StackRadar

CVE-2026-22693

Medium

Advisory

Published 10 Jan 2026In the index since 5 Sept 2026
Severity
Medium
worst across findings
CVSS
5.3
base score, highest
EPSS
0.004
37th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
215
of 17,781 indexed, latest versions
Container images
199
deployed by those charts
Fix available
1 of 1
affected package

The matching OSV records carry no description.

Carried by container images the latest versions of 215 of 17,781 indexed charts deploy, on 199 images.

Affected packageAffected versionsFixed inImages
harfbuzzdeb6.0.0+dfsg-3, 8.3.0-2build2, 10.2.0-1, 10.2.0-1+b110.2.0-1+deb13u1199
OSV records
DEBIAN-CVE-2026-22693UBUNTU-CVE-2026-22693

Charts affected

215 by stars
ChartLatestAffected imagesRadar Score
uptime-kumauptime-kumaVerified publisher4.2.01 of 1See more

uptime-kuma uptime-kuma 4.2.0

1 of the 1 container images this version deploys carry CVE-2026-22693.

Container imageDigestPackageFixed in
louislam/uptime-kuma:2.5.0a8610b3b4c38
harfbuzz@6.0.0+dfsg-3
no fix listed

Open the chart page →

30,159
zabbixzabbix-communityVerified publisher7.1.01 of 5See more

zabbix zabbix-community 7.1.0

1 of the 5 container images this version deploys carry CVE-2026-22693.

Container imageDigestPackageFixed in
zabbix/zabbix-web-service:ubuntu-7.0.23915b3183e054
harfbuzz@8.3.0-2build2
no fix listed

Open the chart page →

13,664
chaos-meshchaos-meshVerified publisher2.8.41 of 4See more

chaos-mesh chaos-mesh 2.8.4

1 of the 4 container images this version deploys carry CVE-2026-22693.

Container imageDigestPackageFixed in
ghcr.io/chaos-mesh/chaos-daemon:v2.8.40d28dbd95b03
harfbuzz@6.0.0+dfsg-3
no fix listed

Open the chart page →

6,342
difydoubanVerified publisher0.10.01 of 6See more

dify douban 0.10.0

1 of the 6 container images this version deploys carry CVE-2026-22693.

Container imageDigestPackageFixed in
langgenius/dify-plugin-daemon:0.5.1-local8269050f192e
harfbuzz@8.3.0-2build2
no fix listed

Open the chart page →

19,391
difydify-helmVerified publisher0.38.01 of 11See more

dify dify-helm 0.38.0

1 of the 11 container images this version deploys carry CVE-2026-22693.

Container imageDigestPackageFixed in
langgenius/dify-plugin-daemon:0.6.3-local3c694329357b
harfbuzz@8.3.0-2build2
no fix listed

Open the chart page →

22,002
openprojectopenproject-helm-chartsOfficialVerified publisher13.11.01 of 5See more

openproject openproject-helm-charts 13.11.0

1 of the 5 container images this version deploys carry CVE-2026-22693.

Container imageDigestPackageFixed in
openproject/hocuspocus:release-338001b288dc1359dfb5
harfbuzz@6.0.0+dfsg-3
no fix listed

Open the chart page →

19,926
wazuhwazuh-helm-morgovedVerified publisher2.0.71 of 5See more

wazuh wazuh-helm-morgoved 2.0.7

1 of the 5 container images this version deploys carry CVE-2026-22693.

Container imageDigestPackageFixed in
kinseii/wazuh-agent:4.14.17160eb143728
harfbuzz@6.0.0+dfsg-3
no fix listed

Open the chart page →

11,384
oneuptimeoneuptimeOfficialVerified publisher13.0.41 of 7See more

oneuptime oneuptime 13.0.4

1 of the 7 container images this version deploys carry CVE-2026-22693.

Container imageDigestPackageFixed in
oneuptime/probe:release6b2d98713711
harfbuzz@6.0.0+dfsg-3
no fix listed

Open the chart page →

11,192
druiddruid-helmVerified publisher37.0.21 of 3See more

druid druid-helm 37.0.2

1 of the 3 container images this version deploys carry CVE-2026-22693.

