StackRadar

CVE-2026-92520

Medium

Advisory

Published 18 Sept 2026In the index since 19 Sept 2026
Severity
Medium
worst across findings
CVSS
5.5
base score, highest
EPSS
0.002
6th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
117
of 17,828 indexed, latest versions
Container images
134
deployed by those charts
Fix available
None
affected package

The matching OSV records carry no description.

Carried by container images the latest versions of 117 of 17,828 indexed charts deploy, on 134 images.

Affected packageAffected versionsFixed inImages
linuxdeb3.13.0-126.175, 3.13.0-170.220, 4.4.0-112.135, 4.4.0-137.163+76 moreno fix listed134
OSV records
UBUNTU-CVE-2026-92520

Charts affected

117 by stars
ChartLatestAffected imagesRadar Score
komgarubxkubeVerified publisher0.1.31 of 1See more

komga rubxkube 0.1.3

1 of the 1 container images this version deploys carry CVE-2026-92520.

Container imageDigestPackageFixed in
gotson/komga:1.26.36c2a967bbe9a
linux@7.0.0-29.29
no fix listed

Open the chart page →

34,743
snipeitschmitzis6.1.01 of 2See more

snipeit schmitzis 6.1.0

1 of the 2 container images this version deploys carry CVE-2026-92520.

Container imageDigestPackageFixed in
snipe/snipe-it:v8.3.1141ebf2386fe
linux@6.8.0-79.79
no fix listed

Open the chart page →

62,880
photoprismschoolguys-helmcharts0.3.81 of 1See more

photoprism schoolguys-helmcharts 0.3.8

1 of the 1 container images this version deploys carry CVE-2026-92520.

Container imageDigestPackageFixed in
photoprism/photoprism:260601650c6ad5a651
linux@7.0.0-22.22
no fix listed

Open the chart page →

52,466
seldon-core-loadtestingseldon0.2.01 of 1See more

seldon-core-loadtesting seldon 0.2.0

1 of the 1 container images this version deploys carry CVE-2026-92520.

Container imageDigestPackageFixed in
seldonio/locust-core:0.81d0da98a2d76
linux@4.4.0-148.174
no fix listed

Open the chart page →

80,295
testing-multitoolsomeblackmagic0.1.21 of 1See more

testing-multitool someblackmagic 0.1.2

1 of the 1 container images this version deploys carry CVE-2026-92520.

Container imageDigestPackageFixed in
someblackmagic/k8s-testing-multitool:v0.1.06eca64b6b440
linux@5.4.0-117.132
no fix listed

Open the chart page →

101,953
ocean-network-clientspot1.1.61 of 1See more

ocean-network-client spot 1.1.6

1 of the 1 container images this version deploys carry CVE-2026-92520.

Container imageDigestPackageFixed in
public.ecr.aws/spotinst/spot-network-client:1.0.1486380a01587d
linux@6.8.0-100.100
no fix listed

Open the chart page →

51,225
spotinst-ocean-network-clientspot1.0.01 of 1See more

spotinst-ocean-network-client spot 1.0.0

1 of the 1 container images this version deploys carry CVE-2026-92520.

Container imageDigestPackageFixed in
public.ecr.aws/spotinst/spot-network-client:1.0.0-8-lb_endpoint-d0ec127efcecf98b912
linux@4.15.0-191.202
no fix listed

Open the chart page →

66,245
sn-platform-slimstreamnative1.11.451See more

sn-platform-slim streamnative 1.11.45

1 container image this version deploys carries CVE-2026-92520.

Container imageDigestPackageFixed in
streamnative/apache-pulsar-grafana-dashboard-k8s:0.1.20e6d7aa3ef32
linux@5.4.0-182.202
no fix listed

Open the chart page →

—
maxscalesvtech-public-helm-charts1.0.01 of 2See more

maxscale svtech-public-helm-charts 1.0.0

1 of the 2 container images this version deploys carry CVE-2026-92520.

Container imageDigestPackageFixed in
svtechnmaa/svtech_maxscale:v1.0.3410a25b51f9f
linux@5.15.0-92.102
no fix listed

Open the chart page →

75,797
rundecksvtech-public-helm-charts1.0.01 of 2See more

rundeck svtech-public-helm-charts 1.0.0

1 of the 2 container images this version deploys carry CVE-2026-92520.

