CVE-2026-25985

High

Advisory

Published 24 Feb 2026In the index since 6 Sept 2026

Severity: High; worst across findings
CVSS: 7.5; base score, highest
EPSS: 0.005; 41st percentile
CISA KEV: Not listed; no confirmed exploitation
Charts affected: 101; of 17,781 indexed, latest versions
Container images: 109; deployed by those charts
Fix available: 1 of 1; affected package

The matching OSV records carry no description.

Carried by container images the latest versions of 101 of 17,781 indexed charts deploy, on 109 images.

Affected package	Affected versions	Fixed in	Images
imagemagickdeb	8:6.8.9.9-7ubuntu5.9, 8:6.9.10.23+dfsg-2.1ubuntu11.4, 8:6.9.11.60+dfsg-1.3build2, 8:6.9.11.60+dfsg-1.3ubuntu0.22.04.5+14 more	8:6.9.11.60+dfsg-1.6+deb12u8, 8:7.1.1.43+dfsg1-1+deb13u6	109

OSV records: DEBIAN-CVE-2026-25985 UBUNTU-CVE-2026-25985

Charts affected

101 by stars

Chart

Latest

Affected images

Radar Score

calibre-webvista

0.1.3

1 of 1 See more

calibre-web vista 0.1.3

1 of the 1 container images this version deploys carry CVE-2026-25985.

Container image	Digest	Package	Fixed in
linuxserver/calibre-web :0.6.24	241009026e6f	imagemagick@8:6.9.12.98+dfsg1-5.2build2	no fix listed

Open the chart page →

7,628

Container images carrying it

109 by charts deploying them

A fixed version is listed for 1 of the 1 affected package.