Container imageDigestPackageFixed in
apache/druid:37.0.00116fb802786
harfbuzz@6.0.0+dfsg-3
no fix listed

Open the chart page →

3,812
openclawopenclawVerified publisher1.91.31 of 2See more

openclaw openclaw 1.91.3

1 of the 2 container images this version deploys carry CVE-2026-22693.

Container imageDigestPackageFixed in
ghcr.io/browserless/chromium:v2.56.7b1ba7b054af2
harfbuzz@8.3.0-2build2
no fix listed

Open the chart page →

2,977
wazuh-agentavistoVerified publisher4.12.21 of 1See more

wazuh-agent avisto 4.12.2

1 of the 1 container images this version deploys carry CVE-2026-22693.

Container imageDigestPackageFixed in
ghcr.io/avistotelecom/docker-wazuh-agent:4.12.08766ba08bf1a
harfbuzz@6.0.0+dfsg-3
no fix listed

Open the chart page →

6,457
selenium-gridselenium-grid0.59.12 of 4See more

selenium-grid selenium-grid 0.59.1

2 of the 4 container images this version deploys carry CVE-2026-22693.

Container imageDigestPackageFixed in
selenium/node-chrome:4.48.0-202609055ac71fd8dd1e
harfbuzz@8.3.0-2build2
no fix listed
selenium/node-firefox:4.48.0-2026090574a5c1c90f95
harfbuzz@8.3.0-2build2
no fix listed

Open the chart page →

7,028
druidwiremindVerified publisher1.22.11 of 3See more

druid wiremind 1.22.1

1 of the 3 container images this version deploys carry CVE-2026-22693.

Container imageDigestPackageFixed in
apache/druid:29.0.10cef139b6bf1
harfbuzz@6.0.0+dfsg-3
no fix listed

Open the chart page →

7,930
karakeephelmforgeVerified publisher1.2.92 of 3See more

karakeep helmforge 1.2.9

2 of the 3 container images this version deploys carry CVE-2026-22693.

Container imageDigestPackageFixed in
ghcr.io/browserless/chromium:v2.55.42ed0183564d7
harfbuzz@8.3.0-2build2
no fix listed
ghcr.io/karakeep-app/karakeep:0.33.2b069e4307dec
harfbuzz@6.0.0+dfsg-3
no fix listed

Open the chart page →

9,460
kubeflowkubeflow1.6.21 of 45See more

kubeflow kubeflow 1.6.2

1 of the 45 container images this version deploys carry CVE-2026-22693.

Container imageDigestPackageFixed in
library/python:3.7eedf63967cdb
harfbuzz@6.0.0+dfsg-3
no fix listed

Open the chart page →

96,941
local-ailocalai3.4.21 of 1See more

local-ai localai 3.4.2

1 of the 1 container images this version deploys carry CVE-2026-22693.

Container imageDigestPackageFixed in
quay.io/go-skynet/local-ai:latestd78cd113b2bc
harfbuzz@8.3.0-2build2
no fix listed

Open the chart page →

3,997
grafana-pdf-exporterwiremindVerified publisher2.1.11 of 1See more

grafana-pdf-exporter wiremind 2.1.1

1 of the 1 container images this version deploys carry CVE-2026-22693.

Container imageDigestPackageFixed in
ghcr.io/wiremind/grafana-pdf-exporter:v1.7dbaa8527bf4c
harfbuzz@6.0.0+dfsg-3
no fix listed

Open the chart page →

9,746
thingsboardcetic0.1.21 of 2See more

thingsboard cetic 0.1.2

1 of the 2 container images this version deploys carry CVE-2026-22693.

Container imageDigestPackageFixed in
thingsboard/tb-postgres:latest2d17e4e36edc
harfbuzz@6.0.0+dfsg-3
no fix listed

Open the chart page →

5,235
dask-kubernetes-operatordask2026.3.01 of 1See more

dask-kubernetes-operator dask 2026.3.0

1 of the 1 container images this version deploys carry CVE-2026-22693.

