StackRadar

CVE-2026-16389

Critical

Advisory

Published 21 Jul 2026In the index since 5 Sept 2026
Severity
Critical
worst across findings
CVSS
9.8
base score, highest
EPSS
0.006
45th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
79
of 17,781 indexed, latest versions
Container images
76
deployed by those charts
Fix available
1 of 2
affected packages

The matching OSV records carry no description.

Carried by container images the latest versions of 79 of 17,781 indexed charts deploy, on 76 images.

Affected packageAffected versionsFixed inImages
nssdeb2:3.87.1-1, 2:3.87.1-1+deb12u1, 2:3.87.1-1+deb12u2, 2:3.87.1-1+deb12u3+4 more2:3.87.1-1+deb12u4, 2:3.110-1+deb13u475
mozjs68deb68.6.0-1ubuntu1no fix listed1
OSV records
DEBIAN-CVE-2026-16389UBUNTU-CVE-2026-16389

Charts affected

79 by stars
ChartLatestAffected imagesRadar Score
chaos-meshkubeblocksVerified publisher2.7.21 of 4See more

chaos-mesh kubeblocks 2.7.2

1 of the 4 container images this version deploys carry CVE-2026-16389.

Container imageDigestPackageFixed in
ghcr.io/chaos-mesh/chaos-daemon:v2.7.29608d9b51452
nss@2:3.87.1-1+deb12u1
2:3.87.1-1+deb12u4

Open the chart page →

13,497
flaresolverrkubernetes-homelab-helm-chartsVerified publisher0.1.21 of 1See more

flaresolverr kubernetes-homelab-helm-charts 0.1.2

1 of the 1 container images this version deploys carry CVE-2026-16389.

Container imageDigestPackageFixed in
ghcr.io/flaresolverr/flaresolverr:v3.4.67962759d99d7
nss@2:3.87.1-1+deb12u1
2:3.87.1-1+deb12u4

Open the chart page →

33,583
kubernetes-kiosk-chromiumkubernetes-kiosk-chromium0.1.21 of 1See more

kubernetes-kiosk-chromium kubernetes-kiosk-chromium 0.1.2

1 of the 1 container images this version deploys carry CVE-2026-16389.

Container imageDigestPackageFixed in
ghcr.io/yurymkomarov/docker/kubernetes-kiosk-chromium:0.1.27bff29dcec72
nss@2:3.87.1-1+deb12u2
2:3.87.1-1+deb12u4

Open the chart page →

28,843
uptime-kumalbenicio-communityVerified publisher0.1.11 of 1See more

uptime-kuma lbenicio-community 0.1.1

1 of the 1 container images this version deploys carry CVE-2026-16389.

Container imageDigestPackageFixed in
louislam/uptime-kuma:2.3.29aeb4e51d038
nss@2:3.87.1-1+deb12u2
2:3.87.1-1+deb12u4

Open the chart page →

33,242
linkdinglinkding0.2.31 of 1See more

linkding linkding 0.2.3

1 of the 1 container images this version deploys carry CVE-2026-16389.

Container imageDigestPackageFixed in
sissbruecker/linkding:1.41.0-plusa222fb777e1f
nss@2:3.87.1-1+deb12u1
2:3.87.1-1+deb12u4

Open the chart page →

37,942
uptime-kumaloeken-at-homeVerified publisher2.3.21 of 1See more

uptime-kuma loeken-at-home 2.3.2

1 of the 1 container images this version deploys carry CVE-2026-16389.

Container imageDigestPackageFixed in
louislam/uptime-kuma:2.3.29aeb4e51d038
nss@2:3.87.1-1+deb12u2
2:3.87.1-1+deb12u4

Open the chart page →

33,242
flaresolverrluiscajl0.0.31 of 1See more

flaresolverr luiscajl 0.0.3

1 of the 1 container images this version deploys carry CVE-2026-16389.

Container imageDigestPackageFixed in
flaresolverr/flaresolverr:latest139dfee1c6f8
nss@2:3.87.1-1+deb12u2
2:3.87.1-1+deb12u4

Open the chart page →

27,274
tinymediamanagermedia-servarrVerified publisher1.6.21 of 2See more

tinymediamanager media-servarr 1.6.2

1 of the 2 container images this version deploys carry CVE-2026-16389.

Container imageDigestPackageFixed in
tinymediamanager/tinymediamanager:5.3.22b34dc85099e
nss@2:3.110-1+deb13u1
2:3.110-1+deb13u4

Open the chart page →

7,944
paperless-ngxmt1905027.6.141 of 4See more

paperless-ngx mt190502 7.6.14

1 of the 4 container images this version deploys carry CVE-2026-16389.

