StackRadar

CVE-2026-61801

Medium

Advisory

Published 8 Oct 2026In the index since 9 Oct 2026
Severity
Medium
worst across findings
CVSS
5.5
base score, highest
EPSS
—
probability of exploitation
CISA KEV
Not listed
no confirmed exploitation
Charts affected
630
of 18,071 indexed, latest versions
Container images
314
deployed by those charts
Fix available
1 of 1
affected package

github.com/moby/sys/user has a possible DoS via unbounded parsing of user and group database files

Carried by container images the latest versions of 630 of 18,071 indexed charts deploy, on 314 images.

Affected packageAffected versionsFixed inImages
github.com/moby/sys/usergolangv0.1.0, v0.2.0, v0.3.0, v0.4.00.4.1314
OSV records
GHSA-mjcv-p78q-w5fw
Trending
Rank 20 in indexed charts, since 9 Oct 2026. See the ranking →

Charts affected

630 by stars
ChartLatestAffected imagesRadar Score
lynxpromptlynxpromptVerified publisher0.1.31 of 3See more

lynxprompt lynxprompt 0.1.3

1 of the 3 container images this version deploys carry CVE-2026-61801.

Container imageDigestPackageFixed in
library/postgres:17-alpineb0f9560a2de0
github.com/moby/sys/user@v0.1.0
0.4.1

Open the chart page →

2,279
gitea-runnerm0sh1-helm-charts0.2.32 of 2See more

gitea-runner m0sh1-helm-charts 0.2.3

2 of the 2 container images this version deploys carry CVE-2026-61801.

Container imageDigestPackageFixed in
gitea/act_runner:0.3.08368754bb612
github.com/moby/sys/user@v0.3.0
0.4.1
library/docker:29.3.0-dind-alpine3.231ba18449911d
github.com/moby/sys/user@v0.4.0
0.4.1

Open the chart page →

5,032
demoshopmakaira2.4.01 of 4See more

demoshop makaira 2.4.0

1 of the 4 container images this version deploys carry CVE-2026-61801.

Container imageDigestPackageFixed in
library/mysql:86ea90827b110
github.com/moby/sys/user@v0.1.0
0.4.1

Open the chart page →

4,430
mayastormayastorVerified publisher2.12.21 of 31See more

mayastor mayastor 2.12.2

1 of the 31 container images this version deploys carry CVE-2026-61801.

Container imageDigestPackageFixed in
grafana/alloy:v1.8.17790f6f7fbd8
github.com/moby/sys/user@v0.3.0
0.4.1

Open the chart page →

28,986
postgresmicroboxlabs0.3.01 of 1See more

postgres microboxlabs 0.3.0

1 of the 1 container images this version deploys carry CVE-2026-61801.

Container imageDigestPackageFixed in
library/postgres:16.6557fea37a744
github.com/moby/sys/user@v0.1.0
0.4.1

Open the chart page →

4,908
resource-servicemicroservices-learningVerified publisher1.5.01 of 2See more

resource-service microservices-learning 1.5.0

1 of the 2 container images this version deploys carry CVE-2026-61801.

Container imageDigestPackageFixed in
library/postgres:latest74935e722416
github.com/moby/sys/user@v0.1.0
0.4.1

Open the chart page →

5,350
song-servicemicroservices-learningVerified publisher1.2.01 of 2See more

song-service microservices-learning 1.2.0

1 of the 2 container images this version deploys carry CVE-2026-61801.

Container imageDigestPackageFixed in
library/postgres:latestfc973eb97c9f
github.com/moby/sys/user@v0.1.0
0.4.1

Open the chart page →

4,762
argomicroslacVerified publisher0.1.01 of 4See more

argo microslac 0.1.0

1 of the 4 container images this version deploys carry CVE-2026-61801.

Container imageDigestPackageFixed in
library/redis:7.2.4-alpinec8bb255c3559
github.com/moby/sys/user@v0.1.0
0.4.1

Open the chart page →

12,533
zkapps-dashboardminaVerified publisher0.1.21 of 2See more

zkapps-dashboard mina 0.1.2

1 of the 2 container images this version deploys carry CVE-2026-61801.

