StackRadar

CVE-2026-6732

High

Advisory

Published 23 Apr 2026In the index since 5 Sept 2026
Severity
High
worst across findings
CVSS
7.5
base score, highest
EPSS
0.006
48th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
171
of 17,781 indexed, latest versions
Container images
162
deployed by those charts
Fix available
2 of 2
affected packages

The matching OSV records carry no description.

Carried by container images the latest versions of 171 of 17,781 indexed charts deploy, on 162 images.

Affected packageAffected versionsFixed inImages
libxml2apk2.13.4-r3, 2.13.4-r5, 2.13.4-r6, 2.13.8-r0+2 more2.13.9-r1, 2.13.9-r2160
libxml2deb2.14.5+dfsg-0.2, 2.15.2+dfsg-0.12.14.5+dfsg-0.2ubuntu0.2, 2.15.2+dfsg-0.1ubuntu0.12
OSV records
ALPINE-CVE-2026-6732UBUNTU-CVE-2026-6732
Also known as
USN-8460-1

Charts affected

171 by stars
ChartLatestAffected imagesRadar Score
karakeepself-hosters-by-nightVerified publisher2.5.11 of 1See more

karakeep self-hosters-by-night 2.5.1

1 of the 1 container images this version deploys carry CVE-2026-6732.

Container imageDigestPackageFixed in
ghcr.io/karakeep-app/karakeep:0.27.1abd7d6b11b1b
libxml2@2.13.8-r0
2.13.9-r1

Open the chart page →

5,213
sentry-k8ssentry-k8sVerified publisher1.4.11 of 11See more

sentry-k8s sentry-k8s 1.4.1

1 of the 11 container images this version deploys carry CVE-2026-6732.

Container imageDigestPackageFixed in
library/nginx:1.31.0-alpine2f07d83bf561
libxml2@2.13.9-r0
2.13.9-r1

Open the chart page →

16,449
vite-react-app-helm-chartsvite-react-app-helm-charts1.0.01 of 1See more

vite-react-app-helm-charts vite-react-app-helm-charts 1.0.0

1 of the 1 container images this version deploys carry CVE-2026-6732.

Container imageDigestPackageFixed in
ghcr.io/marcuwynu23/vite-app-sample:latest21247f2b97c4
libxml2@2.13.9-r0
2.13.9-r1

Open the chart page →

1,085
ingress-nginxwenerme4.15.11 of 2See more

ingress-nginx wenerme 4.15.1

1 of the 2 container images this version deploys carry CVE-2026-6732.

Container imageDigestPackageFixed in
registry.k8s.io/ingress-nginx/controller:v1.15.1594ceea76b01
libxml2@2.13.9-r0
2.13.9-r1

Open the chart page →

1,547
backendzymtraceOfficialVerified publisher26.9.11 of 6See more

backend zymtrace 26.9.1

1 of the 6 container images this version deploys carry CVE-2026-6732.

Container imageDigestPackageFixed in
ghcr.io/zystem-io/zymtrace-pub-ui:26.9.1e951adf792cd
libxml2@2.13.8-r0
2.13.9-r1

Open the chart page →

10,323
linkstackadnoctemVerified publisher0.4.01 of 1See more

linkstack adnoctem 0.4.0

1 of the 1 container images this version deploys carry CVE-2026-6732.

Container imageDigestPackageFixed in
linkstackorg/linkstack:latest1c8b05399ee4
libxml2@2.13.9-r0
2.13.9-r1

Open the chart page →

2,092
airbyteairbyte-v2Verified publisher2.2.01 of 10See more

airbyte airbyte-v2 2.2.0

1 of the 10 container images this version deploys carry CVE-2026-6732.

Container imageDigestPackageFixed in
airbyte/db:2.2.03b6985a0ce75
libxml2@2.13.9-r0
2.13.9-r1

Open the chart page →

12,473
akto-k8s-ebpf-openshiftakto0.1.11 of 1See more

akto-k8s-ebpf-openshift akto 0.1.1

1 of the 1 container images this version deploys carry CVE-2026-6732.

Container imageDigestPackageFixed in
public.ecr.aws/aktosecurity/mirror-api-logging:k8s_ebpf_core_impd94ce715f051
libxml2@2.13.9-r0
2.13.9-r1

Open the chart page →

1,276
akto-source-code-analyserakto0.1.51 of 3See more

akto-source-code-analyser akto 0.1.5

1 of the 3 container images this version deploys carry CVE-2026-6732.

