StackRadar

CVE-2026-37555

High

Advisory

Published 29 Apr 2026In the index since 5 Sept 2026
Severity
High
worst across findings
CVSS
8.2
base score, highest
EPSS
0.005
42nd percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
117
of 17,781 indexed, latest versions
Container images
106
deployed by those charts
Fix available
1 of 2
affected packages

Red Hat Security Advisory: libsndfile security update

Carried by container images the latest versions of 117 of 17,781 indexed charts deploy, on 106 images.

Affected packageAffected versionsFixed inImages
libsndfilerpm1.0.31-8.el90:1.0.31-9.el9_8.11
libsndfiledeb1.0.25-7ubuntu2.2, 1.0.25-10ubuntu0.16.04.1, 1.0.25-10ubuntu0.16.04.2, 1.0.28-4+17 moreno fix listed105
OSV records
DEBIAN-CVE-2026-37555RHSA-2026:19610UBUNTU-CVE-2026-37555
Also known as
RHSA-2026:23222

Charts affected

117 by stars
ChartLatestAffected imagesRadar Score
gotenbergbysamioVerified publisher0.2.01 of 1See more

gotenberg bysamio 0.2.0

1 of the 1 container images this version deploys carry CVE-2026-37555.

Container imageDigestPackageFixed in
gotenberg/gotenberg:8-chromiuma40f92d7419a
libsndfile@1.2.2-2+deb13u1
no fix listed

Open the chart page →

8,978
distributed-tensorflowcloudnativeapp0.1.11 of 1See more

distributed-tensorflow cloudnativeapp 0.1.1

1 of the 1 container images this version deploys carry CVE-2026-37555.

Container imageDigestPackageFixed in
cheyang/distributed-tf:1.6.046cc34755493
libsndfile@1.0.25-10ubuntu0.16.04.1
no fix listed

Open the chart page →

36,094
hlf-couchdbcloudnativeapp1.0.61 of 1See more

hlf-couchdb cloudnativeapp 1.0.6

1 of the 1 container images this version deploys carry CVE-2026-37555.

Container imageDigestPackageFixed in
hyperledger/fabric-couchdb:0.4.10c65891b6c237
libsndfile@1.0.25-10ubuntu0.16.04.1
no fix listed

Open the chart page →

33,963
webpagetest-agentcloudnativeapp0.2.01 of 1See more

webpagetest-agent cloudnativeapp 0.2.0

1 of the 1 container images this version deploys carry CVE-2026-37555.

Container imageDigestPackageFixed in
timothyclarke/wptagent:2018-01-2322c41e5ca7e2
libsndfile@1.0.25-10ubuntu0.16.04.1
no fix listed

Open the chart page →

77,758
ms-emails-grpccodedesignplus-chartsVerified publisher0.0.241 of 1See more

ms-emails-grpc codedesignplus-charts 0.0.24

1 of the 1 container images this version deploys carry CVE-2026-37555.

Container imageDigestPackageFixed in
codedesignplus/ms-emails-grpc:lateste336012bc781
libsndfile@1.2.0-1+deb12u1
no fix listed

Open the chart page →

9,367
ms-emails-restcodedesignplus-chartsVerified publisher0.0.241 of 1See more

ms-emails-rest codedesignplus-charts 0.0.24

1 of the 1 container images this version deploys carry CVE-2026-37555.

Container imageDigestPackageFixed in
codedesignplus/ms-emails-rest:latestac84661c605e
libsndfile@1.2.0-1+deb12u1
no fix listed

Open the chart page →

9,367
csghubcsghubVerified publisher2.4.32 of 34See more

csghub csghub 2.4.3

2 of the 34 container images this version deploys carry CVE-2026-37555.

Container imageDigestPackageFixed in
opencsghq/agenticflow:ee-v0.6-52f03fead54db
libsndfile@1.2.0-1+deb12u1
no fix listed
opencsghq/csgbot:v0.6.7-eeaf7191a9cf8a
libsndfile@1.2.2-2+deb13u1
no fix listed

Open the chart page →

58,897
damap-chartdamapVerified publisher0.3.01 of 5See more

damap-chart damap 0.3.0

1 of the 5 container images this version deploys carry CVE-2026-37555.

Container imageDigestPackageFixed in
gotenberg/gotenberg:8f29984bd1e22
libsndfile@1.2.2-2+deb13u1
no fix listed

Open the chart page →

13,936
difydify1.0.01 of 4See more

dify dify 1.0.0

1 of the 4 container images this version deploys carry CVE-2026-37555.

