StackRadar

CVE-2026-66034

High

Advisory

Published 24 Jul 2026In the index since 5 Sept 2026
Severity
High
worst across findings
CVSS
7.7
base score, highest
EPSS
0.004
34th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
795
of 17,787 indexed, latest versions
Container images
657
deployed by those charts
Fix available
1 of 1
affected package

The matching OSV records carry no description.

Carried by container images the latest versions of 795 of 17,787 indexed charts deploy, on 657 images.

Affected packageAffected versionsFixed inImages
libssh2deb1.5.0-2ubuntu0.1, 1.8.0-2.1build1, 1.10.0-3, 1.10.0-3+b1+8 more1.10.0-3+deb12u1, 1.11.0-4.1ubuntu0.24.04.3, 1.11.1-1+deb13u2, 1.11.1-1+e5+1 more657
OSV records
DEBIAN-CVE-2026-66034UBUNTU-CVE-2026-66034ECHO-3f90-0490-a5db

Charts affected

795 by stars
ChartLatestAffected imagesRadar Score
authentikcluster-deploy0.2.01 of 1See more

authentik cluster-deploy 0.2.0

1 of the 1 container images this version deploys carry CVE-2026-66034.

Container imageDigestPackageFixed in
ghcr.io/goauthentik/server:2026.5.6ed120caf710c
libssh2@1.11.1-1+deb13u1
1.11.1-1+deb13u2

Open the chart page →

2,457
chowdacluster-deploy0.2.01 of 1See more

chowda cluster-deploy 0.2.0

1 of the 1 container images this version deploys carry CVE-2026-66034.

Container imageDigestPackageFixed in
ghcr.io/wgbh-mla/chowda:main86ab9effd1a5
libssh2@1.11.1-1+deb13u1
1.11.1-1+deb13u2

Open the chart page →

1,801
metaflowcluster-deploy0.2.21 of 1See more

metaflow cluster-deploy 0.2.2

1 of the 1 container images this version deploys carry CVE-2026-66034.

Container imageDigestPackageFixed in
public.ecr.aws/outerbounds/metaflow_metadata_service:v2.4.13f7567ce3419d
libssh2@1.10.0-3+b1
1.10.0-3+deb12u1

Open the chart page →

7,521
pbcore-utilcluster-deploy0.0.11 of 1See more

pbcore-util cluster-deploy 0.0.1

1 of the 1 container images this version deploys carry CVE-2026-66034.

Container imageDigestPackageFixed in
ghcr.io/wgbh-mla/pbcore-util:pr-66e04659a3baa
libssh2@1.10.0-3+b1
1.10.0-3+deb12u1

Open the chart page →

8,806
clusterfactoryclusterfactory0.2.01 of 5See more

clusterfactory clusterfactory 0.2.0

1 of the 5 container images this version deploys carry CVE-2026-66034.

Container imageDigestPackageFixed in
jenkins/jenkins:2.541.3-jdk21c4098086090c
libssh2@1.11.1-1
1.11.1-1+deb13u2

Open the chart page →

7,136
gitea-jenkinsclusterfactory0.1.11 of 5See more

gitea-jenkins clusterfactory 0.1.1

1 of the 5 container images this version deploys carry CVE-2026-66034.

Container imageDigestPackageFixed in
jenkins/jenkins:2.541.3-jdk21c4098086090c
libssh2@1.11.1-1
1.11.1-1+deb13u2

Open the chart page →

6,926
clusterplexclusterplexVerified publisher1.1.101 of 3See more

clusterplex clusterplex 1.1.10

1 of the 3 container images this version deploys carry CVE-2026-66034.

Container imageDigestPackageFixed in
ghcr.io/pabloromeo/clusterplex_orchestrator:1.4.160fe80de2d22c
libssh2@1.10.0-3+b1
1.10.0-3+deb12u1

Open the chart page →

3,918
web-chartcms-ktcloudlab0.1.01 of 1See more

web-chart cms-ktcloudlab 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-66034.