Container imageDigestPackageFixed in
ghcr.io/paperless-ngx/paperless-ngx:2.20.134b05bcd28e69
nss@2:3.110-1+deb13u1
2:3.110-1+deb13u4

Open the chart page →

11,950
uptime-kumancsaVerified publisher1.7.21 of 1See more

uptime-kuma ncsa 1.7.2

1 of the 1 container images this version deploys carry CVE-2026-16389.

Container imageDigestPackageFixed in
louislam/uptime-kuma:2.5.4917318f9d7be
nss@2:3.87.1-1+deb12u2
2:3.87.1-1+deb12u4

Open the chart page →

30,028
firecrawlobeoneVerified publisher3.0.11 of 5See more

firecrawl obeone 3.0.1

1 of the 5 container images this version deploys carry CVE-2026-16389.

Container imageDigestPackageFixed in
ghcr.io/firecrawl/playwright-service:latest1f6eba640320
nss@2:3.87.1-1+deb12u2
2:3.87.1-1+deb12u4

Open the chart page →

9,995
cupsr2dlan-helm-chartsVerified publisher0.1.01 of 1See more

cups r2dlan-helm-charts 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-16389.

Container imageDigestPackageFixed in
anujdatar/cups:25.07.01685df04a643b
nss@2:3.87.1-1+deb12u1
2:3.87.1-1+deb12u4

Open the chart page →

7,685
paperless-ngxrtomik-helm-chartsVerified publisher0.0.51 of 1See more

paperless-ngx rtomik-helm-charts 0.0.5

1 of the 1 container images this version deploys carry CVE-2026-16389.

Container imageDigestPackageFixed in
ghcr.io/paperless-ngx/paperless-ngx:2.20.357ad9565bff3
nss@2:3.110-1
2:3.110-1+deb13u4

Open the chart page →

10,605
flaresolverrrubxkubeVerified publisher0.1.11 of 1See more

flaresolverr rubxkube 0.1.1

1 of the 1 container images this version deploys carry CVE-2026-16389.

Container imageDigestPackageFixed in
flaresolverr/flaresolverr:v3.5.0139dfee1c6f8
nss@2:3.87.1-1+deb12u2
2:3.87.1-1+deb12u4

Open the chart page →

27,274
uptime-kumarubxkubeVerified publisher1.2.11 of 1See more

uptime-kuma rubxkube 1.2.1

1 of the 1 container images this version deploys carry CVE-2026-16389.

Container imageDigestPackageFixed in
louislam/uptime-kuma:2.4.091e963bfda56
nss@2:3.87.1-1+deb12u2
2:3.87.1-1+deb12u4

Open the chart page →

30,219
backendsignalen4.24.01 of 4See more

backend signalen 4.24.0

1 of the 4 container images this version deploys carry CVE-2026-16389.

Container imageDigestPackageFixed in
signalen/backend:2.50.14760256000738
nss@2:3.87.1-1+deb12u3
2:3.87.1-1+deb12u4

Open the chart page →

11,636
speckle-preview-service-branch-testing6speckleVerified publisher2.23.14-branch.testing6.334655-b4e04ee1 of 1See more

speckle-preview-service-branch-testing6 speckle 2.23.14-branch.testing6.334655-b4e04ee

1 of the 1 container images this version deploys carry CVE-2026-16389.

Container imageDigestPackageFixed in
speckle/speckle-preview-service:2.23.14-branch.testing6.334655-b4e04ee6dee853ba74a
nss@2:3.87.1-1+deb12u1
2:3.87.1-1+deb12u4

Open the chart page →

5,950
speckle-server-branch-hotfix-2.19.1speckleVerified publisher2.19.2-branch.hotfix-2.19.1.124125-665e7e11 of 5See more

speckle-server-branch-hotfix-2.19.1 speckle 2.19.2-branch.hotfix-2.19.1.124125-665e7e1

1 of the 5 container images this version deploys carry CVE-2026-16389.

Container imageDigestPackageFixed in
speckle/speckle-preview-service:2.19.2-branch.hotfix-2.19.1.124125-665e7e1c102b087481a
nss@2:3.87.1-1
2:3.87.1-1+deb12u4

Open the chart page →

16,368
speckle-server-branch-hotfix-2.20.2speckleVerified publisher2.20.3-branch.hotfix-2.20.2.149555-37ea0cb1 of 5See more

speckle-server-branch-hotfix-2.20.2 speckle 2.20.3-branch.hotfix-2.20.2.149555-37ea0cb

1 of the 5 container images this version deploys carry CVE-2026-16389.

