StackRadar

GHSA-f88m-g3jw-g9cj

High

Advisory

Published 21 Jul 2026In the index since 5 Sept 2026
Severity
High
worst across findings
CVSS
7.0
base score, highest
EPSS
—
probability of exploitation
CISA KEV
Not listed
no confirmed exploitation
Charts affected
124
of 17,781 indexed, latest versions
Container images
127
deployed by those charts
Fix available
1 of 1
affected package

sharp inherited vulnerabilities in libvips: CVE-2026-33327, CVE-2026-33328, CVE-2026-35590, CVE-2026-35591

Carried by container images the latest versions of 124 of 17,781 indexed charts deploy, on 127 images.

Affected packageAffected versionsFixed inImages
sharpnpm0.27.2, 0.28.1, 0.29.0, 0.29.2+16 more0.35.0127
OSV records
GHSA-f88m-g3jw-g9cj

Charts affected

124 by stars
ChartLatestAffected imagesRadar Score
podscopepodscope0.2.31 of 1See more

podscope podscope 0.2.3

1 of the 1 container images this version deploys carry GHSA-f88m-g3jw-g9cj.

Container imageDigestPackageFixed in
ghcr.io/kadajett/podscope:0.2.3eeedf17112d7
sharp@0.34.5
0.35.0

Open the chart page →

1,484
pumperlypumperlyVerified publisher0.1.21 of 3See more

pumperly pumperly 0.1.2

1 of the 3 container images this version deploys carry GHSA-f88m-g3jw-g9cj.

Container imageDigestPackageFixed in
drumsergio/pumperly:1.4.885bbc3915e9e
sharp@0.34.5
0.35.0

Open the chart page →

2,854
radar-self-enrolment-uiradar-baseVerified publisher0.4.21 of 1See more

radar-self-enrolment-ui radar-base 0.4.2

1 of the 1 container images this version deploys carry GHSA-f88m-g3jw-g9cj.

Container imageDigestPackageFixed in
ghcr.io/radar-base/radar-self-enrolment-ui:0.1.0b9a7cd3cc099
sharp@0.34.4
0.35.0

Open the chart page →

1,506
karakeeprtomik-helm-chartsVerified publisher0.0.11 of 3See more

karakeep rtomik-helm-charts 0.0.1

1 of the 3 container images this version deploys carry GHSA-f88m-g3jw-g9cj.

Container imageDigestPackageFixed in
ghcr.io/karakeep-app/karakeep:0.26.0f575a34ed3f8
sharp@0.33.3
0.35.0

Open the chart page →

5,338
joplinrubxkubeVerified publisher1.3.11 of 2See more

joplin rubxkube 1.3.1

1 of the 2 container images this version deploys carry GHSA-f88m-g3jw-g9cj.

Container imageDigestPackageFixed in
joplin/server:3.0-beta52af57880c0e
sharp@0.33.3
0.35.0

Open the chart page →

7,413
rybbitrybbit-helm1.3.01 of 7See more

rybbit rybbit-helm 1.3.0

1 of the 7 container images this version deploys carry GHSA-f88m-g3jw-g9cj.

Container imageDigestPackageFixed in
ghcr.io/rybbit-io/rybbit-client:latest9a3bbb2e837a
sharp@0.34.5
0.35.0

Open the chart page →

5,819
unifi-protectschichtelVerified publisher0.10.11 of 1See more

unifi-protect schichtel 0.10.1

1 of the 1 container images this version deploys carry GHSA-f88m-g3jw-g9cj.

Container imageDigestPackageFixed in
markdegroot/unifi-protect-arm64:latestd8445f2a0de6
sharp@0.30.7
0.35.0

Open the chart page →

5,582
seerr-chartseerr-chartVerified publisher3.9.11 of 1See more

seerr-chart seerr-chart 3.9.1

1 of the 1 container images this version deploys carry GHSA-f88m-g3jw-g9cj.

Container imageDigestPackageFixed in
ghcr.io/seerr-team/seerr:v3.4.1f4768de5f616
sharp@0.34.5
0.35.0

Open the chart page →

1,991
speckle-server-branch-hotfix-2.19.1speckleVerified publisher2.19.2-branch.hotfix-2.19.1.124125-665e7e12 of 5See more

speckle-server-branch-hotfix-2.19.1 speckle 2.19.2-branch.hotfix-2.19.1.124125-665e7e1

2 of the 5 container images this version deploys carry GHSA-f88m-g3jw-g9cj.

