StackRadar

CVE-2026-36849

Medium

Advisory

Published 17 Jun 2026In the index since 5 Sept 2026
Severity
Medium
worst across findings
CVSS
5.5
base score, highest
EPSS
—
probability of exploitation
CISA KEV
Not listed
no confirmed exploitation
Charts affected
566
of 17,781 indexed, latest versions
Container images
452
deployed by those charts
Fix available
None
affected package

The matching OSV records carry no description.

Carried by container images the latest versions of 566 of 17,781 indexed charts deploy, on 452 images.

Affected packageAffected versionsFixed inImages
tiffdeb4.0.3-7ubuntu0.9, 4.0.6-1ubuntu0.2, 4.0.6-1ubuntu0.4, 4.0.6-1ubuntu0.5+46 moreno fix listed452
OSV records
UBUNTU-CVE-2026-36849DEBIAN-CVE-2026-36849

Charts affected

566 by stars
ChartLatestAffected imagesRadar Score
nextcloudnextcloud9.2.61 of 1See more

nextcloud nextcloud 9.2.6

1 of the 1 container images this version deploys carry CVE-2026-36849.

Container imageDigestPackageFixed in
library/nextcloud:34.0.3-apacheb97df9e0e1ee
tiff@4.7.0-3+deb13u3
no fix listed

Open the chart page →

4,507
nginx-ingressnginxVerified publisher2.7.11 of 1See more

nginx-ingress nginx 2.7.1

1 of the 1 container images this version deploys carry CVE-2026-36849.

Container imageDigestPackageFixed in
nginx/nginx-ingress:5.6.18ca7b42ae702
tiff@4.7.0-3+deb13u3
no fix listed

Open the chart page →

1,285
uptime-kumauptime-kumaVerified publisher4.2.01 of 1See more

uptime-kuma uptime-kuma 4.2.0

1 of the 1 container images this version deploys carry CVE-2026-36849.

Container imageDigestPackageFixed in
louislam/uptime-kuma:2.5.0a8610b3b4c38
tiff@4.5.0-6+deb12u4
no fix listed

Open the chart page →

30,159
zabbixzabbix-communityVerified publisher7.1.02 of 5See more

zabbix zabbix-community 7.1.0

2 of the 5 container images this version deploys carry CVE-2026-36849.

Container imageDigestPackageFixed in
zabbix/zabbix-web-nginx-pgsql:ubuntu-7.0.237d4d58086515
tiff@4.5.1+git230720-4ubuntu2.4
no fix listed
zabbix/zabbix-web-service:ubuntu-7.0.23915b3183e054
tiff@4.5.1+git230720-4ubuntu2.4
no fix listed

Open the chart page →

13,664
zammadzammadOfficialVerified publisher18.0.51 of 5See more

zammad zammad 18.0.5

1 of the 5 container images this version deploys carry CVE-2026-36849.

Container imageDigestPackageFixed in
ghcr.io/zammad/zammad:7.1.3-0011e65123a43ecc
tiff@4.7.0-3+deb13u3
no fix listed

Open the chart page →

6,887
clearmlallegroaiOfficialVerified publisher7.15.01 of 4See more

clearml allegroai 7.15.0

1 of the 4 container images this version deploys carry CVE-2026-36849.

Container imageDigestPackageFixed in
allegroai/clearml:2.0.0-613713ae38f7daf
tiff@4.5.0-6+deb12u1
no fix listed

Open the chart page →

10,622
penpotpenpotOfficialVerified publisher1.9.01 of 4See more

penpot penpot 1.9.0

1 of the 4 container images this version deploys carry CVE-2026-36849.

Container imageDigestPackageFixed in
penpotapp/exporter:2.17.272a8061e8806
tiff@4.7.0-3ubuntu5
no fix listed

Open the chart page →

4,314
difydoubanVerified publisher0.10.01 of 6See more

dify douban 0.10.0

1 of the 6 container images this version deploys carry CVE-2026-36849.

