StackRadar

CVE-2026-94282

Medium

Advisory

Published 25 Sept 2026In the index since 26 Sept 2026
Severity
Medium
worst across findings
CVSS
5.5
base score, highest
EPSS
—
probability of exploitation
CISA KEV
Not listed
no confirmed exploitation
Charts affected
222
of 17,879 indexed, latest versions
Container images
202
deployed by those charts
Fix available
None
affected package

The matching OSV records carry no description.

Carried by container images the latest versions of 222 of 17,879 indexed charts deploy, on 202 images.

Affected packageAffected versionsFixed inImages
libxideb2:1.7.6-1, 2:1.7.9-1, 2:1.7.10-0ubuntu1, 2:1.8-1+b1+5 moreno fix listed202
OSV records
UBUNTU-CVE-2026-94282DEBIAN-CVE-2026-94282

Charts affected

222 by stars
ChartLatestAffected imagesRadar Score
uptime-kumauptime-kumaVerified publisher4.2.01 of 1See more

uptime-kuma uptime-kuma 4.2.0

1 of the 1 container images this version deploys carry CVE-2026-94282.

Container imageDigestPackageFixed in
louislam/uptime-kuma:2.5.0a8610b3b4c38
libxi@2:1.8-1+b1
no fix listed

Open the chart page →

32,035
zabbixzabbix-communityVerified publisher7.1.01 of 5See more

zabbix zabbix-community 7.1.0

1 of the 5 container images this version deploys carry CVE-2026-94282.

Container imageDigestPackageFixed in
zabbix/zabbix-web-service:ubuntu-7.0.23915b3183e054
libxi@2:1.8.1-1build1
no fix listed

Open the chart page →

14,380
milvusmilvus4.0.311 of 5See more

milvus milvus 4.0.31

1 of the 5 container images this version deploys carry CVE-2026-94282.

Container imageDigestPackageFixed in
apachepulsar/pulsar:2.8.2d538416d5afe
libxi@2:1.7.10-0ubuntu1
no fix listed

Open the chart page →

177,847
penpotpenpotOfficialVerified publisher1.10.01 of 5See more

penpot penpot 1.10.0

1 of the 5 container images this version deploys carry CVE-2026-94282.

Container imageDigestPackageFixed in
penpotapp/exporter:2.18.0beb2c2bd9660
libxi@2:1.8.2-1+dhi0
no fix listed

Open the chart page →

5,180
difydoubanVerified publisher0.10.01 of 6See more

dify douban 0.10.0

1 of the 6 container images this version deploys carry CVE-2026-94282.

Container imageDigestPackageFixed in
langgenius/dify-plugin-daemon:0.5.1-local8269050f192e
libxi@2:1.8.1-1build1
no fix listed

Open the chart page →

80,986
difydify-helmVerified publisher0.38.01 of 11See more

dify dify-helm 0.38.0

1 of the 11 container images this version deploys carry CVE-2026-94282.

Container imageDigestPackageFixed in
langgenius/dify-plugin-daemon:0.6.3-local3c694329357b
libxi@2:1.8.1-1build1
no fix listed

Open the chart page →

70,707
wazuhwazuh-helm-morgovedVerified publisher2.0.71 of 5See more

wazuh wazuh-helm-morgoved 2.0.7

1 of the 5 container images this version deploys carry CVE-2026-94282.

Container imageDigestPackageFixed in
kinseii/wazuh-agent:4.14.17160eb143728
libxi@2:1.8-1+b1
no fix listed

Open the chart page →

11,901
zabbixcetic3.1.31 of 5See more

zabbix cetic 3.1.3

1 of the 5 container images this version deploys carry CVE-2026-94282.

Container imageDigestPackageFixed in
zabbix/zabbix-web-service:ubuntu-6.0.8ee4baa872280
libxi@2:1.8-1build1
no fix listed

Open the chart page →

34,675
gotenbergmaikumoriVerified publisher1.25.01 of 1See more

gotenberg maikumori 1.25.0

1 of the 1 container images this version deploys carry CVE-2026-94282.

Container imageDigestPackageFixed in
gotenberg/gotenberg:8.36.087c16b9f3642
libxi@2:1.8.2-1
no fix listed

Open the chart page →

11,331
oneuptimeoneuptimeOfficialVerified publisher14.0.51 of 7See more

oneuptime oneuptime 14.0.5

1 of the 7 container images this version deploys carry CVE-2026-94282.

