StackRadar

CVE-2026-0915

High

Advisory

Published 15 Jan 2026In the index since 5 Sept 2026
Severity
High
worst across findings
CVSS
7.5
base score, highest
EPSS
0.006
48th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
1,572
of 17,792 indexed, latest versions
Container images
1,703
deployed by those charts
Fix available
3 of 4
affected packages

CVE-2026-0915 affecting package glibc for versions less than 2.38-18

Carried by container images the latest versions of 1,572 of 17,792 indexed charts deploy, on 1,703 images.

Affected packageAffected versionsFixed inImages
glibcdeb2.23-0ubuntu5, 2.23-0ubuntu7, 2.23-0ubuntu9, 2.23-0ubuntu10+49 more2.23-0ubuntu11.3+esm9, 2.27-3ubuntu1.6+esm6, 2.31-0ubuntu9.18+esm1, 2.35-0ubuntu3.13+4 more1,676
glibcapk2.37-r6, 2.38-r6, 2.39-r7, 2.40-r1+6 more2.42-r619
eglibcdeb2.19-0ubuntu6.3, 2.19-0ubuntu6.6, 2.19-0ubuntu6.13, 2.19-0ubuntu6.14+1 moreno fix listed7
glibcrpm2.38-16.azl32.38-181
OSV records
CGA-9f7x-88h6-rvv4DEBIAN-CVE-2026-0915UBUNTU-CVE-2026-0915AZL-74633
Also known as
CGA-rm33-3ph7-88mp, USN-8005-1

Charts affected

1,572 by stars
ChartLatestAffected imagesRadar Score
video-analytics-demogpu-operator0.1.91 of 3See more

video-analytics-demo gpu-operator 0.1.9

1 of the 3 container images this version deploys carry CVE-2026-0915.

Container imageDigestPackageFixed in
anguda/ant-media:2.5c435285fc241
glibc@2.31-0ubuntu9.9
2.31-0ubuntu9.18+esm1

Open the chart page →

15,820
grafana-samplinggrafana1.1.71 of 2See more

grafana-sampling grafana 1.1.7

1 of the 2 container images this version deploys carry CVE-2026-0915.

Container imageDigestPackageFixed in
grafana/alloy:v1.11.38c7256f412fe
glibc@2.39-0ubuntu8.6
2.39-0ubuntu8.7

Open the chart page →

3,381
grapple-installergrapple-installer0.3.221 of 1See more

grapple-installer grapple-installer 0.3.22

1 of the 1 container images this version deploys carry CVE-2026-0915.

Container imageDigestPackageFixed in
grpl/grapple-cli:0.2.127c00aafee6629
glibc@2.39-0ubuntu8.2
2.39-0ubuntu8.7

Open the chart page →

8,012
gravitino-iceberg-rest-server-helmgravitino-iceberg-rest-server1.3.111 of 1See more

gravitino-iceberg-rest-server-helm gravitino-iceberg-rest-server 1.3.11

1 of the 1 container images this version deploys carry CVE-2026-0915.

Container imageDigestPackageFixed in
apache/gravitino-iceberg-rest:1.3.080136ae753ee
glibc@2.35-0ubuntu3.11
2.35-0ubuntu3.13

Open the chart page →

4,687
grayloggraylogVerified publisher1.0.21 of 4See more

graylog graylog 1.0.2

1 of the 4 container images this version deploys carry CVE-2026-0915.

Container imageDigestPackageFixed in
graylog/graylog:6.1.1019de1aff48c2
glibc@2.35-0ubuntu3.9
2.35-0ubuntu3.13

Open the chart page →

5,366
gridgain9gridgainVerified publisher1.1.101 of 2See more

gridgain9 gridgain 1.1.10

1 of the 2 container images this version deploys carry CVE-2026-0915.

Container imageDigestPackageFixed in
library/debian:12.12-slimd5d3f9c23164
glibc@2.36-9+deb12u13
2.36-9+deb12u14

Open the chart page →

3,229
routergroundcover1.12.3701 of 7See more

router groundcover 1.12.370

1 of the 7 container images this version deploys carry CVE-2026-0915.