Container imageDigestPackageFixed in
library/postgres:12-alpine7c8f48705831
github.com/moby/sys/user@v0.1.0
0.4.1

Open the chart page →

2,517
mini-blogmini-blog-helm0.1.01 of 3See more

mini-blog mini-blog-helm 0.1.0

1 of the 3 container images this version deploys carry CVE-2026-61801.

Container imageDigestPackageFixed in
library/postgres:157e2070cf6ad0
github.com/moby/sys/user@v0.1.0
0.4.1

Open the chart page →

14,206
MINTmint8.0.21 of 15See more

MINT mint 8.0.2

1 of the 15 container images this version deploys carry CVE-2026-61801.

Container imageDigestPackageFixed in
library/postgres:13-alpinefb9065b6e3e2
github.com/moby/sys/user@v0.1.0
0.4.1

Open the chart page →

116,691
helmmirasys-chart0.1.01 of 4See more

helm mirasys-chart 0.1.0

1 of the 4 container images this version deploys carry CVE-2026-61801.

Container imageDigestPackageFixed in
library/mongo:latestbac22ea7710d
github.com/moby/sys/user@v0.1.0
0.4.1

Open the chart page →

4,204
account-lookup-servicemojaloop13.0.01 of 4See more

account-lookup-service mojaloop 13.0.0

1 of the 4 container images this version deploys carry CVE-2026-61801.

Container imageDigestPackageFixed in
library/mysql:latestade067ae2fb1
github.com/moby/sys/user@v0.1.0
0.4.1

Open the chart page →

12,858
account-lookup-service-adminmojaloop13.0.01 of 4See more

account-lookup-service-admin mojaloop 13.0.0

1 of the 4 container images this version deploys carry CVE-2026-61801.

Container imageDigestPackageFixed in
library/mysql:latestade067ae2fb1
github.com/moby/sys/user@v0.1.0
0.4.1

Open the chart page →

12,858
admin-api-svcmojaloop12.0.01 of 4See more

admin-api-svc mojaloop 12.0.0

1 of the 4 container images this version deploys carry CVE-2026-61801.

Container imageDigestPackageFixed in
library/mysql:latestade067ae2fb1
github.com/moby/sys/user@v0.1.0
0.4.1

Open the chart page →

13,319
mojaloopmojaloop14.0.01 of 6See more

mojaloop mojaloop 14.0.0

1 of the 6 container images this version deploys carry CVE-2026-61801.

Container imageDigestPackageFixed in
library/mysql:latestade067ae2fb1
github.com/moby/sys/user@v0.1.0
0.4.1

Open the chart page →

20,845
mongodb-admin-interfacemongo-db-admin-interfaceVerified publisher0.1.01 of 2See more

mongodb-admin-interface mongo-db-admin-interface 0.1.0

1 of the 2 container images this version deploys carry CVE-2026-61801.

Container imageDigestPackageFixed in
library/mongo:5.041108d183e97
github.com/moby/sys/user@v0.1.0
0.4.1

Open the chart page →

5,937
codimdmt1905027.2.21 of 3See more

codimd mt190502 7.2.2

1 of the 3 container images this version deploys carry CVE-2026-61801.

Container imageDigestPackageFixed in
library/postgres:1874935e722416
github.com/moby/sys/user@v0.1.0
0.4.1

Open the chart page →

1,636
commafeedmt1905028.2.01 of 3See more

commafeed mt190502 8.2.0

1 of the 3 container images this version deploys carry CVE-2026-61801.

Container imageDigestPackageFixed in
library/postgres:18fc973eb97c9f
github.com/moby/sys/user@v0.1.0
0.4.1

Open the chart page →

4,152
ghostmt1905028.25.12 of 3See more

ghost mt190502 8.25.1

2 of the 3 container images this version deploys carry CVE-2026-61801.

Container imageDigestPackageFixed in
library/ghost:6.25.12654b1e90413
github.com/moby/sys/user@v0.1.0
0.4.1
library/mysql:86ea90827b110
github.com/moby/sys/user@v0.1.0
0.4.1

Open the chart page →

6,324
keycloakmt1905021.4.61 of 3See more

keycloak mt190502 1.4.6

1 of the 3 container images this version deploys carry CVE-2026-61801.

