CVE-2026-6879

Low

Advisory

Published 28 Jul 2026In the index since 5 Sept 2026

Severity: Low; worst across findings
CVSS: 2.0; base score, highest
EPSS: 0.004; 30th percentile
CISA KEV: Not listed; no confirmed exploitation
Charts affected: 663; of 17,787 indexed, latest versions
Container images: 650; deployed by those charts
Fix available: 7 of 16; affected packages

CVE-2026-6879 affecting package python3 for versions less than 3.12.9-14

Carried by container images the latest versions of 663 of 17,787 indexed charts deploy, on 650 images.

Affected package	Affected versions	Fixed in	Images
python3rpm	3.12.9-13.azl3	3.12.9-14	1
python3.11deb	3.11.0~rc1-1~22.04, 3.11.0~rc1-1~22.04.1, 3.11.2-6, 3.11.2-6+deb12u2+6 more	no fix listed	180
python3.8deb	3.8.5-1~20.04, 3.8.5-1~20.04.2, 3.8.5-1~20.04.3, 3.8.10-0ubuntu1~20.04+11 more	no fix listed	100
python3.12deb	3.12.3-1, 3.12.3-1ubuntu0.2, 3.12.3-1ubuntu0.3, 3.12.3-1ubuntu0.4+11 more	no fix listed	87
python3.10deb	3.10.4-3, 3.10.4-3ubuntu0.1, 3.10.6-1~22.04, 3.10.6-1~22.04.1+16 more	no fix listed	80
python3.13deb	3.13.5-2, 3.13.5-2+deb13u2, 3.13.5-2+deb13u4	3.13.5-2+deb13u5	73
python2.7deb	2.7.6-8, 2.7.6-8ubuntu0.4, 2.7.12-1ubuntu0~16.04.2, 2.7.12-1ubuntu0~16.04.3+12 more	no fix listed	54
python3.6deb	3.6.6-1~18.04, 3.6.7-1~18.04, 3.6.9-1~18.04, 3.6.9-1~18.04ubuntu1+7 more	no fix listed	44
python3.5deb	3.5.2-2ubuntu0~16.04.1, 3.5.2-2ubuntu0~16.04.4, 3.5.2-2ubuntu0~16.04.5, 3.5.2-2ubuntu0~16.04.9	no fix listed	25
python3apk	3.12.12-r0, 3.14.3-r0, 3.14.5-r0, 3.14.5-r1	3.14.7-r0	12
python3.14deb	3.14.4-1, 3.14.4-1ubuntu0.1, 3.14.4-1ubuntu0.2	no fix listed	9
python3.4deb	3.4.0-2ubuntu1, 3.4.3-1ubuntu1~14.04.5, 3.4.3-1ubuntu1~14.04.6, 3.4.3-1ubuntu1~14.04.7	no fix listed	7
python-3.14apk	3.14.2-r2, 3.14.4-r2, 3.14.6-r0	3.14.7-r0	6
pythonbitnami	3.11.11-0, 3.12.8-0, 3.13.5-1	3.10.21	3
python-3.13apk	3.13.7-r0, 3.13.10-r0, 3.13.12-r2	3.13.15-r0	3
python-3.12apk	3.12.0-r1, 3.12.9-r1	3.12.14-r0	2

OSV records: ALPINE-CVE-2026-6879 BIT-python-2026-6879 CGA-7g6r-phc4-fvqh CGA-9jgp-r77x-m572 CGA-9mh7-8r38-m8f8 DEBIAN-CVE-2026-6879 UBUNTU-CVE-2026-6879 AZL-94299
Also known as: BIT-libpython-2026-6879, BIT-python-min-2026-6879, CGA-cgh3-r65w-2fvw, CGA-qcv8-4xf6-7j4v, CGA-rpwc-gfvx-7h59, PSF-2026-34

Charts affected

663 by stars

Chart

Latest

Affected images

Radar Score

aih-scannerwallarm

2.7.11

1 of 2 See more

aih-scanner wallarm 2.7.11

1 of the 2 container images this version deploys carry CVE-2026-6879.

