StackRadar

CVE-2026-61801

Medium

Advisory

Published 8 Oct 2026In the index since 9 Oct 2026
Severity
Medium
worst across findings
CVSS
5.5
base score, highest
EPSS
—
probability of exploitation
CISA KEV
Not listed
no confirmed exploitation
Charts affected
630
of 18,071 indexed, latest versions
Container images
314
deployed by those charts
Fix available
1 of 1
affected package

github.com/moby/sys/user has a possible DoS via unbounded parsing of user and group database files

Carried by container images the latest versions of 630 of 18,071 indexed charts deploy, on 314 images.

Affected packageAffected versionsFixed inImages
github.com/moby/sys/usergolangv0.1.0, v0.2.0, v0.3.0, v0.4.00.4.1314
OSV records
GHSA-mjcv-p78q-w5fw
Trending
Rank 20 in indexed charts, since 9 Oct 2026. See the ranking →

Charts affected

630 by stars
ChartLatestAffected imagesRadar Score
lynxpromptlynxpromptVerified publisher0.1.31 of 3See more

lynxprompt lynxprompt 0.1.3

1 of the 3 container images this version deploys carry CVE-2026-61801.

Container imageDigestPackageFixed in
library/postgres:17-alpineb0f9560a2de0
github.com/moby/sys/user@v0.1.0
0.4.1

Open the chart page →

2,279
gitea-runnerm0sh1-helm-charts0.2.32 of 2See more

gitea-runner m0sh1-helm-charts 0.2.3

2 of the 2 container images this version deploys carry CVE-2026-61801.

Container imageDigestPackageFixed in
gitea/act_runner:0.3.08368754bb612
github.com/moby/sys/user@v0.3.0
0.4.1
library/docker:29.3.0-dind-alpine3.231ba18449911d
github.com/moby/sys/user@v0.4.0
0.4.1

Open the chart page →

5,032
demoshopmakaira2.4.01 of 4See more

demoshop makaira 2.4.0

1 of the 4 container images this version deploys carry CVE-2026-61801.

Container imageDigestPackageFixed in
library/mysql:86ea90827b110
github.com/moby/sys/user@v0.1.0
0.4.1

Open the chart page →

4,430
mayastormayastorVerified publisher2.12.21 of 31See more

mayastor mayastor 2.12.2

1 of the 31 container images this version deploys carry CVE-2026-61801.

Container imageDigestPackageFixed in
grafana/alloy:v1.8.17790f6f7fbd8
github.com/moby/sys/user@v0.3.0
0.4.1

Open the chart page →

28,986
postgresmicroboxlabs0.3.01 of 1See more

postgres microboxlabs 0.3.0

1 of the 1 container images this version deploys carry CVE-2026-61801.

Container imageDigestPackageFixed in
library/postgres:16.6557fea37a744
github.com/moby/sys/user@v0.1.0
0.4.1

Open the chart page →

4,908
resource-servicemicroservices-learningVerified publisher1.5.01 of 2See more

resource-service microservices-learning 1.5.0

1 of the 2 container images this version deploys carry CVE-2026-61801.

Container imageDigestPackageFixed in
library/postgres:latest74935e722416
github.com/moby/sys/user@v0.1.0
0.4.1

Open the chart page →

5,350
song-servicemicroservices-learningVerified publisher1.2.01 of 2See more

song-service microservices-learning 1.2.0

1 of the 2 container images this version deploys carry CVE-2026-61801.

Container imageDigestPackageFixed in
library/postgres:latestfc973eb97c9f
github.com/moby/sys/user@v0.1.0
0.4.1

Open the chart page →

4,762
argomicroslacVerified publisher0.1.01 of 4See more

argo microslac 0.1.0

1 of the 4 container images this version deploys carry CVE-2026-61801.

Container imageDigestPackageFixed in
library/redis:7.2.4-alpinec8bb255c3559
github.com/moby/sys/user@v0.1.0
0.4.1

Open the chart page →

12,533
zkapps-dashboardminaVerified publisher0.1.21 of 2See more

zkapps-dashboard mina 0.1.2

1 of the 2 container images this version deploys carry CVE-2026-61801.

