StackRadar

CVE-2026-61801

Medium

Advisory

Published 8 Oct 2026In the index since 9 Oct 2026
Severity
Medium
worst across findings
CVSS
5.5
base score, highest
EPSS
—
probability of exploitation
CISA KEV
Not listed
no confirmed exploitation
Charts affected
630
of 18,071 indexed, latest versions
Container images
314
deployed by those charts
Fix available
1 of 1
affected package

github.com/moby/sys/user has a possible DoS via unbounded parsing of user and group database files

Carried by container images the latest versions of 630 of 18,071 indexed charts deploy, on 314 images.

Affected packageAffected versionsFixed inImages
github.com/moby/sys/usergolangv0.1.0, v0.2.0, v0.3.0, v0.4.00.4.1314
OSV records
GHSA-mjcv-p78q-w5fw
Trending
Rank 20 in indexed charts, since 9 Oct 2026. See the ranking →

Charts affected

630 by stars
ChartLatestAffected imagesRadar Score
lensoci-ai-incubations0.1.141 of 16See more

lens oci-ai-incubations 0.1.14

1 of the 16 container images this version deploys carry CVE-2026-61801.

Container imageDigestPackageFixed in
library/postgres:134689940c6838
github.com/moby/sys/user@v0.1.0
0.4.1

Open the chart page →

22,895
my-bloody-jenkinsodavid0.1.2181 of 1See more

my-bloody-jenkins odavid 0.1.218

1 of the 1 container images this version deploys carry CVE-2026-61801.

Container imageDigestPackageFixed in
odavid/my-bloody-jenkins:2.462.3-306e7ab3bbc948e
github.com/moby/sys/user@v0.1.0
0.4.1

Open the chart page →

6,993
nocodbone-acre-fundVerified publisher0.4.61 of 3See more

nocodb one-acre-fund 0.4.6

1 of the 3 container images this version deploys carry CVE-2026-61801.

Container imageDigestPackageFixed in
library/postgres:alpine77f585114c32
github.com/moby/sys/user@v0.1.0
0.4.1

Open the chart page →

5,115
onedevonedev11.9.01 of 1See more

onedev onedev 11.9.0

1 of the 1 container images this version deploys carry CVE-2026-61801.

Container imageDigestPackageFixed in
1dev/server:11.9.0cd5b12fe5471
github.com/moby/sys/user@v0.4.0
0.4.1

Open the chart page →

7,164
ontoserverontoserverVerified publisher0.5.21 of 2See more

ontoserver ontoserver 0.5.2

1 of the 2 container images this version deploys carry CVE-2026-61801.

Container imageDigestPackageFixed in
library/postgres:1642df6755a411
github.com/moby/sys/user@v0.1.0
0.4.1

Open the chart page →

1,636
pro-builderopenfaas0.6.132 of 2See more

pro-builder openfaas 0.6.13

2 of the 2 container images this version deploys carry CVE-2026-61801.

Container imageDigestPackageFixed in
moby/buildkit:v0.32.2-rootless504731e577c2
github.com/moby/sys/user@v0.4.0
0.4.1
ghcr.io/openfaasltd/pro-builder:0.6.06c17297f9098
github.com/moby/sys/user@v0.4.0
0.4.1

Open the chart page →

3,545
openpanelopenpanel0.9.01 of 6See more

openpanel openpanel 0.9.0

1 of the 6 container images this version deploys carry CVE-2026-61801.

Container imageDigestPackageFixed in
library/redis:7.2.5-alpine6aaf3f5e6bc8
github.com/moby/sys/user@v0.1.0
0.4.1

Open the chart page →

4,536
fineractopenshift0.1.11 of 4See more

fineract openshift 0.1.1

1 of the 4 container images this version deploys carry CVE-2026-61801.

Container imageDigestPackageFixed in
library/mariadb:11.41292844148b3
github.com/moby/sys/user@v0.1.0
0.4.1

Open the chart page →

8,738
harikubeopenshift0.16.31 of 3See more

harikube openshift 0.16.3

1 of the 3 container images this version deploys carry CVE-2026-61801.

