CVE-2026-103111
HighAdvisory
Published 30 Sept 2026In the index since 1 Oct 2026
- Severity
- High
- worst across findings
- CVSS
- 7.6
- base score, highest
- EPSS
- 0.002
- 10th percentile
- CISA KEV
- Not listed
- no confirmed exploitation
- Charts affected
- 2,644
- of 17,985 indexed, latest versions
- Container images
- 2,586
- deployed by those charts
- Fix available
- 2 of 3
- affected packages
CVE-2026-103111 affecting package pcre2 10.48-1
Carried by container images the latest versions of 2,644 of 17,985 indexed charts deploy, on 2,586 images.
| Affected package | Affected versions | Fixed in | Images |
|---|---|---|---|
| pcre2deb | 10.21-1, 10.34-7, 10.34-7ubuntu0.1, 10.39-3+ubuntu20.04.1+deb.sury.org+2+13 more | 10.46-1~deb13u3 | 2,396 |
| pcre2apk | 10.47-r0, 10.47-r1, 10.48-r0 | 10.49-r0 | 183 |
| pcre2rpm | 10.42-3.azl3 | no fix listed | 7 |
- OSV records
- ALPINE-CVE-2026-103111AZL-105119DEBIAN-CVE-2026-103111ECHO-bf42-43c6-45fdUBUNTU-CVE-2026-103111
- Trending
- Rank 1 in indexed charts, since 1 Oct 2026. See the ranking →
Charts affected
2,644 by stars
| Chart | Latest | Affected images | Radar Score |
|---|---|---|---|
| hello-worldhello-world-pponyVerified publisher | 0.3.0 | 1 of 1See more | 6,194 |
| my_web1helm-chart-by-piyush | 0.1.0 | 1 of 1See more | 1,441 |
| jenkinshelm-chart-for-jenkinsVerified publisher | 1.0.0 | 1 of 1See more | 2,887 |
| pageshelm-chart-repos-camden | 1.0.0 | 1 of 3See more | 20,800 |
| esphomehelm-chart-roeiVerified publisher | 2025.3.0 | 1 of 1See more | 6,475 |
| home-assistant-matter-hubhelm-chart-roeiVerified publisher | 3.0.2 | 1 of 1See more | 4,187 |
| nginx-charthelm-chart-sample-app | 0.1.0 | 1 of 1See more | 4,733 |
| kube-downscalerhelm-charts-nr | 0.7.6 | 1 of 1See more | 4,613 |
| locusthelm-charts-nr | 0.32.4 | 1 of 1See more | 3,061 |
| node-local-dnshelm-charts-nr | 2.1.4 | 1 of 1See more | 2,437 |
| node-problem-detectorhelm-charts-nr | 2.3.17 | 1 of 1See more | 2,596 |
| supersethelm-charts-nr | 1.1.3 | 1 of 1See more | 2,638 |
| hello-world-charthelm-chart-test-hello-world | 0.1.0 | 1 of 1See more | 1,836 |
| mywebhelmchartwebapp | 0.0.5 | 1 of 1See more | 1,441 |
| my-apphelm-demo8564 | 0.2.7 | 1 of 2See more | 1,836 |
| chart-bookhelm-deploy-book | 0.1.0 | 1 of 3See more | 9,568 |
| helmfile-gitops-agenthelmfile-gitops-agentVerified publisher | 1.1.99 | 1 of 3See more | 1,646 |
| affinehelmforgeVerified publisher | 1.0.1 | 3 of 3See more | 4,411 |
