StackRadar

CVE-2026-89158

Medium

Advisory

Published 11 Sept 2026In the index since 12 Sept 2026
Severity
Medium
worst across findings
CVSS
6.5
base score, highest
EPSS
0.002
13th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
2,302
of 17,805 indexed, latest versions
Container images
2,233
deployed by those charts
Fix available
1 of 2
affected packages

CVE-2026-89158 affecting package nmap 7.95-5

Carried by container images the latest versions of 2,302 of 17,805 indexed charts deploy, on 2,233 images.

Affected packageAffected versionsFixed inImages
pcre2deb10.21-1, 10.34-7, 10.34-7ubuntu0.1, 10.39-3+ubuntu20.04.1+deb.sury.org+2+10 more10.42-1+deb12u1, 10.46-1~deb13u22,232
nmaprpm7.95-4.azl3no fix listed1
OSV records
DEBIAN-CVE-2026-89158UBUNTU-CVE-2026-89158AZL-101751
Trending
Rank 4 in indexed charts, since 12 Sept 2026. See the ranking →

Charts affected

2,302 by stars
ChartLatestAffected imagesRadar Score
clickhousezloi-space1.2.01 of 3See more

clickhouse zloi-space 1.2.0

1 of the 3 container images this version deploys carry CVE-2026-89158.

Container imageDigestPackageFixed in
yandex/clickhouse-server:21.3.204eccfffb01d7
pcre2@10.34-7
no fix listed

Open the chart page →

9,296
zoo-project-druzoo-projectOfficialVerified publisher0.10.41 of 6See more

zoo-project-dru zoo-project 0.10.4

1 of the 6 container images this version deploys carry CVE-2026-89158.

Container imageDigestPackageFixed in
zooproject/zoo-project:dru-19f3c4eed7c9ec9d1f0375bbe59f9d204a42bd3a9a507cb7e2dd
pcre2@10.39-3ubuntu0.1
no fix listed

Open the chart page →

7,964

Container images carrying it

2,233 by charts deploying them

A fixed version is listed for 1 of the 2 affected packages.

