StackRadar

CVE-2026-88812

Low

Advisory

Published 7 Oct 2026In the index since 8 Oct 2026
Severity
Low
worst across findings
CVSS
2.0
base score, highest
EPSS
—
probability of exploitation
CISA KEV
Not listed
no confirmed exploitation
Charts affected
35
of 18,053 indexed, latest versions
Container images
24
deployed by those charts
Fix available
None
affected package

The matching OSV records carry no description.

Carried by container images the latest versions of 35 of 18,053 indexed charts deploy, on 24 images.

Affected packageAffected versionsFixed inImages
xorg-serverdeb2:21.1.7-3+deb12u8, 2:21.1.7-3+deb12u10, 2:21.1.7-3+deb12u11, 2:21.1.7-3+deb12u12+6 moreno fix listed24
OSV records
DEBIAN-CVE-2026-88812

Charts affected

35 by stars
ChartLatestAffected imagesRadar Score
penpotpenpotOfficialVerified publisher1.11.31 of 5See more

penpot penpot 1.11.3

1 of the 5 container images this version deploys carry CVE-2026-88812.

Container imageDigestPackageFixed in
penpotapp/exporter:2.18.3418232d6ca31
xorg-server@2:21.1.16-1.3+deb13u4+dhi0
no fix listed

Open the chart page →

6,179
oneuptimeoneuptimeOfficialVerified publisher14.0.201 of 7See more

oneuptime oneuptime 14.0.20

1 of the 7 container images this version deploys carry CVE-2026-88812.

Container imageDigestPackageFixed in
oneuptime/probe:releasef6ee7faeee3e
xorg-server@2:21.1.7-3+deb12u13
no fix listed

Open the chart page →

8,713
hermes-agenthermes-agentVerified publisher1.18.01 of 1See more

hermes-agent hermes-agent 1.18.0

1 of the 1 container images this version deploys carry CVE-2026-88812.

Container imageDigestPackageFixed in
nousresearch/hermes-agent:v2026.9.24fca358f12efd
xorg-server@2:21.1.16-1.3+deb13u4
no fix listed

Open the chart page →

6,681
hermes-agentankra-chartsVerified publisher0.3.11 of 1See more

hermes-agent ankra-charts 0.3.1

1 of the 1 container images this version deploys carry CVE-2026-88812.

Container imageDigestPackageFixed in
nousresearch/hermes-agent:v2026.8.27e0df6adebddf
xorg-server@2:21.1.16-1.3+deb13u3
no fix listed

Open the chart page →

7,393
dawarichcogitriVerified publisher2.9.31 of 3See more

dawarich cogitri 2.9.3

1 of the 3 container images this version deploys carry CVE-2026-88812.

Container imageDigestPackageFixed in
freikin/dawarich:1.15.3589e3606b11b
xorg-server@2:21.1.16-1.3+deb13u4
no fix listed

Open the chart page →

6,796
flaresolverrlib42Verified publisher2.0.01 of 1See more

flaresolverr lib42 2.0.0

1 of the 1 container images this version deploys carry CVE-2026-88812.

Container imageDigestPackageFixed in
ghcr.io/flaresolverr/flaresolverr:v3.4.0ab535d1fef5d
xorg-server@2:21.1.7-3+deb12u10
no fix listed

Open the chart page →

40,393
flaresolverrm0nsterrr-flaresolverrVerified publisher2.4.11 of 1See more

flaresolverr m0nsterrr-flaresolverr 2.4.1

1 of the 1 container images this version deploys carry CVE-2026-88812.

Container imageDigestPackageFixed in
ghcr.io/flaresolverr/flaresolverr:v3.5.2c80ae007ce2c
xorg-server@2:21.1.7-3+deb12u13
no fix listed

Open the chart page →

10,854
opentelemetry-demoopentelemetry-helmOfficialVerified publisher0.42.31 of 34See more

opentelemetry-demo opentelemetry-helm 0.42.3

1 of the 34 container images this version deploys carry CVE-2026-88812.

Container imageDigestPackageFixed in
ghcr.io/open-telemetry/demo:3.1.0-load-generatorb130d6cee6cb
xorg-server@2:21.1.7-3+deb12u13
no fix listed

Open the chart page →

24,860
linkwardenadnoctemVerified publisher0.5.11 of 2See more

linkwarden adnoctem 0.5.1

1 of the 2 container images this version deploys carry CVE-2026-88812.

Container imageDigestPackageFixed in
ghcr.io/linkwarden/linkwarden:v2.16.30664c28a039b
xorg-server@2:21.1.7-3+deb12u13
no fix listed

Open the chart page →

4,871
flaresolverralexmorbo-flaresolverrVerified publisher0.2.01 of 1See more

flaresolverr alexmorbo-flaresolverr 0.2.0

1 of the 1 container images this version deploys carry CVE-2026-88812.

