StackRadar

CVE-2026-103111

High

Advisory

Published 30 Sept 2026In the index since 1 Oct 2026
Severity
High
worst across findings
CVSS
7.6
base score, highest
EPSS
0.002
10th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
2,665
of 17,985 indexed, latest versions
Container images
2,621
deployed by those charts
Fix available
2 of 3
affected packages

CVE-2026-103111 affecting package pcre2 10.48-1

Carried by container images the latest versions of 2,665 of 17,985 indexed charts deploy, on 2,621 images.

Affected packageAffected versionsFixed inImages
pcre2deb10.21-1, 10.34-7, 10.34-7ubuntu0.1, 10.39-3+ubuntu20.04.1+deb.sury.org+2+13 more10.46-1~deb13u32,423
pcre2apk10.47-r0, 10.47-r1, 10.48-r010.49-r0191
pcre2rpm10.42-3.azl3no fix listed7
OSV records
ALPINE-CVE-2026-103111AZL-105119DEBIAN-CVE-2026-103111ECHO-bf42-43c6-45fdUBUNTU-CVE-2026-103111
Trending
Rank 1 in indexed charts, since 1 Oct 2026. See the ranking →

Charts affected

2,665 by stars
ChartLatestAffected imagesRadar Score
amorphieamorphie0.1.22 of 18See more

amorphie amorphie 0.1.2

2 of the 18 container images this version deploys carry CVE-2026-103111.

Container imageDigestPackageFixed in
camunda/zeebe:8.4.5ab5abc09e407
pcre2@10.39-3ubuntu0.1
no fix listed
ghcr.io/camunda-community-hub/zeebe-simple-monitor:2.6.2d9d796a1b846
pcre2@10.39-3ubuntu0.1
no fix listed

Open the chart page →

33,385
anchore-admission-controlleranchore-charts0.9.01 of 2See more

anchore-admission-controller anchore-charts 0.9.0

1 of the 2 container images this version deploys carry CVE-2026-103111.

Container imageDigestPackageFixed in
cfssl/cfssl:v1.6.5c9018c2ddf0b
pcre2@10.42-1
no fix listed

Open the chart page →

8,379
music-assistant-serverandibraeuVerified publisher2.1.21 of 1See more

music-assistant-server andibraeu 2.1.2

1 of the 1 container images this version deploys carry CVE-2026-103111.

Container imageDigestPackageFixed in
ghcr.io/music-assistant/server:2.9.950666a6f8d7f
pcre2@10.42-1
no fix listed

Open the chart page →

6,860
stalwartandibraeuVerified publisher1.0.21 of 1See more

stalwart andibraeu 1.0.2

1 of the 1 container images this version deploys carry CVE-2026-103111.

Container imageDigestPackageFixed in
stalwartlabs/stalwart:v0.16.1425001929f36a
pcre2@10.46-1~deb13u1
10.46-1~deb13u3

Open the chart page →

1,854
pagesandrei-pages1.0.01 of 3See more

pages andrei-pages 1.0.0

1 of the 3 container images this version deploys carry CVE-2026-103111.

Container imageDigestPackageFixed in
dellcloud/pages:monitor6ba7b22caacd
pcre2@10.34-7
no fix listed

Open the chart page →

21,119
mathesarandrenarchyVerified publisher1.8.01 of 1See more

mathesar andrenarchy 1.8.0

1 of the 1 container images this version deploys carry CVE-2026-103111.

Container imageDigestPackageFixed in
mathesar/mathesar:0.12.0091757cb01fe
pcre2@10.42-1
no fix listed

Open the chart page →

8,109
speech-to-phraseandrenarchyVerified publisher1.3.01 of 1See more

speech-to-phrase andrenarchy 1.3.0

1 of the 1 container images this version deploys carry CVE-2026-103111.

Container imageDigestPackageFixed in
rhasspy/wyoming-speech-to-phrase:1.4.3e532f0dbc6b2
pcre2@10.42-1
no fix listed

Open the chart page →

4,384
games-on-whalesangelnu2.0.04 of 7See more

games-on-whales angelnu 2.0.0

4 of the 7 container images this version deploys carry CVE-2026-103111.