Container imageDigestPackageFixed in
quay.io/harikube/vcluster-pro:0.32.1b741efae8d31
github.com/moby/sys/user@v0.4.0
0.4.1

Open the chart page →

3,518
kb-cloud-installeropenshift2.1.351 of 1See more

kb-cloud-installer openshift 2.1.35

1 of the 1 container images this version deploys carry CVE-2026-61801.

Container imageDigestPackageFixed in
apecloud/kb-cloud-installer:v2.1.42-certified98abc64aa985
github.com/moby/sys/user@v0.3.0
0.4.1

Open the chart page →

5,060
sohaopensohaVerified publisher0.1.101 of 2See more

soha opensoha 0.1.10

1 of the 2 container images this version deploys carry CVE-2026-61801.

Container imageDigestPackageFixed in
pgvector/pgvector:0.8.5-pg18-trixie9d2e61c7352b
github.com/moby/sys/user@v0.1.0
0.4.1

Open the chart page →

2,432
operator-lifecycle-manageroperator-lifecycle-managerVerified publisher1.2.22 of 2See more

operator-lifecycle-manager operator-lifecycle-manager 1.2.2

2 of the 2 container images this version deploys carry CVE-2026-61801.

Container imageDigestPackageFixed in
quay.io/operator-framework/catalogd:v1.8.06ff40fa6257f
github.com/moby/sys/user@v0.4.0
0.4.1
quay.io/operator-framework/operator-controller:v1.8.0bca5dfcc67ca
github.com/moby/sys/user@v0.4.0
0.4.1

Open the chart page →

2,577
hiveopstty0.1.91 of 4See more

hive opstty 0.1.9

1 of the 4 container images this version deploys carry CVE-2026-61801.

Container imageDigestPackageFixed in
library/postgres:17-alpineb0f9560a2de0
github.com/moby/sys/user@v0.1.0
0.4.1

Open the chart page →

5,178
grrosdfir-infrastructureVerified publisher1.0.31 of 5See more

grr osdfir-infrastructure 1.0.3

1 of the 5 container images this version deploys carry CVE-2026-61801.

Container imageDigestPackageFixed in
library/mariadb:11.3.2e101f9db3191
github.com/moby/sys/user@v0.1.0
0.4.1

Open the chart page →

12,838
osdfir-infrastructureosdfir-infrastructureVerified publisher2.15.06 of 40See more

osdfir-infrastructure osdfir-infrastructure 2.15.0

6 of the 40 container images this version deploys carry CVE-2026-61801.

Container imageDigestPackageFixed in
library/mariadb:11.3.2e101f9db3191
github.com/moby/sys/user@v0.1.0
0.4.1
library/postgres:17.5-alpine6567bca8d7bc
github.com/moby/sys/user@v0.1.0
0.4.1
library/postgres:17.2-alpine7e5df973a748
github.com/moby/sys/user@v0.1.0
0.4.1
library/redis:7.4.2-alpine02419de7eddf
github.com/moby/sys/user@v0.1.0
0.4.1
gcr.io/kaniko-project/executor:latest4e7a52dd1f14
github.com/moby/sys/user@v0.4.0
0.4.1
ghcr.io/openrelik/openrelik-worker-containers:latesta6d5abe94706
github.com/moby/sys/user@v0.4.0
0.4.1

Open the chart page →

240,943
mysqlot-container-kit0.1.01 of 1See more

mysql ot-container-kit 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-61801.

Container imageDigestPackageFixed in
library/mysql:8.07dcddc01f13b
github.com/moby/sys/user@v0.1.0
0.4.1

Open the chart page →

791
p4p40.1.02 of 7See more

p4 p4 0.1.0

2 of the 7 container images this version deploys carry CVE-2026-61801.

Container imageDigestPackageFixed in
library/mongo:5.0-focal5e15a3f014ed
github.com/moby/sys/user@v0.1.0
0.4.1
library/mysql:86ea90827b110
github.com/moby/sys/user@v0.1.0
0.4.1

Open the chart page →

30,871
myappp4-helm0.1.01 of 6See more

myapp p4-helm 0.1.0

1 of the 6 container images this version deploys carry CVE-2026-61801.

