StackRadar

CVE-2026-66034

High

Advisory

Published 24 Jul 2026In the index since 5 Sept 2026
Severity
High
worst across findings
CVSS
7.7
base score, highest
EPSS
0.004
34th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
786
of 17,787 indexed, latest versions
Container images
648
deployed by those charts
Fix available
1 of 1
affected package

The matching OSV records carry no description.

Carried by container images the latest versions of 786 of 17,787 indexed charts deploy, on 648 images.

Affected packageAffected versionsFixed inImages
libssh2deb1.5.0-2ubuntu0.1, 1.8.0-2.1build1, 1.10.0-3, 1.10.0-3+b1+8 more1.10.0-3+deb12u1, 1.11.0-4.1ubuntu0.24.04.3, 1.11.1-1+deb13u2, 1.11.1-1+e5+1 more648
OSV records
DEBIAN-CVE-2026-66034UBUNTU-CVE-2026-66034ECHO-3f90-0490-a5db

Charts affected

786 by stars
ChartLatestAffected imagesRadar Score
kubedeploysysbee1.2.21 of 1See more

kubedeploy sysbee 1.2.2

1 of the 1 container images this version deploys carry CVE-2026-66034.

Container imageDigestPackageFixed in
library/nginx:latest05b8cb60c354
libssh2@1.11.1-1+deb13u1
1.11.1-1+deb13u2

Open the chart page →

1,827
apptaxmd-helm-chart0.0.21 of 1See more

app taxmd-helm-chart 0.0.2

1 of the 1 container images this version deploys carry CVE-2026-66034.

Container imageDigestPackageFixed in
library/nginx:latest05b8cb60c354
libssh2@1.11.1-1+deb13u1
1.11.1-1+deb13u2

Open the chart page →

1,827
jenkinstestchart0.1.91 of 2See more

jenkins testchart 0.1.9

1 of the 2 container images this version deploys carry CVE-2026-66034.

Container imageDigestPackageFixed in
jenkins/jenkins:2.426.1-jdk11b470bcdc4ecd
libssh2@1.10.0-3+b1
1.10.0-3+deb12u1

Open the chart page →

9,102
jenkinstest-jenkins9.1.01 of 2See more

jenkins test-jenkins 9.1.0

1 of the 2 container images this version deploys carry CVE-2026-66034.

Container imageDigestPackageFixed in
jenkins/jenkins:2.426.1-jdk11b470bcdc4ecd
libssh2@1.10.0-3+b1
1.10.0-3+deb12u1

Open the chart page →

9,102
typemilltypemill-helm-chart2.2.02 of 2See more

typemill typemill-helm-chart 2.2.0

2 of the 2 container images this version deploys carry CVE-2026-66034.

Container imageDigestPackageFixed in
kixote/typemilldigest-pinned4e9dff179519
libssh2@1.11.1-1+deb13u1
1.11.1-1+deb13u2
kixote/typemilldigest-pinned628f79a08cc7
libssh2@1.11.1-1+deb13u1
1.11.1-1+deb13u2

Open the chart page →

5,338
unitycatalogunitycatalogVerified publisher0.0.21 of 4See more

unitycatalog unitycatalog 0.0.2

1 of the 4 container images this version deploys carry CVE-2026-66034.

Container imageDigestPackageFixed in
ghcr.io/sdwbgn/unitycatalog-helm/docker/unitycatalog-ui:0.2.1-5d668c1ed07e7ca098d
libssh2@1.10.0-3+b1
1.10.0-3+deb12u1

Open the chart page →

12,581
varnish-ingress-controllervarnish-ingress-controllerVerified publisher0.5.01 of 1See more

varnish-ingress-controller varnish-ingress-controller 0.5.0

1 of the 1 container images this version deploys carry CVE-2026-66034.

Container imageDigestPackageFixed in
mariusm/vingress:0.5.0b3db186c3d72
libssh2@1.11.1-1+deb13u1
1.11.1-1+deb13u2

Open the chart page →

2,251
devportal-admin-uiveecode-platformVerified publisher0.5.41 of 1See more

devportal-admin-ui veecode-platform 0.5.4

1 of the 1 container images this version deploys carry CVE-2026-66034.

Container imageDigestPackageFixed in
veecode/devportal-admin-ui:0.4.30c69fd286b489
libssh2@1.10.0-3+b1
1.10.0-3+deb12u1

Open the chart page →

5,225
waldurwaldur-chartsVerified publisher8.1.21 of 3See more

waldur waldur-charts 8.1.2

1 of the 3 container images this version deploys carry CVE-2026-66034.

