StackRadar

CVE-2026-91187

Critical

Advisory

Published 24 Sept 2026In the index since 25 Sept 2026
Severity
Critical
worst across findings
CVSS
9.3
base score, highest
EPSS
0.003
21st percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
1,255
of 17,879 indexed, latest versions
Container images
1,187
deployed by those charts
Fix available
None
affected package

The matching OSV records carry no description.

Carried by container images the latest versions of 1,255 of 17,879 indexed charts deploy, on 1,187 images.

Affected packageAffected versionsFixed inImages
dashdeb0.5.7-4ubuntu1, 0.5.8-2.1ubuntu2, 0.5.8-2.10, 0.5.10.2-6+3 moreno fix listed1,187
OSV records
UBUNTU-CVE-2026-91187
Trending
Rank 1 in indexed charts, since 25 Sept 2026. See the ranking →

Charts affected

1,255 by stars
ChartLatestAffected imagesRadar Score
xkopsxkops0.1.01 of 5See more

xkops xkops 0.1.0

1 of the 5 container images this version deploys carry CVE-2026-91187.

Container imageDigestPackageFixed in
library/mongo:latest5d7043a4ffe0
dash@0.5.12-6ubuntu5
no fix listed

Open the chart page →

13,942
xlinexline0.0.11 of 1See more

xline xline 0.0.1

1 of the 1 container images this version deploys carry CVE-2026-91187.

Container imageDigestPackageFixed in
ghcr.io/liangyuanpeng/xline:latest3d2eceb44a3b
dash@0.5.12-6ubuntu5
no fix listed

Open the chart page →

2,284
nightingalexxl-job-adminVerified publisher0.2.111 of 6See more

nightingale xxl-job-admin 0.2.11

1 of the 6 container images this version deploys carry CVE-2026-91187.

Container imageDigestPackageFixed in
flashcatcloud/categraf:latest42e6ab16472e
dash@0.5.12-6ubuntu5
no fix listed

Open the chart page →

10,111
clickhousezloi-space1.2.02 of 3See more

clickhouse zloi-space 1.2.0

2 of the 3 container images this version deploys carry CVE-2026-91187.

Container imageDigestPackageFixed in
yandex/clickhouse-client:21.3863f94a0f607
dash@0.5.8-2.10
no fix listed
yandex/clickhouse-server:21.3.204eccfffb01d7
dash@0.5.10.2-6
no fix listed

Open the chart page →

9,550
zoo-project-druzoo-projectOfficialVerified publisher0.10.41 of 6See more

zoo-project-dru zoo-project 0.10.4

1 of the 6 container images this version deploys carry CVE-2026-91187.

Container imageDigestPackageFixed in
zooproject/zoo-project:dru-19f3c4eed7c9ec9d1f0375bbe59f9d204a42bd3a9a507cb7e2dd
dash@0.5.11+git20210903+057cd650a4ed-3build1
no fix listed

Open the chart page →

8,389

Container images carrying it

1,187 by charts deploying them

A fixed version is listed for 0 of the 1 affected package.

