StackRadar

CVE-2026-8212

Medium

Advisory

Published 9 May 2026In the index since 5 Sept 2026
Severity
Medium
worst across findings
CVSS
5.5
base score, highest
EPSS
0.002
11th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
90
of 17,781 indexed, latest versions
Container images
62
deployed by those charts
Fix available
3 of 4
affected packages

OSGeo gdal SWapi.c SWSDfldsrch heap-based overflow

Carried by container images the latest versions of 90 of 17,781 indexed charts deploy, on 62 images.

Affected packageAffected versionsFixed inImages
gdaldeb2.4.0+10-0bionic1, 3.0.4+dfsg-1build3, 3.4.1+dfsg-1build4, 3.6.2+dfsg-1+b2+5 moreno fix listed21
gdalpypi2.4.0, 3.0.4, 3.2.2, 3.3.0+9 more3.13.0RC120
gdalbitnami3.9.0, 3.9.2, 3.9.3, 3.10.0+5 more3.13.018
GDALbitnami3.7.0, 3.7.1, 3.7.2, 3.8.1+3 more3.13.011
OSV records
BIT-gdal-2026-8212DEBIAN-CVE-2026-8212GHSA-r5m4-5vww-w9f5UBUNTU-CVE-2026-8212
Also known as
PYSEC-2026-4

Charts affected

90 by stars
ChartLatestAffected imagesRadar Score
airflowapache-airflowOfficialVerified publisher1.22.01 of 4See more

airflow apache-airflow 1.22.0

1 of the 4 container images this version deploys carry CVE-2026-8212.

Container imageDigestPackageFixed in
bitnamilegacy/postgresql:16.1.0-debian-11-r1529e3dd0e7e7a
GDAL@3.8.1
3.13.0

Open the chart page →

3,195
giteagiteaOfficialVerified publisher12.7.01 of 4See more

gitea gitea 12.7.0

1 of the 4 container images this version deploys carry CVE-2026-8212.

Container imageDigestPackageFixed in
bitnamilegacy/postgresql-repmgr:17.6.0-debian-12-r2f12387ec882b
gdal@3.11.3
3.13.0

Open the chart page →

8,811
weblateweblateOfficialVerified publisher0.5.361 of 3See more

weblate weblate 0.5.36

1 of the 3 container images this version deploys carry CVE-2026-8212.

Container imageDigestPackageFixed in
bitnamilegacy/postgresql:latest42a8200d3597
gdal@3.11.3
3.13.0

Open the chart page →

6,699
difydoubanVerified publisher0.10.01 of 6See more

dify douban 0.10.0

1 of the 6 container images this version deploys carry CVE-2026-8212.

Container imageDigestPackageFixed in
bitnamilegacy/postgresql:16.3.0-debian-12-r43332e81afb4f
GDAL@3.9.0
3.13.0

Open the chart page →

19,391
difydify-helmVerified publisher0.38.01 of 11See more

dify dify-helm 0.38.0

1 of the 11 container images this version deploys carry CVE-2026-8212.

Container imageDigestPackageFixed in
bitnamilegacy/postgresql:15.3.0-debian-11-r7cc301eef7436
GDAL@3.7.0
3.13.0

Open the chart page →

22,002
openprojectopenproject-helm-chartsOfficialVerified publisher13.11.01 of 5See more

openproject openproject-helm-charts 13.11.0

1 of the 5 container images this version deploys carry CVE-2026-8212.

Container imageDigestPackageFixed in
bitnamilegacy/postgresql:15.4.0-debian-11-r455dba7e6a514d
GDAL@3.7.2
3.13.0

Open the chart page →

19,926
stacks-blockchain-apihirosystemsVerified publisher6.5.11 of 5See more

stacks-blockchain-api hirosystems 6.5.1

1 of the 5 container images this version deploys carry CVE-2026-8212.

Container imageDigestPackageFixed in
bitnamilegacy/postgresql:15.4.0-debian-11-r455dba7e6a514d
GDAL@3.7.2
3.13.0

Open the chart page →

8,364
litellm-helmlitellm1.100.11 of 2See more

litellm-helm litellm 1.100.1

1 of the 2 container images this version deploys carry CVE-2026-8212.

Container imageDigestPackageFixed in
bitnamilegacy/postgresql:16.2.0-debian-12-r6ea55532b6f75
GDAL@3.8.4
3.13.0

Open the chart page →

5,003
flagsmithflagsmithOfficialVerified publisher0.83.01 of 4See more

flagsmith flagsmith 0.83.0

1 of the 4 container images this version deploys carry CVE-2026-8212.

