StackRadar

CVE-2026-114113

High

Advisory

Published 21 Jul 2026In the index since 22 Oct 2026
Severity
High
worst across findings
CVSS
7.0
base score, highest
EPSS
0.001
1st percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
119
of 18,219 indexed, latest versions
Container images
119
deployed by those charts
Fix available
1 of 1
affected package

sharp inherited vulnerabilities in libvips: CVE-2026-33327, CVE-2026-33328, CVE-2026-35590, CVE-2026-35591

Carried by container images the latest versions of 119 of 18,219 indexed charts deploy, on 119 images.

Affected packageAffected versionsFixed inImages
sharpnpm0.23.4, 0.27.2, 0.28.1, 0.29.0+16 more0.35.0119
OSV records
GHSA-f88m-g3jw-g9cj

Charts affected

119 by stars
ChartLatestAffected imagesRadar Score
directusdirectusVerified publisher0.9.101 of 4See more

directus directus 0.9.10

1 of the 4 container images this version deploys carry CVE-2026-114113.

Container imageDigestPackageFixed in
directus/directus:11.1.0e3c8bb975350
sharp@0.33.5
0.35.0

Open the chart page →

5,617
documensodocumensoVerified publisher0.0.61 of 2See more

documenso documenso 0.0.6

1 of the 2 container images this version deploys carry CVE-2026-114113.

Container imageDigestPackageFixed in
documenso/documenso:v1.8.17f16a9449f18
sharp@0.32.6
0.35.0

Open the chart page →

3,396
dashboardedu1.0.01 of 1See more

dashboard edu 1.0.0

1 of the 1 container images this version deploys carry CVE-2026-114113.

Container imageDigestPackageFixed in
sysnet4admin/dashboard:bluec5bd3bb1b5a6
sharp@0.33.4
0.35.0

Open the chart page →

1,638
canary-checkerflanksourceVerified publisher1.2.01 of 2See more

canary-checker flanksource 1.2.0

1 of the 2 container images this version deploys carry CVE-2026-114113.

Container imageDigestPackageFixed in
flanksource/canary-checker-ui:v1.4.281764c84e550db
sharp@0.32.6
0.35.0

Open the chart page →

5,557
flanksource-uiflanksourceVerified publisher1.4.3541 of 1See more

flanksource-ui flanksource 1.4.354

1 of the 1 container images this version deploys carry CVE-2026-114113.

Container imageDigestPackageFixed in
flanksource/incident-manager-ui:v1.4.3542bb089c79fc0
sharp@0.34.5
0.35.0

Open the chart page →

3,528
mission-controlflanksourceVerified publisher0.1.3391 of 8See more

mission-control flanksource 0.1.339

1 of the 8 container images this version deploys carry CVE-2026-114113.

Container imageDigestPackageFixed in
flanksource/incident-manager-ui:v1.4.3228d17f0c08b20
sharp@0.34.5
0.35.0

Open the chart page →

11,801
fluxer-helmfluxer-helm0.3.01 of 18See more

fluxer-helm fluxer-helm 0.3.0

1 of the 18 container images this version deploys carry CVE-2026-114113.

Container imageDigestPackageFixed in
ghcr.io/fluxerapp/fluxer-api:2026.820.164808f683541d5374
sharp@0.34.5
0.35.0

Open the chart page →

32,986
double-takegeek-cookbookVerified publisher2.3.21 of 1See more

double-take geek-cookbook 2.3.2

1 of the 1 container images this version deploys carry CVE-2026-114113.

Container imageDigestPackageFixed in
jakowenko/double-take:1.6.0b858bac9e32a
sharp@0.29.2
0.35.0

Open the chart page →

86,583
ghostghostVerified publisher0.1.01 of 4See more

ghost ghost 0.1.0

1 of the 4 container images this version deploys carry CVE-2026-114113.

Container imageDigestPackageFixed in
library/ghost:5.79.083f7bf209844
sharp@0.32.6
0.35.0

Open the chart page →

10,833
glassflow-etlglassflowVerified publisher0.5.211 of 16See more

glassflow-etl glassflow 0.5.21

1 of the 16 container images this version deploys carry CVE-2026-114113.

