StackRadar

CVE-2026-58469

High

Advisory

Published 7 Jul 2026In the index since 5 Sept 2026
Severity
High
worst across findings
CVSS
8.7
base score, highest
EPSS
0.004
28th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
467
of 17,781 indexed, latest versions
Container images
467
deployed by those charts
Fix available
2 of 2
affected packages

The matching OSV records carry no description.

Carried by container images the latest versions of 467 of 17,781 indexed charts deploy, on 467 images.

Affected packageAffected versionsFixed inImages
wgetdeb1.19.4-1ubuntu2.1, 1.19.4-1ubuntu2.2, 1.20.3-1ubuntu1, 1.20.3-1ubuntu2+11 more1.19.4-1ubuntu2.2+esm3, 1.20.3-1ubuntu2.1+esm2, 1.21.2-2ubuntu1.3, 1.21.4-1ubuntu4.3+1 more463
wgetapk1.25.0-r4, 1.25.0-r161.25.0-r154
OSV records
CGA-v8vc-236c-m97mCGA-xwcg-x3wg-ggxrDEBIAN-CVE-2026-58469UBUNTU-CVE-2026-58469
Also known as
USN-8543-1

Charts affected

467 by stars
ChartLatestAffected imagesRadar Score
orchestratremolo3.1.551 of 5See more

orchestra tremolo 3.1.55

1 of the 5 container images this version deploys carry CVE-2026-58469.

Container imageDigestPackageFixed in
ghcr.io/openunison/openunison-k8s:1.0.509ad450220ab9
wget@1.21.4-1ubuntu4.1
1.21.4-1ubuntu4.3

Open the chart page →

7,637
tfy-distributortruefoundryVerified publisher0.0.11 of 4See more

tfy-distributor truefoundry 0.0.1

1 of the 4 container images this version deploys carry CVE-2026-58469.

Container imageDigestPackageFixed in
public.ecr.aws/truefoundrycloud/async-service-distributor:5d48113bc678d694a0c8f8dabb2207c5aa2cfc53f74851ce31f5
wget@1.21.3-1+b2
no fix listed

Open the chart page →

17,323
opencloudunxwaresVerified publisher0.2.31 of 13See more

opencloud unxwares 0.2.3

1 of the 13 container images this version deploys carry CVE-2026-58469.

Container imageDigestPackageFixed in
apache/tika:2.9.2.1-fullae0b86d3c4d0
wget@1.21.4-1ubuntu4
1.21.4-1ubuntu4.3

Open the chart page →

45,239
demo-backendv2flyVerified publisher0.0.31 of 1See more

demo-backend v2fly 0.0.3

1 of the 1 container images this version deploys carry CVE-2026-58469.

Container imageDigestPackageFixed in
quay.io/yushiwho/api:e1f9d77e0d9b93dbf2b
wget@1.21.3-1+b2
no fix listed

Open the chart page →

14,358
unmanicvhdirkVerified publisher0.1.41 of 1See more

unmanic vhdirk 0.1.4

1 of the 1 container images this version deploys carry CVE-2026-58469.

Container imageDigestPackageFixed in
josh5/unmanic:0.2.64d49c4816260
wget@1.21.2-2ubuntu1
1.21.2-2ubuntu1.3

Open the chart page →

9,347
browserlessvictorlane0.2.01 of 1See more

browserless victorlane 0.2.0

1 of the 1 container images this version deploys carry CVE-2026-58469.

Container imageDigestPackageFixed in
ghcr.io/browserless/chromium:v2.43.0853e6f105b51
wget@1.21.4-1ubuntu4.1
1.21.4-1ubuntu4.3

Open the chart page →

4,305
aih-scannerwallarmVerified publisher2.7.111 of 2See more

aih-scanner wallarm 2.7.11

1 of the 2 container images this version deploys carry CVE-2026-58469.

