StackRadar

CVE-2026-113680

Medium

Advisory

Published 20 Oct 2026In the index since 24 Oct 2026
Severity
Medium
worst across findings
CVSS
6.8
base score, highest
EPSS
0.001
2nd percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
380
of 18,232 indexed, latest versions
Container images
377
deployed by those charts
Fix available
None
affected package

The matching OSV records carry no description.

Carried by container images the latest versions of 380 of 18,232 indexed charts deploy, on 377 images.

Affected packageAffected versionsFixed inImages
harfbuzzdeb0.9.27-1ubuntu1.1, 1.0.1-1ubuntu0.1, 1.7.2-1ubuntu1, 2.6.4-1ubuntu4+11 moreno fix listed377
OSV records
DEBIAN-CVE-2026-113680UBUNTU-CVE-2026-113680

Charts affected

380 by stars
ChartLatestAffected imagesRadar Score
dltbrokerassist-iot-distributed-broker0.2.02 of 9See more

dltbroker assist-iot-distributed-broker 0.2.0

2 of the 9 container images this version deploys carry CVE-2026-113680.

Container imageDigestPackageFixed in
hyperledger/fabric-ca-tools:latest4ce6f43ded2e
harfbuzz@1.0.1-1ubuntu0.1
no fix listed
hyperledger/fabric-couchdb:0.4.15f6c724592abf
harfbuzz@1.0.1-1ubuntu0.1
no fix listed

Open the chart page →

190,670
dltloggingassist-iot-logging-auditing0.2.02 of 9See more

dltlogging assist-iot-logging-auditing 0.2.0

2 of the 9 container images this version deploys carry CVE-2026-113680.

Container imageDigestPackageFixed in
hyperledger/fabric-ca-tools:latest4ce6f43ded2e
harfbuzz@1.0.1-1ubuntu0.1
no fix listed
hyperledger/fabric-couchdb:0.4.15f6c724592abf
harfbuzz@1.0.1-1ubuntu0.1
no fix listed

Open the chart page →

190,650
music-assistantbdclark-helm-chartsVerified publisher0.4.151 of 1See more

music-assistant bdclark-helm-charts 0.4.15

1 of the 1 container images this version deploys carry CVE-2026-113680.

Container imageDigestPackageFixed in
ghcr.io/music-assistant/server:2.10.7dce482dc3bf4
harfbuzz@10.2.0-1+deb13u1
no fix listed

Open the chart page →

5,760
typo3christianhuthVerified publisher8.0.11 of 1See more

typo3 christianhuth 8.0.1

1 of the 1 container images this version deploys carry CVE-2026-113680.

Container imageDigestPackageFixed in
crinis/typo3:legacy-13.4.365636db17b924
harfbuzz@10.2.0-1+deb13u1
no fix listed

Open the chart page →

5,159
tensorflow-notebookcloudnativeapp0.1.21 of 1See more

tensorflow-notebook cloudnativeapp 0.1.2

1 of the 1 container images this version deploys carry CVE-2026-113680.

Container imageDigestPackageFixed in
tensorflow/tensorflow:1.6.0-devel1e3172090703
harfbuzz@1.0.1-1ubuntu0.1
no fix listed

Open the chart page →

92,153
dawarichcogitriVerified publisher2.10.01 of 3See more

dawarich cogitri 2.10.0

1 of the 3 container images this version deploys carry CVE-2026-113680.

Container imageDigestPackageFixed in
freikin/dawarich:1.16.0b533e6eac446
harfbuzz@10.2.0-1+deb13u1
no fix listed

Open the chart page →

7,142
cosmotech-copilot-apicosmotech-apiVerified publisher0.1.11 of 1See more

cosmotech-copilot-api cosmotech-api 0.1.1

1 of the 1 container images this version deploys carry CVE-2026-113680.

Container imageDigestPackageFixed in
ghcr.io/cosmo-tech/cosmotech-copilot-api:latesta2be95de450c
harfbuzz@10.2.0-1+b1
no fix listed

Open the chart page →

14,069
paperless-ngxcrystalnetVerified publisher0.2.221 of 3See more

paperless-ngx crystalnet 0.2.22

1 of the 3 container images this version deploys carry CVE-2026-113680.