Container imageDigestPackageFixed in
speckle/speckle-preview-service:2.19.2-branch.hotfix-2.19.1.124125-665e7e1c102b087481a
sharp@0.32.6
0.35.0
speckle/speckle-server:2.19.2-branch.hotfix-2.19.1.124125-665e7e14b6a0750d5aa
sharp@0.32.6
0.35.0

Open the chart page →

16,368
speckle-server-branch-hotfix-2.20.2speckleVerified publisher2.20.3-branch.hotfix-2.20.2.149555-37ea0cb2 of 5See more

speckle-server-branch-hotfix-2.20.2 speckle 2.20.3-branch.hotfix-2.20.2.149555-37ea0cb

2 of the 5 container images this version deploys carry GHSA-f88m-g3jw-g9cj.

Container imageDigestPackageFixed in
speckle/speckle-preview-service:2.20.3-branch.hotfix-2.20.2.149555-37ea0cbd3da0a84de98
sharp@0.32.6
0.35.0
speckle/speckle-server:2.20.3-branch.hotfix-2.20.2.149555-37ea0cb52f8eabf5cea
sharp@0.32.6
0.35.0

Open the chart page →

16,400
speckle-server-branch-testingspeckleVerified publisher2.17.14-branch.testing.72707.921a5f82 of 5See more

speckle-server-branch-testing speckle 2.17.14-branch.testing.72707.921a5f8

2 of the 5 container images this version deploys carry GHSA-f88m-g3jw-g9cj.

Container imageDigestPackageFixed in
speckle/speckle-preview-service:2.17.14-branch.testing.72707.921a5f884fc39bca0c8
sharp@0.32.6
0.35.0
speckle/speckle-server:2.17.14-branch.testing.72707.921a5f849d10dcdfb91
sharp@0.32.6
0.35.0

Open the chart page →

14,679
speckle-server-branch-testing1speckleVerified publisher2.20.6-branch.testing1.154030-9b091142 of 5See more

speckle-server-branch-testing1 speckle 2.20.6-branch.testing1.154030-9b09114

2 of the 5 container images this version deploys carry GHSA-f88m-g3jw-g9cj.

Container imageDigestPackageFixed in
speckle/speckle-preview-service:2.20.6-branch.testing1.154030-9b091148f3c1ea153ba
sharp@0.32.6
0.35.0
speckle/speckle-server:2.20.6-branch.testing1.154030-9b09114e8413f57b327
sharp@0.32.6
0.35.0

Open the chart page →

16,400
speckle-server-branch-testing2speckleVerified publisher2.18.11-branch.testing2.88634-335d4692 of 5See more

speckle-server-branch-testing2 speckle 2.18.11-branch.testing2.88634-335d469

2 of the 5 container images this version deploys carry GHSA-f88m-g3jw-g9cj.

Container imageDigestPackageFixed in
speckle/speckle-preview-service:2.18.11-branch.testing2.88634-335d4694bd113093583
sharp@0.32.6
0.35.0
speckle/speckle-server:2.18.11-branch.testing2.88634-335d469bf6a501b2210
sharp@0.32.6
0.35.0

Open the chart page →

14,221
speckle-server-branch-testing3speckleVerified publisher2.18.12-branch.testing3.88744-f55b3412 of 5See more

speckle-server-branch-testing3 speckle 2.18.12-branch.testing3.88744-f55b341

2 of the 5 container images this version deploys carry GHSA-f88m-g3jw-g9cj.

Container imageDigestPackageFixed in
speckle/speckle-preview-service:2.18.12-branch.testing3.88744-f55b3414bd113093583
sharp@0.32.6
0.35.0
speckle/speckle-server:2.18.12-branch.testing3.88744-f55b34189a5872375f9
sharp@0.32.6
0.35.0

Open the chart page →

14,221
speckle-server-branch-testing4speckleVerified publisher2.20.2-branch.testing4.134160-9fad4b22 of 5See more

speckle-server-branch-testing4 speckle 2.20.2-branch.testing4.134160-9fad4b2

2 of the 5 container images this version deploys carry GHSA-f88m-g3jw-g9cj.

Container imageDigestPackageFixed in
speckle/speckle-preview-service:2.20.2-branch.testing4.134160-9fad4b21f897ca906ea
sharp@0.32.6
0.35.0
speckle/speckle-server:2.20.2-branch.testing4.134160-9fad4b2687f43ab16f3
sharp@0.32.6
0.35.0

Open the chart page →

16,019
speckle-server-branch-testing5speckleVerified publisher2.21.3-branch.testing5.219631-2153bef3 of 5See more

speckle-server-branch-testing5 speckle 2.21.3-branch.testing5.219631-2153bef

3 of the 5 container images this version deploys carry GHSA-f88m-g3jw-g9cj.

