StackRadar

CVE-2026-39314

Medium

Advisory

Published 7 Apr 2026In the index since 5 Sept 2026
Severity
Medium
worst across findings
CVSS
6.2
base score, highest
EPSS
0.002
5th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
192
of 17,781 indexed, latest versions
Container images
166
deployed by those charts
Fix available
2 of 2
affected packages

The matching OSV records carry no description.

Carried by container images the latest versions of 192 of 17,781 indexed charts deploy, on 166 images.

Affected packageAffected versionsFixed inImages
cupsdeb2.2.7-1ubuntu2.5, 2.2.7-1ubuntu2.7, 2.2.7-1ubuntu2.8, 2.2.7-1ubuntu2.10+24 more2.4.1op1-1ubuntu4.20, 2.4.7-1.2ubuntu7.13, 2.4.12-0ubuntu3.9, 2.4.16-1ubuntu1.2156
cupsapk2.4.11-r02.4.18-r010
OSV records
ALPINE-CVE-2026-39314DEBIAN-CVE-2026-39314UBUNTU-CVE-2026-39314
Also known as
USN-8405-1

Charts affected

192 by stars
ChartLatestAffected imagesRadar Score
uptime-kumauptime-kumaVerified publisher4.2.01 of 1See more

uptime-kuma uptime-kuma 4.2.0

1 of the 1 container images this version deploys carry CVE-2026-39314.

Container imageDigestPackageFixed in
louislam/uptime-kuma:2.5.0a8610b3b4c38
cups@2.4.2-3+deb12u9
no fix listed

Open the chart page →

30,159
zabbixzabbix-communityVerified publisher7.1.01 of 5See more

zabbix zabbix-community 7.1.0

1 of the 5 container images this version deploys carry CVE-2026-39314.

Container imageDigestPackageFixed in
zabbix/zabbix-web-service:ubuntu-7.0.23915b3183e054
cups@2.3.3op2-3+deb11u8
2.4.7-1.2ubuntu7.13

Open the chart page →

13,664
zammadzammadOfficialVerified publisher18.0.51 of 5See more

zammad zammad 18.0.5

1 of the 5 container images this version deploys carry CVE-2026-39314.

Container imageDigestPackageFixed in
ghcr.io/zammad/zammad:7.1.3-0011e65123a43ecc
cups@2.4.10-3+deb13u2
no fix listed

Open the chart page →

6,887
chaos-meshchaos-meshVerified publisher2.8.41 of 4See more

chaos-mesh chaos-mesh 2.8.4

1 of the 4 container images this version deploys carry CVE-2026-39314.

Container imageDigestPackageFixed in
ghcr.io/chaos-mesh/chaos-daemon:v2.8.40d28dbd95b03
cups@2.4.2-3+deb12u9
no fix listed

Open the chart page →

6,342
milvusmilvus4.0.311 of 5See more

milvus milvus 4.0.31

1 of the 5 container images this version deploys carry CVE-2026-39314.

Container imageDigestPackageFixed in
apachepulsar/pulsar:2.8.2d538416d5afe
cups@2.3.1-9ubuntu1.1
no fix listed

Open the chart page →

32,259
difydoubanVerified publisher0.10.01 of 6See more

dify douban 0.10.0

1 of the 6 container images this version deploys carry CVE-2026-39314.

Container imageDigestPackageFixed in
langgenius/dify-plugin-daemon:0.5.1-local8269050f192e
cups@2.4.7-1.2ubuntu7.9
2.4.7-1.2ubuntu7.13

Open the chart page →

19,391
wazuhwazuh-helm-morgovedVerified publisher2.0.71 of 5See more

wazuh wazuh-helm-morgoved 2.0.7

1 of the 5 container images this version deploys carry CVE-2026-39314.

Container imageDigestPackageFixed in
kinseii/wazuh-agent:4.14.17160eb143728
cups@2.4.2-3+deb12u9
no fix listed

Open the chart page →

11,384
zabbixcetic3.1.31 of 5See more

zabbix cetic 3.1.3

1 of the 5 container images this version deploys carry CVE-2026-39314.

