StackRadar

CVE-2026-32740

High

Advisory

Published 19 May 2026In the index since 5 Sept 2026
Severity
High
worst across findings
CVSS
8.8
base score, highest
EPSS
0.005
42nd percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
191
of 17,781 indexed, latest versions
Container images
209
deployed by those charts
Fix available
2 of 2
affected packages

The matching OSV records carry no description.

Carried by container images the latest versions of 191 of 17,781 indexed charts deploy, on 209 images.

Affected packageAffected versionsFixed inImages
libheifdeb1.15.1-1, 1.15.1-1+deb12u1, 1.19.8-1, 1.20.2-11.19.8-1+deb13u1, 1.20.2-1ubuntu0.4203
libheifapk1.21.2-r01.23.0-r06
OSV records
ALPINE-CVE-2026-32740DEBIAN-CVE-2026-32740UBUNTU-CVE-2026-32740
Also known as
USN-8454-1

Charts affected

191 by stars
ChartLatestAffected imagesRadar Score
colosseumbook-k8sinfra-v21.0.182 of 5See more

colosseum book-k8sinfra-v2 1.0.18

2 of the 5 container images this version deploys carry CVE-2026-32740.

Container imageDigestPackageFixed in
sysnet4admin/colosseum-cms:loge74b43c7f492
libheif@1.15.1-1+deb12u1
no fix listed
sysnet4admin/colosseum-prm:log5802bfcd7fed
libheif@1.15.1-1+deb12u1
no fix listed

Open the chart page →

26,996
node-appbryopsida0.5.11 of 2See more

node-app bryopsida 0.5.1

1 of the 2 container images this version deploys carry CVE-2026-32740.

Container imageDigestPackageFixed in
library/node:ltsbe23f54a88d3
libheif@1.15.1-1+deb12u1
no fix listed

Open the chart page →

14,352
nginx-s3-gatewaycamptocamp31.0.01 of 1See more

nginx-s3-gateway camptocamp3 1.0.0

1 of the 1 container images this version deploys carry CVE-2026-32740.

Container imageDigestPackageFixed in
ghcr.io/nginxinc/nginx-s3-gateway/nginx-oss-s3-gateway:unprivileged-oss-202503313db8145349a3
libheif@1.15.1-1
no fix listed

Open the chart page →

5,039
tetragon-policy-buildercamptocamp30.1.11 of 1See more

tetragon-policy-builder camptocamp3 0.1.1

1 of the 1 container images this version deploys carry CVE-2026-32740.

Container imageDigestPackageFixed in
ghcr.io/camptocamp/tetragon-policy-builder:master0e99f12bb040
libheif@1.15.1-1+deb12u1
no fix listed

Open the chart page →

10,776
caninecanine0.1.101 of 7See more

canine canine 0.1.10

1 of the 7 container images this version deploys carry CVE-2026-32740.

Container imageDigestPackageFixed in
ghcr.io/caninehq/canine:latesta058034ca006
libheif@1.15.1-1+deb12u1
no fix listed

Open the chart page →

14,130
calibre-webcharts-derwitt-devVerified publisher1.1.21 of 1See more

calibre-web charts-derwitt-dev 1.1.2

1 of the 1 container images this version deploys carry CVE-2026-32740.

Container imageDigestPackageFixed in
ghcr.io/wittdennis/calibre-web:1.1.1aa7d5d5dd6be
libheif@1.15.1-1+deb12u1
no fix listed

Open the chart page →

4,911
metaflowcluster-deploy0.2.21 of 1See more

metaflow cluster-deploy 0.2.2

1 of the 1 container images this version deploys carry CVE-2026-32740.

Container imageDigestPackageFixed in
public.ecr.aws/outerbounds/metaflow_metadata_service:v2.4.13f7567ce3419d
libheif@1.15.1-1+deb12u1
no fix listed

Open the chart page →

8,009
pbcore-utilcluster-deploy0.0.11 of 1See more

pbcore-util cluster-deploy 0.0.1

1 of the 1 container images this version deploys carry CVE-2026-32740.

