StackRadar

CVE-2026-91187

Medium

Advisory

Published 24 Sept 2026In the index since 25 Sept 2026
Severity
Medium
worst across findings
CVSS
5.5
base score, highest
EPSS
—
probability of exploitation
CISA KEV
Not listed
no confirmed exploitation
Charts affected
1,152
of 17,879 indexed, latest versions
Container images
1,058
deployed by those charts
Fix available
None
affected package

The matching OSV records carry no description.

Carried by container images the latest versions of 1,152 of 17,879 indexed charts deploy, on 1,058 images.

Affected packageAffected versionsFixed inImages
dashdeb0.5.7-4ubuntu1, 0.5.8-2.1ubuntu2, 0.5.8-2.10, 0.5.10.2-6+3 moreno fix listed1,058
OSV records
UBUNTU-CVE-2026-91187
Trending
Rank 11 in indexed charts, since 25 Sept 2026. See the ranking →

Charts affected

1,152 by stars
ChartLatestAffected imagesRadar Score
heliconehelicone0.1.422 of 14See more

helicone helicone 0.1.42

2 of the 14 container images this version deploys carry CVE-2026-91187.

Container imageDigestPackageFixed in
clickhouse/clickhouse-server:23.4.2.11dc5658853ce1
dash@0.5.11+git20210903+057cd650a4ed-3build1
no fix listed
helicone/clickhouse-migration-runner:v2025.03.05-14c69b971a7e4
dash@0.5.10.2-6
no fix listed

Open the chart page →

78,113
7dtdhelm-7dtd0.1.01 of 1See more

7dtd helm-7dtd 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-91187.

Container imageDigestPackageFixed in
vinanrra/7dtd-server:v0.4.4f9534490bd2b
dash@0.5.8-2.10
no fix listed

Open the chart page →

67,018
pageshelm-chart-repos-camden1.0.02 of 3See more

pages helm-chart-repos-camden 1.0.0

2 of the 3 container images this version deploys carry CVE-2026-91187.

Container imageDigestPackageFixed in
dellcloud/pages:monitor6ba7b22caacd
dash@0.5.10.2-6
no fix listed
flyway/flyway:6.4.422d97ceb0c47
dash@0.5.8-2.10
no fix listed

Open the chart page →

20,585
iofoghelm-chartsVerified publisher0.1.11 of 3See more

iofog helm-charts 0.1.1

1 of the 3 container images this version deploys carry CVE-2026-91187.

Container imageDigestPackageFixed in
iofog/router:2.0.17260cf861479
dash@0.5.8-2.10
no fix listed

Open the chart page →

24,516
nginx-charthelm-chart-sample-app0.1.01 of 1See more

nginx-chart helm-chart-sample-app 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-91187.

Container imageDigestPackageFixed in
rraahul/test:latestbfe2c1183bc0
dash@0.5.11+git20210903+057cd650a4ed-3build1
no fix listed

Open the chart page →

4,616
appwritehelmforgeVerified publisher2.0.01 of 5See more

appwrite helmforge 2.0.0

1 of the 5 container images this version deploys carry CVE-2026-91187.

Container imageDigestPackageFixed in
library/mariadb:12.3.3ab1c3dd38194
dash@0.5.12-6ubuntu5
no fix listed

Open the chart page →

5,105
booklorehelmforgeVerified publisher2.0.11 of 3See more

booklore helmforge 2.0.1

1 of the 3 container images this version deploys carry CVE-2026-91187.

Container imageDigestPackageFixed in
library/mariadb:12.3.3805c8e104bd5
dash@0.5.12-6ubuntu5
no fix listed

Open the chart page →

2,188
castopodhelmforgeVerified publisher1.2.71 of 3See more

castopod helmforge 1.2.7

1 of the 3 container images this version deploys carry CVE-2026-91187.

