StackRadar

CVE-2026-94281

Medium

Advisory

Published 24 Sept 2026In the index since 25 Sept 2026
Severity
Medium
worst across findings
CVSS
5.5
base score, highest
EPSS
—
probability of exploitation
CISA KEV
Not listed
no confirmed exploitation
Charts affected
106
of 17,844 indexed, latest versions
Container images
102
deployed by those charts
Fix available
None
affected package

The matching OSV records carry no description.

Carried by container images the latest versions of 106 of 17,844 indexed charts deploy, on 102 images.

Affected packageAffected versionsFixed inImages
libxideb2:1.7.6-1, 2:1.7.9-1, 2:1.7.10-0ubuntu1, 2:1.8-1build1+2 moreno fix listed102
OSV records
UBUNTU-CVE-2026-94281

Charts affected

106 by stars
ChartLatestAffected imagesRadar Score
openkmgeek-cookbookVerified publisher4.2.01 of 1See more

openkm geek-cookbook 4.2.0

1 of the 1 container images this version deploys carry CVE-2026-94281.

Container imageDigestPackageFixed in
openkm/openkm-ce:6.3.113bc465a7461b
libxi@2:1.7.10-0ubuntu1
no fix listed

Open the chart page →

28,840
photoprismgeek-cookbookVerified publisher7.2.01 of 1See more

photoprism geek-cookbook 7.2.0

1 of the 1 container images this version deploys carry CVE-2026-94281.

Container imageDigestPackageFixed in
photoprism/photoprism:220629-jammy2954334adbda
libxi@2:1.8-1build1
no fix listed

Open the chart page →

20,168
puppeteergeek-cookbookVerified publisher1.2.21 of 1See more

puppeteer geek-cookbook 1.2.2

1 of the 1 container images this version deploys carry CVE-2026-94281.

Container imageDigestPackageFixed in
ghcr.io/jr0dd/puppeteer:v13.3.26047599cd78e
libxi@2:1.7.10-0ubuntu1
no fix listed

Open the chart page →

16,164
teedygeek-cookbookVerified publisher6.2.01 of 1See more

teedy geek-cookbook 6.2.0

1 of the 1 container images this version deploys carry CVE-2026-94281.

Container imageDigestPackageFixed in
sismics/docs:v1.10f4b0ef019cf1
libxi@2:1.7.9-1
no fix listed

Open the chart page →

27,575
xtevegeek-cookbookVerified publisher8.4.21 of 1See more

xteve geek-cookbook 8.4.2

1 of the 1 container images this version deploys carry CVE-2026-94281.

Container imageDigestPackageFixed in
ghcr.io/k8s-at-home/xteve:v2.2.0.200292b3614670f
libxi@2:1.7.10-0ubuntu1
no fix listed

Open the chart page →

18,609
geomapfishgeomapfish0.8.01 of 3See more

geomapfish geomapfish 0.8.0

1 of the 3 container images this version deploys carry CVE-2026-94281.

Container imageDigestPackageFixed in
camptocamp/geomapfishapp-geoportal:latestae874f70cc16
libxi@2:1.8.1-1build1
no fix listed

Open the chart page →

6,671
7dtdhelm-7dtd0.1.01 of 1See more

7dtd helm-7dtd 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-94281.

Container imageDigestPackageFixed in
vinanrra/7dtd-server:v0.4.4f9534490bd2b
libxi@2:1.7.9-1
no fix listed

Open the chart page →

67,018
countlyhelmforgeVerified publisher1.2.61 of 3See more

countly helmforge 1.2.6

1 of the 3 container images this version deploys carry CVE-2026-94281.

Container imageDigestPackageFixed in
countly/countly-server:25.05.4e3c238248f99
libxi@2:1.7.10-0ubuntu1
no fix listed

Open the chart page →

74,654
openaevhelm-openbasVerified publisher2.0.71 of 7See more

openaev helm-openbas 2.0.7

1 of the 7 container images this version deploys carry CVE-2026-94281.

Container imageDigestPackageFixed in
openaev/platform:3.260921.04d2cd9cce457
libxi@2:1.8.1-1build1
no fix listed

Open the chart page →

7,651
svacerhelm-svacer0.6.01 of 1See more

svacer helm-svacer 0.6.0

1 of the 1 container images this version deploys carry CVE-2026-94281.

