CVE-2026-97205
CriticalAdvisory
Published 14 Oct 2026In the index since 15 Oct 2026
- Severity
- Critical
- worst across findings
- CVSS
- 9.2
- base score, highest
- EPSS
- 0.004
- 37th percentile
- CISA KEV
- Not listed
- no confirmed exploitation
- Charts affected
- 224
- of 18,137 indexed, latest versions
- Container images
- 92
- deployed by those charts
- Fix available
- None
- affected package
The matching OSV records carry no description.
Carried by container images the latest versions of 224 of 18,137 indexed charts deploy, on 92 images.
| Affected package | Affected versions | Fixed in | Images |
|---|---|---|---|
| nginxdeb | 1.22.1-9, 1.22.1-9+deb12u2, 1.22.1-9+deb12u3, 1.22.1-9+deb12u10+32 more | no fix listed | 92 |
- OSV records
- DEBIAN-CVE-2026-97205
Charts affected
224 by stars
Container images carrying it
92 by charts deploying them
A fixed version is listed for 0 of the 1 affected package.
| Container image | Digest | Package | Fixed in | Used by |
|---|---|---|---|---|
| moreillon/ | 6597e6b98d21 | nginx | no fix listed | 1 |
| nginxinc/ | c5b989ebc150 | nginx | no fix listed | 1 |
| nginxinc/ | ce1317316e27 | nginx | no fix listed | 1 |
| nginx/ | 9b13f0b831ab | nginx | no fix listed | 1 |
| nginx/ | c603a5cbac85 | nginx | no fix listed | 1 |
| nirmalnaveen/ | 8541a39162f3 | nginx | no fix listed | 1 |
| passbolt/ | 1768916a04b1 | nginx | no fix listed | 1 |
| pk910/ | 3dcae6a62896 | nginx | no fix listed | 1 |
| polyaxon/ | 163707082036 | nginx | no fix listed | 1 |
| polyaxon/ | a5fec70e757b | nginx | no fix listed | 1 |
| praravind1801/ | f29d637b9ce1 | nginx | no fix listed | 1 |
| pretix/ | 5df3b7aa852e | nginx | no fix listed | 1 |
| reallibrephotos/ | 111203b9551a | nginx | no fix listed | 1 |
| redimp/ | 1435c8cc536d | nginx | no fix listed | 1 |
| rocketadmin/ | 0bd1abb0bfd1 | nginx | no fix listed | 1 |
| serversideup/ | 8f8c2f010ac5 | nginx | no fix listed | 1 |
| shamimkuet/ | b82902a76a04 | nginx | no fix listed | 1 |
| sigp/ | 2c219b04758e | nginx | no fix listed | 1 |
| somnathmore/ | bdfc06cad4ec | nginx | no fix listed | 1 |
| tinymediamanager/ | 48c15784a127 | nginx | no fix listed | 1 |
| wiktorn/ | 9bb5f4a9b54c | nginx | no fix listed | 1 |
| yetiplatform/ | 873ef15d267b | nginx | no fix listed | 1 |
| yetiplatform/ | d602b1969a64 | nginx | no fix listed | 1 |
| ghcr.io/ | 8e9d9ed499e3 | nginx | no fix listed | 1 |
| ghcr.io/ | eac1df1c5e66 | nginx | no fix listed | 1 |
| ghcr.io/ | 72f35584026d | nginx | no fix listed | 1 |
| ghcr.io/ | 246dc2160efe | nginx | no fix listed | 1 |
| ghcr.io/ | 3f4864eb7f11 | nginx | no fix listed | 1 |
| ghcr.io/ | 8e53861be292 | nginx | no fix listed | 1 |
| ghcr.io/ | fae3c1f04311 | nginx | no fix listed | 1 |
| ghcr.io/ | a1a7f507f6ae | nginx | no fix listed | 1 |
| ghcr.io/ | 4e322858fe56 | nginx | no fix listed | 1 |
| ghcr.io/ | 8e84691e08d2 | nginx | no fix listed | 1 |
| ghcr.io/ | b0b6b96adaa3 | nginx | no fix listed | 1 |
| ghcr.io/ | 0250d9cb0d74 | nginx | no fix listed | 1 |
| ghcr.io/ | e230e6ac0722 | nginx | no fix listed | 1 |
| ghcr.io/ | d19d886d5090 | nginx | no fix listed | 1 |
| ghcr.io/ | c3c1f2df6881 | nginx | no fix listed | 1 |
| public.ecr.aws/ | 0424fa47fbeb | nginx | no fix listed | 1 |
| public.ecr.aws/ | 34823c8abe00 | nginx | no fix listed | 1 |
| public.ecr.aws/ | f8fb4eea4071 | nginx | no fix listed | 1 |
| registry.gitlab.com/ | 66353ce9bf98 | nginx | no fix listed | 1 |