Container imageDigestPackageFixed in
ghcr.io/wgbh-mla/pbcore-util:pr-66e04659a3baa
libheif@1.15.1-1+deb12u1
no fix listed

Open the chart page →

9,128
dev-code-servercosmoVerified publisher0.0.71 of 2See more

dev-code-server cosmo 0.0.7

1 of the 2 container images this version deploys carry CVE-2026-32740.

Container imageDigestPackageFixed in
ghcr.io/cosmo-workspace/dev-code-server:v0.0.316fda01ae58a
libheif@1.15.1-1+deb12u1
no fix listed

Open the chart page →

14,559
rtcsic-charts0.1.11 of 5See more

rt csic-charts 0.1.1

1 of the 5 container images this version deploys carry CVE-2026-32740.

Container imageDigestPackageFixed in
firefart/requesttracker:5.0.40d6249906d8c
libheif@1.15.1-1
no fix listed

Open the chart page →

15,380
cypikcypik-app0.1.01 of 2See more

cypik cypik-app 0.1.0

1 of the 2 container images this version deploys carry CVE-2026-32740.

Container imageDigestPackageFixed in
library/nginx:1.25a484819eb602
libheif@1.15.1-1
no fix listed

Open the chart page →

7,503
damap-chartdamapVerified publisher0.3.01 of 5See more

damap-chart damap 0.3.0

1 of the 5 container images this version deploys carry CVE-2026-32740.

Container imageDigestPackageFixed in
ghcr.io/damap-org/damap-frontend:5.0.1609f48af4efc
libheif@1.19.8-1
1.19.8-1+deb13u1

Open the chart page →

13,936
db-connection-testdb-connection-testVerified publisher0.1.01 of 1See more

db-connection-test db-connection-test 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-32740.

Container imageDigestPackageFixed in
felipecs8/app-db-connection-test:v129e06c9c6385
libheif@1.15.1-1+deb12u1
no fix listed

Open the chart page →

10,090
linkdingdeimosfr-charts1.0.31 of 1See more

linkding deimosfr-charts 1.0.3

1 of the 1 container images this version deploys carry CVE-2026-32740.

Container imageDigestPackageFixed in
sissbruecker/linkding:1.35.00c5dddf0b37c
libheif@1.15.1-1
no fix listed

Open the chart page →

6,075
devtron-enterprisedevtron48.0.01 of 28See more

devtron-enterprise devtron 48.0.0

1 of the 28 container images this version deploys carry CVE-2026-32740.

Container imageDigestPackageFixed in
quay.io/devtron/notifier:9804331c-372-39294709c7da19c5a
libheif@1.15.1-1+deb12u1
no fix listed

Open the chart page →

68,240
devtron-enterprisedevtron-labs48.0.01 of 28See more

devtron-enterprise devtron-labs 48.0.0

1 of the 28 container images this version deploys carry CVE-2026-32740.

Container imageDigestPackageFixed in
quay.io/devtron/notifier:9804331c-372-39294709c7da19c5a
libheif@1.15.1-1+deb12u1
no fix listed

Open the chart page →

68,240
webtreesdjjudas21Verified publisher3.0.01 of 1See more

webtrees djjudas21 3.0.0

1 of the 1 container images this version deploys carry CVE-2026-32740.

Container imageDigestPackageFixed in
ghcr.io/nathanvaughn/webtrees:2.2.6034151b61a80
libheif@1.19.8-1
1.19.8-1+deb13u1

Open the chart page →

5,966
wizarrdjjudas21Verified publisher0.1.51 of 1See more

wizarr djjudas21 0.1.5

1 of the 1 container images this version deploys carry CVE-2026-32740.

Container imageDigestPackageFixed in
ghcr.io/wizarrrr/wizarr:4.2.0-beta.3d19d886d5090
libheif@1.15.1-1
no fix listed

Open the chart page →

14,627
dominodomino-iisasVerified publisher0.3.11 of 3See more

domino domino-iisas 0.3.1

1 of the 3 container images this version deploys carry CVE-2026-32740.

Container imageDigestPackageFixed in
ghcr.io/iisas/domino-frontend:k8s8e53861be292
libheif@1.15.1-1+deb12u1
no fix listed

Open the chart page →

10,270
iotaeclipse-aeriosVerified publisher1.0.21 of 4See more

iota eclipse-aerios 1.0.2

1 of the 4 container images this version deploys carry CVE-2026-32740.

