CVE-2026-6772

High

Advisory

Published 21 Apr 2026In the index since 5 Sept 2026

Severity: High; worst across findings
CVSS: 7.5; base score, highest
EPSS: 0.003; 19th percentile
CISA KEV: Not listed; no confirmed exploitation
Charts affected: 70; of 17,781 indexed, latest versions
Container images: 60; deployed by those charts
Fix available: 1 of 2; affected packages

The matching OSV records carry no description.

Carried by container images the latest versions of 70 of 17,781 indexed charts deploy, on 60 images.

Affected package	Affected versions	Fixed in	Images
nssdeb	2:3.87.1-1, 2:3.87.1-1+deb12u1, 2:3.87.1-1+deb12u2, 2:3.110-1+1 more	2:3.87.1-1+deb12u3, 2:3.110-1+deb13u2	59
mozjs68deb	68.6.0-1ubuntu1	no fix listed	1

OSV records: DEBIAN-CVE-2026-6772 UBUNTU-CVE-2026-6772

Charts affected

70 by stars

Chart

Latest

Affected images

Radar Score

tinymediamanagermedia-servarr

1.6.2

1 of 2 See more

tinymediamanager media-servarr 1.6.2

1 of the 2 container images this version deploys carry CVE-2026-6772.

Container image	Digest	Package	Fixed in
tinymediamanager/tinymediamanager :5.3.2	2b34dc85099e	nss@2:3.110-1+deb13u1	2:3.110-1+deb13u2

Open the chart page →

7,944

paperless-ngxmt190502

7.6.14

1 of 4 See more

paperless-ngx mt190502 7.6.14

1 of the 4 container images this version deploys carry CVE-2026-6772.

Container image	Digest	Package	Fixed in
ghcr.io/paperless-ngx/paperless-ngx :2.20.13	4b05bcd28e69	nss@2:3.110-1+deb13u1	2:3.110-1+deb13u2

Open the chart page →

11,950

uptime-kumancsa

1.7.2

1 of 1 See more

uptime-kuma ncsa 1.7.2

1 of the 1 container images this version deploys carry CVE-2026-6772.

Container image	Digest	Package	Fixed in
louislam/uptime-kuma :2.5.4	917318f9d7be	nss@2:3.87.1-1+deb12u2	2:3.87.1-1+deb12u3

Open the chart page →

30,028

firecrawlobeone

3.0.1

1 of 5 See more

firecrawl obeone 3.0.1

1 of the 5 container images this version deploys carry CVE-2026-6772.

Container image	Digest	Package	Fixed in
ghcr.io/firecrawl/playwright-service :latest	1f6eba640320	nss@2:3.87.1-1+deb12u2	2:3.87.1-1+deb12u3

Open the chart page →

9,995

cupsr2dlan-helm-charts

0.1.0

1 of 1 See more

cups r2dlan-helm-charts 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-6772.

Container image	Digest	Package	Fixed in
anujdatar/cups :25.07.01	685df04a643b	nss@2:3.87.1-1+deb12u1	2:3.87.1-1+deb12u3

Open the chart page →

7,685

paperless-ngxrtomik-helm-charts

0.0.5

1 of 1 See more

paperless-ngx rtomik-helm-charts 0.0.5

1 of the 1 container images this version deploys carry CVE-2026-6772.

Container image	Digest	Package	Fixed in
ghcr.io/paperless-ngx/paperless-ngx :2.20.3	57ad9565bff3	nss@2:3.110-1	2:3.110-1+deb13u2

Open the chart page →

10,605

flaresolverrrubxkube

0.1.1

1 of 1 See more

flaresolverr rubxkube 0.1.1

1 of the 1 container images this version deploys carry CVE-2026-6772.

