StackRadar

CVE-2026-12216

Medium

Advisory

Published 15 Jun 2026In the index since 5 Sept 2026
Severity
Medium
worst across findings
CVSS
5.3
base score, highest
EPSS
0.001
2nd percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
30
of 17,781 indexed, latest versions
Container images
30
deployed by those charts
Fix available
None
affected package

The matching OSV records carry no description.

Carried by container images the latest versions of 30 of 17,781 indexed charts deploy, on 30 images.

Affected packageAffected versionsFixed inImages
duktapedeb2.7.0-2, 2.7.0-2+b2, 2.7.0+tests-0ubuntu3, 2.7.0+tests-0ubuntu4no fix listed30
OSV records
DEBIAN-CVE-2026-12216UBUNTU-CVE-2026-12216

Charts affected

30 by stars
ChartLatestAffected imagesRadar Score
zabbixzabbix-communityVerified publisher7.1.01 of 5See more

zabbix zabbix-community 7.1.0

1 of the 5 container images this version deploys carry CVE-2026-12216.

Container imageDigestPackageFixed in
zabbix/zabbix-web-service:ubuntu-7.0.23915b3183e054
duktape@2.7.0+tests-0ubuntu3
no fix listed

Open the chart page →

13,664
openclawopenclawVerified publisher1.91.31 of 2See more

openclaw openclaw 1.91.3

1 of the 2 container images this version deploys carry CVE-2026-12216.

Container imageDigestPackageFixed in
ghcr.io/browserless/chromium:v2.56.7b1ba7b054af2
duktape@2.7.0+tests-0ubuntu3
no fix listed

Open the chart page →

2,977
selenium-gridselenium-grid0.59.12 of 4See more

selenium-grid selenium-grid 0.59.1

2 of the 4 container images this version deploys carry CVE-2026-12216.

Container imageDigestPackageFixed in
selenium/node-chrome:4.48.0-202609055ac71fd8dd1e
duktape@2.7.0+tests-0ubuntu3
no fix listed
selenium/node-firefox:4.48.0-2026090574a5c1c90f95
duktape@2.7.0+tests-0ubuntu3
no fix listed

Open the chart page →

7,028
photoprismandrenarchyVerified publisher8.15.01 of 1See more

photoprism andrenarchy 8.15.0

1 of the 1 container images this version deploys carry CVE-2026-12216.

Container imageDigestPackageFixed in
photoprism/photoprism:260728958642220223
duktape@2.7.0+tests-0ubuntu4
no fix listed

Open the chart page →

8,825
karakeephelmforgeVerified publisher1.2.91 of 3See more

karakeep helmforge 1.2.9

1 of the 3 container images this version deploys carry CVE-2026-12216.

Container imageDigestPackageFixed in
ghcr.io/browserless/chromium:v2.55.42ed0183564d7
duktape@2.7.0+tests-0ubuntu3
no fix listed

Open the chart page →

9,460
photoprismmmontesVerified publisher0.14.01 of 1See more

photoprism mmontes 0.14.0

1 of the 1 container images this version deploys carry CVE-2026-12216.

Container imageDigestPackageFixed in
photoprism/photoprism:251130db16ee6b1ba3
duktape@2.7.0+tests-0ubuntu3
no fix listed

Open the chart page →

11,103
phpqonstruktVerified publisher0.2.01 of 1See more

php qonstrukt 0.2.0

1 of the 1 container images this version deploys carry CVE-2026-12216.

Container imageDigestPackageFixed in
qonstrukt/php:8.4-v8-apache089af7925aa1
duktape@2.7.0+tests-0ubuntu3
no fix listed

Open the chart page →

23,964
mumblesyntaxerror404Verified publisher1.0.41 of 1See more

mumble syntaxerror404 1.0.4

1 of the 1 container images this version deploys carry CVE-2026-12216.

Container imageDigestPackageFixed in
ghcr.io/mumble-voip/mumble-server:v1.6.87002fd613b6a35
duktape@2.7.0+tests-0ubuntu3
no fix listed

Open the chart page →

2,099
browserlessalekcVerified publisher1.2.71 of 1See more

browserless alekc 1.2.7

1 of the 1 container images this version deploys carry CVE-2026-12216.