Container image	Digest	Package	Fixed in
wallarm/aih-scanner :2.7.11	f1cb26db1f5b	python3.13@3.13.5-2+deb13u4	3.13.5-2+deb13u5

Open the chart page →

3,911

wazuh-manager-filebeatwazuh-manager-filebeat

0.1.0-gamma

1 of 1 See more

wazuh-manager-filebeat wazuh-manager-filebeat 0.1.0-gamma

1 of the 1 container images this version deploys carry CVE-2026-6879.

Container image	Digest	Package	Fixed in
iosifache/wazuh-manager-filebeat :latest	85df3f04b5da	python3.8@3.8.10-0ubuntu1~20.04.2	no fix listed

Open the chart page →

11,119

myweatherhelmwebapp1

1.3.50

2 of 8 See more

myweatherhelm webapp1 1.3.50

2 of the 8 container images this version deploys carry CVE-2026-6879.

Container image	Digest	Package	Fixed in
library/rabbitmq :3-management	e582c0bc7766	python3.12@3.12.3-1ubuntu0.9	no fix listed
mcr.microsoft.com/azure-sql-edge :latest	902628a8be89	python3.8@3.8.10-0ubuntu1~20.04.8	no fix listed

Open the chart page →

9,130

myweatherhelm-schedulingwebapp1

1.3.92

2 of 9 See more

myweatherhelm-scheduling webapp1 1.3.92

2 of the 9 container images this version deploys carry CVE-2026-6879.

Container image	Digest	Package	Fixed in
library/rabbitmq :3-management	e582c0bc7766	python3.12@3.12.3-1ubuntu0.9	no fix listed
mcr.microsoft.com/azure-sql-edge :latest	902628a8be89	python3.8@3.8.10-0ubuntu1~20.04.8	no fix listed

Open the chart page →

9,130

webhookiewebhookie

0.1.2

1 of 1 See more

webhookie webhookie 0.1.2

1 of the 1 container images this version deploys carry CVE-2026-6879.

Container image	Digest	Package	Fixed in
hookiesolutions/webhookie :latest	0629694246ba	python3.8@3.8.10-0ubuntu1~20.04.1	no fix listed

Open the chart page →

14,364

webhookie-allwebhookie

0.1.2

1 of 3 See more

webhookie-all webhookie 0.1.2

1 of the 3 container images this version deploys carry CVE-2026-6879.

Container image	Digest	Package	Fixed in
hookiesolutions/webhookie :latest	0629694246ba	python3.8@3.8.10-0ubuntu1~20.04.1	no fix listed

Open the chart page →

28,605

argocd-image-updaterwenerme

1.3.1

1 of 1 See more

argocd-image-updater wenerme 1.3.1

1 of the 1 container images this version deploys carry CVE-2026-6879.

Container image	Digest	Package	Fixed in
quay.io/argoprojlabs/argocd-image-updater :v1.3.0	cb009167015c	python3@3.14.5-r0	3.14.7-r0

Open the chart page →

718

emissary-ingresswenerme

8.12.2

1 of 2 See more

emissary-ingress wenerme 8.12.2

1 of the 2 container images this version deploys carry CVE-2026-6879.

Container image	Digest	Package	Fixed in
istio/kubectl :1.5.10	dbb7726d1bf0	python3.6@3.6.9-1~18.04ubuntu1.1	no fix listed

Open the chart page →

10,843

juicefs-csi-driverwenerme

0.32.5

1 of 5 See more

juicefs-csi-driver wenerme 0.32.5

1 of the 5 container images this version deploys carry CVE-2026-6879.

Container image	Digest	Package	Fixed in
juicedata/juicefs-csi-driver :v0.32.5	95008ba63318	python3.11@3.11.2-6+deb12u8	no fix listed

Open the chart page →

9,117

longhornwenerme

1.2.3

1 of 2 See more

longhorn wenerme 1.2.3

1 of the 2 container images this version deploys carry CVE-2026-6879.

Container image	Digest	Package	Fixed in
longhornio/longhorn-manager :v1.2.3	dca34321452c	python3.8@3.8.10-0ubuntu1~20.04.2	no fix listed

Open the chart page →

15,230

jaegerwikimedia

3.1.2

1 of 4 See more

jaeger wikimedia 3.1.2

1 of the 4 container images this version deploys carry CVE-2026-6879.

