StackRadarChart IndexLive demo

CVE-2026-59883

Medium

Advisory

Published 20 Jul 2026In the index since 6 Sept 2026

Severity: Medium; worst across findings
CVSS: 4.7; base score, highest
EPSS: 0.002; 6th percentile
CISA KEV: Not listed; no confirmed exploitation
Charts affected: 139; of 17,781 indexed, latest versions
Container images: 123; deployed by those charts
Fix available: 1 of 1; affected package

Guzzle: Cookie Disclosure and Injection via IP-Address Domains

Carried by container images the latest versions of 139 of 17,781 indexed charts deploy, on 123 images.

Affected package	Affected versions	Fixed in	Images
guzzlehttp/guzzlecomposer	5.3.4, 6.3.0, 6.3.3, 6.5.3+20 more	7.12.3	123

OSV records: GHSA-g446-98w2-8p5w

Charts affected

139 by stars

Chart

Latest

Affected images

Radar Score

fossologymidokura-community

1 of 2 See more

fossology midokura-community 0.2.2

1 of the 2 container images this version deploys carry CVE-2026-59883.

Container image	Digest	Package	Fixed in
fossology/fossology :4.2.1	8bd1f22ba7bb	guzzlehttp/guzzle@7.5.0	7.12.3

Open the chart page →

3,294

moodlemoodle

1 of 2 See more

moodle moodle 1.0.3

1 of the 2 container images this version deploys carry CVE-2026-59883.

Container image	Digest	Package	Fixed in
cloudtooling/moodle :5.2.3	f4f04e0fc401	guzzlehttp/guzzle@7.10.0	7.12.3

Open the chart page →

3,954

akauntingnas-helm-charts

1 of 2 See more

akaunting nas-helm-charts 1.0.3

1 of the 2 container images this version deploys carry CVE-2026-59883.

Container image	Digest	Package	Fixed in
akaunting/akaunting :3.0.15	52811b36ec3a	guzzlehttp/guzzle@7.7.0	7.12.3

Open the chart page →

12,813

librenmsnimbolus

1 of 3 See more

librenms nimbolus 0.5.1

1 of the 3 container images this version deploys carry CVE-2026-59883.

Container image	Digest	Package	Fixed in
librenms/librenms :24.11.0	0920bc9117a8	guzzlehttp/guzzle@7.9.2	7.12.3

Open the chart page →

2,293

notification-componentnotification-component

1 of 4 See more

notification-component notification-component 1.0.0

1 of the 4 container images this version deploys carry CVE-2026-59883.

Container image	Digest	Package	Fixed in
ghcr.io/conductionnl/notification-component-php :latest	cd9656e6bc2c	guzzlehttp/guzzle@6.5.5	7.12.3

Open the chart page →

7,527

commonground-gatewayopencatalogi

1 of 7 See more

commonground-gateway opencatalogi 1.5.3

1 of the 7 container images this version deploys carry CVE-2026-59883.

Container image	Digest	Package	Fixed in
ghcr.io/conductionnl/commonground-gateway-php :latest	947882bf2c37	guzzlehttp/guzzle@6.5.8	7.12.3

Open the chart page →

9,724

orderregistratiecomponentorderregistratiecomponent

1 of 3 See more

orderregistratiecomponent orderregistratiecomponent 1.0.0

1 of the 3 container images this version deploys carry CVE-2026-59883.

Container image	Digest	Package	Fixed in
ghcr.io/conductionnl/orderregistratiecomponent-php :latest	d17257e4fa27	guzzlehttp/guzzle@6.5.5	7.12.3

Open the chart page →

7,492

firefly-iiiphntom

1 of 2 See more

firefly-iii phntom 0.2.10

1 of the 2 container images this version deploys carry CVE-2026-59883.

