StackRadar

CVE-2026-91779

Medium

Advisory

Published 15 Sept 2026In the index since 16 Sept 2026
Severity
Medium
worst across findings
CVSS
4.8
base score, highest
EPSS
—
probability of exploitation
CISA KEV
Not listed
no confirmed exploitation
Charts affected
56
of 17,790 indexed, latest versions
Container images
66
deployed by those charts
Fix available
None
affected package

The matching OSV records carry no description.

Carried by container images the latest versions of 56 of 17,790 indexed charts deploy, on 66 images.

Affected packageAffected versionsFixed inImages
binutilsdeb2.40-2, 2.44-3no fix listed66
OSV records
DEBIAN-CVE-2026-91779

Charts affected

56 by stars
ChartLatestAffected imagesRadar Score
oneuptimeoneuptimeOfficialVerified publisher13.0.52 of 7See more

oneuptime oneuptime 13.0.5

2 of the 7 container images this version deploys carry CVE-2026-91779.

Container imageDigestPackageFixed in
oneuptime/probe:release1069c9458fe7
binutils@2.40-2
no fix listed
oneuptime/runner:releasef6f2c1c536bc
binutils@2.44-3
no fix listed

Open the chart page →

11,432
prefect-serverprefectVerified publisher2026.9.141419101 of 2See more

prefect-server prefect 2026.9.14141910

1 of the 2 container images this version deploys carry CVE-2026-91779.

Container imageDigestPackageFixed in
prefecthq/prefect:3.8.6-python3.11f518ebb9c353
binutils@2.44-3
no fix listed

Open the chart page →

5,556
nextcloudgroundhog2k0.22.61 of 3See more

nextcloud groundhog2k 0.22.6

1 of the 3 container images this version deploys carry CVE-2026-91779.

Container imageDigestPackageFixed in
library/nextcloud:34.0.4:34.0.4-apache8418c398d767
binutils@2.44-3
no fix listed

Open the chart page →

3,837
gitops-promotergitops-promoterOfficialVerified publisher0.17.01 of 2See more

gitops-promoter gitops-promoter 0.17.0

1 of the 2 container images this version deploys carry CVE-2026-91779.

Container imageDigestPackageFixed in
quay.io/argoprojlabs/gitops-promoter:v0.38.19c8a510dc25e
binutils@2.44-3
no fix listed

Open the chart page →

2,917
limesurveyarea-42Verified publisher0.3.951 of 2See more

limesurvey area-42 0.3.95

1 of the 2 container images this version deploys carry CVE-2026-91779.

Container imageDigestPackageFixed in
adamzammit/limesurvey:7.1.1fdb06d62c22e
binutils@2.44-3
no fix listed

Open the chart page →

4,775
cosmocosmo-platformOfficialVerified publisher0.20.01 of 10See more

cosmo cosmo-platform 0.20.0

1 of the 10 container images this version deploys carry CVE-2026-91779.

Container imageDigestPackageFixed in
ghcr.io/wundergraph/cosmo/otelcollector:0.18.15a6fe78d4d15
binutils@2.40-2
no fix listed

Open the chart page →

29,070
flyte-binaryflyte2.0.481 of 4See more

flyte-binary flyte 2.0.48

1 of the 4 container images this version deploys carry CVE-2026-91779.

Container imageDigestPackageFixed in
ghcr.io/flyteorg/flyte-connectors:py3.12-v2.3.6896fc7b18b1b
binutils@2.40-2
no fix listed

Open the chart page →

4,723
dawarichcogitriVerified publisher2.8.41 of 3See more

dawarich cogitri 2.8.4

1 of the 3 container images this version deploys carry CVE-2026-91779.

Container imageDigestPackageFixed in
freikin/dawarich:1.14.511826c67e4b1
binutils@2.44-3
no fix listed

Open the chart page →

5,823
eoapieoapiOfficialVerified publisher0.16.21 of 7See more

eoapi eoapi 0.16.2

1 of the 7 container images this version deploys carry CVE-2026-91779.

Container imageDigestPackageFixed in
ghcr.io/stac-utils/stac-fastapi-pgstac:6.4.0fa35b9519abb
binutils@2.44-3
no fix listed

Open the chart page →

6,453
harp-proxyharp0.8.11 of 1See more

harp-proxy harp 0.8.1

1 of the 1 container images this version deploys carry CVE-2026-91779.