Container imageDigestPackageFixed in
ghcr.io/dask/dask-kubernetes-operator:2026.3.03225d2bc6b3c
harfbuzz@10.2.0-1+b1
10.2.0-1+deb13u1

Open the chart page →

9,316
terrariahalkeye0.4.21 of 2See more

terraria halkeye 0.4.2

1 of the 2 container images this version deploys carry CVE-2026-22693.

Container imageDigestPackageFixed in
ryshe/terraria:latestb1c89f7f359a
harfbuzz@6.0.0+dfsg-3
no fix listed

Open the chart page →

4,127
coreinstill-aiOfficialVerified publisher0.1.751 of 15See more

core instill-ai 0.1.75

1 of the 15 container images this version deploys carry CVE-2026-22693.

Container imageDigestPackageFixed in
instill/artifact-backend:b28766ac4a393e601ed
harfbuzz@10.2.0-1+b1
10.2.0-1+deb13u1

Open the chart page →

30,816
structurizrvirtualrootVerified publisher0.5.01 of 1See more

structurizr virtualroot 0.5.0

1 of the 1 container images this version deploys carry CVE-2026-22693.

Container imageDigestPackageFixed in
structurizr/onpremises:2025.11.094b5ffb5119c8
harfbuzz@8.3.0-2build2
no fix listed

Open the chart page →

4,378
paperless-ngxalexmorbo-paperless-ngxVerified publisher0.2.01 of 2See more

paperless-ngx alexmorbo-paperless-ngx 0.2.0

1 of the 2 container images this version deploys carry CVE-2026-22693.

Container imageDigestPackageFixed in
ghcr.io/paperless-ngx/paperless-ngx:2.20.5665f2f5cc548
harfbuzz@10.2.0-1+b1
10.2.0-1+deb13u1

Open the chart page →

12,037
cosmotech-copilot-apicosmotech-apiVerified publisher0.1.11 of 1See more

cosmotech-copilot-api cosmotech-api 0.1.1

1 of the 1 container images this version deploys carry CVE-2026-22693.

Container imageDigestPackageFixed in
ghcr.io/cosmo-tech/cosmotech-copilot-api:latesta2be95de450c
harfbuzz@10.2.0-1+b1
10.2.0-1+deb13u1

Open the chart page →

11,205
paperless-ngxcrystalnetVerified publisher0.2.221 of 3See more

paperless-ngx crystalnet 0.2.22

1 of the 3 container images this version deploys carry CVE-2026-22693.

Container imageDigestPackageFixed in
ghcr.io/paperless-ngx/paperless-ngx:2.13.10642357c5dbd
harfbuzz@6.0.0+dfsg-3
no fix listed

Open the chart page →

13,761
datacube-explorerdatacube-charts0.5.321 of 1See more

datacube-explorer datacube-charts 0.5.32

1 of the 1 container images this version deploys carry CVE-2026-22693.

Container imageDigestPackageFixed in
opendatacube/explorer:latest120457ffcd69
harfbuzz@8.3.0-2build2
no fix listed

Open the chart page →

4,854
dragonfly-stackdragonflyVerified publisher0.1.21 of 7See more

dragonfly-stack dragonfly 0.1.2

1 of the 7 container images this version deploys carry CVE-2026-22693.

Container imageDigestPackageFixed in
dragonflyoss/client:v0.1.82edf3e921f4e0
harfbuzz@6.0.0+dfsg-3
no fix listed

Open the chart page →

18,376
craftycontrollerdrewburr-labs-helm-chartsVerified publisher0.3.01 of 1See more

craftycontroller drewburr-labs-helm-charts 0.3.0

1 of the 1 container images this version deploys carry CVE-2026-22693.

Container imageDigestPackageFixed in
registry.gitlab.com/crafty-controller/crafty-4:latest166a06f73d8c
harfbuzz@8.3.0-2build2
no fix listed

Open the chart page →

3,671
rstudiodsri-helm-charts0.1.281 of 1See more

rstudio dsri-helm-charts 0.1.28

1 of the 1 container images this version deploys carry CVE-2026-22693.

Container imageDigestPackageFixed in
ghcr.io/maastrichtu-ids/rstudio:latest981aa4c109e1
harfbuzz@8.3.0-2build2
no fix listed

Open the chart page →

5,670
enbuildenbuildVerified publisher0.0.501 of 6See more

enbuild enbuild 0.0.50

1 of the 6 container images this version deploys carry CVE-2026-22693.