Container imageDigestPackageFixed in
opennode/waldur-mastermind:8.1.24c82b15d9042
libssh2@1.11.1-1+deb13u1
1.11.1-1+deb13u2

Open the chart page →

4,839
wordpress-e2e-setupwoocommerce-e2e-setup0.1.11 of 2See more

wordpress-e2e-setup woocommerce-e2e-setup 0.1.1

1 of the 2 container images this version deploys carry CVE-2026-66034.

Container imageDigestPackageFixed in
library/wordpress:6.8-apache30bff39330d1
libssh2@1.11.1-1
1.11.1-1+deb13u2

Open the chart page →

7,696
wordpress-helmwordpress-helm0.2.91 of 4See more

wordpress-helm wordpress-helm 0.2.9

1 of the 4 container images this version deploys carry CVE-2026-66034.

Container imageDigestPackageFixed in
aapjeisbaas/wp-frankenphp:v0.2.26b261abc7fb0
libssh2@1.11.1-1
1.11.1-1+deb13u2

Open the chart page →

8,217
zcash-stackzcashVerified publisher0.4.51 of 2See more

zcash-stack zcash 0.4.5

1 of the 2 container images this version deploys carry CVE-2026-66034.

Container imageDigestPackageFixed in
electriccoinco/lightwalletd:v0.5.42ae3a551e111
libssh2@1.11.1-1+deb13u1
1.11.1-1+deb13u2

Open the chart page →

2,835
abstract-nodeabstract-nodeVerified publisher0.1.491 of 2See more

abstract-node abstract-node 0.1.49

1 of the 2 container images this version deploys carry CVE-2026-66034.

Container imageDigestPackageFixed in
matterlabs/external-node:9734bf2-17870579939295dadc06bdf3b
libssh2@1.10.0-3+b1
1.10.0-3+deb12u1

Open the chart page →

4,554
jenkinsaditisingh-jenkins1.0.01 of 1See more

jenkins aditisingh-jenkins 1.0.0

1 of the 1 container images this version deploys carry CVE-2026-66034.

Container imageDigestPackageFixed in
jenkins/jenkins:ltsc1e4c349365f
libssh2@1.11.1-1+deb13u1
1.11.1-1+deb13u2

Open the chart page →

2,476
gotenbergadnoctemVerified publisher0.5.01 of 1See more

gotenberg adnoctem 0.5.0

1 of the 1 container images this version deploys carry CVE-2026-66034.

Container imageDigestPackageFixed in
gotenberg/gotenberg:8.37.0f29984bd1e22
libssh2@1.11.1-1+deb13u1
1.11.1-1+deb13u2

Open the chart page →

5,582
uptime-kumaadnoctemVerified publisher0.4.11 of 1See more

uptime-kuma adnoctem 0.4.1

1 of the 1 container images this version deploys carry CVE-2026-66034.

Container imageDigestPackageFixed in
louislam/uptime-kuma:2.5.4917318f9d7be
libssh2@1.10.0-3+b1
1.10.0-3+deb12u1

Open the chart page →

30,028
ahnlich-dbahnlich-dbVerified publisher0.1.11 of 1See more

ahnlich-db ahnlich-db 0.1.1

1 of the 1 container images this version deploys carry CVE-2026-66034.

Container imageDigestPackageFixed in
ghcr.io/deven96/ahnlich-db:latest45d8b5aab491
libssh2@1.11.1-1+deb13u1
1.11.1-1+deb13u2

Open the chart page →

1,587
pod-sweeperairbyteVerified publisher1.5.11 of 1See more

pod-sweeper airbyte 1.5.1

1 of the 1 container images this version deploys carry CVE-2026-66034.

Container imageDigestPackageFixed in
airbyte/pod-sweeper:1.5.198d2c39d512e
libssh2@1.10.0-3+b1
1.10.0-3+deb12u1

Open the chart page →

4,922
airbyteairbyte-v2Verified publisher2.2.01 of 10See more

airbyte airbyte-v2 2.2.0

1 of the 10 container images this version deploys carry CVE-2026-66034.

Container imageDigestPackageFixed in
airbyte/manifest-server:7.23.73b3a670af168
libssh2@1.10.0-3+b1
1.10.0-3+deb12u1

Open the chart page →

12,473
akto-ai-guardrails-v2akto0.3.01 of 6See more

akto-ai-guardrails-v2 akto 0.3.0

1 of the 6 container images this version deploys carry CVE-2026-66034.

