StackRadar

CVE-2026-6390

Medium

Advisory

Published 23 Jul 2026In the index since 6 Sept 2026
Severity
Medium
worst across findings
CVSS
6.8
base score, highest
EPSS
0.002
5th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
57
of 17,781 indexed, latest versions
Container images
55
deployed by those charts
Fix available
None
affected package

The matching OSV records carry no description.

Carried by container images the latest versions of 57 of 17,781 indexed charts deploy, on 55 images.

Affected packageAffected versionsFixed inImages
nanodeb2.2.6-1ubuntu1, 2.5.3-2ubuntu2, 2.9.3-2, 4.8-1ubuntu1+11 moreno fix listed55
OSV records
DEBIAN-CVE-2026-6390UBUNTU-CVE-2026-6390

Charts affected

57 by stars
ChartLatestAffected imagesRadar Score
cloudbeaveravistoVerified publisher1.1.71 of 1See more

cloudbeaver avisto 1.1.7

1 of the 1 container images this version deploys carry CVE-2026-6390.

Container imageDigestPackageFixed in
dbeaver/cloudbeaver:26.1.287ab86d00f8c
nano@7.2-2ubuntu0.2
no fix listed

Open the chart page →

1,710
minecraft-proxyminecraft-server-chartsVerified publisher3.10.01 of 1See more

minecraft-proxy minecraft-server-charts 3.10.0

1 of the 1 container images this version deploys carry CVE-2026-6390.

Container imageDigestPackageFixed in
itzg/bungeecord:latest1c59f9631f3b
nano@8.7.1-1ubuntu0.1
no fix listed

Open the chart page →

3,074
photoprismandrenarchyVerified publisher8.15.01 of 1See more

photoprism andrenarchy 8.15.0

1 of the 1 container images this version deploys carry CVE-2026-6390.

Container imageDigestPackageFixed in
photoprism/photoprism:260728958642220223
nano@8.7.1-1ubuntu0.1
no fix listed

Open the chart page →

8,825
plexk8s-home-lab-repo7.3.11 of 1See more

plex k8s-home-lab-repo 7.3.1

1 of the 1 container images this version deploys carry CVE-2026-6390.

Container imageDigestPackageFixed in
ghcr.io/home-operations/plex:1.43.1a9c3723cb31c
nano@7.2-2ubuntu0.1
no fix listed

Open the chart page →

1,685
code-serveralekcVerified publisher0.1.11 of 1See more

code-server alekc 0.1.1

1 of the 1 container images this version deploys carry CVE-2026-6390.

Container imageDigestPackageFixed in
linuxserver/code-server:4.10.1a5e43a05ae79
nano@6.2-1
no fix listed

Open the chart page →

8,212
dayz-dedicated-serverjespernohrVerified publisher0.1.21 of 3See more

dayz-dedicated-server jespernohr 0.1.2

1 of the 3 container images this version deploys carry CVE-2026-6390.

Container imageDigestPackageFixed in
ghcr.io/jespernohr/dayz-dedicated-server:0.1.1ec01d3ac7887
nano@7.2-2ubuntu0.1
no fix listed

Open the chart page →

4,309
skypilotskypilotOfficialVerified publisher0.13.01 of 3See more

skypilot skypilot 0.13.0

1 of the 3 container images this version deploys carry CVE-2026-6390.

Container imageDigestPackageFixed in
berkeleyskypilot/skypilot:0.13.03bc8bf8f4d83
nano@8.4-1+deb13u1
no fix listed

Open the chart page →

5,852
homebridgegeek-cookbookVerified publisher5.3.21 of 1See more

homebridge geek-cookbook 5.3.2

1 of the 1 container images this version deploys carry CVE-2026-6390.

Container imageDigestPackageFixed in
ghcr.io/oznu/homebridge:2022-07-08ff2af53897e7
nano@4.8-1ubuntu1
no fix listed

Open the chart page →

15,653
palworldpalworld-server-chartVerified publisher2.7.11 of 1See more

palworld palworld-server-chart 2.7.1

1 of the 1 container images this version deploys carry CVE-2026-6390.

