StackRadar

CVE-2026-76909

Low

Advisory

Published 22 Sept 2026In the index since 23 Sept 2026
Severity
Low
worst across findings
CVSS
2.1
base score, highest
EPSS
0.003
18th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
2
of 18,117 indexed, latest versions
Container images
2
deployed by those charts
Fix available
1 of 1
affected package

Unleash: CR-approval email renders user-controlled raw HTML

Carried by container images the latest versions of 2 of 18,117 indexed charts deploy, on 2 images.

Affected packageAffected versionsFixed inImages
unleash-servernpm7.5.08.0.32
OSV records
GHSA-7hvx-28gp-mf6j

Charts affected

2 by stars
ChartLatestAffected imagesRadar Score
unleashunleash5.6.81 of 2See more

unleash unleash 5.6.8

1 of the 2 container images this version deploys carry CVE-2026-76909.

Container imageDigestPackageFixed in
unleashorg/unleash-server:7.5.09adb37e399ba
unleash-server@7.5.0
8.0.3

Open the chart page →

2,491
unleash-enterpriseunleash1.0.31 of 1See more

unleash-enterprise unleash 1.0.3

1 of the 1 container images this version deploys carry CVE-2026-76909.

Container imageDigestPackageFixed in
unleashorg/unleash-enterprise:7.5.0245aeba40053
unleash-server@7.5.0
8.0.3

Open the chart page →

2,477

Container images carrying it

2 by charts deploying them

A fixed version is listed for 1 of the 1 affected package.

Container imageDigestPackageFixed inUsed by
unleashorg/unleash-enterprise:7.5.0245aeba40053
unleash-server@7.5.0
8.0.3
1
unleashorg/unleash-server:7.5.09adb37e399ba
unleash-server@7.5.0
8.0.3
1

syft 1.42.1 · advisories as of 14 Oct 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.