StackRadarChart IndexLive demo

CVE-2026-102620

Low

Advisory

Published 29 Sept 2026In the index since 1 Oct 2026

Severity: Low; worst across findings
CVSS: 3.3; base score, highest
EPSS: 0.001; 1st percentile
CISA KEV: Not listed; no confirmed exploitation
Charts affected: 69; of 17,966 indexed, latest versions
Container images: 61; deployed by those charts
Fix available: None; affected package

The matching OSV records carry no description.

Carried by container images the latest versions of 69 of 17,966 indexed charts deploy, on 61 images.

Affected package	Affected versions	Fixed in	Images
popplerdeb	0.86.1-0ubuntu1, 22.02.0-2, 22.02.0-2ubuntu0.1, 22.02.0-2ubuntu0.3+17 more	no fix listed	61

OSV records: DEBIAN-CVE-2026-102620 UBUNTU-CVE-2026-102620

Charts affected

69 by stars

Chart

Latest

Affected images

Radar Score

penpotkubitodev

1 of 5 See more

penpot kubitodev 1.2.1

1 of the 5 container images this version deploys carry CVE-2026-102620.

Container image	Digest	Package	Fixed in
penpotapp/exporter :2.2.1	5c835ffd87ab	poppler@22.02.0-2ubuntu0.5	no fix listed

Open the chart page →

18,524

filestashmt190502

1 of 1 See more

filestash mt190502 4.0.0

1 of the 1 container images this version deploys carry CVE-2026-102620.

Container image	Digest	Package	Fixed in
machines/filestash :latest	2f69ce781400	poppler@25.03.0-5+deb13u4	no fix listed

Open the chart page →

3,468

paperless-ngxmt190502

1 of 4 See more

paperless-ngx mt190502 7.6.14

1 of the 4 container images this version deploys carry CVE-2026-102620.

Container image	Digest	Package	Fixed in
ghcr.io/paperless-ngx/paperless-ngx :2.20.13	4b05bcd28e69	poppler@25.03.0-5+deb13u2	no fix listed

Open the chart page →

12,979

nominatimnominatim-chart

1 of 3 See more

nominatim nominatim-chart 1.3.0

1 of the 3 container images this version deploys carry CVE-2026-102620.

Container image	Digest	Package	Fixed in
mediagis/nominatim :3.7	c15e941485ef	poppler@0.86.1-0ubuntu1	no fix listed

Open the chart page →

23,411

paperless-ngxoli-the-dev

1 of 1 See more

paperless-ngx oli-the-dev 1.1.1

1 of the 1 container images this version deploys carry CVE-2026-102620.

Container image	Digest	Package	Fixed in
ghcr.io/paperless-ngx/paperless-ngx :3.1.3	aa810a36942c	poppler@25.03.0-5+deb13u4	no fix listed

Open the chart page →

5,464

cupsr2dlan-helm-charts

1 of 1 See more

cups r2dlan-helm-charts 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-102620.

Container image	Digest	Package	Fixed in
anujdatar/cups :25.07.01	685df04a643b	poppler@22.12.0-2+deb12u1	no fix listed

Open the chart page →

8,512

checkmkrtomik-helm-charts

1 of 1 See more

checkmk rtomik-helm-charts 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-102620.

Container image	Digest	Package	Fixed in
checkmk/check-mk-community :2.5.0p6	c11b422210c4	poppler@22.02.0-2ubuntu0.13	no fix listed

Open the chart page →

8,658

paperless-ngxrtomik-helm-charts

1 of 1 See more

paperless-ngx rtomik-helm-charts 0.0.5

1 of the 1 container images this version deploys carry CVE-2026-102620.

Container image	Digest	Package	Fixed in
ghcr.io/paperless-ngx/paperless-ngx :2.20.3	57ad9565bff3	poppler@25.03.0-5+deb13u2	no fix listed

Open the chart page →

11,750

stirling-pdfrubxkube

1 of 1 See more

stirling-pdf rubxkube 0.1.2

1 of the 1 container images this version deploys carry CVE-2026-102620.

Container image	Digest	Package	Fixed in
ghcr.io/stirling-tools/stirling-pdf :2.14.3	3b3670fce70b	poppler@24.02.0-1ubuntu9.8	no fix listed

Open the chart page →

7,102

seafileschmitzis

1 of 4 See more

seafile schmitzis 13.0.13

1 of the 4 container images this version deploys carry CVE-2026-102620.

Container image	Digest	Package	Fixed in
schmitzis/monorepo :seafile-13.0-latest	f7e51ba2fb07	poppler@24.02.0-1ubuntu9.9	no fix listed

Open the chart page →

43,152

photoprismschoolguys-helmcharts

1 of 1 See more

photoprism schoolguys-helmcharts 0.3.8

1 of the 1 container images this version deploys carry CVE-2026-102620.

