StackRadar

USN-8846-1

Unscored

Advisory

Published 29 Sept 2026In the index since 30 Sept 2026
Severity
Unscored
worst across findings
CVSS
—
base score, highest
EPSS
—
probability of exploitation
CISA KEV
Not listed
no confirmed exploitation
Charts affected
55
of 17,957 indexed, latest versions
Container images
51
deployed by those charts
Fix available
1 of 1
affected package

libheif vulnerabilities

Carried by container images the latest versions of 55 of 17,957 indexed charts deploy, on 51 images.

Affected packageAffected versionsFixed inImages
libheifdeb1.12.0-2build1, 1.17.6-1ubuntu4, 1.17.6-1ubuntu4.1, 1.17.6-1ubuntu4.2+6 more1.12.0-2ubuntu0.1~esm5, 1.17.6-1ubuntu4.9, 1.21.2-3ubuntu0.651
OSV records
USN-8846-1

Charts affected

55 by stars
ChartLatestAffected imagesRadar Score
zabbixzabbix-communityVerified publisher7.1.01 of 5See more

zabbix zabbix-community 7.1.0

1 of the 5 container images this version deploys carry USN-8846-1.

Container imageDigestPackageFixed in
zabbix/zabbix-web-nginx-pgsql:ubuntu-7.0.237d4d58086515
libheif@1.17.6-1ubuntu4.2
1.17.6-1ubuntu4.9

Open the chart page →

14,548
difydoubanVerified publisher0.10.01 of 6See more

dify douban 0.10.0

1 of the 6 container images this version deploys carry USN-8846-1.

Container imageDigestPackageFixed in
langgenius/dify-plugin-daemon:0.5.1-local8269050f192e
libheif@1.17.6-1ubuntu4.1
1.17.6-1ubuntu4.9

Open the chart page →

81,789
difydify-helmVerified publisher0.38.01 of 11See more

dify dify-helm 0.38.0

1 of the 11 container images this version deploys carry USN-8846-1.

Container imageDigestPackageFixed in
langgenius/dify-plugin-daemon:0.6.3-local3c694329357b
libheif@1.17.6-1ubuntu4.4
1.17.6-1ubuntu4.9

Open the chart page →

71,885
plantumlstevehipwellVerified publisher3.49.01 of 1See more

plantuml stevehipwell 3.49.0

1 of the 1 container images this version deploys carry USN-8846-1.

Container imageDigestPackageFixed in
plantuml/plantuml-server:jetty-v1.2026.85f6f99ec2fc1
libheif@1.17.6-1ubuntu4.8
1.17.6-1ubuntu4.9

Open the chart page →

2,192
minecraft-proxyminecraft-server-chartsVerified publisher3.10.01 of 1See more

minecraft-proxy minecraft-server-charts 3.10.0

1 of the 1 container images this version deploys carry USN-8846-1.

Container imageDigestPackageFixed in
itzg/bungeecord:latestde76286c0e73
libheif@1.21.2-3ubuntu0.5
1.21.2-3ubuntu0.6

Open the chart page →

3,067
penpotcodechemVerified publisher1.0.102 of 3See more

penpot codechem 1.0.10

2 of the 3 container images this version deploys carry USN-8846-1.

Container imageDigestPackageFixed in
penpotapp/backend:1.16.0-betae978e871be07
libheif@1.12.0-2build1
1.12.0-2ubuntu0.1~esm5
penpotapp/exporter:1.16.0-betafa7086ad92b1
libheif@1.12.0-2build1
1.12.0-2ubuntu0.1~esm5

Open the chart page →

29,617
selenium-gridselenium-grid0.59.12 of 4See more

selenium-grid selenium-grid 0.59.1

2 of the 4 container images this version deploys carry USN-8846-1.

Container imageDigestPackageFixed in
selenium/node-chrome:4.48.0-202609055ac71fd8dd1e
libheif@1.17.6-1ubuntu4.8
1.17.6-1ubuntu4.9
selenium/node-firefox:4.48.0-2026090574a5c1c90f95
libheif@1.17.6-1ubuntu4.8
1.17.6-1ubuntu4.9

Open the chart page →

8,251
tt-rssangelnu7.0.01 of 2See more

tt-rss angelnu 7.0.0

1 of the 2 container images this version deploys carry USN-8846-1.

