StackRadar

CVE-2026-114111

High

Advisory

Published 6 Oct 2026In the index since 22 Oct 2026
Severity
High
worst across findings
CVSS
8.9
base score, highest
EPSS
0.001
2nd percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
148
of 18,219 indexed, latest versions
Container images
147
deployed by those charts
Fix available
1 of 1
affected package

sharp : Vulnerability in librsvg dependency CVE-2026-96889

Carried by container images the latest versions of 148 of 18,219 indexed charts deploy, on 147 images.

Affected packageAffected versionsFixed inImages
sharpnpm0.23.4, 0.27.2, 0.28.1, 0.29.0+18 more0.35.5147
OSV records
GHSA-wq5f-xc86-pv6w

Charts affected

148 by stars
ChartLatestAffected imagesRadar Score
dltkvassist-iot-data-integrity-verification0.2.01 of 9See more

dltkv assist-iot-data-integrity-verification 0.2.0

1 of the 9 container images this version deploys carry CVE-2026-114111.

Container imageDigestPackageFixed in
assistiot/dlt_api:2.0.0e36a8922fa0c
sharp@0.27.2
0.35.5

Open the chart page →

192,164
dltflassist-iot-dlt-based-fl0.2.01 of 9See more

dltfl assist-iot-dlt-based-fl 0.2.0

1 of the 9 container images this version deploys carry CVE-2026-114111.

Container imageDigestPackageFixed in
assistiot/dlt_api:2.1.0c8a170683be7
sharp@0.27.2
0.35.5

Open the chart page →

192,164
pangolinbdcode0.14.11 of 1See more

pangolin bdcode 0.14.1

1 of the 1 container images this version deploys carry CVE-2026-114111.

Container imageDigestPackageFixed in
fosrl/pangolin:latest17774ddbb4bf
sharp@0.35.4
0.35.5

Open the chart page →

2,306
immichbear0.1.11 of 2See more

immich bear 0.1.1

1 of the 2 container images this version deploys carry CVE-2026-114111.

Container imageDigestPackageFixed in
ghcr.io/immich-app/immich-server:v3.1.0b434cb9287ee
sharp@0.34.5
0.35.5

Open the chart page →

8,075
mx-apibicarus-labs0.1.01 of 4See more

mx-api bicarus-labs 0.1.0

1 of the 4 container images this version deploys carry CVE-2026-114111.

Container imageDigestPackageFixed in
bicarus/mx-api-service:1.0.2-hf1dab88659ae3b
sharp@0.30.7
0.35.5

Open the chart page →

5,422
kamaji-consoleclastixVerified publisher0.1.31 of 1See more

kamaji-console clastix 0.1.3

1 of the 1 container images this version deploys carry CVE-2026-114111.

Container imageDigestPackageFixed in
ghcr.io/clastix/kamaji-console:v0.2.129ecf8d4fa65
sharp@0.33.5
0.35.5

Open the chart page →

3,463
coderstudio-strapi-devcoderstudio-strapi-devVerified publisher0.0.11 of 3See more

coderstudio-strapi-dev coderstudio-strapi-dev 0.0.1

1 of the 3 container images this version deploys carry CVE-2026-114111.

Container imageDigestPackageFixed in
rcdelacruz/my-strapi-app:js-amd6438007f358355
sharp@0.32.0
0.35.5

Open the chart page →

6,183
docker-composecoderstudio-strapi-devVerified publisher0.0.11 of 3See more

docker-compose coderstudio-strapi-dev 0.0.1

1 of the 3 container images this version deploys carry CVE-2026-114111.

Container imageDigestPackageFixed in
rcdelacruz/my-strapi-app:js-amd6438007f358355
sharp@0.32.0
0.35.5

Open the chart page →

6,183
strapi-devcoderstudio-strapi-devVerified publisher0.0.11 of 3See more

strapi-dev coderstudio-strapi-dev 0.0.1

1 of the 3 container images this version deploys carry CVE-2026-114111.

Container imageDigestPackageFixed in
rcdelacruz/my-strapi-app:js-amd6438007f358355
sharp@0.32.0
0.35.5

Open the chart page →

6,141
quickchartcowboysysopVerified publisher5.0.01 of 1See more

quickchart cowboysysop 5.0.0

1 of the 1 container images this version deploys carry CVE-2026-114111.