Container image	Digest	Package	Fixed in
photoprism/photoprism :260601	650c6ad5a651	poppler@26.01.0-2build2	no fix listed

Open the chart page →

59,921

backendsignalen

1 of 4 See more

backend signalen 4.25.0

1 of the 4 container images this version deploys carry CVE-2026-102620.

Container image	Digest	Package	Fixed in
signalen/backend :2.50.18	26bb090bc4e4	poppler@22.12.0-2+deb12u3	no fix listed

Open the chart page →

11,735

kurento_webrtc_demostunner

1 of 2 See more

kurento_webrtc_demo stunner 0.1.0

1 of the 2 container images this version deploys carry CVE-2026-102620.

Container image	Digest	Package	Fixed in
kurento/kurento-media-server :latest	03c0d34d0828	poppler@24.02.0-1ubuntu9.8	no fix listed

Open the chart page →

13,665

stunner-kurento-one2one-callstunner

1 of 2 See more

stunner-kurento-one2one-call stunner 0.1.0

1 of the 2 container images this version deploys carry CVE-2026-102620.

Container image	Digest	Package	Fixed in
kurento/kurento-media-server :latest	03c0d34d0828	poppler@24.02.0-1ubuntu9.8	no fix listed

Open the chart page →

13,665

stash-boxswuuper-github

1 of 2 See more

stash-box swuuper-github 0.1.1

1 of the 2 container images this version deploys carry CVE-2026-102620.

Container image	Digest	Package	Fixed in
stashapp/stash-box :latest	a534c8afdf39	poppler@24.02.0-1ubuntu9.4	no fix listed

Open the chart page →

8,883

opencloudunxwares

1 of 13 See more

opencloud unxwares 0.2.3

1 of the 13 container images this version deploys carry CVE-2026-102620.

Container image	Digest	Package	Fixed in
apache/tika :2.9.2.1-full	ae0b86d3c4d0	poppler@24.02.0-1ubuntu9	no fix listed

Open the chart page →

47,132

maybe-financevicsufer

1 of 3 See more

maybe-finance vicsufer 0.2.7

1 of the 3 container images this version deploys carry CVE-2026-102620.

Container image	Digest	Package	Fixed in
ghcr.io/maybe-finance/maybe :0.5.0	c6ab95ca9130	poppler@22.12.0-2+b1	no fix listed

Open the chart page →

11,528

changedetection-iozekker6

1 of 1 See more

changedetection-io zekker6 1.103.0

1 of the 1 container images this version deploys carry CVE-2026-102620.

Container image	Digest	Package	Fixed in
ghcr.io/dgtlmoon/changedetection.io :0.60.8	34df3680db1c	poppler@22.12.0-2+deb12u3	no fix listed

Open the chart page →

2,896

zoo-project-druzoo-project

1 of 6 See more

zoo-project-dru zoo-project 0.10.4

1 of the 6 container images this version deploys carry CVE-2026-102620.

Container image	Digest	Package	Fixed in
zooproject/zoo-project :dru-19f3c4eed7c9ec9d1f0375bbe59f9d204a42bd3a	9a507cb7e2dd	poppler@22.02.0-2ubuntu0.13	no fix listed

Open the chart page →

8,734

Container images carrying it

61 by charts deploying them

A fixed version is listed for 0 of the 1 affected package.

Container image	Digest	Package	Fixed in	Used by
ghcr.io/linuxserver/papermerge :version-v2.0.1	98ba2dd3f0bd	poppler@0.86.1-0ubuntu1	no fix listed	1
ghcr.io/maybe-finance/maybe :0.5.0	c6ab95ca9130	poppler@22.12.0-2+b1	no fix listed	1
ghcr.io/paperless-ngx/paperless-ngx :2.13.1	0642357c5dbd	poppler@22.12.0-2+b1	no fix listed	1
ghcr.io/paperless-ngx/paperless-ngx :2.20.13	4b05bcd28e69	poppler@25.03.0-5+deb13u2	no fix listed	1
ghcr.io/paperless-ngx/paperless-ngx :2.20.3	57ad9565bff3	poppler@25.03.0-5+deb13u2	no fix listed	1
ghcr.io/paperless-ngx/paperless-ngx :2.20.5	665f2f5cc548	poppler@25.03.0-5+deb13u2	no fix listed	1
ghcr.io/paperless-ngx/paperless-ngx :2.10.1	a132c2ac7c57	poppler@22.12.0-2+b1	no fix listed	1
ghcr.io/paperless-ngx/paperless-ngx :2.0.1	ab255bea133e	poppler@22.12.0-2+b1	no fix listed	1
ghcr.io/paperless-ngx/paperless-ngx :2.20.14	b89f83345532	poppler@25.03.0-5+deb13u2	no fix listed	1
ghcr.io/seanmorley15/adventurelog-backend :v0.13.0	0250d9cb0d74	poppler@25.03.0-5+deb13u4	no fix listed	1
ghcr.io/stirling-tools/stirling-pdf :2.14.3	3b3670fce70b	poppler@24.02.0-1ubuntu9.8	no fix listed	1