StackRadar

CVE-2026-89158

Medium

Advisory

Published 11 Sept 2026In the index since 12 Sept 2026
Severity
Medium
worst across findings
CVSS
6.5
base score, highest
EPSS
0.002
13th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
2,278
of 17,805 indexed, latest versions
Container images
2,197
deployed by those charts
Fix available
1 of 2
affected packages

CVE-2026-89158 affecting package nmap 7.95-5

Carried by container images the latest versions of 2,278 of 17,805 indexed charts deploy, on 2,197 images.

Affected packageAffected versionsFixed inImages
pcre2deb10.21-1, 10.34-7, 10.34-7ubuntu0.1, 10.39-3+ubuntu20.04.1+deb.sury.org+2+10 more10.42-1+deb12u1, 10.46-1~deb13u22,196
nmaprpm7.95-4.azl3no fix listed1
OSV records
DEBIAN-CVE-2026-89158UBUNTU-CVE-2026-89158AZL-101751
Trending
Rank 4 in indexed charts, since 12 Sept 2026. See the ranking →

Charts affected

2,278 by stars
ChartLatestAffected imagesRadar Score
kusionkusionstackVerified publisher0.14.11 of 3See more

kusion kusionstack 0.14.1

1 of the 3 container images this version deploys carry CVE-2026-89158.

Container imageDigestPackageFixed in
kusionstack/kusion:v0.14.0126c8f0b0976
pcre2@10.39-3ubuntu0.1
no fix listed

Open the chart page →

59,153
sample-operatorkusionstackVerified publisher0.1.21 of 1See more

sample-operator kusionstack 0.1.2

1 of the 1 container images this version deploys carry CVE-2026-89158.

Container imageDigestPackageFixed in
chaerr/kridge:demo-operator-v0.1.266833deec017
pcre2@10.34-7ubuntu0.1
no fix listed

Open the chart page →

2,515
fstyr-ddp-keycloak-application-platform-configkvalitetsitVerified publisher0.1.131 of 1See more

fstyr-ddp-keycloak-application-platform-config kvalitetsit 0.1.13

1 of the 1 container images this version deploys carry CVE-2026-89158.

Container imageDigestPackageFixed in
adorsys/keycloak-config-cli:6.3.0-26.1.085be7a45a94c
pcre2@10.42-4ubuntu2
no fix listed

Open the chart page →

3,163
keycloak-application-platform-configkvalitetsitVerified publisher0.0.291 of 1See more

keycloak-application-platform-config kvalitetsit 0.0.29

1 of the 1 container images this version deploys carry CVE-2026-89158.

Container imageDigestPackageFixed in
adorsys/keycloak-config-cli:6.1.6-25.0.1eb49a2dcbbb8
pcre2@10.42-4ubuntu2
no fix listed

Open the chart page →

3,393
stakitkvalitetsitVerified publisher0.3.111 of 3See more

stakit kvalitetsit 0.3.11

1 of the 3 container images this version deploys carry CVE-2026-89158.

Container imageDigestPackageFixed in
kvalitetsit/stakit-backend:0.3.0f0af0ba589af
pcre2@10.39-3ubuntu0.1
no fix listed

Open the chart page →

7,852
nginx-chartkyb-nginx0.1.01 of 1See more

nginx-chart kyb-nginx 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-89158.

Container imageDigestPackageFixed in
library/nginx:latest05b8cb60c354
pcre2@10.46-1~deb13u1
10.46-1~deb13u2

Open the chart page →

1,879
pageslatif-pages1.0.01 of 3See more

pages latif-pages 1.0.0

1 of the 3 container images this version deploys carry CVE-2026-89158.

Container imageDigestPackageFixed in
dellcloud/pages:monitor6ba7b22caacd
pcre2@10.34-7
no fix listed

Open the chart page →

20,261
pageslavanya-pages1.0.01 of 3See more

pages lavanya-pages 1.0.0

1 of the 3 container images this version deploys carry CVE-2026-89158.

Container imageDigestPackageFixed in
dellcloud/pages:monitor6ba7b22caacd
pcre2@10.34-7
no fix listed

Open the chart page →

20,261
homebridgelbenicio-communityVerified publisher0.1.151 of 1See more

homebridge lbenicio-community 0.1.15

1 of the 1 container images this version deploys carry CVE-2026-89158.

