StackRadar

CVE-2026-103111

High

Advisory

Published 30 Sept 2026In the index since 1 Oct 2026
Severity
High
worst across findings
CVSS
7.6
base score, highest
EPSS
0.002
10th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
2,604
of 17,992 indexed, latest versions
Container images
2,553
deployed by those charts
Fix available
2 of 3
affected packages

CVE-2026-103111 affecting package pcre2 10.48-1

Carried by container images the latest versions of 2,604 of 17,992 indexed charts deploy, on 2,553 images.

Affected packageAffected versionsFixed inImages
pcre2deb10.21-1, 10.34-7, 10.34-7ubuntu0.1, 10.39-3+ubuntu20.04.1+deb.sury.org+2+13 more10.42-1+deb12u2, 10.46-1~deb13u32,362
pcre2apk10.47-r0, 10.47-r1, 10.48-r010.49-r0184
pcre2rpm10.42-3.azl3no fix listed7
OSV records
ALPINE-CVE-2026-103111AZL-105119DEBIAN-CVE-2026-103111ECHO-bf42-43c6-45fdUBUNTU-CVE-2026-103111
Trending
Rank 1 in indexed charts, since 1 Oct 2026. See the ranking →

Charts affected

2,604 by stars
ChartLatestAffected imagesRadar Score
login-test-backendlogin-test-backend0.1.01 of 2See more

login-test-backend login-test-backend 0.1.0

1 of the 2 container images this version deploys carry CVE-2026-103111.

Container imageDigestPackageFixed in
aboogie/login_test_backend:new9c41a4483ac8
pcre2@10.42-1
10.42-1+deb12u2

Open the chart page →

7,171
apica-ascentlogiqai2.0.41 of 19See more

apica-ascent logiqai 2.0.4

1 of the 19 container images this version deploys carry CVE-2026-103111.

Container imageDigestPackageFixed in
logiqai/flash:v3.10.265b996bc7bdc
pcre2@10.42-1
10.42-1+deb12u2

Open the chart page →

21,116
mongo_guilovemew67Verified publisher0.0.21 of 1See more

mongo_gui lovemew67 0.0.2

1 of the 1 container images this version deploys carry CVE-2026-103111.

Container imageDigestPackageFixed in
haohanyang/compass-web:0.1.1e3952b14ae8e
pcre2@10.42-1
10.42-1+deb12u2

Open the chart page →

2,197
oncall-hobbylovemew67Verified publisher0.0.51 of 2See more

oncall-hobby lovemew67 0.0.5

1 of the 2 container images this version deploys carry CVE-2026-103111.

Container imageDigestPackageFixed in
library/redis:7.0.15352c1fdadc91
pcre2@10.42-1
10.42-1+deb12u2

Open the chart page →

7,039
vulnerability-scaninglovemew67Verified publisher0.0.31 of 2See more

vulnerability-scaning lovemew67 0.0.3

1 of the 2 container images this version deploys carry CVE-2026-103111.

Container imageDigestPackageFixed in
frankescobar/allure-docker-service:2.35.14154286c0209
pcre2@10.42-4ubuntu2.1
no fix listed

Open the chart page →

6,255
loxilbloxilbVerified publisher0.1.02 of 2See more

loxilb loxilb 0.1.0

2 of the 2 container images this version deploys carry CVE-2026-103111.

Container imageDigestPackageFixed in
ghcr.io/loxilb-io/kube-loxilb:latest6f65e53e252d
pcre2@10.39-3ubuntu0.1
no fix listed
ghcr.io/loxilb-io/loxilb:latesta475b43946b3
pcre2@10.39-3ubuntu0.1
no fix listed

Open the chart page →

5,451
lsdisklsdiskVerified publisher2.0.71 of 4See more

lsdisk lsdisk 2.0.7

1 of the 4 container images this version deploys carry CVE-2026-103111.

Container imageDigestPackageFixed in
danialnabiyan1382/lsdisk:v2.0.8f96a7ebf1f42
pcre2@10.42-1
10.42-1+deb12u2

Open the chart page →

6,545
nublado2lsst-sqre0.8.51 of 2See more

nublado2 lsst-sqre 0.8.5

1 of the 2 container images this version deploys carry CVE-2026-103111.

Container imageDigestPackageFixed in
lsstsqre/nublado2:2.0.1b75bf8aaafa4
pcre2@10.34-7
no fix listed

Open the chart page →

93,303
redislsst-sqre1.2.21 of 1See more

redis lsst-sqre 1.2.2

1 of the 1 container images this version deploys carry CVE-2026-103111.

