StackRadar

CVE-2026-66034

High

Advisory

Published 24 Jul 2026In the index since 5 Sept 2026
Severity
High
worst across findings
CVSS
7.7
base score, highest
EPSS
0.004
34th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
795
of 17,787 indexed, latest versions
Container images
657
deployed by those charts
Fix available
1 of 1
affected package

The matching OSV records carry no description.

Carried by container images the latest versions of 795 of 17,787 indexed charts deploy, on 657 images.

Affected packageAffected versionsFixed inImages
libssh2deb1.5.0-2ubuntu0.1, 1.8.0-2.1build1, 1.10.0-3, 1.10.0-3+b1+8 more1.10.0-3+deb12u1, 1.11.0-4.1ubuntu0.24.04.3, 1.11.1-1+deb13u2, 1.11.1-1+e5+1 more657
OSV records
DEBIAN-CVE-2026-66034UBUNTU-CVE-2026-66034ECHO-3f90-0490-a5db

Charts affected

795 by stars
ChartLatestAffected imagesRadar Score
titilerarlas-stackVerified publisher28.8.01 of 1See more

titiler arlas-stack 28.8.0

1 of the 1 container images this version deploys carry CVE-2026-66034.

Container imageDigestPackageFixed in
ghcr.io/developmentseed/titiler:latest0f31f8b0441b
libssh2@1.11.1-1+deb13u1
1.11.1-1+deb13u2

Open the chart page →

1,423
resource-provisioningassist-iot-resource-provisioning1.0.01 of 7See more

resource-provisioning assist-iot-resource-provisioning 1.0.0

1 of the 7 container images this version deploys carry CVE-2026-66034.

Container imageDigestPackageFixed in
library/buildpack-deps:curl04907bdd423b
libssh2@1.11.1-1+deb13u1
1.11.1-1+deb13u2

Open the chart page →

8,042
smartorchestratorassist-iot-smart-orchestrator4.0.01 of 14See more

smartorchestrator assist-iot-smart-orchestrator 4.0.0

1 of the 14 container images this version deploys carry CVE-2026-66034.

Container imageDigestPackageFixed in
assistiot/smart-orchestrator_scheduler_mc:latestb1dbe4d62a03
libssh2@1.10.0-3+b1
1.10.0-3+deb12u1

Open the chart page →

42,460
videoaugmentationassist-iot-video-augmentation0.1.01 of 3See more

videoaugmentation assist-iot-video-augmentation 0.1.0

1 of the 3 container images this version deploys carry CVE-2026-66034.

Container imageDigestPackageFixed in
library/nginx:latest05b8cb60c354
libssh2@1.11.1-1+deb13u1
1.11.1-1+deb13u2

Open the chart page →

13,986
astrotrekastria0.0.21 of 4See more

astrotrek astria 0.0.2

1 of the 4 container images this version deploys carry CVE-2026-66034.

Container imageDigestPackageFixed in
ghcr.io/astriaorg/astrotrek:0.1.05889bea38e56
libssh2@1.10.0-3+b1
1.10.0-3+deb12u1

Open the chart page →

31,807
asya-playgroundasya1.1.31 of 1See more

asya-playground asya 1.1.3

1 of the 1 container images this version deploys carry CVE-2026-66034.

Container imageDigestPackageFixed in
localstack/localstack:3.19d278167f2b7
libssh2@1.10.0-3+b1
1.10.0-3+deb12u1

Open the chart page →

8,555
webappavzi-webapp0.1.01 of 1See more

webapp avzi-webapp 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-66034.

Container imageDigestPackageFixed in
avzini/web-app:latestf40b30210ed0
libssh2@1.10.0-3+b1
1.10.0-3+deb12u1

Open the chart page →

5,291
nas-appsawesomeVerified publisher2.0.01 of 8See more

nas-apps awesome 2.0.0

1 of the 8 container images this version deploys carry CVE-2026-66034.

Container imageDigestPackageFixed in
library/nginx:latest05b8cb60c354
libssh2@1.11.1-1+deb13u1
1.11.1-1+deb13u2

Open the chart page →

7,166
aws9helmaws9helm0.1.04 of 4See more

aws9helm aws9helm 0.1.0

4 of the 4 container images this version deploys carry CVE-2026-66034.

