StackRadar

CVE-2026-56379

Critical

Advisory

Published 23 Jun 2026In the index since 6 Sept 2026
Severity
Critical
worst across findings
CVSS
9.2
base score, highest
EPSS
0.009
57th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
101
of 17,781 indexed, latest versions
Container images
109
deployed by those charts
Fix available
1 of 1
affected package

The matching OSV records carry no description.

Carried by container images the latest versions of 101 of 17,781 indexed charts deploy, on 109 images.

Affected packageAffected versionsFixed inImages
imagemagickdeb8:6.8.9.9-7ubuntu5.9, 8:6.9.10.23+dfsg-2.1ubuntu11.4, 8:6.9.11.60+dfsg-1.3build2, 8:6.9.11.60+dfsg-1.3ubuntu0.22.04.5+15 more8:6.8.9.9-7ubuntu5.16+esm24, 8:6.9.10.23+dfsg-2.1ubuntu11.11+esm14, 8:6.9.11.60+dfsg-1.3ubuntu0.22.04.5+esm14, 8:6.9.11.60+dfsg-1.6+deb12u8+1 more109
OSV records
DEBIAN-CVE-2026-56379UBUNTU-CVE-2026-56379
Also known as
USN-8739-1

Charts affected

101 by stars
ChartLatestAffected imagesRadar Score
calibre-webvista0.1.31 of 1See more

calibre-web vista 0.1.3

1 of the 1 container images this version deploys carry CVE-2026-56379.

Container imageDigestPackageFixed in
linuxserver/calibre-web:0.6.24241009026e6f
imagemagick@8:6.9.12.98+dfsg1-5.2build2
no fix listed

Open the chart page →

7,628

Container images carrying it

109 by charts deploying them

A fixed version is listed for 1 of the 1 affected package.

Container imageDigestPackageFixed inUsed by
ghcr.io/wgbh-mla/pbcore-util:pr-66e04659a3baa
imagemagick@8:6.9.11.60+dfsg-1.6+deb12u5
8:6.9.11.60+dfsg-1.6+deb12u8
1
ghcr.io/wizarrrr/wizarr:4.2.0-beta.3d19d886d5090
imagemagick@8:6.9.11.60+dfsg-1.6
8:6.9.11.60+dfsg-1.6+deb12u8
1
ghcr.io/zoriya/kyoo_autosync:4.7.1fbba58ddb1a6
imagemagick@8:6.9.11.60+dfsg-1.6+deb12u2
8:6.9.11.60+dfsg-1.6+deb12u8
1
ghcr.io/zoriya/kyoo_scanner:4.7.17dc0ee57b628
imagemagick@8:6.9.11.60+dfsg-1.6+deb12u2
8:6.9.11.60+dfsg-1.6+deb12u8
1
public.ecr.aws/jtekt-corporation/image-storage-service:v1.16.17b1493760c716
imagemagick@8:6.9.11.60+dfsg-1.6+deb12u2
8:6.9.11.60+dfsg-1.6+deb12u8
1
public.ecr.aws/jtekt-corporation/shinsei-manager:v2.8.15cd62142d6ed
imagemagick@8:6.9.11.60+dfsg-1.6+deb12u1
8:6.9.11.60+dfsg-1.6+deb12u8
1
public.ecr.aws/jtekt-corporation/time-series-storage-service:v1.5.1046ef5c9ed50
imagemagick@8:6.9.11.60+dfsg-1.6
8:6.9.11.60+dfsg-1.6+deb12u8
1
public.ecr.aws/truefoundrycloud/async-service-distributor:5d48113bc678d694a0c8f8dabb2207c5aa2cfc53f74851ce31f5
imagemagick@8:6.9.11.60+dfsg-1.6
8:6.9.11.60+dfsg-1.6+deb12u8
1
quay.io/yushiwho/api:e1f9d77e0d9b93dbf2b
imagemagick@8:6.9.11.60+dfsg-1.6
8:6.9.11.60+dfsg-1.6+deb12u8
1

syft 1.42.1 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.