Container imageDigestPackageFixed in
ghcr.io/paperless-ngx/paperless-ngx:2.13.10642357c5dbd
harfbuzz@6.0.0+dfsg-3
no fix listed

Open the chart page →

17,068
mealiedeimosfr-charts1.0.171 of 1See more

mealie deimosfr-charts 1.0.17

1 of the 1 container images this version deploys carry CVE-2026-113680.

Container imageDigestPackageFixed in
ghcr.io/mealie-recipes/mealie:v3.29.078eb28b8776d
harfbuzz@10.2.0-1+deb13u1
no fix listed

Open the chart page →

4,362
dragonfly-stackdragonflyVerified publisher0.1.21 of 7See more

dragonfly-stack dragonfly 0.1.2

1 of the 7 container images this version deploys carry CVE-2026-113680.

Container imageDigestPackageFixed in
dragonflyoss/client:v0.1.82edf3e921f4e0
harfbuzz@6.0.0+dfsg-3
no fix listed

Open the chart page →

93,216
craftycontrollerdrewburr-labs-helm-chartsVerified publisher0.3.01 of 1See more

craftycontroller drewburr-labs-helm-charts 0.3.0

1 of the 1 container images this version deploys carry CVE-2026-113680.

Container imageDigestPackageFixed in
registry.gitlab.com/crafty-controller/crafty-4:latest7b6e87514259
harfbuzz@8.3.0-2build2
no fix listed

Open the chart page →

42,115
rstudiodsri-helm-charts0.1.281 of 1See more

rstudio dsri-helm-charts 0.1.28

1 of the 1 container images this version deploys carry CVE-2026-113680.

Container imageDigestPackageFixed in
ghcr.io/maastrichtu-ids/rstudio:latest981aa4c109e1
harfbuzz@8.3.0-2build2
no fix listed

Open the chart page →

76,129
enbuildenbuildVerified publisher0.0.501 of 6See more

enbuild enbuild 0.0.50

1 of the 6 container images this version deploys carry CVE-2026-113680.

Container imageDigestPackageFixed in
registry.gitlab.com/enbuild-staging/vivsoft-platform-ui/enbuild-mq-consumer:1.0.310e3cd8c7776d
harfbuzz@6.0.0+dfsg-3
no fix listed

Open the chart page →

78,014
iobrokereugen0.2.61 of 1See more

iobroker eugen 0.2.6

1 of the 1 container images this version deploys carry CVE-2026-113680.

Container imageDigestPackageFixed in
ghcr.io/buanet/iobroker:v9.1.2ca7dc7362968
harfbuzz@6.0.0+dfsg-3
no fix listed

Open the chart page →

80,348
api-umbrellafiware0.2.01 of 1See more

api-umbrella fiware 0.2.0

1 of the 1 container images this version deploys carry CVE-2026-113680.

Container imageDigestPackageFixed in
fiware/api-umbrella:0.18.06e5159d29c3c
harfbuzz@1.7.2-1ubuntu1
no fix listed

Open the chart page →

77,674
bazarrgeek-cookbookVerified publisher10.6.21 of 1See more

bazarr geek-cookbook 10.6.2

1 of the 1 container images this version deploys carry CVE-2026-113680.

Container imageDigestPackageFixed in
ghcr.io/k8s-at-home/bazarr:v1.0.3fdb5501cdfb9
harfbuzz@2.6.4-1ubuntu4
no fix listed

Open the chart page →

19,509
calibregeek-cookbookVerified publisher5.4.21 of 1See more

calibre geek-cookbook 5.4.2

1 of the 1 container images this version deploys carry CVE-2026-113680.

Container imageDigestPackageFixed in
linuxserver/calibre:version-v5.21.0a847b5b2d860
harfbuzz@1.7.2-1ubuntu1
no fix listed

Open the chart page →

25,150
games-on-whalesgeek-cookbookVerified publisher1.8.22 of 7See more

games-on-whales geek-cookbook 1.8.2

2 of the 7 container images this version deploys carry CVE-2026-113680.

Container imageDigestPackageFixed in
ghcr.io/games-on-whales/retroarch:1.0.0103fbcec2314
harfbuzz@2.6.4-1ubuntu4
no fix listed
ghcr.io/games-on-whales/steam:1.0.09b6105be7ad0
harfbuzz@2.6.4-1ubuntu4
no fix listed

Open the chart page →

111,920
homebridgegeek-cookbookVerified publisher5.3.21 of 1See more

homebridge geek-cookbook 5.3.2

1 of the 1 container images this version deploys carry CVE-2026-113680.

