StackRadar

CVE-2026-18374

Medium

Advisory

Published 27 Aug 2026In the index since 5 Sept 2026
Severity
Medium
worst across findings
CVSS
4.9
base score, highest
EPSS
0.002
5th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
2,759
of 17,828 indexed, latest versions
Container images
2,808
deployed by those charts
Fix available
2 of 5
affected packages

CVE-2026-18374 affecting package glibc 2.38-21

Carried by container images the latest versions of 2,759 of 17,828 indexed charts deploy, on 2,808 images.

Affected packageAffected versionsFixed inImages
glibcdeb2.23-0ubuntu5, 2.23-0ubuntu7, 2.23-0ubuntu9, 2.23-0ubuntu10+66 more2.41-12+deb13u3+e72,753
eglibcdeb2.19-0ubuntu6.3, 2.19-0ubuntu6.6, 2.19-0ubuntu6.13, 2.19-0ubuntu6.14+1 moreno fix listed7
glibc-2.44apk2.44-r1, 2.44-r4, 2.44-r52.44-r634
glibcrpm2.38-16.azl3, 2.38-18.azl3, 2.38-20.azl3no fix listed13
glibc-2.43apk2.43-r14no fix listed1
OSV records
DEBIAN-CVE-2026-18374UBUNTU-CVE-2026-18374AZL-98042CGA-27g8-4xhq-hhr3CGA-2w63-hvq4-f4pcECHO-9169-1fd9-0c1c
Also known as
CGA-3qmp-39qm-cjf8, CGA-3xw7-x4r7-x678, CGA-5g65-xm2q-rjhf, CGA-5wh2-vg99-j76x, CGA-63j2-v7q6-8x84, CGA-6rf5-rrq5-7pff, CGA-772j-3386-6g56, CGA-79v3-g2j9-ffq2, CGA-8hxc-pvg5-xr9j, CGA-c62g-2q4h-pjjg, CGA-f52m-j726-w2p6, CGA-h33h-m88h-4gc6, CGA-m923-g68q-v4rq, CGA-m9qj-fr43-382g, CGA-mm85-9c9x-q266, CGA-v3jf-jvqj-vgxj, CGA-x2q5-w2xg-rgqc, CGA-x3rq-r7j3-jgpx

Charts affected

2,759 by stars
ChartLatestAffected imagesRadar Score
pagesdaman-dell-kuber1.0.02 of 3See more

pages daman-dell-kuber 1.0.0

2 of the 3 container images this version deploys carry CVE-2026-18374.

Container imageDigestPackageFixed in
dellcloud/pages:monitor6ba7b22caacd
glibc@2.31-0ubuntu9.1
no fix listed
flyway/flyway:6.4.422d97ceb0c47
glibc@2.27-3ubuntu1
no fix listed

Open the chart page →

20,350
damap-chartdamapVerified publisher0.3.04 of 5See more

damap-chart damap 0.3.0

4 of the 5 container images this version deploys carry CVE-2026-18374.

Container imageDigestPackageFixed in
gotenberg/gotenberg:8f29984bd1e22
glibc@2.41-12+deb13u3
no fix listed
library/postgres:16f1c3376c26f2
glibc@2.41-12+deb13u3
no fix listed
ghcr.io/damap-org/damap-backend:5.0.0f3d0c7d35498
glibc@2.39-0ubuntu8.7
no fix listed
ghcr.io/damap-org/damap-frontend:5.0.1609f48af4efc
glibc@2.41-12+deb13u3
no fix listed

Open the chart page →

15,014
nvidia-gpu-exporterdanchevVerified publisher1.0.31 of 1See more

nvidia-gpu-exporter danchev 1.0.3

1 of the 1 container images this version deploys carry CVE-2026-18374.

Container imageDigestPackageFixed in
ghcr.io/utkuozdemir/nvidia_gpu_exporter:1.5.0d75967a4dd72
glibc@2.43-2ubuntu2
no fix listed

Open the chart page →

1,281
dapr-agentsdapr-agents-devVerified publisher0.1.52 of 31See more

dapr-agents dapr-agents-dev 0.1.5

2 of the 31 container images this version deploys carry CVE-2026-18374.

Container imageDigestPackageFixed in
library/redis:6.2e7b96daa9a18
glibc@2.36-9+deb12u14
no fix listed
mcp/grafana:latest9362bcf6aa0e
glibc@2.36-9+deb12u14
no fix listed

Open the chart page →

22,637
dara-chartsdara-charts0.1.01 of 2See more

dara-charts dara-charts 0.1.0

1 of the 2 container images this version deploys carry CVE-2026-18374.