Container imageDigestPackageFixed in
svtechnmaa/svtech_rundeck:v1.2.26e368ace0977
linux@5.4.0-176.196
no fix listed

Open the chart page →

76,163
istio-discoverytemp-charts0.3.31 of 1See more

istio-discovery temp-charts 0.3.3

1 of the 1 container images this version deploys carry CVE-2026-92520.

Container imageDigestPackageFixed in
istio/pilot:1.10.0294ca55bd1cc
linux@4.15.0-143.147
no fix listed

Open the chart page →

75,354
istio-ingresstemp-charts0.3.31 of 1See more

istio-ingress temp-charts 0.3.3

1 of the 1 container images this version deploys carry CVE-2026-92520.

Container imageDigestPackageFixed in
istio/proxyv2:1.10.088c6c693e67a
linux@4.15.0-143.147
no fix listed

Open the chart page →

75,300
tensor_apptensor-app0.2.21 of 3See more

tensor_app tensor-app 0.2.2

1 of the 3 container images this version deploys carry CVE-2026-92520.

Container imageDigestPackageFixed in
xeladock/mysql_dns:latest4baf531453f1
linux@5.15.0-25.25
no fix listed

Open the chart page →

109,733
tdarrvhdirkVerified publisher5.0.52 of 2See more

tdarr vhdirk 5.0.5

2 of the 2 container images this version deploys carry CVE-2026-92520.

Container imageDigestPackageFixed in
haveagitgat/tdarr_node:2.17.013ff0913202dd
linux@5.4.0-163.180
no fix listed
ghcr.io/haveagitgat/tdarr:2.00.18.23fbe4c29d14c
linux@5.4.0-110.124
no fix listed

Open the chart page →

159,251
unmanicvhdirkVerified publisher0.1.41 of 1See more

unmanic vhdirk 0.1.4

1 of the 1 container images this version deploys carry CVE-2026-92520.

Container imageDigestPackageFixed in
josh5/unmanic:0.2.64d49c4816260
linux@5.15.0-100.110
no fix listed

Open the chart page →

77,188
twenty-crmvictorlane0.0.11 of 3See more

twenty-crm victorlane 0.0.1

1 of the 3 container images this version deploys carry CVE-2026-92520.

Container imageDigestPackageFixed in
twentycrm/twenty-postgres-spilo:latest2f78405a78be
linux@5.15.0-134.145
no fix listed

Open the chart page →

69,395
kongwallarmVerified publisher4.6.31 of 7See more

kong wallarm 4.6.3

1 of the 7 container images this version deploys carry CVE-2026-92520.

Container imageDigestPackageFixed in
wallarm/kong:3.1.0-ubuntu-4.6.0ea9608c82e40
linux@5.4.0-144.161
no fix listed

Open the chart page →

74,873

Container images carrying it

134 by charts deploying them

A fixed version is listed for 0 of the 1 affected package.

