StackRadar

CVE-2026-103111

High

Advisory

Published 30 Sept 2026In the index since 1 Oct 2026
Severity
High
worst across findings
CVSS
7.6
base score, highest
EPSS
0.002
10th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
2,603
of 17,992 indexed, latest versions
Container images
2,552
deployed by those charts
Fix available
2 of 3
affected packages

CVE-2026-103111 affecting package pcre2 10.48-1

Carried by container images the latest versions of 2,603 of 17,992 indexed charts deploy, on 2,552 images.

Affected packageAffected versionsFixed inImages
pcre2deb10.21-1, 10.34-7, 10.34-7ubuntu0.1, 10.39-3+ubuntu20.04.1+deb.sury.org+2+13 more10.42-1+deb12u2, 10.46-1~deb13u32,361
pcre2apk10.47-r0, 10.47-r1, 10.48-r010.49-r0184
pcre2rpm10.42-3.azl3no fix listed7
OSV records
ALPINE-CVE-2026-103111AZL-105119DEBIAN-CVE-2026-103111ECHO-bf42-43c6-45fdUBUNTU-CVE-2026-103111
Trending
Rank 1 in indexed charts, since 1 Oct 2026. See the ranking →

Charts affected

2,603 by stars
ChartLatestAffected imagesRadar Score

Container images carrying it

2,552 by charts deploying them

A fixed version is listed for 2 of the 3 affected packages.

