StackRadar

CVE-2026-92205

Medium

Advisory

Published 21 Oct 2026In the index since 23 Oct 2026
Severity
Medium
worst across findings
CVSS
6.1
base score, highest
EPSS
0.003
23rd percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
40
of 18,232 indexed, latest versions
Container images
38
deployed by those charts
Fix available
None
affected package

The matching OSV records carry no description.

Carried by container images the latest versions of 40 of 18,232 indexed charts deploy, on 38 images.

Affected packageAffected versionsFixed inImages
busyboxdeb1:1.21.0-1ubuntu1, 1:1.21.0-1ubuntu1.4, 1:1.27.2-2ubuntu3.2, 1:1.27.2-2ubuntu3.4+10 moreno fix listed38
OSV records
DEBIAN-CVE-2026-92205UBUNTU-CVE-2026-92205

Charts affected

40 by stars
ChartLatestAffected imagesRadar Score
gitlabgitlabVerified publisher10.5.17 of 21See more

gitlab gitlab 10.5.1

7 of the 21 container images this version deploys carry CVE-2026-92205.

Container imageDigestPackageFixed in
registry.gitlab.com/gitlab-org/build/cng/certificates:v19.5.1277c0c7dd09d
busybox@1:1.37.0-6+b9
no fix listed
registry.gitlab.com/gitlab-org/build/cng/gitaly:v19.5.13e17b952d90f
busybox@1:1.37.0-6+b9
no fix listed
registry.gitlab.com/gitlab-org/build/cng/gitlab-base:v19.5.1e56f0bd5b96c
busybox@1:1.37.0-6+b9
no fix listed
registry.gitlab.com/gitlab-org/build/cng/gitlab-container-registry:v4.42.0-gitlabb194be2ff740
busybox@1:1.37.0-6+b9
no fix listed
registry.gitlab.com/gitlab-org/build/cng/gitlab-exporter:17.0.22542811ac831
busybox@1:1.37.0-6+b9
no fix listed
registry.gitlab.com/gitlab-org/build/cng/gitlab-shell:v14.58.08f1028df33aa
busybox@1:1.37.0-6+b9
no fix listed
registry.gitlab.com/gitlab-org/build/cng/gitlab-workhorse-ee:v19.5.14863be916c31
busybox@1:1.37.0-6+b9
no fix listed

Open the chart page →

21,025
nextcloudnextcloud9.4.11 of 1See more

nextcloud nextcloud 9.4.1

1 of the 1 container images this version deploys carry CVE-2026-92205.

Container imageDigestPackageFixed in
library/nextcloud:35.0.2-apachea588aa535370
busybox@1:1.37.0-6+b9
no fix listed

Open the chart page →

4,772
oneuptimeoneuptimeOfficialVerified publisher14.0.871 of 7See more

oneuptime oneuptime 14.0.87

1 of the 7 container images this version deploys carry CVE-2026-92205.

Container imageDigestPackageFixed in
clickhouse/clickhouse-server:26.77ba435e7364c
busybox@1:1.30.1-7ubuntu3.1
no fix listed

Open the chart page →

9,838
nextcloudgroundhog2k0.22.91 of 3See more

nextcloud groundhog2k 0.22.9

1 of the 3 container images this version deploys carry CVE-2026-92205.

Container imageDigestPackageFixed in
library/nextcloud:35.0.2:35.0.2-apachea588aa535370
busybox@1:1.37.0-6+b9
no fix listed

Open the chart page →

4,772
monicamonicaOfficialVerified publisher1.0.151 of 1See more

monica monica 1.0.15

1 of the 1 container images this version deploys carry CVE-2026-92205.

Container imageDigestPackageFixed in
ghcr.io/monicahq/monica-next:main8a02508cbdcf
busybox@1:1.37.0-6+b9
no fix listed

Open the chart page →

3,460
openbaogitlabVerified publisher0.20.21 of 1See more

openbao gitlab 0.20.2

1 of the 1 container images this version deploys carry CVE-2026-92205.

