StackRadar

CVE-2026-94285

Medium

Advisory

Published 28 Sept 2026In the index since 29 Sept 2026
Severity
Medium
worst across findings
CVSS
5.1
base score, highest
EPSS
0.001
1st percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
528
of 17,939 indexed, latest versions
Container images
408
deployed by those charts
Fix available
None
affected package

The matching OSV records carry no description.

Carried by container images the latest versions of 528 of 17,939 indexed charts deploy, on 408 images.

Affected packageAffected versionsFixed inImages
libx11deb2:1.8.4-2, 2:1.8.4-2+deb12u1, 2:1.8.4-2+deb12u2, 2:1.8.12-1+1 moreno fix listed408
OSV records
DEBIAN-CVE-2026-94285

Charts affected

528 by stars
ChartLatestAffected imagesRadar Score
nextcloudnextcloud9.3.01 of 1See more

nextcloud nextcloud 9.3.0

1 of the 1 container images this version deploys carry CVE-2026-94285.

Container imageDigestPackageFixed in
library/nextcloud:34.0.4-apachea5ace30c695a
libx11@2:1.8.12-1
no fix listed

Open the chart page →

4,210
nginx-ingressnginxVerified publisher2.7.31 of 1See more

nginx-ingress nginx 2.7.3

1 of the 1 container images this version deploys carry CVE-2026-94285.

Container imageDigestPackageFixed in
nginx/nginx-ingress:5.6.33e97f06dce1c
libx11@2:1.8.12-1
no fix listed

Open the chart page →

1,248
uptime-kumauptime-kumaVerified publisher4.2.01 of 1See more

uptime-kuma uptime-kuma 4.2.0

1 of the 1 container images this version deploys carry CVE-2026-94285.

Container imageDigestPackageFixed in
louislam/uptime-kuma:2.5.0a8610b3b4c38
libx11@2:1.8.4-2+deb12u2
no fix listed

Open the chart page →

32,092
zammadzammadOfficialVerified publisher19.1.01 of 5See more

zammad zammad 19.1.0

1 of the 5 container images this version deploys carry CVE-2026-94285.

Container imageDigestPackageFixed in
ghcr.io/zammad/zammad:7.2.0-000061a2947b478e
libx11@2:1.8.12-1
no fix listed

Open the chart page →

5,499
chaos-meshchaos-meshVerified publisher2.8.41 of 4See more

chaos-mesh chaos-mesh 2.8.4

1 of the 4 container images this version deploys carry CVE-2026-94285.

Container imageDigestPackageFixed in
ghcr.io/chaos-mesh/chaos-daemon:v2.8.40d28dbd95b03
libx11@2:1.8.4-2+deb12u2
no fix listed

Open the chart page →

6,916
clearmlallegroaiOfficialVerified publisher7.15.01 of 4See more

clearml allegroai 7.15.0

1 of the 4 container images this version deploys carry CVE-2026-94285.

Container imageDigestPackageFixed in
allegroai/clearml:2.0.0-613713ae38f7daf
libx11@2:1.8.4-2+deb12u2
no fix listed

Open the chart page →

10,968
penpotpenpotOfficialVerified publisher1.10.01 of 5See more

penpot penpot 1.10.0

1 of the 5 container images this version deploys carry CVE-2026-94285.

Container imageDigestPackageFixed in
penpotapp/exporter:2.18.0beb2c2bd9660
libx11@2:1.8.12-1+dhi0
no fix listed

Open the chart page →

5,276
difydify-helmVerified publisher0.38.01 of 11See more

dify dify-helm 0.38.0

1 of the 11 container images this version deploys carry CVE-2026-94285.

Container imageDigestPackageFixed in
library/nginx:latestabe47724e466
libx11@2:1.8.12-1
no fix listed

Open the chart page →

71,190
openprojectopenproject-helm-chartsOfficialVerified publisher13.12.02 of 5See more

openproject openproject-helm-charts 13.12.0

2 of the 5 container images this version deploys carry CVE-2026-94285.

Container imageDigestPackageFixed in
openproject/hocuspocus:release-338001b288dc1359dfb5
libx11@2:1.8.4-2+deb12u2
no fix listed
openproject/openproject:17.8.0-slim48952034215d
libx11@2:1.8.12-1
no fix listed

Open the chart page →

21,429
wazuhwazuh-helm-morgovedVerified publisher2.0.71 of 5See more

wazuh wazuh-helm-morgoved 2.0.7

1 of the 5 container images this version deploys carry CVE-2026-94285.

