StackRadar

CVE-2026-88372

Medium

Advisory

Published 24 Sept 2026In the index since 25 Sept 2026
Severity
Medium
worst across findings
CVSS
5.5
base score, highest
EPSS
—
probability of exploitation
CISA KEV
Not listed
no confirmed exploitation
Charts affected
60
of 17,844 indexed, latest versions
Container images
61
deployed by those charts
Fix available
None
affected package

The matching OSV records carry no description.

Carried by container images the latest versions of 60 of 17,844 indexed charts deploy, on 61 images.

Affected packageAffected versionsFixed inImages
libsndfiledeb1.0.25-7ubuntu2.2, 1.0.25-10ubuntu0.16.04.1, 1.0.25-10ubuntu0.16.04.2, 1.0.28-4+12 moreno fix listed61
OSV records
UBUNTU-CVE-2026-88372

Charts affected

60 by stars
ChartLatestAffected imagesRadar Score
mcord-cdn-remoteopencord0.1.61 of 2See more

mcord-cdn-remote opencord 0.1.6

1 of the 2 container images this version deploys carry CVE-2026-88372.

Container imageDigestPackageFixed in
omecproject/cdn-video-repo:remote-v3d59ccb138ffb
libsndfile@1.0.25-10ubuntu0.16.04.1
no fix listed

Open the chart page →

43,804
mcord-cdn-remote-freeopencord0.1.31 of 1See more

mcord-cdn-remote-free opencord 0.1.3

1 of the 1 container images this version deploys carry CVE-2026-88372.

Container imageDigestPackageFixed in
omecproject/cdn-video-repo:remote-v3d59ccb138ffb
libsndfile@1.0.25-10ubuntu0.16.04.1
no fix listed

Open the chart page →

30,117
issuegenopsmxVerified publisher1.0.21 of 1See more

issuegen opsmx 1.0.2

1 of the 1 container images this version deploys carry CVE-2026-88372.

Container imageDigestPackageFixed in
opsmx11/issuegen:v2.1.05c50ca123d88
libsndfile@1.0.25-7ubuntu2.2
no fix listed

Open the chart page →

26,716
javareact-java0.1.01 of 1See more

java react-java 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-88372.

Container imageDigestPackageFixed in
project2team4/react:latest3ff031a08887
libsndfile@1.0.28-7ubuntu0.1
no fix listed

Open the chart page →

16,075
nadekobotryuunosukeds30.1.21 of 2See more

nadekobot ryuunosukeds3 0.1.2

1 of the 2 container images this version deploys carry CVE-2026-88372.

Container imageDigestPackageFixed in
ryuunosukeds3/nadeko-bot-docker:latestc0398f13e8a9
libsndfile@1.0.31-2ubuntu0.2
no fix listed

Open the chart page →

8,919
vrisingryuunosukeds30.1.01 of 1See more

vrising ryuunosukeds3 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-88372.

Container imageDigestPackageFixed in
trueosiris/vrising:latest9356f98ad561
libsndfile@1.0.31-2ubuntu0.2
no fix listed

Open the chart page →

7,872
photoprismschoolguys-helmcharts0.3.81 of 1See more

photoprism schoolguys-helmcharts 0.3.8

1 of the 1 container images this version deploys carry CVE-2026-88372.

Container imageDigestPackageFixed in
photoprism/photoprism:260601650c6ad5a651
libsndfile@1.2.2-4
no fix listed

Open the chart page →

57,124
kurento_webrtc_demostunner0.1.01 of 2See more

kurento_webrtc_demo stunner 0.1.0

1 of the 2 container images this version deploys carry CVE-2026-88372.

Container imageDigestPackageFixed in
kurento/kurento-media-server:latest03c0d34d0828
libsndfile@1.2.2-1ubuntu5.24.04.1
no fix listed

Open the chart page →

13,480
stunner-kurento-one2one-callstunner0.1.01 of 2See more

stunner-kurento-one2one-call stunner 0.1.0

1 of the 2 container images this version deploys carry CVE-2026-88372.

