StackRadar

CVE-2026-103111

High

Advisory

Published 30 Sept 2026In the index since 1 Oct 2026
Severity
High
worst across findings
CVSS
7.6
base score, highest
EPSS
0.002
10th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
2,665
of 17,985 indexed, latest versions
Container images
2,621
deployed by those charts
Fix available
2 of 3
affected packages

CVE-2026-103111 affecting package pcre2 10.48-1

Carried by container images the latest versions of 2,665 of 17,985 indexed charts deploy, on 2,621 images.

Affected packageAffected versionsFixed inImages
pcre2deb10.21-1, 10.34-7, 10.34-7ubuntu0.1, 10.39-3+ubuntu20.04.1+deb.sury.org+2+13 more10.46-1~deb13u32,423
pcre2apk10.47-r0, 10.47-r1, 10.48-r010.49-r0191
pcre2rpm10.42-3.azl3no fix listed7
OSV records
ALPINE-CVE-2026-103111AZL-105119DEBIAN-CVE-2026-103111ECHO-bf42-43c6-45fdUBUNTU-CVE-2026-103111
Trending
Rank 1 in indexed charts, since 1 Oct 2026. See the ranking →

Charts affected

2,665 by stars
ChartLatestAffected imagesRadar Score
dingtalk-botxxl-job-adminVerified publisher0.1.31 of 2See more

dingtalk-bot xxl-job-admin 0.1.3

1 of the 2 container images this version deploys carry CVE-2026-103111.

Container imageDigestPackageFixed in
dellnoantechnp/dingtalk-bot:v1.0.1034000bbcad5
pcre2@10.46-1~deb13u1
10.46-1~deb13u3

Open the chart page →

3,743
nightingalexxl-job-adminVerified publisher0.2.113 of 6See more

nightingale xxl-job-admin 0.2.11

3 of the 6 container images this version deploys carry CVE-2026-103111.

Container imageDigestPackageFixed in
flashcatcloud/categraf:latest42e6ab16472e
pcre2@10.42-4ubuntu2.1
no fix listed
flashcatcloud/nightingale:8.0.0-beta.11ea1b0aaabe09
pcre2@10.42-1
no fix listed
library/redis:6.2d2ad7b21cafa
pcre2@10.42-1+deb12u1
no fix listed

Open the chart page →

11,841
pgcatxxl-job-adminVerified publisher0.3.31 of 1See more

pgcat xxl-job-admin 0.3.3

1 of the 1 container images this version deploys carry CVE-2026-103111.

Container imageDigestPackageFixed in
ghcr.io/postgresml/pgcat:v1.2.0627761f6dcbc
pcre2@10.42-1
no fix listed

Open the chart page →

3,394
nginx-chartxxoznge-nginx0.1.01 of 1See more

nginx-chart xxoznge-nginx 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-103111.

Container imageDigestPackageFixed in
library/nginx:latestabe47724e466
pcre2@10.46-1~deb13u2
10.46-1~deb13u3

Open the chart page →

1,859
helm-demoyahoon-helm-demoVerified publisher1.0.01 of 1See more

helm-demo yahoon-helm-demo 1.0.0

1 of the 1 container images this version deploys carry CVE-2026-103111.

Container imageDigestPackageFixed in
ghcr.io/yahoon/helm-demo:1.0.02930290a758c
pcre2@10.46-1~deb13u1
10.46-1~deb13u3

Open the chart page →

1,564
my-nginx-appyasser-nginx-app0.1.01 of 1See more

my-nginx-app yasser-nginx-app 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-103111.

Container imageDigestPackageFixed in
library/nginx:stableb972f831f200
pcre2@10.46-1~deb13u2
10.46-1~deb13u3

Open the chart page →

1,859
ceph-exporterygqygq2Verified publisher1.0.01 of 1See more

ceph-exporter ygqygq2 1.0.0

1 of the 1 container images this version deploys carry CVE-2026-103111.

Container imageDigestPackageFixed in
digitalocean/ceph_exporter:latest3ba058e9a48d
pcre2@10.34-7ubuntu0.1
no fix listed

Open the chart page →

6,696
api-snapyoukadevVerified publisher0.1.11 of 1See more

api-snap youkadev 0.1.1

1 of the 1 container images this version deploys carry CVE-2026-103111.

Container imageDigestPackageFixed in
youkadev/api-snap:0.1.14db0f9428e67
pcre2@10.42-1
no fix listed

Open the chart page →

2,900
jenkinszanise-jenkins-helm-chart0.1.01 of 1See more

jenkins zanise-jenkins-helm-chart 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-103111.

