StackRadar

CVE-2026-6042

Medium

Advisory

Published 10 Apr 2026In the index since 5 Sept 2026
Severity
Medium
worst across findings
CVSS
4.8
base score, highest
EPSS
0.002
15th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
1,056
of 17,787 indexed, latest versions
Container images
1,114
deployed by those charts
Fix available
1 of 2
affected packages

The matching OSV records carry no description.

Carried by container images the latest versions of 1,056 of 17,787 indexed charts deploy, on 1,114 images.

Affected packageAffected versionsFixed inImages
muslapk1.2.4_git20230717-r4, 1.2.4_git20230717-r5, 1.2.5-r0, 1.2.5-r1+4 more1.2.4_git20230717-r6, 1.2.5-r2, 1.2.5-r10, 1.2.5-r11+2 more1,113
musldeb1.2.2-4no fix listed1
OSV records
ALPINE-CVE-2026-6042UBUNTU-CVE-2026-6042

Charts affected

1,056 by stars
ChartLatestAffected imagesRadar Score
silence-operatorwiremindVerified publisher0.0.81 of 1See more

silence-operator wiremind 0.0.8

1 of the 1 container images this version deploys carry CVE-2026-6042.

Container imageDigestPackageFixed in
giantswarm/silence-operator:0.13.0a6cac55aa2d4
musl@1.2.5-r9
1.2.5-r10

Open the chart page →

789
xkopsxkops0.1.01 of 5See more

xkops xkops 0.1.0

1 of the 5 container images this version deploys carry CVE-2026-6042.

Container imageDigestPackageFixed in
hamzaarshad10/queryfrontend:1.1.5.14cd359d9a78c3
musl@1.2.5-r0
1.2.5-r2

Open the chart page →

13,197
ygdrassil-monitoringygdrassilVerified publisher0.4.01 of 10See more

ygdrassil-monitoring ygdrassil 0.4.0

1 of the 10 container images this version deploys carry CVE-2026-6042.

Container imageDigestPackageFixed in
grafana/grafana:11.5.15781759b3d27
musl@1.2.5-r0
1.2.5-r2

Open the chart page →

9,381
language-toolzekker6Verified publisher1.12.11 of 2See more

language-tool zekker6 1.12.1

1 of the 2 container images this version deploys carry CVE-2026-6042.

Container imageDigestPackageFixed in
erikvl87/languagetool:6.7-dockerupdate-3e1ea6a975388
musl@1.2.5-r21
1.2.5-r22

Open the chart page →

1,571
zerossl-cert-managerzerossl-cert-manager0.1.01 of 2See more

zerossl-cert-manager zerossl-cert-manager 0.1.0

1 of the 2 container images this version deploys carry CVE-2026-6042.

Container imageDigestPackageFixed in
andreymileshin/zerossl-issuer:v1.0.0e0825acc9e48
musl@1.2.4_git20230717-r4
1.2.4_git20230717-r6

Open the chart page →

569
zipkinzipkinVerified publisher0.5.01 of 1See more

zipkin zipkin 0.5.0

1 of the 1 container images this version deploys carry CVE-2026-6042.

Container imageDigestPackageFixed in
openzipkin/zipkin-slim:3.6.0a69e1057df36
musl@1.2.5-r21
1.2.5-r22

Open the chart page →

1,159

Container images carrying it

1,114 by charts deploying them

A fixed version is listed for 1 of the 2 affected packages.

