StackRadar

CVE-2026-4367

Medium

Advisory

Published 21 Apr 2026In the index since 5 Sept 2026
Severity
Medium
worst across findings
CVSS
5.5
base score, highest
EPSS
0.001
3rd percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
299
of 17,781 indexed, latest versions
Container images
293
deployed by those charts
Fix available
2 of 2
affected packages

The matching OSV records carry no description.

Carried by container images the latest versions of 299 of 17,781 indexed charts deploy, on 293 images.

Affected packageAffected versionsFixed inImages
libxpmdeb1:3.5.10-1ubuntu0.1, 1:3.5.11-1ubuntu0.16.04.1, 1:3.5.12-1, 1:3.5.12-1.1+9 more1:3.5.12-1ubuntu0.22.04.3, 1:3.5.17-1+deb13u1, 1:3.5.17-1ubuntu0.24.04.1, 1:3.5.17-1ubuntu0.26.04.1209
libxpmapk3.5.17-r03.5.19-r084
OSV records
ALPINE-CVE-2026-4367DEBIAN-CVE-2026-4367UBUNTU-CVE-2026-4367
Also known as
USN-8600-1

Charts affected

299 by stars
ChartLatestAffected imagesRadar Score
opencatalogiopencatalogi1.0.62 of 8See more

opencatalogi opencatalogi 1.0.6

2 of the 8 container images this version deploys carry CVE-2026-4367.

Container imageDigestPackageFixed in
ghcr.io/conductionnl/gateway-ui:stag6a5594b7b32c
libxpm@1:3.5.12-1.1
no fix listed
ghcr.io/opencatalogi/web-app:deva1a7f507f6ae
libxpm@1:3.5.12-1.1+deb12u1
no fix listed

Open the chart page →

14,838
opentelemetry-demoopentelemetry-helmVerified publisher0.41.11 of 34See more

opentelemetry-demo opentelemetry-helm 0.41.1

1 of the 34 container images this version deploys carry CVE-2026-4367.

Container imageDigestPackageFixed in
ghcr.io/open-telemetry/demo:3.0.0-image-provider93e1585e97ac
libxpm@3.5.17-r0
3.5.19-r0

Open the chart page →

22,420
opsopsVerified publisher1.2.02 of 2See more

ops ops 1.2.0

2 of the 2 container images this version deploys carry CVE-2026-4367.

Container imageDigestPackageFixed in
shaowenchen/ops-controller-manager:latest26da43bb5b66
libxpm@1:3.5.12-1ubuntu0.22.04.2
1:3.5.12-1ubuntu0.22.04.3
shaowenchen/ops-server:latest315444f703f4
libxpm@1:3.5.12-1ubuntu0.22.04.2
1:3.5.12-1ubuntu0.22.04.3

Open the chart page →

8,939
orbitalregorbitalregVerified publisher0.3.01 of 4See more

orbitalreg orbitalreg 0.3.0

1 of the 4 container images this version deploys carry CVE-2026-4367.

Container imageDigestPackageFixed in
orbitalreg/orbitalreg-frontend:0.1.04fd449582a3c
libxpm@3.5.17-r0
3.5.19-r0

Open the chart page →

2,278
phpipamphpipam-helmVerified publisher1.0.122 of 3See more

phpipam phpipam-helm 1.0.12

2 of the 3 container images this version deploys carry CVE-2026-4367.

Container imageDigestPackageFixed in
phpipam/phpipam-cron:v1.7.354468713454e
libxpm@3.5.17-r0
3.5.19-r0
phpipam/phpipam-www:v1.7.3ace0efd24830
libxpm@3.5.17-r0
3.5.19-r0

Open the chart page →

3,778
phpqonstruktVerified publisher0.2.01 of 1See more

php qonstrukt 0.2.0

1 of the 1 container images this version deploys carry CVE-2026-4367.

Container imageDigestPackageFixed in
qonstrukt/php:8.4-v8-apache089af7925aa1
libxpm@1:3.5.17-1build2
1:3.5.17-1ubuntu0.24.04.1

Open the chart page →

23,964
napcatredish101Verified publisher0.1.31 of 1See more

napcat redish101 0.1.3

1 of the 1 container images this version deploys carry CVE-2026-4367.

