StackRadar

CVE-2026-9358

Medium

Advisory

Published 24 May 2026In the index since 5 Sept 2026
Severity
Medium
worst across findings
CVSS
4.3
base score, highest
EPSS
0.003
25th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
366
of 17,781 indexed, latest versions
Container images
379
deployed by those charts
Fix available
1 of 2
affected packages

postcss-selector-parser allows denial of service through uncontrolled AST recursion

Carried by container images the latest versions of 366 of 17,781 indexed charts deploy, on 379 images.

Affected packageAffected versionsFixed inImages
postcss-selector-parsernpm6.1.0, 6.1.1, 6.1.2, 7.1.0+2 more6.1.3, 7.1.3378
node-css-loaderdeb6.8.1+~cs14.0.17-1no fix listed1
OSV records
GHSA-w9m9-85wc-3x92UBUNTU-CVE-2026-9358

Charts affected

366 by stars
ChartLatestAffected imagesRadar Score
seerrbdclark-helm-chartsVerified publisher0.1.51 of 1See more

seerr bdclark-helm-charts 0.1.5

1 of the 1 container images this version deploys carry CVE-2026-9358.

Container imageDigestPackageFixed in
ghcr.io/seerr-team/seerr:v3.4.1f4768de5f616
postcss-selector-parser@7.1.1
7.1.3

Open the chart page →

1,991
maildevchristianhuthVerified publisher1.6.01 of 1See more

maildev christianhuth 1.6.0

1 of the 1 container images this version deploys carry CVE-2026-9358.

Container imageDigestPackageFixed in
maildev/maildev:2.2.1180ef51f65ee
postcss-selector-parser@6.1.2
6.1.3

Open the chart page →

1,143
data-fairdata354-helmVerified publisher1.1.21 of 12See more

data-fair data354-helm 1.1.2

1 of the 12 container images this version deploys carry CVE-2026-9358.

Container imageDigestPackageFixed in
ghcr.io/data-fair/notify:3c739b74dabb0
postcss-selector-parser@6.1.2
6.1.3

Open the chart page →

38,346
directusdirectus-io2.1.01 of 3See more

directus directus-io 2.1.0

1 of the 3 container images this version deploys carry CVE-2026-9358.

Container imageDigestPackageFixed in
directus/directus:12.0.29c8470ea465c
postcss-selector-parser@7.1.2
7.1.3

Open the chart page →

7,473
jellystatdjjudas21Verified publisher0.1.121 of 1See more

jellystat djjudas21 0.1.12

1 of the 1 container images this version deploys carry CVE-2026-9358.

Container imageDigestPackageFixed in
cyfershepard/jellystat:1.1.11c4e2dfa8bddf
postcss-selector-parser@7.1.1
7.1.3

Open the chart page →

1,722
domain-lockerdomain-locker0.2.81 of 3See more

domain-locker domain-locker 0.2.8

1 of the 3 container images this version deploys carry CVE-2026-9358.

Container imageDigestPackageFixed in
lissy93/domain-locker:latestd3c95edc0a8b
postcss-selector-parser@6.1.0
6.1.3

Open the chart page →

1,882
rstudiodsri-helm-charts0.1.281 of 1See more

rstudio dsri-helm-charts 0.1.28

1 of the 1 container images this version deploys carry CVE-2026-9358.

Container imageDigestPackageFixed in
ghcr.io/maastrichtu-ids/rstudio:latest981aa4c109e1
postcss-selector-parser@6.1.0
6.1.3

Open the chart page →

5,670
enbuildenbuildVerified publisher0.0.503 of 6See more

enbuild enbuild 0.0.50

3 of the 6 container images this version deploys carry CVE-2026-9358.

Container imageDigestPackageFixed in
registry.gitlab.com/enbuild-staging/vivsoft-platform-ui/enbuild-backend:1.0.31c7afac3446d6
postcss-selector-parser@7.1.1
7.1.3
registry.gitlab.com/enbuild-staging/vivsoft-platform-ui/enbuild-mq-consumer:1.0.310e3cd8c7776d
postcss-selector-parser@7.1.1
7.1.3
registry.gitlab.com/enbuild-staging/vivsoft-platform-ui/enbuild-user:1.0.31d8a9cd4e1ae3
postcss-selector-parser@7.1.1
7.1.3

Open the chart page →

31,510
ethereumjsethereum-helm-chartsVerified publisher0.1.21 of 2See more

ethereumjs ethereum-helm-charts 0.1.2

1 of the 2 container images this version deploys carry CVE-2026-9358.