Container imageDigestPackageFixed in
library/postgres:1874935e722416
github.com/moby/sys/user@v0.1.0
0.4.1

Open the chart page →

3,145
memosmt1905027.3.21 of 3See more

memos mt190502 7.3.2

1 of the 3 container images this version deploys carry CVE-2026-61801.

Container imageDigestPackageFixed in
library/postgres:1874935e722416
github.com/moby/sys/user@v0.1.0
0.4.1

Open the chart page →

3,006
minifluxmt1905021.1.61 of 3See more

miniflux mt190502 1.1.6

1 of the 3 container images this version deploys carry CVE-2026-61801.

Container imageDigestPackageFixed in
library/postgres:18fc973eb97c9f
github.com/moby/sys/user@v0.1.0
0.4.1

Open the chart page →

3,029
nightscoutmt1905021.1.01 of 3See more

nightscout mt190502 1.1.0

1 of the 3 container images this version deploys carry CVE-2026-61801.

Container imageDigestPackageFixed in
library/mongo:4.44be76f674fc4
github.com/moby/sys/user@v0.1.0
0.4.1

Open the chart page →

7,471
open-webuimt1905022.3.101 of 3See more

open-webui mt190502 2.3.10

1 of the 3 container images this version deploys carry CVE-2026-61801.

Container imageDigestPackageFixed in
library/postgres:1874935e722416
github.com/moby/sys/user@v0.1.0
0.4.1

Open the chart page →

1,636
paperless-ngxmt1905027.6.141 of 4See more

paperless-ngx mt190502 7.6.14

1 of the 4 container images this version deploys carry CVE-2026-61801.

Container imageDigestPackageFixed in
library/postgres:1874935e722416
github.com/moby/sys/user@v0.1.0
0.4.1

Open the chart page →

13,497
umamimt1905028.1.41 of 3See more

umami mt190502 8.1.4

1 of the 3 container images this version deploys carry CVE-2026-61801.

Container imageDigestPackageFixed in
library/postgres:1874935e722416
github.com/moby/sys/user@v0.1.0
0.4.1

Open the chart page →

4,169
vaultwardenmt1905027.3.41 of 3See more

vaultwarden mt190502 7.3.4

1 of the 3 container images this version deploys carry CVE-2026-61801.

Container imageDigestPackageFixed in
library/postgres:1874935e722416
github.com/moby/sys/user@v0.1.0
0.4.1

Open the chart page →

5,046
vikunjamt1905027.1.21 of 3See more

vikunja mt190502 7.1.2

1 of the 3 container images this version deploys carry CVE-2026-61801.

Container imageDigestPackageFixed in
library/postgres:1874935e722416
github.com/moby/sys/user@v0.1.0
0.4.1

Open the chart page →

3,497
mongodbmulti-chart-app0.1.01 of 1See more

mongodb multi-chart-app 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-61801.

Container imageDigestPackageFixed in
library/mongo:79854f7139445
github.com/moby/sys/user@v0.1.0
0.4.1

Open the chart page →

2,498
my-multi-chart-appmulti-chart-app0.1.01 of 2See more

my-multi-chart-app multi-chart-app 0.1.0

1 of the 2 container images this version deploys carry CVE-2026-61801.

Container imageDigestPackageFixed in
library/mongo:79854f7139445
github.com/moby/sys/user@v0.1.0
0.4.1

Open the chart page →

4,369
devops-demomungari-development-charts1.0.41 of 4See more

devops-demo mungari-development-charts 1.0.4

1 of the 4 container images this version deploys carry CVE-2026-61801.

Container imageDigestPackageFixed in
library/postgres:latestfc973eb97c9f
github.com/moby/sys/user@v0.1.0
0.4.1

Open the chart page →

10,083
pagesmuthu-pages1.0.01 of 3See more

pages muthu-pages 1.0.0

1 of the 3 container images this version deploys carry CVE-2026-61801.

Container imageDigestPackageFixed in
library/mysql:8.07dcddc01f13b
github.com/moby/sys/user@v0.1.0
0.4.1

Open the chart page →

21,258
my-helm-chartmy-helm-chart0.1.01 of 3See more

my-helm-chart my-helm-chart 0.1.0

1 of the 3 container images this version deploys carry CVE-2026-61801.