Container image	Digest	Package	Fixed in
flaresolverr/flaresolverr :v3.5.0	139dfee1c6f8	nss@2:3.87.1-1+deb12u2	2:3.87.1-1+deb12u3

Open the chart page →

27,274

uptime-kumarubxkube

1.2.1

1 of 1 See more

uptime-kuma rubxkube 1.2.1

1 of the 1 container images this version deploys carry CVE-2026-6772.

Container image	Digest	Package	Fixed in
louislam/uptime-kuma :2.4.0	91e963bfda56	nss@2:3.87.1-1+deb12u2	2:3.87.1-1+deb12u3

Open the chart page →

30,219

speckle-preview-service-branch-testing6speckle

2.23.14-branch.testing6.334655-b4e04ee

1 of 1 See more

speckle-preview-service-branch-testing6 speckle 2.23.14-branch.testing6.334655-b4e04ee

1 of the 1 container images this version deploys carry CVE-2026-6772.

Container image	Digest	Package	Fixed in
speckle/speckle-preview-service :2.23.14-branch.testing6.334655-b4e04ee	6dee853ba74a	nss@2:3.87.1-1+deb12u1	2:3.87.1-1+deb12u3

Open the chart page →

5,950

speckle-server-branch-hotfix-2.19.1speckle

2.19.2-branch.hotfix-2.19.1.124125-665e7e1

1 of 5 See more

speckle-server-branch-hotfix-2.19.1 speckle 2.19.2-branch.hotfix-2.19.1.124125-665e7e1

1 of the 5 container images this version deploys carry CVE-2026-6772.

Container image	Digest	Package	Fixed in
speckle/speckle-preview-service :2.19.2-branch.hotfix-2.19.1.124125-665e7e1	c102b087481a	nss@2:3.87.1-1	2:3.87.1-1+deb12u3

Open the chart page →

16,368

speckle-server-branch-hotfix-2.20.2speckle

2.20.3-branch.hotfix-2.20.2.149555-37ea0cb

1 of 5 See more

speckle-server-branch-hotfix-2.20.2 speckle 2.20.3-branch.hotfix-2.20.2.149555-37ea0cb

1 of the 5 container images this version deploys carry CVE-2026-6772.

Container image	Digest	Package	Fixed in
speckle/speckle-preview-service :2.20.3-branch.hotfix-2.20.2.149555-37ea0cb	d3da0a84de98	nss@2:3.87.1-1	2:3.87.1-1+deb12u3

Open the chart page →

16,400

speckle-server-branch-testingspeckle

2.17.14-branch.testing.72707.921a5f8

1 of 5 See more

speckle-server-branch-testing speckle 2.17.14-branch.testing.72707.921a5f8

1 of the 5 container images this version deploys carry CVE-2026-6772.

Container image	Digest	Package	Fixed in
speckle/speckle-preview-service :2.17.14-branch.testing.72707.921a5f8	84fc39bca0c8	nss@2:3.87.1-1	2:3.87.1-1+deb12u3

Open the chart page →

14,679

speckle-server-branch-testing1speckle

2.20.6-branch.testing1.154030-9b09114

1 of 5 See more

speckle-server-branch-testing1 speckle 2.20.6-branch.testing1.154030-9b09114

1 of the 5 container images this version deploys carry CVE-2026-6772.

Container image	Digest	Package	Fixed in
speckle/speckle-preview-service :2.20.6-branch.testing1.154030-9b09114	8f3c1ea153ba	nss@2:3.87.1-1	2:3.87.1-1+deb12u3

Open the chart page →

16,400

speckle-server-branch-testing2speckle

2.18.11-branch.testing2.88634-335d469

1 of 5 See more

speckle-server-branch-testing2 speckle 2.18.11-branch.testing2.88634-335d469

1 of the 5 container images this version deploys carry CVE-2026-6772.