Container imageDigestPackageFixed in
mlikiowa/napcat-docker:latest1336a777f9a4
libxpm@1:3.5.12-1ubuntu0.22.04.2
1:3.5.12-1ubuntu0.22.04.3

Open the chart page →

7,405
reservation-appreservation-app1.0.91 of 4See more

reservation-app reservation-app 1.0.9

1 of the 4 container images this version deploys carry CVE-2026-4367.

Container imageDigestPackageFixed in
zbalogh/reservation-angular-ui:1.0.95eb19e460b3c
libxpm@3.5.17-r0
3.5.19-r0

Open the chart page →

6,639
rocketadminrocketadminOfficialVerified publisher1.0.421 of 1See more

rocketadmin rocketadmin 1.0.42

1 of the 1 container images this version deploys carry CVE-2026-4367.

Container imageDigestPackageFixed in
rocketadmin/rocketadmin:1.17.710955ef540b9
libxpm@1:3.5.12-1.1+deb12u1
no fix listed

Open the chart page →

5,482
baikalrubxkubeVerified publisher1.3.11 of 1See more

baikal rubxkube 1.3.1

1 of the 1 container images this version deploys carry CVE-2026-4367.

Container imageDigestPackageFixed in
ckulka/baikal:0.10.1-nginx434bdd162247
libxpm@1:3.5.12-1.1+deb12u1
no fix listed

Open the chart page →

5,315
uptime-kumasb-helm-charts0.4.01 of 1See more

uptime-kuma sb-helm-charts 0.4.0

1 of the 1 container images this version deploys carry CVE-2026-4367.

Container imageDigestPackageFixed in
louislam/uptime-kuma:2.0.24c364ef96aad
libxpm@1:3.5.12-1.1+deb12u1
no fix listed

Open the chart page →

38,107
sentry-k8ssentry-k8sVerified publisher1.4.11 of 11See more

sentry-k8s sentry-k8s 1.4.1

1 of the 11 container images this version deploys carry CVE-2026-4367.

Container imageDigestPackageFixed in
ghcr.io/getsentry/taskbroker:26.7.264d0da74a578
libxpm@1:3.5.12-1.1+deb12u1
no fix listed

Open the chart page →

16,449
sogosogoVerified publisher0.3.51 of 2See more

sogo sogo 0.3.5

1 of the 2 container images this version deploys carry CVE-2026-4367.

Container imageDigestPackageFixed in
sonroyaalmerol/docker-sogo:5.12.43f60f3abe990
libxpm@1:3.5.17-1+b3
1:3.5.17-1+deb13u1

Open the chart page →

7,126
nginx-chartsomnath-chartVerified publisher0.1.91 of 1See more

nginx-chart somnath-chart 0.1.9

1 of the 1 container images this version deploys carry CVE-2026-4367.

Container imageDigestPackageFixed in
somnathmore/custom-nginx:v2bdfc06cad4ec
libxpm@1:3.5.12-1.1+deb12u1
no fix listed

Open the chart page →

5,676
starwhalestarwhaleVerified publisher0.6.151 of 4See more

starwhale starwhale 0.6.15

1 of the 4 container images this version deploys carry CVE-2026-4367.

Container imageDigestPackageFixed in
ghcr.io/star-whale/server:0.6.158368359c8dd0
libxpm@1:3.5.12-1
no fix listed

Open the chart page →

13,486
app-fullsynkubeVerified publisher1.0.01 of 1See more

app-full synkube 1.0.0

1 of the 1 container images this version deploys carry CVE-2026-4367.

Container imageDigestPackageFixed in
library/nginx:latest6e23479198b9
libxpm@1:3.5.17-1+b3
1:3.5.17-1+deb13u1

Open the chart page →

3,240
wavefront-adapter-for-istiowavefront0.1.41 of 2See more

wavefront-adapter-for-istio wavefront 0.1.4

1 of the 2 container images this version deploys carry CVE-2026-4367.

Container imageDigestPackageFixed in
wavefronthq/proxy:9.2d1064d28f6eb
libxpm@1:3.5.12-1
no fix listed

Open the chart page →

15,970
backendzymtraceOfficialVerified publisher26.9.11 of 6See more

backend zymtrace 26.9.1

1 of the 6 container images this version deploys carry CVE-2026-4367.

