StackRadar

CVE-2026-94281

Medium

Advisory

Published 24 Sept 2026In the index since 25 Sept 2026
Severity
Medium
worst across findings
CVSS
5.5
base score, highest
EPSS
—
probability of exploitation
CISA KEV
Not listed
no confirmed exploitation
Charts affected
106
of 17,844 indexed, latest versions
Container images
102
deployed by those charts
Fix available
None
affected package

The matching OSV records carry no description.

Carried by container images the latest versions of 106 of 17,844 indexed charts deploy, on 102 images.

Affected packageAffected versionsFixed inImages
libxideb2:1.7.6-1, 2:1.7.9-1, 2:1.7.10-0ubuntu1, 2:1.8-1build1+2 moreno fix listed102
OSV records
UBUNTU-CVE-2026-94281

Charts affected

106 by stars
ChartLatestAffected imagesRadar Score
openclawopenclawVerified publisher1.94.01 of 2See more

openclaw openclaw 1.94.0

1 of the 2 container images this version deploys carry CVE-2026-94281.

Container imageDigestPackageFixed in
ghcr.io/browserless/chromium:v2.56.7b1ba7b054af2
libxi@2:1.8.1-1build1
no fix listed

Open the chart page →

3,344
penpotcodechemVerified publisher1.0.102 of 3See more

penpot codechem 1.0.10

2 of the 3 container images this version deploys carry CVE-2026-94281.

Container imageDigestPackageFixed in
penpotapp/backend:1.16.0-betae978e871be07
libxi@2:1.8-1build1
no fix listed
penpotapp/exporter:1.16.0-betafa7086ad92b1
libxi@2:1.8-1build1
no fix listed

Open the chart page →

29,384
photoprismandrenarchyVerified publisher8.15.01 of 1See more

photoprism andrenarchy 8.15.0

1 of the 1 container images this version deploys carry CVE-2026-94281.

Container imageDigestPackageFixed in
photoprism/photoprism:260728958642220223
libxi@2:1.8.2-2
no fix listed

Open the chart page →

45,285
karakeephelmforgeVerified publisher1.2.91 of 3See more

karakeep helmforge 1.2.9

1 of the 3 container images this version deploys carry CVE-2026-94281.

Container imageDigestPackageFixed in
ghcr.io/browserless/chromium:v2.55.42ed0183564d7
libxi@2:1.8.1-1build1
no fix listed

Open the chart page →

10,375
local-ailocalai3.4.21 of 1See more

local-ai localai 3.4.2

1 of the 1 container images this version deploys carry CVE-2026-94281.

Container imageDigestPackageFixed in
quay.io/go-skynet/local-ai:latest0632c21ddbe4
libxi@2:1.8.1-1build1
no fix listed

Open the chart page →

3,986
calibre-webk8s-home-lab-repo9.1.11 of 1See more

calibre-web k8s-home-lab-repo 9.1.1

1 of the 1 container images this version deploys carry CVE-2026-94281.

Container imageDigestPackageFixed in
ghcr.io/linuxserver/calibre-web:0.6.267c0464228f2f
libxi@2:1.8.1-1build1
no fix listed

Open the chart page →

5,005
oesopsmxVerified publisher4.0.321 of 25See more

oes opsmx 4.0.32

1 of the 25 container images this version deploys carry CVE-2026-94281.

Container imageDigestPackageFixed in
quay.io/opsmxpublic/spin-sample-pipeline:v1.0.1c6a934439421
libxi@2:1.7.6-1
no fix listed

Open the chart page →

102,839
browserless-chromesagikazarmarkVerified publisher0.0.51 of 1See more

browserless-chrome sagikazarmark 0.0.5

1 of the 1 container images this version deploys carry CVE-2026-94281.

Container imageDigestPackageFixed in
browserless/chrome:1.48.0-chrome-stablec81ae5585b47
libxi@2:1.7.10-0ubuntu1
no fix listed

Open the chart page →

101,454
icat-k8salba-helm-chartsVerified publisher1.1.01 of 4See more

icat-k8s alba-helm-charts 1.1.0

1 of the 4 container images this version deploys carry CVE-2026-94281.

