StackRadar

CVE-2026-90711

Critical

Advisory

Published 5 Oct 2026In the index since 6 Oct 2026
Severity
Critical
worst across findings
CVSS
9.1
base score, highest
EPSS
0.003
24th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
639
of 18,035 indexed, latest versions
Container images
650
deployed by those charts
Fix available
1 of 1
affected package

proxy-addr vulnerable to IP spoofing via IPv4-mapped IPv6 trust subnet

Carried by container images the latest versions of 639 of 18,035 indexed charts deploy, on 650 images.

Affected packageAffected versionsFixed inImages
proxy-addrnpm1.1.5, 2.0.2, 2.0.3, 2.0.4+3 more2.0.8650
OSV records
GHSA-jqcg-44mw-7w3h
Trending
Rank 2 in indexed charts, since 6 Oct 2026. See the ranking →

Charts affected

639 by stars
ChartLatestAffected imagesRadar Score
rybbitrybbit-helm1.3.21 of 7See more

rybbit rybbit-helm 1.3.2

1 of the 7 container images this version deploys carry CVE-2026-90711.

Container imageDigestPackageFixed in
ghcr.io/rybbit-io/rybbit-backend:lateste0d1b397e33c
proxy-addr@2.0.7
2.0.8

Open the chart page →

8,342
safe-stacksafe-global0.1.01 of 9See more

safe-stack safe-global 0.1.0

1 of the 9 container images this version deploys carry CVE-2026-90711.

Container imageDigestPackageFixed in
safeglobal/safe-client-gateway-nest:v1.51.012ccfd93fcaf
proxy-addr@2.0.7
2.0.8

Open the chart page →

20,837
samplesample0.1.01 of 2See more

sample sample 0.1.0

1 of the 2 container images this version deploys carry CVE-2026-90711.

Container imageDigestPackageFixed in
library/mongo-express:1.0.2-20-alpine3.191aae00775251
proxy-addr@2.0.7
2.0.8

Open the chart page →

2,483
uptime-kumasarab97Verified publisher0.1.51 of 1See more

uptime-kuma sarab97 0.1.5

1 of the 1 container images this version deploys carry CVE-2026-90711.

Container imageDigestPackageFixed in
louislam/uptime-kuma:1.22.10b55bcb83a1c
proxy-addr@2.0.7
2.0.8

Open the chart page →

5,981
unifi-protectschichtelVerified publisher0.10.11 of 1See more

unifi-protect schichtel 0.10.1

1 of the 1 container images this version deploys carry CVE-2026-90711.

Container imageDigestPackageFixed in
markdegroot/unifi-protect-arm64:latestd8445f2a0de6
proxy-addr@2.0.7
2.0.8

Open the chart page →

7,054
hedgedocschmitzis0.1.121 of 1See more

hedgedoc schmitzis 0.1.12

1 of the 1 container images this version deploys carry CVE-2026-90711.

Container imageDigestPackageFixed in
quay.io/hedgedoc/hedgedoc:1.9.4e09967519a1d
proxy-addr@2.0.7
2.0.8

Open the chart page →

3,476
semaphoreschoenwald0.1.31 of 1See more

semaphore schoenwald 0.1.3

1 of the 1 container images this version deploys carry CVE-2026-90711.

Container imageDigestPackageFixed in
0hlov3/semaphore:v1.0.050f874ec096b
proxy-addr@2.0.7
2.0.8

Open the chart page →

1,944
uptime-kumaschoenwald1.0.101 of 1See more

uptime-kuma schoenwald 1.0.10

1 of the 1 container images this version deploys carry CVE-2026-90711.

Container imageDigestPackageFixed in
louislam/uptime-kuma:2.5.4917318f9d7be
proxy-addr@2.0.7
2.0.8

Open the chart page →

35,474
secret-managersecret-managerVerified publisher1.0.01 of 4See more

secret-manager secret-manager 1.0.0

1 of the 4 container images this version deploys carry CVE-2026-90711.

Container imageDigestPackageFixed in
leonardomulticloud/svc-vault-frontend:v1.0.0e42a341e0299
proxy-addr@2.0.7
2.0.8

Open the chart page →

7,175
seerr-chartseerr-chartVerified publisher3.10.01 of 1See more

seerr-chart seerr-chart 3.10.0

1 of the 1 container images this version deploys carry CVE-2026-90711.

Container imageDigestPackageFixed in
ghcr.io/seerr-team/seerr:v3.5.027602401178d
proxy-addr@2.0.7
2.0.8

Open the chart page →

2,264
dashysergiotocaliniVerified publisher1.0.01 of 1See more

dashy sergiotocalini 1.0.0

1 of the 1 container images this version deploys carry CVE-2026-90711.