Container image	Digest	Package	Fixed in
phntom/fireflyiii :version-5.7.5	f881ea5fbbf1	guzzlehttp/guzzle@7.4.2	7.12.3

Open the chart page →

1,813

procestypecatalogusprocestypecatalogus

1 of 4 See more

procestypecatalogus procestypecatalogus 1.1.0

1 of the 4 container images this version deploys carry CVE-2026-59883.

Container image	Digest	Package	Fixed in
ghcr.io/conductionnl/procestypecatalogus-php :latest	956c4fb64796	guzzlehttp/guzzle@6.5.5	7.12.3

Open the chart page →

7,429

productenendienstencatalogusproductenendienstencatalogus

1 of 3 See more

productenendienstencatalogus productenendienstencatalogus 1.0.0

1 of the 3 container images this version deploys carry CVE-2026-59883.

Container image	Digest	Package	Fixed in
ghcr.io/conductionnl/productenendienstencatalogus-php :latest	7242da105081	guzzlehttp/guzzle@6.5.5	7.12.3

Open the chart page →

7,510

panproto-application-nldesign

1 of 5 See more

pan proto-application-nldesign 0.1.0

1 of the 5 container images this version deploys carry CVE-2026-59883.

Container image	Digest	Package	Fixed in
conduction/pan-php :dev	24f03c57568f	guzzlehttp/guzzle@6.5.5	7.12.3

Open the chart page →

8,725

proto-component-commongroundproto-component-commonground

1 of 3 See more

proto-component-commonground proto-component-commonground 1.0.0

1 of the 3 container images this version deploys carry CVE-2026-59883.

Container image	Digest	Package	Fixed in
ghcr.io/conductionnl/proto-component-commonground-php :latest	eb36ead1954e	guzzlehttp/guzzle@6.5.5	7.12.3

Open the chart page →

7,510

laravel-workerrenoki-co

1 of 1 See more

laravel-worker renoki-co 1.1.0

1 of the 1 container images this version deploys carry CVE-2026-59883.

Container image	Digest	Package	Fixed in
quay.io/renokico/laravel-helm-demo :worker-0.6.0	4b188259267e	guzzlehttp/guzzle@7.3.0	7.12.3

Open the chart page →

5,687

review-componentreview-component

1 of 3 See more

review-component review-component 1.0.0

1 of the 3 container images this version deploys carry CVE-2026-59883.

Container image	Digest	Package	Fixed in
ghcr.io/conductionnl/review-component-php :latest	afe623824b82	guzzlehttp/guzzle@6.5.5	7.12.3

Open the chart page →

7,491

1 of 6 See more

shopware robjuz 2.0.0

1 of the 6 container images this version deploys carry CVE-2026-59883.

Container image	Digest	Package	Fixed in
shyim/shopware :6.4.6.0	a951c0e6b836	guzzlehttp/guzzle@7.4.0	7.12.3

Open the chart page →

2,972

mauticromholdings

1 of 3 See more

mautic romholdings 0.1.3

1 of the 3 container images this version deploys carry CVE-2026-59883.

Container image	Digest	Package	Fixed in
mautic/mautic :2.13-apache	a954c5868d76	guzzlehttp/guzzle@6.3.0	7.12.3

Open the chart page →

2,939

grocysarab97

1 of 1 See more

grocy sarab97 0.1.1

1 of the 1 container images this version deploys carry CVE-2026-59883.

Container image	Digest	Package	Fixed in
linuxserver/grocy :4.0.1	f8f5f96b6ea8	guzzlehttp/guzzle@7.7.0	7.12.3

Open the chart page →

2,449

nextcloudsb-helm-charts

1 of 2 See more

nextcloud sb-helm-charts 0.4.0

1 of the 2 container images this version deploys carry CVE-2026-59883.

Container image	Digest	Package	Fixed in
library/nextcloud :31.0.10-apache	b7faa1653c39	guzzlehttp/guzzle@7.9.2	7.12.3

Open the chart page →

9,755

bookstackschmitzis

1 of 1 See more

bookstack schmitzis 0.1.1

1 of the 1 container images this version deploys carry CVE-2026-59883.

