StackRadar

CVE-2026-94285

Medium

Advisory

Published 28 Sept 2026In the index since 29 Sept 2026
Severity
Medium
worst across findings
CVSS
5.1
base score, highest
EPSS
0.001
1st percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
528
of 17,939 indexed, latest versions
Container images
408
deployed by those charts
Fix available
None
affected package

The matching OSV records carry no description.

Carried by container images the latest versions of 528 of 17,939 indexed charts deploy, on 408 images.

Affected packageAffected versionsFixed inImages
libx11deb2:1.8.4-2, 2:1.8.4-2+deb12u1, 2:1.8.4-2+deb12u2, 2:1.8.12-1+1 moreno fix listed408
OSV records
DEBIAN-CVE-2026-94285

Charts affected

528 by stars
ChartLatestAffected imagesRadar Score
rocketadminrocketadminOfficialVerified publisher1.0.421 of 1See more

rocketadmin rocketadmin 1.0.42

1 of the 1 container images this version deploys carry CVE-2026-94285.

Container imageDigestPackageFixed in
rocketadmin/rocketadmin:1.17.710955ef540b9
libx11@2:1.8.4-2+deb12u2
no fix listed

Open the chart page →

5,898
fluent-bitromanow-helm-chartsVerified publisher1.7.31 of 1See more

fluent-bit romanow-helm-charts 1.7.3

1 of the 1 container images this version deploys carry CVE-2026-94285.

Container imageDigestPackageFixed in
fluent/fluent-bit:4.0-debuge76397ef3983
libx11@2:1.8.4-2+deb12u2
no fix listed

Open the chart page →

8,367
baikalrubxkubeVerified publisher1.3.11 of 1See more

baikal rubxkube 1.3.1

1 of the 1 container images this version deploys carry CVE-2026-94285.

Container imageDigestPackageFixed in
ckulka/baikal:0.10.1-nginx434bdd162247
libx11@2:1.8.4-2+deb12u2
no fix listed

Open the chart page →

5,628
kyoorubxkubeVerified publisher0.1.102 of 9See more

kyoo rubxkube 0.1.10

2 of the 9 container images this version deploys carry CVE-2026-94285.

Container imageDigestPackageFixed in
ghcr.io/zoriya/kyoo_autosync:4.7.1fbba58ddb1a6
libx11@2:1.8.4-2+deb12u2
no fix listed
ghcr.io/zoriya/kyoo_scanner:4.7.17dc0ee57b628
libx11@2:1.8.4-2+deb12u2
no fix listed

Open the chart page →

32,223
uptime-kumasb-helm-charts0.4.01 of 1See more

uptime-kuma sb-helm-charts 0.4.0

1 of the 1 container images this version deploys carry CVE-2026-94285.

Container imageDigestPackageFixed in
louislam/uptime-kuma:2.0.24c364ef96aad
libx11@2:1.8.4-2+deb12u2
no fix listed

Open the chart page →

40,413
immichsecustorVerified publisher2.0.61 of 1See more

immich secustor 2.0.6

1 of the 1 container images this version deploys carry CVE-2026-94285.

Container imageDigestPackageFixed in
ghcr.io/immich-app/immich-server:v3.2.279cc1623323d
libx11@2:1.8.12-1
no fix listed

Open the chart page →

3,427
sentry-k8ssentry-k8sVerified publisher1.4.11 of 11See more

sentry-k8s sentry-k8s 1.4.1

1 of the 11 container images this version deploys carry CVE-2026-94285.

Container imageDigestPackageFixed in
ghcr.io/getsentry/taskbroker:26.7.264d0da74a578
libx11@2:1.8.4-2+deb12u2
no fix listed

Open the chart page →

17,558
sogosogoVerified publisher0.3.51 of 2See more

sogo sogo 0.3.5

1 of the 2 container images this version deploys carry CVE-2026-94285.

Container imageDigestPackageFixed in
sonroyaalmerol/docker-sogo:5.12.43f60f3abe990
libx11@2:1.8.12-1
no fix listed

Open the chart page →

7,866
nginx-chartsomnath-chartVerified publisher0.1.91 of 1See more

nginx-chart somnath-chart 0.1.9

1 of the 1 container images this version deploys carry CVE-2026-94285.

Container imageDigestPackageFixed in
somnathmore/custom-nginx:v2bdfc06cad4ec
libx11@2:1.8.4-2+deb12u2
no fix listed

Open the chart page →

5,953
speckle-serverspeckleVerified publisher2.26.31 of 4See more

speckle-server speckle 2.26.3

1 of the 4 container images this version deploys carry CVE-2026-94285.

