StackRadarChart IndexLive demo

CVE-2026-107705

Medium

Advisory

Published 8 Oct 2026In the index since 10 Oct 2026

Severity: Medium; worst across findings
CVSS: 6.5; base score, highest
EPSS: 0.003; 24th percentile
CISA KEV: Not listed; no confirmed exploitation
Charts affected: 70; of 18,117 indexed, latest versions
Container images: 63; deployed by those charts
Fix available: None; affected package

The matching OSV records carry no description.

Carried by container images the latest versions of 70 of 18,117 indexed charts deploy, on 63 images.

Affected package	Affected versions	Fixed in	Images
popplerdeb	0.86.1-0ubuntu1, 22.02.0-2, 22.02.0-2ubuntu0.1, 22.02.0-2ubuntu0.3+17 more	no fix listed	63

OSV records: DEBIAN-CVE-2026-107705 UBUNTU-CVE-2026-107705

Charts affected

70 by stars

Chart

Latest

Affected images

Radar Score

kbot-self-hostedkbot-self-hosted

1 of 7 See more

kbot-self-hosted kbot-self-hosted 0.1.8

1 of the 7 container images this version deploys carry CVE-2026-107705.

Container image	Digest	Package	Fixed in
gotenberg/gotenberg :8.30	206a6c708fc6	poppler@25.03.0-5+deb13u2	no fix listed

Open the chart page →

38,885

penpotkubitodev

1 of 5 See more

penpot kubitodev 1.2.1

1 of the 5 container images this version deploys carry CVE-2026-107705.

Container image	Digest	Package	Fixed in
penpotapp/exporter :2.2.1	5c835ffd87ab	poppler@22.02.0-2ubuntu0.5	no fix listed

Open the chart page →

19,492

filestashmt190502

1 of 1 See more

filestash mt190502 4.0.0

1 of the 1 container images this version deploys carry CVE-2026-107705.

Container image	Digest	Package	Fixed in
machines/filestash :latest	aff504cd28a8	poppler@25.03.0-5+deb13u4	no fix listed

Open the chart page →

3,784

paperless-ngxmt190502

1 of 4 See more

paperless-ngx mt190502 7.6.14

1 of the 4 container images this version deploys carry CVE-2026-107705.

Container image	Digest	Package	Fixed in
ghcr.io/paperless-ngx/paperless-ngx :2.20.13	4b05bcd28e69	poppler@25.03.0-5+deb13u2	no fix listed

Open the chart page →

14,269

nominatimnominatim-chart

1 of 3 See more

nominatim nominatim-chart 1.3.0

1 of the 3 container images this version deploys carry CVE-2026-107705.

Container image	Digest	Package	Fixed in
mediagis/nominatim :3.7	c15e941485ef	poppler@0.86.1-0ubuntu1	no fix listed

Open the chart page →

25,346

paperless-ngxoli-the-dev

1 of 1 See more

paperless-ngx oli-the-dev 1.3.1

1 of the 1 container images this version deploys carry CVE-2026-107705.

Container image	Digest	Package	Fixed in
ghcr.io/paperless-ngx/paperless-ngx :3.3.0	6b94799bc769	poppler@25.03.0-5+deb13u4	no fix listed

Open the chart page →

5,253

cupsr2dlan-helm-charts

1 of 1 See more

cups r2dlan-helm-charts 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-107705.

Container image	Digest	Package	Fixed in
anujdatar/cups :25.07.01	685df04a643b	poppler@22.12.0-2+deb12u1	no fix listed

Open the chart page →

9,208

checkmkrtomik-helm-charts

1 of 1 See more

checkmk rtomik-helm-charts 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-107705.

Container image	Digest	Package	Fixed in
checkmk/check-mk-community :2.5.0p6	c11b422210c4	poppler@22.02.0-2ubuntu0.13	no fix listed

Open the chart page →

9,502

paperless-ngxrtomik-helm-charts

1 of 1 See more

paperless-ngx rtomik-helm-charts 0.0.5

1 of the 1 container images this version deploys carry CVE-2026-107705.

Container image	Digest	Package	Fixed in
ghcr.io/paperless-ngx/paperless-ngx :2.20.3	57ad9565bff3	poppler@25.03.0-5+deb13u2	no fix listed

Open the chart page →

12,873

stirling-pdfrubxkube

1 of 1 See more

stirling-pdf rubxkube 0.1.2

1 of the 1 container images this version deploys carry CVE-2026-107705.

Container image	Digest	Package	Fixed in
ghcr.io/stirling-tools/stirling-pdf :2.14.3	3b3670fce70b	poppler@24.02.0-1ubuntu9.8	no fix listed

Open the chart page →

7,396

seafileschmitzis

1 of 4 See more

seafile schmitzis 13.0.13

1 of the 4 container images this version deploys carry CVE-2026-107705.

Container image	Digest	Package	Fixed in
schmitzis/monorepo :seafile-13.0-latest	c583f1be2af2	poppler@24.02.0-1ubuntu9.9	no fix listed

Open the chart page →

44,556

photoprismschoolguys-helmcharts

1 of 1 See more

photoprism schoolguys-helmcharts 0.3.8

1 of the 1 container images this version deploys carry CVE-2026-107705.

