StackRadar

CVE-2026-25068

Medium

Advisory

Published 29 Jan 2026In the index since 5 Sept 2026
Severity
Medium
worst across findings
CVSS
4.6
base score, highest
EPSS
0.002
8th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
191
of 17,787 indexed, latest versions
Container images
179
deployed by those charts
Fix available
1 of 1
affected package

alsa-lib - security update

Carried by container images the latest versions of 191 of 17,787 indexed charts deploy, on 179 images.

Affected packageAffected versionsFixed inImages
alsa-libdeb1.2.2-2.1ubuntu2.3, 1.2.2-2.1ubuntu2.4, 1.2.2-2.1ubuntu2.5, 1.2.4-1.1+6 more1.2.2-2.1ubuntu2.5+esm1, 1.2.4-1.1+deb11u1, 1.2.6.1-1ubuntu1.1, 1.2.11-1ubuntu0.2+2 more179
OSV records
DEBIAN-CVE-2026-25068UBUNTU-CVE-2026-25068DLA-4469-1
Also known as
USN-8044-1, USN-8044-2

Charts affected

191 by stars
ChartLatestAffected imagesRadar Score
cloakbrowser-mcpobeoneVerified publisher0.3.11 of 1See more

cloakbrowser-mcp obeone 0.3.1

1 of the 1 container images this version deploys carry CVE-2026-25068.

Container imageDigestPackageFixed in
swimmwatch/cloakbrowser-mcp:1.13.0d48c705a58c8
alsa-lib@1.2.8-1+b1
no fix listed

Open the chart page →

2,055
firecrawlobeoneVerified publisher3.0.31 of 5See more

firecrawl obeone 3.0.3

1 of the 5 container images this version deploys carry CVE-2026-25068.

Container imageDigestPackageFixed in
ghcr.io/firecrawl/playwright-service:latest1f6eba640320
alsa-lib@1.2.8-1+b1
no fix listed

Open the chart page →

9,895
pulsarolehrgfVerified publisher0.0.51 of 2See more

pulsar olehrgf 0.0.5

1 of the 2 container images this version deploys carry CVE-2026-25068.

Container imageDigestPackageFixed in
apachepulsar/pulsar:3.1.016f9fdab3fa6
alsa-lib@1.2.6.1-1ubuntu1
1.2.6.1-1ubuntu1.1

Open the chart page →

9,059
onedevonedev11.9.01 of 1See more

onedev onedev 11.9.0

1 of the 1 container images this version deploys carry CVE-2026-25068.

Container imageDigestPackageFixed in
1dev/server:11.9.0cd5b12fe5471
alsa-lib@1.2.11-1build2
1.2.11-1ubuntu0.2

Open the chart page →

6,083
onyx-stackonyx0.3.11 of 12See more

onyx-stack onyx 0.3.1

1 of the 12 container images this version deploys carry CVE-2026-25068.

Container imageDigestPackageFixed in
onyxdotapp/onyx-backend:latest473fdffe4e67
alsa-lib@1.2.14-1
1.2.14-1+deb13u1

Open the chart page →

6,252
seafilephybros-helm-charts4.0.11 of 1See more

seafile phybros-helm-charts 4.0.1

1 of the 1 container images this version deploys carry CVE-2026-25068.

Container imageDigestPackageFixed in
seafileltd/seafile-mc:9.0.97ac833196f60
alsa-lib@1.2.2-2.1ubuntu2.5
1.2.2-2.1ubuntu2.5+esm1

Open the chart page →

22,146
substreams-sink-kvpinaxVerified publisher0.0.41 of 1See more

substreams-sink-kv pinax 0.0.4

1 of the 1 container images this version deploys carry CVE-2026-25068.

Container imageDigestPackageFixed in
ghcr.io/streamingfast/substreams-sink-kv:v2.3.026953ec68d5d
alsa-lib@1.2.2-2.1ubuntu2.5
1.2.2-2.1ubuntu2.5+esm1

Open the chart page →

6,695
substreams-sink-nooppinaxVerified publisher0.0.31 of 1See more

substreams-sink-noop pinax 0.0.3

1 of the 1 container images this version deploys carry CVE-2026-25068.

