StackRadar

CVE-2026-73070

Medium

Advisory

Published 11 Aug 2026In the index since 5 Sept 2026
Severity
Medium
worst across findings
CVSS
6.8
base score, highest
EPSS
0.001
2nd percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
38
of 17,781 indexed, latest versions
Container images
33
deployed by those charts
Fix available
None
affected package

The matching OSV records carry no description.

Carried by container images the latest versions of 38 of 17,781 indexed charts deploy, on 33 images.

Affected packageAffected versionsFixed inImages
vimdeb2:9.0.1378-2, 2:9.0.1378-2+deb12u2, 2:9.1.1230-2no fix listed33
OSV records
DEBIAN-CVE-2026-73070

Charts affected

38 by stars
ChartLatestAffected imagesRadar Score
jupyterhubjupyterhubOfficialVerified publisher4.4.21 of 7See more

jupyterhub jupyterhub 4.4.2

1 of the 7 container images this version deploys carry CVE-2026-73070.

Container imageDigestPackageFixed in
quay.io/jupyterhub/k8s-hub:4.4.2108fbb01c3fe
vim@2:9.0.1378-2+deb12u2
no fix listed

Open the chart page →

7,894
netdatanetdataVerified publisher3.7.1731 of 1See more

netdata netdata 3.7.173

1 of the 1 container images this version deploys carry CVE-2026-73070.

Container imageDigestPackageFixed in
netdata/netdata:v2.11.0c45c71eb23ff
vim@2:9.1.1230-2
no fix listed

Open the chart page →

3,092
clearmlallegroaiOfficialVerified publisher7.15.01 of 4See more

clearml allegroai 7.15.0

1 of the 4 container images this version deploys carry CVE-2026-73070.

Container imageDigestPackageFixed in
allegroai/clearml:2.0.0-613713ae38f7daf
vim@2:9.0.1378-2
no fix listed

Open the chart page →

10,622
uffizzi-controlleruffizzi-controller2.4.61 of 11See more

uffizzi-controller uffizzi-controller 2.4.6

1 of the 11 container images this version deploys carry CVE-2026-73070.

Container imageDigestPackageFixed in
uffizzi/controller:latest0344805f267b
vim@2:9.0.1378-2
no fix listed

Open the chart page →

14,240
dolibarrcowboysysopVerified publisher9.0.31 of 3See more

dolibarr cowboysysop 9.0.3

1 of the 3 container images this version deploys carry CVE-2026-73070.

Container imageDigestPackageFixed in
dolibarr/dolibarr:22.0.47ad88fc9b13c
vim@2:9.0.1378-2+deb12u2
no fix listed

Open the chart page →

9,106
dolibarrhelmforgeVerified publisher1.2.181 of 3See more

dolibarr helmforge 1.2.18

1 of the 3 container images this version deploys carry CVE-2026-73070.

Container imageDigestPackageFixed in
dolibarr/dolibarr:24.0.069ec52e3b7ef
vim@2:9.0.1378-2+deb12u2
no fix listed

Open the chart page →

4,109
uffizzi-appuffizzi-app1.3.01 of 14See more

uffizzi-app uffizzi-app 1.3.0

1 of the 14 container images this version deploys carry CVE-2026-73070.

Container imageDigestPackageFixed in
uffizzi/controller:latest0344805f267b
vim@2:9.0.1378-2
no fix listed

Open the chart page →

19,337
dragonfly-stackdragonflyVerified publisher0.1.21 of 7See more

dragonfly-stack dragonfly 0.1.2

1 of the 7 container images this version deploys carry CVE-2026-73070.

Container imageDigestPackageFixed in
dragonflyoss/client:v0.1.82edf3e921f4e0
vim@2:9.0.1378-2
no fix listed

Open the chart page →

18,376
difykubeblocksVerified publisher0.5.11 of 5See more

dify kubeblocks 0.5.1

1 of the 5 container images this version deploys carry CVE-2026-73070.

Container imageDigestPackageFixed in
langgenius/dify-api:0.6.11fca918260dd6
vim@2:9.0.1378-2
no fix listed

Open the chart page →

20,403
flaresolverrlib42Verified publisher2.0.01 of 1See more

flaresolverr lib42 2.0.0

1 of the 1 container images this version deploys carry CVE-2026-73070.

