StackRadar

CVE-2026-7598

High

Advisory

Published 1 May 2026In the index since 5 Sept 2026
Severity
High
worst across findings
CVSS
7.3
base score, highest
EPSS
0.005
39th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
523
of 17,787 indexed, latest versions
Container images
513
deployed by those charts
Fix available
2 of 2
affected packages

The matching OSV records carry no description.

Carried by container images the latest versions of 523 of 17,787 indexed charts deploy, on 513 images.

Affected packageAffected versionsFixed inImages
libssh2deb1.5.0-2ubuntu0.1, 1.8.0-2.1build1, 1.10.0-3, 1.10.0-3+b1+4 more1.10.0-3+deb12u1, 1.11.0-4.1ubuntu0.24.04.1, 1.11.1-1+deb13u1, 1.11.1-1ubuntu0.25.10.1+1 more503
libssh2apk1.11.0-r2, 1.11.1-r0, 1.11.1-r11.11.0-r3, 1.11.1-r1, 1.11.1-r210
OSV records
UBUNTU-CVE-2026-7598ALPINE-CVE-2026-7598DEBIAN-CVE-2026-7598
Also known as
USN-8309-1

Charts affected

523 by stars
ChartLatestAffected imagesRadar Score
firefly-iii-stackfirefly-iii0.10.22 of 4See more

firefly-iii-stack firefly-iii 0.10.2

2 of the 4 container images this version deploys carry CVE-2026-7598.

Container imageDigestPackageFixed in
fireflyiii/core:version-6.5.9fe4ecec4c2ba
libssh2@1.11.1-1
1.11.1-1+deb13u1
fireflyiii/data-importer:version-2.2.3ab52bf932546
libssh2@1.11.1-1
1.11.1-1+deb13u1

Open the chart page →

10,260
importerfirefly-iii1.6.01 of 1See more

importer firefly-iii 1.6.0

1 of the 1 container images this version deploys carry CVE-2026-7598.

Container imageDigestPackageFixed in
fireflyiii/data-importer:version-2.2.3ab52bf932546
libssh2@1.11.1-1
1.11.1-1+deb13u1

Open the chart page →

4,829
business-api-ecosystemfiware1.1.01 of 4See more

business-api-ecosystem fiware 1.1.0

1 of the 4 container images this version deploys carry CVE-2026-7598.

Container imageDigestPackageFixed in
fiware/biz-ecosystem-logic-proxy:11.20.3d551a13e8278
libssh2@1.10.0-3+b1
1.10.0-3+deb12u1

Open the chart page →

64,489
mission-controlflanksourceVerified publisher0.1.3361 of 8See more

mission-control flanksource 0.1.336

1 of the 8 container images this version deploys carry CVE-2026-7598.

Container imageDigestPackageFixed in
ghcr.io/flanksource/postgres:17.6-497383cebcf66281fc1
libssh2@1.10.0-3+b1
1.10.0-3+deb12u1

Open the chart page →

8,902
esphomegabe565Verified publisher0.15.01 of 1See more

esphome gabe565 0.15.0

1 of the 1 container images this version deploys carry CVE-2026-7598.

Container imageDigestPackageFixed in
ghcr.io/esphome/esphome:latest000c5ee5ee96
libssh2@1.11.1-1
1.11.1-1+deb13u1

Open the chart page →

3,112
scanservjsgabe565Verified publisher0.9.21 of 1See more

scanservjs gabe565 0.9.2

1 of the 1 container images this version deploys carry CVE-2026-7598.

Container imageDigestPackageFixed in
sbs20/scanservjs:release-v3.0.3dad1fd6e9a98
libssh2@1.10.0-3+b1
1.10.0-3+deb12u1

Open the chart page →

13,241
icinga2geek-cookbookVerified publisher4.2.01 of 1See more

icinga2 geek-cookbook 4.2.0

1 of the 1 container images this version deploys carry CVE-2026-7598.

