CVE-2026-64835

High

Advisory

Published 22 Jul 2026In the index since 6 Sept 2026

Severity: High; worst across findings
CVSS: 8.8; base score, highest
EPSS: 0.003; 26th percentile
CISA KEV: Not listed; no confirmed exploitation
Charts affected: 51; of 17,781 indexed, latest versions
Container images: 45; deployed by those charts
Fix available: 1 of 1; affected package

The matching OSV records carry no description.

Carried by container images the latest versions of 51 of 17,781 indexed charts deploy, on 45 images.

Affected package	Affected versions	Fixed in	Images
ffmpegdeb	7:4.4.2-0ubuntu0.22.04.1, 7:5.1.4-0+deb12u1, 7:5.1.6-0+deb12u1, 7:5.1.8-0+deb12u1+7 more	7:4.4.2-0ubuntu0.22.04.1+esm15, 7:6.1.1-3ubuntu5+esm13, 7:8.0.1-3ubuntu2+esm4	45

OSV records: DEBIAN-CVE-2026-64835 UBUNTU-CVE-2026-64835
Also known as: USN-8716-1, USN-8716-2

Charts affected

51 by stars

Chart

Latest

Affected images

Radar Score

playwright-synthetic-monitoringwork-adventure

1.0.1

1 of 1 See more

playwright-synthetic-monitoring work-adventure 1.0.1

1 of the 1 container images this version deploys carry CVE-2026-64835.

Container image	Digest	Package	Fixed in
workadventure/playwright-synthetic-monitoring :main	92b664c2a06f	ffmpeg@7:4.4.2-0ubuntu0.22.04.1	7:4.4.2-0ubuntu0.22.04.1+esm15

Open the chart page →

14,100

Container images carrying it

45 by charts deploying them

A fixed version is listed for 1 of the 1 affected package.

