StackRadar

CVE-2026-88386

Medium

Advisory

Published 24 Sept 2026In the index since 26 Sept 2026
Severity
Medium
worst across findings
CVSS
5.5
base score, highest
EPSS
0.001
3rd percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
126
of 17,879 indexed, latest versions
Container images
115
deployed by those charts
Fix available
None
affected package

The matching OSV records carry no description.

Carried by container images the latest versions of 126 of 17,879 indexed charts deploy, on 115 images.

Affected packageAffected versionsFixed inImages
libsndfiledeb1.0.25-7ubuntu2.2, 1.0.25-10ubuntu0.16.04.1, 1.0.25-10ubuntu0.16.04.2, 1.0.28-4+16 moreno fix listed115
OSV records
UBUNTU-CVE-2026-88386DEBIAN-CVE-2026-88386

Charts affected

126 by stars
ChartLatestAffected imagesRadar Score
uptime-kumauptime-kumaVerified publisher4.2.01 of 1See more

uptime-kuma uptime-kuma 4.2.0

1 of the 1 container images this version deploys carry CVE-2026-88386.

Container imageDigestPackageFixed in
louislam/uptime-kuma:2.5.0a8610b3b4c38
libsndfile@1.2.0-1+deb12u1
no fix listed

Open the chart page →

32,035
zabbixzabbix-communityVerified publisher7.1.01 of 5See more

zabbix zabbix-community 7.1.0

1 of the 5 container images this version deploys carry CVE-2026-88386.

Container imageDigestPackageFixed in
zabbix/zabbix-web-service:ubuntu-7.0.23915b3183e054
libsndfile@1.2.2-1ubuntu5.24.04.1
no fix listed

Open the chart page →

14,380
difydoubanVerified publisher0.10.01 of 6See more

dify douban 0.10.0

1 of the 6 container images this version deploys carry CVE-2026-88386.

Container imageDigestPackageFixed in
langgenius/dify-plugin-daemon:0.5.1-local8269050f192e
libsndfile@1.2.2-1ubuntu5.24.04.1
no fix listed

Open the chart page →

80,986
difydify-helmVerified publisher0.38.01 of 11See more

dify dify-helm 0.38.0

1 of the 11 container images this version deploys carry CVE-2026-88386.

Container imageDigestPackageFixed in
langgenius/dify-plugin-daemon:0.6.3-local3c694329357b
libsndfile@1.2.2-1ubuntu5.24.04.1
no fix listed

Open the chart page →

70,707
zabbixcetic3.1.31 of 5See more

zabbix cetic 3.1.3

1 of the 5 container images this version deploys carry CVE-2026-88386.

Container imageDigestPackageFixed in
zabbix/zabbix-web-service:ubuntu-6.0.8ee4baa872280
libsndfile@1.0.31-2build1
no fix listed

Open the chart page →

34,675
gotenbergmaikumoriVerified publisher1.25.01 of 1See more

gotenberg maikumori 1.25.0

1 of the 1 container images this version deploys carry CVE-2026-88386.

Container imageDigestPackageFixed in
gotenberg/gotenberg:8.36.087c16b9f3642
libsndfile@1.2.2-2+deb13u1
no fix listed

Open the chart page →

11,331
hadoopbigdata-chartsVerified publisher1.0.11 of 2See more

hadoop bigdata-charts 1.0.1

1 of the 2 container images this version deploys carry CVE-2026-88386.

Container imageDigestPackageFixed in
5200710/hadoop:3.2.3-java8092d3088a5fb
libsndfile@1.0.28-7ubuntu0.2
no fix listed

Open the chart page →

12,602
selenium-gridselenium-grid0.59.12 of 4See more

selenium-grid selenium-grid 0.59.1

2 of the 4 container images this version deploys carry CVE-2026-88386.

Container imageDigestPackageFixed in
selenium/node-chrome:4.48.0-202609055ac71fd8dd1e
libsndfile@1.2.2-1ubuntu5.24.04.1
no fix listed
selenium/node-firefox:4.48.0-2026090574a5c1c90f95
libsndfile@1.2.2-1ubuntu5.24.04.1
no fix listed

Open the chart page →

8,174
photoprismandrenarchyVerified publisher8.15.01 of 1See more

photoprism andrenarchy 8.15.0

1 of the 1 container images this version deploys carry CVE-2026-88386.

