CVE-2026-76781
MediumAdvisory
Published 17 Sept 2026In the index since 19 Sept 2026
- Severity
- Medium
- worst across findings
- CVSS
- 5.5
- base score, highest
- EPSS
- 0.002
- 6th percentile
- CISA KEV
- Not listed
- no confirmed exploitation
- Charts affected
- 1,076
- of 17,821 indexed, latest versions
- Container images
- 881
- deployed by those charts
- Fix available
- None
- affected package
The matching OSV records carry no description.
Carried by container images the latest versions of 1,076 of 17,821 indexed charts deploy, on 881 images.
| Affected package | Affected versions | Fixed in | Images |
|---|---|---|---|
| libxml2deb | 2.9.1+dfsg1-3ubuntu4.3, 2.9.1+dfsg1-3ubuntu4.4, 2.9.1+dfsg1-3ubuntu4.12, 2.9.3+dfsg1-1ubuntu0.2+56 more | no fix listed | 881 |
- OSV records
- DEBIAN-CVE-2026-76781UBUNTU-CVE-2026-76781ECHO-2007-775f-9d2b
- Trending
- Rank 4 in indexed charts, since 20 Sept 2026. See the ranking →
Charts affected
1,076 by stars
| Chart | Latest | Affected images | Radar Score |
|---|---|---|---|
| mission-controlflanksourceVerified publisher | 0.1.338 | 1 of 8See more | 9,129 |
| flask-contactsflask-contacts-generic | 1.0.1 | 1 of 3See more | 5,908 |
| fluentd-aggregatorfluentd-aggregatorOfficialVerified publisher | 1.0.0 | 1 of 2See more | 1,808 |
| dump1090fnzv | 0.2.8 | 1 of 1See more | 4,157 |
| fr24feederfnzv | 0.1.2 | 1 of 1See more | 2,493 |
| mod-z3950folio-org | 0.1.3 | 1 of 1See more | 2,605 |
| ff-testfrankframework | 0.7.6 | 1 of 2See more | 1,808 |
| frank2examplefrankframework | 0.7.4 | 1 of 2See more | 1,808 |
| plexfydrah-charts | 2.2.0 | 1 of 1See more | 9,002 |
| changedetection-iogabe565Verified publisher | 0.12.0 | 1 of 2See more | 2,697 |
| scanservjsgabe565Verified publisher | 0.9.2 | 1 of 1See more | 13,459 |
| guacamolegabibbo97 | 0.3.0 | 1 of 3See more | 6,489 |
| accumulogaffer | 2.2.1 | 2 of 4See more | 17,120 |
| gaffer-road-trafficgaffer | 2.2.1 | 1 of 8See more | 9,456 |
| garge-apigargeVerified publisher | 0.1.55 | 1 of 1See more | 1,104 |
| airsonicgeek-cookbookVerified publisher | 6.4.2 | 1 of 1See more | 18,156 |
| apache-musicindexgeek-cookbookVerified publisher | 2.4.2 | 1 of 1See more | 14,889 |
| booksonic-airgeek-cookbookVerified publisher | 6.4.2 | 1 of 1See more | 19,292 |
| calibre-webgeek-cookbookVerified publisher | 8.4.2 | 1 of 1See more | 16,257 |
| delugegeek-cookbookVerified publisher | 5.4.2 | 1 of 1See more | 13,612 |
| double-takegeek-cookbookVerified publisher | 2.3.2 | 1 of 1See more | 87,575 |
| icinga2geek-cookbookVerified publisher | 4.2.0 | 1 of 1See more | 9,546 |
| jackettgeek-cookbookVerified publisher | 11.7.2 | 1 of 1See more | 9,921 |
| lancachegeek-cookbookVerified publisher | 0.6.2 | 1 of 1See more | 1,318 |
| lidarrgeek-cookbookVerified publisher | 14.2.2 | 1 of 1See more | 14,490 |
| mopidygeek-cookbookVerified publisher | 0.1.2 | 1 of 1See more | 13,296 |
| nzbgetgeek-cookbookVerified publisher | 12.4.2 | 1 of 1See more | 12,328 |
| openkmgeek-cookbookVerified publisher | 4.2.0 | 1 of 1See more | 28,116 |
| photoprismgeek-cookbookVerified publisher | 7.2.0 | 1 of 1See more | 19,608 |
| puppeteergeek-cookbookVerified publisher | 1.2.2 | 1 of 1See more | 15,830 |
| qbittorrentgeek-cookbookVerified publisher | 13.5.2 | 1 of 1See more | 12,048 |
| radarrgeek-cookbookVerified publisher | 16.3.2 | 1 of 1See more | 10,606 |
| seafilegeek-cookbookVerified publisher | 3.2.0 | 1 of 1See more | 100,981 |
| teedygeek-cookbookVerified publisher | 6.2.0 | 1 of 1See more | 27,078 |
| transmissiongeek-cookbookVerified publisher | 8.4.3 | 1 of 1See more | 12,101 |
| xtevegeek-cookbookVerified publisher | 8.4.2 | 1 of 1See more | 18,150 |
| pgbouncerglassflowVerified publisher | 0.1.0 | 1 of 1See more | 3,331 |
| glpiglpi-chart | 0.1.1 | 2 of 3See more | 12,501 |
| goofy-chartgoofy-chart | 0.1.0 | 1 of 1See more | 1,956 |
| googly-logingoogly-login | 0.1.0 | 1 of 2See more | 1,699 |
| opentelemetry-demogpg-dev | 0.33.8 | 3 of 27See more | 50,054 |
| video-analytics-demogpu-operator | 0.1.9 | 2 of 3See more | 15,948 |
| video-analytics-demo-l4tgpu-operator | 0.1.3 | 1 of 3See more | 1,956 |
| routergroundcover | 1.12.378 | 1See more | — |
| rag-apihajowielandVerified publisher | 1.0.0 | 1 of 1See more | 1,755 |
| web-checkhajowielandVerified publisher | 1.0.1 | 1 of 1See more | 9,725 |
| hatchet-apihatchetOfficialVerified publisher | 0.19.0 | 1 of 4See more | 1,739 |
| hatchet-hahatchetOfficialVerified publisher | 0.19.0 | 2 of 8See more | 7,686 |
| hatchet-stackhatchetOfficialVerified publisher | 0.19.0 | 2 of 8See more | 7,686 |
| web-charthcpark-ktcloudlab | 0.1.0 | 1 of 1See more | 1,956 |
Container images carrying it
881 by charts deploying them
A fixed version is listed for 0 of the 1 affected package.
