StackRadar

CVE-2026-114111

High

Advisory

Published 6 Oct 2026In the index since 22 Oct 2026
Severity
High
worst across findings
CVSS
8.9
base score, highest
EPSS
0.001
2nd percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
148
of 18,219 indexed, latest versions
Container images
147
deployed by those charts
Fix available
1 of 1
affected package

sharp : Vulnerability in librsvg dependency CVE-2026-96889

Carried by container images the latest versions of 148 of 18,219 indexed charts deploy, on 147 images.

Affected packageAffected versionsFixed inImages
sharpnpm0.23.4, 0.27.2, 0.28.1, 0.29.0+18 more0.35.5147
OSV records
GHSA-wq5f-xc86-pv6w

Charts affected

148 by stars
ChartLatestAffected imagesRadar Score
dltkvassist-iot-data-integrity-verification0.2.01 of 9See more

dltkv assist-iot-data-integrity-verification 0.2.0

1 of the 9 container images this version deploys carry CVE-2026-114111.

Container imageDigestPackageFixed in
assistiot/dlt_api:2.0.0e36a8922fa0c
sharp@0.27.2
0.35.5

Open the chart page →

192,164
dltflassist-iot-dlt-based-fl0.2.01 of 9See more

dltfl assist-iot-dlt-based-fl 0.2.0

1 of the 9 container images this version deploys carry CVE-2026-114111.

Container imageDigestPackageFixed in
assistiot/dlt_api:2.1.0c8a170683be7
sharp@0.27.2
0.35.5

Open the chart page →

192,164
pangolinbdcode0.14.11 of 1See more

pangolin bdcode 0.14.1

1 of the 1 container images this version deploys carry CVE-2026-114111.

Container imageDigestPackageFixed in
fosrl/pangolin:latest17774ddbb4bf
sharp@0.35.4
0.35.5

Open the chart page →

2,306
immichbear0.1.11 of 2See more

immich bear 0.1.1

1 of the 2 container images this version deploys carry CVE-2026-114111.

Container imageDigestPackageFixed in
ghcr.io/immich-app/immich-server:v3.1.0b434cb9287ee
sharp@0.34.5
0.35.5

Open the chart page →

8,075
mx-apibicarus-labs0.1.01 of 4See more

mx-api bicarus-labs 0.1.0

1 of the 4 container images this version deploys carry CVE-2026-114111.

Container imageDigestPackageFixed in
bicarus/mx-api-service:1.0.2-hf1dab88659ae3b
sharp@0.30.7
0.35.5

Open the chart page →

5,422
kamaji-consoleclastixVerified publisher0.1.31 of 1See more

kamaji-console clastix 0.1.3

1 of the 1 container images this version deploys carry CVE-2026-114111.

Container imageDigestPackageFixed in
ghcr.io/clastix/kamaji-console:v0.2.129ecf8d4fa65
sharp@0.33.5
0.35.5

Open the chart page →

3,463
coderstudio-strapi-devcoderstudio-strapi-devVerified publisher0.0.11 of 3See more

coderstudio-strapi-dev coderstudio-strapi-dev 0.0.1

1 of the 3 container images this version deploys carry CVE-2026-114111.

Container imageDigestPackageFixed in
rcdelacruz/my-strapi-app:js-amd6438007f358355
sharp@0.32.0
0.35.5

Open the chart page →

6,183
docker-composecoderstudio-strapi-devVerified publisher0.0.11 of 3See more

docker-compose coderstudio-strapi-dev 0.0.1

1 of the 3 container images this version deploys carry CVE-2026-114111.

Container imageDigestPackageFixed in
rcdelacruz/my-strapi-app:js-amd6438007f358355
sharp@0.32.0
0.35.5

Open the chart page →

6,183
strapi-devcoderstudio-strapi-devVerified publisher0.0.11 of 3See more

strapi-dev coderstudio-strapi-dev 0.0.1

1 of the 3 container images this version deploys carry CVE-2026-114111.