Container imageDigestPackageFixed in
andrewmackrodt/firefox-x11:142.0.1-r133f9080470c9
pcre2@10.39-3ubuntu0.1
no fix listed
ghcr.io/games-on-whales/pulseaudio:1.0.0f34f98405c10
pcre2@10.34-7
no fix listed
ghcr.io/games-on-whales/retroarch:1.0.0103fbcec2314
pcre2@10.34-7
no fix listed
ghcr.io/games-on-whales/steam:1.0.09b6105be7ad0
pcre2@10.34-7
no fix listed

Open the chart page →

123,077
ansible-inspecansible-inspec0.2.171 of 2See more

ansible-inspec ansible-inspec 0.2.17

1 of the 2 container images this version deploys carry CVE-2026-103111.

Container imageDigestPackageFixed in
ghcr.io/htunn/ansible-inspec:0.2.12cd25a5cc3f1b
pcre2@10.46-1~deb13u1
10.46-1~deb13u3

Open the chart page →

6,161
ddosifyanteonVerified publisher1.7.52 of 13See more

ddosify anteon 1.7.5

2 of the 13 container images this version deploys carry CVE-2026-103111.

Container imageDigestPackageFixed in
ddosify/selfhosted_alaz_backend:1.0.6a43c5155fa1c
pcre2@10.42-1
no fix listed
ddosify/selfhosted_backend:2.6.11ac323d52bfb4
pcre2@10.42-1
no fix listed

Open the chart page →

30,611
antigenic-stalwart-helm-chartantigenic-stalwart-helm-chartVerified publisher1.0.51 of 2See more

antigenic-stalwart-helm-chart antigenic-stalwart-helm-chart 1.0.5

1 of the 2 container images this version deploys carry CVE-2026-103111.

Container imageDigestPackageFixed in
stalwartlabs/stalwart:v0.15.5dcf575db2d53
pcre2@10.46-1~deb13u1
10.46-1~deb13u3

Open the chart page →

1,732
antmediaantmediaVerified publisher3.1.01 of 4See more

antmedia antmedia 3.1.0

1 of the 4 container images this version deploys carry CVE-2026-103111.

Container imageDigestPackageFixed in
library/mongo:8.04968f22d0c6c
pcre2@10.42-4ubuntu2.1
no fix listed

Open the chart page →

5,896
antrea-uiantreaVerified publisher0.8.01 of 2See more

antrea-ui antrea 0.8.0

1 of the 2 container images this version deploys carry CVE-2026-103111.

Container imageDigestPackageFixed in
antrea/antrea-ui-frontend:v0.8.0ee9686bcefb8
pcre2@10.46-1~deb13u1
10.46-1~deb13u3

Open the chart page →

3,715
flow-aggregatorantreaVerified publisher2.7.01 of 1See more

flow-aggregator antrea 2.7.0

1 of the 1 container images this version deploys carry CVE-2026-103111.

Container imageDigestPackageFixed in
antrea/flow-aggregator:v2.7.0065193e7572f
pcre2@10.42-4ubuntu2.1
no fix listed

Open the chart page →

956
imagepullerapache-pulsar-helm-chart-repo1.0.11 of 2See more

imagepuller apache-pulsar-helm-chart-repo 1.0.1

1 of the 2 container images this version deploys carry CVE-2026-103111.

Container imageDigestPackageFixed in
library/docker:latest3f3c01aaaebf
pcre2@10.48-r0
10.49-r0

Open the chart page →

371
kesque-dashboardapache-pulsar-helm-chart-repo0.0.52 of 5See more

kesque-dashboard apache-pulsar-helm-chart-repo 0.0.5

2 of the 5 container images this version deploys carry CVE-2026-103111.

Container imageDigestPackageFixed in
library/mariadb:latestd4fdec0510ad
pcre2@10.46-1build1
no fix listed
library/nginx:latestabe47724e466
pcre2@10.46-1~deb13u2
10.46-1~deb13u3

Open the chart page →

4,500
apispringbootHelmapispringboot0.1.01 of 1See more

apispringbootHelm apispringboot 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-103111.