Container imageDigestPackageFixed in
public.ecr.aws/groundcovercom/grafana-groundcover:v0.0.54-grafana11.3.7ee9d973e3952
glibc@2.35-0ubuntu3.9
2.35-0ubuntu3.13

Open the chart page →

5,531
librechat-exporterhajowielandVerified publisher1.0.01 of 1See more

librechat-exporter hajowieland 1.0.0

1 of the 1 container images this version deploys carry CVE-2026-0915.

Container imageDigestPackageFixed in
ghcr.io/virtuos/librechat_exporter:2.0.050ea1cf0086f
glibc@2.36-9+deb12u10
2.36-9+deb12u14

Open the chart page →

2,308
hatchet-hahatchetOfficialVerified publisher0.19.02 of 8See more

hatchet-ha hatchet 0.19.0

2 of the 8 container images this version deploys carry CVE-2026-0915.

Container imageDigestPackageFixed in
bitnamilegacy/postgresql:17.6.0-debian-12-r4926356130b77
glibc@2.36-9+deb12u10
2.36-9+deb12u14
bitnamilegacy/rabbitmq:4.1.3-debian-12-r19e635efba431
glibc@2.36-9+deb12u10
2.36-9+deb12u14

Open the chart page →

7,447
hatchet-stackhatchetOfficialVerified publisher0.19.02 of 8See more

hatchet-stack hatchet 0.19.0

2 of the 8 container images this version deploys carry CVE-2026-0915.

Container imageDigestPackageFixed in
bitnamilegacy/postgresql:17.6.0-debian-12-r4926356130b77
glibc@2.36-9+deb12u10
2.36-9+deb12u14
bitnamilegacy/rabbitmq:4.1.3-debian-12-r19e635efba431
glibc@2.36-9+deb12u10
2.36-9+deb12u14

Open the chart page →

7,447
hawk-envoy-pluginhawk0.1.01 of 4See more

hawk-envoy-plugin hawk 0.1.0

1 of the 4 container images this version deploys carry CVE-2026-0915.

Container imageDigestPackageFixed in
kong/httpbin:latesta6ac46531193
glibc@2.35-0ubuntu3.8
2.35-0ubuntu3.13

Open the chart page →

9,233
hdx-oss-v2hdx-oss-v20.8.41 of 5See more

hdx-oss-v2 hdx-oss-v2 0.8.4

1 of the 5 container images this version deploys carry CVE-2026-0915.

Container imageDigestPackageFixed in
library/mongo:5.0.14-focal50cae5081ab4
glibc@2.31-0ubuntu9.9
2.31-0ubuntu9.18+esm1

Open the chart page →

6,758
heliconehelicone0.1.423 of 14See more

helicone helicone 0.1.42

3 of the 14 container images this version deploys carry CVE-2026-0915.

Container imageDigestPackageFixed in
clickhouse/clickhouse-server:23.4.2.11dc5658853ce1
glibc@2.35-0ubuntu3.1
2.35-0ubuntu3.13
helicone/clickhouse-migration-runner:v2025.03.05-14c69b971a7e4
glibc@2.31-0ubuntu9.16
2.31-0ubuntu9.18+esm1
helicone/supabase-migration-runner:v2025.03.05-14a913936c97b
glibc@2.36-9+deb12u1
2.36-9+deb12u14

Open the chart page →

25,250
helixhelix1.4.31 of 2See more

helix helix 1.4.3

1 of the 2 container images this version deploys carry CVE-2026-0915.

Container imageDigestPackageFixed in
quay.io/jupyterhub/k8s-hub:4.3.492f883d09270
glibc@2.36-9+deb12u13
2.36-9+deb12u14

Open the chart page →

5,696
hello-worldhello-world-pponyVerified publisher0.3.01 of 1See more

hello-world hello-world-ppony 0.3.0

1 of the 1 container images this version deploys carry CVE-2026-0915.

