StackRadar

CVE-2026-114723

Medium

Advisory

Published 23 Oct 2026In the index since 24 Oct 2026
Severity
Medium
worst across findings
CVSS
5.5
base score, highest
EPSS
0.003
25th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
26
of 18,232 indexed, latest versions
Container images
30
deployed by those charts
Fix available
None
affected package

The matching OSV records carry no description.

Carried by container images the latest versions of 26 of 18,232 indexed charts deploy, on 30 images.

Affected packageAffected versionsFixed inImages
imagemagickdeb8:6.8.9.9-7ubuntu5.9, 8:6.9.7.4+dfsg-16ubuntu6.4, 8:6.9.7.4+dfsg-16ubuntu6.12, 8:6.9.10.23+dfsg-2.1ubuntu11.4+4 moreno fix listed30
OSV records
UBUNTU-CVE-2026-114723

Charts affected

26 by stars
ChartLatestAffected imagesRadar Score
minecraft-proxyminecraft-server-chartsVerified publisher3.10.01 of 1See more

minecraft-proxy minecraft-server-charts 3.10.0

1 of the 1 container images this version deploys carry CVE-2026-114723.

Container imageDigestPackageFixed in
itzg/bungeecord:latest2a77bff989e1
imagemagick@8:7.1.2.18+dfsg1-1
no fix listed

Open the chart page →

3,487
penpotcodechemVerified publisher1.0.102 of 3See more

penpot codechem 1.0.10

2 of the 3 container images this version deploys carry CVE-2026-114723.

Container imageDigestPackageFixed in
penpotapp/backend:1.16.0-betae978e871be07
imagemagick@8:6.9.11.60+dfsg-1.3build2
no fix listed
penpotapp/exporter:1.16.0-betafa7086ad92b1
imagemagick@8:6.9.11.60+dfsg-1.3build2
no fix listed

Open the chart page →

31,581
photoprismandrenarchyVerified publisher8.15.01 of 1See more

photoprism andrenarchy 8.15.0

1 of the 1 container images this version deploys carry CVE-2026-114723.

Container imageDigestPackageFixed in
photoprism/photoprism:260728958642220223
imagemagick@8:7.1.2.18+dfsg1-1
no fix listed

Open the chart page →

52,236
calibre-webk8s-home-lab-repo9.1.11 of 1See more

calibre-web k8s-home-lab-repo 9.1.1

1 of the 1 container images this version deploys carry CVE-2026-114723.

Container imageDigestPackageFixed in
ghcr.io/linuxserver/calibre-web:0.6.267c0464228f2f
imagemagick@8:6.9.12.98+dfsg1-5.2build2
no fix listed

Open the chart page →

7,392
owncloudkubernetes-homelab-helm-chartsVerified publisher0.3.01 of 3See more

owncloud kubernetes-homelab-helm-charts 0.3.0

1 of the 3 container images this version deploys carry CVE-2026-114723.

Container imageDigestPackageFixed in
owncloud/server:10.16.6879638cd818b
imagemagick@8:6.9.11.60+dfsg-1.3ubuntu0.22.04.5
no fix listed

Open the chart page →

8,818
opennebulakvaps2.1.15 of 9See more

opennebula kvaps 2.1.1

5 of the 9 container images this version deploys carry CVE-2026-114723.

Container imageDigestPackageFixed in
ghcr.io/kvaps/opennebula:v5.12.0.4-1e28e0e7de11b
imagemagick@8:6.9.10.23+dfsg-2.1ubuntu11.4
no fix listed
ghcr.io/kvaps/opennebula-exporter:v5.12.0.401563adc95fd
imagemagick@8:6.9.10.23+dfsg-2.1ubuntu11.4
no fix listed
ghcr.io/kvaps/opennebula-exporter:v5.12.0.4-12b92df1143b9
imagemagick@8:6.9.10.23+dfsg-2.1ubuntu11.4
no fix listed
ghcr.io/kvaps/opennebula-flow:v5.12.0.4-1600221f0f43f
imagemagick@8:6.9.10.23+dfsg-2.1ubuntu11.4
no fix listed
ghcr.io/kvaps/opennebula-gate:v5.12.0.4-1a85e03d8bc1d
imagemagick@8:6.9.10.23+dfsg-2.1ubuntu11.4
no fix listed

Open the chart page →

270,643
papermergenicholaswildeVerified publisher1.0.21 of 1See more

papermerge nicholaswilde 1.0.2

1 of the 1 container images this version deploys carry CVE-2026-114723.