Container imageDigestPackageFixed in
jordan/icinga2:latestf75025fe8ea8
libssh2@1.10.0-3+b1
1.10.0-3+deb12u1

Open the chart page →

9,077
mopidygeek-cookbookVerified publisher0.1.21 of 1See more

mopidy geek-cookbook 0.1.2

1 of the 1 container images this version deploys carry CVE-2026-7598.

Container imageDigestPackageFixed in
jaedb/iris:latest048cfbf58d57
libssh2@1.10.0-3+b1
1.10.0-3+deb12u1

Open the chart page →

12,958
sdtdgeek-cookbookVerified publisher0.3.21 of 1See more

sdtd geek-cookbook 0.3.2

1 of the 1 container images this version deploys carry CVE-2026-7598.

Container imageDigestPackageFixed in
ghcr.io/reitermarkus/7d2d:main39953b387b61
libssh2@1.11.1-1
1.11.1-1+deb13u1

Open the chart page →

2,511
skypilotgeek-cookbookVerified publisher0.0.11 of 3See more

skypilot geek-cookbook 0.0.1

1 of the 3 container images this version deploys carry CVE-2026-7598.

Container imageDigestPackageFixed in
berkeleyskypilot/skypilot-nightly:latest8da2f3cda472
libssh2@1.11.1-1
1.11.1-1+deb13u1

Open the chart page →

8,923
xtevegeek-cookbookVerified publisher8.4.21 of 1See more

xteve geek-cookbook 8.4.2

1 of the 1 container images this version deploys carry CVE-2026-7598.

Container imageDigestPackageFixed in
ghcr.io/k8s-at-home/xteve:v2.2.0.200292b3614670f
libssh2@1.8.0-2.1build1
no fix listed

Open the chart page →

17,929
chproxygeneral-helm-chartsVerified publisher0.0.21 of 1See more

chproxy general-helm-charts 0.0.2

1 of the 1 container images this version deploys carry CVE-2026-7598.

Container imageDigestPackageFixed in
contentsquareplatform/chproxy:v1.26.524555f22d4be
libssh2@1.10.0-3+b1
1.10.0-3+deb12u1

Open the chart page →

3,712
genieacsgenieacsVerified publisher0.5.11 of 2See more

genieacs genieacs 0.5.1

1 of the 2 container images this version deploys carry CVE-2026-7598.

Container imageDigestPackageFixed in
drumsergio/genieacs:1.2.16.028244054e1bf
libssh2@1.10.0-3+b1
1.10.0-3+deb12u1

Open the chart page →

4,259
glpiglpi-chart0.1.11 of 3See more

glpi glpi-chart 0.1.1

1 of the 3 container images this version deploys carry CVE-2026-7598.

Container imageDigestPackageFixed in
vdiogov/glpi-conteiner:latest6945f84f0058
libssh2@1.10.0-3+b1
1.10.0-3+deb12u1

Open the chart page →

12,170
opentelemetry-demogpg-dev0.33.82 of 27See more

opentelemetry-demo gpg-dev 0.33.8

2 of the 27 container images this version deploys carry CVE-2026-7598.

Container imageDigestPackageFixed in
ghcr.io/open-telemetry/demo:1.12.0-imageprovider4e322858fe56
libssh2@1.10.0-3+b1
1.10.0-3+deb12u1
ghcr.io/open-telemetry/demo:1.12.0-quoteservice87eb325d306f
libssh2@1.10.0-3+b1
1.10.0-3+deb12u1

Open the chart page →

49,025
hatchet-hahatchetOfficialVerified publisher0.18.01 of 8See more

hatchet-ha hatchet 0.18.0

1 of the 8 container images this version deploys carry CVE-2026-7598.

Container imageDigestPackageFixed in
bitnamilegacy/rabbitmq:4.1.3-debian-12-r19e635efba431
libssh2@1.10.0-3+b1
1.10.0-3+deb12u1

Open the chart page →

7,344
hatchet-stackhatchetOfficialVerified publisher0.18.01 of 8See more

hatchet-stack hatchet 0.18.0

1 of the 8 container images this version deploys carry CVE-2026-7598.

