StackRadar

CVE-2023-25193

High

Advisory

Published 4 Feb 2023In the index since 5 Sept 2026
Severity
High
worst across findings
CVSS
7.5
base score, highest
EPSS
0.018
77th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
259
of 17,781 indexed, latest versions
Container images
252
deployed by those charts
Fix available
6 of 6
affected packages

Red Hat Security Advisory: harfbuzz security update

Carried by container images the latest versions of 259 of 17,781 indexed charts deploy, on 252 images.

Affected packageAffected versionsFixed inImages
harfbuzzdeb1.7.2-1ubuntu1, 2.6.4-1ubuntu4, 2.6.4-1ubuntu4.2, 2.7.4-1ubuntu3+2 more2.6.4-1ubuntu4.3, 2.7.4-1ubuntu3.2213
harfbuzzrpm1.7.5-3.el8, 2.7.4-8.el90:1.7.5-4.el8, 0:2.7.4-10.el930
openjdk-ltsdeb11.0.3+7-1ubuntu2~18.04.1, 11.0.8+10-0ubuntu1~18.04.1, 11.0.11+9-0ubuntu2~20.04, 11.0.13+8-0ubuntu1~20.04+5 more11.0.20+8-1ubuntu1~18.04, 11.0.20+8-1ubuntu1~20.0415
javabitnami11.0.15-150, 11.0.18-10-1, 11.0.18-10-2, 11.0.20-8-3+4 more11.0.208
Javabitnami11.0.20-8, 17.0.8-711.0.203
openjdk-17deb17.0.3+7-0ubuntu0.20.04.117.0.8+7-1~20.04.21
OSV records
BIT-java-2023-25193DEBIAN-CVE-2023-25193RHSA-2024:2410RHSA-2024:2980UBUNTU-CVE-2023-25193
Also known as
BIT-java-min-2023-25193, BIT-jre-2023-25193, USN-6263-1, USN-7251-1

Charts affected

259 by stars
ChartLatestAffected imagesRadar Score
uptime-kumauptime-kumaVerified publisher4.2.01 of 1See more

uptime-kuma uptime-kuma 4.2.0

1 of the 1 container images this version deploys carry CVE-2023-25193.

Container imageDigestPackageFixed in
louislam/uptime-kuma:2.5.0a8610b3b4c38
harfbuzz@6.0.0+dfsg-3
no fix listed

Open the chart page →

30,159
keycloakcodecentricVerified publisher18.10.01 of 3See more

keycloak codecentric 18.10.0

1 of the 3 container images this version deploys carry CVE-2023-25193.

Container imageDigestPackageFixed in
quay.io/keycloak/keycloak:17.0.1-legacy68f9f38c8f30
harfbuzz@1.7.5-3.el8
0:1.7.5-4.el8

Open the chart page →

7,713
chaos-meshchaos-meshVerified publisher2.8.41 of 4See more

chaos-mesh chaos-mesh 2.8.4

1 of the 4 container images this version deploys carry CVE-2023-25193.

Container imageDigestPackageFixed in
ghcr.io/chaos-mesh/chaos-daemon:v2.8.40d28dbd95b03
harfbuzz@6.0.0+dfsg-3
no fix listed

Open the chart page →

6,342
milvusmilvus4.0.311 of 5See more

milvus milvus 4.0.31

1 of the 5 container images this version deploys carry CVE-2023-25193.

Container imageDigestPackageFixed in
apachepulsar/pulsar:2.8.2d538416d5afe
harfbuzz@2.6.4-1ubuntu4
openjdk-lts@11.0.13+8-0ubuntu1~20.04
2.6.4-1ubuntu4.3
11.0.20+8-1ubuntu1~20.04

Open the chart page →

32,259
signozsignoz0.141.11 of 5See more

signoz signoz 0.141.1

1 of the 5 container images this version deploys carry CVE-2023-25193.

Container imageDigestPackageFixed in
signoz/zookeeper:3.7.1fcc4a3288154
java@11.0.20-8-5
Java@11.0.20-8
11.0.20
11.0.20

Open the chart page →

7,568
openprojectopenproject-helm-chartsOfficialVerified publisher13.11.01 of 5See more

openproject openproject-helm-charts 13.11.0

1 of the 5 container images this version deploys carry CVE-2023-25193.

