StackRadar

CVE-2026-61801

Medium

Advisory

Published 8 Oct 2026In the index since 9 Oct 2026
Severity
Medium
worst across findings
CVSS
5.5
base score, highest
EPSS
—
probability of exploitation
CISA KEV
Not listed
no confirmed exploitation
Charts affected
630
of 18,071 indexed, latest versions
Container images
314
deployed by those charts
Fix available
1 of 1
affected package

github.com/moby/sys/user has a possible DoS via unbounded parsing of user and group database files

Carried by container images the latest versions of 630 of 18,071 indexed charts deploy, on 314 images.

Affected packageAffected versionsFixed inImages
github.com/moby/sys/usergolangv0.1.0, v0.2.0, v0.3.0, v0.4.00.4.1314
OSV records
GHSA-mjcv-p78q-w5fw
Trending
Rank 20 in indexed charts, since 9 Oct 2026. See the ranking →

Charts affected

630 by stars
ChartLatestAffected imagesRadar Score
simple-mongodbtyk-helm0.1.11 of 1See more

simple-mongodb tyk-helm 0.1.1

1 of the 1 container images this version deploys carry CVE-2026-61801.

Container imageDigestPackageFixed in
library/mongo:4.44be76f674fc4
github.com/moby/sys/user@v0.1.0
0.4.1

Open the chart page →

4,705
unlaunla0.10.01 of 3See more

unla unla 0.10.0

1 of the 3 container images this version deploys carry CVE-2026-61801.

Container imageDigestPackageFixed in
library/postgres:16ca0bd484cb98
github.com/moby/sys/user@v0.1.0
0.4.1

Open the chart page →

10,512
opencloudunxwaresVerified publisher0.2.31 of 13See more

opencloud unxwares 0.2.3

1 of the 13 container images this version deploys carry CVE-2026-61801.

Container imageDigestPackageFixed in
library/postgres:alpine77f585114c32
github.com/moby/sys/user@v0.1.0
0.4.1

Open the chart page →

48,354
simple-prima-notavcnngrVerified publisher0.5.31 of 4See more

simple-prima-nota vcnngr 0.5.3

1 of the 4 container images this version deploys carry CVE-2026-61801.

Container imageDigestPackageFixed in
library/postgres:16-alpine721873c34ceb
github.com/moby/sys/user@v0.1.0
0.4.1

Open the chart page →

5,867
devportalveecode-platform-nextVerified publisher1.0.31 of 1See more

devportal veecode-platform-next 1.0.3

1 of the 1 container images this version deploys carry CVE-2026-61801.

Container imageDigestPackageFixed in
veecode/devportaldigest-pinnede5c84f744994
github.com/moby/sys/user@v0.4.0
0.4.1

Open the chart page →

1,792
velocityvelocity1.0.01 of 2See more

velocity velocity 1.0.0

1 of the 2 container images this version deploys carry CVE-2026-61801.

Container imageDigestPackageFixed in
library/postgres:16-alpine721873c34ceb
github.com/moby/sys/user@v0.1.0
0.4.1

Open the chart page →

1,186
bugsinkvictorlane0.3.71 of 2See more

bugsink victorlane 0.3.7

1 of the 2 container images this version deploys carry CVE-2026-61801.

Container imageDigestPackageFixed in
library/mariadb:12.0-noble607835cd628b
github.com/moby/sys/user@v0.1.0
0.4.1

Open the chart page →

4,462
pagesvictor-pages1.0.01 of 3See more

pages victor-pages 1.0.0

1 of the 3 container images this version deploys carry CVE-2026-61801.

Container imageDigestPackageFixed in
library/mysql:8.07dcddc01f13b
github.com/moby/sys/user@v0.1.0
0.4.1

Open the chart page →

21,258
postgresappvoting-app-helm-charts-repoVerified publisher1.0.01 of 1See more

postgresapp voting-app-helm-charts-repo 1.0.0

1 of the 1 container images this version deploys carry CVE-2026-61801.

Container imageDigestPackageFixed in
library/postgres:latest74935e722416
github.com/moby/sys/user@v0.1.0
0.4.1

Open the chart page →

1,636
voteappvoting-app-helm-charts-repoVerified publisher1.0.01 of 5See more

voteapp voting-app-helm-charts-repo 1.0.0

1 of the 5 container images this version deploys carry CVE-2026-61801.