Container imageDigestPackageFixed in
ianw/quickchart:v1.7.1dc49dd460c37
sharp@0.30.7
0.35.5

Open the chart page →

7,089
kuberay-dashboarddanchevVerified publisher0.0.71 of 1See more

kuberay-dashboard danchev 0.0.7

1 of the 1 container images this version deploys carry CVE-2026-114111.

Container imageDigestPackageFixed in
quay.io/kuberay/dashboard:v1.7.149b50dcc8d53
sharp@0.34.5
0.35.5

Open the chart page →

485
desishowbiz-frontenddesishowbiz1.0.01 of 1See more

desishowbiz-frontend desishowbiz 1.0.0

1 of the 1 container images this version deploys carry CVE-2026-114111.

Container imageDigestPackageFixed in
rahulbhiwagade122/desishowbiz:latest08490b70998c
sharp@0.33.5
0.35.5

Open the chart page →

3,341
difydify1.0.01 of 4See more

dify dify 1.0.0

1 of the 4 container images this version deploys carry CVE-2026-114111.

Container imageDigestPackageFixed in
langgenius/dify-web:1.0.0d64914ff0d6d
sharp@0.33.5
0.35.5

Open the chart page →

56,433
directusdirectusVerified publisher0.9.101 of 4See more

directus directus 0.9.10

1 of the 4 container images this version deploys carry CVE-2026-114111.

Container imageDigestPackageFixed in
directus/directus:11.1.0e3c8bb975350
sharp@0.33.5
0.35.5

Open the chart page →

5,617
documensodocumensoVerified publisher0.0.61 of 2See more

documenso documenso 0.0.6

1 of the 2 container images this version deploys carry CVE-2026-114111.

Container imageDigestPackageFixed in
documenso/documenso:v1.8.17f16a9449f18
sharp@0.32.6
0.35.5

Open the chart page →

3,396
dashboardedu1.0.01 of 1See more

dashboard edu 1.0.0

1 of the 1 container images this version deploys carry CVE-2026-114111.

Container imageDigestPackageFixed in
sysnet4admin/dashboard:bluec5bd3bb1b5a6
sharp@0.33.4
0.35.5

Open the chart page →

1,638
fauxgpufauxgpuVerified publisher0.2.41 of 4See more

fauxgpu fauxgpu 0.2.4

1 of the 4 container images this version deploys carry CVE-2026-114111.

Container imageDigestPackageFixed in
ghcr.io/devops-dojo7/fauxgpu/web:0.2.4691dd15d6bca
sharp@0.35.3
0.35.5

Open the chart page →

3,983
canary-checkerflanksourceVerified publisher1.2.01 of 2See more

canary-checker flanksource 1.2.0

1 of the 2 container images this version deploys carry CVE-2026-114111.

Container imageDigestPackageFixed in
flanksource/canary-checker-ui:v1.4.281764c84e550db
sharp@0.32.6
0.35.5

Open the chart page →

5,557
facetflanksourceVerified publisher0.1.731 of 1See more

facet flanksource 0.1.73

1 of the 1 container images this version deploys carry CVE-2026-114111.

Container imageDigestPackageFixed in
ghcr.io/flanksource/facet:0.1.73a0323f4283e5
sharp@0.35.4
0.35.5

Open the chart page →

29,576
flanksource-uiflanksourceVerified publisher1.4.3541 of 1See more

flanksource-ui flanksource 1.4.354

1 of the 1 container images this version deploys carry CVE-2026-114111.

Container imageDigestPackageFixed in
flanksource/incident-manager-ui:v1.4.3542bb089c79fc0
sharp@0.34.5
0.35.5

Open the chart page →

3,528
mission-controlflanksourceVerified publisher0.1.3391 of 8See more

mission-control flanksource 0.1.339

1 of the 8 container images this version deploys carry CVE-2026-114111.

Container imageDigestPackageFixed in
flanksource/incident-manager-ui:v1.4.3228d17f0c08b20
sharp@0.34.5
0.35.5

Open the chart page →

11,801
fluxer-helmfluxer-helm0.3.01 of 18See more

fluxer-helm fluxer-helm 0.3.0

1 of the 18 container images this version deploys carry CVE-2026-114111.

