StackRadar

CVE-2026-113680

Medium

Advisory

Published 20 Oct 2026In the index since 24 Oct 2026
Severity
Medium
worst across findings
CVSS
6.8
base score, highest
EPSS
0.001
2nd percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
380
of 18,232 indexed, latest versions
Container images
377
deployed by those charts
Fix available
None
affected package

The matching OSV records carry no description.

Carried by container images the latest versions of 380 of 18,232 indexed charts deploy, on 377 images.

Affected packageAffected versionsFixed inImages
harfbuzzdeb0.9.27-1ubuntu1.1, 1.0.1-1ubuntu0.1, 1.7.2-1ubuntu1, 2.6.4-1ubuntu4+11 moreno fix listed377
OSV records
DEBIAN-CVE-2026-113680UBUNTU-CVE-2026-113680

Charts affected

380 by stars
ChartLatestAffected imagesRadar Score
nextcloudnextcloud9.4.11 of 1See more

nextcloud nextcloud 9.4.1

1 of the 1 container images this version deploys carry CVE-2026-113680.

Container imageDigestPackageFixed in
library/nextcloud:35.0.2-apachea588aa535370
harfbuzz@10.2.0-1+deb13u1
no fix listed

Open the chart page →

4,772
uptime-kumauptime-kumaVerified publisher4.2.01 of 1See more

uptime-kuma uptime-kuma 4.2.0

1 of the 1 container images this version deploys carry CVE-2026-113680.

Container imageDigestPackageFixed in
louislam/uptime-kuma:2.5.0a8610b3b4c38
harfbuzz@6.0.0+dfsg-3
no fix listed

Open the chart page →

42,586
zabbixzabbix-communityVerified publisher7.1.01 of 5See more

zabbix zabbix-community 7.1.0

1 of the 5 container images this version deploys carry CVE-2026-113680.

Container imageDigestPackageFixed in
zabbix/zabbix-web-service:ubuntu-7.0.23915b3183e054
harfbuzz@8.3.0-2build2
no fix listed

Open the chart page →

16,797
zammadzammadOfficialVerified publisher20.0.01 of 5See more

zammad zammad 20.0.0

1 of the 5 container images this version deploys carry CVE-2026-113680.

Container imageDigestPackageFixed in
ghcr.io/zammad/zammad:7.2.2-00120a71ee267028
harfbuzz@10.2.0-1+deb13u1
no fix listed

Open the chart page →

6,325
chaos-meshchaos-meshVerified publisher2.8.61 of 4See more

chaos-mesh chaos-mesh 2.8.6

1 of the 4 container images this version deploys carry CVE-2026-113680.

Container imageDigestPackageFixed in
ghcr.io/chaos-mesh/chaos-daemon:v2.8.65e735d875fe7
harfbuzz@6.0.0+dfsg-3
no fix listed

Open the chart page →

8,674
milvusmilvus4.0.311 of 5See more

milvus milvus 4.0.31

1 of the 5 container images this version deploys carry CVE-2026-113680.

Container imageDigestPackageFixed in
apachepulsar/pulsar:2.8.2d538416d5afe
harfbuzz@2.6.4-1ubuntu4
no fix listed

Open the chart page →

172,981
penpotpenpotOfficialVerified publisher1.11.41 of 5See more

penpot penpot 1.11.4

1 of the 5 container images this version deploys carry CVE-2026-113680.

Container imageDigestPackageFixed in
penpotapp/exporter:2.18.43394056911fc
harfbuzz@10.2.0-1+deb13u1+dhi1
no fix listed

Open the chart page →

5,188
difydoubanVerified publisher0.10.01 of 6See more

dify douban 0.10.0

1 of the 6 container images this version deploys carry CVE-2026-113680.

Container imageDigestPackageFixed in
langgenius/dify-plugin-daemon:0.5.1-local8269050f192e
harfbuzz@8.3.0-2build2
no fix listed

Open the chart page →

83,940
difydify-helmVerified publisher0.39.01 of 11See more

dify dify-helm 0.39.0

1 of the 11 container images this version deploys carry CVE-2026-113680.