Container imageDigestPackageFixed inUsed by
ghcr.io/open-telemetry/demo:3.1.0-fraud-detectiona07ee694304b
pcre2@10.42-1
10.42-1+deb12u1
1
ghcr.io/open-telemetry/demo:1.12.0-emailservicea1f5cebb5240
pcre2@10.42-1
10.42-1+deb12u1
1
ghcr.io/open-telemetry/demo:1.12.0-shippingservicea3ca4c02a5df
pcre2@10.42-1
10.42-1+deb12u1
1
ghcr.io/open-telemetry/demo:1.12.0-adservicea59e5eead495
pcre2@10.42-4ubuntu2
no fix listed
1
ghcr.io/open-telemetry/demo:3.1.0-load-generatorb130d6cee6cb
pcre2@10.42-1
10.42-1+deb12u1
1
ghcr.io/open-telemetry/demo:1.12.0-recommendationserviceb294a4278407
pcre2@10.42-1
10.42-1+deb12u1
1
ghcr.io/open-telemetry/demo:3.1.0-accountingbfd9d13ac58a
pcre2@10.42-4ubuntu2.1
no fix listed
1
ghcr.io/open-telemetry/demo:3.1.0-agentd0f4ae0b32a8
pcre2@10.46-1~deb13u1
10.46-1~deb13u2
1
ghcr.io/open-telemetry/demo:3.1.0-addfd7a4697116
pcre2@10.42-4ubuntu2.1
no fix listed
1
ghcr.io/open-telemetry/demo:3.1.0-frontend-proxyfd4da88bfeaa
pcre2@10.39-3ubuntu0.1
no fix listed
1
ghcr.io/openunison/openunison-k8s:1.0.51128081dae281
pcre2@10.42-4ubuntu2.1
no fix listed
1
ghcr.io/openunison/openunison-k8s-react:1.0.2afb3e9282952
pcre2@10.39-3ubuntu0.1
no fix listed
1
ghcr.io/open-webui/mcpo:git-39b4867f06525afac6b
pcre2@10.42-1
10.42-1+deb12u1
1
ghcr.io/open-webui/open-terminal:0.13.0-slimdec44673c865
pcre2@10.46-1~deb13u1
10.46-1~deb13u2
1
ghcr.io/open-webui/terminals:latest5d2fd44366a4
pcre2@10.46-1~deb13u1
10.46-1~deb13u2
1
ghcr.io/open-webui/terminals-operator:latest6287ce8be502
pcre2@10.46-1~deb13u1
10.46-1~deb13u2
1
ghcr.io/oznu/homebridge:2022-07-08ff2af53897e7
pcre2@10.34-7
no fix listed
1
ghcr.io/pabloromeo/clusterplex_orchestrator:1.4.160fe80de2d22c
pcre2@10.42-1
10.42-1+deb12u1
1
ghcr.io/paperless-ngx/paperless-ngx:2.13.10642357c5dbd
pcre2@10.42-1
10.42-1+deb12u1
1
ghcr.io/paperless-ngx/paperless-ngx:2.20.134b05bcd28e69
pcre2@10.46-1~deb13u1
10.46-1~deb13u2
1
ghcr.io/paperless-ngx/paperless-ngx:2.20.357ad9565bff3
pcre2@10.46-1~deb13u1
10.46-1~deb13u2
1
ghcr.io/paperless-ngx/paperless-ngx:2.20.5665f2f5cc548
pcre2@10.46-1~deb13u1
10.46-1~deb13u2
1
ghcr.io/paperless-ngx/paperless-ngx:2.0.1ab255bea133e
pcre2@10.42-1
10.42-1+deb12u1
1
ghcr.io/paperless-ngx/paperless-ngx:2.20.14b89f83345532
pcre2@10.46-1~deb13u1
10.46-1~deb13u2
1
ghcr.io/papra-hq/papra:26.6.2-rootlessa281cb44176d
pcre2@10.46-1~deb13u1
10.46-1~deb13u2
1
ghcr.io/paradigmxyz/reth:v1.3.121e5290e8b743
pcre2@10.39-3ubuntu0.1
no fix listed
1
ghcr.io/paradigmxyz/reth:v2.2.0505fca5e87d6
pcre2@10.42-4ubuntu2.1
no fix listed
1
ghcr.io/paradigmxyz/reth:latest68e76b32ad9a
pcre2@10.42-4ubuntu2.1
no fix listed
1
ghcr.io/parmincloud/arvancloud-certmanager-issuer:v1.0.00b97452674a3
pcre2@10.46-1~deb13u1
10.46-1~deb13u2
1
ghcr.io/parmincloud/haproxy-redis-sentinel:1.0.040a00a6456ae
pcre2@10.42-1
10.42-1+deb12u1
1
ghcr.io/privacyengineering/hawk-service:latestbfedf47bb5e0
pcre2@10.39-3ubuntu0.1
no fix listed
1
ghcr.io/pschichtel/s3-backup:0.7.017666811f6a7
pcre2@10.46-1~deb13u1
10.46-1~deb13u2
1
ghcr.io/qovery/iam-eks-user-mapper:mainc41e3efc6097
pcre2@10.46-1~deb13u1
10.46-1~deb13u2
1
ghcr.io/qubiva/qubiva:v0.3.2cdf1e3329bfe
pcre2@10.46-1~deb13u1
10.46-1~deb13u2
1
ghcr.io/radar-base/managementportal/management-portal:3.0.0c1b37e821f72
pcre2@10.46-1build1
no fix listed
1
ghcr.io/radar-base/radar-app-config/radar-app-config:0.6.24431db7b486b
pcre2@10.42-4ubuntu2.1
no fix listed
1
ghcr.io/radar-base/radar-data-dashboard-backend/radar-data-dashboard-backend:0.2.4d1e55350923c
pcre2@10.42-4ubuntu2.1
no fix listed
1
ghcr.io/radar-base/radar-gateway/radar-gateway:0.9.4219d894aa7a6
pcre2@10.42-4ubuntu2.1
no fix listed
1
ghcr.io/radar-base/radar-output-restructure/radar-output-restructure:3.0.67fb9c70e96a4
pcre2@10.42-4ubuntu2.1
no fix listed
1
ghcr.io/radar-base/radar-schemas/radar-schemas-tools:0.8.16c442e8bfe6b4
pcre2@10.42-4ubuntu2.1
no fix listed
1
ghcr.io/radar-base/radar-upload-source-connector/radar-upload-connect-backend:0.6.46a04b43b8d9a
pcre2@10.42-4ubuntu2.1
no fix listed
1
ghcr.io/rajnandan1/kener:3.2.182b993cb232eb
pcre2@10.42-1
10.42-1+deb12u1
1
ghcr.io/reitermarkus/7d2d:main39953b387b61
pcre2@10.46-1~deb13u1
10.46-1~deb13u2
1
ghcr.io/retyc/retyc-k8s-csi:v0.2.01521d4baeb85
pcre2@10.46-1~deb13u1
10.46-1~deb13u2
1
ghcr.io/rodg/rtmp-controller:latest67f99a5beab7
pcre2@10.42-1
10.42-1+deb12u1
1
ghcr.io/rss-bridge/rss-bridge:latest606896116558
pcre2@10.42-1
10.42-1+deb12u1
1
ghcr.io/runwhen-contrib/runwhen-local:0.12.0533ce58c6e02
pcre2@10.46-1~deb13u1
10.46-1~deb13u2
1
ghcr.io/samr037/node-debug-dashboard:0.3.0c79b2e64a211
pcre2@10.42-1
10.42-1+deb12u1
1
ghcr.io/sdr-enthusiasts/docker-flightradar24:latest917e53402d51
pcre2@10.46-1~deb13u1
10.46-1~deb13u2
1
ghcr.io/sdwbgn/unitycatalog-helm/docker/unitycatalog-ui:0.2.1-5d668c1ed07e7ca098d
pcre2@10.42-1
10.42-1+deb12u1
1

syft 1.42.1 · advisories as of 19 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.