Container imageDigestPackageFixed in
bitnamilegacy/rabbitmq:4.1.3-debian-12-r19e635efba431
libssh2@1.10.0-3+b1
1.10.0-3+deb12u1

Open the chart page →

7,344
heliconehelicone0.1.421 of 14See more

helicone helicone 0.1.42

1 of the 14 container images this version deploys carry CVE-2026-7598.

Container imageDigestPackageFixed in
helicone/supabase-migration-runner:v2025.03.05-14a913936c97b
libssh2@1.10.0-3+b1
1.10.0-3+deb12u1

Open the chart page →

24,995
helixhelix1.4.31 of 2See more

helix helix 1.4.3

1 of the 2 container images this version deploys carry CVE-2026-7598.

Container imageDigestPackageFixed in
quay.io/jupyterhub/k8s-hub:4.3.492f883d09270
libssh2@1.10.0-3+b1
1.10.0-3+deb12u1

Open the chart page →

5,568
hello-worldhello-world-pponyVerified publisher0.3.01 of 1See more

hello-world hello-world-ppony 0.3.0

1 of the 1 container images this version deploys carry CVE-2026-7598.

Container imageDigestPackageFixed in
library/nginx:1.25.49ff236ed47fe
libssh2@1.10.0-3+b1
1.10.0-3+deb12u1

Open the chart page →

5,839
esphomehelm-chart-roeiVerified publisher2025.3.01 of 1See more

esphome helm-chart-roei 2025.3.0

1 of the 1 container images this version deploys carry CVE-2026-7598.

Container imageDigestPackageFixed in
esphome/esphome:2025.3.0def8b6e4f517
libssh2@1.10.0-3+b1
1.10.0-3+deb12u1

Open the chart page →

6,008
home-assistanthelm-chart-roeiVerified publisher2025.3.01 of 1See more

home-assistant helm-chart-roei 2025.3.0

1 of the 1 container images this version deploys carry CVE-2026-7598.

Container imageDigestPackageFixed in
ghcr.io/home-assistant/home-assistant:2025.3.026c51e44d932
libssh2@1.11.1-r0
1.11.1-r1

Open the chart page →

4,647
home-assistant-matter-hubhelm-chart-roeiVerified publisher3.0.21 of 1See more

home-assistant-matter-hub helm-chart-roei 3.0.2

1 of the 1 container images this version deploys carry CVE-2026-7598.

Container imageDigestPackageFixed in
luligu/matterbridge:3.0.28f97884bebc2
libssh2@1.10.0-3+b1
1.10.0-3+deb12u1

Open the chart page →

3,806
chart-bookhelm-deploy-book0.1.01 of 3See more

chart-book helm-deploy-book 0.1.0

1 of the 3 container images this version deploys carry CVE-2026-7598.

Container imageDigestPackageFixed in
dannielkil/book-frontend:latest937993927694
libssh2@1.10.0-3+b1
1.10.0-3+deb12u1

Open the chart page →

9,122
archiveboxhelmforgeVerified publisher1.1.121 of 1See more

archivebox helmforge 1.1.12

1 of the 1 container images this version deploys carry CVE-2026-7598.

Container imageDigestPackageFixed in
archivebox/archivebox:0.7.41a5a37331091
libssh2@1.10.0-3+b1
1.10.0-3+deb12u1

Open the chart page →

7,633
castopodhelmforgeVerified publisher1.2.71 of 3See more

castopod helmforge 1.2.7

1 of the 3 container images this version deploys carry CVE-2026-7598.

Container imageDigestPackageFixed in
castopod/castopod:1.15.54e4f0440520f
libssh2@1.11.1-1
1.11.1-1+deb13u1

Open the chart page →

9,342
chiefonboardinghelmforgeVerified publisher1.1.141 of 3See more

chiefonboarding helmforge 1.1.14

1 of the 3 container images this version deploys carry CVE-2026-7598.