Container imageDigestPackageFixed in
speckle/speckle-preview-service:2.26.3092384dba45d
libx11@2:1.8.4-2+deb12u2
no fix listed

Open the chart page →

11,132
app-fullsynkubeVerified publisher1.0.01 of 1See more

app-full synkube 1.0.0

1 of the 1 container images this version deploys carry CVE-2026-94285.

Container imageDigestPackageFixed in
library/nginx:latest6e23479198b9
libx11@2:1.8.12-1
no fix listed

Open the chart page →

3,543
kubedeploysysbee1.2.21 of 1See more

kubedeploy sysbee 1.2.2

1 of the 1 container images this version deploys carry CVE-2026-94285.

Container imageDigestPackageFixed in
library/nginx:latestabe47724e466
libx11@2:1.8.12-1
no fix listed

Open the chart page →

1,686
apptaxmd-helm-chart0.0.21 of 1See more

app taxmd-helm-chart 0.0.2

1 of the 1 container images this version deploys carry CVE-2026-94285.

Container imageDigestPackageFixed in
library/nginx:latestabe47724e466
libx11@2:1.8.12-1
no fix listed

Open the chart page →

1,686
typemilltypemill-helm-chart2.3.02 of 2See more

typemill typemill-helm-chart 2.3.0

2 of the 2 container images this version deploys carry CVE-2026-94285.

Container imageDigestPackageFixed in
kixote/typemilldigest-pinned628f79a08cc7
libx11@2:1.8.12-1
no fix listed
kixote/typemilldigest-pinned7dfb517d24f0
libx11@2:1.8.12-1
no fix listed

Open the chart page →

5,368
u-storeunifieVerified publisher1.2.01 of 1See more

u-store unifie 1.2.0

1 of the 1 container images this version deploys carry CVE-2026-94285.

Container imageDigestPackageFixed in
public.ecr.aws/g4a0y2u8/unifie-store:staging-19925a2057fabc948
libx11@2:1.8.4-2+deb12u2
no fix listed

Open the chart page →

15,891
unitycatalogunitycatalogVerified publisher0.0.21 of 4See more

unitycatalog unitycatalog 0.0.2

1 of the 4 container images this version deploys carry CVE-2026-94285.

Container imageDigestPackageFixed in
ghcr.io/sdwbgn/unitycatalog-helm/docker/unitycatalog-ui:0.2.1-5d668c1ed07e7ca098d
libx11@2:1.8.4-2+deb12u2
no fix listed

Open the chart page →

13,376
wordpress-e2e-setupwoocommerce-e2e-setup0.1.11 of 2See more

wordpress-e2e-setup woocommerce-e2e-setup 0.1.1

1 of the 2 container images this version deploys carry CVE-2026-94285.

Container imageDigestPackageFixed in
library/wordpress:6.8-apache30bff39330d1
libx11@2:1.8.12-1
no fix listed

Open the chart page →

8,329
wordpress-helmwordpress-helm0.2.91 of 4See more

wordpress-helm wordpress-helm 0.2.9

1 of the 4 container images this version deploys carry CVE-2026-94285.

Container imageDigestPackageFixed in
aapjeisbaas/wp-frankenphp:v0.2.26b261abc7fb0
libx11@2:1.8.12-1
no fix listed

Open the chart page →

8,801
gotenbergadnoctemVerified publisher0.5.01 of 1See more

gotenberg adnoctem 0.5.0

1 of the 1 container images this version deploys carry CVE-2026-94285.

Container imageDigestPackageFixed in
gotenberg/gotenberg:8.37.0f29984bd1e22
libx11@2:1.8.12-1
no fix listed

Open the chart page →

7,129
linkwardenadnoctemVerified publisher0.5.11 of 2See more

linkwarden adnoctem 0.5.1

1 of the 2 container images this version deploys carry CVE-2026-94285.

Container imageDigestPackageFixed in
ghcr.io/linkwarden/linkwarden:v2.16.30664c28a039b
libx11@2:1.8.4-2+deb12u2
no fix listed

Open the chart page →

4,187
uptime-kumaadnoctemVerified publisher0.4.11 of 1See more

uptime-kuma adnoctem 0.4.1

1 of the 1 container images this version deploys carry CVE-2026-94285.

