StackRadar

CVE-2026-96674

Medium

Advisory

Published 23 Sept 2026In the index since 25 Sept 2026
Severity
Medium
worst across findings
CVSS
4.8
base score, highest
EPSS
0.001
1st percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
228
of 17,844 indexed, latest versions
Container images
207
deployed by those charts
Fix available
None
affected package

The matching OSV records carry no description.

Carried by container images the latest versions of 228 of 17,844 indexed charts deploy, on 207 images.

Affected packageAffected versionsFixed inImages
alsa-libdeb1.0.27.2-3ubuntu7, 1.1.0-0ubuntu1, 1.1.3-5ubuntu0.2, 1.1.3-5ubuntu0.5+16 moreno fix listed207
OSV records
DEBIAN-CVE-2026-96674UBUNTU-CVE-2026-96674

Charts affected

228 by stars
ChartLatestAffected imagesRadar Score
uptime-kumauptime-kumaVerified publisher4.2.01 of 1See more

uptime-kuma uptime-kuma 4.2.0

1 of the 1 container images this version deploys carry CVE-2026-96674.

Container imageDigestPackageFixed in
louislam/uptime-kuma:2.5.0a8610b3b4c38
alsa-lib@1.2.8-1+b1
no fix listed

Open the chart page →

31,953
chaos-meshchaos-meshVerified publisher2.8.41 of 4See more

chaos-mesh chaos-mesh 2.8.4

1 of the 4 container images this version deploys carry CVE-2026-96674.

Container imageDigestPackageFixed in
ghcr.io/chaos-mesh/chaos-daemon:v2.8.40d28dbd95b03
alsa-lib@1.2.8-1+b1
no fix listed

Open the chart page →

6,867
penpotpenpotOfficialVerified publisher1.10.01 of 5See more

penpot penpot 1.10.0

1 of the 5 container images this version deploys carry CVE-2026-96674.

Container imageDigestPackageFixed in
penpotapp/exporter:2.18.0beb2c2bd9660
alsa-lib@1.2.14-1+dhi3
no fix listed

Open the chart page →

5,122
wazuhwazuh-helm-morgovedVerified publisher2.0.71 of 5See more

wazuh wazuh-helm-morgoved 2.0.7

1 of the 5 container images this version deploys carry CVE-2026-96674.

Container imageDigestPackageFixed in
kinseii/wazuh-agent:4.14.17160eb143728
alsa-lib@1.2.8-1+b1
no fix listed

Open the chart page →

11,989
gotenbergmaikumoriVerified publisher1.25.01 of 1See more

gotenberg maikumori 1.25.0

1 of the 1 container images this version deploys carry CVE-2026-96674.

Container imageDigestPackageFixed in
gotenberg/gotenberg:8.36.087c16b9f3642
alsa-lib@1.2.14-1
no fix listed

Open the chart page →

11,266
oneuptimeoneuptimeOfficialVerified publisher14.0.21 of 7See more

oneuptime oneuptime 14.0.2

1 of the 7 container images this version deploys carry CVE-2026-96674.

Container imageDigestPackageFixed in
oneuptime/probe:release198a76ef37f7
alsa-lib@1.2.8-1+b1
no fix listed

Open the chart page →

8,334
apim3graviteeioVerified publisher4.12.202 of 4See more

apim3 graviteeio 4.12.20

2 of the 4 container images this version deploys carry CVE-2026-96674.

Container imageDigestPackageFixed in
graviteeio/apim-gateway:4.12.20-debian8f1a14449381
alsa-lib@1.2.14-1+deb13u1
no fix listed
graviteeio/apim-management-api:4.12.20-debiand30d085395ca
alsa-lib@1.2.14-1+deb13u1
no fix listed

Open the chart page →

4,621
budibasebudibase0.0.0-master1 of 7See more

budibase budibase 0.0.0-master

1 of the 7 container images this version deploys carry CVE-2026-96674.

Container imageDigestPackageFixed in
budibase/database:2.1.0d90f656261c9
alsa-lib@1.2.8-1+b1
no fix listed

Open the chart page →

10,196
paperless-ngxfmjstudios0.2.82 of 5See more

paperless-ngx fmjstudios 0.2.8

2 of the 5 container images this version deploys carry CVE-2026-96674.

Container imageDigestPackageFixed in
apache/tika:2.9.0.092d055a84e9e
alsa-lib@1.2.6.1-1ubuntu1
no fix listed
gotenberg/gotenberg:8.0.1cf0b9a7ca3cf
alsa-lib@1.2.8-1+b1
no fix listed

Open the chart page →

32,368
openclawopenclawVerified publisher1.94.01 of 2See more

openclaw openclaw 1.94.0

1 of the 2 container images this version deploys carry CVE-2026-96674.