Container imageDigestPackageFixed in
ghcr.io/glassflow/glassflow-etl-fe:v3.2.05eaad43bd6c5
sharp@0.34.5
0.35.0

Open the chart page →

17,681
opentelemetry-demogpg-dev0.33.81 of 27See more

opentelemetry-demo gpg-dev 0.33.8

1 of the 27 container images this version deploys carry CVE-2026-114113.

Container imageDigestPackageFixed in
ghcr.io/open-telemetry/demo:1.12.0-frontend8b348f00ca4c
sharp@0.33.4
0.35.0

Open the chart page →

196,721
librechathajowielandVerified publisher1.1.01 of 1See more

librechat hajowieland 1.1.0

1 of the 1 container images this version deploys carry CVE-2026-114113.

Container imageDigestPackageFixed in
ghcr.io/danny-avila/librechat:v0.7.87fe76551a78e
sharp@0.33.5
0.35.0

Open the chart page →

3,682
lobe-chathelm-charts-darox0.1.561 of 1See more

lobe-chat helm-charts-darox 0.1.56

1 of the 1 container images this version deploys carry CVE-2026-114113.

Container imageDigestPackageFixed in
lobehub/lobe-chat:1.96.9da0c21fefcd3
sharp@0.33.5
0.35.0

Open the chart page →

667
immichhelmforgeVerified publisher1.2.131 of 5See more

immich helmforge 1.2.13

1 of the 5 container images this version deploys carry CVE-2026-114113.

Container imageDigestPackageFixed in
ghcr.io/immich-app/immich-server:v3.1.0b434cb9287ee
sharp@0.34.5
0.35.0

Open the chart page →

13,173
opencuthelmforgeVerified publisher1.1.141 of 5See more

opencut helmforge 1.1.14

1 of the 5 container images this version deploys carry CVE-2026-114113.

Container imageDigestPackageFixed in
helmforge/opencut:v0.3.0bf11156e0ab5
sharp@0.34.5
0.35.0

Open the chart page →

3,705
pi-gallery2homeenterpriseinc0.3.01 of 1See more

pi-gallery2 homeenterpriseinc 0.3.0

1 of the 1 container images this version deploys carry CVE-2026-114113.

Container imageDigestPackageFixed in
bpatrik/pigallery2:1.9.0-debian-buster21fbaa5fae61
sharp@0.23.4
0.35.0

Open the chart page →

3,690
ghostjanip81-helm-chartsVerified publisher0.1.21 of 1See more

ghost janip81-helm-charts 0.1.2

1 of the 1 container images this version deploys carry CVE-2026-114113.

Container imageDigestPackageFixed in
library/ghost:6.37.01ef2e532ca4d
sharp@0.34.5
0.35.0

Open the chart page →

4,797
ghostk8s-home-lab-repo4.1.01 of 1See more

ghost k8s-home-lab-repo 4.1.0

1 of the 1 container images this version deploys carry CVE-2026-114113.

Container imageDigestPackageFixed in
library/ghost:6.41.129773d6be407
sharp@0.34.5
0.35.0

Open the chart page →

4,307
visual-regression-trackerkokuwa5.1.01 of 4See more

visual-regression-tracker kokuwa 5.1.0

1 of the 4 container images this version deploys carry CVE-2026-114113.

Container imageDigestPackageFixed in
visualregressiontracker/api:5.0.11941aeb8c8bf9
sharp@0.32.6
0.35.0

Open the chart page →

9,834
pangolinkrzwiatrzyk0.11.01 of 1See more

pangolin krzwiatrzyk 0.11.0

1 of the 1 container images this version deploys carry CVE-2026-114113.

Container imageDigestPackageFixed in
fosrl/pangolin:1.13.0c32ad797ab96
sharp@0.34.4
0.35.0

Open the chart page →

3,877
aperagkubeblocksVerified publisher0.0.0-nightly1 of 3See more

aperag kubeblocks 0.0.0-nightly

1 of the 3 container images this version deploys carry CVE-2026-114113.

