StackRadar

CVE-2026-103111

High

Advisory

Published 30 Sept 2026In the index since 1 Oct 2026
Severity
High
worst across findings
CVSS
7.6
base score, highest
EPSS
0.002
11th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
2,627
of 18,026 indexed, latest versions
Container images
2,612
deployed by those charts
Fix available
2 of 3
affected packages

CVE-2026-103111 affecting package pcre2 10.48-1

Carried by container images the latest versions of 2,627 of 18,026 indexed charts deploy, on 2,612 images.

Affected packageAffected versionsFixed inImages
pcre2deb10.21-1, 10.34-7, 10.34-7ubuntu0.1, 10.39-3+ubuntu20.04.1+deb.sury.org+2+13 more10.42-1+deb12u2, 10.46-1~deb13u32,417
pcre2apk10.47-r0, 10.47-r1, 10.48-r010.49-r0189
pcre2rpm10.42-3.azl3no fix listed6
OSV records
ALPINE-CVE-2026-103111AZL-105119DEBIAN-CVE-2026-103111ECHO-bf42-43c6-45fdUBUNTU-CVE-2026-103111
Trending
Rank 1 in indexed charts, since 1 Oct 2026. See the ranking →

Charts affected

2,627 by stars
ChartLatestAffected imagesRadar Score
postgresmicroboxlabs0.3.01 of 1See more

postgres microboxlabs 0.3.0

1 of the 1 container images this version deploys carry CVE-2026-103111.

Container imageDigestPackageFixed in
library/postgres:16.6557fea37a744
pcre2@10.42-1
10.42-1+deb12u2

Open the chart page →

4,843
resource-servicemicroservices-learningVerified publisher1.5.01 of 2See more

resource-service microservices-learning 1.5.0

1 of the 2 container images this version deploys carry CVE-2026-103111.

Container imageDigestPackageFixed in
library/postgres:latest86c951e05bf5
pcre2@10.46-1~deb13u2
10.46-1~deb13u3

Open the chart page →

5,362
song-servicemicroservices-learningVerified publisher1.2.01 of 2See more

song-service microservices-learning 1.2.0

1 of the 2 container images this version deploys carry CVE-2026-103111.

Container imageDigestPackageFixed in
library/postgres:latest86c951e05bf5
pcre2@10.46-1~deb13u2
10.46-1~deb13u3

Open the chart page →

4,814
apimicroslacVerified publisher0.1.01 of 2See more

api microslac 0.1.0

1 of the 2 container images this version deploys carry CVE-2026-103111.

Container imageDigestPackageFixed in
library/kong:3.6a42d2b4503e7
pcre2@10.39-3ubuntu0.1
no fix listed

Open the chart page →

3,977
argomicroslacVerified publisher0.1.01 of 4See more

argo microslac 0.1.0

1 of the 4 container images this version deploys carry CVE-2026-103111.

Container imageDigestPackageFixed in
quay.io/argoproj/argocd:v2.10.783c86003b781
pcre2@10.39-3ubuntu0.1
no fix listed

Open the chart page →

12,269
servicesmicroslacVerified publisher0.4.04 of 8See more

services microslac 0.4.0

4 of the 8 container images this version deploys carry CVE-2026-103111.

Container imageDigestPackageFixed in
microslac/auth:latest5c1eb1f5c64d
pcre2@10.42-1
10.42-1+deb12u2
microslac/conversations:latest1b24afcd71ff
pcre2@10.42-1
10.42-1+deb12u2
microslac/teams:latest0f75997fcbe5
pcre2@10.42-1
10.42-1+deb12u2
microslac/users:latest216ea6832a56
pcre2@10.42-1
10.42-1+deb12u2

Open the chart page →

34,113
mw-kube-agent-v3middleware-labsVerified publisher1.8.61 of 2See more

mw-kube-agent-v3 middleware-labs 1.8.6

1 of the 2 container images this version deploys carry CVE-2026-103111.