Container imageDigestPackageFixed in
zabbix/zabbix-web-service:ubuntu-6.0.8ee4baa872280
cups@2.4.1op1-1ubuntu4.1
2.4.1op1-1ubuntu4.20

Open the chart page →

33,725
gotenbergmaikumoriVerified publisher1.25.01 of 1See more

gotenberg maikumori 1.25.0

1 of the 1 container images this version deploys carry CVE-2026-39314.

Container imageDigestPackageFixed in
gotenberg/gotenberg:8.36.087c16b9f3642
cups@2.4.10-3+deb13u2
no fix listed

Open the chart page →

9,683
oneuptimeoneuptimeOfficialVerified publisher13.0.41 of 7See more

oneuptime oneuptime 13.0.4

1 of the 7 container images this version deploys carry CVE-2026-39314.

Container imageDigestPackageFixed in
oneuptime/probe:release6b2d98713711
cups@2.4.2-3+deb12u9
no fix listed

Open the chart page →

11,192
wordpressgroundhog2k0.16.41 of 1See more

wordpress groundhog2k 0.16.4

1 of the 1 container images this version deploys carry CVE-2026-39314.

Container imageDigestPackageFixed in
library/wordpress:7.1.0-apache5a93c470ae82
cups@2.4.10-3+deb13u2
no fix listed

Open the chart page →

3,685
krokicowboysysopVerified publisher6.1.04 of 5See more

kroki cowboysysop 6.1.0

4 of the 5 container images this version deploys carry CVE-2026-39314.

Container imageDigestPackageFixed in
yuzutech/kroki-bpmn:0.29.1444805c4b917
cups@2.4.11-r0
2.4.18-r0
yuzutech/kroki-diagramsnet:0.29.1b810edbf9c62
cups@2.4.11-r0
2.4.18-r0
yuzutech/kroki-excalidraw:0.29.157917319ea70
cups@2.4.11-r0
2.4.18-r0
yuzutech/kroki-mermaid:0.29.1963b4acfde6e
cups@2.4.11-r0
2.4.18-r0

Open the chart page →

6,743
hdfsgaffer2.2.11 of 2See more

hdfs gaffer 2.2.1

1 of the 2 container images this version deploys carry CVE-2026-39314.

Container imageDigestPackageFixed in
gchq/hdfs:3.3.35ec58edbb2db
cups@2.4.7-1.2ubuntu7.3
2.4.7-1.2ubuntu7.13

Open the chart page →

5,357
paperless-ngxpaperless-ngxVerified publisher0.3.221 of 3See more

paperless-ngx paperless-ngx 0.3.22

1 of the 3 container images this version deploys carry CVE-2026-39314.

Container imageDigestPackageFixed in
ghcr.io/paperless-ngx/paperless-ngx:3.1.3aa810a36942c
cups@2.4.10-3+deb13u2
no fix listed

Open the chart page →

8,489
puppetserverpuppetserver9.5.22 of 5See more

puppetserver puppetserver 9.5.2

2 of the 5 container images this version deploys carry CVE-2026-39314.

Container imageDigestPackageFixed in
ghcr.io/voxpupuli/container-puppetdb:7.18.0-v1.5.0a56dfe91f5b1
cups@2.4.1op1-1ubuntu4.8
2.4.1op1-1ubuntu4.20
ghcr.io/voxpupuli/container-puppetserver:7.17.0-v1.5.0916746209ac5
cups@2.4.1op1-1ubuntu4.8
2.4.1op1-1ubuntu4.20

Open the chart page →

14,184
selenium3selenium31.2.41 of 1See more

selenium3 selenium3 1.2.4

1 of the 1 container images this version deploys carry CVE-2026-39314.

Container imageDigestPackageFixed in
selenium/hub:3.141.5902f251d48d5f
cups@2.3.1-9ubuntu1.1
no fix listed

Open the chart page →

11,782
unifiunifiVerified publisher1.16.01 of 1See more

unifi unifi 1.16.0

1 of the 1 container images this version deploys carry CVE-2026-39314.

Container imageDigestPackageFixed in
jacobalberty/unifi:v10.0.162896c0ab82d33
cups@2.3.1-9ubuntu1.9
no fix listed

Open the chart page →

7,268
wazuh-agentavistoVerified publisher4.12.21 of 1See more

wazuh-agent avisto 4.12.2

1 of the 1 container images this version deploys carry CVE-2026-39314.