Container imageDigestPackageFixed in
ghcr.io/fluxerapp/fluxer-api:2026.820.164808f683541d5374
sharp@0.34.5
0.35.5

Open the chart page →

32,986
double-takegeek-cookbookVerified publisher2.3.21 of 1See more

double-take geek-cookbook 2.3.2

1 of the 1 container images this version deploys carry CVE-2026-114111.

Container imageDigestPackageFixed in
jakowenko/double-take:1.6.0b858bac9e32a
sharp@0.29.2
0.35.5

Open the chart page →

86,583
ghostghostVerified publisher0.1.01 of 4See more

ghost ghost 0.1.0

1 of the 4 container images this version deploys carry CVE-2026-114111.

Container imageDigestPackageFixed in
library/ghost:5.79.083f7bf209844
sharp@0.32.6
0.35.5

Open the chart page →

10,833
glassflow-etlglassflowVerified publisher0.5.211 of 16See more

glassflow-etl glassflow 0.5.21

1 of the 16 container images this version deploys carry CVE-2026-114111.

Container imageDigestPackageFixed in
ghcr.io/glassflow/glassflow-etl-fe:v3.2.05eaad43bd6c5
sharp@0.34.5
0.35.5

Open the chart page →

17,681
opentelemetry-demogpg-dev0.33.81 of 27See more

opentelemetry-demo gpg-dev 0.33.8

1 of the 27 container images this version deploys carry CVE-2026-114111.

Container imageDigestPackageFixed in
ghcr.io/open-telemetry/demo:1.12.0-frontend8b348f00ca4c
sharp@0.33.4
0.35.5

Open the chart page →

196,721
librechathajowielandVerified publisher1.1.01 of 1See more

librechat hajowieland 1.1.0

1 of the 1 container images this version deploys carry CVE-2026-114111.

Container imageDigestPackageFixed in
ghcr.io/danny-avila/librechat:v0.7.87fe76551a78e
sharp@0.33.5
0.35.5

Open the chart page →

3,682
lobe-chathelm-charts-darox0.1.561 of 1See more

lobe-chat helm-charts-darox 0.1.56

1 of the 1 container images this version deploys carry CVE-2026-114111.

Container imageDigestPackageFixed in
lobehub/lobe-chat:1.96.9da0c21fefcd3
sharp@0.33.5
0.35.5

Open the chart page →

667
documensohelmforgeVerified publisher1.0.01 of 3See more

documenso helmforge 1.0.0

1 of the 3 container images this version deploys carry CVE-2026-114111.

Container imageDigestPackageFixed in
ghcr.io/documenso/documensodigest-pinnedd9985f66c19c
sharp@0.35.4
0.35.5

Open the chart page →

2,024
homarrhelmforgeVerified publisher1.2.141 of 1See more

homarr helmforge 1.2.14

1 of the 1 container images this version deploys carry CVE-2026-114111.

Container imageDigestPackageFixed in
ghcr.io/homarr-labs/homarr:v2.6.01e077fc77d3a
sharp@0.35.4
0.35.5

Open the chart page →

86
immichhelmforgeVerified publisher1.2.131 of 5See more

immich helmforge 1.2.13

1 of the 5 container images this version deploys carry CVE-2026-114111.

Container imageDigestPackageFixed in
ghcr.io/immich-app/immich-server:v3.1.0b434cb9287ee
sharp@0.34.5
0.35.5

Open the chart page →

13,173
opencuthelmforgeVerified publisher1.1.141 of 5See more

opencut helmforge 1.1.14

1 of the 5 container images this version deploys carry CVE-2026-114111.

Container imageDigestPackageFixed in
helmforge/opencut:v0.3.0bf11156e0ab5
sharp@0.34.5
0.35.5

Open the chart page →

3,705
paprahelmforgeVerified publisher1.0.21 of 1See more

papra helmforge 1.0.2

1 of the 1 container images this version deploys carry CVE-2026-114111.