Container imageDigestPackageFixed in
langgenius/dify-plugin-daemon:0.6.10-local34412a22d1e1
harfbuzz@8.3.0-2build2
no fix listed

Open the chart page →

64,891
openprojectopenproject-helm-chartsOfficialVerified publisher13.15.12 of 5See more

openproject openproject-helm-charts 13.15.1

2 of the 5 container images this version deploys carry CVE-2026-113680.

Container imageDigestPackageFixed in
openproject/hocuspocus:release-338001b288dc1359dfb5
harfbuzz@6.0.0+dfsg-3
no fix listed
openproject/openproject:17.9.2-slim7b50be7ff67d
harfbuzz@10.2.0-1+deb13u1
no fix listed

Open the chart page →

74,450
wazuhwazuh-helm-morgovedVerified publisher2.0.71 of 5See more

wazuh wazuh-helm-morgoved 2.0.7

1 of the 5 container images this version deploys carry CVE-2026-113680.

Container imageDigestPackageFixed in
kinseii/wazuh-agent:4.14.17160eb143728
harfbuzz@6.0.0+dfsg-3
no fix listed

Open the chart page →

14,099
zabbixcetic3.1.31 of 5See more

zabbix cetic 3.1.3

1 of the 5 container images this version deploys carry CVE-2026-113680.

Container imageDigestPackageFixed in
zabbix/zabbix-web-service:ubuntu-6.0.8ee4baa872280
harfbuzz@2.7.4-1ubuntu3.1
no fix listed

Open the chart page →

38,449
daskdask2024.1.11 of 2See more

dask dask 2024.1.1

1 of the 2 container images this version deploys carry CVE-2026-113680.

Container imageDigestPackageFixed in
ghcr.io/dask/dask-notebook:2024.1.0f53bde3acd4f
harfbuzz@2.7.4-1ubuntu3.1
no fix listed

Open the chart page →

15,679
gotenbergmaikumoriVerified publisher1.29.01 of 1See more

gotenberg maikumori 1.29.0

1 of the 1 container images this version deploys carry CVE-2026-113680.

Container imageDigestPackageFixed in
gotenberg/gotenberg:8.38.1aa552cc115db
harfbuzz@10.2.0-1+deb13u1
no fix listed

Open the chart page →

9,305
oneuptimeoneuptimeOfficialVerified publisher14.0.871 of 7See more

oneuptime oneuptime 14.0.87

1 of the 7 container images this version deploys carry CVE-2026-113680.

Container imageDigestPackageFixed in
oneuptime/probe:releasedd75b4631455
harfbuzz@6.0.0+dfsg-3
no fix listed

Open the chart page →

9,838
jellyfinutkuozdemirVerified publisher2.0.01 of 1See more

jellyfin utkuozdemir 2.0.0

1 of the 1 container images this version deploys carry CVE-2026-113680.

Container imageDigestPackageFixed in
linuxserver/jellyfin:10.7.72427dde159a2
harfbuzz@2.6.4-1ubuntu4
no fix listed

Open the chart page →

8,456
openclawopenclawVerified publisher1.118.21 of 2See more

openclaw openclaw 1.118.2

1 of the 2 container images this version deploys carry CVE-2026-113680.

Container imageDigestPackageFixed in
ghcr.io/browserless/chromium:v2.57.06bac628b3d82
harfbuzz@12.3.2-2
no fix listed

Open the chart page →

3,570
druiddruid-helmVerified publisher37.0.21 of 3See more

druid druid-helm 37.0.2

1 of the 3 container images this version deploys carry CVE-2026-113680.

Container imageDigestPackageFixed in
apache/druid:37.0.00116fb802786
harfbuzz@6.0.0+dfsg-3
no fix listed

Open the chart page →

4,762
paperless-ngxfmjstudios0.2.83 of 5See more

paperless-ngx fmjstudios 0.2.8

3 of the 5 container images this version deploys carry CVE-2026-113680.

Container imageDigestPackageFixed in
apache/tika:2.9.0.092d055a84e9e
harfbuzz@2.7.4-1ubuntu3.1
no fix listed
gotenberg/gotenberg:8.0.1cf0b9a7ca3cf
harfbuzz@6.0.0+dfsg-3
no fix listed
ghcr.io/paperless-ngx/paperless-ngx:2.10.1a132c2ac7c57
harfbuzz@6.0.0+dfsg-3
no fix listed

Open the chart page →

37,307
minecraft-proxyminecraft-server-chartsVerified publisher3.10.01 of 1See more

minecraft-proxy minecraft-server-charts 3.10.0

1 of the 1 container images this version deploys carry CVE-2026-113680.

