StackRadar

CVE-2026-95101

Medium

Advisory

Published 14 Oct 2026In the index since 15 Oct 2026
Severity
Medium
worst across findings
CVSS
5.3
base score, highest
EPSS
—
probability of exploitation
CISA KEV
Not listed
no confirmed exploitation
Charts affected
224
of 18,137 indexed, latest versions
Container images
92
deployed by those charts
Fix available
None
affected package

The matching OSV records carry no description.

Carried by container images the latest versions of 224 of 18,137 indexed charts deploy, on 92 images.

Affected packageAffected versionsFixed inImages
nginxdeb1.22.1-9, 1.22.1-9+deb12u2, 1.22.1-9+deb12u3, 1.22.1-9+deb12u10+32 moreno fix listed92
OSV records
DEBIAN-CVE-2026-95101

Charts affected

224 by stars
ChartLatestAffected imagesRadar Score
nginx-ingressnginxVerified publisher2.8.01 of 1See more

nginx-ingress nginx 2.8.0

1 of the 1 container images this version deploys carry CVE-2026-95101.

Container imageDigestPackageFixed in
nginx/nginx-ingress:5.7.0c603a5cbac85
nginx@1.31.7-1~trixie
no fix listed

Open the chart page →

1,222
zammadzammadOfficialVerified publisher19.1.51 of 5See more

zammad zammad 19.1.5

1 of the 5 container images this version deploys carry CVE-2026-95101.

Container imageDigestPackageFixed in
ghcr.io/zammad/zammad:7.2.2-0003c3c1f2df6881
nginx@1.26.3-3+deb13u9
no fix listed

Open the chart page →

6,326
clearmlallegroaiOfficialVerified publisher7.15.01 of 4See more

clearml allegroai 7.15.0

1 of the 4 container images this version deploys carry CVE-2026-95101.

Container imageDigestPackageFixed in
allegroai/clearml:2.0.0-613713ae38f7daf
nginx@1.22.1-9
no fix listed

Open the chart page →

12,322
budibasebudibase0.0.0-master1 of 7See more

budibase budibase 0.0.0-master

1 of the 7 container images this version deploys carry CVE-2026-95101.

Container imageDigestPackageFixed in
budibase/proxy:3.41.38d780b6ee602
nginx@1.31.3-1~trixie
no fix listed

Open the chart page →

12,113
cortexcortex3.5.01 of 4See more

cortex cortex 3.5.0

1 of the 4 container images this version deploys carry CVE-2026-95101.

Container imageDigestPackageFixed in
library/nginx:1.31f9ea18bfa4fa
nginx@1.31.6-1~trixie
no fix listed

Open the chart page →

4,180
nginx-ingressnginx-ingress-chartVerified publisher0.0.0-edge1 of 1See more

nginx-ingress nginx-ingress-chart 0.0.0-edge

1 of the 1 container images this version deploys carry CVE-2026-95101.

Container imageDigestPackageFixed in
nginx/nginx-ingress:edge9b13f0b831ab
nginx@1.31.6-1~trixie
no fix listed

Open the chart page →

1,222
passboltpassbolt2.2.01 of 6See more

passbolt passbolt 2.2.0

1 of the 6 container images this version deploys carry CVE-2026-95101.

Container imageDigestPackageFixed in
passbolt/passbolt:5.16.0-1-ce1768916a04b1
nginx@1.26.3-3+deb13u9
no fix listed

Open the chart page →

14,333
minecraft-overvieweralphani-helm-chartsVerified publisher0.1.01 of 3See more

minecraft-overviewer alphani-helm-charts 0.1.0

1 of the 3 container images this version deploys carry CVE-2026-95101.

Container imageDigestPackageFixed in
library/nginx:stableb972f831f200
nginx@1.30.5-1~trixie
no fix listed

Open the chart page →

4,099
qgis-serverqgis-serverVerified publisher0.1.101 of 3See more

qgis-server qgis-server 0.1.10

1 of the 3 container images this version deploys carry CVE-2026-95101.

Container imageDigestPackageFixed in
library/nginx:1.27.409369da6b103
nginx@1.27.4-1~bookworm
no fix listed

Open the chart page →

6,488
spartanspartan0.9.11 of 1See more

spartan spartan 0.9.1

1 of the 1 container images this version deploys carry CVE-2026-95101.

