StackRadar

CVE-2026-18374

Medium

Advisory

Published 27 Aug 2026In the index since 5 Sept 2026
Severity
Medium
worst across findings
CVSS
4.9
base score, highest
EPSS
0.002
5th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
2,695
of 17,797 indexed, latest versions
Container images
2,729
deployed by those charts
Fix available
2 of 5
affected packages

CVE-2026-18374 affecting package glibc 2.38-21

Carried by container images the latest versions of 2,695 of 17,797 indexed charts deploy, on 2,729 images.

Affected packageAffected versionsFixed inImages
glibcdeb2.23-0ubuntu5, 2.23-0ubuntu7, 2.23-0ubuntu9, 2.23-0ubuntu10+66 more2.41-12+deb13u3+e72,618
eglibcdeb2.19-0ubuntu6.3, 2.19-0ubuntu6.6, 2.19-0ubuntu6.13, 2.19-0ubuntu6.14+1 moreno fix listed7
glibc-2.44apk2.44-r1, 2.44-r4, 2.44-r52.44-r676
glibcrpm2.38-16.azl3, 2.38-18.azl3, 2.38-20.azl3no fix listed23
glibc-2.43apk2.43-r14no fix listed5
OSV records
DEBIAN-CVE-2026-18374UBUNTU-CVE-2026-18374AZL-98042CGA-27g8-4xhq-hhr3CGA-2w63-hvq4-f4pcECHO-9169-1fd9-0c1c
Also known as
CGA-2r7g-4qmv-r3hh, CGA-3qmp-39qm-cjf8, CGA-3xw7-x4r7-x678, CGA-5g65-xm2q-rjhf, CGA-5wh2-vg99-j76x, CGA-63j2-v7q6-8x84, CGA-6rf5-rrq5-7pff, CGA-772j-3386-6g56, CGA-79v3-g2j9-ffq2, CGA-8hxc-pvg5-xr9j, CGA-c62g-2q4h-pjjg, CGA-f52m-j726-w2p6, CGA-h33h-m88h-4gc6, CGA-m923-g68q-v4rq, CGA-m9qj-fr43-382g, CGA-mm85-9c9x-q266, CGA-rh5w-p243-vcf7, CGA-v3jf-jvqj-vgxj, CGA-x2q5-w2xg-rgqc, CGA-x3rq-r7j3-jgpx

Charts affected

2,695 by stars
ChartLatestAffected imagesRadar Score
antigenic-stalwart-helm-chartantigenic-stalwart-helm-chartVerified publisher1.0.51 of 2See more

antigenic-stalwart-helm-chart antigenic-stalwart-helm-chart 1.0.5

1 of the 2 container images this version deploys carry CVE-2026-18374.

Container imageDigestPackageFixed in
stalwartlabs/stalwart:v0.15.5dcf575db2d53
glibc@2.41-12+deb13u1
no fix listed

Open the chart page →

1,462
antmediaantmediaVerified publisher3.1.01 of 4See more

antmedia antmedia 3.1.0

1 of the 4 container images this version deploys carry CVE-2026-18374.

Container imageDigestPackageFixed in
library/mongo:8.002a0cc7939f5
glibc@2.39-0ubuntu8.8
no fix listed

Open the chart page →

4,631
antrea-uiantreaVerified publisher0.8.01 of 2See more

antrea-ui antrea 0.8.0

1 of the 2 container images this version deploys carry CVE-2026-18374.

Container imageDigestPackageFixed in
antrea/antrea-ui-frontend:v0.8.0ee9686bcefb8
glibc@2.41-12+deb13u2
no fix listed

Open the chart page →

3,275
flow-aggregatorantreaVerified publisher2.7.01 of 1See more

flow-aggregator antrea 2.7.0

1 of the 1 container images this version deploys carry CVE-2026-18374.

Container imageDigestPackageFixed in
antrea/flow-aggregator:v2.7.0065193e7572f
glibc@2.39-0ubuntu8.8
no fix listed

Open the chart page →

774
glauthanza-labsVerified publisher1.0.11 of 1See more

glauth anza-labs 1.0.1

1 of the 1 container images this version deploys carry CVE-2026-18374.