Container imageDigestPackageFixed in
wallarm/aih-scanner:2.7.11f1cb26db1f5b
wget@1.25.0-2
no fix listed

Open the chart page →

3,911
wazuh-manager-filebeatwazuh-manager-filebeat0.1.0-gamma1 of 1See more

wazuh-manager-filebeat wazuh-manager-filebeat 0.1.0-gamma

1 of the 1 container images this version deploys carry CVE-2026-58469.

Container imageDigestPackageFixed in
iosifache/wazuh-manager-filebeat:latest85df3f04b5da
wget@1.20.3-1ubuntu2
1.20.3-1ubuntu2.1+esm2

Open the chart page →

11,119
myweatherhelmwebapp11.3.501 of 8See more

myweatherhelm webapp1 1.3.50

1 of the 8 container images this version deploys carry CVE-2026-58469.

Container imageDigestPackageFixed in
mcr.microsoft.com/azure-sql-edge:latest902628a8be89
wget@1.20.3-1ubuntu2
1.20.3-1ubuntu2.1+esm2

Open the chart page →

9,130
myweatherhelm-schedulingwebapp11.3.921 of 9See more

myweatherhelm-scheduling webapp1 1.3.92

1 of the 9 container images this version deploys carry CVE-2026-58469.

Container imageDigestPackageFixed in
mcr.microsoft.com/azure-sql-edge:latest902628a8be89
wget@1.20.3-1ubuntu2
1.20.3-1ubuntu2.1+esm2

Open the chart page →

9,130
webhookiewebhookie0.1.21 of 1See more

webhookie webhookie 0.1.2

1 of the 1 container images this version deploys carry CVE-2026-58469.

Container imageDigestPackageFixed in
hookiesolutions/webhookie:latest0629694246ba
wget@1.20.3-1ubuntu1
1.20.3-1ubuntu2.1+esm2

Open the chart page →

14,364
webhookie-allwebhookie0.1.21 of 3See more

webhookie-all webhookie 0.1.2

1 of the 3 container images this version deploys carry CVE-2026-58469.

Container imageDigestPackageFixed in
hookiesolutions/webhookie:latest0629694246ba
wget@1.20.3-1ubuntu1
1.20.3-1ubuntu2.1+esm2

Open the chart page →

28,605
juicefs-csi-driverwenerme0.32.51 of 5See more

juicefs-csi-driver wenerme 0.32.5

1 of the 5 container images this version deploys carry CVE-2026-58469.

Container imageDigestPackageFixed in
juicedata/juicefs-csi-driver:v0.32.595008ba63318
wget@1.21.3-1+deb12u1
no fix listed

Open the chart page →

9,117
jaegerwikimedia3.1.21 of 4See more

jaeger wikimedia 3.1.2

1 of the 4 container images this version deploys carry CVE-2026-58469.

Container imageDigestPackageFixed in
jaegertracing/jaeger-cassandra-schema:1.53.0d48d6dab2c65
wget@1.21.2-2ubuntu1
1.21.2-2ubuntu1.3

Open the chart page →

9,248
playwright-synthetic-monitoringwork-adventure1.0.11 of 1See more

playwright-synthetic-monitoring work-adventure 1.0.1

1 of the 1 container images this version deploys carry CVE-2026-58469.

Container imageDigestPackageFixed in
workadventure/playwright-synthetic-monitoring:main92b664c2a06f
wget@1.21.2-2ubuntu1.1
1.21.2-2ubuntu1.3

Open the chart page →

14,100
xkopsxkops0.1.01 of 5See more

xkops xkops 0.1.0

1 of the 5 container images this version deploys carry CVE-2026-58469.

Container imageDigestPackageFixed in
murtazashah46/helmfile:latest4d11726cf803
wget@1.21.3-1+b2
no fix listed

Open the chart page →

13,677
clickhousezloi-space1.2.01 of 3See more

clickhouse zloi-space 1.2.0

1 of the 3 container images this version deploys carry CVE-2026-58469.

Container imageDigestPackageFixed in
yandex/clickhouse-server:21.3.204eccfffb01d7
wget@1.20.3-1ubuntu2
1.20.3-1ubuntu2.1+esm2

Open the chart page →

9,207

Container images carrying it

467 by charts deploying them

A fixed version is listed for 2 of the 2 affected packages.

