StackRadar

CVE-2026-41254

High

Advisory

Published 18 Apr 2026In the index since 5 Sept 2026
Severity
High
worst across findings
CVSS
7.5
base score, highest
EPSS
0.004
30th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
303
of 17,781 indexed, latest versions
Container images
299
deployed by those charts
Fix available
7 of 7
affected packages

The matching OSV records carry no description.

Carried by container images the latest versions of 303 of 17,781 indexed charts deploy, on 299 images.

Affected packageAffected versionsFixed inImages
lcms2deb2.5-0ubuntu4, 2.5-0ubuntu4.1, 2.6-3ubuntu2, 2.6-3ubuntu2.1+6 more2.5-0ubuntu4.2+esm1, 2.6-3ubuntu2.1+esm1, 2.9-1ubuntu0.1+esm1, 2.9-4ubuntu0.1~esm1+5 more235
lcms2apk2.16-r0, 2.17-r02.19-r040
javabitnami11.0.15-150, 11.0.18-10-1, 11.0.18-10-2, 11.0.20-8-3+12 more1.8.016
Javabitnami11.0.20-8, 11.0.21-10, 17.0.8-7, 17.0.10-13-1+2 more1.8.07
openjdk-17deb17.0.10+7-1~deb12u1, 17.0.13+11-2~deb12u1, 17.0.16+8-1~deb12u1, 17.0.17+10-1~deb12u1+2 more17.0.20+8-1~deb12u17
jrebitnami17.0.16-12-0, 17.0.19-11-2, 21.0.8-12-0, 21.0.9-15-0+1 more1.8.05
openjdk-21deb21.0.11+10-1~deb13u221.0.12+8-1~deb13u12
OSV records
ALPINE-CVE-2026-41254BIT-java-2026-41254BIT-jre-2026-41254DEBIAN-CVE-2026-41254UBUNTU-CVE-2026-41254
Also known as
BIT-java-min-2026-41254, GHSA-4xp6-rcgg-m9qq, USN-8209-1, USN-8209-2

Charts affected

303 by stars
ChartLatestAffected imagesRadar Score
homebridgegeek-cookbookVerified publisher5.3.21 of 1See more

homebridge geek-cookbook 5.3.2

1 of the 1 container images this version deploys carry CVE-2026-41254.

Container imageDigestPackageFixed in
ghcr.io/oznu/homebridge:2022-07-08ff2af53897e7
lcms2@2.9-4
2.9-4ubuntu0.1~esm1

Open the chart page →

15,653
lazylibrariangeek-cookbookVerified publisher7.4.21 of 1See more

lazylibrarian geek-cookbook 7.4.2

1 of the 1 container images this version deploys carry CVE-2026-41254.

Container imageDigestPackageFixed in
linuxserver/lazylibrarian:version-1152df82f93d2560e233
lcms2@2.9-1ubuntu0.1
2.9-1ubuntu0.1+esm1

Open the chart page →

11,662
omada-controllergeek-cookbookVerified publisher4.4.21 of 1See more

omada-controller geek-cookbook 4.4.2

1 of the 1 container images this version deploys carry CVE-2026-41254.

Container imageDigestPackageFixed in
mbentley/omada-controller:4.3f4e682274bed
lcms2@2.9-1ubuntu0.1
2.9-1ubuntu0.1+esm1

Open the chart page →

11,553
leantimegissilabs1.3.01 of 2See more

leantime gissilabs 1.3.0

1 of the 2 container images this version deploys carry CVE-2026-41254.

Container imageDigestPackageFixed in
leantime/leantime:3.3.3ad4bfb0699d3
lcms2@2.16-r0
2.19-r0

Open the chart page →

6,416
gridgaingridgainOfficialVerified publisher1.0.61 of 1See more

gridgain gridgain 1.0.6

1 of the 1 container images this version deploys carry CVE-2026-41254.

