StackRadar

CVE-2026-6100

Critical

Advisory

Published 13 Apr 2026In the index since 5 Sept 2026
Severity
Critical
worst across findings
CVSS
9.1
base score, highest
EPSS
0.006
46th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
601
of 17,787 indexed, latest versions
Container images
579
deployed by those charts
Fix available
11 of 16
affected packages

Use-after-free in lzma.LZMADecompressor, bz2.BZ2Decompressor, and gzip.GzipFile after re-use under memory pressure

Carried by container images the latest versions of 601 of 17,787 indexed charts deploy, on 579 images.

Affected packageAffected versionsFixed inImages
python3.11deb3.11.0~rc1-1~22.04, 3.11.0~rc1-1~22.04.1, 3.11.2-6, 3.11.2-6+deb12u2+5 more3.11.2-6+deb12u8163
python3apk3.11.12-r1, 3.12.8-r1, 3.12.9-r0, 3.12.10-r0+4 more3.12.14-r063
python3.13deb3.13.5-2, 3.13.5-2+e30, 3.13.7-1ubuntu0.13.13.5-2+deb13u2, 3.13.5-2+e3623
python-3.14apk3.14.2-r2, 3.14.4-r23.14.4-r35
pythonbitnami3.11.11-0, 3.12.8-0, 3.13.5-13.10.213
python-3.13apk3.13.7-r0, 3.13.10-r0, 3.13.12-r23.13.13-r23
python-3.12apk3.12.0-r1, 3.12.9-r13.12.13-r32
python3.8deb3.8.5-1~20.04, 3.8.5-1~20.04.2, 3.8.5-1~20.04.3, 3.8.10-0ubuntu1~20.04+11 moreno fix listed100
python3.10deb3.10.4-3, 3.10.4-3ubuntu0.1, 3.10.6-1~22.04, 3.10.6-1~22.04.1+14 more3.10.12-1~22.04.1671
python2.7deb2.7.6-8, 2.7.6-8ubuntu0.4, 2.7.12-1ubuntu0~16.04.2, 2.7.12-1ubuntu0~16.04.3+12 moreno fix listed54
python3.12deb3.12.3-1, 3.12.3-1ubuntu0.2, 3.12.3-1ubuntu0.3, 3.12.3-1ubuntu0.4+8 more3.12.3-1ubuntu0.1548
python3.6deb3.6.6-1~18.04, 3.6.7-1~18.04, 3.6.9-1~18.04, 3.6.9-1~18.04ubuntu1+7 moreno fix listed44
python3.5deb3.5.2-2ubuntu0~16.04.1, 3.5.2-2ubuntu0~16.04.4, 3.5.2-2ubuntu0~16.04.5, 3.5.2-2ubuntu0~16.04.9no fix listed25
python3.4deb3.4.0-2ubuntu1, 3.4.3-1ubuntu1~14.04.5, 3.4.3-1ubuntu1~14.04.6, 3.4.3-1ubuntu1~14.04.7no fix listed7
python3.14deb3.14.4-13.14.4-1ubuntu0.12
python3rpm3.12.9-13.azl33.12.9-141
OSV records
ALPINE-CVE-2026-6100BIT-python-2026-6100CGA-5m77-63wh-vhhhCGA-gw5v-fvh4-9pxrCGA-m7qp-99cp-h7qjDEBIAN-CVE-2026-6100UBUNTU-CVE-2026-6100AZL-83051ECHO-5806-1424-7b47
Also known as
BIT-libpython-2026-6100, BIT-python-min-2026-6100, CGA-hq26-pcqg-hvvp, CGA-mqvf-66wx-9p3p, CGA-r845-9w2j-fj7q, PSF-0000-CVE-2026-6100, PSF-2026-18, USN-8509-1

Charts affected

601 by stars
ChartLatestAffected imagesRadar Score
playwright-synthetic-monitoringwork-adventure1.0.11 of 1See more

playwright-synthetic-monitoring work-adventure 1.0.1

1 of the 1 container images this version deploys carry CVE-2026-6100.