Container imageDigestPackageFixed in
registry.gitlab.com/gitlab-org/build/cng/gitlab-openbao:v2.6.2-gitlab1295422a492cf
busybox@1:1.37.0-6+b9
no fix listed

Open the chart page →

1,965
machinarislib42Verified publisher0.2.01 of 1See more

machinaris lib42 0.2.0

1 of the 1 container images this version deploys carry CVE-2026-92205.

Container imageDigestPackageFixed in
ghcr.io/guydavis/machinaris:testf77fa53b89cb
busybox@1:1.36.1-6ubuntu3.1
no fix listed

Open the chart page →

26,707
observalobservalVerified publisher1.15.11 of 8See more

observal observal 1.15.1

1 of the 8 container images this version deploys carry CVE-2026-92205.

Container imageDigestPackageFixed in
clickhouse/clickhouse-server:26.35637f7b3024c
busybox@1:1.30.1-7ubuntu3.1
no fix listed

Open the chart page →

6,921
clickhouseclickhouse-alerthawkVerified publisher26.5.01 of 1See more

clickhouse clickhouse-alerthawk 26.5.0

1 of the 1 container images this version deploys carry CVE-2026-92205.

Container imageDigestPackageFixed in
clickhouse/clickhouse-server:26.584d05b9c205e
busybox@1:1.30.1-7ubuntu3.1
no fix listed

Open the chart page →

2,124
dokudokuOfficialVerified publisher0.1.41 of 3See more

doku doku 0.1.4

1 of the 3 container images this version deploys carry CVE-2026-92205.

Container imageDigestPackageFixed in
clickhouse/clickhouse-server:latestbdb5c911a23d
busybox@1:1.30.1-7ubuntu3.1
no fix listed

Open the chart page →

1,932
kubefarmkvaps0.13.41 of 6See more

kubefarm kvaps 0.13.4

1 of the 6 container images this version deploys carry CVE-2026-92205.

Container imageDigestPackageFixed in
ghcr.io/kvaps/kubefarm-ltsp:v0.13.424efef013a53
busybox@1:1.30.1-4ubuntu6.4
no fix listed

Open the chart page →

13,263
clickhousesinextraVerified publisher0.22.11 of 1See more

clickhouse sinextra 0.22.1

1 of the 1 container images this version deploys carry CVE-2026-92205.

Container imageDigestPackageFixed in
clickhouse/clickhouse-server:26.3.1092098d3b31dd
busybox@1:1.30.1-7ubuntu3.1
no fix listed

Open the chart page →

2,426
kafka-devwikimedia0.2.01 of 1See more

kafka-dev wikimedia 0.2.0

1 of the 1 container images this version deploys carry CVE-2026-92205.

Container imageDigestPackageFixed in
wurstmeister/zookeeper:latest7a7fd44a7210
busybox@1:1.21.0-1ubuntu1
no fix listed

Open the chart page →

42,223
alibaba-rsocket-brokeralibaba-rsocket-brokerVerified publisher0.1.31 of 1See more

alibaba-rsocket-broker alibaba-rsocket-broker 0.1.3

1 of the 1 container images this version deploys carry CVE-2026-92205.

Container imageDigestPackageFixed in
linuxchina/alibaba-rsocket-broker:1.1.3-k8sf758e2e567ee
busybox@1:1.27.2-2ubuntu3.4
no fix listed

Open the chart page →

92,007
opensipschetan-opensips0.1.01 of 1See more

opensips chetan-opensips 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-92205.

Container imageDigestPackageFixed in
chetangautamm/repo:Opensips_Buildb4b94155ff5a
busybox@1:1.21.0-1ubuntu1.4
no fix listed

Open the chart page →

72,773
guestbookcloudnativeapp0.2.01 of 3See more

guestbook cloudnativeapp 0.2.0

1 of the 3 container images this version deploys carry CVE-2026-92205.