Container imageDigestPackageFixed in
gridgain/community:8.9.11d32d182a0e6a
lcms2@2.16-r0
2.19-r0

Open the chart page →

4,679
castopodh2mVerified publisher1.12.101 of 3See more

castopod h2m 1.12.10

1 of the 3 container images this version deploys carry CVE-2026-41254.

Container imageDigestPackageFixed in
castopod/castopod:1.12.101fd37280cbb2
lcms2@2.14-2
2.14-2+deb12u1

Open the chart page →

10,072
immichimmich-helm0.3.01 of 4See more

immich immich-helm 0.3.0

1 of the 4 container images this version deploys carry CVE-2026-41254.

Container imageDigestPackageFixed in
ghcr.io/immich-app/immich-server:v2.3.1f8d06a32b1b2
lcms2@2.16-2
2.16-2+deb13u2

Open the chart page →

15,712
iris-webappiris-webapp0.2.41 of 2See more

iris-webapp iris-webapp 0.2.4

1 of the 2 container images this version deploys carry CVE-2026-41254.

Container imageDigestPackageFixed in
ghcr.io/dfir-iris/iriswebapp_app:v2.4.26e59ebde55709
lcms2@2.16-2
2.16-2+deb13u2

Open the chart page →

11,764
jdownloader2jdownloader2Verified publisher1.10.01 of 1See more

jdownloader2 jdownloader2 1.10.0

1 of the 1 container images this version deploys carry CVE-2026-41254.

Container imageDigestPackageFixed in
jlesage/jdownloader-2:v26.03.13d6cb102bd9b
lcms2@2.16-r0
2.19-r0

Open the chart page →

539
difykubeblocksVerified publisher0.5.11 of 5See more

dify kubeblocks 0.5.1

1 of the 5 container images this version deploys carry CVE-2026-41254.

Container imageDigestPackageFixed in
langgenius/dify-api:0.6.11fca918260dd6
lcms2@2.14-2
2.14-2+deb12u1

Open the chart page →

20,403
opennebulakvaps2.1.15 of 9See more

opennebula kvaps 2.1.1

5 of the 9 container images this version deploys carry CVE-2026-41254.

Container imageDigestPackageFixed in
ghcr.io/kvaps/opennebula:v5.12.0.4-1e28e0e7de11b
lcms2@2.9-4
2.9-4ubuntu0.1~esm1
ghcr.io/kvaps/opennebula-exporter:v5.12.0.401563adc95fd
lcms2@2.9-4
2.9-4ubuntu0.1~esm1
ghcr.io/kvaps/opennebula-exporter:v5.12.0.4-12b92df1143b9
lcms2@2.9-4
2.9-4ubuntu0.1~esm1
ghcr.io/kvaps/opennebula-flow:v5.12.0.4-1600221f0f43f
lcms2@2.9-4
2.9-4ubuntu0.1~esm1
ghcr.io/kvaps/opennebula-gate:v5.12.0.4-1a85e03d8bc1d
lcms2@2.9-4
2.9-4ubuntu0.1~esm1

Open the chart page →

113,791
chibisafel4gVerified publisher0.1.11 of 3See more

chibisafe l4g 0.1.1

1 of the 3 container images this version deploys carry CVE-2026-41254.

Container imageDigestPackageFixed in
chibisafe/chibisafe-server:latest3da4fcbc1a18
lcms2@2.16-r0
2.19-r0

Open the chart page →

5,654
flaresolverrlib42Verified publisher2.0.01 of 1See more

flaresolverr lib42 2.0.0

1 of the 1 container images this version deploys carry CVE-2026-41254.

Container imageDigestPackageFixed in
ghcr.io/flaresolverr/flaresolverr:v3.4.0ab535d1fef5d
lcms2@2.14-2
2.14-2+deb12u1

Open the chart page →

35,050
music-assistant-serverlmatfyVerified publisher0.1.91 of 1See more

music-assistant-server lmatfy 0.1.9

1 of the 1 container images this version deploys carry CVE-2026-41254.

