StackRadar

CVE-2018-18064

Medium

Advisory

Published 8 Oct 2018In the index since 5 Sept 2026
Severity
Medium
worst across findings
CVSS
6.5
base score, highest
EPSS
0.015
72nd percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
335
of 17,781 indexed, latest versions
Container images
325
deployed by those charts
Fix available
None
affected package

The matching OSV records carry no description.

Carried by container images the latest versions of 335 of 17,781 indexed charts deploy, on 325 images.

Affected packageAffected versionsFixed inImages
cairodeb1.14.6-1, 1.15.10-2, 1.15.10-2ubuntu0.1, 1.16.0-4ubuntu1+7 moreno fix listed325
OSV records
DEBIAN-CVE-2018-18064UBUNTU-CVE-2018-18064

Charts affected

335 by stars
ChartLatestAffected imagesRadar Score
business-api-ecosystemfiware1.1.02 of 4See more

business-api-ecosystem fiware 1.1.0

2 of the 4 container images this version deploys carry CVE-2018-18064.

Container imageDigestPackageFixed in
fiware/biz-ecosystem-charging-backend:11.7.029456835bb2c
cairo@1.16.0-4ubuntu1
no fix listed
fiware/biz-ecosystem-logic-proxy:11.20.3d551a13e8278
cairo@1.16.0-7
no fix listed

Open the chart page →

64,489
changedetection-iogabe565Verified publisher0.12.01 of 2See more

changedetection-io gabe565 0.12.0

1 of the 2 container images this version deploys carry CVE-2018-18064.

Container imageDigestPackageFixed in
ghcr.io/dgtlmoon/changedetection.io:latestecacd9fd0c66
cairo@1.16.0-7
no fix listed

Open the chart page →

2,595
esphomegabe565Verified publisher0.15.01 of 1See more

esphome gabe565 0.15.0

1 of the 1 container images this version deploys carry CVE-2018-18064.

Container imageDigestPackageFixed in
ghcr.io/esphome/esphome:latest000c5ee5ee96
cairo@1.18.4-1+b1
no fix listed

Open the chart page →

3,112
scanservjsgabe565Verified publisher0.9.21 of 1See more

scanservjs gabe565 0.9.2

1 of the 1 container images this version deploys carry CVE-2018-18064.

Container imageDigestPackageFixed in
sbs20/scanservjs:release-v3.0.3dad1fd6e9a98
cairo@1.16.0-7
no fix listed

Open the chart page →

13,241
garge-apigargeVerified publisher0.1.541 of 1See more

garge-api garge 0.1.54

1 of the 1 container images this version deploys carry CVE-2018-18064.

Container imageDigestPackageFixed in
sondresjo/garge-api:v2.12.5a7484b916ee4
cairo@1.18.0-3build1
no fix listed

Open the chart page →

1,287
airsonicgeek-cookbookVerified publisher6.4.21 of 1See more

airsonic geek-cookbook 6.4.2

1 of the 1 container images this version deploys carry CVE-2018-18064.

Container imageDigestPackageFixed in
airsonicadvanced/airsonic-advanced:latestf7cbafac2806
cairo@1.16.0-4ubuntu1
no fix listed

Open the chart page →

18,230
booksonic-airgeek-cookbookVerified publisher6.4.21 of 1See more

booksonic-air geek-cookbook 6.4.2

1 of the 1 container images this version deploys carry CVE-2018-18064.

Container imageDigestPackageFixed in
ghcr.io/linuxserver/booksonic-air:version-v2009.1.0baa4fa9549dc
cairo@1.15.10-2ubuntu0.1
no fix listed

Open the chart page →

19,215
calibre-webgeek-cookbookVerified publisher8.4.21 of 1See more

calibre-web geek-cookbook 8.4.2

1 of the 1 container images this version deploys carry CVE-2018-18064.