Container imageDigestPackageFixed in
speckle/speckle-preview-service:2.20.3-branch.hotfix-2.20.2.149555-37ea0cbd3da0a84de98
nss@2:3.87.1-1
2:3.87.1-1+deb12u4

Open the chart page →

16,400
speckle-server-branch-testingspeckleVerified publisher2.17.14-branch.testing.72707.921a5f81 of 5See more

speckle-server-branch-testing speckle 2.17.14-branch.testing.72707.921a5f8

1 of the 5 container images this version deploys carry CVE-2026-16389.

Container imageDigestPackageFixed in
speckle/speckle-preview-service:2.17.14-branch.testing.72707.921a5f884fc39bca0c8
nss@2:3.87.1-1
2:3.87.1-1+deb12u4

Open the chart page →

14,679
speckle-server-branch-testing1speckleVerified publisher2.20.6-branch.testing1.154030-9b091141 of 5See more

speckle-server-branch-testing1 speckle 2.20.6-branch.testing1.154030-9b09114

1 of the 5 container images this version deploys carry CVE-2026-16389.

Container imageDigestPackageFixed in
speckle/speckle-preview-service:2.20.6-branch.testing1.154030-9b091148f3c1ea153ba
nss@2:3.87.1-1
2:3.87.1-1+deb12u4

Open the chart page →

16,400
speckle-server-branch-testing2speckleVerified publisher2.18.11-branch.testing2.88634-335d4691 of 5See more

speckle-server-branch-testing2 speckle 2.18.11-branch.testing2.88634-335d469

1 of the 5 container images this version deploys carry CVE-2026-16389.

Container imageDigestPackageFixed in
speckle/speckle-preview-service:2.18.11-branch.testing2.88634-335d4694bd113093583
nss@2:3.87.1-1
2:3.87.1-1+deb12u4

Open the chart page →

14,221
speckle-server-branch-testing3speckleVerified publisher2.18.12-branch.testing3.88744-f55b3411 of 5See more

speckle-server-branch-testing3 speckle 2.18.12-branch.testing3.88744-f55b341

1 of the 5 container images this version deploys carry CVE-2026-16389.

Container imageDigestPackageFixed in
speckle/speckle-preview-service:2.18.12-branch.testing3.88744-f55b3414bd113093583
nss@2:3.87.1-1
2:3.87.1-1+deb12u4

Open the chart page →

14,221
speckle-server-branch-testing4speckleVerified publisher2.20.2-branch.testing4.134160-9fad4b21 of 5See more

speckle-server-branch-testing4 speckle 2.20.2-branch.testing4.134160-9fad4b2

1 of the 5 container images this version deploys carry CVE-2026-16389.

Container imageDigestPackageFixed in
speckle/speckle-preview-service:2.20.2-branch.testing4.134160-9fad4b21f897ca906ea
nss@2:3.87.1-1
2:3.87.1-1+deb12u4

Open the chart page →

16,019
speckle-server-branch-testing5speckleVerified publisher2.21.3-branch.testing5.219631-2153bef1 of 5See more

speckle-server-branch-testing5 speckle 2.21.3-branch.testing5.219631-2153bef

1 of the 5 container images this version deploys carry CVE-2026-16389.

Container imageDigestPackageFixed in
speckle/speckle-preview-service:2.21.3-branch.testing5.219631-2153bef52cad5e3293e
nss@2:3.87.1-1
2:3.87.1-1+deb12u4

Open the chart page →

15,635
speckle-server-branch-testing6speckleVerified publisher2.25.10-branch.testing6.645-b125c1e1 of 4See more

speckle-server-branch-testing6 speckle 2.25.10-branch.testing6.645-b125c1e

1 of the 4 container images this version deploys carry CVE-2026-16389.

Container imageDigestPackageFixed in
speckle/speckle-preview-service:2.25.10-branch.testing6.645-b125c1e787adcb20a3a
nss@2:3.87.1-1+deb12u1
2:3.87.1-1+deb12u4

Open the chart page →

11,100
flaresolverrsudo-kraken-flaresolverrVerified publisher2.1.41 of 1See more

flaresolverr sudo-kraken-flaresolverr 2.1.4

1 of the 1 container images this version deploys carry CVE-2026-16389.

