StackRadar

CVE-2026-2921

High

Advisory

Published 16 Mar 2026In the index since 6 Sept 2026
Severity
High
worst across findings
CVSS
7.8
base score, highest
EPSS
0.009
57th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
17
of 17,781 indexed, latest versions
Container images
19
deployed by those charts
Fix available
1 of 1
affected package

gst-plugins-base1.0 - security update

Carried by container images the latest versions of 17 of 17,781 indexed charts deploy, on 19 images.

Affected packageAffected versionsFixed inImages
gst-plugins-base1.0deb1.14.5-0ubuntu1~18.04.1, 1.16.2-4ubuntu0.1, 1.16.3-0ubuntu1.1, 1.16.3-0ubuntu1.4+8 more1.14.5-0ubuntu1~18.04.3+esm3, 1.16.3-0ubuntu1.4+esm2, 1.18.4-2+deb11u5, 1.20.1-1ubuntu0.6+3 more19
OSV records
DEBIAN-CVE-2026-2921UBUNTU-CVE-2026-2921DLA-4514-1
Also known as
DSA-6167-1, USN-8130-1, USN-8130-2

Charts affected

17 by stars
ChartLatestAffected imagesRadar Score
wombatwombatOfficialVerified publisher4.1.281 of 1See more

wombat wombat 4.1.28

1 of the 1 container images this version deploys carry CVE-2026-2921.

Container imageDigestPackageFixed in
erlangsolutions/wombatoam:4.1.284680c990147a
gst-plugins-base1.0@1.18.4-2
1.18.4-2+deb11u5

Open the chart page →

3,697
games-on-whalesgeek-cookbookVerified publisher1.8.22 of 7See more

games-on-whales geek-cookbook 1.8.2

2 of the 7 container images this version deploys carry CVE-2026-2921.

Container imageDigestPackageFixed in
ghcr.io/games-on-whales/pulseaudio:1.0.0f34f98405c10
gst-plugins-base1.0@1.16.2-4ubuntu0.1
1.16.3-0ubuntu1.4+esm2
ghcr.io/games-on-whales/retroarch:1.0.0103fbcec2314
gst-plugins-base1.0@1.16.2-4ubuntu0.1
1.16.3-0ubuntu1.4+esm2

Open the chart page →

35,305
smarter-demosmarterOfficialVerified publisher0.1.53 of 7See more

smarter-demo smarter 0.1.5

3 of the 7 container images this version deploys carry CVE-2026-2921.

Container imageDigestPackageFixed in
ghcr.io/smarter-project/audio-client:v3.1.23c8375dc5487
gst-plugins-base1.0@1.16.3-0ubuntu1.1
1.16.3-0ubuntu1.4+esm2
ghcr.io/smarter-project/gstreamer:v1.0.25ecb16015aa8
gst-plugins-base1.0@1.16.3-0ubuntu1.1
1.16.3-0ubuntu1.4+esm2
ghcr.io/smarter-project/image-detector:v2.5.31dcca70c6446
gst-plugins-base1.0@1.16.3-0ubuntu1.1
1.16.3-0ubuntu1.4+esm2

Open the chart page →

45,832
games-on-whalesangelnu2.0.03 of 7See more

games-on-whales angelnu 2.0.0

3 of the 7 container images this version deploys carry CVE-2026-2921.

Container imageDigestPackageFixed in
andrewmackrodt/firefox-x11:142.0.1-r133f9080470c9
gst-plugins-base1.0@1.20.1-1ubuntu0.4
1.20.1-1ubuntu0.6
ghcr.io/games-on-whales/pulseaudio:1.0.0f34f98405c10
gst-plugins-base1.0@1.16.2-4ubuntu0.1
1.16.3-0ubuntu1.4+esm2
ghcr.io/games-on-whales/retroarch:1.0.0103fbcec2314
gst-plugins-base1.0@1.16.2-4ubuntu0.1
1.16.3-0ubuntu1.4+esm2

Open the chart page →

42,126
platform-apiappscodeVerified publisher2026.9.111 of 3See more

platform-api appscode 2026.9.11

1 of the 3 container images this version deploys carry CVE-2026-2921.

Container imageDigestPackageFixed in
ghcr.io/appscode/gotenberg:8.25f9104080d9a7
gst-plugins-base1.0@1.26.2-1
1.26.2-1+deb13u1

Open the chart page →

37,268
business-api-ecosystemfiware1.1.01 of 4See more

business-api-ecosystem fiware 1.1.0

1 of the 4 container images this version deploys carry CVE-2026-2921.