Container imageDigestPackageFixed in
louislam/uptime-kuma:2.5.4917318f9d7be
libx11@2:1.8.4-2+deb12u2
no fix listed

Open the chart page →

31,952
airbyteairbyte-v2Verified publisher2.3.01 of 10See more

airbyte airbyte-v2 2.3.0

1 of the 10 container images this version deploys carry CVE-2026-94285.

Container imageDigestPackageFixed in
airbyte/manifest-server:7.28.2deec511b51c3
libx11@2:1.8.4-2+deb12u2
no fix listed

Open the chart page →

13,002
esphomealekcVerified publisher2.9.01 of 1See more

esphome alekc 2.9.0

1 of the 1 container images this version deploys carry CVE-2026-94285.

Container imageDigestPackageFixed in
esphome/esphome:2026.9.09959730a04c7
libx11@2:1.8.12-1
no fix listed

Open the chart page →

3,401
komodoalekcVerified publisher3.1.01 of 1See more

komodo alekc 3.1.0

1 of the 1 container images this version deploys carry CVE-2026-94285.

Container imageDigestPackageFixed in
ghcr.io/moghtech/komodo-core:2.3.3bca73d0eee14
libx11@2:1.8.12-1
no fix listed

Open the chart page →

2,089
esphomealexmorbo-esphomeVerified publisher1.0.01 of 1See more

esphome alexmorbo-esphome 1.0.0

1 of the 1 container images this version deploys carry CVE-2026-94285.

Container imageDigestPackageFixed in
esphome/esphome:2024.12.2b2c6322700ac
libx11@2:1.8.4-2+deb12u2
no fix listed

Open the chart page →

6,642
flaresolverralexmorbo-flaresolverrVerified publisher0.2.01 of 1See more

flaresolverr alexmorbo-flaresolverr 0.2.0

1 of the 1 container images this version deploys carry CVE-2026-94285.

Container imageDigestPackageFixed in
flaresolverr/flaresolverr:v3.5.0139dfee1c6f8
libx11@2:1.8.4-2+deb12u2
no fix listed

Open the chart page →

29,040
nginx-sni-proxyalexpressoVerified publisher1.0.41 of 1See more

nginx-sni-proxy alexpresso 1.0.4

1 of the 1 container images this version deploys carry CVE-2026-94285.

Container imageDigestPackageFixed in
library/nginx:latestabe47724e466
libx11@2:1.8.12-1
no fix listed

Open the chart page →

1,686
music-assistant-serverandibraeuVerified publisher2.1.21 of 1See more

music-assistant-server andibraeu 2.1.2

1 of the 1 container images this version deploys carry CVE-2026-94285.

Container imageDigestPackageFixed in
ghcr.io/music-assistant/server:2.9.950666a6f8d7f
libx11@2:1.8.4-2+deb12u2
no fix listed

Open the chart page →

6,300
mathesarandrenarchyVerified publisher1.8.01 of 1See more

mathesar andrenarchy 1.8.0

1 of the 1 container images this version deploys carry CVE-2026-94285.

Container imageDigestPackageFixed in
mathesar/mathesar:0.12.0091757cb01fe
libx11@2:1.8.4-2+deb12u2
no fix listed

Open the chart page →

7,896
antrea-uiantreaVerified publisher0.8.01 of 2See more

antrea-ui antrea 0.8.0

1 of the 2 container images this version deploys carry CVE-2026-94285.

Container imageDigestPackageFixed in
antrea/antrea-ui-frontend:v0.8.0ee9686bcefb8
libx11@2:1.8.12-1
no fix listed

Open the chart page →

3,542
kesque-dashboardapache-pulsar-helm-chart-repo0.0.51 of 5See more

kesque-dashboard apache-pulsar-helm-chart-repo 0.0.5

1 of the 5 container images this version deploys carry CVE-2026-94285.

Container imageDigestPackageFixed in
library/nginx:latestabe47724e466
libx11@2:1.8.12-1
no fix listed

Open the chart page →

3,983
appriseapprise0.2.11 of 1See more

apprise apprise 0.2.1

1 of the 1 container images this version deploys carry CVE-2026-94285.

Container imageDigestPackageFixed in
caronc/apprise:latestcc5ef662ad2a
libx11@2:1.8.12-1
no fix listed

Open the chart page →

1,726
platform-apiappscodeVerified publisher2026.9.111 of 3See more

platform-api appscode 2026.9.11

1 of the 3 container images this version deploys carry CVE-2026-94285.