Container imageDigestPackageFixed in
speckle/speckle-frontend-2:2.21.3-branch.testing5.219631-2153befd4ca6ebf09b9
sharp@0.32.6
0.35.0
speckle/speckle-preview-service:2.21.3-branch.testing5.219631-2153bef52cad5e3293e
sharp@0.32.6
0.35.0
speckle/speckle-server:2.21.3-branch.testing5.219631-2153bef8fd157733393
sharp@0.32.6
0.35.0

Open the chart page →

15,635
speckle-server-branch-testing6speckleVerified publisher2.25.10-branch.testing6.645-b125c1e1 of 4See more

speckle-server-branch-testing6 speckle 2.25.10-branch.testing6.645-b125c1e

1 of the 4 container images this version deploys carry GHSA-f88m-g3jw-g9cj.

Container imageDigestPackageFixed in
speckle/speckle-server:2.25.10-branch.testing6.645-b125c1e75cdf256067b
sharp@0.34.3
0.35.0

Open the chart page →

11,100
strapistrapi-xmv0.1.11 of 1See more

strapi strapi-xmv 0.1.1

1 of the 1 container images this version deploys carry GHSA-f88m-g3jw-g9cj.

Container imageDigestPackageFixed in
ghcr.io/xmv-solutions-gmbh/strapi:latesta288b4571142
sharp@0.33.5
0.35.0

Open the chart page →

676
supabaseteochenglim0.1.21 of 13See more

supabase teochenglim 0.1.2

1 of the 13 container images this version deploys carry GHSA-f88m-g3jw-g9cj.

Container imageDigestPackageFixed in
supabase/studio:latest94a2a9d2906e
sharp@0.34.5
0.35.0

Open the chart page →

9,556
joplintobiassackmann0.1.71 of 2See more

joplin tobiassackmann 0.1.7

1 of the 2 container images this version deploys carry GHSA-f88m-g3jw-g9cj.

Container imageDigestPackageFixed in
joplin/server:latest3f7b852959aa
sharp@0.34.5
0.35.0

Open the chart page →

5,535
saleor-appstrieb-work0.6.03 of 5See more

saleor-apps trieb-work 0.6.0

3 of the 5 container images this version deploys carry GHSA-f88m-g3jw-g9cj.

Container imageDigestPackageFixed in
ghcr.io/trieb-work/saleor-apps/saleor-app-products-feed:1.23.11d435b4ab372
sharp@0.33.5
0.35.0
ghcr.io/trieb-work/saleor-apps/saleor-app-search:1.24.328edefb6c92d
sharp@0.33.5
0.35.0
ghcr.io/trieb-work/saleor-apps/saleor-app-smtp:1.4.357a06bfba327
sharp@0.33.5
0.35.0

Open the chart page →

6,994
evolution-apivcnngrVerified publisher1.0.01 of 5See more

evolution-api vcnngr 1.0.0

1 of the 5 container images this version deploys carry GHSA-f88m-g3jw-g9cj.

Container imageDigestPackageFixed in
evoapicloud/evolution-api:latest966625532d90
sharp@0.34.5
0.35.0

Open the chart page →

3,746
colanodevictorlane0.3.31 of 3See more

colanode victorlane 0.3.3

1 of the 3 container images this version deploys carry GHSA-f88m-g3jw-g9cj.

Container imageDigestPackageFixed in
ghcr.io/colanode/server:latest7006cac874fd
sharp@0.34.5
0.35.0

Open the chart page →

2,076
websitewaldo-visionVerified publisher0.33.01 of 2See more

website waldo-vision 0.33.0

1 of the 2 container images this version deploys carry GHSA-f88m-g3jw-g9cj.

Container imageDigestPackageFixed in
ghcr.io/waldo-vision/web:v0.3.65bbc7647df07
sharp@0.32.0
0.35.0

Open the chart page →

3,474

Container images carrying it

127 by charts deploying them

A fixed version is listed for 1 of the 1 affected package.

