CVE-2026-113679
HighAdvisory
Published 20 Oct 2026In the index since 24 Oct 2026
- Severity
- High
- worst across findings
- CVSS
- 7.3
- base score, highest
- EPSS
- 0.002
- 5th percentile
- CISA KEV
- Not listed
- no confirmed exploitation
- Charts affected
- 380
- of 18,232 indexed, latest versions
- Container images
- 377
- deployed by those charts
- Fix available
- None
- affected package
The matching OSV records carry no description.
Carried by container images the latest versions of 380 of 18,232 indexed charts deploy, on 377 images.
| Affected package | Affected versions | Fixed in | Images |
|---|---|---|---|
| harfbuzzdeb | 0.9.27-1ubuntu1.1, 1.0.1-1ubuntu0.1, 1.7.2-1ubuntu1, 2.6.4-1ubuntu4+11 more | no fix listed | 377 |
- OSV records
- DEBIAN-CVE-2026-113679UBUNTU-CVE-2026-113679
Charts affected
380 by stars
| Chart | Latest | Affected images | Radar Score |
|---|---|---|---|
| datacube-wpsdatacube-chartsVerified publisher | 0.9.0 | 1 of 1See more | 7,630 |
| db-connection-testdb-connection-testVerified publisher | 0.1.0 | 1 of 1See more | 72,344 |
| ai-agentdevtron | 0.0.1 | 1 of 1See more | 11,500 |
| devtron-enterprisedevtron | 48.0.0 | 1 of 28See more | 219,746 |
| ai-agentdevtron-labs | 0.0.1 | 1 of 1See more | 11,500 |
| devtron-enterprisedevtron-labs | 48.0.0 | 1 of 28See more | 219,746 |
| difydify | 1.0.0 | 1 of 4See more | 46,852 |
| ownclouddjjudas21Verified publisher | 0.3.26 | 1 of 3See more | 11,204 |
| photoprismdjjudas21Verified publisher | 99.99.99 | 1 of 1See more | 100,739 |
| webtreesdjjudas21Verified publisher | 3.0.1 | 1 of 1See more | 4,263 |
| wizarrdjjudas21Verified publisher | 0.1.6 | 1 of 1See more | 93,963 |
| iotaeclipse-aeriosVerified publisher | 1.0.2 | 1 of 4See more | 17,623 |
| unifiegebackVerified publisher | 2.1.6 | 1 of 1See more | 9,014 |
| uptime-kumaegebackVerified publisher | 2.0.13 | 1 of 1See more | 42,524 |
| chaos-meshethereum-helm-chartsVerified publisher | 0.0.3 | 1 of 4See more | 17,122 |
| beeport-uiethersphereVerified publisher | 0.76.2 | 1 of 3See more | 30,628 |
| multichain-uiethersphereVerified publisher | 0.73.1 | 1 of 3See more | 30,555 |
| static-siteethersphereVerified publisher | 0.73.1 | 1 of 2See more | 6,881 |
| ferriscompanyferriscompany | 0.1.0 | 1 of 1See more | 76,422 |
| business-api-ecosystemfiware | 1.2.0 | 2 of 4See more | 173,007 |
| facetflanksourceVerified publisher | 0.1.73 | 1 of 1See more | 32,835 |
| fluxer-helmfluxer-helm | 0.3.0 | 2 of 18See more | 34,763 |
| gotenbergfmjstudios | 0.2.2 | 1 of 1See more | 11,515 |
| scanservjsgabe565Verified publisher | 0.9.2 | 1 of 1See more | 15,654 |
| garge-apigargeVerified publisher | 0.1.72 | 1 of 1See more | 989 |
| airsonicgeek-cookbookVerified publisher | 6.4.2 | 1 of 1See more | 19,237 |
| booksonic-airgeek-cookbookVerified publisher | 6.4.2 | 1 of 1See more | 20,695 |
| calibre-webgeek-cookbookVerified publisher | 8.4.2 | 1 of 1See more | 18,624 |
| double-takegeek-cookbookVerified publisher | 2.3.2 | 1 of 1See more | 86,239 |
| lidarrgeek-cookbookVerified publisher | 14.2.2 | 1 of 1See more | 16,248 |
| mopidygeek-cookbookVerified publisher | 0.1.2 | 1 of 1See more | 69,783 |
| nzbhydra2geek-cookbookVerified publisher | 10.4.2 | 1 of 1See more | 20,014 |
| openkmgeek-cookbookVerified publisher | 4.2.0 | 1 of 1See more | 30,423 |
| photoprismgeek-cookbookVerified publisher | 7.2.0 | 1 of 1See more | 22,464 |
| puppeteergeek-cookbookVerified publisher | 1.2.2 | 1 of 1See more | 16,778 |
| teedygeek-cookbookVerified publisher | 6.2.0 | 1 of 1See more | 28,516 |
| xtevegeek-cookbookVerified publisher | 8.4.2 | 1 of 1See more | 20,179 |
| geomapfishgeomapfish | 0.8.0 | 1 of 3See more | 8,072 |
| opentelemetry-demogpg-dev | 0.33.8 | 1 of 27See more | 199,455 |
| video-analytics-demogpu-operator | 0.1.9 | 1 of 3See more | 16,849 |
| web-checkhajowielandVerified publisher | 1.0.1 | 1 of 1See more | 8,462 |
| heliconehelicone | 0.1.42 | 1 of 14See more | 157,451 |
| archiveboxhelmforgeVerified publisher | 1.1.15 | 1 of 1See more | 7,111 |
| castopodhelmforgeVerified publisher | 1.2.13 | 1 of 3See more | 11,481 |
| chiefonboardinghelmforgeVerified publisher | 1.1.17 | 1 of 3See more | 9,393 |
| countlyhelmforgeVerified publisher | 1.2.10 | 1 of 3See more | 74,001 |
| dawarichhelmforgeVerified publisher | 1.0.8 | 1 of 4See more | 12,886 |
| discount-bandithelmforgeVerified publisher | 2.0.12 | 1 of 3See more | 41,958 |
| hermes-agenthelmforgeVerified publisher | 1.0.2 | 1 of 1See more | 8,093 |
| ib-gatewayhelmforgeVerified publisher | 1.0.1 | 1 of 1See more | 1,784 |
Container images carrying it
377 by charts deploying them
A fixed version is listed for 0 of the 1 affected package.
