StackRadar

CVE-2026-109828

Medium

Advisory

Published 13 Oct 2026In the index since 15 Oct 2026
Severity
Medium
worst across findings
CVSS
5.3
base score, highest
EPSS
0.004
31st percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
63
of 18,131 indexed, latest versions
Container images
48
deployed by those charts
Fix available
None
affected package

The matching OSV records carry no description.

Carried by container images the latest versions of 63 of 18,131 indexed charts deploy, on 48 images.

Affected packageAffected versionsFixed inImages
libsndfiledeb1.2.0-1, 1.2.0-1+deb12u1, 1.2.2-2+b1, 1.2.2-2+deb13u1no fix listed48
OSV records
DEBIAN-CVE-2026-109828

Charts affected

63 by stars
ChartLatestAffected imagesRadar Score
uptime-kumaloeken-at-homeVerified publisher2.3.21 of 1See more

uptime-kuma loeken-at-home 2.3.2

1 of the 1 container images this version deploys carry CVE-2026-109828.

Container imageDigestPackageFixed in
louislam/uptime-kuma:2.3.29aeb4e51d038
libsndfile@1.2.0-1+deb12u1
no fix listed

Open the chart page →

40,371
flaresolverrluiscajl0.0.31 of 1See more

flaresolverr luiscajl 0.0.3

1 of the 1 container images this version deploys carry CVE-2026-109828.

Container imageDigestPackageFixed in
ghcr.io/flaresolverr/flaresolverr:latestc80ae007ce2c
libsndfile@1.2.0-1+deb12u1
no fix listed

Open the chart page →

11,452
searchmcp-helmVerified publisher0.1.31 of 2See more

search mcp-helm 0.1.3

1 of the 2 container images this version deploys carry CVE-2026-109828.

Container imageDigestPackageFixed in
ghcr.io/flaresolverr/flaresolverr:latestc80ae007ce2c
libsndfile@1.2.0-1+deb12u1
no fix listed

Open the chart page →

13,327
flaresolverrmedia-servarrVerified publisher0.19.01 of 1See more

flaresolverr media-servarr 0.19.0

1 of the 1 container images this version deploys carry CVE-2026-109828.

Container imageDigestPackageFixed in
ghcr.io/flaresolverr/flaresolverr:v3.5.2c80ae007ce2c
libsndfile@1.2.0-1+deb12u1
no fix listed

Open the chart page →

11,452
filestashmt1905024.0.01 of 1See more

filestash mt190502 4.0.0

1 of the 1 container images this version deploys carry CVE-2026-109828.

Container imageDigestPackageFixed in
machines/filestash:latestaff504cd28a8
libsndfile@1.2.2-2+deb13u1
no fix listed

Open the chart page →

3,802
uptime-kumancsaVerified publisher1.7.31 of 1See more

uptime-kuma ncsa 1.7.3

1 of the 1 container images this version deploys carry CVE-2026-109828.

Container imageDigestPackageFixed in
louislam/uptime-kuma:2.5.5c74379ac4509
libsndfile@1.2.0-1+deb12u1
no fix listed

Open the chart page →

36,884
web-checkrm3lVerified publisher0.1.01 of 1See more

web-check rm3l 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-109828.

Container imageDigestPackageFixed in
ghcr.io/lissy93/web-check:lateste98c0fe58157
libsndfile@1.2.0-1+deb12u1
no fix listed

Open the chart page →

6,093
rocketchat-voiprocketchat-server0.1.01 of 1See more

rocketchat-voip rocketchat-server 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-109828.

Container imageDigestPackageFixed in
rocketchat/freeswitch:stablecfba5c20a5cc
libsndfile@1.2.0-1
no fix listed

Open the chart page →

6,190
flaresolverrrubxkubeVerified publisher0.1.11 of 1See more

flaresolverr rubxkube 0.1.1

1 of the 1 container images this version deploys carry CVE-2026-109828.

Container imageDigestPackageFixed in
flaresolverr/flaresolverr:v3.5.0139dfee1c6f8
libsndfile@1.2.0-1+deb12u1
no fix listed

Open the chart page →

32,841
uptime-kumarubxkubeVerified publisher1.2.11 of 1See more

uptime-kuma rubxkube 1.2.1

1 of the 1 container images this version deploys carry CVE-2026-109828.

