StackRadar

CVE-2026-96674

Medium

Advisory

Published 23 Sept 2026In the index since 25 Sept 2026
Severity
Medium
worst across findings
CVSS
4.8
base score, highest
EPSS
0.001
1st percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
228
of 17,844 indexed, latest versions
Container images
207
deployed by those charts
Fix available
None
affected package

The matching OSV records carry no description.

Carried by container images the latest versions of 228 of 17,844 indexed charts deploy, on 207 images.

Affected packageAffected versionsFixed inImages
alsa-libdeb1.0.27.2-3ubuntu7, 1.1.0-0ubuntu1, 1.1.3-5ubuntu0.2, 1.1.3-5ubuntu0.5+16 moreno fix listed207
OSV records
DEBIAN-CVE-2026-96674UBUNTU-CVE-2026-96674

Charts affected

228 by stars
ChartLatestAffected imagesRadar Score
photoprismschoolguys-helmcharts0.3.81 of 1See more

photoprism schoolguys-helmcharts 0.3.8

1 of the 1 container images this version deploys carry CVE-2026-96674.

Container imageDigestPackageFixed in
photoprism/photoprism:260601650c6ad5a651
alsa-lib@1.2.15.3-1ubuntu1
no fix listed

Open the chart page →

57,124
testing-multitoolsomeblackmagic0.1.21 of 1See more

testing-multitool someblackmagic 0.1.2

1 of the 1 container images this version deploys carry CVE-2026-96674.

Container imageDigestPackageFixed in
someblackmagic/k8s-testing-multitool:v0.1.06eca64b6b440
alsa-lib@1.2.2-2.1ubuntu2.5
no fix listed

Open the chart page →

102,731
speckle-preview-service-branch-testing6speckleVerified publisher2.23.14-branch.testing6.334655-b4e04ee1 of 1See more

speckle-preview-service-branch-testing6 speckle 2.23.14-branch.testing6.334655-b4e04ee

1 of the 1 container images this version deploys carry CVE-2026-96674.

Container imageDigestPackageFixed in
speckle/speckle-preview-service:2.23.14-branch.testing6.334655-b4e04ee6dee853ba74a
alsa-lib@1.2.8-1+b1
no fix listed

Open the chart page →

6,239
speckle-server-branch-hotfix-2.19.1speckleVerified publisher2.19.2-branch.hotfix-2.19.1.124125-665e7e11 of 5See more

speckle-server-branch-hotfix-2.19.1 speckle 2.19.2-branch.hotfix-2.19.1.124125-665e7e1

1 of the 5 container images this version deploys carry CVE-2026-96674.

Container imageDigestPackageFixed in
speckle/speckle-preview-service:2.19.2-branch.hotfix-2.19.1.124125-665e7e1c102b087481a
alsa-lib@1.2.8-1+b1
no fix listed

Open the chart page →

17,136
speckle-server-branch-hotfix-2.20.2speckleVerified publisher2.20.3-branch.hotfix-2.20.2.149555-37ea0cb1 of 5See more

speckle-server-branch-hotfix-2.20.2 speckle 2.20.3-branch.hotfix-2.20.2.149555-37ea0cb

1 of the 5 container images this version deploys carry CVE-2026-96674.

Container imageDigestPackageFixed in
speckle/speckle-preview-service:2.20.3-branch.hotfix-2.20.2.149555-37ea0cbd3da0a84de98
alsa-lib@1.2.8-1+b1
no fix listed

Open the chart page →

17,185
speckle-server-branch-testingspeckleVerified publisher2.17.14-branch.testing.72707.921a5f81 of 5See more

speckle-server-branch-testing speckle 2.17.14-branch.testing.72707.921a5f8

1 of the 5 container images this version deploys carry CVE-2026-96674.

Container imageDigestPackageFixed in
speckle/speckle-preview-service:2.17.14-branch.testing.72707.921a5f884fc39bca0c8
alsa-lib@1.2.8-1+b1
no fix listed

Open the chart page →

15,298
speckle-server-branch-testing1speckleVerified publisher2.20.6-branch.testing1.154030-9b091141 of 5See more

speckle-server-branch-testing1 speckle 2.20.6-branch.testing1.154030-9b09114

1 of the 5 container images this version deploys carry CVE-2026-96674.