Container imageDigestPackageFixed in
openproject/hocuspocus:release-338001b288dc1359dfb5
harfbuzz@6.0.0+dfsg-3
no fix listed

Open the chart page →

19,926
wazuhwazuh-helm-morgovedVerified publisher2.0.71 of 5See more

wazuh wazuh-helm-morgoved 2.0.7

1 of the 5 container images this version deploys carry CVE-2023-25193.

Container imageDigestPackageFixed in
kinseii/wazuh-agent:4.14.17160eb143728
harfbuzz@6.0.0+dfsg-3
no fix listed

Open the chart page →

11,384
zabbixcetic3.1.31 of 5See more

zabbix cetic 3.1.3

1 of the 5 container images this version deploys carry CVE-2023-25193.

Container imageDigestPackageFixed in
zabbix/zabbix-web-service:ubuntu-6.0.8ee4baa872280
harfbuzz@2.7.4-1ubuntu3.1
2.7.4-1ubuntu3.2

Open the chart page →

33,725
daskdask2024.1.11 of 2See more

dask dask 2024.1.1

1 of the 2 container images this version deploys carry CVE-2023-25193.

Container imageDigestPackageFixed in
ghcr.io/dask/dask-notebook:2024.1.0f53bde3acd4f
harfbuzz@2.7.4-1ubuntu3.1
2.7.4-1ubuntu3.2

Open the chart page →

12,746
oneuptimeoneuptimeOfficialVerified publisher13.0.41 of 7See more

oneuptime oneuptime 13.0.4

1 of the 7 container images this version deploys carry CVE-2023-25193.

Container imageDigestPackageFixed in
oneuptime/probe:release6b2d98713711
harfbuzz@6.0.0+dfsg-3
no fix listed

Open the chart page →

11,192
jellyfinutkuozdemirVerified publisher2.0.01 of 1See more

jellyfin utkuozdemir 2.0.0

1 of the 1 container images this version deploys carry CVE-2023-25193.

Container imageDigestPackageFixed in
linuxserver/jellyfin:10.7.72427dde159a2
harfbuzz@2.6.4-1ubuntu4
2.6.4-1ubuntu4.3

Open the chart page →

7,880
druiddruid-helmVerified publisher37.0.21 of 3See more

druid druid-helm 37.0.2

1 of the 3 container images this version deploys carry CVE-2023-25193.

Container imageDigestPackageFixed in
apache/druid:37.0.00116fb802786
harfbuzz@6.0.0+dfsg-3
no fix listed

Open the chart page →

3,812
jellyfinbeluga-cloudVerified publisher2.3.01 of 1See more

jellyfin beluga-cloud 2.3.0

1 of the 1 container images this version deploys carry CVE-2023-25193.

Container imageDigestPackageFixed in
ghcr.io/beluga-cloud/jellyfin/jellyfin:10.8.1368f52b993a7f
harfbuzz@2.7.4-1ubuntu3.1
2.7.4-1ubuntu3.2

Open the chart page →

4,244
puppetserverpuppetserver9.5.22 of 5See more

puppetserver puppetserver 9.5.2

2 of the 5 container images this version deploys carry CVE-2023-25193.

Container imageDigestPackageFixed in
ghcr.io/voxpupuli/container-puppetdb:7.18.0-v1.5.0a56dfe91f5b1
harfbuzz@2.7.4-1ubuntu3.1
2.7.4-1ubuntu3.2
ghcr.io/voxpupuli/container-puppetserver:7.17.0-v1.5.0916746209ac5
harfbuzz@2.7.4-1ubuntu3.1
2.7.4-1ubuntu3.2

Open the chart page →

14,184
wazuh-agentavistoVerified publisher4.12.21 of 1See more

wazuh-agent avisto 4.12.2

1 of the 1 container images this version deploys carry CVE-2023-25193.