Container imageDigestPackageFixed in
ghcr.io/browserless/chromium:v2.56.7b1ba7b054af2
alsa-lib@1.2.11-1ubuntu0.3
no fix listed

Open the chart page →

3,344
penpotcodechemVerified publisher1.0.101 of 3See more

penpot codechem 1.0.10

1 of the 3 container images this version deploys carry CVE-2026-96674.

Container imageDigestPackageFixed in
penpotapp/exporter:1.16.0-betafa7086ad92b1
alsa-lib@1.2.6.1-1ubuntu1
no fix listed

Open the chart page →

29,384
unifiunifiVerified publisher1.16.01 of 1See more

unifi unifi 1.16.0

1 of the 1 container images this version deploys carry CVE-2026-96674.

Container imageDigestPackageFixed in
jacobalberty/unifi:v10.0.162896c0ab82d33
alsa-lib@1.2.2-2.1ubuntu2.5
no fix listed

Open the chart page →

7,817
wazuh-agentavistoVerified publisher4.12.21 of 1See more

wazuh-agent avisto 4.12.2

1 of the 1 container images this version deploys carry CVE-2026-96674.

Container imageDigestPackageFixed in
ghcr.io/avistotelecom/docker-wazuh-agent:4.12.08766ba08bf1a
alsa-lib@1.2.8-1+b1
no fix listed

Open the chart page →

6,803
thehivestrangebee-helmOfficialVerified publisher1.1.01 of 7See more

thehive strangebee-helm 1.1.0

1 of the 7 container images this version deploys carry CVE-2026-96674.

Container imageDigestPackageFixed in
bitnamilegacy/elasticsearch:9.1.2-debian-12-r000176a47afa0
alsa-lib@1.2.8-1+b1
no fix listed

Open the chart page →

17,150
photoprismandrenarchyVerified publisher8.15.01 of 1See more

photoprism andrenarchy 8.15.0

1 of the 1 container images this version deploys carry CVE-2026-96674.

Container imageDigestPackageFixed in
photoprism/photoprism:260728958642220223
alsa-lib@1.2.15.3-1ubuntu1.1
no fix listed

Open the chart page →

45,285
fadicetic0.3.11 of 25See more

fadi cetic 0.3.1

1 of the 25 container images this version deploys carry CVE-2026-96674.

Container imageDigestPackageFixed in
jupyterhub/k8s-hub:0.11.1b6b4a1a34bf0
alsa-lib@1.2.2-2.1ubuntu2.3
no fix listed

Open the chart page →

133,756
karakeephelmforgeVerified publisher1.2.92 of 3See more

karakeep helmforge 1.2.9

2 of the 3 container images this version deploys carry CVE-2026-96674.

Container imageDigestPackageFixed in
ghcr.io/browserless/chromium:v2.55.42ed0183564d7
alsa-lib@1.2.11-1ubuntu0.3
no fix listed
ghcr.io/karakeep-app/karakeep:0.33.2b069e4307dec
alsa-lib@1.2.8-1+b1
no fix listed

Open the chart page →

10,375
openhabhelmforgeVerified publisher1.2.01 of 1See more

openhab helmforge 1.2.0

1 of the 1 container images this version deploys carry CVE-2026-96674.

Container imageDigestPackageFixed in
openhab/openhab:5.2.1bfd4a60e90da
alsa-lib@1.2.14-1
no fix listed

Open the chart page →

4,003
local-ailocalai3.4.21 of 1See more

local-ai localai 3.4.2

1 of the 1 container images this version deploys carry CVE-2026-96674.

Container imageDigestPackageFixed in
quay.io/go-skynet/local-ai:latest0632c21ddbe4
alsa-lib@1.2.11-1ubuntu0.3
no fix listed

Open the chart page →

3,986
grafana-pdf-exporterwiremindVerified publisher2.1.11 of 1See more

grafana-pdf-exporter wiremind 2.1.1

1 of the 1 container images this version deploys carry CVE-2026-96674.

Container imageDigestPackageFixed in
ghcr.io/wiremind/grafana-pdf-exporter:v1.7dbaa8527bf4c
alsa-lib@1.2.8-1+b1
no fix listed

Open the chart page →

10,098
thingsboardcetic0.1.21 of 2See more

thingsboard cetic 0.1.2

1 of the 2 container images this version deploys carry CVE-2026-96674.

