StackRadar

CVE-2026-32882

High

Advisory

Published 19 May 2026In the index since 5 Sept 2026
Severity
High
worst across findings
CVSS
7.1
base score, highest
EPSS
0.003
25th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
211
of 17,781 indexed, latest versions
Container images
229
deployed by those charts
Fix available
1 of 1
affected package

The matching OSV records carry no description.

Carried by container images the latest versions of 211 of 17,781 indexed charts deploy, on 229 images.

Affected packageAffected versionsFixed inImages
libheifdeb1.12.0-2build1, 1.15.1-1, 1.15.1-1+deb12u1, 1.17.6-1ubuntu4+4 more1.12.0-2ubuntu0.1~esm3, 1.17.6-1ubuntu4.4, 1.19.8-1+deb13u1, 1.20.2-1ubuntu0.4229
OSV records
DEBIAN-CVE-2026-32882UBUNTU-CVE-2026-32882
Also known as
USN-8454-1

Charts affected

211 by stars
ChartLatestAffected imagesRadar Score
webappavzi-webapp0.1.01 of 1See more

webapp avzi-webapp 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-32882.

Container imageDigestPackageFixed in
avzini/web-app:latestf40b30210ed0
libheif@1.15.1-1
no fix listed

Open the chart page →

6,297
aws9helmaws9helm0.1.04 of 4See more

aws9helm aws9helm 0.1.0

4 of the 4 container images this version deploys carry CVE-2026-32882.

Container imageDigestPackageFixed in
kuzwolka/aws9:main1ad759b961b1
libheif@1.15.1-1+deb12u1
no fix listed
kuzwolka/aws9:news3e8880fbbb96
libheif@1.15.1-1+deb12u1
no fix listed
kuzwolka/aws9:blog4a7707410bf1
libheif@1.15.1-1+deb12u1
no fix listed
kuzwolka/aws9:shop84a9d9766345
libheif@1.15.1-1+deb12u1
no fix listed

Open the chart page →

18,344
basic-auth-s3-nginxbasic-auth-s3-nginxVerified publisher1.0.01 of 1See more

basic-auth-s3-nginx basic-auth-s3-nginx 1.0.0

1 of the 1 container images this version deploys carry CVE-2026-32882.

Container imageDigestPackageFixed in
dachichang/basic-auth-s3-nginx:1.0.07ccac90a935e
libheif@1.15.1-1
no fix listed

Open the chart page →

6,297
colosseumbook-k8sinfra-v21.0.182 of 5See more

colosseum book-k8sinfra-v2 1.0.18

2 of the 5 container images this version deploys carry CVE-2026-32882.

Container imageDigestPackageFixed in
sysnet4admin/colosseum-cms:loge74b43c7f492
libheif@1.15.1-1+deb12u1
no fix listed
sysnet4admin/colosseum-prm:log5802bfcd7fed
libheif@1.15.1-1+deb12u1
no fix listed

Open the chart page →

26,996
node-appbryopsida0.5.12 of 2See more

node-app bryopsida 0.5.1

2 of the 2 container images this version deploys carry CVE-2026-32882.

Container imageDigestPackageFixed in
library/node:ltsbe23f54a88d3
libheif@1.15.1-1+deb12u1
no fix listed
ghcr.io/bryopsida/k8s-dev-pod:main82d0b161161d
libheif@1.17.6-1ubuntu4.1
1.17.6-1ubuntu4.4

Open the chart page →

14,352
nginx-s3-gatewaycamptocamp31.0.01 of 1See more

nginx-s3-gateway camptocamp3 1.0.0

1 of the 1 container images this version deploys carry CVE-2026-32882.

Container imageDigestPackageFixed in
ghcr.io/nginxinc/nginx-s3-gateway/nginx-oss-s3-gateway:unprivileged-oss-202503313db8145349a3
libheif@1.15.1-1
no fix listed

Open the chart page →

5,039
tetragon-policy-buildercamptocamp30.1.11 of 1See more

tetragon-policy-builder camptocamp3 0.1.1

1 of the 1 container images this version deploys carry CVE-2026-32882.