Container image	Digest	Package	Fixed in
speckle/speckle-preview-service :2.18.11-branch.testing2.88634-335d469	4bd113093583	nss@2:3.87.1-1	2:3.87.1-1+deb12u3

Open the chart page →

14,221

speckle-server-branch-testing3speckle

2.18.12-branch.testing3.88744-f55b341

1 of 5 See more

speckle-server-branch-testing3 speckle 2.18.12-branch.testing3.88744-f55b341

1 of the 5 container images this version deploys carry CVE-2026-6772.

Container image	Digest	Package	Fixed in
speckle/speckle-preview-service :2.18.12-branch.testing3.88744-f55b341	4bd113093583	nss@2:3.87.1-1	2:3.87.1-1+deb12u3

Open the chart page →

14,221

speckle-server-branch-testing4speckle

2.20.2-branch.testing4.134160-9fad4b2

1 of 5 See more

speckle-server-branch-testing4 speckle 2.20.2-branch.testing4.134160-9fad4b2

1 of the 5 container images this version deploys carry CVE-2026-6772.

Container image	Digest	Package	Fixed in
speckle/speckle-preview-service :2.20.2-branch.testing4.134160-9fad4b2	1f897ca906ea	nss@2:3.87.1-1	2:3.87.1-1+deb12u3

Open the chart page →

16,019

speckle-server-branch-testing5speckle

2.21.3-branch.testing5.219631-2153bef

1 of 5 See more

speckle-server-branch-testing5 speckle 2.21.3-branch.testing5.219631-2153bef

1 of the 5 container images this version deploys carry CVE-2026-6772.

Container image	Digest	Package	Fixed in
speckle/speckle-preview-service :2.21.3-branch.testing5.219631-2153bef	52cad5e3293e	nss@2:3.87.1-1	2:3.87.1-1+deb12u3

Open the chart page →

15,635

speckle-server-branch-testing6speckle

2.25.10-branch.testing6.645-b125c1e

1 of 4 See more

speckle-server-branch-testing6 speckle 2.25.10-branch.testing6.645-b125c1e

1 of the 4 container images this version deploys carry CVE-2026-6772.

Container image	Digest	Package	Fixed in
speckle/speckle-preview-service :2.25.10-branch.testing6.645-b125c1e	787adcb20a3a	nss@2:3.87.1-1+deb12u1	2:3.87.1-1+deb12u3

Open the chart page →

11,100

flaresolverrsudo-kraken-flaresolverr

2.1.4

1 of 1 See more

flaresolverr sudo-kraken-flaresolverr 2.1.4

1 of the 1 container images this version deploys carry CVE-2026-6772.

Container image	Digest	Package	Fixed in
ghcr.io/flaresolverr/flaresolverr :v3.4.6	7962759d99d7	nss@2:3.87.1-1+deb12u1	2:3.87.1-1+deb12u3

Open the chart page →

33,583

maybe-financevicsufer

0.2.7

1 of 3 See more

maybe-finance vicsufer 0.2.7

1 of the 3 container images this version deploys carry CVE-2026-6772.

Container image	Digest	Package	Fixed in
ghcr.io/maybe-finance/maybe :0.5.0	c6ab95ca9130	nss@2:3.87.1-1+deb12u1	2:3.87.1-1+deb12u3

Open the chart page →

10,795

Container images carrying it

60 by charts deploying them

A fixed version is listed for 1 of the 2 affected packages.

