StackRadar

CVE-2026-106114

Medium

Advisory

Published 7 Oct 2026In the index since 8 Oct 2026
Severity
Medium
worst across findings
CVSS
5.3
base score, highest
EPSS
0.004
29th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
39
of 18,117 indexed, latest versions
Container images
36
deployed by those charts
Fix available
1 of 1
affected package

ImageSharp: ICC CLUT parsing allocates from unvalidated channel and grid dimensions

Carried by container images the latest versions of 39 of 18,117 indexed charts deploy, on 36 images.

Affected packageAffected versionsFixed inImages
SixLabors.ImageSharpnuget1.0.0-beta0004, 1.0.0-beta0007, 1.0.0.0, 1.0.1+9 more4.1.236
OSV records
GHSA-gwg2-r3hj-4w44

Charts affected

39 by stars
ChartLatestAffected imagesRadar Score
radarrpree-helm-chartsVerified publisher1.34.01 of 1See more

radarr pree-helm-charts 1.34.0

1 of the 1 container images this version deploys carry CVE-2026-106114.

Container imageDigestPackageFixed in
ghcr.io/home-operations/radarr:6.4.4.10685be53998a2d39
SixLabors.ImageSharp@3.1.12
4.1.2

Open the chart page →

319
sonarrpree-helm-chartsVerified publisher1.25.01 of 1See more

sonarr pree-helm-charts 1.25.0

1 of the 1 container images this version deploys carry CVE-2026-106114.

Container imageDigestPackageFixed in
ghcr.io/home-operations/sonarr:5.0.0.2569b699df6b4b10
SixLabors.ImageSharp@3.1.12
4.1.2

Open the chart page →

63
sonarralekcVerified publisher1.9.11 of 1See more

sonarr alekc 1.9.1

1 of the 1 container images this version deploys carry CVE-2026-106114.

Container imageDigestPackageFixed in
ghcr.io/hotio/sonarr:release-4.0.20.301452f8f8a16c7b
SixLabors.ImageSharp@3.1.12
4.1.2

Open the chart page →

225
servarrservarr1.0.22 of 10See more

servarr servarr 1.0.2

2 of the 10 container images this version deploys carry CVE-2026-106114.

Container imageDigestPackageFixed in
ghcr.io/onedr0p/radarr:5.3.6.86128d299e59fce7
SixLabors.ImageSharp@3.0.2
4.1.2
ghcr.io/onedr0p/sonarr:4.0.2.118327ffdcc8a937
SixLabors.ImageSharp@3.0.1
4.1.2

Open the chart page →

15,091
radarrloeken-at-homeVerified publisher5.27.0-nightly1 of 1See more

radarr loeken-at-home 5.27.0-nightly

1 of the 1 container images this version deploys carry CVE-2026-106114.

Container imageDigestPackageFixed in
loeken/radarr:5.27.0-nightlya24409d3846d
SixLabors.ImageSharp@3.1.9
4.1.2

Open the chart page →

872
sonarrm0nsterrr-sonarrVerified publisher2.2.31 of 1See more

sonarr m0nsterrr-sonarr 2.2.3

1 of the 1 container images this version deploys carry CVE-2026-106114.

Container imageDigestPackageFixed in
ghcr.io/home-operations/sonarr:4.0.201f19eb5e0f42
SixLabors.ImageSharp@3.1.12
4.1.2

Open the chart page →

308
radarralekcVerified publisher2.5.01 of 1See more

radarr alekc 2.5.0

1 of the 1 container images this version deploys carry CVE-2026-106114.

Container imageDigestPackageFixed in
ghcr.io/hotio/radarr:release-6.4.4.10685c6f864f14406
SixLabors.ImageSharp@3.1.12
4.1.2

Open the chart page →

153
sonarrgeek-cookbookVerified publisher16.3.21 of 1See more

sonarr geek-cookbook 16.3.2

1 of the 1 container images this version deploys carry CVE-2026-106114.

Container imageDigestPackageFixed in
ghcr.io/k8s-at-home/sonarr:v3.0.8.15070eb230e2381a
SixLabors.ImageSharp@1.0.0.0
4.1.2

Open the chart page →

14,501
radarrk8s-home-lab-repo17.6.11 of 1See more

radarr k8s-home-lab-repo 17.6.1

1 of the 1 container images this version deploys carry CVE-2026-106114.

