CVE-2026-6772
HighAdvisory
Published 21 Apr 2026In the index since 5 Sept 2026
- Severity
- High
- worst across findings
- CVSS
- 7.5
- base score, highest
- EPSS
- 0.003
- 19th percentile
- CISA KEV
- Not listed
- no confirmed exploitation
- Charts affected
- 70
- of 17,781 indexed, latest versions
- Container images
- 60
- deployed by those charts
- Fix available
- 1 of 2
- affected packages
The matching OSV records carry no description.
Carried by container images the latest versions of 70 of 17,781 indexed charts deploy, on 60 images.
| Affected package | Affected versions | Fixed in | Images |
|---|---|---|---|
| nssdeb | 2:3.87.1-1, 2:3.87.1-1+deb12u1, 2:3.87.1-1+deb12u2, 2:3.110-1+1 more | 2:3.87.1-1+deb12u3, 2:3.110-1+deb13u2 | 59 |
| mozjs68deb | 68.6.0-1ubuntu1 | no fix listed | 1 |
- OSV records
- DEBIAN-CVE-2026-6772UBUNTU-CVE-2026-6772
Charts affected
70 by stars
| Chart | Latest | Affected images | Radar Score |
|---|---|---|---|
| uptime-kumauptime-kumaVerified publisher | 4.2.0 | 1 of 1See more | 30,159 |
| falcofalcosecurity | 9.1.0 | 1 of 3See more | 5,227 |
| openldap-stack-hahelm-openldapVerified publisher | 4.3.3 | 1 of 5See more | 5,919 |
| wazuhwazuh-helm-morgovedVerified publisher | 2.0.7 | 1 of 5See more | 11,384 |
| openclawopenclaw-helmVerified publisher | 1.5.40 | 1 of 2See more | 5,660 |
| nautobotnautobotOfficialVerified publisher | 3.1.2 | 1 of 1See more | 4,332 |
| wazuh-agentavistoVerified publisher | 4.12.2 | 1 of 1See more | 6,457 |
| grafana-pdf-exporterwiremindVerified publisher | 2.1.1 | 1 of 1See more | 9,746 |
| thingsboardcetic | 0.1.2 | 1 of 2See more | 5,235 |
| paperless-ngxalexmorbo-paperless-ngxVerified publisher | 0.2.0 | 1 of 2See more | 12,037 |
| anteonanteonVerified publisher | 2.6.4 | 1 of 13See more | 22,202 |
| paperless-ngxcrystalnetVerified publisher | 0.2.22 | 1 of 3See more | 13,761 |
| dbrepodbrepo | 1.13.3 | 1 of 25See more | 52,635 |
| dragonfly-stackdragonflyVerified publisher | 0.1.2 | 1 of 7See more | 18,376 |
| flaresolverrlib42Verified publisher | 2.0.0 | 1 of 1See more | 35,050 |
| drillmagasin-drill | 0.9.0 | 1 of 3See more | 5,734 |
| prowlerprowler-appVerified publisher | 0.0.9 | 1 of 5See more | 8,158 |
| fluent-bitromanow-helm-chartsVerified publisher | 1.7.3 | 1 of 1See more | 7,740 |
| uptime-kumasb-helm-charts | 0.4.0 | 1 of 1See more | 38,107 |
| speckle-serverspeckleVerified publisher | 2.26.3 | 1 of 4See more | 10,380 |
| uptime-kumaadnoctemVerified publisher | 0.4.1 | 1 of 1See more | 30,028 |
| flaresolverralexmorbo-flaresolverrVerified publisher | 0.2.0 | 1 of 1See more | 27,274 |