Container imageDigestPackageFixed in
langgenius/dify-plugin-daemon:0.5.1-local8269050f192e
tiff@4.5.1+git230720-4ubuntu2.4
no fix listed

Open the chart page →

19,391
difydify-helmVerified publisher0.38.02 of 11See more

dify dify-helm 0.38.0

2 of the 11 container images this version deploys carry CVE-2026-36849.

Container imageDigestPackageFixed in
langgenius/dify-plugin-daemon:0.6.3-local3c694329357b
tiff@4.5.1+git230720-4ubuntu2.5
no fix listed
library/nginx:latest05b8cb60c354
tiff@4.7.0-3+deb13u3
no fix listed

Open the chart page →

22,002
plantumlstevehipwellVerified publisher3.49.01 of 1See more

plantuml stevehipwell 3.49.0

1 of the 1 container images this version deploys carry CVE-2026-36849.

Container imageDigestPackageFixed in
plantuml/plantuml-server:jetty-v1.2026.85f6f99ec2fc1
tiff@4.5.1+git230720-4ubuntu2.5
no fix listed

Open the chart page →

1,869
openprojectopenproject-helm-chartsOfficialVerified publisher13.11.02 of 5See more

openproject openproject-helm-charts 13.11.0

2 of the 5 container images this version deploys carry CVE-2026-36849.

Container imageDigestPackageFixed in
openproject/hocuspocus:release-338001b288dc1359dfb5
tiff@4.5.0-6+deb12u2
no fix listed
openproject/openproject:17.8.0-slim48952034215d
tiff@4.7.0-3+deb13u3
no fix listed

Open the chart page →

19,926
zabbixcetic3.1.32 of 5See more

zabbix cetic 3.1.3

2 of the 5 container images this version deploys carry CVE-2026-36849.

Container imageDigestPackageFixed in
zabbix/zabbix-web-nginx-pgsql:ubuntu-6.0.899e9a090b516
tiff@4.3.0-6
no fix listed
zabbix/zabbix-web-service:ubuntu-6.0.8ee4baa872280
tiff@4.3.0-6
no fix listed

Open the chart page →

33,725
daskdask2024.1.11 of 2See more

dask dask 2024.1.1

1 of the 2 container images this version deploys carry CVE-2026-36849.

Container imageDigestPackageFixed in
ghcr.io/dask/dask-notebook:2024.1.0f53bde3acd4f
tiff@4.3.0-6ubuntu0.7
no fix listed

Open the chart page →

12,746
gotenbergmaikumoriVerified publisher1.25.01 of 1See more

gotenberg maikumori 1.25.0

1 of the 1 container images this version deploys carry CVE-2026-36849.

Container imageDigestPackageFixed in
gotenberg/gotenberg:8.36.087c16b9f3642
tiff@4.7.0-3+deb13u3
no fix listed

Open the chart page →

9,683
oneuptimeoneuptimeOfficialVerified publisher13.0.42 of 7See more

oneuptime oneuptime 13.0.4

2 of the 7 container images this version deploys carry CVE-2026-36849.

Container imageDigestPackageFixed in
oneuptime/probe:release6b2d98713711
tiff@4.5.0-6+deb12u4
no fix listed
oneuptime/runner:release4accc516d800
tiff@4.7.0-3+deb13u3
no fix listed

Open the chart page →

11,192
snipeitt3n3.4.11 of 2See more

snipeit t3n 3.4.1

1 of the 2 container images this version deploys carry CVE-2026-36849.

Container imageDigestPackageFixed in
snipe/snipe-it:v6.0.1455fb7636a98c
tiff@4.1.0+git191117-2ubuntu0.20.04.5
no fix listed

Open the chart page →

18,509
wordpressgroundhog2k0.16.41 of 1See more

wordpress groundhog2k 0.16.4

1 of the 1 container images this version deploys carry CVE-2026-36849.

Container imageDigestPackageFixed in
library/wordpress:7.1.0-apache5a93c470ae82
tiff@4.7.0-3+deb13u3
no fix listed

Open the chart page →

3,685
budibasebudibase0.0.0-master1 of 7See more

budibase budibase 0.0.0-master

1 of the 7 container images this version deploys carry CVE-2026-36849.

