StackRadar

CVE-2026-4367

Medium

Advisory

Published 21 Apr 2026In the index since 5 Sept 2026
Severity
Medium
worst across findings
CVSS
5.5
base score, highest
EPSS
0.001
3rd percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
299
of 17,781 indexed, latest versions
Container images
293
deployed by those charts
Fix available
2 of 2
affected packages

The matching OSV records carry no description.

Carried by container images the latest versions of 299 of 17,781 indexed charts deploy, on 293 images.

Affected packageAffected versionsFixed inImages
libxpmdeb1:3.5.10-1ubuntu0.1, 1:3.5.11-1ubuntu0.16.04.1, 1:3.5.12-1, 1:3.5.12-1.1+9 more1:3.5.12-1ubuntu0.22.04.3, 1:3.5.17-1+deb13u1, 1:3.5.17-1ubuntu0.24.04.1, 1:3.5.17-1ubuntu0.26.04.1209
libxpmapk3.5.17-r03.5.19-r084
OSV records
ALPINE-CVE-2026-4367DEBIAN-CVE-2026-4367UBUNTU-CVE-2026-4367
Also known as
USN-8600-1

Charts affected

299 by stars
ChartLatestAffected imagesRadar Score
datumcosmicrocks1.0.51 of 2See more

datum cosmicrocks 1.0.5

1 of the 2 container images this version deploys carry CVE-2026-4367.

Container imageDigestPackageFixed in
ghcr.io/cosmicrocks/datum:v0.4.0beta76771c3cc8c3
libxpm@1:3.5.17-1build2
1:3.5.17-1ubuntu0.24.04.1

Open the chart page →

2,944
csgshipcsghubVerified publisher0.4.61 of 10See more

csgship csghub 0.4.6

1 of the 10 container images this version deploys carry CVE-2026-4367.

Container imageDigestPackageFixed in
opencsghq/csgship-portal:v1.2.1865814dc87a1
libxpm@3.5.17-r0
3.5.19-r0

Open the chart page →

11,335
rtcsic-charts0.1.11 of 5See more

rt csic-charts 0.1.1

1 of the 5 container images this version deploys carry CVE-2026-4367.

Container imageDigestPackageFixed in
firefart/requesttracker:5.0.40d6249906d8c
libxpm@1:3.5.12-1.1+deb12u1
no fix listed

Open the chart page →

15,380
cspconsolecspconsole1.3.111 of 5See more

cspconsole cspconsole 1.3.11

1 of the 5 container images this version deploys carry CVE-2026-4367.

Container imageDigestPackageFixed in
library/nginx:1.28-alpinea8b39bd9cf0f
libxpm@3.5.17-r0
3.5.19-r0

Open the chart page →

12,274
cypikcypik-app0.1.01 of 2See more

cypik cypik-app 0.1.0

1 of the 2 container images this version deploys carry CVE-2026-4367.

Container imageDigestPackageFixed in
library/nginx:1.25a484819eb602
libxpm@1:3.5.12-1.1+deb12u1
no fix listed

Open the chart page →

7,503
dakeradakera-helmVerified publisher0.11.1071 of 3See more

dakera dakera-helm 0.11.107

1 of the 3 container images this version deploys carry CVE-2026-4367.

Container imageDigestPackageFixed in
ghcr.io/dakera-ai/dakera-dashboard:0.3.292e059589f7f7
libxpm@3.5.17-r0
3.5.19-r0

Open the chart page →

3,937
damap-chartdamapVerified publisher0.3.01 of 5See more

damap-chart damap 0.3.0

1 of the 5 container images this version deploys carry CVE-2026-4367.

Container imageDigestPackageFixed in
ghcr.io/damap-org/damap-frontend:5.0.1609f48af4efc
libxpm@1:3.5.17-1+b3
1:3.5.17-1+deb13u1

Open the chart page →

13,936
giphy-appdavidy-helm-charts-repository0.1.21 of 1See more

giphy-app davidy-helm-charts-repository 0.1.2

1 of the 1 container images this version deploys carry CVE-2026-4367.