Container imageDigestPackageFixed in
linuxserver/calibre-web:version-0.6.12938810eca3d3
cairo@1.16.0-4ubuntu1
no fix listed

Open the chart page →

16,123
double-takegeek-cookbookVerified publisher2.3.21 of 1See more

double-take geek-cookbook 2.3.2

1 of the 1 container images this version deploys carry CVE-2018-18064.

Container imageDigestPackageFixed in
jakowenko/double-take:1.6.0b858bac9e32a
cairo@1.16.0-4ubuntu1
no fix listed

Open the chart page →

12,222
lidarrgeek-cookbookVerified publisher14.2.21 of 1See more

lidarr geek-cookbook 14.2.2

1 of the 1 container images this version deploys carry CVE-2018-18064.

Container imageDigestPackageFixed in
ghcr.io/k8s-at-home/lidarr:v1.0.0.225554ebc1f90963
cairo@1.16.0-4ubuntu1
no fix listed

Open the chart page →

14,283
mopidygeek-cookbookVerified publisher0.1.21 of 1See more

mopidy geek-cookbook 0.1.2

1 of the 1 container images this version deploys carry CVE-2018-18064.

Container imageDigestPackageFixed in
jaedb/iris:latest048cfbf58d57
cairo@1.16.0-7
no fix listed

Open the chart page →

12,958
openkmgeek-cookbookVerified publisher4.2.01 of 1See more

openkm geek-cookbook 4.2.0

1 of the 1 container images this version deploys carry CVE-2018-18064.

Container imageDigestPackageFixed in
openkm/openkm-ce:6.3.113bc465a7461b
cairo@1.16.0-4ubuntu1
no fix listed

Open the chart page →

27,949
photoprismgeek-cookbookVerified publisher7.2.01 of 1See more

photoprism geek-cookbook 7.2.0

1 of the 1 container images this version deploys carry CVE-2018-18064.

Container imageDigestPackageFixed in
photoprism/photoprism:220629-jammy2954334adbda
cairo@1.16.0-5ubuntu2
no fix listed

Open the chart page →

19,503
puppeteergeek-cookbookVerified publisher1.2.21 of 1See more

puppeteer geek-cookbook 1.2.2

1 of the 1 container images this version deploys carry CVE-2018-18064.

Container imageDigestPackageFixed in
ghcr.io/jr0dd/puppeteer:v13.3.26047599cd78e
cairo@1.16.0-4ubuntu1
no fix listed

Open the chart page →

15,730
teedygeek-cookbookVerified publisher6.2.01 of 1See more

teedy geek-cookbook 6.2.0

1 of the 1 container images this version deploys carry CVE-2018-18064.

Container imageDigestPackageFixed in
sismics/docs:v1.10f4b0ef019cf1
cairo@1.15.10-2ubuntu0.1
no fix listed

Open the chart page →

26,944
xtevegeek-cookbookVerified publisher8.4.21 of 1See more

xteve geek-cookbook 8.4.2

1 of the 1 container images this version deploys carry CVE-2018-18064.

Container imageDigestPackageFixed in
ghcr.io/k8s-at-home/xteve:v2.2.0.200292b3614670f
cairo@1.16.0-4ubuntu1
no fix listed

Open the chart page →

17,929
opentelemetry-demogpg-dev0.33.81 of 27See more

opentelemetry-demo gpg-dev 0.33.8

1 of the 27 container images this version deploys carry CVE-2018-18064.

Container imageDigestPackageFixed in
ghcr.io/open-telemetry/demo:1.12.0-loadgenerator85c9935ff31b
cairo@1.16.0-7
no fix listed

Open the chart page →

49,025
web-checkhajowielandVerified publisher1.0.11 of 1See more

web-check hajowieland 1.0.1

1 of the 1 container images this version deploys carry CVE-2018-18064.

Container imageDigestPackageFixed in
ghcr.io/lissy93/web-check:latesta4e021c0f6a9
cairo@1.16.0-7
no fix listed

Open the chart page →

9,047
heliconehelicone0.1.421 of 14See more

helicone helicone 0.1.42

1 of the 14 container images this version deploys carry CVE-2018-18064.

