StackRadar

CVE-2026-96405

Unscored

Advisory

Published 21 Oct 2026In the index since 22 Oct 2026
Severity
Unscored
worst across findings
CVSS
—
base score, highest
EPSS
0.002
14th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
43
of 18,219 indexed, latest versions
Container images
55
deployed by those charts
Fix available
None
affected package

The matching OSV records carry no description.

Carried by container images the latest versions of 43 of 18,219 indexed charts deploy, on 55 images.

Affected packageAffected versionsFixed inImages
unbounddeb1.17.1-2, 1.17.1-2+deb12u2, 1.17.1-2+deb12u4, 1.22.0-2+4 moreno fix listed55
OSV records
DEBIAN-CVE-2026-96405ECHO-8e22-1547-4478

Charts affected

43 by stars
ChartLatestAffected imagesRadar Score
maildocker-postfixVerified publisher5.1.01 of 1See more

mail docker-postfix 5.1.0

1 of the 1 container images this version deploys carry CVE-2026-96405.

Container imageDigestPackageFixed in
boky/postfix:v5.1.0aafc77238423
unbound@1.22.0-2+deb13u1
no fix listed

Open the chart page →

6,620
nautobotnautobotOfficialVerified publisher3.2.01 of 1See more

nautobot nautobot 3.2.0

1 of the 1 container images this version deploys carry CVE-2026-96405.

Container imageDigestPackageFixed in
networktocode/nautobot:3.0-py3.13ed484336b1ad
unbound@1.22.0-2+deb13u1
no fix listed

Open the chart page →

5,723
smtpntppoolVerified publisher2.4.11 of 1See more

smtp ntppool 2.4.1

1 of the 1 container images this version deploys carry CVE-2026-96405.

Container imageDigestPackageFixed in
ghcr.io/egos-tech/smtp:1.2.304330a8ab3d5
unbound@1.22.0-2+deb13u1
no fix listed

Open the chart page →

2,762
dask-kubernetes-operatordask2026.3.01 of 1See more

dask-kubernetes-operator dask 2026.3.0

1 of the 1 container images this version deploys carry CVE-2026-96405.

Container imageDigestPackageFixed in
ghcr.io/dask/dask-kubernetes-operator:2026.3.03225d2bc6b3c
unbound@1.22.0-2+deb13u1
no fix listed

Open the chart page →

11,099
defectdojodefectdojo1.9.601 of 4See more

defectdojo defectdojo 1.9.60

1 of the 4 container images this version deploys carry CVE-2026-96405.

Container imageDigestPackageFixed in
defectdojo/defectdojo-django:3.4.202b1c3fc5c295f
unbound@1.26.1-0+deb13u1
no fix listed

Open the chart page →

1,929
part-dbpart-dbVerified publisher0.1.21 of 1See more

part-db part-db 0.1.2

1 of the 1 container images this version deploys carry CVE-2026-96405.

Container imageDigestPackageFixed in
jbtronics/part-db1:latestf6523ff48db1
unbound@1.17.1-2+deb12u4
no fix listed

Open the chart page →

3,485
pretixtechwolf12Verified publisher2026.8.01 of 3See more

pretix techwolf12 2026.8.0

1 of the 3 container images this version deploys carry CVE-2026-96405.

Container imageDigestPackageFixed in
pretix/standalone:2026.8.0ec17c2f761f7
unbound@1.22.0-2+deb13u3
no fix listed

Open the chart page →

10,388
anteonanteonVerified publisher2.6.41 of 13See more

anteon anteon 2.6.4

1 of the 13 container images this version deploys carry CVE-2026-96405.

Container imageDigestPackageFixed in
ddosify/selfhosted_backend:3.2.93c11e3182652
unbound@1.17.1-2+deb12u2
no fix listed

Open the chart page →

98,339
pgcagriekinVerified publisher2.5.01 of 2See more

pg cagriekin 2.5.0

1 of the 2 container images this version deploys carry CVE-2026-96405.