Container imageDigestPackageFixed in
ghcr.io/music-assistant/server:2.7.53522e8a7a8f0
lcms2@2.14-2
2.14-2+deb12u1

Open the chart page →

7,201
drillmagasin-drill0.9.01 of 3See more

drill magasin-drill 0.9.0

1 of the 3 container images this version deploys carry CVE-2026-41254.

Container imageDigestPackageFixed in
merlos/zookeeper:3.9.3a38fc7e09ed7
lcms2@2.14-2
openjdk-17@17.0.13+11-2~deb12u1
2.14-2+deb12u1
17.0.20+8-1~deb12u1

Open the chart page →

5,734
photoprismmmontesVerified publisher0.14.01 of 1See more

photoprism mmontes 0.14.0

1 of the 1 container images this version deploys carry CVE-2026-41254.

Container imageDigestPackageFixed in
photoprism/photoprism:251130db16ee6b1ba3
lcms2@2.16-2
2.16-2ubuntu0.1

Open the chart page →

11,103
mockservermockserverOfficialVerified publisher7.6.01 of 1See more

mockserver mockserver 7.6.0

1 of the 1 container images this version deploys carry CVE-2026-41254.

Container imageDigestPackageFixed in
mockserver/mockserver:mockserver-7.6.080b3b1a26f35
lcms2@2.14-2
2.14-2+deb12u1

Open the chart page →

1,021
food-managermoreillonVerified publisher0.5.01 of 2See more

food-manager moreillon 0.5.0

1 of the 2 container images this version deploys carry CVE-2026-41254.

Container imageDigestPackageFixed in
moreillon/food-manager:lateste8fd856e593d
lcms2@2.14-2
2.14-2+deb12u1

Open the chart page →

13,738
clowder2ncsaVerified publisher1.9.72 of 12See more

clowder2 ncsa 1.9.7

2 of the 12 container images this version deploys carry CVE-2026-41254.

Container imageDigestPackageFixed in
bitnamilegacy/elasticsearch:8.12.215d4647fd491
java@17.0.10-13-2
Java@17.0.10-13-2
1.8.0
1.8.0
bitnamilegacy/keycloak:20.0.5cb04e49e6eb1
java@17.0.6-10-4
1.8.0

Open the chart page →

37,373
opentelemetry-demoopentelemetry-helmVerified publisher0.41.11 of 34See more

opentelemetry-demo opentelemetry-helm 0.41.1

1 of the 34 container images this version deploys carry CVE-2026-41254.

Container imageDigestPackageFixed in
ghcr.io/open-telemetry/demo:3.0.0-fraud-detection1cdfd1bcf476
lcms2@2.14-2
openjdk-17@17.0.18+8-1~deb12u1
2.14-2+deb12u1
17.0.20+8-1~deb12u1

Open the chart page →

22,420
portraitportraitVerified publisher0.2.131 of 8See more

portrait portrait 0.2.13

1 of the 8 container images this version deploys carry CVE-2026-41254.

Container imageDigestPackageFixed in
treskon/portrait-web-setup:DEV-latesta475d80e4ecf
lcms2@2.14-2
2.14-2+deb12u1

Open the chart page →

31,844
napcatredish101Verified publisher0.1.31 of 1See more

napcat redish101 0.1.3

1 of the 1 container images this version deploys carry CVE-2026-41254.

Container imageDigestPackageFixed in
mlikiowa/napcat-docker:latest1336a777f9a4
lcms2@2.12~rc1-2build2
2.12~rc1-2ubuntu0.1

Open the chart page →

7,405
delugerubxkubeVerified publisher1.2.11 of 1See more

deluge rubxkube 1.2.1

1 of the 1 container images this version deploys carry CVE-2026-41254.

