StackRadar

CVE-2026-97688

Medium

Advisory

Published 29 Sept 2026In the index since 1 Oct 2026
Severity
Medium
worst across findings
CVSS
6.9
base score, highest
EPSS
0.003
20th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
577
of 17,966 indexed, latest versions
Container images
435
deployed by those charts
Fix available
1 of 3
affected packages

urllib3: Chunked Deflate streaming can enter an infinite loop

Carried by container images the latest versions of 577 of 17,966 indexed charts deploy, on 435 images.

Affected packageAffected versionsFixed inImages
urllib3pypi2.6.2, 2.6.3, 2.7.02.8.0298
python-pipdeb1.5.4-1ubuntu4, 8.1.1-2ubuntu0.4, 9.0.1-2.3~ubuntu1, 9.0.1-2.3~ubuntu1.18.04.1+23 moreno fix listed114
python-urllib3deb1.7.1-1build1, 1.7.1-1ubuntu4, 1.13.1-2ubuntu0.16.04.1, 1.13.1-2ubuntu0.16.04.2+12 moreno fix listed62
OSV records
GHSA-gh4c-6fx4-qh6gUBUNTU-CVE-2026-97688

Charts affected

577 by stars
ChartLatestAffected imagesRadar Score
kube-prometheus-stackprometheus-communityOfficialVerified publisher91.8.21 of 6See more

kube-prometheus-stack prometheus-community 91.8.2

1 of the 6 container images this version deploys carry CVE-2026-97688.

Container imageDigestPackageFixed in
quay.io/kiwigrid/k8s-sidecar:2.11.22912be006f62
urllib3@2.7.0
2.8.0

Open the chart page →

399
lokigrafana7.3.01 of 6See more

loki grafana 7.3.0

1 of the 6 container images this version deploys carry CVE-2026-97688.

Container imageDigestPackageFixed in
quay.io/kiwigrid/k8s-sidecar:2.5.0a6b3f707f883
urllib3@2.6.3
2.8.0

Open the chart page →

4,162
jenkinsjenkinsciOfficialVerified publisher5.9.641 of 2See more

jenkins jenkinsci 5.9.64

1 of the 2 container images this version deploys carry CVE-2026-97688.

Container imageDigestPackageFixed in
quay.io/kiwigrid/k8s-sidecar:2.11.22912be006f62
urllib3@2.7.0
2.8.0

Open the chart page →

2,943
pgadmin4runixVerified publisher1.70.41 of 1See more

pgadmin4 runix 1.70.4

1 of the 1 container images this version deploys carry CVE-2026-97688.

Container imageDigestPackageFixed in
dpage/pgadmin4:9.18c332c5f6dfba
urllib3@2.7.0
2.8.0

Open the chart page →

57
authentikgoauthentikOfficialVerified publisher2026.8.31 of 1See more

authentik goauthentik 2026.8.3

1 of the 1 container images this version deploys carry CVE-2026-97688.

Container imageDigestPackageFixed in
ghcr.io/goauthentik/server:2026.8.3ab9b4e8cc4ab
urllib3@2.7.0
2.8.0

Open the chart page →

1,322
jupyterhubjupyterhubOfficialVerified publisher4.4.22 of 7See more

jupyterhub jupyterhub 4.4.2

2 of the 7 container images this version deploys carry CVE-2026-97688.

Container imageDigestPackageFixed in
quay.io/jupyterhub/k8s-hub:4.4.2108fbb01c3fe
urllib3@2.7.0
2.8.0
quay.io/jupyterhub/k8s-singleuser-sample:4.4.265e1b09fc8c9
urllib3@2.7.0
2.8.0

Open the chart page →

8,992
argocd-image-updaterargoOfficialVerified publisher1.3.11 of 1See more

argocd-image-updater argo 1.3.1

1 of the 1 container images this version deploys carry CVE-2026-97688.

Container imageDigestPackageFixed in
quay.io/argoprojlabs/argocd-image-updater:v1.3.0cb009167015c
urllib3@2.7.0
2.8.0

Open the chart page →

820
victoria-metrics-k8s-stackvictoriametricsVerified publisher0.95.01 of 7See more

victoria-metrics-k8s-stack victoriametrics 0.95.0

1 of the 7 container images this version deploys carry CVE-2026-97688.

