StackRadar

CVE-2026-58472

High

Advisory

Published 7 Jul 2026In the index since 5 Sept 2026
Severity
High
worst across findings
CVSS
7.1
base score, highest
EPSS
0.002
13th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
507
of 17,787 indexed, latest versions
Container images
492
deployed by those charts
Fix available
2 of 2
affected packages

The matching OSV records carry no description.

Carried by container images the latest versions of 507 of 17,787 indexed charts deploy, on 492 images.

Affected packageAffected versionsFixed inImages
wgetdeb1.15-1ubuntu1, 1.15-1ubuntu1.14.04.1, 1.15-1ubuntu1.14.04.4, 1.17.1-1ubuntu1.3+17 more1.15-1ubuntu1.14.04.5+esm2, 1.17.1-1ubuntu1.5+esm3, 1.19.4-1ubuntu2.2+esm3, 1.20.3-1ubuntu2.1+esm2+3 more488
wgetapk1.25.0-r4, 1.25.0-r161.25.0-r154
OSV records
DEBIAN-CVE-2026-58472CGA-4r22-ccq9-ch88CGA-qpgw-7fv8-2792UBUNTU-CVE-2026-58472
Also known as
USN-8543-1

Charts affected

507 by stars
ChartLatestAffected imagesRadar Score
webhookiewebhookie0.1.21 of 1See more

webhookie webhookie 0.1.2

1 of the 1 container images this version deploys carry CVE-2026-58472.

Container imageDigestPackageFixed in
hookiesolutions/webhookie:latest0629694246ba
wget@1.20.3-1ubuntu1
1.20.3-1ubuntu2.1+esm2

Open the chart page →

14,420
webhookie-allwebhookie0.1.21 of 3See more

webhookie-all webhookie 0.1.2

1 of the 3 container images this version deploys carry CVE-2026-58472.

Container imageDigestPackageFixed in
hookiesolutions/webhookie:latest0629694246ba
wget@1.20.3-1ubuntu1
1.20.3-1ubuntu2.1+esm2

Open the chart page →

28,699
juicefs-csi-driverwenerme0.32.51 of 5See more

juicefs-csi-driver wenerme 0.32.5

1 of the 5 container images this version deploys carry CVE-2026-58472.

Container imageDigestPackageFixed in
juicedata/juicefs-csi-driver:v0.32.595008ba63318
wget@1.21.3-1+deb12u1
no fix listed

Open the chart page →

8,824
jaegerwikimedia3.1.21 of 4See more

jaeger wikimedia 3.1.2

1 of the 4 container images this version deploys carry CVE-2026-58472.

Container imageDigestPackageFixed in
jaegertracing/jaeger-cassandra-schema:1.53.0d48d6dab2c65
wget@1.21.2-2ubuntu1
1.21.2-2ubuntu1.3

Open the chart page →

9,296
playwright-synthetic-monitoringwork-adventure1.0.11 of 1See more

playwright-synthetic-monitoring work-adventure 1.0.1

1 of the 1 container images this version deploys carry CVE-2026-58472.

Container imageDigestPackageFixed in
workadventure/playwright-synthetic-monitoring:main92b664c2a06f
wget@1.21.2-2ubuntu1.1
1.21.2-2ubuntu1.3

Open the chart page →

14,172
xkopsxkops0.1.01 of 5See more

xkops xkops 0.1.0

1 of the 5 container images this version deploys carry CVE-2026-58472.

Container imageDigestPackageFixed in
murtazashah46/helmfile:latest4d11726cf803
wget@1.21.3-1+b2
no fix listed

Open the chart page →

13,197
clickhousezloi-space1.2.01 of 3See more

clickhouse zloi-space 1.2.0

1 of the 3 container images this version deploys carry CVE-2026-58472.

Container imageDigestPackageFixed in
yandex/clickhouse-server:21.3.204eccfffb01d7
wget@1.20.3-1ubuntu2
1.20.3-1ubuntu2.1+esm2

Open the chart page →

9,250

Container images carrying it

492 by charts deploying them

A fixed version is listed for 2 of the 2 affected packages.

