StackRadar

CVE-2026-84384

High

Advisory

Published 18 Sept 2026In the index since 20 Sept 2026
Severity
High
worst across findings
CVSS
7.5
base score, highest
EPSS
0.005
43rd percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
346
of 17,813 indexed, latest versions
Container images
235
deployed by those charts
Fix available
None
affected package

The matching OSV records carry no description.

Carried by container images the latest versions of 346 of 17,813 indexed charts deploy, on 235 images.

Affected packageAffected versionsFixed inImages
libheifdeb1.15.1-1, 1.15.1-1+deb12u1, 1.19.8-1, 1.19.8-1+deb13u1no fix listed235
OSV records
DEBIAN-CVE-2026-84384
Trending
Rank 17 in indexed charts, since 20 Sept 2026. See the ranking →

Charts affected

346 by stars
ChartLatestAffected imagesRadar Score
metaflowcluster-deploy0.2.21 of 1See more

metaflow cluster-deploy 0.2.2

1 of the 1 container images this version deploys carry CVE-2026-84384.

Container imageDigestPackageFixed in
public.ecr.aws/outerbounds/metaflow_metadata_service:v2.4.13f7567ce3419d
libheif@1.15.1-1+deb12u1
no fix listed

Open the chart page →

8,201
pbcore-utilcluster-deploy0.0.11 of 1See more

pbcore-util cluster-deploy 0.0.1

1 of the 1 container images this version deploys carry CVE-2026-84384.

Container imageDigestPackageFixed in
ghcr.io/wgbh-mla/pbcore-util:pr-66e04659a3baa
libheif@1.15.1-1+deb12u1
no fix listed

Open the chart page →

9,375
web-chartcms-ktcloudlab0.1.01 of 1See more

web-chart cms-ktcloudlab 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-84384.

Container imageDigestPackageFixed in
library/nginx:latest05b8cb60c354
libheif@1.19.8-1+deb13u1
no fix listed

Open the chart page →

1,956
appcnapVerified publisher1.2.01 of 1See more

app cnap 1.2.0

1 of the 1 container images this version deploys carry CVE-2026-84384.

Container imageDigestPackageFixed in
library/nginx:latest05b8cb60c354
libheif@1.19.8-1+deb13u1
no fix listed

Open the chart page →

1,956
genericcolearendt0.2.71 of 1See more

generic colearendt 0.2.7

1 of the 1 container images this version deploys carry CVE-2026-84384.

Container imageDigestPackageFixed in
library/nginx:latest05b8cb60c354
libheif@1.19.8-1+deb13u1
no fix listed

Open the chart page →

1,956
dev-code-servercosmoVerified publisher0.0.71 of 2See more

dev-code-server cosmo 0.0.7

1 of the 2 container images this version deploys carry CVE-2026-84384.

Container imageDigestPackageFixed in
ghcr.io/cosmo-workspace/dev-code-server:v0.0.316fda01ae58a
libheif@1.15.1-1+deb12u1
no fix listed

Open the chart page →

14,951
rtcsic-charts0.1.11 of 5See more

rt csic-charts 0.1.1

1 of the 5 container images this version deploys carry CVE-2026-84384.

Container imageDigestPackageFixed in
firefart/requesttracker:5.0.40d6249906d8c
libheif@1.15.1-1
no fix listed

Open the chart page →

15,497
cypikcypik-app0.1.02 of 2See more

cypik cypik-app 0.1.0

2 of the 2 container images this version deploys carry CVE-2026-84384.

Container imageDigestPackageFixed in
library/nginx:latest05b8cb60c354
libheif@1.19.8-1+deb13u1
no fix listed
library/nginx:1.25a484819eb602
libheif@1.15.1-1
no fix listed

Open the chart page →

7,714
view-cadvisorcypik-helm-chart0.1.01 of 1See more

view-cadvisor cypik-helm-chart 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-84384.

Container imageDigestPackageFixed in
library/nginx:latest05b8cb60c354
libheif@1.19.8-1+deb13u1
no fix listed

Open the chart page →

1,956
nginx-chartdaeho12Verified publisher0.1.01 of 1See more

nginx-chart daeho12 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-84384.

