StackRadar

CVE-2026-84449

Low

Advisory

Published 18 Sept 2026In the index since 20 Sept 2026
Severity
Low
worst across findings
CVSS
3.7
base score, highest
EPSS
0.003
27th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
151
of 17,813 indexed, latest versions
Container images
160
deployed by those charts
Fix available
None
affected package

The matching OSV records carry no description.

Carried by container images the latest versions of 151 of 17,813 indexed charts deploy, on 160 images.

Affected packageAffected versionsFixed inImages
libheifdeb1.15.1-1, 1.15.1-1+deb12u1no fix listed160
OSV records
DEBIAN-CVE-2026-84449

Charts affected

151 by stars
ChartLatestAffected imagesRadar Score
tabbyxdVerified publisher1.0.61 of 2See more

tabby xd 1.0.6

1 of the 2 container images this version deploys carry CVE-2026-84449.

Container imageDigestPackageFixed in
library/nginx:1.25a484819eb602
libheif@1.15.1-1
no fix listed

Open the chart page →

7,756

Container images carrying it

160 by charts deploying them

A fixed version is listed for 0 of the 1 affected package.

Container imageDigestPackageFixed inUsed by
socialmediamacroscope/network_analysis:0.1.3b351c21422e6
libheif@1.15.1-1
no fix listed
1
socialmediamacroscope/preprocessing:0.1.3ca863306314b
libheif@1.15.1-1
no fix listed
1
socialmediamacroscope/topic_modeling:0.1.3fa490acac2f8
libheif@1.15.1-1
no fix listed
1
somnathmore/custom-nginx:v2bdfc06cad4ec
libheif@1.15.1-1
no fix listed
1
substratusai/verba:v0.4.0-baseURL261695be635eb
libheif@1.15.1-1
no fix listed
1
svtechnmaa/svtech_nagvis:v1.2.118394b08e6c3
libheif@1.15.1-1
no fix listed
1
sysnet4admin/colosseum-cms:loge74b43c7f492
libheif@1.15.1-1+deb12u1
no fix listed
1
sysnet4admin/colosseum-prm:log5802bfcd7fed
libheif@1.15.1-1+deb12u1
no fix listed
1
teknas09/bird-pod:latest12a1fa85c4aa
libheif@1.15.1-1
no fix listed
1
theradius/loggia:0.463ba348546ec
libheif@1.15.1-1
no fix listed
1
thongngo3301/stakefish:latesta341af5976e3
libheif@1.15.1-1
no fix listed
1
treskon/portrait-web-setup:DEV-latesta475d80e4ecf
libheif@1.15.1-1+deb12u1
no fix listed
1
unitycatalog/unitycatalog-ui:main-aadc6fc3a688197b218
libheif@1.15.1-1+deb12u1
no fix listed
1
vlebediantsev/notes-admin-front:latest007c6670ff48
libheif@1.15.1-1
no fix listed
1
vlebediantsev/notes-project-front:latest945675fd2636
libheif@1.15.1-1
no fix listed
1
vlebediantsev/registration-ms-front-app-host:latest54f69d116c50
libheif@1.15.1-1
no fix listed
1
voska/hass-mcp:latest7142a431e2c5
libheif@1.15.1-1+deb12u1
no fix listed
1
wiktorn/overpass-api:latest9bb5f4a9b54c
libheif@1.15.1-1+deb12u1
no fix listed
1
xom4ekp2p/infini-route-attestators-public-mainnet-attester:latestd0e0aa238b02
libheif@1.15.1-1
no fix listed
1
xom4ekp2p/infini-route-attestators-public-mainnet-avs-webapi:latest2745b5fd8785
libheif@1.15.1-1
no fix listed
