StackRadar

CVE-2026-88386

Medium

Advisory

Published 24 Sept 2026In the index since 26 Sept 2026
Severity
Medium
worst across findings
CVSS
5.5
base score, highest
EPSS
0.001
3rd percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
126
of 17,879 indexed, latest versions
Container images
115
deployed by those charts
Fix available
None
affected package

The matching OSV records carry no description.

Carried by container images the latest versions of 126 of 17,879 indexed charts deploy, on 115 images.

Affected packageAffected versionsFixed inImages
libsndfiledeb1.0.25-7ubuntu2.2, 1.0.25-10ubuntu0.16.04.1, 1.0.25-10ubuntu0.16.04.2, 1.0.28-4+16 moreno fix listed115
OSV records
UBUNTU-CVE-2026-88386DEBIAN-CVE-2026-88386

Charts affected

126 by stars
ChartLatestAffected imagesRadar Score
gotenbergbysamioVerified publisher0.2.01 of 1See more

gotenberg bysamio 0.2.0

1 of the 1 container images this version deploys carry CVE-2026-88386.

Container imageDigestPackageFixed in
gotenberg/gotenberg:8-chromium0d28ae9a9644
libsndfile@1.2.2-2+deb13u1
no fix listed

Open the chart page →

6,340
distributed-tensorflowcloudnativeapp0.1.11 of 1See more

distributed-tensorflow cloudnativeapp 0.1.1

1 of the 1 container images this version deploys carry CVE-2026-88386.

Container imageDigestPackageFixed in
cheyang/distributed-tf:1.6.046cc34755493
libsndfile@1.0.25-10ubuntu0.16.04.1
no fix listed

Open the chart page →

97,834
hlf-couchdbcloudnativeapp1.0.61 of 1See more

hlf-couchdb cloudnativeapp 1.0.6

1 of the 1 container images this version deploys carry CVE-2026-88386.

Container imageDigestPackageFixed in
hyperledger/fabric-couchdb:0.4.10c65891b6c237
libsndfile@1.0.25-10ubuntu0.16.04.1
no fix listed

Open the chart page →

94,907
webpagetest-agentcloudnativeapp0.2.01 of 1See more

webpagetest-agent cloudnativeapp 0.2.0

1 of the 1 container images this version deploys carry CVE-2026-88386.

Container imageDigestPackageFixed in
timothyclarke/wptagent:2018-01-2322c41e5ca7e2
libsndfile@1.0.25-10ubuntu0.16.04.1
no fix listed

Open the chart page →

139,973
ms-emails-grpccodedesignplus-chartsVerified publisher0.0.241 of 1See more

ms-emails-grpc codedesignplus-charts 0.0.24

1 of the 1 container images this version deploys carry CVE-2026-88386.

Container imageDigestPackageFixed in
codedesignplus/ms-emails-grpc:latest4fc116f5e879
libsndfile@1.2.0-1+deb12u1
no fix listed

Open the chart page →

4,295
ms-emails-restcodedesignplus-chartsVerified publisher0.0.241 of 1See more

ms-emails-rest codedesignplus-charts 0.0.24

1 of the 1 container images this version deploys carry CVE-2026-88386.

Container imageDigestPackageFixed in
codedesignplus/ms-emails-rest:latest7629e746a5b3
libsndfile@1.2.0-1+deb12u1
no fix listed

Open the chart page →

4,295
csghubcsghubVerified publisher2.5.02 of 34See more

csghub csghub 2.5.0

2 of the 34 container images this version deploys carry CVE-2026-88386.

Container imageDigestPackageFixed in
opencsghq/agenticflow:ee-v0.6.5-241cba9c366f1
libsndfile@1.2.0-1+deb12u1
no fix listed
opencsghq/csgbot:v0.6.9-ee7d0271e26521
libsndfile@1.2.2-2+deb13u1
no fix listed

Open the chart page →

52,355
damap-chartdamapVerified publisher0.3.11 of 5See more

damap-chart damap 0.3.1

1 of the 5 container images this version deploys carry CVE-2026-88386.