Container imageDigestPackageFixed in
quay.io/kiwigrid/k8s-sidecar:2.11.22912be006f62
urllib3@2.7.0
2.8.0

Open the chart page →

832
mlflowcommunity-chartsVerified publisher1.11.71 of 1See more

mlflow community-charts 1.11.7

1 of the 1 container images this version deploys carry CVE-2026-97688.

Container imageDigestPackageFixed in
burakince/mlflow:3.16.0ab4b566644b9
urllib3@2.7.0
2.8.0

Open the chart page →

973
maildocker-postfixVerified publisher5.1.01 of 1See more

mail docker-postfix 5.1.0

1 of the 1 container images this version deploys carry CVE-2026-97688.

Container imageDigestPackageFixed in
boky/postfix:v5.1.0aafc77238423
urllib3@2.6.2
2.8.0

Open the chart page →

6,264
datahubdatahubVerified publisher1.1.51 of 4See more

datahub datahub 1.1.5

1 of the 4 container images this version deploys carry CVE-2026-97688.

Container imageDigestPackageFixed in
acryldata/datahub-actions:v1.7.0.1c5fd70130157
urllib3@2.7.0
2.8.0

Open the chart page →

1,247
semaphoresemaphoreuiOfficialVerified publisher16.2.21 of 1See more

semaphore semaphoreui 16.2.2

1 of the 1 container images this version deploys carry CVE-2026-97688.

Container imageDigestPackageFixed in
semaphoreui/semaphore:v2.18.3e9260bfa8255
urllib3@2.7.0
2.8.0

Open the chart page →

2,610
weblateweblateOfficialVerified publisher0.5.381 of 3See more

weblate weblate 0.5.38

1 of the 3 container images this version deploys carry CVE-2026-97688.

Container imageDigestPackageFixed in
weblate/weblate:2026.9.1.2f0be5b122b38
urllib3@2.7.0
2.8.0

Open the chart page →

7,338
difydoubanVerified publisher0.10.01 of 6See more

dify douban 0.10.0

1 of the 6 container images this version deploys carry CVE-2026-97688.

Container imageDigestPackageFixed in
langgenius/dify-plugin-daemon:0.5.1-local8269050f192e
python-pip@24.0+dfsg-1ubuntu1.3
no fix listed

Open the chart page →

81,052
stackgres-operatorstackgres-chartsOfficialVerified publisher1.19.21 of 2See more

stackgres-operator stackgres-charts 1.19.2

1 of the 2 container images this version deploys carry CVE-2026-97688.

Container imageDigestPackageFixed in
quay.io/stackgres/operator:1.19.282f33ab3fb1e
urllib3@2.7.0
2.8.0

Open the chart page →

2,370
pulsarapache4.7.02 of 10See more

pulsar apache 4.7.0

2 of the 10 container images this version deploys carry CVE-2026-97688.

Container imageDigestPackageFixed in
alpine/k8s:1.32.12048f8d9c8cc7
urllib3@2.6.3
2.8.0
quay.io/kiwigrid/k8s-sidecar:2.5.0a6b3f707f883
urllib3@2.6.3
2.8.0

Open the chart page →

10,237
difydify-helmVerified publisher0.38.04 of 11See more

dify dify-helm 0.38.0

4 of the 11 container images this version deploys carry CVE-2026-97688.

Container imageDigestPackageFixed in
langgenius/dify-agent-backend:1.16.1097d3fd27a7b
urllib3@2.7.0
2.8.0
langgenius/dify-api:1.16.1dcefa5f7c47c
urllib3@2.7.0
2.8.0
langgenius/dify-plugin-daemon:0.6.3-local3c694329357b
python-pip@24.0+dfsg-1ubuntu1.3
urllib3@2.7.0
no fix listed
2.8.0
langgenius/dify-sandbox:0.2.15750e1111426e
urllib3@2.6.3
2.8.0

Open the chart page →

71,370
wazuhwazuh-helm-morgovedVerified publisher2.0.71 of 5See more

wazuh wazuh-helm-morgoved 2.0.7

1 of the 5 container images this version deploys carry CVE-2026-97688.