Container imageDigestPackageFixed in
ghcr.io/avistotelecom/docker-wazuh-agent:4.12.08766ba08bf1a
harfbuzz@6.0.0+dfsg-3
no fix listed

Open the chart page →

6,457
hadoopbigdata-chartsVerified publisher1.0.11 of 2See more

hadoop bigdata-charts 1.0.1

1 of the 2 container images this version deploys carry CVE-2023-25193.

Container imageDigestPackageFixed in
5200710/hadoop:3.2.3-java8092d3088a5fb
harfbuzz@2.6.4-1ubuntu4.2
2.6.4-1ubuntu4.3

Open the chart page →

12,111
druidwiremindVerified publisher1.22.11 of 3See more

druid wiremind 1.22.1

1 of the 3 container images this version deploys carry CVE-2023-25193.

Container imageDigestPackageFixed in
apache/druid:29.0.10cef139b6bf1
harfbuzz@6.0.0+dfsg-3
no fix listed

Open the chart page →

7,930
karakeephelmforgeVerified publisher1.2.91 of 3See more

karakeep helmforge 1.2.9

1 of the 3 container images this version deploys carry CVE-2023-25193.

Container imageDigestPackageFixed in
ghcr.io/karakeep-app/karakeep:0.33.2b069e4307dec
harfbuzz@6.0.0+dfsg-3
no fix listed

Open the chart page →

9,460
keycloak-operatorkeycloak-operatorVerified publisher0.0.41 of 1See more

keycloak-operator keycloak-operator 0.0.4

1 of the 1 container images this version deploys carry CVE-2023-25193.

Container imageDigestPackageFixed in
quay.io/keycloak/keycloak-operator:20.0.2b1710745fa64
harfbuzz@1.7.5-3.el8
0:1.7.5-4.el8

Open the chart page →

4,652
kubeflowkubeflow1.6.21 of 45See more

kubeflow kubeflow 1.6.2

1 of the 45 container images this version deploys carry CVE-2023-25193.

Container imageDigestPackageFixed in
library/python:3.7eedf63967cdb
harfbuzz@6.0.0+dfsg-3
no fix listed

Open the chart page →

96,941
unifi-controllerqonstruktVerified publisher2.6.11 of 1See more

unifi-controller qonstrukt 2.6.1

1 of the 1 container images this version deploys carry CVE-2023-25193.

Container imageDigestPackageFixed in
linuxserver/unifi-controller:8.0.240ae315a3a456
harfbuzz@2.6.4-1ubuntu4.2
2.6.4-1ubuntu4.3

Open the chart page →

10,469
grafana-pdf-exporterwiremindVerified publisher2.1.11 of 1See more

grafana-pdf-exporter wiremind 2.1.1

1 of the 1 container images this version deploys carry CVE-2023-25193.

Container imageDigestPackageFixed in
ghcr.io/wiremind/grafana-pdf-exporter:v1.7dbaa8527bf4c
harfbuzz@6.0.0+dfsg-3
no fix listed

Open the chart page →

9,746
thingsboardcetic0.1.21 of 2See more

thingsboard cetic 0.1.2

1 of the 2 container images this version deploys carry CVE-2023-25193.

Container imageDigestPackageFixed in
thingsboard/tb-postgres:latest2d17e4e36edc
harfbuzz@6.0.0+dfsg-3
no fix listed

Open the chart page →

5,235
calibregeek-cookbookVerified publisher5.4.21 of 1See more

calibre geek-cookbook 5.4.2

1 of the 1 container images this version deploys carry CVE-2023-25193.

Container imageDigestPackageFixed in
linuxserver/calibre:version-v5.21.0a847b5b2d860
harfbuzz@1.7.2-1ubuntu1
no fix listed

Open the chart page →

22,773
unifigeek-cookbookVerified publisher5.1.31 of 1See more

unifi geek-cookbook 5.1.3

1 of the 1 container images this version deploys carry CVE-2023-25193.