Container imageDigestPackageFixed in
ghcr.io/flaresolverr/flaresolverr:v3.4.0ab535d1fef5d
vim@2:9.0.1378-2+deb12u2
no fix listed

Open the chart page →

35,050
flaresolverrm0nsterrr-flaresolverrVerified publisher2.4.11 of 1See more

flaresolverr m0nsterrr-flaresolverr 2.4.1

1 of the 1 container images this version deploys carry CVE-2026-73070.

Container imageDigestPackageFixed in
ghcr.io/flaresolverr/flaresolverr:v3.5.2c80ae007ce2c
vim@2:9.0.1378-2+deb12u2
no fix listed

Open the chart page →

6,136
fluent-bitromanow-helm-chartsVerified publisher1.7.31 of 1See more

fluent-bit romanow-helm-charts 1.7.3

1 of the 1 container images this version deploys carry CVE-2026-73070.

Container imageDigestPackageFixed in
fluent/fluent-bit:4.0-debuge76397ef3983
vim@2:9.0.1378-2+deb12u2
no fix listed

Open the chart page →

7,740
postgresql-singlesinextraVerified publisher1.15.11 of 1See more

postgresql-single sinextra 1.15.1

1 of the 1 container images this version deploys carry CVE-2026-73070.

Container imageDigestPackageFixed in
ghcr.io/sergelogvinov/postgresql:16.15fafb72e98f22
vim@2:9.0.1378-2+deb12u2
no fix listed

Open the chart page →

4,913
flaresolverralexmorbo-flaresolverrVerified publisher0.2.01 of 1See more

flaresolverr alexmorbo-flaresolverr 0.2.0

1 of the 1 container images this version deploys carry CVE-2026-73070.

Container imageDigestPackageFixed in
flaresolverr/flaresolverr:v3.5.0139dfee1c6f8
vim@2:9.0.1378-2+deb12u2
no fix listed

Open the chart page →

27,274
flaresolverrbrandan-schmitz-helm-chartsVerified publisher1.4.01 of 1See more

flaresolverr brandan-schmitz-helm-charts 1.4.0

1 of the 1 container images this version deploys carry CVE-2026-73070.

Container imageDigestPackageFixed in
flaresolverr/flaresolverr:v3.5.0139dfee1c6f8
vim@2:9.0.1378-2+deb12u2
no fix listed

Open the chart page →

27,274
camellia-redis-proxycamellia-redis-proxy1.4.01 of 2See more

camellia-redis-proxy camellia-redis-proxy 1.4.0

1 of the 2 container images this version deploys carry CVE-2026-73070.

Container imageDigestPackageFixed in
48n6e/camellia-redis-proxy:1.4.0-jdk-21-0.0.1a6ed886fddfc
vim@2:9.0.1378-2+deb12u2
no fix listed

Open the chart page →

8,001
arbitrumchronicleVerified publisher0.3.41 of 1See more

arbitrum chronicle 0.3.4

1 of the 1 container images this version deploys carry CVE-2026-73070.

Container imageDigestPackageFixed in
offchainlabs/nitro-node:v3.7.6-c0fe95e9f779fa84b7b
vim@2:9.0.1378-2+deb12u2
no fix listed

Open the chart page →

6,998
galaxycloudve6.8.61 of 3See more

galaxy cloudve 6.8.6

1 of the 3 container images this version deploys carry CVE-2026-73070.

Container imageDigestPackageFixed in
quay.io/galaxyproject/galaxy-min:26.1.12c324c9789f5
vim@2:9.1.1230-2
no fix listed

Open the chart page →

4,601
dev-code-servercosmoVerified publisher0.0.71 of 2See more

dev-code-server cosmo 0.0.7

1 of the 2 container images this version deploys carry CVE-2026-73070.

Container imageDigestPackageFixed in
ghcr.io/cosmo-workspace/dev-code-server:v0.0.316fda01ae58a
vim@2:9.0.1378-2+deb12u2
no fix listed

Open the chart page →

14,559
jupyterhubd4nVerified publisher3.3.71 of 7See more

jupyterhub d4n 3.3.7

1 of the 7 container images this version deploys carry CVE-2026-73070.

