StackRadar

CVE-2026-6042

Medium

Advisory

Published 10 Apr 2026In the index since 5 Sept 2026
Severity
Medium
worst across findings
CVSS
4.8
base score, highest
EPSS
0.002
15th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
1,056
of 17,787 indexed, latest versions
Container images
1,114
deployed by those charts
Fix available
1 of 2
affected packages

The matching OSV records carry no description.

Carried by container images the latest versions of 1,056 of 17,787 indexed charts deploy, on 1,114 images.

Affected packageAffected versionsFixed inImages
muslapk1.2.4_git20230717-r4, 1.2.4_git20230717-r5, 1.2.5-r0, 1.2.5-r1+4 more1.2.4_git20230717-r6, 1.2.5-r2, 1.2.5-r10, 1.2.5-r11+2 more1,113
musldeb1.2.2-4no fix listed1
OSV records
ALPINE-CVE-2026-6042UBUNTU-CVE-2026-6042

Charts affected

1,056 by stars
ChartLatestAffected imagesRadar Score
argocdargo-helm-charts1.0.02 of 3See more

argocd argo-helm-charts 1.0.0

2 of the 3 container images this version deploys carry CVE-2026-6042.

Container imageDigestPackageFixed in
ghcr.io/dexidp/dex:v2.42.18186d6dd81f4
musl@1.2.5-r9
1.2.5-r10
public.ecr.aws/docker/library/redis:7.2.8-alpinec88ea2979a49
musl@1.2.5-r9
1.2.5-r10

Open the chart page →

7,338
resource-provisioningassist-iot-resource-provisioning1.0.01 of 7See more

resource-provisioning assist-iot-resource-provisioning 1.0.0

1 of the 7 container images this version deploys carry CVE-2026-6042.

Container imageDigestPackageFixed in
assistiot/resource-provisioning_im:1.0.0a942dc14030a
musl@1.2.4_git20230717-r4
1.2.4_git20230717-r6

Open the chart page →

8,042
smartorchestratorassist-iot-smart-orchestrator4.0.02 of 14See more

smartorchestrator assist-iot-smart-orchestrator 4.0.0

2 of the 14 container images this version deploys carry CVE-2026-6042.

Container imageDigestPackageFixed in
assistiot/smart-orchestrator_helm:latest9bb46ea14e8e
musl@1.2.4_git20230717-r4
1.2.4_git20230717-r6
devopsfaith/krakend:latestf8bdaa8a1a43
musl@1.2.5-r9
1.2.5-r10

Open the chart page →

42,460
traffic-classificationassist-iot-traffic-classification2.0.01 of 2See more

traffic-classification assist-iot-traffic-classification 2.0.0

1 of the 2 container images this version deploys carry CVE-2026-6042.

Container imageDigestPackageFixed in
assistiot/traffic-classification_api:2.0.0e32b87786142
musl@1.2.4_git20230717-r4
1.2.4_git20230717-r6

Open the chart page →

1,165
celestia-localastria9.0.02 of 2See more

celestia-local astria 9.0.0

2 of the 2 container images this version deploys carry CVE-2026-6042.

Container imageDigestPackageFixed in
ghcr.io/celestiaorg/celestia-app:v6.1.0-rc0a604aefa3fae
musl@1.2.5-r10
1.2.5-r11
ghcr.io/celestiaorg/celestia-node:v0.27.5-mocha4768ea1c5fd2
musl@1.2.5-r0
1.2.5-r2

Open the chart page →

3,281
celestia-nodeastria0.7.11 of 1See more

celestia-node astria 0.7.1

1 of the 1 container images this version deploys carry CVE-2026-6042.

Container imageDigestPackageFixed in
ghcr.io/celestiaorg/celestia-node:v0.27.5-mocha4768ea1c5fd2
musl@1.2.5-r0
1.2.5-r2

Open the chart page →

1,502
evm-rollupastria4.1.01 of 2See more

evm-rollup astria 4.1.0

1 of the 2 container images this version deploys carry CVE-2026-6042.

