StackRadar

CVE-2026-85150

High

Advisory

Published 3 Sept 2026In the index since 6 Sept 2026
Severity
High
worst across findings
CVSS
7.5
base score, highest
EPSS
0.005
41st percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
28
of 17,781 indexed, latest versions
Container images
28
deployed by those charts
Fix available
None
affected package

The matching OSV records carry no description.

Carried by container images the latest versions of 28 of 17,781 indexed charts deploy, on 28 images.

Affected packageAffected versionsFixed inImages
gst-plugins-base1.0deb1.14.5-0ubuntu1~18.04.1, 1.16.2-4ubuntu0.1, 1.16.3-0ubuntu1.1, 1.16.3-0ubuntu1.4+11 moreno fix listed28
OSV records
DEBIAN-CVE-2026-85150UBUNTU-CVE-2026-85150

Charts affected

28 by stars
ChartLatestAffected imagesRadar Score
gotenbergmaikumoriVerified publisher1.25.01 of 1See more

gotenberg maikumori 1.25.0

1 of the 1 container images this version deploys carry CVE-2026-85150.

Container imageDigestPackageFixed in
gotenberg/gotenberg:8.36.087c16b9f3642
gst-plugins-base1.0@1.26.2-1+deb13u1
no fix listed

Open the chart page →

9,683
selenium-gridselenium-grid0.59.12 of 4See more

selenium-grid selenium-grid 0.59.1

2 of the 4 container images this version deploys carry CVE-2026-85150.

Container imageDigestPackageFixed in
selenium/node-chrome:4.48.0-202609055ac71fd8dd1e
gst-plugins-base1.0@1.24.2-1ubuntu0.4
no fix listed
selenium/node-firefox:4.48.0-2026090574a5c1c90f95
gst-plugins-base1.0@1.24.2-1ubuntu0.4
no fix listed

Open the chart page →

7,028
photoprismandrenarchyVerified publisher8.15.01 of 1See more

photoprism andrenarchy 8.15.0

1 of the 1 container images this version deploys carry CVE-2026-85150.

Container imageDigestPackageFixed in
photoprism/photoprism:260728958642220223
gst-plugins-base1.0@1.28.2-1
no fix listed

Open the chart page →

8,825
paperless-ngxadnoctemVerified publisher0.4.21 of 5See more

paperless-ngx adnoctem 0.4.2

1 of the 5 container images this version deploys carry CVE-2026-85150.

Container imageDigestPackageFixed in
gotenberg/gotenberg:8.36.087c16b9f3642
gst-plugins-base1.0@1.26.2-1+deb13u1
no fix listed

Open the chart page →

19,691
music-assistantbdclark-helm-chartsVerified publisher0.4.131 of 1See more

music-assistant bdclark-helm-charts 0.4.13

1 of the 1 container images this version deploys carry CVE-2026-85150.

Container imageDigestPackageFixed in
ghcr.io/music-assistant/server:2.10.3885872224fa5
gst-plugins-base1.0@1.26.2-1+deb13u1
no fix listed

Open the chart page →

3,657
games-on-whalesgeek-cookbookVerified publisher1.8.22 of 7See more

games-on-whales geek-cookbook 1.8.2

2 of the 7 container images this version deploys carry CVE-2026-85150.

Container imageDigestPackageFixed in
ghcr.io/games-on-whales/pulseaudio:1.0.0f34f98405c10
gst-plugins-base1.0@1.16.2-4ubuntu0.1
no fix listed
ghcr.io/games-on-whales/retroarch:1.0.0103fbcec2314
gst-plugins-base1.0@1.16.2-4ubuntu0.1
no fix listed

Open the chart page →

35,305
phpqonstruktVerified publisher0.2.01 of 1See more

php qonstrukt 0.2.0

1 of the 1 container images this version deploys carry CVE-2026-85150.

Container imageDigestPackageFixed in
qonstrukt/php:8.4-v8-apache089af7925aa1
gst-plugins-base1.0@1.24.2-1ubuntu0.4
no fix listed

Open the chart page →

23,964
smarter-demosmarterOfficialVerified publisher0.1.53 of 7See more

smarter-demo smarter 0.1.5

3 of the 7 container images this version deploys carry CVE-2026-85150.

