USN-8846-1
UnscoredAdvisory
Published 29 Sept 2026In the index since 30 Sept 2026
- Severity
- Unscored
- worst across findings
- CVSS
- —
- base score, highest
- EPSS
- —
- probability of exploitation
- CISA KEV
- Not listed
- no confirmed exploitation
- Charts affected
- 55
- of 17,957 indexed, latest versions
- Container images
- 51
- deployed by those charts
- Fix available
- 1 of 1
- affected package
libheif vulnerabilities
Carried by container images the latest versions of 55 of 17,957 indexed charts deploy, on 51 images.
| Affected package | Affected versions | Fixed in | Images |
|---|---|---|---|
| libheifdeb | 1.12.0-2build1, 1.17.6-1ubuntu4, 1.17.6-1ubuntu4.1, 1.17.6-1ubuntu4.2+6 more | 1.12.0-2ubuntu0.1~esm5, 1.17.6-1ubuntu4.9, 1.21.2-3ubuntu0.6 | 51 |
- OSV records
- USN-8846-1
Charts affected
55 by stars
| Chart | Latest | Affected images | Radar Score |
|---|---|---|---|
| stunner-kurento-one2one-callstunner | 0.1.0 | 1 of 2See more | 13,548 |
| stash-boxswuuper-githubVerified publisher | 0.1.1 | 1 of 2See more | 8,828 |
| opencloudunxwaresVerified publisher | 0.2.3 | 1 of 13See more | 46,735 |
| calibre-webvista | 0.1.3 | 1 of 1See more | 8,381 |
| zoo-project-druzoo-projectOfficialVerified publisher | 0.10.4 | 1 of 6See more | 8,586 |
Container images carrying it
51 by charts deploying them
A fixed version is listed for 1 of the 1 affected package.
| Container image | Digest | Package | Fixed in | Used by |
|---|---|---|---|---|
| ghcr.io/ | 7c0464228f2f | libheif | 1.17.6-1ubuntu4.9 | 1 |