StackRadar

CVE-2026-90711

Critical

Advisory

Published 5 Oct 2026In the index since 6 Oct 2026
Severity
Critical
worst across findings
CVSS
9.1
base score, highest
EPSS
0.003
24th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
630
of 18,035 indexed, latest versions
Container images
640
deployed by those charts
Fix available
1 of 1
affected package

proxy-addr vulnerable to IP spoofing via IPv4-mapped IPv6 trust subnet

Carried by container images the latest versions of 630 of 18,035 indexed charts deploy, on 640 images.

Affected packageAffected versionsFixed inImages
proxy-addrnpm1.1.5, 2.0.2, 2.0.3, 2.0.4+3 more2.0.8640
OSV records
GHSA-jqcg-44mw-7w3h
Trending
Rank 20 in indexed charts, since 6 Oct 2026. See the ranking →

Charts affected

630 by stars
ChartLatestAffected imagesRadar Score
kubevious-agentkubevious1.0.41 of 1See more

kubevious-agent kubevious 1.0.4

1 of the 1 container images this version deploys carry CVE-2026-90711.

Container imageDigestPackageFixed in
kubevious/parser:1.0.151acf1a1f0b47
proxy-addr@2.0.7
2.0.8

Open the chart page →

2,087
workload-operatorkubevious0.0.31 of 1See more

workload-operator kubevious 0.0.3

1 of the 1 container images this version deploys carry CVE-2026-90711.

Container imageDigestPackageFixed in
kubevious/workload-operator:1.0.20b0f4c507eb6
proxy-addr@2.0.7
2.0.8

Open the chart page →

2,179
landing-pagelanding-pageVerified publisher0.1.01 of 1See more

landing-page landing-page 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-90711.

Container imageDigestPackageFixed in
felipecs8/landing-page:v1db6d44e325a1
proxy-addr@2.0.7
2.0.8

Open the chart page →

1,268
jellyseerrlbenicio-communityVerified publisher0.1.01 of 1See more

jellyseerr lbenicio-community 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-90711.

Container imageDigestPackageFixed in
fallenbagel/jellyseerr:latest4538137bc5af
proxy-addr@2.0.7
2.0.8

Open the chart page →

3,948
stremiolbenicio-communityVerified publisher0.1.11 of 2See more

stremio lbenicio-community 0.1.1

1 of the 2 container images this version deploys carry CVE-2026-90711.

Container imageDigestPackageFixed in
lbenicio/stremio-web:latest732f9003de33
proxy-addr@2.0.7
2.0.8

Open the chart page →

3,211
uptime-kumalbenicio-communityVerified publisher0.1.11 of 1See more

uptime-kuma lbenicio-community 0.1.1

1 of the 1 container images this version deploys carry CVE-2026-90711.

Container imageDigestPackageFixed in
louislam/uptime-kuma:2.3.29aeb4e51d038
proxy-addr@2.0.7
2.0.8

Open the chart page →

37,502
node-redlmatfyVerified publisher0.1.61 of 1See more

node-red lmatfy 0.1.6

1 of the 1 container images this version deploys carry CVE-2026-90711.

Container imageDigestPackageFixed in
nodered/node-red:4.1.10-minimald73ae167cb9b
proxy-addr@2.0.7
2.0.8

Open the chart page →

2,160
weather-app-chartlocal-weatherapp0.1.01 of 4See more

weather-app-chart local-weatherapp 0.1.0

1 of the 4 container images this version deploys carry CVE-2026-90711.

Container imageDigestPackageFixed in
youssef11gaber10/deployment-ui-react:latestba6853e35c60
proxy-addr@2.0.7
2.0.8

Open the chart page →

8,004
uptime-kumaloeken-at-homeVerified publisher2.3.21 of 1See more

uptime-kuma loeken-at-home 2.3.2

1 of the 1 container images this version deploys carry CVE-2026-90711.

Container imageDigestPackageFixed in
louislam/uptime-kuma:2.3.29aeb4e51d038
proxy-addr@2.0.7
2.0.8

Open the chart page →

37,502
devspace-cloudloftVerified publisher0.3.31 of 8See more

devspace-cloud loft 0.3.3

1 of the 8 container images this version deploys carry CVE-2026-90711.