Container imageDigestPackageFixed in
budibase/proxy:3.41.38d780b6ee602
tiff@4.7.0-3+deb13u2
no fix listed

Open the chart page →

10,775
minecraft-proxyminecraft-server-chartsVerified publisher3.10.01 of 1See more

minecraft-proxy minecraft-server-charts 3.10.0

1 of the 1 container images this version deploys carry CVE-2026-36849.

Container imageDigestPackageFixed in
itzg/bungeecord:latest1c59f9631f3b
tiff@4.7.0-3ubuntu5
no fix listed

Open the chart page →

3,074
nextcloudgroundhog2k0.22.51 of 3See more

nextcloud groundhog2k 0.22.5

1 of the 3 container images this version deploys carry CVE-2026-36849.

Container imageDigestPackageFixed in
library/nextcloud:34.0.3:34.0.3-apacheb97df9e0e1ee
tiff@4.7.0-3+deb13u3
no fix listed

Open the chart page →

4,507
paperless-ngxpaperless-ngxVerified publisher0.3.221 of 3See more

paperless-ngx paperless-ngx 0.3.22

1 of the 3 container images this version deploys carry CVE-2026-36849.

Container imageDigestPackageFixed in
ghcr.io/paperless-ngx/paperless-ngx:3.1.3aa810a36942c
tiff@4.7.0-3+deb13u3
no fix listed

Open the chart page →

8,489
zabbix-serveraekondratievVerified publisher1.0.61 of 4See more

zabbix-server aekondratiev 1.0.6

1 of the 4 container images this version deploys carry CVE-2026-36849.

Container imageDigestPackageFixed in
zabbix/zabbix-web-nginx-pgsql:ubuntu-5.4.601de79c31391
tiff@4.1.0+git191117-2ubuntu0.20.04.2
no fix listed

Open the chart page →

30,668
hadoopbigdata-chartsVerified publisher1.0.11 of 2See more

hadoop bigdata-charts 1.0.1

1 of the 2 container images this version deploys carry CVE-2026-36849.

Container imageDigestPackageFixed in
5200710/hadoop:3.2.3-java8092d3088a5fb
tiff@4.1.0+git191117-2ubuntu0.20.04.11
no fix listed

Open the chart page →

12,111
cortexcortex3.3.81 of 4See more

cortex cortex 3.3.8

1 of the 4 container images this version deploys carry CVE-2026-36849.

Container imageDigestPackageFixed in
library/nginx:1.3105b8cb60c354
tiff@4.7.0-3+deb13u3
no fix listed

Open the chart page →

3,897
wordpresshelmforgeVerified publisher3.0.61 of 3See more

wordpress helmforge 3.0.6

1 of the 3 container images this version deploys carry CVE-2026-36849.

Container imageDigestPackageFixed in
library/wordpress:7.1.0-apache5a93c470ae82
tiff@4.7.0-3+deb13u3
no fix listed

Open the chart page →

4,148
nginx-ingressnginx-ingress-chartVerified publisher0.0.0-edge1 of 1See more

nginx-ingress nginx-ingress-chart 0.0.0-edge

1 of the 1 container images this version deploys carry CVE-2026-36849.

Container imageDigestPackageFixed in
nginx/nginx-ingress:edge520d439f9a9a
tiff@4.7.0-3+deb13u3
no fix listed

Open the chart page →

1,244
passboltpassbolt2.1.11 of 6See more

passbolt passbolt 2.1.1

1 of the 6 container images this version deploys carry CVE-2026-36849.

Container imageDigestPackageFixed in
passbolt/passbolt:5.13.0-1-ceaf3a620902a0
tiff@4.7.0-3+deb13u2
no fix listed

Open the chart page →

13,350
selenium-gridselenium-grid0.59.12 of 4See more

selenium-grid selenium-grid 0.59.1

2 of the 4 container images this version deploys carry CVE-2026-36849.

Container imageDigestPackageFixed in
selenium/node-chrome:4.48.0-202609055ac71fd8dd1e
tiff@4.5.1+git230720-4ubuntu2.5
no fix listed
selenium/node-firefox:4.48.0-2026090574a5c1c90f95
tiff@4.5.1+git230720-4ubuntu2.5
no fix listed

Open the chart page →

7,028
minecraft-overvieweralphani-helm-chartsVerified publisher0.1.01 of 3See more

minecraft-overviewer alphani-helm-charts 0.1.0

1 of the 3 container images this version deploys carry CVE-2026-36849.

