StackRadar

CVE-2026-82399

High

Advisory

Published 17 Sept 2026In the index since 18 Sept 2026
Severity
High
worst across findings
CVSS
7.5
base score, highest
EPSS
0.006
48th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
72
of 17,813 indexed, latest versions
Container images
61
deployed by those charts
Fix available
1 of 1
affected package

CoreDNS: Unauthenticated memory exhaustion in custom transports

Carried by container images the latest versions of 72 of 17,813 indexed charts deploy, on 61 images.

Affected packageAffected versionsFixed inImages
github.com/coredns/corednsgolangv0.0.0-20200803163833-7d5f5b87a4fb, v0.0.0-20230206182419-055b2c31a9cf, v0.0.0-20240702120856-a6338e924e29, v0.0.0-20241121192733-51e11f166ef6+19 more1.14.761
OSV records
GHSA-mrg3-qvqr-jw29

Charts affected

72 by stars
ChartLatestAffected imagesRadar Score
miniomilvus-helm8.0.201 of 1See more

minio milvus-helm 8.0.20

1 of the 1 container images this version deploys carry CVE-2026-82399.

Container imageDigestPackageFixed in
minio/minio:RELEASE.2024-05-28T17-19-04Z391d1d45fdbe
github.com/coredns/coredns@v1.11.3
1.14.7

Open the chart page →

1,685
minioopenobserve5.0.71 of 2See more

minio openobserve 5.0.7

1 of the 2 container images this version deploys carry CVE-2026-82399.

Container imageDigestPackageFixed in
quay.io/minio/minio:RELEASE.2023-02-10T18-48-39Za0a002cb113c
github.com/coredns/coredns@v1.10.0
1.14.7

Open the chart page →

7,614
harikubeopenshift0.16.31 of 3See more

harikube openshift 0.16.3

1 of the 3 container images this version deploys carry CVE-2026-82399.

Container imageDigestPackageFixed in
quay.io/harikube/vcluster-pro:0.32.1b741efae8d31
github.com/coredns/coredns@v1.13.2
1.14.7

Open the chart page →

2,653
cloudflaredpascaliskeVerified publisher3.0.01 of 1See more

cloudflared pascaliske 3.0.0

1 of the 1 container images this version deploys carry CVE-2026-82399.

Container imageDigestPackageFixed in
ghcr.io/crazy-max/cloudflared:2025.9.19b4e856d18f6
github.com/coredns/coredns@v1.12.2
1.14.7

Open the chart page →

2,071
cloudflare-tunnelportefaix-hub0.4.01 of 1See more

cloudflare-tunnel portefaix-hub 0.4.0

1 of the 1 container images this version deploys carry CVE-2026-82399.

Container imageDigestPackageFixed in
cloudflare/cloudflared:2024.8.314d9c6b01b29
github.com/coredns/coredns@v1.10.0
1.14.7

Open the chart page →

1,345
cdmswebapppyalive-cdmswebappVerified publisher0.1.01 of 3See more

cdmswebapp pyalive-cdmswebapp 0.1.0

1 of the 3 container images this version deploys carry CVE-2026-82399.

Container imageDigestPackageFixed in
sarwansharma/minio:v359d1da9385d1
github.com/coredns/coredns@v1.9.2
1.14.7

Open the chart page →

6,703
uptime-kumasarab97Verified publisher0.1.51 of 1See more

uptime-kuma sarab97 0.1.5

1 of the 1 container images this version deploys carry CVE-2026-82399.

Container imageDigestPackageFixed in
louislam/uptime-kuma:1.22.10b55bcb83a1c
github.com/coredns/coredns@v1.10.0
1.14.7

Open the chart page →

4,796
cloudflaredsectionmeVerified publisher2022.3.41 of 1See more

cloudflared sectionme 2022.3.4

1 of the 1 container images this version deploys carry CVE-2026-82399.

Container imageDigestPackageFixed in
quay.io/giantswarm/cloudflared:2022.3.40b20d2fe9a6b
github.com/coredns/coredns@v1.8.7
1.14.7

Open the chart page →

2,441
miniosergiotocaliniVerified publisher1.0.01 of 1See more

minio sergiotocalini 1.0.0

1 of the 1 container images this version deploys carry CVE-2026-82399.

Container imageDigestPackageFixed in
quay.io/minio/minio:RELEASE.2023-07-21T21-12-44Z8e5e9490cd50
github.com/coredns/coredns@v1.10.1
1.14.7

Open the chart page →

4,352
tailscalesinextraVerified publisher0.18.11 of 2See more

tailscale sinextra 0.18.1

1 of the 2 container images this version deploys carry CVE-2026-82399.

Container imageDigestPackageFixed in
registry.k8s.io/coredns/coredns:v1.13.294caebb89dcf
github.com/coredns/coredns@v0.0.0-20251209114403-0233f3e7c600
1.14.7

Open the chart page →

1,082
mimirskyloud-helm-chartsVerified publisher5.5.11 of 5See more

mimir skyloud-helm-charts 5.5.1

1 of the 5 container images this version deploys carry CVE-2026-82399.

Container imageDigestPackageFixed in
quay.io/minio/minio:RELEASE.2023-09-30T07-02-29Z6262bc9a2730
github.com/coredns/coredns@v1.11.1
1.14.7

Open the chart page →

10,822
spinnakerspinnakerVerified publisher2.2.131 of 4See more

spinnaker spinnaker 2.2.13

1 of the 4 container images this version deploys carry CVE-2026-82399.

Container imageDigestPackageFixed in
minio/minio:RELEASE.2020-01-03T19-12-21Zf00aa6ef2b72
github.com/coredns/coredns@v1.4.0
1.14.7

Open the chart page →

6,878
servicexssl-hep1.8.51 of 16See more

servicex ssl-hep 1.8.5

1 of the 16 container images this version deploys carry CVE-2026-82399.

