StackRadar

CVE-2026-89162

Low

Advisory

Published 11 Sept 2026In the index since 12 Sept 2026
Severity
Low
worst across findings
CVSS
2.9
base score, highest
EPSS
0.001
1st percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
730
of 17,781 indexed, latest versions
Container images
456
deployed by those charts
Fix available
1 of 1
affected package

The matching OSV records carry no description.

Carried by container images the latest versions of 730 of 17,781 indexed charts deploy, on 456 images.

Affected packageAffected versionsFixed inImages
pcre2deb10.45-1, 10.46-1~deb13u1, 10.46-1~deb13u1+dhi110.46-1~deb13u2456
OSV records
DEBIAN-CVE-2026-89162
Trending
Rank 9 in indexed charts, since 12 Sept 2026. See the ranking →

Charts affected

730 by stars
ChartLatestAffected imagesRadar Score
jenkinsjenkinsciOfficialVerified publisher5.9.581 of 2See more

jenkins jenkinsci 5.9.58

1 of the 2 container images this version deploys carry CVE-2026-89162.

Container imageDigestPackageFixed in
jenkins/jenkins:2.568.3-jdk21c1e4c349365f
pcre2@10.46-1~deb13u1
10.46-1~deb13u2

Open the chart page →

2,665
nextcloudnextcloud9.2.61 of 1See more

nextcloud nextcloud 9.2.6

1 of the 1 container images this version deploys carry CVE-2026-89162.

Container imageDigestPackageFixed in
library/nextcloud:34.0.3-apacheb97df9e0e1ee
pcre2@10.46-1~deb13u1
10.46-1~deb13u2

Open the chart page →

4,507
authentikgoauthentikOfficialVerified publisher2026.8.21 of 1See more

authentik goauthentik 2026.8.2

1 of the 1 container images this version deploys carry CVE-2026-89162.

Container imageDigestPackageFixed in
ghcr.io/goauthentik/server:2026.8.2ff8489a5af4f
pcre2@10.46-1~deb13u1
10.46-1~deb13u2

Open the chart page →

1,257
nginx-ingressnginxVerified publisher2.7.11 of 1See more

nginx-ingress nginx 2.7.1

1 of the 1 container images this version deploys carry CVE-2026-89162.

Container imageDigestPackageFixed in
nginx/nginx-ingress:5.6.18ca7b42ae702
pcre2@10.46-1~deb13u1
10.46-1~deb13u2

Open the chart page →

1,285
artifact-hubartifact-hubVerified publisher1.23.02 of 7See more

artifact-hub artifact-hub 1.23.0

2 of the 7 container images this version deploys carry CVE-2026-89162.

Container imageDigestPackageFixed in
artifacthub/postgres:latest4fd34fa635cc
pcre2@10.46-1~deb13u1
10.46-1~deb13u2
artifacthub/tracker:v1.23.05368d21a6e5c
pcre2@10.46-1~deb13u1
10.46-1~deb13u2

Open the chart page →

10,755
backstagebackstageOfficialVerified publisher2.10.11 of 1See more

backstage backstage 2.10.1

1 of the 1 container images this version deploys carry CVE-2026-89162.

Container imageDigestPackageFixed in
ghcr.io/backstage/backstage:latest792e262ea504
pcre2@10.46-1~deb13u1
10.46-1~deb13u2

Open the chart page →

1,195
rediscloudpirates-redisVerified publisher0.34.321 of 1See more

redis cloudpirates-redis 0.34.32

1 of the 1 container images this version deploys carry CVE-2026-89162.

Container imageDigestPackageFixed in
library/redis:8.10.1298e5b3bc566
pcre2@10.46-1~deb13u1
10.46-1~deb13u2

Open the chart page →

955
mlflowcommunity-chartsVerified publisher1.11.71 of 1See more

mlflow community-charts 1.11.7

1 of the 1 container images this version deploys carry CVE-2026-89162.

Container imageDigestPackageFixed in
burakince/mlflow:3.16.0ab4b566644b9
pcre2@10.46-1~deb13u1
10.46-1~deb13u2

Open the chart page →

622
qdrantqdrantOfficialVerified publisher1.19.11 of 1See more

qdrant qdrant 1.19.1

1 of the 1 container images this version deploys carry CVE-2026-89162.

Container imageDigestPackageFixed in
qdrant/qdrant:v1.19.112364fe851b9
pcre2@10.46-1~deb13u1
10.46-1~deb13u2

Open the chart page →

807
dagsterdagsterVerified publisher1.13.222 of 5See more

dagster dagster 1.13.22

2 of the 5 container images this version deploys carry CVE-2026-89162.