Container imageDigestPackageFixed in
gotenberg/gotenberg:8f29984bd1e22
libsndfile@1.2.2-2+deb13u1
no fix listed

Open the chart page →

14,236
difydify1.0.01 of 4See more

dify dify 1.0.0

1 of the 4 container images this version deploys carry CVE-2026-88386.

Container imageDigestPackageFixed in
langgenius/dify-plugin-daemon:main-local7d2fb04baf44
libsndfile@1.2.2-1ubuntu5.24.04.1
no fix listed

Open the chart page →

55,608
photoprismdjjudas21Verified publisher99.99.991 of 1See more

photoprism djjudas21 99.99.99

1 of the 1 container images this version deploys carry CVE-2026-88386.

Container imageDigestPackageFixed in
photoprism/photoprism:240711-cefc6fd632ca74
libsndfile@1.2.2-1ubuntu5
no fix listed

Open the chart page →

98,886
uptime-kumaegebackVerified publisher2.0.121 of 1See more

uptime-kuma egeback 2.0.12

1 of the 1 container images this version deploys carry CVE-2026-88386.

Container imageDigestPackageFixed in
louislam/uptime-kuma:2.5.0a8610b3b4c38
libsndfile@1.2.0-1+deb12u1
no fix listed

Open the chart page →

32,035
business-api-ecosystemfiware1.1.01 of 4See more

business-api-ecosystem fiware 1.1.0

1 of the 4 container images this version deploys carry CVE-2026-88386.

Container imageDigestPackageFixed in
fiware/biz-ecosystem-charging-backend:11.7.029456835bb2c
libsndfile@1.0.28-7ubuntu0.3
no fix listed

Open the chart page →

117,602
facetflanksourceVerified publisher0.1.731 of 1See more

facet flanksource 0.1.73

1 of the 1 container images this version deploys carry CVE-2026-88386.

Container imageDigestPackageFixed in
ghcr.io/flanksource/facet:0.1.73a0323f4283e5
libsndfile@1.2.0-1+deb12u1
no fix listed

Open the chart page →

22,391
fluxer-helmfluxer-helm0.3.02 of 18See more

fluxer-helm fluxer-helm 0.3.0

2 of the 18 container images this version deploys carry CVE-2026-88386.

Container imageDigestPackageFixed in
ghcr.io/fluxerapp/fluxer-api:2026.820.164808f683541d5374
libsndfile@1.2.0-1+deb12u1
no fix listed
ghcr.io/fluxerapp/fluxer-media-proxy:2026.820.164955ced7544e6b3f
libsndfile@1.2.2-2+deb13u1
no fix listed

Open the chart page →

29,161
airsonicgeek-cookbookVerified publisher6.4.21 of 1See more

airsonic geek-cookbook 6.4.2

1 of the 1 container images this version deploys carry CVE-2026-88386.

Container imageDigestPackageFixed in
airsonicadvanced/airsonic-advanced:latestf7cbafac2806
libsndfile@1.0.28-7
no fix listed

Open the chart page →

18,549
booksonic-airgeek-cookbookVerified publisher6.4.21 of 1See more

booksonic-air geek-cookbook 6.4.2

1 of the 1 container images this version deploys carry CVE-2026-88386.

Container imageDigestPackageFixed in
ghcr.io/linuxserver/booksonic-air:version-v2009.1.0baa4fa9549dc
libsndfile@1.0.28-4ubuntu0.18.04.2
no fix listed

Open the chart page →

19,696
mopidygeek-cookbookVerified publisher0.1.21 of 1See more

mopidy geek-cookbook 0.1.2

1 of the 1 container images this version deploys carry CVE-2026-88386.

Container imageDigestPackageFixed in
jaedb/iris:latest048cfbf58d57
libsndfile@1.2.0-1
no fix listed

Open the chart page →

13,912
openkmgeek-cookbookVerified publisher4.2.01 of 1See more

openkm geek-cookbook 4.2.0

1 of the 1 container images this version deploys carry CVE-2026-88386.

