StackRadar

CVE-2026-18374

Medium

Advisory

Published 27 Aug 2026In the index since 5 Sept 2026
Severity
Medium
worst across findings
CVSS
4.9
base score, highest
EPSS
0.002
5th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
2,746
of 17,821 indexed, latest versions
Container images
2,798
deployed by those charts
Fix available
2 of 5
affected packages

CVE-2026-18374 affecting package glibc 2.38-21

Carried by container images the latest versions of 2,746 of 17,821 indexed charts deploy, on 2,798 images.

Affected packageAffected versionsFixed inImages
glibcdeb2.23-0ubuntu5, 2.23-0ubuntu7, 2.23-0ubuntu9, 2.23-0ubuntu10+66 more2.41-12+deb13u3+e72,741
eglibcdeb2.19-0ubuntu6.3, 2.19-0ubuntu6.6, 2.19-0ubuntu6.13, 2.19-0ubuntu6.14+1 moreno fix listed7
glibc-2.44apk2.44-r1, 2.44-r4, 2.44-r52.44-r635
glibcrpm2.38-16.azl3, 2.38-18.azl3, 2.38-20.azl3no fix listed14
glibc-2.43apk2.43-r14no fix listed1
OSV records
DEBIAN-CVE-2026-18374UBUNTU-CVE-2026-18374AZL-98042CGA-27g8-4xhq-hhr3CGA-2w63-hvq4-f4pcECHO-9169-1fd9-0c1c
Also known as
CGA-3qmp-39qm-cjf8, CGA-3xw7-x4r7-x678, CGA-5g65-xm2q-rjhf, CGA-5wh2-vg99-j76x, CGA-63j2-v7q6-8x84, CGA-6rf5-rrq5-7pff, CGA-772j-3386-6g56, CGA-79v3-g2j9-ffq2, CGA-8hxc-pvg5-xr9j, CGA-c62g-2q4h-pjjg, CGA-f52m-j726-w2p6, CGA-h33h-m88h-4gc6, CGA-m923-g68q-v4rq, CGA-m9qj-fr43-382g, CGA-mm85-9c9x-q266, CGA-v3jf-jvqj-vgxj, CGA-x2q5-w2xg-rgqc, CGA-x3rq-r7j3-jgpx

Charts affected

2,746 by stars
ChartLatestAffected imagesRadar Score

Container images carrying it

2,798 by charts deploying them

A fixed version is listed for 2 of the 5 affected packages.