Container imageDigestPackageFixed in
dagster/dagster-celery-k8s:1.13.22e29a64392e12
pcre2@10.46-1~deb13u1
10.46-1~deb13u2
dagster/user-code-example:1.13.225947f9ae481c
pcre2@10.46-1~deb13u1
10.46-1~deb13u2

Open the chart page →

3,455
zabbixzabbix-communityVerified publisher7.1.01 of 5See more

zabbix zabbix-community 7.1.0

1 of the 5 container images this version deploys carry CVE-2026-89162.

Container imageDigestPackageFixed in
library/postgres:16f1c3376c26f2
pcre2@10.46-1~deb13u1
10.46-1~deb13u2

Open the chart page →

13,664
keycloakcloudpirates-keycloakVerified publisher0.21.372 of 3See more

keycloak cloudpirates-keycloak 0.21.37

2 of the 3 container images this version deploys carry CVE-2026-89162.

Container imageDigestPackageFixed in
library/postgres:18.0073e7c8b84e2
pcre2@10.46-1~deb13u1
10.46-1~deb13u2
library/postgres:18.64ef4dbc939d6
pcre2@10.46-1~deb13u1
10.46-1~deb13u2

Open the chart page →

4,382
fluentdfluent0.6.01 of 1See more

fluentd fluent 0.6.0

1 of the 1 container images this version deploys carry CVE-2026-89162.

Container imageDigestPackageFixed in
fluent/fluentd-kubernetes-daemonset:v1.19.3-debian-elasticsearch7-1.1de9cf5f1127a
pcre2@10.46-1~deb13u1
10.46-1~deb13u2

Open the chart page →

999
netdatanetdataVerified publisher3.7.1731 of 1See more

netdata netdata 3.7.173

1 of the 1 container images this version deploys carry CVE-2026-89162.

Container imageDigestPackageFixed in
netdata/netdata:v2.11.0c45c71eb23ff
pcre2@10.46-1~deb13u1
10.46-1~deb13u2

Open the chart page →

3,092
maildocker-postfixVerified publisher5.1.01 of 1See more

mail docker-postfix 5.1.0

1 of the 1 container images this version deploys carry CVE-2026-89162.

Container imageDigestPackageFixed in
boky/postfix:5.1.0aafc77238423
pcre2@10.46-1~deb13u1
10.46-1~deb13u2

Open the chart page →

5,366
vaultwardengissilabs1.4.21 of 1See more

vaultwarden gissilabs 1.4.2

1 of the 1 container images this version deploys carry CVE-2026-89162.

Container imageDigestPackageFixed in
vaultwarden/server:1.37.2094b5689ed81
pcre2@10.46-1~deb13u1
10.46-1~deb13u2

Open the chart page →

1,744
valkeyvalkeyVerified publisher0.12.01 of 1See more

valkey valkey 0.12.0

1 of the 1 container images this version deploys carry CVE-2026-89162.

Container imageDigestPackageFixed in
valkey/valkey:9.1.2475ee65cc75c
pcre2@10.46-1~deb13u1
10.46-1~deb13u2

Open the chart page →

807
postgrescloudpirates-postgresVerified publisher0.20.51 of 1See more

postgres cloudpirates-postgres 0.20.5

1 of the 1 container images this version deploys carry CVE-2026-89162.

Container imageDigestPackageFixed in
library/postgres:18.64ef4dbc939d6
pcre2@10.46-1~deb13u1
10.46-1~deb13u2

Open the chart page →

1,626
openldap-stack-hahelm-openldapVerified publisher4.3.31 of 5See more

openldap-stack-ha helm-openldap 4.3.3

1 of the 5 container images this version deploys carry CVE-2026-89162.

Container imageDigestPackageFixed in
library/debian:latestf324c7ff5432
pcre2@10.46-1~deb13u1
10.46-1~deb13u2

Open the chart page →

5,919
zammadzammadOfficialVerified publisher18.0.54 of 5See more

zammad zammad 18.0.5

4 of the 5 container images this version deploys carry CVE-2026-89162.

