StackRadar

CVE-2026-16389

Critical

Advisory

Published 21 Jul 2026In the index since 5 Sept 2026
Severity
Critical
worst across findings
CVSS
9.8
base score, highest
EPSS
0.006
45th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
79
of 17,781 indexed, latest versions
Container images
76
deployed by those charts
Fix available
1 of 2
affected packages

The matching OSV records carry no description.

Carried by container images the latest versions of 79 of 17,781 indexed charts deploy, on 76 images.

Affected packageAffected versionsFixed inImages
nssdeb2:3.87.1-1, 2:3.87.1-1+deb12u1, 2:3.87.1-1+deb12u2, 2:3.87.1-1+deb12u3+4 more2:3.87.1-1+deb12u4, 2:3.110-1+deb13u475
mozjs68deb68.6.0-1ubuntu1no fix listed1
OSV records
DEBIAN-CVE-2026-16389UBUNTU-CVE-2026-16389

Charts affected

79 by stars
ChartLatestAffected imagesRadar Score
chaos-meshkubeblocksVerified publisher2.7.21 of 4See more

chaos-mesh kubeblocks 2.7.2

1 of the 4 container images this version deploys carry CVE-2026-16389.

Container imageDigestPackageFixed in
ghcr.io/chaos-mesh/chaos-daemon:v2.7.29608d9b51452
nss@2:3.87.1-1+deb12u1
2:3.87.1-1+deb12u4

Open the chart page →

13,497
flaresolverrkubernetes-homelab-helm-chartsVerified publisher0.1.21 of 1See more

flaresolverr kubernetes-homelab-helm-charts 0.1.2

1 of the 1 container images this version deploys carry CVE-2026-16389.

Container imageDigestPackageFixed in
ghcr.io/flaresolverr/flaresolverr:v3.4.67962759d99d7
nss@2:3.87.1-1+deb12u1
2:3.87.1-1+deb12u4

Open the chart page →

33,583
kubernetes-kiosk-chromiumkubernetes-kiosk-chromium0.1.21 of 1See more

kubernetes-kiosk-chromium kubernetes-kiosk-chromium 0.1.2

1 of the 1 container images this version deploys carry CVE-2026-16389.

Container imageDigestPackageFixed in
ghcr.io/yurymkomarov/docker/kubernetes-kiosk-chromium:0.1.27bff29dcec72
nss@2:3.87.1-1+deb12u2
2:3.87.1-1+deb12u4

Open the chart page →

28,843
uptime-kumalbenicio-communityVerified publisher0.1.11 of 1See more

uptime-kuma lbenicio-community 0.1.1

1 of the 1 container images this version deploys carry CVE-2026-16389.

Container imageDigestPackageFixed in
louislam/uptime-kuma:2.3.29aeb4e51d038
nss@2:3.87.1-1+deb12u2
2:3.87.1-1+deb12u4

Open the chart page →

33,242
linkdinglinkding0.2.31 of 1See more

linkding linkding 0.2.3

1 of the 1 container images this version deploys carry CVE-2026-16389.

Container imageDigestPackageFixed in
sissbruecker/linkding:1.41.0-plusa222fb777e1f
nss@2:3.87.1-1+deb12u1
2:3.87.1-1+deb12u4

Open the chart page →

37,942
uptime-kumaloeken-at-homeVerified publisher2.3.21 of 1See more

uptime-kuma loeken-at-home 2.3.2

1 of the 1 container images this version deploys carry CVE-2026-16389.

Container imageDigestPackageFixed in
louislam/uptime-kuma:2.3.29aeb4e51d038
nss@2:3.87.1-1+deb12u2
2:3.87.1-1+deb12u4

Open the chart page →

33,242
flaresolverrluiscajl0.0.31 of 1See more

flaresolverr luiscajl 0.0.3

1 of the 1 container images this version deploys carry CVE-2026-16389.

Container imageDigestPackageFixed in
flaresolverr/flaresolverr:latest139dfee1c6f8
nss@2:3.87.1-1+deb12u2
2:3.87.1-1+deb12u4

Open the chart page →

27,274
tinymediamanagermedia-servarrVerified publisher1.6.21 of 2See more

tinymediamanager media-servarr 1.6.2

1 of the 2 container images this version deploys carry CVE-2026-16389.

Container imageDigestPackageFixed in
tinymediamanager/tinymediamanager:5.3.22b34dc85099e
nss@2:3.110-1+deb13u1
2:3.110-1+deb13u4

Open the chart page →

7,944
paperless-ngxmt1905027.6.141 of 4See more

paperless-ngx mt190502 7.6.14

1 of the 4 container images this version deploys carry CVE-2026-16389.