Container imageDigestPackageFixed in
ghcr.io/oznu/homebridge:2022-07-08ff2af53897e7
harfbuzz@2.6.4-1ubuntu4
no fix listed

Open the chart page →

85,999
stashgeek-cookbookVerified publisher3.4.21 of 1See more

stash geek-cookbook 3.4.2

1 of the 1 container images this version deploys carry CVE-2026-113680.

Container imageDigestPackageFixed in
stashapp/stash:latest24dbd7607174
harfbuzz@2.6.4-1ubuntu4
no fix listed

Open the chart page →

18,153
tdarrgeek-cookbookVerified publisher4.6.21 of 2See more

tdarr geek-cookbook 4.6.2

1 of the 2 container images this version deploys carry CVE-2026-113680.

Container imageDigestPackageFixed in
haveagitgat/tdarr:2.00.181256348872ce
harfbuzz@2.6.4-1ubuntu4
no fix listed

Open the chart page →

103,481
castopodh2mVerified publisher1.12.101 of 3See more

castopod h2m 1.12.10

1 of the 3 container images this version deploys carry CVE-2026-113680.

Container imageDigestPackageFixed in
castopod/castopod:1.12.101fd37280cbb2
harfbuzz@6.0.0+dfsg-3
no fix listed

Open the chart page →

77,092
uptime-kumahelmforgeVerified publisher1.5.171 of 1See more

uptime-kuma helmforge 1.5.17

1 of the 1 container images this version deploys carry CVE-2026-113680.

Container imageDigestPackageFixed in
louislam/uptime-kuma:2.5.69912da7d7d9b
harfbuzz@6.0.0+dfsg-3
no fix listed

Open the chart page →

42,372
immichimmich-helmVerified publisher0.5.11 of 4See more

immich immich-helm 0.5.1

1 of the 4 container images this version deploys carry CVE-2026-113680.

Container imageDigestPackageFixed in
ghcr.io/immich-app/immich-server:v3.3.4f6475c58b07a
harfbuzz@10.2.0-1+deb13u1
no fix listed

Open the chart page →

10,531
iris-webappiris-webapp0.2.41 of 2See more

iris-webapp iris-webapp 0.2.4

1 of the 2 container images this version deploys carry CVE-2026-113680.

Container imageDigestPackageFixed in
ghcr.io/dfir-iris/iriswebapp_app:v2.4.26e59ebde55709
harfbuzz@10.2.0-1+b1
no fix listed

Open the chart page →

14,478
difykubeblocksVerified publisher0.5.11 of 5See more

dify kubeblocks 0.5.1

1 of the 5 container images this version deploys carry CVE-2026-113680.

Container imageDigestPackageFixed in
langgenius/dify-api:0.6.11fca918260dd6
harfbuzz@6.0.0+dfsg-3
no fix listed

Open the chart page →

23,769
owncloudkubernetes-homelab-helm-chartsVerified publisher0.3.01 of 3See more

owncloud kubernetes-homelab-helm-charts 0.3.0

1 of the 3 container images this version deploys carry CVE-2026-113680.

Container imageDigestPackageFixed in
owncloud/server:10.16.6879638cd818b
harfbuzz@2.7.4-1ubuntu3.2
no fix listed

Open the chart page →

8,818
opennebulakvaps2.1.15 of 9See more

opennebula kvaps 2.1.1

5 of the 9 container images this version deploys carry CVE-2026-113680.

Container imageDigestPackageFixed in
ghcr.io/kvaps/opennebula:v5.12.0.4-1e28e0e7de11b
harfbuzz@2.6.4-1ubuntu4
no fix listed
ghcr.io/kvaps/opennebula-exporter:v5.12.0.401563adc95fd
harfbuzz@2.6.4-1ubuntu4
no fix listed
ghcr.io/kvaps/opennebula-exporter:v5.12.0.4-12b92df1143b9
harfbuzz@2.6.4-1ubuntu4
no fix listed
ghcr.io/kvaps/opennebula-flow:v5.12.0.4-1600221f0f43f
harfbuzz@2.6.4-1ubuntu4
no fix listed
ghcr.io/kvaps/opennebula-gate:v5.12.0.4-1a85e03d8bc1d
harfbuzz@2.6.4-1ubuntu4
no fix listed

Open the chart page →

270,643
flaresolverrlib42Verified publisher2.0.01 of 1See more

flaresolverr lib42 2.0.0

1 of the 1 container images this version deploys carry CVE-2026-113680.

