StackRadar

CVE-2026-114111

High

Advisory

Published 6 Oct 2026In the index since 22 Oct 2026
Severity
High
worst across findings
CVSS
8.9
base score, highest
EPSS
0.001
2nd percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
148
of 18,219 indexed, latest versions
Container images
147
deployed by those charts
Fix available
1 of 1
affected package

sharp : Vulnerability in librsvg dependency CVE-2026-96889

Carried by container images the latest versions of 148 of 18,219 indexed charts deploy, on 147 images.

Affected packageAffected versionsFixed inImages
sharpnpm0.23.4, 0.27.2, 0.28.1, 0.29.0+18 more0.35.5147
OSV records
GHSA-wq5f-xc86-pv6w

Charts affected

148 by stars
ChartLatestAffected imagesRadar Score
dltkvassist-iot-data-integrity-verification0.2.01 of 9See more

dltkv assist-iot-data-integrity-verification 0.2.0

1 of the 9 container images this version deploys carry CVE-2026-114111.

Container imageDigestPackageFixed in
assistiot/dlt_api:2.0.0e36a8922fa0c
sharp@0.27.2
0.35.5

Open the chart page →

192,164
dltflassist-iot-dlt-based-fl0.2.01 of 9See more

dltfl assist-iot-dlt-based-fl 0.2.0

1 of the 9 container images this version deploys carry CVE-2026-114111.

Container imageDigestPackageFixed in
assistiot/dlt_api:2.1.0c8a170683be7
sharp@0.27.2
0.35.5

Open the chart page →

192,164
pangolinbdcode0.14.11 of 1See more

pangolin bdcode 0.14.1

1 of the 1 container images this version deploys carry CVE-2026-114111.

Container imageDigestPackageFixed in
fosrl/pangolin:latest17774ddbb4bf
sharp@0.35.4
0.35.5

Open the chart page →

2,306
immichbear0.1.11 of 2See more

immich bear 0.1.1

1 of the 2 container images this version deploys carry CVE-2026-114111.

Container imageDigestPackageFixed in
ghcr.io/immich-app/immich-server:v3.1.0b434cb9287ee
sharp@0.34.5
0.35.5

Open the chart page →

8,075
mx-apibicarus-labs0.1.01 of 4See more

mx-api bicarus-labs 0.1.0

1 of the 4 container images this version deploys carry CVE-2026-114111.

Container imageDigestPackageFixed in
bicarus/mx-api-service:1.0.2-hf1dab88659ae3b
sharp@0.30.7
0.35.5

Open the chart page →

5,422
kamaji-consoleclastixVerified publisher0.1.31 of 1See more

kamaji-console clastix 0.1.3

1 of the 1 container images this version deploys carry CVE-2026-114111.

Container imageDigestPackageFixed in
ghcr.io/clastix/kamaji-console:v0.2.129ecf8d4fa65
sharp@0.33.5
0.35.5

Open the chart page →

3,463
coderstudio-strapi-devcoderstudio-strapi-devVerified publisher0.0.11 of 3See more

coderstudio-strapi-dev coderstudio-strapi-dev 0.0.1

1 of the 3 container images this version deploys carry CVE-2026-114111.

Container imageDigestPackageFixed in
rcdelacruz/my-strapi-app:js-amd6438007f358355
sharp@0.32.0
0.35.5

Open the chart page →

6,183
docker-composecoderstudio-strapi-devVerified publisher0.0.11 of 3See more

docker-compose coderstudio-strapi-dev 0.0.1

1 of the 3 container images this version deploys carry CVE-2026-114111.

Container imageDigestPackageFixed in
rcdelacruz/my-strapi-app:js-amd6438007f358355
sharp@0.32.0
0.35.5

Open the chart page →

6,183
strapi-devcoderstudio-strapi-devVerified publisher0.0.11 of 3See more

strapi-dev coderstudio-strapi-dev 0.0.1

1 of the 3 container images this version deploys carry CVE-2026-114111.

Container imageDigestPackageFixed in
rcdelacruz/my-strapi-app:js-amd6438007f358355
sharp@0.32.0
0.35.5

Open the chart page →

6,141
quickchartcowboysysopVerified publisher5.0.01 of 1See more

quickchart cowboysysop 5.0.0

1 of the 1 container images this version deploys carry CVE-2026-114111.

