StackRadar

CVE-2026-91780

Medium

Advisory

Published 15 Sept 2026In the index since 16 Sept 2026
Severity
Medium
worst across findings
CVSS
4.8
base score, highest
EPSS
—
probability of exploitation
CISA KEV
Not listed
no confirmed exploitation
Charts affected
56
of 17,790 indexed, latest versions
Container images
66
deployed by those charts
Fix available
None
affected package

The matching OSV records carry no description.

Carried by container images the latest versions of 56 of 17,790 indexed charts deploy, on 66 images.

Affected packageAffected versionsFixed inImages
binutilsdeb2.40-2, 2.44-3no fix listed66
OSV records
DEBIAN-CVE-2026-91780

Charts affected

56 by stars
ChartLatestAffected imagesRadar Score
stakefishstakefish0.1.01 of 8See more

stakefish stakefish 0.1.0

1 of the 8 container images this version deploys carry CVE-2026-91780.

Container imageDigestPackageFixed in
thongngo3301/stakefish:latesta341af5976e3
binutils@2.40-2
no fix listed

Open the chart page →

20,321
ssv-nodestakewise2.2.01 of 2See more

ssv-node stakewise 2.2.0

1 of the 2 container images this version deploys carry CVE-2026-91780.

Container imageDigestPackageFixed in
bloxstaking/ssv-node:v2.2.0bf6d7d2fdc93
binutils@2.40-2
no fix listed

Open the chart page →

6,873
nagvissvtech-public-helm-charts1.0.01 of 1See more

nagvis svtech-public-helm-charts 1.0.0

1 of the 1 container images this version deploys carry CVE-2026-91780.

Container imageDigestPackageFixed in
svtechnmaa/svtech_nagvis:v1.2.118394b08e6c3
binutils@2.40-2
no fix listed

Open the chart page →

9,182
supabaseteochenglim0.1.21 of 13See more

supabase teochenglim 0.1.2

1 of the 13 container images this version deploys carry CVE-2026-91780.

Container imageDigestPackageFixed in
supabase/studio:latest94a2a9d2906e
binutils@2.40-2
no fix listed

Open the chart page →

9,795
aih-scannerwallarmVerified publisher2.7.111 of 2See more

aih-scanner wallarm 2.7.11

1 of the 2 container images this version deploys carry CVE-2026-91780.

Container imageDigestPackageFixed in
wallarm/aih-scanner:2.7.11f1cb26db1f5b
binutils@2.44-3
no fix listed

Open the chart page →

4,013
supersetwbstack0.1.01 of 1See more

superset wbstack 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-91780.

Container imageDigestPackageFixed in
apache/superset:4.0.1ab9467fd712c
binutils@2.40-2
no fix listed

Open the chart page →

7,166

Container images carrying it

66 by charts deploying them

A fixed version is listed for 0 of the 1 affected package.

