StackRadar

CVE-2026-89158

Medium

Advisory

Published 11 Sept 2026In the index since 12 Sept 2026
Severity
Medium
worst across findings
CVSS
6.5
base score, highest
EPSS
0.002
13th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
2,302
of 17,805 indexed, latest versions
Container images
2,233
deployed by those charts
Fix available
1 of 2
affected packages

CVE-2026-89158 affecting package nmap 7.95-5

Carried by container images the latest versions of 2,302 of 17,805 indexed charts deploy, on 2,233 images.

Affected packageAffected versionsFixed inImages
pcre2deb10.21-1, 10.34-7, 10.34-7ubuntu0.1, 10.39-3+ubuntu20.04.1+deb.sury.org+2+10 more10.42-1+deb12u1, 10.46-1~deb13u22,232
nmaprpm7.95-4.azl3no fix listed1
OSV records
DEBIAN-CVE-2026-89158UBUNTU-CVE-2026-89158AZL-101751
Trending
Rank 4 in indexed charts, since 12 Sept 2026. See the ranking →

Charts affected

2,302 by stars
ChartLatestAffected imagesRadar Score
clickhousezloi-space1.2.01 of 3See more

clickhouse zloi-space 1.2.0

1 of the 3 container images this version deploys carry CVE-2026-89158.

Container imageDigestPackageFixed in
yandex/clickhouse-server:21.3.204eccfffb01d7
pcre2@10.34-7
no fix listed

Open the chart page →

9,296
zoo-project-druzoo-projectOfficialVerified publisher0.10.41 of 6See more

zoo-project-dru zoo-project 0.10.4

1 of the 6 container images this version deploys carry CVE-2026-89158.

Container imageDigestPackageFixed in
zooproject/zoo-project:dru-19f3c4eed7c9ec9d1f0375bbe59f9d204a42bd3a9a507cb7e2dd
pcre2@10.39-3ubuntu0.1
no fix listed

Open the chart page →

7,964

Container images carrying it

2,233 by charts deploying them

A fixed version is listed for 1 of the 2 affected packages.