Container imageDigestPackageFixed in
wazuh/wazuh-manager:4.14.3f09282d281f6
urllib3@2.6.3
2.8.0

Open the chart page →

12,346
litellm-helmlitellm1.103.11 of 2See more

litellm-helm litellm 1.103.1

1 of the 2 container images this version deploys carry CVE-2026-97688.

Container imageDigestPackageFixed in
ghcr.io/berriai/litellm:1.103.1df15400b5b80
urllib3@2.7.0
2.8.0

Open the chart page →

5,520
localstacklocalstack0.7.11 of 1See more

localstack localstack 0.7.1

1 of the 1 container images this version deploys carry CVE-2026-97688.

Container imageDigestPackageFixed in
localstack/localstack:latest4abc29e923e5
urllib3@2.7.0
2.8.0

Open the chart page →

2,532
kube-prometheus-stackkube-prometheus-stack-oci91.8.21 of 6See more

kube-prometheus-stack kube-prometheus-stack-oci 91.8.2

1 of the 6 container images this version deploys carry CVE-2026-97688.

Container imageDigestPackageFixed in
quay.io/kiwigrid/k8s-sidecar:2.11.22912be006f62
urllib3@2.7.0
2.8.0

Open the chart page →

399
milvusmilvus-helm5.0.301 of 4See more

milvus milvus-helm 5.0.30

1 of the 4 container images this version deploys carry CVE-2026-97688.

Container imageDigestPackageFixed in
apachepulsar/pulsar:3.0.79c9947de139d
python-pip@22.0.2+dfsg-1ubuntu0.4
no fix listed

Open the chart page →

12,012
ansible-semaphorecloudhippieVerified publisher15.2.121 of 1See more

ansible-semaphore cloudhippie 15.2.12

1 of the 1 container images this version deploys carry CVE-2026-97688.

Container imageDigestPackageFixed in
semaphoreui/semaphore:v2.19.1498ad9bc7a2a0
urllib3@2.7.0
2.8.0

Open the chart page →

1,565
memgraphmemgraphVerified publisher1.0.71 of 2See more

memgraph memgraph 1.0.7

1 of the 2 container images this version deploys carry CVE-2026-97688.

Container imageDigestPackageFixed in
memgraph/memgraph:3.13.1bd3fe13228f4
python-pip@24.0+dfsg-1ubuntu1.3
urllib3@2.7.0
no fix listed
2.8.0

Open the chart page →

1,547
coreneuvectorchartsVerified publisher2.11.21 of 5See more

core neuvectorcharts 2.11.2

1 of the 5 container images this version deploys carry CVE-2026-97688.

Container imageDigestPackageFixed in
neuvector/manager:5.6.2380fcd70f3e0
urllib3@2.7.0
2.8.0

Open the chart page →

570
stackstorm-hastackstormVerified publisher1.1.011 of 17See more

stackstorm-ha stackstorm 1.1.0

11 of the 17 container images this version deploys carry CVE-2026-97688.

Container imageDigestPackageFixed in
stackstorm/st2actionrunner:3.888235ba70cad
python-urllib3@1.25.8-2ubuntu0.3
no fix listed
stackstorm/st2api:3.86f56d239d280
python-urllib3@1.25.8-2ubuntu0.3
no fix listed
stackstorm/st2auth:3.833ecfda16608
python-urllib3@1.25.8-2ubuntu0.3
no fix listed
stackstorm/st2garbagecollector:3.84e3f8c7ca52d
python-urllib3@1.25.8-2ubuntu0.3
no fix listed
stackstorm/st2notifier:3.8f190a6212195
python-urllib3@1.25.8-2ubuntu0.3
no fix listed
stackstorm/st2rulesengine:3.8259503496ff9
python-urllib3@1.25.8-2ubuntu0.3
no fix listed
stackstorm/st2scheduler:3.8b1de2055c362
python-urllib3@1.25.8-2ubuntu0.3
no fix listed
stackstorm/st2sensorcontainer:3.8b1a338f64773
python-urllib3@1.25.8-2ubuntu0.3
no fix listed
stackstorm/st2stream:3.81c8904a3bf67
python-urllib3@1.25.8-2ubuntu0.3
no fix listed
stackstorm/st2timersengine:3.81bf35bfaf00c
python-urllib3@1.25.8-2ubuntu0.3
no fix listed
stackstorm/st2workflowengine:3.819fdfffdbba8
python-urllib3@1.25.8-2ubuntu0.3
no fix listed