Container imageDigestPackageFixed in
ghcr.io/smarter-project/audio-client:v3.1.23c8375dc5487
gst-plugins-base1.0@1.16.3-0ubuntu1.1
no fix listed
ghcr.io/smarter-project/gstreamer:v1.0.25ecb16015aa8
gst-plugins-base1.0@1.16.3-0ubuntu1.1
no fix listed
ghcr.io/smarter-project/image-detector:v2.5.31dcca70c6446
gst-plugins-base1.0@1.16.3-0ubuntu1.1
no fix listed

Open the chart page →

45,832
gotenbergadnoctemVerified publisher0.5.01 of 1See more

gotenberg adnoctem 0.5.0

1 of the 1 container images this version deploys carry CVE-2026-85150.

Container imageDigestPackageFixed in
gotenberg/gotenberg:8.37.0f29984bd1e22
gst-plugins-base1.0@1.26.2-1+deb13u2
no fix listed

Open the chart page →

5,582
games-on-whalesangelnu2.0.03 of 7See more

games-on-whales angelnu 2.0.0

3 of the 7 container images this version deploys carry CVE-2026-85150.

Container imageDigestPackageFixed in
andrewmackrodt/firefox-x11:142.0.1-r133f9080470c9
gst-plugins-base1.0@1.20.1-1ubuntu0.4
no fix listed
ghcr.io/games-on-whales/pulseaudio:1.0.0f34f98405c10
gst-plugins-base1.0@1.16.2-4ubuntu0.1
no fix listed
ghcr.io/games-on-whales/retroarch:1.0.0103fbcec2314
gst-plugins-base1.0@1.16.2-4ubuntu0.1
no fix listed

Open the chart page →

42,126
platform-apiappscodeVerified publisher2026.9.111 of 3See more

platform-api appscode 2026.9.11

1 of the 3 container images this version deploys carry CVE-2026-85150.

Container imageDigestPackageFixed in
ghcr.io/appscode/gotenberg:8.25f9104080d9a7
gst-plugins-base1.0@1.26.2-1
no fix listed

Open the chart page →

37,268
damap-chartdamapVerified publisher0.3.01 of 5See more

damap-chart damap 0.3.0

1 of the 5 container images this version deploys carry CVE-2026-85150.

Container imageDigestPackageFixed in
gotenberg/gotenberg:8f29984bd1e22
gst-plugins-base1.0@1.26.2-1+deb13u2
no fix listed

Open the chart page →

13,936
business-api-ecosystemfiware1.1.01 of 4See more

business-api-ecosystem fiware 1.1.0

1 of the 4 container images this version deploys carry CVE-2026-85150.

Container imageDigestPackageFixed in
fiware/biz-ecosystem-charging-backend:11.7.029456835bb2c
gst-plugins-base1.0@1.16.3-0ubuntu1.4
no fix listed

Open the chart page →

64,489
mopidygeek-cookbookVerified publisher0.1.21 of 1See more

mopidy geek-cookbook 0.1.2

1 of the 1 container images this version deploys carry CVE-2026-85150.

Container imageDigestPackageFixed in
jaedb/iris:latest048cfbf58d57
gst-plugins-base1.0@1.22.0-3+deb12u4
no fix listed

Open the chart page →

12,958
openkmgeek-cookbookVerified publisher4.2.01 of 1See more

openkm geek-cookbook 4.2.0

1 of the 1 container images this version deploys carry CVE-2026-85150.

Container imageDigestPackageFixed in
openkm/openkm-ce:6.3.113bc465a7461b
gst-plugins-base1.0@1.16.3-0ubuntu1.1
no fix listed

Open the chart page →

27,949
paperlesshpVerified publisher0.1.11 of 5See more

paperless hp 0.1.1

1 of the 5 container images this version deploys carry CVE-2026-85150.

Container imageDigestPackageFixed in
gotenberg/gotenberg:8.3467097317623a
gst-plugins-base1.0@1.26.2-1+deb13u1
no fix listed

Open the chart page →

26,612
hydrahydraVerified publisher0.9.51 of 2See more

hydra hydra 0.9.5

1 of the 2 container images this version deploys carry CVE-2026-85150.

Container imageDigestPackageFixed in
ghcr.io/smarter-project/hydra/isolated-vm:main4457b79b24cd
gst-plugins-base1.0@1.22.0-3+deb12u5
no fix listed

Open the chart page →

9,011
isolated-vmhydraVerified publisher0.9.41 of 1See more

isolated-vm hydra 0.9.4

1 of the 1 container images this version deploys carry CVE-2026-85150.

