StackRadar

CVE-2026-89162

Low

Advisory

Published 11 Sept 2026In the index since 12 Sept 2026
Severity
Low
worst across findings
CVSS
2.9
base score, highest
EPSS
0.001
1st percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
730
of 17,781 indexed, latest versions
Container images
456
deployed by those charts
Fix available
1 of 1
affected package

The matching OSV records carry no description.

Carried by container images the latest versions of 730 of 17,781 indexed charts deploy, on 456 images.

Affected packageAffected versionsFixed inImages
pcre2deb10.45-1, 10.46-1~deb13u1, 10.46-1~deb13u1+dhi110.46-1~deb13u2456
OSV records
DEBIAN-CVE-2026-89162
Trending
Rank 9 in indexed charts, since 12 Sept 2026. See the ranking →

Charts affected

730 by stars
ChartLatestAffected imagesRadar Score
paperless-ngxpaperless-ngxVerified publisher0.3.222 of 3See more

paperless-ngx paperless-ngx 0.3.22

2 of the 3 container images this version deploys carry CVE-2026-89162.

Container imageDigestPackageFixed in
valkey/valkey:9.1.2c123e3715db6
pcre2@10.46-1~deb13u1
10.46-1~deb13u2
ghcr.io/paperless-ngx/paperless-ngx:3.1.3aa810a36942c
pcre2@10.46-1~deb13u1
10.46-1~deb13u2

Open the chart page →

8,489
tbmq-clustertbmq-helm-chartOfficialVerified publisher2.1.02 of 3See more

tbmq-cluster tbmq-helm-chart 2.1.0

2 of the 3 container images this version deploys carry CVE-2026-89162.

Container imageDigestPackageFixed in
thingsboard/tbmq-integration-executor:2.4.0b5a9c1addf80
pcre2@10.46-1~deb13u1
10.46-1~deb13u2
thingsboard/tbmq-node:2.4.070661025dba5
pcre2@10.46-1~deb13u1
10.46-1~deb13u2

Open the chart page →

3,534
phpmyadminalekcVerified publisher0.3.11 of 1See more

phpmyadmin alekc 0.3.1

1 of the 1 container images this version deploys carry CVE-2026-89162.

Container imageDigestPackageFixed in
library/phpmyadmin:5.2.3-apache3a8a8d6b5289
pcre2@10.46-1~deb13u1
10.46-1~deb13u2

Open the chart page →

2,582
memcachedcloudpirates-memcachedVerified publisher0.14.91 of 1See more

memcached cloudpirates-memcached 0.14.9

1 of the 1 container images this version deploys carry CVE-2026-89162.

Container imageDigestPackageFixed in
library/memcached:1.6.4575c93cc91e76
pcre2@10.46-1~deb13u1
10.46-1~deb13u2

Open the chart page →

1,052
cortexcortex3.3.82 of 4See more

cortex cortex 3.3.8

2 of the 4 container images this version deploys carry CVE-2026-89162.

Container imageDigestPackageFixed in
library/memcached:1.6.4575c93cc91e76
pcre2@10.46-1~deb13u1
10.46-1~deb13u2
library/nginx:1.3105b8cb60c354
pcre2@10.46-1~deb13u1
10.46-1~deb13u2

Open the chart page →

3,897
valkeygroundhog2k2.3.41 of 1See more

valkey groundhog2k 2.3.4

1 of the 1 container images this version deploys carry CVE-2026-89162.

Container imageDigestPackageFixed in
valkey/valkey:9.1.2475ee65cc75c
pcre2@10.46-1~deb13u1
10.46-1~deb13u2

Open the chart page →

807
docmosthelmforgeVerified publisher1.2.112 of 4See more

docmost helmforge 1.2.11

2 of the 4 container images this version deploys carry CVE-2026-89162.

Container imageDigestPackageFixed in
library/postgres:18.6-trixie4ef4dbc939d6
pcre2@10.46-1~deb13u1
10.46-1~deb13u2
library/redis:8.10.1298e5b3bc566
pcre2@10.46-1~deb13u1
10.46-1~deb13u2

Open the chart page →

5,564
wordpresshelmforgeVerified publisher3.0.61 of 3See more

wordpress helmforge 3.0.6

1 of the 3 container images this version deploys carry CVE-2026-89162.

Container imageDigestPackageFixed in
library/wordpress:7.1.0-apache5a93c470ae82
pcre2@10.46-1~deb13u1
10.46-1~deb13u2

Open the chart page →

4,148
coturnjaconiVerified publisher1.0.51 of 1See more

coturn jaconi 1.0.5

1 of the 1 container images this version deploys carry CVE-2026-89162.

