StackRadar

CVE-2026-6390

Medium

Advisory

Published 23 Jul 2026In the index since 6 Sept 2026
Severity
Medium
worst across findings
CVSS
6.8
base score, highest
EPSS
0.002
5th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
57
of 17,781 indexed, latest versions
Container images
55
deployed by those charts
Fix available
None
affected package

The matching OSV records carry no description.

Carried by container images the latest versions of 57 of 17,781 indexed charts deploy, on 55 images.

Affected packageAffected versionsFixed inImages
nanodeb2.2.6-1ubuntu1, 2.5.3-2ubuntu2, 2.9.3-2, 4.8-1ubuntu1+11 moreno fix listed55
OSV records
DEBIAN-CVE-2026-6390UBUNTU-CVE-2026-6390

Charts affected

57 by stars
ChartLatestAffected imagesRadar Score
photoprismschoolguys-helmcharts0.3.81 of 1See more

photoprism schoolguys-helmcharts 0.3.8

1 of the 1 container images this version deploys carry CVE-2026-6390.

Container imageDigestPackageFixed in
photoprism/photoprism:260601650c6ad5a651
nano@8.7.1-1
no fix listed

Open the chart page →

10,348
testing-multitoolsomeblackmagic0.1.21 of 1See more

testing-multitool someblackmagic 0.1.2

1 of the 1 container images this version deploys carry CVE-2026-6390.

Container imageDigestPackageFixed in
someblackmagic/k8s-testing-multitool:v0.1.06eca64b6b440
nano@4.8-1ubuntu1
no fix listed

Open the chart page →

30,687
squadsquadVerified publisher0.1.111 of 1See more

squad squad 0.1.11

1 of the 1 container images this version deploys carry CVE-2026-6390.

Container imageDigestPackageFixed in
cm2network/squad:latest8cba47f53df5
nano@8.4-1
no fix listed

Open the chart page →

2,487
kurento_webrtc_demostunner0.1.01 of 2See more

kurento_webrtc_demo stunner 0.1.0

1 of the 2 container images this version deploys carry CVE-2026-6390.

Container imageDigestPackageFixed in
kurento/kurento-media-server:latest03c0d34d0828
nano@7.2-2ubuntu0.1
no fix listed

Open the chart page →

12,460
stunner-kurento-one2one-callstunner0.1.01 of 2See more

stunner-kurento-one2one-call stunner 0.1.0

1 of the 2 container images this version deploys carry CVE-2026-6390.

Container imageDigestPackageFixed in
kurento/kurento-media-server:latest03c0d34d0828
nano@7.2-2ubuntu0.1
no fix listed

Open the chart page →

12,460
tensor_apptensor-app0.2.21 of 3See more

tensor_app tensor-app 0.2.2

1 of the 3 container images this version deploys carry CVE-2026-6390.

Container imageDigestPackageFixed in
xeladock/nginx2:latestc259a67b1dff
nano@6.2-1
no fix listed

Open the chart page →

17,461
unmanicvhdirkVerified publisher0.1.41 of 1See more

unmanic vhdirk 0.1.4

1 of the 1 container images this version deploys carry CVE-2026-6390.

Container imageDigestPackageFixed in
josh5/unmanic:0.2.64d49c4816260
nano@6.2-1
no fix listed

Open the chart page →

9,347

Container images carrying it

55 by charts deploying them

A fixed version is listed for 0 of the 1 affected package.

