StackRadar

CVE-2026-0915

High

Advisory

Published 15 Jan 2026In the index since 5 Sept 2026
Severity
High
worst across findings
CVSS
7.5
base score, highest
EPSS
0.006
48th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
1,570
of 17,803 indexed, latest versions
Container images
1,701
deployed by those charts
Fix available
3 of 4
affected packages

CVE-2026-0915 affecting package glibc for versions less than 2.38-18

Carried by container images the latest versions of 1,570 of 17,803 indexed charts deploy, on 1,701 images.

Affected packageAffected versionsFixed inImages
glibcdeb2.23-0ubuntu5, 2.23-0ubuntu7, 2.23-0ubuntu9, 2.23-0ubuntu10+49 more2.23-0ubuntu11.3+esm9, 2.27-3ubuntu1.6+esm6, 2.31-0ubuntu9.18+esm1, 2.35-0ubuntu3.13+4 more1,674
glibcapk2.37-r6, 2.38-r6, 2.39-r7, 2.40-r1+6 more2.42-r619
eglibcdeb2.19-0ubuntu6.3, 2.19-0ubuntu6.6, 2.19-0ubuntu6.13, 2.19-0ubuntu6.14+1 moreno fix listed7
glibcrpm2.38-16.azl32.38-181
OSV records
CGA-9f7x-88h6-rvv4DEBIAN-CVE-2026-0915UBUNTU-CVE-2026-0915AZL-74633
Also known as
CGA-rm33-3ph7-88mp, USN-8005-1

Charts affected

1,570 by stars
ChartLatestAffected imagesRadar Score
pagesroccohiggins-pages1.0.02 of 3See more

pages roccohiggins-pages 1.0.0

2 of the 3 container images this version deploys carry CVE-2026-0915.

Container imageDigestPackageFixed in
dellcloud/pages:monitor6ba7b22caacd
glibc@2.31-0ubuntu9.1
2.31-0ubuntu9.18+esm1
flyway/flyway:6.4.422d97ceb0c47
glibc@2.27-3ubuntu1
2.27-3ubuntu1.6+esm6

Open the chart page →

20,261
matrix-stackrock8sVerified publisher0.8.12 of 7See more

matrix-stack rock8s 0.8.1

2 of the 7 container images this version deploys carry CVE-2026-0915.

Container imageDigestPackageFixed in
matrixdotorg/synapse:v1.127.1c3c4a9de2a0b
glibc@2.36-9+deb12u10
2.36-9+deb12u14
ghcr.io/element-hq/matrix-authentication-service:0.14.0834ea54370f0
glibc@2.36-9+deb12u9
2.36-9+deb12u14

Open the chart page →

9,498
rocketchat-voiprocketchat-server0.1.01 of 1See more

rocketchat-voip rocketchat-server 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-0915.

Container imageDigestPackageFixed in
rocketchat/freeswitch:stablecfba5c20a5cc
glibc@2.36-9+deb12u10
2.36-9+deb12u14

Open the chart page →

5,785
ai-agentromholdings0.0.11 of 1See more

ai-agent romholdings 0.0.1

1 of the 1 container images this version deploys carry CVE-2026-0915.

Container imageDigestPackageFixed in
quay.io/devtron/ai-agent:0.0.16545dac92173
glibc@2.36-9+deb12u8
2.36-9+deb12u14

Open the chart page →

9,743
argocd-certificate-refreshromholdings0.10.81 of 1See more

argocd-certificate-refresh romholdings 0.10.8

1 of the 1 container images this version deploys carry CVE-2026-0915.

Container imageDigestPackageFixed in
quay.io/devtron/argocd-cert-refresh:v102b6db27eaf3d
glibc@2.35-0ubuntu3.1
2.35-0ubuntu3.13

Open the chart page →

13,159
calertromholdings0.0.11 of 1See more

calert romholdings 0.0.1

1 of the 1 container images this version deploys carry CVE-2026-0915.

