CVE-2026-91187

Medium

Advisory

Published 24 Sept 2026In the index since 25 Sept 2026

Severity: Medium; worst across findings
CVSS: 5.5; base score, highest
EPSS: —; probability of exploitation
CISA KEV: Not listed; no confirmed exploitation
Charts affected: 1,152; of 17,879 indexed, latest versions
Container images: 1,058; deployed by those charts
Fix available: None; affected package

The matching OSV records carry no description.

Carried by container images the latest versions of 1,152 of 17,879 indexed charts deploy, on 1,058 images.

Affected package	Affected versions	Fixed in	Images
dashdeb	0.5.7-4ubuntu1, 0.5.8-2.1ubuntu2, 0.5.8-2.10, 0.5.10.2-6+3 more	no fix listed	1,058

OSV records: UBUNTU-CVE-2026-91187
Trending: Rank 11 in indexed charts, since 25 Sept 2026. See the ranking →

Charts affected

1,152 by stars

Chart

Latest

Affected images

Radar Score

clickhousezloi-space

1.2.0

2 of 3 See more

clickhouse zloi-space 1.2.0

2 of the 3 container images this version deploys carry CVE-2026-91187.

Container image	Digest	Package	Fixed in
yandex/clickhouse-client :21.3	863f94a0f607	dash@0.5.8-2.10	no fix listed
yandex/clickhouse-server :21.3.20	4eccfffb01d7	dash@0.5.10.2-6	no fix listed

Open the chart page →

9,537

zoo-project-druzoo-project

0.10.4

1 of 6 See more

zoo-project-dru zoo-project 0.10.4

1 of the 6 container images this version deploys carry CVE-2026-91187.

Container image	Digest	Package	Fixed in
zooproject/zoo-project :dru-19f3c4eed7c9ec9d1f0375bbe59f9d204a42bd3a	9a507cb7e2dd	dash@0.5.11+git20210903+057cd650a4ed-3build1	no fix listed

Open the chart page →

8,360

Container images carrying it

1,058 by charts deploying them

A fixed version is listed for 0 of the 1 affected package.

