StackRadar

CVE-2026-22693

Medium

Advisory

Published 10 Jan 2026In the index since 5 Sept 2026
Severity
Medium
worst across findings
CVSS
5.3
base score, highest
EPSS
0.004
37th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
215
of 17,781 indexed, latest versions
Container images
199
deployed by those charts
Fix available
1 of 1
affected package

The matching OSV records carry no description.

Carried by container images the latest versions of 215 of 17,781 indexed charts deploy, on 199 images.

Affected packageAffected versionsFixed inImages
harfbuzzdeb6.0.0+dfsg-3, 8.3.0-2build2, 10.2.0-1, 10.2.0-1+b110.2.0-1+deb13u1199
OSV records
DEBIAN-CVE-2026-22693UBUNTU-CVE-2026-22693

Charts affected

215 by stars
ChartLatestAffected imagesRadar Score
uptime-kumauptime-kumaVerified publisher4.2.01 of 1See more

uptime-kuma uptime-kuma 4.2.0

1 of the 1 container images this version deploys carry CVE-2026-22693.

Container imageDigestPackageFixed in
louislam/uptime-kuma:2.5.0a8610b3b4c38
harfbuzz@6.0.0+dfsg-3
no fix listed

Open the chart page →

30,159
zabbixzabbix-communityVerified publisher7.1.01 of 5See more

zabbix zabbix-community 7.1.0

1 of the 5 container images this version deploys carry CVE-2026-22693.

Container imageDigestPackageFixed in
zabbix/zabbix-web-service:ubuntu-7.0.23915b3183e054
harfbuzz@8.3.0-2build2
no fix listed

Open the chart page →

13,664
chaos-meshchaos-meshVerified publisher2.8.41 of 4See more

chaos-mesh chaos-mesh 2.8.4

1 of the 4 container images this version deploys carry CVE-2026-22693.

Container imageDigestPackageFixed in
ghcr.io/chaos-mesh/chaos-daemon:v2.8.40d28dbd95b03
harfbuzz@6.0.0+dfsg-3
no fix listed

Open the chart page →

6,342
difydoubanVerified publisher0.10.01 of 6See more

dify douban 0.10.0

1 of the 6 container images this version deploys carry CVE-2026-22693.

Container imageDigestPackageFixed in
langgenius/dify-plugin-daemon:0.5.1-local8269050f192e
harfbuzz@8.3.0-2build2
no fix listed

Open the chart page →

19,391
difydify-helmVerified publisher0.38.01 of 11See more

dify dify-helm 0.38.0

1 of the 11 container images this version deploys carry CVE-2026-22693.

Container imageDigestPackageFixed in
langgenius/dify-plugin-daemon:0.6.3-local3c694329357b
harfbuzz@8.3.0-2build2
no fix listed

Open the chart page →

22,002
openprojectopenproject-helm-chartsOfficialVerified publisher13.11.01 of 5See more

openproject openproject-helm-charts 13.11.0

1 of the 5 container images this version deploys carry CVE-2026-22693.

Container imageDigestPackageFixed in
openproject/hocuspocus:release-338001b288dc1359dfb5
harfbuzz@6.0.0+dfsg-3
no fix listed

Open the chart page →

19,926
wazuhwazuh-helm-morgovedVerified publisher2.0.71 of 5See more

wazuh wazuh-helm-morgoved 2.0.7

1 of the 5 container images this version deploys carry CVE-2026-22693.

Container imageDigestPackageFixed in
kinseii/wazuh-agent:4.14.17160eb143728
harfbuzz@6.0.0+dfsg-3
no fix listed

Open the chart page →

11,384
oneuptimeoneuptimeOfficialVerified publisher13.0.41 of 7See more

oneuptime oneuptime 13.0.4

1 of the 7 container images this version deploys carry CVE-2026-22693.

Container imageDigestPackageFixed in
oneuptime/probe:release6b2d98713711
harfbuzz@6.0.0+dfsg-3
no fix listed

Open the chart page →

11,192
druiddruid-helmVerified publisher37.0.21 of 3See more

druid druid-helm 37.0.2

1 of the 3 container images this version deploys carry CVE-2026-22693.

