StackRadar

CVE-2026-103111

High

Advisory

Published 30 Sept 2026In the index since 1 Oct 2026
Severity
High
worst across findings
CVSS
7.6
base score, highest
EPSS
0.002
10th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
2,665
of 17,985 indexed, latest versions
Container images
2,621
deployed by those charts
Fix available
2 of 3
affected packages

CVE-2026-103111 affecting package pcre2 10.48-1

Carried by container images the latest versions of 2,665 of 17,985 indexed charts deploy, on 2,621 images.

Affected packageAffected versionsFixed inImages
pcre2deb10.21-1, 10.34-7, 10.34-7ubuntu0.1, 10.39-3+ubuntu20.04.1+deb.sury.org+2+13 more10.46-1~deb13u32,423
pcre2apk10.47-r0, 10.47-r1, 10.48-r010.49-r0191
pcre2rpm10.42-3.azl3no fix listed7
OSV records
ALPINE-CVE-2026-103111AZL-105119DEBIAN-CVE-2026-103111ECHO-bf42-43c6-45fdUBUNTU-CVE-2026-103111
Trending
Rank 1 in indexed charts, since 1 Oct 2026. See the ranking →

Charts affected

2,665 by stars
ChartLatestAffected imagesRadar Score
graph-nodestakewise3.1.01 of 3See more

graph-node stakewise 3.1.0

1 of the 3 container images this version deploys carry CVE-2026-103111.

Container imageDigestPackageFixed in
graphprotocol/graph-node:v0.37.0f4452cdedd68
pcre2@10.42-1
no fix listed

Open the chart page →

5,752
starwhalestarwhaleVerified publisher0.6.151 of 4See more

starwhale starwhale 0.6.15

1 of the 4 container images this version deploys carry CVE-2026-103111.

Container imageDigestPackageFixed in
ghcr.io/star-whale/server:0.6.158368359c8dd0
pcre2@10.34-7ubuntu0.1
no fix listed

Open the chart page →

14,187
ckanstatcan0.0.351 of 8See more

ckan statcan 0.0.35

1 of the 8 container images this version deploys carry CVE-2026-103111.

Container imageDigestPackageFixed in
statcan/ckan:2.93921305425b8
pcre2@10.34-7
no fix listed

Open the chart page →

105,526
silverbulletstone0.11.11 of 1See more

silverbullet stone 0.11.1

1 of the 1 container images this version deploys carry CVE-2026-103111.

Container imageDigestPackageFixed in
ghcr.io/silverbulletmd/silverbullet:2.11.1e36808c27717
pcre2@10.48-r0
10.49-r0

Open the chart page →

74
stornxstornxVerified publisher1.1.13 of 9See more

stornx stornx 1.1.1

3 of the 9 container images this version deploys carry CVE-2026-103111.

Container imageDigestPackageFixed in
alazidis/kube-netlag:1.1.00e8c84152201
pcre2@10.42-4ubuntu2.1
no fix listed
alazidis/stornx:1.1.1602d4f7f090c
pcre2@10.42-1
no fix listed
istio/pilot:1.29.1f8b0e412ac4a
pcre2@10.42-4ubuntu2.1
no fix listed

Open the chart page →

14,607
streamvisorstreamvisorVerified publisher4.1.61 of 1See more

streamvisor streamvisor 4.1.6

1 of the 1 container images this version deploys carry CVE-2026-103111.

Container imageDigestPackageFixed in
ghcr.io/streamvisor/streamvisor:4.1.40bc598b2ac9a
pcre2@10.42-4ubuntu2.1
no fix listed

Open the chart page →

3,226
supabasesupabse0.8.06 of 11See more

supabase supabse 0.8.0

6 of the 11 container images this version deploys carry CVE-2026-103111.

Container imageDigestPackageFixed in
darthsim/imgproxy:v3.30.13b709e4a0e5e
pcre2@10.42-4ubuntu2.1
no fix listed
kong/kong:3.9.16addf50e6bd8
pcre2@10.42-4ubuntu2.1
no fix listed
supabase/edge-runtime:v1.74.02781daf92394
pcre2@10.42-1
no fix listed
supabase/postgres-meta:v0.96.6a84cc713585e
pcre2@10.42-1
no fix listed
supabase/realtime:v2.102.3aa1c92c0cf32
pcre2@10.42-1
no fix listed
supabase/studio:2026.08.03-sha-022b374606aca9fdaa7
pcre2@10.42-1
no fix listed

Open the chart page →

21,233
supersonicsupersonicVerified publisher0.3.11 of 2See more

supersonic supersonic 0.3.1

1 of the 2 container images this version deploys carry CVE-2026-103111.