Container imageDigestPackageFixed inUsed by
quay.io/devtron/devtron:9450794d-930-394159795f3f9f031
glibc@2.39-0ubuntu8.3
no fix listed
3
quay.io/devtron/google-chat-alert-manager:v2.0.239f2c6e0af38
glibc@2.31-0ubuntu9.7
no fix listed
3
quay.io/devtron/hyperion:0874dcaf-280-3928701d5d8c4cecb
glibc@2.39-0ubuntu8.3
no fix listed
3
quay.io/devtron/inception:7beef376-948-313784c3b91bebd3d
glibc@2.23-0ubuntu11.3
no fix listed
3
quay.io/devtron/k8s-utils:807ca3c2-488-14005f296c2ec5db7
glibc@2.35-0ubuntu3.1
no fix listed
3
quay.io/devtron/kubelink:94237c18-314-394179d25865295af
glibc@2.39-0ubuntu8.3
no fix listed
3
quay.io/devtron/kubelink:09867a9c-564-39289ea6dd1e4ce71
glibc@2.39-0ubuntu8.3
no fix listed
3
quay.io/devtron/notifier:9804331c-372-39294709c7da19c5a
glibc@2.36-9+deb12u13
no fix listed
3
actualbudget/actual-server:26.9.0552beab3dec8
glibc@2.36-9+deb12u14
no fix listed
2
alazidis/kube-netlag:1.1.00e8c84152201
glibc@2.39-0ubuntu8.7
no fix listed
2
apache/druid:37.0.00116fb802786
glibc@2.36-9+deb12u13
no fix listed
2
apache/nifi-registry:1.26.07cdfd8deec92
glibc@2.35-0ubuntu3.7
no fix listed
2
apache/rocketmq:5.4.0319cd8a81ed1
glibc@2.39-0ubuntu8.7
no fix listed
2
apache/tika:2.9.0.092d055a84e9e
glibc@2.35-0ubuntu3.1
no fix listed
2
apache/tika:2.9.2.1-fullae0b86d3c4d0
glibc@2.39-0ubuntu8.1
no fix listed
2
bitnamilegacy/elasticsearch:9.1.2-debian-12-r000176a47afa0
glibc@2.36-9+deb12u10
no fix listed
2
bitnamilegacy/mariadb:11.4.5-debian-12-r933ce23601fc9
glibc@2.36-9+deb12u10
no fix listed
2
bitnamilegacy/postgresql:16.4.0-debian-12-r1494bc968141e7
glibc@2.36-9+deb12u8
no fix listed
2
bitnamilegacy/redis:latest5927ff3702df
glibc@2.36-9+deb12u10
no fix listed
2
bitnami/minideb:latestab4d5b45116e
glibc@2.41-12+deb13u3
no fix listed
2
blockstack/stacks-core:3.2.0.0.0f79944317326
glibc@2.36-9+deb12u10
no fix listed
2
cagriekin/pg-ha:2.0.1-pg1899e17aa165df
glibc@2.41-12+deb13u3
no fix listed
2
cfssl/cfssl:latest:v1.6.5c9018c2ddf0b
glibc@2.36-9+deb12u4
no fix listed
2
chromedp/headless-shell:148.0.7778.97313ed7255ae1
glibc@2.41-12+deb13u2
no fix listed
2
clickhouse/clickhouse-server:24.2ed9640bfff07
glibc@2.31-0ubuntu9.15
no fix listed
2
cloudflare/cloudflared:2026.6.16d91c121b803
glibc@2.41-12+deb13u3
no fix listed
2
cribl/cribl:4.20.0dddc9c0f2a52
glibc@2.39-0ubuntu8.9
no fix listed
2
dagster/user-code-example:1.13.235a358fd3509f
glibc@2.41-12+deb13u3
no fix listed
2
datagrok/grok_connect:latestf5876d3aebb8
glibc@2.35-0ubuntu3.14
no fix listed
2
deepflowce/clickhouse-server:22.8.6.71bc1882f75c18
glibc@2.31-0ubuntu9.9
no fix listed
2
envoyproxy/gateway:v1.9.10049bcb384c5
glibc@2.41-12+deb13u3
no fix listed
2
eqalpha/keydb:latest6537505c4235
glibc@2.31-0ubuntu9.12
no fix listed
2
eqalpha/keydb:x86_64_v6.3.4eceb1806730c
glibc@2.31-0ubuntu9.12
no fix listed
2
fireflyiii/core:version-6.5.9fe4ecec4c2ba
glibc@2.41-12+deb13u2
no fix listed
2
fireflyiii/data-importer:version-2.2.3ab52bf932546
glibc@2.41-12+deb13u2
no fix listed
2
flashcatcloud/categraf:latest42e6ab16472e
glibc@2.39-0ubuntu8.7
no fix listed
2
freeradius/freeradius-server:3.0.2121c8bfa904d8
glibc@2.27-3ubuntu1
no fix listed
2
freikin/dawarich:1.14.511826c67e4b1
glibc@2.41-12+deb13u4
no fix listed
2
geoservercloud/geoserver-cloud-gateway:1.0-RC3756559ee788a
glibc@2.31-0ubuntu9.2
no fix listed
2
geoservercloud/geoserver-cloud-rest:1.0-RC399540eef78ad
glibc@2.31-0ubuntu9.2
no fix listed
2
geoservercloud/geoserver-cloud-wcs:1.0-RC35c254c53a357
glibc@2.31-0ubuntu9.2
no fix listed
2
geoservercloud/geoserver-cloud-webui:1.0-RC3c687b1cbc891
glibc@2.31-0ubuntu9.2
no fix listed
2
geoservercloud/geoserver-cloud-wfs:1.0-RC35288f320cf36
glibc@2.31-0ubuntu9.2
no fix listed
2
geoservercloud/geoserver-cloud-wms:1.0-RC3a30a60ac6cd0
glibc@2.31-0ubuntu9.2
no fix listed
2
gisaia/arlas-permissions-server:28.0.0e612fc722e02
glibc@2.41-12+deb13u2
no fix listed
2
gisaia/arlas-persistence-server:28.0.0f667e0ee79be
glibc@2.41-12+deb13u2
no fix listed
2
gisaia/arlas-server:28.0.04e693e7b6f37
glibc@2.41-12+deb13u2
no fix listed
2
gjeanmart/safe-ganache-node:latest926264c8f2d1
glibc@2.36-9
no fix listed
2
gotenberg/gotenberg:8.36.087c16b9f3642
glibc@2.41-12+deb13u3
no fix listed
2
gotenberg/gotenberg:8:8.37.0f29984bd1e22
glibc@2.41-12+deb13u3
no fix listed
2

syft 1.42.1 · advisories as of 21 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.