Container imageDigestPackageFixed in
jacobalberty/unifi:v7.4.162b3edc809a3ff
harfbuzz@1.7.2-1ubuntu1
openjdk-lts@11.0.19+7~us1-0ubuntu1~18.04.1
no fix listed
11.0.20+8-1ubuntu1~18.04

Open the chart page →

11,839
terrariahalkeye0.4.21 of 2See more

terraria halkeye 0.4.2

1 of the 2 container images this version deploys carry CVE-2023-25193.

Container imageDigestPackageFixed in
ryshe/terraria:latestb1c89f7f359a
harfbuzz@6.0.0+dfsg-3
no fix listed

Open the chart page →

4,127
browserless-chromesagikazarmarkVerified publisher0.0.51 of 1See more

browserless-chrome sagikazarmark 0.0.5

1 of the 1 container images this version deploys carry CVE-2023-25193.

Container imageDigestPackageFixed in
browserless/chrome:1.48.0-chrome-stablec81ae5585b47
harfbuzz@2.6.4-1ubuntu4
openjdk-lts@11.0.11+9-0ubuntu2~20.04
2.6.4-1ubuntu4.3
11.0.20+8-1ubuntu1~20.04

Open the chart page →

24,488
thingsboard-clusterthingsboard-cluster-bettaVerified publisher0.2.262 of 6See more

thingsboard-cluster thingsboard-cluster-betta 0.2.26

2 of the 6 container images this version deploys carry CVE-2023-25193.

Container imageDigestPackageFixed in
bitnamilegacy/kafka:3.5.0-debian-11-r08657bb93a581
java@17.0.7-7-2
11.0.20
bitnamilegacy/zookeeper:3.9.0-debian-11-r1110ed1ea3c8d1
java@11.0.20-8-3
Java@11.0.20-8
11.0.20
11.0.20

Open the chart page →

14,566
huginnutkuozdemirVerified publisher2.2.11 of 4See more

huginn utkuozdemir 2.2.1

1 of the 4 container images this version deploys carry CVE-2023-25193.

Container imageDigestPackageFixed in
huginn/huginn-single-process:4d17829cf6b15b004ad3f4be196303dca4944810c794eddc7b47
harfbuzz@1.7.2-1ubuntu1
no fix listed

Open the chart page →

18,137
paperless-ngxadnoctemVerified publisher0.4.21 of 5See more

paperless-ngx adnoctem 0.4.2

1 of the 5 container images this version deploys carry CVE-2023-25193.

Container imageDigestPackageFixed in
apache/tika:2.9.0.092d055a84e9e
harfbuzz@2.7.4-1ubuntu3.1
2.7.4-1ubuntu3.2

Open the chart page →

19,691
clearml-servingallegroaiVerified publisher1.6.22 of 9See more

clearml-serving allegroai 1.6.2

2 of the 9 container images this version deploys carry CVE-2023-25193.

Container imageDigestPackageFixed in
bitnamilegacy/kafka:3.4.0-debian-11-r6ac64829e45b3
java@11.0.18-10-2
11.0.20
bitnamilegacy/zookeeper:3.8.1-debian-11-r6dba59d740e13
java@11.0.18-10-1
11.0.20

Open the chart page →

17,877
paperless-ngxcrystalnetVerified publisher0.2.221 of 3See more

paperless-ngx crystalnet 0.2.22

1 of the 3 container images this version deploys carry CVE-2023-25193.

Container imageDigestPackageFixed in
ghcr.io/paperless-ngx/paperless-ngx:2.13.10642357c5dbd
harfbuzz@6.0.0+dfsg-3
no fix listed

Open the chart page →

13,761
dragonfly-stackdragonflyVerified publisher0.1.21 of 7See more

dragonfly-stack dragonfly 0.1.2

1 of the 7 container images this version deploys carry CVE-2023-25193.

Container imageDigestPackageFixed in
dragonflyoss/client:v0.1.82edf3e921f4e0
harfbuzz@6.0.0+dfsg-3
no fix listed

Open the chart page →

18,376
enbuildenbuildVerified publisher0.0.501 of 6See more

enbuild enbuild 0.0.50

1 of the 6 container images this version deploys carry CVE-2023-25193.