Container imageDigestPackageFixed in
ghcr.io/papra-hq/papra:26.7.0-rootlessbf4a66e776d0
sharp@0.35.4
0.35.5

Open the chart page →

3,685
reactive-resumehelmforgeVerified publisher1.0.21 of 4See more

reactive-resume helmforge 1.0.2

1 of the 4 container images this version deploys carry CVE-2026-114111.

Container imageDigestPackageFixed in
ghcr.io/amruthpillai/reactive-resume:v5.3.0c487ec5edcfe
sharp@0.35.4
0.35.5

Open the chart page →

4,028
strapihelmforgeVerified publisher2.3.171 of 3See more

strapi helmforge 2.3.17

1 of the 3 container images this version deploys carry CVE-2026-114111.

Container imageDigestPackageFixed in
helmforge/strapi-base:5.52.25a6c2c449840
sharp@0.35.3
0.35.5

Open the chart page →

2,580
pi-gallery2homeenterpriseinc0.3.01 of 1See more

pi-gallery2 homeenterpriseinc 0.3.0

1 of the 1 container images this version deploys carry CVE-2026-114111.

Container imageDigestPackageFixed in
bpatrik/pigallery2:1.9.0-debian-buster21fbaa5fae61
sharp@0.23.4
0.35.5

Open the chart page →

3,690
multicaicoretechVerified publisher0.6.61 of 4See more

multica icoretech 0.6.6

1 of the 4 container images this version deploys carry CVE-2026-114111.

Container imageDigestPackageFixed in
ghcr.io/multica-ai/multica-web:v0.6.5f38d02584705
sharp@0.35.4
0.35.5

Open the chart page →

2,511
nocodbinseefrlab0.2.01 of 1See more

nocodb inseefrlab 0.2.0

1 of the 1 container images this version deploys carry CVE-2026-114111.

Container imageDigestPackageFixed in
nocodb/nocodb:latest27d2fd14670d
sharp@0.35.4
0.35.5

Open the chart page →

357
ghostjanip81-helm-chartsVerified publisher0.1.21 of 1See more

ghost janip81-helm-charts 0.1.2

1 of the 1 container images this version deploys carry CVE-2026-114111.

Container imageDigestPackageFixed in
library/ghost:6.37.01ef2e532ca4d
sharp@0.34.5
0.35.5

Open the chart page →

4,797
ghostk8s-home-lab-repo4.1.01 of 1See more

ghost k8s-home-lab-repo 4.1.0

1 of the 1 container images this version deploys carry CVE-2026-114111.

Container imageDigestPackageFixed in
library/ghost:6.41.129773d6be407
sharp@0.34.5
0.35.5

Open the chart page →

4,307
kagentkagent0.10.41 of 6See more

kagent kagent 0.10.4

1 of the 6 container images this version deploys carry CVE-2026-114111.

Container imageDigestPackageFixed in
ghcr.io/kagent-dev/kagent/ui:0.10.4a6edf70c6e8e
sharp@0.35.4
0.35.5

Open the chart page →

4,125
visual-regression-trackerkokuwa5.1.01 of 4See more

visual-regression-tracker kokuwa 5.1.0

1 of the 4 container images this version deploys carry CVE-2026-114111.

Container imageDigestPackageFixed in
visualregressiontracker/api:5.0.11941aeb8c8bf9
sharp@0.32.6
0.35.5

Open the chart page →

9,834
pangolinkrzwiatrzyk0.11.01 of 1See more

pangolin krzwiatrzyk 0.11.0

1 of the 1 container images this version deploys carry CVE-2026-114111.

Container imageDigestPackageFixed in
fosrl/pangolin:1.13.0c32ad797ab96
sharp@0.34.4
0.35.5

Open the chart page →

3,877
aperagkubeblocksVerified publisher0.0.0-nightly1 of 3See more

aperag kubeblocks 0.0.0-nightly

1 of the 3 container images this version deploys carry CVE-2026-114111.

Container imageDigestPackageFixed in
apecloud/aperag-frontend:v0.0.0-nightlyb3ae37840ace
sharp@0.34.3
0.35.5

Open the chart page →

10,010
homepagekubernetes-homelab-helm-chartsVerified publisher0.1.11 of 1See more

homepage kubernetes-homelab-helm-charts 0.1.1

1 of the 1 container images this version deploys carry CVE-2026-114111.