Container imageDigestPackageFixed in
kuzwolka/aws9:main1ad759b961b1
libssh2@1.10.0-3+b1
1.10.0-3+deb12u1
kuzwolka/aws9:news3e8880fbbb96
libssh2@1.10.0-3+b1
1.10.0-3+deb12u1
kuzwolka/aws9:blog4a7707410bf1
libssh2@1.10.0-3+b1
1.10.0-3+deb12u1
kuzwolka/aws9:shop84a9d9766345
libssh2@1.10.0-3+b1
1.10.0-3+deb12u1

Open the chart page →

16,920
aws-web-service-proxifiedaws-web-service-proxified1.8.01 of 2See more

aws-web-service-proxified aws-web-service-proxified 1.8.0

1 of the 2 container images this version deploys carry CVE-2026-66034.

Container imageDigestPackageFixed in
library/httpd:latest979c38c2228d
libssh2@1.11.1-1+deb13u1
1.11.1-1+deb13u2

Open the chart page →

3,021
backstage-pyactionsbackstage-pyactionsVerified publisher0.1.01 of 1See more

backstage-pyactions backstage-pyactions 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-66034.

Container imageDigestPackageFixed in
mawad98/backstage-pyactions:demo99422c56a274
libssh2@1.11.1-1
1.11.1-1+deb13u2

Open the chart page →

2,750
basic-auth-s3-nginxbasic-auth-s3-nginxVerified publisher1.0.01 of 1See more

basic-auth-s3-nginx basic-auth-s3-nginx 1.0.0

1 of the 1 container images this version deploys carry CVE-2026-66034.

Container imageDigestPackageFixed in
dachichang/basic-auth-s3-nginx:1.0.07ccac90a935e
libssh2@1.10.0-3+b1
1.10.0-3+deb12u1

Open the chart page →

6,310
my-nginx-appbassant-nginx-app0.1.01 of 1See more

my-nginx-app bassant-nginx-app 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-66034.

Container imageDigestPackageFixed in
library/nginx:stabled5792f71a949
libssh2@1.11.1-1+deb13u1
1.11.1-1+deb13u2

Open the chart page →

1,839
mealiebdclark-helm-chartsVerified publisher0.1.151 of 1See more

mealie bdclark-helm-charts 0.1.15

1 of the 1 container images this version deploys carry CVE-2026-66034.

Container imageDigestPackageFixed in
ghcr.io/mealie-recipes/mealie:v3.25.16066c29eca95
libssh2@1.11.1-1+deb13u1
1.11.1-1+deb13u2

Open the chart page →

4,042
pangolinbdcode0.14.11 of 1See more

pangolin bdcode 0.14.1

1 of the 1 container images this version deploys carry CVE-2026-66034.

Container imageDigestPackageFixed in
fosrl/pangolin:latest83a55f933b4d
libssh2@1.10.0-3+b1
1.10.0-3+deb12u1

Open the chart page →

1,810
algorand-participationbiatec-repoVerified publisher4.4.11 of 1See more

algorand-participation biatec-repo 4.4.1

1 of the 1 container images this version deploys carry CVE-2026-66034.

Container imageDigestPackageFixed in
scholtz2/algorand-participation-mainnet-extended:4.4.1-stable5aaa5d4ab8b8
libssh2@1.10.0-3
no fix listed

Open the chart page →

7,239
algorand-relaybiatec-repoVerified publisher4.4.11 of 1See more

algorand-relay biatec-repo 4.4.1

1 of the 1 container images this version deploys carry CVE-2026-66034.

Container imageDigestPackageFixed in
scholtz2/algorand-relay-mainnet:4.4.1-stablee9af7d8ff6bb
libssh2@1.11.0-4.1build2
1.11.0-4.1ubuntu0.24.04.3

Open the chart page →

5,108
baserowblackbird-cloudVerified publisher1.0.171 of 6See more

baserow blackbird-cloud 1.0.17

1 of the 6 container images this version deploys carry CVE-2026-66034.

Container imageDigestPackageFixed in
baserow/backend:1.31.1e0b3c8130b91
libssh2@1.10.0-3+b1
1.10.0-3+deb12u1

Open the chart page →

10,171
bdbablackduck2026.6.31 of 9See more

bdba blackduck 2026.6.3

1 of the 9 container images this version deploys carry CVE-2026-66034.

Container imageDigestPackageFixed in
fluent/fluent-bit:4.2.6a52221a2a3eb
libssh2@1.11.1-1+deb13u1
1.11.1-1+deb13u2

Open the chart page →

9,405
bluespacebluespace0.3.01 of 1See more

bluespace bluespace 0.3.0

1 of the 1 container images this version deploys carry CVE-2026-66034.