Container imageDigestPackageFixed in
apecloud/aperag-frontend:v0.0.0-nightlyb3ae37840ace
sharp@0.34.3
0.35.0

Open the chart page →

10,010
homepagekubernetes-homelab-helm-chartsVerified publisher0.1.11 of 1See more

homepage kubernetes-homelab-helm-charts 0.1.1

1 of the 1 container images this version deploys carry CVE-2026-114113.

Container imageDigestPackageFixed in
ghcr.io/gethomepage/homepage:v1.13.2a0b71c8e7572
sharp@0.34.5
0.35.0

Open the chart page →

1,123
portfolio-trackerkubernetes-homelab-helm-chartsVerified publisher0.2.11 of 3See more

portfolio-tracker kubernetes-homelab-helm-charts 0.2.1

1 of the 3 container images this version deploys carry CVE-2026-114113.

Container imageDigestPackageFixed in
ghcr.io/harish2k01/portfolio-tracker:0.7.043be1d6b454e
sharp@0.34.5
0.35.0

Open the chart page →

1,998
seerrkubernetes-homelab-helm-chartsVerified publisher0.2.01 of 1See more

seerr kubernetes-homelab-helm-charts 0.2.0

1 of the 1 container images this version deploys carry CVE-2026-114113.

Container imageDigestPackageFixed in
ghcr.io/seerr-team/seerr:v3.5.027602401178d
sharp@0.34.5
0.35.0

Open the chart page →

2,335
helm-pilotlbenicio-communityVerified publisher0.2.41 of 1See more

helm-pilot lbenicio-community 0.2.4

1 of the 1 container images this version deploys carry CVE-2026-114113.

Container imageDigestPackageFixed in
lbenicio/helm-pilot:0.2.54594a2632510
sharp@0.34.5
0.35.0

Open the chart page →

867
jellyseerrlbenicio-communityVerified publisher0.1.01 of 1See more

jellyseerr lbenicio-community 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-114113.

Container imageDigestPackageFixed in
fallenbagel/jellyseerr:latest91edd5620e51
sharp@0.33.4
0.35.0

Open the chart page →

3,184
dashboardleechistest1.0.01 of 1See more

dashboard leechistest 1.0.0

1 of the 1 container images this version deploys carry CVE-2026-114113.

Container imageDigestPackageFixed in
sysnet4admin/dashboard:bluec5bd3bb1b5a6
sharp@0.33.4
0.35.0

Open the chart page →

1,638
homepagem0sh1-helm-charts0.3.11 of 1See more

homepage m0sh1-helm-charts 0.3.1

1 of the 1 container images this version deploys carry CVE-2026-114113.

Container imageDigestPackageFixed in
ghcr.io/gethomepage/homepage:v1.11.0b129cb0f674b
sharp@0.34.5
0.35.0

Open the chart page →

1,997
magistralamagistrala-devopsVerified publisher0.16.21 of 42See more

magistrala magistrala-devops 0.16.2

1 of the 42 container images this version deploys carry CVE-2026-114113.

Container imageDigestPackageFixed in
ghcr.io/absmach/magistrala/ui-smq:latestea7e7f0e293e
sharp@0.34.2
0.35.0

Open the chart page →

35,042
miot-appmicroboxlabs0.3.31 of 1See more

miot-app microboxlabs 0.3.3

1 of the 1 container images this version deploys carry CVE-2026-114113.

Container imageDigestPackageFixed in
ghcr.io/microboxlabs/miot-app:0.5.203cc10a496ced
sharp@0.34.5
0.35.0

Open the chart page →

664
miot-stackmicroboxlabs0.2.31 of 2See more

miot-stack microboxlabs 0.2.3

1 of the 2 container images this version deploys carry CVE-2026-114113.

Container imageDigestPackageFixed in
ghcr.io/microboxlabs/miot-app:0.5.203cc10a496ced
sharp@0.34.5
0.35.0

Open the chart page →

664
modulariotmicroboxlabs0.11.11 of 4See more

modulariot microboxlabs 0.11.1

1 of the 4 container images this version deploys carry CVE-2026-114113.