Container imageDigestPackageFixed in
ghcr.io/gethomepage/homepage:v1.13.2a0b71c8e7572
sharp@0.34.5
0.35.5

Open the chart page →

1,123
portfolio-trackerkubernetes-homelab-helm-chartsVerified publisher0.2.11 of 3See more

portfolio-tracker kubernetes-homelab-helm-charts 0.2.1

1 of the 3 container images this version deploys carry CVE-2026-114111.

Container imageDigestPackageFixed in
ghcr.io/harish2k01/portfolio-tracker:0.7.043be1d6b454e
sharp@0.34.5
0.35.5

Open the chart page →

1,998
seerrkubernetes-homelab-helm-chartsVerified publisher0.2.01 of 1See more

seerr kubernetes-homelab-helm-charts 0.2.0

1 of the 1 container images this version deploys carry CVE-2026-114111.

Container imageDigestPackageFixed in
ghcr.io/seerr-team/seerr:v3.5.027602401178d
sharp@0.34.5
0.35.5

Open the chart page →

2,335
umamikubernetes-homelab-helm-chartsVerified publisher0.2.11 of 3See more

umami kubernetes-homelab-helm-charts 0.2.1

1 of the 3 container images this version deploys carry CVE-2026-114111.

Container imageDigestPackageFixed in
ghcr.io/umami-software/umami:3.4.085909afc45bd
sharp@0.35.4
0.35.5

Open the chart page →

1,008
helm-pilotlbenicio-communityVerified publisher0.2.41 of 1See more

helm-pilot lbenicio-community 0.2.4

1 of the 1 container images this version deploys carry CVE-2026-114111.

Container imageDigestPackageFixed in
lbenicio/helm-pilot:0.2.54594a2632510
sharp@0.34.5
0.35.5

Open the chart page →

867
jellyseerrlbenicio-communityVerified publisher0.1.01 of 1See more

jellyseerr lbenicio-community 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-114111.

Container imageDigestPackageFixed in
fallenbagel/jellyseerr:latest91edd5620e51
sharp@0.33.4
0.35.5

Open the chart page →

3,184

Container images carrying it

147 by charts deploying them

A fixed version is listed for 1 of the 1 affected package.

