StackRadar

CVE-2026-37555

High

Advisory

Published 29 Apr 2026In the index since 5 Sept 2026
Severity
High
worst across findings
CVSS
8.2
base score, highest
EPSS
0.005
42nd percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
117
of 17,781 indexed, latest versions
Container images
106
deployed by those charts
Fix available
1 of 2
affected packages

Red Hat Security Advisory: libsndfile security update

Carried by container images the latest versions of 117 of 17,781 indexed charts deploy, on 106 images.

Affected packageAffected versionsFixed inImages
libsndfilerpm1.0.31-8.el90:1.0.31-9.el9_8.11
libsndfiledeb1.0.25-7ubuntu2.2, 1.0.25-10ubuntu0.16.04.1, 1.0.25-10ubuntu0.16.04.2, 1.0.28-4+17 moreno fix listed105
OSV records
DEBIAN-CVE-2026-37555RHSA-2026:19610UBUNTU-CVE-2026-37555
Also known as
RHSA-2026:23222

Charts affected

117 by stars
ChartLatestAffected imagesRadar Score
cdn-remoteopencord0.2.42 of 3See more

cdn-remote opencord 0.2.4

2 of the 3 container images this version deploys carry CVE-2026-37555.

Container imageDigestPackageFixed in
omecproject/cdn-antmedia:1.0.0b4ae7d0d6b74
libsndfile@1.0.28-4
no fix listed
omecproject/cdn-video-repo:1.0.0d59ccb138ffb
libsndfile@1.0.25-10ubuntu0.16.04.1
no fix listed

Open the chart page →

63,223
mcord-cdn-remoteopencord0.1.61 of 2See more

mcord-cdn-remote opencord 0.1.6

1 of the 2 container images this version deploys carry CVE-2026-37555.

Container imageDigestPackageFixed in
omecproject/cdn-video-repo:remote-v3d59ccb138ffb
libsndfile@1.0.25-10ubuntu0.16.04.1
no fix listed

Open the chart page →

42,614
mcord-cdn-remote-freeopencord0.1.31 of 1See more

mcord-cdn-remote-free opencord 0.1.3

1 of the 1 container images this version deploys carry CVE-2026-37555.

Container imageDigestPackageFixed in
omecproject/cdn-video-repo:remote-v3d59ccb138ffb
libsndfile@1.0.25-10ubuntu0.16.04.1
no fix listed

Open the chart page →

29,124
issuegenopsmxVerified publisher1.0.21 of 1See more

issuegen opsmx 1.0.2

1 of the 1 container images this version deploys carry CVE-2026-37555.

Container imageDigestPackageFixed in
opsmx11/issuegen:v2.1.05c50ca123d88
libsndfile@1.0.25-7ubuntu2.2
no fix listed

Open the chart page →

26,339
javareact-java0.1.01 of 1See more

java react-java 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-37555.

Container imageDigestPackageFixed in
project2team4/react:latest3ff031a08887
libsndfile@1.0.28-7ubuntu0.1
no fix listed

Open the chart page →

15,520
web-checkrm3lVerified publisher0.1.01 of 1See more

web-check rm3l 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-37555.

Container imageDigestPackageFixed in
ghcr.io/lissy93/web-check:latesta4e021c0f6a9
libsndfile@1.2.0-1+deb12u1
no fix listed

Open the chart page →

9,047
rocketchat-voiprocketchat-server0.1.01 of 1See more

rocketchat-voip rocketchat-server 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-37555.

Container imageDigestPackageFixed in
rocketchat/freeswitch:stablecfba5c20a5cc
libsndfile@1.2.0-1
no fix listed

Open the chart page →

5,683
flaresolverrrubxkubeVerified publisher0.1.11 of 1See more

flaresolverr rubxkube 0.1.1

1 of the 1 container images this version deploys carry CVE-2026-37555.

Container imageDigestPackageFixed in
flaresolverr/flaresolverr:v3.5.0139dfee1c6f8
libsndfile@1.2.0-1+deb12u1
no fix listed

Open the chart page →

27,274
uptime-kumarubxkubeVerified publisher1.2.11 of 1See more

uptime-kuma rubxkube 1.2.1

1 of the 1 container images this version deploys carry CVE-2026-37555.

Container imageDigestPackageFixed in
louislam/uptime-kuma:2.4.091e963bfda56
libsndfile@1.2.0-1+deb12u1
no fix listed

Open the chart page →

30,219
nadekobotryuunosukeds30.1.21 of 2See more

nadekobot ryuunosukeds3 0.1.2

1 of the 2 container images this version deploys carry CVE-2026-37555.

Container imageDigestPackageFixed in
ryuunosukeds3/nadeko-bot-docker:latestc0398f13e8a9
libsndfile@1.0.31-2ubuntu0.2
no fix listed

Open the chart page →

8,619
vrisingryuunosukeds30.1.01 of 1See more

vrising ryuunosukeds3 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-37555.