Container imageDigestPackageFixed in
makersquad/harp-proxy:0.8.1a40dd258c527
binutils@2.40-2
no fix listed

Open the chart page →

6,464
matomopockostVerified publisher1.3.01 of 3See more

matomo pockost 1.3.0

1 of the 3 container images this version deploys carry CVE-2026-91779.

Container imageDigestPackageFixed in
pockost/matomo:5.13.07f5d293cbe4e
binutils@2.44-3
no fix listed

Open the chart page →

5,204
kimai2robjuz5.0.141 of 2See more

kimai2 robjuz 5.0.14

1 of the 2 container images this version deploys carry CVE-2026-91779.

Container imageDigestPackageFixed in
kimai/kimai2:2.67.03084f1e5ecdc
binutils@2.40-2
no fix listed

Open the chart page →

4,707
securosecuroVerified publisher0.15.11 of 4See more

securo securo 0.15.1

1 of the 4 container images this version deploys carry CVE-2026-91779.

Container imageDigestPackageFixed in
ghcr.io/securo-finance/securo-backend:0.15.162e030110745
binutils@2.44-3
no fix listed

Open the chart page →

3,539
tocktock0.6.31 of 9See more

tock tock 0.6.3

1 of the 9 container images this version deploys carry CVE-2026-91779.

Container imageDigestPackageFixed in
tock/gen-ai-orchestrator-server:25.10.7abf7880e0449
binutils@2.44-3
no fix listed

Open the chart page →

13,017
unitycatalogunitycatalogVerified publisher0.0.21 of 4See more

unitycatalog unitycatalog 0.0.2

1 of the 4 container images this version deploys carry CVE-2026-91779.

Container imageDigestPackageFixed in
ghcr.io/sdwbgn/unitycatalog-helm/docker/unitycatalog-ui:0.2.1-5d668c1ed07e7ca098d
binutils@2.40-2
no fix listed

Open the chart page →

12,672
varnish-cachevarnishVerified publisher1.1.11 of 1See more

varnish-cache varnish 1.1.1

1 of the 1 container images this version deploys carry CVE-2026-91779.

Container imageDigestPackageFixed in
library/varnish:7.5.04d0bb287d87b
binutils@2.40-2
no fix listed

Open the chart page →

4,339
wordpress-helmwordpress-helm0.2.91 of 4See more

wordpress-helm wordpress-helm 0.2.9

1 of the 4 container images this version deploys carry CVE-2026-91779.

Container imageDigestPackageFixed in
aapjeisbaas/wp-frankenphp:v0.2.26b261abc7fb0
binutils@2.44-3
no fix listed

Open the chart page →

8,320
smartorchestratorassist-iot-smart-orchestrator4.0.03 of 14See more

smartorchestrator assist-iot-smart-orchestrator 4.0.0

3 of the 14 container images this version deploys carry CVE-2026-91779.

Container imageDigestPackageFixed in
assistiot/smart-orchestrator_mcs:latest7d6a0d534c7f
binutils@2.40-2
no fix listed
assistiot/smart-orchestrator_scheduler:latest38b003e55ff3
binutils@2.40-2
no fix listed
assistiot/smart-orchestrator_scheduler_mc:latestb1dbe4d62a03
binutils@2.40-2
no fix listed

Open the chart page →

45,656
tetragon-policy-buildercamptocamp30.1.11 of 1See more

tetragon-policy-builder camptocamp3 0.1.1

1 of the 1 container images this version deploys carry CVE-2026-91779.

Container imageDigestPackageFixed in
ghcr.io/camptocamp/tetragon-policy-builder:master0e99f12bb040
binutils@2.40-2
no fix listed

Open the chart page →

10,867
pbcore-utilcluster-deploy0.0.11 of 1See more

pbcore-util cluster-deploy 0.0.1

1 of the 1 container images this version deploys carry CVE-2026-91779.

Container imageDigestPackageFixed in
ghcr.io/wgbh-mla/pbcore-util:pr-66e04659a3baa
binutils@2.40-2
no fix listed

Open the chart page →

9,219
cohdicohdi0.2.21 of 3See more

cohdi cohdi 0.2.2

1 of the 3 container images this version deploys carry CVE-2026-91779.

Container imageDigestPackageFixed in
ghcr.io/cohdi/composable-dra-driver:v0.2.28c05f7366981
binutils@2.44-3
no fix listed

Open the chart page →

3,797
redashdasmeta0.1.01 of 1See more

redash dasmeta 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-91779.