Container imageDigestPackageFixed in
resouer/redis-slave:v2e2f198b49ba7
busybox@1:1.21.0-1ubuntu1
no fix listed

Open the chart page →

86,273
galaxy-stablecloudve2.0.02 of 5See more

galaxy-stable cloudve 2.0.0

2 of the 5 container images this version deploys carry CVE-2026-92205.

Container imageDigestPackageFixed in
galaxy/galaxy-init:v18.010267bad550e6
busybox@1:1.21.0-1ubuntu1
no fix listed
galaxy/galaxy-stable:v18.018e577a626dfd
busybox@1:1.21.0-1ubuntu1
no fix listed

Open the chart page →

160,787
csghubcsghubVerified publisher2.6.12 of 35See more

csghub csghub 2.6.1

2 of the 35 container images this version deploys carry CVE-2026-92205.

Container imageDigestPackageFixed in
opencsghq/gitlab-gitaly:v17.5.0bdd2c58b9744
busybox@1:1.35.0-4+b3
no fix listed
opencsghq/gitlab-shell:v19.2.580a65ac370da
busybox@1:1.35.0-4+deb12u1+b1
no fix listed

Open the chart page →

71,615
argocd-certificate-refreshdevtron0.10.81 of 1See more

argocd-certificate-refresh devtron 0.10.8

1 of the 1 container images this version deploys carry CVE-2026-92205.

Container imageDigestPackageFixed in
quay.io/devtron/argocd-cert-refresh:v102b6db27eaf3d
busybox@1:1.30.1-7ubuntu3
no fix listed

Open the chart page →

14,954
argocd-certificate-refreshdevtron-labs0.10.81 of 1See more

argocd-certificate-refresh devtron-labs 0.10.8

1 of the 1 container images this version deploys carry CVE-2026-92205.

Container imageDigestPackageFixed in
quay.io/devtron/argocd-cert-refresh:v102b6db27eaf3d
busybox@1:1.30.1-7ubuntu3
no fix listed

Open the chart page →

14,954
video-analytics-demogpu-operator0.1.91 of 3See more

video-analytics-demo gpu-operator 0.1.9

1 of the 3 container images this version deploys carry CVE-2026-92205.

Container imageDigestPackageFixed in
anguda/ant-media:2.5c435285fc241
busybox@1:1.30.1-4ubuntu6.4
no fix listed

Open the chart page →

16,849
clickhousehelmforgeVerified publisher2.0.71 of 1See more

clickhouse helmforge 2.0.7

1 of the 1 container images this version deploys carry CVE-2026-92205.

Container imageDigestPackageFixed in
clickhouse/clickhouse-server:26.9.21fd4652f708ec
busybox@1:1.30.1-7ubuntu3.1
no fix listed

Open the chart page →

1,932
nextcloudhelmforgeVerified publisher2.0.41 of 3See more

nextcloud helmforge 2.0.4

1 of the 3 container images this version deploys carry CVE-2026-92205.

Container imageDigestPackageFixed in
library/nextcloud:35.0.2-apachea588aa535370
busybox@1:1.37.0-6+b9
no fix listed

Open the chart page →

7,214
openreplayhelmforgeVerified publisher1.1.11 of 24See more

openreplay helmforge 1.1.1

1 of the 24 container images this version deploys carry CVE-2026-92205.

Container imageDigestPackageFixed in
clickhouse/clickhouse-server:26.9.1639f9dbf1ea6d
busybox@1:1.30.1-7ubuntu3.1
no fix listed

Open the chart page →

16,183
deepflowkubesphere-stable6.2.6061 of 8See more

deepflow kubesphere-stable 6.2.606

1 of the 8 container images this version deploys carry CVE-2026-92205.

