CVE-2026-5958

Low

Advisory

Published 19 Apr 2026In the index since 5 Sept 2026

Severity: Low; worst across findings
CVSS: 2.1; base score, highest
EPSS: 0.001; 4th percentile
CISA KEV: Not listed; no confirmed exploitation
Charts affected: 1,534; of 17,790 indexed, latest versions
Container images: 1,630; deployed by those charts
Fix available: 2 of 2; affected packages

sed-4.10-1.1 on GA media

Carried by container images the latest versions of 1,534 of 17,790 indexed charts deploy, on 1,630 images.

Affected package	Affected versions	Fixed in	Images
seddeb	4.4-2, 4.7-1, 4.8-1ubuntu2, 4.9-1+4 more	4.4-2ubuntu0.1~esm1, 4.7-1ubuntu0.1~esm1, 4.8-1ubuntu2.1, 4.9-1+deb12u1+5 more	1,625
sedrpm	4.4-lp151.3.4, 4.9-160000.2.2	4.9-160000.3.1, 4.10-1.1	5

OSV records: DEBIAN-CVE-2026-5958 UBUNTU-CVE-2026-5958 ECHO-5725-fee5-80cd openSUSE-SU-2026:10649-1 SUSE-SU-2026:22325-1
Also known as: USN-8229-1, USN-8229-2

Charts affected

1,534 by stars

Chart

Latest

Affected images

Radar Score

eth-validatorwateim

1.4.5

1 of 3 See more

eth-validator wateim 1.4.5

1 of the 3 container images this version deploys carry CVE-2026-5958.

Container image	Digest	Package	Fixed in
wateim/lighthouse-launch :latest	2520149ee574	sed@4.8-1ubuntu2	4.8-1ubuntu2.1

Open the chart page →

5,090

sirenwateim

1.0.2

1 of 1 See more

6,007

wazuh-manager-filebeatwazuh-manager-filebeat

0.1.0-gamma

1 of 1 See more

wazuh-manager-filebeat wazuh-manager-filebeat 0.1.0-gamma

1 of the 1 container images this version deploys carry CVE-2026-5958.

Container image	Digest	Package	Fixed in
iosifache/wazuh-manager-filebeat :latest	85df3f04b5da	sed@4.7-1	4.7-1ubuntu0.1~esm1

Open the chart page →

11,171

istio-service-meshwbstack

0.0.1

1 of 1 See more

istio-service-mesh wbstack 0.0.1

1 of the 1 container images this version deploys carry CVE-2026-5958.

Container image	Digest	Package	Fixed in
istio/pilot :1.17.1	ce9d87606701	sed@4.8-1ubuntu2	4.8-1ubuntu2.1

Open the chart page →

6,282

supersetwbstack

0.1.0

1 of 1 See more

superset wbstack 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-5958.

Container image	Digest	Package	Fixed in
apache/superset :4.0.1	ab9467fd712c	sed@4.9-1	4.9-1+deb12u1

Open the chart page →

7,166

wbaas-backupwbstack

0.1.0

1 of 1 See more

wbaas-backup wbstack 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-5958.

Container image	Digest	Package	Fixed in
ghcr.io/wmde/wbaas-backup :v0.1.7	8e6a9516eac0	sed@4.4-2	4.4-2ubuntu0.1~esm1

Open the chart page →

9,752

frank-gatewaywearefrank

0.3.0

1 of 1 See more

frank-gateway wearefrank 0.3.0

1 of the 1 container images this version deploys carry CVE-2026-5958.

Container image	Digest	Package	Fixed in
ghcr.io/wearefrank/frank-gateway :1.0.0	5ccf797ccdf1	sed@4.9-2build1	4.9-2ubuntu0.24.04.1

Open the chart page →

1,118

myweatherhelmwebapp1

1.3.50

2 of 8 See more

myweatherhelm webapp1 1.3.50

2 of the 8 container images this version deploys carry CVE-2026-5958.

Container image	Digest	Package	Fixed in
library/rabbitmq :3-management	e582c0bc7766	sed@4.9-2build1	4.9-2ubuntu0.24.04.1
mcr.microsoft.com/azure-sql-edge :latest	902628a8be89	sed@4.7-1	4.7-1ubuntu0.1~esm1

Open the chart page →

9,252

myweatherhelm-schedulingwebapp1

1.3.92

2 of 9 See more

myweatherhelm-scheduling webapp1 1.3.92

2 of the 9 container images this version deploys carry CVE-2026-5958.