Container imageDigestPackageFixed in
kurento/kurento-media-server:latest03c0d34d0828
libsndfile@1.2.2-1ubuntu5.24.04.1
no fix listed

Open the chart page →

13,480
playwright-synthetic-monitoringwork-adventure1.0.11 of 1See more

playwright-synthetic-monitoring work-adventure 1.0.1

1 of the 1 container images this version deploys carry CVE-2026-88372.

Container imageDigestPackageFixed in
workadventure/playwright-synthetic-monitoring:main92b664c2a06f
libsndfile@1.0.31-2ubuntu0.1
no fix listed

Open the chart page →

14,813

Container images carrying it

61 by charts deploying them

A fixed version is listed for 0 of the 1 affected package.

Container imageDigestPackageFixed inUsed by
hyperledger/fabric-ca-tools:latest4ce6f43ded2e
libsndfile@1.0.25-10ubuntu0.16.04.1
no fix listed
4
hyperledger/fabric-couchdb:0.4.15f6c724592abf
libsndfile@1.0.25-10ubuntu0.16.04.1
no fix listed
4
ciscolabs/rtsp-client:latesta7b60ec88285
libsndfile@1.0.28-7ubuntu0.1
no fix listed
3
ciscolabs/rtsp-server:latestb59fc10bb821
libsndfile@1.0.28-7ubuntu0.1
no fix listed
3
omecproject/cdn-video-repo:1.0.0:remote-v3d59ccb138ffb
libsndfile@1.0.25-10ubuntu0.16.04.1
no fix listed
3
kurento/kurento-media-server:latest03c0d34d0828
libsndfile@1.2.2-1ubuntu5.24.04.1
no fix listed
2
ghcr.io/games-on-whales/pulseaudio:1.0.0f34f98405c10
libsndfile@1.0.28-7ubuntu0.1
no fix listed
2
ghcr.io/games-on-whales/retroarch:1.0.0103fbcec2314
libsndfile@1.0.28-7ubuntu0.1
no fix listed
2
ghcr.io/games-on-whales/steam:1.0.09b6105be7ad0
libsndfile@1.0.28-7ubuntu0.1
no fix listed
2
5200710/hadoop:3.2.3-java8092d3088a5fb
libsndfile@1.0.28-7ubuntu0.2
no fix listed
1
airsonicadvanced/airsonic-advanced:latestf7cbafac2806
libsndfile@1.0.28-7
no fix listed
1
andrewmackrodt/firefox-x11:142.0.1-r133f9080470c9
libsndfile@1.0.31-2ubuntu0.2
no fix listed
1
assistiot/video_augmentation:runner-cpu-lateste5ae539ce2cb
libsndfile@1.0.28-7ubuntu0.2
no fix listed
1
browserless/chrome:1.48.0-chrome-stablec81ae5585b47
libsndfile@1.0.28-7ubuntu0.1
no fix listed
1
camptocamp/geomapfishapp-geoportal:latestae874f70cc16
libsndfile@1.2.2-1ubuntu5.24.04.1
no fix listed
1
cheyang/distributed-tf:1.6.046cc34755493
libsndfile@1.0.25-10ubuntu0.16.04.1
no fix listed
1
elastictranscoder/transcoder:627e21dcb4a0327029e6
libsndfile@1.0.28-4ubuntu0.18.04.1
no fix listed
1
elastictranscoder/transcoder-handler:627e21dc5b75d19e2733
libsndfile@1.0.28-4ubuntu0.18.04.1
no fix listed
1
fiware/biz-ecosystem-charging-backend:11.7.029456835bb2c
libsndfile@1.0.28-7ubuntu0.3
no fix listed
1
hyperledger/fabric-couchdb:0.4.10c65891b6c237
libsndfile@1.0.25-10ubuntu0.16.04.1
no fix listed
1
intel/dlstreamer-pipeline-server:2022.1.1-ubuntu20aa8f5483a2ef