Container imageDigestPackageFixed in
ianw/quickchart:v1.7.1dc49dd460c37
sharp@0.30.7
0.35.5

Open the chart page →

7,089
kuberay-dashboarddanchevVerified publisher0.0.71 of 1See more

kuberay-dashboard danchev 0.0.7

1 of the 1 container images this version deploys carry CVE-2026-114111.

Container imageDigestPackageFixed in
quay.io/kuberay/dashboard:v1.7.149b50dcc8d53
sharp@0.34.5
0.35.5

Open the chart page →

485
desishowbiz-frontenddesishowbiz1.0.01 of 1See more

desishowbiz-frontend desishowbiz 1.0.0

1 of the 1 container images this version deploys carry CVE-2026-114111.

Container imageDigestPackageFixed in
rahulbhiwagade122/desishowbiz:latest08490b70998c
sharp@0.33.5
0.35.5

Open the chart page →

3,341
difydify1.0.01 of 4See more

dify dify 1.0.0

1 of the 4 container images this version deploys carry CVE-2026-114111.

Container imageDigestPackageFixed in
langgenius/dify-web:1.0.0d64914ff0d6d
sharp@0.33.5
0.35.5

Open the chart page →

56,433
directusdirectusVerified publisher0.9.101 of 4See more

directus directus 0.9.10

1 of the 4 container images this version deploys carry CVE-2026-114111.

Container imageDigestPackageFixed in
directus/directus:11.1.0e3c8bb975350
sharp@0.33.5
0.35.5

Open the chart page →

5,617
documensodocumensoVerified publisher0.0.61 of 2See more

documenso documenso 0.0.6

1 of the 2 container images this version deploys carry CVE-2026-114111.

Container imageDigestPackageFixed in
documenso/documenso:v1.8.17f16a9449f18
sharp@0.32.6
0.35.5

Open the chart page →

3,396
dashboardedu1.0.01 of 1See more

dashboard edu 1.0.0

1 of the 1 container images this version deploys carry CVE-2026-114111.

Container imageDigestPackageFixed in
sysnet4admin/dashboard:bluec5bd3bb1b5a6
sharp@0.33.4
0.35.5

Open the chart page →

1,638
fauxgpufauxgpuVerified publisher0.2.41 of 4See more

fauxgpu fauxgpu 0.2.4

1 of the 4 container images this version deploys carry CVE-2026-114111.

Container imageDigestPackageFixed in
ghcr.io/devops-dojo7/fauxgpu/web:0.2.4691dd15d6bca
sharp@0.35.3
0.35.5

Open the chart page →

3,983
canary-checkerflanksourceVerified publisher1.2.01 of 2See more

canary-checker flanksource 1.2.0

1 of the 2 container images this version deploys carry CVE-2026-114111.

Container imageDigestPackageFixed in
flanksource/canary-checker-ui:v1.4.281764c84e550db
sharp@0.32.6
0.35.5

Open the chart page →

5,557
facetflanksourceVerified publisher0.1.731 of 1See more

facet flanksource 0.1.73

1 of the 1 container images this version deploys carry CVE-2026-114111.

Container imageDigestPackageFixed in
ghcr.io/flanksource/facet:0.1.73a0323f4283e5
sharp@0.35.4
0.35.5

Open the chart page →

29,576
flanksource-uiflanksourceVerified publisher1.4.3541 of 1See more

flanksource-ui flanksource 1.4.354

1 of the 1 container images this version deploys carry CVE-2026-114111.

Container imageDigestPackageFixed in
flanksource/incident-manager-ui:v1.4.3542bb089c79fc0
sharp@0.34.5
0.35.5

Open the chart page →

3,528
mission-controlflanksourceVerified publisher0.1.3391 of 8See more

mission-control flanksource 0.1.339

1 of the 8 container images this version deploys carry CVE-2026-114111.

Container imageDigestPackageFixed in
flanksource/incident-manager-ui:v1.4.3228d17f0c08b20
sharp@0.34.5
0.35.5

Open the chart page →

11,801
fluxer-helmfluxer-helm0.3.01 of 18See more

fluxer-helm fluxer-helm 0.3.0

1 of the 18 container images this version deploys carry CVE-2026-114111.

