StackRadar

CVE-2026-77422

High

Advisory

Published 23 Sept 2026In the index since 24 Sept 2026
Severity
High
worst across findings
CVSS
7.5
base score, highest
EPSS
—
probability of exploitation
CISA KEV
Not listed
no confirmed exploitation
Charts affected
124
of 17,837 indexed, latest versions
Container images
107
deployed by those charts
Fix available
1 of 1
affected package

JLine: ReDoS in Built-in grep Command Amplified by Automatic `.*` Wrapping

Carried by container images the latest versions of 124 of 17,837 indexed charts deploy, on 107 images.

Affected packageAffected versionsFixed inImages
jline-builtinsmaven3.8.2, 3.9.0, 3.12.1, 3.13.1+16 more3.30.15, 4.3.1107
OSV records
GHSA-r2xf-8xr9-62gw

Charts affected

124 by stars
ChartLatestAffected imagesRadar Score
akto-mrs-runtime-combinedakto0.0.21 of 2See more

akto-mrs-runtime-combined akto 0.0.2

1 of the 2 container images this version deploys carry CVE-2026-77422.

Container imageDigestPackageFixed in
public.ecr.aws/aktosecurity/confluentinc-cp-kafka:8.1.0-1-ubi99026dbbf280d
jline-builtins@3.30.4
3.30.15

Open the chart page →

1,902
akto-protectionakto0.1.02 of 4See more

akto-protection akto 0.1.0

2 of the 4 container images this version deploys carry CVE-2026-77422.

Container imageDigestPackageFixed in
confluentinc/cp-kafka:6.2.11-1-ubi8ac776fad95a5
jline-builtins@3.12.1
3.30.15
confluentinc/cp-zookeeper:6.2.11-1-ubi8cae577096489
jline-builtins@3.12.1
3.30.15

Open the chart page →

11,425
akto-regional-setupakto1.4.01 of 9See more

akto-regional-setup akto 1.4.0

1 of the 9 container images this version deploys carry CVE-2026-77422.

Container imageDigestPackageFixed in
public.ecr.aws/aktosecurity/confluentinc-cp-kafka:8.2.28e01c0305844
jline-builtins@3.30.4
3.30.15

Open the chart page →

40,807
akto-runtimeakto0.1.81 of 2See more

akto-runtime akto 0.1.8

1 of the 2 container images this version deploys carry CVE-2026-77422.

Container imageDigestPackageFixed in
public.ecr.aws/aktosecurity/confluentinc-cp-kafka:8.2.2-1-ubi98e01c0305844
jline-builtins@3.30.4
3.30.15

Open the chart page →

1,401
akto-threat-backendakto0.1.51 of 2See more

akto-threat-backend akto 0.1.5

1 of the 2 container images this version deploys carry CVE-2026-77422.

Container imageDigestPackageFixed in
public.ecr.aws/aktosecurity/confluentinc-cp-kafka:8.2.2-1-ubi98e01c0305844
jline-builtins@3.30.4
3.30.15

Open the chart page →

1,434
akto-threat-clientakto0.2.01 of 2See more

akto-threat-client akto 0.2.0

1 of the 2 container images this version deploys carry CVE-2026-77422.

Container imageDigestPackageFixed in
public.ecr.aws/aktosecurity/confluentinc-cp-kafka:8.2.2-1-ubi98e01c0305844
jline-builtins@3.30.4
3.30.15

Open the chart page →

1,463
monitoringantmediaVerified publisher1.0.01 of 6See more

monitoring antmedia 1.0.0

1 of the 6 container images this version deploys carry CVE-2026-77422.

Container imageDigestPackageFixed in
confluentinc/cp-zookeeper:latest7610a50b13e7
jline-builtins@3.25.1
3.30.15

Open the chart page →

2,380
apache-iotdbapache-iotdb-single-nodeVerified publisher0.1.01 of 1See more

apache-iotdb apache-iotdb-single-node 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-77422.

Container imageDigestPackageFixed in
apache/iotdb:0.11.28647309f95d1
jline-builtins@3.16.0
3.30.15

Open the chart page →

5,281
inbox-serverappscodeVerified publisher2025.12.251 of 1See more

inbox-server appscode 2025.12.25

1 of the 1 container images this version deploys carry CVE-2026-77422.

