StackRadar

CVE-2026-95516

Medium

Advisory

Published 23 Sept 2026In the index since 24 Sept 2026
Severity
Medium
worst across findings
CVSS
5.5
base score, highest
EPSS
—
probability of exploitation
CISA KEV
Not listed
no confirmed exploitation
Charts affected
15
of 17,911 indexed, latest versions
Container images
15
deployed by those charts
Fix available
None
affected package

The matching OSV records carry no description.

Carried by container images the latest versions of 15 of 17,911 indexed charts deploy, on 15 images.

Affected packageAffected versionsFixed inImages
zbardeb0.23-1.3, 0.23.92-4build2, 0.23.92-7, 0.23.92-7+deb12u1+2 moreno fix listed15
OSV records
UBUNTU-CVE-2026-95516DEBIAN-CVE-2026-95516

Charts affected

15 by stars
ChartLatestAffected imagesRadar Score
paperless-ngxfmjstudios0.2.81 of 5See more

paperless-ngx fmjstudios 0.2.8

1 of the 5 container images this version deploys carry CVE-2026-95516.

Container imageDigestPackageFixed in
ghcr.io/paperless-ngx/paperless-ngx:2.10.1a132c2ac7c57
zbar@0.23.92-7+deb12u1
no fix listed

Open the chart page →

32,455
paperless-ngxalexmorbo-paperless-ngxVerified publisher0.2.01 of 2See more

paperless-ngx alexmorbo-paperless-ngx 0.2.0

1 of the 2 container images this version deploys carry CVE-2026-95516.

Container imageDigestPackageFixed in
ghcr.io/paperless-ngx/paperless-ngx:2.20.5665f2f5cc548
zbar@0.23.93-8
no fix listed

Open the chart page →

13,050
paperless-ngxcrystalnetVerified publisher0.2.221 of 3See more

paperless-ngx crystalnet 0.2.22

1 of the 3 container images this version deploys carry CVE-2026-95516.

Container imageDigestPackageFixed in
ghcr.io/paperless-ngx/paperless-ngx:2.13.10642357c5dbd
zbar@0.23.92-7+deb12u1
no fix listed

Open the chart page →

14,609
smarter-demosmarterOfficialVerified publisher0.1.52 of 7See more

smarter-demo smarter 0.1.5

2 of the 7 container images this version deploys carry CVE-2026-95516.

Container imageDigestPackageFixed in
ghcr.io/smarter-project/gstreamer:v1.0.25ecb16015aa8
zbar@0.23-1.3
no fix listed
ghcr.io/smarter-project/image-detector:v2.5.31dcca70c6446
zbar@0.23-1.3
no fix listed

Open the chart page →

261,668
mopidygeek-cookbookVerified publisher0.1.21 of 1See more

mopidy geek-cookbook 0.1.2

1 of the 1 container images this version deploys carry CVE-2026-95516.

Container imageDigestPackageFixed in
jaedb/iris:latest048cfbf58d57
zbar@0.23.92-7+deb12u1
no fix listed

Open the chart page →

13,902
openkmgeek-cookbookVerified publisher4.2.01 of 1See more

openkm geek-cookbook 4.2.0

1 of the 1 container images this version deploys carry CVE-2026-95516.

Container imageDigestPackageFixed in
openkm/openkm-ce:6.3.113bc465a7461b
zbar@0.23-1.3
no fix listed

Open the chart page →

28,858
paperlesshomelabcihelmchartstestVerified publisher9.1.91 of 1See more

paperless homelabcihelmchartstest 9.1.9

1 of the 1 container images this version deploys carry CVE-2026-95516.

Container imageDigestPackageFixed in
ghcr.io/paperless-ngx/paperless-ngx:2.0.1ab255bea133e
zbar@0.23.92-7
no fix listed

Open the chart page →

17,238
itm-servicesintelVerified publisher2.0.01 of 8See more

itm-services intel 2.0.0

1 of the 8 container images this version deploys carry CVE-2026-95516.

Container imageDigestPackageFixed in
intel/dlstreamer-pipeline-server:2022.1.1-ubuntu20aa8f5483a2ef
zbar@0.23-1.3
no fix listed

Open the chart page →

92,716
paperlessk8s-home-lab-repo11.0.11 of 1See more

paperless k8s-home-lab-repo 11.0.1

1 of the 1 container images this version deploys carry CVE-2026-95516.