Container imageDigestPackageFixed in
coturn/coturn:4.10.0-r1f4c2af06c3c5
pcre2@10.46-1~deb13u1
10.46-1~deb13u2

Open the chart page →

2,901
nginx-ingressnginx-ingress-chartVerified publisher0.0.0-edge1 of 1See more

nginx-ingress nginx-ingress-chart 0.0.0-edge

1 of the 1 container images this version deploys carry CVE-2026-89162.

Container imageDigestPackageFixed in
nginx/nginx-ingress:edge520d439f9a9a
pcre2@10.46-1~deb13u1
10.46-1~deb13u2

Open the chart page →

1,244
passboltpassbolt2.1.12 of 6See more

passbolt passbolt 2.1.1

2 of the 6 container images this version deploys carry CVE-2026-89162.

Container imageDigestPackageFixed in
library/haproxy:3.4.10f597665a2a6
pcre2@10.46-1~deb13u1
10.46-1~deb13u2
passbolt/passbolt:5.13.0-1-ceaf3a620902a0
pcre2@10.46-1~deb13u1
10.46-1~deb13u2

Open the chart page →

13,350
minecraft-overvieweralphani-helm-chartsVerified publisher0.1.01 of 3See more

minecraft-overviewer alphani-helm-charts 0.1.0

1 of the 3 container images this version deploys carry CVE-2026-89162.

Container imageDigestPackageFixed in
library/nginx:stabled5792f71a949
pcre2@10.46-1~deb13u1
10.46-1~deb13u2

Open the chart page →

3,380
baserowbaserow-chartVerified publisher1.0.562 of 6See more

baserow baserow-chart 1.0.56

2 of the 6 container images this version deploys carry CVE-2026-89162.

Container imageDigestPackageFixed in
baserow/backend:2.3.37c00549b3a6f
pcre2@10.46-1~deb13u1
10.46-1~deb13u2
baserow/web-frontend:2.3.3566d24c7d9f5
pcre2@10.46-1~deb13u1
10.46-1~deb13u2

Open the chart page →

17,263
dagster-user-deploymentsdagsterVerified publisher1.13.221 of 1See more

dagster-user-deployments dagster 1.13.22

1 of the 1 container images this version deploys carry CVE-2026-89162.

Container imageDigestPackageFixed in
dagster/user-code-example:1.13.225947f9ae481c
pcre2@10.46-1~deb13u1
10.46-1~deb13u2

Open the chart page →

928
dialdialOfficialVerified publisher7.2.01 of 4See more

dial dial 7.2.0

1 of the 4 container images this version deploys carry CVE-2026-89162.

Container imageDigestPackageFixed in
valkey/valkey:9.0.2930b41430fb7
pcre2@10.46-1~deb13u1
10.46-1~deb13u2

Open the chart page →

2,163
jellyfindjjudas21Verified publisher4.0.81 of 1See more

jellyfin djjudas21 4.0.8

1 of the 1 container images this version deploys carry CVE-2026-89162.

Container imageDigestPackageFixed in
jellyfin/jellyfin:10.11.11aefb67e6a7ff
pcre2@10.46-1~deb13u1
10.46-1~deb13u2

Open the chart page →

2,604
geonode-k8sgeonode-k8sVerified publisher2.0.01 of 10See more

geonode-k8s geonode-k8s 2.0.0

1 of the 10 container images this version deploys carry CVE-2026-89162.

Container imageDigestPackageFixed in
library/memcached:1.6.40cc523a19da58
pcre2@10.46-1~deb13u1
10.46-1~deb13u2

Open the chart page →

13,953
gitops-promotergitops-promoterOfficialVerified publisher0.17.01 of 2See more

gitops-promoter gitops-promoter 0.17.0

1 of the 2 container images this version deploys carry CVE-2026-89162.

Container imageDigestPackageFixed in
quay.io/argoprojlabs/gitops-promoter:v0.38.19c8a510dc25e
pcre2@10.46-1~deb13u1
10.46-1~deb13u2

Open the chart page →

2,814
glpiglpi-conteiner0.1.01 of 3See more

glpi glpi-conteiner 0.1.0

1 of the 3 container images this version deploys carry CVE-2026-89162.

Container imageDigestPackageFixed in
library/phpmyadmin:latest3a8a8d6b5289
pcre2@10.46-1~deb13u1
10.46-1~deb13u2

Open the chart page →

12,170
openhabhelmforgeVerified publisher1.2.01 of 1See more

openhab helmforge 1.2.0

1 of the 1 container images this version deploys carry CVE-2026-89162.

