StackRadar

CVE-2026-98436

Medium

Advisory

Published 18 Oct 2026In the index since 20 Oct 2026
Severity
Medium
worst across findings
CVSS
6.8
base score, highest
EPSS
0.001
3rd percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
367
of 18,219 indexed, latest versions
Container images
368
deployed by those charts
Fix available
None
affected package

The matching OSV records carry no description.

Carried by container images the latest versions of 367 of 18,219 indexed charts deploy, on 368 images.

Affected packageAffected versionsFixed inImages
linuxdeb3.13.0-46.77, 3.13.0-126.175, 3.13.0-149.199, 3.13.0-170.220+140 moreno fix listed368
OSV records
DEBIAN-CVE-2026-98436UBUNTU-CVE-2026-98436

Charts affected

367 by stars
ChartLatestAffected imagesRadar Score
akauntingnas-helm-chartsVerified publisher1.0.31 of 2See more

akaunting nas-helm-charts 1.0.3

1 of the 2 container images this version deploys carry CVE-2026-98436.

Container imageDigestPackageFixed in
akaunting/akaunting:3.0.1552811b36ec3a
linux@6.1.37-1
no fix listed

Open the chart page →

94,923
smilencsaVerified publisher1.1.07 of 23See more

smile ncsa 1.1.0

7 of the 23 container images this version deploys carry CVE-2026-98436.

Container imageDigestPackageFixed in
socialmediamacroscope/autophrase:0.1.570fb11d4f531
linux@5.4.0-163.180
no fix listed
socialmediamacroscope/collect_reddit_comment:0.1.219d3d26d53ee
linux@4.15.0-210.221
no fix listed
socialmediamacroscope/histogram:0.1.26418f9bdb4d2
linux@6.1.52-1
no fix listed
socialmediamacroscope/image_crawler:0.1.2f508216be63c
linux@4.15.0-210.221
no fix listed
socialmediamacroscope/network_analysis:0.1.3b351c21422e6
linux@6.1.38-4
no fix listed
socialmediamacroscope/preprocessing:0.1.3ca863306314b
linux@6.1.38-4
no fix listed
socialmediamacroscope/topic_modeling:0.1.3fa490acac2f8
linux@6.1.38-4
no fix listed

Open the chart page →

606,696
nilchelanilchela-chartsVerified publisher0.1.21 of 1See more

nilchela nilchela-charts 0.1.2

1 of the 1 container images this version deploys carry CVE-2026-98436.

Container imageDigestPackageFixed in
ghcr.io/infiniteprimates/nilchela:0.0.5098e6879c83c
linux@6.1.187-1
no fix listed

Open the chart page →

26,199
redisnineinfra-charts0.7.51 of 1See more

redis nineinfra-charts 0.7.5

1 of the 1 container images this version deploys carry CVE-2026-98436.

Container imageDigestPackageFixed in
library/redis:7.2.3a7cee7c8178f
linux@6.1.67-1
no fix listed

Open the chart page →

80,156
node-appnode-app-lili1.0.01 of 1See more

node-app node-app-lili 1.0.0

1 of the 1 container images this version deploys carry CVE-2026-98436.

Container imageDigestPackageFixed in
laly9999/node-app:1dd0e503913e1
linux@6.1.137-1
no fix listed

Open the chart page →

65,334
notes-admin-front-helm-chartnotesprojectchart0.1.01 of 1See more

notes-admin-front-helm-chart notesprojectchart 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-98436.

Container imageDigestPackageFixed in
vlebediantsev/notes-admin-front:latest007c6670ff48
linux@6.1.38-4
no fix listed

Open the chart page →

97,275
notes-project-fromt-helm-chartnotesprojectchart0.1.01 of 1See more

notes-project-fromt-helm-chart notesprojectchart 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-98436.