Container imageDigestPackageFixed in
ghcr.io/camptocamp/tetragon-policy-builder:master0e99f12bb040
libheif@1.15.1-1+deb12u1
no fix listed

Open the chart page →

10,776
caninecanine0.1.101 of 7See more

canine canine 0.1.10

1 of the 7 container images this version deploys carry CVE-2026-32882.

Container imageDigestPackageFixed in
ghcr.io/caninehq/canine:latesta058034ca006
libheif@1.15.1-1+deb12u1
no fix listed

Open the chart page →

14,130
calibre-webcharts-derwitt-devVerified publisher1.1.21 of 1See more

calibre-web charts-derwitt-dev 1.1.2

1 of the 1 container images this version deploys carry CVE-2026-32882.

Container imageDigestPackageFixed in
ghcr.io/wittdennis/calibre-web:1.1.1aa7d5d5dd6be
libheif@1.15.1-1+deb12u1
no fix listed

Open the chart page →

4,911
kube-acp-stackcloudentity2.28.01 of 7See more

kube-acp-stack cloudentity 2.28.0

1 of the 7 container images this version deploys carry CVE-2026-32882.

Container imageDigestPackageFixed in
timescale/timescaledb-ha:pg17.2-ts2.18.2e8d0a9cc3db5
libheif@1.12.0-2build1
1.12.0-2ubuntu0.1~esm3

Open the chart page →

20,900
metaflowcluster-deploy0.2.21 of 1See more

metaflow cluster-deploy 0.2.2

1 of the 1 container images this version deploys carry CVE-2026-32882.

Container imageDigestPackageFixed in
public.ecr.aws/outerbounds/metaflow_metadata_service:v2.4.13f7567ce3419d
libheif@1.15.1-1+deb12u1
no fix listed

Open the chart page →

8,009
pbcore-utilcluster-deploy0.0.11 of 1See more

pbcore-util cluster-deploy 0.0.1

1 of the 1 container images this version deploys carry CVE-2026-32882.

Container imageDigestPackageFixed in
ghcr.io/wgbh-mla/pbcore-util:pr-66e04659a3baa
libheif@1.15.1-1+deb12u1
no fix listed

Open the chart page →

9,128
datumcosmicrocks1.0.51 of 2See more

datum cosmicrocks 1.0.5

1 of the 2 container images this version deploys carry CVE-2026-32882.

Container imageDigestPackageFixed in
ghcr.io/cosmicrocks/datum:v0.4.0beta76771c3cc8c3
libheif@1.17.6-1ubuntu4.2
1.17.6-1ubuntu4.4

Open the chart page →

2,944
dev-code-servercosmoVerified publisher0.0.71 of 2See more

dev-code-server cosmo 0.0.7

1 of the 2 container images this version deploys carry CVE-2026-32882.

Container imageDigestPackageFixed in
ghcr.io/cosmo-workspace/dev-code-server:v0.0.316fda01ae58a
libheif@1.15.1-1+deb12u1
no fix listed

Open the chart page →

14,559
rtcsic-charts0.1.11 of 5See more

rt csic-charts 0.1.1

1 of the 5 container images this version deploys carry CVE-2026-32882.

Container imageDigestPackageFixed in
firefart/requesttracker:5.0.40d6249906d8c
libheif@1.15.1-1
no fix listed

Open the chart page →

15,380
cypikcypik-app0.1.01 of 2See more

cypik cypik-app 0.1.0

1 of the 2 container images this version deploys carry CVE-2026-32882.

Container imageDigestPackageFixed in
library/nginx:1.25a484819eb602
libheif@1.15.1-1
no fix listed

Open the chart page →

7,503
damap-chartdamapVerified publisher0.3.01 of 5See more

damap-chart damap 0.3.0

1 of the 5 container images this version deploys carry CVE-2026-32882.

