StackRadarChart IndexLive demo

CVE-2026-85985

Medium

Advisory

Published 16 Oct 2026In the index since 18 Oct 2026

Severity: Medium; worst across findings
CVSS: 5.4; base score, highest
EPSS: 0.002; 11th percentile
CISA KEV: Not listed; no confirmed exploitation
Charts affected: 157; of 18,176 indexed, latest versions
Container images: 156; deployed by those charts
Fix available: None; affected package

The matching OSV records carry no description.

Carried by container images the latest versions of 157 of 18,176 indexed charts deploy, on 156 images.

Affected package	Affected versions	Fixed in	Images
mariadbdeb	1:10.11.3-1, 1:10.11.4-1~deb12u1, 1:10.11.6-0+deb12u1, 1:10.11.7+maria~deb12+7 more	no fix listed	156

OSV records: DEBIAN-CVE-2026-85985

Charts affected

157 by stars

Chart

Latest

Affected images

Radar Score

codegentest-opea

1 of 5 See more

codegen test-opea 1.0.0

1 of the 5 container images this version deploys carry CVE-2026-85985.

Container image	Digest	Package	Fixed in
opea/codegen-ui :1.0	2bee4eb66f3e	mariadb@1:10.11.6-0+deb12u1	no fix listed

Open the chart page →

32,712

codetranstest-opea

1 of 5 See more

codetrans test-opea 1.0.0

1 of the 5 container images this version deploys carry CVE-2026-85985.

Container image	Digest	Package	Fixed in
opea/codetrans-ui :1.0	3ef121f34610	mariadb@1:10.11.6-0+deb12u1	no fix listed

Open the chart page →

32,236

docsumtest-opea

1 of 5 See more

docsum test-opea 1.0.0

1 of the 5 container images this version deploys carry CVE-2026-85985.

Container image	Digest	Package	Fixed in
opea/docsum-ui :1.0	7f854e9bffaf	mariadb@1:10.11.6-0+deb12u1	no fix listed

Open the chart page →

32,738

tfy-distributortruefoundry

1 of 4 See more

tfy-distributor truefoundry 0.0.1

1 of the 4 container images this version deploys carry CVE-2026-85985.

Container image	Digest	Package	Fixed in
public.ecr.aws/truefoundrycloud/async-service-distributor :5d48113bc678d694a0c8f8dabb2207c5aa2cfc53	f74851ce31f5	mariadb@1:10.11.4-1~deb12u1	no fix listed

Open the chart page →

20,660

demo-backendv2fly

1 of 1 See more

demo-backend v2fly 0.0.3

1 of the 1 container images this version deploys carry CVE-2026-85985.

Container image	Digest	Package	Fixed in
quay.io/yushiwho/api :e1f9d77	e0d9b93dbf2b	mariadb@1:10.11.3-1	no fix listed

Open the chart page →

15,944

bugsinkvictorlane

1 of 2 See more

bugsink victorlane 0.3.7

1 of the 2 container images this version deploys carry CVE-2026-85985.

Container image	Digest	Package	Fixed in
bugsink/bugsink :2	c5e3657451f4	mariadb@1:11.8.6-0+deb13u1	no fix listed

Open the chart page →

4,902

supersetwbstack

1 of 1 See more

superset wbstack 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-85985.

Container image	Digest	Package	Fixed in
apache/superset :4.0.1	ab9467fd712c	mariadb@1:10.11.6-0+deb12u1	no fix listed

Open the chart page →

7,922

Container images carrying it

156 by charts deploying them

A fixed version is listed for 0 of the 1 affected package.

Container image	Digest	Package	Fixed in	Used by
public.ecr.aws/jtekt-corporation/image-storage-service :v1.16.17	b1493760c716	mariadb@1:10.11.6-0+deb12u1	no fix listed	1
public.ecr.aws/jtekt-corporation/shinsei-manager :v2.8.1	5cd62142d6ed	mariadb@1:10.11.6-0+deb12u1	no fix listed	1
public.ecr.aws/jtekt-corporation/time-series-storage-service :v1.5.1	046ef5c9ed50	mariadb@1:10.11.4-1~deb12u1	no fix listed	1
public.ecr.aws/truefoundrycloud/async-service-distributor :5d48113bc678d694a0c8f8dabb2207c5aa2cfc53	f74851ce31f5	mariadb@1:10.11.4-1~deb12u1	no fix listed	1
quay.io/yushiwho/api :e1f9d77	e0d9b93dbf2b	mariadb@1:10.11.3-1	no fix listed	1
registry.gitlab.com/enbuild-staging/vivsoft-platform-ui/enbuild-mq-consumer :1.0.31	0e3cd8c7776d	mariadb@1:10.11.14-0+deb12u2	no fix listed	1