StackRadar

CVE-2026-18374

Medium

Advisory

Published 27 Aug 2026In the index since 5 Sept 2026
Severity
Medium
worst across findings
CVSS
4.9
base score, highest
EPSS
0.002
5th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
2,754
of 17,813 indexed, latest versions
Container images
2,809
deployed by those charts
Fix available
2 of 5
affected packages

CVE-2026-18374 affecting package glibc 2.38-21

Carried by container images the latest versions of 2,754 of 17,813 indexed charts deploy, on 2,809 images.

Affected packageAffected versionsFixed inImages
glibcdeb2.23-0ubuntu5, 2.23-0ubuntu7, 2.23-0ubuntu9, 2.23-0ubuntu10+66 more2.41-12+deb13u3+e72,717
eglibcdeb2.19-0ubuntu6.3, 2.19-0ubuntu6.6, 2.19-0ubuntu6.13, 2.19-0ubuntu6.14+1 moreno fix listed7
glibc-2.44apk2.44-r1, 2.44-r4, 2.44-r52.44-r663
glibcrpm2.38-16.azl3, 2.38-18.azl3, 2.38-20.azl3no fix listed19
glibc-2.43apk2.43-r14no fix listed3
OSV records
DEBIAN-CVE-2026-18374UBUNTU-CVE-2026-18374AZL-98042CGA-27g8-4xhq-hhr3CGA-2w63-hvq4-f4pcECHO-9169-1fd9-0c1c
Also known as
CGA-2r7g-4qmv-r3hh, CGA-3qmp-39qm-cjf8, CGA-3xw7-x4r7-x678, CGA-5g65-xm2q-rjhf, CGA-5wh2-vg99-j76x, CGA-63j2-v7q6-8x84, CGA-6rf5-rrq5-7pff, CGA-772j-3386-6g56, CGA-79v3-g2j9-ffq2, CGA-8hxc-pvg5-xr9j, CGA-c62g-2q4h-pjjg, CGA-f52m-j726-w2p6, CGA-h33h-m88h-4gc6, CGA-m923-g68q-v4rq, CGA-m9qj-fr43-382g, CGA-mm85-9c9x-q266, CGA-rh5w-p243-vcf7, CGA-v3jf-jvqj-vgxj, CGA-x2q5-w2xg-rgqc, CGA-x3rq-r7j3-jgpx

Charts affected

2,754 by stars
ChartLatestAffected imagesRadar Score
wp-chartprojet-devops0.1.01 of 2See more

wp-chart projet-devops 0.1.0

1 of the 2 container images this version deploys carry CVE-2026-18374.

Container imageDigestPackageFixed in
library/wordpress:latest5a93c470ae82
glibc@2.41-12+deb13u3
no fix listed

Open the chart page →

5,429
prometheus-optimizerprometheus-optimizer0.2.221 of 1See more

prometheus-optimizer prometheus-optimizer 0.2.22

1 of the 1 container images this version deploys carry CVE-2026-18374.

Container imageDigestPackageFixed in
ghcr.io/angelscloud/prometheus-optimizer:latest744bc929a579
glibc@2.36-9+deb12u8
no fix listed

Open the chart page →

4,477
prometheus-universal-exporterprometheus-universal-exporterVerified publisher0.2.11 of 1See more

prometheus-universal-exporter prometheus-universal-exporter 0.2.1

1 of the 1 container images this version deploys carry CVE-2026-18374.

Container imageDigestPackageFixed in
ghcr.io/eenchev/prometheus-universal-exporter:latest99122b443cf9
glibc@2.41-12+deb13u4
no fix listed

Open the chart page →

638
prompt-dbprompt-dbVerified publisher1.0.71 of 3See more

prompt-db prompt-db 1.0.7

1 of the 3 container images this version deploys carry CVE-2026-18374.

Container imageDigestPackageFixed in
ghcr.io/erlkoenig91/prompt-db-backend:1.0.7ab120359810d
glibc@2.41-12+deb13u3
no fix listed

Open the chart page →

3,556
web-chartpsb-ktcloudlab0.1.01 of 1See more

web-chart psb-ktcloudlab 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-18374.