Container imageDigestPackageFixed in
ghcr.io/appscode/inbox-server:postgres-latest536358d7b17e
jline-builtins@3.26.3
3.30.15

Open the chart page →

4,141
inbox-server-distributedappscodeVerified publisher2025.12.252 of 4See more

inbox-server-distributed appscode 2025.12.25

2 of the 4 container images this version deploys carry CVE-2026-77422.

Container imageDigestPackageFixed in
opensearchproject/opensearch:2.1.04254021a8c71
jline-builtins@3.21.0
3.30.15
ghcr.io/appscode/inbox-server:latest536358d7b17e
jline-builtins@3.26.3
3.30.15

Open the chart page →

16,082
james-komposeappscodeVerified publisher0.1.02 of 4See more

james-kompose appscode 0.1.0

2 of the 4 container images this version deploys carry CVE-2026-77422.

Container imageDigestPackageFixed in
opensearchproject/opensearch:2.1.04254021a8c71
jline-builtins@3.21.0
3.30.15
ghcr.io/appscode/inbox-server:MailetGroup4a2824296412
jline-builtins@3.22.0
3.30.15

Open the chart page →

17,465
automatedconfigurationassist-iot-automated-configuration1.0.03 of 5See more

automatedconfiguration assist-iot-automated-configuration 1.0.0

3 of the 5 container images this version deploys carry CVE-2026-77422.

Container imageDigestPackageFixed in
assistiot/automated_configuration:latest23f195a7a26a
jline-builtins@3.19.0
3.30.15
confluentinc/cp-kafka:7.5.1dc9b972db002
jline-builtins@3.22.0
3.30.15
confluentinc/cp-zookeeper:7.5.10bec03c1f3ce
jline-builtins@3.22.0
3.30.15

Open the chart page →

15,060
sdn-controllerassist-iot-sdn-controller2.4.01 of 1See more

sdn-controller assist-iot-sdn-controller 2.4.0

1 of the 1 container images this version deploys carry CVE-2026-77422.

Container imageDigestPackageFixed in
assistiot/sdn_controller:2.4.0ea254b6d8a31
jline-builtins@3.19.0
3.30.15

Open the chart page →

8,087
kafkacagriekinVerified publisher0.2.01 of 2See more

kafka cagriekin 0.2.0

1 of the 2 container images this version deploys carry CVE-2026-77422.

Container imageDigestPackageFixed in
apache/kafka:4.1.0bff074a5d005
jline-builtins@3.30.4
3.30.15

Open the chart page →

2,424
opensearch-singlenodecaptnbpVerified publisher1.0.91 of 2See more

opensearch-singlenode captnbp 1.0.9

1 of the 2 container images this version deploys carry CVE-2026-77422.

Container imageDigestPackageFixed in
opensearchproject/opensearch:2.15.01963b3ece46d
jline-builtins@3.21.0
3.30.15

Open the chart page →

1,186
sumoconsensys0.4.1451 of 4See more

sumo consensys 0.4.145

1 of the 4 container images this version deploys carry CVE-2026-77422.

Container imageDigestPackageFixed in
confluentinc/cp-kafka:7.1.2.amd643bf359d5e340
jline-builtins@3.12.1
3.30.15

Open the chart page →

6,034
cp-helm-chartscp-helm-charts0.6.11 of 8See more

cp-helm-charts cp-helm-charts 0.6.1

1 of the 8 container images this version deploys carry CVE-2026-77422.

Container imageDigestPackageFixed in
confluentinc/cp-ksqldb-server:6.1.0ee403d5b9090
jline-builtins@3.13.1
3.30.15

Open the chart page →

59,429
nifi-registryd4nVerified publisher1.0.01 of 2See more

nifi-registry d4n 1.0.0

1 of the 2 container images this version deploys carry CVE-2026-77422.

Container imageDigestPackageFixed in
apache/nifi-registry:1.26.07cdfd8deec92
jline-builtins@3.25.1
3.30.15

Open the chart page →

5,571
infrafibonacci-cluster-infraVerified publisher1.0.01 of 4See more

infra fibonacci-cluster-infra 1.0.0

1 of the 4 container images this version deploys carry CVE-2026-77422.