Container image	Digest	Package	Fixed in	Used by
photoprism/photoprism :260728	958642220223	imagemagick@8:7.1.2.18+dfsg1-1	no fix listed	1
photoprism/photoprism :251130	db16ee6b1ba3	imagemagick@8:7.1.2.3+dfsg1-1	no fix listed	1
photoprism/photoprism :240711-ce	fc6fd632ca74	imagemagick@8:6.9.12.98+dfsg1-5.2build2	no fix listed	1
qonstrukt/php :8.4-v8-apache	089af7925aa1	imagemagick@8:6.9.12.98+dfsg1-5.2build2	no fix listed	1
sashafefler/spacecapybara_app :latest	f96d7804c0ca	imagemagick@8:6.9.11.60+dfsg-1.6+deb12u2	8:6.9.11.60+dfsg-1.6+deb12u8	1
sbs20/scanservjs :release-v3.0.3	dad1fd6e9a98	imagemagick@8:6.9.11.60+dfsg-1.6	8:6.9.11.60+dfsg-1.6+deb12u8	1
socialmediamacroscope/histogram :0.1.2	6418f9bdb4d2	imagemagick@8:6.9.11.60+dfsg-1.6	8:6.9.11.60+dfsg-1.6+deb12u8	1
socialmediamacroscope/network_analysis :0.1.3	b351c21422e6	imagemagick@8:6.9.11.60+dfsg-1.6	8:6.9.11.60+dfsg-1.6+deb12u8	1
socialmediamacroscope/preprocessing :0.1.3	ca863306314b	imagemagick@8:6.9.11.60+dfsg-1.6	8:6.9.11.60+dfsg-1.6+deb12u8	1
socialmediamacroscope/topic_modeling :0.1.3	fa490acac2f8	imagemagick@8:6.9.11.60+dfsg-1.6	8:6.9.11.60+dfsg-1.6+deb12u8	1
stashapp/stash-box :latest	a534c8afdf39	imagemagick@8:6.9.12.98+dfsg1-5.2build2	no fix listed	1
substratusai/verba :v0.4.0-baseURL2	61695be635eb	imagemagick@8:6.9.11.60+dfsg-1.6+deb12u1	8:6.9.11.60+dfsg-1.6+deb12u8	1
sysnet4admin/colosseum-cms :log	e74b43c7f492	imagemagick@8:6.9.11.60+dfsg-1.6+deb12u3	8:6.9.11.60+dfsg-1.6+deb12u8	1
sysnet4admin/colosseum-prm :log	5802bfcd7fed	imagemagick@8:6.9.11.60+dfsg-1.6+deb12u3	8:6.9.11.60+dfsg-1.6+deb12u8	1
teknas09/bird-pod :latest	12a1fa85c4aa	imagemagick@8:6.9.11.60+dfsg-1.6+deb12u1	8:6.9.11.60+dfsg-1.6+deb12u8	1
theradius/loggia :0.4	63ba348546ec	imagemagick@8:6.9.11.60+dfsg-1.6	8:6.9.11.60+dfsg-1.6+deb12u8	1
thongngo3301/stakefish :latest	a341af5976e3	imagemagick@8:6.9.11.60+dfsg-1.6	8:6.9.11.60+dfsg-1.6+deb12u8	1
timothyclarke/wptagent :2018-01-23	22c41e5ca7e2	imagemagick@8:6.8.9.9-7ubuntu5.9	no fix listed	1
treskon/portrait-web-setup :DEV-latest	a475d80e4ecf	imagemagick@8:6.9.11.60+dfsg-1.6+deb12u2	8:6.9.11.60+dfsg-1.6+deb12u8	1
unitycatalog/unitycatalog-ui :main-aadc6fc	3a688197b218	imagemagick@8:6.9.11.60+dfsg-1.6+deb12u3	8:6.9.11.60+dfsg-1.6+deb12u8	1
vlebediantsev/notes-admin-front :latest	007c6670ff48	imagemagick@8:6.9.11.60+dfsg-1.6	8:6.9.11.60+dfsg-1.6+deb12u8	1
vlebediantsev/notes-project-front :latest	945675fd2636	imagemagick@8:6.9.11.60+dfsg-1.6	8:6.9.11.60+dfsg-1.6+deb12u8	1
vlebediantsev/registration-ms-front-app-host :latest	54f69d116c50	imagemagick@8:6.9.11.60+dfsg-1.6	8:6.9.11.60+dfsg-1.6+deb12u8	1
xom4ekp2p/infini-route-attestators-public-mainnet-attester :latest	d0e0aa238b02	imagemagick@8:6.9.11.60+dfsg-1.6+deb12u1	8:6.9.11.60+dfsg-1.6+deb12u8	1
xom4ekp2p/infini-route-attestators-public-mainnet-avs-webapi :latest	2745b5fd8785	imagemagick@8:6.9.11.60+dfsg-1.6+deb12u1	8:6.9.11.60+dfsg-1.6+deb12u8	1
gcr.io/ml-pipeline/metadata-writer :2.3.0	9bcfd2abc361	imagemagick@8:6.9.11.60+dfsg-1.6+deb12u2	8:6.9.11.60+dfsg-1.6+deb12u8	1