Container imageDigestPackageFixed in
library/nginx:latest05b8cb60c354
glibc@2.41-12+deb13u3
no fix listed

Open the chart page →

1,956
web-chartpsg-ktcloudlab0.1.01 of 1See more

web-chart psg-ktcloudlab 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-18374.

Container imageDigestPackageFixed in
library/nginx:latest05b8cb60c354
glibc@2.41-12+deb13u3
no fix listed

Open the chart page →

1,956
nginx-chartpshs-nginx0.1.01 of 1See more

nginx-chart pshs-nginx 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-18374.

Container imageDigestPackageFixed in
library/nginx:latest05b8cb60c354
glibc@2.41-12+deb13u3
no fix listed

Open the chart page →

1,956
flaskDiaryptj-miniproject2.1.21 of 2See more

flaskDiary ptj-miniproject 2.1.2

1 of the 2 container images this version deploys carry CVE-2026-18374.

Container imageDigestPackageFixed in
freedom98/flask:k3.0d7ce1533f297
glibc@2.36-9+deb12u10
no fix listed

Open the chart page →

3,122
apppvillaverdeVerified publisher0.2.61 of 1See more

app pvillaverde 0.2.6

1 of the 1 container images this version deploys carry CVE-2026-18374.

Container imageDigestPackageFixed in
library/nginx:1.31a53fc6c27208
glibc@2.41-12+deb13u3
no fix listed

Open the chart page →

1,859
game-serverpvillaverdeVerified publisher1.0.61 of 1See more

game-server pvillaverde 1.0.6

1 of the 1 container images this version deploys carry CVE-2026-18374.

Container imageDigestPackageFixed in
ghcr.io/itzg/minecraft-server:latest46919d151d39
glibc@2.39-0ubuntu8.8
no fix listed

Open the chart page →

4,216
pyredispyredis-helm0.1.01 of 2See more

pyredis pyredis-helm 0.1.0

1 of the 2 container images this version deploys carry CVE-2026-18374.

Container imageDigestPackageFixed in
avinash263/pyredis263:latestaa2b8727f1a6
glibc@2.36-9
no fix listed

Open the chart page →

14,770
mychartpythonweb0.1.01 of 1See more

mychart pythonweb 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-18374.

Container imageDigestPackageFixed in
qichenxu4pd/pythonexample:1.0f3a8502bc21b
glibc@2.36-9+deb12u7
no fix listed

Open the chart page →

12,799
mypythonpythonweb0.1.01 of 1See more

mypython pythonweb 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-18374.

Container imageDigestPackageFixed in
qichenxu4pd/pythonexample:1.0f3a8502bc21b
glibc@2.36-9+deb12u7
no fix listed

Open the chart page →

12,799
qantas-apiqantas-helm0.1.01 of 3See more

qantas-api qantas-helm 0.1.0

1 of the 3 container images this version deploys carry CVE-2026-18374.

Container imageDigestPackageFixed in
library/postgres:1767f41722b7a8
glibc@2.41-12+deb13u3
no fix listed

Open the chart page →

1,699
open-terminalqaoruVerified publisher0.2.41 of 1See more

open-terminal qaoru 0.2.4

1 of the 1 container images this version deploys carry CVE-2026-18374.

Container imageDigestPackageFixed in
ghcr.io/open-webui/open-terminal:0.13.0-slimdec44673c865
glibc@2.41-12+deb13u3
no fix listed

Open the chart page →

2,081
unifiqaoruVerified publisher1.1.42 of 2See more

unifi qaoru 1.1.4

2 of the 2 container images this version deploys carry CVE-2026-18374.

Container imageDigestPackageFixed in
library/mongo:7.0-jammy84c4a18b60a0
glibc@2.35-0ubuntu3.14
no fix listed
linuxserver/unifi-network-application:10.6.106-ls1467f15f34937ce
glibc@2.43-2ubuntu2.4
no fix listed

Open the chart page →

3,407
wyoming-openwakewordqaoruVerified publisher0.1.01 of 1See more

wyoming-openwakeword qaoru 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-18374.

