StackRadar

CVE-2026-103111

High

Advisory

Published 30 Sept 2026In the index since 1 Oct 2026
Severity
High
worst across findings
CVSS
7.6
base score, highest
EPSS
0.002
11th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
2,627
of 18,026 indexed, latest versions
Container images
2,612
deployed by those charts
Fix available
2 of 3
affected packages

CVE-2026-103111 affecting package pcre2 10.48-1

Carried by container images the latest versions of 2,627 of 18,026 indexed charts deploy, on 2,612 images.

Affected packageAffected versionsFixed inImages
pcre2deb10.21-1, 10.34-7, 10.34-7ubuntu0.1, 10.39-3+ubuntu20.04.1+deb.sury.org+2+13 more10.42-1+deb12u2, 10.46-1~deb13u32,417
pcre2apk10.47-r0, 10.47-r1, 10.48-r010.49-r0189
pcre2rpm10.42-3.azl3no fix listed6
OSV records
ALPINE-CVE-2026-103111AZL-105119DEBIAN-CVE-2026-103111ECHO-bf42-43c6-45fdUBUNTU-CVE-2026-103111
Trending
Rank 1 in indexed charts, since 1 Oct 2026. See the ranking →

Charts affected

2,627 by stars
ChartLatestAffected imagesRadar Score

Container images carrying it

2,612 by charts deploying them

A fixed version is listed for 2 of the 3 affected packages.