Container imageDigestPackageFixed in
library/mariadb:12.3.3805c8e104bd5
dash@0.5.12-6ubuntu5
no fix listed

Open the chart page →

9,805
ckanhelmforgeVerified publisher1.3.81 of 6See more

ckan helmforge 1.3.8

1 of the 6 container images this version deploys carry CVE-2026-91187.

Container imageDigestPackageFixed in
ckan/ckan-solr:2.11-solr9ef8e5d3e6be1
dash@0.5.11+git20210903+057cd650a4ed-3build1
no fix listed

Open the chart page →

9,732
clickhousehelmforgeVerified publisher2.0.21 of 1See more

clickhouse helmforge 2.0.2

1 of the 1 container images this version deploys carry CVE-2026-91187.

Container imageDigestPackageFixed in
clickhouse/clickhouse-server:26.8.3d73903d1b61d
dash@0.5.11+git20210903+057cd650a4ed-3build1
no fix listed

Open the chart page →

1,772
countlyhelmforgeVerified publisher1.2.72See more

countly helmforge 1.2.7

2 container images this version deploys carry CVE-2026-91187.

Container imageDigestPackageFixed in
countly/countly-server:25.05.4e3c238248f99
dash@0.5.10.2-6
no fix listed
library/mongo:8.3.981a1c8842a09
dash@0.5.12-6ubuntu5
no fix listed

Open the chart page →

—
druidhelmforgeVerified publisher1.3.61 of 4See more

druid helmforge 1.3.6

1 of the 4 container images this version deploys carry CVE-2026-91187.

Container imageDigestPackageFixed in
library/zookeeper:3.9.57d0f24ebb67b
dash@0.5.11+git20210903+057cd650a4ed-3build1
no fix listed

Open the chart page →

8,574
komgahelmforgeVerified publisher1.4.151 of 1See more

komga helmforge 1.4.15

1 of the 1 container images this version deploys carry CVE-2026-91187.

Container imageDigestPackageFixed in
gotson/komga:1.26.36c2a967bbe9a
dash@0.5.12-12ubuntu3
no fix listed

Open the chart page →

37,971
minecrafthelmforgeVerified publisher1.5.41 of 1See more

minecraft helmforge 1.5.4

1 of the 1 container images this version deploys carry CVE-2026-91187.

Container imageDigestPackageFixed in
itzg/minecraft-server:2026.9.1e8640538dac5
dash@0.5.12-6ubuntu5
no fix listed

Open the chart page →

4,617
mongodbhelmforgeVerified publisher1.8.11 of 1See more

mongodb helmforge 1.8.1

1 of the 1 container images this version deploys carry CVE-2026-91187.

Container imageDigestPackageFixed in
library/mongo:8.3.981a1c8842a09
dash@0.5.12-6ubuntu5
no fix listed

Open the chart page →

1,043
netboxhelmforgeVerified publisher2.0.11 of 4See more

netbox helmforge 2.0.1

1 of the 4 container images this version deploys carry CVE-2026-91187.

Container imageDigestPackageFixed in
netboxcommunity/netbox:v4.6.10-5.0.291b823a05cb5
dash@0.5.12-12ubuntu3
no fix listed

Open the chart page →

4,822
pimcorehelmforgeVerified publisher2.0.11 of 6See more

pimcore helmforge 2.0.1

1 of the 6 container images this version deploys carry CVE-2026-91187.

Container imageDigestPackageFixed in
library/mariadb:12.3.3805c8e104bd5
dash@0.5.12-6ubuntu5
no fix listed

Open the chart page →

3,106
tomcathelmforgeVerified publisher1.0.61 of 2See more

tomcat helmforge 1.0.6

1 of the 2 container images this version deploys carry CVE-2026-91187.

Container imageDigestPackageFixed in
library/tomcat:11.0.25-jdk17-temurin-nobledbde329dcbfa
dash@0.5.12-6ubuntu5
no fix listed

Open the chart page →

1,069
zookeeperhelmforgeVerified publisher1.0.21 of 1See more

zookeeper helmforge 1.0.2

1 of the 1 container images this version deploys carry CVE-2026-91187.

