StackRadar

CVE-2026-102620

Low

Advisory

Published 29 Sept 2026In the index since 1 Oct 2026
Severity
Low
worst across findings
CVSS
3.3
base score, highest
EPSS
0.001
1st percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
69
of 17,966 indexed, latest versions
Container images
61
deployed by those charts
Fix available
None
affected package

The matching OSV records carry no description.

Carried by container images the latest versions of 69 of 17,966 indexed charts deploy, on 61 images.

Affected packageAffected versionsFixed inImages
popplerdeb0.86.1-0ubuntu1, 22.02.0-2, 22.02.0-2ubuntu0.1, 22.02.0-2ubuntu0.3+17 moreno fix listed61
OSV records
DEBIAN-CVE-2026-102620UBUNTU-CVE-2026-102620

Charts affected

69 by stars
ChartLatestAffected imagesRadar Score
penpotpenpotOfficialVerified publisher1.10.01 of 5See more

penpot penpot 1.10.0

1 of the 5 container images this version deploys carry CVE-2026-102620.

Container imageDigestPackageFixed in
penpotapp/exporter:2.18.0beb2c2bd9660
poppler@25.03.0-5+deb13u4
no fix listed

Open the chart page →

5,947
openprojectopenproject-helm-chartsOfficialVerified publisher13.13.01 of 5See more

openproject openproject-helm-charts 13.13.0

1 of the 5 container images this version deploys carry CVE-2026-102620.

Container imageDigestPackageFixed in
openproject/openproject:17.9.0-slima264df2ddcf7
poppler@25.03.0-5+deb13u4
no fix listed

Open the chart page →

20,439
gotenbergmaikumoriVerified publisher1.25.01 of 1See more

gotenberg maikumori 1.25.0

1 of the 1 container images this version deploys carry CVE-2026-102620.

Container imageDigestPackageFixed in
gotenberg/gotenberg:8.36.087c16b9f3642
poppler@25.03.0-5+deb13u4
no fix listed

Open the chart page →

12,376
paperless-ngxfmjstudios0.2.82 of 5See more

paperless-ngx fmjstudios 0.2.8

2 of the 5 container images this version deploys carry CVE-2026-102620.

Container imageDigestPackageFixed in
gotenberg/gotenberg:8.0.1cf0b9a7ca3cf
poppler@22.12.0-2+b1
no fix listed
ghcr.io/paperless-ngx/paperless-ngx:2.10.1a132c2ac7c57
poppler@22.12.0-2+b1
no fix listed

Open the chart page →

32,948
penpotcodechemVerified publisher1.0.101 of 3See more

penpot codechem 1.0.10

1 of the 3 container images this version deploys carry CVE-2026-102620.

Container imageDigestPackageFixed in
penpotapp/exporter:1.16.0-betafa7086ad92b1
poppler@22.02.0-2ubuntu0.1
no fix listed

Open the chart page →

29,777
paperless-ngxpaperless-ngxVerified publisher0.3.231 of 3See more

paperless-ngx paperless-ngx 0.3.23

1 of the 3 container images this version deploys carry CVE-2026-102620.

Container imageDigestPackageFixed in
ghcr.io/paperless-ngx/paperless-ngx:3.2.15fa76604a81d
poppler@25.03.0-5+deb13u4
no fix listed

Open the chart page →

8,612
photoprismandrenarchyVerified publisher8.15.01 of 1See more

photoprism andrenarchy 8.15.0

1 of the 1 container images this version deploys carry CVE-2026-102620.

Container imageDigestPackageFixed in
photoprism/photoprism:260728958642220223
poppler@26.01.0-2ubuntu0.1
no fix listed

Open the chart page →

48,496
seafiledatamateVerified publisher0.6.01 of 6See more

seafile datamate 0.6.0

1 of the 6 container images this version deploys carry CVE-2026-102620.

Container imageDigestPackageFixed in
datamate/seafile-professional:11.0.202dd66b722464
poppler@22.02.0-2ubuntu0.10
no fix listed

Open the chart page →

82,487
mattermostphntom3.24.01 of 2See more

mattermost phntom 3.24.0

1 of the 2 container images this version deploys carry CVE-2026-102620.

Container imageDigestPackageFixed in
phntom/mattermost-team-edition:9.3.051cf9da4aa2e
poppler@22.02.0-2ubuntu0.3
no fix listed

Open the chart page →

9,164
changedetectionalekcVerified publisher0.14.61 of 1See more

changedetection alekc 0.14.6

1 of the 1 container images this version deploys carry CVE-2026-102620.