Container imageDigestPackageFixed in
library/postgres:12-alpine7c8f48705831
github.com/moby/sys/user@v0.1.0
0.4.1

Open the chart page →

2,517
mini-blogmini-blog-helm0.1.01 of 3See more

mini-blog mini-blog-helm 0.1.0

1 of the 3 container images this version deploys carry CVE-2026-61801.

Container imageDigestPackageFixed in
library/postgres:157e2070cf6ad0
github.com/moby/sys/user@v0.1.0
0.4.1

Open the chart page →

14,206
MINTmint8.0.21 of 15See more

MINT mint 8.0.2

1 of the 15 container images this version deploys carry CVE-2026-61801.

Container imageDigestPackageFixed in
library/postgres:13-alpinefb9065b6e3e2
github.com/moby/sys/user@v0.1.0
0.4.1

Open the chart page →

116,691
helmmirasys-chart0.1.01 of 4See more

helm mirasys-chart 0.1.0

1 of the 4 container images this version deploys carry CVE-2026-61801.

Container imageDigestPackageFixed in
library/mongo:latestbac22ea7710d
github.com/moby/sys/user@v0.1.0
0.4.1

Open the chart page →

4,204
account-lookup-servicemojaloop13.0.01 of 4See more

account-lookup-service mojaloop 13.0.0

1 of the 4 container images this version deploys carry CVE-2026-61801.

Container imageDigestPackageFixed in
library/mysql:latestade067ae2fb1
github.com/moby/sys/user@v0.1.0
0.4.1

Open the chart page →

12,858
account-lookup-service-adminmojaloop13.0.01 of 4See more

account-lookup-service-admin mojaloop 13.0.0

1 of the 4 container images this version deploys carry CVE-2026-61801.

Container imageDigestPackageFixed in
library/mysql:latestade067ae2fb1
github.com/moby/sys/user@v0.1.0
0.4.1

Open the chart page →

12,858
admin-api-svcmojaloop12.0.01 of 4See more

admin-api-svc mojaloop 12.0.0

1 of the 4 container images this version deploys carry CVE-2026-61801.

Container imageDigestPackageFixed in
library/mysql:latestade067ae2fb1
github.com/moby/sys/user@v0.1.0
0.4.1

Open the chart page →

13,319
mojaloopmojaloop14.0.01 of 6See more

mojaloop mojaloop 14.0.0

1 of the 6 container images this version deploys carry CVE-2026-61801.

Container imageDigestPackageFixed in
library/mysql:latestade067ae2fb1
github.com/moby/sys/user@v0.1.0
0.4.1

Open the chart page →

20,845
mongodb-admin-interfacemongo-db-admin-interfaceVerified publisher0.1.01 of 2See more

mongodb-admin-interface mongo-db-admin-interface 0.1.0

1 of the 2 container images this version deploys carry CVE-2026-61801.

Container imageDigestPackageFixed in
library/mongo:5.041108d183e97
github.com/moby/sys/user@v0.1.0
0.4.1

Open the chart page →

5,937
codimdmt1905027.2.21 of 3See more

codimd mt190502 7.2.2

1 of the 3 container images this version deploys carry CVE-2026-61801.

Container imageDigestPackageFixed in
library/postgres:1874935e722416
github.com/moby/sys/user@v0.1.0
0.4.1

Open the chart page →

1,636
commafeedmt1905028.2.01 of 3See more

commafeed mt190502 8.2.0

1 of the 3 container images this version deploys carry CVE-2026-61801.

Container imageDigestPackageFixed in
library/postgres:18fc973eb97c9f
github.com/moby/sys/user@v0.1.0
0.4.1

Open the chart page →

4,152
ghostmt1905028.25.12 of 3See more

ghost mt190502 8.25.1

2 of the 3 container images this version deploys carry CVE-2026-61801.

Container imageDigestPackageFixed in
library/ghost:6.25.12654b1e90413
github.com/moby/sys/user@v0.1.0
0.4.1
library/mysql:86ea90827b110
github.com/moby/sys/user@v0.1.0
0.4.1

Open the chart page →

6,324
keycloakmt1905021.4.61 of 3See more

keycloak mt190502 1.4.6

1 of the 3 container images this version deploys carry CVE-2026-61801.