Container imageDigestPackageFixed in
ghcr.io/avistotelecom/docker-wazuh-agent:4.12.08766ba08bf1a
cups@2.4.2-3+deb12u8
no fix listed

Open the chart page →

6,457
hadoopbigdata-chartsVerified publisher1.0.11 of 2See more

hadoop bigdata-charts 1.0.1

1 of the 2 container images this version deploys carry CVE-2026-39314.

Container imageDigestPackageFixed in
5200710/hadoop:3.2.3-java8092d3088a5fb
cups@2.3.1-9ubuntu1.6
no fix listed

Open the chart page →

12,111
wordpresshelmforgeVerified publisher3.0.61 of 3See more

wordpress helmforge 3.0.6

1 of the 3 container images this version deploys carry CVE-2026-39314.

Container imageDigestPackageFixed in
library/wordpress:7.1.0-apache5a93c470ae82
cups@2.4.10-3+deb13u2
no fix listed

Open the chart page →

4,148
karakeephelmforgeVerified publisher1.2.91 of 3See more

karakeep helmforge 1.2.9

1 of the 3 container images this version deploys carry CVE-2026-39314.

Container imageDigestPackageFixed in
ghcr.io/karakeep-app/karakeep:0.33.2b069e4307dec
cups@2.4.2-3+deb12u9
no fix listed

Open the chart page →

9,460
openhabhelmforgeVerified publisher1.2.01 of 1See more

openhab helmforge 1.2.0

1 of the 1 container images this version deploys carry CVE-2026-39314.

Container imageDigestPackageFixed in
openhab/openhab:5.2.1bfd4a60e90da
cups@2.4.10-3+deb13u2
no fix listed

Open the chart page →

3,641
unifi-controllerqonstruktVerified publisher2.6.11 of 1See more

unifi-controller qonstrukt 2.6.1

1 of the 1 container images this version deploys carry CVE-2026-39314.

Container imageDigestPackageFixed in
linuxserver/unifi-controller:8.0.240ae315a3a456
cups@2.3.1-9ubuntu1.6
no fix listed

Open the chart page →

10,469
grafana-pdf-exporterwiremindVerified publisher2.1.11 of 1See more

grafana-pdf-exporter wiremind 2.1.1

1 of the 1 container images this version deploys carry CVE-2026-39314.

Container imageDigestPackageFixed in
ghcr.io/wiremind/grafana-pdf-exporter:v1.7dbaa8527bf4c
cups@2.4.2-3+deb12u4
no fix listed

Open the chart page →

9,746
thingsboardcetic0.1.21 of 2See more

thingsboard cetic 0.1.2

1 of the 2 container images this version deploys carry CVE-2026-39314.

Container imageDigestPackageFixed in
thingsboard/tb-postgres:latest2d17e4e36edc
cups@2.4.2-3+deb12u9
no fix listed

Open the chart page →

5,235
calibregeek-cookbookVerified publisher5.4.21 of 1See more

calibre geek-cookbook 5.4.2

1 of the 1 container images this version deploys carry CVE-2026-39314.

Container imageDigestPackageFixed in
linuxserver/calibre:version-v5.21.0a847b5b2d860
cups@2.2.7-1ubuntu2.8
no fix listed

Open the chart page →

22,773
unifigeek-cookbookVerified publisher5.1.31 of 1See more

unifi geek-cookbook 5.1.3

1 of the 1 container images this version deploys carry CVE-2026-39314.

Container imageDigestPackageFixed in
jacobalberty/unifi:v7.4.162b3edc809a3ff
cups@2.2.7-1ubuntu2.10
no fix listed

Open the chart page →

11,839
browserless-chromesagikazarmarkVerified publisher0.0.51 of 1See more

browserless-chrome sagikazarmark 0.0.5

1 of the 1 container images this version deploys carry CVE-2026-39314.

Container imageDigestPackageFixed in
browserless/chrome:1.48.0-chrome-stablec81ae5585b47
cups@2.3.1-9ubuntu1.1
no fix listed

Open the chart page →

24,488
paperlesszekker6Verified publisher11.8.01 of 1See more

paperless zekker6 11.8.0

1 of the 1 container images this version deploys carry CVE-2026-39314.