Container imageDigestPackageFixed in
ghcr.io/dgtlmoon/changedetection.io:0.60.834df3680db1c
poppler@22.12.0-2+deb12u3
no fix listed

Open the chart page →

2,896
nominatimrobjuz6.4.21 of 4See more

nominatim robjuz 6.4.2

1 of the 4 container images this version deploys carry CVE-2026-102620.

Container imageDigestPackageFixed in
mediagis/nominatim:5.3.27923a8e67197
poppler@24.02.0-1ubuntu9.9
no fix listed

Open the chart page →

56,472
paperlesszekker6Verified publisher11.10.01 of 1See more

paperless zekker6 11.10.0

1 of the 1 container images this version deploys carry CVE-2026-102620.

Container imageDigestPackageFixed in
ghcr.io/paperless-ngx/paperless-ngx:3.2.15fa76604a81d
poppler@25.03.0-5+deb13u4
no fix listed

Open the chart page →

4,533
paperless-ngxadnoctemVerified publisher0.4.22 of 5See more

paperless-ngx adnoctem 0.4.2

2 of the 5 container images this version deploys carry CVE-2026-102620.

Container imageDigestPackageFixed in
gotenberg/gotenberg:8.36.087c16b9f3642
poppler@25.03.0-5+deb13u4
no fix listed
ghcr.io/paperless-ngx/paperless-ngx:3.1.3aa810a36942c
poppler@25.03.0-5+deb13u4
no fix listed

Open the chart page →

23,678
paperless-ngxalexmorbo-paperless-ngxVerified publisher0.2.01 of 2See more

paperless-ngx alexmorbo-paperless-ngx 0.2.0

1 of the 2 container images this version deploys carry CVE-2026-102620.

Container imageDigestPackageFixed in
ghcr.io/paperless-ngx/paperless-ngx:2.20.5665f2f5cc548
poppler@25.03.0-5+deb13u2
no fix listed

Open the chart page →

13,459
paperless-ngxcrystalnetVerified publisher0.2.221 of 3See more

paperless-ngx crystalnet 0.2.22

1 of the 3 container images this version deploys carry CVE-2026-102620.

Container imageDigestPackageFixed in
ghcr.io/paperless-ngx/paperless-ngx:2.13.10642357c5dbd
poppler@22.12.0-2+b1
no fix listed

Open the chart page →

14,832
games-on-whalesgeek-cookbookVerified publisher1.8.21 of 7See more

games-on-whales geek-cookbook 1.8.2

1 of the 7 container images this version deploys carry CVE-2026-102620.

Container imageDigestPackageFixed in
ghcr.io/games-on-whales/retroarch:1.0.0103fbcec2314
poppler@0.86.1-0ubuntu1
no fix listed

Open the chart page →

114,209
papermergenicholaswildeVerified publisher1.0.21 of 1See more

papermerge nicholaswilde 1.0.2

1 of the 1 container images this version deploys carry CVE-2026-102620.

Container imageDigestPackageFixed in
ghcr.io/linuxserver/papermerge:version-v2.0.198ba2dd3f0bd
poppler@0.86.1-0ubuntu1
no fix listed

Open the chart page →

20,968
paperless-ngxpaperlessVerified publisher0.4.01 of 3See more

paperless-ngx paperless 0.4.0

1 of the 3 container images this version deploys carry CVE-2026-102620.

Container imageDigestPackageFixed in
ghcr.io/paperless-ngx/paperless-ngxdigest-pinnedaa810a36942c
poppler@25.03.0-5+deb13u4
no fix listed

Open the chart page →

9,844
routehub-client-hubroutehub-helm1.0.01 of 3See more

routehub-client-hub routehub-helm 1.0.0

1 of the 3 container images this version deploys carry CVE-2026-102620.

Container imageDigestPackageFixed in
timescale/timescaledb-ha:pg164f288c0a5213
poppler@22.02.0-2ubuntu0.13
no fix listed

Open the chart page →

13,747
gotenbergadnoctemVerified publisher0.5.01 of 1See more

gotenberg adnoctem 0.5.0

1 of the 1 container images this version deploys carry CVE-2026-102620.

Container imageDigestPackageFixed in
gotenberg/gotenberg:8.37.0f29984bd1e22
poppler@25.03.0-5+deb13u4
no fix listed

Open the chart page →

8,154
games-on-whalesangelnu2.0.01 of 7See more

games-on-whales angelnu 2.0.0

1 of the 7 container images this version deploys carry CVE-2026-102620.

