StackRadar

CVE-2026-97688

Medium

Advisory

Published 29 Sept 2026In the index since 1 Oct 2026
Severity
Medium
worst across findings
CVSS
6.9
base score, highest
EPSS
0.003
20th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
577
of 17,966 indexed, latest versions
Container images
435
deployed by those charts
Fix available
1 of 3
affected packages

urllib3: Chunked Deflate streaming can enter an infinite loop

Carried by container images the latest versions of 577 of 17,966 indexed charts deploy, on 435 images.

Affected packageAffected versionsFixed inImages
urllib3pypi2.6.2, 2.6.3, 2.7.02.8.0298
python-pipdeb1.5.4-1ubuntu4, 8.1.1-2ubuntu0.4, 9.0.1-2.3~ubuntu1, 9.0.1-2.3~ubuntu1.18.04.1+23 moreno fix listed114
python-urllib3deb1.7.1-1build1, 1.7.1-1ubuntu4, 1.13.1-2ubuntu0.16.04.1, 1.13.1-2ubuntu0.16.04.2+12 moreno fix listed62
OSV records
GHSA-gh4c-6fx4-qh6gUBUNTU-CVE-2026-97688

Charts affected

577 by stars
ChartLatestAffected imagesRadar Score
kube-prometheus-stackprometheus-communityOfficialVerified publisher91.8.21 of 6See more

kube-prometheus-stack prometheus-community 91.8.2

1 of the 6 container images this version deploys carry CVE-2026-97688.

Container imageDigestPackageFixed in
quay.io/kiwigrid/k8s-sidecar:2.11.22912be006f62
urllib3@2.7.0
2.8.0

Open the chart page →

399
lokigrafana7.3.01 of 6See more

loki grafana 7.3.0

1 of the 6 container images this version deploys carry CVE-2026-97688.

Container imageDigestPackageFixed in
quay.io/kiwigrid/k8s-sidecar:2.5.0a6b3f707f883
urllib3@2.6.3
2.8.0

Open the chart page →

4,162
jenkinsjenkinsciOfficialVerified publisher5.9.641 of 2See more

jenkins jenkinsci 5.9.64

1 of the 2 container images this version deploys carry CVE-2026-97688.

Container imageDigestPackageFixed in
quay.io/kiwigrid/k8s-sidecar:2.11.22912be006f62
urllib3@2.7.0
2.8.0

Open the chart page →

2,943
pgadmin4runixVerified publisher1.70.41 of 1See more

pgadmin4 runix 1.70.4

1 of the 1 container images this version deploys carry CVE-2026-97688.

Container imageDigestPackageFixed in
dpage/pgadmin4:9.18c332c5f6dfba
urllib3@2.7.0
2.8.0

Open the chart page →

57
authentikgoauthentikOfficialVerified publisher2026.8.31 of 1See more

authentik goauthentik 2026.8.3

1 of the 1 container images this version deploys carry CVE-2026-97688.

Container imageDigestPackageFixed in
ghcr.io/goauthentik/server:2026.8.3ab9b4e8cc4ab
urllib3@2.7.0
2.8.0

Open the chart page →

1,322
jupyterhubjupyterhubOfficialVerified publisher4.4.22 of 7See more

jupyterhub jupyterhub 4.4.2

2 of the 7 container images this version deploys carry CVE-2026-97688.

Container imageDigestPackageFixed in
quay.io/jupyterhub/k8s-hub:4.4.2108fbb01c3fe
urllib3@2.7.0
2.8.0
quay.io/jupyterhub/k8s-singleuser-sample:4.4.265e1b09fc8c9
urllib3@2.7.0
2.8.0

Open the chart page →

8,992
argocd-image-updaterargoOfficialVerified publisher1.3.11 of 1See more

argocd-image-updater argo 1.3.1

1 of the 1 container images this version deploys carry CVE-2026-97688.

Container imageDigestPackageFixed in
quay.io/argoprojlabs/argocd-image-updater:v1.3.0cb009167015c
urllib3@2.7.0
2.8.0

Open the chart page →

820
victoria-metrics-k8s-stackvictoriametricsVerified publisher0.95.01 of 7See more

victoria-metrics-k8s-stack victoriametrics 0.95.0

1 of the 7 container images this version deploys carry CVE-2026-97688.