Container imageDigestPackageFixed in
ghcr.io/glauth/glauth:v2.5.209c782ca5984
glibc@2.41-12+deb13u3
no fix listed

Open the chart page →

1,309
apispringbootHelmapispringboot0.1.01 of 1See more

apispringbootHelm apispringboot 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-18374.

Container imageDigestPackageFixed in
rabeh/apibootspring:1.0941007b6946e
glibc@2.35-0ubuntu3.4
no fix listed

Open the chart page →

6,302
d.vazquezm.2021_helmapphelmVerified publisher1.0.01 of 6See more

d.vazquezm.2021_helm apphelm 1.0.0

1 of the 6 container images this version deploys carry CVE-2026-18374.

Container imageDigestPackageFixed in
library/mongo:5.0.6-focal8e70544b6c76
glibc@2.31-0ubuntu9.7
no fix listed

Open the chart page →

19,799
accounts-uiappscodeVerified publisher2026.9.111 of 1See more

accounts-ui appscode 2026.9.11

1 of the 1 container images this version deploys carry CVE-2026-18374.

Container imageDigestPackageFixed in
ghcr.io/appscode/b3:v2026.9.1176d28575b71c
glibc@2.36-9+deb12u14
no fix listed

Open the chart page →

2,660
aceappscodeVerified publisher2026.9.111 of 2See more

ace appscode 2026.9.11

1 of the 2 container images this version deploys carry CVE-2026-18374.

Container imageDigestPackageFixed in
ghcr.io/appscode/b3:v2026.9.1176d28575b71c
glibc@2.36-9+deb12u14
no fix listed

Open the chart page →

2,962
ace-installerappscodeVerified publisher2026.9.111 of 2See more

ace-installer appscode 2026.9.11

1 of the 2 container images this version deploys carry CVE-2026-18374.

Container imageDigestPackageFixed in
ghcr.io/appscode/b3:v2026.9.1176d28575b71c
glibc@2.36-9+deb12u14
no fix listed

Open the chart page →

3,301
ace-installer-certifiedappscodeVerified publisher2026.9.111 of 2See more

ace-installer-certified appscode 2026.9.11

1 of the 2 container images this version deploys carry CVE-2026-18374.

Container imageDigestPackageFixed in
ghcr.io/appscode/b3:v2026.9.1176d28575b71c
glibc@2.36-9+deb12u14
no fix listed

Open the chart page →

3,301
billingappscodeVerified publisher2026.9.111 of 1See more

billing appscode 2026.9.11

1 of the 1 container images this version deploys carry CVE-2026-18374.

Container imageDigestPackageFixed in
ghcr.io/appscode/b3:v2026.9.1176d28575b71c
glibc@2.36-9+deb12u14
no fix listed

Open the chart page →

2,660
crd-managerappscodeVerified publisher2026.7.211 of 1See more

crd-manager appscode 2026.7.21

1 of the 1 container images this version deploys carry CVE-2026-18374.

Container imageDigestPackageFixed in
ghcr.io/voyagermesh/crd-manager:v0.3.0e67f14e5c853
glibc@2.36-9+deb12u14
no fix listed

Open the chart page →

797
inbox-serverappscodeVerified publisher2025.12.251 of 1See more

inbox-server appscode 2025.12.25

1 of the 1 container images this version deploys carry CVE-2026-18374.

Container imageDigestPackageFixed in
ghcr.io/appscode/inbox-server:postgres-latest536358d7b17e
glibc@2.35-0ubuntu3.11
no fix listed

Open the chart page →

4,013
inbox-server-distributedappscodeVerified publisher2025.12.253 of 4See more

inbox-server-distributed appscode 2025.12.25

3 of the 4 container images this version deploys carry CVE-2026-18374.

Container imageDigestPackageFixed in
library/cassandra:4.1.37cbcec0086ac
glibc@2.35-0ubuntu3.6
no fix listed
library/rabbitmq:3.12.1-managementf020c06da226
glibc@2.35-0ubuntu3.1
no fix listed
ghcr.io/appscode/inbox-server:latest536358d7b17e
glibc@2.35-0ubuntu3.11
no fix listed

Open the chart page →

15,764
james-komposeappscodeVerified publisher0.1.03 of 4See more

james-kompose appscode 0.1.0

3 of the 4 container images this version deploys carry CVE-2026-18374.