Container imageDigestPackageFixed in
ghcr.io/appscode/gotenberg:8.25f9104080d9a7
libx11@2:1.8.12-1
no fix listed

Open the chart page →

39,414
dokuwikiarea-42Verified publisher0.1.81 of 1See more

dokuwiki area-42 0.1.8

1 of the 1 container images this version deploys carry CVE-2026-94285.

Container imageDigestPackageFixed in
dokuwiki/dokuwiki:2025-05-14af08ecfdda239
libx11@2:1.8.12-1
no fix listed

Open the chart page →

8,106
argonix-apiargonix0.5.31 of 4See more

argonix-api argonix 0.5.3

1 of the 4 container images this version deploys carry CVE-2026-94285.

Container imageDigestPackageFixed in
ghcr.io/argonix-io/argonix-api:0.5.349f21389f4e7
libx11@2:1.8.12-1
no fix listed

Open the chart page →

5,128
assemblylineassemblylineVerified publisher7.4.213 of 12See more

assemblyline assemblyline 7.4.21

3 of the 12 container images this version deploys carry CVE-2026-94285.

Container imageDigestPackageFixed in
cccs/assemblyline-core:4.7.4.stable2125fdf4aa72ab
libx11@2:1.8.4-2+deb12u2
no fix listed
cccs/assemblyline-socketio:4.7.4.stable21ba390e87f340
libx11@2:1.8.4-2+deb12u2
no fix listed
cccs/assemblyline-ui:4.7.4.stable210623c3fd039e
libx11@2:1.8.4-2+deb12u2
no fix listed

Open the chart page →

12,805
smartorchestratorassist-iot-smart-orchestrator4.0.01 of 14See more

smartorchestrator assist-iot-smart-orchestrator 4.0.0

1 of the 14 container images this version deploys carry CVE-2026-94285.

Container imageDigestPackageFixed in
assistiot/smart-orchestrator_scheduler_mc:latestb1dbe4d62a03
libx11@2:1.8.4-2+deb12u1
no fix listed

Open the chart page →

47,112
videoaugmentationassist-iot-video-augmentation0.1.01 of 3See more

videoaugmentation assist-iot-video-augmentation 0.1.0

1 of the 3 container images this version deploys carry CVE-2026-94285.

Container imageDigestPackageFixed in
library/nginx:latestabe47724e466
libx11@2:1.8.12-1
no fix listed

Open the chart page →

80,708
astrotrekastria0.0.21 of 4See more

astrotrek astria 0.0.2

1 of the 4 container images this version deploys carry CVE-2026-94285.

Container imageDigestPackageFixed in
ghcr.io/astriaorg/astrotrek:0.1.05889bea38e56
libx11@2:1.8.4-2+deb12u2
no fix listed

Open the chart page →

33,810
webappavzi-webapp0.1.01 of 1See more

webapp avzi-webapp 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-94285.

Container imageDigestPackageFixed in
avzini/web-app:latestf40b30210ed0
libx11@2:1.8.4-2+deb12u2
no fix listed

Open the chart page →

6,575
nas-appsawesomeVerified publisher2.0.01 of 8See more

nas-apps awesome 2.0.0

1 of the 8 container images this version deploys carry CVE-2026-94285.

Container imageDigestPackageFixed in
library/nginx:latestabe47724e466
libx11@2:1.8.12-1
no fix listed

Open the chart page →

6,699
aws9helmaws9helm0.1.04 of 4See more

aws9helm aws9helm 0.1.0

4 of the 4 container images this version deploys carry CVE-2026-94285.

Container imageDigestPackageFixed in
kuzwolka/aws9:main1ad759b961b1
libx11@2:1.8.4-2+deb12u2
no fix listed
kuzwolka/aws9:news3e8880fbbb96
libx11@2:1.8.4-2+deb12u2
no fix listed
kuzwolka/aws9:blog4a7707410bf1
libx11@2:1.8.4-2+deb12u2
no fix listed
kuzwolka/aws9:shop84a9d9766345
libx11@2:1.8.4-2+deb12u2
no fix listed

Open the chart page →

19,456
basic-auth-s3-nginxbasic-auth-s3-nginxVerified publisher1.0.01 of 1See more

basic-auth-s3-nginx basic-auth-s3-nginx 1.0.0

1 of the 1 container images this version deploys carry CVE-2026-94285.

Container imageDigestPackageFixed in
dachichang/basic-auth-s3-nginx:1.0.07ccac90a935e
libx11@2:1.8.4-2+deb12u2
no fix listed

Open the chart page →

6,575
my-nginx-appbassant-nginx-app0.1.01 of 1See more

my-nginx-app bassant-nginx-app 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-94285.