Container imageDigestPackageFixed in
envoyproxy/envoy:v1.30.92956bd9de830
pcre2@10.39-3ubuntu0.1
no fix listed

Open the chart page →

2,372
switcher-apiswitcherapiOfficialVerified publisher1.3.51 of 3See more

switcher-api switcherapi 1.3.5

1 of the 3 container images this version deploys carry CVE-2026-103111.

Container imageDigestPackageFixed in
trackerforce/switcher-management:latest13a604f205da
pcre2@10.47-r1
10.49-r0

Open the chart page →

971
app-fullsynkubeVerified publisher1.0.01 of 1See more

app-full synkube 1.0.0

1 of the 1 container images this version deploys carry CVE-2026-103111.

Container imageDigestPackageFixed in
library/nginx:latest6e23479198b9
pcre2@10.46-1~deb13u1
10.46-1~deb13u3

Open the chart page →

3,716
mumblesyntaxerror404Verified publisher1.0.51 of 1See more

mumble syntaxerror404 1.0.5

1 of the 1 container images this version deploys carry CVE-2026-103111.

Container imageDigestPackageFixed in
ghcr.io/mumble-voip/mumble-server:v1.6.87002fd613b6a35
pcre2@10.42-4ubuntu2.1
no fix listed

Open the chart page →

2,400
kubedeploysysbee1.2.21 of 1See more

kubedeploy sysbee 1.2.2

1 of the 1 container images this version deploys carry CVE-2026-103111.

Container imageDigestPackageFixed in
library/nginx:latestabe47724e466
pcre2@10.46-1~deb13u2
10.46-1~deb13u3

Open the chart page →

1,859
apptaxmd-helm-chart0.0.21 of 1See more

app taxmd-helm-chart 0.0.2

1 of the 1 container images this version deploys carry CVE-2026-103111.

Container imageDigestPackageFixed in
library/nginx:latestabe47724e466
pcre2@10.46-1~deb13u2
10.46-1~deb13u3

Open the chart page →

1,859
teamcity-serverteamcity-server3.3.51 of 2See more

teamcity-server teamcity-server 3.3.5

1 of the 2 container images this version deploys carry CVE-2026-103111.

Container imageDigestPackageFixed in
library/haproxy:3.2ad870ce41292
pcre2@10.46-1~deb13u2
10.46-1~deb13u3

Open the chart page →

773
tenuretenureVerified publisher1.0.61 of 2See more

tenure tenure 1.0.6

1 of the 2 container images this version deploys carry CVE-2026-103111.

Container imageDigestPackageFixed in
tenureai/tenure:v1.0.285f5b222df9a5
pcre2@10.46-1~deb13u1+dhi1
10.46-1~deb13u3

Open the chart page →

3,260
jenkinstestchart0.1.91 of 2See more

jenkins testchart 0.1.9

1 of the 2 container images this version deploys carry CVE-2026-103111.

Container imageDigestPackageFixed in
jenkins/jenkins:2.426.1-jdk11b470bcdc4ecd
pcre2@10.42-1
no fix listed

Open the chart page →

10,031
jenkinstest-jenkins9.1.01 of 2See more

jenkins test-jenkins 9.1.0

1 of the 2 container images this version deploys carry CVE-2026-103111.

Container imageDigestPackageFixed in
jenkins/jenkins:2.426.1-jdk11b470bcdc4ecd
pcre2@10.42-1
no fix listed

Open the chart page →

10,031
tocktock0.6.31 of 9See more

tock tock 0.6.3

1 of the 9 container images this version deploys carry CVE-2026-103111.

Container imageDigestPackageFixed in
tock/gen-ai-orchestrator-server:25.10.7abf7880e0449
pcre2@10.46-1~deb13u1
10.46-1~deb13u3

Open the chart page →

15,943
guardrails-agent-kubernetesturbotVerified publisher0.3.01 of 1See more

guardrails-agent-kubernetes turbot 0.3.0

1 of the 1 container images this version deploys carry CVE-2026-103111.