Container imageDigestPackageFixed in
ghcr.io/lissy93/dashy:2.1.1acb40032ad4b
proxy-addr@2.0.7
2.0.8

Open the chart page →

3,380
shopsyncshopsyncVerified publisher1.0.01 of 1See more

shopsync shopsync 1.0.0

1 of the 1 container images this version deploys carry CVE-2026-90711.

Container imageDigestPackageFixed in
shyamkrishna21/shopsync:latest3998b83def53
proxy-addr@2.0.7
2.0.8

Open the chart page →

1,566
hedgedocsi-gitops0.12.31 of 2See more

hedgedoc si-gitops 0.12.3

1 of the 2 container images this version deploys carry CVE-2026-90711.

Container imageDigestPackageFixed in
quay.io/hedgedoc/hedgedoc:1.12.089bd85d7817f
proxy-addr@2.0.7
2.0.8

Open the chart page →

3,643
simple-db-app-chartsimple-db-app0.1.01 of 2See more

simple-db-app-chart simple-db-app 0.1.0

1 of the 2 container images this version deploys carry CVE-2026-90711.

Container imageDigestPackageFixed in
htmlprogrammer2001/simple-db-app:1.0a7e0a233a9bc
proxy-addr@2.0.7
2.0.8

Open the chart page →

2,326
simple-db-app-chart-with-dependencysimple-db-app0.1.01 of 3See more

simple-db-app-chart-with-dependency simple-db-app 0.1.0

1 of the 3 container images this version deploys carry CVE-2026-90711.

Container imageDigestPackageFixed in
htmlprogrammer2001/simple-db-app:1.0a7e0a233a9bc
proxy-addr@2.0.7
2.0.8

Open the chart page →

2,326
first-appsimple-helm-chart0.1.01 of 1See more

first-app simple-helm-chart 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-90711.

Container imageDigestPackageFixed in
leeyoongti/first-app:1.0.021d66cb76352
proxy-addr@2.0.6
2.0.8

Open the chart page →

2,775
simple-node-expresssimple-node-express1.0.01 of 1See more

simple-node-express simple-node-express 1.0.0

1 of the 1 container images this version deploys carry CVE-2026-90711.

Container imageDigestPackageFixed in
devravinder/node-express-app:1.0.05325a96967b5
proxy-addr@2.0.7
2.0.8

Open the chart page →

1,135
infisicalsinextraVerified publisher0.6.11 of 1See more

infisical sinextra 0.6.1

1 of the 1 container images this version deploys carry CVE-2026-90711.

Container imageDigestPackageFixed in
infisical/infisical:v0.165.166b911e3938ac
proxy-addr@2.0.7
2.0.8

Open the chart page →

3,374
skoonerskooner0.2.21 of 1See more

skooner skooner 0.2.2

1 of the 1 container images this version deploys carry CVE-2026-90711.

Container imageDigestPackageFixed in
ghcr.io/skooner-k8s/skooner:stable60c1562e4d51
proxy-addr@2.0.7
2.0.8

Open the chart page →

1,440
sneakerssneakers1.0.01 of 4See more

sneakers sneakers 1.0.0

1 of the 4 container images this version deploys carry CVE-2026-90711.

Container imageDigestPackageFixed in
helga09/shoes_ukr:v1.1.17999bc8b77c0
proxy-addr@2.0.7
2.0.8

Open the chart page →

9,976
speedtest-trackersoblivionscall3.0.41 of 1See more

speedtest-tracker soblivionscall 3.0.4

1 of the 1 container images this version deploys carry CVE-2026-90711.

Container imageDigestPackageFixed in
henrywhitaker3/speedtest-tracker:latest47159a940229
proxy-addr@2.0.6
2.0.8

Open the chart page →

2,637
sorry-cypresssoftonic1.20.02 of 4See more

sorry-cypress softonic 1.20.0

2 of the 4 container images this version deploys carry CVE-2026-90711.

Container imageDigestPackageFixed in
agoldis/sorry-cypress-api:2.5.11afaa5a84051d
proxy-addr@2.0.7
2.0.8
agoldis/sorry-cypress-director:2.5.1110228ecd353b
proxy-addr@2.0.7
2.0.8

Open the chart page →

4,541
pwssoketi0.2.41 of 1See more

pws soketi 0.2.4

1 of the 1 container images this version deploys carry CVE-2026-90711.