Container imageDigestPackageFixed in
library/nginx:latest05b8cb60c354
libssh2@1.11.1-1+deb13u1
1.11.1-1+deb13u2

Open the chart page →

1,839
appcnapVerified publisher1.2.01 of 1See more

app cnap 1.2.0

1 of the 1 container images this version deploys carry CVE-2026-66034.

Container imageDigestPackageFixed in
library/nginx:latest05b8cb60c354
libssh2@1.11.1-1+deb13u1
1.11.1-1+deb13u2

Open the chart page →

1,839
codehubcodehubVerified publisher6.2.181 of 5See more

codehub codehub 6.2.18

1 of the 5 container images this version deploys carry CVE-2026-66034.

Container imageDigestPackageFixed in
bitnamilegacy/os-shell:12-debian-12-r5177e65e9d633e
libssh2@1.10.0-3+b1
1.10.0-3+deb12u1

Open the chart page →

13,286
cohdicohdi0.2.21 of 3See more

cohdi cohdi 0.2.2

1 of the 3 container images this version deploys carry CVE-2026-66034.

Container imageDigestPackageFixed in
ghcr.io/cohdi/composable-dra-driver:v0.2.28c05f7366981
libssh2@1.11.1-1
1.11.1-1+deb13u2

Open the chart page →

3,680
genericcolearendt0.2.71 of 1See more

generic colearendt 0.2.7

1 of the 1 container images this version deploys carry CVE-2026-66034.

Container imageDigestPackageFixed in
library/nginx:latest05b8cb60c354
libssh2@1.11.1-1+deb13u1
1.11.1-1+deb13u2

Open the chart page →

1,839
cortezacorteza1.1.01 of 3See more

corteza corteza 1.1.0

1 of the 3 container images this version deploys carry CVE-2026-66034.

Container imageDigestPackageFixed in
cortezaproject/corteza-server-corredor:2024.9.44ea78dfe5364
libssh2@1.10.0-3+b1
1.10.0-3+deb12u1

Open the chart page →

8,251
dev-code-servercosmoVerified publisher0.0.71 of 2See more

dev-code-server cosmo 0.0.7

1 of the 2 container images this version deploys carry CVE-2026-66034.

Container imageDigestPackageFixed in
ghcr.io/cosmo-workspace/dev-code-server:v0.0.316fda01ae58a
libssh2@1.10.0-3+b1
1.10.0-3+deb12u1

Open the chart page →

14,587
mongodbcowboysysopVerified publisher15.1.51 of 1See more

mongodb cowboysysop 15.1.5

1 of the 1 container images this version deploys carry CVE-2026-66034.

Container imageDigestPackageFixed in
bitnamilegacy/mongodb:7.0.8-debian-12-r23163c3842bfd
libssh2@1.10.0-3+b1
1.10.0-3+deb12u1

Open the chart page →

6,183
iam-zencryptexlabsVerified publisher0.12.231 of 4See more

iam-zen cryptexlabs 0.12.23

1 of the 4 container images this version deploys carry CVE-2026-66034.

Container imageDigestPackageFixed in
bitnamilegacy/kubectl:latestcd354d5b2556
libssh2@1.10.0-3+b1
1.10.0-3+deb12u1

Open the chart page →

3,872
csghubcsghubVerified publisher2.4.38 of 34See more

csghub csghub 2.4.3

8 of the 34 container images this version deploys carry CVE-2026-66034.