Container imageDigestPackageFixed in
ghcr.io/linuxserver/papermerge:version-v2.0.198ba2dd3f0bd
imagemagick@8:6.9.10.23+dfsg-2.1ubuntu11.4
no fix listed

Open the chart page →

21,954
phpqonstruktVerified publisher0.2.01 of 1See more

php qonstrukt 0.2.0

1 of the 1 container images this version deploys carry CVE-2026-114723.

Container imageDigestPackageFixed in
qonstrukt/php:8.4-v8-apache089af7925aa1
imagemagick@8:6.9.12.98+dfsg1-5.2build2
no fix listed

Open the chart page →

64,349
alibaba-rsocket-brokeralibaba-rsocket-brokerVerified publisher0.1.31 of 1See more

alibaba-rsocket-broker alibaba-rsocket-broker 0.1.3

1 of the 1 container images this version deploys carry CVE-2026-114723.

Container imageDigestPackageFixed in
linuxchina/alibaba-rsocket-broker:1.1.3-k8sf758e2e567ee
imagemagick@8:6.9.7.4+dfsg-16ubuntu6.12
no fix listed

Open the chart page →

92,007
calibre-web-automatedcalibre-web-automatedVerified publisher1.2.31 of 1See more

calibre-web-automated calibre-web-automated 1.2.3

1 of the 1 container images this version deploys carry CVE-2026-114723.

Container imageDigestPackageFixed in
crocodilestick/calibre-web-automated:v4.0.6c31a738b6d5e
imagemagick@8:6.9.12.98+dfsg1-5.2build2
no fix listed

Open the chart page →

9,152
webpagetest-agentcloudnativeapp0.2.01 of 1See more

webpagetest-agent cloudnativeapp 0.2.0

1 of the 1 container images this version deploys carry CVE-2026-114723.

Container imageDigestPackageFixed in
timothyclarke/wptagent:2018-01-2322c41e5ca7e2
imagemagick@8:6.8.9.9-7ubuntu5.9
no fix listed

Open the chart page →

134,088
opencloudcommunity-opencloud3.2.01 of 13See more

opencloud community-opencloud 3.2.0

1 of the 13 container images this version deploys carry CVE-2026-114723.

Container imageDigestPackageFixed in
apache/tika:latest-fulld69fab827fa0
imagemagick@8:7.1.2.18+dfsg1-1
no fix listed

Open the chart page →

11,459
ownclouddjjudas21Verified publisher0.3.261 of 3See more

owncloud djjudas21 0.3.26

1 of the 3 container images this version deploys carry CVE-2026-114723.

Container imageDigestPackageFixed in
owncloud/server:10.16.6-20261022879638cd818b
imagemagick@8:6.9.11.60+dfsg-1.3ubuntu0.22.04.5
no fix listed

Open the chart page →

11,204
photoprismdjjudas21Verified publisher99.99.991 of 1See more

photoprism djjudas21 99.99.99

1 of the 1 container images this version deploys carry CVE-2026-114723.

Container imageDigestPackageFixed in
photoprism/photoprism:240711-cefc6fd632ca74
imagemagick@8:6.9.12.98+dfsg1-5.2build2
no fix listed

Open the chart page →

100,739
calibre-webgeek-cookbookVerified publisher8.4.21 of 1See more

calibre-web geek-cookbook 8.4.2

1 of the 1 container images this version deploys carry CVE-2026-114723.

Container imageDigestPackageFixed in
linuxserver/calibre-web:version-0.6.12938810eca3d3
imagemagick@8:6.9.10.23+dfsg-2.1ubuntu11.4
no fix listed

Open the chart page →

18,624
openkmgeek-cookbookVerified publisher4.2.01 of 1See more

openkm geek-cookbook 4.2.0

1 of the 1 container images this version deploys carry CVE-2026-114723.

Container imageDigestPackageFixed in
openkm/openkm-ce:6.3.113bc465a7461b
imagemagick@8:6.9.10.23+dfsg-2.1ubuntu11.4
no fix listed

Open the chart page →

30,423
photoprismgeek-cookbookVerified publisher7.2.01 of 1See more

photoprism geek-cookbook 7.2.0

1 of the 1 container images this version deploys carry CVE-2026-114723.

