StackRadarChart IndexLive demo

CVE-2026-67339

Medium

Advisory

Published 20 Jul 2026In the index since 6 Sept 2026

Severity: Medium; worst across findings
CVSS: 5.3; base score, highest
EPSS: 0.002; 14th percentile
CISA KEV: Not listed; no confirmed exploitation
Charts affected: 141; of 17,781 indexed, latest versions
Container images: 125; deployed by those charts
Fix available: 1 of 1; affected package

Guzzle: Proxy-Authorization headers can be sent to origin servers

Carried by container images the latest versions of 141 of 17,781 indexed charts deploy, on 125 images.

Affected package	Affected versions	Fixed in	Images
guzzlehttp/guzzlecomposer	5.3.4, 6.3.0, 6.3.3, 6.5.3+22 more	7.14.2	125

OSV records: GHSA-94pj-82f3-465w

Charts affected

141 by stars

Chart

Latest

Affected images

Radar Score

medewerkercatalogusmedewerkercatalogus

1 of 3 See more

medewerkercatalogus medewerkercatalogus 1.0.0

1 of the 3 container images this version deploys carry CVE-2026-67339.

Container image	Digest	Package	Fixed in
ghcr.io/conductionnl/medewerkercatalogus-php :latest	1ea5412bed26	guzzlehttp/guzzle@6.5.5	7.14.2

Open the chart page →

7,327

memo-componentmemo-component

1 of 3 See more

memo-component memo-component 1.0.0

1 of the 3 container images this version deploys carry CVE-2026-67339.

Container image	Digest	Package	Fixed in
ghcr.io/conductionnl/memo-component-php :latest	ef77f4c089a1	guzzlehttp/guzzle@6.5.5	7.14.2

Open the chart page →

7,510

fossologymidokura-community

1 of 2 See more

fossology midokura-community 0.2.2

1 of the 2 container images this version deploys carry CVE-2026-67339.

Container image	Digest	Package	Fixed in
fossology/fossology :4.2.1	8bd1f22ba7bb	guzzlehttp/guzzle@7.5.0	7.14.2

Open the chart page →

3,294

moodlemoodle

1 of 2 See more

moodle moodle 1.0.3

1 of the 2 container images this version deploys carry CVE-2026-67339.

Container image	Digest	Package	Fixed in
cloudtooling/moodle :5.2.3	f4f04e0fc401	guzzlehttp/guzzle@7.10.0	7.14.2

Open the chart page →

3,954

akauntingnas-helm-charts

1 of 2 See more

akaunting nas-helm-charts 1.0.3

1 of the 2 container images this version deploys carry CVE-2026-67339.

Container image	Digest	Package	Fixed in
akaunting/akaunting :3.0.15	52811b36ec3a	guzzlehttp/guzzle@7.7.0	7.14.2

Open the chart page →

12,813

librenmsnimbolus

1 of 3 See more

librenms nimbolus 0.5.1

1 of the 3 container images this version deploys carry CVE-2026-67339.

Container image	Digest	Package	Fixed in
librenms/librenms :24.11.0	0920bc9117a8	guzzlehttp/guzzle@7.9.2	7.14.2

Open the chart page →

2,293

notification-componentnotification-component

1 of 4 See more

notification-component notification-component 1.0.0

1 of the 4 container images this version deploys carry CVE-2026-67339.

Container image	Digest	Package	Fixed in
ghcr.io/conductionnl/notification-component-php :latest	cd9656e6bc2c	guzzlehttp/guzzle@6.5.5	7.14.2

Open the chart page →

7,527

commonground-gatewayopencatalogi

1 of 7 See more

commonground-gateway opencatalogi 1.5.3

1 of the 7 container images this version deploys carry CVE-2026-67339.

Container image	Digest	Package	Fixed in
ghcr.io/conductionnl/commonground-gateway-php :latest	947882bf2c37	guzzlehttp/guzzle@6.5.8	7.14.2

Open the chart page →

9,724

orderregistratiecomponentorderregistratiecomponent

1 of 3 See more

orderregistratiecomponent orderregistratiecomponent 1.0.0

1 of the 3 container images this version deploys carry CVE-2026-67339.