Container imageDigestPackageFixed in
aristidetm/basic-notebook:3.6.5469dbc951224
vim@2:9.0.1378-2
no fix listed

Open the chart page →

16,604
truecommanddjjudas21Verified publisher0.1.01 of 1See more

truecommand djjudas21 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-73070.

Container imageDigestPackageFixed in
ixsystems/truecommand:3.2.019c218455cd2
vim@2:9.1.1230-2
no fix listed

Open the chart page →

5,174
dominodomino-iisasVerified publisher0.3.11 of 3See more

domino domino-iisas 0.3.1

1 of the 3 container images this version deploys carry CVE-2026-73070.

Container imageDigestPackageFixed in
ghcr.io/iisas/domino-frontend:k8s8e53861be292
vim@2:9.0.1378-2+deb12u2
no fix listed

Open the chart page →

10,270
arbitrumdysnixVerified publisher0.1.11 of 1See more

arbitrum dysnix 0.1.1

1 of the 1 container images this version deploys carry CVE-2026-73070.

Container imageDigestPackageFixed in
offchainlabs/nitro-node:v3.1.0-7d1d84ce95865866129
vim@2:9.0.1378-2
no fix listed

Open the chart page →

9,244
helixhelix1.4.31 of 2See more

helix helix 1.4.3

1 of the 2 container images this version deploys carry CVE-2026-73070.

Container imageDigestPackageFixed in
quay.io/jupyterhub/k8s-hub:4.3.492f883d09270
vim@2:9.0.1378-2+deb12u2
no fix listed

Open the chart page →

5,568
jupyterhubhelmforgeVerified publisher1.0.61 of 3See more

jupyterhub helmforge 1.0.6

1 of the 3 container images this version deploys carry CVE-2026-73070.

Container imageDigestPackageFixed in
quay.io/jupyterhub/k8s-hub:4.3.5113e372cf71b
vim@2:9.0.1378-2+deb12u2
no fix listed

Open the chart page →

5,341
intelowlintelowl-helm6.6.1-01-06-20261 of 5See more

intelowl intelowl-helm 6.6.1-01-06-2026

1 of the 5 container images this version deploys carry CVE-2026-73070.

Container imageDigestPackageFixed in
intelowlproject/intelowl:v6.6.10b22e547ea6b
vim@2:9.0.1378-2+deb12u2
no fix listed

Open the chart page →

17,852
flaresolverrk8s-home-lab-repo6.2.01 of 1See more

flaresolverr k8s-home-lab-repo 6.2.0

1 of the 1 container images this version deploys carry CVE-2026-73070.

Container imageDigestPackageFixed in
flaresolverr/flaresolverr:v3.5.0139dfee1c6f8
vim@2:9.0.1378-2+deb12u2
no fix listed

Open the chart page →

27,274
cdashkitwareVerified publisher0.19.01 of 3See more

cdash kitware 0.19.0

1 of the 3 container images this version deploys carry CVE-2026-73070.

Container imageDigestPackageFixed in
kitware/cdash:v5.3.0d7767d9b9da4
vim@2:9.1.1230-2
no fix listed

Open the chart page →

12,062
flaresolverrkubernetes-homelab-helm-chartsVerified publisher0.1.21 of 1See more

flaresolverr kubernetes-homelab-helm-charts 0.1.2

1 of the 1 container images this version deploys carry CVE-2026-73070.

Container imageDigestPackageFixed in
ghcr.io/flaresolverr/flaresolverr:v3.4.67962759d99d7
vim@2:9.0.1378-2+deb12u2
no fix listed

Open the chart page →

33,583
flaresolverrluiscajl0.0.31 of 1See more

flaresolverr luiscajl 0.0.3

1 of the 1 container images this version deploys carry CVE-2026-73070.

Container imageDigestPackageFixed in
flaresolverr/flaresolverr:latest139dfee1c6f8
vim@2:9.0.1378-2+deb12u2
no fix listed

Open the chart page →

27,274
flaresolverrmedia-servarrVerified publisher0.18.11 of 1See more

flaresolverr media-servarr 0.18.1

1 of the 1 container images this version deploys carry CVE-2026-73070.