Container imageDigestPackageFixed in
vlebediantsev/notes-project-front:latest945675fd2636
linux@6.1.38-4
no fix listed

Open the chart page →

97,353
registration-ms-front-helm-chartnotesprojectchart0.1.01 of 1See more

registration-ms-front-helm-chart notesprojectchart 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-98436.

Container imageDigestPackageFixed in
vlebediantsev/registration-ms-front-app-host:latest54f69d116c50
linux@6.1.38-4
no fix listed

Open the chart page →

97,331
splashntppoolVerified publisher1.0.41 of 1See more

splash ntppool 1.0.4

1 of the 1 container images this version deploys carry CVE-2026-98436.

Container imageDigestPackageFixed in
scrapinghub/splash:3.4.1a5f89bc84606
linux@4.15.0-74.84
no fix listed

Open the chart page →

93,943
automx2oleds-helm-chartsVerified publisher1.0.51 of 1See more

automx2 oleds-helm-charts 1.0.5

1 of the 1 container images this version deploys carry CVE-2026-98436.

Container imageDigestPackageFixed in
oled01/automx2:2025.1.105d3e398e675
linux@6.1.140-1
no fix listed

Open the chart page →

58,973
comacopencord1.0.03 of 9See more

comac opencord 1.0.0

3 of the 9 container images this version deploys carry CVE-2026-98436.

Container imageDigestPackageFixed in
omecproject/mcord-synchronizer:comac-1.0.0cfdb566dd949
linux@4.4.0-142.168
no fix listed
omecproject/onos-progran:1.0.05715e5648aa0
linux@4.4.0-112.135
no fix listed
omecproject/progran-synchronizer:comac-1.0.0d109a8e57e71
linux@4.4.0-142.168
no fix listed

Open the chart page →

252,921
comac-platformopencord0.0.171 of 11See more

comac-platform opencord 0.0.17

1 of the 11 container images this version deploys carry CVE-2026-98436.

Container imageDigestPackageFixed in
omecproject/mcord-synchronizer:comac-1.0.0cfdb566dd949
linux@4.4.0-142.168
no fix listed

Open the chart page →

80,363
omec-control-planeopencord0.1.311 of 8See more

omec-control-plane opencord 0.1.31

1 of the 8 container images this version deploys carry CVE-2026-98436.

Container imageDigestPackageFixed in
omecproject/mme-exporter:paging-latestbcc5f19fd676
linux@4.15.0-88.88
no fix listed

Open the chart page →

108,163
onos-progranopencord1.2.71 of 2See more

onos-progran opencord 1.2.7

1 of the 2 container images this version deploys carry CVE-2026-98436.

Container imageDigestPackageFixed in
muluder/prograncontrollermcord:0.1.843b597a93da7
linux@4.4.0-112.135
no fix listed

Open the chart page →

94,995
ponsimv2opencord1.2.31 of 2See more

ponsimv2 opencord 1.2.3

1 of the 2 container images this version deploys carry CVE-2026-98436.

Container imageDigestPackageFixed in
voltha/voltha-tester:1.7.0655c3048a602
linux@4.4.0-154.181
no fix listed

Open the chart page →

65,382
sebaopencord1.0.05 of 17See more

seba opencord 1.0.0

5 of the 17 container images this version deploys carry CVE-2026-98436.

Container imageDigestPackageFixed in
voltha/voltha-cli:1.6.0c4e41e92f046
linux@4.4.0-137.163
no fix listed
voltha/voltha-envoy:1.6.059ab2a00f712
linux@3.13.0-126.175
no fix listed
voltha/voltha-netconf:1.6.037f80524c207
linux@4.4.0-137.163
no fix listed
voltha/voltha-ofagent:1.6.09ee8c1f4428c
linux@4.4.0-137.163
no fix listed
voltha/voltha-voltha:1.6.0ff596b62de59
linux@4.4.0-137.163
no fix listed

Open the chart page →

357,285
opencost-parquet-exporteropencostVerified publisher0.3.11 of 1See more

opencost-parquet-exporter opencost 0.3.1

1 of the 1 container images this version deploys carry CVE-2026-98436.

