StackRadar

CVE-2026-98436

Medium

Advisory

Published 18 Oct 2026In the index since 20 Oct 2026
Severity
Medium
worst across findings
CVSS
6.8
base score, highest
EPSS
0.001
3rd percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
367
of 18,219 indexed, latest versions
Container images
368
deployed by those charts
Fix available
None
affected package

The matching OSV records carry no description.

Carried by container images the latest versions of 367 of 18,219 indexed charts deploy, on 368 images.

Affected packageAffected versionsFixed inImages
linuxdeb3.13.0-46.77, 3.13.0-126.175, 3.13.0-149.199, 3.13.0-170.220+140 moreno fix listed368
OSV records
DEBIAN-CVE-2026-98436UBUNTU-CVE-2026-98436

Charts affected

367 by stars
ChartLatestAffected imagesRadar Score
devtron-enterprisedevtron48.0.02 of 28See more

devtron-enterprise devtron 48.0.0

2 of the 28 container images this version deploys carry CVE-2026-98436.

Container imageDigestPackageFixed in
quay.io/devtron/devtron-utils:dup-chart-repo-v1.1.095d6f0e05636
linux@6.1.55-1
no fix listed
quay.io/devtron/notifier:9804331c-372-39294709c7da19c5a
linux@6.1.153-1
no fix listed

Open the chart page →

217,278
devtron-enterprisedevtron-labs48.0.02 of 28See more

devtron-enterprise devtron-labs 48.0.0

2 of the 28 container images this version deploys carry CVE-2026-98436.

Container imageDigestPackageFixed in
quay.io/devtron/devtron-utils:dup-chart-repo-v1.1.095d6f0e05636
linux@6.1.55-1
no fix listed
quay.io/devtron/notifier:9804331c-372-39294709c7da19c5a
linux@6.1.153-1
no fix listed

Open the chart page →

217,278
devtron-operatordevtron-labs0.23.31 of 11See more

devtron-operator devtron-labs 0.23.3

1 of the 11 container images this version deploys carry CVE-2026-98436.

Container imageDigestPackageFixed in
quay.io/devtron/devtron-utils:dup-chart-repo-v1.1.095d6f0e05636
linux@6.1.55-1
no fix listed

Open the chart page →

119,903
difydify1.0.01 of 4See more

dify dify 1.0.0

1 of the 4 container images this version deploys carry CVE-2026-98436.

Container imageDigestPackageFixed in
langgenius/dify-plugin-daemon:main-local4b07ca30ab2a
linux@6.8.0-146.146
no fix listed

Open the chart page →

56,433
domainmoddjjudas21Verified publisher1.0.01 of 1See more

domainmod djjudas21 1.0.0

1 of the 1 container images this version deploys carry CVE-2026-98436.

Container imageDigestPackageFixed in
domainmod/domainmod:4.23.04017bfe4c597
linux@6.1.38-4
no fix listed

Open the chart page →

88,652
photoprismdjjudas21Verified publisher99.99.991 of 1See more

photoprism djjudas21 99.99.99

1 of the 1 container images this version deploys carry CVE-2026-98436.

Container imageDigestPackageFixed in
photoprism/photoprism:240711-cefc6fd632ca74
linux@6.8.0-38.38
no fix listed

Open the chart page →

100,514
wizarrdjjudas21Verified publisher0.1.51 of 1See more

wizarr djjudas21 0.1.5

1 of the 1 container images this version deploys carry CVE-2026-98436.

Container imageDigestPackageFixed in
ghcr.io/wizarrrr/wizarr:4.2.0-beta.3d19d886d5090
linux@6.1.55-1
no fix listed

Open the chart page →

92,689
seafileeleksbai0.1.11 of 3See more

seafile eleksbai 0.1.1

1 of the 3 container images this version deploys carry CVE-2026-98436.

Container imageDigestPackageFixed in
seafileltd/seafile-mc:9.0.106693911bcc40
linux@5.4.0-135.152
no fix listed

Open the chart page →

93,113
monitoring-proxyenixVerified publisher0.3.01 of 2See more

monitoring-proxy enix 0.3.0

1 of the 2 container images this version deploys carry CVE-2026-98436.