Container imageDigestPackageFixed in
ghcr.io/paperless-ngx/paperless-ngx:3.1.3aa810a36942c
cups@2.4.10-3+deb13u2
no fix listed

Open the chart page →

4,626
paperless-ngxadnoctemVerified publisher0.4.23 of 5See more

paperless-ngx adnoctem 0.4.2

3 of the 5 container images this version deploys carry CVE-2026-39314.

Container imageDigestPackageFixed in
apache/tika:2.9.0.092d055a84e9e
cups@2.4.1op1-1ubuntu4.4
2.4.1op1-1ubuntu4.20
gotenberg/gotenberg:8.36.087c16b9f3642
cups@2.4.10-3+deb13u2
no fix listed
ghcr.io/paperless-ngx/paperless-ngx:3.1.3aa810a36942c
cups@2.4.10-3+deb13u2
no fix listed

Open the chart page →

19,691
paperless-ngxalexmorbo-paperless-ngxVerified publisher0.2.01 of 2See more

paperless-ngx alexmorbo-paperless-ngx 0.2.0

1 of the 2 container images this version deploys carry CVE-2026-39314.

Container imageDigestPackageFixed in
ghcr.io/paperless-ngx/paperless-ngx:2.20.5665f2f5cc548
cups@2.4.10-3+deb13u2
no fix listed

Open the chart page →

12,037
hermes-agentankra-chartsVerified publisher0.3.11 of 1See more

hermes-agent ankra-charts 0.3.1

1 of the 1 container images this version deploys carry CVE-2026-39314.

Container imageDigestPackageFixed in
nousresearch/hermes-agent:v2026.8.27e0df6adebddf
cups@2.4.10-3+deb13u2
no fix listed

Open the chart page →

5,880
paperless-ngxcrystalnetVerified publisher0.2.221 of 3See more

paperless-ngx crystalnet 0.2.22

1 of the 3 container images this version deploys carry CVE-2026-39314.

Container imageDigestPackageFixed in
ghcr.io/paperless-ngx/paperless-ngx:2.13.10642357c5dbd
cups@2.4.2-3+deb12u8
no fix listed

Open the chart page →

13,761
games-on-whalesgeek-cookbookVerified publisher1.8.22 of 7See more

games-on-whales geek-cookbook 1.8.2

2 of the 7 container images this version deploys carry CVE-2026-39314.

Container imageDigestPackageFixed in
ghcr.io/games-on-whales/retroarch:1.0.0103fbcec2314
cups@2.3.1-9ubuntu1.1
no fix listed
ghcr.io/games-on-whales/steam:1.0.09b6105be7ad0
cups@2.3.1-9ubuntu1.1
no fix listed

Open the chart page →

35,305
homebridgegeek-cookbookVerified publisher5.3.21 of 1See more

homebridge geek-cookbook 5.3.2

1 of the 1 container images this version deploys carry CVE-2026-39314.

Container imageDigestPackageFixed in
ghcr.io/oznu/homebridge:2022-07-08ff2af53897e7
cups@2.3.1-9ubuntu1.2
no fix listed

Open the chart page →

15,653
lazylibrariangeek-cookbookVerified publisher7.4.21 of 1See more

lazylibrarian geek-cookbook 7.4.2

1 of the 1 container images this version deploys carry CVE-2026-39314.

Container imageDigestPackageFixed in
linuxserver/lazylibrarian:version-1152df82f93d2560e233
cups@2.2.7-1ubuntu2.8
no fix listed

Open the chart page →

11,662
omada-controllergeek-cookbookVerified publisher4.4.21 of 1See more

omada-controller geek-cookbook 4.4.2

1 of the 1 container images this version deploys carry CVE-2026-39314.

Container imageDigestPackageFixed in
mbentley/omada-controller:4.3f4e682274bed
cups@2.2.7-1ubuntu2.10
no fix listed

Open the chart page →

11,553
owncloudkubernetes-homelab-helm-chartsVerified publisher0.1.01 of 3See more

owncloud kubernetes-homelab-helm-charts 0.1.0

1 of the 3 container images this version deploys carry CVE-2026-39314.

