StackRadar

CVE-2026-59856

High

Advisory

Published 9 Jul 2026In the index since 5 Sept 2026
Severity
High
worst across findings
CVSS
7.8
base score, highest
EPSS
0.002
12th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
69
of 17,781 indexed, latest versions
Container images
64
deployed by those charts
Fix available
1 of 1
affected package

The matching OSV records carry no description.

Carried by container images the latest versions of 69 of 17,781 indexed charts deploy, on 64 images.

Affected packageAffected versionsFixed inImages
vimdeb2:8.2.3995-1ubuntu2, 2:8.2.3995-1ubuntu2.3, 2:8.2.3995-1ubuntu2.15, 2:8.2.3995-1ubuntu2.16+13 more2:8.2.3995-1ubuntu2.34, 2:9.1.0016-1ubuntu7.18, 2:9.1.2141-1ubuntu4.764
OSV records
DEBIAN-CVE-2026-59856UBUNTU-CVE-2026-59856
Also known as
USN-8541-1

Charts affected

69 by stars
ChartLatestAffected imagesRadar Score
jupyterhubjupyterhubOfficialVerified publisher4.4.21 of 7See more

jupyterhub jupyterhub 4.4.2

1 of the 7 container images this version deploys carry CVE-2026-59856.

Container imageDigestPackageFixed in
quay.io/jupyterhub/k8s-hub:4.4.2108fbb01c3fe
vim@2:9.0.1378-2+deb12u2
no fix listed

Open the chart page →

7,894
netdatanetdataVerified publisher3.7.1731 of 1See more

netdata netdata 3.7.173

1 of the 1 container images this version deploys carry CVE-2026-59856.

Container imageDigestPackageFixed in
netdata/netdata:v2.11.0c45c71eb23ff
vim@2:9.1.1230-2
no fix listed

Open the chart page →

3,092
clearmlallegroaiOfficialVerified publisher7.15.01 of 4See more

clearml allegroai 7.15.0

1 of the 4 container images this version deploys carry CVE-2026-59856.

Container imageDigestPackageFixed in
allegroai/clearml:2.0.0-613713ae38f7daf
vim@2:9.0.1378-2
no fix listed

Open the chart page →

10,622
uffizzi-controlleruffizzi-controller2.4.61 of 11See more

uffizzi-controller uffizzi-controller 2.4.6

1 of the 11 container images this version deploys carry CVE-2026-59856.

Container imageDigestPackageFixed in
uffizzi/controller:latest0344805f267b
vim@2:9.0.1378-2
no fix listed

Open the chart page →

14,240
dolibarrcowboysysopVerified publisher9.0.31 of 3See more

dolibarr cowboysysop 9.0.3

1 of the 3 container images this version deploys carry CVE-2026-59856.

Container imageDigestPackageFixed in
dolibarr/dolibarr:22.0.47ad88fc9b13c
vim@2:9.0.1378-2+deb12u2
no fix listed

Open the chart page →

9,106
seafiledatamateVerified publisher0.6.01 of 6See more

seafile datamate 0.6.0

1 of the 6 container images this version deploys carry CVE-2026-59856.

Container imageDigestPackageFixed in
datamate/seafile-professional:11.0.202dd66b722464
vim@2:8.2.3995-1ubuntu2.24
2:8.2.3995-1ubuntu2.34

Open the chart page →

27,267
dolibarrhelmforgeVerified publisher1.2.181 of 3See more

dolibarr helmforge 1.2.18

1 of the 3 container images this version deploys carry CVE-2026-59856.

Container imageDigestPackageFixed in
dolibarr/dolibarr:24.0.069ec52e3b7ef
vim@2:9.0.1378-2+deb12u2
no fix listed

Open the chart page →

4,109
uffizzi-appuffizzi-app1.3.01 of 14See more

uffizzi-app uffizzi-app 1.3.0

1 of the 14 container images this version deploys carry CVE-2026-59856.

Container imageDigestPackageFixed in
uffizzi/controller:latest0344805f267b
vim@2:9.0.1378-2
no fix listed

Open the chart page →

19,337
dayz-dedicated-serverjespernohrVerified publisher0.1.21 of 3See more

dayz-dedicated-server jespernohr 0.1.2

1 of the 3 container images this version deploys carry CVE-2026-59856.

