StackRadar

CVE-2026-114113

High

Advisory

Published 21 Jul 2026In the index since 22 Oct 2026
Severity
High
worst across findings
CVSS
7.0
base score, highest
EPSS
0.001
1st percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
119
of 18,219 indexed, latest versions
Container images
119
deployed by those charts
Fix available
1 of 1
affected package

sharp inherited vulnerabilities in libvips: CVE-2026-33327, CVE-2026-33328, CVE-2026-35590, CVE-2026-35591

Carried by container images the latest versions of 119 of 18,219 indexed charts deploy, on 119 images.

Affected packageAffected versionsFixed inImages
sharpnpm0.23.4, 0.27.2, 0.28.1, 0.29.0+16 more0.35.0119
OSV records
GHSA-f88m-g3jw-g9cj

Charts affected

119 by stars
ChartLatestAffected imagesRadar Score
seerr-chartseerr-chartVerified publisher3.10.11 of 1See more

seerr-chart seerr-chart 3.10.1

1 of the 1 container images this version deploys carry CVE-2026-114113.

Container imageDigestPackageFixed in
ghcr.io/seerr-team/seerr:v3.5.1d8fab675b55a
sharp@0.34.5
0.35.0

Open the chart page →

2,177
speckle-server-branch-hotfix-2.19.1speckleVerified publisher2.19.2-branch.hotfix-2.19.1.124125-665e7e12 of 5See more

speckle-server-branch-hotfix-2.19.1 speckle 2.19.2-branch.hotfix-2.19.1.124125-665e7e1

2 of the 5 container images this version deploys carry CVE-2026-114113.

Container imageDigestPackageFixed in
speckle/speckle-preview-service:2.19.2-branch.hotfix-2.19.1.124125-665e7e1c102b087481a
sharp@0.32.6
0.35.0
speckle/speckle-server:2.19.2-branch.hotfix-2.19.1.124125-665e7e14b6a0750d5aa
sharp@0.32.6
0.35.0

Open the chart page →

17,745
speckle-server-branch-hotfix-2.20.2speckleVerified publisher2.20.3-branch.hotfix-2.20.2.149555-37ea0cb2 of 5See more

speckle-server-branch-hotfix-2.20.2 speckle 2.20.3-branch.hotfix-2.20.2.149555-37ea0cb

2 of the 5 container images this version deploys carry CVE-2026-114113.

Container imageDigestPackageFixed in
speckle/speckle-preview-service:2.20.3-branch.hotfix-2.20.2.149555-37ea0cbd3da0a84de98
sharp@0.32.6
0.35.0
speckle/speckle-server:2.20.3-branch.hotfix-2.20.2.149555-37ea0cb52f8eabf5cea
sharp@0.32.6
0.35.0

Open the chart page →

17,830
speckle-server-branch-testingspeckleVerified publisher2.17.14-branch.testing.72707.921a5f82 of 5See more

speckle-server-branch-testing speckle 2.17.14-branch.testing.72707.921a5f8

2 of the 5 container images this version deploys carry CVE-2026-114113.

Container imageDigestPackageFixed in
speckle/speckle-preview-service:2.17.14-branch.testing.72707.921a5f884fc39bca0c8
sharp@0.32.6
0.35.0
speckle/speckle-server:2.17.14-branch.testing.72707.921a5f849d10dcdfb91
sharp@0.32.6
0.35.0

Open the chart page →

15,935
speckle-server-branch-testing1speckleVerified publisher2.20.6-branch.testing1.154030-9b091142 of 5See more

speckle-server-branch-testing1 speckle 2.20.6-branch.testing1.154030-9b09114

2 of the 5 container images this version deploys carry CVE-2026-114113.

Container imageDigestPackageFixed in
speckle/speckle-preview-service:2.20.6-branch.testing1.154030-9b091148f3c1ea153ba
sharp@0.32.6
0.35.0
speckle/speckle-server:2.20.6-branch.testing1.154030-9b09114e8413f57b327
sharp@0.32.6
0.35.0

Open the chart page →

17,830
speckle-server-branch-testing2speckleVerified publisher2.18.11-branch.testing2.88634-335d4692 of 5See more

speckle-server-branch-testing2 speckle 2.18.11-branch.testing2.88634-335d469

2 of the 5 container images this version deploys carry CVE-2026-114113.