Container imageDigestPackageFixed in
registry.gitlab.com/enbuild-staging/vivsoft-platform-ui/enbuild-mq-consumer:1.0.310e3cd8c7776d
harfbuzz@6.0.0+dfsg-3
no fix listed

Open the chart page →

31,510
iobrokereugen0.2.61 of 1See more

iobroker eugen 0.2.6

1 of the 1 container images this version deploys carry CVE-2026-22693.

Container imageDigestPackageFixed in
ghcr.io/buanet/iobroker:v9.1.2ca7dc7362968
harfbuzz@6.0.0+dfsg-3
no fix listed

Open the chart page →

11,458
castopodh2mVerified publisher1.12.101 of 3See more

castopod h2m 1.12.10

1 of the 3 container images this version deploys carry CVE-2026-22693.

Container imageDigestPackageFixed in
castopod/castopod:1.12.101fd37280cbb2
harfbuzz@6.0.0+dfsg-3
no fix listed

Open the chart page →

10,072
immichimmich-helm0.3.01 of 4See more

immich immich-helm 0.3.0

1 of the 4 container images this version deploys carry CVE-2026-22693.

Container imageDigestPackageFixed in
ghcr.io/immich-app/immich-server:v2.3.1f8d06a32b1b2
harfbuzz@10.2.0-1+b1
10.2.0-1+deb13u1

Open the chart page →

15,712
iris-webappiris-webapp0.2.41 of 2See more

iris-webapp iris-webapp 0.2.4

1 of the 2 container images this version deploys carry CVE-2026-22693.

Container imageDigestPackageFixed in
ghcr.io/dfir-iris/iriswebapp_app:v2.4.26e59ebde55709
harfbuzz@10.2.0-1+b1
10.2.0-1+deb13u1

Open the chart page →

11,764
difykubeblocksVerified publisher0.5.11 of 5See more

dify kubeblocks 0.5.1

1 of the 5 container images this version deploys carry CVE-2026-22693.

Container imageDigestPackageFixed in
langgenius/dify-api:0.6.11fca918260dd6
harfbuzz@6.0.0+dfsg-3
no fix listed

Open the chart page →

20,403
flaresolverrlib42Verified publisher2.0.01 of 1See more

flaresolverr lib42 2.0.0

1 of the 1 container images this version deploys carry CVE-2026-22693.

Container imageDigestPackageFixed in
ghcr.io/flaresolverr/flaresolverr:v3.4.0ab535d1fef5d
harfbuzz@6.0.0+dfsg-3
no fix listed

Open the chart page →

35,050
music-assistant-serverlmatfyVerified publisher0.1.91 of 1See more

music-assistant-server lmatfy 0.1.9

1 of the 1 container images this version deploys carry CVE-2026-22693.

Container imageDigestPackageFixed in
ghcr.io/music-assistant/server:2.7.53522e8a7a8f0
harfbuzz@6.0.0+dfsg-3
no fix listed

Open the chart page →

7,201
flaresolverrm0nsterrr-flaresolverrVerified publisher2.4.11 of 1See more

flaresolverr m0nsterrr-flaresolverr 2.4.1

1 of the 1 container images this version deploys carry CVE-2026-22693.

Container imageDigestPackageFixed in
ghcr.io/flaresolverr/flaresolverr:v3.5.2c80ae007ce2c
harfbuzz@6.0.0+dfsg-3
no fix listed

Open the chart page →

6,136
drillmagasin-drill0.9.01 of 3See more

drill magasin-drill 0.9.0

1 of the 3 container images this version deploys carry CVE-2026-22693.

Container imageDigestPackageFixed in
merlos/zookeeper:3.9.3a38fc7e09ed7
harfbuzz@6.0.0+dfsg-3
no fix listed

Open the chart page →

5,734
photoprismmmontesVerified publisher0.14.01 of 1See more

photoprism mmontes 0.14.0

1 of the 1 container images this version deploys carry CVE-2026-22693.

