StackRadar

CVE-2026-98637

Medium

Advisory

Published 19 Oct 2026In the index since 20 Oct 2026
Severity
Medium
worst across findings
CVSS
5.6
base score, highest
EPSS
0.002
5th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
102
of 18,208 indexed, latest versions
Container images
98
deployed by those charts
Fix available
None
affected package

The matching OSV records carry no description.

Carried by container images the latest versions of 102 of 18,208 indexed charts deploy, on 98 images.

Affected packageAffected versionsFixed inImages
linuxdeb3.13.0-46.77, 3.13.0-126.175, 3.13.0-149.199, 3.13.0-170.220+67 moreno fix listed98
OSV records
UBUNTU-CVE-2026-98637

Charts affected

102 by stars
ChartLatestAffected imagesRadar Score
minecrafthelmforgeVerified publisher1.5.71 of 1See more

minecraft helmforge 1.5.7

1 of the 1 container images this version deploys carry CVE-2026-98637.

Container imageDigestPackageFixed in
itzg/minecraft-server:2026.10.05a2ab74ae179
linux@6.8.0-146.146
no fix listed

Open the chart page →

40,254
homebridgehomeenterpriseinc0.5.01 of 1See more

homebridge homeenterpriseinc 0.5.0

1 of the 1 container images this version deploys carry CVE-2026-98637.

Container imageDigestPackageFixed in
oznu/homebridge:2021-12-19-ubuntu2e12d0e2dcce
linux@4.15.0-163.171
no fix listed

Open the chart page →

81,451
huginnhomeenterpriseinc0.2.01 of 1See more

huginn homeenterpriseinc 0.2.0

1 of the 1 container images this version deploys carry CVE-2026-98637.

Container imageDigestPackageFixed in
huginn/huginn:4df1217d3055db980a04f293e28016b77826e3caeab0db98264e
linux@4.15.0-191.202
no fix listed

Open the chart page →

77,465
ibm-microclimateibm-charts0.1.01 of 8See more

ibm-microclimate ibm-charts 0.1.0

1 of the 8 container images this version deploys carry CVE-2026-98637.

Container imageDigestPackageFixed in
ibmcom/microclimate-theia:lateste17bdccc5030
linux@4.4.0-104.127
no fix listed

Open the chart page →

117,926
ibm-swift-sampleibm-charts1.1.21 of 1See more

ibm-swift-sample ibm-charts 1.1.2

1 of the 1 container images this version deploys carry CVE-2026-98637.

Container imageDigestPackageFixed in
ibmcom/icp-swift-sample:latestb5d8c6714dbc
linux@4.4.0-124.148
no fix listed

Open the chart page →

82,935
valheim-serverk8s-chartsVerified publisher1.3.01 of 1See more

valheim-server k8s-charts 1.3.0

1 of the 1 container images this version deploys carry CVE-2026-98637.

Container imageDigestPackageFixed in
mbround18/valheim:3.1.070bd4da591cd
linux@5.15.0-133.144
no fix listed

Open the chart page →

66,396
k8s-dev-podk8s-dev-pod0.3.11 of 1See more

k8s-dev-pod k8s-dev-pod 0.3.1

1 of the 1 container images this version deploys carry CVE-2026-98637.

Container imageDigestPackageFixed in
ghcr.io/bryopsida/k8s-dev-pod:main82d0b161161d
linux@6.8.0-60.63
no fix listed

Open the chart page →

76,018
huekatool1.0.81 of 1See more

hue katool 1.0.8

1 of the 1 container images this version deploys carry CVE-2026-98637.

Container imageDigestPackageFixed in
gethue/hue:4.11.011b649636e68
linux@5.4.0-136.153
no fix listed

Open the chart page →

85,281
kovi-appkovi-charts0.9.01 of 1See more

kovi-app kovi-charts 0.9.0

1 of the 1 container images this version deploys carry CVE-2026-98637.

