StackRadar

CVE-2026-61801

Medium

Advisory

Published 8 Oct 2026In the index since 9 Oct 2026
Severity
Medium
worst across findings
CVSS
5.5
base score, highest
EPSS
—
probability of exploitation
CISA KEV
Not listed
no confirmed exploitation
Charts affected
630
of 18,071 indexed, latest versions
Container images
314
deployed by those charts
Fix available
1 of 1
affected package

github.com/moby/sys/user has a possible DoS via unbounded parsing of user and group database files

Carried by container images the latest versions of 630 of 18,071 indexed charts deploy, on 314 images.

Affected packageAffected versionsFixed inImages
github.com/moby/sys/usergolangv0.1.0, v0.2.0, v0.3.0, v0.4.00.4.1314
OSV records
GHSA-mjcv-p78q-w5fw
Trending
Rank 20 in indexed charts, since 9 Oct 2026. See the ranking →

Charts affected

630 by stars
ChartLatestAffected imagesRadar Score
lynxpromptlynxpromptVerified publisher0.1.31 of 3See more

lynxprompt lynxprompt 0.1.3

1 of the 3 container images this version deploys carry CVE-2026-61801.

Container imageDigestPackageFixed in
library/postgres:17-alpineb0f9560a2de0
github.com/moby/sys/user@v0.1.0
0.4.1

Open the chart page →

2,279
gitea-runnerm0sh1-helm-charts0.2.32 of 2See more

gitea-runner m0sh1-helm-charts 0.2.3

2 of the 2 container images this version deploys carry CVE-2026-61801.

Container imageDigestPackageFixed in
gitea/act_runner:0.3.08368754bb612
github.com/moby/sys/user@v0.3.0
0.4.1
library/docker:29.3.0-dind-alpine3.231ba18449911d
github.com/moby/sys/user@v0.4.0
0.4.1

Open the chart page →

5,032
demoshopmakaira2.4.01 of 4See more

demoshop makaira 2.4.0

1 of the 4 container images this version deploys carry CVE-2026-61801.

Container imageDigestPackageFixed in
library/mysql:86ea90827b110
github.com/moby/sys/user@v0.1.0
0.4.1

Open the chart page →

4,430
mayastormayastorVerified publisher2.12.21 of 31See more

mayastor mayastor 2.12.2

1 of the 31 container images this version deploys carry CVE-2026-61801.

Container imageDigestPackageFixed in
grafana/alloy:v1.8.17790f6f7fbd8
github.com/moby/sys/user@v0.3.0
0.4.1

Open the chart page →

28,986
postgresmicroboxlabs0.3.01 of 1See more

postgres microboxlabs 0.3.0

1 of the 1 container images this version deploys carry CVE-2026-61801.

Container imageDigestPackageFixed in
library/postgres:16.6557fea37a744
github.com/moby/sys/user@v0.1.0
0.4.1

Open the chart page →

4,908
resource-servicemicroservices-learningVerified publisher1.5.01 of 2See more

resource-service microservices-learning 1.5.0

1 of the 2 container images this version deploys carry CVE-2026-61801.

Container imageDigestPackageFixed in
library/postgres:latest74935e722416
github.com/moby/sys/user@v0.1.0
0.4.1

Open the chart page →

5,350
song-servicemicroservices-learningVerified publisher1.2.01 of 2See more

song-service microservices-learning 1.2.0

1 of the 2 container images this version deploys carry CVE-2026-61801.

Container imageDigestPackageFixed in
library/postgres:latestfc973eb97c9f
github.com/moby/sys/user@v0.1.0
0.4.1

Open the chart page →

4,762
argomicroslacVerified publisher0.1.01 of 4See more

argo microslac 0.1.0

1 of the 4 container images this version deploys carry CVE-2026-61801.

Container imageDigestPackageFixed in
library/redis:7.2.4-alpinec8bb255c3559
github.com/moby/sys/user@v0.1.0
0.4.1

Open the chart page →

12,533
zkapps-dashboardminaVerified publisher0.1.21 of 2See more

zkapps-dashboard mina 0.1.2

1 of the 2 container images this version deploys carry CVE-2026-61801.