Container imageDigestPackageFixed in
trueosiris/vrising:latest9356f98ad561
libsndfile@1.0.31-2ubuntu0.2
no fix listed

Open the chart page →

7,295
photoprismschoolguys-helmcharts0.3.81 of 1See more

photoprism schoolguys-helmcharts 0.3.8

1 of the 1 container images this version deploys carry CVE-2026-37555.

Container imageDigestPackageFixed in
photoprism/photoprism:260601650c6ad5a651
libsndfile@1.2.2-4
no fix listed

Open the chart page →

10,348
kurento_webrtc_demostunner0.1.01 of 2See more

kurento_webrtc_demo stunner 0.1.0

1 of the 2 container images this version deploys carry CVE-2026-37555.

Container imageDigestPackageFixed in
kurento/kurento-media-server:latest03c0d34d0828
libsndfile@1.2.2-1ubuntu5.24.04.1
no fix listed

Open the chart page →

12,460
stunner-kurento-one2one-callstunner0.1.01 of 2See more

stunner-kurento-one2one-call stunner 0.1.0

1 of the 2 container images this version deploys carry CVE-2026-37555.

Container imageDigestPackageFixed in
kurento/kurento-media-server:latest03c0d34d0828
libsndfile@1.2.2-1ubuntu5.24.04.1
no fix listed

Open the chart page →

12,460
flaresolverrsudo-kraken-flaresolverrVerified publisher2.1.41 of 1See more

flaresolverr sudo-kraken-flaresolverr 2.1.4

1 of the 1 container images this version deploys carry CVE-2026-37555.

Container imageDigestPackageFixed in
ghcr.io/flaresolverr/flaresolverr:v3.4.67962759d99d7
libsndfile@1.2.0-1+deb12u1
no fix listed

Open the chart page →

33,583
speecht5test-opea1.0.01 of 1See more

speecht5 test-opea 1.0.0

1 of the 1 container images this version deploys carry CVE-2026-37555.

Container imageDigestPackageFixed in
opea/speecht5:1.0249afad3d268
libsndfile@1.2.0-1
no fix listed

Open the chart page →

9,616
playwright-synthetic-monitoringwork-adventure1.0.11 of 1See more

playwright-synthetic-monitoring work-adventure 1.0.1

1 of the 1 container images this version deploys carry CVE-2026-37555.

Container imageDigestPackageFixed in
workadventure/playwright-synthetic-monitoring:main92b664c2a06f
libsndfile@1.0.31-2ubuntu0.1
no fix listed

Open the chart page →

14,100

Container images carrying it

106 by charts deploying them

A fixed version is listed for 1 of the 2 affected packages.

