StackRadar

CVE-2026-91187

Medium

Advisory

Published 24 Sept 2026In the index since 25 Sept 2026
Severity
Medium
worst across findings
CVSS
5.5
base score, highest
EPSS
—
probability of exploitation
CISA KEV
Not listed
no confirmed exploitation
Charts affected
1,152
of 17,879 indexed, latest versions
Container images
1,058
deployed by those charts
Fix available
None
affected package

The matching OSV records carry no description.

Carried by container images the latest versions of 1,152 of 17,879 indexed charts deploy, on 1,058 images.

Affected packageAffected versionsFixed inImages
dashdeb0.5.7-4ubuntu1, 0.5.8-2.1ubuntu2, 0.5.8-2.10, 0.5.10.2-6+3 moreno fix listed1,058
OSV records
UBUNTU-CVE-2026-91187
Trending
Rank 11 in indexed charts, since 25 Sept 2026. See the ranking →

Charts affected

1,152 by stars
ChartLatestAffected imagesRadar Score
kore-boardimprowisedVerified publisher0.5.81 of 4See more

kore-board improwised 0.5.8

1 of the 4 container images this version deploys carry CVE-2026-91187.

Container imageDigestPackageFixed in
ghcr.io/kore3lab/kore-board.terminal:v0.5.5f52e66eff50b
dash@0.5.8-2.10
no fix listed

Open the chart page →

16,682
nifi-registryimprowisedVerified publisher1.0.01 of 2See more

nifi-registry improwised 1.0.0

1 of the 2 container images this version deploys carry CVE-2026-91187.

Container imageDigestPackageFixed in
apache/nifi-registry:1.27.063b8e3e40742
dash@0.5.11+git20210903+057cd650a4ed-3build1
no fix listed

Open the chart page →

5,685
influxdb3-coreinfluxdata0.1.11 of 1See more

influxdb3-core influxdata 0.1.1

1 of the 1 container images this version deploys carry CVE-2026-91187.

Container imageDigestPackageFixed in
library/influxdb:3.10.5-core695a8063ff10
dash@0.5.12-6ubuntu5
no fix listed

Open the chart page →

947
influxdb3-enterpriseinfluxdata0.14.01 of 1See more

influxdb3-enterprise influxdata 0.14.0

1 of the 1 container images this version deploys carry CVE-2026-91187.

Container imageDigestPackageFixed in
library/influxdb:3.11.2-enterprise6ce2bf22499b
dash@0.5.12-6ubuntu5
no fix listed

Open the chart page →

929
cloudshellinseefrlab4.3.01 of 2See more

cloudshell inseefrlab 4.3.0

1 of the 2 container images this version deploys carry CVE-2026-91187.

Container imageDigestPackageFixed in
inseefrlab/shelly:cloudshell31f04ca7436b
dash@0.5.11+git20210903+057cd650a4ed-3build1
no fix listed

Open the chart page →

10,883
gmaintelVerified publisher0.1.01 of 1See more

gma intel 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-91187.

Container imageDigestPackageFixed in
smartedge/generic-multi-access-network-virtualization:1.04cd63c22ce36
dash@0.5.10.2-6
no fix listed

Open the chart page →

76,658
itm-servicesintelVerified publisher2.0.01 of 8See more

itm-services intel 2.0.0

1 of the 8 container images this version deploys carry CVE-2026-91187.

Container imageDigestPackageFixed in
intel/dlstreamer-pipeline-server:2022.1.1-ubuntu20aa8f5483a2ef
dash@0.5.10.2-6
no fix listed

Open the chart page →

89,928
map5gintelVerified publisher1.0.01 of 1See more

map5g intel 1.0.0

1 of the 1 container images this version deploys carry CVE-2026-91187.

Container imageDigestPackageFixed in
smartedge/generic-multi-access-network-virtualization:1.04cd63c22ce36
dash@0.5.10.2-6
no fix listed

Open the chart page →

76,658
multimodal-data-visualizationintelVerified publisher3.0.01 of 2See more

multimodal-data-visualization intel 3.0.0

1 of the 2 container images this version deploys carry CVE-2026-91187.

Container imageDigestPackageFixed in
intel/multimodal-data-visualization-streaming:3.01a89327e499b
dash@0.5.10.2-6
no fix listed

Open the chart page →

82,237
tcs-issuerintelVerified publisher0.5.01 of 2See more

tcs-issuer intel 0.5.0

1 of the 2 container images this version deploys carry CVE-2026-91187.