Container imageDigestPackageFixed in
owncloud/server:10.16.274c53d341076
cups@2.4.1op1-1ubuntu4.16
2.4.1op1-1ubuntu4.20

Open the chart page →

9,858
opennebulakvaps2.1.15 of 9See more

opennebula kvaps 2.1.1

5 of the 9 container images this version deploys carry CVE-2026-39314.

Container imageDigestPackageFixed in
ghcr.io/kvaps/opennebula:v5.12.0.4-1e28e0e7de11b
cups@2.3.1-9ubuntu1.1
no fix listed
ghcr.io/kvaps/opennebula-exporter:v5.12.0.401563adc95fd
cups@2.3.1-9ubuntu1.1
no fix listed
ghcr.io/kvaps/opennebula-exporter:v5.12.0.4-12b92df1143b9
cups@2.3.1-9ubuntu1.1
no fix listed
ghcr.io/kvaps/opennebula-flow:v5.12.0.4-1600221f0f43f
cups@2.3.1-9ubuntu1.1
no fix listed
ghcr.io/kvaps/opennebula-gate:v5.12.0.4-1a85e03d8bc1d
cups@2.3.1-9ubuntu1.1
no fix listed

Open the chart page →

113,791
flaresolverrlib42Verified publisher2.0.01 of 1See more

flaresolverr lib42 2.0.0

1 of the 1 container images this version deploys carry CVE-2026-39314.

Container imageDigestPackageFixed in
ghcr.io/flaresolverr/flaresolverr:v3.4.0ab535d1fef5d
cups@2.4.2-3+deb12u8
no fix listed

Open the chart page →

35,050
flaresolverrm0nsterrr-flaresolverrVerified publisher2.4.11 of 1See more

flaresolverr m0nsterrr-flaresolverr 2.4.1

1 of the 1 container images this version deploys carry CVE-2026-39314.

Container imageDigestPackageFixed in
ghcr.io/flaresolverr/flaresolverr:v3.5.2c80ae007ce2c
cups@2.4.2-3+deb12u9
no fix listed

Open the chart page →

6,136
drillmagasin-drill0.9.01 of 3See more

drill magasin-drill 0.9.0

1 of the 3 container images this version deploys carry CVE-2026-39314.

Container imageDigestPackageFixed in
merlos/zookeeper:3.9.3a38fc7e09ed7
cups@2.4.2-3+deb12u8
no fix listed

Open the chart page →

5,734
photoprismmmontesVerified publisher0.14.01 of 1See more

photoprism mmontes 0.14.0

1 of the 1 container images this version deploys carry CVE-2026-39314.

Container imageDigestPackageFixed in
photoprism/photoprism:251130db16ee6b1ba3
cups@2.4.12-0ubuntu3.3
2.4.12-0ubuntu3.9

Open the chart page →

11,103
redminemt1905027.3.41 of 3See more

redmine mt190502 7.3.4

1 of the 3 container images this version deploys carry CVE-2026-39314.

Container imageDigestPackageFixed in
library/redmine:6.1.204ac44a2595b
cups@2.4.10-3+deb13u2
no fix listed

Open the chart page →

7,527
helm-composenousefreakVerified publisher0.1.31 of 2See more

helm-compose nousefreak 0.1.3

1 of the 2 container images this version deploys carry CVE-2026-39314.

Container imageDigestPackageFixed in
library/wordpress:latest5a93c470ae82
cups@2.4.10-3+deb13u2
no fix listed

Open the chart page →

14,250
paperless-ngxpaperlessVerified publisher0.4.01 of 3See more

paperless-ngx paperless 0.4.0

1 of the 3 container images this version deploys carry CVE-2026-39314.

Container imageDigestPackageFixed in
ghcr.io/paperless-ngx/paperless-ngxdigest-pinnedaa810a36942c
cups@2.4.10-3+deb13u2
no fix listed

Open the chart page →

8,489
napcatredish101Verified publisher0.1.31 of 1See more

napcat redish101 0.1.3

1 of the 1 container images this version deploys carry CVE-2026-39314.