Container imageDigestPackageFixed in
speckle/speckle-preview-service:2.18.11-branch.testing2.88634-335d4694bd113093583
sharp@0.32.6
0.35.0
speckle/speckle-server:2.18.11-branch.testing2.88634-335d469bf6a501b2210
sharp@0.32.6
0.35.0

Open the chart page →

15,538
speckle-server-branch-testing3speckleVerified publisher2.18.12-branch.testing3.88744-f55b3412 of 5See more

speckle-server-branch-testing3 speckle 2.18.12-branch.testing3.88744-f55b341

2 of the 5 container images this version deploys carry CVE-2026-114113.

Container imageDigestPackageFixed in
speckle/speckle-preview-service:2.18.12-branch.testing3.88744-f55b3414bd113093583
sharp@0.32.6
0.35.0
speckle/speckle-server:2.18.12-branch.testing3.88744-f55b34189a5872375f9
sharp@0.32.6
0.35.0

Open the chart page →

15,538
speckle-server-branch-testing4speckleVerified publisher2.20.2-branch.testing4.134160-9fad4b22 of 5See more

speckle-server-branch-testing4 speckle 2.20.2-branch.testing4.134160-9fad4b2

2 of the 5 container images this version deploys carry CVE-2026-114113.

Container imageDigestPackageFixed in
speckle/speckle-preview-service:2.20.2-branch.testing4.134160-9fad4b21f897ca906ea
sharp@0.32.6
0.35.0
speckle/speckle-server:2.20.2-branch.testing4.134160-9fad4b2687f43ab16f3
sharp@0.32.6
0.35.0

Open the chart page →

17,398
speckle-server-branch-testing5speckleVerified publisher2.21.3-branch.testing5.219631-2153bef3 of 5See more

speckle-server-branch-testing5 speckle 2.21.3-branch.testing5.219631-2153bef

3 of the 5 container images this version deploys carry CVE-2026-114113.

Container imageDigestPackageFixed in
speckle/speckle-frontend-2:2.21.3-branch.testing5.219631-2153befd4ca6ebf09b9
sharp@0.32.6
0.35.0
speckle/speckle-preview-service:2.21.3-branch.testing5.219631-2153bef52cad5e3293e
sharp@0.32.6
0.35.0
speckle/speckle-server:2.21.3-branch.testing5.219631-2153bef8fd157733393
sharp@0.32.6
0.35.0

Open the chart page →

17,065
speckle-server-branch-testing6speckleVerified publisher2.25.10-branch.testing6.645-b125c1e1 of 4See more

speckle-server-branch-testing6 speckle 2.25.10-branch.testing6.645-b125c1e

1 of the 4 container images this version deploys carry CVE-2026-114113.

Container imageDigestPackageFixed in
speckle/speckle-server:2.25.10-branch.testing6.645-b125c1e75cdf256067b
sharp@0.34.3
0.35.0

Open the chart page →

12,159
strapistrapi-xmv0.1.21 of 1See more

strapi strapi-xmv 0.1.2

1 of the 1 container images this version deploys carry CVE-2026-114113.

Container imageDigestPackageFixed in
ghcr.io/xmv-solutions-gmbh/strapi:latest5ffcc95d11e8
sharp@0.33.5
0.35.0

Open the chart page →

754
joplintobiassackmann0.1.71 of 2See more

joplin tobiassackmann 0.1.7

1 of the 2 container images this version deploys carry CVE-2026-114113.

Container imageDigestPackageFixed in
joplin/server:latest3f7b852959aa
sharp@0.34.5
0.35.0

Open the chart page →

6,283
saleor-appstrieb-work0.6.03 of 5See more

saleor-apps trieb-work 0.6.0

3 of the 5 container images this version deploys carry CVE-2026-114113.