Container imageDigestPackageFixed in
ghcr.io/middleware-labs/mw-kube-agent:1.21.507011b628e6b
pcre2@10.42-4ubuntu2.1
no fix listed

Open the chart page →

1,830
folding-at-homemidokura-communityVerified publisher0.0.31 of 1See more

folding-at-home midokura-community 0.0.3

1 of the 1 container images this version deploys carry CVE-2026-103111.

Container imageDigestPackageFixed in
linuxserver/foldingathome:7.6.219a997426d71e
pcre2@10.42-4ubuntu2
no fix listed

Open the chart page →

3,146
unifimidokura-communityVerified publisher0.0.61 of 1See more

unifi midokura-community 0.0.6

1 of the 1 container images this version deploys carry CVE-2026-103111.

Container imageDigestPackageFixed in
linuxserver/unifi-controller:7.3.83ab105cc50322
pcre2@10.34-7ubuntu0.1
no fix listed

Open the chart page →

11,907
parent-chartmid-proje0.1.01 of 3See more

parent-chart mid-proje 0.1.0

1 of the 3 container images this version deploys carry CVE-2026-103111.

Container imageDigestPackageFixed in
youssef11gaber10/flask-service:latest9c727fcfde76
pcre2@10.46-1~deb13u1
10.46-1~deb13u3

Open the chart page →

2,134
teimilvus-helm1.6.01 of 1See more

tei milvus-helm 1.6.0

1 of the 1 container images this version deploys carry CVE-2026-103111.

Container imageDigestPackageFixed in
ghcr.io/huggingface/text-embeddings-inference:cpu-1.666db77d7856c
pcre2@10.42-1
10.42-1+deb12u2

Open the chart page →

3,528
mini-blogmini-blog-helm0.1.02 of 3See more

mini-blog mini-blog-helm 0.1.0

2 of the 3 container images this version deploys carry CVE-2026-103111.

Container imageDigestPackageFixed in
beyzkaya/blog-backend:v1.0.112a6a3d1c5f9
pcre2@10.42-1
10.42-1+deb12u2
library/postgres:15dfbbb0ad8cab
pcre2@10.46-1~deb13u2
10.46-1~deb13u3

Open the chart page →

14,032
MINTmint8.0.24 of 15See more

MINT mint 8.0.2

4 of the 15 container images this version deploys carry CVE-2026-103111.

Container imageDigestPackageFixed in
library/nginx:latestabe47724e466
pcre2@10.46-1~deb13u2
10.46-1~deb13u3
library/redis:latest718f745deb7d
pcre2@10.46-1~deb13u2
10.46-1~deb13u3
mintproject/graphql-engine:305c0dbeba1878eafe348f21fc300fbfc017d9dc83aade2c1855
pcre2@10.34-7
no fix listed
mintproject/model-catalog-fastapi:7dd88dc5bf1fe6a6d4703ea0a077afee45cb256102260d20a21f
pcre2@10.42-1
10.42-1+deb12u2

Open the chart page →

116,577
aws-api-gateway-operatormintel0.1.21 of 11See more

aws-api-gateway-operator mintel 0.1.2

1 of the 11 container images this version deploys carry CVE-2026-103111.

Container imageDigestPackageFixed in
localstack/localstack:latest4abc29e923e5
pcre2@10.46-1~deb13u1
10.46-1~deb13u3

Open the chart page →

12,077
standard-application-stackmintel11.5.01 of 12See more

standard-application-stack mintel 11.5.0

1 of the 12 container images this version deploys carry CVE-2026-103111.

Container imageDigestPackageFixed in
localstack/localstack:latestdf6b89814326
pcre2@10.46-1~deb13u2
10.46-1~deb13u3

Open the chart page →

11,596
session-scalermiqm0.1.01 of 1See more

session-scaler miqm 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-103111.