Container imageDigestPackageFixed in
library/nginx:latest05b8cb60c354
libheif@1.19.8-1+deb13u1
no fix listed

Open the chart page →

1,956
damap-chartdamapVerified publisher0.3.01 of 5See more

damap-chart damap 0.3.0

1 of the 5 container images this version deploys carry CVE-2026-84384.

Container imageDigestPackageFixed in
ghcr.io/damap-org/damap-frontend:5.0.1609f48af4efc
libheif@1.19.8-1
no fix listed

Open the chart page →

14,982
helm-chart-testdasmeta0.1.41 of 1See more

helm-chart-test dasmeta 0.1.4

1 of the 1 container images this version deploys carry CVE-2026-84384.

Container imageDigestPackageFixed in
library/nginx:stabled5792f71a949
libheif@1.19.8-1+deb13u1
no fix listed

Open the chart page →

1,956
db-connection-testdb-connection-testVerified publisher0.1.01 of 1See more

db-connection-test db-connection-test 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-84384.

Container imageDigestPackageFixed in
felipecs8/app-db-connection-test:v129e06c9c6385
libheif@1.15.1-1+deb12u1
no fix listed

Open the chart page →

10,249
linkdingdeimosfr-charts1.0.31 of 1See more

linkding deimosfr-charts 1.0.3

1 of the 1 container images this version deploys carry CVE-2026-84384.

Container imageDigestPackageFixed in
sissbruecker/linkding:1.35.00c5dddf0b37c
libheif@1.15.1-1
no fix listed

Open the chart page →

6,213
my-helm-chartdemohelm20.1.01 of 1See more

my-helm-chart demohelm2 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-84384.

Container imageDigestPackageFixed in
library/nginx:latest05b8cb60c354
libheif@1.19.8-1+deb13u1
no fix listed

Open the chart page →

1,956
devtron-enterprisedevtron48.0.01 of 28See more

devtron-enterprise devtron 48.0.0

1 of the 28 container images this version deploys carry CVE-2026-84384.

Container imageDigestPackageFixed in
quay.io/devtron/notifier:9804331c-372-39294709c7da19c5a
libheif@1.15.1-1+deb12u1
no fix listed

Open the chart page →

69,760
devtron-enterprisedevtron-labs48.0.01 of 28See more

devtron-enterprise devtron-labs 48.0.0

1 of the 28 container images this version deploys carry CVE-2026-84384.

Container imageDigestPackageFixed in
quay.io/devtron/notifier:9804331c-372-39294709c7da19c5a
libheif@1.15.1-1+deb12u1
no fix listed

Open the chart page →

69,760
adventurelogdjjudas21Verified publisher0.1.11 of 3See more

adventurelog djjudas21 0.1.1

1 of the 3 container images this version deploys carry CVE-2026-84384.

Container imageDigestPackageFixed in
ghcr.io/seanmorley15/adventurelog-backend:v0.13.00250d9cb0d74
libheif@1.19.8-1+deb13u1
no fix listed

Open the chart page →

7,692
webtreesdjjudas21Verified publisher3.0.01 of 1See more

webtrees djjudas21 3.0.0

1 of the 1 container images this version deploys carry CVE-2026-84384.

Container imageDigestPackageFixed in
ghcr.io/nathanvaughn/webtrees:2.2.6034151b61a80
libheif@1.19.8-1
no fix listed

Open the chart page →

6,137
wizarrdjjudas21Verified publisher0.1.51 of 1See more

wizarr djjudas21 0.1.5

1 of the 1 container images this version deploys carry CVE-2026-84384.

Container imageDigestPackageFixed in
ghcr.io/wizarrrr/wizarr:4.2.0-beta.3d19d886d5090
libheif@1.15.1-1
no fix listed

Open the chart page →

14,860
dominodomino-iisasVerified publisher0.3.11 of 3See more

domino domino-iisas 0.3.1

1 of the 3 container images this version deploys carry CVE-2026-84384.

