CVE-2026-103111

High

Advisory

Published 30 Sept 2026In the index since 1 Oct 2026

Severity: High; worst across findings
CVSS: 7.6; base score, highest
EPSS: 0.002; 10th percentile
CISA KEV: Not listed; no confirmed exploitation
Charts affected: 2,669; of 17,985 indexed, latest versions
Container images: 2,624; deployed by those charts
Fix available: 2 of 3; affected packages

CVE-2026-103111 affecting package pcre2 10.48-1

Carried by container images the latest versions of 2,669 of 17,985 indexed charts deploy, on 2,624 images.

Affected package	Affected versions	Fixed in	Images
pcre2deb	10.21-1, 10.34-7, 10.34-7ubuntu0.1, 10.39-3+ubuntu20.04.1+deb.sury.org+2+13 more	10.46-1~deb13u3	2,420
pcre2apk	10.47-r0, 10.47-r1, 10.48-r0	10.49-r0	197
pcre2rpm	10.42-3.azl3	no fix listed	7

OSV records: ALPINE-CVE-2026-103111 DEBIAN-CVE-2026-103111 UBUNTU-CVE-2026-103111 AZL-105119 ECHO-bf42-43c6-45fd
Trending: Rank 1 in indexed charts, since 1 Oct 2026. See the ranking →

Charts affected

2,669 by stars

Chart

Latest

Affected images

Radar Score

tabbyxd

1.0.6

1 of 2 See more

tabby xd 1.0.6

1 of the 2 container images this version deploys carry CVE-2026-103111.

Container image	Digest	Package	Fixed in
library/nginx :1.25	a484819eb602	pcre2@10.42-1	no fix listed

Open the chart page →

8,031

xkopsxkops

0.1.0

4 of 5 See more

xkops xkops 0.1.0

4 of the 5 container images this version deploys carry CVE-2026-103111.

Container image	Digest	Package	Fixed in
hamzaarshad10/querybackend :1.6.2	2c1c3b86a8e7	pcre2@10.42-1	no fix listed
hamzaarshad10/querypodpy :1.7	154f38e8668e	pcre2@10.42-1	no fix listed
library/mongo :latest	5d7043a4ffe0	pcre2@10.42-4ubuntu2.1	no fix listed
murtazashah46/helmfile :latest	4d11726cf803	pcre2@10.42-1	no fix listed

Open the chart page →

14,279

xlinexline

0.0.1

1 of 1 See more

xline xline 0.0.1

1 of the 1 container images this version deploys carry CVE-2026-103111.

Container image	Digest	Package	Fixed in
ghcr.io/liangyuanpeng/xline :latest	3d2eceb44a3b	pcre2@10.42-4ubuntu2	no fix listed

Open the chart page →

2,340

cloudeye-exporterxxl-job-admin

0.1.2

1 of 1 See more

cloudeye-exporter xxl-job-admin 0.1.2

1 of the 1 container images this version deploys carry CVE-2026-103111.

Container image	Digest	Package	Fixed in
dellnoantechnp/cloudeye-exporter :v2.0.31	6873356c882d	pcre2@10.42-1	no fix listed

Open the chart page →

2,861

dingtalk-botxxl-job-admin

0.1.3

1 of 2 See more

dingtalk-bot xxl-job-admin 0.1.3

1 of the 2 container images this version deploys carry CVE-2026-103111.

Container image	Digest	Package	Fixed in
dellnoantechnp/dingtalk-bot :v1.0.1	034000bbcad5	pcre2@10.46-1~deb13u1	10.46-1~deb13u3

Open the chart page →

3,580

nightingalexxl-job-admin

0.2.11

3 of 6 See more

nightingale xxl-job-admin 0.2.11

3 of the 6 container images this version deploys carry CVE-2026-103111.

Container image	Digest	Package	Fixed in
flashcatcloud/categraf :latest	42e6ab16472e	pcre2@10.42-4ubuntu2.1	no fix listed
flashcatcloud/nightingale :8.0.0-beta.11	ea1b0aaabe09	pcre2@10.42-1	no fix listed
library/redis :6.2	d2ad7b21cafa	pcre2@10.42-1+deb12u1	no fix listed

Open the chart page →

10,346

pgcatxxl-job-admin

0.3.3

1 of 1 See more

pgcat xxl-job-admin 0.3.3

1 of the 1 container images this version deploys carry CVE-2026-103111.

Container image	Digest	Package	Fixed in
ghcr.io/postgresml/pgcat :v1.2.0	627761f6dcbc	pcre2@10.42-1	no fix listed

Open the chart page →

3,388

nginx-chartxxoznge-nginx

0.1.0

1 of 1 See more

nginx-chart xxoznge-nginx 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-103111.

Container image	Digest	Package	Fixed in
library/nginx :latest	abe47724e466	pcre2@10.46-1~deb13u2	10.46-1~deb13u3

Open the chart page →

1,836

helm-demoyahoon-helm-demo

1.0.0

1 of 1 See more

helm-demo yahoon-helm-demo 1.0.0

1 of the 1 container images this version deploys carry CVE-2026-103111.

