StackRadar

CVE-2026-69246

High

Advisory

Published 3 Aug 2026In the index since 6 Sept 2026
Severity
High
worst across findings
CVSS
7.2
base score, highest
EPSS
0.002
12th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
142
of 17,781 indexed, latest versions
Container images
126
deployed by those charts
Fix available
1 of 1
affected package

Guzzle: Noncanonical host can bypass host-based checks

Carried by container images the latest versions of 142 of 17,781 indexed charts deploy, on 126 images.

Affected packageAffected versionsFixed inImages
guzzlehttp/guzzlecomposer5.3.4, 6.3.0, 6.3.3, 6.5.3+23 more7.15.2126
OSV records
GHSA-v5mv-p594-2x33

Charts affected

142 by stars
ChartLatestAffected imagesRadar Score
snipeitt3n3.4.11 of 2See more

snipeit t3n 3.4.1

1 of the 2 container images this version deploys carry CVE-2026-69246.

Container imageDigestPackageFixed in
snipe/snipe-it:v6.0.1455fb7636a98c
guzzlehttp/guzzle@7.4.5
7.15.2

Open the chart page →

18,509
mauticone-acre-fundVerified publisher0.1.71 of 3See more

mautic one-acre-fund 0.1.7

1 of the 3 container images this version deploys carry CVE-2026-69246.

Container imageDigestPackageFixed in
mautic/mautic:v4-apache94ea4acf4049
guzzlehttp/guzzle@7.4.5
7.15.2

Open the chart page →

2,667
monicamonicaOfficialVerified publisher1.0.151 of 1See more

monica monica 1.0.15

1 of the 1 container images this version deploys carry CVE-2026-69246.

Container imageDigestPackageFixed in
ghcr.io/monicahq/monica-next:main8be69156acbb
guzzlehttp/guzzle@7.9.3
7.15.2

Open the chart page →

5,634
bookstackgabe565Verified publisher0.20.01 of 1See more

bookstack gabe565 0.20.0

1 of the 1 container images this version deploys carry CVE-2026-69246.

Container imageDigestPackageFixed in
ghcr.io/linuxserver/bookstack:version-v24.12.1cc795b254b73
guzzlehttp/guzzle@7.9.2
7.15.2

Open the chart page →

2,811
invoiceninjainvoiceninjaVerified publisher0.10.21 of 5See more

invoiceninja invoiceninja 0.10.2

1 of the 5 container images this version deploys carry CVE-2026-69246.

Container imageDigestPackageFixed in
invoiceninja/invoiceninja:5.6.241437916dee01
guzzlehttp/guzzle@7.7.0
7.15.2

Open the chart page →

2,709
passboltpassbolt2.1.11 of 6See more

passbolt passbolt 2.1.1

1 of the 6 container images this version deploys carry CVE-2026-69246.

Container imageDigestPackageFixed in
passbolt/passbolt:5.13.0-1-ceaf3a620902a0
guzzlehttp/guzzle@7.10.1
7.15.2

Open the chart page →

13,350
glpiglpi-conteiner0.1.01 of 3See more

glpi glpi-conteiner 0.1.0

1 of the 3 container images this version deploys carry CVE-2026-69246.

Container imageDigestPackageFixed in
vdiogov/glpi-conteiner:latest6945f84f0058
guzzlehttp/guzzle@7.5.0
7.15.2

Open the chart page →

12,170
bookstackbookstack-mgVerified publisher0.3.11 of 2See more

bookstack bookstack-mg 0.3.1

1 of the 2 container images this version deploys carry CVE-2026-69246.

Container imageDigestPackageFixed in
linuxserver/bookstack:26.05.202605282ebf97852661
guzzlehttp/guzzle@7.10.5
7.15.2

Open the chart page →

1,896
cachetdeliveryheroVerified publisher1.3.51 of 2See more

cachet deliveryhero 1.3.5

1 of the 2 container images this version deploys carry CVE-2026-69246.

