CVE-2026-84449

Low

Advisory

Published 18 Sept 2026In the index since 20 Sept 2026

The matching OSV records carry no description.

Carried by container images the latest versions of 151 of 17,813 indexed charts deploy, on 160 images.

Affected package	Affected versions	Fixed in	Images
libheifdeb	1.15.1-1, 1.15.1-1+deb12u1	no fix listed	160

151 by stars

Chart

Latest

Affected images

Radar Score

1 of the 2 container images this version deploys carry CVE-2026-84449.

Container image	Digest	Package	Fixed in
library/nginx :1.25	a484819eb602	libheif@1.15.1-1	no fix listed

7,756

160 by charts deploying them

A fixed version is listed for 0 of the 1 affected package.

Container image	Digest	Package	Fixed in	Used by
public.ecr.aws/jtekt-corporation/image-storage-service-gui :v1.9.4	34823c8abe00	libheif@1.15.1-1	no fix listed	1
public.ecr.aws/jtekt-corporation/shinsei-manager :v2.8.1	5cd62142d6ed	libheif@1.15.1-1	no fix listed	1
public.ecr.aws/jtekt-corporation/shinsei-manager-front :v1.5.5	f8fb4eea4071	libheif@1.15.1-1	no fix listed	1
public.ecr.aws/jtekt-corporation/time-series-storage-service :v1.5.1	046ef5c9ed50	libheif@1.15.1-1	no fix listed	1
public.ecr.aws/outerbounds/metaflow_metadata_service :v2.4.13	f7567ce3419d	libheif@1.15.1-1+deb12u1	no fix listed	1
public.ecr.aws/truefoundrycloud/async-service-distributor :5d48113bc678d694a0c8f8dabb2207c5aa2cfc53	f74851ce31f5	libheif@1.15.1-1	no fix listed	1
quay.io/mittwald/kube-httpcache :stable	2169032c5840	libheif@1.15.1-1+deb12u1	no fix listed	1
quay.io/yushiwho/api :e1f9d77	e0d9b93dbf2b	libheif@1.15.1-1	no fix listed	1
registry.gitlab.com/enbuild-staging/vivsoft-platform-ui/enbuild-mq-consumer :1.0.31	0e3cd8c7776d	libheif@1.15.1-1+deb12u1	no fix listed	1
registry.gitlab.com/school_guy/docker-typo3 :13.4.30-197d868e	d76185d7270d	libheif@1.15.1-1+deb12u1	no fix listed	1