Container imageDigestPackageFixed inUsed by
sigp/lighthouse:v8.1.344aa773dcf27
dash@0.5.11+git20210903+057cd650a4ed-3build1
no fix listed
2
sigp/lighthouse:latest9a62bb870545
dash@0.5.11+git20210903+057cd650a4ed-3build1
no fix listed
2
smartedge/generic-multi-access-network-virtualization:1.04cd63c22ce36
dash@0.5.10.2-6
no fix listed
2
streamnative/apache-pulsar-grafana-dashboard-k8s:0.1.20e6d7aa3ef32
dash@0.5.10.2-6
no fix listed
2
svtechnmaa/svtech_debuger:v1.0.0b2987abe57d3
dash@0.5.11+git20210903+057cd650a4ed-3build1
no fix listed
2
tzahi12345/youtubedl-material:4.3.2:latest2f943d584711
dash@0.5.11+git20210903+057cd650a4ed-3build1
no fix listed
2
wolveix/satisfactory-server:latest:v1.9.10e103700ae6ae
dash@0.5.11+git20210903+057cd650a4ed-3build1
no fix listed
2
wurstmeister/zookeeper:latest7a7fd44a7210
dash@0.5.7-4ubuntu1
no fix listed
2
zabbix/zabbix-agent:ubuntu-6.4-latest349b924472a7
dash@0.5.12-6ubuntu5
no fix listed
2
gcr.io/google_containers/kubernetes-dashboard-init-amd64:v1.0.0fbe12aa24de6
dash@0.5.8-2.1ubuntu2
no fix listed
2
ghcr.io/appscode/inbox-server:latest:postgres-latest536358d7b17e
dash@0.5.11+git20210903+057cd650a4ed-3build1
no fix listed
2
ghcr.io/browserless/chromium:v2.56.7b1ba7b054af2
dash@0.5.12-6ubuntu5
no fix listed
2
ghcr.io/bryopsida/k8s-dev-pod:main82d0b161161d
dash@0.5.12-6ubuntu5
no fix listed
2
ghcr.io/codingducksrl/laravel:8.15be52524664c
dash@0.5.11+git20210903+057cd650a4ed-3build1
no fix listed
2
ghcr.io/danbooru/danbooru:9cab67c0ac72a8c52289302c519715ceec2372d95f545698e907
dash@0.5.11+git20210903+057cd650a4ed-3build1
no fix listed
2
ghcr.io/games-on-whales/pulseaudio:1.0.0f34f98405c10
dash@0.5.10.2-6
no fix listed
2
ghcr.io/games-on-whales/retroarch:1.0.0103fbcec2314
dash@0.5.10.2-6
no fix listed
2
ghcr.io/games-on-whales/steam:1.0.09b6105be7ad0
dash@0.5.10.2-6
no fix listed
2
ghcr.io/linuxserver/openvpn-as:version-2.8.6-916f8e7d-ubuntu184ee0764310e7
dash@0.5.8-2.10
no fix listed
2
ghcr.io/openunison/openunison-kubernetes-operator:1.0.1392bd6c526c50
dash@0.5.12-6ubuntu5
no fix listed
2
ghcr.io/salaboy/fmtok8s-frontend:v0.1.103fd01b4f56e
dash@0.5.11+git20210903+057cd650a4ed-3build1
no fix listed
2
mcr.microsoft.com/azure-sql-edge:latest902628a8be89
dash@0.5.10.2-6
no fix listed
2
mcr.microsoft.com/mssql/server:2017-latestfbf79e0fea59
dash@0.5.8-2.10
no fix listed
2
public.ecr.aws/aktosecurity/akto-api-security-database-abstractor:1.70.0:latestac89679314c1
dash@0.5.12-6ubuntu5
no fix listed
2
quay.io/argoproj/argocd:v2.14.115fc69e31c755
dash@0.5.12-6ubuntu5
no fix listed
2
quay.io/cilium/cilium-envoy:v1.37.6-1789133542-cbec91f666af0bf742da986d43832932dbb26b82af7382699576
dash@0.5.12-6ubuntu5
no fix listed
2
1dev/server:11.9.0cd5b12fe5471
dash@0.5.12-6ubuntu5
no fix listed
1
5200710/hadoop:3.2.3-java8092d3088a5fb
dash@0.5.10.2-6
no fix listed
1
a10networks/acos-prometheus-exporter:latest8dc58d434d71
dash@0.5.8-2.10
no fix listed
1
adorsys/keycloak-config-cli:6.3.0-26.1.085be7a45a94c
dash@0.5.12-6ubuntu5
no fix listed
1
adorsys/keycloak-config-cli:6.1.6-25.0.1eb49a2dcbbb8
dash@0.5.12-6ubuntu5
no fix listed
1
adwerx/github-actions-runner:2.276.1-20.04-1840d2b078682
dash@0.5.10.2-6
no fix listed
1
ahmetfurkandemir/iceberg-rest-fixture-postgresql:1.10.0142231a0b8b7
dash@0.5.11+git20210903+057cd650a4ed-3build1
no fix listed
1
airsonicadvanced/airsonic-advanced:latestf7cbafac2806
dash@0.5.10.2-6
no fix listed
1
akeyless/base:latest759e4289fae8
dash@0.5.12-6ubuntu5
no fix listed
1
akeyless/gateway:5.4.0d4768a9b089c
dash@0.5.12-6ubuntu5
no fix listed
1
aktosecurity/akto-api-security-dashboard:latest3ecdd301cdbd
dash@0.5.12-6ubuntu5
no fix listed
1
aktosecurity/akto-threat-detection-backend:1.18.00d407ce850a3
dash@0.5.12-12ubuntu3
no fix listed
1
aktosecurity/akto-threat-detection-backend:latestdffb8c3676ef
dash@0.5.12-12ubuntu3
no fix listed
1
aktosecurity/data-ingestion-service213aded7adc5
dash@0.5.12-6ubuntu5
no fix listed
1
aktosecurity/data-ingestion-service:1.4.946ed5bcb04b2
dash@0.5.12-12ubuntu3
no fix listed
1
aktosecurity/data-ingestion-service:1.5.35d4eab1c36b9
dash@0.5.12-12ubuntu3
no fix listed
1
aktosecurity/mini-runtime:1.72.15498e3e35ecc2
dash@0.5.12-12ubuntu3
no fix listed
1
allegroai/clearml-agent-k8s-base:1.24-21772827a01bb5
dash@0.5.8-2.10
no fix listed
1
altinity/clickhouse-server:25.3.6.10034.altinitystable3396b15c51a2
dash@0.5.11+git20210903+057cd650a4ed-3build1
no fix listed
1
andrcuns/dependabot-gitlab:7.7.0-alpha.143060f159f4c
dash@0.5.12-6ubuntu5
no fix listed
1
andrewgaul/s3proxy:sha-85b0f987dc1d34174a5
dash@0.5.12-6ubuntu5
no fix listed
1
andrewgolikov55/intel-gpu-exporter:latestfcc001b61c0e
dash@0.5.11+git20210903+057cd650a4ed-3build1
no fix listed
1
andrewmackrodt/firefox-x11:142.0.1-r133f9080470c9
dash@0.5.11+git20210903+057cd650a4ed-3build1
no fix listed
1
anguda/ant-media:2.5c435285fc241
dash@0.5.10.2-6
no fix listed
1

syft 1.42.1 · advisories as of 26 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.