Container imageDigestPackageFixed in
library/nginx:latestabe47724e466
nginx@1.31.6-1~trixie
no fix listed

Open the chart page →

2,014
repmanszpadel-chartsVerified publisher3.52.171 of 3See more

repman szpadel-charts 3.52.17

1 of the 3 container images this version deploys carry CVE-2026-95101.

Container imageDigestPackageFixed in
library/nginx:1.27.3fb197595ebe7
nginx@1.27.3-1~bookworm
no fix listed

Open the chart page →

7,660
pretixtechwolf12Verified publisher2026.7.01 of 3See more

pretix techwolf12 2026.7.0

1 of the 3 container images this version deploys carry CVE-2026-95101.

Container imageDigestPackageFixed in
pretix/standalone:2026.7.05df3b7aa852e
nginx@1.26.3-3+deb13u7
no fix listed

Open the chart page →

12,784
vrijbrpvrijbrpVerified publisher0.1.51 of 5See more

vrijbrp vrijbrp 0.1.5

1 of the 5 container images this version deploys carry CVE-2026-95101.

Container imageDigestPackageFixed in
library/nginx:latestabe47724e466
nginx@1.31.6-1~trixie
no fix listed

Open the chart page →

9,159
wgerwgerOfficialVerified publisher2.0.01 of 7See more

wger wger 2.0.0

1 of the 7 container images this version deploys carry CVE-2026-95101.

Container imageDigestPackageFixed in
library/nginx:stableb972f831f200
nginx@1.30.5-1~trixie
no fix listed

Open the chart page →

9,400
commonground-gatewaycommonground-gateway1.5.41 of 7See more

commonground-gateway commonground-gateway 1.5.4

1 of the 7 container images this version deploys carry CVE-2026-95101.

Container imageDigestPackageFixed in
ghcr.io/conductionnl/gateway-ui:stag6a5594b7b32c
nginx@1.25.1-1~bookworm
no fix listed

Open the chart page →

10,265
nginx-phpfpmdrpsychickVerified publisher0.1.11 of 2See more

nginx-phpfpm drpsychick 0.1.1

1 of the 2 container images this version deploys carry CVE-2026-95101.

Container imageDigestPackageFixed in
library/nginx:latestabe47724e466
nginx@1.31.6-1~trixie
no fix listed

Open the chart page →

2,035
enbuildenbuildVerified publisher0.0.501 of 6See more

enbuild enbuild 0.0.50

1 of the 6 container images this version deploys carry CVE-2026-95101.

Container imageDigestPackageFixed in
registry.gitlab.com/enbuild-staging/vivsoft-platform-ui/enbuild-frontend:1.0.3166353ce9bf98
nginx@1.29.7-1~trixie
no fix listed

Open the chart page →

37,378
rss-bridgegabe565Verified publisher0.5.21 of 1See more

rss-bridge gabe565 0.5.2

1 of the 1 container images this version deploys carry CVE-2026-95101.

Container imageDigestPackageFixed in
ghcr.io/rss-bridge/rss-bridge:latest8e84691e08d2
nginx@1.22.1-9+deb12u10
no fix listed

Open the chart page →

2,327
hello-helmhellok8s0.1.01 of 2See more

hello-helm hellok8s 0.1.0

1 of the 2 container images this version deploys carry CVE-2026-95101.

Container imageDigestPackageFixed in
library/nginx:latestabe47724e466
nginx@1.31.6-1~trixie
no fix listed

Open the chart page →

2,219
mywebapphelm-nginxVerified publisher0.1.01 of 1See more

mywebapp helm-nginx 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-95101.

Container imageDigestPackageFixed in
library/nginx:latestabe47724e466
nginx@1.31.6-1~trixie
no fix listed

Open the chart page →

2,014
web-chartkbt-ktcloudlab0.1.01 of 1See more

web-chart kbt-ktcloudlab 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-95101.

Container imageDigestPackageFixed in
library/nginx:latestabe47724e466
nginx@1.31.6-1~trixie
no fix listed

Open the chart page →

2,014
app-componentkeltio-helm-chartsVerified publisher3.14.01 of 1See more

app-component keltio-helm-charts 3.14.0

1 of the 1 container images this version deploys carry CVE-2026-95101.