Container imageDigestPackageFixed inUsed by
xeotek/kadeck:4.2.94c6b04d9ce55
wget@1.20.3-1ubuntu2
1.20.3-1ubuntu2.1+esm2
1
xom4ekp2p/infini-route-attestators-public-mainnet-attester:latestd0e0aa238b02
wget@1.21.3-1+b2
no fix listed
1
xom4ekp2p/infini-route-attestators-public-mainnet-avs-webapi:latest2745b5fd8785
wget@1.21.3-1+b2
no fix listed
1
yandex/clickhouse-server:latest1cbf75aabe1e
wget@1.20.3-1ubuntu2
1.20.3-1ubuntu2.1+esm2
1
yandex/clickhouse-server:21.3.204eccfffb01d7
wget@1.20.3-1ubuntu2
1.20.3-1ubuntu2.1+esm2
1
yandex/clickhouse-server:19.17ab1738a64b70
wget@1.19.4-1ubuntu2.2
1.19.4-1ubuntu2.2+esm3
1
yandex/clickhouse-server:19.14ccf9c2b5e3f2
wget@1.19.4-1ubuntu2.2
1.19.4-1ubuntu2.2+esm3
1
yandex/clickhouse-server:19.16d210dc69321e
wget@1.19.4-1ubuntu2.2
1.19.4-1ubuntu2.2+esm3
1
zabbix/zabbix-server-mysql:ubuntu-6.4-latest55d074b6b031
wget@1.21.4-1ubuntu4.1
1.21.4-1ubuntu4.3
1
zabbix/zabbix-server-pgsql:ubuntu-5.4.66c946b1f45cd
wget@1.20.3-1ubuntu1
1.20.3-1ubuntu2.1+esm2
1
zabbix/zabbix-server-pgsql:ubuntu-7.0.237e8c8e059533
wget@1.21.4-1ubuntu4.1
1.21.4-1ubuntu4.3
1
zabbix/zabbix-server-pgsql:ubuntu-6.0.8d59ffa07f615
wget@1.21.2-2ubuntu1
1.21.2-2ubuntu1.3
1
gcr.io/kubecost1/cost-model:prod-1.108.1852f7923fad3
wget@1.21.2-2ubuntu1
1.21.2-2ubuntu1.3
1
gcr.io/ml-pipeline/api-server:2.3.039661bd823e8
wget@1.21.3-1+b2
no fix listed
1
gcr.io/ml-pipeline/metadata-writer:2.3.09bcfd2abc361
wget@1.21.3-1+b2
no fix listed
1
ghcr.io/apache/flink-kubernetes-operator:c703255e9c2ce635b89
wget@1.21.2-2ubuntu1.1
1.21.2-2ubuntu1.3
1
ghcr.io/appscode/gotenberg:8.25f9104080d9a7
wget@1.25.0-2
no fix listed
1
ghcr.io/appscode/inbox-server:MailetGroup4a2824296412
wget@1.21.2-2ubuntu1
1.21.2-2ubuntu1.3
1
ghcr.io/appscode/s3proxy:sha-a82ca6820518335f9f9
wget@1.21.2-2ubuntu1
1.21.2-2ubuntu1.3
1
ghcr.io/astriaorg/account-monitor:latest4c8b42890035
wget@1.21.3-1+deb12u1
no fix listed
1
ghcr.io/astriaorg/astrotrek:0.1.05889bea38e56
wget@1.21.3-1+b1
no fix listed
1
ghcr.io/astriaorg/auctioneer:pr-18391386b7b5e555
wget@1.21.3-1+b2
no fix listed
1
ghcr.io/astriaorg/conductor:1.1.01f97d131b1d1
wget@1.21.3-1+b2
no fix listed
1
ghcr.io/astriaorg/evm-bridge-withdrawer:1.0.29c88e1aff357
wget@1.21.3-1+b2
no fix listed
1
ghcr.io/astriaorg/hermes:0.5.04f33a0a9f75e
wget@1.21.4-1ubuntu4.1
1.21.4-1ubuntu4.3
1
