StackRadar

CVE-2026-88386

Medium

Advisory

Published 24 Sept 2026In the index since 26 Sept 2026
Severity
Medium
worst across findings
CVSS
5.5
base score, highest
EPSS
0.001
3rd percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
126
of 17,879 indexed, latest versions
Container images
115
deployed by those charts
Fix available
None
affected package

The matching OSV records carry no description.

Carried by container images the latest versions of 126 of 17,879 indexed charts deploy, on 115 images.

Affected packageAffected versionsFixed inImages
libsndfiledeb1.0.25-7ubuntu2.2, 1.0.25-10ubuntu0.16.04.1, 1.0.25-10ubuntu0.16.04.2, 1.0.28-4+16 moreno fix listed115
OSV records
UBUNTU-CVE-2026-88386DEBIAN-CVE-2026-88386

Charts affected

126 by stars
ChartLatestAffected imagesRadar Score
smilencsaVerified publisher1.1.01 of 23See more

smile ncsa 1.1.0

1 of the 23 container images this version deploys carry CVE-2026-88386.

Container imageDigestPackageFixed in
socialmediamacroscope/autophrase:0.1.570fb11d4f531
libsndfile@1.0.28-7ubuntu0.1
no fix listed

Open the chart page →

292,584
uptime-kumancsaVerified publisher1.7.31 of 1See more

uptime-kuma ncsa 1.7.3

1 of the 1 container images this version deploys carry CVE-2026-88386.

Container imageDigestPackageFixed in
louislam/uptime-kuma:2.5.5c74379ac4509
libsndfile@1.2.0-1+deb12u1
no fix listed

Open the chart page →

31,895
audacitynicholaswildeVerified publisher0.1.41 of 1See more

audacity nicholaswilde 0.1.4

1 of the 1 container images this version deploys carry CVE-2026-88386.

Container imageDigestPackageFixed in
ghcr.io/linuxserver/audacity:version-3.0.2cdf203db1e50
libsndfile@1.0.28-7
no fix listed

Open the chart page →

23,937
booksonicnicholaswildeVerified publisher1.0.11 of 1See more

booksonic nicholaswilde 1.0.1

1 of the 1 container images this version deploys carry CVE-2026-88386.

Container imageDigestPackageFixed in
ghcr.io/linuxserver/booksonic:version-1.2677efca1065d
libsndfile@1.0.28-4ubuntu0.18.04.2
no fix listed

Open the chart page →

17,441
digikamnicholaswildeVerified publisher1.0.01 of 1See more

digikam nicholaswilde 1.0.0

1 of the 1 container images this version deploys carry CVE-2026-88386.

Container imageDigestPackageFixed in
ghcr.io/linuxserver/digikam:version-7.3.055b4c7f320ae
libsndfile@1.0.28-4ubuntu0.18.04.2
no fix listed

Open the chart page →

25,084
doublecommandernicholaswildeVerified publisher1.0.21 of 1See more

doublecommander nicholaswilde 1.0.2

1 of the 1 container images this version deploys carry CVE-2026-88386.

Container imageDigestPackageFixed in
ghcr.io/linuxserver/doublecommander:version-0.8.2-1d92969a929c2
libsndfile@1.0.28-4ubuntu0.18.04.2
no fix listed

Open the chart page →

26,236
remminanicholaswildeVerified publisher0.1.41 of 1See more

remmina nicholaswilde 0.1.4

1 of the 1 container images this version deploys carry CVE-2026-88386.

Container imageDigestPackageFixed in
ghcr.io/linuxserver/remmina:version-1.2.0-rcgit.29dfsg-1ubuntu105955792e00f
libsndfile@1.0.28-4ubuntu0.18.04.2
no fix listed

Open the chart page →

23,132
sqlitebrowsernicholaswildeVerified publisher1.0.11 of 1See more

sqlitebrowser nicholaswilde 1.0.1

1 of the 1 container images this version deploys carry CVE-2026-88386.

Container imageDigestPackageFixed in
ghcr.io/linuxserver/sqlitebrowser:version-3.12.2-02876202105241947ubuntu18.04.1426e79828c4b
libsndfile@1.0.28-4ubuntu0.18.04.2
no fix listed

Open the chart page →

24,369
splashntppoolVerified publisher1.0.41 of 1See more

splash ntppool 1.0.4

1 of the 1 container images this version deploys carry CVE-2026-88386.

Container imageDigestPackageFixed in
scrapinghub/splash:3.4.1a5f89bc84606
libsndfile@1.0.28-4ubuntu0.18.04.1
no fix listed

Open the chart page →

98,112
cdn-remoteopencord0.2.42 of 3See more

cdn-remote opencord 0.2.4

2 of the 3 container images this version deploys carry CVE-2026-88386.