Container imageDigestPackageFixed in
redash/redash:26.3.0c5c9148f5c38
binutils@2.40-2
no fix listed

Open the chart page →

5,142
espocrmespocrmVerified publisher1.0.11 of 2See more

espocrm espocrm 1.0.1

1 of the 2 container images this version deploys carry CVE-2026-91779.

Container imageDigestPackageFixed in
espocrm/espocrm:9.3.101b5a24504ed9
binutils@2.44-3
no fix listed

Open the chart page →

6,566
flyteconnectorflyte2.0.01 of 1See more

flyteconnector flyte 2.0.0

1 of the 1 container images this version deploys carry CVE-2026-91779.

Container imageDigestPackageFixed in
ghcr.io/flyteorg/flyte-connectors:py3.12-v2.3.6896fc7b18b1b
binutils@2.40-2
no fix listed

Open the chart page →

3,544
chiefonboardinghelmforgeVerified publisher1.1.151 of 3See more

chiefonboarding helmforge 1.1.15

1 of the 3 container images this version deploys carry CVE-2026-91779.

Container imageDigestPackageFixed in
chiefonboarding/chiefonboarding:v2.5.0d0964135ea82
binutils@2.44-3
no fix listed

Open the chart page →

7,086
dawarichhelmforgeVerified publisher1.0.11 of 4See more

dawarich helmforge 1.0.1

1 of the 4 container images this version deploys carry CVE-2026-91779.

Container imageDigestPackageFixed in
freikin/dawarich:1.14.511826c67e4b1
binutils@2.44-3
no fix listed

Open the chart page →

10,442
drupalhelmforgeVerified publisher1.2.131 of 2See more

drupal helmforge 1.2.13

1 of the 2 container images this version deploys carry CVE-2026-91779.

Container imageDigestPackageFixed in
library/drupal:11.4.6-php8.5-apache-bookworm28f7931ecbcb
binutils@2.40-2
no fix listed

Open the chart page →

3,884
moodlehelmforgeVerified publisher1.1.01 of 2See more

moodle helmforge 1.1.0

1 of the 2 container images this version deploys carry CVE-2026-91779.

Container imageDigestPackageFixed in
moodlehq/moodle-php-apache:8.4-bookworm922af5166835
binutils@2.40-2
no fix listed

Open the chart page →

6,206
nextcloudhelmforgeVerified publisher1.0.01 of 3See more

nextcloud helmforge 1.0.0

1 of the 3 container images this version deploys carry CVE-2026-91779.

Container imageDigestPackageFixed in
library/nextcloud:34.0.4-apachede4ad9389386
binutils@2.44-3
no fix listed

Open the chart page →

7,211
intelowlintelowl-helm6.6.1-01-06-20261 of 5See more

intelowl intelowl-helm 6.6.1-01-06-2026

1 of the 5 container images this version deploys carry CVE-2026-91779.

Container imageDigestPackageFixed in
intelowlproject/intelowl:v6.6.10b22e547ea6b
binutils@2.40-2
no fix listed

Open the chart page →

17,966
standard-application-stackmintel11.4.11 of 12See more

standard-application-stack mintel 11.4.1

1 of the 12 container images this version deploys carry CVE-2026-91779.

Container imageDigestPackageFixed in
localstack/localstack:latest3fe5b51caec8
binutils@2.44-3
no fix listed

Open the chart page →

10,613
backendmojaloop0.1.01 of 6See more

backend mojaloop 0.1.0

1 of the 6 container images this version deploys carry CVE-2026-91779.

Container imageDigestPackageFixed in
bitnamilegacy/mysql:8.4.5-debian-12-r07089d796fc9b
binutils@2.40-2
no fix listed

Open the chart page →

16,299
registration-ms-front-helm-chartnotesprojectchart0.1.01 of 1See more

registration-ms-front-helm-chart notesprojectchart 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-91779.

Container imageDigestPackageFixed in
vlebediantsev/registration-ms-front-app-host:latest54f69d116c50
binutils@2.40-2
no fix listed

Open the chart page →

15,278
radiusp2p-avs0.1.01 of 1See more

radius p2p-avs 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-91779.

Container imageDigestPackageFixed in
theradius/loggia:0.463ba348546ec
binutils@2.40-2
no fix listed

Open the chart page →

12,440
ungatep2p-avs0.1.02 of 3See more

ungate p2p-avs 0.1.0

2 of the 3 container images this version deploys carry CVE-2026-91779.