Container imageDigestPackageFixed in
aktosecurity/data-ingestion-service:1.4.946ed5bcb04b2
libssh2@1.11.1-1ubuntu0.26.04.2
1.11.1-1ubuntu0.26.04.3

Open the chart page →

9,321
akto-mini-testingakto1.45.71 of 5See more

akto-mini-testing akto 1.45.7

1 of the 5 container images this version deploys carry CVE-2026-66034.

Container imageDigestPackageFixed in
public.ecr.aws/aktosecurity/akto-ai-automated-testing:latest5a5d32281374
libssh2@1.10.0-3+b1
1.10.0-3+deb12u1

Open the chart page →

6,486
akto-regional-setupakto1.3.11 of 9See more

akto-regional-setup akto 1.3.1

1 of the 9 container images this version deploys carry CVE-2026-66034.

Container imageDigestPackageFixed in
aktosecurity/data-ingestion-service:1.5.35d4eab1c36b9
libssh2@1.11.1-1ubuntu0.26.04.2
1.11.1-1ubuntu0.26.04.3

Open the chart page →

7,603
esphomealekcVerified publisher2.8.11 of 1See more

esphome alekc 2.8.1

1 of the 1 container images this version deploys carry CVE-2026-66034.

Container imageDigestPackageFixed in
esphome/esphome:2026.8.285abea33854b
libssh2@1.11.1-1
1.11.1-1+deb13u2

Open the chart page →

3,112
komodoalekcVerified publisher3.1.01 of 1See more

komodo alekc 3.1.0

1 of the 1 container images this version deploys carry CVE-2026-66034.

Container imageDigestPackageFixed in
ghcr.io/moghtech/komodo-core:2.3.3bca73d0eee14
libssh2@1.11.1-1+deb13u1
1.11.1-1+deb13u2

Open the chart page →

1,919
alertigatealertigate0.5.11 of 1See more

alertigate alertigate 0.5.1

1 of the 1 container images this version deploys carry CVE-2026-66034.

Container imageDigestPackageFixed in
ghcr.io/feresberbeche/alertigate:1.2.1628d49e0e01b
libssh2@1.11.1-1+deb13u1
1.11.1-1+deb13u2

Open the chart page →

1,538
esphomealexmorbo-esphomeVerified publisher1.0.01 of 1See more

esphome alexmorbo-esphome 1.0.0

1 of the 1 container images this version deploys carry CVE-2026-66034.

Container imageDigestPackageFixed in
esphome/esphome:2024.12.2b2c6322700ac
libssh2@1.10.0-3+b1
1.10.0-3+deb12u1

Open the chart page →

6,324
flaresolverralexmorbo-flaresolverrVerified publisher0.2.01 of 1See more

flaresolverr alexmorbo-flaresolverr 0.2.0

1 of the 1 container images this version deploys carry CVE-2026-66034.

Container imageDigestPackageFixed in
flaresolverr/flaresolverr:v3.5.0139dfee1c6f8
libssh2@1.10.0-3+b1
1.10.0-3+deb12u1

Open the chart page →

27,274
nginx-sni-proxyalexpressoVerified publisher1.0.21 of 1See more

nginx-sni-proxy alexpresso 1.0.2

1 of the 1 container images this version deploys carry CVE-2026-66034.

Container imageDigestPackageFixed in
library/nginx:latest05b8cb60c354
libssh2@1.11.1-1+deb13u1
1.11.1-1+deb13u2

Open the chart page →

1,827
anchore-admission-controlleranchore-charts0.8.51See more

anchore-admission-controller anchore-charts 0.8.5

1 container image this version deploys carries CVE-2026-66034.

Container imageDigestPackageFixed in
cfssl/cfssl:v1.6.5c9018c2ddf0b
libssh2@1.10.0-3+b1
1.10.0-3+deb12u1

Open the chart page →

—
music-assistant-serverandibraeuVerified publisher2.1.21 of 1See more

music-assistant-server andibraeu 2.1.2

1 of the 1 container images this version deploys carry CVE-2026-66034.

Container imageDigestPackageFixed in
ghcr.io/music-assistant/server:2.9.950666a6f8d7f
libssh2@1.10.0-3+b1
1.10.0-3+deb12u1

Open the chart page →

5,817
stalwartandibraeuVerified publisher1.0.21 of 1See more

stalwart andibraeu 1.0.2

1 of the 1 container images this version deploys carry CVE-2026-66034.