Container imageDigestPackageFixed in
helicone/supabase-migration-runner:v2025.03.05-14a913936c97b
cairo@1.16.0-7
no fix listed

Open the chart page →

24,995
7dtdhelm-7dtd0.1.01 of 1See more

7dtd helm-7dtd 0.1.0

1 of the 1 container images this version deploys carry CVE-2018-18064.

Container imageDigestPackageFixed in
vinanrra/7dtd-server:v0.4.4f9534490bd2b
cairo@1.15.10-2ubuntu0.1
no fix listed

Open the chart page →

10,627
esphomehelm-chart-roeiVerified publisher2025.3.01 of 1See more

esphome helm-chart-roei 2025.3.0

1 of the 1 container images this version deploys carry CVE-2018-18064.

Container imageDigestPackageFixed in
esphome/esphome:2025.3.0def8b6e4f517
cairo@1.16.0-7
no fix listed

Open the chart page →

6,008
archiveboxhelmforgeVerified publisher1.1.121 of 1See more

archivebox helmforge 1.1.12

1 of the 1 container images this version deploys carry CVE-2018-18064.

Container imageDigestPackageFixed in
archivebox/archivebox:0.7.41a5a37331091
cairo@1.16.0-7
no fix listed

Open the chart page →

7,633
castopodhelmforgeVerified publisher1.2.71 of 3See more

castopod helmforge 1.2.7

1 of the 3 container images this version deploys carry CVE-2018-18064.

Container imageDigestPackageFixed in
castopod/castopod:1.15.54e4f0440520f
cairo@1.18.4-1+b1
no fix listed

Open the chart page →

9,342
changedetectionhelmforgeVerified publisher1.1.151 of 1See more

changedetection helmforge 1.1.15

1 of the 1 container images this version deploys carry CVE-2018-18064.

Container imageDigestPackageFixed in
ghcr.io/dgtlmoon/changedetection.io:0.60.3ecacd9fd0c66
cairo@1.16.0-7
no fix listed

Open the chart page →

2,595
chiefonboardinghelmforgeVerified publisher1.1.141 of 3See more

chiefonboarding helmforge 1.1.14

1 of the 3 container images this version deploys carry CVE-2018-18064.

Container imageDigestPackageFixed in
chiefonboarding/chiefonboarding:v2.4.159bc7aa60fe7
cairo@1.18.4-1+b1
no fix listed

Open the chart page →

10,849
countlyhelmforgeVerified publisher1.2.61 of 3See more

countly helmforge 1.2.6

1 of the 3 container images this version deploys carry CVE-2018-18064.

Container imageDigestPackageFixed in
countly/countly-server:25.05.4e3c238248f99
cairo@1.16.0-4ubuntu1
no fix listed

Open the chart page →

18,813
discount-bandithelmforgeVerified publisher2.0.81 of 3See more

discount-bandit helmforge 2.0.8

1 of the 3 container images this version deploys carry CVE-2018-18064.

Container imageDigestPackageFixed in
cybrarist/discount-bandit:v4.0.4e9e2447ac666
cairo@1.18.4-1+b1
no fix listed

Open the chart page →

29,817
immichhelmforgeVerified publisher1.2.81 of 5See more

immich helmforge 1.2.8

1 of the 5 container images this version deploys carry CVE-2018-18064.

Container imageDigestPackageFixed in
ghcr.io/immich-app/immich-server:v3.1.0b434cb9287ee
cairo@1.18.4-1+b1
no fix listed

Open the chart page →

11,042
medikeephelmforgeVerified publisher2.0.01 of 3See more

medikeep helmforge 2.0.0

1 of the 3 container images this version deploys carry CVE-2018-18064.

Container imageDigestPackageFixed in
ghcr.io/afairgiant/medikeep:v0.69.0766699daa9ac
cairo@1.16.0-7
no fix listed

Open the chart page →

6,022
minecrafthelmforgeVerified publisher1.5.31 of 1See more

minecraft helmforge 1.5.3

1 of the 1 container images this version deploys carry CVE-2018-18064.