Container imageDigestPackageFixed in
ghcr.io/browserless/chrome:v2.56.7d600eac6283f
duktape@2.7.0+tests-0ubuntu3
no fix listed

Open the chart page →

2,078
ms-emails-grpccodedesignplus-chartsVerified publisher0.0.241 of 1See more

ms-emails-grpc codedesignplus-charts 0.0.24

1 of the 1 container images this version deploys carry CVE-2026-12216.

Container imageDigestPackageFixed in
codedesignplus/ms-emails-grpc:lateste336012bc781
duktape@2.7.0-2
no fix listed

Open the chart page →

9,367
ms-emails-restcodedesignplus-chartsVerified publisher0.0.241 of 1See more

ms-emails-rest codedesignplus-charts 0.0.24

1 of the 1 container images this version deploys carry CVE-2026-12216.

Container imageDigestPackageFixed in
codedesignplus/ms-emails-rest:latestac84661c605e
duktape@2.7.0-2
no fix listed

Open the chart page →

9,367
opencloudcommunity-opencloud3.0.01 of 11See more

opencloud community-opencloud 3.0.0

1 of the 11 container images this version deploys carry CVE-2026-12216.

Container imageDigestPackageFixed in
apache/tika:latest-full80072bb73dd3
duktape@2.7.0+tests-0ubuntu4
no fix listed

Open the chart page →

3,773
photoprismdjjudas21Verified publisher99.99.991 of 1See more

photoprism djjudas21 99.99.99

1 of the 1 container images this version deploys carry CVE-2026-12216.

Container imageDigestPackageFixed in
photoprism/photoprism:240711-cefc6fd632ca74
duktape@2.7.0+tests-0ubuntu3
no fix listed

Open the chart page →

16,954
event-generatorfalcosecurity0.4.01 of 1See more

event-generator falcosecurity 0.4.0

1 of the 1 container images this version deploys carry CVE-2026-12216.

Container imageDigestPackageFixed in
falcosecurity/event-generator:latest932956d86c99
duktape@2.7.0-2
no fix listed

Open the chart page →

3,773
discount-bandithelmforgeVerified publisher2.0.81 of 3See more

discount-bandit helmforge 2.0.8

1 of the 3 container images this version deploys carry CVE-2026-12216.

Container imageDigestPackageFixed in
cybrarist/discount-bandit:v4.0.4e9e2447ac666
duktape@2.7.0-2+b2
no fix listed

Open the chart page →

29,817
browserlessicoretechVerified publisher0.16.61 of 1See more

browserless icoretech 0.16.6

1 of the 1 container images this version deploys carry CVE-2026-12216.

Container imageDigestPackageFixed in
ghcr.io/browserless/chromium:v2.56.7b1ba7b054af2
duktape@2.7.0+tests-0ubuntu3
no fix listed

Open the chart page →

1,948
opencloudjacobcolvinVerified publisher0.2.31 of 13See more

opencloud jacobcolvin 0.2.3

1 of the 13 container images this version deploys carry CVE-2026-12216.

Container imageDigestPackageFixed in
apache/tika:2.9.2.1-fullae0b86d3c4d0
duktape@2.7.0+tests-0ubuntu3
no fix listed

Open the chart page →

45,239
steamcmd-managerjfwenischVerified publisher0.4.51 of 1See more

steamcmd-manager jfwenisch 0.4.5

1 of the 1 container images this version deploys carry CVE-2026-12216.

Container imageDigestPackageFixed in
ghcr.io/jfwenisch/steamcmd-manager:v0.4.5dab685e668d9
duktape@2.7.0+tests-0ubuntu3
no fix listed

Open the chart page →

6,586
webtoolsjfwenischVerified publisher0.1.41 of 1See more

webtools jfwenisch 0.1.4

1 of the 1 container images this version deploys carry CVE-2026-12216.

Container imageDigestPackageFixed in
ghcr.io/jfwenisch/webtools:v0.1.44569cae83c70
duktape@2.7.0+tests-0ubuntu3
no fix listed

Open the chart page →

6,568
mumble-serverjuniorjpdj0.1.411 of 1See more

mumble-server juniorjpdj 0.1.41

1 of the 1 container images this version deploys carry CVE-2026-12216.