Container imageDigestPackageFixed inUsed by
ghcr.io/astriaorg/hermes:0.5.04f33a0a9f75e
wget@1.21.4-1ubuntu4.1
1.21.4-1ubuntu4.3
1
ghcr.io/astriaorg/sequencer:latest44f82ee0b24c
wget@1.21.3-1+deb12u1
no fix listed
1
ghcr.io/astriaorg/sequencer-relayer:latest5f6c74993f08
wget@1.21.3-1+deb12u1
no fix listed
1
ghcr.io/berriai/litellm-database:litellm_stable_release_branch-v1.75.5-stableab63d26a8a2c
wget@1.25.0-r4
1.25.0-r15
1
ghcr.io/brittonhayes/arma-reforger:latest6fde1edc0983
wget@1.20.3-1ubuntu2
1.20.3-1ubuntu2.1+esm2
1
ghcr.io/browserless/chromium:v2.43.0853e6f105b51
wget@1.21.4-1ubuntu4.1
1.21.4-1ubuntu4.3
1
ghcr.io/buanet/iobroker:v9.1.2ca7dc7362968
wget@1.21.3-1+b2
no fix listed
1
ghcr.io/camptocamp/tetragon-policy-builder:master0e99f12bb040
wget@1.21.3-1+b2
no fix listed
1
ghcr.io/camunda-community-hub/zeebe-simple-monitor:2.6.2d9d796a1b846
wget@1.21.2-2ubuntu1
1.21.2-2ubuntu1.3
1
ghcr.io/cjmalloy/jasper:v1.3.282726a947bb65b
wget@1.21.3-1+deb12u1
no fix listed
1
ghcr.io/cohdi/composable-dra-driver:v0.2.28c05f7366981
wget@1.25.0-2
no fix listed
1
ghcr.io/cosmo-tech/cosmotech-copilot-api:latesta2be95de450c
wget@1.25.0-2
no fix listed
1
ghcr.io/cosmo-workspace/dev-code-server:v0.0.316fda01ae58a
wget@1.21.3-1+deb12u1
no fix listed
1
ghcr.io/damap-org/damap-backend:5.0.0f3d0c7d35498
wget@1.21.4-1ubuntu4.1
1.21.4-1ubuntu4.3
1
ghcr.io/dask/dask:2024.1.0080150de7d86
wget@1.20.3-1ubuntu2
1.20.3-1ubuntu2.1+esm2
1
ghcr.io/dask/dask-kubernetes-operator:2026.3.03225d2bc6b3c
wget@1.25.0-2
no fix listed
1
ghcr.io/dask/dask-notebook:2024.1.0f53bde3acd4f
wget@1.21.2-2ubuntu1
1.21.2-2ubuntu1.3
1
ghcr.io/developmentseed/titiler:0.22.48ac53eb38393
wget@1.21.3-1+deb12u1
no fix listed
1
ghcr.io/dfir-iris/iriswebapp_app:v2.4.26e59ebde55709
wget@1.25.0-2
no fix listed
1
ghcr.io/drewburr-labs/mum-discord-bot:3.1.26e82914e1051
wget@1.21.3-1+b2
no fix listed
1
ghcr.io/edgelesssys/edgelessdb-sgx-1gb:v0.3.27e1d7a11a11a
wget@1.20.3-1ubuntu2
1.20.3-1ubuntu2.1+esm2
1
ghcr.io/flanksource/postgres:17.6-497383cebcf66281fc1
wget@1.21.3-1+deb12u1
no fix listed
1
ghcr.io/formancehq/ledger:v1.9.203c1ddbda33b
wget@1.21.2-2ubuntu1
1.21.2-2ubuntu1.3
1
ghcr.io/graphprotocol/availability-oracle:sha-28312fd472a25038957
wget@1.21.3-1+b2
no fix listed
1
ghcr.io/gregperlinli/certvault:2.12.0a7d0cc9e260a
wget@1.21.4-1ubuntu4.1
1.21.4-1ubuntu4.3
1
ghcr.io/grycap/im:latest06a16d4f279f