Container imageDigestPackageFixed in
library/nginx:stable0aa2d81d65bc
libx11@2:1.8.12-1
no fix listed

Open the chart page →

1,686
mealiebdclark-helm-chartsVerified publisher0.1.151 of 1See more

mealie bdclark-helm-charts 0.1.15

1 of the 1 container images this version deploys carry CVE-2026-94285.

Container imageDigestPackageFixed in
ghcr.io/mealie-recipes/mealie:v3.25.16066c29eca95
libx11@2:1.8.12-1
no fix listed

Open the chart page →

4,449
immichbear0.1.12 of 2See more

immich bear 0.1.1

2 of the 2 container images this version deploys carry CVE-2026-94285.

Container imageDigestPackageFixed in
ghcr.io/immich-app/immich-machine-learning:v3.1.05a0839dc5303
libx11@2:1.8.4-2+deb12u2
no fix listed
ghcr.io/immich-app/immich-server:v3.1.0b434cb9287ee
libx11@2:1.8.12-1
no fix listed

Open the chart page →

7,356
webappbenc-uk1.4.31 of 1See more

webapp benc-uk 1.4.3

1 of the 1 container images this version deploys carry CVE-2026-94285.

Container imageDigestPackageFixed in
library/nginx:latestcfb8a89ac237
libx11@2:1.8.12-1
no fix listed

Open the chart page →

1,686
bluespacebluespace0.3.01 of 1See more

bluespace bluespace 0.3.0

1 of the 1 container images this version deploys carry CVE-2026-94285.

Container imageDigestPackageFixed in
library/nginx:latestabe47724e466
libx11@2:1.8.12-1
no fix listed

Open the chart page →

1,686
colosseumbook-k8sinfra-v21.0.182 of 5See more

colosseum book-k8sinfra-v2 1.0.18

2 of the 5 container images this version deploys carry CVE-2026-94285.

Container imageDigestPackageFixed in
sysnet4admin/colosseum-cms:loge74b43c7f492
libx11@2:1.8.4-2+deb12u2
no fix listed
sysnet4admin/colosseum-prm:log5802bfcd7fed
libx11@2:1.8.4-2+deb12u2
no fix listed

Open the chart page →

29,075
flaresolverrbrandan-schmitz-helm-chartsVerified publisher1.4.01 of 1See more

flaresolverr brandan-schmitz-helm-charts 1.4.0

1 of the 1 container images this version deploys carry CVE-2026-94285.

Container imageDigestPackageFixed in
flaresolverr/flaresolverr:v3.5.0139dfee1c6f8
libx11@2:1.8.4-2+deb12u2
no fix listed

Open the chart page →

29,040

Container images carrying it

408 by charts deploying them

A fixed version is listed for 0 of the 1 affected package.

Container imageDigestPackageFixed inUsed by
public.ecr.aws/jtekt-corporation/time-series-storage-service:v1.5.1046ef5c9ed50
libx11@2:1.8.4-2+deb12u2
no fix listed
1
public.ecr.aws/outerbounds/metaflow_metadata_service:v2.4.13f7567ce3419d
libx11@2:1.8.4-2+deb12u2
no fix listed
1
public.ecr.aws/truefoundrycloud/async-service-distributor:5d48113bc678d694a0c8f8dabb2207c5aa2cfc53f74851ce31f5
libx11@2:1.8.4-2+deb12u2
no fix listed
1
quay.io/mittwald/kube-httpcache:stable2169032c5840
libx11@2:1.8.4-2+deb12u2
no fix listed
1
quay.io/yushiwho/api:e1f9d77e0d9b93dbf2b
libx11@2:1.8.4-2+deb12u1
no fix listed
1
registry.gitlab.com/enbuild-staging/vivsoft-platform-ui/enbuild-frontend:1.0.3166353ce9bf98
libx11@2:1.8.12-1
no fix listed
1
registry.gitlab.com/enbuild-staging/vivsoft-platform-ui/enbuild-mq-consumer:1.0.310e3cd8c7776d
libx11@2:1.8.4-2+deb12u2
no fix listed
1
registry.gitlab.com/school_guy/docker-typo3:13.4.30-197d868ed76185d7270d
libx11@2:1.8.4-2+deb12u2
no fix listed
1

syft 1.42.1 · advisories as of 29 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.