Container imageDigestPackageFixed in
library/postgres:1874935e722416
github.com/moby/sys/user@v0.1.0
0.4.1

Open the chart page →

3,145
memosmt1905027.3.21 of 3See more

memos mt190502 7.3.2

1 of the 3 container images this version deploys carry CVE-2026-61801.

Container imageDigestPackageFixed in
library/postgres:1874935e722416
github.com/moby/sys/user@v0.1.0
0.4.1

Open the chart page →

3,006
minifluxmt1905021.1.61 of 3See more

miniflux mt190502 1.1.6

1 of the 3 container images this version deploys carry CVE-2026-61801.

Container imageDigestPackageFixed in
library/postgres:18fc973eb97c9f
github.com/moby/sys/user@v0.1.0
0.4.1

Open the chart page →

3,029
nightscoutmt1905021.1.01 of 3See more

nightscout mt190502 1.1.0

1 of the 3 container images this version deploys carry CVE-2026-61801.

Container imageDigestPackageFixed in
library/mongo:4.44be76f674fc4
github.com/moby/sys/user@v0.1.0
0.4.1

Open the chart page →

7,471
open-webuimt1905022.3.101 of 3See more

open-webui mt190502 2.3.10

1 of the 3 container images this version deploys carry CVE-2026-61801.

Container imageDigestPackageFixed in
library/postgres:1874935e722416
github.com/moby/sys/user@v0.1.0
0.4.1

Open the chart page →

1,636
paperless-ngxmt1905027.6.141 of 4See more

paperless-ngx mt190502 7.6.14

1 of the 4 container images this version deploys carry CVE-2026-61801.

Container imageDigestPackageFixed in
library/postgres:1874935e722416
github.com/moby/sys/user@v0.1.0
0.4.1

Open the chart page →

13,497
umamimt1905028.1.41 of 3See more

umami mt190502 8.1.4

1 of the 3 container images this version deploys carry CVE-2026-61801.

Container imageDigestPackageFixed in
library/postgres:1874935e722416
github.com/moby/sys/user@v0.1.0
0.4.1

Open the chart page →

4,169
vaultwardenmt1905027.3.41 of 3See more

vaultwarden mt190502 7.3.4

1 of the 3 container images this version deploys carry CVE-2026-61801.

Container imageDigestPackageFixed in
library/postgres:1874935e722416
github.com/moby/sys/user@v0.1.0
0.4.1

Open the chart page →

5,046
vikunjamt1905027.1.21 of 3See more

vikunja mt190502 7.1.2

1 of the 3 container images this version deploys carry CVE-2026-61801.

Container imageDigestPackageFixed in
library/postgres:1874935e722416
github.com/moby/sys/user@v0.1.0
0.4.1

Open the chart page →

3,497
mongodbmulti-chart-app0.1.01 of 1See more

mongodb multi-chart-app 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-61801.

Container imageDigestPackageFixed in
library/mongo:79854f7139445
github.com/moby/sys/user@v0.1.0
0.4.1

Open the chart page →

2,498
my-multi-chart-appmulti-chart-app0.1.01 of 2See more

my-multi-chart-app multi-chart-app 0.1.0

1 of the 2 container images this version deploys carry CVE-2026-61801.

Container imageDigestPackageFixed in
library/mongo:79854f7139445
github.com/moby/sys/user@v0.1.0
0.4.1

Open the chart page →

4,369
devops-demomungari-development-charts1.0.41 of 4See more

devops-demo mungari-development-charts 1.0.4

1 of the 4 container images this version deploys carry CVE-2026-61801.

Container imageDigestPackageFixed in
library/postgres:latestfc973eb97c9f
github.com/moby/sys/user@v0.1.0
0.4.1

Open the chart page →

10,083
pagesmuthu-pages1.0.01 of 3See more

pages muthu-pages 1.0.0

1 of the 3 container images this version deploys carry CVE-2026-61801.

Container imageDigestPackageFixed in
library/mysql:8.07dcddc01f13b
github.com/moby/sys/user@v0.1.0
0.4.1

Open the chart page →

21,258
my-helm-chartmy-helm-chart0.1.01 of 3See more

my-helm-chart my-helm-chart 0.1.0

1 of the 3 container images this version deploys carry CVE-2026-61801.