| Container image | Digest | Package | Fixed in | Used by |
|---|---|---|---|---|
| haveagitgat/ | 1256348872ce | harfbuzz | no fix listed | 1 |
| haveagitgat/ | 3ff0913202dd | harfbuzz | no fix listed | 1 |
| helicone/ | 4a913936c97b | harfbuzz | no fix listed | 1 |
| huginn/ | eab0db98264e | harfbuzz | no fix listed | 1 |
| huginn/ | c794eddc7b47 | harfbuzz | no fix listed | 1 |
| hyperledger/ | c65891b6c237 | harfbuzz | no fix listed | 1 |
| intel/ | aa8f5483a2ef | harfbuzz | no fix listed | 1 |
| intelowlproject/ | 0b22e547ea6b | harfbuzz | no fix listed | 1 |
| inventree/ | 7c1e251a6c52 | harfbuzz | no fix listed | 1 |
| ispras/ | 42aa9fa9f189 | harfbuzz | no fix listed | 1 |
| itzg/ | 2a77bff989e1 | harfbuzz | no fix listed | 1 |
| itzg/ | 5a2ab74ae179 | harfbuzz | no fix listed | 1 |
| jacobalberty/ | b3edc809a3ff | harfbuzz | no fix listed | 1 |
| jaedb/ | 048cfbf58d57 | harfbuzz | no fix listed | 1 |
| jakowenko/ | b858bac9e32a | harfbuzz | no fix listed | 1 |
| josh5/ | 4d49c4816260 | harfbuzz | no fix listed | 1 |
| kinseii/ | 7160eb143728 | harfbuzz | no fix listed | 1 |
| knspar/ | 0c4f0543ee58 | harfbuzz | no fix listed | 1 |
| laly9999/ | dd0e503913e1 | harfbuzz | no fix listed | 1 |
| langgenius/ | fca918260dd6 | harfbuzz | no fix listed | 1 |
| langgenius/ | 34412a22d1e1 | harfbuzz | no fix listed | 1 |
| langgenius/ | 8269050f192e | harfbuzz | no fix listed | 1 |
| langgenius/ | f37071eaf645 | harfbuzz | no fix listed | 1 |
| library/ | 8b19e819f2e1 | harfbuzz | no fix listed | 1 |
| library/ | 588609d76b21 | harfbuzz | no fix listed | 1 |
| library/ | b7faa1653c39 | harfbuzz | no fix listed | 1 |
| library/ | 6449e19d8184 | harfbuzz | no fix listed | 1 |
| library/ | 8f693eaa7e0a | harfbuzz | no fix listed | 1 |
| library/ | a98e6fda54fd | harfbuzz | no fix listed | 1 |
| library/ | c10791e6f690 | harfbuzz | no fix listed | 1 |
| library/ | d41127070014 | harfbuzz | no fix listed | 1 |
| library/ | da5aee29682d | harfbuzz | no fix listed | 1 |
| linuxchina/ | f758e2e567ee | harfbuzz | no fix listed | 1 |
| linuxserver/ | a847b5b2d860 | harfbuzz | no fix listed | 1 |
| linuxserver/ | 938810eca3d3 | harfbuzz | no fix listed | 1 |
| linuxserver/ | 2427dde159a2 | harfbuzz | no fix listed | 1 |
| linuxserver/ | 0ae315a3a456 | harfbuzz | no fix listed | 1 |
| linuxserver/ | ab105cc50322 | harfbuzz | no fix listed | 1 |
| lissy93/ | 5e4feb4acbd5 | harfbuzz | no fix listed | 1 |
| livekit/ | 1ab01641b366 | harfbuzz | no fix listed | 1 |
| louislam/ | 4c364ef96aad | harfbuzz | no fix listed | 1 |
| louislam/ | 917318f9d7be | harfbuzz | no fix listed | 1 |
| louislam/ | 91e963bfda56 | harfbuzz | no fix listed | 1 |
| louislam/ | a8610b3b4c38 | harfbuzz | no fix listed | 1 |
| louislam/ | c74379ac4509 | harfbuzz | no fix listed | 1 |
| louislam/ | ecd5b8c8b49f | harfbuzz | no fix listed | 1 |
| machines/ | 12bd8c30da4d | harfbuzz | no fix listed | 1 |
| mathesar/ | 091757cb01fe | harfbuzz | no fix listed | 1 |
| mbround18/ | 70bd4da591cd | harfbuzz | no fix listed | 1 |
| mcp/ | 5ffbf7f0a8aa | harfbuzz | no fix listed | 1 |