CVE-2026-18297

High

Advisory

Published 20 Aug 2026In the index since 6 Sept 2026

Severity: High; worst across findings
CVSS: 7.8; base score, highest
EPSS: 0.002; 15th percentile
CISA KEV: Not listed; no confirmed exploitation
Charts affected: 56; of 17,781 indexed, latest versions
Container images: 60; deployed by those charts
Fix available: 1 of 2; affected packages

The matching OSV records carry no description.

Carried by container images the latest versions of 56 of 17,781 indexed charts deploy, on 60 images.

Affected package	Affected versions	Fixed in	Images
gstreamer1.0deb	1.14.5-0ubuntu1~18.04.1, 1.16.2-2, 1.16.3-0ubuntu1.1, 1.16.3-0ubuntu1.2+5 more	no fix listed	53
gst-plugins-base1.0deb	1.22.0-3+deb12u4, 1.22.0-3+deb12u5, 1.26.2-1, 1.26.2-1+deb13u1	1.26.2-1+deb13u2	7

OSV records: DEBIAN-CVE-2026-18297 UBUNTU-CVE-2026-18297

Charts affected

56 by stars

Chart

Latest

Affected images

Radar Score

rundecksvtech-public-helm-charts

1.0.0

1 of 2 See more

rundeck svtech-public-helm-charts 1.0.0

1 of the 2 container images this version deploys carry CVE-2026-18297.

Container image	Digest	Package	Fixed in
svtechnmaa/svtech_rundeck :v1.2.2	6e368ace0977	gstreamer1.0@1.16.3-0ubuntu1.1	no fix listed

Open the chart page →

18,756

the0the0

0.9.8

1 of 9 See more

the0 the0 0.9.8

1 of the 9 container images this version deploys carry CVE-2026-18297.

Container image	Digest	Package	Fixed in
ghcr.io/alexanderwanyoike/the0/runtime :1.14.7	459010a02aff	gstreamer1.0@1.24.2-1ubuntu0.1	no fix listed

Open the chart page →

7,248

opencloudunxwares

0.2.3

1 of 13 See more

opencloud unxwares 0.2.3

1 of the 13 container images this version deploys carry CVE-2026-18297.

Container image	Digest	Package	Fixed in
apache/tika :2.9.2.1-full	ae0b86d3c4d0	gstreamer1.0@1.24.2-1	no fix listed

Open the chart page →

45,239

browserlessvictorlane

0.2.0

1 of 1 See more

browserless victorlane 0.2.0

1 of the 1 container images this version deploys carry CVE-2026-18297.

Container image	Digest	Package	Fixed in
ghcr.io/browserless/chromium :v2.43.0	853e6f105b51	gstreamer1.0@1.24.2-1ubuntu0.1	no fix listed

Open the chart page →

4,305

playwright-synthetic-monitoringwork-adventure

1.0.1

1 of 1 See more

playwright-synthetic-monitoring work-adventure 1.0.1

1 of the 1 container images this version deploys carry CVE-2026-18297.

Container image	Digest	Package	Fixed in
workadventure/playwright-synthetic-monitoring :main	92b664c2a06f	gstreamer1.0@1.20.3-0ubuntu1	no fix listed

Open the chart page →

14,100

zoo-project-druzoo-project

0.10.4

1 of 6 See more

zoo-project-dru zoo-project 0.10.4

1 of the 6 container images this version deploys carry CVE-2026-18297.

Container image	Digest	Package	Fixed in
zooproject/zoo-project :dru-19f3c4eed7c9ec9d1f0375bbe59f9d204a42bd3a	9a507cb7e2dd	gstreamer1.0@1.20.3-0ubuntu1.1	no fix listed

Open the chart page →

7,849

Container images carrying it

60 by charts deploying them

A fixed version is listed for 1 of the 2 affected packages.