Container imageDigestPackageFixed in
ghcr.io/iisas/domino-frontend:k8s8e53861be292
libheif@1.15.1-1+deb12u1
no fix listed

Open the chart page →

10,511
rundeckdwardu-helm-charts0.3.41 of 2See more

rundeck dwardu-helm-charts 0.3.4

1 of the 2 container images this version deploys carry CVE-2026-84384.

Container imageDigestPackageFixed in
library/nginx:stabled5792f71a949
libheif@1.19.8-1+deb13u1
no fix listed

Open the chart page →

19,999
iotaeclipse-aeriosVerified publisher1.0.21 of 4See more

iota eclipse-aerios 1.0.2

1 of the 4 container images this version deploys carry CVE-2026-84384.

Container imageDigestPackageFixed in
eclipseaerios/iota-messages-api:lateste7f5ba0bc64d
libheif@1.19.8-1
no fix listed

Open the chart page →

13,756
kube-ecp-stackemqx-operator2.5.11 of 16See more

kube-ecp-stack emqx-operator 2.5.1

1 of the 16 container images this version deploys carry CVE-2026-84384.

Container imageDigestPackageFixed in
emqx/ecp-ui:2.5.1e33e9816f147
libheif@1.15.1-1+deb12u1
no fix listed

Open the chart page →

24,075
nginx-charteoc-chartsVerified publisher2.0.01 of 1See more

nginx-chart eoc-charts 2.0.0

1 of the 1 container images this version deploys carry CVE-2026-84384.

Container imageDigestPackageFixed in
library/nginx:latest05b8cb60c354
libheif@1.19.8-1+deb13u1
no fix listed

Open the chart page →

1,956
wordpresseoc-chartsVerified publisher0.14.41 of 1See more

wordpress eoc-charts 0.14.4

1 of the 1 container images this version deploys carry CVE-2026-84384.

Container imageDigestPackageFixed in
library/wordpress:6.8.3-apache30bff39330d1
libheif@1.19.8-1
no fix listed

Open the chart page →

7,466
powfaucetethereum-helm-chartsVerified publisher1.2.11 of 1See more

powfaucet ethereum-helm-charts 1.2.1

1 of the 1 container images this version deploys carry CVE-2026-84384.

Container imageDigestPackageFixed in
pk910/powfaucet:v2-stable3dcae6a62896
libheif@1.15.1-1+deb12u1
no fix listed

Open the chart page →

4,538
beeport-uiethersphereVerified publisher0.76.22 of 3See more

beeport-ui ethersphere 0.76.2

2 of the 3 container images this version deploys carry CVE-2026-84384.

Container imageDigestPackageFixed in
library/nginx:latest05b8cb60c354
libheif@1.19.8-1+deb13u1
no fix listed
library/node:ltsbe23f54a88d3
libheif@1.15.1-1+deb12u1
no fix listed

Open the chart page →

7,714
multichain-uiethersphereVerified publisher0.73.12 of 3See more

multichain-ui ethersphere 0.73.1

2 of the 3 container images this version deploys carry CVE-2026-84384.

Container imageDigestPackageFixed in
library/nginx:latest05b8cb60c354
libheif@1.19.8-1+deb13u1
no fix listed
library/node:ltsbe23f54a88d3
libheif@1.15.1-1+deb12u1
no fix listed

Open the chart page →

7,714
static-siteethersphereVerified publisher0.73.12 of 2See more

static-site ethersphere 0.73.1

2 of the 2 container images this version deploys carry CVE-2026-84384.

Container imageDigestPackageFixed in
library/nginx:latest05b8cb60c354
libheif@1.19.8-1+deb13u1
no fix listed
library/node:latestf5d1cc40abc1
libheif@1.19.8-1+deb13u1
no fix listed

Open the chart page →

7,316
ferriscompanyferriscompany0.1.01 of 1See more

ferriscompany ferriscompany 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-84384.

Container imageDigestPackageFixed in
ghcr.io/libreconnect/ferriscompany:0.1.0-rc6ed86db9f0efe
libheif@1.15.1-1
no fix listed

Open the chart page →

10,962
fineractfineract-openshift0.1.11 of 4See more

fineract fineract-openshift 0.1.1

1 of the 4 container images this version deploys carry CVE-2026-84384.