Container imageDigestPackageFixed in
cachethq/docker:2.3.15a61ff0f67ea7
guzzlehttp/guzzle@6.3.3
7.15.2

Open the chart page →

1,896
laravelrenoki-co1.0.01 of 2See more

laravel renoki-co 1.0.0

1 of the 2 container images this version deploys carry CVE-2026-69246.

Container imageDigestPackageFixed in
quay.io/renokico/laravel-helm-demo:0.6.03207f957e80c
guzzlehttp/guzzle@7.3.0
7.15.2

Open the chart page →

6,931
repmanszpadel-chartsVerified publisher3.52.171 of 3See more

repman szpadel-charts 3.52.17

1 of the 3 container images this version deploys carry CVE-2026-69246.

Container imageDigestPackageFixed in
buddy/repman:1.4.0097c897f8b54
guzzlehttp/guzzle@6.5.5
7.15.2

Open the chart page →

7,052
roundcubevolker-raschekVerified publisher0.3.11 of 1See more

roundcube volker-raschek 0.3.1

1 of the 1 container images this version deploys carry CVE-2026-69246.

Container imageDigestPackageFixed in
roundcube/roundcubemail:1.5.3-apachea8ea6fd751dc
guzzlehttp/guzzle@6.5.8
7.15.2

Open the chart page →

1,797
brpservicebrpservice1.1.01 of 4See more

brpservice brpservice 1.1.0

1 of the 4 container images this version deploys carry CVE-2026-69246.

Container imageDigestPackageFixed in
ghcr.io/conductionnl/brpservice-php:latestc17f1ba17d36
guzzlehttp/guzzle@6.5.5
7.15.2

Open the chart page →

7,830
typo3christianhuthVerified publisher7.7.01 of 2See more

typo3 christianhuth 7.7.0

1 of the 2 container images this version deploys carry CVE-2026-69246.

Container imageDigestPackageFixed in
martinhelmich/typo3:12.4c83a4f3fd7ae
guzzlehttp/guzzle@7.10.0
7.15.2

Open the chart page →

8,466
commonground-gatewaycommonground-gateway1.5.41 of 7See more

commonground-gateway commonground-gateway 1.5.4

1 of the 7 container images this version deploys carry CVE-2026-69246.

Container imageDigestPackageFixed in
ghcr.io/conductionnl/commonground-gateway-php:latest947882bf2c37
guzzlehttp/guzzle@6.5.8
7.15.2

Open the chart page →

9,724
contactcataloguscontact-catalogus1.0.01 of 3See more

contactcatalogus contact-catalogus 1.0.0

1 of the 3 container images this version deploys carry CVE-2026-69246.

Container imageDigestPackageFixed in
ghcr.io/conductionnl/contactcatalogus-php:latesteeb625bd660c
guzzlehttp/guzzle@6.5.5
7.15.2

Open the chart page →

7,303
tasmo-admincrystalnetVerified publisher3.0.111 of 1See more

tasmo-admin crystalnet 3.0.11

1 of the 1 container images this version deploys carry CVE-2026-69246.

Container imageDigestPackageFixed in
ghcr.io/tasmoadmin/tasmoadmin:v3.3.205aeefbdac2b
guzzlehttp/guzzle@7.8.1
7.15.2

Open the chart page →

891
prometheus-sentry-exporterdeliveryheroVerified publisher0.1.51 of 1See more

prometheus-sentry-exporter deliveryhero 0.1.5

1 of the 1 container images this version deploys carry CVE-2026-69246.

Container imageDigestPackageFixed in
ujamii/prometheus-sentry-exporter:0.5.06243197349e1
guzzlehttp/guzzle@6.3.3
7.15.2

Open the chart page →

2,474
digispoof-interfacedigispoof-interface1.0.01 of 3See more

digispoof-interface digispoof-interface 1.0.0

1 of the 3 container images this version deploys carry CVE-2026-69246.