Container imageDigestPackageFixed in
linuxserver/deluge:18.04.10ac871624394
lcms2@2.9-1ubuntu0.1
2.9-1ubuntu0.1+esm1

Open the chart page →

13,541
kyoorubxkubeVerified publisher0.1.102 of 9See more

kyoo rubxkube 0.1.10

2 of the 9 container images this version deploys carry CVE-2026-41254.

Container imageDigestPackageFixed in
ghcr.io/zoriya/kyoo_autosync:4.7.1fbba58ddb1a6
lcms2@2.14-2
2.14-2+deb12u1
ghcr.io/zoriya/kyoo_scanner:4.7.17dc0ee57b628
lcms2@2.14-2
2.14-2+deb12u1

Open the chart page →

30,234
uptime-kumasb-helm-charts0.4.01 of 1See more

uptime-kuma sb-helm-charts 0.4.0

1 of the 1 container images this version deploys carry CVE-2026-41254.

Container imageDigestPackageFixed in
louislam/uptime-kuma:2.0.24c364ef96aad
lcms2@2.14-2
2.14-2+deb12u1

Open the chart page →

38,107
karakeepself-hosters-by-nightVerified publisher2.5.11 of 1See more

karakeep self-hosters-by-night 2.5.1

1 of the 1 container images this version deploys carry CVE-2026-41254.

Container imageDigestPackageFixed in
ghcr.io/karakeep-app/karakeep:0.27.1abd7d6b11b1b
lcms2@2.16-r0
2.19-r0

Open the chart page →

5,213
clickhousesignoz24.1.181 of 3See more

clickhouse signoz 24.1.18

1 of the 3 container images this version deploys carry CVE-2026-41254.

Container imageDigestPackageFixed in
signoz/zookeeper:3.7.1fcc4a3288154
java@11.0.20-8-5
Java@11.0.20-8
1.8.0
1.8.0

Open the chart page →

4,695
smarter-demosmarterOfficialVerified publisher0.1.52 of 7See more

smarter-demo smarter 0.1.5

2 of the 7 container images this version deploys carry CVE-2026-41254.

Container imageDigestPackageFixed in
ghcr.io/smarter-project/gstreamer:v1.0.25ecb16015aa8
lcms2@2.9-4
2.9-4ubuntu0.1~esm1
ghcr.io/smarter-project/image-detector:v2.5.31dcca70c6446
lcms2@2.9-4
2.9-4ubuntu0.1~esm1

Open the chart page →

45,832
speckle-serverspeckleVerified publisher2.26.31 of 4See more

speckle-server speckle 2.26.3

1 of the 4 container images this version deploys carry CVE-2026-41254.

Container imageDigestPackageFixed in
speckle/speckle-preview-service:2.26.3092384dba45d
lcms2@2.14-2
2.14-2+deb12u1

Open the chart page →

10,380
starwhalestarwhaleVerified publisher0.6.151 of 4See more

starwhale starwhale 0.6.15

1 of the 4 container images this version deploys carry CVE-2026-41254.

Container imageDigestPackageFixed in
ghcr.io/star-whale/server:0.6.158368359c8dd0
lcms2@2.9-4
2.9-4ubuntu0.1~esm1

Open the chart page →

13,486
unitycatalogunitycatalogVerified publisher0.0.21 of 4See more

unitycatalog unitycatalog 0.0.2

1 of the 4 container images this version deploys carry CVE-2026-41254.

Container imageDigestPackageFixed in
ghcr.io/sdwbgn/unitycatalog-helm/docker/unitycatalog-ui:0.2.1-5d668c1ed07e7ca098d
lcms2@2.14-2
2.14-2+deb12u1

Open the chart page →

12,581
wavefront-adapter-for-istiowavefront0.1.41 of 2See more

wavefront-adapter-for-istio wavefront 0.1.4

1 of the 2 container images this version deploys carry CVE-2026-41254.