Container imageDigestPackageFixed in
quay.io/kiwigrid/k8s-sidecar:2.11.22912be006f62
urllib3@2.7.0
2.8.0

Open the chart page →

832
mlflowcommunity-chartsVerified publisher1.11.71 of 1See more

mlflow community-charts 1.11.7

1 of the 1 container images this version deploys carry CVE-2026-97688.

Container imageDigestPackageFixed in
burakince/mlflow:3.16.0ab4b566644b9
urllib3@2.7.0
2.8.0

Open the chart page →

973
maildocker-postfixVerified publisher5.1.01 of 1See more

mail docker-postfix 5.1.0

1 of the 1 container images this version deploys carry CVE-2026-97688.

Container imageDigestPackageFixed in
boky/postfix:v5.1.0aafc77238423
urllib3@2.6.2
2.8.0

Open the chart page →

6,264
datahubdatahubVerified publisher1.1.51 of 4See more

datahub datahub 1.1.5

1 of the 4 container images this version deploys carry CVE-2026-97688.

Container imageDigestPackageFixed in
acryldata/datahub-actions:v1.7.0.1c5fd70130157
urllib3@2.7.0
2.8.0

Open the chart page →

1,247
semaphoresemaphoreuiOfficialVerified publisher16.2.21 of 1See more

semaphore semaphoreui 16.2.2

1 of the 1 container images this version deploys carry CVE-2026-97688.

Container imageDigestPackageFixed in
semaphoreui/semaphore:v2.18.3e9260bfa8255
urllib3@2.7.0
2.8.0

Open the chart page →

2,610
weblateweblateOfficialVerified publisher0.5.381 of 3See more

weblate weblate 0.5.38

1 of the 3 container images this version deploys carry CVE-2026-97688.

Container imageDigestPackageFixed in
weblate/weblate:2026.9.1.2f0be5b122b38
urllib3@2.7.0
2.8.0

Open the chart page →

7,338
difydoubanVerified publisher0.10.01 of 6See more

dify douban 0.10.0

1 of the 6 container images this version deploys carry CVE-2026-97688.

Container imageDigestPackageFixed in
langgenius/dify-plugin-daemon:0.5.1-local8269050f192e
python-pip@24.0+dfsg-1ubuntu1.3
no fix listed

Open the chart page →

81,052
stackgres-operatorstackgres-chartsOfficialVerified publisher1.19.21 of 2See more

stackgres-operator stackgres-charts 1.19.2

1 of the 2 container images this version deploys carry CVE-2026-97688.

Container imageDigestPackageFixed in
quay.io/stackgres/operator:1.19.282f33ab3fb1e
urllib3@2.7.0
2.8.0

Open the chart page →

2,370
pulsarapache4.7.02 of 10See more

pulsar apache 4.7.0

2 of the 10 container images this version deploys carry CVE-2026-97688.

Container imageDigestPackageFixed in
alpine/k8s:1.32.12048f8d9c8cc7
urllib3@2.6.3
2.8.0
quay.io/kiwigrid/k8s-sidecar:2.5.0a6b3f707f883
urllib3@2.6.3
2.8.0

Open the chart page →

10,237
difydify-helmVerified publisher0.38.04 of 11See more

dify dify-helm 0.38.0

4 of the 11 container images this version deploys carry CVE-2026-97688.

Container imageDigestPackageFixed in
langgenius/dify-agent-backend:1.16.1097d3fd27a7b
urllib3@2.7.0
2.8.0
langgenius/dify-api:1.16.1dcefa5f7c47c
urllib3@2.7.0
2.8.0
langgenius/dify-plugin-daemon:0.6.3-local3c694329357b
python-pip@24.0+dfsg-1ubuntu1.3
urllib3@2.7.0
no fix listed
2.8.0
langgenius/dify-sandbox:0.2.15750e1111426e
urllib3@2.6.3
2.8.0

Open the chart page →

71,370
wazuhwazuh-helm-morgovedVerified publisher2.0.71 of 5See more

wazuh wazuh-helm-morgoved 2.0.7

1 of the 5 container images this version deploys carry CVE-2026-97688.

