StackRadar

CVE-2026-97058

Medium

Advisory

Published 24 Sept 2026In the index since 25 Sept 2026
Severity
Medium
worst across findings
CVSS
5.3
base score, highest
EPSS
0.004
28th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
574
of 18,026 indexed, latest versions
Container images
593
deployed by those charts
Fix available
None
affected packages

sprintf-js vulnerable to denial of service through unbounded precision specifiers

Carried by container images the latest versions of 574 of 18,026 indexed charts deploy, on 593 images.

Affected packageAffected versionsFixed inImages
sprintf-jsnpm1.0.3, 1.1.1, 1.1.2, 1.1.3no fix listed593
node-sprintf-jsdeb1.1.2+ds1+~1.1.2-1no fix listed2
OSV records
GHSA-hp3w-g68c-fv3cUBUNTU-CVE-2026-97058

Charts affected

574 by stars
ChartLatestAffected imagesRadar Score
growthbookgrowthbook5.1.01 of 2See more

growthbook growthbook 5.1.0

1 of the 2 container images this version deploys carry CVE-2026-97058.

Container imageDigestPackageFixed in
growthbook/growthbook:5.1.0c8a124f55dca
sprintf-js@1.1.3
no fix listed

Open the chart page →

926
uptime-kumahelmforgeVerified publisher1.5.151 of 1See more

uptime-kuma helmforge 1.5.15

1 of the 1 container images this version deploys carry CVE-2026-97058.

Container imageDigestPackageFixed in
louislam/uptime-kuma:2.5.5c74379ac4509
sprintf-js@1.1.3
no fix listed

Open the chart page →

34,014
uptimekumahelm-l3st86Verified publisher0.1.101 of 1See more

uptimekuma helm-l3st86 0.1.10

1 of the 1 container images this version deploys carry CVE-2026-97058.

Container imageDigestPackageFixed in
louislam/uptime-kuma:1.23.1396510915e6be
sprintf-js@1.1.3
no fix listed

Open the chart page →

5,249
immichimmich-helm0.3.01 of 4See more

immich immich-helm 0.3.0

1 of the 4 container images this version deploys carry CVE-2026-97058.

Container imageDigestPackageFixed in
ghcr.io/immich-app/immich-server:v2.3.1f8d06a32b1b2
sprintf-js@1.1.3
no fix listed

Open the chart page →

18,204
elasticinseefrlab2.2.01 of 2See more

elastic inseefrlab 2.2.0

1 of the 2 container images this version deploys carry CVE-2026-97058.

Container imageDigestPackageFixed in
library/kibana:7.17.3e2e2031c15be
sprintf-js@1.0.3
no fix listed

Open the chart page →

18,226
todo-appjunktext-direct1.1.41 of 1See more

todo-app junktext-direct 1.1.4

1 of the 1 container images this version deploys carry CVE-2026-97058.

Container imageDigestPackageFixed in
junktext/getting-started:1.0.5a70936c04aed
sprintf-js@1.0.3
no fix listed

Open the chart page →

4,181
kenerkenerVerified publisher0.2.01 of 1See more

kener kener 0.2.0

1 of the 1 container images this version deploys carry CVE-2026-97058.

Container imageDigestPackageFixed in
rajnandan1/kener:3.2.1930407afca731
sprintf-js@1.1.3
no fix listed

Open the chart page →

6,173
dashykrzwiatrzyk1.0.01 of 1See more

dashy krzwiatrzyk 1.0.0

1 of the 1 container images this version deploys carry CVE-2026-97058.

Container imageDigestPackageFixed in
ghcr.io/lissy93/dashy:2.1.1acb40032ad4b
sprintf-js@1.0.3
no fix listed

Open the chart page →

3,377
difykubeblocksVerified publisher0.5.11 of 5See more

dify kubeblocks 0.5.1

1 of the 5 container images this version deploys carry CVE-2026-97058.

