StackRadar

CVE-2026-18297

High

Advisory

Published 20 Aug 2026In the index since 6 Sept 2026
Severity
High
worst across findings
CVSS
7.8
base score, highest
EPSS
0.002
15th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
56
of 17,781 indexed, latest versions
Container images
60
deployed by those charts
Fix available
1 of 2
affected packages

The matching OSV records carry no description.

Carried by container images the latest versions of 56 of 17,781 indexed charts deploy, on 60 images.

Affected packageAffected versionsFixed inImages
gstreamer1.0deb1.14.5-0ubuntu1~18.04.1, 1.16.2-2, 1.16.3-0ubuntu1.1, 1.16.3-0ubuntu1.2+5 moreno fix listed53
gst-plugins-base1.0deb1.22.0-3+deb12u4, 1.22.0-3+deb12u5, 1.26.2-1, 1.26.2-1+deb13u11.26.2-1+deb13u27
OSV records
DEBIAN-CVE-2026-18297UBUNTU-CVE-2026-18297

Charts affected

56 by stars
ChartLatestAffected imagesRadar Score
gotenbergmaikumoriVerified publisher1.25.01 of 1See more

gotenberg maikumori 1.25.0

1 of the 1 container images this version deploys carry CVE-2026-18297.

Container imageDigestPackageFixed in
gotenberg/gotenberg:8.36.087c16b9f3642
gst-plugins-base1.0@1.26.2-1+deb13u1
1.26.2-1+deb13u2

Open the chart page →

9,683
openclawopenclawVerified publisher1.91.31 of 2See more

openclaw openclaw 1.91.3

1 of the 2 container images this version deploys carry CVE-2026-18297.

Container imageDigestPackageFixed in
ghcr.io/browserless/chromium:v2.56.7b1ba7b054af2
gstreamer1.0@1.24.2-1ubuntu0.1
no fix listed

Open the chart page →

2,977
selenium-gridselenium-grid0.59.12 of 4See more

selenium-grid selenium-grid 0.59.1

2 of the 4 container images this version deploys carry CVE-2026-18297.

Container imageDigestPackageFixed in
selenium/node-chrome:4.48.0-202609055ac71fd8dd1e
gstreamer1.0@1.24.2-1ubuntu0.1
no fix listed
selenium/node-firefox:4.48.0-2026090574a5c1c90f95
gstreamer1.0@1.24.2-1ubuntu0.1
no fix listed

Open the chart page →

7,028
photoprismandrenarchyVerified publisher8.15.01 of 1See more

photoprism andrenarchy 8.15.0

1 of the 1 container images this version deploys carry CVE-2026-18297.

Container imageDigestPackageFixed in
photoprism/photoprism:260728958642220223
gstreamer1.0@1.28.2-1
no fix listed

Open the chart page →

8,825
seafiledatamateVerified publisher0.6.01 of 6See more

seafile datamate 0.6.0

1 of the 6 container images this version deploys carry CVE-2026-18297.

Container imageDigestPackageFixed in
datamate/seafile-professional:11.0.202dd66b722464
gstreamer1.0@1.20.3-0ubuntu1.1
no fix listed

Open the chart page →

27,267
karakeephelmforgeVerified publisher1.2.91 of 3See more

karakeep helmforge 1.2.9

1 of the 3 container images this version deploys carry CVE-2026-18297.

Container imageDigestPackageFixed in
ghcr.io/browserless/chromium:v2.55.42ed0183564d7
gstreamer1.0@1.24.2-1ubuntu0.1
no fix listed

Open the chart page →

9,460
browserless-chromesagikazarmarkVerified publisher0.0.51 of 1See more

browserless-chrome sagikazarmark 0.0.5

1 of the 1 container images this version deploys carry CVE-2026-18297.

Container imageDigestPackageFixed in
browserless/chrome:1.48.0-chrome-stablec81ae5585b47
gstreamer1.0@1.16.2-2
no fix listed

Open the chart page →

24,488
paperless-ngxadnoctemVerified publisher0.4.21 of 5See more

paperless-ngx adnoctem 0.4.2

1 of the 5 container images this version deploys carry CVE-2026-18297.