Container imageDigestPackageFixed in
apache/activemq-artemis:2.37.0bae523439ee3
jline-builtins@3.26.3
3.30.15

Open the chart page →

12,765
flyteconnectorflyte2.0.01 of 1See more

flyteconnector flyte 2.0.0

1 of the 1 container images this version deploys carry CVE-2026-77422.

Container imageDigestPackageFixed in
ghcr.io/flyteorg/flyte-connectors:py3.12-v2.3.6896fc7b18b1b
jline-builtins@3.9.0
3.30.15

Open the chart page →

3,650
flyte-devboxflyte0.1.01 of 14See more

flyte-devbox flyte 0.1.0

1 of the 14 container images this version deploys carry CVE-2026-77422.

Container imageDigestPackageFixed in
ghcr.io/flyteorg/flyte-connectors:py3.12-v2.3.6896fc7b18b1b
jline-builtins@3.9.0
3.30.15

Open the chart page →

8,325
accumulogaffer2.2.11 of 4See more

accumulo gaffer 2.2.1

1 of the 4 container images this version deploys carry CVE-2026-77422.

Container imageDigestPackageFixed in
gchq/accumulo:2.0.1c460bb587d6d
jline-builtins@3.9.0
3.30.15

Open the chart page →

17,261
openhabgeek-cookbookVerified publisher1.5.21 of 1See more

openhab geek-cookbook 1.5.2

1 of the 1 container images this version deploys carry CVE-2026-77422.

Container imageDigestPackageFixed in
openhab/openhab:3.2.0d0aa4af452c1
jline-builtins@3.21.0
3.30.15

Open the chart page →

2,910
kafkagengxiankun-charts0.2.01 of 1See more

kafka gengxiankun-charts 0.2.0

1 of the 1 container images this version deploys carry CVE-2026-77422.

Container imageDigestPackageFixed in
wurstmeister/kafka:latest2d4bbf9cc83d
jline-builtins@3.12.1
3.30.15

Open the chart page →

4,579
opentelemetry-demogpg-dev0.33.82 of 27See more

opentelemetry-demo gpg-dev 0.33.8

2 of the 27 container images this version deploys carry CVE-2026-77422.

Container imageDigestPackageFixed in
opensearchproject/opensearch:2.18.07f6fa1efee8f
jline-builtins@3.21.0
3.30.15
ghcr.io/open-telemetry/demo:1.12.0-kafka071a788162e8
jline-builtins@3.22.0
3.30.15

Open the chart page →

50,346
gravitino-iceberg-rest-server-helmgravitino-iceberg-rest-server1.3.111 of 1See more

gravitino-iceberg-rest-server-helm gravitino-iceberg-rest-server 1.3.11

1 of the 1 container images this version deploys carry CVE-2026-77422.

Container imageDigestPackageFixed in
apache/gravitino-iceberg-rest:1.3.080136ae753ee
jline-builtins@3.9.0
3.30.15

Open the chart page →

4,775
gridgain9gridgainVerified publisher1.1.101 of 2See more

gridgain9 gridgain 1.1.10

1 of the 2 container images this version deploys carry CVE-2026-77422.

Container imageDigestPackageFixed in
gridgain/gridgain9:9.1.1895018390077b
jline-builtins@3.29.0
3.30.15

Open the chart page →

3,320
hazelcast-jethazelcastVerified publisher1.17.11 of 1See more

hazelcast-jet hazelcast 1.17.1

1 of the 1 container images this version deploys carry CVE-2026-77422.

Container imageDigestPackageFixed in
hazelcast/hazelcast-jet:4.5.3a825ecbe9fda
jline-builtins@3.9.0
3.30.15

Open the chart page →

6,124
hbasehbase0.1.71 of 4See more

hbase hbase 0.1.7

1 of the 4 container images this version deploys carry CVE-2026-77422.

Container imageDigestPackageFixed in
ghcr.io/fleeksoft/hbase/hdfs:3.3.3.2ac62269785ac
jline-builtins@3.9.0
3.30.15

Open the chart page →

10,568
helm-airportshelm-airports0.1.01 of 7See more

helm-airports helm-airports 0.1.0

1 of the 7 container images this version deploys carry CVE-2026-77422.

Container imageDigestPackageFixed in
wurstmeister/kafka:latest2d4bbf9cc83d
jline-builtins@3.12.1
3.30.15

Open the chart page →

12,679
airports-kafkahelm-airports-dan0.1.01 of 2See more

airports-kafka helm-airports-dan 0.1.0

1 of the 2 container images this version deploys carry CVE-2026-77422.

