StackRadar

CVE-2026-0861

High

Advisory

Published 14 Jan 2026In the index since 5 Sept 2026
Severity
High
worst across findings
CVSS
8.4
base score, highest
EPSS
0.004
33rd percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
1,392
of 17,790 indexed, latest versions
Container images
1,504
deployed by those charts
Fix available
3 of 3
affected packages

CVE-2026-0861 affecting package glibc for versions less than 2.38-18

Carried by container images the latest versions of 1,392 of 17,790 indexed charts deploy, on 1,504 images.

Affected packageAffected versionsFixed inImages
glibcdeb2.31-0ubuntu9, 2.31-0ubuntu9.1, 2.31-0ubuntu9.2, 2.31-0ubuntu9.7+37 more2.31-0ubuntu9.18+esm1, 2.35-0ubuntu3.13, 2.36-9+deb12u14, 2.39-0ubuntu8.7+2 more1,484
glibcapk2.37-r6, 2.38-r6, 2.39-r7, 2.40-r1+6 more2.42-r619
glibcrpm2.38-16.azl32.38-181
OSV records
CGA-2mgg-q5mj-634rDEBIAN-CVE-2026-0861UBUNTU-CVE-2026-0861AZL-74547
Also known as
CGA-r49j-3wwm-c7g6, USN-8005-1

Charts affected

1,392 by stars
ChartLatestAffected imagesRadar Score
ferriscompanyferriscompany0.1.01 of 1See more

ferriscompany ferriscompany 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-0861.

Container imageDigestPackageFixed in
ghcr.io/libreconnect/ferriscompany:0.1.0-rc6ed86db9f0efe
glibc@2.36-9+deb12u8
2.36-9+deb12u14

Open the chart page →

10,814
fibfibonacci-cluster-appsVerified publisher1.0.03 of 5See more

fib fibonacci-cluster-apps 1.0.0

3 of the 5 container images this version deploys carry CVE-2026-0861.

Container imageDigestPackageFixed in
golenski/fibonacci-msg-relay:1.0.0c863dcb0c513
glibc@2.36-9+deb12u1
2.36-9+deb12u14
golenski/fibonacci-task-manager:2.0.03a2b36df247b
glibc@2.36-9+deb12u1
2.36-9+deb12u14
golenski/fibonacci-worker:2.0.0954caf4aaf6a
glibc@2.36-9+deb12u1
2.36-9+deb12u14

Open the chart page →

17,003
infrafibonacci-cluster-infraVerified publisher1.0.03 of 4See more

infra fibonacci-cluster-infra 1.0.0

3 of the 4 container images this version deploys carry CVE-2026-0861.

Container imageDigestPackageFixed in
apache/activemq-artemis:2.37.0bae523439ee3
glibc@2.39-0ubuntu8.2
2.39-0ubuntu8.7
library/postgres:16.4e62fbf9d3e2b
glibc@2.36-9+deb12u9
2.36-9+deb12u14
library/redis:7.4.1bb142a9c18ac
glibc@2.36-9+deb12u9
2.36-9+deb12u14

Open the chart page →

12,538
flask-contactsfirst-idror-chart1.0.11 of 3See more

flask-contacts first-idror-chart 1.0.1

1 of the 3 container images this version deploys carry CVE-2026-0861.

Container imageDigestPackageFixed in
shashkist/flask-contacts-app:latest581de1fd6084
glibc@2.36-9+deb12u9
2.36-9+deb12u14

Open the chart page →

5,789
business-api-ecosystemfiware1.1.02 of 4See more

business-api-ecosystem fiware 1.1.0

2 of the 4 container images this version deploys carry CVE-2026-0861.