Container imageDigestPackageFixed in
ghcr.io/streamingfast/substreams-sink-noop:v1.4.0d7c43c3135c6
alsa-lib@1.2.2-2.1ubuntu2.5
1.2.2-2.1ubuntu2.5+esm1

Open the chart page →

6,641
libretimepodzone-chartsVerified publisher0.4.12 of 9See more

libretime podzone-charts 0.4.1

2 of the 9 container images this version deploys carry CVE-2026-25068.

Container imageDigestPackageFixed in
ghcr.io/libretime/libretime-analyzer:latest3d5e236216ad
alsa-lib@1.2.4-1.1
1.2.4-1.1+deb11u1
ghcr.io/libretime/libretime-playout:latest71a8706531aa
alsa-lib@1.2.4-1.1
1.2.4-1.1+deb11u1

Open the chart page →

11,181
radar-kafkaradar-baseVerified publisher0.4.11 of 2See more

radar-kafka radar-base 0.4.1

1 of the 2 container images this version deploys carry CVE-2026-25068.

Container imageDigestPackageFixed in
ghcr.io/lsst-sqre/strimzi-registry-operator:0.6.07e25f7048aff
alsa-lib@1.2.4-1.1
1.2.4-1.1+deb11u1

Open the chart page →

4,236
javareact-java0.1.01 of 1See more

java react-java 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-25068.

Container imageDigestPackageFixed in
project2team4/react:latest3ff031a08887
alsa-lib@1.2.2-2.1ubuntu2.5
1.2.2-2.1ubuntu2.5+esm1

Open the chart page →

15,583
mastodonrivals-spaceVerified publisher3.1.21 of 3See more

mastodon rivals-space 3.1.2

1 of the 3 container images this version deploys carry CVE-2026-25068.

Container imageDigestPackageFixed in
ghcr.io/rivals-space/rivals-mastodon:1.6.143b23d55e4be
alsa-lib@1.2.4-1.1
1.2.4-1.1+deb11u1

Open the chart page →

6,026
web-checkrm3lVerified publisher0.1.01 of 1See more

web-check rm3l 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-25068.

Container imageDigestPackageFixed in
ghcr.io/lissy93/web-check:latesta4e021c0f6a9
alsa-lib@1.2.8-1+b1
no fix listed

Open the chart page →

8,798
bastillion-upstreamrock8sVerified publisher0.1.01 of 1See more

bastillion-upstream rock8s 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-25068.

Container imageDigestPackageFixed in
iamdorsah/bastillion:v0.1db83a0254d81
alsa-lib@1.2.4-1.1
1.2.4-1.1+deb11u1

Open the chart page →

3,051
ai-agentromholdings0.0.11 of 1See more

ai-agent romholdings 0.0.1

1 of the 1 container images this version deploys carry CVE-2026-25068.

Container imageDigestPackageFixed in
quay.io/devtron/ai-agent:0.0.16545dac92173
alsa-lib@1.2.8-1+b1
no fix listed

Open the chart page →

9,152
flaresolverrrubxkubeVerified publisher0.1.11 of 1See more

flaresolverr rubxkube 0.1.1

1 of the 1 container images this version deploys carry CVE-2026-25068.

Container imageDigestPackageFixed in
flaresolverr/flaresolverr:v3.5.0139dfee1c6f8
alsa-lib@1.2.8-1+b1
no fix listed

Open the chart page →

27,282
uptime-kumarubxkubeVerified publisher1.2.11 of 1See more

uptime-kuma rubxkube 1.2.1

1 of the 1 container images this version deploys carry CVE-2026-25068.

Container imageDigestPackageFixed in
louislam/uptime-kuma:2.4.091e963bfda56
alsa-lib@1.2.8-1+b1
no fix listed

Open the chart page →

29,870
nadekobotryuunosukeds30.1.21 of 2See more

nadekobot ryuunosukeds3 0.1.2

1 of the 2 container images this version deploys carry CVE-2026-25068.