Container imageDigestPackageFixed in
kinseii/wazuh-agent:4.14.17160eb143728
libx11@2:1.8.4-2+deb12u2
no fix listed

Open the chart page →

11,972
stacks-blockchain-apihirosystemsVerified publisher6.5.11 of 5See more

stacks-blockchain-api hirosystems 6.5.1

1 of the 5 container images this version deploys carry CVE-2026-94285.

Container imageDigestPackageFixed in
hirosystems/stacks-blockchain-api:8.13.29c98b23c1515
libx11@2:1.8.4-2+deb12u2
no fix listed

Open the chart page →

8,265
gotenbergmaikumoriVerified publisher1.25.01 of 1See more

gotenberg maikumori 1.25.0

1 of the 1 container images this version deploys carry CVE-2026-94285.

Container imageDigestPackageFixed in
gotenberg/gotenberg:8.36.087c16b9f3642
libx11@2:1.8.12-1
no fix listed

Open the chart page →

11,356
oneuptimeoneuptimeOfficialVerified publisher14.0.81 of 7See more

oneuptime oneuptime 14.0.8

1 of the 7 container images this version deploys carry CVE-2026-94285.

Container imageDigestPackageFixed in
oneuptime/probe:release91dac418f5ba
libx11@2:1.8.4-2+deb12u2
no fix listed

Open the chart page →

8,374
apim3graviteeioVerified publisher4.12.202 of 4See more

apim3 graviteeio 4.12.20

2 of the 4 container images this version deploys carry CVE-2026-94285.

Container imageDigestPackageFixed in
graviteeio/apim-gateway:4.12.20-debian8f1a14449381
libx11@2:1.8.12-1
no fix listed
graviteeio/apim-management-api:4.12.20-debiand30d085395ca
libx11@2:1.8.12-1
no fix listed

Open the chart page →

4,865
wordpressgroundhog2k0.16.61 of 1See more

wordpress groundhog2k 0.16.6

1 of the 1 container images this version deploys carry CVE-2026-94285.

Container imageDigestPackageFixed in
library/wordpress:7.1.2-apachebb209c8ab111
libx11@2:1.8.12-1
no fix listed

Open the chart page →

3,133
budibasebudibase0.0.0-master2 of 7See more

budibase budibase 0.0.0-master

2 of the 7 container images this version deploys carry CVE-2026-94285.

Container imageDigestPackageFixed in
budibase/database:2.1.0d90f656261c9
libx11@2:1.8.4-2+deb12u2
no fix listed
budibase/proxy:3.41.38d780b6ee602
libx11@2:1.8.12-1
no fix listed

Open the chart page →

10,680
paperless-ngxfmjstudios0.2.82 of 5See more

paperless-ngx fmjstudios 0.2.8

2 of the 5 container images this version deploys carry CVE-2026-94285.

Container imageDigestPackageFixed in
gotenberg/gotenberg:8.0.1cf0b9a7ca3cf
libx11@2:1.8.4-2+deb12u2
no fix listed
ghcr.io/paperless-ngx/paperless-ngx:2.10.1a132c2ac7c57
libx11@2:1.8.4-2+deb12u2
no fix listed

Open the chart page →

32,529
nextcloudgroundhog2k0.22.71 of 3See more

nextcloud groundhog2k 0.22.7

1 of the 3 container images this version deploys carry CVE-2026-94285.

Container imageDigestPackageFixed in
library/nextcloud:35.0.0:35.0.0-apache3e9f6eaa5dc8
libx11@2:1.8.12-1
no fix listed

Open the chart page →

4,229
paperless-ngxpaperless-ngxVerified publisher0.3.231 of 3See more

paperless-ngx paperless-ngx 0.3.23

1 of the 3 container images this version deploys carry CVE-2026-94285.

Container imageDigestPackageFixed in
ghcr.io/paperless-ngx/paperless-ngx:3.2.15fa76604a81d
libx11@2:1.8.12-1
no fix listed

Open the chart page →

8,085
phpmyadminalekcVerified publisher0.3.11 of 1See more

phpmyadmin alekc 0.3.1

1 of the 1 container images this version deploys carry CVE-2026-94285.