Container imageDigestPackageFixed in
quay.io/devtron/google-chat-alert-manager:v2.0.239f2c6e0af38
glibc@2.31-0ubuntu9.7
2.31-0ubuntu9.18+esm1

Open the chart page →

4,704
devtron-enterpriseromholdings48.0.08 of 28See more

devtron-enterprise romholdings 48.0.0

8 of the 28 container images this version deploys carry CVE-2026-0915.

Container imageDigestPackageFixed in
quay.io/devtron/casbin:172ef62b-9450794d-464-394225bf041aacadd
glibc@2.39-0ubuntu8.3
2.39-0ubuntu8.7
quay.io/devtron/chart-sync:94237c18-1021-3941960566529446a
glibc@2.39-0ubuntu8.3
2.39-0ubuntu8.7
quay.io/devtron/devtron:9450794d-930-394159795f3f9f031
glibc@2.39-0ubuntu8.3
2.39-0ubuntu8.7
quay.io/devtron/devtron-utils:dup-chart-repo-v1.1.095d6f0e05636
glibc@2.36-9+deb12u3
2.36-9+deb12u14
quay.io/devtron/inception:7beef376-948-313784c3b91bebd3d
glibc@2.23-0ubuntu11.3
2.23-0ubuntu11.3+esm9
quay.io/devtron/kubelink:94237c18-314-394179d25865295af
glibc@2.39-0ubuntu8.3
2.39-0ubuntu8.7
quay.io/devtron/notifier:9804331c-372-39294709c7da19c5a
glibc@2.36-9+deb12u13
2.36-9+deb12u14
quay.io/devtron/postgres:14.91b594392f7cb
glibc@2.36-9+deb12u3
2.36-9+deb12u14

Open the chart page →

69,552
devtron-logs-dumpromholdings0.1.01 of 1See more

devtron-logs-dump romholdings 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-0915.

Container imageDigestPackageFixed in
quay.io/devtron/k8s-utils:807ca3c2-488-14005f296c2ec5db7
glibc@2.35-0ubuntu3.1
2.35-0ubuntu3.13

Open the chart page →

4,983
devtron-operatorromholdings0.23.35 of 11See more

devtron-operator romholdings 0.23.3

5 of the 11 container images this version deploys carry CVE-2026-0915.

Container imageDigestPackageFixed in
quay.io/devtron/chart-sync:3b3d6d0e-836-39296721b5c9634d4
glibc@2.39-0ubuntu8.3
2.39-0ubuntu8.7
quay.io/devtron/devtron-utils:dup-chart-repo-v1.1.095d6f0e05636
glibc@2.36-9+deb12u3
2.36-9+deb12u14
quay.io/devtron/hyperion:0874dcaf-280-3928701d5d8c4cecb
glibc@2.39-0ubuntu8.3
2.39-0ubuntu8.7
quay.io/devtron/kubelink:09867a9c-564-39289ea6dd1e4ce71
glibc@2.39-0ubuntu8.3
2.39-0ubuntu8.7
quay.io/devtron/postgres:14.91b594392f7cb
glibc@2.36-9+deb12u3
2.36-9+deb12u14

Open the chart page →

33,352
dgraphromholdings0.0.201 of 1See more

dgraph romholdings 0.0.20

1 of the 1 container images this version deploys carry CVE-2026-0915.

Container imageDigestPackageFixed in
dgraph/dgraph:v21.12.03b55ea83fffe
glibc@2.31-0ubuntu9.2
2.31-0ubuntu9.18+esm1

Open the chart page →

11,990
migration-incluster-cdromholdings0.10.01 of 1See more

migration-incluster-cd romholdings 0.10.0

1 of the 1 container images this version deploys carry CVE-2026-0915.

Container imageDigestPackageFixed in
library/postgres:122f2a8c2a7d10
glibc@2.36-9+deb12u9
2.36-9+deb12u14

Open the chart page →

3,947
pagesronan-pages1.0.02 of 3See more

pages ronan-pages 1.0.0

2 of the 3 container images this version deploys carry CVE-2026-0915.

