CVE-2026-18297

High

Advisory

Published 20 Aug 2026In the index since 6 Sept 2026

Severity: High; worst across findings
CVSS: 7.8; base score, highest
EPSS: 0.002; 15th percentile
CISA KEV: Not listed; no confirmed exploitation
Charts affected: 56; of 17,781 indexed, latest versions
Container images: 60; deployed by those charts
Fix available: 1 of 2; affected packages

The matching OSV records carry no description.

Carried by container images the latest versions of 56 of 17,781 indexed charts deploy, on 60 images.

Affected package	Affected versions	Fixed in	Images
gstreamer1.0deb	1.14.5-0ubuntu1~18.04.1, 1.16.2-2, 1.16.3-0ubuntu1.1, 1.16.3-0ubuntu1.2+5 more	no fix listed	53
gst-plugins-base1.0deb	1.22.0-3+deb12u4, 1.22.0-3+deb12u5, 1.26.2-1, 1.26.2-1+deb13u1	1.26.2-1+deb13u2	7

OSV records: DEBIAN-CVE-2026-18297 UBUNTU-CVE-2026-18297

Charts affected

56 by stars

Chart

Latest

Affected images

Radar Score

rundecksvtech-public-helm-charts

1.0.0

1 of 2 See more

rundeck svtech-public-helm-charts 1.0.0

1 of the 2 container images this version deploys carry CVE-2026-18297.

Container image	Digest	Package	Fixed in
svtechnmaa/svtech_rundeck :v1.2.2	6e368ace0977	gstreamer1.0@1.16.3-0ubuntu1.1	no fix listed

Open the chart page →

18,756

the0the0

0.9.8

1 of 9 See more

the0 the0 0.9.8

1 of the 9 container images this version deploys carry CVE-2026-18297.

Container image	Digest	Package	Fixed in
ghcr.io/alexanderwanyoike/the0/runtime :1.14.7	459010a02aff	gstreamer1.0@1.24.2-1ubuntu0.1	no fix listed

Open the chart page →

7,248

opencloudunxwares

0.2.3

1 of 13 See more

opencloud unxwares 0.2.3

1 of the 13 container images this version deploys carry CVE-2026-18297.

Container image	Digest	Package	Fixed in
apache/tika :2.9.2.1-full	ae0b86d3c4d0	gstreamer1.0@1.24.2-1	no fix listed

Open the chart page →

45,239

browserlessvictorlane

0.2.0

1 of 1 See more

browserless victorlane 0.2.0

1 of the 1 container images this version deploys carry CVE-2026-18297.

Container image	Digest	Package	Fixed in
ghcr.io/browserless/chromium :v2.43.0	853e6f105b51	gstreamer1.0@1.24.2-1ubuntu0.1	no fix listed

Open the chart page →

4,305

playwright-synthetic-monitoringwork-adventure

1.0.1

1 of 1 See more

playwright-synthetic-monitoring work-adventure 1.0.1

1 of the 1 container images this version deploys carry CVE-2026-18297.

Container image	Digest	Package	Fixed in
workadventure/playwright-synthetic-monitoring :main	92b664c2a06f	gstreamer1.0@1.20.3-0ubuntu1	no fix listed

Open the chart page →

14,100

zoo-project-druzoo-project

0.10.4

1 of 6 See more

zoo-project-dru zoo-project 0.10.4

1 of the 6 container images this version deploys carry CVE-2026-18297.

Container image	Digest	Package	Fixed in
zooproject/zoo-project :dru-19f3c4eed7c9ec9d1f0375bbe59f9d204a42bd3a	9a507cb7e2dd	gstreamer1.0@1.20.3-0ubuntu1.1	no fix listed

Open the chart page →

7,849

Container images carrying it

60 by charts deploying them

A fixed version is listed for 1 of the 2 affected packages.

Container image	Digest	Package	Fixed in	Used by
ghcr.io/music-assistant/server :2.10.3	885872224fa5	gst-plugins-base1.0@1.26.2-1+deb13u1	1.26.2-1+deb13u2	1
ghcr.io/openrelik/openrelik-worker-bulkextractor :latest	67498ee2e639	gstreamer1.0@1.24.2-1ubuntu0.1	no fix listed	1
ghcr.io/openrelik/openrelik-worker-extraction :latest	ec9fc5864cd5	gstreamer1.0@1.24.2-1ubuntu0.1	no fix listed	1
ghcr.io/openrelik/openrelik-worker-plaso :latest	75537ea8c851	gstreamer1.0@1.24.2-1ubuntu0.1	no fix listed	1
ghcr.io/openrelik/openrelik-worker-timesketch :latest	4cb88b603cdc	gstreamer1.0@1.24.2-1ubuntu0.1	no fix listed	1
ghcr.io/smarter-project/audio-client :v3.1.2	3c8375dc5487	gstreamer1.0@1.16.3-0ubuntu1.1	no fix listed	1
ghcr.io/smarter-project/gstreamer :v1.0.2	5ecb16015aa8	gstreamer1.0@1.16.3-0ubuntu1.1	no fix listed	1
ghcr.io/smarter-project/image-detector :v2.5.3	1dcca70c6446	gstreamer1.0@1.16.3-0ubuntu1.1	no fix listed	1
ghcr.io/stirling-tools/stirling-pdf :2.14.3	3b3670fce70b	gstreamer1.0@1.24.2-1ubuntu0.1	no fix listed	1
public.ecr.aws/supportpal/helpdesk-monolithic :4.0.4	573779e57fae	gstreamer1.0@1.16.2-2	no fix listed	1