StackRadar

CVE-2026-93541

Medium

Advisory

Published 24 Sept 2026In the index since 25 Sept 2026
Severity
Medium
worst across findings
CVSS
5.5
base score, highest
EPSS
—
probability of exploitation
CISA KEV
Not listed
no confirmed exploitation
Charts affected
106
of 17,844 indexed, latest versions
Container images
102
deployed by those charts
Fix available
None
affected package

The matching OSV records carry no description.

Carried by container images the latest versions of 106 of 17,844 indexed charts deploy, on 102 images.

Affected packageAffected versionsFixed inImages
libxideb2:1.7.6-1, 2:1.7.9-1, 2:1.7.10-0ubuntu1, 2:1.8-1build1+2 moreno fix listed102
OSV records
UBUNTU-CVE-2026-93541

Charts affected

106 by stars
ChartLatestAffected imagesRadar Score
unifistartechnicaVerified publisher0.1.31 of 2See more

unifi startechnica 0.1.3

1 of the 2 container images this version deploys carry CVE-2026-93541.

Container imageDigestPackageFixed in
jacobalberty/unifi:v7.1.664a3616625dda
libxi@2:1.7.9-1
no fix listed

Open the chart page →

14,981
kurento_webrtc_demostunner0.1.01 of 2See more

kurento_webrtc_demo stunner 0.1.0

1 of the 2 container images this version deploys carry CVE-2026-93541.

Container imageDigestPackageFixed in
kurento/kurento-media-server:latest03c0d34d0828
libxi@2:1.8.1-1build1
no fix listed

Open the chart page →

13,480
stunner-kurento-one2one-callstunner0.1.01 of 2See more

stunner-kurento-one2one-call stunner 0.1.0

1 of the 2 container images this version deploys carry CVE-2026-93541.

Container imageDigestPackageFixed in
kurento/kurento-media-server:latest03c0d34d0828
libxi@2:1.8.1-1build1
no fix listed

Open the chart page →

13,480
browserlessvictorlane0.2.01 of 1See more

browserless victorlane 0.2.0

1 of the 1 container images this version deploys carry CVE-2026-93541.

Container imageDigestPackageFixed in
ghcr.io/browserless/chromium:v2.43.0853e6f105b51
libxi@2:1.8.1-1build1
no fix listed

Open the chart page →

4,699
calibre-webvista0.1.31 of 1See more

calibre-web vista 0.1.3

1 of the 1 container images this version deploys carry CVE-2026-93541.

Container imageDigestPackageFixed in
linuxserver/calibre-web:0.6.24241009026e6f
libxi@2:1.8.1-1build1
no fix listed

Open the chart page →

8,304
playwright-synthetic-monitoringwork-adventure1.0.11 of 1See more

playwright-synthetic-monitoring work-adventure 1.0.1

1 of the 1 container images this version deploys carry CVE-2026-93541.

Container imageDigestPackageFixed in
workadventure/playwright-synthetic-monitoring:main92b664c2a06f
libxi@2:1.8-1build1
no fix listed

Open the chart page →

14,813

Container images carrying it

102 by charts deploying them

A fixed version is listed for 0 of the 1 affected package.