wget@1.21.4-1ubuntu4.1
1.21.4-1ubuntu4.3
1
ghcr.io/haveagitgat/tdarr:2.00.18.23fbe4c29d14c
wget@1.20.3-1ubuntu2
1.20.3-1ubuntu2.1+esm2
1
ghcr.io/ignisda/ryot:v10.5.0a752b6aee537
wget@1.21.3-1+deb12u1
no fix listed
1
ghcr.io/jfwenisch/discord-experiencebot:latestb52ff07f9f0c
wget@1.19.4-1ubuntu2.2
1.19.4-1ubuntu2.2+esm3
1
ghcr.io/jfwenisch/steamcmd-manager:v0.4.5dab685e668d9
wget@1.21.4-1ubuntu4.1
1.21.4-1ubuntu4.3
1
ghcr.io/jfwenisch/webtools:v0.1.44569cae83c70
wget@1.21.4-1ubuntu4.1
1.21.4-1ubuntu4.3
1
ghcr.io/jr0dd/puppeteer:v13.3.26047599cd78e
wget@1.20.3-1ubuntu2
1.20.3-1ubuntu2.1+esm2
1
ghcr.io/k8s-at-home/nzbget:v21.1e5571acd10ce
wget@1.21.2-2ubuntu1
1.21.2-2ubuntu1.3
1
ghcr.io/kamu-data/kamu-api-server:0.89.04ed7a896dd2b
wget@1.20.3-1ubuntu2.1
1.20.3-1ubuntu2.1+esm2
1
ghcr.io/karakeep-app/karakeep:0.33.2b069e4307dec
wget@1.21.3-1+deb12u1
no fix listed
1
ghcr.io/kore3lab/kore-board.terminal:v0.5.5f52e66eff50b
wget@1.19.4-1ubuntu2.2
1.19.4-1ubuntu2.2+esm3
1
ghcr.io/kubeflow/spark-operator/controller:2.2.1865ff4da5686
wget@1.20.3-1ubuntu2.1
1.20.3-1ubuntu2.1+esm2
1
ghcr.io/kvaps/opennebula:v5.12.0.4-1e28e0e7de11b
wget@1.20.3-1ubuntu1
1.20.3-1ubuntu2.1+esm2
1
ghcr.io/kvaps/opennebula-flow:v5.12.0.4-1600221f0f43f
wget@1.20.3-1ubuntu1
1.20.3-1ubuntu2.1+esm2
1
ghcr.io/libreconnect/ferriscompany:0.1.0-rc6ed86db9f0efe
wget@1.21.3-1+b2
no fix listed
1
ghcr.io/linuxserver/plex:version-1.41.4.9463-630c9f557e6d2775e77ec
wget@1.21.4-1ubuntu4.1
1.21.4-1ubuntu4.3
1
ghcr.io/m9sweeper/trawler:1.6.0df917c5a7e54
wget@1.21.3-1+b2
no fix listed
1
ghcr.io/maastrichtu-ids/rstudio:latest981aa4c109e1
wget@1.21.4-1ubuntu4.1
1.21.4-1ubuntu4.3
1
ghcr.io/mollyim/mollysocket:1.7.1c675622546a4
wget@1.21.3-1+deb12u1
no fix listed
1
ghcr.io/music-assistant/server:2.7.53522e8a7a8f0
wget@1.21.3-1+deb12u1
no fix listed
1
ghcr.io/music-assistant/server:2.9.950666a6f8d7f
wget@1.21.3-1+deb12u1
no fix listed
1
ghcr.io/music-assistant/server:2.10.3885872224fa5
wget@1.25.0-2
no fix listed
1
ghcr.io/music-assistant/server:2.8.7eef3ee7810d0
wget@1.21.3-1+deb12u1
no fix listed
1
ghcr.io/nefelim4ag/pingdom-operator:0.0.15f8c7afdcf439
wget@1.21.3-1+b2
no fix listed
1
ghcr.io/oguzhan-yilmaz/kdiff-snapshots:0.0.2035bc5ca66d55a
wget@1.21.3-1+deb12u1
no fix listed
1

syft 1.42.1 · advisories as of 15 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.