CVE-2026-58470

Medium

Advisory

Published 7 Jul 2026In the index since 5 Sept 2026

Severity: Medium; worst across findings
CVSS: 6.9; base score, highest
EPSS: 0.002; 16th percentile
CISA KEV: Not listed; no confirmed exploitation
Charts affected: 507; of 17,781 indexed, latest versions
Container images: 492; deployed by those charts
Fix available: 2 of 2; affected packages

The matching OSV records carry no description.

Carried by container images the latest versions of 507 of 17,781 indexed charts deploy, on 492 images.

Affected package	Affected versions	Fixed in	Images
wgetdeb	1.15-1ubuntu1, 1.15-1ubuntu1.14.04.1, 1.15-1ubuntu1.14.04.4, 1.17.1-1ubuntu1.3+17 more	1.15-1ubuntu1.14.04.5+esm2, 1.17.1-1ubuntu1.5+esm3, 1.19.4-1ubuntu2.2+esm3, 1.20.3-1ubuntu2.1+esm2+3 more	488
wgetapk	1.25.0-r4, 1.25.0-r16	1.25.0-r15	4

OSV records: CGA-m4wh-53vm-gx57 CGA-q3jg-48p9-vppw DEBIAN-CVE-2026-58470 UBUNTU-CVE-2026-58470
Also known as: USN-8543-1

Charts affected

507 by stars

Chart

Latest

Affected images

Radar Score

webhookiewebhookie

0.1.2

1 of 1 See more

webhookie webhookie 0.1.2

1 of the 1 container images this version deploys carry CVE-2026-58470.

Container image	Digest	Package	Fixed in
hookiesolutions/webhookie :latest	0629694246ba	wget@1.20.3-1ubuntu1	1.20.3-1ubuntu2.1+esm2

Open the chart page →

14,364

webhookie-allwebhookie

0.1.2

1 of 3 See more

webhookie-all webhookie 0.1.2

1 of the 3 container images this version deploys carry CVE-2026-58470.

Container image	Digest	Package	Fixed in
hookiesolutions/webhookie :latest	0629694246ba	wget@1.20.3-1ubuntu1	1.20.3-1ubuntu2.1+esm2

Open the chart page →

28,605

juicefs-csi-driverwenerme

0.32.5

1 of 5 See more

juicefs-csi-driver wenerme 0.32.5

1 of the 5 container images this version deploys carry CVE-2026-58470.

Container image	Digest	Package	Fixed in
juicedata/juicefs-csi-driver :v0.32.5	95008ba63318	wget@1.21.3-1+deb12u1	no fix listed

Open the chart page →

9,117

jaegerwikimedia

3.1.2

1 of 4 See more

jaeger wikimedia 3.1.2

1 of the 4 container images this version deploys carry CVE-2026-58470.

Container image	Digest	Package	Fixed in
jaegertracing/jaeger-cassandra-schema :1.53.0	d48d6dab2c65	wget@1.21.2-2ubuntu1	1.21.2-2ubuntu1.3

Open the chart page →

9,248

playwright-synthetic-monitoringwork-adventure

1.0.1

1 of 1 See more

playwright-synthetic-monitoring work-adventure 1.0.1

1 of the 1 container images this version deploys carry CVE-2026-58470.

Container image	Digest	Package	Fixed in
workadventure/playwright-synthetic-monitoring :main	92b664c2a06f	wget@1.21.2-2ubuntu1.1	1.21.2-2ubuntu1.3

Open the chart page →

14,100

xkopsxkops

0.1.0

1 of 5 See more

xkops xkops 0.1.0

1 of the 5 container images this version deploys carry CVE-2026-58470.

Container image	Digest	Package	Fixed in
murtazashah46/helmfile :latest	4d11726cf803	wget@1.21.3-1+b2	no fix listed

Open the chart page →

13,677

clickhousezloi-space

1.2.0

1 of 3 See more

clickhouse zloi-space 1.2.0

1 of the 3 container images this version deploys carry CVE-2026-58470.