Container imageDigestPackageFixed in
rhasspy/wyoming-openwakeword:2.1.052cb1168731a
glibc@2.36-9+deb12u13
no fix listed

Open the chart page →

2,833
qualys-caqualys-ca-helm3.1.01 of 1See more

qualys-ca qualys-ca-helm 3.1.0

1 of the 1 container images this version deploys carry CVE-2026-18374.

Container imageDigestPackageFixed in
nelssec/qualys-agent-bootstrapper:v2.1.05e471f0cdeaa
glibc@2.35-0ubuntu3.11
no fix listed

Open the chart page →

1,940
qubivaqubiva0.3.21 of 3See more

qubiva qubiva 0.3.2

1 of the 3 container images this version deploys carry CVE-2026-18374.

Container imageDigestPackageFixed in
ghcr.io/qubiva/qubiva:v0.3.2cdf1e3329bfe
glibc@2.41-12+deb13u3
no fix listed

Open the chart page →

4,545
airflowquench-airflowVerified publisher0.1.132 of 2See more

airflow quench-airflow 0.1.13

2 of the 2 container images this version deploys carry CVE-2026-18374.

Container imageDigestPackageFixed in
ghcr.io/quenchworks/images/airflowdigest-pinned66d1498b17ca
glibc-2.44@2.44-r5
2.44-r6
ghcr.io/quenchworks/images/postgresqldigest-pinned919b69c5c86b
glibc-2.44@2.44-r1
2.44-r6

Open the chart page →

266
apisixquench-apisixVerified publisher0.0.31 of 2See more

apisix quench-apisix 0.0.3

1 of the 2 container images this version deploys carry CVE-2026-18374.

Container imageDigestPackageFixed in
ghcr.io/quenchworks/images/apisixdigest-pinned2b242df1ab22
glibc-2.44@2.44-r1
2.44-r6

Open the chart page →

118
argocdquench-argocdVerified publisher0.0.71 of 2See more

argocd quench-argocd 0.0.7

1 of the 2 container images this version deploys carry CVE-2026-18374.

Container imageDigestPackageFixed in
ghcr.io/quenchworks/images/redisdigest-pinnedcda19af7491d
glibc-2.44@2.44-r1
2.44-r6

Open the chart page →

92
authentikquench-authentikVerified publisher0.1.162 of 3See more

authentik quench-authentik 0.1.16

2 of the 3 container images this version deploys carry CVE-2026-18374.

Container imageDigestPackageFixed in
ghcr.io/quenchworks/images/postgresqldigest-pinned919b69c5c86b
glibc-2.44@2.44-r1
2.44-r6
ghcr.io/quenchworks/images/valkeydigest-pinnedc9ceca787890
glibc-2.44@2.44-r1
2.44-r6

Open the chart page →

148
cadencequench-cadenceVerified publisher0.0.131 of 2See more

cadence quench-cadence 0.0.13

1 of the 2 container images this version deploys carry CVE-2026-18374.

Container imageDigestPackageFixed in
ghcr.io/quenchworks/images/cassandradigest-pinned688f215f101f
glibc-2.44@2.44-r1
2.44-r6

Open the chart page →

97
cockroachdbquench-cockroachdbVerified publisher0.0.91 of 1See more

cockroachdb quench-cockroachdb 0.0.9

1 of the 1 container images this version deploys carry CVE-2026-18374.

Container imageDigestPackageFixed in
ghcr.io/quenchworks/images/cockroachdbdigest-pinned999d37602d17
glibc-2.44@2.44-r1
2.44-r6

Open the chart page →

30
coolifyquench-coolifyVerified publisher0.0.184 of 4See more

coolify quench-coolify 0.0.18

4 of the 4 container images this version deploys carry CVE-2026-18374.

Container imageDigestPackageFixed in
ghcr.io/quenchworks/images/coolify-appdigest-pinnedce43126a3842
glibc-2.44@2.44-r5
2.44-r6
ghcr.io/quenchworks/images/coolify-realtimedigest-pinnedf128e512c9c0
glibc-2.44@2.44-r1
2.44-r6
ghcr.io/quenchworks/images/postgresql-15digest-pinned797a5233ca46
glibc-2.44@2.44-r1
2.44-r6
ghcr.io/quenchworks/images/redisdigest-pinnedcda19af7491d
glibc-2.44@2.44-r1
2.44-r6

Open the chart page →

546
coolify-realtimequench-coolify-realtimeVerified publisher0.0.71 of 1See more

coolify-realtime quench-coolify-realtime 0.0.7

1 of the 1 container images this version deploys carry CVE-2026-18374.