Container imageDigestPackageFixed in
library/redis:8.10.2d5ac52db24d4
pcre2@10.46-1~deb13u2
10.46-1~deb13u3

Open the chart page →

773
squash-apilsst-sqre0.1.61 of 3See more

squash-api lsst-sqre 0.1.6

1 of the 3 container images this version deploys carry CVE-2026-103111.

Container imageDigestPackageFixed in
library/redis:6.2e7b96daa9a18
pcre2@10.42-1+deb12u1
10.42-1+deb12u2

Open the chart page →

9,301
flaresolverrluiscajl0.0.31 of 1See more

flaresolverr luiscajl 0.0.3

1 of the 1 container images this version deploys carry CVE-2026-103111.

Container imageDigestPackageFixed in
ghcr.io/flaresolverr/flaresolverr:latestc80ae007ce2c
pcre2@10.42-1
10.42-1+deb12u2

Open the chart page →

8,845
plex-rclone-wireguardluiscajl1.0.191 of 2See more

plex-rclone-wireguard luiscajl 1.0.19

1 of the 2 container images this version deploys carry CVE-2026-103111.

Container imageDigestPackageFixed in
ghcr.io/linuxserver/plex:latestbe083133dfe0
pcre2@10.46-1build1
no fix listed

Open the chart page →

689
tautulliluiscajl0.0.151 of 1See more

tautulli luiscajl 0.0.15

1 of the 1 container images this version deploys carry CVE-2026-103111.

Container imageDigestPackageFixed in
linuxserver/tautulli:lateste35570d63647
pcre2@10.48-r0
10.49-r0

Open the chart page →

107
lumenvox-external-serviceslumenvox8.0.03 of 3See more

lumenvox-external-services lumenvox 8.0.0

3 of the 3 container images this version deploys carry CVE-2026-103111.

Container imageDigestPackageFixed in
library/mongo:8.2.12e0ce8c35124d
pcre2@10.42-4ubuntu2.1
no fix listed
library/postgres:17.5aadf2c0696f5
pcre2@10.45-1
10.46-1~deb13u3
library/rabbitmq:4.1.8-management3574a8edaca3
pcre2@10.42-4ubuntu2.1
no fix listed

Open the chart page →

8,379
bazarrm0nsterrr-bazarrVerified publisher2.3.21 of 1See more

bazarr m0nsterrr-bazarr 2.3.2

1 of the 1 container images this version deploys carry CVE-2026-103111.

Container imageDigestPackageFixed in
ghcr.io/home-operations/bazarr:1.6.217dc1cff22e9
pcre2@10.48-r0
10.49-r0

Open the chart page →

161
hyperglassm0nsterrr-hyperglassVerified publisher4.2.11 of 2See more

hyperglass m0nsterrr-hyperglass 4.2.1

1 of the 2 container images this version deploys carry CVE-2026-103111.

Container imageDigestPackageFixed in
valkey/valkey:9.0.2930b41430fb7
pcre2@10.46-1~deb13u1
10.46-1~deb13u3

Open the chart page →

5,119
jellyfinm0nsterrr-jellyfinVerified publisher2.3.51 of 1See more

jellyfin m0nsterrr-jellyfin 2.3.5

1 of the 1 container images this version deploys carry CVE-2026-103111.

Container imageDigestPackageFixed in
jellyfin/jellyfin:10.11.11aefb67e6a7ff
pcre2@10.46-1~deb13u1
10.46-1~deb13u3

Open the chart page →

2,965
joalm0nsterrr-joalVerified publisher2.2.01 of 2See more

joal m0nsterrr-joal 2.2.0

1 of the 2 container images this version deploys carry CVE-2026-103111.

Container imageDigestPackageFixed in
anthonyraymond/joal:2.1.37fc942567c564
pcre2@10.34-7
no fix listed

Open the chart page →

10,699
kea-exporterm0nsterrr-kea-exporterVerified publisher2.2.11 of 1See more

kea-exporter m0nsterrr-kea-exporter 2.2.1

1 of the 1 container images this version deploys carry CVE-2026-103111.

Container imageDigestPackageFixed in
ghcr.io/mweinelt/kea-exporter:v0.7.1d7b77020e924
pcre2@10.46-1~deb13u1
10.46-1~deb13u3

Open the chart page →

1,360
recyclarrm0nsterrr-recyclarrVerified publisher2.7.21 of 1See more

recyclarr m0nsterrr-recyclarr 2.7.2

1 of the 1 container images this version deploys carry CVE-2026-103111.

