StackRadar

CVE-2026-93749

High

Advisory

Published 18 Sept 2026In the index since 19 Sept 2026
Severity
High
worst across findings
CVSS
7.5
base score, highest
EPSS
0.004
29th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
4
of 17,832 indexed, latest versions
Container images
4
deployed by those charts
Fix available
None
affected package

The matching OSV records carry no description.

Carried by container images the latest versions of 4 of 17,832 indexed charts deploy, on 4 images.

Affected packageAffected versionsFixed inImages
node-postcssdeb8.4.31+~cs8.0.26-1, 8.4.49+~cs9.2.32-1no fix listed4
OSV records
DEBIAN-CVE-2026-93749UBUNTU-CVE-2026-93749

Charts affected

4 by stars
ChartLatestAffected imagesRadar Score
dawarichcogitriVerified publisher2.9.11 of 3See more

dawarich cogitri 2.9.1

1 of the 3 container images this version deploys carry CVE-2026-93749.

Container imageDigestPackageFixed in
freikin/dawarich:1.15.19757df73d3b4
node-postcss@8.4.49+~cs9.2.32-1
no fix listed

Open the chart page →

6,037
codehubcodehubVerified publisher6.2.181 of 5See more

codehub codehub 6.2.18

1 of the 5 container images this version deploys carry CVE-2026-93749.

Container imageDigestPackageFixed in
jupyterhub/jupyterhub:5.4.63974ba945e65
node-postcss@8.4.31+~cs8.0.26-1
no fix listed

Open the chart page →

13,605
geomapfishgeomapfish0.8.01 of 3See more

geomapfish geomapfish 0.8.0

1 of the 3 container images this version deploys carry CVE-2026-93749.

Container imageDigestPackageFixed in
camptocamp/geomapfishapp-geoportal:latestae874f70cc16
node-postcss@8.4.31+~cs8.0.26-1
no fix listed

Open the chart page →

6,393
dawarichhelmforgeVerified publisher1.0.11 of 4See more

dawarich helmforge 1.0.1

1 of the 4 container images this version deploys carry CVE-2026-93749.

Container imageDigestPackageFixed in
freikin/dawarich:1.14.511826c67e4b1
node-postcss@8.4.49+~cs9.2.32-1
no fix listed

Open the chart page →

10,891

Container images carrying it

4 by charts deploying them

A fixed version is listed for 0 of the 1 affected package.

Container imageDigestPackageFixed inUsed by
camptocamp/geomapfishapp-geoportal:latestae874f70cc16
node-postcss@8.4.31+~cs8.0.26-1
no fix listed
1
freikin/dawarich:1.14.511826c67e4b1
node-postcss@8.4.49+~cs9.2.32-1
no fix listed
1
freikin/dawarich:1.15.19757df73d3b4
node-postcss@8.4.49+~cs9.2.32-1
no fix listed
1
jupyterhub/jupyterhub:5.4.63974ba945e65
node-postcss@8.4.31+~cs8.0.26-1
no fix listed
1

syft 1.42.1 · advisories as of 23 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.