Container imageDigestPackageFixed in
library/phpmyadmin:5.2.3-apache9e915766488a
libx11@2:1.8.12-1
no fix listed

Open the chart page →

2,312
wazuh-agentavistoVerified publisher4.12.21 of 1See more

wazuh-agent avisto 4.12.2

1 of the 1 container images this version deploys carry CVE-2026-94285.

Container imageDigestPackageFixed in
ghcr.io/avistotelecom/docker-wazuh-agent:4.12.08766ba08bf1a
libx11@2:1.8.4-2+deb12u2
no fix listed

Open the chart page →

6,893
cortexcortex3.4.01 of 4See more

cortex cortex 3.4.0

1 of the 4 container images this version deploys carry CVE-2026-94285.

Container imageDigestPackageFixed in
library/nginx:1.31abe47724e466
libx11@2:1.8.12-1
no fix listed

Open the chart page →

3,362
wordpresshelmforgeVerified publisher3.0.81 of 3See more

wordpress helmforge 3.0.8

1 of the 3 container images this version deploys carry CVE-2026-94285.

Container imageDigestPackageFixed in
library/wordpress:7.1.2-apache8ae73d594a15
libx11@2:1.8.12-1
no fix listed

Open the chart page →

3,526
nginx-ingressnginx-ingress-chartVerified publisher0.0.0-edge1 of 1See more

nginx-ingress nginx-ingress-chart 0.0.0-edge

1 of the 1 container images this version deploys carry CVE-2026-94285.

Container imageDigestPackageFixed in
nginx/nginx-ingress:edged127d1013198
libx11@2:1.8.12-1
no fix listed

Open the chart page →

1,248
passboltpassbolt2.1.11 of 6See more

passbolt passbolt 2.1.1

1 of the 6 container images this version deploys carry CVE-2026-94285.

Container imageDigestPackageFixed in
passbolt/passbolt:5.13.0-1-ceaf3a620902a0
libx11@2:1.8.12-1
no fix listed

Open the chart page →

14,061
minecraft-overvieweralphani-helm-chartsVerified publisher0.1.01 of 3See more

minecraft-overviewer alphani-helm-charts 0.1.0

1 of the 3 container images this version deploys carry CVE-2026-94285.

Container imageDigestPackageFixed in
library/nginx:stable0aa2d81d65bc
libx11@2:1.8.12-1
no fix listed

Open the chart page →

3,529
jellyfindjjudas21Verified publisher4.0.81 of 1See more

jellyfin djjudas21 4.0.8

1 of the 1 container images this version deploys carry CVE-2026-94285.

Container imageDigestPackageFixed in
jellyfin/jellyfin:10.11.11aefb67e6a7ff
libx11@2:1.8.12-1
no fix listed

Open the chart page →

2,797
glpiglpi-conteiner0.1.01 of 3See more

glpi glpi-conteiner 0.1.0

1 of the 3 container images this version deploys carry CVE-2026-94285.

Container imageDigestPackageFixed in
library/phpmyadmin:latest9e915766488a
libx11@2:1.8.12-1
no fix listed

Open the chart page →

11,911
karakeephelmforgeVerified publisher1.2.91 of 3See more

karakeep helmforge 1.2.9

1 of the 3 container images this version deploys carry CVE-2026-94285.

Container imageDigestPackageFixed in
ghcr.io/karakeep-app/karakeep:0.33.2b069e4307dec
libx11@2:1.8.4-2+deb12u2
no fix listed

Open the chart page →

10,478
kubeflowkubeflow1.6.21 of 45See more

kubeflow kubeflow 1.6.2

1 of the 45 container images this version deploys carry CVE-2026-94285.

Container imageDigestPackageFixed in
library/python:3.7eedf63967cdb
libx11@2:1.8.4-2+deb12u1
no fix listed

Open the chart page →

166,178
grafana-pdf-exporterwiremindVerified publisher2.1.11 of 1See more

grafana-pdf-exporter wiremind 2.1.1

1 of the 1 container images this version deploys carry CVE-2026-94285.

Container imageDigestPackageFixed in
ghcr.io/wiremind/grafana-pdf-exporter:v1.7dbaa8527bf4c
libx11@2:1.8.4-2+deb12u2
no fix listed

Open the chart page →

10,180
changedetectionalekcVerified publisher0.14.61 of 1See more

changedetection alekc 0.14.6

1 of the 1 container images this version deploys carry CVE-2026-94285.