Container imageDigestPackageFixed in
homebridge/homebridge:latest77c685a40911
pcre2@10.42-4ubuntu2.1
no fix listed

Open the chart page →

29,715
kubernetes-dashboardlbenicio-communityVerified publisher7.14.91 of 5See more

kubernetes-dashboard lbenicio-community 7.14.9

1 of the 5 container images this version deploys carry CVE-2026-89158.

Container imageDigestPackageFixed in
library/kong:3.92a8cf3b110cd
pcre2@10.42-4ubuntu2.1
no fix listed

Open the chart page →

2,322
smtplbenicio-communityVerified publisher0.1.31 of 1See more

smtp lbenicio-community 0.1.3

1 of the 1 container images this version deploys carry CVE-2026-89158.

Container imageDigestPackageFixed in
registry.gitlab.com/egos-tech/smtp:latestdf842ed79211
pcre2@10.46-1~deb13u1
10.46-1~deb13u2

Open the chart page →

1,372
uptime-kumalbenicio-communityVerified publisher0.1.11 of 1See more

uptime-kuma lbenicio-community 0.1.1

1 of the 1 container images this version deploys carry CVE-2026-89158.

Container imageDigestPackageFixed in
louislam/uptime-kuma:2.3.29aeb4e51d038
pcre2@10.42-1
10.42-1+deb12u1

Open the chart page →

33,731
jenkinsleechistest2.7.11 of 2See more

jenkins leechistest 2.7.1

1 of the 2 container images this version deploys carry CVE-2026-89158.

Container imageDigestPackageFixed in
jenkins/jenkins:ltsc1e4c349365f
pcre2@10.46-1~deb13u1
10.46-1~deb13u2

Open the chart page →

4,464
kinesaliteleprechaun-charts0.1.21 of 1See more

kinesalite leprechaun-charts 0.1.2

1 of the 1 container images this version deploys carry CVE-2026-89158.

Container imageDigestPackageFixed in
instructure/kinesalite:latest34400d82f28f
pcre2@10.34-7ubuntu0.1
no fix listed

Open the chart page →

4,287
owntracks-exporterleprechaun-charts0.1.111 of 1See more

owntracks-exporter leprechaun-charts 0.1.11

1 of the 1 container images this version deploys carry CVE-2026-89158.

Container imageDigestPackageFixed in
ghcr.io/leprechaun/owntracks-exporter:0.1.11-de545066099e1abd6d08
pcre2@10.42-1
10.42-1+deb12u1

Open the chart page →

4,086
vaultwardenleprechaun-charts0.1.281 of 1See more

vaultwarden leprechaun-charts 0.1.28

1 of the 1 container images this version deploys carry CVE-2026-89158.

Container imageDigestPackageFixed in
vaultwarden/server:1.37.1ebdfe70701c6
pcre2@10.46-1~deb13u1
10.46-1~deb13u2

Open the chart page →

2,076
jackettlib42Verified publisher1.1.01 of 1See more

jackett lib42 1.1.0

1 of the 1 container images this version deploys carry CVE-2026-89158.

Container imageDigestPackageFixed in
lib42/jackett:latesta55596cda383
pcre2@10.42-1
10.42-1+deb12u1

Open the chart page →

4,668
libredb-studiolibredb-studio-oci0.1.651See more

libredb-studio libredb-studio-oci 0.1.65

1 container image this version deploys carries CVE-2026-89158.

Container imageDigestPackageFixed in
ghcr.io/libredb/libredb-studio:0.16.0fa925884368a
pcre2@10.46-1~deb13u1
10.46-1~deb13u2

Open the chart page →

—
kube-iptables-tailerlifen0.2.31 of 1See more

kube-iptables-tailer lifen 0.2.3

1 of the 1 container images this version deploys carry CVE-2026-89158.

Container imageDigestPackageFixed in
honestica/kube-iptables-tailer:master-91a393242fb939
pcre2@10.34-7
no fix listed

Open the chart page →

4,472
lightlyticslightlytics0.1.212 of 2See more

lightlytics lightlytics 0.1.21

2 of the 2 container images this version deploys carry CVE-2026-89158.

