StackRadar

CVE-2026-103111

High

Advisory

Published 30 Sept 2026In the index since 1 Oct 2026
Severity
High
worst across findings
CVSS
7.6
base score, highest
EPSS
0.002
11th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
2,627
of 18,026 indexed, latest versions
Container images
2,612
deployed by those charts
Fix available
2 of 3
affected packages

CVE-2026-103111 affecting package pcre2 10.48-1

Carried by container images the latest versions of 2,627 of 18,026 indexed charts deploy, on 2,612 images.

Affected packageAffected versionsFixed inImages
pcre2deb10.21-1, 10.34-7, 10.34-7ubuntu0.1, 10.39-3+ubuntu20.04.1+deb.sury.org+2+13 more10.42-1+deb12u2, 10.46-1~deb13u32,417
pcre2apk10.47-r0, 10.47-r1, 10.48-r010.49-r0189
pcre2rpm10.42-3.azl3no fix listed6
OSV records
ALPINE-CVE-2026-103111AZL-105119DEBIAN-CVE-2026-103111ECHO-bf42-43c6-45fdUBUNTU-CVE-2026-103111
Trending
Rank 1 in indexed charts, since 1 Oct 2026. See the ranking →

Charts affected

2,627 by stars
ChartLatestAffected imagesRadar Score

Container images carrying it

2,612 by charts deploying them

A fixed version is listed for 2 of the 3 affected packages.

