CVE-2026-103111
HighAdvisory
Published 30 Sept 2026In the index since 1 Oct 2026
- Severity
- High
- worst across findings
- CVSS
- 7.6
- base score, highest
- EPSS
- 0.002
- 10th percentile
- CISA KEV
- Not listed
- no confirmed exploitation
- Charts affected
- 2,615
- of 17,985 indexed, latest versions
- Container images
- 2,548
- deployed by those charts
- Fix available
- 2 of 3
- affected packages
CVE-2026-103111 affecting package pcre2 10.48-1
Carried by container images the latest versions of 2,615 of 17,985 indexed charts deploy, on 2,548 images.
| Affected package | Affected versions | Fixed in | Images |
|---|---|---|---|
| pcre2deb | 10.21-1, 10.34-7, 10.34-7ubuntu0.1, 10.39-3+ubuntu20.04.1+deb.sury.org+2+13 more | 10.46-1~deb13u3 | 2,371 |
| pcre2apk | 10.47-r0, 10.47-r1, 10.48-r0 | 10.49-r0 | 170 |
| pcre2rpm | 10.42-3.azl3 | no fix listed | 7 |
- OSV records
- ALPINE-CVE-2026-103111DEBIAN-CVE-2026-103111UBUNTU-CVE-2026-103111AZL-105119ECHO-bf42-43c6-45fd
- Trending
- Rank 1 in indexed charts, since 1 Oct 2026. See the ranking →
Charts affected
2,615 by stars
| Chart | Latest | Affected images | Radar Score |
|---|---|---|---|
| meshery-operatormesheryOfficialVerified publisher | 1.0.70 | 1 of 2See more | 2,578 |
| mongooseimmongoose | 0.4.11 | 1 of 1See more | 1,469 |
| jira-softwaremoxVerified publisher | 2.7.1 | 1 of 3See more | 9,015 |
| nginx-ingressnginx-ingress-chartVerified publisher | 0.0.0-edge | 1 of 1See more | 1,395 |
| cyberchefobeoneVerified publisher | 2.0.3 | 1 of 1See more | 389 |
| technitium-dnsserverobeoneVerified publisher | 1.13.2 | 1 of 1See more | 719 |
| opencostopencost-ociOfficialVerified publisher | 2.5.32 | 1 of 2See more | 220 |
| passboltpassbolt | 2.2.0 | 6 of 6See more | 12,916 |
| reposilitereposilite | 1.4.2 | 1 of 1See more | 1,208 |
| selenium-gridselenium-grid | 0.59.1 | 3 of 4See more | 8,646 |
| mssqlserver-2022simcube | 1.2.3 | 1 of 1See more | 2,928 |
| swo-k8s-collectorsolarwindsOfficialVerified publisher | 5.3.0 | 1 of 3See more | 2,602 |
| thehivestrangebee-helmOfficialVerified publisher | 1.1.0 | 4 of 7See more | 17,667 |
| uffizzi-controlleruffizzi-controller | 2.4.6 | 1 of 11See more | 14,728 |
| druidwiremindVerified publisher | 1.22.1 | 1 of 3See more | 8,280 |
| abcdesktopabcdesktopOfficialVerified publisher | 4.4.13 | 5 of 9See more | 1,067 |
| minecraft-overvieweralphani-helm-chartsVerified publisher | 0.1.0 | 1 of 3See more | 3,666 |
| photoprismandrenarchyVerified publisher | 8.15.0 | 1 of 1See more | 48,496 |
| kubedbappscodeVerified publisher | 2026.7.10 | 1 of 8See more | 4,929 |
| openvpn-asas-helm-chartOfficialVerified publisher | 0.2.1 | 1 of 1See more | 3,150 |
| bambooatlassian-data-centerVerified publisher | 2.0.15 | 1 of 2See more | 37,280 |
| baserowbaserow-chartVerified publisher | 1.0.56 | 5 of 6See more | 19,214 |
| fadicetic | 0.3.1 | 2 of 25See more | 135,080 |
| freshrsschristianhuthVerified publisher | 2.18.4 | 1 of 1See more | 176 |
| headwind-mdmchristianhuthVerified publisher | 5.11.2 | 2 of 2See more | 6,399 |
| cloudquerycloudquery | 39.0.4 | 1 of 1See more | 576 |
| dolibarrcowboysysopVerified publisher | 9.0.3 | 2 of 3See more | 10,156 |
| daskhubdask | 2024.1.1 | 1 of 9See more | 15,076 |
| seafiledatamateVerified publisher | 0.6.0 | 4 of 6See more | 82,487 |
| dialdialOfficialVerified publisher | 8.0.0 | 2 of 4See more | 2,299 |
| jellyfindjjudas21Verified publisher | 4.0.8 | 1 of 1See more | 2,932 |
| plexgabe565Verified publisher | 0.5.1 | 1 of 1See more | 2,774 |
| geonode-k8sgeonode-k8sVerified publisher | 2.0.0 | 4 of 10See more | 61,375 |
| gitops-promotergitops-promoterOfficialVerified publisher | 0.21.0 | 1 of 2See more | 3,264 |
| glpiglpi-conteiner | 0.1.0 | 3 of 3See more | 12,233 |
| mariadbgroundhog2k | 4.44.0 | 1 of 1See more | 3,198 |
| mongodbgroundhog2k | 0.8.3 | 1 of 1See more | 1,023 |
| haproxy-ingresshaproxy-ingressVerified publisher | 0.16.2 | 1 of 1See more | 10 |
| heimdallheimdallOfficialVerified publisher | 3.3.3 | 1 of 2See more | 2,359 |
| dolibarrhelmforgeVerified publisher | 1.2.19 | 1 of 3See more | 4,403 |
| karakeephelmforgeVerified publisher | 1.2.9 | 2 of 3See more | 11,108 |
| openhabhelmforgeVerified publisher | 1.2.0 | 1 of 1See more | 4,299 |
| postgresqlhelmforgeVerified publisher | 2.0.5 | 1 of 1See more | 1,446 |
| umamihelmforgeVerified publisher | 2.3.4 | 1 of 3See more | 1,673 |
| openctihelm-openctiVerified publisher | 3.0.14 | 1See more | — |
| hertzbeathertzbeatOfficialVerified publisher | 1.8.1 | 3 of 4See more | 15,440 |
| infrahubinfrahubVerified publisher | 4.33.4 | 4See more | — |
| jenkinsjenkins-helm-chartVerified publisher | 0.1.0 | 1 of 1See more | 2,846 |
| plexk8s-home-lab-repo | 7.3.1 | 1 of 1See more | 1,896 |
| kubeflowkubeflow | 1.6.2 | 2 of 45See more | 164,427 |
Container images carrying it
2,548 by charts deploying them
A fixed version is listed for 2 of the 3 affected packages.