Container imageDigestPackageFixed in
xom4ekp2p/infini-route-attestators-public-mainnet-attester:latestd0e0aa238b02
binutils@2.40-2
no fix listed
xom4ekp2p/infini-route-attestators-public-mainnet-avs-webapi:latest2745b5fd8785
binutils@2.40-2
no fix listed

Open the chart page →

27,597
pod-birdspod-birds0.1.01 of 1See more

pod-birds pod-birds 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-91779.

Container imageDigestPackageFixed in
teknas09/bird-pod:latest12a1fa85c4aa
binutils@2.40-2
no fix listed

Open the chart page →

13,002
polyaxonpolyaxon2.16.41 of 5See more

polyaxon polyaxon 2.16.4

1 of the 5 container images this version deploys carry CVE-2026-91779.

Container imageDigestPackageFixed in
polyaxon/polyaxon-api:2.16.42b55c3265a90
binutils@2.44-3
no fix listed

Open the chart page →

13,995
pyredispyredis-helm0.1.01 of 2See more

pyredis pyredis-helm 0.1.0

1 of the 2 container images this version deploys carry CVE-2026-91779.

Container imageDigestPackageFixed in
avinash263/pyredis263:latestaa2b8727f1a6
binutils@2.40-2
no fix listed

Open the chart page →

14,628
rawfile-localpvrawfile0.15.21 of 6See more

rawfile-localpv rawfile 0.15.2

1 of the 6 container images this version deploys carry CVE-2026-91779.

Container imageDigestPackageFixed in
openebs/rawfile-localpv:v0.15.2a39ef27ea28b
binutils@2.44-3
no fix listed

Open the chart page →

2,897
revwallet-apirevwallet0.7.121 of 1See more

revwallet-api revwallet 0.7.12

1 of the 1 container images this version deploys carry CVE-2026-91779.

Container imageDigestPackageFixed in
arthurjguerra18/revwallet:v0.7.12f540af20b307
binutils@2.40-2
no fix listed

Open the chart page →

5,869
rocketchat-voiprocketchat-server0.1.01 of 1See more

rocketchat-voip rocketchat-server 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-91779.

Container imageDigestPackageFixed in
rocketchat/freeswitch:stablecfba5c20a5cc
binutils@2.40-2
no fix listed

Open the chart page →

5,763
transmissionryuunosukeds31.6.21 of 2See more

transmission ryuunosukeds3 1.6.2

1 of the 2 container images this version deploys carry CVE-2026-91779.

Container imageDigestPackageFixed in
library/python:3.9da5aee29682d
binutils@2.44-3
no fix listed

Open the chart page →

9,631
safe-stacksafe-global0.1.01 of 9See more

safe-stack safe-global 0.1.0

1 of the 9 container images this version deploys carry CVE-2026-91779.

Container imageDigestPackageFixed in
gjeanmart/safe-ganache-node:latest926264c8f2d1
binutils@2.40-2
no fix listed

Open the chart page →

19,707
safe-transaction-servicesafe-global0.1.01 of 6See more

safe-transaction-service safe-global 0.1.0

1 of the 6 container images this version deploys carry CVE-2026-91779.

Container imageDigestPackageFixed in
gjeanmart/safe-ganache-node:latest926264c8f2d1
binutils@2.40-2
no fix listed

Open the chart page →

16,739
speedtestsantisbon0.1.01 of 3See more

speedtest santisbon 0.1.0

1 of the 3 container images this version deploys carry CVE-2026-91779.

Container imageDigestPackageFixed in
santisbon/speedtest:latest8ee3a1697227
binutils@2.40-2
no fix listed

Open the chart page →

12,791
nextcloudsb-helm-charts0.4.01 of 2See more

nextcloud sb-helm-charts 0.4.0

1 of the 2 container images this version deploys carry CVE-2026-91779.

Container imageDigestPackageFixed in
library/nextcloud:31.0.10-apacheb7faa1653c39
binutils@2.44-3
no fix listed

Open the chart page →

9,853
wordpresssb-helm-charts0.4.01 of 2See more

wordpress sb-helm-charts 0.4.0

1 of the 2 container images this version deploys carry CVE-2026-91779.

Container imageDigestPackageFixed in
library/wordpress:6.4.3-apache8ae66efb09a2
binutils@2.40-2
no fix listed

Open the chart page →

13,618
typo3schoolguys-helmcharts0.4.21 of 1See more

typo3 schoolguys-helmcharts 0.4.2

1 of the 1 container images this version deploys carry CVE-2026-91779.

