StackRadar

CVE-2026-103111

High

Advisory

Published 30 Sept 2026In the index since 1 Oct 2026
Severity
High
worst across findings
CVSS
7.6
base score, highest
EPSS
0.002
10th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
2,644
of 17,985 indexed, latest versions
Container images
2,586
deployed by those charts
Fix available
2 of 3
affected packages

CVE-2026-103111 affecting package pcre2 10.48-1

Carried by container images the latest versions of 2,644 of 17,985 indexed charts deploy, on 2,586 images.

Affected packageAffected versionsFixed inImages
pcre2deb10.21-1, 10.34-7, 10.34-7ubuntu0.1, 10.39-3+ubuntu20.04.1+deb.sury.org+2+13 more10.46-1~deb13u32,396
pcre2apk10.47-r0, 10.47-r1, 10.48-r010.49-r0183
pcre2rpm10.42-3.azl3no fix listed7
OSV records
ALPINE-CVE-2026-103111AZL-105119DEBIAN-CVE-2026-103111UBUNTU-CVE-2026-103111ECHO-bf42-43c6-45fd
Trending
Rank 1 in indexed charts, since 1 Oct 2026. See the ranking →

Charts affected

2,644 by stars
ChartLatestAffected imagesRadar Score

Container images carrying it

2,586 by charts deploying them

A fixed version is listed for 2 of the 3 affected packages.

Container imageDigestPackageFixed inUsed by
aktosecurity/data-ingestion-service:1.5.35d4eab1c36b9
pcre2@10.46-1build1
no fix listed
1
aktosecurity/mini-runtime:1.72.15498e3e35ecc2
pcre2@10.46-1build1
no fix listed
1
alazidis/stornx:1.1.1602d4f7f090c
pcre2@10.42-1
no fix listed
1
allegroai/clearml:2.0.0-613713ae38f7daf
pcre2@10.42-1
no fix listed
1
alpine/git:latestae0f6f4bce38
pcre2@10.48-r0
10.49-r0
1
alpine/helm:4.1.0905a068da431
pcre2@10.47-r0
10.49-r0
1
alpine/k8s:1.35.6b7a12c5ddf26
pcre2@10.47-r1
10.49-r0
1
alpine/k8s:1.35.5d870622d0040
pcre2@10.47-r1
10.49-r0
1
altinity/clickhouse-server:25.3.6.10034.altinitystable3396b15c51a2
pcre2@10.39-3ubuntu0.1
no fix listed
1
andrcuns/dependabot-gitlab:7.7.0-alpha.143060f159f4c
pcre2@10.42-4ubuntu2.1
no fix listed
1
andrewgaul/s3proxy:sha-85b0f987dc1d34174a5
pcre2@10.42-4ubuntu2
no fix listed
1
andrewgolikov55/intel-gpu-exporter:latestfcc001b61c0e
pcre2@10.39-3ubuntu0.1
no fix listed
1
andrewmackrodt/firefox-x11:142.0.1-r133f9080470c9
pcre2@10.39-3ubuntu0.1
no fix listed
1
anguda/ant-media:2.5c435285fc241
pcre2@10.34-7ubuntu0.1
no fix listed
1
ankane/pgvector:v0.5.1d3a9d8ac27bb
pcre2@10.42-1
no fix listed
1
anthonyraymond/joal:2.1.37fc942567c564
pcre2@10.34-7
no fix listed
1
antiantiops/vscode-browser-docker:1.140.081c3bb6895b1
pcre2@10.42-4ubuntu2.1
no fix listed
1
antrea/antrea-agent-ubuntu:v2.7.0c10bc45c6272
pcre2@10.42-4ubuntu2.1
no fix listed
1
antrea/antrea-controller-ubuntu:v2.7.0f1373d39217c
pcre2@10.42-4ubuntu2.1
no fix listed
1
antrea/antrea-ui-frontend:v0.8.0ee9686bcefb8
pcre2@10.46-1~deb13u1
10.46-1~deb13u3
1
antrea/flow-aggregator:v2.7.0065193e7572f
pcre2@10.42-4ubuntu2.1
no fix listed
1
anujdatar/cups:25.07.01685df04a643b
pcre2@10.42-1
no fix listed
1
apache/activemq-artemis:2.44.00305c26f19ed
pcre2@10.42-4ubuntu2.1
no fix listed
1
apache/activemq-artemis:2.37.0bae523439ee3
pcre2@10.42-4ubuntu2
no fix listed
1
apache/airflow:2.8.4-python3.964e58748b6b9
pcre2@10.42-1
no fix listed
1
apache/airflow:2.10.2-python3.9ce90bdc3d2af
pcre2@10.42-1
no fix listed
1
apache/airflow:2.8.1e5560ad0b86e
pcre2@10.42-1
no fix listed
1
apache/apisix:3.16.0-ubuntu5e47692cac00
pcre2@10.42-4ubuntu2.1
no fix listed
1
apache/camel-k:2.11.0d173e7efe258
pcre2@10.46-1build1
no fix listed
1
apache/druid:29.0.10cef139b6bf1
pcre2@10.42-1
no fix listed
1
apache/gravitino-iceberg-rest:1.3.080136ae753ee
pcre2@10.39-3ubuntu0.1
no fix listed
1
apache/hertzbeat:1.8.075d48a62748f
pcre2@10.42-4ubuntu2.1
no fix listed
1
apache/hertzbeat-collector:1.8.0a2bab1be574c
pcre2@10.42-4ubuntu2.1
no fix listed
1
apache/james:distributed-3.7.2660c0fa12ec2
pcre2@10.34-7ubuntu0.1
no fix listed
1
apache/nifi-registry:1.27.063b8e3e40742
pcre2@10.39-3ubuntu0.1
no fix listed
1
apachepulsar/pulsar:3.1.016f9fdab3fa6
pcre2@10.39-3ubuntu0.1
no fix listed
1
apachepulsar/pulsar:2.10.03b262ab7a7d9
pcre2@10.34-7
no fix listed
1
apachepulsar/pulsar:3.0.79c9947de139d
pcre2@10.39-3ubuntu0.1
no fix listed
1
apachepulsar/pulsar:2.9.0d056c89b7131
pcre2@10.34-7
no fix listed
1
apachepulsar/pulsar:2.8.2d538416d5afe
pcre2@10.34-7
no fix listed
1
apache/ranger:2.7.076c176e8a0e4
pcre2@10.39-3ubuntu0.1
no fix listed
1
apache/rocketmq:5.3.0434d8398f996
pcre2@10.42-4ubuntu2
no fix listed
1
apache/rocketmq-exporter:0.0.2c8fb51195444
pcre2@10.39-3ubuntu0.1
no fix listed
1
apache/skywalking-oap-server:9.2.0133d35d2c263
pcre2@10.39-3build1
no fix listed
1
apache/skywalking-oap-server:8.9.1b4ec8c18d079
pcre2@10.34-7
no fix listed
1
apache/skywalking-ui:9.2.0295f1dc87d98
pcre2@10.39-3build1
no fix listed
1
apache/skywalking-ui:8.9.180530f0308a5
pcre2@10.34-7
no fix listed
1
apache/superset:4.0.1ab9467fd712c
pcre2@10.42-1
no fix listed
1
apache/tika:latest-full80072bb73dd3
pcre2@10.46-1build1
no fix listed
1
apache/tika:3.3.1.090b7fa1dc018
pcre2@10.46-1build1
no fix listed
1

syft 1.42.1 · advisories as of 2 Oct 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.