Container imageDigestPackageFixed in
miqm/session-scaler:0.1.0c5c211717d9b
pcre2@10.42-1
10.42-1+deb12u2

Open the chart page →

3,430
helmmirasys-chart0.1.03 of 4See more

helm mirasys-chart 0.1.0

3 of the 4 container images this version deploys carry CVE-2026-103111.

Container imageDigestPackageFixed in
library/mongo:latest5d7043a4ffe0
pcre2@10.42-4ubuntu2.1
no fix listed
library/redis:latest718f745deb7d
pcre2@10.46-1~deb13u2
10.46-1~deb13u3
sepehrmdn/mirasys-assignment:1.0.12567228e33c8
pcre2@10.42-1
10.42-1+deb12u2

Open the chart page →

4,365
mi-tiendami-tienda0.1.01 of 1See more

mi-tienda mi-tienda 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-103111.

Container imageDigestPackageFixed in
library/nginx:alpine62ff2089abf5
pcre2@10.48-r0
10.49-r0

Open the chart page →

33
mitosmitosVerified publisher1.6.01 of 7See more

mitos mitos 1.6.0

1 of the 7 container images this version deploys carry CVE-2026-103111.

Container imageDigestPackageFixed in
ghcr.io/mitos-run/mitos-forkd:v1.6.0979b462ab7d6
pcre2@10.39-3ubuntu0.1
no fix listed

Open the chart page →

3,641
simplewebappmlohrVerified publisher1.1.01 of 1See more

simplewebapp mlohr 1.1.0

1 of the 1 container images this version deploys carry CVE-2026-103111.

Container imageDigestPackageFixed in
library/nginx:latestabe47724e466
pcre2@10.46-1~deb13u2
10.46-1~deb13u3

Open the chart page →

1,855
mariadbmmontesVerified publisher0.3.01 of 1See more

mariadb mmontes 0.3.0

1 of the 1 container images this version deploys carry CVE-2026-103111.

Container imageDigestPackageFixed in
library/mariadb:10.7.307e06f2e7ae9
pcre2@10.34-7
no fix listed

Open the chart page →

11,246
mongodbmmontesVerified publisher0.5.01 of 1See more

mongodb mmontes 0.5.0

1 of the 1 container images this version deploys carry CVE-2026-103111.

Container imageDigestPackageFixed in
library/mongo:4.4.1305678ae4e5e1
pcre2@10.34-7
no fix listed

Open the chart page →

8,231
mo-backupmogeniusOfficialVerified publisher1.0.291 of 1See more

mo-backup mogenius 1.0.29

1 of the 1 container images this version deploys carry CVE-2026-103111.

Container imageDigestPackageFixed in
ghcr.io/mogenius/mo-backup:latest4f89afef9010
pcre2@10.47-r1
10.49-r0

Open the chart page →

913
mo-backup-mysqlmogeniusVerified publisher1.0.291 of 1See more

mo-backup-mysql mogenius 1.0.29

1 of the 1 container images this version deploys carry CVE-2026-103111.

Container imageDigestPackageFixed in
ghcr.io/mogenius/mo-backup:latest4f89afef9010
pcre2@10.47-r1
10.49-r0

Open the chart page →

913
account-lookup-servicemojaloop13.0.01 of 4See more

account-lookup-service mojaloop 13.0.0

1 of the 4 container images this version deploys carry CVE-2026-103111.

Container imageDigestPackageFixed in
solsson/kafka:latest41e5d8f6f290
pcre2@10.34-7
no fix listed

Open the chart page →

12,743
account-lookup-service-adminmojaloop13.0.01 of 4See more

account-lookup-service-admin mojaloop 13.0.0

1 of the 4 container images this version deploys carry CVE-2026-103111.

Container imageDigestPackageFixed in
solsson/kafka:latest41e5d8f6f290
pcre2@10.34-7
no fix listed

Open the chart page →

12,743
admin-api-svcmojaloop12.0.01 of 4See more

admin-api-svc mojaloop 12.0.0

1 of the 4 container images this version deploys carry CVE-2026-103111.