Container image	Digest	Package	Fixed in
solidnerd/bookstack :21.12	762ffd5c51d3	guzzlehttp/guzzle@7.4.1	7.12.3

Open the chart page →

2,751

snipeitschmitzis

1 of 2 See more

snipeit schmitzis 6.1.0

1 of the 2 container images this version deploys carry CVE-2026-59883.

Container image	Digest	Package	Fixed in
snipe/snipe-it :v8.3.1	141ebf2386fe	guzzlehttp/guzzle@7.9.3	7.12.3

Open the chart page →

6,094

typo3schoolguys-helmcharts

1 of 1 See more

typo3 schoolguys-helmcharts 0.4.2

1 of the 1 container images this version deploys carry CVE-2026-59883.

Container image	Digest	Package	Fixed in
registry.gitlab.com/school_guy/docker-typo3 :13.4.30-197d868e	d76185d7270d	guzzlehttp/guzzle@7.11.0	7.12.3

Open the chart page →

4,836

wallabagsebtiz13-charts

1 of 1 See more

wallabag sebtiz13-charts 0.6.0

1 of the 1 container images this version deploys carry CVE-2026-59883.

Container image	Digest	Package	Fixed in
wallabag/wallabag :2.6.14	4a527e027e0d	guzzlehttp/guzzle@5.3.4	7.12.3

Open the chart page →

1,136

cachetsergiotocalini

1 of 1 See more

cachet sergiotocalini 1.0.0

1 of the 1 container images this version deploys carry CVE-2026-59883.

Container image	Digest	Package	Fixed in
cachethq/docker :2.3.15	a61ff0f67ea7	guzzlehttp/guzzle@6.3.3	7.12.3

Open the chart page →

1,896

commonground-gatewayskeleton-pip

1 of 5 See more

commonground-gateway skeleton-pip 0.1.7

1 of the 5 container images this version deploys carry CVE-2026-59883.

Container image	Digest	Package	Fixed in
ghcr.io/conductionnl/commonground-gateway-php :latest	947882bf2c37	guzzlehttp/guzzle@6.5.8	7.12.3

Open the chart page →

2,825

icingawebsvtech-public-helm-charts

1 of 2 See more

icingaweb svtech-public-helm-charts 1.0.0

1 of the 2 container images this version deploys carry CVE-2026-59883.

Container image	Digest	Package	Fixed in
svtechnmaa/svtech_icingaweb2 :v1.0.2	a59d0b81dde2	guzzlehttp/guzzle@7.8.1	7.12.3

Open the chart page →

2,038

taalhuizen-servicetaalhuizen-service

1 of 3 See more

taalhuizen-service taalhuizen-service 1.0.0

1 of the 3 container images this version deploys carry CVE-2026-59883.

Container image	Digest	Package	Fixed in
ghcr.io/conductionnl/taalhuizen-service-php :latest	04f1b7f0d573	guzzlehttp/guzzle@6.5.5	7.12.3

Open the chart page →

7,480

repmanteam-blue

1 of 5 See more

repman team-blue 0.3.0

1 of the 5 container images this version deploys carry CVE-2026-59883.

Container image	Digest	Package	Fixed in
buddy/repman :1.4.0	097c897f8b54	guzzlehttp/guzzle@6.5.5	7.12.3

Open the chart page →

3,993

nextcloudth-charts

1 of 1 See more

nextcloud th-charts 0.4.0

1 of the 1 container images this version deploys carry CVE-2026-59883.

Container image	Digest	Package	Fixed in
library/nextcloud :31.0.6-apache	588609d76b21	guzzlehttp/guzzle@7.9.2	7.12.3

Open the chart page →

10,086

owncloudth-charts

1 of 1 See more

owncloud th-charts 0.2.1

1 of the 1 container images this version deploys carry CVE-2026-59883.