Container imageDigestPackageFixed in
photoprism/photoprism:260728958642220223
libsndfile@1.2.2-4
no fix listed

Open the chart page →

48,049
karakeephelmforgeVerified publisher1.2.91 of 3See more

karakeep helmforge 1.2.9

1 of the 3 container images this version deploys carry CVE-2026-88386.

Container imageDigestPackageFixed in
ghcr.io/karakeep-app/karakeep:0.33.2b069e4307dec
libsndfile@1.2.0-1+deb12u1
no fix listed

Open the chart page →

10,458
local-ailocalai3.4.21 of 1See more

local-ai localai 3.4.2

1 of the 1 container images this version deploys carry CVE-2026-88386.

Container imageDigestPackageFixed in
quay.io/go-skynet/local-ai:latest0632c21ddbe4
libsndfile@1.2.2-1ubuntu5.24.04.1
no fix listed

Open the chart page →

4,003
hermes-agenthermes-agentVerified publisher1.16.01 of 1See more

hermes-agent hermes-agent 1.16.0

1 of the 1 container images this version deploys carry CVE-2026-88386.

Container imageDigestPackageFixed in
nousresearch/hermes-agent:v2026.9.24fca358f12efd
libsndfile@1.2.2-2+deb13u1
no fix listed

Open the chart page →

5,727
coreinstill-aiOfficialVerified publisher0.1.751 of 15See more

core instill-ai 0.1.75

1 of the 15 container images this version deploys carry CVE-2026-88386.

Container imageDigestPackageFixed in
instill/artifact-backend:b28766ac4a393e601ed
libsndfile@1.2.2-2+deb13u1
no fix listed

Open the chart page →

32,167
oesopsmxVerified publisher4.0.321 of 25See more

oes opsmx 4.0.32

1 of the 25 container images this version deploys carry CVE-2026-88386.

Container imageDigestPackageFixed in
quay.io/opsmxpublic/spin-sample-pipeline:v1.0.1c6a934439421
libsndfile@1.0.25-10ubuntu0.16.04.2
no fix listed

Open the chart page →

103,026
browserless-chromesagikazarmarkVerified publisher0.0.51 of 1See more

browserless-chrome sagikazarmark 0.0.5

1 of the 1 container images this version deploys carry CVE-2026-88386.

Container imageDigestPackageFixed in
browserless/chrome:1.48.0-chrome-stablec81ae5585b47
libsndfile@1.0.28-7ubuntu0.1
no fix listed

Open the chart page →

103,899
paperless-ngxadnoctemVerified publisher0.4.21 of 5See more

paperless-ngx adnoctem 0.4.2

1 of the 5 container images this version deploys carry CVE-2026-88386.

Container imageDigestPackageFixed in
gotenberg/gotenberg:8.36.087c16b9f3642
libsndfile@1.2.2-2+deb13u1
no fix listed

Open the chart page →

22,152
hermes-agentankra-chartsVerified publisher0.3.11 of 1See more

hermes-agent ankra-charts 0.3.1

1 of the 1 container images this version deploys carry CVE-2026-88386.

Container imageDigestPackageFixed in
nousresearch/hermes-agent:v2026.8.27e0df6adebddf
libsndfile@1.2.2-2+deb13u1
no fix listed

Open the chart page →

6,449
dltbrokerassist-iot-distributed-broker0.2.02 of 9See more

dltbroker assist-iot-distributed-broker 0.2.0

2 of the 9 container images this version deploys carry CVE-2026-88386.

Container imageDigestPackageFixed in
hyperledger/fabric-ca-tools:latest4ce6f43ded2e
libsndfile@1.0.25-10ubuntu0.16.04.1
no fix listed
hyperledger/fabric-couchdb:0.4.15f6c724592abf
libsndfile@1.0.25-10ubuntu0.16.04.1
no fix listed

Open the chart page →

198,835
dltloggingassist-iot-logging-auditing0.2.02 of 9See more

dltlogging assist-iot-logging-auditing 0.2.0

2 of the 9 container images this version deploys carry CVE-2026-88386.

