StackRadar

CVE-2026-98194

Medium

Advisory

Published 6 Oct 2026In the index since 9 Oct 2026
Severity
Medium
worst across findings
CVSS
5.5
base score, highest
EPSS
0.002
7th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
188
of 18,071 indexed, latest versions
Container images
185
deployed by those charts
Fix available
None
affected package

The matching OSV records carry no description.

Carried by container images the latest versions of 188 of 18,071 indexed charts deploy, on 185 images.

Affected packageAffected versionsFixed inImages
linuxdeb3.13.0-46.77, 3.13.0-126.175, 3.13.0-149.199, 3.13.0-170.220+105 moreno fix listed185
OSV records
UBUNTU-CVE-2026-98194

Charts affected

188 by stars
ChartLatestAffected imagesRadar Score
countlyhelmforgeVerified publisher1.2.81 of 3See more

countly helmforge 1.2.8

1 of the 3 container images this version deploys carry CVE-2026-98194.

Container imageDigestPackageFixed in
countly/countly-server:25.05.4e3c238248f99
linux@5.4.0-189.209
no fix listed

Open the chart page →

76,271
komgahelmforgeVerified publisher1.4.161 of 1See more

komga helmforge 1.4.16

1 of the 1 container images this version deploys carry CVE-2026-98194.

Container imageDigestPackageFixed in
gotson/komga:1.27.19cf102f5fb78
linux@7.0.0-31.31
no fix listed

Open the chart page →

37,514
homebridgehomeenterpriseinc0.5.01 of 1See more

homebridge homeenterpriseinc 0.5.0

1 of the 1 container images this version deploys carry CVE-2026-98194.

Container imageDigestPackageFixed in
oznu/homebridge:2021-12-19-ubuntu2e12d0e2dcce
linux@4.15.0-163.171
no fix listed

Open the chart page →

81,334
huginnhomeenterpriseinc0.2.01 of 1See more

huginn homeenterpriseinc 0.2.0

1 of the 1 container images this version deploys carry CVE-2026-98194.

Container imageDigestPackageFixed in
huginn/huginn:4df1217d3055db980a04f293e28016b77826e3caeab0db98264e
linux@4.15.0-191.202
no fix listed

Open the chart page →

77,286
httpbin2022httpbin2022Verified publisher0.1.11 of 1See more

httpbin2022 httpbin2022 0.1.1

1 of the 1 container images this version deploys carry CVE-2026-98194.

Container imageDigestPackageFixed in
mshanley80/httpbin2022:latest5b189a70c0fb
linux@5.4.0-135.152
no fix listed

Open the chart page →

77,193
ibm-microclimateibm-charts0.1.01 of 8See more

ibm-microclimate ibm-charts 0.1.0

1 of the 8 container images this version deploys carry CVE-2026-98194.

Container imageDigestPackageFixed in
ibmcom/microclimate-theia:lateste17bdccc5030
linux@4.4.0-104.127
no fix listed

Open the chart page →

117,546
ibm-swift-sampleibm-charts1.1.21 of 1See more

ibm-swift-sample ibm-charts 1.1.2

1 of the 1 container images this version deploys carry CVE-2026-98194.

Container imageDigestPackageFixed in
ibmcom/icp-swift-sample:latestb5d8c6714dbc
linux@4.4.0-124.148
no fix listed

Open the chart page →

82,935
ikigaiikigai-chartVerified publisher0.0.91 of 58See more

ikigai ikigai-chart 0.0.9

1 of the 58 container images this version deploys carry CVE-2026-98194.

Container imageDigestPackageFixed in
jupyterhub/k8s-hub:1.2.0e4770285aaf7
linux@5.4.0-89.100
no fix listed

Open the chart page →

117,818
gmaintelVerified publisher0.1.01 of 1See more

gma intel 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-98194.

Container imageDigestPackageFixed in
smartedge/generic-multi-access-network-virtualization:1.04cd63c22ce36
linux@5.4.0-131.147
no fix listed

Open the chart page →

77,245
itm-servicesintelVerified publisher2.0.01 of 8See more

itm-services intel 2.0.0

1 of the 8 container images this version deploys carry CVE-2026-98194.