Container imageDigestPackageFixed in
library/mysql:86ea90827b110
github.com/moby/sys/user@v0.1.0
0.4.1

Open the chart page →

23,326
pacmanpacman-mhVerified publisher0.1.281 of 2See more

pacman pacman-mh 0.1.28

1 of the 2 container images this version deploys carry CVE-2026-61801.

Container imageDigestPackageFixed in
library/mongo:7.0.28-jammy88785f6f665a
github.com/moby/sys/user@v0.1.0
0.4.1

Open the chart page →

4,133
pagespages1.0.01 of 3See more

pages pages 1.0.0

1 of the 3 container images this version deploys carry CVE-2026-61801.

Container imageDigestPackageFixed in
library/mysql:8.07dcddc01f13b
github.com/moby/sys/user@v0.1.0
0.4.1

Open the chart page →

21,258
pagespages101.0.01 of 3See more

pages pages10 1.0.0

1 of the 3 container images this version deploys carry CVE-2026-61801.

Container imageDigestPackageFixed in
library/mysql:8.07dcddc01f13b
github.com/moby/sys/user@v0.1.0
0.4.1

Open the chart page →

21,258
pagespages1111.0.01 of 3See more

pages pages111 1.0.0

1 of the 3 container images this version deploys carry CVE-2026-61801.

Container imageDigestPackageFixed in
library/mysql:8.07dcddc01f13b
github.com/moby/sys/user@v0.1.0
0.4.1

Open the chart page →

21,258
pagespages21.0.01 of 3See more

pages pages2 1.0.0

1 of the 3 container images this version deploys carry CVE-2026-61801.

Container imageDigestPackageFixed in
library/mysql:8.07dcddc01f13b
github.com/moby/sys/user@v0.1.0
0.4.1

Open the chart page →

21,258
pagespages-alexchmielu1.0.01 of 3See more

pages pages-alexchmielu 1.0.0

1 of the 3 container images this version deploys carry CVE-2026-61801.

Container imageDigestPackageFixed in
library/mysql:8.07dcddc01f13b
github.com/moby/sys/user@v0.1.0
0.4.1

Open the chart page →

21,258
pagespages-alps1.0.01 of 3See more

pages pages-alps 1.0.0

1 of the 3 container images this version deploys carry CVE-2026-61801.

Container imageDigestPackageFixed in
library/mysql:8.07dcddc01f13b
github.com/moby/sys/user@v0.1.0
0.4.1

Open the chart page →

21,258
pagespages-alstom1.0.01 of 3See more

pages pages-alstom 1.0.0

1 of the 3 container images this version deploys carry CVE-2026-61801.

Container imageDigestPackageFixed in
library/mysql:8.07dcddc01f13b
github.com/moby/sys/user@v0.1.0
0.4.1

Open the chart page →

21,258
pagespages-ambala1.0.01 of 3See more

pages pages-ambala 1.0.0

1 of the 3 container images this version deploys carry CVE-2026-61801.

Container imageDigestPackageFixed in
library/mysql:8.07dcddc01f13b
github.com/moby/sys/user@v0.1.0
0.4.1

Open the chart page →

21,258
pagespages-andromeda1.0.01 of 3See more

pages pages-andromeda 1.0.0

1 of the 3 container images this version deploys carry CVE-2026-61801.

Container imageDigestPackageFixed in
library/mysql:8.07dcddc01f13b
github.com/moby/sys/user@v0.1.0
0.4.1

Open the chart page →

21,258
pagespagesbadami1.0.01 of 3See more

pages pagesbadami 1.0.0

1 of the 3 container images this version deploys carry CVE-2026-61801.

Container imageDigestPackageFixed in
library/mysql:8.07dcddc01f13b
github.com/moby/sys/user@v0.1.0
0.4.1

Open the chart page →

21,258
pagespages-blackburn1.0.01 of 3See more

pages pages-blackburn 1.0.0

1 of the 3 container images this version deploys carry CVE-2026-61801.

Container imageDigestPackageFixed in
library/mysql:8.07dcddc01f13b
github.com/moby/sys/user@v0.1.0
0.4.1

Open the chart page →

21,258
pagespages-botes1.0.01 of 3See more

pages pages-botes 1.0.0

1 of the 3 container images this version deploys carry CVE-2026-61801.

