StackRadar

CVE-2026-0915

High

Advisory

Published 15 Jan 2026In the index since 5 Sept 2026
Severity
High
worst across findings
CVSS
7.5
base score, highest
EPSS
0.006
48th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
1,572
of 17,790 indexed, latest versions
Container images
1,705
deployed by those charts
Fix available
3 of 4
affected packages

CVE-2026-0915 affecting package glibc for versions less than 2.38-18

Carried by container images the latest versions of 1,572 of 17,790 indexed charts deploy, on 1,705 images.

Affected packageAffected versionsFixed inImages
glibcdeb2.23-0ubuntu5, 2.23-0ubuntu7, 2.23-0ubuntu9, 2.23-0ubuntu10+49 more2.23-0ubuntu11.3+esm9, 2.27-3ubuntu1.6+esm6, 2.31-0ubuntu9.18+esm1, 2.35-0ubuntu3.13+4 more1,678
glibcapk2.37-r6, 2.38-r6, 2.39-r7, 2.40-r1+6 more2.42-r619
eglibcdeb2.19-0ubuntu6.3, 2.19-0ubuntu6.6, 2.19-0ubuntu6.13, 2.19-0ubuntu6.14+1 moreno fix listed7
glibcrpm2.38-16.azl32.38-181
OSV records
CGA-9f7x-88h6-rvv4DEBIAN-CVE-2026-0915UBUNTU-CVE-2026-0915AZL-74633
Also known as
CGA-rm33-3ph7-88mp, USN-8005-1

Charts affected

1,572 by stars
ChartLatestAffected imagesRadar Score
routercosmo-routerOfficialVerified publisher0.18.01 of 1See more

router cosmo-router 0.18.0

1 of the 1 container images this version deploys carry CVE-2026-0915.

Container imageDigestPackageFixed in
ghcr.io/wundergraph/cosmo/router:0.243.05afcab98d9d7
glibc@2.36-9+deb12u10
2.36-9+deb12u14

Open the chart page →

1,686
dolibarrcowboysysopVerified publisher9.0.32 of 3See more

dolibarr cowboysysop 9.0.3

2 of the 3 container images this version deploys carry CVE-2026-0915.

Container imageDigestPackageFixed in
bitnamilegacy/mariadb:11.4.5-debian-12-r933ce23601fc9
glibc@2.36-9+deb12u10
2.36-9+deb12u14
dolibarr/dolibarr:22.0.47ad88fc9b13c
glibc@2.36-9+deb12u13
2.36-9+deb12u14

Open the chart page →

9,208
daskhubdask2024.1.11 of 9See more

daskhub dask 2024.1.1

1 of the 9 container images this version deploys carry CVE-2026-0915.

Container imageDigestPackageFixed in
pangeo/base-notebook:2024.01.155fbe688a4f80
glibc@2.35-0ubuntu3.5
2.35-0ubuntu3.13

Open the chart page →

14,151
seafiledatamateVerified publisher0.6.04 of 6See more

seafile datamate 0.6.0

4 of the 6 container images this version deploys carry CVE-2026-0915.

Container imageDigestPackageFixed in
bitnamilegacy/mariadb-galera:11.4.3-debian-12-r0cb8beb6dbb58
glibc@2.36-9+deb12u7
2.36-9+deb12u14
bitnamilegacy/memcached:1.6.29-debian-12-r4ff0e7239c17c
glibc@2.36-9+deb12u7
2.36-9+deb12u14
bitnamilegacy/minio:2024.8.3-debian-12-r15501c419f42e
glibc@2.36-9+deb12u7
2.36-9+deb12u14
datamate/seafile-professional:11.0.202dd66b722464
glibc@2.35-0ubuntu3.10
2.35-0ubuntu3.13

Open the chart page →

27,426
dialdialOfficialVerified publisher7.2.01 of 4See more

dial dial 7.2.0

1 of the 4 container images this version deploys carry CVE-2026-0915.

Container imageDigestPackageFixed in
valkey/valkey:9.0.2930b41430fb7
glibc@2.41-12+deb13u1
2.41-12+deb13u2

Open the chart page →

2,186
plexgabe565Verified publisher0.5.11 of 1See more

plex gabe565 0.5.1

1 of the 1 container images this version deploys carry CVE-2026-0915.

