StackRadar

CVE-2026-88842

Low

Advisory

Published 14 Oct 2026In the index since 16 Oct 2026
Severity
Low
worst across findings
CVSS
3.3
base score, highest
EPSS
0.002
4th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
12
of 18,137 indexed, latest versions
Container images
15
deployed by those charts
Fix available
None
affected package

The matching OSV records carry no description.

Carried by container images the latest versions of 12 of 18,137 indexed charts deploy, on 15 images.

Affected packageAffected versionsFixed inImages
busyboxdeb1:1.35.0-4+b3, 1:1.35.0-4+b4, 1:1.35.0-4+deb12u1+b1, 1:1.37.0-6+b3+2 moreno fix listed15
OSV records
DEBIAN-CVE-2026-88842

Charts affected

12 by stars
ChartLatestAffected imagesRadar Score
gitlabgitlabVerified publisher10.5.07 of 21See more

gitlab gitlab 10.5.0

7 of the 21 container images this version deploys carry CVE-2026-88842.

Container imageDigestPackageFixed in
registry.gitlab.com/gitlab-org/build/cng/certificates:v19.5.074a4c2f23e47
busybox@1:1.37.0-6+b9
no fix listed
registry.gitlab.com/gitlab-org/build/cng/gitaly:v19.5.0595c4f2b1b7b
busybox@1:1.37.0-6+b9
no fix listed
registry.gitlab.com/gitlab-org/build/cng/gitlab-base:v19.5.09584ce75ec08
busybox@1:1.37.0-6+b9
no fix listed
registry.gitlab.com/gitlab-org/build/cng/gitlab-container-registry:v4.42.0-gitlab4fed422a7637
busybox@1:1.37.0-6+b9
no fix listed
registry.gitlab.com/gitlab-org/build/cng/gitlab-exporter:17.0.2b5c24e466636
busybox@1:1.37.0-6+b9
no fix listed
registry.gitlab.com/gitlab-org/build/cng/gitlab-shell:v14.58.0723f668ceef8
busybox@1:1.37.0-6+b9
no fix listed
registry.gitlab.com/gitlab-org/build/cng/gitlab-workhorse-ee:v19.5.02f58e4625ab7
busybox@1:1.37.0-6+b9
no fix listed

Open the chart page →

20,464
nextcloudnextcloud9.4.01 of 1See more

nextcloud nextcloud 9.4.0

1 of the 1 container images this version deploys carry CVE-2026-88842.

Container imageDigestPackageFixed in
library/nextcloud:35.0.1-apache8f2f0e93aca5
busybox@1:1.37.0-6+b9
no fix listed

Open the chart page →

4,688
nextcloudgroundhog2k0.22.81 of 3See more

nextcloud groundhog2k 0.22.8

1 of the 3 container images this version deploys carry CVE-2026-88842.

Container imageDigestPackageFixed in
library/nextcloud:35.0.1:35.0.1-apache8f2f0e93aca5
busybox@1:1.37.0-6+b9
no fix listed

Open the chart page →

4,688
monicamonicaOfficialVerified publisher1.0.151 of 1See more

monica monica 1.0.15

1 of the 1 container images this version deploys carry CVE-2026-88842.

Container imageDigestPackageFixed in
ghcr.io/monicahq/monica-next:main8a02508cbdcf
busybox@1:1.37.0-6+b9
no fix listed

Open the chart page →

3,369
openbaogitlabVerified publisher0.20.21 of 1See more

openbao gitlab 0.20.2

1 of the 1 container images this version deploys carry CVE-2026-88842.

Container imageDigestPackageFixed in
registry.gitlab.com/gitlab-org/build/cng/gitlab-openbao:v2.6.2-gitlab1295422a492cf
busybox@1:1.37.0-6+b9
no fix listed

Open the chart page →

1,904
csghubcsghubVerified publisher2.6.02 of 35See more

csghub csghub 2.6.0

2 of the 35 container images this version deploys carry CVE-2026-88842.

Container imageDigestPackageFixed in
opencsghq/gitlab-gitaly:v17.5.0bdd2c58b9744
busybox@1:1.35.0-4+b3
no fix listed
opencsghq/gitlab-shell:v19.2.580a65ac370da
busybox@1:1.35.0-4+deb12u1+b1
no fix listed

Open the chart page →

67,811
nextcloudhelmforgeVerified publisher2.0.11 of 3See more

nextcloud helmforge 2.0.1

1 of the 3 container images this version deploys carry CVE-2026-88842.

