StackRadar

CVE-2026-83387

Unscored

Advisory

Published 22 Oct 2026In the index since 22 Oct 2026
Severity
Unscored
worst across findings
CVSS
—
base score, highest
EPSS
0.003
23rd percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
14
of 18,219 indexed, latest versions
Container images
15
deployed by those charts
Fix available
None
affected packages

The matching OSV records carry no description.

Carried by container images the latest versions of 14 of 18,219 indexed charts deploy, on 15 images.

Affected packageAffected versionsFixed inImages
openjdk-17deb17.0.9+9-1~deb12u1, 17.0.10+7-1~deb12u1, 17.0.11+9-1~deb12u1, 17.0.13+11-2~deb12u1+5 moreno fix listed10
openjdk-25deb25.0.4.1+1-1~deb13u1no fix listed3
openjdk-21deb21.0.12.1+1-1~deb13u1no fix listed2
OSV records
DEBIAN-CVE-2026-83387

Charts affected

14 by stars
ChartLatestAffected imagesRadar Score
chaos-meshchaos-meshVerified publisher2.8.61 of 4See more

chaos-mesh chaos-mesh 2.8.6

1 of the 4 container images this version deploys carry CVE-2026-83387.

Container imageDigestPackageFixed in
ghcr.io/chaos-mesh/chaos-daemon:v2.8.65e735d875fe7
openjdk-17@17.0.20.1+1-1~deb12u1
no fix listed

Open the chart page →

8,236
druiddruid-helmVerified publisher37.0.21 of 3See more

druid druid-helm 37.0.2

1 of the 3 container images this version deploys carry CVE-2026-83387.

Container imageDigestPackageFixed in
apache/druid:37.0.00116fb802786
openjdk-17@17.0.18+8-1~deb12u1
no fix listed

Open the chart page →

4,588
paperless-ngxfmjstudios0.2.81 of 5See more

paperless-ngx fmjstudios 0.2.8

1 of the 5 container images this version deploys carry CVE-2026-83387.

Container imageDigestPackageFixed in
gotenberg/gotenberg:8.0.1cf0b9a7ca3cf
openjdk-17@17.0.9+9-1~deb12u1
no fix listed

Open the chart page →

35,732
tbmq-clustertbmq-helm-chartOfficialVerified publisher2.3.12 of 3See more

tbmq-cluster tbmq-helm-chart 2.3.1

2 of the 3 container images this version deploys carry CVE-2026-83387.

Container imageDigestPackageFixed in
thingsboard/tbmq-integration-executor:2.4.16a0e157c73be
openjdk-25@25.0.4.1+1-1~deb13u1
no fix listed
thingsboard/tbmq-node:2.4.155aa86b6144f
openjdk-25@25.0.4.1+1-1~deb13u1
no fix listed

Open the chart page →

3,803
druidwiremindVerified publisher1.22.11 of 3See more

druid wiremind 1.22.1

1 of the 3 container images this version deploys carry CVE-2026-83387.

Container imageDigestPackageFixed in
apache/druid:29.0.10cef139b6bf1
openjdk-17@17.0.10+7-1~deb12u1
no fix listed

Open the chart page →

8,621
openhabhelmforgeVerified publisher1.2.21 of 1See more

openhab helmforge 1.2.2

1 of the 1 container images this version deploys carry CVE-2026-83387.

Container imageDigestPackageFixed in
openhab/openhab:5.2.3fa50a6934dfd
openjdk-21@21.0.12.1+1-1~deb13u1
no fix listed

Open the chart page →

3,665
thingsboardcetic0.1.21 of 2See more

thingsboard cetic 0.1.2

1 of the 2 container images this version deploys carry CVE-2026-83387.

Container imageDigestPackageFixed in
thingsboard/tb-postgres:latest2d17e4e36edc
openjdk-17@17.0.17+10-1~deb12u1
no fix listed

Open the chart page →

6,136
drillmagasin-drill0.9.01 of 3See more

drill magasin-drill 0.9.0

1 of the 3 container images this version deploys carry CVE-2026-83387.

Container imageDigestPackageFixed in
merlos/zookeeper:3.9.3a38fc7e09ed7
openjdk-17@17.0.13+11-2~deb12u1
no fix listed

Open the chart page →

6,321
opentelemetry-demoopentelemetry-helmOfficialVerified publisher0.42.61 of 34See more

opentelemetry-demo opentelemetry-helm 0.42.6

1 of the 34 container images this version deploys carry CVE-2026-83387.