Container imageDigestPackageFixed in
bitnamilegacy/postgresql:15.3.0-debian-11-r7cc301eef7436
GDAL@3.7.0
3.13.0

Open the chart page →

2,110
prefect-serverprefectVerified publisher2026.9.32126051 of 2See more

prefect-server prefect 2026.9.3212605

1 of the 2 container images this version deploys carry CVE-2026-8212.

Container imageDigestPackageFixed in
bitnamilegacy/postgresql:14.13.0df6ec02e2b9a
gdal@3.10.0
3.13.0

Open the chart page →

5,786
ilumilumOfficialVerified publisher6.7.32 of 19See more

ilum ilum 6.7.3

2 of the 19 container images this version deploys carry CVE-2026-8212.

Container imageDigestPackageFixed in
bitnamilegacy/postgresql:16.1.0-debian-11-r2504f3b0dfdb15
GDAL@3.8.3
3.13.0
bitnamilegacy/postgresql:16233f361c5819
gdal@3.10.0
3.13.0

Open the chart page →

23,228
paperless-ngxpaperless-ngxVerified publisher0.3.221 of 3See more

paperless-ngx paperless-ngx 0.3.22

1 of the 3 container images this version deploys carry CVE-2026-8212.

Container imageDigestPackageFixed in
bitnamilegacy/postgresql:17.6.0-debian-12-r4926356130b77
gdal@3.11.3
3.13.0

Open the chart page →

8,489
convoyconvoyVerified publisher3.7.131 of 3See more

convoy convoy 3.7.13

1 of the 3 container images this version deploys carry CVE-2026-8212.

Container imageDigestPackageFixed in
bitnamilegacy/postgresql:17.6.0-debian-12-r4926356130b77
gdal@3.11.3
3.13.0

Open the chart page →

5,896
photoprismandrenarchyVerified publisher8.15.01 of 1See more

photoprism andrenarchy 8.15.0

1 of the 1 container images this version deploys carry CVE-2026-8212.

Container imageDigestPackageFixed in
photoprism/photoprism:260728958642220223
gdal@3.12.2+dfsg-1build2
no fix listed

Open the chart page →

8,825
baserowbaserow-chartVerified publisher1.0.561 of 6See more

baserow baserow-chart 1.0.56

1 of the 6 container images this version deploys carry CVE-2026-8212.

Container imageDigestPackageFixed in
bitnamilegacy/postgresql:16.4.0-debian-12-r1494bc968141e7
gdal@3.9.2
3.13.0

Open the chart page →

17,263
headwind-mdmchristianhuthVerified publisher5.10.11 of 2See more

headwind-mdm christianhuth 5.10.1

1 of the 2 container images this version deploys carry CVE-2026-8212.

Container imageDigestPackageFixed in
bitnamilegacy/postgresql:17.6.0-debian-12-r4926356130b77
gdal@3.11.3
3.13.0

Open the chart page →

5,870
infrahubinfrahubVerified publisher4.33.21 of 5See more

infrahub infrahub 4.33.2

1 of the 5 container images this version deploys carry CVE-2026-8212.

Container imageDigestPackageFixed in
bitnamilegacy/postgresql:14.13.0df6ec02e2b9a
gdal@3.10.0
3.13.0

Open the chart page →

10,428
librechatlibrechat-openshiftVerified publisher1.9.01 of 3See more

librechat librechat-openshift 1.9.0

1 of the 3 container images this version deploys carry CVE-2026-8212.

Container imageDigestPackageFixed in
ghcr.io/bat-bs/bitnami-pgvector:pg1619ebe07b4daf
gdal@3.10.0
3.13.0

Open the chart page →

5,779
cosmocosmo-platformOfficialVerified publisher0.20.01 of 10See more

cosmo cosmo-platform 0.20.0

1 of the 10 container images this version deploys carry CVE-2026-8212.

Container imageDigestPackageFixed in
bitnamilegacy/postgresql:15.4.0-debian-11-r455dba7e6a514d
GDAL@3.7.2
3.13.0

Open the chart page →

28,839
infrahub-enterpriseinfrahub-enterpriseVerified publisher4.19.21 of 5See more

infrahub-enterprise infrahub-enterprise 4.19.2

1 of the 5 container images this version deploys carry CVE-2026-8212.

Container imageDigestPackageFixed in
bitnamilegacy/postgresql:14.13.0df6ec02e2b9a
gdal@3.10.0
3.13.0

Open the chart page →

10,530
nebraskanebraska3.0.01 of 2See more

nebraska nebraska 3.0.0

1 of the 2 container images this version deploys carry CVE-2026-8212.