Container image	Digest	Package	Fixed in	Used by
flaresolverr/flaresolverr :latest :v3.5.0	139dfee1c6f8	nss@2:3.87.1-1+deb12u2	2:3.87.1-1+deb12u3	5
chromedp/headless-shell :148.0.7778.97	313ed7255ae1	nss@2:3.110-1+deb13u1	2:3.110-1+deb13u2	2
louislam/uptime-kuma :2.5.4	917318f9d7be	nss@2:3.87.1-1+deb12u2	2:3.87.1-1+deb12u3	2
louislam/uptime-kuma :2.3.2	9aeb4e51d038	nss@2:3.87.1-1+deb12u2	2:3.87.1-1+deb12u3	2
louislam/uptime-kuma :2.5.0	a8610b3b4c38	nss@2:3.87.1-1+deb12u2	2:3.87.1-1+deb12u3	2
speckle/speckle-preview-service :2.18.11-branch.testing2.88634-335d469 :2.18.12-branch.testing3.88744-f55b341	4bd113093583	nss@2:3.87.1-1	2:3.87.1-1+deb12u3	2
ghcr.io/flaresolverr/flaresolverr :v3.4.6	7962759d99d7	nss@2:3.87.1-1+deb12u1	2:3.87.1-1+deb12u3	2
ghcr.io/smarter-project/hydra/isolated-vm :main	4457b79b24cd	nss@2:3.87.1-1+deb12u2	2:3.87.1-1+deb12u3	2
anujdatar/cups :25.07.01	685df04a643b	nss@2:3.87.1-1+deb12u1	2:3.87.1-1+deb12u3	1
archivebox/archivebox :0.7.4	1a5a37331091	nss@2:3.87.1-1+deb12u2	2:3.87.1-1+deb12u3	1
bitnamilegacy/openldap :2.6.8-debian-12-r1	6e412c178ef9	nss@2:3.87.1-1	2:3.87.1-1+deb12u3	1
ddosify/selfhosted_alaz_backend :1.0.6	a43c5155fa1c	nss@2:3.87.1-1	2:3.87.1-1+deb12u3	1
ddosify/selfhosted_backend :3.2.9	3c11e3182652	nss@2:3.87.1-1	2:3.87.1-1+deb12u3	1
ddosify/selfhosted_backend :2.6.11	ac323d52bfb4	nss@2:3.87.1-1	2:3.87.1-1+deb12u3	1
dragonflyoss/client :v0.1.82	edf3e921f4e0	nss@2:3.87.1-1	2:3.87.1-1+deb12u3	1
falcosecurity/falco-driver-loader :0.44.1	7df783d5269a	nss@2:3.87.1-1+deb12u2	2:3.87.1-1+deb12u3	1
fiware/biz-ecosystem-charging-backend :11.7.0	29456835bb2c	mozjs68@68.6.0-1ubuntu1	no fix listed	1
fluent/fluent-bit :4.0-debug	e76397ef3983	nss@2:3.87.1-1+deb12u1	2:3.87.1-1+deb12u3	1
gotenberg/gotenberg :8.30	206a6c708fc6	nss@2:3.110-1+deb13u1	2:3.110-1+deb13u2	1
ixsystems/truecommand :3.2.0	19c218455cd2	nss@2:3.110-1	2:3.110-1+deb13u2	1
jaedb/iris :latest	048cfbf58d57	nss@2:3.87.1-1+deb12u1	2:3.87.1-1+deb12u3	1
jpgouin/openldap :2.6.9-fix	bfdd0088c776	nss@2:3.87.1-1+deb12u1	2:3.87.1-1+deb12u3	1
kinseii/wazuh-agent :4.14.1	7160eb143728	nss@2:3.87.1-1+deb12u1	2:3.87.1-1+deb12u3	1
localstack/localstack :3.1	9d278167f2b7	nss@2:3.87.1-1	2:3.87.1-1+deb12u3	1
louislam/uptime-kuma :2.5.3	3e24e96c89ef	nss@2:3.87.1-1+deb12u2	2:3.87.1-1+deb12u3	1
louislam/uptime-kuma :2.0.2	4c364ef96aad	nss@2:3.87.1-1+deb12u1	2:3.87.1-1+deb12u3	1