Container imageDigestPackageFixed inUsed by
flaresolverr/flaresolverr:latest:v3.5.0139dfee1c6f8
libsndfile@1.2.0-1+deb12u1
no fix listed
5
hyperledger/fabric-ca-tools:latest4ce6f43ded2e
libsndfile@1.0.25-10ubuntu0.16.04.1
no fix listed
4
hyperledger/fabric-couchdb:0.4.15f6c724592abf
libsndfile@1.0.25-10ubuntu0.16.04.1
no fix listed
4
ciscolabs/rtsp-client:latesta7b60ec88285
libsndfile@1.0.28-7ubuntu0.1
no fix listed
3
ciscolabs/rtsp-server:latestb59fc10bb821
libsndfile@1.0.28-7ubuntu0.1
no fix listed
3
omecproject/cdn-video-repo:1.0.0:remote-v3d59ccb138ffb
libsndfile@1.0.25-10ubuntu0.16.04.1
no fix listed
3
gotenberg/gotenberg:8.36.087c16b9f3642
libsndfile@1.2.2-2+deb13u1
no fix listed
2
gotenberg/gotenberg:8:8.37.0f29984bd1e22
libsndfile@1.2.2-2+deb13u1
no fix listed
2
kurento/kurento-media-server:latest03c0d34d0828
libsndfile@1.2.2-1ubuntu5.24.04.1
no fix listed
2
louislam/uptime-kuma:2.5.4917318f9d7be
libsndfile@1.2.0-1+deb12u1
no fix listed
2
louislam/uptime-kuma:2.3.29aeb4e51d038
libsndfile@1.2.0-1+deb12u1
no fix listed
2
louislam/uptime-kuma:2.5.0a8610b3b4c38
libsndfile@1.2.0-1+deb12u1
no fix listed
2
ghcr.io/flaresolverr/flaresolverr:v3.4.67962759d99d7
libsndfile@1.2.0-1+deb12u1
no fix listed
2
ghcr.io/flaresolverr/flaresolverr:v3.5.2c80ae007ce2c
libsndfile@1.2.0-1+deb12u1
no fix listed
2
ghcr.io/games-on-whales/pulseaudio:1.0.0f34f98405c10
libsndfile@1.0.28-7ubuntu0.1
no fix listed
2
ghcr.io/games-on-whales/retroarch:1.0.0103fbcec2314
libsndfile@1.0.28-7ubuntu0.1
no fix listed
2
ghcr.io/games-on-whales/steam:1.0.09b6105be7ad0
libsndfile@1.0.28-7ubuntu0.1
no fix listed
2
ghcr.io/lissy93/web-check:latesta4e021c0f6a9
libsndfile@1.2.0-1+deb12u1
no fix listed
2
ghcr.io/smarter-project/hydra/isolated-vm:main4457b79b24cd
libsndfile@1.2.0-1+deb12u1
no fix listed
2
5200710/hadoop:3.2.3-java8092d3088a5fb
libsndfile@1.0.28-7ubuntu0.2
no fix listed
1
airsonicadvanced/airsonic-advanced:latestf7cbafac2806
libsndfile@1.0.28-7
no fix listed
1
andrewmackrodt/firefox-x11:142.0.1-r133f9080470c9
libsndfile@1.0.31-2ubuntu0.2
no fix listed
1
archivebox/archivebox:0.7.41a5a37331091
libsndfile@1.2.0-1+deb12u1
no fix listed
1
assistiot/video_augmentation:runner-cpu-lateste5ae539ce2cb
libsndfile@1.0.28-7ubuntu0.2
no fix listed
1
browserless/chrome:1.48.0-chrome-stablec81ae5585b47
libsndfile@1.0.28-7ubuntu0.1
no fix listed
1
castopod/castopod:1.12.101fd37280cbb2
libsndfile@1.2.0-1
no fix listed
1
castopod/castopod:1.15.54e4f0440520f
libsndfile@1.2.2-2+b1
no fix listed
1
cheyang/distributed-tf:1.6.046cc34755493
libsndfile@1.0.25-10ubuntu0.16.04.1
no fix listed
1
chocobozzz/peertube:v8.1.5052712130691
libsndfile@1.2.2-2+deb13u1
no fix listed
1
codedesignplus/ms-emails-grpc:lateste336012bc781
libsndfile@1.2.0-1+deb12u1
no fix listed
1
codedesignplus/ms-emails-rest:latestac84661c605e
libsndfile@1.2.0-1+deb12u1
no fix listed
1
codetogether/codetogether:latest4348c8a38752
libsndfile@1.0.31-8.el9
0:1.0.31-9.el9_8.1
1
cybrarist/discount-bandit:v4.0.4e9e2447ac666
libsndfile@1.2.2-2+deb13u1
no fix listed
1
elastictranscoder/transcoder:627e21dcb4a0327029e6
libsndfile@1.0.28-4ubuntu0.18.04.1
no fix listed
1
elastictranscoder/transcoder-handler:627e21dc5b75d19e2733
libsndfile@1.0.28-4ubuntu0.18.04.1
no fix listed
1
fiware/biz-ecosystem-charging-backend:11.7.029456835bb2c
libsndfile@1.0.28-7ubuntu0.3
no fix listed
1
gotenberg/gotenberg:8.30206a6c708fc6
libsndfile@1.2.2-2+deb13u1
no fix listed
1
gotenberg/gotenberg:8.3467097317623a
libsndfile@1.2.2-2+deb13u1
no fix listed
1
gotenberg/gotenberg:8-chromiuma40f92d7419a
libsndfile@1.2.2-2+deb13u1
no fix listed
1
hyperledger/fabric-couchdb:0.4.10c65891b6c237
libsndfile@1.0.25-10ubuntu0.16.04.1
no fix listed
1
instill/artifact-backend:b28766ac4a393e601ed
libsndfile@1.2.2-2+deb13u1
no fix listed
1
intel/dlstreamer-pipeline-server:2022.1.1-ubuntu20aa8f5483a2ef
libsndfile@1.0.28-7ubuntu0.1
no fix listed
1
jaedb/iris:latest048cfbf58d57
libsndfile@1.2.0-1
no fix listed
1
langgenius/dify-api:0.6.11fca918260dd6
libsndfile@1.2.0-1
no fix listed
1
langgenius/dify-plugin-daemon:0.6.3-local3c694329357b
libsndfile@1.2.2-1ubuntu5.24.04.1
no fix listed
1
langgenius/dify-plugin-daemon:0.5.1-local8269050f192e
libsndfile@1.2.2-1ubuntu5.24.04.1
no fix listed
1
langgenius/dify-plugin-daemon:main-localda995c129e2f
libsndfile@1.2.2-1ubuntu5.24.04.1
no fix listed
1
linuxserver/calibre:version-v5.21.0a847b5b2d860
libsndfile@1.0.28-4ubuntu0.18.04.1
no fix listed
1
livekit/ingress:v1.2.21ab01641b366
libsndfile@1.0.31-2build1
no fix listed
1
louislam/uptime-kuma:2.5.33e24e96c89ef
libsndfile@1.2.0-1+deb12u1
no fix listed
1

syft 1.42.1 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.