Container imageDigestPackageFixed inUsed by
gdrocha/togglr-frontend:1.0.0ffbc1571c234
musl@1.2.5-r10
1.2.5-r11
1
getmeili/meilisearch:v1.11.0b9be3d2d4251
musl@1.2.5-r0
1.2.5-r2
1
getmeili/meilisearch:v1.13.3bed3fb650e62
musl@1.2.5-r1
1.2.5-r2
1
getmeili/meilisearch:v1.30.0f3ecbc8c5bfb
musl@1.2.5-r10
1.2.5-r11
1
giantswarm/silence-operator:0.13.0a6cac55aa2d4
musl@1.2.5-r9
1.2.5-r10
1
gitea/act_runner:0.2.11-dind-rootless6120b1165f3a
musl@1.2.5-r0
1.2.5-r2
1
gitea/act_runner:0.3.1c2a169c5e998
musl@1.2.5-r21
1.2.5-r22
1
gitea/act_runner:0.2.11c57233403eff
musl@1.2.5-r0
1.2.5-r2
1
gitea/gitea:1.22.376f516a1a8c2
musl@1.2.5-r0
1.2.5-r2
1
glanceapp/glance:v0.8.46df86a7e8868
musl@1.2.5-r9
1.2.5-r10
1
glenndehaan/api-mapper:latest6ff6310683bf
musl@1.2.4_git20230717-r4
1.2.4_git20230717-r6
1
glenndehaan/kube-hook:latest0a7116f48bfe
musl@1.2.5-r0
1.2.5-r2
1
goalert/goalert:v0.32.008d57388b0cb
musl@1.2.4_git20230717-r4
1.2.4_git20230717-r6
1
goccx/go-file-server:latestf4b3ebea0303
musl@1.2.5-r1
1.2.5-r2
1
goccx/go-file-server-ui:latest784b35910d52
musl@1.2.5-r0
1.2.5-r2
1
gradle/build-cache-node:21.25bacbee677a9
musl@1.2.5-r9
1.2.5-r10
1
grafana/grafana:13.0.10f86bada30d6
musl@1.2.5-r21
1.2.5-r22
1
grafana/grafana:13.0.1-security-012d1f9ae67c17
musl@1.2.5-r21
1.2.5-r22
1
grafana/grafana:12.2.22ebef928d7e5
musl@1.2.5-r10
1.2.5-r11
1
grafana/grafana:12.2.135c41e0fd029
musl@1.2.5-r10
1.2.5-r11
1
grafana/grafana:11.2.2-security-01464eac539793
musl@1.2.5-r0
1.2.5-r2
1
grafana/grafana:11.5.15781759b3d27
musl@1.2.5-r0
1.2.5-r2
1
grafana/grafana:11.6.062d2b9d20a19
musl@1.2.5-r9
1.2.5-r10
1
grafana/grafana:12.3.070d9599b186c
musl@1.2.5-r10
1.2.5-r11
1
grafana/grafana:12.2.074144189b384
musl@1.2.5-r10
1.2.5-r11
1
grafana/grafana:11.5.28b37a2f028f1
musl@1.2.5-r0
1.2.5-r2
1
grafana/grafana:12.1.1a1701c218024
musl@1.2.5-r10
1.2.5-r11
1
grafana/grafana:10.4.19a9043254ba16
musl@1.2.5-r9
1.2.5-r10
1
grafana/grafana:11.1.3b23b588cf7cb
musl@1.2.4_git20230717-r4
1.2.4_git20230717-r6
1
grafana/grafana:12.0.2b5b59bfc7561
musl@1.2.5-r9
1.2.5-r10
1
grafana/grafana:12.3.2ba93c9d192e5
musl@1.2.5-r21
1.2.5-r22
1
grafana/grafana:10.4.0f9811e4e687f
musl@1.2.4_git20230717-r4
1.2.4_git20230717-r6
1
grafana/grafana:11.3.1fa801ab6e1ae
musl@1.2.5-r0
1.2.5-r2
1
grafana/loki:2.9.1035b02acc6765
musl@1.2.5-r0
1.2.5-r2
1
grafana/mimir:r292-5f018727476e456c738
musl@1.2.4_git20230717-r4
1.2.4_git20230717-r6
1
grafana/oncall:v1.16.5499851658393
musl@1.2.5-r9
1.2.5-r10
1
grafana/rollout-operator:v0.14.03409edfb45c7
musl@1.2.4_git20230717-r4
1.2.4_git20230717-r6
1
grafana/tempo:2.6.0f55a8a1937ff
musl@1.2.5-r0
1.2.5-r2
1
gresearch/armada-executor:latest393aff4aa8f2
musl@1.2.5-r9
1.2.5-r10
1
gresearch/armada-lookout:latestf5e3226f1d33
musl@1.2.5-r9
1.2.5-r10
1
gresearch/armada-lookout-ingester:latest3df14cda1855
musl@1.2.5-r9
1.2.5-r10
1
gresearch/armada-scheduler:latest6141a6213fcb
musl@1.2.5-r9
1.2.5-r10
1
gresearch/fasttrackml:latest16d1228220fc
musl@1.2.4_git20230717-r4
1.2.4_git20230717-r6
1
gridgain/cloud-connector:2025.5.15ab838d7d3cb
musl@1.2.5-r10
1.2.5-r11
1
gridgain/community:8.9.11d32d182a0e6a
musl@1.2.5-r0
1.2.5-r2
1
gridgain/gridgain9:9.1.1895018390077b
musl@1.2.5-r21
1.2.5-r22
1
hamzaarshad10/queryfrontend:1.1.5.14cd359d9a78c3
musl@1.2.5-r0
1.2.5-r2
1
hashicorp/boundary:0.21.037bf86488b74
musl@1.2.5-r9
1.2.5-r10
1
hashicorp/terraform:1.9.7b77efab1a448
musl@1.2.5-r0
1.2.5-r2
1
hashicorp/vault:1.19.0bbb7f98dc67d
musl@1.2.5-r9
1.2.5-r10
1

syft 1.42.1 · advisories as of 15 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.