Container imageDigestPackageFixed in
oneuptime/probe:release02e2cc602765
libxi@2:1.8-1+b1
no fix listed

Open the chart page →

8,420
milvusmilvus-helm5.0.281 of 4See more

milvus milvus-helm 5.0.28

1 of the 4 container images this version deploys carry CVE-2026-94282.

Container imageDigestPackageFixed in
apachepulsar/pulsar:3.0.79c9947de139d
libxi@2:1.8-1build1
no fix listed

Open the chart page →

11,758
apim3graviteeioVerified publisher4.12.202 of 4See more

apim3 graviteeio 4.12.20

2 of the 4 container images this version deploys carry CVE-2026-94282.

Container imageDigestPackageFixed in
graviteeio/apim-gateway:4.12.20-debian8f1a14449381
libxi@2:1.8.2-1
no fix listed
graviteeio/apim-management-api:4.12.20-debiand30d085395ca
libxi@2:1.8.2-1
no fix listed

Open the chart page →

4,733
budibasebudibase0.0.0-master1 of 7See more

budibase budibase 0.0.0-master

1 of the 7 container images this version deploys carry CVE-2026-94282.

Container imageDigestPackageFixed in
budibase/database:2.1.0d90f656261c9
libxi@2:1.8-1+b1
no fix listed

Open the chart page →

10,259
paperless-ngxfmjstudios0.2.81 of 5See more

paperless-ngx fmjstudios 0.2.8

1 of the 5 container images this version deploys carry CVE-2026-94282.

Container imageDigestPackageFixed in
gotenberg/gotenberg:8.0.1cf0b9a7ca3cf
libxi@2:1.8-1+b1
no fix listed

Open the chart page →

32,466
openclawopenclawVerified publisher1.94.01 of 2See more

openclaw openclaw 1.94.0

1 of the 2 container images this version deploys carry CVE-2026-94282.

Container imageDigestPackageFixed in
ghcr.io/browserless/chromium:v2.56.7b1ba7b054af2
libxi@2:1.8.1-1build1
no fix listed

Open the chart page →

3,385
penpotcodechemVerified publisher1.0.102 of 3See more

penpot codechem 1.0.10

2 of the 3 container images this version deploys carry CVE-2026-94282.

Container imageDigestPackageFixed in
penpotapp/backend:1.16.0-betae978e871be07
libxi@2:1.8-1build1
no fix listed
penpotapp/exporter:1.16.0-betafa7086ad92b1
libxi@2:1.8-1build1
no fix listed

Open the chart page →

29,432
hdfsgaffer2.2.11 of 2See more

hdfs gaffer 2.2.1

1 of the 2 container images this version deploys carry CVE-2026-94282.

Container imageDigestPackageFixed in
gchq/hdfs:3.3.35ec58edbb2db
libxi@2:1.8.1-1build1
no fix listed

Open the chart page →

5,711
puppetserverpuppetserver9.5.22 of 5See more

puppetserver puppetserver 9.5.2

2 of the 5 container images this version deploys carry CVE-2026-94282.

Container imageDigestPackageFixed in
ghcr.io/voxpupuli/container-puppetdb:7.18.0-v1.5.0a56dfe91f5b1
libxi@2:1.8-1build1
no fix listed
ghcr.io/voxpupuli/container-puppetserver:7.17.0-v1.5.0916746209ac5
libxi@2:1.8-1build1
no fix listed

Open the chart page →

15,199
selenium3selenium31.2.41 of 1See more

selenium3 selenium3 1.2.4

1 of the 1 container images this version deploys carry CVE-2026-94282.

Container imageDigestPackageFixed in
selenium/hub:3.141.5902f251d48d5f
libxi@2:1.7.10-0ubuntu1
no fix listed

Open the chart page →

12,197
wazuh-agentavistoVerified publisher4.12.21 of 1See more

wazuh-agent avisto 4.12.2

1 of the 1 container images this version deploys carry CVE-2026-94282.

