StackRadar

CVE-2026-103111

High

Advisory

Published 30 Sept 2026In the index since 1 Oct 2026
Severity
High
worst across findings
CVSS
7.6
base score, highest
EPSS
0.002
10th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
2,643
of 17,992 indexed, latest versions
Container images
2,587
deployed by those charts
Fix available
2 of 3
affected packages

CVE-2026-103111 affecting package pcre2 10.48-1

Carried by container images the latest versions of 2,643 of 17,992 indexed charts deploy, on 2,587 images.

Affected packageAffected versionsFixed inImages
pcre2deb10.21-1, 10.34-7, 10.34-7ubuntu0.1, 10.39-3+ubuntu20.04.1+deb.sury.org+2+13 more10.42-1+deb12u2, 10.46-1~deb13u32,391
pcre2apk10.47-r0, 10.47-r1, 10.48-r010.49-r0189
pcre2rpm10.42-3.azl3no fix listed7
OSV records
ALPINE-CVE-2026-103111AZL-105119DEBIAN-CVE-2026-103111ECHO-bf42-43c6-45fdUBUNTU-CVE-2026-103111
Trending
Rank 1 in indexed charts, since 1 Oct 2026. See the ranking →

Charts affected

2,643 by stars
ChartLatestAffected imagesRadar Score
kbot-self-hostedkbot-self-hostedVerified publisher0.1.81 of 7See more

kbot-self-hosted kbot-self-hosted 0.1.8

1 of the 7 container images this version deploys carry CVE-2026-103111.

Container imageDigestPackageFixed in
gotenberg/gotenberg:8.30206a6c708fc6
pcre2@10.46-1~deb13u1
10.46-1~deb13u3

Open the chart page →

36,313
kc-chartkc-chart1.0.01 of 3See more

kc-chart kc-chart 1.0.0

1 of the 3 container images this version deploys carry CVE-2026-103111.

Container imageDigestPackageFixed in
jhoncytech/bookworm-apache-wordpress:latest18c3ca1f411e
pcre2@10.42-1
10.42-1+deb12u2

Open the chart page →

9,979
web-chartkcilab0.1.01 of 1See more

web-chart kcilab 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-103111.

Container imageDigestPackageFixed in
library/nginx:latestabe47724e466
pcre2@10.46-1~deb13u2
10.46-1~deb13u3

Open the chart page →

1,859
kenerkener-chart0.0.71 of 1See more

kener kener-chart 0.0.7

1 of the 1 container images this version deploys carry CVE-2026-103111.

Container imageDigestPackageFixed in
ghcr.io/rajnandan1/kener:3.2.182b993cb232eb
pcre2@10.42-1
10.42-1+deb12u2

Open the chart page →

6,109
kestra-starterkestraOfficialVerified publisher2.0.42 of 5See more

kestra-starter kestra 2.0.4

2 of the 5 container images this version deploys carry CVE-2026-103111.

Container imageDigestPackageFixed in
library/docker:dind-rootless1f029db43a32
pcre2@10.48-r0
10.49-r0
library/postgres:17.5aadf2c0696f5
pcre2@10.45-1
10.46-1~deb13u3

Open the chart page →

7,028
xwikikeyporttech0.2.01 of 2See more

xwiki keyporttech 0.2.0

1 of the 2 container images this version deploys carry CVE-2026-103111.

Container imageDigestPackageFixed in
library/xwiki:lts-postgres-tomcat9b8142bce157
pcre2@10.42-4ubuntu2.1
no fix listed

Open the chart page →

1,556
phppgadminkfirfer0.1.121 of 1See more

phppgadmin kfirfer 0.1.12

1 of the 1 container images this version deploys carry CVE-2026-103111.

Container imageDigestPackageFixed in
kfirfer/phppgadmin:7.13.0-22efb4a5d74a3
pcre2@10.34-7ubuntu0.1
no fix listed

Open the chart page →

11,046
quickwitkfirfer0.7.21 of 1See more

quickwit kfirfer 0.7.2

1 of the 1 container images this version deploys carry CVE-2026-103111.