Container imageDigestPackageFixed in
ethpandaops/ethereumjs:masterfb84b718500f
postcss-selector-parser@6.1.0
6.1.3

Open the chart page →

1,442
iobrokereugen0.2.61 of 1See more

iobroker eugen 0.2.6

1 of the 1 container images this version deploys carry CVE-2026-9358.

Container imageDigestPackageFixed in
ghcr.io/buanet/iobroker:v9.1.2ca7dc7362968
postcss-selector-parser@6.1.0
6.1.3

Open the chart page →

11,458
ghostfolioghostfolioVerified publisher0.5.41 of 3See more

ghostfolio ghostfolio 0.5.4

1 of the 3 container images this version deploys carry CVE-2026-9358.

Container imageDigestPackageFixed in
ghostfolio/ghostfolio:3.7.0e3c6ab53e49b
postcss-selector-parser@7.1.1
7.1.3

Open the chart page →

3,123
globalpingglobalpingVerified publisher1.0.111 of 1See more

globalping globalping 1.0.11

1 of the 1 container images this version deploys carry CVE-2026-9358.

Container imageDigestPackageFixed in
globalping/globalping-probe:latest8acbd23009fd
postcss-selector-parser@7.1.1
7.1.3

Open the chart page →

518
ghostgroundhog2k0.212.121 of 1See more

ghost groundhog2k 0.212.12

1 of the 1 container images this version deploys carry CVE-2026-9358.

Container imageDigestPackageFixed in
library/ghost:6.63.0e05bc1169fb2
postcss-selector-parser@7.1.1
7.1.3

Open the chart page →

2,000
huehue1.0.31 of 3See more

hue hue 1.0.3

1 of the 3 container images this version deploys carry CVE-2026-9358.

Container imageDigestPackageFixed in
gethue/hue:latest7d5c1b9f8a79
postcss-selector-parser@7.1.1
7.1.3

Open the chart page →

12,397
immichimmich-helm0.3.01 of 4See more

immich immich-helm 0.3.0

1 of the 4 container images this version deploys carry CVE-2026-9358.

Container imageDigestPackageFixed in
ghcr.io/immich-app/immich-server:v2.3.1f8d06a32b1b2
postcss-selector-parser@7.1.0
7.1.3

Open the chart page →

15,712
kenerkenerVerified publisher0.2.01 of 1See more

kener kener 0.2.0

1 of the 1 container images this version deploys carry CVE-2026-9358.

Container imageDigestPackageFixed in
rajnandan1/kener:3.2.1930407afca731
postcss-selector-parser@6.1.2
6.1.3

Open the chart page →

5,228
kikplatekikplateVerified publisher0.22.01 of 3See more

kikplate kikplate 0.22.0

1 of the 3 container images this version deploys carry CVE-2026-9358.

Container imageDigestPackageFixed in
ghcr.io/kikplate/kikplate-web:main34bbb61e8e42
postcss-selector-parser@7.1.1
7.1.3

Open the chart page →

2,770
kube-ingress-dash-chartkube-ingress-dashVerified publisher0.3.11 of 1See more

kube-ingress-dash-chart kube-ingress-dash 0.3.1

1 of the 1 container images this version deploys carry CVE-2026-9358.

Container imageDigestPackageFixed in
ghcr.io/wasilak/kube-ingress-dash:0.3.1ff55992f905c
postcss-selector-parser@7.1.0
7.1.3

Open the chart page →

1,505
chibisafel4gVerified publisher0.1.12 of 3See more

chibisafe l4g 0.1.1

2 of the 3 container images this version deploys carry CVE-2026-9358.