ghcr.io/astriaorg/sequencer:latest44f82ee0b24c
wget@1.21.3-1+deb12u1
no fix listed
1
ghcr.io/astriaorg/sequencer-relayer:latest5f6c74993f08
wget@1.21.3-1+deb12u1
no fix listed
1
ghcr.io/berriai/litellm-database:litellm_stable_release_branch-v1.75.5-stableab63d26a8a2c
wget@1.25.0-r4
1.25.0-r15
1
ghcr.io/brittonhayes/arma-reforger:latest6fde1edc0983
wget@1.20.3-1ubuntu2
1.20.3-1ubuntu2.1+esm2
1
ghcr.io/browserless/chromium:v2.43.0853e6f105b51
wget@1.21.4-1ubuntu4.1
1.21.4-1ubuntu4.3
1
ghcr.io/buanet/iobroker:v9.1.2ca7dc7362968
wget@1.21.3-1+b2
no fix listed
1
ghcr.io/camptocamp/tetragon-policy-builder:master0e99f12bb040
wget@1.21.3-1+b2
no fix listed
1
ghcr.io/camunda-community-hub/zeebe-simple-monitor:2.6.2d9d796a1b846
wget@1.21.2-2ubuntu1
1.21.2-2ubuntu1.3
1
ghcr.io/cjmalloy/jasper:v1.3.282726a947bb65b
wget@1.21.3-1+deb12u1
no fix listed
1
ghcr.io/cohdi/composable-dra-driver:v0.2.28c05f7366981
wget@1.25.0-2
no fix listed
1
ghcr.io/cosmo-tech/cosmotech-copilot-api:latesta2be95de450c
wget@1.25.0-2
no fix listed
1
ghcr.io/cosmo-workspace/dev-code-server:v0.0.316fda01ae58a
wget@1.21.3-1+deb12u1
no fix listed
1
ghcr.io/damap-org/damap-backend:5.0.0f3d0c7d35498
wget@1.21.4-1ubuntu4.1
1.21.4-1ubuntu4.3
1
ghcr.io/dask/dask:2024.1.0080150de7d86
wget@1.20.3-1ubuntu2
1.20.3-1ubuntu2.1+esm2
1
ghcr.io/dask/dask-kubernetes-operator:2026.3.03225d2bc6b3c
wget@1.25.0-2
no fix listed
1
ghcr.io/dask/dask-notebook:2024.1.0f53bde3acd4f
wget@1.21.2-2ubuntu1
1.21.2-2ubuntu1.3
1
ghcr.io/developmentseed/titiler:0.22.48ac53eb38393
wget@1.21.3-1+deb12u1
no fix listed
1
ghcr.io/dfir-iris/iriswebapp_app:v2.4.26e59ebde55709
wget@1.25.0-2
no fix listed
1
ghcr.io/drewburr-labs/mum-discord-bot:3.1.26e82914e1051
wget@1.21.3-1+b2
no fix listed
1
ghcr.io/edgelesssys/edgelessdb-sgx-1gb:v0.3.27e1d7a11a11a
wget@1.20.3-1ubuntu2
1.20.3-1ubuntu2.1+esm2
1
ghcr.io/flanksource/postgres:17.6-497383cebcf66281fc1
wget@1.21.3-1+deb12u1
no fix listed
1
ghcr.io/formancehq/ledger:v1.9.203c1ddbda33b
wget@1.21.2-2ubuntu1
1.21.2-2ubuntu1.3
1
ghcr.io/graphprotocol/availability-oracle:sha-28312fd472a25038957
wget@1.21.3-1+b2
no fix listed
1
ghcr.io/gregperlinli/certvault:2.12.0a7d0cc9e260a
wget@1.21.4-1ubuntu4.1
1.21.4-1ubuntu4.3
1
ghcr.io/grycap/im:latest06a16d4f279f
wget@1.21.4-1ubuntu4.1
1.21.4-1ubuntu4.3
1

syft 1.42.1 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.