Container imageDigestPackageFixed in
ghcr.io/opencost/opencost-parquet-exporter:v0.2.1ce85ef0ce665
linux@6.1.124-1
no fix listed

Open the chart page →

70,015
open-vpnopenvpn0.0.11 of 1See more

open-vpn openvpn 0.0.1

1 of the 1 container images this version deploys carry CVE-2026-98436.

Container imageDigestPackageFixed in
ghcr.io/linuxserver/openvpn-as:version-2.8.6-916f8e7d-ubuntu184ee0764310e7
linux@4.15.0-126.129
no fix listed

Open the chart page →

79,132
openwhiskopenwhisk1.0.01 of 10See more

openwhisk openwhisk 1.0.0

1 of the 10 container images this version deploys carry CVE-2026-98436.

Container imageDigestPackageFixed in
openwhisk/ow-utils:1.0.0c80dba0de3aa
linux@4.15.0-122.124
no fix listed

Open the chart page →

104,721
grrosdfir-infrastructureVerified publisher1.0.31 of 5See more

grr osdfir-infrastructure 1.0.3

1 of the 5 container images this version deploys carry CVE-2026-98436.

Container imageDigestPackageFixed in
ghcr.io/google/fleetspeak:v0.1.17cd264d33efd4
linux@6.1.99-1
no fix listed

Open the chart page →

79,221
osdfir-infrastructureosdfir-infrastructureVerified publisher2.15.05 of 40See more

osdfir-infrastructure osdfir-infrastructure 2.15.0

5 of the 40 container images this version deploys carry CVE-2026-98436.

Container imageDigestPackageFixed in
ghcr.io/google/fleetspeak:v0.1.17cd264d33efd4
linux@6.1.99-1
no fix listed
ghcr.io/openrelik/openrelik-worker-analyzer-config:latest1269d3d8d2c2
linux@6.8.0-136.136
no fix listed
ghcr.io/openrelik/openrelik-worker-dfindexeddb:latest31966a825782
linux@6.8.0-136.136
no fix listed
ghcr.io/openrelik/openrelik-worker-floss:latest7a331eb83c6a
linux@6.8.0-136.136
no fix listed
ghcr.io/openrelik/openrelik-worker-os-creds:latest7fc7ec101f08
linux@6.8.0-136.136
no fix listed

Open the chart page →

307,056
radiusp2p-avs0.1.01 of 1See more

radius p2p-avs 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-98436.

Container imageDigestPackageFixed in
theradius/loggia:0.463ba348546ec
linux@6.1.69-1
no fix listed

Open the chart page →

88,485
ungatep2p-avs0.1.02 of 3See more

ungate p2p-avs 0.1.0

2 of the 3 container images this version deploys carry CVE-2026-98436.

Container imageDigestPackageFixed in
xom4ekp2p/infini-route-attestators-public-mainnet-attester:latestd0e0aa238b02
linux@6.1.99-1
no fix listed
xom4ekp2p/infini-route-attestators-public-mainnet-avs-webapi:latest2745b5fd8785
linux@6.1.99-1
no fix listed

Open the chart page →

162,690
dummy-servicephanVerified publisher0.3.41 of 1See more

dummy-service phan 0.3.4

1 of the 1 container images this version deploys carry CVE-2026-98436.

Container imageDigestPackageFixed in
phan2410/dummy-service:0.0.89c6ed6de26ca
linux@6.1.129-1
no fix listed

Open the chart page →

62,041
falcon-asgi-serverphanVerified publisher0.1.01 of 1See more

falcon-asgi-server phan 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-98436.

Container imageDigestPackageFixed in
phan2410/falcon-asgi-server:0.1.04a86d138832d
linux@6.1.129-1
no fix listed

Open the chart page →

64,738
phronetisphronetis0.1.271 of 2See more

phronetis phronetis 0.1.27

1 of the 2 container images this version deploys carry CVE-2026-98436.

