CVE-2026-58470

Medium

Advisory

Published 7 Jul 2026In the index since 5 Sept 2026

Severity: Medium; worst across findings
CVSS: 6.9; base score, highest
EPSS: 0.002; 16th percentile
CISA KEV: Not listed; no confirmed exploitation
Charts affected: 507; of 17,781 indexed, latest versions
Container images: 492; deployed by those charts
Fix available: 2 of 2; affected packages

The matching OSV records carry no description.

Carried by container images the latest versions of 507 of 17,781 indexed charts deploy, on 492 images.

Affected package	Affected versions	Fixed in	Images
wgetdeb	1.15-1ubuntu1, 1.15-1ubuntu1.14.04.1, 1.15-1ubuntu1.14.04.4, 1.17.1-1ubuntu1.3+17 more	1.15-1ubuntu1.14.04.5+esm2, 1.17.1-1ubuntu1.5+esm3, 1.19.4-1ubuntu2.2+esm3, 1.20.3-1ubuntu2.1+esm2+3 more	488
wgetapk	1.25.0-r4, 1.25.0-r16	1.25.0-r15	4

OSV records: CGA-m4wh-53vm-gx57 CGA-q3jg-48p9-vppw DEBIAN-CVE-2026-58470 UBUNTU-CVE-2026-58470
Also known as: USN-8543-1

Charts affected

507 by stars

Chart

Latest

Affected images

Radar Score

webhookiewebhookie

0.1.2

1 of 1 See more

webhookie webhookie 0.1.2

1 of the 1 container images this version deploys carry CVE-2026-58470.

Container image	Digest	Package	Fixed in
hookiesolutions/webhookie :latest	0629694246ba	wget@1.20.3-1ubuntu1	1.20.3-1ubuntu2.1+esm2

Open the chart page →

14,364

webhookie-allwebhookie

0.1.2

1 of 3 See more

webhookie-all webhookie 0.1.2

1 of the 3 container images this version deploys carry CVE-2026-58470.

Container image	Digest	Package	Fixed in
hookiesolutions/webhookie :latest	0629694246ba	wget@1.20.3-1ubuntu1	1.20.3-1ubuntu2.1+esm2

Open the chart page →

28,605

juicefs-csi-driverwenerme

0.32.5

1 of 5 See more

juicefs-csi-driver wenerme 0.32.5

1 of the 5 container images this version deploys carry CVE-2026-58470.

Container image	Digest	Package	Fixed in
juicedata/juicefs-csi-driver :v0.32.5	95008ba63318	wget@1.21.3-1+deb12u1	no fix listed

Open the chart page →

9,117

jaegerwikimedia

3.1.2

1 of 4 See more

jaeger wikimedia 3.1.2

1 of the 4 container images this version deploys carry CVE-2026-58470.

Container image	Digest	Package	Fixed in
jaegertracing/jaeger-cassandra-schema :1.53.0	d48d6dab2c65	wget@1.21.2-2ubuntu1	1.21.2-2ubuntu1.3

Open the chart page →

9,248

playwright-synthetic-monitoringwork-adventure

1.0.1

1 of 1 See more

playwright-synthetic-monitoring work-adventure 1.0.1

1 of the 1 container images this version deploys carry CVE-2026-58470.

Container image	Digest	Package	Fixed in
workadventure/playwright-synthetic-monitoring :main	92b664c2a06f	wget@1.21.2-2ubuntu1.1	1.21.2-2ubuntu1.3

Open the chart page →

14,100

xkopsxkops

0.1.0

1 of 5 See more

xkops xkops 0.1.0

1 of the 5 container images this version deploys carry CVE-2026-58470.

Container image	Digest	Package	Fixed in
murtazashah46/helmfile :latest	4d11726cf803	wget@1.21.3-1+b2	no fix listed

Open the chart page →

13,677

clickhousezloi-space

1.2.0

1 of 3 See more

clickhouse zloi-space 1.2.0

1 of the 3 container images this version deploys carry CVE-2026-58470.