Container imageDigestPackageFixed in
quay.io/soketi/pws:0.8-16-alpine399d2e6b10ef
proxy-addr@2.0.7
2.0.8

Open the chart page →

3,358
speckle-preview-service-branch-testing6speckleVerified publisher2.23.14-branch.testing6.334655-b4e04ee1 of 1See more

speckle-preview-service-branch-testing6 speckle 2.23.14-branch.testing6.334655-b4e04ee

1 of the 1 container images this version deploys carry CVE-2026-90711.

Container imageDigestPackageFixed in
speckle/speckle-preview-service:2.23.14-branch.testing6.334655-b4e04ee6dee853ba74a
proxy-addr@2.0.7
2.0.8

Open the chart page →

6,559
speckle-server-branch-hotfix-2.19.1speckleVerified publisher2.19.2-branch.hotfix-2.19.1.124125-665e7e12 of 5See more

speckle-server-branch-hotfix-2.19.1 speckle 2.19.2-branch.hotfix-2.19.1.124125-665e7e1

2 of the 5 container images this version deploys carry CVE-2026-90711.

Container imageDigestPackageFixed in
speckle/speckle-preview-service:2.19.2-branch.hotfix-2.19.1.124125-665e7e1c102b087481a
proxy-addr@2.0.7
2.0.8
speckle/speckle-server:2.19.2-branch.hotfix-2.19.1.124125-665e7e14b6a0750d5aa
proxy-addr@2.0.7
2.0.8

Open the chart page →

18,134
speckle-server-branch-hotfix-2.20.2speckleVerified publisher2.20.3-branch.hotfix-2.20.2.149555-37ea0cb2 of 5See more

speckle-server-branch-hotfix-2.20.2 speckle 2.20.3-branch.hotfix-2.20.2.149555-37ea0cb

2 of the 5 container images this version deploys carry CVE-2026-90711.

Container imageDigestPackageFixed in
speckle/speckle-preview-service:2.20.3-branch.hotfix-2.20.2.149555-37ea0cbd3da0a84de98
proxy-addr@2.0.7
2.0.8
speckle/speckle-server:2.20.3-branch.hotfix-2.20.2.149555-37ea0cb52f8eabf5cea
proxy-addr@2.0.7
2.0.8

Open the chart page →

18,219
speckle-server-branch-testingspeckleVerified publisher2.17.14-branch.testing.72707.921a5f82 of 5See more

speckle-server-branch-testing speckle 2.17.14-branch.testing.72707.921a5f8

2 of the 5 container images this version deploys carry CVE-2026-90711.

Container imageDigestPackageFixed in
speckle/speckle-preview-service:2.17.14-branch.testing.72707.921a5f884fc39bca0c8
proxy-addr@2.0.7
2.0.8
speckle/speckle-server:2.17.14-branch.testing.72707.921a5f849d10dcdfb91
proxy-addr@2.0.7
2.0.8

Open the chart page →

16,239
speckle-server-branch-testing1speckleVerified publisher2.20.6-branch.testing1.154030-9b091142 of 5See more

speckle-server-branch-testing1 speckle 2.20.6-branch.testing1.154030-9b09114

2 of the 5 container images this version deploys carry CVE-2026-90711.

Container imageDigestPackageFixed in
speckle/speckle-preview-service:2.20.6-branch.testing1.154030-9b091148f3c1ea153ba
proxy-addr@2.0.7
2.0.8
speckle/speckle-server:2.20.6-branch.testing1.154030-9b09114e8413f57b327
proxy-addr@2.0.7
2.0.8

Open the chart page →

18,219
speckle-server-branch-testing2speckleVerified publisher2.18.11-branch.testing2.88634-335d4692 of 5See more

speckle-server-branch-testing2 speckle 2.18.11-branch.testing2.88634-335d469

2 of the 5 container images this version deploys carry CVE-2026-90711.

Container imageDigestPackageFixed in
speckle/speckle-preview-service:2.18.11-branch.testing2.88634-335d4694bd113093583
proxy-addr@2.0.7
2.0.8
speckle/speckle-server:2.18.11-branch.testing2.88634-335d469bf6a501b2210
proxy-addr@2.0.7
2.0.8

Open the chart page →

15,860
speckle-server-branch-testing3speckleVerified publisher2.18.12-branch.testing3.88744-f55b3412 of 5See more

speckle-server-branch-testing3 speckle 2.18.12-branch.testing3.88744-f55b341

2 of the 5 container images this version deploys carry CVE-2026-90711.