Container imageDigestPackageFixed in
ghcr.io/angelnu/tt-rss:2.0.100708ba6617f33c9
libheif@1.21.2-3ubuntu0.5
1.21.2-3ubuntu0.6

Open the chart page →

1,129
calibre-webk8s-home-lab-repo9.1.11 of 1See more

calibre-web k8s-home-lab-repo 9.1.1

1 of the 1 container images this version deploys carry USN-8846-1.

Container imageDigestPackageFixed in
ghcr.io/linuxserver/calibre-web:0.6.267c0464228f2f
libheif@1.17.6-1ubuntu4.6
1.17.6-1ubuntu4.9

Open the chart page →

5,059
machinarislib42Verified publisher0.2.01 of 1See more

machinaris lib42 0.2.0

1 of the 1 container images this version deploys carry USN-8846-1.

Container imageDigestPackageFixed in
ghcr.io/guydavis/machinaris:test50a71a30f18e
libheif@1.17.6-1ubuntu4.8
1.17.6-1ubuntu4.9

Open the chart page →

39,315
nominatimrobjuz6.4.21 of 4See more

nominatim robjuz 6.4.2

1 of the 4 container images this version deploys carry USN-8846-1.

Container imageDigestPackageFixed in
mediagis/nominatim:5.3.27923a8e67197
libheif@1.17.6-1ubuntu4.4
1.17.6-1ubuntu4.9

Open the chart page →

57,329
structurizrvirtualrootVerified publisher0.5.01 of 1See more

structurizr virtualroot 0.5.0

1 of the 1 container images this version deploys carry USN-8846-1.

Container imageDigestPackageFixed in
structurizr/onpremises:2025.11.094b5ffb5119c8
libheif@1.17.6-1ubuntu4.1
1.17.6-1ubuntu4.9

Open the chart page →

4,851
zabbix-server-mysqlfermosit3.0.21 of 4See more

zabbix-server-mysql fermosit 3.0.2

1 of the 4 container images this version deploys carry USN-8846-1.

Container imageDigestPackageFixed in
zabbix/zabbix-web-nginx-mysql:ubuntu-6.4-latest0e5f69c4c54e
libheif@1.17.6-1ubuntu4.1
1.17.6-1ubuntu4.9

Open the chart page →

13,654
owncloudkubernetes-homelab-helm-chartsVerified publisher0.1.01 of 3See more

owncloud kubernetes-homelab-helm-charts 0.1.0

1 of the 3 container images this version deploys carry USN-8846-1.

Container imageDigestPackageFixed in
owncloud/server:10.16.274c53d341076
libheif@1.12.0-2build1
1.12.0-2ubuntu0.1~esm5

Open the chart page →

10,661
phpqonstruktVerified publisher0.2.01 of 1See more

php qonstrukt 0.2.0

1 of the 1 container images this version deploys carry USN-8846-1.

Container imageDigestPackageFixed in
qonstrukt/php:8.4-v8-apache089af7925aa1
libheif@1.17.6-1ubuntu4.6
1.17.6-1ubuntu4.9

Open the chart page →

62,272
routehub-client-hubroutehub-helm1.0.01 of 3See more

routehub-client-hub routehub-helm 1.0.0

1 of the 3 container images this version deploys carry USN-8846-1.

Container imageDigestPackageFixed in
timescale/timescaledb-ha:pg164f288c0a5213
libheif@1.12.0-2build1
1.12.0-2ubuntu0.1~esm5

Open the chart page →

13,544
astrotrekastria0.0.21 of 4See more

astrotrek astria 0.0.2

1 of the 4 container images this version deploys carry USN-8846-1.

Container imageDigestPackageFixed in
timescale/timescaledb-ha:pg15-latesta8e3322e1cf9
libheif@1.12.0-2build1
1.12.0-2ubuntu0.1~esm5

Open the chart page →

34,130
node-appbryopsida0.5.11 of 2See more

node-app bryopsida 0.5.1

1 of the 2 container images this version deploys carry USN-8846-1.

Container imageDigestPackageFixed in
ghcr.io/bryopsida/k8s-dev-pod:main82d0b161161d
libheif@1.17.6-1ubuntu4.1
1.17.6-1ubuntu4.9

Open the chart page →

79,935
calibre-web-automatedcalibre-web-automated1.0.01 of 1See more

calibre-web-automated calibre-web-automated 1.0.0

1 of the 1 container images this version deploys carry USN-8846-1.