Container imageDigestPackageFixed in
devspacecloud/ui:0.3.3deef55ff29a7
proxy-addr@2.0.6
2.0.8

Open the chart page →

11,949
redisinsightlogic3579Verified publisher3.4.01 of 1See more

redisinsight logic3579 3.4.0

1 of the 1 container images this version deploys carry CVE-2026-90711.

Container imageDigestPackageFixed in
redis/redisinsight:3.485562d67a912
proxy-addr@2.0.7
2.0.8

Open the chart page →

1,818
allure_docker_service_uilovemew67Verified publisher0.0.11 of 1See more

allure_docker_service_ui lovemew67 0.0.1

1 of the 1 container images this version deploys carry CVE-2026-90711.

Container imageDigestPackageFixed in
frankescobar/allure-docker-service-ui:7.0.34ebd8b4ef340
proxy-addr@2.0.6
2.0.8

Open the chart page →

2,880
mongo_guilovemew67Verified publisher0.0.21 of 1See more

mongo_gui lovemew67 0.0.2

1 of the 1 container images this version deploys carry CVE-2026-90711.

Container imageDigestPackageFixed in
haohanyang/compass-web:0.1.1e3952b14ae8e
proxy-addr@2.0.7
2.0.8

Open the chart page →

2,247
vulnerability-scaninglovemew67Verified publisher0.0.31 of 2See more

vulnerability-scaning lovemew67 0.0.3

1 of the 2 container images this version deploys carry CVE-2026-90711.

Container imageDigestPackageFixed in
frankescobar/allure-docker-service-ui:7.0.34ebd8b4ef340
proxy-addr@2.0.6
2.0.8

Open the chart page →

6,287
frontendluiscajl0.1.71 of 1See more

frontend luiscajl 0.1.7

1 of the 1 container images this version deploys carry CVE-2026-90711.

Container imageDigestPackageFixed in
lavandadelpatio/frontend:latest501c3f31e0bc
proxy-addr@2.0.6
2.0.8

Open the chart page →

3,814
wudm0sh1-helm-charts0.2.01 of 1See more

wud m0sh1-helm-charts 0.2.0

1 of the 1 container images this version deploys carry CVE-2026-90711.

Container imageDigestPackageFixed in
getwud/wud:8.1.1b1cd01c43839
proxy-addr@2.0.7
2.0.8

Open the chart page →

7,829
m9sweeperm9sweeperVerified publisher1.6.01 of 6See more

m9sweeper m9sweeper 1.6.0

1 of the 6 container images this version deploys carry CVE-2026-90711.

Container imageDigestPackageFixed in
ghcr.io/m9sweeper/dash:1.6.02e27cdff8344
proxy-addr@2.0.7
2.0.8

Open the chart page →

11,631
nodecg-chartmarathon-charts0.1.51 of 2See more

nodecg-chart marathon-charts 0.1.5

1 of the 2 container images this version deploys carry CVE-2026-90711.

Container imageDigestPackageFixed in
ghcr.io/rodg/nodecg-base:latest31be4bf87070
proxy-addr@2.0.7
2.0.8

Open the chart page →

8,534
kubevismario-fVerified publisher2.0.11 of 1See more

kubevis mario-f 2.0.1

1 of the 1 container images this version deploys carry CVE-2026-90711.

Container imageDigestPackageFixed in
ghcr.io/mario-f/kubevis:v1.4.0763daf9caf8e
proxy-addr@2.0.7
2.0.8

Open the chart page →

6,458
maxcrm-chartsmaxcrm-chartsVerified publisher1.1.2011 of 4See more

maxcrm-charts maxcrm-charts 1.1.201

1 of the 4 container images this version deploys carry CVE-2026-90711.

Container imageDigestPackageFixed in
chatwoot/chatwoot:v3.1.0d530ab8c1753
proxy-addr@2.0.6
2.0.8

Open the chart page →

6,120
eoloplantmca-eoloplaner0.1.01 of 7See more

eoloplant mca-eoloplaner 0.1.0

1 of the 7 container images this version deploys carry CVE-2026-90711.