Container imageDigestPackageFixed in
davidy/giphy-app:1.0.2-arm41b2355cc23a
libxpm@3.5.17-r0
3.5.19-r0

Open the chart page →

704
db-connection-testdb-connection-testVerified publisher0.1.01 of 1See more

db-connection-test db-connection-test 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-4367.

Container imageDigestPackageFixed in
felipecs8/app-db-connection-test:v129e06c9c6385
libxpm@1:3.5.12-1.1+deb12u1
no fix listed

Open the chart page →

10,090
linkdingdeimosfr-charts1.0.31 of 1See more

linkding deimosfr-charts 1.0.3

1 of the 1 container images this version deploys carry CVE-2026-4367.

Container imageDigestPackageFixed in
sissbruecker/linkding:1.35.00c5dddf0b37c
libxpm@1:3.5.12-1.1+deb12u1
no fix listed

Open the chart page →

6,075
deployhubdeployhubVerified publisher10.0.4151 of 11See more

deployhub deployhub 10.0.415

1 of the 11 container images this version deploys carry CVE-2026-4367.

Container imageDigestPackageFixed in
quay.io/deployhub/ms-nginx:svccat-v11.0.815-g717581d2d3400664e8
libxpm@3.5.17-r0
3.5.19-r0

Open the chart page →

11,160
apachedevops0.1.01 of 4See more

apache devops 0.1.0

1 of the 4 container images this version deploys carry CVE-2026-4367.

Container imageDigestPackageFixed in
ghcr.io/codingducksrl/laravel:8.15be52524664c
libxpm@1:3.5.12-1build2
1:3.5.12-1ubuntu0.22.04.3

Open the chart page →

30,031
laraveldevops0.10.31 of 4See more

laravel devops 0.10.3

1 of the 4 container images this version deploys carry CVE-2026-4367.

Container imageDigestPackageFixed in
ghcr.io/codingducksrl/laravel:8.15be52524664c
libxpm@1:3.5.12-1build2
1:3.5.12-1ubuntu0.22.04.3

Open the chart page →

29,033
ai-agentdevtron0.0.11 of 1See more

ai-agent devtron 0.0.1

1 of the 1 container images this version deploys carry CVE-2026-4367.

Container imageDigestPackageFixed in
quay.io/devtron/ai-agent:0.0.16545dac92173
libxpm@1:3.5.12-1.1+deb12u1
no fix listed

Open the chart page →

9,607
ai-agentdevtron-labs0.0.11 of 1See more

ai-agent devtron-labs 0.0.1

1 of the 1 container images this version deploys carry CVE-2026-4367.

Container imageDigestPackageFixed in
quay.io/devtron/ai-agent:0.0.16545dac92173
libxpm@1:3.5.12-1.1+deb12u1
no fix listed

Open the chart page →

9,607
bearhugmugsdjjudas21Verified publisher0.1.01 of 1See more

bearhugmugs djjudas21 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-4367.

Container imageDigestPackageFixed in
djjudas21/bearhugmugs:0.1.14fa898a52d97
libxpm@3.5.17-r0
3.5.19-r0

Open the chart page →

704
photoprismdjjudas21Verified publisher99.99.991 of 1See more

photoprism djjudas21 99.99.99

1 of the 1 container images this version deploys carry CVE-2026-4367.

Container imageDigestPackageFixed in
photoprism/photoprism:240711-cefc6fd632ca74
libxpm@1:3.5.17-1build2
1:3.5.17-1ubuntu0.24.04.1

Open the chart page →

16,954
dnation-kubernetes-monitoring-stackdnationcloud4.0.21 of 17See more

dnation-kubernetes-monitoring-stack dnationcloud 4.0.2

1 of the 17 container images this version deploys carry CVE-2026-4367.

Container imageDigestPackageFixed in
nginxinc/nginx-unprivileged:1.27-alpine65e3e85dbaed
libxpm@3.5.17-r0
3.5.19-r0

Open the chart page →

21,641
dominodomino-iisasVerified publisher0.3.11 of 3See more

domino domino-iisas 0.3.1

1 of the 3 container images this version deploys carry CVE-2026-4367.