Container imageDigestPackageFixed in
library/nginx:1.25.49ff236ed47fe
glibc@2.36-9+deb12u4
2.36-9+deb12u14

Open the chart page →

5,880
7dtdhelm-7dtd0.1.01 of 1See more

7dtd helm-7dtd 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-0915.

Container imageDigestPackageFixed in
vinanrra/7dtd-server:v0.4.4f9534490bd2b
glibc@2.27-3ubuntu1.6
2.27-3ubuntu1.6+esm6

Open the chart page →

10,730
pageshelm-chart-repos-camden1.0.02 of 3See more

pages helm-chart-repos-camden 1.0.0

2 of the 3 container images this version deploys carry CVE-2026-0915.

Container imageDigestPackageFixed in
dellcloud/pages:monitor6ba7b22caacd
glibc@2.31-0ubuntu9.1
2.31-0ubuntu9.18+esm1
flyway/flyway:6.4.422d97ceb0c47
glibc@2.27-3ubuntu1
2.27-3ubuntu1.6+esm6

Open the chart page →

20,262
esphomehelm-chart-roeiVerified publisher2025.3.01 of 1See more

esphome helm-chart-roei 2025.3.0

1 of the 1 container images this version deploys carry CVE-2026-0915.

Container imageDigestPackageFixed in
esphome/esphome:2025.3.0def8b6e4f517
glibc@2.36-9+deb12u3
2.36-9+deb12u14

Open the chart page →

6,018
home-assistant-matter-hubhelm-chart-roeiVerified publisher3.0.21 of 1See more

home-assistant-matter-hub helm-chart-roei 3.0.2

1 of the 1 container images this version deploys carry CVE-2026-0915.

Container imageDigestPackageFixed in
luligu/matterbridge:3.0.28f97884bebc2
glibc@2.36-9+deb12u10
2.36-9+deb12u14

Open the chart page →

3,835
iofoghelm-chartsVerified publisher0.1.11 of 3See more

iofog helm-charts 0.1.1

1 of the 3 container images this version deploys carry CVE-2026-0915.

Container imageDigestPackageFixed in
iofog/router:2.0.17260cf861479
glibc@2.27-3ubuntu1.2
2.27-3ubuntu1.6+esm6

Open the chart page →

24,205
nginx-charthelm-chart-sample-app0.1.01 of 1See more

nginx-chart helm-chart-sample-app 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-0915.

Container imageDigestPackageFixed in
rraahul/test:latestbfe2c1183bc0
glibc@2.35-0ubuntu3.1
2.35-0ubuntu3.13

Open the chart page →

4,609
twampyhelm-charts-darox0.0.21 of 1See more

twampy helm-charts-darox 0.0.2

1 of the 1 container images this version deploys carry CVE-2026-0915.

Container imageDigestPackageFixed in
dariomader/twampy:v0.0.2d2f4a8c5e690
glibc@2.38-r6
2.42-r6

Open the chart page →

2,069
kube-downscalerhelm-charts-nr0.7.61 of 1See more

kube-downscaler helm-charts-nr 0.7.6

1 of the 1 container images this version deploys carry CVE-2026-0915.

Container imageDigestPackageFixed in
hjacobs/kube-downscaler:23.2.0-6-gc9b88e84b2147f47425
glibc@2.36-9
2.36-9+deb12u14

Open the chart page →

4,319
locusthelm-charts-nr0.32.41 of 1See more

locust helm-charts-nr 0.32.4

1 of the 1 container images this version deploys carry CVE-2026-0915.

Container imageDigestPackageFixed in
locustio/locust:2.32.2a0d4b88e42c1
glibc@2.36-9+deb12u8
2.36-9+deb12u14

Open the chart page →

2,824
node-local-dnshelm-charts-nr2.1.41 of 1See more

node-local-dns helm-charts-nr 2.1.4

1 of the 1 container images this version deploys carry CVE-2026-0915.