Container imageDigestPackageFixed in
apache/druid:37.0.00116fb802786
harfbuzz@6.0.0+dfsg-3
no fix listed

Open the chart page →

3,812
openclawopenclawVerified publisher1.91.31 of 2See more

openclaw openclaw 1.91.3

1 of the 2 container images this version deploys carry CVE-2026-22693.

Container imageDigestPackageFixed in
ghcr.io/browserless/chromium:v2.56.7b1ba7b054af2
harfbuzz@8.3.0-2build2
no fix listed

Open the chart page →

2,977
wazuh-agentavistoVerified publisher4.12.21 of 1See more

wazuh-agent avisto 4.12.2

1 of the 1 container images this version deploys carry CVE-2026-22693.

Container imageDigestPackageFixed in
ghcr.io/avistotelecom/docker-wazuh-agent:4.12.08766ba08bf1a
harfbuzz@6.0.0+dfsg-3
no fix listed

Open the chart page →

6,457
selenium-gridselenium-grid0.59.12 of 4See more

selenium-grid selenium-grid 0.59.1

2 of the 4 container images this version deploys carry CVE-2026-22693.

Container imageDigestPackageFixed in
selenium/node-chrome:4.48.0-202609055ac71fd8dd1e
harfbuzz@8.3.0-2build2
no fix listed
selenium/node-firefox:4.48.0-2026090574a5c1c90f95
harfbuzz@8.3.0-2build2
no fix listed

Open the chart page →

7,028
druidwiremindVerified publisher1.22.11 of 3See more

druid wiremind 1.22.1

1 of the 3 container images this version deploys carry CVE-2026-22693.

Container imageDigestPackageFixed in
apache/druid:29.0.10cef139b6bf1
harfbuzz@6.0.0+dfsg-3
no fix listed

Open the chart page →

7,930
karakeephelmforgeVerified publisher1.2.92 of 3See more

karakeep helmforge 1.2.9

2 of the 3 container images this version deploys carry CVE-2026-22693.

Container imageDigestPackageFixed in
ghcr.io/browserless/chromium:v2.55.42ed0183564d7
harfbuzz@8.3.0-2build2
no fix listed
ghcr.io/karakeep-app/karakeep:0.33.2b069e4307dec
harfbuzz@6.0.0+dfsg-3
no fix listed

Open the chart page →

9,460
kubeflowkubeflow1.6.21 of 45See more

kubeflow kubeflow 1.6.2

1 of the 45 container images this version deploys carry CVE-2026-22693.

Container imageDigestPackageFixed in
library/python:3.7eedf63967cdb
harfbuzz@6.0.0+dfsg-3
no fix listed

Open the chart page →

96,941
local-ailocalai3.4.21 of 1See more

local-ai localai 3.4.2

1 of the 1 container images this version deploys carry CVE-2026-22693.

Container imageDigestPackageFixed in
quay.io/go-skynet/local-ai:latestd78cd113b2bc
harfbuzz@8.3.0-2build2
no fix listed

Open the chart page →

3,997
grafana-pdf-exporterwiremindVerified publisher2.1.11 of 1See more

grafana-pdf-exporter wiremind 2.1.1

1 of the 1 container images this version deploys carry CVE-2026-22693.

Container imageDigestPackageFixed in
ghcr.io/wiremind/grafana-pdf-exporter:v1.7dbaa8527bf4c
harfbuzz@6.0.0+dfsg-3
no fix listed

Open the chart page →

9,746
thingsboardcetic0.1.21 of 2See more

thingsboard cetic 0.1.2

1 of the 2 container images this version deploys carry CVE-2026-22693.

Container imageDigestPackageFixed in
thingsboard/tb-postgres:latest2d17e4e36edc
harfbuzz@6.0.0+dfsg-3
no fix listed

Open the chart page →

5,235
dask-kubernetes-operatordask2026.3.01 of 1See more

dask-kubernetes-operator dask 2026.3.0

1 of the 1 container images this version deploys carry CVE-2026-22693.