Container imageDigestPackageFixed in
fiware/biz-ecosystem-charging-backend:11.7.029456835bb2c
glibc@2.31-0ubuntu9.17
2.31-0ubuntu9.18+esm1
fiware/biz-ecosystem-logic-proxy:11.20.3d551a13e8278
glibc@2.36-9+deb12u10
2.36-9+deb12u14

Open the chart page →

64,668
apm-hubflanksourceVerified publisher0.0.471 of 2See more

apm-hub flanksource 0.0.47

1 of the 2 container images this version deploys carry CVE-2026-0861.

Container imageDigestPackageFixed in
flanksource/apm-hub:v0.0.471dacc3195bf9
glibc@2.35-0ubuntu3.1
2.35-0ubuntu3.13

Open the chart page →

6,150
batchrunnerflanksourceVerified publisher1.0.441 of 1See more

batchrunner flanksource 1.0.44

1 of the 1 container images this version deploys carry CVE-2026-0861.

Container imageDigestPackageFixed in
flanksource/batch-runner:v1.0.44689687a7cf95
glibc@2.39-0ubuntu8.5
2.39-0ubuntu8.7

Open the chart page →

5,355
canary-checkerflanksourceVerified publisher1.2.01 of 2See more

canary-checker flanksource 1.2.0

1 of the 2 container images this version deploys carry CVE-2026-0861.

Container imageDigestPackageFixed in
flanksource/canary-checker-ui:v1.4.281764c84e550db
glibc@2.36-9+deb12u10
2.36-9+deb12u14

Open the chart page →

4,672
flanksource-uiflanksourceVerified publisher1.4.3181 of 1See more

flanksource-ui flanksource 1.4.318

1 of the 1 container images this version deploys carry CVE-2026-0861.

Container imageDigestPackageFixed in
flanksource/incident-manager-ui:v1.4.318891f21df54fb
glibc@2.36-9+deb12u10
2.36-9+deb12u14

Open the chart page →

2,580
mission-controlflanksourceVerified publisher0.1.3362 of 8See more

mission-control flanksource 0.1.336

2 of the 8 container images this version deploys carry CVE-2026-0861.

Container imageDigestPackageFixed in
ghcr.io/flanksource/postgres:17.6-497383cebcf66281fc1
glibc@2.36-9+deb12u13
2.36-9+deb12u14
public.ecr.aws/flanksource/incident-manager-ui:v1.4.317fea799d4fb2f
glibc@2.36-9+deb12u10
2.36-9+deb12u14

Open the chart page →

8,959
mission-control-ai-assistantflanksourceVerified publisher1.0.121 of 1See more

mission-control-ai-assistant flanksource 1.0.12

1 of the 1 container images this version deploys carry CVE-2026-0861.

Container imageDigestPackageFixed in
ghcr.io/flanksource/mission-control-ai-assistant:1.0.1229a635cbeeb5
glibc@2.36-9+deb12u13
2.36-9+deb12u14

Open the chart page →

1,315
flask-contactsflask-contacts-generic1.0.11 of 3See more

flask-contacts flask-contacts-generic 1.0.1

1 of the 3 container images this version deploys carry CVE-2026-0861.

Container imageDigestPackageFixed in
shashkist/flask-contacts-app:latest581de1fd6084
glibc@2.36-9+deb12u9
2.36-9+deb12u14

Open the chart page →

5,789
flask-appflask-mysqlVerified publisher1.0.11 of 2See more

flask-app flask-mysql 1.0.1

1 of the 2 container images this version deploys carry CVE-2026-0861.

Container imageDigestPackageFixed in
jjorozco20/flask-mysql-app:1.0.0b5e44e3ba09c
glibc@2.36-9+deb12u9
2.36-9+deb12u14

Open the chart page →

4,089
flinkflink0.5.11 of 1See more

flink flink 0.5.1

1 of the 1 container images this version deploys carry CVE-2026-0861.

Container imageDigestPackageFixed in
library/flink:1.14.6-scala_2.122461f02672b3
glibc@2.35-0ubuntu3.1
2.35-0ubuntu3.13

Open the chart page →

5,693
dump1090fnzv0.2.81 of 1See more

dump1090 fnzv 0.2.8

1 of the 1 container images this version deploys carry CVE-2026-0861.