Container imageDigestPackageFixed in
library/cassandra:4.1.37cbcec0086ac
glibc@2.35-0ubuntu3.6
no fix listed
library/rabbitmq:3.12.1-managementf020c06da226
glibc@2.35-0ubuntu3.1
no fix listed
ghcr.io/appscode/inbox-server:MailetGroup4a2824296412
glibc@2.35-0ubuntu3.6
no fix listed

Open the chart page →

17,169
kubedb-autoscalerappscodeVerified publisher0.51.01 of 1See more

kubedb-autoscaler appscode 0.51.0

1 of the 1 container images this version deploys carry CVE-2026-18374.

Container imageDigestPackageFixed in
ghcr.io/kubedb/kubedb-autoscaler:v0.51.05d1182ac21f0
glibc@2.36-9+deb12u14
no fix listed

Open the chart page →

526
kubedb-certifiedappscodeVerified publisher2026.7.105 of 8See more

kubedb-certified appscode 2026.7.10

5 of the 8 container images this version deploys carry CVE-2026-18374.

Container imageDigestPackageFixed in
ghcr.io/kubedb/kubedb-autoscaler:v0.51.05d1182ac21f0
glibc@2.36-9+deb12u14
no fix listed
ghcr.io/kubedb/kubedb-crd-manager:v0.21.09506a6cb98d1
glibc@2.36-9+deb12u14
no fix listed
ghcr.io/kubedb/kubedb-ops-manager:v0.53.06d4c9fe66e4f
glibc@2.36-9+deb12u14
no fix listed
ghcr.io/kubedb/kubedb-provisioner:v0.66.0824d6d78d451
glibc@2.36-9+deb12u14
no fix listed
ghcr.io/kubedb/kubedb-webhook-server:v0.42.0f7dcade6523b
glibc@2.36-9+deb12u14
no fix listed

Open the chart page →

4,180
kubedb-crd-managerappscodeVerified publisher0.21.01 of 1See more

kubedb-crd-manager appscode 0.21.0

1 of the 1 container images this version deploys carry CVE-2026-18374.

Container imageDigestPackageFixed in
ghcr.io/kubedb/kubedb-crd-manager:v0.21.09506a6cb98d1
glibc@2.36-9+deb12u14
no fix listed

Open the chart page →

510
kubedb-gitopsappscodeVerified publisher0.14.01 of 1See more

kubedb-gitops appscode 0.14.0

1 of the 1 container images this version deploys carry CVE-2026-18374.

Container imageDigestPackageFixed in
ghcr.io/kubedb/kubedb-gitops:v0.14.0c743f8d7a199
glibc@2.36-9+deb12u14
no fix listed

Open the chart page →

474
kubedb-oneappscodeVerified publisher2023.12.281 of 10See more

kubedb-one appscode 2023.12.28

1 of the 10 container images this version deploys carry CVE-2026-18374.

Container imageDigestPackageFixed in
ghcr.io/kubedb/kubedb-autoscaler:v0.25.0df6b11907d33
glibc@2.36-9+deb12u3
no fix listed

Open the chart page →

15,273
kubedb-ops-managerappscodeVerified publisher0.53.01 of 1See more

kubedb-ops-manager appscode 0.53.0

1 of the 1 container images this version deploys carry CVE-2026-18374.

Container imageDigestPackageFixed in
ghcr.io/kubedb/kubedb-ops-manager:v0.53.06d4c9fe66e4f
glibc@2.36-9+deb12u14
no fix listed

Open the chart page →

579
kubedb-webhook-serverappscodeVerified publisher0.42.01 of 1See more

kubedb-webhook-server appscode 0.42.0

1 of the 1 container images this version deploys carry CVE-2026-18374.

Container imageDigestPackageFixed in
ghcr.io/kubedb/kubedb-webhook-server:v0.42.0f7dcade6523b
glibc@2.36-9+deb12u14
no fix listed

Open the chart page →

483
kubevaultappscodeVerified publisher2026.8.71 of 2See more

kubevault appscode 2026.8.7

1 of the 2 container images this version deploys carry CVE-2026-18374.

