CVE-2026-27447

Medium

Advisory

Published 3 Apr 2026In the index since 5 Sept 2026

Severity: Medium; worst across findings
CVSS: 6.3; base score, highest
EPSS: 0.003; 24th percentile
CISA KEV: Not listed; no confirmed exploitation
Charts affected: 206; of 17,781 indexed, latest versions
Container images: 177; deployed by those charts
Fix available: 2 of 2; affected packages

The matching OSV records carry no description.

Carried by container images the latest versions of 206 of 17,781 indexed charts deploy, on 177 images.

Affected package	Affected versions	Fixed in	Images
cupsdeb	2.1.3-4ubuntu0.3, 2.1.3-4ubuntu0.4, 2.1.3-4ubuntu0.7, 2.1.3-4ubuntu0.10+29 more	2.4.1op1-1ubuntu4.20, 2.4.7-1.2ubuntu7.13, 2.4.12-0ubuntu3.9, 2.4.16-1ubuntu1.2	167
cupsapk	2.4.11-r0	2.4.18-r0	10

OSV records: ALPINE-CVE-2026-27447 DEBIAN-CVE-2026-27447 UBUNTU-CVE-2026-27447
Also known as: USN-8405-1

Charts affected

206 by stars

Chart

Latest

Affected images

Radar Score

browserlessvictorlane

0.2.0

1 of 1 See more

browserless victorlane 0.2.0

1 of the 1 container images this version deploys carry CVE-2026-27447.

Container image	Digest	Package	Fixed in
ghcr.io/browserless/chromium :v2.43.0	853e6f105b51	cups@2.4.7-1.2ubuntu7.9	2.4.7-1.2ubuntu7.13

Open the chart page →

4,305

calibre-webvista

0.1.3

1 of 1 See more

calibre-web vista 0.1.3

1 of the 1 container images this version deploys carry CVE-2026-27447.

Container image	Digest	Package	Fixed in
linuxserver/calibre-web :0.6.24	241009026e6f	cups@2.4.7-1.2ubuntu7.3	2.4.7-1.2ubuntu7.13

Open the chart page →

7,628

webhookiewebhookie

0.1.2

1 of 1 See more

webhookie webhookie 0.1.2

1 of the 1 container images this version deploys carry CVE-2026-27447.

Container image	Digest	Package	Fixed in
hookiesolutions/webhookie :latest	0629694246ba	cups@2.3.1-9ubuntu1.1	no fix listed

Open the chart page →

14,364

webhookie-allwebhookie

0.1.2

1 of 3 See more

webhookie-all webhookie 0.1.2

1 of the 3 container images this version deploys carry CVE-2026-27447.

Container image	Digest	Package	Fixed in
hookiesolutions/webhookie :latest	0629694246ba	cups@2.3.1-9ubuntu1.1	no fix listed

Open the chart page →

28,605

Wordpresswordpress-mariadb

1.0.2

1 of 2 See more

Wordpress wordpress-mariadb 1.0.2

1 of the 2 container images this version deploys carry CVE-2026-27447.

Container image	Digest	Package	Fixed in
library/wordpress :latest	5a93c470ae82	cups@2.4.10-3+deb13u2	no fix listed

Open the chart page →

5,560

playwright-synthetic-monitoringwork-adventure

1.0.1

1 of 1 See more

playwright-synthetic-monitoring work-adventure 1.0.1

1 of the 1 container images this version deploys carry CVE-2026-27447.

Container image	Digest	Package	Fixed in
workadventure/playwright-synthetic-monitoring :main	92b664c2a06f	cups@2.4.1op1-1ubuntu4.10	2.4.1op1-1ubuntu4.20

Open the chart page →

14,100

Container images carrying it

177 by charts deploying them

A fixed version is listed for 2 of the 2 affected packages.

