StackRadar

CVE-2026-22693

Medium

Advisory

Published 10 Jan 2026In the index since 5 Sept 2026
Severity
Medium
worst across findings
CVSS
5.3
base score, highest
EPSS
0.004
37th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
215
of 17,781 indexed, latest versions
Container images
199
deployed by those charts
Fix available
1 of 1
affected package

The matching OSV records carry no description.

Carried by container images the latest versions of 215 of 17,781 indexed charts deploy, on 199 images.

Affected packageAffected versionsFixed inImages
harfbuzzdeb6.0.0+dfsg-3, 8.3.0-2build2, 10.2.0-1, 10.2.0-1+b110.2.0-1+deb13u1199
OSV records
DEBIAN-CVE-2026-22693UBUNTU-CVE-2026-22693

Charts affected

215 by stars
ChartLatestAffected imagesRadar Score
uptime-kumauptime-kumaVerified publisher4.2.01 of 1See more

uptime-kuma uptime-kuma 4.2.0

1 of the 1 container images this version deploys carry CVE-2026-22693.

Container imageDigestPackageFixed in
louislam/uptime-kuma:2.5.0a8610b3b4c38
harfbuzz@6.0.0+dfsg-3
no fix listed

Open the chart page →

30,159
zabbixzabbix-communityVerified publisher7.1.01 of 5See more

zabbix zabbix-community 7.1.0

1 of the 5 container images this version deploys carry CVE-2026-22693.

Container imageDigestPackageFixed in
zabbix/zabbix-web-service:ubuntu-7.0.23915b3183e054
harfbuzz@8.3.0-2build2
no fix listed

Open the chart page →

13,664
chaos-meshchaos-meshVerified publisher2.8.41 of 4See more

chaos-mesh chaos-mesh 2.8.4

1 of the 4 container images this version deploys carry CVE-2026-22693.

Container imageDigestPackageFixed in
ghcr.io/chaos-mesh/chaos-daemon:v2.8.40d28dbd95b03
harfbuzz@6.0.0+dfsg-3
no fix listed

Open the chart page →

6,342
difydoubanVerified publisher0.10.01 of 6See more

dify douban 0.10.0

1 of the 6 container images this version deploys carry CVE-2026-22693.

Container imageDigestPackageFixed in
langgenius/dify-plugin-daemon:0.5.1-local8269050f192e
harfbuzz@8.3.0-2build2
no fix listed

Open the chart page →

19,391
difydify-helmVerified publisher0.38.01 of 11See more

dify dify-helm 0.38.0

1 of the 11 container images this version deploys carry CVE-2026-22693.

Container imageDigestPackageFixed in
langgenius/dify-plugin-daemon:0.6.3-local3c694329357b
harfbuzz@8.3.0-2build2
no fix listed

Open the chart page →

22,002
openprojectopenproject-helm-chartsOfficialVerified publisher13.11.01 of 5See more

openproject openproject-helm-charts 13.11.0

1 of the 5 container images this version deploys carry CVE-2026-22693.

Container imageDigestPackageFixed in
openproject/hocuspocus:release-338001b288dc1359dfb5
harfbuzz@6.0.0+dfsg-3
no fix listed

Open the chart page →

19,926
wazuhwazuh-helm-morgovedVerified publisher2.0.71 of 5See more

wazuh wazuh-helm-morgoved 2.0.7

1 of the 5 container images this version deploys carry CVE-2026-22693.

Container imageDigestPackageFixed in
kinseii/wazuh-agent:4.14.17160eb143728
harfbuzz@6.0.0+dfsg-3
no fix listed

Open the chart page →

11,384
oneuptimeoneuptimeOfficialVerified publisher13.0.41 of 7See more

oneuptime oneuptime 13.0.4

1 of the 7 container images this version deploys carry CVE-2026-22693.

