CVE-2018-10126

Medium

Advisory

Published 21 Apr 2018In the index since 5 Sept 2026

Severity: Medium; worst across findings
CVSS: 6.5; base score, highest
EPSS: 0.018; 78th percentile
CISA KEV: Not listed; no confirmed exploitation
Charts affected: 612; of 17,781 indexed, latest versions
Container images: 497; deployed by those charts
Fix available: None; affected packages

The matching OSV records carry no description.

Carried by container images the latest versions of 612 of 17,781 indexed charts deploy, on 497 images.

Affected package	Affected versions	Fixed in	Images
tiffdeb	4.5.0-6, 4.5.0-6+deb12u1, 4.5.0-6+deb12u2, 4.5.0-6+deb12u3+5 more	no fix listed	290
libjpeg-turbodeb	1.3.0-0ubuntu2, 1.4.2-0ubuntu3, 1.4.2-0ubuntu3.1, 1.4.2-0ubuntu3.3+10 more	no fix listed	206
libjpeg6bdeb	1:6b2-4build1	no fix listed	1
libjpeg9deb	1:9d-1	no fix listed	1

OSV records: DEBIAN-CVE-2018-10126 UBUNTU-CVE-2018-10126

Charts affected

612 by stars

Chart

Latest

Affected images

Radar Score

argus-test-envvk-helm-charts

2.0.0

1 of 1 See more

argus-test-env vk-helm-charts 2.0.0

1 of the 1 container images this version deploys carry CVE-2018-10126.

Container image	Digest	Package	Fixed in
library/nginx :latest	05b8cb60c354	tiff@4.7.0-3+deb13u3	no fix listed

Open the chart page →

1,827

aih-scannerwallarm

2.7.11

1 of 2 See more

aih-scanner wallarm 2.7.11

1 of the 2 container images this version deploys carry CVE-2018-10126.

Container image	Digest	Package	Fixed in
wallarm/aih-scanner :2.7.11	f1cb26db1f5b	tiff@4.7.0-3+deb13u3	no fix listed

Open the chart page →

3,911

webhookiewebhookie

0.1.2

1 of 1 See more

webhookie webhookie 0.1.2

1 of the 1 container images this version deploys carry CVE-2018-10126.

Container image	Digest	Package	Fixed in
hookiesolutions/webhookie :latest	0629694246ba	libjpeg-turbo@2.0.3-0ubuntu1.20.04.1	no fix listed

Open the chart page →

14,364

webhookie-allwebhookie

0.1.2

1 of 3 See more

webhookie-all webhookie 0.1.2

1 of the 3 container images this version deploys carry CVE-2018-10126.

Container image	Digest	Package	Fixed in
hookiesolutions/webhookie :latest	0629694246ba	libjpeg-turbo@2.0.3-0ubuntu1.20.04.1	no fix listed

Open the chart page →

28,605

juicefs-csi-driverwenerme

0.32.5

1 of 5 See more

juicefs-csi-driver wenerme 0.32.5

1 of the 5 container images this version deploys carry CVE-2018-10126.

Container image	Digest	Package	Fixed in
juicedata/juicefs-csi-driver :v0.32.5	95008ba63318	tiff@4.5.0-6+deb12u4	no fix listed

Open the chart page →

9,117

Wordpresswordpress-mariadb

1.0.2

1 of 2 See more

Wordpress wordpress-mariadb 1.0.2

1 of the 2 container images this version deploys carry CVE-2018-10126.

Container image	Digest	Package	Fixed in
library/wordpress :latest	5a93c470ae82	tiff@4.7.0-3+deb13u3	no fix listed

Open the chart page →

5,560

playwright-synthetic-monitoringwork-adventure

1.0.1

1 of 1 See more

playwright-synthetic-monitoring work-adventure 1.0.1

1 of the 1 container images this version deploys carry CVE-2018-10126.

Container image	Digest	Package	Fixed in
workadventure/playwright-synthetic-monitoring :main	92b664c2a06f	libjpeg-turbo@2.1.2-0ubuntu1	no fix listed

Open the chart page →

14,100

tabbyxd

1.0.6

1 of 2 See more

tabby xd 1.0.6

1 of the 2 container images this version deploys carry CVE-2018-10126.

Container image	Digest	Package	Fixed in
library/nginx :1.25	a484819eb602	tiff@4.5.0-6+deb12u1	no fix listed

Open the chart page →

7,673

nginx-chartxxoznge-nginx

0.1.0

1 of 1 See more

nginx-chart xxoznge-nginx 0.1.0

1 of the 1 container images this version deploys carry CVE-2018-10126.