Container imageDigestPackageFixed in
chibisafe/chibisafe:latest836467a50792
postcss-selector-parser@6.1.0
6.1.3
chibisafe/chibisafe-server:latest3da4fcbc1a18
postcss-selector-parser@6.1.0
6.1.3

Open the chart page →

5,654
litellmlitellm-helm0.2.01 of 1See more

litellm litellm-helm 0.2.0

1 of the 1 container images this version deploys carry CVE-2026-9358.

Container imageDigestPackageFixed in
ghcr.io/berriai/litellm-database:litellm_stable_release_branch-v1.75.5-stableab63d26a8a2c
postcss-selector-parser@7.1.0
7.1.3

Open the chart page →

4,292
litlyxlitlyx0.2.03 of 5See more

litlyx litlyx 0.2.0

3 of the 5 container images this version deploys carry CVE-2026-9358.

Container imageDigestPackageFixed in
litlyx/litlyx-consumer:latest02225e77d316
postcss-selector-parser@7.1.0
7.1.3
litlyx/litlyx-dashboard:lateste64ff2d52385
postcss-selector-parser@7.1.0
7.1.3
litlyx/litlyx-producer:latest10407f36613f
postcss-selector-parser@7.1.0
7.1.3

Open the chart page →

7,874
food-managermoreillonVerified publisher0.5.01 of 2See more

food-manager moreillon 0.5.0

1 of the 2 container images this version deploys carry CVE-2026-9358.

Container imageDigestPackageFixed in
moreillon/food-manager:lateste8fd856e593d
postcss-selector-parser@6.1.0
6.1.3

Open the chart page →

13,738
n8nn8n-helm2.25.71 of 1See more

n8n n8n-helm 2.25.7

1 of the 1 container images this version deploys carry CVE-2026-9358.

Container imageDigestPackageFixed in
n8nio/n8n:2.25.7761374d4eb84
postcss-selector-parser@7.1.1
7.1.3

Open the chart page →

2,575
oadaoadaVerified publisher5.0.510 of 11See more

oada oada 5.0.5

10 of the 11 container images this version deploys carry CVE-2026-9358.

Container imageDigestPackageFixed in
oada/auth:4.0.0c0d077e79ef4
postcss-selector-parser@7.1.0
7.1.3
oada/http-handler:4.0.0d87efe8ba4b0
postcss-selector-parser@7.1.0
7.1.3
oada/rev-graph-update:4.0.0ebc8343f05ff
postcss-selector-parser@7.1.0
7.1.3
oada/shares:4.0.0c6ffb4e8ed63
postcss-selector-parser@7.1.0
7.1.3
oada/startup:4.0.0fc09495e2f3c
postcss-selector-parser@7.1.0
7.1.3
oada/sync-handler:4.0.0b7a2cfc137cf
postcss-selector-parser@7.1.0
7.1.3
oada/users:4.0.0b6c562fa5b1b
postcss-selector-parser@7.1.0
7.1.3
oada/webhooks:4.0.06590c60de347
postcss-selector-parser@7.1.0
7.1.3
oada/well-known:4.0.07943fde43b19
postcss-selector-parser@7.1.0
7.1.3
oada/write-handler:4.0.08464c7f48aae
postcss-selector-parser@7.1.0
7.1.3

Open the chart page →

13,317
dashdotoben01Verified publisher1.5.01 of 1See more

dashdot oben01 1.5.0

1 of the 1 container images this version deploys carry CVE-2026-9358.

Container imageDigestPackageFixed in
mauricenino/dashdot:5.9.2236997816917
postcss-selector-parser@6.1.0
6.1.3

Open the chart page →

1,238
kuttone-acre-fundVerified publisher0.2.51 of 1See more

kutt one-acre-fund 0.2.5

1 of the 1 container images this version deploys carry CVE-2026-9358.

Container imageDigestPackageFixed in
kutt/kutt:latestfa3d24a89b04
postcss-selector-parser@7.1.1
7.1.3

Open the chart page →

454
openccuopenccuVerified publisher3.89.81 of 1See more

openccu openccu 3.89.8

1 of the 1 container images this version deploys carry CVE-2026-9358.

Container imageDigestPackageFixed in
ghcr.io/openccu/openccu:3.89.8.20260719b2de2ff6e8e0
postcss-selector-parser@7.1.0
7.1.3

Open the chart page →

1,916
openvaultopenvaultVerified publisher0.8.11 of 2See more

openvault openvault 0.8.1

1 of the 2 container images this version deploys carry CVE-2026-9358.