Container imageDigestPackageFixed in
library/postgres:latest5a5a84b19854
github.com/moby/sys/user@v0.1.0
0.4.1

Open the chart page →

4,666
mychartmysqlweb0.1.01 of 1See more

mychart mysqlweb 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-61801.

Container imageDigestPackageFixed in
qichenxu4pd/mysqlweb:1.2d758d41d9c6b
github.com/moby/sys/user@v0.1.0
0.4.1

Open the chart page →

1,920
pagesnarain1.0.01 of 3See more

pages narain 1.0.0

1 of the 3 container images this version deploys carry CVE-2026-61801.

Container imageDigestPackageFixed in
library/mysql:8.07dcddc01f13b
github.com/moby/sys/user@v0.1.0
0.4.1

Open the chart page →

21,258
pagesnarasimha-pages1.0.01 of 3See more

pages narasimha-pages 1.0.0

1 of the 3 container images this version deploys carry CVE-2026-61801.

Container imageDigestPackageFixed in
library/mysql:8.07dcddc01f13b
github.com/moby/sys/user@v0.1.0
0.4.1

Open the chart page →

21,258
pagesnavin-brixton1.0.01 of 3See more

pages navin-brixton 1.0.0

1 of the 3 container images this version deploys carry CVE-2026-61801.

Container imageDigestPackageFixed in
library/mysql:8.07dcddc01f13b
github.com/moby/sys/user@v0.1.0
0.4.1

Open the chart page →

21,258
jupyterhub-metricsncsaVerified publisher1.3.02 of 5See more

jupyterhub-metrics ncsa 1.3.0

2 of the 5 container images this version deploys carry CVE-2026-61801.

Container imageDigestPackageFixed in
library/postgres:15-alpinef7d23353e1b1
github.com/moby/sys/user@v0.1.0
0.4.1
timescale/timescaledb:latest-pg156343bdc87ca1
github.com/moby/sys/user@v0.1.0
0.4.1

Open the chart page →

3,912
redisneomanexlabsVerified publisher1.1.01 of 1See more

redis neomanexlabs 1.1.0

1 of the 1 container images this version deploys carry CVE-2026-61801.

Container imageDigestPackageFixed in
library/redis:7.4.2-alpine02419de7eddf
github.com/moby/sys/user@v0.1.0
0.4.1

Open the chart page →

2,277
netbirdnetbird1.9.01 of 4See more

netbird netbird 1.9.0

1 of the 4 container images this version deploys carry CVE-2026-61801.

Container imageDigestPackageFixed in
netbirdio/management:0.46.0b0adc4ad4ec6
github.com/moby/sys/user@v0.3.0
0.4.1

Open the chart page →

8,065
nexus-freenexus-freeVerified publisher1.0.31 of 1See more

nexus-free nexus-free 1.0.3

1 of the 1 container images this version deploys carry CVE-2026-61801.

Container imageDigestPackageFixed in
quay.io/fossa/postgres:17.2-15af45ac79f38
github.com/moby/sys/user@v0.1.0
0.4.1

Open the chart page →

1,928
librenmsnimbolus0.5.11 of 3See more

librenms nimbolus 0.5.1

1 of the 3 container images this version deploys carry CVE-2026-61801.

Container imageDigestPackageFixed in
librenms/librenms:24.11.00920bc9117a8
github.com/moby/sys/user@v0.1.0
0.4.1

Open the chart page →

2,791
redisnineinfra-charts0.7.51 of 1See more

redis nineinfra-charts 0.7.5

1 of the 1 container images this version deploys carry CVE-2026-61801.

Container imageDigestPackageFixed in
library/redis:7.2.3a7cee7c8178f
github.com/moby/sys/user@v0.1.0
0.4.1

Open the chart page →

4,920
file-system-ms-helm-chartnotesprojectchart0.1.01 of 2See more

file-system-ms-helm-chart notesprojectchart 0.1.0

1 of the 2 container images this version deploys carry CVE-2026-61801.

Container imageDigestPackageFixed in
library/postgres:latest74935e722416
github.com/moby/sys/user@v0.1.0
0.4.1

Open the chart page →

6,428
keycloak-helm-chartnotesprojectchart0.1.01 of 2See more

keycloak-helm-chart notesprojectchart 0.1.0

1 of the 2 container images this version deploys carry CVE-2026-61801.