Container image	Digest	Package	Fixed in
yandex/clickhouse-server :21.3.20	4eccfffb01d7	wget@1.20.3-1ubuntu2	1.20.3-1ubuntu2.1+esm2

Open the chart page →

9,207

Container images carrying it

492 by charts deploying them

A fixed version is listed for 2 of the 2 affected packages.

Container image	Digest	Package	Fixed in	Used by
oomk8s/readiness-check :2.0.2	875814cc853d	wget@1.17.1-1ubuntu1.4	1.17.1-1ubuntu1.5+esm3	11
ghcr.io/appscode/b3 :v2026.9.11	76d28575b71c	wget@1.21.3-1+deb12u1	no fix listed	7
oomk8s/readiness-check :2.0.0	7daa08b81954	wget@1.17.1-1ubuntu1.3	1.17.1-1ubuntu1.5+esm3	6
quay.io/devtron/devtron-utils :dup-chart-repo-v1.1.0	95d6f0e05636	wget@1.21.3-1+b2	no fix listed	6
solsson/kafka :latest	41e5d8f6f290	wget@1.20.3-1ubuntu2	1.20.3-1ubuntu2.1+esm2	5
hyperledger/fabric-ca-tools :latest	4ce6f43ded2e	wget@1.17.1-1ubuntu1.4	1.17.1-1ubuntu1.5+esm3	4
jaegertracing/jaeger-cassandra-schema :1.53.0	d48d6dab2c65	wget@1.21.2-2ubuntu1	1.21.2-2ubuntu1.3	4
mastercloudapps/planner :v1.23	40a950b311b2	wget@1.21.2-2ubuntu1	1.21.2-2ubuntu1.3	4
codeurjc/planner :v1.0	800cf520c245	wget@1.21.2-2ubuntu1	1.21.2-2ubuntu1.3	3
guacamole/guacamole :1.6.0	f344085e618b	wget@1.21.4-1ubuntu4.1	1.21.4-1ubuntu4.3	3
library/node :lts	be23f54a88d3	wget@1.21.3-1+deb12u1	no fix listed	3
selenium/hub :3.141.59	02f251d48d5f	wget@1.20.3-1ubuntu1	1.20.3-1ubuntu2.1+esm2	3
quay.io/devtron/argocd-cert-refresh :v10	2b6db27eaf3d	wget@1.21.2-2ubuntu1	1.21.2-2ubuntu1.3	3
apache/nifi-registry :1.26.0	7cdfd8deec92	wget@1.21.2-2ubuntu1	1.21.2-2ubuntu1.3	2
apache/rocketmq :5.4.0	319cd8a81ed1	wget@1.21.4-1ubuntu4.1	1.21.4-1ubuntu4.3	2
apache/tika :2.9.2.1-full	ae0b86d3c4d0	wget@1.21.4-1ubuntu4	1.21.4-1ubuntu4.3	2
cfssl/cfssl :latest :v1.6.5	c9018c2ddf0b	wget@1.21.3-1+b2	no fix listed	2
clickhouse/clickhouse-server :24.2	ed9640bfff07	wget@1.20.3-1ubuntu2	1.20.3-1ubuntu2.1+esm2	2
gjeanmart/safe-ganache-node :latest	926264c8f2d1	wget@1.21.3-1+b1	no fix listed	2
gradiant/ueransim :3.2.6	015b30d5fa0f	wget@1.21.2-2ubuntu1.1	1.21.2-2ubuntu1.3	2
hookiesolutions/webhookie :latest	0629694246ba	wget@1.20.3-1ubuntu1	1.20.3-1ubuntu2.1+esm2	2
infisical/infisical :latest :v0.165.6	02082bf13163	wget@1.25.0-2	no fix listed	2
istio/examples-bookinfo-reviews-v1 :1.14.0	ee156b8aefd6	wget@1.17.1-1ubuntu1.4	1.17.1-1ubuntu1.5+esm3	2