Container imageDigestPackageFixed inUsed by
strangebee/thehive:5.8.0-1a7f7b05fba24
pcre2@10.42-1+deb12u1
10.42-1+deb12u2
1
streamnative/apache-pulsar-grafana-dashboard-k8s:0.0.1611bceacec8fb
pcre2@10.34-7
no fix listed
1
structurizr/onpremises:2025.11.094b5ffb5119c8
pcre2@10.42-4ubuntu2.1
no fix listed
1
substratusai/verba:v0.4.0-baseURL261695be635eb
pcre2@10.42-1
10.42-1+deb12u2
1
supabase/edge-runtime:v1.74.02781daf92394
pcre2@10.42-1
10.42-1+deb12u2
1
supabase/edge-runtime:v1.59.0eff9c554d649
pcre2@10.42-1
10.42-1+deb12u2
1
supabase/logflare:latesta82f96c8845c
pcre2@10.46-1~deb13u1
10.46-1~deb13u3
1
supabase/postgres-meta:v0.96.6a84cc713585e
pcre2@10.42-1
10.42-1+deb12u2
1
supabase/postgres-meta:v0.84.2d0a96973e9f1
pcre2@10.42-1
10.42-1+deb12u2
1
supabase/realtime:latest7a6d995635f7
pcre2@10.46-1~deb13u1
10.46-1~deb13u3
1
supabase/realtime:v2.102.3aa1c92c0cf32
pcre2@10.42-1
10.42-1+deb12u2
1
supabase/realtime:v2.33.8d207e6e23ad3
pcre2@10.42-1
10.42-1+deb12u2
1
supabase/studio:20241021-9f9b08326d8070c55e9
pcre2@10.42-1
10.42-1+deb12u2
1
supabase/studio:2026.08.03-sha-022b374606aca9fdaa7
pcre2@10.42-1
10.42-1+deb12u2
1
supabase/studio:latestfdb56cfa1705
pcre2@10.42-1+deb12u1
10.42-1+deb12u2
1
supporttools/website:v132603fdbc9e708e
pcre2@10.42-4ubuntu2.1
no fix listed
1
svix/diom-operator:0.3.085dba8f1caa8
pcre2@10.46-1~deb13u1
10.46-1~deb13u3
1
svtechnmaa/svtech_debuger:v1.0.3a934ffd63d25
pcre2@10.39-3ubuntu0.1
no fix listed
1
svtechnmaa/svtech_grafana:v1.2.21d71314424aa
pcre2@10.34-7ubuntu0.1
no fix listed
1
svtechnmaa/svtech_maxscale:v1.0.3410a25b51f9f
pcre2@10.39-3ubuntu0.1
no fix listed
1
svtechnmaa/svtech_nagvis:v1.2.118394b08e6c3
pcre2@10.42-1
10.42-1+deb12u2
1
svtechnmaa/svtech_rundeck:v1.2.26e368ace0977
pcre2@10.34-7ubuntu0.1
no fix listed
1
swaggerapi/swagger-editor:latestda46e21413cf
pcre2@10.48-r0
10.49-r0
1
swaggerapi/swagger-ui:latest:v5.33.0f9b8432be04e
pcre2@10.48-r0
10.49-r0
1
swimmwatch/cloakbrowser-mcp:1.14.1f6986203a121
pcre2@10.42-1+deb12u1
10.42-1+deb12u2
1
sysadminsmedia/homebox:0.26.056e880b62309
pcre2@10.47-r1
10.49-r0
1
sysnet4admin/colosseum-agg:logbc25b152d88e
pcre2@10.39-3ubuntu0.1
no fix listed
1
sysnet4admin/colosseum-cms:loge74b43c7f492
pcre2@10.42-1
10.42-1+deb12u2
1
sysnet4admin/colosseum-prm:log5802bfcd7fed
pcre2@10.42-1
10.42-1+deb12u2
1
sysnet4admin/colosseum-rwd:log74ded2d92f07
pcre2@10.46-1~deb13u1
10.46-1~deb13u3
1
szurubooru/client:2.5880a53ca446d
pcre2@10.47-r1
10.49-r0
1
tautulli/tautulli:latest670e68dd9efc
pcre2@10.46-1~deb13u1
10.46-1~deb13u3
1
tchiotludo/akhq:0.28.0c2824dc2ae44
pcre2@10.46-1build1
no fix listed
1
technitium/dns-server:15.5.1b8efe03a5e3b
pcre2@10.42-4ubuntu2.1
no fix listed
1
teknas09/bird-pod:latest12a1fa85c4aa
pcre2@10.42-1
10.42-1+deb12u2
1
tensorflow/serving:latest8a208c232297
pcre2@10.39-3ubuntu0.1
no fix listed
1
tensorzero/gateway:2026.6.0c939db4f27e4
pcre2@10.46-1~deb13u1
10.46-1~deb13u3
1
tensorzero/ui:2026.6.0f2563d54724e
pcre2@10.46-1~deb13u1
10.46-1~deb13u3
1
tenureai/tenure:v1.0.285f5b222df9a5
pcre2@10.46-1~deb13u1+dhi1
10.46-1~deb13u3
1
teslamate/teslamate:4.1.1cc87082e7d67
pcre2@10.46-1~deb13u1
10.46-1~deb13u3
1
thecampagnards/trafficlight-api:main7dca9d973837
pcre2@10.34-7
no fix listed
1
themoah/klag:0.2.187178531ebe86
pcre2@10.42-4ubuntu2.1
no fix listed
1
theradius/loggia:0.463ba348546ec
pcre2@10.42-1
10.42-1+deb12u2
1
thesisrobot/bitcoind:v23.016b368e4d52c
pcre2@10.39-3ubuntu0.1
no fix listed
1
thijsvanloef/palworld-server-docker:v2.7.1401d3eb5c053
pcre2@10.46-1~deb13u1
10.46-1~deb13u3
1
thijsvanloef/palworld-server-docker:v2.5.0b4ac9ee22483
pcre2@10.46-1~deb13u1
10.46-1~deb13u3
1
thingsboard/tbmq-integration-executor:2.4.0b5a9c1addf80
pcre2@10.46-1~deb13u1
10.46-1~deb13u3
1
thingsboard/tbmq-node:2.4.070661025dba5
pcre2@10.46-1~deb13u1
10.46-1~deb13u3
1
thingsboard/tb-postgres:latest2d17e4e36edc
pcre2@10.42-1
10.42-1+deb12u2
1
thomaszy2077/batch:1a271ab8a80bd
pcre2@10.42-1
10.42-1+deb12u2
1

syft 1.42.1 · advisories as of 4 Oct 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.