Container imageDigestPackageFixed in
ghcr.io/kubevault/vault-operator:v0.25.0c8e042b5cee8
glibc@2.36-9+deb12u14
no fix listed

Open the chart page →

813
kubevault-certifiedappscodeVerified publisher2026.2.271 of 1See more

kubevault-certified appscode 2026.2.27

1 of the 1 container images this version deploys carry CVE-2026-18374.

Container imageDigestPackageFixed in
ghcr.io/kubevault/vault-operator:v0.24.00087cb49616f
glibc@2.36-9+deb12u13
no fix listed

Open the chart page →

1,136
kubevault-operatorappscodeVerified publisher0.25.01 of 1See more

kubevault-operator appscode 0.25.0

1 of the 1 container images this version deploys carry CVE-2026-18374.

Container imageDigestPackageFixed in
ghcr.io/kubevault/vault-operator:v0.25.0c8e042b5cee8
glibc@2.36-9+deb12u14
no fix listed

Open the chart page →

511
kubevault-webhook-serverappscodeVerified publisher0.25.01 of 2See more

kubevault-webhook-server appscode 0.25.0

1 of the 2 container images this version deploys carry CVE-2026-18374.

Container imageDigestPackageFixed in
ghcr.io/kubevault/vault-operator:v0.25.0c8e042b5cee8
glibc@2.36-9+deb12u14
no fix listed

Open the chart page →

813
marketplace-apiappscodeVerified publisher2026.9.111 of 1See more

marketplace-api appscode 2026.9.11

1 of the 1 container images this version deploys carry CVE-2026-18374.

Container imageDigestPackageFixed in
ghcr.io/appscode/b3:v2026.9.1176d28575b71c
glibc@2.36-9+deb12u14
no fix listed

Open the chart page →

2,660
platform-apiappscodeVerified publisher2026.9.112 of 3See more

platform-api appscode 2026.9.11

2 of the 3 container images this version deploys carry CVE-2026-18374.

Container imageDigestPackageFixed in
ghcr.io/appscode/b3:v2026.9.1176d28575b71c
glibc@2.36-9+deb12u14
no fix listed
ghcr.io/appscode/gotenberg:8.25f9104080d9a7
glibc@2.41-12
no fix listed

Open the chart page →

37,732
s3proxyappscodeVerified publisher2026.9.111 of 1See more

s3proxy appscode 2026.9.11

1 of the 1 container images this version deploys carry CVE-2026-18374.

Container imageDigestPackageFixed in
ghcr.io/appscode/s3proxy:sha-a82ca6820518335f9f9
glibc@2.35-0ubuntu3.8
no fix listed

Open the chart page →

3,322
service-gatewayappscodeVerified publisher2026.9.112 of 3See more

service-gateway appscode 2026.9.11

2 of the 3 container images this version deploys carry CVE-2026-18374.

Container imageDigestPackageFixed in
ghcr.io/voyagermesh/crd-manager:v0.3.0e67f14e5c853
glibc@2.36-9+deb12u14
no fix listed
ghcr.io/voyagermesh/gateway:v1.8.24237fd16a3cb
glibc@2.41-12+deb13u3
no fix listed

Open the chart page →

2,169
voyager-gatewayappscodeVerified publisher2026.7.212 of 2See more

voyager-gateway appscode 2026.7.21

2 of the 2 container images this version deploys carry CVE-2026-18374.

Container imageDigestPackageFixed in
ghcr.io/voyagermesh/crd-manager:v0.3.0e67f14e5c853
glibc@2.36-9+deb12u14
no fix listed
ghcr.io/voyagermesh/gateway:v1.8.24237fd16a3cb
glibc@2.41-12+deb13u3
no fix listed

Open the chart page →

1,345
haproxyappuio2.7.21 of 1See more

haproxy appuio 2.7.2

1 of the 1 container images this version deploys carry CVE-2026-18374.

Container imageDigestPackageFixed in
ghcr.io/vshn/haproxy-with-mysql:1.0.0a3c27ee3fb2f
glibc@2.36-9+deb12u1
no fix listed

Open the chart page →

5,685
chart-app-vidapp-vid-chartVerified publisher0.0.71 of 2See more

chart-app-vid app-vid-chart 0.0.7

1 of the 2 container images this version deploys carry CVE-2026-18374.