Container imageDigestPackageFixed in
library/zookeeper:3.9.57d0f24ebb67b
dash@0.5.11+git20210903+057cd650a4ed-3build1
no fix listed

Open the chart page →

3,146
openaevhelm-openbasVerified publisher2.0.71 of 7See more

openaev helm-openbas 2.0.7

1 of the 7 container images this version deploys carry CVE-2026-91187.

Container imageDigestPackageFixed in
openaev/platform:3.260921.04d2cd9cce457
dash@0.5.12-6ubuntu5
no fix listed

Open the chart page →

7,651
openbashelm-openbasVerified publisher1.8.141 of 7See more

openbas helm-openbas 1.8.14

1 of the 7 container images this version deploys carry CVE-2026-91187.

Container imageDigestPackageFixed in
openbas/platform:2.0.5d986d80b0a75
dash@0.5.12-6ubuntu5
no fix listed

Open the chart page →

26,491
pageshelm-repo1.0.02 of 3See more

pages helm-repo 1.0.0

2 of the 3 container images this version deploys carry CVE-2026-91187.

Container imageDigestPackageFixed in
dellcloud/pages:monitor6ba7b22caacd
dash@0.5.10.2-6
no fix listed
flyway/flyway:6.4.422d97ceb0c47
dash@0.5.8-2.10
no fix listed

Open the chart page →

20,585
svacerhelm-svacer0.6.01 of 1See more

svacer helm-svacer 0.6.0

1 of the 1 container images this version deploys carry CVE-2026-91187.

Container imageDigestPackageFixed in
ispras/svacer:11-2-042aa9fa9f189
dash@0.5.11+git20210903+057cd650a4ed-3build1
no fix listed

Open the chart page →

6,477
nominatimheywood8-helm-chartsVerified publisher3.10.81 of 3See more

nominatim heywood8-helm-charts 3.10.8

1 of the 3 container images this version deploys carry CVE-2026-91187.

Container imageDigestPackageFixed in
mediagis/nominatim:4.2d0eae7b51374
dash@0.5.11+git20210903+057cd650a4ed-3build1
no fix listed

Open the chart page →

14,973
hivemq-edgehivemqOfficialVerified publisher0.1.361 of 1See more

hivemq-edge hivemq 0.1.36

1 of the 1 container images this version deploys carry CVE-2026-91187.

Container imageDigestPackageFixed in
hivemq/hivemq-edge:2026.14d8250a233cea
dash@0.5.12-6ubuntu5
no fix listed

Open the chart page →

1,382
printserverhmediadeVerified publisher1.0.22 of 4See more

printserver hmediade 1.0.2

2 of the 4 container images this version deploys carry CVE-2026-91187.

Container imageDigestPackageFixed in
hmediade/printserver:latest481a552c8e1c
dash@0.5.11+git20210903+057cd650a4ed-3build1
no fix listed
hmediade/printserver-init:latest7f005eb6c718
dash@0.5.11+git20210903+057cd650a4ed-3build1
no fix listed

Open the chart page →

11,360
cloudbeaverhomeenterpriseinc0.6.01 of 1See more

cloudbeaver homeenterpriseinc 0.6.0

1 of the 1 container images this version deploys carry CVE-2026-91187.

Container imageDigestPackageFixed in
dbeaver/cloudbeaver:21.3.00c0985098263
dash@0.5.10.2-6
no fix listed

Open the chart page →

9,250
homebridgehomeenterpriseinc0.5.01 of 1See more

homebridge homeenterpriseinc 0.5.0

1 of the 1 container images this version deploys carry CVE-2026-91187.