Container image	Digest	Package	Fixed in	Used by
sbs20/scanservjs :release-v3.0.3	dad1fd6e9a98	cups@2.4.2-3+deb12u4	no fix listed	1
scrapinghub/splash :3.4.1	a5f89bc84606	cups@2.2.7-1ubuntu2.7	no fix listed	1
sismics/docs :v1.10	f4b0ef019cf1	cups@2.2.7-1ubuntu2.8	no fix listed	1
sissbruecker/linkding :1.41.0-plus	a222fb777e1f	cups@2.4.2-3+deb12u8	no fix listed	1
socialmediamacroscope/autophrase :0.1.5	70fb11d4f531	cups@2.3.1-9ubuntu1.6	no fix listed	1
someblackmagic/k8s-testing-multitool :v0.1.0	6eca64b6b440	cups@2.3.1-9ubuntu1.2	no fix listed	1
speckle/speckle-preview-service :2.26.3	092384dba45d	cups@2.4.2-3+deb12u9	no fix listed	1
speckle/speckle-preview-service :2.20.2-branch.testing4.134160-9fad4b2	1f897ca906ea	cups@2.4.2-3+deb12u5	no fix listed	1
speckle/speckle-preview-service :2.21.3-branch.testing5.219631-2153bef	52cad5e3293e	cups@2.4.2-3+deb12u8	no fix listed	1
speckle/speckle-preview-service :2.23.14-branch.testing6.334655-b4e04ee	6dee853ba74a	cups@2.4.2-3+deb12u8	no fix listed	1
speckle/speckle-preview-service :2.25.10-branch.testing6.645-b125c1e	787adcb20a3a	cups@2.4.2-3+deb12u8	no fix listed	1
speckle/speckle-preview-service :2.17.14-branch.testing.72707.921a5f8	84fc39bca0c8	cups@2.4.2-3+deb12u5	no fix listed	1
speckle/speckle-preview-service :2.20.6-branch.testing1.154030-9b09114	8f3c1ea153ba	cups@2.4.2-3+deb12u5	no fix listed	1
speckle/speckle-preview-service :2.19.2-branch.hotfix-2.19.1.124125-665e7e1	c102b087481a	cups@2.4.2-3+deb12u5	no fix listed	1
speckle/speckle-preview-service :2.20.3-branch.hotfix-2.20.2.149555-37ea0cb	d3da0a84de98	cups@2.4.2-3+deb12u5	no fix listed	1
stashapp/stash-box :latest	a534c8afdf39	cups@2.4.7-1.2ubuntu7.3	2.4.7-1.2ubuntu7.13	1
svtechnmaa/svtech_rundeck :v1.2.2	6e368ace0977	cups@2.3.1-9ubuntu1.3	no fix listed	1
swimmwatch/cloakbrowser-mcp :1.13.0	d48c705a58c8	cups@2.4.2-3+deb12u9	no fix listed	1
tensorflow/tensorflow :1.6.0-devel	1e3172090703	cups@2.1.3-4ubuntu0.4	no fix listed	1
thingsboard/tb-postgres :latest	2d17e4e36edc	cups@2.4.2-3+deb12u9	no fix listed	1
timothyclarke/wptagent :2018-01-23	22c41e5ca7e2	cups@2.1.3-4ubuntu0.3	no fix listed	1
tinymediamanager/tinymediamanager :5.3.2	2b34dc85099e	cups@2.4.10-3+deb13u2	no fix listed	1
trueosiris/vrising :latest	9356f98ad561	cups@2.4.1op1-1ubuntu4.16	2.4.1op1-1ubuntu4.20	1
wavefronthq/proxy :9.2	d1064d28f6eb	cups@2.2.7-1ubuntu2.8	no fix listed	1