Container imageDigestPackageFixed in
intel/trusted-certificate-issuer:0.5.0591a9db4a427
dash@0.5.10.2-6
no fix listed

Open the chart page →

6,179
interbtc-parachaininterlay0.4.131 of 1See more

interbtc-parachain interlay 0.4.13

1 of the 1 container images this version deploys carry CVE-2026-91187.

Container imageDigestPackageFixed in
interlayhq/interbtc:latesta66d0e35e70f
dash@0.5.10.2-6
no fix listed

Open the chart page →

3,353
interbtc-vaultinterlay0.1.131 of 1See more

interbtc-vault interlay 0.1.13

1 of the 1 container images this version deploys carry CVE-2026-91187.

Container imageDigestPackageFixed in
interlayhq/interbtc-clients:vault-masterc3e311de67da
dash@0.5.10.2-6
no fix listed

Open the chart page →

4,015
polkabtc-parachaininterlay0.2.411 of 4See more

polkabtc-parachain interlay 0.2.41

1 of the 4 container images this version deploys carry CVE-2026-91187.

Container imageDigestPackageFixed in
interlayhq/interbtc:latesta66d0e35e70f
dash@0.5.10.2-6
no fix listed

Open the chart page →

4,118
polkabtc-vaultinterlay0.1.111 of 1See more

polkabtc-vault interlay 0.1.11

1 of the 1 container images this version deploys carry CVE-2026-91187.

Container imageDigestPackageFixed in
interlayhq/interbtc-clients:vault-masterc3e311de67da
dash@0.5.10.2-6
no fix listed

Open the chart page →

4,015
istio-aws-private-ingress-customizedistio-aws-private-ingress-customized1.0.01 of 1See more

istio-aws-private-ingress-customized istio-aws-private-ingress-customized 1.0.0

1 of the 1 container images this version deploys carry CVE-2026-91187.

Container imageDigestPackageFixed in
istio/proxyv2:1.18.0757d28c24100
dash@0.5.11+git20210903+057cd650a4ed-3build1
no fix listed

Open the chart page →

5,724
istio-azure-private-ingress-customizedistio-azure-private-ingress-customized1.0.01 of 1See more

istio-azure-private-ingress-customized istio-azure-private-ingress-customized 1.0.0

1 of the 1 container images this version deploys carry CVE-2026-91187.

Container imageDigestPackageFixed in
istio/proxyv2:1.18.0757d28c24100
dash@0.5.11+git20210903+057cd650a4ed-3build1
no fix listed

Open the chart page →

5,724
istio-bookinfoistio-bookinfo1.2.23 of 6See more

istio-bookinfo istio-bookinfo 1.2.2

3 of the 6 container images this version deploys carry CVE-2026-91187.

Container imageDigestPackageFixed in
istio/examples-bookinfo-reviews-v1:1.15.040e8aba77c1b
dash@0.5.8-2.1ubuntu2
no fix listed
istio/examples-bookinfo-reviews-v2:1.15.0e86d247b7ac2
dash@0.5.8-2.1ubuntu2
no fix listed
istio/examples-bookinfo-reviews-v3:1.15.0e454cab754cf
dash@0.5.8-2.1ubuntu2
no fix listed

Open the chart page →

19,753
ztunnelistio-ztunnelVerified publisher1.25.01 of 1See more

ztunnel istio-ztunnel 1.25.0

1 of the 1 container images this version deploys carry CVE-2026-91187.

Container imageDigestPackageFixed in
istio/ztunnel:1.25.005f3972d80a9
dash@0.5.12-6ubuntu5
no fix listed

Open the chart page →

2,654
appswitcher-serverit-at-mOfficialVerified publisher2.0.21 of 1See more

appswitcher-server it-at-m 2.0.2

1 of the 1 container images this version deploys carry CVE-2026-91187.

Container imageDigestPackageFixed in
ghcr.io/it-at-m/appswitcher-server:1.3.010006bc0f309
dash@0.5.11+git20210903+057cd650a4ed-3build1
no fix listed

Open the chart page →

3,970
opencloudjacobcolvinVerified publisher0.2.31 of 13See more

opencloud jacobcolvin 0.2.3

1 of the 13 container images this version deploys carry CVE-2026-91187.