Container imageDigestPackageFixed in
ghcr.io/dask/dask-kubernetes-operator:2026.3.03225d2bc6b3c
harfbuzz@10.2.0-1+b1
10.2.0-1+deb13u1

Open the chart page →

9,316
terrariahalkeye0.4.21 of 2See more

terraria halkeye 0.4.2

1 of the 2 container images this version deploys carry CVE-2026-22693.

Container imageDigestPackageFixed in
ryshe/terraria:latestb1c89f7f359a
harfbuzz@6.0.0+dfsg-3
no fix listed

Open the chart page →

4,127
coreinstill-aiOfficialVerified publisher0.1.751 of 15See more

core instill-ai 0.1.75

1 of the 15 container images this version deploys carry CVE-2026-22693.

Container imageDigestPackageFixed in
instill/artifact-backend:b28766ac4a393e601ed
harfbuzz@10.2.0-1+b1
10.2.0-1+deb13u1

Open the chart page →

30,816
structurizrvirtualrootVerified publisher0.5.01 of 1See more

structurizr virtualroot 0.5.0

1 of the 1 container images this version deploys carry CVE-2026-22693.

Container imageDigestPackageFixed in
structurizr/onpremises:2025.11.094b5ffb5119c8
harfbuzz@8.3.0-2build2
no fix listed

Open the chart page →

4,378
paperless-ngxalexmorbo-paperless-ngxVerified publisher0.2.01 of 2See more

paperless-ngx alexmorbo-paperless-ngx 0.2.0

1 of the 2 container images this version deploys carry CVE-2026-22693.

Container imageDigestPackageFixed in
ghcr.io/paperless-ngx/paperless-ngx:2.20.5665f2f5cc548
harfbuzz@10.2.0-1+b1
10.2.0-1+deb13u1

Open the chart page →

12,037
cosmotech-copilot-apicosmotech-apiVerified publisher0.1.11 of 1See more

cosmotech-copilot-api cosmotech-api 0.1.1

1 of the 1 container images this version deploys carry CVE-2026-22693.

Container imageDigestPackageFixed in
ghcr.io/cosmo-tech/cosmotech-copilot-api:latesta2be95de450c
harfbuzz@10.2.0-1+b1
10.2.0-1+deb13u1

Open the chart page →

11,205
paperless-ngxcrystalnetVerified publisher0.2.221 of 3See more

paperless-ngx crystalnet 0.2.22

1 of the 3 container images this version deploys carry CVE-2026-22693.

Container imageDigestPackageFixed in
ghcr.io/paperless-ngx/paperless-ngx:2.13.10642357c5dbd
harfbuzz@6.0.0+dfsg-3
no fix listed

Open the chart page →

13,761
datacube-explorerdatacube-charts0.5.321 of 1See more

datacube-explorer datacube-charts 0.5.32

1 of the 1 container images this version deploys carry CVE-2026-22693.

Container imageDigestPackageFixed in
opendatacube/explorer:latest120457ffcd69
harfbuzz@8.3.0-2build2
no fix listed

Open the chart page →

4,854
dragonfly-stackdragonflyVerified publisher0.1.21 of 7See more

dragonfly-stack dragonfly 0.1.2

1 of the 7 container images this version deploys carry CVE-2026-22693.

Container imageDigestPackageFixed in
dragonflyoss/client:v0.1.82edf3e921f4e0
harfbuzz@6.0.0+dfsg-3
no fix listed

Open the chart page →

18,376
craftycontrollerdrewburr-labs-helm-chartsVerified publisher0.3.01 of 1See more

craftycontroller drewburr-labs-helm-charts 0.3.0

1 of the 1 container images this version deploys carry CVE-2026-22693.