Container imageDigestPackageFixed in
ghcr.io/quenchworks/images/coolify-realtimedigest-pinnedf128e512c9c0
glibc-2.44@2.44-r1
2.44-r6

Open the chart page →

344
dexquench-dexVerified publisher0.0.111 of 1See more

dex quench-dex 0.0.11

1 of the 1 container images this version deploys carry CVE-2026-18374.

Container imageDigestPackageFixed in
ghcr.io/quenchworks/images/dexdigest-pinned8b41a7c5f1bf
glibc-2.43@2.43-r14
no fix listed

Open the chart page →

102
documentdbquench-documentdbVerified publisher0.0.111 of 1See more

documentdb quench-documentdb 0.0.11

1 of the 1 container images this version deploys carry CVE-2026-18374.

Container imageDigestPackageFixed in
ghcr.io/quenchworks/images/documentdbdigest-pinnedbe72db1f2865
glibc-2.44@2.44-r1
2.44-r6

Open the chart page →

165
drupalquench-drupalVerified publisher0.0.152 of 2See more

drupal quench-drupal 0.0.15

2 of the 2 container images this version deploys carry CVE-2026-18374.

Container imageDigestPackageFixed in
ghcr.io/quenchworks/images/drupaldigest-pinned1969d8357d81
glibc-2.44@2.44-r1
2.44-r6
ghcr.io/quenchworks/images/mysqldigest-pinned65ea66e8db48
glibc-2.44@2.44-r1
2.44-r6

Open the chart page →

362
excalidrawquench-excalidrawVerified publisher0.0.91 of 1See more

excalidraw quench-excalidraw 0.0.9

1 of the 1 container images this version deploys carry CVE-2026-18374.

Container imageDigestPackageFixed in
ghcr.io/quenchworks/images/excalidrawdigest-pinned08a23c56caba
glibc-2.44@2.44-r1
2.44-r6

Open the chart page →

51
flociquench-flociVerified publisher0.2.131 of 1See more

floci quench-floci 0.2.13

1 of the 1 container images this version deploys carry CVE-2026-18374.

Container imageDigestPackageFixed in
ghcr.io/quenchworks/images/flocidigest-pinned1c83a712bf07
glibc-2.44@2.44-r1
2.44-r6

Open the chart page →

77
fluent-bitquench-fluent-bitVerified publisher0.0.121 of 1See more

fluent-bit quench-fluent-bit 0.0.12

1 of the 1 container images this version deploys carry CVE-2026-18374.

Container imageDigestPackageFixed in
ghcr.io/quenchworks/images/fluent-bitdigest-pinned5d4db482f1b6
glibc-2.44@2.44-r1
2.44-r6

Open the chart page →

51
forgejoquench-forgejoVerified publisher0.0.101 of 1See more

forgejo quench-forgejo 0.0.10

1 of the 1 container images this version deploys carry CVE-2026-18374.

Container imageDigestPackageFixed in
ghcr.io/quenchworks/images/forgejodigest-pinned9fde07ee32a0
glibc-2.44@2.44-r5
2.44-r6

Open the chart page →

83
ghostquench-ghostVerified publisher0.0.141 of 2See more

ghost quench-ghost 0.0.14

1 of the 2 container images this version deploys carry CVE-2026-18374.

Container imageDigestPackageFixed in
ghcr.io/quenchworks/images/mariadbdigest-pinned7f506d403668
glibc-2.44@2.44-r1
2.44-r6

Open the chart page →

58
giteaquench-giteaVerified publisher0.0.251 of 2See more

gitea quench-gitea 0.0.25

1 of the 2 container images this version deploys carry CVE-2026-18374.

Container imageDigestPackageFixed in
ghcr.io/quenchworks/images/postgresqldigest-pinned919b69c5c86b
glibc-2.44@2.44-r1
2.44-r6

Open the chart page →

151
grafanaquench-grafanaVerified publisher0.0.121 of 1See more

grafana quench-grafana 0.0.12

1 of the 1 container images this version deploys carry CVE-2026-18374.