Container imageDigestPackageFixed in
library/memcached:1.6.4575c93cc91e76
pcre2@10.46-1~deb13u1
10.46-1~deb13u2
library/postgres:18.4a02db8cac496
pcre2@10.46-1~deb13u1
10.46-1~deb13u2
library/redis:8.10.1298e5b3bc566
pcre2@10.46-1~deb13u1
10.46-1~deb13u2
ghcr.io/zammad/zammad:7.1.3-0011e65123a43ecc
pcre2@10.46-1~deb13u1
10.46-1~deb13u2

Open the chart page →

6,887
postgresgroundhog2k1.6.81 of 1See more

postgres groundhog2k 1.6.8

1 of the 1 container images this version deploys carry CVE-2026-89162.

Container imageDigestPackageFixed in
library/postgres:18.64ef4dbc939d6
pcre2@10.46-1~deb13u1
10.46-1~deb13u2

Open the chart page →

1,626
emqxemqx-operator5.8.91 of 1See more

emqx emqx-operator 5.8.9

1 of the 1 container images this version deploys carry CVE-2026-89162.

Container imageDigestPackageFixed in
emqx/emqx:5.8.935b46f7aa7a0
pcre2@10.46-1~deb13u1
10.46-1~deb13u2

Open the chart page →

2,705
difydify-helmVerified publisher0.38.02 of 11See more

dify dify-helm 0.38.0

2 of the 11 container images this version deploys carry CVE-2026-89162.

Container imageDigestPackageFixed in
langgenius/dify-sandbox:0.2.15750e1111426e
pcre2@10.46-1~deb13u1
10.46-1~deb13u2
library/nginx:latest05b8cb60c354
pcre2@10.46-1~deb13u1
10.46-1~deb13u2

Open the chart page →

22,002
oktetooktetoOfficialVerified publisher0.0.0-2026-08-031 of 10See more

okteto okteto 0.0.0-2026-08-03

1 of the 10 container images this version deploys carry CVE-2026-89162.

Container imageDigestPackageFixed in
ghcr.io/okteto/pipeline-runner:0.0.0-2026-08-033e56bdd1b90d
pcre2@10.46-1~deb13u1
10.46-1~deb13u2

Open the chart page →

5,750
yourlsyourlsOfficialVerified publisher8.9.111 of 2See more

yourls yourls 8.9.11

1 of the 2 container images this version deploys carry CVE-2026-89162.

Container imageDigestPackageFixed in
ghcr.io/yourls/yourls:1.10.69b220ea83329
pcre2@10.46-1~deb13u1
10.46-1~deb13u2

Open the chart page →

2,203
concourseconcourseVerified publisher20.3.01 of 2See more

concourse concourse 20.3.0

1 of the 2 container images this version deploys carry CVE-2026-89162.

Container imageDigestPackageFixed in
library/postgres:1767f41722b7a8
pcre2@10.46-1~deb13u1
10.46-1~deb13u2

Open the chart page →

2,022
openprojectopenproject-helm-chartsOfficialVerified publisher13.11.02 of 5See more

openproject openproject-helm-charts 13.11.0

2 of the 5 container images this version deploys carry CVE-2026-89162.

Container imageDigestPackageFixed in
library/postgres:16f1c3376c26f2
pcre2@10.46-1~deb13u1
10.46-1~deb13u2
openproject/openproject:17.8.0-slim48952034215d
pcre2@10.46-1~deb13u1
10.46-1~deb13u2

Open the chart page →

19,926
sftpgosftpgoOfficialVerified publisher0.47.01 of 1See more

sftpgo sftpgo 0.47.0

1 of the 1 container images this version deploys carry CVE-2026-89162.

Container imageDigestPackageFixed in
ghcr.io/drakkan/sftpgo:v2.7.46cb60f08fede
pcre2@10.46-1~deb13u1
10.46-1~deb13u2

Open the chart page →

1,232
lemmyananace-chartsVerified publisher0.6.151 of 5See more

lemmy ananace-charts 0.6.15

1 of the 5 container images this version deploys carry CVE-2026-89162.

Container imageDigestPackageFixed in
dessalines/lemmy-ui:0.19.20ee4c620d8e93
pcre2@10.46-1~deb13u1
10.46-1~deb13u2

Open the chart page →

7,210
zabbixcetic3.1.31 of 5See more

zabbix cetic 3.1.3

1 of the 5 container images this version deploys carry CVE-2026-89162.

Container imageDigestPackageFixed in
library/postgres:14156f0b253fd6
pcre2@10.46-1~deb13u1
10.46-1~deb13u2

Open the chart page →

33,725
factorio-server-chartsfactorio-server-chartsVerified publisher2.5.21 of 1See more

factorio-server-charts factorio-server-charts 2.5.2

1 of the 1 container images this version deploys carry CVE-2026-89162.