Container imageDigestPackageFixed in
payara/server-full:7.2026.2-jdk2531f1253f0cf8
libxi@2:1.8-1build1
no fix listed

Open the chart page →

4,184
dltbrokerassist-iot-distributed-broker0.2.02 of 9See more

dltbroker assist-iot-distributed-broker 0.2.0

2 of the 9 container images this version deploys carry CVE-2026-94281.

Container imageDigestPackageFixed in
hyperledger/fabric-ca-tools:latest4ce6f43ded2e
libxi@2:1.7.6-1
no fix listed
hyperledger/fabric-couchdb:0.4.15f6c724592abf
libxi@2:1.7.6-1
no fix listed

Open the chart page →

193,878
dltloggingassist-iot-logging-auditing0.2.02 of 9See more

dltlogging assist-iot-logging-auditing 0.2.0

2 of the 9 container images this version deploys carry CVE-2026-94281.

Container imageDigestPackageFixed in
hyperledger/fabric-ca-tools:latest4ce6f43ded2e
libxi@2:1.7.6-1
no fix listed
hyperledger/fabric-couchdb:0.4.15f6c724592abf
libxi@2:1.7.6-1
no fix listed

Open the chart page →

193,858
tensorflow-notebookcloudnativeapp0.1.21 of 1See more

tensorflow-notebook cloudnativeapp 0.1.2

1 of the 1 container images this version deploys carry CVE-2026-94281.

Container imageDigestPackageFixed in
tensorflow/tensorflow:1.6.0-devel1e3172090703
libxi@2:1.7.6-1
no fix listed

Open the chart page →

95,373
craftycontrollerdrewburr-labs-helm-chartsVerified publisher0.3.01 of 1See more

craftycontroller drewburr-labs-helm-charts 0.3.0

1 of the 1 container images this version deploys carry CVE-2026-94281.

Container imageDigestPackageFixed in
registry.gitlab.com/crafty-controller/crafty-4:latest7b6e87514259
libxi@2:1.8.1-1build1
no fix listed

Open the chart page →

36,491
rstudiodsri-helm-charts0.1.281 of 1See more

rstudio dsri-helm-charts 0.1.28

1 of the 1 container images this version deploys carry CVE-2026-94281.

Container imageDigestPackageFixed in
ghcr.io/maastrichtu-ids/rstudio:latest981aa4c109e1
libxi@2:1.8.1-1build1
no fix listed

Open the chart page →

72,726
bazarrgeek-cookbookVerified publisher10.6.21 of 1See more

bazarr geek-cookbook 10.6.2

1 of the 1 container images this version deploys carry CVE-2026-94281.

Container imageDigestPackageFixed in
ghcr.io/k8s-at-home/bazarr:v1.0.3fdb5501cdfb9
libxi@2:1.7.10-0ubuntu1
no fix listed

Open the chart page →

18,014
calibregeek-cookbookVerified publisher5.4.21 of 1See more

calibre geek-cookbook 5.4.2

1 of the 1 container images this version deploys carry CVE-2026-94281.

Container imageDigestPackageFixed in
linuxserver/calibre:version-v5.21.0a847b5b2d860
libxi@2:1.7.9-1
no fix listed

Open the chart page →

23,754
games-on-whalesgeek-cookbookVerified publisher1.8.22 of 7See more

games-on-whales geek-cookbook 1.8.2

2 of the 7 container images this version deploys carry CVE-2026-94281.

Container imageDigestPackageFixed in
ghcr.io/games-on-whales/retroarch:1.0.0103fbcec2314
libxi@2:1.7.10-0ubuntu1
no fix listed
ghcr.io/games-on-whales/steam:1.0.09b6105be7ad0
libxi@2:1.7.10-0ubuntu1
no fix listed

Open the chart page →

112,689
homebridgegeek-cookbookVerified publisher5.3.21 of 1See more

homebridge geek-cookbook 5.3.2

1 of the 1 container images this version deploys carry CVE-2026-94281.

Container imageDigestPackageFixed in
ghcr.io/oznu/homebridge:2022-07-08ff2af53897e7
libxi@2:1.7.10-0ubuntu1
no fix listed

Open the chart page →

87,612
omada-controllergeek-cookbookVerified publisher4.4.21 of 1See more

omada-controller geek-cookbook 4.4.2

1 of the 1 container images this version deploys carry CVE-2026-94281.