Container imageDigestPackageFixed in
thijsvanloef/palworld-server-docker:v2.7.1401d3eb5c053
nano@8.4-1
no fix listed

Open the chart page →

3,681
phpqonstruktVerified publisher0.2.01 of 1See more

php qonstrukt 0.2.0

1 of the 1 container images this version deploys carry CVE-2026-6390.

Container imageDigestPackageFixed in
qonstrukt/php:8.4-v8-apache089af7925aa1
nano@7.2-2ubuntu0.2
no fix listed

Open the chart page →

23,964
minecraft-serverqumine0.1.15001 of 1See more

minecraft-server qumine 0.1.1500

1 of the 1 container images this version deploys carry CVE-2026-6390.

Container imageDigestPackageFixed in
qumine/minecraft-server:v0.1.15c0b650d51132
nano@6.2-1
no fix listed

Open the chart page →

6,796
resurfaceresurfaceioVerified publisher3.9.01 of 3See more

resurface resurfaceio 3.9.0

1 of the 3 container images this version deploys carry CVE-2026-6390.

Container imageDigestPackageFixed in
resurfaceio/resurface:3.7.84d5cda2f64109
nano@6.2-1ubuntu0.1
no fix listed

Open the chart page →

7,432
vuiseriohub1.0.61 of 3See more

vui seriohub 1.0.6

1 of the 3 container images this version deploys carry CVE-2026-6390.

Container imageDigestPackageFixed in
dserio83/velero-watchdog:0.1.8d5deae589229
nano@7.2-1+deb12u1
no fix listed

Open the chart page →

11,532
allure-docker-helm-chartallure-service-chartVerified publisher0.1.01 of 2See more

allure-docker-helm-chart allure-service-chart 0.1.0

1 of the 2 container images this version deploys carry CVE-2026-6390.

Container imageDigestPackageFixed in
frankescobar/allure-docker-service:latestdc171ec796d5
nano@7.2-2ubuntu0.2
no fix listed

Open the chart page →

3,647
arma-reforgerarma-reforger0.5.31 of 8See more

arma-reforger arma-reforger 0.5.3

1 of the 8 container images this version deploys carry CVE-2026-6390.

Container imageDigestPackageFixed in
ghcr.io/brittonhayes/arma-reforger:latest6fde1edc0983
nano@4.8-1ubuntu1
no fix listed

Open the chart page →

23,353
node-appbryopsida0.5.11 of 2See more

node-app bryopsida 0.5.1

1 of the 2 container images this version deploys carry CVE-2026-6390.

Container imageDigestPackageFixed in
ghcr.io/bryopsida/k8s-dev-pod:main82d0b161161d
nano@7.2-2ubuntu0.1
no fix listed

Open the chart page →

14,352
opensipschetan-opensips0.1.01 of 1See more

opensips chetan-opensips 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-6390.

Container imageDigestPackageFixed in
chetangautamm/repo:Opensips_Buildb4b94155ff5a
nano@2.2.6-1ubuntu1
no fix listed

Open the chart page →

30,140
sippchetan-opensips0.1.01 of 1See more

sipp chetan-opensips 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-6390.

Container imageDigestPackageFixed in
chetangautamm/repo:sipp.v3e7f7049e1544
nano@4.8-1ubuntu1
no fix listed

Open the chart page →

12,483
galaxycloudve6.8.61 of 3See more

galaxy cloudve 6.8.6

1 of the 3 container images this version deploys carry CVE-2026-6390.

Container imageDigestPackageFixed in
quay.io/galaxyproject/galaxy-min:26.1.12c324c9789f5
nano@8.4-1+deb13u1
no fix listed

Open the chart page →

4,601
galaxy-stablecloudve2.0.02 of 5See more

galaxy-stable cloudve 2.0.0

2 of the 5 container images this version deploys carry CVE-2026-6390.