Container imageDigestPackageFixed in
itzg/bungeecord:latest2a77bff989e1
harfbuzz@12.3.2-2
no fix listed

Open the chart page →

3,487
jellyfinbeluga-cloudVerified publisher2.3.01 of 1See more

jellyfin beluga-cloud 2.3.0

1 of the 1 container images this version deploys carry CVE-2026-113680.

Container imageDigestPackageFixed in
ghcr.io/beluga-cloud/jellyfin/jellyfin:10.8.1368f52b993a7f
harfbuzz@2.7.4-1ubuntu3.1
no fix listed

Open the chart page →

4,742
penpotcodechemVerified publisher1.0.102 of 3See more

penpot codechem 1.0.10

2 of the 3 container images this version deploys carry CVE-2026-113680.

Container imageDigestPackageFixed in
penpotapp/backend:1.16.0-betae978e871be07
harfbuzz@2.7.4-1ubuntu3.1
no fix listed
penpotapp/exporter:1.16.0-betafa7086ad92b1
harfbuzz@2.7.4-1ubuntu3.1
no fix listed

Open the chart page →

31,581
nextcloudgroundhog2k0.22.91 of 3See more

nextcloud groundhog2k 0.22.9

1 of the 3 container images this version deploys carry CVE-2026-113680.

Container imageDigestPackageFixed in
library/nextcloud:35.0.2:35.0.2-apachea588aa535370
harfbuzz@10.2.0-1+deb13u1
no fix listed

Open the chart page →

4,772
paperless-ngxpaperless-ngxVerified publisher0.3.251 of 3See more

paperless-ngx paperless-ngx 0.3.25

1 of the 3 container images this version deploys carry CVE-2026-113680.

Container imageDigestPackageFixed in
ghcr.io/paperless-ngx/paperless-ngx:3.3.3dba0242c1df1
harfbuzz@10.2.0-1+deb13u1
no fix listed

Open the chart page →

10,438
puppetserverpuppetserver9.5.22 of 5See more

puppetserver puppetserver 9.5.2

2 of the 5 container images this version deploys carry CVE-2026-113680.

Container imageDigestPackageFixed in
ghcr.io/voxpupuli/container-puppetdb:7.18.0-v1.5.0a56dfe91f5b1
harfbuzz@2.7.4-1ubuntu3.1
no fix listed
ghcr.io/voxpupuli/container-puppetserver:7.17.0-v1.5.0916746209ac5
harfbuzz@2.7.4-1ubuntu3.1
no fix listed

Open the chart page →

17,553
wazuh-agentavistoVerified publisher4.12.21 of 1See more

wazuh-agent avisto 4.12.2

1 of the 1 container images this version deploys carry CVE-2026-113680.

Container imageDigestPackageFixed in
ghcr.io/avistotelecom/docker-wazuh-agent:4.12.08766ba08bf1a
harfbuzz@6.0.0+dfsg-3
no fix listed

Open the chart page →

61,186
hadoopbigdata-chartsVerified publisher1.0.11 of 2See more

hadoop bigdata-charts 1.0.1

1 of the 2 container images this version deploys carry CVE-2026-113680.

Container imageDigestPackageFixed in
5200710/hadoop:3.2.3-java8092d3088a5fb
harfbuzz@2.6.4-1ubuntu4.2
no fix listed

Open the chart page →

13,382
selenium-gridselenium-grid0.62.12 of 4See more

selenium-grid selenium-grid 0.62.1

2 of the 4 container images this version deploys carry CVE-2026-113680.

Container imageDigestPackageFixed in
selenium/node-chrome:4.51.0-20261010b3f54a14452e
harfbuzz@8.3.0-2build2
no fix listed
selenium/node-firefox:4.51.0-20261010e6a109a147cd
harfbuzz@8.3.0-2build2
no fix listed

Open the chart page →

9,001
druidwiremindVerified publisher1.22.11 of 3See more

druid wiremind 1.22.1

1 of the 3 container images this version deploys carry CVE-2026-113680.