Container imageDigestPackageFixed in
openhab/openhab:5.2.1bfd4a60e90da
pcre2@10.46-1~deb13u1
10.46-1~deb13u2

Open the chart page →

3,641
postgresqlhelmforgeVerified publisher2.0.51 of 1See more

postgresql helmforge 2.0.5

1 of the 1 container images this version deploys carry CVE-2026-89162.

Container imageDigestPackageFixed in
library/postgres:18.6-trixie4ef4dbc939d6
pcre2@10.46-1~deb13u1
10.46-1~deb13u2

Open the chart page →

1,626
umamihelmforgeVerified publisher2.3.31 of 3See more

umami helmforge 2.3.3

1 of the 3 container images this version deploys carry CVE-2026-89162.

Container imageDigestPackageFixed in
library/postgres:18.6-trixie4ef4dbc939d6
pcre2@10.46-1~deb13u1
10.46-1~deb13u2

Open the chart page →

2,027
hertzbeathertzbeatOfficialVerified publisher1.8.11 of 4See more

hertzbeat hertzbeat 1.8.1

1 of the 4 container images this version deploys carry CVE-2026-89162.

Container imageDigestPackageFixed in
library/postgres:159b1d34adbce1
pcre2@10.46-1~deb13u1
10.46-1~deb13u2

Open the chart page →

14,000
infrahubinfrahubVerified publisher4.33.21 of 5See more

infrahub infrahub 4.33.2

1 of the 5 container images this version deploys carry CVE-2026-89162.

Container imageDigestPackageFixed in
library/neo4j:2026.05.06c162e2432f8
pcre2@10.46-1~deb13u1
10.46-1~deb13u2

Open the chart page →

10,428
libredb-studiolibredb-studioVerified publisher0.1.631 of 1See more

libredb-studio libredb-studio 0.1.63

1 of the 1 container images this version deploys carry CVE-2026-89162.

Container imageDigestPackageFixed in
ghcr.io/libredb/libredb-studio:0.15.04b696f960ac1
pcre2@10.46-1~deb13u1
10.46-1~deb13u2

Open the chart page →

1,222
matrixzekker6Verified publisher3.30.01 of 4See more

matrix zekker6 3.30.0

1 of the 4 container images this version deploys carry CVE-2026-89162.

Container imageDigestPackageFixed in
matrixdotorg/synapse:v1.160.078de1d10bef0
pcre2@10.46-1~deb13u1
10.46-1~deb13u2

Open the chart page →

5,557
vaultwardenandrenarchyVerified publisher6.27.01 of 1See more

vaultwarden andrenarchy 6.27.0

1 of the 1 container images this version deploys carry CVE-2026-89162.

Container imageDigestPackageFixed in
vaultwarden/server:1.37.2094b5689ed81
pcre2@10.46-1~deb13u1
10.46-1~deb13u2

Open the chart page →

1,744
limesurveyarea-42Verified publisher0.3.931 of 2See more

limesurvey area-42 0.3.93

1 of the 2 container images this version deploys carry CVE-2026-89162.

Container imageDigestPackageFixed in
adamzammit/limesurvey:7.0.15e75e2f455c8d
pcre2@10.46-1~deb13u1
10.46-1~deb13u2

Open the chart page →

4,668
clowardenclowarden0.2.31 of 4See more

clowarden clowarden 0.2.3

1 of the 4 container images this version deploys carry CVE-2026-89162.

Container imageDigestPackageFixed in
artifacthub/postgres:latest4fd34fa635cc
pcre2@10.46-1~deb13u1
10.46-1~deb13u2

Open the chart page →

5,606
crossviewcrossviewOfficialVerified publisher4.6.01 of 2See more

crossview crossview 4.6.0

1 of the 2 container images this version deploys carry CVE-2026-89162.

Container imageDigestPackageFixed in
library/postgres:latest4ef4dbc939d6
pcre2@10.46-1~deb13u1
10.46-1~deb13u2

Open the chart page →

1,791
dask-kubernetes-operatordask2026.3.01 of 1See more

dask-kubernetes-operator dask 2026.3.0

1 of the 1 container images this version deploys carry CVE-2026-89162.

Container imageDigestPackageFixed in
ghcr.io/dask/dask-kubernetes-operator:2026.3.03225d2bc6b3c
pcre2@10.46-1~deb13u1
10.46-1~deb13u2

Open the chart page →

9,316
defectdojodefectdojo1.9.511 of 4See more

defectdojo defectdojo 1.9.51

1 of the 4 container images this version deploys carry CVE-2026-89162.