Container imageDigestPackageFixed in
wavefronthq/proxy:9.2d1064d28f6eb
lcms2@2.9-1ubuntu0.1
2.9-1ubuntu0.1+esm1

Open the chart page →

15,970
kafka-devwikimedia0.2.01 of 1See more

kafka-dev wikimedia 0.2.0

1 of the 1 container images this version deploys carry CVE-2026-41254.

Container imageDigestPackageFixed in
wurstmeister/zookeeper:latest7a7fd44a7210
lcms2@2.5-0ubuntu4
2.5-0ubuntu4.2+esm1

Open the chart page →

41,427
wordpress-e2e-setupwoocommerce-e2e-setup0.1.11 of 2See more

wordpress-e2e-setup woocommerce-e2e-setup 0.1.1

1 of the 2 container images this version deploys carry CVE-2026-41254.

Container imageDigestPackageFixed in
library/wordpress:6.8-apache30bff39330d1
lcms2@2.16-2
2.16-2+deb13u2

Open the chart page →

7,696
active-mqactivemq-helm-chartVerified publisher1.8.21 of 3See more

active-mq activemq-helm-chart 1.8.2

1 of the 3 container images this version deploys carry CVE-2026-41254.

Container imageDigestPackageFixed in
bitnami/jmx-exporterdigest-pinned9cc4a173c69e
jre@17.0.19-11-2
1.8.0

Open the chart page →

3,188
akto-source-code-analyserakto0.1.51 of 3See more

akto-source-code-analyser akto 0.1.5

1 of the 3 container images this version deploys carry CVE-2026-41254.

Container imageDigestPackageFixed in
aktosecurity/akto-puppeteer-replay:doom_latest853e37321e6e
lcms2@2.16-r0
2.19-r0

Open the chart page →

4,880
lidarralexmorbo-lidarrVerified publisher0.1.21 of 1See more

lidarr alexmorbo-lidarr 0.1.2

1 of the 1 container images this version deploys carry CVE-2026-41254.

Container imageDigestPackageFixed in
ghcr.io/home-operations/lidarr:3.1.2.4902dab0e07502a3
lcms2@2.17-r0
2.19-r0

Open the chart page →

1,870
omada-controllerandrelote-k8sVerified publisher4.5.01 of 1See more

omada-controller andrelote-k8s 4.5.0

1 of the 1 container images this version deploys carry CVE-2026-41254.

Container imageDigestPackageFixed in
mbentley/omada-controller:4.3f4e682274bed
lcms2@2.9-1ubuntu0.1
2.9-1ubuntu0.1+esm1

Open the chart page →

11,553
games-on-whalesangelnu2.0.03 of 7See more

games-on-whales angelnu 2.0.0

3 of the 7 container images this version deploys carry CVE-2026-41254.

Container imageDigestPackageFixed in
andrewmackrodt/firefox-x11:142.0.1-r133f9080470c9
lcms2@2.12~rc1-2build2
2.12~rc1-2ubuntu0.1
ghcr.io/games-on-whales/retroarch:1.0.0103fbcec2314
lcms2@2.9-4
2.9-4ubuntu0.1~esm1
ghcr.io/games-on-whales/steam:1.0.09b6105be7ad0
lcms2@2.9-4
2.9-4ubuntu0.1~esm1

Open the chart page →

42,126
antigenic-docuseal-helm-chartantigenic-docuseal-helm-chartVerified publisher0.2.01 of 1See more

antigenic-docuseal-helm-chart antigenic-docuseal-helm-chart 0.2.0

1 of the 1 container images this version deploys carry CVE-2026-41254.

Container imageDigestPackageFixed in
docuseal/docuseal:2.4.17493fd7f6728
lcms2@2.17-r0
2.19-r0

Open the chart page →

2,766
platform-apiappscodeVerified publisher2026.9.111 of 3See more

platform-api appscode 2026.9.11

1 of the 3 container images this version deploys carry CVE-2026-41254.