Container imageDigestPackageFixed in
library/nginx:stabled5792f71a949
tiff@4.7.0-3+deb13u3
no fix listed

Open the chart page →

3,380
photoprismandrenarchyVerified publisher8.15.01 of 1See more

photoprism andrenarchy 8.15.0

1 of the 1 container images this version deploys carry CVE-2026-36849.

Container imageDigestPackageFixed in
photoprism/photoprism:260728958642220223
tiff@4.7.0-3ubuntu4
no fix listed

Open the chart page →

8,825
seafiledatamateVerified publisher0.6.01 of 6See more

seafile datamate 0.6.0

1 of the 6 container images this version deploys carry CVE-2026-36849.

Container imageDigestPackageFixed in
datamate/seafile-professional:11.0.202dd66b722464
tiff@4.3.0-6ubuntu0.11
no fix listed

Open the chart page →

27,267
geonode-k8sgeonode-k8sVerified publisher2.0.01 of 10See more

geonode-k8s geonode-k8s 2.0.0

1 of the 10 container images this version deploys carry CVE-2026-36849.

Container imageDigestPackageFixed in
geonode/geoserver:2.28.4-latest81b1d431b7e9
tiff@4.3.0-6ubuntu0.13
no fix listed

Open the chart page →

13,953
karakeephelmforgeVerified publisher1.2.91 of 3See more

karakeep helmforge 1.2.9

1 of the 3 container images this version deploys carry CVE-2026-36849.

Container imageDigestPackageFixed in
ghcr.io/karakeep-app/karakeep:0.33.2b069e4307dec
tiff@4.5.0-6+deb12u4
no fix listed

Open the chart page →

9,460
kubeflowkubeflow1.6.21 of 45See more

kubeflow kubeflow 1.6.2

1 of the 45 container images this version deploys carry CVE-2026-36849.

Container imageDigestPackageFixed in
library/python:3.7eedf63967cdb
tiff@4.5.0-6
no fix listed

Open the chart page →

96,941
local-ailocalai3.4.21 of 1See more

local-ai localai 3.4.2

1 of the 1 container images this version deploys carry CVE-2026-36849.

Container imageDigestPackageFixed in
quay.io/go-skynet/local-ai:latestd78cd113b2bc
tiff@4.5.1+git230720-4ubuntu2.5
no fix listed

Open the chart page →

3,997
mattermostphntom3.24.01 of 2See more

mattermost phntom 3.24.0

1 of the 2 container images this version deploys carry CVE-2026-36849.

Container imageDigestPackageFixed in
phntom/mattermost-team-edition:9.3.051cf9da4aa2e
tiff@4.3.0-6ubuntu0.7
no fix listed

Open the chart page →

8,722
grafana-pdf-exporterwiremindVerified publisher2.1.11 of 1See more

grafana-pdf-exporter wiremind 2.1.1

1 of the 1 container images this version deploys carry CVE-2026-36849.

Container imageDigestPackageFixed in
ghcr.io/wiremind/grafana-pdf-exporter:v1.7dbaa8527bf4c
tiff@4.5.0-6
no fix listed

Open the chart page →

9,746
changedetectionalekcVerified publisher0.14.21 of 1See more

changedetection alekc 0.14.2

1 of the 1 container images this version deploys carry CVE-2026-36849.

Container imageDigestPackageFixed in
ghcr.io/dgtlmoon/changedetection.io:0.60.47bb6963b730d
tiff@4.5.0-6+deb12u4
no fix listed

Open the chart page →

2,595
tt-rssangelnu7.0.01 of 2See more

tt-rss angelnu 7.0.0

1 of the 2 container images this version deploys carry CVE-2026-36849.