Container imageDigestPackageFixed in
speckle/speckle-preview-service:2.18.12-branch.testing3.88744-f55b3414bd113093583
proxy-addr@2.0.7
2.0.8
speckle/speckle-server:2.18.12-branch.testing3.88744-f55b34189a5872375f9
proxy-addr@2.0.7
2.0.8

Open the chart page →

15,860
speckle-server-branch-testing4speckleVerified publisher2.20.2-branch.testing4.134160-9fad4b22 of 5See more

speckle-server-branch-testing4 speckle 2.20.2-branch.testing4.134160-9fad4b2

2 of the 5 container images this version deploys carry CVE-2026-90711.

Container imageDigestPackageFixed in
speckle/speckle-preview-service:2.20.2-branch.testing4.134160-9fad4b21f897ca906ea
proxy-addr@2.0.7
2.0.8
speckle/speckle-server:2.20.2-branch.testing4.134160-9fad4b2687f43ab16f3
proxy-addr@2.0.7
2.0.8

Open the chart page →

17,788
speckle-server-branch-testing5speckleVerified publisher2.21.3-branch.testing5.219631-2153bef2 of 5See more

speckle-server-branch-testing5 speckle 2.21.3-branch.testing5.219631-2153bef

2 of the 5 container images this version deploys carry CVE-2026-90711.

Container imageDigestPackageFixed in
speckle/speckle-preview-service:2.21.3-branch.testing5.219631-2153bef52cad5e3293e
proxy-addr@2.0.7
2.0.8
speckle/speckle-server:2.21.3-branch.testing5.219631-2153bef8fd157733393
proxy-addr@2.0.7
2.0.8

Open the chart page →

17,473
speckle-server-branch-testing6speckleVerified publisher2.25.10-branch.testing6.645-b125c1e3 of 4See more

speckle-server-branch-testing6 speckle 2.25.10-branch.testing6.645-b125c1e

3 of the 4 container images this version deploys carry CVE-2026-90711.

Container imageDigestPackageFixed in
speckle/speckle-monitor-deployment:2.25.10-branch.testing6.645-b125c1e2dbc553ed87c
proxy-addr@2.0.7
2.0.8
speckle/speckle-preview-service:2.25.10-branch.testing6.645-b125c1e787adcb20a3a
proxy-addr@2.0.7
2.0.8
speckle/speckle-server:2.25.10-branch.testing6.645-b125c1e75cdf256067b
proxy-addr@2.0.7
2.0.8

Open the chart page →

12,592
retail-store-sample-checkout-chartstacksimplifyVerified publisher1.0.01 of 1See more

retail-store-sample-checkout-chart stacksimplify 1.0.0

1 of the 1 container images this version deploys carry CVE-2026-90711.

Container imageDigestPackageFixed in
public.ecr.aws/aws-containers/retail-store-sample-checkout:1.3.0687aa68dd490
proxy-addr@2.0.7
2.0.8

Open the chart page →

1,589
nordmart-reviewstakaterVerified publisher0.0.61 of 3See more

nordmart-review stakater 0.0.6

1 of the 3 container images this version deploys carry CVE-2026-90711.

Container imageDigestPackageFixed in
stakater/stakater-nordmart-review-ui:1.0.143f4926eedc74
proxy-addr@2.0.7
2.0.8

Open the chart page →

12,640
nordmart-review-instancestakaterVerified publisher1.0.01 of 3See more

nordmart-review-instance stakater 1.0.0

1 of the 3 container images this version deploys carry CVE-2026-90711.

Container imageDigestPackageFixed in
stakater/stakater-nordmart-review-ui:1.0.143f4926eedc74
proxy-addr@2.0.7
2.0.8

Open the chart page →

12,640
lodestar-validatorstakewise1.2.01 of 1See more

lodestar-validator stakewise 1.2.0

1 of the 1 container images this version deploys carry CVE-2026-90711.

Container imageDigestPackageFixed in
chainsafe/lodestar:v1.27.07b9fe4aa8073
proxy-addr@2.0.7
2.0.8

Open the chart page →

4,940
fdi-dotstatsuite-dlmstatcan0.3.11 of 1See more

fdi-dotstatsuite-dlm statcan 0.3.1

1 of the 1 container images this version deploys carry CVE-2026-90711.

Container imageDigestPackageFixed in
siscc/dotstatsuite-data-lifecycle-manager:v14.0.0b6f9a7c888fc
proxy-addr@2.0.7
2.0.8

Open the chart page →

4,157
fdi-dotstatsuite-sfs-solrstatcan1.0.21 of 4See more

fdi-dotstatsuite-sfs-solr statcan 1.0.2

1 of the 4 container images this version deploys carry CVE-2026-90711.