Container imageDigestPackageFixed in
ghcr.io/damap-org/damap-frontend:5.0.1609f48af4efc
libheif@1.19.8-1
1.19.8-1+deb13u1

Open the chart page →

13,936
db-connection-testdb-connection-testVerified publisher0.1.01 of 1See more

db-connection-test db-connection-test 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-32882.

Container imageDigestPackageFixed in
felipecs8/app-db-connection-test:v129e06c9c6385
libheif@1.15.1-1+deb12u1
no fix listed

Open the chart page →

10,090
linkdingdeimosfr-charts1.0.31 of 1See more

linkding deimosfr-charts 1.0.3

1 of the 1 container images this version deploys carry CVE-2026-32882.

Container imageDigestPackageFixed in
sissbruecker/linkding:1.35.00c5dddf0b37c
libheif@1.15.1-1
no fix listed

Open the chart page →

6,075
apachedevops0.1.01 of 4See more

apache devops 0.1.0

1 of the 4 container images this version deploys carry CVE-2026-32882.

Container imageDigestPackageFixed in
ghcr.io/codingducksrl/laravel:8.15be52524664c
libheif@1.12.0-2build1
1.12.0-2ubuntu0.1~esm3

Open the chart page →

30,031
laraveldevops0.10.31 of 4See more

laravel devops 0.10.3

1 of the 4 container images this version deploys carry CVE-2026-32882.

Container imageDigestPackageFixed in
ghcr.io/codingducksrl/laravel:8.15be52524664c
libheif@1.12.0-2build1
1.12.0-2ubuntu0.1~esm3

Open the chart page →

29,033
devtron-enterprisedevtron48.0.01 of 28See more

devtron-enterprise devtron 48.0.0

1 of the 28 container images this version deploys carry CVE-2026-32882.

Container imageDigestPackageFixed in
quay.io/devtron/notifier:9804331c-372-39294709c7da19c5a
libheif@1.15.1-1+deb12u1
no fix listed

Open the chart page →

68,240
devtron-enterprisedevtron-labs48.0.01 of 28See more

devtron-enterprise devtron-labs 48.0.0

1 of the 28 container images this version deploys carry CVE-2026-32882.

Container imageDigestPackageFixed in
quay.io/devtron/notifier:9804331c-372-39294709c7da19c5a
libheif@1.15.1-1+deb12u1
no fix listed

Open the chart page →

68,240
ownclouddjjudas21Verified publisher0.3.231 of 3See more

owncloud djjudas21 0.3.23

1 of the 3 container images this version deploys carry CVE-2026-32882.

Container imageDigestPackageFixed in
owncloud/server:10.16.3b3f9efdcd7f7
libheif@1.12.0-2build1
1.12.0-2ubuntu0.1~esm3

Open the chart page →

10,035
photoprismdjjudas21Verified publisher99.99.991 of 1See more

photoprism djjudas21 99.99.99

1 of the 1 container images this version deploys carry CVE-2026-32882.

Container imageDigestPackageFixed in
photoprism/photoprism:240711-cefc6fd632ca74
libheif@1.17.6-1ubuntu4
1.17.6-1ubuntu4.4

Open the chart page →

16,954
webtreesdjjudas21Verified publisher3.0.01 of 1See more

webtrees djjudas21 3.0.0

1 of the 1 container images this version deploys carry CVE-2026-32882.

Container imageDigestPackageFixed in
ghcr.io/nathanvaughn/webtrees:2.2.6034151b61a80
libheif@1.19.8-1
1.19.8-1+deb13u1

Open the chart page →

5,966
wizarrdjjudas21Verified publisher0.1.51 of 1See more

wizarr djjudas21 0.1.5

1 of the 1 container images this version deploys carry CVE-2026-32882.

Container imageDigestPackageFixed in
ghcr.io/wizarrrr/wizarr:4.2.0-beta.3d19d886d5090
libheif@1.15.1-1
no fix listed

Open the chart page →

14,627
dominodomino-iisasVerified publisher0.3.11 of 3See more

domino domino-iisas 0.3.1

1 of the 3 container images this version deploys carry CVE-2026-32882.