Container imageDigestPackageFixed in
crocodilestick/calibre-web-automated:v4.0.6c31a738b6d5e
libheif@1.17.6-1ubuntu4.2
1.17.6-1ubuntu4.9

Open the chart page →

6,904
mapservercamptocamp-apache0.1.101 of 2See more

mapserver camptocamp-apache 0.1.10

1 of the 2 container images this version deploys carry USN-8846-1.

Container imageDigestPackageFixed in
camptocamp/mapserver:master5f9ddd0b9c5b
libheif@1.21.2-3ubuntu0.4
1.21.2-3ubuntu0.6

Open the chart page →

1,960
kube-acp-stackcloudentity2.29.01 of 7See more

kube-acp-stack cloudentity 2.29.0

1 of the 7 container images this version deploys carry USN-8846-1.

Container imageDigestPackageFixed in
timescale/timescaledb-ha:pg17.2-ts2.18.2e8d0a9cc3db5
libheif@1.12.0-2build1
1.12.0-2ubuntu0.1~esm5

Open the chart page →

21,883
opencloudcommunity-opencloud3.1.01 of 13See more

opencloud community-opencloud 3.1.0

1 of the 13 container images this version deploys carry USN-8846-1.

Container imageDigestPackageFixed in
apache/tika:latest-full80072bb73dd3
libheif@1.21.2-3ubuntu0.4
1.21.2-3ubuntu0.6

Open the chart page →

10,169
datumcosmicrocks1.0.51 of 2See more

datum cosmicrocks 1.0.5

1 of the 2 container images this version deploys carry USN-8846-1.

Container imageDigestPackageFixed in
ghcr.io/cosmicrocks/datum:v0.4.0beta76771c3cc8c3
libheif@1.17.6-1ubuntu4.2
1.17.6-1ubuntu4.9

Open the chart page →

64,045
apachedevops0.1.01 of 4See more

apache devops 0.1.0

1 of the 4 container images this version deploys carry USN-8846-1.

Container imageDigestPackageFixed in
ghcr.io/codingducksrl/laravel:8.15be52524664c
libheif@1.12.0-2build1
1.12.0-2ubuntu0.1~esm5

Open the chart page →

121,940
laraveldevops0.10.31 of 4See more

laravel devops 0.10.3

1 of the 4 container images this version deploys carry USN-8846-1.

Container imageDigestPackageFixed in
ghcr.io/codingducksrl/laravel:8.15be52524664c
libheif@1.12.0-2build1
1.12.0-2ubuntu0.1~esm5

Open the chart page →

120,938
difydify1.0.01 of 4See more

dify dify 1.0.0

1 of the 4 container images this version deploys carry USN-8846-1.

Container imageDigestPackageFixed in
langgenius/dify-plugin-daemon:main-local7d2fb04baf44
libheif@1.17.6-1ubuntu4.8
1.17.6-1ubuntu4.9

Open the chart page →

56,519
ownclouddjjudas21Verified publisher0.3.231 of 3See more

owncloud djjudas21 0.3.23

1 of the 3 container images this version deploys carry USN-8846-1.

Container imageDigestPackageFixed in
owncloud/server:10.16.3b3f9efdcd7f7
libheif@1.12.0-2build1
1.12.0-2ubuntu0.1~esm5

Open the chart page →

11,049
photoprismdjjudas21Verified publisher99.99.991 of 1See more

photoprism djjudas21 99.99.99

1 of the 1 container images this version deploys carry USN-8846-1.

Container imageDigestPackageFixed in
photoprism/photoprism:240711-cefc6fd632ca74
libheif@1.17.6-1ubuntu4
1.17.6-1ubuntu4.9

Open the chart page →

99,525
codecovdoubanVerified publisher0.2.41 of 8See more

codecov douban 0.2.4

1 of the 8 container images this version deploys carry USN-8846-1.

Container imageDigestPackageFixed in
timescale/timescaledb-ha:pg14.6-ts2.9.1-p1cdb9ae118899
libheif@1.12.0-2build1
1.12.0-2ubuntu0.1~esm5

Open the chart page →

25,854
drogue-cloud-examplesdrogue-iotVerified publisher0.7.111 of 6See more

drogue-cloud-examples drogue-iot 0.7.11

1 of the 6 container images this version deploys carry USN-8846-1.