Container imageDigestPackageFixed in
chiefonboarding/chiefonboarding:v2.4.159bc7aa60fe7
libssh2@1.11.1-1
1.11.1-1+deb13u1

Open the chart page →

10,849
ckanhelmforgeVerified publisher1.3.81 of 6See more

ckan helmforge 1.3.8

1 of the 6 container images this version deploys carry CVE-2026-7598.

Container imageDigestPackageFixed in
ckan/ckan-base:2.12.087ecf3f27ad6
libssh2@1.10.0-3+b1
1.10.0-3+deb12u1

Open the chart page →

9,920
discount-bandithelmforgeVerified publisher2.0.81 of 3See more

discount-bandit helmforge 2.0.8

1 of the 3 container images this version deploys carry CVE-2026-7598.

Container imageDigestPackageFixed in
cybrarist/discount-bandit:v4.0.4e9e2447ac666
libssh2@1.11.1-1
1.11.1-1+deb13u1

Open the chart page →

29,817
drupalhelmforgeVerified publisher1.2.131 of 2See more

drupal helmforge 1.2.13

1 of the 2 container images this version deploys carry CVE-2026-7598.

Container imageDigestPackageFixed in
library/drupal:11.4.6-php8.5-apache-bookworm28f7931ecbcb
libssh2@1.10.0-3+b1
1.10.0-3+deb12u1

Open the chart page →

3,802
fastmcp-serverhelmforgeVerified publisher1.7.41 of 1See more

fastmcp-server helmforge 1.7.4

1 of the 1 container images this version deploys carry CVE-2026-7598.

Container imageDigestPackageFixed in
helmforge/fastmcp-server:0.11.2fcb7017327d6
libssh2@1.11.1-1
1.11.1-1+deb13u1

Open the chart page →

3,281
jupyterhubhelmforgeVerified publisher1.0.61 of 3See more

jupyterhub helmforge 1.0.6

1 of the 3 container images this version deploys carry CVE-2026-7598.

Container imageDigestPackageFixed in
quay.io/jupyterhub/k8s-hub:4.3.5113e372cf71b
libssh2@1.10.0-3+b1
1.10.0-3+deb12u1

Open the chart page →

5,341
mcp-serverhelmforgeVerified publisher1.0.01 of 1See more

mcp-server helmforge 1.0.0

1 of the 1 container images this version deploys carry CVE-2026-7598.

Container imageDigestPackageFixed in
helmforge/fastmcp-server:0.2.061f759a1421f
libssh2@1.11.1-1
1.11.1-1+deb13u1

Open the chart page →

3,430
medikeephelmforgeVerified publisher2.0.01 of 3See more

medikeep helmforge 2.0.0

1 of the 3 container images this version deploys carry CVE-2026-7598.

Container imageDigestPackageFixed in
ghcr.io/afairgiant/medikeep:v0.69.0766699daa9ac
libssh2@1.10.0-3+b1
1.10.0-3+deb12u1

Open the chart page →

6,022
middlewarehelmforgeVerified publisher1.2.61 of 4See more

middleware helmforge 1.2.6

1 of the 4 container images this version deploys carry CVE-2026-7598.

Container imageDigestPackageFixed in
middlewareeng/middleware:0.3.1747d880812f1
libssh2@1.10.0-3+b1
1.10.0-3+deb12u1

Open the chart page →

9,653
moodlehelmforgeVerified publisher1.1.01 of 2See more

moodle helmforge 1.1.0

1 of the 2 container images this version deploys carry CVE-2026-7598.

Container imageDigestPackageFixed in
moodlehq/moodle-php-apache:8.4-bookworm922af5166835
libssh2@1.10.0-3+b1
1.10.0-3+deb12u1

Open the chart page →

6,103
phpmyadminhelmforgeVerified publisher2.0.11 of 1See more

phpmyadmin helmforge 2.0.1

1 of the 1 container images this version deploys carry CVE-2026-7598.