Container image	Digest	Package	Fixed in
yandex/clickhouse-server :21.3.20	4eccfffb01d7	wget@1.20.3-1ubuntu2	1.20.3-1ubuntu2.1+esm2

Open the chart page →

9,207

Container images carrying it

492 by charts deploying them

A fixed version is listed for 2 of the 2 affected packages.

Container image	Digest	Package	Fixed in	Used by
acryldata/datahub-upgrade :v1.7.0.1	c3db54d8fb94	wget@1.25.0-r16	no fix listed	1
adorsys/keycloak-config-cli :6.3.0-26.1.0	85be7a45a94c	wget@1.21.4-1ubuntu4.1	1.21.4-1ubuntu4.3	1
adorsys/keycloak-config-cli :6.1.6-25.0.1	eb49a2dcbbb8	wget@1.21.4-1ubuntu4.1	1.21.4-1ubuntu4.3	1
adwerx/github-actions-runner :2.276.1-20.04-1	840d2b078682	wget@1.20.3-1ubuntu1	1.20.3-1ubuntu2.1+esm2	1
aktosecurity/data-ingestion-service	213aded7adc5	wget@1.21.4-1ubuntu4.1	1.21.4-1ubuntu4.3	1
aktosecurity/data-ingestion-service :1.4.9	46ed5bcb04b2	wget@1.25.0-2ubuntu4	1.25.0-2ubuntu4.2	1
aktosecurity/data-ingestion-service :1.5.3	5d4eab1c36b9	wget@1.25.0-2ubuntu4	1.25.0-2ubuntu4.2	1
altinity/clickhouse-server :25.3.6.10034.altinitystable	3396b15c51a2	wget@1.21.2-2ubuntu1.1	1.21.2-2ubuntu1.3	1
andrewgaul/s3proxy :sha-85b0f98	7dc1d34174a5	wget@1.21.4-1ubuntu4.1	1.21.4-1ubuntu4.3	1
andrewmackrodt/firefox-x11 :142.0.1-r1	33f9080470c9	wget@1.21.2-2ubuntu1.1	1.21.2-2ubuntu1.3	1
anguda/ant-media :2.5	c435285fc241	wget@1.20.3-1ubuntu2	1.20.3-1ubuntu2.1+esm2	1
anujdatar/cups :25.07.01	685df04a643b	wget@1.21.3-1+deb12u1	no fix listed	1
apache/activemq-artemis :2.44.0	0305c26f19ed	wget@1.21.4-1ubuntu4.1	1.21.4-1ubuntu4.3	1
apache/activemq-artemis :2.37.0	bae523439ee3	wget@1.21.4-1ubuntu4.1	1.21.4-1ubuntu4.3	1
apache/gravitino-iceberg-rest :1.3.0	80136ae753ee	wget@1.21.2-2ubuntu1.1	1.21.2-2ubuntu1.3	1
apache/hertzbeat :1.8.0	75d48a62748f	wget@1.21.4-1ubuntu4.1	1.21.4-1ubuntu4.3	1
apache/hertzbeat-collector :1.8.0	a2bab1be574c	wget@1.21.4-1ubuntu4.1	1.21.4-1ubuntu4.3	1
apache/nifi-registry :1.27.0	63b8e3e40742	wget@1.21.2-2ubuntu1.1	1.21.2-2ubuntu1.3	1
apachepulsar/pulsar :3.1.0	16f9fdab3fa6	wget@1.21.2-2ubuntu1	1.21.2-2ubuntu1.3	1
apachepulsar/pulsar :3.0.7	9c9947de139d	wget@1.21.2-2ubuntu1.1	1.21.2-2ubuntu1.3	1
apache/ranger :2.7.0	76c176e8a0e4	wget@1.21.2-2ubuntu1.1	1.21.2-2ubuntu1.3	1
apache/rocketmq :5.3.0	434d8398f996	wget@1.21.4-1ubuntu4.1	1.21.4-1ubuntu4.3	1
apache/rocketmq-exporter :0.0.2	c8fb51195444	wget@1.21.2-2ubuntu1	1.21.2-2ubuntu1.3	1