Container image	Digest	Package	Fixed in
library/rabbitmq :3-management	e582c0bc7766	sed@4.9-2build1	4.9-2ubuntu0.24.04.1
mcr.microsoft.com/azure-sql-edge :latest	902628a8be89	sed@4.7-1	4.7-1ubuntu0.1~esm1

Open the chart page →

9,252

web-dvwaweb-dvwa

1.16.0

1 of 2 See more

web-dvwa web-dvwa 1.16.0

1 of the 2 container images this version deploys carry CVE-2026-5958.

Container image	Digest	Package	Fixed in
gulacedia/web-dvwa-new :v3	67b467d961ca	sed@4.9-1	4.9-1+deb12u1

Open the chart page →

10,111

webhookiewebhookie

0.1.2

1 of 1 See more

webhookie webhookie 0.1.2

1 of the 1 container images this version deploys carry CVE-2026-5958.

Container image	Digest	Package	Fixed in
hookiesolutions/webhookie :latest	0629694246ba	sed@4.7-1	4.7-1ubuntu0.1~esm1

Open the chart page →

14,414

webhookie-allwebhookie

0.1.2

2 of 3 See more

webhookie-all webhookie 0.1.2

2 of the 3 container images this version deploys carry CVE-2026-5958.

Container image	Digest	Package	Fixed in
hookiesolutions/webhookie :latest	0629694246ba	sed@4.7-1	4.7-1ubuntu0.1~esm1
library/mongo :4.4	4be76f674fc4	sed@4.7-1	4.7-1ubuntu0.1~esm1

Open the chart page →

28,697

welcome-elos-webappwelcome-elos-webapp

2.0.0

1 of 1 See more

welcome-elos-webapp welcome-elos-webapp 2.0.0

1 of the 1 container images this version deploys carry CVE-2026-5958.

Container image	Digest	Package	Fixed in
pococze/python-hello-elos :2.0.0	7a1aab425e51	sed@4.9-1	4.9-1+deb12u1

Open the chart page →

2,695

apisixwenerme

2.17.0

1 of 3 See more

apisix wenerme 2.17.0

1 of the 3 container images this version deploys carry CVE-2026-5958.

Container image	Digest	Package	Fixed in
bitnamilegacy/etcd :latest	99b408c15272	sed@4.9-1	4.9-1+deb12u1

Open the chart page →

3,118

emissary-ingresswenerme

8.12.2

1 of 2 See more

emissary-ingress wenerme 8.12.2

1 of the 2 container images this version deploys carry CVE-2026-5958.

Container image	Digest	Package	Fixed in
istio/kubectl :1.5.10	dbb7726d1bf0	sed@4.4-2	4.4-2ubuntu0.1~esm1

Open the chart page →

10,859

giteawenerme

12.7.0

3 of 4 See more

gitea wenerme 12.7.0

3 of the 4 container images this version deploys carry CVE-2026-5958.

Container image	Digest	Package	Fixed in
bitnamilegacy/pgpool :4.6.3-debian-12-r0	d3bf3910f148	sed@4.9-1	4.9-1+deb12u1
bitnamilegacy/postgresql-repmgr :17.6.0-debian-12-r2	f12387ec882b	sed@4.9-1	4.9-1+deb12u1
bitnamilegacy/valkey-cluster :8.1.3-debian-12-r3	32869e769b7e	sed@4.9-1	4.9-1+deb12u1

Open the chart page →

8,874

juicefs-csi-driverwenerme

0.32.5

1 of 5 See more

juicefs-csi-driver wenerme 0.32.5

1 of the 5 container images this version deploys carry CVE-2026-5958.

Container image	Digest	Package	Fixed in
juicedata/juicefs-csi-driver :v0.32.5	95008ba63318	sed@4.9-1	4.9-1+deb12u1

Open the chart page →

9,183

longhornwenerme

1.2.3

1 of 2 See more

longhorn wenerme 1.2.3

1 of the 2 container images this version deploys carry CVE-2026-5958.

Container image	Digest	Package	Fixed in
longhornio/longhorn-manager :v1.2.3	dca34321452c	sed@4.7-1	4.7-1ubuntu0.1~esm1

Open the chart page →

15,288

openebswenerme

3.10.0

2 of 3 See more

openebs wenerme 3.10.0

2 of the 3 container images this version deploys carry CVE-2026-5958.