Container imageDigestPackageFixed in
ghcr.io/jespernohr/dayz-dedicated-server:0.1.1ec01d3ac7887
vim@2:9.1.0016-1ubuntu7.3
2:9.1.0016-1ubuntu7.18

Open the chart page →

4,309
apache-rangerapache-ranger0.1.01 of 2See more

apache-ranger apache-ranger 0.1.0

1 of the 2 container images this version deploys carry CVE-2026-59856.

Container imageDigestPackageFixed in
apache/ranger:2.7.076c176e8a0e4
vim@2:8.2.3995-1ubuntu2.24
2:8.2.3995-1ubuntu2.34

Open the chart page →

7,740
aramid-indexerbiatec-repoVerified publisher3.9.03 of 5See more

aramid-indexer biatec-repo 3.9.0

3 of the 5 container images this version deploys carry CVE-2026-59856.

Container imageDigestPackageFixed in
scholtz2/aramid-algo-follow-node:v4.3.0-stable1ec63eca86b6
vim@2:9.1.0016-1ubuntu7.9
2:9.1.0016-1ubuntu7.18
scholtz2/aramid-conduit:v1.9.0-stable3a3b3d3277d2
vim@2:9.1.2141-1ubuntu4.5
2:9.1.2141-1ubuntu4.7
scholtz2/aramid-indexer:v3.9.0-stable6770214bc881
vim@2:9.1.2141-1ubuntu4.5
2:9.1.2141-1ubuntu4.7

Open the chart page →

13,357
aramid-participationbiatec-repoVerified publisher4.4.11 of 1See more

aramid-participation biatec-repo 4.4.1

1 of the 1 container images this version deploys carry CVE-2026-59856.

Container imageDigestPackageFixed in
scholtz2/algorand-participation-aramidmain-extended:4.4.1-stablef12ce1cfb72e
vim@2:8.2.3995-1ubuntu2.19
2:8.2.3995-1ubuntu2.34

Open the chart page →

7,190
aramid-relaybiatec-repoVerified publisher4.4.11 of 1See more

aramid-relay biatec-repo 4.4.1

1 of the 1 container images this version deploys carry CVE-2026-59856.

Container imageDigestPackageFixed in
scholtz2/aramid-algo-node:v4.4.1-stable70263d8fab5b
vim@2:9.1.0016-1ubuntu7.9
2:9.1.0016-1ubuntu7.18

Open the chart page →

5,059
voimain-participationbiatec-repoVerified publisher4.4.11 of 1See more

voimain-participation biatec-repo 4.4.1

1 of the 1 container images this version deploys carry CVE-2026-59856.

Container imageDigestPackageFixed in
scholtz2/algorand-participation-voimain-extended:4.4.1-stable64966de56d9f
vim@2:8.2.3995-1ubuntu2.19
2:8.2.3995-1ubuntu2.34

Open the chart page →

7,190
seafiledr300481Verified publisher0.12.11 of 1See more

seafile dr300481 0.12.1

1 of the 1 container images this version deploys carry CVE-2026-59856.

Container imageDigestPackageFixed in
seafileltd/seafile-mc:11.0.12d0c66e4621bd
vim@2:8.2.3995-1ubuntu2.17
2:8.2.3995-1ubuntu2.34

Open the chart page →

10,858
dragonfly-stackdragonflyVerified publisher0.1.21 of 7See more

dragonfly-stack dragonfly 0.1.2

1 of the 7 container images this version deploys carry CVE-2026-59856.

Container imageDigestPackageFixed in
dragonflyoss/client:v0.1.82edf3e921f4e0
vim@2:9.0.1378-2
no fix listed

Open the chart page →

18,376
sonarrgeek-cookbookVerified publisher16.3.21 of 1See more

sonarr geek-cookbook 16.3.2

1 of the 1 container images this version deploys carry CVE-2026-59856.

