StackRadar

CVE-2026-18374

Medium

Advisory

Published 27 Aug 2026In the index since 5 Sept 2026
Severity
Medium
worst across findings
CVSS
4.9
base score, highest
EPSS
0.002
5th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
2,695
of 17,797 indexed, latest versions
Container images
2,729
deployed by those charts
Fix available
2 of 5
affected packages

CVE-2026-18374 affecting package glibc 2.38-21

Carried by container images the latest versions of 2,695 of 17,797 indexed charts deploy, on 2,729 images.

Affected packageAffected versionsFixed inImages
glibcdeb2.23-0ubuntu5, 2.23-0ubuntu7, 2.23-0ubuntu9, 2.23-0ubuntu10+66 more2.41-12+deb13u3+e72,618
eglibcdeb2.19-0ubuntu6.3, 2.19-0ubuntu6.6, 2.19-0ubuntu6.13, 2.19-0ubuntu6.14+1 moreno fix listed7
glibc-2.44apk2.44-r1, 2.44-r4, 2.44-r52.44-r676
glibcrpm2.38-16.azl3, 2.38-18.azl3, 2.38-20.azl3no fix listed23
glibc-2.43apk2.43-r14no fix listed5
OSV records
DEBIAN-CVE-2026-18374UBUNTU-CVE-2026-18374AZL-98042CGA-27g8-4xhq-hhr3CGA-2w63-hvq4-f4pcECHO-9169-1fd9-0c1c
Also known as
CGA-2r7g-4qmv-r3hh, CGA-3qmp-39qm-cjf8, CGA-3xw7-x4r7-x678, CGA-5g65-xm2q-rjhf, CGA-5wh2-vg99-j76x, CGA-63j2-v7q6-8x84, CGA-6rf5-rrq5-7pff, CGA-772j-3386-6g56, CGA-79v3-g2j9-ffq2, CGA-8hxc-pvg5-xr9j, CGA-c62g-2q4h-pjjg, CGA-f52m-j726-w2p6, CGA-h33h-m88h-4gc6, CGA-m923-g68q-v4rq, CGA-m9qj-fr43-382g, CGA-mm85-9c9x-q266, CGA-rh5w-p243-vcf7, CGA-v3jf-jvqj-vgxj, CGA-x2q5-w2xg-rgqc, CGA-x3rq-r7j3-jgpx

Charts affected

2,695 by stars
ChartLatestAffected imagesRadar Score
antigenic-stalwart-helm-chartantigenic-stalwart-helm-chartVerified publisher1.0.51 of 2See more

antigenic-stalwart-helm-chart antigenic-stalwart-helm-chart 1.0.5

1 of the 2 container images this version deploys carry CVE-2026-18374.

Container imageDigestPackageFixed in
stalwartlabs/stalwart:v0.15.5dcf575db2d53
glibc@2.41-12+deb13u1
no fix listed

Open the chart page →

1,462
antmediaantmediaVerified publisher3.1.01 of 4See more

antmedia antmedia 3.1.0

1 of the 4 container images this version deploys carry CVE-2026-18374.

Container imageDigestPackageFixed in
library/mongo:8.002a0cc7939f5
glibc@2.39-0ubuntu8.8
no fix listed

Open the chart page →

4,631
antrea-uiantreaVerified publisher0.8.01 of 2See more

antrea-ui antrea 0.8.0

1 of the 2 container images this version deploys carry CVE-2026-18374.

Container imageDigestPackageFixed in
antrea/antrea-ui-frontend:v0.8.0ee9686bcefb8
glibc@2.41-12+deb13u2
no fix listed

Open the chart page →

3,275
flow-aggregatorantreaVerified publisher2.7.01 of 1See more

flow-aggregator antrea 2.7.0

1 of the 1 container images this version deploys carry CVE-2026-18374.

Container imageDigestPackageFixed in
antrea/flow-aggregator:v2.7.0065193e7572f
glibc@2.39-0ubuntu8.8
no fix listed

Open the chart page →

774
glauthanza-labsVerified publisher1.0.11 of 1See more

glauth anza-labs 1.0.1

1 of the 1 container images this version deploys carry CVE-2026-18374.