Container image	Digest	Package	Fixed in
ghcr.io/conductionnl/orderregistratiecomponent-php :latest	d17257e4fa27	guzzlehttp/guzzle@6.5.5	7.14.2

Open the chart page →

7,492

firefly-iiiphntom

1 of 2 See more

firefly-iii phntom 0.2.10

1 of the 2 container images this version deploys carry CVE-2026-67339.

Container image	Digest	Package	Fixed in
phntom/fireflyiii :version-5.7.5	f881ea5fbbf1	guzzlehttp/guzzle@7.4.2	7.14.2

Open the chart page →

1,813

procestypecatalogusprocestypecatalogus

1 of 4 See more

procestypecatalogus procestypecatalogus 1.1.0

1 of the 4 container images this version deploys carry CVE-2026-67339.

Container image	Digest	Package	Fixed in
ghcr.io/conductionnl/procestypecatalogus-php :latest	956c4fb64796	guzzlehttp/guzzle@6.5.5	7.14.2

Open the chart page →

7,429

productenendienstencatalogusproductenendienstencatalogus

1 of 3 See more

productenendienstencatalogus productenendienstencatalogus 1.0.0

1 of the 3 container images this version deploys carry CVE-2026-67339.

Container image	Digest	Package	Fixed in
ghcr.io/conductionnl/productenendienstencatalogus-php :latest	7242da105081	guzzlehttp/guzzle@6.5.5	7.14.2

Open the chart page →

7,510

panproto-application-nldesign

1 of 5 See more

pan proto-application-nldesign 0.1.0

1 of the 5 container images this version deploys carry CVE-2026-67339.

Container image	Digest	Package	Fixed in
conduction/pan-php :dev	24f03c57568f	guzzlehttp/guzzle@6.5.5	7.14.2

Open the chart page →

8,725

proto-component-commongroundproto-component-commonground

1 of 3 See more

proto-component-commonground proto-component-commonground 1.0.0

1 of the 3 container images this version deploys carry CVE-2026-67339.

Container image	Digest	Package	Fixed in
ghcr.io/conductionnl/proto-component-commonground-php :latest	eb36ead1954e	guzzlehttp/guzzle@6.5.5	7.14.2

Open the chart page →

7,510

laravel-workerrenoki-co

1 of 1 See more

laravel-worker renoki-co 1.1.0

1 of the 1 container images this version deploys carry CVE-2026-67339.

Container image	Digest	Package	Fixed in
quay.io/renokico/laravel-helm-demo :worker-0.6.0	4b188259267e	guzzlehttp/guzzle@7.3.0	7.14.2

Open the chart page →

5,687

review-componentreview-component

1 of 3 See more

review-component review-component 1.0.0

1 of the 3 container images this version deploys carry CVE-2026-67339.

Container image	Digest	Package	Fixed in
ghcr.io/conductionnl/review-component-php :latest	afe623824b82	guzzlehttp/guzzle@6.5.5	7.14.2

Open the chart page →

7,491

1 of 6 See more

shopware robjuz 2.0.0

1 of the 6 container images this version deploys carry CVE-2026-67339.

Container image	Digest	Package	Fixed in
shyim/shopware :6.4.6.0	a951c0e6b836	guzzlehttp/guzzle@7.4.0	7.14.2

Open the chart page →

2,972

mauticromholdings

1 of 3 See more

mautic romholdings 0.1.3

1 of the 3 container images this version deploys carry CVE-2026-67339.

Container image	Digest	Package	Fixed in
mautic/mautic :2.13-apache	a954c5868d76	guzzlehttp/guzzle@6.3.0	7.14.2

Open the chart page →

2,939

grocysarab97

1 of 1 See more

grocy sarab97 0.1.1

1 of the 1 container images this version deploys carry CVE-2026-67339.

Container image	Digest	Package	Fixed in
linuxserver/grocy :4.0.1	f8f5f96b6ea8	guzzlehttp/guzzle@7.7.0	7.14.2

Open the chart page →

2,449

nextcloudsb-helm-charts

1 of 2 See more

nextcloud sb-helm-charts 0.4.0

1 of the 2 container images this version deploys carry CVE-2026-67339.