Container imageDigestPackageFixed in
ghcr.io/appscode/gotenberg:8.25f9104080d9a7
lcms2@2.16-2
2.16-2+deb13u2

Open the chart page →

37,268
appwriteappwrite-helmVerified publisher1.3.21 of 8See more

appwrite appwrite-helm 1.3.2

1 of the 8 container images this version deploys carry CVE-2026-41254.

Container imageDigestPackageFixed in
appwrite/appwrite:1.9.01aaa70127114
lcms2@2.17-r0
2.19-r0

Open the chart page →

9,847
dokuwikiarea-42Verified publisher0.1.81 of 1See more

dokuwiki area-42 0.1.8

1 of the 1 container images this version deploys carry CVE-2026-41254.

Container imageDigestPackageFixed in
dokuwiki/dokuwiki:2025-05-14af08ecfdda239
lcms2@2.16-2
2.16-2+deb13u2

Open the chart page →

7,489
arlas-aiasarlas-stackVerified publisher28.8.02 of 22See more

arlas-aias arlas-stack 28.8.0

2 of the 22 container images this version deploys carry CVE-2026-41254.

Container imageDigestPackageFixed in
bitnamilegacy/elasticsearch:9.0.1-debian-12-r0e6f6ddcce2f1
java@21.0.7-9-0
1.8.0
bitnamilegacy/keycloak:26.3.3-debian-12-r0da3df0976a9f
jre@21.0.8-12-0
1.8.0

Open the chart page →

40,238
dltkvassist-iot-data-integrity-verification0.2.02 of 9See more

dltkv assist-iot-data-integrity-verification 0.2.0

2 of the 9 container images this version deploys carry CVE-2026-41254.

Container imageDigestPackageFixed in
hyperledger/fabric-ca-tools:latest4ce6f43ded2e
lcms2@2.6-3ubuntu2
2.6-3ubuntu2.1+esm1
hyperledger/fabric-couchdb:0.4.15f6c724592abf
lcms2@2.6-3ubuntu2.1
2.6-3ubuntu2.1+esm1

Open the chart page →

77,706
dltflassist-iot-dlt-based-fl0.2.02 of 9See more

dltfl assist-iot-dlt-based-fl 0.2.0

2 of the 9 container images this version deploys carry CVE-2026-41254.

Container imageDigestPackageFixed in
hyperledger/fabric-ca-tools:latest4ce6f43ded2e
lcms2@2.6-3ubuntu2
2.6-3ubuntu2.1+esm1
hyperledger/fabric-couchdb:0.4.15f6c724592abf
lcms2@2.6-3ubuntu2.1
2.6-3ubuntu2.1+esm1

Open the chart page →

77,706
smartorchestratorassist-iot-smart-orchestrator4.0.01 of 14See more

smartorchestrator assist-iot-smart-orchestrator 4.0.0

1 of the 14 container images this version deploys carry CVE-2026-41254.

Container imageDigestPackageFixed in
assistiot/smart-orchestrator_scheduler_mc:latestb1dbe4d62a03
lcms2@2.14-2
2.14-2+deb12u1

Open the chart page →

45,363
astrotrekastria0.0.22 of 4See more

astrotrek astria 0.0.2

2 of the 4 container images this version deploys carry CVE-2026-41254.

Container imageDigestPackageFixed in
timescale/timescaledb-ha:pg15-latesta8e3322e1cf9
lcms2@2.12~rc1-2build2
2.12~rc1-2ubuntu0.1
ghcr.io/astriaorg/astrotrek:0.1.05889bea38e56
lcms2@2.14-2
2.14-2+deb12u1

Open the chart page →

32,501
axelor-open-suiteaxelor-open-suiteVerified publisher7.2.581 of 2See more

axelor-open-suite axelor-open-suite 7.2.58

1 of the 2 container images this version deploys carry CVE-2026-41254.