Container imageDigestPackageFixed in
hugohg34/server:0.0.2503e5d8960ff
proxy-addr@2.0.7
2.0.8

Open the chart page →

34,155
claude-code-apimcp-helmVerified publisher0.1.11 of 1See more

claude-code-api mcp-helm 0.1.1

1 of the 1 container images this version deploys carry CVE-2026-90711.

Container imageDigestPackageFixed in
arbuzov/claude-code-api:0.1.02d7dd8070610
proxy-addr@2.0.7
2.0.8

Open the chart page →

4,685
mcp-gitlabmcp-helmVerified publisher0.3.41 of 1See more

mcp-gitlab mcp-helm 0.3.4

1 of the 1 container images this version deploys carry CVE-2026-90711.

Container imageDigestPackageFixed in
iwakitakuma/gitlab-mcp:2.0.7fb3e81aa6528
proxy-addr@2.0.7
2.0.8

Open the chart page →

1,296
mcp-kubernetesmcp-helmVerified publisher0.2.71 of 1See more

mcp-kubernetes mcp-helm 0.2.7

1 of the 1 container images this version deploys carry CVE-2026-90711.

Container imageDigestPackageFixed in
mcp/kubernetes:latest5ffbf7f0a8aa
proxy-addr@2.0.7
2.0.8

Open the chart page →

6,466
searchmcp-helmVerified publisher0.1.31 of 2See more

search mcp-helm 0.1.3

1 of the 2 container images this version deploys carry CVE-2026-90711.

Container imageDigestPackageFixed in
laituanmanh/websearch-crawler:latest63b6da557c71
proxy-addr@2.0.7
2.0.8

Open the chart page →

10,796
backstagemcwarmanVerified publisher0.10.101 of 2See more

backstage mcwarman 0.10.10

1 of the 2 container images this version deploys carry CVE-2026-90711.

Container imageDigestPackageFixed in
ghcr.io/mcwarman/backstage-sample-app/backend:main07aba09a594f
proxy-addr@2.0.7
2.0.8

Open the chart page →

10,864
kommandermesosphere-stable0.39.21 of 29See more

kommander mesosphere-stable 0.39.2

1 of the 29 container images this version deploys carry CVE-2026-90711.

Container imageDigestPackageFixed in
mesosphere/kommander:6.100.13917e82333a9
proxy-addr@2.0.6
2.0.8

Open the chart page →

88,945
opsportalmesosphere-stable0.9.51 of 3See more

opsportal mesosphere-stable 0.9.5

1 of the 3 container images this version deploys carry CVE-2026-90711.

Container imageDigestPackageFixed in
mesosphere/kommander:6.100.13917e82333a9
proxy-addr@2.0.6
2.0.8

Open the chart page →

8,572
littlelink-servermhamzahkhanVerified publisher1.0.01 of 1See more

littlelink-server mhamzahkhan 1.0.0

1 of the 1 container images this version deploys carry CVE-2026-90711.

Container imageDigestPackageFixed in
ghcr.io/techno-tim/littlelink-server:latest735a1fcd078b
proxy-addr@2.0.7
2.0.8

Open the chart page →

990
alluremidokura-communityVerified publisher0.1.31 of 2See more

allure midokura-community 0.1.3

1 of the 2 container images this version deploys carry CVE-2026-90711.

Container imageDigestPackageFixed in
frankescobar/allure-docker-service-ui:7.0.34ebd8b4ef340
proxy-addr@2.0.6
2.0.8

Open the chart page →

72,784
mini-blogmini-blog-helm0.1.01 of 3See more

mini-blog mini-blog-helm 0.1.0

1 of the 3 container images this version deploys carry CVE-2026-90711.

Container imageDigestPackageFixed in
beyzkaya/blog-backend:v1.0.112a6a3d1c5f9
proxy-addr@2.0.7
2.0.8

Open the chart page →

14,032
MINTmint8.0.21 of 15See more

MINT mint 8.0.2

1 of the 15 container images this version deploys carry CVE-2026-90711.