Container imageDigestPackageFixed in
library/postgres:12-alpine7c8f48705831
github.com/moby/sys/user@v0.1.0
0.4.1

Open the chart page →

2,517
mini-blogmini-blog-helm0.1.01 of 3See more

mini-blog mini-blog-helm 0.1.0

1 of the 3 container images this version deploys carry CVE-2026-61801.

Container imageDigestPackageFixed in
library/postgres:157e2070cf6ad0
github.com/moby/sys/user@v0.1.0
0.4.1

Open the chart page →

14,206
MINTmint8.0.21 of 15See more

MINT mint 8.0.2

1 of the 15 container images this version deploys carry CVE-2026-61801.

Container imageDigestPackageFixed in
library/postgres:13-alpinefb9065b6e3e2
github.com/moby/sys/user@v0.1.0
0.4.1

Open the chart page →

116,691
helmmirasys-chart0.1.01 of 4See more

helm mirasys-chart 0.1.0

1 of the 4 container images this version deploys carry CVE-2026-61801.

Container imageDigestPackageFixed in
library/mongo:latestbac22ea7710d
github.com/moby/sys/user@v0.1.0
0.4.1

Open the chart page →

4,204
account-lookup-servicemojaloop13.0.01 of 4See more

account-lookup-service mojaloop 13.0.0

1 of the 4 container images this version deploys carry CVE-2026-61801.

Container imageDigestPackageFixed in
library/mysql:latestade067ae2fb1
github.com/moby/sys/user@v0.1.0
0.4.1

Open the chart page →

12,858
account-lookup-service-adminmojaloop13.0.01 of 4See more

account-lookup-service-admin mojaloop 13.0.0

1 of the 4 container images this version deploys carry CVE-2026-61801.

Container imageDigestPackageFixed in
library/mysql:latestade067ae2fb1
github.com/moby/sys/user@v0.1.0
0.4.1

Open the chart page →

12,858
admin-api-svcmojaloop12.0.01 of 4See more

admin-api-svc mojaloop 12.0.0

1 of the 4 container images this version deploys carry CVE-2026-61801.

Container imageDigestPackageFixed in
library/mysql:latestade067ae2fb1
github.com/moby/sys/user@v0.1.0
0.4.1

Open the chart page →

13,319
mojaloopmojaloop14.0.01 of 6See more

mojaloop mojaloop 14.0.0

1 of the 6 container images this version deploys carry CVE-2026-61801.

Container imageDigestPackageFixed in
library/mysql:latestade067ae2fb1
github.com/moby/sys/user@v0.1.0
0.4.1

Open the chart page →

20,845
mongodb-admin-interfacemongo-db-admin-interfaceVerified publisher0.1.01 of 2See more

mongodb-admin-interface mongo-db-admin-interface 0.1.0

1 of the 2 container images this version deploys carry CVE-2026-61801.

Container imageDigestPackageFixed in
library/mongo:5.041108d183e97
github.com/moby/sys/user@v0.1.0
0.4.1

Open the chart page →

5,937
codimdmt1905027.2.21 of 3See more

codimd mt190502 7.2.2

1 of the 3 container images this version deploys carry CVE-2026-61801.

Container imageDigestPackageFixed in
library/postgres:1874935e722416
github.com/moby/sys/user@v0.1.0
0.4.1

Open the chart page →

1,636
commafeedmt1905028.2.01 of 3See more

commafeed mt190502 8.2.0

1 of the 3 container images this version deploys carry CVE-2026-61801.

Container imageDigestPackageFixed in
library/postgres:18fc973eb97c9f
github.com/moby/sys/user@v0.1.0
0.4.1

Open the chart page →

4,152
ghostmt1905028.25.12 of 3See more

ghost mt190502 8.25.1

2 of the 3 container images this version deploys carry CVE-2026-61801.

Container imageDigestPackageFixed in
library/ghost:6.25.12654b1e90413
github.com/moby/sys/user@v0.1.0
0.4.1
library/mysql:86ea90827b110
github.com/moby/sys/user@v0.1.0
0.4.1

Open the chart page →

6,324
keycloakmt1905021.4.61 of 3See more

keycloak mt190502 1.4.6

1 of the 3 container images this version deploys carry CVE-2026-61801.