Container imageDigestPackageFixed in
gotenberg/gotenberg:8.36.087c16b9f3642
gst-plugins-base1.0@1.26.2-1+deb13u1
1.26.2-1+deb13u2

Open the chart page →

19,691
github-actions-runneradwerx0.10.31 of 1See more

github-actions-runner adwerx 0.10.3

1 of the 1 container images this version deploys carry CVE-2026-18297.

Container imageDigestPackageFixed in
adwerx/github-actions-runner:2.276.1-20.04-1840d2b078682
gstreamer1.0@1.16.2-2
no fix listed

Open the chart page →

13,635
music-assistantbdclark-helm-chartsVerified publisher0.4.131 of 1See more

music-assistant bdclark-helm-charts 0.4.13

1 of the 1 container images this version deploys carry CVE-2026-18297.

Container imageDigestPackageFixed in
ghcr.io/music-assistant/server:2.10.3885872224fa5
gst-plugins-base1.0@1.26.2-1+deb13u1
1.26.2-1+deb13u2

Open the chart page →

3,657
seafiledr300481Verified publisher0.12.11 of 1See more

seafile dr300481 0.12.1

1 of the 1 container images this version deploys carry CVE-2026-18297.

Container imageDigestPackageFixed in
seafileltd/seafile-mc:11.0.12d0c66e4621bd
gstreamer1.0@1.20.3-0ubuntu1
no fix listed

Open the chart page →

10,858
games-on-whalesgeek-cookbookVerified publisher1.8.22 of 7See more

games-on-whales geek-cookbook 1.8.2

2 of the 7 container images this version deploys carry CVE-2026-18297.

Container imageDigestPackageFixed in
ghcr.io/games-on-whales/pulseaudio:1.0.0f34f98405c10
gstreamer1.0@1.16.2-2
no fix listed
ghcr.io/games-on-whales/retroarch:1.0.0103fbcec2314
gstreamer1.0@1.16.2-2
no fix listed

Open the chart page →

35,305
tdarrgeek-cookbookVerified publisher4.6.22 of 2See more

tdarr geek-cookbook 4.6.2

2 of the 2 container images this version deploys carry CVE-2026-18297.

Container imageDigestPackageFixed in
haveagitgat/tdarr:2.00.181256348872ce
gstreamer1.0@1.16.2-2
no fix listed
haveagitgat/tdarr_node:2.00.101e3f9328327d
gstreamer1.0@1.16.2-2
no fix listed

Open the chart page →

31,000
phpqonstruktVerified publisher0.2.01 of 1See more

php qonstrukt 0.2.0

1 of the 1 container images this version deploys carry CVE-2026-18297.

Container imageDigestPackageFixed in
qonstrukt/php:8.4-v8-apache089af7925aa1
gstreamer1.0@1.24.2-1ubuntu0.1
no fix listed

Open the chart page →

23,964
smarter-demosmarterOfficialVerified publisher0.1.53 of 7See more

smarter-demo smarter 0.1.5

3 of the 7 container images this version deploys carry CVE-2026-18297.

Container imageDigestPackageFixed in
ghcr.io/smarter-project/audio-client:v3.1.23c8375dc5487
gstreamer1.0@1.16.3-0ubuntu1.1
no fix listed
ghcr.io/smarter-project/gstreamer:v1.0.25ecb16015aa8
gstreamer1.0@1.16.3-0ubuntu1.1
no fix listed
ghcr.io/smarter-project/image-detector:v2.5.31dcca70c6446
gstreamer1.0@1.16.3-0ubuntu1.1
no fix listed

Open the chart page →

45,832
tdarrvhdirkVerified publisher5.0.52 of 2See more

tdarr vhdirk 5.0.5

2 of the 2 container images this version deploys carry CVE-2026-18297.