Container imageDigestPackageFixed in
kennethreitz/httpbin:latest599fe5e50731
linux@4.15.0-38.41
no fix listed

Open the chart page →

86,049
istiokubeflow1.0.01 of 2See more

istio kubeflow 1.0.0

1 of the 2 container images this version deploys carry CVE-2026-98637.

Container imageDigestPackageFixed in
istio/pilot:1.9.652f25f91d702
linux@4.15.0-144.148
no fix listed

Open the chart page →

152,109
pulsarkubesphere-stable2.7.131 of 3See more

pulsar kubesphere-stable 2.7.13

1 of the 3 container images this version deploys carry CVE-2026-98637.

Container imageDigestPackageFixed in
streamnative/apache-pulsar-grafana-dashboard-k8s:0.0.1611bceacec8fb
linux@5.4.0-77.86
no fix listed

Open the chart page →

95,216
allure_docker_servicelovemew67Verified publisher0.0.11 of 1See more

allure_docker_service lovemew67 0.0.1

1 of the 1 container images this version deploys carry CVE-2026-98637.

Container imageDigestPackageFixed in
frankescobar/allure-docker-service:2.27.00815040339a9
linux@4.15.0-213.224
no fix listed

Open the chart page →

65,663
nublado2lsst-sqre0.8.51 of 2See more

nublado2 lsst-sqre 0.8.5

1 of the 2 container images this version deploys carry CVE-2026-98637.

Container imageDigestPackageFixed in
lsstsqre/nublado2:2.0.1b75bf8aaafa4
linux@5.4.0-100.113
no fix listed

Open the chart page →

93,162
MINTmint8.0.21 of 15See more

MINT mint 8.0.2

1 of the 15 container images this version deploys carry CVE-2026-98637.

Container imageDigestPackageFixed in
mintproject/graphql-engine:305c0dbeba1878eafe348f21fc300fbfc017d9dc83aade2c1855
linux@5.4.0-117.132
no fix listed

Open the chart page →

118,018
chirpstackmosquitto-helm-chart0.5.01 of 8See more

chirpstack mosquitto-helm-chart 0.5.0

1 of the 8 container images this version deploys carry CVE-2026-98637.

Container imageDigestPackageFixed in
apachepulsar/pulsar:2.9.0d056c89b7131
linux@5.4.0-90.101
no fix listed

Open the chart page →

106,304
comacopencord1.0.02 of 9See more

comac opencord 1.0.0

2 of the 9 container images this version deploys carry CVE-2026-98637.

Container imageDigestPackageFixed in
omecproject/onos-progran:1.0.05715e5648aa0
linux@4.4.0-112.135
no fix listed
omecproject/progran-synchronizer:comac-1.0.0d109a8e57e71
linux@4.4.0-142.168
no fix listed

Open the chart page →

260,758
omec-control-planeopencord0.1.311 of 8See more

omec-control-plane opencord 0.1.31

1 of the 8 container images this version deploys carry CVE-2026-98637.

Container imageDigestPackageFixed in
omecproject/mme-exporter:paging-latestbcc5f19fd676
linux@4.15.0-88.88
no fix listed

Open the chart page →

110,667
onos-progranopencord1.2.71 of 2See more

onos-progran opencord 1.2.7

1 of the 2 container images this version deploys carry CVE-2026-98637.

Container imageDigestPackageFixed in
muluder/prograncontrollermcord:0.1.843b597a93da7
linux@4.4.0-112.135
no fix listed

Open the chart page →

97,611
ponsimv2opencord1.2.31 of 2See more

ponsimv2 opencord 1.2.3

1 of the 2 container images this version deploys carry CVE-2026-98637.

Container imageDigestPackageFixed in
voltha/voltha-tester:1.7.0655c3048a602
linux@4.4.0-154.181
no fix listed

Open the chart page →

67,985
sebaopencord1.0.05 of 17See more

seba opencord 1.0.0

5 of the 17 container images this version deploys carry CVE-2026-98637.