Container imageDigestPackageFixed in
opencsghq/agenticflow:ee-v0.6-52f03fead54db
libssh2@1.10.0-3+b1
1.10.0-3+deb12u1
opencsghq/csgbot:v0.6.7-eeaf7191a9cf8a
libssh2@1.11.1-1+deb13u1
1.11.1-1+deb13u2
opencsghq/csghub-server:v2.4.0-ee302c9d45d8a8
libssh2@1.10.0-3+b1
1.10.0-3+deb12u1
opencsghq/csghub-xnet:v2.4.0-ee04121fd19ef9
libssh2@1.10.0-3+b1
1.10.0-3+deb12u1
opencsghq/gitlab-gitaly:v17.5.0bdd2c58b9744
libssh2@1.10.0-3+b1
1.10.0-3+deb12u1
opencsghq/gitlab-shell:v17.5.0f6d7e7d6be5d
libssh2@1.10.0-3+b1
1.10.0-3+deb12u1
opencsghq/kubectl:latestb6d87e1048c2
libssh2@1.10.0-3+b1
1.10.0-3+deb12u1
opencsghq/label-studio:v2.4.0b4e849fcf94a
libssh2@1.11.1-1+deb13u1
1.11.1-1+deb13u2

Open the chart page →

59,131
dataflowcsghubVerified publisher2.5.01 of 7See more

dataflow csghub 2.5.0

1 of the 7 container images this version deploys carry CVE-2026-66034.

Container imageDigestPackageFixed in
opencsghq/label-studio:v2.5.047e22aa71870
libssh2@1.11.1-1+deb13u1
1.11.1-1+deb13u2

Open the chart page →

6,532
rtcsic-charts0.1.11 of 5See more

rt csic-charts 0.1.1

1 of the 5 container images this version deploys carry CVE-2026-66034.

Container imageDigestPackageFixed in
firefart/requesttracker:5.0.40d6249906d8c
libssh2@1.10.0-3+b1
1.10.0-3+deb12u1

Open the chart page →

14,206
cspconsolecspconsole1.3.113 of 5See more

cspconsole cspconsole 1.3.11

3 of the 5 container images this version deploys carry CVE-2026-66034.

Container imageDigestPackageFixed in
cspconsole/config-provider:1.0.365524a26a6c23
libssh2@1.10.0-3+b1
1.10.0-3+deb12u1
cspconsole/csp-control-center:1.0.1046dda4a31bd6
libssh2@1.10.0-3+b1
1.10.0-3+deb12u1
cspconsole/report-collector:1.0.15839750248193b
libssh2@1.10.0-3+b1
1.10.0-3+deb12u1

Open the chart page →

11,891
cypikcypik-app0.1.02 of 2See more

cypik cypik-app 0.1.0

2 of the 2 container images this version deploys carry CVE-2026-66034.

Container imageDigestPackageFixed in
library/nginx:latest05b8cb60c354
libssh2@1.11.1-1+deb13u1
1.11.1-1+deb13u2
library/nginx:1.25a484819eb602
libssh2@1.10.0-3+b1
1.10.0-3+deb12u1

Open the chart page →

7,527
view-cadvisorcypik-helm-chart0.1.01 of 1See more

view-cadvisor cypik-helm-chart 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-66034.

Container imageDigestPackageFixed in
library/nginx:latest05b8cb60c354
libssh2@1.11.1-1+deb13u1
1.11.1-1+deb13u2

Open the chart page →

1,839
jupyterhubd4nVerified publisher3.3.71 of 7See more

jupyterhub d4n 3.3.7

1 of the 7 container images this version deploys carry CVE-2026-66034.

Container imageDigestPackageFixed in
aristidetm/basic-notebook:3.6.5469dbc951224
libssh2@1.10.0-3+b1
1.10.0-3+deb12u1

Open the chart page →

16,632
nginx-chartdaeho12Verified publisher0.1.01 of 1See more

nginx-chart daeho12 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-66034.

Container imageDigestPackageFixed in
library/nginx:latest05b8cb60c354
libssh2@1.11.1-1+deb13u1
1.11.1-1+deb13u2

Open the chart page →

1,839
dakeradakera-helmVerified publisher0.11.1071 of 3See more

dakera dakera-helm 0.11.107

1 of the 3 container images this version deploys carry CVE-2026-66034.