Container imageDigestPackageFixed in
timescale/timescaledb-ha:pg14-ts2.6-latested719c0cd19d
libheif@1.12.0-2build1
1.12.0-2ubuntu0.1~esm5

Open the chart page →

31,633
photoprismgeek-cookbookVerified publisher7.2.01 of 1See more

photoprism geek-cookbook 7.2.0

1 of the 1 container images this version deploys carry USN-8846-1.

Container imageDigestPackageFixed in
photoprism/photoprism:220629-jammy2954334adbda
libheif@1.12.0-2build1
1.12.0-2ubuntu0.1~esm5

Open the chart page →

20,258
grapple-installergrapple-installer0.3.221 of 1See more

grapple-installer grapple-installer 0.3.22

1 of the 1 container images this version deploys carry USN-8846-1.

Container imageDigestPackageFixed in
grpl/grapple-cli:0.2.127c00aafee6629
libheif@1.17.6-1ubuntu4
1.17.6-1ubuntu4.9

Open the chart page →

89,842
komgahelmforgeVerified publisher1.4.161 of 1See more

komga helmforge 1.4.16

1 of the 1 container images this version deploys carry USN-8846-1.

Container imageDigestPackageFixed in
gotson/komga:1.27.19cf102f5fb78
libheif@1.21.2-3ubuntu0.5
1.21.2-3ubuntu0.6

Open the chart page →

35,590
minecrafthelmforgeVerified publisher1.5.51 of 1See more

minecraft helmforge 1.5.5

1 of the 1 container images this version deploys carry USN-8846-1.

Container imageDigestPackageFixed in
itzg/minecraft-server:2026.9.2de5d1b1a83eb
libheif@1.17.6-1ubuntu4.8
1.17.6-1ubuntu4.9

Open the chart page →

4,280
nominatimheywood8-helm-chartsVerified publisher3.10.81 of 3See more

nominatim heywood8-helm-charts 3.10.8

1 of the 3 container images this version deploys carry USN-8846-1.

Container imageDigestPackageFixed in
mediagis/nominatim:4.2d0eae7b51374
libheif@1.12.0-2build1
1.12.0-2ubuntu0.1~esm5

Open the chart page →

15,031
opencloudjacobcolvinVerified publisher0.2.31 of 13See more

opencloud jacobcolvin 0.2.3

1 of the 13 container images this version deploys carry USN-8846-1.

Container imageDigestPackageFixed in
apache/tika:2.9.2.1-fullae0b86d3c4d0
libheif@1.17.6-1ubuntu4
1.17.6-1ubuntu4.9

Open the chart page →

46,735
homebridgejespernohrVerified publisher0.2.01 of 1See more

homebridge jespernohr 0.2.0

1 of the 1 container images this version deploys carry USN-8846-1.

Container imageDigestPackageFixed in
homebridge/homebridge:latest77c685a40911
libheif@1.17.6-1ubuntu4.8
1.17.6-1ubuntu4.9

Open the chart page →

39,947
k8s-dev-podk8s-dev-pod0.3.11 of 1See more

k8s-dev-pod k8s-dev-pod 0.3.1

1 of the 1 container images this version deploys carry USN-8846-1.

Container imageDigestPackageFixed in
ghcr.io/bryopsida/k8s-dev-pod:main82d0b161161d
libheif@1.17.6-1ubuntu4.1
1.17.6-1ubuntu4.9

Open the chart page →

74,130
penpotkubitodevVerified publisher1.2.12 of 5See more

penpot kubitodev 1.2.1

2 of the 5 container images this version deploys carry USN-8846-1.

Container imageDigestPackageFixed in
penpotapp/backend:2.2.147853d9bb9dd
libheif@1.12.0-2build1
1.12.0-2ubuntu0.1~esm5
penpotapp/exporter:2.2.15c835ffd87ab
libheif@1.12.0-2build1
1.12.0-2ubuntu0.1~esm5

Open the chart page →

18,366
homebridgelbenicio-communityVerified publisher0.1.151 of 1See more

homebridge lbenicio-community 0.1.15

1 of the 1 container images this version deploys carry USN-8846-1.

Container imageDigestPackageFixed in
homebridge/homebridge:latest77c685a40911
libheif@1.17.6-1ubuntu4.8
1.17.6-1ubuntu4.9

Open the chart page →

39,947
danboorumy0nVerified publisher0.0.21 of 1See more

danbooru my0n 0.0.2

1 of the 1 container images this version deploys carry USN-8846-1.