Container imageDigestPackageFixed in
library/mongo:latest5211c51171f5
glibc@2.39-0ubuntu8.8
no fix listed

Open the chart page →

8,924
dokuwikiarea-42Verified publisher0.1.81 of 1See more

dokuwiki area-42 0.1.8

1 of the 1 container images this version deploys carry CVE-2026-18374.

Container imageDigestPackageFixed in
dokuwiki/dokuwiki:2025-05-14af08ecfdda239
glibc@2.41-12
no fix listed

Open the chart page →

7,586
argocdargo-helm-charts1.0.01 of 3See more

argocd argo-helm-charts 1.0.0

1 of the 3 container images this version deploys carry CVE-2026-18374.

Container imageDigestPackageFixed in
quay.io/argoproj/argocd:v2.14.115fc69e31c755
glibc@2.39-0ubuntu8.4
no fix listed

Open the chart page →

7,369
arlas-aiasarlas-stackVerified publisher28.8.012 of 22See more

arlas-aias arlas-stack 28.8.0

12 of the 22 container images this version deploys carry CVE-2026-18374.

Container imageDigestPackageFixed in
bitnamilegacy/elasticsearch:9.0.1-debian-12-r0e6f6ddcce2f1
glibc@2.36-9+deb12u10
no fix listed
bitnamilegacy/keycloak:26.3.3-debian-12-r0da3df0976a9f
glibc@2.36-9+deb12u10
no fix listed
bitnamilegacy/minio:2024.12.18-debian-12-r1c0ede65eb88e
glibc@2.36-9+deb12u9
no fix listed
bitnamilegacy/minio:2025.4.22-debian-12-r1d7cd0e172c4c
glibc@2.36-9+deb12u10
no fix listed
bitnamilegacy/os-shell:12-debian-12-r439ba5d16f9c64
glibc@2.36-9+deb12u10
no fix listed
bitnamilegacy/postgresql:17.6.0-debian-12-r0de520acd66fc
glibc@2.36-9+deb12u10
no fix listed
bitnamilegacy/rabbitmq:4.1.2-debian-12-r074a3d7c747eb
glibc@2.36-9+deb12u10
no fix listed
bitnamilegacy/redis:8.0.3-debian-12-r1189aae381e7f
glibc@2.36-9+deb12u10
no fix listed
gisaia/arlas-permissions-server:28.0.0e612fc722e02
glibc@2.41-12+deb13u2
no fix listed
gisaia/arlas-persistence-server:28.0.0f667e0ee79be
glibc@2.41-12+deb13u2
no fix listed
gisaia/arlas-server:28.0.04e693e7b6f37
glibc@2.41-12+deb13u2
no fix listed
ghcr.io/developmentseed/titiler:0.22.48ac53eb38393
glibc@2.36-9+deb12u10
no fix listed

Open the chart page →

40,651
arlas-servicesarlas-stackVerified publisher28.8.03 of 3See more

arlas-services arlas-stack 28.8.0

3 of the 3 container images this version deploys carry CVE-2026-18374.

Container imageDigestPackageFixed in
gisaia/arlas-permissions-server:28.0.0e612fc722e02
glibc@2.41-12+deb13u2
no fix listed
gisaia/arlas-persistence-server:28.0.0f667e0ee79be
glibc@2.41-12+deb13u2
no fix listed
gisaia/arlas-server:28.0.04e693e7b6f37
glibc@2.41-12+deb13u2
no fix listed

Open the chart page →

1,603
titilerarlas-stackVerified publisher28.8.01 of 1See more

titiler arlas-stack 28.8.0

1 of the 1 container images this version deploys carry CVE-2026-18374.

Container imageDigestPackageFixed in
ghcr.io/developmentseed/titiler:latest0f31f8b0441b
glibc@2.41-12+deb13u3
no fix listed

Open the chart page →

1,467
arma-reforgerarma-reforger0.5.31 of 8See more

arma-reforger arma-reforger 0.5.3

1 of the 8 container images this version deploys carry CVE-2026-18374.