Container imageDigestPackageFixed in
omecproject/cdn-antmedia:1.0.0b4ae7d0d6b74
libsndfile@1.0.28-4
no fix listed
omecproject/cdn-video-repo:1.0.0d59ccb138ffb
libsndfile@1.0.25-10ubuntu0.16.04.1
no fix listed

Open the chart page →

64,848
mcord-cdn-remoteopencord0.1.61 of 2See more

mcord-cdn-remote opencord 0.1.6

1 of the 2 container images this version deploys carry CVE-2026-88386.

Container imageDigestPackageFixed in
omecproject/cdn-video-repo:remote-v3d59ccb138ffb
libsndfile@1.0.25-10ubuntu0.16.04.1
no fix listed

Open the chart page →

43,880
mcord-cdn-remote-freeopencord0.1.31 of 1See more

mcord-cdn-remote-free opencord 0.1.3

1 of the 1 container images this version deploys carry CVE-2026-88386.

Container imageDigestPackageFixed in
omecproject/cdn-video-repo:remote-v3d59ccb138ffb
libsndfile@1.0.25-10ubuntu0.16.04.1
no fix listed

Open the chart page →

30,178
issuegenopsmxVerified publisher1.0.21 of 1See more

issuegen opsmx 1.0.2

1 of the 1 container images this version deploys carry CVE-2026-88386.

Container imageDigestPackageFixed in
opsmx11/issuegen:v2.1.05c50ca123d88
libsndfile@1.0.25-7ubuntu2.2
no fix listed

Open the chart page →

26,767
javareact-java0.1.01 of 1See more

java react-java 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-88386.

Container imageDigestPackageFixed in
project2team4/react:latest3ff031a08887
libsndfile@1.0.28-7ubuntu0.1
no fix listed

Open the chart page →

16,099
web-checkrm3lVerified publisher0.1.01 of 1See more

web-check rm3l 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-88386.

Container imageDigestPackageFixed in
ghcr.io/lissy93/web-check:latest7e2ef5261764
libsndfile@1.2.0-1+deb12u1
no fix listed

Open the chart page →

6,917
rocketchat-voiprocketchat-server0.1.01 of 1See more

rocketchat-voip rocketchat-server 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-88386.

Container imageDigestPackageFixed in
rocketchat/freeswitch:stablecfba5c20a5cc
libsndfile@1.2.0-1
no fix listed

Open the chart page →

5,987
flaresolverrrubxkubeVerified publisher0.1.11 of 1See more

flaresolverr rubxkube 0.1.1

1 of the 1 container images this version deploys carry CVE-2026-88386.

Container imageDigestPackageFixed in
flaresolverr/flaresolverr:v3.5.0139dfee1c6f8
libsndfile@1.2.0-1+deb12u1
no fix listed

Open the chart page →

29,008
uptime-kumarubxkubeVerified publisher1.2.11 of 1See more

uptime-kuma rubxkube 1.2.1

1 of the 1 container images this version deploys carry CVE-2026-88386.

Container imageDigestPackageFixed in
louislam/uptime-kuma:2.4.091e963bfda56
libsndfile@1.2.0-1+deb12u1
no fix listed

Open the chart page →

32,098
nadekobotryuunosukeds30.1.21 of 2See more

nadekobot ryuunosukeds3 0.1.2

1 of the 2 container images this version deploys carry CVE-2026-88386.

Container imageDigestPackageFixed in
ryuunosukeds3/nadeko-bot-docker:latestc0398f13e8a9
libsndfile@1.0.31-2ubuntu0.2
no fix listed

Open the chart page →

8,957
vrisingryuunosukeds30.1.01 of 1See more

vrising ryuunosukeds3 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-88386.

Container imageDigestPackageFixed in
trueosiris/vrising:latest9356f98ad561
libsndfile@1.0.31-2ubuntu0.2
no fix listed

Open the chart page →

7,910
photoprismschoolguys-helmcharts0.3.81 of 1See more

photoprism schoolguys-helmcharts 0.3.8

1 of the 1 container images this version deploys carry CVE-2026-88386.

Container imageDigestPackageFixed in
photoprism/photoprism:260601650c6ad5a651
libsndfile@1.2.2-4
no fix listed

Open the chart page →

59,597
kurento_webrtc_demostunner0.1.01 of 2See more

kurento_webrtc_demo stunner 0.1.0

1 of the 2 container images this version deploys carry CVE-2026-88386.