Container imageDigestPackageFixed in
rcdelacruz/my-strapi-app:js-amd6438007f358355
sharp@0.32.0
0.35.5

Open the chart page →

6,141
quickchartcowboysysopVerified publisher5.0.01 of 1See more

quickchart cowboysysop 5.0.0

1 of the 1 container images this version deploys carry CVE-2026-114111.

Container imageDigestPackageFixed in
ianw/quickchart:v1.7.1dc49dd460c37
sharp@0.30.7
0.35.5

Open the chart page →

7,089
kuberay-dashboarddanchevVerified publisher0.0.71 of 1See more

kuberay-dashboard danchev 0.0.7

1 of the 1 container images this version deploys carry CVE-2026-114111.

Container imageDigestPackageFixed in
quay.io/kuberay/dashboard:v1.7.149b50dcc8d53
sharp@0.34.5
0.35.5

Open the chart page →

485
desishowbiz-frontenddesishowbiz1.0.01 of 1See more

desishowbiz-frontend desishowbiz 1.0.0

1 of the 1 container images this version deploys carry CVE-2026-114111.

Container imageDigestPackageFixed in
rahulbhiwagade122/desishowbiz:latest08490b70998c
sharp@0.33.5
0.35.5

Open the chart page →

3,341
difydify1.0.01 of 4See more

dify dify 1.0.0

1 of the 4 container images this version deploys carry CVE-2026-114111.

Container imageDigestPackageFixed in
langgenius/dify-web:1.0.0d64914ff0d6d
sharp@0.33.5
0.35.5

Open the chart page →

56,433
directusdirectusVerified publisher0.9.101 of 4See more

directus directus 0.9.10

1 of the 4 container images this version deploys carry CVE-2026-114111.

Container imageDigestPackageFixed in
directus/directus:11.1.0e3c8bb975350
sharp@0.33.5
0.35.5

Open the chart page →

5,617
documensodocumensoVerified publisher0.0.61 of 2See more

documenso documenso 0.0.6

1 of the 2 container images this version deploys carry CVE-2026-114111.

Container imageDigestPackageFixed in
documenso/documenso:v1.8.17f16a9449f18
sharp@0.32.6
0.35.5

Open the chart page →

3,396
dashboardedu1.0.01 of 1See more

dashboard edu 1.0.0

1 of the 1 container images this version deploys carry CVE-2026-114111.

Container imageDigestPackageFixed in
sysnet4admin/dashboard:bluec5bd3bb1b5a6
sharp@0.33.4
0.35.5

Open the chart page →

1,638
fauxgpufauxgpuVerified publisher0.2.41 of 4See more

fauxgpu fauxgpu 0.2.4

1 of the 4 container images this version deploys carry CVE-2026-114111.

Container imageDigestPackageFixed in
ghcr.io/devops-dojo7/fauxgpu/web:0.2.4691dd15d6bca
sharp@0.35.3
0.35.5

Open the chart page →

3,983
canary-checkerflanksourceVerified publisher1.2.01 of 2See more

canary-checker flanksource 1.2.0

1 of the 2 container images this version deploys carry CVE-2026-114111.

Container imageDigestPackageFixed in
flanksource/canary-checker-ui:v1.4.281764c84e550db
sharp@0.32.6
0.35.5

Open the chart page →

5,557
facetflanksourceVerified publisher0.1.731 of 1See more

facet flanksource 0.1.73

1 of the 1 container images this version deploys carry CVE-2026-114111.

Container imageDigestPackageFixed in
ghcr.io/flanksource/facet:0.1.73a0323f4283e5
sharp@0.35.4
0.35.5

Open the chart page →

29,576
flanksource-uiflanksourceVerified publisher1.4.3541 of 1See more

flanksource-ui flanksource 1.4.354

1 of the 1 container images this version deploys carry CVE-2026-114111.

Container imageDigestPackageFixed in
flanksource/incident-manager-ui:v1.4.3542bb089c79fc0
sharp@0.34.5
0.35.5

Open the chart page →

3,528
mission-controlflanksourceVerified publisher0.1.3391 of 8See more

mission-control flanksource 0.1.339

1 of the 8 container images this version deploys carry CVE-2026-114111.