Container imageDigestPackageFixed in
cagriekin/pg-ha:2.2.0-pg1844ec6f90669f
unbound@1.26.1-0+deb13u1
no fix listed

Open the chart page →

2,263
pgvectorcagriekinVerified publisher2.5.01 of 3See more

pgvector cagriekin 2.5.0

1 of the 3 container images this version deploys carry CVE-2026-96405.

Container imageDigestPackageFixed in
cagriekin/pg-ha:2.2.0-pg1844ec6f90669f
unbound@1.26.1-0+deb13u1
no fix listed

Open the chart page →

4,701
cosmotech-copilot-apicosmotech-apiVerified publisher0.1.11 of 1See more

cosmotech-copilot-api cosmotech-api 0.1.1

1 of the 1 container images this version deploys carry CVE-2026-96405.

Container imageDigestPackageFixed in
ghcr.io/cosmo-tech/cosmotech-copilot-api:latesta2be95de450c
unbound@1.22.0-2+deb13u1
no fix listed

Open the chart page →

13,460
iris-webappiris-webapp0.2.41 of 2See more

iris-webapp iris-webapp 0.2.4

1 of the 2 container images this version deploys carry CVE-2026-96405.

Container imageDigestPackageFixed in
ghcr.io/dfir-iris/iriswebapp_app:v2.4.26e59ebde55709
unbound@1.22.0-2
no fix listed

Open the chart page →

13,809
prowlerprowler-appVerified publisher0.0.91 of 5See more

prowler prowler-app 0.0.9

1 of the 5 container images this version deploys carry CVE-2026-96405.

Container imageDigestPackageFixed in
prowlercloud/prowler-api:5.31.14f252d579be2
unbound@1.17.1-2+deb12u4
no fix listed

Open the chart page →

50,051
sogosogoVerified publisher0.3.51 of 2See more

sogo sogo 0.3.5

1 of the 2 container images this version deploys carry CVE-2026-96405.

Container imageDigestPackageFixed in
sonroyaalmerol/docker-sogo:5.12.43f60f3abe990
unbound@1.22.0-2+deb13u1
no fix listed

Open the chart page →

8,897
varnish-cachevarnishVerified publisher1.1.11 of 1See more

varnish-cache varnish 1.1.1

1 of the 1 container images this version deploys carry CVE-2026-96405.

Container imageDigestPackageFixed in
library/varnish:7.5.04d0bb287d87b
unbound@1.17.1-2+deb12u2
no fix listed

Open the chart page →

60,661
waldurwaldur-chartsVerified publisher8.1.31 of 3See more

waldur waldur-charts 8.1.3

1 of the 3 container images this version deploys carry CVE-2026-96405.

Container imageDigestPackageFixed in
opennode/waldur-mastermind:8.1.382e8f276c5ed
unbound@1.26.1-0+deb13u1
no fix listed

Open the chart page →

4,521
ddosifyanteonVerified publisher1.7.52 of 13See more

ddosify anteon 1.7.5

2 of the 13 container images this version deploys carry CVE-2026-96405.

Container imageDigestPackageFixed in
ddosify/selfhosted_alaz_backend:1.0.6a43c5155fa1c
unbound@1.17.1-2+deb12u2
no fix listed
ddosify/selfhosted_backend:2.6.11ac323d52bfb4
unbound@1.17.1-2+deb12u2
no fix listed

Open the chart page →

179,362
domainmoddjjudas21Verified publisher1.0.01 of 1See more

domainmod djjudas21 1.0.0

1 of the 1 container images this version deploys carry CVE-2026-96405.

Container imageDigestPackageFixed in
domainmod/domainmod:4.23.04017bfe4c597
unbound@1.17.1-2+deb12u2
no fix listed

Open the chart page →

88,652
exim4dossif0.2.01 of 1See more

exim4 dossif 0.2.0

1 of the 1 container images this version deploys carry CVE-2026-96405.

Container imageDigestPackageFixed in
tianon/exim4:latestbbaab7da8e36
unbound@1.26.1-0+deb13u1
no fix listed

Open the chart page →

800
iotaeclipse-aeriosVerified publisher1.0.21 of 4See more

iota eclipse-aerios 1.0.2

1 of the 4 container images this version deploys carry CVE-2026-96405.