Container imageDigestPackageFixed in
ispras/svacer:11-2-042aa9fa9f189
libxi@2:1.8-1build1
no fix listed

Open the chart page →

6,477
homebridgehomeenterpriseinc0.5.01 of 1See more

homebridge homeenterpriseinc 0.5.0

1 of the 1 container images this version deploys carry CVE-2026-94281.

Container imageDigestPackageFixed in
oznu/homebridge:2021-12-19-ubuntu2e12d0e2dcce
libxi@2:1.7.9-1
no fix listed

Open the chart page →

80,994
browserlessicoretechVerified publisher0.16.61 of 1See more

browserless icoretech 0.16.6

1 of the 1 container images this version deploys carry CVE-2026-94281.

Container imageDigestPackageFixed in
ghcr.io/browserless/chromium:v2.56.7b1ba7b054af2
libxi@2:1.8.1-1build1
no fix listed

Open the chart page →

2,207
itm-servicesintelVerified publisher2.0.01 of 8See more

itm-services intel 2.0.0

1 of the 8 container images this version deploys carry CVE-2026-94281.

Container imageDigestPackageFixed in
intel/dlstreamer-pipeline-server:2022.1.1-ubuntu20aa8f5483a2ef
libxi@2:1.7.10-0ubuntu1
no fix listed

Open the chart page →

89,928
homebridgejespernohrVerified publisher0.2.01 of 1See more

homebridge jespernohr 0.2.0

1 of the 1 container images this version deploys carry CVE-2026-94281.

Container imageDigestPackageFixed in
homebridge/homebridge:latest77c685a40911
libxi@2:1.8.1-1build1
no fix listed

Open the chart page →

36,733
discord-experiencebotjfwenischVerified publisher0.7.41 of 1See more

discord-experiencebot jfwenisch 0.7.4

1 of the 1 container images this version deploys carry CVE-2026-94281.

Container imageDigestPackageFixed in
ghcr.io/jfwenisch/discord-experiencebot:latestb52ff07f9f0c
libxi@2:1.7.9-1
no fix listed

Open the chart page →

8,202
steamcmd-managerjfwenischVerified publisher0.4.51 of 1See more

steamcmd-manager jfwenisch 0.4.5

1 of the 1 container images this version deploys carry CVE-2026-94281.

Container imageDigestPackageFixed in
ghcr.io/jfwenisch/steamcmd-manager:v0.4.5dab685e668d9
libxi@2:1.8.1-1build1
no fix listed

Open the chart page →

6,999
webtoolsjfwenischVerified publisher0.1.41 of 1See more

webtools jfwenisch 0.1.4

1 of the 1 container images this version deploys carry CVE-2026-94281.

Container imageDigestPackageFixed in
ghcr.io/jfwenisch/webtools:v0.1.44569cae83c70
libxi@2:1.8.1-1build1
no fix listed

Open the chart page →

6,980
valheim-serverk8s-chartsVerified publisher1.3.01 of 1See more

valheim-server k8s-charts 1.3.0

1 of the 1 container images this version deploys carry CVE-2026-94281.

Container imageDigestPackageFixed in
mbround18/valheim:3.1.070bd4da591cd
libxi@2:1.8-1build1
no fix listed

Open the chart page →

63,771
k8s-dev-podk8s-dev-pod0.3.11 of 1See more

k8s-dev-pod k8s-dev-pod 0.3.1

1 of the 1 container images this version deploys carry CVE-2026-94281.

Container imageDigestPackageFixed in
ghcr.io/bryopsida/k8s-dev-pod:main82d0b161161d
libxi@2:1.8.1-1build1
no fix listed

Open the chart page →

70,952
xwikikeyporttech0.2.01 of 2See more

xwiki keyporttech 0.2.0

1 of the 2 container images this version deploys carry CVE-2026-94281.