Container imageDigestPackageFixed in
ghcr.io/k8s-at-home/sonarr:v3.0.8.15070eb230e2381a
vim@2:8.2.3995-1ubuntu2
2:8.2.3995-1ubuntu2.34

Open the chart page →

13,025
IMgrycapOfficialVerified publisher1.8.01 of 3See more

IM grycap 1.8.0

1 of the 3 container images this version deploys carry CVE-2026-59856.

Container imageDigestPackageFixed in
ghcr.io/grycap/im:latest06a16d4f279f
vim@2:9.1.0016-1ubuntu7.9
2:9.1.0016-1ubuntu7.18

Open the chart page →

4,132
difykubeblocksVerified publisher0.5.11 of 5See more

dify kubeblocks 0.5.1

1 of the 5 container images this version deploys carry CVE-2026-59856.

Container imageDigestPackageFixed in
langgenius/dify-api:0.6.11fca918260dd6
vim@2:9.0.1378-2
no fix listed

Open the chart page →

20,403
flaresolverrlib42Verified publisher2.0.01 of 1See more

flaresolverr lib42 2.0.0

1 of the 1 container images this version deploys carry CVE-2026-59856.

Container imageDigestPackageFixed in
ghcr.io/flaresolverr/flaresolverr:v3.4.0ab535d1fef5d
vim@2:9.0.1378-2+deb12u2
no fix listed

Open the chart page →

35,050
flaresolverrm0nsterrr-flaresolverrVerified publisher2.4.11 of 1See more

flaresolverr m0nsterrr-flaresolverr 2.4.1

1 of the 1 container images this version deploys carry CVE-2026-59856.

Container imageDigestPackageFixed in
ghcr.io/flaresolverr/flaresolverr:v3.5.2c80ae007ce2c
vim@2:9.0.1378-2+deb12u2
no fix listed

Open the chart page →

6,136
opsopsVerified publisher1.2.01 of 2See more

ops ops 1.2.0

1 of the 2 container images this version deploys carry CVE-2026-59856.

Container imageDigestPackageFixed in
shaowenchen/ops-server:latest315444f703f4
vim@2:8.2.3995-1ubuntu2.24
2:8.2.3995-1ubuntu2.34

Open the chart page →

8,939
fluent-bitromanow-helm-chartsVerified publisher1.7.31 of 1See more

fluent-bit romanow-helm-charts 1.7.3

1 of the 1 container images this version deploys carry CVE-2026-59856.

Container imageDigestPackageFixed in
fluent/fluent-bit:4.0-debuge76397ef3983
vim@2:9.0.1378-2+deb12u2
no fix listed

Open the chart page →

7,740
postgresql-singlesinextraVerified publisher1.15.11 of 1See more

postgresql-single sinextra 1.15.1

1 of the 1 container images this version deploys carry CVE-2026-59856.

Container imageDigestPackageFixed in
ghcr.io/sergelogvinov/postgresql:16.15fafb72e98f22
vim@2:9.0.1378-2+deb12u2
no fix listed

Open the chart page →

4,913
flaresolverralexmorbo-flaresolverrVerified publisher0.2.01 of 1See more

flaresolverr alexmorbo-flaresolverr 0.2.0

1 of the 1 container images this version deploys carry CVE-2026-59856.

Container imageDigestPackageFixed in
flaresolverr/flaresolverr:v3.5.0139dfee1c6f8
vim@2:9.0.1378-2+deb12u2
no fix listed

Open the chart page →

27,274
algorand-participationbiatec-repoVerified publisher4.4.11 of 1See more

algorand-participation biatec-repo 4.4.1

1 of the 1 container images this version deploys carry CVE-2026-59856.

Container imageDigestPackageFixed in
scholtz2/algorand-participation-mainnet-extended:4.4.1-stable5aaa5d4ab8b8
vim@2:8.2.3995-1ubuntu2.19
2:8.2.3995-1ubuntu2.34

Open the chart page →

7,190
algorand-relaybiatec-repoVerified publisher4.4.11 of 1See more

algorand-relay biatec-repo 4.4.1

1 of the 1 container images this version deploys carry CVE-2026-59856.