| alfiohelmforgeVerified publisher | 1.2.12 | 1 of 3See more | 2,040 |
| apachehelmforgeVerified publisher | 1.0.6 | 1 of 1See more | 1,441 |
| appwritehelmforgeVerified publisher | 2.0.2 | 4 of 5See more | 4,875 |
| archiveboxhelmforgeVerified publisher | 1.1.13 | 1 of 1See more | 5,691 |
| atuinhelmforgeVerified publisher | 1.0.0 | 1 of 1See more | 1,807 |
| automatischhelmforgeVerified publisher | 1.3.8 | 2 of 4See more | 5,937 |
| bentopdfhelmforgeVerified publisher | 1.0.0 | 1 of 1See more | 234 |
| booklorehelmforgeVerified publisher | 2.0.2 | 1 of 3See more | 2,116 |
| castopodhelmforgeVerified publisher | 1.2.9 | 2 of 3See more | 9,910 |
| changedetectionhelmforgeVerified publisher | 1.1.18 | 1 of 1See more | 2,901 |
| chiefonboardinghelmforgeVerified publisher | 1.1.15 | 2 of 3See more | 7,841 |
| ckanhelmforgeVerified publisher | 1.3.9 | 4 of 6See more | 10,398 |
| clickhousehelmforgeVerified publisher | 2.0.4 | 1 of 1See more | 1,870 |
| countlyhelmforgeVerified publisher | 1.2.8 | 2 of 3See more | 75,510 |
| dawarichhelmforgeVerified publisher | 1.0.2 | 4 of 4See more | 11,509 |
| discount-bandithelmforgeVerified publisher | 2.0.9 | 1 of 3See more | 32,851 |
| druidhelmforgeVerified publisher | 1.3.6 | 3 of 4See more | 8,993 |
| drupalhelmforgeVerified publisher | 1.2.15 | 1 of 2See more | 3,942 |
| entehelmforgeVerified publisher | 1.0.2 | 2 of 4See more | 4,506 |
| fastmcp-serverhelmforgeVerified publisher | 1.7.4 | 1 of 1See more | 3,790 |
| generichelmforgeVerified publisher | 3.1.6 | 1 of 1See more | 1,836 |
| ghosthelmforgeVerified publisher | 1.2.10 | 1 of 3See more | 2,979 |
| giteahelmforgeVerified publisher | 1.1.21 | 1 of 1See more | 663 |
| heimdallhelmforgeVerified publisher | 1.1.14 | 1 of 1See more | 213 |
| hermes-agenthelmforgeVerified publisher | 1.0.1 | 1 of 1See more | 6,273 |
| homarrhelmforgeVerified publisher | 1.2.11 | 1 of 1See more | 643 |
| hoppscotchhelmforgeVerified publisher | 1.1.12 | 1 of 2See more | 1,991 |
| immichhelmforgeVerified publisher | 1.2.9 | 4 of 5See more | 12,159 |
| jenkinshelmforgeVerified publisher | 1.0.9 | 1 of 1See more | 2,887 |
| jupyterhubhelmforgeVerified publisher | 1.0.6 | 1 of 3See more | 6,029 |
| komgahelmforgeVerified publisher | 1.4.16 | 1 of 1See more | 35,379 |
| listmonkhelmforgeVerified publisher | 1.1.14 | 1 of 3See more | 2,508 |
Container images carrying it
2,586 by charts deploying them
A fixed version is listed for 2 of the 3 affected packages.
