StackRadar

CVE-2026-91187

Medium

Advisory

Published 24 Sept 2026In the index since 25 Sept 2026
Severity
Medium
worst across findings
CVSS
5.5
base score, highest
EPSS
—
probability of exploitation
CISA KEV
Not listed
no confirmed exploitation
Charts affected
1,152
of 17,879 indexed, latest versions
Container images
1,058
deployed by those charts
Fix available
None
affected package

The matching OSV records carry no description.

Carried by container images the latest versions of 1,152 of 17,879 indexed charts deploy, on 1,058 images.

Affected packageAffected versionsFixed inImages
dashdeb0.5.7-4ubuntu1, 0.5.8-2.1ubuntu2, 0.5.8-2.10, 0.5.10.2-6+3 moreno fix listed1,058
OSV records
UBUNTU-CVE-2026-91187
Trending
Rank 11 in indexed charts, since 25 Sept 2026. See the ranking →

Charts affected

1,152 by stars
ChartLatestAffected imagesRadar Score
clickhousezloi-space1.2.02 of 3See more

clickhouse zloi-space 1.2.0

2 of the 3 container images this version deploys carry CVE-2026-91187.

Container imageDigestPackageFixed in
yandex/clickhouse-client:21.3863f94a0f607
dash@0.5.8-2.10
no fix listed
yandex/clickhouse-server:21.3.204eccfffb01d7
dash@0.5.10.2-6
no fix listed

Open the chart page →

9,537
zoo-project-druzoo-projectOfficialVerified publisher0.10.41 of 6See more

zoo-project-dru zoo-project 0.10.4

1 of the 6 container images this version deploys carry CVE-2026-91187.

Container imageDigestPackageFixed in
zooproject/zoo-project:dru-19f3c4eed7c9ec9d1f0375bbe59f9d204a42bd3a9a507cb7e2dd
dash@0.5.11+git20210903+057cd650a4ed-3build1
no fix listed

Open the chart page →

8,360

Container images carrying it

1,058 by charts deploying them

A fixed version is listed for 0 of the 1 affected package.