Container image	Digest	Package	Fixed in
library/nginx :latest	05b8cb60c354	tiff@4.7.0-3+deb13u3	no fix listed

Open the chart page →

1,827

my-nginx-appyasser-nginx-app

0.1.0

1 of 1 See more

my-nginx-app yasser-nginx-app 0.1.0

1 of the 1 container images this version deploys carry CVE-2018-10126.

Container image	Digest	Package	Fixed in
library/nginx :stable	d5792f71a949	tiff@4.7.0-3+deb13u3	no fix listed

Open the chart page →

1,827

NEW_APPzekker6

0.0.0

1 of 1 See more

NEW_APP zekker6 0.0.0

1 of the 1 container images this version deploys carry CVE-2018-10126.

Container image	Digest	Package	Fixed in
library/nginx :latest	05b8cb60c354	tiff@4.7.0-3+deb13u3	no fix listed

Open the chart page →

1,827

zoo-project-druzoo-project

0.10.4

1 of 6 See more

zoo-project-dru zoo-project 0.10.4

1 of the 6 container images this version deploys carry CVE-2018-10126.

Container image	Digest	Package	Fixed in
zooproject/zoo-project :dru-19f3c4eed7c9ec9d1f0375bbe59f9d204a42bd3a	9a507cb7e2dd	libjpeg-turbo@2.1.2-0ubuntu1	no fix listed

Open the chart page →

7,849

Container images carrying it

497 by charts deploying them

A fixed version is listed for 0 of the 4 affected packages.