Container imageDigestPackageFixed in
intel/dlstreamer-pipeline-server:2022.1.1-ubuntu20aa8f5483a2ef
linux@5.4.0-120.136
no fix listed

Open the chart page →

90,724
map5gintelVerified publisher1.0.01 of 1See more

map5g intel 1.0.0

1 of the 1 container images this version deploys carry CVE-2026-98194.

Container imageDigestPackageFixed in
smartedge/generic-multi-access-network-virtualization:1.04cd63c22ce36
linux@5.4.0-131.147
no fix listed

Open the chart page →

77,245
multimodal-data-visualizationintelVerified publisher3.0.01 of 2See more

multimodal-data-visualization intel 3.0.0

1 of the 2 container images this version deploys carry CVE-2026-98194.

Container imageDigestPackageFixed in
intel/multimodal-data-visualization-streaming:3.01a89327e499b
linux@5.4.0-122.138
no fix listed

Open the chart page →

83,711
homebridgejespernohrVerified publisher0.2.01 of 1See more

homebridge jespernohr 0.2.0

1 of the 1 container images this version deploys carry CVE-2026-98194.

Container imageDigestPackageFixed in
homebridge/homebridge:latest22cdfca31934
linux@6.8.0-142.142
no fix listed

Open the chart page →

38,268
valheim-serverk8s-chartsVerified publisher1.3.01 of 1See more

valheim-server k8s-charts 1.3.0

1 of the 1 container images this version deploys carry CVE-2026-98194.

Container imageDigestPackageFixed in
mbround18/valheim:3.1.070bd4da591cd
linux@5.15.0-133.144
no fix listed

Open the chart page →

66,039
k8s-dev-podk8s-dev-pod0.3.11 of 1See more

k8s-dev-pod k8s-dev-pod 0.3.1

1 of the 1 container images this version deploys carry CVE-2026-98194.

Container imageDigestPackageFixed in
ghcr.io/bryopsida/k8s-dev-pod:main82d0b161161d
linux@6.8.0-60.63
no fix listed

Open the chart page →

74,737
huekatool1.0.81 of 1See more

hue katool 1.0.8

1 of the 1 container images this version deploys carry CVE-2026-98194.

Container imageDigestPackageFixed in
gethue/hue:4.11.011b649636e68
linux@5.4.0-136.153
no fix listed

Open the chart page →

85,067
allurekfirfer0.1.81 of 2See more

allure kfirfer 0.1.8

1 of the 2 container images this version deploys carry CVE-2026-98194.

Container imageDigestPackageFixed in
frankescobar/allure-docker-service:2.21.08a4d7e9308de
linux@4.15.0-204.215
no fix listed

Open the chart page →

69,504
kovi-appkovi-charts0.9.01 of 1See more

kovi-app kovi-charts 0.9.0

1 of the 1 container images this version deploys carry CVE-2026-98194.

Container imageDigestPackageFixed in
kennethreitz/httpbin:latest599fe5e50731
linux@4.15.0-38.41
no fix listed

Open the chart page →

85,911
istiokubeflow1.0.02 of 2See more

istio kubeflow 1.0.0

2 of the 2 container images this version deploys carry CVE-2026-98194.

Container imageDigestPackageFixed in
istio/pilot:1.9.652f25f91d702
linux@4.15.0-144.148
no fix listed
istio/proxyv2:1.9.687a9db561d2e
linux@4.15.0-144.148
no fix listed

Open the chart page →

151,390
kubernetes-netskope-publisherkubernetes-netskope-publisherVerified publisher1.5.01 of 2See more

kubernetes-netskope-publisher kubernetes-netskope-publisher 1.5.0

1 of the 2 container images this version deploys carry CVE-2026-98194.

Container imageDigestPackageFixed in
netskopeprivateaccess/publisher_u22:latest0b43204c37d6
linux@5.15.0-190.200
no fix listed

Open the chart page →

42,093
pulsarkubesphere-stable2.7.131 of 3See more

pulsar kubesphere-stable 2.7.13

1 of the 3 container images this version deploys carry CVE-2026-98194.

Container imageDigestPackageFixed in
streamnative/apache-pulsar-grafana-dashboard-k8s:0.0.1611bceacec8fb
linux@5.4.0-77.86
no fix listed

Open the chart page →

94,717
kusionkusionstackVerified publisher0.14.11 of 3See more

kusion kusionstack 0.14.1

1 of the 3 container images this version deploys carry CVE-2026-98194.