Container imageDigestPackageFixed in
library/postgres:latestfc973eb97c9f
github.com/moby/sys/user@v0.1.0
0.4.1

Open the chart page →

9,572
postgresappvoting-app-helm-charts-repo-cloudVerified publisher1.0.01 of 1See more

postgresapp voting-app-helm-charts-repo-cloud 1.0.0

1 of the 1 container images this version deploys carry CVE-2026-61801.

Container imageDigestPackageFixed in
library/postgres:latest74935e722416
github.com/moby/sys/user@v0.1.0
0.4.1

Open the chart page →

1,636
voteappvoting-app-helm-charts-repo-cloudVerified publisher1.0.01 of 5See more

voteapp voting-app-helm-charts-repo-cloud 1.0.0

1 of the 5 container images this version deploys carry CVE-2026-61801.

Container imageDigestPackageFixed in
library/postgres:latestfc973eb97c9f
github.com/moby/sys/user@v0.1.0
0.4.1

Open the chart page →

9,572
voting-app-envvoting-example-with-env0.0.31 of 6See more

voting-app-env voting-example-with-env 0.0.3

1 of the 6 container images this version deploys carry CVE-2026-61801.

Container imageDigestPackageFixed in
library/postgres:18.3-alpine3.2354451ecb8ab3
github.com/moby/sys/user@v0.1.0
0.4.1

Open the chart page →

8,038
gateway-control-planewallarmVerified publisher0.2.01 of 2See more

gateway-control-plane wallarm 0.2.0

1 of the 2 container images this version deploys carry CVE-2026-61801.

Container imageDigestPackageFixed in
timescale/timescaledb:latest-pg17b346edcdb51a
github.com/moby/sys/user@v0.1.0
0.4.1

Open the chart page →

1,886
pageswalter1.0.01 of 3See more

pages walter 1.0.0

1 of the 3 container images this version deploys carry CVE-2026-61801.

Container imageDigestPackageFixed in
library/mysql:8.07dcddc01f13b
github.com/moby/sys/user@v0.1.0
0.4.1

Open the chart page →

21,258
wardnwardnVerified publisher0.1.01 of 3See more

wardn wardn 0.1.0

1 of the 3 container images this version deploys carry CVE-2026-61801.

Container imageDigestPackageFixed in
library/postgres:16-alpine721873c34ceb
github.com/moby/sys/user@v0.1.0
0.4.1

Open the chart page →

837
web-dvwaweb-dvwa1.16.01 of 2See more

web-dvwa web-dvwa 1.16.0

1 of the 2 container images this version deploys carry CVE-2026-61801.

Container imageDigestPackageFixed in
library/mariadb:107db29378d4fd
github.com/moby/sys/user@v0.1.0
0.4.1

Open the chart page →

11,002
webhookie-allwebhookie0.1.21 of 3See more

webhookie-all webhookie 0.1.2

1 of the 3 container images this version deploys carry CVE-2026-61801.

Container imageDigestPackageFixed in
library/mongo:4.44be76f674fc4
github.com/moby/sys/user@v0.1.0
0.4.1

Open the chart page →

30,446
mesherywener1.0.701 of 1See more

meshery wener 1.0.70

1 of the 1 container images this version deploys carry CVE-2026-61801.

Container imageDigestPackageFixed in
meshery/meshery:stable-latest44b64ee128fb
github.com/moby/sys/user@v0.4.0
0.4.1

Open the chart page →

1,841
rancherwener2.15.22 of 2See more

rancher wener 2.15.2

2 of the 2 container images this version deploys carry CVE-2026-61801.

Container imageDigestPackageFixed in
rancher/rancher:v2.15.20c3d8e570255
github.com/moby/sys/user@v0.4.0
0.4.1
rancher/shell:v0.8.21eeed72d4eda
github.com/moby/sys/user@v0.4.0
0.4.1

Open the chart page →

2,326
harborwenerme1.19.21 of 8See more

harbor wenerme 1.19.2

1 of the 8 container images this version deploys carry CVE-2026-61801.

Container imageDigestPackageFixed in
goharbor/trivy-adapter-photon:v2.15.2215c07b71c37
github.com/moby/sys/user@v0.4.0
0.4.1

Open the chart page →

2,723
mesherywenerme1.0.701 of 1See more

meshery wenerme 1.0.70

1 of the 1 container images this version deploys carry CVE-2026-61801.

Container imageDigestPackageFixed in
meshery/meshery:stable-latest44b64ee128fb
github.com/moby/sys/user@v0.4.0
0.4.1

Open the chart page →

1,841
rancherwenerme2.15.22 of 2See more

rancher wenerme 2.15.2

2 of the 2 container images this version deploys carry CVE-2026-61801.