Container imageDigestPackageFixed in
knspar/phronetis-operator:0.1.60c4f0543ee58
linux@6.1.90-1
no fix listed

Open the chart page →

87,474
seafilephybros-helm-charts4.0.11 of 1See more

seafile phybros-helm-charts 4.0.1

1 of the 1 container images this version deploys carry CVE-2026-98436.

Container imageDigestPackageFixed in
seafileltd/seafile-mc:9.0.97ac833196f60
linux@5.4.0-125.141
no fix listed

Open the chart page →

93,067
subgraph-oraclepinaxVerified publisher0.0.11 of 1See more

subgraph-oracle pinax 0.0.1

1 of the 1 container images this version deploys carry CVE-2026-98436.

Container imageDigestPackageFixed in
ghcr.io/graphprotocol/availability-oracle:sha-28312fd472a25038957
linux@6.1.99-1
no fix listed

Open the chart page →

78,598
substreams-sink-kvpinaxVerified publisher0.0.41 of 1See more

substreams-sink-kv pinax 0.0.4

1 of the 1 container images this version deploys carry CVE-2026-98436.

Container imageDigestPackageFixed in
ghcr.io/streamingfast/substreams-sink-kv:v2.3.026953ec68d5d
linux@5.4.0-200.220
no fix listed

Open the chart page →

57,712
substreams-sink-nooppinaxVerified publisher0.0.31 of 1See more

substreams-sink-noop pinax 0.0.3

1 of the 1 container images this version deploys carry CVE-2026-98436.

Container imageDigestPackageFixed in
ghcr.io/streamingfast/substreams-sink-noop:v1.4.0d7c43c3135c6
linux@5.4.0-200.220
no fix listed

Open the chart page →

57,643
pingdom-operatorpingdom-operator0.0.201 of 1See more

pingdom-operator pingdom-operator 0.0.20

1 of the 1 container images this version deploys carry CVE-2026-98436.

Container imageDigestPackageFixed in
ghcr.io/nefelim4ag/pingdom-operator:0.0.15f8c7afdcf439
linux@6.1.99-1
no fix listed

Open the chart page →

79,233
planectlplanectlVerified publisher0.7.01 of 10See more

planectl planectl 0.7.0

1 of the 10 container images this version deploys carry CVE-2026-98436.

Container imageDigestPackageFixed in
library/node:208f693eaa7e0a
linux@6.1.164-1
no fix listed

Open the chart page →

76,488
pod-birdspod-birds0.1.01 of 1See more

pod-birds pod-birds 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-98436.

Container imageDigestPackageFixed in
teknas09/bird-pod:latest12a1fa85c4aa
linux@6.1.76-1
no fix listed

Open the chart page →

87,941
podnat-state-storepodnat-controller0.3.21 of 1See more

podnat-state-store podnat-controller 0.3.2

1 of the 1 container images this version deploys carry CVE-2026-98436.

Container imageDigestPackageFixed in
dgraziotin/nginx-webdav-nononsense:1.23.138f2de42bed0
linux@5.4.0-122.138
no fix listed

Open the chart page →

78,967
prefect-agentprefectVerified publisher2024.8.301638221 of 1See more

prefect-agent prefect 2024.8.30163822

1 of the 1 container images this version deploys carry CVE-2026-98436.

Container imageDigestPackageFixed in
prefecthq/prefect:2.20.4-python3.101df4b5b6238a
linux@6.1.99-1
no fix listed

Open the chart page →

71,943
priceapp-chartpriceapp0.1.01 of 1See more

priceapp-chart priceapp 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-98436.

Container imageDigestPackageFixed in
ildarmukhametzyanov/priceapp:0.115d23720a3ee
linux@6.1.52-1
no fix listed

Open the chart page →

9,089
game-serverpvillaverdeVerified publisher1.0.61 of 1See more

game-server pvillaverde 1.0.6

1 of the 1 container images this version deploys carry CVE-2026-98436.