Container imageDigestPackageFixed in
stalwartlabs/stalwart:v0.16.1425001929f36a
libssh2@1.11.1-1+deb13u1
1.11.1-1+deb13u2

Open the chart page →

1,587
mathesarandrenarchyVerified publisher1.8.01 of 1See more

mathesar andrenarchy 1.8.0

1 of the 1 container images this version deploys carry CVE-2026-66034.

Container imageDigestPackageFixed in
mathesar/mathesar:0.12.0091757cb01fe
libssh2@1.10.0-3+b1
1.10.0-3+deb12u1

Open the chart page →

7,239
speech-to-phraseandrenarchyVerified publisher1.3.01 of 1See more

speech-to-phrase andrenarchy 1.3.0

1 of the 1 container images this version deploys carry CVE-2026-66034.

Container imageDigestPackageFixed in
rhasspy/wyoming-speech-to-phrase:1.4.3e532f0dbc6b2
libssh2@1.10.0-3+b1
1.10.0-3+deb12u1

Open the chart page →

3,991
ansible-inspecansible-inspec0.2.171 of 2See more

ansible-inspec ansible-inspec 0.2.17

1 of the 2 container images this version deploys carry CVE-2026-66034.

Container imageDigestPackageFixed in
ghcr.io/htunn/ansible-inspec:0.2.12cd25a5cc3f1b
libssh2@1.11.1-1
1.11.1-1+deb13u2

Open the chart page →

5,558
antrea-uiantreaVerified publisher0.8.01 of 2See more

antrea-ui antrea 0.8.0

1 of the 2 container images this version deploys carry CVE-2026-66034.

Container imageDigestPackageFixed in
antrea/antrea-ui-frontend:v0.8.0ee9686bcefb8
libssh2@1.11.1-1
1.11.1-1+deb13u2

Open the chart page →

3,239
accounts-uiappscodeVerified publisher2026.9.111 of 1See more

accounts-ui appscode 2026.9.11

1 of the 1 container images this version deploys carry CVE-2026-66034.

Container imageDigestPackageFixed in
ghcr.io/appscode/b3:v2026.9.1176d28575b71c
libssh2@1.10.0-3+b1
1.10.0-3+deb12u1

Open the chart page →

2,592
aceappscodeVerified publisher2026.9.111 of 2See more

ace appscode 2026.9.11

1 of the 2 container images this version deploys carry CVE-2026-66034.

Container imageDigestPackageFixed in
ghcr.io/appscode/b3:v2026.9.1176d28575b71c
libssh2@1.10.0-3+b1
1.10.0-3+deb12u1

Open the chart page →

2,894
ace-installerappscodeVerified publisher2026.9.111 of 2See more

ace-installer appscode 2026.9.11

1 of the 2 container images this version deploys carry CVE-2026-66034.

Container imageDigestPackageFixed in
ghcr.io/appscode/b3:v2026.9.1176d28575b71c
libssh2@1.10.0-3+b1
1.10.0-3+deb12u1

Open the chart page →

3,225
ace-installer-certifiedappscodeVerified publisher2026.9.111 of 2See more

ace-installer-certified appscode 2026.9.11

1 of the 2 container images this version deploys carry CVE-2026-66034.

Container imageDigestPackageFixed in
ghcr.io/appscode/b3:v2026.9.1176d28575b71c
libssh2@1.10.0-3+b1
1.10.0-3+deb12u1

Open the chart page →

3,225
billingappscodeVerified publisher2026.9.111 of 1See more

billing appscode 2026.9.11

1 of the 1 container images this version deploys carry CVE-2026-66034.

Container imageDigestPackageFixed in
ghcr.io/appscode/b3:v2026.9.1176d28575b71c
libssh2@1.10.0-3+b1
1.10.0-3+deb12u1

Open the chart page →

2,592
marketplace-apiappscodeVerified publisher2026.9.111 of 1See more

marketplace-api appscode 2026.9.11

1 of the 1 container images this version deploys carry CVE-2026-66034.

Container imageDigestPackageFixed in
ghcr.io/appscode/b3:v2026.9.1176d28575b71c
libssh2@1.10.0-3+b1
1.10.0-3+deb12u1

Open the chart page →

2,592
platform-apiappscodeVerified publisher2026.9.112 of 3See more

platform-api appscode 2026.9.11

2 of the 3 container images this version deploys carry CVE-2026-66034.

Container imageDigestPackageFixed in
ghcr.io/appscode/b3:v2026.9.1176d28575b71c
libssh2@1.10.0-3+b1
1.10.0-3+deb12u1
ghcr.io/appscode/gotenberg:8.25f9104080d9a7
libssh2@1.11.1-1
1.11.1-1+deb13u2

Open the chart page →

37,268
haproxyappuio2.7.21 of 1See more

haproxy appuio 2.7.2

1 of the 1 container images this version deploys carry CVE-2026-66034.