Container imageDigestPackageFixed in
photoprism/photoprism:251130db16ee6b1ba3
harfbuzz@10.2.0-1
no fix listed

Open the chart page →

11,103
mockservermockserverOfficialVerified publisher7.6.01 of 1See more

mockserver mockserver 7.6.0

1 of the 1 container images this version deploys carry CVE-2026-22693.

Container imageDigestPackageFixed in
mockserver/mockserver:mockserver-7.6.080b3b1a26f35
harfbuzz@6.0.0+dfsg-3
no fix listed

Open the chart page →

1,021
food-managermoreillonVerified publisher0.5.01 of 2See more

food-manager moreillon 0.5.0

1 of the 2 container images this version deploys carry CVE-2026-22693.

Container imageDigestPackageFixed in
moreillon/food-manager:lateste8fd856e593d
harfbuzz@6.0.0+dfsg-3
no fix listed

Open the chart page →

13,738
opentelemetry-demoopentelemetry-helmVerified publisher0.41.11 of 34See more

opentelemetry-demo opentelemetry-helm 0.41.1

1 of the 34 container images this version deploys carry CVE-2026-22693.

Container imageDigestPackageFixed in
ghcr.io/open-telemetry/demo:3.0.0-fraud-detection1cdfd1bcf476
harfbuzz@6.0.0+dfsg-3
no fix listed

Open the chart page →

22,420
portraitportraitVerified publisher0.2.131 of 8See more

portrait portrait 0.2.13

1 of the 8 container images this version deploys carry CVE-2026-22693.

Container imageDigestPackageFixed in
treskon/portrait-web-setup:DEV-latesta475d80e4ecf
harfbuzz@6.0.0+dfsg-3
no fix listed

Open the chart page →

31,844
phpqonstruktVerified publisher0.2.01 of 1See more

php qonstrukt 0.2.0

1 of the 1 container images this version deploys carry CVE-2026-22693.

Container imageDigestPackageFixed in
qonstrukt/php:8.4-v8-apache089af7925aa1
harfbuzz@8.3.0-2build2
no fix listed

Open the chart page →

23,964
fluent-bitromanow-helm-chartsVerified publisher1.7.31 of 1See more

fluent-bit romanow-helm-charts 1.7.3

1 of the 1 container images this version deploys carry CVE-2026-22693.

Container imageDigestPackageFixed in
fluent/fluent-bit:4.0-debuge76397ef3983
harfbuzz@6.0.0+dfsg-3
no fix listed

Open the chart page →

7,740
rstudio-pmrstudioVerified publisher0.20.51 of 1See more

rstudio-pm rstudio 0.20.5

1 of the 1 container images this version deploys carry CVE-2026-22693.

Container imageDigestPackageFixed in
posit/package-manager:2026.09.0-ubuntu-24.04527493ef621b
harfbuzz@8.3.0-2build2
no fix listed

Open the chart page →

1,324
kyoorubxkubeVerified publisher0.1.102 of 9See more

kyoo rubxkube 0.1.10

2 of the 9 container images this version deploys carry CVE-2026-22693.

Container imageDigestPackageFixed in
ghcr.io/zoriya/kyoo_autosync:4.7.1fbba58ddb1a6
harfbuzz@6.0.0+dfsg-3
no fix listed
ghcr.io/zoriya/kyoo_scanner:4.7.17dc0ee57b628
harfbuzz@6.0.0+dfsg-3
no fix listed

Open the chart page →

30,234
uptime-kumasb-helm-charts0.4.01 of 1See more

uptime-kuma sb-helm-charts 0.4.0

1 of the 1 container images this version deploys carry CVE-2026-22693.

Container imageDigestPackageFixed in
louislam/uptime-kuma:2.0.24c364ef96aad
harfbuzz@6.0.0+dfsg-3
no fix listed

Open the chart page →

38,107
sogosogoVerified publisher0.3.51 of 2See more

sogo sogo 0.3.5

1 of the 2 container images this version deploys carry CVE-2026-22693.

Container imageDigestPackageFixed in
sonroyaalmerol/docker-sogo:5.12.43f60f3abe990
harfbuzz@10.2.0-1+b1
10.2.0-1+deb13u1

Open the chart page →

7,126

Container images carrying it

199 by charts deploying them

A fixed version is listed for 1 of the 1 affected package.