Container imageDigestPackageFixed in
eclipseaerios/iota-messages-api:lateste7f5ba0bc64d
libheif@1.19.8-1
1.19.8-1+deb13u1

Open the chart page →

13,391
kube-ecp-stackemqx-operator2.5.11 of 16See more

kube-ecp-stack emqx-operator 2.5.1

1 of the 16 container images this version deploys carry CVE-2026-32740.

Container imageDigestPackageFixed in
emqx/ecp-ui:2.5.1e33e9816f147
libheif@1.15.1-1+deb12u1
no fix listed

Open the chart page →

23,685
wordpresseoc-chartsVerified publisher0.14.41 of 1See more

wordpress eoc-charts 0.14.4

1 of the 1 container images this version deploys carry CVE-2026-32740.

Container imageDigestPackageFixed in
library/wordpress:6.8.3-apache30bff39330d1
libheif@1.19.8-1
1.19.8-1+deb13u1

Open the chart page →

7,233
powfaucetethereum-helm-chartsVerified publisher1.2.11 of 1See more

powfaucet ethereum-helm-charts 1.2.1

1 of the 1 container images this version deploys carry CVE-2026-32740.

Container imageDigestPackageFixed in
pk910/powfaucet:v2-stable3dcae6a62896
libheif@1.15.1-1+deb12u1
no fix listed

Open the chart page →

4,456
beeport-uiethersphereVerified publisher0.76.21 of 3See more

beeport-ui ethersphere 0.76.2

1 of the 3 container images this version deploys carry CVE-2026-32740.

Container imageDigestPackageFixed in
library/node:ltsbe23f54a88d3
libheif@1.15.1-1+deb12u1
no fix listed

Open the chart page →

7,368
multichain-uiethersphereVerified publisher0.73.11 of 3See more

multichain-ui ethersphere 0.73.1

1 of the 3 container images this version deploys carry CVE-2026-32740.

Container imageDigestPackageFixed in
library/node:ltsbe23f54a88d3
libheif@1.15.1-1+deb12u1
no fix listed

Open the chart page →

7,368
ferriscompanyferriscompany0.1.01 of 1See more

ferriscompany ferriscompany 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-32740.

Container imageDigestPackageFixed in
ghcr.io/libreconnect/ferriscompany:0.1.0-rc6ed86db9f0efe
libheif@1.15.1-1
no fix listed

Open the chart page →

10,741
business-api-ecosystemfiware1.1.01 of 4See more

business-api-ecosystem fiware 1.1.0

1 of the 4 container images this version deploys carry CVE-2026-32740.

Container imageDigestPackageFixed in
fiware/biz-ecosystem-logic-proxy:11.20.3d551a13e8278
libheif@1.15.1-1+deb12u1
no fix listed

Open the chart page →

64,489
scanservjsgabe565Verified publisher0.9.21 of 1See more

scanservjs gabe565 0.9.2

1 of the 1 container images this version deploys carry CVE-2026-32740.

Container imageDigestPackageFixed in
sbs20/scanservjs:release-v3.0.3dad1fd6e9a98
libheif@1.15.1-1
no fix listed

Open the chart page →

13,241
icinga2geek-cookbookVerified publisher4.2.01 of 1See more

icinga2 geek-cookbook 4.2.0

1 of the 1 container images this version deploys carry CVE-2026-32740.

Container imageDigestPackageFixed in
jordan/icinga2:latestf75025fe8ea8
libheif@1.15.1-1+deb12u1
no fix listed

Open the chart page →

9,077
mopidygeek-cookbookVerified publisher0.1.21 of 1See more

mopidy geek-cookbook 0.1.2

1 of the 1 container images this version deploys carry CVE-2026-32740.

Container imageDigestPackageFixed in
jaedb/iris:latest048cfbf58d57
libheif@1.15.1-1+deb12u1
no fix listed

Open the chart page →

12,958
opentelemetry-demogpg-dev0.33.81 of 27See more

opentelemetry-demo gpg-dev 0.33.8

1 of the 27 container images this version deploys carry CVE-2026-32740.