Container imageDigestPackageFixed in
ghcr.io/fluxerapp/fluxer-api:2026.820.164808f683541d5374
sharp@0.34.5
0.35.5

Open the chart page →

32,986
double-takegeek-cookbookVerified publisher2.3.21 of 1See more

double-take geek-cookbook 2.3.2

1 of the 1 container images this version deploys carry CVE-2026-114111.

Container imageDigestPackageFixed in
jakowenko/double-take:1.6.0b858bac9e32a
sharp@0.29.2
0.35.5

Open the chart page →

86,583
ghostghostVerified publisher0.1.01 of 4See more

ghost ghost 0.1.0

1 of the 4 container images this version deploys carry CVE-2026-114111.

Container imageDigestPackageFixed in
library/ghost:5.79.083f7bf209844
sharp@0.32.6
0.35.5

Open the chart page →

10,833
glassflow-etlglassflowVerified publisher0.5.211 of 16See more

glassflow-etl glassflow 0.5.21

1 of the 16 container images this version deploys carry CVE-2026-114111.

Container imageDigestPackageFixed in
ghcr.io/glassflow/glassflow-etl-fe:v3.2.05eaad43bd6c5
sharp@0.34.5
0.35.5

Open the chart page →

17,681
opentelemetry-demogpg-dev0.33.81 of 27See more

opentelemetry-demo gpg-dev 0.33.8

1 of the 27 container images this version deploys carry CVE-2026-114111.

Container imageDigestPackageFixed in
ghcr.io/open-telemetry/demo:1.12.0-frontend8b348f00ca4c
sharp@0.33.4
0.35.5

Open the chart page →

196,721
librechathajowielandVerified publisher1.1.01 of 1See more

librechat hajowieland 1.1.0

1 of the 1 container images this version deploys carry CVE-2026-114111.

Container imageDigestPackageFixed in
ghcr.io/danny-avila/librechat:v0.7.87fe76551a78e
sharp@0.33.5
0.35.5

Open the chart page →

3,682
lobe-chathelm-charts-darox0.1.561 of 1See more

lobe-chat helm-charts-darox 0.1.56

1 of the 1 container images this version deploys carry CVE-2026-114111.

Container imageDigestPackageFixed in
lobehub/lobe-chat:1.96.9da0c21fefcd3
sharp@0.33.5
0.35.5

Open the chart page →

667
documensohelmforgeVerified publisher1.0.01 of 3See more

documenso helmforge 1.0.0

1 of the 3 container images this version deploys carry CVE-2026-114111.

Container imageDigestPackageFixed in
ghcr.io/documenso/documensodigest-pinnedd9985f66c19c
sharp@0.35.4
0.35.5

Open the chart page →

2,024
homarrhelmforgeVerified publisher1.2.141 of 1See more

homarr helmforge 1.2.14

1 of the 1 container images this version deploys carry CVE-2026-114111.

Container imageDigestPackageFixed in
ghcr.io/homarr-labs/homarr:v2.6.01e077fc77d3a
sharp@0.35.4
0.35.5

Open the chart page →

86
immichhelmforgeVerified publisher1.2.131 of 5See more

immich helmforge 1.2.13

1 of the 5 container images this version deploys carry CVE-2026-114111.

Container imageDigestPackageFixed in
ghcr.io/immich-app/immich-server:v3.1.0b434cb9287ee
sharp@0.34.5
0.35.5

Open the chart page →

13,173
opencuthelmforgeVerified publisher1.1.141 of 5See more

opencut helmforge 1.1.14

1 of the 5 container images this version deploys carry CVE-2026-114111.

Container imageDigestPackageFixed in
helmforge/opencut:v0.3.0bf11156e0ab5
sharp@0.34.5
0.35.5

Open the chart page →

3,705
paprahelmforgeVerified publisher1.0.21 of 1See more

papra helmforge 1.0.2

1 of the 1 container images this version deploys carry CVE-2026-114111.

Container imageDigestPackageFixed in
ghcr.io/papra-hq/papra:26.7.0-rootlessbf4a66e776d0
sharp@0.35.4
0.35.5

Open the chart page →

3,685
reactive-resumehelmforgeVerified publisher1.0.21 of 4See more

reactive-resume helmforge 1.0.2

1 of the 4 container images this version deploys carry CVE-2026-114111.