Container imageDigestPackageFixed in
library/nginx:latestabe47724e466
nginx@1.31.6-1~trixie
no fix listed

Open the chart page →

2,014
overpass-apil4gVerified publisher0.1.21 of 1See more

overpass-api l4g 0.1.2

1 of the 1 container images this version deploys carry CVE-2026-95101.

Container imageDigestPackageFixed in
wiktorn/overpass-api:latest9bb5f4a9b54c
nginx@1.29.1-1~bookworm
no fix listed

Open the chart page →

4,059
langflow-idelangflow0.1.21 of 2See more

langflow-ide langflow 0.1.2

1 of the 2 container images this version deploys carry CVE-2026-95101.

Container imageDigestPackageFixed in
langflowai/langflow-frontend:latest54f67f1961fe
nginx@1.28.0-1~bookworm
no fix listed

Open the chart page →

4,858
12factormyaVerified publisher24.1.21 of 1See more

12factor mya 24.1.2

1 of the 1 container images this version deploys carry CVE-2026-95101.

Container imageDigestPackageFixed in
library/nginx:latestabe47724e466
nginx@1.31.6-1~trixie
no fix listed

Open the chart page →

2,014
my-react-appmy-react-app0.1.51 of 1See more

my-react-app my-react-app 0.1.5

1 of the 1 container images this version deploys carry CVE-2026-95101.

Container imageDigestPackageFixed in
library/nginx:latestabe47724e466
nginx@1.31.6-1~trixie
no fix listed

Open the chart page →

2,014
nginx-chartnginx-chart-testVerified publisher0.1.11 of 1See more

nginx-chart nginx-chart-test 0.1.1

1 of the 1 container images this version deploys carry CVE-2026-95101.

Container imageDigestPackageFixed in
library/nginx:latestabe47724e466
nginx@1.31.6-1~trixie
no fix listed

Open the chart page →

2,014
nginx-s3olopostVerified publisher0.2.11 of 1See more

nginx-s3 olopost 0.2.1

1 of the 1 container images this version deploys carry CVE-2026-95101.

Container imageDigestPackageFixed in
ghcr.io/nginxinc/nginx-s3-gateway/nginx-oss-s3-gateway:unprivileged-oss3db8145349a3
nginx@1.27.2-1~bookworm
no fix listed

Open the chart page →

5,543
onechartonechart-slVerified publisher0.76.01 of 1See more

onechart onechart-sl 0.76.0

1 of the 1 container images this version deploys carry CVE-2026-95101.

Container imageDigestPackageFixed in
library/nginx:latestabe47724e466
nginx@1.31.6-1~trixie
no fix listed

Open the chart page →

2,014
opencatalogiopencatalogi1.0.62 of 8See more

opencatalogi opencatalogi 1.0.6

2 of the 8 container images this version deploys carry CVE-2026-95101.

Container imageDigestPackageFixed in
ghcr.io/conductionnl/gateway-ui:stag6a5594b7b32c
nginx@1.25.1-1~bookworm
no fix listed
ghcr.io/opencatalogi/web-app:deva1a7f507f6ae
nginx@1.27.1-1~bookworm
no fix listed

Open the chart page →

15,883
playgroundplayground0.1.11 of 1See more

playground playground 0.1.1

1 of the 1 container images this version deploys carry CVE-2026-95101.

Container imageDigestPackageFixed in
library/nginx:latestabe47724e466
nginx@1.31.6-1~trixie
no fix listed

Open the chart page →

2,014
rocketadminrocketadminOfficialVerified publisher1.0.431 of 1See more

rocketadmin rocketadmin 1.0.43

1 of the 1 container images this version deploys carry CVE-2026-95101.

Container imageDigestPackageFixed in
rocketadmin/rocketadmin:1.23.70bd1abb0bfd1
nginx@1.22.1-9+deb12u10
no fix listed

Open the chart page →

4,587
baikalrubxkubeVerified publisher1.3.11 of 1See more

baikal rubxkube 1.3.1

1 of the 1 container images this version deploys carry CVE-2026-95101.