Container imageDigestPackageFixed in
phpmyadmin/phpmyadmin:5.2.342a200db07b4
libssh2@1.11.1-1
1.11.1-1+deb13u1

Open the chart page →

4,751
ryothelmforgeVerified publisher1.0.01 of 2See more

ryot helmforge 1.0.0

1 of the 2 container images this version deploys carry CVE-2026-7598.

Container imageDigestPackageFixed in
ghcr.io/ignisda/ryot:v10.5.0a752b6aee537
libssh2@1.10.0-3+b1
1.10.0-3+deb12u1

Open the chart page →

6,012
text-embeddings-inferencehelmforgeVerified publisher1.0.01 of 2See more

text-embeddings-inference helmforge 1.0.0

1 of the 2 container images this version deploys carry CVE-2026-7598.

Container imageDigestPackageFixed in
ghcr.io/huggingface/text-embeddings-inference:cpu-1.9.3ad950d30878e
libssh2@1.10.0-3+b1
1.10.0-3+deb12u1

Open the chart page →

2,541
uptime-kumahelmforgeVerified publisher1.5.121 of 1See more

uptime-kuma helmforge 1.5.12

1 of the 1 container images this version deploys carry CVE-2026-7598.

Container imageDigestPackageFixed in
louislam/uptime-kuma:2.5.33e24e96c89ef
libssh2@1.10.0-3+b1
1.10.0-3+deb12u1

Open the chart page →

30,099
myapphelmingapp0.1.01 of 1See more

myapp helmingapp 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-7598.

Container imageDigestPackageFixed in
muhammedgamal/fp23:latest74b4cd69b6fa
libssh2@1.10.0-3+b1
1.10.0-3+deb12u1

Open the chart page →

12,607
jellyfinhelm-l3st86Verified publisher0.1.81 of 1See more

jellyfin helm-l3st86 0.1.8

1 of the 1 container images this version deploys carry CVE-2026-7598.

Container imageDigestPackageFixed in
jellyfin/jellyfin:latestaefb67e6a7ff
libssh2@1.11.1-1
1.11.1-1+deb13u1

Open the chart page →

2,604
openaevhelm-openbasVerified publisher2.0.51 of 7See more

openaev helm-openbas 2.0.5

1 of the 7 container images this version deploys carry CVE-2026-7598.

Container imageDigestPackageFixed in
bitnamilegacy/rabbitmq:4.1.2-debian-12-r1fac502149c40
libssh2@1.10.0-3+b1
1.10.0-3+deb12u1

Open the chart page →

7,437
openbashelm-openbasVerified publisher1.8.142 of 7See more

openbas helm-openbas 1.8.14

2 of the 7 container images this version deploys carry CVE-2026-7598.

Container imageDigestPackageFixed in
bitnamilegacy/rabbitmq:4.1.2-debian-12-r1fac502149c40
libssh2@1.10.0-3+b1
1.10.0-3+deb12u1
openbas/caldera-server:5.1.0a277796d9724
libssh2@1.10.0-3+b1
1.10.0-3+deb12u1

Open the chart page →

25,017
steampipehelm-steampipeVerified publisher2.4.11 of 1See more

steampipe helm-steampipe 2.4.1

1 of the 1 container images this version deploys carry CVE-2026-7598.

Container imageDigestPackageFixed in
ghcr.io/devops-ia/steampipe:v2.4.1a982103d91d3
libssh2@1.10.0-3+b1
1.10.0-3+deb12u1

Open the chart page →

3,124
samplehelmapphelmtraining3.0.01 of 1See more

samplehelmapp helmtraining 3.0.0

1 of the 1 container images this version deploys carry CVE-2026-7598.

Container imageDigestPackageFixed in
praravind1801/helmimages:3.0.0f29d637b9ce1
libssh2@1.10.0-3+b1
1.10.0-3+deb12u1

Open the chart page →

5,973
home-ha-mockhome-ha-mockVerified publisher2.0.51 of 1See more

home-ha-mock home-ha-mock 2.0.5

1 of the 1 container images this version deploys carry CVE-2026-7598.