Container imageDigestPackageFixed in
library/nginx:latest05b8cb60c354
libssh2@1.11.1-1+deb13u1
1.11.1-1+deb13u2

Open the chart page →

1,839
colosseumbook-k8sinfra-v21.0.182 of 5See more

colosseum book-k8sinfra-v2 1.0.18

2 of the 5 container images this version deploys carry CVE-2026-66034.

Container imageDigestPackageFixed in
sysnet4admin/colosseum-cms:loge74b43c7f492
libssh2@1.10.0-3+b1
1.10.0-3+deb12u1
sysnet4admin/colosseum-prm:log5802bfcd7fed
libssh2@1.10.0-3+b1
1.10.0-3+deb12u1

Open the chart page →

26,266
jenkinsbook-k8sinfra-v25.1.121 of 2See more

jenkins book-k8sinfra-v2 5.1.12

1 of the 2 container images this version deploys carry CVE-2026-66034.

Container imageDigestPackageFixed in
jenkins/jenkins:2.440.3-jdk17de4fea113221
libssh2@1.10.0-3+b1
1.10.0-3+deb12u1

Open the chart page →

7,627
flaresolverrbrandan-schmitz-helm-chartsVerified publisher1.4.01 of 1See more

flaresolverr brandan-schmitz-helm-charts 1.4.0

1 of the 1 container images this version deploys carry CVE-2026-66034.

Container imageDigestPackageFixed in
flaresolverr/flaresolverr:v3.5.0139dfee1c6f8
libssh2@1.10.0-3+b1
1.10.0-3+deb12u1

Open the chart page →

27,282
tenantsbrbarmex-tenant2.0.01 of 1See more

tenants brbarmex-tenant 2.0.0

1 of the 1 container images this version deploys carry CVE-2026-66034.

Container imageDigestPackageFixed in
library/nginx:latest05b8cb60c354
libssh2@1.11.1-1+deb13u1
1.11.1-1+deb13u2

Open the chart page →

1,839
tautullibryanalves0.1.01 of 1See more

tautulli bryanalves 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-66034.

Container imageDigestPackageFixed in
tautulli/tautulli:latest670e68dd9efc
libssh2@1.11.1-1+deb13u1
1.11.1-1+deb13u2

Open the chart page →

1,886
node-appbryopsida0.5.12 of 2See more

node-app bryopsida 0.5.1

2 of the 2 container images this version deploys carry CVE-2026-66034.

Container imageDigestPackageFixed in
library/node:ltsbe23f54a88d3
libssh2@1.10.0-3+b1
1.10.0-3+deb12u1
ghcr.io/bryopsida/k8s-dev-pod:main82d0b161161d
libssh2@1.11.0-4.1build2
1.11.0-4.1ubuntu0.24.04.3

Open the chart page →

14,446
nginx-chartbtrepoVerified publisher0.1.01 of 1See more

nginx-chart btrepo 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-66034.

Container imageDigestPackageFixed in
library/nginx:latest05b8cb60c354
libssh2@1.11.1-1+deb13u1
1.11.1-1+deb13u2

Open the chart page →

1,839
gotenbergbysamioVerified publisher0.2.01 of 1See more

gotenberg bysamio 0.2.0

1 of the 1 container images this version deploys carry CVE-2026-66034.

Container imageDigestPackageFixed in
gotenberg/gotenberg:8-chromiuma40f92d7419a
libssh2@1.11.1-1+deb13u1
1.11.1-1+deb13u2

Open the chart page →

8,991
camellia-redis-proxycamellia-redis-proxy1.4.01 of 2See more

camellia-redis-proxy camellia-redis-proxy 1.4.0

1 of the 2 container images this version deploys carry CVE-2026-66034.

Container imageDigestPackageFixed in
48n6e/camellia-redis-proxy:1.4.0-jdk-21-0.0.1a6ed886fddfc
libssh2@1.10.0-3+b1
1.10.0-3+deb12u1

Open the chart page →

7,329
httpd-ldapauth-proxycamptocamp31.0.21 of 1See more

httpd-ldapauth-proxy camptocamp3 1.0.2

1 of the 1 container images this version deploys carry CVE-2026-66034.

Container imageDigestPackageFixed in
library/httpd:2.4.631ae8051591a5
libssh2@1.10.0-3+b1
1.10.0-3+deb12u1

Open the chart page →

3,165
nginx-s3-gatewaycamptocamp31.0.01 of 1See more

nginx-s3-gateway camptocamp3 1.0.0

1 of the 1 container images this version deploys carry CVE-2026-66034.

