StackRadar

CVE-2026-39316

Medium

Advisory

Published 7 Apr 2026In the index since 5 Sept 2026
Severity
Medium
worst across findings
CVSS
6.2
base score, highest
EPSS
0.002
7th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
206
of 17,781 indexed, latest versions
Container images
177
deployed by those charts
Fix available
2 of 2
affected packages

The matching OSV records carry no description.

Carried by container images the latest versions of 206 of 17,781 indexed charts deploy, on 177 images.

Affected packageAffected versionsFixed inImages
cupsdeb2.1.3-4ubuntu0.3, 2.1.3-4ubuntu0.4, 2.1.3-4ubuntu0.7, 2.1.3-4ubuntu0.10+29 more2.4.1op1-1ubuntu4.20, 2.4.7-1.2ubuntu7.13, 2.4.12-0ubuntu3.9, 2.4.16-1ubuntu1.2167
cupsapk2.4.11-r02.4.18-r010
OSV records
ALPINE-CVE-2026-39316DEBIAN-CVE-2026-39316UBUNTU-CVE-2026-39316
Also known as
USN-8405-1

Charts affected

206 by stars
ChartLatestAffected imagesRadar Score
browserlessvictorlane0.2.01 of 1See more

browserless victorlane 0.2.0

1 of the 1 container images this version deploys carry CVE-2026-39316.

Container imageDigestPackageFixed in
ghcr.io/browserless/chromium:v2.43.0853e6f105b51
cups@2.4.7-1.2ubuntu7.9
2.4.7-1.2ubuntu7.13

Open the chart page →

4,305
calibre-webvista0.1.31 of 1See more

calibre-web vista 0.1.3

1 of the 1 container images this version deploys carry CVE-2026-39316.

Container imageDigestPackageFixed in
linuxserver/calibre-web:0.6.24241009026e6f
cups@2.4.7-1.2ubuntu7.3
2.4.7-1.2ubuntu7.13

Open the chart page →

7,628
webhookiewebhookie0.1.21 of 1See more

webhookie webhookie 0.1.2

1 of the 1 container images this version deploys carry CVE-2026-39316.

Container imageDigestPackageFixed in
hookiesolutions/webhookie:latest0629694246ba
cups@2.3.1-9ubuntu1.1
no fix listed

Open the chart page →

14,364
webhookie-allwebhookie0.1.21 of 3See more

webhookie-all webhookie 0.1.2

1 of the 3 container images this version deploys carry CVE-2026-39316.

Container imageDigestPackageFixed in
hookiesolutions/webhookie:latest0629694246ba
cups@2.3.1-9ubuntu1.1
no fix listed

Open the chart page →

28,605
Wordpresswordpress-mariadb1.0.21 of 2See more

Wordpress wordpress-mariadb 1.0.2

1 of the 2 container images this version deploys carry CVE-2026-39316.

Container imageDigestPackageFixed in
library/wordpress:latest5a93c470ae82
cups@2.4.10-3+deb13u2
no fix listed

Open the chart page →

5,560
playwright-synthetic-monitoringwork-adventure1.0.11 of 1See more

playwright-synthetic-monitoring work-adventure 1.0.1

1 of the 1 container images this version deploys carry CVE-2026-39316.

Container imageDigestPackageFixed in
workadventure/playwright-synthetic-monitoring:main92b664c2a06f
cups@2.4.1op1-1ubuntu4.10
2.4.1op1-1ubuntu4.20

Open the chart page →

14,100

Container images carrying it

177 by charts deploying them

A fixed version is listed for 2 of the 2 affected packages.

