StackRadar

CVE-2026-98400

Medium

Advisory

Published 14 Oct 2026In the index since 18 Oct 2026
Severity
Medium
worst across findings
CVSS
5.5
base score, highest
EPSS
0.002
10th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
108
of 18,176 indexed, latest versions
Container images
118
deployed by those charts
Fix available
None
affected package

The matching OSV records carry no description.

Carried by container images the latest versions of 108 of 18,176 indexed charts deploy, on 118 images.

Affected packageAffected versionsFixed inImages
linuxdeb5.4.0-62.70, 5.4.0-65.73, 5.4.0-67.75, 5.4.0-74.83+66 moreno fix listed118
OSV records
UBUNTU-CVE-2026-98400

Charts affected

108 by stars
ChartLatestAffected imagesRadar Score
sn-platform-slimstreamnative1.11.461 of 6See more

sn-platform-slim streamnative 1.11.46

1 of the 6 container images this version deploys carry CVE-2026-98400.

Container imageDigestPackageFixed in
streamnative/apache-pulsar-grafana-dashboard-k8s:0.1.20e6d7aa3ef32
linux@5.4.0-182.202
no fix listed

Open the chart page →

68,416
maxscalesvtech-public-helm-charts1.0.01 of 2See more

maxscale svtech-public-helm-charts 1.0.0

1 of the 2 container images this version deploys carry CVE-2026-98400.

Container imageDigestPackageFixed in
svtechnmaa/svtech_maxscale:v1.0.3410a25b51f9f
linux@5.15.0-92.102
no fix listed

Open the chart page →

77,955
rundecksvtech-public-helm-charts1.0.01 of 2See more

rundeck svtech-public-helm-charts 1.0.0

1 of the 2 container images this version deploys carry CVE-2026-98400.

Container imageDigestPackageFixed in
svtechnmaa/svtech_rundeck:v1.2.26e368ace0977
linux@5.4.0-176.196
no fix listed

Open the chart page →

76,621
tensor_apptensor-app0.2.21 of 3See more

tensor_app tensor-app 0.2.2

1 of the 3 container images this version deploys carry CVE-2026-98400.

Container imageDigestPackageFixed in
xeladock/mysql_dns:latest4baf531453f1
linux@5.15.0-25.25
no fix listed

Open the chart page →

112,594
tdarrvhdirkVerified publisher5.0.52 of 2See more

tdarr vhdirk 5.0.5

2 of the 2 container images this version deploys carry CVE-2026-98400.

Container imageDigestPackageFixed in
haveagitgat/tdarr_node:2.17.013ff0913202dd
linux@5.4.0-163.180
no fix listed
ghcr.io/haveagitgat/tdarr:2.00.18.23fbe4c29d14c
linux@5.4.0-110.124
no fix listed

Open the chart page →

157,754
unmanicvhdirkVerified publisher0.1.41 of 1See more

unmanic vhdirk 0.1.4

1 of the 1 container images this version deploys carry CVE-2026-98400.

Container imageDigestPackageFixed in
josh5/unmanic:0.2.64d49c4816260
linux@5.15.0-100.110
no fix listed

Open the chart page →

78,857
twenty-crmvictorlane0.0.11 of 3See more

twenty-crm victorlane 0.0.1

1 of the 3 container images this version deploys carry CVE-2026-98400.

Container imageDigestPackageFixed in
twentycrm/twenty-postgres-spilo:latest2f78405a78be
linux@5.15.0-134.145
no fix listed

Open the chart page →

72,525
kongwallarmVerified publisher4.6.31 of 7See more

kong wallarm 4.6.3

1 of the 7 container images this version deploys carry CVE-2026-98400.

Container imageDigestPackageFixed in
wallarm/kong:3.1.0-ubuntu-4.6.0ea9608c82e40
linux@5.4.0-144.161
no fix listed

Open the chart page →

76,208

Container images carrying it

118 by charts deploying them

A fixed version is listed for 0 of the 1 affected package.