Container imageDigestPackageFixed in
ghcr.io/iisas/domino-frontend:k8s8e53861be292
libxpm@1:3.5.12-1.1+deb12u1
no fix listed

Open the chart page →

10,270
codecovdoubanVerified publisher0.2.41 of 8See more

codecov douban 0.2.4

1 of the 8 container images this version deploys carry CVE-2026-4367.

Container imageDigestPackageFixed in
timescale/timescaledb-ha:pg14.6-ts2.9.1-p1cdb9ae118899
libxpm@1:3.5.12-1build2
1:3.5.12-1ubuntu0.22.04.3

Open the chart page →

24,917
uptime-kumaegebackVerified publisher2.0.121 of 1See more

uptime-kuma egeback 2.0.12

1 of the 1 container images this version deploys carry CVE-2026-4367.

Container imageDigestPackageFixed in
louislam/uptime-kuma:2.5.0a8610b3b4c38
libxpm@1:3.5.12-1.1+deb12u1
no fix listed

Open the chart page →

30,159
seafileeleksbai0.1.11 of 3See more

seafile eleksbai 0.1.1

1 of the 3 container images this version deploys carry CVE-2026-4367.

Container imageDigestPackageFixed in
seafileltd/seafile-mc:9.0.106693911bcc40
libxpm@1:3.5.12-1
no fix listed

Open the chart page →

25,122
kube-ecp-stackemqx-operator2.5.11 of 16See more

kube-ecp-stack emqx-operator 2.5.1

1 of the 16 container images this version deploys carry CVE-2026-4367.

Container imageDigestPackageFixed in
emqx/ecp-ui:2.5.1e33e9816f147
libxpm@1:3.5.12-1.1+deb12u1
no fix listed

Open the chart page →

23,685
rommernail-romm1.0.11 of 1See more

romm ernail-romm 1.0.1

1 of the 1 container images this version deploys carry CVE-2026-4367.

Container imageDigestPackageFixed in
rommapp/romm:4.4.1b909e95d1aab
libxpm@3.5.17-r0
3.5.19-r0

Open the chart page →

2,896
benchmarkoor-uiethereum-helm-chartsVerified publisher0.1.01 of 1See more

benchmarkoor-ui ethereum-helm-charts 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-4367.

Container imageDigestPackageFixed in
ghcr.io/ethpandaops/benchmarkoor-ui:latestd090bb2060d9
libxpm@3.5.17-r0
3.5.19-r0

Open the chart page →

1,338
chaos-meshethereum-helm-chartsVerified publisher0.0.31 of 4See more

chaos-mesh ethereum-helm-charts 0.0.3

1 of the 4 container images this version deploys carry CVE-2026-4367.

Container imageDigestPackageFixed in
ghcr.io/chaos-mesh/chaos-daemon:v2.8.0fb609bc264d9
libxpm@1:3.5.12-1.1+deb12u1
no fix listed

Open the chart page →

12,127
powfaucetethereum-helm-chartsVerified publisher1.2.11 of 1See more

powfaucet ethereum-helm-charts 1.2.1

1 of the 1 container images this version deploys carry CVE-2026-4367.

Container imageDigestPackageFixed in
pk910/powfaucet:v2-stable3dcae6a62896
libxpm@1:3.5.12-1.1+deb12u1
no fix listed

Open the chart page →

4,456
nethermindethersphereVerified publisher0.2.11 of 1See more

nethermind ethersphere 0.2.1

1 of the 1 container images this version deploys carry CVE-2026-4367.

Container imageDigestPackageFixed in
nethermind/nethermind:1.14.615517708c3b6
libxpm@1:3.5.12-1build2
1:3.5.12-1ubuntu0.22.04.3

Open the chart page →

4,920
supportpalevilgn0me0.1.61 of 1See more

supportpal evilgn0me 0.1.6

1 of the 1 container images this version deploys carry CVE-2026-4367.