Container imageDigestPackageFixed in
kurento/kurento-media-server:latest03c0d34d0828
libsndfile@1.2.2-1ubuntu5.24.04.1
no fix listed

Open the chart page →

13,511
stunner-kurento-one2one-callstunner0.1.01 of 2See more

stunner-kurento-one2one-call stunner 0.1.0

1 of the 2 container images this version deploys carry CVE-2026-88386.

Container imageDigestPackageFixed in
kurento/kurento-media-server:latest03c0d34d0828
libsndfile@1.2.2-1ubuntu5.24.04.1
no fix listed

Open the chart page →

13,511
flaresolverrsudo-kraken-flaresolverrVerified publisher2.1.41 of 1See more

flaresolverr sudo-kraken-flaresolverr 2.1.4

1 of the 1 container images this version deploys carry CVE-2026-88386.

Container imageDigestPackageFixed in
ghcr.io/flaresolverr/flaresolverr:v3.4.67962759d99d7
libsndfile@1.2.0-1+deb12u1
no fix listed

Open the chart page →

35,641
speecht5test-opea1.0.01 of 1See more

speecht5 test-opea 1.0.0

1 of the 1 container images this version deploys carry CVE-2026-88386.

Container imageDigestPackageFixed in
opea/speecht5:1.0249afad3d268
libsndfile@1.2.0-1
no fix listed

Open the chart page →

10,219
playwright-synthetic-monitoringwork-adventure1.0.11 of 1See more

playwright-synthetic-monitoring work-adventure 1.0.1

1 of the 1 container images this version deploys carry CVE-2026-88386.

Container imageDigestPackageFixed in
workadventure/playwright-synthetic-monitoring:main92b664c2a06f
libsndfile@1.0.31-2ubuntu0.1
no fix listed

Open the chart page →

14,863

Container images carrying it

115 by charts deploying them

A fixed version is listed for 0 of the 1 affected package.