Container imageDigestPackageFixed in
haveagitgat/tdarr_node:2.17.013ff0913202dd
gstreamer1.0@1.16.3-0ubuntu1.1
no fix listed
ghcr.io/haveagitgat/tdarr:2.00.18.23fbe4c29d14c
gstreamer1.0@1.16.2-2
no fix listed

Open the chart page →

26,657
browserlessalekcVerified publisher1.2.71 of 1See more

browserless alekc 1.2.7

1 of the 1 container images this version deploys carry CVE-2026-18297.

Container imageDigestPackageFixed in
ghcr.io/browserless/chrome:v2.56.7d600eac6283f
gstreamer1.0@1.24.2-1ubuntu0.1
no fix listed

Open the chart page →

2,078
games-on-whalesangelnu2.0.03 of 7See more

games-on-whales angelnu 2.0.0

3 of the 7 container images this version deploys carry CVE-2026-18297.

Container imageDigestPackageFixed in
andrewmackrodt/firefox-x11:142.0.1-r133f9080470c9
gstreamer1.0@1.20.3-0ubuntu1.1
no fix listed
ghcr.io/games-on-whales/pulseaudio:1.0.0f34f98405c10
gstreamer1.0@1.16.2-2
no fix listed
ghcr.io/games-on-whales/retroarch:1.0.0103fbcec2314
gstreamer1.0@1.16.2-2
no fix listed

Open the chart page →

42,126
platform-apiappscodeVerified publisher2026.9.111 of 3See more

platform-api appscode 2026.9.11

1 of the 3 container images this version deploys carry CVE-2026-18297.

Container imageDigestPackageFixed in
ghcr.io/appscode/gotenberg:8.25f9104080d9a7
gst-plugins-base1.0@1.26.2-1
1.26.2-1+deb13u2

Open the chart page →

37,268
arma-reforgerarma-reforger0.5.31 of 8See more

arma-reforger arma-reforger 0.5.3

1 of the 8 container images this version deploys carry CVE-2026-18297.

Container imageDigestPackageFixed in
ghcr.io/brittonhayes/arma-reforger:latest6fde1edc0983
gstreamer1.0@1.16.3-0ubuntu1.1
no fix listed

Open the chart page →

23,353
videoaugmentationassist-iot-video-augmentation0.1.01 of 3See more

videoaugmentation assist-iot-video-augmentation 0.1.0

1 of the 3 container images this version deploys carry CVE-2026-18297.

Container imageDigestPackageFixed in
assistiot/video_augmentation:runner-cpu-lateste5ae539ce2cb
gstreamer1.0@1.16.3-0ubuntu1.1
no fix listed

Open the chart page →

13,913
opencloudcommunity-opencloud3.0.01 of 11See more

opencloud community-opencloud 3.0.0

1 of the 11 container images this version deploys carry CVE-2026-18297.

Container imageDigestPackageFixed in
apache/tika:latest-full80072bb73dd3
gstreamer1.0@1.28.2-1
no fix listed

Open the chart page →

3,773
seafilederp3.2.01 of 1See more

seafile derp 3.2.0

1 of the 1 container images this version deploys carry CVE-2026-18297.

Container imageDigestPackageFixed in
seafileltd/seafile-mc:10.0.170628f29c663
gstreamer1.0@1.16.3-0ubuntu1.1
no fix listed

Open the chart page →

14,856
seafileeleksbai0.1.11 of 3See more

seafile eleksbai 0.1.1

1 of the 3 container images this version deploys carry CVE-2026-18297.

Container imageDigestPackageFixed in
seafileltd/seafile-mc:9.0.106693911bcc40
gstreamer1.0@1.16.2-2
no fix listed

Open the chart page →

25,122
supportpalevilgn0me0.1.61 of 1See more

supportpal evilgn0me 0.1.6

1 of the 1 container images this version deploys carry CVE-2026-18297.

Container imageDigestPackageFixed in
public.ecr.aws/supportpal/helpdesk-monolithic:4.0.4573779e57fae
gstreamer1.0@1.16.2-2
no fix listed

Open the chart page →

20,933
business-api-ecosystemfiware1.1.01 of 4See more

business-api-ecosystem fiware 1.1.0

1 of the 4 container images this version deploys carry CVE-2026-18297.