Container imageDigestPackageFixed inUsed by
ghcr.io/data-fair/data-fair:3cc9498b64b5b
sharp@0.32.6
0.35.5
1
ghcr.io/data-fair/portals:18b621866ceb2
sharp@0.31.3
0.35.5
1
ghcr.io/devops-dojo7/fauxgpu/web:0.2.4691dd15d6bca
sharp@0.35.3
0.35.5
1
ghcr.io/ding113/claude-code-hub:latestfa7c6f5428c2
sharp@0.35.4
0.35.5
1
ghcr.io/documenso/documensod9985f66c19c
sharp@0.35.4
0.35.5
1
ghcr.io/fallenbagel/jellyseerr:2.5.22a611369ad1d
sharp@0.33.4
0.35.5
1
ghcr.io/flanksource/facet:0.1.73a0323f4283e5
sharp@0.35.4
0.35.5
1
ghcr.io/fluxerapp/fluxer-api:2026.820.164808f683541d5374
sharp@0.34.5
0.35.5
1
ghcr.io/gethomepage/homepage:latest:v2.4.0643bd0be730d
sharp@0.35.4
0.35.5
1
ghcr.io/gethomepage/homepage:latest:v2.2.0753eeb0cc22a
sharp@0.35.3
0.35.5
1
ghcr.io/gethomepage/homepage:v1.13.2a0b71c8e7572
sharp@0.34.5
0.35.5
1
ghcr.io/gethomepage/homepage:v1.11.0b129cb0f674b
sharp@0.34.5
0.35.5
1
ghcr.io/glassflow/glassflow-etl-fe:v3.2.05eaad43bd6c5
sharp@0.34.5
0.35.5
1
ghcr.io/harish2k01/portfolio-tracker:0.7.043be1d6b454e
sharp@0.34.5
0.35.5
1
ghcr.io/homarr-labs/homarr:v1.77.2d60120a04536
sharp@0.35.3
0.35.5
1
ghcr.io/itsmylife44/cliproxyapi-dashboard/dashboard:0.1.9088f02aa3034e
sharp@0.34.5
0.35.5
1
ghcr.io/kadajett/podscope:0.2.3eeedf17112d7
sharp@0.34.5
0.35.5
1
ghcr.io/kagent-dev/kagent/ui:0.10.4a6edf70c6e8e
sharp@0.35.4
0.35.5
1
ghcr.io/karakeep-app/karakeep:0.27.1abd7d6b11b1b
sharp@0.34.3
0.35.5
1
ghcr.io/karakeep-app/karakeep:0.26.0f575a34ed3f8
sharp@0.33.3
0.35.5
1
ghcr.io/kikplate/kikplate-web:main34bbb61e8e42
sharp@0.34.5
0.35.5
1
ghcr.io/laki-n/laki-ui:v1.6.0e51253617271
sharp@0.35.3
0.35.5
1
ghcr.io/linkwarden/linkwarden:v2.16.30664c28a039b
sharp@0.34.5
0.35.5
1
ghcr.io/microboxlabs/miot-docs:latest893259699070
sharp@0.35.4
0.35.5
1
ghcr.io/microboxlabs/miot-docs:latestd3431480deea
sharp@0.35.4
0.35.5
1
ghcr.io/multica-ai/multica-web:v0.6.5f38d02584705
sharp@0.35.4
0.35.5
1
ghcr.io/openclaw/openclaw:2026.5.22dcfd14877740
sharp@0.34.5
0.35.5
1
ghcr.io/openlit/openlit:1.24.02434560e8f0e
sharp@0.34.5
0.35.5
1
ghcr.io/open-telemetry/demo:3.1.0-frontend28358db46206
sharp@0.35.4
0.35.5
1
ghcr.io/open-telemetry/demo:1.12.0-frontend8b348f00ca4c
sharp@0.33.4
0.35.5
1
ghcr.io/papra-hq/papra:26.7.0-rootlessbf4a66e776d0
sharp@0.35.4
0.35.5
1
ghcr.io/radar-base/radar-self-enrolment-ui:0.1.0b9a7cd3cc099
sharp@0.34.4
0.35.5
1
ghcr.io/rybbit-io/rybbit-client:latest9a3bbb2e837a
sharp@0.34.5
0.35.5
1
ghcr.io/seerr-team/seerr:v3.5.1d8fab675b55a
sharp@0.34.5
0.35.5
1
ghcr.io/trieb-work/saleor-apps/saleor-app-products-feed:1.23.11d435b4ab372
sharp@0.33.5
0.35.5
1
ghcr.io/trieb-work/saleor-apps/saleor-app-search:1.24.328edefb6c92d
sharp@0.33.5
0.35.5
1
ghcr.io/trieb-work/saleor-apps/saleor-app-smtp:1.4.357a06bfba327
sharp@0.33.5
0.35.5
1
ghcr.io/umami-software/umami:3.0.328f263fe06f7
sharp@0.34.3
0.35.5
1
ghcr.io/umami-software/umami:postgresql-v1.39.560fa8875aff8
sharp@0.30.7
0.35.5
1
ghcr.io/wachd/wachd:0.4.1805b05c56da94
sharp@0.34.5
0.35.5
1
ghcr.io/waldo-vision/web:v0.3.65bbc7647df07
sharp@0.32.0
0.35.5
1
ghcr.io/wasilak/kube-ingress-dash:0.3.1ff55992f905c
sharp@0.34.5
0.35.5
1
ghcr.io/wundergraph/cosmo/studio:0.111.0454f4384713a
sharp@0.33.5
0.35.5
1
ghcr.io/xmv-solutions-gmbh/strapi:latest5ffcc95d11e8
sharp@0.33.5
0.35.5
1
public.ecr.aws/g4a0y2u8/unifie-store:staging-19925a2057fabc948
sharp@0.33.5
0.35.5
1
quay.io/flomesh/flomesh-console-ubi8:0.70.0-30ce6938ff6709
sharp@0.28.1
0.35.5
1
quay.io/kuberay/dashboard:v1.7.149b50dcc8d53
sharp@0.34.5
0.35.5
1

syft 1.42.1 · advisories as of 22 Oct 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.