Container imageDigestPackageFixed in
openkm/openkm-ce:6.3.113bc465a7461b
libsndfile@1.0.28-7ubuntu0.1
no fix listed

Open the chart page →

28,864
photoprismgeek-cookbookVerified publisher7.2.01 of 1See more

photoprism geek-cookbook 7.2.0

1 of the 1 container images this version deploys carry CVE-2026-88386.

Container imageDigestPackageFixed in
photoprism/photoprism:220629-jammy2954334adbda
libsndfile@1.0.31-2build1
no fix listed

Open the chart page →

20,204
teedygeek-cookbookVerified publisher6.2.01 of 1See more

teedy geek-cookbook 6.2.0

1 of the 1 container images this version deploys carry CVE-2026-88386.

Container imageDigestPackageFixed in
sismics/docs:v1.10f4b0ef019cf1
libsndfile@1.0.28-4ubuntu0.18.04.2
no fix listed

Open the chart page →

27,621
xtevegeek-cookbookVerified publisher8.4.21 of 1See more

xteve geek-cookbook 8.4.2

1 of the 1 container images this version deploys carry CVE-2026-88386.

Container imageDigestPackageFixed in
ghcr.io/k8s-at-home/xteve:v2.2.0.200292b3614670f
libsndfile@1.0.28-7ubuntu0.1
no fix listed

Open the chart page →

18,637
geomapfishgeomapfish0.8.01 of 3See more

geomapfish geomapfish 0.8.0

1 of the 3 container images this version deploys carry CVE-2026-88386.

Container imageDigestPackageFixed in
camptocamp/geomapfishapp-geoportal:latestae874f70cc16
libsndfile@1.2.2-1ubuntu5.24.04.1
no fix listed

Open the chart page →

6,716
web-checkhajowielandVerified publisher1.0.11 of 1See more

web-check hajowieland 1.0.1

1 of the 1 container images this version deploys carry CVE-2026-88386.

Container imageDigestPackageFixed in
ghcr.io/lissy93/web-check:latest7e2ef5261764
libsndfile@1.2.0-1+deb12u1
no fix listed

Open the chart page →

6,917
7dtdhelm-7dtd0.1.01 of 1See more

7dtd helm-7dtd 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-88386.

Container imageDigestPackageFixed in
vinanrra/7dtd-server:v0.4.4f9534490bd2b
libsndfile@1.0.28-4ubuntu0.18.04.2
no fix listed

Open the chart page →

69,483
archiveboxhelmforgeVerified publisher1.1.121 of 1See more

archivebox helmforge 1.1.12

1 of the 1 container images this version deploys carry CVE-2026-88386.

Container imageDigestPackageFixed in
archivebox/archivebox:0.7.41a5a37331091
libsndfile@1.2.0-1+deb12u1
no fix listed

Open the chart page →

8,164
castopodhelmforgeVerified publisher1.2.71 of 3See more

castopod helmforge 1.2.7

1 of the 3 container images this version deploys carry CVE-2026-88386.

Container imageDigestPackageFixed in
castopod/castopod:1.15.54e4f0440520f
libsndfile@1.2.2-2+b1
no fix listed

Open the chart page →

9,875
discount-bandithelmforgeVerified publisher2.0.81 of 3See more

discount-bandit helmforge 2.0.8

1 of the 3 container images this version deploys carry CVE-2026-88386.

Container imageDigestPackageFixed in
cybrarist/discount-bandit:v4.0.4e9e2447ac666
libsndfile@1.2.2-2+deb13u1
no fix listed

Open the chart page →

31,728
paperlesshpVerified publisher0.1.21 of 5See more

paperless hp 0.1.2

1 of the 5 container images this version deploys carry CVE-2026-88386.