Container imageDigestPackageFixed in
ghcr.io/open-telemetry/demo:1.12.0-imageprovider4e322858fe56
libheif@1.15.1-1
no fix listed

Open the chart page →

49,025
heliconehelicone0.1.421 of 14See more

helicone helicone 0.1.42

1 of the 14 container images this version deploys carry CVE-2026-32740.

Container imageDigestPackageFixed in
helicone/supabase-migration-runner:v2025.03.05-14a913936c97b
libheif@1.15.1-1
no fix listed

Open the chart page →

24,995
hello-worldhello-world-pponyVerified publisher0.3.01 of 1See more

hello-world hello-world-ppony 0.3.0

1 of the 1 container images this version deploys carry CVE-2026-32740.

Container imageDigestPackageFixed in
library/nginx:1.25.49ff236ed47fe
libheif@1.15.1-1
no fix listed

Open the chart page →

5,839
chart-bookhelm-deploy-book0.1.01 of 3See more

chart-book helm-deploy-book 0.1.0

1 of the 3 container images this version deploys carry CVE-2026-32740.

Container imageDigestPackageFixed in
dannielkil/book-frontend:latest937993927694
libheif@1.15.1-1
no fix listed

Open the chart page →

9,122
appwritehelmforgeVerified publisher1.3.41 of 5See more

appwrite helmforge 1.3.4

1 of the 5 container images this version deploys carry CVE-2026-32740.

Container imageDigestPackageFixed in
appwrite/appwrite:1.9.6adc7d0e7ec23
libheif@1.21.2-r0
1.23.0-r0

Open the chart page →

6,952
chiefonboardinghelmforgeVerified publisher1.1.141 of 3See more

chiefonboarding helmforge 1.1.14

1 of the 3 container images this version deploys carry CVE-2026-32740.

Container imageDigestPackageFixed in
chiefonboarding/chiefonboarding:v2.4.159bc7aa60fe7
libheif@1.19.8-1
1.19.8-1+deb13u1

Open the chart page →

10,849
entehelmforgeVerified publisher1.0.21 of 4See more

ente helmforge 1.0.2

1 of the 4 container images this version deploys carry CVE-2026-32740.

Container imageDigestPackageFixed in
ghcr.io/ente/web:5ab0c5b4c7a89c4e470ef6f793600da33cebf35d3f4864eb7f11
libheif@1.19.8-1
1.19.8-1+deb13u1

Open the chart page →

4,201
myapphelmingapp0.1.01 of 1See more

myapp helmingapp 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-32740.

Container imageDigestPackageFixed in
muhammedgamal/fp23:latest74b4cd69b6fa
libheif@1.15.1-1
no fix listed

Open the chart page →

12,607
openbashelm-openbasVerified publisher1.8.141 of 7See more

openbas helm-openbas 1.8.14

1 of the 7 container images this version deploys carry CVE-2026-32740.

Container imageDigestPackageFixed in
openbas/caldera-server:5.1.0a277796d9724
libheif@1.15.1-1+deb12u1
no fix listed

Open the chart page →

25,017
samplehelmapphelmtraining3.0.01 of 1See more

samplehelmapp helmtraining 3.0.0

1 of the 1 container images this version deploys carry CVE-2026-32740.

Container imageDigestPackageFixed in
praravind1801/helmimages:3.0.0f29d637b9ce1
libheif@1.15.1-1
no fix listed

Open the chart page →

5,973
paperlesshomelabcihelmchartstestVerified publisher9.1.91 of 1See more

paperless homelabcihelmchartstest 9.1.9

1 of the 1 container images this version deploys carry CVE-2026-32740.

Container imageDigestPackageFixed in
ghcr.io/paperless-ngx/paperless-ngx:2.0.1ab255bea133e
libheif@1.15.1-1
no fix listed

Open the chart page →

16,384
ilum-unity-catalogilumVerified publisher0.1.01 of 4See more

ilum-unity-catalog ilum 0.1.0

1 of the 4 container images this version deploys carry CVE-2026-32740.