Container imageDigestPackageFixed in
speckle/speckle-preview-service:2.20.6-branch.testing1.154030-9b091148f3c1ea153ba
alsa-lib@1.2.8-1+b1
no fix listed

Open the chart page →

17,185
speckle-server-branch-testing2speckleVerified publisher2.18.11-branch.testing2.88634-335d4691 of 5See more

speckle-server-branch-testing2 speckle 2.18.11-branch.testing2.88634-335d469

1 of the 5 container images this version deploys carry CVE-2026-96674.

Container imageDigestPackageFixed in
speckle/speckle-preview-service:2.18.11-branch.testing2.88634-335d4694bd113093583
alsa-lib@1.2.8-1+b1
no fix listed

Open the chart page →

14,845
speckle-server-branch-testing3speckleVerified publisher2.18.12-branch.testing3.88744-f55b3411 of 5See more

speckle-server-branch-testing3 speckle 2.18.12-branch.testing3.88744-f55b341

1 of the 5 container images this version deploys carry CVE-2026-96674.

Container imageDigestPackageFixed in
speckle/speckle-preview-service:2.18.12-branch.testing3.88744-f55b3414bd113093583
alsa-lib@1.2.8-1+b1
no fix listed

Open the chart page →

14,845
speckle-server-branch-testing4speckleVerified publisher2.20.2-branch.testing4.134160-9fad4b21 of 5See more

speckle-server-branch-testing4 speckle 2.20.2-branch.testing4.134160-9fad4b2

1 of the 5 container images this version deploys carry CVE-2026-96674.

Container imageDigestPackageFixed in
speckle/speckle-preview-service:2.20.2-branch.testing4.134160-9fad4b21f897ca906ea
alsa-lib@1.2.8-1+b1
no fix listed

Open the chart page →

16,787
speckle-server-branch-testing5speckleVerified publisher2.21.3-branch.testing5.219631-2153bef1 of 5See more

speckle-server-branch-testing5 speckle 2.21.3-branch.testing5.219631-2153bef

1 of the 5 container images this version deploys carry CVE-2026-96674.

Container imageDigestPackageFixed in
speckle/speckle-preview-service:2.21.3-branch.testing5.219631-2153bef52cad5e3293e
alsa-lib@1.2.8-1+b1
no fix listed

Open the chart page →

16,382
speckle-server-branch-testing6speckleVerified publisher2.25.10-branch.testing6.645-b125c1e1 of 4See more

speckle-server-branch-testing6 speckle 2.25.10-branch.testing6.645-b125c1e

1 of the 4 container images this version deploys carry CVE-2026-96674.

Container imageDigestPackageFixed in
speckle/speckle-preview-service:2.25.10-branch.testing6.645-b125c1e787adcb20a3a
alsa-lib@1.2.8-1+b1
no fix listed

Open the chart page →

11,699
steadybit-agentsteadybit3.1.1741 of 6See more

steadybit-agent steadybit 3.1.174

1 of the 6 container images this version deploys carry CVE-2026-96674.

Container imageDigestPackageFixed in
ghcr.io/steadybit/agent:2.4.6d246bfa55f63
alsa-lib@1.2.14-1+deb13u1
no fix listed

Open the chart page →

3,799
kurento_webrtc_demostunner0.1.01 of 2See more

kurento_webrtc_demo stunner 0.1.0

1 of the 2 container images this version deploys carry CVE-2026-96674.

Container imageDigestPackageFixed in
kurento/kurento-media-server:latest03c0d34d0828
alsa-lib@1.2.11-1ubuntu0.1
no fix listed

Open the chart page →

13,480
stunner-kurento-one2one-callstunner0.1.01 of 2See more

stunner-kurento-one2one-call stunner 0.1.0

1 of the 2 container images this version deploys carry CVE-2026-96674.

Container imageDigestPackageFixed in
kurento/kurento-media-server:latest03c0d34d0828
alsa-lib@1.2.11-1ubuntu0.1
no fix listed

Open the chart page →

13,480
flaresolverrsudo-kraken-flaresolverrVerified publisher2.1.41 of 1See more

flaresolverr sudo-kraken-flaresolverr 2.1.4

1 of the 1 container images this version deploys carry CVE-2026-96674.