Container imageDigestPackageFixed inUsed by
gradiant/srsran-5g:23_10_19061b1bf0f36
linux@5.4.0-187.207
no fix listed
2
homebridge/homebridge:latest22cdfca31934
linux@6.8.0-142.142
no fix listed
2
seafileltd/seafile-mc:11.0.12d0c66e4621bd
linux@5.15.0-118.128
no fix listed
2
smartedge/generic-multi-access-network-virtualization:1.04cd63c22ce36
linux@5.4.0-131.147
no fix listed
2
streamnative/apache-pulsar-grafana-dashboard-k8s:0.1.20e6d7aa3ef32
linux@5.4.0-182.202
no fix listed
2
ghcr.io/bryopsida/k8s-dev-pod:main82d0b161161d
linux@6.8.0-60.63
no fix listed
2
ghcr.io/codingducksrl/laravel:8.15be52524664c
linux@5.15.0-52.58
no fix listed
2
ghcr.io/danbooru/danbooru:9cab67c0ac72a8c52289302c519715ceec2372d95f545698e907
linux@5.15.0-46.49
no fix listed
2
ghcr.io/games-on-whales/retroarch:1.0.0103fbcec2314
linux@5.4.0-81.91
no fix listed
2
aktosecurity/data-ingestion-service213aded7adc5
linux@6.8.0-94.96
no fix listed
1
aktosecurity/data-ingestion-service:1.4.946ed5bcb04b2
linux@7.0.0-28.28
no fix listed
1
aktosecurity/data-ingestion-service:1.6.6dc4b05df83f7
linux@7.0.0-38.38
no fix listed
1
andrcuns/dependabot-gitlab:7.7.0-alpha.143060f159f4c
linux@6.8.0-138.138
no fix listed
1
apachepulsar/pulsar:2.9.0d056c89b7131
linux@5.4.0-90.101
no fix listed
1
apachepulsar/pulsar:2.8.2d538416d5afe
linux@5.4.0-91.102
no fix listed
1
assistiot/open_api_backend:1.1.230812ba93555
linux@5.15.0-91.101
no fix listed
1
assistiot/video_augmentation:runner-cpu-lateste5ae539ce2cb
linux@5.4.0-144.161
no fix listed
1
atlassian/bamboo:12.1.12eb98d6fbeee7
linux@6.8.0-146.146
no fix listed
1
atlassian/bitbucket:10.2.85aed3d8cb4bc
linux@6.8.0-146.146
no fix listed
1
bicarus/elrond-rosetta:v1.3.50.0b1dab0721e1c
linux@5.4.0-136.153
no fix listed
1
browserless/chrome:1.48.0-chrome-stablec81ae5585b47
linux@5.4.0-81.91
no fix listed
1
chetangautamm/repo:sipp.v3e7f7049e1544
linux@5.4.0-65.73
no fix listed
1
countly/countly-server:25.05.4e3c238248f99
linux@5.4.0-189.209
no fix listed
1
datamate/seafile-professional:11.0.202dd66b722464
linux@5.15.0-153.163
no fix listed
1
dgraziotin/nginx-webdav-nononsense:1.23.138f2de42bed0
linux@5.4.0-122.138
no fix listed
1
dongjiang1989/lxcfs:v6.0.34bf9ae391948
linux@5.4.0-216.236
no fix listed
1
fiware/biz-ecosystem-charging-backend:11.7.029456835bb2c
linux@5.4.0-216.236
no fix listed
1
flyway/flyway:9.1545b5d7cdc75a
linux@5.4.0-144.161
no fix listed
1
geonode/geoserver:2.28.4-latest81b1d431b7e9
linux@5.15.0-181.191
no fix listed
1
gethue/hue:4.11.011b649636e68
linux@5.4.0-136.153
no fix listed
1
gethue/hue:latest7d5c1b9f8a79
linux@5.15.0-143.153
no fix listed
1
gotson/komga:1.29.19fa656e8259b
linux@7.0.0-38.38
no fix listed
1
gotson/komga:1.28.1d8f772dce7b3
linux@7.0.0-38.38
no fix listed
1
grpl/grapple-cli:0.2.127c00aafee6629
linux@6.8.0-39.39
no fix listed
1
haveagitgat/tdarr:2.00.181256348872ce
linux@5.4.0-109.123
no fix listed
1
haveagitgat/tdarr_node:2.17.013ff0913202dd
linux@5.4.0-163.180
no fix listed
1
helicone/clickhouse-migration-runner:v2025.03.05-14c69b971a7e4
linux@5.4.0-200.220
no fix listed
1
intel/dlstreamer-pipeline-server:2022.1.1-ubuntu20aa8f5483a2ef
linux@5.4.0-120.136
no fix listed
1
intel/multimodal-data-visualization-streaming:3.01a89327e499b
linux@5.4.0-122.138
no fix listed
1
ironmansoftware/universal:3.3.1-ubuntu-20.041943c73cce31
linux@5.4.0-125.141
no fix listed
1
itzg/minecraft-server:2026.10.05a2ab74ae179
linux@6.8.0-146.146
no fix listed
1
jakowenko/double-take:1.6.0b858bac9e32a
linux@5.4.0-89.100
no fix listed
1
josh5/unmanic:0.2.64d49c4816260
linux@5.15.0-100.110
no fix listed
1
jupyterhub/k8s-hub:0.11.1b6b4a1a34bf0
linux@5.4.0-62.70
no fix listed
1
jupyterhub/k8s-hub:1.2.0e4770285aaf7
linux@5.4.0-89.100
no fix listed
1
kong/httpbin:latesta6ac46531193
linux@5.15.0-130.140
no fix listed
1
kusionstack/kusion:v0.14.0126c8f0b0976
linux@5.15.0-130.140
no fix listed
1
langgenius/dify-plugin-daemon:0.6.10-local34412a22d1e1
linux@6.8.0-137.137
no fix listed
1
langgenius/dify-plugin-daemon:main-local4b07ca30ab2a
linux@6.8.0-146.146
no fix listed
1
langgenius/dify-plugin-daemon:0.5.1-local8269050f192e
linux@6.8.0-88.89
no fix listed
1

syft 1.42.1 · advisories as of 18 Oct 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.