Container imageDigestPackageFixed in
ghcr.io/conductionnl/digispoof-interface-php:latest03aba499950f
guzzlehttp/guzzle@6.5.5
7.15.2

Open the chart page →

7,779
matomodigitalist-open-cloud-matomo12.0.201 of 3See more

matomo digitalist-open-cloud-matomo 12.0.20

1 of the 3 container images this version deploys carry CVE-2026-69246.

Container imageDigestPackageFixed in
digitalist/matomo:5.12.0bc4aeeaea769
guzzlehttp/guzzle@7.10.0
7.15.2

Open the chart page →

3,539
jumpdjjudas21Verified publisher0.1.71 of 1See more

jump djjudas21 0.1.7

1 of the 1 container images this version deploys carry CVE-2026-69246.

Container imageDigestPackageFixed in
daledavies/jump:v1.4.10a0c8ad93902
guzzlehttp/guzzle@7.8.1
7.15.2

Open the chart page →

728
roundcubeencircle360-ossVerified publisher0.8.31 of 1See more

roundcube encircle360-oss 0.8.3

1 of the 1 container images this version deploys carry CVE-2026-69246.

Container imageDigestPackageFixed in
roundcube/roundcubemail:1.6.16-apache-nonroot17d9d9580962
guzzlehttp/guzzle@7.10.4
7.15.2

Open the chart page →

5,584
akauntingf3k-techVerified publisher1.3121.01 of 4See more

akaunting f3k-tech 1.3121.0

1 of the 4 container images this version deploys carry CVE-2026-69246.

Container imageDigestPackageFixed in
akaunting/akaunting:3.1.21-fpm-alpine-nginxe7d5c245b1a0
guzzlehttp/guzzle@7.10.0
7.15.2

Open the chart page →

4,333
firefly-iiigeek-cookbookVerified publisher0.3.01 of 1See more

firefly-iii geek-cookbook 0.3.0

1 of the 1 container images this version deploys carry CVE-2026-69246.

Container imageDigestPackageFixed in
fireflyiii/core:version-5.6.142f4283bd0cf7
guzzlehttp/guzzle@7.4.1
7.15.2

Open the chart page →

2,076
monicageek-cookbookVerified publisher8.2.01 of 1See more

monica geek-cookbook 8.2.0

1 of the 1 container images this version deploys carry CVE-2026-69246.

Container imageDigestPackageFixed in
library/monica:3.7.0-apacheceb1ba4196ab
guzzlehttp/guzzle@7.4.1
7.15.2

Open the chart page →

2,096
shlinkgeek-cookbookVerified publisher5.2.01 of 1See more

shlink geek-cookbook 5.2.0

1 of the 1 container images this version deploys carry CVE-2026-69246.

Container imageDigestPackageFixed in
shlinkio/shlink:2.7.1c6729db1d3a8
guzzlehttp/guzzle@7.3.0
7.15.2

Open the chart page →

2,056
webtreesgeek-cookbookVerified publisher2.2.01 of 1See more

webtrees geek-cookbook 2.2.0

1 of the 1 container images this version deploys carry CVE-2026-69246.

Container imageDigestPackageFixed in
ghcr.io/nathanvaughn/webtrees:2.0.1969423a100fab
guzzlehttp/guzzle@6.5.5
7.15.2

Open the chart page →

3,646
leantimegissilabs1.3.01 of 2See more

leantime gissilabs 1.3.0

1 of the 2 container images this version deploys carry CVE-2026-69246.

Container imageDigestPackageFixed in
leantime/leantime:3.3.3ad4bfb0699d3
guzzlehttp/guzzle@7.9.2
7.15.2

Open the chart page →

6,416
castopodh2mVerified publisher1.12.101 of 3See more

castopod h2m 1.12.10

1 of the 3 container images this version deploys carry CVE-2026-69246.

Container imageDigestPackageFixed in
castopod/castopod:1.12.101fd37280cbb2
guzzlehttp/guzzle@7.9.2
7.15.2

Open the chart page →

10,072
glpikitsune-itopsVerified publisher1.0.71 of 3See more

glpi kitsune-itops 1.0.7

1 of the 3 container images this version deploys carry CVE-2026-69246.