Container imageDigestPackageFixed in
flaresolverr/flaresolverr:v3.5.0139dfee1c6f8
xorg-server@2:21.1.7-3+deb12u12
no fix listed

Open the chart page →

32,251
argonix-apiargonix0.6.51 of 4See more

argonix-api argonix 0.6.5

1 of the 4 container images this version deploys carry CVE-2026-88812.

Container imageDigestPackageFixed in
ghcr.io/argonix-io/argonix-api:0.6.5431abcce7c1e
xorg-server@2:21.1.16-1.3+deb13u4
no fix listed

Open the chart page →

5,812
flaresolverrbrandan-schmitz-helm-chartsVerified publisher1.4.01 of 1See more

flaresolverr brandan-schmitz-helm-charts 1.4.0

1 of the 1 container images this version deploys carry CVE-2026-88812.

Container imageDigestPackageFixed in
flaresolverr/flaresolverr:v3.5.0139dfee1c6f8
xorg-server@2:21.1.7-3+deb12u12
no fix listed

Open the chart page →

32,251
ai-agentdevtron0.0.11 of 1See more

ai-agent devtron 0.0.1

1 of the 1 container images this version deploys carry CVE-2026-88812.

Container imageDigestPackageFixed in
quay.io/devtron/ai-agent:0.0.16545dac92173
xorg-server@2:21.1.7-3+deb12u8
no fix listed

Open the chart page →

10,789
ai-agentdevtron-labs0.0.11 of 1See more

ai-agent devtron-labs 0.0.1

1 of the 1 container images this version deploys carry CVE-2026-88812.

Container imageDigestPackageFixed in
quay.io/devtron/ai-agent:0.0.16545dac92173
xorg-server@2:21.1.7-3+deb12u8
no fix listed

Open the chart page →

10,789
opentelemetry-demogpg-dev0.33.81 of 27See more

opentelemetry-demo gpg-dev 0.33.8

1 of the 27 container images this version deploys carry CVE-2026-88812.

Container imageDigestPackageFixed in
ghcr.io/open-telemetry/demo:1.12.0-loadgenerator85c9935ff31b
xorg-server@2:21.1.7-3+deb12u8
no fix listed

Open the chart page →

56,685
archiveboxhelmforgeVerified publisher1.1.131 of 1See more

archivebox helmforge 1.1.13

1 of the 1 container images this version deploys carry CVE-2026-88812.

Container imageDigestPackageFixed in
archivebox/archivebox:0.9.708c21bb233130
xorg-server@2:21.1.16-1.3+deb13u4
no fix listed

Open the chart page →

5,940
dawarichhelmforgeVerified publisher1.0.31 of 4See more

dawarich helmforge 1.0.3

1 of the 4 container images this version deploys carry CVE-2026-88812.

Container imageDigestPackageFixed in
freikin/dawarich:1.15.2e58334ca5697
xorg-server@2:21.1.16-1.3+deb13u4
no fix listed

Open the chart page →

12,092
discount-bandithelmforgeVerified publisher2.0.91 of 3See more

discount-bandit helmforge 2.0.9

1 of the 3 container images this version deploys carry CVE-2026-88812.

Container imageDigestPackageFixed in
cybrarist/discount-bandit:v4.0.4e9e2447ac666
xorg-server@2:21.1.16-1.3+deb13u2
no fix listed

Open the chart page →

35,535
hermes-agenthelmforgeVerified publisher1.0.11 of 1See more

hermes-agent helmforge 1.0.1

1 of the 1 container images this version deploys carry CVE-2026-88812.

Container imageDigestPackageFixed in
nousresearch/hermes-agent:v2026.9.24fca358f12efd
xorg-server@2:21.1.16-1.3+deb13u4
no fix listed

Open the chart page →

6,681
flaresolverrk8s-home-lab-repo6.2.01 of 1See more

flaresolverr k8s-home-lab-repo 6.2.0

1 of the 1 container images this version deploys carry CVE-2026-88812.

Container imageDigestPackageFixed in
flaresolverr/flaresolverr:v3.5.0139dfee1c6f8
xorg-server@2:21.1.7-3+deb12u12
no fix listed

Open the chart page →

32,251
flaresolverrkubernetes-homelab-helm-chartsVerified publisher0.1.21 of 1See more

flaresolverr kubernetes-homelab-helm-charts 0.1.2

1 of the 1 container images this version deploys carry CVE-2026-88812.

Container imageDigestPackageFixed in
ghcr.io/flaresolverr/flaresolverr:v3.4.67962759d99d7
xorg-server@2:21.1.7-3+deb12u11
no fix listed

Open the chart page →

38,906
kubernetes-kiosk-chromiumkubernetes-kiosk-chromium0.1.21 of 1See more

kubernetes-kiosk-chromium kubernetes-kiosk-chromium 0.1.2

1 of the 1 container images this version deploys carry CVE-2026-88812.