Container image	Digest	Package	Fixed in
owncloud/server :10.15.0	51d9b74fc2a8	guzzlehttp/guzzle@7.8.1	7.12.3

Open the chart page →

10,006

trouw-servicetrouw-service

1 of 3 See more

trouw-service trouw-service 1.0.0

1 of the 3 container images this version deploys carry CVE-2026-59883.

Container image	Digest	Package	Fixed in
ghcr.io/conductionnl/trouw-service-php :latest	f745e2870692	guzzlehttp/guzzle@6.5.5	7.12.3

Open the chart page →

7,510

verhuis-serviceverhuis-service

1 of 3 See more

verhuis-service verhuis-service 1.0.0

1 of the 3 container images this version deploys carry CVE-2026-59883.

Container image	Digest	Package	Fixed in
ghcr.io/conductionnl/verhuis-service-php :latest	66bbaf95a123	guzzlehttp/guzzle@6.5.5	7.12.3

Open the chart page →

7,510

verzoekconversieserviceverzoekconversieservice

1 of 3 See more

verzoekconversieservice verzoekconversieservice 1.0.0

1 of the 3 container images this version deploys carry CVE-2026-59883.

Container image	Digest	Package	Fixed in
ghcr.io/conductionnl/verzoekconversieservice-php :latest	e918014fb8d3	guzzlehttp/guzzle@6.5.5	7.12.3

Open the chart page →

7,528

verzoekregistratiecomponentverzoekregistratiecomponent

1 of 4 See more

verzoekregistratiecomponent verzoekregistratiecomponent 1.1.0

1 of the 4 container images this version deploys carry CVE-2026-59883.

Container image	Digest	Package	Fixed in
ghcr.io/conductionnl/verzoekregistratiecomponent-php :latest	c4f6c03af5d3	guzzlehttp/guzzle@6.5.5	7.12.3

Open the chart page →

7,429

verzoektypecatalogusverzoektypecatalogus

1 of 4 See more

verzoektypecatalogus verzoektypecatalogus 1.1.0

1 of the 4 container images this version deploys carry CVE-2026-59883.

Container image	Digest	Package	Fixed in
ghcr.io/conductionnl/verzoektypecatalogus-php :latest	64f5eb7a398b	guzzlehttp/guzzle@6.5.5	7.12.3

Open the chart page →

7,429

apiwbstack

1 of 1 See more

api wbstack 0.36.0

1 of the 1 container images this version deploys carry CVE-2026-59883.

Container image	Digest	Package	Fixed in
ghcr.io/wbstack/api :8x.9.11	eee94f9f7a53	guzzlehttp/guzzle@6.5.8	7.12.3

Open the chart page →

2,019

mediawikiwbstack

1 of 1 See more

mediawiki wbstack 0.14.0

1 of the 1 container images this version deploys carry CVE-2026-59883.

Container image	Digest	Package	Fixed in
ghcr.io/wbstack/mediawiki :1.37-7.4-20220621-fp-beta-0	c3012c8a34b4	guzzlehttp/guzzle@7.2.0	7.12.3

Open the chart page →

2,132

tool-quickstatementswbstack

1 of 1 See more

tool-quickstatements wbstack 0.4.0

1 of the 1 container images this version deploys carry CVE-2026-59883.

Container image	Digest	Package	Fixed in
ghcr.io/wbstack/quickstatements :1.3.5	88423e422ea8	guzzlehttp/guzzle@7.4.0	7.12.3

Open the chart page →

1,698

webresourcecataloguswebresourcecatalogus

1 of 4 See more

webresourcecatalogus webresourcecatalogus 1.1.0

1 of the 4 container images this version deploys carry CVE-2026-59883.

Container image	Digest	Package	Fixed in
ghcr.io/conductionnl/webresourcecatalogus-php :latest	8f1bbd5cda85	guzzlehttp/guzzle@6.5.5	7.12.3

Open the chart page →

7,552

xboardxboard

1 of 1 See more

xboard xboard 0.2.0

1 of the 1 container images this version deploys carry CVE-2026-59883.