Open the chart page →

758,272
openclawopenclawVerified publisher1.95.01 of 2See more

openclaw openclaw 1.95.0

1 of the 2 container images this version deploys carry CVE-2026-97688.

Container imageDigestPackageFixed in
ghcr.io/browserless/chromium:v2.56.7b1ba7b054af2
python-pip@24.0+dfsg-1ubuntu1.3
no fix listed

Open the chart page →

3,886
dependabot-gitlabdependabot-gitlabVerified publisher6.3.01 of 3See more

dependabot-gitlab dependabot-gitlab 6.3.0

1 of the 3 container images this version deploys carry CVE-2026-97688.

Container imageDigestPackageFixed in
andrcuns/dependabot-gitlab:7.7.0-alpha.143060f159f4c
python-urllib3@2.0.7-1ubuntu0.7
no fix listed

Open the chart page →

40,667
n8nhelmforgeVerified publisher2.1.21 of 2See more

n8n helmforge 2.1.2

1 of the 2 container images this version deploys carry CVE-2026-97688.

Container imageDigestPackageFixed in
n8nio/runners:2.41.31522f8179b76
urllib3@2.7.0
2.8.0

Open the chart page →

1,443
ilumilumOfficialVerified publisher6.7.31 of 19See more

ilum ilum 6.7.3

1 of the 19 container images this version deploys carry CVE-2026-97688.

Container imageDigestPackageFixed in
ilum/api:6.7.3624fd09528c8
urllib3@2.7.0
2.8.0

Open the chart page →

23,962
nautobotnautobotOfficialVerified publisher3.1.21 of 1See more

nautobot nautobot 3.1.2

1 of the 1 container images this version deploys carry CVE-2026-97688.

Container imageDigestPackageFixed in
networktocode/nautobot:3.0-py3.13ed484336b1ad
urllib3@2.6.3
2.8.0

Open the chart page →

5,094
paperless-ngxpaperless-ngxVerified publisher0.3.231 of 3See more

paperless-ngx paperless-ngx 0.3.23

1 of the 3 container images this version deploys carry CVE-2026-97688.

Container imageDigestPackageFixed in
ghcr.io/paperless-ngx/paperless-ngx:3.2.15fa76604a81d
urllib3@2.7.0
2.8.0

Open the chart page →

8,612
home-assistantandrenarchyVerified publisher14.104.01 of 1See more

home-assistant andrenarchy 14.104.0

1 of the 1 container images this version deploys carry CVE-2026-97688.

Container imageDigestPackageFixed in
ghcr.io/home-assistant/home-assistant:2026.9.2a1bc133af84e
urllib3@2.7.0
2.8.0

Open the chart page →

2,575
gluugluuOfficialVerified publisher1.8.521 of 5See more

gluu gluu 1.8.52

1 of the 5 container images this version deploys carry CVE-2026-97688.

Container imageDigestPackageFixed in
gluufederation/cloudtools:4.5.17-1fe944d2e5d0f
urllib3@2.7.0
2.8.0

Open the chart page →

376
wordpresshelmforgeVerified publisher3.0.81 of 3See more

wordpress helmforge 3.0.8

1 of the 3 container images this version deploys carry CVE-2026-97688.

Container imageDigestPackageFixed in
library/mysql:26.7.0ade067ae2fb1
urllib3@2.7.0
2.8.0

Open the chart page →

3,710
lightrun-helm-chartlightrun-helm-chartOfficialVerified publisher3.52.01 of 9See more

lightrun-helm-chart lightrun-helm-chart 3.52.0

1 of the 9 container images this version deploys carry CVE-2026-97688.