Container imageDigestPackageFixed in
rabeh/apibootspring:1.0941007b6946e
pcre2@10.39-3ubuntu0.1
no fix listed

Open the chart page →

6,639
d.vazquezm.2021_helmapphelmVerified publisher1.0.01 of 6See more

d.vazquezm.2021_helm apphelm 1.0.0

1 of the 6 container images this version deploys carry CVE-2026-103111.

Container imageDigestPackageFixed in
library/mongo:5.0.6-focal8e70544b6c76
pcre2@10.34-7
no fix listed

Open the chart page →

24,650
appriseapprise0.2.11 of 1See more

apprise apprise 0.2.1

1 of the 1 container images this version deploys carry CVE-2026-103111.

Container imageDigestPackageFixed in
caronc/apprise:latestcc5ef662ad2a
pcre2@10.46-1~deb13u2
10.46-1~deb13u3

Open the chart page →

1,877
accounts-uiappscodeVerified publisher2026.9.111 of 1See more

accounts-ui appscode 2026.9.11

1 of the 1 container images this version deploys carry CVE-2026-103111.

Container imageDigestPackageFixed in
ghcr.io/appscode/b3:v2026.9.1139076a89c36b
pcre2@10.42-1+deb12u1
no fix listed

Open the chart page →

2,940
aceappscodeVerified publisher2026.9.111 of 2See more

ace appscode 2026.9.11

1 of the 2 container images this version deploys carry CVE-2026-103111.

Container imageDigestPackageFixed in
ghcr.io/appscode/b3:v2026.9.1139076a89c36b
pcre2@10.42-1+deb12u1
no fix listed

Open the chart page →

3,439
ace-installerappscodeVerified publisher2026.9.111 of 2See more

ace-installer appscode 2026.9.11

1 of the 2 container images this version deploys carry CVE-2026-103111.

Container imageDigestPackageFixed in
ghcr.io/appscode/b3:v2026.9.1139076a89c36b
pcre2@10.42-1+deb12u1
no fix listed

Open the chart page →

3,789
ace-installer-certifiedappscodeVerified publisher2026.9.111 of 2See more

ace-installer-certified appscode 2026.9.11

1 of the 2 container images this version deploys carry CVE-2026-103111.

Container imageDigestPackageFixed in
ghcr.io/appscode/b3:v2026.9.1178a9fb785ec5
pcre2@10.42-1+deb12u1
no fix listed

Open the chart page →

3,789
billingappscodeVerified publisher2026.9.111 of 1See more

billing appscode 2026.9.11

1 of the 1 container images this version deploys carry CVE-2026-103111.

Container imageDigestPackageFixed in
ghcr.io/appscode/b3:v2026.9.1139076a89c36b
pcre2@10.42-1+deb12u1
no fix listed

Open the chart page →

2,940
billing-uiappscodeVerified publisher2026.9.111 of 1See more

billing-ui appscode 2026.9.11

1 of the 1 container images this version deploys carry CVE-2026-103111.

Container imageDigestPackageFixed in
ghcr.io/appscode/billing-ui:2.5.01cb58bc2fa4f
pcre2@10.48-r0
10.49-r0

Open the chart page →

33
catalog-managerappscodeVerified publisher2026.9.111 of 1See more

catalog-manager appscode 2026.9.11

1 of the 1 container images this version deploys carry CVE-2026-103111.

Container imageDigestPackageFixed in
ghcr.io/appscode/catalog-manager:v0.14.091cf84624081
pcre2@10.48-r0
10.49-r0

Open the chart page →

139
cattlesetappscodeVerified publisher2026.7.81 of 1See more

cattleset appscode 2026.7.8

1 of the 1 container images this version deploys carry CVE-2026-103111.

Container imageDigestPackageFixed in
ghcr.io/appscode/cattleset:v0.0.145554a03e448
pcre2@10.47-r1
10.49-r0

Open the chart page →

829
cert-manager-csi-driver-cacertsappscodeVerified publisher2026.9.181 of 3See more

cert-manager-csi-driver-cacerts appscode 2026.9.18

1 of the 3 container images this version deploys carry CVE-2026-103111.

Container imageDigestPackageFixed in
ghcr.io/appscode/csi-driver-cacerts:v0.6.0ab213b156017
pcre2@10.42-1
no fix listed

Open the chart page →

3,300
cluster-presetsappscodeVerified publisher2026.9.111 of 1See more

cluster-presets appscode 2026.9.11

1 of the 1 container images this version deploys carry CVE-2026-103111.