Container imageDigestPackageFixed in
gotenberg/gotenberg:8.3467097317623a
libsndfile@1.2.2-2+deb13u1
no fix listed

Open the chart page →

28,943
hydrahydraVerified publisher0.9.51 of 2See more

hydra hydra 0.9.5

1 of the 2 container images this version deploys carry CVE-2026-88386.

Container imageDigestPackageFixed in
ghcr.io/smarter-project/hydra/isolated-vm:main4457b79b24cd
libsndfile@1.2.0-1+deb12u1
no fix listed

Open the chart page →

9,708
isolated-vmhydraVerified publisher0.9.41 of 1See more

isolated-vm hydra 0.9.4

1 of the 1 container images this version deploys carry CVE-2026-88386.

Container imageDigestPackageFixed in
ghcr.io/smarter-project/hydra/isolated-vm:main4457b79b24cd
libsndfile@1.2.0-1+deb12u1
no fix listed

Open the chart page →

8,304
itm-servicesintelVerified publisher2.0.01 of 8See more

itm-services intel 2.0.0

1 of the 8 container images this version deploys carry CVE-2026-88386.

Container imageDigestPackageFixed in
intel/dlstreamer-pipeline-server:2022.1.1-ubuntu20aa8f5483a2ef
libsndfile@1.0.28-7ubuntu0.1
no fix listed

Open the chart page →

92,377
jasperjasperVerified publisher1.0.2071 of 2See more

jasper jasper 1.0.207

1 of the 2 container images this version deploys carry CVE-2026-88386.

Container imageDigestPackageFixed in
ghcr.io/cjmalloy/jasper:v1.3.282726a947bb65b
libsndfile@1.2.0-1+deb12u1
no fix listed

Open the chart page →

9,930
valheim-serverk8s-chartsVerified publisher1.3.01 of 1See more

valheim-server k8s-charts 1.3.0

1 of the 1 container images this version deploys carry CVE-2026-88386.

Container imageDigestPackageFixed in
mbround18/valheim:3.1.070bd4da591cd
libsndfile@1.0.31-2ubuntu0.2
no fix listed

Open the chart page →

66,229
flaresolverrk8s-home-lab-repo6.2.01 of 1See more

flaresolverr k8s-home-lab-repo 6.2.0

1 of the 1 container images this version deploys carry CVE-2026-88386.

Container imageDigestPackageFixed in
flaresolverr/flaresolverr:v3.5.0139dfee1c6f8
libsndfile@1.2.0-1+deb12u1
no fix listed

Open the chart page →

29,008
music-assistantkarljorgensen0.1.31 of 1See more

music-assistant karljorgensen 0.1.3

1 of the 1 container images this version deploys carry CVE-2026-88386.

Container imageDigestPackageFixed in
ghcr.io/music-assistant/server:2.8.7eef3ee7810d0
libsndfile@1.2.0-1+deb12u1
no fix listed

Open the chart page →

7,670
kbot-self-hostedkbot-self-hostedVerified publisher0.1.81 of 7See more

kbot-self-hosted kbot-self-hosted 0.1.8

1 of the 7 container images this version deploys carry CVE-2026-88386.

Container imageDigestPackageFixed in
gotenberg/gotenberg:8.30206a6c708fc6
libsndfile@1.2.2-2+deb13u1
no fix listed

Open the chart page →

34,641
flaresolverrkubernetes-homelab-helm-chartsVerified publisher0.1.21 of 1See more

flaresolverr kubernetes-homelab-helm-charts 0.1.2

1 of the 1 container images this version deploys carry CVE-2026-88386.

Container imageDigestPackageFixed in
ghcr.io/flaresolverr/flaresolverr:v3.4.67962759d99d7
libsndfile@1.2.0-1+deb12u1
no fix listed

Open the chart page →

35,641
kubernetes-kiosk-chromiumkubernetes-kiosk-chromium0.1.21 of 1See more

kubernetes-kiosk-chromium kubernetes-kiosk-chromium 0.1.2

1 of the 1 container images this version deploys carry CVE-2026-88386.