Container imageDigestPackageFixed in
ghcr.io/angelnu/tt-rss:2.0.10068d332ae2410f8
tiff@4.7.0-3ubuntu5
no fix listed

Open the chart page →

1,201
dask-kubernetes-operatordask2026.3.01 of 1See more

dask-kubernetes-operator dask 2026.3.0

1 of the 1 container images this version deploys carry CVE-2026-36849.

Container imageDigestPackageFixed in
ghcr.io/dask/dask-kubernetes-operator:2026.3.03225d2bc6b3c
tiff@4.7.0-3+deb13u1
no fix listed

Open the chart page →

9,316
calibregeek-cookbookVerified publisher5.4.21 of 1See more

calibre geek-cookbook 5.4.2

1 of the 1 container images this version deploys carry CVE-2026-36849.

Container imageDigestPackageFixed in
linuxserver/calibre:version-v5.21.0a847b5b2d860
tiff@4.0.9-5ubuntu0.4
no fix listed

Open the chart page →

22,773
frigategeek-cookbookVerified publisher8.2.21 of 1See more

frigate geek-cookbook 8.2.2

1 of the 1 container images this version deploys carry CVE-2026-36849.

Container imageDigestPackageFixed in
blakeblackshear/frigate:0.10.0-amd64ae269270ad9e
tiff@4.1.0+git191117-2ubuntu0.20.04.2
no fix listed

Open the chart page →

10,598
terrariahalkeye0.4.21 of 2See more

terraria halkeye 0.4.2

1 of the 2 container images this version deploys carry CVE-2026-36849.

Container imageDigestPackageFixed in
ryshe/terraria:latestb1c89f7f359a
tiff@4.5.0-6+deb12u3
no fix listed

Open the chart page →

4,127
coreinstill-aiOfficialVerified publisher0.1.751 of 15See more

core instill-ai 0.1.75

1 of the 15 container images this version deploys carry CVE-2026-36849.

Container imageDigestPackageFixed in
instill/artifact-backend:b28766ac4a393e601ed
tiff@4.7.0-3+deb13u2
no fix listed

Open the chart page →

30,816
calibre-webk8s-home-lab-repo9.1.11 of 1See more

calibre-web k8s-home-lab-repo 9.1.1

1 of the 1 container images this version deploys carry CVE-2026-36849.

Container imageDigestPackageFixed in
ghcr.io/linuxserver/calibre-web:0.6.267c0464228f2f
tiff@4.5.1+git230720-4ubuntu2.5
no fix listed

Open the chart page →

4,477
oesopsmxVerified publisher4.0.321 of 25See more

oes opsmx 4.0.32

1 of the 25 container images this version deploys carry CVE-2026-36849.

Container imageDigestPackageFixed in
quay.io/opsmxpublic/spin-sample-pipeline:v1.0.1c6a934439421
tiff@4.0.6-1ubuntu0.6
no fix listed

Open the chart page →

107,811
part-dbpart-dbVerified publisher0.1.21 of 1See more

part-db part-db 0.1.2

1 of the 1 container images this version deploys carry CVE-2026-36849.

Container imageDigestPackageFixed in
jbtronics/part-db1:latest5db71f6db59d
tiff@4.5.0-6+deb12u4
no fix listed

Open the chart page →

3,327
qgis-serverqgis-serverVerified publisher0.1.101 of 3See more

qgis-server qgis-server 0.1.10

1 of the 3 container images this version deploys carry CVE-2026-36849.

Container imageDigestPackageFixed in
library/nginx:1.27.409369da6b103
tiff@4.5.0-6+deb12u2
no fix listed

Open the chart page →

5,435
nominatimrobjuz6.4.11 of 4See more

nominatim robjuz 6.4.1

1 of the 4 container images this version deploys carry CVE-2026-36849.

Container imageDigestPackageFixed in
mediagis/nominatim:5.3.27923a8e67197
tiff@4.5.1+git230720-4ubuntu2.5
no fix listed

Open the chart page →

8,690
browserless-chromesagikazarmarkVerified publisher0.0.51 of 1See more

browserless-chrome sagikazarmark 0.0.5

1 of the 1 container images this version deploys carry CVE-2026-36849.