Container imageDigestPackageFixed in
hyperledger/fabric-ca-tools:latest4ce6f43ded2e
libsndfile@1.0.25-10ubuntu0.16.04.1
no fix listed
hyperledger/fabric-couchdb:0.4.15f6c724592abf
libsndfile@1.0.25-10ubuntu0.16.04.1
no fix listed

Open the chart page →

198,816
music-assistantbdclark-helm-chartsVerified publisher0.4.131 of 1See more

music-assistant bdclark-helm-charts 0.4.13

1 of the 1 container images this version deploys carry CVE-2026-88386.

Container imageDigestPackageFixed in
ghcr.io/music-assistant/server:2.10.3885872224fa5
libsndfile@1.2.2-2+deb13u1
no fix listed

Open the chart page →

3,998
tensorflow-notebookcloudnativeapp0.1.21 of 1See more

tensorflow-notebook cloudnativeapp 0.1.2

1 of the 1 container images this version deploys carry CVE-2026-88386.

Container imageDigestPackageFixed in
tensorflow/tensorflow:1.6.0-devel1e3172090703
libsndfile@1.0.25-10ubuntu0.16.04.1
no fix listed

Open the chart page →

97,834
mealiedeimosfr-charts1.0.151 of 1See more

mealie deimosfr-charts 1.0.15

1 of the 1 container images this version deploys carry CVE-2026-88386.

Container imageDigestPackageFixed in
ghcr.io/mealie-recipes/mealie:v3.24.00b08ac3a9f0a
libsndfile@1.2.2-2+deb13u1
no fix listed

Open the chart page →

4,440
bazarrgeek-cookbookVerified publisher10.6.21 of 1See more

bazarr geek-cookbook 10.6.2

1 of the 1 container images this version deploys carry CVE-2026-88386.

Container imageDigestPackageFixed in
ghcr.io/k8s-at-home/bazarr:v1.0.3fdb5501cdfb9
libsndfile@1.0.28-7ubuntu0.1
no fix listed

Open the chart page →

18,041
calibregeek-cookbookVerified publisher5.4.21 of 1See more

calibre geek-cookbook 5.4.2

1 of the 1 container images this version deploys carry CVE-2026-88386.

Container imageDigestPackageFixed in
linuxserver/calibre:version-v5.21.0a847b5b2d860
libsndfile@1.0.28-4ubuntu0.18.04.1
no fix listed

Open the chart page →

23,821
games-on-whalesgeek-cookbookVerified publisher1.8.23 of 7See more

games-on-whales geek-cookbook 1.8.2

3 of the 7 container images this version deploys carry CVE-2026-88386.

Container imageDigestPackageFixed in
ghcr.io/games-on-whales/pulseaudio:1.0.0f34f98405c10
libsndfile@1.0.28-7ubuntu0.1
no fix listed
ghcr.io/games-on-whales/retroarch:1.0.0103fbcec2314
libsndfile@1.0.28-7ubuntu0.1
no fix listed
ghcr.io/games-on-whales/steam:1.0.09b6105be7ad0
libsndfile@1.0.28-7ubuntu0.1
no fix listed

Open the chart page →

115,195
stashgeek-cookbookVerified publisher3.4.21 of 1See more

stash geek-cookbook 3.4.2

1 of the 1 container images this version deploys carry CVE-2026-88386.

Container imageDigestPackageFixed in
stashapp/stash:latest24dbd7607174
libsndfile@1.0.28-7
no fix listed

Open the chart page →

16,382
valheimgeek-cookbookVerified publisher4.4.21 of 1See more

valheim geek-cookbook 4.4.2

1 of the 1 container images this version deploys carry CVE-2026-88386.

Container imageDigestPackageFixed in
ghcr.io/lloesche/valheim-server:latestc885aa902faf
libsndfile@1.2.2-2+deb13u1
no fix listed

Open the chart page →

2,896
castopodh2mVerified publisher1.12.101 of 3See more

castopod h2m 1.12.10

1 of the 3 container images this version deploys carry CVE-2026-88386.