Container imageDigestPackageFixed inUsed by
gcr.io/datadoghq/cluster-agent:7.61.06efe04ba4e06
pcre2@10.42-4ubuntu2
no fix listed
1
gcr.io/datadoghq/observability-pipelines-worker:2.23.165a4ff7952cd
pcre2@10.42-4ubuntu2.1
no fix listed
1
gcr.io/datadoghq/private-action-runner:v1.21.05f5918f843a4
pcre2@10.42-4ubuntu2.1
no fix listed
1
gcr.io/istio-release/pilot:1.11.1c552478f8f11
pcre2@10.34-7
no fix listed
1
gcr.io/istio-release/proxyv2:1.11.19538fabe49fd
pcre2@10.34-7
no fix listed
1
gcr.io/istio-testing/install-cni:latestec6f9ea5757b
pcre2@10.42-4ubuntu2.1
no fix listed
1
gcr.io/istio-testing/operator:latest8d4576f7b98f
pcre2@10.42-4ubuntu2
no fix listed
1
gcr.io/kubecost1/cost-model:prod-1.108.1852f7923fad3
pcre2@10.39-3ubuntu0.1
no fix listed
1
gcr.io/ml-pipeline/api-server:2.3.039661bd823e8
pcre2@10.42-1
10.42-1+deb12u2
1
gcr.io/ml-pipeline/metadata-envoy:2.3.0e8e263a919ff
pcre2@10.34-7ubuntu0.1
no fix listed
1
gcr.io/ml-pipeline/metadata-writer:2.3.09bcfd2abc361
pcre2@10.42-1
10.42-1+deb12u2
1
gcr.io/rotationalio-habanero/imgtag:89ec287a534a3170d03
pcre2@10.42-1
10.42-1+deb12u2
1
gcr.io/tfx-oss-public/ml_metadata_store_server:1.14.051404ef4419c
pcre2@10.34-7ubuntu0.1
no fix listed
1
ghcr.io/abcdesktopio/console:4.44b8e915e8c3a
pcre2@10.48-r0
10.49-r0
1
ghcr.io/abcdesktopio/mongo:safe8.09a1f085b0530
pcre2@10.42-4ubuntu2.1
no fix listed
1
ghcr.io/abcdesktopio/oc.nginx:4.4.14aec9ad6aa65
pcre2@10.48-r0
10.49-r0
1
ghcr.io/abcdesktopio/oc.speedtest:4.4763cc0d3a176
pcre2@10.48-r0
10.49-r0
1
ghcr.io/abcdesktopio/pyos:4.4.alpine_latest5c43e3d66d2e
pcre2@10.48-r0
10.49-r0
1
ghcr.io/adnoctem/lhci:1.0.119553e4b4033
pcre2@10.42-1
10.42-1+deb12u2
1
ghcr.io/aeharding/voyager:latest8e9d9ed499e3
pcre2@10.46-1~deb13u1
10.46-1~deb13u3
1
ghcr.io/aetrius/msockperf-client/msockperf-client:main820af919c5e2
pcre2@10.42-4ubuntu2
no fix listed
1
ghcr.io/aetrius/msockperf-server/msockperf-server:main46ae4ea003e0
pcre2@10.42-4ubuntu2
no fix listed
1
ghcr.io/afairgiant/medikeep:v0.71.0086579173033
pcre2@10.42-1+deb12u1
10.42-1+deb12u2
1
ghcr.io/aklivity/zilla:2.4.78e375ed29ecd
pcre2@10.39-3ubuntu0.1
no fix listed
1
ghcr.io/alethic/auth0-operator-image:1.4.122468990a8521
pcre2@10.42-4ubuntu2.1
no fix listed
1
ghcr.io/alexanderwanyoike/the0/runtime:1.16.1f4c4aad1da85
pcre2@10.42-4ubuntu2.1
no fix listed
1
ghcr.io/alexmorbo/dell_idrac_fan_controller:v0.1.6-1d110504d551d
pcre2@10.42-4ubuntu2
no fix listed
1
ghcr.io/almarklein/timetagger:v26.1.3-nonroot18a81afcb249
pcre2@10.42-1
10.42-1+deb12u2
1
ghcr.io/alpineworks/katalog-migrations:v1.0.562c44a384e13
pcre2@10.42-1
10.42-1+deb12u2
1
ghcr.io/amoylab/unla/mcp-gateway:latest960cb3cfce77
pcre2@10.39-3ubuntu0.1
no fix listed
1
ghcr.io/amoylab/unla/web:latesteac1df1c5e66
pcre2@10.42-1
10.42-1+deb12u2
1
ghcr.io/amruthpillai/reactive-resume:v5.3.0c487ec5edcfe
pcre2@10.42-1
10.42-1+deb12u2
1
ghcr.io/analogj/scrutiny:master-omnibus18689773150d
pcre2@10.42-1
10.42-1+deb12u2
1
ghcr.io/analogj/scrutiny:v0.9.2-web71be54e99608
pcre2@10.46-1~deb13u1
10.46-1~deb13u3
1
ghcr.io/angelnu/tt-rss:2.0.100809fb02162f151
pcre2@10.46-1build1
no fix listed
1
ghcr.io/angelscloud/prometheus-optimizer:latest744bc929a579
pcre2@10.42-1
10.42-1+deb12u2
1
ghcr.io/antoniolago/vaultwarden-kubernetes-secrets:0.0.0-main13e267ad7d94
pcre2@10.42-4ubuntu2.1
no fix listed
1
ghcr.io/apache/flink-kubernetes-operator:c703255e9c2ce635b89
pcre2@10.39-3ubuntu0.1
no fix listed
1
ghcr.io/appscode/b3:v2026.9.114b5993768740
pcre2@10.42-1+deb12u1
10.42-1+deb12u2
1
ghcr.io/appscode/billing-ui:2.5.01cb58bc2fa4f
pcre2@10.48-r0
10.49-r0
1
ghcr.io/appscode/catalog-manager:v0.14.091cf84624081
pcre2@10.48-r0
10.49-r0
1
ghcr.io/appscode/cattleset:v0.0.145554a03e448
pcre2@10.47-r1
10.49-r0
1
ghcr.io/appscode/cluster-presets:v0.0.128fbdd2479645
pcre2@10.47-r1
10.49-r0
1
ghcr.io/appscode/cluster-ui:2.5.01ccb903404ac
pcre2@10.48-r0
10.49-r0
1
ghcr.io/appscode/csi-driver-cacerts:v0.6.0ab213b156017
pcre2@10.42-1
10.42-1+deb12u2
1
ghcr.io/appscode/external-dns-operator:v0.4.05605f97e636d
pcre2@10.47-r1
10.49-r0
1
ghcr.io/appscode/gotenberg:8.25f9104080d9a7
pcre2@10.46-1~deb13u1
10.46-1~deb13u3
1
ghcr.io/appscode/inbox-agent:v0.0.6f630e47772c9
pcre2@10.48-r0
10.49-r0
1
ghcr.io/appscode/inbox-server:MailetGroup4a2824296412
pcre2@10.39-3ubuntu0.1
no fix listed
1
ghcr.io/appscode/inbox-ui:0.0.5d6d77659b12a
pcre2@10.48-r0
10.49-r0
1

syft 1.42.1 · advisories as of 6 Oct 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.