Container imageDigestPackageFixed in
flanksource/incident-manager-ui:v1.4.3228d17f0c08b20
sharp@0.34.5
0.35.5

Open the chart page →

11,801
fluxer-helmfluxer-helm0.3.01 of 18See more

fluxer-helm fluxer-helm 0.3.0

1 of the 18 container images this version deploys carry CVE-2026-114111.

Container imageDigestPackageFixed in
ghcr.io/fluxerapp/fluxer-api:2026.820.164808f683541d5374
sharp@0.34.5
0.35.5

Open the chart page →

32,986
double-takegeek-cookbookVerified publisher2.3.21 of 1See more

double-take geek-cookbook 2.3.2

1 of the 1 container images this version deploys carry CVE-2026-114111.

Container imageDigestPackageFixed in
jakowenko/double-take:1.6.0b858bac9e32a
sharp@0.29.2
0.35.5

Open the chart page →

86,583
ghostghostVerified publisher0.1.01 of 4See more

ghost ghost 0.1.0

1 of the 4 container images this version deploys carry CVE-2026-114111.

Container imageDigestPackageFixed in
library/ghost:5.79.083f7bf209844
sharp@0.32.6
0.35.5

Open the chart page →

10,833
glassflow-etlglassflowVerified publisher0.5.211 of 16See more

glassflow-etl glassflow 0.5.21

1 of the 16 container images this version deploys carry CVE-2026-114111.

Container imageDigestPackageFixed in
ghcr.io/glassflow/glassflow-etl-fe:v3.2.05eaad43bd6c5
sharp@0.34.5
0.35.5

Open the chart page →

17,681
opentelemetry-demogpg-dev0.33.81 of 27See more

opentelemetry-demo gpg-dev 0.33.8

1 of the 27 container images this version deploys carry CVE-2026-114111.

Container imageDigestPackageFixed in
ghcr.io/open-telemetry/demo:1.12.0-frontend8b348f00ca4c
sharp@0.33.4
0.35.5

Open the chart page →

196,721
librechathajowielandVerified publisher1.1.01 of 1See more

librechat hajowieland 1.1.0

1 of the 1 container images this version deploys carry CVE-2026-114111.

Container imageDigestPackageFixed in
ghcr.io/danny-avila/librechat:v0.7.87fe76551a78e
sharp@0.33.5
0.35.5

Open the chart page →

3,682
lobe-chathelm-charts-darox0.1.561 of 1See more

lobe-chat helm-charts-darox 0.1.56

1 of the 1 container images this version deploys carry CVE-2026-114111.

Container imageDigestPackageFixed in
lobehub/lobe-chat:1.96.9da0c21fefcd3
sharp@0.33.5
0.35.5

Open the chart page →

667
documensohelmforgeVerified publisher1.0.01 of 3See more

documenso helmforge 1.0.0

1 of the 3 container images this version deploys carry CVE-2026-114111.

Container imageDigestPackageFixed in
ghcr.io/documenso/documensodigest-pinnedd9985f66c19c
sharp@0.35.4
0.35.5

Open the chart page →

2,024
homarrhelmforgeVerified publisher1.2.141 of 1See more

homarr helmforge 1.2.14

1 of the 1 container images this version deploys carry CVE-2026-114111.

Container imageDigestPackageFixed in
ghcr.io/homarr-labs/homarr:v2.6.01e077fc77d3a
sharp@0.35.4
0.35.5

Open the chart page →

86
immichhelmforgeVerified publisher1.2.131 of 5See more

immich helmforge 1.2.13

1 of the 5 container images this version deploys carry CVE-2026-114111.

Container imageDigestPackageFixed in
ghcr.io/immich-app/immich-server:v3.1.0b434cb9287ee
sharp@0.34.5
0.35.5

Open the chart page →

13,173
opencuthelmforgeVerified publisher1.1.141 of 5See more

opencut helmforge 1.1.14

1 of the 5 container images this version deploys carry CVE-2026-114111.

Container imageDigestPackageFixed in
helmforge/opencut:v0.3.0bf11156e0ab5
sharp@0.34.5
0.35.5

Open the chart page →

3,705
paprahelmforgeVerified publisher1.0.21 of 1See more

papra helmforge 1.0.2

1 of the 1 container images this version deploys carry CVE-2026-114111.