Container imageDigestPackageFixed in
ghcr.io/avistotelecom/docker-wazuh-agent:4.12.08766ba08bf1a
libxi@2:1.8-1+b1
no fix listed

Open the chart page →

6,868
hadoopbigdata-chartsVerified publisher1.0.11 of 2See more

hadoop bigdata-charts 1.0.1

1 of the 2 container images this version deploys carry CVE-2026-94282.

Container imageDigestPackageFixed in
5200710/hadoop:3.2.3-java8092d3088a5fb
libxi@2:1.7.10-0ubuntu1
no fix listed

Open the chart page →

12,602
selenium-gridselenium-grid0.59.12 of 4See more

selenium-grid selenium-grid 0.59.1

2 of the 4 container images this version deploys carry CVE-2026-94282.

Container imageDigestPackageFixed in
selenium/node-chrome:4.48.0-202609055ac71fd8dd1e
libxi@2:1.8.1-1build1
no fix listed
selenium/node-firefox:4.48.0-2026090574a5c1c90f95
libxi@2:1.8.1-1build1
no fix listed

Open the chart page →

8,174
photoprismandrenarchyVerified publisher8.15.01 of 1See more

photoprism andrenarchy 8.15.0

1 of the 1 container images this version deploys carry CVE-2026-94282.

Container imageDigestPackageFixed in
photoprism/photoprism:260728958642220223
libxi@2:1.8.2-2
no fix listed

Open the chart page →

48,049
karakeephelmforgeVerified publisher1.2.92 of 3See more

karakeep helmforge 1.2.9

2 of the 3 container images this version deploys carry CVE-2026-94282.

Container imageDigestPackageFixed in
ghcr.io/browserless/chromium:v2.55.42ed0183564d7
libxi@2:1.8.1-1build1
no fix listed
ghcr.io/karakeep-app/karakeep:0.33.2b069e4307dec
libxi@2:1.8-1+b1
no fix listed

Open the chart page →

10,458
local-ailocalai3.4.21 of 1See more

local-ai localai 3.4.2

1 of the 1 container images this version deploys carry CVE-2026-94282.

Container imageDigestPackageFixed in
quay.io/go-skynet/local-ai:latest0632c21ddbe4
libxi@2:1.8.1-1build1
no fix listed

Open the chart page →

4,003
grafana-pdf-exporterwiremindVerified publisher2.1.11 of 1See more

grafana-pdf-exporter wiremind 2.1.1

1 of the 1 container images this version deploys carry CVE-2026-94282.

Container imageDigestPackageFixed in
ghcr.io/wiremind/grafana-pdf-exporter:v1.7dbaa8527bf4c
libxi@2:1.8-1+b1
no fix listed

Open the chart page →

10,163
apimgraviteeioVerified publisher4.12.202 of 4See more

apim graviteeio 4.12.20

2 of the 4 container images this version deploys carry CVE-2026-94282.

Container imageDigestPackageFixed in
graviteeio/apim-gateway:4.12.20-debian8f1a14449381
libxi@2:1.8.2-1
no fix listed
graviteeio/apim-management-api:4.12.20-debiand30d085395ca
libxi@2:1.8.2-1
no fix listed

Open the chart page →

4,733
hermes-agenthermes-agentVerified publisher1.16.01 of 1See more

hermes-agent hermes-agent 1.16.0

1 of the 1 container images this version deploys carry CVE-2026-94282.

Container imageDigestPackageFixed in
nousresearch/hermes-agent:v2026.9.24fca358f12efd
libxi@2:1.8.2-1
no fix listed

Open the chart page →

5,727
coreinstill-aiOfficialVerified publisher0.1.751 of 15See more

core instill-ai 0.1.75

1 of the 15 container images this version deploys carry CVE-2026-94282.

Container imageDigestPackageFixed in
instill/artifact-backend:b28766ac4a393e601ed
libxi@2:1.8.2-1
no fix listed

Open the chart page →

32,167
calibre-webk8s-home-lab-repo9.1.11 of 1See more

calibre-web k8s-home-lab-repo 9.1.1

1 of the 1 container images this version deploys carry CVE-2026-94282.

Container imageDigestPackageFixed in
ghcr.io/linuxserver/calibre-web:0.6.267c0464228f2f
libxi@2:1.8.1-1build1
no fix listed

Open the chart page →

5,019
oesopsmxVerified publisher4.0.321 of 25See more

oes opsmx 4.0.32

1 of the 25 container images this version deploys carry CVE-2026-94282.