Container imageDigestPackageFixed inUsed by
kong/httpbin:latesta6ac46531193
linux@5.15.0-130.140
no fix listed
1
kusionstack/kusion:v0.14.0126c8f0b0976
linux@5.15.0-130.140
no fix listed
1
langgenius/dify-plugin-daemon:0.6.3-local3c694329357b
linux@6.8.0-124.124
no fix listed
1
langgenius/dify-plugin-daemon:0.5.1-local8269050f192e
linux@6.8.0-88.89
no fix listed
1
langgenius/dify-plugin-daemon:main-localda995c129e2f
linux@6.8.0-138.138
no fix listed
1
linuxchina/alibaba-rsocket-broker:1.1.3-k8sf758e2e567ee
linux@4.15.0-171.180
no fix listed
1
lsstsqre/nublado2:2.0.1b75bf8aaafa4
linux@5.4.0-100.113
no fix listed
1
mbround18/valheim:3.1.070bd4da591cd
linux@5.15.0-133.144
no fix listed
1
mediagis/nominatim:5.3.27923a8e67197
linux@6.8.0-124.124
no fix listed
1
milvusdb/milvus:v2.2.13a3a55e1c1497
linux@5.4.0-131.147
no fix listed
1
mintproject/graphql-engine:305c0dbeba1878eafe348f21fc300fbfc017d9dc83aade2c1855
linux@5.4.0-117.132
no fix listed
1
mlikiowa/napcat-docker:latest2cc70b45244a
linux@5.15.0-124.134
no fix listed
1
mshanley80/httpbin2022:latest5b189a70c0fb
linux@5.4.0-135.152
no fix listed
1
muluder/prograncontrollermcord:0.1.843b597a93da7
linux@4.4.0-112.135
no fix listed
1
nethermind/nethermind:1.14.615517708c3b6
linux@5.15.0-53.59
no fix listed
1
netskopeprivateaccess/publisher_u22:latest0b43204c37d6
linux@5.15.0-190.200
no fix listed
1
omecproject/mme-exporter:paging-latestbcc5f19fd676
linux@4.15.0-88.88
no fix listed
1
opendatacube/pipelines:wofs-1.225d810e8504b8
linux@4.15.0-46.49
no fix listed
1
opendatacube/restcube:latest91870111837c
linux@4.15.0-50.54
no fix listed
1
openelevation/open-elevation:latest82fb21612e86
linux@5.4.0-80.90
no fix listed
1
openthread/otbr:latest35c6e6520080
linux@4.15.0-213.224
no fix listed
1
photoprism/photoprism:260601650c6ad5a651
linux@7.0.0-22.22
no fix listed
1
photoprism/photoprism:260728958642220223
linux@7.0.0-28.28
no fix listed
1
photoprism/photoprism:240711-cefc6fd632ca74
linux@6.8.0-38.38
no fix listed
1
posit/package-manager:2026.09.0-ubuntu-24.04527493ef621b
linux@6.8.0-139.139
no fix listed
1
qonstrukt/php:8.4-v8-apache089af7925aa1
linux@6.8.0-136.136
no fix listed
1
rezachalak/bzen-mongo:1.0.034f694325191
linux@5.4.0-156.173
no fix listed
1
seafileltd/seafile-mc:9.0.106693911bcc40
linux@5.4.0-135.152
no fix listed
1
seafileltd/seafile-mc:10.0.170628f29c663
linux@5.4.0-152.169
no fix listed
1
seafileltd/seafile-mc:9.0.97ac833196f60
linux@5.4.0-125.141
no fix listed
1
seafileltd/seafile-mc:11.0.12d0c66e4621bd
linux@5.15.0-118.128
no fix listed
1
seafileltd/seafile-mc:8.0.7ed0fcda5e6a9
linux@5.4.0-80.90
no fix listed
1
seldonio/locust-core:0.81d0da98a2d76
linux@4.4.0-148.174
no fix listed
1
shaowenchen/ops-controller-manager:latest35575d4f2bfe
linux@5.15.0-191.201
no fix listed
1
shaowenchen/ops-server:latest6bac5cebd125
linux@5.15.0-153.163
no fix listed
1
snipe/snipe-it:v8.3.1141ebf2386fe
linux@6.8.0-79.79
no fix listed
1
snipe/snipe-it:v6.0.1455fb7636a98c
linux@5.4.0-131.147
no fix listed
1
socialmediamacroscope/autophrase:0.1.570fb11d4f531
linux@5.4.0-163.180
no fix listed
1
someblackmagic/k8s-testing-multitool:v0.1.06eca64b6b440
linux@5.4.0-117.132
no fix listed
1
stackstorm/st2actionrunner:3.888235ba70cad
linux@5.4.0-169.187
no fix listed
1
stackstorm/st2api:3.86f56d239d280
linux@5.4.0-169.187
no fix listed
1
stackstorm/st2auth:3.833ecfda16608
linux@5.4.0-169.187
no fix listed
1
stackstorm/st2garbagecollector:3.84e3f8c7ca52d
linux@5.4.0-169.187
no fix listed
1
stackstorm/st2notifier:3.8f190a6212195
linux@5.4.0-169.187
no fix listed
1
stackstorm/st2rulesengine:3.8259503496ff9
linux@5.4.0-169.187
no fix listed
1
stackstorm/st2scheduler:3.8b1de2055c362
linux@5.4.0-169.187
no fix listed
1
stackstorm/st2sensorcontainer:3.8b1a338f64773
linux@5.4.0-169.187
no fix listed
1
stackstorm/st2stream:3.81c8904a3bf67
linux@5.4.0-169.187
no fix listed
1
stackstorm/st2timersengine:3.81bf35bfaf00c
linux@5.4.0-169.187
no fix listed
1
stackstorm/st2workflowengine:3.819fdfffdbba8
linux@5.4.0-169.187
no fix listed
1

syft 1.42.1 · advisories as of 21 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.