Container imageDigestPackageFixed in
louislam/uptime-kuma:2.4.091e963bfda56
libsndfile@1.2.0-1+deb12u1
no fix listed

Open the chart page →

37,097
uptime-kumaschoenwald1.0.101 of 1See more

uptime-kuma schoenwald 1.0.10

1 of the 1 container images this version deploys carry CVE-2026-109828.

Container imageDigestPackageFixed in
louislam/uptime-kuma:2.5.4917318f9d7be
libsndfile@1.2.0-1+deb12u1
no fix listed

Open the chart page →

36,895
flaresolverrsudo-kraken-flaresolverrVerified publisher2.1.41 of 1See more

flaresolverr sudo-kraken-flaresolverr 2.1.4

1 of the 1 container images this version deploys carry CVE-2026-109828.

Container imageDigestPackageFixed in
ghcr.io/flaresolverr/flaresolverr:v3.4.67962759d99d7
libsndfile@1.2.0-1+deb12u1
no fix listed

Open the chart page →

39,489
speecht5test-opea1.0.01 of 1See more

speecht5 test-opea 1.0.0

1 of the 1 container images this version deploys carry CVE-2026-109828.

Container imageDigestPackageFixed in
opea/speecht5:1.0249afad3d268
libsndfile@1.2.0-1
no fix listed

Open the chart page →

10,517

Container images carrying it

48 by charts deploying them

A fixed version is listed for 0 of the 1 affected package.