Container imageDigestPackageFixed in
apache/tika:2.9.2.1-fullae0b86d3c4d0
dash@0.5.12-6ubuntu5
no fix listed

Open the chart page →

46,049
unifi-network-applicationjanip81-helm-chartsVerified publisher0.2.91 of 3See more

unifi-network-application janip81-helm-charts 0.2.9

1 of the 3 container images this version deploys carry CVE-2026-91187.

Container imageDigestPackageFixed in
library/mongo:7.09854f7139445
dash@0.5.11+git20210903+057cd650a4ed-3build1
no fix listed

Open the chart page →

2,103
jx-app-datadogjenkins-x0.0.101 of 2See more

jx-app-datadog jenkins-x 0.0.10

1 of the 2 container images this version deploys carry CVE-2026-91187.

Container imageDigestPackageFixed in
datadog/agent:6aad9994de6a7
dash@0.5.12-6ubuntu5
no fix listed

Open the chart page →

4,225
dayz-dedicated-server-razorbladex401jespernohrVerified publisher1.0.31 of 1See more

dayz-dedicated-server-razorbladex401 jespernohr 1.0.3

1 of the 1 container images this version deploys carry CVE-2026-91187.

Container imageDigestPackageFixed in
razorbladex401/dayz:latest6a4d79248e7d
dash@0.5.11+git20210903+057cd650a4ed-3build1
no fix listed

Open the chart page →

5,699
homebridgejespernohrVerified publisher0.2.01 of 1See more

homebridge jespernohr 0.2.0

1 of the 1 container images this version deploys carry CVE-2026-91187.

Container imageDigestPackageFixed in
homebridge/homebridge:latest77c685a40911
dash@0.5.12-6ubuntu5
no fix listed

Open the chart page →

36,733
discord-experiencebotjfwenischVerified publisher0.7.41 of 1See more

discord-experiencebot jfwenisch 0.7.4

1 of the 1 container images this version deploys carry CVE-2026-91187.

Container imageDigestPackageFixed in
ghcr.io/jfwenisch/discord-experiencebot:latestb52ff07f9f0c
dash@0.5.8-2.10
no fix listed

Open the chart page →

8,202
steamcmdjfwenischVerified publisher0.0.51 of 1See more

steamcmd jfwenisch 0.0.5

1 of the 1 container images this version deploys carry CVE-2026-91187.

Container imageDigestPackageFixed in
steamcmd/steamcmd:latest79cd766328de
dash@0.5.12-12ubuntu3
no fix listed

Open the chart page →

399
steamcmd-managerjfwenischVerified publisher0.4.51 of 1See more

steamcmd-manager jfwenisch 0.4.5

1 of the 1 container images this version deploys carry CVE-2026-91187.

Container imageDigestPackageFixed in
ghcr.io/jfwenisch/steamcmd-manager:v0.4.5dab685e668d9
dash@0.5.12-6ubuntu5
no fix listed

Open the chart page →

6,999
webtoolsjfwenischVerified publisher0.1.41 of 1See more

webtools jfwenisch 0.1.4

1 of the 1 container images this version deploys carry CVE-2026-91187.

Container imageDigestPackageFixed in
ghcr.io/jfwenisch/webtools:v0.1.44569cae83c70
dash@0.5.12-6ubuntu5
no fix listed

Open the chart page →

6,980
james-mailserverjondos2.1.21 of 1See more

james-mailserver jondos 2.1.2

1 of the 1 container images this version deploys carry CVE-2026-91187.

Container imageDigestPackageFixed in
apache/james:distributed-3.7.2660c0fa12ec2
dash@0.5.10.2-6
no fix listed

Open the chart page →

8,188
image-storage-servicejtektVerified publisher0.5.11 of 4See more

image-storage-service jtekt 0.5.1

1 of the 4 container images this version deploys carry CVE-2026-91187.

Container imageDigestPackageFixed in
library/kong:3.6a42d2b4503e7
dash@0.5.11+git20210903+057cd650a4ed-3build1
no fix listed

Open the chart page →

23,752
archisteamfarmjuniorjpdj0.1.1341 of 1See more

archisteamfarm juniorjpdj 0.1.134

1 of the 1 container images this version deploys carry CVE-2026-91187.