| Container image | Digest | Package | Fixed in | Used by |
|---|---|---|---|---|
| speckle/ | 687f43ab16f3 | pcre2 | no fix listed | 1 |
| speckle/ | 89a5872375f9 | pcre2 | no fix listed | 1 |
| speckle/ | bf6a501b2210 | pcre2 | no fix listed | 1 |
| speckle/ | e8413f57b327 | pcre2 | no fix listed | 1 |
| spy86/ | ea649101b9fb | pcre2 | no fix listed | 1 |
| sslhep/ | c935e123030d | pcre2 | 10.46-1~deb13u3 | 1 |
| sslhep/ | 7827e689caa5 | pcre2 | 10.46-1~deb13u3 | 1 |
| sslhep/ | 2d6843be2d8d | pcre2 | 10.46-1~deb13u3 | 1 |
| sslhep/ | 96805be717ff | pcre2 | 10.46-1~deb13u3 | 1 |
| sslhep/ | 1494a81a474b | pcre2 | 10.46-1~deb13u3 | 1 |
| sslhep/ | f7faf8c6c3e4 | pcre2 | 10.46-1~deb13u3 | 1 |
| sslhep/ | bd738c952e72 | pcre2 | 10.46-1~deb13u3 | 1 |
| sslhep/ | 23a80e40ab18 | pcre2 | 10.46-1~deb13u3 | 1 |
| sslhep/ | 9a9fb17458f1 | pcre2 | 10.46-1~deb13u3 | 1 |
| stackstorm/ | 88235ba70cad | pcre2 | no fix listed | 1 |
| stackstorm/ | 6f56d239d280 | pcre2 | no fix listed | 1 |
| stackstorm/ | 33ecfda16608 | pcre2 | no fix listed | 1 |
| stackstorm/ | 4e3f8c7ca52d | pcre2 | no fix listed | 1 |
| stackstorm/ | f190a6212195 | pcre2 | no fix listed | 1 |
| stackstorm/ | 259503496ff9 | pcre2 | no fix listed | 1 |
| stackstorm/ | b1de2055c362 | pcre2 | no fix listed | 1 |
| stackstorm/ | b1a338f64773 | pcre2 | no fix listed | 1 |
| stackstorm/ | 1c8904a3bf67 | pcre2 | no fix listed | 1 |
| stackstorm/ | 1bf35bfaf00c | pcre2 | no fix listed | 1 |
| stackstorm/ | 09989a26c8b7 | pcre2 | no fix listed | 1 |
| stackstorm/ | 19fdfffdbba8 | pcre2 | no fix listed | 1 |
| stalwartlabs/ | 25001929f36a | pcre2 | 10.46-1~deb13u3 | 1 |
| stalwartlabs/ | dcf575db2d53 | pcre2 | 10.46-1~deb13u3 | 1 |
| stashapp/ | 24dbd7607174 | pcre2 | no fix listed | 1 |
| stashapp/ | a534c8afdf39 | pcre2 | no fix listed | 1 |
| statcan/ | 3921305425b8 | pcre2 | no fix listed | 1 |
| statusim/ | 6ccd9d382885 | pcre2 | no fix listed | 1 |
| steamcmd/ | 79cd766328de | pcre2 | no fix listed | 1 |
| stnsmith/ | e448ab346cb3 | pcre2 | 10.49-r0 | 1 |
| strangebee/ | a7f7b05fba24 | pcre2 | no fix listed | 1 |
| streamnative/ | 11bceacec8fb | pcre2 | no fix listed | 1 |
| structurizr/ | 4b5ffb5119c8 | pcre2 | no fix listed | 1 |
| substratusai/ | 61695be635eb | pcre2 | no fix listed | 1 |
| supabase/ | 2781daf92394 | pcre2 | no fix listed | 1 |
| supabase/ | eff9c554d649 | pcre2 | no fix listed | 1 |
| supabase/ | a82f96c8845c | pcre2 | 10.46-1~deb13u3 | 1 |
| supabase/ | a84cc713585e | pcre2 | no fix listed | 1 |
| supabase/ | d0a96973e9f1 | pcre2 | no fix listed | 1 |
| supabase/ | 7a6d995635f7 | pcre2 | 10.46-1~deb13u3 | 1 |
| supabase/ | aa1c92c0cf32 | pcre2 | no fix listed | 1 |
| supabase/ | d207e6e23ad3 | pcre2 | no fix listed | 1 |
| supabase/ | 26d8070c55e9 | pcre2 | no fix listed | 1 |
| supabase/ | 606aca9fdaa7 | pcre2 | no fix listed | 1 |
| supabase/ | fdb56cfa1705 | pcre2 | no fix listed | 1 |
| supporttools/ | 03fdbc9e708e | pcre2 | no fix listed | 1 |