Container imageDigestPackageFixed in
ghcr.io/astriaorg/astria-geth:latest4249e403225a
musl@1.2.5-r10
1.2.5-r11

Open the chart page →

3,921
evm-stackastria5.0.31 of 2See more

evm-stack astria 5.0.3

1 of the 2 container images this version deploys carry CVE-2026-6042.

Container imageDigestPackageFixed in
ghcr.io/astriaorg/astria-geth:latest4249e403225a
musl@1.2.5-r10
1.2.5-r11

Open the chart page →

3,921
flame-rollupastria0.1.31 of 2See more

flame-rollup astria 0.1.3

1 of the 2 container images this version deploys carry CVE-2026-6042.

Container imageDigestPackageFixed in
ghcr.io/astriaorg/flame:0.1.0c8af1c5aae40
musl@1.2.5-r9
1.2.5-r10

Open the chart page →

3,587
sequencerastria4.0.01 of 3See more

sequencer astria 4.0.0

1 of the 3 container images this version deploys carry CVE-2026-6042.

Container imageDigestPackageFixed in
cometbft/cometbft:v0.38.1722c2ac018f40
musl@1.2.5-r8
1.2.5-r10

Open the chart page →

6,239
sequencer-faucetastria0.9.21 of 1See more

sequencer-faucet astria 0.9.2

1 of the 1 container images this version deploys carry CVE-2026-6042.

Container imageDigestPackageFixed in
ghcr.io/astriaorg/seq-faucet:0.9.0bf3cb9b505b6
musl@1.2.5-r0
1.2.5-r2

Open the chart page →

1,312
attestkeepattestkeepVerified publisher1.1.01 of 2See more

attestkeep attestkeep 1.1.0

1 of the 2 container images this version deploys carry CVE-2026-6042.

Container imageDigestPackageFixed in
library/postgres:16.4-alpine5660c2cbfea5
musl@1.2.5-r0
1.2.5-r2

Open the chart page →

1,588
krakendbaboulinet0.1.341 of 1See more

krakend baboulinet 0.1.34

1 of the 1 container images this version deploys carry CVE-2026-6042.

Container imageDigestPackageFixed in
devopsfaith/krakend:2.7.09219cda867e2
musl@1.2.4_git20230717-r4
1.2.4_git20230717-r6

Open the chart page →

1,191
qbittorrent-vpnbdclark-helm-chartsVerified publisher0.7.61 of 2See more

qbittorrent-vpn bdclark-helm-charts 0.7.6

1 of the 2 container images this version deploys carry CVE-2026-6042.

Container imageDigestPackageFixed in
qmcgaw/gluetun:v3.41.11a5bf4b4820a
musl@1.2.5-r10
1.2.5-r11

Open the chart page →

1,010
bluesky-pdsbear0.4.2081 of 1See more

bluesky-pds bear 0.4.208

1 of the 1 container images this version deploys carry CVE-2026-6042.

Container imageDigestPackageFixed in
ghcr.io/bluesky-social/pds:0.4.208637083d9369d
musl@1.2.5-r21
1.2.5-r22

Open the chart page →

2,137
helm-samplebehnambm-helm-chart1.0.11 of 3See more

helm-sample behnambm-helm-chart 1.0.1

1 of the 3 container images this version deploys carry CVE-2026-6042.

Container imageDigestPackageFixed in
behnambm/docker-sample:v1bd3ad88afff9
musl@1.2.5-r0
1.2.5-r2

Open the chart page →

2,738
firehoseblip-firehoseVerified publisher0.0.181 of 11See more

firehose blip-firehose 0.0.18

1 of the 11 container images this version deploys carry CVE-2026-6042.

Container imageDigestPackageFixed in
blipai/deckard:0.0.28737d5d19a312
musl@1.2.4_git20230717-r4
1.2.4_git20230717-r6

Open the chart page →

13,499
grafanabook-k8sinfra-v28.8.21 of 1See more

grafana book-k8sinfra-v2 8.8.2

1 of the 1 container images this version deploys carry CVE-2026-6042.

