StackRadar

CVE-2026-93653

Medium

Advisory

Published 18 Sept 2026In the index since 19 Sept 2026
Severity
Medium
worst across findings
CVSS
5.5
base score, highest
EPSS
—
probability of exploitation
CISA KEV
Not listed
no confirmed exploitation
Charts affected
34
of 17,805 indexed, latest versions
Container images
27
deployed by those charts
Fix available
None
affected package

The matching OSV records carry no description.

Carried by container images the latest versions of 34 of 17,805 indexed charts deploy, on 27 images.

Affected packageAffected versionsFixed inImages
popplerdeb22.12.0-2+b1, 22.12.0-2+deb12u1, 22.12.0-2+deb12u2, 22.12.0-2+deb12u3+3 moreno fix listed27
OSV records
DEBIAN-CVE-2026-93653

Charts affected

34 by stars
ChartLatestAffected imagesRadar Score
openprojectopenproject-helm-chartsOfficialVerified publisher13.12.01 of 5See more

openproject openproject-helm-charts 13.12.0

1 of the 5 container images this version deploys carry CVE-2026-93653.

Container imageDigestPackageFixed in
openproject/openproject:17.8.0-slim48952034215d
poppler@25.03.0-5+deb13u4
no fix listed

Open the chart page →

20,281
gotenbergmaikumoriVerified publisher1.25.01 of 1See more

gotenberg maikumori 1.25.0

1 of the 1 container images this version deploys carry CVE-2026-93653.

Container imageDigestPackageFixed in
gotenberg/gotenberg:8.36.087c16b9f3642
poppler@25.03.0-5+deb13u4
no fix listed

Open the chart page →

10,317
paperless-ngxpaperless-ngxVerified publisher0.3.221 of 3See more

paperless-ngx paperless-ngx 0.3.22

1 of the 3 container images this version deploys carry CVE-2026-93653.

Container imageDigestPackageFixed in
ghcr.io/paperless-ngx/paperless-ngx:3.1.3aa810a36942c
poppler@25.03.0-5+deb13u4
no fix listed

Open the chart page →

8,729
changedetectionalekcVerified publisher0.14.51 of 1See more

changedetection alekc 0.14.5

1 of the 1 container images this version deploys carry CVE-2026-93653.

Container imageDigestPackageFixed in
ghcr.io/dgtlmoon/changedetection.io:0.60.7096dae27b5d6
poppler@22.12.0-2+deb12u3
no fix listed

Open the chart page →

2,687
paperlesszekker6Verified publisher11.8.01 of 1See more

paperless zekker6 11.8.0

1 of the 1 container images this version deploys carry CVE-2026-93653.

Container imageDigestPackageFixed in
ghcr.io/paperless-ngx/paperless-ngx:3.1.3aa810a36942c
poppler@25.03.0-5+deb13u4
no fix listed

Open the chart page →

4,757
paperless-ngxadnoctemVerified publisher0.4.22 of 5See more

paperless-ngx adnoctem 0.4.2

2 of the 5 container images this version deploys carry CVE-2026-93653.

Container imageDigestPackageFixed in
gotenberg/gotenberg:8.36.087c16b9f3642
poppler@25.03.0-5+deb13u4
no fix listed
ghcr.io/paperless-ngx/paperless-ngx:3.1.3aa810a36942c
poppler@25.03.0-5+deb13u4
no fix listed

Open the chart page →

20,562
paperless-ngxalexmorbo-paperless-ngxVerified publisher0.2.01 of 2See more

paperless-ngx alexmorbo-paperless-ngx 0.2.0

1 of the 2 container images this version deploys carry CVE-2026-93653.

Container imageDigestPackageFixed in
ghcr.io/paperless-ngx/paperless-ngx:2.20.5665f2f5cc548
poppler@25.03.0-5+deb13u2
no fix listed

Open the chart page →

12,251
paperless-ngxcrystalnetVerified publisher0.2.221 of 3See more

paperless-ngx crystalnet 0.2.22

1 of the 3 container images this version deploys carry CVE-2026-93653.

Container imageDigestPackageFixed in
ghcr.io/paperless-ngx/paperless-ngx:2.13.10642357c5dbd
poppler@22.12.0-2+b1
no fix listed

Open the chart page →

13,928
paperless-ngxpaperlessVerified publisher0.4.01 of 3See more

paperless-ngx paperless 0.4.0

1 of the 3 container images this version deploys carry CVE-2026-93653.