Container imageDigestPackageFixed in
registry.k8s.io/dns/k8s-dns-node-cache:1.23.1e3dccb1a21d1
glibc@2.36-9+deb12u7
2.36-9+deb12u14

Open the chart page →

2,255
node-problem-detectorhelm-charts-nr2.3.171 of 1See more

node-problem-detector helm-charts-nr 2.3.17

1 of the 1 container images this version deploys carry CVE-2026-0915.

Container imageDigestPackageFixed in
registry.k8s.io/node-problem-detector/node-problem-detector:v0.8.2052f0618e9bc2
glibc@2.36-9+deb12u8
2.36-9+deb12u14

Open the chart page →

2,470
chart-bookhelm-deploy-book0.1.01 of 3See more

chart-book helm-deploy-book 0.1.0

1 of the 3 container images this version deploys carry CVE-2026-0915.

Container imageDigestPackageFixed in
dannielkil/book-frontend:latest937993927694
glibc@2.36-9+deb12u8
2.36-9+deb12u14

Open the chart page →

9,165
castopodhelmforgeVerified publisher1.2.71 of 3See more

castopod helmforge 1.2.7

1 of the 3 container images this version deploys carry CVE-2026-0915.

Container imageDigestPackageFixed in
castopod/castopod:1.15.54e4f0440520f
glibc@2.41-12+deb13u1
2.41-12+deb13u2

Open the chart page →

9,524
countlyhelmforgeVerified publisher1.2.61 of 3See more

countly helmforge 1.2.6

1 of the 3 container images this version deploys carry CVE-2026-0915.

Container imageDigestPackageFixed in
countly/countly-server:25.05.4e3c238248f99
glibc@2.31-0ubuntu9.7
2.31-0ubuntu9.18+esm1

Open the chart page →

18,967
discount-bandithelmforgeVerified publisher2.0.81 of 3See more

discount-bandit helmforge 2.0.8

1 of the 3 container images this version deploys carry CVE-2026-0915.

Container imageDigestPackageFixed in
cybrarist/discount-bandit:v4.0.4e9e2447ac666
glibc@2.41-12
2.41-12+deb13u2

Open the chart page →

30,281
druidhelmforgeVerified publisher1.3.61 of 4See more

druid helmforge 1.3.6

1 of the 4 container images this version deploys carry CVE-2026-0915.

Container imageDigestPackageFixed in
apache/druid:37.0.00116fb802786
glibc@2.36-9+deb12u13
2.36-9+deb12u14

Open the chart page →

8,660
immichhelmforgeVerified publisher1.2.81 of 5See more

immich helmforge 1.2.8

1 of the 5 container images this version deploys carry CVE-2026-0915.

Container imageDigestPackageFixed in
ghcr.io/immich-app/postgres:14-vectorchord0.4.3-pgvectors0.2.0bcf63357191b
glibc@2.36-9+deb12u10
2.36-9+deb12u14

Open the chart page →

11,180
jupyterhubhelmforgeVerified publisher1.0.61 of 3See more

jupyterhub helmforge 1.0.6

1 of the 3 container images this version deploys carry CVE-2026-0915.

Container imageDigestPackageFixed in
quay.io/jupyterhub/k8s-hub:4.3.5113e372cf71b
glibc@2.36-9+deb12u13
2.36-9+deb12u14

Open the chart page →

5,471
middlewarehelmforgeVerified publisher1.2.61 of 4See more

middleware helmforge 1.2.6

1 of the 4 container images this version deploys carry CVE-2026-0915.

Container imageDigestPackageFixed in
middlewareeng/middleware:0.3.1747d880812f1
glibc@2.36-9+deb12u10
2.36-9+deb12u14

Open the chart page →

9,801
phpmyadminhelmforgeVerified publisher2.0.11 of 1See more

phpmyadmin helmforge 2.0.1

1 of the 1 container images this version deploys carry CVE-2026-0915.