Container imageDigestPackageFixed in
langgenius/dify-web:0.6.11a2a294743634
sprintf-js@1.1.3
no fix listed

Open the chart page →

22,462
chibisafel4gVerified publisher0.1.12 of 3See more

chibisafe l4g 0.1.1

2 of the 3 container images this version deploys carry CVE-2026-97058.

Container imageDigestPackageFixed in
chibisafe/chibisafe:latest836467a50792
sprintf-js@1.1.3
no fix listed
chibisafe/chibisafe-server:latest3da4fcbc1a18
sprintf-js@1.1.3
no fix listed

Open the chart page →

5,701
litellmlitellm-helm0.2.01 of 1See more

litellm litellm-helm 0.2.0

1 of the 1 container images this version deploys carry CVE-2026-97058.

Container imageDigestPackageFixed in
ghcr.io/berriai/litellm-database:litellm_stable_release_branch-v1.75.5-stableab63d26a8a2c
sprintf-js@1.1.3
no fix listed

Open the chart page →

4,813
litlyxlitlyx0.2.03 of 5See more

litlyx litlyx 0.2.0

3 of the 5 container images this version deploys carry CVE-2026-97058.

Container imageDigestPackageFixed in
litlyx/litlyx-consumer:latest02225e77d316
sprintf-js@1.1.3
no fix listed
litlyx/litlyx-dashboard:lateste64ff2d52385
sprintf-js@1.1.3
no fix listed
litlyx/litlyx-producer:latest10407f36613f
sprintf-js@1.1.3
no fix listed

Open the chart page →

9,613
chatwootmaxcrm-chartsVerified publisher1.1.2011 of 4See more

chatwoot maxcrm-charts 1.1.201

1 of the 4 container images this version deploys carry CVE-2026-97058.

Container imageDigestPackageFixed in
chatwoot/chatwoot:v3.1.0d530ab8c1753
sprintf-js@1.0.3
no fix listed

Open the chart page →

6,120
mend-renovate-enterprise-editionmend-renovateVerified publisher10.6.01 of 2See more

mend-renovate-enterprise-edition mend-renovate 10.6.0

1 of the 2 container images this version deploys carry CVE-2026-97058.

Container imageDigestPackageFixed in
ghcr.io/mend/renovate-ee-server:15.6.087b77989f48d
sprintf-js@1.1.3
no fix listed

Open the chart page →

37,524
food-managermoreillonVerified publisher0.5.01 of 2See more

food-manager moreillon 0.5.0

1 of the 2 container images this version deploys carry CVE-2026-97058.

Container imageDigestPackageFixed in
moreillon/food-manager:lateste8fd856e593d
sprintf-js@1.1.3
no fix listed

Open the chart page →

15,429
n8nn8n-helm2.25.71 of 1See more

n8n n8n-helm 2.25.7

1 of the 1 container images this version deploys carry CVE-2026-97058.

Container imageDigestPackageFixed in
n8nio/n8n:2.25.7761374d4eb84
sprintf-js@1.0.3
no fix listed

Open the chart page →

3,835
pixapopnicholaswildeVerified publisher1.0.01 of 1See more

pixapop nicholaswilde 1.0.0

1 of the 1 container images this version deploys carry CVE-2026-97058.

Container imageDigestPackageFixed in
ghcr.io/linuxserver/pixapop:v1.2-ls15605ebc091fa1
sprintf-js@1.1.2
no fix listed

Open the chart page →

3,599
oadaoadaVerified publisher5.0.610 of 11See more

oada oada 5.0.6

10 of the 11 container images this version deploys carry CVE-2026-97058.