Container imageDigestPackageFixed in
public.ecr.aws/supportpal/helpdesk-monolithic:4.0.4573779e57fae
libxpm@1:3.5.12-1
no fix listed

Open the chart page →

20,933
findery-marketfindery-market0.1.01 of 7See more

findery-market findery-market 0.1.0

1 of the 7 container images this version deploys carry CVE-2026-4367.

Container imageDigestPackageFixed in
chandanteekinavar/findery-market-frontend:1.06de5bd44a325
libxpm@3.5.17-r0
3.5.19-r0

Open the chart page →

7,691
business-api-ecosystemfiware1.1.01 of 4See more

business-api-ecosystem fiware 1.1.0

1 of the 4 container images this version deploys carry CVE-2026-4367.

Container imageDigestPackageFixed in
fiware/biz-ecosystem-charging-backend:11.7.029456835bb2c
libxpm@1:3.5.12-1ubuntu0.20.04.2
no fix listed

Open the chart page →

64,489
dump1090fnzv0.2.81 of 1See more

dump1090 fnzv 0.2.8

1 of the 1 container images this version deploys carry CVE-2026-4367.

Container imageDigestPackageFixed in
fnzv/dump1090:latestb3079b95c336
libxpm@1:3.5.12-1ubuntu0.22.04.2
1:3.5.12-1ubuntu0.22.04.3

Open the chart page →

4,077
scanservjsgabe565Verified publisher0.9.21 of 1See more

scanservjs gabe565 0.9.2

1 of the 1 container images this version deploys carry CVE-2026-4367.

Container imageDigestPackageFixed in
sbs20/scanservjs:release-v3.0.3dad1fd6e9a98
libxpm@1:3.5.12-1.1+deb12u1
no fix listed

Open the chart page →

13,241
airsonicgeek-cookbookVerified publisher6.4.21 of 1See more

airsonic geek-cookbook 6.4.2

1 of the 1 container images this version deploys carry CVE-2026-4367.

Container imageDigestPackageFixed in
airsonicadvanced/airsonic-advanced:latestf7cbafac2806
libxpm@1:3.5.12-1
no fix listed

Open the chart page →

18,230
booksonic-airgeek-cookbookVerified publisher6.4.21 of 1See more

booksonic-air geek-cookbook 6.4.2

1 of the 1 container images this version deploys carry CVE-2026-4367.

Container imageDigestPackageFixed in
ghcr.io/linuxserver/booksonic-air:version-v2009.1.0baa4fa9549dc
libxpm@1:3.5.12-1
no fix listed

Open the chart page →

19,215
icinga2geek-cookbookVerified publisher4.2.01 of 1See more

icinga2 geek-cookbook 4.2.0

1 of the 1 container images this version deploys carry CVE-2026-4367.

Container imageDigestPackageFixed in
jordan/icinga2:latestf75025fe8ea8
libxpm@1:3.5.12-1.1+deb12u1
no fix listed

Open the chart page →

9,077
mopidygeek-cookbookVerified publisher0.1.21 of 1See more

mopidy geek-cookbook 0.1.2

1 of the 1 container images this version deploys carry CVE-2026-4367.

Container imageDigestPackageFixed in
jaedb/iris:latest048cfbf58d57
libxpm@1:3.5.12-1.1+deb12u1
no fix listed

Open the chart page →

12,958
openkmgeek-cookbookVerified publisher4.2.01 of 1See more

openkm geek-cookbook 4.2.0

1 of the 1 container images this version deploys carry CVE-2026-4367.

Container imageDigestPackageFixed in
openkm/openkm-ce:6.3.113bc465a7461b
libxpm@1:3.5.12-1
no fix listed

Open the chart page →

27,949
photoprismgeek-cookbookVerified publisher7.2.01 of 1See more

photoprism geek-cookbook 7.2.0

1 of the 1 container images this version deploys carry CVE-2026-4367.