Container imageDigestPackageFixed in
ghcr.io/danbooru/danbooru:9cab67c0ac72a8c52289302c519715ceec2372d95f545698e907
libheif@1.12.0-2build1
1.12.0-2ubuntu0.1~esm5

Open the chart page →

107,046
danbooru-stackmy0nVerified publisher0.0.31 of 4See more

danbooru-stack my0n 0.0.3

1 of the 4 container images this version deploys carry USN-8846-1.

Container imageDigestPackageFixed in
ghcr.io/danbooru/danbooru:9cab67c0ac72a8c52289302c519715ceec2372d95f545698e907
libheif@1.12.0-2build1
1.12.0-2ubuntu0.1~esm5

Open the chart page →

107,046
opds-shelfopds-shelfVerified publisher0.4.01 of 3See more

opds-shelf opds-shelf 0.4.0

1 of the 3 container images this version deploys carry USN-8846-1.

Container imageDigestPackageFixed in
ghcr.io/linuxserver/calibre-web:latest0767226fcf20
libheif@1.17.6-1ubuntu4.8
1.17.6-1ubuntu4.9

Open the chart page →

4,852
minecraftpaul1365972-mc3.0.11 of 1See more

minecraft paul1365972-mc 3.0.1

1 of the 1 container images this version deploys carry USN-8846-1.

Container imageDigestPackageFixed in
itzg/minecraft-server:latest77280d10744f
libheif@1.17.6-1ubuntu4.8
1.17.6-1ubuntu4.9

Open the chart page →

4,519
game-serverpvillaverdeVerified publisher1.0.61 of 1See more

game-server pvillaverde 1.0.6

1 of the 1 container images this version deploys carry USN-8846-1.

Container imageDigestPackageFixed in
ghcr.io/itzg/minecraft-server:latest46919d151d39
libheif@1.17.6-1ubuntu4.8
1.17.6-1ubuntu4.9

Open the chart page →

4,671
komgarubxkubeVerified publisher0.1.31 of 1See more

komga rubxkube 0.1.3

1 of the 1 container images this version deploys carry USN-8846-1.

Container imageDigestPackageFixed in
gotson/komga:1.26.36c2a967bbe9a
libheif@1.21.2-3ubuntu0.3
1.21.2-3ubuntu0.6

Open the chart page →

41,102
seafileschmitzis13.0.131 of 4See more

seafile schmitzis 13.0.13

1 of the 4 container images this version deploys carry USN-8846-1.

Container imageDigestPackageFixed in
schmitzis/monorepo:seafile-13.0-latestf7e51ba2fb07
libheif@1.17.6-1ubuntu4.8
1.17.6-1ubuntu4.9

Open the chart page →

43,887
snipeitschmitzis6.1.01 of 2See more

snipeit schmitzis 6.1.0

1 of the 2 container images this version deploys carry USN-8846-1.

Container imageDigestPackageFixed in
snipe/snipe-it:v8.3.1141ebf2386fe
libheif@1.17.6-1ubuntu4.1
1.17.6-1ubuntu4.9

Open the chart page →

69,379
plantumlstevehipwell-helm-charts-plantumlVerified publisher3.49.01 of 1See more

plantuml stevehipwell-helm-charts-plantuml 3.49.0

1 of the 1 container images this version deploys carry USN-8846-1.

Container imageDigestPackageFixed in
plantuml/plantuml-server:jetty-v1.2026.85f6f99ec2fc1
libheif@1.17.6-1ubuntu4.8
1.17.6-1ubuntu4.9

Open the chart page →

2,192
kurento_webrtc_demostunner0.1.01 of 2See more

kurento_webrtc_demo stunner 0.1.0

1 of the 2 container images this version deploys carry USN-8846-1.

Container imageDigestPackageFixed in
kurento/kurento-media-server:latest03c0d34d0828
libheif@1.17.6-1ubuntu4.1
1.17.6-1ubuntu4.9

Open the chart page →

13,548

Container images carrying it

51 by charts deploying them

A fixed version is listed for 1 of the 1 affected package.

Container imageDigestPackageFixed inUsed by
ghcr.io/linuxserver/calibre-web:0.6.267c0464228f2f
libheif@1.17.6-1ubuntu4.6
1.17.6-1ubuntu4.9
1

syft 1.42.1 · advisories as of 30 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.