Container image	Digest	Package	Fixed in	Used by
library/mariadb :10.7.3	07e06f2e7ae9	dash@0.5.10.2-6	no fix listed	1
library/mariadb :10.11.2	1c33370a599c	dash@0.5.11+git20210903+057cd650a4ed-3build1	no fix listed	1
library/mariadb :10.4	22edfe1c7834	dash@0.5.10.2-6	no fix listed	1
library/mariadb :10.8.2-focal	490f01279be1	dash@0.5.10.2-6	no fix listed	1
library/mariadb :12.0.2	5b6a1eac15b8	dash@0.5.12-6ubuntu5	no fix listed	1
library/mariadb :12.3.2	628f228f0fd5	dash@0.5.12-6ubuntu5	no fix listed	1
library/mariadb :11.8.4	6b848cb24fbb	dash@0.5.12-6ubuntu5	no fix listed	1
library/mariadb :11	79d59758afc9	dash@0.5.12-6ubuntu5	no fix listed	1
library/mariadb :10.6.21	8a16204dc96c	dash@0.5.10.2-6	no fix listed	1
library/mariadb :10.7	9a48ac9f196f	dash@0.5.10.2-6	no fix listed	1
library/mariadb :12.3.2	a02fe89cb597	dash@0.5.12-6ubuntu5	no fix listed	1
library/mariadb :12.3.3	ab1c3dd38194	dash@0.5.12-6ubuntu5	no fix listed	1
library/mariadb :12.2.2	b1cb255a9939	dash@0.5.12-6ubuntu5	no fix listed	1
library/mariadb :10.10.2	bfc25a68e113	dash@0.5.11+git20210903+057cd650a4ed-3build1	no fix listed	1
library/mariadb :10.6.15	e22328f4d714	dash@0.5.10.2-6	no fix listed	1
library/mariadb :10.9.4	fbb8456ebdb1	dash@0.5.11+git20210903+057cd650a4ed-3build1	no fix listed	1
library/mariadb :11.7.2	fcc7fcd7114a	dash@0.5.12-6ubuntu5	no fix listed	1
library/mongo :7.0.14	0032d2ca20db	dash@0.5.11+git20210903+057cd650a4ed-3build1	no fix listed	1
library/mongo :noble	02eb14a1130c	dash@0.5.12-6ubuntu5	no fix listed	1
library/mongo :4.4.13	05678ae4e5e1	dash@0.5.10.2-6	no fix listed	1
library/mongo :3.6	146c1fd999a6	dash@0.5.8-2.1ubuntu2	no fix listed	1
library/mongo :5.0.32-focal	3b6c281e1c08	dash@0.5.10.2-6	no fix listed	1
library/mongo :4.4-bionic	3d0e6df9fd5b	dash@0.5.8-2.10	no fix listed	1
library/mongo :8.0	4968f22d0c6c	dash@0.5.12-6ubuntu5	no fix listed	1
library/mongo :5.0.14-focal	50cae5081ab4	dash@0.5.10.2-6	no fix listed	1
library/mongo :6.0.12	646902910d6a	dash@0.5.11+git20210903+057cd650a4ed-3build1	no fix listed	1
library/mongo :4.2	699d652ed674	dash@0.5.8-2.10	no fix listed	1
library/mongo :6.0.2	71a63fc2438e	dash@0.5.10.2-6	no fix listed	1
library/mongo :5.0.21	7c81758cb295	dash@0.5.10.2-6	no fix listed	1
library/mongo :7.0.28-jammy	88785f6f665a	dash@0.5.11+git20210903+057cd650a4ed-3build1	no fix listed	1
library/mongo :4.2.21-bionic	9cb28f7291d9	dash@0.5.8-2.10	no fix listed	1
library/mongo :7.0.12	ae1cf99fa7bf	dash@0.5.11+git20210903+057cd650a4ed-3build1	no fix listed	1
library/mongo :4.4.18	d23ec07162ca	dash@0.5.10.2-6	no fix listed	1
library/mongo :8.0.11	dca8d11fe467	dash@0.5.12-6ubuntu5	no fix listed	1
library/rabbitmq :3.12.10	0742852455ad	dash@0.5.11+git20210903+057cd650a4ed-3build1	no fix listed	1
library/rabbitmq :3.11.5-management	1b0f675d2f24	dash@0.5.10.2-6	no fix listed	1
library/rabbitmq :4.3.6-management	534e4fefc5f0	dash@0.5.12-6ubuntu5	no fix listed	1
library/rabbitmq :4.3.6	67bad329974a	dash@0.5.12-6ubuntu5	no fix listed	1
library/rabbitmq :4.2.8	7561d672fae4	dash@0.5.12-6ubuntu5	no fix listed	1
library/rabbitmq :3.7-management	b6dd45cc35b3	dash@0.5.8-2.10	no fix listed	1
library/rabbitmq :4.3.6-management	de62d9901fb7	dash@0.5.12-6ubuntu5	no fix listed	1
library/rabbitmq :4.3.4-management	eb5295d08332	dash@0.5.12-6ubuntu5	no fix listed	1
library/sonarqube :10.7.0-community	0842dcd4c8f8	dash@0.5.11+git20210903+057cd650a4ed-3build1	no fix listed	1
library/tomcat :11.0.25-jdk17-temurin-noble	dbde329dcbfa	dash@0.5.12-6ubuntu5	no fix listed	1
library/ubuntu :bionic	152dc042452c	dash@0.5.8-2.10	no fix listed	1
library/ubuntu :22.04	b8b6ee6aa931	dash@0.5.11+git20210903+057cd650a4ed-3build1	no fix listed	1
library/xwiki :lts-postgres-tomcat	9b8142bce157	dash@0.5.12-6ubuntu5	no fix listed	1
library/zookeeper :3.8-temurin	55d1e5b2e601	dash@0.5.11+git20210903+057cd650a4ed-3build1	no fix listed	1
library/zookeeper :3.9.4	dfa9ba46d14b	dash@0.5.11+git20210903+057cd650a4ed-3build1	no fix listed	1
lightbend/curl :7.47.0	b0c9894ac8dd	dash@0.5.8-2.1ubuntu2	no fix listed	1