Container imageDigestPackageFixed in
ghcr.io/smarter-project/hydra/isolated-vm:main4457b79b24cd
gst-plugins-base1.0@1.22.0-3+deb12u5
no fix listed

Open the chart page →

7,733
itm-servicesintelVerified publisher2.0.01 of 8See more

itm-services intel 2.0.0

1 of the 8 container images this version deploys carry CVE-2026-85150.

Container imageDigestPackageFixed in
intel/dlstreamer-pipeline-server:2022.1.1-ubuntu20aa8f5483a2ef
gst-plugins-base1.0@1.16.2-4ubuntu0.1
no fix listed

Open the chart page →

18,066
kbot-self-hostedkbot-self-hostedVerified publisher0.1.81 of 7See more

kbot-self-hosted kbot-self-hosted 0.1.8

1 of the 7 container images this version deploys carry CVE-2026-85150.

Container imageDigestPackageFixed in
gotenberg/gotenberg:8.30206a6c708fc6
gst-plugins-base1.0@1.26.2-1+deb13u1
no fix listed

Open the chart page →

32,509
splashntppoolVerified publisher1.0.41 of 1See more

splash ntppool 1.0.4

1 of the 1 container images this version deploys carry CVE-2026-85150.

Container imageDigestPackageFixed in
scrapinghub/splash:3.4.1a5f89bc84606
gst-plugins-base1.0@1.14.5-0ubuntu1~18.04.1
no fix listed

Open the chart page →

27,633
javareact-java0.1.01 of 1See more

java react-java 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-85150.

Container imageDigestPackageFixed in
project2team4/react:latest3ff031a08887
gst-plugins-base1.0@1.16.2-4ubuntu0.1
no fix listed

Open the chart page →

15,520
stirling-pdfrubxkubeVerified publisher0.1.21 of 1See more

stirling-pdf rubxkube 0.1.2

1 of the 1 container images this version deploys carry CVE-2026-85150.

Container imageDigestPackageFixed in
ghcr.io/stirling-tools/stirling-pdf:2.14.33b3670fce70b
gst-plugins-base1.0@1.24.2-1ubuntu0.4
no fix listed

Open the chart page →

6,207
vrisingryuunosukeds30.1.01 of 1See more

vrising ryuunosukeds3 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-85150.

Container imageDigestPackageFixed in
trueosiris/vrising:latest9356f98ad561
gst-plugins-base1.0@1.20.1-1ubuntu0.6
no fix listed

Open the chart page →

7,295
photoprismschoolguys-helmcharts0.3.81 of 1See more

photoprism schoolguys-helmcharts 0.3.8

1 of the 1 container images this version deploys carry CVE-2026-85150.

Container imageDigestPackageFixed in
photoprism/photoprism:260601650c6ad5a651
gst-plugins-base1.0@1.28.2-1
no fix listed

Open the chart page →

10,348
kurento_webrtc_demostunner0.1.01 of 2See more

kurento_webrtc_demo stunner 0.1.0

1 of the 2 container images this version deploys carry CVE-2026-85150.

Container imageDigestPackageFixed in
kurento/kurento-media-server:latest03c0d34d0828
gst-plugins-base1.0@1.24.2-1ubuntu0.3
no fix listed

Open the chart page →

12,460
stunner-kurento-one2one-callstunner0.1.01 of 2See more

stunner-kurento-one2one-call stunner 0.1.0

1 of the 2 container images this version deploys carry CVE-2026-85150.

Container imageDigestPackageFixed in
kurento/kurento-media-server:latest03c0d34d0828
gst-plugins-base1.0@1.24.2-1ubuntu0.3
no fix listed

Open the chart page →

12,460
playwright-synthetic-monitoringwork-adventure1.0.11 of 1See more

playwright-synthetic-monitoring work-adventure 1.0.1

1 of the 1 container images this version deploys carry CVE-2026-85150.

Container imageDigestPackageFixed in
workadventure/playwright-synthetic-monitoring:main92b664c2a06f
gst-plugins-base1.0@1.20.1-1ubuntu0.2
no fix listed

Open the chart page →

14,100

Container images carrying it

28 by charts deploying them

A fixed version is listed for 0 of the 1 affected package.