Container imageDigestPackageFixed in
ghcr.io/quenchworks/images/grafanadigest-pinned3ccc56791c8a
glibc-2.44@2.44-r1
2.44-r6

Open the chart page →

177
harborquench-harborVerified publisher0.0.215 of 9See more

harbor quench-harbor 0.0.21

5 of the 9 container images this version deploys carry CVE-2026-18374.

Container imageDigestPackageFixed in
ghcr.io/quenchworks/images/busyboxdigest-pinned96bfb56285a6
glibc-2.43@2.43-r14
no fix listed
ghcr.io/quenchworks/images/harbor-portaldigest-pinnedc5cf43e186b5
glibc-2.44@2.44-r1
2.44-r6
ghcr.io/quenchworks/images/nginxdigest-pinned19d9321dceb2
glibc-2.44@2.44-r1
2.44-r6
ghcr.io/quenchworks/images/postgresqldigest-pinned919b69c5c86b
glibc-2.44@2.44-r1
2.44-r6
ghcr.io/quenchworks/images/valkeydigest-pinnedc9ceca787890
glibc-2.44@2.44-r1
2.44-r6

Open the chart page →

619
harbor-observabilityquench-harbor-observabilityVerified publisher0.0.102 of 2See more

harbor-observability quench-harbor-observability 0.0.10

2 of the 2 container images this version deploys carry CVE-2026-18374.

Container imageDigestPackageFixed in
ghcr.io/quenchworks/images/grafanadigest-pinned3ccc56791c8a
glibc-2.44@2.44-r1
2.44-r6
ghcr.io/quenchworks/images/prometheusdigest-pinnede9037c190bc1
glibc-2.44@2.44-r1
2.44-r6

Open the chart page →

281
httpdquench-httpdVerified publisher0.0.61 of 1See more

httpd quench-httpd 0.0.6

1 of the 1 container images this version deploys carry CVE-2026-18374.

Container imageDigestPackageFixed in
ghcr.io/quenchworks/images/httpddigest-pinned8ed83ce04191
glibc-2.44@2.44-r1
2.44-r6

Open the chart page →

58
hydraquench-hydraVerified publisher0.0.61 of 2See more

hydra quench-hydra 0.0.6

1 of the 2 container images this version deploys carry CVE-2026-18374.

Container imageDigestPackageFixed in
ghcr.io/quenchworks/images/postgresqldigest-pinned919b69c5c86b
glibc-2.44@2.44-r1
2.44-r6

Open the chart page →

128
identity-stackquench-identity-stackVerified publisher0.0.132 of 3See more

identity-stack quench-identity-stack 0.0.13

2 of the 3 container images this version deploys carry CVE-2026-18374.

Container imageDigestPackageFixed in
ghcr.io/quenchworks/images/keycloakdigest-pinned7e9bd0bbbb31
glibc-2.44@2.44-r1
2.44-r6
ghcr.io/quenchworks/images/postgresqldigest-pinned919b69c5c86b
glibc-2.44@2.44-r1
2.44-r6

Open the chart page →

292
ingress-nginxquench-ingress-nginxVerified publisher0.0.81 of 1See more

ingress-nginx quench-ingress-nginx 0.0.8

1 of the 1 container images this version deploys carry CVE-2026-18374.

Container imageDigestPackageFixed in
ghcr.io/quenchworks/images/ingress-nginxdigest-pinned0dd302223669
glibc-2.44@2.44-r1
2.44-r6

Open the chart page →

371
jenkinsquench-jenkinsVerified publisher0.0.81 of 1See more

jenkins quench-jenkins 0.0.8

1 of the 1 container images this version deploys carry CVE-2026-18374.

Container imageDigestPackageFixed in
ghcr.io/quenchworks/images/jenkinsdigest-pinnede92dba4e78c5
glibc-2.44@2.44-r1
2.44-r6

Open the chart page →

130
keycloakquench-keycloakVerified publisher0.0.241 of 2See more

keycloak quench-keycloak 0.0.24

1 of the 2 container images this version deploys carry CVE-2026-18374.