Container imageDigestPackageFixed in
voltha/voltha-cli:1.6.0c4e41e92f046
linux@4.4.0-137.163
no fix listed
voltha/voltha-envoy:1.6.059ab2a00f712
linux@3.13.0-126.175
no fix listed
voltha/voltha-netconf:1.6.037f80524c207
linux@4.4.0-137.163
no fix listed
voltha/voltha-ofagent:1.6.09ee8c1f4428c
linux@4.4.0-137.163
no fix listed
voltha/voltha-voltha:1.6.0ff596b62de59
linux@4.4.0-137.163
no fix listed

Open the chart page →

370,590
openwhiskopenwhisk1.0.01 of 10See more

openwhisk openwhisk 1.0.0

1 of the 10 container images this version deploys carry CVE-2026-98637.

Container imageDigestPackageFixed in
openwhisk/ow-utils:1.0.0c80dba0de3aa
linux@4.15.0-122.124
no fix listed

Open the chart page →

107,116
seafilephybros-helm-charts4.0.11 of 1See more

seafile phybros-helm-charts 4.0.1

1 of the 1 container images this version deploys carry CVE-2026-98637.

Container imageDigestPackageFixed in
seafileltd/seafile-mc:9.0.97ac833196f60
linux@5.4.0-125.141
no fix listed

Open the chart page →

95,051
substreams-sink-kvpinaxVerified publisher0.0.41 of 1See more

substreams-sink-kv pinax 0.0.4

1 of the 1 container images this version deploys carry CVE-2026-98637.

Container imageDigestPackageFixed in
ghcr.io/streamingfast/substreams-sink-kv:v2.3.026953ec68d5d
linux@5.4.0-200.220
no fix listed

Open the chart page →

60,031
substreams-sink-nooppinaxVerified publisher0.0.31 of 1See more

substreams-sink-noop pinax 0.0.3

1 of the 1 container images this version deploys carry CVE-2026-98637.

Container imageDigestPackageFixed in
ghcr.io/streamingfast/substreams-sink-noop:v1.4.0d7c43c3135c6
linux@5.4.0-200.220
no fix listed

Open the chart page →

59,962
podnat-state-storepodnat-controller0.3.21 of 1See more

podnat-state-store podnat-controller 0.3.2

1 of the 1 container images this version deploys carry CVE-2026-98637.

Container imageDigestPackageFixed in
dgraziotin/nginx-webdav-nononsense:1.23.138f2de42bed0
linux@5.4.0-122.138
no fix listed

Open the chart page →

81,268
game-serverpvillaverdeVerified publisher1.0.61 of 1See more

game-server pvillaverde 1.0.6

1 of the 1 container images this version deploys carry CVE-2026-98637.

Container imageDigestPackageFixed in
ghcr.io/itzg/minecraft-server:latest5cf064b103ea
linux@6.8.0-146.146
no fix listed

Open the chart page →

40,222
komgarubxkubeVerified publisher0.1.51 of 1See more

komga rubxkube 0.1.5

1 of the 1 container images this version deploys carry CVE-2026-98637.

Container imageDigestPackageFixed in
gotson/komga:1.28.1d8f772dce7b3
linux@7.0.0-38.38
no fix listed

Open the chart page →

28,508
seafileschmitzis13.0.131 of 4See more

seafile schmitzis 13.0.13

1 of the 4 container images this version deploys carry CVE-2026-98637.

Container imageDigestPackageFixed in
schmitzis/monorepo:seafile-13.0-latestc583f1be2af2
linux@6.8.0-139.139
no fix listed

Open the chart page →

46,309
snipeitschmitzis6.1.01 of 2See more

snipeit schmitzis 6.1.0

1 of the 2 container images this version deploys carry CVE-2026-98637.