Container imageDigestPackageFixed in
ghcr.io/glauth/glauth:v2.5.209c782ca5984
glibc@2.41-12+deb13u3
no fix listed

Open the chart page →

1,309
apispringbootHelmapispringboot0.1.01 of 1See more

apispringbootHelm apispringboot 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-18374.

Container imageDigestPackageFixed in
rabeh/apibootspring:1.0941007b6946e
glibc@2.35-0ubuntu3.4
no fix listed

Open the chart page →

6,302
d.vazquezm.2021_helmapphelmVerified publisher1.0.01 of 6See more

d.vazquezm.2021_helm apphelm 1.0.0

1 of the 6 container images this version deploys carry CVE-2026-18374.

Container imageDigestPackageFixed in
library/mongo:5.0.6-focal8e70544b6c76
glibc@2.31-0ubuntu9.7
no fix listed

Open the chart page →

19,799
accounts-uiappscodeVerified publisher2026.9.111 of 1See more

accounts-ui appscode 2026.9.11

1 of the 1 container images this version deploys carry CVE-2026-18374.

Container imageDigestPackageFixed in
ghcr.io/appscode/b3:v2026.9.1176d28575b71c
glibc@2.36-9+deb12u14
no fix listed

Open the chart page →

2,660
aceappscodeVerified publisher2026.9.111 of 2See more

ace appscode 2026.9.11

1 of the 2 container images this version deploys carry CVE-2026-18374.

Container imageDigestPackageFixed in
ghcr.io/appscode/b3:v2026.9.1176d28575b71c
glibc@2.36-9+deb12u14
no fix listed

Open the chart page →

2,962
ace-installerappscodeVerified publisher2026.9.111 of 2See more

ace-installer appscode 2026.9.11

1 of the 2 container images this version deploys carry CVE-2026-18374.

Container imageDigestPackageFixed in
ghcr.io/appscode/b3:v2026.9.1176d28575b71c
glibc@2.36-9+deb12u14
no fix listed

Open the chart page →

3,301
ace-installer-certifiedappscodeVerified publisher2026.9.111 of 2See more

ace-installer-certified appscode 2026.9.11

1 of the 2 container images this version deploys carry CVE-2026-18374.

Container imageDigestPackageFixed in
ghcr.io/appscode/b3:v2026.9.1176d28575b71c
glibc@2.36-9+deb12u14
no fix listed

Open the chart page →

3,301
billingappscodeVerified publisher2026.9.111 of 1See more

billing appscode 2026.9.11

1 of the 1 container images this version deploys carry CVE-2026-18374.

Container imageDigestPackageFixed in
ghcr.io/appscode/b3:v2026.9.1176d28575b71c
glibc@2.36-9+deb12u14
no fix listed

Open the chart page →

2,660
crd-managerappscodeVerified publisher2026.7.211 of 1See more

crd-manager appscode 2026.7.21

1 of the 1 container images this version deploys carry CVE-2026-18374.

Container imageDigestPackageFixed in
ghcr.io/voyagermesh/crd-manager:v0.3.0e67f14e5c853
glibc@2.36-9+deb12u14
no fix listed

Open the chart page →

797
inbox-serverappscodeVerified publisher2025.12.251 of 1See more

inbox-server appscode 2025.12.25

1 of the 1 container images this version deploys carry CVE-2026-18374.

Container imageDigestPackageFixed in
ghcr.io/appscode/inbox-server:postgres-latest536358d7b17e
glibc@2.35-0ubuntu3.11
no fix listed

Open the chart page →

4,013
inbox-server-distributedappscodeVerified publisher2025.12.253 of 4See more

inbox-server-distributed appscode 2025.12.25

3 of the 4 container images this version deploys carry CVE-2026-18374.

Container imageDigestPackageFixed in
library/cassandra:4.1.37cbcec0086ac
glibc@2.35-0ubuntu3.6
no fix listed
library/rabbitmq:3.12.1-managementf020c06da226
glibc@2.35-0ubuntu3.1
no fix listed
ghcr.io/appscode/inbox-server:latest536358d7b17e
glibc@2.35-0ubuntu3.11
no fix listed

Open the chart page →

15,764
james-komposeappscodeVerified publisher0.1.03 of 4See more

james-kompose appscode 0.1.0

3 of the 4 container images this version deploys carry CVE-2026-18374.