Container imageDigestPackageFixed in
ghcr.io/zystem-io/zymtrace-pub-ui:26.9.1e951adf792cd
libxpm@3.5.17-r0
3.5.19-r0

Open the chart page →

10,323
linkstackadnoctemVerified publisher0.4.01 of 1See more

linkstack adnoctem 0.4.0

1 of the 1 container images this version deploys carry CVE-2026-4367.

Container imageDigestPackageFixed in
linkstackorg/linkstack:latest1c8b05399ee4
libxpm@3.5.17-r0
3.5.19-r0

Open the chart page →

2,092
linkwardenadnoctemVerified publisher0.5.11 of 2See more

linkwarden adnoctem 0.5.1

1 of the 2 container images this version deploys carry CVE-2026-4367.

Container imageDigestPackageFixed in
ghcr.io/linkwarden/linkwarden:v2.16.30664c28a039b
libxpm@1:3.5.12-1.1+deb12u1
no fix listed

Open the chart page →

3,820
uptime-kumaadnoctemVerified publisher0.4.11 of 1See more

uptime-kuma adnoctem 0.4.1

1 of the 1 container images this version deploys carry CVE-2026-4367.

Container imageDigestPackageFixed in
louislam/uptime-kuma:2.5.4917318f9d7be
libxpm@1:3.5.12-1.1+deb12u1
no fix listed

Open the chart page →

30,028
flaresolverralexmorbo-flaresolverrVerified publisher0.2.01 of 1See more

flaresolverr alexmorbo-flaresolverr 0.2.0

1 of the 1 container images this version deploys carry CVE-2026-4367.

Container imageDigestPackageFixed in
flaresolverr/flaresolverr:v3.5.0139dfee1c6f8
libxpm@1:3.5.12-1.1+deb12u1
no fix listed

Open the chart page →

27,274
games-on-whalesangelnu2.0.02 of 7See more

games-on-whales angelnu 2.0.0

2 of the 7 container images this version deploys carry CVE-2026-4367.

Container imageDigestPackageFixed in
ghcr.io/games-on-whales/retroarch:1.0.0103fbcec2314
libxpm@1:3.5.12-1
no fix listed
ghcr.io/games-on-whales/steam:1.0.09b6105be7ad0
libxpm@1:3.5.12-1
no fix listed

Open the chart page →

42,126
antrea-uiantreaVerified publisher0.8.01 of 2See more

antrea-ui antrea 0.8.0

1 of the 2 container images this version deploys carry CVE-2026-4367.

Container imageDigestPackageFixed in
antrea/antrea-ui-frontend:v0.8.0ee9686bcefb8
libxpm@1:3.5.17-1+b3
1:3.5.17-1+deb13u1

Open the chart page →

3,239
deploy-uiappscodeVerified publisher2026.9.111 of 1See more

deploy-ui appscode 2026.9.11

1 of the 1 container images this version deploys carry CVE-2026-4367.

Container imageDigestPackageFixed in
ghcr.io/appscode/deploy-ui:0.3.6f3e07eff3997
libxpm@3.5.17-r0
3.5.19-r0

Open the chart page →

720
inbox-uiappscodeVerified publisher2026.9.111 of 1See more

inbox-ui appscode 2026.9.11

1 of the 1 container images this version deploys carry CVE-2026-4367.

Container imageDigestPackageFixed in
ghcr.io/appscode/inbox-ui:0.0.5ae3b0e29daaa
libxpm@3.5.17-r0
3.5.19-r0

Open the chart page →

840
marketplace-uiappscodeVerified publisher2026.9.111 of 1See more

marketplace-ui appscode 2026.9.11

1 of the 1 container images this version deploys carry CVE-2026-4367.

Container imageDigestPackageFixed in
ghcr.io/appscode/marketplace-ui:0.3.1d52177072013
libxpm@3.5.17-r0
3.5.19-r0

Open the chart page →

720
platform-apiappscodeVerified publisher2026.9.111 of 3See more

platform-api appscode 2026.9.11

1 of the 3 container images this version deploys carry CVE-2026-4367.