Container imageDigestPackageFixed in
scholtz2/algorand-relay-mainnet:4.4.1-stablee9af7d8ff6bb
vim@2:9.1.0016-1ubuntu7.9
2:9.1.0016-1ubuntu7.18

Open the chart page →

5,059
flaresolverrbrandan-schmitz-helm-chartsVerified publisher1.4.01 of 1See more

flaresolverr brandan-schmitz-helm-charts 1.4.0

1 of the 1 container images this version deploys carry CVE-2026-59856.

Container imageDigestPackageFixed in
flaresolverr/flaresolverr:v3.5.0139dfee1c6f8
vim@2:9.0.1378-2+deb12u2
no fix listed

Open the chart page →

27,274
node-appbryopsida0.5.11 of 2See more

node-app bryopsida 0.5.1

1 of the 2 container images this version deploys carry CVE-2026-59856.

Container imageDigestPackageFixed in
ghcr.io/bryopsida/k8s-dev-pod:main82d0b161161d
vim@2:9.1.0016-1ubuntu7.8
2:9.1.0016-1ubuntu7.18

Open the chart page →

14,352
camellia-redis-proxycamellia-redis-proxy1.4.01 of 2See more

camellia-redis-proxy camellia-redis-proxy 1.4.0

1 of the 2 container images this version deploys carry CVE-2026-59856.

Container imageDigestPackageFixed in
48n6e/camellia-redis-proxy:1.4.0-jdk-21-0.0.1a6ed886fddfc
vim@2:9.0.1378-2+deb12u2
no fix listed

Open the chart page →

8,001
arbitrumchronicleVerified publisher0.3.41 of 1See more

arbitrum chronicle 0.3.4

1 of the 1 container images this version deploys carry CVE-2026-59856.

Container imageDigestPackageFixed in
offchainlabs/nitro-node:v3.7.6-c0fe95e9f779fa84b7b
vim@2:9.0.1378-2+deb12u2
no fix listed

Open the chart page →

6,998
kube-acp-stackcloudentity2.28.01 of 7See more

kube-acp-stack cloudentity 2.28.0

1 of the 7 container images this version deploys carry CVE-2026-59856.

Container imageDigestPackageFixed in
timescale/timescaledb-ha:pg17.2-ts2.18.2e8d0a9cc3db5
vim@2:8.2.3995-1ubuntu2.23
2:8.2.3995-1ubuntu2.34

Open the chart page →

20,900
galaxycloudve6.8.61 of 3See more

galaxy cloudve 6.8.6

1 of the 3 container images this version deploys carry CVE-2026-59856.

Container imageDigestPackageFixed in
quay.io/galaxyproject/galaxy-min:26.1.12c324c9789f5
vim@2:9.1.1230-2
no fix listed

Open the chart page →

4,601
dev-code-servercosmoVerified publisher0.0.71 of 2See more

dev-code-server cosmo 0.0.7

1 of the 2 container images this version deploys carry CVE-2026-59856.

Container imageDigestPackageFixed in
ghcr.io/cosmo-workspace/dev-code-server:v0.0.316fda01ae58a
vim@2:9.0.1378-2+deb12u2
no fix listed

Open the chart page →

14,559
jupyterhubd4nVerified publisher3.3.71 of 7See more

jupyterhub d4n 3.3.7

1 of the 7 container images this version deploys carry CVE-2026-59856.

Container imageDigestPackageFixed in
aristidetm/basic-notebook:3.6.5469dbc951224
vim@2:9.0.1378-2
no fix listed

Open the chart page →

16,604
argocd-certificate-refreshdevtron0.10.81 of 1See more

argocd-certificate-refresh devtron 0.10.8

1 of the 1 container images this version deploys carry CVE-2026-59856.

Container imageDigestPackageFixed in
quay.io/devtron/argocd-cert-refresh:v102b6db27eaf3d
vim@2:8.2.3995-1ubuntu2.3
2:8.2.3995-1ubuntu2.34

Open the chart page →

12,949
argocd-certificate-refreshdevtron-labs0.10.81 of 1See more

argocd-certificate-refresh devtron-labs 0.10.8

1 of the 1 container images this version deploys carry CVE-2026-59856.