1
gcr.io/ml-pipeline/metadata-writer:2.3.09bcfd2abc361
libheif@1.15.1-1
no fix listed
1
ghcr.io/astriaorg/astrotrek:0.1.05889bea38e56
libheif@1.15.1-1
no fix listed
1
ghcr.io/camptocamp/tetragon-policy-builder:master0e99f12bb040
libheif@1.15.1-1+deb12u1
no fix listed
1
ghcr.io/caninehq/canine:latesta058034ca006
libheif@1.15.1-1+deb12u1
no fix listed
1
ghcr.io/cjmalloy/jasper:v1.3.282726a947bb65b
libheif@1.15.1-1+deb12u1
no fix listed
1
ghcr.io/cosmo-workspace/dev-code-server:v0.0.316fda01ae58a
libheif@1.15.1-1+deb12u1
no fix listed
1
ghcr.io/drewburr-labs/mum-discord-bot:3.1.26e82914e1051
libheif@1.15.1-1
no fix listed
1
ghcr.io/flanksource/facet:0.1.7237237038be15
libheif@1.15.1-1+deb12u1
no fix listed
1
ghcr.io/getsentry/taskbroker:26.7.264d0da74a578
libheif@1.15.1-1+deb12u1
no fix listed
1
ghcr.io/graphprotocol/availability-oracle:sha-28312fd472a25038957
libheif@1.15.1-1
no fix listed
1
ghcr.io/iisas/domino-frontend:k8s8e53861be292
libheif@1.15.1-1+deb12u1
no fix listed
1
ghcr.io/jmberesford/retrom-service:retrom-v0.7.144d763d58f11d
libheif@1.15.1-1+deb12u1
no fix listed
1
ghcr.io/karakeep-app/karakeep:0.33.2b069e4307dec
libheif@1.15.1-1+deb12u1
no fix listed
1
ghcr.io/libreconnect/ferriscompany:0.1.0-rc6ed86db9f0efe
libheif@1.15.1-1
no fix listed
1
ghcr.io/maybe-finance/maybe:0.5.0c6ab95ca9130
libheif@1.15.1-1+deb12u1
no fix listed
1
ghcr.io/nefelim4ag/pingdom-operator:0.0.15f8c7afdcf439
libheif@1.15.1-1
no fix listed
1
ghcr.io/opencatalogi/web-app:deva1a7f507f6ae
libheif@1.15.1-1
no fix listed
1
ghcr.io/opencost/opencost-parquet-exporter:v0.2.1ce85ef0ce665
libheif@1.15.1-1+deb12u1
no fix listed
1
ghcr.io/open-telemetry/demo:1.12.0-imageprovider4e322858fe56
libheif@1.15.1-1
no fix listed
1
ghcr.io/paperless-ngx/paperless-ngx:2.13.10642357c5dbd
libheif@1.15.1-1
no fix listed
1
ghcr.io/paperless-ngx/paperless-ngx:2.10.1a132c2ac7c57
libheif@1.15.1-1
no fix listed
1
ghcr.io/paperless-ngx/paperless-ngx:2.0.1ab255bea133e
libheif@1.15.1-1
no fix listed
1
ghcr.io/sdwbgn/unitycatalog-helm/docker/unitycatalog-ui:0.2.1-5d668c1ed07e7ca098d
libheif@1.15.1-1+deb12u1
no fix listed
1
ghcr.io/wgbh-mla/pbcore-util:pr-66e04659a3baa
libheif@1.15.1-1+deb12u1
no fix listed
1
ghcr.io/wittdennis/calibre-web:1.1.1aa7d5d5dd6be
libheif@1.15.1-1+deb12u1
no fix listed
1
ghcr.io/wizarrrr/wizarr:4.2.0-beta.3d19d886d5090
libheif@1.15.1-1
no fix listed
1
ghcr.io/zoriya/kyoo_autosync:4.7.1fbba58ddb1a6
libheif@1.15.1-1+deb12u1
no fix listed
1
ghcr.io/zoriya/kyoo_scanner:4.7.17dc0ee57b628
libheif@1.15.1-1+deb12u1
no fix listed
1
public.ecr.aws/g4a0y2u8/unifie-store:staging-19925a2057fabc948
libheif@1.15.1-1
no fix listed
1
public.ecr.aws/jtekt-corporation/image-storage-service:v1.16.17b1493760c716
libheif@1.15.1-1
no fix listed
1

syft 1.42.1 · advisories as of 20 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.