CVE-2026-82049

High

Advisory

Published 14 Sept 2026In the index since 15 Sept 2026

Severity: High; worst across findings
CVSS: 8.4; base score, highest
EPSS: —; probability of exploitation
CISA KEV: Not listed; no confirmed exploitation
Charts affected: 36; of 17,787 indexed, latest versions
Container images: 37; deployed by those charts
Fix available: None; affected packages

The matching OSV records carry no description.

Carried by container images the latest versions of 36 of 17,787 indexed charts deploy, on 37 images.

Affected package	Affected versions	Fixed in	Images
python3.11deb	3.11.2-6, 3.11.2-6+deb12u3, 3.11.2-6+deb12u4, 3.11.2-6+deb12u5+2 more	no fix listed	22
python3.13deb	3.13.5-2+deb13u2, 3.13.5-2+deb13u4, 3.13.5-2+deb13u5	no fix listed	15

OSV records: DEBIAN-CVE-2026-82049

Charts affected

36 by stars

Chart

Latest

Affected images

Radar Score

oneuptimeoneuptime

13.0.4

1 of 7 See more

oneuptime oneuptime 13.0.4

1 of the 7 container images this version deploys carry CVE-2026-82049.

Container image	Digest	Package	Fixed in
oneuptime/probe :release	6b2d98713711	python3.11@3.11.2-6+deb12u8	no fix listed

Open the chart page →

10,896

gitops-promotergitops-promoter

0.17.0

1 of 2 See more

gitops-promoter gitops-promoter 0.17.0

1 of the 2 container images this version deploys carry CVE-2026-82049.

Container image	Digest	Package	Fixed in
quay.io/argoprojlabs/gitops-promoter :v0.38.1	9c8a510dc25e	python3.13@3.13.5-2+deb13u4	no fix listed

Open the chart page →

2,800

cosmocosmo-platform

0.20.0

1 of 10 See more

cosmo cosmo-platform 0.20.0

1 of the 10 container images this version deploys carry CVE-2026-82049.

Container image	Digest	Package	Fixed in
ghcr.io/wundergraph/cosmo/otelcollector :0.18.1	5a6fe78d4d15	python3.11@3.11.2-6+deb12u5	no fix listed

Open the chart page →

27,984

music-assistantbdclark-helm-charts

0.4.13

1 of 1 See more

music-assistant bdclark-helm-charts 0.4.13

1 of the 1 container images this version deploys carry CVE-2026-82049.

Container image	Digest	Package	Fixed in
ghcr.io/music-assistant/server :2.10.3	885872224fa5	python3.13@3.13.5-2+deb13u4	no fix listed

Open the chart page →

3,617

dawarichcogitri

2.8.4

1 of 3 See more

dawarich cogitri 2.8.4

1 of the 3 container images this version deploys carry CVE-2026-82049.

Container image	Digest	Package	Fixed in
freikin/dawarich :1.14.5	11826c67e4b1	python3.13@3.13.5-2+deb13u5	no fix listed

Open the chart page →

5,650

harp-proxyharp

0.8.1

1 of 1 See more

harp-proxy harp 0.8.1

1 of the 1 container images this version deploys carry CVE-2026-82049.

Container image	Digest	Package	Fixed in
makersquad/harp-proxy :0.8.1	a40dd258c527	python3.11@3.11.2-6+deb12u5	no fix listed

Open the chart page →

6,092

sentry-k8ssentry-k8s

1.4.1

1 of 11 See more

sentry-k8s sentry-k8s 1.4.1

1 of the 11 container images this version deploys carry CVE-2026-82049.

Container image	Digest	Package	Fixed in
ghcr.io/getsentry/snuba :26.7.2	10f8d164109b	python3.13@3.13.5-2+deb13u4	no fix listed

Open the chart page →

16,194

unitycatalogunitycatalog

0.0.2

1 of 4 See more

unitycatalog unitycatalog 0.0.2

1 of the 4 container images this version deploys carry CVE-2026-82049.