Container imageDigestPackageFixed in
defectdojo/defectdojo-django:3.3.1b140a89a34e2
pcre2@10.46-1~deb13u1
10.46-1~deb13u2

Open the chart page →

2,408
rsshubgabe565Verified publisher0.8.01 of 3See more

rsshub gabe565 0.8.0

1 of the 3 container images this version deploys carry CVE-2026-89162.

Container imageDigestPackageFixed in
diygod/rsshub:latest1d4b508b6357
pcre2@10.46-1~deb13u1
10.46-1~deb13u2

Open the chart page →

1,717
gitvotegitvoteVerified publisher1.5.01 of 6See more

gitvote gitvote 1.5.0

1 of the 6 container images this version deploys carry CVE-2026-89162.

Container imageDigestPackageFixed in
artifacthub/postgres:latest4fd34fa635cc
pcre2@10.46-1~deb13u1
10.46-1~deb13u2

Open the chart page →

5,613
apimgraviteeioVerified publisher4.12.192 of 4See more

apim graviteeio 4.12.19

2 of the 4 container images this version deploys carry CVE-2026-89162.

Container imageDigestPackageFixed in
graviteeio/apim-gateway:4.12.19-debian05fd67a93056
pcre2@10.46-1~deb13u1
10.46-1~deb13u2
graviteeio/apim-management-api:4.12.19-debian27374522cd04
pcre2@10.46-1~deb13u1
10.46-1~deb13u2

Open the chart page →

4,806
netbirdhelmforgeVerified publisher1.0.101 of 4See more

netbird helmforge 1.0.10

1 of the 4 container images this version deploys carry CVE-2026-89162.

Container imageDigestPackageFixed in
library/postgres:18.6-trixie4ef4dbc939d6
pcre2@10.46-1~deb13u1
10.46-1~deb13u2

Open the chart page →

2,962
redishelmforgeVerified publisher3.0.01 of 1See more

redis helmforge 3.0.0

1 of the 1 container images this version deploys carry CVE-2026-89162.

Container imageDigestPackageFixed in
library/redis:8.10.1298e5b3bc566
pcre2@10.46-1~deb13u1
10.46-1~deb13u2

Open the chart page →

955
simple-krr-dashboardhelm-simple-krr-dashboardVerified publisher1.6.21 of 3See more

simple-krr-dashboard helm-simple-krr-dashboard 1.6.2

1 of the 3 container images this version deploys carry CVE-2026-89162.

Container imageDigestPackageFixed in
robustadev/krr:v1.30.0b8d782e568c7
pcre2@10.46-1~deb13u1
10.46-1~deb13u2

Open the chart page →

2,234
infrahub-enterpriseinfrahub-enterpriseVerified publisher4.19.21 of 5See more

infrahub-enterprise infrahub-enterprise 4.19.2

1 of the 5 container images this version deploys carry CVE-2026-89162.

Container imageDigestPackageFixed in
library/neo4j:2026.05.0-enterprise2caf944aa4a5
pcre2@10.46-1~deb13u1
10.46-1~deb13u2

Open the chart page →

10,530
coreinstill-aiOfficialVerified publisher0.1.753 of 15See more

core instill-ai 0.1.75

3 of the 15 container images this version deploys carry CVE-2026-89162.

Container imageDigestPackageFixed in
instill/artifact-backend:b28766ac4a393e601ed
pcre2@10.46-1~deb13u1
10.46-1~deb13u2
instill/mgmt-backend:d0933d4ebe12f77a3f9
pcre2@10.46-1~deb13u1
10.46-1~deb13u2
instill/model-backend:611f0f2e980125e5ba5
pcre2@10.46-1~deb13u1
10.46-1~deb13u2

Open the chart page →

30,816
webdavk8s-webdavVerified publisher0.0.71 of 1See more

webdav k8s-webdav 0.0.7

1 of the 1 container images this version deploys carry CVE-2026-89162.

Container imageDigestPackageFixed in
library/httpd:2.4979c38c2228d
pcre2@10.46-1~deb13u1
10.46-1~deb13u2

Open the chart page →

1,681
klancesklances0.1.41 of 1See more

klances klances 0.1.4

1 of the 1 container images this version deploys carry CVE-2026-89162.

Container imageDigestPackageFixed in
ghcr.io/nicolargo/klances:0.1.374d6d33376eb
pcre2@10.46-1~deb13u1
10.46-1~deb13u2

Open the chart page →

1,693
mogenius-operatormogeniusOfficialVerified publisher2.29.01 of 2See more

mogenius-operator mogenius 2.29.0

1 of the 2 container images this version deploys carry CVE-2026-89162.