Container imageDigestPackageFixed in
ghcr.io/paperless-ngx/paperless-ngx:2.20.134b05bcd28e69
nss@2:3.110-1+deb13u1
2:3.110-1+deb13u4

Open the chart page →

11,950
uptime-kumancsaVerified publisher1.7.21 of 1See more

uptime-kuma ncsa 1.7.2

1 of the 1 container images this version deploys carry CVE-2026-16389.

Container imageDigestPackageFixed in
louislam/uptime-kuma:2.5.4917318f9d7be
nss@2:3.87.1-1+deb12u2
2:3.87.1-1+deb12u4

Open the chart page →

30,028
firecrawlobeoneVerified publisher3.0.11 of 5See more

firecrawl obeone 3.0.1

1 of the 5 container images this version deploys carry CVE-2026-16389.

Container imageDigestPackageFixed in
ghcr.io/firecrawl/playwright-service:latest1f6eba640320
nss@2:3.87.1-1+deb12u2
2:3.87.1-1+deb12u4

Open the chart page →

9,995
cupsr2dlan-helm-chartsVerified publisher0.1.01 of 1See more

cups r2dlan-helm-charts 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-16389.

Container imageDigestPackageFixed in
anujdatar/cups:25.07.01685df04a643b
nss@2:3.87.1-1+deb12u1
2:3.87.1-1+deb12u4

Open the chart page →

7,685
paperless-ngxrtomik-helm-chartsVerified publisher0.0.51 of 1See more

paperless-ngx rtomik-helm-charts 0.0.5

1 of the 1 container images this version deploys carry CVE-2026-16389.

Container imageDigestPackageFixed in
ghcr.io/paperless-ngx/paperless-ngx:2.20.357ad9565bff3
nss@2:3.110-1
2:3.110-1+deb13u4

Open the chart page →

10,605
flaresolverrrubxkubeVerified publisher0.1.11 of 1See more

flaresolverr rubxkube 0.1.1

1 of the 1 container images this version deploys carry CVE-2026-16389.

Container imageDigestPackageFixed in
flaresolverr/flaresolverr:v3.5.0139dfee1c6f8
nss@2:3.87.1-1+deb12u2
2:3.87.1-1+deb12u4

Open the chart page →

27,274
uptime-kumarubxkubeVerified publisher1.2.11 of 1See more

uptime-kuma rubxkube 1.2.1

1 of the 1 container images this version deploys carry CVE-2026-16389.

Container imageDigestPackageFixed in
louislam/uptime-kuma:2.4.091e963bfda56
nss@2:3.87.1-1+deb12u2
2:3.87.1-1+deb12u4

Open the chart page →

30,219
backendsignalen4.24.01 of 4See more

backend signalen 4.24.0

1 of the 4 container images this version deploys carry CVE-2026-16389.

Container imageDigestPackageFixed in
signalen/backend:2.50.14760256000738
nss@2:3.87.1-1+deb12u3
2:3.87.1-1+deb12u4

Open the chart page →

11,636
speckle-preview-service-branch-testing6speckleVerified publisher2.23.14-branch.testing6.334655-b4e04ee1 of 1See more

speckle-preview-service-branch-testing6 speckle 2.23.14-branch.testing6.334655-b4e04ee

1 of the 1 container images this version deploys carry CVE-2026-16389.

Container imageDigestPackageFixed in
speckle/speckle-preview-service:2.23.14-branch.testing6.334655-b4e04ee6dee853ba74a
nss@2:3.87.1-1+deb12u1
2:3.87.1-1+deb12u4

Open the chart page →

5,950
speckle-server-branch-hotfix-2.19.1speckleVerified publisher2.19.2-branch.hotfix-2.19.1.124125-665e7e11 of 5See more

speckle-server-branch-hotfix-2.19.1 speckle 2.19.2-branch.hotfix-2.19.1.124125-665e7e1

1 of the 5 container images this version deploys carry CVE-2026-16389.

Container imageDigestPackageFixed in
speckle/speckle-preview-service:2.19.2-branch.hotfix-2.19.1.124125-665e7e1c102b087481a
nss@2:3.87.1-1
2:3.87.1-1+deb12u4

Open the chart page →

16,368
speckle-server-branch-hotfix-2.20.2speckleVerified publisher2.20.3-branch.hotfix-2.20.2.149555-37ea0cb1 of 5See more

speckle-server-branch-hotfix-2.20.2 speckle 2.20.3-branch.hotfix-2.20.2.149555-37ea0cb

1 of the 5 container images this version deploys carry CVE-2026-16389.

Container imageDigestPackageFixed in
speckle/speckle-preview-service:2.20.3-branch.hotfix-2.20.2.149555-37ea0cbd3da0a84de98
nss@2:3.87.1-1
2:3.87.1-1+deb12u4

Open the chart page →

16,400
speckle-server-branch-testingspeckleVerified publisher2.17.14-branch.testing.72707.921a5f81 of 5See more

speckle-server-branch-testing speckle 2.17.14-branch.testing.72707.921a5f8

1 of the 5 container images this version deploys carry CVE-2026-16389.