Container imageDigestPackageFixed in
oada/auth:4.0.0c0d077e79ef4
sprintf-js@1.1.3
no fix listed
oada/http-handler:4.0.0d87efe8ba4b0
sprintf-js@1.1.3
no fix listed
oada/rev-graph-update:4.0.0ebc8343f05ff
sprintf-js@1.1.3
no fix listed
oada/shares:4.0.0c6ffb4e8ed63
sprintf-js@1.1.3
no fix listed
oada/startup:4.0.0fc09495e2f3c
sprintf-js@1.1.3
no fix listed
oada/sync-handler:4.0.0b7a2cfc137cf
sprintf-js@1.1.3
no fix listed
oada/users:4.0.0b6c562fa5b1b
sprintf-js@1.1.3
no fix listed
oada/webhooks:4.0.06590c60de347
sprintf-js@1.1.3
no fix listed
oada/well-known:4.0.07943fde43b19
sprintf-js@1.1.3
no fix listed
oada/write-handler:4.0.08464c7f48aae
sprintf-js@1.1.3
no fix listed

Open the chart page →

15,302
dashdotoben01Verified publisher1.5.01 of 1See more

dashdot oben01 1.5.0

1 of the 1 container images this version deploys carry CVE-2026-97058.

Container imageDigestPackageFixed in
mauricenino/dashdot:5.9.2236997816917
sprintf-js@1.1.3
no fix listed

Open the chart page →

1,675
growthbookone-acre-fundVerified publisher0.3.01 of 3See more

growthbook one-acre-fund 0.3.0

1 of the 3 container images this version deploys carry CVE-2026-97058.

Container imageDigestPackageFixed in
growthbook/growthbook:latest67b7cd7d12a1
sprintf-js@1.1.3
no fix listed

Open the chart page →

1,550
openvaultopenvaultVerified publisher0.9.01 of 2See more

openvault openvault 0.9.0

1 of the 2 container images this version deploys carry CVE-2026-97058.

Container imageDigestPackageFixed in
ghcr.io/wgbh-mla/ov-frontend:v1.1.0bfc3118f6565
sprintf-js@1.1.3
no fix listed

Open the chart page →

7,957
uptime-kumapascaliskeVerified publisher3.0.01 of 1See more

uptime-kuma pascaliske 3.0.0

1 of the 1 container images this version deploys carry CVE-2026-97058.

Container imageDigestPackageFixed in
louislam/uptime-kuma:2.0.2-slim-rootless9865163f92c1
sprintf-js@1.1.3
no fix listed

Open the chart page →

8,241
patchworkpatchworkVerified publisher0.8.61 of 2See more

patchwork patchwork 0.8.6

1 of the 2 container images this version deploys carry CVE-2026-97058.

Container imageDigestPackageFixed in
ghcr.io/bryopsida/patchwork:mainc01e018bced4
sprintf-js@1.1.3
no fix listed

Open the chart page →

2,295
pdf-editor-helmpdf-editor-web1.0.01 of 4See more

pdf-editor-helm pdf-editor-web 1.0.0

1 of the 4 container images this version deploys carry CVE-2026-97058.

Container imageDigestPackageFixed in
dipugodocker/pdf-editor:1.0-frontendd431c37fe1cd
sprintf-js@1.0.3
no fix listed

Open the chart page →

5,426
peertubepeertubeVerified publisher0.1.31 of 1See more

peertube peertube 0.1.3

1 of the 1 container images this version deploys carry CVE-2026-97058.

Container imageDigestPackageFixed in
chocobozzz/peertube:v8.1.5052712130691
sprintf-js@1.1.3
no fix listed

Open the chart page →

8,388
portraitportraitVerified publisher0.2.131 of 8See more

portrait portrait 0.2.13

1 of the 8 container images this version deploys carry CVE-2026-97058.

Container imageDigestPackageFixed in
treskon/portrait-ui:DEV-lateste7970783bc8d
sprintf-js@1.0.3
no fix listed

Open the chart page →

36,111
psa-restricted-patcherpsa-restricted-patcherVerified publisher0.10.11 of 1See more

psa-restricted-patcher psa-restricted-patcher 0.10.1

1 of the 1 container images this version deploys carry CVE-2026-97058.