Container imageDigestPackageFixed in
thingsboard/tb-postgres:latest2d17e4e36edc
alsa-lib@1.2.8-1+b1
no fix listed

Open the chart page →

5,648
unifigeek-cookbookVerified publisher5.1.31 of 1See more

unifi geek-cookbook 5.1.3

1 of the 1 container images this version deploys carry CVE-2026-96674.

Container imageDigestPackageFixed in
jacobalberty/unifi:v7.4.162b3edc809a3ff
alsa-lib@1.1.3-5ubuntu0.6
no fix listed

Open the chart page →

12,300
apimgraviteeioVerified publisher4.12.202 of 4See more

apim graviteeio 4.12.20

2 of the 4 container images this version deploys carry CVE-2026-96674.

Container imageDigestPackageFixed in
graviteeio/apim-gateway:4.12.20-debian8f1a14449381
alsa-lib@1.2.14-1+deb13u1
no fix listed
graviteeio/apim-management-api:4.12.20-debiand30d085395ca
alsa-lib@1.2.14-1+deb13u1
no fix listed

Open the chart page →

4,621
coreinstill-aiOfficialVerified publisher0.1.751 of 15See more

core instill-ai 0.1.75

1 of the 15 container images this version deploys carry CVE-2026-96674.

Container imageDigestPackageFixed in
instill/artifact-backend:b28766ac4a393e601ed
alsa-lib@1.2.14-1
no fix listed

Open the chart page →

32,066
calibre-webk8s-home-lab-repo9.1.11 of 1See more

calibre-web k8s-home-lab-repo 9.1.1

1 of the 1 container images this version deploys carry CVE-2026-96674.

Container imageDigestPackageFixed in
ghcr.io/linuxserver/calibre-web:0.6.267c0464228f2f
alsa-lib@1.2.11-1ubuntu0.3
no fix listed

Open the chart page →

5,005
oesopsmxVerified publisher4.0.321 of 25See more

oes opsmx 4.0.32

1 of the 25 container images this version deploys carry CVE-2026-96674.

Container imageDigestPackageFixed in
quay.io/opsmxpublic/spin-sample-pipeline:v1.0.1c6a934439421
alsa-lib@1.1.0-0ubuntu1
no fix listed

Open the chart page →

102,839
browserless-chromesagikazarmarkVerified publisher0.0.51 of 1See more

browserless-chrome sagikazarmark 0.0.5

1 of the 1 container images this version deploys carry CVE-2026-96674.

Container imageDigestPackageFixed in
browserless/chrome:1.48.0-chrome-stablec81ae5585b47
alsa-lib@1.2.2-2.1ubuntu2.4
no fix listed

Open the chart page →

101,454
paperless-ngxadnoctemVerified publisher0.4.22 of 5See more

paperless-ngx adnoctem 0.4.2

2 of the 5 container images this version deploys carry CVE-2026-96674.

Container imageDigestPackageFixed in
apache/tika:2.9.0.092d055a84e9e
alsa-lib@1.2.6.1-1ubuntu1
no fix listed
gotenberg/gotenberg:8.36.087c16b9f3642
alsa-lib@1.2.14-1
no fix listed

Open the chart page →

22,063
icat-k8salba-helm-chartsVerified publisher1.1.01 of 4See more

icat-k8s alba-helm-charts 1.1.0

1 of the 4 container images this version deploys carry CVE-2026-96674.

Container imageDigestPackageFixed in
payara/server-full:7.2026.2-jdk2531f1253f0cf8
alsa-lib@1.2.6.1-1ubuntu1.1
no fix listed

Open the chart page →

4,184
hermes-agentankra-chartsVerified publisher0.3.11 of 1See more

hermes-agent ankra-charts 0.3.1

1 of the 1 container images this version deploys carry CVE-2026-96674.

Container imageDigestPackageFixed in
nousresearch/hermes-agent:v2026.8.27e0df6adebddf
alsa-lib@1.2.14-1
no fix listed

Open the chart page →

6,385
dltbrokerassist-iot-distributed-broker0.2.02 of 9See more

dltbroker assist-iot-distributed-broker 0.2.0

2 of the 9 container images this version deploys carry CVE-2026-96674.

Container imageDigestPackageFixed in
hyperledger/fabric-ca-tools:latest4ce6f43ded2e
alsa-lib@1.1.0-0ubuntu1
no fix listed
hyperledger/fabric-couchdb:0.4.15f6c724592abf
alsa-lib@1.1.0-0ubuntu1
no fix listed

Open the chart page →

193,878
dltloggingassist-iot-logging-auditing0.2.02 of 9See more

dltlogging assist-iot-logging-auditing 0.2.0

2 of the 9 container images this version deploys carry CVE-2026-96674.