Container imageDigestPackageFixed in
glpi/glpi:latest4b681082a79e
guzzlehttp/guzzle@7.12.1
7.15.2

Open the chart page →

4,802
owncloudkubernetes-homelab-helm-chartsVerified publisher0.1.01 of 3See more

owncloud kubernetes-homelab-helm-charts 0.1.0

1 of the 3 container images this version deploys carry CVE-2026-69246.

Container imageDigestPackageFixed in
owncloud/server:10.16.274c53d341076
guzzlehttp/guzzle@7.8.1
7.15.2

Open the chart page →

9,858
landelijketabellencataloguslandelijketabellencatalogus1.0.01 of 3See more

landelijketabellencatalogus landelijketabellencatalogus 1.0.0

1 of the 3 container images this version deploys carry CVE-2026-69246.

Container imageDigestPackageFixed in
ghcr.io/conductionnl/landelijketabellencatalogus-php:latest26d91dcbba56
guzzlehttp/guzzle@6.5.5
7.15.2

Open the chart page →

7,510
librenmsmidokura-communityVerified publisher0.3.21 of 6See more

librenms midokura-community 0.3.2

1 of the 6 container images this version deploys carry CVE-2026-69246.

Container imageDigestPackageFixed in
librenms/librenms:22.4.14f1f3d667cc7
guzzlehttp/guzzle@7.4.1
7.15.2

Open the chart page →

8,967
opencatalogiopencatalogi1.0.61 of 8See more

opencatalogi opencatalogi 1.0.6

1 of the 8 container images this version deploys carry CVE-2026-69246.

Container imageDigestPackageFixed in
ghcr.io/conductionnl/commonground-gateway-php:latest947882bf2c37
guzzlehttp/guzzle@6.5.8
7.15.2

Open the chart page →

14,838
opentelemetry-demoopentelemetry-helmVerified publisher0.41.11 of 34See more

opentelemetry-demo opentelemetry-helm 0.41.1

1 of the 34 container images this version deploys carry CVE-2026-69246.

Container imageDigestPackageFixed in
ghcr.io/open-telemetry/demo:3.0.0-quote6bc8f7f6809e
guzzlehttp/guzzle@7.15.1
7.15.2

Open the chart page →

22,420
laravel-octanerenoki-co1.0.01 of 1See more

laravel-octane renoki-co 1.0.0

1 of the 1 container images this version deploys carry CVE-2026-69246.

Container imageDigestPackageFixed in
quay.io/renokico/laravel-helm-demo:octane-0.6.0cad83090c58f
guzzlehttp/guzzle@7.3.0
7.15.2

Open the chart page →

3,634
repmanrepman-helmchartVerified publisher1.0.121 of 3See more

repman repman-helmchart 1.0.12

1 of the 3 container images this version deploys carry CVE-2026-69246.

Container imageDigestPackageFixed in
buddy/repman:1.4.0097c897f8b54
guzzlehttp/guzzle@6.5.5
7.15.2

Open the chart page →

3,596
espocrmtwenty20-helm-chartsVerified publisher2.0.51 of 2See more

espocrm twenty20-helm-charts 2.0.5

1 of the 2 container images this version deploys carry CVE-2026-69246.

Container imageDigestPackageFixed in
espocrm/espocrm:10.0.8-fpm-alpine4bd92daf5f0c
guzzlehttp/guzzle@7.12.1
7.15.2

Open the chart page →

493
user-componentuser-component1.2.01 of 4See more

user-component user-component 1.2.0

1 of the 4 container images this version deploys carry CVE-2026-69246.

Container imageDigestPackageFixed in
ghcr.io/conductionnl/user-component-php:latest198db44fabb5
guzzlehttp/guzzle@6.5.5
7.15.2

Open the chart page →

7,303
waardepapierenwaardepapieren1.0.01 of 3See more

waardepapieren waardepapieren 1.0.0

1 of the 3 container images this version deploys carry CVE-2026-69246.