Container imageDigestPackageFixed in
registry.gitlab.com/enbuild-staging/vivsoft-platform-ui/enbuild-mq-consumer:1.0.310e3cd8c7776d
harfbuzz@6.0.0+dfsg-3
no fix listed

Open the chart page →

31,510
iobrokereugen0.2.61 of 1See more

iobroker eugen 0.2.6

1 of the 1 container images this version deploys carry CVE-2023-25193.

Container imageDigestPackageFixed in
ghcr.io/buanet/iobroker:v9.1.2ca7dc7362968
harfbuzz@6.0.0+dfsg-3
no fix listed

Open the chart page →

11,458
bazarrgeek-cookbookVerified publisher10.6.21 of 1See more

bazarr geek-cookbook 10.6.2

1 of the 1 container images this version deploys carry CVE-2023-25193.

Container imageDigestPackageFixed in
ghcr.io/k8s-at-home/bazarr:v1.0.3fdb5501cdfb9
harfbuzz@2.6.4-1ubuntu4
2.6.4-1ubuntu4.3

Open the chart page →

17,377
games-on-whalesgeek-cookbookVerified publisher1.8.22 of 7See more

games-on-whales geek-cookbook 1.8.2

2 of the 7 container images this version deploys carry CVE-2023-25193.

Container imageDigestPackageFixed in
ghcr.io/games-on-whales/retroarch:1.0.0103fbcec2314
harfbuzz@2.6.4-1ubuntu4
2.6.4-1ubuntu4.3
ghcr.io/games-on-whales/steam:1.0.09b6105be7ad0
harfbuzz@2.6.4-1ubuntu4
2.6.4-1ubuntu4.3

Open the chart page →

35,305
homebridgegeek-cookbookVerified publisher5.3.21 of 1See more

homebridge geek-cookbook 5.3.2

1 of the 1 container images this version deploys carry CVE-2023-25193.

Container imageDigestPackageFixed in
ghcr.io/oznu/homebridge:2022-07-08ff2af53897e7
harfbuzz@2.6.4-1ubuntu4
2.6.4-1ubuntu4.3

Open the chart page →

15,653
stashgeek-cookbookVerified publisher3.4.21 of 1See more

stash geek-cookbook 3.4.2

1 of the 1 container images this version deploys carry CVE-2023-25193.

Container imageDigestPackageFixed in
stashapp/stash:latest24dbd7607174
harfbuzz@2.6.4-1ubuntu4
2.6.4-1ubuntu4.3

Open the chart page →

15,856
tdarrgeek-cookbookVerified publisher4.6.21 of 2See more

tdarr geek-cookbook 4.6.2

1 of the 2 container images this version deploys carry CVE-2023-25193.

Container imageDigestPackageFixed in
haveagitgat/tdarr:2.00.181256348872ce
harfbuzz@2.6.4-1ubuntu4
2.6.4-1ubuntu4.3

Open the chart page →

31,000
castopodh2mVerified publisher1.12.101 of 3See more

castopod h2m 1.12.10

1 of the 3 container images this version deploys carry CVE-2023-25193.

Container imageDigestPackageFixed in
castopod/castopod:1.12.101fd37280cbb2
harfbuzz@6.0.0+dfsg-3
no fix listed

Open the chart page →

10,072
difykubeblocksVerified publisher0.5.11 of 5See more

dify kubeblocks 0.5.1

1 of the 5 container images this version deploys carry CVE-2023-25193.

Container imageDigestPackageFixed in
langgenius/dify-api:0.6.11fca918260dd6
harfbuzz@6.0.0+dfsg-3
no fix listed

Open the chart page →

20,403
opennebulakvaps2.1.15 of 9See more

opennebula kvaps 2.1.1

5 of the 9 container images this version deploys carry CVE-2023-25193.