Container imageDigestPackageFixed in
fiware/biz-ecosystem-charging-backend:11.7.029456835bb2c
gst-plugins-base1.0@1.16.3-0ubuntu1.4
1.16.3-0ubuntu1.4+esm2

Open the chart page →

64,489
mopidygeek-cookbookVerified publisher0.1.21 of 1See more

mopidy geek-cookbook 0.1.2

1 of the 1 container images this version deploys carry CVE-2026-2921.

Container imageDigestPackageFixed in
jaedb/iris:latest048cfbf58d57
gst-plugins-base1.0@1.22.0-3+deb12u4
1.22.0-3+deb12u6

Open the chart page →

12,958
openkmgeek-cookbookVerified publisher4.2.01 of 1See more

openkm geek-cookbook 4.2.0

1 of the 1 container images this version deploys carry CVE-2026-2921.

Container imageDigestPackageFixed in
openkm/openkm-ce:6.3.113bc465a7461b
gst-plugins-base1.0@1.16.3-0ubuntu1.1
1.16.3-0ubuntu1.4+esm2

Open the chart page →

27,949
hydrahydraVerified publisher0.9.51 of 2See more

hydra hydra 0.9.5

1 of the 2 container images this version deploys carry CVE-2026-2921.

Container imageDigestPackageFixed in
ghcr.io/smarter-project/hydra/isolated-vm:main4457b79b24cd
gst-plugins-base1.0@1.22.0-3+deb12u5
1.22.0-3+deb12u6

Open the chart page →

9,011
isolated-vmhydraVerified publisher0.9.41 of 1See more

isolated-vm hydra 0.9.4

1 of the 1 container images this version deploys carry CVE-2026-2921.

Container imageDigestPackageFixed in
ghcr.io/smarter-project/hydra/isolated-vm:main4457b79b24cd
gst-plugins-base1.0@1.22.0-3+deb12u5
1.22.0-3+deb12u6

Open the chart page →

7,733
itm-servicesintelVerified publisher2.0.01 of 8See more

itm-services intel 2.0.0

1 of the 8 container images this version deploys carry CVE-2026-2921.

Container imageDigestPackageFixed in
intel/dlstreamer-pipeline-server:2022.1.1-ubuntu20aa8f5483a2ef
gst-plugins-base1.0@1.16.2-4ubuntu0.1
1.16.3-0ubuntu1.4+esm2

Open the chart page →

18,066
splashntppoolVerified publisher1.0.41 of 1See more

splash ntppool 1.0.4

1 of the 1 container images this version deploys carry CVE-2026-2921.

Container imageDigestPackageFixed in
scrapinghub/splash:3.4.1a5f89bc84606
gst-plugins-base1.0@1.14.5-0ubuntu1~18.04.1
1.14.5-0ubuntu1~18.04.3+esm3

Open the chart page →

27,633
libretimepodzone-chartsVerified publisher0.4.12 of 9See more

libretime podzone-charts 0.4.1

2 of the 9 container images this version deploys carry CVE-2026-2921.

Container imageDigestPackageFixed in
ghcr.io/libretime/libretime-analyzer:latest3d5e236216ad
gst-plugins-base1.0@1.18.4-2+deb11u3
1.18.4-2+deb11u5
ghcr.io/libretime/libretime-playout:latest71a8706531aa
gst-plugins-base1.0@1.18.4-2+deb11u3
1.18.4-2+deb11u5

Open the chart page →

11,149
javareact-java0.1.01 of 1See more

java react-java 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-2921.

Container imageDigestPackageFixed in
project2team4/react:latest3ff031a08887
gst-plugins-base1.0@1.16.2-4ubuntu0.1
1.16.3-0ubuntu1.4+esm2

Open the chart page →

15,520
kurento_webrtc_demostunner0.1.01 of 2See more

kurento_webrtc_demo stunner 0.1.0

1 of the 2 container images this version deploys carry CVE-2026-2921.

Container imageDigestPackageFixed in
kurento/kurento-media-server:latest03c0d34d0828
gst-plugins-base1.0@1.24.2-1ubuntu0.3
1.24.2-1ubuntu0.4

Open the chart page →

12,460
stunner-kurento-one2one-callstunner0.1.01 of 2See more

stunner-kurento-one2one-call stunner 0.1.0

1 of the 2 container images this version deploys carry CVE-2026-2921.