Container imageDigestPackageFixed in
fnzv/dump1090:latestb3079b95c336
glibc@2.35-0ubuntu3.5
2.35-0ubuntu3.13

Open the chart page →

4,126
ledgerformance1.2.01 of 1See more

ledger formance 1.2.0

1 of the 1 container images this version deploys carry CVE-2026-0861.

Container imageDigestPackageFixed in
ghcr.io/formancehq/ledger:v1.9.203c1ddbda33b
glibc@2.35-0ubuntu3.1
2.35-0ubuntu3.13

Open the chart page →

4,650
passboltg0dscookie0.5.21 of 2See more

passbolt g0dscookie 0.5.2

1 of the 2 container images this version deploys carry CVE-2026-0861.

Container imageDigestPackageFixed in
library/mariadb:10.79a48ac9f196f
glibc@2.31-0ubuntu9.9
2.31-0ubuntu9.18+esm1

Open the chart page →

7,986
scanservjsgabe565Verified publisher0.9.21 of 1See more

scanservjs gabe565 0.9.2

1 of the 1 container images this version deploys carry CVE-2026-0861.

Container imageDigestPackageFixed in
sbs20/scanservjs:release-v3.0.3dad1fd6e9a98
glibc@2.36-9+deb12u3
2.36-9+deb12u14

Open the chart page →

13,250
guacamolegabibbo970.3.01 of 3See more

guacamole gabibbo97 0.3.0

1 of the 3 container images this version deploys carry CVE-2026-0861.

Container imageDigestPackageFixed in
library/postgres:134689940c6838
glibc@2.41-12
2.41-12+deb13u2

Open the chart page →

6,437
wekan-oldgabisonfire0.1.21 of 1See more

wekan-old gabisonfire 0.1.2

1 of the 1 container images this version deploys carry CVE-2026-0861.

Container imageDigestPackageFixed in
wekanteam/wekan:v4.2268a51f0327df
glibc@2.31-0ubuntu9
2.31-0ubuntu9.18+esm1

Open the chart page →

5,982
accumulogaffer2.2.12 of 4See more

accumulo gaffer 2.2.1

2 of the 4 container images this version deploys carry CVE-2026-0861.

Container imageDigestPackageFixed in
gchq/accumulo:2.0.1c460bb587d6d
glibc@2.39-0ubuntu8.1
2.39-0ubuntu8.7
gchq/hdfs:3.3.35ec58edbb2db
glibc@2.39-0ubuntu8.1
2.39-0ubuntu8.7

Open the chart page →

16,984
gaffer-road-trafficgaffer2.2.11 of 8See more

gaffer-road-traffic gaffer 2.2.1

1 of the 8 container images this version deploys carry CVE-2026-0861.

Container imageDigestPackageFixed in
gchq/hdfs:3.3.35ec58edbb2db
glibc@2.39-0ubuntu8.1
2.39-0ubuntu8.7

Open the chart page →

9,389
garge-appgargeVerified publisher0.1.471 of 1See more

garge-app garge 0.1.47

1 of the 1 container images this version deploys carry CVE-2026-0861.

Container imageDigestPackageFixed in
sondresjo/garge-app:v1.20.70382ebf9dfc8
glibc@2.36-9+deb12u10
2.36-9+deb12u14

Open the chart page →

1,855
pagesgary-pages1.0.01 of 3See more

pages gary-pages 1.0.0

1 of the 3 container images this version deploys carry CVE-2026-0861.

Container imageDigestPackageFixed in
dellcloud/pages:monitor6ba7b22caacd
glibc@2.31-0ubuntu9.1
2.31-0ubuntu9.18+esm1

Open the chart page →

20,242
airsonicgeek-cookbookVerified publisher6.4.21 of 1See more

airsonic geek-cookbook 6.4.2

1 of the 1 container images this version deploys carry CVE-2026-0861.