Container imageDigestPackageFixed in
bitnamilegacy/minio:2022.12.12-debian-11-r90f7c8ac484ac
github.com/coredns/coredns@v1.9.4
1.14.7

Open the chart page →

69,984
miniouninettsigma21.2.01 of 1See more

minio uninettsigma2 1.2.0

1 of the 1 container images this version deploys carry CVE-2026-82399.

Container imageDigestPackageFixed in
sigma2as/minio:20240306-3a2e4f5c284ead9ec3e
github.com/coredns/coredns@v1.9.4
1.14.7

Open the chart page →

4,995
corednsvks-helm-chartsVerified publisher1.45.01 of 1See more

coredns vks-helm-charts 1.45.0

1 of the 1 container images this version deploys carry CVE-2026-82399.

Container imageDigestPackageFixed in
coredns/coredns:1.13.19b9128672209
github.com/coredns/coredns@v0.0.0-20251008152637-1db4568df6aa
1.14.7

Open the chart page →

923
consulwarjiang1.3.01 of 2See more

consul warjiang 1.3.0

1 of the 2 container images this version deploys carry CVE-2026-82399.

Container imageDigestPackageFixed in
hashicorp/consul:1.17.0712fe02d2f84
github.com/coredns/coredns@v1.10.1
1.14.7

Open the chart page →

4,102
juicefs-csi-driverwener0.33.01 of 5See more

juicefs-csi-driver wener 0.33.0

1 of the 5 container images this version deploys carry CVE-2026-82399.

Container imageDigestPackageFixed in
juicedata/juicefs-csi-driver:v0.33.0f918e7331c05
github.com/coredns/coredns@v1.4.0
1.14.7

Open the chart page →

9,078
juicefs-csi-driverwenerme0.33.01 of 5See more

juicefs-csi-driver wenerme 0.33.0

1 of the 5 container images this version deploys carry CVE-2026-82399.

Container imageDigestPackageFixed in
juicedata/juicefs-csi-driver:v0.33.0f918e7331c05
github.com/coredns/coredns@v1.4.0
1.14.7

Open the chart page →

9,078
miniowenerme8.0.101 of 1See more

minio wenerme 8.0.10

1 of the 1 container images this version deploys carry CVE-2026-82399.

Container imageDigestPackageFixed in
minio/minio:RELEASE.2021-02-14T04-01-33Zbd11edda91f3
github.com/coredns/coredns@v1.4.0
1.14.7

Open the chart page →

6,950
minio-standalonewenerme1.0.21 of 1See more

minio-standalone wenerme 1.0.2

1 of the 1 container images this version deploys carry CVE-2026-82399.

Container imageDigestPackageFixed in
minio/minio:RELEASE.2022-01-04T07-41-07Z1484c87239ea
github.com/coredns/coredns@v1.4.0
1.14.7

Open the chart page →

6,173
wexa-studiowexa-studio1.2.01 of 15See more

wexa-studio wexa-studio 1.2.0

1 of the 15 container images this version deploys carry CVE-2026-82399.

Container imageDigestPackageFixed in
minio/minio:RELEASE.2024-01-16T16-07-38Z4c4a4876193f
github.com/coredns/coredns@v1.11.1
1.14.7

Open the chart page →

15,391
zahori-consulzahoriVerified publisher1.0.11 of 2See more

zahori-consul zahori 1.0.1

1 of the 2 container images this version deploys carry CVE-2026-82399.

Container imageDigestPackageFixed in
hashicorp/consul:1.15.3ddff34041c5c
github.com/coredns/coredns@v1.6.6
1.14.7

Open the chart page →

5,077

Container images carrying it

61 by charts deploying them

A fixed version is listed for 1 of the 1 affected package.

Container imageDigestPackageFixed inUsed by
quay.io/giantswarm/cloudflared:2022.3.40b20d2fe9a6b
github.com/coredns/coredns@v1.8.7
1.14.7
1
quay.io/harikube/vcluster-pro:0.32.1b741efae8d31
github.com/coredns/coredns@v1.13.2
1.14.7
1
quay.io/minio/minio:RELEASE.2023-12-20T01-00-02Z5702ea361420
github.com/coredns/coredns@v1.11.1
1.14.7
1
quay.io/minio/minio:RELEASE.2024-01-11T07-46-16Z796f75ea413b
github.com/coredns/coredns@v1.11.1
1.14.7
1
quay.io/minio/minio:RELEASE.2022-09-17T00-09-45Zc3d20bc2ea08
github.com/coredns/coredns@v1.9.4
1.14.7
1
quay.io/minio/minio:RELEASE.2024-06-04T19-20-08Zc6b68f158628
github.com/coredns/coredns@v1.11.3
1.14.7
1
quay.io/minio/minio:RELEASE.2022-10-24T18-35-07Zd853057f2800
github.com/coredns/coredns@v1.9.4
1.14.7
1
registry.k8s.io/coredns/coredns:v1.13.294caebb89dcf
github.com/coredns/coredns@v0.0.0-20251209114403-0233f3e7c600
1.14.7
1
registry.k8s.io/dns/k8s-dns-node-cache:1.23.081a13703d6b8
github.com/coredns/coredns@v1.10.0
1.14.7
1
registry.k8s.io/dns/k8s-dns-node-cache:1.26.78b9a78d101a1
github.com/coredns/coredns@v1.13.1
1.14.7
1
registry.k8s.io/dns/k8s-dns-node-cache:1.23.1e3dccb1a21d1
github.com/coredns/coredns@v1.10.0
1.14.7
1

syft 1.42.1 · advisories as of 20 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.