Container imageDigestPackageFixed in
solsson/kafka:latest41e5d8f6f290
pcre2@10.34-7
no fix listed

Open the chart page →

13,164
backendmojaloop0.1.01 of 6See more

backend mojaloop 0.1.0

1 of the 6 container images this version deploys carry CVE-2026-103111.

Container imageDigestPackageFixed in
bitnamilegacy/mysql:8.4.5-debian-12-r07089d796fc9b
pcre2@10.42-1
10.42-1+deb12u2

Open the chart page →

21,787
fspiop-transfer-api-svcmojaloop12.0.11 of 3See more

fspiop-transfer-api-svc mojaloop 12.0.1

1 of the 3 container images this version deploys carry CVE-2026-103111.

Container imageDigestPackageFixed in
solsson/kafka:latest41e5d8f6f290
pcre2@10.34-7
no fix listed

Open the chart page →

12,263
mojaloopmojaloop14.0.01 of 6See more

mojaloop mojaloop 14.0.0

1 of the 6 container images this version deploys carry CVE-2026-103111.

Container imageDigestPackageFixed in
solsson/kafka:latest41e5d8f6f290
pcre2@10.34-7
no fix listed

Open the chart page →

20,648
reporting-nifi-processor-svcmojaloop0.0.21 of 3See more

reporting-nifi-processor-svc mojaloop 0.0.2

1 of the 3 container images this version deploys carry CVE-2026-103111.

Container imageDigestPackageFixed in
library/mongo:6.0.271a63fc2438e
pcre2@10.34-7ubuntu0.1
no fix listed

Open the chart page →

7,173
mollysocketmollysocketVerified publisher0.2.81 of 1See more

mollysocket mollysocket 0.2.8

1 of the 1 container images this version deploys carry CVE-2026-103111.

Container imageDigestPackageFixed in
ghcr.io/mollyim/mollysocket:1.1.12a687393f8c8
pcre2@10.42-1
10.42-1+deb12u2

Open the chart page →

3,260
mollysocketmollysocket-wrenixVerified publisher0.1.141 of 2See more

mollysocket mollysocket-wrenix 0.1.14

1 of the 2 container images this version deploys carry CVE-2026-103111.

Container imageDigestPackageFixed in
ghcr.io/mollyim/mollysocket:1.7.156bce620ff04
pcre2@10.42-1+deb12u1
10.42-1+deb12u2

Open the chart page →

2,842
mongo-compassmongo-compass-webVerified publisher1.1.41 of 1See more

mongo-compass mongo-compass-web 1.1.4

1 of the 1 container images this version deploys carry CVE-2026-103111.

Container imageDigestPackageFixed in
haohanyang/compass-web:0.5.1f4f8fe4e21f1
pcre2@10.42-1
10.42-1+deb12u2

Open the chart page →

2,189
mongo-compassmongo-compass-web-helm1.1.01 of 1See more

mongo-compass mongo-compass-web-helm 1.1.0

1 of the 1 container images this version deploys carry CVE-2026-103111.

Container imageDigestPackageFixed in
haohanyang/compass-web:0.5.054f2112602ee
pcre2@10.42-1
10.42-1+deb12u2

Open the chart page →

2,859
mongodb-admin-interfacemongo-db-admin-interfaceVerified publisher0.1.01 of 2See more

mongodb-admin-interface mongo-db-admin-interface 0.1.0

1 of the 2 container images this version deploys carry CVE-2026-103111.

Container imageDigestPackageFixed in
library/mongo:5.041108d183e97
pcre2@10.34-7ubuntu0.1
no fix listed

Open the chart page →

5,851
camera-viewermoreillonVerified publisher0.2.12 of 4See more

camera-viewer moreillon 0.2.1

2 of the 4 container images this version deploys carry CVE-2026-103111.