Container imageDigestPackageFixed in
ghcr.io/brittonhayes/arma-reforger:latest6fde1edc0983
glibc@2.31-0ubuntu9.9
no fix listed

Open the chart page →

23,435
bind9artem-shestakov1.0.11 of 1See more

bind9 artem-shestakov 1.0.1

1 of the 1 container images this version deploys carry CVE-2026-18374.

Container imageDigestPackageFixed in
ubuntu/bind9:9.16-20.04_beta5ee73f44e5d0
glibc@2.31-0ubuntu9.17
no fix listed

Open the chart page →

3,579
keystonearzu0.2.293 of 4See more

keystone arzu 0.2.29

3 of the 4 container images this version deploys carry CVE-2026-18374.

Container imageDigestPackageFixed in
library/rabbitmq:3.7-managementb6dd45cc35b3
glibc@2.27-3ubuntu1.2
no fix listed
openstackhelm/heat:wallaby-ubuntu_focalf728510bab3c
glibc@2.31-0ubuntu9.12
no fix listed
openstackhelm/keystone:wallaby-ubuntu_focale07d75953d2e
glibc@2.31-0ubuntu9.12
no fix listed

Open the chart page →

22,725
assemblylineassemblylineVerified publisher7.4.205 of 12See more

assemblyline assemblyline 7.4.20

5 of the 12 container images this version deploys carry CVE-2026-18374.

Container imageDigestPackageFixed in
cccs/assemblyline-core:4.7.4.stable20098127270065
glibc@2.36-9+deb12u14
no fix listed
cccs/assemblyline-rust:4.7.4.stable202be5e6a57427
glibc@2.36-9+deb12u14
no fix listed
cccs/assemblyline-socketio:4.7.4.stable202b88493b62f7
glibc@2.36-9+deb12u14
no fix listed
cccs/assemblyline-ui:4.7.4.stable20efa75509b854
glibc@2.36-9+deb12u14
no fix listed
library/redis:latest298e5b3bc566
glibc@2.41-12+deb13u3
no fix listed

Open the chart page →

12,667
dltkvassist-iot-data-integrity-verification0.2.03 of 9See more

dltkv assist-iot-data-integrity-verification 0.2.0

3 of the 9 container images this version deploys carry CVE-2026-18374.

Container imageDigestPackageFixed in
hyperledger/fabric-ca:latesta70b6ba64a08
glibc@2.35-0ubuntu3.13
no fix listed
hyperledger/fabric-ca-tools:latest4ce6f43ded2e
glibc@2.23-0ubuntu10
no fix listed
hyperledger/fabric-couchdb:0.4.15f6c724592abf
glibc@2.23-0ubuntu11
no fix listed

Open the chart page →

78,035
dltflassist-iot-dlt-based-fl0.2.03 of 9See more

dltfl assist-iot-dlt-based-fl 0.2.0

3 of the 9 container images this version deploys carry CVE-2026-18374.

Container imageDigestPackageFixed in
hyperledger/fabric-ca:latesta70b6ba64a08
glibc@2.35-0ubuntu3.13
no fix listed
hyperledger/fabric-ca-tools:latest4ce6f43ded2e
glibc@2.23-0ubuntu10
no fix listed
hyperledger/fabric-couchdb:0.4.15f6c724592abf
glibc@2.23-0ubuntu11
no fix listed

Open the chart page →

78,035
fl-orchestrator-guiassist-iot-fl-orchestrator0.1.01 of 3See more

fl-orchestrator-gui assist-iot-fl-orchestrator 0.1.0

1 of the 3 container images this version deploys carry CVE-2026-18374.

Container imageDigestPackageFixed in
assistiot/fl_orchestrator:dbmongo4-latestd157fbe150e3
glibc@2.31-0ubuntu9.9
no fix listed

Open the chart page →

9,422
idmassist-iot-identity-manager0.1.01 of 2See more

idm assist-iot-identity-manager 0.1.0

1 of the 2 container images this version deploys carry CVE-2026-18374.

Container imageDigestPackageFixed in
assistiot/identity-manager_db:latest0d3e6d35f168
glibc@2.36-9+deb12u3
no fix listed

Open the chart page →

13,389
locationprocessingassist-iot-location-processing1.0.01 of 3See more

locationprocessing assist-iot-location-processing 1.0.0

1 of the 3 container images this version deploys carry CVE-2026-18374.