Container image	Digest	Package	Fixed in
openebs/node-disk-manager :2.1.0	f6c18b0f8c8a	sed@4.8-1ubuntu2	4.8-1ubuntu2.1
openebs/node-disk-operator :2.1.0	6afe2123c457	sed@4.8-1ubuntu2	4.8-1ubuntu2.1

Open the chart page →

10,587

wexa-studiowexa-studio

1.2.0

1 of 15 See more

wexa-studio wexa-studio 1.2.0

1 of the 15 container images this version deploys carry CVE-2026-5958.

Container image	Digest	Package	Fixed in
qdrant/qdrant :v1.7.4	5f2a56b95266	sed@4.9-1	4.9-1+deb12u1

Open the chart page →

15,044

jaegerwikimedia

3.1.2

1 of 4 See more

jaeger wikimedia 3.1.2

1 of the 4 container images this version deploys carry CVE-2026-5958.

Container image	Digest	Package	Fixed in
jaegertracing/jaeger-cassandra-schema :1.53.0	d48d6dab2c65	sed@4.8-1ubuntu2	4.8-1ubuntu2.1

Open the chart page →

9,320

elasticsearchwiremind

8.19.0

1 of 1 See more

elasticsearch wiremind 8.19.0

1 of the 1 container images this version deploys carry CVE-2026-5958.

Container image	Digest	Package	Fixed in
library/elasticsearch :8.19.12	89729a95066a	sed@4.9-2build1	4.9-2ubuntu0.24.04.1

Open the chart page →

2,235

keycloakwiremind

25.3.1

2 of 2 See more

keycloak wiremind 25.3.1

2 of the 2 container images this version deploys carry CVE-2026-5958.

Container image	Digest	Package	Fixed in
bitnamilegacy/postgresql :17.6.0-debian-12-r4	926356130b77	sed@4.9-1	4.9-1+deb12u1
ghcr.io/wiremind/bitnami/keycloak :26.5.0-debian-12-r3	8622ea9e43c0	sed@4.9-1	4.9-1+deb12u1

Open the chart page →

7,664

kibanawiremind

8.5.23

1 of 2 See more

kibana wiremind 8.5.23

1 of the 2 container images this version deploys carry CVE-2026-5958.

Container image	Digest	Package	Fixed in
library/kibana :8.18.0	04c0fc150f3a	sed@4.7-1	4.7-1ubuntu0.1~esm1

Open the chart page →

6,326

marge-botwiremind

1.4.4

1 of 1 See more

marge-bot wiremind 1.4.4

1 of the 1 container images this version deploys carry CVE-2026-5958.

Container image	Digest	Package	Fixed in
hiboxsystems/marge-bot :0.14.0	dcffb926e563	sed@4.9-1	4.9-1+deb12u1

Open the chart page →

5,559

rabbitmqwiremind

16.0.17

1 of 1 See more

rabbitmq wiremind 16.0.17

1 of the 1 container images this version deploys carry CVE-2026-5958.

Container image	Digest	Package	Fixed in
ghcr.io/wiremind/bitnami/rabbitmq :4.2.2-debian-12-r1	1572e12bc93c	sed@4.9-1	4.9-1+deb12u1

Open the chart page →

2,496

rediswiremind

23.0.6

1 of 1 See more

redis wiremind 23.0.6

1 of the 1 container images this version deploys carry CVE-2026-5958.

Container image	Digest	Package	Fixed in
ghcr.io/wiremind/bitnami/redis :8.4.0-debian-12-r3	1f0f7ddc4370	sed@4.9-1	4.9-1+deb12u1

Open the chart page →

2,136

playwright-synthetic-monitoringwork-adventure

1.0.1

1 of 1 See more

playwright-synthetic-monitoring work-adventure 1.0.1

1 of the 1 container images this version deploys carry CVE-2026-5958.

Container image	Digest	Package	Fixed in
workadventure/playwright-synthetic-monitoring :main	92b664c2a06f	sed@4.8-1ubuntu2	4.8-1ubuntu2.1

Open the chart page →

14,173

workshop-pipelinesworkshop-pipelines

0.1.6

1 of 2 See more

workshop-pipelines workshop-pipelines 0.1.6

1 of the 2 container images this version deploys carry CVE-2026-5958.

Container image	Digest	Package	Fixed in
ghcr.io/bat-bs/bitnami-pgvector :pg16	19ebe07b4daf	sed@4.9-1	4.9-1+deb12u1

Open the chart page →

11,603

tabbyxd

1.0.6

1 of 2 See more

7,697

xkopsxkops

0.1.0

3 of 5 See more

xkops xkops 0.1.0

3 of the 5 container images this version deploys carry CVE-2026-5958.