Container imageDigestPackageFixed in
dellcloud/pages:monitor6ba7b22caacd
glibc@2.31-0ubuntu9.1
2.31-0ubuntu9.18+esm1
flyway/flyway:6.4.422d97ceb0c47
glibc@2.27-3ubuntu1
2.27-3ubuntu1.6+esm6

Open the chart page →

20,261
geopingrotationalVerified publisher1.3.21 of 1See more

geoping rotational 1.3.2

1 of the 1 container images this version deploys carry CVE-2026-0915.

Container imageDigestPackageFixed in
rotationalio/geoping:1.3.034bcb6fc3cb7
glibc@2.41-12+deb13u1
2.41-12+deb13u2

Open the chart page →

1,618
honurotationalVerified publisher0.5.31 of 1See more

honu rotational 0.5.3

1 of the 1 container images this version deploys carry CVE-2026-0915.

Container imageDigestPackageFixed in
rotationalio/honu:0.5.069fd30c2e31c
glibc@2.36-9+deb12u13
2.36-9+deb12u14

Open the chart page →

2,206
imgtagrotationalVerified publisher0.2.01 of 1See more

imgtag rotational 0.2.0

1 of the 1 container images this version deploys carry CVE-2026-0915.

Container imageDigestPackageFixed in
gcr.io/rotationalio-habanero/imgtag:89ec287a534a3170d03
glibc@2.36-9+deb12u9
2.36-9+deb12u14

Open the chart page →

3,355
rotational-apirotationalVerified publisher1.3.11 of 1See more

rotational-api rotational 1.3.1

1 of the 1 container images this version deploys carry CVE-2026-0915.

Container imageDigestPackageFixed in
rotationalio/rotational-api:1.3.0f1a2d05d8fff
glibc@2.41-12+deb13u1
2.41-12+deb13u2

Open the chart page →

1,617
vanityrotationalVerified publisher1.2.21 of 1See more

vanity rotational 1.2.2

1 of the 1 container images this version deploys carry CVE-2026-0915.

Container imageDigestPackageFixed in
rotationalio/vanity:1.2.0d77350f69b45
glibc@2.41-12+deb13u1
2.41-12+deb13u2

Open the chart page →

1,247
routehub-serverroutehub-helm1.0.11 of 3See more

routehub-server routehub-helm 1.0.1

1 of the 3 container images this version deploys carry CVE-2026-0915.

Container imageDigestPackageFixed in
eqalpha/keydb:latest6537505c4235
glibc@2.31-0ubuntu9.12
2.31-0ubuntu9.18+esm1

Open the chart page →

7,002
agentdatarss30.1.01 of 1See more

agentdata rss3 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-0915.

Container imageDigestPackageFixed in
ghcr.io/rss3-network/agentdata:0.1.0fd8d3e6e4cdf
glibc@2.36-9+deb12u9
2.36-9+deb12u14

Open the chart page →

3,566
noderss30.7.21 of 3See more

node rss3 0.7.2

1 of the 3 container images this version deploys carry CVE-2026-0915.

Container imageDigestPackageFixed in
ghcr.io/rss3-network/agentdata:0.1.0fd8d3e6e4cdf
glibc@2.36-9+deb12u9
2.36-9+deb12u14

Open the chart page →

4,772
prepull-daemonsetrstudioVerified publisher0.0.51 of 2See more

prepull-daemonset rstudio 0.0.5

1 of the 2 container images this version deploys carry CVE-2026-0915.

Container imageDigestPackageFixed in
library/ubuntu:bionic152dc042452c
glibc@2.27-3ubuntu1.6
2.27-3ubuntu1.6+esm6

Open the chart page →

1,732
paperless-ngxrtomik-helm-chartsVerified publisher0.0.51 of 1See more

paperless-ngx rtomik-helm-charts 0.0.5

1 of the 1 container images this version deploys carry CVE-2026-0915.

Container imageDigestPackageFixed in
ghcr.io/paperless-ngx/paperless-ngx:2.20.357ad9565bff3
glibc@2.41-12
2.41-12+deb13u2

Open the chart page →

10,680
joplinrubxkubeVerified publisher1.3.11 of 2See more

joplin rubxkube 1.3.1

1 of the 2 container images this version deploys carry CVE-2026-0915.