Container imageDigestPackageFixed in
jenkins/jenkins:ltsc1e4c349365f
pcre2@10.46-1~deb13u1
10.46-1~deb13u3

Open the chart page →

3,140
changedetection-iozekker6Verified publisher1.103.01 of 1See more

changedetection-io zekker6 1.103.0

1 of the 1 container images this version deploys carry CVE-2026-103111.

Container imageDigestPackageFixed in
ghcr.io/dgtlmoon/changedetection.io:0.60.834df3680db1c
pcre2@10.42-1+deb12u1
no fix listed

Open the chart page →

2,932
NEW_APPzekker6Verified publisher0.0.01 of 1See more

NEW_APP zekker6 0.0.0

1 of the 1 container images this version deploys carry CVE-2026-103111.

Container imageDigestPackageFixed in
library/nginx:latestabe47724e466
pcre2@10.46-1~deb13u2
10.46-1~deb13u3

Open the chart page →

1,859
sockpuppetbrowserzekker6Verified publisher0.1.01 of 1See more

sockpuppetbrowser zekker6 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-103111.

Container imageDigestPackageFixed in
dgtlmoon/sockpuppetbrowser:latest1d8f72d2ce20
pcre2@10.42-1
no fix listed

Open the chart page →

5,018
zimagizimagi2.7.171 of 6See more

zimagi zimagi 2.7.17

1 of the 6 container images this version deploys carry CVE-2026-103111.

Container imageDigestPackageFixed in
qdrant/qdrant:v1.15.331407c0e8e32
pcre2@10.42-1
no fix listed

Open the chart page →

2,135
clickhousezloi-space1.2.01 of 3See more

clickhouse zloi-space 1.2.0

1 of the 3 container images this version deploys carry CVE-2026-103111.

Container imageDigestPackageFixed in
yandex/clickhouse-server:21.3.204eccfffb01d7
pcre2@10.34-7
no fix listed

Open the chart page →

9,696
zoo-project-druzoo-projectOfficialVerified publisher0.10.81 of 6See more

zoo-project-dru zoo-project 0.10.8

1 of the 6 container images this version deploys carry CVE-2026-103111.

Container imageDigestPackageFixed in
zooproject/zoo-project:dru-51e7d55383f24594959b69e58518961c6aa66740da112e8d03f1
pcre2@10.39-3ubuntu0.1
no fix listed

Open the chart page →

6,744

Container images carrying it

2,621 by charts deploying them

A fixed version is listed for 2 of the 3 affected packages.

