StackRadar

CVE-2026-78409

High

Advisory

Published 2 Sept 2026In the index since 5 Sept 2026
Severity
High
worst across findings
CVSS
7.0
base score, highest
EPSS
0.001
2nd percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
2,544
of 17,813 indexed, latest versions
Container images
2,522
deployed by those charts
Fix available
1 of 2
affected packages

The matching OSV records carry no description.

Carried by container images the latest versions of 2,544 of 17,813 indexed charts deploy, on 2,522 images.

Affected packageAffected versionsFixed inImages
util-linuxdeb1:2.27.1-6ubuntu3.3, 1:2.38.1-5+deb12u1, 1:2.41.5-0+deb13u1+dhi3, 1:4.16.0-2+really2.41-5+45 moreno fix listed2,429
util-linuxapk2.42-r0, 2.42.1-r02.42.3-r093
OSV records
ALPINE-CVE-2026-78409DEBIAN-CVE-2026-78409UBUNTU-CVE-2026-78409

Charts affected

2,544 by stars
ChartLatestAffected imagesRadar Score

Container images carrying it

2,522 by charts deploying them

A fixed version is listed for 1 of the 2 affected packages.

Container imageDigestPackageFixed inUsed by
ghcr.io/stac-utils/stac-fastapi-pgstac:7.0.08b026c47cc1b
util-linux@2.41.5-0+deb13u1
no fix listed
1
ghcr.io/star-whale/server:0.6.158368359c8dd0
util-linux@2.34-0.1ubuntu9.3
no fix listed
1
ghcr.io/steadybit/agent:2.4.6d246bfa55f63
util-linux@2.41.5-0+deb13u1
no fix listed
1
ghcr.io/steadybit/extension-container:v1.8.1ae79f958b479
util-linux@2.41.5-0+deb13u1
no fix listed
1
ghcr.io/steadybit/extension-host:v1.8.103a5ef26aac5
util-linux@2.41.5-0+deb13u1
no fix listed
1
ghcr.io/stirling-tools/stirling-pdf:2.14.33b3670fce70b
util-linux@2.39.3-9ubuntu6.5
no fix listed
1
ghcr.io/streamingfast/firehose-core:v1.12.391fca773a63f
util-linux@2.39.3-9ubuntu6.3
no fix listed
1
ghcr.io/streamingfast/firehose-ethereum:v2.12.489969b78fb07
util-linux@2.39.3-9ubuntu6.3
no fix listed
1
ghcr.io/streamingfast/firehose-ethereum:v2.14.3bf816072380e
util-linux@2.39.3-9ubuntu6.3
no fix listed
1
ghcr.io/streamingfast/firehose-ethereum:v2.12.4-gethd7bdfa7b41da
util-linux@2.39.3-9ubuntu6.3
no fix listed
1
ghcr.io/streamingfast/go-ethereum:geth-v1.16.9-fh3.08e3cb38953a3
util-linux@2.39.3-9ubuntu6.4
no fix listed
1
ghcr.io/streamingfast/substreams-sink-kv:v2.3.026953ec68d5d
util-linux@2.34-0.1ubuntu9.6
no fix listed
1
ghcr.io/streamingfast/substreams-sink-noop:v1.4.0d7c43c3135c6
util-linux@2.34-0.1ubuntu9.6
no fix listed
1
ghcr.io/streamvisor/streamvisor:4.1.40bc598b2ac9a
util-linux@2.39.3-9ubuntu6.5
no fix listed
1
ghcr.io/strrl/wonder-mesh-net:v2026.629.0625b140372fd
util-linux@2.38.1-5+deb12u3
no fix listed
1
ghcr.io/substra/substra-backend:1.0.121967f54ec86
util-linux@2.39.3-9ubuntu6.2
no fix listed
1
ghcr.io/substra/substra-frontend:1.0.0e230e6ac0722
util-linux@1:2.38.1-5+deb12u1
no fix listed
1
ghcr.io/sudo-kraken/3d-printing-cost-calculators:v1.1.1220c5e4e1a3d
util-linux@2.38.1-5+deb12u3
no fix listed
1
ghcr.io/sudo-kraken/authentik-webfinger-proxy:v1.1.1e1351a977607
util-linux@2.38.1-5+deb12u3
no fix listed
1
ghcr.io/sudo-kraken/fantasy-dice-chamber:v1.3.299fd4cb0f4fe
