CVE-2026-88372
MediumAdvisory
Published 24 Sept 2026In the index since 25 Sept 2026
- Severity
- Medium
- worst across findings
- CVSS
- 5.5
- base score, highest
- EPSS
- —
- probability of exploitation
- CISA KEV
- Not listed
- no confirmed exploitation
- Charts affected
- 60
- of 17,844 indexed, latest versions
- Container images
- 61
- deployed by those charts
- Fix available
- None
- affected package
The matching OSV records carry no description.
Carried by container images the latest versions of 60 of 17,844 indexed charts deploy, on 61 images.
| Affected package | Affected versions | Fixed in | Images |
|---|---|---|---|
| libsndfiledeb | 1.0.25-7ubuntu2.2, 1.0.25-10ubuntu0.16.04.1, 1.0.25-10ubuntu0.16.04.2, 1.0.28-4+12 more | no fix listed | 61 |
- OSV records
- UBUNTU-CVE-2026-88372
Charts affected
60 by stars
| Chart | Latest | Affected images | Radar Score |
|---|---|---|---|
| hadoopbigdata-chartsVerified publisher | 1.0.1 | 1 of 2See more | 12,530 |
| selenium-gridselenium-grid | 0.59.1 | 2 of 4See more | 7,993 |
| photoprismandrenarchyVerified publisher | 8.15.0 | 1 of 1See more | 45,285 |
| local-ailocalai | 3.4.2 | 1 of 1See more | 3,986 |
| oesopsmxVerified publisher | 4.0.32 | 1 of 25See more | 102,839 |
| browserless-chromesagikazarmarkVerified publisher | 0.0.5 | 1 of 1See more | 101,454 |
| dltbrokerassist-iot-distributed-broker | 0.2.0 | 2 of 9See more | 193,878 |
| dltloggingassist-iot-logging-auditing | 0.2.0 | 2 of 9See more | 193,858 |
| tensorflow-notebookcloudnativeapp | 0.1.2 | 1 of 1See more | 95,373 |
| bazarrgeek-cookbookVerified publisher | 10.6.2 | 1 of 1See more | 18,014 |
| calibregeek-cookbookVerified publisher | 5.4.2 | 1 of 1See more | 23,754 |
| games-on-whalesgeek-cookbookVerified publisher | 1.8.2 | 3 of 7See more | 112,689 |
| stashgeek-cookbookVerified publisher | 3.4.2 | 1 of 1See more | 16,335 |
| napcatredish101Verified publisher | 0.1.3 | 1 of 1See more | 69,832 |
| smarter-demosmarterOfficialVerified publisher | 0.1.5 | 3 of 7See more | 253,351 |
| games-on-whalesangelnu | 2.0.0 | 4 of 7See more | 119,964 |
| arma-reforgerarma-reforger | 0.5.3 | 1 of 8See more | 23,758 |
| dltkvassist-iot-data-integrity-verification | 0.2.0 | 2 of 9See more | 193,878 |
| dltflassist-iot-dlt-based-fl | 0.2.0 | 2 of 9See more | 193,878 |
| videoaugmentationassist-iot-video-augmentation | 0.1.0 | 1 of 3See more | 77,713 |
| distributed-tensorflowcloudnativeapp | 0.1.1 | 1 of 1See more | 95,373 |
| hlf-couchdbcloudnativeapp | 1.0.6 | 1 of 1See more | 92,443 |
| webpagetest-agentcloudnativeapp | 0.2.0 | 1 of 1See more | 137,542 |
| difydify | 1.0.0 | 1 of 4See more | 53,161 |
| photoprismdjjudas21Verified publisher | 99.99.99 | 1 of 1See more | 96,426 |
| business-api-ecosystemfiware | 1.1.0 | 1 of 4See more | 115,149 |
| airsonicgeek-cookbookVerified publisher | 6.4.2 | 1 of 1See more | 18,517 |
| booksonic-airgeek-cookbookVerified publisher | 6.4.2 | 1 of 1See more | 19,652 |
| openkmgeek-cookbookVerified publisher | 4.2.0 | 1 of 1See more | 28,840 |
| photoprismgeek-cookbookVerified publisher | 7.2.0 | 1 of 1See more | 20,168 |
| teedygeek-cookbookVerified publisher | 6.2.0 | 1 of 1See more | 27,575 |
| xtevegeek-cookbookVerified publisher | 8.4.2 | 1 of 1See more | 18,609 |
| geomapfishgeomapfish | 0.8.0 | 1 of 3See more | 6,671 |
| 7dtdhelm-7dtd | 0.1.0 | 1 of 1See more | 67,018 |
| itm-servicesintelVerified publisher | 2.0.0 | 1 of 8See more | 89,928 |
| valheim-serverk8s-chartsVerified publisher | 1.3.0 | 1 of 1See more | 63,771 |
| ingresslivekit-server | 1.2.2 | 1 of 1See more | 11,243 |
| elastictranscoderluiscajl | 0.46.0 | 2 of 4See more | 59,437 |
| cameramedia-streaming-meshVerified publisher | 0.2.5 | 2 of 3See more | 19,344 |
| msm-rtspmedia-streaming-meshVerified publisher | 0.0.2 | 2 of 2See more | 19,344 |
| rtspmedia-streaming-meshVerified publisher | 0.0.14 | 2 of 2See more | 19,344 |
| smilencsaVerified publisher | 1.1.0 | 1 of 23See more | 285,287 |
| audacitynicholaswildeVerified publisher | 0.1.4 | 1 of 1See more | 23,893 |
| booksonicnicholaswildeVerified publisher | 1.0.1 | 1 of 1See more | 17,402 |
| digikamnicholaswildeVerified publisher | 1.0.0 | 1 of 1See more | 25,009 |
| doublecommandernicholaswildeVerified publisher | 1.0.2 | 1 of 1See more | 26,161 |
| remminanicholaswildeVerified publisher | 0.1.4 | 1 of 1See more | 23,057 |
| sqlitebrowsernicholaswildeVerified publisher | 1.0.1 | 1 of 1See more | 24,291 |
| splashntppoolVerified publisher | 1.0.4 | 1 of 1See more | 95,648 |
| cdn-remoteopencord | 0.2.4 | 2 of 3See more | 64,741 |
Container images carrying it
61 by charts deploying them
A fixed version is listed for 0 of the 1 affected package.
