CVE-2026-82720
MediumAdvisory
Published 16 Sept 2026In the index since 17 Sept 2026
- Severity
- Medium
- worst across findings
- CVSS
- 5.9
- base score, highest
- EPSS
- 0.003
- 21st percentile
- CISA KEV
- Not listed
- no confirmed exploitation
- Charts affected
- 49
- of 17,803 indexed, latest versions
- Container images
- 62
- deployed by those charts
- Fix available
- 1 of 1
- affected package
The matching OSV records carry no description.
Carried by container images the latest versions of 49 of 17,803 indexed charts deploy, on 62 images.
| Affected package | Affected versions | Fixed in | Images |
|---|---|---|---|
| unbounddeb | 1.9.4-2ubuntu1.1, 1.9.4-2ubuntu1.2, 1.13.1-1ubuntu5.8, 1.13.1-1ubuntu5.11+10 more | 1.26.1 | 62 |
Charts affected
49 by stars
| Chart | Latest | Affected images | Radar Score |
|---|---|---|---|
| maildocker-postfixVerified publisher | 5.1.0 | 1 of 1See more | 5,667 |
| zammadzammadOfficialVerified publisher | 19.0.0 | 1 of 5See more | 6,539 |
| oneuptimeoneuptimeOfficialVerified publisher | 13.0.7 | 1 of 7See more | 11,722 |
| nautobotnautobotOfficialVerified publisher | 3.1.2 | 1 of 1See more | 4,507 |
| smtpntppoolVerified publisher | 2.4.0 | 1 of 1See more | 2,379 |
| dask-kubernetes-operatordask | 2026.3.0 | 1 of 1See more | 9,548 |
| defectdojodefectdojo | 1.9.52 | 1 of 4See more | 2,661 |
| part-dbpart-dbVerified publisher | 0.1.2 | 1 of 1See more | 3,465 |
| freeradiusstartechnicaVerified publisher | 1.2.0 | 1 of 1See more | 5,935 |
| pretixtechwolf12Verified publisher | 2026.7.0 | 1 of 3See more | 10,105 |
| anteonanteonVerified publisher | 2.6.4 | 1 of 13See more | 22,605 |
| antreaantreaVerified publisher | 2.7.0 | 1 of 2See more | 3,687 |
| pgcagriekinVerified publisher | 2.1.0 | 1 of 2See more | 2,426 |
| pgvectorcagriekinVerified publisher | 2.1.0 | 1 of 3See more | 4,210 |
| cosmotech-copilot-apicosmotech-apiVerified publisher | 0.1.1 | 1 of 1See more | 11,476 |
| iris-webappiris-webapp | 0.2.4 | 1 of 2See more | 11,991 |
| prowlerprowler-appVerified publisher | 0.0.9 | 1 of 5See more | 8,437 |
| napcatredish101Verified publisher | 0.1.3 | 1 of 1See more | 63,299 |
| sogosogoVerified publisher | 0.3.5 | 1 of 2See more | 7,342 |
| varnish-cachevarnishVerified publisher | 1.1.1 | 1 of 1See more | 4,424 |
| waldurwaldur-chartsVerified publisher | 8.1.2 | 1 of 3See more | 5,066 |
| open5gsadaptivenetlabVerified publisher | 1.0.3 | 1 of 3See more | 99,481 |
| ddosifyanteonVerified publisher | 1.7.5 | 2 of 13See more | 26,236 |
| datumcosmicrocks | 1.0.5 | 1 of 2See more | 53,250 |
| domainmoddjjudas21Verified publisher | 1.0.0 | 1 of 1See more | 7,342 |
| exim4dossif | 0.2.0 | 1 of 1See more | 1,496 |
| iotaeclipse-aeriosVerified publisher | 1.0.2 | 1 of 4See more | 13,638 |
| static-siteethersphereVerified publisher | 0.73.1 | 1 of 2See more | 7,115 |
| firefly-iiifirefly-iii | 1.10.1 | 1 of 1See more | 5,241 |
| firefly-iii-stackfirefly-iii | 0.10.2 | 2 of 4See more | 10,664 |
| importerfirefly-iii | 1.6.0 | 1 of 1See more | 5,031 |
| business-api-ecosystemfiware | 1.1.0 | 1 of 4See more | 108,383 |
| mod-z3950folio-org | 0.1.3 | 1 of 1See more | 2,591 |
| icinga2geek-cookbookVerified publisher | 4.2.0 | 1 of 1See more | 9,420 |
| chiefonboardinghelmforgeVerified publisher | 1.1.15 | 1 of 3See more | 7,249 |
| moodlehelmforgeVerified publisher | 1.1.0 | 1 of 2See more | 6,363 |
| ibexaibexaVerified publisher | 3.11.1 | 1 of 10See more | 6,072 |
| mindsdbkronkltdVerified publisher | 0.1.0 | 1 of 1See more | 9,856 |
| kube-ovnkube-ovn-test | 1.14.0 | 1 of 1See more | 5,245 |
| firefly-iiikubernetes-homelab-helm-chartsVerified publisher | 0.1.3 | 1 of 3See more | 4,586 |
| smtplbenicio-communityVerified publisher | 0.1.3 | 1 of 1See more | 1,372 |
| MINTmint | 8.0.2 | 1 of 15See more | 110,158 |
| smilencsaVerified publisher | 1.1.0 | 4 of 23See more | 265,360 |
| laravel-appoli-the-devVerified publisher | 2.0.17 | 1 of 1See more | 2,860 |
| agentpolyaxon | 2.17.0 | 3 of 4See more | 8,953 |
| polyaxonpolyaxon | 2.17.0 | 3 of 5See more | 12,731 |
| port-agentport-labsVerified publisher | 0.8.16 | 1 of 1See more | 799 |
| transmissionryuunosukeds3 | 1.6.2 | 1 of 2See more | 9,763 |
| servicexssl-hep | 1.8.5 | 10 of 16See more | 68,698 |
Container images carrying it
62 by charts deploying them
A fixed version is listed for 1 of the 1 affected package.