Container imageDigestPackageFixed in
oznu/homebridge:2021-12-19-ubuntu2e12d0e2dcce
dash@0.5.8-2.10
no fix listed

Open the chart page →

80,994
huginnhomeenterpriseinc0.2.01 of 1See more

huginn homeenterpriseinc 0.2.0

1 of the 1 container images this version deploys carry CVE-2026-91187.

Container imageDigestPackageFixed in
huginn/huginn:4df1217d3055db980a04f293e28016b77826e3caeab0db98264e
dash@0.5.8-2.10
no fix listed

Open the chart page →

77,220
jacketthomeenterpriseinc0.2.01 of 1See more

jackett homeenterpriseinc 0.2.0

1 of the 1 container images this version deploys carry CVE-2026-91187.

Container imageDigestPackageFixed in
linuxserver/jackett:0.20.39922b8bfdee1ae
dash@0.5.8-2.10
no fix listed

Open the chart page →

6,372
paperlesshpVerified publisher0.1.21 of 5See more

paperless hp 0.1.2

1 of the 5 container images this version deploys carry CVE-2026-91187.

Container imageDigestPackageFixed in
apache/tika:3.3.1.090b7fa1dc018
dash@0.5.12-12ubuntu3
no fix listed

Open the chart page →

28,862
httpbin2022httpbin2022Verified publisher0.1.11 of 1See more

httpbin2022 httpbin2022 0.1.1

1 of the 1 container images this version deploys carry CVE-2026-91187.

Container imageDigestPackageFixed in
mshanley80/httpbin2022:latest5b189a70c0fb
dash@0.5.10.2-6
no fix listed

Open the chart page →

76,616
eoloplanthttpd-eoloplant0.1.04 of 7See more

eoloplant httpd-eoloplant 0.1.0

4 of the 7 container images this version deploys carry CVE-2026-91187.

Container imageDigestPackageFixed in
codeurjc/planner:v1.0800cf520c245
dash@0.5.11+git20210903+057cd650a4ed-3build1
no fix listed
codeurjc/toposervice:v1.09fb4c11e6a49
dash@0.5.8-2.10
no fix listed
library/mongo:5.0.6-focal8e70544b6c76
dash@0.5.10.2-6
no fix listed
library/rabbitmq:3.9-management8a279e9396a8
dash@0.5.11+git20210903+057cd650a4ed-3build1
no fix listed

Open the chart page →

33,408
jenkinshuangchengwu-helm-chart0.1.01 of 2See more

jenkins huangchengwu-helm-chart 0.1.0

1 of the 2 container images this version deploys carry CVE-2026-91187.

Container imageDigestPackageFixed in
library/ubuntu:latestda6fc2be5478
dash@0.5.12-12ubuntu3
no fix listed

Open the chart page →

399
mariadbhuangchengwu-helm-chart0.1.01 of 1See more

mariadb huangchengwu-helm-chart 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-91187.

Container imageDigestPackageFixed in
library/mariadb:latestd4fdec0510ad
dash@0.5.12-12ubuntu3
no fix listed

Open the chart page →

1,501
prometheushuangchengwu-helm-chart0.1.02 of 3See more

prometheus huangchengwu-helm-chart 0.1.0

2 of the 3 container images this version deploys carry CVE-2026-91187.

Container imageDigestPackageFixed in
apache/skywalking-oap-server:9.2.0133d35d2c263
dash@0.5.11+git20210903+057cd650a4ed-3build1
no fix listed
apache/skywalking-ui:9.2.0295f1dc87d98
dash@0.5.11+git20210903+057cd650a4ed-3build1
no fix listed

Open the chart page →

16,967
skywalking-v1huangchengwu-helm-chart0.1.02 of 4See more

skywalking-v1 huangchengwu-helm-chart 0.1.0

2 of the 4 container images this version deploys carry CVE-2026-91187.

