StackRadar

CVE-2026-18374

Medium

Advisory

Published 27 Aug 2026In the index since 5 Sept 2026
Severity
Medium
worst across findings
CVSS
4.9
base score, highest
EPSS
0.002
5th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
2,665
of 17,813 indexed, latest versions
Container images
2,715
deployed by those charts
Fix available
2 of 5
affected packages

CVE-2026-18374 affecting package glibc 2.38-21

Carried by container images the latest versions of 2,665 of 17,813 indexed charts deploy, on 2,715 images.

Affected packageAffected versionsFixed inImages
glibcdeb2.23-0ubuntu5, 2.23-0ubuntu7, 2.23-0ubuntu9, 2.23-0ubuntu10+66 more2.41-12+deb13u3+e72,623
eglibcdeb2.19-0ubuntu6.3, 2.19-0ubuntu6.6, 2.19-0ubuntu6.13, 2.19-0ubuntu6.14+1 moreno fix listed7
glibc-2.44apk2.44-r1, 2.44-r4, 2.44-r52.44-r663
glibcrpm2.38-16.azl3, 2.38-18.azl3, 2.38-20.azl3no fix listed19
glibc-2.43apk2.43-r14no fix listed3
OSV records
DEBIAN-CVE-2026-18374UBUNTU-CVE-2026-18374AZL-98042CGA-27g8-4xhq-hhr3CGA-2w63-hvq4-f4pcECHO-9169-1fd9-0c1c
Also known as
CGA-2r7g-4qmv-r3hh, CGA-3qmp-39qm-cjf8, CGA-3xw7-x4r7-x678, CGA-5g65-xm2q-rjhf, CGA-5wh2-vg99-j76x, CGA-63j2-v7q6-8x84, CGA-6rf5-rrq5-7pff, CGA-772j-3386-6g56, CGA-79v3-g2j9-ffq2, CGA-8hxc-pvg5-xr9j, CGA-c62g-2q4h-pjjg, CGA-f52m-j726-w2p6, CGA-h33h-m88h-4gc6, CGA-m923-g68q-v4rq, CGA-m9qj-fr43-382g, CGA-mm85-9c9x-q266, CGA-rh5w-p243-vcf7, CGA-v3jf-jvqj-vgxj, CGA-x2q5-w2xg-rgqc, CGA-x3rq-r7j3-jgpx

Charts affected

2,665 by stars
ChartLatestAffected imagesRadar Score

Container images carrying it

2,715 by charts deploying them

A fixed version is listed for 2 of the 5 affected packages.

