StackRadar

CVE-2026-58472

High

Advisory

Published 7 Jul 2026In the index since 5 Sept 2026
Severity
High
worst across findings
CVSS
7.1
base score, highest
EPSS
0.002
13th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
507
of 17,787 indexed, latest versions
Container images
492
deployed by those charts
Fix available
2 of 2
affected packages

The matching OSV records carry no description.

Carried by container images the latest versions of 507 of 17,787 indexed charts deploy, on 492 images.

Affected packageAffected versionsFixed inImages
wgetdeb1.15-1ubuntu1, 1.15-1ubuntu1.14.04.1, 1.15-1ubuntu1.14.04.4, 1.17.1-1ubuntu1.3+17 more1.15-1ubuntu1.14.04.5+esm2, 1.17.1-1ubuntu1.5+esm3, 1.19.4-1ubuntu2.2+esm3, 1.20.3-1ubuntu2.1+esm2+3 more488
wgetapk1.25.0-r4, 1.25.0-r161.25.0-r154
OSV records
DEBIAN-CVE-2026-58472CGA-4r22-ccq9-ch88CGA-qpgw-7fv8-2792UBUNTU-CVE-2026-58472
Also known as
USN-8543-1

Charts affected

507 by stars
ChartLatestAffected imagesRadar Score
webhookiewebhookie0.1.21 of 1See more

webhookie webhookie 0.1.2

1 of the 1 container images this version deploys carry CVE-2026-58472.

Container imageDigestPackageFixed in
hookiesolutions/webhookie:latest0629694246ba
wget@1.20.3-1ubuntu1
1.20.3-1ubuntu2.1+esm2

Open the chart page →

14,420
webhookie-allwebhookie0.1.21 of 3See more

webhookie-all webhookie 0.1.2

1 of the 3 container images this version deploys carry CVE-2026-58472.

Container imageDigestPackageFixed in
hookiesolutions/webhookie:latest0629694246ba
wget@1.20.3-1ubuntu1
1.20.3-1ubuntu2.1+esm2

Open the chart page →

28,699
juicefs-csi-driverwenerme0.32.51 of 5See more

juicefs-csi-driver wenerme 0.32.5

1 of the 5 container images this version deploys carry CVE-2026-58472.

Container imageDigestPackageFixed in
juicedata/juicefs-csi-driver:v0.32.595008ba63318
wget@1.21.3-1+deb12u1
no fix listed

Open the chart page →

8,824
jaegerwikimedia3.1.21 of 4See more

jaeger wikimedia 3.1.2

1 of the 4 container images this version deploys carry CVE-2026-58472.

Container imageDigestPackageFixed in
jaegertracing/jaeger-cassandra-schema:1.53.0d48d6dab2c65
wget@1.21.2-2ubuntu1
1.21.2-2ubuntu1.3

Open the chart page →

9,296
playwright-synthetic-monitoringwork-adventure1.0.11 of 1See more

playwright-synthetic-monitoring work-adventure 1.0.1

1 of the 1 container images this version deploys carry CVE-2026-58472.

Container imageDigestPackageFixed in
workadventure/playwright-synthetic-monitoring:main92b664c2a06f
wget@1.21.2-2ubuntu1.1
1.21.2-2ubuntu1.3

Open the chart page →

14,172
xkopsxkops0.1.01 of 5See more

xkops xkops 0.1.0

1 of the 5 container images this version deploys carry CVE-2026-58472.

Container imageDigestPackageFixed in
murtazashah46/helmfile:latest4d11726cf803
wget@1.21.3-1+b2
no fix listed

Open the chart page →

13,197
clickhousezloi-space1.2.01 of 3See more

clickhouse zloi-space 1.2.0

1 of the 3 container images this version deploys carry CVE-2026-58472.