Container imageDigestPackageFixed in
ghcr.io/flaresolverr/flaresolverr:v3.5.2c80ae007ce2c
vim@2:9.0.1378-2+deb12u2
no fix listed

Open the chart page →

6,136
node-debug-dashboardnode-debug-dashboardVerified publisher0.3.21 of 1See more

node-debug-dashboard node-debug-dashboard 0.3.2

1 of the 1 container images this version deploys carry CVE-2026-73070.

Container imageDigestPackageFixed in
ghcr.io/samr037/node-debug-dashboard:0.3.0c79b2e64a211
vim@2:9.0.1378-2+deb12u2
no fix listed

Open the chart page →

6,854
agentpolyaxon2.16.43 of 4See more

agent polyaxon 2.16.4

3 of the 4 container images this version deploys carry CVE-2026-73070.

Container imageDigestPackageFixed in
polyaxon/polyaxon-agent:2.16.4eca6952b20e6
vim@2:9.1.1230-2
no fix listed
polyaxon/polyaxon-cli:2.16.4024ff3fa775e
vim@2:9.1.1230-2
no fix listed
polyaxon/polyaxon-streams:2.16.4c186bd9834c0
vim@2:9.1.1230-2
no fix listed

Open the chart page →

10,046
polyaxonpolyaxon2.16.43 of 5See more

polyaxon polyaxon 2.16.4

3 of the 5 container images this version deploys carry CVE-2026-73070.

Container imageDigestPackageFixed in
polyaxon/polyaxon-agent:2.16.4eca6952b20e6
vim@2:9.1.1230-2
no fix listed
polyaxon/polyaxon-api:2.16.42b55c3265a90
vim@2:9.1.1230-2
no fix listed
polyaxon/polyaxon-cli:2.16.4024ff3fa775e
vim@2:9.1.1230-2
no fix listed

Open the chart page →

13,741
rocketchat-voiprocketchat-server0.1.01 of 1See more

rocketchat-voip rocketchat-server 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-73070.

Container imageDigestPackageFixed in
rocketchat/freeswitch:stablecfba5c20a5cc
vim@2:9.0.1378-2+deb12u2
no fix listed

Open the chart page →

5,683
flaresolverrrubxkubeVerified publisher0.1.11 of 1See more

flaresolverr rubxkube 0.1.1

1 of the 1 container images this version deploys carry CVE-2026-73070.

Container imageDigestPackageFixed in
flaresolverr/flaresolverr:v3.5.0139dfee1c6f8
vim@2:9.0.1378-2+deb12u2
no fix listed

Open the chart page →

27,274
runwhen-localrunwhen-contribVerified publisher0.6.171 of 3See more

runwhen-local runwhen-contrib 0.6.17

1 of the 3 container images this version deploys carry CVE-2026-73070.

Container imageDigestPackageFixed in
ghcr.io/runwhen-contrib/runwhen-local:0.12.0533ce58c6e02
vim@2:9.1.1230-2
no fix listed

Open the chart page →

3,707
flaresolverrsudo-kraken-flaresolverrVerified publisher2.1.41 of 1See more

flaresolverr sudo-kraken-flaresolverr 2.1.4

1 of the 1 container images this version deploys carry CVE-2026-73070.

Container imageDigestPackageFixed in
ghcr.io/flaresolverr/flaresolverr:v3.4.67962759d99d7
vim@2:9.0.1378-2+deb12u2
no fix listed

Open the chart page →

33,583

Container images carrying it

33 by charts deploying them

A fixed version is listed for 0 of the 1 affected package.