Container imageDigestPackageFixed in
library/postgres:latest5a5a84b19854
github.com/moby/sys/user@v0.1.0
0.4.1

Open the chart page →

4,666
mychartmysqlweb0.1.01 of 1See more

mychart mysqlweb 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-61801.

Container imageDigestPackageFixed in
qichenxu4pd/mysqlweb:1.2d758d41d9c6b
github.com/moby/sys/user@v0.1.0
0.4.1

Open the chart page →

1,920
pagesnarain1.0.01 of 3See more

pages narain 1.0.0

1 of the 3 container images this version deploys carry CVE-2026-61801.

Container imageDigestPackageFixed in
library/mysql:8.07dcddc01f13b
github.com/moby/sys/user@v0.1.0
0.4.1

Open the chart page →

21,258
pagesnarasimha-pages1.0.01 of 3See more

pages narasimha-pages 1.0.0

1 of the 3 container images this version deploys carry CVE-2026-61801.

Container imageDigestPackageFixed in
library/mysql:8.07dcddc01f13b
github.com/moby/sys/user@v0.1.0
0.4.1

Open the chart page →

21,258
pagesnavin-brixton1.0.01 of 3See more

pages navin-brixton 1.0.0

1 of the 3 container images this version deploys carry CVE-2026-61801.

Container imageDigestPackageFixed in
library/mysql:8.07dcddc01f13b
github.com/moby/sys/user@v0.1.0
0.4.1

Open the chart page →

21,258
jupyterhub-metricsncsaVerified publisher1.3.02 of 5See more

jupyterhub-metrics ncsa 1.3.0

2 of the 5 container images this version deploys carry CVE-2026-61801.

Container imageDigestPackageFixed in
library/postgres:15-alpinef7d23353e1b1
github.com/moby/sys/user@v0.1.0
0.4.1
timescale/timescaledb:latest-pg156343bdc87ca1
github.com/moby/sys/user@v0.1.0
0.4.1

Open the chart page →

3,912
redisneomanexlabsVerified publisher1.1.01 of 1See more

redis neomanexlabs 1.1.0

1 of the 1 container images this version deploys carry CVE-2026-61801.

Container imageDigestPackageFixed in
library/redis:7.4.2-alpine02419de7eddf
github.com/moby/sys/user@v0.1.0
0.4.1

Open the chart page →

2,277
netbirdnetbird1.9.01 of 4See more

netbird netbird 1.9.0

1 of the 4 container images this version deploys carry CVE-2026-61801.

Container imageDigestPackageFixed in
netbirdio/management:0.46.0b0adc4ad4ec6
github.com/moby/sys/user@v0.3.0
0.4.1

Open the chart page →

8,065
nexus-freenexus-freeVerified publisher1.0.31 of 1See more

nexus-free nexus-free 1.0.3

1 of the 1 container images this version deploys carry CVE-2026-61801.

Container imageDigestPackageFixed in
quay.io/fossa/postgres:17.2-15af45ac79f38
github.com/moby/sys/user@v0.1.0
0.4.1

Open the chart page →

1,928
librenmsnimbolus0.5.11 of 3See more

librenms nimbolus 0.5.1

1 of the 3 container images this version deploys carry CVE-2026-61801.

Container imageDigestPackageFixed in
librenms/librenms:24.11.00920bc9117a8
github.com/moby/sys/user@v0.1.0
0.4.1

Open the chart page →

2,791
redisnineinfra-charts0.7.51 of 1See more

redis nineinfra-charts 0.7.5

1 of the 1 container images this version deploys carry CVE-2026-61801.

Container imageDigestPackageFixed in
library/redis:7.2.3a7cee7c8178f
github.com/moby/sys/user@v0.1.0
0.4.1

Open the chart page →

4,920
file-system-ms-helm-chartnotesprojectchart0.1.01 of 2See more

file-system-ms-helm-chart notesprojectchart 0.1.0

1 of the 2 container images this version deploys carry CVE-2026-61801.