Container imageDigestPackageFixed in
library/haproxy:2.9.6fc5748ff7c72
linux@6.1.76-1
no fix listed

Open the chart page →

78,681
flywayeosc-lot-1Verified publisher0.7.01 of 3See more

flyway eosc-lot-1 0.7.0

1 of the 3 container images this version deploys carry CVE-2026-98436.

Container imageDigestPackageFixed in
flyway/flyway:9.1545b5d7cdc75a
linux@5.4.0-144.161
no fix listed

Open the chart page →

72,571
matomoeosc-lot-1Verified publisher0.2.01 of 1See more

matomo eosc-lot-1 0.2.0

1 of the 1 container images this version deploys carry CVE-2026-98436.

Container imageDigestPackageFixed in
library/matomo:5.1.2-apache2415789e1602
linux@6.1.119-1
no fix listed

Open the chart page →

65,941
beeport-uiethersphereVerified publisher0.76.21 of 3See more

beeport-ui ethersphere 0.76.2

1 of the 3 container images this version deploys carry CVE-2026-98436.

Container imageDigestPackageFixed in
library/node:lts14078204b6bb
linux@6.1.187-1
no fix listed

Open the chart page →

29,262
multichain-uiethersphereVerified publisher0.73.11 of 3See more

multichain-ui ethersphere 0.73.1

1 of the 3 container images this version deploys carry CVE-2026-98436.

Container imageDigestPackageFixed in
library/node:lts14078204b6bb
linux@6.1.187-1
no fix listed

Open the chart page →

29,189
nethermindethersphereVerified publisher0.2.11 of 1See more

nethermind ethersphere 0.2.1

1 of the 1 container images this version deploys carry CVE-2026-98436.

Container imageDigestPackageFixed in
nethermind/nethermind:1.14.615517708c3b6
linux@5.15.0-53.59
no fix listed

Open the chart page →

90,402
ferriscompanyferriscompany0.1.01 of 1See more

ferriscompany ferriscompany 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-98436.

Container imageDigestPackageFixed in
ghcr.io/libreconnect/ferriscompany:0.1.0-rc6ed86db9f0efe
linux@6.1.112-1
no fix listed

Open the chart page →

75,184
business-api-ecosystemfiware1.2.02 of 4See more

business-api-ecosystem fiware 1.2.0

2 of the 4 container images this version deploys carry CVE-2026-98436.

Container imageDigestPackageFixed in
fiware/biz-ecosystem-charging-backend:11.7.029456835bb2c
linux@5.4.0-216.236
no fix listed
fiware/biz-ecosystem-logic-proxy:11.20.3d551a13e8278
linux@6.1.137-1
no fix listed

Open the chart page →

171,843
flyteconnectorflyte2.0.01 of 1See more

flyteconnector flyte 2.0.0

1 of the 1 container images this version deploys carry CVE-2026-98436.

Container imageDigestPackageFixed in
ghcr.io/flyteorg/flyte-connectors:py3.12-v2.3.6896fc7b18b1b
linux@6.1.172-1
no fix listed

Open the chart page →

43,553
frinx-machinefrinx-helm-charts11.0.01 of 26See more

frinx-machine frinx-helm-charts 11.0.0

1 of the 26 container images this version deploys carry CVE-2026-98436.

Container imageDigestPackageFixed in
frinx/resource-manager:6.1.09cd0147a09bd
linux@6.1.76-1
no fix listed

Open the chart page →

126,588
resource-managerfrinx-helm-charts2.3.11 of 4See more

resource-manager frinx-helm-charts 2.3.1

1 of the 4 container images this version deploys carry CVE-2026-98436.

Container imageDigestPackageFixed in
frinx/resource-manager:6.1.09cd0147a09bd
linux@6.1.76-1
no fix listed

Open the chart page →

84,283
double-takegeek-cookbookVerified publisher2.3.21 of 1See more

double-take geek-cookbook 2.3.2

1 of the 1 container images this version deploys carry CVE-2026-98436.

Container imageDigestPackageFixed in
jakowenko/double-take:1.6.0b858bac9e32a
linux@5.4.0-89.100
no fix listed

Open the chart page →

86,583
mopidygeek-cookbookVerified publisher0.1.21 of 1See more

mopidy geek-cookbook 0.1.2

1 of the 1 container images this version deploys carry CVE-2026-98436.