Container imageDigestPackageFixed in
ghcr.io/flaresolverr/flaresolverr:v3.4.67962759d99d7
alsa-lib@1.2.8-1+b1
no fix listed

Open the chart page →

35,559
rundecksvtech-public-helm-charts1.0.01 of 2See more

rundeck svtech-public-helm-charts 1.0.0

1 of the 2 container images this version deploys carry CVE-2026-96674.

Container imageDigestPackageFixed in
svtechnmaa/svtech_rundeck:v1.2.26e368ace0977
alsa-lib@1.2.2-2.1ubuntu2.5
no fix listed

Open the chart page →

76,904
speecht5test-opea1.0.01 of 1See more

speecht5 test-opea 1.0.0

1 of the 1 container images this version deploys carry CVE-2026-96674.

Container imageDigestPackageFixed in
opea/speecht5:1.0249afad3d268
alsa-lib@1.2.8-1+b1
no fix listed

Open the chart page →

10,141
openunison-operatortremolo3.0.311 of 1See more

openunison-operator tremolo 3.0.31

1 of the 1 container images this version deploys carry CVE-2026-96674.

Container imageDigestPackageFixed in
ghcr.io/openunison/openunison-kubernetes-operator:1.0.1392bd6c526c50
alsa-lib@1.2.11-1ubuntu0.3
no fix listed

Open the chart page →

1,130
orchestratremolo3.1.562 of 5See more

orchestra tremolo 3.1.56

2 of the 5 container images this version deploys carry CVE-2026-96674.

Container imageDigestPackageFixed in
ghcr.io/openunison/openunison-k8s:1.0.51128081dae281
alsa-lib@1.2.11-1ubuntu0.3
no fix listed
ghcr.io/openunison/openunison-kubernetes-operator:1.0.1392bd6c526c50
alsa-lib@1.2.11-1ubuntu0.3
no fix listed

Open the chart page →

3,298
trident-protect-consoletrident-protect100.2609.0-console1 of 3See more

trident-protect-console trident-protect 100.2609.0-console

1 of the 3 container images this version deploys carry CVE-2026-96674.

Container imageDigestPackageFixed in
netapp/trident-protect-utils:v3.0.0cad26cd945d1
alsa-lib@1.2.14-1
no fix listed

Open the chart page →

6,191
browserlessvictorlane0.2.01 of 1See more

browserless victorlane 0.2.0

1 of the 1 container images this version deploys carry CVE-2026-96674.

Container imageDigestPackageFixed in
ghcr.io/browserless/chromium:v2.43.0853e6f105b51
alsa-lib@1.2.11-1ubuntu0.2
no fix listed

Open the chart page →

4,699
webhookiewebhookie0.1.21 of 1See more

webhookie webhookie 0.1.2

1 of the 1 container images this version deploys carry CVE-2026-96674.

Container imageDigestPackageFixed in
hookiesolutions/webhookie:latest0629694246ba
alsa-lib@1.2.2-2.1ubuntu2.4
no fix listed

Open the chart page →

14,815
webhookie-allwebhookie0.1.21 of 3See more

webhookie-all webhookie 0.1.2

1 of the 3 container images this version deploys carry CVE-2026-96674.

Container imageDigestPackageFixed in
hookiesolutions/webhookie:latest0629694246ba
alsa-lib@1.2.2-2.1ubuntu2.4
no fix listed

Open the chart page →

29,371
longhornwener1.2.31 of 2See more

longhorn wener 1.2.3

1 of the 2 container images this version deploys carry CVE-2026-96674.

Container imageDigestPackageFixed in
longhornio/longhorn-manager:v1.2.3dca34321452c
alsa-lib@1.2.2-2.1ubuntu2.5
no fix listed

Open the chart page →

15,767
longhornwenerme1.2.31 of 2See more

longhorn wenerme 1.2.3

1 of the 2 container images this version deploys carry CVE-2026-96674.

Container imageDigestPackageFixed in
longhornio/longhorn-manager:v1.2.3dca34321452c
alsa-lib@1.2.2-2.1ubuntu2.5
no fix listed

Open the chart page →

15,767
playwright-synthetic-monitoringwork-adventure1.0.11 of 1See more

playwright-synthetic-monitoring work-adventure 1.0.1

1 of the 1 container images this version deploys carry CVE-2026-96674.