Container imageDigestPackageFixed in
wazuh/wazuh-manager:4.14.3f09282d281f6
urllib3@2.6.3
2.8.0

Open the chart page →

12,346
litellm-helmlitellm1.103.11 of 2See more

litellm-helm litellm 1.103.1

1 of the 2 container images this version deploys carry CVE-2026-97688.

Container imageDigestPackageFixed in
ghcr.io/berriai/litellm:1.103.1df15400b5b80
urllib3@2.7.0
2.8.0

Open the chart page →

5,520
localstacklocalstack0.7.11 of 1See more

localstack localstack 0.7.1

1 of the 1 container images this version deploys carry CVE-2026-97688.

Container imageDigestPackageFixed in
localstack/localstack:latest4abc29e923e5
urllib3@2.7.0
2.8.0

Open the chart page →

2,532
kube-prometheus-stackkube-prometheus-stack-oci91.8.21 of 6See more

kube-prometheus-stack kube-prometheus-stack-oci 91.8.2

1 of the 6 container images this version deploys carry CVE-2026-97688.

Container imageDigestPackageFixed in
quay.io/kiwigrid/k8s-sidecar:2.11.22912be006f62
urllib3@2.7.0
2.8.0

Open the chart page →

399
milvusmilvus-helm5.0.301 of 4See more

milvus milvus-helm 5.0.30

1 of the 4 container images this version deploys carry CVE-2026-97688.

Container imageDigestPackageFixed in
apachepulsar/pulsar:3.0.79c9947de139d
python-pip@22.0.2+dfsg-1ubuntu0.4
no fix listed

Open the chart page →

12,012
ansible-semaphorecloudhippieVerified publisher15.2.121 of 1See more

ansible-semaphore cloudhippie 15.2.12

1 of the 1 container images this version deploys carry CVE-2026-97688.

Container imageDigestPackageFixed in
semaphoreui/semaphore:v2.19.1498ad9bc7a2a0
urllib3@2.7.0
2.8.0

Open the chart page →

1,565
memgraphmemgraphVerified publisher1.0.71 of 2See more

memgraph memgraph 1.0.7

1 of the 2 container images this version deploys carry CVE-2026-97688.

Container imageDigestPackageFixed in
memgraph/memgraph:3.13.1bd3fe13228f4
python-pip@24.0+dfsg-1ubuntu1.3
urllib3@2.7.0
no fix listed
2.8.0

Open the chart page →

1,547
coreneuvectorchartsVerified publisher2.11.21 of 5See more

core neuvectorcharts 2.11.2

1 of the 5 container images this version deploys carry CVE-2026-97688.

Container imageDigestPackageFixed in
neuvector/manager:5.6.2380fcd70f3e0
urllib3@2.7.0
2.8.0

Open the chart page →

570
stackstorm-hastackstormVerified publisher1.1.011 of 17See more

stackstorm-ha stackstorm 1.1.0

11 of the 17 container images this version deploys carry CVE-2026-97688.

Container imageDigestPackageFixed in
stackstorm/st2actionrunner:3.888235ba70cad
python-urllib3@1.25.8-2ubuntu0.3
no fix listed
stackstorm/st2api:3.86f56d239d280
python-urllib3@1.25.8-2ubuntu0.3
no fix listed
stackstorm/st2auth:3.833ecfda16608
python-urllib3@1.25.8-2ubuntu0.3
no fix listed
stackstorm/st2garbagecollector:3.84e3f8c7ca52d
python-urllib3@1.25.8-2ubuntu0.3
no fix listed
stackstorm/st2notifier:3.8f190a6212195
python-urllib3@1.25.8-2ubuntu0.3
no fix listed
stackstorm/st2rulesengine:3.8259503496ff9
python-urllib3@1.25.8-2ubuntu0.3
no fix listed
stackstorm/st2scheduler:3.8b1de2055c362
python-urllib3@1.25.8-2ubuntu0.3
no fix listed
stackstorm/st2sensorcontainer:3.8b1a338f64773
python-urllib3@1.25.8-2ubuntu0.3
no fix listed
stackstorm/st2stream:3.81c8904a3bf67
python-urllib3@1.25.8-2ubuntu0.3
no fix listed
stackstorm/st2timersengine:3.81bf35bfaf00c
python-urllib3@1.25.8-2ubuntu0.3
no fix listed
stackstorm/st2workflowengine:3.819fdfffdbba8
python-urllib3@1.25.8-2ubuntu0.3
no fix listed