Container imageDigestPackageFixed in
ghcr.io/papra-hq/papra:26.7.0-rootlessbf4a66e776d0
sharp@0.35.4
0.35.5

Open the chart page →

3,685
reactive-resumehelmforgeVerified publisher1.0.21 of 4See more

reactive-resume helmforge 1.0.2

1 of the 4 container images this version deploys carry CVE-2026-114111.

Container imageDigestPackageFixed in
ghcr.io/amruthpillai/reactive-resume:v5.3.0c487ec5edcfe
sharp@0.35.4
0.35.5

Open the chart page →

4,028
strapihelmforgeVerified publisher2.3.171 of 3See more

strapi helmforge 2.3.17

1 of the 3 container images this version deploys carry CVE-2026-114111.

Container imageDigestPackageFixed in
helmforge/strapi-base:5.52.25a6c2c449840
sharp@0.35.3
0.35.5

Open the chart page →

2,580
pi-gallery2homeenterpriseinc0.3.01 of 1See more

pi-gallery2 homeenterpriseinc 0.3.0

1 of the 1 container images this version deploys carry CVE-2026-114111.

Container imageDigestPackageFixed in
bpatrik/pigallery2:1.9.0-debian-buster21fbaa5fae61
sharp@0.23.4
0.35.5

Open the chart page →

3,690
multicaicoretechVerified publisher0.6.61 of 4See more

multica icoretech 0.6.6

1 of the 4 container images this version deploys carry CVE-2026-114111.

Container imageDigestPackageFixed in
ghcr.io/multica-ai/multica-web:v0.6.5f38d02584705
sharp@0.35.4
0.35.5

Open the chart page →

2,511
nocodbinseefrlab0.2.01 of 1See more

nocodb inseefrlab 0.2.0

1 of the 1 container images this version deploys carry CVE-2026-114111.

Container imageDigestPackageFixed in
nocodb/nocodb:latest27d2fd14670d
sharp@0.35.4
0.35.5

Open the chart page →

357
ghostjanip81-helm-chartsVerified publisher0.1.21 of 1See more

ghost janip81-helm-charts 0.1.2

1 of the 1 container images this version deploys carry CVE-2026-114111.

Container imageDigestPackageFixed in
library/ghost:6.37.01ef2e532ca4d
sharp@0.34.5
0.35.5

Open the chart page →

4,797
ghostk8s-home-lab-repo4.1.01 of 1See more

ghost k8s-home-lab-repo 4.1.0

1 of the 1 container images this version deploys carry CVE-2026-114111.

Container imageDigestPackageFixed in
library/ghost:6.41.129773d6be407
sharp@0.34.5
0.35.5

Open the chart page →

4,307
kagentkagent0.10.41 of 6See more

kagent kagent 0.10.4

1 of the 6 container images this version deploys carry CVE-2026-114111.

Container imageDigestPackageFixed in
ghcr.io/kagent-dev/kagent/ui:0.10.4a6edf70c6e8e
sharp@0.35.4
0.35.5

Open the chart page →

4,125
visual-regression-trackerkokuwa5.1.01 of 4See more

visual-regression-tracker kokuwa 5.1.0

1 of the 4 container images this version deploys carry CVE-2026-114111.

Container imageDigestPackageFixed in
visualregressiontracker/api:5.0.11941aeb8c8bf9
sharp@0.32.6
0.35.5

Open the chart page →

9,834
pangolinkrzwiatrzyk0.11.01 of 1See more

pangolin krzwiatrzyk 0.11.0

1 of the 1 container images this version deploys carry CVE-2026-114111.

Container imageDigestPackageFixed in
fosrl/pangolin:1.13.0c32ad797ab96
sharp@0.34.4
0.35.5

Open the chart page →

3,877
aperagkubeblocksVerified publisher0.0.0-nightly1 of 3See more

aperag kubeblocks 0.0.0-nightly

1 of the 3 container images this version deploys carry CVE-2026-114111.