Container imageDigestPackageFixed in
oneuptime/probe:release6b2d98713711
harfbuzz@6.0.0+dfsg-3
no fix listed

Open the chart page →

11,192
druiddruid-helmVerified publisher37.0.21 of 3See more

druid druid-helm 37.0.2

1 of the 3 container images this version deploys carry CVE-2026-22693.

Container imageDigestPackageFixed in
apache/druid:37.0.00116fb802786
harfbuzz@6.0.0+dfsg-3
no fix listed

Open the chart page →

3,812
openclawopenclawVerified publisher1.91.31 of 2See more

openclaw openclaw 1.91.3

1 of the 2 container images this version deploys carry CVE-2026-22693.

Container imageDigestPackageFixed in
ghcr.io/browserless/chromium:v2.56.7b1ba7b054af2
harfbuzz@8.3.0-2build2
no fix listed

Open the chart page →

2,977
wazuh-agentavistoVerified publisher4.12.21 of 1See more

wazuh-agent avisto 4.12.2

1 of the 1 container images this version deploys carry CVE-2026-22693.

Container imageDigestPackageFixed in
ghcr.io/avistotelecom/docker-wazuh-agent:4.12.08766ba08bf1a
harfbuzz@6.0.0+dfsg-3
no fix listed

Open the chart page →

6,457
selenium-gridselenium-grid0.59.12 of 4See more

selenium-grid selenium-grid 0.59.1

2 of the 4 container images this version deploys carry CVE-2026-22693.

Container imageDigestPackageFixed in
selenium/node-chrome:4.48.0-202609055ac71fd8dd1e
harfbuzz@8.3.0-2build2
no fix listed
selenium/node-firefox:4.48.0-2026090574a5c1c90f95
harfbuzz@8.3.0-2build2
no fix listed

Open the chart page →

7,028
druidwiremindVerified publisher1.22.11 of 3See more

druid wiremind 1.22.1

1 of the 3 container images this version deploys carry CVE-2026-22693.

Container imageDigestPackageFixed in
apache/druid:29.0.10cef139b6bf1
harfbuzz@6.0.0+dfsg-3
no fix listed

Open the chart page →

7,930
karakeephelmforgeVerified publisher1.2.92 of 3See more

karakeep helmforge 1.2.9

2 of the 3 container images this version deploys carry CVE-2026-22693.

Container imageDigestPackageFixed in
ghcr.io/browserless/chromium:v2.55.42ed0183564d7
harfbuzz@8.3.0-2build2
no fix listed
ghcr.io/karakeep-app/karakeep:0.33.2b069e4307dec
harfbuzz@6.0.0+dfsg-3
no fix listed

Open the chart page →

9,460
kubeflowkubeflow1.6.21 of 45See more

kubeflow kubeflow 1.6.2

1 of the 45 container images this version deploys carry CVE-2026-22693.

Container imageDigestPackageFixed in
library/python:3.7eedf63967cdb
harfbuzz@6.0.0+dfsg-3
no fix listed

Open the chart page →

96,941
local-ailocalai3.4.21 of 1See more

local-ai localai 3.4.2

1 of the 1 container images this version deploys carry CVE-2026-22693.

Container imageDigestPackageFixed in
quay.io/go-skynet/local-ai:latestd78cd113b2bc
harfbuzz@8.3.0-2build2
no fix listed

Open the chart page →

3,997
grafana-pdf-exporterwiremindVerified publisher2.1.11 of 1See more

grafana-pdf-exporter wiremind 2.1.1

1 of the 1 container images this version deploys carry CVE-2026-22693.

Container imageDigestPackageFixed in
ghcr.io/wiremind/grafana-pdf-exporter:v1.7dbaa8527bf4c
harfbuzz@6.0.0+dfsg-3
no fix listed

Open the chart page →

9,746
thingsboardcetic0.1.21 of 2See more

thingsboard cetic 0.1.2

1 of the 2 container images this version deploys carry CVE-2026-22693.