Container imageDigestPackageFixed in
unitycatalog/unitycatalog-ui:main-aadc6fc3a688197b218
libheif@1.15.1-1+deb12u1
no fix listed

Open the chart page →

11,812
intelowlintelowl-helm6.6.1-01-06-20261 of 5See more

intelowl intelowl-helm 6.6.1-01-06-2026

1 of the 5 container images this version deploys carry CVE-2026-32740.

Container imageDigestPackageFixed in
intelowlproject/intelowl:v6.6.10b22e547ea6b
libheif@1.15.1-1
no fix listed

Open the chart page →

17,852
opencloudjacobcolvinVerified publisher0.2.36 of 13See more

opencloud jacobcolvin 0.2.3

6 of the 13 container images this version deploys carry CVE-2026-32740.

Container imageDigestPackageFixed in
opencloudeu/web-extensions:unzip-1.0.01691ad6612a3
libheif@1.15.1-1+deb12u1
no fix listed
opencloudeu/web-extensions:draw-io-1.0.027cb9b952f0d
libheif@1.15.1-1+deb12u1
no fix listed
opencloudeu/web-extensions:external-sites-1.0.05b176baa3694
libheif@1.15.1-1+deb12u1
no fix listed
opencloudeu/web-extensions:importer-1.0.06e8b2df6c5a4
libheif@1.15.1-1+deb12u1
no fix listed
opencloudeu/web-extensions:progress-bars-1.0.082f888a34440
libheif@1.15.1-1+deb12u1
no fix listed
opencloudeu/web-extensions:json-viewer-1.0.0e0ac35a9576e
libheif@1.15.1-1+deb12u1
no fix listed

Open the chart page →

45,239
deconzjanip81-helm-chartsVerified publisher0.1.11 of 1See more

deconz janip81-helm-charts 0.1.1

1 of the 1 container images this version deploys carry CVE-2026-32740.

Container imageDigestPackageFixed in
deconzcommunity/deconz:2.29.2062de2362641
libheif@1.15.1-1+deb12u1
no fix listed

Open the chart page →

10,780
jasperjasperVerified publisher1.0.2021 of 2See more

jasper jasper 1.0.202

1 of the 2 container images this version deploys carry CVE-2026-32740.

Container imageDigestPackageFixed in
ghcr.io/cjmalloy/jasper:v1.3.282726a947bb65b
libheif@1.15.1-1+deb12u1
no fix listed

Open the chart page →

5,998
jasper-uijasperVerified publisher1.0.341 of 1See more

jasper-ui jasper 1.0.34

1 of the 1 container images this version deploys carry CVE-2026-32740.

Container imageDigestPackageFixed in
ghcr.io/cjmalloy/jasper-ui:v1.3.623246dc2160efe
libheif@1.19.8-1
1.19.8-1+deb13u1

Open the chart page →

2,559
manyfoldjeffrescVerified publisher1.0.31 of 1See more

manyfold jeffresc 1.0.3

1 of the 1 container images this version deploys carry CVE-2026-32740.

Container imageDigestPackageFixed in
ghcr.io/manyfold3d/manyfold:0.136.0d14ca4d82475
libheif@1.21.2-r0
1.23.0-r0

Open the chart page →

1,960
image-storage-servicejtektVerified publisher0.4.32 of 4See more

image-storage-service jtekt 0.4.3

2 of the 4 container images this version deploys carry CVE-2026-32740.

Container imageDigestPackageFixed in
public.ecr.aws/jtekt-corporation/image-storage-service:v1.16.17b1493760c716
libheif@1.15.1-1
no fix listed
public.ecr.aws/jtekt-corporation/image-storage-service-gui:v1.9.434823c8abe00
libheif@1.15.1-1
no fix listed

Open the chart page →

22,589
shinsei-managerjtektVerified publisher0.2.07 of 8See more

shinsei-manager jtekt 0.2.0

7 of the 8 container images this version deploys carry CVE-2026-32740.