Container imageDigestPackageFixed in
ghcr.io/nginxinc/nginx-s3-gateway/nginx-oss-s3-gateway:unprivileged-oss-202503313db8145349a3
libssh2@1.10.0-3+b1
1.10.0-3+deb12u1

Open the chart page →

5,051
puppetservercamptocamp31.0.11 of 2See more

puppetserver camptocamp3 1.0.1

1 of the 2 container images this version deploys carry CVE-2026-66034.

Container imageDigestPackageFixed in
ghcr.io/voxpupuli/puppetserver:8.7.0-main63873f3f698e
libssh2@1.10.0-3
no fix listed

Open the chart page →

5,932
tetragon-policy-buildercamptocamp30.1.11 of 1See more

tetragon-policy-builder camptocamp3 0.1.1

1 of the 1 container images this version deploys carry CVE-2026-66034.

Container imageDigestPackageFixed in
ghcr.io/camptocamp/tetragon-policy-builder:master0e99f12bb040
libssh2@1.10.0-3+b1
1.10.0-3+deb12u1

Open the chart page →

10,318
caninecanine0.1.101 of 7See more

canine canine 0.1.10

1 of the 7 container images this version deploys carry CVE-2026-66034.

Container imageDigestPackageFixed in
ghcr.io/caninehq/canine:latesta058034ca006
libssh2@1.10.0-3+b1
1.10.0-3+deb12u1

Open the chart page →

13,363
opencvecfi20170.1.22 of 7See more

opencve cfi2017 0.1.2

2 of the 7 container images this version deploys carry CVE-2026-66034.

Container imageDigestPackageFixed in
library/nginx:trixie05b8cb60c354
libssh2@1.11.1-1+deb13u1
1.11.1-1+deb13u2
ghcr.io/cfi2017/opencve-scheduler:3.0.08d943799621b
libssh2@1.10.0-3+b1
1.10.0-3+deb12u1

Open the chart page →

14,964
nginx-chartchanhk10.1.01 of 1See more

nginx-chart chanhk1 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-66034.

Container imageDigestPackageFixed in
library/nginx:latest05b8cb60c354
libssh2@1.11.1-1+deb13u1
1.11.1-1+deb13u2

Open the chart page →

1,839
chart-dnazarenochart-dnazareno0.1.01 of 3See more

chart-dnazareno chart-dnazareno 0.1.0

1 of the 3 container images this version deploys carry CVE-2026-66034.

Container imageDigestPackageFixed in
library/phpmyadmin:5.2.16e75aa8f767c
libssh2@1.10.0-3+b1
1.10.0-3+deb12u1

Open the chart page →

5,528
kitchenowlchart-kitchenowl0.1.121 of 2See more

kitchenowl chart-kitchenowl 0.1.12

1 of the 2 container images this version deploys carry CVE-2026-66034.

Container imageDigestPackageFixed in
tombursch/kitchenowl-backend:v0.7.8b48e4ab727cd
libssh2@1.11.1-1
1.11.1-1+deb13u2

Open the chart page →

4,783
home-assistant-otbrcharts-derwitt-devVerified publisher2.1.31 of 1See more

home-assistant-otbr charts-derwitt-dev 2.1.3

1 of the 1 container images this version deploys carry CVE-2026-66034.

Container imageDigestPackageFixed in
ghcr.io/wittdennis/homeassistant-otbr:4.2.31b53b0b3488e
libssh2@1.11.1-1+deb13u1
1.11.1-1+deb13u2

Open the chart page →

2,358
paperless-ngxcharts-derwitt-devVerified publisher2.1.41 of 1See more

paperless-ngx charts-derwitt-dev 2.1.4

1 of the 1 container images this version deploys carry CVE-2026-66034.

Container imageDigestPackageFixed in
ghcr.io/paperless-ngx/paperless-ngx:3.1.3aa810a36942c
libssh2@1.11.1-1+deb13u1
1.11.1-1+deb13u2

Open the chart page →

4,644
mysqld-exporterchoerodon0.1.01 of 1See more

mysqld-exporter choerodon 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-66034.

Container imageDigestPackageFixed in
library/nginx:stabled5792f71a949
libssh2@1.11.1-1+deb13u1
1.11.1-1+deb13u2

Open the chart page →

1,839
arbitrumchronicleVerified publisher0.3.41 of 1See more

arbitrum chronicle 0.3.4

1 of the 1 container images this version deploys carry CVE-2026-66034.

Container imageDigestPackageFixed in
offchainlabs/nitro-node:v3.7.6-c0fe95e9f779fa84b7b
libssh2@1.10.0-3+b1
1.10.0-3+deb12u1

Open the chart page →

7,006
zksyncchronicleVerified publisher0.1.01 of 2See more

zksync chronicle 0.1.0

1 of the 2 container images this version deploys carry CVE-2026-66034.