Container imageDigestPackageFixed in
library/xwiki:lts-postgres-tomcat9b8142bce157
libxi@2:1.8.1-1build1
no fix listed

Open the chart page →

1,421
kubernetes-netskope-publisherkubernetes-netskope-publisherVerified publisher1.5.01 of 2See more

kubernetes-netskope-publisher kubernetes-netskope-publisher 1.5.0

1 of the 2 container images this version deploys carry CVE-2026-94281.

Container imageDigestPackageFixed in
netskopeprivateaccess/publisher_u22:latest0b43204c37d6
libxi@2:1.8-1build1
no fix listed

Open the chart page →

40,467
penpotkubitodevVerified publisher1.2.12 of 5See more

penpot kubitodev 1.2.1

2 of the 5 container images this version deploys carry CVE-2026-94281.

Container imageDigestPackageFixed in
penpotapp/backend:2.2.147853d9bb9dd
libxi@2:1.8-1build1
no fix listed
penpotapp/exporter:2.2.15c835ffd87ab
libxi@2:1.8-1build1
no fix listed

Open the chart page →

18,088
homebridgelbenicio-communityVerified publisher0.1.151 of 1See more

homebridge lbenicio-community 0.1.15

1 of the 1 container images this version deploys carry CVE-2026-94281.

Container imageDigestPackageFixed in
homebridge/homebridge:latest77c685a40911
libxi@2:1.8.1-1build1
no fix listed

Open the chart page →

36,733
elastictranscoderluiscajl0.46.02 of 4See more

elastictranscoder luiscajl 0.46.0

2 of the 4 container images this version deploys carry CVE-2026-94281.

Container imageDigestPackageFixed in
elastictranscoder/transcoder:627e21dcb4a0327029e6
libxi@2:1.7.9-1
no fix listed
elastictranscoder/transcoder-handler:627e21dc5b75d19e2733
libxi@2:1.7.9-1
no fix listed

Open the chart page →

59,437
cameramedia-streaming-meshVerified publisher0.2.52 of 3See more

camera media-streaming-mesh 0.2.5

2 of the 3 container images this version deploys carry CVE-2026-94281.

Container imageDigestPackageFixed in
ciscolabs/rtsp-client:latesta7b60ec88285
libxi@2:1.7.10-0ubuntu1
no fix listed
ciscolabs/rtsp-server:latestb59fc10bb821
libxi@2:1.7.10-0ubuntu1
no fix listed

Open the chart page →

19,344
msm-rtspmedia-streaming-meshVerified publisher0.0.22 of 2See more

msm-rtsp media-streaming-mesh 0.0.2

2 of the 2 container images this version deploys carry CVE-2026-94281.

Container imageDigestPackageFixed in
ciscolabs/rtsp-client:latesta7b60ec88285
libxi@2:1.7.10-0ubuntu1
no fix listed
ciscolabs/rtsp-server:latestb59fc10bb821
libxi@2:1.7.10-0ubuntu1
no fix listed

Open the chart page →

19,344
rtspmedia-streaming-meshVerified publisher0.0.142 of 2See more

rtsp media-streaming-mesh 0.0.14

2 of the 2 container images this version deploys carry CVE-2026-94281.

Container imageDigestPackageFixed in
ciscolabs/rtsp-client:latesta7b60ec88285
libxi@2:1.7.10-0ubuntu1
no fix listed
ciscolabs/rtsp-server:latestb59fc10bb821
libxi@2:1.7.10-0ubuntu1
no fix listed

Open the chart page →

19,344
chirpstackmosquitto-helm-chart0.5.01 of 8See more

chirpstack mosquitto-helm-chart 0.5.0

1 of the 8 container images this version deploys carry CVE-2026-94281.

Container imageDigestPackageFixed in
apachepulsar/pulsar:2.9.0d056c89b7131
libxi@2:1.7.10-0ubuntu1
no fix listed

Open the chart page →

102,071
smilencsaVerified publisher1.1.01 of 23See more

smile ncsa 1.1.0

1 of the 23 container images this version deploys carry CVE-2026-94281.

Container imageDigestPackageFixed in
socialmediamacroscope/autophrase:0.1.570fb11d4f531
libxi@2:1.7.10-0ubuntu1
no fix listed

Open the chart page →

285,287
audacitynicholaswildeVerified publisher0.1.41 of 1See more

audacity nicholaswilde 0.1.4

1 of the 1 container images this version deploys carry CVE-2026-94281.