Container imageDigestPackageFixed in
pmoscode/axelor-open-suite:v7.2.57a58f4d762f5c
java@17.0.8-7-5
Java@17.0.8-7
1.8.0
1.8.0

Open the chart page →

9,722
colosseumbook-k8sinfra-v21.0.182 of 5See more

colosseum book-k8sinfra-v2 1.0.18

2 of the 5 container images this version deploys carry CVE-2026-41254.

Container imageDigestPackageFixed in
sysnet4admin/colosseum-cms:loge74b43c7f492
lcms2@2.14-2
2.14-2+deb12u1
sysnet4admin/colosseum-prm:log5802bfcd7fed
lcms2@2.14-2
2.14-2+deb12u1

Open the chart page →

26,996

Container images carrying it

299 by charts deploying them

A fixed version is listed for 7 of the 7 affected packages.

Container imageDigestPackageFixed inUsed by
bitnami/jmx-exporter9cc4a173c69e
jre@17.0.19-11-2
1.8.0
1
bitnamilegacy/cassandra:4.1.7-debian-12-r32b7a217999a1
java@11.0.25-11-1
1.8.0
1
bitnamilegacy/elasticsearch:8.12.215d4647fd491
java@17.0.10-13-2
Java@17.0.10-13-2
1.8.0
1.8.0
1
bitnamilegacy/elasticsearch:8.12.1-debian-11-r29cfd2df1294d
java@17.0.10-13-1
Java@17.0.10-13-1
1.8.0
1.8.0
1
bitnamilegacy/elasticsearch:9.0.1-debian-12-r0e6f6ddcce2f1
java@21.0.7-9-0
1.8.0
1
bitnamilegacy/kafka:3.5.0-debian-11-r08657bb93a581
java@17.0.7-7-2
1.8.0
1
bitnamilegacy/kafka:3.4.0-debian-11-r6ac64829e45b3
java@11.0.18-10-2
1.8.0
1
bitnamilegacy/kafka:2.8.1-debian-11-r7b6e381ffd6ae
java@11.0.15-150
1.8.0
1
bitnamilegacy/keycloak:20.0.5cb04e49e6eb1
java@17.0.6-10-4
1.8.0
1
bitnamilegacy/keycloak:24.0.4cc599cbd15ff
java@17.0.11-12-0
Java@17.0.11-12-0
1.8.0
1.8.0
1
bitnamilegacy/keycloak:26.3.3-debian-12-r0da3df0976a9f
jre@21.0.8-12-0
1.8.0
1
bitnamilegacy/matomo:5.3.2-debian-12-r13f02c000c54b1
lcms2@2.14-2
2.14-2+deb12u1
1
bitnamilegacy/opensearch:2.18.0-debian-12-r0d8440eb6b290
java@17.0.13-12-1
1.8.0
1
bitnamilegacy/zookeeper:3.7.2-debian-11-r5cbf54314c401
java@11.0.21-10-6
Java@11.0.21-10
1.8.0
1.8.0
1
bitnamilegacy/zookeeper:3.8.1-debian-11-r6dba59d740e13
java@11.0.18-10-1
1.8.0
1
bitnami/tomcat:latest113674f60814
jre@21.0.12-10-3
1.8.0
1
blakeblackshear/frigate:0.10.0-amd64ae269270ad9e
lcms2@2.9-4
2.9-4ubuntu0.1~esm1
1
bnjbvr/kresus:0.22.137e216b182c8
lcms2@2.14-2
2.14-2+deb12u1
1
browserless/chrome:1.48.0-chrome-stablec81ae5585b47
lcms2@2.9-4
2.9-4ubuntu0.1~esm1
1
carlosmz87/test_helm_backend:latest8ffa63aa995d
lcms2@2.14-2
2.14-2+deb12u1
1
castopod/castopod:1.12.101fd37280cbb2
lcms2@2.14-2