Container imageDigestPackageFixed in
ghcr.io/wgbh-mla/ov-frontend:v1.1.0bfc3118f6565
postcss-selector-parser@7.1.0
7.1.3

Open the chart page →

6,873
uptime-kumapascaliskeVerified publisher3.0.01 of 1See more

uptime-kuma pascaliske 3.0.0

1 of the 1 container images this version deploys carry CVE-2026-9358.

Container imageDigestPackageFixed in
louislam/uptime-kuma:2.0.2-slim-rootless9865163f92c1
postcss-selector-parser@6.1.0
6.1.3

Open the chart page →

6,883
patchworkpatchworkVerified publisher0.8.61 of 2See more

patchwork patchwork 0.8.6

1 of the 2 container images this version deploys carry CVE-2026-9358.

Container imageDigestPackageFixed in
ghcr.io/bryopsida/patchwork:mainc01e018bced4
postcss-selector-parser@6.1.2
6.1.3

Open the chart page →

2,083
peertubepeertubeVerified publisher0.1.31 of 1See more

peertube peertube 0.1.3

1 of the 1 container images this version deploys carry CVE-2026-9358.

Container imageDigestPackageFixed in
chocobozzz/peertube:v8.1.5052712130691
postcss-selector-parser@6.1.0
6.1.3

Open the chart page →

7,035
portraitportraitVerified publisher0.2.131 of 8See more

portrait portrait 0.2.13

1 of the 8 container images this version deploys carry CVE-2026-9358.

Container imageDigestPackageFixed in
treskon/portrait-ui:DEV-lateste7970783bc8d
postcss-selector-parser@7.1.1
7.1.3

Open the chart page →

31,844
prowlerprowler-appVerified publisher0.0.91 of 5See more

prowler prowler-app 0.0.9

1 of the 5 container images this version deploys carry CVE-2026-9358.

Container imageDigestPackageFixed in
prowlercloud/prowler-ui:5.31.179ee83c8e702
postcss-selector-parser@7.1.0
7.1.3

Open the chart page →

8,158
psa-restricted-patcherpsa-restricted-patcherVerified publisher0.10.11 of 1See more

psa-restricted-patcher psa-restricted-patcher 0.10.1

1 of the 1 container images this version deploys carry CVE-2026-9358.

Container imageDigestPackageFixed in
ghcr.io/bryopsida/psa-restricted-patcher:maina53ef16b024a
postcss-selector-parser@7.1.0
7.1.3

Open the chart page →

1,401
rocketadminrocketadminOfficialVerified publisher1.0.421 of 1See more

rocketadmin rocketadmin 1.0.42

1 of the 1 container images this version deploys carry CVE-2026-9358.

Container imageDigestPackageFixed in
rocketadmin/rocketadmin:1.17.710955ef540b9
postcss-selector-parser@7.1.1
7.1.3

Open the chart page →

5,482
jellyseerrrtomik-helm-chartsVerified publisher0.0.11 of 1See more

jellyseerr rtomik-helm-charts 0.0.1

1 of the 1 container images this version deploys carry CVE-2026-9358.

Container imageDigestPackageFixed in
ghcr.io/fallenbagel/jellyseerr:2.5.22a611369ad1d
postcss-selector-parser@6.1.2
6.1.3

Open the chart page →

2,823
kyoorubxkubeVerified publisher0.1.101 of 9See more

kyoo rubxkube 0.1.10

1 of the 9 container images this version deploys carry CVE-2026-9358.

Container imageDigestPackageFixed in
ghcr.io/zoriya/kyoo_front:4.7.1d7f76c9c65d9
postcss-selector-parser@6.1.0
6.1.3

Open the chart page →

30,234
uptime-kumasb-helm-charts0.4.01 of 1See more

uptime-kuma sb-helm-charts 0.4.0

1 of the 1 container images this version deploys carry CVE-2026-9358.

Container imageDigestPackageFixed in
louislam/uptime-kuma:2.0.24c364ef96aad
postcss-selector-parser@6.1.0
6.1.3

Open the chart page →

38,107
immichsecustorVerified publisher2.0.41 of 1See more

immich secustor 2.0.4

1 of the 1 container images this version deploys carry CVE-2026-9358.