Container imageDigestPackageFixed in
ghcr.io/justarchinet/archisteamfarm:6.3.10.107286b8b41a1
dash@0.5.12-6ubuntu5
no fix listed

Open the chart page →

452
copy-fail-patchjupyter-jscVerified publisher0.2.01 of 1See more

copy-fail-patch jupyter-jsc 0.2.0

1 of the 1 container images this version deploys carry CVE-2026-91187.

Container imageDigestPackageFixed in
library/ubuntu:24.04008173c23f95
dash@0.5.12-6ubuntu5
no fix listed

Open the chart page →

441
dirty-frag-patchjupyter-jscVerified publisher0.2.01 of 1See more

dirty-frag-patch jupyter-jsc 0.2.0

1 of the 1 container images this version deploys carry CVE-2026-91187.

Container imageDigestPackageFixed in
library/ubuntu:24.04008173c23f95
dash@0.5.12-6ubuntu5
no fix listed

Open the chart page →

441
valheim-serverk8s-chartsVerified publisher1.3.01 of 1See more

valheim-server k8s-charts 1.3.0

1 of the 1 container images this version deploys carry CVE-2026-91187.

Container imageDigestPackageFixed in
mbround18/valheim:3.1.070bd4da591cd
dash@0.5.11+git20210903+057cd650a4ed-3build1
no fix listed

Open the chart page →

63,771
k8s-dev-podk8s-dev-pod0.3.11 of 1See more

k8s-dev-pod k8s-dev-pod 0.3.1

1 of the 1 container images this version deploys carry CVE-2026-91187.

Container imageDigestPackageFixed in
ghcr.io/bryopsida/k8s-dev-pod:main82d0b161161d
dash@0.5.12-6ubuntu5
no fix listed

Open the chart page →

70,952
youtubedl-materialk8s-home-lab-repo5.1.11 of 1See more

youtubedl-material k8s-home-lab-repo 5.1.1

1 of the 1 container images this version deploys carry CVE-2026-91187.

Container imageDigestPackageFixed in
tzahi12345/youtubedl-material:4.3.22f943d584711
dash@0.5.11+git20210903+057cd650a4ed-3build1
no fix listed

Open the chart page →

10,167
unifik8sonlabVerified publisher0.3.71 of 1See more

unifi k8sonlab 0.3.7

1 of the 1 container images this version deploys carry CVE-2026-91187.

Container imageDigestPackageFixed in
jacobalberty/unifi:v10.0.162896c0ab82d33
dash@0.5.10.2-6
no fix listed

Open the chart page →

7,817
k8s-ssh-bastionk8s-ssh-bastion0.5.41 of 1See more

k8s-ssh-bastion k8s-ssh-bastion 0.5.4

1 of the 1 container images this version deploys carry CVE-2026-91187.

Container imageDigestPackageFixed in
ghcr.io/nefelim4ag/k8s-ssh-bastion:0.5.04d337e14c80b
dash@0.5.12-6ubuntu5
no fix listed

Open the chart page →

3,470
kadeck-teamskadeck1.1.211 of 1See more

kadeck-teams kadeck 1.1.21

1 of the 1 container images this version deploys carry CVE-2026-91187.

Container imageDigestPackageFixed in
xeotek/kadeck:6.3.439a3b37a17c5
dash@0.5.11+git20210903+057cd650a4ed-3build1
no fix listed

Open the chart page →

3,833
kadeck-webkadeck0.6.01 of 1See more

kadeck-web kadeck 0.6.0

1 of the 1 container images this version deploys carry CVE-2026-91187.

Container imageDigestPackageFixed in
xeotek/kadeck:4.2.94c6b04d9ce55
dash@0.5.10.2-6
no fix listed

Open the chart page →

7,588
huekatool1.0.81 of 1See more

hue katool 1.0.8

1 of the 1 container images this version deploys carry CVE-2026-91187.

Container imageDigestPackageFixed in
gethue/hue:4.11.011b649636e68
dash@0.5.10.2-6
no fix listed

Open the chart page →

84,248
helm-mongodb-operatorkeyporttech0.1.01 of 1See more

helm-mongodb-operator keyporttech 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-91187.