Container imageDigestPackageFixed in
ghcr.io/mumble-voip/mumble-server:v1.6.87002fd613b6a35
duktape@2.7.0+tests-0ubuntu3
no fix listed

Open the chart page →

2,099
linkdinglinkding0.2.31 of 1See more

linkding linkding 0.2.3

1 of the 1 container images this version deploys carry CVE-2026-12216.

Container imageDigestPackageFixed in
sissbruecker/linkding:1.41.0-plusa222fb777e1f
duktape@2.7.0-2
no fix listed

Open the chart page →

37,942
osdfir-infrastructureosdfir-infrastructureVerified publisher2.15.04 of 40See more

osdfir-infrastructure osdfir-infrastructure 2.15.0

4 of the 40 container images this version deploys carry CVE-2026-12216.

Container imageDigestPackageFixed in
ghcr.io/openrelik/openrelik-worker-bulkextractor:latest67498ee2e639
duktape@2.7.0+tests-0ubuntu3
no fix listed
ghcr.io/openrelik/openrelik-worker-extraction:latestec9fc5864cd5
duktape@2.7.0+tests-0ubuntu3
no fix listed
ghcr.io/openrelik/openrelik-worker-plaso:latest75537ea8c851
duktape@2.7.0+tests-0ubuntu3
no fix listed
ghcr.io/openrelik/openrelik-worker-timesketch:latest4cb88b603cdc
duktape@2.7.0+tests-0ubuntu3
no fix listed

Open the chart page →

71,208
cupsr2dlan-helm-chartsVerified publisher0.1.01 of 1See more

cups r2dlan-helm-charts 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-12216.

Container imageDigestPackageFixed in
anujdatar/cups:25.07.01685df04a643b
duktape@2.7.0-2
no fix listed

Open the chart page →

7,685
photoprismschoolguys-helmcharts0.3.81 of 1See more

photoprism schoolguys-helmcharts 0.3.8

1 of the 1 container images this version deploys carry CVE-2026-12216.

Container imageDigestPackageFixed in
photoprism/photoprism:260601650c6ad5a651
duktape@2.7.0+tests-0ubuntu4
no fix listed

Open the chart page →

10,348
kurento_webrtc_demostunner0.1.01 of 2See more

kurento_webrtc_demo stunner 0.1.0

1 of the 2 container images this version deploys carry CVE-2026-12216.

Container imageDigestPackageFixed in
kurento/kurento-media-server:latest03c0d34d0828
duktape@2.7.0+tests-0ubuntu3
no fix listed

Open the chart page →

12,460
stunner-kurento-one2one-callstunner0.1.01 of 2See more

stunner-kurento-one2one-call stunner 0.1.0

1 of the 2 container images this version deploys carry CVE-2026-12216.

Container imageDigestPackageFixed in
kurento/kurento-media-server:latest03c0d34d0828
duktape@2.7.0+tests-0ubuntu3
no fix listed

Open the chart page →

12,460
the0the0Verified publisher0.9.81 of 9See more

the0 the0 0.9.8

1 of the 9 container images this version deploys carry CVE-2026-12216.

Container imageDigestPackageFixed in
ghcr.io/alexanderwanyoike/the0/runtime:1.14.7459010a02aff
duktape@2.7.0+tests-0ubuntu3
no fix listed

Open the chart page →

7,248
opencloudunxwaresVerified publisher0.2.31 of 13See more

opencloud unxwares 0.2.3

1 of the 13 container images this version deploys carry CVE-2026-12216.

Container imageDigestPackageFixed in
apache/tika:2.9.2.1-fullae0b86d3c4d0
duktape@2.7.0+tests-0ubuntu3
no fix listed

Open the chart page →

45,239
browserlessvictorlane0.2.01 of 1See more

browserless victorlane 0.2.0

1 of the 1 container images this version deploys carry CVE-2026-12216.

Container imageDigestPackageFixed in
ghcr.io/browserless/chromium:v2.43.0853e6f105b51
duktape@2.7.0+tests-0ubuntu3
no fix listed

Open the chart page →

4,305
juicefs-csi-driverwenerme0.32.51 of 5See more

juicefs-csi-driver wenerme 0.32.5

1 of the 5 container images this version deploys carry CVE-2026-12216.

Container imageDigestPackageFixed in
juicedata/juicefs-csi-driver:v0.32.595008ba63318
duktape@2.7.0-2
no fix listed

Open the chart page →

9,117

Container images carrying it

30 by charts deploying them

A fixed version is listed for 0 of the 1 affected package.