Container imageDigestPackageFixed in
ghcr.io/dakera-ai/dakera:0.11.101af610992a416
libssh2@1.11.1-1+deb13u1
1.11.1-1+deb13u2

Open the chart page →

3,962
damap-chartdamapVerified publisher0.3.02 of 5See more

damap-chart damap 0.3.0

2 of the 5 container images this version deploys carry CVE-2026-66034.

Container imageDigestPackageFixed in
gotenberg/gotenberg:8f29984bd1e22
libssh2@1.11.1-1+deb13u1
1.11.1-1+deb13u2
ghcr.io/damap-org/damap-frontend:5.0.1609f48af4efc
libssh2@1.11.1-1+deb13u1
1.11.1-1+deb13u2

Open the chart page →

13,859
helm-chart-testdasmeta0.1.41 of 1See more

helm-chart-test dasmeta 0.1.4

1 of the 1 container images this version deploys carry CVE-2026-66034.

Container imageDigestPackageFixed in
library/nginx:stabled5792f71a949
libssh2@1.11.1-1+deb13u1
1.11.1-1+deb13u2

Open the chart page →

1,839
redashdasmeta0.1.01 of 1See more

redash dasmeta 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-66034.

Container imageDigestPackageFixed in
redash/redash:26.3.0c5c9148f5c38
libssh2@1.10.0-3+b1
1.10.0-3+deb12u1

Open the chart page →

4,914
sentry-relaydasmeta0.1.21 of 1See more

sentry-relay dasmeta 0.1.2

1 of the 1 container images this version deploys carry CVE-2026-66034.

Container imageDigestPackageFixed in
getsentry/relay:24.10.0ba7bf9163219
libssh2@1.10.0-3+b1
1.10.0-3+deb12u1

Open the chart page →

3,401
db-connection-testdb-connection-testVerified publisher0.1.01 of 1See more

db-connection-test db-connection-test 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-66034.

Container imageDigestPackageFixed in
felipecs8/app-db-connection-test:v129e06c9c6385
libssh2@1.10.0-3+b1
1.10.0-3+deb12u1

Open the chart page →

10,116
linkdingdeimosfr-charts1.0.31 of 1See more

linkding deimosfr-charts 1.0.3

1 of the 1 container images this version deploys carry CVE-2026-66034.

Container imageDigestPackageFixed in
sissbruecker/linkding:1.35.00c5dddf0b37c
libssh2@1.10.0-3+b1
1.10.0-3+deb12u1

Open the chart page →

5,656
my-helm-chartdemohelm20.1.01 of 1See more

my-helm-chart demohelm2 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-66034.

Container imageDigestPackageFixed in
library/nginx:latest05b8cb60c354
libssh2@1.11.1-1+deb13u1
1.11.1-1+deb13u2

Open the chart page →

1,839
ai-agentdevtron0.0.11 of 1See more

ai-agent devtron 0.0.1

1 of the 1 container images this version deploys carry CVE-2026-66034.

Container imageDigestPackageFixed in
quay.io/devtron/ai-agent:0.0.16545dac92173
libssh2@1.10.0-3+b1
1.10.0-3+deb12u1

Open the chart page →

9,152
devtron-enterprisedevtron48.0.02 of 28See more

devtron-enterprise devtron 48.0.0

2 of the 28 container images this version deploys carry CVE-2026-66034.

Container imageDigestPackageFixed in
quay.io/devtron/devtron-utils:dup-chart-repo-v1.1.095d6f0e05636
libssh2@1.10.0-3+b1
1.10.0-3+deb12u1
quay.io/devtron/notifier:9804331c-372-39294709c7da19c5a
libssh2@1.10.0-3+b1
1.10.0-3+deb12u1

Open the chart page →

66,542
ai-agentdevtron-labs0.0.11 of 1See more

ai-agent devtron-labs 0.0.1

1 of the 1 container images this version deploys carry CVE-2026-66034.