Container imageDigestPackageFixed in
apache/druid:29.0.10cef139b6bf1
harfbuzz@6.0.0+dfsg-3
no fix listed

Open the chart page →

8,796
photoprismandrenarchyVerified publisher8.15.01 of 1See more

photoprism andrenarchy 8.15.0

1 of the 1 container images this version deploys carry CVE-2026-113680.

Container imageDigestPackageFixed in
photoprism/photoprism:260728958642220223
harfbuzz@12.3.2-2
no fix listed

Open the chart page →

52,236
karakeephelmforgeVerified publisher1.2.112 of 3See more

karakeep helmforge 1.2.11

2 of the 3 container images this version deploys carry CVE-2026-113680.

Container imageDigestPackageFixed in
ghcr.io/browserless/chromium:v2.55.42ed0183564d7
harfbuzz@8.3.0-2build2
no fix listed
ghcr.io/karakeep-app/karakeep:0.34.0151cdd6b5f2e
harfbuzz@6.0.0+dfsg-3
no fix listed

Open the chart page →

11,431
openhabhelmforgeVerified publisher1.2.21 of 1See more

openhab helmforge 1.2.2

1 of the 1 container images this version deploys carry CVE-2026-113680.

Container imageDigestPackageFixed in
openhab/openhab:5.2.3fa50a6934dfd
harfbuzz@10.2.0-1+deb13u1
no fix listed

Open the chart page →

3,987
kubeflowkubeflow1.6.21 of 45See more

kubeflow kubeflow 1.6.2

1 of the 45 container images this version deploys carry CVE-2026-113680.

Container imageDigestPackageFixed in
library/python:3.7eedf63967cdb
harfbuzz@6.0.0+dfsg-3
no fix listed

Open the chart page →

270,523
local-ailocalai3.4.21 of 1See more

local-ai localai 3.4.2

1 of the 1 container images this version deploys carry CVE-2026-113680.

Container imageDigestPackageFixed in
quay.io/go-skynet/local-ai:latestf1bc435659b9
harfbuzz@8.3.0-2build2
no fix listed

Open the chart page →

4,417
unifi-controllerqonstruktVerified publisher2.6.11 of 1See more

unifi-controller qonstrukt 2.6.1

1 of the 1 container images this version deploys carry CVE-2026-113680.

Container imageDigestPackageFixed in
linuxserver/unifi-controller:8.0.240ae315a3a456
harfbuzz@2.6.4-1ubuntu4.2
no fix listed

Open the chart page →

11,780
grafana-pdf-exporterwiremindVerified publisher2.1.11 of 1See more

grafana-pdf-exporter wiremind 2.1.1

1 of the 1 container images this version deploys carry CVE-2026-113680.

Container imageDigestPackageFixed in
ghcr.io/wiremind/grafana-pdf-exporter:v1.7dbaa8527bf4c
harfbuzz@6.0.0+dfsg-3
no fix listed

Open the chart page →

11,450
thingsboardcetic0.1.21 of 2See more

thingsboard cetic 0.1.2

1 of the 2 container images this version deploys carry CVE-2026-113680.

Container imageDigestPackageFixed in
thingsboard/tb-postgres:latest2d17e4e36edc
harfbuzz@6.0.0+dfsg-3
no fix listed

Open the chart page →

6,387
dask-kubernetes-operatordask2026.3.01 of 1See more

dask-kubernetes-operator dask 2026.3.0

1 of the 1 container images this version deploys carry CVE-2026-113680.

Container imageDigestPackageFixed in
ghcr.io/dask/dask-kubernetes-operator:2026.3.03225d2bc6b3c
harfbuzz@10.2.0-1+b1
no fix listed

Open the chart page →

11,582
unifigeek-cookbookVerified publisher5.1.31 of 1See more

unifi geek-cookbook 5.1.3

1 of the 1 container images this version deploys carry CVE-2026-113680.

Container imageDigestPackageFixed in
jacobalberty/unifi:v7.4.162b3edc809a3ff
harfbuzz@1.7.2-1ubuntu1
no fix listed

Open the chart page →

13,713
terrariahalkeye0.4.21 of 2See more

terraria halkeye 0.4.2

1 of the 2 container images this version deploys carry CVE-2026-113680.