Container imageDigestPackageFixed in
ghcr.io/flaresolverr/flaresolverr:v3.4.0ab535d1fef5d
harfbuzz@6.0.0+dfsg-3
no fix listed

Open the chart page →

46,293
music-assistant-serverlmatfyVerified publisher0.1.91 of 1See more

music-assistant-server lmatfy 0.1.9

1 of the 1 container images this version deploys carry CVE-2026-113680.

Container imageDigestPackageFixed in
ghcr.io/music-assistant/server:2.7.53522e8a7a8f0
harfbuzz@6.0.0+dfsg-3
no fix listed

Open the chart page →

9,005
flaresolverrm0nsterrr-flaresolverrVerified publisher2.4.11 of 1See more

flaresolverr m0nsterrr-flaresolverr 2.4.1

1 of the 1 container images this version deploys carry CVE-2026-113680.

Container imageDigestPackageFixed in
ghcr.io/flaresolverr/flaresolverr:v3.5.2c80ae007ce2c
harfbuzz@6.0.0+dfsg-3
no fix listed

Open the chart page →

16,764
drillmagasin-drill0.9.01 of 3See more

drill magasin-drill 0.9.0

1 of the 3 container images this version deploys carry CVE-2026-113680.

Container imageDigestPackageFixed in
merlos/zookeeper:3.9.3a38fc7e09ed7
harfbuzz@6.0.0+dfsg-3
no fix listed

Open the chart page →

6,762
mockservermockserverOfficialVerified publisher9.1.01 of 1See more

mockserver mockserver 9.1.0

1 of the 1 container images this version deploys carry CVE-2026-113680.

Container imageDigestPackageFixed in
mockserver/mockserver:mockserver-9.1.00ed883c9b2d0
harfbuzz@6.0.0+dfsg-3
no fix listed

Open the chart page →

1,254
food-managermoreillonVerified publisher0.5.01 of 2See more

food-manager moreillon 0.5.0

1 of the 2 container images this version deploys carry CVE-2026-113680.

Container imageDigestPackageFixed in
moreillon/food-manager:lateste8fd856e593d
harfbuzz@6.0.0+dfsg-3
no fix listed

Open the chart page →

71,114
papermergenicholaswildeVerified publisher1.0.21 of 1See more

papermerge nicholaswilde 1.0.2

1 of the 1 container images this version deploys carry CVE-2026-113680.

Container imageDigestPackageFixed in
ghcr.io/linuxserver/papermerge:version-v2.0.198ba2dd3f0bd
harfbuzz@2.6.4-1ubuntu4.2
no fix listed

Open the chart page →

21,954
opentelemetry-demoopentelemetry-helmOfficialVerified publisher0.42.62 of 34See more

opentelemetry-demo opentelemetry-helm 0.42.6

2 of the 34 container images this version deploys carry CVE-2026-113680.

Container imageDigestPackageFixed in
ghcr.io/open-telemetry/demo:3.1.0-fraud-detectiona07ee694304b
harfbuzz@6.0.0+dfsg-3
no fix listed
ghcr.io/open-telemetry/demo:3.1.0-load-generatorb130d6cee6cb
harfbuzz@6.0.0+dfsg-3
no fix listed

Open the chart page →

29,432
paperless-ngxpaperlessVerified publisher0.4.11 of 3See more

paperless-ngx paperless 0.4.1

1 of the 3 container images this version deploys carry CVE-2026-113680.

Container imageDigestPackageFixed in
ghcr.io/paperless-ngx/paperless-ngxdigest-pinned9bc6e8248891
harfbuzz@10.2.0-1+deb13u1
no fix listed

Open the chart page →

10,012
peertubepeertubeVerified publisher0.1.31 of 1See more

peertube peertube 0.1.3

1 of the 1 container images this version deploys carry CVE-2026-113680.

Container imageDigestPackageFixed in
chocobozzz/peertube:v8.1.5052712130691
harfbuzz@10.2.0-1+deb13u1
no fix listed

Open the chart page →

9,059
portraitportraitVerified publisher0.2.131 of 8See more

portrait portrait 0.2.13

1 of the 8 container images this version deploys carry CVE-2026-113680.