Container imageDigestPackageFixed in
library/nextcloud:35.0.1-apache8f2f0e93aca5
busybox@1:1.37.0-6+b9
no fix listed

Open the chart page →

7,137
nextcloudsb-helm-charts0.4.01 of 2See more

nextcloud sb-helm-charts 0.4.0

1 of the 2 container images this version deploys carry CVE-2026-88842.

Container imageDigestPackageFixed in
library/nextcloud:31.0.10-apacheb7faa1653c39
busybox@1:1.37.0-6+b3
no fix listed

Open the chart page →

11,787
nextcloudth-chartsVerified publisher0.4.01 of 1See more

nextcloud th-charts 0.4.0

1 of the 1 container images this version deploys carry CVE-2026-88842.

Container imageDigestPackageFixed in
library/nextcloud:31.0.6-apache588609d76b21
busybox@1:1.35.0-4+b4
no fix listed

Open the chart page →

11,778
tyk-control-planetyk-helm5.4.11 of 7See more

tyk-control-plane tyk-helm 5.4.1

1 of the 7 container images this version deploys carry CVE-2026-88842.

Container imageDigestPackageFixed in
tykio/tyk-gateway-ee:v5.13.250b3e4f5398a
busybox@1:1.37.0-6+dhi3
no fix listed

Open the chart page →

5,304
tyk-data-planetyk-helm5.4.11 of 3See more

tyk-data-plane tyk-helm 5.4.1

1 of the 3 container images this version deploys carry CVE-2026-88842.

Container imageDigestPackageFixed in
tykio/tyk-gateway-ee:v5.13.250b3e4f5398a
busybox@1:1.37.0-6+dhi3
no fix listed

Open the chart page →

1,412
tyk-stacktyk-helm5.4.11 of 7See more

tyk-stack tyk-helm 5.4.1

1 of the 7 container images this version deploys carry CVE-2026-88842.

Container imageDigestPackageFixed in
tykio/tyk-gateway-ee:v5.13.250b3e4f5398a
busybox@1:1.37.0-6+dhi3
no fix listed

Open the chart page →

5,294

Container images carrying it

15 by charts deploying them

A fixed version is listed for 0 of the 1 affected package.

Container imageDigestPackageFixed inUsed by
library/nextcloud:35.0.1:35.0.1-apache8f2f0e93aca5
busybox@1:1.37.0-6+b9
no fix listed
3
tykio/tyk-gateway-ee:v5.13.250b3e4f5398a
busybox@1:1.37.0-6+dhi3
no fix listed
3
library/nextcloud:31.0.6-apache588609d76b21
busybox@1:1.35.0-4+b4
no fix listed
1
library/nextcloud:31.0.10-apacheb7faa1653c39
busybox@1:1.37.0-6+b3
no fix listed
1
opencsghq/gitlab-gitaly:v17.5.0bdd2c58b9744
busybox@1:1.35.0-4+b3
no fix listed
1
opencsghq/gitlab-shell:v19.2.580a65ac370da
busybox@1:1.35.0-4+deb12u1+b1
no fix listed
1
ghcr.io/monicahq/monica-next:main8a02508cbdcf
busybox@1:1.37.0-6+b9
no fix listed
1
registry.gitlab.com/gitlab-org/build/cng/certificates:v19.5.074a4c2f23e47
busybox@1:1.37.0-6+b9
no fix listed
1
registry.gitlab.com/gitlab-org/build/cng/gitaly:v19.5.0595c4f2b1b7b
busybox@1:1.37.0-6+b9
no fix listed
1
registry.gitlab.com/gitlab-org/build/cng/gitlab-base:v19.5.09584ce75ec08
busybox@1:1.37.0-6+b9
no fix listed
1
registry.gitlab.com/gitlab-org/build/cng/gitlab-container-registry:v4.42.0-gitlab4fed422a7637
busybox@1:1.37.0-6+b9
no fix listed
1
registry.gitlab.com/gitlab-org/build/cng/gitlab-exporter:17.0.2b5c24e466636
busybox@1:1.37.0-6+b9
no fix listed
1
registry.gitlab.com/gitlab-org/build/cng/gitlab-openbao:v2.6.2-gitlab1295422a492cf
busybox@1:1.37.0-6+b9
no fix listed
1
registry.gitlab.com/gitlab-org/build/cng/gitlab-shell:v14.58.0723f668ceef8
busybox@1:1.37.0-6+b9
no fix listed
1
registry.gitlab.com/gitlab-org/build/cng/gitlab-workhorse-ee:v19.5.02f58e4625ab7
busybox@1:1.37.0-6+b9
no fix listed
1

syft 1.42.1 · advisories as of 16 Oct 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.