Container imageDigestPackageFixed in
quay.io/devtron/argocd-cert-refresh:v102b6db27eaf3d
vim@2:8.2.3995-1ubuntu2.3
2:8.2.3995-1ubuntu2.34

Open the chart page →

12,949
truecommanddjjudas21Verified publisher0.1.01 of 1See more

truecommand djjudas21 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-59856.

Container imageDigestPackageFixed in
ixsystems/truecommand:3.2.019c218455cd2
vim@2:9.1.1230-2
no fix listed

Open the chart page →

5,174
dominodomino-iisasVerified publisher0.3.11 of 3See more

domino domino-iisas 0.3.1

1 of the 3 container images this version deploys carry CVE-2026-59856.

Container imageDigestPackageFixed in
ghcr.io/iisas/domino-frontend:k8s8e53861be292
vim@2:9.0.1378-2+deb12u2
no fix listed

Open the chart page →

10,270
arbitrumdysnixVerified publisher0.1.11 of 1See more

arbitrum dysnix 0.1.1

1 of the 1 container images this version deploys carry CVE-2026-59856.

Container imageDigestPackageFixed in
offchainlabs/nitro-node:v3.1.0-7d1d84ce95865866129
vim@2:9.0.1378-2
no fix listed

Open the chart page →

9,244
nzbgetgeek-cookbookVerified publisher12.4.21 of 1See more

nzbget geek-cookbook 12.4.2

1 of the 1 container images this version deploys carry CVE-2026-59856.

Container imageDigestPackageFixed in
ghcr.io/k8s-at-home/nzbget:v21.1e5571acd10ce
vim@2:8.2.3995-1ubuntu2
2:8.2.3995-1ubuntu2.34

Open the chart page →

12,076
radarrgeek-cookbookVerified publisher16.3.21 of 1See more

radarr geek-cookbook 16.3.2

1 of the 1 container images this version deploys carry CVE-2026-59856.

Container imageDigestPackageFixed in
ghcr.io/k8s-at-home/radarr:v4.1.0.61754273dfaf0295
vim@2:8.2.3995-1ubuntu2
2:8.2.3995-1ubuntu2.34

Open the chart page →

10,379
helixhelix1.4.31 of 2See more

helix helix 1.4.3

1 of the 2 container images this version deploys carry CVE-2026-59856.

Container imageDigestPackageFixed in
quay.io/jupyterhub/k8s-hub:4.3.492f883d09270
vim@2:9.0.1378-2+deb12u2
no fix listed

Open the chart page →

5,568
jupyterhubhelmforgeVerified publisher1.0.61 of 3See more

jupyterhub helmforge 1.0.6

1 of the 3 container images this version deploys carry CVE-2026-59856.

Container imageDigestPackageFixed in
quay.io/jupyterhub/k8s-hub:4.3.5113e372cf71b
vim@2:9.0.1378-2+deb12u2
no fix listed

Open the chart page →

5,341
hyperglance-helmhyperglance-helmVerified publisher10.0.53 of 6See more

hyperglance-helm hyperglance-helm 10.0.5

3 of the 6 container images this version deploys carry CVE-2026-59856.

Container imageDigestPackageFixed in
hyperglance/init:wildfly467ad8491bc3
vim@2:8.2.3995-1ubuntu2.27
2:8.2.3995-1ubuntu2.34
hyperglance/init:postgres9fd5faf1fe80
vim@2:8.2.3995-1ubuntu2.27
2:8.2.3995-1ubuntu2.34
hyperglance/init:apacheb2f8c6d52623
vim@2:8.2.3995-1ubuntu2.27
2:8.2.3995-1ubuntu2.34

Open the chart page →

10,967
bluesky-pdsijmacd1.0.01 of 2See more

bluesky-pds ijmacd 1.0.0

1 of the 2 container images this version deploys carry CVE-2026-59856.

Container imageDigestPackageFixed in
arunvelsriram/utils:latest655ad18fd8d6
vim@2:9.1.0016-1ubuntu7.8
2:9.1.0016-1ubuntu7.18

Open the chart page →

8,967
cloudshellinseefrlab4.3.01 of 2See more

cloudshell inseefrlab 4.3.0

1 of the 2 container images this version deploys carry CVE-2026-59856.