Container imageDigestPackageFixed in
library/mysql:8.07dcddc01f13b
github.com/moby/sys/user@v0.1.0
0.4.1

Open the chart page →

21,258
pagespages-brian1.0.01 of 3See more

pages pages-brian 1.0.0

1 of the 3 container images this version deploys carry CVE-2026-61801.

Container imageDigestPackageFixed in
library/mysql:8.07dcddc01f13b
github.com/moby/sys/user@v0.1.0
0.4.1

Open the chart page →

21,258
pagespages-buckll1.0.01 of 3See more

pages pages-buckll 1.0.0

1 of the 3 container images this version deploys carry CVE-2026-61801.

Container imageDigestPackageFixed in
library/mysql:8.07dcddc01f13b
github.com/moby/sys/user@v0.1.0
0.4.1

Open the chart page →

21,258
pagespages-camden1.0.01 of 3See more

pages pages-camden 1.0.0

1 of the 3 container images this version deploys carry CVE-2026-61801.

Container imageDigestPackageFixed in
library/mysql:8.07dcddc01f13b
github.com/moby/sys/user@v0.1.0
0.4.1

Open the chart page →

21,258
pagespages-camden7711.0.01 of 3See more

pages pages-camden771 1.0.0

1 of the 3 container images this version deploys carry CVE-2026-61801.

Container imageDigestPackageFixed in
library/mysql:8.07dcddc01f13b
github.com/moby/sys/user@v0.1.0
0.4.1

Open the chart page →

21,258
pagespages-diarmuidkeane1.0.01 of 3See more

pages pages-diarmuidkeane 1.0.0

1 of the 3 container images this version deploys carry CVE-2026-61801.

Container imageDigestPackageFixed in
library/mysql:8.07dcddc01f13b
github.com/moby/sys/user@v0.1.0
0.4.1

Open the chart page →

21,258
pagespages-draco1.0.01 of 3See more

pages pages-draco 1.0.0

1 of the 3 container images this version deploys carry CVE-2026-61801.

Container imageDigestPackageFixed in
library/mysql:8.07dcddc01f13b
github.com/moby/sys/user@v0.1.0
0.4.1

Open the chart page →

21,258
pagespages-ellora1.0.01 of 3See more

pages pages-ellora 1.0.0

1 of the 3 container images this version deploys carry CVE-2026-61801.

Container imageDigestPackageFixed in
library/mysql:8.07dcddc01f13b
github.com/moby/sys/user@v0.1.0
0.4.1

Open the chart page →

21,258
pagespages-finchley1.0.01 of 3See more

pages pages-finchley 1.0.0

1 of the 3 container images this version deploys carry CVE-2026-61801.

Container imageDigestPackageFixed in
library/mysql:8.07dcddc01f13b
github.com/moby/sys/user@v0.1.0
0.4.1

Open the chart page →

21,258
pagespages-fornax1.0.01 of 3See more

pages pages-fornax 1.0.0

1 of the 3 container images this version deploys carry CVE-2026-61801.

Container imageDigestPackageFixed in
library/mysql:8.07dcddc01f13b
github.com/moby/sys/user@v0.1.0
0.4.1

Open the chart page →

21,258
pagespages-harsh1.0.01 of 3See more

pages pages-harsh 1.0.0

1 of the 3 container images this version deploys carry CVE-2026-61801.

Container imageDigestPackageFixed in
library/mysql:8.07dcddc01f13b
github.com/moby/sys/user@v0.1.0
0.4.1

Open the chart page →

21,258
pagespagesk1.0.01 of 3See more

pages pagesk 1.0.0

1 of the 3 container images this version deploys carry CVE-2026-61801.

Container imageDigestPackageFixed in
library/mysql:8.07dcddc01f13b
github.com/moby/sys/user@v0.1.0
0.4.1

Open the chart page →

21,258
pagespages-microservice-ashim1.0.01 of 3See more

pages pages-microservice-ashim 1.0.0

1 of the 3 container images this version deploys carry CVE-2026-61801.

Container imageDigestPackageFixed in
library/mysql:8.07dcddc01f13b
github.com/moby/sys/user@v0.1.0
0.4.1

Open the chart page →

21,258
pagespages-mihai1.0.01 of 3See more

pages pages-mihai 1.0.0

1 of the 3 container images this version deploys carry CVE-2026-61801.