Container imageDigestPackageFixed in
ghcr.io/vshn/haproxy-with-mysql:1.0.0a3c27ee3fb2f
libssh2@1.10.0-3+b1
1.10.0-3+deb12u1

Open the chart page →

5,657
dokuwikiarea-42Verified publisher0.1.81 of 1See more

dokuwiki area-42 0.1.8

1 of the 1 container images this version deploys carry CVE-2026-66034.

Container imageDigestPackageFixed in
dokuwiki/dokuwiki:2025-05-14af08ecfdda239
libssh2@1.11.1-1
1.11.1-1+deb13u2

Open the chart page →

7,489
arlas-aiasarlas-stackVerified publisher28.8.07 of 22See more

arlas-aias arlas-stack 28.8.0

7 of the 22 container images this version deploys carry CVE-2026-66034.

Container imageDigestPackageFixed in
bitnamilegacy/elasticsearch:9.0.1-debian-12-r0e6f6ddcce2f1
libssh2@1.10.0-3+b1
1.10.0-3+deb12u1
bitnamilegacy/keycloak:26.3.3-debian-12-r0da3df0976a9f
libssh2@1.10.0-3+b1
1.10.0-3+deb12u1
bitnamilegacy/minio:2024.12.18-debian-12-r1c0ede65eb88e
libssh2@1.10.0-3+b1
1.10.0-3+deb12u1
bitnamilegacy/minio:2025.4.22-debian-12-r1d7cd0e172c4c
libssh2@1.10.0-3+b1
1.10.0-3+deb12u1
bitnamilegacy/os-shell:12-debian-12-r439ba5d16f9c64
libssh2@1.10.0-3+b1
1.10.0-3+deb12u1
bitnamilegacy/rabbitmq:4.1.2-debian-12-r074a3d7c747eb
libssh2@1.10.0-3+b1
1.10.0-3+deb12u1
ghcr.io/developmentseed/titiler:0.22.48ac53eb38393
libssh2@1.10.0-3+b1
1.10.0-3+deb12u1

Open the chart page →

40,238
titilerarlas-stackVerified publisher28.8.01 of 1See more

titiler arlas-stack 28.8.0

1 of the 1 container images this version deploys carry CVE-2026-66034.

Container imageDigestPackageFixed in
ghcr.io/developmentseed/titiler:latest0f31f8b0441b
libssh2@1.11.1-1+deb13u1
1.11.1-1+deb13u2

Open the chart page →

1,445
resource-provisioningassist-iot-resource-provisioning1.0.01 of 7See more

resource-provisioning assist-iot-resource-provisioning 1.0.0

1 of the 7 container images this version deploys carry CVE-2026-66034.

Container imageDigestPackageFixed in
library/buildpack-deps:curl04907bdd423b
libssh2@1.11.1-1+deb13u1
1.11.1-1+deb13u2

Open the chart page →

8,032
smartorchestratorassist-iot-smart-orchestrator4.0.01 of 14See more

smartorchestrator assist-iot-smart-orchestrator 4.0.0

1 of the 14 container images this version deploys carry CVE-2026-66034.

Container imageDigestPackageFixed in
assistiot/smart-orchestrator_scheduler_mc:latestb1dbe4d62a03
libssh2@1.10.0-3+b1
1.10.0-3+deb12u1

Open the chart page →

45,363
videoaugmentationassist-iot-video-augmentation0.1.01 of 3See more

videoaugmentation assist-iot-video-augmentation 0.1.0

1 of the 3 container images this version deploys carry CVE-2026-66034.

Container imageDigestPackageFixed in
library/nginx:latest05b8cb60c354
libssh2@1.11.1-1+deb13u1
1.11.1-1+deb13u2

Open the chart page →

13,913
astrotrekastria0.0.21 of 4See more

astrotrek astria 0.0.2

1 of the 4 container images this version deploys carry CVE-2026-66034.

Container imageDigestPackageFixed in
ghcr.io/astriaorg/astrotrek:0.1.05889bea38e56
libssh2@1.10.0-3+b1
1.10.0-3+deb12u1

Open the chart page →

32,501

Container images carrying it

648 by charts deploying them

A fixed version is listed for 1 of the 1 affected package.

No deployed image carries CVE-2026-66034.

syft 1.42.1 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.