Container imageDigestPackageFixed in
ghcr.io/yurymkomarov/docker/kubernetes-kiosk-chromium:0.1.27bff29dcec72
libsndfile@1.2.0-1+deb12u1
no fix listed

Open the chart page →

30,735
uptime-kumalbenicio-communityVerified publisher0.1.11 of 1See more

uptime-kuma lbenicio-community 0.1.1

1 of the 1 container images this version deploys carry CVE-2026-88386.

Container imageDigestPackageFixed in
louislam/uptime-kuma:2.3.29aeb4e51d038
libsndfile@1.2.0-1+deb12u1
no fix listed

Open the chart page →

35,325
linkdinglinkding0.2.31 of 1See more

linkding linkding 0.2.3

1 of the 1 container images this version deploys carry CVE-2026-88386.

Container imageDigestPackageFixed in
sissbruecker/linkding:1.41.0-plusa222fb777e1f
libsndfile@1.2.0-1
no fix listed

Open the chart page →

40,129
ingresslivekit-server1.2.21 of 1See more

ingress livekit-server 1.2.2

1 of the 1 container images this version deploys carry CVE-2026-88386.

Container imageDigestPackageFixed in
livekit/ingress:v1.2.21ab01641b366
libsndfile@1.0.31-2build1
no fix listed

Open the chart page →

11,244
uptime-kumaloeken-at-homeVerified publisher2.3.21 of 1See more

uptime-kuma loeken-at-home 2.3.2

1 of the 1 container images this version deploys carry CVE-2026-88386.

Container imageDigestPackageFixed in
louislam/uptime-kuma:2.3.29aeb4e51d038
libsndfile@1.2.0-1+deb12u1
no fix listed

Open the chart page →

35,325
elastictranscoderluiscajl0.46.02 of 4See more

elastictranscoder luiscajl 0.46.0

2 of the 4 container images this version deploys carry CVE-2026-88386.

Container imageDigestPackageFixed in
elastictranscoder/transcoder:627e21dcb4a0327029e6
libsndfile@1.0.28-4ubuntu0.18.04.1
no fix listed
elastictranscoder/transcoder-handler:627e21dc5b75d19e2733
libsndfile@1.0.28-4ubuntu0.18.04.1
no fix listed

Open the chart page →

59,564
flaresolverrluiscajl0.0.31 of 1See more

flaresolverr luiscajl 0.0.3

1 of the 1 container images this version deploys carry CVE-2026-88386.

Container imageDigestPackageFixed in
ghcr.io/flaresolverr/flaresolverr:latestc80ae007ce2c
libsndfile@1.2.0-1+deb12u1
no fix listed

Open the chart page →

7,609
searchmcp-helmVerified publisher0.1.31 of 2See more

search mcp-helm 0.1.3

1 of the 2 container images this version deploys carry CVE-2026-88386.

Container imageDigestPackageFixed in
ghcr.io/flaresolverr/flaresolverr:latestc80ae007ce2c
libsndfile@1.2.0-1+deb12u1
no fix listed

Open the chart page →

9,286
flaresolverrmedia-servarrVerified publisher0.18.21 of 1See more

flaresolverr media-servarr 0.18.2

1 of the 1 container images this version deploys carry CVE-2026-88386.

Container imageDigestPackageFixed in
ghcr.io/flaresolverr/flaresolverr:v3.5.2c80ae007ce2c
libsndfile@1.2.0-1+deb12u1
no fix listed

Open the chart page →

7,609
cameramedia-streaming-meshVerified publisher0.2.52 of 3See more

camera media-streaming-mesh 0.2.5

2 of the 3 container images this version deploys carry CVE-2026-88386.

Container imageDigestPackageFixed in
ciscolabs/rtsp-client:latesta7b60ec88285
libsndfile@1.0.28-7ubuntu0.1
no fix listed
ciscolabs/rtsp-server:latestb59fc10bb821
libsndfile@1.0.28-7ubuntu0.1
no fix listed

Open the chart page →

19,421
msm-rtspmedia-streaming-meshVerified publisher0.0.22 of 2See more

msm-rtsp media-streaming-mesh 0.0.2

2 of the 2 container images this version deploys carry CVE-2026-88386.