Container imageDigestPackageFixed in
bitnamilegacy/postgresql:17.2.0-debian-12-r2e6fa49bb0347
glibc@2.36-9+deb12u9
2.36-9+deb12u14

Open the chart page →

7,500
your-spotifyrubxkubeVerified publisher1.0.11 of 3See more

your-spotify rubxkube 1.0.1

1 of the 3 container images this version deploys carry CVE-2026-0915.

Container imageDigestPackageFixed in
bitnamilegacy/mongodb:latestb0652af9c8d0
glibc@2.36-9+deb12u10
2.36-9+deb12u14

Open the chart page →

5,463
janitorrryuunosukeds30.1.31 of 1See more

janitorr ryuunosukeds3 0.1.3

1 of the 1 container images this version deploys carry CVE-2026-0915.

Container imageDigestPackageFixed in
ghcr.io/schaka/janitorr:native-stable7cfe1e0c41da
glibc@2.39-0ubuntu8.5
2.39-0ubuntu8.7

Open the chart page →

1,003
nadekobotryuunosukeds30.1.21 of 2See more

nadekobot ryuunosukeds3 0.1.2

1 of the 2 container images this version deploys carry CVE-2026-0915.

Container imageDigestPackageFixed in
ryuunosukeds3/nadeko-bot-docker:latestc0398f13e8a9
glibc@2.35-0ubuntu3.8
2.35-0ubuntu3.13

Open the chart page →

8,790
orbitalryuunosukeds30.2.01 of 1See more

orbital ryuunosukeds3 0.2.0

1 of the 1 container images this version deploys carry CVE-2026-0915.

Container imageDigestPackageFixed in
ryuunosukeds3/orbital:latest0879f7261b10
glibc@2.36-9+deb12u10
2.36-9+deb12u14

Open the chart page →

2,699
transmissionryuunosukeds31.6.21 of 2See more

transmission ryuunosukeds3 1.6.2

1 of the 2 container images this version deploys carry CVE-2026-0915.

Container imageDigestPackageFixed in
library/python:3.9da5aee29682d
glibc@2.41-12
2.41-12+deb13u2

Open the chart page →

9,763
test-helm-app1saam-helm-test0.1.01 of 1See more

test-helm-app1 saam-helm-test 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-0915.

Container imageDigestPackageFixed in
hamidyousefi93/saam-test:latestc34f071f6ed0
glibc@2.36-9+deb12u3
2.36-9+deb12u14

Open the chart page →

3,932
safe-stacksafe-global0.1.01 of 9See more

safe-stack safe-global 0.1.0

1 of the 9 container images this version deploys carry CVE-2026-0915.

Container imageDigestPackageFixed in
gjeanmart/safe-ganache-node:latest926264c8f2d1
glibc@2.36-9
2.36-9+deb12u14

Open the chart page →

19,777
safe-transaction-servicesafe-global0.1.01 of 6See more

safe-transaction-service safe-global 0.1.0

1 of the 6 container images this version deploys carry CVE-2026-0915.

Container imageDigestPackageFixed in
gjeanmart/safe-ganache-node:latest926264c8f2d1
glibc@2.36-9
2.36-9+deb12u14

Open the chart page →

16,779
sagawisesagawiseVerified publisher0.1.01 of 3See more

sagawise sagawise 0.1.0

1 of the 3 container images this version deploys carry CVE-2026-0915.

Container imageDigestPackageFixed in
venturenox/redis:latest83b471c193ba
glibc@2.36-9+deb12u9
2.36-9+deb12u14

Open the chart page →

4,383
fmtok8s-agenda-servicesalaboy0.1.21 of 2See more

fmtok8s-agenda-service salaboy 0.1.2

1 of the 2 container images this version deploys carry CVE-2026-0915.

Container imageDigestPackageFixed in
ghcr.io/salaboy/fmtok8s-agenda-service:v0.0.1-native6c5efe150958
glibc@2.27-3ubuntu1.6
2.27-3ubuntu1.6+esm6

Open the chart page →

2,607
fmtok8s-c4p-servicesalaboy0.1.11 of 2See more

fmtok8s-c4p-service salaboy 0.1.1

1 of the 2 container images this version deploys carry CVE-2026-0915.