Container imageDigestPackageFixed in
ryuunosukeds3/nadeko-bot-docker:latestc0398f13e8a9
alsa-lib@1.2.6.1-1ubuntu1
1.2.6.1-1ubuntu1.1

Open the chart page →

8,720
testing-multitoolsomeblackmagic0.1.21 of 1See more

testing-multitool someblackmagic 0.1.2

1 of the 1 container images this version deploys carry CVE-2026-25068.

Container imageDigestPackageFixed in
someblackmagic/k8s-testing-multitool:v0.1.06eca64b6b440
alsa-lib@1.2.2-2.1ubuntu2.5
1.2.2-2.1ubuntu2.5+esm1

Open the chart page →

30,759
speckle-preview-service-branch-testing6speckleVerified publisher2.23.14-branch.testing6.334655-b4e04ee1 of 1See more

speckle-preview-service-branch-testing6 speckle 2.23.14-branch.testing6.334655-b4e04ee

1 of the 1 container images this version deploys carry CVE-2026-25068.

Container imageDigestPackageFixed in
speckle/speckle-preview-service:2.23.14-branch.testing6.334655-b4e04ee6dee853ba74a
alsa-lib@1.2.8-1+b1
no fix listed

Open the chart page →

5,636
speckle-server-branch-hotfix-2.19.1speckleVerified publisher2.19.2-branch.hotfix-2.19.1.124125-665e7e11 of 5See more

speckle-server-branch-hotfix-2.19.1 speckle 2.19.2-branch.hotfix-2.19.1.124125-665e7e1

1 of the 5 container images this version deploys carry CVE-2026-25068.

Container imageDigestPackageFixed in
speckle/speckle-preview-service:2.19.2-branch.hotfix-2.19.1.124125-665e7e1c102b087481a
alsa-lib@1.2.8-1+b1
no fix listed

Open the chart page →

15,684
speckle-server-branch-hotfix-2.20.2speckleVerified publisher2.20.3-branch.hotfix-2.20.2.149555-37ea0cb1 of 5See more

speckle-server-branch-hotfix-2.20.2 speckle 2.20.3-branch.hotfix-2.20.2.149555-37ea0cb

1 of the 5 container images this version deploys carry CVE-2026-25068.

Container imageDigestPackageFixed in
speckle/speckle-preview-service:2.20.3-branch.hotfix-2.20.2.149555-37ea0cbd3da0a84de98
alsa-lib@1.2.8-1+b1
no fix listed

Open the chart page →

16,431
speckle-server-branch-testingspeckleVerified publisher2.17.14-branch.testing.72707.921a5f81 of 5See more

speckle-server-branch-testing speckle 2.17.14-branch.testing.72707.921a5f8

1 of the 5 container images this version deploys carry CVE-2026-25068.

Container imageDigestPackageFixed in
speckle/speckle-preview-service:2.17.14-branch.testing.72707.921a5f884fc39bca0c8
alsa-lib@1.2.8-1+b1
no fix listed

Open the chart page →

14,703
speckle-server-branch-testing1speckleVerified publisher2.20.6-branch.testing1.154030-9b091141 of 5See more

speckle-server-branch-testing1 speckle 2.20.6-branch.testing1.154030-9b09114

1 of the 5 container images this version deploys carry CVE-2026-25068.

Container imageDigestPackageFixed in
speckle/speckle-preview-service:2.20.6-branch.testing1.154030-9b091148f3c1ea153ba
alsa-lib@1.2.8-1+b1
no fix listed

Open the chart page →

16,431
speckle-server-branch-testing2speckleVerified publisher2.18.11-branch.testing2.88634-335d4691 of 5See more

speckle-server-branch-testing2 speckle 2.18.11-branch.testing2.88634-335d469

1 of the 5 container images this version deploys carry CVE-2026-25068.

Container imageDigestPackageFixed in
speckle/speckle-preview-service:2.18.11-branch.testing2.88634-335d4694bd113093583
alsa-lib@1.2.8-1+b1
no fix listed

Open the chart page →

14,245
speckle-server-branch-testing3speckleVerified publisher2.18.12-branch.testing3.88744-f55b3411 of 5See more

speckle-server-branch-testing3 speckle 2.18.12-branch.testing3.88744-f55b341

1 of the 5 container images this version deploys carry CVE-2026-25068.