Container imageDigestPackageFixed in
ghcr.io/flaresolverr/flaresolverr:v3.4.67962759d99d7
nss@2:3.87.1-1+deb12u1
2:3.87.1-1+deb12u4

Open the chart page →

33,583
netforge-besvtechVerified publisher0.0.21 of 3See more

netforge-be svtech 0.0.2

1 of the 3 container images this version deploys carry CVE-2026-16389.

Container imageDigestPackageFixed in
conductoross/conductor:3.31.09fba127693e6
nss@2:3.110-1+deb13u2
2:3.110-1+deb13u4

Open the chart page →

4,674
maybe-financevicsuferVerified publisher0.2.71 of 3See more

maybe-finance vicsufer 0.2.7

1 of the 3 container images this version deploys carry CVE-2026-16389.

Container imageDigestPackageFixed in
ghcr.io/maybe-finance/maybe:0.5.0c6ab95ca9130
nss@2:3.87.1-1+deb12u1
2:3.87.1-1+deb12u4

Open the chart page →

10,795

Container images carrying it

76 by charts deploying them

A fixed version is listed for 1 of the 2 affected packages.

Container imageDigestPackageFixed inUsed by
flaresolverr/flaresolverr:latest:v3.5.0139dfee1c6f8
nss@2:3.87.1-1+deb12u2
2:3.87.1-1+deb12u4
5
chromedp/headless-shell:148.0.7778.97313ed7255ae1
nss@2:3.110-1+deb13u1
2:3.110-1+deb13u4
2
louislam/uptime-kuma:2.5.4917318f9d7be
nss@2:3.87.1-1+deb12u2
2:3.87.1-1+deb12u4
2
louislam/uptime-kuma:2.3.29aeb4e51d038
nss@2:3.87.1-1+deb12u2
2:3.87.1-1+deb12u4
2
louislam/uptime-kuma:2.5.0a8610b3b4c38
nss@2:3.87.1-1+deb12u2
2:3.87.1-1+deb12u4
2
speckle/speckle-preview-service:2.18.11-branch.testing2.88634-335d469:2.18.12-branch.testing3.88744-f55b3414bd113093583
nss@2:3.87.1-1
2:3.87.1-1+deb12u4
2
ghcr.io/flaresolverr/flaresolverr:v3.4.67962759d99d7
nss@2:3.87.1-1+deb12u1
2:3.87.1-1+deb12u4
2
ghcr.io/smarter-project/hydra/isolated-vm:main4457b79b24cd
nss@2:3.87.1-1+deb12u2
2:3.87.1-1+deb12u4
2
anujdatar/cups:25.07.01685df04a643b
nss@2:3.87.1-1+deb12u1
2:3.87.1-1+deb12u4
1
archivebox/archivebox:0.7.41a5a37331091
nss@2:3.87.1-1+deb12u2
2:3.87.1-1+deb12u4
1
bitnamilegacy/openldap:2.6.8-debian-12-r16e412c178ef9
nss@2:3.87.1-1
2:3.87.1-1+deb12u4
1
carbone/carbone-ee:full-5.11.0518172cbad49
nss@2:3.110-1+deb13u3
2:3.110-1+deb13u4
1
conductoross/conductor:3.31.09fba127693e6
nss@2:3.110-1+deb13u2
2:3.110-1+deb13u4
1
cybrarist/discount-bandit:v4.0.4e9e2447ac666
nss@2:3.110-1+deb13u2
2:3.110-1+deb13u4
1
ddosify/selfhosted_alaz_backend:1.0.6a43c5155fa1c
nss@2:3.87.1-1
2:3.87.1-1+deb12u4
1
ddosify/selfhosted_backend:3.2.93c11e3182652
nss@2:3.87.1-1
2:3.87.1-1+deb12u4
1
ddosify/selfhosted_backend:2.6.11ac323d52bfb4
nss@2:3.87.1-1
2:3.87.1-1+deb12u4
1
dragonflyoss/client:v0.1.82edf3e921f4e0
nss@2:3.87.1-1
2:3.87.1-1+deb12u4
1
falcosecurity/falco-driver-loader:0.44.17df783d5269a
nss@2:3.87.1-1+deb12u2
2:3.87.1-1+deb12u4
1
fiware/biz-ecosystem-charging-backend:11.7.029456835bb2c
mozjs68@68.6.0-1ubuntu1