Container imageDigestPackageFixed in
ciscolabs/rtsp-client:latesta7b60ec88285
libsndfile@1.0.28-7ubuntu0.1
no fix listed
ciscolabs/rtsp-server:latestb59fc10bb821
libsndfile@1.0.28-7ubuntu0.1
no fix listed

Open the chart page →

19,421
rtspmedia-streaming-meshVerified publisher0.0.142 of 2See more

rtsp media-streaming-mesh 0.0.14

2 of the 2 container images this version deploys carry CVE-2026-88386.

Container imageDigestPackageFixed in
ciscolabs/rtsp-client:latesta7b60ec88285
libsndfile@1.0.28-7ubuntu0.1
no fix listed
ciscolabs/rtsp-server:latestb59fc10bb821
libsndfile@1.0.28-7ubuntu0.1
no fix listed

Open the chart page →

19,421
filestashmt1905024.0.01 of 1See more

filestash mt190502 4.0.0

1 of the 1 container images this version deploys carry CVE-2026-88386.

Container imageDigestPackageFixed in
machines/filestash:latest2f69ce781400
libsndfile@1.2.2-2+deb13u1
no fix listed

Open the chart page →

3,316

Container images carrying it

115 by charts deploying them

A fixed version is listed for 0 of the 1 affected package.

Container imageDigestPackageFixed inUsed by
ghcr.io/linuxserver/remmina:version-1.2.0-rcgit.29dfsg-1ubuntu105955792e00f
libsndfile@1.0.28-4ubuntu0.18.04.2
no fix listed
1
ghcr.io/linuxserver/sqlitebrowser:version-3.12.2-02876202105241947ubuntu18.04.1426e79828c4b
libsndfile@1.0.28-4ubuntu0.18.04.2
no fix listed
1
ghcr.io/lloesche/valheim-server:latestc885aa902faf
libsndfile@1.2.2-2+deb13u1
no fix listed
1
ghcr.io/mealie-recipes/mealie:v3.24.00b08ac3a9f0a
libsndfile@1.2.2-2+deb13u1
no fix listed
1
ghcr.io/mealie-recipes/mealie:v3.25.16066c29eca95
libsndfile@1.2.2-2+deb13u1
no fix listed
1
ghcr.io/music-assistant/server:2.7.53522e8a7a8f0
libsndfile@1.2.0-1+deb12u1
no fix listed
1
ghcr.io/music-assistant/server:2.9.950666a6f8d7f
libsndfile@1.2.0-1+deb12u1
no fix listed
1
ghcr.io/music-assistant/server:2.10.3885872224fa5
libsndfile@1.2.2-2+deb13u1
no fix listed
1
ghcr.io/music-assistant/server:2.8.7eef3ee7810d0
libsndfile@1.2.0-1+deb12u1
no fix listed
1
ghcr.io/smarter-project/audio-client:v3.1.23c8375dc5487
libsndfile@1.0.28-7ubuntu0.1
no fix listed
1
ghcr.io/smarter-project/gstreamer:v1.0.25ecb16015aa8
libsndfile@1.0.28-7ubuntu0.1
no fix listed
1
ghcr.io/smarter-project/image-detector:v2.5.31dcca70c6446
libsndfile@1.0.28-7ubuntu0.1
no fix listed
1
ghcr.io/yurymkomarov/docker/kubernetes-kiosk-chromium:0.1.27bff29dcec72
libsndfile@1.2.0-1+deb12u1
no fix listed
1
quay.io/go-skynet/local-ai:latest0632c21ddbe4
libsndfile@1.2.2-1ubuntu5.24.04.1
no fix listed
1
quay.io/opsmxpublic/spin-sample-pipeline:v1.0.1c6a934439421
libsndfile@1.0.25-10ubuntu0.16.04.2
no fix listed
1

syft 1.42.1 · advisories as of 26 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.