Container imageDigestPackageFixed in
ghcr.io/appscode/cluster-presets:v0.0.128fbdd2479645
pcre2@10.47-r1
10.49-r0

Open the chart page →

530
cluster-profile-managerappscodeVerified publisher2026.9.181 of 1See more

cluster-profile-manager appscode 2026.9.18

1 of the 1 container images this version deploys carry CVE-2026-103111.

Container imageDigestPackageFixed in
ghcr.io/kluster-manager/cluster-profile:v0.13.0b8b0aaef2543
pcre2@10.48-r0
10.49-r0

Open the chart page →

183
cluster-uiappscodeVerified publisher2026.9.111 of 1See more

cluster-ui appscode 2026.9.11

1 of the 1 container images this version deploys carry CVE-2026-103111.

Container imageDigestPackageFixed in
ghcr.io/appscode/cluster-ui:2.5.01ccb903404ac
pcre2@10.48-r0
10.49-r0

Open the chart page →

33
external-dns-operatorappscodeVerified publisher2026.6.221 of 1See more

external-dns-operator appscode 2026.6.22

1 of the 1 container images this version deploys carry CVE-2026-103111.

Container imageDigestPackageFixed in
ghcr.io/appscode/external-dns-operator:v0.4.05605f97e636d
pcre2@10.47-r1
10.49-r0

Open the chart page →

465
inbox-agentappscodeVerified publisher2026.6.21 of 2See more

inbox-agent appscode 2026.6.2

1 of the 2 container images this version deploys carry CVE-2026-103111.

Container imageDigestPackageFixed in
ghcr.io/appscode/inbox-agent:v0.0.6f630e47772c9
pcre2@10.48-r0
10.49-r0

Open the chart page →

2,385
inbox-serverappscodeVerified publisher2025.12.251 of 1See more

inbox-server appscode 2025.12.25

1 of the 1 container images this version deploys carry CVE-2026-103111.

Container imageDigestPackageFixed in
ghcr.io/appscode/inbox-server:postgres-latest536358d7b17e
pcre2@10.39-3ubuntu0.1
no fix listed

Open the chart page →

4,500
inbox-server-distributedappscodeVerified publisher2025.12.253 of 4See more

inbox-server-distributed appscode 2025.12.25

3 of the 4 container images this version deploys carry CVE-2026-103111.

Container imageDigestPackageFixed in
library/cassandra:4.1.37cbcec0086ac
pcre2@10.39-3ubuntu0.1
no fix listed
library/rabbitmq:3.12.1-managementf020c06da226
pcre2@10.39-3ubuntu0.1
no fix listed
ghcr.io/appscode/inbox-server:latest536358d7b17e
pcre2@10.39-3ubuntu0.1
no fix listed

Open the chart page →

17,948
inbox-uiappscodeVerified publisher2026.9.111 of 1See more

inbox-ui appscode 2026.9.11

1 of the 1 container images this version deploys carry CVE-2026-103111.

Container imageDigestPackageFixed in
ghcr.io/appscode/inbox-ui:0.0.5d6d77659b12a
pcre2@10.48-r0
10.49-r0

Open the chart page →

71
james-komposeappscodeVerified publisher0.1.03 of 4See more

james-kompose appscode 0.1.0

3 of the 4 container images this version deploys carry CVE-2026-103111.

Container imageDigestPackageFixed in
library/cassandra:4.1.37cbcec0086ac
pcre2@10.39-3ubuntu0.1
no fix listed
library/rabbitmq:3.12.1-managementf020c06da226
pcre2@10.39-3ubuntu0.1
no fix listed
ghcr.io/appscode/inbox-server:MailetGroup4a2824296412
pcre2@10.39-3ubuntu0.1
no fix listed

Open the chart page →

19,323
kubedb-certifiedappscodeVerified publisher2026.7.101 of 8See more

kubedb-certified appscode 2026.7.10

1 of the 8 container images this version deploys carry CVE-2026-103111.