Container imageDigestPackageFixed in
photoprism/photoprism:220629-jammy2954334adbda
libxpm@1:3.5.12-1build2
1:3.5.12-1ubuntu0.22.04.3

Open the chart page →

19,503
seafilegeek-cookbookVerified publisher3.2.01 of 1See more

seafile geek-cookbook 3.2.0

1 of the 1 container images this version deploys carry CVE-2026-4367.

Container imageDigestPackageFixed in
seafileltd/seafile-mc:8.0.7ed0fcda5e6a9
libxpm@1:3.5.12-1
no fix listed

Open the chart page →

24,293
teedygeek-cookbookVerified publisher6.2.01 of 1See more

teedy geek-cookbook 6.2.0

1 of the 1 container images this version deploys carry CVE-2026-4367.

Container imageDigestPackageFixed in
sismics/docs:v1.10f4b0ef019cf1
libxpm@1:3.5.12-1
no fix listed

Open the chart page →

26,944
dispatchoor-uigeneral-helm-chartsVerified publisher0.1.01 of 1See more

dispatchoor-ui general-helm-charts 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-4367.

Container imageDigestPackageFixed in
ghcr.io/ethpandaops/dispatchoor-web:latest18e30413dac2
libxpm@3.5.17-r0
3.5.19-r0

Open the chart page →

1,338
opentelemetry-demogpg-dev0.33.82 of 27See more

opentelemetry-demo gpg-dev 0.33.8

2 of the 27 container images this version deploys carry CVE-2026-4367.

Container imageDigestPackageFixed in
ghcr.io/open-telemetry/demo:1.12.0-imageprovider4e322858fe56
libxpm@1:3.5.12-1.1+deb12u1
no fix listed
ghcr.io/open-telemetry/demo:1.12.0-loadgenerator85c9935ff31b
libxpm@1:3.5.12-1.1+deb12u1
no fix listed

Open the chart page →

49,025
web-checkhajowielandVerified publisher1.0.11 of 1See more

web-check hajowieland 1.0.1

1 of the 1 container images this version deploys carry CVE-2026-4367.

Container imageDigestPackageFixed in
ghcr.io/lissy93/web-check:latesta4e021c0f6a9
libxpm@1:3.5.12-1.1+deb12u1
no fix listed

Open the chart page →

9,047
hawk-envoy-pluginhawk0.1.01 of 4See more

hawk-envoy-plugin hawk 0.1.0

1 of the 4 container images this version deploys carry CVE-2026-4367.

Container imageDigestPackageFixed in
kong/httpbin:latesta6ac46531193
libxpm@1:3.5.12-1ubuntu0.22.04.2
1:3.5.12-1ubuntu0.22.04.3

Open the chart page →

9,096
hello-worldhello-world-pponyVerified publisher0.3.01 of 1See more

hello-world hello-world-ppony 0.3.0

1 of the 1 container images this version deploys carry CVE-2026-4367.

Container imageDigestPackageFixed in
library/nginx:1.25.49ff236ed47fe
libxpm@1:3.5.12-1.1+deb12u1
no fix listed

Open the chart page →

5,839
chart-bookhelm-deploy-book0.1.01 of 3See more

chart-book helm-deploy-book 0.1.0

1 of the 3 container images this version deploys carry CVE-2026-4367.

Container imageDigestPackageFixed in
dannielkil/book-frontend:latest937993927694
libxpm@1:3.5.12-1.1+deb12u1
no fix listed

Open the chart page →

9,122
appwritehelmforgeVerified publisher1.3.41 of 5See more

appwrite helmforge 1.3.4

1 of the 5 container images this version deploys carry CVE-2026-4367.

Container imageDigestPackageFixed in
appwrite/console:8.7.383dcdc8492ac6
libxpm@3.5.17-r0
3.5.19-r0

Open the chart page →

6,952
archiveboxhelmforgeVerified publisher1.1.121 of 1See more

archivebox helmforge 1.1.12

1 of the 1 container images this version deploys carry CVE-2026-4367.