Container imageDigestPackageFixed in
hyperledger/fabric-ca-tools:latest4ce6f43ded2e
alsa-lib@1.1.0-0ubuntu1
no fix listed
hyperledger/fabric-couchdb:0.4.15f6c724592abf
alsa-lib@1.1.0-0ubuntu1
no fix listed

Open the chart page →

193,858
music-assistantbdclark-helm-chartsVerified publisher0.4.131 of 1See more

music-assistant bdclark-helm-charts 0.4.13

1 of the 1 container images this version deploys carry CVE-2026-96674.

Container imageDigestPackageFixed in
ghcr.io/music-assistant/server:2.10.3885872224fa5
alsa-lib@1.2.14-1
no fix listed

Open the chart page →

3,995
home-assistant-matter-servercharts-derwitt-devVerified publisher4.2.11 of 2See more

home-assistant-matter-server charts-derwitt-dev 4.2.1

1 of the 2 container images this version deploys carry CVE-2026-96674.

Container imageDigestPackageFixed in
ghcr.io/matter-js/matterjs-server:1.4.054232d0d3e7d
alsa-lib@1.2.14-1
no fix listed

Open the chart page →

2,566
tensorflow-notebookcloudnativeapp0.1.21 of 1See more

tensorflow-notebook cloudnativeapp 0.1.2

1 of the 1 container images this version deploys carry CVE-2026-96674.

Container imageDigestPackageFixed in
tensorflow/tensorflow:1.6.0-devel1e3172090703
alsa-lib@1.1.0-0ubuntu1
no fix listed

Open the chart page →

95,373
mealiedeimosfr-charts1.0.151 of 1See more

mealie deimosfr-charts 1.0.15

1 of the 1 container images this version deploys carry CVE-2026-96674.

Container imageDigestPackageFixed in
ghcr.io/mealie-recipes/mealie:v3.24.00b08ac3a9f0a
alsa-lib@1.2.14-1
no fix listed

Open the chart page →

4,361
craftycontrollerdrewburr-labs-helm-chartsVerified publisher0.3.01 of 1See more

craftycontroller drewburr-labs-helm-charts 0.3.0

1 of the 1 container images this version deploys carry CVE-2026-96674.

Container imageDigestPackageFixed in
registry.gitlab.com/crafty-controller/crafty-4:latest7b6e87514259
alsa-lib@1.2.11-1ubuntu0.3
no fix listed

Open the chart page →

36,491
bazarrgeek-cookbookVerified publisher10.6.21 of 1See more

bazarr geek-cookbook 10.6.2

1 of the 1 container images this version deploys carry CVE-2026-96674.

Container imageDigestPackageFixed in
ghcr.io/k8s-at-home/bazarr:v1.0.3fdb5501cdfb9
alsa-lib@1.2.2-2.1ubuntu2.5
no fix listed

Open the chart page →

18,014
calibregeek-cookbookVerified publisher5.4.21 of 1See more

calibre geek-cookbook 5.4.2

1 of the 1 container images this version deploys carry CVE-2026-96674.

Container imageDigestPackageFixed in
linuxserver/calibre:version-v5.21.0a847b5b2d860
alsa-lib@1.1.3-5ubuntu0.5
no fix listed

Open the chart page →

23,754
games-on-whalesgeek-cookbookVerified publisher1.8.23 of 7See more

games-on-whales geek-cookbook 1.8.2

3 of the 7 container images this version deploys carry CVE-2026-96674.

Container imageDigestPackageFixed in
ghcr.io/games-on-whales/pulseaudio:1.0.0f34f98405c10
alsa-lib@1.2.2-2.1ubuntu2.4
no fix listed
ghcr.io/games-on-whales/retroarch:1.0.0103fbcec2314
alsa-lib@1.2.2-2.1ubuntu2.4
no fix listed
ghcr.io/games-on-whales/steam:1.0.09b6105be7ad0
alsa-lib@1.2.2-2.1ubuntu2.4
no fix listed

Open the chart page →

112,689
stashgeek-cookbookVerified publisher3.4.21 of 1See more

stash geek-cookbook 3.4.2

1 of the 1 container images this version deploys carry CVE-2026-96674.

Container imageDigestPackageFixed in
stashapp/stash:latest24dbd7607174
alsa-lib@1.2.2-2.1ubuntu2.3
no fix listed

Open the chart page →

16,335
valheimgeek-cookbookVerified publisher4.4.21 of 1See more

valheim geek-cookbook 4.4.2

1 of the 1 container images this version deploys carry CVE-2026-96674.