Container image	Digest	Package	Fixed in
hamzaarshad10/querybackend :1.6.2	2c1c3b86a8e7	sed@4.9-1	4.9-1+deb12u1
hamzaarshad10/querypodpy :1.7	154f38e8668e	sed@4.9-1	4.9-1+deb12u1
murtazashah46/helmfile :latest	4d11726cf803	sed@4.9-1	4.9-1+deb12u1

Open the chart page →

13,783

xlinexline

0.0.1

1 of 1 See more

xline xline 0.0.1

1 of the 1 container images this version deploys carry CVE-2026-5958.

Container image	Digest	Package	Fixed in
ghcr.io/liangyuanpeng/xline :latest	3d2eceb44a3b	sed@4.9-2build1	4.9-2ubuntu0.24.04.1

Open the chart page →

2,142

api-snapyoukadev

0.1.1

1 of 1 See more

api-snap youkadev 0.1.1

1 of the 1 container images this version deploys carry CVE-2026-5958.

Container image	Digest	Package	Fixed in
youkadev/api-snap :0.1.1	4db0f9428e67	sed@4.9-1	4.9-1+deb12u1

Open the chart page →

2,684

clickhousezloi-space

1.2.0

2 of 3 See more

clickhouse zloi-space 1.2.0

2 of the 3 container images this version deploys carry CVE-2026-5958.

Container image	Digest	Package	Fixed in
yandex/clickhouse-client :21.3	863f94a0f607	sed@4.4-2	4.4-2ubuntu0.1~esm1
yandex/clickhouse-server :21.3.20	4eccfffb01d7	sed@4.7-1	4.7-1ubuntu0.1~esm1

Open the chart page →

9,256

Container images carrying it

1,630 by charts deploying them

A fixed version is listed for 2 of the 2 affected packages.