Container imageDigestPackageFixed in
ghcr.io/bryopsida/psa-restricted-patcher:maina53ef16b024a
sprintf-js@1.1.3
no fix listed

Open the chart page →

1,637
rocketadminrocketadminOfficialVerified publisher1.0.421 of 1See more

rocketadmin rocketadmin 1.0.42

1 of the 1 container images this version deploys carry CVE-2026-97058.

Container imageDigestPackageFixed in
rocketadmin/rocketadmin:1.17.710955ef540b9
sprintf-js@1.0.3
no fix listed

Open the chart page →

6,430
kibanaromanow-helm-chartsVerified publisher1.7.11 of 1See more

kibana romanow-helm-charts 1.7.1

1 of the 1 container images this version deploys carry CVE-2026-97058.

Container imageDigestPackageFixed in
library/kibana:7.17.8c5781ba340ef
sprintf-js@1.0.3
no fix listed

Open the chart page →

7,375
jellyseerrrtomik-helm-chartsVerified publisher0.0.11 of 1See more

jellyseerr rtomik-helm-charts 0.0.1

1 of the 1 container images this version deploys carry CVE-2026-97058.

Container imageDigestPackageFixed in
ghcr.io/fallenbagel/jellyseerr:2.5.22a611369ad1d
sprintf-js@1.0.3
no fix listed

Open the chart page →

3,389
kyoorubxkubeVerified publisher0.1.101 of 9See more

kyoo rubxkube 0.1.10

1 of the 9 container images this version deploys carry CVE-2026-97058.

Container imageDigestPackageFixed in
ghcr.io/zoriya/kyoo_front:4.7.1d7f76c9c65d9
sprintf-js@1.1.3
no fix listed

Open the chart page →

33,120
uptime-kumasb-helm-charts0.4.01 of 1See more

uptime-kuma sb-helm-charts 0.4.0

1 of the 1 container images this version deploys carry CVE-2026-97058.

Container imageDigestPackageFixed in
louislam/uptime-kuma:2.0.24c364ef96aad
sprintf-js@1.1.3
no fix listed

Open the chart page →

42,559
karakeepself-hosters-by-nightVerified publisher2.5.11 of 1See more

karakeep self-hosters-by-night 2.5.1

1 of the 1 container images this version deploys carry CVE-2026-97058.

Container imageDigestPackageFixed in
ghcr.io/karakeep-app/karakeep:0.27.1abd7d6b11b1b
sprintf-js@1.1.3
no fix listed

Open the chart page →

6,068
speckle-serverspeckleVerified publisher2.26.32 of 4See more

speckle-server speckle 2.26.3

2 of the 4 container images this version deploys carry CVE-2026-97058.

Container imageDigestPackageFixed in
speckle/speckle-preview-service:2.26.3092384dba45d
sprintf-js@1.1.3
no fix listed
speckle/speckle-server:2.26.379f14a2bf931
sprintf-js@1.1.3
no fix listed

Open the chart page →

11,845
statsdstatsd-airflow-smd0.1.191 of 1See more

statsd statsd-airflow-smd 0.1.19

1 of the 1 container images this version deploys carry CVE-2026-97058.

Container imageDigestPackageFixed in
statsd/statsd:v0.8.6dab129e74c25
sprintf-js@1.0.3
no fix listed

Open the chart page →

5,503
stornxstornxVerified publisher1.1.11 of 9See more

stornx stornx 1.1.1

1 of the 9 container images this version deploys carry CVE-2026-97058.

Container imageDigestPackageFixed in
alazidis/stornx:1.1.1602d4f7f090c
sprintf-js@1.1.3
no fix listed

Open the chart page →

14,649
supabasesupabse0.8.01 of 11See more

supabase supabse 0.8.0

1 of the 11 container images this version deploys carry CVE-2026-97058.

Container imageDigestPackageFixed in
supabase/postgres-meta:v0.96.6a84cc713585e
sprintf-js@1.1.3
no fix listed

Open the chart page →

21,495
tenuretenureVerified publisher1.0.61 of 2See more

tenure tenure 1.0.6

1 of the 2 container images this version deploys carry CVE-2026-97058.