Container imageDigestPackageFixed in
langgenius/dify-plugin-daemon:main-localda995c129e2f
libsndfile@1.2.2-1ubuntu5.24.04.1
no fix listed

Open the chart page →

19,224
photoprismdjjudas21Verified publisher99.99.991 of 1See more

photoprism djjudas21 99.99.99

1 of the 1 container images this version deploys carry CVE-2026-37555.

Container imageDigestPackageFixed in
photoprism/photoprism:240711-cefc6fd632ca74
libsndfile@1.2.2-1ubuntu5
no fix listed

Open the chart page →

16,954
uptime-kumaegebackVerified publisher2.0.121 of 1See more

uptime-kuma egeback 2.0.12

1 of the 1 container images this version deploys carry CVE-2026-37555.

Container imageDigestPackageFixed in
louislam/uptime-kuma:2.5.0a8610b3b4c38
libsndfile@1.2.0-1+deb12u1
no fix listed

Open the chart page →

30,159
business-api-ecosystemfiware1.1.01 of 4See more

business-api-ecosystem fiware 1.1.0

1 of the 4 container images this version deploys carry CVE-2026-37555.

Container imageDigestPackageFixed in
fiware/biz-ecosystem-charging-backend:11.7.029456835bb2c
libsndfile@1.0.28-7ubuntu0.3
no fix listed

Open the chart page →

64,489
airsonicgeek-cookbookVerified publisher6.4.21 of 1See more

airsonic geek-cookbook 6.4.2

1 of the 1 container images this version deploys carry CVE-2026-37555.

Container imageDigestPackageFixed in
airsonicadvanced/airsonic-advanced:latestf7cbafac2806
libsndfile@1.0.28-7
no fix listed

Open the chart page →

18,230
booksonic-airgeek-cookbookVerified publisher6.4.21 of 1See more

booksonic-air geek-cookbook 6.4.2

1 of the 1 container images this version deploys carry CVE-2026-37555.

Container imageDigestPackageFixed in
ghcr.io/linuxserver/booksonic-air:version-v2009.1.0baa4fa9549dc
libsndfile@1.0.28-4ubuntu0.18.04.2
no fix listed

Open the chart page →

19,215
mopidygeek-cookbookVerified publisher0.1.21 of 1See more

mopidy geek-cookbook 0.1.2

1 of the 1 container images this version deploys carry CVE-2026-37555.

Container imageDigestPackageFixed in
jaedb/iris:latest048cfbf58d57
libsndfile@1.2.0-1
no fix listed

Open the chart page →

12,958
openkmgeek-cookbookVerified publisher4.2.01 of 1See more

openkm geek-cookbook 4.2.0

1 of the 1 container images this version deploys carry CVE-2026-37555.

Container imageDigestPackageFixed in
openkm/openkm-ce:6.3.113bc465a7461b
libsndfile@1.0.28-7ubuntu0.1
no fix listed

Open the chart page →

27,949
photoprismgeek-cookbookVerified publisher7.2.01 of 1See more

photoprism geek-cookbook 7.2.0

1 of the 1 container images this version deploys carry CVE-2026-37555.

Container imageDigestPackageFixed in
photoprism/photoprism:220629-jammy2954334adbda
libsndfile@1.0.31-2build1
no fix listed

Open the chart page →

19,503
teedygeek-cookbookVerified publisher6.2.01 of 1See more

teedy geek-cookbook 6.2.0

1 of the 1 container images this version deploys carry CVE-2026-37555.

Container imageDigestPackageFixed in
sismics/docs:v1.10f4b0ef019cf1
libsndfile@1.0.28-4ubuntu0.18.04.2
no fix listed

Open the chart page →

26,944
xtevegeek-cookbookVerified publisher8.4.21 of 1See more

xteve geek-cookbook 8.4.2

1 of the 1 container images this version deploys carry CVE-2026-37555.

Container imageDigestPackageFixed in
ghcr.io/k8s-at-home/xteve:v2.2.0.200292b3614670f
libsndfile@1.0.28-7ubuntu0.1
no fix listed

Open the chart page →

17,929
web-checkhajowielandVerified publisher1.0.11 of 1See more

web-check hajowieland 1.0.1

1 of the 1 container images this version deploys carry CVE-2026-37555.