Container imageDigestPackageFixed in
galaxy/galaxy-init:v18.010267bad550e6
nano@2.2.6-1ubuntu1
no fix listed
galaxy/galaxy-stable:v18.018e577a626dfd
nano@2.2.6-1ubuntu1
no fix listed

Open the chart page →

70,895
dev-code-servercosmoVerified publisher0.0.71 of 2See more

dev-code-server cosmo 0.0.7

1 of the 2 container images this version deploys carry CVE-2026-6390.

Container imageDigestPackageFixed in
ghcr.io/cosmo-workspace/dev-code-server:v0.0.316fda01ae58a
nano@7.2-1+deb12u1
no fix listed

Open the chart page →

14,559
jupyterhubd4nVerified publisher3.3.71 of 7See more

jupyterhub d4n 3.3.7

1 of the 7 container images this version deploys carry CVE-2026-6390.

Container imageDigestPackageFixed in
aristidetm/basic-notebook:3.6.5469dbc951224
nano@7.2-1+deb12u1
no fix listed

Open the chart page →

16,604
db-connection-testdb-connection-testVerified publisher0.1.01 of 1See more

db-connection-test db-connection-test 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-6390.

Container imageDigestPackageFixed in
felipecs8/app-db-connection-test:v129e06c9c6385
nano@7.2-1+deb12u1
no fix listed

Open the chart page →

10,090
photoprismdjjudas21Verified publisher99.99.991 of 1See more

photoprism djjudas21 99.99.99

1 of the 1 container images this version deploys carry CVE-2026-6390.

Container imageDigestPackageFixed in
photoprism/photoprism:240711-cefc6fd632ca74
nano@7.2-2build1
no fix listed

Open the chart page →

16,954
redpandaeclipse-aeriosVerified publisher5.7.81 of 4See more

redpanda eclipse-aerios 5.7.8

1 of the 4 container images this version deploys carry CVE-2026-6390.

Container imageDigestPackageFixed in
redpandadata/redpanda:latest468bd13a9f2b
nano@8.4-1+deb13u1
no fix listed

Open the chart page →

1,573
fr24feederfnzv0.1.21 of 1See more

fr24feeder fnzv 0.1.2

1 of the 1 container images this version deploys carry CVE-2026-6390.

Container imageDigestPackageFixed in
ghcr.io/sdr-enthusiasts/docker-flightradar24:latest917e53402d51
nano@8.4-1+deb13u1
no fix listed

Open the chart page →

2,271
sdtdgeek-cookbookVerified publisher0.3.21 of 1See more

sdtd geek-cookbook 0.3.2

1 of the 1 container images this version deploys carry CVE-2026-6390.

Container imageDigestPackageFixed in
ghcr.io/reitermarkus/7d2d:main39953b387b61
nano@8.4-1
no fix listed

Open the chart page →

2,511
skypilotgeek-cookbookVerified publisher0.0.11 of 3See more

skypilot geek-cookbook 0.0.1

1 of the 3 container images this version deploys carry CVE-2026-6390.

Container imageDigestPackageFixed in
berkeleyskypilot/skypilot-nightly:latest8da2f3cda472
nano@8.4-1
no fix listed

Open the chart page →

8,923
7dtdhelm-7dtd0.1.01 of 1See more

7dtd helm-7dtd 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-6390.

Container imageDigestPackageFixed in
vinanrra/7dtd-server:v0.4.4f9534490bd2b
nano@2.9.3-2
no fix listed

Open the chart page →

10,627
minecrafthelmforgeVerified publisher1.5.31 of 1See more

minecraft helmforge 1.5.3

1 of the 1 container images this version deploys carry CVE-2026-6390.

Container imageDigestPackageFixed in
itzg/minecraft-server:2026.9.04e29d14082d9
nano@7.2-2ubuntu0.2
no fix listed

Open the chart page →

4,639
bluesky-pdsijmacd1.0.01 of 2See more

bluesky-pds ijmacd 1.0.0

1 of the 2 container images this version deploys carry CVE-2026-6390.