Container imageDigestPackageFixed in
archivebox/archivebox:0.7.41a5a37331091
libxpm@1:3.5.12-1.1+deb12u1
no fix listed

Open the chart page →

7,633
castopodhelmforgeVerified publisher1.2.71 of 3See more

castopod helmforge 1.2.7

1 of the 3 container images this version deploys carry CVE-2026-4367.

Container imageDigestPackageFixed in
castopod/castopod:1.15.54e4f0440520f
libxpm@1:3.5.17-1+b3
1:3.5.17-1+deb13u1

Open the chart page →

9,342

Container images carrying it

293 by charts deploying them

A fixed version is listed for 2 of the 2 affected packages.

Container imageDigestPackageFixed inUsed by
pnnlmiscscripts/anaconda9:1714885940.021839-nginx-1cfbc9b70cbf8
libxpm@3.5.17-r0
3.5.19-r0
6
flaresolverr/flaresolverr:latest:v3.5.0139dfee1c6f8
libxpm@1:3.5.12-1.1+deb12u1
no fix listed
5
library/nginx:1.27.1287ff321f9e3
libxpm@1:3.5.12-1.1+deb12u1
no fix listed
4
library/nginx:1.25:1.25.5a484819eb602
libxpm@1:3.5.12-1.1+deb12u1
no fix listed
3
omecproject/cdn-video-repo:1.0.0:remote-v3d59ccb138ffb
libxpm@1:3.5.11-1ubuntu0.16.04.1
no fix listed
3
ghcr.io/conductionnl/gateway-ui:stag6a5594b7b32c
libxpm@1:3.5.12-1.1
no fix listed
3
quay.io/devtron/ai-agent:0.0.16545dac92173
libxpm@1:3.5.12-1.1+deb12u1
no fix listed
3
excalidraw/excalidraw:latestf7ee194addd6
libxpm@3.5.17-r0
3.5.19-r0
2
library/nginx:latest6e23479198b9
libxpm@1:3.5.17-1+b3
1:3.5.17-1+deb13u1
2
library/nginx:1.27.098f8ec75657d
libxpm@1:3.5.12-1.1+deb12u1
no fix listed
2
library/nginx:1.29.49dd288848f44
libxpm@1:3.5.17-1+b3
1:3.5.17-1+deb13u1
2
louislam/uptime-kuma:2.5.4917318f9d7be
libxpm@1:3.5.12-1.1+deb12u1
no fix listed
2
louislam/uptime-kuma:2.3.29aeb4e51d038
libxpm@1:3.5.12-1.1+deb12u1
no fix listed
2
louislam/uptime-kuma:2.5.0a8610b3b4c38
libxpm@1:3.5.12-1.1+deb12u1
no fix listed
2
moreillon/group-manager-front:v3.3.1c9f85db3baa5
libxpm@1:3.5.12-1.1+deb12u1
no fix listed
2
moreillon/user-manager-front:v5.0.3b067dbbbb6af
libxpm@1:3.5.12-1.1+deb12u1
no fix listed
2
nginxinc/nginx-unprivileged:1.27-alpine65e3e85dbaed
libxpm@3.5.17-r0
3.5.19-r0
2
opea/chatqna-conversation-ui:1.002d5674ca863
libxpm@3.5.17-r0
3.5.19-r0
2
opencloudeu/web-extensions:unzip-1.0.01691ad6612a3
libxpm@1:3.5.12-1.1+deb12u1
no fix listed
2
opencloudeu/web-extensions:draw-io-1.0.027cb9b952f0d
libxpm@1:3.5.12-1.1+deb12u1
no fix listed
2
opencloudeu/web-extensions:external-sites-1.0.05b176baa3694
libxpm@1:3.5.12-1.1+deb12u1
no fix listed
2
opencloudeu/web-extensions:importer-1.0.06e8b2df6c5a4
libxpm@1:3.5.12-1.1+deb12u1
no fix listed
2