Container imageDigestPackageFixed in
registry.gitlab.com/school_guy/docker-typo3:13.4.30-197d868ed76185d7270d
binutils@2.40-2
no fix listed

Open the chart page →

4,916
spacecapybara-chartspacecapy1.0.491 of 2See more

spacecapybara-chart spacecapy 1.0.49

1 of the 2 container images this version deploys carry CVE-2026-91779.

Container imageDigestPackageFixed in
sashafefler/spacecapybara_app:latestf96d7804c0ca
binutils@2.40-2
no fix listed

Open the chart page →

11,979
servicexssl-hep1.8.510 of 16See more

servicex ssl-hep 1.8.5

10 of the 16 container images this version deploys carry CVE-2026-91779.

Container imageDigestPackageFixed in
library/python:3.1070c9cc675605
binutils@2.44-3
no fix listed
sslhep/servicex_app:v1.8.51d12f943cec5
binutils@2.44-3
no fix listed
sslhep/servicex_code_gen_atlas_xaod:v1.8.5e7aff7f97b89
binutils@2.44-3
no fix listed
sslhep/servicex_code_gen_func_adl_uproot:v1.8.5b01b8ee966ed
binutils@2.44-3
no fix listed
sslhep/servicex_code_gen_python:v1.8.50e4175a4e1eb
binutils@2.44-3
no fix listed
sslhep/servicex_code_gen_raw_uproot:v1.8.5671980005c57
binutils@2.44-3
no fix listed
sslhep/servicex_code_gen_topcp:v1.8.5596db2abdd09
binutils@2.44-3
no fix listed
sslhep/servicex-did-finder-atlasopenmagic:v1.8.554aaf1721d03
binutils@2.44-3
no fix listed
sslhep/servicex-did-finder-cernopendata:v1.8.52cb88ceab5bb
binutils@2.44-3
no fix listed
sslhep/servicex-did-finder-xrootd:v1.8.5c284442b44e3
binutils@2.44-3
no fix listed

Open the chart page →

67,262

Container images carrying it

66 by charts deploying them

A fixed version is listed for 0 of the 1 affected package.

Container imageDigestPackageFixed inUsed by
theradius/loggia:0.463ba348546ec
binutils@2.40-2
no fix listed
1
thongngo3301/stakefish:latesta341af5976e3
binutils@2.40-2
no fix listed
1
tock/gen-ai-orchestrator-server:25.10.7abf7880e0449
binutils@2.44-3
no fix listed
1
vlebediantsev/registration-ms-front-app-host:latest54f69d116c50
binutils@2.40-2
no fix listed
1
wallarm/aih-scanner:2.7.11f1cb26db1f5b
binutils@2.44-3
no fix listed
1
xom4ekp2p/infini-route-attestators-public-mainnet-attester:latestd0e0aa238b02
binutils@2.40-2
no fix listed
1
xom4ekp2p/infini-route-attestators-public-mainnet-avs-webapi:latest2745b5fd8785
binutils@2.40-2
no fix listed
1
ghcr.io/camptocamp/tetragon-policy-builder:master0e99f12bb040
binutils@2.40-2
no fix listed
1
ghcr.io/cohdi/composable-dra-driver:v0.2.28c05f7366981
binutils@2.44-3
no fix listed
1
ghcr.io/sdwbgn/unitycatalog-helm/docker/unitycatalog-ui:0.2.1-5d668c1ed07e7ca098d
binutils@2.40-2
no fix listed
1
ghcr.io/securo-finance/securo-backend:0.15.162e030110745
binutils@2.44-3
no fix listed
1
ghcr.io/stac-utils/stac-fastapi-pgstac:6.4.0fa35b9519abb
binutils@2.44-3
no fix listed
1
ghcr.io/wgbh-mla/pbcore-util:pr-66e04659a3baa
binutils@2.40-2
no fix listed
1
ghcr.io/wundergraph/cosmo/otelcollector:0.18.15a6fe78d4d15
binutils@2.40-2
no fix listed
1
quay.io/argoprojlabs/gitops-promoter:v0.38.19c8a510dc25e
binutils@2.44-3
no fix listed
1
registry.gitlab.com/school_guy/docker-typo3:13.4.30-197d868ed76185d7270d
binutils@2.40-2
no fix listed
1

syft 1.42.1 · advisories as of 16 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.