StackRadar

CVE-2026-94287

Medium

Advisory

Published 28 Sept 2026In the index since 29 Sept 2026
Severity
Medium
worst across findings
CVSS
5.5
base score, highest
EPSS
0.001
1st percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
310
of 17,939 indexed, latest versions
Container images
159
deployed by those charts
Fix available
None
affected package

The matching OSV records carry no description.

Carried by container images the latest versions of 310 of 17,939 indexed charts deploy, on 159 images.

Affected packageAffected versionsFixed inImages
libxpmdeb1:3.5.12-1.1, 1:3.5.12-1.1+deb12u1, 1:3.5.17-1+b3, 1:3.5.17-1+deb13u1+1 moreno fix listed159
OSV records
DEBIAN-CVE-2026-94287

Charts affected

310 by stars
ChartLatestAffected imagesRadar Score
uptime-kumasb-helm-charts0.4.01 of 1See more

uptime-kuma sb-helm-charts 0.4.0

1 of the 1 container images this version deploys carry CVE-2026-94287.

Container imageDigestPackageFixed in
louislam/uptime-kuma:2.0.24c364ef96aad
libxpm@1:3.5.12-1.1+deb12u1
no fix listed

Open the chart page →

40,413
sentry-k8ssentry-k8sVerified publisher1.4.11 of 11See more

sentry-k8s sentry-k8s 1.4.1

1 of the 11 container images this version deploys carry CVE-2026-94287.

Container imageDigestPackageFixed in
ghcr.io/getsentry/taskbroker:26.7.264d0da74a578
libxpm@1:3.5.12-1.1+deb12u1
no fix listed

Open the chart page →

17,558
sogosogoVerified publisher0.3.51 of 2See more

sogo sogo 0.3.5

1 of the 2 container images this version deploys carry CVE-2026-94287.

Container imageDigestPackageFixed in
sonroyaalmerol/docker-sogo:5.12.43f60f3abe990
libxpm@1:3.5.17-1+b3
no fix listed

Open the chart page →

7,866
nginx-chartsomnath-chartVerified publisher0.1.91 of 1See more

nginx-chart somnath-chart 0.1.9

1 of the 1 container images this version deploys carry CVE-2026-94287.

Container imageDigestPackageFixed in
somnathmore/custom-nginx:v2bdfc06cad4ec
libxpm@1:3.5.12-1.1+deb12u1
no fix listed

Open the chart page →

5,953
app-fullsynkubeVerified publisher1.0.01 of 1See more

app-full synkube 1.0.0

1 of the 1 container images this version deploys carry CVE-2026-94287.

Container imageDigestPackageFixed in
library/nginx:latest6e23479198b9
libxpm@1:3.5.17-1+b3
no fix listed

Open the chart page →

3,543
kubedeploysysbee1.2.21 of 1See more

kubedeploy sysbee 1.2.2

1 of the 1 container images this version deploys carry CVE-2026-94287.

Container imageDigestPackageFixed in
library/nginx:latestabe47724e466
libxpm@1:3.5.17-1+deb13u1
no fix listed

Open the chart page →

1,686
apptaxmd-helm-chart0.0.21 of 1See more

app taxmd-helm-chart 0.0.2

1 of the 1 container images this version deploys carry CVE-2026-94287.

Container imageDigestPackageFixed in
library/nginx:latestabe47724e466
libxpm@1:3.5.17-1+deb13u1
no fix listed

Open the chart page →

1,686
gotenbergadnoctemVerified publisher0.5.01 of 1See more

gotenberg adnoctem 0.5.0

1 of the 1 container images this version deploys carry CVE-2026-94287.

Container imageDigestPackageFixed in
gotenberg/gotenberg:8.37.0f29984bd1e22
libxpm@1:3.5.17-1+deb13u1
no fix listed

Open the chart page →

7,129
linkwardenadnoctemVerified publisher0.5.11 of 2See more

linkwarden adnoctem 0.5.1

1 of the 2 container images this version deploys carry CVE-2026-94287.

Container imageDigestPackageFixed in
ghcr.io/linkwarden/linkwarden:v2.16.30664c28a039b
libxpm@1:3.5.12-1.1+deb12u1
no fix listed

Open the chart page →

4,187
uptime-kumaadnoctemVerified publisher0.4.11 of 1See more

uptime-kuma adnoctem 0.4.1

1 of the 1 container images this version deploys carry CVE-2026-94287.