Container imageDigestPackageFixed in
library/postgres:latest74935e722416
github.com/moby/sys/user@v0.1.0
0.4.1

Open the chart page →

6,428
keycloak-helm-chartnotesprojectchart0.1.01 of 2See more

keycloak-helm-chart notesprojectchart 0.1.0

1 of the 2 container images this version deploys carry CVE-2026-61801.

Container imageDigestPackageFixed in
library/postgres:latest74935e722416
github.com/moby/sys/user@v0.1.0
0.4.1

Open the chart page →

1,636
logic-ms-helm-chartnotesprojectchart0.1.01 of 2See more

logic-ms-helm-chart notesprojectchart 0.1.0

1 of the 2 container images this version deploys carry CVE-2026-61801.

Container imageDigestPackageFixed in
library/postgres:latest74935e722416
github.com/moby/sys/user@v0.1.0
0.4.1

Open the chart page →

7,456
registration-ms-helm-chartnotesprojectchart0.1.01 of 2See more

registration-ms-helm-chart notesprojectchart 0.1.0

1 of the 2 container images this version deploys carry CVE-2026-61801.

Container imageDigestPackageFixed in
library/postgres:latest74935e722416
github.com/moby/sys/user@v0.1.0
0.4.1

Open the chart page →

6,427
user-data-ms-helm-chartnotesprojectchart0.1.01 of 2See more

user-data-ms-helm-chart notesprojectchart 0.1.0

1 of the 2 container images this version deploys carry CVE-2026-61801.

Container imageDigestPackageFixed in
library/postgres:latest74935e722416
github.com/moby/sys/user@v0.1.0
0.4.1

Open the chart page →

6,384
firecrawlobeoneVerified publisher3.0.181 of 5See more

firecrawl obeone 3.0.18

1 of the 5 container images this version deploys carry CVE-2026-61801.

Container imageDigestPackageFixed in
ghcr.io/firecrawl/nuq-postgres:latestf9388bd25ae2
github.com/moby/sys/user@v0.1.0
0.4.1

Open the chart page →

8,539

Container images carrying it

314 by charts deploying them

A fixed version is listed for 1 of the 1 affected package.