Container imageDigestPackageFixed in
ghcr.io/lloesche/valheim-server:latestc885aa902faf
alsa-lib@1.2.14-1+deb13u1
no fix listed

Open the chart page →

2,822
castopodh2mVerified publisher1.12.101 of 3See more

castopod h2m 1.12.10

1 of the 3 container images this version deploys carry CVE-2026-96674.

Container imageDigestPackageFixed in
castopod/castopod:1.12.101fd37280cbb2
alsa-lib@1.2.8-1+b1
no fix listed

Open the chart page →

10,628
uptime-kumahelmforgeVerified publisher1.5.131 of 1See more

uptime-kuma helmforge 1.5.13

1 of the 1 container images this version deploys carry CVE-2026-96674.

Container imageDigestPackageFixed in
louislam/uptime-kuma:2.5.4917318f9d7be
alsa-lib@1.2.8-1+b1
no fix listed

Open the chart page →

31,812
holoinsightholoinsight0.2.51 of 6See more

holoinsight holoinsight 0.2.5

1 of the 6 container images this version deploys carry CVE-2026-96674.

Container imageDigestPackageFixed in
ceresdb/ceresdb-server:v1.0.053b2d0dbba1f
alsa-lib@1.2.2-2.1ubuntu2.5
no fix listed

Open the chart page →

28,402
difykubeblocksVerified publisher0.5.11 of 5See more

dify kubeblocks 0.5.1

1 of the 5 container images this version deploys carry CVE-2026-96674.

Container imageDigestPackageFixed in
langgenius/dify-api:0.6.11fca918260dd6
alsa-lib@1.2.8-1+b1
no fix listed

Open the chart page →

21,281
flaresolverrlib42Verified publisher2.0.01 of 1See more

flaresolverr lib42 2.0.0

1 of the 1 container images this version deploys carry CVE-2026-96674.

Container imageDigestPackageFixed in
ghcr.io/flaresolverr/flaresolverr:v3.4.0ab535d1fef5d
alsa-lib@1.2.8-1+b1
no fix listed

Open the chart page →

37,028
music-assistant-serverlmatfyVerified publisher0.1.91 of 1See more

music-assistant-server lmatfy 0.1.9

1 of the 1 container images this version deploys carry CVE-2026-96674.

Container imageDigestPackageFixed in
ghcr.io/music-assistant/server:2.7.53522e8a7a8f0
alsa-lib@1.2.8-1+b1
no fix listed

Open the chart page →

7,767
flaresolverrm0nsterrr-flaresolverrVerified publisher2.4.11 of 1See more

flaresolverr m0nsterrr-flaresolverr 2.4.1

1 of the 1 container images this version deploys carry CVE-2026-96674.

Container imageDigestPackageFixed in
ghcr.io/flaresolverr/flaresolverr:v3.5.2c80ae007ce2c
alsa-lib@1.2.8-1+b1
no fix listed

Open the chart page →

7,540
drillmagasin-drill0.9.01 of 3See more

drill magasin-drill 0.9.0

1 of the 3 container images this version deploys carry CVE-2026-96674.

Container imageDigestPackageFixed in
merlos/zookeeper:3.9.3a38fc7e09ed7
alsa-lib@1.2.8-1+b1
no fix listed

Open the chart page →

6,029

Container images carrying it

207 by charts deploying them

A fixed version is listed for 0 of the 1 affected package.

Container imageDigestPackageFixed inUsed by
ghcr.io/wiremind/grafana-pdf-exporter:v1.7dbaa8527bf4c
alsa-lib@1.2.8-1+b1
no fix listed
1
ghcr.io/wittdennis/calibre-web:1.1.1aa7d5d5dd6be
alsa-lib@1.2.8-1+b1
no fix listed
1
ghcr.io/yurymkomarov/docker/kubernetes-kiosk-chromium:0.1.27bff29dcec72
alsa-lib@1.2.8-1+b1
no fix listed
1
mcr.microsoft.com/playwright/mcp:v0.0.43e101b832b34d
alsa-lib@1.2.8-1+b1
no fix listed
1
quay.io/go-skynet/local-ai:latest0632c21ddbe4
alsa-lib@1.2.11-1ubuntu0.3
no fix listed
1
quay.io/opsmxpublic/spin-sample-pipeline:v1.0.1c6a934439421
alsa-lib@1.1.0-0ubuntu1
no fix listed
1
registry.gitlab.com/crafty-controller/crafty-4:latest7b6e87514259
alsa-lib@1.2.11-1ubuntu0.3
no fix listed
1

syft 1.42.1 · advisories as of 25 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.