istio/examples-bookinfo-reviews-v2 :1.14.0	eab80bcd2132	wget@1.17.1-1ubuntu1.4	1.17.1-1ubuntu1.5+esm3	2
istio/examples-bookinfo-reviews-v3 :1.14.0	1e37fca43550	wget@1.17.1-1ubuntu1.4	1.17.1-1ubuntu1.5+esm3	2
langgenius/dify-sandbox :0.2.0	09b7e8705673	wget@1.21.3-1+b2	no fix listed	2
library/buildpack-deps :curl	04907bdd423b	wget@1.25.0-2	no fix listed	2
library/cassandra :4.1.3	7cbcec0086ac	wget@1.21.2-2ubuntu1	1.21.2-2ubuntu1.3	2
library/python :3.7	eedf63967cdb	wget@1.21.3-1+b2	no fix listed	2
library/redmine :6.1.3-trixie	f474a901faec	wget@1.25.0-2	no fix listed	2
mbentley/omada-controller :4.3	f4e682274bed	wget@1.19.4-1ubuntu2.2	1.19.4-1ubuntu2.2+esm3	2
moreillon/user-manager :v5.0.2	e1c9bfab5c16	wget@1.21.3-1+b2	no fix listed	2
obolnetwork/charon :v1.10.0	278c7e2897b6	wget@1.25.0-2	no fix listed	2
piomin/sample-spring-kotlin-microservice :1.1	871f784dd6bc	wget@1.21.2-2ubuntu1	1.21.2-2ubuntu1.3	2
proxysql/proxysql :3.0.11	0e95d1b7cc32	wget@1.25.0-2	no fix listed	2
qichenxu4pd/pythonexample :1.0	f3a8502bc21b	wget@1.21.3-1+b2	no fix listed	2
speckle/speckle-preview-service :2.18.11-branch.testing2.88634-335d469 :2.18.12-branch.testing3.88744-f55b341	4bd113093583	wget@1.21.3-1+b2	no fix listed	2
svtechnmaa/svtech_debuger :v1.0.0	b2987abe57d3	wget@1.21.2-2ubuntu1	1.21.2-2ubuntu1.3	2
uffizzi/controller :latest	0344805f267b	wget@1.21.3-1+b2	no fix listed	2
wurstmeister/zookeeper :latest	7a7fd44a7210	wget@1.15-1ubuntu1	1.15-1ubuntu1.14.04.5+esm2	2
ghcr.io/appscode/inbox-server :latest :postgres-latest	536358d7b17e	wget@1.21.2-2ubuntu1.1	1.21.2-2ubuntu1.3	2
ghcr.io/astriaorg/conductor :latest	3ea8164b0eae	wget@1.21.3-1+deb12u1	no fix listed	2
ghcr.io/bryopsida/k8s-dev-pod :main	82d0b161161d	wget@1.21.4-1ubuntu4.1	1.21.4-1ubuntu4.3	2
ghcr.io/codingducksrl/laravel :8.1	5be52524664c	wget@1.21.2-2ubuntu1	1.21.2-2ubuntu1.3	2
ghcr.io/google/fleetspeak :v0.1.17	cd264d33efd4	wget@1.21.3-1+b2	no fix listed	2
ghcr.io/smarter-project/hydra/isolated-vm :main	4457b79b24cd	wget@1.21.3-1+deb12u1	no fix listed	2
mcr.microsoft.com/azure-sql-edge :latest	902628a8be89	wget@1.20.3-1ubuntu2	1.20.3-1ubuntu2.1+esm2	2
aboogie/login_test_backend :new	9c41a4483ac8	wget@1.21.3-1+b2	no fix listed	1
acryldata/datahub-actions :v1.7.0.1	c5fd70130157	wget@1.25.0-r16	no fix listed	1
acryldata/datahub-frontend-react :v1.7.0.1	99513cc1c45e	wget@1.25.0-r16	no fix listed	1