Container imageDigestPackageFixed in
ghcr.io/home-operations/radarr:6.2.1a566e7d364b9
SixLabors.ImageSharp@3.1.12
4.1.2

Open the chart page →

839
sonarrk8s-home-lab-repo17.3.11 of 1See more

sonarr k8s-home-lab-repo 17.3.1

1 of the 1 container images this version deploys carry CVE-2026-106114.

Container imageDigestPackageFixed in
ghcr.io/home-operations/sonarr:4.0.171989718e9fce
SixLabors.ImageSharp@3.1.12
4.1.2

Open the chart page →

854
radarrm0nsterrr-radarrVerified publisher3.6.41 of 1See more

radarr m0nsterrr-radarr 3.6.4

1 of the 1 container images this version deploys carry CVE-2026-106114.

Container imageDigestPackageFixed in
ghcr.io/home-operations/radarr:6.4.4be53998a2d39
SixLabors.ImageSharp@3.1.12
4.1.2

Open the chart page →

319
radarrpanzer1119Verified publisher0.2.21 of 1See more

radarr panzer1119 0.2.2

1 of the 1 container images this version deploys carry CVE-2026-106114.

Container imageDigestPackageFixed in
ghcr.io/linuxserver/radarr:6.0.4.10291-ls2896c0948b42c14
SixLabors.ImageSharp@3.1.11
4.1.2

Open the chart page →

1,053
sonarrpanzer1119Verified publisher0.2.21 of 1See more

sonarr panzer1119 0.2.2

1 of the 1 container images this version deploys carry CVE-2026-106114.

Container imageDigestPackageFixed in
ghcr.io/linuxserver/sonarr:4.0.16.2944-ls3008b9f2138ec50
SixLabors.ImageSharp@3.1.7
4.1.2

Open the chart page →

1,051
readarrpree-helm-chartsVerified publisher1.17.11 of 1See more

readarr pree-helm-charts 1.17.1

1 of the 1 container images this version deploys carry CVE-2026-106114.

Container imageDigestPackageFixed in
ghcr.io/home-operations/readarr:0.4.18.28058f7551205fbd
SixLabors.ImageSharp@3.1.7
4.1.2

Open the chart page →

1,199
preparrpreparr0.19.102 of 6See more

preparr preparr 0.19.10

2 of the 6 container images this version deploys carry CVE-2026-106114.

Container imageDigestPackageFixed in
linuxserver/radarr:latestcfbc4fa09dc9
SixLabors.ImageSharp@3.1.12
4.1.2
linuxserver/sonarr:latestdffc730adcb8
SixLabors.ImageSharp@3.1.12
4.1.2

Open the chart page →

1,019
testhubteshubVerified publisher0.1.41 of 3See more

testhub teshub 0.1.4

1 of the 3 container images this version deploys carry CVE-2026-106114.

Container imageDigestPackageFixed in
testhubio/testhub-api:on-prem56badee134b9
SixLabors.ImageSharp@1.0.0-beta0004
4.1.2

Open the chart page →

8,772
lidarralexmorbo-lidarrVerified publisher0.1.21 of 1See more

lidarr alexmorbo-lidarr 0.1.2

1 of the 1 container images this version deploys carry CVE-2026-106114.

Container imageDigestPackageFixed in
ghcr.io/home-operations/lidarr:3.1.2.4902dab0e07502a3
SixLabors.ImageSharp@3.1.11
4.1.2

Open the chart page →

2,029
lidarrbdclark-helm-chartsVerified publisher0.1.01 of 1See more

lidarr bdclark-helm-charts 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-106114.

Container imageDigestPackageFixed in
linuxserver/lidarr:3.1.0044d616beb43
SixLabors.ImageSharp@3.1.11
4.1.2

Open the chart page →

205
radarrbdclark-helm-chartsVerified publisher0.4.51 of 1See more

radarr bdclark-helm-charts 0.4.5

1 of the 1 container images this version deploys carry CVE-2026-106114.

Container imageDigestPackageFixed in
linuxserver/radarr:6.4.4cfbc4fa09dc9
SixLabors.ImageSharp@3.1.12
4.1.2

Open the chart page →

140
sonarrbdclark-helm-chartsVerified publisher0.4.31 of 1See more

sonarr bdclark-helm-charts 0.4.3

1 of the 1 container images this version deploys carry CVE-2026-106114.