Container imageDigestPackageFixed in
eclipseaerios/iota-messages-api:lateste7f5ba0bc64d
unbound@1.22.0-2
no fix listed

Open the chart page →

17,040
static-siteethersphereVerified publisher0.73.11 of 2See more

static-site ethersphere 0.73.1

1 of the 2 container images this version deploys carry CVE-2026-96405.

Container imageDigestPackageFixed in
library/node:latesta98e6fda54fd
unbound@1.26.1-0+deb13u1
no fix listed

Open the chart page →

6,292
firefly-iiifirefly-iii1.10.11 of 1See more

firefly-iii firefly-iii 1.10.1

1 of the 1 container images this version deploys carry CVE-2026-96405.

Container imageDigestPackageFixed in
fireflyiii/core:version-6.5.9fe4ecec4c2ba
unbound@1.22.0-2+deb13u1
no fix listed

Open the chart page →

5,778
firefly-iii-stackfirefly-iii0.10.22 of 4See more

firefly-iii-stack firefly-iii 0.10.2

2 of the 4 container images this version deploys carry CVE-2026-96405.

Container imageDigestPackageFixed in
fireflyiii/core:version-6.5.9fe4ecec4c2ba
unbound@1.22.0-2+deb13u1
no fix listed
fireflyiii/data-importer:version-2.2.3ab52bf932546
unbound@1.22.0-2+deb13u1
no fix listed

Open the chart page →

11,744
importerfirefly-iii1.6.01 of 1See more

importer firefly-iii 1.6.0

1 of the 1 container images this version deploys carry CVE-2026-96405.

Container imageDigestPackageFixed in
fireflyiii/data-importer:version-2.2.3ab52bf932546
unbound@1.22.0-2+deb13u1
no fix listed

Open the chart page →

5,557
business-api-ecosystemfiware1.2.01 of 4See more

business-api-ecosystem fiware 1.2.0

1 of the 4 container images this version deploys carry CVE-2026-96405.

Container imageDigestPackageFixed in
fiware/biz-ecosystem-logic-proxy:11.20.3d551a13e8278
unbound@1.17.1-2+deb12u4
no fix listed

Open the chart page →

171,843
mod-z3950folio-org0.1.31 of 1See more

mod-z3950 folio-org 0.1.3

1 of the 1 container images this version deploys carry CVE-2026-96405.

Container imageDigestPackageFixed in
folioci/mod-z3950:latest2493041ce880
unbound@1.22.0-2+deb13u1
no fix listed

Open the chart page →

2,618
frinx-machinefrinx-helm-charts11.0.01 of 26See more

frinx-machine frinx-helm-charts 11.0.0

1 of the 26 container images this version deploys carry CVE-2026-96405.

Container imageDigestPackageFixed in
frinx/resource-manager:6.1.09cd0147a09bd
unbound@1.17.1-2+deb12u2
no fix listed

Open the chart page →

126,588
resource-managerfrinx-helm-charts2.3.11 of 4See more

resource-manager frinx-helm-charts 2.3.1

1 of the 4 container images this version deploys carry CVE-2026-96405.

Container imageDigestPackageFixed in
frinx/resource-manager:6.1.09cd0147a09bd
unbound@1.17.1-2+deb12u2
no fix listed

Open the chart page →

84,283
icinga2geek-cookbookVerified publisher4.2.01 of 1See more

icinga2 geek-cookbook 4.2.0

1 of the 1 container images this version deploys carry CVE-2026-96405.

Container imageDigestPackageFixed in
jordan/icinga2:latestf75025fe8ea8
unbound@1.17.1-2+deb12u4
no fix listed

Open the chart page →

10,839
chiefonboardinghelmforgeVerified publisher1.1.171 of 3See more

chiefonboarding helmforge 1.1.17

1 of the 3 container images this version deploys carry CVE-2026-96405.