Container imageDigestPackageFixed in
siscc/dotstatsuite-sdmx-faceted-search:master12c5048f7402
proxy-addr@2.0.7
2.0.8

Open the chart page →

7,006
fdi-dotstatsuite-sfs-solr-statefulstatcan1.0.21 of 2See more

fdi-dotstatsuite-sfs-solr-stateful statcan 1.0.2

1 of the 2 container images this version deploys carry CVE-2026-90711.

Container imageDigestPackageFixed in
siscc/dotstatsuite-sdmx-faceted-search:master12c5048f7402
proxy-addr@2.0.7
2.0.8

Open the chart page →

1,331
kurento_webrtc_demostunner0.1.01 of 2See more

kurento_webrtc_demo stunner 0.1.0

1 of the 2 container images this version deploys carry CVE-2026-90711.

Container imageDigestPackageFixed in
l7mp/kurento-one2one-call-server:latestfd2b2d06fff6
proxy-addr@2.0.7
2.0.8

Open the chart page →

13,758
stunner-kurento-one2one-callstunner0.1.01 of 2See more

stunner-kurento-one2one-call stunner 0.1.0

1 of the 2 container images this version deploys carry CVE-2026-90711.

Container imageDigestPackageFixed in
l7mp/kurento-one2one-call-server:latestfd2b2d06fff6
proxy-addr@2.0.7
2.0.8

Open the chart page →

13,758
uptime-kumasupporttools2.6.01 of 3See more

uptime-kuma supporttools 2.6.0

1 of the 3 container images this version deploys carry CVE-2026-90711.

Container imageDigestPackageFixed in
supporttools/uptime-kuma:v2.6f8a49ed65809
proxy-addr@2.0.7
2.0.8

Open the chart page →

5,247
swr-cache-proxyswr-cache-proxy0.2.01 of 1See more

swr-cache-proxy swr-cache-proxy 0.2.0

1 of the 1 container images this version deploys carry CVE-2026-90711.

Container imageDigestPackageFixed in
vividplanet/swr-cache-proxy:v1ae1c5b1cbecb
proxy-addr@2.0.7
2.0.8

Open the chart page →

14,585
stateful-data-generatortalhajuikar-helm-charts0.1.21 of 2See more

stateful-data-generator talhajuikar-helm-charts 0.1.2

1 of the 2 container images this version deploys carry CVE-2026-90711.

Container imageDigestPackageFixed in
ghcr.io/talhajuikar/stateful-data-generator:v1.1.1dfd7ea7303a2
proxy-addr@2.0.7
2.0.8

Open the chart page →

5,529
trudesktechpreta1.0.01 of 3See more

trudesk techpreta 1.0.0

1 of the 3 container images this version deploys carry CVE-2026-90711.

Container imageDigestPackageFixed in
polonel/trudesk:1.2.60cf6513f6fe3
proxy-addr@2.0.7
2.0.8

Open the chart page →

4,360
tensorzerotensorzero2026.6.01 of 2See more

tensorzero tensorzero 2026.6.0

1 of the 2 container images this version deploys carry CVE-2026-90711.

Container imageDigestPackageFixed in
tensorzero/ui:2026.6.0f2563d54724e
proxy-addr@2.0.7
2.0.8

Open the chart page →

5,000
helm-testtest-helm-artifacthubVerified publisher1.0.01 of 2See more

helm-test test-helm-artifacthub 1.0.0

1 of the 2 container images this version deploys carry CVE-2026-90711.

Container imageDigestPackageFixed in
carlosmz87/test_helm_backend:latest8ffa63aa995d
proxy-addr@2.0.7
2.0.8

Open the chart page →

12,555
chatqnatest-opea1.0.01 of 11See more

chatqna test-opea 1.0.0

1 of the 11 container images this version deploys carry CVE-2026-90711.

Container imageDigestPackageFixed in
redis/redis-stack:7.2.0-v91c5f43fddcdd
proxy-addr@2.0.7
2.0.8

Open the chart page →

42,622
redis-vector-dbtest-opea1.0.01 of 1See more

redis-vector-db test-opea 1.0.0

1 of the 1 container images this version deploys carry CVE-2026-90711.

Container imageDigestPackageFixed in
redis/redis-stack:7.2.0-v91c5f43fddcdd
proxy-addr@2.0.7
2.0.8

Open the chart page →

6,287

Container images carrying it

650 by charts deploying them

A fixed version is listed for 1 of the 1 affected package.

No deployed image carries CVE-2026-90711.

syft 1.42.1 · advisories as of 7 Oct 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.