Container imageDigestPackageFixed in
aktosecurity/akto-puppeteer-replay:doom_latest853e37321e6e
libxml2@2.13.8-r0
2.13.9-r1

Open the chart page →

4,880
lidarralexmorbo-lidarrVerified publisher0.1.21 of 1See more

lidarr alexmorbo-lidarr 0.1.2

1 of the 1 container images this version deploys carry CVE-2026-6732.

Container imageDigestPackageFixed in
ghcr.io/home-operations/lidarr:3.1.2.4902dab0e07502a3
libxml2@2.13.9-r0
2.13.9-r1

Open the chart page →

1,870
antigenic-docuseal-helm-chartantigenic-docuseal-helm-chartVerified publisher0.2.01 of 1See more

antigenic-docuseal-helm-chart antigenic-docuseal-helm-chart 0.2.0

1 of the 1 container images this version deploys carry CVE-2026-6732.

Container imageDigestPackageFixed in
docuseal/docuseal:2.4.17493fd7f6728
libxml2@2.13.9-r0
2.13.9-r1

Open the chart page →

2,766
inbox-uiappscodeVerified publisher2026.9.111 of 1See more

inbox-ui appscode 2026.9.11

1 of the 1 container images this version deploys carry CVE-2026-6732.

Container imageDigestPackageFixed in
ghcr.io/appscode/inbox-ui:0.0.5ae3b0e29daaa
libxml2@2.13.4-r5
2.13.9-r1

Open the chart page →

840
appwriteappwrite-helmVerified publisher1.3.21 of 8See more

appwrite appwrite-helm 1.3.2

1 of the 8 container images this version deploys carry CVE-2026-6732.

Container imageDigestPackageFixed in
appwrite/appwrite:1.9.01aaa70127114
libxml2@2.13.9-r0
2.13.9-r1

Open the chart page →

9,847
blackduck-alertblackduck8.4.01 of 4See more

blackduck-alert blackduck 8.4.0

1 of the 4 container images this version deploys carry CVE-2026-6732.

Container imageDigestPackageFixed in
blackducksoftware/blackduck-alert-db:8.4.06310fac39d53
libxml2@2.13.9-r0
2.13.9-r1

Open the chart page →

4,292
catalyst-agentscatalyst-agents0.1.301 of 18See more

catalyst-agents catalyst-agents 0.1.30

1 of the 18 container images this version deploys carry CVE-2026-6732.

Container imageDigestPackageFixed in
alpine/k8s:1.32.3eec354133193
libxml2@2.13.4-r5
2.13.9-r1

Open the chart page →

15,027
kitchenowlchart-kitchenowl0.1.121 of 2See more

kitchenowl chart-kitchenowl 0.1.12

1 of the 2 container images this version deploys carry CVE-2026-6732.

Container imageDigestPackageFixed in
tombursch/kitchenowl-web:v0.7.8517f808eee66
libxml2@2.13.9-r0
2.13.9-r1

Open the chart page →

4,803
kubevirt-managerchristianhuthVerified publisher0.7.01 of 1See more

kubevirt-manager christianhuth 0.7.0

1 of the 1 container images this version deploys carry CVE-2026-6732.

Container imageDigestPackageFixed in
kubevirtmanager/kubevirt-manager:1.5.41b98f1b5977a
libxml2@2.13.9-r0
2.13.9-r1

Open the chart page →

1,986
cidrappcidrappVerified publisher0.1.01 of 1See more

cidrapp cidrapp 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-6732.

Container imageDigestPackageFixed in
svcosti/cidrapp:latest8428d87bc5d0
libxml2@2.13.4-r5
2.13.9-r1

Open the chart page →

840
chekrckotzbauerVerified publisher0.5.31 of 2See more

chekr ckotzbauer 0.5.3

1 of the 2 container images this version deploys carry CVE-2026-6732.

Container imageDigestPackageFixed in
nginxinc/nginx-unprivileged:mainline-alpinee93571f3d083
libxml2@2.13.9-r0
2.13.9-r1

Open the chart page →

3,469
cloudvaultcloudvaultOfficialVerified publisher1.0.21 of 3See more

cloudvault cloudvault 1.0.2

1 of the 3 container images this version deploys carry CVE-2026-6732.

Container imageDigestPackageFixed in
library/postgres:18.3-alpine54451ecb8ab3
libxml2@2.13.9-r0
2.13.9-r1

Open the chart page →

2,184
ms-basecodedesignplus-chartsVerified publisher0.0.321 of 1See more

ms-base codedesignplus-charts 0.0.32

1 of the 1 container images this version deploys carry CVE-2026-6732.