Container imageDigestPackageFixed in
workadventure/playwright-synthetic-monitoring:main92b664c2a06f
alsa-lib@1.2.6.1-1ubuntu1
no fix listed

Open the chart page →

14,813
sockpuppetbrowserzekker6Verified publisher0.1.01 of 1See more

sockpuppetbrowser zekker6 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-96674.

Container imageDigestPackageFixed in
dgtlmoon/sockpuppetbrowser:latest1d8f72d2ce20
alsa-lib@1.2.8-1+b1
no fix listed

Open the chart page →

4,800

Container images carrying it

207 by charts deploying them

A fixed version is listed for 0 of the 1 affected package.

Container imageDigestPackageFixed inUsed by
ghcr.io/browserless/chromium:v2.55.42ed0183564d7
alsa-lib@1.2.11-1ubuntu0.3
no fix listed
1
ghcr.io/browserless/chromium:v2.43.0853e6f105b51
alsa-lib@1.2.11-1ubuntu0.2
no fix listed
1
ghcr.io/chaos-mesh/chaos-daemon:v2.8.40d28dbd95b03
alsa-lib@1.2.8-1+b1
no fix listed
1
ghcr.io/chaos-mesh/chaos-daemon:v2.8.369b1d3c09cfa
alsa-lib@1.2.8-1+b1
no fix listed
1
ghcr.io/chaos-mesh/chaos-daemon:v2.7.29608d9b51452
alsa-lib@1.2.8-1+b1
no fix listed
1
ghcr.io/chaos-mesh/chaos-daemon:v2.8.0fb609bc264d9
alsa-lib@1.2.8-1+b1
no fix listed
1
ghcr.io/cjmalloy/jasper:v1.3.282726a947bb65b
alsa-lib@1.2.8-1+b1
no fix listed
1
ghcr.io/firecrawl/playwright-service:latest1f6eba640320
alsa-lib@1.2.8-1+b1
no fix listed
1
ghcr.io/flanksource/facet:0.1.73a0323f4283e5
alsa-lib@1.2.8-1+b1
no fix listed
1
ghcr.io/flaresolverr/flaresolverr:v3.4.0ab535d1fef5d
alsa-lib@1.2.8-1+b1
no fix listed
1
ghcr.io/fluxerapp/fluxer-api:2026.820.164808f683541d5374
alsa-lib@1.2.8-1+b1
no fix listed
1
ghcr.io/fluxerapp/fluxer-media-proxy:2026.820.164955ced7544e6b3f
alsa-lib@1.2.14-1
no fix listed
1
ghcr.io/jfwenisch/steamcmd-manager:v0.4.5dab685e668d9
alsa-lib@1.2.11-1build2
no fix listed
1
ghcr.io/jfwenisch/webtools:v0.1.44569cae83c70
alsa-lib@1.2.11-1build2
no fix listed
1
ghcr.io/jr0dd/puppeteer:v13.3.26047599cd78e
alsa-lib@1.2.2-2.1ubuntu2.5
no fix listed
1
ghcr.io/k8s-at-home/bazarr:v1.0.3fdb5501cdfb9
alsa-lib@1.2.2-2.1ubuntu2.5
no fix listed
1
ghcr.io/k8s-at-home/nzbhydra2:v3.14.2ef3670f7e0a8
alsa-lib@1.2.2-2.1ubuntu2.4
no fix listed
1
ghcr.io/k8s-at-home/xteve:v2.2.0.200292b3614670f
alsa-lib@1.2.2-2.1ubuntu2.5
no fix listed
1
ghcr.io/karakeep-app/karakeep:0.33.2b069e4307dec
alsa-lib@1.2.8-1+b1
no fix listed
1
ghcr.io/linkwarden/linkwarden:v2.16.30664c28a039b
alsa-lib@1.2.8-1+b1
no fix listed
1
ghcr.io/linuxserver/audacity:version-3.0.2cdf203db1e50
alsa-lib@1.2.2-2.1ubuntu2.4
no fix listed
1
ghcr.io/linuxserver/booksonic:version-1.2677efca1065d
alsa-lib@1.1.3-5ubuntu0.6
no fix listed
1
ghcr.io/linuxserver/booksonic-air:version-v2009.1.0baa4fa9549dc
alsa-lib@1.1.3-5ubuntu0.6