Container imageDigestPackageFixed in
library/mysql:8.4.108dbcf531a03a
urllib3@2.6.3
2.8.0

Open the chart page →

511
jellyfinloeken-at-homeVerified publisher10.11.81 of 1See more

jellyfin loeken-at-home 10.11.8

1 of the 1 container images this version deploys carry CVE-2026-97688.

Container imageDigestPackageFixed in
loeken/jellyfin:10.11.87efbc24e47b0
urllib3@2.6.3
2.8.0

Open the chart page →

978
meshery-operatormesheryOfficialVerified publisher1.0.701 of 2See more

meshery-operator meshery 1.0.70

1 of the 2 container images this version deploys carry CVE-2026-97688.

Container imageDigestPackageFixed in
alpine/k8s:1.35.6b7a12c5ddf26
urllib3@2.7.0
2.8.0

Open the chart page →

2,578
py-kube-downscalerpy-kube-downscalerVerified publisher0.3.121 of 1See more

py-kube-downscaler py-kube-downscaler 0.3.12

1 of the 1 container images this version deploys carry CVE-2026-97688.

Container imageDigestPackageFixed in
ghcr.io/caas-team/py-kube-downscaler:26.4.0af05a098b0d2
urllib3@2.6.3
2.8.0

Open the chart page →

872
selenium-gridselenium-grid0.59.13 of 4See more

selenium-grid selenium-grid 0.59.1

3 of the 4 container images this version deploys carry CVE-2026-97688.

Container imageDigestPackageFixed in
selenium/hub:4.48.0-20260905d47c27474cb4
urllib3@2.7.0
2.8.0
selenium/node-chrome:4.48.0-202609055ac71fd8dd1e
urllib3@2.7.0
2.8.0
selenium/node-firefox:4.48.0-2026090574a5c1c90f95
urllib3@2.7.0
2.8.0

Open the chart page →

8,646
truenas-csptruenas-cspVerified publisher1.2.41 of 11See more

truenas-csp truenas-csp 1.2.4

1 of the 11 container images this version deploys carry CVE-2026-97688.

Container imageDigestPackageFixed in
quay.io/datamattsson/truenas-csp:v3.2.09e58f2127d85
urllib3@2.7.0
2.8.0

Open the chart page →

6,369
abcdesktopabcdesktopOfficialVerified publisher4.4.131 of 9See more

abcdesktop abcdesktop 4.4.13

1 of the 9 container images this version deploys carry CVE-2026-97688.

Container imageDigestPackageFixed in
ghcr.io/abcdesktopio/route:4.409d5b6d5d6ff
urllib3@2.6.3
2.8.0

Open the chart page →

1,067
openvpn-asas-helm-chartOfficialVerified publisher0.2.11 of 1See more

openvpn-as as-helm-chart 0.2.1

1 of the 1 container images this version deploys carry CVE-2026-97688.

Container imageDigestPackageFixed in
openvpn/openvpn-as:latest2253c10ec652
python-urllib3@2.0.7-1ubuntu0.7
no fix listed

Open the chart page →

3,150
baserowbaserow-chartVerified publisher1.0.561 of 6See more

baserow baserow-chart 1.0.56

1 of the 6 container images this version deploys carry CVE-2026-97688.

Container imageDigestPackageFixed in
baserow/backend:2.3.37c00549b3a6f
urllib3@2.7.0
2.8.0

Open the chart page →

19,214
fadicetic0.3.11 of 25See more

fadi cetic 0.3.1

1 of the 25 container images this version deploys carry CVE-2026-97688.

Container imageDigestPackageFixed in
jupyterhub/k8s-hub:0.11.1b6b4a1a34bf0
python-pip@20.0.2-5ubuntu1.1
no fix listed

Open the chart page →

135,080
pgadmincetic0.1.121 of 1See more

pgadmin cetic 0.1.12

1 of the 1 container images this version deploys carry CVE-2026-97688.

Container imageDigestPackageFixed in
dpage/pgadmin4:latestc332c5f6dfba
urllib3@2.7.0
2.8.0

Open the chart page →

57
seafiledatamateVerified publisher0.6.01 of 6See more

seafile datamate 0.6.0

1 of the 6 container images this version deploys carry CVE-2026-97688.