Container imageDigestPackageFixed in
library/postgres:1874935e722416
github.com/moby/sys/user@v0.1.0
0.4.1

Open the chart page →

3,145
memosmt1905027.3.21 of 3See more

memos mt190502 7.3.2

1 of the 3 container images this version deploys carry CVE-2026-61801.

Container imageDigestPackageFixed in
library/postgres:1874935e722416
github.com/moby/sys/user@v0.1.0
0.4.1

Open the chart page →

3,006
minifluxmt1905021.1.61 of 3See more

miniflux mt190502 1.1.6

1 of the 3 container images this version deploys carry CVE-2026-61801.

Container imageDigestPackageFixed in
library/postgres:18fc973eb97c9f
github.com/moby/sys/user@v0.1.0
0.4.1

Open the chart page →

3,029
nightscoutmt1905021.1.01 of 3See more

nightscout mt190502 1.1.0

1 of the 3 container images this version deploys carry CVE-2026-61801.

Container imageDigestPackageFixed in
library/mongo:4.44be76f674fc4
github.com/moby/sys/user@v0.1.0
0.4.1

Open the chart page →

7,471
open-webuimt1905022.3.101 of 3See more

open-webui mt190502 2.3.10

1 of the 3 container images this version deploys carry CVE-2026-61801.

Container imageDigestPackageFixed in
library/postgres:1874935e722416
github.com/moby/sys/user@v0.1.0
0.4.1

Open the chart page →

1,636
paperless-ngxmt1905027.6.141 of 4See more

paperless-ngx mt190502 7.6.14

1 of the 4 container images this version deploys carry CVE-2026-61801.

Container imageDigestPackageFixed in
library/postgres:1874935e722416
github.com/moby/sys/user@v0.1.0
0.4.1

Open the chart page →

13,497
umamimt1905028.1.41 of 3See more

umami mt190502 8.1.4

1 of the 3 container images this version deploys carry CVE-2026-61801.

Container imageDigestPackageFixed in
library/postgres:1874935e722416
github.com/moby/sys/user@v0.1.0
0.4.1

Open the chart page →

4,169
vaultwardenmt1905027.3.41 of 3See more

vaultwarden mt190502 7.3.4

1 of the 3 container images this version deploys carry CVE-2026-61801.

Container imageDigestPackageFixed in
library/postgres:1874935e722416
github.com/moby/sys/user@v0.1.0
0.4.1

Open the chart page →

5,046
vikunjamt1905027.1.21 of 3See more

vikunja mt190502 7.1.2

1 of the 3 container images this version deploys carry CVE-2026-61801.

Container imageDigestPackageFixed in
library/postgres:1874935e722416
github.com/moby/sys/user@v0.1.0
0.4.1

Open the chart page →

3,497
mongodbmulti-chart-app0.1.01 of 1See more

mongodb multi-chart-app 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-61801.

Container imageDigestPackageFixed in
library/mongo:79854f7139445
github.com/moby/sys/user@v0.1.0
0.4.1

Open the chart page →

2,498
my-multi-chart-appmulti-chart-app0.1.01 of 2See more

my-multi-chart-app multi-chart-app 0.1.0

1 of the 2 container images this version deploys carry CVE-2026-61801.

Container imageDigestPackageFixed in
library/mongo:79854f7139445
github.com/moby/sys/user@v0.1.0
0.4.1

Open the chart page →

4,369
devops-demomungari-development-charts1.0.41 of 4See more

devops-demo mungari-development-charts 1.0.4

1 of the 4 container images this version deploys carry CVE-2026-61801.

Container imageDigestPackageFixed in
library/postgres:latestfc973eb97c9f
github.com/moby/sys/user@v0.1.0
0.4.1

Open the chart page →

10,083
pagesmuthu-pages1.0.01 of 3See more

pages muthu-pages 1.0.0

1 of the 3 container images this version deploys carry CVE-2026-61801.