Container imageDigestPackageFixed in
apecloud/aperag-frontend:v0.0.0-nightlyb3ae37840ace
sharp@0.34.3
0.35.5

Open the chart page →

10,010
homepagekubernetes-homelab-helm-chartsVerified publisher0.1.11 of 1See more

homepage kubernetes-homelab-helm-charts 0.1.1

1 of the 1 container images this version deploys carry CVE-2026-114111.

Container imageDigestPackageFixed in
ghcr.io/gethomepage/homepage:v1.13.2a0b71c8e7572
sharp@0.34.5
0.35.5

Open the chart page →

1,123
portfolio-trackerkubernetes-homelab-helm-chartsVerified publisher0.2.11 of 3See more

portfolio-tracker kubernetes-homelab-helm-charts 0.2.1

1 of the 3 container images this version deploys carry CVE-2026-114111.

Container imageDigestPackageFixed in
ghcr.io/harish2k01/portfolio-tracker:0.7.043be1d6b454e
sharp@0.34.5
0.35.5

Open the chart page →

1,998
seerrkubernetes-homelab-helm-chartsVerified publisher0.2.01 of 1See more

seerr kubernetes-homelab-helm-charts 0.2.0

1 of the 1 container images this version deploys carry CVE-2026-114111.

Container imageDigestPackageFixed in
ghcr.io/seerr-team/seerr:v3.5.027602401178d
sharp@0.34.5
0.35.5

Open the chart page →

2,335
umamikubernetes-homelab-helm-chartsVerified publisher0.2.11 of 3See more

umami kubernetes-homelab-helm-charts 0.2.1

1 of the 3 container images this version deploys carry CVE-2026-114111.

Container imageDigestPackageFixed in
ghcr.io/umami-software/umami:3.4.085909afc45bd
sharp@0.35.4
0.35.5

Open the chart page →

1,008
helm-pilotlbenicio-communityVerified publisher0.2.41 of 1See more

helm-pilot lbenicio-community 0.2.4

1 of the 1 container images this version deploys carry CVE-2026-114111.

Container imageDigestPackageFixed in
lbenicio/helm-pilot:0.2.54594a2632510
sharp@0.34.5
0.35.5

Open the chart page →

867
jellyseerrlbenicio-communityVerified publisher0.1.01 of 1See more

jellyseerr lbenicio-community 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-114111.

Container imageDigestPackageFixed in
fallenbagel/jellyseerr:latest91edd5620e51
sharp@0.33.4
0.35.5

Open the chart page →

3,184

Container images carrying it

147 by charts deploying them

A fixed version is listed for 1 of the 1 affected package.