Container imageDigestPackageFixed inUsed by
sbs20/scanservjs:release-v3.0.3dad1fd6e9a98
cups@2.4.2-3+deb12u4
no fix listed
1
scrapinghub/splash:3.4.1a5f89bc84606
cups@2.2.7-1ubuntu2.7
no fix listed
1
sismics/docs:v1.10f4b0ef019cf1
cups@2.2.7-1ubuntu2.8
no fix listed
1
sissbruecker/linkding:1.41.0-plusa222fb777e1f
cups@2.4.2-3+deb12u8
no fix listed
1
socialmediamacroscope/autophrase:0.1.570fb11d4f531
cups@2.3.1-9ubuntu1.6
no fix listed
1
someblackmagic/k8s-testing-multitool:v0.1.06eca64b6b440
cups@2.3.1-9ubuntu1.2
no fix listed
1
speckle/speckle-preview-service:2.26.3092384dba45d
cups@2.4.2-3+deb12u9
no fix listed
1
speckle/speckle-preview-service:2.20.2-branch.testing4.134160-9fad4b21f897ca906ea
cups@2.4.2-3+deb12u5
no fix listed
1
speckle/speckle-preview-service:2.21.3-branch.testing5.219631-2153bef52cad5e3293e
cups@2.4.2-3+deb12u8
no fix listed
1
speckle/speckle-preview-service:2.23.14-branch.testing6.334655-b4e04ee6dee853ba74a
cups@2.4.2-3+deb12u8
no fix listed
1
speckle/speckle-preview-service:2.25.10-branch.testing6.645-b125c1e787adcb20a3a
cups@2.4.2-3+deb12u8
no fix listed
1
speckle/speckle-preview-service:2.17.14-branch.testing.72707.921a5f884fc39bca0c8
cups@2.4.2-3+deb12u5
no fix listed
1
speckle/speckle-preview-service:2.20.6-branch.testing1.154030-9b091148f3c1ea153ba
cups@2.4.2-3+deb12u5
no fix listed
1
speckle/speckle-preview-service:2.19.2-branch.hotfix-2.19.1.124125-665e7e1c102b087481a
cups@2.4.2-3+deb12u5
no fix listed
1
speckle/speckle-preview-service:2.20.3-branch.hotfix-2.20.2.149555-37ea0cbd3da0a84de98
cups@2.4.2-3+deb12u5
no fix listed
1
stashapp/stash-box:latesta534c8afdf39
cups@2.4.7-1.2ubuntu7.3
2.4.7-1.2ubuntu7.13
1
svtechnmaa/svtech_rundeck:v1.2.26e368ace0977
cups@2.3.1-9ubuntu1.3
no fix listed
1
swimmwatch/cloakbrowser-mcp:1.13.0d48c705a58c8
cups@2.4.2-3+deb12u9
no fix listed
1
tensorflow/tensorflow:1.6.0-devel1e3172090703
cups@2.1.3-4ubuntu0.4
no fix listed
1
thingsboard/tb-postgres:latest2d17e4e36edc
cups@2.4.2-3+deb12u9
no fix listed
1
timothyclarke/wptagent:2018-01-2322c41e5ca7e2
cups@2.1.3-4ubuntu0.3
no fix listed
1
tinymediamanager/tinymediamanager:5.3.22b34dc85099e
cups@2.4.10-3+deb13u2
no fix listed
1
trueosiris/vrising:latest9356f98ad561
cups@2.4.1op1-1ubuntu4.16
2.4.1op1-1ubuntu4.20
1
wavefronthq/proxy:9.2d1064d28f6eb
cups@2.2.7-1ubuntu2.8
no fix listed
1
workadventure/playwright-synthetic-monitoring:main92b664c2a06f
cups@2.4.1op1-1ubuntu4.10
2.4.1op1-1ubuntu4.20
1
yuzutech/kroki-bpmn:0.29.1444805c4b917
cups@2.4.11-r0
2.4.18-r0
1
yuzutech/kroki-diagramsnet:0.29.1b810edbf9c62
cups@2.4.11-r0
2.4.18-r0
1
yuzutech/kroki-excalidraw:0.29.157917319ea70
cups@2.4.11-r0
2.4.18-r0
1
yuzutech/kroki-mermaid:0.29.1963b4acfde6e
cups@2.4.11-r0
2.4.18-r0
1
zabbix/zabbix-web-service:ubuntu-7.0.23915b3183e054
cups@2.3.3op2-3+deb11u8
2.4.7-1.2ubuntu7.13
1
zabbix/zabbix-web-service:ubuntu-6.0.8ee4baa872280
cups@2.4.1op1-1ubuntu4.1
2.4.1op1-1ubuntu4.20
1
ghcr.io/appscode/gotenberg:8.25f9104080d9a7
cups@2.4.10-3+deb13u2
no fix listed
1
ghcr.io/argonix-io/argonix-api:1.0.068e17a8aaa40
cups@2.4.10-3+deb13u2
no fix listed
1
ghcr.io/avistotelecom/docker-wazuh-agent:4.12.08766ba08bf1a
cups@2.4.2-3+deb12u8
no fix listed
1
ghcr.io/browserless/chromium:v2.43.0853e6f105b51
cups@2.4.7-1.2ubuntu7.9
2.4.7-1.2ubuntu7.13
1
ghcr.io/chaos-mesh/chaos-daemon:v2.8.40d28dbd95b03
cups@2.4.2-3+deb12u9
no fix listed
1
ghcr.io/chaos-mesh/chaos-daemon:v2.8.369b1d3c09cfa
cups@2.4.2-3+deb12u9
no fix listed
1
ghcr.io/chaos-mesh/chaos-daemon:v2.7.29608d9b51452
cups@2.4.2-3+deb12u8
no fix listed
1
ghcr.io/chaos-mesh/chaos-daemon:v2.8.0fb609bc264d9
cups@2.4.2-3+deb12u9
no fix listed
1
ghcr.io/firecrawl/playwright-service:latest1f6eba640320
cups@2.4.2-3+deb12u9
no fix listed
1
ghcr.io/flaresolverr/flaresolverr:v3.4.0ab535d1fef5d
cups@2.4.2-3+deb12u8
no fix listed
1
ghcr.io/jfwenisch/discord-experiencebot:latestb52ff07f9f0c
cups@2.2.7-1ubuntu2.10
no fix listed
1
ghcr.io/jfwenisch/steamcmd-manager:v0.4.5dab685e668d9
cups@2.4.7-1.2ubuntu7.3
2.4.7-1.2ubuntu7.13
1
ghcr.io/jfwenisch/webtools:v0.1.44569cae83c70
cups@2.4.7-1.2ubuntu7.3
2.4.7-1.2ubuntu7.13
1
ghcr.io/jr0dd/puppeteer:v13.3.26047599cd78e
cups@2.3.1-9ubuntu1.1
no fix listed
1
ghcr.io/k8s-at-home/nzbhydra2:v3.14.2ef3670f7e0a8
cups@2.3.1-9ubuntu1.1
no fix listed
1
ghcr.io/karakeep-app/karakeep:0.27.1abd7d6b11b1b
cups@2.4.11-r0
2.4.18-r0
1
ghcr.io/karakeep-app/karakeep:0.33.2b069e4307dec
cups@2.4.2-3+deb12u9
no fix listed
1
ghcr.io/karakeep-app/karakeep:0.26.0f575a34ed3f8
cups@2.4.11-r0
2.4.18-r0
1
ghcr.io/kvaps/opennebula:v5.12.0.4-1e28e0e7de11b
cups@2.3.1-9ubuntu1.1
no fix listed
1

syft 1.42.1 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.