Container imageDigestPackageFixed in
ghcr.io/iisas/domino-frontend:k8s8e53861be292
libheif@1.15.1-1+deb12u1
no fix listed

Open the chart page →

10,270
codecovdoubanVerified publisher0.2.41 of 8See more

codecov douban 0.2.4

1 of the 8 container images this version deploys carry CVE-2026-32882.

Container imageDigestPackageFixed in
timescale/timescaledb-ha:pg14.6-ts2.9.1-p1cdb9ae118899
libheif@1.12.0-2build1
1.12.0-2ubuntu0.1~esm3

Open the chart page →

24,917
drogue-cloud-examplesdrogue-iotVerified publisher0.7.111 of 6See more

drogue-cloud-examples drogue-iot 0.7.11

1 of the 6 container images this version deploys carry CVE-2026-32882.

Container imageDigestPackageFixed in
timescale/timescaledb-ha:pg14-ts2.6-latested719c0cd19d
libheif@1.12.0-2build1
1.12.0-2ubuntu0.1~esm3

Open the chart page →

30,699
iotaeclipse-aeriosVerified publisher1.0.21 of 4See more

iota eclipse-aerios 1.0.2

1 of the 4 container images this version deploys carry CVE-2026-32882.

Container imageDigestPackageFixed in
eclipseaerios/iota-messages-api:lateste7f5ba0bc64d
libheif@1.19.8-1
1.19.8-1+deb13u1

Open the chart page →

13,391
kube-ecp-stackemqx-operator2.5.11 of 16See more

kube-ecp-stack emqx-operator 2.5.1

1 of the 16 container images this version deploys carry CVE-2026-32882.

Container imageDigestPackageFixed in
emqx/ecp-ui:2.5.1e33e9816f147
libheif@1.15.1-1+deb12u1
no fix listed

Open the chart page →

23,685
wordpresseoc-chartsVerified publisher0.14.41 of 1See more

wordpress eoc-charts 0.14.4

1 of the 1 container images this version deploys carry CVE-2026-32882.

Container imageDigestPackageFixed in
library/wordpress:6.8.3-apache30bff39330d1
libheif@1.19.8-1
1.19.8-1+deb13u1

Open the chart page →

7,233
powfaucetethereum-helm-chartsVerified publisher1.2.11 of 1See more

powfaucet ethereum-helm-charts 1.2.1

1 of the 1 container images this version deploys carry CVE-2026-32882.

Container imageDigestPackageFixed in
pk910/powfaucet:v2-stable3dcae6a62896
libheif@1.15.1-1+deb12u1
no fix listed

Open the chart page →

4,456
beeport-uiethersphereVerified publisher0.76.21 of 3See more

beeport-ui ethersphere 0.76.2

1 of the 3 container images this version deploys carry CVE-2026-32882.

Container imageDigestPackageFixed in
library/node:ltsbe23f54a88d3
libheif@1.15.1-1+deb12u1
no fix listed

Open the chart page →

7,368
multichain-uiethersphereVerified publisher0.73.11 of 3See more

multichain-ui ethersphere 0.73.1

1 of the 3 container images this version deploys carry CVE-2026-32882.

Container imageDigestPackageFixed in
library/node:ltsbe23f54a88d3
libheif@1.15.1-1+deb12u1
no fix listed

Open the chart page →

7,368
ferriscompanyferriscompany0.1.01 of 1See more

ferriscompany ferriscompany 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-32882.

Container imageDigestPackageFixed in
ghcr.io/libreconnect/ferriscompany:0.1.0-rc6ed86db9f0efe
libheif@1.15.1-1
no fix listed

Open the chart page →

10,741
business-api-ecosystemfiware1.1.01 of 4See more

business-api-ecosystem fiware 1.1.0

1 of the 4 container images this version deploys carry CVE-2026-32882.

Container imageDigestPackageFixed in
fiware/biz-ecosystem-logic-proxy:11.20.3d551a13e8278
libheif@1.15.1-1+deb12u1
no fix listed

Open the chart page →

64,489
scanservjsgabe565Verified publisher0.9.21 of 1See more

scanservjs gabe565 0.9.2

1 of the 1 container images this version deploys carry CVE-2026-32882.