Container imageDigestPackageFixed in
fiware/biz-ecosystem-charging-backend:11.7.029456835bb2c
gstreamer1.0@1.16.3-0ubuntu1.2
no fix listed

Open the chart page →

64,489
airsonicgeek-cookbookVerified publisher6.4.21 of 1See more

airsonic geek-cookbook 6.4.2

1 of the 1 container images this version deploys carry CVE-2026-18297.

Container imageDigestPackageFixed in
airsonicadvanced/airsonic-advanced:latestf7cbafac2806
gstreamer1.0@1.16.2-2
no fix listed

Open the chart page →

18,230
mopidygeek-cookbookVerified publisher0.1.21 of 1See more

mopidy geek-cookbook 0.1.2

1 of the 1 container images this version deploys carry CVE-2026-18297.

Container imageDigestPackageFixed in
jaedb/iris:latest048cfbf58d57
gst-plugins-base1.0@1.22.0-3+deb12u4
no fix listed

Open the chart page →

12,958
openkmgeek-cookbookVerified publisher4.2.01 of 1See more

openkm geek-cookbook 4.2.0

1 of the 1 container images this version deploys carry CVE-2026-18297.

Container imageDigestPackageFixed in
openkm/openkm-ce:6.3.113bc465a7461b
gstreamer1.0@1.16.3-0ubuntu1.1
no fix listed

Open the chart page →

27,949
seafilegeek-cookbookVerified publisher3.2.01 of 1See more

seafile geek-cookbook 3.2.0

1 of the 1 container images this version deploys carry CVE-2026-18297.

Container imageDigestPackageFixed in
seafileltd/seafile-mc:8.0.7ed0fcda5e6a9
gstreamer1.0@1.16.2-2
no fix listed

Open the chart page →

24,293
countlyhelmforgeVerified publisher1.2.61 of 3See more

countly helmforge 1.2.6

1 of the 3 container images this version deploys carry CVE-2026-18297.

Container imageDigestPackageFixed in
countly/countly-server:25.05.4e3c238248f99
gstreamer1.0@1.16.2-2
no fix listed

Open the chart page →

18,813
paperlesshpVerified publisher0.1.11 of 5See more

paperless hp 0.1.1

1 of the 5 container images this version deploys carry CVE-2026-18297.

Container imageDigestPackageFixed in
gotenberg/gotenberg:8.3467097317623a
gst-plugins-base1.0@1.26.2-1+deb13u1
1.26.2-1+deb13u2

Open the chart page →

26,612
hydrahydraVerified publisher0.9.51 of 2See more

hydra hydra 0.9.5

1 of the 2 container images this version deploys carry CVE-2026-18297.

Container imageDigestPackageFixed in
ghcr.io/smarter-project/hydra/isolated-vm:main4457b79b24cd
gst-plugins-base1.0@1.22.0-3+deb12u5
no fix listed

Open the chart page →

9,011
isolated-vmhydraVerified publisher0.9.41 of 1See more

isolated-vm hydra 0.9.4

1 of the 1 container images this version deploys carry CVE-2026-18297.

Container imageDigestPackageFixed in
ghcr.io/smarter-project/hydra/isolated-vm:main4457b79b24cd
gst-plugins-base1.0@1.22.0-3+deb12u5
no fix listed

Open the chart page →

7,733
browserlessicoretechVerified publisher0.16.61 of 1See more

browserless icoretech 0.16.6

1 of the 1 container images this version deploys carry CVE-2026-18297.

Container imageDigestPackageFixed in
ghcr.io/browserless/chromium:v2.56.7b1ba7b054af2
gstreamer1.0@1.24.2-1ubuntu0.1
no fix listed

Open the chart page →

1,948
itm-servicesintelVerified publisher2.0.01 of 8See more

itm-services intel 2.0.0

1 of the 8 container images this version deploys carry CVE-2026-18297.