Container imageDigestPackageFixed in
ghcr.io/appscode/gotenberg:8.25f9104080d9a7
libxpm@1:3.5.17-1+b3
1:3.5.17-1+deb13u1

Open the chart page →

37,268
appwriteappwrite-helmVerified publisher1.3.21 of 8See more

appwrite appwrite-helm 1.3.2

1 of the 8 container images this version deploys carry CVE-2026-4367.

Container imageDigestPackageFixed in
appwrite/console:7.5.7aaa11ceab999
libxpm@3.5.17-r0
3.5.19-r0

Open the chart page →

9,847
dokuwikiarea-42Verified publisher0.1.81 of 1See more

dokuwiki area-42 0.1.8

1 of the 1 container images this version deploys carry CVE-2026-4367.

Container imageDigestPackageFixed in
dokuwiki/dokuwiki:2025-05-14af08ecfdda239
libxpm@1:3.5.17-1+b3
1:3.5.17-1+deb13u1

Open the chart page →

7,489
openapiassist-iot-open-api-management0.2.21 of 6See more

openapi assist-iot-open-api-management 0.2.2

1 of the 6 container images this version deploys carry CVE-2026-4367.

Container imageDigestPackageFixed in
assistiot/open_api_backend:1.1.230812ba93555
libxpm@1:3.5.12-1ubuntu0.22.04.2
1:3.5.12-1ubuntu0.22.04.3

Open the chart page →

18,277
astrotrekastria0.0.21 of 4See more

astrotrek astria 0.0.2

1 of the 4 container images this version deploys carry CVE-2026-4367.

Container imageDigestPackageFixed in
timescale/timescaledb-ha:pg15-latesta8e3322e1cf9
libxpm@1:3.5.12-1ubuntu0.22.04.1
1:3.5.12-1ubuntu0.22.04.3

Open the chart page →

32,501
webappavzi-webapp0.1.01 of 1See more

webapp avzi-webapp 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-4367.

Container imageDigestPackageFixed in
avzini/web-app:latestf40b30210ed0
libxpm@1:3.5.12-1.1+deb12u1
no fix listed

Open the chart page →

6,297
aws9helmaws9helm0.1.04 of 4See more

aws9helm aws9helm 0.1.0

4 of the 4 container images this version deploys carry CVE-2026-4367.

Container imageDigestPackageFixed in
kuzwolka/aws9:main1ad759b961b1
libxpm@1:3.5.12-1.1+deb12u1
no fix listed
kuzwolka/aws9:news3e8880fbbb96
libxpm@1:3.5.12-1.1+deb12u1
no fix listed
kuzwolka/aws9:blog4a7707410bf1
libxpm@1:3.5.12-1.1+deb12u1
no fix listed
kuzwolka/aws9:shop84a9d9766345
libxpm@1:3.5.12-1.1+deb12u1
no fix listed

Open the chart page →

18,344
basic-auth-s3-nginxbasic-auth-s3-nginxVerified publisher1.0.01 of 1See more

basic-auth-s3-nginx basic-auth-s3-nginx 1.0.0

1 of the 1 container images this version deploys carry CVE-2026-4367.

Container imageDigestPackageFixed in
dachichang/basic-auth-s3-nginx:1.0.07ccac90a935e
libxpm@1:3.5.12-1.1+deb12u1
no fix listed

Open the chart page →

6,297
flaresolverrbrandan-schmitz-helm-chartsVerified publisher1.4.01 of 1See more

flaresolverr brandan-schmitz-helm-charts 1.4.0

1 of the 1 container images this version deploys carry CVE-2026-4367.

Container imageDigestPackageFixed in
flaresolverr/flaresolverr:v3.5.0139dfee1c6f8
libxpm@1:3.5.12-1.1+deb12u1
no fix listed

Open the chart page →

27,274
node-appbryopsida0.5.11 of 2See more

node-app bryopsida 0.5.1

1 of the 2 container images this version deploys carry CVE-2026-4367.