Container image	Digest	Package	Fixed in
ghcr.io/sdwbgn/unitycatalog-helm/docker/unitycatalog-ui :0.2.1-5d668c1	ed07e7ca098d	python3.11@3.11.2-6+deb12u5	no fix listed

Open the chart page →

12,137

varnish-cachevarnish

1.1.1

1 of 1 See more

varnish-cache varnish 1.1.1

1 of the 1 container images this version deploys carry CVE-2026-82049.

Container image	Digest	Package	Fixed in
library/varnish :7.5.0	4d0bb287d87b	python3.11@3.11.2-6+deb12u5	no fix listed

Open the chart page →

4,022

wordpress-helmwordpress-helm

0.2.9

1 of 4 See more

wordpress-helm wordpress-helm 0.2.9

1 of the 4 container images this version deploys carry CVE-2026-82049.

Container image	Digest	Package	Fixed in
aapjeisbaas/wp-frankenphp :v0.2.2	6b261abc7fb0	python3.13@3.13.5-2+deb13u2	no fix listed

Open the chart page →

8,139

gotenbergadnoctem

0.5.0

1 of 1 See more

gotenberg adnoctem 0.5.0

1 of the 1 container images this version deploys carry CVE-2026-82049.

Container image	Digest	Package	Fixed in
gotenberg/gotenberg :8.37.0	f29984bd1e22	python3.13@3.13.5-2+deb13u4	no fix listed

Open the chart page →

5,491

uptime-kumaadnoctem

0.4.1

1 of 1 See more

uptime-kuma adnoctem 0.4.1

1 of the 1 container images this version deploys carry CVE-2026-82049.

Container image	Digest	Package	Fixed in
louislam/uptime-kuma :2.5.4	917318f9d7be	python3.11@3.11.2-6+deb12u7	no fix listed

Open the chart page →

29,687

esphomealexmorbo-esphome

1.0.0

1 of 1 See more

esphome alexmorbo-esphome 1.0.0

1 of the 1 container images this version deploys carry CVE-2026-82049.

Container image	Digest	Package	Fixed in
esphome/esphome :2024.12.2	b2c6322700ac	python3.11@3.11.2-6+deb12u4	no fix listed

Open the chart page →

5,898

assemblylineassemblyline

7.4.19

1 of 12 See more

assemblyline assemblyline 7.4.19

1 of the 12 container images this version deploys carry CVE-2026-82049.

Container image	Digest	Package	Fixed in
cccs/assemblyline-rust :4.7.4.stable19	c2f9619d9bcd	python3.11@3.11.2-6+deb12u8	no fix listed

Open the chart page →

12,092

smartorchestratorassist-iot-smart-orchestrator

4.0.0

3 of 14 See more

smartorchestrator assist-iot-smart-orchestrator 4.0.0

3 of the 14 container images this version deploys carry CVE-2026-82049.

Container image	Digest	Package	Fixed in
assistiot/smart-orchestrator_mcs :latest	7d6a0d534c7f	python3.11@3.11.2-6	no fix listed
assistiot/smart-orchestrator_scheduler :latest	38b003e55ff3	python3.11@3.11.2-6	no fix listed
assistiot/smart-orchestrator_scheduler_mc :latest	b1dbe4d62a03	python3.11@3.11.2-6	no fix listed

Open the chart page →

42,460

wyoming-piperbdclark-helm-charts

0.1.4

1 of 1 See more

wyoming-piper bdclark-helm-charts 0.1.4

1 of the 1 container images this version deploys carry CVE-2026-82049.

Container image	Digest	Package	Fixed in
rhasspy/wyoming-piper :2.5.2	7d39aafac409	python3.13@3.13.5-2+deb13u4	no fix listed

Open the chart page →

1,176

cohdicohdi

0.2.2

1 of 3 See more

cohdi cohdi 0.2.2

1 of the 3 container images this version deploys carry CVE-2026-82049.

Container image	Digest	Package	Fixed in
ghcr.io/cohdi/composable-dra-driver :v0.2.2	8c05f7366981	python3.13@3.13.5-2+deb13u2	no fix listed

Open the chart page →

3,680

damap-chartdamap

0.3.0

1 of 5 See more

damap-chart damap 0.3.0

1 of the 5 container images this version deploys carry CVE-2026-82049.