Container imageDigestPackageFixed in
ckulka/baikal:0.10.1-nginx434bdd162247
nginx@1.29.0-1~bookworm
no fix listed

Open the chart page →

5,835
nginx-chartsomnath-chartVerified publisher0.1.91 of 1See more

nginx-chart somnath-chart 0.1.9

1 of the 1 container images this version deploys carry CVE-2026-95101.

Container imageDigestPackageFixed in
somnathmore/custom-nginx:v2bdfc06cad4ec
nginx@1.27.0-2~bookworm
no fix listed

Open the chart page →

6,177
app-fullsynkubeVerified publisher1.0.01 of 1See more

app-full synkube 1.0.0

1 of the 1 container images this version deploys carry CVE-2026-95101.

Container imageDigestPackageFixed in
library/nginx:latest6e23479198b9
nginx@1.29.8-1~trixie
no fix listed

Open the chart page →

3,888
kubedeploysysbee1.2.21 of 1See more

kubedeploy sysbee 1.2.2

1 of the 1 container images this version deploys carry CVE-2026-95101.

Container imageDigestPackageFixed in
library/nginx:latestabe47724e466
nginx@1.31.6-1~trixie
no fix listed

Open the chart page →

2,014
apptaxmd-helm-chart0.0.21 of 1See more

app taxmd-helm-chart 0.0.2

1 of the 1 container images this version deploys carry CVE-2026-95101.

Container imageDigestPackageFixed in
library/nginx:latestabe47724e466
nginx@1.31.6-1~trixie
no fix listed

Open the chart page →

2,014
tubearchivistalexmorbo-tubearchivistVerified publisher0.1.01 of 2See more

tubearchivist alexmorbo-tubearchivist 0.1.0

1 of the 2 container images this version deploys carry CVE-2026-95101.

Container imageDigestPackageFixed in
bbilly1/tubearchivist:v0.5.9b827a713f55b
nginx@1.26.3-3+deb13u1
no fix listed

Open the chart page →

6,067
nginx-sni-proxyalexpressoVerified publisher1.0.41 of 1See more

nginx-sni-proxy alexpresso 1.0.4

1 of the 1 container images this version deploys carry CVE-2026-95101.

Container imageDigestPackageFixed in
library/nginx:latestf9ea18bfa4fa
nginx@1.31.6-1~trixie
no fix listed

Open the chart page →

1,815
antrea-uiantreaVerified publisher0.8.01 of 2See more

antrea-ui antrea 0.8.0

1 of the 2 container images this version deploys carry CVE-2026-95101.

Container imageDigestPackageFixed in
antrea/antrea-ui-frontend:v0.8.0ee9686bcefb8
nginx@1.29.8-1~trixie
no fix listed

Open the chart page →

4,095
kesque-dashboardapache-pulsar-helm-chart-repo0.0.51 of 5See more

kesque-dashboard apache-pulsar-helm-chart-repo 0.0.5

1 of the 5 container images this version deploys carry CVE-2026-95101.

Container imageDigestPackageFixed in
library/nginx:latestf9ea18bfa4fa
nginx@1.31.6-1~trixie
no fix listed

Open the chart page →

4,534
appriseapprise0.2.11 of 1See more

apprise apprise 0.2.1

1 of the 1 container images this version deploys carry CVE-2026-95101.

Container imageDigestPackageFixed in
caronc/apprise:latest0b2913b15c8e
nginx@1.26.3-3+deb13u9
no fix listed

Open the chart page →

1,973
videoaugmentationassist-iot-video-augmentation0.1.01 of 3See more

videoaugmentation assist-iot-video-augmentation 0.1.0

1 of the 3 container images this version deploys carry CVE-2026-95101.

Container imageDigestPackageFixed in
library/nginx:latestf9ea18bfa4fa
nginx@1.31.6-1~trixie
no fix listed

Open the chart page →

77,755
webappavzi-webapp0.1.01 of 1See more

webapp avzi-webapp 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-95101.

Container imageDigestPackageFixed in
avzini/web-app:latestf40b30210ed0
nginx@1.25.3-1~bookworm
no fix listed

Open the chart page →

6,799
nas-appsawesomeVerified publisher2.0.01 of 8See more

nas-apps awesome 2.0.0

1 of the 8 container images this version deploys carry CVE-2026-95101.