Container imageDigestPackageFixed in
ghcr.io/bryopsida/k8s-dev-pod:main82d0b161161d
libxpm@1:3.5.17-1build2
1:3.5.17-1ubuntu0.24.04.1

Open the chart page →

14,352
nginx-s3-gatewaycamptocamp31.0.01 of 1See more

nginx-s3-gateway camptocamp3 1.0.0

1 of the 1 container images this version deploys carry CVE-2026-4367.

Container imageDigestPackageFixed in
ghcr.io/nginxinc/nginx-s3-gateway/nginx-oss-s3-gateway:unprivileged-oss-202503313db8145349a3
libxpm@1:3.5.12-1.1+deb12u1
no fix listed

Open the chart page →

5,039
kitchenowlchart-kitchenowl0.1.121 of 2See more

kitchenowl chart-kitchenowl 0.1.12

1 of the 2 container images this version deploys carry CVE-2026-4367.

Container imageDigestPackageFixed in
tombursch/kitchenowl-web:v0.7.8517f808eee66
libxpm@3.5.17-r0
3.5.19-r0

Open the chart page →

4,803
kubevirt-managerchristianhuthVerified publisher0.7.01 of 1See more

kubevirt-manager christianhuth 0.7.0

1 of the 1 container images this version deploys carry CVE-2026-4367.

Container imageDigestPackageFixed in
kubevirtmanager/kubevirt-manager:1.5.41b98f1b5977a
libxpm@3.5.17-r0
3.5.19-r0

Open the chart page →

1,986
cidrappcidrappVerified publisher0.1.01 of 1See more

cidrapp cidrapp 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-4367.

Container imageDigestPackageFixed in
svcosti/cidrapp:latest8428d87bc5d0
libxpm@3.5.17-r0
3.5.19-r0

Open the chart page →

840
chekrckotzbauerVerified publisher0.5.31 of 2See more

chekr ckotzbauer 0.5.3

1 of the 2 container images this version deploys carry CVE-2026-4367.

Container imageDigestPackageFixed in
nginxinc/nginx-unprivileged:mainline-alpinee93571f3d083
libxpm@3.5.17-r0
3.5.19-r0

Open the chart page →

3,469
kube-acp-stackcloudentity2.28.01 of 7See more

kube-acp-stack cloudentity 2.28.0

1 of the 7 container images this version deploys carry CVE-2026-4367.

Container imageDigestPackageFixed in
timescale/timescaledb-ha:pg17.2-ts2.18.2e8d0a9cc3db5
libxpm@1:3.5.12-1ubuntu0.22.04.2
1:3.5.12-1ubuntu0.22.04.3

Open the chart page →

20,900
daskcloudnativeapp2.2.11 of 2See more

dask cloudnativeapp 2.2.1

1 of the 2 container images this version deploys carry CVE-2026-4367.

Container imageDigestPackageFixed in
daskdev/dask-notebook:1.1.0052630f5ca04
libxpm@1:3.5.12-1
no fix listed

Open the chart page →

29,901
webpagetest-agentcloudnativeapp0.2.01 of 1See more

webpagetest-agent cloudnativeapp 0.2.0

1 of the 1 container images this version deploys carry CVE-2026-4367.

Container imageDigestPackageFixed in
timothyclarke/wptagent:2018-01-2322c41e5ca7e2
libxpm@1:3.5.11-1ubuntu0.16.04.1
no fix listed

Open the chart page →

77,758
galaxy-stablecloudve2.0.01 of 5See more

galaxy-stable cloudve 2.0.0

1 of the 5 container images this version deploys carry CVE-2026-4367.

Container imageDigestPackageFixed in
galaxy/galaxy-stable:v18.018e577a626dfd
libxpm@1:3.5.10-1ubuntu0.1
no fix listed

Open the chart page →

70,895
metaflowcluster-deploy0.2.21 of 1See more

metaflow cluster-deploy 0.2.2

1 of the 1 container images this version deploys carry CVE-2026-4367.

Container imageDigestPackageFixed in
public.ecr.aws/outerbounds/metaflow_metadata_service:v2.4.13f7567ce3419d
libxpm@1:3.5.12-1.1+deb12u1
no fix listed

Open the chart page →

8,009
ms-basecodedesignplus-chartsVerified publisher0.0.321 of 1See more

ms-base codedesignplus-charts 0.0.32

1 of the 1 container images this version deploys carry CVE-2026-4367.