Container imageDigestPackageFixed in
sbs20/scanservjs:release-v3.0.3dad1fd6e9a98
libheif@1.15.1-1
no fix listed

Open the chart page →

13,241
icinga2geek-cookbookVerified publisher4.2.01 of 1See more

icinga2 geek-cookbook 4.2.0

1 of the 1 container images this version deploys carry CVE-2026-32882.

Container imageDigestPackageFixed in
jordan/icinga2:latestf75025fe8ea8
libheif@1.15.1-1+deb12u1
no fix listed

Open the chart page →

9,077
mopidygeek-cookbookVerified publisher0.1.21 of 1See more

mopidy geek-cookbook 0.1.2

1 of the 1 container images this version deploys carry CVE-2026-32882.

Container imageDigestPackageFixed in
jaedb/iris:latest048cfbf58d57
libheif@1.15.1-1+deb12u1
no fix listed

Open the chart page →

12,958
photoprismgeek-cookbookVerified publisher7.2.01 of 1See more

photoprism geek-cookbook 7.2.0

1 of the 1 container images this version deploys carry CVE-2026-32882.

Container imageDigestPackageFixed in
photoprism/photoprism:220629-jammy2954334adbda
libheif@1.12.0-2build1
1.12.0-2ubuntu0.1~esm3

Open the chart page →

19,503
opentelemetry-demogpg-dev0.33.81 of 27See more

opentelemetry-demo gpg-dev 0.33.8

1 of the 27 container images this version deploys carry CVE-2026-32882.

Container imageDigestPackageFixed in
ghcr.io/open-telemetry/demo:1.12.0-imageprovider4e322858fe56
libheif@1.15.1-1
no fix listed

Open the chart page →

49,025
heliconehelicone0.1.421 of 14See more

helicone helicone 0.1.42

1 of the 14 container images this version deploys carry CVE-2026-32882.

Container imageDigestPackageFixed in
helicone/supabase-migration-runner:v2025.03.05-14a913936c97b
libheif@1.15.1-1
no fix listed

Open the chart page →

24,995
hello-worldhello-world-pponyVerified publisher0.3.01 of 1See more

hello-world hello-world-ppony 0.3.0

1 of the 1 container images this version deploys carry CVE-2026-32882.

Container imageDigestPackageFixed in
library/nginx:1.25.49ff236ed47fe
libheif@1.15.1-1
no fix listed

Open the chart page →

5,839
chart-bookhelm-deploy-book0.1.01 of 3See more

chart-book helm-deploy-book 0.1.0

1 of the 3 container images this version deploys carry CVE-2026-32882.

Container imageDigestPackageFixed in
dannielkil/book-frontend:latest937993927694
libheif@1.15.1-1
no fix listed

Open the chart page →

9,122
chiefonboardinghelmforgeVerified publisher1.1.141 of 3See more

chiefonboarding helmforge 1.1.14

1 of the 3 container images this version deploys carry CVE-2026-32882.

Container imageDigestPackageFixed in
chiefonboarding/chiefonboarding:v2.4.159bc7aa60fe7
libheif@1.19.8-1
1.19.8-1+deb13u1

Open the chart page →

10,849
entehelmforgeVerified publisher1.0.21 of 4See more

ente helmforge 1.0.2

1 of the 4 container images this version deploys carry CVE-2026-32882.

Container imageDigestPackageFixed in
ghcr.io/ente/web:5ab0c5b4c7a89c4e470ef6f793600da33cebf35d3f4864eb7f11
libheif@1.19.8-1
1.19.8-1+deb13u1

Open the chart page →

4,201
myapphelmingapp0.1.01 of 1See more

myapp helmingapp 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-32882.

Container imageDigestPackageFixed in
muhammedgamal/fp23:latest74b4cd69b6fa
libheif@1.15.1-1
no fix listed

Open the chart page →

12,607
openbashelm-openbasVerified publisher1.8.141 of 7See more

openbas helm-openbas 1.8.14

1 of the 7 container images this version deploys carry CVE-2026-32882.