Container imageDigestPackageFixed in
library/postgres:16a3b7f434b2dc
glibc@2.41-12+deb13u4
no fix listed

Open the chart page →

3,245
helm-chart-testdasmeta0.1.41 of 1See more

helm-chart-test dasmeta 0.1.4

1 of the 1 container images this version deploys carry CVE-2026-18374.

Container imageDigestPackageFixed in
library/nginx:stable0aa2d81d65bc
glibc@2.41-12+deb13u4
no fix listed

Open the chart page →

1,589
mongodb-bi-connectordasmeta1.0.31 of 1See more

mongodb-bi-connector dasmeta 1.0.3

1 of the 1 container images this version deploys carry CVE-2026-18374.

Container imageDigestPackageFixed in
dasmeta/mongodb-bi-connector:1.0.3fa657960dfec
glibc@2.27-3ubuntu1.6
no fix listed

Open the chart page →

5,884
pgcatdasmeta0.1.31 of 2See more

pgcat dasmeta 0.1.3

1 of the 2 container images this version deploys carry CVE-2026-18374.

Container imageDigestPackageFixed in
ghcr.io/postgresml/pgcat:v1.2.0627761f6dcbc
glibc@2.36-9+deb12u7
no fix listed

Open the chart page →

3,193
proxysqldasmeta1.2.31 of 1See more

proxysql dasmeta 1.2.3

1 of the 1 container images this version deploys carry CVE-2026-18374.

Container imageDigestPackageFixed in
proxysql/proxysql:2.7.3a4d6c35c2949
glibc@2.36-9+deb12u9
no fix listed

Open the chart page →

2,928
redashdasmeta0.1.01 of 1See more

redash dasmeta 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-18374.

Container imageDigestPackageFixed in
redash/redash:26.3.0c5c9148f5c38
glibc@2.36-9+deb12u13
no fix listed

Open the chart page →

5,244
sentry-relaydasmeta0.1.21 of 1See more

sentry-relay dasmeta 0.1.2

1 of the 1 container images this version deploys carry CVE-2026-18374.

Container imageDigestPackageFixed in
getsentry/relay:24.10.0ba7bf9163219
glibc@2.36-9+deb12u8
no fix listed

Open the chart page →

3,622
monitoring-stackdata354-helmVerified publisher1.4.21 of 4See more

monitoring-stack data354-helm 1.4.2

1 of the 4 container images this version deploys carry CVE-2026-18374.

Container imageDigestPackageFixed in
grafana/fluent-plugin-loki:latest4f0438bdebb5
glibc@2.36-9+deb12u10
no fix listed

Open the chart page →

3,046
datacubedatacube-charts0.18.21 of 1See more

datacube datacube-charts 0.18.2

1 of the 1 container images this version deploys carry CVE-2026-18374.

Container imageDigestPackageFixed in
opendatacube/wms:latest1b90cdf68831
glibc@2.27-3ubuntu1
no fix listed

Open the chart page →

95,368
datacube-dashboarddatacube-charts0.5.101 of 2See more

datacube-dashboard datacube-charts 0.5.10

1 of the 2 container images this version deploys carry CVE-2026-18374.

Container imageDigestPackageFixed in
library/postgres:latest86c951e05bf5
glibc@2.41-12+deb13u4
no fix listed

Open the chart page →

1,268
datacube-datadatacube-charts0.2.61 of 1See more

datacube-data datacube-charts 0.2.6

1 of the 1 container images this version deploys carry CVE-2026-18374.

Container imageDigestPackageFixed in
geoscienceaustralia/dea-k8s-data:latestf4039b45572a
glibc@2.27-3ubuntu1.2
no fix listed

Open the chart page →

82,350
datacube-indexdatacube-charts0.4.41 of 2See more

datacube-index datacube-charts 0.4.4

1 of the 2 container images this version deploys carry CVE-2026-18374.

Container imageDigestPackageFixed in
opendatacube/ows:latest668cbb41473c
glibc@2.39-0ubuntu8.3
no fix listed

Open the chart page →

6,259
datacube-owsdatacube-charts0.20.11 of 1See more

datacube-ows datacube-charts 0.20.1

1 of the 1 container images this version deploys carry CVE-2026-18374.

Container imageDigestPackageFixed in
opendatacube/ows:latest668cbb41473c
glibc@2.39-0ubuntu8.3
no fix listed

Open the chart page →

6,110
datacube-processingdatacube-charts0.1.11 of 2See more

datacube-processing datacube-charts 0.1.1

1 of the 2 container images this version deploys carry CVE-2026-18374.