Container image	Digest	Package	Fixed in
gotenberg/gotenberg :8	f29984bd1e22	python3.13@3.13.5-2+deb13u4	no fix listed

Open the chart page →

13,859

nextcloudhelmforge

1.0.0

1 of 3 See more

nextcloud helmforge 1.0.0

1 of the 3 container images this version deploys carry CVE-2026-82049.

Container image	Digest	Package	Fixed in
library/nextcloud :34.0.4-apache	de4ad9389386	python3.13@3.13.5-2+deb13u4	no fix listed

Open the chart page →

7,041

paperlesshp

0.1.1

1 of 5 See more

paperless hp 0.1.1

1 of the 5 container images this version deploys carry CVE-2026-82049.

Container image	Digest	Package	Fixed in
gotenberg/gotenberg :8.34	67097317623a	python3.13@3.13.5-2+deb13u2	no fix listed

Open the chart page →

26,579

ibexaibexa

3.11.1

1 of 10 See more

ibexa ibexa 3.11.1

1 of the 10 container images this version deploys carry CVE-2026-82049.

Container image	Digest	Package	Fixed in
boky/postfix :4.4.0	f3f247fd4252	python3.11@3.11.2-6+deb12u5	no fix listed

Open the chart page →

5,770

intelowlintelowl-helm

6.6.1-01-06-2026

1 of 5 See more

intelowl intelowl-helm 6.6.1-01-06-2026

1 of the 5 container images this version deploys carry CVE-2026-82049.

Container image	Digest	Package	Fixed in
intelowlproject/intelowl :v6.6.1	0b22e547ea6b	python3.11@3.11.2-6	no fix listed

Open the chart page →

16,558

inventreeinventree

0.4.28

1 of 2 See more

inventree inventree 0.4.28

1 of the 2 container images this version deploys carry CVE-2026-82049.

Container image	Digest	Package	Fixed in
inventree/inventree :1.5.4	a946ec09da3e	python3.13@3.13.5-2+deb13u4	no fix listed

Open the chart page →

5,757

uptime-kumancsa

1.7.2

1 of 1 See more

uptime-kuma ncsa 1.7.2

1 of the 1 container images this version deploys carry CVE-2026-82049.

Container image	Digest	Package	Fixed in
louislam/uptime-kuma :2.5.4	917318f9d7be	python3.11@3.11.2-6+deb12u7	no fix listed

Open the chart page →

29,687

pod-birdspod-birds

0.1.0

1 of 1 See more

pod-birds pod-birds 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-82049.

Container image	Digest	Package	Fixed in
teknas09/bird-pod :latest	12a1fa85c4aa	python3.11@3.11.2-6	no fix listed

Open the chart page →

11,680

rawfile-localpvrawfile

0.15.2

1 of 6 See more

rawfile-localpv rawfile 0.15.2

1 of the 6 container images this version deploys carry CVE-2026-82049.

Container image	Digest	Package	Fixed in
openebs/rawfile-localpv :v0.15.2	a39ef27ea28b	python3.13@3.13.5-2+deb13u4	no fix listed

Open the chart page →

2,794

esphomeretsamedoc

2026.2.5

1 of 1 See more

esphome retsamedoc 2026.2.5

1 of the 1 container images this version deploys carry CVE-2026-82049.

Container image	Digest	Package	Fixed in
esphome/esphome :2024.3.0	9ab8cc88b28c	python3.11@3.11.2-6	no fix listed

Open the chart page →

6,562

runwhen-localrunwhen-contrib

0.6.17

1 of 3 See more

runwhen-local runwhen-contrib 0.6.17

1 of the 3 container images this version deploys carry CVE-2026-82049.

Container image	Digest	Package	Fixed in
ghcr.io/runwhen-contrib/runwhen-local :0.12.0	533ce58c6e02	python3.13@3.13.5-2+deb13u4	no fix listed

Open the chart page →

3,673

speedtestsantisbon

0.1.0

1 of 3 See more

speedtest santisbon 0.1.0

1 of the 3 container images this version deploys carry CVE-2026-82049.