Container imageDigestPackageFixed in
linuxserver/sonarr:4.0.1982172b363f9e
SixLabors.ImageSharp@3.1.12
4.1.2

Open the chart page →

150
sonarrbeluga-cloudVerified publisher2.0.41 of 1See more

sonarr beluga-cloud 2.0.4

1 of the 1 container images this version deploys carry CVE-2026-106114.

Container imageDigestPackageFixed in
ghcr.io/beluga-cloud/sonarr/sonarr:3.0.10.1567339c63adcc4a
SixLabors.ImageSharp@1.0.0.0
4.1.2

Open the chart page →

110
radarrbrandan-schmitz-helm-chartsVerified publisher3.1.01 of 1See more

radarr brandan-schmitz-helm-charts 3.1.0

1 of the 1 container images this version deploys carry CVE-2026-106114.

Container imageDigestPackageFixed in
linuxserver/radarr:version-6.2.1.10461549c4a075496
SixLabors.ImageSharp@3.1.12
4.1.2

Open the chart page →

563
sonarrbrandan-schmitz-helm-chartsVerified publisher2.0.101 of 1See more

sonarr brandan-schmitz-helm-charts 2.0.10

1 of the 1 container images this version deploys carry CVE-2026-106114.

Container imageDigestPackageFixed in
linuxserver/sonarr:version-4.0.17.295202bc962946fe
SixLabors.ImageSharp@3.1.12
4.1.2

Open the chart page →

952
lidarrgeek-cookbookVerified publisher14.2.21 of 1See more

lidarr geek-cookbook 14.2.2

1 of the 1 container images this version deploys carry CVE-2026-106114.

Container imageDigestPackageFixed in
ghcr.io/k8s-at-home/lidarr:v1.0.0.225554ebc1f90963
SixLabors.ImageSharp@1.0.0-beta0007
4.1.2

Open the chart page →

15,982
radarrgeek-cookbookVerified publisher16.3.21 of 1See more

radarr geek-cookbook 16.3.2

1 of the 1 container images this version deploys carry CVE-2026-106114.

Container imageDigestPackageFixed in
ghcr.io/k8s-at-home/radarr:v4.1.0.61754273dfaf0295
SixLabors.ImageSharp@1.0.4
4.1.2

Open the chart page →

11,652
readarrgeek-cookbookVerified publisher6.4.21 of 1See more

readarr geek-cookbook 6.4.2

1 of the 1 container images this version deploys carry CVE-2026-106114.

Container imageDigestPackageFixed in
ghcr.io/k8s-at-home/readarr:v0.1.0.715ad943e9309e4
SixLabors.ImageSharp@1.0.3
4.1.2

Open the chart page →

9,170
radarrhomeenterpriseinc0.2.01 of 1See more

radarr homeenterpriseinc 0.2.0

1 of the 1 container images this version deploys carry CVE-2026-106114.

Container imageDigestPackageFixed in
linuxserver/radarr:3.2.25965bbb2f90d
SixLabors.ImageSharp@1.0.1
4.1.2

Open the chart page →

6,799
sonarrhomeenterpriseinc0.2.01 of 1See more

sonarr homeenterpriseinc 0.2.0

1 of the 1 container images this version deploys carry CVE-2026-106114.

Container imageDigestPackageFixed in
linuxserver/sonarr:3.0.6b5a31ff4fdf3
SixLabors.ImageSharp@1.0.0.0
4.1.2

Open the chart page →

10,962
servarrjacobcolvinVerified publisher0.1.21 of 2See more

servarr jacobcolvin 0.1.2

1 of the 2 container images this version deploys carry CVE-2026-106114.

Container imageDigestPackageFixed in
linuxserver/radarr:4.2.42f7a7b7a0ca6
SixLabors.ImageSharp@1.0.4
4.1.2

Open the chart page →

216
lidarrk8s-home-lab-repo15.3.11 of 1See more

lidarr k8s-home-lab-repo 15.3.1

1 of the 1 container images this version deploys carry CVE-2026-106114.

Container imageDigestPackageFixed in
ghcr.io/home-operations/lidarr:3.1.29df1e14c8e09
SixLabors.ImageSharp@3.1.12
4.1.2

Open the chart page →

1,725
readarrk8s-home-lab-repo7.2.11 of 1See more

readarr k8s-home-lab-repo 7.2.1

1 of the 1 container images this version deploys carry CVE-2026-106114.