Container imageDigestPackageFixed in
browserless/chrome:1.48.0-chrome-stablec81ae5585b47
tiff@4.1.0+git191117-2ubuntu0.20.04.1
no fix listed

Open the chart page →

24,488

Container images carrying it

452 by charts deploying them

A fixed version is listed for 0 of the 1 affected package.

Container imageDigestPackageFixed inUsed by
gcr.io/ml-pipeline/metadata-writer:2.3.09bcfd2abc361
tiff@4.5.0-6+deb12u1
no fix listed
1
ghcr.io/aeharding/voyager:latest779759172676
tiff@4.7.0-3+deb13u3
no fix listed
1
ghcr.io/afairgiant/medikeep:v0.69.0766699daa9ac
tiff@4.5.0-6+deb12u4
no fix listed
1
ghcr.io/angelnu/tt-rss:2.0.10068d332ae2410f8
tiff@4.7.0-3ubuntu5
no fix listed
1
ghcr.io/appscode/gotenberg:8.25f9104080d9a7
tiff@4.7.0-3+deb13u1
no fix listed
1
ghcr.io/astriaorg/astrotrek:0.1.05889bea38e56
tiff@4.5.0-6+deb12u1
no fix listed
1
ghcr.io/browserless/chrome:v2.56.7d600eac6283f
tiff@4.5.1+git230720-4ubuntu2.5
no fix listed
1
ghcr.io/buanet/iobroker:v9.1.2ca7dc7362968
tiff@4.5.0-6+deb12u1
no fix listed
1
ghcr.io/camptocamp/tetragon-policy-builder:master0e99f12bb040
tiff@4.5.0-6+deb12u2
no fix listed
1
ghcr.io/caninehq/canine:latesta058034ca006
tiff@4.5.0-6+deb12u4
no fix listed
1
ghcr.io/chaos-mesh/chaos-daemon:v2.8.0fb609bc264d9
tiff@4.5.0-6+deb12u2
no fix listed
1
ghcr.io/cjmalloy/jasper:v1.3.282726a947bb65b
tiff@4.5.0-6+deb12u4
no fix listed
1
ghcr.io/cjmalloy/jasper-ui:v1.3.623246dc2160efe
tiff@4.7.0-3+deb13u2
no fix listed
1
ghcr.io/cosmicrocks/datum:v0.4.0beta76771c3cc8c3
tiff@4.5.1+git230720-4ubuntu2.4
no fix listed
1
ghcr.io/cosmo-tech/cosmotech-copilot-api:latesta2be95de450c
tiff@4.7.0-3+deb13u1
no fix listed
1
ghcr.io/cosmo-workspace/dev-code-server:v0.0.316fda01ae58a
tiff@4.5.0-6+deb12u2
no fix listed
1
ghcr.io/damap-org/damap-frontend:5.0.1609f48af4efc
tiff@4.7.0-3+deb13u2
no fix listed
1
ghcr.io/dask/dask-kubernetes-operator:2026.3.03225d2bc6b3c
tiff@4.7.0-3+deb13u1
no fix listed
1
ghcr.io/dask/dask-notebook:2024.1.0f53bde3acd4f
tiff@4.3.0-6ubuntu0.7
no fix listed
1
ghcr.io/deltabadger/deltabadger:2.23.3bffe3c22fabc
tiff@4.7.0-3+deb13u2
no fix listed
1
ghcr.io/dfir-iris/iriswebapp_app:v2.4.26e59ebde55709
tiff@4.7.0-3+deb13u1
no fix listed
1
ghcr.io/drewburr-labs/mum-discord-bot:3.1.26e82914e1051
tiff@4.5.0-6+deb12u1
no fix listed
1
ghcr.io/ente/web:5ab0c5b4c7a89c4e470ef6f793600da33cebf35d3f4864eb7f11
tiff@4.7.0-3+deb13u3
no fix listed
1
ghcr.io/flaresolverr/flaresolverr:v3.4.0ab535d1fef5d
tiff@4.5.0-6+deb12u2
no fix listed
1
ghcr.io/getsentry/taskbroker:26.7.264d0da74a578
tiff@4.5.0-6+deb12u4
