StackRadar

CVE-2026-94422

Medium

Advisory

Published 23 Sept 2026In the index since 24 Sept 2026
Severity
Medium
worst across findings
CVSS
5.5
base score, highest
EPSS
—
probability of exploitation
CISA KEV
Not listed
no confirmed exploitation
Charts affected
3
of 17,837 indexed, latest versions
Container images
3
deployed by those charts
Fix available
None
affected package

The matching OSV records carry no description.

Carried by container images the latest versions of 3 of 17,837 indexed charts deploy, on 3 images.

Affected packageAffected versionsFixed inImages
xdg-dbus-proxydeb0.1.2-1, 0.1.3-1, 0.1.3-1ubuntu0.1no fix listed3
OSV records
UBUNTU-CVE-2026-94422

Charts affected

3 by stars
ChartLatestAffected imagesRadar Score
business-api-ecosystemfiware1.1.01 of 4See more

business-api-ecosystem fiware 1.1.0

1 of the 4 container images this version deploys carry CVE-2026-94422.

Container imageDigestPackageFixed in
fiware/biz-ecosystem-charging-backend:11.7.029456835bb2c
xdg-dbus-proxy@0.1.2-1
no fix listed

Open the chart page →

111,250
ingresslivekit-server1.2.21 of 1See more

ingress livekit-server 1.2.2

1 of the 1 container images this version deploys carry CVE-2026-94422.

Container imageDigestPackageFixed in
livekit/ingress:v1.2.21ab01641b366
xdg-dbus-proxy@0.1.3-1
no fix listed

Open the chart page →

10,922
vrisingryuunosukeds30.1.01 of 1See more

vrising ryuunosukeds3 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-94422.

Container imageDigestPackageFixed in
trueosiris/vrising:latest9356f98ad561
xdg-dbus-proxy@0.1.3-1ubuntu0.1
no fix listed

Open the chart page →

7,586

Container images carrying it

3 by charts deploying them

A fixed version is listed for 0 of the 1 affected package.

Container imageDigestPackageFixed inUsed by
fiware/biz-ecosystem-charging-backend:11.7.029456835bb2c
xdg-dbus-proxy@0.1.2-1
no fix listed
1
livekit/ingress:v1.2.21ab01641b366
xdg-dbus-proxy@0.1.3-1
no fix listed
1
trueosiris/vrising:latest9356f98ad561
xdg-dbus-proxy@0.1.3-1ubuntu0.1
no fix listed
1

syft 1.42.1 · advisories as of 24 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.