Open the chart page →

758,272
openclawopenclawVerified publisher1.95.01 of 2See more

openclaw openclaw 1.95.0

1 of the 2 container images this version deploys carry CVE-2026-97688.

Container imageDigestPackageFixed in
ghcr.io/browserless/chromium:v2.56.7b1ba7b054af2
python-pip@24.0+dfsg-1ubuntu1.3
no fix listed

Open the chart page →

3,886
dependabot-gitlabdependabot-gitlabVerified publisher6.3.01 of 3See more

dependabot-gitlab dependabot-gitlab 6.3.0

1 of the 3 container images this version deploys carry CVE-2026-97688.

Container imageDigestPackageFixed in
andrcuns/dependabot-gitlab:7.7.0-alpha.143060f159f4c
python-urllib3@2.0.7-1ubuntu0.7
no fix listed

Open the chart page →

40,667
n8nhelmforgeVerified publisher2.1.21 of 2See more

n8n helmforge 2.1.2

1 of the 2 container images this version deploys carry CVE-2026-97688.

Container imageDigestPackageFixed in
n8nio/runners:2.41.31522f8179b76
urllib3@2.7.0
2.8.0

Open the chart page →

1,443
ilumilumOfficialVerified publisher6.7.31 of 19See more

ilum ilum 6.7.3

1 of the 19 container images this version deploys carry CVE-2026-97688.

Container imageDigestPackageFixed in
ilum/api:6.7.3624fd09528c8
urllib3@2.7.0
2.8.0

Open the chart page →

23,962
nautobotnautobotOfficialVerified publisher3.1.21 of 1See more

nautobot nautobot 3.1.2

1 of the 1 container images this version deploys carry CVE-2026-97688.

Container imageDigestPackageFixed in
networktocode/nautobot:3.0-py3.13ed484336b1ad
urllib3@2.6.3
2.8.0

Open the chart page →

5,094
paperless-ngxpaperless-ngxVerified publisher0.3.231 of 3See more

paperless-ngx paperless-ngx 0.3.23

1 of the 3 container images this version deploys carry CVE-2026-97688.

Container imageDigestPackageFixed in
ghcr.io/paperless-ngx/paperless-ngx:3.2.15fa76604a81d
urllib3@2.7.0
2.8.0

Open the chart page →

8,612
home-assistantandrenarchyVerified publisher14.104.01 of 1See more

home-assistant andrenarchy 14.104.0

1 of the 1 container images this version deploys carry CVE-2026-97688.

Container imageDigestPackageFixed in
ghcr.io/home-assistant/home-assistant:2026.9.2a1bc133af84e
urllib3@2.7.0
2.8.0

Open the chart page →

2,575
gluugluuOfficialVerified publisher1.8.521 of 5See more

gluu gluu 1.8.52

1 of the 5 container images this version deploys carry CVE-2026-97688.

Container imageDigestPackageFixed in
gluufederation/cloudtools:4.5.17-1fe944d2e5d0f
urllib3@2.7.0
2.8.0

Open the chart page →

376
wordpresshelmforgeVerified publisher3.0.81 of 3See more

wordpress helmforge 3.0.8

1 of the 3 container images this version deploys carry CVE-2026-97688.

Container imageDigestPackageFixed in
library/mysql:26.7.0ade067ae2fb1
urllib3@2.7.0
2.8.0

Open the chart page →

3,710
lightrun-helm-chartlightrun-helm-chartOfficialVerified publisher3.52.01 of 9See more

lightrun-helm-chart lightrun-helm-chart 3.52.0

1 of the 9 container images this version deploys carry CVE-2026-97688.