Container imageDigestPackageFixed in
treskon/portrait-web-setup:DEV-latesta475d80e4ecf
harfbuzz@6.0.0+dfsg-3
no fix listed

Open the chart page →

96,248
phpqonstruktVerified publisher0.2.01 of 1See more

php qonstrukt 0.2.0

1 of the 1 container images this version deploys carry CVE-2026-113680.

Container imageDigestPackageFixed in
qonstrukt/php:8.4-v8-apache089af7925aa1
harfbuzz@8.3.0-2build2
no fix listed

Open the chart page →

64,349
napcatredish101Verified publisher0.1.31 of 1See more

napcat redish101 0.1.3

1 of the 1 container images this version deploys carry CVE-2026-113680.

Container imageDigestPackageFixed in
mlikiowa/napcat-docker:latestf611790ecffa
harfbuzz@2.7.4-1ubuntu3.1
no fix listed

Open the chart page →

69,797
fluent-bitromanow-helm-chartsVerified publisher1.7.31 of 1See more

fluent-bit romanow-helm-charts 1.7.3

1 of the 1 container images this version deploys carry CVE-2026-113680.

Container imageDigestPackageFixed in
fluent/fluent-bit:4.0-debuge76397ef3983
harfbuzz@6.0.0+dfsg-3
no fix listed

Open the chart page →

57,399
rstudio-pmrstudioVerified publisher0.20.71 of 1See more

rstudio-pm rstudio 0.20.7

1 of the 1 container images this version deploys carry CVE-2026-113680.

Container imageDigestPackageFixed in
posit/package-manager:2026.10.0-ubuntu-24.04574ed7ec955f
harfbuzz@8.3.0-2build2
no fix listed

Open the chart page →

24,894
kyoorubxkubeVerified publisher0.1.102 of 9See more

kyoo rubxkube 0.1.10

2 of the 9 container images this version deploys carry CVE-2026-113680.

Container imageDigestPackageFixed in
ghcr.io/zoriya/kyoo_autosync:4.7.1fbba58ddb1a6
harfbuzz@6.0.0+dfsg-3
no fix listed
ghcr.io/zoriya/kyoo_scanner:4.7.17dc0ee57b628
harfbuzz@6.0.0+dfsg-3
no fix listed

Open the chart page →

157,255
uptime-kumasb-helm-charts0.4.01 of 1See more

uptime-kuma sb-helm-charts 0.4.0

1 of the 1 container images this version deploys carry CVE-2026-113680.

Container imageDigestPackageFixed in
louislam/uptime-kuma:2.0.24c364ef96aad
harfbuzz@6.0.0+dfsg-3
no fix listed

Open the chart page →

50,958
immichsecustorVerified publisher2.0.121 of 1See more

immich secustor 2.0.12

1 of the 1 container images this version deploys carry CVE-2026-113680.

Container imageDigestPackageFixed in
ghcr.io/immich-app/immich-server:v3.3.5485d546a2e31
harfbuzz@10.2.0-1+deb13u1
no fix listed

Open the chart page →

3,170
smarter-demosmarterOfficialVerified publisher0.1.52 of 7See more

smarter-demo smarter 0.1.5

2 of the 7 container images this version deploys carry CVE-2026-113680.

Container imageDigestPackageFixed in
ghcr.io/smarter-project/gstreamer:v1.0.25ecb16015aa8
harfbuzz@2.6.4-1ubuntu4.2
no fix listed
ghcr.io/smarter-project/image-detector:v2.5.31dcca70c6446
harfbuzz@2.6.4-1ubuntu4.2
no fix listed

Open the chart page →

248,275
sogosogoVerified publisher0.3.51 of 2See more

sogo sogo 0.3.5

1 of the 2 container images this version deploys carry CVE-2026-113680.

Container imageDigestPackageFixed in
sonroyaalmerol/docker-sogo:5.12.43f60f3abe990
harfbuzz@10.2.0-1+b1
no fix listed

Open the chart page →

9,202
speckle-serverspeckleVerified publisher2.26.31 of 4See more

speckle-server speckle 2.26.3

1 of the 4 container images this version deploys carry CVE-2026-113680.