Container imageDigestPackageFixed in
opendatacube/pipelines:wofs-1.225d810e8504b8
glibc@2.27-3ubuntu1
no fix listed

Open the chart page →

90,432
datacube-wpsdatacube-charts0.9.01 of 1See more

datacube-wps datacube-charts 0.9.0

1 of the 1 container images this version deploys carry CVE-2026-18374.

Container imageDigestPackageFixed in
opendatacube/wps:latest80df355a660b
glibc@2.35-0ubuntu3.10
no fix listed

Open the chart page →

6,307
restcubedatacube-charts0.2.91 of 1See more

restcube datacube-charts 0.2.9

1 of the 1 container images this version deploys carry CVE-2026-18374.

Container imageDigestPackageFixed in
opendatacube/restcube:latest91870111837c
glibc@2.27-3ubuntu1
no fix listed

Open the chart page →

91,990
cloudpremdatadogVerified publisher0.5.21 of 1See more

cloudprem datadog 0.5.2

1 of the 1 container images this version deploys carry CVE-2026-18374.

Container imageDigestPackageFixed in
public.ecr.aws/datadog/cloudprem:v0.1.33bda08753668d
glibc@2.39-0ubuntu8.8
no fix listed

Open the chart page →

1,215
observability-pipelines-workerdatadogVerified publisher2.21.21 of 1See more

observability-pipelines-worker datadog 2.21.2

1 of the 1 container images this version deploys carry CVE-2026-18374.

Container imageDigestPackageFixed in
gcr.io/datadoghq/observability-pipelines-worker:2.21.1de6ff0f1a854
glibc@2.39-0ubuntu8.8
no fix listed

Open the chart page →

883
private-action-runnerdatadogVerified publisher1.28.11 of 1See more

private-action-runner datadog 1.28.1

1 of the 1 container images this version deploys carry CVE-2026-18374.

Container imageDigestPackageFixed in
gcr.io/datadoghq/private-action-runner:v1.21.05f5918f843a4
glibc@2.39-0ubuntu8.7
no fix listed

Open the chart page →

2,213
datagrokdatagrok1.0.31 of 7See more

datagrok datagrok 1.0.3

1 of the 7 container images this version deploys carry CVE-2026-18374.

Container imageDigestPackageFixed in
datagrok/grok_connect:latestf5876d3aebb8
glibc@2.35-0ubuntu3.14
no fix listed

Open the chart page →

2,293
datagrok_grok_connectdatagrok1.0.01 of 1See more

datagrok_grok_connect datagrok 1.0.0

1 of the 1 container images this version deploys carry CVE-2026-18374.

Container imageDigestPackageFixed in
datagrok/grok_connect:latestf5876d3aebb8
glibc@2.35-0ubuntu3.14
no fix listed

Open the chart page →

1,710
eg-edge-stackdatawire0.0.11 of 7See more

eg-edge-stack datawire 0.0.1

1 of the 7 container images this version deploys carry CVE-2026-18374.

Container imageDigestPackageFixed in
istio/kubectl:1.5.10dbb7726d1bf0
glibc@2.27-3ubuntu1.2
no fix listed

Open the chart page →

79,480
pagesdavid-pages1.0.02 of 3See more

pages david-pages 1.0.0

2 of the 3 container images this version deploys carry CVE-2026-18374.

Container imageDigestPackageFixed in
dellcloud/pages:monitor6ba7b22caacd
glibc@2.31-0ubuntu9.1
no fix listed
flyway/flyway:6.4.422d97ceb0c47
glibc@2.27-3ubuntu1
no fix listed

Open the chart page →

20,350
db-connection-testdb-connection-testVerified publisher0.1.01 of 1See more

db-connection-test db-connection-test 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-18374.

Container imageDigestPackageFixed in
felipecs8/app-db-connection-test:v129e06c9c6385
glibc@2.36-9+deb12u9
no fix listed

Open the chart page →

10,105
dbgatedbgate-helm-chartVerified publisher0.1.81 of 1See more

dbgate dbgate-helm-chart 0.1.8

1 of the 1 container images this version deploys carry CVE-2026-18374.

Container imageDigestPackageFixed in
dbgate/dbgate:7.2.3f2dc7423ea88
glibc@2.36-9+deb12u14
no fix listed

Open the chart page →

1,444
pagesdebasish-pages1.0.02 of 3See more

pages debasish-pages 1.0.0

2 of the 3 container images this version deploys carry CVE-2026-18374.