Container imageDigestPackageFixed in
grafana/grafana:11.4.0d8ea37798ccc
musl@1.2.5-r0
1.2.5-r2

Open the chart page →

1,800
jenkinsbook-k8sinfra-v25.1.121 of 2See more

jenkins book-k8sinfra-v2 5.1.12

1 of the 2 container images this version deploys carry CVE-2026-6042.

Container imageDigestPackageFixed in
kiwigrid/k8s-sidecar:1.26.2e271016441af
musl@1.2.4_git20230717-r4
1.2.4_git20230717-r6

Open the chart page →

7,627
kube-prometheus-stackbook-k8sinfra-v265.5.12 of 6See more

kube-prometheus-stack book-k8sinfra-v2 65.5.1

2 of the 6 container images this version deploys carry CVE-2026-6042.

Container imageDigestPackageFixed in
grafana/grafana:11.2.2-security-01464eac539793
musl@1.2.5-r0
1.2.5-r2
kiwigrid/k8s-sidecar:1.28.04166a019eeaf
musl@1.2.5-r0
1.2.5-r2

Open the chart page →

6,035
tempobook-k8sinfra-v21.10.31 of 1See more

tempo book-k8sinfra-v2 1.10.3

1 of the 1 container images this version deploys carry CVE-2026-6042.

Container imageDigestPackageFixed in
grafana/tempo:2.5.0f0200a9bff6d
musl@1.2.5-r0
1.2.5-r2

Open the chart page →

1,859
branchdbbranch-dbVerified publisher0.1.41 of 3See more

branchdb branch-db 0.1.4

1 of the 3 container images this version deploys carry CVE-2026-6042.

Container imageDigestPackageFixed in
curlimages/curl:8.5.008e466006f08
musl@1.2.4_git20230717-r4
1.2.4_git20230717-r6

Open the chart page →

517
bitmagnetbrandan-schmitz-helm-chartsVerified publisher1.0.61 of 2See more

bitmagnet brandan-schmitz-helm-charts 1.0.6

1 of the 2 container images this version deploys carry CVE-2026-6042.

Container imageDigestPackageFixed in
ghcr.io/bitmagnet-io/bitmagnet:v0.10.0cf2c16fac5b5
musl@1.2.5-r9
1.2.5-r10

Open the chart page →

1,721
overseerrbrandan-schmitz-helm-chartsVerified publisher1.4.01 of 1See more

overseerr brandan-schmitz-helm-charts 1.4.0

1 of the 1 container images this version deploys carry CVE-2026-6042.

Container imageDigestPackageFixed in
linuxserver/overseerr:1.35.06108ed066d4a
musl@1.2.5-r10
1.2.5-r11

Open the chart page →

3,072
openmctbryopsida0.1.11 of 1See more

openmct bryopsida 0.1.1

1 of the 1 container images this version deploys carry CVE-2026-6042.

Container imageDigestPackageFixed in
ghcr.io/bryopsida/openmct:main38b6a50a62b2
musl@1.2.5-r9
1.2.5-r10

Open the chart page →

951
syslog-portalbryopsida0.3.11 of 1See more

syslog-portal bryopsida 0.3.1

1 of the 1 container images this version deploys carry CVE-2026-6042.

Container imageDigestPackageFixed in
ghcr.io/bryopsida/syslog-portal:main3947bfd04f49
musl@1.2.5-r10
1.2.5-r11

Open the chart page →

1,306
memcachedbysamioVerified publisher1.0.21 of 1See more

memcached bysamio 1.0.2

1 of the 1 container images this version deploys carry CVE-2026-6042.

Container imageDigestPackageFixed in
library/memcached:1.6.24-alpineeff78098089f
musl@1.2.4_git20230717-r4
1.2.4_git20230717-r6

Open the chart page →

311
kafkacagriekinVerified publisher0.2.01 of 2See more

kafka cagriekin 0.2.0

1 of the 2 container images this version deploys carry CVE-2026-6042.