Container imageDigestPackageFixed in
ghcr.io/itzg/minecraft-server:latest5cf064b103ea
linux@6.8.0-146.146
no fix listed

Open the chart page →

38,714
pyredispyredis-helm0.1.01 of 2See more

pyredis pyredis-helm 0.1.0

1 of the 2 container images this version deploys carry CVE-2026-98436.

Container imageDigestPackageFixed in
avinash263/pyredis263:latestaa2b8727f1a6
linux@6.1.27-1
no fix listed

Open the chart page →

98,860
mychartpythonweb0.1.01 of 1See more

mychart pythonweb 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-98436.

Container imageDigestPackageFixed in
qichenxu4pd/pythonexample:1.0f3a8502bc21b
linux@6.1.90-1
no fix listed

Open the chart page →

83,010
mypythonpythonweb0.1.01 of 1See more

mypython pythonweb 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-98436.

Container imageDigestPackageFixed in
qichenxu4pd/pythonexample:1.0f3a8502bc21b
linux@6.1.90-1
no fix listed

Open the chart page →

83,010
retromretsamedocVerified publisher2026.2.51 of 1See more

retrom retsamedoc 2026.2.5

1 of the 1 container images this version deploys carry CVE-2026-98436.

Container imageDigestPackageFixed in
ghcr.io/jmberesford/retrom-service:retrom-v0.7.144d763d58f11d
linux@6.1.128-1
no fix listed

Open the chart page →

65,574
revwallet-apirevwallet0.7.121 of 1See more

revwallet-api revwallet 0.7.12

1 of the 1 container images this version deploys carry CVE-2026-98436.

Container imageDigestPackageFixed in
arthurjguerra18/revwallet:v0.7.12f540af20b307
linux@6.1.99-1
no fix listed

Open the chart page →

72,406
kube-web-viewrlex0.5.01 of 1See more

kube-web-view rlex 0.5.0

1 of the 1 container images this version deploys carry CVE-2026-98436.

Container imageDigestPackageFixed in
hjacobs/kube-web-view:23.8.0431f1bf013d0
linux@6.1.38-4
no fix listed

Open the chart page →

86,174
kresusrm3lVerified publisher0.3.01 of 3See more

kresus rm3l 0.3.0

1 of the 3 container images this version deploys carry CVE-2026-98436.

Container imageDigestPackageFixed in
bnjbvr/kresus:0.22.137e216b182c8
linux@6.1.119-1
no fix listed

Open the chart page →

77,669
devtron-enterpriseromholdings48.0.02 of 28See more

devtron-enterprise romholdings 48.0.0

2 of the 28 container images this version deploys carry CVE-2026-98436.

Container imageDigestPackageFixed in
quay.io/devtron/devtron-utils:dup-chart-repo-v1.1.095d6f0e05636
linux@6.1.55-1
no fix listed
quay.io/devtron/notifier:9804331c-372-39294709c7da19c5a
linux@6.1.153-1
no fix listed

Open the chart page →

217,278
devtron-operatorromholdings0.23.31 of 11See more

devtron-operator romholdings 0.23.3

1 of the 11 container images this version deploys carry CVE-2026-98436.

Container imageDigestPackageFixed in
quay.io/devtron/devtron-utils:dup-chart-repo-v1.1.095d6f0e05636
linux@6.1.55-1
no fix listed

Open the chart page →

119,903
komgarubxkubeVerified publisher0.1.51 of 1See more

komga rubxkube 0.1.5

1 of the 1 container images this version deploys carry CVE-2026-98436.

Container imageDigestPackageFixed in
gotson/komga:1.28.1d8f772dce7b3
linux@7.0.0-38.38
no fix listed

Open the chart page →

27,919
safe-stacksafe-global0.1.01 of 9See more

safe-stack safe-global 0.1.0

1 of the 9 container images this version deploys carry CVE-2026-98436.

