StackRadar

CVE-2026-107705

Medium

Advisory

Published 8 Oct 2026In the index since 10 Oct 2026
Severity
Medium
worst across findings
CVSS
6.5
base score, highest
EPSS
0.003
24th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
70
of 18,117 indexed, latest versions
Container images
63
deployed by those charts
Fix available
None
affected package

The matching OSV records carry no description.

Carried by container images the latest versions of 70 of 18,117 indexed charts deploy, on 63 images.

Affected packageAffected versionsFixed inImages
popplerdeb0.86.1-0ubuntu1, 22.02.0-2, 22.02.0-2ubuntu0.1, 22.02.0-2ubuntu0.3+17 moreno fix listed63
OSV records
DEBIAN-CVE-2026-107705UBUNTU-CVE-2026-107705

Charts affected

70 by stars
ChartLatestAffected imagesRadar Score
penpotpenpotOfficialVerified publisher1.11.31 of 5See more

penpot penpot 1.11.3

1 of the 5 container images this version deploys carry CVE-2026-107705.

Container imageDigestPackageFixed in
penpotapp/exporter:2.18.3418232d6ca31
poppler@25.03.0-5+deb13u4
no fix listed

Open the chart page →

6,265
openprojectopenproject-helm-chartsOfficialVerified publisher13.13.11 of 5See more

openproject openproject-helm-charts 13.13.1

1 of the 5 container images this version deploys carry CVE-2026-107705.

Container imageDigestPackageFixed in
openproject/openproject:17.9.1-slim2beeecac788d
poppler@25.03.0-5+deb13u4
no fix listed

Open the chart page →

22,265
gotenbergmaikumoriVerified publisher1.25.01 of 1See more

gotenberg maikumori 1.25.0

1 of the 1 container images this version deploys carry CVE-2026-107705.

Container imageDigestPackageFixed in
gotenberg/gotenberg:8.36.087c16b9f3642
poppler@25.03.0-5+deb13u4
no fix listed

Open the chart page →

15,380
paperless-ngxfmjstudios0.2.82 of 5See more

paperless-ngx fmjstudios 0.2.8

2 of the 5 container images this version deploys carry CVE-2026-107705.

Container imageDigestPackageFixed in
gotenberg/gotenberg:8.0.1cf0b9a7ca3cf
poppler@22.12.0-2+b1
no fix listed
ghcr.io/paperless-ngx/paperless-ngx:2.10.1a132c2ac7c57
poppler@22.12.0-2+b1
no fix listed

Open the chart page →

35,560
penpotcodechemVerified publisher1.0.101 of 3See more

penpot codechem 1.0.10

1 of the 3 container images this version deploys carry CVE-2026-107705.

Container imageDigestPackageFixed in
penpotapp/exporter:1.16.0-betafa7086ad92b1
poppler@22.02.0-2ubuntu0.1
no fix listed

Open the chart page →

30,860
paperless-ngxpaperless-ngxVerified publisher0.3.241 of 3See more

paperless-ngx paperless-ngx 0.3.24

1 of the 3 container images this version deploys carry CVE-2026-107705.

Container imageDigestPackageFixed in
ghcr.io/paperless-ngx/paperless-ngx:3.3.06b94799bc769
poppler@25.03.0-5+deb13u4
no fix listed

Open the chart page →

9,388
photoprismandrenarchyVerified publisher8.15.01 of 1See more

photoprism andrenarchy 8.15.0

1 of the 1 container images this version deploys carry CVE-2026-107705.

Container imageDigestPackageFixed in
photoprism/photoprism:260728958642220223
poppler@26.01.0-2ubuntu0.1
no fix listed

Open the chart page →

50,252
seafiledatamateVerified publisher0.6.01 of 6See more

seafile datamate 0.6.0

1 of the 6 container images this version deploys carry CVE-2026-107705.

Container imageDigestPackageFixed in
datamate/seafile-professional:11.0.202dd66b722464
poppler@22.02.0-2ubuntu0.10
no fix listed

Open the chart page →

85,652
mattermostphntom3.24.01 of 2See more

mattermost phntom 3.24.0

1 of the 2 container images this version deploys carry CVE-2026-107705.

Container imageDigestPackageFixed in
phntom/mattermost-team-edition:9.3.051cf9da4aa2e
poppler@22.02.0-2ubuntu0.3
no fix listed

Open the chart page →

10,040
changedetectionalekcVerified publisher0.14.71 of 1See more

changedetection alekc 0.14.7

1 of the 1 container images this version deploys carry CVE-2026-107705.