Container imageDigestPackageFixed in
ghcr.io/linuxserver/plex:version-1.41.4.9463-630c9f557e6d2775e77ec
glibc@2.39-0ubuntu8.4
2.39-0ubuntu8.7

Open the chart page →

2,583
geonode-k8sgeonode-k8sVerified publisher2.0.03 of 10See more

geonode-k8s geonode-k8s 2.0.0

3 of the 10 container images this version deploys carry CVE-2026-0915.

Container imageDigestPackageFixed in
geopython/pycsw:3.0.0-beta284662ea6b78b
glibc@2.36-9+deb12u13
2.36-9+deb12u14
library/memcached:1.6.40cc523a19da58
glibc@2.41-12+deb13u1
2.41-12+deb13u2
library/redis:8.4.03906b477e4b6
glibc@2.36-9+deb12u13
2.36-9+deb12u14

Open the chart page →

14,112
glpiglpi-conteiner0.1.01 of 3See more

glpi glpi-conteiner 0.1.0

1 of the 3 container images this version deploys carry CVE-2026-0915.

Container imageDigestPackageFixed in
vdiogov/glpi-conteiner:latest6945f84f0058
glibc@2.36-9+deb12u7
2.36-9+deb12u14

Open the chart page →

12,359
openctihelm-openctiVerified publisher3.0.91 of 8See more

opencti helm-opencti 3.0.9

1 of the 8 container images this version deploys carry CVE-2026-0915.

Container imageDigestPackageFixed in
bitnamilegacy/rabbitmq:4.1.2-debian-12-r1fac502149c40
glibc@2.36-9+deb12u10
2.36-9+deb12u14

Open the chart page →

3,407
infrahubinfrahubVerified publisher4.33.23 of 5See more

infrahub infrahub 4.33.2

3 of the 5 container images this version deploys carry CVE-2026-0915.

Container imageDigestPackageFixed in
bitnamilegacy/postgresql:14.13.0df6ec02e2b9a
glibc@2.36-9+deb12u9
2.36-9+deb12u14
bitnamilegacy/rabbitmq:4.1.3-debian-12-r19e635efba431
glibc@2.36-9+deb12u10
2.36-9+deb12u14
bitnamilegacy/redis:8.2.1-debian-12-r025bf63f3caf7
glibc@2.36-9+deb12u10
2.36-9+deb12u14

Open the chart page →

10,522
kamu-api-serverkamuVerified publisher0.89.01 of 1See more

kamu-api-server kamu 0.89.0

1 of the 1 container images this version deploys carry CVE-2026-0915.

Container imageDigestPackageFixed in
ghcr.io/kamu-data/kamu-api-server:0.89.04ed7a896dd2b
glibc@2.31-0ubuntu9.17
2.31-0ubuntu9.18+esm1

Open the chart page →

6,350
kubeflowkubeflow1.6.25 of 45See more

kubeflow kubeflow 1.6.2

5 of the 45 container images this version deploys carry CVE-2026-0915.

Container imageDigestPackageFixed in
istio/proxyv2:1.9.687a9db561d2e
glibc@2.27-3ubuntu1.4
2.27-3ubuntu1.6+esm6
istio/proxyv2:1.14.1df69c1a7af7c
glibc@2.31-0ubuntu9.9
2.31-0ubuntu9.18+esm1
library/python:3.7eedf63967cdb
glibc@2.36-9+deb12u1
2.36-9+deb12u14
gcr.io/ml-pipeline/metadata-envoy:2.0.0-alpha.5e8bc6cf08613
glibc@2.23-0ubuntu11
2.23-0ubuntu11.3+esm9
gcr.io/tfx-oss-public/ml_metadata_store_server:1.5.0db8691752b4c
glibc@2.27-3ubuntu1.4
2.27-3ubuntu1.6+esm6

Open the chart page →

97,217
kubernetes-loggingkubernetes-logging4.8.01 of 6See more

kubernetes-logging kubernetes-logging 4.8.0

1 of the 6 container images this version deploys carry CVE-2026-0915.

Container imageDigestPackageFixed in
opensearchproject/logstash-oss-with-opensearch-output-plugin:8.9.043b0cdaf26ed
glibc@2.31-0ubuntu9.9
2.31-0ubuntu9.18+esm1

Open the chart page →

10,573
librechatlibrechat-openshiftVerified publisher1.9.01 of 3See more

librechat librechat-openshift 1.9.0

1 of the 3 container images this version deploys carry CVE-2026-0915.