Container imageDigestPackageFixed in
wurstmeister/kafka:latest2d4bbf9cc83d
jline-builtins@3.12.1
3.30.15

Open the chart page →

4,579
helm-airportshelm-airports-dan0.1.01 of 7See more

helm-airports helm-airports-dan 0.1.0

1 of the 7 container images this version deploys carry CVE-2026-77422.

Container imageDigestPackageFixed in
wurstmeister/kafka:latest2d4bbf9cc83d
jline-builtins@3.12.1
3.30.15

Open the chart page →

5,606
airports-kafkahelm-airports-kafka0.1.01 of 2See more

airports-kafka helm-airports-kafka 0.1.0

1 of the 2 container images this version deploys carry CVE-2026-77422.

Container imageDigestPackageFixed in
wurstmeister/kafka:latest2d4bbf9cc83d
jline-builtins@3.12.1
3.30.15

Open the chart page →

4,579
ckanhelmforgeVerified publisher1.3.81 of 6See more

ckan helmforge 1.3.8

1 of the 6 container images this version deploys carry CVE-2026-77422.

Container imageDigestPackageFixed in
ckan/ckan-solr:2.11-solr9ef8e5d3e6be1
jline-builtins@3.9.0
3.30.15

Open the chart page →

9,431
druidhelmforgeVerified publisher1.3.62 of 4See more

druid helmforge 1.3.6

2 of the 4 container images this version deploys carry CVE-2026-77422.

Container imageDigestPackageFixed in
apache/druid:37.0.00116fb802786
jline-builtins@3.9.0
3.30.15
library/zookeeper:3.9.57d0f24ebb67b
jline-builtins@3.25.1
3.30.15

Open the chart page →

8,317
zookeeperhelmforgeVerified publisher1.0.21 of 1See more

zookeeper helmforge 1.0.2

1 of the 1 container images this version deploys carry CVE-2026-77422.

Container imageDigestPackageFixed in
library/zookeeper:3.9.57d0f24ebb67b
jline-builtins@3.25.1
3.30.15

Open the chart page →

3,058
openbashelm-openbasVerified publisher1.8.141 of 7See more

openbas helm-openbas 1.8.14

1 of the 7 container images this version deploys carry CVE-2026-77422.

Container imageDigestPackageFixed in
opensearchproject/opensearch:3.3.2798cf28e226a
jline-builtins@3.21.0
3.30.15

Open the chart page →

25,725
nexus3huangchengwu-helm-chart0.1.01 of 1See more

nexus3 huangchengwu-helm-chart 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-77422.

Container imageDigestPackageFixed in
sonatype/nexus3:3.53.04bd975493104
jline-builtins@3.21.0
3.30.15

Open the chart page →

4,531
ikigaiikigai-chartVerified publisher0.0.91 of 58See more

ikigai ikigai-chart 0.0.9

1 of the 58 container images this version deploys carry CVE-2026-77422.

Container imageDigestPackageFixed in
dremio/dremio-oss:24.1.080ed2e3b7c43
jline-builtins@3.9.0
3.30.15

Open the chart page →

111,245
nifi-registryimprowisedVerified publisher1.0.01 of 2See more

nifi-registry improwised 1.0.0

1 of the 2 container images this version deploys carry CVE-2026-77422.

Container imageDigestPackageFixed in
apache/nifi-registry:1.27.063b8e3e40742
jline-builtins@3.25.1
3.30.15

Open the chart page →

5,494
itm-mqtt-brokerintelVerified publisher1.0.01 of 1See more

itm-mqtt-broker intel 1.0.0

1 of the 1 container images this version deploys carry CVE-2026-77422.

Container imageDigestPackageFixed in
hivemq/hivemq4:dns-4.5.144d194450d48e
jline-builtins@3.21.0
3.30.15

Open the chart page →

2,677
nexusjenkins-x0.1.371 of 1See more

nexus jenkins-x 0.1.37

1 of the 1 container images this version deploys carry CVE-2026-77422.

Container imageDigestPackageFixed in
ghcr.io/jenkins-x/nexus:0.1.378caf5289fe73
jline-builtins@3.14.1
3.30.15

Open the chart page →

12,945
hertzbeatkubesphere-carryon-test1.4.11 of 4See more

hertzbeat kubesphere-carryon-test 1.4.1

1 of the 4 container images this version deploys carry CVE-2026-77422.