Container imageDigestPackageFixed in
intel/dlstreamer-pipeline-server:2022.1.1-ubuntu20aa8f5483a2ef
gstreamer1.0@1.16.2-2
no fix listed

Open the chart page →

18,066
opencloudjacobcolvinVerified publisher0.2.31 of 13See more

opencloud jacobcolvin 0.2.3

1 of the 13 container images this version deploys carry CVE-2026-18297.

Container imageDigestPackageFixed in
apache/tika:2.9.2.1-fullae0b86d3c4d0
gstreamer1.0@1.24.2-1
no fix listed

Open the chart page →

45,239
steamcmd-managerjfwenischVerified publisher0.4.51 of 1See more

steamcmd-manager jfwenisch 0.4.5

1 of the 1 container images this version deploys carry CVE-2026-18297.

Container imageDigestPackageFixed in
ghcr.io/jfwenisch/steamcmd-manager:v0.4.5dab685e668d9
gstreamer1.0@1.24.2-1ubuntu0.1
no fix listed

Open the chart page →

6,586
webtoolsjfwenischVerified publisher0.1.41 of 1See more

webtools jfwenisch 0.1.4

1 of the 1 container images this version deploys carry CVE-2026-18297.

Container imageDigestPackageFixed in
ghcr.io/jfwenisch/webtools:v0.1.44569cae83c70
gstreamer1.0@1.24.2-1ubuntu0.1
no fix listed

Open the chart page →

6,568
kbot-self-hostedkbot-self-hostedVerified publisher0.1.81 of 7See more

kbot-self-hosted kbot-self-hosted 0.1.8

1 of the 7 container images this version deploys carry CVE-2026-18297.

Container imageDigestPackageFixed in
gotenberg/gotenberg:8.30206a6c708fc6
gst-plugins-base1.0@1.26.2-1+deb13u1
1.26.2-1+deb13u2

Open the chart page →

32,509
splashntppoolVerified publisher1.0.41 of 1See more

splash ntppool 1.0.4

1 of the 1 container images this version deploys carry CVE-2026-18297.

Container imageDigestPackageFixed in
scrapinghub/splash:3.4.1a5f89bc84606
gstreamer1.0@1.14.5-0ubuntu1~18.04.1
no fix listed

Open the chart page →

27,633
osdfir-infrastructureosdfir-infrastructureVerified publisher2.15.04 of 40See more

osdfir-infrastructure osdfir-infrastructure 2.15.0

4 of the 40 container images this version deploys carry CVE-2026-18297.

Container imageDigestPackageFixed in
ghcr.io/openrelik/openrelik-worker-bulkextractor:latest67498ee2e639
gstreamer1.0@1.24.2-1ubuntu0.1
no fix listed
ghcr.io/openrelik/openrelik-worker-extraction:latestec9fc5864cd5
gstreamer1.0@1.24.2-1ubuntu0.1
no fix listed
ghcr.io/openrelik/openrelik-worker-plaso:latest75537ea8c851
gstreamer1.0@1.24.2-1ubuntu0.1
no fix listed
ghcr.io/openrelik/openrelik-worker-timesketch:latest4cb88b603cdc
gstreamer1.0@1.24.2-1ubuntu0.1
no fix listed

Open the chart page →

71,208
seafilephybros-helm-charts4.0.11 of 1See more

seafile phybros-helm-charts 4.0.1

1 of the 1 container images this version deploys carry CVE-2026-18297.

Container imageDigestPackageFixed in
seafileltd/seafile-mc:9.0.97ac833196f60
gstreamer1.0@1.16.2-2
no fix listed

Open the chart page →

22,084
javareact-java0.1.01 of 1See more

java react-java 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-18297.

Container imageDigestPackageFixed in
project2team4/react:latest3ff031a08887
gstreamer1.0@1.16.2-2
no fix listed

Open the chart page →

15,520
stirling-pdfrubxkubeVerified publisher0.1.21 of 1See more

stirling-pdf rubxkube 0.1.2

1 of the 1 container images this version deploys carry CVE-2026-18297.