Container imageDigestPackageFixed in
ghcr.io/appscode/sidekick:v0.0.15d1036b07e348
pcre2@10.47-r1
10.49-r0

Open the chart page →

5,863
kubedb-uiappscodeVerified publisher2026.9.111 of 1See more

kubedb-ui appscode 2026.9.11

1 of the 1 container images this version deploys carry CVE-2026-103111.

Container imageDigestPackageFixed in
ghcr.io/appscode/kubedb-ui:2.5.04eee8608ac49
pcre2@10.48-r0
10.49-r0

Open the chart page →

33
kube-ui-serverappscodeVerified publisher2026.9.111 of 1See more

kube-ui-server appscode 2026.9.11

1 of the 1 container images this version deploys carry CVE-2026-103111.

Container imageDigestPackageFixed in
ghcr.io/appscode/kube-ui-server:v0.7.0c76693a329c1
pcre2@10.48-r0
10.49-r0

Open the chart page →

287
license-proxyserverappscodeVerified publisher2026.9.181 of 1See more

license-proxyserver appscode 2026.9.18

1 of the 1 container images this version deploys carry CVE-2026-103111.

Container imageDigestPackageFixed in
ghcr.io/appscode/license-proxyserver:v0.1.28dfd7a44f362
pcre2@10.48-r0
10.49-r0

Open the chart page →

104
license-proxyserver-managerappscodeVerified publisher2026.9.181 of 1See more

license-proxyserver-manager appscode 2026.9.18

1 of the 1 container images this version deploys carry CVE-2026-103111.

Container imageDigestPackageFixed in
ghcr.io/appscode/license-proxyserver:v0.1.28dfd7a44f362
pcre2@10.48-r0
10.49-r0

Open the chart page →

104
marketplace-apiappscodeVerified publisher2026.9.111 of 1See more

marketplace-api appscode 2026.9.11

1 of the 1 container images this version deploys carry CVE-2026-103111.

Container imageDigestPackageFixed in
ghcr.io/appscode/b3:v2026.9.1139076a89c36b
pcre2@10.42-1+deb12u1
no fix listed

Open the chart page →

2,940
operator-shard-managerappscodeVerified publisher2026.6.221 of 1See more

operator-shard-manager appscode 2026.6.22

1 of the 1 container images this version deploys carry CVE-2026-103111.

Container imageDigestPackageFixed in
ghcr.io/appscode/operator-shard-manager:v0.0.64a16c6ccecb8
pcre2@10.47-r1
10.49-r0

Open the chart page →

592
outbox-syncerappscodeVerified publisher2026.9.111 of 1See more

outbox-syncer appscode 2026.9.11

1 of the 1 container images this version deploys carry CVE-2026-103111.

Container imageDigestPackageFixed in
ghcr.io/appscode/outboxsyncer:v0.6.0d70d784176c1
pcre2@10.48-r0
10.49-r0

Open the chart page →

133
petsetappscodeVerified publisher2026.9.181 of 1See more

petset appscode 2026.9.18

1 of the 1 container images this version deploys carry CVE-2026-103111.

Container imageDigestPackageFixed in
ghcr.io/appscode/petset:v0.2.0913f0858eb24
pcre2@10.48-r0
10.49-r0

Open the chart page →

514
pgoutboxappscodeVerified publisher2026.7.101 of 1See more

pgoutbox appscode 2026.7.10

1 of the 1 container images this version deploys carry CVE-2026-103111.

Container imageDigestPackageFixed in
ghcr.io/appscode/pgoutbox:v0.0.4a96e06ec5e9f
pcre2@10.47-r1
10.49-r0

Open the chart page →

1,043
platform-apiappscodeVerified publisher2026.9.112 of 3See more

platform-api appscode 2026.9.11

2 of the 3 container images this version deploys carry CVE-2026-103111.

Container imageDigestPackageFixed in
ghcr.io/appscode/b3:v2026.9.1139076a89c36b
pcre2@10.42-1+deb12u1
no fix listed
ghcr.io/appscode/gotenberg:8.25f9104080d9a7
pcre2@10.46-1~deb13u1
10.46-1~deb13u3

Open the chart page →

41,302
s3proxyappscodeVerified publisher2026.9.111 of 1See more

s3proxy appscode 2026.9.11

1 of the 1 container images this version deploys carry CVE-2026-103111.