Container imageDigestPackageFixed in
bitnamilegacy/postgresql:17.5.042a8200d3597
gdal@3.11.3
3.13.0

Open the chart page →

4,060
kobotoolboxone-acre-fundVerified publisher0.7.42 of 9See more

kobotoolbox one-acre-fund 0.7.4

2 of the 9 container images this version deploys carry CVE-2026-8212.

Container imageDigestPackageFixed in
kobotoolbox/kobocat:2.022.24ab15679454415
gdal@3.2.2
3.13.0RC1
kobotoolbox/kpi:2.022.24dbcacc01bccd4
gdal@3.2.2
3.13.0RC1

Open the chart page →

18,517
open-zaakopen-zaak0.8.01 of 3See more

open-zaak open-zaak 0.8.0

1 of the 3 container images this version deploys carry CVE-2026-8212.

Container imageDigestPackageFixed in
openzaak/open-zaak:1.6.02ca2ea6e0ae9
gdal@3.2.2
3.13.0RC1

Open the chart page →

4,045
nominatimrobjuz6.4.12 of 4See more

nominatim robjuz 6.4.1

2 of the 4 container images this version deploys carry CVE-2026-8212.

Container imageDigestPackageFixed in
bitnamilegacy/postgresql:16.4.0-debian-12-r1494bc968141e7
gdal@3.9.2
3.13.0
mediagis/nominatim:5.3.27923a8e67197
gdal@3.8.4+dfsg-3ubuntu3
no fix listed

Open the chart page →

8,690
thingsboard-clusterthingsboard-cluster-bettaVerified publisher0.2.261 of 6See more

thingsboard-cluster thingsboard-cluster-betta 0.2.26

1 of the 6 container images this version deploys carry CVE-2026-8212.

Container imageDigestPackageFixed in
bitnamilegacy/postgresql:16.0.0-debian-11-r3b8a21df9b747
GDAL@3.7.2
3.13.0

Open the chart page →

14,566
feedbacksystemthm-mni-iiVerified publisher0.47.11 of 10See more

feedbacksystem thm-mni-ii 0.47.1

1 of the 10 container images this version deploys carry CVE-2026-8212.

Container imageDigestPackageFixed in
bitnamilegacy/postgresql:15.4.0-debian-11-r455dba7e6a514d
GDAL@3.7.2
3.13.0

Open the chart page →

28,534
tikaapache-tika3.2.21 of 1See more

tika apache-tika 3.2.2

1 of the 1 container images this version deploys carry CVE-2026-8212.

Container imageDigestPackageFixed in
apache/tika:3.2.2.0-fullffab324253ed
gdal@3.10.2
3.13.0RC1

Open the chart page →

437
open-elevationbeeinventor0.1.01 of 2See more

open-elevation beeinventor 0.1.0

1 of the 2 container images this version deploys carry CVE-2026-8212.

Container imageDigestPackageFixed in
openelevation/open-elevation:latest82fb21612e86
gdal@3.3.0
3.13.0RC1

Open the chart page →

13,145
cert-vaultcert-vaultOfficialVerified publisher2.12.01 of 7See more

cert-vault cert-vault 2.12.0

1 of the 7 container images this version deploys carry CVE-2026-8212.

Container imageDigestPackageFixed in
bitnamilegacy/postgresql:17.4.0-debian-12-r11fb3806e823c2
gdal@3.10.2
3.13.0

Open the chart page →

15,863
data-fairdata354-helmVerified publisher1.1.22 of 12See more

data-fair data354-helm 1.1.2

2 of the 12 container images this version deploys carry CVE-2026-8212.

Container imageDigestPackageFixed in
ghcr.io/data-fair/data-fair:3cc9498b64b5b
gdal@3.6.4
3.13.0RC1
ghcr.io/data-fair/processings:15a9216989707
gdal@3.6.4
3.13.0RC1

Open the chart page →

38,346
datacube-explorerdatacube-charts0.5.321 of 1See more

datacube-explorer datacube-charts 0.5.32

1 of the 1 container images this version deploys carry CVE-2026-8212.

Container imageDigestPackageFixed in
opendatacube/explorer:latest120457ffcd69
gdal@3.10.3
3.13.0RC1

Open the chart page →

4,854
dbrepodbrepo1.13.32 of 25See more

dbrepo dbrepo 1.13.3

2 of the 25 container images this version deploys carry CVE-2026-8212.