Container imageDigestPackageFixed in
ghcr.io/microboxlabs/miot-app:0.5.203cc10a496ced
sharp@0.34.5
0.35.0

Open the chart page →

988
ghostmt1905028.25.11 of 3See more

ghost mt190502 8.25.1

1 of the 3 container images this version deploys carry CVE-2026-114113.

Container imageDigestPackageFixed in
library/ghost:6.25.12654b1e90413
sharp@0.34.5
0.35.0

Open the chart page →

6,498
umamimt1905028.1.41 of 3See more

umami mt190502 8.1.4

1 of the 3 container images this version deploys carry CVE-2026-114113.

Container imageDigestPackageFixed in
ghcr.io/umami-software/umami:3.0.328f263fe06f7
sharp@0.34.3
0.35.0

Open the chart page →

4,257
neosyncneosyncVerified publisher0.5.411 of 3See more

neosync neosync 0.5.41

1 of the 3 container images this version deploys carry CVE-2026-114113.

Container imageDigestPackageFixed in
ghcr.io/nucleuscloud/neosync/app:0.5.41ca31ec35b829
sharp@0.34.1
0.35.0

Open the chart page →

8,872
appneosync-appVerified publisher0.5.411 of 1See more

app neosync-app 0.5.41

1 of the 1 container images this version deploys carry CVE-2026-114113.

Container imageDigestPackageFixed in
ghcr.io/nucleuscloud/neosync/app:0.5.41ca31ec35b829
sharp@0.34.1
0.35.0

Open the chart page →

1,689
bluesky-pdsnerkho-helm-charts0.4.21 of 1See more

bluesky-pds nerkho-helm-charts 0.4.2

1 of the 1 container images this version deploys carry CVE-2026-114113.

Container imageDigestPackageFixed in
ghcr.io/bluesky-social/pds:0.4.204cbc6e3ea157d
sharp@0.33.5
0.35.0

Open the chart page →

3,092
nocodbone-acre-fundVerified publisher0.4.61 of 3See more

nocodb one-acre-fund 0.4.6

1 of the 3 container images this version deploys carry CVE-2026-114113.

Container imageDigestPackageFixed in
nocodb/nocodb:0.258.06779a4ddedf2
sharp@0.33.5
0.35.0

Open the chart page →

5,369
openlitopenlit1.24.01 of 3See more

openlit openlit 1.24.0

1 of the 3 container images this version deploys carry CVE-2026-114113.

Container imageDigestPackageFixed in
ghcr.io/openlit/openlit:1.24.02434560e8f0e
sharp@0.34.5
0.35.0

Open the chart page →

6,149
alquimia-studioopenshift0.2.01 of 1See more

alquimia-studio openshift 0.2.0

1 of the 1 container images this version deploys carry CVE-2026-114113.

Container imageDigestPackageFixed in
alquimiaai/studio:certification38a1f0341982
sharp@0.34.4
0.35.0

Open the chart page →

2,669
dify-enterpriseopenshift3.9.82 of 13See more

dify-enterprise openshift 3.9.8

2 of the 13 container images this version deploys carry CVE-2026-114113.

Container imageDigestPackageFixed in
langgenius/dify-ee-enterprise-frontend:3.9.8-ubi98dd9de6b6190
sharp@0.34.5
0.35.0
langgenius/dify-ee-web:3.9.8-ubi9ba1dd1d0bcea
sharp@0.34.5
0.35.0

Open the chart page →

9,749
flomesh-consoleopenshift0.70.0-30-ubi81 of 2See more

flomesh-console openshift 0.70.0-30-ubi8

1 of the 2 container images this version deploys carry CVE-2026-114113.

Container imageDigestPackageFixed in
quay.io/flomesh/flomesh-console-ubi8:0.70.0-30ce6938ff6709
sharp@0.28.1
0.35.0

Open the chart page →

10,610
console-webovrclk-20.1.11 of 1See more

console-web ovrclk-2 0.1.1

1 of the 1 container images this version deploys carry CVE-2026-114113.

Container imageDigestPackageFixed in
ghcr.io/akash-network/deploy-web:2.46.0ac540172c120
sharp@0.30.7
0.35.0

Open the chart page →

3,093
podscopepodscope0.2.31 of 1See more

podscope podscope 0.2.3

1 of the 1 container images this version deploys carry CVE-2026-114113.

