StackRadar

CVE-2026-75466

Medium

Advisory

Published 26 Aug 2026In the index since 5 Sept 2026
Severity
Medium
worst across findings
CVSS
6.5
base score, highest
EPSS
0.002
10th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
207
of 17,781 indexed, latest versions
Container images
206
deployed by those charts
Fix available
None
affected packages

The matching OSV records carry no description.

Carried by container images the latest versions of 207 of 17,781 indexed charts deploy, on 206 images.

Affected packageAffected versionsFixed inImages
libjpeg-turbodeb1.3.0-0ubuntu2, 1.4.2-0ubuntu3, 1.4.2-0ubuntu3.1, 1.4.2-0ubuntu3.3+9 moreno fix listed205
libjpeg6bdeb1:6b2-4build1no fix listed1
libjpeg9deb1:9d-1no fix listed1
OSV records
UBUNTU-CVE-2026-75466

Charts affected

207 by stars
ChartLatestAffected imagesRadar Score
unmanicvhdirkVerified publisher0.1.41 of 1See more

unmanic vhdirk 0.1.4

1 of the 1 container images this version deploys carry CVE-2026-75466.

Container imageDigestPackageFixed in
josh5/unmanic:0.2.64d49c4816260
libjpeg-turbo@2.1.2-0ubuntu1
no fix listed

Open the chart page →

9,347
twenty-crmvictorlane0.0.11 of 3See more

twenty-crm victorlane 0.0.1

1 of the 3 container images this version deploys carry CVE-2026-75466.

Container imageDigestPackageFixed in
twentycrm/twenty-postgres-spilo:latest2f78405a78be
libjpeg-turbo@2.1.2-0ubuntu1
no fix listed

Open the chart page →

13,459
calibre-webvista0.1.31 of 1See more

calibre-web vista 0.1.3

1 of the 1 container images this version deploys carry CVE-2026-75466.

Container imageDigestPackageFixed in
linuxserver/calibre-web:0.6.24241009026e6f
libjpeg-turbo@2.1.5-2ubuntu2
no fix listed

Open the chart page →

7,628
webhookiewebhookie0.1.21 of 1See more

webhookie webhookie 0.1.2

1 of the 1 container images this version deploys carry CVE-2026-75466.

Container imageDigestPackageFixed in
hookiesolutions/webhookie:latest0629694246ba
libjpeg-turbo@2.0.3-0ubuntu1.20.04.1
no fix listed

Open the chart page →

14,364
webhookie-allwebhookie0.1.21 of 3See more

webhookie-all webhookie 0.1.2

1 of the 3 container images this version deploys carry CVE-2026-75466.

Container imageDigestPackageFixed in
hookiesolutions/webhookie:latest0629694246ba
libjpeg-turbo@2.0.3-0ubuntu1.20.04.1
no fix listed

Open the chart page →

28,605
playwright-synthetic-monitoringwork-adventure1.0.11 of 1See more

playwright-synthetic-monitoring work-adventure 1.0.1

1 of the 1 container images this version deploys carry CVE-2026-75466.

Container imageDigestPackageFixed in
workadventure/playwright-synthetic-monitoring:main92b664c2a06f
libjpeg-turbo@2.1.2-0ubuntu1
no fix listed

Open the chart page →

14,100
zoo-project-druzoo-projectOfficialVerified publisher0.10.41 of 6See more

zoo-project-dru zoo-project 0.10.4

1 of the 6 container images this version deploys carry CVE-2026-75466.

Container imageDigestPackageFixed in
zooproject/zoo-project:dru-19f3c4eed7c9ec9d1f0375bbe59f9d204a42bd3a9a507cb7e2dd
libjpeg-turbo@2.1.2-0ubuntu1
no fix listed

Open the chart page →

7,849

Container images carrying it

206 by charts deploying them

A fixed version is listed for 0 of the 3 affected packages.