Container image	Digest	Package	Fixed in
santisbon/speedtest :latest	8ee3a1697227	python3.11@3.11.2-6	no fix listed

Open the chart page →

11,314

spacecapybara-chartspacecapy

1.0.49

1 of 2 See more

spacecapybara-chart spacecapy 1.0.49

1 of the 2 container images this version deploys carry CVE-2026-82049.

Container image	Digest	Package	Fixed in
sashafefler/spacecapybara_app :latest	f96d7804c0ca	python3.11@3.11.2-6+deb12u3	no fix listed

Open the chart page →

11,243

stakefishstakefish

0.1.0

1 of 8 See more

stakefish stakefish 0.1.0

1 of the 8 container images this version deploys carry CVE-2026-82049.

Container image	Digest	Package	Fixed in
thongngo3301/stakefish :latest	a341af5976e3	python3.11@3.11.2-6	no fix listed

Open the chart page →

18,426

ssv-nodestakewise

2.2.0

1 of 2 See more

ssv-node stakewise 2.2.0

1 of the 2 container images this version deploys carry CVE-2026-82049.

Container image	Digest	Package	Fixed in
bloxstaking/ssv-node :v2.2.0	bf6d7d2fdc93	python3.11@3.11.2-6+deb12u5	no fix listed

Open the chart page →

6,531

surogate-hubsurogate-hub

2.1.5

1 of 1 See more

surogate-hub surogate-hub 2.1.5

1 of the 1 container images this version deploys carry CVE-2026-82049.

Container image	Digest	Package	Fixed in
ghcr.io/invergent-ai/surogate-hub :latest	6d4106724d56	python3.11@3.11.2-6+deb12u7	no fix listed

Open the chart page →

3,372

supabaseteochenglim

0.1.2

2 of 13 See more

supabase teochenglim 0.1.2

2 of the 13 container images this version deploys carry CVE-2026-82049.

Container image	Digest	Package	Fixed in
supabase/realtime :latest	d3aa0c86c7b3	python3.13@3.13.5-2+deb13u4	no fix listed
supabase/studio :latest	94a2a9d2906e	python3.11@3.11.2-6+deb12u8	no fix listed

Open the chart page →

9,469

speecht5test-opea

1.0.0

1 of 1 See more

speecht5 test-opea 1.0.0

1 of the 1 container images this version deploys carry CVE-2026-82049.

Container image	Digest	Package	Fixed in
opea/speecht5 :1.0	249afad3d268	python3.11@3.11.2-6+deb12u3	no fix listed

Open the chart page →

8,877

aih-scannerwallarm

2.7.11

1 of 2 See more

aih-scanner wallarm 2.7.11

1 of the 2 container images this version deploys carry CVE-2026-82049.

Container image	Digest	Package	Fixed in
wallarm/aih-scanner :2.7.11	f1cb26db1f5b	python3.13@3.13.5-2+deb13u4	no fix listed

Open the chart page →

3,906

Container images carrying it

37 by charts deploying them

A fixed version is listed for 0 of the 2 affected packages.