Container imageDigestPackageFixed in
ghcr.io/yurymkomarov/docker/kubernetes-kiosk-chromium:0.1.27bff29dcec72
xorg-server@2:21.1.7-3+deb12u11
no fix listed

Open the chart page →

33,963
flaresolverrluiscajl0.0.31 of 1See more

flaresolverr luiscajl 0.0.3

1 of the 1 container images this version deploys carry CVE-2026-88812.

Container imageDigestPackageFixed in
ghcr.io/flaresolverr/flaresolverr:latestc80ae007ce2c
xorg-server@2:21.1.7-3+deb12u13
no fix listed

Open the chart page →

10,854
mcp-playwrightmcp-helmVerified publisher0.1.11 of 1See more

mcp-playwright mcp-helm 0.1.1

1 of the 1 container images this version deploys carry CVE-2026-88812.

Container imageDigestPackageFixed in
mcr.microsoft.com/playwright/mcp:v0.0.43e101b832b34d
xorg-server@2:21.1.7-3+deb12u10
no fix listed

Open the chart page →

4,682
searchmcp-helmVerified publisher0.1.31 of 2See more

search mcp-helm 0.1.3

1 of the 2 container images this version deploys carry CVE-2026-88812.

Container imageDigestPackageFixed in
ghcr.io/flaresolverr/flaresolverr:latestc80ae007ce2c
xorg-server@2:21.1.7-3+deb12u13
no fix listed

Open the chart page →

12,784
flaresolverrmedia-servarrVerified publisher0.19.01 of 1See more

flaresolverr media-servarr 0.19.0

1 of the 1 container images this version deploys carry CVE-2026-88812.

Container imageDigestPackageFixed in
ghcr.io/flaresolverr/flaresolverr:v3.5.2c80ae007ce2c
xorg-server@2:21.1.7-3+deb12u13
no fix listed

Open the chart page →

10,854
core-keeper-dedicatednerkho-helm-charts0.1.11 of 1See more

core-keeper-dedicated nerkho-helm-charts 0.1.1

1 of the 1 container images this version deploys carry CVE-2026-88812.

Container imageDigestPackageFixed in
escaping/core-keeper-dedicated:latest87fa79255962
xorg-server@2:21.1.16-1.3+deb13u1
no fix listed

Open the chart page →

4,634
cloakbrowser-mcpobeoneVerified publisher0.3.31 of 1See more

cloakbrowser-mcp obeone 0.3.3

1 of the 1 container images this version deploys carry CVE-2026-88812.

Container imageDigestPackageFixed in
swimmwatch/cloakbrowser-mcp:1.14.1f6986203a121
xorg-server@2:21.1.7-3+deb12u13
no fix listed

Open the chart page →

2,670
firecrawlobeoneVerified publisher3.0.181 of 5See more

firecrawl obeone 3.0.18

1 of the 5 container images this version deploys carry CVE-2026-88812.

Container imageDigestPackageFixed in
ghcr.io/firecrawl/playwright-service:latest1f6eba640320
xorg-server@2:21.1.7-3+deb12u12
no fix listed

Open the chart page →

8,514
onyx-stackonyx0.3.11 of 12See more

onyx-stack onyx 0.3.1

1 of the 12 container images this version deploys carry CVE-2026-88812.

Container imageDigestPackageFixed in
onyxdotapp/onyx-backend:latest92b8fab500f9
xorg-server@2:21.1.16-1.3+deb13u4
no fix listed

Open the chart page →

7,879
ai-agentromholdings0.0.11 of 1See more

ai-agent romholdings 0.0.1

1 of the 1 container images this version deploys carry CVE-2026-88812.

Container imageDigestPackageFixed in
quay.io/devtron/ai-agent:0.0.16545dac92173
xorg-server@2:21.1.7-3+deb12u8
no fix listed

Open the chart page →

10,789
flaresolverrrubxkubeVerified publisher0.1.11 of 1See more

flaresolverr rubxkube 0.1.1

1 of the 1 container images this version deploys carry CVE-2026-88812.

Container imageDigestPackageFixed in
flaresolverr/flaresolverr:v3.5.0139dfee1c6f8
xorg-server@2:21.1.7-3+deb12u12
no fix listed

Open the chart page →

32,251
dawarichschichtelVerified publisher0.4.01 of 1See more

dawarich schichtel 0.4.0

1 of the 1 container images this version deploys carry CVE-2026-88812.