Container imageDigestPackageFixed in
tenureai/tenure:v1.0.285f5b222df9a5
sprintf-js@1.0.3
no fix listed

Open the chart page →

3,223
testhubteshubVerified publisher0.1.41 of 3See more

testhub teshub 0.1.4

1 of the 3 container images this version deploys carry CVE-2026-97058.

Container imageDigestPackageFixed in
testhubio/testhub-frontend:on-preme86c2db53be8
sprintf-js@1.0.3
no fix listed

Open the chart page →

8,751
u-storeunifieVerified publisher1.2.01 of 1See more

u-store unifie 1.2.0

1 of the 1 container images this version deploys carry CVE-2026-97058.

Container imageDigestPackageFixed in
public.ecr.aws/g4a0y2u8/unifie-store:staging-19925a2057fabc948
sprintf-js@1.1.3
no fix listed

Open the chart page →

16,602
unitycatalogunitycatalogVerified publisher0.0.21 of 4See more

unitycatalog unitycatalog 0.0.2

1 of the 4 container images this version deploys carry CVE-2026-97058.

Container imageDigestPackageFixed in
ghcr.io/sdwbgn/unitycatalog-helm/docker/unitycatalog-ui:0.2.1-5d668c1ed07e7ca098d
sprintf-js@1.0.3
no fix listed

Open the chart page →

13,666
vaultwarden-kubernetes-secretsvaultwarden-kubernetes-secrets0.0.0-main1 of 2See more

vaultwarden-kubernetes-secrets vaultwarden-kubernetes-secrets 0.0.0-main

1 of the 2 container images this version deploys carry CVE-2026-97058.

Container imageDigestPackageFixed in
ghcr.io/antoniolago/vaultwarden-kubernetes-secrets:0.0.0-main13e267ad7d94
sprintf-js@1.1.3
no fix listed

Open the chart page →

4,531
devportal-admin-uiveecode-platformVerified publisher0.5.41 of 1See more

devportal-admin-ui veecode-platform 0.5.4

1 of the 1 container images this version deploys carry CVE-2026-97058.

Container imageDigestPackageFixed in
veecode/devportal-admin-ui:0.4.30c69fd286b489
sprintf-js@1.1.3
no fix listed

Open the chart page →

5,975
wikiwenerme2.2.01 of 2See more

wiki wenerme 2.2.0

1 of the 2 container images this version deploys carry CVE-2026-97058.

Container imageDigestPackageFixed in
requarks/wiki:latestfffff288a52f
sprintf-js@1.0.3
no fix listed

Open the chart page →

2,599
scrapoxywiremindVerified publisher0.3.41 of 1See more

scrapoxy wiremind 0.3.4

1 of the 1 container images this version deploys carry CVE-2026-97058.

Container imageDigestPackageFixed in
wiremind/scrapoxy:lateste7048929a676
sprintf-js@1.0.3
no fix listed

Open the chart page →

2,288
wraftwraft0.1.121 of 9See more

wraft wraft 0.1.12

1 of the 9 container images this version deploys carry CVE-2026-97058.

Container imageDigestPackageFixed in
quay.io/wraft/wraft-frontend:latestf1bbbd5e9bb9
sprintf-js@1.1.3
no fix listed

Open the chart page →

5,812
youtubedl-materialyoutubedl-materialVerified publisher0.0.11 of 1See more

youtubedl-material youtubedl-material 0.0.1

1 of the 1 container images this version deploys carry CVE-2026-97058.

Container imageDigestPackageFixed in
tzahi12345/youtubedl-material:latest2f943d584711
sprintf-js@1.1.2
no fix listed

Open the chart page →

10,814
qleverzazukoVerified publisher0.7.21 of 2See more

qlever zazuko 0.7.2

1 of the 2 container images this version deploys carry CVE-2026-97058.