Container imageDigestPackageFixed in
library/nginx:latest05b8cb60c354
libheif@1.19.8-1+deb13u1
no fix listed

Open the chart page →

7,978
business-api-ecosystemfiware1.1.01 of 4See more

business-api-ecosystem fiware 1.1.0

1 of the 4 container images this version deploys carry CVE-2026-84384.

Container imageDigestPackageFixed in
fiware/biz-ecosystem-logic-proxy:11.20.3d551a13e8278
libheif@1.15.1-1+deb12u1
no fix listed

Open the chart page →

113,143
facetflanksourceVerified publisher0.1.721 of 1See more

facet flanksource 0.1.72

1 of the 1 container images this version deploys carry CVE-2026-84384.

Container imageDigestPackageFixed in
ghcr.io/flanksource/facet:0.1.7237237038be15
libheif@1.15.1-1+deb12u1
no fix listed

Open the chart page →

21,571
scanservjsgabe565Verified publisher0.9.21 of 1See more

scanservjs gabe565 0.9.2

1 of the 1 container images this version deploys carry CVE-2026-84384.

Container imageDigestPackageFixed in
sbs20/scanservjs:release-v3.0.3dad1fd6e9a98
libheif@1.15.1-1
no fix listed

Open the chart page →

13,459
icinga2geek-cookbookVerified publisher4.2.01 of 1See more

icinga2 geek-cookbook 4.2.0

1 of the 1 container images this version deploys carry CVE-2026-84384.

Container imageDigestPackageFixed in
jordan/icinga2:latestf75025fe8ea8
libheif@1.15.1-1+deb12u1
no fix listed

Open the chart page →

9,546
mopidygeek-cookbookVerified publisher0.1.21 of 1See more

mopidy geek-cookbook 0.1.2

1 of the 1 container images this version deploys carry CVE-2026-84384.

Container imageDigestPackageFixed in
jaedb/iris:latest048cfbf58d57
libheif@1.15.1-1+deb12u1
no fix listed

Open the chart page →

13,296
goofy-chartgoofy-chart0.1.01 of 1See more

goofy-chart goofy-chart 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-84384.

Container imageDigestPackageFixed in
library/nginx:latest05b8cb60c354
libheif@1.19.8-1+deb13u1
no fix listed

Open the chart page →

1,956
opentelemetry-demogpg-dev0.33.81 of 27See more

opentelemetry-demo gpg-dev 0.33.8

1 of the 27 container images this version deploys carry CVE-2026-84384.

Container imageDigestPackageFixed in
ghcr.io/open-telemetry/demo:1.12.0-imageprovider4e322858fe56
libheif@1.15.1-1
no fix listed

Open the chart page →

50,054
video-analytics-demogpu-operator0.1.91 of 3See more

video-analytics-demo gpu-operator 0.1.9

1 of the 3 container images this version deploys carry CVE-2026-84384.

Container imageDigestPackageFixed in
library/nginx:latest05b8cb60c354
libheif@1.19.8-1+deb13u1
no fix listed

Open the chart page →

15,948
video-analytics-demo-l4tgpu-operator0.1.31 of 3See more

video-analytics-demo-l4t gpu-operator 0.1.3

1 of the 3 container images this version deploys carry CVE-2026-84384.

Container imageDigestPackageFixed in
library/nginx:latest05b8cb60c354
libheif@1.19.8-1+deb13u1
no fix listed

Open the chart page →

1,956
web-charthcpark-ktcloudlab0.1.01 of 1See more

web-chart hcpark-ktcloudlab 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-84384.

Container imageDigestPackageFixed in
library/nginx:latest05b8cb60c354
libheif@1.19.8-1+deb13u1
no fix listed

Open the chart page →

1,956
heliconehelicone0.1.421 of 14See more

helicone helicone 0.1.42

1 of the 14 container images this version deploys carry CVE-2026-84384.

Container imageDigestPackageFixed in
helicone/supabase-migration-runner:v2025.03.05-14a913936c97b
libheif@1.15.1-1
no fix listed

Open the chart page →

77,057
test-apphellnet0.1.11 of 1See more

test-app hellnet 0.1.1

1 of the 1 container images this version deploys carry CVE-2026-84384.