Container imageDigestPackageFixed in
freikin/dawarich:1.15.3589e3606b11b
xorg-server@2:21.1.16-1.3+deb13u4
no fix listed

Open the chart page →

6,594
flaresolverrsudo-kraken-flaresolverrVerified publisher2.1.41 of 1See more

flaresolverr sudo-kraken-flaresolverr 2.1.4

1 of the 1 container images this version deploys carry CVE-2026-88812.

Container imageDigestPackageFixed in
ghcr.io/flaresolverr/flaresolverr:v3.4.67962759d99d7
xorg-server@2:21.1.7-3+deb12u11
no fix listed

Open the chart page →

38,906
sockpuppetbrowserzekker6Verified publisher0.1.01 of 1See more

sockpuppetbrowser zekker6 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-88812.

Container imageDigestPackageFixed in
dgtlmoon/sockpuppetbrowser:latest1d8f72d2ce20
xorg-server@2:21.1.7-3+deb12u13
no fix listed

Open the chart page →

5,060

Container images carrying it

24 by charts deploying them

A fixed version is listed for 0 of the 1 affected package.

Container imageDigestPackageFixed inUsed by
flaresolverr/flaresolverr:latest:v3.5.0139dfee1c6f8
xorg-server@2:21.1.7-3+deb12u12
no fix listed
4
ghcr.io/flaresolverr/flaresolverr:latest:v3.5.2c80ae007ce2c
xorg-server@2:21.1.7-3+deb12u13
no fix listed
4
quay.io/devtron/ai-agent:0.0.16545dac92173
xorg-server@2:21.1.7-3+deb12u8
no fix listed
3
freikin/dawarich:1.15.3589e3606b11b
xorg-server@2:21.1.16-1.3+deb13u4
no fix listed
2
nousresearch/hermes-agent:v2026.9.24fca358f12efd
xorg-server@2:21.1.16-1.3+deb13u4
no fix listed
2
ghcr.io/flaresolverr/flaresolverr:v3.4.67962759d99d7
xorg-server@2:21.1.7-3+deb12u11
no fix listed
2
archivebox/archivebox:0.9.708c21bb233130
xorg-server@2:21.1.16-1.3+deb13u4
no fix listed
1
cybrarist/discount-bandit:v4.0.4e9e2447ac666
xorg-server@2:21.1.16-1.3+deb13u2
no fix listed
1
dgtlmoon/sockpuppetbrowser:latest1d8f72d2ce20
xorg-server@2:21.1.7-3+deb12u13
no fix listed
1
escaping/core-keeper-dedicated:latest87fa79255962
xorg-server@2:21.1.16-1.3+deb13u1
no fix listed
1
freikin/dawarich:1.15.2e58334ca5697
xorg-server@2:21.1.16-1.3+deb13u4
no fix listed
1
nousresearch/hermes-agent:v2026.8.27e0df6adebddf
xorg-server@2:21.1.16-1.3+deb13u3
no fix listed
1
oneuptime/probe:releasef6ee7faeee3e
xorg-server@2:21.1.7-3+deb12u13
no fix listed
1
onyxdotapp/onyx-backend:latest92b8fab500f9
xorg-server@2:21.1.16-1.3+deb13u4
no fix listed
1
penpotapp/exporter:2.18.3418232d6ca31
xorg-server@2:21.1.16-1.3+deb13u4+dhi0
no fix listed
1
swimmwatch/cloakbrowser-mcp:1.14.1f6986203a121
xorg-server@2:21.1.7-3+deb12u13
no fix listed
1
ghcr.io/argonix-io/argonix-api:0.6.5431abcce7c1e
xorg-server@2:21.1.16-1.3+deb13u4
no fix listed
1
ghcr.io/firecrawl/playwright-service:latest1f6eba640320
xorg-server@2:21.1.7-3+deb12u12
no fix listed
1
ghcr.io/flaresolverr/flaresolverr:v3.4.0ab535d1fef5d
xorg-server@2:21.1.7-3+deb12u10
no fix listed
1
ghcr.io/linkwarden/linkwarden:v2.16.30664c28a039b
xorg-server@2:21.1.7-3+deb12u13
no fix listed
1
ghcr.io/open-telemetry/demo:1.12.0-loadgenerator85c9935ff31b
xorg-server@2:21.1.7-3+deb12u8
no fix listed
1
ghcr.io/open-telemetry/demo:3.1.0-load-generatorb130d6cee6cb
xorg-server@2:21.1.7-3+deb12u13
no fix listed
1
ghcr.io/yurymkomarov/docker/kubernetes-kiosk-chromium:0.1.27bff29dcec72
xorg-server@2:21.1.7-3+deb12u11
no fix listed
1
mcr.microsoft.com/playwright/mcp:v0.0.43e101b832b34d
xorg-server@2:21.1.7-3+deb12u10
no fix listed
1

syft 1.42.1 · advisories as of 8 Oct 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.