Container imageDigestPackageFixed in
deepflowce/deepflow-agent:v6.2.6.529332fee7fc2
busybox@1:1.30.1-7ubuntu3
no fix listed

Open the chart page →

24,372
danboorumy0nVerified publisher0.0.21 of 1See more

danbooru my0n 0.0.2

1 of the 1 container images this version deploys carry CVE-2026-92205.

Container imageDigestPackageFixed in
ghcr.io/danbooru/danbooru:9cab67c0ac72a8c52289302c519715ceec2372d95f545698e907
busybox@1:1.30.1-7ubuntu3
no fix listed

Open the chart page →

104,799
danbooru-stackmy0nVerified publisher0.0.31 of 4See more

danbooru-stack my0n 0.0.3

1 of the 4 container images this version deploys carry CVE-2026-92205.

Container imageDigestPackageFixed in
ghcr.io/danbooru/danbooru:9cab67c0ac72a8c52289302c519715ceec2372d95f545698e907
busybox@1:1.30.1-7ubuntu3
no fix listed

Open the chart page →

104,799
zookeeper-helm-chartnotesprojectchart0.1.01 of 1See more

zookeeper-helm-chart notesprojectchart 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-92205.

Container imageDigestPackageFixed in
wurstmeister/zookeeper:latest7a7fd44a7210
busybox@1:1.21.0-1ubuntu1
no fix listed

Open the chart page →

42,223
sebaopencord1.0.01 of 17See more

seba opencord 1.0.0

1 of the 17 container images this version deploys carry CVE-2026-92205.

Container imageDigestPackageFixed in
voltha/voltha-envoy:1.6.059ab2a00f712
busybox@1:1.21.0-1ubuntu1
no fix listed

Open the chart page →

351,627
dokuopenlit0.1.41 of 3See more

doku openlit 0.1.4

1 of the 3 container images this version deploys carry CVE-2026-92205.

Container imageDigestPackageFixed in
clickhouse/clickhouse-server:latestbdb5c911a23d
busybox@1:1.30.1-7ubuntu3.1
no fix listed

Open the chart page →

1,932
openpanelopenpanel0.9.01 of 6See more

openpanel openpanel 0.9.0

1 of the 6 container images this version deploys carry CVE-2026-92205.

Container imageDigestPackageFixed in
clickhouse/clickhouse-server:25.10.2.65e019438e1e05
busybox@1:1.30.1-7ubuntu3.1
no fix listed

Open the chart page →

4,757
issuegenopsmxVerified publisher1.0.21 of 1See more

issuegen opsmx 1.0.2

1 of the 1 container images this version deploys carry CVE-2026-92205.

Container imageDigestPackageFixed in
opsmx11/issuegen:v2.1.05c50ca123d88
busybox@1:1.21.0-1ubuntu1
no fix listed

Open the chart page →

27,205
argocd-certificate-refreshromholdings0.10.81 of 1See more

argocd-certificate-refresh romholdings 0.10.8

1 of the 1 container images this version deploys carry CVE-2026-92205.

Container imageDigestPackageFixed in
quay.io/devtron/argocd-cert-refresh:v102b6db27eaf3d
busybox@1:1.30.1-7ubuntu3
no fix listed

Open the chart page →

14,954
nextcloudsb-helm-charts0.4.01 of 2See more

nextcloud sb-helm-charts 0.4.0

1 of the 2 container images this version deploys carry CVE-2026-92205.

Container imageDigestPackageFixed in
library/nextcloud:31.0.10-apacheb7faa1653c39
busybox@1:1.37.0-6+b3
no fix listed

Open the chart page →

11,966
spring-boot-helm-starterspring-boot-helm-starter0.1.01 of 1See more

spring-boot-helm-starter spring-boot-helm-starter 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-92205.