Container imageDigestPackageFixed in
nginxdemos/hello:0.4b28d1e16c676
libxml2@2.13.8-r0
2.13.9-r1

Open the chart page →

1,291
csgshipcsghubVerified publisher0.4.61 of 10See more

csgship csghub 0.4.6

1 of the 10 container images this version deploys carry CVE-2026-6732.

Container imageDigestPackageFixed in
opencsghq/csgship-portal:v1.2.1865814dc87a1
libxml2@2.13.4-r5
2.13.9-r1

Open the chart page →

11,335
cspconsolecspconsole1.3.111 of 5See more

cspconsole cspconsole 1.3.11

1 of the 5 container images this version deploys carry CVE-2026-6732.

Container imageDigestPackageFixed in
library/nginx:1.28-alpinea8b39bd9cf0f
libxml2@2.13.9-r0
2.13.9-r1

Open the chart page →

12,274
dakeradakera-helmVerified publisher0.11.1071 of 3See more

dakera dakera-helm 0.11.107

1 of the 3 container images this version deploys carry CVE-2026-6732.

Container imageDigestPackageFixed in
ghcr.io/dakera-ai/dakera-dashboard:0.3.292e059589f7f7
libxml2@2.13.9-r0
2.13.9-r1

Open the chart page →

3,937
dapr-agentsdapr-agents-devVerified publisher0.1.51 of 31See more

dapr-agents dapr-agents-dev 0.1.5

1 of the 31 container images this version deploys carry CVE-2026-6732.

Container imageDigestPackageFixed in
nginxinc/nginx-unprivileged:1.29-alpine0c79d56aee56
libxml2@2.13.9-r0
2.13.9-r1

Open the chart page →

22,193
deployhubdeployhubVerified publisher10.0.4151 of 11See more

deployhub deployhub 10.0.415

1 of the 11 container images this version deploys carry CVE-2026-6732.

Container imageDigestPackageFixed in
quay.io/deployhub/ms-nginx:svccat-v11.0.815-g717581d2d3400664e8
libxml2@2.13.9-r0
2.13.9-r1

Open the chart page →

11,160
clamav-apidevhatVerified publisher1.0.11 of 1See more

clamav-api devhat 1.0.1

1 of the 1 container images this version deploys carry CVE-2026-6732.

Container imageDigestPackageFixed in
ghcr.io/devhatro/clamav-api:1.0.2ff0cd9db78d3
libxml2@2.13.4-r3
2.13.9-r1

Open the chart page →

2,097
frontend-servicedev-krishan-dhaka-charts1.0.21 of 1See more

frontend-service dev-krishan-dhaka-charts 1.0.2

1 of the 1 container images this version deploys carry CVE-2026-6732.

Container imageDigestPackageFixed in
devkrishan001/frontend:latesta0ad60836e6b
libxml2@2.13.9-r0
2.13.9-r1

Open the chart page →

1,036
devops-diplomdevops-diplom-chartVerified publisher0.8.01 of 2See more

devops-diplom devops-diplom-chart 0.8.0

1 of the 2 container images this version deploys carry CVE-2026-6732.

Container imageDigestPackageFixed in
library/postgres:13-alpinefb9065b6e3e2
libxml2@2.13.9-r0
2.13.9-r1

Open the chart page →

2,548
direktivdirektivVerified publisher0.10.01 of 6See more

direktiv direktiv 0.10.0

1 of the 6 container images this version deploys carry CVE-2026-6732.

Container imageDigestPackageFixed in
registry.k8s.io/ingress-nginx/controller:v1.12.0e6b8de175acd
libxml2@2.13.4-r3
2.13.9-r1

Open the chart page →

3,470
dnation-kubernetes-monitoring-stackdnationcloud4.0.21 of 17See more

dnation-kubernetes-monitoring-stack dnationcloud 4.0.2

1 of the 17 container images this version deploys carry CVE-2026-6732.

Container imageDigestPackageFixed in
nginxinc/nginx-unprivileged:1.27-alpine65e3e85dbaed
libxml2@2.13.4-r6
2.13.9-r1

Open the chart page →

21,641
management-portaleclipse-aeriosVerified publisher1.1.01 of 2See more

management-portal eclipse-aerios 1.1.0

1 of the 2 container images this version deploys carry CVE-2026-6732.