Container imageDigestPackageFixed in
jaedb/iris:latest048cfbf58d57
linux@6.1.135-1
no fix listed

Open the chart page →

68,311
seafilegeek-cookbookVerified publisher3.2.01 of 1See more

seafile geek-cookbook 3.2.0

1 of the 1 container images this version deploys carry CVE-2026-98436.

Container imageDigestPackageFixed in
seafileltd/seafile-mc:8.0.7ed0fcda5e6a9
linux@5.4.0-80.90
no fix listed

Open the chart page →

100,574
knativegitlabVerified publisher0.10.03 of 10See more

knative gitlab 0.10.0

3 of the 10 container images this version deploys carry CVE-2026-98436.

Container imageDigestPackageFixed in
istio/node-agent-k8s:1.2.9268ab879ea51
linux@4.4.0-150.176
no fix listed
istio/pilot:1.2.9c09319753454
linux@4.4.0-150.176
no fix listed
istio/proxyv2:1.2.90c78be035e98
linux@4.4.0-150.176
no fix listed

Open the chart page →

194,430
glpiglpi-chart0.1.11 of 3See more

glpi glpi-chart 0.1.1

1 of the 3 container images this version deploys carry CVE-2026-98436.

Container imageDigestPackageFixed in
vdiogov/glpi-conteiner:latest6945f84f0058
linux@6.1.99-1
no fix listed

Open the chart page →

79,143
opentelemetry-demogpg-dev0.33.82 of 27See more

opentelemetry-demo gpg-dev 0.33.8

2 of the 27 container images this version deploys carry CVE-2026-98436.

Container imageDigestPackageFixed in
ghcr.io/open-telemetry/demo:1.12.0-quoteservice87eb325d306f
linux@6.1.112-1
no fix listed
ghcr.io/open-telemetry/demo:1.12.0-emailservicea1f5cebb5240
linux@6.1.69-1
no fix listed

Open the chart page →

196,721
grapple-installergrapple-installer0.3.231 of 1See more

grapple-installer grapple-installer 0.3.23

1 of the 1 container images this version deploys carry CVE-2026-98436.

Container imageDigestPackageFixed in
grpl/grapple-cli:0.2.127c00aafee6629
linux@6.8.0-39.39
no fix listed

Open the chart page →

90,528
hawk-envoy-pluginhawk0.1.01 of 4See more

hawk-envoy-plugin hawk 0.1.0

1 of the 4 container images this version deploys carry CVE-2026-98436.

Container imageDigestPackageFixed in
kong/httpbin:latesta6ac46531193
linux@5.15.0-130.140
no fix listed

Open the chart page →

70,339
heliconehelicone0.1.422 of 14See more

helicone helicone 0.1.42

2 of the 14 container images this version deploys carry CVE-2026-98436.

Container imageDigestPackageFixed in
helicone/clickhouse-migration-runner:v2025.03.05-14c69b971a7e4
linux@5.4.0-200.220
no fix listed
helicone/supabase-migration-runner:v2025.03.05-14a913936c97b
linux@6.1.52-1
no fix listed

Open the chart page →

156,820
7dtdhelm-7dtd0.1.01 of 1See more

7dtd helm-7dtd 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-98436.

Container imageDigestPackageFixed in
vinanrra/7dtd-server:v0.4.4f9534490bd2b
linux@4.15.0-204.215
no fix listed

Open the chart page →

64,822
kube-downscalerhelm-charts-nr0.7.61 of 1See more

kube-downscaler helm-charts-nr 0.7.6

1 of the 1 container images this version deploys carry CVE-2026-98436.

Container imageDigestPackageFixed in
hjacobs/kube-downscaler:23.2.0-6-gc9b88e84b2147f47425
linux@6.1.27-1
no fix listed

Open the chart page →

88,003
supersethelm-charts-nr1.1.31 of 1See more

superset helm-charts-nr 1.1.3

1 of the 1 container images this version deploys carry CVE-2026-98436.

Container imageDigestPackageFixed in
apache/superset:latest16b50bbef664
linux@6.1.180-1
no fix listed

Open the chart page →

30,618
countlyhelmforgeVerified publisher1.2.101 of 3See more

countly helmforge 1.2.10

1 of the 3 container images this version deploys carry CVE-2026-98436.