Container imageDigestPackageFixed in
ghcr.io/kvaps/opennebula:v5.12.0.4-1e28e0e7de11b
harfbuzz@2.6.4-1ubuntu4
2.6.4-1ubuntu4.3
ghcr.io/kvaps/opennebula-exporter:v5.12.0.401563adc95fd
harfbuzz@2.6.4-1ubuntu4
2.6.4-1ubuntu4.3
ghcr.io/kvaps/opennebula-exporter:v5.12.0.4-12b92df1143b9
harfbuzz@2.6.4-1ubuntu4
2.6.4-1ubuntu4.3
ghcr.io/kvaps/opennebula-flow:v5.12.0.4-1600221f0f43f
harfbuzz@2.6.4-1ubuntu4
2.6.4-1ubuntu4.3
ghcr.io/kvaps/opennebula-gate:v5.12.0.4-1a85e03d8bc1d
harfbuzz@2.6.4-1ubuntu4
2.6.4-1ubuntu4.3

Open the chart page →

113,791
flaresolverrlib42Verified publisher2.0.01 of 1See more

flaresolverr lib42 2.0.0

1 of the 1 container images this version deploys carry CVE-2023-25193.

Container imageDigestPackageFixed in
ghcr.io/flaresolverr/flaresolverr:v3.4.0ab535d1fef5d
harfbuzz@6.0.0+dfsg-3
no fix listed

Open the chart page →

35,050
music-assistant-serverlmatfyVerified publisher0.1.91 of 1See more

music-assistant-server lmatfy 0.1.9

1 of the 1 container images this version deploys carry CVE-2023-25193.

Container imageDigestPackageFixed in
ghcr.io/music-assistant/server:2.7.53522e8a7a8f0
harfbuzz@6.0.0+dfsg-3
no fix listed

Open the chart page →

7,201
flaresolverrm0nsterrr-flaresolverrVerified publisher2.4.11 of 1See more

flaresolverr m0nsterrr-flaresolverr 2.4.1

1 of the 1 container images this version deploys carry CVE-2023-25193.

Container imageDigestPackageFixed in
ghcr.io/flaresolverr/flaresolverr:v3.5.2c80ae007ce2c
harfbuzz@6.0.0+dfsg-3
no fix listed

Open the chart page →

6,136
drillmagasin-drill0.9.01 of 3See more

drill magasin-drill 0.9.0

1 of the 3 container images this version deploys carry CVE-2023-25193.

Container imageDigestPackageFixed in
merlos/zookeeper:3.9.3a38fc7e09ed7
harfbuzz@6.0.0+dfsg-3
no fix listed

Open the chart page →

5,734
mockservermockserverOfficialVerified publisher7.6.01 of 1See more

mockserver mockserver 7.6.0

1 of the 1 container images this version deploys carry CVE-2023-25193.

Container imageDigestPackageFixed in
mockserver/mockserver:mockserver-7.6.080b3b1a26f35
harfbuzz@6.0.0+dfsg-3
no fix listed

Open the chart page →

1,021
food-managermoreillonVerified publisher0.5.01 of 2See more

food-manager moreillon 0.5.0

1 of the 2 container images this version deploys carry CVE-2023-25193.

Container imageDigestPackageFixed in
moreillon/food-manager:lateste8fd856e593d
harfbuzz@6.0.0+dfsg-3
no fix listed

Open the chart page →

13,738
clowder2ncsaVerified publisher1.9.71 of 12See more

clowder2 ncsa 1.9.7

1 of the 12 container images this version deploys carry CVE-2023-25193.

Container imageDigestPackageFixed in
bitnamilegacy/keycloak:20.0.5cb04e49e6eb1
java@17.0.6-10-4
11.0.20

Open the chart page →

37,373

Container images carrying it

252 by charts deploying them

A fixed version is listed for 6 of the 6 affected packages.