Container imageDigestPackageFixed in
mintproject/ensemble-manager:d5656dbc01623e291564d2894c72f0e7cb2408f4222e3b941a36
proxy-addr@2.0.7
2.0.8

Open the chart page →

116,577
iotmmontesVerified publisher0.3.23 of 7See more

iot mmontes 0.3.2

3 of the 7 container images this version deploys carry CVE-2026-90711.

Container imageDigestPackageFixed in
ghcr.io/mmontes11/iot-back:v3.11.096683c54ae65
proxy-addr@2.0.7
2.0.8
ghcr.io/mmontes11/iot-biot:v3.11.033f7976b26a8
proxy-addr@2.0.7
2.0.8
ghcr.io/mmontes11/iot-thing:v3.11.0542e91e8499c
proxy-addr@2.0.7
2.0.8

Open the chart page →

10,977
account-lookup-servicemojaloop13.0.01 of 4See more

account-lookup-service mojaloop 13.0.0

1 of the 4 container images this version deploys carry CVE-2026-90711.

Container imageDigestPackageFixed in
mojaloop/account-lookup-service:v11.8.0b06d3287ea82
proxy-addr@2.0.7
2.0.8

Open the chart page →

12,743
account-lookup-service-adminmojaloop13.0.01 of 4See more

account-lookup-service-admin mojaloop 13.0.0

1 of the 4 container images this version deploys carry CVE-2026-90711.

Container imageDigestPackageFixed in
mojaloop/account-lookup-service:v11.8.0b06d3287ea82
proxy-addr@2.0.7
2.0.8

Open the chart page →

12,743
admin-api-svcmojaloop12.0.01 of 4See more

admin-api-svc mojaloop 12.0.0

1 of the 4 container images this version deploys carry CVE-2026-90711.

Container imageDigestPackageFixed in
mojaloop/central-ledger:v13.14.01abc8a7aa71c
proxy-addr@2.0.7
2.0.8

Open the chart page →

13,164
bofmojaloop5.1.61 of 1See more

bof mojaloop 5.1.6

1 of the 1 container images this version deploys carry CVE-2026-90711.

Container imageDigestPackageFixed in
mojaloop/security-role-perm-operator-svc:v3.0.212af60892c75
proxy-addr@2.0.7
2.0.8

Open the chart page →

2,900
finance-portalmojaloop5.1.44 of 11See more

finance-portal mojaloop 5.1.4

4 of the 11 container images this version deploys carry CVE-2026-90711.

Container imageDigestPackageFixed in
mojaloop/reporting-events-processor-svc:v3.5.11e0d24d28512
proxy-addr@2.0.7
2.0.8
mojaloop/reporting-hub-bop-api-svc:v4.1.2b45a2d6f0f2a
proxy-addr@2.0.7
2.0.8
mojaloop/reporting-hub-bop-experience-api-svc:v2.0.4265102a049d6
proxy-addr@2.0.7
2.0.8
mojaloop/role-assignment-service:v2.1.0def4bf273721
proxy-addr@2.0.7
2.0.8

Open the chart page →

16,967
fspiop-transfer-api-svcmojaloop12.0.11 of 3See more

fspiop-transfer-api-svc mojaloop 12.0.1

1 of the 3 container images this version deploys carry CVE-2026-90711.

Container imageDigestPackageFixed in
mojaloop/ml-api-adapter:v11.1.6fb71d233c742
proxy-addr@2.0.7
2.0.8

Open the chart page →

12,263
mojaloopmojaloop14.0.03 of 6See more

mojaloop mojaloop 14.0.0

3 of the 6 container images this version deploys carry CVE-2026-90711.

Container imageDigestPackageFixed in
mojaloop/account-lookup-service:v11.8.0b06d3287ea82
proxy-addr@2.0.7
2.0.8
mojaloop/central-ledger:v13.14.01abc8a7aa71c
proxy-addr@2.0.7
2.0.8
mojaloop/ml-api-adapter:v11.1.6fb71d233c742
proxy-addr@2.0.7
2.0.8

Open the chart page →

20,648
reporting-events-processor-svcmojaloop3.5.31 of 1See more

reporting-events-processor-svc mojaloop 3.5.3

1 of the 1 container images this version deploys carry CVE-2026-90711.