Container imageDigestPackageFixed in
countly/countly-server:25.05.4e3c238248f99
linux@5.4.0-189.209
no fix listed

Open the chart page →

74,385
drupalhelmforgeVerified publisher1.2.181 of 2See more

drupal helmforge 1.2.18

1 of the 2 container images this version deploys carry CVE-2026-98436.

Container imageDigestPackageFixed in
library/drupal:11.4.10-php8.5-apache-bookworm116fbf35120e
linux@6.1.190-1
no fix listed

Open the chart page →

17,609
komgahelmforgeVerified publisher1.4.181 of 1See more

komga helmforge 1.4.18

1 of the 1 container images this version deploys carry CVE-2026-98436.

Container imageDigestPackageFixed in
gotson/komga:1.29.19fa656e8259b
linux@7.0.0-38.38
no fix listed

Open the chart page →

27,906
middlewarehelmforgeVerified publisher1.2.111 of 4See more

middleware helmforge 1.2.11

1 of the 4 container images this version deploys carry CVE-2026-98436.

Container imageDigestPackageFixed in
middlewareeng/middleware:0.3.1747d880812f1
linux@6.1.140-1
no fix listed

Open the chart page →

63,628
minecrafthelmforgeVerified publisher1.5.71 of 1See more

minecraft helmforge 1.5.7

1 of the 1 container images this version deploys carry CVE-2026-98436.

Container imageDigestPackageFixed in
itzg/minecraft-server:2026.10.05a2ab74ae179
linux@6.8.0-146.146
no fix listed

Open the chart page →

38,746
moodlehelmforgeVerified publisher1.1.51 of 2See more

moodle helmforge 1.1.5

1 of the 2 container images this version deploys carry CVE-2026-98436.

Container imageDigestPackageFixed in
moodlehq/moodle-php-apache:8.4-bookworm922af5166835
linux@6.1.180-1
no fix listed

Open the chart page →

34,592
opensignhelmforgeVerified publisher1.0.01 of 3See more

opensign helmforge 1.0.0

1 of the 3 container images this version deploys carry CVE-2026-98436.

Container imageDigestPackageFixed in
opensign/opensigndigest-pinned0ebc230eed21
linux@6.1.129-1
no fix listed

Open the chart page →

69,345
supersethelmforgeVerified publisher1.4.21 of 5See more

superset helmforge 1.4.2

1 of the 5 container images this version deploys carry CVE-2026-98436.

Container imageDigestPackageFixed in
apache/superset:6.1.016b50bbef664
linux@6.1.180-1
no fix listed

Open the chart page →

34,432
myapphelmingapp0.1.01 of 1See more

myapp helmingapp 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-98436.

Container imageDigestPackageFixed in
muhammedgamal/fp23:latest74b4cd69b6fa
linux@6.1.90-1
no fix listed

Open the chart page →

83,061
openaevhelm-openbasVerified publisher2.0.151 of 7See more

openaev helm-openbas 2.0.15

1 of the 7 container images this version deploys carry CVE-2026-98436.

Container imageDigestPackageFixed in
openbas/caldera-server:5.1.0a277796d9724
linux@6.1.128-1
no fix listed

Open the chart page →

79,005
openbashelm-openbasVerified publisher1.8.141 of 7See more

openbas helm-openbas 1.8.14

1 of the 7 container images this version deploys carry CVE-2026-98436.

Container imageDigestPackageFixed in
openbas/caldera-server:5.1.0a277796d9724
linux@6.1.128-1
no fix listed

Open the chart page →

83,823
homebridgehomeenterpriseinc0.5.01 of 1See more

homebridge homeenterpriseinc 0.5.0

1 of the 1 container images this version deploys carry CVE-2026-98436.

Container imageDigestPackageFixed in
oznu/homebridge:2021-12-19-ubuntu2e12d0e2dcce
linux@4.15.0-163.171
no fix listed

Open the chart page →

78,972
huginnhomeenterpriseinc0.2.01 of 1See more

huginn homeenterpriseinc 0.2.0

1 of the 1 container images this version deploys carry CVE-2026-98436.