Container imageDigestPackageFixed in
apache/skywalking-oap-server:8.9.1b4ec8c18d079
dash@0.5.10.2-6
no fix listed
apache/skywalking-ui:8.9.180530f0308a5
dash@0.5.10.2-6
no fix listed

Open the chart page →

21,041
tdenginehuangchengwu-helm-chart3.0.21 of 1See more

tdengine huangchengwu-helm-chart 3.0.2

1 of the 1 container images this version deploys carry CVE-2026-91187.

Container imageDigestPackageFixed in
tdengine/tdengine:3.0.2.24140a4021ddb
dash@0.5.8-2.10
no fix listed

Open the chart page →

3,854
hyperglance-helmhyperglance-helmVerified publisher10.0.94 of 6See more

hyperglance-helm hyperglance-helm 10.0.9

4 of the 6 container images this version deploys carry CVE-2026-91187.

Container imageDigestPackageFixed in
hyperglance/init:wildfly467ad8491bc3
dash@0.5.11+git20210903+057cd650a4ed-3build1
no fix listed
hyperglance/init:postgres9fd5faf1fe80
dash@0.5.11+git20210903+057cd650a4ed-3build1
no fix listed
hyperglance/init:apacheb2f8c6d52623
dash@0.5.11+git20210903+057cd650a4ed-3build1
no fix listed
hyperglance/postgresql-v2:10.0.958d480293371
dash@0.5.11+git20210903+057cd650a4ed-3build1
no fix listed

Open the chart page →

11,998
mvfi4trustVerified publisher1.1.21 of 1See more

mvf i4trust 1.1.2

1 of the 1 container images this version deploys carry CVE-2026-91187.

Container imageDigestPackageFixed in
wistefan/mvf:lateste0887302b2d8
dash@0.5.11+git20210903+057cd650a4ed-3build1
no fix listed

Open the chart page →

7,479
vcwaltidi4trustVerified publisher0.0.191 of 1See more

vcwaltid i4trust 0.0.19

1 of the 1 container images this version deploys carry CVE-2026-91187.

Container imageDigestPackageFixed in
quay.io/fiware/waltid:1.14.1-SNAPSHOT93889c3d8a34
dash@0.5.11+git20210903+057cd650a4ed-3build1
no fix listed

Open the chart page →

8,246
ibm-microclimateibm-charts0.1.01 of 8See more

ibm-microclimate ibm-charts 0.1.0

1 of the 8 container images this version deploys carry CVE-2026-91187.

Container imageDigestPackageFixed in
ibmcom/microclimate-theia:lateste17bdccc5030
dash@0.5.8-2.1ubuntu2
no fix listed

Open the chart page →

117,350
ibm-skydive-devibm-charts1.1.21 of 1See more

ibm-skydive-dev ibm-charts 1.1.2

1 of the 1 container images this version deploys carry CVE-2026-91187.

Container imageDigestPackageFixed in
ibmcom/skydive:0.22.0395e60cc6e3d
dash@0.5.8-2.10
no fix listed

Open the chart page →

12,910
ibm-swift-sampleibm-charts1.1.21 of 1See more

ibm-swift-sample ibm-charts 1.1.2

1 of the 1 container images this version deploys carry CVE-2026-91187.

Container imageDigestPackageFixed in
ibmcom/icp-swift-sample:latestb5d8c6714dbc
dash@0.5.8-2.1ubuntu2
no fix listed

Open the chart page →

83,721
ibm-ws-dyn-agent-devibm-charts1.0.01 of 1See more

ibm-ws-dyn-agent-dev ibm-charts 1.0.0

1 of the 1 container images this version deploys carry CVE-2026-91187.

Container imageDigestPackageFixed in
ibmcom/ibm-workload-scheduler-agent-dynamic-dev:9.4.0.047e4dc1e27cdf
dash@0.5.8-2.1ubuntu2
no fix listed

Open the chart page →

19,509
browserlessicoretechVerified publisher0.16.61 of 1See more

browserless icoretech 0.16.6

1 of the 1 container images this version deploys carry CVE-2026-91187.