Container imageDigestPackageFixed in
ghcr.io/zazukoians/qlever-ui:v0.10.3c27e20f7a2ca
sprintf-js@1.1.3
no fix listed

Open the chart page →

2,645
trifidzazukoOfficialVerified publisher0.2.11 of 1See more

trifid zazuko 0.2.1

1 of the 1 container images this version deploys carry CVE-2026-97058.

Container imageDigestPackageFixed in
ghcr.io/zazuko/trifid:v6.0.159bda2bf65d4
sprintf-js@1.0.3
no fix listed

Open the chart page →

614
adeptia-automate-mcpadeptia-automate-mcp1.0.02 of 2See more

adeptia-automate-mcp adeptia-automate-mcp 1.0.0

2 of the 2 container images this version deploys carry CVE-2026-97058.

Container imageDigestPackageFixed in
adeptiainc/adeptia-automate-mcp-server:1.0.0283001e83739
sprintf-js@1.1.3
no fix listed
adeptiainc/adeptia-automate-observe:1.0.031f295e948e6
sprintf-js@1.1.3
no fix listed

Open the chart page →

4,283

Container images carrying it

593 by charts deploying them

A fixed version is listed for 0 of the 2 affected packages.

Container imageDigestPackageFixed inUsed by
ghcr.io/bryopsida/openmct:main38b6a50a62b2
sprintf-js@1.1.3
no fix listed
1
ghcr.io/bryopsida/patchwork:mainc01e018bced4
sprintf-js@1.1.3
no fix listed
1
ghcr.io/bryopsida/psa-restricted-patcher:maina53ef16b024a
sprintf-js@1.1.3
no fix listed
1
ghcr.io/bryopsida/syslog-portal:main3947bfd04f49
sprintf-js@1.1.3
no fix listed
1
ghcr.io/buanet/iobroker:v9.1.2ca7dc7362968
sprintf-js@1.1.3
no fix listed
1
ghcr.io/cosmo-workspace/dev-code-server:v0.0.316fda01ae58a
sprintf-js@1.1.3
no fix listed
1
ghcr.io/cross-seed/cross-seed:6.13.7a1fed512261f
sprintf-js@1.1.3
no fix listed
1
ghcr.io/ctron/streamsheets-gateway:2.4.00635f17c9d2c
sprintf-js@1.0.3
no fix listed
1
ghcr.io/ctron/streamsheets-service-graphs:2.4.0e34964e336c1
sprintf-js@1.0.3
no fix listed
1
ghcr.io/ctron/streamsheets-service-machines:2.4.00c5a3398d1e4
sprintf-js@1.0.3
no fix listed
1
ghcr.io/ctron/streamsheets-service-streams:2.4.08ba040e79ca0
sprintf-js@1.0.3
no fix listed
1
ghcr.io/danny-avila/librechat:v0.7.87fe76551a78e
sprintf-js@1.1.3
no fix listed
1
ghcr.io/danny-avila/librechat:v0.7.78c68abbe1cff
sprintf-js@1.1.3
no fix listed
1
ghcr.io/data-fair/data-fair:3cc9498b64b5b
sprintf-js@1.1.3
no fix listed
1
ghcr.io/data-fair/metrics:0a8d40779eeae
sprintf-js@1.0.3
no fix listed
1
ghcr.io/data-fair/notify:3c739b74dabb0
sprintf-js@1.0.3
no fix listed
1
ghcr.io/data-fair/portals:18b621866ceb2
sprintf-js@1.0.3
no fix listed
1
ghcr.io/data-fair/processings:15a9216989707
sprintf-js@1.0.3
no fix listed
1
ghcr.io/data-fair/simple-directory:438a4f32fad82
sprintf-js@1.0.3
no fix listed
1
ghcr.io/external-secrets/kubernetes-external-secrets:6.3.0eab9bd0b6986