Container imageDigestPackageFixed in
bitnamilegacy/postgresql:17.0.0-debian-12-r9d885ac277163
gdal@3.9.3
3.13.0
bitnamilegacy/postgresql:17.6.0-debian-12-r0de520acd66fc
gdal@3.11.3
3.13.0

Open the chart page →

52,635
clowder2ncsaVerified publisher1.9.71 of 12See more

clowder2 ncsa 1.9.7

1 of the 12 container images this version deploys carry CVE-2026-8212.

Container imageDigestPackageFixed in
bitnamilegacy/postgresql:15.5.06887635cc793
GDAL@3.8.3
3.13.0

Open the chart page →

37,373
librechatopenshift1.9.01 of 3See more

librechat openshift 1.9.0

1 of the 3 container images this version deploys carry CVE-2026-8212.

Container imageDigestPackageFixed in
ghcr.io/bat-bs/bitnami-pgvector:pg1619ebe07b4daf
gdal@3.10.0
3.13.0

Open the chart page →

5,779
paperless-ngxpaperlessVerified publisher0.4.01 of 3See more

paperless-ngx paperless 0.4.0

1 of the 3 container images this version deploys carry CVE-2026-8212.

Container imageDigestPackageFixed in
bitnamilegacy/postgresqldigest-pinned926356130b77
gdal@3.11.3
3.13.0

Open the chart page →

8,489
atuinrm3lVerified publisher0.11.01 of 3See more

atuin rm3l 0.11.0

1 of the 3 container images this version deploys carry CVE-2026-8212.

Container imageDigestPackageFixed in
bitnamilegacy/postgresql:16.2.0-debian-12-r890fda44bfa42
GDAL@3.8.4
3.13.0

Open the chart page →

6,521
routehub-client-hubroutehub-helm1.0.01 of 3See more

routehub-client-hub routehub-helm 1.0.0

1 of the 3 container images this version deploys carry CVE-2026-8212.

Container imageDigestPackageFixed in
timescale/timescaledb-ha:pg16d7db8f1085a3
gdal@3.4.1+dfsg-1build4
no fix listed

Open the chart page →

12,930
postgresql-ha-chartsoldevelo-postgresql-ha-chart16.3.41 of 2See more

postgresql-ha-chart soldevelo-postgresql-ha-chart 16.3.4

1 of the 2 container images this version deploys carry CVE-2026-8212.

Container imageDigestPackageFixed in
soldevelo/postgresql-repmgr:17.6.0-debian-12-r03eaab21e40e5
gdal@3.11.4
3.13.0

Open the chart page →

4,563
arlas-aiasarlas-stackVerified publisher28.8.01 of 22See more

arlas-aias arlas-stack 28.8.0

1 of the 22 container images this version deploys carry CVE-2026-8212.

Container imageDigestPackageFixed in
bitnamilegacy/postgresql:17.6.0-debian-12-r0de520acd66fc
gdal@3.11.3
3.13.0

Open the chart page →

40,238
astrotrekastria0.0.21 of 4See more

astrotrek astria 0.0.2

1 of the 4 container images this version deploys carry CVE-2026-8212.

Container imageDigestPackageFixed in
timescale/timescaledb-ha:pg15-latesta8e3322e1cf9
gdal@3.4.1+dfsg-1build4
no fix listed

Open the chart page →

32,501
axelor-open-suiteaxelor-open-suiteVerified publisher7.2.581 of 2See more

axelor-open-suite axelor-open-suite 7.2.58

1 of the 2 container images this version deploys carry CVE-2026-8212.

Container imageDigestPackageFixed in
bitnamilegacy/postgresql:15.3.0-debian-11-r775f4cf61668e5
GDAL@3.7.1
3.13.0

Open the chart page →

9,722
apachecamptocamp-apache0.4.01 of 2See more

apache camptocamp-apache 0.4.0

1 of the 2 container images this version deploys carry CVE-2026-8212.

Container imageDigestPackageFixed in
camptocamp/mapserver:latestbf2e8e118c9b
gdal@3.12.1
3.13.0RC1

Open the chart page →

1,431
kube-acp-stackcloudentity2.28.01 of 7See more

kube-acp-stack cloudentity 2.28.0

1 of the 7 container images this version deploys carry CVE-2026-8212.

Container imageDigestPackageFixed in
timescale/timescaledb-ha:pg17.2-ts2.18.2e8d0a9cc3db5
gdal@3.4.1+dfsg-1build4
no fix listed

Open the chart page →

20,900
codehubcodehubVerified publisher6.2.181 of 5See more

codehub codehub 6.2.18

1 of the 5 container images this version deploys carry CVE-2026-8212.