Container imageDigestPackageFixed in
apache/kafka:4.1.0bff074a5d005
musl@1.2.5-r10
1.2.5-r11

Open the chart page →

2,399
stable-hacalltelemetry0.11.43 of 7See more

stable-ha calltelemetry 0.11.4

3 of the 7 container images this version deploys carry CVE-2026-6042.

Container imageDigestPackageFixed in
library/nats:2.10.12-alpinebca70839d953
musl@1.2.4_git20230717-r4
1.2.4_git20230717-r6
natsio/nats-box:0.14.2e808e0644ce1
musl@1.2.4_git20230717-r4
1.2.4_git20230717-r6
natsio/nats-server-config-reloader:0.14.10d50270fa374
musl@1.2.4_git20230717-r4
1.2.4_git20230717-r6

Open the chart page →

4,705
temporalcastaiVerified publisher0.54.24 of 14See more

temporal castai 0.54.2

4 of the 14 container images this version deploys carry CVE-2026-6042.

Container imageDigestPackageFixed in
grafana/grafana:11.0.00dc5a246ab16
musl@1.2.4_git20230717-r4
1.2.4_git20230717-r6
temporalio/admin-tools:1.26.237e2e33dbd7b
musl@1.2.5-r0
1.2.5-r2
temporalio/server:1.26.21e2626efcbc1
musl@1.2.5-r0
1.2.5-r2
temporalio/ui:2.33.05c586a3c8ec5
musl@1.2.4_git20230717-r4
1.2.4_git20230717-r6

Open the chart page →

16,197
catalyst-agentscatalyst-agents0.1.302 of 18See more

catalyst-agents catalyst-agents 0.1.30

2 of the 18 container images this version deploys carry CVE-2026-6042.

Container imageDigestPackageFixed in
alpine/k8s:1.32.3eec354133193
musl@1.2.5-r9
1.2.5-r10
grafana/tempo:2.5.0f0200a9bff6d
musl@1.2.5-r0
1.2.5-r2

Open the chart page →

14,865
cert-manager-alidns-webhookcert-manager-alidns-webhook0.1.41 of 1See more

cert-manager-alidns-webhook cert-manager-alidns-webhook 0.1.4

1 of the 1 container images this version deploys carry CVE-2026-6042.

Container imageDigestPackageFixed in
ghcr.io/crazygit/cert-manager-alidns-webhook:0.1.4976be6506eb6
musl@1.2.5-r21
1.2.5-r22

Open the chart page →

1,321
cert-manager-desec-webhookcert-manager-desec-webhook1.0.11 of 1See more

cert-manager-desec-webhook cert-manager-desec-webhook 1.0.1

1 of the 1 container images this version deploys carry CVE-2026-6042.

Container imageDigestPackageFixed in
ghcr.io/luzifer/cert-manager-desec-webhook:v1.0.1fa1f6b2e9a6e
musl@1.2.5-r8
1.2.5-r10

Open the chart page →

1,263
cert-manager-webhook-abioncert-manager-webhook-abion1.3.21 of 1See more

cert-manager-webhook-abion cert-manager-webhook-abion 1.3.2

1 of the 1 container images this version deploys carry CVE-2026-6042.

Container imageDigestPackageFixed in
abiondevelopment/cert-manager-webhook-abion:latestc741988fbd23
musl@1.2.5-r9
1.2.5-r10

Open the chart page →

1,087
cert-manager-webhook-pdnscert-manager-webhook-pdns3.2.51 of 1See more

cert-manager-webhook-pdns cert-manager-webhook-pdns 3.2.5

1 of the 1 container images this version deploys carry CVE-2026-6042.

Container imageDigestPackageFixed in
zachomedia/cert-manager-webhook-pdns:v2.5.54940e227a39b
musl@1.2.5-r21
1.2.5-r22

Open the chart page →

1,073
cross-seedcfi20176.13.61 of 1See more

cross-seed cfi2017 6.13.6

1 of the 1 container images this version deploys carry CVE-2026-6042.