Container imageDigestPackageFixed inUsed by
darthsim/imgproxy:v3.29.17d12c7c8fc66
pcre2@10.42-4ubuntu2.1
no fix listed
1
darthsim/imgproxy:latestb42304f5e2ed
pcre2@10.42-4ubuntu2.1
no fix listed
1
datadog/agent:6aad9994de6a7
pcre2@10.42-4ubuntu2
no fix listed
1
datafuselabs/databend-meta:v1.2.279ba877ee6cb4d
pcre2@10.42-1
no fix listed
1
datafuselabs/databend-query:v1.2.279a936843b85b4
pcre2@10.42-1
no fix listed
1
datalayers/datalayers:v2.2.1017b292079239
pcre2@10.39-3ubuntu0.1
no fix listed
1
datalust/seq-input-gelf:3.0.441-x643de34aed5642
pcre2@10.34-7ubuntu0.1
no fix listed
1
datamate/seafile-professional:11.0.202dd66b722464
pcre2@10.39-3ubuntu0.1
no fix listed
1
dbeaver/cloudbeaver:26.1.287ab86d00f8c
pcre2@10.42-4ubuntu2.1
no fix listed
1
dbgate/dbgate:7.2.3f2dc7423ea88
pcre2@10.42-1
no fix listed
1
dblaci/ubuntu-ssh-rsync:20231020eea697611af4
pcre2@10.39-3ubuntu0.1
no fix listed
1
ddosify/alaz:v0.12.0ea602056d9ce
pcre2@10.42-1
no fix listed
1
ddosify/selfhosted_alaz_backend:1.0.6a43c5155fa1c
pcre2@10.42-1
no fix listed
1
ddosify/selfhosted_backend:3.2.93c11e3182652
pcre2@10.42-1
no fix listed
1
ddosify/selfhosted_backend:2.6.11ac323d52bfb4
pcre2@10.42-1
no fix listed
1
ddosify/selfhosted_hammermanager:2.0.2b796b8c73011
pcre2@10.42-1
no fix listed
1
decisionrules/ai-engine:latestb18f5190807b
pcre2@10.46-1~deb13u2
10.46-1~deb13u3
1
deconzcommunity/deconz:2.29.2062de2362641
pcre2@10.42-1
no fix listed
1
deconzcommunity/deconz:2.26.123c86008d73f
pcre2@10.42-1
no fix listed
1
deepflowce/deepflow-agent:v6.2.6.529332fee7fc2
pcre2@10.39-3ubuntu0.1
no fix listed
1
defactops/defactops-backend:1.0.2307b663c0092a
pcre2@10.42-1
no fix listed
1
defectdojo/defectdojo-django:3.3.3006516f0f62086
pcre2@10.46-1~deb13u2
10.46-1~deb13u3
1
deimosfr/dnsmasq-k8s:1.4.1284c4040fc6d
pcre2@10.46-1~deb13u1
10.46-1~deb13u3
1
dellcloud/category:distributed02fc234353a9
pcre2@10.34-7
no fix listed
1
dellcloud/pages:1.04d2eb25b9225
pcre2@10.34-7
no fix listed
1
dellnoantechnp/cloudeye-exporter:v2.0.316873356c882d
pcre2@10.42-1
no fix listed
1
dellnoantechnp/dingtalk-bot:v1.0.1034000bbcad5
pcre2@10.46-1~deb13u1
10.46-1~deb13u3
1
dependencytrack/apiserver:4.14.21ba4f004e1ec
pcre2@10.46-1~deb13u1
10.46-1~deb13u3
1
dependencytrack/apiserver:latest9008fc010a21
pcre2@10.46-1~deb13u1
10.46-1~deb13u3
1
dependencytrack/frontend:latestea3ee89aeb46
pcre2@10.48-r0
10.49-r0
1
dessalines/lemmy:0.19.2079e9f02c286c
pcre2@10.42-1
no fix listed
1
dessalines/lemmy-ui:0.19.20ee4c620d8e93
pcre2@10.46-1~deb13u1
10.46-1~deb13u3
1
devopsgoofy/k8s-platform:latestad865312099f
pcre2@10.42-1
no fix listed
1
devopshq/artifactory-cleanup:1.0.1830e093bffa91
pcre2@10.42-1
no fix listed
1
dgraph/dgraph:v24.1.4b57fa31f9b7f
pcre2@10.42-4ubuntu2.1
no fix listed
1
dgraziotin/nginx-webdav-nononsense:1.23.138f2de42bed0
pcre2@10.34-7
no fix listed
1
dgtlmoon/sockpuppetbrowser:latest1d8f72d2ce20
pcre2@10.42-1
no fix listed
1
digitalist/matomo:5.12.0bc4aeeaea769
pcre2@10.47-r1
10.49-r0
1
digitalocean/ceph_exporter:latest3ba058e9a48d
pcre2@10.34-7ubuntu0.1
no fix listed
1
diygod/rsshub:latest22845ada2f14
pcre2@10.46-1~deb13u2
10.46-1~deb13u3
1
diygod/rsshub:2025-11-097a6312cac0d5
pcre2@10.42-1
no fix listed
1
djjudas21/alertify:0.1.0ba22be670c37
pcre2@10.42-1
no fix listed
1
dobtc/bitcoin:25.1a870f7cb1105
pcre2@10.42-1
no fix listed
1
docmost/docmost:0.96.0b56947fcfd08
pcre2@10.46-1~deb13u1
10.46-1~deb13u3
1
docuseal/docuseal:3.3.06b12e739c3c7
pcre2@10.48-r0
10.49-r0
1
dokuwiki/dokuwiki:2025-05-14af08ecfdda239
pcre2@10.45-1
10.46-1~deb13u3
1
dolibarr/dolibarr:24.0.069ec52e3b7ef
pcre2@10.42-1
no fix listed
1
dolibarr/dolibarr:22.0.47ad88fc9b13c
pcre2@10.42-1
no fix listed
1
domainmod/domainmod:4.23.04017bfe4c597
pcre2@10.42-1
no fix listed
1
dongjiang1989/lxcfs:v6.0.34bf9ae391948
pcre2@10.34-7ubuntu0.1
no fix listed
1

syft 1.42.1 · advisories as of 3 Oct 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.