Container imageDigestPackageFixed in
library/cassandra:4.1.37cbcec0086ac
glibc@2.35-0ubuntu3.6
no fix listed
library/rabbitmq:3.12.1-managementf020c06da226
glibc@2.35-0ubuntu3.1
no fix listed
ghcr.io/appscode/inbox-server:MailetGroup4a2824296412
glibc@2.35-0ubuntu3.6
no fix listed

Open the chart page →

17,169
kubedb-autoscalerappscodeVerified publisher0.51.01 of 1See more

kubedb-autoscaler appscode 0.51.0

1 of the 1 container images this version deploys carry CVE-2026-18374.

Container imageDigestPackageFixed in
ghcr.io/kubedb/kubedb-autoscaler:v0.51.05d1182ac21f0
glibc@2.36-9+deb12u14
no fix listed

Open the chart page →

526
kubedb-certifiedappscodeVerified publisher2026.7.105 of 8See more

kubedb-certified appscode 2026.7.10

5 of the 8 container images this version deploys carry CVE-2026-18374.

Container imageDigestPackageFixed in
ghcr.io/kubedb/kubedb-autoscaler:v0.51.05d1182ac21f0
glibc@2.36-9+deb12u14
no fix listed
ghcr.io/kubedb/kubedb-crd-manager:v0.21.09506a6cb98d1
glibc@2.36-9+deb12u14
no fix listed
ghcr.io/kubedb/kubedb-ops-manager:v0.53.06d4c9fe66e4f
glibc@2.36-9+deb12u14
no fix listed
ghcr.io/kubedb/kubedb-provisioner:v0.66.0824d6d78d451
glibc@2.36-9+deb12u14
no fix listed
ghcr.io/kubedb/kubedb-webhook-server:v0.42.0f7dcade6523b
glibc@2.36-9+deb12u14
no fix listed

Open the chart page →

4,180
kubedb-crd-managerappscodeVerified publisher0.21.01 of 1See more

kubedb-crd-manager appscode 0.21.0

1 of the 1 container images this version deploys carry CVE-2026-18374.

Container imageDigestPackageFixed in
ghcr.io/kubedb/kubedb-crd-manager:v0.21.09506a6cb98d1
glibc@2.36-9+deb12u14
no fix listed

Open the chart page →

510
kubedb-gitopsappscodeVerified publisher0.14.01 of 1See more

kubedb-gitops appscode 0.14.0

1 of the 1 container images this version deploys carry CVE-2026-18374.

Container imageDigestPackageFixed in
ghcr.io/kubedb/kubedb-gitops:v0.14.0c743f8d7a199
glibc@2.36-9+deb12u14
no fix listed

Open the chart page →

474
kubedb-oneappscodeVerified publisher2023.12.281 of 10See more

kubedb-one appscode 2023.12.28

1 of the 10 container images this version deploys carry CVE-2026-18374.

Container imageDigestPackageFixed in
ghcr.io/kubedb/kubedb-autoscaler:v0.25.0df6b11907d33
glibc@2.36-9+deb12u3
no fix listed

Open the chart page →

15,273
kubedb-ops-managerappscodeVerified publisher0.53.01 of 1See more

kubedb-ops-manager appscode 0.53.0

1 of the 1 container images this version deploys carry CVE-2026-18374.

Container imageDigestPackageFixed in
ghcr.io/kubedb/kubedb-ops-manager:v0.53.06d4c9fe66e4f
glibc@2.36-9+deb12u14
no fix listed

Open the chart page →

579
kubedb-webhook-serverappscodeVerified publisher0.42.01 of 1See more

kubedb-webhook-server appscode 0.42.0

1 of the 1 container images this version deploys carry CVE-2026-18374.

