StackRadar

CVE-2026-103111

High

Advisory

Published 30 Sept 2026In the index since 1 Oct 2026
Severity
High
worst across findings
CVSS
7.6
base score, highest
EPSS
0.002
11th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
2,627
of 18,026 indexed, latest versions
Container images
2,612
deployed by those charts
Fix available
2 of 3
affected packages

CVE-2026-103111 affecting package pcre2 10.48-1

Carried by container images the latest versions of 2,627 of 18,026 indexed charts deploy, on 2,612 images.

Affected packageAffected versionsFixed inImages
pcre2deb10.21-1, 10.34-7, 10.34-7ubuntu0.1, 10.39-3+ubuntu20.04.1+deb.sury.org+2+13 more10.42-1+deb12u2, 10.46-1~deb13u32,417
pcre2apk10.47-r0, 10.47-r1, 10.48-r010.49-r0189
pcre2rpm10.42-3.azl3no fix listed6
OSV records
ALPINE-CVE-2026-103111AZL-105119DEBIAN-CVE-2026-103111ECHO-bf42-43c6-45fdUBUNTU-CVE-2026-103111
Trending
Rank 1 in indexed charts, since 1 Oct 2026. See the ranking →

Charts affected

2,627 by stars
ChartLatestAffected imagesRadar Score
nodecg-chartmarathon-charts0.1.51 of 2See more

nodecg-chart marathon-charts 0.1.5

1 of the 2 container images this version deploys carry CVE-2026-103111.

Container imageDigestPackageFixed in
ghcr.io/rodg/rtmp-controller:latest67f99a5beab7
pcre2@10.42-1
10.42-1+deb12u2

Open the chart page →

8,534
marge-botmarge-bot-helm1.3.51 of 1See more

marge-bot marge-bot-helm 1.3.5

1 of the 1 container images this version deploys carry CVE-2026-103111.

Container imageDigestPackageFixed in
hiboxsystems/marge-bot:0.16.0b59f01bc0418
pcre2@10.46-1~deb13u1
10.46-1~deb13u3

Open the chart page →

3,933
circleci-runnermatic-insurance0.1.11 of 1See more

circleci-runner matic-insurance 0.1.1

1 of the 1 container images this version deploys carry CVE-2026-103111.

Container imageDigestPackageFixed in
circleci/runner:launch-agent9bdc62f02162
pcre2@10.34-7ubuntu0.1
no fix listed

Open the chart page →

4,722
nginxmatic-insurance1.1.11 of 1See more

nginx matic-insurance 1.1.1

1 of the 1 container images this version deploys carry CVE-2026-103111.

Container imageDigestPackageFixed in
library/nginx:stableb972f831f200
pcre2@10.46-1~deb13u2
10.46-1~deb13u3

Open the chart page →

1,855
mauticmautic-chartVerified publisher1.0.22 of 3See more

mautic mautic-chart 1.0.2

2 of the 3 container images this version deploys carry CVE-2026-103111.

Container imageDigestPackageFixed in
bitnamilegacy/mariadb:11.2.6-debian-12-r0373c3c260571
pcre2@10.42-1
10.42-1+deb12u2
mautic/mautic:7-apacheeb8cc73d97e1
pcre2@10.42-1
10.42-1+deb12u2

Open the chart page →

9,654
mayastormayastorVerified publisher2.12.12 of 31See more

mayastor mayastor 2.12.1

2 of the 31 container images this version deploys carry CVE-2026-103111.

Container imageDigestPackageFixed in
grafana/alloy:v1.8.17790f6f7fbd8
pcre2@10.42-4ubuntu2.1
no fix listed
openebs/etcd:3.6.4-debian-12-r0c86c06f1ce6a
pcre2@10.42-1
10.42-1+deb12u2

Open the chart page →

24,504
eoloplantmca-eoloplaner0.1.03 of 7See more

eoloplant mca-eoloplaner 0.1.0

3 of the 7 container images this version deploys carry CVE-2026-103111.