Container imageDigestPackageFixed in
ghcr.io/turbot/guardrails-agent-kubernetes:0.3.09d01bf9c9224
pcre2@10.42-4ubuntu2
no fix listed

Open the chart page →

4,658
espocrmtwenty20-helm-chartsVerified publisher2.0.61 of 2See more

espocrm twenty20-helm-charts 2.0.6

1 of the 2 container images this version deploys carry CVE-2026-103111.

Container imageDigestPackageFixed in
library/nginx:1.31.6-alpine-slimf761b94f2cb9
pcre2@10.48-r0
10.49-r0

Open the chart page →

133
typemilltypemill-helm-chart2.3.02 of 2See more

typemill typemill-helm-chart 2.3.0

2 of the 2 container images this version deploys carry CVE-2026-103111.

Container imageDigestPackageFixed in
kixote/typemilldigest-pinned628f79a08cc7
pcre2@10.46-1~deb13u1
10.46-1~deb13u3
kixote/typemilldigest-pinned7dfb517d24f0
pcre2@10.46-1~deb13u2
10.46-1~deb13u3

Open the chart page →

6,097
typesensetypesenseVerified publisher1.1.41 of 1See more

typesense typesense 1.1.4

1 of the 1 container images this version deploys carry CVE-2026-103111.

Container imageDigestPackageFixed in
typesense/typesense:30.191604dc128e2
pcre2@10.39-3ubuntu0.1
no fix listed

Open the chart page →

2,135
ueransim-gnbueransim-gnbVerified publisher0.2.61 of 1See more

ueransim-gnb ueransim-gnb 0.2.6

1 of the 1 container images this version deploys carry CVE-2026-103111.

Container imageDigestPackageFixed in
gradiant/ueransim:3.2.6015b30d5fa0f
pcre2@10.39-3ubuntu0.1
no fix listed

Open the chart page →

4,254
ueransim-uesueransim-uesVerified publisher0.1.21 of 1See more

ueransim-ues ueransim-ues 0.1.2

1 of the 1 container images this version deploys carry CVE-2026-103111.

Container imageDigestPackageFixed in
gradiant/ueransim:3.2.6015b30d5fa0f
pcre2@10.39-3ubuntu0.1
no fix listed

Open the chart page →

4,254
u-storeunifieVerified publisher1.2.01 of 1See more

u-store unifie 1.2.0

1 of the 1 container images this version deploys carry CVE-2026-103111.

Container imageDigestPackageFixed in
public.ecr.aws/g4a0y2u8/unifie-store:staging-19925a2057fabc948
pcre2@10.42-1
no fix listed

Open the chart page →

16,527
unitycatalogunitycatalogVerified publisher0.0.21 of 4See more

unitycatalog unitycatalog 0.0.2

1 of the 4 container images this version deploys carry CVE-2026-103111.

Container imageDigestPackageFixed in
ghcr.io/sdwbgn/unitycatalog-helm/docker/unitycatalog-ui:0.2.1-5d668c1ed07e7ca098d
pcre2@10.42-1
no fix listed

Open the chart page →

13,615
taigaunxwaresVerified publisher2026.3.82 of 6See more

taiga unxwares 2026.3.8

2 of the 6 container images this version deploys carry CVE-2026-103111.

Container imageDigestPackageFixed in
taigaio/taiga-back:latest4beed8f62c9f
pcre2@10.46-1~deb13u1
10.46-1~deb13u3
taigaio/taiga-protected:latestfd4568a97a59
pcre2@10.46-1~deb13u1
10.46-1~deb13u3

Open the chart page →

10,480
varnish-cachevarnishVerified publisher1.1.11 of 1See more

varnish-cache varnish 1.1.1

1 of the 1 container images this version deploys carry CVE-2026-103111.

Container imageDigestPackageFixed in
library/varnish:7.5.04d0bb287d87b
pcre2@10.42-1
no fix listed

Open the chart page →

4,765
varnish-ingress-controllervarnish-ingress-controllerVerified publisher0.5.01 of 1See more

varnish-ingress-controller varnish-ingress-controller 0.5.0

1 of the 1 container images this version deploys carry CVE-2026-103111.