Container imageDigestPackageFixed in
ghcr.io/paperless-ngx/paperless-ngxdigest-pinnedaa810a36942c
poppler@25.03.0-5+deb13u4
no fix listed

Open the chart page →

8,729
gotenbergadnoctemVerified publisher0.5.01 of 1See more

gotenberg adnoctem 0.5.0

1 of the 1 container images this version deploys carry CVE-2026-93653.

Container imageDigestPackageFixed in
gotenberg/gotenberg:8.37.0f29984bd1e22
poppler@25.03.0-5+deb13u4
no fix listed

Open the chart page →

6,207
platform-apiappscodeVerified publisher2026.9.111 of 3See more

platform-api appscode 2026.9.11

1 of the 3 container images this version deploys carry CVE-2026-93653.

Container imageDigestPackageFixed in
ghcr.io/appscode/gotenberg:8.25f9104080d9a7
poppler@25.03.0-5+deb13u2
no fix listed

Open the chart page →

38,029
caninecanine0.1.101 of 7See more

canine canine 0.1.10

1 of the 7 container images this version deploys carry CVE-2026-93653.

Container imageDigestPackageFixed in
ghcr.io/caninehq/canine:latesta058034ca006
poppler@22.12.0-2+deb12u2
no fix listed

Open the chart page →

14,346
paperless-ngxcharts-derwitt-devVerified publisher2.1.41 of 1See more

paperless-ngx charts-derwitt-dev 2.1.4

1 of the 1 container images this version deploys carry CVE-2026-93653.

Container imageDigestPackageFixed in
ghcr.io/paperless-ngx/paperless-ngx:3.1.3aa810a36942c
poppler@25.03.0-5+deb13u4
no fix listed

Open the chart page →

4,757
damap-chartdamapVerified publisher0.3.01 of 5See more

damap-chart damap 0.3.0

1 of the 5 container images this version deploys carry CVE-2026-93653.

Container imageDigestPackageFixed in
gotenberg/gotenberg:8f29984bd1e22
poppler@25.03.0-5+deb13u4
no fix listed

Open the chart page →

14,808
adventurelogdjjudas21Verified publisher0.1.11 of 3See more

adventurelog djjudas21 0.1.1

1 of the 3 container images this version deploys carry CVE-2026-93653.

Container imageDigestPackageFixed in
ghcr.io/seanmorley15/adventurelog-backend:v0.13.00250d9cb0d74
poppler@25.03.0-5+deb13u4
no fix listed

Open the chart page →

7,618
changedetection-iogabe565Verified publisher0.12.01 of 2See more

changedetection-io gabe565 0.12.0

1 of the 2 container images this version deploys carry CVE-2026-93653.

Container imageDigestPackageFixed in
ghcr.io/dgtlmoon/changedetection.io:latestecacd9fd0c66
poppler@22.12.0-2+deb12u3
no fix listed

Open the chart page →

2,687
scanservjsgabe565Verified publisher0.9.21 of 1See more

scanservjs gabe565 0.9.2

1 of the 1 container images this version deploys carry CVE-2026-93653.

Container imageDigestPackageFixed in
sbs20/scanservjs:release-v3.0.3dad1fd6e9a98
poppler@22.12.0-2+b1
no fix listed

Open the chart page →

13,370
changedetectionhelmforgeVerified publisher1.1.161 of 1See more

changedetection helmforge 1.1.16

1 of the 1 container images this version deploys carry CVE-2026-93653.

Container imageDigestPackageFixed in
ghcr.io/dgtlmoon/changedetection.io:0.60.5f69554198005
poppler@22.12.0-2+deb12u3
no fix listed

Open the chart page →

2,687
dawarichhelmforgeVerified publisher1.0.11 of 4See more

dawarich helmforge 1.0.1

1 of the 4 container images this version deploys carry CVE-2026-93653.

Container imageDigestPackageFixed in
postgis/postgis:18-3.67e00e8c3539f
poppler@25.03.0-5+deb13u4
no fix listed

Open the chart page →

10,648
medikeephelmforgeVerified publisher2.0.11 of 3See more

medikeep helmforge 2.0.1

1 of the 3 container images this version deploys carry CVE-2026-93653.

Container imageDigestPackageFixed in
ghcr.io/afairgiant/medikeep:v0.70.04c28334f3c79
poppler@22.12.0-2+deb12u3
no fix listed

Open the chart page →

5,537
paperlesshomelabcihelmchartstestVerified publisher9.1.91 of 1See more

paperless homelabcihelmchartstest 9.1.9

1 of the 1 container images this version deploys carry CVE-2026-93653.