Container imageDigestPackageFixed in
hugohg34/toposervice:0.0.2812a03b3f274
pcre2@10.34-7
no fix listed
library/mongo:5.0.6-focal8e70544b6c76
pcre2@10.34-7
no fix listed
library/rabbitmq:3.9-management8a279e9396a8
pcre2@10.39-3ubuntu0.1
no fix listed

Open the chart page →

34,155
mcp-hangarmcp-hangarVerified publisher0.15.281 of 1See more

mcp-hangar mcp-hangar 0.15.28

1 of the 1 container images this version deploys carry CVE-2026-103111.

Container imageDigestPackageFixed in
ghcr.io/mcp-hangar/mcp-hangar:2.23.0b731546941ce
pcre2@10.46-1~deb13u1
10.46-1~deb13u3

Open the chart page →

1,082
claude-code-apimcp-helmVerified publisher0.1.11 of 1See more

claude-code-api mcp-helm 0.1.1

1 of the 1 container images this version deploys carry CVE-2026-103111.

Container imageDigestPackageFixed in
arbuzov/claude-code-api:0.1.02d7dd8070610
pcre2@10.42-1
10.42-1+deb12u2

Open the chart page →

4,685
mcp-homeassistantmcp-helmVerified publisher0.2.41 of 1See more

mcp-homeassistant mcp-helm 0.2.4

1 of the 1 container images this version deploys carry CVE-2026-103111.

Container imageDigestPackageFixed in
voska/hass-mcp:latest7142a431e2c5
pcre2@10.42-1
10.42-1+deb12u2

Open the chart page →

11,399
mcp-kubernetesmcp-helmVerified publisher0.2.71 of 1See more

mcp-kubernetes mcp-helm 0.2.7

1 of the 1 container images this version deploys carry CVE-2026-103111.

Container imageDigestPackageFixed in
mcp/kubernetes:latest5ffbf7f0a8aa
pcre2@10.42-1
10.42-1+deb12u2

Open the chart page →

6,466
mcpomcp-helmVerified publisher0.2.81 of 1See more

mcpo mcp-helm 0.2.8

1 of the 1 container images this version deploys carry CVE-2026-103111.

Container imageDigestPackageFixed in
ghcr.io/open-webui/mcpo:git-39b4867f06525afac6b
pcre2@10.42-1
10.42-1+deb12u2

Open the chart page →

4,933
mcp-playwrightmcp-helmVerified publisher0.1.11 of 1See more

mcp-playwright mcp-helm 0.1.1

1 of the 1 container images this version deploys carry CVE-2026-103111.

Container imageDigestPackageFixed in
mcr.microsoft.com/playwright/mcp:v0.0.43e101b832b34d
pcre2@10.42-1
10.42-1+deb12u2

Open the chart page →

4,652
searchmcp-helmVerified publisher0.1.31 of 2See more

search mcp-helm 0.1.3

1 of the 2 container images this version deploys carry CVE-2026-103111.

Container imageDigestPackageFixed in
ghcr.io/flaresolverr/flaresolverr:latestc80ae007ce2c
pcre2@10.42-1
10.42-1+deb12u2

Open the chart page →

10,796
mcroutermcrouterVerified publisher0.2.02 of 2See more

mcrouter mcrouter 0.2.0

2 of the 2 container images this version deploys carry CVE-2026-103111.

Container imageDigestPackageFixed in
library/memcached:1.6.4226983a43c918
pcre2@10.46-1~deb13u1
10.46-1~deb13u3
ghcr.io/dragoangel/mcrouter:v2026.06.29.0042afcffe67d0
pcre2@10.42-4ubuntu2.1
no fix listed

Open the chart page →

2,740
backstagemcwarmanVerified publisher0.10.102 of 2See more

backstage mcwarman 0.10.10

2 of the 2 container images this version deploys carry CVE-2026-103111.