Container imageDigestPackageFixed in
datamate/seafile-professional:11.0.202dd66b722464
python-pip@22.0.2+dfsg-1ubuntu0.6
no fix listed

Open the chart page →

82,487
geonode-k8sgeonode-k8sVerified publisher2.0.02 of 10See more

geonode-k8s geonode-k8s 2.0.0

2 of the 10 container images this version deploys carry CVE-2026-97688.

Container imageDigestPackageFixed in
geonode/geoserver:2.28.4-latest81b1d431b7e9
python-pip@22.0.2+dfsg-1ubuntu0.7
urllib3@2.7.0
no fix listed
2.8.0
geopython/pycsw:3.0.0-beta284662ea6b78b
urllib3@2.6.2
2.8.0

Open the chart page →

61,375
dolibarrhelmforgeVerified publisher1.2.191 of 3See more

dolibarr helmforge 1.2.19

1 of the 3 container images this version deploys carry CVE-2026-97688.

Container imageDigestPackageFixed in
library/mysql:26.7.0ade067ae2fb1
urllib3@2.7.0
2.8.0

Open the chart page →

4,403
karakeephelmforgeVerified publisher1.2.91 of 3See more

karakeep helmforge 1.2.9

1 of the 3 container images this version deploys carry CVE-2026-97688.

Container imageDigestPackageFixed in
ghcr.io/browserless/chromium:v2.55.42ed0183564d7
python-pip@24.0+dfsg-1ubuntu1.3
no fix listed

Open the chart page →

11,108

Container images carrying it

435 by charts deploying them

A fixed version is listed for 1 of the 3 affected packages.