Container imageDigestPackageFixed in
speckle/speckle-preview-service:2.18.12-branch.testing3.88744-f55b3414bd113093583
alsa-lib@1.2.8-1+b1
no fix listed

Open the chart page →

14,245
speckle-server-branch-testing4speckleVerified publisher2.20.2-branch.testing4.134160-9fad4b21 of 5See more

speckle-server-branch-testing4 speckle 2.20.2-branch.testing4.134160-9fad4b2

1 of the 5 container images this version deploys carry CVE-2026-25068.

Container imageDigestPackageFixed in
speckle/speckle-preview-service:2.20.2-branch.testing4.134160-9fad4b21f897ca906ea
alsa-lib@1.2.8-1+b1
no fix listed

Open the chart page →

16,050
speckle-server-branch-testing5speckleVerified publisher2.21.3-branch.testing5.219631-2153bef1 of 5See more

speckle-server-branch-testing5 speckle 2.21.3-branch.testing5.219631-2153bef

1 of the 5 container images this version deploys carry CVE-2026-25068.

Container imageDigestPackageFixed in
speckle/speckle-preview-service:2.21.3-branch.testing5.219631-2153bef52cad5e3293e
alsa-lib@1.2.8-1+b1
no fix listed

Open the chart page →

14,500
speckle-server-branch-testing6speckleVerified publisher2.25.10-branch.testing6.645-b125c1e1 of 4See more

speckle-server-branch-testing6 speckle 2.25.10-branch.testing6.645-b125c1e

1 of the 4 container images this version deploys carry CVE-2026-25068.

Container imageDigestPackageFixed in
speckle/speckle-preview-service:2.25.10-branch.testing6.645-b125c1e787adcb20a3a
alsa-lib@1.2.8-1+b1
no fix listed

Open the chart page →

10,647
steadybit-agentsteadybit3.1.1621 of 6See more

steadybit-agent steadybit 3.1.162

1 of the 6 container images this version deploys carry CVE-2026-25068.

Container imageDigestPackageFixed in
ghcr.io/steadybit/agent:2.4.52bc7b260e44e
alsa-lib@1.2.14-1
1.2.14-1+deb13u1

Open the chart page →

4,120
kurento_webrtc_demostunner0.1.01 of 2See more

kurento_webrtc_demo stunner 0.1.0

1 of the 2 container images this version deploys carry CVE-2026-25068.

Container imageDigestPackageFixed in
kurento/kurento-media-server:latest03c0d34d0828
alsa-lib@1.2.11-1ubuntu0.1
1.2.11-1ubuntu0.2

Open the chart page →

12,524
stunner-kurento-one2one-callstunner0.1.01 of 2See more

stunner-kurento-one2one-call stunner 0.1.0

1 of the 2 container images this version deploys carry CVE-2026-25068.

Container imageDigestPackageFixed in
kurento/kurento-media-server:latest03c0d34d0828
alsa-lib@1.2.11-1ubuntu0.1
1.2.11-1ubuntu0.2

Open the chart page →

12,524
flaresolverrsudo-kraken-flaresolverrVerified publisher2.1.41 of 1See more

flaresolverr sudo-kraken-flaresolverr 2.1.4

1 of the 1 container images this version deploys carry CVE-2026-25068.

Container imageDigestPackageFixed in
ghcr.io/flaresolverr/flaresolverr:v3.4.67962759d99d7
alsa-lib@1.2.8-1+b1
no fix listed

Open the chart page →

33,591
rundecksvtech-public-helm-charts1.0.01 of 2See more

rundeck svtech-public-helm-charts 1.0.0

1 of the 2 container images this version deploys carry CVE-2026-25068.

Container imageDigestPackageFixed in
svtechnmaa/svtech_rundeck:v1.2.26e368ace0977
alsa-lib@1.2.2-2.1ubuntu2.5
1.2.2-2.1ubuntu2.5+esm1

Open the chart page →

18,828
speecht5test-opea1.0.01 of 1See more

speecht5 test-opea 1.0.0

1 of the 1 container images this version deploys carry CVE-2026-25068.