Container imageDigestPackageFixed in
factoriotools/factorio:lateste9227748c507
pcre2@10.46-1~deb13u1
10.46-1~deb13u2

Open the chart page →

1,437
netbirdjaconiVerified publisher0.15.11 of 4See more

netbird jaconi 0.15.1

1 of the 4 container images this version deploys carry CVE-2026-89162.

Container imageDigestPackageFixed in
library/golang:latest512690a56605
pcre2@10.46-1~deb13u1
10.46-1~deb13u2

Open the chart page →

8,390
localstacklocalstack0.7.01 of 1See more

localstack localstack 0.7.0

1 of the 1 container images this version deploys carry CVE-2026-89162.

Container imageDigestPackageFixed in
localstack/localstack-pro:latest4aef81c53168
pcre2@10.46-1~deb13u1
10.46-1~deb13u2

Open the chart page →

2,156
gotenbergmaikumoriVerified publisher1.25.01 of 1See more

gotenberg maikumori 1.25.0

1 of the 1 container images this version deploys carry CVE-2026-89162.

Container imageDigestPackageFixed in
gotenberg/gotenberg:8.36.087c16b9f3642
pcre2@10.46-1~deb13u1
10.46-1~deb13u2

Open the chart page →

9,683
oneuptimeoneuptimeOfficialVerified publisher13.0.41 of 7See more

oneuptime oneuptime 13.0.4

1 of the 7 container images this version deploys carry CVE-2026-89162.

Container imageDigestPackageFixed in
library/postgres:latest4ef4dbc939d6
pcre2@10.46-1~deb13u1
10.46-1~deb13u2

Open the chart page →

11,192
openclawopenclaw-helmVerified publisher1.5.401 of 2See more

openclaw openclaw-helm 1.5.40

1 of the 2 container images this version deploys carry CVE-2026-89162.

Container imageDigestPackageFixed in
chromedp/headless-shell:148.0.7778.97313ed7255ae1
pcre2@10.46-1~deb13u1
10.46-1~deb13u2

Open the chart page →

5,660
stalwart-mailstalwart-mailVerified publisher2.0.101 of 1See more

stalwart-mail stalwart-mail 2.0.10

1 of the 1 container images this version deploys carry CVE-2026-89162.

Container imageDigestPackageFixed in
stalwartlabs/stalwart:v0.16.2074ca4f7f6885
pcre2@10.46-1~deb13u1
10.46-1~deb13u2

Open the chart page →

1,403
prefect-serverprefectVerified publisher2026.9.32126051 of 2See more

prefect-server prefect 2026.9.3212605

1 of the 2 container images this version deploys carry CVE-2026-89162.

Container imageDigestPackageFixed in
prefecthq/prefect:3.8.5-python3.110018d02259bc
pcre2@10.46-1~deb13u1
10.46-1~deb13u2

Open the chart page →

5,786
apim3graviteeioVerified publisher4.12.192 of 4See more

apim3 graviteeio 4.12.19

2 of the 4 container images this version deploys carry CVE-2026-89162.

Container imageDigestPackageFixed in
graviteeio/apim-gateway:4.12.19-debian05fd67a93056
pcre2@10.46-1~deb13u1
10.46-1~deb13u2
graviteeio/apim-management-api:4.12.19-debian27374522cd04
pcre2@10.46-1~deb13u1
10.46-1~deb13u2

Open the chart page →

4,806
redisgroundhog2k2.4.71 of 1See more

redis groundhog2k 2.4.7

1 of the 1 container images this version deploys carry CVE-2026-89162.

Container imageDigestPackageFixed in
library/redis:8.10.1298e5b3bc566
pcre2@10.46-1~deb13u1
10.46-1~deb13u2

Open the chart page →

955
wordpressgroundhog2k0.16.41 of 1See more

wordpress groundhog2k 0.16.4

1 of the 1 container images this version deploys carry CVE-2026-89162.

Container imageDigestPackageFixed in
library/wordpress:7.1.0-apache5a93c470ae82
pcre2@10.46-1~deb13u1
10.46-1~deb13u2

Open the chart page →

3,685
wekanwekanVerified publisher11.76.01 of 3See more

wekan wekan 11.76.0

1 of the 3 container images this version deploys carry CVE-2026-89162.