Container imageDigestPackageFixed inUsed by
assistiot/dlt_api:2.0.0e36a8922fa0c
sharp@0.27.2
0.35.5
3
joplin/server:3.7.2:latest3f7b852959aa
sharp@0.34.5
0.35.5
3
rcdelacruz/my-strapi-app:js-amd6438007f358355
sharp@0.32.0
0.35.5
3
ghcr.io/microboxlabs/miot-app:0.5.203cc10a496ced
sharp@0.34.5
0.35.5
3
ghcr.io/seerr-team/seerr:latest:v3.5.027602401178d
sharp@0.34.5
0.35.5
3
ghcr.io/umami-software/umami:3.4.085909afc45bd
sharp@0.35.4
0.35.5
3
speckle/speckle-preview-service:2.18.11-branch.testing2.88634-335d469:2.18.12-branch.testing3.88744-f55b3414bd113093583
sharp@0.32.6
0.35.5
2
sysnet4admin/dashboard:bluec5bd3bb1b5a6
sharp@0.33.4
0.35.5
2
ghcr.io/homarr-labs/homarr:v2.6.01e077fc77d3a
sharp@0.35.4
0.35.5
2
ghcr.io/immich-app/immich-server:v3.1.0b434cb9287ee
sharp@0.34.5
0.35.5
2
ghcr.io/nucleuscloud/neosync/app:0.5.41ca31ec35b829
sharp@0.34.1
0.35.5
2
ghcr.io/unionai-oss/flyteconsole-v2:latest7e19bbdd2e7d
sharp@0.35.3
0.35.5
2
aktosecurity/akto-puppeteer-replay:doom_latest853e37321e6e
sharp@0.33.5
0.35.5
1
alquimiaai/studio:certification38a1f0341982
sharp@0.34.4
0.35.5
1
apecloud/aperag-frontend:v0.0.0-nightlyb3ae37840ace
sharp@0.34.3
0.35.5
1
assistiot/dlt_api:2.1.0c8a170683be7
sharp@0.27.2
0.35.5
1
bicarus/mx-api-service:1.0.2-hf1dab88659ae3b
sharp@0.30.7
0.35.5
1
bpatrik/pigallery2:1.9.0-debian-buster21fbaa5fae61
sharp@0.23.4
0.35.5
1
browserless/chrome:1.48.0-chrome-stablec81ae5585b47
sharp@0.29.0
0.35.5
1
chibisafe/chibisafe:latest534ba9902a37
sharp@0.33.3
0.35.5
1
chibisafe/chibisafe-server:latesta3a8606cd9b5
sharp@0.33.2
0.35.5
1
chocobozzz/peertube:v8.1.5052712130691
sharp@0.34.5
0.35.5
1
dessalines/lemmy-ui:0.19.20ee4c620d8e93
sharp@0.33.5
0.35.5
1
directus/directus:12.0.29c8470ea465c
sharp@0.34.5
0.35.5
1
directus/directus:11.1.0e3c8bb975350
sharp@0.33.5
0.35.5
1
documenso/documenso:v1.8.17f16a9449f18
sharp@0.32.6
0.35.5
1
drumsergio/pumperly:1.17.0f7efe5fc03f3
sharp@0.35.4
0.35.5
1
dserio83/velero-ui:0.3.1b4e1ec6664d3
sharp@0.33.5
0.35.5
1
evoapicloud/evolution-api:latest966625532d90
sharp@0.34.5
0.35.5
1
fallenbagel/jellyseerr:latest91edd5620e51
sharp@0.33.4
0.35.5
1
fallenbagel/jellyseerr:2.2.3a324fa4d81cc
sharp@0.33.4
0.35.5
1
flanksource/canary-checker-ui:v1.4.281764c84e550db
sharp@0.32.6
0.35.5
1
flanksource/incident-manager-ui:v1.4.3542bb089c79fc0
sharp@0.34.5
0.35.5
1
flanksource/incident-manager-ui:v1.4.3228d17f0c08b20
sharp@0.34.5
0.35.5
1
fosrl/pangolin:latest17774ddbb4bf
sharp@0.35.4
0.35.5
1
fosrl/pangolin:1.13.0c32ad797ab96
sharp@0.34.4
0.35.5
1
helmforge/opencut:v0.3.0bf11156e0ab5
sharp@0.34.5
0.35.5
1
helmforge/strapi-base:5.52.25a6c2c449840
sharp@0.35.3
0.35.5
1
ianw/quickchart:v1.7.1dc49dd460c37
sharp@0.30.7
0.35.5
1
jakowenko/double-take:1.6.0b858bac9e32a
sharp@0.29.2
0.35.5
1
joplin/server:3.0-beta52af57880c0e
sharp@0.33.3
0.35.5
1
langgenius/dify-ee-enterprise-frontend:3.9.8-ubi98dd9de6b6190
sharp@0.34.5
0.35.5
1
langgenius/dify-ee-web:3.9.8-ubi9ba1dd1d0bcea
sharp@0.34.5
0.35.5
1
langgenius/dify-web:1.17.06a81fcdd82b5
sharp@0.35.3
0.35.5
1
langgenius/dify-web:0.6.11a2a294743634
sharp@0.33.2
0.35.5
1
langgenius/dify-web:1.10.1-fix.1c306ac577912
sharp@0.34.4
0.35.5
1
langgenius/dify-web:1.0.0d64914ff0d6d
sharp@0.33.5
0.35.5
1
lbenicio/helm-pilot:0.2.54594a2632510
sharp@0.34.5
0.35.5
1
library/ghost:6.37.01ef2e532ca4d
sharp@0.34.5
0.35.5
1
library/ghost:6.25.12654b1e90413
sharp@0.34.5
0.35.5
1

syft 1.42.1 · advisories as of 22 Oct 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.