Container imageDigestPackageFixed in
gjeanmart/safe-ganache-node:latest926264c8f2d1
linux@6.1.27-1
no fix listed

Open the chart page →

105,426
safe-transaction-servicesafe-global0.1.01 of 6See more

safe-transaction-service safe-global 0.1.0

1 of the 6 container images this version deploys carry CVE-2026-98436.

Container imageDigestPackageFixed in
gjeanmart/safe-ganache-node:latest926264c8f2d1
linux@6.1.27-1
no fix listed

Open the chart page →

101,565
evsantisbon0.2.02 of 5See more

ev santisbon 0.2.0

2 of the 5 container images this version deploys carry CVE-2026-98436.

Container imageDigestPackageFixed in
santisbon/evwatcher:latestc4e994ca4540
linux@6.1.38-4
no fix listed
santisbon/evworker:lateste807283f8d69
linux@6.1.38-4
no fix listed

Open the chart page →

176,560

Container images carrying it

368 by charts deploying them

A fixed version is listed for 0 of the 1 affected package.

Container imageDigestPackageFixed inUsed by
ghcr.io/wundergraph/cosmo/otelcollector:0.18.15a6fe78d4d15
linux@6.1.124-1
no fix listed
1
ghcr.io/zoriya/kyoo_autosync:4.7.1fbba58ddb1a6
linux@6.1.119-1
no fix listed
1
ghcr.io/zoriya/kyoo_scanner:4.7.17dc0ee57b628
linux@6.1.119-1
no fix listed
1
public.ecr.aws/aktosecurity/akto-api-security-testing-db-layer:1.74.4_local1ed844ecab29
linux@6.8.0-139.139
no fix listed
1
public.ecr.aws/g4a0y2u8/unifie-store:staging-19925a2057fabc948
linux@6.1.90-1
no fix listed
1
public.ecr.aws/jtekt-corporation/image-storage-service:v1.16.17b1493760c716
linux@6.1.112-1
no fix listed
1
public.ecr.aws/jtekt-corporation/shinsei-manager:v2.8.15cd62142d6ed
linux@6.1.90-1
no fix listed
1
public.ecr.aws/jtekt-corporation/time-series-storage-service:v1.5.1046ef5c9ed50
linux@6.1.55-1
no fix listed
1
public.ecr.aws/outerbounds/metaflow_metadata_service:v2.4.13f7567ce3419d
linux@6.1.115-1
no fix listed
1
public.ecr.aws/spotinst/spot-network-client:1.0.1486380a01587d
linux@6.8.0-100.100
no fix listed
1
public.ecr.aws/spotinst/spot-network-client:1.0.0-8-lb_endpoint-d0ec127efcecf98b912
linux@4.15.0-191.202
no fix listed
1
public.ecr.aws/truefoundrycloud/async-service-distributor:5d48113bc678d694a0c8f8dabb2207c5aa2cfc53f74851ce31f5
linux@6.1.69-1
no fix listed
1
quay.io/mittwald/kube-httpcache:stable2169032c5840
linux@6.1.140-1
no fix listed
1
quay.io/yushiwho/api:e1f9d77e0d9b93dbf2b
linux@6.1.38-4
no fix listed
1
registry.gitlab.com/crafty-controller/crafty-4:latest7b6e87514259
linux@6.8.0-139.139
no fix listed
1
registry.gitlab.com/enbuild-staging/vivsoft-platform-ui/enbuild-mq-consumer:1.0.310e3cd8c7776d
linux@6.1.172-1
no fix listed
1
registry.gitlab.com/infinitydon/registry/open5gs-aio:v2.2.2f6385712935f
linux@5.4.0-67.75
no fix listed
1
registry.gitlab.com/school_guy/docker-typo3:13.4.30-197d868ed76185d7270d
linux@6.1.174-1
no fix listed
1

syft 1.42.1 · advisories as of 22 Oct 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.