Container imageDigestPackageFixed in
bitnamilegacy/postgresql:latest42a8200d3597
gdal@3.11.3
3.13.0

Open the chart page →

13,220
opencloudcommunity-opencloud3.0.01 of 11See more

opencloud community-opencloud 3.0.0

1 of the 11 container images this version deploys carry CVE-2026-8212.

Container imageDigestPackageFixed in
apache/tika:latest-full80072bb73dd3
gdal@3.12.2+dfsg-1build2
gdal@3.12.2
no fix listed
3.13.0RC1

Open the chart page →

3,773
postgresqlcowboysysopVerified publisher15.5.71 of 1See more

postgresql cowboysysop 15.5.7

1 of the 1 container images this version deploys carry CVE-2026-8212.

Container imageDigestPackageFixed in
bitnamilegacy/postgresql:16.3.0-debian-12-r14cc55da2fa366
GDAL@3.9.0
3.13.0

Open the chart page →

4,770
datacubedatacube-charts0.18.21 of 1See more

datacube datacube-charts 0.18.2

1 of the 1 container images this version deploys carry CVE-2026-8212.

Container imageDigestPackageFixed in
opendatacube/wms:latest1b90cdf68831
gdal@2.4.0+10-0bionic1
gdal@2.4.0
no fix listed
3.13.0RC1

Open the chart page →

27,728
datacube-datadatacube-charts0.2.61 of 1See more

datacube-data datacube-charts 0.2.6

1 of the 1 container images this version deploys carry CVE-2026-8212.

Container imageDigestPackageFixed in
geoscienceaustralia/dea-k8s-data:latestf4039b45572a
gdal@3.0.4
3.13.0RC1

Open the chart page →

18,863
datacube-indexdatacube-charts0.4.41 of 2See more

datacube-index datacube-charts 0.4.4

1 of the 2 container images this version deploys carry CVE-2026-8212.

Container imageDigestPackageFixed in
opendatacube/ows:latest668cbb41473c
gdal@3.10.0
3.13.0RC1

Open the chart page →

6,123
datacube-owsdatacube-charts0.20.11 of 1See more

datacube-ows datacube-charts 0.20.1

1 of the 1 container images this version deploys carry CVE-2026-8212.

Container imageDigestPackageFixed in
opendatacube/ows:latest668cbb41473c
gdal@3.10.0
3.13.0RC1

Open the chart page →

5,974

Container images carrying it

62 by charts deploying them

A fixed version is listed for 3 of the 4 affected packages.

Container imageDigestPackageFixed inUsed by
signalen/backend:2.50.14760256000738
gdal@3.6.2+dfsg-1+b2
gdal@3.6.2
no fix listed
3.13.0RC1
1
soldevelo/postgresql-repmgr:17.6.0-debian-12-r03eaab21e40e5
gdal@3.11.4
3.13.0
1
timescale/timescaledb-ha:pg15-latesta8e3322e1cf9
gdal@3.4.1+dfsg-1build4
no fix listed
1
timescale/timescaledb-ha:pg14.6-ts2.9.1-p1cdb9ae118899
gdal@3.4.1+dfsg-1build4
no fix listed
1
timescale/timescaledb-ha:pg16d7db8f1085a3
gdal@3.4.1+dfsg-1build4
no fix listed
1
timescale/timescaledb-ha:pg17.2-ts2.18.2e8d0a9cc3db5
gdal@3.4.1+dfsg-1build4
no fix listed
1
timescale/timescaledb-ha:pg14-ts2.6-latested719c0cd19d
gdal@3.4.1+dfsg-1build4
no fix listed
1
twentycrm/twenty-postgres-spilo:latest2f78405a78be
gdal@3.4.1+dfsg-1build4
no fix listed
1
zooproject/zoo-project:dru-19f3c4eed7c9ec9d1f0375bbe59f9d204a42bd3a9a507cb7e2dd
gdal@3.8.4+dfsg-1~jammy0
gdal@3.8.4
no fix listed
3.13.0RC1
1
ghcr.io/data-fair/data-fair:3cc9498b64b5b
gdal@3.6.4
3.13.0RC1
1
ghcr.io/data-fair/processings:15a9216989707
gdal@3.6.4
3.13.0RC1
1
ghcr.io/seanmorley15/adventurelog-backend:v0.13.00250d9cb0d74
gdal@3.10.3+dfsg-1
gdal@3.10.3
no fix listed
3.13.0RC1
1

syft 1.42.1 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.