no fix listed
1
ghcr.io/linuxserver/calibre-web:latest0767226fcf20
alsa-lib@1.2.11-1ubuntu0.3
no fix listed
1
ghcr.io/linuxserver/calibre-web:0.6.267c0464228f2f
alsa-lib@1.2.11-1ubuntu0.3
no fix listed
1
ghcr.io/linuxserver/digikam:version-7.3.055b4c7f320ae
alsa-lib@1.1.3-5ubuntu0.6
no fix listed
1
ghcr.io/linuxserver/doublecommander:version-0.8.2-1d92969a929c2
alsa-lib@1.1.3-5ubuntu0.6
no fix listed
1
ghcr.io/linuxserver/remmina:version-1.2.0-rcgit.29dfsg-1ubuntu105955792e00f
alsa-lib@1.1.3-5ubuntu0.6
no fix listed
1
ghcr.io/linuxserver/sqlitebrowser:version-3.12.2-02876202105241947ubuntu18.04.1426e79828c4b
alsa-lib@1.1.3-5ubuntu0.6
no fix listed
1
ghcr.io/lloesche/valheim-server:latestc885aa902faf
alsa-lib@1.2.14-1+deb13u1
no fix listed
1
ghcr.io/matter-js/matterjs-server:1.4.054232d0d3e7d
alsa-lib@1.2.14-1
no fix listed
1
ghcr.io/mealie-recipes/mealie:v3.24.00b08ac3a9f0a
alsa-lib@1.2.14-1
no fix listed
1
ghcr.io/mealie-recipes/mealie:v3.25.16066c29eca95
alsa-lib@1.2.14-1
no fix listed
1
ghcr.io/music-assistant/server:2.7.53522e8a7a8f0
alsa-lib@1.2.8-1+b1
no fix listed
1
ghcr.io/music-assistant/server:2.9.950666a6f8d7f
alsa-lib@1.2.8-1+b1
no fix listed
1
ghcr.io/music-assistant/server:2.10.3885872224fa5
alsa-lib@1.2.14-1
no fix listed
1
ghcr.io/music-assistant/server:2.8.7eef3ee7810d0
alsa-lib@1.2.8-1+b1
no fix listed
1
ghcr.io/open-telemetry/demo:1.12.0-loadgenerator85c9935ff31b
alsa-lib@1.2.8-1+b1
no fix listed
1
ghcr.io/open-telemetry/demo:3.1.0-load-generatorb130d6cee6cb
alsa-lib@1.2.8-1+b1
no fix listed
1
ghcr.io/openunison/openunison-k8s:1.0.51128081dae281
alsa-lib@1.2.11-1ubuntu0.3
no fix listed
1
ghcr.io/smarter-project/audio-client:v3.1.23c8375dc5487
alsa-lib@1.2.2-2.1ubuntu2.5
no fix listed
1
ghcr.io/smarter-project/gstreamer:v1.0.25ecb16015aa8
alsa-lib@1.2.2-2.1ubuntu2.5
no fix listed
1
ghcr.io/smarter-project/image-detector:v2.5.31dcca70c6446
alsa-lib@1.2.2-2.1ubuntu2.5
no fix listed
1
ghcr.io/star-whale/server:0.6.158368359c8dd0
alsa-lib@1.2.2-2.1ubuntu2.5
no fix listed
1
ghcr.io/steadybit/agent:2.4.6d246bfa55f63
alsa-lib@1.2.14-1+deb13u1
no fix listed
1
ghcr.io/stirling-tools/stirling-pdf:2.14.33b3670fce70b
alsa-lib@1.2.11-1ubuntu0.2
no fix listed
1
ghcr.io/streamingfast/substreams-sink-kv:v2.3.026953ec68d5d
alsa-lib@1.2.2-2.1ubuntu2.5
no fix listed
1
ghcr.io/streamingfast/substreams-sink-noop:v1.4.0d7c43c3135c6
alsa-lib@1.2.2-2.1ubuntu2.5
no fix listed
1
ghcr.io/suwayomi/suwayomi-server:v2.3.2320d2c3218c7f9f
alsa-lib@1.2.11-1ubuntu0.3
no fix listed
1
ghcr.io/voxpupuli/puppetserver:8.7.0-main63873f3f698e
alsa-lib@1.2.6.1-1ubuntu1
no fix listed
1

syft 1.42.1 · advisories as of 25 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.