Container imageDigestPackageFixed in
quay.io/opsmxpublic/spin-sample-pipeline:v1.0.1c6a934439421
libxi@2:1.7.6-1
no fix listed

Open the chart page →

103,026
browserless-chromesagikazarmarkVerified publisher0.0.51 of 1See more

browserless-chrome sagikazarmark 0.0.5

1 of the 1 container images this version deploys carry CVE-2026-94282.

Container imageDigestPackageFixed in
browserless/chrome:1.48.0-chrome-stablec81ae5585b47
libxi@2:1.7.10-0ubuntu1
no fix listed

Open the chart page →

103,899
paperless-ngxadnoctemVerified publisher0.4.21 of 5See more

paperless-ngx adnoctem 0.4.2

1 of the 5 container images this version deploys carry CVE-2026-94282.

Container imageDigestPackageFixed in
gotenberg/gotenberg:8.36.087c16b9f3642
libxi@2:1.8.2-1
no fix listed

Open the chart page →

22,152
icat-k8salba-helm-chartsVerified publisher1.1.01 of 4See more

icat-k8s alba-helm-charts 1.1.0

1 of the 4 container images this version deploys carry CVE-2026-94282.

Container imageDigestPackageFixed in
payara/server-full:7.2026.2-jdk2531f1253f0cf8
libxi@2:1.8-1build1
no fix listed

Open the chart page →

4,238
hermes-agentankra-chartsVerified publisher0.3.11 of 1See more

hermes-agent ankra-charts 0.3.1

1 of the 1 container images this version deploys carry CVE-2026-94282.

Container imageDigestPackageFixed in
nousresearch/hermes-agent:v2026.8.27e0df6adebddf
libxi@2:1.8.2-1
no fix listed

Open the chart page →

6,449
dltbrokerassist-iot-distributed-broker0.2.02 of 9See more

dltbroker assist-iot-distributed-broker 0.2.0

2 of the 9 container images this version deploys carry CVE-2026-94282.

Container imageDigestPackageFixed in
hyperledger/fabric-ca-tools:latest4ce6f43ded2e
libxi@2:1.7.6-1
no fix listed
hyperledger/fabric-couchdb:0.4.15f6c724592abf
libxi@2:1.7.6-1
no fix listed

Open the chart page →

198,835
dltloggingassist-iot-logging-auditing0.2.02 of 9See more

dltlogging assist-iot-logging-auditing 0.2.0

2 of the 9 container images this version deploys carry CVE-2026-94282.

Container imageDigestPackageFixed in
hyperledger/fabric-ca-tools:latest4ce6f43ded2e
libxi@2:1.7.6-1
no fix listed
hyperledger/fabric-couchdb:0.4.15f6c724592abf
libxi@2:1.7.6-1
no fix listed

Open the chart page →

198,816
tensorflow-notebookcloudnativeapp0.1.21 of 1See more

tensorflow-notebook cloudnativeapp 0.1.2

1 of the 1 container images this version deploys carry CVE-2026-94282.

Container imageDigestPackageFixed in
tensorflow/tensorflow:1.6.0-devel1e3172090703
libxi@2:1.7.6-1
no fix listed

Open the chart page →

97,834
dawarichcogitriVerified publisher2.9.21 of 3See more

dawarich cogitri 2.9.2

1 of the 3 container images this version deploys carry CVE-2026-94282.

Container imageDigestPackageFixed in
freikin/dawarich:1.15.2e58334ca5697
libxi@2:1.8.2-1
no fix listed

Open the chart page →

6,285
mealiedeimosfr-charts1.0.151 of 1See more

mealie deimosfr-charts 1.0.15

1 of the 1 container images this version deploys carry CVE-2026-94282.

Container imageDigestPackageFixed in
ghcr.io/mealie-recipes/mealie:v3.24.00b08ac3a9f0a
libxi@2:1.8.2-1
no fix listed

Open the chart page →

4,440
craftycontrollerdrewburr-labs-helm-chartsVerified publisher0.3.01 of 1See more

craftycontroller drewburr-labs-helm-charts 0.3.0

1 of the 1 container images this version deploys carry CVE-2026-94282.