Container imageDigestPackageFixed in
openbas/caldera-server:5.1.0a277796d9724
libheif@1.15.1-1+deb12u1
no fix listed

Open the chart page →

25,017

Container images carrying it

229 by charts deploying them

A fixed version is listed for 1 of the 1 affected package.

Container imageDigestPackageFixed inUsed by
sslhep/servicex-did-finder-xrootd:v1.8.5c284442b44e3
libheif@1.19.8-1
1.19.8-1+deb13u1
1
stashapp/stash-box:latesta534c8afdf39
libheif@1.17.6-1ubuntu4.1
1.17.6-1ubuntu4.4
1
structurizr/onpremises:2025.11.094b5ffb5119c8
libheif@1.17.6-1ubuntu4.1
1.17.6-1ubuntu4.4
1
substratusai/verba:v0.4.0-baseURL261695be635eb
libheif@1.15.1-1
no fix listed
1
svtechnmaa/svtech_nagvis:v1.2.118394b08e6c3
libheif@1.15.1-1
no fix listed
1
sysnet4admin/colosseum-cms:loge74b43c7f492
libheif@1.15.1-1+deb12u1
no fix listed
1
sysnet4admin/colosseum-prm:log5802bfcd7fed
libheif@1.15.1-1+deb12u1
no fix listed
1
teknas09/bird-pod:latest12a1fa85c4aa
libheif@1.15.1-1
no fix listed
1
theradius/loggia:0.463ba348546ec
libheif@1.15.1-1
no fix listed
1
thongngo3301/stakefish:latesta341af5976e3
libheif@1.15.1-1
no fix listed
1
timescale/timescaledb-ha:pg15-latesta8e3322e1cf9
libheif@1.12.0-2build1
1.12.0-2ubuntu0.1~esm3
1
timescale/timescaledb-ha:pg14.6-ts2.9.1-p1cdb9ae118899
libheif@1.12.0-2build1
1.12.0-2ubuntu0.1~esm3
1
timescale/timescaledb-ha:pg16d7db8f1085a3
libheif@1.12.0-2build1
1.12.0-2ubuntu0.1~esm3
1
timescale/timescaledb-ha:pg17.2-ts2.18.2e8d0a9cc3db5
libheif@1.12.0-2build1
1.12.0-2ubuntu0.1~esm3
1
timescale/timescaledb-ha:pg14-ts2.6-latested719c0cd19d
libheif@1.12.0-2build1
1.12.0-2ubuntu0.1~esm3
1
tinymediamanager/tinymediamanager:5.3.22b34dc85099e
libheif@1.19.8-1
1.19.8-1+deb13u1
1
treskon/portrait-web-setup:DEV-latesta475d80e4ecf
libheif@1.15.1-1+deb12u1
no fix listed
1
unitycatalog/unitycatalog-ui:main-aadc6fc3a688197b218
libheif@1.15.1-1+deb12u1
no fix listed
1
vlebediantsev/notes-admin-front:latest007c6670ff48
libheif@1.15.1-1
no fix listed
1
vlebediantsev/notes-project-front:latest945675fd2636
libheif@1.15.1-1
no fix listed
1
vlebediantsev/registration-ms-front-app-host:latest54f69d116c50
libheif@1.15.1-1
no fix listed
1
wiktorn/overpass-api:latest9bb5f4a9b54c
libheif@1.15.1-1+deb12u1
no fix listed
1
xom4ekp2p/infini-route-attestators-public-mainnet-attester:latestd0e0aa238b02
libheif@1.15.1-1
no fix listed
1
xom4ekp2p/infini-route-attestators-public-mainnet-avs-webapi:latest2745b5fd8785
libheif@1.15.1-1
no fix listed
1