Container imageDigestPackageFixed in
public.ecr.aws/k6v9y5g3/cluster-agent:master.57536d051110158
pcre2@10.42-1
10.42-1+deb12u1
public.ecr.aws/k6v9y5g3/cluster-agent:cost_k8s_process.5769e14a72b066d
pcre2@10.42-1
10.42-1+deb12u1

Open the chart page →

5,439
linkdinglinkding0.2.31 of 1See more

linkding linkding 0.2.3

1 of the 1 container images this version deploys carry CVE-2026-89158.

Container imageDigestPackageFixed in
sissbruecker/linkding:1.41.0-plusa222fb777e1f
pcre2@10.42-1
10.42-1+deb12u1

Open the chart page →

38,429
weblinzhengen0.1.71 of 1See more

web linzhengen 0.1.7

1 of the 1 container images this version deploys carry CVE-2026-89158.

Container imageDigestPackageFixed in
library/nginx:latest05b8cb60c354
pcre2@10.46-1~deb13u1
10.46-1~deb13u2

Open the chart page →

1,879
listmonklistmonk-chartVerified publisher2.0.11 of 2See more

listmonk listmonk-chart 2.0.1

1 of the 2 container images this version deploys carry CVE-2026-89158.

Container imageDigestPackageFixed in
library/postgres:159b1d34adbce1
pcre2@10.46-1~deb13u1
10.46-1~deb13u2

Open the chart page →

3,128
pocketbase-halitesql0.0.31 of 1See more

pocketbase-ha litesql 0.0.3

1 of the 1 container images this version deploys carry CVE-2026-89158.

Container imageDigestPackageFixed in
ghcr.io/litesql/pocketbase-ha:latestc5b28608958b
pcre2@10.46-1~deb13u1
10.46-1~deb13u2

Open the chart page →

1,164
ingresslivekit-server1.2.21 of 1See more

ingress livekit-server 1.2.2

1 of the 1 container images this version deploys carry CVE-2026-89158.

Container imageDigestPackageFixed in
livekit/ingress:v1.2.21ab01641b366
pcre2@10.39-3ubuntu0.1
no fix listed

Open the chart page →

10,821
pagesliviu884422-pages1.0.01 of 3See more

pages liviu884422-pages 1.0.0

1 of the 3 container images this version deploys carry CVE-2026-89158.

Container imageDigestPackageFixed in
dellcloud/pages:monitor6ba7b22caacd
pcre2@10.34-7
no fix listed

Open the chart page →

20,261
web-chartljw-ktcloudlab0.1.01 of 1See more

web-chart ljw-ktcloudlab 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-89158.

Container imageDigestPackageFixed in
library/nginx:latest05b8cb60c354
pcre2@10.46-1~deb13u1
10.46-1~deb13u2

Open the chart page →

1,879
llmarinerllmariner1.53.11 of 21See more

llmariner llmariner 1.53.1

1 of the 21 container images this version deploys carry CVE-2026-89158.

Container imageDigestPackageFixed in
public.ecr.aws/cloudnatix/llmariner/model-manager-loader:1.27.026ac7263a823
pcre2@10.46-1~deb13u1
10.46-1~deb13u2

Open the chart page →

12,177
jellyfinlmatfyVerified publisher0.1.31 of 1See more

jellyfin lmatfy 0.1.3

1 of the 1 container images this version deploys carry CVE-2026-89158.

Container imageDigestPackageFixed in
jellyfin/jellyfin:10.11aefb67e6a7ff
pcre2@10.46-1~deb13u1
10.46-1~deb13u2

Open the chart page →

2,658
mt-mcp-grafanaloafoe0.10.01 of 2See more

mt-mcp-grafana loafoe 0.10.0

1 of the 2 container images this version deploys carry CVE-2026-89158.

Container imageDigestPackageFixed in
grafana/mcp-grafana:0.14.042f541f22063
pcre2@10.42-1
10.42-1+deb12u1

Open the chart page →

1,981
locust-pluginslocust-pluginsVerified publisher0.0.41 of 3See more

locust-plugins locust-plugins 0.0.4

1 of the 3 container images this version deploys carry CVE-2026-89158.

