CVE-2026-112060

Unscored

Advisory

Published 18 Oct 2026In the index since 19 Oct 2026

Severity: Unscored; worst across findings
CVSS: —; base score, highest
EPSS: —; probability of exploitation
CISA KEV: Not listed; no confirmed exploitation
Charts affected: 848; of 18,196 indexed, latest versions
Container images: 721; deployed by those charts
Fix available: None; affected package

The matching OSV records carry no description.

Carried by container images the latest versions of 848 of 18,196 indexed charts deploy, on 721 images.

Affected package	Affected versions	Fixed in	Images
rtmpdumpdeb	2.4+20151223.gitfa8646d.1-2+b2, 2.4+20151223.gitfa8646d.1-2+b5, 2.4+20151223.gitfa8646d.1-2+dhi1, 2.6-1	no fix listed	721

OSV records: DEBIAN-CVE-2026-112060 ECHO-82ec-ae04-2010
Trending: Rank 35 in indexed charts, since 19 Oct 2026. See the ranking →

Charts affected

848 by stars

Chart	Latest	Affected images	Radar Score

Container images carrying it

721 by charts deploying them

A fixed version is listed for 0 of the 1 affected package.

Container image	Digest	Package	Fixed in	Used by
ghcr.io/port-labs/port-agent :v0.8.12	c92d1e223f5c	rtmpdump@2.4+20151223.gitfa8646d.1-2+b5	no fix listed	1
ghcr.io/pschichtel/s3-backup :0.7.0	17666811f6a7	rtmpdump@2.4+20151223.gitfa8646d.1-2+b5	no fix listed	1
ghcr.io/qubiva/qubiva :v0.3.2	cdf1e3329bfe	rtmpdump@2.4+20151223.gitfa8646d.1-2+b5	no fix listed	1
ghcr.io/rajnandan1/kener :3.2.18	2b993cb232eb	rtmpdump@2.4+20151223.gitfa8646d.1-2+b2	no fix listed	1
ghcr.io/reitermarkus/7d2d :main	39953b387b61	rtmpdump@2.4+20151223.gitfa8646d.1-2+b5	no fix listed	1
ghcr.io/rss-bridge/rss-bridge :latest	8e84691e08d2	rtmpdump@2.4+20151223.gitfa8646d.1-2+b2	no fix listed	1
ghcr.io/runwhen-contrib/runwhen-local :0.12.4	914e75d9f445	rtmpdump@2.4+20151223.gitfa8646d.1-2+b5	no fix listed	1
ghcr.io/samr037/node-debug-dashboard :0.4.1	447e847ed614	rtmpdump@2.4+20151223.gitfa8646d.1-2+b2	no fix listed	1
ghcr.io/sdr-enthusiasts/docker-flightradar24 :latest	b0b6b96adaa3	rtmpdump@2.4+20151223.gitfa8646d.1-2+b5	no fix listed	1
ghcr.io/sdwbgn/unitycatalog-helm/docker/unitycatalog-ui :0.2.1-5d668c1	ed07e7ca098d	rtmpdump@2.4+20151223.gitfa8646d.1-2+b2	no fix listed	1
ghcr.io/seanmorley15/adventurelog-backend :v0.13.0	0250d9cb0d74	rtmpdump@2.4+20151223.gitfa8646d.1-2+b5	no fix listed	1
ghcr.io/sergelogvinov/mongodb :8.0.10	1eee8e20a87f	rtmpdump@2.4+20151223.gitfa8646d.1-2+b2	no fix listed	1
ghcr.io/sergelogvinov/postgresql :16.15	fafb72e98f22	rtmpdump@2.4+20151223.gitfa8646d.1-2+b2	no fix listed	1
ghcr.io/sissbruecker/linkding :1.45.0	61b2eb9eed8e	rtmpdump@2.4+20151223.gitfa8646d.1-2+b5	no fix listed	1
ghcr.io/stalwartlabs/stalwart :v0.16.25	74e5a7d55303	rtmpdump@2.4+20151223.gitfa8646d.1-2+b5	no fix listed	1
ghcr.io/steadybit/agent :2.4.7	59927a1a1599	rtmpdump@2.4+20151223.gitfa8646d.1-2+b5	no fix listed	1
ghcr.io/sudo-kraken/3d-printing-cost-calculators :v1.1.1	220c5e4e1a3d	rtmpdump@2.4+20151223.gitfa8646d.1-2+b2	no fix listed	1
ghcr.io/sudo-kraken/authentik-webfinger-proxy :v1.1.1	e1351a977607	rtmpdump@2.4+20151223.gitfa8646d.1-2+b2	no fix listed	1
ghcr.io/sudo-kraken/fantasy-dice-chamber :v1.3.2	99fd4cb0f4fe	rtmpdump@2.4+20151223.gitfa8646d.1-2+b2	no fix listed	1
ghcr.io/sudo-kraken/finances-tracker :v1.1.1	c73527cde81c	rtmpdump@2.4+20151223.gitfa8646d.1-2+b2	no fix listed	1
ghcr.io/sudo-kraken/jf-pushover-webhook :v1.1.0	ee9cf22a39ab	rtmpdump@2.4+20151223.gitfa8646d.1-2+b2	no fix listed	1