Container imageDigestPackageFixed in
library/mysql:8.4.108dbcf531a03a
urllib3@2.6.3
2.8.0

Open the chart page →

511
jellyfinloeken-at-homeVerified publisher10.11.81 of 1See more

jellyfin loeken-at-home 10.11.8

1 of the 1 container images this version deploys carry CVE-2026-97688.

Container imageDigestPackageFixed in
loeken/jellyfin:10.11.87efbc24e47b0
urllib3@2.6.3
2.8.0

Open the chart page →

978
meshery-operatormesheryOfficialVerified publisher1.0.701 of 2See more

meshery-operator meshery 1.0.70

1 of the 2 container images this version deploys carry CVE-2026-97688.

Container imageDigestPackageFixed in
alpine/k8s:1.35.6b7a12c5ddf26
urllib3@2.7.0
2.8.0

Open the chart page →

2,578
py-kube-downscalerpy-kube-downscalerVerified publisher0.3.121 of 1See more

py-kube-downscaler py-kube-downscaler 0.3.12

1 of the 1 container images this version deploys carry CVE-2026-97688.

Container imageDigestPackageFixed in
ghcr.io/caas-team/py-kube-downscaler:26.4.0af05a098b0d2
urllib3@2.6.3
2.8.0

Open the chart page →

872
selenium-gridselenium-grid0.59.13 of 4See more

selenium-grid selenium-grid 0.59.1

3 of the 4 container images this version deploys carry CVE-2026-97688.

Container imageDigestPackageFixed in
selenium/hub:4.48.0-20260905d47c27474cb4
urllib3@2.7.0
2.8.0
selenium/node-chrome:4.48.0-202609055ac71fd8dd1e
urllib3@2.7.0
2.8.0
selenium/node-firefox:4.48.0-2026090574a5c1c90f95
urllib3@2.7.0
2.8.0

Open the chart page →

8,646
truenas-csptruenas-cspVerified publisher1.2.41 of 11See more

truenas-csp truenas-csp 1.2.4

1 of the 11 container images this version deploys carry CVE-2026-97688.

Container imageDigestPackageFixed in
quay.io/datamattsson/truenas-csp:v3.2.09e58f2127d85
urllib3@2.7.0
2.8.0

Open the chart page →

6,369
abcdesktopabcdesktopOfficialVerified publisher4.4.131 of 9See more

abcdesktop abcdesktop 4.4.13

1 of the 9 container images this version deploys carry CVE-2026-97688.

Container imageDigestPackageFixed in
ghcr.io/abcdesktopio/route:4.409d5b6d5d6ff
urllib3@2.6.3
2.8.0

Open the chart page →

1,067
openvpn-asas-helm-chartOfficialVerified publisher0.2.11 of 1See more

openvpn-as as-helm-chart 0.2.1

1 of the 1 container images this version deploys carry CVE-2026-97688.

Container imageDigestPackageFixed in
openvpn/openvpn-as:latest2253c10ec652
python-urllib3@2.0.7-1ubuntu0.7
no fix listed

Open the chart page →

3,150
baserowbaserow-chartVerified publisher1.0.561 of 6See more

baserow baserow-chart 1.0.56

1 of the 6 container images this version deploys carry CVE-2026-97688.

Container imageDigestPackageFixed in
baserow/backend:2.3.37c00549b3a6f
urllib3@2.7.0
2.8.0

Open the chart page →

19,214
fadicetic0.3.11 of 25See more

fadi cetic 0.3.1

1 of the 25 container images this version deploys carry CVE-2026-97688.

Container imageDigestPackageFixed in
jupyterhub/k8s-hub:0.11.1b6b4a1a34bf0
python-pip@20.0.2-5ubuntu1.1
no fix listed

Open the chart page →

135,080
pgadmincetic0.1.121 of 1See more

pgadmin cetic 0.1.12

1 of the 1 container images this version deploys carry CVE-2026-97688.

Container imageDigestPackageFixed in
dpage/pgadmin4:latestc332c5f6dfba
urllib3@2.7.0
2.8.0

Open the chart page →

57
seafiledatamateVerified publisher0.6.01 of 6See more

seafile datamate 0.6.0

1 of the 6 container images this version deploys carry CVE-2026-97688.