libsndfile@1.0.28-7ubuntu0.1
no fix listed
1
langgenius/dify-plugin-daemon:main-local7d2fb04baf44
libsndfile@1.2.2-1ubuntu5.24.04.1
no fix listed
1
linuxserver/calibre:version-v5.21.0a847b5b2d860
libsndfile@1.0.28-4ubuntu0.18.04.1
no fix listed
1
livekit/ingress:v1.2.21ab01641b366
libsndfile@1.0.31-2build1
no fix listed
1
mbround18/valheim:3.1.070bd4da591cd
libsndfile@1.0.31-2ubuntu0.2
no fix listed
1
mlikiowa/napcat-docker:latest2cc70b45244a
libsndfile@1.0.31-2ubuntu0.1
no fix listed
1
omecproject/cdn-antmedia:1.0.0b4ae7d0d6b74
libsndfile@1.0.28-4
no fix listed
1
openkm/openkm-ce:6.3.113bc465a7461b
libsndfile@1.0.28-7ubuntu0.1
no fix listed
1
opsmx11/issuegen:v2.1.05c50ca123d88
libsndfile@1.0.25-7ubuntu2.2
no fix listed
1
photoprism/photoprism:220629-jammy2954334adbda
libsndfile@1.0.31-2build1
no fix listed
1
photoprism/photoprism:260601650c6ad5a651
libsndfile@1.2.2-4
no fix listed
1
photoprism/photoprism:260728958642220223
libsndfile@1.2.2-4
no fix listed
1
photoprism/photoprism:240711-cefc6fd632ca74
libsndfile@1.2.2-1ubuntu5
no fix listed
1
project2team4/react:latest3ff031a08887
libsndfile@1.0.28-7ubuntu0.1
no fix listed
1
ryuunosukeds3/nadeko-bot-docker:latestc0398f13e8a9
libsndfile@1.0.31-2ubuntu0.2
no fix listed
1
scrapinghub/splash:3.4.1a5f89bc84606
libsndfile@1.0.28-4ubuntu0.18.04.1
no fix listed
1
selenium/node-chrome:4.48.0-202609055ac71fd8dd1e
libsndfile@1.2.2-1ubuntu5.24.04.1
no fix listed
1
selenium/node-firefox:4.48.0-2026090574a5c1c90f95
libsndfile@1.2.2-1ubuntu5.24.04.1
no fix listed
1
sismics/docs:v1.10f4b0ef019cf1
libsndfile@1.0.28-4ubuntu0.18.04.2
no fix listed
1
socialmediamacroscope/autophrase:0.1.570fb11d4f531
libsndfile@1.0.28-7ubuntu0.1
no fix listed
1
stashapp/stash:latest24dbd7607174
libsndfile@1.0.28-7
no fix listed
1
tensorflow/tensorflow:1.6.0-devel1e3172090703
libsndfile@1.0.25-10ubuntu0.16.04.1
no fix listed
1
timothyclarke/wptagent:2018-01-2322c41e5ca7e2
libsndfile@1.0.25-10ubuntu0.16.04.1
no fix listed
1
trueosiris/vrising:latest9356f98ad561
libsndfile@1.0.31-2ubuntu0.2
no fix listed
1
vinanrra/7dtd-server:v0.4.4f9534490bd2b
libsndfile@1.0.28-4ubuntu0.18.04.2
no fix listed
1
workadventure/playwright-synthetic-monitoring:main92b664c2a06f
libsndfile@1.0.31-2ubuntu0.1
no fix listed
1
ghcr.io/brittonhayes/arma-reforger:latest6fde1edc0983
libsndfile@1.0.28-7ubuntu0.1
no fix listed
1
ghcr.io/k8s-at-home/bazarr:v1.0.3fdb5501cdfb9
libsndfile@1.0.28-7ubuntu0.1
no fix listed
1
ghcr.io/k8s-at-home/xteve:v2.2.0.200292b3614670f
libsndfile@1.0.28-7ubuntu0.1
no fix listed
1
ghcr.io/linuxserver/audacity:version-3.0.2cdf203db1e50
libsndfile@1.0.28-7
no fix listed
1

syft 1.42.1 · advisories as of 25 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.