Container imageDigestPackageFixed in
ghcr.io/browserless/chromium:v2.56.7b1ba7b054af2
dash@0.5.12-6ubuntu5
no fix listed

Open the chart page →

2,207
eoloserverihuertas2021-vmartinp2021-helm0.1.03 of 7See more

eoloserver ihuertas2021-vmartinp2021-helm 0.1.0

3 of the 7 container images this version deploys carry CVE-2026-91187.

Container imageDigestPackageFixed in
codeurjc/toposervice:v1.09fb4c11e6a49
dash@0.5.8-2.10
no fix listed
library/mongo:5.0.6-focal8e70544b6c76
dash@0.5.10.2-6
no fix listed
library/rabbitmq:3.9-management8a279e9396a8
dash@0.5.11+git20210903+057cd650a4ed-3build1
no fix listed

Open the chart page →

28,648
bluesky-pdsijmacd1.0.01 of 2See more

bluesky-pds ijmacd 1.0.0

1 of the 2 container images this version deploys carry CVE-2026-91187.

Container imageDigestPackageFixed in
arunvelsriram/utils:latest655ad18fd8d6
dash@0.5.12-6ubuntu5
no fix listed

Open the chart page →

9,628
ikigaiikigai-chartVerified publisher0.0.94 of 58See more

ikigai ikigai-chart 0.0.9

4 of the 58 container images this version deploys carry CVE-2026-91187.

Container imageDigestPackageFixed in
dremio/dremio-oss:24.1.080ed2e3b7c43
dash@0.5.11+git20210903+057cd650a4ed-3build1
no fix listed
jupyterhub/k8s-hub:1.2.0e4770285aaf7
dash@0.5.10.2-6
no fix listed
library/zookeeper:3.8-temurin55d1e5b2e601
dash@0.5.11+git20210903+057cd650a4ed-3build1
no fix listed
mcr.microsoft.com/azure-application-gateway/kubernetes-ingress:1.6.0bccaa701e2df
dash@0.5.10.2-6
no fix listed

Open the chart page →

114,567
apexkube-agentimprowisedVerified publisher1.4.01 of 2See more

apexkube-agent improwised 1.4.0

1 of the 2 container images this version deploys carry CVE-2026-91187.

Container imageDigestPackageFixed in
envoyproxy/envoy:v1.31.02bf7f042e396
dash@0.5.11+git20210903+057cd650a4ed-3build1
no fix listed

Open the chart page →

3,483

Container images carrying it

1,058 by charts deploying them

A fixed version is listed for 0 of the 1 affected package.

Container imageDigestPackageFixed inUsed by
quay.io/isindir/sops-secrets-operator:0.21.27bba7083dfa0
dash@0.5.12-12ubuntu3
no fix listed
1
quay.io/mongodb/mongodb-enterprise-operator:1.8.2a1c3843b03bc
dash@0.5.8-2.1ubuntu2
no fix listed
1
quay.io/opsmxpublic/rabbitmq:4.2-management3408107e5cc4
dash@0.5.12-6ubuntu5
no fix listed
1
quay.io/opsmxpublic/spin-sample-pipeline:v1.0.1c6a934439421
dash@0.5.8-2.1ubuntu2
no fix listed
1
quay.io/poundex/tekton-stash-and-cache:0.2.2e854423caa09
dash@0.5.12-12ubuntu3
no fix listed
1
registry.gitlab.com/crafty-controller/crafty-4:latest7b6e87514259
dash@0.5.12-6ubuntu5
no fix listed
1
registry.gitlab.com/dyff/workflows-aggregator:0.16.9b7984253b128
dash@0.5.12-12ubuntu3
no fix listed
1
registry.gitlab.com/infinitydon/registry/open5gs-aio:v2.2.2f6385712935f
dash@0.5.10.2-6
no fix listed
1

syft 1.42.1 · advisories as of 25 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.