Container imageDigestPackageFixed in
speckle/speckle-preview-service:2.17.14-branch.testing.72707.921a5f884fc39bca0c8
nss@2:3.87.1-1
2:3.87.1-1+deb12u4

Open the chart page →

14,679
speckle-server-branch-testing1speckleVerified publisher2.20.6-branch.testing1.154030-9b091141 of 5See more

speckle-server-branch-testing1 speckle 2.20.6-branch.testing1.154030-9b09114

1 of the 5 container images this version deploys carry CVE-2026-16389.

Container imageDigestPackageFixed in
speckle/speckle-preview-service:2.20.6-branch.testing1.154030-9b091148f3c1ea153ba
nss@2:3.87.1-1
2:3.87.1-1+deb12u4

Open the chart page →

16,400
speckle-server-branch-testing2speckleVerified publisher2.18.11-branch.testing2.88634-335d4691 of 5See more

speckle-server-branch-testing2 speckle 2.18.11-branch.testing2.88634-335d469

1 of the 5 container images this version deploys carry CVE-2026-16389.

Container imageDigestPackageFixed in
speckle/speckle-preview-service:2.18.11-branch.testing2.88634-335d4694bd113093583
nss@2:3.87.1-1
2:3.87.1-1+deb12u4

Open the chart page →

14,221
speckle-server-branch-testing3speckleVerified publisher2.18.12-branch.testing3.88744-f55b3411 of 5See more

speckle-server-branch-testing3 speckle 2.18.12-branch.testing3.88744-f55b341

1 of the 5 container images this version deploys carry CVE-2026-16389.

Container imageDigestPackageFixed in
speckle/speckle-preview-service:2.18.12-branch.testing3.88744-f55b3414bd113093583
nss@2:3.87.1-1
2:3.87.1-1+deb12u4

Open the chart page →

14,221
speckle-server-branch-testing4speckleVerified publisher2.20.2-branch.testing4.134160-9fad4b21 of 5See more

speckle-server-branch-testing4 speckle 2.20.2-branch.testing4.134160-9fad4b2

1 of the 5 container images this version deploys carry CVE-2026-16389.

Container imageDigestPackageFixed in
speckle/speckle-preview-service:2.20.2-branch.testing4.134160-9fad4b21f897ca906ea
nss@2:3.87.1-1
2:3.87.1-1+deb12u4

Open the chart page →

16,019
speckle-server-branch-testing5speckleVerified publisher2.21.3-branch.testing5.219631-2153bef1 of 5See more

speckle-server-branch-testing5 speckle 2.21.3-branch.testing5.219631-2153bef

1 of the 5 container images this version deploys carry CVE-2026-16389.

Container imageDigestPackageFixed in
speckle/speckle-preview-service:2.21.3-branch.testing5.219631-2153bef52cad5e3293e
nss@2:3.87.1-1
2:3.87.1-1+deb12u4

Open the chart page →

15,635
speckle-server-branch-testing6speckleVerified publisher2.25.10-branch.testing6.645-b125c1e1 of 4See more

speckle-server-branch-testing6 speckle 2.25.10-branch.testing6.645-b125c1e

1 of the 4 container images this version deploys carry CVE-2026-16389.

Container imageDigestPackageFixed in
speckle/speckle-preview-service:2.25.10-branch.testing6.645-b125c1e787adcb20a3a
nss@2:3.87.1-1+deb12u1
2:3.87.1-1+deb12u4

Open the chart page →

11,100
flaresolverrsudo-kraken-flaresolverrVerified publisher2.1.41 of 1See more

flaresolverr sudo-kraken-flaresolverr 2.1.4

1 of the 1 container images this version deploys carry CVE-2026-16389.

Container imageDigestPackageFixed in
ghcr.io/flaresolverr/flaresolverr:v3.4.67962759d99d7
nss@2:3.87.1-1+deb12u1
2:3.87.1-1+deb12u4

Open the chart page →

33,583
netforge-besvtechVerified publisher0.0.21 of 3See more

netforge-be svtech 0.0.2

1 of the 3 container images this version deploys carry CVE-2026-16389.

Container imageDigestPackageFixed in
conductoross/conductor:3.31.09fba127693e6
nss@2:3.110-1+deb13u2
2:3.110-1+deb13u4

Open the chart page →

4,674
maybe-financevicsuferVerified publisher0.2.71 of 3See more

maybe-finance vicsufer 0.2.7

1 of the 3 container images this version deploys carry CVE-2026-16389.

Container imageDigestPackageFixed in
ghcr.io/maybe-finance/maybe:0.5.0c6ab95ca9130
nss@2:3.87.1-1+deb12u1
2:3.87.1-1+deb12u4

Open the chart page →

10,795

Container images carrying it

76 by charts deploying them

A fixed version is listed for 1 of the 2 affected packages.