Container imageDigestPackageFixed in
mlikiowa/napcat-docker:latest1336a777f9a4
cups@2.4.1op1-1ubuntu4.11
2.4.1op1-1ubuntu4.20

Open the chart page →

7,405
redmineredmine-helm-chartVerified publisher0.2.61 of 1See more

redmine redmine-helm-chart 0.2.6

1 of the 1 container images this version deploys carry CVE-2026-39314.

Container imageDigestPackageFixed in
library/redmine:6.1.3-trixief474a901faec
cups@2.4.10-3+deb13u2
no fix listed

Open the chart page →

4,240
fluent-bitromanow-helm-chartsVerified publisher1.7.31 of 1See more

fluent-bit romanow-helm-charts 1.7.3

1 of the 1 container images this version deploys carry CVE-2026-39314.

Container imageDigestPackageFixed in
fluent/fluent-bit:4.0-debuge76397ef3983
cups@2.4.2-3+deb12u9
no fix listed

Open the chart page →

7,740
uptime-kumasb-helm-charts0.4.01 of 1See more

uptime-kuma sb-helm-charts 0.4.0

1 of the 1 container images this version deploys carry CVE-2026-39314.

Container imageDigestPackageFixed in
louislam/uptime-kuma:2.0.24c364ef96aad
cups@2.4.2-3+deb12u9
no fix listed

Open the chart page →

38,107

Container images carrying it

166 by charts deploying them

A fixed version is listed for 2 of the 2 affected packages.

Container imageDigestPackageFixed inUsed by
ghcr.io/paperless-ngx/paperless-ngx:2.20.134b05bcd28e69
cups@2.4.10-3+deb13u2
no fix listed
1
ghcr.io/paperless-ngx/paperless-ngx:2.20.357ad9565bff3
cups@2.4.10-3+deb13u2
no fix listed
1
ghcr.io/paperless-ngx/paperless-ngx:2.20.5665f2f5cc548
cups@2.4.10-3+deb13u2
no fix listed
1
ghcr.io/paperless-ngx/paperless-ngx:2.0.1ab255bea133e
cups@2.4.2-3+deb12u4
no fix listed
1
ghcr.io/paperless-ngx/paperless-ngx:2.20.14b89f83345532
cups@2.4.10-3+deb13u2
no fix listed
1
ghcr.io/smarter-project/image-detector:v2.5.31dcca70c6446
cups@2.3.1-9ubuntu1.2
no fix listed
1
ghcr.io/star-whale/server:0.6.158368359c8dd0
cups@2.3.1-9ubuntu1.2
no fix listed
1
ghcr.io/stirling-tools/stirling-pdf:2.14.33b3670fce70b
cups@2.4.7-1.2ubuntu7.9
2.4.7-1.2ubuntu7.13
1
ghcr.io/voxpupuli/container-puppetdb:7.18.0-v1.5.0a56dfe91f5b1
cups@2.4.1op1-1ubuntu4.8
2.4.1op1-1ubuntu4.20
1
ghcr.io/voxpupuli/container-puppetserver:7.17.0-v1.5.0916746209ac5
cups@2.4.1op1-1ubuntu4.8
2.4.1op1-1ubuntu4.20
1
ghcr.io/voxpupuli/puppetserver:8.7.0-main63873f3f698e
cups@2.4.1op1-1ubuntu4.11
2.4.1op1-1ubuntu4.20
1
ghcr.io/wiremind/grafana-pdf-exporter:v1.7dbaa8527bf4c
cups@2.4.2-3+deb12u4
no fix listed
1
ghcr.io/wittdennis/calibre-web:1.1.1aa7d5d5dd6be
cups@2.4.2-3+deb12u9
no fix listed
1
ghcr.io/yurymkomarov/docker/kubernetes-kiosk-chromium:0.1.27bff29dcec72
cups@2.4.2-3+deb12u9
no fix listed
1
ghcr.io/zammad/zammad:7.1.3-0011e65123a43ecc
cups@2.4.10-3+deb13u2
no fix listed
1
quay.io/underndog/samba:1.2.0-not-recyclecca801de9fa5
cups@2.4.11-r0
2.4.18-r0
1

syft 1.42.1 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.