Container imageDigestPackageFixed in
inseefrlab/shelly:cloudshell31f04ca7436b
vim@2:8.2.3995-1ubuntu2.15
2:8.2.3995-1ubuntu2.34

Open the chart page →

10,494
intelowlintelowl-helm6.6.1-01-06-20261 of 5See more

intelowl intelowl-helm 6.6.1-01-06-2026

1 of the 5 container images this version deploys carry CVE-2026-59856.

Container imageDigestPackageFixed in
intelowlproject/intelowl:v6.6.10b22e547ea6b
vim@2:9.0.1378-2+deb12u2
no fix listed

Open the chart page →

17,852
dayz-dedicated-server-razorbladex401jespernohrVerified publisher1.0.31 of 1See more

dayz-dedicated-server-razorbladex401 jespernohr 1.0.3

1 of the 1 container images this version deploys carry CVE-2026-59856.

Container imageDigestPackageFixed in
razorbladex401/dayz:latest6a4d79248e7d
vim@2:8.2.3995-1ubuntu2.16
2:8.2.3995-1ubuntu2.34

Open the chart page →

5,208
k8s-dev-podk8s-dev-pod0.3.11 of 1See more

k8s-dev-pod k8s-dev-pod 0.3.1

1 of the 1 container images this version deploys carry CVE-2026-59856.

Container imageDigestPackageFixed in
ghcr.io/bryopsida/k8s-dev-pod:main82d0b161161d
vim@2:9.1.0016-1ubuntu7.8
2:9.1.0016-1ubuntu7.18

Open the chart page →

8,811

Container images carrying it

64 by charts deploying them

A fixed version is listed for 1 of the 1 affected package.

Container imageDigestPackageFixed inUsed by
ghcr.io/flaresolverr/flaresolverr:v3.4.0ab535d1fef5d
vim@2:9.0.1378-2+deb12u2
no fix listed
1
ghcr.io/grycap/im:latest06a16d4f279f
vim@2:9.1.0016-1ubuntu7.9
2:9.1.0016-1ubuntu7.18
1
ghcr.io/iisas/domino-frontend:k8s8e53861be292
vim@2:9.0.1378-2+deb12u2
no fix listed
1
ghcr.io/jespernohr/dayz-dedicated-server:0.1.1ec01d3ac7887
vim@2:9.1.0016-1ubuntu7.3
2:9.1.0016-1ubuntu7.18
1
ghcr.io/k8s-at-home/nzbget:v21.1e5571acd10ce
vim@2:8.2.3995-1ubuntu2
2:8.2.3995-1ubuntu2.34
1
ghcr.io/k8s-at-home/radarr:v4.1.0.61754273dfaf0295
vim@2:8.2.3995-1ubuntu2
2:8.2.3995-1ubuntu2.34
1
ghcr.io/k8s-at-home/sonarr:v3.0.8.15070eb230e2381a
vim@2:8.2.3995-1ubuntu2
2:8.2.3995-1ubuntu2.34
1
ghcr.io/runwhen-contrib/runwhen-local:0.12.0533ce58c6e02
vim@2:9.1.1230-2
no fix listed
1
ghcr.io/samr037/node-debug-dashboard:0.3.0c79b2e64a211
vim@2:9.0.1378-2+deb12u2
no fix listed
1
ghcr.io/sergelogvinov/postgresql:16.15fafb72e98f22
vim@2:9.0.1378-2+deb12u2
no fix listed
1
quay.io/galaxyproject/galaxy-min:26.1.12c324c9789f5
vim@2:9.1.1230-2
no fix listed
1
quay.io/jupyterhub/k8s-hub:4.4.2108fbb01c3fe
vim@2:9.0.1378-2+deb12u2
no fix listed
1
quay.io/jupyterhub/k8s-hub:4.3.5113e372cf71b
vim@2:9.0.1378-2+deb12u2
no fix listed
1
quay.io/jupyterhub/k8s-hub:4.3.492f883d09270
vim@2:9.0.1378-2+deb12u2
no fix listed
1

syft 1.42.1 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.