Container imageDigestPackageFixed in
ghcr.io/dgtlmoon/changedetection.io:0.60.904eaae7915ba
poppler@22.12.0-2+deb12u3
no fix listed

Open the chart page →

2,541
nominatimrobjuz6.4.21 of 4See more

nominatim robjuz 6.4.2

1 of the 4 container images this version deploys carry CVE-2026-107705.

Container imageDigestPackageFixed in
mediagis/nominatim:5.3.27923a8e67197
poppler@24.02.0-1ubuntu9.9
no fix listed

Open the chart page →

57,396
paperlesszekker6Verified publisher11.11.01 of 1See more

paperless zekker6 11.11.0

1 of the 1 container images this version deploys carry CVE-2026-107705.

Container imageDigestPackageFixed in
ghcr.io/paperless-ngx/paperless-ngx:3.3.06b94799bc769
poppler@25.03.0-5+deb13u4
no fix listed

Open the chart page →

5,253
paperless-ngxadnoctemVerified publisher0.5.02 of 5See more

paperless-ngx adnoctem 0.5.0

2 of the 5 container images this version deploys carry CVE-2026-107705.

Container imageDigestPackageFixed in
gotenberg/gotenberg:8.36.087c16b9f3642
poppler@25.03.0-5+deb13u4
no fix listed
ghcr.io/paperless-ngx/paperless-ngx:3.3.06b94799bc769
poppler@25.03.0-5+deb13u4
no fix listed

Open the chart page →

26,792
paperless-ngxalexmorbo-paperless-ngxVerified publisher0.2.01 of 2See more

paperless-ngx alexmorbo-paperless-ngx 0.2.0

1 of the 2 container images this version deploys carry CVE-2026-107705.

Container imageDigestPackageFixed in
ghcr.io/paperless-ngx/paperless-ngx:2.20.5665f2f5cc548
poppler@25.03.0-5+deb13u2
no fix listed

Open the chart page →

14,585
paperless-ngxcrystalnetVerified publisher0.2.221 of 3See more

paperless-ngx crystalnet 0.2.22

1 of the 3 container images this version deploys carry CVE-2026-107705.

Container imageDigestPackageFixed in
ghcr.io/paperless-ngx/paperless-ngx:2.13.10642357c5dbd
poppler@22.12.0-2+b1
no fix listed

Open the chart page →

16,171
games-on-whalesgeek-cookbookVerified publisher1.8.21 of 7See more

games-on-whales geek-cookbook 1.8.2

1 of the 7 container images this version deploys carry CVE-2026-107705.

Container imageDigestPackageFixed in
ghcr.io/games-on-whales/retroarch:1.0.0103fbcec2314
poppler@0.86.1-0ubuntu1
no fix listed

Open the chart page →

113,434
papermergenicholaswildeVerified publisher1.0.21 of 1See more

papermerge nicholaswilde 1.0.2

1 of the 1 container images this version deploys carry CVE-2026-107705.

Container imageDigestPackageFixed in
ghcr.io/linuxserver/papermerge:version-v2.0.198ba2dd3f0bd
poppler@0.86.1-0ubuntu1
no fix listed

Open the chart page →

21,376
paperless-ngxpaperlessVerified publisher0.4.01 of 3See more

paperless-ngx paperless 0.4.0

1 of the 3 container images this version deploys carry CVE-2026-107705.

Container imageDigestPackageFixed in
ghcr.io/paperless-ngx/paperless-ngxdigest-pinnedaa810a36942c
poppler@25.03.0-5+deb13u4
no fix listed

Open the chart page →

11,124
routehub-client-hubroutehub-helm1.0.01 of 3See more

routehub-client-hub routehub-helm 1.0.0

1 of the 3 container images this version deploys carry CVE-2026-107705.

Container imageDigestPackageFixed in
timescale/timescaledb-ha:pg16e9f34d8dd276
poppler@22.02.0-2ubuntu0.13
no fix listed

Open the chart page →

15,526
gotenbergadnoctemVerified publisher0.5.01 of 1See more

gotenberg adnoctem 0.5.0

1 of the 1 container images this version deploys carry CVE-2026-107705.

Container imageDigestPackageFixed in
gotenberg/gotenberg:8.37.0f29984bd1e22
poppler@25.03.0-5+deb13u4
no fix listed

Open the chart page →

11,103
games-on-whalesangelnu2.0.01 of 7See more

games-on-whales angelnu 2.0.0

1 of the 7 container images this version deploys carry CVE-2026-107705.

