CVE-2026-75466

Medium

Advisory

Published 26 Aug 2026In the index since 5 Sept 2026

Severity: Medium; worst across findings
CVSS: 6.5; base score, highest
EPSS: 0.002; 10th percentile
CISA KEV: Not listed; no confirmed exploitation
Charts affected: 207; of 17,781 indexed, latest versions
Container images: 206; deployed by those charts
Fix available: None; affected packages

The matching OSV records carry no description.

Carried by container images the latest versions of 207 of 17,781 indexed charts deploy, on 206 images.

Affected package	Affected versions	Fixed in	Images
libjpeg-turbodeb	1.3.0-0ubuntu2, 1.4.2-0ubuntu3, 1.4.2-0ubuntu3.1, 1.4.2-0ubuntu3.3+9 more	no fix listed	205
libjpeg6bdeb	1:6b2-4build1	no fix listed	1
libjpeg9deb	1:9d-1	no fix listed	1

OSV records: UBUNTU-CVE-2026-75466

Charts affected

207 by stars

Chart

Latest

Affected images

Radar Score

unmanicvhdirk

0.1.4

1 of 1 See more

unmanic vhdirk 0.1.4

1 of the 1 container images this version deploys carry CVE-2026-75466.

Container image	Digest	Package	Fixed in
josh5/unmanic :0.2.6	4d49c4816260	libjpeg-turbo@2.1.2-0ubuntu1	no fix listed

Open the chart page →

9,347

twenty-crmvictorlane

0.0.1

1 of 3 See more

twenty-crm victorlane 0.0.1

1 of the 3 container images this version deploys carry CVE-2026-75466.

Container image	Digest	Package	Fixed in
twentycrm/twenty-postgres-spilo :latest	2f78405a78be	libjpeg-turbo@2.1.2-0ubuntu1	no fix listed

Open the chart page →

13,459

calibre-webvista

0.1.3

1 of 1 See more

calibre-web vista 0.1.3

1 of the 1 container images this version deploys carry CVE-2026-75466.

Container image	Digest	Package	Fixed in
linuxserver/calibre-web :0.6.24	241009026e6f	libjpeg-turbo@2.1.5-2ubuntu2	no fix listed

Open the chart page →

7,628

webhookiewebhookie

0.1.2

1 of 1 See more

webhookie webhookie 0.1.2

1 of the 1 container images this version deploys carry CVE-2026-75466.

Container image	Digest	Package	Fixed in
hookiesolutions/webhookie :latest	0629694246ba	libjpeg-turbo@2.0.3-0ubuntu1.20.04.1	no fix listed

Open the chart page →

14,364

webhookie-allwebhookie

0.1.2

1 of 3 See more

webhookie-all webhookie 0.1.2

1 of the 3 container images this version deploys carry CVE-2026-75466.

Container image	Digest	Package	Fixed in
hookiesolutions/webhookie :latest	0629694246ba	libjpeg-turbo@2.0.3-0ubuntu1.20.04.1	no fix listed

Open the chart page →

28,605

playwright-synthetic-monitoringwork-adventure

1.0.1

1 of 1 See more

playwright-synthetic-monitoring work-adventure 1.0.1

1 of the 1 container images this version deploys carry CVE-2026-75466.

Container image	Digest	Package	Fixed in
workadventure/playwright-synthetic-monitoring :main	92b664c2a06f	libjpeg-turbo@2.1.2-0ubuntu1	no fix listed

Open the chart page →

14,100

zoo-project-druzoo-project

0.10.4

1 of 6 See more

zoo-project-dru zoo-project 0.10.4

1 of the 6 container images this version deploys carry CVE-2026-75466.

Container image	Digest	Package	Fixed in
zooproject/zoo-project :dru-19f3c4eed7c9ec9d1f0375bbe59f9d204a42bd3a	9a507cb7e2dd	libjpeg-turbo@2.1.2-0ubuntu1	no fix listed

Open the chart page →

7,849

Container images carrying it

206 by charts deploying them

A fixed version is listed for 0 of the 3 affected packages.

Container image	Digest	Package	Fixed in	Used by
ghcr.io/voxpupuli/container-puppetserver :7.17.0-v1.5.0	916746209ac5	libjpeg-turbo@2.1.2-0ubuntu1	no fix listed	1
ghcr.io/voxpupuli/puppetserver :8.7.0-main	63873f3f698e	libjpeg-turbo@2.1.2-0ubuntu1	no fix listed	1
public.ecr.aws/supportpal/helpdesk-monolithic :4.0.4	573779e57fae	libjpeg-turbo@2.0.3-0ubuntu1.20.04.1	no fix listed	1
quay.io/go-skynet/local-ai :latest	d78cd113b2bc	libjpeg-turbo@2.1.5-2ubuntu2	no fix listed	1
quay.io/opsmxpublic/spin-sample-pipeline :v1.0.1	c6a934439421	libjpeg-turbo@1.4.2-0ubuntu3.1	no fix listed	1
registry.gitlab.com/crafty-controller/crafty-4 :latest	166a06f73d8c	libjpeg-turbo@2.1.5-2ubuntu2	no fix listed	1