Container imageDigestPackageFixed in
library/nginx:latestf9ea18bfa4fa
nginx@1.31.6-1~trixie
no fix listed

Open the chart page →

7,729
basic-auth-s3-nginxbasic-auth-s3-nginxVerified publisher1.0.01 of 1See more

basic-auth-s3-nginx basic-auth-s3-nginx 1.0.0

1 of the 1 container images this version deploys carry CVE-2026-95101.

Container imageDigestPackageFixed in
dachichang/basic-auth-s3-nginx:1.0.07ccac90a935e
nginx@1.25.3-1~bookworm
no fix listed

Open the chart page →

6,799
my-nginx-appbassant-nginx-app0.1.01 of 1See more

my-nginx-app bassant-nginx-app 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-95101.

Container imageDigestPackageFixed in
library/nginx:stable9bf97bd7714f
nginx@1.30.5-1~trixie
no fix listed

Open the chart page →

1,815
webappbenc-uk1.4.31 of 1See more

webapp benc-uk 1.4.3

1 of the 1 container images this version deploys carry CVE-2026-95101.

Container imageDigestPackageFixed in
library/nginx:latestabe47724e466
nginx@1.31.6-1~trixie
no fix listed

Open the chart page →

2,014
bluespacebluespace0.3.01 of 1See more

bluespace bluespace 0.3.0

1 of the 1 container images this version deploys carry CVE-2026-95101.

Container imageDigestPackageFixed in
library/nginx:latestf9ea18bfa4fa
nginx@1.31.6-1~trixie
no fix listed

Open the chart page →

1,815
tenantsbrbarmex-tenant2.0.01 of 1See more

tenants brbarmex-tenant 2.0.0

1 of the 1 container images this version deploys carry CVE-2026-95101.

Container imageDigestPackageFixed in
library/nginx:latestf9ea18bfa4fa
nginx@1.31.6-1~trixie
no fix listed

Open the chart page →

1,815

Container images carrying it

92 by charts deploying them

A fixed version is listed for 0 of the 1 affected package.