Container imageDigestPackageFixed in
ghcr.io/games-on-whales/retroarch:1.0.0103fbcec2314
poppler@0.86.1-0ubuntu1
no fix listed

Open the chart page →

121,705
platform-apiappscodeVerified publisher2026.9.111 of 3See more

platform-api appscode 2026.9.11

1 of the 3 container images this version deploys carry CVE-2026-102620.

Container imageDigestPackageFixed in
ghcr.io/appscode/gotenberg:8.25f9104080d9a7
poppler@25.03.0-5+deb13u2
no fix listed

Open the chart page →

40,511
astrotrekastria0.0.21 of 4See more

astrotrek astria 0.0.2

1 of the 4 container images this version deploys carry CVE-2026-102620.

Container imageDigestPackageFixed in
timescale/timescaledb-ha:pg15-latesta8e3322e1cf9
poppler@22.02.0-2ubuntu0.1
no fix listed

Open the chart page →

34,304
postgresqlbuall-charts0.1.21 of 1See more

postgresql buall-charts 0.1.2

1 of the 1 container images this version deploys carry CVE-2026-102620.

Container imageDigestPackageFixed in
buall/postgres-stack:18.6881a785642cb
poppler@25.03.0-5+deb13u4
no fix listed

Open the chart page →

4,230
caninecanine0.1.101 of 7See more

canine canine 0.1.10

1 of the 7 container images this version deploys carry CVE-2026-102620.

Container imageDigestPackageFixed in
ghcr.io/caninehq/canine:latest68b19aee1c64
poppler@22.12.0-2+deb12u2
no fix listed

Open the chart page →

14,926
paperless-ngxcharts-derwitt-devVerified publisher2.1.51 of 1See more

paperless-ngx charts-derwitt-dev 2.1.5

1 of the 1 container images this version deploys carry CVE-2026-102620.

Container imageDigestPackageFixed in
ghcr.io/paperless-ngx/paperless-ngx:3.2.15fa76604a81d
poppler@25.03.0-5+deb13u4
no fix listed

Open the chart page →

4,533
kube-acp-stackcloudentity2.29.01 of 7See more

kube-acp-stack cloudentity 2.29.0

1 of the 7 container images this version deploys carry CVE-2026-102620.

Container imageDigestPackageFixed in
timescale/timescaledb-ha:pg17.2-ts2.18.2e8d0a9cc3db5
poppler@22.02.0-2ubuntu0.6
no fix listed

Open the chart page →

22,097
opencloudcommunity-opencloud3.1.01 of 13See more

opencloud community-opencloud 3.1.0

1 of the 13 container images this version deploys carry CVE-2026-102620.

Container imageDigestPackageFixed in
apache/tika:latest-full80072bb73dd3
poppler@26.01.0-2ubuntu0.1
no fix listed

Open the chart page →

10,335
damap-chartdamapVerified publisher0.3.11 of 5See more

damap-chart damap 0.3.1

1 of the 5 container images this version deploys carry CVE-2026-102620.

Container imageDigestPackageFixed in
gotenberg/gotenberg:8f29984bd1e22
poppler@25.03.0-5+deb13u4
no fix listed

Open the chart page →

15,751
adventurelogdjjudas21Verified publisher0.1.11 of 3See more

adventurelog djjudas21 0.1.1

1 of the 3 container images this version deploys carry CVE-2026-102620.

Container imageDigestPackageFixed in
ghcr.io/seanmorley15/adventurelog-backend:v0.13.00250d9cb0d74
poppler@25.03.0-5+deb13u4
no fix listed

Open the chart page →

8,224
photoprismdjjudas21Verified publisher99.99.991 of 1See more

photoprism djjudas21 99.99.99

1 of the 1 container images this version deploys carry CVE-2026-102620.

Container imageDigestPackageFixed in
photoprism/photoprism:240711-cefc6fd632ca74
poppler@24.02.0-1ubuntu9
no fix listed

Open the chart page →

98,578
codecovdoubanVerified publisher0.2.41 of 8See more

codecov douban 0.2.4

1 of the 8 container images this version deploys carry CVE-2026-102620.

Container imageDigestPackageFixed in
timescale/timescaledb-ha:pg14.6-ts2.9.1-p1cdb9ae118899
poppler@22.02.0-2ubuntu0.1
no fix listed

Open the chart page →

26,156
drogue-cloud-examplesdrogue-iotVerified publisher0.7.111 of 6See more

drogue-cloud-examples drogue-iot 0.7.11

1 of the 6 container images this version deploys carry CVE-2026-102620.