Container imageDigestPackageFixed in
moreillon/api-proxy:latestd7d4a5463525
libheif@1.15.1-1+deb12u1
no fix listed
moreillon/group-manager:latest3caa8f710ee0
libheif@1.15.1-1+deb12u1
no fix listed
moreillon/group-manager-front:latest5f0a38498271
libheif@1.19.8-1
1.19.8-1+deb13u1
moreillon/user-manager:v5.0.2e1c9bfab5c16
libheif@1.15.1-1
no fix listed
moreillon/user-manager-front:v5.0.3b067dbbbb6af
libheif@1.15.1-1
no fix listed
public.ecr.aws/jtekt-corporation/shinsei-manager:v2.8.15cd62142d6ed
libheif@1.15.1-1
no fix listed
public.ecr.aws/jtekt-corporation/shinsei-manager-front:v1.5.5f8fb4eea4071
libheif@1.15.1-1
no fix listed

Open the chart page →

63,461

Container images carrying it

209 by charts deploying them

A fixed version is listed for 2 of the 2 affected packages.

Container imageDigestPackageFixed inUsed by
vlebediantsev/notes-admin-front:latest007c6670ff48
libheif@1.15.1-1
no fix listed
1
vlebediantsev/notes-project-front:latest945675fd2636
libheif@1.15.1-1
no fix listed
1
vlebediantsev/registration-ms-front-app-host:latest54f69d116c50
libheif@1.15.1-1
no fix listed
1
wiktorn/overpass-api:latest9bb5f4a9b54c
libheif@1.15.1-1+deb12u1
no fix listed
1
xom4ekp2p/infini-route-attestators-public-mainnet-attester:latestd0e0aa238b02
libheif@1.15.1-1
no fix listed
1
xom4ekp2p/infini-route-attestators-public-mainnet-avs-webapi:latest2745b5fd8785
libheif@1.15.1-1
no fix listed
1
gcr.io/ml-pipeline/metadata-writer:2.3.09bcfd2abc361
libheif@1.15.1-1
no fix listed
1
ghcr.io/astriaorg/astrotrek:0.1.05889bea38e56
libheif@1.15.1-1
no fix listed
1
ghcr.io/camptocamp/tetragon-policy-builder:master0e99f12bb040
libheif@1.15.1-1+deb12u1
no fix listed
1
ghcr.io/caninehq/canine:latesta058034ca006
libheif@1.15.1-1+deb12u1
no fix listed
1
ghcr.io/cjmalloy/jasper:v1.3.282726a947bb65b
libheif@1.15.1-1+deb12u1
no fix listed
1
ghcr.io/cjmalloy/jasper-ui:v1.3.623246dc2160efe
libheif@1.19.8-1
1.19.8-1+deb13u1
1
ghcr.io/cosmo-tech/cosmotech-copilot-api:latesta2be95de450c
libheif@1.19.8-1
1.19.8-1+deb13u1
1
ghcr.io/cosmo-workspace/dev-code-server:v0.0.316fda01ae58a
libheif@1.15.1-1+deb12u1
no fix listed
1
ghcr.io/damap-org/damap-frontend:5.0.1609f48af4efc
libheif@1.19.8-1
1.19.8-1+deb13u1
1
ghcr.io/dask/dask-kubernetes-operator:2026.3.03225d2bc6b3c
libheif@1.19.8-1
1.19.8-1+deb13u1
1
ghcr.io/deltabadger/deltabadger:2.23.3bffe3c22fabc
libheif@1.19.8-1
1.19.8-1+deb13u1
1
ghcr.io/dfir-iris/iriswebapp_app:v2.4.26e59ebde55709
libheif@1.19.8-1
1.19.8-1+deb13u1
1
ghcr.io/drewburr-labs/mum-discord-bot:3.1.26e82914e1051
libheif@1.15.1-1
no fix listed
1
ghcr.io/ente/web:5ab0c5b4c7a89c4e470ef6f793600da33cebf35d3f4864eb7f11
libheif@1.19.8-1
1.19.8-1+deb13u1
1
ghcr.io/getsentry/taskbroker:26.7.264d0da74a578
libheif@1.15.1-1+deb12u1
no fix listed
