StackRadar

CVE-2026-103111

High

Advisory

Published 30 Sept 2026In the index since 1 Oct 2026
Severity
High
worst across findings
CVSS
7.6
base score, highest
EPSS
0.002
11th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
2,627
of 18,026 indexed, latest versions
Container images
2,612
deployed by those charts
Fix available
2 of 3
affected packages

CVE-2026-103111 affecting package pcre2 10.48-1

Carried by container images the latest versions of 2,627 of 18,026 indexed charts deploy, on 2,612 images.

Affected packageAffected versionsFixed inImages
pcre2deb10.21-1, 10.34-7, 10.34-7ubuntu0.1, 10.39-3+ubuntu20.04.1+deb.sury.org+2+13 more10.42-1+deb12u2, 10.46-1~deb13u32,417
pcre2apk10.47-r0, 10.47-r1, 10.48-r010.49-r0189
pcre2rpm10.42-3.azl3no fix listed6
OSV records
ALPINE-CVE-2026-103111AZL-105119DEBIAN-CVE-2026-103111ECHO-bf42-43c6-45fdUBUNTU-CVE-2026-103111
Trending
Rank 1 in indexed charts, since 1 Oct 2026. See the ranking →

Charts affected

2,627 by stars
ChartLatestAffected imagesRadar Score

Container images carrying it

2,612 by charts deploying them

A fixed version is listed for 2 of the 3 affected packages.