Container imageDigestPackageFixed in
library/kong:3.6a42d2b4503e7
pcre2@10.39-3ubuntu0.1
no fix listed
moreillon/camera-viewer:lateste418cc694bd5
pcre2@10.42-1
10.42-1+deb12u2

Open the chart page →

13,728
group-managermoreillonVerified publisher0.4.42 of 3See more

group-manager moreillon 0.4.4

2 of the 3 container images this version deploys carry CVE-2026-103111.

Container imageDigestPackageFixed in
library/kong:3.6a42d2b4503e7
pcre2@10.39-3ubuntu0.1
no fix listed
moreillon/group-manager-front:v3.3.1c9f85db3baa5
pcre2@10.42-1
10.42-1+deb12u2

Open the chart page →

10,853
mqtt-loggermoreillonVerified publisher0.3.11 of 5See more

mqtt-logger moreillon 0.3.1

1 of the 5 container images this version deploys carry CVE-2026-103111.

Container imageDigestPackageFixed in
library/kong:3.6a42d2b4503e7
pcre2@10.39-3ubuntu0.1
no fix listed

Open the chart page →

14,074
user-manager-mongodbmoreillonVerified publisher0.6.23 of 4See more

user-manager-mongodb moreillon 0.6.2

3 of the 4 container images this version deploys carry CVE-2026-103111.

Container imageDigestPackageFixed in
library/kong:3.6a42d2b4503e7
pcre2@10.39-3ubuntu0.1
no fix listed
moreillon/user-manager-front:v5.0.3b067dbbbb6af
pcre2@10.42-1
10.42-1+deb12u2
moreillon/user-manager-mongoose:v5.0.1d2ee0423b797
pcre2@10.42-1
10.42-1+deb12u2

Open the chart page →

28,039
user-manager-neo4jmoreillonVerified publisher0.9.74 of 6See more

user-manager-neo4j moreillon 0.9.7

4 of the 6 container images this version deploys carry CVE-2026-103111.

Container imageDigestPackageFixed in
library/kong:3.6a42d2b4503e7
pcre2@10.39-3ubuntu0.1
no fix listed
moreillon/group-manager-front:v3.3.1c9f85db3baa5
pcre2@10.42-1
10.42-1+deb12u2
moreillon/user-manager:v5.0.2e1c9bfab5c16
pcre2@10.42-1
10.42-1+deb12u2
moreillon/user-manager-front:v5.1.06597e6b98d21
pcre2@10.42-1
10.42-1+deb12u2

Open the chart page →

32,937
genericmorremeyer8.0.01 of 1See more

generic morremeyer 8.0.0

1 of the 1 container images this version deploys carry CVE-2026-103111.

Container imageDigestPackageFixed in
library/nginx:1.25.167f9a4f10d14
pcre2@10.42-1
10.42-1+deb12u2

Open the chart page →

7,228
chirpstackmosquitto-helm-chart0.5.01 of 8See more

chirpstack mosquitto-helm-chart 0.5.0

1 of the 8 container images this version deploys carry CVE-2026-103111.

Container imageDigestPackageFixed in
apachepulsar/pulsar:2.9.0d056c89b7131
pcre2@10.34-7
no fix listed

Open the chart page →

105,127
pulsarmosquitto-helm-chart0.2.01 of 1See more

pulsar mosquitto-helm-chart 0.2.0

1 of the 1 container images this version deploys carry CVE-2026-103111.

Container imageDigestPackageFixed in
apachepulsar/pulsar:2.10.03b262ab7a7d9
pcre2@10.34-7
no fix listed

Open the chart page →

16,636
crowdmoxVerified publisher2.4.31 of 3See more

crowd mox 2.4.3

1 of the 3 container images this version deploys carry CVE-2026-103111.

Container imageDigestPackageFixed in
atlassian/crowd:5.2.2799a49be18d7
pcre2@10.42-4ubuntu2.1
no fix listed

Open the chart page →

5,682
codimdmt1905027.2.21 of 3See more

codimd mt190502 7.2.2

1 of the 3 container images this version deploys carry CVE-2026-103111.