no fix listed
1
fluent/fluent-bit:4.0-debuge76397ef3983
nss@2:3.87.1-1+deb12u1
2:3.87.1-1+deb12u4
1
gotenberg/gotenberg:8.30206a6c708fc6
nss@2:3.110-1+deb13u1
2:3.110-1+deb13u4
1
gotenberg/gotenberg:8.3467097317623a
nss@2:3.110-1+deb13u2
2:3.110-1+deb13u4
1
hiversh/antigravity:0.1.45-microvm0e36d98402bc
nss@2:3.87.1-1+deb12u3
2:3.87.1-1+deb12u4
1
hiversh/browser:0.1.45-microvmb5048c6342ce
nss@2:3.87.1-1+deb12u3
2:3.87.1-1+deb12u4
1
hiversh/claude:0.1.45-microvm2fbf9f264498
nss@2:3.87.1-1+deb12u3
2:3.87.1-1+deb12u4
1
hiversh/codex:0.1.45-microvm4f43130f51e5
nss@2:3.87.1-1+deb12u3
2:3.87.1-1+deb12u4
1
hiversh/copilot:0.1.45-microvm50c07b84f298
nss@2:3.87.1-1+deb12u3
2:3.87.1-1+deb12u4
1
hiversh/node:0.1.45-alpine-microvm836a37641941
nss@2:3.87.1-1+deb12u3
2:3.87.1-1+deb12u4
1
hiversh/openclaw:0.1.45-microvm958b7ebb4eb4
nss@2:3.87.1-1+deb12u3
2:3.87.1-1+deb12u4
1
hiversh/python:0.1.45-3.13-alpine-microvm63a5ae179a9f
nss@2:3.87.1-1+deb12u3
2:3.87.1-1+deb12u4
1
ixsystems/truecommand:3.2.019c218455cd2
nss@2:3.110-1
2:3.110-1+deb13u4
1
jaedb/iris:latest048cfbf58d57
nss@2:3.87.1-1+deb12u1
2:3.87.1-1+deb12u4
1
jpgouin/openldap:2.6.9-fixbfdd0088c776
nss@2:3.87.1-1+deb12u1
2:3.87.1-1+deb12u4
1
kinseii/wazuh-agent:4.14.17160eb143728
nss@2:3.87.1-1+deb12u1
2:3.87.1-1+deb12u4
1
localstack/localstack:3.19d278167f2b7
nss@2:3.87.1-1
2:3.87.1-1+deb12u4
1
louislam/uptime-kuma:2.5.33e24e96c89ef
nss@2:3.87.1-1+deb12u2
2:3.87.1-1+deb12u4
1
louislam/uptime-kuma:2.0.24c364ef96aad
nss@2:3.87.1-1+deb12u1
2:3.87.1-1+deb12u4
1
louislam/uptime-kuma:2.4.091e963bfda56
nss@2:3.87.1-1+deb12u2
2:3.87.1-1+deb12u4
1
merlos/zookeeper:3.9.3a38fc7e09ed7
nss@2:3.87.1-1+deb12u1
2:3.87.1-1+deb12u4
1
networktocode/nautobot:3.0-py3.13ed484336b1ad
nss@2:3.110-1+deb13u1
2:3.110-1+deb13u4
1
prowlercloud/prowler-api:5.31.14f252d579be2
nss@2:3.87.1-1+deb12u2
2:3.87.1-1+deb12u4
1
sbs20/scanservjs:release-v3.0.3dad1fd6e9a98
nss@2:3.87.1-1
2:3.87.1-1+deb12u4
1
signalen/backend:2.50.14760256000738
nss@2:3.87.1-1+deb12u3
2:3.87.1-1+deb12u4
1
sissbruecker/linkding:1.41.0-plusa222fb777e1f
nss@2:3.87.1-1+deb12u1
2:3.87.1-1+deb12u4
1
speckle/speckle-preview-service:2.26.3092384dba45d
nss@2:3.87.1-1+deb12u1
2:3.87.1-1+deb12u4
1
speckle/speckle-preview-service:2.20.2-branch.testing4.134160-9fad4b21f897ca906ea
nss@2:3.87.1-1
2:3.87.1-1+deb12u4
1
speckle/speckle-preview-service:2.21.3-branch.testing5.219631-2153bef52cad5e3293e
nss@2:3.87.1-1
2:3.87.1-1+deb12u4
1
speckle/speckle-preview-service:2.23.14-branch.testing6.334655-b4e04ee6dee853ba74a
nss@2:3.87.1-1+deb12u1
2:3.87.1-1+deb12u4
1
speckle/speckle-preview-service:2.25.10-branch.testing6.645-b125c1e787adcb20a3a
nss@2:3.87.1-1+deb12u1
2:3.87.1-1+deb12u4
1

syft 1.42.1 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.