Container imageDigestPackageFixed in
quay.io/mongodb/mongodb-enterprise-operator:1.8.2a1c3843b03bc
dash@0.5.8-2.1ubuntu2
no fix listed

Open the chart page →

8,957
xwikikeyporttech0.2.01 of 2See more

xwiki keyporttech 0.2.0

1 of the 2 container images this version deploys carry CVE-2026-91187.

Container imageDigestPackageFixed in
library/xwiki:lts-postgres-tomcat9b8142bce157
dash@0.5.12-6ubuntu5
no fix listed

Open the chart page →

1,421
allurekfirfer0.1.81 of 2See more

allure kfirfer 0.1.8

1 of the 2 container images this version deploys carry CVE-2026-91187.

Container imageDigestPackageFixed in
frankescobar/allure-docker-service:2.21.08a4d7e9308de
dash@0.5.8-2.10
no fix listed

Open the chart page →

68,716
phppgadminkfirfer0.1.121 of 1See more

phppgadmin kfirfer 0.1.12

1 of the 1 container images this version deploys carry CVE-2026-91187.

Container imageDigestPackageFixed in
kfirfer/phppgadmin:7.13.0-22efb4a5d74a3
dash@0.5.10.2-6
no fix listed

Open the chart page →

10,694
rabbitmqkfirfer0.7.211 of 2See more

rabbitmq kfirfer 0.7.21

1 of the 2 container images this version deploys carry CVE-2026-91187.

Container imageDigestPackageFixed in
library/rabbitmq:3.12.100742852455ad
dash@0.5.11+git20210903+057cd650a4ed-3build1
no fix listed

Open the chart page →

2,620
kiaekiae0.1.61 of 9See more

kiae kiae 0.1.6

1 of the 9 container images this version deploys carry CVE-2026-91187.

Container imageDigestPackageFixed in
istio/pilot:1.15.2db08d6963975
dash@0.5.11+git20210903+057cd650a4ed-3build1
no fix listed

Open the chart page →

19,426
kong-ai-gatewaykongVerified publisher0.2.11 of 1See more

kong-ai-gateway kong 0.2.1

1 of the 1 container images this version deploys carry CVE-2026-91187.

Container imageDigestPackageFixed in
kong/kong-ai-gateway:2.0.3367ed5985b76
dash@0.5.12-6ubuntu5
no fix listed

Open the chart page →

842
kovi-appkovi-charts0.8.11 of 1See more

kovi-app kovi-charts 0.8.1

1 of the 1 container images this version deploys carry CVE-2026-91187.

Container imageDigestPackageFixed in
kennethreitz/httpbin:latest599fe5e50731
dash@0.5.8-2.10
no fix listed

Open the chart page →

85,877
kpingkpingOfficialVerified publisher0.3.51 of 1See more

kping kping 0.3.5

1 of the 1 container images this version deploys carry CVE-2026-91187.

Container imageDigestPackageFixed in
kayrosuno/kping:latestf3bd44b29b0d
dash@0.5.12-6ubuntu5
no fix listed

Open the chart page →

2,372

Container images carrying it

1,058 by charts deploying them

A fixed version is listed for 0 of the 1 affected package.

Container imageDigestPackageFixed inUsed by
quay.io/isindir/sops-secrets-operator:0.21.27bba7083dfa0
dash@0.5.12-12ubuntu3
no fix listed
1
quay.io/mongodb/mongodb-enterprise-operator:1.8.2a1c3843b03bc
dash@0.5.8-2.1ubuntu2
no fix listed
1
quay.io/opsmxpublic/rabbitmq:4.2-management3408107e5cc4
dash@0.5.12-6ubuntu5
no fix listed
1
quay.io/opsmxpublic/spin-sample-pipeline:v1.0.1c6a934439421
dash@0.5.8-2.1ubuntu2
no fix listed
1
quay.io/poundex/tekton-stash-and-cache:0.2.2e854423caa09
dash@0.5.12-12ubuntu3
no fix listed
1
registry.gitlab.com/crafty-controller/crafty-4:latest7b6e87514259
dash@0.5.12-6ubuntu5
no fix listed
1
registry.gitlab.com/dyff/workflows-aggregator:0.16.9b7984253b128
dash@0.5.12-12ubuntu3
no fix listed
1
registry.gitlab.com/infinitydon/registry/open5gs-aio:v2.2.2f6385712935f
dash@0.5.10.2-6
no fix listed
1

syft 1.42.1 · advisories as of 25 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.