Container imageDigestPackageFixed in
workadventure/playwright-synthetic-monitoring:main92b664c2a06f
python3.10@3.10.12-1~22.04.3
3.10.12-1~22.04.16

Open the chart page →

14,100

Container images carrying it

579 by charts deploying them

A fixed version is listed for 11 of the 16 affected packages.

Container imageDigestPackageFixed inUsed by
opea/codegen-ui:1.02bee4eb66f3e
python3.11@3.11.2-6
3.11.2-6+deb12u8
1
opea/codetrans-ui:1.03ef121f34610
python3.11@3.11.2-6
3.11.2-6+deb12u8
1
opea/docsum-ui:1.07f854e9bffaf
python3.11@3.11.2-6
3.11.2-6+deb12u8
1
opea/speecht5:1.0249afad3d268
python3.11@3.11.2-6+deb12u3
3.11.2-6+deb12u8
1
openbas/caldera-server:5.1.0a277796d9724
python3.11@3.11.2-6+deb12u5
3.11.2-6+deb12u8
1
opendatacube/explorer:latest120457ffcd69
python3.12@3.12.3-1ubuntu0.8
3.12.3-1ubuntu0.15
1
opendatacube/pipelines:wofs-1.225d810e8504b8
python3.6@3.6.7-1~18.04
no fix listed
1
opendatacube/restcube:latest91870111837c
python3.6@3.6.7-1~18.04
no fix listed
1
opendatacube/wms:latest1b90cdf68831
python3.6@3.6.7-1~18.04
no fix listed
1
opendatacube/wps:latest80df355a660b
python3.10@3.10.12-1~22.04.10
3.10.12-1~22.04.16
1
openelevation/open-elevation:latest82fb21612e86
python3.8@3.8.10-0ubuntu1~20.04
no fix listed
1
openkm/openkm-ce:6.3.113bc465a7461b
python3.8@3.8.10-0ubuntu1~20.04.5
no fix listed
1
openmined/syft-backend:0.9.5b72f74a68b32
python-3.12@3.12.9-r1
3.12.13-r3
1
openproject/hocuspocus:release-338001b288dc1359dfb5
python3.11@3.11.2-6+deb12u6
3.11.2-6+deb12u8
1
openstackhelm/heat:wallaby-ubuntu_focalf728510bab3c
python3.8@3.8.10-0ubuntu1~20.04.8
no fix listed
1
openstackhelm/keystone:wallaby-ubuntu_focale07d75953d2e
python3.8@3.8.10-0ubuntu1~20.04.8
no fix listed
1
openthread/otbr:latestf307f59f6432
python2.7@2.7.17-1~18.04ubuntu1.11
python3.6@3.6.9-1~18.04ubuntu1.12
no fix listed
no fix listed
1
openvino/model_server:2025.2.11e7cd1d70cc1
python3.12@3.12.3-1ubuntu0.7
3.12.3-1ubuntu0.15
1
openwhisk/ow-utils:1.0.0c80dba0de3aa
python2.7@2.7.17-1~18.04ubuntu1.2
no fix listed
1
opsmx11/issuegen:v2.1.05c50ca123d88
python3.4@3.4.3-1ubuntu1~14.04.6
no fix listed
1
owncloud/server:10.15.051d9b74fc2a8
python3.8@3.8.10-0ubuntu1~20.04.11
no fix listed
1
owncloud/server:10.16.274c53d341076
python3.10@3.10.12-1~22.04.15
3.10.12-1~22.04.16
1
penpotapp/backend:2.2.147853d9bb9dd
python3.10@3.10.12-1~22.04.6
3.10.12-1~22.04.16
1
penpotapp/exporter:2.2.15c835ffd87ab
python3.10@3.10.12-1~22.04.6