Container imageDigestPackageFixed inUsed by
hyperledger/fabric-ca-tools:latest4ce6f43ded2e
libxi@2:1.7.6-1
no fix listed
4
hyperledger/fabric-couchdb:0.4.15f6c724592abf
libxi@2:1.7.6-1
no fix listed
4
ciscolabs/rtsp-client:latesta7b60ec88285
libxi@2:1.7.10-0ubuntu1
no fix listed
3
ciscolabs/rtsp-server:latestb59fc10bb821
libxi@2:1.7.10-0ubuntu1
no fix listed
3
omecproject/cdn-video-repo:1.0.0:remote-v3d59ccb138ffb
libxi@2:1.7.6-1
no fix listed
3
homebridge/homebridge:latest77c685a40911
libxi@2:1.8.1-1build1
no fix listed
2
kurento/kurento-media-server:latest03c0d34d0828
libxi@2:1.8.1-1build1
no fix listed
2
mbentley/omada-controller:4.3f4e682274bed
libxi@2:1.7.9-1
no fix listed
2
ghcr.io/browserless/chromium:v2.56.7b1ba7b054af2
libxi@2:1.8.1-1build1
no fix listed
2
ghcr.io/bryopsida/k8s-dev-pod:main82d0b161161d
libxi@2:1.8.1-1build1
no fix listed
2
ghcr.io/games-on-whales/retroarch:1.0.0103fbcec2314
libxi@2:1.7.10-0ubuntu1
no fix listed
2
ghcr.io/games-on-whales/steam:1.0.09b6105be7ad0
libxi@2:1.7.10-0ubuntu1
no fix listed
2
airsonicadvanced/airsonic-advanced:latestf7cbafac2806
libxi@2:1.7.10-0ubuntu1
no fix listed
1
andrewmackrodt/firefox-x11:142.0.1-r133f9080470c9
libxi@2:1.8-1build1
no fix listed
1
apachepulsar/pulsar:3.1.016f9fdab3fa6
libxi@2:1.8-1build1
no fix listed
1
apachepulsar/pulsar:2.9.0d056c89b7131
libxi@2:1.7.10-0ubuntu1
no fix listed
1
assistiot/sdn_controller:2.4.0ea254b6d8a31
libxi@2:1.7.10-0ubuntu1
no fix listed
1
assistiot/video_augmentation:runner-cpu-lateste5ae539ce2cb
libxi@2:1.7.10-0ubuntu1
no fix listed
1
browserless/chrome:1.48.0-chrome-stablec81ae5585b47
libxi@2:1.7.10-0ubuntu1
no fix listed
1
camptocamp/geomapfishapp-geoportal:latestae874f70cc16
libxi@2:1.8.1-1build1
no fix listed
1
cheyang/distributed-tf:1.6.046cc34755493
libxi@2:1.7.6-1
no fix listed
1
countly/countly-server:25.05.4e3c238248f99
libxi@2:1.7.10-0ubuntu1
no fix listed
1
elastictranscoder/transcoder:627e21dcb4a0327029e6
libxi@2:1.7.9-1
no fix listed
1
elastictranscoder/transcoder-handler:627e21dc5b75d19e2733
libxi@2:1.7.9-1
no fix listed
1
fiware/biz-ecosystem-charging-backend:11.7.029456835bb2c
libxi@2:1.7.10-0ubuntu1
no fix listed
1
gchq/accumulo:2.0.1c460bb587d6d
libxi@2:1.8.1-1build1
no fix listed
1
hyperledger/fabric-couchdb:0.4.10c65891b6c237
libxi@2:1.7.6-1
no fix listed
1
intel/dlstreamer-pipeline-server:2022.1.1-ubuntu20aa8f5483a2ef
libxi@2:1.7.10-0ubuntu1
no fix listed
1
ispras/svacer:11-2-042aa9fa9f189
libxi@2:1.8-1build1
no fix listed
1
jacobalberty/unifi:v7.1.664a3616625dda
libxi@2:1.7.9-1
no fix listed
1
jacobalberty/unifi:5.10.19c409924e2463
libxi@2:1.7.6-1
no fix listed
1
langgenius/dify-plugin-daemon:main-local7d2fb04baf44
libxi@2:1.8.1-1build1
no fix listed
1
library/xwiki:lts-postgres-tomcat9b8142bce157
libxi@2:1.8.1-1build1
no fix listed
1
linuxchina/alibaba-rsocket-broker:1.1.3-k8sf758e2e567ee
libxi@2:1.7.9-1
no fix listed
1
linuxserver/calibre:version-v5.21.0a847b5b2d860
libxi@2:1.7.9-1
no fix listed
1
linuxserver/calibre-web:0.6.24241009026e6f
libxi@2:1.8.1-1build1
no fix listed
1
linuxserver/calibre-web:version-0.6.12938810eca3d3
libxi@2:1.7.10-0ubuntu1
no fix listed
1
mbround18/valheim:3.1.070bd4da591cd
libxi@2:1.8-1build1
no fix listed
1
mlikiowa/napcat-docker:latest2cc70b45244a
libxi@2:1.8-1build1
no fix listed
1
netskopeprivateaccess/publisher_u22:latest0b43204c37d6
libxi@2:1.8-1build1
no fix listed
1
omecproject/cdn-antmedia:1.0.0b4ae7d0d6b74
libxi@2:1.7.9-1
no fix listed
1
onosproject/onos:2.2.144914a8d4b3f
libxi@2:1.7.9-1
no fix listed
1
openaev/platform:3.260921.04d2cd9cce457
libxi@2:1.8.1-1build1
no fix listed
1
openkm/openkm-ce:6.3.113bc465a7461b
libxi@2:1.7.10-0ubuntu1
no fix listed
1
oznu/homebridge:2021-12-19-ubuntu2e12d0e2dcce
libxi@2:1.7.9-1
no fix listed
1
payara/server-full:7.2026.2-jdk2531f1253f0cf8
libxi@2:1.8-1build1
no fix listed
1
penpotapp/backend:2.2.147853d9bb9dd
libxi@2:1.8-1build1
no fix listed
1
penpotapp/backend:1.16.0-betae978e871be07
libxi@2:1.8-1build1
no fix listed
1
penpotapp/exporter:2.2.15c835ffd87ab
libxi@2:1.8-1build1
no fix listed
1
penpotapp/exporter:1.16.0-betafa7086ad92b1
libxi@2:1.8-1build1
no fix listed
1

syft 1.42.1 · advisories as of 25 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.