Container imageDigestPackageFixed in
ghcr.io/bat-bs/bitnami-pgvector:pg1619ebe07b4daf
glibc@2.36-9+deb12u9
2.36-9+deb12u14

Open the chart page →

5,849
headplanenbcloudVerified publisher0.1.22 of 4See more

headplane nbcloud 0.1.2

2 of the 4 container images this version deploys carry CVE-2026-0915.

Container imageDigestPackageFixed in
bitnamilegacy/kubectl:latestcd354d5b2556
glibc@2.36-9+deb12u10
2.36-9+deb12u14
headscale/headscale:0.25.1a7a8ae9616bb
glibc@2.36-9+deb12u9
2.36-9+deb12u14

Open the chart page →

7,997
node-local-dnsnode-local-dns2.4.01 of 1See more

node-local-dns node-local-dns 2.4.0

1 of the 1 container images this version deploys carry CVE-2026-0915.

Container imageDigestPackageFixed in
registry.k8s.io/dns/k8s-dns-node-cache:1.23.081a13703d6b8
glibc@2.36-9+deb12u3
2.36-9+deb12u14

Open the chart page →

2,619
open5gsopen5gsVerified publisher2.3.41 of 5See more

open5gs open5gs 2.3.4

1 of the 5 container images this version deploys carry CVE-2026-0915.

Container imageDigestPackageFixed in
gradiant/open5gs-dbctl:0.10.3332031245fce
glibc@2.39-0ubuntu8.4
2.39-0ubuntu8.7

Open the chart page →

9,305
mattermostphntom3.24.01 of 2See more

mattermost phntom 3.24.0

1 of the 2 container images this version deploys carry CVE-2026-0915.

Container imageDigestPackageFixed in
phntom/mattermost-team-edition:9.3.051cf9da4aa2e
glibc@2.35-0ubuntu3.1
2.35-0ubuntu3.13

Open the chart page →

8,777
unifi-controllerqonstruktVerified publisher2.6.11 of 1See more

unifi-controller qonstrukt 2.6.1

1 of the 1 container images this version deploys carry CVE-2026-0915.

Container imageDigestPackageFixed in
linuxserver/unifi-controller:8.0.240ae315a3a456
glibc@2.31-0ubuntu9.9
2.31-0ubuntu9.18+esm1

Open the chart page →

10,563
uffizzi-appuffizzi-app1.3.01 of 14See more

uffizzi-app uffizzi-app 1.3.0

1 of the 14 container images this version deploys carry CVE-2026-0915.

Container imageDigestPackageFixed in
uffizzi/controller:latest0344805f267b
glibc@2.36-9+deb12u4
2.36-9+deb12u14

Open the chart page →

19,434
reposilitevolker-raschekVerified publisher1.0.01 of 1See more

reposilite volker-raschek 1.0.0

1 of the 1 container images this version deploys carry CVE-2026-0915.

Container imageDigestPackageFixed in
dzikoysk/reposilite:3.5.264128c2d7a6ba
glibc@2.39-0ubuntu8.5
2.39-0ubuntu8.7

Open the chart page →

3,002
dexwiremindVerified publisher2.15.71 of 2See more

dex wiremind 2.15.7

1 of the 2 container images this version deploys carry CVE-2026-0915.

Container imageDigestPackageFixed in
gcr.io/google_containers/kubernetes-dashboard-init-amd64:v1.0.0fbe12aa24de6
glibc@2.23-0ubuntu9
2.23-0ubuntu11.3+esm9

Open the chart page →

13,578
grafana-pdf-exporterwiremindVerified publisher2.1.11 of 1See more

grafana-pdf-exporter wiremind 2.1.1

1 of the 1 container images this version deploys carry CVE-2026-0915.

Container imageDigestPackageFixed in
ghcr.io/wiremind/grafana-pdf-exporter:v1.7dbaa8527bf4c
glibc@2.36-9+deb12u3
2.36-9+deb12u14

Open the chart page →

9,775
eshoponabpabp-charts1.0.01 of 15See more

eshoponabp abp-charts 1.0.0

1 of the 15 container images this version deploys carry CVE-2026-0915.