Container imageDigestPackageFixed in
assistiot/location_processing:lateste9bae124095f
glibc@2.35-0ubuntu3.1
no fix listed

Open the chart page →

10,173
openapiassist-iot-open-api-management0.2.21 of 6See more

openapi assist-iot-open-api-management 0.2.2

1 of the 6 container images this version deploys carry CVE-2026-18374.

Container imageDigestPackageFixed in
assistiot/open_api_backend:1.1.230812ba93555
glibc@2.35-0ubuntu3.5
no fix listed

Open the chart page →

18,426
resource-provisioningassist-iot-resource-provisioning1.0.01 of 7See more

resource-provisioning assist-iot-resource-provisioning 1.0.0

1 of the 7 container images this version deploys carry CVE-2026-18374.

Container imageDigestPackageFixed in
library/buildpack-deps:curl04907bdd423b
glibc@2.41-12+deb13u3
no fix listed

Open the chart page →

8,052

Container images carrying it

2,729 by charts deploying them

A fixed version is listed for 2 of the 5 affected packages.

Container imageDigestPackageFixed inUsed by
ghcr.io/graphprotocol/availability-oracle:sha-28312fd472a25038957
glibc@2.36-9+deb12u7
no fix listed
1
ghcr.io/gregperlinli/certvault:2.12.0a7d0cc9e260a
glibc@2.39-0ubuntu8.7
no fix listed
1
ghcr.io/grycap/im:latest06a16d4f279f
glibc@2.39-0ubuntu8.5
no fix listed
1
ghcr.io/haveagitgat/tdarr:2.00.18.23fbe4c29d14c
glibc@2.31-0ubuntu9.7
no fix listed
1
ghcr.io/hemslo/chat-search:latest39d48995a5bd
glibc@2.36-9+deb12u7
no fix listed
1
ghcr.io/home-operations/plex:1.43.1a9c3723cb31c
glibc@2.39-0ubuntu8.7
no fix listed
1
ghcr.io/htunn/ansible-inspec:0.2.12cd25a5cc3f1b
glibc@2.41-12+deb13u1
no fix listed
1
ghcr.io/huggingface/text-embeddings-inference:cpu-1.666db77d7856c
glibc@2.36-9+deb12u10
no fix listed
1
ghcr.io/huggingface/text-embeddings-inference:cpu-1.9.3ad950d30878e
glibc@2.36-9+deb12u13
no fix listed
1
ghcr.io/huscker/townsquare-backend:2.15.2e106681e7673
glibc@2.36-9+deb12u13
no fix listed
1
ghcr.io/hypolia/kanri:0.1.2-rc4fa7d5cc7fb7d
glibc@2.36-9+deb12u9
no fix listed
1
ghcr.io/icegatetech/icegate-ingest:0.1.1bae3c441894a
glibc@2.36-9+deb12u13
no fix listed
1
ghcr.io/icegatetech/icegate-maintain:0.1.193e85b2b76ee
glibc@2.36-9+deb12u13
no fix listed
1
ghcr.io/icegatetech/icegate-query:0.1.17542b4e7fff2
glibc@2.36-9+deb12u13
no fix listed
1
ghcr.io/icoretech/codex-pooler:0.7.81bebc7e4a770
glibc@2.41-12+deb13u3
no fix listed
1
ghcr.io/ignisda/ryot:v10.5.0a752b6aee537
glibc@2.36-9+deb12u14
no fix listed
1
ghcr.io/iisas/domino-frontend:k8s8e53861be292
glibc@2.36-9+deb12u13
no fix listed
1
ghcr.io/iisas/domino-rest:latest3009350bfc11
glibc@2.41-12+deb13u1
no fix listed
1
ghcr.io/imgproxy/imgproxy:v3.30.074c1bee92e04
glibc@2.39-0ubuntu8.5
no fix listed
1
ghcr.io/immich-app/immich-machine-learning:v2.3.1379e31b8c751
glibc@2.36-9+deb12u13
no fix listed
1