opencloudeu/web-extensions:progress-bars-1.0.082f888a34440
libxpm@1:3.5.12-1.1+deb12u1
no fix listed
2
opencloudeu/web-extensions:json-viewer-1.0.0e0ac35a9576e
libxpm@1:3.5.12-1.1+deb12u1
no fix listed
2
ghcr.io/bryopsida/k8s-dev-pod:main82d0b161161d
libxpm@1:3.5.17-1build2
1:3.5.17-1ubuntu0.24.04.1
2
ghcr.io/codingducksrl/laravel:8.15be52524664c
libxpm@1:3.5.12-1build2
1:3.5.12-1ubuntu0.22.04.3
2
ghcr.io/flaresolverr/flaresolverr:v3.4.67962759d99d7
libxpm@1:3.5.12-1.1+deb12u1
no fix listed
2
ghcr.io/flaresolverr/flaresolverr:v3.5.2c80ae007ce2c
libxpm@1:3.5.12-1.1+deb12u1
no fix listed
2
ghcr.io/games-on-whales/retroarch:1.0.0103fbcec2314
libxpm@1:3.5.12-1
no fix listed
2
ghcr.io/games-on-whales/steam:1.0.09b6105be7ad0
libxpm@1:3.5.12-1
no fix listed
2
ghcr.io/lissy93/web-check:latesta4e021c0f6a9
libxpm@1:3.5.12-1.1+deb12u1
no fix listed
2
ghcr.io/nginxinc/nginx-s3-gateway/nginx-oss-s3-gateway:unprivileged-oss:unprivileged-oss-202503313db8145349a3
libxpm@1:3.5.12-1.1+deb12u1
no fix listed
2
registry.gitlab.com/shortlink-org/shortlink/ui:main9bdb1062d960
libxpm@3.5.17-r0
3.5.19-r0
2
5200710/hadoop:3.2.3-java8092d3088a5fb
libxpm@1:3.5.12-1ubuntu0.20.04.2
no fix listed
1
airsonicadvanced/airsonic-advanced:latestf7cbafac2806
libxpm@1:3.5.12-1
no fix listed
1
allegroai/clearml:2.0.0-613713ae38f7daf
libxpm@1:3.5.12-1.1+deb12u1
no fix listed
1
antrea/antrea-ui-frontend:v0.8.0ee9686bcefb8
libxpm@1:3.5.17-1+b3
1:3.5.17-1+deb13u1
1
anujdatar/cups:25.07.01685df04a643b
libxpm@1:3.5.12-1.1+deb12u1
no fix listed
1
apachepulsar/pulsar:2.9.0d056c89b7131
libxpm@1:3.5.12-1
no fix listed
1
apachepulsar/pulsar:2.8.2d538416d5afe
libxpm@1:3.5.12-1
no fix listed
1
appwrite/console:8.7.383dcdc8492ac6
libxpm@3.5.17-r0
3.5.19-r0
1
appwrite/console:7.5.7aaa11ceab999
libxpm@3.5.17-r0
3.5.19-r0
1
archivebox/archivebox:0.7.41a5a37331091
libxpm@1:3.5.12-1.1+deb12u1
no fix listed
1
arthurjguerra18/revwallet:v0.7.12f540af20b307
libxpm@1:3.5.12-1.1+deb12u1
no fix listed
1
assistiot/open_api_backend:1.1.230812ba93555
libxpm@1:3.5.12-1ubuntu0.22.04.2
1:3.5.12-1ubuntu0.22.04.3
1
avzini/web-app:latestf40b30210ed0
libxpm@1:3.5.12-1.1+deb12u1
no fix listed
1
awesometechnologies/synapse-admin:0.11.4a1c1f4662875
libxpm@3.5.17-r0
3.5.19-r0
1
beyzkaya/blog-frontend:v1.0.0bf412d75c510
libxpm@3.5.17-r0
3.5.19-r0
1
browserless/chrome:1.48.0-chrome-stablec81ae5585b47
libxpm@1:3.5.12-1
no fix listed
1
carlosmz87/test_helm_frontend:latest79f4b528f42a
libxpm@3.5.17-r0
3.5.19-r0
1

syft 1.42.1 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.