Container imageDigestPackageFixed inUsed by
apache/tika:2.9.2.1-fullae0b86d3c4d0
duktape@2.7.0+tests-0ubuntu3
no fix listed
2
kurento/kurento-media-server:latest03c0d34d0828
duktape@2.7.0+tests-0ubuntu3
no fix listed
2
ghcr.io/browserless/chromium:v2.56.7b1ba7b054af2
duktape@2.7.0+tests-0ubuntu3
no fix listed
2
ghcr.io/mumble-voip/mumble-server:v1.6.87002fd613b6a35
duktape@2.7.0+tests-0ubuntu3
no fix listed
2
anujdatar/cups:25.07.01685df04a643b
duktape@2.7.0-2
no fix listed
1
apache/tika:latest-full80072bb73dd3
duktape@2.7.0+tests-0ubuntu4
no fix listed
1
codedesignplus/ms-emails-grpc:lateste336012bc781
duktape@2.7.0-2
no fix listed
1
codedesignplus/ms-emails-rest:latestac84661c605e
duktape@2.7.0-2
no fix listed
1
cybrarist/discount-bandit:v4.0.4e9e2447ac666
duktape@2.7.0-2+b2
no fix listed
1
falcosecurity/event-generator:latest932956d86c99
duktape@2.7.0-2
no fix listed
1
juicedata/juicefs-csi-driver:v0.32.595008ba63318
duktape@2.7.0-2
no fix listed
1
photoprism/photoprism:260601650c6ad5a651
duktape@2.7.0+tests-0ubuntu4
no fix listed
1
photoprism/photoprism:260728958642220223
duktape@2.7.0+tests-0ubuntu4
no fix listed
1
photoprism/photoprism:251130db16ee6b1ba3
duktape@2.7.0+tests-0ubuntu3
no fix listed
1
photoprism/photoprism:240711-cefc6fd632ca74
duktape@2.7.0+tests-0ubuntu3
no fix listed
1
qonstrukt/php:8.4-v8-apache089af7925aa1
duktape@2.7.0+tests-0ubuntu3
no fix listed
1
selenium/node-chrome:4.48.0-202609055ac71fd8dd1e
duktape@2.7.0+tests-0ubuntu3
no fix listed
1
selenium/node-firefox:4.48.0-2026090574a5c1c90f95
duktape@2.7.0+tests-0ubuntu3
no fix listed
1
sissbruecker/linkding:1.41.0-plusa222fb777e1f
duktape@2.7.0-2
no fix listed
1
zabbix/zabbix-web-service:ubuntu-7.0.23915b3183e054
duktape@2.7.0+tests-0ubuntu3
no fix listed
1
ghcr.io/alexanderwanyoike/the0/runtime:1.14.7459010a02aff
duktape@2.7.0+tests-0ubuntu3
no fix listed
1
ghcr.io/browserless/chrome:v2.56.7d600eac6283f
duktape@2.7.0+tests-0ubuntu3
no fix listed
1
ghcr.io/browserless/chromium:v2.55.42ed0183564d7
duktape@2.7.0+tests-0ubuntu3
no fix listed
1
ghcr.io/browserless/chromium:v2.43.0853e6f105b51
duktape@2.7.0+tests-0ubuntu3
no fix listed
1
ghcr.io/jfwenisch/steamcmd-manager:v0.4.5dab685e668d9
duktape@2.7.0+tests-0ubuntu3
no fix listed
1
ghcr.io/jfwenisch/webtools:v0.1.44569cae83c70
duktape@2.7.0+tests-0ubuntu3
no fix listed
1
ghcr.io/openrelik/openrelik-worker-bulkextractor:latest67498ee2e639
duktape@2.7.0+tests-0ubuntu3
no fix listed
1
ghcr.io/openrelik/openrelik-worker-extraction:latestec9fc5864cd5
duktape@2.7.0+tests-0ubuntu3
no fix listed
1
ghcr.io/openrelik/openrelik-worker-plaso:latest75537ea8c851
duktape@2.7.0+tests-0ubuntu3
no fix listed
1
ghcr.io/openrelik/openrelik-worker-timesketch:latest4cb88b603cdc
duktape@2.7.0+tests-0ubuntu3
no fix listed
1

syft 1.42.1 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.