1
ghcr.io/graphprotocol/availability-oracle:sha-28312fd472a25038957
libheif@1.15.1-1
no fix listed
1
ghcr.io/home-operations/home-assistant:2026.3.1067e54e2e107
libheif@1.21.2-r0
1.23.0-r0
1
ghcr.io/iisas/domino-frontend:k8s8e53861be292
libheif@1.15.1-1+deb12u1
no fix listed
1
ghcr.io/jmberesford/retrom-service:retrom-v0.7.144d763d58f11d
libheif@1.15.1-1+deb12u1
no fix listed
1
ghcr.io/karakeep-app/karakeep:0.33.2b069e4307dec
libheif@1.15.1-1+deb12u1
no fix listed
1
ghcr.io/libreconnect/ferriscompany:0.1.0-rc6ed86db9f0efe
libheif@1.15.1-1
no fix listed
1
ghcr.io/manyfold3d/manyfold:0.136.0d14ca4d82475
libheif@1.21.2-r0
1.23.0-r0
1
ghcr.io/maybe-finance/maybe:0.5.0c6ab95ca9130
libheif@1.15.1-1+deb12u1
no fix listed
1
ghcr.io/mcwarman/backstage-sample-app/app:mainfae3c1f04311
libheif@1.19.8-1
1.19.8-1+deb13u1
1
ghcr.io/nathanvaughn/webtrees:2.2.6034151b61a80
libheif@1.19.8-1
1.19.8-1+deb13u1
1
ghcr.io/nefelim4ag/pingdom-operator:0.0.15f8c7afdcf439
libheif@1.15.1-1
no fix listed
1
ghcr.io/opencatalogi/web-app:deva1a7f507f6ae
libheif@1.15.1-1
no fix listed
1
ghcr.io/opencost/opencost-parquet-exporter:v0.2.1ce85ef0ce665
libheif@1.15.1-1+deb12u1
no fix listed
1
ghcr.io/open-telemetry/demo:1.12.0-imageprovider4e322858fe56
libheif@1.15.1-1
no fix listed
1
ghcr.io/paperless-ngx/paperless-ngx:2.13.10642357c5dbd
libheif@1.15.1-1
no fix listed
1
ghcr.io/paperless-ngx/paperless-ngx:2.20.134b05bcd28e69
libheif@1.19.8-1
1.19.8-1+deb13u1
1
ghcr.io/paperless-ngx/paperless-ngx:2.20.357ad9565bff3
libheif@1.19.8-1
1.19.8-1+deb13u1
1
ghcr.io/paperless-ngx/paperless-ngx:2.20.5665f2f5cc548
libheif@1.19.8-1
1.19.8-1+deb13u1
1
ghcr.io/paperless-ngx/paperless-ngx:2.0.1ab255bea133e
libheif@1.15.1-1
no fix listed
1
ghcr.io/paperless-ngx/paperless-ngx:2.20.14b89f83345532
libheif@1.19.8-1
1.19.8-1+deb13u1
1
ghcr.io/sdwbgn/unitycatalog-helm/docker/unitycatalog-ui:0.2.1-5d668c1ed07e7ca098d
libheif@1.15.1-1+deb12u1
no fix listed
1
ghcr.io/wgbh-mla/pbcore-util:pr-66e04659a3baa
libheif@1.15.1-1+deb12u1
no fix listed
1
ghcr.io/wittdennis/calibre-web:1.1.1aa7d5d5dd6be
libheif@1.15.1-1+deb12u1
no fix listed
1
ghcr.io/wizarrrr/wizarr:4.2.0-beta.3d19d886d5090
libheif@1.15.1-1
no fix listed
1
ghcr.io/zoriya/kyoo_autosync:4.7.1fbba58ddb1a6
libheif@1.15.1-1+deb12u1
no fix listed
1
ghcr.io/zoriya/kyoo_scanner:4.7.17dc0ee57b628
libheif@1.15.1-1+deb12u1
no fix listed
1
public.ecr.aws/jtekt-corporation/image-storage-service:v1.16.17b1493760c716
libheif@1.15.1-1
no fix listed
1
public.ecr.aws/jtekt-corporation/image-storage-service-gui:v1.9.434823c8abe00
libheif@1.15.1-1
no fix listed
1
public.ecr.aws/jtekt-corporation/shinsei-manager:v2.8.15cd62142d6ed
libheif@1.15.1-1
no fix listed
1

syft 1.42.1 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.