Container imageDigestPackageFixed in
louislam/uptime-kuma:2.5.4917318f9d7be
libxpm@1:3.5.12-1.1+deb12u1
no fix listed

Open the chart page →

31,952
flaresolverralexmorbo-flaresolverrVerified publisher0.2.01 of 1See more

flaresolverr alexmorbo-flaresolverr 0.2.0

1 of the 1 container images this version deploys carry CVE-2026-94287.

Container imageDigestPackageFixed in
flaresolverr/flaresolverr:v3.5.0139dfee1c6f8
libxpm@1:3.5.12-1.1+deb12u1
no fix listed

Open the chart page →

29,040
nginx-sni-proxyalexpressoVerified publisher1.0.41 of 1See more

nginx-sni-proxy alexpresso 1.0.4

1 of the 1 container images this version deploys carry CVE-2026-94287.

Container imageDigestPackageFixed in
library/nginx:latestabe47724e466
libxpm@1:3.5.17-1+deb13u1
no fix listed

Open the chart page →

1,686
antrea-uiantreaVerified publisher0.8.01 of 2See more

antrea-ui antrea 0.8.0

1 of the 2 container images this version deploys carry CVE-2026-94287.

Container imageDigestPackageFixed in
antrea/antrea-ui-frontend:v0.8.0ee9686bcefb8
libxpm@1:3.5.17-1+b3
no fix listed

Open the chart page →

3,542
kesque-dashboardapache-pulsar-helm-chart-repo0.0.51 of 5See more

kesque-dashboard apache-pulsar-helm-chart-repo 0.0.5

1 of the 5 container images this version deploys carry CVE-2026-94287.

Container imageDigestPackageFixed in
library/nginx:latestabe47724e466
libxpm@1:3.5.17-1+deb13u1
no fix listed

Open the chart page →

3,983
platform-apiappscodeVerified publisher2026.9.111 of 3See more

platform-api appscode 2026.9.11

1 of the 3 container images this version deploys carry CVE-2026-94287.

Container imageDigestPackageFixed in
ghcr.io/appscode/gotenberg:8.25f9104080d9a7
libxpm@1:3.5.17-1+b3
no fix listed

Open the chart page →

39,414
dokuwikiarea-42Verified publisher0.1.81 of 1See more

dokuwiki area-42 0.1.8

1 of the 1 container images this version deploys carry CVE-2026-94287.

Container imageDigestPackageFixed in
dokuwiki/dokuwiki:2025-05-14af08ecfdda239
libxpm@1:3.5.17-1+b3
no fix listed

Open the chart page →

8,106
argonix-apiargonix0.5.31 of 4See more

argonix-api argonix 0.5.3

1 of the 4 container images this version deploys carry CVE-2026-94287.

Container imageDigestPackageFixed in
ghcr.io/argonix-io/argonix-api:0.5.349f21389f4e7
libxpm@1:3.5.17-1+deb13u1
no fix listed

Open the chart page →

5,128
videoaugmentationassist-iot-video-augmentation0.1.01 of 3See more

videoaugmentation assist-iot-video-augmentation 0.1.0

1 of the 3 container images this version deploys carry CVE-2026-94287.

Container imageDigestPackageFixed in
library/nginx:latestabe47724e466
libxpm@1:3.5.17-1+deb13u1
no fix listed

Open the chart page →

80,708
webappavzi-webapp0.1.01 of 1See more

webapp avzi-webapp 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-94287.

Container imageDigestPackageFixed in
avzini/web-app:latestf40b30210ed0
libxpm@1:3.5.12-1.1+deb12u1
no fix listed

Open the chart page →

6,575
nas-appsawesomeVerified publisher2.0.01 of 8See more

nas-apps awesome 2.0.0

1 of the 8 container images this version deploys carry CVE-2026-94287.

Container imageDigestPackageFixed in
library/nginx:latestabe47724e466
libxpm@1:3.5.17-1+deb13u1
no fix listed

Open the chart page →

6,699
aws9helmaws9helm0.1.04 of 4See more

aws9helm aws9helm 0.1.0

4 of the 4 container images this version deploys carry CVE-2026-94287.