Container imageDigestPackageFixed in
ghcr.io/mcwarman/backstage-sample-app/app:mainfae3c1f04311
pcre2@10.46-1~deb13u1
10.46-1~deb13u3
ghcr.io/mcwarman/backstage-sample-app/backend:main07aba09a594f
pcre2@10.42-1
10.42-1+deb12u2

Open the chart page →

10,864
mdai-hubmdai-hubVerified publisher0.10.11 of 14See more

mdai-hub mdai-hub 0.10.1

1 of the 14 container images this version deploys carry CVE-2026-103111.

Container imageDigestPackageFixed in
public.ecr.aws/decisiveai/valkey:9.0.159c7e728fb3a
pcre2@10.46-1~deb13u1
10.46-1~deb13u3

Open the chart page →

10,873
dependency-trackmediamarktsaturn1.9.21 of 2See more

dependency-track mediamarktsaturn 1.9.2

1 of the 2 container images this version deploys carry CVE-2026-103111.

Container imageDigestPackageFixed in
dependencytrack/apiserver:4.14.21ba4f004e1ec
pcre2@10.46-1~deb13u1
10.46-1~deb13u3

Open the chart page →

4,273
cleanuparrmedia-servarrVerified publisher0.20.01 of 1See more

cleanuparr media-servarr 0.20.0

1 of the 1 container images this version deploys carry CVE-2026-103111.

Container imageDigestPackageFixed in
ghcr.io/cleanuparr/cleanuparr:2.10.8ec444338a67e
pcre2@10.42-4ubuntu2.1
no fix listed

Open the chart page →

1,766
flaresolverrmedia-servarrVerified publisher0.19.01 of 1See more

flaresolverr media-servarr 0.19.0

1 of the 1 container images this version deploys carry CVE-2026-103111.

Container imageDigestPackageFixed in
ghcr.io/flaresolverr/flaresolverr:v3.5.2c80ae007ce2c
pcre2@10.42-1
10.42-1+deb12u2

Open the chart page →

8,879
homarrmedia-servarrVerified publisher0.56.01 of 1See more

homarr media-servarr 0.56.0

1 of the 1 container images this version deploys carry CVE-2026-103111.

Container imageDigestPackageFixed in
ghcr.io/homarr-labs/homarr:v1.77.2d60120a04536
pcre2@10.48-r0
10.49-r0

Open the chart page →

682
profilarrmedia-servarrVerified publisher2.4.01 of 1See more

profilarr media-servarr 2.4.0

1 of the 1 container images this version deploys carry CVE-2026-103111.

Container imageDigestPackageFixed in
ghcr.io/dictionarry-hub/profilarr:2.2.0ddcdd0f34004
pcre2@10.47-r1
10.49-r0

Open the chart page →

427
tinymediamanagermedia-servarrVerified publisher1.7.11 of 2See more

tinymediamanager media-servarr 1.7.1

1 of the 2 container images this version deploys carry CVE-2026-103111.

Container imageDigestPackageFixed in
tinymediamanager/tinymediamanager:5.3.448c15784a127
pcre2@10.46-1~deb13u1
10.46-1~deb13u3

Open the chart page →

10,003
cameramedia-streaming-meshVerified publisher0.2.52 of 3See more

camera media-streaming-mesh 0.2.5

2 of the 3 container images this version deploys carry CVE-2026-103111.

Container imageDigestPackageFixed in
ciscolabs/rtsp-client:latesta7b60ec88285
pcre2@10.34-7
no fix listed
ciscolabs/rtsp-server:latestb59fc10bb821
pcre2@10.34-7
no fix listed

Open the chart page →

20,323
crdsmedia-streaming-meshVerified publisher0.0.11 of 2See more

crds media-streaming-mesh 0.0.1

1 of the 2 container images this version deploys carry CVE-2026-103111.

Container imageDigestPackageFixed in
ciscolabs/msm-nc:0710202336d02faad958
pcre2@10.39-3ubuntu0.1
no fix listed

Open the chart page →

4,445
msmmedia-streaming-meshVerified publisher0.1.175 of 6See more

msm media-streaming-mesh 0.1.17

5 of the 6 container images this version deploys carry CVE-2026-103111.