Container imageDigestPackageFixed in
snipe/snipe-it:v8.3.1141ebf2386fe
linux@6.8.0-79.79
no fix listed

Open the chart page →

70,775
photoprismschoolguys-helmcharts0.3.81 of 1See more

photoprism schoolguys-helmcharts 0.3.8

1 of the 1 container images this version deploys carry CVE-2026-98637.

Container imageDigestPackageFixed in
photoprism/photoprism:260601650c6ad5a651
linux@7.0.0-22.22
no fix listed

Open the chart page →

63,794
seldon-core-loadtestingseldon0.2.01 of 1See more

seldon-core-loadtesting seldon 0.2.0

1 of the 1 container images this version deploys carry CVE-2026-98637.

Container imageDigestPackageFixed in
seldonio/locust-core:0.81d0da98a2d76
linux@4.4.0-148.174
no fix listed

Open the chart page →

79,518
dgbuildersmo-helm-chart6.0.01 of 3See more

dgbuilder smo-helm-chart 6.0.0

1 of the 3 container images this version deploys carry CVE-2026-98637.

Container imageDigestPackageFixed in
oomk8s/readiness-check:2.0.07daa08b81954
linux@4.4.0-116.140
no fix listed

Open the chart page →

87,101
logsmo-helm-chart6.0.01 of 6See more

log smo-helm-chart 6.0.0

1 of the 6 container images this version deploys carry CVE-2026-98637.

Container imageDigestPackageFixed in
oomk8s/readiness-check:2.0.07daa08b81954
linux@4.4.0-116.140
no fix listed

Open the chart page →

87,881
msbsmo-helm-chart6.0.01 of 6See more

msb smo-helm-chart 6.0.0

1 of the 6 container images this version deploys carry CVE-2026-98637.

Container imageDigestPackageFixed in
oomk8s/readiness-check:2.0.07daa08b81954
linux@4.4.0-116.140
no fix listed

Open the chart page →

86,073
pndasmo-helm-chart6.0.01 of 3See more

pnda smo-helm-chart 6.0.0

1 of the 3 container images this version deploys carry CVE-2026-98637.

Container imageDigestPackageFixed in
oomk8s/readiness-check:2.0.07daa08b81954
linux@4.4.0-116.140
no fix listed

Open the chart page →

86,073
pombasmo-helm-chart6.0.01 of 17See more

pomba smo-helm-chart 6.0.0

1 of the 17 container images this version deploys carry CVE-2026-98637.

Container imageDigestPackageFixed in
oomk8s/readiness-check:2.0.07daa08b81954
linux@4.4.0-116.140
no fix listed

Open the chart page →

87,881
portalsmo-helm-chart6.0.01 of 8See more

portal smo-helm-chart 6.0.0

1 of the 8 container images this version deploys carry CVE-2026-98637.

Container imageDigestPackageFixed in
oomk8s/readiness-check:2.0.07daa08b81954
linux@4.4.0-116.140
no fix listed

Open the chart page →

86,073
testing-multitoolsomeblackmagic0.1.21 of 1See more

testing-multitool someblackmagic 0.1.2

1 of the 1 container images this version deploys carry CVE-2026-98637.

Container imageDigestPackageFixed in
someblackmagic/k8s-testing-multitool:v0.1.06eca64b6b440
linux@5.4.0-117.132
no fix listed

Open the chart page →

105,161
ocean-network-clientspot1.1.61 of 1See more

ocean-network-client spot 1.1.6

1 of the 1 container images this version deploys carry CVE-2026-98637.

Container imageDigestPackageFixed in
public.ecr.aws/spotinst/spot-network-client:1.0.1486380a01587d
linux@6.8.0-100.100
no fix listed

Open the chart page →

58,633
spotinst-ocean-network-clientspot1.0.01 of 1See more

spotinst-ocean-network-client spot 1.0.0

1 of the 1 container images this version deploys carry CVE-2026-98637.