Container imageDigestPackageFixed in
thingsboard/tb-postgres:latest2d17e4e36edc
harfbuzz@6.0.0+dfsg-3
no fix listed

Open the chart page →

5,235
dask-kubernetes-operatordask2026.3.01 of 1See more

dask-kubernetes-operator dask 2026.3.0

1 of the 1 container images this version deploys carry CVE-2026-22693.

Container imageDigestPackageFixed in
ghcr.io/dask/dask-kubernetes-operator:2026.3.03225d2bc6b3c
harfbuzz@10.2.0-1+b1
10.2.0-1+deb13u1

Open the chart page →

9,316
terrariahalkeye0.4.21 of 2See more

terraria halkeye 0.4.2

1 of the 2 container images this version deploys carry CVE-2026-22693.

Container imageDigestPackageFixed in
ryshe/terraria:latestb1c89f7f359a
harfbuzz@6.0.0+dfsg-3
no fix listed

Open the chart page →

4,127
coreinstill-aiOfficialVerified publisher0.1.751 of 15See more

core instill-ai 0.1.75

1 of the 15 container images this version deploys carry CVE-2026-22693.

Container imageDigestPackageFixed in
instill/artifact-backend:b28766ac4a393e601ed
harfbuzz@10.2.0-1+b1
10.2.0-1+deb13u1

Open the chart page →

30,816
structurizrvirtualrootVerified publisher0.5.01 of 1See more

structurizr virtualroot 0.5.0

1 of the 1 container images this version deploys carry CVE-2026-22693.

Container imageDigestPackageFixed in
structurizr/onpremises:2025.11.094b5ffb5119c8
harfbuzz@8.3.0-2build2
no fix listed

Open the chart page →

4,378
paperless-ngxalexmorbo-paperless-ngxVerified publisher0.2.01 of 2See more

paperless-ngx alexmorbo-paperless-ngx 0.2.0

1 of the 2 container images this version deploys carry CVE-2026-22693.

Container imageDigestPackageFixed in
ghcr.io/paperless-ngx/paperless-ngx:2.20.5665f2f5cc548
harfbuzz@10.2.0-1+b1
10.2.0-1+deb13u1

Open the chart page →

12,037
cosmotech-copilot-apicosmotech-apiVerified publisher0.1.11 of 1See more

cosmotech-copilot-api cosmotech-api 0.1.1

1 of the 1 container images this version deploys carry CVE-2026-22693.

Container imageDigestPackageFixed in
ghcr.io/cosmo-tech/cosmotech-copilot-api:latesta2be95de450c
harfbuzz@10.2.0-1+b1
10.2.0-1+deb13u1

Open the chart page →

11,205
paperless-ngxcrystalnetVerified publisher0.2.221 of 3See more

paperless-ngx crystalnet 0.2.22

1 of the 3 container images this version deploys carry CVE-2026-22693.

Container imageDigestPackageFixed in
ghcr.io/paperless-ngx/paperless-ngx:2.13.10642357c5dbd
harfbuzz@6.0.0+dfsg-3
no fix listed

Open the chart page →

13,761
datacube-explorerdatacube-charts0.5.321 of 1See more

datacube-explorer datacube-charts 0.5.32

1 of the 1 container images this version deploys carry CVE-2026-22693.

Container imageDigestPackageFixed in
opendatacube/explorer:latest120457ffcd69
harfbuzz@8.3.0-2build2
no fix listed

Open the chart page →

4,854
dragonfly-stackdragonflyVerified publisher0.1.21 of 7See more

dragonfly-stack dragonfly 0.1.2

1 of the 7 container images this version deploys carry CVE-2026-22693.

Container imageDigestPackageFixed in
dragonflyoss/client:v0.1.82edf3e921f4e0
harfbuzz@6.0.0+dfsg-3
no fix listed

Open the chart page →

18,376
craftycontrollerdrewburr-labs-helm-chartsVerified publisher0.3.01 of 1See more

craftycontroller drewburr-labs-helm-charts 0.3.0

1 of the 1 container images this version deploys carry CVE-2026-22693.