Container imageDigestPackageFixed inUsed by
ghcr.io/k8s-at-home/xteve:v2.2.0.200292b3614670f
harfbuzz@2.6.4-1ubuntu4
2.6.4-1ubuntu4.3
1
ghcr.io/karakeep-app/karakeep:0.33.2b069e4307dec
harfbuzz@6.0.0+dfsg-3
no fix listed
1
ghcr.io/kvaps/opennebula:v5.12.0.4-1e28e0e7de11b
harfbuzz@2.6.4-1ubuntu4
2.6.4-1ubuntu4.3
1
ghcr.io/kvaps/opennebula-exporter:v5.12.0.401563adc95fd
harfbuzz@2.6.4-1ubuntu4
2.6.4-1ubuntu4.3
1
ghcr.io/kvaps/opennebula-exporter:v5.12.0.4-12b92df1143b9
harfbuzz@2.6.4-1ubuntu4
2.6.4-1ubuntu4.3
1
ghcr.io/kvaps/opennebula-flow:v5.12.0.4-1600221f0f43f
harfbuzz@2.6.4-1ubuntu4
2.6.4-1ubuntu4.3
1
ghcr.io/kvaps/opennebula-gate:v5.12.0.4-1a85e03d8bc1d
harfbuzz@2.6.4-1ubuntu4
2.6.4-1ubuntu4.3
1
ghcr.io/libreconnect/ferriscompany:0.1.0-rc6ed86db9f0efe
harfbuzz@6.0.0+dfsg-3
no fix listed
1
ghcr.io/linkwarden/linkwarden:v2.16.30664c28a039b
harfbuzz@6.0.0+dfsg-3
no fix listed
1
ghcr.io/linuxserver/booksonic-air:version-v2009.1.0baa4fa9549dc
harfbuzz@1.7.2-1ubuntu1
no fix listed
1
ghcr.io/maybe-finance/maybe:0.5.0c6ab95ca9130
harfbuzz@6.0.0+dfsg-3
no fix listed
1
ghcr.io/music-assistant/server:2.7.53522e8a7a8f0
harfbuzz@6.0.0+dfsg-3
no fix listed
1
ghcr.io/music-assistant/server:2.9.950666a6f8d7f
harfbuzz@6.0.0+dfsg-3
no fix listed
1
ghcr.io/music-assistant/server:2.8.7eef3ee7810d0
harfbuzz@6.0.0+dfsg-3
no fix listed
1
ghcr.io/nefelim4ag/pingdom-operator:0.0.15f8c7afdcf439
harfbuzz@6.0.0+dfsg-3
no fix listed
1
ghcr.io/opencost/opencost-parquet-exporter:v0.2.1ce85ef0ce665
harfbuzz@6.0.0+dfsg-3
no fix listed
1
ghcr.io/open-telemetry/demo:3.0.0-fraud-detection1cdfd1bcf476
harfbuzz@6.0.0+dfsg-3
no fix listed
1
ghcr.io/open-telemetry/demo:1.12.0-loadgenerator85c9935ff31b
harfbuzz@6.0.0+dfsg-3
no fix listed
1
ghcr.io/oznu/homebridge:2022-07-08ff2af53897e7
harfbuzz@2.6.4-1ubuntu4
2.6.4-1ubuntu4.3
1
ghcr.io/paperless-ngx/paperless-ngx:2.13.10642357c5dbd
harfbuzz@6.0.0+dfsg-3
no fix listed
1
ghcr.io/paperless-ngx/paperless-ngx:2.0.1ab255bea133e
harfbuzz@6.0.0+dfsg-3
no fix listed
1
ghcr.io/sdwbgn/unitycatalog-helm/docker/unitycatalog-ui:0.2.1-5d668c1ed07e7ca098d
harfbuzz@6.0.0+dfsg-3
no fix listed
1
ghcr.io/smarter-project/gstreamer:v1.0.25ecb16015aa8
harfbuzz@2.6.4-1ubuntu4.2
2.6.4-1ubuntu4.3
1
ghcr.io/smarter-project/image-detector:v2.5.31dcca70c6446
harfbuzz@2.6.4-1ubuntu4.2
2.6.4-1ubuntu4.3
1
ghcr.io/star-whale/server:0.6.158368359c8dd0
harfbuzz@2.6.4-1ubuntu4.2
openjdk-lts@11.0.16+8-0ubuntu1~20.04
2.6.4-1ubuntu4.3
11.0.20+8-1ubuntu1~20.04
1