Container imageDigestPackageFixed in
ghcr.io/media-streaming-mesh/msm-admission-webhook:latest3e811d67189c
pcre2@10.42-4ubuntu2
no fix listed
ghcr.io/media-streaming-mesh/msm-cni:latestfe0b89b818a6
pcre2@10.42-4ubuntu2
no fix listed
ghcr.io/media-streaming-mesh/msm-cp:latest8cb08fc7010b
pcre2@10.42-4ubuntu2
no fix listed
ghcr.io/media-streaming-mesh/msm-dp:latest7ffcb25b4cfc
pcre2@10.42-4ubuntu2
no fix listed
ghcr.io/media-streaming-mesh/msm-nc:latest296fe4970e38
pcre2@10.42-4ubuntu2
no fix listed

Open the chart page →

14,257
msm-rtspmedia-streaming-meshVerified publisher0.0.22 of 2See more

msm-rtsp media-streaming-mesh 0.0.2

2 of the 2 container images this version deploys carry CVE-2026-103111.

Container imageDigestPackageFixed in
ciscolabs/rtsp-client:latesta7b60ec88285
pcre2@10.34-7
no fix listed
ciscolabs/rtsp-server:latestb59fc10bb821
pcre2@10.34-7
no fix listed

Open the chart page →

20,323
rtspmedia-streaming-meshVerified publisher0.0.142 of 2See more

rtsp media-streaming-mesh 0.0.14

2 of the 2 container images this version deploys carry CVE-2026-103111.

Container imageDigestPackageFixed in
ciscolabs/rtsp-client:latesta7b60ec88285
pcre2@10.34-7
no fix listed
ciscolabs/rtsp-server:latestb59fc10bb821
pcre2@10.34-7
no fix listed

Open the chart page →

20,323
mediawikimediawiki0.4.11 of 1See more

mediawiki mediawiki 0.4.1

1 of the 1 container images this version deploys carry CVE-2026-103111.

Container imageDigestPackageFixed in
library/mediawiki:1.43.08b19e819f2e1
pcre2@10.42-1
10.42-1+deb12u2

Open the chart page →

9,726
meerschaummeerschaumVerified publisher0.2.01 of 1See more

meerschaum meerschaum 0.2.0

1 of the 1 container images this version deploys carry CVE-2026-103111.

Container imageDigestPackageFixed in
bmeares/meerschaum:2.8.48e9c5bacaa82
pcre2@10.42-1
10.42-1+deb12u2

Open the chart page →

6,454
memgptmemgptVerified publisher0.3.191 of 2See more

memgpt memgpt 0.3.19

1 of the 2 container images this version deploys carry CVE-2026-103111.

Container imageDigestPackageFixed in
ankane/pgvector:v0.5.1d3a9d8ac27bb
pcre2@10.42-1
10.42-1+deb12u2

Open the chart page →

6,833
memgraph-mcpmemgraphVerified publisher1.0.01 of 1See more

memgraph-mcp memgraph 1.0.0

1 of the 1 container images this version deploys carry CVE-2026-103111.

Container imageDigestPackageFixed in
memgraph/mcp-memgraph:0.1.13ecdf7faea3f7
pcre2@10.46-1~deb13u1
10.46-1~deb13u3

Open the chart page →

2,072
istiomesosphere1.25.11 of 2See more

istio mesosphere 1.25.1

1 of the 2 container images this version deploys carry CVE-2026-103111.

Container imageDigestPackageFixed in
bitnamilegacy/kubectl:1.29.2c74b703deed2
pcre2@10.42-1
10.42-1+deb12u2

Open the chart page →

6,146
istio-helm-cnimesosphere1.25.11 of 1See more

istio-helm-cni mesosphere 1.25.1

1 of the 1 container images this version deploys carry CVE-2026-103111.

Container imageDigestPackageFixed in
istio/install-cni:1.29.0ce27c9ce43c8
pcre2@10.42-4ubuntu2.1
no fix listed

Open the chart page →

2,983
istio-helm-istiodmesosphere1.25.11 of 2See more

istio-helm-istiod mesosphere 1.25.1

1 of the 2 container images this version deploys carry CVE-2026-103111.