3.10.12-1~22.04.16
1
phan2410/dummy-service:0.0.89c6ed6de26ca
python3.11@3.11.2-6+deb12u5
3.11.2-6+deb12u8
1
phan2410/falcon-asgi-server:0.1.04a86d138832d
python3.11@3.11.2-6+deb12u5
3.11.2-6+deb12u8
1
photoprism/photoprism:251130db16ee6b1ba3
python3.13@3.13.7-1ubuntu0.1
no fix listed
1
photoprism/photoprism:240711-cefc6fd632ca74
python3.12@3.12.3-1
3.12.3-1ubuntu0.15
1
platzio/backend:v0.6.5d5e5972f344b
python3@3.12.11-r0
3.12.14-r0
1
project2team4/react:latest3ff031a08887
python3.8@3.8.10-0ubuntu1~20.04.4
no fix listed
1
prompve/prometheus-pve-exporter:3.8.2e3d501a82df5
python3@3.12.12-r0
3.12.14-r0
1
prowlercloud/prowler-api:5.31.14f252d579be2
python3.11@3.11.2-6+deb12u7
3.11.2-6+deb12u8
1
psorab/elibrary:latest53b68896c4ce
python3.8@3.8.10-0ubuntu1~20.04.7
no fix listed
1
ptthanh1511/freeradius-server:3.0.26-netdebug5741cbde85ab
python2.7@2.7.18-1~20.04.3
no fix listed
1
puppet/puppet-agent:7.14.00b6fd9a6b7da
python3.6@3.6.9-1~18.04ubuntu1.6
no fix listed
1
rancher/local-path-provisioner:v0.0.5e66f32d19eb9
python2.7@2.7.12-1ubuntu0~16.04.3
python3.5@3.5.2-2ubuntu0~16.04.4
no fix listed
no fix listed
1
razorbladex401/dayz:latest6a4d79248e7d
python3.10@3.10.12-1~22.04.3
3.10.12-1~22.04.16
1
redis/redis-stack-server:latest798ab84d9f26
python3.10@3.10.12-1~22.04.11
3.10.12-1~22.04.16
1
redis/redis-stack-server:7.4.0-v0887cf87cc744
python3.10@3.10.12-1~22.04.4
3.10.12-1~22.04.16
1
resouer/redis-slave:v2e2f198b49ba7
python2.7@2.7.6-8
python3.4@3.4.0-2ubuntu1
no fix listed
no fix listed
1
resurfaceio/resurface:3.7.84d5cda2f64109
python3.10@3.10.12-1~22.04.9
3.10.12-1~22.04.16
1
rezachalak/bzen-mongo:1.0.034f694325191
python3.8@3.8.10-0ubuntu1~20.04.8
no fix listed
1
rhasspy/wyoming-speech-to-phrase:1.4.3e532f0dbc6b2
python3.11@3.11.2-6+deb12u6
3.11.2-6+deb12u8
1
rhasspy/wyoming-whisper:3.5.0308b7959a925
python3.11@3.11.2-6+deb12u7
3.11.2-6+deb12u8
1
rocketadmin/rocketadmin:1.17.710955ef540b9
python3.11@3.11.2-6+deb12u6
3.11.2-6+deb12u8
1
ryuunosukeds3/nadeko-bot-docker:latestc0398f13e8a9
python3.10@3.10.12-1~22.04.9
3.10.12-1~22.04.16
1
saidsef/scapy-containerised:v2025.02f17f7c435891
python3@3.12.9-r0
3.12.14-r0
1
santisbon/evwatcher:latestc4e994ca4540
python3.11@3.11.2-6
3.11.2-6+deb12u8
1
santisbon/evworker:lateste807283f8d69
python3.11@3.11.2-6
3.11.2-6+deb12u8
1
santisbon/speedtest:latest8ee3a1697227
python3.11@3.11.2-6
3.11.2-6+deb12u8
1

syft 1.42.1 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.