CVE-2026-89161
HighAdvisory
Published 11 Sept 2026In the index since 12 Sept 2026
- Severity
- High
- worst across findings
- CVSS
- 7.4
- base score, highest
- EPSS
- 0.001
- 1st percentile
- CISA KEV
- Not listed
- no confirmed exploitation
- Charts affected
- 2,287
- of 17,790 indexed, latest versions
- Container images
- 2,234
- deployed by those charts
- Fix available
- 1 of 1
- affected package
The matching OSV records carry no description.
Carried by container images the latest versions of 2,287 of 17,790 indexed charts deploy, on 2,234 images.
| Affected package | Affected versions | Fixed in | Images |
|---|---|---|---|
| pcre2deb | 10.21-1, 10.34-7, 10.34-7ubuntu0.1, 10.39-3+ubuntu20.04.1+deb.sury.org+2+10 more | 10.42-1+deb12u1, 10.46-1~deb13u2 | 2,234 |
- OSV records
- DEBIAN-CVE-2026-89161UBUNTU-CVE-2026-89161ECHO-4e33-89ce-0def
- Trending
- Rank 2 in indexed charts, since 12 Sept 2026. See the ranking →
Charts affected
2,287 by stars
| Chart | Latest | Affected images | Radar Score |
|---|---|---|---|
| vaultwardenhelmforgeVerified publisher | 1.14.0 | 1 of 1See more | 1,503 |
| mywebapphelm-nginxVerified publisher | 0.1.0 | 1 of 1See more | 1,849 |
| helmuphelmupVerified publisher | 0.1.0 | 3 of 3See more | 16,574 |
| hivemq-platform-operatorhivemqOfficialVerified publisher | 0.2.26 | 1 of 1See more | 925 |
| hivemq-swarmhivemqOfficialVerified publisher | 0.2.70 | 1 of 1See more | 1,394 |
| hiverhiverVerified publisher | 0.1.45 | 10 of 10See more | 21,935 |
| refineryhoneycomb | 3.4.0 | 1 of 2See more | 988 |
| htnn-controllerhtnnVerified publisher | 0.5.0 | 1 of 1See more | 4,349 |
| huehue | 1.0.3 | 1 of 3See more | 12,481 |
| iceberg-resticeberg-rest-fixture | 0.0.1 | 1 of 2See more | 3,512 |
| spoolmanideaplexusVerified publisher | 2.7.1 | 1 of 1See more | 1,797 |
| backendikusi-bk-chart | 1.0.3 | 3 of 3See more | 6,009 |
| odooimioVerified publisher | 3.0.2 | 1 of 3See more | 3,091 |
| immichimmich-helm | 0.3.0 | 4 of 4See more | 15,793 |
| valkey-clusterinnagoVerified publisher | 1.1.0 | 1 of 2See more | 2,645 |
| elasticinseefrlab | 2.2.0 | 2 of 2See more | 17,372 |
| interlinkinterlink | 0.6.1 | 1 of 2See more | 2,467 |
| iris-webappiris-webapp | 0.2.4 | 1 of 2See more | 11,842 |
| jellyfinjellyfinVerified publisher | 0.3.30 | 1 of 1See more | 2,626 |
| jenkinsjkimVerified publisher | 5.5.14 | 1 of 2See more | 7,404 |
| k8s-grafana-stackk8s-grafana-stackVerified publisher | 0.2.32 | 1 of 17See more | 15,535 |
| ombik8s-home-lab-repo | 12.2.1 | 1 of 1See more | 1,465 |
| kafka-kraft-on-k8skafka-kraft-on-k8sVerified publisher | 1.1.0 | 3 of 3See more | 14,328 |