Container imageDigestPackageFixed in
rancher/rancher:v2.15.20c3d8e570255
github.com/moby/sys/user@v0.4.0
0.4.1
rancher/shell:v0.8.21eeed72d4eda
github.com/moby/sys/user@v0.4.0
0.4.1

Open the chart page →

2,326
wexa-studiowexa-studio1.2.01 of 15See more

wexa-studio wexa-studio 1.2.0

1 of the 15 container images this version deploys carry CVE-2026-61801.

Container imageDigestPackageFixed in
library/postgres:15-alpinef7d23353e1b1
github.com/moby/sys/user@v0.1.0
0.4.1

Open the chart page →

16,229
wikiwikijs3.0.01 of 2See more

wiki wikijs 3.0.0

1 of the 2 container images this version deploys carry CVE-2026-61801.

Container imageDigestPackageFixed in
library/postgres:1874935e722416
github.com/moby/sys/user@v0.1.0
0.4.1

Open the chart page →

4,254
wordpress-alpinewordpress-alpine1.5.191 of 6See more

wordpress-alpine wordpress-alpine 1.5.19

1 of the 6 container images this version deploys carry CVE-2026-61801.

Container imageDigestPackageFixed in
library/mariadb:12.3.2628f228f0fd5
github.com/moby/sys/user@v0.1.0
0.4.1

Open the chart page →

4,567
wp-gats-helmwordpress-gatsby0.0.11 of 3See more

wp-gats-helm wordpress-gatsby 0.0.1

1 of the 3 container images this version deploys carry CVE-2026-61801.

Container imageDigestPackageFixed in
library/mysql:latest9d48c42f8341
github.com/moby/sys/user@v0.1.0
0.4.1

Open the chart page →

3,459
Wordpresswordpress-mariadb1.0.21 of 2See more

Wordpress wordpress-mariadb 1.0.2

1 of the 2 container images this version deploys carry CVE-2026-61801.

Container imageDigestPackageFixed in
library/mariadb:lts2bdff1534a7e
github.com/moby/sys/user@v0.1.0
0.4.1

Open the chart page →

5,540
xkopsxkops0.1.01 of 5See more

xkops xkops 0.1.0

1 of the 5 container images this version deploys carry CVE-2026-61801.

Container imageDigestPackageFixed in
library/mongo:latestbac22ea7710d
github.com/moby/sys/user@v0.1.0
0.4.1

Open the chart page →

15,282
zoo-project-druzoo-projectOfficialVerified publisher0.10.91 of 6See more

zoo-project-dru zoo-project 0.10.9

1 of the 6 container images this version deploys carry CVE-2026-61801.

Container imageDigestPackageFixed in
library/postgres:18.6-alpine3.2477f585114c32
github.com/moby/sys/user@v0.1.0
0.4.1

Open the chart page →

6,941

Container images carrying it

314 by charts deploying them

A fixed version is listed for 1 of the 1 affected package.