Container imageDigestPackageFixed in
yandex/clickhouse-server:21.3.204eccfffb01d7
wget@1.20.3-1ubuntu2
1.20.3-1ubuntu2.1+esm2

Open the chart page →

9,250

Container images carrying it

492 by charts deploying them

A fixed version is listed for 2 of the 2 affected packages.

Container imageDigestPackageFixed inUsed by
theradius/loggia:0.463ba348546ec
wget@1.21.3-1+b2
no fix listed
1
thijsvanloef/palworld-server-docker:v2.7.1401d3eb5c053
wget@1.25.0-2
no fix listed
1
thijsvanloef/palworld-server-docker:v2.5.0b4ac9ee22483
wget@1.25.0-2
no fix listed
1
thingsboard/tb-postgres:latest2d17e4e36edc
wget@1.21.3-1+deb12u1
no fix listed
1
thmmniii/fbs-core:v1.27.15438517d9fc2
wget@1.21.2-2ubuntu1
1.21.2-2ubuntu1.3
1
thongngo3301/stakefish:latesta341af5976e3
wget@1.21.3-1+b2
no fix listed
1
timothyclarke/wptagent:2018-01-2322c41e5ca7e2
wget@1.17.1-1ubuntu1.3
1.17.1-1ubuntu1.5+esm3
1
tinymediamanager/tinymediamanager:5.3.22b34dc85099e
wget@1.25.0-2
no fix listed
1
treskon/portrait-web-setup:DEV-latesta475d80e4ecf
wget@1.21.3-1+b2
no fix listed
1
trinodb/trino:405ee80ab5eeab2
wget@1.21.2-2ubuntu1
1.21.2-2ubuntu1.3
1
trueosiris/vrising:latest9356f98ad561
wget@1.21.2-2ubuntu1.1
1.21.2-2ubuntu1.3
1
unitycatalog/unitycatalog-ui:main-aadc6fc3a688197b218
wget@1.21.3-1+deb12u1
no fix listed
1
vinanrra/7dtd-server:v0.4.4f9534490bd2b
wget@1.19.4-1ubuntu2.2
1.19.4-1ubuntu2.2+esm3
1
vlebediantsev/notes-admin-front:latest007c6670ff48
wget@1.21.3-1+b2
no fix listed
1
vlebediantsev/notes-project-front:latest945675fd2636
wget@1.21.3-1+b2
no fix listed
1
vlebediantsev/registration-ms-front-app-host:latest54f69d116c50
wget@1.21.3-1+b2
no fix listed
1
voltha/voltha-cli:1.6.0c4e41e92f046
wget@1.17.1-1ubuntu1.4
1.17.1-1ubuntu1.5+esm3
1
voltha/voltha-netconf:1.6.037f80524c207
wget@1.17.1-1ubuntu1.4
1.17.1-1ubuntu1.5+esm3
1
voltha/voltha-ofagent:1.6.09ee8c1f4428c
wget@1.17.1-1ubuntu1.4
1.17.1-1ubuntu1.5+esm3
1
voltha/voltha-tester:1.7.0655c3048a602
wget@1.17.1-1ubuntu1.5
1.17.1-1ubuntu1.5+esm3
1
wallarm/aih-scanner:2.7.11f1cb26db1f5b
wget@1.25.0-2
no fix listed
1
wger/server:2.6997ead43aabd
wget@1.21.4-1ubuntu4.1
1.21.4-1ubuntu4.3
1
wiktorn/overpass-api:latest9bb5f4a9b54c
wget@1.21.3-1+deb12u1
no fix listed
1
wistefan/mvf:lateste0887302b2d8
wget@1.21.2-2ubuntu1
1.21.2-2ubuntu1.3
1
workadventure/playwright-synthetic-monitoring:main92b664c2a06f
wget@1.21.2-2ubuntu1.1