Container imageDigestPackageFixed in
registry.gitlab.com/crafty-controller/crafty-4:latest166a06f73d8c
harfbuzz@8.3.0-2build2
no fix listed

Open the chart page →

3,671
rstudiodsri-helm-charts0.1.281 of 1See more

rstudio dsri-helm-charts 0.1.28

1 of the 1 container images this version deploys carry CVE-2026-22693.

Container imageDigestPackageFixed in
ghcr.io/maastrichtu-ids/rstudio:latest981aa4c109e1
harfbuzz@8.3.0-2build2
no fix listed

Open the chart page →

5,670
enbuildenbuildVerified publisher0.0.501 of 6See more

enbuild enbuild 0.0.50

1 of the 6 container images this version deploys carry CVE-2026-22693.

Container imageDigestPackageFixed in
registry.gitlab.com/enbuild-staging/vivsoft-platform-ui/enbuild-mq-consumer:1.0.310e3cd8c7776d
harfbuzz@6.0.0+dfsg-3
no fix listed

Open the chart page →

31,510
iobrokereugen0.2.61 of 1See more

iobroker eugen 0.2.6

1 of the 1 container images this version deploys carry CVE-2026-22693.

Container imageDigestPackageFixed in
ghcr.io/buanet/iobroker:v9.1.2ca7dc7362968
harfbuzz@6.0.0+dfsg-3
no fix listed

Open the chart page →

11,458
castopodh2mVerified publisher1.12.101 of 3See more

castopod h2m 1.12.10

1 of the 3 container images this version deploys carry CVE-2026-22693.

Container imageDigestPackageFixed in
castopod/castopod:1.12.101fd37280cbb2
harfbuzz@6.0.0+dfsg-3
no fix listed

Open the chart page →

10,072
immichimmich-helm0.3.01 of 4See more

immich immich-helm 0.3.0

1 of the 4 container images this version deploys carry CVE-2026-22693.

Container imageDigestPackageFixed in
ghcr.io/immich-app/immich-server:v2.3.1f8d06a32b1b2
harfbuzz@10.2.0-1+b1
10.2.0-1+deb13u1

Open the chart page →

15,712
iris-webappiris-webapp0.2.41 of 2See more

iris-webapp iris-webapp 0.2.4

1 of the 2 container images this version deploys carry CVE-2026-22693.

Container imageDigestPackageFixed in
ghcr.io/dfir-iris/iriswebapp_app:v2.4.26e59ebde55709
harfbuzz@10.2.0-1+b1
10.2.0-1+deb13u1

Open the chart page →

11,764
difykubeblocksVerified publisher0.5.11 of 5See more

dify kubeblocks 0.5.1

1 of the 5 container images this version deploys carry CVE-2026-22693.

Container imageDigestPackageFixed in
langgenius/dify-api:0.6.11fca918260dd6
harfbuzz@6.0.0+dfsg-3
no fix listed

Open the chart page →

20,403
flaresolverrlib42Verified publisher2.0.01 of 1See more

flaresolverr lib42 2.0.0

1 of the 1 container images this version deploys carry CVE-2026-22693.

Container imageDigestPackageFixed in
ghcr.io/flaresolverr/flaresolverr:v3.4.0ab535d1fef5d
harfbuzz@6.0.0+dfsg-3
no fix listed

Open the chart page →

35,050
music-assistant-serverlmatfyVerified publisher0.1.91 of 1See more

music-assistant-server lmatfy 0.1.9

1 of the 1 container images this version deploys carry CVE-2026-22693.

Container imageDigestPackageFixed in
ghcr.io/music-assistant/server:2.7.53522e8a7a8f0
harfbuzz@6.0.0+dfsg-3
no fix listed

Open the chart page →

7,201
flaresolverrm0nsterrr-flaresolverrVerified publisher2.4.11 of 1See more

flaresolverr m0nsterrr-flaresolverr 2.4.1

1 of the 1 container images this version deploys carry CVE-2026-22693.