Container image	Digest	Package	Fixed in	Used by
bitnamilegacy/git :latest	4b08d0c5af8d	sed@4.9-1	4.9-1+deb12u1	1
bitnamilegacy/grafana :11.4.0-debian-12-r0	cb8ab5515676	sed@4.9-1	4.9-1+deb12u1	1
bitnamilegacy/keycloak :24.0.4	cc599cbd15ff	sed@4.9-1	4.9-1+deb12u1	1
bitnamilegacy/keycloak :26.3.3-debian-12-r0	da3df0976a9f	sed@4.9-1	4.9-1+deb12u1	1
bitnamilegacy/kubectl :1.30	1249fc292e84	sed@4.9-1	4.9-1+deb12u1	1
bitnamilegacy/kubectl :1.31	64614ef8290f	sed@4.9-1	4.9-1+deb12u1	1
bitnamilegacy/kubectl :1.30.5	744f84cf7493	sed@4.9-1	4.9-1+deb12u1	1
bitnamilegacy/kubectl :1.29.3	f5fc0d561d9e	sed@4.9-1	4.9-1+deb12u1	1
bitnamilegacy/kube-state-metrics :2	04a3044b384b	sed@4.9-1	4.9-1+deb12u1	1
bitnamilegacy/mariadb :11.3.2-debian-12-r9	320c70dfd914	sed@4.9-1	4.9-1+deb12u1	1
bitnamilegacy/mariadb :11.2.6-debian-12-r0	373c3c260571	sed@4.9-1	4.9-1+deb12u1	1
bitnamilegacy/mariadb :11.4.3-debian-12-r0	8b3778160e34	sed@4.9-1	4.9-1+deb12u1	1
bitnamilegacy/mariadb :11.4.5-debian-12-r12	8bc50a0961a7	sed@4.9-1	4.9-1+deb12u1	1
bitnamilegacy/mariadb :11.4.7-debian-12-r2	90dc6acb7b2e	sed@4.9-1	4.9-1+deb12u1	1
bitnamilegacy/mariadb :latest	bbd4e17f1ef8	sed@4.9-1	4.9-1+deb12u1	1
bitnamilegacy/mariadb-galera :11.3.2-debian-12-r9	aee9c668098f	sed@4.9-1	4.9-1+deb12u1	1
bitnamilegacy/mariadb-galera :11.4.3-debian-12-r0	cb8beb6dbb58	sed@4.9-1	4.9-1+deb12u1	1
bitnamilegacy/matomo :5.3.2-debian-12-r13	f02c000c54b1	sed@4.9-1	4.9-1+deb12u1	1
bitnamilegacy/memcached :1.6.24-debian-12-r0	1d80b6a96f00	sed@4.9-1	4.9-1+deb12u1	1
bitnamilegacy/memcached :1.6.29-debian-12-r4	ff0e7239c17c	sed@4.9-1	4.9-1+deb12u1	1
bitnamilegacy/minio :2024.8.3-debian-12-r1	5501c419f42e	sed@4.9-1	4.9-1+deb12u1	1
bitnamilegacy/minio :2025.7.23-debian-12-r5	6dabb4a2088c	sed@4.9-1	4.9-1+deb12u1	1
bitnamilegacy/minio :2025.7.23-debian-12-r0	8935e75fa5d1	sed@4.9-1	4.9-1+deb12u1	1
bitnamilegacy/minio :2024.7.4-debian-12-r0	952f86d1116c	sed@4.9-1	4.9-1+deb12u1	1
bitnamilegacy/minio :2025.3.12-debian-12-r0	ba9f3b4b0b00	sed@4.9-1	4.9-1+deb12u1	1
bitnamilegacy/minio :2024.12.18-debian-12-r1	c0ede65eb88e	sed@4.9-1	4.9-1+deb12u1	1
bitnamilegacy/minio :2024.12.18-debian-12-r0	cce234b4381a	sed@4.9-1	4.9-1+deb12u1	1
bitnamilegacy/minio :2025.4.22-debian-12-r1	d7cd0e172c4c	sed@4.9-1	4.9-1+deb12u1	1
bitnamilegacy/mongodb :7.0.14-debian-12-r3	21e8f8baa432	sed@4.9-1	4.9-1+deb12u1	1
bitnamilegacy/mongodb :8.0.13-debian-12-r0	2579e968033e	sed@4.9-1	4.9-1+deb12u1	1
bitnamilegacy/mongodb :7.0.8-debian-12-r2	3163c3842bfd	sed@4.9-1	4.9-1+deb12u1	1
bitnamilegacy/mongodb :latest	b0652af9c8d0	sed@4.9-1	4.9-1+deb12u1	1
bitnamilegacy/mysql :8.4.5-debian-12-r0	7089d796fc9b	sed@4.9-1	4.9-1+deb12u1	1
bitnamilegacy/mysqld-exporter :0.15.1-debian-12-r26	11a5f0b79e79	sed@4.9-1	4.9-1+deb12u1	1
bitnamilegacy/nginx :1.27.1	934d1acd5ca8	sed@4.9-1	4.9-1+deb12u1	1
bitnamilegacy/nginx :1.28.0-debian-12-r0	eaf9066e86f6	sed@4.9-1	4.9-1+deb12u1	1
bitnamilegacy/openldap :2.6.8-debian-12-r1	6e412c178ef9	sed@4.9-1	4.9-1+deb12u1	1
bitnamilegacy/opensearch :2.18.0-debian-12-r0	d8440eb6b290	sed@4.9-1	4.9-1+deb12u1	1
bitnamilegacy/os-shell :12-debian-12-r32	17444b4b2c96	sed@4.9-1	4.9-1+deb12u1	1
bitnamilegacy/os-shell :12-debian-12-r43	9ba5d16f9c64	sed@4.9-1	4.9-1+deb12u1	1
bitnamilegacy/os-shell :12-debian-12-r16	d24925821dd2	sed@4.9-1	4.9-1+deb12u1	1
bitnamilegacy/os-shell :12-debian-12-r50	e328cff6e450	sed@4.9-1	4.9-1+deb12u1	1
bitnamilegacy/pgbouncer :1.23.1	92356da09704	sed@4.9-1	4.9-1+deb12u1	1
bitnamilegacy/postgres-exporter :0.17.1-debian-12-r2	0cca9d93a617	sed@4.9-1	4.9-1+deb12u1	1
bitnamilegacy/postgres-exporter :0.15.0-debian-12-r44	e7e1b3a90682	sed@4.9-1	4.9-1+deb12u1	1
bitnamilegacy/postgresql :16.4.0-debian-12-r11	02e2f47a405e	sed@4.9-1	4.9-1+deb12u1	1
bitnamilegacy/postgresql :16.3.0-debian-12-r4	3332e81afb4f	sed@4.9-1	4.9-1+deb12u1	1
bitnamilegacy/postgresql :16.4.0	3ba6e6f11388	sed@4.9-1	4.9-1+deb12u1	1
bitnamilegacy/postgresql :17.5.0-debian-12-r16	687034f33da6	sed@4.9-1	4.9-1+deb12u1	1
bitnamilegacy/postgresql :17.5.0-debian-12-r12	85198aae0aed	sed@4.9-1	4.9-1+deb12u1	1