Container imageDigestPackageFixed in
ghcr.io/kubedb/kubedb-webhook-server:v0.42.0f7dcade6523b
glibc@2.36-9+deb12u14
no fix listed

Open the chart page →

483
kubevaultappscodeVerified publisher2026.8.71 of 2See more

kubevault appscode 2026.8.7

1 of the 2 container images this version deploys carry CVE-2026-18374.

Container imageDigestPackageFixed in
ghcr.io/kubevault/vault-operator:v0.25.0c8e042b5cee8
glibc@2.36-9+deb12u14
no fix listed

Open the chart page →

813
kubevault-certifiedappscodeVerified publisher2026.2.271 of 1See more

kubevault-certified appscode 2026.2.27

1 of the 1 container images this version deploys carry CVE-2026-18374.

Container imageDigestPackageFixed in
ghcr.io/kubevault/vault-operator:v0.24.00087cb49616f
glibc@2.36-9+deb12u13
no fix listed

Open the chart page →

1,136
kubevault-operatorappscodeVerified publisher0.25.01 of 1See more

kubevault-operator appscode 0.25.0

1 of the 1 container images this version deploys carry CVE-2026-18374.

Container imageDigestPackageFixed in
ghcr.io/kubevault/vault-operator:v0.25.0c8e042b5cee8
glibc@2.36-9+deb12u14
no fix listed

Open the chart page →

511
kubevault-webhook-serverappscodeVerified publisher0.25.01 of 2See more

kubevault-webhook-server appscode 0.25.0

1 of the 2 container images this version deploys carry CVE-2026-18374.

Container imageDigestPackageFixed in
ghcr.io/kubevault/vault-operator:v0.25.0c8e042b5cee8
glibc@2.36-9+deb12u14
no fix listed

Open the chart page →

813
marketplace-apiappscodeVerified publisher2026.9.111 of 1See more

marketplace-api appscode 2026.9.11

1 of the 1 container images this version deploys carry CVE-2026-18374.

Container imageDigestPackageFixed in
ghcr.io/appscode/b3:v2026.9.1176d28575b71c
glibc@2.36-9+deb12u14
no fix listed

Open the chart page →

2,660
platform-apiappscodeVerified publisher2026.9.112 of 3See more

platform-api appscode 2026.9.11

2 of the 3 container images this version deploys carry CVE-2026-18374.

Container imageDigestPackageFixed in
ghcr.io/appscode/b3:v2026.9.1176d28575b71c
glibc@2.36-9+deb12u14
no fix listed
ghcr.io/appscode/gotenberg:8.25f9104080d9a7
glibc@2.41-12
no fix listed

Open the chart page →

37,732
s3proxyappscodeVerified publisher2026.9.111 of 1See more

s3proxy appscode 2026.9.11

1 of the 1 container images this version deploys carry CVE-2026-18374.

Container imageDigestPackageFixed in
ghcr.io/appscode/s3proxy:sha-a82ca6820518335f9f9
glibc@2.35-0ubuntu3.8
no fix listed

Open the chart page →

3,322
service-gatewayappscodeVerified publisher2026.9.112 of 3See more

service-gateway appscode 2026.9.11

2 of the 3 container images this version deploys carry CVE-2026-18374.

Container imageDigestPackageFixed in
ghcr.io/voyagermesh/crd-manager:v0.3.0e67f14e5c853
glibc@2.36-9+deb12u14
no fix listed
ghcr.io/voyagermesh/gateway:v1.8.24237fd16a3cb
glibc@2.41-12+deb13u3
no fix listed

Open the chart page →

2,169
voyager-gatewayappscodeVerified publisher2026.7.212 of 2See more

voyager-gateway appscode 2026.7.21

2 of the 2 container images this version deploys carry CVE-2026-18374.

Container imageDigestPackageFixed in
ghcr.io/voyagermesh/crd-manager:v0.3.0e67f14e5c853
glibc@2.36-9+deb12u14
no fix listed
ghcr.io/voyagermesh/gateway:v1.8.24237fd16a3cb
glibc@2.41-12+deb13u3
no fix listed

Open the chart page →

1,345
haproxyappuio2.7.21 of 1See more

haproxy appuio 2.7.2

1 of the 1 container images this version deploys carry CVE-2026-18374.