Container image	Digest	Package	Fixed in	Used by
ghcr.io/paperless-ngx/paperless-ngx :3.1.3	aa810a36942c	ffmpeg@7:7.1.5-0+deb13u1	no fix listed	7
kurento/kurento-media-server :latest	03c0d34d0828	ffmpeg@7:6.1.1-3ubuntu5	7:6.1.1-3ubuntu5+esm13	2
ghcr.io/smarter-project/hydra/isolated-vm :main	4457b79b24cd	ffmpeg@7:5.1.8-0+deb12u1	no fix listed	2
andrewmackrodt/firefox-x11 :142.0.1-r1	33f9080470c9	ffmpeg@7:4.4.2-0ubuntu0.22.04.1	7:4.4.2-0ubuntu0.22.04.1+esm15	1
archivebox/archivebox :0.7.4	1a5a37331091	ffmpeg@7:5.1.9-0+deb12u1	no fix listed	1
castopod/castopod :1.12.10	1fd37280cbb2	ffmpeg@7:5.1.6-0+deb12u1	no fix listed	1
castopod/castopod :1.15.5	4e4f0440520f	ffmpeg@7:7.1.3-0+deb13u1	no fix listed	1
chocobozzz/peertube :v8.1.5	052712130691	ffmpeg@7:7.1.4-0+deb13u1	no fix listed	1
instill/artifact-backend :b28766a	c4a393e601ed	ffmpeg@7:7.1.3-0+deb13u1	no fix listed	1
jaedb/iris :latest	048cfbf58d57	ffmpeg@7:5.1.6-0+deb12u1	no fix listed	1
langgenius/dify-api :0.6.11	fca918260dd6	ffmpeg@7:5.1.4-0+deb12u1	no fix listed	1
langgenius/dify-plugin-daemon :0.6.3-local	3c694329357b	ffmpeg@7:6.1.1-3ubuntu5	7:6.1.1-3ubuntu5+esm13	1
langgenius/dify-plugin-daemon :0.5.1-local	8269050f192e	ffmpeg@7:6.1.1-3ubuntu5	7:6.1.1-3ubuntu5+esm13	1
langgenius/dify-plugin-daemon :main-local	da995c129e2f	ffmpeg@7:6.1.1-3ubuntu5	7:6.1.1-3ubuntu5+esm13	1
livekit/ingress :v1.2.2	1ab01641b366	ffmpeg@7:4.4.2-0ubuntu0.22.04.1	7:4.4.2-0ubuntu0.22.04.1+esm15	1
machines/filestash :latest	0b8fc005e52e	ffmpeg@7:7.1.5-0+deb13u1	no fix listed	1
mlikiowa/napcat-docker :latest	1336a777f9a4	ffmpeg@7:4.4.2-0ubuntu0.22.04.1	7:4.4.2-0ubuntu0.22.04.1+esm15	1
nousresearch/hermes-agent :v2026.8.27	e0df6adebddf	ffmpeg@7:7.1.5-0+deb13u1	no fix listed	1
opea/speecht5 :1.0	249afad3d268	ffmpeg@7:5.1.6-0+deb12u1	no fix listed	1
opencsghq/agenticflow :ee-v0.6-5	2f03fead54db	ffmpeg@7:5.1.9-0+deb12u1	no fix listed	1
opencsghq/csgbot :v0.6.7-ee	af7191a9cf8a	ffmpeg@7:7.1.5-0+deb13u1	no fix listed	1
photoprism/photoprism :220629-jammy	2954334adbda	ffmpeg@7:4.4.2-0ubuntu0.22.04.1	7:4.4.2-0ubuntu0.22.04.1+esm15	1
photoprism/photoprism :260601	650c6ad5a651	ffmpeg@7:8.0.1-3ubuntu2	7:8.0.1-3ubuntu2+esm4	1
photoprism/photoprism :260728	958642220223	ffmpeg@7:8.0.1-3ubuntu2	7:8.0.1-3ubuntu2+esm4	1
photoprism/photoprism :240711-ce	fc6fd632ca74	ffmpeg@7:6.1.1-3ubuntu5	7:6.1.1-3ubuntu5+esm13	1
ryuunosukeds3/nadeko-bot-docker :latest	c0398f13e8a9	ffmpeg@7:4.4.2-0ubuntu0.22.04.1	7:4.4.2-0ubuntu0.22.04.1+esm15	1
selenium/node-chrome :4.48.0-20260905	5ac71fd8dd1e	ffmpeg@7:6.1.1-3ubuntu5	7:6.1.1-3ubuntu5+esm13	1
selenium/node-firefox :4.48.0-20260905	74a5c1c90f95	ffmpeg@7:6.1.1-3ubuntu5	7:6.1.1-3ubuntu5+esm13	1
workadventure/playwright-synthetic-monitoring :main	92b664c2a06f	ffmpeg@7:4.4.2-0ubuntu0.22.04.1	7:4.4.2-0ubuntu0.22.04.1+esm15	1
ghcr.io/cjmalloy/jasper :v1.3.282	726a947bb65b	ffmpeg@7:5.1.9-0+deb12u1	no fix listed	1
ghcr.io/karakeep-app/karakeep :0.33.2	b069e4307dec	ffmpeg@7:5.1.9-0+deb12u1	no fix listed	1
ghcr.io/mealie-recipes/mealie :v3.24.0	0b08ac3a9f0a	ffmpeg@7:7.1.5-0+deb13u1	no fix listed	1
ghcr.io/mealie-recipes/mealie :v3.25.1	6066c29eca95	ffmpeg@7:7.1.5-0+deb13u1	no fix listed	1
ghcr.io/music-assistant/server :2.7.5	3522e8a7a8f0	ffmpeg@7:5.1.8-0+deb12u1	no fix listed	1
ghcr.io/music-assistant/server :2.9.9	50666a6f8d7f	ffmpeg@7:5.1.9-0+deb12u1	no fix listed	1
ghcr.io/music-assistant/server :2.10.3	885872224fa5	ffmpeg@7:7.1.5-0+deb13u1	no fix listed	1
ghcr.io/music-assistant/server :2.8.7	eef3ee7810d0	ffmpeg@7:5.1.8-0+deb12u1	no fix listed	1
ghcr.io/paperless-ngx/paperless-ngx :2.13.1	0642357c5dbd	ffmpeg@7:5.1.6-0+deb12u1	no fix listed	1
ghcr.io/paperless-ngx/paperless-ngx :2.20.13	4b05bcd28e69	ffmpeg@7:7.1.3-0+deb13u1	no fix listed	1
ghcr.io/paperless-ngx/paperless-ngx :2.20.3	57ad9565bff3	ffmpeg@7:7.1.2-0+deb13u1	no fix listed	1
ghcr.io/paperless-ngx/paperless-ngx :2.20.5	665f2f5cc548	ffmpeg@7:7.1.2-0+deb13u1	no fix listed	1
ghcr.io/paperless-ngx/paperless-ngx :2.0.1	ab255bea133e	ffmpeg@7:5.1.4-0+deb12u1	no fix listed	1
ghcr.io/paperless-ngx/paperless-ngx :2.20.14	b89f83345532	ffmpeg@7:7.1.3-0+deb13u1	no fix listed	1
ghcr.io/stirling-tools/stirling-pdf :2.14.3	3b3670fce70b	ffmpeg@7:6.1.1-3ubuntu5	7:6.1.1-3ubuntu5+esm13	1
quay.io/go-skynet/local-ai :latest	d78cd113b2bc	ffmpeg@7:6.1.1-3ubuntu5	7:6.1.1-3ubuntu5+esm13	1