Container imageDigestPackageFixed inUsed by
louislam/uptime-kuma:2.4.091e963bfda56
libsndfile@1.2.0-1+deb12u1
no fix listed
1
louislam/uptime-kuma:2.5.5c74379ac4509
libsndfile@1.2.0-1+deb12u1
no fix listed
1
machines/filestash:latest2f69ce781400
libsndfile@1.2.2-2+deb13u1
no fix listed
1
mbround18/valheim:3.1.070bd4da591cd
libsndfile@1.0.31-2ubuntu0.2
no fix listed
1
mlikiowa/napcat-docker:latest2cc70b45244a
libsndfile@1.0.31-2ubuntu0.1
no fix listed
1
nousresearch/hermes-agent:v2026.8.27e0df6adebddf
libsndfile@1.2.2-2+deb13u1
no fix listed
1
nousresearch/hermes-agent:v2026.9.24fca358f12efd
libsndfile@1.2.2-2+deb13u1
no fix listed
1
omecproject/cdn-antmedia:1.0.0b4ae7d0d6b74
libsndfile@1.0.28-4
no fix listed
1
opea/speecht5:1.0249afad3d268
libsndfile@1.2.0-1
no fix listed
1
opencsghq/agenticflow:ee-v0.6.5-241cba9c366f1
libsndfile@1.2.0-1+deb12u1
no fix listed
1
opencsghq/csgbot:v0.6.9-ee7d0271e26521
libsndfile@1.2.2-2+deb13u1
no fix listed
1
openkm/openkm-ce:6.3.113bc465a7461b
libsndfile@1.0.28-7ubuntu0.1
no fix listed
1
opsmx11/issuegen:v2.1.05c50ca123d88
libsndfile@1.0.25-7ubuntu2.2
no fix listed
1
photoprism/photoprism:220629-jammy2954334adbda
libsndfile@1.0.31-2build1
no fix listed
1
photoprism/photoprism:260601650c6ad5a651
libsndfile@1.2.2-4
no fix listed
1
photoprism/photoprism:260728958642220223
libsndfile@1.2.2-4
no fix listed
1
photoprism/photoprism:240711-cefc6fd632ca74
libsndfile@1.2.2-1ubuntu5
no fix listed
1
project2team4/react:latest3ff031a08887
libsndfile@1.0.28-7ubuntu0.1
no fix listed
1
rocketchat/freeswitch:stablecfba5c20a5cc
libsndfile@1.2.0-1
no fix listed
1
ryuunosukeds3/nadeko-bot-docker:latestc0398f13e8a9
libsndfile@1.0.31-2ubuntu0.2
no fix listed
1
scrapinghub/splash:3.4.1a5f89bc84606
libsndfile@1.0.28-4ubuntu0.18.04.1
no fix listed
1
selenium/node-chrome:4.48.0-202609055ac71fd8dd1e
libsndfile@1.2.2-1ubuntu5.24.04.1
no fix listed
1
selenium/node-firefox:4.48.0-2026090574a5c1c90f95
libsndfile@1.2.2-1ubuntu5.24.04.1
no fix listed
1
sismics/docs:v1.10f4b0ef019cf1
libsndfile@1.0.28-4ubuntu0.18.04.2
no fix listed
1
sissbruecker/linkding:1.41.0-plusa222fb777e1f
libsndfile@1.2.0-1
no fix listed
1
socialmediamacroscope/autophrase:0.1.570fb11d4f531
libsndfile@1.0.28-7ubuntu0.1
no fix listed
1
stashapp/stash:latest24dbd7607174
libsndfile@1.0.28-7
no fix listed
1
tensorflow/tensorflow:1.6.0-devel1e3172090703
libsndfile@1.0.25-10ubuntu0.16.04.1
no fix listed
1
thijsvanloef/palworld-server-docker:v2.7.1401d3eb5c053
libsndfile@1.2.2-2+deb13u1
no fix listed
1
timothyclarke/wptagent:2018-01-2322c41e5ca7e2
libsndfile@1.0.25-10ubuntu0.16.04.1
no fix listed
1
trueosiris/vrising:latest9356f98ad561
libsndfile@1.0.31-2ubuntu0.2
no fix listed
1
vinanrra/7dtd-server:v0.4.4f9534490bd2b
libsndfile@1.0.28-4ubuntu0.18.04.2
no fix listed
1
workadventure/playwright-synthetic-monitoring:main92b664c2a06f
libsndfile@1.0.31-2ubuntu0.1
no fix listed
1
zabbix/zabbix-web-service:ubuntu-7.0.23915b3183e054
libsndfile@1.2.2-1ubuntu5.24.04.1
no fix listed
1
zabbix/zabbix-web-service:ubuntu-6.0.8ee4baa872280
libsndfile@1.0.31-2build1
no fix listed
1
ghcr.io/appscode/gotenberg:8.25f9104080d9a7
libsndfile@1.2.2-2+b1
no fix listed
1
ghcr.io/brittonhayes/arma-reforger:latest6fde1edc0983
libsndfile@1.0.28-7ubuntu0.1
no fix listed
1
ghcr.io/cjmalloy/jasper:v1.3.282726a947bb65b
libsndfile@1.2.0-1+deb12u1
no fix listed
1
ghcr.io/flanksource/facet:0.1.73a0323f4283e5
libsndfile@1.2.0-1+deb12u1
no fix listed
1
ghcr.io/flaresolverr/flaresolverr:v3.4.0ab535d1fef5d
libsndfile@1.2.0-1
no fix listed
1
ghcr.io/fluxerapp/fluxer-api:2026.820.164808f683541d5374
libsndfile@1.2.0-1+deb12u1
no fix listed
1
ghcr.io/fluxerapp/fluxer-media-proxy:2026.820.164955ced7544e6b3f
libsndfile@1.2.2-2+deb13u1
no fix listed
1
ghcr.io/k8s-at-home/bazarr:v1.0.3fdb5501cdfb9
libsndfile@1.0.28-7ubuntu0.1
no fix listed
1
ghcr.io/k8s-at-home/xteve:v2.2.0.200292b3614670f
libsndfile@1.0.28-7ubuntu0.1
no fix listed
1
ghcr.io/karakeep-app/karakeep:0.33.2b069e4307dec
libsndfile@1.2.0-1+deb12u1
no fix listed
1
ghcr.io/linuxserver/audacity:version-3.0.2cdf203db1e50
libsndfile@1.0.28-7
no fix listed
1
ghcr.io/linuxserver/booksonic:version-1.2677efca1065d
libsndfile@1.0.28-4ubuntu0.18.04.2
no fix listed
1
ghcr.io/linuxserver/booksonic-air:version-v2009.1.0baa4fa9549dc
libsndfile@1.0.28-4ubuntu0.18.04.2
no fix listed
1
ghcr.io/linuxserver/digikam:version-7.3.055b4c7f320ae
libsndfile@1.0.28-4ubuntu0.18.04.2
no fix listed
1
ghcr.io/linuxserver/doublecommander:version-0.8.2-1d92969a929c2
libsndfile@1.0.28-4ubuntu0.18.04.2
no fix listed
1

syft 1.42.1 · advisories as of 26 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.