Container imageDigestPackageFixed in
ghcr.io/immich-app/immich-server:v3.2.0ae13784ffcfc
postcss-selector-parser@7.1.1
7.1.3

Open the chart page →

3,059
karakeepself-hosters-by-nightVerified publisher2.5.11 of 1See more

karakeep self-hosters-by-night 2.5.1

1 of the 1 container images this version deploys carry CVE-2026-9358.

Container imageDigestPackageFixed in
ghcr.io/karakeep-app/karakeep:0.27.1abd7d6b11b1b
postcss-selector-parser@7.1.0
7.1.3

Open the chart page →

5,213
speckle-serverspeckleVerified publisher2.26.31 of 4See more

speckle-server speckle 2.26.3

1 of the 4 container images this version deploys carry CVE-2026-9358.

Container imageDigestPackageFixed in
speckle/speckle-preview-service:2.26.3092384dba45d
postcss-selector-parser@6.1.0
6.1.3

Open the chart page →

10,380
stackradar-scannerstackradarVerified publisher0.3.01 of 1See more

stackradar-scanner stackradar 0.3.0

1 of the 1 container images this version deploys carry CVE-2026-9358.

Container imageDigestPackageFixed in
ghcr.io/lockdep/stackradar-scanner:0.3.0dd8a35d50c2d
postcss-selector-parser@7.1.1
7.1.3

Open the chart page →

1,209
stornxstornxVerified publisher1.1.11 of 9See more

stornx stornx 1.1.1

1 of the 9 container images this version deploys carry CVE-2026-9358.

Container imageDigestPackageFixed in
alazidis/stornx:1.1.1602d4f7f090c
postcss-selector-parser@7.1.1
7.1.3

Open the chart page →

11,574
supabasesupabse0.8.03 of 11See more

supabase supabse 0.8.0

3 of the 11 container images this version deploys carry CVE-2026-9358.

Container imageDigestPackageFixed in
supabase/postgres-meta:v0.96.6a84cc713585e
postcss-selector-parser@6.1.0
6.1.3
supabase/storage-api:v1.60.4c8eb9858eafe
postcss-selector-parser@7.1.1
7.1.3
supabase/studio:2026.08.03-sha-022b374606aca9fdaa7
postcss-selector-parser@7.1.1
7.1.3

Open the chart page →

18,075
unitycatalogunitycatalogVerified publisher0.0.21 of 4See more

unitycatalog unitycatalog 0.0.2

1 of the 4 container images this version deploys carry CVE-2026-9358.

Container imageDigestPackageFixed in
ghcr.io/sdwbgn/unitycatalog-helm/docker/unitycatalog-ui:0.2.1-5d668c1ed07e7ca098d
postcss-selector-parser@6.1.2
6.1.3

Open the chart page →

12,581
vaultwarden-kubernetes-secretsvaultwarden-kubernetes-secrets0.0.0-main1 of 2See more

vaultwarden-kubernetes-secrets vaultwarden-kubernetes-secrets 0.0.0-main

1 of the 2 container images this version deploys carry CVE-2026-9358.

Container imageDigestPackageFixed in
ghcr.io/antoniolago/vaultwarden-kubernetes-secrets:0.0.0-main13e267ad7d94
postcss-selector-parser@6.1.0
6.1.3

Open the chart page →

4,010
devportal-admin-uiveecode-platformVerified publisher0.5.41 of 1See more

devportal-admin-ui veecode-platform 0.5.4

1 of the 1 container images this version deploys carry CVE-2026-9358.

Container imageDigestPackageFixed in
veecode/devportal-admin-ui:0.4.30c69fd286b489
postcss-selector-parser@6.1.0
6.1.3

Open the chart page →

5,225
wachdwachdVerified publisher0.4.371 of 1See more

wachd wachd 0.4.37

1 of the 1 container images this version deploys carry CVE-2026-9358.