workadventure/playwright-synthetic-monitoring :main	92b664c2a06f	cups@2.4.1op1-1ubuntu4.10	2.4.1op1-1ubuntu4.20	1
yuzutech/kroki-bpmn :0.29.1	444805c4b917	cups@2.4.11-r0	2.4.18-r0	1
yuzutech/kroki-diagramsnet :0.29.1	b810edbf9c62	cups@2.4.11-r0	2.4.18-r0	1
yuzutech/kroki-excalidraw :0.29.1	57917319ea70	cups@2.4.11-r0	2.4.18-r0	1
yuzutech/kroki-mermaid :0.29.1	963b4acfde6e	cups@2.4.11-r0	2.4.18-r0	1
zabbix/zabbix-web-service :ubuntu-7.0.23	915b3183e054	cups@2.3.3op2-3+deb11u8	2.4.7-1.2ubuntu7.13	1
zabbix/zabbix-web-service :ubuntu-6.0.8	ee4baa872280	cups@2.4.1op1-1ubuntu4.1	2.4.1op1-1ubuntu4.20	1
ghcr.io/appscode/gotenberg :8.25	f9104080d9a7	cups@2.4.10-3+deb13u2	no fix listed	1
ghcr.io/argonix-io/argonix-api :1.0.0	68e17a8aaa40	cups@2.4.10-3+deb13u2	no fix listed	1
ghcr.io/avistotelecom/docker-wazuh-agent :4.12.0	8766ba08bf1a	cups@2.4.2-3+deb12u8	no fix listed	1
ghcr.io/browserless/chromium :v2.43.0	853e6f105b51	cups@2.4.7-1.2ubuntu7.9	2.4.7-1.2ubuntu7.13	1
ghcr.io/chaos-mesh/chaos-daemon :v2.8.4	0d28dbd95b03	cups@2.4.2-3+deb12u9	no fix listed	1
ghcr.io/chaos-mesh/chaos-daemon :v2.8.3	69b1d3c09cfa	cups@2.4.2-3+deb12u9	no fix listed	1
ghcr.io/chaos-mesh/chaos-daemon :v2.7.2	9608d9b51452	cups@2.4.2-3+deb12u8	no fix listed	1
ghcr.io/chaos-mesh/chaos-daemon :v2.8.0	fb609bc264d9	cups@2.4.2-3+deb12u9	no fix listed	1
ghcr.io/firecrawl/playwright-service :latest	1f6eba640320	cups@2.4.2-3+deb12u9	no fix listed	1
ghcr.io/flaresolverr/flaresolverr :v3.4.0	ab535d1fef5d	cups@2.4.2-3+deb12u8	no fix listed	1
ghcr.io/jfwenisch/discord-experiencebot :latest	b52ff07f9f0c	cups@2.2.7-1ubuntu2.10	no fix listed	1
ghcr.io/jfwenisch/steamcmd-manager :v0.4.5	dab685e668d9	cups@2.4.7-1.2ubuntu7.3	2.4.7-1.2ubuntu7.13	1
ghcr.io/jfwenisch/webtools :v0.1.4	4569cae83c70	cups@2.4.7-1.2ubuntu7.3	2.4.7-1.2ubuntu7.13	1
ghcr.io/jr0dd/puppeteer :v13.3.2	6047599cd78e	cups@2.3.1-9ubuntu1.1	no fix listed	1
ghcr.io/k8s-at-home/nzbhydra2 :v3.14.2	ef3670f7e0a8	cups@2.3.1-9ubuntu1.1	no fix listed	1
ghcr.io/karakeep-app/karakeep :0.27.1	abd7d6b11b1b	cups@2.4.11-r0	2.4.18-r0	1
ghcr.io/karakeep-app/karakeep :0.33.2	b069e4307dec	cups@2.4.2-3+deb12u9	no fix listed	1
ghcr.io/karakeep-app/karakeep :0.26.0	f575a34ed3f8	cups@2.4.11-r0	2.4.18-r0	1
ghcr.io/kvaps/opennebula :v5.12.0.4-1	e28e0e7de11b	cups@2.3.1-9ubuntu1.1	no fix listed	1