Container imageDigestPackageFixed in
ghcr.io/vshn/haproxy-with-mysql:1.0.0a3c27ee3fb2f
glibc@2.36-9+deb12u1
no fix listed

Open the chart page →

5,685
chart-app-vidapp-vid-chartVerified publisher0.0.71 of 2See more

chart-app-vid app-vid-chart 0.0.7

1 of the 2 container images this version deploys carry CVE-2026-18374.

Container imageDigestPackageFixed in
library/mongo:latest5211c51171f5
glibc@2.39-0ubuntu8.8
no fix listed

Open the chart page →

8,924
dokuwikiarea-42Verified publisher0.1.81 of 1See more

dokuwiki area-42 0.1.8

1 of the 1 container images this version deploys carry CVE-2026-18374.

Container imageDigestPackageFixed in
dokuwiki/dokuwiki:2025-05-14af08ecfdda239
glibc@2.41-12
no fix listed

Open the chart page →

7,586
argocdargo-helm-charts1.0.01 of 3See more

argocd argo-helm-charts 1.0.0

1 of the 3 container images this version deploys carry CVE-2026-18374.

Container imageDigestPackageFixed in
quay.io/argoproj/argocd:v2.14.115fc69e31c755
glibc@2.39-0ubuntu8.4
no fix listed

Open the chart page →

7,369
arlas-aiasarlas-stackVerified publisher28.8.012 of 22See more

arlas-aias arlas-stack 28.8.0

12 of the 22 container images this version deploys carry CVE-2026-18374.

Container imageDigestPackageFixed in
bitnamilegacy/elasticsearch:9.0.1-debian-12-r0e6f6ddcce2f1
glibc@2.36-9+deb12u10
no fix listed
bitnamilegacy/keycloak:26.3.3-debian-12-r0da3df0976a9f
glibc@2.36-9+deb12u10
no fix listed
bitnamilegacy/minio:2024.12.18-debian-12-r1c0ede65eb88e
glibc@2.36-9+deb12u9
no fix listed
bitnamilegacy/minio:2025.4.22-debian-12-r1d7cd0e172c4c
glibc@2.36-9+deb12u10
no fix listed
bitnamilegacy/os-shell:12-debian-12-r439ba5d16f9c64
glibc@2.36-9+deb12u10
no fix listed
bitnamilegacy/postgresql:17.6.0-debian-12-r0de520acd66fc
glibc@2.36-9+deb12u10
no fix listed
bitnamilegacy/rabbitmq:4.1.2-debian-12-r074a3d7c747eb
glibc@2.36-9+deb12u10
no fix listed
bitnamilegacy/redis:8.0.3-debian-12-r1189aae381e7f
glibc@2.36-9+deb12u10
no fix listed
gisaia/arlas-permissions-server:28.0.0e612fc722e02
glibc@2.41-12+deb13u2
no fix listed
gisaia/arlas-persistence-server:28.0.0f667e0ee79be
glibc@2.41-12+deb13u2
no fix listed
gisaia/arlas-server:28.0.04e693e7b6f37
glibc@2.41-12+deb13u2
no fix listed
ghcr.io/developmentseed/titiler:0.22.48ac53eb38393
glibc@2.36-9+deb12u10
no fix listed

Open the chart page →

40,651
arlas-servicesarlas-stackVerified publisher28.8.03 of 3See more

arlas-services arlas-stack 28.8.0

3 of the 3 container images this version deploys carry CVE-2026-18374.

Container imageDigestPackageFixed in
gisaia/arlas-permissions-server:28.0.0e612fc722e02
glibc@2.41-12+deb13u2
no fix listed
gisaia/arlas-persistence-server:28.0.0f667e0ee79be
glibc@2.41-12+deb13u2
no fix listed
gisaia/arlas-server:28.0.04e693e7b6f37
glibc@2.41-12+deb13u2
no fix listed

Open the chart page →

1,603
titilerarlas-stackVerified publisher28.8.01 of 1See more

titiler arlas-stack 28.8.0

1 of the 1 container images this version deploys carry CVE-2026-18374.