Container imageDigestPackageFixed inUsed by
ghcr.io/cjmalloy/jasper:v1.3.282726a947bb65b
harfbuzz@6.0.0+dfsg-3
no fix listed
1
ghcr.io/cosmo-tech/cosmotech-copilot-api:latesta2be95de450c
harfbuzz@10.2.0-1+b1
10.2.0-1+deb13u1
1
ghcr.io/cosmo-workspace/dev-code-server:v0.0.316fda01ae58a
harfbuzz@6.0.0+dfsg-3
no fix listed
1
ghcr.io/dask/dask-kubernetes-operator:2026.3.03225d2bc6b3c
harfbuzz@10.2.0-1+b1
10.2.0-1+deb13u1
1
ghcr.io/dfir-iris/iriswebapp_app:v2.4.26e59ebde55709
harfbuzz@10.2.0-1+b1
10.2.0-1+deb13u1
1
ghcr.io/drewburr-labs/mum-discord-bot:3.1.26e82914e1051
harfbuzz@6.0.0+dfsg-3
no fix listed
1
ghcr.io/firecrawl/playwright-service:latest1f6eba640320
harfbuzz@6.0.0+dfsg-3
no fix listed
1
ghcr.io/flaresolverr/flaresolverr:v3.4.0ab535d1fef5d
harfbuzz@6.0.0+dfsg-3
no fix listed
1
ghcr.io/graphprotocol/availability-oracle:sha-28312fd472a25038957
harfbuzz@6.0.0+dfsg-3
no fix listed
1
ghcr.io/immich-app/immich-server:v2.3.1f8d06a32b1b2
harfbuzz@10.2.0-1+b1
10.2.0-1+deb13u1
1
ghcr.io/itzg/minecraft-server:latestc1a267d9ed6d
harfbuzz@8.3.0-2build2
no fix listed
1
ghcr.io/jfwenisch/steamcmd-manager:v0.4.5dab685e668d9
harfbuzz@8.3.0-2build2
no fix listed
1
ghcr.io/jfwenisch/webtools:v0.1.44569cae83c70
harfbuzz@8.3.0-2build2
no fix listed
1
ghcr.io/karakeep-app/karakeep:0.33.2b069e4307dec
harfbuzz@6.0.0+dfsg-3
no fix listed
1
ghcr.io/libreconnect/ferriscompany:0.1.0-rc6ed86db9f0efe
harfbuzz@6.0.0+dfsg-3
no fix listed
1
ghcr.io/linkwarden/linkwarden:v2.16.30664c28a039b
harfbuzz@6.0.0+dfsg-3
no fix listed
1
ghcr.io/maastrichtu-ids/rstudio:latest981aa4c109e1
harfbuzz@8.3.0-2build2
no fix listed
1
ghcr.io/maybe-finance/maybe:0.5.0c6ab95ca9130
harfbuzz@6.0.0+dfsg-3
no fix listed
1
ghcr.io/music-assistant/server:2.7.53522e8a7a8f0
harfbuzz@6.0.0+dfsg-3
no fix listed
1
ghcr.io/music-assistant/server:2.9.950666a6f8d7f
harfbuzz@6.0.0+dfsg-3
no fix listed
1
ghcr.io/music-assistant/server:2.8.7eef3ee7810d0
harfbuzz@6.0.0+dfsg-3
no fix listed
1
ghcr.io/nefelim4ag/pingdom-operator:0.0.15f8c7afdcf439
harfbuzz@6.0.0+dfsg-3
no fix listed
1
ghcr.io/opencost/opencost-parquet-exporter:v0.2.1ce85ef0ce665
harfbuzz@6.0.0+dfsg-3
no fix listed
1
ghcr.io/open-telemetry/demo:3.0.0-fraud-detection1cdfd1bcf476
harfbuzz@6.0.0+dfsg-3
no fix listed
1
ghcr.io/open-telemetry/demo:1.12.0-loadgenerator85c9935ff31b
harfbuzz@6.0.0+dfsg-3
no fix listed
1
ghcr.io/openunison/openunison-k8s:1.0.509ad450220ab9