Container imageDigestPackageFixed in
nginxdemos/hello:0.4b28d1e16c676
libxpm@3.5.17-r0
3.5.19-r0

Open the chart page →

1,291
ms-emails-grpccodedesignplus-chartsVerified publisher0.0.241 of 1See more

ms-emails-grpc codedesignplus-charts 0.0.24

1 of the 1 container images this version deploys carry CVE-2026-4367.

Container imageDigestPackageFixed in
codedesignplus/ms-emails-grpc:lateste336012bc781
libxpm@1:3.5.12-1.1+deb12u1
no fix listed

Open the chart page →

9,367
ms-emails-restcodedesignplus-chartsVerified publisher0.0.241 of 1See more

ms-emails-rest codedesignplus-charts 0.0.24

1 of the 1 container images this version deploys carry CVE-2026-4367.

Container imageDigestPackageFixed in
codedesignplus/ms-emails-rest:latestac84661c605e
libxpm@1:3.5.12-1.1+deb12u1
no fix listed

Open the chart page →

9,367

Container images carrying it

293 by charts deploying them

A fixed version is listed for 2 of the 2 affected packages.

Container imageDigestPackageFixed inUsed by
ghcr.io/flaresolverr/flaresolverr:v3.4.0ab535d1fef5d
libxpm@1:3.5.12-1.1+deb12u1
no fix listed
1
ghcr.io/getsentry/taskbroker:26.7.264d0da74a578
libxpm@1:3.5.12-1.1+deb12u1
no fix listed
1
ghcr.io/huscker/townsquare-frontend:2.15.2dc6384d10cc8
libxpm@3.5.17-r0
3.5.19-r0
1
ghcr.io/iisas/domino-frontend:k8s8e53861be292
libxpm@1:3.5.12-1.1+deb12u1
no fix listed
1
ghcr.io/jaydee94/kubeseal-webgui/ui:4.5.34447636e8102
libxpm@3.5.17-r0
3.5.19-r0
1
ghcr.io/jfwenisch/steamcmd-manager:v0.4.5dab685e668d9
libxpm@1:3.5.17-1build2
1:3.5.17-1ubuntu0.24.04.1
1
ghcr.io/jfwenisch/webtools:v0.1.44569cae83c70
libxpm@1:3.5.17-1build2
1:3.5.17-1ubuntu0.24.04.1
1
ghcr.io/jmberesford/retrom-service:retrom-v0.7.144d763d58f11d
libxpm@1:3.5.12-1.1+deb12u1
no fix listed
1
ghcr.io/kvaps/kubefarm-ltsp:v0.13.424efef013a53
libxpm@1:3.5.12-1
no fix listed
1
ghcr.io/kvaps/opennebula:v5.12.0.4-1e28e0e7de11b
libxpm@1:3.5.12-1
no fix listed
1
ghcr.io/kvaps/opennebula-exporter:v5.12.0.401563adc95fd
libxpm@1:3.5.12-1
no fix listed
1
ghcr.io/kvaps/opennebula-exporter:v5.12.0.4-12b92df1143b9
libxpm@1:3.5.12-1
no fix listed
1
ghcr.io/kvaps/opennebula-flow:v5.12.0.4-1600221f0f43f
libxpm@1:3.5.12-1
no fix listed
1
ghcr.io/kvaps/opennebula-gate:v5.12.0.4-1a85e03d8bc1d
libxpm@1:3.5.12-1
no fix listed
1
ghcr.io/linkwarden/linkwarden:v2.16.30664c28a039b
libxpm@1:3.5.12-1.1+deb12u1
no fix listed
1
ghcr.io/linuxserver/booksonic-air:version-v2009.1.0baa4fa9549dc
libxpm@1:3.5.12-1
no fix listed
1
ghcr.io/linuxserver/bookstack:version-v24.12.1cc795b254b73
libxpm@3.5.17-r0
3.5.19-r0
1
ghcr.io/mcwarman/backstage-sample-app/app:mainfae3c1f04311
libxpm@1:3.5.17-1+b3