Container imageDigestPackageFixed in
itzg/minecraft-server:2026.9.04e29d14082d9
cairo@1.18.0-3build1
no fix listed

Open the chart page →

4,639
uptime-kumahelmforgeVerified publisher1.5.121 of 1See more

uptime-kuma helmforge 1.5.12

1 of the 1 container images this version deploys carry CVE-2018-18064.

Container imageDigestPackageFixed in
louislam/uptime-kuma:2.5.33e24e96c89ef
cairo@1.16.0-7
no fix listed

Open the chart page →

30,099
myapphelmingapp0.1.01 of 1See more

myapp helmingapp 0.1.0

1 of the 1 container images this version deploys carry CVE-2018-18064.

Container imageDigestPackageFixed in
muhammedgamal/fp23:latest74b4cd69b6fa
cairo@1.16.0-7
no fix listed

Open the chart page →

12,607
jellyfinhelm-l3st86Verified publisher0.1.81 of 1See more

jellyfin helm-l3st86 0.1.8

1 of the 1 container images this version deploys carry CVE-2018-18064.

Container imageDigestPackageFixed in
jellyfin/jellyfin:latestaefb67e6a7ff
cairo@1.18.4-1+b1
no fix listed

Open the chart page →

2,604
openaevhelm-openbasVerified publisher2.0.51 of 7See more

openaev helm-openbas 2.0.5

1 of the 7 container images this version deploys carry CVE-2018-18064.

Container imageDigestPackageFixed in
openaev/platform:3.260904.00a12ce8b3db9
cairo@1.18.0-3build1
no fix listed

Open the chart page →

7,437
svacerhelm-svacer0.6.01 of 1See more

svacer helm-svacer 0.6.0

1 of the 1 container images this version deploys carry CVE-2018-18064.

Container imageDigestPackageFixed in
ispras/svacer:11-2-042aa9fa9f189
cairo@1.16.0-5ubuntu2
no fix listed

Open the chart page →

6,015
paperlesshomelabcihelmchartstestVerified publisher9.1.91 of 1See more

paperless homelabcihelmchartstest 9.1.9

1 of the 1 container images this version deploys carry CVE-2018-18064.

Container imageDigestPackageFixed in
ghcr.io/paperless-ngx/paperless-ngx:2.0.1ab255bea133e
cairo@1.16.0-7
no fix listed

Open the chart page →

16,384
paperlesshpVerified publisher0.1.12 of 5See more

paperless hp 0.1.1

2 of the 5 container images this version deploys carry CVE-2018-18064.

Container imageDigestPackageFixed in
gotenberg/gotenberg:8.3467097317623a
cairo@1.18.4-1+b1
no fix listed
ghcr.io/paperless-ngx/paperless-ngx:3.1.3aa810a36942c
cairo@1.18.4-1+b1
no fix listed

Open the chart page →

26,612
hydrahydraVerified publisher0.9.51 of 2See more

hydra hydra 0.9.5

1 of the 2 container images this version deploys carry CVE-2018-18064.

Container imageDigestPackageFixed in
ghcr.io/smarter-project/hydra/isolated-vm:main4457b79b24cd
cairo@1.16.0-7
no fix listed

Open the chart page →

9,011
isolated-vmhydraVerified publisher0.9.41 of 1See more

isolated-vm hydra 0.9.4

1 of the 1 container images this version deploys carry CVE-2018-18064.

Container imageDigestPackageFixed in
ghcr.io/smarter-project/hydra/isolated-vm:main4457b79b24cd
cairo@1.16.0-7
no fix listed

Open the chart page →

7,733
browserlessicoretechVerified publisher0.16.61 of 1See more

browserless icoretech 0.16.6

1 of the 1 container images this version deploys carry CVE-2018-18064.