Container imageDigestPackageFixed in
timescale/timescaledb-ha:pg14-ts2.6-latested719c0cd19d
poppler@22.02.0-2
no fix listed

Open the chart page →

31,755
fluxer-helmfluxer-helm0.3.02 of 18See more

fluxer-helm fluxer-helm 0.3.0

2 of the 18 container images this version deploys carry CVE-2026-102620.

Container imageDigestPackageFixed in
ghcr.io/fluxerapp/fluxer-api:2026.820.164808f683541d5374
poppler@22.12.0-2+deb12u3
no fix listed
ghcr.io/fluxerapp/fluxer-media-proxy:2026.820.164955ced7544e6b3f
poppler@25.03.0-5+deb13u4
no fix listed

Open the chart page →

30,173
gotenbergfmjstudios0.2.21 of 1See more

gotenberg fmjstudios 0.2.2

1 of the 1 container images this version deploys carry CVE-2026-102620.

Container imageDigestPackageFixed in
gotenberg/gotenberg:8.7.0437b9cd3c351
poppler@22.12.0-2+b1
no fix listed

Open the chart page →

10,171
changedetection-iogabe565Verified publisher0.12.01 of 2See more

changedetection-io gabe565 0.12.0

1 of the 2 container images this version deploys carry CVE-2026-102620.

Container imageDigestPackageFixed in
ghcr.io/dgtlmoon/changedetection.io:latest096dae27b5d6
poppler@22.12.0-2+deb12u3
no fix listed

Open the chart page →

2,967
scanservjsgabe565Verified publisher0.9.21 of 1See more

scanservjs gabe565 0.9.2

1 of the 1 container images this version deploys carry CVE-2026-102620.

Container imageDigestPackageFixed in
sbs20/scanservjs:release-v3.0.3dad1fd6e9a98
poppler@22.12.0-2+b1
no fix listed

Open the chart page →

14,037
openkmgeek-cookbookVerified publisher4.2.01 of 1See more

openkm geek-cookbook 4.2.0

1 of the 1 container images this version deploys carry CVE-2026-102620.

Container imageDigestPackageFixed in
openkm/openkm-ce:6.3.113bc465a7461b
poppler@0.86.1-0ubuntu1
no fix listed

Open the chart page →

29,045
archiveboxhelmforgeVerified publisher1.1.131 of 1See more

archivebox helmforge 1.1.13

1 of the 1 container images this version deploys carry CVE-2026-102620.

Container imageDigestPackageFixed in
archivebox/archivebox:0.9.708c21bb233130
poppler@25.03.0-5+deb13u4
no fix listed

Open the chart page →

5,645
changedetectionhelmforgeVerified publisher1.1.181 of 1See more

changedetection helmforge 1.1.18

1 of the 1 container images this version deploys carry CVE-2026-102620.

Container imageDigestPackageFixed in
ghcr.io/dgtlmoon/changedetection.io:0.60.834df3680db1c
poppler@22.12.0-2+deb12u3
no fix listed

Open the chart page →

2,896
dawarichhelmforgeVerified publisher1.0.21 of 4See more

dawarich helmforge 1.0.2

1 of the 4 container images this version deploys carry CVE-2026-102620.

Container imageDigestPackageFixed in
postgis/postgis:18-3.67e00e8c3539f
poppler@25.03.0-5+deb13u4
no fix listed

Open the chart page →

11,418
medikeephelmforgeVerified publisher2.0.21 of 3See more

medikeep helmforge 2.0.2

1 of the 3 container images this version deploys carry CVE-2026-102620.

Container imageDigestPackageFixed in
ghcr.io/afairgiant/medikeep:v0.71.0086579173033
poppler@22.12.0-2+deb12u3
no fix listed

Open the chart page →

5,511
nominatimheywood8-helm-chartsVerified publisher3.10.81 of 3See more

nominatim heywood8-helm-charts 3.10.8

1 of the 3 container images this version deploys carry CVE-2026-102620.

Container imageDigestPackageFixed in
mediagis/nominatim:4.2d0eae7b51374
poppler@22.02.0-2ubuntu0.3
no fix listed

Open the chart page →

15,149
paperlesshomelabcihelmchartstestVerified publisher9.1.91 of 1See more

paperless homelabcihelmchartstest 9.1.9

1 of the 1 container images this version deploys carry CVE-2026-102620.