Container imageDigestPackageFixed in
ghcr.io/home-operations/readarr:0.4.188f7551205fbd
SixLabors.ImageSharp@3.1.7
4.1.2

Open the chart page →

1,199
sonarrloeken-at-homeVerified publisher4.0.181 of 1See more

sonarr loeken-at-home 4.0.18

1 of the 1 container images this version deploys carry CVE-2026-106114.

Container imageDigestPackageFixed in
loeken/sonarr:4.0.18ad0528ab7ba0
SixLabors.ImageSharp@3.1.12
4.1.2

Open the chart page →

952
arrluiscajl1.0.92 of 2See more

arr luiscajl 1.0.9

2 of the 2 container images this version deploys carry CVE-2026-106114.

Container imageDigestPackageFixed in
linuxserver/radarr:latest7dfd049e79c0
SixLabors.ImageSharp@3.1.12
4.1.2
linuxserver/sonarr:latestf247545d23ba
SixLabors.ImageSharp@3.1.12
4.1.2

Open the chart page →

303
radarrluiscajl0.1.131 of 1See more

radarr luiscajl 0.1.13

1 of the 1 container images this version deploys carry CVE-2026-106114.

Container imageDigestPackageFixed in
linuxserver/radarr:latest7dfd049e79c0
SixLabors.ImageSharp@3.1.12
4.1.2

Open the chart page →

153
sonarrluiscajl0.1.171 of 1See more

sonarr luiscajl 0.1.17

1 of the 1 container images this version deploys carry CVE-2026-106114.

Container imageDigestPackageFixed in
linuxserver/sonarr:latestf247545d23ba
SixLabors.ImageSharp@3.1.12
4.1.2

Open the chart page →

150
radarr-testpanzer1119Verified publisher0.1.21 of 2See more

radarr-test panzer1119 0.1.2

1 of the 2 container images this version deploys carry CVE-2026-106114.

Container imageDigestPackageFixed in
ghcr.io/linuxserver/radarr:6.0.4c8a55bd83672
SixLabors.ImageSharp@3.1.11
4.1.2

Open the chart page →

1,592
radarrrubxkubeVerified publisher1.2.21 of 1See more

radarr rubxkube 1.2.2

1 of the 1 container images this version deploys carry CVE-2026-106114.

Container imageDigestPackageFixed in
linuxserver/radarr:6.3.0fe051413dfd9
SixLabors.ImageSharp@3.1.12
4.1.2

Open the chart page →

161
sonarrrubxkubeVerified publisher1.4.21 of 1See more

sonarr rubxkube 1.4.2

1 of the 1 container images this version deploys carry CVE-2026-106114.

Container imageDigestPackageFixed in
linuxserver/sonarr:4.0.1982172b363f9e
SixLabors.ImageSharp@3.1.12
4.1.2

Open the chart page →

150
nadekobotryuunosukeds30.1.21 of 2See more

nadekobot ryuunosukeds3 0.1.2

1 of the 2 container images this version deploys carry CVE-2026-106114.

Container imageDigestPackageFixed in
ryuunosukeds3/nadeko-bot-docker:latestc0398f13e8a9
SixLabors.ImageSharp@3.1.5
4.1.2

Open the chart page →

9,658

Container images carrying it

36 by charts deploying them

A fixed version is listed for 1 of the 1 affected package.