1.21.2-2ubuntu1.3
1
xeotek/kadeck:6.3.439a3b37a17c5
wget@1.21.2-2ubuntu1.1
1.21.2-2ubuntu1.3
1
xeotek/kadeck:4.2.94c6b04d9ce55
wget@1.20.3-1ubuntu2
1.20.3-1ubuntu2.1+esm2
1
xom4ekp2p/infini-route-attestators-public-mainnet-attester:latestd0e0aa238b02
wget@1.21.3-1+b2
no fix listed
1
xom4ekp2p/infini-route-attestators-public-mainnet-avs-webapi:latest2745b5fd8785
wget@1.21.3-1+b2
no fix listed
1
yandex/clickhouse-server:latest1cbf75aabe1e
wget@1.20.3-1ubuntu2
1.20.3-1ubuntu2.1+esm2
1
yandex/clickhouse-server:21.3.204eccfffb01d7
wget@1.20.3-1ubuntu2
1.20.3-1ubuntu2.1+esm2
1
yandex/clickhouse-server:19.17ab1738a64b70
wget@1.19.4-1ubuntu2.2
1.19.4-1ubuntu2.2+esm3
1
yandex/clickhouse-server:19.14ccf9c2b5e3f2
wget@1.19.4-1ubuntu2.2
1.19.4-1ubuntu2.2+esm3
1
yandex/clickhouse-server:19.16d210dc69321e
wget@1.19.4-1ubuntu2.2
1.19.4-1ubuntu2.2+esm3
1
zabbix/zabbix-server-mysql:ubuntu-6.4-latest55d074b6b031
wget@1.21.4-1ubuntu4.1
1.21.4-1ubuntu4.3
1
zabbix/zabbix-server-pgsql:ubuntu-5.4.66c946b1f45cd
wget@1.20.3-1ubuntu1
1.20.3-1ubuntu2.1+esm2
1
zabbix/zabbix-server-pgsql:ubuntu-7.0.237e8c8e059533
wget@1.21.4-1ubuntu4.1
1.21.4-1ubuntu4.3
1
zabbix/zabbix-server-pgsql:ubuntu-6.0.8d59ffa07f615
wget@1.21.2-2ubuntu1
1.21.2-2ubuntu1.3
1
gcr.io/kubecost1/cost-model:prod-1.108.1852f7923fad3
wget@1.21.2-2ubuntu1
1.21.2-2ubuntu1.3
1
gcr.io/ml-pipeline/api-server:2.3.039661bd823e8
wget@1.21.3-1+b2
no fix listed
1
gcr.io/ml-pipeline/metadata-writer:2.3.09bcfd2abc361
wget@1.21.3-1+b2
no fix listed
1
ghcr.io/apache/flink-kubernetes-operator:c703255e9c2ce635b89
wget@1.21.2-2ubuntu1.1
1.21.2-2ubuntu1.3
1
ghcr.io/appscode/gotenberg:8.25f9104080d9a7
wget@1.25.0-2
no fix listed
1
ghcr.io/appscode/inbox-server:MailetGroup4a2824296412
wget@1.21.2-2ubuntu1
1.21.2-2ubuntu1.3
1
ghcr.io/appscode/s3proxy:sha-a82ca6820518335f9f9
wget@1.21.2-2ubuntu1
1.21.2-2ubuntu1.3
1
ghcr.io/astriaorg/account-monitor:latest4c8b42890035
wget@1.21.3-1+deb12u1
no fix listed
1
ghcr.io/astriaorg/astrotrek:0.1.05889bea38e56
wget@1.21.3-1+b1
no fix listed
1
ghcr.io/astriaorg/auctioneer:pr-18391386b7b5e555
wget@1.21.3-1+b2
no fix listed
1
ghcr.io/astriaorg/conductor:1.1.01f97d131b1d1
wget@1.21.3-1+b2
no fix listed
1
ghcr.io/astriaorg/evm-bridge-withdrawer:1.0.29c88e1aff357
wget@1.21.3-1+b2
no fix listed
1

syft 1.42.1 · advisories as of 15 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.