Container imageDigestPackageFixed inUsed by
library/mysql:8.07dcddc01f13b
github.com/moby/sys/user@v0.1.0
0.4.1
91
library/postgres:18:18.6:latest74935e722416
github.com/moby/sys/user@v0.1.0
0.4.1
26
library/postgres:18:18.6:18.6-trixie:latest5a5a84b19854
github.com/moby/sys/user@v0.1.0
0.4.1
21
library/postgres:16.15-alpine:16-alpine721873c34ceb
github.com/moby/sys/user@v0.1.0
0.4.1
21
library/postgres:18:18.6-trixie:latestfc973eb97c9f
github.com/moby/sys/user@v0.1.0
0.4.1
19
library/postgres:18.6-alpine:18.6-alpine3.24:18-alpine:alpine77f585114c32
github.com/moby/sys/user@v0.1.0
0.4.1
18
library/mysql:8:8.4:8.4.116ea90827b110
github.com/moby/sys/user@v0.1.0
0.4.1
17
library/postgres:17-alpineb0f9560a2de0
github.com/moby/sys/user@v0.1.0
0.4.1
14
library/postgres:15-alpinef7d23353e1b1
github.com/moby/sys/user@v0.1.0
0.4.1
12
library/mongo:9.0.2:latestbac22ea7710d
github.com/moby/sys/user@v0.1.0
0.4.1
10
library/mariadb:13.0.2:latestf1bba652ba57
github.com/moby/sys/user@v0.1.0
0.4.1
9
library/mysql:26.7.0:latestade067ae2fb1
github.com/moby/sys/user@v0.1.0
0.4.1
9
library/postgres:161a6ab3f5345e
github.com/moby/sys/user@v0.1.0
0.4.1
9
library/mariadb:10:10.117db29378d4fd
github.com/moby/sys/user@v0.1.0
0.4.1
6
library/postgres:18.4a02db8cac496
github.com/moby/sys/user@v0.1.0
0.4.1
6
library/postgres:17d74eeac9a635
github.com/moby/sys/user@v0.1.0
0.4.1
6
postgis/postgis:17-3.5:latest01a6a70e41e6
github.com/moby/sys/user@v0.1.0
0.4.1
6
library/mariadb:13.0.2:latestd4fdec0510ad
github.com/moby/sys/user@v0.1.0
0.4.1
5
library/mongo:4.44be76f674fc4
github.com/moby/sys/user@v0.1.0
0.4.1
5
library/mysql:26.7.0:latest9d48c42f8341
github.com/moby/sys/user@v0.1.0
0.4.1
5
library/postgres:122f2a8c2a7d10
github.com/moby/sys/user@v0.1.0
0.4.1
5
library/redis:7.4.2-alpine:7.4.2-alpine3.2102419de7eddf
github.com/moby/sys/user@v0.1.0
0.4.1
5
rancher/rancher:v2.15.20c3d8e570255
github.com/moby/sys/user@v0.4.0
0.4.1
5
rancher/shell:v0.8.21eeed72d4eda
github.com/moby/sys/user@v0.4.0
0.4.1
5
artifacthub/postgres:latest4fd34fa635cc
github.com/moby/sys/user@v0.1.0
0.4.1
4
library/mongo:5.0-focal5e15a3f014ed
github.com/moby/sys/user@v0.1.0
0.4.1
4
library/postgres:172d2b8998d310
github.com/moby/sys/user@v0.1.0
0.4.1
4
library/postgres:134689940c6838
github.com/moby/sys/user@v0.1.0
0.4.1
4
library/postgres:14c2427de38f99
github.com/moby/sys/user@v0.1.0
0.4.1
4
library/redis:7.2.4-alpinec8bb255c3559
github.com/moby/sys/user@v0.1.0
0.4.1
4
quay.io/openshift/origin-cli:latest486bf8e8f5b5
github.com/moby/sys/user@v0.4.0
0.4.1
4
goharbor/trivy-adapter-photon:v2.15.2215c07b71c37
github.com/moby/sys/user@v0.4.0
0.4.1
3
library/mongo:8:8.3.11:latest5d7043a4ffe0
github.com/moby/sys/user@v0.1.0
0.4.1
3
library/mongo:7:7.09854f7139445
github.com/moby/sys/user@v0.1.0
0.4.1
3
library/postgres:15.7-alpine:15.7-alpine3.20468d34fefd63
github.com/moby/sys/user@v0.1.0
0.4.1
3
library/postgres:14-alpine4ea9e5ed0659
github.com/moby/sys/user@v0.1.0
0.4.1
3
library/postgres:1665b16a8b326e
github.com/moby/sys/user@v0.1.0
0.4.1
3
library/postgres:18:18.6-trixie6737476511d4
github.com/moby/sys/user@v0.1.0
0.4.1
3
library/postgres:15724292da1f2e
github.com/moby/sys/user@v0.1.0
0.4.1
3
meshery/meshery:stable-latest44b64ee128fb
github.com/moby/sys/user@v0.4.0
0.4.1
3
opencsghq/postgres:15.19b98600564e07
github.com/moby/sys/user@v0.1.0
0.4.1
3
public.ecr.aws/docker/library/redis:7.2.8-alpinec88ea2979a49
github.com/moby/sys/user@v0.1.0
0.4.1
3
grafana/alloy:v1.8.17790f6f7fbd8
github.com/moby/sys/user@v0.3.0
0.4.1
2
hashicorp/boundary-enterprise:1.0.2-ent3a8061968ee4
github.com/moby/sys/user@v0.4.0
0.4.1
2
inaccel/daemon:latest093e1ea90ab8
github.com/moby/sys/user@v0.1.0
0.4.1
2
library/docker:dind:latest0b6d18a4a222
github.com/moby/sys/user@v0.4.0
0.4.1
2
library/ghost:6.69.055131b90d48c
github.com/moby/sys/user@v0.1.0
0.4.1
2
library/mariadb:11.41292844148b3
github.com/moby/sys/user@v0.1.0
0.4.1
2
library/mariadb:10.623616f0bd3af
github.com/moby/sys/user@v0.1.0
0.4.1
2
library/mariadb:12.3.3:lts2bdff1534a7e
github.com/moby/sys/user@v0.1.0
0.4.1
2

syft 1.42.1 · advisories as of 9 Oct 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.