StackRadar

CVE-2026-111152

Medium

Advisory

Published 15 Oct 2026In the index since 16 Oct 2026
Severity
Medium
worst across findings
CVSS
5.5
base score, highest
EPSS
—
probability of exploitation
CISA KEV
Not listed
no confirmed exploitation
Charts affected
18
of 18,137 indexed, latest versions
Container images
15
deployed by those charts
Fix available
None
affected package

The matching OSV records carry no description.

Carried by container images the latest versions of 18 of 18,137 indexed charts deploy, on 15 images.

Affected packageAffected versionsFixed inImages
game-music-emudeb0.6.3-6, 0.6.3-7+b2no fix listed15
OSV records
DEBIAN-CVE-2026-111152

Charts affected

18 by stars
ChartLatestAffected imagesRadar Score
paperless-ngxfmjstudios0.2.81 of 5See more

paperless-ngx fmjstudios 0.2.8

1 of the 5 container images this version deploys carry CVE-2026-111152.

Container imageDigestPackageFixed in
ghcr.io/paperless-ngx/paperless-ngx:2.10.1a132c2ac7c57
game-music-emu@0.6.3-6
no fix listed

Open the chart page →

35,762
paperless-ngxpaperless-ngxVerified publisher0.3.241 of 3See more

paperless-ngx paperless-ngx 0.3.24

1 of the 3 container images this version deploys carry CVE-2026-111152.

Container imageDigestPackageFixed in
ghcr.io/paperless-ngx/paperless-ngx:3.3.06b94799bc769
game-music-emu@0.6.3-7+b2
no fix listed

Open the chart page →

9,544
hermes-agenthermes-agentVerified publisher1.18.01 of 1See more

hermes-agent hermes-agent 1.18.0

1 of the 1 container images this version deploys carry CVE-2026-111152.

Container imageDigestPackageFixed in
nousresearch/hermes-agent:v2026.9.24fca358f12efd
game-music-emu@0.6.3-7+b2
no fix listed

Open the chart page →

7,136
paperlesszekker6Verified publisher11.11.01 of 1See more

paperless zekker6 11.11.0

1 of the 1 container images this version deploys carry CVE-2026-111152.

Container imageDigestPackageFixed in
ghcr.io/paperless-ngx/paperless-ngx:3.3.06b94799bc769
game-music-emu@0.6.3-7+b2
no fix listed

Open the chart page →

5,406
paperless-ngxadnoctemVerified publisher0.5.01 of 5See more

paperless-ngx adnoctem 0.5.0

1 of the 5 container images this version deploys carry CVE-2026-111152.

Container imageDigestPackageFixed in
ghcr.io/paperless-ngx/paperless-ngx:3.3.06b94799bc769
game-music-emu@0.6.3-7+b2
no fix listed

Open the chart page →

27,422
paperless-ngxalexmorbo-paperless-ngxVerified publisher0.2.01 of 2See more

paperless-ngx alexmorbo-paperless-ngx 0.2.0

1 of the 2 container images this version deploys carry CVE-2026-111152.

Container imageDigestPackageFixed in
ghcr.io/paperless-ngx/paperless-ngx:2.20.5665f2f5cc548
game-music-emu@0.6.3-7+b2
no fix listed

Open the chart page →

14,741
paperless-ngxcrystalnetVerified publisher0.2.221 of 3See more

paperless-ngx crystalnet 0.2.22

1 of the 3 container images this version deploys carry CVE-2026-111152.

Container imageDigestPackageFixed in
ghcr.io/paperless-ngx/paperless-ngx:2.13.10642357c5dbd
game-music-emu@0.6.3-6
no fix listed

Open the chart page →

16,311
mealiedeimosfr-charts1.0.161 of 1See more

mealie deimosfr-charts 1.0.16

1 of the 1 container images this version deploys carry CVE-2026-111152.

Container imageDigestPackageFixed in
ghcr.io/mealie-recipes/mealie:v3.28.08b02290f4d18
game-music-emu@0.6.3-7+b2
no fix listed

Open the chart page →

4,069
mealiebdclark-helm-chartsVerified publisher0.1.161 of 1See more

mealie bdclark-helm-charts 0.1.16

1 of the 1 container images this version deploys carry CVE-2026-111152.

Container imageDigestPackageFixed in
ghcr.io/mealie-recipes/mealie:v3.28.08b02290f4d18
game-music-emu@0.6.3-7+b2
no fix listed

Open the chart page →

4,069
paperless-ngxcharts-derwitt-devVerified publisher2.1.71 of 1See more

paperless-ngx charts-derwitt-dev 2.1.7

1 of the 1 container images this version deploys carry CVE-2026-111152.

Container imageDigestPackageFixed in
ghcr.io/paperless-ngx/paperless-ngx:3.3.1cb91bfb468e6
game-music-emu@0.6.3-7+b2
no fix listed

Open the chart page →

5,406
csghubcsghubVerified publisher2.6.02 of 35See more

csghub csghub 2.6.0

2 of the 35 container images this version deploys carry CVE-2026-111152.