Container imageDigestPackageFixed in
kuzwolka/aws9:main1ad759b961b1
libxpm@1:3.5.12-1.1+deb12u1
no fix listed
kuzwolka/aws9:news3e8880fbbb96
libxpm@1:3.5.12-1.1+deb12u1
no fix listed
kuzwolka/aws9:blog4a7707410bf1
libxpm@1:3.5.12-1.1+deb12u1
no fix listed
kuzwolka/aws9:shop84a9d9766345
libxpm@1:3.5.12-1.1+deb12u1
no fix listed

Open the chart page →

19,456
basic-auth-s3-nginxbasic-auth-s3-nginxVerified publisher1.0.01 of 1See more

basic-auth-s3-nginx basic-auth-s3-nginx 1.0.0

1 of the 1 container images this version deploys carry CVE-2026-94287.

Container imageDigestPackageFixed in
dachichang/basic-auth-s3-nginx:1.0.07ccac90a935e
libxpm@1:3.5.12-1.1+deb12u1
no fix listed

Open the chart page →

6,575
my-nginx-appbassant-nginx-app0.1.01 of 1See more

my-nginx-app bassant-nginx-app 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-94287.

Container imageDigestPackageFixed in
library/nginx:stable0aa2d81d65bc
libxpm@1:3.5.17-1+deb13u1
no fix listed

Open the chart page →

1,686
webappbenc-uk1.4.31 of 1See more

webapp benc-uk 1.4.3

1 of the 1 container images this version deploys carry CVE-2026-94287.

Container imageDigestPackageFixed in
library/nginx:latestcfb8a89ac237
libxpm@1:3.5.17-1+deb13u1
no fix listed

Open the chart page →

1,686
bluespacebluespace0.3.01 of 1See more

bluespace bluespace 0.3.0

1 of the 1 container images this version deploys carry CVE-2026-94287.

Container imageDigestPackageFixed in
library/nginx:latestabe47724e466
libxpm@1:3.5.17-1+deb13u1
no fix listed

Open the chart page →

1,686
flaresolverrbrandan-schmitz-helm-chartsVerified publisher1.4.01 of 1See more

flaresolverr brandan-schmitz-helm-charts 1.4.0

1 of the 1 container images this version deploys carry CVE-2026-94287.

Container imageDigestPackageFixed in
flaresolverr/flaresolverr:v3.5.0139dfee1c6f8
libxpm@1:3.5.12-1.1+deb12u1
no fix listed

Open the chart page →

29,040
tenantsbrbarmex-tenant2.0.01 of 1See more

tenants brbarmex-tenant 2.0.0

1 of the 1 container images this version deploys carry CVE-2026-94287.

Container imageDigestPackageFixed in
library/nginx:latestabe47724e466
libxpm@1:3.5.17-1+deb13u1
no fix listed

Open the chart page →

1,686
nginx-chartbtrepoVerified publisher0.1.01 of 1See more

nginx-chart btrepo 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-94287.

Container imageDigestPackageFixed in
library/nginx:latestabe47724e466
libxpm@1:3.5.17-1+deb13u1
no fix listed

Open the chart page →

1,686
gotenbergbysamioVerified publisher0.2.01 of 1See more

gotenberg bysamio 0.2.0

1 of the 1 container images this version deploys carry CVE-2026-94287.

Container imageDigestPackageFixed in
gotenberg/gotenberg:8-chromium0d28ae9a9644
libxpm@1:3.5.17-1+deb13u1
no fix listed

Open the chart page →

6,364
nginx-s3-gatewaycamptocamp31.0.01 of 1See more

nginx-s3-gateway camptocamp3 1.0.0

1 of the 1 container images this version deploys carry CVE-2026-94287.

Container imageDigestPackageFixed in
ghcr.io/nginxinc/nginx-s3-gateway/nginx-oss-s3-gateway:unprivileged-oss-202503313db8145349a3
libxpm@1:3.5.12-1.1+deb12u1
no fix listed

Open the chart page →

5,316
opencvecfi20170.1.21 of 7See more

opencve cfi2017 0.1.2

1 of the 7 container images this version deploys carry CVE-2026-94287.

Container imageDigestPackageFixed in
library/nginx:trixieabe47724e466
libxpm@1:3.5.17-1+deb13u1
no fix listed

Open the chart page →

16,127
nginx-chartchanhk10.1.01 of 1See more

nginx-chart chanhk1 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-94287.