Container imageDigestPackageFixed in
ghcr.io/dgtlmoon/changedetection.io:0.60.834df3680db1c
libx11@2:1.8.4-2+deb12u2
no fix listed

Open the chart page →

2,813
dask-kubernetes-operatordask2026.3.01 of 1See more

dask-kubernetes-operator dask 2026.3.0

1 of the 1 container images this version deploys carry CVE-2026-94285.

Container imageDigestPackageFixed in
ghcr.io/dask/dask-kubernetes-operator:2026.3.03225d2bc6b3c
libx11@2:1.8.12-1
no fix listed

Open the chart page →

10,250
apimgraviteeioVerified publisher4.12.202 of 4See more

apim graviteeio 4.12.20

2 of the 4 container images this version deploys carry CVE-2026-94285.

Container imageDigestPackageFixed in
graviteeio/apim-gateway:4.12.20-debian8f1a14449381
libx11@2:1.8.12-1
no fix listed
graviteeio/apim-management-api:4.12.20-debiand30d085395ca
libx11@2:1.8.12-1
no fix listed

Open the chart page →

4,865
terrariahalkeye0.4.21 of 2See more

terraria halkeye 0.4.2

1 of the 2 container images this version deploys carry CVE-2026-94285.

Container imageDigestPackageFixed in
ryshe/terraria:latestb1c89f7f359a
libx11@2:1.8.4-2+deb12u2
no fix listed

Open the chart page →

4,520
hermes-agenthermes-agentVerified publisher1.16.01 of 1See more

hermes-agent hermes-agent 1.16.0

1 of the 1 container images this version deploys carry CVE-2026-94285.

Container imageDigestPackageFixed in
nousresearch/hermes-agent:v2026.9.24fca358f12efd
libx11@2:1.8.12-1
no fix listed

Open the chart page →

5,766
coreinstill-aiOfficialVerified publisher0.1.751 of 15See more

core instill-ai 0.1.75

1 of the 15 container images this version deploys carry CVE-2026-94285.

Container imageDigestPackageFixed in
instill/artifact-backend:b28766ac4a393e601ed
libx11@2:1.8.12-1
no fix listed

Open the chart page →

32,182
part-dbpart-dbVerified publisher0.1.21 of 1See more

part-db part-db 0.1.2

1 of the 1 container images this version deploys carry CVE-2026-94285.

Container imageDigestPackageFixed in
jbtronics/part-db1:latestfd68338829ed
libx11@2:1.8.4-2+deb12u2
no fix listed

Open the chart page →

3,636
phpmyadminphpmyadminVerified publisher1.0.31 of 1See more

phpmyadmin phpmyadmin 1.0.3

1 of the 1 container images this version deploys carry CVE-2026-94285.

Container imageDigestPackageFixed in
library/phpmyadmin:5.2.3-apache0b38dba8580a
libx11@2:1.8.12-1
no fix listed

Open the chart page →

2,312
qgis-serverqgis-serverVerified publisher0.1.101 of 3See more

qgis-server qgis-server 0.1.10

1 of the 3 container images this version deploys carry CVE-2026-94285.

Container imageDigestPackageFixed in
library/nginx:1.27.409369da6b103
libx11@2:1.8.4-2+deb12u2
no fix listed

Open the chart page →

5,726
spartanspartan0.9.11 of 1See more

spartan spartan 0.9.1

1 of the 1 container images this version deploys carry CVE-2026-94285.

Container imageDigestPackageFixed in
library/nginx:latestabe47724e466
libx11@2:1.8.12-1
no fix listed

Open the chart page →

1,686
repmanszpadel-chartsVerified publisher3.52.171 of 3See more

repman szpadel-charts 3.52.17

1 of the 3 container images this version deploys carry CVE-2026-94285.

Container imageDigestPackageFixed in
library/nginx:1.27.3fb197595ebe7
libx11@2:1.8.4-2+deb12u2
no fix listed

Open the chart page →

7,402
pretixtechwolf12Verified publisher2026.7.01 of 3See more

pretix techwolf12 2026.7.0

1 of the 3 container images this version deploys carry CVE-2026-94285.

Container imageDigestPackageFixed in
pretix/standalone:2026.7.05df3b7aa852e
libx11@2:1.8.12-1
no fix listed

Open the chart page →

10,657
vrijbrpvrijbrpVerified publisher0.1.51 of 5See more

vrijbrp vrijbrp 0.1.5

1 of the 5 container images this version deploys carry CVE-2026-94285.