Container imageDigestPackageFixed in
ghcr.io/developmentseed/titiler:latest0f31f8b0441b
glibc@2.41-12+deb13u3
no fix listed

Open the chart page →

1,467
arma-reforgerarma-reforger0.5.31 of 8See more

arma-reforger arma-reforger 0.5.3

1 of the 8 container images this version deploys carry CVE-2026-18374.

Container imageDigestPackageFixed in
ghcr.io/brittonhayes/arma-reforger:latest6fde1edc0983
glibc@2.31-0ubuntu9.9
no fix listed

Open the chart page →

23,435
bind9artem-shestakov1.0.11 of 1See more

bind9 artem-shestakov 1.0.1

1 of the 1 container images this version deploys carry CVE-2026-18374.

Container imageDigestPackageFixed in
ubuntu/bind9:9.16-20.04_beta5ee73f44e5d0
glibc@2.31-0ubuntu9.17
no fix listed

Open the chart page →

3,579
keystonearzu0.2.293 of 4See more

keystone arzu 0.2.29

3 of the 4 container images this version deploys carry CVE-2026-18374.

Container imageDigestPackageFixed in
library/rabbitmq:3.7-managementb6dd45cc35b3
glibc@2.27-3ubuntu1.2
no fix listed
openstackhelm/heat:wallaby-ubuntu_focalf728510bab3c
glibc@2.31-0ubuntu9.12
no fix listed
openstackhelm/keystone:wallaby-ubuntu_focale07d75953d2e
glibc@2.31-0ubuntu9.12
no fix listed

Open the chart page →

22,725
assemblylineassemblylineVerified publisher7.4.205 of 12See more

assemblyline assemblyline 7.4.20

5 of the 12 container images this version deploys carry CVE-2026-18374.

Container imageDigestPackageFixed in
cccs/assemblyline-core:4.7.4.stable20098127270065
glibc@2.36-9+deb12u14
no fix listed
cccs/assemblyline-rust:4.7.4.stable202be5e6a57427
glibc@2.36-9+deb12u14
no fix listed
cccs/assemblyline-socketio:4.7.4.stable202b88493b62f7
glibc@2.36-9+deb12u14
no fix listed
cccs/assemblyline-ui:4.7.4.stable20efa75509b854
glibc@2.36-9+deb12u14
no fix listed
library/redis:latest298e5b3bc566
glibc@2.41-12+deb13u3
no fix listed

Open the chart page →

12,667
dltkvassist-iot-data-integrity-verification0.2.03 of 9See more

dltkv assist-iot-data-integrity-verification 0.2.0

3 of the 9 container images this version deploys carry CVE-2026-18374.

Container imageDigestPackageFixed in
hyperledger/fabric-ca:latesta70b6ba64a08
glibc@2.35-0ubuntu3.13
no fix listed
hyperledger/fabric-ca-tools:latest4ce6f43ded2e
glibc@2.23-0ubuntu10
no fix listed
hyperledger/fabric-couchdb:0.4.15f6c724592abf
glibc@2.23-0ubuntu11
no fix listed

Open the chart page →

78,035
dltflassist-iot-dlt-based-fl0.2.03 of 9See more

dltfl assist-iot-dlt-based-fl 0.2.0

3 of the 9 container images this version deploys carry CVE-2026-18374.

Container imageDigestPackageFixed in
hyperledger/fabric-ca:latesta70b6ba64a08
glibc@2.35-0ubuntu3.13
no fix listed
hyperledger/fabric-ca-tools:latest4ce6f43ded2e
glibc@2.23-0ubuntu10
no fix listed
hyperledger/fabric-couchdb:0.4.15f6c724592abf
glibc@2.23-0ubuntu11
no fix listed

Open the chart page →

78,035
fl-orchestrator-guiassist-iot-fl-orchestrator0.1.01 of 3See more

fl-orchestrator-gui assist-iot-fl-orchestrator 0.1.0

1 of the 3 container images this version deploys carry CVE-2026-18374.