Container imageDigestPackageFixed in
ghcr.io/games-on-whales/retroarch:1.0.0103fbcec2314
poppler@0.86.1-0ubuntu1
no fix listed

Open the chart page →

122,577
platform-apiappscodeVerified publisher2026.10.121 of 3See more

platform-api appscode 2026.10.12

1 of the 3 container images this version deploys carry CVE-2026-107705.

Container imageDigestPackageFixed in
ghcr.io/appscode/gotenberg:8.25f9104080d9a7
poppler@25.03.0-5+deb13u2
no fix listed

Open the chart page →

43,757
astrotrekastria0.0.21 of 4See more

astrotrek astria 0.0.2

1 of the 4 container images this version deploys carry CVE-2026-107705.

Container imageDigestPackageFixed in
timescale/timescaledb-ha:pg15-latesta8e3322e1cf9
poppler@22.02.0-2ubuntu0.1
no fix listed

Open the chart page →

37,604
postgresqlbuall-charts0.1.21 of 1See more

postgresql buall-charts 0.1.2

1 of the 1 container images this version deploys carry CVE-2026-107705.

Container imageDigestPackageFixed in
buall/postgres-stack:18.6881a785642cb
poppler@25.03.0-5+deb13u4
no fix listed

Open the chart page →

4,836
caninecanine0.1.101 of 7See more

canine canine 0.1.10

1 of the 7 container images this version deploys carry CVE-2026-107705.

Container imageDigestPackageFixed in
ghcr.io/caninehq/canine:latest68b19aee1c64
poppler@22.12.0-2+deb12u2
no fix listed

Open the chart page →

18,685
paperless-ngxcharts-derwitt-devVerified publisher2.1.71 of 1See more

paperless-ngx charts-derwitt-dev 2.1.7

1 of the 1 container images this version deploys carry CVE-2026-107705.

Container imageDigestPackageFixed in
ghcr.io/paperless-ngx/paperless-ngx:3.3.1cb91bfb468e6
poppler@25.03.0-5+deb13u4
no fix listed

Open the chart page →

5,253
kube-acp-stackcloudentity2.29.11 of 7See more

kube-acp-stack cloudentity 2.29.1

1 of the 7 container images this version deploys carry CVE-2026-107705.

Container imageDigestPackageFixed in
timescale/timescaledb-ha:pg17.2-ts2.18.2e8d0a9cc3db5
poppler@22.02.0-2ubuntu0.6
no fix listed

Open the chart page →

24,980
opencloudcommunity-opencloud3.2.01 of 13See more

opencloud community-opencloud 3.2.0

1 of the 13 container images this version deploys carry CVE-2026-107705.

Container imageDigestPackageFixed in
apache/tika:latest-fullab9cc988828c
poppler@26.01.0-2ubuntu0.1
no fix listed

Open the chart page →

10,635
damap-chartdamapVerified publisher0.3.11 of 5See more

damap-chart damap 0.3.1

1 of the 5 container images this version deploys carry CVE-2026-107705.

Container imageDigestPackageFixed in
gotenberg/gotenberg:8f29984bd1e22
poppler@25.03.0-5+deb13u4
no fix listed

Open the chart page →

19,352
adventurelogdjjudas21Verified publisher0.1.11 of 3See more

adventurelog djjudas21 0.1.1

1 of the 3 container images this version deploys carry CVE-2026-107705.

Container imageDigestPackageFixed in
ghcr.io/seanmorley15/adventurelog-backend:v0.13.00250d9cb0d74
poppler@25.03.0-5+deb13u4
no fix listed

Open the chart page →

10,105
photoprismdjjudas21Verified publisher99.99.991 of 1See more

photoprism djjudas21 99.99.99

1 of the 1 container images this version deploys carry CVE-2026-107705.

Container imageDigestPackageFixed in
photoprism/photoprism:240711-cefc6fd632ca74
poppler@24.02.0-1ubuntu9
no fix listed

Open the chart page →

100,390
codecovdoubanVerified publisher0.2.41 of 8See more

codecov douban 0.2.4

1 of the 8 container images this version deploys carry CVE-2026-107705.

Container imageDigestPackageFixed in
timescale/timescaledb-ha:pg14.6-ts2.9.1-p1cdb9ae118899
poppler@22.02.0-2ubuntu0.1
no fix listed

Open the chart page →

27,868
drogue-cloud-examplesdrogue-iotVerified publisher0.7.111 of 6See more

drogue-cloud-examples drogue-iot 0.7.11

1 of the 6 container images this version deploys carry CVE-2026-107705.

