StackRadar

CVE-2026-86143

Medium

Advisory

Published 5 Sept 2026In the index since 5 Sept 2026
Severity
Medium
worst across findings
CVSS
6.9
base score, highest
EPSS
0.001
2nd percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
1,049
of 17,790 indexed, latest versions
Container images
845
deployed by those charts
Fix available
1 of 1
affected package

The matching OSV records carry no description.

Carried by container images the latest versions of 1,049 of 17,790 indexed charts deploy, on 845 images.

Affected packageAffected versionsFixed inImages
libxml2deb2.9.1+dfsg1-3ubuntu4.3, 2.9.1+dfsg1-3ubuntu4.4, 2.9.1+dfsg1-3ubuntu4.12, 2.9.3+dfsg1-1ubuntu0.2+56 more2.12.7+dfsg+really2.9.14-2.1+deb13u3+e1845
OSV records
DEBIAN-CVE-2026-86143UBUNTU-CVE-2026-86143ECHO-93fa-ac30-f68b
Trending
Rank 31 in indexed charts, since 5 Sept 2026. See the ranking →

Charts affected

1,049 by stars
ChartLatestAffected imagesRadar Score

Container images carrying it

845 by charts deploying them

A fixed version is listed for 1 of the 1 affected package.

Container imageDigestPackageFixed inUsed by
ghcr.io/mcwarman/backstage-sample-app/app:mainfae3c1f04311
libxml2@2.12.7+dfsg+really2.9.14-2.1+deb13u2
no fix listed
1
ghcr.io/mealie-recipes/mealie:v3.24.00b08ac3a9f0a
libxml2@2.12.7+dfsg+really2.9.14-2.1+deb13u3
no fix listed
1
ghcr.io/mealie-recipes/mealie:v3.25.16066c29eca95
libxml2@2.12.7+dfsg+really2.9.14-2.1+deb13u3
no fix listed
1
ghcr.io/middleware-labs/mw-kube-agent:1.12.09c7bc0f9bb35
libxml2@2.9.14+dfsg-1.3ubuntu3
no fix listed
1
ghcr.io/monicahq/monica-next:main8be69156acbb
libxml2@2.12.7+dfsg+really2.9.14-2.1+deb13u1
no fix listed
1
ghcr.io/music-assistant/server:2.7.53522e8a7a8f0
libxml2@2.9.14+dfsg-1.3~deb12u5
no fix listed
1
ghcr.io/music-assistant/server:2.9.950666a6f8d7f
libxml2@2.9.14+dfsg-1.3~deb12u5
no fix listed
1
ghcr.io/music-assistant/server:2.10.3885872224fa5
libxml2@2.12.7+dfsg+really2.9.14-2.1+deb13u3
no fix listed
1
ghcr.io/music-assistant/server:2.8.7eef3ee7810d0
libxml2@2.9.14+dfsg-1.3~deb12u5
no fix listed
1
ghcr.io/nathanvaughn/webtrees:2.2.6034151b61a80
libxml2@2.12.7+dfsg+really2.9.14-2.1+deb13u2
no fix listed
1
ghcr.io/nefelim4ag/pingdom-operator:0.0.15f8c7afdcf439
libxml2@2.9.14+dfsg-1.3~deb12u1
no fix listed
1
ghcr.io/netbox-community/netbox:v4.7.01685e91c61bb
libxml2@2.15.2+dfsg-0.1ubuntu0.1
no fix listed
1
ghcr.io/observal/observal-api:1.13.1153b8b893232
libxml2@2.12.7+dfsg+really2.9.14-2.1+deb13u3
no fix listed
1
ghcr.io/opencatalogi/web-app:deva1a7f507f6ae
libxml2@2.9.14+dfsg-1.3~deb12u1
no fix listed
1
ghcr.io/opencost/opencost-parquet-exporter:v0.2.1ce85ef0ce665
libxml2@2.9.14+dfsg-1.3~deb12u1
no fix listed
1
ghcr.io/openrelik/openrelik-worker-analyzer-config:latest1269d3d8d2c2
libxml2@2.9.14+dfsg-1.3ubuntu3.8
no fix listed
1
ghcr.io/openrelik/openrelik-worker-bulkextractor:latest67498ee2e639
libxml2@2.9.14+dfsg-1.3ubuntu3.8
no fix listed
1
ghcr.io/openrelik/openrelik-worker-extraction:latestec9fc5864cd5
libxml2@2.9.14+dfsg-1.3ubuntu3.8
no fix listed
1
ghcr.io/openrelik/openrelik-worker-os-creds:latest7fc7ec101f08
libxml2@2.9.14+dfsg-1.3ubuntu3.8
no fix listed
1
ghcr.io/openrelik/openrelik-worker-plaso:latest75537ea8c851
libxml2@2.9.14+dfsg-1.3ubuntu3.8
no fix listed
1
ghcr.io/openrelik/openrelik-worker-timesketch:latest4cb88b603cdc