Container imageDigestPackageFixed in
dellcloud/pages:monitor6ba7b22caacd
glibc@2.31-0ubuntu9.1
no fix listed
flyway/flyway:6.4.422d97ceb0c47
glibc@2.27-3ubuntu1
no fix listed

Open the chart page →

20,350
decisionrules-ocpdecisionrules-ocpVerified publisher0.1.01 of 4See more

decisionrules-ocp decisionrules-ocp 0.1.0

1 of the 4 container images this version deploys carry CVE-2026-18374.

Container imageDigestPackageFixed in
decisionrules/ai-engine:latest557dea1373aa
glibc@2.41-12+deb13u3
no fix listed

Open the chart page →

1,371
defactopsdefactops1.0.91 of 2See more

defactops defactops 1.0.9

1 of the 2 container images this version deploys carry CVE-2026-18374.

Container imageDigestPackageFixed in
defactops/defactops-backend:1.0.2307b663c0092a
glibc@2.36-9+deb12u7
no fix listed

Open the chart page →

4,576
airtraildefault-ghVerified publisher0.2.21 of 2See more

airtrail default-gh 0.2.2

1 of the 2 container images this version deploys carry CVE-2026-18374.

Container imageDigestPackageFixed in
johly/airtrail:v3.11.19f702b91e0e7
glibc@2.36-9+deb12u14
no fix listed

Open the chart page →

1,526
intel-gpu-exporterdefault-ghVerified publisher0.1.01 of 1See more

intel-gpu-exporter default-gh 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-18374.

Container imageDigestPackageFixed in
andrewgolikov55/intel-gpu-exporter:latestfcc001b61c0e
glibc@2.35-0ubuntu3.4
no fix listed

Open the chart page →

4,919
defguard-gatewaydefguard2.1.01 of 1See more

defguard-gateway defguard 2.1.0

1 of the 1 container images this version deploys carry CVE-2026-18374.

Container imageDigestPackageFixed in
ghcr.io/defguard/gateway:2.1.0738b2b6f413b
glibc@2.41-12+deb13u3
no fix listed

Open the chart page →

997
defguard-proxydefguard2.1.01 of 1See more

defguard-proxy defguard 2.1.0

1 of the 1 container images this version deploys carry CVE-2026-18374.

Container imageDigestPackageFixed in
ghcr.io/defguard/defguard-proxy:2.1.08765a28e383e
glibc@2.41-12+deb13u3
no fix listed

Open the chart page →

858
csi-driver-smbdeimosfr-charts1.20.31 of 5See more

csi-driver-smb deimosfr-charts 1.20.3

1 of the 5 container images this version deploys carry CVE-2026-18374.

Container imageDigestPackageFixed in
registry.k8s.io/sig-storage/smbplugin:v1.20.3dc7746bb081e
glibc@2.36-9+deb12u14
no fix listed

Open the chart page →

3,027
linkdingdeimosfr-charts1.0.31 of 1See more

linkding deimosfr-charts 1.0.3

1 of the 1 container images this version deploys carry CVE-2026-18374.

Container imageDigestPackageFixed in
sissbruecker/linkding:1.35.00c5dddf0b37c
glibc@2.36-9+deb12u8
no fix listed

Open the chart page →

6,214
technitiumdeimosfr-charts15.4.01 of 1See more

technitium deimosfr-charts 15.4.0

1 of the 1 container images this version deploys carry CVE-2026-18374.

Container imageDigestPackageFixed in
technitium/dns-server:15.4.0df7d90ef0f7b
glibc@2.39-0ubuntu8.7
no fix listed

Open the chart page →

1,429
supersetdeliveryheroVerified publisher1.1.31 of 1See more

superset deliveryhero 1.1.3

1 of the 1 container images this version deploys carry CVE-2026-18374.

Container imageDigestPackageFixed in
apache/superset:latest16b50bbef664
glibc@2.36-9+deb12u14
no fix listed

Open the chart page →

2,355
dell-fan-controllerdell-fan-controllerVerified publisher1.0.71 of 1See more

dell-fan-controller dell-fan-controller 1.0.7

1 of the 1 container images this version deploys carry CVE-2026-18374.

Container imageDigestPackageFixed in
ghcr.io/alexmorbo/dell_idrac_fan_controller:v0.1.6-1d110504d551d
glibc@2.39-0ubuntu8.3
no fix listed

Open the chart page →

2,610
my-helm-chartdemohelm20.1.01 of 1See more

my-helm-chart demohelm2 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-18374.