| Container image | Digest | Package | Fixed in | Used by |
|---|---|---|---|---|
| cagriekin/ | 99e17aa165df | unbound | no fix listed | 2 |
| fireflyiii/ | fe4ecec4c2ba | unbound | no fix listed | 2 |
| fireflyiii/ | ab52bf932546 | unbound | no fix listed | 2 |
| polyaxon/ | da877a2647fc | unbound | no fix listed | 2 |
| polyaxon/ | 297ed47ed63a | unbound | no fix listed | 2 |
| antrea/ | c10bc45c6272 | unbound | no fix listed | 1 |
| boky/ | aafc77238423 | unbound | no fix listed | 1 |
| boky/ | f3f247fd4252 | unbound | no fix listed | 1 |
| chiefonboarding/ | d0964135ea82 | unbound | no fix listed | 1 |
| ddosify/ | a43c5155fa1c | unbound | no fix listed | 1 |
| ddosify/ | 3c11e3182652 | unbound | no fix listed | 1 |
| ddosify/ | ac323d52bfb4 | unbound | no fix listed | 1 |
| defectdojo/ | c597abdbb535 | unbound | no fix listed | 1 |
| domainmod/ | 4017bfe4c597 | unbound | no fix listed | 1 |
| eclipseaerios/ | e7f5ba0bc64d | unbound | no fix listed | 1 |
| fireflyiii/ | ae69fdd95cde | unbound | no fix listed | 1 |
| fiware/ | d551a13e8278 | unbound | no fix listed | 1 |
| folioci/ | 2493041ce880 | unbound | no fix listed | 1 |
| freeradius/ | af6fd34a5b78 | unbound | no fix listed | 1 |
| jbtronics/ | 5db71f6db59d | unbound | no fix listed | 1 |
| jordan/ | f75025fe8ea8 | unbound | no fix listed | 1 |
| kubeovn/ | 6722b54eb5c0 | unbound | no fix listed | 1 |
| library/ | f5d1cc40abc1 | unbound | no fix listed | 1 |
| library/ | 70c9cc675605 | unbound | no fix listed | 1 |
| library/ | da5aee29682d | unbound | no fix listed | 1 |
| library/ | 4d0bb287d87b | unbound | no fix listed | 1 |
| mindsdb/ | 163011c09299 | unbound | no fix listed | 1 |
| mintproject/ | 83aade2c1855 | unbound | no fix listed | 1 |
| mlikiowa/ | 1336a777f9a4 | unbound | no fix listed | 1 |
| moodlehq/ | 922af5166835 | unbound | no fix listed | 1 |
| networktocode/ | ed484336b1ad | unbound | no fix listed | 1 |
| oneuptime/ | bc4f82c54680 | unbound | no fix listed | 1 |
| opennode/ | 4c82b15d9042 | unbound | no fix listed | 1 |
| polyaxon/ | 163707082036 | unbound | no fix listed | 1 |
| polyaxon/ | a5fec70e757b | unbound | no fix listed | 1 |
| pretix/ | 5df3b7aa852e | unbound | no fix listed | 1 |
| prowlercloud/ | 4f252d579be2 | unbound | no fix listed | 1 |
| serversideup/ | 8f8c2f010ac5 | unbound | no fix listed | 1 |
| socialmediamacroscope/ | 6418f9bdb4d2 | unbound | no fix listed | 1 |
| socialmediamacroscope/ | b351c21422e6 | unbound | no fix listed | 1 |
| socialmediamacroscope/ | ca863306314b | unbound | no fix listed | 1 |
| socialmediamacroscope/ | fa490acac2f8 | unbound | no fix listed | 1 |
| sonroyaalmerol/ | 3f60f3abe990 | unbound | no fix listed | 1 |
| sslhep/ | 1d12f943cec5 | unbound | no fix listed | 1 |
| sslhep/ | e7aff7f97b89 | unbound | no fix listed | 1 |
| sslhep/ | b01b8ee966ed | unbound | no fix listed | 1 |
| sslhep/ | 0e4175a4e1eb | unbound | no fix listed | 1 |
| sslhep/ | 671980005c57 | unbound | no fix listed | 1 |
| sslhep/ | 596db2abdd09 | unbound | no fix listed | 1 |
| sslhep/ | 54aaf1721d03 | unbound | no fix listed | 1 |