libxml2@2.9.14+dfsg-1.3ubuntu3.8
no fix listed
1
ghcr.io/open-telemetry/demo:1.12.0-imageprovider4e322858fe56
libxml2@2.9.14+dfsg-1.3~deb12u1
no fix listed
1
ghcr.io/open-telemetry/demo:1.12.0-loadgenerator85c9935ff31b
libxml2@2.9.14+dfsg-1.3~deb12u1
no fix listed
1
ghcr.io/open-telemetry/demo:1.12.0-quoteservice87eb325d306f
libxml2@2.9.14+dfsg-1.3~deb12u1
no fix listed
1
ghcr.io/openunison/openunison-k8s:1.0.51128081dae281
libxml2@2.9.14+dfsg-1.3ubuntu3.8
no fix listed
1
ghcr.io/openunison/openunison-k8s-react:1.0.2afb3e9282952
libxml2@2.9.13+dfsg-1ubuntu0.9
no fix listed
1
ghcr.io/oznu/homebridge:2022-07-08ff2af53897e7
libxml2@2.9.10+dfsg-5ubuntu0.20.04.3
no fix listed
1
ghcr.io/paperless-ngx/paperless-ngx:2.13.10642357c5dbd
libxml2@2.9.14+dfsg-1.3~deb12u1
no fix listed
1
ghcr.io/paperless-ngx/paperless-ngx:2.20.134b05bcd28e69
libxml2@2.12.7+dfsg+really2.9.14-2.1+deb13u2
no fix listed
1
ghcr.io/paperless-ngx/paperless-ngx:2.20.357ad9565bff3
libxml2@2.12.7+dfsg+really2.9.14-2.1+deb13u2
no fix listed
1
ghcr.io/paperless-ngx/paperless-ngx:2.20.5665f2f5cc548
libxml2@2.12.7+dfsg+really2.9.14-2.1+deb13u2
no fix listed
1
ghcr.io/paperless-ngx/paperless-ngx:2.0.1ab255bea133e
libxml2@2.9.14+dfsg-1.3~deb12u1
no fix listed
1
ghcr.io/paperless-ngx/paperless-ngx:2.20.14b89f83345532
libxml2@2.12.7+dfsg+really2.9.14-2.1+deb13u2
no fix listed
1
ghcr.io/pschichtel/s3-backup:0.7.017666811f6a7
libxml2@2.12.7+dfsg+really2.9.14-2.1+deb13u2
no fix listed
1
ghcr.io/qubiva/qubiva:v0.3.2cdf1e3329bfe
libxml2@2.12.7+dfsg+really2.9.14-2.1+deb13u2
no fix listed
1
ghcr.io/retyc/retyc-k8s-csi:v0.2.01521d4baeb85
libxml2@2.12.7+dfsg+really2.9.14-2.1+deb13u3
no fix listed
1
ghcr.io/rss-bridge/rss-bridge:latest606896116558
libxml2@2.9.14+dfsg-1.3~deb12u6
no fix listed
1
ghcr.io/samr037/node-debug-dashboard:0.3.0c79b2e64a211
libxml2@2.9.14+dfsg-1.3~deb12u6
no fix listed
1
ghcr.io/sdr-enthusiasts/docker-flightradar24:latest917e53402d51
libxml2@2.12.7+dfsg+really2.9.14-2.1+deb13u3
no fix listed
1
ghcr.io/sdwbgn/unitycatalog-helm/docker/unitycatalog-ui:0.2.1-5d668c1ed07e7ca098d
libxml2@2.9.14+dfsg-1.3~deb12u1
no fix listed
1
ghcr.io/seanmorley15/adventurelog-backend:v0.13.00250d9cb0d74
libxml2@2.12.7+dfsg+really2.9.14-2.1+deb13u3
no fix listed
1
ghcr.io/sergelogvinov/pgbouncer:16.1518f1121ba0a4
libxml2@2.9.14+dfsg-1.3~deb12u6
no fix listed
1
ghcr.io/sergelogvinov/postgresql:16.15fafb72e98f22
libxml2@2.9.14+dfsg-1.3~deb12u6
no fix listed
1
ghcr.io/smarter-project/audio-client:v3.1.23c8375dc5487
libxml2@2.9.10+dfsg-5ubuntu0.20.04.4
no fix listed
1
ghcr.io/smarter-project/gstreamer:v1.0.25ecb16015aa8
libxml2@2.9.10+dfsg-5ubuntu0.20.04.4
no fix listed
1
ghcr.io/smarter-project/image-detector:v2.5.31dcca70c6446
libxml2@2.9.10+dfsg-5ubuntu0.20.04.4
no fix listed
1
ghcr.io/star-whale/server:0.6.158368359c8dd0
libxml2@2.9.10+dfsg-5ubuntu0.20.04.4
no fix listed
1
ghcr.io/steadybit/extension-container:v1.8.0dd31d4713ef6
libxml2@2.12.7+dfsg+really2.9.14-2.1+deb13u3
no fix listed
1
ghcr.io/steadybit/extension-host:v1.8.0a198ac7bc8c1
libxml2@2.12.7+dfsg+really2.9.14-2.1+deb13u3
no fix listed
1
ghcr.io/stirling-tools/stirling-pdf:2.14.33b3670fce70b
libxml2@2.9.14+dfsg-1.3ubuntu3.7
no fix listed
1

syft 1.42.1 · advisories as of 15 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.