Container imageDigestPackageFixed in
assistiot/fl_orchestrator:dbmongo4-latestd157fbe150e3
glibc@2.31-0ubuntu9.9
no fix listed

Open the chart page →

9,422
idmassist-iot-identity-manager0.1.01 of 2See more

idm assist-iot-identity-manager 0.1.0

1 of the 2 container images this version deploys carry CVE-2026-18374.

Container imageDigestPackageFixed in
assistiot/identity-manager_db:latest0d3e6d35f168
glibc@2.36-9+deb12u3
no fix listed

Open the chart page →

13,389
locationprocessingassist-iot-location-processing1.0.01 of 3See more

locationprocessing assist-iot-location-processing 1.0.0

1 of the 3 container images this version deploys carry CVE-2026-18374.

Container imageDigestPackageFixed in
assistiot/location_processing:lateste9bae124095f
glibc@2.35-0ubuntu3.1
no fix listed

Open the chart page →

10,173
openapiassist-iot-open-api-management0.2.21 of 6See more

openapi assist-iot-open-api-management 0.2.2

1 of the 6 container images this version deploys carry CVE-2026-18374.

Container imageDigestPackageFixed in
assistiot/open_api_backend:1.1.230812ba93555
glibc@2.35-0ubuntu3.5
no fix listed

Open the chart page →

18,426
resource-provisioningassist-iot-resource-provisioning1.0.01 of 7See more

resource-provisioning assist-iot-resource-provisioning 1.0.0

1 of the 7 container images this version deploys carry CVE-2026-18374.

Container imageDigestPackageFixed in
library/buildpack-deps:curl04907bdd423b
glibc@2.41-12+deb13u3
no fix listed

Open the chart page →

8,052

Container images carrying it

2,729 by charts deploying them

A fixed version is listed for 2 of the 5 affected packages.