Container imageDigestPackageFixed inUsed by
freikin/dawarich:1.14.511826c67e4b1
binutils@2.44-3
no fix listed
2
gjeanmart/safe-ganache-node:latest926264c8f2d1
binutils@2.40-2
no fix listed
2
ghcr.io/flyteorg/flyte-connectors:py3.12-v2.3.6896fc7b18b1b
binutils@2.40-2
no fix listed
2
aapjeisbaas/wp-frankenphp:v0.2.26b261abc7fb0
binutils@2.44-3
no fix listed
1
adamzammit/limesurvey:7.1.1fdb06d62c22e
binutils@2.44-3
no fix listed
1
apache/superset:4.0.1ab9467fd712c
binutils@2.40-2
no fix listed
1
arthurjguerra18/revwallet:v0.7.12f540af20b307
binutils@2.40-2
no fix listed
1
assistiot/smart-orchestrator_mcs:latest7d6a0d534c7f
binutils@2.40-2
no fix listed
1
assistiot/smart-orchestrator_scheduler:latest38b003e55ff3
binutils@2.40-2
no fix listed
1
assistiot/smart-orchestrator_scheduler_mc:latestb1dbe4d62a03
binutils@2.40-2
no fix listed
1
avinash263/pyredis263:latestaa2b8727f1a6
binutils@2.40-2
no fix listed
1
bitnamilegacy/mysql:8.4.5-debian-12-r07089d796fc9b
binutils@2.40-2
no fix listed
1
bloxstaking/ssv-node:v2.2.0bf6d7d2fdc93
binutils@2.40-2
no fix listed
1
chiefonboarding/chiefonboarding:v2.5.0d0964135ea82
binutils@2.44-3
no fix listed
1
espocrm/espocrm:9.3.101b5a24504ed9
binutils@2.44-3
no fix listed
1
intelowlproject/intelowl:v6.6.10b22e547ea6b
binutils@2.40-2
no fix listed
1
kimai/kimai2:2.67.03084f1e5ecdc
binutils@2.40-2
no fix listed
1
library/drupal:11.4.6-php8.5-apache-bookworm28f7931ecbcb
binutils@2.40-2
no fix listed
1
library/nextcloud:34.0.4:34.0.4-apache8418c398d767
binutils@2.44-3
no fix listed
1
library/nextcloud:31.0.10-apacheb7faa1653c39
binutils@2.44-3
no fix listed
1
library/nextcloud:34.0.4-apachede4ad9389386
binutils@2.44-3
no fix listed
1
library/python:3.1070c9cc675605
binutils@2.44-3
no fix listed
1
library/python:3.9da5aee29682d
binutils@2.44-3
no fix listed
1
library/varnish:7.5.04d0bb287d87b
binutils@2.40-2
no fix listed
1
library/wordpress:6.4.3-apache8ae66efb09a2
binutils@2.40-2
no fix listed
1
localstack/localstack:latest3fe5b51caec8
binutils@2.44-3
no fix listed
1
makersquad/harp-proxy:0.8.1a40dd258c527
binutils@2.40-2
no fix listed
1
moodlehq/moodle-php-apache:8.4-bookworm922af5166835
binutils@2.40-2
no fix listed
1
oneuptime/probe:release1069c9458fe7
binutils@2.40-2
no fix listed
1
oneuptime/runner:releasef6f2c1c536bc
binutils@2.44-3
no fix listed
1
openebs/rawfile-localpv:v0.15.2a39ef27ea28b
binutils@2.44-3
no fix listed
1
pockost/matomo:5.13.07f5d293cbe4e
binutils@2.44-3
no fix listed
1
polyaxon/polyaxon-api:2.16.42b55c3265a90
binutils@2.44-3
no fix listed
1
prefecthq/prefect:3.8.6-python3.11f518ebb9c353
binutils@2.44-3
no fix listed
1
redash/redash:26.3.0c5c9148f5c38
binutils@2.40-2
no fix listed
1
rocketchat/freeswitch:stablecfba5c20a5cc
binutils@2.40-2
no fix listed
1
santisbon/speedtest:latest8ee3a1697227
binutils@2.40-2
no fix listed
1
sashafefler/spacecapybara_app:latestf96d7804c0ca
binutils@2.40-2
no fix listed
1
sslhep/servicex_app:v1.8.51d12f943cec5
binutils@2.44-3
no fix listed
1
sslhep/servicex_code_gen_atlas_xaod:v1.8.5e7aff7f97b89
binutils@2.44-3
no fix listed
1
sslhep/servicex_code_gen_func_adl_uproot:v1.8.5b01b8ee966ed
binutils@2.44-3
no fix listed
1
sslhep/servicex_code_gen_python:v1.8.50e4175a4e1eb
binutils@2.44-3
no fix listed
1
sslhep/servicex_code_gen_raw_uproot:v1.8.5671980005c57
binutils@2.44-3
no fix listed
1
sslhep/servicex_code_gen_topcp:v1.8.5596db2abdd09
binutils@2.44-3
no fix listed
1
sslhep/servicex-did-finder-atlasopenmagic:v1.8.554aaf1721d03
binutils@2.44-3
no fix listed
1
sslhep/servicex-did-finder-cernopendata:v1.8.52cb88ceab5bb
binutils@2.44-3
no fix listed
1
sslhep/servicex-did-finder-xrootd:v1.8.5c284442b44e3
binutils@2.44-3
no fix listed
1
supabase/studio:latest94a2a9d2906e
binutils@2.40-2
no fix listed
1
svtechnmaa/svtech_nagvis:v1.2.118394b08e6c3
binutils@2.40-2
no fix listed
1
teknas09/bird-pod:latest12a1fa85c4aa
binutils@2.40-2
no fix listed
1

syft 1.42.1 · advisories as of 16 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.