Container imageDigestPackageFixed in
matterlabs/external-node:v24.0.06cbfea4c694a
libssh2@1.10.0-3+b1
1.10.0-3+deb12u1

Open the chart page →

5,550
kamaji-etcdclastixVerified publisher0.17.01 of 4See more

kamaji-etcd clastix 0.17.0

1 of the 4 container images this version deploys carry CVE-2026-66034.

Container imageDigestPackageFixed in
cfssl/cfssl:latestc9018c2ddf0b
libssh2@1.10.0-3+b1
1.10.0-3+deb12u1

Open the chart page →

12,021
helmchartclouddrove1.4.01 of 1See more

helmchart clouddrove 1.4.0

1 of the 1 container images this version deploys carry CVE-2026-66034.

Container imageDigestPackageFixed in
library/nginx:latest05b8cb60c354
libssh2@1.11.1-1+deb13u1
1.11.1-1+deb13u2

Open the chart page →

1,839
kube-acp-stackcloudentity2.28.01 of 7See more

kube-acp-stack cloudentity 2.28.0

1 of the 7 container images this version deploys carry CVE-2026-66034.

Container imageDigestPackageFixed in
timescale/timescaledb-ha:pg17.2-ts2.18.2e8d0a9cc3db5
libssh2@1.10.0-3
no fix listed

Open the chart page →

20,936
rundeckcloudnativeapp0.1.01 of 2See more

rundeck cloudnativeapp 0.1.0

1 of the 2 container images this version deploys carry CVE-2026-66034.

Container imageDigestPackageFixed in
library/nginx:stabled5792f71a949
libssh2@1.11.1-1+deb13u1
1.11.1-1+deb13u2

Open the chart page →

23,683
galaxycloudve6.8.61 of 3See more

galaxy cloudve 6.8.6

1 of the 3 container images this version deploys carry CVE-2026-66034.

Container imageDigestPackageFixed in
quay.io/galaxyproject/galaxy-min:26.1.12c324c9789f5
libssh2@1.11.1-1+deb13u1
1.11.1-1+deb13u2

Open the chart page →

5,552
galaxy-depscloudve1.1.11 of 7See more

galaxy-deps cloudve 1.1.1

1 of the 7 container images this version deploys carry CVE-2026-66034.

Container imageDigestPackageFixed in
bitnamilegacy/kubectl:latestcd354d5b2556
libssh2@1.10.0-3+b1
1.10.0-3+deb12u1

Open the chart page →

10,543
pulsarcloudve0.2.01 of 2See more

pulsar cloudve 0.2.0

1 of the 2 container images this version deploys carry CVE-2026-66034.

Container imageDigestPackageFixed in
galaxy/pulsar-kubernetes:0.15.7e50a890e24c9
libssh2@1.10.0-3+b1
1.10.0-3+deb12u1

Open the chart page →

5,994

Container images carrying it

657 by charts deploying them

A fixed version is listed for 1 of the 1 affected package.

Container imageDigestPackageFixed inUsed by
quay.io/yushiwho/api:e1f9d77e0d9b93dbf2b
libssh2@1.10.0-3+b1
1.10.0-3+deb12u1
1
registry.gitlab.com/enbuild-staging/vivsoft-platform-ui/enbuild-frontend:1.0.3166353ce9bf98
libssh2@1.11.1-1
1.11.1-1+deb13u2
1
registry.gitlab.com/enbuild-staging/vivsoft-platform-ui/enbuild-mq-consumer:1.0.310e3cd8c7776d
libssh2@1.10.0-3+b1
1.10.0-3+deb12u1
1
registry.gitlab.com/gitlab-org/build/cng/gitlab-openbao:v2.5.5-gitlab25b7636dfba3f
libssh2@1.11.1-1+deb13u1
1.11.1-1+deb13u2
1
registry.gitlab.com/school_guy/docker-typo3:13.4.30-197d868ed76185d7270d
libssh2@1.10.0-3+b1
1.10.0-3+deb12u1
1
registry.k8s.io/git-sync/git-sync:v4.5.00e64aedb0d0a
libssh2@1.11.1-1
1.11.1-1+deb13u2
1
registry.k8s.io/git-sync/git-sync:v4.1.0fd9722fd02e3
libssh2@1.10.0-3+b1
1.10.0-3+deb12u1
1

syft 1.42.1 · advisories as of 15 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.