StackRadar

CVE-2026-76905

High

Advisory

Published 21 Aug 2026In the index since 5 Sept 2026
Severity
High
worst across findings
CVSS
7.5
base score, highest
EPSS
0.004
36th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
122
of 17,781 indexed, latest versions
Container images
113
deployed by those charts
Fix available
1 of 1
affected package

kin-openapi openai3filter: nil-pointer panic in ConvertErrors on malformed multipart/form-data body enables unauthenticated DoS

Carried by container images the latest versions of 122 of 17,781 indexed charts deploy, on 113 images.

Affected packageAffected versionsFixed inImages
github.com/getkin/kin-openapigolangv0.33.0, v0.53.0, v0.61.0, v0.66.0+27 more0.141.0113
OSV records
GHSA-mmfr-pmjx-hw9w
Also known as
GO-2026-6274

Charts affected

122 by stars
ChartLatestAffected imagesRadar Score
kubecostradar-baseVerified publisher1.0.01 of 7See more

kubecost radar-base 1.0.0

1 of the 7 container images this version deploys carry CVE-2026-76905.

Container imageDigestPackageFixed in
grafana/grafana:11.4.0d8ea37798ccc
github.com/getkin/kin-openapi@v0.125.0
0.141.0

Open the chart page →

9,355
radar-grafanaradar-baseVerified publisher0.1.41 of 2See more

radar-grafana radar-base 0.1.4

1 of the 2 container images this version deploys carry CVE-2026-76905.

Container imageDigestPackageFixed in
grafana/grafana:11.6.062d2b9d20a19
github.com/getkin/kin-openapi@v0.126.0
0.141.0

Open the chart page →

1,667
haproxy-loadbalanced-redisrivals-spaceVerified publisher0.1.21 of 3See more

haproxy-loadbalanced-redis rivals-space 0.1.2

1 of the 3 container images this version deploys carry CVE-2026-76905.

Container imageDigestPackageFixed in
haproxytech/haproxy-alpine:2.6.614e4afa90dfd
github.com/getkin/kin-openapi@v0.110.0
0.141.0

Open the chart page →

1,423
devtron-enterpriseromholdings48.0.01 of 28See more

devtron-enterprise romholdings 48.0.0

1 of the 28 container images this version deploys carry CVE-2026-76905.

Container imageDigestPackageFixed in
quay.io/devtron/silver-surfer:e3b9a2f6-1191-387899640e2dc4316
github.com/getkin/kin-openapi@v0.67.0
0.141.0

Open the chart page →

68,240
grafanasb-helm-charts0.4.01 of 1See more

grafana sb-helm-charts 0.4.0

1 of the 1 container images this version deploys carry CVE-2026-76905.

Container imageDigestPackageFixed in
grafana/grafana:12.2.22ebef928d7e5
github.com/getkin/kin-openapi@v0.132.0
0.141.0

Open the chart page →

1,795
hermitcrabseal-ioVerified publisher0.1.41 of 2See more

hermitcrab seal-io 0.1.4

1 of the 2 container images this version deploys carry CVE-2026-76905.

Container imageDigestPackageFixed in
sealio/hermitcrab:v0.1.4a326a2f03660
github.com/getkin/kin-openapi@v0.122.0
0.141.0

Open the chart page →

4,881
ccx-monitoringseveralnines0.6.211 of 7See more

ccx-monitoring severalnines 0.6.21

1 of the 7 container images this version deploys carry CVE-2026-76905.

Container imageDigestPackageFixed in
grafana/grafana:12.3.12175aaa91c96
github.com/getkin/kin-openapi@v0.133.0
0.141.0

Open the chart page →

7,708
cost-analyzersoftonic2.5.51 of 6See more

cost-analyzer softonic 2.5.5

1 of the 6 container images this version deploys carry CVE-2026-76905.