Container imageDigestPackageFixed inUsed by
speckle/speckle-preview-service:2.17.14-branch.testing.72707.921a5f884fc39bca0c8
nss@2:3.87.1-1
2:3.87.1-1+deb12u4
1
speckle/speckle-preview-service:2.20.6-branch.testing1.154030-9b091148f3c1ea153ba
nss@2:3.87.1-1
2:3.87.1-1+deb12u4
1
speckle/speckle-preview-service:2.19.2-branch.hotfix-2.19.1.124125-665e7e1c102b087481a
nss@2:3.87.1-1
2:3.87.1-1+deb12u4
1
speckle/speckle-preview-service:2.20.3-branch.hotfix-2.20.2.149555-37ea0cbd3da0a84de98
nss@2:3.87.1-1
2:3.87.1-1+deb12u4
1
thingsboard/tb-postgres:latest2d17e4e36edc
nss@2:3.87.1-1+deb12u1
2:3.87.1-1+deb12u4
1
tinymediamanager/tinymediamanager:5.3.22b34dc85099e
nss@2:3.110-1+deb13u1
2:3.110-1+deb13u4
1
ghcr.io/afairgiant/medikeep:v0.69.0766699daa9ac
nss@2:3.87.1-1+deb12u3
2:3.87.1-1+deb12u4
1
ghcr.io/appscode/gotenberg:8.25f9104080d9a7
nss@2:3.110-1
2:3.110-1+deb13u4
1
ghcr.io/avistotelecom/docker-wazuh-agent:4.12.08766ba08bf1a
nss@2:3.87.1-1+deb12u1
2:3.87.1-1+deb12u4
1
ghcr.io/caninehq/canine:latesta058034ca006
nss@2:3.87.1-1+deb12u3
2:3.87.1-1+deb12u4
1
ghcr.io/chaos-mesh/chaos-daemon:v2.8.369b1d3c09cfa
nss@2:3.87.1-1+deb12u2
2:3.87.1-1+deb12u4
1
ghcr.io/chaos-mesh/chaos-daemon:v2.7.29608d9b51452
nss@2:3.87.1-1+deb12u1
2:3.87.1-1+deb12u4
1
ghcr.io/chaos-mesh/chaos-daemon:v2.8.0fb609bc264d9
nss@2:3.87.1-1+deb12u1
2:3.87.1-1+deb12u4
1
ghcr.io/deltabadger/deltabadger:2.23.3bffe3c22fabc
nss@2:3.110-1+deb13u3
2:3.110-1+deb13u4
1
ghcr.io/firecrawl/playwright-service:latest1f6eba640320
nss@2:3.87.1-1+deb12u2
2:3.87.1-1+deb12u4
1
ghcr.io/flaresolverr/flaresolverr:v3.4.0ab535d1fef5d
nss@2:3.87.1-1+deb12u1
2:3.87.1-1+deb12u4
1
ghcr.io/maybe-finance/maybe:0.5.0c6ab95ca9130
nss@2:3.87.1-1+deb12u1
2:3.87.1-1+deb12u4
1
ghcr.io/open-telemetry/demo:1.12.0-loadgenerator85c9935ff31b
nss@2:3.87.1-1
2:3.87.1-1+deb12u4
1
ghcr.io/paperless-ngx/paperless-ngx:2.13.10642357c5dbd
nss@2:3.87.1-1
2:3.87.1-1+deb12u4
1
ghcr.io/paperless-ngx/paperless-ngx:2.20.134b05bcd28e69
nss@2:3.110-1+deb13u1
2:3.110-1+deb13u4
1
ghcr.io/paperless-ngx/paperless-ngx:2.20.357ad9565bff3
nss@2:3.110-1
2:3.110-1+deb13u4
1
ghcr.io/paperless-ngx/paperless-ngx:2.20.5665f2f5cc548
nss@2:3.110-1
2:3.110-1+deb13u4
1
ghcr.io/paperless-ngx/paperless-ngx:2.0.1ab255bea133e
nss@2:3.87.1-1
2:3.87.1-1+deb12u4
1
ghcr.io/paperless-ngx/paperless-ngx:2.20.14b89f83345532
nss@2:3.110-1+deb13u1
2:3.110-1+deb13u4
1
ghcr.io/wiremind/grafana-pdf-exporter:v1.7dbaa8527bf4c
nss@2:3.87.1-1
2:3.87.1-1+deb12u4
1
ghcr.io/yurymkomarov/docker/kubernetes-kiosk-chromium:0.1.27bff29dcec72
nss@2:3.87.1-1+deb12u2
2:3.87.1-1+deb12u4
1

syft 1.42.1 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.