Container imageDigestPackageFixed in
timescale/timescaledb-ha:pg14-ts2.6-latested719c0cd19d
poppler@22.02.0-2
no fix listed

Open the chart page →

34,918
fluxer-helmfluxer-helm0.3.02 of 18See more

fluxer-helm fluxer-helm 0.3.0

2 of the 18 container images this version deploys carry CVE-2026-107705.

Container imageDigestPackageFixed in
ghcr.io/fluxerapp/fluxer-api:2026.820.164808f683541d5374
poppler@22.12.0-2+deb12u3
no fix listed
ghcr.io/fluxerapp/fluxer-media-proxy:2026.820.164955ced7544e6b3f
poppler@25.03.0-5+deb13u4
no fix listed

Open the chart page →

33,823
gotenbergfmjstudios0.2.21 of 1See more

gotenberg fmjstudios 0.2.2

1 of the 1 container images this version deploys carry CVE-2026-107705.

Container imageDigestPackageFixed in
gotenberg/gotenberg:8.7.0437b9cd3c351
poppler@22.12.0-2+b1
no fix listed

Open the chart page →

10,981
changedetection-iogabe565Verified publisher0.12.01 of 2See more

changedetection-io gabe565 0.12.0

1 of the 2 container images this version deploys carry CVE-2026-107705.

Container imageDigestPackageFixed in
ghcr.io/dgtlmoon/changedetection.io:latest34df3680db1c
poppler@22.12.0-2+deb12u3
no fix listed

Open the chart page →

3,002
scanservjsgabe565Verified publisher0.9.21 of 1See more

scanservjs gabe565 0.9.2

1 of the 1 container images this version deploys carry CVE-2026-107705.

Container imageDigestPackageFixed in
sbs20/scanservjs:release-v3.0.3dad1fd6e9a98
poppler@22.12.0-2+b1
no fix listed

Open the chart page →

15,200
openkmgeek-cookbookVerified publisher4.2.01 of 1See more

openkm geek-cookbook 4.2.0

1 of the 1 container images this version deploys carry CVE-2026-107705.

Container imageDigestPackageFixed in
openkm/openkm-ce:6.3.113bc465a7461b
poppler@0.86.1-0ubuntu1
no fix listed

Open the chart page →

29,673
archiveboxhelmforgeVerified publisher1.1.131 of 1See more

archivebox helmforge 1.1.13

1 of the 1 container images this version deploys carry CVE-2026-107705.

Container imageDigestPackageFixed in
archivebox/archivebox:0.9.708c21bb233130
poppler@25.03.0-5+deb13u4
no fix listed

Open the chart page →

6,400
changedetectionhelmforgeVerified publisher1.1.181 of 1See more

changedetection helmforge 1.1.18

1 of the 1 container images this version deploys carry CVE-2026-107705.

Container imageDigestPackageFixed in
ghcr.io/dgtlmoon/changedetection.io:0.60.834df3680db1c
poppler@22.12.0-2+deb12u3
no fix listed

Open the chart page →

3,002
dawarichhelmforgeVerified publisher1.0.31 of 4See more

dawarich helmforge 1.0.3

1 of the 4 container images this version deploys carry CVE-2026-107705.

Container imageDigestPackageFixed in
postgis/postgis:18-3.67e00e8c3539f
poppler@25.03.0-5+deb13u4
no fix listed

Open the chart page →

12,684
medikeephelmforgeVerified publisher2.0.21 of 3See more

medikeep helmforge 2.0.2

1 of the 3 container images this version deploys carry CVE-2026-107705.

Container imageDigestPackageFixed in
ghcr.io/afairgiant/medikeep:v0.71.0086579173033
poppler@22.12.0-2+deb12u3
no fix listed

Open the chart page →

6,592
webodmhelmforgeVerified publisher1.0.01 of 4See more

webodm helmforge 1.0.0

1 of the 4 container images this version deploys carry CVE-2026-107705.

Container imageDigestPackageFixed in
webodm/webodm_webapp:3.3.0ed7b1aa0e40f
poppler@22.02.0-2ubuntu0.13
no fix listed

Open the chart page →

22,790
nominatimheywood8-helm-chartsVerified publisher3.10.81 of 3See more

nominatim heywood8-helm-charts 3.10.8

1 of the 3 container images this version deploys carry CVE-2026-107705.

Container imageDigestPackageFixed in
mediagis/nominatim:4.2d0eae7b51374
poppler@22.02.0-2ubuntu0.3
no fix listed

Open the chart page →

15,610
paperlesshomelabcihelmchartstestVerified publisher9.1.91 of 1See more

paperless homelabcihelmchartstest 9.1.9

1 of the 1 container images this version deploys carry CVE-2026-107705.