Container imageDigestPackageFixed in
ghcr.io/paperless-ngx/paperless-ngx:2.0.1ab255bea133e
poppler@22.12.0-2+b1
no fix listed

Open the chart page →

16,556
paperlesshpVerified publisher0.1.22 of 5See more

paperless hp 0.1.2

2 of the 5 container images this version deploys carry CVE-2026-93653.

Container imageDigestPackageFixed in
gotenberg/gotenberg:8.3467097317623a
poppler@25.03.0-5+deb13u3
no fix listed
ghcr.io/paperless-ngx/paperless-ngx:3.1.3aa810a36942c
poppler@25.03.0-5+deb13u4
no fix listed

Open the chart page →

27,499
inventreeinventreeOfficialVerified publisher0.4.281 of 2See more

inventree inventree 0.4.28

1 of the 2 container images this version deploys carry CVE-2026-93653.

Container imageDigestPackageFixed in
inventree/inventree:1.5.4a946ec09da3e
poppler@25.03.0-5+deb13u4
no fix listed

Open the chart page →

5,965
deltabadgerk8s-chartsVerified publisher2.0.01 of 1See more

deltabadger k8s-charts 2.0.0

1 of the 1 container images this version deploys carry CVE-2026-93653.

Container imageDigestPackageFixed in
ghcr.io/deltabadger/deltabadger:2.23.3bffe3c22fabc
poppler@25.03.0-5+deb13u4
no fix listed

Open the chart page →

5,796
paperlessk8s-home-lab-repo11.0.11 of 1See more

paperless k8s-home-lab-repo 11.0.1

1 of the 1 container images this version deploys carry CVE-2026-93653.

Container imageDigestPackageFixed in
ghcr.io/paperless-ngx/paperless-ngx:2.20.14b89f83345532
poppler@25.03.0-5+deb13u2
no fix listed

Open the chart page →

9,263
kbot-self-hostedkbot-self-hostedVerified publisher0.1.81 of 7See more

kbot-self-hosted kbot-self-hosted 0.1.8

1 of the 7 container images this version deploys carry CVE-2026-93653.

Container imageDigestPackageFixed in
gotenberg/gotenberg:8.30206a6c708fc6
poppler@25.03.0-5+deb13u2
no fix listed

Open the chart page →

33,161
filestashmt1905024.0.01 of 1See more

filestash mt190502 4.0.0

1 of the 1 container images this version deploys carry CVE-2026-93653.

Container imageDigestPackageFixed in
machines/filestash:latest0b8fc005e52e
poppler@25.03.0-5+deb13u4
no fix listed

Open the chart page →

3,606
paperless-ngxmt1905027.6.141 of 4See more

paperless-ngx mt190502 7.6.14

1 of the 4 container images this version deploys carry CVE-2026-93653.

Container imageDigestPackageFixed in
ghcr.io/paperless-ngx/paperless-ngx:2.20.134b05bcd28e69
poppler@25.03.0-5+deb13u2
no fix listed

Open the chart page →

12,222
paperless-ngxoli-the-devVerified publisher1.1.11 of 1See more

paperless-ngx oli-the-dev 1.1.1

1 of the 1 container images this version deploys carry CVE-2026-93653.

Container imageDigestPackageFixed in
ghcr.io/paperless-ngx/paperless-ngx:3.1.3aa810a36942c
poppler@25.03.0-5+deb13u4
no fix listed

Open the chart page →

4,757
cupsr2dlan-helm-chartsVerified publisher0.1.01 of 1See more

cups r2dlan-helm-charts 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-93653.

Container imageDigestPackageFixed in
anujdatar/cups:25.07.01685df04a643b
poppler@22.12.0-2+deb12u1
no fix listed

Open the chart page →

7,890
paperless-ngxrtomik-helm-chartsVerified publisher0.0.51 of 1See more

paperless-ngx rtomik-helm-charts 0.0.5

1 of the 1 container images this version deploys carry CVE-2026-93653.

Container imageDigestPackageFixed in
ghcr.io/paperless-ngx/paperless-ngx:2.20.357ad9565bff3
poppler@25.03.0-5+deb13u2
no fix listed

Open the chart page →

10,767
backendsignalen4.24.01 of 4See more

backend signalen 4.24.0

1 of the 4 container images this version deploys carry CVE-2026-93653.

Container imageDigestPackageFixed in
signalen/backend:2.50.14760256000738
poppler@22.12.0-2+deb12u3
no fix listed

Open the chart page →

11,805
maybe-financevicsuferVerified publisher0.2.71 of 3See more

maybe-finance vicsufer 0.2.7

1 of the 3 container images this version deploys carry CVE-2026-93653.