Container imageDigestPackageFixed inUsed by
wavefronthq/proxy:9.2d1064d28f6eb
libjpeg-turbo@1.5.2-0ubuntu5.18.04.4
no fix listed
1
weblate/weblate:2026.9.1.0990720d1737a
libjpeg6b@1:6b2-4build1
no fix listed
1
workadventure/playwright-synthetic-monitoring:main92b664c2a06f
libjpeg-turbo@2.1.2-0ubuntu1
no fix listed
1
xeladock/mysql_dns:latest4baf531453f1
libjpeg-turbo@2.1.2-0ubuntu1
no fix listed
1
xeladock/nginx2:latestc259a67b1dff
libjpeg-turbo@2.1.2-0ubuntu1
no fix listed
1
zabbix/zabbix-web-nginx-mysql:ubuntu-6.4-latest0e5f69c4c54e
libjpeg-turbo@2.1.5-2ubuntu2
no fix listed
1
zabbix/zabbix-web-nginx-pgsql:ubuntu-5.4.601de79c31391
libjpeg-turbo@2.0.3-0ubuntu1.20.04.1
no fix listed
1
zabbix/zabbix-web-nginx-pgsql:ubuntu-7.0.237d4d58086515
libjpeg-turbo@2.1.5-2ubuntu2
no fix listed
1
zabbix/zabbix-web-nginx-pgsql:ubuntu-6.0.899e9a090b516
libjpeg-turbo@2.1.2-0ubuntu1
no fix listed
1
zabbix/zabbix-web-service:ubuntu-7.0.23915b3183e054
libjpeg-turbo@2.1.5-2ubuntu2
no fix listed
1
zabbix/zabbix-web-service:ubuntu-6.0.8ee4baa872280
libjpeg-turbo@2.1.2-0ubuntu1
no fix listed
1
zooproject/zoo-project:dru-19f3c4eed7c9ec9d1f0375bbe59f9d204a42bd3a9a507cb7e2dd
libjpeg-turbo@2.1.2-0ubuntu1
no fix listed
1
ghcr.io/alexanderwanyoike/the0/runtime:1.14.7459010a02aff
libjpeg-turbo@2.1.5-2ubuntu2
no fix listed
1
ghcr.io/angelnu/tt-rss:2.0.10068d332ae2410f8
libjpeg-turbo@2.1.5-4ubuntu4
no fix listed
1
ghcr.io/browserless/chrome:v2.56.7d600eac6283f
libjpeg-turbo@2.1.5-2ubuntu2
no fix listed
1
ghcr.io/cosmicrocks/datum:v0.4.0beta76771c3cc8c3
libjpeg-turbo@2.1.5-2ubuntu2
no fix listed
1
ghcr.io/dask/dask-notebook:2024.1.0f53bde3acd4f
libjpeg-turbo@2.1.2-0ubuntu1
no fix listed
1
ghcr.io/haveagitgat/tdarr:2.00.18.23fbe4c29d14c
libjpeg-turbo@2.0.3-0ubuntu1.20.04.1
no fix listed
1
ghcr.io/itzg/minecraft-server:latestc1a267d9ed6d
libjpeg-turbo@2.1.5-2ubuntu2
no fix listed
1
ghcr.io/jfwenisch/discord-experiencebot:latestb52ff07f9f0c
libjpeg-turbo@1.5.2-0ubuntu5.18.04.6
no fix listed
1
ghcr.io/jfwenisch/steamcmd-manager:v0.4.5dab685e668d9
libjpeg-turbo@2.1.5-2ubuntu2
no fix listed
1
ghcr.io/jfwenisch/webtools:v0.1.44569cae83c70
libjpeg-turbo@2.1.5-2ubuntu2
no fix listed
1
ghcr.io/jr0dd/puppeteer:v13.3.26047599cd78e
libjpeg-turbo@2.0.3-0ubuntu1.20.04.1
no fix listed
1
ghcr.io/k8s-at-home/bazarr:v1.0.3fdb5501cdfb9
libjpeg-turbo@2.0.3-0ubuntu1.20.04.1
no fix listed
1
ghcr.io/k8s-at-home/lidarr:v1.0.0.225554ebc1f90963
libjpeg-turbo@2.0.3-0ubuntu1.20.04.1
no fix listed
1
ghcr.io/k8s-at-home/nzbhydra2:v3.14.2ef3670f7e0a8