Container imageDigestPackageFixed in
datamate/seafile-professional:11.0.202dd66b722464
python-pip@22.0.2+dfsg-1ubuntu0.6
no fix listed

Open the chart page →

82,487
geonode-k8sgeonode-k8sVerified publisher2.0.02 of 10See more

geonode-k8s geonode-k8s 2.0.0

2 of the 10 container images this version deploys carry CVE-2026-97688.

Container imageDigestPackageFixed in
geonode/geoserver:2.28.4-latest81b1d431b7e9
python-pip@22.0.2+dfsg-1ubuntu0.7
urllib3@2.7.0
no fix listed
2.8.0
geopython/pycsw:3.0.0-beta284662ea6b78b
urllib3@2.6.2
2.8.0

Open the chart page →

61,375
dolibarrhelmforgeVerified publisher1.2.191 of 3See more

dolibarr helmforge 1.2.19

1 of the 3 container images this version deploys carry CVE-2026-97688.

Container imageDigestPackageFixed in
library/mysql:26.7.0ade067ae2fb1
urllib3@2.7.0
2.8.0

Open the chart page →

4,403
karakeephelmforgeVerified publisher1.2.91 of 3See more

karakeep helmforge 1.2.9

1 of the 3 container images this version deploys carry CVE-2026-97688.

Container imageDigestPackageFixed in
ghcr.io/browserless/chromium:v2.55.42ed0183564d7
python-pip@24.0+dfsg-1ubuntu1.3
no fix listed

Open the chart page →

11,108

Container images carrying it

435 by charts deploying them

A fixed version is listed for 1 of the 3 affected packages.