ghcr.io/voxpupuli/container-puppetdb:7.18.0-v1.5.0a56dfe91f5b1
harfbuzz@2.7.4-1ubuntu3.1
2.7.4-1ubuntu3.2
1
ghcr.io/voxpupuli/container-puppetserver:7.17.0-v1.5.0916746209ac5
harfbuzz@2.7.4-1ubuntu3.1
2.7.4-1ubuntu3.2
1
ghcr.io/voxpupuli/puppetserver:8.7.0-main63873f3f698e
harfbuzz@2.7.4-1ubuntu3.1
2.7.4-1ubuntu3.2
1
ghcr.io/wgbh-mla/pbcore-util:pr-66e04659a3baa
harfbuzz@6.0.0+dfsg-3
no fix listed
1
ghcr.io/wiremind/grafana-pdf-exporter:v1.7dbaa8527bf4c
harfbuzz@6.0.0+dfsg-3
no fix listed
1
ghcr.io/wizarrrr/wizarr:4.2.0-beta.3d19d886d5090
harfbuzz@6.0.0+dfsg-3
no fix listed
1
ghcr.io/yurymkomarov/docker/kubernetes-kiosk-chromium:0.1.27bff29dcec72
harfbuzz@6.0.0+dfsg-3
no fix listed
1
ghcr.io/zoriya/kyoo_autosync:4.7.1fbba58ddb1a6
harfbuzz@6.0.0+dfsg-3
no fix listed
1
ghcr.io/zoriya/kyoo_scanner:4.7.17dc0ee57b628
harfbuzz@6.0.0+dfsg-3
no fix listed
1
public.ecr.aws/jtekt-corporation/image-storage-service:v1.16.17b1493760c716
harfbuzz@6.0.0+dfsg-3
no fix listed
1
public.ecr.aws/jtekt-corporation/shinsei-manager:v2.8.15cd62142d6ed
harfbuzz@6.0.0+dfsg-3
no fix listed
1
public.ecr.aws/jtekt-corporation/time-series-storage-service:v1.5.1046ef5c9ed50
harfbuzz@6.0.0+dfsg-3
no fix listed
1
public.ecr.aws/truefoundrycloud/async-service-distributor:5d48113bc678d694a0c8f8dabb2207c5aa2cfc53f74851ce31f5
harfbuzz@6.0.0+dfsg-3
no fix listed
1
quay.io/eformat/jenkins-agent-graalvm:latesta3b9a07648b6
harfbuzz@1.7.5-3.el8
0:1.7.5-4.el8
1
quay.io/fiware/apollo:0.0.1055330b1b60c1
harfbuzz@1.7.5-3.el8
0:1.7.5-4.el8
1
quay.io/fiware/canis-major:1.5.15bb40472e4ff5
harfbuzz@1.7.5-3.el8
0:1.7.5-4.el8
1
quay.io/fiware/endpoint-configuration-service:0.4.30dc38a87b844
harfbuzz@1.7.5-3.el8
0:1.7.5-4.el8
1
quay.io/fiware/trusted-issuers-registry:0.11.1a8a9ec461034
harfbuzz@1.7.5-3.el8
0:1.7.5-4.el8
1
quay.io/keycloak/keycloak:14.0.03029dc0f1d38
harfbuzz@1.7.5-3.el8
0:1.7.5-4.el8
1
quay.io/keycloak/keycloak:20.0.18830f76112b6
harfbuzz@1.7.5-3.el8
0:1.7.5-4.el8
1
quay.io/keycloak/keycloak:20.0.3b8f2a453a17a
harfbuzz@1.7.5-3.el8
0:1.7.5-4.el8
1
quay.io/keycloak/keycloak-operator:20.0.2b1710745fa64
harfbuzz@1.7.5-3.el8
0:1.7.5-4.el8
1
quay.io/maximilianopizarro/workshop-pipelines:lateste383ba3e0966
harfbuzz@1.7.5-3.el8
0:1.7.5-4.el8
1
quay.io/openshift/origin-jenkins-agent-base:latestc241c971aef8
harfbuzz@1.7.5-3.el8
0:1.7.5-4.el8
1
quay.io/rht-labs/stack-do500:3.0.86ba82beff18e
harfbuzz@1.7.5-3.el8
0:1.7.5-4.el8
1

syft 1.42.1 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.