Container imageDigestPackageFixed in
eclipseaerios/management-portal-frontend:1.2.23a8e4cf60629
libxml2@2.13.9-r0
2.13.9-r1

Open the chart page →

3,888
rommernail-romm1.0.11 of 1See more

romm ernail-romm 1.0.1

1 of the 1 container images this version deploys carry CVE-2026-6732.

Container imageDigestPackageFixed in
rommapp/romm:4.4.1b909e95d1aab
libxml2@2.13.9-r0
2.13.9-r1

Open the chart page →

2,896
benchmarkoor-uiethereum-helm-chartsVerified publisher0.1.01 of 1See more

benchmarkoor-ui ethereum-helm-charts 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-6732.

Container imageDigestPackageFixed in
ghcr.io/ethpandaops/benchmarkoor-ui:latestd090bb2060d9
libxml2@2.13.9-r0
2.13.9-r1

Open the chart page →

1,338
perliteextrim-helm-chartsVerified publisher0.1.01 of 1See more

perlite extrim-helm-charts 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-6732.

Container imageDigestPackageFixed in
extrim/perlite:1.5.99cb7eb5598b6
libxml2@2.13.4-r5
2.13.9-r1

Open the chart page →

1,440
findery-marketfindery-market0.1.01 of 7See more

findery-market findery-market 0.1.0

1 of the 7 container images this version deploys carry CVE-2026-6732.

Container imageDigestPackageFixed in
chandanteekinavar/findery-market-frontend:1.06de5bd44a325
libxml2@2.13.4-r3
2.13.9-r1

Open the chart page →

7,691
firefox-browserfirefox-browserVerified publisher1.1.01 of 1See more

firefox-browser firefox-browser 1.1.0

1 of the 1 container images this version deploys carry CVE-2026-6732.

Container imageDigestPackageFixed in
jlesage/firefox:v25.03.1055c28defe31
libxml2@2.13.4-r5
2.13.9-r1

Open the chart page →

1,395
mod-copycatfolio-org0.1.31 of 1See more

mod-copycat folio-org 0.1.3

1 of the 1 container images this version deploys carry CVE-2026-6732.

Container imageDigestPackageFixed in
folioci/mod-copycat:latest1513fad2b799
libxml2@2.13.9-r0
2.13.9-r1

Open the chart page →

1,466
skypilotgeek-cookbookVerified publisher0.0.11 of 3See more

skypilot geek-cookbook 0.0.1

1 of the 3 container images this version deploys carry CVE-2026-6732.

Container imageDigestPackageFixed in
registry.k8s.io/ingress-nginx/controller:v1.11.8695d79381ee6
libxml2@2.13.8-r0
2.13.9-r1

Open the chart page →

8,923
dispatchoor-uigeneral-helm-chartsVerified publisher0.1.01 of 1See more

dispatchoor-ui general-helm-charts 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-6732.

Container imageDigestPackageFixed in
ghcr.io/ethpandaops/dispatchoor-web:latest18e30413dac2
libxml2@2.13.9-r0
2.13.9-r1

Open the chart page →

1,338
dpsgpu-operator0.8.31 of 3See more

dps gpu-operator 0.8.3

1 of the 3 container images this version deploys carry CVE-2026-6732.

Container imageDigestPackageFixed in
library/postgres:18.1-alpineaa6eb304ddb6
libxml2@2.13.9-r0
2.13.9-r1

Open the chart page →

852
grafana-cloud-onboardinggrafana0.4.71 of 5See more

grafana-cloud-onboarding grafana 0.4.7

1 of the 5 container images this version deploys carry CVE-2026-6732.

Container imageDigestPackageFixed in
ghcr.io/grafana/helm-chart-toolbox-kubectl:0.1.1c137478627cc
libxml2@2.13.8-r0
2.13.9-r1

Open the chart page →

4,637
pyroscope-monitoringgrafana0.1.11 of 6See more

pyroscope-monitoring grafana 0.1.1

1 of the 6 container images this version deploys carry CVE-2026-6732.

Container imageDigestPackageFixed in
ghcr.io/grafana/helm-chart-toolbox-kubectl:0.1.1c137478627cc
libxml2@2.13.8-r0
2.13.9-r1

Open the chart page →

8,188
gridgain9gridgainVerified publisher1.1.101 of 2See more

gridgain9 gridgain 1.1.10

1 of the 2 container images this version deploys carry CVE-2026-6732.