Container imageDigestPackageFixed in
ghcr.io/recyclarr/recyclarr:8.7.26e69e009e1cd
pcre2@10.48-r0
10.49-r0

Open the chart page →

356
wudm0sh1-helm-charts0.2.01 of 1See more

wud m0sh1-helm-charts 0.2.0

1 of the 1 container images this version deploys carry CVE-2026-103111.

Container imageDigestPackageFixed in
getwud/wud:8.1.1b1cd01c43839
pcre2@10.42-1
10.42-1+deb12u2

Open the chart page →

7,776
decap-cmsm11sVerified publisher0.4.01 of 1See more

decap-cms m11s 0.4.0

1 of the 1 container images this version deploys carry CVE-2026-103111.

Container imageDigestPackageFixed in
m11s/decap-cms:0.2.11-s3c0645cb9d3f9
pcre2@10.48-r0
10.49-r0

Open the chart page →

33
m9sweeperm9sweeperVerified publisher1.6.01 of 6See more

m9sweeper m9sweeper 1.6.0

1 of the 6 container images this version deploys carry CVE-2026-103111.

Container imageDigestPackageFixed in
ghcr.io/m9sweeper/trawler:1.6.0df917c5a7e54
pcre2@10.42-1
10.42-1+deb12u2

Open the chart page →

11,589
magistralamagistrala-devopsVerified publisher0.16.22 of 42See more

magistrala magistrala-devops 0.16.2

2 of the 42 container images this version deploys carry CVE-2026-103111.

Container imageDigestPackageFixed in
envoyproxy/envoy:v1.31-latestcaa5b411be16
pcre2@10.39-3ubuntu0.1
no fix listed
jaegertracing/jaeger-cassandra-schema:1.53.0d48d6dab2c65
pcre2@10.39-3ubuntu0.1
no fix listed

Open the chart page →

31,390
docker-mailservermailserverVerified publisher0.2.651 of 9See more

docker-mailserver mailserver 0.2.65

1 of the 9 container images this version deploys carry CVE-2026-103111.

Container imageDigestPackageFixed in
mvance/unbound:1.22.076906da36d18
pcre2@10.42-1
10.42-1+deb12u2

Open the chart page →

13,706
demoshopmakaira2.4.02 of 4See more

demoshop makaira 2.4.0

2 of the 4 container images this version deploys carry CVE-2026-103111.

Container imageDigestPackageFixed in
library/nginx:stable0aa2d81d65bc
pcre2@10.46-1~deb13u2
10.46-1~deb13u3
library/php:8.4-fpm223115611852
pcre2@10.46-1~deb13u2
10.46-1~deb13u3

Open the chart page →

4,678
plane-mcp-servermakeplaneVerified publisher1.0.02 of 2See more

plane-mcp-server makeplane 1.0.0

2 of the 2 container images this version deploys carry CVE-2026-103111.

Container imageDigestPackageFixed in
makeplane/plane-mcp-server:v0.3.071b7252adef0
pcre2@10.46-1~deb13u1
10.46-1~deb13u3
valkey/valkey:9.1.164e361b630ec
pcre2@10.46-1~deb13u1
10.46-1~deb13u3

Open the chart page →

3,231
nodecg-chartmarathon-charts0.1.51 of 2See more

nodecg-chart marathon-charts 0.1.5

1 of the 2 container images this version deploys carry CVE-2026-103111.

Container imageDigestPackageFixed in
ghcr.io/rodg/rtmp-controller:latest67f99a5beab7
pcre2@10.42-1
10.42-1+deb12u2

Open the chart page →

8,466
marge-botmarge-bot-helm1.3.51 of 1See more

marge-bot marge-bot-helm 1.3.5

1 of the 1 container images this version deploys carry CVE-2026-103111.

Container imageDigestPackageFixed in
hiboxsystems/marge-bot:0.16.0b59f01bc0418
pcre2@10.46-1~deb13u1
10.46-1~deb13u3

Open the chart page →

3,929
circleci-runnermatic-insurance0.1.11 of 1See more

circleci-runner matic-insurance 0.1.1

1 of the 1 container images this version deploys carry CVE-2026-103111.

Container imageDigestPackageFixed in
circleci/runner:launch-agent9bdc62f02162
pcre2@10.34-7ubuntu0.1
no fix listed

Open the chart page →

4,721
nginxmatic-insurance1.1.11 of 1See more

nginx matic-insurance 1.1.1

1 of the 1 container images this version deploys carry CVE-2026-103111.