no fix listed
1
ghcr.io/graphprotocol/availability-oracle:sha-28312fd472a25038957
tiff@4.5.0-6+deb12u1
no fix listed
1
ghcr.io/haveagitgat/tdarr:2.00.18.23fbe4c29d14c
tiff@4.1.0+git191117-2ubuntu0.20.04.3
no fix listed
1
ghcr.io/iisas/domino-frontend:k8s8e53861be292
tiff@4.5.0-6+deb12u2
no fix listed
1
ghcr.io/immich-app/immich-server:v3.2.0ae13784ffcfc
tiff@4.7.0-3+deb13u3
no fix listed
1
ghcr.io/immich-app/immich-server:v3.1.0b434cb9287ee
tiff@4.7.0-3+deb13u2
no fix listed
1
ghcr.io/immich-app/immich-server:v2.3.1f8d06a32b1b2
tiff@4.7.0-3+deb13u1
no fix listed
1
ghcr.io/itzg/minecraft-server:latestc1a267d9ed6d
tiff@4.5.1+git230720-4ubuntu2.5
no fix listed
1
ghcr.io/jfwenisch/steamcmd-manager:v0.4.5dab685e668d9
tiff@4.5.1+git230720-4ubuntu2.2
no fix listed
1
ghcr.io/jfwenisch/webtools:v0.1.44569cae83c70
tiff@4.5.1+git230720-4ubuntu2.2
no fix listed
1
ghcr.io/jmberesford/retrom-service:retrom-v0.7.144d763d58f11d
tiff@4.5.0-6+deb12u2
no fix listed
1
ghcr.io/jr0dd/puppeteer:v13.3.26047599cd78e
tiff@4.1.0+git191117-2ubuntu0.20.04.2
no fix listed
1
ghcr.io/k8s-at-home/bazarr:v1.0.3fdb5501cdfb9
tiff@4.1.0+git191117-2ubuntu0.20.04.2
no fix listed
1
ghcr.io/k8s-at-home/lidarr:v1.0.0.225554ebc1f90963
tiff@4.1.0+git191117-2ubuntu0.20.04.1
no fix listed
1
ghcr.io/k8s-at-home/sonarr:v3.0.8.15070eb230e2381a
tiff@4.3.0-6
no fix listed
1
ghcr.io/k8s-at-home/xteve:v2.2.0.200292b3614670f
tiff@4.1.0+git191117-2ubuntu0.20.04.3
no fix listed
1
ghcr.io/karakeep-app/karakeep:0.33.2b069e4307dec
tiff@4.5.0-6+deb12u4
no fix listed
1
ghcr.io/kvaps/kubefarm-ltsp:v0.13.424efef013a53
tiff@4.1.0+git191117-2ubuntu0.20.04.2
no fix listed
1
ghcr.io/kvaps/opennebula:v5.12.0.4-1e28e0e7de11b
tiff@4.1.0+git191117-2ubuntu0.20.04.1
no fix listed
1
ghcr.io/kvaps/opennebula-exporter:v5.12.0.401563adc95fd
tiff@4.1.0+git191117-2ubuntu0.20.04.1
no fix listed
1
ghcr.io/kvaps/opennebula-exporter:v5.12.0.4-12b92df1143b9
tiff@4.1.0+git191117-2ubuntu0.20.04.1
no fix listed
1
ghcr.io/kvaps/opennebula-flow:v5.12.0.4-1600221f0f43f
tiff@4.1.0+git191117-2ubuntu0.20.04.1
no fix listed
1
ghcr.io/kvaps/opennebula-gate:v5.12.0.4-1a85e03d8bc1d
tiff@4.1.0+git191117-2ubuntu0.20.04.1
no fix listed
1
ghcr.io/libreconnect/ferriscompany:0.1.0-rc6ed86db9f0efe
tiff@4.5.0-6+deb12u1
no fix listed
1
ghcr.io/linuxserver/booksonic-air:version-v2009.1.0baa4fa9549dc
tiff@4.0.9-5ubuntu0.4
no fix listed
1
ghcr.io/linuxserver/calibre-web:0.6.267c0464228f2f
tiff@4.5.1+git230720-4ubuntu2.5
no fix listed
1

syft 1.42.1 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.