Container imageDigestPackageFixed in
arunvelsriram/utils:latest655ad18fd8d6
nano@7.2-2ubuntu0.1
no fix listed

Open the chart page →

8,967
dayz-dedicated-server-razorbladex401jespernohrVerified publisher1.0.31 of 1See more

dayz-dedicated-server-razorbladex401 jespernohr 1.0.3

1 of the 1 container images this version deploys carry CVE-2026-6390.

Container imageDigestPackageFixed in
razorbladex401/dayz:latest6a4d79248e7d
nano@6.2-1
no fix listed

Open the chart page →

5,208
homebridgejespernohrVerified publisher0.2.01 of 1See more

homebridge jespernohr 0.2.0

1 of the 1 container images this version deploys carry CVE-2026-6390.

Container imageDigestPackageFixed in
homebridge/homebridge:latest77c685a40911
nano@7.2-2ubuntu0.2
no fix listed

Open the chart page →

2,149
palworld-serverk8s-chartsVerified publisher1.2.11 of 1See more

palworld-server k8s-charts 1.2.1

1 of the 1 container images this version deploys carry CVE-2026-6390.

Container imageDigestPackageFixed in
thijsvanloef/palworld-server-docker:v2.5.0b4ac9ee22483
nano@8.4-1
no fix listed

Open the chart page →

3,460
valheim-serverk8s-chartsVerified publisher1.3.01 of 1See more

valheim-server k8s-charts 1.3.0

1 of the 1 container images this version deploys carry CVE-2026-6390.

Container imageDigestPackageFixed in
mbround18/valheim:3.1.070bd4da591cd
nano@6.2-1ubuntu0.1
no fix listed

Open the chart page →

6,075
k8s-dev-podk8s-dev-pod0.3.11 of 1See more

k8s-dev-pod k8s-dev-pod 0.3.1

1 of the 1 container images this version deploys carry CVE-2026-6390.

Container imageDigestPackageFixed in
ghcr.io/bryopsida/k8s-dev-pod:main82d0b161161d
nano@7.2-2ubuntu0.1
no fix listed

Open the chart page →

8,811
kc-chartkc-chart1.0.01 of 3See more

kc-chart kc-chart 1.0.0

1 of the 3 container images this version deploys carry CVE-2026-6390.

Container imageDigestPackageFixed in
jhoncytech/bookworm-apache-wordpress:latest18c3ca1f411e
nano@7.2-1
no fix listed

Open the chart page →

8,860
allurekfirfer0.1.81 of 2See more

allure kfirfer 0.1.8

1 of the 2 container images this version deploys carry CVE-2026-6390.

Container imageDigestPackageFixed in
frankescobar/allure-docker-service:2.21.08a4d7e9308de
nano@2.9.3-2
no fix listed

Open the chart page →

12,527
kong-ai-gatewaykongVerified publisher0.2.11 of 1See more

kong-ai-gateway kong 0.2.1

1 of the 1 container images this version deploys carry CVE-2026-6390.

Container imageDigestPackageFixed in
kong/kong-ai-gateway:2.0.3367ed5985b76
nano@7.2-2ubuntu0.2
no fix listed

Open the chart page →

555
penpotkubitodevVerified publisher1.2.11 of 5See more

penpot kubitodev 1.2.1

1 of the 5 container images this version deploys carry CVE-2026-6390.

Container imageDigestPackageFixed in
penpotapp/backend:2.2.147853d9bb9dd
nano@6.2-1ubuntu0.1
no fix listed

Open the chart page →

16,877
homebridgelbenicio-communityVerified publisher0.1.151 of 1See more

homebridge lbenicio-community 0.1.15

1 of the 1 container images this version deploys carry CVE-2026-6390.

Container imageDigestPackageFixed in
homebridge/homebridge:latest77c685a40911
nano@7.2-2ubuntu0.2
no fix listed

Open the chart page →

2,149
tinymediamanagermedia-servarrVerified publisher1.6.21 of 2See more

tinymediamanager media-servarr 1.6.2

1 of the 2 container images this version deploys carry CVE-2026-6390.