Container imageDigestPackageFixed in
library/nginx:latest05b8cb60c354
libheif@1.19.8-1+deb13u1
no fix listed

Open the chart page →

1,956
hello-worldhello-world-pponyVerified publisher0.3.01 of 1See more

hello-world hello-world-ppony 0.3.0

1 of the 1 container images this version deploys carry CVE-2026-84384.

Container imageDigestPackageFixed in
library/nginx:1.25.49ff236ed47fe
libheif@1.15.1-1
no fix listed

Open the chart page →

5,921
hello-world-charthelm-chart-test-hello-world0.1.01 of 1See more

hello-world-chart helm-chart-test-hello-world 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-84384.

Container imageDigestPackageFixed in
library/nginx:stabled5792f71a949
libheif@1.19.8-1+deb13u1
no fix listed

Open the chart page →

1,956
my-apphelm-demo85640.2.71 of 2See more

my-app helm-demo8564 0.2.7

1 of the 2 container images this version deploys carry CVE-2026-84384.

Container imageDigestPackageFixed in
library/nginx:latest05b8cb60c354
libheif@1.19.8-1+deb13u1
no fix listed

Open the chart page →

1,956
chart-bookhelm-deploy-book0.1.01 of 3See more

chart-book helm-deploy-book 0.1.0

1 of the 3 container images this version deploys carry CVE-2026-84384.

Container imageDigestPackageFixed in
dannielkil/book-frontend:latest937993927694
libheif@1.15.1-1
no fix listed

Open the chart page →

9,194
chiefonboardinghelmforgeVerified publisher1.1.151 of 3See more

chiefonboarding helmforge 1.1.15

1 of the 3 container images this version deploys carry CVE-2026-84384.

Container imageDigestPackageFixed in
chiefonboarding/chiefonboarding:v2.5.0d0964135ea82
libheif@1.19.8-1+deb13u1
no fix listed

Open the chart page →

7,385
dawarichhelmforgeVerified publisher1.0.11 of 4See more

dawarich helmforge 1.0.1

1 of the 4 container images this version deploys carry CVE-2026-84384.

Container imageDigestPackageFixed in
postgis/postgis:18-3.67e00e8c3539f
libheif@1.19.8-1+deb13u1
no fix listed

Open the chart page →

10,780

Container images carrying it

235 by charts deploying them

A fixed version is listed for 0 of the 1 affected package.