Container imageDigestPackageFixed in
ghcr.io/smarter-project/home-ha-mock:main95ee018cf558
libssh2@1.10.0-3+b1
1.10.0-3+deb12u1

Open the chart page →

3,048
paperlesshomelabcihelmchartstestVerified publisher9.1.91 of 1See more

paperless homelabcihelmchartstest 9.1.9

1 of the 1 container images this version deploys carry CVE-2026-7598.

Container imageDigestPackageFixed in
ghcr.io/paperless-ngx/paperless-ngx:2.0.1ab255bea133e
libssh2@1.10.0-3+b1
1.10.0-3+deb12u1

Open the chart page →

16,384
home-security-demohome-security-demoVerified publisher2.0.121 of 3See more

home-security-demo home-security-demo 2.0.12

1 of the 3 container images this version deploys carry CVE-2026-7598.

Container imageDigestPackageFixed in
ghcr.io/smarter-project/home-ha-mock:main95ee018cf558
libssh2@1.10.0-3+b1
1.10.0-3+deb12u1

Open the chart page →

3,131
paperlesshpVerified publisher0.1.11 of 5See more

paperless hp 0.1.1

1 of the 5 container images this version deploys carry CVE-2026-7598.

Container imageDigestPackageFixed in
gotenberg/gotenberg:8.3467097317623a
libssh2@1.11.1-1
1.11.1-1+deb13u1

Open the chart page →

26,612

Container images carrying it

513 by charts deploying them

A fixed version is listed for 2 of the 2 affected packages.

Container imageDigestPackageFixed inUsed by
public.ecr.aws/outerbounds/metaflow_metadata_service:v2.4.13f7567ce3419d
libssh2@1.10.0-3+b1
1.10.0-3+deb12u1
1
public.ecr.aws/truefoundrycloud/async-service-distributor:5d48113bc678d694a0c8f8dabb2207c5aa2cfc53f74851ce31f5
libssh2@1.10.0-3+b1
1.10.0-3+deb12u1
1
quay.io/jupyterhub/k8s-hub:4.4.2108fbb01c3fe
libssh2@1.10.0-3+b1
1.10.0-3+deb12u1
1
quay.io/jupyterhub/k8s-hub:4.3.5113e372cf71b
libssh2@1.10.0-3+b1
1.10.0-3+deb12u1
1
quay.io/jupyterhub/k8s-hub:4.3.492f883d09270
libssh2@1.10.0-3+b1
1.10.0-3+deb12u1
1
quay.io/jupyterhub/k8s-singleuser-sample:4.4.265e1b09fc8c9
libssh2@1.10.0-3+b1
1.10.0-3+deb12u1
1
quay.io/opsmxpublic/ubi8-oes-datascience:isd-spin-2025.10.01-af26a30d4-202511261054d8f66f4117fe
libssh2@1.11.1-1
1.11.1-1+deb13u1
1
quay.io/yushiwho/api:e1f9d77e0d9b93dbf2b
libssh2@1.10.0-3+b1
1.10.0-3+deb12u1
1
registry.gitlab.com/enbuild-staging/vivsoft-platform-ui/enbuild-frontend:1.0.3166353ce9bf98
libssh2@1.11.1-1
1.11.1-1+deb13u1
1
registry.gitlab.com/enbuild-staging/vivsoft-platform-ui/enbuild-mq-consumer:1.0.310e3cd8c7776d
libssh2@1.10.0-3+b1
1.10.0-3+deb12u1
1
registry.gitlab.com/school_guy/docker-typo3:13.4.30-197d868ed76185d7270d
libssh2@1.10.0-3+b1
1.10.0-3+deb12u1
1
registry.k8s.io/git-sync/git-sync:v4.5.00e64aedb0d0a
libssh2@1.11.1-1
1.11.1-1+deb13u1
1
registry.k8s.io/git-sync/git-sync:v4.1.0fd9722fd02e3
libssh2@1.10.0-3+b1
1.10.0-3+deb12u1
1

syft 1.42.1 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.