louislam/uptime-kuma :2.4.0	91e963bfda56	nss@2:3.87.1-1+deb12u2	2:3.87.1-1+deb12u3	1
merlos/zookeeper :3.9.3	a38fc7e09ed7	nss@2:3.87.1-1+deb12u1	2:3.87.1-1+deb12u3	1
networktocode/nautobot :3.0-py3.13	ed484336b1ad	nss@2:3.110-1+deb13u1	2:3.110-1+deb13u2	1
prowlercloud/prowler-api :5.31.1	4f252d579be2	nss@2:3.87.1-1+deb12u2	2:3.87.1-1+deb12u3	1
sbs20/scanservjs :release-v3.0.3	dad1fd6e9a98	nss@2:3.87.1-1	2:3.87.1-1+deb12u3	1
sissbruecker/linkding :1.41.0-plus	a222fb777e1f	nss@2:3.87.1-1+deb12u1	2:3.87.1-1+deb12u3	1
speckle/speckle-preview-service :2.26.3	092384dba45d	nss@2:3.87.1-1+deb12u1	2:3.87.1-1+deb12u3	1
speckle/speckle-preview-service :2.20.2-branch.testing4.134160-9fad4b2	1f897ca906ea	nss@2:3.87.1-1	2:3.87.1-1+deb12u3	1
speckle/speckle-preview-service :2.21.3-branch.testing5.219631-2153bef	52cad5e3293e	nss@2:3.87.1-1	2:3.87.1-1+deb12u3	1
speckle/speckle-preview-service :2.23.14-branch.testing6.334655-b4e04ee	6dee853ba74a	nss@2:3.87.1-1+deb12u1	2:3.87.1-1+deb12u3	1
speckle/speckle-preview-service :2.25.10-branch.testing6.645-b125c1e	787adcb20a3a	nss@2:3.87.1-1+deb12u1	2:3.87.1-1+deb12u3	1
speckle/speckle-preview-service :2.17.14-branch.testing.72707.921a5f8	84fc39bca0c8	nss@2:3.87.1-1	2:3.87.1-1+deb12u3	1
speckle/speckle-preview-service :2.20.6-branch.testing1.154030-9b09114	8f3c1ea153ba	nss@2:3.87.1-1	2:3.87.1-1+deb12u3	1
speckle/speckle-preview-service :2.19.2-branch.hotfix-2.19.1.124125-665e7e1	c102b087481a	nss@2:3.87.1-1	2:3.87.1-1+deb12u3	1
speckle/speckle-preview-service :2.20.3-branch.hotfix-2.20.2.149555-37ea0cb	d3da0a84de98	nss@2:3.87.1-1	2:3.87.1-1+deb12u3	1
thingsboard/tb-postgres :latest	2d17e4e36edc	nss@2:3.87.1-1+deb12u1	2:3.87.1-1+deb12u3	1
tinymediamanager/tinymediamanager :5.3.2	2b34dc85099e	nss@2:3.110-1+deb13u1	2:3.110-1+deb13u2	1
ghcr.io/appscode/gotenberg :8.25	f9104080d9a7	nss@2:3.110-1	2:3.110-1+deb13u2	1
ghcr.io/avistotelecom/docker-wazuh-agent :4.12.0	8766ba08bf1a	nss@2:3.87.1-1+deb12u1	2:3.87.1-1+deb12u3	1
ghcr.io/chaos-mesh/chaos-daemon :v2.8.3	69b1d3c09cfa	nss@2:3.87.1-1+deb12u2	2:3.87.1-1+deb12u3	1
ghcr.io/chaos-mesh/chaos-daemon :v2.7.2	9608d9b51452	nss@2:3.87.1-1+deb12u1	2:3.87.1-1+deb12u3	1
ghcr.io/chaos-mesh/chaos-daemon :v2.8.0	fb609bc264d9	nss@2:3.87.1-1+deb12u1	2:3.87.1-1+deb12u3	1
ghcr.io/firecrawl/playwright-service :latest	1f6eba640320	nss@2:3.87.1-1+deb12u2	2:3.87.1-1+deb12u3	1
ghcr.io/flaresolverr/flaresolverr :v3.4.0	ab535d1fef5d	nss@2:3.87.1-1+deb12u1	2:3.87.1-1+deb12u3	1