Container imageDigestPackageFixed in
ghcr.io/paperless-ngx/paperless-ngx:2.20.14b89f83345532
zbar@0.23.93-8
no fix listed

Open the chart page →

9,895
ingresslivekit-server1.2.21 of 1See more

ingress livekit-server 1.2.2

1 of the 1 container images this version deploys carry CVE-2026-95516.

Container imageDigestPackageFixed in
livekit/ingress:v1.2.21ab01641b366
zbar@0.23.92-4build2
no fix listed

Open the chart page →

11,237
paperless-ngxmt1905027.6.141 of 4See more

paperless-ngx mt190502 7.6.14

1 of the 4 container images this version deploys carry CVE-2026-95516.

Container imageDigestPackageFixed in
ghcr.io/paperless-ngx/paperless-ngx:2.20.134b05bcd28e69
zbar@0.23.93-8
no fix listed

Open the chart page →

12,504
paperless-ngxrtomik-helm-chartsVerified publisher0.0.51 of 1See more

paperless-ngx rtomik-helm-charts 0.0.5

1 of the 1 container images this version deploys carry CVE-2026-95516.

Container imageDigestPackageFixed in
ghcr.io/paperless-ngx/paperless-ngx:2.20.357ad9565bff3
zbar@0.23.93-8
no fix listed

Open the chart page →

11,468
kurento_webrtc_demostunner0.1.01 of 2See more

kurento_webrtc_demo stunner 0.1.0

1 of the 2 container images this version deploys carry CVE-2026-95516.

Container imageDigestPackageFixed in
kurento/kurento-media-server:latest03c0d34d0828
zbar@0.23.93-4build3
no fix listed

Open the chart page →

13,499
stunner-kurento-one2one-callstunner0.1.01 of 2See more

stunner-kurento-one2one-call stunner 0.1.0

1 of the 2 container images this version deploys carry CVE-2026-95516.

Container imageDigestPackageFixed in
kurento/kurento-media-server:latest03c0d34d0828
zbar@0.23.93-4build3
no fix listed

Open the chart page →

13,499
playwright-synthetic-monitoringwork-adventure1.0.11 of 1See more

playwright-synthetic-monitoring work-adventure 1.0.1

1 of the 1 container images this version deploys carry CVE-2026-95516.

Container imageDigestPackageFixed in
workadventure/playwright-synthetic-monitoring:main92b664c2a06f
zbar@0.23.92-4build2
no fix listed

Open the chart page →

14,852

Container images carrying it

15 by charts deploying them

A fixed version is listed for 0 of the 1 affected package.

Container imageDigestPackageFixed inUsed by
kurento/kurento-media-server:latest03c0d34d0828
zbar@0.23.93-4build3
no fix listed
2
intel/dlstreamer-pipeline-server:2022.1.1-ubuntu20aa8f5483a2ef
zbar@0.23-1.3
no fix listed
1
jaedb/iris:latest048cfbf58d57
zbar@0.23.92-7+deb12u1
no fix listed
1
livekit/ingress:v1.2.21ab01641b366
zbar@0.23.92-4build2
no fix listed
1
openkm/openkm-ce:6.3.113bc465a7461b
zbar@0.23-1.3
no fix listed
1
workadventure/playwright-synthetic-monitoring:main92b664c2a06f
zbar@0.23.92-4build2
no fix listed
1
ghcr.io/paperless-ngx/paperless-ngx:2.13.10642357c5dbd
zbar@0.23.92-7+deb12u1
no fix listed
1
ghcr.io/paperless-ngx/paperless-ngx:2.20.134b05bcd28e69
zbar@0.23.93-8
no fix listed
1
ghcr.io/paperless-ngx/paperless-ngx:2.20.357ad9565bff3
zbar@0.23.93-8
no fix listed
1
ghcr.io/paperless-ngx/paperless-ngx:2.20.5665f2f5cc548
zbar@0.23.93-8
no fix listed
1
ghcr.io/paperless-ngx/paperless-ngx:2.10.1a132c2ac7c57
zbar@0.23.92-7+deb12u1
no fix listed
1
ghcr.io/paperless-ngx/paperless-ngx:2.0.1ab255bea133e
zbar@0.23.92-7
no fix listed
1
ghcr.io/paperless-ngx/paperless-ngx:2.20.14b89f83345532
zbar@0.23.93-8
no fix listed
1
ghcr.io/smarter-project/gstreamer:v1.0.25ecb16015aa8
zbar@0.23-1.3
no fix listed
1
ghcr.io/smarter-project/image-detector:v2.5.31dcca70c6446
zbar@0.23-1.3
no fix listed
1

syft 1.42.1 · advisories as of 27 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.