Container imageDigestPackageFixed in
speckle/speckle-preview-service:2.26.3092384dba45d
harfbuzz@6.0.0+dfsg-3
no fix listed

Open the chart page →

11,864
starwhalestarwhaleVerified publisher0.6.151 of 4See more

starwhale starwhale 0.6.15

1 of the 4 container images this version deploys carry CVE-2026-113680.

Container imageDigestPackageFixed in
ghcr.io/star-whale/server:0.6.158368359c8dd0
harfbuzz@2.6.4-1ubuntu4.2
no fix listed

Open the chart page →

14,758

Container images carrying it

377 by charts deploying them

A fixed version is listed for 0 of the 1 affected package.

Container imageDigestPackageFixed inUsed by
ghcr.io/graphprotocol/availability-oracle:sha-28312fd472a25038957
harfbuzz@6.0.0+dfsg-3
no fix listed
1
ghcr.io/haveagitgat/tdarr:2.00.18.23fbe4c29d14c
harfbuzz@2.6.4-1ubuntu4
no fix listed
1
ghcr.io/immich-app/immich-server:v3.3.5485d546a2e31
harfbuzz@10.2.0-1+deb13u1
no fix listed
1
ghcr.io/immich-app/immich-server:v3.3.4f6475c58b07a
harfbuzz@10.2.0-1+deb13u1
no fix listed
1
ghcr.io/itzg/minecraft-server:latest5cf064b103ea
harfbuzz@8.3.0-2build2
no fix listed
1
ghcr.io/jr0dd/puppeteer:v13.3.26047599cd78e
harfbuzz@2.6.4-1ubuntu4
no fix listed
1
ghcr.io/k8s-at-home/bazarr:v1.0.3fdb5501cdfb9
harfbuzz@2.6.4-1ubuntu4
no fix listed
1
ghcr.io/k8s-at-home/lidarr:v1.0.0.225554ebc1f90963
harfbuzz@2.6.4-1ubuntu4
no fix listed
1
ghcr.io/k8s-at-home/nzbhydra2:v3.14.2ef3670f7e0a8
harfbuzz@2.6.4-1ubuntu4
no fix listed
1
ghcr.io/k8s-at-home/xteve:v2.2.0.200292b3614670f
harfbuzz@2.6.4-1ubuntu4
no fix listed
1
ghcr.io/karakeep-app/karakeep:0.34.0151cdd6b5f2e
harfbuzz@6.0.0+dfsg-3
no fix listed
1
ghcr.io/krateoplatformops/finops-database-handler:0.5.32550427988e3
harfbuzz@6.0.0+dfsg-3
no fix listed
1
ghcr.io/krateoplatformops/finops-webservice-api-mock:0.1.00877e9452d14
harfbuzz@6.0.0+dfsg-3
no fix listed
1
ghcr.io/kvaps/opennebula:v5.12.0.4-1e28e0e7de11b
harfbuzz@2.6.4-1ubuntu4
no fix listed
1
ghcr.io/kvaps/opennebula-exporter:v5.12.0.401563adc95fd
harfbuzz@2.6.4-1ubuntu4
no fix listed
1
ghcr.io/kvaps/opennebula-exporter:v5.12.0.4-12b92df1143b9
harfbuzz@2.6.4-1ubuntu4
no fix listed
1
ghcr.io/kvaps/opennebula-flow:v5.12.0.4-1600221f0f43f
harfbuzz@2.6.4-1ubuntu4
no fix listed
1
ghcr.io/kvaps/opennebula-gate:v5.12.0.4-1a85e03d8bc1d
harfbuzz@2.6.4-1ubuntu4
no fix listed
1
ghcr.io/libreconnect/ferriscompany:0.1.0-rc6ed86db9f0efe
harfbuzz@6.0.0+dfsg-3
no fix listed
1
ghcr.io/linkwarden/linkwarden:v2.16.30664c28a039b
harfbuzz@6.0.0+dfsg-3
no fix listed
1
ghcr.io/linuxserver/audacity:version-3.0.2cdf203db1e50
harfbuzz@2.6.4-1ubuntu4
no fix listed
1
ghcr.io/linuxserver/booksonic:version-1.2677efca1065d
harfbuzz@1.7.2-1ubuntu1
no fix listed
1
ghcr.io/linuxserver/booksonic-air:version-v2009.1.0baa4fa9549dc