Container imageDigestPackageFixed in
ghcr.io/lissy93/web-check:latesta4e021c0f6a9
libsndfile@1.2.0-1+deb12u1
no fix listed

Open the chart page →

9,047
7dtdhelm-7dtd0.1.01 of 1See more

7dtd helm-7dtd 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-37555.

Container imageDigestPackageFixed in
vinanrra/7dtd-server:v0.4.4f9534490bd2b
libsndfile@1.0.28-4ubuntu0.18.04.2
no fix listed

Open the chart page →

10,627
archiveboxhelmforgeVerified publisher1.1.121 of 1See more

archivebox helmforge 1.1.12

1 of the 1 container images this version deploys carry CVE-2026-37555.

Container imageDigestPackageFixed in
archivebox/archivebox:0.7.41a5a37331091
libsndfile@1.2.0-1+deb12u1
no fix listed

Open the chart page →

7,633
castopodhelmforgeVerified publisher1.2.71 of 3See more

castopod helmforge 1.2.7

1 of the 3 container images this version deploys carry CVE-2026-37555.

Container imageDigestPackageFixed in
castopod/castopod:1.15.54e4f0440520f
libsndfile@1.2.2-2+b1
no fix listed

Open the chart page →

9,342
discount-bandithelmforgeVerified publisher2.0.81 of 3See more

discount-bandit helmforge 2.0.8

1 of the 3 container images this version deploys carry CVE-2026-37555.

Container imageDigestPackageFixed in
cybrarist/discount-bandit:v4.0.4e9e2447ac666
libsndfile@1.2.2-2+deb13u1
no fix listed

Open the chart page →

29,817
uptime-kumahelmforgeVerified publisher1.5.121 of 1See more

uptime-kuma helmforge 1.5.12

1 of the 1 container images this version deploys carry CVE-2026-37555.

Container imageDigestPackageFixed in
louislam/uptime-kuma:2.5.33e24e96c89ef
libsndfile@1.2.0-1+deb12u1
no fix listed

Open the chart page →

30,099
paperlesshpVerified publisher0.1.11 of 5See more

paperless hp 0.1.1

1 of the 5 container images this version deploys carry CVE-2026-37555.

Container imageDigestPackageFixed in
gotenberg/gotenberg:8.3467097317623a
libsndfile@1.2.2-2+deb13u1
no fix listed

Open the chart page →

26,612
hydrahydraVerified publisher0.9.51 of 2See more

hydra hydra 0.9.5

1 of the 2 container images this version deploys carry CVE-2026-37555.

Container imageDigestPackageFixed in
ghcr.io/smarter-project/hydra/isolated-vm:main4457b79b24cd
libsndfile@1.2.0-1+deb12u1
no fix listed

Open the chart page →

9,011
isolated-vmhydraVerified publisher0.9.41 of 1See more

isolated-vm hydra 0.9.4

1 of the 1 container images this version deploys carry CVE-2026-37555.

Container imageDigestPackageFixed in
ghcr.io/smarter-project/hydra/isolated-vm:main4457b79b24cd
libsndfile@1.2.0-1+deb12u1
no fix listed

Open the chart page →

7,733
itm-servicesintelVerified publisher2.0.01 of 8See more

itm-services intel 2.0.0

1 of the 8 container images this version deploys carry CVE-2026-37555.

Container imageDigestPackageFixed in
intel/dlstreamer-pipeline-server:2022.1.1-ubuntu20aa8f5483a2ef
libsndfile@1.0.28-7ubuntu0.1
no fix listed

Open the chart page →

18,066
jasperjasperVerified publisher1.0.2021 of 2See more

jasper jasper 1.0.202

1 of the 2 container images this version deploys carry CVE-2026-37555.

Container imageDigestPackageFixed in
ghcr.io/cjmalloy/jasper:v1.3.282726a947bb65b
libsndfile@1.2.0-1+deb12u1
no fix listed

Open the chart page →

5,998
valheim-serverk8s-chartsVerified publisher1.3.01 of 1See more

valheim-server k8s-charts 1.3.0

1 of the 1 container images this version deploys carry CVE-2026-37555.

Container imageDigestPackageFixed in
mbround18/valheim:3.1.070bd4da591cd
libsndfile@1.0.31-2ubuntu0.2
no fix listed

Open the chart page →

6,075
flaresolverrk8s-home-lab-repo6.2.01 of 1See more

flaresolverr k8s-home-lab-repo 6.2.0

1 of the 1 container images this version deploys carry CVE-2026-37555.