Container imageDigestPackageFixed in
ghcr.io/linuxserver/audacity:version-3.0.2cdf203db1e50
libxi@2:1.7.10-0ubuntu1
no fix listed

Open the chart page →

23,893
booksonicnicholaswildeVerified publisher1.0.11 of 1See more

booksonic nicholaswilde 1.0.1

1 of the 1 container images this version deploys carry CVE-2026-94281.

Container imageDigestPackageFixed in
ghcr.io/linuxserver/booksonic:version-1.2677efca1065d
libxi@2:1.7.9-1
no fix listed

Open the chart page →

17,402
digikamnicholaswildeVerified publisher1.0.01 of 1See more

digikam nicholaswilde 1.0.0

1 of the 1 container images this version deploys carry CVE-2026-94281.

Container imageDigestPackageFixed in
ghcr.io/linuxserver/digikam:version-7.3.055b4c7f320ae
libxi@2:1.7.9-1
no fix listed

Open the chart page →

25,009
doublecommandernicholaswildeVerified publisher1.0.21 of 1See more

doublecommander nicholaswilde 1.0.2

1 of the 1 container images this version deploys carry CVE-2026-94281.

Container imageDigestPackageFixed in
ghcr.io/linuxserver/doublecommander:version-0.8.2-1d92969a929c2
libxi@2:1.7.9-1
no fix listed

Open the chart page →

26,161
remminanicholaswildeVerified publisher0.1.41 of 1See more

remmina nicholaswilde 0.1.4

1 of the 1 container images this version deploys carry CVE-2026-94281.

Container imageDigestPackageFixed in
ghcr.io/linuxserver/remmina:version-1.2.0-rcgit.29dfsg-1ubuntu105955792e00f
libxi@2:1.7.9-1
no fix listed

Open the chart page →

23,057
sqlitebrowsernicholaswildeVerified publisher1.0.11 of 1See more

sqlitebrowser nicholaswilde 1.0.1

1 of the 1 container images this version deploys carry CVE-2026-94281.

Container imageDigestPackageFixed in
ghcr.io/linuxserver/sqlitebrowser:version-3.12.2-02876202105241947ubuntu18.04.1426e79828c4b
libxi@2:1.7.9-1
no fix listed

Open the chart page →

24,291
splashntppoolVerified publisher1.0.41 of 1See more

splash ntppool 1.0.4

1 of the 1 container images this version deploys carry CVE-2026-94281.

Container imageDigestPackageFixed in
scrapinghub/splash:3.4.1a5f89bc84606
libxi@2:1.7.9-1
no fix listed

Open the chart page →

95,648
pulsarolehrgfVerified publisher0.0.51 of 2See more

pulsar olehrgf 0.0.5

1 of the 2 container images this version deploys carry CVE-2026-94281.

Container imageDigestPackageFixed in
apachepulsar/pulsar:3.1.016f9fdab3fa6
libxi@2:1.8-1build1
no fix listed

Open the chart page →

9,729
opds-shelfopds-shelfVerified publisher0.4.01 of 3See more

opds-shelf opds-shelf 0.4.0

1 of the 3 container images this version deploys carry CVE-2026-94281.

Container imageDigestPackageFixed in
ghcr.io/linuxserver/calibre-web:latest0767226fcf20
libxi@2:1.8.1-1build1
no fix listed

Open the chart page →

4,784
cdn-remoteopencord0.2.42 of 3See more

cdn-remote opencord 0.2.4

2 of the 3 container images this version deploys carry CVE-2026-94281.

Container imageDigestPackageFixed in
omecproject/cdn-antmedia:1.0.0b4ae7d0d6b74
libxi@2:1.7.9-1
no fix listed
omecproject/cdn-video-repo:1.0.0d59ccb138ffb
libxi@2:1.7.6-1
no fix listed

Open the chart page →

64,741
mcord-cdn-remoteopencord0.1.61 of 2See more

mcord-cdn-remote opencord 0.1.6

1 of the 2 container images this version deploys carry CVE-2026-94281.