Container imageDigestPackageFixed in
ghcr.io/conductionnl/waardepapieren-php:latestb2666ffcbad8
guzzlehttp/guzzle@6.5.5
7.15.2

Open the chart page →

8,079
waardepapieren-baliewaardepapieren-balie1.0.01 of 3See more

waardepapieren-balie waardepapieren-balie 1.0.0

1 of the 3 container images this version deploys carry CVE-2026-69246.

Container imageDigestPackageFixed in
ghcr.io/conductionnl/waardepapieren-balie-php:latestf36c423cd259
guzzlehttp/guzzle@6.5.5
7.15.2

Open the chart page →

7,871
waardepapieren-registerwaardepapieren-register1.1.01 of 4See more

waardepapieren-register waardepapieren-register 1.1.0

1 of the 4 container images this version deploys carry CVE-2026-69246.

Container imageDigestPackageFixed in
ghcr.io/conductionnl/waardepapieren-register-php:latest9affab218351
guzzlehttp/guzzle@6.5.5
7.15.2

Open the chart page →

7,429
cachetadnoctemVerified publisher0.3.31 of 2See more

cachet adnoctem 0.3.3

1 of the 2 container images this version deploys carry CVE-2026-69246.

Container imageDigestPackageFixed in
cachethq/docker:2.3.15a61ff0f67ea7
guzzlehttp/guzzle@6.3.3
7.15.2

Open the chart page →

1,896
linkstackadnoctemVerified publisher0.4.01 of 1See more

linkstack adnoctem 0.4.0

1 of the 1 container images this version deploys carry CVE-2026-69246.

Container imageDigestPackageFixed in
linkstackorg/linkstack:latest1c8b05399ee4
guzzlehttp/guzzle@7.10.0
7.15.2

Open the chart page →

2,092
adresserviceadresservice1.1.01 of 5See more

adresservice adresservice 1.1.0

1 of the 5 container images this version deploys carry CVE-2026-69246.

Container imageDigestPackageFixed in
ghcr.io/conductionnl/adresservice-php:latestc5075f0320cd
guzzlehttp/guzzle@6.5.5
7.15.2

Open the chart page →

7,447
agendaserviceagendaservice1.0.01 of 3See more

agendaservice agendaservice 1.0.0

1 of the 3 container images this version deploys carry CVE-2026-69246.

Container imageDigestPackageFixed in
conduction/agendaservice-php:latest9cfeeb6c7c20
guzzlehttp/guzzle@6.5.5
7.15.2

Open the chart page →

7,209
authorization-componentauthorization-component1.0.01 of 3See more

authorization-component authorization-component 1.0.0

1 of the 3 container images this version deploys carry CVE-2026-69246.

Container imageDigestPackageFixed in
ghcr.io/conductionnl/authorization-component-php:latest94a749392fcf
guzzlehttp/guzzle@6.5.5
7.15.2

Open the chart page →

7,561
balance-registrationbalance-registration0.1.01 of 4See more

balance-registration balance-registration 0.1.0

1 of the 4 container images this version deploys carry CVE-2026-69246.

Container imageDigestPackageFixed in
conduction/balance-registration-php:devc36094a41369
guzzlehttp/guzzle@6.5.5
7.15.2

Open the chart page →

8,408
berichtserviceberichtservice1.0.01 of 3See more

berichtservice berichtservice 1.0.0

1 of the 3 container images this version deploys carry CVE-2026-69246.

Container imageDigestPackageFixed in
ghcr.io/conductionnl/berichtservice-php:latestee6a21e66ff0
guzzlehttp/guzzle@6.5.5
7.15.2

Open the chart page →

7,342
drupalcetic0.1.01 of 1See more

drupal cetic 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-69246.

Container imageDigestPackageFixed in
library/drupal:8-apache8a1a3ee83899
guzzlehttp/guzzle@6.5.4
7.15.2

Open the chart page →

2,504

Container images carrying it

126 by charts deploying them

A fixed version is listed for 1 of the 1 affected package.