Container imageDigestPackageFixed in
library/postgres:1886c951e05bf5
pcre2@10.46-1~deb13u2
10.46-1~deb13u3

Open the chart page →

1,689
commafeedmt1905028.2.02 of 3See more

commafeed mt190502 8.2.0

2 of the 3 container images this version deploys carry CVE-2026-103111.

Container imageDigestPackageFixed in
athou/commafeed:6.2.0-postgresql5e388351df1a
pcre2@10.46-1~deb13u1
10.46-1~deb13u3
library/postgres:1886c951e05bf5
pcre2@10.46-1~deb13u2
10.46-1~deb13u3

Open the chart page →

4,209
filestashmt1905024.0.01 of 1See more

filestash mt190502 4.0.0

1 of the 1 container images this version deploys carry CVE-2026-103111.

Container imageDigestPackageFixed in
machines/filestash:latest2f69ce781400
pcre2@10.46-1~deb13u2
10.46-1~deb13u3

Open the chart page →

3,547
ghostmt1905028.25.11 of 3See more

ghost mt190502 8.25.1

1 of the 3 container images this version deploys carry CVE-2026-103111.

Container imageDigestPackageFixed in
library/ghost:6.25.12654b1e90413
pcre2@10.42-1
10.42-1+deb12u2

Open the chart page →

6,165
keycloakmt1905021.4.61 of 3See more

keycloak mt190502 1.4.6

1 of the 3 container images this version deploys carry CVE-2026-103111.

Container imageDigestPackageFixed in
library/postgres:1886c951e05bf5
pcre2@10.46-1~deb13u2
10.46-1~deb13u3

Open the chart page →

3,193

Container images carrying it

2,612 by charts deploying them

A fixed version is listed for 2 of the 3 affected packages.

Container imageDigestPackageFixed inUsed by
registry.k8s.io/csi-secrets-store/driver:v1.6.1b48d7d13dd06
pcre2@10.42-1+deb12u1
10.42-1+deb12u2
1
registry.k8s.io/dns/k8s-dns-node-cache:1.23.081a13703d6b8
pcre2@10.42-1
10.42-1+deb12u2
1
registry.k8s.io/dns/k8s-dns-node-cache:1.26.78b9a78d101a1
pcre2@10.42-1
10.42-1+deb12u2
1
registry.k8s.io/dns/k8s-dns-node-cache:1.23.1e3dccb1a21d1
pcre2@10.42-1
10.42-1+deb12u2
1
registry.k8s.io/git-sync/git-sync:v4.5.00e64aedb0d0a
pcre2@10.46-1~deb13u1
10.46-1~deb13u3
1
registry.k8s.io/git-sync/git-sync:v4.1.0fd9722fd02e3
pcre2@10.42-1
10.42-1+deb12u2
1
registry.k8s.io/node-problem-detector/node-problem-detector:v0.8.2052f0618e9bc2
pcre2@10.42-1
10.42-1+deb12u2
1
registry.k8s.io/node-problem-detector/node-problem-detector:v1.35.1c380751accc5
pcre2@10.42-1
10.42-1+deb12u2
1
registry.k8s.io/sig-storage/local-volume-provisioner:v2.8.03e2bf2eaef9f
pcre2@10.42-1
10.42-1+deb12u2
1
registry.k8s.io/sig-storage/local-volume-provisioner:v2.9.0f9d65db8bda2
pcre2@10.42-1
10.42-1+deb12u2
1
registry.k8s.io/sig-storage/nfsplugin:v4.13.41eb5a85180a4
pcre2@10.42-1
10.42-1+deb12u2
1
registry.k8s.io/sig-storage/nfsplugin:v4.11.0ce5b5ccd5eb0
pcre2@10.42-1
10.42-1+deb12u2
1

syft 1.42.1 · advisories as of 6 Oct 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.