Container image	Digest	Package	Fixed in	Used by
apache/tika :2.9.2.1-full	ae0b86d3c4d0	gstreamer1.0@1.24.2-1	no fix listed	2
gotenberg/gotenberg :8.36.0	87c16b9f3642	gst-plugins-base1.0@1.26.2-1+deb13u1	1.26.2-1+deb13u2	2
kurento/kurento-media-server :latest	03c0d34d0828	gstreamer1.0@1.24.2-1ubuntu0.1	no fix listed	2
ghcr.io/browserless/chromium :v2.56.7	b1ba7b054af2	gstreamer1.0@1.24.2-1ubuntu0.1	no fix listed	2
ghcr.io/games-on-whales/pulseaudio :1.0.0	f34f98405c10	gstreamer1.0@1.16.2-2	no fix listed	2
ghcr.io/games-on-whales/retroarch :1.0.0	103fbcec2314	gstreamer1.0@1.16.2-2	no fix listed	2
ghcr.io/smarter-project/hydra/isolated-vm :main	4457b79b24cd	gst-plugins-base1.0@1.22.0-3+deb12u5	no fix listed	2
adwerx/github-actions-runner :2.276.1-20.04-1	840d2b078682	gstreamer1.0@1.16.2-2	no fix listed	1
airsonicadvanced/airsonic-advanced :latest	f7cbafac2806	gstreamer1.0@1.16.2-2	no fix listed	1
andrewmackrodt/firefox-x11 :142.0.1-r1	33f9080470c9	gstreamer1.0@1.20.3-0ubuntu1.1	no fix listed	1
apache/tika :latest-full	80072bb73dd3	gstreamer1.0@1.28.2-1	no fix listed	1
assistiot/video_augmentation :runner-cpu-latest	e5ae539ce2cb	gstreamer1.0@1.16.3-0ubuntu1.1	no fix listed	1
browserless/chrome :1.48.0-chrome-stable	c81ae5585b47	gstreamer1.0@1.16.2-2	no fix listed	1
countly/countly-server :25.05.4	e3c238248f99	gstreamer1.0@1.16.2-2	no fix listed	1
datamate/seafile-professional :11.0.20	2dd66b722464	gstreamer1.0@1.20.3-0ubuntu1.1	no fix listed	1
fiware/biz-ecosystem-charging-backend :11.7.0	29456835bb2c	gstreamer1.0@1.16.3-0ubuntu1.2	no fix listed	1
gotenberg/gotenberg :8.30	206a6c708fc6	gst-plugins-base1.0@1.26.2-1+deb13u1	1.26.2-1+deb13u2	1
gotenberg/gotenberg :8.34	67097317623a	gst-plugins-base1.0@1.26.2-1+deb13u1	1.26.2-1+deb13u2	1
haveagitgat/tdarr :2.00.18	1256348872ce	gstreamer1.0@1.16.2-2	no fix listed	1
haveagitgat/tdarr_node :2.00.10	1e3f9328327d	gstreamer1.0@1.16.2-2	no fix listed	1
haveagitgat/tdarr_node :2.17.01	3ff0913202dd	gstreamer1.0@1.16.3-0ubuntu1.1	no fix listed	1
intel/dlstreamer-pipeline-server :2022.1.1-ubuntu20	aa8f5483a2ef	gstreamer1.0@1.16.2-2	no fix listed	1
jaedb/iris :latest	048cfbf58d57	gst-plugins-base1.0@1.22.0-3+deb12u4	no fix listed	1
openkm/openkm-ce :6.3.11	3bc465a7461b	gstreamer1.0@1.16.3-0ubuntu1.1	no fix listed	1
photoprism/photoprism :260601	650c6ad5a651	gstreamer1.0@1.28.2-1	no fix listed	1
photoprism/photoprism :260728	958642220223	gstreamer1.0@1.28.2-1	no fix listed	1
project2team4/react :latest	3ff031a08887	gstreamer1.0@1.16.2-2	no fix listed	1
qonstrukt/php :8.4-v8-apache	089af7925aa1	gstreamer1.0@1.24.2-1ubuntu0.1	no fix listed	1
scrapinghub/splash :3.4.1	a5f89bc84606	gstreamer1.0@1.14.5-0ubuntu1~18.04.1	no fix listed	1
seafileltd/seafile-mc :9.0.10	6693911bcc40	gstreamer1.0@1.16.2-2	no fix listed	1
seafileltd/seafile-mc :10.0.1	70628f29c663	gstreamer1.0@1.16.3-0ubuntu1.1	no fix listed	1
seafileltd/seafile-mc :9.0.9	7ac833196f60	gstreamer1.0@1.16.2-2	no fix listed	1
seafileltd/seafile-mc :11.0.12	d0c66e4621bd	gstreamer1.0@1.20.3-0ubuntu1	no fix listed	1
seafileltd/seafile-mc :8.0.7	ed0fcda5e6a9	gstreamer1.0@1.16.2-2	no fix listed	1
selenium/node-chrome :4.48.0-20260905	5ac71fd8dd1e	gstreamer1.0@1.24.2-1ubuntu0.1	no fix listed	1
selenium/node-firefox :4.48.0-20260905	74a5c1c90f95	gstreamer1.0@1.24.2-1ubuntu0.1	no fix listed	1
someblackmagic/k8s-testing-multitool :v0.1.0	6eca64b6b440	gstreamer1.0@1.16.2-2	no fix listed	1
svtechnmaa/svtech_rundeck :v1.2.2	6e368ace0977	gstreamer1.0@1.16.3-0ubuntu1.1	no fix listed	1
trueosiris/vrising :latest	9356f98ad561	gstreamer1.0@1.20.3-0ubuntu1.1	no fix listed	1
workadventure/playwright-synthetic-monitoring :main	92b664c2a06f	gstreamer1.0@1.20.3-0ubuntu1	no fix listed	1
zooproject/zoo-project :dru-19f3c4eed7c9ec9d1f0375bbe59f9d204a42bd3a	9a507cb7e2dd	gstreamer1.0@1.20.3-0ubuntu1.1	no fix listed	1
ghcr.io/alexanderwanyoike/the0/runtime :1.14.7	459010a02aff	gstreamer1.0@1.24.2-1ubuntu0.1	no fix listed	1
ghcr.io/appscode/gotenberg :8.25	f9104080d9a7	gst-plugins-base1.0@1.26.2-1	1.26.2-1+deb13u2	1
ghcr.io/brittonhayes/arma-reforger :latest	6fde1edc0983	gstreamer1.0@1.16.3-0ubuntu1.1	no fix listed	1
ghcr.io/browserless/chrome :v2.56.7	d600eac6283f	gstreamer1.0@1.24.2-1ubuntu0.1	no fix listed	1
ghcr.io/browserless/chromium :v2.55.4	2ed0183564d7	gstreamer1.0@1.24.2-1ubuntu0.1	no fix listed	1
ghcr.io/browserless/chromium :v2.43.0	853e6f105b51	gstreamer1.0@1.24.2-1ubuntu0.1	no fix listed	1
ghcr.io/haveagitgat/tdarr :2.00.18.2	3fbe4c29d14c	gstreamer1.0@1.16.2-2	no fix listed	1
ghcr.io/jfwenisch/steamcmd-manager :v0.4.5	dab685e668d9	gstreamer1.0@1.24.2-1ubuntu0.1	no fix listed	1
ghcr.io/jfwenisch/webtools :v0.1.4	4569cae83c70	gstreamer1.0@1.24.2-1ubuntu0.1	no fix listed	1