Container imageDigestPackageFixed in
ryshe/terraria:latest8a4f775d02ad
harfbuzz@6.0.0+dfsg-3
no fix listed

Open the chart page →

3,075
hermes-agenthermes-agentVerified publisher1.22.01 of 1See more

hermes-agent hermes-agent 1.22.0

1 of the 1 container images this version deploys carry CVE-2026-113680.

Container imageDigestPackageFixed in
nousresearch/hermes-agent:v0.22.59c5561579f3f
harfbuzz@10.2.0-1+deb13u1
no fix listed

Open the chart page →

4,519
oesopsmxVerified publisher4.0.321 of 25See more

oes opsmx 4.0.32

1 of the 25 container images this version deploys carry CVE-2026-113680.

Container imageDigestPackageFixed in
quay.io/opsmxpublic/spin-sample-pipeline:v1.0.1c6a934439421
harfbuzz@1.0.1-1ubuntu0.1
no fix listed

Open the chart page →

114,036
browserless-chromesagikazarmarkVerified publisher0.0.51 of 1See more

browserless-chrome sagikazarmark 0.0.5

1 of the 1 container images this version deploys carry CVE-2026-113680.

Container imageDigestPackageFixed in
browserless/chrome:1.48.0-chrome-stablec81ae5585b47
harfbuzz@2.6.4-1ubuntu4
no fix listed

Open the chart page →

100,726
pretixtechwolf12Verified publisher2026.8.01 of 3See more

pretix techwolf12 2026.8.0

1 of the 3 container images this version deploys carry CVE-2026-113680.

Container imageDigestPackageFixed in
pretix/standalone:2026.8.0ec17c2f761f7
harfbuzz@10.2.0-1+deb13u1
no fix listed

Open the chart page →

11,400
huginnutkuozdemirVerified publisher2.2.11 of 4See more

huginn utkuozdemir 2.2.1

1 of the 4 container images this version deploys carry CVE-2026-113680.

Container imageDigestPackageFixed in
huginn/huginn-single-process:4d17829cf6b15b004ad3f4be196303dca4944810c794eddc7b47
harfbuzz@1.7.2-1ubuntu1
no fix listed

Open the chart page →

80,636
structurizrvirtualrootVerified publisher0.5.01 of 1See more

structurizr virtualroot 0.5.0

1 of the 1 container images this version deploys carry CVE-2026-113680.

Container imageDigestPackageFixed in
structurizr/onpremises:2025.11.094b5ffb5119c8
harfbuzz@8.3.0-2build2
no fix listed

Open the chart page →

5,183
paperlesszekker6Verified publisher11.15.01 of 1See more

paperless zekker6 11.15.0

1 of the 1 container images this version deploys carry CVE-2026-113680.

Container imageDigestPackageFixed in
ghcr.io/paperless-ngx/paperless-ngx:3.3.49bc6e8248891
harfbuzz@10.2.0-1+deb13u1
no fix listed

Open the chart page →

5,588
paperless-ngxadnoctemVerified publisher0.5.13 of 5See more

paperless-ngx adnoctem 0.5.1

3 of the 5 container images this version deploys carry CVE-2026-113680.

Container imageDigestPackageFixed in
apache/tika:2.9.0.092d055a84e9e
harfbuzz@2.7.4-1ubuntu3.1
no fix listed
gotenberg/gotenberg:8.36.087c16b9f3642
harfbuzz@10.2.0-1+deb13u1
no fix listed
ghcr.io/paperless-ngx/paperless-ngx:3.3.2d232cba37cc0
harfbuzz@10.2.0-1+deb13u1
no fix listed

Open the chart page →

33,726
paperless-ngxalexmorbo-paperless-ngxVerified publisher0.2.01 of 2See more

paperless-ngx alexmorbo-paperless-ngx 0.2.0

1 of the 2 container images this version deploys carry CVE-2026-113680.

Container imageDigestPackageFixed in
ghcr.io/paperless-ngx/paperless-ngx:2.20.5665f2f5cc548
harfbuzz@10.2.0-1+b1
no fix listed

Open the chart page →

15,607
hermes-agentankra-chartsVerified publisher0.3.11 of 1See more

hermes-agent ankra-charts 0.3.1

1 of the 1 container images this version deploys carry CVE-2026-113680.