Container imageDigestPackageFixed in
library/nginx:stableb972f831f200
pcre2@10.46-1~deb13u2
10.46-1~deb13u3

Open the chart page →

1,859
mauticmautic-chartVerified publisher1.0.22 of 3See more

mautic mautic-chart 1.0.2

2 of the 3 container images this version deploys carry CVE-2026-103111.

Container imageDigestPackageFixed in
bitnamilegacy/mariadb:11.2.6-debian-12-r0373c3c260571
pcre2@10.42-1
10.42-1+deb12u2
mautic/mautic:7-apacheeb8cc73d97e1
pcre2@10.42-1
10.42-1+deb12u2

Open the chart page →

9,584
mayastormayastorVerified publisher2.12.12 of 31See more

mayastor mayastor 2.12.1

2 of the 31 container images this version deploys carry CVE-2026-103111.

Container imageDigestPackageFixed in
grafana/alloy:v1.8.17790f6f7fbd8
pcre2@10.42-4ubuntu2.1
no fix listed
openebs/etcd:3.6.4-debian-12-r0c86c06f1ce6a
pcre2@10.42-1
10.42-1+deb12u2

Open the chart page →

24,510
eoloplantmca-eoloplaner0.1.03 of 7See more

eoloplant mca-eoloplaner 0.1.0

3 of the 7 container images this version deploys carry CVE-2026-103111.

Container imageDigestPackageFixed in
hugohg34/toposervice:0.0.2812a03b3f274
pcre2@10.34-7
no fix listed
library/mongo:5.0.6-focal8e70544b6c76
pcre2@10.34-7
no fix listed
library/rabbitmq:3.9-management8a279e9396a8
pcre2@10.39-3ubuntu0.1
no fix listed

Open the chart page →

34,116
mcp-hangarmcp-hangarVerified publisher0.15.281 of 1See more

mcp-hangar mcp-hangar 0.15.28

1 of the 1 container images this version deploys carry CVE-2026-103111.

Container imageDigestPackageFixed in
ghcr.io/mcp-hangar/mcp-hangar:2.23.0b731546941ce
pcre2@10.46-1~deb13u1
10.46-1~deb13u3

Open the chart page →

1,082
claude-code-apimcp-helmVerified publisher0.1.11 of 1See more

claude-code-api mcp-helm 0.1.1

1 of the 1 container images this version deploys carry CVE-2026-103111.

Container imageDigestPackageFixed in
arbuzov/claude-code-api:0.1.02d7dd8070610
pcre2@10.42-1
10.42-1+deb12u2

Open the chart page →

4,629
mcp-homeassistantmcp-helmVerified publisher0.2.41 of 1See more

mcp-homeassistant mcp-helm 0.2.4

1 of the 1 container images this version deploys carry CVE-2026-103111.

Container imageDigestPackageFixed in
voska/hass-mcp:latest7142a431e2c5
pcre2@10.42-1
10.42-1+deb12u2

Open the chart page →

11,395
mcp-kubernetesmcp-helmVerified publisher0.2.71 of 1See more

mcp-kubernetes mcp-helm 0.2.7

1 of the 1 container images this version deploys carry CVE-2026-103111.

Container imageDigestPackageFixed in
mcp/kubernetes:latest5ffbf7f0a8aa
pcre2@10.42-1
10.42-1+deb12u2

Open the chart page →

6,370
mcpomcp-helmVerified publisher0.2.81 of 1See more

mcpo mcp-helm 0.2.8

1 of the 1 container images this version deploys carry CVE-2026-103111.

Container imageDigestPackageFixed in
ghcr.io/open-webui/mcpo:git-39b4867f06525afac6b
pcre2@10.42-1
10.42-1+deb12u2

Open the chart page →

4,886
mcp-playwrightmcp-helmVerified publisher0.1.11 of 1See more

mcp-playwright mcp-helm 0.1.1

1 of the 1 container images this version deploys carry CVE-2026-103111.

Container imageDigestPackageFixed in
mcr.microsoft.com/playwright/mcp:v0.0.43e101b832b34d
pcre2@10.42-1
10.42-1+deb12u2

Open the chart page →

4,618
searchmcp-helmVerified publisher0.1.31 of 2See more

search mcp-helm 0.1.3

1 of the 2 container images this version deploys carry CVE-2026-103111.

Container imageDigestPackageFixed in
ghcr.io/flaresolverr/flaresolverr:latestc80ae007ce2c
pcre2@10.42-1
10.42-1+deb12u2

Open the chart page →

10,731
mcroutermcrouterVerified publisher0.2.02 of 2See more

mcrouter mcrouter 0.2.0

2 of the 2 container images this version deploys carry CVE-2026-103111.

