StackRadar

CVE-2026-98648

Medium

Advisory

Published 19 Oct 2026In the index since 20 Oct 2026
Severity
Medium
worst across findings
CVSS
5.8
base score, highest
EPSS
0.002
5th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
103
of 18,208 indexed, latest versions
Container images
99
deployed by those charts
Fix available
None
affected package

The matching OSV records carry no description.

Carried by container images the latest versions of 103 of 18,208 indexed charts deploy, on 99 images.

Affected packageAffected versionsFixed inImages
linuxdeb3.13.0-46.77, 3.13.0-126.175, 3.13.0-149.199, 3.13.0-170.220+67 moreno fix listed99
OSV records
UBUNTU-CVE-2026-98648

Charts affected

103 by stars
ChartLatestAffected imagesRadar Score

Container images carrying it

99 by charts deploying them

A fixed version is listed for 0 of the 1 affected package.

Container imageDigestPackageFixed inUsed by
linuxchina/alibaba-rsocket-broker:1.1.3-k8sf758e2e567ee
linux@4.15.0-171.180
no fix listed
1
lsstsqre/nublado2:2.0.1b75bf8aaafa4
linux@5.4.0-100.113
no fix listed
1
mbround18/valheim:3.1.070bd4da591cd
linux@5.15.0-133.144
no fix listed
1
mintproject/graphql-engine:305c0dbeba1878eafe348f21fc300fbfc017d9dc83aade2c1855
linux@5.4.0-117.132
no fix listed
1
mlikiowa/napcat-docker:latestf611790ecffa
linux@5.15.0-124.134
no fix listed
1
muluder/prograncontrollermcord:0.1.843b597a93da7
linux@4.4.0-112.135
no fix listed
1
omecproject/mme-exporter:paging-latestbcc5f19fd676
linux@4.15.0-88.88
no fix listed
1
omecproject/onos-progran:1.0.05715e5648aa0
linux@4.4.0-112.135
no fix listed
1
omecproject/progran-synchronizer:comac-1.0.0d109a8e57e71
linux@4.4.0-142.168
no fix listed
1
opendatacube/pipelines:wofs-1.225d810e8504b8
linux@4.15.0-46.49
no fix listed
1
opendatacube/restcube:latest91870111837c
linux@4.15.0-50.54
no fix listed
1
opendatacube/wms:latest1b90cdf68831
linux@4.15.0-50.54
no fix listed
1
openwhisk/ow-utils:1.0.0c80dba0de3aa
linux@4.15.0-122.124
no fix listed
1
oznu/homebridge:2021-12-19-ubuntu2e12d0e2dcce
linux@4.15.0-163.171
no fix listed
1
photoprism/photoprism:260601650c6ad5a651
linux@7.0.0-22.22
no fix listed
1
photoprism/photoprism:260728958642220223
linux@7.0.0-28.28
no fix listed
1
photoprism/photoprism:240711-cefc6fd632ca74
linux@6.8.0-38.38
no fix listed
1
posit/package-manager:2026.10.0-ubuntu-24.04574ed7ec955f
linux@6.8.0-147.147
no fix listed
1
resouer/redis-slave:v2e2f198b49ba7
linux@3.13.0-46.77
no fix listed
1
schmitzis/monorepo:seafile-13.0-latestc583f1be2af2
linux@6.8.0-139.139
no fix listed
1
seafileltd/seafile-mc:9.0.106693911bcc40
linux@5.4.0-135.152
no fix listed
1
seafileltd/seafile-mc:10.0.170628f29c663
linux@5.4.0-152.169
no fix listed
1
seafileltd/seafile-mc:9.0.97ac833196f60
linux@5.4.0-125.141
no fix listed
1
seldonio/locust-core:0.81d0da98a2d76
linux@4.4.0-148.174
no fix listed
1
shaowenchen/ops-controller-manager:latest35575d4f2bfe
linux@5.15.0-191.201
no fix listed
1
shaowenchen/ops-server:latest6bac5cebd125
linux@5.15.0-153.163
no fix listed
1
snipe/snipe-it:v8.3.1141ebf2386fe
linux@6.8.0-79.79
no fix listed
1
someblackmagic/k8s-testing-multitool:v0.1.06eca64b6b440
linux@5.4.0-117.132
no fix listed
1
streamnative/apache-pulsar-grafana-dashboard-k8s:0.0.1611bceacec8fb
linux@5.4.0-77.86
no fix listed
1
svtechnmaa/svtech_maxscale:v1.0.3410a25b51f9f
linux@5.15.0-92.102
no fix listed
1
svtechnmaa/svtech_rundeck:v1.2.26e368ace0977
linux@5.4.0-176.196
no fix listed
1
timothyclarke/wptagent:2018-01-2322c41e5ca7e2
linux@4.4.0-112.135
no fix listed
1
twentycrm/twenty-postgres-spilo:latest2f78405a78be
linux@5.15.0-134.145
no fix listed
1
vinanrra/7dtd-server:v0.4.4f9534490bd2b
linux@4.15.0-204.215
no fix listed
1
voltha/voltha-cli:1.6.0c4e41e92f046
linux@4.4.0-137.163
no fix listed
1
voltha/voltha-envoy:1.6.059ab2a00f712
linux@3.13.0-126.175
no fix listed
1
voltha/voltha-netconf:1.6.037f80524c207
linux@4.4.0-137.163
no fix listed
1
voltha/voltha-ofagent:1.6.09ee8c1f4428c
linux@4.4.0-137.163
no fix listed
1
voltha/voltha-tester:1.7.0655c3048a602
linux@4.4.0-154.181
no fix listed
1
voltha/voltha-voltha:1.6.0ff596b62de59
linux@4.4.0-137.163
no fix listed
1
xeladock/mysql_dns:latest4baf531453f1
linux@5.15.0-25.25
no fix listed
1
ghcr.io/guydavis/machinaris:testf77fa53b89cb
linux@6.8.0-147.147
no fix listed
1
ghcr.io/itzg/minecraft-server:latest5cf064b103ea
linux@6.8.0-146.146
no fix listed
1
ghcr.io/streamingfast/substreams-sink-kv:v2.3.026953ec68d5d
linux@5.4.0-200.220
no fix listed
1
ghcr.io/streamingfast/substreams-sink-noop:v1.4.0d7c43c3135c6
linux@5.4.0-200.220
no fix listed
1
public.ecr.aws/aktosecurity/akto-api-security-testing-db-layer:1.74.4_local1ed844ecab29
linux@6.8.0-139.139
no fix listed
1
public.ecr.aws/spotinst/spot-network-client:1.0.1486380a01587d
linux@6.8.0-100.100
no fix listed
1
public.ecr.aws/spotinst/spot-network-client:1.0.0-8-lb_endpoint-d0ec127efcecf98b912
linux@4.15.0-191.202
no fix listed
1
registry.gitlab.com/crafty-controller/crafty-4:latest7b6e87514259
linux@6.8.0-139.139
no fix listed
1

syft 1.42.1 · advisories as of 20 Oct 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.