| web-chartkbt-ktcloudlab | 0.1.0 | 1 of 1See more | 1,849 |
| kdiffkdiff-snapshotsVerified publisher | 0.0.203 | 1 of 2See more | 5,534 |
| kdiff-snapshotskdiff-snapshotsVerified publisher | 0.0.55 | 1 of 1See more | 5,815 |
| app-componentkeltio-helm-chartsVerified publisher | 3.14.0 | 1 of 1See more | 1,849 |
| kenerkenerVerified publisher | 0.2.0 | 1 of 1See more | 5,245 |
| keycloak-reporterkeycloak-reporterVerified publisher | 1.4.15 | 1 of 1See more | 1,344 |
| keydbkeydb-helmVerified publisher | 1.0.6 | 1 of 1See more | 5,305 |
| kikplatekikplateVerified publisher | 0.22.0 | 1 of 3See more | 2,794 |
| netbirdkitstream-netbird | 0.7.0 | 1 of 3See more | 1,342 |
| glpikitsune-itopsVerified publisher | 1.0.7 | 2 of 3See more | 4,929 |
| powerdns-recursorklicktippVerified publisher | 0.4.10 | 1 of 1See more | 1,906 |
| knot-resolverknot-resolverVerified publisher | 1.0.5 | 1 of 1See more | 2,081 |
| difykubeblocksVerified publisher | 0.5.1 | 2 of 5See more | 20,461 |
| owncloudkubernetes-homelab-helm-chartsVerified publisher | 0.1.0 | 3 of 3See more | 9,983 |
| kubeseal-webguikubeseal-webgui | 6.0.4 | 1 of 2See more | 4,112 |
| kubesendkubesend | 0.1.9 | 1 of 1See more | 1,396 |
| hertzbeatkubesphere-testVerified publisher | 1.4.1 | 1 of 4See more | 7,753 |
| kuma-ingress-watcherkuma-ingress-watcherVerified publisher | 1.4.0 | 1 of 1See more | 2,679 |
| kubefarmkvaps | 0.13.4 | 1 of 6See more | 12,473 |
| opennebulakvaps | 2.1.1 | 5 of 9See more | 114,050 |
| ohifkylesferrazzaVerified publisher | 0.1.0 | 1 of 2See more | 3,534 |
| overpass-apil4gVerified publisher | 0.1.2 | 1 of 1See more | 3,571 |
| api-gatewaylabs64io-helm-chartsVerified publisher | 0.12.0 | 1 of 1See more | 1,029 |
| auditflowlabs64io-helm-chartsVerified publisher | 0.12.1 | 1 of 3See more | 1,492 |
| checkoutlabs64io-helm-chartsVerified publisher | 0.8.0 | 1 of 3See more | 1,649 |
| payment-gatewaylabs64io-helm-chartsVerified publisher | 0.8.0 | 2 of 2See more | 2,725 |
| langflow-idelangflow | 0.1.2 | 1 of 2See more | 4,031 |
Container images carrying it
2,234 by charts deploying them
A fixed version is listed for 1 of the 1 affected package.
| Container image | Digest | Package | Fixed in | Used by |
|---|---|---|---|---|
| stackstorm/ | 33ecfda16608 | pcre2 | no fix listed | 1 |
| stackstorm/ | 4e3f8c7ca52d | pcre2 | no fix listed | 1 |
| stackstorm/ | f190a6212195 | pcre2 | no fix listed | 1 |
| stackstorm/ | 259503496ff9 | pcre2 | no fix listed | 1 |
| stackstorm/ | b1de2055c362 | pcre2 | no fix listed | 1 |
| stackstorm/ | b1a338f64773 | pcre2 | no fix listed | 1 |