Container imageDigestPackageFixed in
flaresolverr/flaresolverr:v3.5.0139dfee1c6f8
libsndfile@1.2.0-1+deb12u1
no fix listed

Open the chart page →

27,274
music-assistantkarljorgensen0.1.31 of 1See more

music-assistant karljorgensen 0.1.3

1 of the 1 container images this version deploys carry CVE-2026-37555.

Container imageDigestPackageFixed in
ghcr.io/music-assistant/server:2.8.7eef3ee7810d0
libsndfile@1.2.0-1+deb12u1
no fix listed

Open the chart page →

7,081
kbot-self-hostedkbot-self-hostedVerified publisher0.1.81 of 7See more

kbot-self-hosted kbot-self-hosted 0.1.8

1 of the 7 container images this version deploys carry CVE-2026-37555.

Container imageDigestPackageFixed in
gotenberg/gotenberg:8.30206a6c708fc6
libsndfile@1.2.2-2+deb13u1
no fix listed

Open the chart page →

32,509
flaresolverrkubernetes-homelab-helm-chartsVerified publisher0.1.21 of 1See more

flaresolverr kubernetes-homelab-helm-charts 0.1.2

1 of the 1 container images this version deploys carry CVE-2026-37555.

Container imageDigestPackageFixed in
ghcr.io/flaresolverr/flaresolverr:v3.4.67962759d99d7
libsndfile@1.2.0-1+deb12u1
no fix listed

Open the chart page →

33,583
kubernetes-kiosk-chromiumkubernetes-kiosk-chromium0.1.21 of 1See more

kubernetes-kiosk-chromium kubernetes-kiosk-chromium 0.1.2

1 of the 1 container images this version deploys carry CVE-2026-37555.

Container imageDigestPackageFixed in
ghcr.io/yurymkomarov/docker/kubernetes-kiosk-chromium:0.1.27bff29dcec72
libsndfile@1.2.0-1+deb12u1
no fix listed

Open the chart page →

28,843
uptime-kumalbenicio-communityVerified publisher0.1.11 of 1See more

uptime-kuma lbenicio-community 0.1.1

1 of the 1 container images this version deploys carry CVE-2026-37555.

Container imageDigestPackageFixed in
louislam/uptime-kuma:2.3.29aeb4e51d038
libsndfile@1.2.0-1+deb12u1
no fix listed

Open the chart page →

33,242
linkdinglinkding0.2.31 of 1See more

linkding linkding 0.2.3

1 of the 1 container images this version deploys carry CVE-2026-37555.

Container imageDigestPackageFixed in
sissbruecker/linkding:1.41.0-plusa222fb777e1f
libsndfile@1.2.0-1
no fix listed

Open the chart page →

37,942
ingresslivekit-server1.2.21 of 1See more

ingress livekit-server 1.2.2

1 of the 1 container images this version deploys carry CVE-2026-37555.

Container imageDigestPackageFixed in
livekit/ingress:v1.2.21ab01641b366
libsndfile@1.0.31-2build1
no fix listed

Open the chart page →

10,716
uptime-kumaloeken-at-homeVerified publisher2.3.21 of 1See more

uptime-kuma loeken-at-home 2.3.2

1 of the 1 container images this version deploys carry CVE-2026-37555.

Container imageDigestPackageFixed in
louislam/uptime-kuma:2.3.29aeb4e51d038
libsndfile@1.2.0-1+deb12u1
no fix listed

Open the chart page →

33,242
elastictranscoderluiscajl0.46.02 of 4See more

elastictranscoder luiscajl 0.46.0

2 of the 4 container images this version deploys carry CVE-2026-37555.

Container imageDigestPackageFixed in
elastictranscoder/transcoder:627e21dcb4a0327029e6
libsndfile@1.0.28-4ubuntu0.18.04.1
no fix listed
elastictranscoder/transcoder-handler:627e21dc5b75d19e2733
libsndfile@1.0.28-4ubuntu0.18.04.1
no fix listed

Open the chart page →

58,160
flaresolverrluiscajl0.0.31 of 1See more

flaresolverr luiscajl 0.0.3

1 of the 1 container images this version deploys carry CVE-2026-37555.

Container imageDigestPackageFixed in
flaresolverr/flaresolverr:latest139dfee1c6f8
libsndfile@1.2.0-1+deb12u1
no fix listed

Open the chart page →

27,274
flaresolverrmedia-servarrVerified publisher0.18.11 of 1See more

flaresolverr media-servarr 0.18.1

1 of the 1 container images this version deploys carry CVE-2026-37555.