sprintf-js@1.0.3
no fix listed
1
ghcr.io/fallenbagel/jellyseerr:2.5.22a611369ad1d
sprintf-js@1.0.3
no fix listed
1
ghcr.io/firecrawl/playwright-service:latest1f6eba640320
sprintf-js@1.1.3
no fix listed
1
ghcr.io/flanksource/facet:0.1.73a0323f4283e5
sprintf-js@1.0.3
no fix listed
1
ghcr.io/formancehq/console:console-on.v1.1.1a4d32c2f68b3
sprintf-js@1.1.3
no fix listed
1
ghcr.io/formancehq/console-v3:v1.16.0c99e8ef2c545
sprintf-js@1.1.3
no fix listed
1
ghcr.io/formancehq/portal:v1.16.06efef5d19d56
sprintf-js@1.1.3
no fix listed
1
ghcr.io/gethomepage/homepage:v1.11.0b129cb0f674b
sprintf-js@1.1.3
no fix listed
1
ghcr.io/glassflow/glassflow-etl-fe:v3.2.05eaad43bd6c5
sprintf-js@1.1.3
no fix listed
1
ghcr.io/hiteshnayak305/cors-proxy:1.2.0e6ff0a131556
sprintf-js@1.1.3
no fix listed
1
ghcr.io/htunn/ansible-inspec:0.2.12cd25a5cc3f1b
sprintf-js@1.1.3
no fix listed
1
ghcr.io/huscker/townsquare-backend:2.15.2e106681e7673
sprintf-js@1.1.3
no fix listed
1
ghcr.io/ignisda/ryot:v10.5.0a752b6aee537
sprintf-js@1.1.3
no fix listed
1
ghcr.io/immich-app/immich-server:v2.3.1f8d06a32b1b2
sprintf-js@1.1.3
no fix listed
1
ghcr.io/jeboehm/fetchmailmgr:0.3.2126c4691b28a4
sprintf-js@1.1.3
no fix listed
1
ghcr.io/jens-maus/raspberrymatic:3.83.6.202508244b22b4f407c4
sprintf-js@1.1.3
no fix listed
1
ghcr.io/jmberesford/retrom-service:retrom-v0.7.144d763d58f11d
sprintf-js@1.1.3
no fix listed
1
ghcr.io/k8s-at-home/haste-server:latest827aa2f2389d
sprintf-js@1.0.3
no fix listed
1
ghcr.io/kadajett/podscope:0.2.3eeedf17112d7
sprintf-js@1.1.3
no fix listed
1
ghcr.io/karakeep-app/karakeep:0.27.1abd7d6b11b1b
sprintf-js@1.1.3
no fix listed
1
ghcr.io/karakeep-app/karakeep:0.33.2b069e4307dec
sprintf-js@1.1.3
no fix listed
1
ghcr.io/karakeep-app/karakeep:0.26.0f575a34ed3f8
sprintf-js@1.1.3
no fix listed
1
ghcr.io/krateoplatformops/deployment-service:1.2.59da9f93f2f731
sprintf-js@1.1.3
no fix listed
1
ghcr.io/krateoplatformops/terminal-client:0.1.36c7c965e739c
sprintf-js@1.1.3
no fix listed
1
ghcr.io/krateoplatformops/terminal-server:0.1.3f5fd8ba6fea3
sprintf-js@1.1.3
no fix listed
1
ghcr.io/kubiyabot/agent-manager:v0.4.13757bdd779345
sprintf-js@1.1.3
no fix listed
1
ghcr.io/leoquote/mergeable:latest451706815103
sprintf-js@1.0.3
no fix listed
1
ghcr.io/linkwarden/linkwarden:v2.16.30664c28a039b
sprintf-js@1.1.3
no fix listed
1
ghcr.io/linkwarden/linkwarden:v2.5.398214faf09f7
sprintf-js@1.1.3
no fix listed
1
ghcr.io/linuxserver/hedgedoc:version-1.9.0792a12ee976a
sprintf-js@1.1.2
no fix listed
1
ghcr.io/linuxserver/mstream:version-v5.2.522c012bcc43c
sprintf-js@1.0.3
no fix listed
1

syft 1.42.1 · advisories as of 6 Oct 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.