Container imageDigestPackageFixed in
ghcr.io/flaresolverr/flaresolverr:v3.5.2c80ae007ce2c
harfbuzz@6.0.0+dfsg-3
no fix listed

Open the chart page →

6,136
drillmagasin-drill0.9.01 of 3See more

drill magasin-drill 0.9.0

1 of the 3 container images this version deploys carry CVE-2026-22693.

Container imageDigestPackageFixed in
merlos/zookeeper:3.9.3a38fc7e09ed7
harfbuzz@6.0.0+dfsg-3
no fix listed

Open the chart page →

5,734
photoprismmmontesVerified publisher0.14.01 of 1See more

photoprism mmontes 0.14.0

1 of the 1 container images this version deploys carry CVE-2026-22693.

Container imageDigestPackageFixed in
photoprism/photoprism:251130db16ee6b1ba3
harfbuzz@10.2.0-1
no fix listed

Open the chart page →

11,103
mockservermockserverOfficialVerified publisher7.6.01 of 1See more

mockserver mockserver 7.6.0

1 of the 1 container images this version deploys carry CVE-2026-22693.

Container imageDigestPackageFixed in
mockserver/mockserver:mockserver-7.6.080b3b1a26f35
harfbuzz@6.0.0+dfsg-3
no fix listed

Open the chart page →

1,021
food-managermoreillonVerified publisher0.5.01 of 2See more

food-manager moreillon 0.5.0

1 of the 2 container images this version deploys carry CVE-2026-22693.

Container imageDigestPackageFixed in
moreillon/food-manager:lateste8fd856e593d
harfbuzz@6.0.0+dfsg-3
no fix listed

Open the chart page →

13,738
opentelemetry-demoopentelemetry-helmVerified publisher0.41.11 of 34See more

opentelemetry-demo opentelemetry-helm 0.41.1

1 of the 34 container images this version deploys carry CVE-2026-22693.

Container imageDigestPackageFixed in
ghcr.io/open-telemetry/demo:3.0.0-fraud-detection1cdfd1bcf476
harfbuzz@6.0.0+dfsg-3
no fix listed

Open the chart page →

22,420
portraitportraitVerified publisher0.2.131 of 8See more

portrait portrait 0.2.13

1 of the 8 container images this version deploys carry CVE-2026-22693.

Container imageDigestPackageFixed in
treskon/portrait-web-setup:DEV-latesta475d80e4ecf
harfbuzz@6.0.0+dfsg-3
no fix listed

Open the chart page →

31,844
phpqonstruktVerified publisher0.2.01 of 1See more

php qonstrukt 0.2.0

1 of the 1 container images this version deploys carry CVE-2026-22693.

Container imageDigestPackageFixed in
qonstrukt/php:8.4-v8-apache089af7925aa1
harfbuzz@8.3.0-2build2
no fix listed

Open the chart page →

23,964
fluent-bitromanow-helm-chartsVerified publisher1.7.31 of 1See more

fluent-bit romanow-helm-charts 1.7.3

1 of the 1 container images this version deploys carry CVE-2026-22693.

Container imageDigestPackageFixed in
fluent/fluent-bit:4.0-debuge76397ef3983
harfbuzz@6.0.0+dfsg-3
no fix listed

Open the chart page →

7,740
rstudio-pmrstudioVerified publisher0.20.51 of 1See more

rstudio-pm rstudio 0.20.5

1 of the 1 container images this version deploys carry CVE-2026-22693.

Container imageDigestPackageFixed in
posit/package-manager:2026.09.0-ubuntu-24.04527493ef621b
harfbuzz@8.3.0-2build2
no fix listed

Open the chart page →

1,324
kyoorubxkubeVerified publisher0.1.102 of 9See more

kyoo rubxkube 0.1.10

2 of the 9 container images this version deploys carry CVE-2026-22693.