Container imageDigestPackageFixed in
ghcr.io/trieb-work/saleor-apps/saleor-app-products-feed:1.23.11d435b4ab372
sharp@0.33.5
0.35.0
ghcr.io/trieb-work/saleor-apps/saleor-app-search:1.24.328edefb6c92d
sharp@0.33.5
0.35.0
ghcr.io/trieb-work/saleor-apps/saleor-app-smtp:1.4.357a06bfba327
sharp@0.33.5
0.35.0

Open the chart page →

9,588
kenerunxwaresVerified publisher2026.10.11 of 2See more

kener unxwares 2026.10.1

1 of the 2 container images this version deploys carry CVE-2026-114113.

Container imageDigestPackageFixed in
rajnandan1/kener:4.1.7-alpined920a2b71c20
sharp@0.34.5
0.35.0

Open the chart page →

1,971
evolution-apivcnngrVerified publisher1.0.01 of 5See more

evolution-api vcnngr 1.0.0

1 of the 5 container images this version deploys carry CVE-2026-114113.

Container imageDigestPackageFixed in
evoapicloud/evolution-api:latest966625532d90
sharp@0.34.5
0.35.0

Open the chart page →

5,137
colanodevictorlane0.3.31 of 3See more

colanode victorlane 0.3.3

1 of the 3 container images this version deploys carry CVE-2026-114113.

Container imageDigestPackageFixed in
ghcr.io/colanode/server:latest7006cac874fd
sharp@0.34.5
0.35.0

Open the chart page →

3,033
n8nvictorlane1.0.181 of 1See more

n8n victorlane 1.0.18

1 of the 1 container images this version deploys carry CVE-2026-114113.

Container imageDigestPackageFixed in
n8nio/n8n:1.115.1ed16e560c40e
sharp@0.33.5
0.35.0

Open the chart page →

8,030
websitewaldo-visionVerified publisher0.33.01 of 2See more

website waldo-vision 0.33.0

1 of the 2 container images this version deploys carry CVE-2026-114113.

Container imageDigestPackageFixed in
ghcr.io/waldo-vision/web:v0.3.65bbc7647df07
sharp@0.32.0
0.35.0

Open the chart page →

4,295
welcome-clientwelcome-client26.0.01 of 1See more

welcome-client welcome-client 26.0.0

1 of the 1 container images this version deploys carry CVE-2026-114113.

Container imageDigestPackageFixed in
lucassandin/welcome-client:latest48468b1ccd16
sharp@0.33.3
0.35.0

Open the chart page →

1,664

Container images carrying it

119 by charts deploying them

A fixed version is listed for 1 of the 1 affected package.