Container imageDigestPackageFixed in
library/mongo:4.2699d652ed674
glibc@2.27-3ubuntu1.6
2.27-3ubuntu1.6+esm6

Open the chart page →

19,812
code-serveralekcVerified publisher0.1.11 of 1See more

code-server alekc 0.1.1

1 of the 1 container images this version deploys carry CVE-2026-0915.

Container imageDigestPackageFixed in
linuxserver/code-server:4.10.1a5e43a05ae79
glibc@2.35-0ubuntu3.1
2.35-0ubuntu3.13

Open the chart page →

8,254
limesurveyarea-42Verified publisher0.3.951 of 2See more

limesurvey area-42 0.3.95

1 of the 2 container images this version deploys carry CVE-2026-0915.

Container imageDigestPackageFixed in
bitnamilegacy/mariadb:12.0.2-debian-12-r0888cdaae3cb9
glibc@2.36-9+deb12u10
2.36-9+deb12u14

Open the chart page →

4,775
auto-deploy-appav1o-chartsVerified publisher0.15.41 of 1See more

auto-deploy-app av1o-charts 0.15.4

1 of the 1 container images this version deploys carry CVE-2026-0915.

Container imageDigestPackageFixed in
gcr.io/google-containers/echoserver:1.910f4dbc8eeeb
glibc@2.23-0ubuntu9
2.23-0ubuntu11.3+esm9

Open the chart page →

11,015
backup-zenbzen0.1.41 of 1See more

backup-zen bzen 0.1.4

1 of the 1 container images this version deploys carry CVE-2026-0915.

Container imageDigestPackageFixed in
rezachalak/bzen-mongo:1.0.034f694325191
glibc@2.31-0ubuntu9.9
2.31-0ubuntu9.18+esm1

Open the chart page →

8,026
thingsboardcetic0.1.21 of 2See more

thingsboard cetic 0.1.2

1 of the 2 container images this version deploys carry CVE-2026-0915.

Container imageDigestPackageFixed in
thingsboard/tb-postgres:latest2d17e4e36edc
glibc@2.36-9+deb12u13
2.36-9+deb12u14

Open the chart page →

5,256
collabora-codechrisingenhaag2.6.01 of 1See more

collabora-code chrisingenhaag 2.6.0

1 of the 1 container images this version deploys carry CVE-2026-0915.

Container imageDigestPackageFixed in
collabora/code:23.05.10.1.105299b452f7f
glibc@2.36-9+deb12u4
2.36-9+deb12u14

Open the chart page →

4,194
lighthousechronicleVerified publisher0.0.81 of 1See more

lighthouse chronicle 0.0.8

1 of the 1 container images this version deploys carry CVE-2026-0915.

Container imageDigestPackageFixed in
sigp/lighthouse:v7.1.0870934e38931
glibc@2.35-0ubuntu3.10
2.35-0ubuntu3.13

Open the chart page →

1,963
ghostcloudpirates-ghostVerified publisher0.20.221 of 3See more

ghost cloudpirates-ghost 0.20.22

1 of the 3 container images this version deploys carry CVE-2026-0915.

Container imageDigestPackageFixed in
library/mariadb:12.0.25b6a1eac15b8
glibc@2.39-0ubuntu8.6
2.39-0ubuntu8.7

Open the chart page →

7,267
clowardenclowarden0.2.31 of 4See more

clowarden clowarden 0.2.3

1 of the 4 container images this version deploys carry CVE-2026-0915.

Container imageDigestPackageFixed in
artifacthub/postgres:latest4fd34fa635cc
glibc@2.41-12
2.41-12+deb13u2

Open the chart page →

5,632
convertigoconvertigoOfficialVerified publisher8.4.32 of 5See more

convertigo convertigo 8.4.3

2 of the 5 container images this version deploys carry CVE-2026-0915.

Container imageDigestPackageFixed in
baserow/baserow:1.30.1df0c42eb67e8
glibc@2.36-9+deb12u9
2.36-9+deb12u14
library/couchdb:3.4.22817ad50b5c5
glibc@2.36-9+deb12u10
2.36-9+deb12u14

Open the chart page →

17,569
cosmocosmo-platformOfficialVerified publisher0.20.06 of 10See more

cosmo cosmo-platform 0.20.0

6 of the 10 container images this version deploys carry CVE-2026-0915.