Container imageDigestPackageFixed inUsed by
library/mysql:8.07dcddc01f13b
urllib3@2.6.3
2.8.0
91
quay.io/kiwigrid/k8s-sidecar:2.5.0a6b3f707f883
urllib3@2.6.3
2.8.0
14
library/mysql:26.7.0:latestade067ae2fb1
urllib3@2.7.0
2.8.0
13
quay.io/kiwigrid/k8s-sidecar:2.11.22912be006f62
urllib3@2.7.0
2.8.0
13
library/mysql:8:8.4:8.4.110744ee5ef89c
urllib3@2.6.3
2.8.0
12
oomk8s/readiness-check:2.0.2875814cc853d
python-pip@8.1.1-2ubuntu0.4
no fix listed
11
library/mysql:8:8.4:8.4.1185b9bf2e29cf
urllib3@2.6.3
2.8.0
8
oomk8s/readiness-check:2.0.07daa08b81954
python-pip@8.1.1-2ubuntu0.4
no fix listed
6
dpage/pgadmin4:9.17:9.18:latestc332c5f6dfba
urllib3@2.7.0
2.8.0
5
flaresolverr/flaresolverr:latest:v3.5.0139dfee1c6f8
urllib3@2.7.0
2.8.0
4
ghcr.io/flaresolverr/flaresolverr:latest:v3.5.2c80ae007ce2c
urllib3@2.7.0
2.8.0
4
ghcr.io/paperless-ngx/paperless-ngx:3.1.3aa810a36942c
urllib3@2.7.0
2.8.0
4
apache/superset:6.1.0:latest16b50bbef664
urllib3@2.6.3
2.8.0
3
cloudve/cloudlaunch-server:latest4a3d7fae90bb
python-pip@20.0.2-5ubuntu1.6
no fix listed
3
localstack/localstack:latest4abc29e923e5
urllib3@2.7.0
2.8.0
3
prompve/prometheus-pve-exporter:3.10.04867684c0a93
urllib3@2.7.0
2.8.0
3
solace/solace-pubsub-standard:latest1d84278e161a
urllib3@2.7.0
2.8.0
3
ghcr.io/flyteorg/flyte-connectors:py3.12-v2.3.6896fc7b18b1b
urllib3@2.7.0
2.8.0
3
ghcr.io/paperless-ngx/paperless-ngx:3.2.15fa76604a81d
urllib3@2.7.0
2.8.0
3
quay.io/argoprojlabs/argocd-image-updater:v1.3.0cb009167015c
urllib3@2.7.0
2.8.0
3
alpine/k8s:1.32.12048f8d9c8cc7
urllib3@2.6.3
2.8.0
2
alpine/k8s:1.37.0b421c2e9419e
urllib3@2.7.0
2.8.0
2
gradiant/srsran-5g:23_10_19061b1bf0f36
python-urllib3@1.25.8-2ubuntu0.3
no fix listed
2
homebridge/homebridge:latest77c685a40911
python-pip@24.0+dfsg-1ubuntu1.3
no fix listed
2
ilum/api:6.7.3624fd09528c8
urllib3@2.7.0
2.8.0
2
langflowai/langflow:latest79c02794adeb
urllib3@2.7.0
2.8.0
2
library/mysql:9.7.230a0abfa7b50
urllib3@2.6.3
2.8.0
2
memgraph/memgraph:3.13.1bd3fe13228f4
python-pip@24.0+dfsg-1ubuntu1.3
urllib3@2.7.0
no fix listed
2.8.0
2
nacos/nacos-server:latest1c191c30c8cd
urllib3@2.7.0
2.8.0
2
netbirdio/dashboard:latest:v2.92.0fa2d8b02a817
urllib3@2.7.0
2.8.0
2
nousresearch/hermes-agent:v2026.9.24fca358f12efd
urllib3@2.7.0
2.8.0
2
nutanix/nai-jobs:v2.8.0:v2.8.19c373718e1b1
urllib3@2.7.0
2.8.0
2
omecproject/mcord-synchronizer:comac-1.0.0cfdb566dd949
python-pip@8.1.1-2ubuntu0.4
no fix listed
2
safeglobal/safe-config-service:latest09a5e495c219
urllib3@2.7.0
2.8.0
2
safeglobal/safe-transaction-service:latest7b576c73f865
urllib3@2.7.0
2.8.0
2
seafileltd/seafile-mc:11.0.12d0c66e4621bd
python-pip@22.0.2+dfsg-1ubuntu0.4
no fix listed
2
semaphoreui/semaphore:latest:v2.19.1498ad9bc7a2a0
urllib3@2.7.0
2.8.0
2
smartedge/generic-multi-access-network-virtualization:1.04cd63c22ce36
python-pip@20.0.2-5ubuntu1.6
no fix listed
2
streamnative/apache-pulsar-grafana-dashboard-k8s:0.1.20e6d7aa3ef32
python-pip@20.0.2-5ubuntu1.10
no fix listed
2
tzahi12345/youtubedl-material:4.3.2:latest2f943d584711
python-pip@22.0.2+dfsg-1ubuntu0.2
no fix listed
2
wurstmeister/zookeeper:latest7a7fd44a7210
python-urllib3@1.7.1-1build1
no fix listed
2
ghcr.io/browserless/chromium:v2.56.7b1ba7b054af2
python-pip@24.0+dfsg-1ubuntu1.3
no fix listed
2
ghcr.io/cloudnative-pg/postgresql:18.4-system-trixie42708a75345b
urllib3@2.7.0
2.8.0
2
ghcr.io/donkie/spoolman:0.27.07aba565eff77
urllib3@2.7.0
2.8.0
2
ghcr.io/immich-app/immich-machine-learning:v3.1.05a0839dc5303
urllib3@2.6.2
2.8.0
2
ghcr.io/xeor/karb:1.0.6:main647a3c938d31
urllib3@2.6.3
2.8.0
2
quay.io/kiwigrid/k8s-sidecar:2.8.1abb55b2165c6
urllib3@2.7.0
2.8.0
2
quay.io/netscaler/netscaler-k8s-ingress-controller:4.2.26a68453858339
urllib3@2.6.3
2.8.0
2
registry.gitlab.com/prisme.ai/prisme.ai/prisme.ai-infra:latestb1198ea741d1
urllib3@2.6.3
2.8.0
2
a10networks/acos-prometheus-exporter:latest8dc58d434d71
python-pip@9.0.1-2.3~ubuntu1.18.04.1
no fix listed
1

syft 1.42.1 · advisories as of 1 Oct 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.