Container imageDigestPackageFixed in
gridgain/gridgain9:9.1.1895018390077b
libxml2@2.13.9-r0
2.13.9-r1

Open the chart page →

3,199
octoboxhalkeye0.1.11 of 1See more

octobox halkeye 0.1.1

1 of the 1 container images this version deploys carry CVE-2026-6732.

Container imageDigestPackageFixed in
octoboxio/octobox:latestd909041c46eb
libxml2@2.13.9-r0
2.13.9-r1

Open the chart page →

3,255
home-assistanthelm-chart-roeiVerified publisher2025.3.01 of 1See more

home-assistant helm-chart-roei 2025.3.0

1 of the 1 container images this version deploys carry CVE-2026-6732.

Container imageDigestPackageFixed in
ghcr.io/home-assistant/home-assistant:2025.3.026c51e44d932
libxml2@2.13.4-r3
2.13.9-r1

Open the chart page →

4,647
appwritehelmforgeVerified publisher1.3.41 of 5See more

appwrite helmforge 1.3.4

1 of the 5 container images this version deploys carry CVE-2026-6732.

Container imageDigestPackageFixed in
appwrite/console:8.7.383dcdc8492ac6
libxml2@2.13.9-r0
2.13.9-r1

Open the chart page →

6,952
openreel-videohelmforgeVerified publisher1.0.31 of 1See more

openreel-video helmforge 1.0.3

1 of the 1 container images this version deploys carry CVE-2026-6732.

Container imageDigestPackageFixed in
helmforge/openreel-video:v0.5.07ba0d47b943f
libxml2@2.13.9-r0
2.13.9-r1

Open the chart page →

1,085
townsquarehuscker-chartsVerified publisher1.0.41 of 2See more

townsquare huscker-charts 1.0.4

1 of the 2 container images this version deploys carry CVE-2026-6732.

Container imageDigestPackageFixed in
ghcr.io/huscker/townsquare-frontend:2.15.2dc6384d10cc8
libxml2@2.13.4-r6
2.13.9-r1

Open the chart page →

3,407
monitoring-stackict-platformVerified publisher0.4.01 of 13See more

monitoring-stack ict-platform 0.4.0

1 of the 13 container images this version deploys carry CVE-2026-6732.

Container imageDigestPackageFixed in
ghcr.io/grafana/helm-chart-toolbox-kubectl:0.1.2c7adcc4db378
libxml2@2.13.9-r0
2.13.9-r1

Open the chart page →

9,573

Container images carrying it

162 by charts deploying them

A fixed version is listed for 2 of the 2 affected packages.

Container imageDigestPackageFixed inUsed by
ghcr.io/openrelik/openrelik-ui:latest7f91594d5eb3
libxml2@2.13.9-r0
2.13.9-r1
1
ghcr.io/open-telemetry/demo:3.0.0-image-provider93e1585e97ac
libxml2@2.13.9-r0
2.13.9-r1
1
ghcr.io/pixelfederation/unbound:1.24.2_0fce820a03964
libxml2@2.13.9-r0
2.13.9-r1
1
ghcr.io/radar-base/radar-upload-source-connector/radar-upload-connect-frontend:0.6.47e27863545fc
libxml2@2.13.4-r5
2.13.9-r1
1
ghcr.io/vojtechpastyrik/squawk:0.1.104005df5f7229
libxml2@2.13.9-r0
2.13.9-r1
1
ghcr.io/zystem-io/zymtrace-pub-ui:26.9.1e951adf792cd
libxml2@2.13.8-r0
2.13.9-r1
1
public.ecr.aws/aktosecurity/mirror-api-logging:k8s_ebpf_core_impd94ce715f051
libxml2@2.13.9-r0
2.13.9-r1
1
quay.io/deployhub/ms-nginx:svccat-v11.0.815-g717581d2d3400664e8
libxml2@2.13.9-r0
2.13.9-r1
1
registry.gitlab.com/technostructures/posca/posca:latesta693021686ca
libxml2@2.13.9-r0
2.13.9-r1
1
registry.k8s.io/ingress-nginx/controller:v1.13.21f7eaeb01933
libxml2@2.13.8-r0
2.13.9-r1
1
registry.k8s.io/ingress-nginx/controller:v1.13.137e489b22ac7
libxml2@2.13.8-r0
2.13.9-r1
1
registry.k8s.io/ingress-nginx/controller:v1.12.0e6b8de175acd
libxml2@2.13.4-r3
2.13.9-r1
1

syft 1.42.1 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.