Container imageDigestPackageFixed in
mbentley/omada-controller:4.3f4e682274bed
libxi@2:1.7.9-1
no fix listed

Open the chart page →

11,942
stashgeek-cookbookVerified publisher3.4.21 of 1See more

stash geek-cookbook 3.4.2

1 of the 1 container images this version deploys carry CVE-2026-94281.

Container imageDigestPackageFixed in
stashapp/stash:latest24dbd7607174
libxi@2:1.7.10-0ubuntu1
no fix listed

Open the chart page →

16,335
napcatredish101Verified publisher0.1.31 of 1See more

napcat redish101 0.1.3

1 of the 1 container images this version deploys carry CVE-2026-94281.

Container imageDigestPackageFixed in
mlikiowa/napcat-docker:latest2cc70b45244a
libxi@2:1.8-1build1
no fix listed

Open the chart page →

69,832
resurfaceresurfaceioVerified publisher3.9.01 of 3See more

resurface resurfaceio 3.9.0

1 of the 3 container images this version deploys carry CVE-2026-94281.

Container imageDigestPackageFixed in
resurfaceio/resurface:3.7.84d5cda2f64109
libxi@2:1.8-1build1
no fix listed

Open the chart page →

7,625
smarter-demosmarterOfficialVerified publisher0.1.52 of 7See more

smarter-demo smarter 0.1.5

2 of the 7 container images this version deploys carry CVE-2026-94281.

Container imageDigestPackageFixed in
ghcr.io/smarter-project/gstreamer:v1.0.25ecb16015aa8
libxi@2:1.7.10-0ubuntu1
no fix listed
ghcr.io/smarter-project/image-detector:v2.5.31dcca70c6446
libxi@2:1.7.10-0ubuntu1
no fix listed

Open the chart page →

253,351
starwhalestarwhaleVerified publisher0.6.151 of 4See more

starwhale starwhale 0.6.15

1 of the 4 container images this version deploys carry CVE-2026-94281.

Container imageDigestPackageFixed in
ghcr.io/star-whale/server:0.6.158368359c8dd0
libxi@2:1.7.10-0ubuntu1
no fix listed

Open the chart page →

13,936
wavefront-adapter-for-istiowavefront0.1.41 of 2See more

wavefront-adapter-for-istio wavefront 0.1.4

1 of the 2 container images this version deploys carry CVE-2026-94281.

Container imageDigestPackageFixed in
wavefronthq/proxy:9.2d1064d28f6eb
libxi@2:1.7.9-1
no fix listed

Open the chart page →

16,376
browserlessalekcVerified publisher1.2.71 of 1See more

browserless alekc 1.2.7

1 of the 1 container images this version deploys carry CVE-2026-94281.

Container imageDigestPackageFixed in
ghcr.io/browserless/chrome:v2.56.7d600eac6283f
libxi@2:1.8.1-1build1
no fix listed

Open the chart page →

2,377
alibaba-rsocket-brokeralibaba-rsocket-brokerVerified publisher0.1.31 of 1See more

alibaba-rsocket-broker alibaba-rsocket-broker 0.1.3

1 of the 1 container images this version deploys carry CVE-2026-94281.

Container imageDigestPackageFixed in
linuxchina/alibaba-rsocket-broker:1.1.3-k8sf758e2e567ee
libxi@2:1.7.9-1
no fix listed

Open the chart page →

93,258
omada-controllerandrelote-k8sVerified publisher4.5.01 of 1See more

omada-controller andrelote-k8s 4.5.0

1 of the 1 container images this version deploys carry CVE-2026-94281.

Container imageDigestPackageFixed in
mbentley/omada-controller:4.3f4e682274bed
libxi@2:1.7.9-1
no fix listed

Open the chart page →

11,942
games-on-whalesangelnu2.0.03 of 7See more

games-on-whales angelnu 2.0.0

3 of the 7 container images this version deploys carry CVE-2026-94281.

Container imageDigestPackageFixed in
andrewmackrodt/firefox-x11:142.0.1-r133f9080470c9
libxi@2:1.8-1build1
no fix listed
ghcr.io/games-on-whales/retroarch:1.0.0103fbcec2314
libxi@2:1.7.10-0ubuntu1
no fix listed
ghcr.io/games-on-whales/steam:1.0.09b6105be7ad0
libxi@2:1.7.10-0ubuntu1
no fix listed

Open the chart page →

119,964
arma-reforgerarma-reforger0.5.31 of 8See more

arma-reforger arma-reforger 0.5.3

1 of the 8 container images this version deploys carry CVE-2026-94281.