Container imageDigestPackageFixed in
opea/speecht5:1.0249afad3d268
alsa-lib@1.2.8-1+b1
no fix listed

Open the chart page →

8,877
node-redth0ths-helm-charts0.2.11 of 2See more

node-red th0ths-helm-charts 0.2.1

1 of the 2 container images this version deploys carry CVE-2026-25068.

Container imageDigestPackageFixed in
th0th/node-red:4.0.3-debiand06fa39f7406
alsa-lib@1.2.4-1.1
1.2.4-1.1+deb11u1

Open the chart page →

2,408
thingsboardthingsboardVerified publisher0.1.34 of 12See more

thingsboard thingsboard 0.1.3

4 of the 12 container images this version deploys carry CVE-2026-25068.

Container imageDigestPackageFixed in
thingsboard/tb-coap-transport:3.4.1bd45a09d85d9
alsa-lib@1.2.4-1.1
1.2.4-1.1+deb11u1
thingsboard/tb-http-transport:3.4.1a06f53c5e2da
alsa-lib@1.2.4-1.1
1.2.4-1.1+deb11u1
thingsboard/tb-mqtt-transport:3.4.1030f316ce301
alsa-lib@1.2.4-1.1
1.2.4-1.1+deb11u1
thingsboard/tb-node:3.4.1645f43b688f7
alsa-lib@1.2.4-1.1
1.2.4-1.1+deb11u1

Open the chart page →

25,202
webhookiewebhookie0.1.21 of 1See more

webhookie webhookie 0.1.2

1 of the 1 container images this version deploys carry CVE-2026-25068.

Container imageDigestPackageFixed in
hookiesolutions/webhookie:latest0629694246ba
alsa-lib@1.2.2-2.1ubuntu2.4
1.2.2-2.1ubuntu2.5+esm1

Open the chart page →

14,420
webhookie-allwebhookie0.1.21 of 3See more

webhookie-all webhookie 0.1.2

1 of the 3 container images this version deploys carry CVE-2026-25068.

Container imageDigestPackageFixed in
hookiesolutions/webhookie:latest0629694246ba
alsa-lib@1.2.2-2.1ubuntu2.4
1.2.2-2.1ubuntu2.5+esm1

Open the chart page →

28,699
longhornwenerme1.2.31 of 2See more

longhorn wenerme 1.2.3

1 of the 2 container images this version deploys carry CVE-2026-25068.

Container imageDigestPackageFixed in
longhornio/longhorn-manager:v1.2.3dca34321452c
alsa-lib@1.2.2-2.1ubuntu2.5
1.2.2-2.1ubuntu2.5+esm1

Open the chart page →

15,287
playwright-synthetic-monitoringwork-adventure1.0.11 of 1See more

playwright-synthetic-monitoring work-adventure 1.0.1

1 of the 1 container images this version deploys carry CVE-2026-25068.

Container imageDigestPackageFixed in
workadventure/playwright-synthetic-monitoring:main92b664c2a06f
alsa-lib@1.2.6.1-1ubuntu1
1.2.6.1-1ubuntu1.1

Open the chart page →

14,172

Container images carrying it

179 by charts deploying them

A fixed version is listed for 1 of the 1 affected package.