Container imageDigestPackageFixed in
library/postgres:latest74935e722416
github.com/moby/sys/user@v0.1.0
0.4.1

Open the chart page →

1,636
logic-ms-helm-chartnotesprojectchart0.1.01 of 2See more

logic-ms-helm-chart notesprojectchart 0.1.0

1 of the 2 container images this version deploys carry CVE-2026-61801.

Container imageDigestPackageFixed in
library/postgres:latest74935e722416
github.com/moby/sys/user@v0.1.0
0.4.1

Open the chart page →

7,456
registration-ms-helm-chartnotesprojectchart0.1.01 of 2See more

registration-ms-helm-chart notesprojectchart 0.1.0

1 of the 2 container images this version deploys carry CVE-2026-61801.

Container imageDigestPackageFixed in
library/postgres:latest74935e722416
github.com/moby/sys/user@v0.1.0
0.4.1

Open the chart page →

6,427
user-data-ms-helm-chartnotesprojectchart0.1.01 of 2See more

user-data-ms-helm-chart notesprojectchart 0.1.0

1 of the 2 container images this version deploys carry CVE-2026-61801.

Container imageDigestPackageFixed in
library/postgres:latest74935e722416
github.com/moby/sys/user@v0.1.0
0.4.1

Open the chart page →

6,384
firecrawlobeoneVerified publisher3.0.181 of 5See more

firecrawl obeone 3.0.18

1 of the 5 container images this version deploys carry CVE-2026-61801.

Container imageDigestPackageFixed in
ghcr.io/firecrawl/nuq-postgres:latestf9388bd25ae2
github.com/moby/sys/user@v0.1.0
0.4.1

Open the chart page →

8,539

Container images carrying it

314 by charts deploying them

A fixed version is listed for 1 of the 1 affected package.