Container imageDigestPackageFixed in
registry.gitlab.com/crafty-controller/crafty-4:latest166a06f73d8c
harfbuzz@8.3.0-2build2
no fix listed

Open the chart page →

3,671
rstudiodsri-helm-charts0.1.281 of 1See more

rstudio dsri-helm-charts 0.1.28

1 of the 1 container images this version deploys carry CVE-2026-22693.

Container imageDigestPackageFixed in
ghcr.io/maastrichtu-ids/rstudio:latest981aa4c109e1
harfbuzz@8.3.0-2build2
no fix listed

Open the chart page →

5,670
enbuildenbuildVerified publisher0.0.501 of 6See more

enbuild enbuild 0.0.50

1 of the 6 container images this version deploys carry CVE-2026-22693.

Container imageDigestPackageFixed in
registry.gitlab.com/enbuild-staging/vivsoft-platform-ui/enbuild-mq-consumer:1.0.310e3cd8c7776d
harfbuzz@6.0.0+dfsg-3
no fix listed

Open the chart page →

31,510
iobrokereugen0.2.61 of 1See more

iobroker eugen 0.2.6

1 of the 1 container images this version deploys carry CVE-2026-22693.

Container imageDigestPackageFixed in
ghcr.io/buanet/iobroker:v9.1.2ca7dc7362968
harfbuzz@6.0.0+dfsg-3
no fix listed

Open the chart page →

11,458
castopodh2mVerified publisher1.12.101 of 3See more

castopod h2m 1.12.10

1 of the 3 container images this version deploys carry CVE-2026-22693.

Container imageDigestPackageFixed in
castopod/castopod:1.12.101fd37280cbb2
harfbuzz@6.0.0+dfsg-3
no fix listed

Open the chart page →

10,072
immichimmich-helm0.3.01 of 4See more

immich immich-helm 0.3.0

1 of the 4 container images this version deploys carry CVE-2026-22693.

Container imageDigestPackageFixed in
ghcr.io/immich-app/immich-server:v2.3.1f8d06a32b1b2
harfbuzz@10.2.0-1+b1
10.2.0-1+deb13u1

Open the chart page →

15,712
iris-webappiris-webapp0.2.41 of 2See more

iris-webapp iris-webapp 0.2.4

1 of the 2 container images this version deploys carry CVE-2026-22693.

Container imageDigestPackageFixed in
ghcr.io/dfir-iris/iriswebapp_app:v2.4.26e59ebde55709
harfbuzz@10.2.0-1+b1
10.2.0-1+deb13u1

Open the chart page →

11,764
difykubeblocksVerified publisher0.5.11 of 5See more

dify kubeblocks 0.5.1

1 of the 5 container images this version deploys carry CVE-2026-22693.

Container imageDigestPackageFixed in
langgenius/dify-api:0.6.11fca918260dd6
harfbuzz@6.0.0+dfsg-3
no fix listed

Open the chart page →

20,403
flaresolverrlib42Verified publisher2.0.01 of 1See more

flaresolverr lib42 2.0.0

1 of the 1 container images this version deploys carry CVE-2026-22693.

Container imageDigestPackageFixed in
ghcr.io/flaresolverr/flaresolverr:v3.4.0ab535d1fef5d
harfbuzz@6.0.0+dfsg-3
no fix listed

Open the chart page →

35,050
music-assistant-serverlmatfyVerified publisher0.1.91 of 1See more

music-assistant-server lmatfy 0.1.9

1 of the 1 container images this version deploys carry CVE-2026-22693.

Container imageDigestPackageFixed in
ghcr.io/music-assistant/server:2.7.53522e8a7a8f0
harfbuzz@6.0.0+dfsg-3
no fix listed

Open the chart page →

7,201
flaresolverrm0nsterrr-flaresolverrVerified publisher2.4.11 of 1See more

flaresolverr m0nsterrr-flaresolverr 2.4.1

1 of the 1 container images this version deploys carry CVE-2026-22693.