Container imageDigestPackageFixed in
kusionstack/kusion:v0.14.0126c8f0b0976
linux@5.15.0-130.140
no fix listed

Open the chart page →

67,845
homebridgelbenicio-communityVerified publisher0.1.151 of 1See more

homebridge lbenicio-community 0.1.15

1 of the 1 container images this version deploys carry CVE-2026-98194.

Container imageDigestPackageFixed in
homebridge/homebridge:latest22cdfca31934
linux@6.8.0-142.142
no fix listed

Open the chart page →

38,268
allure_docker_servicelovemew67Verified publisher0.0.11 of 1See more

allure_docker_service lovemew67 0.0.1

1 of the 1 container images this version deploys carry CVE-2026-98194.

Container imageDigestPackageFixed in
frankescobar/allure-docker-service:2.27.00815040339a9
linux@4.15.0-213.224
no fix listed

Open the chart page →

65,506
nublado2lsst-sqre0.8.51 of 2See more

nublado2 lsst-sqre 0.8.5

1 of the 2 container images this version deploys carry CVE-2026-98194.

Container imageDigestPackageFixed in
lsstsqre/nublado2:2.0.1b75bf8aaafa4
linux@5.4.0-100.113
no fix listed

Open the chart page →

92,976
alluremidokura-communityVerified publisher0.1.31 of 2See more

allure midokura-community 0.1.3

1 of the 2 container images this version deploys carry CVE-2026-98194.

Container imageDigestPackageFixed in
frankescobar/allure-docker-service:2.19.0cafa03b94dac
linux@4.15.0-191.202
no fix listed

Open the chart page →

72,759
MINTmint8.0.21 of 15See more

MINT mint 8.0.2

1 of the 15 container images this version deploys carry CVE-2026-98194.

Container imageDigestPackageFixed in
mintproject/graphql-engine:305c0dbeba1878eafe348f21fc300fbfc017d9dc83aade2c1855
linux@5.4.0-117.132
no fix listed

Open the chart page →

116,691
chirpstackmosquitto-helm-chart0.5.01 of 8See more

chirpstack mosquitto-helm-chart 0.5.0

1 of the 8 container images this version deploys carry CVE-2026-98194.

Container imageDigestPackageFixed in
apachepulsar/pulsar:2.9.0d056c89b7131
linux@5.4.0-90.101
no fix listed

Open the chart page →

105,598
danboorumy0nVerified publisher0.0.21 of 1See more

danbooru my0n 0.0.2

1 of the 1 container images this version deploys carry CVE-2026-98194.

Container imageDigestPackageFixed in
ghcr.io/danbooru/danbooru:9cab67c0ac72a8c52289302c519715ceec2372d95f545698e907
linux@5.15.0-46.49
no fix listed

Open the chart page →

106,251
danbooru-stackmy0nVerified publisher0.0.31 of 4See more

danbooru-stack my0n 0.0.3

1 of the 4 container images this version deploys carry CVE-2026-98194.

Container imageDigestPackageFixed in
ghcr.io/danbooru/danbooru:9cab67c0ac72a8c52289302c519715ceec2372d95f545698e907
linux@5.15.0-46.49
no fix listed

Open the chart page →

106,251
smilencsaVerified publisher1.1.03 of 23See more

smile ncsa 1.1.0

3 of the 23 container images this version deploys carry CVE-2026-98194.

Container imageDigestPackageFixed in
socialmediamacroscope/autophrase:0.1.570fb11d4f531
linux@5.4.0-163.180
no fix listed
socialmediamacroscope/collect_reddit_comment:0.1.219d3d26d53ee
linux@4.15.0-210.221
no fix listed
socialmediamacroscope/image_crawler:0.1.2f508216be63c
linux@4.15.0-210.221
no fix listed

Open the chart page →

292,245
splashntppoolVerified publisher1.0.41 of 1See more

splash ntppool 1.0.4

1 of the 1 container images this version deploys carry CVE-2026-98194.