Container image	Digest	Package	Fixed in
jaegertracing/jaeger-cassandra-schema :1.53.0	d48d6dab2c65	python3.10@3.10.12-1~22.04.3	no fix listed

Open the chart page →

9,248

playwright-synthetic-monitoringwork-adventure

1.0.1

1 of 1 See more

playwright-synthetic-monitoring work-adventure 1.0.1

1 of the 1 container images this version deploys carry CVE-2026-6879.

Container image	Digest	Package	Fixed in
workadventure/playwright-synthetic-monitoring :main	92b664c2a06f	python3.10@3.10.12-1~22.04.3	no fix listed

Open the chart page →

14,100

zoo-project-druzoo-project

0.10.4

1 of 6 See more

zoo-project-dru zoo-project 0.10.4

1 of the 6 container images this version deploys carry CVE-2026-6879.

Container image	Digest	Package	Fixed in
zooproject/zoo-project :dru-19f3c4eed7c9ec9d1f0375bbe59f9d204a42bd3a	9a507cb7e2dd	python3.10@3.10.12-1~22.04.16	no fix listed

Open the chart page →

7,849

Container images carrying it

650 by charts deploying them

A fixed version is listed for 7 of the 16 affected packages.

Container image	Digest	Package	Fixed in	Used by
haveagitgat/tdarr :2.00.18	1256348872ce	python2.7@2.7.18-1~20.04.1 python3.8@3.8.10-0ubuntu1~20.04.4	no fix listed no fix listed	1
haveagitgat/tdarr_node :2.00.10	1e3f9328327d	python3.8@3.8.5-1~20.04	no fix listed	1
haveagitgat/tdarr_node :2.17.01	3ff0913202dd	python2.7@2.7.18-1~20.04.3 python3.8@3.8.10-0ubuntu1~20.04.8	no fix listed no fix listed	1
helicone/clickhouse-migration-runner :v2025.03.05-1	4c69b971a7e4	python3.8@3.8.10-0ubuntu1~20.04.13	no fix listed	1
helicone/supabase-migration-runner :v2025.03.05-1	4a913936c97b	python3.11@3.11.2-6	no fix listed	1
hyperglance/init :wildfly	467ad8491bc3	python3.10@3.10.12-1~22.04.15	no fix listed	1
hyperglance/init :postgres	9fd5faf1fe80	python3.10@3.10.12-1~22.04.15	no fix listed	1
hyperglance/init :apache	b2f8c6d52623	python3.10@3.10.12-1~22.04.15	no fix listed	1
hyperledger/fabric-couchdb :0.4.10	c65891b6c237	python2.7@2.7.12-1ubuntu0~16.04.3 python3.5@3.5.2-2ubuntu0~16.04.4	no fix listed no fix listed	1
ibmcom/ibm-workload-scheduler-agent-dynamic-dev :9.4.0.04	7e4dc1e27cdf	python3.5@3.5.2-2ubuntu0~16.04.4	no fix listed	1
ibmcom/icp-swift-sample :latest	b5d8c6714dbc	python2.7@2.7.12-1ubuntu0~16.04.3 python3.5@3.5.2-2ubuntu0~16.04.4	no fix listed no fix listed	1
ibmcom/microclimate-theia :latest	e17bdccc5030	python2.7@2.7.12-1ubuntu0~16.04.2	no fix listed	1
ibmcom/skydive :0.22.0	395e60cc6e3d	python2.7@2.7.15~rc1-1ubuntu0.1	no fix listed	1
ildarmukhametzyanov/priceapp :0.1	15d23720a3ee	python3.11@3.11.2-6	no fix listed	1
inseefrlab/shelly :cloudshell	31f04ca7436b	python3.10@3.10.12-1~22.04.3	no fix listed	1
instill/artifact-backend :b28766a	c4a393e601ed	python3.13@3.13.5-2	3.13.5-2+deb13u5	1
instill/mgmt-backend :d0933d4	ebe12f77a3f9	python3.13@3.13.5-2	3.13.5-2+deb13u5	1