Container imageDigestPackageFixed in
ghcr.io/flaresolverr/flaresolverr:v3.5.2c80ae007ce2c
harfbuzz@6.0.0+dfsg-3
no fix listed

Open the chart page →

6,136
drillmagasin-drill0.9.01 of 3See more

drill magasin-drill 0.9.0

1 of the 3 container images this version deploys carry CVE-2026-22693.

Container imageDigestPackageFixed in
merlos/zookeeper:3.9.3a38fc7e09ed7
harfbuzz@6.0.0+dfsg-3
no fix listed

Open the chart page →

5,734
photoprismmmontesVerified publisher0.14.01 of 1See more

photoprism mmontes 0.14.0

1 of the 1 container images this version deploys carry CVE-2026-22693.

Container imageDigestPackageFixed in
photoprism/photoprism:251130db16ee6b1ba3
harfbuzz@10.2.0-1
no fix listed

Open the chart page →

11,103
mockservermockserverOfficialVerified publisher7.6.01 of 1See more

mockserver mockserver 7.6.0

1 of the 1 container images this version deploys carry CVE-2026-22693.

Container imageDigestPackageFixed in
mockserver/mockserver:mockserver-7.6.080b3b1a26f35
harfbuzz@6.0.0+dfsg-3
no fix listed

Open the chart page →

1,021
food-managermoreillonVerified publisher0.5.01 of 2See more

food-manager moreillon 0.5.0

1 of the 2 container images this version deploys carry CVE-2026-22693.

Container imageDigestPackageFixed in
moreillon/food-manager:lateste8fd856e593d
harfbuzz@6.0.0+dfsg-3
no fix listed

Open the chart page →

13,738
opentelemetry-demoopentelemetry-helmVerified publisher0.41.11 of 34See more

opentelemetry-demo opentelemetry-helm 0.41.1

1 of the 34 container images this version deploys carry CVE-2026-22693.

Container imageDigestPackageFixed in
ghcr.io/open-telemetry/demo:3.0.0-fraud-detection1cdfd1bcf476
harfbuzz@6.0.0+dfsg-3
no fix listed

Open the chart page →

22,420
portraitportraitVerified publisher0.2.131 of 8See more

portrait portrait 0.2.13

1 of the 8 container images this version deploys carry CVE-2026-22693.

Container imageDigestPackageFixed in
treskon/portrait-web-setup:DEV-latesta475d80e4ecf
harfbuzz@6.0.0+dfsg-3
no fix listed

Open the chart page →

31,844
phpqonstruktVerified publisher0.2.01 of 1See more

php qonstrukt 0.2.0

1 of the 1 container images this version deploys carry CVE-2026-22693.

Container imageDigestPackageFixed in
qonstrukt/php:8.4-v8-apache089af7925aa1
harfbuzz@8.3.0-2build2
no fix listed

Open the chart page →

23,964
fluent-bitromanow-helm-chartsVerified publisher1.7.31 of 1See more

fluent-bit romanow-helm-charts 1.7.3

1 of the 1 container images this version deploys carry CVE-2026-22693.

Container imageDigestPackageFixed in
fluent/fluent-bit:4.0-debuge76397ef3983
harfbuzz@6.0.0+dfsg-3
no fix listed

Open the chart page →

7,740
rstudio-pmrstudioVerified publisher0.20.51 of 1See more

rstudio-pm rstudio 0.20.5

1 of the 1 container images this version deploys carry CVE-2026-22693.

Container imageDigestPackageFixed in
posit/package-manager:2026.09.0-ubuntu-24.04527493ef621b
harfbuzz@8.3.0-2build2
no fix listed

Open the chart page →

1,324
kyoorubxkubeVerified publisher0.1.102 of 9See more

kyoo rubxkube 0.1.10

2 of the 9 container images this version deploys carry CVE-2026-22693.