Container imageDigestPackageFixed in
photoprism/photoprism:220629-jammy2954334adbda
imagemagick@8:6.9.11.60+dfsg-1.3build2
no fix listed

Open the chart page →

22,464
minecrafthelmforgeVerified publisher1.5.71 of 1See more

minecraft helmforge 1.5.7

1 of the 1 container images this version deploys carry CVE-2026-114723.

Container imageDigestPackageFixed in
itzg/minecraft-server:2026.10.05a2ab74ae179
imagemagick@8:6.9.12.98+dfsg1-5.2build2
no fix listed

Open the chart page →

38,866
penpotkubitodevVerified publisher1.2.12 of 5See more

penpot kubitodev 1.2.1

2 of the 5 container images this version deploys carry CVE-2026-114723.

Container imageDigestPackageFixed in
penpotapp/backend:2.2.147853d9bb9dd
imagemagick@8:6.9.11.60+dfsg-1.3ubuntu0.22.04.5
no fix listed
penpotapp/exporter:2.2.15c835ffd87ab
imagemagick@8:6.9.11.60+dfsg-1.3ubuntu0.22.04.5
no fix listed

Open the chart page →

20,089
opds-shelfopds-shelfVerified publisher0.4.01 of 3See more

opds-shelf opds-shelf 0.4.0

1 of the 3 container images this version deploys carry CVE-2026-114723.

Container imageDigestPackageFixed in
ghcr.io/linuxserver/calibre-web:latestb206b791d77b
imagemagick@8:6.9.12.98+dfsg1-5.2build2
no fix listed

Open the chart page →

6,399
game-serverpvillaverdeVerified publisher1.0.61 of 1See more

game-server pvillaverde 1.0.6

1 of the 1 container images this version deploys carry CVE-2026-114723.

Container imageDigestPackageFixed in
ghcr.io/itzg/minecraft-server:latest5cf064b103ea
imagemagick@8:6.9.12.98+dfsg1-5.2build2
no fix listed

Open the chart page →

38,834
photoprismschoolguys-helmcharts0.3.81 of 1See more

photoprism schoolguys-helmcharts 0.3.8

1 of the 1 container images this version deploys carry CVE-2026-114723.

Container imageDigestPackageFixed in
photoprism/photoprism:260601650c6ad5a651
imagemagick@8:7.1.2.18+dfsg1-1
no fix listed

Open the chart page →

63,442
spring-boot-helm-starterspring-boot-helm-starter0.1.01 of 1See more

spring-boot-helm-starter spring-boot-helm-starter 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-114723.

Container imageDigestPackageFixed in
alexandreroman/hello:latest4b79473442be
imagemagick@8:6.9.7.4+dfsg-16ubuntu6.4
no fix listed

Open the chart page →

116,760
stash-boxswuuper-githubVerified publisher0.1.11 of 2See more

stash-box swuuper-github 0.1.1

1 of the 2 container images this version deploys carry CVE-2026-114723.

Container imageDigestPackageFixed in
stashapp/stash-box:latesta534c8afdf39
imagemagick@8:6.9.12.98+dfsg1-5.2build2
no fix listed

Open the chart page →

10,196
spring-boot-helm-startertest0.1.01 of 1See more

spring-boot-helm-starter test 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-114723.

Container imageDigestPackageFixed in
alexandreroman/hello:latest4b79473442be
imagemagick@8:6.9.7.4+dfsg-16ubuntu6.4
no fix listed

Open the chart page →

116,760
calibre-webvista0.1.31 of 1See more

calibre-web vista 0.1.3

1 of the 1 container images this version deploys carry CVE-2026-114723.

Container imageDigestPackageFixed in
linuxserver/calibre-web:0.6.24241009026e6f
imagemagick@8:6.9.12.98+dfsg1-5.2build2
no fix listed

Open the chart page →

10,663

Container images carrying it

30 by charts deploying them

A fixed version is listed for 0 of the 1 affected package.