Container imageDigestPackageFixed in
grafana/grafana:11.5.28b37a2f028f1
github.com/getkin/kin-openapi@v0.126.0
0.141.0

Open the chart page →

7,901
kube-prometheus-stacksoftonic81.5.11 of 6See more

kube-prometheus-stack softonic 81.5.1

1 of the 6 container images this version deploys carry CVE-2026-76905.

Container imageDigestPackageFixed in
grafana/grafana:12.3.2ba93c9d192e5
github.com/getkin/kin-openapi@v0.133.0
0.141.0

Open the chart page →

4,974
redis-high-availabilitysomeblackmagic1.3.101 of 3See more

redis-high-availability someblackmagic 1.3.10

1 of the 3 container images this version deploys carry CVE-2026-76905.

Container imageDigestPackageFixed in
haproxytech/haproxy-alpine:2.9.57f3dc8c7e031
github.com/getkin/kin-openapi@v0.123.0
0.141.0

Open the chart page →

3,148
sn-platform-slimstreamnative1.11.441 of 6See more

sn-platform-slim streamnative 1.11.44

1 of the 6 container images this version deploys carry CVE-2026-76905.

Container imageDigestPackageFixed in
streamnative/apache-pulsar-grafana-dashboard-k8s:0.1.20e6d7aa3ef32
github.com/getkin/kin-openapi@v0.112.0
0.141.0

Open the chart page →

10,134
stunner-premiumstunner1.2.11 of 2See more

stunner-premium stunner 1.2.1

1 of the 2 container images this version deploys carry CVE-2026-76905.

Container imageDigestPackageFixed in
l7mp/stunner-gateway-operator-premium:1.2.14383766e66c5
github.com/getkin/kin-openapi@v0.133.0
0.141.0

Open the chart page →

263
surogate-hubsurogate-hubVerified publisher2.1.51 of 1See more

surogate-hub surogate-hub 2.1.5

1 of the 1 container images this version deploys carry CVE-2026-76905.

Container imageDigestPackageFixed in
ghcr.io/invergent-ai/surogate-hub:latest6d4106724d56
github.com/getkin/kin-openapi@v0.53.0
0.141.0

Open the chart page →

3,460
grafanasvtech-public-helm-charts1.0.01 of 2See more

grafana svtech-public-helm-charts 1.0.0

1 of the 2 container images this version deploys carry CVE-2026-76905.

Container imageDigestPackageFixed in
svtechnmaa/svtech_grafana:v1.2.21d71314424aa
github.com/getkin/kin-openapi@v0.112.0
0.141.0

Open the chart page →

10,902
monitoringthl-chartsVerified publisher0.1.11 of 10See more

monitoring thl-charts 0.1.1

1 of the 10 container images this version deploys carry CVE-2026-76905.

Container imageDigestPackageFixed in
grafana/grafana:8.5.042d3e6bc1865
github.com/getkin/kin-openapi@v0.94.0
0.141.0

Open the chart page →

18,908
truefoundry-monitoringtruefoundryVerified publisher0.1.61 of 8See more

truefoundry-monitoring truefoundry 0.1.6

1 of the 8 container images this version deploys carry CVE-2026-76905.

Container imageDigestPackageFixed in
grafana/grafana:12.3.070d9599b186c
github.com/getkin/kin-openapi@v0.133.0
0.141.0

Open the chart page →

4,526
tyk-dev-portaltyk-helm5.3.01 of 2See more

tyk-dev-portal tyk-helm 5.3.0

1 of the 2 container images this version deploys carry CVE-2026-76905.

Container imageDigestPackageFixed in
tykio/portal:v1.18.092509e00e618
github.com/getkin/kin-openapi@v0.132.0
0.141.0

Open the chart page →

867
typhoontyphoonVerified publisher0.2.32 of 2See more

typhoon typhoon 0.2.3

2 of the 2 container images this version deploys carry CVE-2026-76905.