Container imageDigestPackageFixed in
ghcr.io/amruthpillai/reactive-resume:v5.3.0c487ec5edcfe
sharp@0.35.4
0.35.5

Open the chart page →

4,028
strapihelmforgeVerified publisher2.3.171 of 3See more

strapi helmforge 2.3.17

1 of the 3 container images this version deploys carry CVE-2026-114111.

Container imageDigestPackageFixed in
helmforge/strapi-base:5.52.25a6c2c449840
sharp@0.35.3
0.35.5

Open the chart page →

2,580
pi-gallery2homeenterpriseinc0.3.01 of 1See more

pi-gallery2 homeenterpriseinc 0.3.0

1 of the 1 container images this version deploys carry CVE-2026-114111.

Container imageDigestPackageFixed in
bpatrik/pigallery2:1.9.0-debian-buster21fbaa5fae61
sharp@0.23.4
0.35.5

Open the chart page →

3,690
multicaicoretechVerified publisher0.6.61 of 4See more

multica icoretech 0.6.6

1 of the 4 container images this version deploys carry CVE-2026-114111.

Container imageDigestPackageFixed in
ghcr.io/multica-ai/multica-web:v0.6.5f38d02584705
sharp@0.35.4
0.35.5

Open the chart page →

2,511
nocodbinseefrlab0.2.01 of 1See more

nocodb inseefrlab 0.2.0

1 of the 1 container images this version deploys carry CVE-2026-114111.

Container imageDigestPackageFixed in
nocodb/nocodb:latest27d2fd14670d
sharp@0.35.4
0.35.5

Open the chart page →

357
ghostjanip81-helm-chartsVerified publisher0.1.21 of 1See more

ghost janip81-helm-charts 0.1.2

1 of the 1 container images this version deploys carry CVE-2026-114111.

Container imageDigestPackageFixed in
library/ghost:6.37.01ef2e532ca4d
sharp@0.34.5
0.35.5

Open the chart page →

4,797
ghostk8s-home-lab-repo4.1.01 of 1See more

ghost k8s-home-lab-repo 4.1.0

1 of the 1 container images this version deploys carry CVE-2026-114111.

Container imageDigestPackageFixed in
library/ghost:6.41.129773d6be407
sharp@0.34.5
0.35.5

Open the chart page →

4,307
kagentkagent0.10.41 of 6See more

kagent kagent 0.10.4

1 of the 6 container images this version deploys carry CVE-2026-114111.

Container imageDigestPackageFixed in
ghcr.io/kagent-dev/kagent/ui:0.10.4a6edf70c6e8e
sharp@0.35.4
0.35.5

Open the chart page →

4,125
visual-regression-trackerkokuwa5.1.01 of 4See more

visual-regression-tracker kokuwa 5.1.0

1 of the 4 container images this version deploys carry CVE-2026-114111.

Container imageDigestPackageFixed in
visualregressiontracker/api:5.0.11941aeb8c8bf9
sharp@0.32.6
0.35.5

Open the chart page →

9,834
pangolinkrzwiatrzyk0.11.01 of 1See more

pangolin krzwiatrzyk 0.11.0

1 of the 1 container images this version deploys carry CVE-2026-114111.

Container imageDigestPackageFixed in
fosrl/pangolin:1.13.0c32ad797ab96
sharp@0.34.4
0.35.5

Open the chart page →

3,877
aperagkubeblocksVerified publisher0.0.0-nightly1 of 3See more

aperag kubeblocks 0.0.0-nightly

1 of the 3 container images this version deploys carry CVE-2026-114111.

Container imageDigestPackageFixed in
apecloud/aperag-frontend:v0.0.0-nightlyb3ae37840ace
sharp@0.34.3
0.35.5

Open the chart page →

10,010
homepagekubernetes-homelab-helm-chartsVerified publisher0.1.11 of 1See more

homepage kubernetes-homelab-helm-charts 0.1.1

1 of the 1 container images this version deploys carry CVE-2026-114111.