Container imageDigestPackageFixed in
library/nginx:latestabe47724e466
libxpm@1:3.5.17-1+deb13u1
no fix listed

Open the chart page →

1,686
mysqld-exporterchoerodon0.1.01 of 1See more

mysqld-exporter choerodon 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-94287.

Container imageDigestPackageFixed in
library/nginx:stable0aa2d81d65bc
libxpm@1:3.5.17-1+deb13u1
no fix listed

Open the chart page →

1,686
helmchartclouddrove1.4.11 of 1See more

helmchart clouddrove 1.4.1

1 of the 1 container images this version deploys carry CVE-2026-94287.

Container imageDigestPackageFixed in
library/nginx:latestabe47724e466
libxpm@1:3.5.17-1+deb13u1
no fix listed

Open the chart page →

1,686
rundeckcloudnativeapp0.1.01 of 2See more

rundeck cloudnativeapp 0.1.0

1 of the 2 container images this version deploys carry CVE-2026-94287.

Container imageDigestPackageFixed in
library/nginx:stableb972f831f200
libxpm@1:3.5.17-1+deb13u1
no fix listed

Open the chart page →

23,820
phpmyadmincloudpirates-phpmyadmin0.1.01 of 1See more

phpmyadmin cloudpirates-phpmyadmin 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-94287.

Container imageDigestPackageFixed in
library/phpmyadmin:5.2.3-apacheadc486045303
libxpm@1:3.5.17-1+deb13u1
no fix listed

Open the chart page →

2,331
metaflowcluster-deploy0.2.21 of 1See more

metaflow cluster-deploy 0.2.2

1 of the 1 container images this version deploys carry CVE-2026-94287.

Container imageDigestPackageFixed in
public.ecr.aws/outerbounds/metaflow_metadata_service:v2.4.13f7567ce3419d
libxpm@1:3.5.12-1.1+deb12u1
no fix listed

Open the chart page →

8,462
web-chartcms-ktcloudlab0.1.01 of 1See more

web-chart cms-ktcloudlab 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-94287.

Container imageDigestPackageFixed in
library/nginx:latestabe47724e466
libxpm@1:3.5.17-1+deb13u1
no fix listed

Open the chart page →

1,686
appcnapVerified publisher1.2.01 of 1See more

app cnap 1.2.0

1 of the 1 container images this version deploys carry CVE-2026-94287.

Container imageDigestPackageFixed in
library/nginx:latestabe47724e466
libxpm@1:3.5.17-1+deb13u1
no fix listed

Open the chart page →

1,686
ms-emails-grpccodedesignplus-chartsVerified publisher0.0.241 of 1See more

ms-emails-grpc codedesignplus-charts 0.0.24

1 of the 1 container images this version deploys carry CVE-2026-94287.

Container imageDigestPackageFixed in
codedesignplus/ms-emails-grpc:latest4fc116f5e879
libxpm@1:3.5.12-1.1+deb12u1
no fix listed

Open the chart page →

4,327
ms-emails-restcodedesignplus-chartsVerified publisher0.0.241 of 1See more

ms-emails-rest codedesignplus-charts 0.0.24

1 of the 1 container images this version deploys carry CVE-2026-94287.

Container imageDigestPackageFixed in
codedesignplus/ms-emails-rest:latest7629e746a5b3
libxpm@1:3.5.12-1.1+deb12u1
no fix listed

Open the chart page →

4,327
genericcolearendt0.2.71 of 1See more

generic colearendt 0.2.7

1 of the 1 container images this version deploys carry CVE-2026-94287.

Container imageDigestPackageFixed in
library/nginx:latestabe47724e466
libxpm@1:3.5.17-1+deb13u1
no fix listed

Open the chart page →

1,686
opencloudcommunity-opencloud3.1.01 of 13See more

opencloud community-opencloud 3.1.0

1 of the 13 container images this version deploys carry CVE-2026-94287.

Container imageDigestPackageFixed in
opencloudeu/web-extensions:importer-1.0.06e8b2df6c5a4
libxpm@1:3.5.12-1.1+deb12u1
no fix listed

Open the chart page →

9,829
rtcsic-charts0.1.11 of 5See more

rt csic-charts 0.1.1

1 of the 5 container images this version deploys carry CVE-2026-94287.