Container imageDigestPackageFixed in
scrapinghub/splash:3.4.1a5f89bc84606
linux@4.15.0-74.84
no fix listed

Open the chart page →

95,859
comacopencord1.0.03 of 9See more

comac opencord 1.0.0

3 of the 9 container images this version deploys carry CVE-2026-98194.

Container imageDigestPackageFixed in
omecproject/mcord-synchronizer:comac-1.0.0cfdb566dd949
linux@4.4.0-142.168
no fix listed
omecproject/onos-progran:1.0.05715e5648aa0
linux@4.4.0-112.135
no fix listed
omecproject/progran-synchronizer:comac-1.0.0d109a8e57e71
linux@4.4.0-142.168
no fix listed

Open the chart page →

260,817
comac-platformopencord0.0.171 of 11See more

comac-platform opencord 0.0.17

1 of the 11 container images this version deploys carry CVE-2026-98194.

Container imageDigestPackageFixed in
omecproject/mcord-synchronizer:comac-1.0.0cfdb566dd949
linux@4.4.0-142.168
no fix listed

Open the chart page →

82,981
omec-control-planeopencord0.1.311 of 8See more

omec-control-plane opencord 0.1.31

1 of the 8 container images this version deploys carry CVE-2026-98194.

Container imageDigestPackageFixed in
omecproject/mme-exporter:paging-latestbcc5f19fd676
linux@4.15.0-88.88
no fix listed

Open the chart page →

110,209
onos-progranopencord1.2.71 of 2See more

onos-progran opencord 1.2.7

1 of the 2 container images this version deploys carry CVE-2026-98194.

Container imageDigestPackageFixed in
muluder/prograncontrollermcord:0.1.843b597a93da7
linux@4.4.0-112.135
no fix listed

Open the chart page →

97,641
ponsimv2opencord1.2.31 of 2See more

ponsimv2 opencord 1.2.3

1 of the 2 container images this version deploys carry CVE-2026-98194.

Container imageDigestPackageFixed in
voltha/voltha-tester:1.7.0655c3048a602
linux@4.4.0-154.181
no fix listed

Open the chart page →

68,061
sebaopencord1.0.05 of 17See more

seba opencord 1.0.0

5 of the 17 container images this version deploys carry CVE-2026-98194.

Container imageDigestPackageFixed in
voltha/voltha-cli:1.6.0c4e41e92f046
linux@4.4.0-137.163
no fix listed
voltha/voltha-envoy:1.6.059ab2a00f712
linux@3.13.0-126.175
no fix listed
voltha/voltha-netconf:1.6.037f80524c207
linux@4.4.0-137.163
no fix listed
voltha/voltha-ofagent:1.6.09ee8c1f4428c
linux@4.4.0-137.163
no fix listed
voltha/voltha-voltha:1.6.0ff596b62de59
linux@4.4.0-137.163
no fix listed

Open the chart page →

370,575
open-vpnopenvpn0.0.11 of 1See more

open-vpn openvpn 0.0.1

1 of the 1 container images this version deploys carry CVE-2026-98194.

Container imageDigestPackageFixed in
ghcr.io/linuxserver/openvpn-as:version-2.8.6-916f8e7d-ubuntu184ee0764310e7
linux@4.15.0-126.129
no fix listed

Open the chart page →

81,351
openwhiskopenwhisk1.0.01 of 10See more

openwhisk openwhisk 1.0.0

1 of the 10 container images this version deploys carry CVE-2026-98194.

Container imageDigestPackageFixed in
openwhisk/ow-utils:1.0.0c80dba0de3aa
linux@4.15.0-122.124
no fix listed

Open the chart page →

106,821
osdfir-infrastructureosdfir-infrastructureVerified publisher2.15.04 of 40See more

osdfir-infrastructure osdfir-infrastructure 2.15.0

4 of the 40 container images this version deploys carry CVE-2026-98194.

Container imageDigestPackageFixed in
ghcr.io/openrelik/openrelik-worker-analyzer-config:latest1269d3d8d2c2
linux@6.8.0-136.136
no fix listed
ghcr.io/openrelik/openrelik-worker-dfindexeddb:latest31966a825782
linux@6.8.0-136.136
no fix listed
ghcr.io/openrelik/openrelik-worker-floss:latest7a331eb83c6a
linux@6.8.0-136.136
no fix listed
ghcr.io/openrelik/openrelik-worker-os-creds:latest7fc7ec101f08
linux@6.8.0-136.136
no fix listed

Open the chart page →

240,943
minecraftpaul1365972-mc3.0.11 of 1See more

minecraft paul1365972-mc 3.0.1

1 of the 1 container images this version deploys carry CVE-2026-98194.