Container imageDigestPackageFixed in
istio/pilot:1.29.0325156535773
pcre2@10.42-4ubuntu2.1
no fix listed

Open the chart page →

4,498
kubeaddons-catalogmesosphere0.1.161 of 2See more

kubeaddons-catalog mesosphere 0.1.16

1 of the 2 container images this version deploys carry CVE-2026-103111.

Container imageDigestPackageFixed in
mesosphere/kubeaddons-catalog:v0.11.4073db43d0b8b
pcre2@10.34-7
no fix listed

Open the chart page →

13,372
kube-prometheus-stackmesosphere87.16.01 of 7See more

kube-prometheus-stack mesosphere 87.16.0

1 of the 7 container images this version deploys carry CVE-2026-103111.

Container imageDigestPackageFixed in
bitnamilegacy/kubectl:1.29.2c74b703deed2
pcre2@10.42-1
10.42-1+deb12u2

Open the chart page →

8,832
nvidiamesosphere0.4.41 of 2See more

nvidia mesosphere 0.4.4

1 of the 2 container images this version deploys carry CVE-2026-103111.

Container imageDigestPackageFixed in
nvidia/dcgm-exporter:2.2.9-2.4.1-ubuntu20.0491b20b66d1cd
pcre2@10.34-7
no fix listed

Open the chart page →

11,818
testmesosphere0.1.01 of 1See more

test mesosphere 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-103111.

Container imageDigestPackageFixed in
library/nginx:stableb972f831f200
pcre2@10.46-1~deb13u2
10.46-1~deb13u3

Open the chart page →

1,855
dexmesosphere-stable2.14.21 of 5See more

dex mesosphere-stable 2.14.2

1 of the 5 container images this version deploys carry CVE-2026-103111.

Container imageDigestPackageFixed in
bitnamilegacy/kubectl:1.29.2c74b703deed2
pcre2@10.42-1
10.42-1+deb12u2

Open the chart page →

21,908
istiomesosphere-stable1.25.11 of 2See more

istio mesosphere-stable 1.25.1

1 of the 2 container images this version deploys carry CVE-2026-103111.

Container imageDigestPackageFixed in
bitnamilegacy/kubectl:1.29.2c74b703deed2
pcre2@10.42-1
10.42-1+deb12u2

Open the chart page →

6,146
istio-helm-cnimesosphere-stable1.23.61 of 1See more

istio-helm-cni mesosphere-stable 1.23.6

1 of the 1 container images this version deploys carry CVE-2026-103111.

Container imageDigestPackageFixed in
istio/install-cni:1.23.6ab34c4740f44
pcre2@10.42-4ubuntu2.1
no fix listed

Open the chart page →

3,872
istio-helm-istiodmesosphere-stable1.23.61 of 2See more

istio-helm-istiod mesosphere-stable 1.23.6

1 of the 2 container images this version deploys carry CVE-2026-103111.

Container imageDigestPackageFixed in
istio/pilot:1.23.69c3d6a218181
pcre2@10.42-4ubuntu2.1
no fix listed

Open the chart page →

5,464
kommandermesosphere-stable0.39.21 of 29See more

kommander mesosphere-stable 0.39.2

1 of the 29 container images this version deploys carry CVE-2026-103111.

Container imageDigestPackageFixed in
mesosphere/kubeaddons-catalog:v0.11.4073db43d0b8b
pcre2@10.34-7
no fix listed

Open the chart page →

88,945
kube-prometheus-stackmesosphere-stable75.9.11 of 7See more

kube-prometheus-stack mesosphere-stable 75.9.1

1 of the 7 container images this version deploys carry CVE-2026-103111.

Container imageDigestPackageFixed in
bitnamilegacy/kubectl:1.29.2c74b703deed2
pcre2@10.42-1
10.42-1+deb12u2

Open the chart page →

13,036
multusmesosphere-stable0.1.11 of 1See more

multus mesosphere-stable 0.1.1

1 of the 1 container images this version deploys carry CVE-2026-103111.