Container imageDigestPackageFixed in
opencsghq/agenticflow:ee-v0.6.5-241cba9c366f1
game-music-emu@0.6.3-6
no fix listed
opencsghq/csgbot:v0.6.9-ee7d0271e26521
game-music-emu@0.6.3-7+b2
no fix listed

Open the chart page →

67,811
fluxer-helmfluxer-helm0.3.02 of 18See more

fluxer-helm fluxer-helm 0.3.0

2 of the 18 container images this version deploys carry CVE-2026-111152.

Container imageDigestPackageFixed in
ghcr.io/fluxerapp/fluxer-api:2026.820.164808f683541d5374
game-music-emu@0.6.3-6
no fix listed
ghcr.io/fluxerapp/fluxer-media-proxy:2026.820.164955ced7544e6b3f
game-music-emu@0.6.3-7+b2
no fix listed

Open the chart page →

34,222
archiveboxhelmforgeVerified publisher1.1.141 of 1See more

archivebox helmforge 1.1.14

1 of the 1 container images this version deploys carry CVE-2026-111152.

Container imageDigestPackageFixed in
archivebox/archivebox:0.9.73d4720d86c0e9
game-music-emu@0.6.3-7+b2
no fix listed

Open the chart page →

6,393
hermes-agenthelmforgeVerified publisher1.0.11 of 1See more

hermes-agent helmforge 1.0.1

1 of the 1 container images this version deploys carry CVE-2026-111152.

Container imageDigestPackageFixed in
nousresearch/hermes-agent:v2026.9.24fca358f12efd
game-music-emu@0.6.3-7+b2
no fix listed

Open the chart page →

7,136
music-assistantkarljorgensen0.1.31 of 1See more

music-assistant karljorgensen 0.1.3

1 of the 1 container images this version deploys carry CVE-2026-111152.

Container imageDigestPackageFixed in
ghcr.io/music-assistant/server:2.8.7eef3ee7810d0
game-music-emu@0.6.3-6
no fix listed

Open the chart page →

8,612
filestashmt1905024.0.01 of 1See more

filestash mt190502 4.0.0

1 of the 1 container images this version deploys carry CVE-2026-111152.

Container imageDigestPackageFixed in
machines/filestash:latestaff504cd28a8
game-music-emu@0.6.3-7+b2
no fix listed

Open the chart page →

3,857
paperless-ngxoli-the-devVerified publisher1.3.11 of 1See more

paperless-ngx oli-the-dev 1.3.1

1 of the 1 container images this version deploys carry CVE-2026-111152.

Container imageDigestPackageFixed in
ghcr.io/paperless-ngx/paperless-ngx:3.3.06b94799bc769
game-music-emu@0.6.3-7+b2
no fix listed

Open the chart page →

5,406
speecht5test-opea1.0.01 of 1See more

speecht5 test-opea 1.0.0

1 of the 1 container images this version deploys carry CVE-2026-111152.

Container imageDigestPackageFixed in
opea/speecht5:1.0249afad3d268
game-music-emu@0.6.3-6
no fix listed

Open the chart page →

10,584

Container images carrying it

15 by charts deploying them

A fixed version is listed for 0 of the 1 affected package.

Container imageDigestPackageFixed inUsed by
ghcr.io/paperless-ngx/paperless-ngx:3.3.06b94799bc769
game-music-emu@0.6.3-7+b2
no fix listed
4
nousresearch/hermes-agent:v2026.9.24fca358f12efd
game-music-emu@0.6.3-7+b2
no fix listed
2
ghcr.io/mealie-recipes/mealie:v3.28.08b02290f4d18
game-music-emu@0.6.3-7+b2
no fix listed
2
archivebox/archivebox:0.9.73d4720d86c0e9
game-music-emu@0.6.3-7+b2
no fix listed
1
machines/filestash:latestaff504cd28a8
game-music-emu@0.6.3-7+b2
no fix listed
1
opea/speecht5:1.0249afad3d268
game-music-emu@0.6.3-6
no fix listed
1
opencsghq/agenticflow:ee-v0.6.5-241cba9c366f1
game-music-emu@0.6.3-6
no fix listed
1
opencsghq/csgbot:v0.6.9-ee7d0271e26521
game-music-emu@0.6.3-7+b2
no fix listed
1
ghcr.io/fluxerapp/fluxer-api:2026.820.164808f683541d5374
game-music-emu@0.6.3-6
no fix listed
1
ghcr.io/fluxerapp/fluxer-media-proxy:2026.820.164955ced7544e6b3f
game-music-emu@0.6.3-7+b2
no fix listed
1
ghcr.io/music-assistant/server:2.8.7eef3ee7810d0
game-music-emu@0.6.3-6
no fix listed
1
ghcr.io/paperless-ngx/paperless-ngx:2.13.10642357c5dbd
game-music-emu@0.6.3-6
no fix listed
1
ghcr.io/paperless-ngx/paperless-ngx:2.20.5665f2f5cc548
game-music-emu@0.6.3-7+b2
no fix listed
1
ghcr.io/paperless-ngx/paperless-ngx:2.10.1a132c2ac7c57
game-music-emu@0.6.3-6
no fix listed
1
ghcr.io/paperless-ngx/paperless-ngx:3.3.1cb91bfb468e6
game-music-emu@0.6.3-7+b2
no fix listed
1

syft 1.42.1 · advisories as of 16 Oct 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.