Container imageDigestPackageFixed in
library/nginx:latest05b8cb60c354
glibc@2.41-12+deb13u3
no fix listed

Open the chart page →

1,965
challengedeneme0.1.02 of 2See more

challenge deneme 0.1.0

2 of the 2 container images this version deploys carry CVE-2026-18374.

Container imageDigestPackageFixed in
library/postgres:latest86c951e05bf5
glibc@2.41-12+deb13u4
no fix listed
library/redis:6e7b96daa9a18
glibc@2.36-9+deb12u14
no fix listed

Open the chart page →

2,314
deploy-elibrarydeploy-elibrary-helm0.1.01 of 1See more

deploy-elibrary deploy-elibrary-helm 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-18374.

Container imageDigestPackageFixed in
psorab/elibrary:latest53b68896c4ce
glibc@2.31-0ubuntu9.9
no fix listed

Open the chart page →

7,321
deploy-elibrarydeploy-elibrary-oo0.1.01 of 1See more

deploy-elibrary deploy-elibrary-oo 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-18374.

Container imageDigestPackageFixed in
jedi132000/nextapp:latestdc2a81e92f23
glibc@2.31-0ubuntu9.9
no fix listed

Open the chart page →

8,217
seafilederp3.2.01 of 1See more

seafile derp 3.2.0

1 of the 1 container images this version deploys carry CVE-2026-18374.

Container imageDigestPackageFixed in
seafileltd/seafile-mc:10.0.170628f29c663
glibc@2.31-0ubuntu9.9
no fix listed

Open the chart page →

74,328
apachedevops0.1.02 of 4See more

apache devops 0.1.0

2 of the 4 container images this version deploys carry CVE-2026-18374.

Container imageDigestPackageFixed in
library/mariadb:10.8.30abf60f81588
glibc@2.35-0ubuntu3.1
no fix listed
ghcr.io/codingducksrl/laravel:8.15be52524664c
glibc@2.35-0ubuntu3.1
no fix listed

Open the chart page →

114,508
laraveldevops0.10.32 of 4See more

laravel devops 0.10.3

2 of the 4 container images this version deploys carry CVE-2026-18374.

Container imageDigestPackageFixed in
library/mariadb:10.9.4fbb8456ebdb1
glibc@2.35-0ubuntu3.1
no fix listed
ghcr.io/codingducksrl/laravel:8.15be52524664c
glibc@2.35-0ubuntu3.1
no fix listed

Open the chart page →

113,508
wordpressdevops0.12.01 of 4See more

wordpress devops 0.12.0

1 of the 4 container images this version deploys carry CVE-2026-18374.

Container imageDigestPackageFixed in
library/mariadb:10.8.30abf60f81588
glibc@2.35-0ubuntu3.1
no fix listed

Open the chart page →

13,103
ai-agentdevtron0.0.11 of 1See more

ai-agent devtron 0.0.1

1 of the 1 container images this version deploys carry CVE-2026-18374.

Container imageDigestPackageFixed in
quay.io/devtron/ai-agent:0.0.16545dac92173
glibc@2.36-9+deb12u8
no fix listed

Open the chart page →

9,750

Container images carrying it

2,808 by charts deploying them

A fixed version is listed for 2 of the 5 affected packages.

Container imageDigestPackageFixed inUsed by
registry.k8s.io/git-sync/git-sync:v4.5.00e64aedb0d0a
glibc@2.41-12
no fix listed
1
registry.k8s.io/git-sync/git-sync:v4.1.0fd9722fd02e3
glibc@2.36-9+deb12u3
no fix listed
1
registry.k8s.io/node-problem-detector/node-problem-detector:v0.8.2052f0618e9bc2
glibc@2.36-9+deb12u8
no fix listed
1
registry.k8s.io/node-problem-detector/node-problem-detector:v1.35.1c380751accc5
glibc@2.36-9+deb12u13
no fix listed
1
registry.k8s.io/sig-storage/local-volume-provisioner:v2.8.03e2bf2eaef9f
glibc@2.36-9+deb12u10
no fix listed
1
registry.k8s.io/sig-storage/local-volume-provisioner:v2.9.0f9d65db8bda2
glibc@2.36-9+deb12u14
no fix listed
1
registry.k8s.io/sig-storage/nfsplugin:v4.13.41eb5a85180a4
glibc@2.36-9+deb12u14
no fix listed
1
registry.k8s.io/sig-storage/nfsplugin:v4.11.0ce5b5ccd5eb0
glibc@2.36-9+deb12u10
no fix listed
1

syft 1.42.1 · advisories as of 22 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.