Container imageDigestPackageFixed inUsed by
supabase/postgres-meta:v0.96.6a84cc713585e
pcre2@10.42-1
10.42-1+deb12u2
1
supabase/postgres-meta:v0.84.2d0a96973e9f1
pcre2@10.42-1
10.42-1+deb12u2
1
supabase/realtime:latest7a6d995635f7
pcre2@10.46-1~deb13u1
10.46-1~deb13u3
1
supabase/realtime:v2.102.3aa1c92c0cf32
pcre2@10.42-1
10.42-1+deb12u2
1
supabase/realtime:v2.33.8d207e6e23ad3
pcre2@10.42-1
10.42-1+deb12u2
1
supabase/studio:20241021-9f9b08326d8070c55e9
pcre2@10.42-1
10.42-1+deb12u2
1
supabase/studio:2026.08.03-sha-022b374606aca9fdaa7
pcre2@10.42-1
10.42-1+deb12u2
1
supabase/studio:latestfdb56cfa1705
pcre2@10.42-1+deb12u1
10.42-1+deb12u2
1
supporttools/website:v132603fdbc9e708e
pcre2@10.42-4ubuntu2.1
no fix listed
1
svix/diom-operator:0.3.085dba8f1caa8
pcre2@10.46-1~deb13u1
10.46-1~deb13u3
1
svtechnmaa/svtech_debuger:v1.0.3a934ffd63d25
pcre2@10.39-3ubuntu0.1
no fix listed
1
svtechnmaa/svtech_grafana:v1.2.21d71314424aa
pcre2@10.34-7ubuntu0.1
no fix listed
1
svtechnmaa/svtech_maxscale:v1.0.3410a25b51f9f
pcre2@10.39-3ubuntu0.1
no fix listed
1
svtechnmaa/svtech_nagvis:v1.2.118394b08e6c3
pcre2@10.42-1
10.42-1+deb12u2
1
svtechnmaa/svtech_rundeck:v1.2.26e368ace0977
pcre2@10.34-7ubuntu0.1
no fix listed
1
swaggerapi/swagger-editor:latestda46e21413cf
pcre2@10.48-r0
10.49-r0
1
swaggerapi/swagger-ui:latest:v5.33.0f9b8432be04e
pcre2@10.48-r0
10.49-r0
1
swimmwatch/cloakbrowser-mcp:1.14.1f6986203a121
pcre2@10.42-1+deb12u1
10.42-1+deb12u2
1
sysadminsmedia/homebox:0.26.056e880b62309
pcre2@10.47-r1
10.49-r0
1
sysnet4admin/colosseum-agg:logbc25b152d88e
pcre2@10.39-3ubuntu0.1
no fix listed
1
sysnet4admin/colosseum-cms:loge74b43c7f492
pcre2@10.42-1
10.42-1+deb12u2
1
sysnet4admin/colosseum-prm:log5802bfcd7fed
pcre2@10.42-1
10.42-1+deb12u2
1
sysnet4admin/colosseum-rwd:log74ded2d92f07
pcre2@10.46-1~deb13u1
10.46-1~deb13u3
1
szurubooru/client:2.5880a53ca446d
pcre2@10.47-r1
10.49-r0
1
tautulli/tautulli:latest670e68dd9efc
pcre2@10.46-1~deb13u1
10.46-1~deb13u3
1
tchiotludo/akhq:0.28.0c2824dc2ae44
pcre2@10.46-1build1
no fix listed
1
technitium/dns-server:15.6.01045db38fd2f
pcre2@10.42-4ubuntu2.1
no fix listed
1
technitium/dns-server:15.5.1b8efe03a5e3b
pcre2@10.42-4ubuntu2.1
no fix listed
1
teknas09/bird-pod:latest12a1fa85c4aa
pcre2@10.42-1
10.42-1+deb12u2
1
tensorflow/serving:latest8a208c232297
pcre2@10.39-3ubuntu0.1
no fix listed
1
tensorzero/gateway:2026.6.0c939db4f27e4
pcre2@10.46-1~deb13u1
10.46-1~deb13u3
1
tensorzero/ui:2026.6.0f2563d54724e
pcre2@10.46-1~deb13u1
10.46-1~deb13u3
1
tenureai/tenure:v1.0.285f5b222df9a5
pcre2@10.46-1~deb13u1+dhi1
10.46-1~deb13u3
1
teslamate/teslamate:4.1.1cc87082e7d67
pcre2@10.46-1~deb13u1
10.46-1~deb13u3
1
thecampagnards/trafficlight-api:main7dca9d973837
pcre2@10.34-7
no fix listed
1
themoah/klag:0.2.187178531ebe86
pcre2@10.42-4ubuntu2.1
no fix listed
1
theradius/loggia:0.463ba348546ec
pcre2@10.42-1
10.42-1+deb12u2
1
thesisrobot/bitcoind:v23.016b368e4d52c
pcre2@10.39-3ubuntu0.1
no fix listed
1
thijsvanloef/palworld-server-docker:v2.7.1401d3eb5c053
pcre2@10.46-1~deb13u1
10.46-1~deb13u3
1
thijsvanloef/palworld-server-docker:v2.5.0b4ac9ee22483
pcre2@10.46-1~deb13u1
10.46-1~deb13u3
1
thingsboard/tbmq-integration-executor:2.4.0b5a9c1addf80
pcre2@10.46-1~deb13u1
10.46-1~deb13u3
1
thingsboard/tbmq-node:2.4.070661025dba5
pcre2@10.46-1~deb13u1
10.46-1~deb13u3
1
thingsboard/tb-postgres:latest2d17e4e36edc
pcre2@10.42-1
10.42-1+deb12u2
1
thomaszy2077/batch:1a271ab8a80bd
pcre2@10.42-1
10.42-1+deb12u2
1
thongngo3301/stakefish:latesta341af5976e3
pcre2@10.42-1
10.42-1+deb12u2
1
tiago2/cap:2.159f5ae4e261e
pcre2@10.46-1~deb13u1
10.46-1~deb13u3
1
tianon/exim4:latestaa8ddf38e160
pcre2@10.46-1~deb13u2
10.46-1~deb13u3
1
tibyandocker/serviceexample:latesta4ad592cea84
pcre2@10.42-1
10.42-1+deb12u2
1
timescale/timescaledb-ha:pg15-latesta8e3322e1cf9
pcre2@10.39-3ubuntu0.1
no fix listed
1
timescale/timescaledb-ha:pg14.6-ts2.9.1-p1cdb9ae118899
pcre2@10.39-3ubuntu0.1
no fix listed
1

syft 1.42.1 · advisories as of 6 Oct 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.