Container imageDigestPackageFixed inUsed by
assistiot/dlt_api:2.0.0e36a8922fa0c
sharp@0.27.2
0.35.0
3
rcdelacruz/my-strapi-app:js-amd6438007f358355
sharp@0.32.0
0.35.0
3
ghcr.io/microboxlabs/miot-app:0.5.203cc10a496ced
sharp@0.34.5
0.35.0
3
ghcr.io/seerr-team/seerr:latest:v3.4.1f4768de5f616
sharp@0.34.5
0.35.0
3
speckle/speckle-preview-service:2.18.11-branch.testing2.88634-335d469:2.18.12-branch.testing3.88744-f55b3414bd113093583
sharp@0.32.6
0.35.0
2
sysnet4admin/dashboard:bluec5bd3bb1b5a6
sharp@0.33.4
0.35.0
2
ghcr.io/nucleuscloud/neosync/app:0.5.41ca31ec35b829
sharp@0.34.1
0.35.0
2
aktosecurity/akto-puppeteer-replay:doom_latest853e37321e6e
sharp@0.33.5
0.35.0
1
alquimiaai/studio:certification38a1f0341982
sharp@0.34.4
0.35.0
1
apecloud/aperag-frontend:v0.0.0-nightlyb3ae37840ace
sharp@0.34.3
0.35.0
1
assistiot/dlt_api:2.1.0c8a170683be7
sharp@0.27.2
0.35.0
1
bicarus/mx-api-service:1.0.2-hf1dab88659ae3b
sharp@0.30.7
0.35.0
1
browserless/chrome:1.48.0-chrome-stablec81ae5585b47
sharp@0.29.0
0.35.0
1
chibisafe/chibisafe:latest836467a50792
sharp@0.33.3
0.35.0
1
chibisafe/chibisafe-server:latest3da4fcbc1a18
sharp@0.33.2
0.35.0
1
chocobozzz/peertube:v8.1.5052712130691
sharp@0.34.5
0.35.0
1
dessalines/lemmy-ui:0.19.20ee4c620d8e93
sharp@0.33.5
0.35.0
1
devopsiaci/self-learning-platform:1.1.3d9441c931f75
sharp@0.34.5
0.35.0
1
directus/directus:12.0.29c8470ea465c
sharp@0.34.5
0.35.0
1
directus/directus:11.1.0e3c8bb975350
sharp@0.33.5
0.35.0
1
documenso/documenso:v1.8.17f16a9449f18
sharp@0.32.6
0.35.0
1
drumsergio/lynxprompt:2.0.75c6afb6679301
sharp@0.34.5
0.35.0
1
drumsergio/pumperly:1.4.885bbc3915e9e
sharp@0.34.5
0.35.0
1
dserio83/velero-ui:0.3.1b4e1ec6664d3
sharp@0.33.5
0.35.0
1
epam/ai-dial-admin-frontend:0.20.021d91ad74755
sharp@0.34.5
0.35.0
1
evoapicloud/evolution-api:latest966625532d90
sharp@0.34.5
0.35.0
1
fallenbagel/jellyseerr:latest4538137bc5af
sharp@0.33.4
0.35.0
1
flanksource/canary-checker-ui:v1.4.281764c84e550db
sharp@0.32.6
0.35.0
1
flanksource/incident-manager-ui:v1.4.318891f21df54fb
sharp@0.34.5
0.35.0
1
fosrl/pangolin:1.13.0c32ad797ab96
sharp@0.34.4
0.35.0
1
helmforge/opencut:v0.3.0bf11156e0ab5
sharp@0.34.5
0.35.0
1
ianw/quickchart:v1.7.1dc49dd460c37
sharp@0.30.7
0.35.0
1
instill/console:0.68.54cd70e2df5c6
sharp@0.34.3
0.35.0
1
jakowenko/double-take:1.6.0b858bac9e32a
sharp@0.29.2
0.35.0
1
joplin/server:latest3f7b852959aa
sharp@0.34.5
0.35.0
1
joplin/server:3.0-beta52af57880c0e
sharp@0.33.3
0.35.0
1
joplin/server:2.14.2-betab87564ef34e9
sharp@0.33.1
0.35.0
1
langgenius/dify-ee-enterprise-frontend:3.9.8-ubi98dd9de6b6190
sharp@0.34.5
0.35.0
1
langgenius/dify-ee-web:3.9.8-ubi9ba1dd1d0bcea
sharp@0.34.5
0.35.0
1
langgenius/dify-web:1.16.187dd47e4e28f
sharp@0.34.5
0.35.0
1
langgenius/dify-web:0.6.11a2a294743634
sharp@0.33.2
0.35.0
1
langgenius/dify-web:1.10.1-fix.1c306ac577912
sharp@0.34.4
0.35.0
1
langgenius/dify-web:1.0.0d64914ff0d6d
sharp@0.33.5
0.35.0
1
lbenicio/helm-pilot:0.2.54594a2632510
sharp@0.34.5
0.35.0
1
library/ghost:6.37.01ef2e532ca4d
sharp@0.34.5
0.35.0
1
library/ghost:6.25.12654b1e90413
sharp@0.34.5
0.35.0
1
library/ghost:6.41.129773d6be407
sharp@0.34.5
0.35.0
1
library/ghost:4.37.0767230c0f263
sharp@0.29.3
0.35.0
1
library/ghost:6.39.0-alpine77196da4b0df
sharp@0.34.5
0.35.0
1
library/ghost:5.79.083f7bf209844
sharp@0.32.6
0.35.0
1

syft 1.42.1 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.