Container imageDigestPackageFixed in
airsonicadvanced/airsonic-advanced:latestf7cbafac2806
glibc@2.31-0ubuntu9.2
2.31-0ubuntu9.18+esm1

Open the chart page →

18,203
apache-musicindexgeek-cookbookVerified publisher2.4.21 of 1See more

apache-musicindex geek-cookbook 2.4.2

1 of the 1 container images this version deploys carry CVE-2026-0861.

Container imageDigestPackageFixed in
ghcr.io/k8s-at-home/apache-musicindex:v1.4.1-2c9bd82dc5fda
glibc@2.31-0ubuntu9.9
2.31-0ubuntu9.18+esm1

Open the chart page →

14,705
calibre-webgeek-cookbookVerified publisher8.4.21 of 1See more

calibre-web geek-cookbook 8.4.2

1 of the 1 container images this version deploys carry CVE-2026-0861.

Container imageDigestPackageFixed in
linuxserver/calibre-web:version-0.6.12938810eca3d3
glibc@2.31-0ubuntu9.2
2.31-0ubuntu9.18+esm1

Open the chart page →

16,176
double-takegeek-cookbookVerified publisher2.3.21 of 1See more

double-take geek-cookbook 2.3.2

1 of the 1 container images this version deploys carry CVE-2026-0861.

Container imageDigestPackageFixed in
jakowenko/double-take:1.6.0b858bac9e32a
glibc@2.31-0ubuntu9.2
2.31-0ubuntu9.18+esm1

Open the chart page →

12,290
embygeek-cookbookVerified publisher3.4.21 of 1See more

emby geek-cookbook 3.4.2

1 of the 1 container images this version deploys carry CVE-2026-0861.

Container imageDigestPackageFixed in
ghcr.io/k8s-at-home/emby:v4.6.1.05c6b8f91f1c4
glibc@2.31-0ubuntu9.2
2.31-0ubuntu9.18+esm1

Open the chart page →

8,587
gapsgeek-cookbookVerified publisher5.4.21 of 1See more

gaps geek-cookbook 5.4.2

1 of the 1 container images this version deploys carry CVE-2026-0861.

Container imageDigestPackageFixed in
housewrecker/gaps:latestf417dd0a7547
glibc@2.31-0ubuntu9.7
2.31-0ubuntu9.18+esm1

Open the chart page →

8,988
haste-servergeek-cookbookVerified publisher3.4.21 of 1See more

haste-server geek-cookbook 3.4.2

1 of the 1 container images this version deploys carry CVE-2026-0861.

Container imageDigestPackageFixed in
ghcr.io/k8s-at-home/haste-server:latest827aa2f2389d
glibc@2.31-0ubuntu9.2
2.31-0ubuntu9.18+esm1

Open the chart page →

11,038
jackettgeek-cookbookVerified publisher11.7.21 of 1See more

jackett geek-cookbook 11.7.2

1 of the 1 container images this version deploys carry CVE-2026-0861.

Container imageDigestPackageFixed in
ghcr.io/k8s-at-home/jackett:v0.20.13163a4715b46aa2
glibc@2.31-0ubuntu9.9
2.31-0ubuntu9.18+esm1

Open the chart page →

9,740
lidarrgeek-cookbookVerified publisher14.2.21 of 1See more

lidarr geek-cookbook 14.2.2

1 of the 1 container images this version deploys carry CVE-2026-0861.

Container imageDigestPackageFixed in
ghcr.io/k8s-at-home/lidarr:v1.0.0.225554ebc1f90963
glibc@2.31-0ubuntu9.2
2.31-0ubuntu9.18+esm1

Open the chart page →

14,338
mopidygeek-cookbookVerified publisher0.1.21 of 1See more

mopidy geek-cookbook 0.1.2

1 of the 1 container images this version deploys carry CVE-2026-0861.