Container imageDigestPackageFixed in
ghcr.io/k8snetworkplumbingwg/multus-cni:v4.2.4-thick3c20900b5381
pcre2@10.46-1~deb13u1
10.46-1~deb13u3

Open the chart page →

2,271
valkeymesosphere-stable3.0.221 of 1See more

valkey mesosphere-stable 3.0.22

1 of the 1 container images this version deploys carry CVE-2026-103111.

Container imageDigestPackageFixed in
bitnamilegacy/valkey:8.1.3-debian-12-r1a185655855b3
pcre2@10.42-1
10.42-1+deb12u2

Open the chart page →

3,112
istio-operatormetakube1.12.01 of 1See more

istio-operator metakube 1.12.0

1 of the 1 container images this version deploys carry CVE-2026-103111.

Container imageDigestPackageFixed in
istio/operator:1.12.06cfce8a071b9
pcre2@10.34-7
no fix listed

Open the chart page →

10,086
elasticmicroboxlabs0.3.01 of 1See more

elastic microboxlabs 0.3.0

1 of the 1 container images this version deploys carry CVE-2026-103111.

Container imageDigestPackageFixed in
library/elasticsearch:8.17.32cc40b15dff8
pcre2@10.34-7ubuntu0.1
no fix listed

Open the chart page →

4,708
miot-harnessmicroboxlabs0.8.01 of 1See more

miot-harness microboxlabs 0.8.0

1 of the 1 container images this version deploys carry CVE-2026-103111.

Container imageDigestPackageFixed in
ghcr.io/microboxlabs/miot-harness:0.1.0d548e9ae4b84
pcre2@10.46-1~deb13u1
10.46-1~deb13u3

Open the chart page →

1,626

Container images carrying it

2,612 by charts deploying them

A fixed version is listed for 2 of the 3 affected packages.

Container imageDigestPackageFixed inUsed by
registry.k8s.io/csi-secrets-store/driver:v1.6.1b48d7d13dd06
pcre2@10.42-1+deb12u1
10.42-1+deb12u2
1
registry.k8s.io/dns/k8s-dns-node-cache:1.23.081a13703d6b8
pcre2@10.42-1
10.42-1+deb12u2
1
registry.k8s.io/dns/k8s-dns-node-cache:1.26.78b9a78d101a1
pcre2@10.42-1
10.42-1+deb12u2
1
registry.k8s.io/dns/k8s-dns-node-cache:1.23.1e3dccb1a21d1
pcre2@10.42-1
10.42-1+deb12u2
1
registry.k8s.io/git-sync/git-sync:v4.5.00e64aedb0d0a
pcre2@10.46-1~deb13u1
10.46-1~deb13u3
1
registry.k8s.io/git-sync/git-sync:v4.1.0fd9722fd02e3
pcre2@10.42-1
10.42-1+deb12u2
1
registry.k8s.io/node-problem-detector/node-problem-detector:v0.8.2052f0618e9bc2
pcre2@10.42-1
10.42-1+deb12u2
1
registry.k8s.io/node-problem-detector/node-problem-detector:v1.35.1c380751accc5
pcre2@10.42-1
10.42-1+deb12u2
1
registry.k8s.io/sig-storage/local-volume-provisioner:v2.8.03e2bf2eaef9f
pcre2@10.42-1
10.42-1+deb12u2
1
registry.k8s.io/sig-storage/local-volume-provisioner:v2.9.0f9d65db8bda2
pcre2@10.42-1
10.42-1+deb12u2
1
registry.k8s.io/sig-storage/nfsplugin:v4.13.41eb5a85180a4
pcre2@10.42-1
10.42-1+deb12u2
1
registry.k8s.io/sig-storage/nfsplugin:v4.11.0ce5b5ccd5eb0
pcre2@10.42-1
10.42-1+deb12u2
1

syft 1.42.1 · advisories as of 6 Oct 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.