Container imageDigestPackageFixed in
locustio/locust:2.24.151d866285170
pcre2@10.42-1
10.42-1+deb12u1

Open the chart page →

7,570
uptime-kumaloeken-at-homeVerified publisher2.3.21 of 1See more

uptime-kuma loeken-at-home 2.3.2

1 of the 1 container images this version deploys carry CVE-2026-89158.

Container imageDigestPackageFixed in
louislam/uptime-kuma:2.3.29aeb4e51d038
pcre2@10.42-1
10.42-1+deb12u1

Open the chart page →

33,731
vnode-runtimeloftVerified publisher0.3.31 of 1See more

vnode-runtime loft 0.3.3

1 of the 1 container images this version deploys carry CVE-2026-89158.

Container imageDigestPackageFixed in
ghcr.io/loft-sh/vnode-runtime:0.3.3b065ec5a5239
pcre2@10.39-3ubuntu0.1
no fix listed

Open the chart page →

2,536
nightingalelogic3579Verified publisher0.3.13 of 6See more

nightingale logic3579 0.3.1

3 of the 6 container images this version deploys carry CVE-2026-89158.

Container imageDigestPackageFixed in
flashcatcloud/categraf:latest42e6ab16472e
pcre2@10.42-4ubuntu2.1
no fix listed
flashcatcloud/nightingale:8.5.1421acb36181b
pcre2@10.46-1~deb13u1
10.46-1~deb13u2
library/redis:6.2143f7bfc2358
pcre2@10.42-1
10.42-1+deb12u1

Open the chart page →

9,147
rocketmq-exporterlogic3579Verified publisher0.0.21 of 1See more

rocketmq-exporter logic3579 0.0.2

1 of the 1 container images this version deploys carry CVE-2026-89158.

Container imageDigestPackageFixed in
apache/rocketmq-exporter:0.0.2c8fb51195444
pcre2@10.39-3ubuntu0.1
no fix listed

Open the chart page →

6,680
login-test-backendlogin-test-backend0.1.01 of 2See more

login-test-backend login-test-backend 0.1.0

1 of the 2 container images this version deploys carry CVE-2026-89158.

Container imageDigestPackageFixed in
aboogie/login_test_backend:new9c41a4483ac8
pcre2@10.42-1
10.42-1+deb12u1

Open the chart page →

6,591
apica-ascentlogiqai2.0.41 of 19See more

apica-ascent logiqai 2.0.4

1 of the 19 container images this version deploys carry CVE-2026-89158.

Container imageDigestPackageFixed in
logiqai/flash:v3.10.265b996bc7bdc
pcre2@10.42-1
10.42-1+deb12u1

Open the chart page →

23,727
loxilbloxilbVerified publisher0.1.02 of 2See more

loxilb loxilb 0.1.0

2 of the 2 container images this version deploys carry CVE-2026-89158.

Container imageDigestPackageFixed in
ghcr.io/loxilb-io/kube-loxilb:latest6f65e53e252d
pcre2@10.39-3ubuntu0.1
no fix listed
ghcr.io/loxilb-io/loxilb:latestc7ede1bab641
pcre2@10.39-3ubuntu0.1
no fix listed

Open the chart page →

4,537
lsdisklsdiskVerified publisher2.0.71 of 4See more

lsdisk lsdisk 2.0.7

1 of the 4 container images this version deploys carry CVE-2026-89158.

Container imageDigestPackageFixed in
danialnabiyan1382/lsdisk:v2.0.8f96a7ebf1f42
pcre2@10.42-1
10.42-1+deb12u1

Open the chart page →

5,075
nublado2lsst-sqre0.8.51 of 2See more

nublado2 lsst-sqre 0.8.5

1 of the 2 container images this version deploys carry CVE-2026-89158.

Container imageDigestPackageFixed in
lsstsqre/nublado2:2.0.1b75bf8aaafa4
pcre2@10.34-7
no fix listed

Open the chart page →

86,968
redislsst-sqre1.2.11 of 1See more

redis lsst-sqre 1.2.1

1 of the 1 container images this version deploys carry CVE-2026-89158.