Container imageDigestPackageFixed in
firefart/requesttracker:5.0.40d6249906d8c
libxpm@1:3.5.12-1.1+deb12u1
no fix listed

Open the chart page →

15,775
cypikcypik-app0.1.02 of 2See more

cypik cypik-app 0.1.0

2 of the 2 container images this version deploys carry CVE-2026-94287.

Container imageDigestPackageFixed in
library/nginx:1.25a484819eb602
libxpm@1:3.5.12-1.1+deb12u1
no fix listed
library/nginx:latestabe47724e466
libxpm@1:3.5.17-1+deb13u1
no fix listed

Open the chart page →

7,639
view-cadvisorcypik-helm-chart0.1.01 of 1See more

view-cadvisor cypik-helm-chart 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-94287.

Container imageDigestPackageFixed in
library/nginx:latestabe47724e466
libxpm@1:3.5.17-1+deb13u1
no fix listed

Open the chart page →

1,686
nginx-chartdaeho12Verified publisher0.1.01 of 1See more

nginx-chart daeho12 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-94287.

Container imageDigestPackageFixed in
library/nginx:latestabe47724e466
libxpm@1:3.5.17-1+deb13u1
no fix listed

Open the chart page →

1,686
damap-chartdamapVerified publisher0.3.12 of 5See more

damap-chart damap 0.3.1

2 of the 5 container images this version deploys carry CVE-2026-94287.

Container imageDigestPackageFixed in
gotenberg/gotenberg:8f29984bd1e22
libxpm@1:3.5.17-1+deb13u1
no fix listed
ghcr.io/damap-org/damap-frontend:5.0.2c9d4f0f8b331
libxpm@1:3.5.17-1+deb13u1
no fix listed

Open the chart page →

14,341
helm-chart-testdasmeta0.1.41 of 1See more

helm-chart-test dasmeta 0.1.4

1 of the 1 container images this version deploys carry CVE-2026-94287.

Container imageDigestPackageFixed in
library/nginx:stable0aa2d81d65bc
libxpm@1:3.5.17-1+deb13u1
no fix listed

Open the chart page →

1,686
db-connection-testdb-connection-testVerified publisher0.1.01 of 1See more

db-connection-test db-connection-test 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-94287.

Container imageDigestPackageFixed in
felipecs8/app-db-connection-test:v129e06c9c6385
libxpm@1:3.5.12-1.1+deb12u1
no fix listed

Open the chart page →

10,683

Container images carrying it

159 by charts deploying them

A fixed version is listed for 0 of the 1 affected package.

Container imageDigestPackageFixed inUsed by
ghcr.io/open-telemetry/demo:3.1.0-load-generatorb130d6cee6cb
libxpm@1:3.5.12-1.1+deb12u1
no fix listed
1
ghcr.io/yurymkomarov/docker/kubernetes-kiosk-chromium:0.1.27bff29dcec72
libxpm@1:3.5.12-1.1+deb12u1
no fix listed
1
mcr.microsoft.com/playwright/mcp:v0.0.43e101b832b34d
libxpm@1:3.5.12-1.1+deb12u1
no fix listed
1
public.ecr.aws/jtekt-corporation/api-key-manager-gui:v0.1.10424fa47fbeb
libxpm@1:3.5.17-1+deb13u1
no fix listed
1
public.ecr.aws/jtekt-corporation/image-storage-service-gui:v1.9.434823c8abe00
libxpm@1:3.5.12-1.1+deb12u1
no fix listed
1
public.ecr.aws/jtekt-corporation/shinsei-manager-front:v1.5.5f8fb4eea4071
libxpm@1:3.5.12-1.1+deb12u1
no fix listed
1
public.ecr.aws/outerbounds/metaflow_metadata_service:v2.4.13f7567ce3419d
libxpm@1:3.5.12-1.1+deb12u1
no fix listed
1
quay.io/mittwald/kube-httpcache:stable2169032c5840
libxpm@1:3.5.12-1.1+deb12u1
no fix listed
1
registry.gitlab.com/enbuild-staging/vivsoft-platform-ui/enbuild-frontend:1.0.3166353ce9bf98
libxpm@1:3.5.17-1+b3
no fix listed
1

syft 1.42.1 · advisories as of 29 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.