2.14-2+deb12u1
1
castopod/castopod:1.15.54e4f0440520f
lcms2@2.16-2
2.16-2+deb13u2
1
cheyang/distributed-tf:1.6.046cc34755493
lcms2@2.6-3ubuntu2
2.6-3ubuntu2.1+esm1
1
chibisafe/chibisafe-server:latest3da4fcbc1a18
lcms2@2.16-r0
2.19-r0
1
chiefonboarding/chiefonboarding:v2.4.159bc7aa60fe7
lcms2@2.16-2
2.16-2+deb13u2
1
conductoross/conductor:3.31.09fba127693e6
openjdk-21@21.0.11+10-1~deb13u2
21.0.12+8-1~deb13u1
1
copyparty/ac:1.19.200a0a8605062c
lcms2@2.16-r0
2.19-r0
1
countly/countly-server:25.05.4e3c238248f99
lcms2@2.9-4
2.9-4ubuntu0.1~esm1
1
datamate/seafile-professional:11.0.202dd66b722464
lcms2@2.12~rc1-2build2
2.12~rc1-2ubuntu0.1
1
deconzcommunity/deconz:2.29.2062de2362641
lcms2@2.14-2
2.14-2+deb12u1
1
deluan/navidrome:0.61.29fa40b3d8dec
lcms2@2.16-r0
2.19-r0
1
docuseal/docuseal:2.4.17493fd7f6728
lcms2@2.17-r0
2.19-r0
1
dokuwiki/dokuwiki:2025-05-14af08ecfdda239
lcms2@2.16-2
2.16-2+deb13u2
1
eclipseaerios/iota-messages-api:lateste7f5ba0bc64d
lcms2@2.16-2
2.16-2+deb13u2
1
felipecs8/app-db-connection-test:v129e06c9c6385
lcms2@2.14-2
2.14-2+deb12u1
1
fiware/biz-ecosystem-charging-backend:11.7.029456835bb2c
lcms2@2.9-4
2.9-4ubuntu0.1~esm1
1
fiware/biz-ecosystem-logic-proxy:11.20.3d551a13e8278
lcms2@2.14-2
2.14-2+deb12u1
1
gchq/accumulo:2.0.1c460bb587d6d
lcms2@2.14-2build1
2.14-2ubuntu0.1
1
geoscienceaustralia/dea-k8s-data:latestf4039b45572a
lcms2@2.9-1ubuntu0.1
2.9-1ubuntu0.1+esm1
1
gotenberg/gotenberg:8.30206a6c708fc6
lcms2@2.16-2
2.16-2+deb13u2
1
gridgain/community:8.9.11d32d182a0e6a
lcms2@2.16-r0
2.19-r0
1
helicone/supabase-migration-runner:v2025.03.05-14a913936c97b
lcms2@2.14-2
2.14-2+deb12u1
1
hyperledger/fabric-couchdb:0.4.10c65891b6c237
lcms2@2.6-3ubuntu2
2.6-3ubuntu2.1+esm1
1
instill/artifact-backend:b28766ac4a393e601ed
lcms2@2.16-2
2.16-2+deb13u2
1
intel/dlstreamer-pipeline-server:2022.1.1-ubuntu20aa8f5483a2ef
lcms2@2.9-4
2.9-4ubuntu0.1~esm1
1
intelowlproject/intelowl:v6.6.10b22e547ea6b
lcms2@2.14-2
2.14-2+deb12u1
1
ispras/svacer:11-2-042aa9fa9f189
lcms2@2.12~rc1-2build2
2.12~rc1-2ubuntu0.1
1
jacobalberty/unifi:v7.1.664a3616625dda
lcms2@2.9-1ubuntu0.1
2.9-1ubuntu0.1+esm1
1
jacobalberty/unifi:v7.4.162b3edc809a3ff
lcms2@2.9-1ubuntu0.1
2.9-1ubuntu0.1+esm1
1
jacobalberty/unifi:5.10.19c409924e2463
lcms2@2.6-3ubuntu2.1
2.6-3ubuntu2.1+esm1
1

syft 1.42.1 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.