Container imageDigestPackageFixed inUsed by
assistiot/dlt_api:2.0.0e36a8922fa0c
sharp@0.27.2
0.35.0
3
joplin/server:3.7.2:latest3f7b852959aa
sharp@0.34.5
0.35.0
3
rcdelacruz/my-strapi-app:js-amd6438007f358355
sharp@0.32.0
0.35.0
3
ghcr.io/microboxlabs/miot-app:0.5.203cc10a496ced
sharp@0.34.5
0.35.0
3
ghcr.io/seerr-team/seerr:latest:v3.5.027602401178d
sharp@0.34.5
0.35.0
3
speckle/speckle-preview-service:2.18.11-branch.testing2.88634-335d469:2.18.12-branch.testing3.88744-f55b3414bd113093583
sharp@0.32.6
0.35.0
2
sysnet4admin/dashboard:bluec5bd3bb1b5a6
sharp@0.33.4
0.35.0
2
ghcr.io/immich-app/immich-server:v3.1.0b434cb9287ee
sharp@0.34.5
0.35.0
2
ghcr.io/nucleuscloud/neosync/app:0.5.41ca31ec35b829
sharp@0.34.1
0.35.0
2
aktosecurity/akto-puppeteer-replay:doom_latest853e37321e6e
sharp@0.33.5
0.35.0
1
alquimiaai/studio:certification38a1f0341982
sharp@0.34.4
0.35.0
1
apecloud/aperag-frontend:v0.0.0-nightlyb3ae37840ace
sharp@0.34.3
0.35.0
1
assistiot/dlt_api:2.1.0c8a170683be7
sharp@0.27.2
0.35.0
1
bicarus/mx-api-service:1.0.2-hf1dab88659ae3b
sharp@0.30.7
0.35.0
1
bpatrik/pigallery2:1.9.0-debian-buster21fbaa5fae61
sharp@0.23.4
0.35.0
1
browserless/chrome:1.48.0-chrome-stablec81ae5585b47
sharp@0.29.0
0.35.0
1
chibisafe/chibisafe:latest534ba9902a37
sharp@0.33.3
0.35.0
1
chibisafe/chibisafe-server:latesta3a8606cd9b5
sharp@0.33.2
0.35.0
1
chocobozzz/peertube:v8.1.5052712130691
sharp@0.34.5
0.35.0
1
dessalines/lemmy-ui:0.19.20ee4c620d8e93
sharp@0.33.5
0.35.0
1
directus/directus:12.0.29c8470ea465c
sharp@0.34.5
0.35.0
1
directus/directus:11.1.0e3c8bb975350
sharp@0.33.5
0.35.0
1
documenso/documenso:v1.8.17f16a9449f18
sharp@0.32.6
0.35.0
1
dserio83/velero-ui:0.3.1b4e1ec6664d3
sharp@0.33.5
0.35.0
1
evoapicloud/evolution-api:latest966625532d90
sharp@0.34.5
0.35.0
1
fallenbagel/jellyseerr:latest91edd5620e51
sharp@0.33.4
0.35.0
1
fallenbagel/jellyseerr:2.2.3a324fa4d81cc
sharp@0.33.4
0.35.0
1
flanksource/canary-checker-ui:v1.4.281764c84e550db
sharp@0.32.6
0.35.0
1
flanksource/incident-manager-ui:v1.4.3542bb089c79fc0
sharp@0.34.5
0.35.0
1
flanksource/incident-manager-ui:v1.4.3228d17f0c08b20
sharp@0.34.5
0.35.0
1
fosrl/pangolin:1.13.0c32ad797ab96
sharp@0.34.4
0.35.0
1
helmforge/opencut:v0.3.0bf11156e0ab5
sharp@0.34.5
0.35.0
1
ianw/quickchart:v1.7.1dc49dd460c37
sharp@0.30.7
0.35.0
1
jakowenko/double-take:1.6.0b858bac9e32a
sharp@0.29.2
0.35.0
1
joplin/server:3.0-beta52af57880c0e
sharp@0.33.3
0.35.0
1
langgenius/dify-ee-enterprise-frontend:3.9.8-ubi98dd9de6b6190
sharp@0.34.5
0.35.0
1
langgenius/dify-ee-web:3.9.8-ubi9ba1dd1d0bcea
sharp@0.34.5
0.35.0
1
langgenius/dify-web:0.6.11a2a294743634
sharp@0.33.2
0.35.0
1
langgenius/dify-web:1.10.1-fix.1c306ac577912
sharp@0.34.4
0.35.0
1
langgenius/dify-web:1.0.0d64914ff0d6d
sharp@0.33.5
0.35.0
1
lbenicio/helm-pilot:0.2.54594a2632510
sharp@0.34.5
0.35.0
1
library/ghost:6.37.01ef2e532ca4d
sharp@0.34.5
0.35.0
1
library/ghost:6.25.12654b1e90413
sharp@0.34.5
0.35.0
1
library/ghost:6.41.129773d6be407
sharp@0.34.5
0.35.0
1
library/ghost:4.37.0767230c0f263
sharp@0.29.3
0.35.0
1
library/ghost:5.79.083f7bf209844
sharp@0.32.6
0.35.0
1
lobehub/lobe-chat:1.96.9da0c21fefcd3
sharp@0.33.5
0.35.0
1
lucassandin/welcome-client:latest48468b1ccd16
sharp@0.33.3
0.35.0
1
markdegroot/unifi-protect-arm64:latestd8445f2a0de6
sharp@0.30.7
0.35.0
1
misskey/misskey:12.110.1e08b7c478093
sharp@0.30.3
0.35.0
1

syft 1.42.1 · advisories as of 22 Oct 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.