| stackstorm/ | 1c8904a3bf67 | pcre2 | no fix listed | 1 |
| stackstorm/ | 1bf35bfaf00c | pcre2 | no fix listed | 1 |
| stackstorm/ | 09989a26c8b7 | pcre2 | no fix listed | 1 |
| stackstorm/ | 19fdfffdbba8 | pcre2 | no fix listed | 1 |
| stalwartlabs/ | 25001929f36a | pcre2 | 10.46-1~deb13u2 | 1 |
| stalwartlabs/ | 388dcb75a707 | pcre2 | 10.46-1~deb13u2 | 1 |
| stalwartlabs/ | 74ca4f7f6885 | pcre2 | 10.46-1~deb13u2 | 1 |
| stalwartlabs/ | dcf575db2d53 | pcre2 | 10.46-1~deb13u2 | 1 |
| stashapp/ | 24dbd7607174 | pcre2 | no fix listed | 1 |
| stashapp/ | a534c8afdf39 | pcre2 | no fix listed | 1 |
| statcan/ | 3921305425b8 | pcre2 | no fix listed | 1 |
| statusim/ | 6ccd9d382885 | pcre2 | 10.42-1+deb12u1 | 1 |
| steamcmd/ | 5028a25268e7 | pcre2 | no fix listed | 1 |
| streamnative/ | 11bceacec8fb | pcre2 | no fix listed | 1 |
| structurizr/ | 4b5ffb5119c8 | pcre2 | no fix listed | 1 |
| substratusai/ | 61695be635eb | pcre2 | 10.42-1+deb12u1 | 1 |
| supabase/ | 2781daf92394 | pcre2 | 10.42-1+deb12u1 | 1 |
| supabase/ | eff9c554d649 | pcre2 | 10.42-1+deb12u1 | 1 |
| supabase/ | 49bfe526f1b4 | pcre2 | 10.46-1~deb13u2 | 1 |
| supabase/ | a84cc713585e | pcre2 | 10.42-1+deb12u1 | 1 |
| supabase/ | d0a96973e9f1 | pcre2 | 10.42-1+deb12u1 | 1 |
| supabase/ | aa1c92c0cf32 | pcre2 | 10.42-1+deb12u1 | 1 |
| supabase/ | d207e6e23ad3 | pcre2 | 10.42-1+deb12u1 | 1 |
| supabase/ | d3aa0c86c7b3 | pcre2 | 10.46-1~deb13u2 | 1 |
| supabase/ | 26d8070c55e9 | pcre2 | 10.42-1+deb12u1 | 1 |
| supabase/ | 606aca9fdaa7 | pcre2 | 10.42-1+deb12u1 | 1 |
| supabase/ | 94a2a9d2906e | pcre2 | 10.42-1+deb12u1 | 1 |
| svtechnmaa/ | a934ffd63d25 | pcre2 | no fix listed | 1 |
| svtechnmaa/ | 1d71314424aa | pcre2 | no fix listed | 1 |
| svtechnmaa/ | 410a25b51f9f | pcre2 | no fix listed | 1 |
| svtechnmaa/ | 18394b08e6c3 | pcre2 | 10.42-1+deb12u1 | 1 |
| svtechnmaa/ | 6e368ace0977 | pcre2 | no fix listed | 1 |
| sysnet4admin/ | bc25b152d88e | pcre2 | no fix listed | 1 |
| sysnet4admin/ | e74b43c7f492 | pcre2 | 10.42-1+deb12u1 | 1 |
| sysnet4admin/ | 5802bfcd7fed | pcre2 | 10.42-1+deb12u1 | 1 |
| sysnet4admin/ | 74ded2d92f07 | pcre2 | 10.46-1~deb13u2 | 1 |
| tautulli/ | 670e68dd9efc | pcre2 | 10.46-1~deb13u2 | 1 |
| tchiotludo/ | c2824dc2ae44 | pcre2 | no fix listed | 1 |
| teknas09/ | 12a1fa85c4aa | pcre2 | 10.42-1+deb12u1 | 1 |
| tensorflow/ | 8a208c232297 | pcre2 | no fix listed | 1 |
| tensorzero/ | c939db4f27e4 | pcre2 | 10.46-1~deb13u2 | 1 |
| tensorzero/ | f2563d54724e | pcre2 | 10.46-1~deb13u2 | 1 |
| tenureai/ | 5f5b222df9a5 | pcre2 | 10.46-1~deb13u2 | 1 |
| teslamate/ | cc87082e7d67 | pcre2 | 10.46-1~deb13u2 | 1 |