Container imageDigestPackageFixed in
quickwit/quickwit:v0.8.2363ff56ce456
pcre2@10.42-1
10.42-1+deb12u2

Open the chart page →

3,702
rabbitmqkfirfer0.7.211 of 2See more

rabbitmq kfirfer 0.7.21

1 of the 2 container images this version deploys carry CVE-2026-103111.

Container imageDigestPackageFixed in
library/rabbitmq:3.12.100742852455ad
pcre2@10.39-3ubuntu0.1
no fix listed

Open the chart page →

2,717
web-chartkgw-ktcloudlab0.1.01 of 1See more

web-chart kgw-ktcloudlab 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-103111.

Container imageDigestPackageFixed in
library/nginx:latestabe47724e466
pcre2@10.46-1~deb13u2
10.46-1~deb13u3

Open the chart page →

1,859
kiaekiae0.1.61 of 9See more

kiae kiae 0.1.6

1 of the 9 container images this version deploys carry CVE-2026-103111.

Container imageDigestPackageFixed in
istio/pilot:1.15.2db08d6963975
pcre2@10.39-3ubuntu0.1
no fix listed

Open the chart page →

24,141
graphiti-mcpkiberonlabs0.1.21 of 1See more

graphiti-mcp kiberonlabs 0.1.2

1 of the 1 container images this version deploys carry CVE-2026-103111.

Container imageDigestPackageFixed in
zepai/knowledge-graph-mcp:v0.2.16ab0ee79926b
pcre2@10.42-1
10.42-1+deb12u2

Open the chart page →

3,738
kitarukitaru0.27.11 of 1See more

kitaru kitaru 0.27.1

1 of the 1 container images this version deploys carry CVE-2026-103111.

Container imageDigestPackageFixed in
zenmldocker/kitaru-server:0.27.1f1c4675a188b
pcre2@10.42-1+deb12u1
10.42-1+deb12u2

Open the chart page →

1,301
cdashkitwareVerified publisher0.20.03 of 3See more

cdash kitware 0.20.0

3 of the 3 container images this version deploys carry CVE-2026-103111.

Container imageDigestPackageFixed in
bitnamilegacy/minio:2024.12.18-debian-12-r0cce234b4381a
pcre2@10.42-1
10.42-1+deb12u2
bitnamilegacy/postgresql:17.2.0-debian-12-r5cf63048c9209
pcre2@10.42-1
10.42-1+deb12u2
kitware/cdash:v5.4.0da5abe941506
pcre2@10.46-1~deb13u2
10.46-1~deb13u3

Open the chart page →

13,151
klagklagVerified publisher0.3.171 of 1See more

klag klag 0.3.17

1 of the 1 container images this version deploys carry CVE-2026-103111.

Container imageDigestPackageFixed in
themoah/klag:0.2.187178531ebe86
pcre2@10.42-4ubuntu2.1
no fix listed

Open the chart page →

601
csa-exporterklicktippVerified publisher0.1.41 of 1See more

csa-exporter klicktipp 0.1.4

1 of the 1 container images this version deploys carry CVE-2026-103111.

Container imageDigestPackageFixed in
ghcr.io/klicktipp/csa-exporter:0.3.12c69513f9d85
pcre2@10.46-1~deb13u1
10.46-1~deb13u3

Open the chart page →

1,312
proxysqlklicktippVerified publisher1.3.01 of 1See more

proxysql klicktipp 1.3.0

1 of the 1 container images this version deploys carry CVE-2026-103111.

Container imageDigestPackageFixed in
proxysql/proxysql:3.0.8947a7abad45b
pcre2@10.46-1~deb13u1
10.46-1~deb13u3

Open the chart page →

2,886
rspamdklicktippVerified publisher1.6.11 of 1See more

rspamd klicktipp 1.6.1

1 of the 1 container images this version deploys carry CVE-2026-103111.

Container imageDigestPackageFixed in
rspamd/rspamd:4.1.4e870599c970d
pcre2@10.46-1~deb13u1
10.46-1~deb13u3

Open the chart page →

2,182
snds-exporterklicktippVerified publisher0.2.51 of 1See more

snds-exporter klicktipp 0.2.5

1 of the 1 container images this version deploys carry CVE-2026-103111.