Container imageDigestPackageFixed in
ghcr.io/salaboy/fmtok8s-c4p-service:v0.0.1-native3f7cc45fd20b
glibc@2.27-3ubuntu1.6
2.27-3ubuntu1.6+esm6

Open the chart page →

2,607
fmtok8s-conference-chartsalaboy0.1.44 of 6See more

fmtok8s-conference-chart salaboy 0.1.4

4 of the 6 container images this version deploys carry CVE-2026-0915.

Container imageDigestPackageFixed in
ghcr.io/salaboy/fmtok8s-agenda-service:v0.0.1-native6c5efe150958
glibc@2.27-3ubuntu1.6
2.27-3ubuntu1.6+esm6
ghcr.io/salaboy/fmtok8s-c4p-service:v0.0.1-native3f7cc45fd20b
glibc@2.27-3ubuntu1.6
2.27-3ubuntu1.6+esm6
ghcr.io/salaboy/fmtok8s-email-service:v0.1.0-nativecf28472bc460
glibc@2.27-3ubuntu1.6
2.27-3ubuntu1.6+esm6
ghcr.io/salaboy/fmtok8s-frontend:v0.1.103fd01b4f56e
glibc@2.35-0ubuntu3
2.35-0ubuntu3.13

Open the chart page →

16,274
fmtok8s-email-servicesalaboy0.2.01 of 1See more

fmtok8s-email-service salaboy 0.2.0

1 of the 1 container images this version deploys carry CVE-2026-0915.

Container imageDigestPackageFixed in
ghcr.io/salaboy/fmtok8s-email-service:v0.2.0-nativeb52d5dbac2ca
glibc@2.27-3ubuntu1.6
2.27-3ubuntu1.6+esm6

Open the chart page →

2,908
fmtok8s-frontendsalaboy0.1.31 of 1See more

fmtok8s-frontend salaboy 0.1.3

1 of the 1 container images this version deploys carry CVE-2026-0915.

Container imageDigestPackageFixed in
ghcr.io/salaboy/fmtok8s-frontend:v0.1.103fd01b4f56e
glibc@2.35-0ubuntu3
2.35-0ubuntu3.13

Open the chart page →

8,152
pagessamanvithkaranth1.0.02 of 3See more

pages samanvithkaranth 1.0.0

2 of the 3 container images this version deploys carry CVE-2026-0915.

Container imageDigestPackageFixed in
dellcloud/pages:monitor6ba7b22caacd
glibc@2.31-0ubuntu9.1
2.31-0ubuntu9.18+esm1
flyway/flyway:6.4.422d97ceb0c47
glibc@2.27-3ubuntu1
2.27-3ubuntu1.6+esm6

Open the chart page →

20,261
evsantisbon0.2.02 of 5See more

ev santisbon 0.2.0

2 of the 5 container images this version deploys carry CVE-2026-0915.

Container imageDigestPackageFixed in
santisbon/evwatcher:latestc4e994ca4540
glibc@2.36-9+deb12u1
2.36-9+deb12u14
santisbon/evworker:lateste807283f8d69
glibc@2.36-9+deb12u1
2.36-9+deb12u14

Open the chart page →

14,355
speedtestsantisbon0.1.02 of 3See more

speedtest santisbon 0.1.0

2 of the 3 container images this version deploys carry CVE-2026-0915.

Container imageDigestPackageFixed in
library/influxdb:2.7b8d940ca9376
glibc@2.36-9+deb12u13
2.36-9+deb12u14
santisbon/speedtest:latest8ee3a1697227
glibc@2.36-9+deb12u1
2.36-9+deb12u14

Open the chart page →

12,826
pagessarubits-pages1.0.02 of 3See more

pages sarubits-pages 1.0.0

2 of the 3 container images this version deploys carry CVE-2026-0915.