Container imageDigestPackageFixed in
chiefonboarding/chiefonboarding:v2.5.0d0964135ea82
unbound@1.22.0-2+deb13u3
no fix listed

Open the chart page →

8,810
moodlehelmforgeVerified publisher1.1.51 of 2See more

moodle helmforge 1.1.5

1 of the 2 container images this version deploys carry CVE-2026-96405.

Container imageDigestPackageFixed in
moodlehq/moodle-php-apache:8.4-bookworm922af5166835
unbound@1.17.1-2+deb12u4
no fix listed

Open the chart page →

34,592
ibexaibexaVerified publisher3.11.11 of 10See more

ibexa ibexa 3.11.1

1 of the 10 container images this version deploys carry CVE-2026-96405.

Container imageDigestPackageFixed in
boky/postfix:4.4.0f3f247fd4252
unbound@1.17.1-2+deb12u2
no fix listed

Open the chart page →

7,913
k8s-dummy-lbk8s-dummy-lb0.0.61 of 1See more

k8s-dummy-lb k8s-dummy-lb 0.0.6

1 of the 1 container images this version deploys carry CVE-2026-96405.

Container imageDigestPackageFixed in
ghcr.io/nefelim4ag/k8s-dummy-lb:0.0.6f12291f7cce5
unbound@1.26.1-0+deb13u1
no fix listed

Open the chart page →

5,037
mindsdbkronkltdVerified publisher0.1.01 of 1See more

mindsdb kronkltd 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-96405.

Container imageDigestPackageFixed in
mindsdb/mindsdb:latest163011c09299
unbound@1.22.0-2+deb13u1
no fix listed

Open the chart page →

12,170
firefly-iiikubernetes-homelab-helm-chartsVerified publisher0.1.31 of 3See more

firefly-iii kubernetes-homelab-helm-charts 0.1.3

1 of the 3 container images this version deploys carry CVE-2026-96405.

Container imageDigestPackageFixed in
fireflyiii/core:version-6.6.6ae69fdd95cde
unbound@1.22.0-2+deb13u3
no fix listed

Open the chart page →

5,444
smtplbenicio-communityVerified publisher0.1.41 of 1See more

smtp lbenicio-community 0.1.4

1 of the 1 container images this version deploys carry CVE-2026-96405.

Container imageDigestPackageFixed in
registry.gitlab.com/egos-tech/smtp:latest56b49ce6860a
unbound@1.26.1-0+deb13u1
no fix listed

Open the chart page →

859
smilencsaVerified publisher1.1.04 of 23See more

smile ncsa 1.1.0

4 of the 23 container images this version deploys carry CVE-2026-96405.

Container imageDigestPackageFixed in
socialmediamacroscope/histogram:0.1.26418f9bdb4d2
unbound@1.17.1-2
no fix listed
socialmediamacroscope/network_analysis:0.1.3b351c21422e6
unbound@1.17.1-2
no fix listed
socialmediamacroscope/preprocessing:0.1.3ca863306314b
unbound@1.17.1-2
no fix listed
socialmediamacroscope/topic_modeling:0.1.3fa490acac2f8
unbound@1.17.1-2
no fix listed

Open the chart page →

606,696
laravel-appoli-the-devVerified publisher2.1.21 of 1See more

laravel-app oli-the-dev 2.1.2

1 of the 1 container images this version deploys carry CVE-2026-96405.

Container imageDigestPackageFixed in
serversideup/php:8.5-fpm-nginxcc307f78ea04
unbound@1.26.1-0+deb13u1
no fix listed

Open the chart page →

2,111
agentpolyaxon2.18.03 of 4See more

agent polyaxon 2.18.0

3 of the 4 container images this version deploys carry CVE-2026-96405.

Container imageDigestPackageFixed in
polyaxon/polyaxon-agent:2.18.068dc11cd6f8e
unbound@1.22.0-2+deb13u3
no fix listed
polyaxon/polyaxon-cli:2.18.09cf0955704ee
unbound@1.22.0-2+deb13u3
no fix listed
polyaxon/polyaxon-streams:2.18.0a382a21aaf88
unbound@1.22.0-2+deb13u3
no fix listed

Open the chart page →

10,348
polyaxonpolyaxon2.18.03 of 5See more

polyaxon polyaxon 2.18.0

3 of the 5 container images this version deploys carry CVE-2026-96405.