Container imageDigestPackageFixed in
ghcr.io/quenchworks/images/postgresqldigest-pinned919b69c5c86b
glibc-2.44@2.44-r1
2.44-r6

Open the chart page →

196
kongquench-kongVerified publisher0.0.21 of 1See more

kong quench-kong 0.0.2

1 of the 1 container images this version deploys carry CVE-2026-18374.

Container imageDigestPackageFixed in
ghcr.io/quenchworks/images/kongdigest-pinnedb1f7e7ea8f6c
glibc-2.44@2.44-r1
2.44-r6

Open the chart page →

58
kratosquench-kratosVerified publisher0.0.61 of 2See more

kratos quench-kratos 0.0.6

1 of the 2 container images this version deploys carry CVE-2026-18374.

Container imageDigestPackageFixed in
ghcr.io/quenchworks/images/postgresqldigest-pinned919b69c5c86b
glibc-2.44@2.44-r1
2.44-r6

Open the chart page →

128
lgtm-stackquench-lgtm-stackVerified publisher0.0.213 of 9See more

lgtm-stack quench-lgtm-stack 0.0.21

3 of the 9 container images this version deploys carry CVE-2026-18374.

Container imageDigestPackageFixed in
ghcr.io/quenchworks/images/grafanadigest-pinned3ccc56791c8a
glibc-2.44@2.44-r1
2.44-r6
ghcr.io/quenchworks/images/tempodigest-pinned9e889ec33f96
glibc-2.44@2.44-r1
2.44-r6
ghcr.io/quenchworks/images/victoriametricsdigest-pinned98105c490bac
glibc-2.44@2.44-r1
2.44-r6

Open the chart page →

518
logging-stackquench-logging-stackVerified publisher0.0.131 of 3See more

logging-stack quench-logging-stack 0.0.13

1 of the 3 container images this version deploys carry CVE-2026-18374.

Container imageDigestPackageFixed in
ghcr.io/quenchworks/images/grafanadigest-pinned3ccc56791c8a
glibc-2.44@2.44-r1
2.44-r6

Open the chart page →

251
mariadbquench-mariadbVerified publisher0.0.161 of 1See more

mariadb quench-mariadb 0.0.16

1 of the 1 container images this version deploys carry CVE-2026-18374.

Container imageDigestPackageFixed in
ghcr.io/quenchworks/images/mariadbdigest-pinned7f506d403668
glibc-2.44@2.44-r1
2.44-r6

Open the chart page →

58

Container images carrying it

2,809 by charts deploying them

A fixed version is listed for 2 of the 5 affected packages.

Container imageDigestPackageFixed inUsed by
registry.k8s.io/dns/k8s-dns-node-cache:1.23.1e3dccb1a21d1
glibc@2.36-9+deb12u7
no fix listed
1
registry.k8s.io/git-sync/git-sync:v4.5.00e64aedb0d0a
glibc@2.41-12
no fix listed
1
registry.k8s.io/git-sync/git-sync:v4.1.0fd9722fd02e3
glibc@2.36-9+deb12u3
no fix listed
1
registry.k8s.io/node-problem-detector/node-problem-detector:v0.8.2052f0618e9bc2
glibc@2.36-9+deb12u8
no fix listed
1
registry.k8s.io/node-problem-detector/node-problem-detector:v1.35.1c380751accc5
glibc@2.36-9+deb12u13
no fix listed
1
registry.k8s.io/sig-storage/local-volume-provisioner:v2.8.03e2bf2eaef9f
glibc@2.36-9+deb12u10
no fix listed
1
registry.k8s.io/sig-storage/local-volume-provisioner:v2.9.0f9d65db8bda2
glibc@2.36-9+deb12u14
no fix listed
1
registry.k8s.io/sig-storage/nfsplugin:v4.13.41eb5a85180a4
glibc@2.36-9+deb12u14
no fix listed
1
registry.k8s.io/sig-storage/nfsplugin:v4.11.0ce5b5ccd5eb0
glibc@2.36-9+deb12u10
no fix listed
1

syft 1.42.1 · advisories as of 20 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.