Container imageDigestPackageFixed in
castopod/castopod:1.12.101fd37280cbb2
libsndfile@1.2.0-1
no fix listed

Open the chart page →

10,706
uptime-kumahelmforgeVerified publisher1.5.131 of 1See more

uptime-kuma helmforge 1.5.13

1 of the 1 container images this version deploys carry CVE-2026-88386.

Container imageDigestPackageFixed in
louislam/uptime-kuma:2.5.4917318f9d7be
libsndfile@1.2.0-1+deb12u1
no fix listed

Open the chart page →

31,895
difykubeblocksVerified publisher0.5.11 of 5See more

dify kubeblocks 0.5.1

1 of the 5 container images this version deploys carry CVE-2026-88386.

Container imageDigestPackageFixed in
langgenius/dify-api:0.6.11fca918260dd6
libsndfile@1.2.0-1
no fix listed

Open the chart page →

21,366
flaresolverrlib42Verified publisher2.0.01 of 1See more

flaresolverr lib42 2.0.0

1 of the 1 container images this version deploys carry CVE-2026-88386.

Container imageDigestPackageFixed in
ghcr.io/flaresolverr/flaresolverr:v3.4.0ab535d1fef5d
libsndfile@1.2.0-1
no fix listed

Open the chart page →

37,110
music-assistant-serverlmatfyVerified publisher0.1.91 of 1See more

music-assistant-server lmatfy 0.1.9

1 of the 1 container images this version deploys carry CVE-2026-88386.

Container imageDigestPackageFixed in
ghcr.io/music-assistant/server:2.7.53522e8a7a8f0
libsndfile@1.2.0-1+deb12u1
no fix listed

Open the chart page →

7,788
flaresolverrm0nsterrr-flaresolverrVerified publisher2.4.11 of 1See more

flaresolverr m0nsterrr-flaresolverr 2.4.1

1 of the 1 container images this version deploys carry CVE-2026-88386.

Container imageDigestPackageFixed in
ghcr.io/flaresolverr/flaresolverr:v3.5.2c80ae007ce2c
libsndfile@1.2.0-1+deb12u1
no fix listed

Open the chart page →

7,609
palworldpalworld-server-chartVerified publisher2.7.11 of 1See more

palworld palworld-server-chart 2.7.1

1 of the 1 container images this version deploys carry CVE-2026-88386.

Container imageDigestPackageFixed in
thijsvanloef/palworld-server-docker:v2.7.1401d3eb5c053
libsndfile@1.2.2-2+deb13u1
no fix listed

Open the chart page →

4,043
peertubepeertubeVerified publisher0.1.31 of 1See more

peertube peertube 0.1.3

1 of the 1 container images this version deploys carry CVE-2026-88386.

Container imageDigestPackageFixed in
chocobozzz/peertube:v8.1.5052712130691
libsndfile@1.2.2-2+deb13u1
no fix listed

Open the chart page →

7,681
napcatredish101Verified publisher0.1.31 of 1See more

napcat redish101 0.1.3

1 of the 1 container images this version deploys carry CVE-2026-88386.

Container imageDigestPackageFixed in
mlikiowa/napcat-docker:latest2cc70b45244a
libsndfile@1.0.31-2ubuntu0.1
no fix listed

Open the chart page →

72,283
uptime-kumasb-helm-charts0.4.01 of 1See more

uptime-kuma sb-helm-charts 0.4.0

1 of the 1 container images this version deploys carry CVE-2026-88386.

Container imageDigestPackageFixed in
louislam/uptime-kuma:2.0.24c364ef96aad
libsndfile@1.2.0-1+deb12u1
no fix listed

Open the chart page →

40,372
smarter-demosmarterOfficialVerified publisher0.1.53 of 7See more

smarter-demo smarter 0.1.5

3 of the 7 container images this version deploys carry CVE-2026-88386.

Container imageDigestPackageFixed in
ghcr.io/smarter-project/audio-client:v3.1.23c8375dc5487
libsndfile@1.0.28-7ubuntu0.1
no fix listed
ghcr.io/smarter-project/gstreamer:v1.0.25ecb16015aa8
libsndfile@1.0.28-7ubuntu0.1
no fix listed
ghcr.io/smarter-project/image-detector:v2.5.31dcca70c6446
libsndfile@1.0.28-7ubuntu0.1
no fix listed

Open the chart page →

260,658
gotenbergadnoctemVerified publisher0.5.01 of 1See more

gotenberg adnoctem 0.5.0

1 of the 1 container images this version deploys carry CVE-2026-88386.