Container imageDigestPackageFixed in
library/memcached:1.6.4226983a43c918
pcre2@10.46-1~deb13u1
10.46-1~deb13u3
ghcr.io/dragoangel/mcrouter:v2026.06.29.0042afcffe67d0
pcre2@10.42-4ubuntu2.1
no fix listed

Open the chart page →

2,740
backstagemcwarmanVerified publisher0.10.102 of 2See more

backstage mcwarman 0.10.10

2 of the 2 container images this version deploys carry CVE-2026-103111.

Container imageDigestPackageFixed in
ghcr.io/mcwarman/backstage-sample-app/app:mainfae3c1f04311
pcre2@10.46-1~deb13u1
10.46-1~deb13u3
ghcr.io/mcwarman/backstage-sample-app/backend:main07aba09a594f
pcre2@10.42-1
10.42-1+deb12u2

Open the chart page →

10,792
mdai-hubmdai-hubVerified publisher0.10.11 of 14See more

mdai-hub mdai-hub 0.10.1

1 of the 14 container images this version deploys carry CVE-2026-103111.

Container imageDigestPackageFixed in
public.ecr.aws/decisiveai/valkey:9.0.159c7e728fb3a
pcre2@10.46-1~deb13u1
10.46-1~deb13u3

Open the chart page →

10,872
dependency-trackmediamarktsaturn1.9.21 of 2See more

dependency-track mediamarktsaturn 1.9.2

1 of the 2 container images this version deploys carry CVE-2026-103111.

Container imageDigestPackageFixed in
dependencytrack/apiserver:4.14.21ba4f004e1ec
pcre2@10.46-1~deb13u1
10.46-1~deb13u3

Open the chart page →

4,272
cleanuparrmedia-servarrVerified publisher0.20.01See more

cleanuparr media-servarr 0.20.0

1 container image this version deploys carries CVE-2026-103111.

Container imageDigestPackageFixed in
ghcr.io/cleanuparr/cleanuparr:2.10.8ec444338a67e
pcre2@10.42-4ubuntu2.1
no fix listed

Open the chart page →

—
flaresolverrmedia-servarrVerified publisher0.19.01See more

flaresolverr media-servarr 0.19.0

1 container image this version deploys carries CVE-2026-103111.

Container imageDigestPackageFixed in
ghcr.io/flaresolverr/flaresolverr:v3.5.2c80ae007ce2c
pcre2@10.42-1
10.42-1+deb12u2

Open the chart page →

—
profilarrmedia-servarrVerified publisher2.4.01See more

profilarr media-servarr 2.4.0

1 container image this version deploys carries CVE-2026-103111.

Container imageDigestPackageFixed in
ghcr.io/dictionarry-hub/profilarr:2.2.0ddcdd0f34004
pcre2@10.47-r1
10.49-r0

Open the chart page →

—
tinymediamanagermedia-servarrVerified publisher1.7.01See more

tinymediamanager media-servarr 1.7.0

1 container image this version deploys carries CVE-2026-103111.

Container imageDigestPackageFixed in
tinymediamanager/tinymediamanager:5.3.36f332431a2ae
pcre2@10.46-1~deb13u1
10.46-1~deb13u3

Open the chart page →

—
cameramedia-streaming-meshVerified publisher0.2.52 of 3See more

camera media-streaming-mesh 0.2.5

2 of the 3 container images this version deploys carry CVE-2026-103111.

Container imageDigestPackageFixed in
ciscolabs/rtsp-client:latesta7b60ec88285
pcre2@10.34-7
no fix listed
ciscolabs/rtsp-server:latestb59fc10bb821
pcre2@10.34-7
no fix listed

Open the chart page →

20,334

Container images carrying it

2,553 by charts deploying them

A fixed version is listed for 2 of the 3 affected packages.

Container imageDigestPackageFixed inUsed by
registry.k8s.io/sig-storage/local-volume-provisioner:v2.9.0f9d65db8bda2
pcre2@10.42-1
10.42-1+deb12u2
1
registry.k8s.io/sig-storage/nfsplugin:v4.13.41eb5a85180a4
pcre2@10.42-1
10.42-1+deb12u2
1
registry.k8s.io/sig-storage/nfsplugin:v4.11.0ce5b5ccd5eb0
pcre2@10.42-1
10.42-1+deb12u2
1

syft 1.42.1 · advisories as of 4 Oct 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.