Container imageDigestPackageFixed in
ghcr.io/zoriya/kyoo_autosync:4.7.1fbba58ddb1a6
harfbuzz@6.0.0+dfsg-3
no fix listed
ghcr.io/zoriya/kyoo_scanner:4.7.17dc0ee57b628
harfbuzz@6.0.0+dfsg-3
no fix listed

Open the chart page →

30,234
uptime-kumasb-helm-charts0.4.01 of 1See more

uptime-kuma sb-helm-charts 0.4.0

1 of the 1 container images this version deploys carry CVE-2026-22693.

Container imageDigestPackageFixed in
louislam/uptime-kuma:2.0.24c364ef96aad
harfbuzz@6.0.0+dfsg-3
no fix listed

Open the chart page →

38,107
sogosogoVerified publisher0.3.51 of 2See more

sogo sogo 0.3.5

1 of the 2 container images this version deploys carry CVE-2026-22693.

Container imageDigestPackageFixed in
sonroyaalmerol/docker-sogo:5.12.43f60f3abe990
harfbuzz@10.2.0-1+b1
10.2.0-1+deb13u1

Open the chart page →

7,126

Container images carrying it

199 by charts deploying them

A fixed version is listed for 1 of the 1 affected package.

Container imageDigestPackageFixed inUsed by
intelowlproject/intelowl:v6.6.10b22e547ea6b
harfbuzz@6.0.0+dfsg-3
no fix listed
1
itzg/minecraft-server:2026.9.04e29d14082d9
harfbuzz@8.3.0-2build2
no fix listed
1
itzg/minecraft-server:latest8672e335dbef
harfbuzz@8.3.0-2build2
no fix listed
1
jaedb/iris:latest048cfbf58d57
harfbuzz@6.0.0+dfsg-3
no fix listed
1
kinseii/wazuh-agent:4.14.17160eb143728
harfbuzz@6.0.0+dfsg-3
no fix listed
1
knspar/phronetis-operator:0.1.60c4f0543ee58
harfbuzz@6.0.0+dfsg-3
no fix listed
1
laly9999/node-app:1dd0e503913e1
harfbuzz@6.0.0+dfsg-3
no fix listed
1
langgenius/dify-api:0.6.11fca918260dd6
harfbuzz@6.0.0+dfsg-3
no fix listed
1
langgenius/dify-plugin-daemon:0.6.3-local3c694329357b
harfbuzz@8.3.0-2build2
no fix listed
1
langgenius/dify-plugin-daemon:0.5.1-local8269050f192e
harfbuzz@8.3.0-2build2
no fix listed
1
langgenius/dify-plugin-daemon:main-localda995c129e2f
harfbuzz@8.3.0-2build2
no fix listed
1
library/nextcloud:31.0.6-apache588609d76b21
harfbuzz@6.0.0+dfsg-3
no fix listed
1
library/nextcloud:31.0.10-apacheb7faa1653c39
harfbuzz@10.2.0-1+b1
10.2.0-1+deb13u1
1
library/node:208f693eaa7e0a
harfbuzz@6.0.0+dfsg-3
no fix listed
1
library/python:3.8d41127070014
harfbuzz@6.0.0+dfsg-3
no fix listed
1
library/python:3.9da5aee29682d
harfbuzz@10.2.0-1+b1
10.2.0-1+deb13u1
1
louislam/uptime-kuma:2.5.33e24e96c89ef
harfbuzz@6.0.0+dfsg-3
no fix listed
1
louislam/uptime-kuma:2.0.24c364ef96aad
harfbuzz@6.0.0+dfsg-3
no fix listed
1
louislam/uptime-kuma:2.4.091e963bfda56
harfbuzz@6.0.0+dfsg-3
no fix listed
1
mathesar/mathesar:0.12.0091757cb01fe
harfbuzz@6.0.0+dfsg-3