Container imageDigestPackageFixed inUsed by
ghcr.io/papra-hq/papra:26.6.2-rootlessa281cb44176d
pcre2@10.46-1~deb13u1
10.46-1~deb13u3
1
ghcr.io/paradigmxyz/reth:v1.3.121e5290e8b743
pcre2@10.39-3ubuntu0.1
no fix listed
1
ghcr.io/paradigmxyz/reth:v2.2.0505fca5e87d6
pcre2@10.42-4ubuntu2.1
no fix listed
1
ghcr.io/paradigmxyz/reth:latesta7f059d47087
pcre2@10.42-4ubuntu2.1
no fix listed
1
ghcr.io/parmincloud/arvancloud-certmanager-issuer:v1.0.00b97452674a3
pcre2@10.46-1~deb13u1
10.46-1~deb13u3
1
ghcr.io/parmincloud/haproxy-redis-sentinel:1.0.040a00a6456ae
pcre2@10.42-1
10.42-1+deb12u2
1
ghcr.io/pgdogdev/pgdog:v0.1.586913f1639cb7
pcre2@10.46-1build1
no fix listed
1
ghcr.io/platformrelay/kollect:v0.21.0a86edc5ec3a8
pcre2@10.42-1+deb12u1
10.42-1+deb12u2
1
ghcr.io/port-labs/port-agent:v0.8.12c92d1e223f5c
pcre2@10.46-1~deb13u1
10.46-1~deb13u3
1
ghcr.io/privacyengineering/hawk-service:latestbfedf47bb5e0
pcre2@10.39-3ubuntu0.1
no fix listed
1
ghcr.io/prophetse7en/clonarr:latest9400d298b37a
pcre2@10.47-r1
10.49-r0
1
ghcr.io/pschichtel/s3-backup:0.7.017666811f6a7
pcre2@10.46-1~deb13u1
10.46-1~deb13u3
1
ghcr.io/qjoly/spindle:v1.16.1-alphaaab0c99d313f
pcre2@10.47-r1
10.49-r0
1
ghcr.io/qovery/iam-eks-user-mapper:mainc41e3efc6097
pcre2@10.46-1~deb13u1
10.46-1~deb13u3
1
ghcr.io/qubiva/qubiva:v0.3.2cdf1e3329bfe
pcre2@10.46-1~deb13u1
10.46-1~deb13u3
1
ghcr.io/radar-base/managementportal/management-portal:3.0.0c1b37e821f72
pcre2@10.46-1build1
no fix listed
1
ghcr.io/radar-base/radar-app-config/radar-app-config:0.6.24431db7b486b
pcre2@10.42-4ubuntu2.1
no fix listed
1
ghcr.io/radar-base/radar-data-dashboard-backend/radar-data-dashboard-backend:0.2.4d1e55350923c
pcre2@10.42-4ubuntu2.1
no fix listed
1
ghcr.io/radar-base/radar-gateway/radar-gateway:0.9.4219d894aa7a6
pcre2@10.42-4ubuntu2.1
no fix listed
1
ghcr.io/radar-base/radar-output-restructure/radar-output-restructure:3.0.67fb9c70e96a4
pcre2@10.42-4ubuntu2.1
no fix listed
1
ghcr.io/radar-base/radar-schemas/radar-schemas-tools:0.8.16c442e8bfe6b4
pcre2@10.42-4ubuntu2.1
no fix listed
1
ghcr.io/radar-base/radar-upload-source-connector/radar-upload-connect-backend:0.6.46a04b43b8d9a
pcre2@10.42-4ubuntu2.1
no fix listed
1
ghcr.io/radiantearth/stac-browser:5.1.0e6d92b6ba593
pcre2@10.48-r0
10.49-r0
1
ghcr.io/rajnandan1/kener:3.2.182b993cb232eb
pcre2@10.42-1
10.42-1+deb12u2
1
ghcr.io/recyclarr/recyclarr:8.7.26e69e009e1cd
pcre2@10.48-r0
10.49-r0
1
ghcr.io/reitermarkus/7d2d:main39953b387b61
pcre2@10.46-1~deb13u1
10.46-1~deb13u3
1
ghcr.io/retyc/retyc-k8s-csi:v0.2.01521d4baeb85
pcre2@10.46-1~deb13u1
10.46-1~deb13u3
1
ghcr.io/rodg/rtmp-controller:latest67f99a5beab7
pcre2@10.42-1
10.42-1+deb12u2
1
ghcr.io/rss-bridge/rss-bridge:latest8e84691e08d2
pcre2@10.42-1+deb12u1
10.42-1+deb12u2
1
ghcr.io/runatlantis/atlantis:v0.48.08dd77ed01565
pcre2@10.48-r0
10.49-r0
1
ghcr.io/runwhen-contrib/runwhen-local:0.12.32c1ec86675d4
pcre2@10.46-1~deb13u2
10.46-1~deb13u3
1
ghcr.io/rybbit-io/rybbit-backend:lateste0d1b397e33c
pcre2@10.48-r0
10.49-r0
1
ghcr.io/samr037/node-debug-dashboard:0.3.0c79b2e64a211
pcre2@10.42-1
10.42-1+deb12u2
1
ghcr.io/sdr-enthusiasts/docker-flightradar24:latest3e0fbd0274eb
pcre2@10.46-1~deb13u2
10.46-1~deb13u3
1
ghcr.io/sdwbgn/unitycatalog-helm/docker/unitycatalog-ui:0.2.1-5d668c1ed07e7ca098d
pcre2@10.42-1
10.42-1+deb12u2
1
ghcr.io/seanmorley15/adventurelog-backend:v0.13.00250d9cb0d74
pcre2@10.46-1~deb13u1
10.46-1~deb13u3
1
ghcr.io/securo-finance/securo-backend:0.16.332db1a9409e1
pcre2@10.46-1~deb13u2
10.46-1~deb13u3
1
ghcr.io/securo-finance/securo-frontend:0.16.398b7a60107ae
pcre2@10.48-r0
10.49-r0
1
ghcr.io/serenita-org/vero:v0.8.3e5a7ec714acc
pcre2@10.42-1
10.42-1+deb12u2
1
ghcr.io/sergelogvinov/fluentd:1.19.33273d13f1e75
pcre2@10.46-1~deb13u1
10.46-1~deb13u3
1
ghcr.io/sergelogvinov/mongodb:8.0.101eee8e20a87f
pcre2@10.42-1
10.42-1+deb12u2
1
ghcr.io/sergelogvinov/mongosqld:2.14.230b826375ed42
pcre2@10.39-3ubuntu0.1
no fix listed
1
ghcr.io/sergelogvinov/mongosync:1.15.0fa99ed475f03
pcre2@10.42-4ubuntu2.1
no fix listed
1
ghcr.io/sergelogvinov/pgbouncer:16.1518f1121ba0a4
pcre2@10.42-1
10.42-1+deb12u2
1
ghcr.io/sergelogvinov/postgresql:16.15fafb72e98f22
pcre2@10.42-1
10.42-1+deb12u2
1
ghcr.io/shadrus/srebot:0.14.09b4415e937b2
pcre2@10.46-1~deb13u1
10.46-1~deb13u3
1
ghcr.io/shesselink81/nginx-alpine:7.1.2.0416372f9367d
pcre2@10.48-r0
10.49-r0
1
ghcr.io/siafoundation/renterd:2.9.0e0334f124863
pcre2@10.42-1
10.42-1+deb12u2
1
ghcr.io/siafoundation/s3d:bf33bf3b3fcc85f7282
pcre2@10.42-1
10.42-1+deb12u2
1
ghcr.io/sikalabs/hello-world-server:latestcf8538bf6489
pcre2@10.46-1~deb13u1
10.46-1~deb13u3
1

syft 1.42.1 · advisories as of 6 Oct 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.