Container imageDigestPackageFixed in
polyaxon/polyaxon-agent:2.18.068dc11cd6f8e
unbound@1.22.0-2+deb13u3
no fix listed
polyaxon/polyaxon-api:2.18.0b795f2b224d2
unbound@1.22.0-2+deb13u3
no fix listed
polyaxon/polyaxon-cli:2.18.09cf0955704ee
unbound@1.22.0-2+deb13u3
no fix listed

Open the chart page →

14,327
port-agentport-labsVerified publisher0.8.171 of 1See more

port-agent port-labs 0.8.17

1 of the 1 container images this version deploys carry CVE-2026-96405.

Container imageDigestPackageFixed in
ghcr.io/port-labs/port-agent:v0.8.13b49d723a99fc
unbound@1.26.1-1+e1
no fix listed

Open the chart page →

363
transmissionryuunosukeds31.7.01 of 2See more

transmission ryuunosukeds3 1.7.0

1 of the 2 container images this version deploys carry CVE-2026-96405.

Container imageDigestPackageFixed in
library/python:3.9da5aee29682d
unbound@1.22.0-2
no fix listed

Open the chart page →

11,084
servicexssl-hep1.8.610 of 16See more

servicex ssl-hep 1.8.6

10 of the 16 container images this version deploys carry CVE-2026-96405.

Container imageDigestPackageFixed in
library/python:3.10c10791e6f690
unbound@1.26.1-0+deb13u1
no fix listed
sslhep/servicex_app:v1.8.6c935e123030d
unbound@1.22.0-2+deb13u3
no fix listed
sslhep/servicex_code_gen_atlas_xaod:v1.8.67827e689caa5
unbound@1.22.0-2+deb13u3
no fix listed
sslhep/servicex_code_gen_func_adl_uproot:v1.8.62d6843be2d8d
unbound@1.22.0-2+deb13u3
no fix listed
sslhep/servicex_code_gen_python:v1.8.696805be717ff
unbound@1.22.0-2+deb13u3
no fix listed
sslhep/servicex_code_gen_raw_uproot:v1.8.61494a81a474b
unbound@1.22.0-2+deb13u3
no fix listed
sslhep/servicex_code_gen_topcp:v1.8.6f7faf8c6c3e4
unbound@1.22.0-2+deb13u3
no fix listed
sslhep/servicex-did-finder-atlasopenmagic:v1.8.6bd738c952e72
unbound@1.22.0-2+deb13u3
no fix listed
sslhep/servicex-did-finder-cernopendata:v1.8.623a80e40ab18
unbound@1.22.0-2+deb13u3
no fix listed
sslhep/servicex-did-finder-xrootd:v1.8.69a9fb17458f1
unbound@1.22.0-2+deb13u3
no fix listed

Open the chart page →

66,935

Container images carrying it

55 by charts deploying them

A fixed version is listed for 0 of the 1 affected package.

Container imageDigestPackageFixed inUsed by
ghcr.io/dfir-iris/iriswebapp_app:v2.4.26e59ebde55709
unbound@1.22.0-2
no fix listed
1
ghcr.io/egos-tech/smtp:1.2.304330a8ab3d5
unbound@1.22.0-2+deb13u1
no fix listed
1
ghcr.io/nefelim4ag/k8s-dummy-lb:0.0.6f12291f7cce5
unbound@1.26.1-0+deb13u1
no fix listed
1
ghcr.io/port-labs/port-agent:v0.8.13b49d723a99fc
unbound@1.26.1-1+e1
no fix listed
1
registry.gitlab.com/egos-tech/smtp:latest56b49ce6860a
unbound@1.26.1-0+deb13u1
no fix listed
1

syft 1.42.1 · advisories as of 22 Oct 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.