Container imageDigestPackageFixed in
apache/iotdb:0.13.3-nodeafa47bf1692a
jline-builtins@3.21.0
3.30.15

Open the chart page →

7,848
streamsmicroslacVerified publisher0.1.04 of 6See more

streams microslac 0.1.0

4 of the 6 container images this version deploys carry CVE-2026-77422.

Container imageDigestPackageFixed in
confluentinc/cp-kafka:7.6.024cdd3a7fa89
jline-builtins@3.22.0
3.30.15
confluentinc/cp-ksqldb-cli:7.6.0118cec1c87e2
jline-builtins@3.13.1
3.30.15
confluentinc/ksqldb-server:latest1a3266adff1a
jline-builtins@3.13.1
3.30.15
microslac/kafka-connect:latesta90091a1f524
jline-builtins@3.22.0
3.30.15

Open the chart page →

20,046
account-lookup-servicemojaloop13.0.01 of 4See more

account-lookup-service mojaloop 13.0.0

1 of the 4 container images this version deploys carry CVE-2026-77422.

Container imageDigestPackageFixed in
solsson/kafka:latest41e5d8f6f290
jline-builtins@3.21.0
3.30.15

Open the chart page →

11,922
account-lookup-service-adminmojaloop13.0.01 of 4See more

account-lookup-service-admin mojaloop 13.0.0

1 of the 4 container images this version deploys carry CVE-2026-77422.

Container imageDigestPackageFixed in
solsson/kafka:latest41e5d8f6f290
jline-builtins@3.21.0
3.30.15

Open the chart page →

11,922
admin-api-svcmojaloop12.0.01 of 4See more

admin-api-svc mojaloop 12.0.0

1 of the 4 container images this version deploys carry CVE-2026-77422.

Container imageDigestPackageFixed in
solsson/kafka:latest41e5d8f6f290
jline-builtins@3.21.0
3.30.15

Open the chart page →

12,337
backendmojaloop0.1.01 of 6See more

backend mojaloop 0.1.0

1 of the 6 container images this version deploys carry CVE-2026-77422.

Container imageDigestPackageFixed in
bitnamilegacy/kafka:2.8.1-debian-11-r7b6e381ffd6ae
jline-builtins@3.12.1
3.30.15

Open the chart page →

16,397
fspiop-transfer-api-svcmojaloop12.0.11 of 3See more

fspiop-transfer-api-svc mojaloop 12.0.1

1 of the 3 container images this version deploys carry CVE-2026-77422.

Container imageDigestPackageFixed in
solsson/kafka:latest41e5d8f6f290
jline-builtins@3.21.0
3.30.15

Open the chart page →

11,706
mojaloopmojaloop14.0.01 of 6See more

mojaloop mojaloop 14.0.0

1 of the 6 container images this version deploys carry CVE-2026-77422.

Container imageDigestPackageFixed in
solsson/kafka:latest41e5d8f6f290
jline-builtins@3.21.0
3.30.15

Open the chart page →

19,483

Container images carrying it

107 by charts deploying them

A fixed version is listed for 1 of the 1 affected package.

Container imageDigestPackageFixed inUsed by
ghcr.io/punchplatform/punchline-java:8.1.1d46ce7b96482
jline-builtins@3.9.0
3.30.15
1
ghcr.io/quenchworks/images/kafka1fd1397ae1f7
jline-builtins@4.2.1
4.3.1
1
ghcr.io/quenchworks/images/opensearch03e845cab860
jline-builtins@3.21.0
3.30.15
1
ghcr.io/quenchworks/images/pulsar5bd32914943e
jline-builtins@4.2.1
4.3.1
1
ghcr.io/quenchworks/images/zookeeper72cc69246c76
jline-builtins@3.30.14
3.30.15
1
public.ecr.aws/aktosecurity/confluentinc-cp-kafka:8.1.0-1-ubi99026dbbf280d
jline-builtins@3.30.4
3.30.15
1
public.ecr.aws/v0r6c2e2/hive-metastore:latest794b3bff9510
jline-builtins@3.9.0
3.30.15
1

syft 1.42.1 · advisories as of 24 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.