util-linux@2.38.1-5+deb12u3
no fix listed
1
ghcr.io/sudo-kraken/finances-tracker:v1.1.1c73527cde81c
util-linux@2.38.1-5+deb12u3
no fix listed
1
ghcr.io/sudo-kraken/jf-pushover-webhook:v1.1.0ee9cf22a39ab
util-linux@2.38.1-5+deb12u3
no fix listed
1
ghcr.io/suwayomi/suwayomi-server:v2.3.2320d2c3218c7f9f
util-linux@2.39.3-9ubuntu6.5
no fix listed
1
ghcr.io/tarampampam/video-dl-bot:1.4.36daa2dc7556b
util-linux@2.41.5-0+deb13u1
no fix listed
1
ghcr.io/tauffer-consulting/domino-rest:latest8bf880fe8c73
util-linux@2.38.1-5+b1
no fix listed
1
ghcr.io/terminus-io/enforcer:v1.1.0f21b905610d6
util-linux@2.42.1-r0
2.42.3-r0
1
ghcr.io/theduffman85/crowdsec-web-ui:2026.8.3bfadbab9a72c
util-linux@2.41.5-0+deb13u1
no fix listed
1
ghcr.io/toeverything/affine:0.27.4b649f5ce2384
util-linux@2.38.1-5+deb12u3
no fix listed
1
ghcr.io/topolvm/pie:0.18.0aa467443e407
util-linux@2.37.2-4ubuntu3.5
no fix listed
1
ghcr.io/topolvm/topolvm-with-sidecar:0.41.170548dbe0c6a
util-linux@2.37.2-4ubuntu3.5
no fix listed
1
ghcr.io/topolvm/topolvm-with-sidecar:0.35.0b354978c440d
util-linux@2.37.2-4ubuntu3.4
no fix listed
1
ghcr.io/trow-registry/trow:0.10.075b7d2dcdb91
util-linux@2.41-5
no fix listed
1
ghcr.io/turbot/guardrails-agent-kubernetes:0.3.09d01bf9c9224
util-linux@2.39.3-9ubuntu6.1
no fix listed
1
ghcr.io/twigex/cospace:lateste5ecfd607e42
util-linux@2.38.1-5+deb12u3
no fix listed
1
ghcr.io/unique-ag/ai/search-proxy:2026.38.0aa6699b027bb
util-linux@2.41-5
no fix listed
1
ghcr.io/utkuozdemir/nvidia_gpu_exporter:1.5.0d75967a4dd72
util-linux@2.41.3-3ubuntu2
no fix listed
1
ghcr.io/vinny1892/octantis:latest45459c0910fc
util-linux@2.41-5
no fix listed
1
ghcr.io/virtuos/librechat_exporter:2.0.050ea1cf0086f
util-linux@2.38.1-5+deb12u3
no fix listed
1
ghcr.io/voxpupuli/container-puppetdb:7.18.0-v1.5.0a56dfe91f5b1
util-linux@2.37.2-4ubuntu3
no fix listed
1
ghcr.io/voxpupuli/container-puppetserver:7.17.0-v1.5.0916746209ac5
util-linux@2.37.2-4ubuntu3
no fix listed
1
ghcr.io/voxpupuli/puppetserver:8.7.0-main63873f3f698e
util-linux@2.37.2-4ubuntu3.4
no fix listed
1
ghcr.io/vshn/haproxy-with-mysql:1.0.0a3c27ee3fb2f
util-linux@2.38.1-5+b1
no fix listed
1
ghcr.io/wearefrank/frank-gateway:1.0.05ccf797ccdf1
util-linux@2.39.3-9ubuntu6.5
no fix listed
1
ghcr.io/wekan/ferretdb:latestebed9a5eaae0
util-linux@2.41.5-0+deb13u1
no fix listed
1
ghcr.io/wgbh-mla/chowda:main86ab9effd1a5
util-linux@2.41.5-0+deb13u1
no fix listed
1
ghcr.io/wgbh-mla/ov-wag:v1.1.06df27f944fe8
util-linux@2.38.1-5+deb12u3
no fix listed
1
ghcr.io/wgbh-mla/pbcore-util:pr-66e04659a3baa
util-linux@2.38.1-5+deb12u3
no fix listed
1
ghcr.io/wiremind/bitnami/keycloak:26.5.0-debian-12-r38622ea9e43c0
util-linux@2.38.1-5+deb12u3
no fix listed
1
ghcr.io/wiremind/bitnami/rabbitmq:4.2.2-debian-12-r11572e12bc93c
util-linux@2.38.1-5+deb12u3
no fix listed
1
ghcr.io/wiremind/bitnami/redis:8.4.0-debian-12-r31f0f7ddc4370
util-linux@2.38.1-5+deb12u3
no fix listed
1

syft 1.42.1 · advisories as of 19 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.