libjpeg-turbo@2.0.3-0ubuntu1.20.04.1
no fix listed
1
ghcr.io/k8s-at-home/sonarr:v3.0.8.15070eb230e2381a
libjpeg-turbo@2.1.2-0ubuntu1
no fix listed
1
ghcr.io/k8s-at-home/xteve:v2.2.0.200292b3614670f
libjpeg-turbo@2.0.3-0ubuntu1.20.04.1
no fix listed
1
ghcr.io/kubelauncher/cassandrab66aba320083
libjpeg-turbo@2.1.5-4ubuntu4
no fix listed
1
ghcr.io/kubelauncher/kafka43e1085cd0a8
libjpeg-turbo@2.1.5-4ubuntu4
no fix listed
1
ghcr.io/kubelauncher/keycloakafe3bd73d7cf
libjpeg-turbo@2.1.5-4ubuntu4
no fix listed
1
ghcr.io/kubelauncher/zookeeper7826e9caa461
libjpeg-turbo@2.1.5-4ubuntu4
no fix listed
1
ghcr.io/kvaps/kubefarm-ltsp:v0.13.424efef013a53
libjpeg-turbo@2.0.3-0ubuntu1.20.04.1
no fix listed
1
ghcr.io/kvaps/opennebula:v5.12.0.4-1e28e0e7de11b
libjpeg-turbo@2.0.3-0ubuntu1.20.04.1
no fix listed
1
ghcr.io/kvaps/opennebula-exporter:v5.12.0.401563adc95fd
libjpeg-turbo@2.0.3-0ubuntu1.20.04.1
no fix listed
1
ghcr.io/kvaps/opennebula-exporter:v5.12.0.4-12b92df1143b9
libjpeg-turbo@2.0.3-0ubuntu1.20.04.1
no fix listed
1
ghcr.io/kvaps/opennebula-flow:v5.12.0.4-1600221f0f43f
libjpeg-turbo@2.0.3-0ubuntu1.20.04.1
no fix listed
1
ghcr.io/kvaps/opennebula-gate:v5.12.0.4-1a85e03d8bc1d
libjpeg-turbo@2.0.3-0ubuntu1.20.04.1
no fix listed
1
ghcr.io/linuxserver/booksonic-air:version-v2009.1.0baa4fa9549dc
libjpeg-turbo@1.5.2-0ubuntu5.18.04.4
no fix listed
1
ghcr.io/linuxserver/calibre-web:0.6.267c0464228f2f
libjpeg-turbo@2.1.5-2ubuntu2
no fix listed
1
ghcr.io/maastrichtu-ids/rstudio:latest981aa4c109e1
libjpeg-turbo@2.1.5-2ubuntu2
no fix listed
1
ghcr.io/openunison/openunison-k8s:1.0.509ad450220ab9
libjpeg-turbo@2.1.5-2ubuntu2
no fix listed
1
ghcr.io/openunison/openunison-k8s-react:1.0.2afb3e9282952
libjpeg-turbo@2.1.2-0ubuntu1
no fix listed
1
ghcr.io/oznu/homebridge:2022-07-08ff2af53897e7
libjpeg-turbo@2.0.3-0ubuntu1.20.04.1
no fix listed
1
ghcr.io/smarter-project/audio-client:v3.1.23c8375dc5487
libjpeg-turbo@2.0.3-0ubuntu1.20.04.3
no fix listed
1
ghcr.io/smarter-project/gstreamer:v1.0.25ecb16015aa8
libjpeg-turbo@2.0.3-0ubuntu1.20.04.3
no fix listed
1
ghcr.io/smarter-project/image-detector:v2.5.31dcca70c6446
libjpeg-turbo@2.0.3-0ubuntu1.20.04.3
no fix listed
1
ghcr.io/star-whale/server:0.6.158368359c8dd0
libjpeg-turbo@2.0.3-0ubuntu1.20.04.3
no fix listed
1
ghcr.io/stirling-tools/stirling-pdf:2.14.33b3670fce70b
libjpeg-turbo@2.1.5-2ubuntu2
no fix listed
1
ghcr.io/voxpupuli/container-puppetdb:7.18.0-v1.5.0a56dfe91f5b1
libjpeg-turbo@2.1.2-0ubuntu1
no fix listed
1

syft 1.42.1 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.