Container imageDigestPackageFixed in
library/mysql:8.07dcddc01f13b
github.com/moby/sys/user@v0.1.0
0.4.1

Open the chart page →

21,258
pagespages-nivesh1.0.01 of 3See more

pages pages-nivesh 1.0.0

1 of the 3 container images this version deploys carry CVE-2026-61801.

Container imageDigestPackageFixed in
library/mysql:8.07dcddc01f13b
github.com/moby/sys/user@v0.1.0
0.4.1

Open the chart page →

21,258
pagespagessandeepgudu1.0.01 of 3See more

pages pagessandeepgudu 1.0.0

1 of the 3 container images this version deploys carry CVE-2026-61801.

Container imageDigestPackageFixed in
library/mysql:8.07dcddc01f13b
github.com/moby/sys/user@v0.1.0
0.4.1

Open the chart page →

21,258
pagespages-shubhanker1.0.01 of 3See more

pages pages-shubhanker 1.0.0

1 of the 3 container images this version deploys carry CVE-2026-61801.

Container imageDigestPackageFixed in
library/mysql:8.07dcddc01f13b
github.com/moby/sys/user@v0.1.0
0.4.1

Open the chart page →

21,258
pagespages-ssharma09091.0.01 of 3See more

pages pages-ssharma0909 1.0.0

1 of the 3 container images this version deploys carry CVE-2026-61801.

Container imageDigestPackageFixed in
library/mysql:8.07dcddc01f13b
github.com/moby/sys/user@v0.1.0
0.4.1

Open the chart page →

21,258
pagespages-sucharitha1.0.01 of 3See more

pages pages-sucharitha 1.0.0

1 of the 3 container images this version deploys carry CVE-2026-61801.

Container imageDigestPackageFixed in
library/mysql:8.07dcddc01f13b
github.com/moby/sys/user@v0.1.0
0.4.1

Open the chart page →

21,258
pagespages-sudhir1.0.01 of 3See more

pages pages-sudhir 1.0.0

1 of the 3 container images this version deploys carry CVE-2026-61801.

Container imageDigestPackageFixed in
library/mysql:8.07dcddc01f13b
github.com/moby/sys/user@v0.1.0
0.4.1

Open the chart page →

21,258

Container images carrying it

314 by charts deploying them

A fixed version is listed for 1 of the 1 affected package.