Container imageDigestPackageFixed in
ghcr.io/wekan/ferretdb:latest6cb94aa01999
pcre2@10.46-1~deb13u1
10.46-1~deb13u2

Open the chart page →

1,576
budibasebudibase0.0.0-master2 of 7See more

budibase budibase 0.0.0-master

2 of the 7 container images this version deploys carry CVE-2026-89162.

Container imageDigestPackageFixed in
budibase/proxy:3.41.38d780b6ee602
pcre2@10.46-1~deb13u1
10.46-1~deb13u2
library/redis:latest298e5b3bc566
pcre2@10.46-1~deb13u1
10.46-1~deb13u2

Open the chart page →

10,775
hedgedocadfinisVerified publisher0.6.11 of 2See more

hedgedoc adfinis 0.6.1

1 of the 2 container images this version deploys carry CVE-2026-89162.

Container imageDigestPackageFixed in
library/postgres:18.48ff36f3c6637
pcre2@10.46-1~deb13u1
10.46-1~deb13u2

Open the chart page →

2,938
nextcloudgroundhog2k0.22.51 of 3See more

nextcloud groundhog2k 0.22.5

1 of the 3 container images this version deploys carry CVE-2026-89162.

Container imageDigestPackageFixed in
library/nextcloud:34.0.3:34.0.3-apacheb97df9e0e1ee
pcre2@10.46-1~deb13u1
10.46-1~deb13u2

Open the chart page →

4,507
ilumilumOfficialVerified publisher6.7.31 of 19See more

ilum ilum 6.7.3

1 of the 19 container images this version deploys carry CVE-2026-89162.

Container imageDigestPackageFixed in
ilum/api:6.7.3624fd09528c8
pcre2@10.46-1~deb13u1
10.46-1~deb13u2

Open the chart page →

23,228
lakekeeperlakekeeperVerified publisher0.12.01 of 2See more

lakekeeper lakekeeper 0.12.0

1 of the 2 container images this version deploys carry CVE-2026-89162.

Container imageDigestPackageFixed in
library/postgres:18.4a02db8cac496
pcre2@10.46-1~deb13u1
10.46-1~deb13u2

Open the chart page →

1,918
monicamonicaOfficialVerified publisher1.0.151 of 1See more

monica monica 1.0.15

1 of the 1 container images this version deploys carry CVE-2026-89162.

Container imageDigestPackageFixed in
ghcr.io/monicahq/monica-next:main8be69156acbb
pcre2@10.45-1
10.46-1~deb13u2

Open the chart page →

5,634
nautobotnautobotOfficialVerified publisher3.1.21 of 1See more

nautobot nautobot 3.1.2

1 of the 1 container images this version deploys carry CVE-2026-89162.

Container imageDigestPackageFixed in
networktocode/nautobot:3.0-py3.13ed484336b1ad
pcre2@10.46-1~deb13u1
10.46-1~deb13u2

Open the chart page →

4,332
smtpntppoolVerified publisher2.4.01 of 1See more

smtp ntppool 2.4.0

1 of the 1 container images this version deploys carry CVE-2026-89162.

Container imageDigestPackageFixed in
ghcr.io/egos-tech/smtp:1.2.2b5451793ad91
pcre2@10.46-1~deb13u1
10.46-1~deb13u2

Open the chart page →

2,244

Container images carrying it

456 by charts deploying them

A fixed version is listed for 1 of the 1 affected package.

Container imageDigestPackageFixed inUsed by
quay.io/opsmxpublic/ubi8-oes-datascience:isd-spin-2025.10.01-af26a30d4-202511261054d8f66f4117fe
pcre2@10.46-1~deb13u1
10.46-1~deb13u2
1
quay.io/opstree/fluent-bit:5.0.3391eef5a68ff
pcre2@10.46-1~deb13u1
10.46-1~deb13u2
1
registry.gitlab.com/egos-tech/smtp:latestdf842ed79211
pcre2@10.46-1~deb13u1
10.46-1~deb13u2
1
registry.gitlab.com/enbuild-staging/vivsoft-platform-ui/enbuild-frontend:1.0.3166353ce9bf98
pcre2@10.46-1~deb13u1
10.46-1~deb13u2
1
registry.gitlab.com/gitlab-org/build/cng/gitlab-openbao:v2.5.5-gitlab25b7636dfba3f
pcre2@10.46-1~deb13u1
10.46-1~deb13u2
1
registry.k8s.io/git-sync/git-sync:v4.5.00e64aedb0d0a
pcre2@10.46-1~deb13u1
10.46-1~deb13u2
1

syft 1.42.1 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.