Container imageDigestPackageFixed in
library/mysql:8.07dcddc01f13b
github.com/moby/sys/user@v0.1.0
0.4.1

Open the chart page →

21,258
my-helm-chartmy-helm-chart0.1.01 of 3See more

my-helm-chart my-helm-chart 0.1.0

1 of the 3 container images this version deploys carry CVE-2026-61801.

Container imageDigestPackageFixed in
library/postgres:latest5a5a84b19854
github.com/moby/sys/user@v0.1.0
0.4.1

Open the chart page →

4,666
mychartmysqlweb0.1.01 of 1See more

mychart mysqlweb 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-61801.

Container imageDigestPackageFixed in
qichenxu4pd/mysqlweb:1.2d758d41d9c6b
github.com/moby/sys/user@v0.1.0
0.4.1

Open the chart page →

1,920
pagesnarain1.0.01 of 3See more

pages narain 1.0.0

1 of the 3 container images this version deploys carry CVE-2026-61801.

Container imageDigestPackageFixed in
library/mysql:8.07dcddc01f13b
github.com/moby/sys/user@v0.1.0
0.4.1

Open the chart page →

21,258
pagesnarasimha-pages1.0.01 of 3See more

pages narasimha-pages 1.0.0

1 of the 3 container images this version deploys carry CVE-2026-61801.

Container imageDigestPackageFixed in
library/mysql:8.07dcddc01f13b
github.com/moby/sys/user@v0.1.0
0.4.1

Open the chart page →

21,258
pagesnavin-brixton1.0.01 of 3See more

pages navin-brixton 1.0.0

1 of the 3 container images this version deploys carry CVE-2026-61801.

Container imageDigestPackageFixed in
library/mysql:8.07dcddc01f13b
github.com/moby/sys/user@v0.1.0
0.4.1

Open the chart page →

21,258
jupyterhub-metricsncsaVerified publisher1.3.02 of 5See more

jupyterhub-metrics ncsa 1.3.0

2 of the 5 container images this version deploys carry CVE-2026-61801.

Container imageDigestPackageFixed in
library/postgres:15-alpinef7d23353e1b1
github.com/moby/sys/user@v0.1.0
0.4.1
timescale/timescaledb:latest-pg156343bdc87ca1
github.com/moby/sys/user@v0.1.0
0.4.1

Open the chart page →

3,912
redisneomanexlabsVerified publisher1.1.01 of 1See more

redis neomanexlabs 1.1.0

1 of the 1 container images this version deploys carry CVE-2026-61801.

Container imageDigestPackageFixed in
library/redis:7.4.2-alpine02419de7eddf
github.com/moby/sys/user@v0.1.0
0.4.1

Open the chart page →

2,277
netbirdnetbird1.9.01 of 4See more

netbird netbird 1.9.0

1 of the 4 container images this version deploys carry CVE-2026-61801.

Container imageDigestPackageFixed in
netbirdio/management:0.46.0b0adc4ad4ec6
github.com/moby/sys/user@v0.3.0
0.4.1

Open the chart page →

8,065
nexus-freenexus-freeVerified publisher1.0.31 of 1See more

nexus-free nexus-free 1.0.3

1 of the 1 container images this version deploys carry CVE-2026-61801.

Container imageDigestPackageFixed in
quay.io/fossa/postgres:17.2-15af45ac79f38
github.com/moby/sys/user@v0.1.0
0.4.1

Open the chart page →

1,928
librenmsnimbolus0.5.11 of 3See more

librenms nimbolus 0.5.1

1 of the 3 container images this version deploys carry CVE-2026-61801.

Container imageDigestPackageFixed in
librenms/librenms:24.11.00920bc9117a8
github.com/moby/sys/user@v0.1.0
0.4.1

Open the chart page →

2,791
redisnineinfra-charts0.7.51 of 1See more

redis nineinfra-charts 0.7.5

1 of the 1 container images this version deploys carry CVE-2026-61801.

Container imageDigestPackageFixed in
library/redis:7.2.3a7cee7c8178f
github.com/moby/sys/user@v0.1.0
0.4.1

Open the chart page →

4,920
file-system-ms-helm-chartnotesprojectchart0.1.01 of 2See more

file-system-ms-helm-chart notesprojectchart 0.1.0

1 of the 2 container images this version deploys carry CVE-2026-61801.