Container imageDigestPackageFixed in
ghcr.io/brittonhayes/arma-reforger:latest6fde1edc0983
libxi@2:1.7.10-0ubuntu1
no fix listed

Open the chart page →

23,758
dltkvassist-iot-data-integrity-verification0.2.02 of 9See more

dltkv assist-iot-data-integrity-verification 0.2.0

2 of the 9 container images this version deploys carry CVE-2026-94281.

Container imageDigestPackageFixed in
hyperledger/fabric-ca-tools:latest4ce6f43ded2e
libxi@2:1.7.6-1
no fix listed
hyperledger/fabric-couchdb:0.4.15f6c724592abf
libxi@2:1.7.6-1
no fix listed

Open the chart page →

193,878
dltflassist-iot-dlt-based-fl0.2.02 of 9See more

dltfl assist-iot-dlt-based-fl 0.2.0

2 of the 9 container images this version deploys carry CVE-2026-94281.

Container imageDigestPackageFixed in
hyperledger/fabric-ca-tools:latest4ce6f43ded2e
libxi@2:1.7.6-1
no fix listed
hyperledger/fabric-couchdb:0.4.15f6c724592abf
libxi@2:1.7.6-1
no fix listed

Open the chart page →

193,878
sdn-controllerassist-iot-sdn-controller2.4.01 of 1See more

sdn-controller assist-iot-sdn-controller 2.4.0

1 of the 1 container images this version deploys carry CVE-2026-94281.

Container imageDigestPackageFixed in
assistiot/sdn_controller:2.4.0ea254b6d8a31
libxi@2:1.7.10-0ubuntu1
no fix listed

Open the chart page →

8,277
videoaugmentationassist-iot-video-augmentation0.1.01 of 3See more

videoaugmentation assist-iot-video-augmentation 0.1.0

1 of the 3 container images this version deploys carry CVE-2026-94281.

Container imageDigestPackageFixed in
assistiot/video_augmentation:runner-cpu-lateste5ae539ce2cb
libxi@2:1.7.10-0ubuntu1
no fix listed

Open the chart page →

77,713
colosseumbook-k8sinfra-v21.0.181 of 5See more

colosseum book-k8sinfra-v2 1.0.18

1 of the 5 container images this version deploys carry CVE-2026-94281.

Container imageDigestPackageFixed in
sysnet4admin/colosseum-agg:logbc25b152d88e
libxi@2:1.8-1build1
no fix listed

Open the chart page →

28,888
node-appbryopsida0.5.11 of 2See more

node-app bryopsida 0.5.1

1 of the 2 container images this version deploys carry CVE-2026-94281.

Container imageDigestPackageFixed in
ghcr.io/bryopsida/k8s-dev-pod:main82d0b161161d
libxi@2:1.8.1-1build1
no fix listed

Open the chart page →

76,596
distributed-tensorflowcloudnativeapp0.1.11 of 1See more

distributed-tensorflow cloudnativeapp 0.1.1

1 of the 1 container images this version deploys carry CVE-2026-94281.

Container imageDigestPackageFixed in
cheyang/distributed-tf:1.6.046cc34755493
libxi@2:1.7.6-1
no fix listed

Open the chart page →

95,373
hlf-couchdbcloudnativeapp1.0.61 of 1See more

hlf-couchdb cloudnativeapp 1.0.6

1 of the 1 container images this version deploys carry CVE-2026-94281.

Container imageDigestPackageFixed in
hyperledger/fabric-couchdb:0.4.10c65891b6c237
libxi@2:1.7.6-1
no fix listed

Open the chart page →

92,443
rundeckcloudnativeapp0.1.01 of 2See more

rundeck cloudnativeapp 0.1.0

1 of the 2 container images this version deploys carry CVE-2026-94281.

Container imageDigestPackageFixed in
rundeck/rundeck:3.0.16b13e8059ad72
libxi@2:1.7.6-1
no fix listed

Open the chart page →

23,778
unificloudnativeapp0.4.21 of 1See more

unifi cloudnativeapp 0.4.2

1 of the 1 container images this version deploys carry CVE-2026-94281.