Container image	Digest	Package	Fixed in
library/nextcloud :31.0.10-apache	b7faa1653c39	guzzlehttp/guzzle@7.9.2	7.14.2

Open the chart page →

9,755

bookstackschmitzis

1 of 1 See more

bookstack schmitzis 0.1.1

1 of the 1 container images this version deploys carry CVE-2026-67339.

Container image	Digest	Package	Fixed in
solidnerd/bookstack :21.12	762ffd5c51d3	guzzlehttp/guzzle@7.4.1	7.14.2

Open the chart page →

2,751

snipeitschmitzis

1 of 2 See more

snipeit schmitzis 6.1.0

1 of the 2 container images this version deploys carry CVE-2026-67339.

Container image	Digest	Package	Fixed in
snipe/snipe-it :v8.3.1	141ebf2386fe	guzzlehttp/guzzle@7.9.3	7.14.2

Open the chart page →

6,094

typo3schoolguys-helmcharts

1 of 1 See more

typo3 schoolguys-helmcharts 0.4.2

1 of the 1 container images this version deploys carry CVE-2026-67339.

Container image	Digest	Package	Fixed in
registry.gitlab.com/school_guy/docker-typo3 :13.4.30-197d868e	d76185d7270d	guzzlehttp/guzzle@7.11.0	7.14.2

Open the chart page →

4,836

wallabagsebtiz13-charts

1 of 1 See more

wallabag sebtiz13-charts 0.6.0

1 of the 1 container images this version deploys carry CVE-2026-67339.

Container image	Digest	Package	Fixed in
wallabag/wallabag :2.6.14	4a527e027e0d	guzzlehttp/guzzle@5.3.4	7.14.2

Open the chart page →

1,136

cachetsergiotocalini

1 of 1 See more

cachet sergiotocalini 1.0.0

1 of the 1 container images this version deploys carry CVE-2026-67339.

Container image	Digest	Package	Fixed in
cachethq/docker :2.3.15	a61ff0f67ea7	guzzlehttp/guzzle@6.3.3	7.14.2

Open the chart page →

1,896

commonground-gatewayskeleton-pip

1 of 5 See more

commonground-gateway skeleton-pip 0.1.7

1 of the 5 container images this version deploys carry CVE-2026-67339.

Container image	Digest	Package	Fixed in
ghcr.io/conductionnl/commonground-gateway-php :latest	947882bf2c37	guzzlehttp/guzzle@6.5.8	7.14.2

Open the chart page →

2,825

icingawebsvtech-public-helm-charts

1 of 2 See more

icingaweb svtech-public-helm-charts 1.0.0

1 of the 2 container images this version deploys carry CVE-2026-67339.

Container image	Digest	Package	Fixed in
svtechnmaa/svtech_icingaweb2 :v1.0.2	a59d0b81dde2	guzzlehttp/guzzle@7.8.1	7.14.2

Open the chart page →

2,038

taalhuizen-servicetaalhuizen-service

1 of 3 See more

taalhuizen-service taalhuizen-service 1.0.0

1 of the 3 container images this version deploys carry CVE-2026-67339.

Container image	Digest	Package	Fixed in
ghcr.io/conductionnl/taalhuizen-service-php :latest	04f1b7f0d573	guzzlehttp/guzzle@6.5.5	7.14.2

Open the chart page →

7,480

repmanteam-blue

1 of 5 See more

repman team-blue 0.3.0

1 of the 5 container images this version deploys carry CVE-2026-67339.

Container image	Digest	Package	Fixed in
buddy/repman :1.4.0	097c897f8b54	guzzlehttp/guzzle@6.5.5	7.14.2

Open the chart page →

3,993

nextcloudth-charts

1 of 1 See more

nextcloud th-charts 0.4.0

1 of the 1 container images this version deploys carry CVE-2026-67339.

Container image	Digest	Package	Fixed in
library/nextcloud :31.0.6-apache	588609d76b21	guzzlehttp/guzzle@7.9.2	7.14.2

Open the chart page →

10,086

owncloudth-charts

1 of 1 See more

owncloud th-charts 0.2.1

1 of the 1 container images this version deploys carry CVE-2026-67339.