Container imageDigestPackageFixed in
ghcr.io/wachd/wachd:0.4.1805b05c56da94
postcss-selector-parser@7.1.1
7.1.3

Open the chart page →

1,269
wikiwenerme2.2.01 of 2See more

wiki wenerme 2.2.0

1 of the 2 container images this version deploys carry CVE-2026-9358.

Container imageDigestPackageFixed in
requarks/wiki:latest68f0d1848261
postcss-selector-parser@7.1.1
7.1.3

Open the chart page →

3,833
wraftwraft0.1.121 of 9See more

wraft wraft 0.1.12

1 of the 9 container images this version deploys carry CVE-2026-9358.

Container imageDigestPackageFixed in
quay.io/wraft/wraft-frontend:latestf1bbbd5e9bb9
postcss-selector-parser@6.1.2
6.1.3

Open the chart page →

10,090

Container images carrying it

379 by charts deploying them

A fixed version is listed for 1 of the 2 affected packages.

Container imageDigestPackageFixed inUsed by
ghcr.io/jens-maus/raspberrymatic:3.83.6.202508244b22b4f407c4
postcss-selector-parser@6.1.2
6.1.3
1
ghcr.io/jmberesford/retrom-service:retrom-v0.7.144d763d58f11d
postcss-selector-parser@6.1.0
6.1.3
1
ghcr.io/jordan-dalby/bytestash:1.5.12eb4f736b8cd4
postcss-selector-parser@7.1.1
7.1.3
1
ghcr.io/kadajett/podscope:0.2.3eeedf17112d7
postcss-selector-parser@6.1.0
6.1.3
1
ghcr.io/karakeep-app/karakeep:0.27.1abd7d6b11b1b
postcss-selector-parser@7.1.0
7.1.3
1
ghcr.io/karakeep-app/karakeep:0.33.2b069e4307dec
postcss-selector-parser@7.1.1
7.1.3
1
ghcr.io/karakeep-app/karakeep:0.26.0f575a34ed3f8
postcss-selector-parser@6.1.2
6.1.3
1
ghcr.io/kikplate/kikplate-web:main34bbb61e8e42
postcss-selector-parser@7.1.1
7.1.3
1
ghcr.io/kubiyabot/agent-manager:v0.4.13757bdd779345
postcss-selector-parser@6.1.0
6.1.3
1
ghcr.io/lerentis/bitwarden-crd-operator:0.17.00a608c6ead85
postcss-selector-parser@7.1.1
7.1.3
1
ghcr.io/linkwarden/linkwarden:v2.16.30664c28a039b
postcss-selector-parser@7.1.1
7.1.3
1
ghcr.io/linuxserver/pairdrop:version-v1.11.23279d2d986c0
postcss-selector-parser@7.1.0
7.1.3
1
ghcr.io/lockdep/stackradar-scanner:0.3.0dd8a35d50c2d
postcss-selector-parser@7.1.1
7.1.3
1
ghcr.io/logtide-dev/logtide-backend:1.0.265463e02f887
postcss-selector-parser@6.1.0
6.1.3
1
ghcr.io/logtide-dev/logtide-frontend:1.0.22a7da1451f86
postcss-selector-parser@6.1.0
6.1.3
1
ghcr.io/maastrichtu-ids/rstudio:latest981aa4c109e1
postcss-selector-parser@6.1.0
6.1.3
1
ghcr.io/manzil-infinity180/backend-dumpstore:226f28ca3efa6d3691044813cd09085e28d4a7b496c90cf82fdd
postcss-selector-parser@6.1.0
6.1.3
1
ghcr.io/manzil-infinity180/frontend-dumpstore:226f28ca3efa6d3691044813cd09085e28d4a7b44e6394b715d9
postcss-selector-parser@6.1.0
6.1.3
1
ghcr.io/marcuwynu23/express-typescript-sample:latest9ef671b78ea8
postcss-selector-parser@7.1.1
7.1.3
1
ghcr.io/mcwarman/backstage-sample-app/backend:main07aba09a594f
postcss-selector-parser@6.1.0
6.1.3
1