Container image	Digest	Package	Fixed in
ghcr.io/yahoon/helm-demo :1.0.0	2930290a758c	pcre2@10.46-1~deb13u1	10.46-1~deb13u3

Open the chart page →

1,554

my-nginx-appyasser-nginx-app

0.1.0

1 of 1 See more

my-nginx-app yasser-nginx-app 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-103111.

Container image	Digest	Package	Fixed in
library/nginx :stable	b972f831f200	pcre2@10.46-1~deb13u2	10.46-1~deb13u3

Open the chart page →

1,836

ceph-exporterygqygq2

1.0.0

1 of 1 See more

ceph-exporter ygqygq2 1.0.0

1 of the 1 container images this version deploys carry CVE-2026-103111.

Container image	Digest	Package	Fixed in
digitalocean/ceph_exporter :latest	3ba058e9a48d	pcre2@10.34-7ubuntu0.1	no fix listed

Open the chart page →

6,136

api-snapyoukadev

0.1.1

1 of 1 See more

api-snap youkadev 0.1.1

1 of the 1 container images this version deploys carry CVE-2026-103111.

Container image	Digest	Package	Fixed in
youkadev/api-snap :0.1.1	4db0f9428e67	pcre2@10.42-1	no fix listed

Open the chart page →

2,894

jenkinszanise-jenkins-helm-chart

0.1.0

1 of 1 See more

jenkins zanise-jenkins-helm-chart 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-103111.

Container image	Digest	Package	Fixed in
jenkins/jenkins :lts	c1e4c349365f	pcre2@10.46-1~deb13u1	10.46-1~deb13u3

Open the chart page →

2,887

changedetection-iozekker6

1.103.0

1 of 1 See more

changedetection-io zekker6 1.103.0

1 of the 1 container images this version deploys carry CVE-2026-103111.

Container image	Digest	Package	Fixed in
ghcr.io/dgtlmoon/changedetection.io :0.60.8	34df3680db1c	pcre2@10.42-1+deb12u1	no fix listed

Open the chart page →

2,901

NEW_APPzekker6

0.0.0

1 of 1 See more

NEW_APP zekker6 0.0.0

1 of the 1 container images this version deploys carry CVE-2026-103111.

Container image	Digest	Package	Fixed in
library/nginx :latest	abe47724e466	pcre2@10.46-1~deb13u2	10.46-1~deb13u3

Open the chart page →

1,836

sockpuppetbrowserzekker6

0.1.0

1 of 1 See more

sockpuppetbrowser zekker6 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-103111.

Container image	Digest	Package	Fixed in
dgtlmoon/sockpuppetbrowser :latest	1d8f72d2ce20	pcre2@10.42-1	no fix listed

Open the chart page →

5,003

zimagizimagi

2.7.17

1 of 6 See more

zimagi zimagi 2.7.17

1 of the 6 container images this version deploys carry CVE-2026-103111.

Container image	Digest	Package	Fixed in
qdrant/qdrant :v1.15.3	31407c0e8e32	pcre2@10.42-1	no fix listed

Open the chart page →

2,129

clickhousezloi-space

1.2.0

1 of 3 See more

clickhouse zloi-space 1.2.0

1 of the 3 container images this version deploys carry CVE-2026-103111.

Container image	Digest	Package	Fixed in
yandex/clickhouse-server :21.3.20	4eccfffb01d7	pcre2@10.34-7	no fix listed

Open the chart page →

9,659

zoo-project-druzoo-project

0.10.8

1 of 6 See more

zoo-project-dru zoo-project 0.10.8

1 of the 6 container images this version deploys carry CVE-2026-103111.

Container image	Digest	Package	Fixed in
zooproject/zoo-project :dru-51e7d55383f24594959b69e58518961c6aa66740	da112e8d03f1	pcre2@10.39-3ubuntu0.1	no fix listed

Open the chart page →

6,257

Container images carrying it

2,624 by charts deploying them

A fixed version is listed for 2 of the 3 affected packages.