Container imageDigestPackageFixed inUsed by
homebridge/homebridge:latest77c685a40911
nano@7.2-2ubuntu0.2
no fix listed
2
kurento/kurento-media-server:latest03c0d34d0828
nano@7.2-2ubuntu0.1
no fix listed
2
ghcr.io/bryopsida/k8s-dev-pod:main82d0b161161d
nano@7.2-2ubuntu0.1
no fix listed
2
antiantiops/vscode-browser-docker:1.137.0eeff80a99d92
nano@7.2-2ubuntu0.2
no fix listed
1
aristidetm/basic-notebook:3.6.5469dbc951224
nano@7.2-1+deb12u1
no fix listed
1
arunvelsriram/utils:latest655ad18fd8d6
nano@7.2-2ubuntu0.1
no fix listed
1
berkeleyskypilot/skypilot:0.13.03bc8bf8f4d83
nano@8.4-1+deb13u1
no fix listed
1
berkeleyskypilot/skypilot-nightly:latest8da2f3cda472
nano@8.4-1
no fix listed
1
chetangautamm/repo:Opensips_Buildb4b94155ff5a
nano@2.2.6-1ubuntu1
no fix listed
1
chetangautamm/repo:sipp.v3e7f7049e1544
nano@4.8-1ubuntu1
no fix listed
1
cm2network/squad:latest8cba47f53df5
nano@8.4-1
no fix listed
1
dbeaver/cloudbeaver:26.1.287ab86d00f8c
nano@7.2-2ubuntu0.2
no fix listed
1
dserio83/velero-watchdog:0.1.8d5deae589229
nano@7.2-1+deb12u1
no fix listed
1
escaping/core-keeper-dedicated:latest87fa79255962
nano@8.4-1
no fix listed
1
felipecs8/app-db-connection-test:v129e06c9c6385
nano@7.2-1+deb12u1
no fix listed
1
frankescobar/allure-docker-service:2.21.08a4d7e9308de
nano@2.9.3-2
no fix listed
1
frankescobar/allure-docker-service:2.19.0cafa03b94dac
nano@2.9.3-2
no fix listed
1
frankescobar/allure-docker-service:latestdc171ec796d5
nano@7.2-2ubuntu0.2
no fix listed
1
galaxy/galaxy-init:v18.010267bad550e6
nano@2.2.6-1ubuntu1
no fix listed
1
galaxy/galaxy-stable:v18.018e577a626dfd
nano@2.2.6-1ubuntu1
no fix listed
1
itzg/bungeecord:latest1c59f9631f3b
nano@8.7.1-1ubuntu0.1
no fix listed
1
itzg/minecraft-server:2026.9.04e29d14082d9
nano@7.2-2ubuntu0.2
no fix listed
1
itzg/minecraft-server:latest8672e335dbef
nano@7.2-2ubuntu0.2
no fix listed
1
jhoncytech/bookworm-apache-wordpress:latest18c3ca1f411e
nano@7.2-1
no fix listed
1
josh5/unmanic:0.2.64d49c4816260
nano@6.2-1
no fix listed
1
kong/kong-ai-gateway:2.0.3367ed5985b76
nano@7.2-2ubuntu0.2
no fix listed
1
linuxserver/code-server:4.10.1a5e43a05ae79
nano@6.2-1
no fix listed
1
mbround18/valheim:3.1.070bd4da591cd
nano@6.2-1ubuntu0.1
no fix listed
1
muluder/prograncontrollermcord:0.1.843b597a93da7
nano@2.5.3-2ubuntu2
no fix listed
1
omecproject/onos-progran:1.0.05715e5648aa0
nano@2.5.3-2ubuntu2
no fix listed
1
penpotapp/backend:2.2.147853d9bb9dd
nano@6.2-1ubuntu0.1
no fix listed
1
photoprism/photoprism:260601650c6ad5a651
nano@8.7.1-1
no fix listed
1
photoprism/photoprism:260728958642220223
nano@8.7.1-1ubuntu0.1
no fix listed
1
photoprism/photoprism:240711-cefc6fd632ca74
nano@7.2-2build1
no fix listed
1
qonstrukt/php:8.4-v8-apache089af7925aa1
nano@7.2-2ubuntu0.2
no fix listed
1
qumine/minecraft-server:v0.1.15c0b650d51132
nano@6.2-1
no fix listed
1
razorbladex401/dayz:latest6a4d79248e7d
nano@6.2-1
no fix listed
1
redpandadata/redpanda:latest468bd13a9f2b
nano@8.4-1+deb13u1
no fix listed
1
resurfaceio/resurface:3.7.84d5cda2f64109
nano@6.2-1ubuntu0.1
no fix listed
1
someblackmagic/k8s-testing-multitool:v0.1.06eca64b6b440
nano@4.8-1ubuntu1
no fix listed
1
thijsvanloef/palworld-server-docker:v2.7.1401d3eb5c053
nano@8.4-1
no fix listed
1
thijsvanloef/palworld-server-docker:v2.5.0b4ac9ee22483
nano@8.4-1
no fix listed
1
tinymediamanager/tinymediamanager:5.3.22b34dc85099e
nano@8.4-1
no fix listed
1
vinanrra/7dtd-server:v0.4.4f9534490bd2b
nano@2.9.3-2
no fix listed
1
xeladock/nginx2:latestc259a67b1dff
nano@6.2-1
no fix listed
1
ghcr.io/brittonhayes/arma-reforger:latest6fde1edc0983
nano@4.8-1ubuntu1
no fix listed
1
ghcr.io/cosmo-workspace/dev-code-server:v0.0.316fda01ae58a
nano@7.2-1+deb12u1
no fix listed
1
ghcr.io/home-operations/plex:1.43.1a9c3723cb31c
nano@7.2-2ubuntu0.1
no fix listed
1
ghcr.io/itzg/minecraft-server:latestc1a267d9ed6d
nano@7.2-2ubuntu0.2
no fix listed
1
ghcr.io/jespernohr/dayz-dedicated-server:0.1.1ec01d3ac7887
nano@7.2-2ubuntu0.1
no fix listed
1

syft 1.42.1 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.