Container imageDigestPackageFixed inUsed by
flyway/flyway:9.1545b5d7cdc75a
glibc@2.31-0ubuntu9.9
no fix listed
1
fnzv/dump1090:latestb3079b95c336
glibc@2.35-0ubuntu3.5
no fix listed
1
foldingathome/fah-gpu:latest5ef7742d1eb4
glibc@2.27-3ubuntu1.4
no fix listed
1
folioci/mod-z3950:latest2493041ce880
glibc@2.41-12+deb13u2
no fix listed
1
fosrl/pangolin:latest83a55f933b4d
glibc@2.36-9+deb12u14
no fix listed
1
frankescobar/allure-docker-service:2.27.00815040339a9
glibc@2.27-3ubuntu1.2
no fix listed
1
frankescobar/allure-docker-service:2.35.14154286c0209
glibc@2.39-0ubuntu8.6
no fix listed
1
frankescobar/allure-docker-service:2.21.08a4d7e9308de
glibc@2.27-3ubuntu1.2
no fix listed
1
frankescobar/allure-docker-service:2.19.0cafa03b94dac
glibc@2.27-3ubuntu1.2
no fix listed
1
frankescobar/allure-docker-service:latestdc171ec796d5
glibc@2.39-0ubuntu8.7
no fix listed
1
free5gmano/nextepc-mongodb:latest36f806935519
glibc@2.23-0ubuntu10
no fix listed
1
freedom98/flask:k3.0d7ce1533f297
glibc@2.36-9+deb12u10
no fix listed
1
freeradius/freeradius-server:3.2.8af6fd34a5b78
glibc@2.35-0ubuntu3.10
no fix listed
1
galaxy/cloudman-server:lateste5c265fe9fcd
glibc@2.31-0ubuntu9.9
no fix listed
1
galaxy/galaxy-init:v18.010267bad550e6
eglibc@2.19-0ubuntu6.14
no fix listed
1
galaxy/galaxy-stable:v18.018e577a626dfd
eglibc@2.19-0ubuntu6.14
no fix listed
1
galaxy/pulsar-kubernetes:0.15.7e50a890e24c9
glibc@2.36-9+deb12u10
no fix listed
1
galexrt/extended-ceph-exporter:v1.8.05373078a3a08
glibc@2.41-12
no fix listed
1
gchq/accumulo:2.0.1c460bb587d6d
glibc@2.39-0ubuntu8.1
no fix listed
1
geonetwork/gn-cloud-ogc-api-records-service:4.2.8-020c9bb761f67
glibc@2.27-3ubuntu1.6
no fix listed
1
geonode/geoserver:2.28.4-latest81b1d431b7e9
glibc@2.35-0ubuntu3.13
no fix listed
1
geopython/pycsw:3.0.0-beta284662ea6b78b
glibc@2.36-9+deb12u13
no fix listed
1
geoscienceaustralia/dea-k8s-data:latestf4039b45572a
glibc@2.27-3ubuntu1.2
no fix listed
1
geoservercloud/geoserver-cloud-gateway:1.0-RC2ca58b74529cd
glibc@2.31-0ubuntu9.2
no fix listed
1
geoservercloud/geoserver-cloud-gateway:3.0.1.1de0b20bd2a43
glibc@2.43-2ubuntu2.3
no fix listed
1
geoservercloud/geoserver-cloud-gwc:3.0.1.1b04ed89b5d2b
glibc@2.43-2ubuntu2.3
no fix listed
1
geoservercloud/geoserver-cloud-rest:3.0.1.1318254b52f96
glibc@2.43-2ubuntu2.3
no fix listed
1
geoservercloud/geoserver-cloud-rest:1.0-RC25dc0c93a1710
glibc@2.31-0ubuntu9.2
no fix listed
1
geoservercloud/geoserver-cloud-wcs:1.0-RC247ae1bdb4bcc
glibc@2.31-0ubuntu9.2
no fix listed
1
geoservercloud/geoserver-cloud-wcs:3.0.1.14f077124f591
glibc@2.43-2ubuntu2.3
no fix listed
1
geoservercloud/geoserver-cloud-webui:1.0-RC228c3e5a8c5a3
glibc@2.31-0ubuntu9.2
no fix listed
1
geoservercloud/geoserver-cloud-webui:3.0.1.14f91e3048ac8
glibc@2.43-2ubuntu2.3
no fix listed
1
geoservercloud/geoserver-cloud-wfs:3.0.1.1299f0d6232d1
glibc@2.43-2ubuntu2.3
no fix listed
1
geoservercloud/geoserver-cloud-wfs:1.0-RC28c70ee06d5ab
glibc@2.31-0ubuntu9.2
no fix listed
1
geoservercloud/geoserver-cloud-wms:1.0-RC242775ba6a4da
glibc@2.31-0ubuntu9.2
no fix listed
1
geoservercloud/geoserver-cloud-wms:3.0.1.15164f687ce4d
glibc@2.43-2ubuntu2.3
no fix listed
1
gethue/hue:4.11.011b649636e68
glibc@2.31-0ubuntu9.9
no fix listed
1
gethue/hue:4.10.05702b2c37ff9
glibc@2.27-3ubuntu1.4
no fix listed
1
gethue/hue:latest7d5c1b9f8a79
glibc@2.35-0ubuntu3.10
no fix listed
1
getsentry/relay:24.10.0ba7bf9163219
glibc@2.36-9+deb12u8
no fix listed
1
ghostfolio/ghostfolio:3.7.0e3c6ab53e49b
glibc@2.36-9+deb12u14
no fix listed
1
ghusta/postgres-world-db:latest879d0919fdcc
glibc@2.41-12+deb13u3
no fix listed
1
gitlab/gitlab-runner:v15.3.0860d4a3fec7a
glibc@2.31-0ubuntu9.9
no fix listed
1
glasskube/operator:0.12.2be5133100d63
glibc@2.35-0ubuntu3.4
no fix listed
1
gobitfly/eth2-beaconchain-explorer:latest1d08a7986348
glibc@2.35-0ubuntu3.9
no fix listed
1
golenski/fibonacci-msg-relay:1.0.0c863dcb0c513
glibc@2.36-9+deb12u1
no fix listed
1
golenski/fibonacci-task-manager:2.0.03a2b36df247b
glibc@2.36-9+deb12u1
no fix listed
1
golenski/fibonacci-worker:2.0.0954caf4aaf6a
glibc@2.36-9+deb12u1
no fix listed
1
gopinatht/ovs-plugin-installer:latest632cb2e9c399
glibc@2.23-0ubuntu10
no fix listed
1
gorules/brms:latest3cd59e25efad
glibc@2.41-12+deb13u3
no fix listed
1

syft 1.42.1 · advisories as of 19 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.