

Open the chart page →

7,041
phpmyadminhelmforgeVerified publisher2.0.11 of 1See more

phpmyadmin helmforge 2.0.1

1 of the 1 container images this version deploys carry CVE-2026-58051.

Container imageDigestPackageFixed in
phpmyadmin/phpmyadmin:5.2.342a200db07b4
libssh2@1.11.1-1
1.11.1-1+deb13u2

Open the chart page →

4,741
ryothelmforgeVerified publisher1.0.01 of 2See more

ryot helmforge 1.0.0

1 of the 2 container images this version deploys carry CVE-2026-58051.

Container imageDigestPackageFixed in
ghcr.io/ignisda/ryot:v10.5.0a752b6aee537
libssh2@1.10.0-3+b1
1.10.0-3+deb12u1

Open the chart page →

5,916
text-embeddings-inferencehelmforgeVerified publisher1.0.01 of 2See more

text-embeddings-inference helmforge 1.0.0

1 of the 2 container images this version deploys carry CVE-2026-58051.

Container imageDigestPackageFixed in
ghcr.io/huggingface/text-embeddings-inference:cpu-1.9.3ad950d30878e
libssh2@1.10.0-3+b1
1.10.0-3+deb12u1

Open the chart page →

2,402
uptime-kumahelmforgeVerified publisher1.5.121 of 1See more

uptime-kuma helmforge 1.5.12

1 of the 1 container images this version deploys carry CVE-2026-58051.

Container imageDigestPackageFixed in
louislam/uptime-kuma:2.5.33e24e96c89ef
libssh2@1.10.0-3+b1
1.10.0-3+deb12u1

Open the chart page →

30,106
myapphelmingapp0.1.01 of 1See more

myapp helmingapp 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-58051.

Container imageDigestPackageFixed in
muhammedgamal/fp23:latest74b4cd69b6fa
libssh2@1.10.0-3+b1
1.10.0-3+deb12u1

Open the chart page →

11,441
jellyfinhelm-l3st86Verified publisher0.1.81 of 1See more

jellyfin helm-l3st86 0.1.8

1 of the 1 container images this version deploys carry CVE-2026-58051.

Container imageDigestPackageFixed in
jellyfin/jellyfin:latestaefb67e6a7ff
libssh2@1.11.1-1
1.11.1-1+deb13u2

Open the chart page →

2,615
openaevhelm-openbasVerified publisher2.0.51 of 7See more

openaev helm-openbas 2.0.5

1 of the 7 container images this version deploys carry CVE-2026-58051.

Container imageDigestPackageFixed in
bitnamilegacy/rabbitmq:4.1.2-debian-12-r1fac502149c40
libssh2@1.10.0-3+b1
1.10.0-3+deb12u1

Open the chart page →

7,502
openbashelm-openbasVerified publisher1.8.142 of 7See more

openbas helm-openbas 1.8.14

2 of the 7 container images this version deploys carry CVE-2026-58051.

Container imageDigestPackageFixed in
bitnamilegacy/rabbitmq:4.1.2-debian-12-r1fac502149c40
libssh2@1.10.0-3+b1
1.10.0-3+deb12u1
openbas/caldera-server:5.1.0a277796d9724
libssh2@1.10.0-3+b1
1.10.0-3+deb12u1

Open the chart page →

25,099
steampipehelm-steampipeVerified publisher2.4.11 of 1See more

steampipe helm-steampipe 2.4.1

1 of the 1 container images this version deploys carry CVE-2026-58051.

Container imageDigestPackageFixed in
ghcr.io/devops-ia/steampipe:v2.4.1a982103d91d3
libssh2@1.10.0-3+b1
1.10.0-3+deb12u1

Open the chart page →

3,025
my-nginxhelmtaiwo0.1.01 of 1See more

my-nginx helmtaiwo 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-58051.

Container imageDigestPackageFixed in
library/nginx:latest05b8cb60c354
libssh2@1.11.1-1+deb13u1
1.11.1-1+deb13u2

Open the chart page →

1,839
samplehelmapphelmtraining3.0.01 of 1See more

samplehelmapp helmtraining 3.0.0

1 of the 1 container images this version deploys carry CVE-2026-58051.

Container imageDigestPackageFixed in
praravind1801/helmimages:3.0.0f29d637b9ce1
libssh2@1.10.0-3+b1
1.10.0-3+deb12u1

Open the chart page →

5,114
home-ha-mockhome-ha-mockVerified publisher2.0.51 of 1See more

home-ha-mock home-ha-mock 2.0.5

1 of the 1 container images this version deploys carry CVE-2026-58051.

Container imageDigestPackageFixed in
ghcr.io/smarter-project/home-ha-mock:main95ee018cf558
libssh2@1.10.0-3+b1
1.10.0-3+deb12u1

Open the chart page →

3,054
paperlesshomelabcihelmchartstestVerified publisher9.1.91 of 1See more

paperless homelabcihelmchartstest 9.1.9

1 of the 1 container images this version deploys carry CVE-2026-58051.

Container imageDigestPackageFixed in
ghcr.io/paperless-ngx/paperless-ngx:2.0.1ab255bea133e
libssh2@1.10.0-3+b1
1.10.0-3+deb12u1

Open the chart page →

14,629
home-security-demohome-security-demoVerified publisher2.0.121 of 3See more

home-security-demo home-security-demo 2.0.12

1 of the 3 container images this version deploys carry CVE-2026-58051.

Container imageDigestPackageFixed in
ghcr.io/smarter-project/home-ha-mock:main95ee018cf558
libssh2@1.10.0-3+b1
1.10.0-3+deb12u1

Open the chart page →

3,137

Container images carrying it

658 by charts deploying them

A fixed version is listed for 1 of the 1 affected package.

Container imageDigestPackageFixed inUsed by
quay.io/opsmxpublic/ubi8-oes-datascience:isd-spin-2025.10.01-af26a30d4-202511261054d8f66f4117fe
libssh2@1.11.1-1
1.11.1-1+deb13u2
1
quay.io/yushiwho/api:e1f9d77e0d9b93dbf2b
libssh2@1.10.0-3+b1
1.10.0-3+deb12u1
1
registry.gitlab.com/enbuild-staging/vivsoft-platform-ui/enbuild-frontend:1.0.3166353ce9bf98
libssh2@1.11.1-1
1.11.1-1+deb13u2
1
registry.gitlab.com/enbuild-staging/vivsoft-platform-ui/enbuild-mq-consumer:1.0.310e3cd8c7776d
libssh2@1.10.0-3+b1
1.10.0-3+deb12u1
1
registry.gitlab.com/gitlab-org/build/cng/gitlab-openbao:v2.5.5-gitlab25b7636dfba3f
libssh2@1.11.1-1+deb13u1
1.11.1-1+deb13u2
1
registry.gitlab.com/school_guy/docker-typo3:13.4.30-197d868ed76185d7270d
libssh2@1.10.0-3+b1
1.10.0-3+deb12u1
1
registry.k8s.io/git-sync/git-sync:v4.5.00e64aedb0d0a
libssh2@1.11.1-1
1.11.1-1+deb13u2
1
registry.k8s.io/git-sync/git-sync:v4.1.0fd9722fd02e3
libssh2@1.10.0-3+b1
1.10.0-3+deb12u1
1

syft 1.42.1 · advisories as of 15 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.