Container imageDigestPackageFixed in
gotenberg/gotenberg:8.37.0f29984bd1e22
libsndfile@1.2.2-2+deb13u1
no fix listed

Open the chart page →

7,105
uptime-kumaadnoctemVerified publisher0.4.11 of 1See more

uptime-kuma adnoctem 0.4.1

1 of the 1 container images this version deploys carry CVE-2026-88386.

Container imageDigestPackageFixed in
louislam/uptime-kuma:2.5.4917318f9d7be
libsndfile@1.2.0-1+deb12u1
no fix listed

Open the chart page →

31,895
flaresolverralexmorbo-flaresolverrVerified publisher0.2.01 of 1See more

flaresolverr alexmorbo-flaresolverr 0.2.0

1 of the 1 container images this version deploys carry CVE-2026-88386.

Container imageDigestPackageFixed in
flaresolverr/flaresolverr:v3.5.0139dfee1c6f8
libsndfile@1.2.0-1+deb12u1
no fix listed

Open the chart page →

29,008
music-assistant-serverandibraeuVerified publisher2.1.21 of 1See more

music-assistant-server andibraeu 2.1.2

1 of the 1 container images this version deploys carry CVE-2026-88386.

Container imageDigestPackageFixed in
ghcr.io/music-assistant/server:2.9.950666a6f8d7f
libsndfile@1.2.0-1+deb12u1
no fix listed

Open the chart page →

6,286
games-on-whalesangelnu2.0.04 of 7See more

games-on-whales angelnu 2.0.0

4 of the 7 container images this version deploys carry CVE-2026-88386.

Container imageDigestPackageFixed in
andrewmackrodt/firefox-x11:142.0.1-r133f9080470c9
libsndfile@1.0.31-2ubuntu0.2
no fix listed
ghcr.io/games-on-whales/pulseaudio:1.0.0f34f98405c10
libsndfile@1.0.28-7ubuntu0.1
no fix listed
ghcr.io/games-on-whales/retroarch:1.0.0103fbcec2314
libsndfile@1.0.28-7ubuntu0.1
no fix listed
ghcr.io/games-on-whales/steam:1.0.09b6105be7ad0
libsndfile@1.0.28-7ubuntu0.1
no fix listed

Open the chart page →

122,528
platform-apiappscodeVerified publisher2026.9.111 of 3See more

platform-api appscode 2026.9.11

1 of the 3 container images this version deploys carry CVE-2026-88386.

Container imageDigestPackageFixed in
ghcr.io/appscode/gotenberg:8.25f9104080d9a7
libsndfile@1.2.2-2+b1
no fix listed

Open the chart page →

39,390
arma-reforgerarma-reforger0.5.31 of 8See more

arma-reforger arma-reforger 0.5.3

1 of the 8 container images this version deploys carry CVE-2026-88386.

Container imageDigestPackageFixed in
ghcr.io/brittonhayes/arma-reforger:latest6fde1edc0983
libsndfile@1.0.28-7ubuntu0.1
no fix listed

Open the chart page →

23,780
dltkvassist-iot-data-integrity-verification0.2.02 of 9See more

dltkv assist-iot-data-integrity-verification 0.2.0

2 of the 9 container images this version deploys carry CVE-2026-88386.

Container imageDigestPackageFixed in
hyperledger/fabric-ca-tools:latest4ce6f43ded2e
libsndfile@1.0.25-10ubuntu0.16.04.1
no fix listed
hyperledger/fabric-couchdb:0.4.15f6c724592abf
libsndfile@1.0.25-10ubuntu0.16.04.1
no fix listed

Open the chart page →

198,835
dltflassist-iot-dlt-based-fl0.2.02 of 9See more

dltfl assist-iot-dlt-based-fl 0.2.0

2 of the 9 container images this version deploys carry CVE-2026-88386.