Container imageDigestPackageFixed in
quay.io/devtron/ai-agent:0.0.16545dac92173
libssh2@1.10.0-3+b1
1.10.0-3+deb12u1

Open the chart page →

9,152
devtron-enterprisedevtron-labs48.0.02 of 28See more

devtron-enterprise devtron-labs 48.0.0

2 of the 28 container images this version deploys carry CVE-2026-66034.

Container imageDigestPackageFixed in
quay.io/devtron/devtron-utils:dup-chart-repo-v1.1.095d6f0e05636
libssh2@1.10.0-3+b1
1.10.0-3+deb12u1
quay.io/devtron/notifier:9804331c-372-39294709c7da19c5a
libssh2@1.10.0-3+b1
1.10.0-3+deb12u1

Open the chart page →

66,542
devtron-operatordevtron-labs0.23.31 of 11See more

devtron-operator devtron-labs 0.23.3

1 of the 11 container images this version deploys carry CVE-2026-66034.

Container imageDigestPackageFixed in
quay.io/devtron/devtron-utils:dup-chart-repo-v1.1.095d6f0e05636
libssh2@1.10.0-3+b1
1.10.0-3+deb12u1

Open the chart page →

31,447
difydify1.0.01 of 4See more

dify dify 1.0.0

1 of the 4 container images this version deploys carry CVE-2026-66034.

Container imageDigestPackageFixed in
langgenius/dify-api:1.0.0066035f93856
libssh2@1.10.0-3+b1
1.10.0-3+deb12u1

Open the chart page →

19,063
adventurelogdjjudas21Verified publisher0.1.11 of 3See more

adventurelog djjudas21 0.1.1

1 of the 3 container images this version deploys carry CVE-2026-66034.

Container imageDigestPackageFixed in
ghcr.io/seanmorley15/adventurelog-backend:v0.13.00250d9cb0d74
libssh2@1.11.1-1+deb13u1
1.11.1-1+deb13u2

Open the chart page →

7,480
domainmoddjjudas21Verified publisher1.0.01 of 1See more

domainmod djjudas21 1.0.0

1 of the 1 container images this version deploys carry CVE-2026-66034.

Container imageDigestPackageFixed in
domainmod/domainmod:4.23.04017bfe4c597
libssh2@1.10.0-3+b1
1.10.0-3+deb12u1

Open the chart page →

7,167
truecommanddjjudas21Verified publisher0.1.01 of 1See more

truecommand djjudas21 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-66034.

Container imageDigestPackageFixed in
ixsystems/truecommand:3.2.019c218455cd2
libssh2@1.11.1-1
1.11.1-1+deb13u2

Open the chart page →

5,144
webtreesdjjudas21Verified publisher3.0.01 of 1See more

webtrees djjudas21 3.0.0

1 of the 1 container images this version deploys carry CVE-2026-66034.

Container imageDigestPackageFixed in
ghcr.io/nathanvaughn/webtrees:2.2.6034151b61a80
libssh2@1.11.1-1
1.11.1-1+deb13u2

Open the chart page →

5,885
wizarrdjjudas21Verified publisher0.1.51 of 1See more

wizarr djjudas21 0.1.5

1 of the 1 container images this version deploys carry CVE-2026-66034.

Container imageDigestPackageFixed in
ghcr.io/wizarrrr/wizarr:4.2.0-beta.3d19d886d5090
libssh2@1.10.0-3+b1
1.10.0-3+deb12u1

Open the chart page →

13,031
dnation-kubernetes-jsonnet-translatordnationcloud2.0.11 of 1See more

dnation-kubernetes-jsonnet-translator dnationcloud 2.0.1

1 of the 1 container images this version deploys carry CVE-2026-66034.

Container imageDigestPackageFixed in
dnationcloud/kubernetes-jsonnet-translator:2.0.178fed4f3c130
libssh2@1.10.0-3+b1
1.10.0-3+deb12u1

Open the chart page →

3,626
dnation-kubernetes-monitoringdnationcloud3.0.21 of 1See more

dnation-kubernetes-monitoring dnationcloud 3.0.2

1 of the 1 container images this version deploys carry CVE-2026-66034.