Container imageDigestPackageFixed in
itzg/minecraft-server:latest7b728e72b26b
linux@6.8.0-146.146
no fix listed

Open the chart page →

38,590
seafilephybros-helm-charts4.0.11 of 1See more

seafile phybros-helm-charts 4.0.1

1 of the 1 container images this version deploys carry CVE-2026-98194.

Container imageDigestPackageFixed in
seafileltd/seafile-mc:9.0.97ac833196f60
linux@5.4.0-125.141
no fix listed

Open the chart page →

94,626
substreams-sink-kvpinaxVerified publisher0.0.41 of 1See more

substreams-sink-kv pinax 0.0.4

1 of the 1 container images this version deploys carry CVE-2026-98194.

Container imageDigestPackageFixed in
ghcr.io/streamingfast/substreams-sink-kv:v2.3.026953ec68d5d
linux@5.4.0-200.220
no fix listed

Open the chart page →

59,763
substreams-sink-nooppinaxVerified publisher0.0.31 of 1See more

substreams-sink-noop pinax 0.0.3

1 of the 1 container images this version deploys carry CVE-2026-98194.

Container imageDigestPackageFixed in
ghcr.io/streamingfast/substreams-sink-noop:v1.4.0d7c43c3135c6
linux@5.4.0-200.220
no fix listed

Open the chart page →

59,694
podnat-state-storepodnat-controller0.3.21 of 1See more

podnat-state-store podnat-controller 0.3.2

1 of the 1 container images this version deploys carry CVE-2026-98194.

Container imageDigestPackageFixed in
dgraziotin/nginx-webdav-nononsense:1.23.138f2de42bed0
linux@5.4.0-122.138
no fix listed

Open the chart page →

81,098
komgarubxkubeVerified publisher0.1.51 of 1See more

komga rubxkube 0.1.5

1 of the 1 container images this version deploys carry CVE-2026-98194.

Container imageDigestPackageFixed in
gotson/komga:1.28.1d8f772dce7b3
linux@7.0.0-38.38
no fix listed

Open the chart page →

26,090
seafileschmitzis13.0.131 of 4See more

seafile schmitzis 13.0.13

1 of the 4 container images this version deploys carry CVE-2026-98194.

Container imageDigestPackageFixed in
schmitzis/monorepo:seafile-13.0-latestf7e51ba2fb07
linux@6.8.0-139.139
no fix listed

Open the chart page →

44,619
snipeitschmitzis6.1.01 of 2See more

snipeit schmitzis 6.1.0

1 of the 2 container images this version deploys carry CVE-2026-98194.

Container imageDigestPackageFixed in
snipe/snipe-it:v8.3.1141ebf2386fe
linux@6.8.0-79.79
no fix listed

Open the chart page →

69,742
photoprismschoolguys-helmcharts0.3.81 of 1See more

photoprism schoolguys-helmcharts 0.3.8

1 of the 1 container images this version deploys carry CVE-2026-98194.

Container imageDigestPackageFixed in
photoprism/photoprism:260601650c6ad5a651
linux@7.0.0-22.22
no fix listed

Open the chart page →

61,622

Container images carrying it

185 by charts deploying them

A fixed version is listed for 0 of the 1 affected package.