Container imageDigestPackageFixed in
nousresearch/hermes-agent:v2026.8.27e0df6adebddf
harfbuzz@10.2.0-1+deb13u1
no fix listed

Open the chart page →

8,783

Container images carrying it

377 by charts deploying them

A fixed version is listed for 0 of the 1 affected package.

Container imageDigestPackageFixed inUsed by
ghcr.io/graphprotocol/availability-oracle:sha-28312fd472a25038957
harfbuzz@6.0.0+dfsg-3
no fix listed
1
ghcr.io/haveagitgat/tdarr:2.00.18.23fbe4c29d14c
harfbuzz@2.6.4-1ubuntu4
no fix listed
1
ghcr.io/immich-app/immich-server:v3.3.5485d546a2e31
harfbuzz@10.2.0-1+deb13u1
no fix listed
1
ghcr.io/immich-app/immich-server:v3.3.4f6475c58b07a
harfbuzz@10.2.0-1+deb13u1
no fix listed
1
ghcr.io/itzg/minecraft-server:latest5cf064b103ea
harfbuzz@8.3.0-2build2
no fix listed
1
ghcr.io/jr0dd/puppeteer:v13.3.26047599cd78e
harfbuzz@2.6.4-1ubuntu4
no fix listed
1
ghcr.io/k8s-at-home/bazarr:v1.0.3fdb5501cdfb9
harfbuzz@2.6.4-1ubuntu4
no fix listed
1
ghcr.io/k8s-at-home/lidarr:v1.0.0.225554ebc1f90963
harfbuzz@2.6.4-1ubuntu4
no fix listed
1
ghcr.io/k8s-at-home/nzbhydra2:v3.14.2ef3670f7e0a8
harfbuzz@2.6.4-1ubuntu4
no fix listed
1
ghcr.io/k8s-at-home/xteve:v2.2.0.200292b3614670f
harfbuzz@2.6.4-1ubuntu4
no fix listed
1
ghcr.io/karakeep-app/karakeep:0.34.0151cdd6b5f2e
harfbuzz@6.0.0+dfsg-3
no fix listed
1
ghcr.io/krateoplatformops/finops-database-handler:0.5.32550427988e3
harfbuzz@6.0.0+dfsg-3
no fix listed
1
ghcr.io/krateoplatformops/finops-webservice-api-mock:0.1.00877e9452d14
harfbuzz@6.0.0+dfsg-3
no fix listed
1
ghcr.io/kvaps/opennebula:v5.12.0.4-1e28e0e7de11b
harfbuzz@2.6.4-1ubuntu4
no fix listed
1
ghcr.io/kvaps/opennebula-exporter:v5.12.0.401563adc95fd
harfbuzz@2.6.4-1ubuntu4
no fix listed
1
ghcr.io/kvaps/opennebula-exporter:v5.12.0.4-12b92df1143b9
harfbuzz@2.6.4-1ubuntu4
no fix listed
1
ghcr.io/kvaps/opennebula-flow:v5.12.0.4-1600221f0f43f
harfbuzz@2.6.4-1ubuntu4
no fix listed
1
ghcr.io/kvaps/opennebula-gate:v5.12.0.4-1a85e03d8bc1d
harfbuzz@2.6.4-1ubuntu4
no fix listed
1
ghcr.io/libreconnect/ferriscompany:0.1.0-rc6ed86db9f0efe
harfbuzz@6.0.0+dfsg-3
no fix listed
1
ghcr.io/linkwarden/linkwarden:v2.16.30664c28a039b
harfbuzz@6.0.0+dfsg-3
no fix listed
1
ghcr.io/linuxserver/audacity:version-3.0.2cdf203db1e50
harfbuzz@2.6.4-1ubuntu4
no fix listed
1
ghcr.io/linuxserver/booksonic:version-1.2677efca1065d
harfbuzz@1.7.2-1ubuntu1
no fix listed
1
ghcr.io/linuxserver/booksonic-air:version-v2009.1.0baa4fa9549dc
harfbuzz@1.7.2-1ubuntu1
no fix listed
1
ghcr.io/linuxserver/digikam:version-7.3.055b4c7f320ae
harfbuzz@1.7.2-1ubuntu1
no fix listed
1