Container imageDigestPackageFixed in
bitnamilegacy/clickhouse:24.6.2-debian-12-r3dcc172c6c55f
glibc@2.36-9+deb12u7
2.36-9+deb12u14
bitnamilegacy/minio:2025.7.23-debian-12-r56dabb4a2088c
glibc@2.36-9+deb12u10
2.36-9+deb12u14
bitnamilegacy/redis:7.2.4-debian-12-r1670cafc5a71e8
glibc@2.36-9+deb12u7
2.36-9+deb12u14
ghcr.io/wundergraph/cosmo/cdn:0.14.1d86fcf169f15
glibc@2.36-9+deb12u9
2.36-9+deb12u14
ghcr.io/wundergraph/cosmo/graphqlmetrics:0.33.0efb69ec3330c
glibc@2.36-9+deb12u9
2.36-9+deb12u14
ghcr.io/wundergraph/cosmo/otelcollector:0.18.15a6fe78d4d15
glibc@2.36-9+deb12u9
2.36-9+deb12u14

Open the chart page →

29,070
dask-kubernetes-operatordask2026.3.01 of 1See more

dask-kubernetes-operator dask 2026.3.0

1 of the 1 container images this version deploys carry CVE-2026-0915.

Container imageDigestPackageFixed in
ghcr.io/dask/dask-kubernetes-operator:2026.3.03225d2bc6b3c
glibc@2.41-12+deb13u1
2.41-12+deb13u2

Open the chart page →

9,395
zabbix-kubernetes-discoverydjerfyVerified publisher1.4.201 of 1See more

zabbix-kubernetes-discovery djerfy 1.4.20

1 of the 1 container images this version deploys carry CVE-2026-0915.

Container imageDigestPackageFixed in
ghcr.io/djerfy/zabbix-kubernetes-discovery:v1.4.207a50c07e7c69
glibc@2.39-0ubuntu8.3
2.39-0ubuntu8.7

Open the chart page →

4,200
edgelessdbedgelesssysVerified publisher0.3.21 of 1See more

edgelessdb edgelesssys 0.3.2

1 of the 1 container images this version deploys carry CVE-2026-0915.

Container imageDigestPackageFixed in
ghcr.io/edgelesssys/edgelessdb-sgx-1gb:v0.3.27e1d7a11a11a
glibc@2.31-0ubuntu9.9
2.31-0ubuntu9.18+esm1

Open the chart page →

4,871
zabbix-agentfermosit0.0.51 of 1See more

zabbix-agent fermosit 0.0.5

1 of the 1 container images this version deploys carry CVE-2026-0915.

Container imageDigestPackageFixed in
zabbix/zabbix-agent:ubuntu-6.4-latest349b924472a7
glibc@2.39-0ubuntu8.3
2.39-0ubuntu8.7

Open the chart page →

2,414
keydbfinkinfridomVerified publisher0.48.31 of 1See more

keydb finkinfridom 0.48.3

1 of the 1 container images this version deploys carry CVE-2026-0915.

Container imageDigestPackageFixed in
eqalpha/keydb:x86_64_v6.3.4eceb1806730c
glibc@2.31-0ubuntu9.12
2.31-0ubuntu9.18+esm1

Open the chart page →

5,305
calibregeek-cookbookVerified publisher5.4.21 of 1See more

calibre geek-cookbook 5.4.2

1 of the 1 container images this version deploys carry CVE-2026-0915.

Container imageDigestPackageFixed in
linuxserver/calibre:version-v5.21.0a847b5b2d860
glibc@2.27-3ubuntu1.4
2.27-3ubuntu1.6+esm6

Open the chart page →

22,792
frigategeek-cookbookVerified publisher8.2.21 of 1See more

frigate geek-cookbook 8.2.2

1 of the 1 container images this version deploys carry CVE-2026-0915.

Container imageDigestPackageFixed in
blakeblackshear/frigate:0.10.0-amd64ae269270ad9e
glibc@2.31-0ubuntu9.2
2.31-0ubuntu9.18+esm1

Open the chart page →

10,647
network-ups-toolsgeek-cookbookVerified publisher6.4.21 of 1See more

network-ups-tools geek-cookbook 6.4.2

1 of the 1 container images this version deploys carry CVE-2026-0915.