| ddosifyanteonVerified publisher | 1.7.5 | 2 of 13See more | 25,669 |
| platform-apiappscodeVerified publisher | 2026.9.11 | 1 of 3See more | 37,268 |
| asya-playgroundasya | 1.1.3 | 1 of 1See more | 9,412 |
| flaresolverrbrandan-schmitz-helm-chartsVerified publisher | 1.4.0 | 1 of 1See more | 27,274 |
| catalyst-agentscatalyst-agents | 0.1.30 | 1 of 18See more | 15,027 |
| truecommanddjjudas21Verified publisher | 0.1.0 | 1 of 1See more | 5,174 |
| uptime-kumaegebackVerified publisher | 2.0.12 | 1 of 1See more | 30,159 |
| chaos-meshethereum-helm-chartsVerified publisher | 0.0.3 | 1 of 4See more | 12,127 |
| business-api-ecosystemfiware | 1.1.0 | 1 of 4See more | 64,489 |
| scanservjsgabe565Verified publisher | 0.9.2 | 1 of 1See more | 13,241 |
| mopidygeek-cookbookVerified publisher | 0.1.2 | 1 of 1See more | 12,958 |
| openclawgpg-dev | 1.5.36 | 1 of 2See more | 1,634 |
| opentelemetry-demogpg-dev | 0.33.8 | 1 of 27See more | 49,025 |
| archiveboxhelmforgeVerified publisher | 1.1.12 | 1 of 1See more | 7,633 |
| uptime-kumahelmforgeVerified publisher | 1.5.12 | 1 of 1See more | 30,099 |
| paperlesshomelabcihelmchartstestVerified publisher | 9.1.9 | 1 of 1See more | 16,384 |
| hydrahydraVerified publisher | 0.9.5 | 1 of 2See more | 9,011 |
| isolated-vmhydraVerified publisher | 0.9.4 | 1 of 1See more | 7,733 |
| flaresolverrk8s-home-lab-repo | 6.2.0 | 1 of 1See more | 27,274 |
| paperlessk8s-home-lab-repo | 11.0.1 | 1 of 1See more | 9,103 |
| kbot-self-hostedkbot-self-hostedVerified publisher | 0.1.8 | 1 of 7See more | 32,509 |
| chaos-meshkubeblocksVerified publisher | 2.7.2 | 1 of 4See more | 13,497 |
| flaresolverrkubernetes-homelab-helm-chartsVerified publisher | 0.1.2 | 1 of 1See more | 33,583 |
| kubernetes-kiosk-chromiumkubernetes-kiosk-chromium | 0.1.2 | 1 of 1See more | 28,843 |
| uptime-kumalbenicio-communityVerified publisher | 0.1.1 | 1 of 1See more | 33,242 |
| linkdinglinkding | 0.2.3 | 1 of 1See more | 37,942 |
| uptime-kumaloeken-at-homeVerified publisher | 2.3.2 | 1 of 1See more | 33,242 |
| flaresolverrluiscajl | 0.0.3 | 1 of 1See more | 27,274 |
Container images carrying it
60 by charts deploying them
A fixed version is listed for 1 of the 2 affected packages.
| Container image | Digest | Package | Fixed in | Used by |
|---|---|---|---|---|
| flaresolverr/ | 139dfee1c6f8 | nss | 2:3.87.1-1+deb12u3 | 5 |
| chromedp/ | 313ed7255ae1 | nss | 2:3.110-1+deb13u2 | 2 |
| louislam/ | 917318f9d7be | nss | 2:3.87.1-1+deb12u3 | 2 |
| louislam/ | 9aeb4e51d038 | nss | 2:3.87.1-1+deb12u3 | 2 |
| louislam/ | a8610b3b4c38 | nss | 2:3.87.1-1+deb12u3 | 2 |
| speckle/ | 4bd113093583 | nss | 2:3.87.1-1+deb12u3 | 2 |