ghcr.io/linuxserver/doublecommander:version-0.8.2-1d92969a929c2
harfbuzz@1.7.2-1ubuntu1
no fix listed
1
ghcr.io/linuxserver/papermerge:version-v2.0.198ba2dd3f0bd
harfbuzz@2.6.4-1ubuntu4.2
no fix listed
1
ghcr.io/linuxserver/remmina:version-1.2.0-rcgit.29dfsg-1ubuntu105955792e00f
harfbuzz@1.7.2-1ubuntu1
no fix listed
1
ghcr.io/linuxserver/sqlitebrowser:version-3.12.2-02876202105241947ubuntu18.04.1426e79828c4b
harfbuzz@1.7.2-1ubuntu1
no fix listed
1
ghcr.io/lissy93/web-check:latest1cd3f9599dd5
harfbuzz@6.0.0+dfsg-3
no fix listed
1
ghcr.io/maastrichtu-ids/rstudio:latest981aa4c109e1
harfbuzz@8.3.0-2build2
no fix listed
1
ghcr.io/maybe-finance/maybe:0.5.0c6ab95ca9130
harfbuzz@6.0.0+dfsg-3
no fix listed
1
ghcr.io/music-assistant/server:2.7.53522e8a7a8f0
harfbuzz@6.0.0+dfsg-3
no fix listed
1
ghcr.io/music-assistant/server:2.10.645fdb050e069
harfbuzz@10.2.0-1+deb13u1
no fix listed
1
ghcr.io/music-assistant/server:2.8.7eef3ee7810d0
harfbuzz@6.0.0+dfsg-3
no fix listed
1
ghcr.io/nathanvaughn/webtrees:2.2.627597e9f4664
harfbuzz@10.2.0-1+deb13u1
no fix listed
1
ghcr.io/nefelim4ag/k8s-dummy-lb:0.0.6f12291f7cce5
harfbuzz@10.2.0-1+deb13u1
no fix listed
1
ghcr.io/nefelim4ag/pingdom-operator:0.0.15f8c7afdcf439
harfbuzz@6.0.0+dfsg-3
no fix listed
1
ghcr.io/opencost/opencost-parquet-exporter:v0.2.1ce85ef0ce665
harfbuzz@6.0.0+dfsg-3
no fix listed
1
ghcr.io/open-telemetry/demo:1.12.0-loadgenerator85c9935ff31b
harfbuzz@6.0.0+dfsg-3
no fix listed
1
ghcr.io/open-telemetry/demo:3.1.0-fraud-detectiona07ee694304b
harfbuzz@6.0.0+dfsg-3
no fix listed
1
ghcr.io/open-telemetry/demo:3.1.0-load-generatorb130d6cee6cb
harfbuzz@6.0.0+dfsg-3
no fix listed
1
ghcr.io/openunison/openunison-k8s:1.0.53d8c8e5a4830f
harfbuzz@8.3.0-2build2
no fix listed
1
ghcr.io/oznu/homebridge:2022-07-08ff2af53897e7
harfbuzz@2.6.4-1ubuntu4
no fix listed
1
ghcr.io/paperless-ngx/paperless-ngx:2.13.10642357c5dbd
harfbuzz@6.0.0+dfsg-3
no fix listed
1
ghcr.io/paperless-ngx/paperless-ngx:2.20.134b05bcd28e69
harfbuzz@10.2.0-1+b1
no fix listed
1
ghcr.io/paperless-ngx/paperless-ngx:2.20.357ad9565bff3
harfbuzz@10.2.0-1+b1
no fix listed
1
ghcr.io/paperless-ngx/paperless-ngx:2.20.5665f2f5cc548
harfbuzz@10.2.0-1+b1
no fix listed
1
ghcr.io/paperless-ngx/paperless-ngx:2.10.1a132c2ac7c57
harfbuzz@6.0.0+dfsg-3
no fix listed
1
ghcr.io/paperless-ngx/paperless-ngx:3.1.3aa810a36942c
harfbuzz@10.2.0-1+deb13u1
no fix listed
1
ghcr.io/paperless-ngx/paperless-ngx:2.0.1ab255bea133e
harfbuzz@6.0.0+dfsg-3
no fix listed
1

syft 1.42.1 · advisories as of 24 Oct 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.