Container imageDigestPackageFixed in
ghcr.io/kadajett/podscope:0.2.3eeedf17112d7
sharp@0.34.5
0.35.0

Open the chart page →

1,609
radar-self-enrolment-uiradar-baseVerified publisher0.4.21 of 1See more

radar-self-enrolment-ui radar-base 0.4.2

1 of the 1 container images this version deploys carry CVE-2026-114113.

Container imageDigestPackageFixed in
ghcr.io/radar-base/radar-self-enrolment-ui:0.1.0b9a7cd3cc099
sharp@0.34.4
0.35.0

Open the chart page →

1,627
karakeeprtomik-helm-chartsVerified publisher0.0.11 of 3See more

karakeep rtomik-helm-charts 0.0.1

1 of the 3 container images this version deploys carry CVE-2026-114113.

Container imageDigestPackageFixed in
ghcr.io/karakeep-app/karakeep:0.26.0f575a34ed3f8
sharp@0.33.3
0.35.0

Open the chart page →

6,444
joplinrubxkubeVerified publisher1.3.11 of 2See more

joplin rubxkube 1.3.1

1 of the 2 container images this version deploys carry CVE-2026-114113.

Container imageDigestPackageFixed in
joplin/server:3.0-beta52af57880c0e
sharp@0.33.3
0.35.0

Open the chart page →

8,175
rybbitrybbit-helm1.3.21 of 7See more

rybbit rybbit-helm 1.3.2

1 of the 7 container images this version deploys carry CVE-2026-114113.

Container imageDigestPackageFixed in
ghcr.io/rybbit-io/rybbit-client:latest9a3bbb2e837a
sharp@0.34.5
0.35.0

Open the chart page →

9,153
unifi-protectschichtelVerified publisher0.10.11 of 1See more

unifi-protect schichtel 0.10.1

1 of the 1 container images this version deploys carry CVE-2026-114113.

Container imageDigestPackageFixed in
markdegroot/unifi-protect-arm64:latestd8445f2a0de6
sharp@0.30.7
0.35.0

Open the chart page →

7,256
joplin-serverschoenwald1.0.31 of 1See more

joplin-server schoenwald 1.0.3

1 of the 1 container images this version deploys carry CVE-2026-114113.

Container imageDigestPackageFixed in
joplin/server:3.7.23f7b852959aa
sharp@0.34.5
0.35.0

Open the chart page →

2,983

Container images carrying it

119 by charts deploying them

A fixed version is listed for 1 of the 1 affected package.