Container imageDigestPackageFixed inUsed by
library/mariadb:10.10334b315c10e5
github.com/moby/sys/user@v0.1.0
0.4.1
2
library/mariadb:12.0.2:12.0-noble607835cd628b
github.com/moby/sys/user@v0.1.0
0.4.1
2
library/mariadb:11.3.2e101f9db3191
github.com/moby/sys/user@v0.1.0
0.4.1
2
library/mongo:8.0.20098862b1339f
github.com/moby/sys/user@v0.1.0
0.4.1
2
library/mongo:7.01f995ad6fdb9
github.com/moby/sys/user@v0.1.0
0.4.1
2
library/mongo:5.041108d183e97
github.com/moby/sys/user@v0.1.0
0.4.1
2
library/mongo:7.0-jammy:7-jammyf71f6d0913c9
github.com/moby/sys/user@v0.1.0
0.4.1
2
library/mysql:8:8.4:8.4.110744ee5ef89c
github.com/moby/sys/user@v0.1.0
0.4.1
2
library/mysql:8.4.2ac80b6e09e5b
github.com/moby/sys/user@v0.1.0
0.4.1
2
library/postgres:18.11090bc3a8ccf
github.com/moby/sys/user@v0.1.0
0.4.1
2
library/postgres:17-bookworm3645570cccdf
github.com/moby/sys/user@v0.1.0
0.4.1
2
library/postgres:16.24aea012537ed
github.com/moby/sys/user@v0.1.0
0.4.1
2
library/postgres:18.3-alpine:18.3-alpine3.2354451ecb8ab3
github.com/moby/sys/user@v0.1.0
0.4.1
2
library/postgres:18.06f3e42ad37de
github.com/moby/sys/user@v0.1.0
0.4.1
2
library/postgres:17.5aadf2c0696f5
github.com/moby/sys/user@v0.1.0
0.4.1
2
library/postgres:17c6222b54873a
github.com/moby/sys/user@v0.1.0
0.4.1
2
library/postgres:16.4e62fbf9d3e2b
github.com/moby/sys/user@v0.1.0
0.4.1
2
library/postgres:13-alpinefb9065b6e3e2
github.com/moby/sys/user@v0.1.0
0.4.1
2
library/redis148bb5411c18
github.com/moby/sys/user@v0.1.0
0.4.1
2
library/redis:7.2.3a7cee7c8178f
github.com/moby/sys/user@v0.1.0
0.4.1
2
library/redmine:6.1.3-trixief474a901faec
github.com/moby/sys/user@v0.1.0
0.4.1
2
moby/buildkit:v0.32.2-rootless504731e577c2
github.com/moby/sys/user@v0.4.0
0.4.1
2
pgautoupgrade/pgautoupgrade:18-alpine2245aabc5b80
github.com/moby/sys/user@v0.1.0
0.4.1
2
pgvector/pgvector:pg167b822b0aac60
github.com/moby/sys/user@v0.1.0
0.4.1
2
pgvector/pgvector:0.8.5-pg18-trixie9d2e61c7352b
github.com/moby/sys/user@v0.1.0
0.4.1
2
timescale/timescaledb:latest-pg156343bdc87ca1
github.com/moby/sys/user@v0.1.0
0.4.1
2
timescale/timescaledb:2.30.2-pg17:latest-pg17b346edcdb51a
github.com/moby/sys/user@v0.1.0
0.4.1
2
uselagoon/docker-host:v3.6.12c89ed939b8b
github.com/moby/sys/user@v0.4.0
0.4.1
2
ghcr.io/immich-app/postgres:14-vectorchord0.4.3-pgvectors0.2.0bcf63357191b
github.com/moby/sys/user@v0.1.0
0.4.1
2
quay.io/openshift/origin-cli:lateste7965645fac6
github.com/moby/sys/user@v0.4.0
0.4.1
2
1dev/server:11.9.0cd5b12fe5471
github.com/moby/sys/user@v0.4.0
0.4.1
1
airbyte/db:2.3.000cc017f0393
github.com/moby/sys/user@v0.1.0
0.4.1
1
akeyless/k8s-webhook-server:0.39.0996cd9afb3b4
github.com/moby/sys/user@v0.3.0
0.4.1
1
andrewmackrodt/firefox-x11:142.0.1-r133f9080470c9
github.com/moby/sys/user@v0.1.0
0.4.1
1
apecloud/kb-cloud-installer:v2.1.42-certified98abc64aa985
github.com/moby/sys/user@v0.3.0
0.4.1
1
appwrite/appwrite:1.9.01aaa70127114
github.com/moby/sys/user@v0.4.0
0.4.1
1
appwrite/appwrite:2.3.034ef77fb6e87
github.com/moby/sys/user@v0.4.0
0.4.1
1
aquasec/harbor-scanner-trivy:0.31.26e790e233872
github.com/moby/sys/user@v0.1.0
0.4.1
1
aquasec/tracee:0.24.1cfbbfee972e6
github.com/moby/sys/user@v0.3.0
0.4.1
1
aquasec/trivy:0.69.3bcc376de8d77
github.com/moby/sys/user@v0.4.0
0.4.1
1
artifacthub/scanner:v1.23.02d8365601f0e
github.com/moby/sys/user@v0.4.0
0.4.1
1
artifacthub/scanner:v1.19.0323d026e78c3
github.com/moby/sys/user@v0.1.0
0.4.1
1
artifacthub/tracker:v1.23.05368d21a6e5c
github.com/moby/sys/user@v0.4.0
0.4.1
1
blackducksoftware/bdba-pgupgrader:2026.9.0b805c1f607e0
github.com/moby/sys/user@v0.1.0
0.4.1
1
blackducksoftware/blackduck-alert-db:8.4.1ad33e84750f1
github.com/moby/sys/user@v0.1.0
0.4.1
1
buall/postgres-stack:18.6881a785642cb
github.com/moby/sys/user@v0.1.0
0.4.1
1
concourse/concourse:8.3.1c9d48dfbf4f9
github.com/moby/sys/user@v0.4.0
0.4.1
1
dannielkil/book-db:latest433290c5c1db
github.com/moby/sys/user@v0.1.0
0.4.1
1
datadog/agent:6aad9994de6a7
github.com/moby/sys/user@v0.1.0
0.4.1
1
ethpandaops/panda-pulse:latestad6fc3b3e6b8
github.com/moby/sys/user@v0.4.0
0.4.1
1

syft 1.42.1 · advisories as of 9 Oct 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.