Container imageDigestPackageFixed inUsed by
linuxchina/alibaba-rsocket-broker:1.1.3-k8sf758e2e567ee
dash@0.5.8-2.10
no fix listed
1
linuxserver/calibre:version-v5.21.0a847b5b2d860
dash@0.5.8-2.10
no fix listed
1
linuxserver/calibre-web:0.6.24241009026e6f
dash@0.5.12-6ubuntu5
no fix listed
1
linuxserver/calibre-web:version-0.6.12938810eca3d3
dash@0.5.10.2-6
no fix listed
1
linuxserver/code-server:4.10.1a5e43a05ae79
dash@0.5.11+git20210903+057cd650a4ed-3build1
no fix listed
1
linuxserver/codimd:latestb801bbcf6386
dash@0.5.8-2.10
no fix listed
1
linuxserver/deluge:18.04.10ac871624394
dash@0.5.8-2.10
no fix listed
1
linuxserver/deluge:version-2.0.3-2201906121747ubuntu18.04.12ce561a95e7b
dash@0.5.8-2.10
no fix listed
1
linuxserver/foldingathome:7.6.219a997426d71e
dash@0.5.12-6ubuntu5
no fix listed
1
linuxserver/foldingathome:8.5.6ebb32940e4bb
dash@0.5.12-6ubuntu5
no fix listed
1
linuxserver/jackett:0.20.39922b8bfdee1ae
dash@0.5.8-2.10
no fix listed
1
linuxserver/lazylibrarian:version-1152df82f93d2560e233
dash@0.5.8-2.10
no fix listed
1
linuxserver/ombi:3.0.4572-ls452fbb21fb4903
dash@0.5.8-2.10
no fix listed
1
linuxserver/plex:1.43.22785a6ad64d3
dash@0.5.12-6ubuntu5
no fix listed
1
linuxserver/unifi-controller:8.0.240ae315a3a456
dash@0.5.10.2-6
no fix listed
1
linuxserver/unifi-controller:7.3.83ab105cc50322
dash@0.5.10.2-6
no fix listed
1
linuxserver/unifi-network-application:10.6.106-ls1467f15f34937ce
dash@0.5.12-12ubuntu3
no fix listed
1
litmuschaos/mongo:4.2.899961210d467
dash@0.5.8-2.10
no fix listed
1
livekit/ingress:v1.2.21ab01641b366
dash@0.5.11+git20210903+057cd650a4ed-3build1
no fix listed
1
longhornio/longhorn-manager:v1.1.1ede61fe2a472
dash@0.5.8-2.10
no fix listed
1
longhornio/upgrade-responder:v0.2.05875cef29348
dash@0.5.10.2-6
no fix listed
1
lsstsqre/nublado2:2.0.1b75bf8aaafa4
dash@0.5.10.2-6
no fix listed
1
lumenvox/cloud-assure-api:2.0.0fcb9fb54a9fd
dash@0.5.10.2-6
no fix listed
1
lumenvox/cloud-assure-identity:2.0.0147854a3c916
dash@0.5.10.2-6
no fix listed
1
lumenvox/cloud-audit:2.0.079428add7f38
dash@0.5.10.2-6
no fix listed
1
lumenvox/cloud-binary-storage:2.0.053decadc102d
dash@0.5.10.2-6
no fix listed
1
lumenvox/cloud-configuration:2.0.017fbce1a8bc6
dash@0.5.10.2-6
no fix listed
1
lumenvox/cloud-deployment:2.0.0ea8110886d38
dash@0.5.10.2-6
no fix listed
1
lumenvox/cloud-engine-resource:2.0.0e2e5abe27abc
dash@0.5.10.2-6
no fix listed
1
lumenvox/cloud-management-api:2.0.0b9a23345eabd
dash@0.5.10.2-6
no fix listed
1
lumenvox/cloud-reporting:2.0.07a9ffdc2178a
dash@0.5.10.2-6
no fix listed
1
lumenvox/cloud-reporting-api:2.0.0dbbaf5462ad6
dash@0.5.10.2-6
no fix listed
1
lumenvox/cloud-transaction:2.0.08b74f9d3ba09
dash@0.5.10.2-6
no fix listed
1
lumenvox/cloud-voice-verifier:2.0.014170ad34903
dash@0.5.10.2-6
no fix listed
1
maksymhencha/educative-helm-bookapp:0.0.27f096a681192
dash@0.5.10.2-6
no fix listed
1
maptiler/server:4.8.07e206140057b
dash@0.5.10.2-6
no fix listed
1
mbround18/valheim:3.1.070bd4da591cd
dash@0.5.11+git20210903+057cd650a4ed-3build1
no fix listed
1
mediagis/nominatim:5.3.27923a8e67197
dash@0.5.12-6ubuntu5
no fix listed
1
mediagis/nominatim:3.7c15e941485ef
dash@0.5.10.2-6
no fix listed
1
mediagis/nominatim:4.2d0eae7b51374
dash@0.5.11+git20210903+057cd650a4ed-3build1
no fix listed
1
mintproject/graphql-engine:305c0dbeba1878eafe348f21fc300fbfc017d9dc83aade2c1855
dash@0.5.10.2-6
no fix listed
1
mlikiowa/napcat-docker:latest2cc70b45244a
dash@0.5.11+git20210903+057cd650a4ed-3build1
no fix listed
1
mshanley80/httpbin2022:latest5b189a70c0fb
dash@0.5.10.2-6
no fix listed
1
muluder/prograncontrollermcord:0.1.843b597a93da7
dash@0.5.8-2.1ubuntu2
no fix listed
1
nelssec/qualys-agent-bootstrapper:v2.1.05e471f0cdeaa
dash@0.5.11+git20210903+057cd650a4ed-3build1
no fix listed
1
netbirdio/management:latest3c3bed2a982c
dash@0.5.12-6ubuntu5
no fix listed
1
netbirdio/management:0.60.252682e5f48f9
dash@0.5.12-6ubuntu5
no fix listed
1
netbirdio/management:0.46.0b0adc4ad4ec6
dash@0.5.12-6ubuntu5
no fix listed
1
netbirdio/netbird-server:0.78.13086534361a1
dash@0.5.12-6ubuntu5
no fix listed
1
netbirdio/netbird-server:0.78.2ac6317722f6f
dash@0.5.12-6ubuntu5
no fix listed
1

syft 1.42.1 · advisories as of 25 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.