instill/model-backend :611f0f2	e980125e5ba5	python3.13@3.13.5-2	3.13.5-2+deb13u5	1
intel/dlstreamer-pipeline-server :2022.1.1-ubuntu20	aa8f5483a2ef	python3.8@3.8.10-0ubuntu1~20.04.4	no fix listed	1
intel/multimodal-data-visualization-streaming :3.0	1a89327e499b	python3.8@3.8.10-0ubuntu1~20.04.5	no fix listed	1
intelowlproject/intelowl :v6.6.1	0b22e547ea6b	python3.11@3.11.2-6	no fix listed	1
inventree/inventree :1.5.4	a946ec09da3e	python3.13@3.13.5-2+deb13u4	3.13.5-2+deb13u5	1
iofog/router :2.0.1	7260cf861479	python2.7@2.7.17-1~18.04ubuntu1.1	no fix listed	1
iomesh/csi-driver :v2.8.0	1a151f602451	python3.10@3.10.12-1~22.04.4	no fix listed	1
iomesh/csi-driver :v2.7.2	5d3f9bf9240b	python3.10@3.10.12-1~22.04.3	no fix listed	1
iosifache/wazuh-manager-filebeat :latest	85df3f04b5da	python3.8@3.8.10-0ubuntu1~20.04.2	no fix listed	1
ispras/svacer :11-2-0	42aa9fa9f189	python3.10@3.10.12-1~22.04.10	no fix listed	1
istio/install-cni :1.10.3	2232f365aed6	python3.6@3.6.9-1~18.04ubuntu1.4	no fix listed	1
istio/node-agent-k8s :1.2.9	268ab879ea51	python3.5@3.5.2-2ubuntu0~16.04.5	no fix listed	1
istio/operator :1.10.3	655eefa11c84	python3.6@3.6.9-1~18.04ubuntu1.4	no fix listed	1
istio/pilot :1.10.0	294ca55bd1cc	python3.6@3.6.9-1~18.04ubuntu1.4	no fix listed	1
istio/pilot :1.2.9	c09319753454	python3.5@3.5.2-2ubuntu0~16.04.5	no fix listed	1
istio/pilot :1.10.3	e7e110a421c2	python3.6@3.6.9-1~18.04ubuntu1.4	no fix listed	1
istio/proxyv2 :1.2.9	0c78be035e98	python3.5@3.5.2-2ubuntu0~16.04.5	no fix listed	1
istio/proxyv2 :1.9.6	87a9db561d2e	python3.6@3.6.9-1~18.04ubuntu1.4	no fix listed	1
istio/proxyv2 :1.10.0	88c6c693e67a	python3.6@3.6.9-1~18.04ubuntu1.4	no fix listed	1
itzg/bungeecord :latest	1c59f9631f3b	python3.14@3.14.4-1ubuntu0.1	no fix listed	1
itzg/minecraft-server :2026.9.0	4e29d14082d9	python3.12@3.12.3-1ubuntu0.16	no fix listed	1
itzg/minecraft-server :latest	8672e335dbef	python3.12@3.12.3-1ubuntu0.16	no fix listed	1
jaedb/iris :latest	048cfbf58d57	python3.11@3.11.2-6+deb12u5	no fix listed	1
jakowenko/double-take :1.6.0	b858bac9e32a	python3.8@3.8.10-0ubuntu1~20.04.1	no fix listed	1
jedi132000/nextapp :latest	dc2a81e92f23	python3.8@3.8.10-0ubuntu1~20.04.5	no fix listed	1
jmferrer/azure-devops-agent :latest	030f68ec6998	python3.5@3.5.2-2ubuntu0~16.04.9	no fix listed	1
jordan/icinga2 :latest	f75025fe8ea8	python3.11@3.11.2-6+deb12u7	no fix listed	1
josh5/unmanic :0.2.6	4d49c4816260	python3.10@3.10.12-1~22.04.3	no fix listed	1
juicedata/juicefs-csi-driver :v0.32.5	95008ba63318	python3.11@3.11.2-6+deb12u8	no fix listed	1
jupyterhub/jupyterhub :5.4.6	3974ba945e65	python3.12@3.12.3-1ubuntu0.13	no fix listed	1
jupyterhub/k8s-hub :0.11.1	b6b4a1a34bf0	python3.8@3.8.5-1~20.04	no fix listed	1
jupyterhub/k8s-hub :1.2.0	e4770285aaf7	python3.8@3.8.10-0ubuntu1~20.04.1	no fix listed	1
kennethreitz/httpbin :latest	599fe5e50731	python3.6@3.6.6-1~18.04	no fix listed	1