Container imageDigestPackageFixed in
hyperledger/fabric-ca-tools:latest4ce6f43ded2e
libsndfile@1.0.25-10ubuntu0.16.04.1
no fix listed
hyperledger/fabric-couchdb:0.4.15f6c724592abf
libsndfile@1.0.25-10ubuntu0.16.04.1
no fix listed

Open the chart page →

198,835
videoaugmentationassist-iot-video-augmentation0.1.01 of 3See more

videoaugmentation assist-iot-video-augmentation 0.1.0

1 of the 3 container images this version deploys carry CVE-2026-88386.

Container imageDigestPackageFixed in
assistiot/video_augmentation:runner-cpu-lateste5ae539ce2cb
libsndfile@1.0.28-7ubuntu0.2
no fix listed

Open the chart page →

80,157
mealiebdclark-helm-chartsVerified publisher0.1.151 of 1See more

mealie bdclark-helm-charts 0.1.15

1 of the 1 container images this version deploys carry CVE-2026-88386.

Container imageDigestPackageFixed in
ghcr.io/mealie-recipes/mealie:v3.25.16066c29eca95
libsndfile@1.2.2-2+deb13u1
no fix listed

Open the chart page →

4,440
flaresolverrbrandan-schmitz-helm-chartsVerified publisher1.4.01 of 1See more

flaresolverr brandan-schmitz-helm-charts 1.4.0

1 of the 1 container images this version deploys carry CVE-2026-88386.

Container imageDigestPackageFixed in
flaresolverr/flaresolverr:v3.5.0139dfee1c6f8
libsndfile@1.2.0-1+deb12u1
no fix listed

Open the chart page →

29,008

Container images carrying it

115 by charts deploying them

A fixed version is listed for 0 of the 1 affected package.

Container imageDigestPackageFixed inUsed by
ghcr.io/linuxserver/remmina:version-1.2.0-rcgit.29dfsg-1ubuntu105955792e00f
libsndfile@1.0.28-4ubuntu0.18.04.2
no fix listed
1
ghcr.io/linuxserver/sqlitebrowser:version-3.12.2-02876202105241947ubuntu18.04.1426e79828c4b
libsndfile@1.0.28-4ubuntu0.18.04.2
no fix listed
1
ghcr.io/lloesche/valheim-server:latestc885aa902faf
libsndfile@1.2.2-2+deb13u1
no fix listed
1
ghcr.io/mealie-recipes/mealie:v3.24.00b08ac3a9f0a
libsndfile@1.2.2-2+deb13u1
no fix listed
1
ghcr.io/mealie-recipes/mealie:v3.25.16066c29eca95
libsndfile@1.2.2-2+deb13u1
no fix listed
1
ghcr.io/music-assistant/server:2.7.53522e8a7a8f0
libsndfile@1.2.0-1+deb12u1
no fix listed
1
ghcr.io/music-assistant/server:2.9.950666a6f8d7f
libsndfile@1.2.0-1+deb12u1
no fix listed
1
ghcr.io/music-assistant/server:2.10.3885872224fa5
libsndfile@1.2.2-2+deb13u1
no fix listed
1
ghcr.io/music-assistant/server:2.8.7eef3ee7810d0
libsndfile@1.2.0-1+deb12u1
no fix listed
1
ghcr.io/smarter-project/audio-client:v3.1.23c8375dc5487
libsndfile@1.0.28-7ubuntu0.1
no fix listed
1
ghcr.io/smarter-project/gstreamer:v1.0.25ecb16015aa8
libsndfile@1.0.28-7ubuntu0.1
no fix listed
1
ghcr.io/smarter-project/image-detector:v2.5.31dcca70c6446
libsndfile@1.0.28-7ubuntu0.1
no fix listed
1
ghcr.io/yurymkomarov/docker/kubernetes-kiosk-chromium:0.1.27bff29dcec72
libsndfile@1.2.0-1+deb12u1
no fix listed
1
quay.io/go-skynet/local-ai:latest0632c21ddbe4
libsndfile@1.2.2-1ubuntu5.24.04.1
no fix listed
1
quay.io/opsmxpublic/spin-sample-pipeline:v1.0.1c6a934439421
libsndfile@1.0.25-10ubuntu0.16.04.2
no fix listed
1

syft 1.42.1 · advisories as of 26 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.