Container image	Digest	Package	Fixed in
photoprism/photoprism :260601	650c6ad5a651	poppler@26.01.0-2build2	no fix listed

Open the chart page →

61,619

backendsignalen

1 of 4 See more

backend signalen 4.25.0

1 of the 4 container images this version deploys carry CVE-2026-107705.

Container image	Digest	Package	Fixed in
signalen/backend :2.50.18	26bb090bc4e4	poppler@22.12.0-2+deb12u3	no fix listed

Open the chart page →

14,556

kurento_webrtc_demostunner

1 of 2 See more

kurento_webrtc_demo stunner 0.1.0

1 of the 2 container images this version deploys carry CVE-2026-107705.

Container image	Digest	Package	Fixed in
kurento/kurento-media-server :latest	03c0d34d0828	poppler@24.02.0-1ubuntu9.8	no fix listed

Open the chart page →

14,002

stunner-kurento-one2one-callstunner

1 of 2 See more

stunner-kurento-one2one-call stunner 0.1.0

1 of the 2 container images this version deploys carry CVE-2026-107705.

Container image	Digest	Package	Fixed in
kurento/kurento-media-server :latest	03c0d34d0828	poppler@24.02.0-1ubuntu9.8	no fix listed

Open the chart page →

14,002

stash-boxswuuper-github

1 of 2 See more

stash-box swuuper-github 0.1.1

1 of the 2 container images this version deploys carry CVE-2026-107705.

Container image	Digest	Package	Fixed in
stashapp/stash-box :latest	a534c8afdf39	poppler@24.02.0-1ubuntu9.4	no fix listed

Open the chart page →

9,800

opencloudunxwares

1 of 13 See more

opencloud unxwares 0.2.3

1 of the 13 container images this version deploys carry CVE-2026-107705.

Container image	Digest	Package	Fixed in
apache/tika :2.9.2.1-full	ae0b86d3c4d0	poppler@24.02.0-1ubuntu9	no fix listed

Open the chart page →

49,016

maybe-financevicsufer

1 of 3 See more

maybe-finance vicsufer 0.2.7

1 of the 3 container images this version deploys carry CVE-2026-107705.

Container image	Digest	Package	Fixed in
ghcr.io/maybe-finance/maybe :0.5.0	c6ab95ca9130	poppler@22.12.0-2+b1	no fix listed

Open the chart page →

12,072

changedetection-iozekker6

1 of 1 See more

changedetection-io zekker6 1.103.0

1 of the 1 container images this version deploys carry CVE-2026-107705.

Container image	Digest	Package	Fixed in
ghcr.io/dgtlmoon/changedetection.io :0.60.8	34df3680db1c	poppler@22.12.0-2+deb12u3	no fix listed

Open the chart page →

3,002

zoo-project-druzoo-project

1 of 6 See more

zoo-project-dru zoo-project 0.10.9

1 of the 6 container images this version deploys carry CVE-2026-107705.

Container image	Digest	Package	Fixed in
zooproject/zoo-project :dru-51e7d55383f24594959b69e58518961c6aa66740	da112e8d03f1	poppler@22.02.0-2ubuntu0.13	no fix listed

Open the chart page →

7,286

Container images carrying it

63 by charts deploying them

A fixed version is listed for 0 of the 1 affected package.

Container image	Digest	Package	Fixed in	Used by
ghcr.io/fluxerapp/fluxer-media-proxy :2026.820.164955	ced7544e6b3f	poppler@25.03.0-5+deb13u4	no fix listed	1
ghcr.io/linuxserver/papermerge :version-v2.0.1	98ba2dd3f0bd	poppler@0.86.1-0ubuntu1	no fix listed	1
ghcr.io/maybe-finance/maybe :0.5.0	c6ab95ca9130	poppler@22.12.0-2+b1	no fix listed	1
ghcr.io/paperless-ngx/paperless-ngx :2.13.1	0642357c5dbd	poppler@22.12.0-2+b1	no fix listed	1
ghcr.io/paperless-ngx/paperless-ngx :2.20.13	4b05bcd28e69	poppler@25.03.0-5+deb13u2	no fix listed	1
ghcr.io/paperless-ngx/paperless-ngx :2.20.3	57ad9565bff3	poppler@25.03.0-5+deb13u2	no fix listed	1
ghcr.io/paperless-ngx/paperless-ngx :2.20.5	665f2f5cc548	poppler@25.03.0-5+deb13u2	no fix listed	1
ghcr.io/paperless-ngx/paperless-ngx :2.10.1	a132c2ac7c57	poppler@22.12.0-2+b1	no fix listed	1
ghcr.io/paperless-ngx/paperless-ngx :2.0.1	ab255bea133e	poppler@22.12.0-2+b1	no fix listed	1
ghcr.io/paperless-ngx/paperless-ngx :2.20.14	b89f83345532	poppler@25.03.0-5+deb13u2	no fix listed	1
ghcr.io/paperless-ngx/paperless-ngx :3.3.1	cb91bfb468e6	poppler@25.03.0-5+deb13u4	no fix listed	1
ghcr.io/seanmorley15/adventurelog-backend :v0.13.0	0250d9cb0d74	poppler@25.03.0-5+deb13u4	no fix listed	1
ghcr.io/stirling-tools/stirling-pdf :2.14.3	3b3670fce70b	poppler@24.02.0-1ubuntu9.8	no fix listed	1