Container image	Digest	Package	Fixed in	Used by
gotenberg/gotenberg :8 :8.37.0	f29984bd1e22	python3.13@3.13.5-2+deb13u4	no fix listed	2
louislam/uptime-kuma :2.5.4	917318f9d7be	python3.11@3.11.2-6+deb12u7	no fix listed	2
aapjeisbaas/wp-frankenphp :v0.2.2	6b261abc7fb0	python3.13@3.13.5-2+deb13u2	no fix listed	1
assistiot/smart-orchestrator_mcs :latest	7d6a0d534c7f	python3.11@3.11.2-6	no fix listed	1
assistiot/smart-orchestrator_scheduler :latest	38b003e55ff3	python3.11@3.11.2-6	no fix listed	1
assistiot/smart-orchestrator_scheduler_mc :latest	b1dbe4d62a03	python3.11@3.11.2-6	no fix listed	1
bloxstaking/ssv-node :v2.2.0	bf6d7d2fdc93	python3.11@3.11.2-6+deb12u5	no fix listed	1
boky/postfix :4.4.0	f3f247fd4252	python3.11@3.11.2-6+deb12u5	no fix listed	1
cccs/assemblyline-rust :4.7.4.stable19	c2f9619d9bcd	python3.11@3.11.2-6+deb12u8	no fix listed	1
esphome/esphome :2024.3.0	9ab8cc88b28c	python3.11@3.11.2-6	no fix listed	1
esphome/esphome :2024.12.2	b2c6322700ac	python3.11@3.11.2-6+deb12u4	no fix listed	1
freikin/dawarich :1.14.5	11826c67e4b1	python3.13@3.13.5-2+deb13u5	no fix listed	1
gotenberg/gotenberg :8.34	67097317623a	python3.13@3.13.5-2+deb13u2	no fix listed	1
intelowlproject/intelowl :v6.6.1	0b22e547ea6b	python3.11@3.11.2-6	no fix listed	1
inventree/inventree :1.5.4	a946ec09da3e	python3.13@3.13.5-2+deb13u4	no fix listed	1
library/nextcloud :34.0.4-apache	de4ad9389386	python3.13@3.13.5-2+deb13u4	no fix listed	1
library/varnish :7.5.0	4d0bb287d87b	python3.11@3.11.2-6+deb12u5	no fix listed	1
makersquad/harp-proxy :0.8.1	a40dd258c527	python3.11@3.11.2-6+deb12u5	no fix listed	1
oneuptime/probe :release	6b2d98713711	python3.11@3.11.2-6+deb12u8	no fix listed	1
opea/speecht5 :1.0	249afad3d268	python3.11@3.11.2-6+deb12u3	no fix listed	1
openebs/rawfile-localpv :v0.15.2	a39ef27ea28b	python3.13@3.13.5-2+deb13u4	no fix listed	1
rhasspy/wyoming-piper :2.5.2	7d39aafac409	python3.13@3.13.5-2+deb13u4	no fix listed	1
santisbon/speedtest :latest	8ee3a1697227	python3.11@3.11.2-6	no fix listed	1
sashafefler/spacecapybara_app :latest	f96d7804c0ca	python3.11@3.11.2-6+deb12u3	no fix listed	1
supabase/realtime :latest	d3aa0c86c7b3	python3.13@3.13.5-2+deb13u4	no fix listed	1
supabase/studio :latest	94a2a9d2906e	python3.11@3.11.2-6+deb12u8	no fix listed	1
teknas09/bird-pod :latest	12a1fa85c4aa	python3.11@3.11.2-6	no fix listed	1
thongngo3301/stakefish :latest	a341af5976e3	python3.11@3.11.2-6	no fix listed	1
wallarm/aih-scanner :2.7.11	f1cb26db1f5b	python3.13@3.13.5-2+deb13u4	no fix listed	1
ghcr.io/cohdi/composable-dra-driver :v0.2.2	8c05f7366981	python3.13@3.13.5-2+deb13u2	no fix listed	1
ghcr.io/getsentry/snuba :26.7.2	10f8d164109b	python3.13@3.13.5-2+deb13u4	no fix listed	1
ghcr.io/invergent-ai/surogate-hub :latest	6d4106724d56	python3.11@3.11.2-6+deb12u7	no fix listed	1
ghcr.io/music-assistant/server :2.10.3	885872224fa5	python3.13@3.13.5-2+deb13u4	no fix listed	1
ghcr.io/runwhen-contrib/runwhen-local :0.12.0	533ce58c6e02	python3.13@3.13.5-2+deb13u4	no fix listed	1
ghcr.io/sdwbgn/unitycatalog-helm/docker/unitycatalog-ui :0.2.1-5d668c1	ed07e7ca098d	python3.11@3.11.2-6+deb12u5	no fix listed	1
ghcr.io/wundergraph/cosmo/otelcollector :0.18.1	5a6fe78d4d15	python3.11@3.11.2-6+deb12u5	no fix listed	1
quay.io/argoprojlabs/gitops-promoter :v0.38.1	9c8a510dc25e	python3.13@3.13.5-2+deb13u4	no fix listed	1