Container image	Digest	Package	Fixed in
ghcr.io/cedar2025/xboard :latest	896e4926e0d7	guzzlehttp/guzzle@7.10.0	7.12.3

Open the chart page →

1,042

Container images carrying it

123 by charts deploying them

A fixed version is listed for 1 of the 1 affected package.

Container image	Digest	Package	Fixed in	Used by
ghcr.io/conductionnl/verhuis-service-php :latest	66bbaf95a123	guzzlehttp/guzzle@6.5.5	7.12.3	1
ghcr.io/conductionnl/verzoekconversieservice-php :latest	e918014fb8d3	guzzlehttp/guzzle@6.5.5	7.12.3	1
ghcr.io/conductionnl/verzoekregistratiecomponent-php :latest	c4f6c03af5d3	guzzlehttp/guzzle@6.5.5	7.12.3	1
ghcr.io/conductionnl/verzoektypecatalogus-php :latest	64f5eb7a398b	guzzlehttp/guzzle@6.5.5	7.12.3	1
ghcr.io/conductionnl/waardepapieren-balie-php :latest	f36c423cd259	guzzlehttp/guzzle@6.5.5	7.12.3	1
ghcr.io/conductionnl/waardepapieren-php :latest	b2666ffcbad8	guzzlehttp/guzzle@6.5.5	7.12.3	1
ghcr.io/conductionnl/waardepapieren-register-php :latest	9affab218351	guzzlehttp/guzzle@6.5.5	7.12.3	1
ghcr.io/conductionnl/webresourcecatalogus-php :latest	8f1bbd5cda85	guzzlehttp/guzzle@6.5.5	7.12.3	1
ghcr.io/linuxserver/bookstack :version-v24.12.1	cc795b254b73	guzzlehttp/guzzle@7.9.2	7.12.3	1
ghcr.io/linuxserver/bookstack :version-v21.12	f05447347ff1	guzzlehttp/guzzle@7.4.1	7.12.3	1
ghcr.io/monicahq/monica-next :main	8be69156acbb	guzzlehttp/guzzle@7.9.3	7.12.3	1
ghcr.io/nathanvaughn/webtrees :2.2.6	034151b61a80	guzzlehttp/guzzle@7.10.0	7.12.3	1
ghcr.io/nathanvaughn/webtrees :2.0.19	69423a100fab	guzzlehttp/guzzle@6.5.5	7.12.3	1
ghcr.io/open-telemetry/demo :1.12.0-quoteservice	87eb325d306f	guzzlehttp/guzzle@7.8.1	7.12.3	1
ghcr.io/tasmoadmin/tasmoadmin :v3.3.2	05aeefbdac2b	guzzlehttp/guzzle@7.8.1	7.12.3	1
ghcr.io/wbstack/api :8x.9.11	eee94f9f7a53	guzzlehttp/guzzle@6.5.8	7.12.3	1
ghcr.io/wbstack/mediawiki :1.37-7.4-20220621-fp-beta-0	c3012c8a34b4	guzzlehttp/guzzle@7.2.0	7.12.3	1
ghcr.io/wbstack/quickstatements :1.3.5	88423e422ea8	guzzlehttp/guzzle@7.4.0	7.12.3	1
public.ecr.aws/supportpal/helpdesk-monolithic :4.0.4	573779e57fae	guzzlehttp/guzzle@7.4.2	7.12.3	1
quay.io/renokico/laravel-helm-demo :0.6.0	3207f957e80c	guzzlehttp/guzzle@7.3.0	7.12.3	1
quay.io/renokico/laravel-helm-demo :worker-0.6.0	4b188259267e	guzzlehttp/guzzle@7.3.0	7.12.3	1
quay.io/renokico/laravel-helm-demo :octane-0.6.0	cad83090c58f	guzzlehttp/guzzle@7.3.0	7.12.3	1
registry.gitlab.com/school_guy/docker-typo3 :13.4.30-197d868e	d76185d7270d	guzzlehttp/guzzle@7.11.0	7.12.3	1