Container imageDigestPackageFixed in
library/postgres:latest74935e722416
github.com/moby/sys/user@v0.1.0
0.4.1

Open the chart page →

6,428
keycloak-helm-chartnotesprojectchart0.1.01 of 2See more

keycloak-helm-chart notesprojectchart 0.1.0

1 of the 2 container images this version deploys carry CVE-2026-61801.

Container imageDigestPackageFixed in
library/postgres:latest74935e722416
github.com/moby/sys/user@v0.1.0
0.4.1

Open the chart page →

1,636
logic-ms-helm-chartnotesprojectchart0.1.01 of 2See more

logic-ms-helm-chart notesprojectchart 0.1.0

1 of the 2 container images this version deploys carry CVE-2026-61801.

Container imageDigestPackageFixed in
library/postgres:latest74935e722416
github.com/moby/sys/user@v0.1.0
0.4.1

Open the chart page →

7,456
registration-ms-helm-chartnotesprojectchart0.1.01 of 2See more

registration-ms-helm-chart notesprojectchart 0.1.0

1 of the 2 container images this version deploys carry CVE-2026-61801.

Container imageDigestPackageFixed in
library/postgres:latest74935e722416
github.com/moby/sys/user@v0.1.0
0.4.1

Open the chart page →

6,427
user-data-ms-helm-chartnotesprojectchart0.1.01 of 2See more

user-data-ms-helm-chart notesprojectchart 0.1.0

1 of the 2 container images this version deploys carry CVE-2026-61801.

Container imageDigestPackageFixed in
library/postgres:latest74935e722416
github.com/moby/sys/user@v0.1.0
0.4.1

Open the chart page →

6,384
firecrawlobeoneVerified publisher3.0.181 of 5See more

firecrawl obeone 3.0.18

1 of the 5 container images this version deploys carry CVE-2026-61801.

Container imageDigestPackageFixed in
ghcr.io/firecrawl/nuq-postgres:latestf9388bd25ae2
github.com/moby/sys/user@v0.1.0
0.4.1

Open the chart page →

8,539

Container images carrying it

314 by charts deploying them

A fixed version is listed for 1 of the 1 affected package.