Container imageDigestPackageFixed in
ghcr.io/gethomepage/homepage:v1.13.2a0b71c8e7572
sharp@0.34.5
0.35.5

Open the chart page →

1,123
portfolio-trackerkubernetes-homelab-helm-chartsVerified publisher0.2.11 of 3See more

portfolio-tracker kubernetes-homelab-helm-charts 0.2.1

1 of the 3 container images this version deploys carry CVE-2026-114111.

Container imageDigestPackageFixed in
ghcr.io/harish2k01/portfolio-tracker:0.7.043be1d6b454e
sharp@0.34.5
0.35.5

Open the chart page →

1,998
seerrkubernetes-homelab-helm-chartsVerified publisher0.2.01 of 1See more

seerr kubernetes-homelab-helm-charts 0.2.0

1 of the 1 container images this version deploys carry CVE-2026-114111.

Container imageDigestPackageFixed in
ghcr.io/seerr-team/seerr:v3.5.027602401178d
sharp@0.34.5
0.35.5

Open the chart page →

2,335
umamikubernetes-homelab-helm-chartsVerified publisher0.2.11 of 3See more

umami kubernetes-homelab-helm-charts 0.2.1

1 of the 3 container images this version deploys carry CVE-2026-114111.

Container imageDigestPackageFixed in
ghcr.io/umami-software/umami:3.4.085909afc45bd
sharp@0.35.4
0.35.5

Open the chart page →

1,008
helm-pilotlbenicio-communityVerified publisher0.2.41 of 1See more

helm-pilot lbenicio-community 0.2.4

1 of the 1 container images this version deploys carry CVE-2026-114111.

Container imageDigestPackageFixed in
lbenicio/helm-pilot:0.2.54594a2632510
sharp@0.34.5
0.35.5

Open the chart page →

867
jellyseerrlbenicio-communityVerified publisher0.1.01 of 1See more

jellyseerr lbenicio-community 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-114111.

Container imageDigestPackageFixed in
fallenbagel/jellyseerr:latest91edd5620e51
sharp@0.33.4
0.35.5

Open the chart page →

3,184

Container images carrying it

147 by charts deploying them

A fixed version is listed for 1 of the 1 affected package.