Container imageDigestPackageFixed inUsed by
ghcr.io/turbot/guardrails-agent-kubernetes:0.3.09d01bf9c9224
pcre2@10.42-4ubuntu2
no fix listed
1
ghcr.io/twigex/cospace:lateste5ecfd607e42
pcre2@10.42-1
10.42-1+deb12u1
1
ghcr.io/unique-ag/ai/search-proxy:2026.38.0aa6699b027bb
pcre2@10.46-1~deb13u1
10.46-1~deb13u2
1
ghcr.io/utkuozdemir/nvidia_gpu_exporter:1.5.0d75967a4dd72
pcre2@10.46-1build1
no fix listed
1
ghcr.io/vinny1892/octantis:latest45459c0910fc
pcre2@10.46-1~deb13u1
10.46-1~deb13u2
1
ghcr.io/virtuos/librechat_exporter:2.0.050ea1cf0086f
pcre2@10.42-1
10.42-1+deb12u1
1
ghcr.io/voxpupuli/container-puppetdb:7.18.0-v1.5.0a56dfe91f5b1
pcre2@10.39-3ubuntu0.1
no fix listed
1
ghcr.io/voxpupuli/container-puppetserver:7.17.0-v1.5.0916746209ac5
pcre2@10.39-3ubuntu0.1
no fix listed
1
ghcr.io/voxpupuli/puppetserver:8.7.0-main63873f3f698e
pcre2@10.39-3ubuntu0.1
no fix listed
1
ghcr.io/vshn/haproxy-with-mysql:1.0.0a3c27ee3fb2f
pcre2@10.42-1
10.42-1+deb12u1
1
ghcr.io/wearefrank/frank-gateway:1.0.05ccf797ccdf1
pcre2@10.42-4ubuntu2.1
no fix listed
1
ghcr.io/wekan/ferretdb:latestebed9a5eaae0
pcre2@10.46-1~deb13u1
10.46-1~deb13u2
1
ghcr.io/wgbh-mla/chowda:main86ab9effd1a5
pcre2@10.46-1~deb13u1
10.46-1~deb13u2
1
ghcr.io/wgbh-mla/ov-wag:v1.1.06df27f944fe8
pcre2@10.42-1
10.42-1+deb12u1
1
ghcr.io/wgbh-mla/pbcore-util:pr-66e04659a3baa
pcre2@10.42-1
10.42-1+deb12u1
1
ghcr.io/wiremind/bitnami/keycloak:26.5.0-debian-12-r38622ea9e43c0
pcre2@10.42-1
10.42-1+deb12u1
1
ghcr.io/wiremind/bitnami/rabbitmq:4.2.2-debian-12-r11572e12bc93c
pcre2@10.42-1
10.42-1+deb12u1
1
ghcr.io/wiremind/bitnami/redis:8.4.0-debian-12-r31f0f7ddc4370
pcre2@10.42-1
10.42-1+deb12u1
1
ghcr.io/wiremind/grafana-pdf-exporter:v1.7dbaa8527bf4c
pcre2@10.42-1
10.42-1+deb12u1
1
ghcr.io/wittdennis/calibre-web:1.1.1aa7d5d5dd6be
pcre2@10.42-1
10.42-1+deb12u1
1
ghcr.io/wittdennis/homeassistant-otbr:4.2.5282f840612d9
pcre2@10.46-1~deb13u1
10.46-1~deb13u2
1
ghcr.io/wizarrrr/wizarr:4.2.0-beta.3d19d886d5090
pcre2@10.42-1
10.42-1+deb12u1
1
ghcr.io/wolveix/satisfactory-server:v1.9.10e0f2f8c97598
pcre2@10.39-3ubuntu0.1
no fix listed
1
ghcr.io/woodenmaiden/relfinderreformedfront:latest344f53763b25
pcre2@10.42-1
10.42-1+deb12u1
1
ghcr.io/wrenix/autopush-rs/autoconnect:1.84.285f93ced88b2
pcre2@10.42-1
10.42-1+deb12u1
1
ghcr.io/wrenix/autopush-rs/autoendpoint:1.84.2d95e9a124eed
pcre2@10.42-1
10.42-1+deb12u1
1
ghcr.io/wundergraph/cosmo/cdn:0.14.1d86fcf169f15
pcre2@10.42-1
10.42-1+deb12u1
1
ghcr.io/wundergraph/cosmo/otelcollector:0.18.15a6fe78d4d15
pcre2@10.42-1
10.42-1+deb12u1
1
ghcr.io/yahoon/helm-demo:1.0.02930290a758c
pcre2@10.46-1~deb13u1
10.46-1~deb13u2
1
ghcr.io/yurymkomarov/docker/kubernetes-kiosk-chromium:0.1.27bff29dcec72
pcre2@10.42-1
10.42-1+deb12u1
1
ghcr.io/zazukoians/qlever-server:v0.10.11de7869ab46e
pcre2@10.42-4ubuntu2.1
no fix listed
1
ghcr.io/zoriya/kyoo_autosync:4.7.1fbba58ddb1a6
pcre2@10.42-1
10.42-1+deb12u1
1
ghcr.io/zoriya/kyoo_back:4.7.1416e980f76a6
pcre2@10.42-1
10.42-1+deb12u1
1
ghcr.io/zoriya/kyoo_migrations:4.7.1f7e607f24071
pcre2@10.42-1
10.42-1+deb12u1
1
ghcr.io/zoriya/kyoo_scanner:4.7.17dc0ee57b628
pcre2@10.42-1
10.42-1+deb12u1
1
ghcr.io/zystem-io/zymtrace-pub-gateway:26.9.2ae9ae0925ff8
pcre2@10.39-3ubuntu0.1
no fix listed
1
mcr.microsoft.com/azure-application-gateway/kubernetes-ingress:1.6.0bccaa701e2df
pcre2@10.34-7ubuntu0.1
no fix listed
1
mcr.microsoft.com/mssql/server:2019-CU16-ubuntu-20.0449a57dc220b1
pcre2@10.34-7
no fix listed
1
mcr.microsoft.com/mssql/server:latest4bab24f36c1e
pcre2@10.42-4ubuntu2.1
no fix listed
1
mcr.microsoft.com/mssql/server:2022-latestba4c8329f48f
pcre2@10.39-3ubuntu0.1
no fix listed
1
mcr.microsoft.com/mssql/server:2025-CU5-ubuntu-24.04cee0f4db03b5
pcre2@10.42-4ubuntu2.1
no fix listed
1
mcr.microsoft.com/oss/v2/kubernetes-csi/blob-csi:v1.27.9f9e20264150a
nmap@7.95-4.azl3
no fix listed
1
mcr.microsoft.com/playwright/mcp:v0.0.43e101b832b34d
pcre2@10.42-1
10.42-1+deb12u1
1
public.ecr.aws/aktosecurity/akto-ai-automated-testing:latest5a5d32281374
pcre2@10.42-1
10.42-1+deb12u1
1
public.ecr.aws/aktosecurity/akto-api-security-database-abstractor:1.66.9138c8b82c398
pcre2@10.42-4ubuntu2.1
no fix listed
1
public.ecr.aws/aktosecurity/akto-api-security-database-abstractor:latestf669a6eacf8c
pcre2@10.42-4ubuntu2.1
no fix listed
1
public.ecr.aws/aktosecurity/akto-api-security-mini-runtime:latest5d55a742a2bc
pcre2@10.46-1build1
no fix listed
1
public.ecr.aws/aktosecurity/akto-api-security-mini-runtime:1.74.6_local8b9208c09d76
pcre2@10.46-1build1
no fix listed
1
public.ecr.aws/aktosecurity/akto-api-security-mini-runtime:latest8be3ed26f746
pcre2@10.46-1build1
no fix listed
1
public.ecr.aws/aktosecurity/akto-api-security-mini-testing:1.72.6_local43316f900242
pcre2@10.46-1build1
no fix listed
1

syft 1.42.1 · advisories as of 19 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.