Container imageDigestPackageFixed in
kurento/kurento-media-server:latest03c0d34d0828
gst-plugins-base1.0@1.24.2-1ubuntu0.3
1.24.2-1ubuntu0.4

Open the chart page →

12,460
playwright-synthetic-monitoringwork-adventure1.0.11 of 1See more

playwright-synthetic-monitoring work-adventure 1.0.1

1 of the 1 container images this version deploys carry CVE-2026-2921.

Container imageDigestPackageFixed in
workadventure/playwright-synthetic-monitoring:main92b664c2a06f
gst-plugins-base1.0@1.20.1-1ubuntu0.2
1.20.1-1ubuntu0.6

Open the chart page →

14,100

Container images carrying it

19 by charts deploying them

A fixed version is listed for 1 of the 1 affected package.

Container imageDigestPackageFixed inUsed by
kurento/kurento-media-server:latest03c0d34d0828
gst-plugins-base1.0@1.24.2-1ubuntu0.3
1.24.2-1ubuntu0.4
2
ghcr.io/games-on-whales/pulseaudio:1.0.0f34f98405c10
gst-plugins-base1.0@1.16.2-4ubuntu0.1
1.16.3-0ubuntu1.4+esm2
2
ghcr.io/games-on-whales/retroarch:1.0.0103fbcec2314
gst-plugins-base1.0@1.16.2-4ubuntu0.1
1.16.3-0ubuntu1.4+esm2
2
ghcr.io/smarter-project/hydra/isolated-vm:main4457b79b24cd
gst-plugins-base1.0@1.22.0-3+deb12u5
1.22.0-3+deb12u6
2
andrewmackrodt/firefox-x11:142.0.1-r133f9080470c9
gst-plugins-base1.0@1.20.1-1ubuntu0.4
1.20.1-1ubuntu0.6
1
erlangsolutions/wombatoam:4.1.284680c990147a
gst-plugins-base1.0@1.18.4-2
1.18.4-2+deb11u5
1
fiware/biz-ecosystem-charging-backend:11.7.029456835bb2c
gst-plugins-base1.0@1.16.3-0ubuntu1.4
1.16.3-0ubuntu1.4+esm2
1
intel/dlstreamer-pipeline-server:2022.1.1-ubuntu20aa8f5483a2ef
gst-plugins-base1.0@1.16.2-4ubuntu0.1
1.16.3-0ubuntu1.4+esm2
1
jaedb/iris:latest048cfbf58d57
gst-plugins-base1.0@1.22.0-3+deb12u4
1.22.0-3+deb12u6
1
openkm/openkm-ce:6.3.113bc465a7461b
gst-plugins-base1.0@1.16.3-0ubuntu1.1
1.16.3-0ubuntu1.4+esm2
1
project2team4/react:latest3ff031a08887
gst-plugins-base1.0@1.16.2-4ubuntu0.1
1.16.3-0ubuntu1.4+esm2
1
scrapinghub/splash:3.4.1a5f89bc84606
gst-plugins-base1.0@1.14.5-0ubuntu1~18.04.1
1.14.5-0ubuntu1~18.04.3+esm3
1
workadventure/playwright-synthetic-monitoring:main92b664c2a06f
gst-plugins-base1.0@1.20.1-1ubuntu0.2
1.20.1-1ubuntu0.6
1
ghcr.io/appscode/gotenberg:8.25f9104080d9a7
gst-plugins-base1.0@1.26.2-1
1.26.2-1+deb13u1
1
ghcr.io/libretime/libretime-analyzer:latest3d5e236216ad
gst-plugins-base1.0@1.18.4-2+deb11u3
1.18.4-2+deb11u5
1
ghcr.io/libretime/libretime-playout:latest71a8706531aa
gst-plugins-base1.0@1.18.4-2+deb11u3
1.18.4-2+deb11u5
1
ghcr.io/smarter-project/audio-client:v3.1.23c8375dc5487
gst-plugins-base1.0@1.16.3-0ubuntu1.1
1.16.3-0ubuntu1.4+esm2
1
ghcr.io/smarter-project/gstreamer:v1.0.25ecb16015aa8
gst-plugins-base1.0@1.16.3-0ubuntu1.1
1.16.3-0ubuntu1.4+esm2
1
ghcr.io/smarter-project/image-detector:v2.5.31dcca70c6446
gst-plugins-base1.0@1.16.3-0ubuntu1.1
1.16.3-0ubuntu1.4+esm2
1

syft 1.42.1 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.