Container imageDigestPackageFixed in
alexandreroman/hello:latest4b79473442be
busybox@1:1.27.2-2ubuntu3.2
no fix listed

Open the chart page →

116,760
spring-boot-helm-startertest0.1.01 of 1See more

spring-boot-helm-starter test 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-92205.

Container imageDigestPackageFixed in
alexandreroman/hello:latest4b79473442be
busybox@1:1.27.2-2ubuntu3.2
no fix listed

Open the chart page →

116,760
nextcloudth-chartsVerified publisher0.4.01 of 1See more

nextcloud th-charts 0.4.0

1 of the 1 container images this version deploys carry CVE-2026-92205.

Container imageDigestPackageFixed in
library/nextcloud:31.0.6-apache588609d76b21
busybox@1:1.35.0-4+b4
no fix listed

Open the chart page →

65,813
tyk-control-planetyk-helm5.4.11 of 7See more

tyk-control-plane tyk-helm 5.4.1

1 of the 7 container images this version deploys carry CVE-2026-92205.

Container imageDigestPackageFixed in
tykio/tyk-gateway-ee:v5.13.250b3e4f5398a
busybox@1:1.37.0-6+dhi3
no fix listed

Open the chart page →

5,444
tyk-data-planetyk-helm5.4.11 of 3See more

tyk-data-plane tyk-helm 5.4.1

1 of the 3 container images this version deploys carry CVE-2026-92205.

Container imageDigestPackageFixed in
tykio/tyk-gateway-ee:v5.13.250b3e4f5398a
busybox@1:1.37.0-6+dhi3
no fix listed

Open the chart page →

1,458
tyk-stacktyk-helm5.4.11 of 7See more

tyk-stack tyk-helm 5.4.1

1 of the 7 container images this version deploys carry CVE-2026-92205.

Container imageDigestPackageFixed in
tykio/tyk-gateway-ee:v5.13.250b3e4f5398a
busybox@1:1.37.0-6+dhi3
no fix listed

Open the chart page →

5,434

Container images carrying it

38 by charts deploying them

A fixed version is listed for 0 of the 1 affected package.