Container imageDigestPackageFixed in
ghcr.io/paperless-ngx/paperless-ngx:2.0.1ab255bea133e
poppler@22.12.0-2+b1
no fix listed

Open the chart page →

18,715
paperlesshpVerified publisher0.1.22 of 5See more

paperless hp 0.1.2

2 of the 5 container images this version deploys carry CVE-2026-107705.

Container imageDigestPackageFixed in
gotenberg/gotenberg:8.3467097317623a
poppler@25.03.0-5+deb13u3
no fix listed
ghcr.io/paperless-ngx/paperless-ngx:3.1.3aa810a36942c
poppler@25.03.0-5+deb13u4
no fix listed

Open the chart page →

35,328
inventreeinventreeOfficialVerified publisher0.4.311 of 2See more

inventree inventree 0.4.31

1 of the 2 container images this version deploys carry CVE-2026-107705.

Container imageDigestPackageFixed in
inventree/inventree:1.5.74aefd6e2bb0e
poppler@25.03.0-5+deb13u4
no fix listed

Open the chart page →

5,933
opencloudjacobcolvinVerified publisher0.2.31 of 13See more

opencloud jacobcolvin 0.2.3

1 of the 13 container images this version deploys carry CVE-2026-107705.

Container imageDigestPackageFixed in
apache/tika:2.9.2.1-fullae0b86d3c4d0
poppler@24.02.0-1ubuntu9
no fix listed

Open the chart page →

49,016
deltabadgerk8s-chartsVerified publisher2.0.01 of 1See more

deltabadger k8s-charts 2.0.0

1 of the 1 container images this version deploys carry CVE-2026-107705.

Container imageDigestPackageFixed in
ghcr.io/deltabadger/deltabadger:2.23.3bffe3c22fabc
poppler@25.03.0-5+deb13u4
no fix listed

Open the chart page →

7,263
paperlessk8s-home-lab-repo11.0.11 of 1See more

paperless k8s-home-lab-repo 11.0.1

1 of the 1 container images this version deploys carry CVE-2026-107705.

Container imageDigestPackageFixed in
ghcr.io/paperless-ngx/paperless-ngx:2.20.14b89f83345532
poppler@25.03.0-5+deb13u2
no fix listed

Open the chart page →

11,302

Container images carrying it

63 by charts deploying them

A fixed version is listed for 0 of the 1 affected package.

Container imageDigestPackageFixed inUsed by
ghcr.io/fluxerapp/fluxer-media-proxy:2026.820.164955ced7544e6b3f
poppler@25.03.0-5+deb13u4
no fix listed
1
ghcr.io/linuxserver/papermerge:version-v2.0.198ba2dd3f0bd
poppler@0.86.1-0ubuntu1
no fix listed
1
ghcr.io/maybe-finance/maybe:0.5.0c6ab95ca9130
poppler@22.12.0-2+b1
no fix listed
1
ghcr.io/paperless-ngx/paperless-ngx:2.13.10642357c5dbd
poppler@22.12.0-2+b1
no fix listed
1
ghcr.io/paperless-ngx/paperless-ngx:2.20.134b05bcd28e69
poppler@25.03.0-5+deb13u2
no fix listed
1
ghcr.io/paperless-ngx/paperless-ngx:2.20.357ad9565bff3
poppler@25.03.0-5+deb13u2
no fix listed
1
ghcr.io/paperless-ngx/paperless-ngx:2.20.5665f2f5cc548
poppler@25.03.0-5+deb13u2
no fix listed
1
ghcr.io/paperless-ngx/paperless-ngx:2.10.1a132c2ac7c57
poppler@22.12.0-2+b1
no fix listed
1
ghcr.io/paperless-ngx/paperless-ngx:2.0.1ab255bea133e
poppler@22.12.0-2+b1
no fix listed
1
ghcr.io/paperless-ngx/paperless-ngx:2.20.14b89f83345532
poppler@25.03.0-5+deb13u2
no fix listed
1
ghcr.io/paperless-ngx/paperless-ngx:3.3.1cb91bfb468e6
poppler@25.03.0-5+deb13u4
no fix listed
1
ghcr.io/seanmorley15/adventurelog-backend:v0.13.00250d9cb0d74
poppler@25.03.0-5+deb13u4
no fix listed
1
ghcr.io/stirling-tools/stirling-pdf:2.14.33b3670fce70b
poppler@24.02.0-1ubuntu9.8
no fix listed
1

syft 1.42.1 · advisories as of 14 Oct 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.