Container imageDigestPackageFixed inUsed by
gotenberg/gotenberg:8.36.087c16b9f3642
gst-plugins-base1.0@1.26.2-1+deb13u1
no fix listed
2
gotenberg/gotenberg:8:8.37.0f29984bd1e22
gst-plugins-base1.0@1.26.2-1+deb13u2
no fix listed
2
kurento/kurento-media-server:latest03c0d34d0828
gst-plugins-base1.0@1.24.2-1ubuntu0.3
no fix listed
2
ghcr.io/games-on-whales/pulseaudio:1.0.0f34f98405c10
gst-plugins-base1.0@1.16.2-4ubuntu0.1
no fix listed
2
ghcr.io/games-on-whales/retroarch:1.0.0103fbcec2314
gst-plugins-base1.0@1.16.2-4ubuntu0.1
no fix listed
2
ghcr.io/smarter-project/hydra/isolated-vm:main4457b79b24cd
gst-plugins-base1.0@1.22.0-3+deb12u5
no fix listed
2
andrewmackrodt/firefox-x11:142.0.1-r133f9080470c9
gst-plugins-base1.0@1.20.1-1ubuntu0.4
no fix listed
1
fiware/biz-ecosystem-charging-backend:11.7.029456835bb2c
gst-plugins-base1.0@1.16.3-0ubuntu1.4
no fix listed
1
gotenberg/gotenberg:8.30206a6c708fc6
gst-plugins-base1.0@1.26.2-1+deb13u1
no fix listed
1
gotenberg/gotenberg:8.3467097317623a
gst-plugins-base1.0@1.26.2-1+deb13u1
no fix listed
1
intel/dlstreamer-pipeline-server:2022.1.1-ubuntu20aa8f5483a2ef
gst-plugins-base1.0@1.16.2-4ubuntu0.1
no fix listed
1
jaedb/iris:latest048cfbf58d57
gst-plugins-base1.0@1.22.0-3+deb12u4
no fix listed
1
openkm/openkm-ce:6.3.113bc465a7461b
gst-plugins-base1.0@1.16.3-0ubuntu1.1
no fix listed
1
photoprism/photoprism:260601650c6ad5a651
gst-plugins-base1.0@1.28.2-1
no fix listed
1
photoprism/photoprism:260728958642220223
gst-plugins-base1.0@1.28.2-1
no fix listed
1
project2team4/react:latest3ff031a08887
gst-plugins-base1.0@1.16.2-4ubuntu0.1
no fix listed
1
qonstrukt/php:8.4-v8-apache089af7925aa1
gst-plugins-base1.0@1.24.2-1ubuntu0.4
no fix listed
1
scrapinghub/splash:3.4.1a5f89bc84606
gst-plugins-base1.0@1.14.5-0ubuntu1~18.04.1
no fix listed
1
selenium/node-chrome:4.48.0-202609055ac71fd8dd1e
gst-plugins-base1.0@1.24.2-1ubuntu0.4
no fix listed
1
selenium/node-firefox:4.48.0-2026090574a5c1c90f95
gst-plugins-base1.0@1.24.2-1ubuntu0.4
no fix listed
1
trueosiris/vrising:latest9356f98ad561
gst-plugins-base1.0@1.20.1-1ubuntu0.6
no fix listed
1
workadventure/playwright-synthetic-monitoring:main92b664c2a06f
gst-plugins-base1.0@1.20.1-1ubuntu0.2
no fix listed
1
ghcr.io/appscode/gotenberg:8.25f9104080d9a7
gst-plugins-base1.0@1.26.2-1
no fix listed
1
ghcr.io/music-assistant/server:2.10.3885872224fa5
gst-plugins-base1.0@1.26.2-1+deb13u1
no fix listed
1
ghcr.io/smarter-project/audio-client:v3.1.23c8375dc5487
gst-plugins-base1.0@1.16.3-0ubuntu1.1
no fix listed
1
ghcr.io/smarter-project/gstreamer:v1.0.25ecb16015aa8
gst-plugins-base1.0@1.16.3-0ubuntu1.1
no fix listed
1
ghcr.io/smarter-project/image-detector:v2.5.31dcca70c6446
gst-plugins-base1.0@1.16.3-0ubuntu1.1
no fix listed
1
ghcr.io/stirling-tools/stirling-pdf:2.14.33b3670fce70b
gst-plugins-base1.0@1.24.2-1ubuntu0.4
no fix listed
1

syft 1.42.1 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.