Container imageDigestPackageFixed inUsed by
flaresolverr/flaresolverr:latest:v3.5.0139dfee1c6f8
libsndfile@1.2.0-1+deb12u1
no fix listed
4
ghcr.io/flaresolverr/flaresolverr:latest:v3.5.2c80ae007ce2c
libsndfile@1.2.0-1+deb12u1
no fix listed
4
gotenberg/gotenberg:8.36.087c16b9f3642
libsndfile@1.2.2-2+deb13u1
no fix listed
2
gotenberg/gotenberg:8:8.37.0f29984bd1e22
libsndfile@1.2.2-2+deb13u1
no fix listed
2
louislam/uptime-kuma:2.3.29aeb4e51d038
libsndfile@1.2.0-1+deb12u1
no fix listed
2
louislam/uptime-kuma:2.5.0a8610b3b4c38
libsndfile@1.2.0-1+deb12u1
no fix listed
2
louislam/uptime-kuma:2.5.5c74379ac4509
libsndfile@1.2.0-1+deb12u1
no fix listed
2
nousresearch/hermes-agent:v2026.9.24fca358f12efd
libsndfile@1.2.2-2+deb13u1
no fix listed
2
ghcr.io/flaresolverr/flaresolverr:v3.4.67962759d99d7
libsndfile@1.2.0-1+deb12u1
no fix listed
2
ghcr.io/lissy93/web-check:lateste98c0fe58157
libsndfile@1.2.0-1+deb12u1
no fix listed
2
ghcr.io/mealie-recipes/mealie:v3.28.08b02290f4d18
libsndfile@1.2.2-2+deb13u1
no fix listed
2
ghcr.io/music-assistant/server:2.10.645fdb050e069
libsndfile@1.2.2-2+deb13u1
no fix listed
2
ghcr.io/smarter-project/hydra/isolated-vm:main4457b79b24cd
libsndfile@1.2.0-1+deb12u1
no fix listed
2
archivebox/archivebox:0.9.708c21bb233130
libsndfile@1.2.2-2+deb13u1
no fix listed
1
castopod/castopod:1.12.101fd37280cbb2
libsndfile@1.2.0-1
no fix listed
1
castopod/castopod:1.15.54e4f0440520f
libsndfile@1.2.2-2+b1
no fix listed
1
chocobozzz/peertube:v8.1.5052712130691
libsndfile@1.2.2-2+deb13u1
no fix listed
1
codedesignplus/ms-emails-grpc:latesta58910e324ed
libsndfile@1.2.0-1+deb12u1
no fix listed
1
codedesignplus/ms-emails-rest:latestca3c2f3a0863
libsndfile@1.2.0-1+deb12u1
no fix listed
1
cybrarist/discount-bandit:v4.0.4e9e2447ac666
libsndfile@1.2.2-2+deb13u1
no fix listed
1
gotenberg/gotenberg:8-chromium0d28ae9a9644
libsndfile@1.2.2-2+deb13u1
no fix listed
1
gotenberg/gotenberg:8.30206a6c708fc6
libsndfile@1.2.2-2+deb13u1
no fix listed
1
gotenberg/gotenberg:8.3467097317623a
libsndfile@1.2.2-2+deb13u1
no fix listed
1
jaedb/iris:latest048cfbf58d57
libsndfile@1.2.0-1
no fix listed
1
langgenius/dify-api:0.6.11fca918260dd6
libsndfile@1.2.0-1
no fix listed
1
louislam/uptime-kuma:2.0.24c364ef96aad
libsndfile@1.2.0-1+deb12u1
no fix listed
1
louislam/uptime-kuma:2.5.4917318f9d7be
libsndfile@1.2.0-1+deb12u1
no fix listed
1
louislam/uptime-kuma:2.4.091e963bfda56
libsndfile@1.2.0-1+deb12u1
no fix listed
1
louislam/uptime-kuma:2.5.69912da7d7d9b
libsndfile@1.2.0-1+deb12u1
no fix listed
1
machines/filestash:latestaff504cd28a8
libsndfile@1.2.2-2+deb13u1
no fix listed
1
nousresearch/hermes-agent:v2026.8.27e0df6adebddf
libsndfile@1.2.2-2+deb13u1
no fix listed
1
opea/speecht5:1.0249afad3d268
libsndfile@1.2.0-1
no fix listed
1
opencsghq/agenticflow:ee-v0.6.5-241cba9c366f1
libsndfile@1.2.0-1+deb12u1
no fix listed
1
opencsghq/csgbot:v0.6.9-ee7d0271e26521
libsndfile@1.2.2-2+deb13u1
no fix listed
1
rocketchat/freeswitch:stablecfba5c20a5cc
libsndfile@1.2.0-1
no fix listed
1
sissbruecker/linkding:1.41.0-plusa222fb777e1f
libsndfile@1.2.0-1
no fix listed
1
thijsvanloef/palworld-server-docker:v2.7.1401d3eb5c053
libsndfile@1.2.2-2+deb13u1
no fix listed
1
ghcr.io/appscode/gotenberg:8.25f9104080d9a7
libsndfile@1.2.2-2+b1
no fix listed
1
ghcr.io/cjmalloy/jasper:v1.3.282726a947bb65b
libsndfile@1.2.0-1+deb12u1
no fix listed
1
ghcr.io/flanksource/facet:0.1.73a0323f4283e5
libsndfile@1.2.0-1+deb12u1
no fix listed
1
ghcr.io/flaresolverr/flaresolverr:v3.4.0ab535d1fef5d
libsndfile@1.2.0-1
no fix listed
1
ghcr.io/fluxerapp/fluxer-api:2026.820.164808f683541d5374
libsndfile@1.2.0-1+deb12u1
no fix listed
1
ghcr.io/fluxerapp/fluxer-media-proxy:2026.820.164955ced7544e6b3f
libsndfile@1.2.2-2+deb13u1
no fix listed
1
ghcr.io/karakeep-app/karakeep:0.33.2b069e4307dec
libsndfile@1.2.0-1+deb12u1
no fix listed
1
ghcr.io/lloesche/valheim-server:latest19f55bcf7bb6
libsndfile@1.2.2-2+deb13u1
no fix listed
1
ghcr.io/music-assistant/server:2.7.53522e8a7a8f0
libsndfile@1.2.0-1+deb12u1
no fix listed
1
ghcr.io/music-assistant/server:2.8.7eef3ee7810d0
libsndfile@1.2.0-1+deb12u1
no fix listed
1
ghcr.io/yurymkomarov/docker/kubernetes-kiosk-chromium:0.1.27bff29dcec72
libsndfile@1.2.0-1+deb12u1
no fix listed
1

syft 1.42.1 · advisories as of 15 Oct 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.