Container image	Digest	Package	Fixed in
owncloud/server :10.15.0	51d9b74fc2a8	guzzlehttp/guzzle@7.8.1	7.14.2

Open the chart page →

10,006

trouw-servicetrouw-service

1 of 3 See more

trouw-service trouw-service 1.0.0

1 of the 3 container images this version deploys carry CVE-2026-67339.

Container image	Digest	Package	Fixed in
ghcr.io/conductionnl/trouw-service-php :latest	f745e2870692	guzzlehttp/guzzle@6.5.5	7.14.2

Open the chart page →

7,510

verhuis-serviceverhuis-service

1 of 3 See more

verhuis-service verhuis-service 1.0.0

1 of the 3 container images this version deploys carry CVE-2026-67339.

Container image	Digest	Package	Fixed in
ghcr.io/conductionnl/verhuis-service-php :latest	66bbaf95a123	guzzlehttp/guzzle@6.5.5	7.14.2

Open the chart page →

7,510

verzoekconversieserviceverzoekconversieservice

1 of 3 See more

verzoekconversieservice verzoekconversieservice 1.0.0

1 of the 3 container images this version deploys carry CVE-2026-67339.

Container image	Digest	Package	Fixed in
ghcr.io/conductionnl/verzoekconversieservice-php :latest	e918014fb8d3	guzzlehttp/guzzle@6.5.5	7.14.2

Open the chart page →

7,528

verzoekregistratiecomponentverzoekregistratiecomponent

1 of 4 See more

verzoekregistratiecomponent verzoekregistratiecomponent 1.1.0

1 of the 4 container images this version deploys carry CVE-2026-67339.

Container image	Digest	Package	Fixed in
ghcr.io/conductionnl/verzoekregistratiecomponent-php :latest	c4f6c03af5d3	guzzlehttp/guzzle@6.5.5	7.14.2

Open the chart page →

7,429

verzoektypecatalogusverzoektypecatalogus

1 of 4 See more

verzoektypecatalogus verzoektypecatalogus 1.1.0

1 of the 4 container images this version deploys carry CVE-2026-67339.

Container image	Digest	Package	Fixed in
ghcr.io/conductionnl/verzoektypecatalogus-php :latest	64f5eb7a398b	guzzlehttp/guzzle@6.5.5	7.14.2

Open the chart page →

7,429

apiwbstack

1 of 1 See more

api wbstack 0.36.0

1 of the 1 container images this version deploys carry CVE-2026-67339.

Container image	Digest	Package	Fixed in
ghcr.io/wbstack/api :8x.9.11	eee94f9f7a53	guzzlehttp/guzzle@6.5.8	7.14.2

Open the chart page →

2,019

mediawikiwbstack

1 of 1 See more

mediawiki wbstack 0.14.0

1 of the 1 container images this version deploys carry CVE-2026-67339.

Container image	Digest	Package	Fixed in
ghcr.io/wbstack/mediawiki :1.37-7.4-20220621-fp-beta-0	c3012c8a34b4	guzzlehttp/guzzle@7.2.0	7.14.2

Open the chart page →

2,132

tool-quickstatementswbstack

1 of 1 See more

tool-quickstatements wbstack 0.4.0

1 of the 1 container images this version deploys carry CVE-2026-67339.

Container image	Digest	Package	Fixed in
ghcr.io/wbstack/quickstatements :1.3.5	88423e422ea8	guzzlehttp/guzzle@7.4.0	7.14.2

Open the chart page →

1,698

webresourcecataloguswebresourcecatalogus

1 of 4 See more

webresourcecatalogus webresourcecatalogus 1.1.0

1 of the 4 container images this version deploys carry CVE-2026-67339.

Container image	Digest	Package	Fixed in
ghcr.io/conductionnl/webresourcecatalogus-php :latest	8f1bbd5cda85	guzzlehttp/guzzle@6.5.5	7.14.2

Open the chart page →

7,552

xboardxboard

1 of 1 See more

xboard xboard 0.2.0

1 of the 1 container images this version deploys carry CVE-2026-67339.