Container imageDigestPackageFixed in
jaedb/iris:latest048cfbf58d57
glibc@2.36-9+deb12u10
2.36-9+deb12u14

Open the chart page →

13,077
nzbgetgeek-cookbookVerified publisher12.4.21 of 1See more

nzbget geek-cookbook 12.4.2

1 of the 1 container images this version deploys carry CVE-2026-0861.

Container imageDigestPackageFixed in
ghcr.io/k8s-at-home/nzbget:v21.1e5571acd10ce
glibc@2.35-0ubuntu3.1
2.35-0ubuntu3.13

Open the chart page →

12,128
nzbhydra2geek-cookbookVerified publisher10.4.21 of 1See more

nzbhydra2 geek-cookbook 10.4.2

1 of the 1 container images this version deploys carry CVE-2026-0861.

Container imageDigestPackageFixed in
ghcr.io/k8s-at-home/nzbhydra2:v3.14.2ef3670f7e0a8
glibc@2.31-0ubuntu9.2
2.31-0ubuntu9.18+esm1

Open the chart page →

17,755
openkmgeek-cookbookVerified publisher4.2.01 of 1See more

openkm geek-cookbook 4.2.0

1 of the 1 container images this version deploys carry CVE-2026-0861.

Container imageDigestPackageFixed in
openkm/openkm-ce:6.3.113bc465a7461b
glibc@2.31-0ubuntu9.9
2.31-0ubuntu9.18+esm1

Open the chart page →

28,028
photoprismgeek-cookbookVerified publisher7.2.01 of 1See more

photoprism geek-cookbook 7.2.0

1 of the 1 container images this version deploys carry CVE-2026-0861.

Container imageDigestPackageFixed in
photoprism/photoprism:220629-jammy2954334adbda
glibc@2.35-0ubuntu3
2.35-0ubuntu3.13

Open the chart page →

19,544
puppeteergeek-cookbookVerified publisher1.2.21 of 1See more

puppeteer geek-cookbook 1.2.2

1 of the 1 container images this version deploys carry CVE-2026-0861.

Container imageDigestPackageFixed in
ghcr.io/jr0dd/puppeteer:v13.3.26047599cd78e
glibc@2.31-0ubuntu9.2
2.31-0ubuntu9.18+esm1

Open the chart page →

15,779
qbittorrentgeek-cookbookVerified publisher13.5.21 of 1See more

qbittorrent geek-cookbook 13.5.2

1 of the 1 container images this version deploys carry CVE-2026-0861.

Container imageDigestPackageFixed in
ghcr.io/k8s-at-home/qbittorrent:v4.4.261deadd1ec78
glibc@2.31-0ubuntu9.7
2.31-0ubuntu9.18+esm1

Open the chart page →

11,851
radarrgeek-cookbookVerified publisher16.3.21 of 1See more

radarr geek-cookbook 16.3.2

1 of the 1 container images this version deploys carry CVE-2026-0861.

Container imageDigestPackageFixed in
ghcr.io/k8s-at-home/radarr:v4.1.0.61754273dfaf0295
glibc@2.35-0ubuntu3.1
2.35-0ubuntu3.13

Open the chart page →

10,422
readarrgeek-cookbookVerified publisher6.4.21 of 1See more

readarr geek-cookbook 6.4.2

1 of the 1 container images this version deploys carry CVE-2026-0861.

Container imageDigestPackageFixed in
ghcr.io/k8s-at-home/readarr:v0.1.0.715ad943e9309e4
glibc@2.31-0ubuntu9.2
2.31-0ubuntu9.18+esm1

Open the chart page →

7,810
satisfactorygeek-cookbookVerified publisher1.2.21 of 1See more

satisfactory geek-cookbook 1.2.2

1 of the 1 container images this version deploys carry CVE-2026-0861.