Container imageDigestPackageFixed in
ghcr.io/stirling-tools/stirling-pdf:2.14.33b3670fce70b
gstreamer1.0@1.24.2-1ubuntu0.1
no fix listed

Open the chart page →

6,207
vrisingryuunosukeds30.1.01 of 1See more

vrising ryuunosukeds3 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-18297.

Container imageDigestPackageFixed in
trueosiris/vrising:latest9356f98ad561
gstreamer1.0@1.20.3-0ubuntu1.1
no fix listed

Open the chart page →

7,295
photoprismschoolguys-helmcharts0.3.81 of 1See more

photoprism schoolguys-helmcharts 0.3.8

1 of the 1 container images this version deploys carry CVE-2026-18297.

Container imageDigestPackageFixed in
photoprism/photoprism:260601650c6ad5a651
gstreamer1.0@1.28.2-1
no fix listed

Open the chart page →

10,348
testing-multitoolsomeblackmagic0.1.21 of 1See more

testing-multitool someblackmagic 0.1.2

1 of the 1 container images this version deploys carry CVE-2026-18297.

Container imageDigestPackageFixed in
someblackmagic/k8s-testing-multitool:v0.1.06eca64b6b440
gstreamer1.0@1.16.2-2
no fix listed

Open the chart page →

30,687
kurento_webrtc_demostunner0.1.01 of 2See more

kurento_webrtc_demo stunner 0.1.0

1 of the 2 container images this version deploys carry CVE-2026-18297.

Container imageDigestPackageFixed in
kurento/kurento-media-server:latest03c0d34d0828
gstreamer1.0@1.24.2-1ubuntu0.1
no fix listed

Open the chart page →

12,460
stunner-kurento-one2one-callstunner0.1.01 of 2See more

stunner-kurento-one2one-call stunner 0.1.0

1 of the 2 container images this version deploys carry CVE-2026-18297.

Container imageDigestPackageFixed in
kurento/kurento-media-server:latest03c0d34d0828
gstreamer1.0@1.24.2-1ubuntu0.1
no fix listed

Open the chart page →

12,460

Container images carrying it

60 by charts deploying them

A fixed version is listed for 1 of the 2 affected packages.

Container imageDigestPackageFixed inUsed by
ghcr.io/music-assistant/server:2.10.3885872224fa5
gst-plugins-base1.0@1.26.2-1+deb13u1
1.26.2-1+deb13u2
1
ghcr.io/openrelik/openrelik-worker-bulkextractor:latest67498ee2e639
gstreamer1.0@1.24.2-1ubuntu0.1
no fix listed
1
ghcr.io/openrelik/openrelik-worker-extraction:latestec9fc5864cd5
gstreamer1.0@1.24.2-1ubuntu0.1
no fix listed
1
ghcr.io/openrelik/openrelik-worker-plaso:latest75537ea8c851
gstreamer1.0@1.24.2-1ubuntu0.1
no fix listed
1
ghcr.io/openrelik/openrelik-worker-timesketch:latest4cb88b603cdc
gstreamer1.0@1.24.2-1ubuntu0.1
no fix listed
1
ghcr.io/smarter-project/audio-client:v3.1.23c8375dc5487
gstreamer1.0@1.16.3-0ubuntu1.1
no fix listed
1
ghcr.io/smarter-project/gstreamer:v1.0.25ecb16015aa8
gstreamer1.0@1.16.3-0ubuntu1.1
no fix listed
1
ghcr.io/smarter-project/image-detector:v2.5.31dcca70c6446
gstreamer1.0@1.16.3-0ubuntu1.1
no fix listed
1
ghcr.io/stirling-tools/stirling-pdf:2.14.33b3670fce70b
gstreamer1.0@1.24.2-1ubuntu0.1
no fix listed
1
public.ecr.aws/supportpal/helpdesk-monolithic:4.0.4573779e57fae
gstreamer1.0@1.16.2-2
no fix listed
1

syft 1.42.1 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.