Container imageDigestPackageFixed in
library/redis:8.10.1298e5b3bc566
pcre2@10.46-1~deb13u1
10.46-1~deb13u2

Open the chart page →

1,004
squash-apilsst-sqre0.1.61 of 3See more

squash-api lsst-sqre 0.1.6

1 of the 3 container images this version deploys carry CVE-2026-89158.

Container imageDigestPackageFixed in
library/redis:6.2143f7bfc2358
pcre2@10.42-1
10.42-1+deb12u1

Open the chart page →

6,667
flaresolverrluiscajl0.0.31 of 1See more

flaresolverr luiscajl 0.0.3

1 of the 1 container images this version deploys carry CVE-2026-89158.

Container imageDigestPackageFixed in
flaresolverr/flaresolverr:latest139dfee1c6f8
pcre2@10.42-1
10.42-1+deb12u1

Open the chart page →

27,754
plex-rclone-wireguardluiscajl1.0.191 of 2See more

plex-rclone-wireguard luiscajl 1.0.19

1 of the 2 container images this version deploys carry CVE-2026-89158.

Container imageDigestPackageFixed in
ghcr.io/linuxserver/plex:latest7f9a1d574958
pcre2@10.46-1build1
no fix listed

Open the chart page →

868
hyperglassm0nsterrr-hyperglassVerified publisher4.2.11 of 2See more

hyperglass m0nsterrr-hyperglass 4.2.1

1 of the 2 container images this version deploys carry CVE-2026-89158.

Container imageDigestPackageFixed in
valkey/valkey:9.0.2930b41430fb7
pcre2@10.46-1~deb13u1
10.46-1~deb13u2

Open the chart page →

4,699
jellyfinm0nsterrr-jellyfinVerified publisher2.3.51 of 1See more

jellyfin m0nsterrr-jellyfin 2.3.5

1 of the 1 container images this version deploys carry CVE-2026-89158.

Container imageDigestPackageFixed in
jellyfin/jellyfin:10.11.11aefb67e6a7ff
pcre2@10.46-1~deb13u1
10.46-1~deb13u2

Open the chart page →

2,658
kea-exporterm0nsterrr-kea-exporterVerified publisher2.2.11 of 1See more

kea-exporter m0nsterrr-kea-exporter 2.2.1

1 of the 1 container images this version deploys carry CVE-2026-89158.

Container imageDigestPackageFixed in
ghcr.io/mweinelt/kea-exporter:v0.7.1d7b77020e924
pcre2@10.46-1~deb13u1
10.46-1~deb13u2

Open the chart page →

1,093
m9sweeperm9sweeperVerified publisher1.6.01 of 6See more

m9sweeper m9sweeper 1.6.0

1 of the 6 container images this version deploys carry CVE-2026-89158.

Container imageDigestPackageFixed in
ghcr.io/m9sweeper/trawler:1.6.0df917c5a7e54
pcre2@10.42-1
10.42-1+deb12u1

Open the chart page →

9,848
magistralamagistrala-devopsVerified publisher0.16.22 of 42See more

magistrala magistrala-devops 0.16.2

2 of the 42 container images this version deploys carry CVE-2026-89158.

Container imageDigestPackageFixed in
envoyproxy/envoy:v1.31-latestcaa5b411be16
pcre2@10.39-3ubuntu0.1
no fix listed
jaegertracing/jaeger-cassandra-schema:1.53.0d48d6dab2c65
pcre2@10.39-3ubuntu0.1
no fix listed

Open the chart page →

24,748
docker-mailservermailserverVerified publisher0.2.651 of 9See more

docker-mailserver mailserver 0.2.65

1 of the 9 container images this version deploys carry CVE-2026-89158.

Container imageDigestPackageFixed in
mvance/unbound:1.22.076906da36d18
pcre2@10.42-1
10.42-1+deb12u1

Open the chart page →

11,536

Container images carrying it

2,197 by charts deploying them

A fixed version is listed for 1 of the 2 affected packages.

No deployed image carries CVE-2026-89158.

syft 1.42.1 · advisories as of 18 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.