Container imageDigestPackageFixed in
mariusm/vingress:0.5.0b3db186c3d72
pcre2@10.46-1~deb13u1
10.46-1~deb13u3

Open the chart page →

2,616
vaultwarden-kubernetes-secretsvaultwarden-kubernetes-secrets0.0.0-main1 of 2See more

vaultwarden-kubernetes-secrets vaultwarden-kubernetes-secrets 0.0.0-main

1 of the 2 container images this version deploys carry CVE-2026-103111.

Container imageDigestPackageFixed in
ghcr.io/antoniolago/vaultwarden-kubernetes-secrets:0.0.0-main13e267ad7d94
pcre2@10.42-4ubuntu2.1
no fix listed

Open the chart page →

4,512
devportal-admin-uiveecode-platformVerified publisher0.5.41 of 1See more

devportal-admin-ui veecode-platform 0.5.4

1 of the 1 container images this version deploys carry CVE-2026-103111.

Container imageDigestPackageFixed in
veecode/devportal-admin-ui:0.4.30c69fd286b489
pcre2@10.42-1
no fix listed

Open the chart page →

5,939
phpipamvquieVerified publisher1.0.31 of 3See more

phpipam vquie 1.0.3

1 of the 3 container images this version deploys carry CVE-2026-103111.

Container imageDigestPackageFixed in
library/mariadb:10.11.21c33370a599c
pcre2@10.39-3ubuntu0.1
no fix listed

Open the chart page →

8,168
waldurwaldur-chartsVerified publisher8.1.23 of 3See more

waldur waldur-charts 8.1.2

3 of the 3 container images this version deploys carry CVE-2026-103111.

Container imageDigestPackageFixed in
library/postgres:17f4c66b820c6f
pcre2@10.46-1~deb13u2
10.46-1~deb13u3
opennode/waldur-homeport:8.1.2a8b5b4777027
pcre2@10.47-r1
10.49-r0
opennode/waldur-mastermind:8.1.24c82b15d9042
pcre2@10.46-1~deb13u1
10.46-1~deb13u3

Open the chart page →

5,772
reflectorwener10.0.651 of 1See more

reflector wener 10.0.65

1 of the 1 container images this version deploys carry CVE-2026-103111.

Container imageDigestPackageFixed in
emberstack/kubernetes-reflector:10.0.6551dbd5880929
pcre2@10.42-4ubuntu2.1
no fix listed

Open the chart page →

855
spark-operatorwikimedia2.2.71 of 1See more

spark-operator wikimedia 2.2.7

1 of the 1 container images this version deploys carry CVE-2026-103111.

Container imageDigestPackageFixed in
ghcr.io/kubeflow/spark-operator/controller:2.2.1865ff4da5686
pcre2@10.34-7ubuntu0.1
no fix listed

Open the chart page →

58,087
wordpress-e2e-setupwoocommerce-e2e-setup0.1.11 of 2See more

wordpress-e2e-setup woocommerce-e2e-setup 0.1.1

1 of the 2 container images this version deploys carry CVE-2026-103111.

Container imageDigestPackageFixed in
library/wordpress:6.8-apache30bff39330d1
pcre2@10.46-1~deb13u1
10.46-1~deb13u3

Open the chart page →

8,972
wordpress-helmwordpress-helm0.2.91 of 4See more

wordpress-helm wordpress-helm 0.2.9

1 of the 4 container images this version deploys carry CVE-2026-103111.

Container imageDigestPackageFixed in
aapjeisbaas/wp-frankenphp:v0.2.26b261abc7fb0
pcre2@10.46-1~deb13u1
10.46-1~deb13u3

Open the chart page →

9,436
workflows-aggregatorworkflows-aggregatorVerified publisher0.16.111 of 1See more

workflows-aggregator workflows-aggregator 0.16.11

1 of the 1 container images this version deploys carry CVE-2026-103111.

Container imageDigestPackageFixed in
registry.gitlab.com/dyff/workflows-aggregator:0.16.1126450354eba9
pcre2@10.46-1build1
no fix listed

Open the chart page →

983
workflows-sinkworkflows-sinkVerified publisher0.16.41 of 1See more

workflows-sink workflows-sink 0.16.4

1 of the 1 container images this version deploys carry CVE-2026-103111.