Container image	Digest	Package	Fixed in	Used by
hookiesolutions/webhookie :latest	0629694246ba	pcre2@10.34-7	no fix listed	2
hyperledger/besu :22.4-openjdk-latest	a674d35eec9a	pcre2@10.34-7	no fix listed	2
ilum/api :6.7.3	624fd09528c8	pcre2@10.46-1~deb13u1	10.46-1~deb13u3	2
ilum/marquez :0.54.0	6e1d709d41f8	pcre2@10.42-1	no fix listed	2
interlayhq/interbtc :latest	a66d0e35e70f	pcre2@10.34-7ubuntu0.1	no fix listed	2
interlayhq/interbtc-clients :vault-master	c3e311de67da	pcre2@10.34-7	no fix listed	2
iomesh/node-disk-exporter :1.8.0	f03148764f38	pcre2@10.34-7	no fix listed	2
istio/proxyv2 :1.18.0	757d28c24100	pcre2@10.39-3ubuntu0.1	no fix listed	2
jenkins/jenkins :2.426.1-jdk11	b470bcdc4ecd	pcre2@10.42-1	no fix listed	2
jenkins/jenkins :2.541.3-jdk21	c4098086090c	pcre2@10.46-1~deb13u1	10.46-1~deb13u3	2
juicedata/juicefs-csi-driver :v0.33.0	f918e7331c05	pcre2@10.42-1	no fix listed	2
kubeshop/testkube-api-server :2.14.0	cf17316759e2	pcre2@10.47-r1	10.49-r0	2
kurento/kurento-media-server :latest	03c0d34d0828	pcre2@10.42-4ubuntu2.1	no fix listed	2
langgenius/dify-sandbox :0.2.0	09b7e8705673	pcre2@10.42-1	no fix listed	2
library/buildpack-deps :curl	9071eeb01ff8	pcre2@10.46-1~deb13u2	10.46-1~deb13u3	2
library/cassandra :4.1.3	7cbcec0086ac	pcre2@10.39-3ubuntu0.1	no fix listed	2
library/debian :stable-slim	5bc3287b2540	pcre2@10.46-1~deb13u2	10.46-1~deb13u3	2
library/elasticsearch :7.17.3	5e6ac15bf6a5	pcre2@10.34-7	no fix listed	2
library/elasticsearch :8.19.22	d071f96fab6c	pcre2@10.42-4ubuntu2.1	no fix listed	2
library/influxdb :2.7	b8d940ca9376	pcre2@10.42-1	no fix listed	2
library/mariadb :10.8.3	0abf60f81588	pcre2@10.39-3build1	no fix listed	2
library/mariadb :10.10	334b315c10e5	pcre2@10.39-3ubuntu0.1	no fix listed	2
library/mariadb :10.6	40153feb479c	pcre2@10.39-3ubuntu0.1	no fix listed	2
library/mariadb :12.0.2 :12.0-noble	607835cd628b	pcre2@10.42-4ubuntu2.1	no fix listed	2
library/mariadb :11.4	70cc072b29b4	pcre2@10.42-4ubuntu2.1	no fix listed	2
library/mariadb :11.3.2	e101f9db3191	pcre2@10.39-3ubuntu0.1	no fix listed	2
library/memcached :1.6 :1.6.45-trixie	405a445c7c81	pcre2@10.46-1~deb13u2	10.46-1~deb13u3	2
library/mongo :8.0.20	098862b1339f	pcre2@10.42-4ubuntu2.1	no fix listed	2
library/mongo :5.0	41108d183e97	pcre2@10.34-7ubuntu0.1	no fix listed	2
library/mongo :7.0-jammy :7-jammy	84c4a18b60a0	pcre2@10.39-3ubuntu0.1	no fix listed	2
library/nextcloud :35.0.1 :35.0.1-apache	b1ae671e9815	pcre2@10.46-1~deb13u2	10.46-1~deb13u3	2
library/nginx :latest	6e23479198b9	pcre2@10.46-1~deb13u1	10.46-1~deb13u3	2
library/nginx :stable-alpine	985220252f38	pcre2@10.48-r0	10.49-r0	2
library/nginx :1.27.0	98f8ec75657d	pcre2@10.42-1	no fix listed	2
library/nginx :1.29.4	9dd288848f44	pcre2@10.46-1~deb13u1	10.46-1~deb13u3	2
library/nginx :1.31.6-alpine :alpine	df221db836e1	pcre2@10.48-r0	10.49-r0	2
library/nginx :stable-alpine	ef8676b33d68	pcre2@10.48-r0	10.49-r0	2
library/nginx :1.31.6-alpine-slim :1.31-alpine3.24-slim	f761b94f2cb9	pcre2@10.48-r0	10.49-r0	2
library/phpmyadmin :5.2.1	6e75aa8f767c	pcre2@10.42-1	no fix listed	2
library/postgres :16.1	09f23e02d766	pcre2@10.42-1	no fix listed	2
library/postgres :18.1	1090bc3a8ccf	pcre2@10.46-1~deb13u1	10.46-1~deb13u3	2
library/postgres :16.2	4aea012537ed	pcre2@10.42-1	no fix listed	2
library/postgres :17-bookworm	639ab7ceb90e	pcre2@10.42-1+deb12u1	no fix listed	2
library/postgres :18.0	6f3e42ad37de	pcre2@10.46-1~deb13u1	10.46-1~deb13u3	2
library/postgres :17.5	aadf2c0696f5	pcre2@10.45-1	10.46-1~deb13u3	2
library/postgres :17	d74eeac9a635	pcre2@10.46-1~deb13u2	10.46-1~deb13u3	2
library/postgres :16.4	e62fbf9d3e2b	pcre2@10.42-1	no fix listed	2
library/python :3.12-slim	2f17fc044b57	pcre2@10.46-1~deb13u2	10.46-1~deb13u3	2
library/python :3.14-slim :3-slim	caaf356f4066	pcre2@10.46-1~deb13u2	10.46-1~deb13u3	2
library/python :3.7	eedf63967cdb	pcre2@10.42-1	no fix listed	2