Container imageDigestPackageFixed in
mojaloop/reporting-events-processor-svc:v3.5.11e0d24d28512
proxy-addr@2.0.7
2.0.8

Open the chart page →

3,019
reporting-hub-bop-api-svcmojaloop4.1.31 of 1See more

reporting-hub-bop-api-svc mojaloop 4.1.3

1 of the 1 container images this version deploys carry CVE-2026-90711.

Container imageDigestPackageFixed in
mojaloop/reporting-hub-bop-api-svc:v4.1.2b45a2d6f0f2a
proxy-addr@2.0.7
2.0.8

Open the chart page →

1,852
reporting-hub-bop-experience-api-svcmojaloop1.0.31 of 1See more

reporting-hub-bop-experience-api-svc mojaloop 1.0.3

1 of the 1 container images this version deploys carry CVE-2026-90711.

Container imageDigestPackageFixed in
mojaloop/reporting-hub-bop-experience-api-svc:v2.0.4265102a049d6
proxy-addr@2.0.7
2.0.8

Open the chart page →

2,922
role-assignment-servicemojaloop3.1.01 of 1See more

role-assignment-service mojaloop 3.1.0

1 of the 1 container images this version deploys carry CVE-2026-90711.

Container imageDigestPackageFixed in
mojaloop/role-assignment-service:v2.1.0def4bf273721
proxy-addr@2.0.7
2.0.8

Open the chart page →

2,554
security-role-perm-operator-svcmojaloop3.0.01 of 1See more

security-role-perm-operator-svc mojaloop 3.0.0

1 of the 1 container images this version deploys carry CVE-2026-90711.

Container imageDigestPackageFixed in
mojaloop/security-role-perm-operator-svc:v3.0.212af60892c75
proxy-addr@2.0.7
2.0.8

Open the chart page →

2,900
mongodb-admin-interfacemongo-db-admin-interfaceVerified publisher0.1.01 of 2See more

mongodb-admin-interface mongo-db-admin-interface 0.1.0

1 of the 2 container images this version deploys carry CVE-2026-90711.

Container imageDigestPackageFixed in
library/mongo-express:latest1b23d7976f02
proxy-addr@2.0.7
2.0.8

Open the chart page →

5,851
sample-appmongodb-helm-charts0.1.01 of 2See more

sample-app mongodb-helm-charts 0.1.0

1 of the 2 container images this version deploys carry CVE-2026-90711.

Container imageDigestPackageFixed in
quay.io/mongodb/farm-intro-frontend:0.199ccdfd543e1
proxy-addr@2.0.6
2.0.8

Open the chart page →

8,148
api-proxymoreillonVerified publisher0.1.41 of 1See more

api-proxy moreillon 0.1.4

1 of the 1 container images this version deploys carry CVE-2026-90711.

Container imageDigestPackageFixed in
moreillon/api-proxy:2373c1953739ef6956b5
proxy-addr@2.0.7
2.0.8

Open the chart page →

2,072
camera-viewermoreillonVerified publisher0.2.11 of 4See more

camera-viewer moreillon 0.2.1

1 of the 4 container images this version deploys carry CVE-2026-90711.

Container imageDigestPackageFixed in
moreillon/camera-proxy:latestce60056b50c2
proxy-addr@2.0.7
2.0.8

Open the chart page →

13,728
face-recognitionmoreillonVerified publisher0.2.41 of 3See more

face-recognition moreillon 0.2.4

1 of the 3 container images this version deploys carry CVE-2026-90711.

Container imageDigestPackageFixed in
moreillon/face-recognition-fastapi-front:latestc1072f4ab6aa
proxy-addr@2.0.7
2.0.8

Open the chart page →

11,400

Container images carrying it

640 by charts deploying them

A fixed version is listed for 1 of the 1 affected package.

No deployed image carries CVE-2026-90711.

syft 1.42.1 · advisories as of 6 Oct 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.