Container imageDigestPackageFixed in
registry.gitlab.com/dyff/workflows-sink:0.16.4001e589acf2e
pcre2@10.42-1+deb12u1
no fix listed

Open the chart page →

1,582
wraftwraft0.1.121 of 9See more

wraft wraft 0.1.12

1 of the 9 container images this version deploys carry CVE-2026-103111.

Container imageDigestPackageFixed in
typesense/typesense:28.0.rc35dea1b62b7b6e
pcre2@10.39-3ubuntu0.1
no fix listed

Open the chart page →

10,776
discord-botxxczakiVerified publisher0.34.61 of 2See more

discord-bot xxczaki 0.34.6

1 of the 2 container images this version deploys carry CVE-2026-103111.

Container imageDigestPackageFixed in
xxczaki/discord-bot:977817056db0208765df5db36fd3d485b8256dd27ece2a729725
pcre2@10.47-r1
10.49-r0

Open the chart page →

755
youtubedl-materialyoutubedl-materialVerified publisher0.0.11 of 1See more

youtubedl-material youtubedl-material 0.0.1

1 of the 1 container images this version deploys carry CVE-2026-103111.

Container imageDigestPackageFixed in
tzahi12345/youtubedl-material:latest2f943d584711
pcre2@10.39-3ubuntu0.1
no fix listed

Open the chart page →

10,627
yugawareyugabyteVerified publisher2026.1.21 of 5See more

yugaware yugabyte 2026.1.2

1 of the 5 container images this version deploys carry CVE-2026-103111.

Container imageDigestPackageFixed in
library/postgres:14.232f439458ab6a
pcre2@10.46-1~deb13u1
10.46-1~deb13u3

Open the chart page →

2,190
qleverzazukoVerified publisher0.7.11 of 2See more

qlever zazuko 0.7.1

1 of the 2 container images this version deploys carry CVE-2026-103111.

Container imageDigestPackageFixed in
ghcr.io/zazukoians/qlever-server:v0.10.11de7869ab46e
pcre2@10.42-4ubuntu2.1
no fix listed

Open the chart page →

2,953
zcash-stackzcashVerified publisher0.4.51 of 2See more

zcash-stack zcash 0.4.5

1 of the 2 container images this version deploys carry CVE-2026-103111.

Container imageDigestPackageFixed in
electriccoinco/lightwalletd:v0.5.42ae3a551e111
pcre2@10.46-1~deb13u1
10.46-1~deb13u3

Open the chart page →

3,316
crowdsec-web-uizekker6Verified publisher0.53.01 of 1See more

crowdsec-web-ui zekker6 0.53.0

1 of the 1 container images this version deploys carry CVE-2026-103111.

Container imageDigestPackageFixed in
ghcr.io/theduffman85/crowdsec-web-ui:2026.9.2714d62ccd80c
pcre2@10.46-1~deb13u2
10.46-1~deb13u3

Open the chart page →

1,687
healthcheckszekker6Verified publisher1.20.01 of 1See more

healthchecks zekker6 1.20.0

1 of the 1 container images this version deploys carry CVE-2026-103111.

Container imageDigestPackageFixed in
linuxserver/healthchecks:4.4.2026092108a37bd6dcf2
pcre2@10.48-r0
10.49-r0

Open the chart page →

238
mikochizer0tonin1.12.01 of 1See more

mikochi zer0tonin 1.12.0

1 of the 1 container images this version deploys carry CVE-2026-103111.

Container imageDigestPackageFixed in
zer0tonin/mikochi:1.12.0f7ee3fe7ee6b
pcre2@10.46-1build1
no fix listed

Open the chart page →

524
backendzymtraceOfficialVerified publisher26.10.03 of 6See more

backend zymtrace 26.10.0

3 of the 6 container images this version deploys carry CVE-2026-103111.