Container imageDigestPackageFixed in
huginn/huginn:4df1217d3055db980a04f293e28016b77826e3caeab0db98264e
linux@4.15.0-191.202
no fix listed

Open the chart page →

75,217
httpbin2022httpbin2022Verified publisher0.1.11 of 1See more

httpbin2022 httpbin2022 0.1.1

1 of the 1 container images this version deploys carry CVE-2026-98436.

Container imageDigestPackageFixed in
mshanley80/httpbin2022:latest5b189a70c0fb
linux@5.4.0-135.152
no fix listed

Open the chart page →

75,123
ibm-microclimateibm-charts0.1.01 of 8See more

ibm-microclimate ibm-charts 0.1.0

1 of the 8 container images this version deploys carry CVE-2026-98436.

Container imageDigestPackageFixed in
ibmcom/microclimate-theia:lateste17bdccc5030
linux@4.4.0-104.127
no fix listed

Open the chart page →

115,252
ibm-swift-sampleibm-charts1.1.21 of 1See more

ibm-swift-sample ibm-charts 1.1.2

1 of the 1 container images this version deploys carry CVE-2026-98436.

Container imageDigestPackageFixed in
ibmcom/icp-swift-sample:latestb5d8c6714dbc
linux@4.4.0-124.148
no fix listed

Open the chart page →

80,319
ikigaiikigai-chartVerified publisher0.0.91 of 58See more

ikigai ikigai-chart 0.0.9

1 of the 58 container images this version deploys carry CVE-2026-98436.

Container imageDigestPackageFixed in
jupyterhub/k8s-hub:1.2.0e4770285aaf7
linux@5.4.0-89.100
no fix listed

Open the chart page →

116,495
ilum-unity-catalogilumVerified publisher0.1.01 of 4See more

ilum-unity-catalog ilum 0.1.0

1 of the 4 container images this version deploys carry CVE-2026-98436.

Container imageDigestPackageFixed in
unitycatalog/unitycatalog-ui:main-aadc6fc3a688197b218
linux@6.1.137-1
no fix listed

Open the chart page →

67,147
gmaintelVerified publisher0.1.01 of 1See more

gma intel 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-98436.

Container imageDigestPackageFixed in
smartedge/generic-multi-access-network-virtualization:1.04cd63c22ce36
linux@5.4.0-131.147
no fix listed

Open the chart page →

75,098

Container images carrying it

368 by charts deploying them

A fixed version is listed for 0 of the 1 affected package.