Container image	Digest	Package	Fixed in	Used by
qichenxu4pd/pythonexample :1.0	f3a8502bc21b	tiff@4.5.0-6+deb12u1	no fix listed	2
wurstmeister/zookeeper :latest	7a7fd44a7210	libjpeg-turbo@1.3.0-0ubuntu2	no fix listed	2
ghcr.io/bryopsida/k8s-dev-pod :main	82d0b161161d	libjpeg-turbo@2.1.5-2ubuntu2	no fix listed	2
ghcr.io/codingducksrl/laravel :8.1	5be52524664c	libjpeg-turbo@2.1.2-0ubuntu1	no fix listed	2
ghcr.io/dgtlmoon/changedetection.io :0.60.4	7bb6963b730d	tiff@4.5.0-6+deb12u4	no fix listed	2
ghcr.io/dgtlmoon/changedetection.io :0.60.3 :latest	ecacd9fd0c66	tiff@4.5.0-6+deb12u4	no fix listed	2
ghcr.io/flaresolverr/flaresolverr :v3.4.6	7962759d99d7	tiff@4.5.0-6+deb12u3	no fix listed	2
ghcr.io/flaresolverr/flaresolverr :v3.5.2	c80ae007ce2c	tiff@4.5.0-6+deb12u4	no fix listed	2
ghcr.io/games-on-whales/retroarch :1.0.0	103fbcec2314	libjpeg-turbo@2.0.3-0ubuntu1.20.04.1	no fix listed	2
ghcr.io/games-on-whales/steam :1.0.0	9b6105be7ad0	libjpeg-turbo@2.0.3-0ubuntu1.20.04.1	no fix listed	2
ghcr.io/lissy93/web-check :latest	a4e021c0f6a9	tiff@4.5.0-6+deb12u4	no fix listed	2
ghcr.io/nginxinc/nginx-s3-gateway/nginx-oss-s3-gateway :unprivileged-oss :unprivileged-oss-20250331	3db8145349a3	tiff@4.5.0-6+deb12u1	no fix listed	2
ghcr.io/openunison/openunison-kubernetes-operator :1.0.11	f4feb3323a29	libjpeg-turbo@2.1.5-2ubuntu2	no fix listed	2
ghcr.io/smarter-project/hydra/isolated-vm :main	4457b79b24cd	tiff@4.5.0-6+deb12u3	no fix listed	2
1dev/server :11.9.0	cd5b12fe5471	libjpeg-turbo@2.1.5-2ubuntu2	no fix listed	1
5200710/hadoop :3.2.3-java8	092d3088a5fb	libjpeg-turbo@2.0.3-0ubuntu1.20.04.3	no fix listed	1
aapjeisbaas/wp-frankenphp :v0.2.2	6b261abc7fb0	tiff@4.7.0-3+deb13u2	no fix listed	1
airsonicadvanced/airsonic-advanced :latest	f7cbafac2806	libjpeg-turbo@2.0.3-0ubuntu1.20.04.1	no fix listed	1
akaunting/akaunting :3.0.15	52811b36ec3a	tiff@4.5.0-6	no fix listed	1
allegroai/clearml :2.0.0-613	713ae38f7daf	tiff@4.5.0-6+deb12u1	no fix listed	1
andrewmackrodt/firefox-x11 :142.0.1-r1	33f9080470c9	libjpeg-turbo@2.1.2-0ubuntu1	no fix listed	1
anguda/ant-media :2.5	c435285fc241	libjpeg-turbo@2.0.3-0ubuntu1.20.04.3	no fix listed	1
antrea/antrea-ui-frontend :v0.8.0	ee9686bcefb8	tiff@4.7.0-3+deb13u2	no fix listed	1
anujdatar/cups :25.07.01	685df04a643b	tiff@4.5.0-6+deb12u2	no fix listed	1
apachepulsar/pulsar :2.10.0	3b262ab7a7d9	libjpeg-turbo@2.0.3-0ubuntu1.20.04.1	no fix listed	1
apachepulsar/pulsar :2.9.0	d056c89b7131	libjpeg-turbo@2.0.3-0ubuntu1.20.04.1	no fix listed	1
apachepulsar/pulsar :2.8.2	d538416d5afe	libjpeg-turbo@2.0.3-0ubuntu1.20.04.1	no fix listed	1
apache/tika :latest-full	80072bb73dd3	libjpeg-turbo@2.1.5-4ubuntu4	no fix listed	1
apache/tika :3.3.1.0	90b7fa1dc018	libjpeg-turbo@2.1.5-4ubuntu4	no fix listed	1
apache/tika :2.9.0.0	92d055a84e9e	libjpeg-turbo@2.1.2-0ubuntu1	no fix listed	1
archivebox/archivebox :0.7.4	1a5a37331091	tiff@4.5.0-6+deb12u4	no fix listed	1
aristidetm/basic-notebook :3.6.5	469dbc951224	tiff@4.5.0-6+deb12u1	no fix listed	1
arthurjguerra18/revwallet :v0.7.12	f540af20b307	tiff@4.5.0-6+deb12u1	no fix listed	1
assistiot/open_api_backend :1.1.2	30812ba93555	libjpeg-turbo@2.1.2-0ubuntu1	no fix listed	1
assistiot/smart-orchestrator_scheduler_mc :latest	b1dbe4d62a03	tiff@4.5.0-6	no fix listed	1
assistiot/video_augmentation :runner-cpu-latest	e5ae539ce2cb	libjpeg-turbo@2.0.3-0ubuntu1.20.04.3	no fix listed	1
avinash263/pyredis263 :latest	aa2b8727f1a6	tiff@4.5.0-6	no fix listed	1
avzini/web-app :latest	f40b30210ed0	tiff@4.5.0-6	no fix listed	1
beyzkaya/blog-backend :v1.0.1	12a6a3d1c5f9	tiff@4.5.0-6+deb12u2	no fix listed	1
bitnamilegacy/matomo :5.3.2-debian-12-r13	f02c000c54b1	tiff@4.5.0-6+deb12u2	no fix listed	1
blakeblackshear/frigate :0.10.0-amd64	ae269270ad9e	libjpeg-turbo@2.0.3-0ubuntu1.20.04.1	no fix listed	1
bnjbvr/kresus :0.22.1	37e216b182c8	tiff@4.5.0-6+deb12u1	no fix listed	1
browserless/chrome :1.48.0-chrome-stable	c81ae5585b47	libjpeg-turbo@2.0.3-0ubuntu1.20.04.1	no fix listed	1
budibase/proxy :3.41.3	8d780b6ee602	tiff@4.7.0-3+deb13u2	no fix listed	1
camptocamp/mapserver :latest	bf2e8e118c9b	libjpeg-turbo@2.1.5-2ubuntu2	no fix listed	1
carlosmz87/test_helm_backend :latest	8ffa63aa995d	tiff@4.5.0-6+deb12u1	no fix listed	1
castopod/castopod :1.12.10	1fd37280cbb2	tiff@4.5.0-6+deb12u1	no fix listed	1
castopod/castopod :1.15.5	4e4f0440520f	tiff@4.7.0-3+deb13u1	no fix listed	1
checkmk/check-mk-community :2.5.0p6	c11b422210c4	libjpeg-turbo@2.1.2-0ubuntu1	no fix listed	1
cheyang/distributed-tf :1.6.0	46cc34755493	libjpeg-turbo@1.4.2-0ubuntu3	no fix listed	1