Container imageDigestPackageFixed inUsed by
flaresolverr/flaresolverr:latest:v3.5.0139dfee1c6f8
vim@2:9.0.1378-2+deb12u2
no fix listed
5
polyaxon/polyaxon-agent:2.16.4eca6952b20e6
vim@2:9.1.1230-2
no fix listed
2
polyaxon/polyaxon-cli:2.16.4024ff3fa775e
vim@2:9.1.1230-2
no fix listed
2
uffizzi/controller:latest0344805f267b
vim@2:9.0.1378-2
no fix listed
2
ghcr.io/flaresolverr/flaresolverr:v3.4.67962759d99d7
vim@2:9.0.1378-2+deb12u2
no fix listed
2
ghcr.io/flaresolverr/flaresolverr:v3.5.2c80ae007ce2c
vim@2:9.0.1378-2+deb12u2
no fix listed
2
48n6e/camellia-redis-proxy:1.4.0-jdk-21-0.0.1a6ed886fddfc
vim@2:9.0.1378-2+deb12u2
no fix listed
1
allegroai/clearml:2.0.0-613713ae38f7daf
vim@2:9.0.1378-2
no fix listed
1
aristidetm/basic-notebook:3.6.5469dbc951224
vim@2:9.0.1378-2
no fix listed
1
dolibarr/dolibarr:24.0.069ec52e3b7ef
vim@2:9.0.1378-2+deb12u2
no fix listed
1
dolibarr/dolibarr:22.0.47ad88fc9b13c
vim@2:9.0.1378-2+deb12u2
no fix listed
1
dragonflyoss/client:v0.1.82edf3e921f4e0
vim@2:9.0.1378-2
no fix listed
1
fluent/fluent-bit:4.0-debuge76397ef3983
vim@2:9.0.1378-2+deb12u2
no fix listed
1
intelowlproject/intelowl:v6.6.10b22e547ea6b
vim@2:9.0.1378-2+deb12u2
no fix listed
1
ixsystems/truecommand:3.2.019c218455cd2
vim@2:9.1.1230-2
no fix listed
1
kitware/cdash:v5.3.0d7767d9b9da4
vim@2:9.1.1230-2
no fix listed
1
langgenius/dify-api:0.6.11fca918260dd6
vim@2:9.0.1378-2
no fix listed
1
netdata/netdata:v2.11.0c45c71eb23ff
vim@2:9.1.1230-2
no fix listed
1
offchainlabs/nitro-node:v3.7.6-c0fe95e9f779fa84b7b
vim@2:9.0.1378-2+deb12u2
no fix listed
1
offchainlabs/nitro-node:v3.1.0-7d1d84ce95865866129
vim@2:9.0.1378-2
no fix listed
1
polyaxon/polyaxon-api:2.16.42b55c3265a90
vim@2:9.1.1230-2
no fix listed
1
polyaxon/polyaxon-streams:2.16.4c186bd9834c0
vim@2:9.1.1230-2
no fix listed
1
rocketchat/freeswitch:stablecfba5c20a5cc
vim@2:9.0.1378-2+deb12u2
no fix listed
1
ghcr.io/cosmo-workspace/dev-code-server:v0.0.316fda01ae58a
vim@2:9.0.1378-2+deb12u2
no fix listed
1
ghcr.io/flaresolverr/flaresolverr:v3.4.0ab535d1fef5d
vim@2:9.0.1378-2+deb12u2
no fix listed
1
ghcr.io/iisas/domino-frontend:k8s8e53861be292
vim@2:9.0.1378-2+deb12u2
no fix listed
1
ghcr.io/runwhen-contrib/runwhen-local:0.12.0533ce58c6e02
vim@2:9.1.1230-2
no fix listed
1
ghcr.io/samr037/node-debug-dashboard:0.3.0c79b2e64a211
vim@2:9.0.1378-2+deb12u2
no fix listed
1
ghcr.io/sergelogvinov/postgresql:16.15fafb72e98f22
vim@2:9.0.1378-2+deb12u2
no fix listed
1
quay.io/galaxyproject/galaxy-min:26.1.12c324c9789f5
vim@2:9.1.1230-2
no fix listed
1
quay.io/jupyterhub/k8s-hub:4.4.2108fbb01c3fe
vim@2:9.0.1378-2+deb12u2
no fix listed
1
quay.io/jupyterhub/k8s-hub:4.3.5113e372cf71b
vim@2:9.0.1378-2+deb12u2
no fix listed
1
quay.io/jupyterhub/k8s-hub:4.3.492f883d09270
vim@2:9.0.1378-2+deb12u2
no fix listed
1

syft 1.42.1 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.