Container image	Digest	Package	Fixed in
ghcr.io/cedar2025/xboard :latest	896e4926e0d7	guzzlehttp/guzzle@7.10.0	7.14.2

Open the chart page →

1,042

Container images carrying it

125 by charts deploying them

A fixed version is listed for 1 of the 1 affected package.

Container image	Digest	Package	Fixed in	Used by
ghcr.io/conductionnl/trouw-service-php :latest	f745e2870692	guzzlehttp/guzzle@6.5.5	7.14.2	1
ghcr.io/conductionnl/user-component-php :latest	198db44fabb5	guzzlehttp/guzzle@6.5.5	7.14.2	1
ghcr.io/conductionnl/verhuis-service-php :latest	66bbaf95a123	guzzlehttp/guzzle@6.5.5	7.14.2	1
ghcr.io/conductionnl/verzoekconversieservice-php :latest	e918014fb8d3	guzzlehttp/guzzle@6.5.5	7.14.2	1
ghcr.io/conductionnl/verzoekregistratiecomponent-php :latest	c4f6c03af5d3	guzzlehttp/guzzle@6.5.5	7.14.2	1
ghcr.io/conductionnl/verzoektypecatalogus-php :latest	64f5eb7a398b	guzzlehttp/guzzle@6.5.5	7.14.2	1
ghcr.io/conductionnl/waardepapieren-balie-php :latest	f36c423cd259	guzzlehttp/guzzle@6.5.5	7.14.2	1
ghcr.io/conductionnl/waardepapieren-php :latest	b2666ffcbad8	guzzlehttp/guzzle@6.5.5	7.14.2	1
ghcr.io/conductionnl/waardepapieren-register-php :latest	9affab218351	guzzlehttp/guzzle@6.5.5	7.14.2	1
ghcr.io/conductionnl/webresourcecatalogus-php :latest	8f1bbd5cda85	guzzlehttp/guzzle@6.5.5	7.14.2	1
ghcr.io/linuxserver/bookstack :version-v24.12.1	cc795b254b73	guzzlehttp/guzzle@7.9.2	7.14.2	1
ghcr.io/linuxserver/bookstack :version-v21.12	f05447347ff1	guzzlehttp/guzzle@7.4.1	7.14.2	1
ghcr.io/monicahq/monica-next :main	8be69156acbb	guzzlehttp/guzzle@7.9.3	7.14.2	1
ghcr.io/nathanvaughn/webtrees :2.2.6	034151b61a80	guzzlehttp/guzzle@7.10.0	7.14.2	1
ghcr.io/nathanvaughn/webtrees :2.0.19	69423a100fab	guzzlehttp/guzzle@6.5.5	7.14.2	1
ghcr.io/open-telemetry/demo :1.12.0-quoteservice	87eb325d306f	guzzlehttp/guzzle@7.8.1	7.14.2	1
ghcr.io/tasmoadmin/tasmoadmin :v3.3.2	05aeefbdac2b	guzzlehttp/guzzle@7.8.1	7.14.2	1
ghcr.io/wbstack/api :8x.9.11	eee94f9f7a53	guzzlehttp/guzzle@6.5.8	7.14.2	1
ghcr.io/wbstack/mediawiki :1.37-7.4-20220621-fp-beta-0	c3012c8a34b4	guzzlehttp/guzzle@7.2.0	7.14.2	1
ghcr.io/wbstack/quickstatements :1.3.5	88423e422ea8	guzzlehttp/guzzle@7.4.0	7.14.2	1
public.ecr.aws/supportpal/helpdesk-monolithic :4.0.4	573779e57fae	guzzlehttp/guzzle@7.4.2	7.14.2	1
quay.io/renokico/laravel-helm-demo :0.6.0	3207f957e80c	guzzlehttp/guzzle@7.3.0	7.14.2	1
quay.io/renokico/laravel-helm-demo :worker-0.6.0	4b188259267e	guzzlehttp/guzzle@7.3.0	7.14.2	1
quay.io/renokico/laravel-helm-demo :octane-0.6.0	cad83090c58f	guzzlehttp/guzzle@7.3.0	7.14.2	1
registry.gitlab.com/school_guy/docker-typo3 :13.4.30-197d868e	d76185d7270d	guzzlehttp/guzzle@7.11.0	7.14.2	1