Container imageDigestPackageFixed in
clickhouse/clickhouse-server:25.3.14.14b627d7a9bc0e
pcre2@10.39-3ubuntu0.1
no fix listed
library/postgres:17.4304ab8135187
pcre2@10.42-1
no fix listed
ghcr.io/zystem-io/zymtrace-pub-gateway:26.10.05f9c33dfc3f9
pcre2@10.39-3ubuntu0.1
no fix listed

Open the chart page →

10,752
abstract-nodeabstract-nodeVerified publisher0.1.491 of 2See more

abstract-node abstract-node 0.1.49

1 of the 2 container images this version deploys carry CVE-2026-103111.

Container imageDigestPackageFixed in
matterlabs/external-node:9734bf2-17870579939295dadc06bdf3b
pcre2@10.42-1
no fix listed

Open the chart page →

5,419

Container images carrying it

2,621 by charts deploying them

A fixed version is listed for 2 of the 3 affected packages.

Container imageDigestPackageFixed inUsed by
registry.gitlab.com/gitlab-org/build/cng/gitlab-container-registry:v4.40.2-gitlabb21661438ee9
pcre2@10.42-1+deb12u1
no fix listed
1
registry.gitlab.com/gitlab-org/build/cng/gitlab-exporter:17.0.25b0d50fcd5ea
pcre2@10.46-1~deb13u2
10.46-1~deb13u3
1
registry.gitlab.com/gitlab-org/build/cng/gitlab-openbao:v2.6.2-gitlab1a80159109e74
pcre2@10.46-1~deb13u2
10.46-1~deb13u3
1
registry.gitlab.com/gitlab-org/build/cng/gitlab-shell:v14.57.3180688274b2c
pcre2@10.46-1~deb13u2
10.46-1~deb13u3
1
registry.gitlab.com/gitlab-org/build/cng/gitlab-workhorse-ee:v19.4.17419aa33eb17
pcre2@10.46-1~deb13u2
10.46-1~deb13u3
1
registry.gitlab.com/gitlab-org/build/cng/kubectl:v19.4.1a072f0a41f28
pcre2@10.46-1~deb13u2
10.46-1~deb13u3
1
registry.gitlab.com/infinitydon/registry/open5gs-aio:v2.2.2f6385712935f
pcre2@10.34-7
no fix listed
1
registry.gitlab.com/prisme.ai/prisme.ai/prisme.ai-platform:prod3356b5fe283a
pcre2@10.48-r0
10.49-r0
1
registry.gitlab.com/school_guy/docker-typo3:13.4.30-197d868ed76185d7270d
pcre2@10.42-1
no fix listed
1
registry.k8s.io/csi-secrets-store/driver:v1.6.1b48d7d13dd06
pcre2@10.42-1+deb12u1
no fix listed
1
registry.k8s.io/dns/k8s-dns-node-cache:1.23.081a13703d6b8
pcre2@10.42-1
no fix listed
1
registry.k8s.io/dns/k8s-dns-node-cache:1.26.78b9a78d101a1
pcre2@10.42-1
no fix listed
1
registry.k8s.io/dns/k8s-dns-node-cache:1.23.1e3dccb1a21d1
pcre2@10.42-1
no fix listed
1
registry.k8s.io/git-sync/git-sync:v4.5.00e64aedb0d0a
pcre2@10.46-1~deb13u1
10.46-1~deb13u3
1
registry.k8s.io/git-sync/git-sync:v4.1.0fd9722fd02e3
pcre2@10.42-1
no fix listed
1
registry.k8s.io/node-problem-detector/node-problem-detector:v0.8.2052f0618e9bc2
pcre2@10.42-1
no fix listed
1
registry.k8s.io/node-problem-detector/node-problem-detector:v1.35.1c380751accc5
pcre2@10.42-1
no fix listed
1
registry.k8s.io/sig-storage/local-volume-provisioner:v2.8.03e2bf2eaef9f
pcre2@10.42-1
no fix listed
1
registry.k8s.io/sig-storage/local-volume-provisioner:v2.9.0f9d65db8bda2
pcre2@10.42-1
no fix listed
1
registry.k8s.io/sig-storage/nfsplugin:v4.13.41eb5a85180a4
pcre2@10.42-1
no fix listed
1
registry.k8s.io/sig-storage/nfsplugin:v4.11.0ce5b5ccd5eb0
pcre2@10.42-1
no fix listed
1

syft 1.42.1 · advisories as of 3 Oct 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.