Container imageDigestPackageFixed inUsed by
library/mariadb:12.2.2b1cb255a9939
github.com/moby/sys/user@v0.1.0
0.4.1
1
library/mariadb:12.3.3:latest:ltsdd9b303aed4f
github.com/moby/sys/user@v0.1.0
0.4.1
1
library/mariadb:11.7.2fcc7fcd7114a
github.com/moby/sys/user@v0.1.0
0.4.1
1
library/mongo:7.0.140032d2ca20db
github.com/moby/sys/user@v0.1.0
0.4.1
1
library/mongo:5.0.32-focal3b6c281e1c08
github.com/moby/sys/user@v0.1.0
0.4.1
1
library/mongo:8.04968f22d0c6c
github.com/moby/sys/user@v0.1.0
0.4.1
1
library/mongo:noble61dd87ff554d
github.com/moby/sys/user@v0.1.0
0.4.1
1
library/mongo:7.0.28-jammy88785f6f665a
github.com/moby/sys/user@v0.1.0
0.4.1
1
library/mongo:7.0.12ae1cf99fa7bf
github.com/moby/sys/user@v0.1.0
0.4.1
1
library/mongo:8d731d77bfd7a
github.com/moby/sys/user@v0.1.0
0.4.1
1
library/mongo:8.0.11dca8d11fe467
github.com/moby/sys/user@v0.1.0
0.4.1
1
library/mongo:8.2.12e0ce8c35124d
github.com/moby/sys/user@v0.1.0
0.4.1
1
library/mysql:8.4.3106d5197fd8e
github.com/moby/sys/user@v0.1.0
0.4.1
1
library/mysql:8:8.4:8.4.1185b9bf2e29cf
github.com/moby/sys/user@v0.1.0
0.4.1
1
library/mysql:8.4.108dbcf531a03a
github.com/moby/sys/user@v0.1.0
0.4.1
1
library/mysql:9.0.192dc86967801
github.com/moby/sys/user@v0.1.0
0.4.1
1
library/mysql:8.0-debian9382e4f6f7f0
github.com/moby/sys/user@v0.1.0
0.4.1
1
library/mysql:8.0.41bf577825b52a
github.com/moby/sys/user@v0.1.0
0.4.1
1
library/mysql:8.0.39ccb8f749bb5e
github.com/moby/sys/user@v0.1.0
0.4.1
1
library/mysql:8.0.40d58ac93387f6
github.com/moby/sys/user@v0.1.0
0.4.1
1
library/mysql:9.7.2e2bde46db656
github.com/moby/sys/user@v0.1.0
0.4.1
1
library/postgres:18.0073e7c8b84e2
github.com/moby/sys/user@v0.1.0
0.4.1
1
library/postgres:14.232f439458ab6a
github.com/moby/sys/user@v0.1.0
0.4.1
1
library/postgres:17.4304ab8135187
github.com/moby/sys/user@v0.1.0
0.4.1
1
library/postgres:18.43a82e1f56c8f
github.com/moby/sys/user@v0.1.0
0.4.1
1
library/postgres:143e7dd0bfd7bf
github.com/moby/sys/user@v0.1.0
0.4.1
1
library/postgres:1642df6755a411
github.com/moby/sys/user@v0.1.0
0.4.1
1
library/postgres:18.1-alpine3.2144d837eb4c2e
github.com/moby/sys/user@v0.1.0
0.4.1
1
library/postgres:16.11468e1f126ca5
github.com/moby/sys/user@v0.1.0
0.4.1
1
library/postgres:15.19-bookworm539ceaaae49b
github.com/moby/sys/user@v0.1.0
0.4.1
1
library/postgres:16.6557fea37a744
github.com/moby/sys/user@v0.1.0
0.4.1
1
library/postgres:17.5-alpine6567bca8d7bc
github.com/moby/sys/user@v0.1.0
0.4.1
1
library/postgres:18.369e8582b781c
github.com/moby/sys/user@v0.1.0
0.4.1
1
library/postgres:15.186eb0add3b77c
github.com/moby/sys/user@v0.1.0
0.4.1
1
library/postgres:17.4-alpine7062a2109c4b
github.com/moby/sys/user@v0.1.0
0.4.1
1
library/postgres:12-alpine7c8f48705831
github.com/moby/sys/user@v0.1.0
0.4.1
1
library/postgres:157e2070cf6ad0
github.com/moby/sys/user@v0.1.0
0.4.1
1
library/postgres:17.2-alpine7e5df973a748
github.com/moby/sys/user@v0.1.0
0.4.1
1
library/postgres:18:18.6:18.6-trixie:latest86c951e05bf5
github.com/moby/sys/user@v0.1.0
0.4.1
1
library/postgres:18.6-alpine3.23885cf05d376c
github.com/moby/sys/user@v0.1.0
0.4.1
1
library/postgres:18.48ff36f3c6637
github.com/moby/sys/user@v0.1.0
0.4.1
1
library/postgres:18.3a9abf4275f9e
github.com/moby/sys/user@v0.1.0
0.4.1
1
library/postgres:14bdc3027c1610
github.com/moby/sys/user@v0.1.0
0.4.1
1
library/postgres:15c67d80f67f76
github.com/moby/sys/user@v0.1.0
0.4.1
1
library/postgres:15c961aa287d86
github.com/moby/sys/user@v0.1.0
0.4.1
1
library/postgres:16ca0bd484cb98
github.com/moby/sys/user@v0.1.0
0.4.1
1
library/postgres:14ceef4a62198b
github.com/moby/sys/user@v0.1.0
0.4.1
1
library/postgres:17.10ebba4f4de37f
github.com/moby/sys/user@v0.1.0
0.4.1
1
library/postgres:17.6-alpineef257d85f76e
github.com/moby/sys/user@v0.1.0
0.4.1
1
library/postgres:17.5-bookwormfbcea1bd13b6
github.com/moby/sys/user@v0.1.0
0.4.1
1

syft 1.42.1 · advisories as of 9 Oct 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.