Container imageDigestPackageFixed inUsed by
linuxserver/radarr:latest7dfd049e79c0
SixLabors.ImageSharp@3.1.12
4.1.2
2
linuxserver/radarr:6.4.4:latestcfbc4fa09dc9
SixLabors.ImageSharp@3.1.12
4.1.2
2
linuxserver/sonarr:4.0.19:latest82172b363f9e
SixLabors.ImageSharp@3.1.12
4.1.2
2
linuxserver/sonarr:latestf247545d23ba
SixLabors.ImageSharp@3.1.12
4.1.2
2
ghcr.io/home-operations/radarr:6.4.4:6.4.4.10685be53998a2d39
SixLabors.ImageSharp@3.1.12
4.1.2
2
ghcr.io/home-operations/readarr:0.4.18:0.4.18.28058f7551205fbd
SixLabors.ImageSharp@3.1.7
4.1.2
2
linuxserver/lidarr:3.1.0044d616beb43
SixLabors.ImageSharp@3.1.11
4.1.2
1
linuxserver/radarr:4.2.42f7a7b7a0ca6
SixLabors.ImageSharp@1.0.4
4.1.2
1
linuxserver/radarr:version-6.2.1.10461549c4a075496
SixLabors.ImageSharp@3.1.12
4.1.2
1
linuxserver/radarr:3.2.25965bbb2f90d
SixLabors.ImageSharp@1.0.1
4.1.2
1
linuxserver/radarr:6.3.0fe051413dfd9
SixLabors.ImageSharp@3.1.12
4.1.2
1
linuxserver/sonarr:version-4.0.17.295202bc962946fe
SixLabors.ImageSharp@3.1.12
4.1.2
1
linuxserver/sonarr:3.0.6b5a31ff4fdf3
SixLabors.ImageSharp@1.0.0.0
4.1.2
1
linuxserver/sonarr:latestdffc730adcb8
SixLabors.ImageSharp@3.1.12
4.1.2
1
loeken/radarr:5.27.0-nightlya24409d3846d
SixLabors.ImageSharp@3.1.9
4.1.2
1
loeken/sonarr:4.0.18ad0528ab7ba0
SixLabors.ImageSharp@3.1.12
4.1.2
1
ryuunosukeds3/nadeko-bot-docker:latestc0398f13e8a9
SixLabors.ImageSharp@3.1.5
4.1.2
1
testhubio/testhub-api:on-prem56badee134b9
SixLabors.ImageSharp@1.0.0-beta0004
4.1.2
1
ghcr.io/beluga-cloud/sonarr/sonarr:3.0.10.1567339c63adcc4a
SixLabors.ImageSharp@1.0.0.0
4.1.2
1
ghcr.io/home-operations/lidarr:3.1.29df1e14c8e09
SixLabors.ImageSharp@3.1.12
4.1.2
1
ghcr.io/home-operations/lidarr:3.1.2.4902dab0e07502a3
SixLabors.ImageSharp@3.1.11
4.1.2
1
ghcr.io/home-operations/radarr:6.2.1a566e7d364b9
SixLabors.ImageSharp@3.1.12
4.1.2
1
ghcr.io/home-operations/sonarr:4.0.171989718e9fce
SixLabors.ImageSharp@3.1.12
4.1.2
1
ghcr.io/home-operations/sonarr:4.0.20:4.0.20.30121f19eb5e0f42
SixLabors.ImageSharp@3.1.12
4.1.2
1
ghcr.io/home-operations/sonarr:5.0.0.2569b699df6b4b10
SixLabors.ImageSharp@3.1.12
4.1.2
1
ghcr.io/hotio/radarr:release-6.4.4.10685c6f864f14406
SixLabors.ImageSharp@3.1.12
4.1.2
1
ghcr.io/hotio/sonarr:release-4.0.20.301452f8f8a16c7b
SixLabors.ImageSharp@3.1.12
4.1.2
1
ghcr.io/k8s-at-home/lidarr:v1.0.0.225554ebc1f90963
SixLabors.ImageSharp@1.0.0-beta0007
4.1.2
1
ghcr.io/k8s-at-home/radarr:v4.1.0.61754273dfaf0295
SixLabors.ImageSharp@1.0.4
4.1.2
1
ghcr.io/k8s-at-home/readarr:v0.1.0.715ad943e9309e4
SixLabors.ImageSharp@1.0.3
4.1.2
1
ghcr.io/k8s-at-home/sonarr:v3.0.8.15070eb230e2381a
SixLabors.ImageSharp@1.0.0.0
4.1.2
1
ghcr.io/linuxserver/radarr:6.0.4.10291-ls2896c0948b42c14
SixLabors.ImageSharp@3.1.11
4.1.2
1
ghcr.io/linuxserver/radarr:6.0.4c8a55bd83672
SixLabors.ImageSharp@3.1.11
4.1.2
1
ghcr.io/linuxserver/sonarr:4.0.16.2944-ls3008b9f2138ec50
SixLabors.ImageSharp@3.1.7
4.1.2
1
ghcr.io/onedr0p/radarr:5.3.6.86128d299e59fce7
SixLabors.ImageSharp@3.0.2
4.1.2
1
ghcr.io/onedr0p/sonarr:4.0.2.118327ffdcc8a937
SixLabors.ImageSharp@3.0.1
4.1.2
1

syft 1.42.1 · advisories as of 14 Oct 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.