Container imageDigestPackageFixed inUsed by
vinanrra/7dtd-server:v0.4.4f9534490bd2b
linux@4.15.0-204.215
no fix listed
1
voltha/voltha-cli:1.6.0c4e41e92f046
linux@4.4.0-137.163
no fix listed
1
voltha/voltha-envoy:1.6.059ab2a00f712
linux@3.13.0-126.175
no fix listed
1
voltha/voltha-netconf:1.6.037f80524c207
linux@4.4.0-137.163
no fix listed
1
voltha/voltha-ofagent:1.6.09ee8c1f4428c
linux@4.4.0-137.163
no fix listed
1
voltha/voltha-tester:1.7.0655c3048a602
linux@4.4.0-154.181
no fix listed
1
voltha/voltha-voltha:1.6.0ff596b62de59
linux@4.4.0-137.163
no fix listed
1
wallarm/kong:3.1.0-ubuntu-4.6.0ea9608c82e40
linux@5.4.0-144.161
no fix listed
1
xeladock/mysql_dns:latest4baf531453f1
linux@5.15.0-25.25
no fix listed
1
gcr.io/flink-operator/deployer:webhook-cert809338a69bd5
linux@4.15.0-88.88
no fix listed
1
gcr.io/istio-release/pilot:release-1.0-latest-daily5ea7b7f3632a
linux@4.4.0-150.176
no fix listed
1
gcr.io/istio-release/proxyv2:release-1.0-latest-daily8f9ff98fdbef
linux@4.4.0-150.176
no fix listed
1
ghcr.io/cosmicrocks/datum:v0.4.0beta76771c3cc8c3
linux@6.8.0-90.91
no fix listed
1
ghcr.io/guydavis/machinaris:test50a71a30f18e
linux@6.8.0-139.139
no fix listed
1
ghcr.io/haveagitgat/tdarr:2.00.18.23fbe4c29d14c
linux@5.4.0-110.124
no fix listed
1
ghcr.io/kubeflow/spark-operator/controller:2.2.1865ff4da5686
linux@5.4.0-214.234
no fix listed
1
ghcr.io/kvaps/opennebula:v5.12.0.4-1e28e0e7de11b
linux@5.4.0-80.90
no fix listed
1
ghcr.io/kvaps/opennebula-flow:v5.12.0.4-1600221f0f43f
linux@5.4.0-80.90
no fix listed
1
ghcr.io/maastrichtu-ids/rstudio:latest981aa4c109e1
linux@6.8.0-57.59
no fix listed
1
ghcr.io/mend/renovate-ee-server:15.7.063e0ca823222
linux@6.8.0-146.146
no fix listed
1
ghcr.io/openrelik/openrelik-worker-analyzer-config:latest1269d3d8d2c2
linux@6.8.0-136.136
no fix listed
1
ghcr.io/openrelik/openrelik-worker-dfindexeddb:latest31966a825782
linux@6.8.0-136.136
no fix listed
1
ghcr.io/openrelik/openrelik-worker-floss:latest7a331eb83c6a
linux@6.8.0-136.136
no fix listed
1
ghcr.io/openrelik/openrelik-worker-os-creds:latest7fc7ec101f08
linux@6.8.0-136.136
no fix listed
1
ghcr.io/oznu/homebridge:2022-07-08ff2af53897e7
linux@5.4.0-121.137
no fix listed
1
ghcr.io/smarter-project/audio-client:v3.1.23c8375dc5487
linux@5.4.0-131.147
no fix listed
1
ghcr.io/smarter-project/gstreamer:v1.0.25ecb16015aa8
linux@5.4.0-131.147
no fix listed
1
ghcr.io/smarter-project/image-detector:v2.5.31dcca70c6446
linux@5.4.0-131.147
no fix listed
1
ghcr.io/streamingfast/substreams-sink-kv:v2.3.026953ec68d5d
linux@5.4.0-200.220
no fix listed
1
ghcr.io/streamingfast/substreams-sink-noop:v1.4.0d7c43c3135c6
linux@5.4.0-200.220
no fix listed
1
public.ecr.aws/aktosecurity/akto-api-security-testing-db-layer:1.74.4_local1ed844ecab29
linux@6.8.0-139.139
no fix listed
1
public.ecr.aws/spotinst/spot-network-client:1.0.1486380a01587d
linux@6.8.0-100.100
no fix listed
1
public.ecr.aws/spotinst/spot-network-client:1.0.0-8-lb_endpoint-d0ec127efcecf98b912
linux@4.15.0-191.202
no fix listed
1
registry.gitlab.com/crafty-controller/crafty-4:latest7b6e87514259
linux@6.8.0-139.139
no fix listed
1
registry.gitlab.com/infinitydon/registry/open5gs-aio:v2.2.2f6385712935f
linux@5.4.0-67.75
no fix listed
1

syft 1.42.1 · advisories as of 9 Oct 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.