Container imageDigestPackageFixed in
phpmyadmin/phpmyadmin:5.2.342a200db07b4
glibc@2.41-12
2.41-12+deb13u2

Open the chart page →

4,848
text-embeddings-inferencehelmforgeVerified publisher1.0.01 of 2See more

text-embeddings-inference helmforge 1.0.0

1 of the 2 container images this version deploys carry CVE-2026-0915.

Container imageDigestPackageFixed in
ghcr.io/huggingface/text-embeddings-inference:cpu-1.9.3ad950d30878e
glibc@2.36-9+deb12u13
2.36-9+deb12u14

Open the chart page →

2,579
myapphelmingapp0.1.01 of 1See more

myapp helmingapp 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-0915.

Container imageDigestPackageFixed in
muhammedgamal/fp23:latest74b4cd69b6fa
glibc@2.36-9+deb12u7
2.36-9+deb12u14

Open the chart page →

12,694
openaevhelm-openbasVerified publisher2.0.52 of 7See more

openaev helm-openbas 2.0.5

2 of the 7 container images this version deploys carry CVE-2026-0915.

Container imageDigestPackageFixed in
bitnamilegacy/postgresql:17.6.0-debian-12-r4926356130b77
glibc@2.36-9+deb12u10
2.36-9+deb12u14
bitnamilegacy/rabbitmq:4.1.2-debian-12-r1fac502149c40
glibc@2.36-9+deb12u10
2.36-9+deb12u14

Open the chart page →

7,564
openbashelm-openbasVerified publisher1.8.144 of 7See more

openbas helm-openbas 1.8.14

4 of the 7 container images this version deploys carry CVE-2026-0915.

Container imageDigestPackageFixed in
bitnamilegacy/postgresql:17.6.0-debian-12-r4926356130b77
glibc@2.36-9+deb12u10
2.36-9+deb12u14
bitnamilegacy/rabbitmq:4.1.2-debian-12-r1fac502149c40
glibc@2.36-9+deb12u10
2.36-9+deb12u14
openbas/caldera-server:5.1.0a277796d9724
glibc@2.36-9+deb12u9
2.36-9+deb12u14
openbas/platform:2.0.5d986d80b0a75
glibc@2.39-0ubuntu8.6
2.39-0ubuntu8.7

Open the chart page →

25,217
pageshelm-repo1.0.02 of 3See more

pages helm-repo 1.0.0

2 of the 3 container images this version deploys carry CVE-2026-0915.

Container imageDigestPackageFixed in
dellcloud/pages:monitor6ba7b22caacd
glibc@2.31-0ubuntu9.1
2.31-0ubuntu9.18+esm1
flyway/flyway:6.4.422d97ceb0c47
glibc@2.27-3ubuntu1
2.27-3ubuntu1.6+esm6

Open the chart page →

20,262
steampipehelm-steampipeVerified publisher2.4.11 of 1See more

steampipe helm-steampipe 2.4.1

1 of the 1 container images this version deploys carry CVE-2026-0915.

Container imageDigestPackageFixed in
ghcr.io/devops-ia/steampipe:v2.4.1a982103d91d3
glibc@2.36-9+deb12u13
2.36-9+deb12u14

Open the chart page →

3,159
svacerhelm-svacer0.6.01 of 1See more

svacer helm-svacer 0.6.0

1 of the 1 container images this version deploys carry CVE-2026-0915.

Container imageDigestPackageFixed in
ispras/svacer:11-2-042aa9fa9f189
glibc@2.35-0ubuntu3.7
2.35-0ubuntu3.13

Open the chart page →

6,105
samplehelmapphelmtraining3.0.01 of 1See more

samplehelmapp helmtraining 3.0.0

1 of the 1 container images this version deploys carry CVE-2026-0915.

Container imageDigestPackageFixed in
praravind1801/helmimages:3.0.0f29d637b9ce1
glibc@2.36-9+deb12u4
2.36-9+deb12u14

Open the chart page →

6,013
nominatimheywood8-helm-chartsVerified publisher3.10.81 of 3See more

nominatim heywood8-helm-charts 3.10.8

1 of the 3 container images this version deploys carry CVE-2026-0915.