Container imageDigestPackageFixed in
ghcr.io/browserless/chromium:v2.56.7b1ba7b054af2
cairo@1.18.0-3build1
no fix listed

Open the chart page →

1,948
ilum-unity-catalogilumVerified publisher0.1.01 of 4See more

ilum-unity-catalog ilum 0.1.0

1 of the 4 container images this version deploys carry CVE-2018-18064.

Container imageDigestPackageFixed in
unitycatalog/unitycatalog-ui:main-aadc6fc3a688197b218
cairo@1.16.0-7
no fix listed

Open the chart page →

11,812
itm-servicesintelVerified publisher2.0.01 of 8See more

itm-services intel 2.0.0

1 of the 8 container images this version deploys carry CVE-2018-18064.

Container imageDigestPackageFixed in
intel/dlstreamer-pipeline-server:2022.1.1-ubuntu20aa8f5483a2ef
cairo@1.16.0-4ubuntu1
no fix listed

Open the chart page →

18,066
intelowlintelowl-helm6.6.1-01-06-20261 of 5See more

intelowl intelowl-helm 6.6.1-01-06-2026

1 of the 5 container images this version deploys carry CVE-2018-18064.

Container imageDigestPackageFixed in
intelowlproject/intelowl:v6.6.10b22e547ea6b
cairo@1.16.0-7
no fix listed

Open the chart page →

17,852
inventreeinventreeOfficialVerified publisher0.4.281 of 2See more

inventree inventree 0.4.28

1 of the 2 container images this version deploys carry CVE-2018-18064.

Container imageDigestPackageFixed in
inventree/inventree:1.5.4a946ec09da3e
cairo@1.18.4-1+b1
no fix listed

Open the chart page →

5,788
opencloudjacobcolvinVerified publisher0.2.31 of 13See more

opencloud jacobcolvin 0.2.3

1 of the 13 container images this version deploys carry CVE-2018-18064.

Container imageDigestPackageFixed in
apache/tika:2.9.2.1-fullae0b86d3c4d0
cairo@1.18.0-3build1
no fix listed

Open the chart page →

45,239
deconzjanip81-helm-chartsVerified publisher0.1.11 of 1See more

deconz janip81-helm-charts 0.1.1

1 of the 1 container images this version deploys carry CVE-2018-18064.

Container imageDigestPackageFixed in
deconzcommunity/deconz:2.29.2062de2362641
cairo@1.16.0-7
no fix listed

Open the chart page →

10,780
jasperjasperVerified publisher1.0.2021 of 2See more

jasper jasper 1.0.202

1 of the 2 container images this version deploys carry CVE-2018-18064.

Container imageDigestPackageFixed in
ghcr.io/cjmalloy/jasper:v1.3.282726a947bb65b
cairo@1.16.0-7
no fix listed

Open the chart page →

5,998
esphomejeffrescVerified publisher0.2.21 of 1See more

esphome jeffresc 0.2.2

1 of the 1 container images this version deploys carry CVE-2018-18064.

Container imageDigestPackageFixed in
ghcr.io/esphome/esphome:2026.4.078a82d810709
cairo@1.16.0-7
no fix listed

Open the chart page →

5,040
jellyfinjellyfin-helm10.9.101 of 1See more

jellyfin jellyfin-helm 10.9.10

1 of the 1 container images this version deploys carry CVE-2018-18064.

Container imageDigestPackageFixed in
jellyfin/jellyfin:10.9.1079fb3d73a3e9
cairo@1.16.0-7
no fix listed

Open the chart page →

4,489
jellyfinjellyfin--jellyfin-helm3.0.01 of 1See more

jellyfin jellyfin--jellyfin-helm 3.0.0

1 of the 1 container images this version deploys carry CVE-2018-18064.

Container imageDigestPackageFixed in
jellyfin/jellyfin:10.11.717285f9cce63
cairo@1.18.4-1+b1
no fix listed

Open the chart page →

3,001

Container images carrying it

325 by charts deploying them

A fixed version is listed for 0 of the 1 affected package.