Container imageDigestPackageFixed in
dellcloud/pages:monitor6ba7b22caacd
glibc@2.31-0ubuntu9.1
2.31-0ubuntu9.18+esm1
flyway/flyway:6.4.422d97ceb0c47
glibc@2.27-3ubuntu1
2.27-3ubuntu1.6+esm6

Open the chart page →

20,261
airflowsb-helm-charts0.3.01 of 1See more

airflow sb-helm-charts 0.3.0

1 of the 1 container images this version deploys carry CVE-2026-0915.

Container imageDigestPackageFixed in
apache/airflow:2.8.1e5560ad0b86e
glibc@2.36-9+deb12u4
2.36-9+deb12u14

Open the chart page →

10,269
jellyfinsb-helm-charts0.4.01 of 1See more

jellyfin sb-helm-charts 0.4.0

1 of the 1 container images this version deploys carry CVE-2026-0915.

Container imageDigestPackageFixed in
jellyfin/jellyfin:10.10.317c3a8d9dddb
glibc@2.36-9+deb12u9
2.36-9+deb12u14

Open the chart page →

4,164
mongodbsb-helm-charts0.4.01 of 1See more

mongodb sb-helm-charts 0.4.0

1 of the 1 container images this version deploys carry CVE-2026-0915.

Container imageDigestPackageFixed in
library/mongo:7.0.140032d2ca20db
glibc@2.35-0ubuntu3.8
2.35-0ubuntu3.13

Open the chart page →

4,108
nextcloudsb-helm-charts0.4.01 of 2See more

nextcloud sb-helm-charts 0.4.0

1 of the 2 container images this version deploys carry CVE-2026-0915.

Container imageDigestPackageFixed in
library/nextcloud:31.0.10-apacheb7faa1653c39
glibc@2.41-12
2.41-12+deb13u2

Open the chart page →

9,886
phpmyadminsb-helm-charts0.3.01 of 1See more

phpmyadmin sb-helm-charts 0.3.0

1 of the 1 container images this version deploys carry CVE-2026-0915.

Container imageDigestPackageFixed in
library/phpmyadmin:5.2.16e75aa8f767c
glibc@2.36-9+deb12u9
2.36-9+deb12u14

Open the chart page →

5,430
postgresqlsb-helm-charts0.4.01 of 1See more

postgresql sb-helm-charts 0.4.0

1 of the 1 container images this version deploys carry CVE-2026-0915.

Container imageDigestPackageFixed in
library/postgres:16.11468e1f126ca5
glibc@2.41-12+deb13u1
2.41-12+deb13u2

Open the chart page →

2,434
promtailsb-helm-charts0.4.01 of 1See more

promtail sb-helm-charts 0.4.0

1 of the 1 container images this version deploys carry CVE-2026-0915.

Container imageDigestPackageFixed in
grafana/promtail:3.6.18dcfdf466da0
glibc@2.39-0ubuntu8.6
2.39-0ubuntu8.7

Open the chart page →

2,286
rsshubsb-helm-charts0.3.01 of 1See more

rsshub sb-helm-charts 0.3.0

1 of the 1 container images this version deploys carry CVE-2026-0915.

Container imageDigestPackageFixed in
diygod/rsshub:2025-11-097a6312cac0d5
glibc@2.36-9+deb12u13
2.36-9+deb12u14

Open the chart page →

4,745
vaultwardensb-helm-charts0.4.01 of 1See more

vaultwarden sb-helm-charts 0.4.0

1 of the 1 container images this version deploys carry CVE-2026-0915.

Container imageDigestPackageFixed in
vaultwarden/server:1.34.384fd8a47f58d
glibc@2.36-9+deb12u10
2.36-9+deb12u14

Open the chart page →

3,364

Container images carrying it

1,701 by charts deploying them

A fixed version is listed for 3 of the 4 affected packages.

Container imageDigestPackageFixed inUsed by
registry.k8s.io/sig-storage/nfsplugin:v4.11.0ce5b5ccd5eb0
glibc@2.36-9+deb12u10
2.36-9+deb12u14
1

syft 1.42.1 · advisories as of 18 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.