| ghcr.io/ | 7962759d99d7 | nss | 2:3.87.1-1+deb12u3 | 2 |
| ghcr.io/ | 4457b79b24cd | nss | 2:3.87.1-1+deb12u3 | 2 |
| anujdatar/ | 685df04a643b | nss | 2:3.87.1-1+deb12u3 | 1 |
| archivebox/ | 1a5a37331091 | nss | 2:3.87.1-1+deb12u3 | 1 |
| bitnamilegacy/ | 6e412c178ef9 | nss | 2:3.87.1-1+deb12u3 | 1 |
| ddosify/ | a43c5155fa1c | nss | 2:3.87.1-1+deb12u3 | 1 |
| ddosify/ | 3c11e3182652 | nss | 2:3.87.1-1+deb12u3 | 1 |
| ddosify/ | ac323d52bfb4 | nss | 2:3.87.1-1+deb12u3 | 1 |
| dragonflyoss/ | edf3e921f4e0 | nss | 2:3.87.1-1+deb12u3 | 1 |
| falcosecurity/ | 7df783d5269a | nss | 2:3.87.1-1+deb12u3 | 1 |
| fiware/ | 29456835bb2c | mozjs68 | no fix listed | 1 |
| fluent/ | e76397ef3983 | nss | 2:3.87.1-1+deb12u3 | 1 |
| gotenberg/ | 206a6c708fc6 | nss | 2:3.110-1+deb13u2 | 1 |
| ixsystems/ | 19c218455cd2 | nss | 2:3.110-1+deb13u2 | 1 |
| jaedb/ | 048cfbf58d57 | nss | 2:3.87.1-1+deb12u3 | 1 |
| jpgouin/ | bfdd0088c776 | nss | 2:3.87.1-1+deb12u3 | 1 |
| kinseii/ | 7160eb143728 | nss | 2:3.87.1-1+deb12u3 | 1 |
| localstack/ | 9d278167f2b7 | nss | 2:3.87.1-1+deb12u3 | 1 |
| louislam/ | 3e24e96c89ef | nss | 2:3.87.1-1+deb12u3 | 1 |
| louislam/ | 4c364ef96aad | nss | 2:3.87.1-1+deb12u3 | 1 |
| louislam/ | 91e963bfda56 | nss | 2:3.87.1-1+deb12u3 | 1 |
| merlos/ | a38fc7e09ed7 | nss | 2:3.87.1-1+deb12u3 | 1 |
| networktocode/ | ed484336b1ad | nss | 2:3.110-1+deb13u2 | 1 |
| prowlercloud/ | 4f252d579be2 | nss | 2:3.87.1-1+deb12u3 | 1 |
| sbs20/ | dad1fd6e9a98 | nss | 2:3.87.1-1+deb12u3 | 1 |
| sissbruecker/ | a222fb777e1f | nss | 2:3.87.1-1+deb12u3 | 1 |
| speckle/ | 092384dba45d | nss | 2:3.87.1-1+deb12u3 | 1 |
| speckle/ | 1f897ca906ea | nss | 2:3.87.1-1+deb12u3 | 1 |
| speckle/ | 52cad5e3293e | nss | 2:3.87.1-1+deb12u3 | 1 |
| speckle/ | 6dee853ba74a | nss | 2:3.87.1-1+deb12u3 | 1 |
| speckle/ | 787adcb20a3a | nss | 2:3.87.1-1+deb12u3 | 1 |
| speckle/ | 84fc39bca0c8 | nss | 2:3.87.1-1+deb12u3 | 1 |
| speckle/ | 8f3c1ea153ba | nss | 2:3.87.1-1+deb12u3 | 1 |
| speckle/ | c102b087481a | nss | 2:3.87.1-1+deb12u3 | 1 |
| speckle/ | d3da0a84de98 | nss | 2:3.87.1-1+deb12u3 | 1 |
| thingsboard/ | 2d17e4e36edc | nss | 2:3.87.1-1+deb12u3 | 1 |
| tinymediamanager/ | 2b34dc85099e | nss | 2:3.110-1+deb13u2 | 1 |
| ghcr.io/ | f9104080d9a7 | nss | 2:3.110-1+deb13u2 | 1 |
| ghcr.io/ | 8766ba08bf1a | nss | 2:3.87.1-1+deb12u3 | 1 |
| ghcr.io/ | 69b1d3c09cfa | nss | 2:3.87.1-1+deb12u3 | 1 |
| ghcr.io/ | 9608d9b51452 | nss | 2:3.87.1-1+deb12u3 | 1 |
| ghcr.io/ | fb609bc264d9 | nss | 2:3.87.1-1+deb12u3 | 1 |
| ghcr.io/ | 1f6eba640320 | nss | 2:3.87.1-1+deb12u3 | 1 |
| ghcr.io/ | ab535d1fef5d | nss | 2:3.87.1-1+deb12u3 | 1 |