Container imageDigestPackageFixed in
ghcr.io/zoriya/kyoo_autosync:4.7.1fbba58ddb1a6
harfbuzz@6.0.0+dfsg-3
no fix listed
ghcr.io/zoriya/kyoo_scanner:4.7.17dc0ee57b628
harfbuzz@6.0.0+dfsg-3
no fix listed

Open the chart page →

30,234
uptime-kumasb-helm-charts0.4.01 of 1See more

uptime-kuma sb-helm-charts 0.4.0

1 of the 1 container images this version deploys carry CVE-2026-22693.

Container imageDigestPackageFixed in
louislam/uptime-kuma:2.0.24c364ef96aad
harfbuzz@6.0.0+dfsg-3
no fix listed

Open the chart page →

38,107
sogosogoVerified publisher0.3.51 of 2See more

sogo sogo 0.3.5

1 of the 2 container images this version deploys carry CVE-2026-22693.

Container imageDigestPackageFixed in
sonroyaalmerol/docker-sogo:5.12.43f60f3abe990
harfbuzz@10.2.0-1+b1
10.2.0-1+deb13u1

Open the chart page →

7,126

Container images carrying it

199 by charts deploying them

A fixed version is listed for 1 of the 1 affected package.

Container imageDigestPackageFixed inUsed by
flaresolverr/flaresolverr:latest:v3.5.0139dfee1c6f8
harfbuzz@6.0.0+dfsg-3
no fix listed
5
library/node:ltsbe23f54a88d3
harfbuzz@6.0.0+dfsg-3
no fix listed
3
quay.io/devtron/ai-agent:0.0.16545dac92173
harfbuzz@6.0.0+dfsg-3
no fix listed
3
quay.io/devtron/notifier:9804331c-372-39294709c7da19c5a
harfbuzz@6.0.0+dfsg-3
no fix listed
3
apache/druid:37.0.00116fb802786
harfbuzz@6.0.0+dfsg-3
no fix listed
2
apache/tika:2.9.2.1-fullae0b86d3c4d0
harfbuzz@8.3.0-2build2
no fix listed
2
gjeanmart/safe-ganache-node:latest926264c8f2d1
harfbuzz@6.0.0+dfsg-3
no fix listed
2
homebridge/homebridge:latest77c685a40911
harfbuzz@8.3.0-2build2
no fix listed
2
kurento/kurento-media-server:latest03c0d34d0828
harfbuzz@8.3.0-2build2
no fix listed
2
library/python:3.7eedf63967cdb
harfbuzz@6.0.0+dfsg-3
no fix listed
2
louislam/uptime-kuma:2.5.4917318f9d7be
harfbuzz@6.0.0+dfsg-3
no fix listed
2
louislam/uptime-kuma:2.3.29aeb4e51d038
harfbuzz@6.0.0+dfsg-3
no fix listed
2
louislam/uptime-kuma:2.5.0a8610b3b4c38
harfbuzz@6.0.0+dfsg-3
no fix listed
2
moreillon/user-manager:v5.0.2e1c9bfab5c16
harfbuzz@6.0.0+dfsg-3
no fix listed
2
opendatacube/ows:latest668cbb41473c
harfbuzz@8.3.0-2build2
no fix listed
2
qichenxu4pd/pythonexample:1.0f3a8502bc21b
harfbuzz@6.0.0+dfsg-3
no fix listed
2
speckle/speckle-preview-service:2.18.11-branch.testing2.88634-335d469:2.18.12-branch.testing3.88744-f55b3414bd113093583
harfbuzz@6.0.0+dfsg-3
no fix listed
2
ghcr.io/browserless/chromium:v2.56.7b1ba7b054af2
harfbuzz@8.3.0-2build2
no fix listed
2
ghcr.io/bryopsida/k8s-dev-pod:main82d0b161161d
harfbuzz@8.3.0-2build2
no fix listed
2
ghcr.io/flaresolverr/flaresolverr:v3.4.67962759d99d7