Container imageDigestPackageFixed in
ghcr.io/cross-seed/cross-seed:6.13.381afafdd96a5
musl@1.2.5-r10
1.2.5-r11

Open the chart page →

1,339
qbittorrentcfi20176.13.31 of 1See more

qbittorrent cfi2017 6.13.3

1 of the 1 container images this version deploys carry CVE-2026-6042.

Container imageDigestPackageFixed in
ghcr.io/cross-seed/cross-seed:6.13.381afafdd96a5
musl@1.2.5-r10
1.2.5-r11

Open the chart page →

1,339
suggestarrcharliecharts0.4.41 of 1See more

suggestarr charliecharts 0.4.4

1 of the 1 container images this version deploys carry CVE-2026-6042.

Container imageDigestPackageFixed in
ciuse99/suggestarr:v1.0.20d72768245ef5
musl@1.2.5-r9
1.2.5-r10

Open the chart page →

1,124
charon-relaycharonOfficialVerified publisher0.8.01 of 2See more

charon-relay charon 0.8.0

1 of the 2 container images this version deploys carry CVE-2026-6042.

Container imageDigestPackageFixed in
alpine/kubectl:1.35.2ec8f734b0a10
musl@1.2.5-r21
1.2.5-r22

Open the chart page →

4,409
dv-podcharonOfficialVerified publisher0.19.11 of 5See more

dv-pod charon 0.19.1

1 of the 5 container images this version deploys carry CVE-2026-6042.

Container imageDigestPackageFixed in
obolnetwork/charon-dkg-sidecar:maine263be0a7440
musl@1.2.5-r21
1.2.5-r22

Open the chart page →

7,457
ghostchart-ghost0.1.51 of 2See more

ghost chart-ghost 0.1.5

1 of the 2 container images this version deploys carry CVE-2026-6042.

Container imageDigestPackageFixed in
library/ghost:6.22.0-alpine3.23ac533a6988ee
musl@1.2.5-r21
1.2.5-r22

Open the chart page →

4,083
yas3pcharts-derwitt-devVerified publisher0.3.11 of 1See more

yas3p charts-derwitt-dev 0.3.1

1 of the 1 container images this version deploys carry CVE-2026-6042.

Container imageDigestPackageFixed in
denniswitt/yas3p:0.2.488a235619af6
musl@1.2.5-r21
1.2.5-r22

Open the chart page →

737
chatgpt-next-webchatgpt-next-web0.1.11 of 1See more

chatgpt-next-web chatgpt-next-web 0.1.1

1 of the 1 container images this version deploys carry CVE-2026-6042.

Container imageDigestPackageFixed in
yidadaa/chatgpt-next-web:latesteaaa469ddeeb
musl@1.2.5-r9
1.2.5-r10

Open the chart page →

1,977
checker-edgechecker-edge1.1.111 of 1See more

checker-edge checker-edge 1.1.11

1 of the 1 container images this version deploys carry CVE-2026-6042.

Container imageDigestPackageFixed in
ghcr.io/imcitius/checker-edge:1.1.1174426c1fe00f
musl@1.2.5-r9
1.2.5-r10

Open the chart page →

660
pathling-serverchglVerified publisher0.10.111 of 3See more

pathling-server chgl 0.10.11

1 of the 3 container images this version deploys carry CVE-2026-6042.

Container imageDigestPackageFixed in
cloudpirates/image-minio:RELEASE.2025-10-15T17-29-55Z-hardened8dc02a7e5093
musl@1.2.5-r9
1.2.5-r10

Open the chart page →

961
supersetchoerodon1.0.01 of 3See more

superset choerodon 1.0.0

1 of the 3 container images this version deploys carry CVE-2026-6042.