Container imageDigestPackageFixed inUsed by
library/ghost:6.41.129773d6be407
sharp@0.34.5
0.35.5
1
library/ghost:4.37.0767230c0f263
sharp@0.29.3
0.35.5
1
library/ghost:5.79.083f7bf209844
sharp@0.32.6
0.35.5
1
lobehub/lobe-chat:1.96.9da0c21fefcd3
sharp@0.33.5
0.35.5
1
lucassandin/welcome-client:latest48468b1ccd16
sharp@0.33.3
0.35.5
1
makeplane/live-commercial:v3.3.3fab034a2be8c
sharp@0.35.4
0.35.5
1
makeplane/silo-commercial:v3.3.312c33418c1ec
sharp@0.35.4
0.35.5
1
makeplane/space-commercial:v3.3.3c4a6236c4080
sharp@0.35.4
0.35.5
1
markdegroot/unifi-protect-arm64:latestd8445f2a0de6
sharp@0.30.7
0.35.5
1
misskey/misskey:12.110.1e08b7c478093
sharp@0.30.3
0.35.5
1
moreillon/food-manager:lateste8fd856e593d
sharp@0.29.3
0.35.5
1
n8nio/n8n:1.115.1ed16e560c40e
sharp@0.33.5
0.35.5
1
nocodb/nocodb:latest27d2fd14670d
sharp@0.35.4
0.35.5
1
nocodb/nocodb:0.258.06779a4ddedf2
sharp@0.33.5
0.35.5
1
nocodb/nocodb:0.301.5d9516f0bf546
sharp@0.33.4
0.35.5
1
penpotapp/mcp:2.18.35e811e6eeb17
sharp@0.35.4
0.35.5
1
prowlercloud/prowler-ui:5.31.179ee83c8e702
sharp@0.33.5
0.35.5
1
rahulbhiwagade122/desishowbiz:latest08490b70998c
sharp@0.33.5
0.35.5
1
rajnandan1/kener:4.1.7-alpined920a2b71c20
sharp@0.34.5
0.35.5
1
rocketchat/ddp-streamer-service:8.6.1819771c4abe4
sharp@0.33.5
0.35.5
1
speckle/speckle-frontend-2:2.21.3-branch.testing5.219631-2153befd4ca6ebf09b9
sharp@0.32.6
0.35.5
1
speckle/speckle-preview-service:2.20.2-branch.testing4.134160-9fad4b21f897ca906ea
sharp@0.32.6
0.35.5
1
speckle/speckle-preview-service:2.21.3-branch.testing5.219631-2153bef52cad5e3293e
sharp@0.32.6
0.35.5
1
speckle/speckle-preview-service:2.17.14-branch.testing.72707.921a5f884fc39bca0c8
sharp@0.32.6
0.35.5
1
speckle/speckle-preview-service:2.20.6-branch.testing1.154030-9b091148f3c1ea153ba
sharp@0.32.6
0.35.5
1
speckle/speckle-preview-service:2.19.2-branch.hotfix-2.19.1.124125-665e7e1c102b087481a
sharp@0.32.6
0.35.5
1
speckle/speckle-preview-service:2.20.3-branch.hotfix-2.20.2.149555-37ea0cbd3da0a84de98
sharp@0.32.6
0.35.5
1
speckle/speckle-server:2.17.14-branch.testing.72707.921a5f849d10dcdfb91
sharp@0.32.6
0.35.5
1
speckle/speckle-server:2.19.2-branch.hotfix-2.19.1.124125-665e7e14b6a0750d5aa
sharp@0.32.6
0.35.5
1
speckle/speckle-server:2.20.3-branch.hotfix-2.20.2.149555-37ea0cb52f8eabf5cea
sharp@0.32.6
0.35.5
1
speckle/speckle-server:2.20.2-branch.testing4.134160-9fad4b2687f43ab16f3
sharp@0.32.6
0.35.5
1
speckle/speckle-server:2.25.10-branch.testing6.645-b125c1e75cdf256067b
sharp@0.34.3
0.35.5
1
speckle/speckle-server:2.26.379f14a2bf931
sharp@0.34.4
0.35.5
1
speckle/speckle-server:2.18.12-branch.testing3.88744-f55b34189a5872375f9
sharp@0.32.6
0.35.5
1
speckle/speckle-server:2.21.3-branch.testing5.219631-2153bef8fd157733393
sharp@0.32.6
0.35.5
1
speckle/speckle-server:2.18.11-branch.testing2.88634-335d469bf6a501b2210
sharp@0.32.6
0.35.5
1
speckle/speckle-server:2.20.6-branch.testing1.154030-9b09114e8413f57b327
sharp@0.32.6
0.35.5
1
supabase/studio:2026.08.03-sha-022b374606aca9fdaa7
sharp@0.34.5
0.35.5
1
veecode/devportal-admin-ui:0.4.30c69fd286b489
sharp@0.33.4
0.35.5
1
visualregressiontracker/api:5.0.11941aeb8c8bf9
sharp@0.32.6
0.35.5
1
wsjbr/duplistatus:1.5.0bede86cf183f
sharp@0.35.4
0.35.5
1
ghcr.io/absmach/magistrala/ui-smq:latestea7e7f0e293e
sharp@0.34.2
0.35.5
1
ghcr.io/akash-network/deploy-web:2.46.0ac540172c120
sharp@0.30.7
0.35.5
1
ghcr.io/amruthpillai/reactive-resume:v5.3.0c487ec5edcfe
sharp@0.35.4
0.35.5
1
ghcr.io/bluesky-social/pds:0.4.204cbc6e3ea157d
sharp@0.33.5
0.35.5
1
ghcr.io/bulwarkmail/webmail:1.6.0f0a266506fcf
sharp@0.34.5
0.35.5
1
ghcr.io/clastix/kamaji-console:v0.2.129ecf8d4fa65
sharp@0.33.5
0.35.5
1
ghcr.io/colanode/server:latest7006cac874fd
sharp@0.34.5
0.35.5
1
ghcr.io/danny-avila/librechat:v0.7.87fe76551a78e
sharp@0.33.5
0.35.5
1
ghcr.io/danny-avila/librechat:v0.7.78c68abbe1cff
sharp@0.32.6
0.35.5
1

syft 1.42.1 · advisories as of 22 Oct 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.