Container imageDigestPackageFixed inUsed by
ghcr.io/libretime/libretime-playout:latest71a8706531aa
alsa-lib@1.2.4-1.1
1.2.4-1.1+deb11u1
1
ghcr.io/linkwarden/linkwarden:v2.16.30664c28a039b
alsa-lib@1.2.8-1+b1
no fix listed
1
ghcr.io/linuxoid69/motion:4.7.0-0.1.0f0f000c3fc47
alsa-lib@1.2.4-1.1
1.2.4-1.1+deb11u1
1
ghcr.io/lloesche/valheim-server:latest20fde516ce31
alsa-lib@1.2.14-1
1.2.14-1+deb13u1
1
ghcr.io/lsst-sqre/strimzi-registry-operator:0.6.07e25f7048aff
alsa-lib@1.2.4-1.1
1.2.4-1.1+deb11u1
1
ghcr.io/mastodon/mastodon:v4.1.26b18e6d0eda4
alsa-lib@1.2.4-1.1
1.2.4-1.1+deb11u1
1
ghcr.io/matter-js/matterjs-server:1.4.054232d0d3e7d
alsa-lib@1.2.14-1
1.2.14-1+deb13u1
1
ghcr.io/mealie-recipes/mealie:v3.24.00b08ac3a9f0a
alsa-lib@1.2.14-1
1.2.14-1+deb13u1
1
ghcr.io/mealie-recipes/mealie:v3.25.16066c29eca95
alsa-lib@1.2.14-1
1.2.14-1+deb13u1
1
ghcr.io/music-assistant/server:2.7.53522e8a7a8f0
alsa-lib@1.2.8-1+b1
no fix listed
1
ghcr.io/music-assistant/server:2.9.950666a6f8d7f
alsa-lib@1.2.8-1+b1
no fix listed
1
ghcr.io/music-assistant/server:2.10.3885872224fa5
alsa-lib@1.2.14-1
1.2.14-1+deb13u1
1
ghcr.io/music-assistant/server:2.8.7eef3ee7810d0
alsa-lib@1.2.8-1+b1
no fix listed
1
ghcr.io/open-telemetry/demo:1.12.0-loadgenerator85c9935ff31b
alsa-lib@1.2.8-1+b1
no fix listed
1
ghcr.io/rivals-space/rivals-mastodon:1.6.143b23d55e4be
alsa-lib@1.2.4-1.1
1.2.4-1.1+deb11u1
1
ghcr.io/savonet/liquidsoap:v2.0.19e08148e1055
alsa-lib@1.2.4-1.1
1.2.4-1.1+deb11u1
1
ghcr.io/smarter-project/audio-client:v3.1.23c8375dc5487
alsa-lib@1.2.2-2.1ubuntu2.5
1.2.2-2.1ubuntu2.5+esm1
1
ghcr.io/smarter-project/gstreamer:v1.0.25ecb16015aa8
alsa-lib@1.2.2-2.1ubuntu2.5
1.2.2-2.1ubuntu2.5+esm1
1
ghcr.io/smarter-project/image-detector:v2.5.31dcca70c6446
alsa-lib@1.2.2-2.1ubuntu2.5
1.2.2-2.1ubuntu2.5+esm1
1
ghcr.io/star-whale/server:0.6.158368359c8dd0
alsa-lib@1.2.2-2.1ubuntu2.5
1.2.2-2.1ubuntu2.5+esm1
1
ghcr.io/steadybit/agent:2.4.52bc7b260e44e
alsa-lib@1.2.14-1
1.2.14-1+deb13u1
1
ghcr.io/streamingfast/substreams-sink-kv:v2.3.026953ec68d5d
alsa-lib@1.2.2-2.1ubuntu2.5
1.2.2-2.1ubuntu2.5+esm1
1
ghcr.io/streamingfast/substreams-sink-noop:v1.4.0d7c43c3135c6
alsa-lib@1.2.2-2.1ubuntu2.5
1.2.2-2.1ubuntu2.5+esm1
1
ghcr.io/voxpupuli/container-puppetdb:7.18.0-v1.5.0a56dfe91f5b1
alsa-lib@1.2.6.1-1ubuntu1
1.2.6.1-1ubuntu1.1
1
ghcr.io/voxpupuli/container-puppetserver:7.17.0-v1.5.0916746209ac5
alsa-lib@1.2.6.1-1ubuntu1
1.2.6.1-1ubuntu1.1
1
ghcr.io/voxpupuli/puppetserver:8.7.0-main63873f3f698e
alsa-lib@1.2.6.1-1ubuntu1
1.2.6.1-1ubuntu1.1
1
ghcr.io/wiremind/grafana-pdf-exporter:v1.7dbaa8527bf4c
alsa-lib@1.2.8-1+b1
no fix listed
1
ghcr.io/wittdennis/calibre-web:1.1.1aa7d5d5dd6be
alsa-lib@1.2.8-1+b1
no fix listed
1
ghcr.io/yurymkomarov/docker/kubernetes-kiosk-chromium:0.1.27bff29dcec72
alsa-lib@1.2.8-1+b1
no fix listed
1

syft 1.42.1 · advisories as of 15 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.