ghcr.io/astriaorg/astrotrek :0.1.0	5889bea38e56	imagemagick@8:6.9.11.60+dfsg-1.6+deb12u2	8:6.9.11.60+dfsg-1.6+deb12u8	1
ghcr.io/camptocamp/tetragon-policy-builder :master	0e99f12bb040	imagemagick@8:6.9.11.60+dfsg-1.6+deb12u2	8:6.9.11.60+dfsg-1.6+deb12u8	1
ghcr.io/cosmo-tech/cosmotech-copilot-api :latest	a2be95de450c	imagemagick@8:7.1.1.43+dfsg1-1+deb13u5	8:7.1.1.43+dfsg1-1+deb13u6	1
ghcr.io/cosmo-workspace/dev-code-server :v0.0.3	16fda01ae58a	imagemagick@8:6.9.11.60+dfsg-1.6+deb12u2	8:6.9.11.60+dfsg-1.6+deb12u8	1
ghcr.io/dask/dask-kubernetes-operator :2026.3.0	3225d2bc6b3c	imagemagick@8:7.1.1.43+dfsg1-1+deb13u5	8:7.1.1.43+dfsg1-1+deb13u6	1
ghcr.io/dfir-iris/iriswebapp_app :v2.4.26	e59ebde55709	imagemagick@8:7.1.1.43+dfsg1-1+deb13u2	8:7.1.1.43+dfsg1-1+deb13u6	1
ghcr.io/drewburr-labs/mum-discord-bot :3.1.2	6e82914e1051	imagemagick@8:6.9.11.60+dfsg-1.6	8:6.9.11.60+dfsg-1.6+deb12u8	1
ghcr.io/graphprotocol/availability-oracle :sha-28312fd	472a25038957	imagemagick@8:6.9.11.60+dfsg-1.6+deb12u1	8:6.9.11.60+dfsg-1.6+deb12u8	1
ghcr.io/itzg/minecraft-server :latest	c1a267d9ed6d	imagemagick@8:6.9.12.98+dfsg1-5.2build2	no fix listed	1
ghcr.io/kvaps/opennebula :v5.12.0.4-1	e28e0e7de11b	imagemagick@8:6.9.10.23+dfsg-2.1ubuntu11.4	no fix listed	1
ghcr.io/kvaps/opennebula-exporter :v5.12.0.4	01563adc95fd	imagemagick@8:6.9.10.23+dfsg-2.1ubuntu11.4	no fix listed	1
ghcr.io/kvaps/opennebula-exporter :v5.12.0.4-1	2b92df1143b9	imagemagick@8:6.9.10.23+dfsg-2.1ubuntu11.4	no fix listed	1
ghcr.io/kvaps/opennebula-flow :v5.12.0.4-1	600221f0f43f	imagemagick@8:6.9.10.23+dfsg-2.1ubuntu11.4	no fix listed	1
ghcr.io/kvaps/opennebula-gate :v5.12.0.4-1	a85e03d8bc1d	imagemagick@8:6.9.10.23+dfsg-2.1ubuntu11.4	no fix listed	1
ghcr.io/libreconnect/ferriscompany :0.1.0-rc6	ed86db9f0efe	imagemagick@8:6.9.11.60+dfsg-1.6+deb12u2	8:6.9.11.60+dfsg-1.6+deb12u8	1
ghcr.io/linuxserver/calibre-web :0.6.26	7c0464228f2f	imagemagick@8:6.9.12.98+dfsg1-5.2build2	no fix listed	1
ghcr.io/maybe-finance/maybe :0.5.0	c6ab95ca9130	imagemagick@8:6.9.11.60+dfsg-1.6+deb12u2	8:6.9.11.60+dfsg-1.6+deb12u8	1
ghcr.io/nefelim4ag/pingdom-operator :0.0.15	f8c7afdcf439	imagemagick@8:6.9.11.60+dfsg-1.6+deb12u1	8:6.9.11.60+dfsg-1.6+deb12u8	1
ghcr.io/opencost/opencost-parquet-exporter :v0.2.1	ce85ef0ce665	imagemagick@8:6.9.11.60+dfsg-1.6+deb12u2	8:6.9.11.60+dfsg-1.6+deb12u8	1
ghcr.io/paperless-ngx/paperless-ngx :2.13.1	0642357c5dbd	imagemagick@8:6.9.11.60+dfsg-1.6+deb12u2	8:6.9.11.60+dfsg-1.6+deb12u8	1
ghcr.io/paperless-ngx/paperless-ngx :2.20.3	57ad9565bff3	imagemagick@8:7.1.1.43+dfsg1-1+deb13u3	8:7.1.1.43+dfsg1-1+deb13u6	1
ghcr.io/paperless-ngx/paperless-ngx :2.20.5	665f2f5cc548	imagemagick@8:7.1.1.43+dfsg1-1+deb13u3	8:7.1.1.43+dfsg1-1+deb13u6	1
ghcr.io/paperless-ngx/paperless-ngx :2.0.1	ab255bea133e	imagemagick@8:6.9.11.60+dfsg-1.6	8:6.9.11.60+dfsg-1.6+deb12u8	1
ghcr.io/sdwbgn/unitycatalog-helm/docker/unitycatalog-ui :0.2.1-5d668c1	ed07e7ca098d	imagemagick@8:6.9.11.60+dfsg-1.6+deb12u2	8:6.9.11.60+dfsg-1.6+deb12u8	1