Container imageDigestPackageFixed inUsed by
fluent/fluent-bit:4.0-debuge76397ef3983
linux@6.1.158-1
no fix listed
1
flyway/flyway:9.1545b5d7cdc75a
linux@5.4.0-144.161
no fix listed
1
frankescobar/allure-docker-service:2.27.00815040339a9
linux@4.15.0-213.224
no fix listed
1
frankescobar/allure-docker-service:2.21.08a4d7e9308de
linux@4.15.0-204.215
no fix listed
1
frankescobar/allure-docker-service:2.19.0cafa03b94dac
linux@4.15.0-191.202
no fix listed
1
galaxy/galaxy-init:v18.010267bad550e6
linux@3.13.0-149.199
no fix listed
1
galaxy/galaxy-stable:v18.018e577a626dfd
linux@3.13.0-149.199
no fix listed
1
geonode/geoserver:2.28.4-latest81b1d431b7e9
linux@5.15.0-181.191
no fix listed
1
geoscienceaustralia/dea-k8s-data:latestf4039b45572a
linux@4.15.0-117.118
no fix listed
1
gethue/hue:4.11.011b649636e68
linux@5.4.0-136.153
no fix listed
1
gethue/hue:4.10.05702b2c37ff9
linux@4.15.0-144.148
no fix listed
1
gethue/hue:latest7d5c1b9f8a79
linux@5.15.0-143.153
no fix listed
1
gotson/komga:1.29.19fa656e8259b
linux@7.0.0-38.38
no fix listed
1
gotson/komga:1.28.1d8f772dce7b3
linux@7.0.0-38.38
no fix listed
1
grpl/grapple-cli:0.2.127c00aafee6629
linux@6.8.0-39.39
no fix listed
1
gulacedia/web-dvwa-new:v367b467d961ca
linux@6.1.27-1
no fix listed
1
haveagitgat/tdarr:2.00.181256348872ce
linux@5.4.0-109.123
no fix listed
1
haveagitgat/tdarr_node:2.17.013ff0913202dd
linux@5.4.0-163.180
no fix listed
1
helicone/clickhouse-migration-runner:v2025.03.05-14c69b971a7e4
linux@5.4.0-200.220
no fix listed
1
helicone/supabase-migration-runner:v2025.03.05-14a913936c97b
linux@6.1.52-1
no fix listed
1
hjacobs/kube-janitor:23.7.0fbb303ed463c
linux@6.1.27-1
no fix listed
1
hjacobs/kube-web-view:23.8.0431f1bf013d0
linux@6.1.38-4
no fix listed
1
huginn/huginn:4df1217d3055db980a04f293e28016b77826e3caeab0db98264e
linux@4.15.0-191.202
no fix listed
1
huginn/huginn-single-process:4d17829cf6b15b004ad3f4be196303dca4944810c794eddc7b47
linux@4.15.0-135.139
no fix listed
1
hyperledger/fabric-couchdb:0.4.10c65891b6c237
linux@4.4.0-128.154
no fix listed
1
ibmcom/icp-swift-sample:latestb5d8c6714dbc
linux@4.4.0-124.148
no fix listed
1
ibmcom/microclimate-theia:lateste17bdccc5030
linux@4.4.0-104.127
no fix listed
1
ildarmukhametzyanov/priceapp:0.115d23720a3ee
linux@6.1.52-1
no fix listed
1
intel/dlstreamer-pipeline-server:2022.1.1-ubuntu20aa8f5483a2ef
linux@5.4.0-120.136
no fix listed
1
intel/multimodal-data-visualization-streaming:3.01a89327e499b
linux@5.4.0-122.138
no fix listed
1
intelowlproject/intelowl:v6.6.10b22e547ea6b
linux@6.1.69-1
no fix listed
1
ironmansoftware/universal:3.3.1-ubuntu-20.041943c73cce31
linux@5.4.0-125.141
no fix listed
1
istio/install-cni:1.10.32232f365aed6
linux@4.15.0-147.151
no fix listed
1
istio/node-agent-k8s:1.2.9268ab879ea51
linux@4.4.0-150.176
no fix listed
1
istio/operator:1.10.3655eefa11c84
linux@4.15.0-147.151
no fix listed
1
istio/pilot:1.9.652f25f91d702
linux@4.15.0-144.148
no fix listed
1
istio/pilot:1.2.9c09319753454
linux@4.4.0-150.176
no fix listed
1
istio/pilot:1.10.3e7e110a421c2
linux@4.15.0-147.151
no fix listed
1
istio/proxyv2:1.2.90c78be035e98
linux@4.4.0-150.176
no fix listed
1
itzg/minecraft-server:2026.10.05a2ab74ae179
linux@6.8.0-146.146
no fix listed
1
jaedb/iris:latest048cfbf58d57
linux@6.1.135-1
no fix listed
1
jakowenko/double-take:1.6.0b858bac9e32a
linux@5.4.0-89.100
no fix listed
1
josh5/unmanic:0.2.64d49c4816260
linux@5.15.0-100.110
no fix listed
1
jupyterhub/k8s-hub:0.11.1b6b4a1a34bf0
linux@5.4.0-62.70
no fix listed
1
jupyterhub/k8s-hub:1.2.0e4770285aaf7
linux@5.4.0-89.100
no fix listed
1
jupyterhub/k8s-hub:0.9.1ec78bdae0fed
linux@4.15.0-96.97
no fix listed
1
kennethreitz/httpbin:latest599fe5e50731
linux@4.15.0-38.41
no fix listed
1
kimai/kimai2:2.70.17ccc9597309b
linux@6.1.190-1
no fix listed
1
knspar/phronetis-operator:0.1.60c4f0543ee58
linux@6.1.90-1
no fix listed
1
kong/httpbin:latesta6ac46531193
linux@5.15.0-130.140
no fix listed
1

syft 1.42.1 · advisories as of 22 Oct 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.