Container imageDigestPackageFixed inUsed by
acryldata/datahub-actions:v1.7.0.1c5fd70130157
urllib3@2.7.0
2.8.0
1
adwerx/github-actions-runner:2.276.1-20.04-1840d2b078682
python-urllib3@1.25.8-2ubuntu0.1
no fix listed
1
agentarea/agentarea-api:latest38fcf6657f5f
urllib3@2.7.0
2.8.0
1
agentarea/agentarea-worker:latest06a5ef356770
urllib3@2.7.0
2.8.0
1
aibrix/metadata-service:v0.7.063fb81a64377
urllib3@2.7.0
2.8.0
1
airsonicadvanced/airsonic-advanced:latestf7cbafac2806
python-urllib3@1.25.8-2ubuntu0.1
no fix listed
1
akeyless/base:latest759e4289fae8
urllib3@2.7.0
2.8.0
1
akeyless/gateway:5.4.0d4768a9b089c
urllib3@2.7.0
2.8.0
1
aktosecurity/akto-agent-guard-anonymizer:1.1.6cc9aac5cf7ef
urllib3@2.7.0
2.8.0
1
aktosecurity/akto-agent-guard-anonymizer:1.1.4d4b100cbdc47
urllib3@2.7.0
2.8.0
1
aktosecurity/akto-agent-guard-embedder:1.1.4dbc566b2376c
urllib3@2.7.0
2.8.0
1
aktosecurity/akto-agent-guard-worker:1.1.617db2702aa8f
urllib3@2.7.0
2.8.0
1
aktosecurity/akto-agent-guard-worker:1.1.4666eaffd5362
urllib3@2.7.0
2.8.0
1
allegroai/clearml-agent-k8s-base:1.24-21772827a01bb5
python-pip@9.0.1-2.3~ubuntu1.18.04.5
no fix listed
1
alpine/k8s:1.35.6b7a12c5ddf26
urllib3@2.7.0
2.8.0
1
alpine/k8s:1.35.5d870622d0040
urllib3@2.7.0
2.8.0
1
andrcuns/dependabot-gitlab:7.7.0-alpha.143060f159f4c
python-urllib3@2.0.7-1ubuntu0.7
no fix listed
1
andrewgolikov55/intel-gpu-exporter:latestfcc001b61c0e
python-pip@22.0.2+dfsg-1ubuntu0.3
no fix listed
1
apachepulsar/pulsar:3.1.016f9fdab3fa6
python-pip@22.0.2+dfsg-1ubuntu0.3
no fix listed
1
apachepulsar/pulsar:2.10.03b262ab7a7d9
python-pip@20.0.2-5ubuntu1.6
no fix listed
1
apachepulsar/pulsar:3.0.79c9947de139d
python-pip@22.0.2+dfsg-1ubuntu0.4
no fix listed
1
apache/ranger:2.7.076c176e8a0e4
python-pip@22.0.2+dfsg-1ubuntu0.6
no fix listed
1
appwrite/appwrite:1.9.01aaa70127114
urllib3@2.6.3
2.8.0
1
appwrite/appwrite:2.3.034ef77fb6e87
urllib3@2.7.0
2.8.0
1
arunvelsriram/utils:latest655ad18fd8d6
python-pip@24.0+dfsg-1ubuntu1.2
python-urllib3@2.0.7-1ubuntu0.2
no fix listed
no fix listed
1
assistiot/open_api_backend:1.1.230812ba93555
python-pip@22.0.2+dfsg-1ubuntu0.4
no fix listed
1
assistiot/video_augmentation:runner-cpu-lateste5ae539ce2cb
python-pip@20.0.2-5ubuntu1.8
python-urllib3@1.25.8-2ubuntu0.2
no fix listed
no fix listed
1
baserow/backend:2.3.37c00549b3a6f
urllib3@2.7.0
2.8.0
1
bbilly1/tubearchivist:v0.5.9b827a713f55b
urllib3@2.6.3
2.8.0
1
beanbag/reviewboard:latest6b840f546e1c
urllib3@2.7.0
2.8.0
1
berkeleyskypilot/skypilot:0.13.03bc8bf8f4d83
urllib3@2.7.0
2.8.0
1
bicarus/elrond-rosetta:v1.3.50.0b1dab0721e1c
python-pip@20.0.2-5ubuntu1.6
no fix listed
1
blackducksoftware/bdba-frontend:2026.9.10afa8763ccb8
urllib3@2.7.0
2.8.0
1
blakeblackshear/frigate:0.10.0-amd64ae269270ad9e
python-pip@20.0.2-5ubuntu1.6
no fix listed
1
boky/postfix:5.1.0:v5.1.0aafc77238423
urllib3@2.6.2
2.8.0
1
browserless/chrome:1.48.0-chrome-stablec81ae5585b47
python-urllib3@1.25.8-2ubuntu0.1
no fix listed
1
bugsink/bugsink:246fc01ffbd60
urllib3@2.7.0
2.8.0
1
burakince/mlflow:3.16.0ab4b566644b9
urllib3@2.7.0
2.8.0
1
byjg/easy-haproxy:6.1.1230fdb7b00ae
urllib3@2.7.0
2.8.0
1
camptocamp/geomapfishapp-geoportal:latestae874f70cc16
python-pip@24.0+dfsg-1ubuntu1.3
urllib3@2.7.0
no fix listed
2.8.0
1
castai/hibernate:v0.14da62858c8381
urllib3@2.6.3
2.8.0
1
checkmk/check-mk-community:2.5.0p6c11b422210c4
urllib3@2.7.0
2.8.0
1
chetangautamm/repo:sipp.v3e7f7049e1544
python-urllib3@1.25.8-2ubuntu0.1
no fix listed
1
chiefonboarding/chiefonboarding:v2.5.0d0964135ea82
urllib3@2.7.0
2.8.0
1
citizenstig/httpbin:latestb81c818ccb86
python-pip@8.1.1-2ubuntu0.4
no fix listed
1
ckan/ckan-base:2.12.087ecf3f27ad6
urllib3@2.7.0
2.8.0
1
cloudve/janis-terminal:latestaf56e77ca587
python-pip@9.0.1-2.3~ubuntu1.18.04.1
no fix listed
1
countly/countly-server:25.05.4e3c238248f99
python-urllib3@1.25.8-2ubuntu0.1
no fix listed
1
crocodilestick/calibre-web-automated:v4.0.6c31a738b6d5e
urllib3@2.6.3
2.8.0
1
dagster/dagster-cloud-agent:1.13.24e29285673c2c
urllib3@2.7.0
2.8.0
1

syft 1.42.1 · advisories as of 1 Oct 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.