no fix listed
1
merlos/zookeeper:3.9.3a38fc7e09ed7
harfbuzz@6.0.0+dfsg-3
no fix listed
1
mindsdb/mindsdb:latest163011c09299
harfbuzz@10.2.0-1+b1
10.2.0-1+deb13u1
1
mintproject/model-catalog-fastapi:7dd88dc5bf1fe6a6d4703ea0a077afee45cb256102260d20a21f
harfbuzz@6.0.0+dfsg-3
no fix listed
1
mockserver/mockserver:mockserver-7.6.080b3b1a26f35
harfbuzz@6.0.0+dfsg-3
no fix listed
1
moreillon/api-proxy:latestd7d4a5463525
harfbuzz@6.0.0+dfsg-3
no fix listed
1
moreillon/food-manager:lateste8fd856e593d
harfbuzz@6.0.0+dfsg-3
no fix listed
1
moreillon/group-manager:latest3caa8f710ee0
harfbuzz@6.0.0+dfsg-3
no fix listed
1
moreillon/user-manager-mongoose:v5.0.1d2ee0423b797
harfbuzz@6.0.0+dfsg-3
no fix listed
1
muhammedgamal/fp23:latest74b4cd69b6fa
harfbuzz@6.0.0+dfsg-3
no fix listed
1
oneuptime/probe:release6b2d98713711
harfbuzz@6.0.0+dfsg-3
no fix listed
1
opea/codegen-ui:1.02bee4eb66f3e
harfbuzz@6.0.0+dfsg-3
no fix listed
1
opea/codetrans-ui:1.03ef121f34610
harfbuzz@6.0.0+dfsg-3
no fix listed
1
opea/docsum-ui:1.07f854e9bffaf
harfbuzz@6.0.0+dfsg-3
no fix listed
1
opea/speecht5:1.0249afad3d268
harfbuzz@6.0.0+dfsg-3
no fix listed
1
openaev/platform:3.260904.00a12ce8b3db9
harfbuzz@8.3.0-2build2
no fix listed
1
opencsghq/agenticflow:ee-v0.6-52f03fead54db
harfbuzz@6.0.0+dfsg-3
no fix listed
1
opendatacube/explorer:latest120457ffcd69
harfbuzz@8.3.0-2build2
no fix listed
1
openproject/hocuspocus:release-338001b288dc1359dfb5
harfbuzz@6.0.0+dfsg-3
no fix listed
1
phan2410/falcon-asgi-server:0.1.04a86d138832d
harfbuzz@6.0.0+dfsg-3
no fix listed
1
photoprism/photoprism:251130db16ee6b1ba3
harfbuzz@10.2.0-1
no fix listed
1
photoprism/photoprism:240711-cefc6fd632ca74
harfbuzz@8.3.0-2build2
no fix listed
1
posit/package-manager:2026.09.0-ubuntu-24.04527493ef621b
harfbuzz@8.3.0-2build2
no fix listed
1
qonstrukt/php:8.4-v8-apache089af7925aa1
harfbuzz@8.3.0-2build2
no fix listed
1
ryshe/terraria:latestb1c89f7f359a
harfbuzz@6.0.0+dfsg-3
no fix listed
1
sashafefler/spacecapybara_app:latestf96d7804c0ca
harfbuzz@6.0.0+dfsg-3
no fix listed
1
sbs20/scanservjs:release-v3.0.3dad1fd6e9a98
harfbuzz@6.0.0+dfsg-3
no fix listed
1
selenium/node-chrome:4.48.0-202609055ac71fd8dd1e
harfbuzz@8.3.0-2build2
no fix listed
1
selenium/node-firefox:4.48.0-2026090574a5c1c90f95
harfbuzz@8.3.0-2build2
no fix listed
1
signalen/backend:2.50.14760256000738
harfbuzz@6.0.0+dfsg-3
no fix listed
1
sissbruecker/linkding:1.41.0-plusa222fb777e1f
harfbuzz@6.0.0+dfsg-3
no fix listed
1

syft 1.42.1 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.