Container imageDigestPackageFixed in
ghcr.io/klicktipp/snds-exporter:v0.2.4a23b389cb3c5
pcre2@10.46-1~deb13u1
10.46-1~deb13u3

Open the chart page →

1,321
kodboxkodboxVerified publisher0.4.31 of 5See more

kodbox kodbox 0.4.3

1 of the 5 container images this version deploys carry CVE-2026-103111.

Container imageDigestPackageFixed in
kodcloud/kodbox:1.68.1056293be9032c
pcre2@10.47-r1
10.49-r0

Open the chart page →

1,149
visual-regression-trackerkokuwa5.1.02 of 4See more

visual-regression-tracker kokuwa 5.1.0

2 of the 4 container images this version deploys carry CVE-2026-103111.

Container imageDigestPackageFixed in
bitnamilegacy/postgresql:16.3.0-debian-12-r15fdc6979dbc53
pcre2@10.42-1
10.42-1+deb12u2
visualregressiontracker/api:5.0.11941aeb8c8bf9
pcre2@10.42-1
10.42-1+deb12u2

Open the chart page →

9,865
kollectkollectVerified publisher0.21.01 of 1See more

kollect kollect 0.21.0

1 of the 1 container images this version deploys carry CVE-2026-103111.

Container imageDigestPackageFixed in
ghcr.io/platformrelay/kollect:v0.21.0a86edc5ec3a8
pcre2@10.42-1+deb12u1
10.42-1+deb12u2

Open the chart page →

1,919
kong-ai-gatewaykongVerified publisher0.2.11 of 1See more

kong-ai-gateway kong 0.2.1

1 of the 1 container images this version deploys carry CVE-2026-103111.

Container imageDigestPackageFixed in
kong/kong-ai-gateway:2.0.3367ed5985b76
pcre2@10.42-4ubuntu2.1
no fix listed

Open the chart page →

906
nginx-chartkosunjo-nginx0.1.01 of 1See more

nginx-chart kosunjo-nginx 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-103111.

Container imageDigestPackageFixed in
library/nginx:latestabe47724e466
pcre2@10.46-1~deb13u2
10.46-1~deb13u3

Open the chart page →

1,859
kpingkpingOfficialVerified publisher0.3.51 of 1See more

kping kping 0.3.5

1 of the 1 container images this version deploys carry CVE-2026-103111.

Container imageDigestPackageFixed in
kayrosuno/kping:latestf3bd44b29b0d
pcre2@10.42-4ubuntu2.1
no fix listed

Open the chart page →

2,635
appkrateo1.2.861 of 1See more

app krateo 1.2.86

1 of the 1 container images this version deploys carry CVE-2026-103111.

Container imageDigestPackageFixed in
ghcr.io/krateoplatformops/app:1.2.86aaa3fe7d5c74
pcre2@10.42-1
10.42-1+deb12u2

Open the chart page →

3,765
autopilotkrateo1.0.01 of 2See more

autopilot krateo 1.0.0

1 of the 2 container images this version deploys carry CVE-2026-103111.

Container imageDigestPackageFixed in
library/postgres:16a3b7f434b2dc
pcre2@10.46-1~deb13u2
10.46-1~deb13u3

Open the chart page →

1,694
crate-operatorkrateo2.43.11 of 1See more

crate-operator krateo 2.43.1

1 of the 1 container images this version deploys carry CVE-2026-103111.

Container imageDigestPackageFixed in
crate/crate-operator:2.43.1ea396813f6f0
pcre2@10.42-1
10.42-1+deb12u2

Open the chart page →

3,203
deployment-servicekrateo1.2.591 of 1See more

deployment-service krateo 1.2.59

1 of the 1 container images this version deploys carry CVE-2026-103111.

Container imageDigestPackageFixed in
ghcr.io/krateoplatformops/deployment-service:1.2.59da9f93f2f731
pcre2@10.42-1
10.42-1+deb12u2

Open the chart page →

10,173
etcdkrateo11.1.31 of 1See more

etcd krateo 11.1.3

1 of the 1 container images this version deploys carry CVE-2026-103111.

Container imageDigestPackageFixed in
ghcr.io/krateoplatformops/etcd:3.5.19-debian-12-r00d68858b2699
pcre2@10.42-1
10.42-1+deb12u2

Open the chart page →

2,897
finops-database-handlerkrateo0.5.41 of 1See more

finops-database-handler krateo 0.5.4

1 of the 1 container images this version deploys carry CVE-2026-103111.