Container imageDigestPackageFixed in
mediagis/nominatim:4.2d0eae7b51374
glibc@2.35-0ubuntu3.6
2.35-0ubuntu3.13

Open the chart page →

14,421
printserverhmediadeVerified publisher1.0.22 of 4See more

printserver hmediade 1.0.2

2 of the 4 container images this version deploys carry CVE-2026-0915.

Container imageDigestPackageFixed in
hmediade/printserver:latest481a552c8e1c
glibc@2.35-0ubuntu3.6
2.35-0ubuntu3.13
hmediade/printserver-init:latest7f005eb6c718
glibc@2.35-0ubuntu3.6
2.35-0ubuntu3.13

Open the chart page →

11,002
home-ha-mockhome-ha-mockVerified publisher2.0.51 of 1See more

home-ha-mock home-ha-mock 2.0.5

1 of the 1 container images this version deploys carry CVE-2026-0915.

Container imageDigestPackageFixed in
ghcr.io/smarter-project/home-ha-mock:main95ee018cf558
glibc@2.36-9+deb12u10
2.36-9+deb12u14

Open the chart page →

3,069
paperlesshomelabcihelmchartstestVerified publisher9.1.91 of 1See more

paperless homelabcihelmchartstest 9.1.9

1 of the 1 container images this version deploys carry CVE-2026-0915.

Container imageDigestPackageFixed in
ghcr.io/paperless-ngx/paperless-ngx:2.0.1ab255bea133e
glibc@2.36-9+deb12u3
2.36-9+deb12u14

Open the chart page →

16,444
home-security-demohome-security-demoVerified publisher2.0.121 of 3See more

home-security-demo home-security-demo 2.0.12

1 of the 3 container images this version deploys carry CVE-2026-0915.

Container imageDigestPackageFixed in
ghcr.io/smarter-project/home-ha-mock:main95ee018cf558
glibc@2.36-9+deb12u10
2.36-9+deb12u14

Open the chart page →

3,152
httpbin2022httpbin2022Verified publisher0.1.11 of 1See more

httpbin2022 httpbin2022 0.1.1

1 of the 1 container images this version deploys carry CVE-2026-0915.

Container imageDigestPackageFixed in
mshanley80/httpbin2022:latest5b189a70c0fb
glibc@2.31-0ubuntu9.9
2.31-0ubuntu9.18+esm1

Open the chart page →

8,807
eoloplanthttpd-eoloplant0.1.04 of 7See more

eoloplant httpd-eoloplant 0.1.0

4 of the 7 container images this version deploys carry CVE-2026-0915.

Container imageDigestPackageFixed in
codeurjc/planner:v1.0800cf520c245
glibc@2.35-0ubuntu3.1
2.35-0ubuntu3.13
codeurjc/toposervice:v1.09fb4c11e6a49
glibc@2.27-3ubuntu1.6
2.27-3ubuntu1.6+esm6
library/mongo:5.0.6-focal8e70544b6c76
glibc@2.31-0ubuntu9.7
2.31-0ubuntu9.18+esm1
library/rabbitmq:3.9-management8a279e9396a8
glibc@2.35-0ubuntu3.6
2.35-0ubuntu3.13

Open the chart page →

32,456

Container images carrying it

1,703 by charts deploying them

A fixed version is listed for 3 of the 4 affected packages.

Container imageDigestPackageFixed inUsed by
registry.k8s.io/node-problem-detector/node-problem-detector:v1.35.1c380751accc5
glibc@2.36-9+deb12u13
2.36-9+deb12u14
1
registry.k8s.io/sig-storage/local-volume-provisioner:v2.8.03e2bf2eaef9f
glibc@2.36-9+deb12u10
2.36-9+deb12u14
1
registry.k8s.io/sig-storage/nfsplugin:v4.11.0ce5b5ccd5eb0
glibc@2.36-9+deb12u10
2.36-9+deb12u14
1

syft 1.42.1 · advisories as of 17 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.