Container imageDigestPackageFixed inUsed by
library/mariadb:12.2.2b1cb255a9939
github.com/moby/sys/user@v0.1.0
0.4.1
1
library/mariadb:12.3.3:latest:ltsdd9b303aed4f
github.com/moby/sys/user@v0.1.0
0.4.1
1
library/mariadb:11.7.2fcc7fcd7114a
github.com/moby/sys/user@v0.1.0
0.4.1
1
library/mongo:7.0.140032d2ca20db
github.com/moby/sys/user@v0.1.0
0.4.1
1
library/mongo:5.0.32-focal3b6c281e1c08
github.com/moby/sys/user@v0.1.0
0.4.1
1
library/mongo:8.04968f22d0c6c
github.com/moby/sys/user@v0.1.0
0.4.1
1
library/mongo:noble61dd87ff554d
github.com/moby/sys/user@v0.1.0
0.4.1
1
library/mongo:7.0.28-jammy88785f6f665a
github.com/moby/sys/user@v0.1.0
0.4.1
1
library/mongo:7.0.12ae1cf99fa7bf
github.com/moby/sys/user@v0.1.0
0.4.1
1
library/mongo:8d731d77bfd7a
github.com/moby/sys/user@v0.1.0
0.4.1
1
library/mongo:8.0.11dca8d11fe467
github.com/moby/sys/user@v0.1.0
0.4.1
1
library/mongo:8.2.12e0ce8c35124d
github.com/moby/sys/user@v0.1.0
0.4.1
1
library/mysql:8.4.3106d5197fd8e
github.com/moby/sys/user@v0.1.0
0.4.1
1
library/mysql:8:8.4:8.4.1185b9bf2e29cf
github.com/moby/sys/user@v0.1.0
0.4.1
1
library/mysql:8.4.108dbcf531a03a
github.com/moby/sys/user@v0.1.0
0.4.1
1
library/mysql:9.0.192dc86967801
github.com/moby/sys/user@v0.1.0
0.4.1
1
library/mysql:8.0-debian9382e4f6f7f0
github.com/moby/sys/user@v0.1.0
0.4.1
1
library/mysql:8.0.41bf577825b52a
github.com/moby/sys/user@v0.1.0
0.4.1
1
library/mysql:8.0.39ccb8f749bb5e
github.com/moby/sys/user@v0.1.0
0.4.1
1
library/mysql:8.0.40d58ac93387f6
github.com/moby/sys/user@v0.1.0
0.4.1
1
library/mysql:9.7.2e2bde46db656
github.com/moby/sys/user@v0.1.0
0.4.1
1
library/postgres:18.0073e7c8b84e2
github.com/moby/sys/user@v0.1.0
0.4.1
1
library/postgres:14.232f439458ab6a
github.com/moby/sys/user@v0.1.0
0.4.1
1
library/postgres:17.4304ab8135187
github.com/moby/sys/user@v0.1.0
0.4.1
1
library/postgres:18.43a82e1f56c8f
github.com/moby/sys/user@v0.1.0
0.4.1
1
library/postgres:143e7dd0bfd7bf
github.com/moby/sys/user@v0.1.0
0.4.1
1
library/postgres:1642df6755a411
github.com/moby/sys/user@v0.1.0
0.4.1
1
library/postgres:18.1-alpine3.2144d837eb4c2e
github.com/moby/sys/user@v0.1.0
0.4.1
1
library/postgres:16.11468e1f126ca5
github.com/moby/sys/user@v0.1.0
0.4.1
1
library/postgres:15.19-bookworm539ceaaae49b
github.com/moby/sys/user@v0.1.0
0.4.1
1
library/postgres:16.6557fea37a744
github.com/moby/sys/user@v0.1.0
0.4.1
1
library/postgres:17.5-alpine6567bca8d7bc
github.com/moby/sys/user@v0.1.0
0.4.1
1
library/postgres:18.369e8582b781c
github.com/moby/sys/user@v0.1.0
0.4.1
1
library/postgres:15.186eb0add3b77c
github.com/moby/sys/user@v0.1.0
0.4.1
1
library/postgres:17.4-alpine7062a2109c4b
github.com/moby/sys/user@v0.1.0
0.4.1
1
library/postgres:12-alpine7c8f48705831
github.com/moby/sys/user@v0.1.0
0.4.1
1
library/postgres:157e2070cf6ad0
github.com/moby/sys/user@v0.1.0
0.4.1
1
library/postgres:17.2-alpine7e5df973a748
github.com/moby/sys/user@v0.1.0
0.4.1
1
library/postgres:18:18.6:18.6-trixie:latest86c951e05bf5
github.com/moby/sys/user@v0.1.0
0.4.1
1
library/postgres:18.6-alpine3.23885cf05d376c
github.com/moby/sys/user@v0.1.0
0.4.1
1
library/postgres:18.48ff36f3c6637
github.com/moby/sys/user@v0.1.0
0.4.1
1
library/postgres:18.3a9abf4275f9e
github.com/moby/sys/user@v0.1.0
0.4.1
1
library/postgres:14bdc3027c1610
github.com/moby/sys/user@v0.1.0
0.4.1
1
library/postgres:15c67d80f67f76
github.com/moby/sys/user@v0.1.0
0.4.1
1
library/postgres:15c961aa287d86
github.com/moby/sys/user@v0.1.0
0.4.1
1
library/postgres:16ca0bd484cb98
github.com/moby/sys/user@v0.1.0
0.4.1
1
library/postgres:14ceef4a62198b
github.com/moby/sys/user@v0.1.0
0.4.1
1
library/postgres:17.10ebba4f4de37f
github.com/moby/sys/user@v0.1.0
0.4.1
1
library/postgres:17.6-alpineef257d85f76e
github.com/moby/sys/user@v0.1.0
0.4.1
1
library/postgres:17.5-bookwormfbcea1bd13b6
github.com/moby/sys/user@v0.1.0
0.4.1
1

syft 1.42.1 · advisories as of 9 Oct 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.