Container imageDigestPackageFixed inUsed by
assistiot/dlt_api:2.0.0e36a8922fa0c
sharp@0.27.2
0.35.0
3
joplin/server:3.7.2:latest3f7b852959aa
sharp@0.34.5
0.35.0
3
rcdelacruz/my-strapi-app:js-amd6438007f358355
sharp@0.32.0
0.35.0
3
ghcr.io/microboxlabs/miot-app:0.5.203cc10a496ced
sharp@0.34.5
0.35.0
3
ghcr.io/seerr-team/seerr:latest:v3.5.027602401178d
sharp@0.34.5
0.35.0
3
speckle/speckle-preview-service:2.18.11-branch.testing2.88634-335d469:2.18.12-branch.testing3.88744-f55b3414bd113093583
sharp@0.32.6
0.35.0
2
sysnet4admin/dashboard:bluec5bd3bb1b5a6
sharp@0.33.4
0.35.0
2
ghcr.io/immich-app/immich-server:v3.1.0b434cb9287ee
sharp@0.34.5
0.35.0
2
ghcr.io/nucleuscloud/neosync/app:0.5.41ca31ec35b829
sharp@0.34.1
0.35.0
2
aktosecurity/akto-puppeteer-replay:doom_latest853e37321e6e
sharp@0.33.5
0.35.0
1
alquimiaai/studio:certification38a1f0341982
sharp@0.34.4
0.35.0
1
apecloud/aperag-frontend:v0.0.0-nightlyb3ae37840ace
sharp@0.34.3
0.35.0
1
assistiot/dlt_api:2.1.0c8a170683be7
sharp@0.27.2
0.35.0
1
bicarus/mx-api-service:1.0.2-hf1dab88659ae3b
sharp@0.30.7
0.35.0
1
bpatrik/pigallery2:1.9.0-debian-buster21fbaa5fae61
sharp@0.23.4
0.35.0
1
browserless/chrome:1.48.0-chrome-stablec81ae5585b47
sharp@0.29.0
0.35.0
1
chibisafe/chibisafe:latest534ba9902a37
sharp@0.33.3
0.35.0
1
chibisafe/chibisafe-server:latesta3a8606cd9b5
sharp@0.33.2
0.35.0
1
chocobozzz/peertube:v8.1.5052712130691
sharp@0.34.5
0.35.0
1
dessalines/lemmy-ui:0.19.20ee4c620d8e93
sharp@0.33.5
0.35.0
1
directus/directus:12.0.29c8470ea465c
sharp@0.34.5
0.35.0
1
directus/directus:11.1.0e3c8bb975350
sharp@0.33.5
0.35.0
1
documenso/documenso:v1.8.17f16a9449f18
sharp@0.32.6
0.35.0
1
dserio83/velero-ui:0.3.1b4e1ec6664d3
sharp@0.33.5
0.35.0
1
evoapicloud/evolution-api:latest966625532d90
sharp@0.34.5
0.35.0
1
fallenbagel/jellyseerr:latest91edd5620e51
sharp@0.33.4
0.35.0
1
fallenbagel/jellyseerr:2.2.3a324fa4d81cc
sharp@0.33.4
0.35.0
1
flanksource/canary-checker-ui:v1.4.281764c84e550db
sharp@0.32.6
0.35.0
1
flanksource/incident-manager-ui:v1.4.3542bb089c79fc0
sharp@0.34.5
0.35.0
1
flanksource/incident-manager-ui:v1.4.3228d17f0c08b20
sharp@0.34.5
0.35.0
1
fosrl/pangolin:1.13.0c32ad797ab96
sharp@0.34.4
0.35.0
1
helmforge/opencut:v0.3.0bf11156e0ab5
sharp@0.34.5
0.35.0
1
ianw/quickchart:v1.7.1dc49dd460c37
sharp@0.30.7
0.35.0
1
jakowenko/double-take:1.6.0b858bac9e32a
sharp@0.29.2
0.35.0
1
joplin/server:3.0-beta52af57880c0e
sharp@0.33.3
0.35.0
1
langgenius/dify-ee-enterprise-frontend:3.9.8-ubi98dd9de6b6190
sharp@0.34.5
0.35.0
1
langgenius/dify-ee-web:3.9.8-ubi9ba1dd1d0bcea
sharp@0.34.5
0.35.0
1
langgenius/dify-web:0.6.11a2a294743634
sharp@0.33.2
0.35.0
1
langgenius/dify-web:1.10.1-fix.1c306ac577912
sharp@0.34.4
0.35.0
1
langgenius/dify-web:1.0.0d64914ff0d6d
sharp@0.33.5
0.35.0
1
lbenicio/helm-pilot:0.2.54594a2632510
sharp@0.34.5
0.35.0
1
library/ghost:6.37.01ef2e532ca4d
sharp@0.34.5
0.35.0
1
library/ghost:6.25.12654b1e90413
sharp@0.34.5
0.35.0
1
library/ghost:6.41.129773d6be407
sharp@0.34.5
0.35.0
1
library/ghost:4.37.0767230c0f263
sharp@0.29.3
0.35.0
1
library/ghost:5.79.083f7bf209844
sharp@0.32.6
0.35.0
1
lobehub/lobe-chat:1.96.9da0c21fefcd3
sharp@0.33.5
0.35.0
1
lucassandin/welcome-client:latest48468b1ccd16
sharp@0.33.3
0.35.0
1
markdegroot/unifi-protect-arm64:latestd8445f2a0de6
sharp@0.30.7
0.35.0
1
misskey/misskey:12.110.1e08b7c478093
sharp@0.30.3
0.35.0
1

syft 1.42.1 · advisories as of 22 Oct 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.