Container imageDigestPackageFixed in
ghcr.io/paperless-ngx/paperless-ngx:2.0.1ab255bea133e
poppler@22.12.0-2+b1
no fix listed

Open the chart page →

17,357
paperlesshpVerified publisher0.1.22 of 5See more

paperless hp 0.1.2

2 of the 5 container images this version deploys carry CVE-2026-102620.

Container imageDigestPackageFixed in
gotenberg/gotenberg:8.3467097317623a
poppler@25.03.0-5+deb13u3
no fix listed
ghcr.io/paperless-ngx/paperless-ngx:3.1.3aa810a36942c
poppler@25.03.0-5+deb13u4
no fix listed

Open the chart page →

30,498
inventreeinventreeOfficialVerified publisher0.4.301 of 2See more

inventree inventree 0.4.30

1 of the 2 container images this version deploys carry CVE-2026-102620.

Container imageDigestPackageFixed in
inventree/inventree:1.5.6b61e6a7534bf
poppler@25.03.0-5+deb13u4
no fix listed

Open the chart page →

5,820
opencloudjacobcolvinVerified publisher0.2.31 of 13See more

opencloud jacobcolvin 0.2.3

1 of the 13 container images this version deploys carry CVE-2026-102620.

Container imageDigestPackageFixed in
apache/tika:2.9.2.1-fullae0b86d3c4d0
poppler@24.02.0-1ubuntu9
no fix listed

Open the chart page →

47,132
deltabadgerk8s-chartsVerified publisher2.0.01 of 1See more

deltabadger k8s-charts 2.0.0

1 of the 1 container images this version deploys carry CVE-2026-102620.

Container imageDigestPackageFixed in
ghcr.io/deltabadger/deltabadger:2.23.3bffe3c22fabc
poppler@25.03.0-5+deb13u4
no fix listed

Open the chart page →

6,313
paperlessk8s-home-lab-repo11.0.11 of 1See more

paperless k8s-home-lab-repo 11.0.1

1 of the 1 container images this version deploys carry CVE-2026-102620.

Container imageDigestPackageFixed in
ghcr.io/paperless-ngx/paperless-ngx:2.20.14b89f83345532
poppler@25.03.0-5+deb13u2
no fix listed

Open the chart page →

10,177
kbot-self-hostedkbot-self-hostedVerified publisher0.1.81 of 7See more

kbot-self-hosted kbot-self-hosted 0.1.8

1 of the 7 container images this version deploys carry CVE-2026-102620.

Container imageDigestPackageFixed in
gotenberg/gotenberg:8.30206a6c708fc6
poppler@25.03.0-5+deb13u2
no fix listed

Open the chart page →

35,703

Container images carrying it

61 by charts deploying them

A fixed version is listed for 0 of the 1 affected package.

Container imageDigestPackageFixed inUsed by
ghcr.io/linuxserver/papermerge:version-v2.0.198ba2dd3f0bd
poppler@0.86.1-0ubuntu1
no fix listed
1
ghcr.io/maybe-finance/maybe:0.5.0c6ab95ca9130
poppler@22.12.0-2+b1
no fix listed
1
ghcr.io/paperless-ngx/paperless-ngx:2.13.10642357c5dbd
poppler@22.12.0-2+b1
no fix listed
1
ghcr.io/paperless-ngx/paperless-ngx:2.20.134b05bcd28e69
poppler@25.03.0-5+deb13u2
no fix listed
1
ghcr.io/paperless-ngx/paperless-ngx:2.20.357ad9565bff3
poppler@25.03.0-5+deb13u2
no fix listed
1
ghcr.io/paperless-ngx/paperless-ngx:2.20.5665f2f5cc548
poppler@25.03.0-5+deb13u2
no fix listed
1
ghcr.io/paperless-ngx/paperless-ngx:2.10.1a132c2ac7c57
poppler@22.12.0-2+b1
no fix listed
1
ghcr.io/paperless-ngx/paperless-ngx:2.0.1ab255bea133e
poppler@22.12.0-2+b1
no fix listed
1
ghcr.io/paperless-ngx/paperless-ngx:2.20.14b89f83345532
poppler@25.03.0-5+deb13u2
no fix listed
1
ghcr.io/seanmorley15/adventurelog-backend:v0.13.00250d9cb0d74
poppler@25.03.0-5+deb13u4
no fix listed
1
ghcr.io/stirling-tools/stirling-pdf:2.14.33b3670fce70b
poppler@24.02.0-1ubuntu9.8
no fix listed
1

syft 1.42.1 · advisories as of 1 Oct 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.