Container imageDigestPackageFixed inUsed by
dachichang/basic-auth-s3-nginx:1.0.07ccac90a935e
libheif@1.15.1-1
no fix listed
1
dannielkil/book-frontend:latest937993927694
libheif@1.15.1-1
no fix listed
1
deconzcommunity/deconz:2.29.2062de2362641
libheif@1.15.1-1+deb12u1
no fix listed
1
dokuwiki/dokuwiki:2025-05-14af08ecfdda239
libheif@1.19.8-1
no fix listed
1
dragonflyoss/client:v0.1.82edf3e921f4e0
libheif@1.15.1-1
no fix listed
1
eclipseaerios/iota-messages-api:lateste7f5ba0bc64d
libheif@1.19.8-1
no fix listed
1
emqx/ecp-ui:2.5.1e33e9816f147
libheif@1.15.1-1+deb12u1
no fix listed
1
felipecs8/app-db-connection-test:v129e06c9c6385
libheif@1.15.1-1+deb12u1
no fix listed
1
firefart/requesttracker:5.0.40d6249906d8c
libheif@1.15.1-1
no fix listed
1
fiware/biz-ecosystem-logic-proxy:11.20.3d551a13e8278
libheif@1.15.1-1+deb12u1
no fix listed
1
hazegoodlife/haaze:veggiesite50f02d2d5d4d
libheif@1.15.1-1+deb12u1
no fix listed
1
hazegoodlife/haaze:milksite8d4c63169e14
libheif@1.15.1-1+deb12u1
no fix listed
1
hecrom/myweatherangularclient:1.3.11bb0372939c19
libheif@1.15.1-1
no fix listed
1
helicone/supabase-migration-runner:v2025.03.05-14a913936c97b
libheif@1.15.1-1
no fix listed
1
intelowlproject/intelowl:v6.6.10b22e547ea6b
libheif@1.15.1-1
no fix listed
1
jaedb/iris:latest048cfbf58d57
libheif@1.15.1-1+deb12u1
no fix listed
1
jbtronics/part-db1:latestfd68338829ed
libheif@1.15.1-1+deb12u1
no fix listed
1
jhoncytech/bookworm-apache-wordpress:latest18c3ca1f411e
libheif@1.15.1-1
no fix listed
1
jordan/icinga2:latestf75025fe8ea8
libheif@1.15.1-1+deb12u1
no fix listed
1
knspar/phronetis-operator:0.1.60c4f0543ee58
libheif@1.15.1-1
no fix listed
1
kuzwolka/aws9:main1ad759b961b1
libheif@1.15.1-1+deb12u1
no fix listed
1
kuzwolka/aws9:news3e8880fbbb96
libheif@1.15.1-1+deb12u1
no fix listed
1
kuzwolka/aws9:blog4a7707410bf1
libheif@1.15.1-1+deb12u1
no fix listed
1
kuzwolka/aws9:shop84a9d9766345
libheif@1.15.1-1+deb12u1
no fix listed
1
laly9999/node-app:1dd0e503913e1
libheif@1.15.1-1+deb12u1
no fix listed
1
langflowai/langflow-frontend:latest54f67f1961fe
libheif@1.15.1-1+deb12u1
no fix listed
1
library/nextcloud:35.0.0:35.0.0-apache3e9f6eaa5dc8
libheif@1.19.8-1+deb13u1
no fix listed
1
library/nextcloud:31.0.6-apache588609d76b21
libheif@1.15.1-1+deb12u1
no fix listed
1
library/nextcloud:34.0.4-apachea5ace30c695a
libheif@1.19.8-1+deb13u1
no fix listed
1
library/nextcloud:34.0.4-apacheb13a87affb7e
libheif@1.19.8-1+deb13u1
no fix listed
1
library/nextcloud:31.0.10-apacheb7faa1653c39
libheif@1.19.8-1
no fix listed
1
library/nginx:1.27.409369da6b103
libheif@1.15.1-1+deb12u1
no fix listed
1
library/nginx:1.291881968aff6f
libheif@1.19.8-1
no fix listed
1
library/nginx:1.276784fb0834aa
libheif@1.15.1-1+deb12u1
no fix listed
1
library/nginx:1.25.167f9a4f10d14
libheif@1.15.1-1
no fix listed
1
library/nginx:1.25.49ff236ed47fe
libheif@1.15.1-1
no fix listed
1
library/nginx:1.31a53fc6c27208
libheif@1.19.8-1+deb13u1
no fix listed
1
library/nginx:latestcfb8a89ac237
libheif@1.19.8-1+deb13u1
no fix listed
1
library/nginx:1.27.3fb197595ebe7
libheif@1.15.1-1+deb12u1
no fix listed
1
library/node:208f693eaa7e0a
libheif@1.15.1-1+deb12u1
no fix listed
1
library/node:latestf5d1cc40abc1
libheif@1.19.8-1+deb13u1
no fix listed
1
library/python:3.1070c9cc675605
libheif@1.19.8-1+deb13u1
no fix listed
1
library/python:3.8d41127070014
libheif@1.15.1-1
no fix listed
1
library/python:3.9da5aee29682d
libheif@1.19.8-1
no fix listed
1
library/redmine:6.1.204ac44a2595b
libheif@1.19.8-1
no fix listed
1
library/wordpress:6.4.3-apache8ae66efb09a2
libheif@1.15.1-1
no fix listed
1
library/wordpress:latesta85a30d9e752
libheif@1.19.8-1+deb13u1
no fix listed
1
library/wordpress:6.9.4-fpmad4a8bae2eb4
libheif@1.19.8-1
no fix listed
1
library/wordpress:php8.1-apachef73396626d2f
libheif@1.19.8-1
no fix listed
1
logiqai/flash:v3.10.265b996bc7bdc
libheif@1.15.1-1
no fix listed
1

syft 1.42.1 · advisories as of 20 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.