Container imageDigestPackageFixed in
tinymediamanager/tinymediamanager:5.3.22b34dc85099e
nano@8.4-1
no fix listed

Open the chart page →

7,944
alluremidokura-communityVerified publisher0.1.31 of 2See more

allure midokura-community 0.1.3

1 of the 2 container images this version deploys carry CVE-2026-6390.

Container imageDigestPackageFixed in
frankescobar/allure-docker-service:2.19.0cafa03b94dac
nano@2.9.3-2
no fix listed

Open the chart page →

12,847
core-keeper-dedicatednerkho-helm-charts0.1.11 of 1See more

core-keeper-dedicated nerkho-helm-charts 0.1.1

1 of the 1 container images this version deploys carry CVE-2026-6390.

Container imageDigestPackageFixed in
escaping/core-keeper-dedicated:latest87fa79255962
nano@8.4-1
no fix listed

Open the chart page →

3,891
node-debug-dashboardnode-debug-dashboardVerified publisher0.3.21 of 1See more

node-debug-dashboard node-debug-dashboard 0.3.2

1 of the 1 container images this version deploys carry CVE-2026-6390.

Container imageDigestPackageFixed in
ghcr.io/samr037/node-debug-dashboard:0.3.0c79b2e64a211
nano@7.2-1+deb12u1
no fix listed

Open the chart page →

6,854
comacopencord1.0.01 of 9See more

comac opencord 1.0.0

1 of the 9 container images this version deploys carry CVE-2026-6390.

Container imageDigestPackageFixed in
omecproject/onos-progran:1.0.05715e5648aa0
nano@2.5.3-2ubuntu2
no fix listed

Open the chart page →

88,546
onos-progranopencord1.2.71 of 2See more

onos-progran opencord 1.2.7

1 of the 2 container images this version deploys carry CVE-2026-6390.

Container imageDigestPackageFixed in
muluder/prograncontrollermcord:0.1.843b597a93da7
nano@2.5.3-2ubuntu2
no fix listed

Open the chart page →

38,865
openvscode-serveropenvscode-server-helmVerified publisher2.7.371 of 2See more

openvscode-server openvscode-server-helm 2.7.37

1 of the 2 container images this version deploys carry CVE-2026-6390.

Container imageDigestPackageFixed in
antiantiops/vscode-browser-docker:1.137.0eeff80a99d92
nano@7.2-2ubuntu0.2
no fix listed

Open the chart page →

4,237
minecraftpaul1365972-mc3.0.11 of 1See more

minecraft paul1365972-mc 3.0.1

1 of the 1 container images this version deploys carry CVE-2026-6390.

Container imageDigestPackageFixed in
itzg/minecraft-server:latest8672e335dbef
nano@7.2-2ubuntu0.2
no fix listed

Open the chart page →

4,253
game-serverpvillaverdeVerified publisher1.0.51 of 1See more

game-server pvillaverde 1.0.5

1 of the 1 container images this version deploys carry CVE-2026-6390.

Container imageDigestPackageFixed in
ghcr.io/itzg/minecraft-server:latestc1a267d9ed6d
nano@7.2-2ubuntu0.2
no fix listed

Open the chart page →

4,253

Container images carrying it

55 by charts deploying them

A fixed version is listed for 0 of the 1 affected package.

Container imageDigestPackageFixed inUsed by
ghcr.io/oznu/homebridge:2022-07-08ff2af53897e7
nano@4.8-1ubuntu1
no fix listed
1
ghcr.io/reitermarkus/7d2d:main39953b387b61
nano@8.4-1
no fix listed
1
ghcr.io/samr037/node-debug-dashboard:0.3.0c79b2e64a211
nano@7.2-1+deb12u1
no fix listed
1
ghcr.io/sdr-enthusiasts/docker-flightradar24:latest917e53402d51
nano@8.4-1+deb13u1
no fix listed
1
quay.io/galaxyproject/galaxy-min:26.1.12c324c9789f5
nano@8.4-1+deb13u1
no fix listed
1

syft 1.42.1 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.