Container imageDigestPackageFixed in
ghcr.io/maybe-finance/maybe:0.5.0c6ab95ca9130
poppler@22.12.0-2+b1
no fix listed

Open the chart page →

10,934
changedetection-iozekker6Verified publisher1.102.01 of 1See more

changedetection-io zekker6 1.102.0

1 of the 1 container images this version deploys carry CVE-2026-93653.

Container imageDigestPackageFixed in
ghcr.io/dgtlmoon/changedetection.io:0.60.7096dae27b5d6
poppler@22.12.0-2+deb12u3
no fix listed

Open the chart page →

2,687

Container images carrying it

27 by charts deploying them

A fixed version is listed for 0 of the 1 affected package.

Container imageDigestPackageFixed inUsed by
ghcr.io/paperless-ngx/paperless-ngx:3.1.3aa810a36942c
poppler@25.03.0-5+deb13u4
no fix listed
7
gotenberg/gotenberg:8.36.087c16b9f3642
poppler@25.03.0-5+deb13u4
no fix listed
2
gotenberg/gotenberg:8:8.37.0f29984bd1e22
poppler@25.03.0-5+deb13u4
no fix listed
2
ghcr.io/dgtlmoon/changedetection.io:0.60.7096dae27b5d6
poppler@22.12.0-2+deb12u3
no fix listed
2
anujdatar/cups:25.07.01685df04a643b
poppler@22.12.0-2+deb12u1
no fix listed
1
gotenberg/gotenberg:8.30206a6c708fc6
poppler@25.03.0-5+deb13u2
no fix listed
1
gotenberg/gotenberg:8.3467097317623a
poppler@25.03.0-5+deb13u3
no fix listed
1
inventree/inventree:1.5.4a946ec09da3e
poppler@25.03.0-5+deb13u4
no fix listed
1
machines/filestash:latest0b8fc005e52e
poppler@25.03.0-5+deb13u4
no fix listed
1
openproject/openproject:17.8.0-slim48952034215d
poppler@25.03.0-5+deb13u4
no fix listed
1
postgis/postgis:18-3.67e00e8c3539f
poppler@25.03.0-5+deb13u4
no fix listed
1
sbs20/scanservjs:release-v3.0.3dad1fd6e9a98
poppler@22.12.0-2+b1
no fix listed
1
signalen/backend:2.50.14760256000738
poppler@22.12.0-2+deb12u3
no fix listed
1
ghcr.io/afairgiant/medikeep:v0.70.04c28334f3c79
poppler@22.12.0-2+deb12u3
no fix listed
1
ghcr.io/appscode/gotenberg:8.25f9104080d9a7
poppler@25.03.0-5+deb13u2
no fix listed
1
ghcr.io/caninehq/canine:latesta058034ca006
poppler@22.12.0-2+deb12u2
no fix listed
1
ghcr.io/deltabadger/deltabadger:2.23.3bffe3c22fabc
poppler@25.03.0-5+deb13u4
no fix listed
1
ghcr.io/dgtlmoon/changedetection.io:0.60.3:latestecacd9fd0c66
poppler@22.12.0-2+deb12u3
no fix listed
1
ghcr.io/dgtlmoon/changedetection.io:0.60.5f69554198005
poppler@22.12.0-2+deb12u3
no fix listed
1
ghcr.io/maybe-finance/maybe:0.5.0c6ab95ca9130
poppler@22.12.0-2+b1
no fix listed
1
ghcr.io/paperless-ngx/paperless-ngx:2.13.10642357c5dbd
poppler@22.12.0-2+b1
no fix listed
1
ghcr.io/paperless-ngx/paperless-ngx:2.20.134b05bcd28e69
poppler@25.03.0-5+deb13u2
no fix listed
1
ghcr.io/paperless-ngx/paperless-ngx:2.20.357ad9565bff3
poppler@25.03.0-5+deb13u2
no fix listed
1
ghcr.io/paperless-ngx/paperless-ngx:2.20.5665f2f5cc548
poppler@25.03.0-5+deb13u2
no fix listed
1
ghcr.io/paperless-ngx/paperless-ngx:2.0.1ab255bea133e
poppler@22.12.0-2+b1
no fix listed
1
ghcr.io/paperless-ngx/paperless-ngx:2.20.14b89f83345532
poppler@25.03.0-5+deb13u2
no fix listed
1
ghcr.io/seanmorley15/adventurelog-backend:v0.13.00250d9cb0d74
poppler@25.03.0-5+deb13u4
no fix listed
1

syft 1.42.1 · advisories as of 19 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.