| Container image | Digest | Package | Fixed in | Used by |
|---|---|---|---|---|
| hyperledger/ | 4ce6f43ded2e | libsndfile | no fix listed | 4 |
| hyperledger/ | f6c724592abf | libsndfile | no fix listed | 4 |
| ciscolabs/ | a7b60ec88285 | libsndfile | no fix listed | 3 |
| ciscolabs/ | b59fc10bb821 | libsndfile | no fix listed | 3 |
| omecproject/ | d59ccb138ffb | libsndfile | no fix listed | 3 |
| kurento/ | 03c0d34d0828 | libsndfile | no fix listed | 2 |
| ghcr.io/ | f34f98405c10 | libsndfile | no fix listed | 2 |
| ghcr.io/ | 103fbcec2314 | libsndfile | no fix listed | 2 |
| ghcr.io/ | 9b6105be7ad0 | libsndfile | no fix listed | 2 |
| 5200710/ | 092d3088a5fb | libsndfile | no fix listed | 1 |
| airsonicadvanced/ | f7cbafac2806 | libsndfile | no fix listed | 1 |
| andrewmackrodt/ | 33f9080470c9 | libsndfile | no fix listed | 1 |
| assistiot/ | e5ae539ce2cb | libsndfile | no fix listed | 1 |
| browserless/ | c81ae5585b47 | libsndfile | no fix listed | 1 |
| camptocamp/ | ae874f70cc16 | libsndfile | no fix listed | 1 |
| cheyang/ | 46cc34755493 | libsndfile | no fix listed | 1 |
| elastictranscoder/ | b4a0327029e6 | libsndfile | no fix listed | 1 |
| elastictranscoder/ | 5b75d19e2733 | libsndfile | no fix listed | 1 |
| fiware/ | 29456835bb2c | libsndfile | no fix listed | 1 |
| hyperledger/ | c65891b6c237 | libsndfile | no fix listed | 1 |
| intel/ | aa8f5483a2ef | libsndfile | no fix listed | 1 |
| langgenius/ | 7d2fb04baf44 | libsndfile | no fix listed | 1 |
| linuxserver/ | a847b5b2d860 | libsndfile | no fix listed | 1 |
| livekit/ | 1ab01641b366 | libsndfile | no fix listed | 1 |
| mbround18/ | 70bd4da591cd | libsndfile | no fix listed | 1 |
| mlikiowa/ | 2cc70b45244a | libsndfile | no fix listed | 1 |
| omecproject/ | b4ae7d0d6b74 | libsndfile | no fix listed | 1 |
| openkm/ | 3bc465a7461b | libsndfile | no fix listed | 1 |
| opsmx11/ | 5c50ca123d88 | libsndfile | no fix listed | 1 |
| photoprism/ | 2954334adbda | libsndfile | no fix listed | 1 |
| photoprism/ | 650c6ad5a651 | libsndfile | no fix listed | 1 |
| photoprism/ | 958642220223 | libsndfile | no fix listed | 1 |
| photoprism/ | fc6fd632ca74 | libsndfile | no fix listed | 1 |
| project2team4/ | 3ff031a08887 | libsndfile | no fix listed | 1 |
| ryuunosukeds3/ | c0398f13e8a9 | libsndfile | no fix listed | 1 |
| scrapinghub/ | a5f89bc84606 | libsndfile | no fix listed | 1 |
| selenium/ | 5ac71fd8dd1e | libsndfile | no fix listed | 1 |
| selenium/ | 74a5c1c90f95 | libsndfile | no fix listed | 1 |
| sismics/ | f4b0ef019cf1 | libsndfile | no fix listed | 1 |
| socialmediamacroscope/ | 70fb11d4f531 | libsndfile | no fix listed | 1 |
| stashapp/ | 24dbd7607174 | libsndfile | no fix listed | 1 |
| tensorflow/ | 1e3172090703 | libsndfile | no fix listed | 1 |
| timothyclarke/ | 22c41e5ca7e2 | libsndfile | no fix listed | 1 |
| trueosiris/ | 9356f98ad561 | libsndfile | no fix listed | 1 |
| vinanrra/ | f9534490bd2b | libsndfile | no fix listed | 1 |
| workadventure/ | 92b664c2a06f | libsndfile | no fix listed | 1 |
| ghcr.io/ | 6fde1edc0983 | libsndfile | no fix listed | 1 |
| ghcr.io/ | fdb5501cdfb9 | libsndfile | no fix listed | 1 |
| ghcr.io/ | 292b3614670f | libsndfile | no fix listed | 1 |
| ghcr.io/ | cdf203db1e50 | libsndfile | no fix listed | 1 |