1:3.5.17-1+deb13u1
1
ghcr.io/opencatalogi/web-app:deva1a7f507f6ae
libxpm@1:3.5.12-1.1+deb12u1
no fix listed
1
ghcr.io/opencost/opencost-ui:1.118.0571f87e528ea
libxpm@3.5.17-r0
3.5.19-r0
1
ghcr.io/openrelik/openrelik-ui:latest7f91594d5eb3
libxpm@3.5.17-r0
3.5.19-r0
1
ghcr.io/open-telemetry/demo:1.12.0-imageprovider4e322858fe56
libxpm@1:3.5.12-1.1+deb12u1
no fix listed
1
ghcr.io/open-telemetry/demo:1.12.0-loadgenerator85c9935ff31b
libxpm@1:3.5.12-1.1+deb12u1
no fix listed
1
ghcr.io/open-telemetry/demo:3.0.0-image-provider93e1585e97ac
libxpm@3.5.17-r0
3.5.19-r0
1
ghcr.io/openunison/openunison-k8s-react:1.0.2afb3e9282952
libxpm@1:3.5.12-1ubuntu0.22.04.2
1:3.5.12-1ubuntu0.22.04.3
1
ghcr.io/pschichtel/keycloak-webhook-router:main285e226fe7f6
libxpm@3.5.17-r0
3.5.19-r0
1
ghcr.io/radar-base/radar-app-config/radar-app-config-frontend:0.6.2c5f1e2ca5781
libxpm@3.5.17-r0
3.5.19-r0
1
ghcr.io/radar-base/radar-home/radar-home:0.1.71cfe3da9d812
libxpm@3.5.17-r0
3.5.19-r0
1
ghcr.io/radar-base/radar-rest-source-auth/radar-rest-source-authorizer:4.4.153e096497f7db
libxpm@3.5.17-r0
3.5.19-r0
1
ghcr.io/radar-base/radar-upload-source-connector/radar-upload-connect-frontend:0.6.47e27863545fc
libxpm@3.5.17-r0
3.5.19-r0
1
ghcr.io/star-whale/server:0.6.158368359c8dd0
libxpm@1:3.5.12-1
no fix listed
1
ghcr.io/stirling-tools/stirling-pdf:2.14.33b3670fce70b
libxpm@1:3.5.17-1build2
1:3.5.17-1ubuntu0.24.04.1
1
ghcr.io/vojtechpastyrik/squawk:0.1.104005df5f7229
libxpm@3.5.17-r0
3.5.19-r0
1
ghcr.io/yurymkomarov/docker/kubernetes-kiosk-chromium:0.1.27bff29dcec72
libxpm@1:3.5.12-1.1+deb12u1
no fix listed
1
ghcr.io/zystem-io/zymtrace-pub-ui:26.9.1e951adf792cd
libxpm@3.5.17-r0
3.5.19-r0
1
public.ecr.aws/jtekt-corporation/image-storage-service-gui:v1.9.434823c8abe00
libxpm@1:3.5.12-1.1+deb12u1
no fix listed
1
public.ecr.aws/jtekt-corporation/shinsei-manager-front:v1.5.5f8fb4eea4071
libxpm@1:3.5.12-1.1+deb12u1
no fix listed
1
public.ecr.aws/outerbounds/metaflow_metadata_service:v2.4.13f7567ce3419d
libxpm@1:3.5.12-1.1+deb12u1
no fix listed
1
public.ecr.aws/supportpal/helpdesk-monolithic:4.0.4573779e57fae
libxpm@1:3.5.12-1
no fix listed
1
quay.io/deployhub/ms-nginx:svccat-v11.0.815-g717581d2d3400664e8
libxpm@3.5.17-r0
3.5.19-r0
1
quay.io/mittwald/kube-httpcache:stable2169032c5840
libxpm@1:3.5.12-1.1+deb12u1
no fix listed
1
registry.gitlab.com/enbuild-staging/vivsoft-platform-ui/enbuild-frontend:1.0.3166353ce9bf98
libxpm@1:3.5.17-1+b3
1:3.5.17-1+deb13u1
1
registry.gitlab.com/technostructures/posca/posca:latesta693021686ca
libxpm@3.5.17-r0
3.5.19-r0
1

syft 1.42.1 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.