Container imageDigestPackageFixed in
ghcr.io/flaresolverr/flaresolverr:v3.5.2c80ae007ce2c
libsndfile@1.2.0-1+deb12u1
no fix listed

Open the chart page →

6,136
cameramedia-streaming-meshVerified publisher0.2.52 of 3See more

camera media-streaming-mesh 0.2.5

2 of the 3 container images this version deploys carry CVE-2026-37555.

Container imageDigestPackageFixed in
ciscolabs/rtsp-client:latesta7b60ec88285
libsndfile@1.0.28-7ubuntu0.1
no fix listed
ciscolabs/rtsp-server:latestb59fc10bb821
libsndfile@1.0.28-7ubuntu0.1
no fix listed

Open the chart page →

18,608
msm-rtspmedia-streaming-meshVerified publisher0.0.22 of 2See more

msm-rtsp media-streaming-mesh 0.0.2

2 of the 2 container images this version deploys carry CVE-2026-37555.

Container imageDigestPackageFixed in
ciscolabs/rtsp-client:latesta7b60ec88285
libsndfile@1.0.28-7ubuntu0.1
no fix listed
ciscolabs/rtsp-server:latestb59fc10bb821
libsndfile@1.0.28-7ubuntu0.1
no fix listed

Open the chart page →

18,608
rtspmedia-streaming-meshVerified publisher0.0.142 of 2See more

rtsp media-streaming-mesh 0.0.14

2 of the 2 container images this version deploys carry CVE-2026-37555.

Container imageDigestPackageFixed in
ciscolabs/rtsp-client:latesta7b60ec88285
libsndfile@1.0.28-7ubuntu0.1
no fix listed
ciscolabs/rtsp-server:latestb59fc10bb821
libsndfile@1.0.28-7ubuntu0.1
no fix listed

Open the chart page →

18,608
filestashmt1905024.0.01 of 1See more

filestash mt190502 4.0.0

1 of the 1 container images this version deploys carry CVE-2026-37555.

Container imageDigestPackageFixed in
machines/filestash:latest0b8fc005e52e
libsndfile@1.2.2-2+deb13u1
no fix listed

Open the chart page →

3,499
smilencsaVerified publisher1.1.01 of 23See more

smile ncsa 1.1.0

1 of the 23 container images this version deploys carry CVE-2026-37555.

Container imageDigestPackageFixed in
socialmediamacroscope/autophrase:0.1.570fb11d4f531
libsndfile@1.0.28-7ubuntu0.1
no fix listed

Open the chart page →

109,294
uptime-kumancsaVerified publisher1.7.21 of 1See more

uptime-kuma ncsa 1.7.2

1 of the 1 container images this version deploys carry CVE-2026-37555.

Container imageDigestPackageFixed in
louislam/uptime-kuma:2.5.4917318f9d7be
libsndfile@1.2.0-1+deb12u1
no fix listed

Open the chart page →

30,028
splashntppoolVerified publisher1.0.41 of 1See more

splash ntppool 1.0.4

1 of the 1 container images this version deploys carry CVE-2026-37555.

Container imageDigestPackageFixed in
scrapinghub/splash:3.4.1a5f89bc84606
libsndfile@1.0.28-4ubuntu0.18.04.1
no fix listed

Open the chart page →

27,633

Container images carrying it

106 by charts deploying them

A fixed version is listed for 1 of the 2 affected packages.

Container imageDigestPackageFixed inUsed by
ghcr.io/smarter-project/audio-client:v3.1.23c8375dc5487
libsndfile@1.0.28-7ubuntu0.1
no fix listed
1
ghcr.io/smarter-project/gstreamer:v1.0.25ecb16015aa8
libsndfile@1.0.28-7ubuntu0.1
no fix listed
1
ghcr.io/smarter-project/image-detector:v2.5.31dcca70c6446
libsndfile@1.0.28-7ubuntu0.1
no fix listed
1
ghcr.io/yurymkomarov/docker/kubernetes-kiosk-chromium:0.1.27bff29dcec72
libsndfile@1.2.0-1+deb12u1
no fix listed
1
quay.io/go-skynet/local-ai:latestd78cd113b2bc
libsndfile@1.2.2-1ubuntu5.24.04.1
no fix listed
1
quay.io/opsmxpublic/spin-sample-pipeline:v1.0.1c6a934439421
libsndfile@1.0.25-10ubuntu0.16.04.2
no fix listed
1

syft 1.42.1 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.