| Container image | Digest | Package | Fixed in | Used by |
|---|---|---|---|---|
| mediagis/ | c15e941485ef | pcre2 | no fix listed | 1 |
| mediagis/ | d0eae7b51374 | pcre2 | no fix listed | 1 |
| memgraph/ | ecdf7faea3f7 | pcre2 | 10.46-1~deb13u3 | 1 |
| merlos/ | a38fc7e09ed7 | pcre2 | no fix listed | 1 |
| microslac/ | 5c1eb1f5c64d | pcre2 | no fix listed | 1 |
| microslac/ | 1b24afcd71ff | pcre2 | no fix listed | 1 |
| microslac/ | 0f75997fcbe5 | pcre2 | no fix listed | 1 |
| microslac/ | 216ea6832a56 | pcre2 | no fix listed | 1 |
| middlewareeng/ | 747d880812f1 | pcre2 | no fix listed | 1 |
| milvusdb/ | fededb2f2d63 | pcre2 | no fix listed | 1 |
| milvusdb/ | a3a55e1c1497 | pcre2 | no fix listed | 1 |
| mindsdb/ | 163011c09299 | pcre2 | 10.46-1~deb13u3 | 1 |
| mintproject/ | 83aade2c1855 | pcre2 | no fix listed | 1 |
| mintproject/ | 02260d20a21f | pcre2 | no fix listed | 1 |
| miqm/ | c5c211717d9b | pcre2 | no fix listed | 1 |
| mlikiowa/ | 2cc70b45244a | pcre2 | no fix listed | 1 |
| mockserver/ | b8426e0b3c80 | pcre2 | no fix listed | 1 |
| moodlehq/ | 922af5166835 | pcre2 | no fix listed | 1 |
| moreillon/ | d7d4a5463525 | pcre2 | no fix listed | 1 |
| moreillon/ | e418cc694bd5 | pcre2 | no fix listed | 1 |
| moreillon/ | e8fd856e593d | pcre2 | no fix listed | 1 |
| moreillon/ | 3caa8f710ee0 | pcre2 | no fix listed | 1 |
| moreillon/ | 5f0a38498271 | pcre2 | 10.46-1~deb13u3 | 1 |
| moreillon/ | 6597e6b98d21 | pcre2 | no fix listed | 1 |
| moreillon/ | d2ee0423b797 | pcre2 | no fix listed | 1 |
| mshanley80/ | 5b189a70c0fb | pcre2 | no fix listed | 1 |
| muhammedgamal/ | 74b4cd69b6fa | pcre2 | no fix listed | 1 |
| murtazashah46/ | 4d11726cf803 | pcre2 | no fix listed | 1 |
| mvance/ | 4bf67b567f39 | pcre2 | no fix listed | 1 |
| mvance/ | 76906da36d18 | pcre2 | no fix listed | 1 |
| n3uronhub/ | 423a0bdd9cb9 | pcre2 | 10.46-1~deb13u3 | 1 |
| n8nio/ | 9f693fd55655 | pcre2 | 10.49-r0 | 1 |
| n8nio/ | cfe2704ff858 | pcre2 | 10.49-r0 | 1 |
| ncsa/ | 0b738bbc8d70 | pcre2 | 10.46-1~deb13u3 | 1 |
| nelssec/ | 5e471f0cdeaa | pcre2 | no fix listed | 1 |
| netapp/ | cad26cd945d1 | pcre2 | 10.46-1~deb13u3 | 1 |
| netbirdio/ | 0c9994b393ea | pcre2 | no fix listed | 1 |
| netbirdio/ | 3c3bed2a982c | pcre2 | no fix listed | 1 |
| netbirdio/ | 52682e5f48f9 | pcre2 | no fix listed | 1 |
| netbirdio/ | b0adc4ad4ec6 | pcre2 | no fix listed | 1 |
| netbirdio/ | ac6317722f6f | pcre2 | no fix listed | 1 |
| netbirdio/ | d1da0c0179c9 | pcre2 | no fix listed | 1 |
| netboxcommunity/ | 3d652dca5351 | pcre2 | no fix listed | 1 |
| netboxcommunity/ | 91b823a05cb5 | pcre2 | no fix listed | 1 |
| nethermind/ | 15517708c3b6 | pcre2 | no fix listed | 1 |
| nethermind/ | 1b6b01419de4 | pcre2 | no fix listed | 1 |
| nethermind/ | 93e57917371a | pcre2 | no fix listed | 1 |
| nethermind/ | aeca3b55bda5 | pcre2 | no fix listed | 1 |
| netrisai/ | c271efe749d0 | pcre2 | no fix listed | 1 |
| netrisai/ | 53178bf173c2 | pcre2 | no fix listed | 1 |