harfbuzz@6.0.0+dfsg-3
no fix listed
2
ghcr.io/flaresolverr/flaresolverr:v3.5.2c80ae007ce2c
harfbuzz@6.0.0+dfsg-3
no fix listed
2
ghcr.io/lissy93/web-check:latesta4e021c0f6a9
harfbuzz@6.0.0+dfsg-3
no fix listed
2
ghcr.io/openunison/openunison-kubernetes-operator:1.0.11f4feb3323a29
harfbuzz@8.3.0-2build2
no fix listed
2
ghcr.io/smarter-project/hydra/isolated-vm:main4457b79b24cd
harfbuzz@6.0.0+dfsg-3
no fix listed
2
1dev/server:11.9.0cd5b12fe5471
harfbuzz@8.3.0-2build2
no fix listed
1
anujdatar/cups:25.07.01685df04a643b
harfbuzz@6.0.0+dfsg-3
no fix listed
1
apache/druid:29.0.10cef139b6bf1
harfbuzz@6.0.0+dfsg-3
no fix listed
1
archivebox/archivebox:0.7.41a5a37331091
harfbuzz@6.0.0+dfsg-3
no fix listed
1
aristidetm/basic-notebook:3.6.5469dbc951224
harfbuzz@6.0.0+dfsg-3
no fix listed
1
assistiot/smart-orchestrator_scheduler_mc:latestb1dbe4d62a03
harfbuzz@6.0.0+dfsg-3
no fix listed
1
avinash263/pyredis263:latestaa2b8727f1a6
harfbuzz@6.0.0+dfsg-3
no fix listed
1
beyzkaya/blog-backend:v1.0.112a6a3d1c5f9
harfbuzz@6.0.0+dfsg-3
no fix listed
1
bnjbvr/kresus:0.22.137e216b182c8
harfbuzz@6.0.0+dfsg-3
no fix listed
1
camptocamp/mapserver:latestbf2e8e118c9b
harfbuzz@8.3.0-2build2
no fix listed
1
carlosmz87/test_helm_backend:latest8ffa63aa995d
harfbuzz@6.0.0+dfsg-3
no fix listed
1
castopod/castopod:1.12.101fd37280cbb2
harfbuzz@6.0.0+dfsg-3
no fix listed
1
castopod/castopod:1.15.54e4f0440520f
harfbuzz@10.2.0-1+b1
10.2.0-1+deb13u1
1
chiefonboarding/chiefonboarding:v2.4.159bc7aa60fe7
harfbuzz@10.2.0-1+b1
10.2.0-1+deb13u1
1
codedesignplus/ms-emails-grpc:lateste336012bc781
harfbuzz@6.0.0+dfsg-3
no fix listed
1
codedesignplus/ms-emails-rest:latestac84661c605e
harfbuzz@6.0.0+dfsg-3
no fix listed
1
deconzcommunity/deconz:2.29.2062de2362641
harfbuzz@6.0.0+dfsg-3
no fix listed
1
dragonflyoss/client:v0.1.82edf3e921f4e0
harfbuzz@6.0.0+dfsg-3
no fix listed
1
eclipseaerios/iota-messages-api:lateste7f5ba0bc64d
harfbuzz@10.2.0-1+b1
10.2.0-1+deb13u1
1
felipecs8/app-db-connection-test:v129e06c9c6385
harfbuzz@6.0.0+dfsg-3
no fix listed
1
firefart/requesttracker:5.0.40d6249906d8c
harfbuzz@6.0.0+dfsg-3
no fix listed
1
fiware/biz-ecosystem-logic-proxy:11.20.3d551a13e8278
harfbuzz@6.0.0+dfsg-3
no fix listed
1
fluent/fluent-bit:4.0-debuge76397ef3983
harfbuzz@6.0.0+dfsg-3
no fix listed
1
gotenberg/gotenberg:8.30206a6c708fc6
harfbuzz@10.2.0-1+b1
10.2.0-1+deb13u1
1
helicone/supabase-migration-runner:v2025.03.05-14a913936c97b
harfbuzz@6.0.0+dfsg-3
no fix listed
1
instill/artifact-backend:b28766ac4a393e601ed
harfbuzz@10.2.0-1+b1
10.2.0-1+deb13u1
1

syft 1.42.1 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.