Container imageDigestPackageFixed in
jacobalberty/unifi:5.10.19c409924e2463
libxi@2:1.7.6-1
no fix listed

Open the chart page →

22,727
webpagetest-agentcloudnativeapp0.2.01 of 1See more

webpagetest-agent cloudnativeapp 0.2.0

1 of the 1 container images this version deploys carry CVE-2026-94281.

Container imageDigestPackageFixed in
timothyclarke/wptagent:2018-01-2322c41e5ca7e2
libxi@2:1.7.6-1
no fix listed

Open the chart page →

137,542
difydify1.0.01 of 4See more

dify dify 1.0.0

1 of the 4 container images this version deploys carry CVE-2026-94281.

Container imageDigestPackageFixed in
langgenius/dify-plugin-daemon:main-local7d2fb04baf44
libxi@2:1.8.1-1build1
no fix listed

Open the chart page →

53,161
photoprismdjjudas21Verified publisher99.99.991 of 1See more

photoprism djjudas21 99.99.99

1 of the 1 container images this version deploys carry CVE-2026-94281.

Container imageDigestPackageFixed in
photoprism/photoprism:240711-cefc6fd632ca74
libxi@2:1.8.1-1build1
no fix listed

Open the chart page →

96,426
rundeckdwardu-helm-charts0.3.41 of 2See more

rundeck dwardu-helm-charts 0.3.4

1 of the 2 container images this version deploys carry CVE-2026-94281.

Container imageDigestPackageFixed in
rundeck/rundeck:3.2.74d64fe56f767
libxi@2:1.7.6-1
no fix listed

Open the chart page →

19,928
business-api-ecosystemfiware1.1.01 of 4See more

business-api-ecosystem fiware 1.1.0

1 of the 4 container images this version deploys carry CVE-2026-94281.

Container imageDigestPackageFixed in
fiware/biz-ecosystem-charging-backend:11.7.029456835bb2c
libxi@2:1.7.10-0ubuntu1
no fix listed

Open the chart page →

115,149
accumulogaffer2.2.11 of 4See more

accumulo gaffer 2.2.1

1 of the 4 container images this version deploys carry CVE-2026-94281.

Container imageDigestPackageFixed in
gchq/accumulo:2.0.1c460bb587d6d
libxi@2:1.8.1-1build1
no fix listed

Open the chart page →

17,483
garge-apigargeVerified publisher0.1.561 of 1See more

garge-api garge 0.1.56

1 of the 1 container images this version deploys carry CVE-2026-94281.

Container imageDigestPackageFixed in
sondresjo/garge-api:v2.12.762dfd5c9b2e4
libxi@2:1.8.1-1build1
no fix listed

Open the chart page →

1,252
airsonicgeek-cookbookVerified publisher6.4.21 of 1See more

airsonic geek-cookbook 6.4.2

1 of the 1 container images this version deploys carry CVE-2026-94281.

Container imageDigestPackageFixed in
airsonicadvanced/airsonic-advanced:latestf7cbafac2806
libxi@2:1.7.10-0ubuntu1
no fix listed

Open the chart page →

18,517
booksonic-airgeek-cookbookVerified publisher6.4.21 of 1See more

booksonic-air geek-cookbook 6.4.2

1 of the 1 container images this version deploys carry CVE-2026-94281.

Container imageDigestPackageFixed in
ghcr.io/linuxserver/booksonic-air:version-v2009.1.0baa4fa9549dc
libxi@2:1.7.9-1
no fix listed

Open the chart page →

19,652
calibre-webgeek-cookbookVerified publisher8.4.21 of 1See more

calibre-web geek-cookbook 8.4.2

1 of the 1 container images this version deploys carry CVE-2026-94281.

Container imageDigestPackageFixed in
linuxserver/calibre-web:version-0.6.12938810eca3d3
libxi@2:1.7.10-0ubuntu1
no fix listed

Open the chart page →

16,710

Container images carrying it

102 by charts deploying them

A fixed version is listed for 0 of the 1 affected package.

Container imageDigestPackageFixed inUsed by
quay.io/opsmxpublic/spin-sample-pipeline:v1.0.1c6a934439421
libxi@2:1.7.6-1
no fix listed
1
registry.gitlab.com/crafty-controller/crafty-4:latest7b6e87514259
libxi@2:1.8.1-1build1
no fix listed
1

syft 1.42.1 · advisories as of 25 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.