Container imageDigestPackageFixed in
wolveix/satisfactory-server:lateste103700ae6ae
glibc@2.35-0ubuntu3.10
2.35-0ubuntu3.13

Open the chart page →

3,469
sdtdgeek-cookbookVerified publisher0.3.21 of 1See more

sdtd geek-cookbook 0.3.2

1 of the 1 container images this version deploys carry CVE-2026-0861.

Container imageDigestPackageFixed in
ghcr.io/reitermarkus/7d2d:main39953b387b61
glibc@2.41-12+deb13u1
2.41-12+deb13u2

Open the chart page →

2,533
seafilegeek-cookbookVerified publisher3.2.01 of 1See more

seafile geek-cookbook 3.2.0

1 of the 1 container images this version deploys carry CVE-2026-0861.

Container imageDigestPackageFixed in
seafileltd/seafile-mc:8.0.7ed0fcda5e6a9
glibc@2.31-0ubuntu9.2
2.31-0ubuntu9.18+esm1

Open the chart page →

24,366
skypilotgeek-cookbookVerified publisher0.0.11 of 3See more

skypilot geek-cookbook 0.0.1

1 of the 3 container images this version deploys carry CVE-2026-0861.

Container imageDigestPackageFixed in
berkeleyskypilot/skypilot-nightly:latest8da2f3cda472
glibc@2.41-12
2.41-12+deb13u2

Open the chart page →

8,992
transmissiongeek-cookbookVerified publisher8.4.31 of 1See more

transmission geek-cookbook 8.4.3

1 of the 1 container images this version deploys carry CVE-2026-0861.

Container imageDigestPackageFixed in
ghcr.io/k8s-at-home/transmission:v3.006011182e3946
glibc@2.31-0ubuntu9.9
2.31-0ubuntu9.18+esm1

Open the chart page →

11,906
xtevegeek-cookbookVerified publisher8.4.21 of 1See more

xteve geek-cookbook 8.4.2

1 of the 1 container images this version deploys carry CVE-2026-0861.

Container imageDigestPackageFixed in
ghcr.io/k8s-at-home/xteve:v2.2.0.200292b3614670f
glibc@2.31-0ubuntu9.7
2.31-0ubuntu9.18+esm1

Open the chart page →

17,996
chproxygeneral-helm-chartsVerified publisher0.0.21 of 1See more

chproxy general-helm-charts 0.0.2

1 of the 1 container images this version deploys carry CVE-2026-0861.

Container imageDigestPackageFixed in
contentsquareplatform/chproxy:v1.26.524555f22d4be
glibc@2.36-9+deb12u8
2.36-9+deb12u14

Open the chart page →

3,735
mongogengxiankun-charts0.1.01 of 1See more

mongo gengxiankun-charts 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-0861.

Container imageDigestPackageFixed in
library/mongo:5.041108d183e97
glibc@2.31-0ubuntu9.17
2.31-0ubuntu9.18+esm1

Open the chart page →

4,010

Container images carrying it

1,504 by charts deploying them

A fixed version is listed for 3 of the 3 affected packages.

Container imageDigestPackageFixed inUsed by
registry.k8s.io/node-problem-detector/node-problem-detector:v0.8.2052f0618e9bc2
glibc@2.36-9+deb12u8
2.36-9+deb12u14
1
registry.k8s.io/node-problem-detector/node-problem-detector:v1.35.1c380751accc5
glibc@2.36-9+deb12u13
2.36-9+deb12u14
1
registry.k8s.io/sig-storage/local-volume-provisioner:v2.8.03e2bf2eaef9f
glibc@2.36-9+deb12u10
2.36-9+deb12u14
1
registry.k8s.io/sig-storage/nfsplugin:v4.11.0ce5b5ccd5eb0
glibc@2.36-9+deb12u10
2.36-9+deb12u14
1

syft 1.42.1 · advisories as of 16 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.