ghcr.io/michaelhaigh/pacman:latestb0931b1f085d
postcss-selector-parser@7.1.1
7.1.3
1
ghcr.io/microboxlabs/miot-docs:latest0307d2fd9f5c
postcss-selector-parser@7.1.1
7.1.3
1
ghcr.io/microboxlabs/miot-docs:lateste09d92c61f43
postcss-selector-parser@7.1.1
7.1.3
1
ghcr.io/multica-ai/multica-web:v0.4.43fc937fbbf8e5
postcss-selector-parser@7.1.1
7.1.3
1
ghcr.io/ondrejsika/counter-frontend:latestc4166d2eb8eb
postcss-selector-parser@7.1.0
7.1.3
1
ghcr.io/openccu/openccu:3.89.8.20260719b2de2ff6e8e0
postcss-selector-parser@7.1.0
7.1.3
1
ghcr.io/openclaw/openclaw:2026.6.10af7ea052cf21
postcss-selector-parser@7.1.1
7.1.3
1
ghcr.io/openclaw/openclaw:2026.5.22dcfd14877740
postcss-selector-parser@7.1.1
7.1.3
1
ghcr.io/openlit/openlit:1.24.02434560e8f0e
postcss-selector-parser@6.1.0
6.1.3
1
ghcr.io/open-telemetry/demo:1.12.0-frontend8b348f00ca4c
postcss-selector-parser@6.1.0
6.1.3
1
ghcr.io/open-telemetry/demo:1.12.0-flagduif6bdafaa9075
postcss-selector-parser@6.1.0
6.1.3
1
ghcr.io/pabloromeo/clusterplex_orchestrator:1.4.160fe80de2d22c
postcss-selector-parser@7.1.0
7.1.3
1
ghcr.io/radar-base/radar-self-enrolment-ui:0.1.0b9a7cd3cc099
postcss-selector-parser@7.1.0
7.1.3
1
ghcr.io/rajnandan1/kener:3.2.182b993cb232eb
postcss-selector-parser@6.1.2
6.1.3
1
ghcr.io/sct/overseerr:1.35.06197516c9d7b
postcss-selector-parser@6.1.0
6.1.3
1
ghcr.io/sdwbgn/unitycatalog-helm/docker/unitycatalog-ui:0.2.1-5d668c1ed07e7ca098d
postcss-selector-parser@6.1.2
6.1.3
1
ghcr.io/seerr-team/seerr:v3.2.0c4cbd5121236
postcss-selector-parser@7.1.0
7.1.3
1
ghcr.io/shuguet/pacman:latesta0ec71732c3c
postcss-selector-parser@7.1.1
7.1.3
1
ghcr.io/solucteam/outscale-s3-explorer:v1.0.09665c3e71889
postcss-selector-parser@6.1.0
6.1.3
1
ghcr.io/tale/headplane:0.5.50dbc52cffc19
postcss-selector-parser@6.1.2
6.1.3
1
ghcr.io/theconnman/docker-hub-rss:0.6.238eba84b2be8
postcss-selector-parser@7.1.0
7.1.3
1
ghcr.io/theduffman85/crowdsec-web-ui:2026.8.3bfadbab9a72c
postcss-selector-parser@7.1.1
7.1.3
1
ghcr.io/toeverything/affine:0.27.4b649f5ce2384
postcss-selector-parser@7.1.1
7.1.3
1
ghcr.io/trieb-work/saleor-apps/saleor-app-products-feed:1.23.11d435b4ab372
postcss-selector-parser@6.1.2
6.1.3
1
ghcr.io/trieb-work/saleor-apps/saleor-app-search:1.24.328edefb6c92d
postcss-selector-parser@6.1.2
6.1.3
1
ghcr.io/trieb-work/saleor-apps/saleor-app-smtp:1.4.357a06bfba327
postcss-selector-parser@6.1.2
6.1.3
1
ghcr.io/umami-software/umami:3.0.328f263fe06f7
postcss-selector-parser@7.1.0
7.1.3
1
ghcr.io/umami-software/umami:postgresql-v2.20.173ca19b41745
postcss-selector-parser@7.1.0
7.1.3
1
ghcr.io/umami-software/umami:3.1.0e3f80c0625aa
postcss-selector-parser@7.1.1
7.1.3
1
ghcr.io/wachd/wachd:0.4.1805b05c56da94
postcss-selector-parser@7.1.1
7.1.3
1

syft 1.42.1 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.