Container imageDigestPackageFixed inUsed by
ghcr.io/conductionnl/trouw-service-php:latestf745e2870692
guzzlehttp/guzzle@6.5.5
7.15.2
1
ghcr.io/conductionnl/user-component-php:latest198db44fabb5
guzzlehttp/guzzle@6.5.5
7.15.2
1
ghcr.io/conductionnl/verhuis-service-php:latest66bbaf95a123
guzzlehttp/guzzle@6.5.5
7.15.2
1
ghcr.io/conductionnl/verzoekconversieservice-php:lateste918014fb8d3
guzzlehttp/guzzle@6.5.5
7.15.2
1
ghcr.io/conductionnl/verzoekregistratiecomponent-php:latestc4f6c03af5d3
guzzlehttp/guzzle@6.5.5
7.15.2
1
ghcr.io/conductionnl/verzoektypecatalogus-php:latest64f5eb7a398b
guzzlehttp/guzzle@6.5.5
7.15.2
1
ghcr.io/conductionnl/waardepapieren-balie-php:latestf36c423cd259
guzzlehttp/guzzle@6.5.5
7.15.2
1
ghcr.io/conductionnl/waardepapieren-php:latestb2666ffcbad8
guzzlehttp/guzzle@6.5.5
7.15.2
1
ghcr.io/conductionnl/waardepapieren-register-php:latest9affab218351
guzzlehttp/guzzle@6.5.5
7.15.2
1
ghcr.io/conductionnl/webresourcecatalogus-php:latest8f1bbd5cda85
guzzlehttp/guzzle@6.5.5
7.15.2
1
ghcr.io/linuxserver/bookstack:version-v24.12.1cc795b254b73
guzzlehttp/guzzle@7.9.2
7.15.2
1
ghcr.io/linuxserver/bookstack:version-v21.12f05447347ff1
guzzlehttp/guzzle@7.4.1
7.15.2
1
ghcr.io/monicahq/monica-next:main8be69156acbb
guzzlehttp/guzzle@7.9.3
7.15.2
1
ghcr.io/nathanvaughn/webtrees:2.2.6034151b61a80
guzzlehttp/guzzle@7.10.0
7.15.2
1
ghcr.io/nathanvaughn/webtrees:2.0.1969423a100fab
guzzlehttp/guzzle@6.5.5
7.15.2
1
ghcr.io/open-telemetry/demo:3.0.0-quote6bc8f7f6809e
guzzlehttp/guzzle@7.15.1
7.15.2
1
ghcr.io/open-telemetry/demo:1.12.0-quoteservice87eb325d306f
guzzlehttp/guzzle@7.8.1
7.15.2
1
ghcr.io/tasmoadmin/tasmoadmin:v3.3.205aeefbdac2b
guzzlehttp/guzzle@7.8.1
7.15.2
1
ghcr.io/wbstack/api:8x.9.11eee94f9f7a53
guzzlehttp/guzzle@6.5.8
7.15.2
1
ghcr.io/wbstack/mediawiki:1.37-7.4-20220621-fp-beta-0c3012c8a34b4
guzzlehttp/guzzle@7.2.0
7.15.2
1
ghcr.io/wbstack/quickstatements:1.3.588423e422ea8
guzzlehttp/guzzle@7.4.0
7.15.2
1
public.ecr.aws/supportpal/helpdesk-monolithic:4.0.4573779e57fae
guzzlehttp/guzzle@7.4.2
7.15.2
1
quay.io/renokico/laravel-helm-demo:0.6.03207f957e80c
guzzlehttp/guzzle@7.3.0
7.15.2
1
quay.io/renokico/laravel-helm-demo:worker-0.6.04b188259267e
guzzlehttp/guzzle@7.3.0
7.15.2
1
quay.io/renokico/laravel-helm-demo:octane-0.6.0cad83090c58f
guzzlehttp/guzzle@7.3.0
7.15.2
1
registry.gitlab.com/school_guy/docker-typo3:13.4.30-197d868ed76185d7270d
guzzlehttp/guzzle@7.11.0
7.15.2
1

syft 1.42.1 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.