Container imageDigestPackageFixed in
registry.gitlab.com/crafty-controller/crafty-4:latest7b6e87514259
libxi@2:1.8.1-1build1
no fix listed

Open the chart page →

38,924
rstudiodsri-helm-charts0.1.281 of 1See more

rstudio dsri-helm-charts 0.1.28

1 of the 1 container images this version deploys carry CVE-2026-94282.

Container imageDigestPackageFixed in
ghcr.io/maastrichtu-ids/rstudio:latest981aa4c109e1
libxi@2:1.8.1-1build1
no fix listed

Open the chart page →

75,168
bazarrgeek-cookbookVerified publisher10.6.21 of 1See more

bazarr geek-cookbook 10.6.2

1 of the 1 container images this version deploys carry CVE-2026-94282.

Container imageDigestPackageFixed in
ghcr.io/k8s-at-home/bazarr:v1.0.3fdb5501cdfb9
libxi@2:1.7.10-0ubuntu1
no fix listed

Open the chart page →

18,041
calibregeek-cookbookVerified publisher5.4.21 of 1See more

calibre geek-cookbook 5.4.2

1 of the 1 container images this version deploys carry CVE-2026-94282.

Container imageDigestPackageFixed in
linuxserver/calibre:version-v5.21.0a847b5b2d860
libxi@2:1.7.9-1
no fix listed

Open the chart page →

23,821
games-on-whalesgeek-cookbookVerified publisher1.8.22 of 7See more

games-on-whales geek-cookbook 1.8.2

2 of the 7 container images this version deploys carry CVE-2026-94282.

Container imageDigestPackageFixed in
ghcr.io/games-on-whales/retroarch:1.0.0103fbcec2314
libxi@2:1.7.10-0ubuntu1
no fix listed
ghcr.io/games-on-whales/steam:1.0.09b6105be7ad0
libxi@2:1.7.10-0ubuntu1
no fix listed

Open the chart page →

115,195
homebridgegeek-cookbookVerified publisher5.3.21 of 1See more

homebridge geek-cookbook 5.3.2

1 of the 1 container images this version deploys carry CVE-2026-94282.

Container imageDigestPackageFixed in
ghcr.io/oznu/homebridge:2022-07-08ff2af53897e7
libxi@2:1.7.10-0ubuntu1
no fix listed

Open the chart page →

90,055
omada-controllergeek-cookbookVerified publisher4.4.21 of 1See more

omada-controller geek-cookbook 4.4.2

1 of the 1 container images this version deploys carry CVE-2026-94282.

Container imageDigestPackageFixed in
mbentley/omada-controller:4.3f4e682274bed
libxi@2:1.7.9-1
no fix listed

Open the chart page →

11,974
stashgeek-cookbookVerified publisher3.4.21 of 1See more

stash geek-cookbook 3.4.2

1 of the 1 container images this version deploys carry CVE-2026-94282.

Container imageDigestPackageFixed in
stashapp/stash:latest24dbd7607174
libxi@2:1.7.10-0ubuntu1
no fix listed

Open the chart page →

16,382
valheimgeek-cookbookVerified publisher4.4.21 of 1See more

valheim geek-cookbook 4.4.2

1 of the 1 container images this version deploys carry CVE-2026-94282.

Container imageDigestPackageFixed in
ghcr.io/lloesche/valheim-server:latestc885aa902faf
libxi@2:1.8.2-1
no fix listed

Open the chart page →

2,896
castopodh2mVerified publisher1.12.101 of 3See more

castopod h2m 1.12.10

1 of the 3 container images this version deploys carry CVE-2026-94282.

Container imageDigestPackageFixed in
castopod/castopod:1.12.101fd37280cbb2
libxi@2:1.8-1+b1
no fix listed

Open the chart page →

10,706

Container images carrying it

202 by charts deploying them

A fixed version is listed for 0 of the 1 affected package.

Container imageDigestPackageFixed inUsed by
quay.io/opsmxpublic/spin-sample-pipeline:v1.0.1c6a934439421
libxi@2:1.7.6-1
no fix listed
1
registry.gitlab.com/crafty-controller/crafty-4:latest7b6e87514259
libxi@2:1.8.1-1build1
no fix listed
1

syft 1.42.1 · advisories as of 26 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.