apache/skywalking-oap-server :9.2.0	133d35d2c263	wget@1.21.2-2ubuntu1	1.21.2-2ubuntu1.3	1
apache/skywalking-ui :9.2.0	295f1dc87d98	wget@1.21.2-2ubuntu1	1.21.2-2ubuntu1.3	1
archivebox/archivebox :0.7.4	1a5a37331091	wget@1.21.3-1+deb12u1	no fix listed	1
aristidetm/basic-notebook :3.6.5	469dbc951224	wget@1.21.3-1+b2	no fix listed	1
artur9010/wait-for :v1.0.0	6b4de3ce8b0e	wget@1.21.3-1+b2	no fix listed	1
arunvelsriram/utils :latest	655ad18fd8d6	wget@1.21.4-1ubuntu4.1	1.21.4-1ubuntu4.3	1
assistiot/cybersecurity-monitoring_ir-cas :latest	6a107f224c34	wget@1.20.3-1ubuntu2	1.20.3-1ubuntu2.1+esm2	1
assistiot/location_processing :latest	e9bae124095f	wget@1.21.2-2ubuntu1	1.21.2-2ubuntu1.3	1
assistiot/smart-orchestrator_scheduler_mc :latest	b1dbe4d62a03	wget@1.21.3-1+b2	no fix listed	1
assistiot/video_augmentation :runner-cpu-latest	e5ae539ce2cb	wget@1.20.3-1ubuntu2	1.20.3-1ubuntu2.1+esm2	1
atlassian/confluence-server :7.10.0	3b9222ab32ef	wget@1.21.2-2ubuntu1	1.21.2-2ubuntu1.3	1
atlassian/jira-software :8.14.0	37bc46cbec1a	wget@1.21.2-2ubuntu1	1.21.2-2ubuntu1.3	1
atlassian/jira-software :9.7.2	64a75aa4ec4e	wget@1.21.4-1ubuntu4.1	1.21.4-1ubuntu4.3	1
avinash263/pyredis263 :latest	aa2b8727f1a6	wget@1.21.3-1+b2	no fix listed	1
beyzkaya/blog-backend :v1.0.1	12a6a3d1c5f9	wget@1.21.3-1+deb12u1	no fix listed	1
bicarus/elrond-rosetta :v1.3.50.0	b1dab0721e1c	wget@1.20.3-1ubuntu2	1.20.3-1ubuntu2.1+esm2	1
blakeblackshear/frigate :0.10.0-amd64	ae269270ad9e	wget@1.20.3-1ubuntu2	1.20.3-1ubuntu2.1+esm2	1
blockstream/bitcoind :27.2	9472492530e3	wget@1.21.3-1+b2	no fix listed	1
bloxstaking/ssv-node :v2.2.0	bf6d7d2fdc93	wget@1.21.3-1+b2	no fix listed	1
bnjbvr/kresus :0.22.1	37e216b182c8	wget@1.21.3-1+b2	no fix listed	1
browserless/chrome :1.48.0-chrome-stable	c81ae5585b47	wget@1.20.3-1ubuntu1	1.20.3-1ubuntu2.1+esm2	1
budibase/database :2.1.0	d90f656261c9	wget@1.21.3-1+deb12u1	no fix listed	1
carlosmz87/test_helm_backend :latest	8ffa63aa995d	wget@1.21.3-1+b2	no fix listed	1
castlemock/castlemock :latest	b7f3f1527ba9	wget@1.21.4-1ubuntu4.1	1.21.4-1ubuntu4.3	1
cbioportal/cbioportal :6.4.1-web-shenandoah	08debbd2dbf9	wget@1.21.4-1ubuntu4.1	1.21.4-1ubuntu4.3	1
chetangautamm/repo :sipp.v3	e7f7049e1544	wget@1.20.3-1ubuntu1	1.20.3-1ubuntu2.1+esm2	1
chiefonboarding/chiefonboarding :v2.4.1	59bc7aa60fe7	wget@1.25.0-2	no fix listed	1