Container imageDigestPackageFixed inUsed by
library/nextcloud:35.0.2:35.0.2-apachea588aa535370
busybox@1:1.37.0-6+b9
no fix listed
3
tykio/tyk-gateway-ee:v5.13.250b3e4f5398a
busybox@1:1.37.0-6+dhi3
no fix listed
3
quay.io/devtron/argocd-cert-refresh:v102b6db27eaf3d
busybox@1:1.30.1-7ubuntu3
no fix listed
3
alexandreroman/hello:latest4b79473442be
busybox@1:1.27.2-2ubuntu3.2
no fix listed
2
clickhouse/clickhouse-server:latestbdb5c911a23d
busybox@1:1.30.1-7ubuntu3.1
no fix listed
2
wurstmeister/zookeeper:latest7a7fd44a7210
busybox@1:1.21.0-1ubuntu1
no fix listed
2
ghcr.io/danbooru/danbooru:9cab67c0ac72a8c52289302c519715ceec2372d95f545698e907
busybox@1:1.30.1-7ubuntu3
no fix listed
2
anguda/ant-media:2.5c435285fc241
busybox@1:1.30.1-4ubuntu6.4
no fix listed
1
chetangautamm/repo:Opensips_Buildb4b94155ff5a
busybox@1:1.21.0-1ubuntu1.4
no fix listed
1
clickhouse/clickhouse-server:26.9.1639f9dbf1ea6d
busybox@1:1.30.1-7ubuntu3.1
no fix listed
1
clickhouse/clickhouse-server:26.35637f7b3024c
busybox@1:1.30.1-7ubuntu3.1
no fix listed
1
clickhouse/clickhouse-server:26.77ba435e7364c
busybox@1:1.30.1-7ubuntu3.1
no fix listed
1
clickhouse/clickhouse-server:26.584d05b9c205e
busybox@1:1.30.1-7ubuntu3.1
no fix listed
1
clickhouse/clickhouse-server:26.3.1092098d3b31dd
busybox@1:1.30.1-7ubuntu3.1
no fix listed
1
clickhouse/clickhouse-server:25.10.2.65e019438e1e05
busybox@1:1.30.1-7ubuntu3.1
no fix listed
1
clickhouse/clickhouse-server:26.9.21fd4652f708ec
busybox@1:1.30.1-7ubuntu3.1
no fix listed
1
deepflowce/deepflow-agent:v6.2.6.529332fee7fc2
busybox@1:1.30.1-7ubuntu3
no fix listed
1
galaxy/galaxy-init:v18.010267bad550e6
busybox@1:1.21.0-1ubuntu1
no fix listed
1
galaxy/galaxy-stable:v18.018e577a626dfd
busybox@1:1.21.0-1ubuntu1
no fix listed
1
library/nextcloud:31.0.6-apache588609d76b21
busybox@1:1.35.0-4+b4
no fix listed
1
library/nextcloud:31.0.10-apacheb7faa1653c39
busybox@1:1.37.0-6+b3
no fix listed
1
linuxchina/alibaba-rsocket-broker:1.1.3-k8sf758e2e567ee
busybox@1:1.27.2-2ubuntu3.4
no fix listed
1
opencsghq/gitlab-gitaly:v17.5.0bdd2c58b9744
busybox@1:1.35.0-4+b3
no fix listed
1
opencsghq/gitlab-shell:v19.2.580a65ac370da
busybox@1:1.35.0-4+deb12u1+b1
no fix listed
1
opsmx11/issuegen:v2.1.05c50ca123d88
busybox@1:1.21.0-1ubuntu1
no fix listed
1
resouer/redis-slave:v2e2f198b49ba7
busybox@1:1.21.0-1ubuntu1
no fix listed
1
voltha/voltha-envoy:1.6.059ab2a00f712
busybox@1:1.21.0-1ubuntu1
no fix listed
1
ghcr.io/guydavis/machinaris:testf77fa53b89cb
busybox@1:1.36.1-6ubuntu3.1
no fix listed
1
ghcr.io/kvaps/kubefarm-ltsp:v0.13.424efef013a53
busybox@1:1.30.1-4ubuntu6.4
no fix listed
1
ghcr.io/monicahq/monica-next:main8a02508cbdcf
busybox@1:1.37.0-6+b9
no fix listed
1
registry.gitlab.com/gitlab-org/build/cng/certificates:v19.5.1277c0c7dd09d
busybox@1:1.37.0-6+b9
no fix listed
1
registry.gitlab.com/gitlab-org/build/cng/gitaly:v19.5.13e17b952d90f
busybox@1:1.37.0-6+b9
no fix listed
1
registry.gitlab.com/gitlab-org/build/cng/gitlab-base:v19.5.1e56f0bd5b96c
busybox@1:1.37.0-6+b9
no fix listed
1
registry.gitlab.com/gitlab-org/build/cng/gitlab-container-registry:v4.42.0-gitlabb194be2ff740
busybox@1:1.37.0-6+b9
no fix listed
1
registry.gitlab.com/gitlab-org/build/cng/gitlab-exporter:17.0.22542811ac831
busybox@1:1.37.0-6+b9
no fix listed
1
registry.gitlab.com/gitlab-org/build/cng/gitlab-openbao:v2.6.2-gitlab1295422a492cf
busybox@1:1.37.0-6+b9
no fix listed
1
registry.gitlab.com/gitlab-org/build/cng/gitlab-shell:v14.58.08f1028df33aa
busybox@1:1.37.0-6+b9
no fix listed
1
registry.gitlab.com/gitlab-org/build/cng/gitlab-workhorse-ee:v19.5.14863be916c31
busybox@1:1.37.0-6+b9
no fix listed
1

syft 1.42.1 · advisories as of 24 Oct 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.