harfbuzz@1.7.2-1ubuntu1
no fix listed
1
ghcr.io/linuxserver/digikam:version-7.3.055b4c7f320ae
harfbuzz@1.7.2-1ubuntu1
no fix listed
1
ghcr.io/linuxserver/doublecommander:version-0.8.2-1d92969a929c2
harfbuzz@1.7.2-1ubuntu1
no fix listed
1
ghcr.io/linuxserver/papermerge:version-v2.0.198ba2dd3f0bd
harfbuzz@2.6.4-1ubuntu4.2
no fix listed
1
ghcr.io/linuxserver/remmina:version-1.2.0-rcgit.29dfsg-1ubuntu105955792e00f
harfbuzz@1.7.2-1ubuntu1
no fix listed
1
ghcr.io/linuxserver/sqlitebrowser:version-3.12.2-02876202105241947ubuntu18.04.1426e79828c4b
harfbuzz@1.7.2-1ubuntu1
no fix listed
1
ghcr.io/lissy93/web-check:latest1cd3f9599dd5
harfbuzz@6.0.0+dfsg-3
no fix listed
1
ghcr.io/maastrichtu-ids/rstudio:latest981aa4c109e1
harfbuzz@8.3.0-2build2
no fix listed
1
ghcr.io/maybe-finance/maybe:0.5.0c6ab95ca9130
harfbuzz@6.0.0+dfsg-3
no fix listed
1
ghcr.io/music-assistant/server:2.7.53522e8a7a8f0
harfbuzz@6.0.0+dfsg-3
no fix listed
1
ghcr.io/music-assistant/server:2.10.645fdb050e069
harfbuzz@10.2.0-1+deb13u1
no fix listed
1
ghcr.io/music-assistant/server:2.8.7eef3ee7810d0
harfbuzz@6.0.0+dfsg-3
no fix listed
1
ghcr.io/nathanvaughn/webtrees:2.2.627597e9f4664
harfbuzz@10.2.0-1+deb13u1
no fix listed
1
ghcr.io/nefelim4ag/k8s-dummy-lb:0.0.6f12291f7cce5
harfbuzz@10.2.0-1+deb13u1
no fix listed
1
ghcr.io/nefelim4ag/pingdom-operator:0.0.15f8c7afdcf439
harfbuzz@6.0.0+dfsg-3
no fix listed
1
ghcr.io/opencost/opencost-parquet-exporter:v0.2.1ce85ef0ce665
harfbuzz@6.0.0+dfsg-3
no fix listed
1
ghcr.io/open-telemetry/demo:1.12.0-loadgenerator85c9935ff31b
harfbuzz@6.0.0+dfsg-3
no fix listed
1
ghcr.io/open-telemetry/demo:3.1.0-fraud-detectiona07ee694304b
harfbuzz@6.0.0+dfsg-3
no fix listed
1
ghcr.io/open-telemetry/demo:3.1.0-load-generatorb130d6cee6cb
harfbuzz@6.0.0+dfsg-3
no fix listed
1
ghcr.io/openunison/openunison-k8s:1.0.53d8c8e5a4830f
harfbuzz@8.3.0-2build2
no fix listed
1
ghcr.io/oznu/homebridge:2022-07-08ff2af53897e7
harfbuzz@2.6.4-1ubuntu4
no fix listed
1
ghcr.io/paperless-ngx/paperless-ngx:2.13.10642357c5dbd
harfbuzz@6.0.0+dfsg-3
no fix listed
1
ghcr.io/paperless-ngx/paperless-ngx:2.20.134b05bcd28e69
harfbuzz@10.2.0-1+b1
no fix listed
1
ghcr.io/paperless-ngx/paperless-ngx:2.20.357ad9565bff3
harfbuzz@10.2.0-1+b1
no fix listed
1
ghcr.io/paperless-ngx/paperless-ngx:2.20.5665f2f5cc548
harfbuzz@10.2.0-1+b1
no fix listed
1
ghcr.io/paperless-ngx/paperless-ngx:2.10.1a132c2ac7c57
harfbuzz@6.0.0+dfsg-3
no fix listed
1
ghcr.io/paperless-ngx/paperless-ngx:3.1.3aa810a36942c
harfbuzz@10.2.0-1+deb13u1
no fix listed
1
ghcr.io/paperless-ngx/paperless-ngx:2.0.1ab255bea133e
harfbuzz@6.0.0+dfsg-3
no fix listed
1

syft 1.42.1 · advisories as of 24 Oct 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.