Container imageDigestPackageFixed inUsed by
vlebediantsev/notes-project-front:latest945675fd2636
glibc@2.36-9+deb12u1
no fix listed
1
vlebediantsev/registration-ms-front-app-host:latest54f69d116c50
glibc@2.36-9+deb12u1
no fix listed
1
voltha/bbsim:1.16.7d90403d58016
glibc@2.27-3ubuntu1.6
no fix listed
1
voltha/bbsim-sadis-server:0.3.5259fc3a03f4e
glibc@2.27-3ubuntu1.6
no fix listed
1
voltha/bbsim-sadis-server:0.4.0762b272d439e
glibc@2.27-3ubuntu1.6
no fix listed
1
voltha/voltha-cli:1.6.0c4e41e92f046
glibc@2.23-0ubuntu10
no fix listed
1
voltha/voltha-envoy:1.6.059ab2a00f712
eglibc@2.19-0ubuntu6.13
no fix listed
1
voltha/voltha-netconf:1.6.037f80524c207
glibc@2.23-0ubuntu10
no fix listed
1
voltha/voltha-ofagent:1.6.09ee8c1f4428c
glibc@2.23-0ubuntu10
no fix listed
1
voltha/voltha-onos:5.1.8e038acb950d3
glibc@2.27-3ubuntu1.2
no fix listed
1
voltha/voltha-tester:1.7.0655c3048a602
glibc@2.23-0ubuntu11
no fix listed
1
voltha/voltha-voltha:1.6.0ff596b62de59
glibc@2.23-0ubuntu10
no fix listed
1
wallarm/aih-scanner:2.7.11f1cb26db1f5b
glibc@2.41-12+deb13u3
no fix listed
1
wallarm/api-gateway:0.2.0a3d4d2f780e8
glibc@2.36-9+deb12u13
no fix listed
1
wallarm/gateway-controller:0.4.09c6ed23e2f0e
glibc@2.41-12+deb13u3
no fix listed
1
wallarm/kong:3.1.0-ubuntu-4.6.0ea9608c82e40
glibc@2.31-0ubuntu9.9
no fix listed
1
wasmcloud/wasmcloud:0.81.05c7acfe7e8e1
glibc@2.36-9+deb12u3
no fix listed
1
wateim/lighthouse-launch:latest2520149ee574
glibc@2.35-0ubuntu3.8
no fix listed
1
wavefronthq/proxy:9.2d1064d28f6eb
glibc@2.27-3ubuntu1.2
no fix listed
1
wazuh/wazuh-dashboard:4.4.11787550d2358
glibc@2.31-0ubuntu9.9
no fix listed
1
wazuh/wazuh-manager:4.4.121994f40e0da
glibc@2.31-0ubuntu9.9
no fix listed
1
weblate/weblate:2026.9.1.0990720d1737a
glibc@2.43-2ubuntu2.3
no fix listed
1
wekanteam/wekan:v4.2268a51f0327df
glibc@2.31-0ubuntu9
no fix listed
1
wger/server:2.6997ead43aabd
glibc@2.39-0ubuntu8.7
no fix listed
1
wiktorn/overpass-api:latest9bb5f4a9b54c
glibc@2.36-9+deb12u14
no fix listed
1
wistefan/mvf:lateste0887302b2d8
glibc@2.35-0ubuntu3.1
no fix listed
1
wolveix/satisfactory-server:v1.9.1199be1064b18
glibc@2.35-0ubuntu3.8
no fix listed
1
wolveix/satisfactory-server:v1.9.9464d11e36e10
glibc@2.35-0ubuntu3.10
no fix listed
1
woojoong/wowza:latestec230db19652
glibc@2.27-3ubuntu1
no fix listed
1
workadventure/playwright-synthetic-monitoring:main92b664c2a06f
glibc@2.35-0ubuntu3.8
no fix listed
1
worthnl/notifynl-omc:2.2.009fca4ed1c71
glibc@2.39-0ubuntu8.8
no fix listed
1
xeladock/mysql_dns:latest4baf531453f1
glibc@2.35-0ubuntu3
no fix listed
1
xeladock/nginx2:latestc259a67b1dff
glibc@2.35-0ubuntu3
no fix listed
1
xeotek/kadeck:6.3.439a3b37a17c5
glibc@2.35-0ubuntu3.11
no fix listed
1
xeotek/kadeck:4.2.94c6b04d9ce55
glibc@2.31-0ubuntu9.9
no fix listed
1
xingse/kubernetes-oom-event-generator:v1.2.09f9d5492e4bf
glibc@2.23-0ubuntu11.2
no fix listed
1
xom4ekp2p/infini-route-attestators-public-mainnet-attester:latestd0e0aa238b02
glibc@2.36-9+deb12u7
no fix listed
1
xom4ekp2p/infini-route-attestators-public-mainnet-avs-webapi:latest2745b5fd8785
glibc@2.36-9+deb12u7
no fix listed
1
yandex/clickhouse-client:21.3863f94a0f607
glibc@2.27-3ubuntu1.4
no fix listed
1
yandex/clickhouse-server:latest1cbf75aabe1e
glibc@2.31-0ubuntu9.2
no fix listed
1
yandex/clickhouse-server:21.3.204eccfffb01d7
glibc@2.31-0ubuntu9.2
no fix listed
1
yandex/clickhouse-server:19.17ab1738a64b70
glibc@2.27-3ubuntu1
no fix listed
1
yandex/clickhouse-server:19.14ccf9c2b5e3f2
glibc@2.27-3ubuntu1
no fix listed
1
yandex/clickhouse-server:19.16d210dc69321e
glibc@2.27-3ubuntu1
no fix listed
1
ybucci/traefik-external-dns-controller:2.2.08d27ad8b5f73
glibc@2.41-12+deb13u3
no fix listed
1
yetiplatform/yeti:2.9.09bcbe2650a14
glibc@2.41-12+deb13u3
no fix listed
1
yetiplatform/yeti:latest9c3006cedcca
glibc@2.41-12+deb13u3
no fix listed
1
yetiplatform/yeti-frontend:latest709064278c7e
glibc@2.41-12+deb13u3
no fix listed
1
yetiplatform/yeti-frontend:2.9.0873ef15d267b
glibc@2.41-12+deb13u3
no fix listed
1
youkadev/api-snap:0.1.14db0f9428e67
glibc@2.36-9+deb12u4
no fix listed
1

syft 1.42.1 · advisories as of 17 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.