Container imageDigestPackageFixed in
ghcr.io/appscode/s3proxy:sha-a82ca6820518335f9f9
pcre2@10.39-3ubuntu0.1
no fix listed

Open the chart page →

3,570
sidekickappscodeVerified publisher2026.7.101 of 1See more

sidekick appscode 2026.7.10

1 of the 1 container images this version deploys carry CVE-2026-103111.

Container imageDigestPackageFixed in
ghcr.io/appscode/sidekick:v0.0.16d8d2a3c22ee7
pcre2@10.47-r1
10.49-r0

Open the chart page →

421

Container images carrying it

2,621 by charts deploying them

A fixed version is listed for 2 of the 3 affected packages.

Container imageDigestPackageFixed inUsed by
registry.gitlab.com/gitlab-org/build/cng/gitlab-container-registry:v4.40.2-gitlabb21661438ee9
pcre2@10.42-1+deb12u1
no fix listed
1
registry.gitlab.com/gitlab-org/build/cng/gitlab-exporter:17.0.25b0d50fcd5ea
pcre2@10.46-1~deb13u2
10.46-1~deb13u3
1
registry.gitlab.com/gitlab-org/build/cng/gitlab-openbao:v2.6.2-gitlab1a80159109e74
pcre2@10.46-1~deb13u2
10.46-1~deb13u3
1
registry.gitlab.com/gitlab-org/build/cng/gitlab-shell:v14.57.3180688274b2c
pcre2@10.46-1~deb13u2
10.46-1~deb13u3
1
registry.gitlab.com/gitlab-org/build/cng/gitlab-workhorse-ee:v19.4.17419aa33eb17
pcre2@10.46-1~deb13u2
10.46-1~deb13u3
1
registry.gitlab.com/gitlab-org/build/cng/kubectl:v19.4.1a072f0a41f28
pcre2@10.46-1~deb13u2
10.46-1~deb13u3
1
registry.gitlab.com/infinitydon/registry/open5gs-aio:v2.2.2f6385712935f
pcre2@10.34-7
no fix listed
1
registry.gitlab.com/prisme.ai/prisme.ai/prisme.ai-platform:prod3356b5fe283a
pcre2@10.48-r0
10.49-r0
1
registry.gitlab.com/school_guy/docker-typo3:13.4.30-197d868ed76185d7270d
pcre2@10.42-1
no fix listed
1
registry.k8s.io/csi-secrets-store/driver:v1.6.1b48d7d13dd06
pcre2@10.42-1+deb12u1
no fix listed
1
registry.k8s.io/dns/k8s-dns-node-cache:1.23.081a13703d6b8
pcre2@10.42-1
no fix listed
1
registry.k8s.io/dns/k8s-dns-node-cache:1.26.78b9a78d101a1
pcre2@10.42-1
no fix listed
1
registry.k8s.io/dns/k8s-dns-node-cache:1.23.1e3dccb1a21d1
pcre2@10.42-1
no fix listed
1
registry.k8s.io/git-sync/git-sync:v4.5.00e64aedb0d0a
pcre2@10.46-1~deb13u1
10.46-1~deb13u3
1
registry.k8s.io/git-sync/git-sync:v4.1.0fd9722fd02e3
pcre2@10.42-1
no fix listed
1
registry.k8s.io/node-problem-detector/node-problem-detector:v0.8.2052f0618e9bc2
pcre2@10.42-1
no fix listed
1
registry.k8s.io/node-problem-detector/node-problem-detector:v1.35.1c380751accc5
pcre2@10.42-1
no fix listed
1
registry.k8s.io/sig-storage/local-volume-provisioner:v2.8.03e2bf2eaef9f
pcre2@10.42-1
no fix listed
1
registry.k8s.io/sig-storage/local-volume-provisioner:v2.9.0f9d65db8bda2
pcre2@10.42-1
no fix listed
1
registry.k8s.io/sig-storage/nfsplugin:v4.13.41eb5a85180a4
pcre2@10.42-1
no fix listed
1
registry.k8s.io/sig-storage/nfsplugin:v4.11.0ce5b5ccd5eb0
pcre2@10.42-1
no fix listed
1

syft 1.42.1 · advisories as of 3 Oct 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.