Container imageDigestPackageFixed in
public.ecr.aws/spotinst/spot-network-client:1.0.0-8-lb_endpoint-d0ec127efcecf98b912
linux@4.15.0-191.202
no fix listed

Open the chart page →

67,242
spring-boot-helm-starterspring-boot-helm-starter0.1.01 of 1See more

spring-boot-helm-starter spring-boot-helm-starter 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-98637.

Container imageDigestPackageFixed in
alexandreroman/hello:latest4b79473442be
linux@4.15.0-47.50
no fix listed

Open the chart page →

119,835
srsran-5gsrsran-5gVerified publisher1.0.01 of 1See more

srsran-5g srsran-5g 1.0.0

1 of the 1 container images this version deploys carry CVE-2026-98637.

Container imageDigestPackageFixed in
gradiant/srsran-5g:23_10_19061b1bf0f36
linux@5.4.0-187.207
no fix listed

Open the chart page →

70,417
srsran-5g-zmqsrsran-5g-zmqVerified publisher1.0.11 of 2See more

srsran-5g-zmq srsran-5g-zmq 1.0.1

1 of the 2 container images this version deploys carry CVE-2026-98637.

Container imageDigestPackageFixed in
gradiant/srsran-5g:23_10_19061b1bf0f36
linux@5.4.0-187.207
no fix listed

Open the chart page →

76,226
maxscalesvtech-public-helm-charts1.0.01 of 2See more

maxscale svtech-public-helm-charts 1.0.0

1 of the 2 container images this version deploys carry CVE-2026-98637.

Container imageDigestPackageFixed in
svtechnmaa/svtech_maxscale:v1.0.3410a25b51f9f
linux@5.15.0-92.102
no fix listed

Open the chart page →

79,952
rundecksvtech-public-helm-charts1.0.01 of 2See more

rundeck svtech-public-helm-charts 1.0.0

1 of the 2 container images this version deploys carry CVE-2026-98637.

Container imageDigestPackageFixed in
svtechnmaa/svtech_rundeck:v1.2.26e368ace0977
linux@5.4.0-176.196
no fix listed

Open the chart page →

78,815
istio-discoverytemp-charts0.3.31 of 1See more

istio-discovery temp-charts 0.3.3

1 of the 1 container images this version deploys carry CVE-2026-98637.

Container imageDigestPackageFixed in
istio/pilot:1.10.0294ca55bd1cc
linux@4.15.0-143.147
no fix listed

Open the chart page →

76,521
istio-ingresstemp-charts0.3.31 of 1See more

istio-ingress temp-charts 0.3.3

1 of the 1 container images this version deploys carry CVE-2026-98637.

Container imageDigestPackageFixed in
istio/proxyv2:1.10.088c6c693e67a
linux@4.15.0-143.147
no fix listed

Open the chart page →

76,466
tensor_apptensor-app0.2.21 of 3See more

tensor_app tensor-app 0.2.2

1 of the 3 container images this version deploys carry CVE-2026-98637.

Container imageDigestPackageFixed in
xeladock/mysql_dns:latest4baf531453f1
linux@5.15.0-25.25
no fix listed

Open the chart page →

114,609
spring-boot-helm-startertest0.1.01 of 1See more

spring-boot-helm-starter test 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-98637.

Container imageDigestPackageFixed in
alexandreroman/hello:latest4b79473442be
linux@4.15.0-47.50
no fix listed

Open the chart page →

119,835
twenty-crmvictorlane0.0.11 of 3See more

twenty-crm victorlane 0.0.1

1 of the 3 container images this version deploys carry CVE-2026-98637.

Container imageDigestPackageFixed in
twentycrm/twenty-postgres-spilo:latest2f78405a78be
linux@5.15.0-134.145
no fix listed

Open the chart page →

74,546

Container images carrying it

98 by charts deploying them

A fixed version is listed for 0 of the 1 affected package.

No deployed image carries CVE-2026-98637.

syft 1.42.1 · advisories as of 20 Oct 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.