ghcr.io/immich-app/immich-machine-learning:v3.1.05a0839dc5303
glibc@2.36-9+deb12u14
no fix listed
1
ghcr.io/immich-app/immich-server:v3.2.279cc1623323d
glibc@2.41-12+deb13u3
no fix listed
1
ghcr.io/immich-app/immich-server:v3.1.0b434cb9287ee
glibc@2.41-12+deb13u2
no fix listed
1
ghcr.io/immich-app/immich-server:v2.3.1f8d06a32b1b2
glibc@2.41-12
no fix listed
1
ghcr.io/interlink-hq/interlink/virtual-kubelet-inttw:latest0e05a7b49c33
glibc@2.35-0ubuntu3.14
no fix listed
1
ghcr.io/invergent-ai/surogate-hub:latest6d4106724d56
glibc@2.36-9+deb12u13
no fix listed
1
ghcr.io/it-at-m/appswitcher-server:1.3.010006bc0f309
glibc@2.35-0ubuntu3.9
no fix listed
1
ghcr.io/itobey/playlist-mirror:1.0.0601082677a46
glibc@2.41-12+deb13u3
no fix listed
1
ghcr.io/itzg/minecraft-server:latest46919d151d39
glibc@2.39-0ubuntu8.8
no fix listed
1
ghcr.io/jaydee94/kubeseal-webgui/api:4.5.33cceb9462ae1
glibc@2.36-9+deb12u10
no fix listed
1
ghcr.io/jellyfin/jellyfin:10.11.1145f648c382a0
glibc@2.41-12+deb13u3
no fix listed
1
ghcr.io/jensholdgaard/ourios:latest3d87d932391d
glibc@2.36-9+deb12u14
no fix listed
1
ghcr.io/jeremylvln/shulker-operator:0.13.027c55706c126
glibc@2.36-9+deb12u10
no fix listed
1
ghcr.io/jespernohr/dayz-dedicated-server:0.1.1ec01d3ac7887
glibc@2.39-0ubuntu8.3
no fix listed
1
ghcr.io/jfwenisch/discord-experiencebot:latestb52ff07f9f0c
glibc@2.27-3ubuntu1.6
no fix listed
1
ghcr.io/jfwenisch/steamcmd-manager:v0.4.5dab685e668d9
glibc@2.39-0ubuntu8.3
no fix listed
1
ghcr.io/jfwenisch/webtools:v0.1.44569cae83c70
glibc@2.39-0ubuntu8.3
no fix listed
1
ghcr.io/jlclx/runtimeclass-controller:latestb3a87f92a963
glibc@2.36-9+deb12u8
no fix listed
1
ghcr.io/jmberesford/retrom-service:retrom-v0.7.144d763d58f11d
glibc@2.36-9+deb12u9
no fix listed
1
ghcr.io/jossware/node-provider-labeler:v0.8.0f80e85291439
glibc@2.36-9+deb12u7
no fix listed
1
ghcr.io/jr0dd/puppeteer:v13.3.26047599cd78e
glibc@2.31-0ubuntu9.2
no fix listed
1
ghcr.io/juanfont/headscale:0.29.3-debug842cd94b754b
glibc@2.41-12+deb13u3
no fix listed
1
ghcr.io/juanfont/headscale:0.29.18453e47ea6bf
glibc@2.41-12+deb13u3
no fix listed
1
ghcr.io/juanfont/headscale:v0.25.097febecbe6cb
glibc@2.36-9+deb12u9
no fix listed
1
ghcr.io/juicerescue/juicepassproxy:0.5.1984dc4f19162
glibc@2.36-9+deb12u9
no fix listed
1
ghcr.io/justarchinet/archisteamfarm:6.3.10.107286b8b41a1
glibc@2.39-0ubuntu8.9
no fix listed
1
ghcr.io/k8s-at-home/apache-musicindex:v1.4.1-2c9bd82dc5fda
glibc@2.31-0ubuntu9.9
no fix listed
1
ghcr.io/k8s-at-home/bazarr:v1.0.3fdb5501cdfb9
glibc@2.31-0ubuntu9.2
no fix listed
1
ghcr.io/k8s-at-home/emby:v4.6.1.05c6b8f91f1c4
glibc@2.31-0ubuntu9.2
no fix listed
1
ghcr.io/k8s-at-home/haste-server:latest827aa2f2389d
glibc@2.31-0ubuntu9.2
no fix listed
1

syft 1.42.1 · advisories as of 17 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.