Container imageDigestPackageFixed in
apache/superset:dockerizeafe59523a6c8
musl@1.2.4_git20230717-r4
1.2.4_git20230717-r6

Open the chart page →

1,439
dnsbl-exporterchristianhuthVerified publisher1.4.01 of 2See more

dnsbl-exporter christianhuth 1.4.0

1 of the 2 container images this version deploys carry CVE-2026-6042.

Container imageDigestPackageFixed in
ghcr.io/luzilla/unbound:v0.7.0-rc3252613692e5e
musl@1.2.4_git20230717-r4
1.2.4_git20230717-r6

Open the chart page →

1,459
kubevirt-managerchristianhuthVerified publisher0.7.01 of 1See more

kubevirt-manager christianhuth 0.7.0

1 of the 1 container images this version deploys carry CVE-2026-6042.

Container imageDigestPackageFixed in
kubevirtmanager/kubevirt-manager:1.5.41b98f1b5977a
musl@1.2.5-r21
1.2.5-r22

Open the chart page →

1,986
mailcow-exporterchristianhuthVerified publisher1.5.01 of 1See more

mailcow-exporter christianhuth 1.5.0

1 of the 1 container images this version deploys carry CVE-2026-6042.

Container imageDigestPackageFixed in
ghcr.io/mailcow/prometheus-exporter:2.1.0cb76395b84eb
musl@1.2.5-r9
1.2.5-r10

Open the chart page →

607
ethereumchronicleVerified publisher0.3.11 of 1See more

ethereum chronicle 0.3.1

1 of the 1 container images this version deploys carry CVE-2026-6042.

Container imageDigestPackageFixed in
ethereum/client-go:v1.16.532b878e4144a
musl@1.2.5-r10
1.2.5-r11

Open the chart page →

1,350

Container images carrying it

1,114 by charts deploying them

A fixed version is listed for 1 of the 2 affected packages.

Container imageDigestPackageFixed inUsed by
quay.io/reiml/smtp-gotify:latest80ffa9d2044a
musl@1.2.5-r1
1.2.5-r2
1
quay.io/shivering-isles/dovecot:2.3.214599ada9aa06
musl@1.2.5-r0
1.2.5-r2
1
quay.io/underndog/samba:1.2.0-not-recyclecca801de9fa5
musl@1.2.5-r9
1.2.5-r10
1
quay.io/wraft/wraft-frontend:latestf1bbbd5e9bb9
musl@1.2.5-r10
1.2.5-r11
1
registry.gitlab.com/dyff/dyff-frontend:0.20.152549f52ae53
musl@1.2.5-r9
1.2.5-r10
1
registry.gitlab.com/shortlink-org/shortlink/bff:latestf2194e526915
musl@1.2.5-r21
1.2.5-r22
1
registry.gitlab.com/shortlink-org/shortlink/link:latest86d87291ffd4
musl@1.2.5-r21
1.2.5-r22
1
registry.k8s.io/ingress-nginx/controller:v1.13.21f7eaeb01933
musl@1.2.5-r10
1.2.5-r11
1
registry.k8s.io/ingress-nginx/controller:v1.13.137e489b22ac7
musl@1.2.5-r10
1.2.5-r11
1
registry.k8s.io/ingress-nginx/controller:v1.10.042b3f0e5d084
musl@1.2.4_git20230717-r4
1.2.4_git20230717-r6
1
registry.k8s.io/ingress-nginx/controller:v1.11.3d56f135b6462
musl@1.2.5-r0
1.2.5-r2
1
registry.k8s.io/ingress-nginx/controller:v1.10.1e24f39d3eed6
musl@1.2.4_git20230717-r4
1.2.4_git20230717-r6
1
registry.k8s.io/ingress-nginx/controller:v1.12.0e6b8de175acd
musl@1.2.5-r8
1.2.5-r10
1
registry.k8s.io/provider-os/manila-csi-plugin:v1.36.0190976e2e2fe
musl@1.2.5-r21
1.2.5-r22
1

syft 1.42.1 · advisories as of 15 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.