StackRadar

CVE-2026-62377

Medium

Advisory

Published 20 Aug 2026In the index since 5 Sept 2026
Severity
Medium
worst across findings
CVSS
4.3
base score, highest
EPSS
0.003
25th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
8
of 17,781 indexed, latest versions
Container images
7
deployed by those charts
Fix available
None
affected package

The matching OSV records carry no description.

Carried by container images the latest versions of 8 of 17,781 indexed charts deploy, on 7 images.

Affected packageAffected versionsFixed inImages
libheifdeb1.21.2-3ubuntu0.3, 1.21.2-3ubuntu0.4, 1.22.2-photoprism1, 1.23.1-photoprism1no fix listed7
OSV records
UBUNTU-CVE-2026-62377

Charts affected

8 by stars
ChartLatestAffected imagesRadar Score
penpotpenpotOfficialVerified publisher1.9.01 of 4See more

penpot penpot 1.9.0

1 of the 4 container images this version deploys carry CVE-2026-62377.

Container imageDigestPackageFixed in
penpotapp/exporter:2.17.272a8061e8806
libheif@1.21.2-3ubuntu0.4
no fix listed

Open the chart page →

4,314
minecraft-proxyminecraft-server-chartsVerified publisher3.10.01 of 1See more

minecraft-proxy minecraft-server-charts 3.10.0

1 of the 1 container images this version deploys carry CVE-2026-62377.

Container imageDigestPackageFixed in
itzg/bungeecord:latest1c59f9631f3b
libheif@1.21.2-3ubuntu0.4
no fix listed

Open the chart page →

3,074
photoprismandrenarchyVerified publisher8.15.01 of 1See more

photoprism andrenarchy 8.15.0

1 of the 1 container images this version deploys carry CVE-2026-62377.

Container imageDigestPackageFixed in
photoprism/photoprism:260728958642220223
libheif@1.23.1-photoprism1
no fix listed

Open the chart page →

8,825
tt-rssangelnu7.0.01 of 2See more

tt-rss angelnu 7.0.0

1 of the 2 container images this version deploys carry CVE-2026-62377.

Container imageDigestPackageFixed in
ghcr.io/angelnu/tt-rss:2.0.10068d332ae2410f8
libheif@1.21.2-3ubuntu0.4
no fix listed

Open the chart page →

1,201
opencloudcommunity-opencloud3.0.01 of 11See more

opencloud community-opencloud 3.0.0

1 of the 11 container images this version deploys carry CVE-2026-62377.

Container imageDigestPackageFixed in
apache/tika:latest-full80072bb73dd3
libheif@1.21.2-3ubuntu0.4
no fix listed

Open the chart page →

3,773
komgahelmforgeVerified publisher1.4.151 of 1See more

komga helmforge 1.4.15

1 of the 1 container images this version deploys carry CVE-2026-62377.

Container imageDigestPackageFixed in
gotson/komga:1.26.36c2a967bbe9a
libheif@1.21.2-3ubuntu0.3
no fix listed

Open the chart page →

2,261
komgarubxkubeVerified publisher0.1.31 of 1See more

komga rubxkube 0.1.3

1 of the 1 container images this version deploys carry CVE-2026-62377.

Container imageDigestPackageFixed in
gotson/komga:1.26.36c2a967bbe9a
libheif@1.21.2-3ubuntu0.3
no fix listed

Open the chart page →

2,261
photoprismschoolguys-helmcharts0.3.81 of 1See more

photoprism schoolguys-helmcharts 0.3.8

1 of the 1 container images this version deploys carry CVE-2026-62377.

Container imageDigestPackageFixed in
photoprism/photoprism:260601650c6ad5a651
libheif@1.22.2-photoprism1
no fix listed

Open the chart page →

10,348

Container images carrying it

7 by charts deploying them

A fixed version is listed for 0 of the 1 affected package.

Container imageDigestPackageFixed inUsed by
gotson/komga:1.26.36c2a967bbe9a
libheif@1.21.2-3ubuntu0.3
no fix listed
2
apache/tika:latest-full80072bb73dd3
libheif@1.21.2-3ubuntu0.4
no fix listed
1
itzg/bungeecord:latest1c59f9631f3b
libheif@1.21.2-3ubuntu0.4
no fix listed
1
penpotapp/exporter:2.17.272a8061e8806
libheif@1.21.2-3ubuntu0.4
no fix listed
1
photoprism/photoprism:260601650c6ad5a651
libheif@1.22.2-photoprism1
no fix listed
1
photoprism/photoprism:260728958642220223
libheif@1.23.1-photoprism1
no fix listed
1
ghcr.io/angelnu/tt-rss:2.0.10068d332ae2410f8
libheif@1.21.2-3ubuntu0.4
no fix listed
1

syft 1.42.1 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.