Container imageDigestPackageFixed in
ghcr.io/k8s-at-home/network-ups-tools:v2.7.4-2479-g86a32237cbd5d4cc1245
glibc@2.31-0ubuntu9.2
2.31-0ubuntu9.18+esm1

Open the chart page →

14,004
plexgeek-cookbookVerified publisher6.4.31 of 1See more

plex geek-cookbook 6.4.3

1 of the 1 container images this version deploys carry CVE-2026-0915.

Container imageDigestPackageFixed in
ghcr.io/k8s-at-home/plex:v1.28.0.5999-97678ded3ef756c7d784b
glibc@2.31-0ubuntu9.9
2.31-0ubuntu9.18+esm1

Open the chart page →

9,669
signal-cli-rest-apigeek-cookbookVerified publisher1.2.21 of 1See more

signal-cli-rest-api geek-cookbook 1.2.2

1 of the 1 container images this version deploys carry CVE-2026-0915.

Container imageDigestPackageFixed in
bbernhard/signal-cli-rest-api:0.57549ad08d7e14
glibc@2.31-0ubuntu9.7
2.31-0ubuntu9.18+esm1

Open the chart page →

10,221
tautulligeek-cookbookVerified publisher11.4.21 of 1See more

tautulli geek-cookbook 11.4.2

1 of the 1 container images this version deploys carry CVE-2026-0915.

Container imageDigestPackageFixed in
ghcr.io/k8s-at-home/tautulli:v2.7.74ea617c30397
glibc@2.31-0ubuntu9.2
2.31-0ubuntu9.18+esm1

Open the chart page →

10,671
unifigeek-cookbookVerified publisher5.1.31 of 1See more

unifi geek-cookbook 5.1.3

1 of the 1 container images this version deploys carry CVE-2026-0915.

Container imageDigestPackageFixed in
jacobalberty/unifi:v7.4.162b3edc809a3ff
glibc@2.27-3ubuntu1.6
2.27-3ubuntu1.6+esm6

Open the chart page →

11,900
gitvotegitvoteVerified publisher1.5.01 of 6See more

gitvote gitvote 1.5.0

1 of the 6 container images this version deploys carry CVE-2026-0915.

Container imageDigestPackageFixed in
artifacthub/postgres:latest4fd34fa635cc
glibc@2.41-12
2.41-12+deb13u2

Open the chart page →

5,639
terrariahalkeye0.4.21 of 2See more

terraria halkeye 0.4.2

1 of the 2 container images this version deploys carry CVE-2026-0915.

Container imageDigestPackageFixed in
ryshe/terraria:latestb1c89f7f359a
glibc@2.36-9+deb12u13
2.36-9+deb12u14

Open the chart page →

4,190
typesensehmphuVerified publisher0.1.61 of 1See more

typesense hmphu 0.1.6

1 of the 1 container images this version deploys carry CVE-2026-0915.

Container imageDigestPackageFixed in
typesense/typesense:0.23.03accb727cbe2
glibc@2.23-0ubuntu11.3
2.23-0ubuntu11.3+esm9

Open the chart page →

3,876

Container images carrying it

1,705 by charts deploying them

A fixed version is listed for 3 of the 4 affected packages.

Container imageDigestPackageFixed inUsed by
registry.k8s.io/git-sync/git-sync:v4.1.0fd9722fd02e3
glibc@2.36-9+deb12u3
2.36-9+deb12u14
1
registry.k8s.io/node-problem-detector/node-problem-detector:v0.8.2052f0618e9bc2
glibc@2.36-9+deb12u8
2.36-9+deb12u14
1
registry.k8s.io/node-problem-detector/node-problem-detector:v1.35.1c380751accc5
glibc@2.36-9+deb12u13
2.36-9+deb12u14
1
registry.k8s.io/sig-storage/local-volume-provisioner:v2.8.03e2bf2eaef9f
glibc@2.36-9+deb12u10
2.36-9+deb12u14
1
registry.k8s.io/sig-storage/nfsplugin:v4.11.0ce5b5ccd5eb0
glibc@2.36-9+deb12u10
2.36-9+deb12u14
1

syft 1.42.1 · advisories as of 16 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.