Container imageDigestPackageFixed in
valkey/valkey:9.1.164e361b630ec
pcre2@10.46-1~deb13u1
10.46-1~deb13u2

Open the chart page →

934
observalobservalVerified publisher1.13.12 of 8See more

observal observal 1.13.1

2 of the 8 container images this version deploys carry CVE-2026-89162.

Container imageDigestPackageFixed in
library/postgres:16f1c3376c26f2
pcre2@10.46-1~deb13u1
10.46-1~deb13u2
ghcr.io/observal/observal-api:1.13.1153b8b893232
pcre2@10.46-1~deb13u1
10.46-1~deb13u2

Open the chart page →

5,828
oesopsmxVerified publisher4.0.321 of 25See more

oes opsmx 4.0.32

1 of the 25 container images this version deploys carry CVE-2026-89162.

Container imageDigestPackageFixed in
quay.io/opsmxpublic/ubi8-oes-datascience:isd-spin-2025.10.01-af26a30d4-202511261054d8f66f4117fe
pcre2@10.46-1~deb13u1
10.46-1~deb13u2

Open the chart page →

107,811
phpmyadminphpmyadminVerified publisher1.0.31 of 1See more

phpmyadmin phpmyadmin 1.0.3

1 of the 1 container images this version deploys carry CVE-2026-89162.

Container imageDigestPackageFixed in
library/phpmyadmin:5.2.3-apache3a8a8d6b5289
pcre2@10.46-1~deb13u1
10.46-1~deb13u2

Open the chart page →

2,582
prometheus-prefect-exporterprefectVerified publisher2026.8.71410241 of 1See more

prometheus-prefect-exporter prefect 2026.8.7141024

1 of the 1 container images this version deploys carry CVE-2026-89162.

Container imageDigestPackageFixed in
prefecthq/prometheus-prefect-exporter:4.0.050d527a190ae
pcre2@10.46-1~deb13u1
10.46-1~deb13u2

Open the chart page →

1,000
lldapself-hosters-by-nightVerified publisher0.5.21 of 2See more

lldap self-hosters-by-night 0.5.2

1 of the 2 container images this version deploys carry CVE-2026-89162.

Container imageDigestPackageFixed in
library/postgres:18.11090bc3a8ccf
pcre2@10.46-1~deb13u1
10.46-1~deb13u2

Open the chart page →

3,400
skypilotskypilotOfficialVerified publisher0.13.01 of 3See more

skypilot skypilot 0.13.0

1 of the 3 container images this version deploys carry CVE-2026-89162.

Container imageDigestPackageFixed in
berkeleyskypilot/skypilot:0.13.03bc8bf8f4d83
pcre2@10.46-1~deb13u1
10.46-1~deb13u2

Open the chart page →

5,852
spartanspartan0.9.11 of 1See more

spartan spartan 0.9.1

1 of the 1 container images this version deploys carry CVE-2026-89162.

Container imageDigestPackageFixed in
library/nginx:latest05b8cb60c354
pcre2@10.46-1~deb13u1
10.46-1~deb13u2

Open the chart page →

1,827

Container images carrying it

456 by charts deploying them

A fixed version is listed for 1 of the 1 affected package.

Container imageDigestPackageFixed inUsed by
quay.io/opsmxpublic/ubi8-oes-datascience:isd-spin-2025.10.01-af26a30d4-202511261054d8f66f4117fe
pcre2@10.46-1~deb13u1
10.46-1~deb13u2
1
quay.io/opstree/fluent-bit:5.0.3391eef5a68ff
pcre2@10.46-1~deb13u1
10.46-1~deb13u2
1
registry.gitlab.com/egos-tech/smtp:latestdf842ed79211
pcre2@10.46-1~deb13u1
10.46-1~deb13u2
1
registry.gitlab.com/enbuild-staging/vivsoft-platform-ui/enbuild-frontend:1.0.3166353ce9bf98
pcre2@10.46-1~deb13u1
10.46-1~deb13u2
1
registry.gitlab.com/gitlab-org/build/cng/gitlab-openbao:v2.5.5-gitlab25b7636dfba3f
pcre2@10.46-1~deb13u1
10.46-1~deb13u2
1
registry.k8s.io/git-sync/git-sync:v4.5.00e64aedb0d0a
pcre2@10.46-1~deb13u1
10.46-1~deb13u2
1

syft 1.42.1 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.