Container imageDigestPackageFixed inUsed by
library/nginx:1.31:latest:mainline:trixief9ea18bfa4fa
nginx@1.31.6-1~trixie
no fix listed
87
library/nginx:stable9bf97bd7714f
nginx@1.30.5-1~trixie
no fix listed
21
library/nginx:1.31:latest:mainline:trixieabe47724e466
nginx@1.31.6-1~trixie
no fix listed
20
library/nginx:1.27.1287ff321f9e3
nginx@1.27.1-1~bookworm
no fix listed
4
library/nginx:1.25:1.25.5a484819eb602
nginx@1.25.5-1~bookworm
no fix listed
3
opencloudeu/web-extensions:importer-1.0.06e8b2df6c5a4
nginx@1.27.4-1~bookworm
no fix listed
3
ghcr.io/conductionnl/gateway-ui:stag6a5594b7b32c
nginx@1.25.1-1~bookworm
no fix listed
3
fireflyiii/core:version-6.5.9fe4ecec4c2ba
nginx@1.28.2-1~trixie
no fix listed
2
fireflyiii/data-importer:version-2.2.3ab52bf932546
nginx@1.28.3-1~trixie
no fix listed
2
library/nginx:latest6e23479198b9
nginx@1.29.8-1~trixie
no fix listed
2
library/nginx:1.27.098f8ec75657d
nginx@1.27.0-2~bookworm
no fix listed
2
library/nginx:1.29.49dd288848f44
nginx@1.29.4-1~trixie
no fix listed
2
library/nginx:stableb972f831f200
nginx@1.30.5-1~trixie
no fix listed
2
moreillon/group-manager-front:v3.3.1c9f85db3baa5
nginx@1.27.0-2~bookworm
no fix listed
2
moreillon/user-manager-front:v5.0.3b067dbbbb6af
nginx@1.25.3-1~bookworm
no fix listed
2
nginxinc/nginx-unprivileged:stabled715f7a85cdf
nginx@1.30.5-1~trixie
no fix listed
2
opencloudeu/web-extensions:unzip-1.0.01691ad6612a3
nginx@1.27.4-1~bookworm
no fix listed
2
opencloudeu/web-extensions:draw-io-1.0.027cb9b952f0d
nginx@1.27.4-1~bookworm
no fix listed
2
opencloudeu/web-extensions:external-sites-1.0.05b176baa3694
nginx@1.27.4-1~bookworm
no fix listed
2
opencloudeu/web-extensions:progress-bars-1.0.082f888a34440
nginx@1.27.4-1~bookworm
no fix listed
2
opencloudeu/web-extensions:json-viewer-1.0.0e0ac35a9576e
nginx@1.27.4-1~bookworm
no fix listed
2
ghcr.io/nginxinc/nginx-s3-gateway/nginx-oss-s3-gateway:unprivileged-oss:unprivileged-oss-202503313db8145349a3
nginx@1.27.2-1~bookworm
no fix listed
2
allegroai/clearml:2.0.0-613713ae38f7daf
nginx@1.22.1-9
no fix listed
1
antrea/antrea-ui-frontend:v0.8.0ee9686bcefb8
nginx@1.29.8-1~trixie
no fix listed
1
avzini/web-app:latestf40b30210ed0
nginx@1.25.3-1~bookworm
no fix listed
1
bbilly1/tubearchivist:v0.5.9b827a713f55b
nginx@1.26.3-3+deb13u1
no fix listed
1
budibase/proxy:3.41.38d780b6ee602
nginx@1.31.3-1~trixie
no fix listed
1
caronc/apprise:latest0b2913b15c8e
nginx@1.26.3-3+deb13u9
no fix listed
1
ckulka/baikal:0.10.1-nginx434bdd162247
nginx@1.29.0-1~bookworm
no fix listed
1
dachichang/basic-auth-s3-nginx:1.0.07ccac90a935e
nginx@1.25.3-1~bookworm
no fix listed
1
dannielkil/book-frontend:latest937993927694
nginx@1.27.1-1~bookworm
no fix listed
1
egorz/netology-diploma-web-app:4.05627a54bd1ad
nginx@1.25.2-1~bookworm
no fix listed
1
emqx/ecp-ui:2.5.1e33e9816f147
nginx@1.27.2-1~bookworm
no fix listed
1
felipecs8/app-db-connection-test:v129e06c9c6385
nginx@1.27.2-1~bookworm
no fix listed
1
fireflyiii/core:version-6.6.6ae69fdd95cde
nginx@1.30.1-1~trixie
no fix listed
1
hazegoodlife/haaze:veggiesite50f02d2d5d4d
nginx@1.27.4-1~bookworm
no fix listed
1
hazegoodlife/haaze:milksite8d4c63169e14
nginx@1.27.4-1~bookworm
no fix listed
1
hecrom/myweatherangularclient:1.3.11bb0372939c19
nginx@1.27.0-2~bookworm
no fix listed
1
langflowai/langflow-frontend:latest54f67f1961fe
nginx@1.28.0-1~bookworm
no fix listed
1
library/nginx:1.31:1.31.5:latest:trixie05b8cb60c354
nginx@1.31.5-1~trixie
no fix listed
1
library/nginx:1.27.409369da6b103
nginx@1.27.4-1~bookworm
no fix listed
1
library/nginx:1.28146adea4768b
nginx@1.28.3-1~trixie
no fix listed
1
library/nginx:1.291881968aff6f
nginx@1.29.8-1~trixie
no fix listed
1
library/nginx:1.31.660f0d4e98656
nginx@1.31.6-1~trixie
no fix listed
1
library/nginx:1.276784fb0834aa
nginx@1.27.5-1~bookworm
no fix listed
1
library/nginx:1.25.167f9a4f10d14
nginx@1.25.1-1~bookworm
no fix listed
1
library/nginx:1.25.49ff236ed47fe
nginx@1.25.4-1~bookworm
no fix listed
1
library/nginx:1.27.3fb197595ebe7
nginx@1.27.3-1~bookworm
no fix listed
1
moreillon/camera-viewer:lateste418cc694bd5
nginx@1.29.0-1~bookworm
no fix listed
1
moreillon/group-manager-front:latest5f0a38498271
nginx@1.29.8-1~trixie
no fix listed
1

syft 1.42.1 · advisories as of 15 Oct 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.