Container imageDigestPackageFixed inUsed by
alexandreroman/hello:latest4b79473442be
imagemagick@8:6.9.7.4+dfsg-16ubuntu6.4
no fix listed
2
owncloud/server:10.16.6:10.16.6-20261022879638cd818b
imagemagick@8:6.9.11.60+dfsg-1.3ubuntu0.22.04.5
no fix listed
2
apache/tika:latest-fulld69fab827fa0
imagemagick@8:7.1.2.18+dfsg1-1
no fix listed
1
crocodilestick/calibre-web-automated:v4.0.6c31a738b6d5e
imagemagick@8:6.9.12.98+dfsg1-5.2build2
no fix listed
1
itzg/bungeecord:latest2a77bff989e1
imagemagick@8:7.1.2.18+dfsg1-1
no fix listed
1
itzg/minecraft-server:2026.10.05a2ab74ae179
imagemagick@8:6.9.12.98+dfsg1-5.2build2
no fix listed
1
linuxchina/alibaba-rsocket-broker:1.1.3-k8sf758e2e567ee
imagemagick@8:6.9.7.4+dfsg-16ubuntu6.12
no fix listed
1
linuxserver/calibre-web:0.6.24241009026e6f
imagemagick@8:6.9.12.98+dfsg1-5.2build2
no fix listed
1
linuxserver/calibre-web:version-0.6.12938810eca3d3
imagemagick@8:6.9.10.23+dfsg-2.1ubuntu11.4
no fix listed
1
openkm/openkm-ce:6.3.113bc465a7461b
imagemagick@8:6.9.10.23+dfsg-2.1ubuntu11.4
no fix listed
1
penpotapp/backend:2.2.147853d9bb9dd
imagemagick@8:6.9.11.60+dfsg-1.3ubuntu0.22.04.5
no fix listed
1
penpotapp/backend:1.16.0-betae978e871be07
imagemagick@8:6.9.11.60+dfsg-1.3build2
no fix listed
1
penpotapp/exporter:2.2.15c835ffd87ab
imagemagick@8:6.9.11.60+dfsg-1.3ubuntu0.22.04.5
no fix listed
1
penpotapp/exporter:1.16.0-betafa7086ad92b1
imagemagick@8:6.9.11.60+dfsg-1.3build2
no fix listed
1
photoprism/photoprism:220629-jammy2954334adbda
imagemagick@8:6.9.11.60+dfsg-1.3build2
no fix listed
1
photoprism/photoprism:260601650c6ad5a651
imagemagick@8:7.1.2.18+dfsg1-1
no fix listed
1
photoprism/photoprism:260728958642220223
imagemagick@8:7.1.2.18+dfsg1-1
no fix listed
1
photoprism/photoprism:240711-cefc6fd632ca74
imagemagick@8:6.9.12.98+dfsg1-5.2build2
no fix listed
1
qonstrukt/php:8.4-v8-apache089af7925aa1
imagemagick@8:6.9.12.98+dfsg1-5.2build2
no fix listed
1
stashapp/stash-box:latesta534c8afdf39
imagemagick@8:6.9.12.98+dfsg1-5.2build2
no fix listed
1
timothyclarke/wptagent:2018-01-2322c41e5ca7e2
imagemagick@8:6.8.9.9-7ubuntu5.9
no fix listed
1
ghcr.io/itzg/minecraft-server:latest5cf064b103ea
imagemagick@8:6.9.12.98+dfsg1-5.2build2
no fix listed
1
ghcr.io/kvaps/opennebula:v5.12.0.4-1e28e0e7de11b
imagemagick@8:6.9.10.23+dfsg-2.1ubuntu11.4
no fix listed
1
ghcr.io/kvaps/opennebula-exporter:v5.12.0.401563adc95fd
imagemagick@8:6.9.10.23+dfsg-2.1ubuntu11.4
no fix listed
1
ghcr.io/kvaps/opennebula-exporter:v5.12.0.4-12b92df1143b9
imagemagick@8:6.9.10.23+dfsg-2.1ubuntu11.4
no fix listed
1
ghcr.io/kvaps/opennebula-flow:v5.12.0.4-1600221f0f43f
imagemagick@8:6.9.10.23+dfsg-2.1ubuntu11.4
no fix listed
1
ghcr.io/kvaps/opennebula-gate:v5.12.0.4-1a85e03d8bc1d
imagemagick@8:6.9.10.23+dfsg-2.1ubuntu11.4
no fix listed
1
ghcr.io/linuxserver/calibre-web:0.6.267c0464228f2f
imagemagick@8:6.9.12.98+dfsg1-5.2build2
no fix listed
1
ghcr.io/linuxserver/calibre-web:latestb206b791d77b
imagemagick@8:6.9.12.98+dfsg1-5.2build2
no fix listed
1
ghcr.io/linuxserver/papermerge:version-v2.0.198ba2dd3f0bd
imagemagick@8:6.9.10.23+dfsg-2.1ubuntu11.4
no fix listed
1

syft 1.42.1 · advisories as of 24 Oct 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.