harfbuzz@8.3.0-2build2
no fix listed
1
ghcr.io/paperless-ngx/paperless-ngx:2.13.10642357c5dbd
harfbuzz@6.0.0+dfsg-3
no fix listed
1
ghcr.io/paperless-ngx/paperless-ngx:2.20.134b05bcd28e69
harfbuzz@10.2.0-1+b1
10.2.0-1+deb13u1
1
ghcr.io/paperless-ngx/paperless-ngx:2.20.357ad9565bff3
harfbuzz@10.2.0-1+b1
10.2.0-1+deb13u1
1
ghcr.io/paperless-ngx/paperless-ngx:2.20.5665f2f5cc548
harfbuzz@10.2.0-1+b1
10.2.0-1+deb13u1
1
ghcr.io/paperless-ngx/paperless-ngx:2.0.1ab255bea133e
harfbuzz@6.0.0+dfsg-3
no fix listed
1
ghcr.io/paperless-ngx/paperless-ngx:2.20.14b89f83345532
harfbuzz@10.2.0-1+b1
10.2.0-1+deb13u1
1
ghcr.io/sdwbgn/unitycatalog-helm/docker/unitycatalog-ui:0.2.1-5d668c1ed07e7ca098d
harfbuzz@6.0.0+dfsg-3
no fix listed
1
ghcr.io/stirling-tools/stirling-pdf:2.14.33b3670fce70b
harfbuzz@8.3.0-2build2
no fix listed
1
ghcr.io/suwayomi/suwayomi-server:v2.3.2320d2c3218c7f9f
harfbuzz@8.3.0-2build2
no fix listed
1
ghcr.io/wgbh-mla/pbcore-util:pr-66e04659a3baa
harfbuzz@6.0.0+dfsg-3
no fix listed
1
ghcr.io/wiremind/grafana-pdf-exporter:v1.7dbaa8527bf4c
harfbuzz@6.0.0+dfsg-3
no fix listed
1
ghcr.io/wizarrrr/wizarr:4.2.0-beta.3d19d886d5090
harfbuzz@6.0.0+dfsg-3
no fix listed
1
ghcr.io/yurymkomarov/docker/kubernetes-kiosk-chromium:0.1.27bff29dcec72
harfbuzz@6.0.0+dfsg-3
no fix listed
1
ghcr.io/zoriya/kyoo_autosync:4.7.1fbba58ddb1a6
harfbuzz@6.0.0+dfsg-3
no fix listed
1
ghcr.io/zoriya/kyoo_scanner:4.7.17dc0ee57b628
harfbuzz@6.0.0+dfsg-3
no fix listed
1
public.ecr.aws/jtekt-corporation/image-storage-service:v1.16.17b1493760c716
harfbuzz@6.0.0+dfsg-3
no fix listed
1
public.ecr.aws/jtekt-corporation/shinsei-manager:v2.8.15cd62142d6ed
harfbuzz@6.0.0+dfsg-3
no fix listed
1
public.ecr.aws/jtekt-corporation/time-series-storage-service:v1.5.1046ef5c9ed50
harfbuzz@6.0.0+dfsg-3
no fix listed
1
public.ecr.aws/truefoundrycloud/async-service-distributor:5d48113bc678d694a0c8f8dabb2207c5aa2cfc53f74851ce31f5
harfbuzz@6.0.0+dfsg-3
no fix listed
1
quay.io/go-skynet/local-ai:latestd78cd113b2bc
harfbuzz@8.3.0-2build2
no fix listed
1
quay.io/yushiwho/api:e1f9d77e0d9b93dbf2b
harfbuzz@6.0.0+dfsg-3
no fix listed
1
registry.gitlab.com/crafty-controller/crafty-4:latest166a06f73d8c
harfbuzz@8.3.0-2build2
no fix listed
1
registry.gitlab.com/enbuild-staging/vivsoft-platform-ui/enbuild-mq-consumer:1.0.310e3cd8c7776d
harfbuzz@6.0.0+dfsg-3
no fix listed
1

syft 1.42.1 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.