Container imageDigestPackageFixed in
omecproject/cdn-video-repo:remote-v3d59ccb138ffb
libxi@2:1.7.6-1
no fix listed

Open the chart page →

43,804
mcord-cdn-remote-freeopencord0.1.31 of 1See more

mcord-cdn-remote-free opencord 0.1.3

1 of the 1 container images this version deploys carry CVE-2026-94281.

Container imageDigestPackageFixed in
omecproject/cdn-video-repo:remote-v3d59ccb138ffb
libxi@2:1.7.6-1
no fix listed

Open the chart page →

30,117
onosopencord3.0.21 of 1See more

onos opencord 3.0.2

1 of the 1 container images this version deploys carry CVE-2026-94281.

Container imageDigestPackageFixed in
onosproject/onos:2.2.144914a8d4b3f
libxi@2:1.7.9-1
no fix listed

Open the chart page →

13,218
voltha-infraopencord2.14.01 of 10See more

voltha-infra opencord 2.14.0

1 of the 10 container images this version deploys carry CVE-2026-94281.

Container imageDigestPackageFixed in
voltha/voltha-onos:5.1.8e038acb950d3
libxi@2:1.7.9-1
no fix listed

Open the chart page →

41,864
javareact-java0.1.01 of 1See more

java react-java 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-94281.

Container imageDigestPackageFixed in
project2team4/react:latest3ff031a08887
libxi@2:1.7.10-0ubuntu1
no fix listed

Open the chart page →

16,075
stirling-pdfrubxkubeVerified publisher0.1.21 of 1See more

stirling-pdf rubxkube 0.1.2

1 of the 1 container images this version deploys carry CVE-2026-94281.

Container imageDigestPackageFixed in
ghcr.io/stirling-tools/stirling-pdf:2.14.33b3670fce70b
libxi@2:1.8.1-1build1
no fix listed

Open the chart page →

6,956
suwayomirubxkubeVerified publisher0.1.21 of 1See more

suwayomi rubxkube 0.1.2

1 of the 1 container images this version deploys carry CVE-2026-94281.

Container imageDigestPackageFixed in
ghcr.io/suwayomi/suwayomi-server:v2.3.2320d2c3218c7f9f
libxi@2:1.8.1-1build1
no fix listed

Open the chart page →

1,880
nadekobotryuunosukeds30.1.21 of 2See more

nadekobot ryuunosukeds3 0.1.2

1 of the 2 container images this version deploys carry CVE-2026-94281.

Container imageDigestPackageFixed in
ryuunosukeds3/nadeko-bot-docker:latestc0398f13e8a9
libxi@2:1.8-1build1
no fix listed

Open the chart page →

8,919
vrisingryuunosukeds30.1.01 of 1See more

vrising ryuunosukeds3 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-94281.

Container imageDigestPackageFixed in
trueosiris/vrising:latest9356f98ad561
libxi@2:1.8-1build1
no fix listed

Open the chart page →

7,872
photoprismschoolguys-helmcharts0.3.81 of 1See more

photoprism schoolguys-helmcharts 0.3.8

1 of the 1 container images this version deploys carry CVE-2026-94281.

Container imageDigestPackageFixed in
photoprism/photoprism:260601650c6ad5a651
libxi@2:1.8.2-2
no fix listed

Open the chart page →

57,124
testing-multitoolsomeblackmagic0.1.21 of 1See more

testing-multitool someblackmagic 0.1.2

1 of the 1 container images this version deploys carry CVE-2026-94281.

Container imageDigestPackageFixed in
someblackmagic/k8s-testing-multitool:v0.1.06eca64b6b440
libxi@2:1.7.10-0ubuntu1
no fix listed

Open the chart page →

102,731

Container images carrying it

102 by charts deploying them

A fixed version is listed for 0 of the 1 affected package.

Container imageDigestPackageFixed inUsed by
quay.io/opsmxpublic/spin-sample-pipeline:v1.0.1c6a934439421
libxi@2:1.7.6-1
no fix listed
1
registry.gitlab.com/crafty-controller/crafty-4:latest7b6e87514259
libxi@2:1.8.1-1build1
no fix listed
1

syft 1.42.1 · advisories as of 25 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.