Container imageDigestPackageFixed in
ghcr.io/zeiss/typhoon/controller:0.2.34fdf4edfda45
github.com/getkin/kin-openapi@v0.129.0
0.141.0
ghcr.io/zeiss/typhoon/typhoon-webhook:0.2.378f9b82050bc
github.com/getkin/kin-openapi@v0.129.0
0.141.0

Open the chart page →

1,672
wallarm-node-nextwallarmVerified publisher0.5.32 of 2See more

wallarm-node-next wallarm 0.5.3

2 of the 2 container images this version deploys carry CVE-2026-76905.

Container imageDigestPackageFixed in
wallarm/node-helpers:5.0.2-1097cadc42336
github.com/getkin/kin-openapi@v0.124.0
0.141.0
wallarm/node-next:0.5.24314f3d2b918
github.com/getkin/kin-openapi@v0.127.0
0.141.0

Open the chart page →

2,408
mesherywenerme1.0.691 of 1See more

meshery wenerme 1.0.69

1 of the 1 container images this version deploys carry CVE-2026-76905.

Container imageDigestPackageFixed in
meshery/meshery:stable-latest9b68e81d392e
github.com/getkin/kin-openapi@v0.140.0
0.141.0

Open the chart page →

1,407
victoria-metrics-k8s-stackwenerme0.92.11 of 7See more

victoria-metrics-k8s-stack wenerme 0.92.1

1 of the 7 container images this version deploys carry CVE-2026-76905.

Container imageDigestPackageFixed in
grafana/grafana:13.1.17cb8c64c4d57
github.com/getkin/kin-openapi@v0.140.0
0.141.0

Open the chart page →

1,889
ygdrassil-monitoringygdrassilVerified publisher0.4.01 of 10See more

ygdrassil-monitoring ygdrassil 0.4.0

1 of the 10 container images this version deploys carry CVE-2026-76905.

Container imageDigestPackageFixed in
grafana/grafana:11.5.15781759b3d27
github.com/getkin/kin-openapi@v0.126.0
0.141.0

Open the chart page →

9,381

Container images carrying it

113 by charts deploying them

A fixed version is listed for 1 of the 1 affected package.

Container imageDigestPackageFixed inUsed by
wallarm/node-next:0.5.24314f3d2b918
github.com/getkin/kin-openapi@v0.127.0
0.141.0
1
ghcr.io/aserto-dev/topaz:0.32.594c708ecf7dc4
github.com/getkin/kin-openapi@v0.129.0
0.141.0
1
ghcr.io/flatcar/nebraska:4.0.05c9e99ff7167
github.com/getkin/kin-openapi@v0.133.0
0.141.0
1
ghcr.io/invergent-ai/surogate-hub:latest6d4106724d56
github.com/getkin/kin-openapi@v0.53.0
0.141.0
1
ghcr.io/kubiyabot/tool-manager:0.5.80cca6760763a
github.com/getkin/kin-openapi@v0.127.0
0.141.0
1
ghcr.io/kubiyabot/workflow-engine:v1.46.2560a16a56d4e
github.com/getkin/kin-openapi@v0.132.0
0.141.0
1
ghcr.io/performancecopilot/archive-analysis:latest8de11e2363fc
github.com/getkin/kin-openapi@v0.131.0
0.141.0
1
ghcr.io/traefik/traefik-hub:v2.11.0322f5f8cc105
github.com/getkin/kin-openapi@v0.118.0
0.141.0
1
ghcr.io/vshn/haproxy-with-mysql:1.0.0a3c27ee3fb2f
github.com/getkin/kin-openapi@v0.118.0
0.141.0
1
ghcr.io/zeiss/typhoon/controller:0.2.34fdf4edfda45
github.com/getkin/kin-openapi@v0.129.0
0.141.0
1
ghcr.io/zeiss/typhoon/typhoon-webhook:0.2.378f9b82050bc
github.com/getkin/kin-openapi@v0.129.0
0.141.0
1
quay.io/everythingascode/apishift-backend:v0.3.014ff275b2e61
github.com/getkin/kin-openapi@v0.120.0
0.141.0
1
quay.io/opstree/grafana:12.4.3b61c1ed2f015
github.com/getkin/kin-openapi@v0.133.0
0.141.0
1

syft 1.42.1 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.