Container imageDigestPackageFixed inUsed by
ghcr.io/paperless-ngx/paperless-ngx:2.20.357ad9565bff3
cairo@1.18.4-1+b1
no fix listed
1
ghcr.io/paperless-ngx/paperless-ngx:2.20.5665f2f5cc548
cairo@1.18.4-1+b1
no fix listed
1
ghcr.io/paperless-ngx/paperless-ngx:2.0.1ab255bea133e
cairo@1.16.0-7
no fix listed
1
ghcr.io/paperless-ngx/paperless-ngx:2.20.14b89f83345532
cairo@1.18.4-1+b1
no fix listed
1
ghcr.io/sdwbgn/unitycatalog-helm/docker/unitycatalog-ui:0.2.1-5d668c1ed07e7ca098d
cairo@1.16.0-7
no fix listed
1
ghcr.io/smarter-project/gstreamer:v1.0.25ecb16015aa8
cairo@1.16.0-4ubuntu1
no fix listed
1
ghcr.io/smarter-project/image-detector:v2.5.31dcca70c6446
cairo@1.16.0-4ubuntu1
no fix listed
1
ghcr.io/stirling-tools/stirling-pdf:2.14.33b3670fce70b
cairo@1.18.0-3build1
no fix listed
1
ghcr.io/suwayomi/suwayomi-server:v2.3.2320d2c3218c7f9f
cairo@1.18.0-3build1
no fix listed
1
ghcr.io/wgbh-mla/pbcore-util:pr-66e04659a3baa
cairo@1.16.0-7
no fix listed
1
ghcr.io/wiremind/grafana-pdf-exporter:v1.7dbaa8527bf4c
cairo@1.16.0-7
no fix listed
1
ghcr.io/wizarrrr/wizarr:4.2.0-beta.3d19d886d5090
cairo@1.16.0-7
no fix listed
1
ghcr.io/yurymkomarov/docker/kubernetes-kiosk-chromium:0.1.27bff29dcec72
cairo@1.16.0-7
no fix listed
1
ghcr.io/zammad/zammad:7.1.3-0011e65123a43ecc
cairo@1.18.4-1+b1
no fix listed
1
ghcr.io/zoriya/kyoo_autosync:4.7.1fbba58ddb1a6
cairo@1.16.0-7
no fix listed
1
ghcr.io/zoriya/kyoo_scanner:4.7.17dc0ee57b628
cairo@1.16.0-7
no fix listed
1
public.ecr.aws/jtekt-corporation/image-storage-service:v1.16.17b1493760c716
cairo@1.16.0-7
no fix listed
1
public.ecr.aws/jtekt-corporation/shinsei-manager:v2.8.15cd62142d6ed
cairo@1.16.0-7
no fix listed
1
public.ecr.aws/jtekt-corporation/time-series-storage-service:v1.5.1046ef5c9ed50
cairo@1.16.0-7
no fix listed
1
public.ecr.aws/truefoundrycloud/async-service-distributor:5d48113bc678d694a0c8f8dabb2207c5aa2cfc53f74851ce31f5
cairo@1.16.0-7
no fix listed
1
quay.io/go-skynet/local-ai:latestd78cd113b2bc
cairo@1.18.0-3build1
no fix listed
1
quay.io/opsmxpublic/spin-sample-pipeline:v1.0.1c6a934439421
cairo@1.14.6-1
no fix listed
1
quay.io/yushiwho/api:e1f9d77e0d9b93dbf2b
cairo@1.16.0-7
no fix listed
1
registry.gitlab.com/crafty-controller/crafty-4:latest166a06f73d8c
cairo@1.18.0-3build1
no fix listed
1
registry.gitlab.com/enbuild-staging/vivsoft-platform-ui/enbuild-mq-consumer:1.0.310e3cd8c7776d
cairo@1.16.0-7
no fix listed
1

syft 1.42.1 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.