Container imageDigestPackageFixed in
ghcr.io/krateoplatformops/finops-database-handler:0.5.32550427988e3
pcre2@10.42-1
10.42-1+deb12u2

Open the chart page →

13,349
finops-notebookskrateo0.1.11 of 1See more

finops-notebooks krateo 0.1.1

1 of the 1 container images this version deploys carry CVE-2026-103111.

Container imageDigestPackageFixed in
ghcr.io/krateoplatformops/kubectl:1.33.1393d2a3f53a5
pcre2@10.42-1
10.42-1+deb12u2

Open the chart page →

4,713
finops-webservice-api-mockkrateo0.1.01 of 1See more

finops-webservice-api-mock krateo 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-103111.

Container imageDigestPackageFixed in
ghcr.io/krateoplatformops/finops-webservice-api-mock:0.1.00877e9452d14
pcre2@10.42-1
10.42-1+deb12u2

Open the chart page →

13,556
krateo-frontendkrateo2.4.21 of 1See more

krateo-frontend krateo 2.4.2

1 of the 1 container images this version deploys carry CVE-2026-103111.

Container imageDigestPackageFixed in
ghcr.io/krateoplatformops/krateo-frontend:2.4.26aff913c8bfe
pcre2@10.42-1
10.42-1+deb12u2

Open the chart page →

3,663
nginxkrateo0.1.01 of 1See more

nginx krateo 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-103111.

Container imageDigestPackageFixed in
library/nginx:1.28146adea4768b
pcre2@10.46-1~deb13u1
10.46-1~deb13u3

Open the chart page →

3,847
oasgen-providerkrateo0.11.11 of 1See more

oasgen-provider krateo 0.11.1

1 of the 1 container images this version deploys carry CVE-2026-103111.

Container imageDigestPackageFixed in
ghcr.io/krateoplatformops/oasgen-provider:0.10.0656ec60c6407
pcre2@10.46-1~deb13u1
10.46-1~deb13u3

Open the chart page →

5,240
terminal-clientkrateo0.1.31 of 1See more

terminal-client krateo 0.1.3

1 of the 1 container images this version deploys carry CVE-2026-103111.

Container imageDigestPackageFixed in
ghcr.io/krateoplatformops/terminal-client:0.1.36c7c965e739c
pcre2@10.42-1
10.42-1+deb12u2

Open the chart page →

7,235
terminal-serverkrateo0.1.61 of 1See more

terminal-server krateo 0.1.6

1 of the 1 container images this version deploys carry CVE-2026-103111.

Container imageDigestPackageFixed in
ghcr.io/krateoplatformops/terminal-server:0.1.3f5fd8ba6fea3
pcre2@10.42-1
10.42-1+deb12u2

Open the chart page →

7,188
kubeflowkromanow94-kubeflow0.5.19 of 30See more

kubeflow kromanow94-kubeflow 0.5.1

9 of the 30 container images this version deploys carry CVE-2026-103111.

Container imageDigestPackageFixed in
kserve/models-web-app:v0.13.073486345a602
pcre2@10.42-1
10.42-1+deb12u2
kubeflownotebookswg/jupyter-web-app:v1.9.2afb52057c997
pcre2@10.42-1
10.42-1+deb12u2
kubeflownotebookswg/tensorboards-web-app:v1.9.277f07f52a84a
pcre2@10.42-1
10.42-1+deb12u2
kubeflownotebookswg/volumes-web-app:v1.9.2f63c3e550af3
pcre2@10.42-1
10.42-1+deb12u2
library/python:3.7eedf63967cdb
pcre2@10.42-1
10.42-1+deb12u2
gcr.io/ml-pipeline/api-server:2.3.039661bd823e8
pcre2@10.42-1
10.42-1+deb12u2
gcr.io/ml-pipeline/metadata-envoy:2.3.0e8e263a919ff
pcre2@10.34-7ubuntu0.1
no fix listed
gcr.io/ml-pipeline/metadata-writer:2.3.09bcfd2abc361
pcre2@10.42-1
10.42-1+deb12u2
gcr.io/tfx-oss-public/ml_metadata_store_server:1.14.051404ef4419c
pcre2@10.34-7ubuntu0.1
no fix listed

Open the chart page →

82,385
kron-aapm-agentkron-aapm-agent1.1.01 of 1See more

kron-aapm-agent kron-aapm-agent 1.1.0

1 of the 1 container images this version deploys carry CVE-2026-103111.