Container imageDigestPackageFixed in
dnationcloud/kubernetes-jsonnet-translator:2.0.178fed4f3c130
libssh2@1.10.0-3+b1
1.10.0-3+deb12u1

Open the chart page →

3,626
dnation-kubernetes-monitoring-stackdnationcloud4.0.21 of 17See more

dnation-kubernetes-monitoring-stack dnationcloud 4.0.2

1 of the 17 container images this version deploys carry CVE-2026-66034.

Container imageDigestPackageFixed in
dnationcloud/kubernetes-jsonnet-translator:2.0.178fed4f3c130
libssh2@1.10.0-3+b1
1.10.0-3+deb12u1

Open the chart page →

21,455
dominodomino-iisasVerified publisher0.3.11 of 3See more

domino domino-iisas 0.3.1

1 of the 3 container images this version deploys carry CVE-2026-66034.

Container imageDigestPackageFixed in
ghcr.io/iisas/domino-frontend:k8s8e53861be292
libssh2@1.10.0-3+b1
1.10.0-3+deb12u1

Open the chart page →

10,307
healthchecksdoubanVerified publisher1.0.101 of 2See more

healthchecks douban 1.0.10

1 of the 2 container images this version deploys carry CVE-2026-66034.

Container imageDigestPackageFixed in
healthchecks/healthchecks:latestaa08a61b0dcf
libssh2@1.11.1-1+deb13u1
1.11.1-1+deb13u2

Open the chart page →

1,721
duckdb-uiduckdb-ui0.5.21 of 1See more

duckdb-ui duckdb-ui 0.5.2

1 of the 1 container images this version deploys carry CVE-2026-66034.

Container imageDigestPackageFixed in
ghcr.io/beslovas/duckdb-ui:1.3.272f35584026d
libssh2@1.10.0-3+b1
1.10.0-3+deb12u1

Open the chart page →

4,283
postgres-backup-localduck-helm0.1.51 of 1See more

postgres-backup-local duck-helm 0.1.5

1 of the 1 container images this version deploys carry CVE-2026-66034.

Container imageDigestPackageFixed in
prodrigestivill/postgres-backup-local:latestf70742ebe42b
libssh2@1.11.1-1
1.11.1-1+deb13u2

Open the chart page →

3,426

Container images carrying it

657 by charts deploying them

A fixed version is listed for 1 of the 1 affected package.

Container imageDigestPackageFixed inUsed by
quay.io/yushiwho/api:e1f9d77e0d9b93dbf2b
libssh2@1.10.0-3+b1
1.10.0-3+deb12u1
1
registry.gitlab.com/enbuild-staging/vivsoft-platform-ui/enbuild-frontend:1.0.3166353ce9bf98
libssh2@1.11.1-1
1.11.1-1+deb13u2
1
registry.gitlab.com/enbuild-staging/vivsoft-platform-ui/enbuild-mq-consumer:1.0.310e3cd8c7776d
libssh2@1.10.0-3+b1
1.10.0-3+deb12u1
1
registry.gitlab.com/gitlab-org/build/cng/gitlab-openbao:v2.5.5-gitlab25b7636dfba3f
libssh2@1.11.1-1+deb13u1
1.11.1-1+deb13u2
1
registry.gitlab.com/school_guy/docker-typo3:13.4.30-197d868ed76185d7270d
libssh2@1.10.0-3+b1
1.10.0-3+deb12u1
1
registry.k8s.io/git-sync/git-sync:v4.5.00e64aedb0d0a
libssh2@1.11.1-1
1.11.1-1+deb13u2
1
registry.k8s.io/git-sync/git-sync:v4.1.0fd9722fd02e3
libssh2@1.10.0-3+b1
1.10.0-3+deb12u1
1

syft 1.42.1 · advisories as of 15 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.