zabbix/zabbix-web-nginx-mysql:ubuntu-6.4-latest0e5f69c4c54e
libheif@1.17.6-1ubuntu4.1
1.17.6-1ubuntu4.4
1
zabbix/zabbix-web-nginx-pgsql:ubuntu-7.0.237d4d58086515
libheif@1.17.6-1ubuntu4.2
1.17.6-1ubuntu4.4
1
zooproject/zoo-project:dru-19f3c4eed7c9ec9d1f0375bbe59f9d204a42bd3a9a507cb7e2dd
libheif@1.12.0-2build1
1.12.0-2ubuntu0.1~esm3
1
gcr.io/ml-pipeline/metadata-writer:2.3.09bcfd2abc361
libheif@1.15.1-1
no fix listed
1
ghcr.io/astriaorg/astrotrek:0.1.05889bea38e56
libheif@1.15.1-1
no fix listed
1
ghcr.io/camptocamp/tetragon-policy-builder:master0e99f12bb040
libheif@1.15.1-1+deb12u1
no fix listed
1
ghcr.io/caninehq/canine:latesta058034ca006
libheif@1.15.1-1+deb12u1
no fix listed
1
ghcr.io/cjmalloy/jasper:v1.3.282726a947bb65b
libheif@1.15.1-1+deb12u1
no fix listed
1
ghcr.io/cjmalloy/jasper-ui:v1.3.623246dc2160efe
libheif@1.19.8-1
1.19.8-1+deb13u1
1
ghcr.io/cosmicrocks/datum:v0.4.0beta76771c3cc8c3
libheif@1.17.6-1ubuntu4.2
1.17.6-1ubuntu4.4
1
ghcr.io/cosmo-tech/cosmotech-copilot-api:latesta2be95de450c
libheif@1.19.8-1
1.19.8-1+deb13u1
1
ghcr.io/cosmo-workspace/dev-code-server:v0.0.316fda01ae58a
libheif@1.15.1-1+deb12u1
no fix listed
1
ghcr.io/damap-org/damap-frontend:5.0.1609f48af4efc
libheif@1.19.8-1
1.19.8-1+deb13u1
1
ghcr.io/dask/dask-kubernetes-operator:2026.3.03225d2bc6b3c
libheif@1.19.8-1
1.19.8-1+deb13u1
1
ghcr.io/deltabadger/deltabadger:2.23.3bffe3c22fabc
libheif@1.19.8-1
1.19.8-1+deb13u1
1
ghcr.io/dfir-iris/iriswebapp_app:v2.4.26e59ebde55709
libheif@1.19.8-1
1.19.8-1+deb13u1
1
ghcr.io/drewburr-labs/mum-discord-bot:3.1.26e82914e1051
libheif@1.15.1-1
no fix listed
1
ghcr.io/ente/web:5ab0c5b4c7a89c4e470ef6f793600da33cebf35d3f4864eb7f11
libheif@1.19.8-1
1.19.8-1+deb13u1
1
ghcr.io/getsentry/taskbroker:26.7.264d0da74a578
libheif@1.15.1-1+deb12u1
no fix listed
1
ghcr.io/graphprotocol/availability-oracle:sha-28312fd472a25038957
libheif@1.15.1-1
no fix listed
1
ghcr.io/iisas/domino-frontend:k8s8e53861be292
libheif@1.15.1-1+deb12u1
no fix listed
1
ghcr.io/jmberesford/retrom-service:retrom-v0.7.144d763d58f11d
libheif@1.15.1-1+deb12u1
no fix listed
1
ghcr.io/karakeep-app/karakeep:0.33.2b069e4307dec
libheif@1.15.1-1+deb12u1
no fix listed
1
ghcr.io/libreconnect/ferriscompany:0.1.0-rc6ed86db9f0efe
libheif@1.15.1-1
no fix listed
1
ghcr.io/maybe-finance/maybe:0.5.0c6ab95ca9130
libheif@1.15.1-1+deb12u1
no fix listed
1
ghcr.io/mcwarman/backstage-sample-app/app:mainfae3c1f04311
libheif@1.19.8-1
1.19.8-1+deb13u1
1

syft 1.42.1 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.