| Container image | Digest | Package | Fixed in | Used by |
|---|---|---|---|---|
| bitnamilegacy/ | cb8beb6dbb58 | libxml2 | no fix listed | 1 |
| bitnamilegacy/ | f02c000c54b1 | libxml2 | no fix listed | 1 |
| bitnamilegacy/ | 934d1acd5ca8 | libxml2 | no fix listed | 1 |
| bitnamilegacy/ | eaf9066e86f6 | libxml2 | no fix listed | 1 |
| bitnamilegacy/ | 92356da09704 | libxml2 | no fix listed | 1 |
| bitnamilegacy/ | 02e2f47a405e | libxml2 | no fix listed | 1 |
| bitnamilegacy/ | 3332e81afb4f | libxml2 | no fix listed | 1 |
| bitnamilegacy/ | 3ba6e6f11388 | libxml2 | no fix listed | 1 |
| bitnamilegacy/ | 687034f33da6 | libxml2 | no fix listed | 1 |
| bitnamilegacy/ | 85198aae0aed | libxml2 | no fix listed | 1 |
| bitnamilegacy/ | 90fda44bfa42 | libxml2 | no fix listed | 1 |
| bitnamilegacy/ | cc55da2fa366 | libxml2 | no fix listed | 1 |
| bitnamilegacy/ | cf63048c9209 | libxml2 | no fix listed | 1 |
| bitnamilegacy/ | d885ac277163 | libxml2 | no fix listed | 1 |
| bitnamilegacy/ | e6fa49bb0347 | libxml2 | no fix listed | 1 |
| bitnamilegacy/ | ea55532b6f75 | libxml2 | no fix listed | 1 |
| bitnamilegacy/ | fb3806e823c2 | libxml2 | no fix listed | 1 |
| bitnamilegacy/ | fdc6979dbc53 | libxml2 | no fix listed | 1 |
| bitnami/ | 16a7dae804fb | libxml2 | no fix listed | 1 |
| blakeblackshear/ | ae269270ad9e | libxml2 | no fix listed | 1 |
| bloxstaking/ | bf6d7d2fdc93 | libxml2 | no fix listed | 1 |
| bnjbvr/ | 37e216b182c8 | libxml2 | no fix listed | 1 |
| boky/ | aafc77238423 | libxml2 | no fix listed | 1 |
| browserless/ | c81ae5585b47 | libxml2 | no fix listed | 1 |
| budibase/ | 8d780b6ee602 | libxml2 | no fix listed | 1 |
| camptocamp/ | bf2e8e118c9b | libxml2 | no fix listed | 1 |
| carbone/ | 518172cbad49 | libxml2 | no fix listed | 1 |
| carlosmz87/ | 8ffa63aa995d | libxml2 | no fix listed | 1 |
| castopod/ | 1fd37280cbb2 | libxml2 | no fix listed | 1 |
| castopod/ | 4e4f0440520f | libxml2 | no fix listed | 1 |
| ceresdb/ | 53b2d0dbba1f | libxml2 | no fix listed | 1 |
| checkmk/ | c11b422210c4 | libxml2 | no fix listed | 1 |
| chetangautamm/ | e7f7049e1544 | libxml2 | no fix listed | 1 |
| cheyang/ | 46cc34755493 | libxml2 | no fix listed | 1 |
| chiefonboarding/ | d0964135ea82 | libxml2 | no fix listed | 1 |
| chocobozzz/ | 052712130691 | libxml2 | no fix listed | 1 |
| chriseaton/ | 54c3384ce701 | libxml2 | no fix listed | 1 |
| ckulka/ | 434bdd162247 | libxml2 | no fix listed | 1 |
| cloudtooling/ | f4f04e0fc401 | libxml2 | no fix listed | 1 |
| cloudtooling/ | db89d95f1d14 | libxml2 | no fix listed | 1 |
| cloudve/ | af56e77ca587 | libxml2 | no fix listed | 1 |
| coturn/ | f4c2af06c3c5 | libxml2 | no fix listed | 1 |
| countly/ | e3c238248f99 | libxml2 | no fix listed | 1 |
| cspconsole/ | 46dda4a31bd6 | libxml2 | no fix listed | 1 |
| cybrarist/ | e9e2447ac666 | libxml2 | no fix listed | 1 |
| dachichang/ | 7ccac90a935e | libxml2 | no fix listed | 1 |
| dannielkil/ | 937993927694 | libxml2 | no fix listed | 1 |
| datamate/ | 2dd66b722464 | libxml2 | no fix listed | 1 |
| ddosify/ | a43c5155fa1c | libxml2 | no fix listed | 1 |
| ddosify/ | 3c11e3182652 | libxml2 | no fix listed | 1 |