ghcr.io/tarampampam/video-dl-bot :1.4.3	6daa2dc7556b	rtmpdump@2.4+20151223.gitfa8646d.1-2+b5	no fix listed	1
ghcr.io/tinyhumansai/openhuman-core :v0.64.15	c694baccddb4	rtmpdump@2.4+20151223.gitfa8646d.1-2+b2	no fix listed	1
ghcr.io/vshn/haproxy-with-mysql :1.0.0	a3c27ee3fb2f	rtmpdump@2.4+20151223.gitfa8646d.1-2+b2	no fix listed	1
ghcr.io/wgbh-mla/chowda :main	a63dadf119be	rtmpdump@2.4+20151223.gitfa8646d.1-2+b5	no fix listed	1
ghcr.io/wgbh-mla/pbcore-util :pr-6	6e04659a3baa	rtmpdump@2.4+20151223.gitfa8646d.1-2+b2	no fix listed	1
ghcr.io/wiremind/bitnami/keycloak :26.5.0-debian-12-r3	8622ea9e43c0	rtmpdump@2.4+20151223.gitfa8646d.1-2+b2	no fix listed	1
ghcr.io/wiremind/bitnami/rabbitmq :4.2.2-debian-12-r1	1572e12bc93c	rtmpdump@2.4+20151223.gitfa8646d.1-2+b2	no fix listed	1
ghcr.io/wiremind/grafana-pdf-exporter :v1.7	dbaa8527bf4c	rtmpdump@2.4+20151223.gitfa8646d.1-2+b2	no fix listed	1
ghcr.io/wittdennis/homeassistant-otbr :4.2.7	df1ba94bd5c0	rtmpdump@2.4+20151223.gitfa8646d.1-2+b5	no fix listed	1
ghcr.io/wizarrrr/wizarr :4.2.0-beta.3	d19d886d5090	rtmpdump@2.4+20151223.gitfa8646d.1-2+b2	no fix listed	1
ghcr.io/wundergraph/cosmo/otelcollector :0.18.1	5a6fe78d4d15	rtmpdump@2.4+20151223.gitfa8646d.1-2+b2	no fix listed	1
ghcr.io/yourls/yourls :1.10.6	19ffb4298581	rtmpdump@2.4+20151223.gitfa8646d.1-2+b5	no fix listed	1
ghcr.io/yurymkomarov/docker/kubernetes-kiosk-chromium :0.1.2	7bff29dcec72	rtmpdump@2.4+20151223.gitfa8646d.1-2+b2	no fix listed	1
ghcr.io/zammad/zammad :7.2.2-0003	c3c1f2df6881	rtmpdump@2.4+20151223.gitfa8646d.1-2+b5	no fix listed	1
ghcr.io/zoriya/kyoo_autosync :4.7.1	fbba58ddb1a6	rtmpdump@2.4+20151223.gitfa8646d.1-2+b2	no fix listed	1
ghcr.io/zoriya/kyoo_back :4.7.1	416e980f76a6	rtmpdump@2.4+20151223.gitfa8646d.1-2+b2	no fix listed	1
ghcr.io/zoriya/kyoo_scanner :4.7.1	7dc0ee57b628	rtmpdump@2.4+20151223.gitfa8646d.1-2+b2	no fix listed	1
public.ecr.aws/aktosecurity/akto-ai-automated-testing :latest	573542399fe4	rtmpdump@2.4+20151223.gitfa8646d.1-2+b2	no fix listed	1
public.ecr.aws/g4a0y2u8/unifie-store :staging-19925	a2057fabc948	rtmpdump@2.4+20151223.gitfa8646d.1-2+b2	no fix listed	1
public.ecr.aws/groundcovercom/temporalio/server :1.29.6-mini-20260702-1	70f191d0a80e	rtmpdump@2.4+20151223.gitfa8646d.1-2+b5	no fix listed	1
public.ecr.aws/jtekt-corporation/api-key-manager-gui :v0.1.1	0424fa47fbeb	rtmpdump@2.4+20151223.gitfa8646d.1-2+b5	no fix listed	1
public.ecr.aws/jtekt-corporation/image-storage-service :v1.16.17	b1493760c716	rtmpdump@2.4+20151223.gitfa8646d.1-2+b2	no fix listed	1
public.ecr.aws/jtekt-corporation/image-storage-service-gui :v1.9.4	34823c8abe00	rtmpdump@2.4+20151223.gitfa8646d.1-2+b2	no fix listed	1
public.ecr.aws/jtekt-corporation/shinsei-manager :v2.8.1	5cd62142d6ed	rtmpdump@2.4+20151223.gitfa8646d.1-2+b2	no fix listed	1
public.ecr.aws/jtekt-corporation/shinsei-manager-front :v1.5.5	f8fb4eea4071	rtmpdump@2.4+20151223.gitfa8646d.1-2+b2	no fix listed	1
public.ecr.aws/jtekt-corporation/time-series-storage-service :v1.5.1	046ef5c9ed50	rtmpdump@2.4+20151223.gitfa8646d.1-2+b2	no fix listed	1
public.ecr.aws/k2x0t8t6/kubeadapt/app/kubeadapt-k8s-pulse :v3.0.1	dc5a516c2333	rtmpdump@2.4+20151223.gitfa8646d.1-2+b2	no fix listed	1
public.ecr.aws/outerbounds/metaflow_metadata_service :v2.4.13	f7567ce3419d	rtmpdump@2.4+20151223.gitfa8646d.1-2+b2	no fix listed	1
public.ecr.aws/truefoundrycloud/async-service-distributor :5d48113bc678d694a0c8f8dabb2207c5aa2cfc53	f74851ce31f5	rtmpdump@2.4+20151223.gitfa8646d.1-2+b2	no fix listed	1