Container imageDigestPackageFixed in
krontechnology/aapm-agent:1.1.07feef7d2ab42
pcre2@10.34-7ubuntu0.1
no fix listed

Open the chart page →

9,274
adventureworkskronkltdVerified publisher0.1.01 of 1See more

adventureworks kronkltd 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-103111.

Container imageDigestPackageFixed in
chriseaton/adventureworks:latest54c3384ce701
pcre2@10.39-3ubuntu0.1
no fix listed

Open the chart page →

5,154
cloudbeaverkronkltdVerified publisher0.6.01 of 1See more

cloudbeaver kronkltd 0.6.0

1 of the 1 container images this version deploys carry CVE-2026-103111.

Container imageDigestPackageFixed in
dbeaver/cloudbeaver:21.3.00c0985098263
pcre2@10.34-7
no fix listed

Open the chart page →

9,346
fileserverkronkltdVerified publisher0.3.101 of 1See more

fileserver kronkltd 0.3.10

1 of the 1 container images this version deploys carry CVE-2026-103111.

Container imageDigestPackageFixed in
duck1123/lnd-fileserver:latest9d6fb247b714
pcre2@10.39-3ubuntu0.1
no fix listed

Open the chart page →

4,011
mindsdbkronkltdVerified publisher0.1.01 of 1See more

mindsdb kronkltd 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-103111.

Container imageDigestPackageFixed in
mindsdb/mindsdb:latest163011c09299
pcre2@10.46-1~deb13u1
10.46-1~deb13u3

Open the chart page →

11,220
rtlkronkltdVerified publisher0.1.01 of 2See more

rtl kronkltd 0.1.0

1 of the 2 container images this version deploys carry CVE-2026-103111.

Container imageDigestPackageFixed in
duck1123/cert-downloader:latest0e29f19fa67c
pcre2@10.39-3ubuntu0.1
no fix listed

Open the chart page →

5,974
world-dbkronkltdVerified publisher0.1.01 of 1See more

world-db kronkltd 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-103111.

Container imageDigestPackageFixed in
ghusta/postgres-world-db:latest879d0919fdcc
pcre2@10.46-1~deb13u1
10.46-1~deb13u3

Open the chart page →

2,191
aapm-servicekron-pam-aapm-helmcharts1.2.91 of 1See more

aapm-service kron-pam-aapm-helmcharts 1.2.9

1 of the 1 container images this version deploys carry CVE-2026-103111.

Container imageDigestPackageFixed in
krontechnology/aapm-service:1.2.3b964408930a5
pcre2@10.39-3ubuntu0.1
no fix listed

Open the chart page →

2,982
kron-aapm-agentkron-pam-aapm-helmcharts1.2.61 of 1See more

kron-aapm-agent kron-pam-aapm-helmcharts 1.2.6

1 of the 1 container images this version deploys carry CVE-2026-103111.

Container imageDigestPackageFixed in
krontechnology/aapm-agent:1.8.508e04ea66dfd
pcre2@10.39-3ubuntu0.1
no fix listed

Open the chart page →

3,086
web-chartktcloudhelm0.1.01 of 1See more

web-chart ktcloudhelm 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-103111.

Container imageDigestPackageFixed in
library/nginx:latestabe47724e466
pcre2@10.46-1~deb13u2
10.46-1~deb13u3

Open the chart page →

1,859
web-chartktcloudlab0.1.01 of 1See more

web-chart ktcloudlab 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-103111.

Container imageDigestPackageFixed in
library/nginx:latestabe47724e466
pcre2@10.46-1~deb13u2
10.46-1~deb13u3

Open the chart page →

1,859

Container images carrying it

2,587 by charts deploying them

A fixed version is listed for 2 of the 3 affected packages.

No deployed image carries CVE-2026-103111.

syft 1.42.1 · advisories as of 4 Oct 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.