Container imageDigestPackageFixed in
ghcr.io/open-telemetry/demo:3.1.0-fraud-detectiona07ee694304b
openjdk-17@17.0.18+8-1~deb12u1
no fix listed

Open the chart page →

27,946
catalyst-agentscatalyst-agents0.1.351 of 18See more

catalyst-agents catalyst-agents 0.1.35

1 of the 18 container images this version deploys carry CVE-2026-83387.

Container imageDigestPackageFixed in
ghcr.io/chaos-mesh/chaos-daemon:v2.8.369b1d3c09cfa
openjdk-17@17.0.19+10-1~deb12u2
no fix listed

Open the chart page →

25,947
chaos-meshethereum-helm-chartsVerified publisher0.0.31 of 4See more

chaos-mesh ethereum-helm-charts 0.0.3

1 of the 4 container images this version deploys carry CVE-2026-83387.

Container imageDigestPackageFixed in
ghcr.io/chaos-mesh/chaos-daemon:v2.8.0fb609bc264d9
openjdk-17@17.0.16+8-1~deb12u1
no fix listed

Open the chart page →

16,593
gotenbergfmjstudios0.2.21 of 1See more

gotenberg fmjstudios 0.2.2

1 of the 1 container images this version deploys carry CVE-2026-83387.

Container imageDigestPackageFixed in
gotenberg/gotenberg:8.7.0437b9cd3c351
openjdk-17@17.0.11+9-1~deb12u1
no fix listed

Open the chart page →

11,031
archiveboxhelmforgeVerified publisher1.1.151 of 1See more

archivebox helmforge 1.1.15

1 of the 1 container images this version deploys carry CVE-2026-83387.

Container imageDigestPackageFixed in
archivebox/archivebox:0.9.73d4720d86c0e9
openjdk-21@21.0.12.1+1-1~deb13u1
no fix listed

Open the chart page →

6,414
signal-cli-rest-apileprechaun-charts0.1.41 of 1See more

signal-cli-rest-api leprechaun-charts 0.1.4

1 of the 1 container images this version deploys carry CVE-2026-83387.

Container imageDigestPackageFixed in
bbernhard/signal-cli-rest-api:latest2cf09d66a86f
openjdk-25@25.0.4.1+1-1~deb13u1
no fix listed

Open the chart page →

2,900

Container images carrying it

15 by charts deploying them

A fixed version is listed for 0 of the 3 affected packages.

Container imageDigestPackageFixed inUsed by
apache/druid:37.0.00116fb802786
openjdk-17@17.0.18+8-1~deb12u1
no fix listed
1
apache/druid:29.0.10cef139b6bf1
openjdk-17@17.0.10+7-1~deb12u1
no fix listed
1
archivebox/archivebox:0.9.73d4720d86c0e9
openjdk-21@21.0.12.1+1-1~deb13u1
no fix listed
1
bbernhard/signal-cli-rest-api:latest2cf09d66a86f
openjdk-25@25.0.4.1+1-1~deb13u1
no fix listed
1
gotenberg/gotenberg:8.7.0437b9cd3c351
openjdk-17@17.0.11+9-1~deb12u1
no fix listed
1
gotenberg/gotenberg:8.0.1cf0b9a7ca3cf
openjdk-17@17.0.9+9-1~deb12u1
no fix listed
1
merlos/zookeeper:3.9.3a38fc7e09ed7
openjdk-17@17.0.13+11-2~deb12u1
no fix listed
1
openhab/openhab:5.2.3fa50a6934dfd
openjdk-21@21.0.12.1+1-1~deb13u1
no fix listed
1
thingsboard/tbmq-integration-executor:2.4.16a0e157c73be
openjdk-25@25.0.4.1+1-1~deb13u1
no fix listed
1
thingsboard/tbmq-node:2.4.155aa86b6144f
openjdk-25@25.0.4.1+1-1~deb13u1
no fix listed
1
thingsboard/tb-postgres:latest2d17e4e36edc
openjdk-17@17.0.17+10-1~deb12u1
no fix listed
1
ghcr.io/chaos-mesh/chaos-daemon:v2.8.65e735d875fe7
openjdk-17@17.0.20.1+1-1~deb12u1
no fix listed
1
ghcr.io/chaos-mesh/chaos-daemon:v2.8.369b1d3c09cfa
openjdk-17@17.0.19+10-1~deb12u2
no fix listed
1
ghcr.io/chaos-mesh/chaos-daemon:v2.8.0fb609bc264d9
openjdk-17@17.0.16+8-1~deb12u1
no fix listed
1
ghcr.io/open-telemetry/demo:3.1.0-fraud-detectiona07ee694304b
openjdk-17@17.0.18+8-1~deb12u1
no fix listed
1

syft 1.42.1 · advisories as of 22 Oct 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.