Container imageDigestPackageFixed inUsed by
library/mariadb:12.2.2b1cb255a9939
github.com/moby/sys/user@v0.1.0
0.4.1
1
library/mariadb:12.3.3:latest:ltsdd9b303aed4f
github.com/moby/sys/user@v0.1.0
0.4.1
1
library/mariadb:11.7.2fcc7fcd7114a
github.com/moby/sys/user@v0.1.0
0.4.1
1
library/mongo:7.0.140032d2ca20db
github.com/moby/sys/user@v0.1.0
0.4.1
1
library/mongo:5.0.32-focal3b6c281e1c08
github.com/moby/sys/user@v0.1.0
0.4.1
1
library/mongo:8.04968f22d0c6c
github.com/moby/sys/user@v0.1.0
0.4.1
1
library/mongo:noble61dd87ff554d
github.com/moby/sys/user@v0.1.0
0.4.1
1
library/mongo:7.0.28-jammy88785f6f665a
github.com/moby/sys/user@v0.1.0
0.4.1
1
library/mongo:7.0.12ae1cf99fa7bf
github.com/moby/sys/user@v0.1.0
0.4.1
1
library/mongo:8d731d77bfd7a
github.com/moby/sys/user@v0.1.0
0.4.1
1
library/mongo:8.0.11dca8d11fe467
github.com/moby/sys/user@v0.1.0
0.4.1
1
library/mongo:8.2.12e0ce8c35124d
github.com/moby/sys/user@v0.1.0
0.4.1
1
library/mysql:8.4.3106d5197fd8e
github.com/moby/sys/user@v0.1.0
0.4.1
1
library/mysql:8:8.4:8.4.1185b9bf2e29cf
github.com/moby/sys/user@v0.1.0
0.4.1
1
library/mysql:8.4.108dbcf531a03a
github.com/moby/sys/user@v0.1.0
0.4.1
1
library/mysql:9.0.192dc86967801
github.com/moby/sys/user@v0.1.0
0.4.1
1
library/mysql:8.0-debian9382e4f6f7f0
github.com/moby/sys/user@v0.1.0
0.4.1
1
library/mysql:8.0.41bf577825b52a
github.com/moby/sys/user@v0.1.0
0.4.1
1
library/mysql:8.0.39ccb8f749bb5e
github.com/moby/sys/user@v0.1.0
0.4.1
1
library/mysql:8.0.40d58ac93387f6
github.com/moby/sys/user@v0.1.0
0.4.1
1
library/mysql:9.7.2e2bde46db656
github.com/moby/sys/user@v0.1.0
0.4.1
1
library/postgres:18.0073e7c8b84e2
github.com/moby/sys/user@v0.1.0
0.4.1
1
library/postgres:14.232f439458ab6a
github.com/moby/sys/user@v0.1.0
0.4.1
1
library/postgres:17.4304ab8135187
github.com/moby/sys/user@v0.1.0
0.4.1
1
library/postgres:18.43a82e1f56c8f
github.com/moby/sys/user@v0.1.0
0.4.1
1
library/postgres:143e7dd0bfd7bf
github.com/moby/sys/user@v0.1.0
0.4.1
1
library/postgres:1642df6755a411
github.com/moby/sys/user@v0.1.0
0.4.1
1
library/postgres:18.1-alpine3.2144d837eb4c2e
github.com/moby/sys/user@v0.1.0
0.4.1
1
library/postgres:16.11468e1f126ca5
github.com/moby/sys/user@v0.1.0
0.4.1
1
library/postgres:15.19-bookworm539ceaaae49b
github.com/moby/sys/user@v0.1.0
0.4.1
1
library/postgres:16.6557fea37a744
github.com/moby/sys/user@v0.1.0
0.4.1
1
library/postgres:17.5-alpine6567bca8d7bc
github.com/moby/sys/user@v0.1.0
0.4.1
1
library/postgres:18.369e8582b781c
github.com/moby/sys/user@v0.1.0
0.4.1
1
library/postgres:15.186eb0add3b77c
github.com/moby/sys/user@v0.1.0
0.4.1
1
library/postgres:17.4-alpine7062a2109c4b
github.com/moby/sys/user@v0.1.0
0.4.1
1
library/postgres:12-alpine7c8f48705831
github.com/moby/sys/user@v0.1.0
0.4.1
1
library/postgres:157e2070cf6ad0
github.com/moby/sys/user@v0.1.0
0.4.1
1
library/postgres:17.2-alpine7e5df973a748
github.com/moby/sys/user@v0.1.0
0.4.1
1
library/postgres:18:18.6:18.6-trixie:latest86c951e05bf5
github.com/moby/sys/user@v0.1.0
0.4.1
1
library/postgres:18.6-alpine3.23885cf05d376c
github.com/moby/sys/user@v0.1.0
0.4.1
1
library/postgres:18.48ff36f3c6637
github.com/moby/sys/user@v0.1.0
0.4.1
1
library/postgres:18.3a9abf4275f9e
github.com/moby/sys/user@v0.1.0
0.4.1
1
library/postgres:14bdc3027c1610
github.com/moby/sys/user@v0.1.0
0.4.1
1
library/postgres:15c67d80f67f76
github.com/moby/sys/user@v0.1.0
0.4.1
1
library/postgres:15c961aa287d86
github.com/moby/sys/user@v0.1.0
0.4.1
1
library/postgres:16ca0bd484cb98
github.com/moby/sys/user@v0.1.0
0.4.1
1
library/postgres:14ceef4a62198b
github.com/moby/sys/user@v0.1.0
0.4.1
1
library/postgres:17.10ebba4f4de37f
github.com/moby/sys/user@v0.1.0
0.4.1
1
library/postgres:17.6-alpineef257d85f76e
github.com/moby/sys/user@v0.1.0
0.4.1
1
library/postgres:17.5-bookwormfbcea1bd13b6
github.com/moby/sys/user@v0.1.0
0.4.1
1

syft 1.42.1 · advisories as of 9 Oct 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.