Container imageDigestPackageFixed in
library/nginx:latestabe47724e466
libx11@2:1.8.12-1
no fix listed

Open the chart page →

8,754
wgerwgerOfficialVerified publisher2.0.01 of 7See more

wger wger 2.0.0

1 of the 7 container images this version deploys carry CVE-2026-94285.

Container imageDigestPackageFixed in
library/nginx:stable0aa2d81d65bc
libx11@2:1.8.12-1
no fix listed

Open the chart page →

7,565
paperlesszekker6Verified publisher11.10.01 of 1See more

paperless zekker6 11.10.0

1 of the 1 container images this version deploys carry CVE-2026-94285.

Container imageDigestPackageFixed in
ghcr.io/paperless-ngx/paperless-ngx:3.2.15fa76604a81d
libx11@2:1.8.12-1
no fix listed

Open the chart page →

4,191
paperless-ngxadnoctemVerified publisher0.4.22 of 5See more

paperless-ngx adnoctem 0.4.2

2 of the 5 container images this version deploys carry CVE-2026-94285.

Container imageDigestPackageFixed in
gotenberg/gotenberg:8.36.087c16b9f3642
libx11@2:1.8.12-1
no fix listed
ghcr.io/paperless-ngx/paperless-ngx:3.1.3aa810a36942c
libx11@2:1.8.12-1
no fix listed

Open the chart page →

22,217
jellyfinalekcVerified publisher0.9.01 of 1See more

jellyfin alekc 0.9.0

1 of the 1 container images this version deploys carry CVE-2026-94285.

Container imageDigestPackageFixed in
jellyfin/jellyfin:10.11.11aefb67e6a7ff
libx11@2:1.8.12-1
no fix listed

Open the chart page →

2,797
paperless-ngxalexmorbo-paperless-ngxVerified publisher0.2.01 of 2See more

paperless-ngx alexmorbo-paperless-ngx 0.2.0

1 of the 2 container images this version deploys carry CVE-2026-94285.

Container imageDigestPackageFixed in
ghcr.io/paperless-ngx/paperless-ngx:2.20.5665f2f5cc548
libx11@2:1.8.12-1
no fix listed

Open the chart page →

13,071
hermes-agentankra-chartsVerified publisher0.3.11 of 1See more

hermes-agent ankra-charts 0.3.1

1 of the 1 container images this version deploys carry CVE-2026-94285.

Container imageDigestPackageFixed in
nousresearch/hermes-agent:v2026.8.27e0df6adebddf
libx11@2:1.8.12-1
no fix listed

Open the chart page →

6,488

Container images carrying it

408 by charts deploying them

A fixed version is listed for 0 of the 1 affected package.

Container imageDigestPackageFixed inUsed by
public.ecr.aws/jtekt-corporation/time-series-storage-service:v1.5.1046ef5c9ed50
libx11@2:1.8.4-2+deb12u2
no fix listed
1
public.ecr.aws/outerbounds/metaflow_metadata_service:v2.4.13f7567ce3419d
libx11@2:1.8.4-2+deb12u2
no fix listed
1
public.ecr.aws/truefoundrycloud/async-service-distributor:5d48113bc678d694a0c8f8dabb2207c5aa2cfc53f74851ce31f5
libx11@2:1.8.4-2+deb12u2
no fix listed
1
quay.io/mittwald/kube-httpcache:stable2169032c5840
libx11@2:1.8.4-2+deb12u2
no fix listed
1
quay.io/yushiwho/api:e1f9d77e0d9b93dbf2b
libx11@2:1.8.4-2+deb12u1
no fix listed
1
registry.gitlab.com/enbuild-staging/vivsoft-platform-ui/enbuild-frontend:1.0.3166353ce9bf98
libx11@2:1.8.12-1
no fix listed
1
registry.gitlab.com/enbuild-staging/vivsoft-platform-ui/enbuild-mq-consumer:1.0.310e3cd8c7776d
libx11@2:1.8.4-2+deb12u2
no fix listed
1
registry.gitlab.com/school_guy/docker-typo3:13.4.30-197d868ed76185d7270d
libx11@2:1.8.4-2+deb12u2
no fix listed
1

syft 1.42.1 · advisories as of 29 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.