StackRadar

CVE-2026-108985

High

Advisory

Published 12 Oct 2026In the index since 13 Oct 2026
Severity
High
worst across findings
CVSS
7.1
base score, highest
EPSS
0.002
7th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
9
of 18,117 indexed, latest versions
Container images
7
deployed by those charts
Fix available
None
affected package

The matching OSV records carry no description.

Carried by container images the latest versions of 9 of 18,117 indexed charts deploy, on 7 images.

Affected packageAffected versionsFixed inImages
libnfsdeb4.0.0-1, 5.0.2-1+b2no fix listed7
OSV records
DEBIAN-CVE-2026-108985UBUNTU-CVE-2026-108985

Charts affected

9 by stars
ChartLatestAffected imagesRadar Score
music-assistantbdclark-helm-chartsVerified publisher0.4.131 of 1See more

music-assistant bdclark-helm-charts 0.4.13

1 of the 1 container images this version deploys carry CVE-2026-108985.

Container imageDigestPackageFixed in
ghcr.io/music-assistant/server:2.10.3885872224fa5
libnfs@5.0.2-1+b2
no fix listed

Open the chart page →

4,913
music-assistant-serverlmatfyVerified publisher0.1.91 of 1See more

music-assistant-server lmatfy 0.1.9

1 of the 1 container images this version deploys carry CVE-2026-108985.

Container imageDigestPackageFixed in
ghcr.io/music-assistant/server:2.7.53522e8a7a8f0
libnfs@4.0.0-1
no fix listed

Open the chart page →

8,119
music-assistant-serverandibraeuVerified publisher2.1.41 of 1See more

music-assistant-server andibraeu 2.1.4

1 of the 1 container images this version deploys carry CVE-2026-108985.

Container imageDigestPackageFixed in
ghcr.io/music-assistant/server:2.10.645fdb050e069
libnfs@5.0.2-1+b2
no fix listed

Open the chart page →

4,767
charon-relaycharonOfficialVerified publisher0.9.01 of 2See more

charon-relay charon 0.9.0

1 of the 2 container images this version deploys carry CVE-2026-108985.

Container imageDigestPackageFixed in
obolnetwork/charon:v1.11.03a5b05b3cb87
libnfs@5.0.2-1+b2
no fix listed

Open the chart page →

3,997
dv-podcharonOfficialVerified publisher0.20.01 of 5See more

dv-pod charon 0.20.0

1 of the 5 container images this version deploys carry CVE-2026-108985.

Container imageDigestPackageFixed in
obolnetwork/charon:v1.11.03a5b05b3cb87
libnfs@5.0.2-1+b2
no fix listed

Open the chart page →

4,919
xtevegeek-cookbookVerified publisher8.4.21 of 1See more

xteve geek-cookbook 8.4.2

1 of the 1 container images this version deploys carry CVE-2026-108985.

Container imageDigestPackageFixed in
ghcr.io/k8s-at-home/xteve:v2.2.0.200292b3614670f
libnfs@4.0.0-1
no fix listed

Open the chart page →

19,903
hydrahydraVerified publisher0.9.51 of 2See more

hydra hydra 0.9.5

1 of the 2 container images this version deploys carry CVE-2026-108985.

Container imageDigestPackageFixed in
ghcr.io/smarter-project/hydra/isolated-vm:main4457b79b24cd
libnfs@4.0.0-1
no fix listed

Open the chart page →

10,294
isolated-vmhydraVerified publisher0.9.41 of 1See more

isolated-vm hydra 0.9.4

1 of the 1 container images this version deploys carry CVE-2026-108985.

Container imageDigestPackageFixed in
ghcr.io/smarter-project/hydra/isolated-vm:main4457b79b24cd
libnfs@4.0.0-1
no fix listed

Open the chart page →

8,803
music-assistantkarljorgensen0.1.31 of 1See more

music-assistant karljorgensen 0.1.3

1 of the 1 container images this version deploys carry CVE-2026-108985.

Container imageDigestPackageFixed in
ghcr.io/music-assistant/server:2.8.7eef3ee7810d0
libnfs@4.0.0-1
no fix listed

Open the chart page →

8,533

Container images carrying it

7 by charts deploying them

A fixed version is listed for 0 of the 1 affected package.

Container imageDigestPackageFixed inUsed by
obolnetwork/charon:v1.11.03a5b05b3cb87
libnfs@5.0.2-1+b2
no fix listed
2
ghcr.io/smarter-project/hydra/isolated-vm:main4457b79b24cd
libnfs@4.0.0-1
no fix listed
2
ghcr.io/k8s-at-home/xteve:v2.2.0.200292b3614670f
libnfs@4.0.0-1
no fix listed
1
ghcr.io/music-assistant/server:2.7.53522e8a7a8f0
libnfs@4.0.0-1
no fix listed
1
ghcr.io/music-assistant/server:2.10.645fdb050e069
libnfs@5.0.2-1+b2
no fix listed
1
ghcr.io/music-assistant/server:2.10.3885872224fa5
libnfs@5.0.2-1+b2
no fix listed
1
ghcr.io/music-assistant/server:2.8.7eef3ee7810d0
libnfs@4.0.0-1
no fix listed
1

syft 1.42.1 · advisories as of 14 Oct 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.