StackRadar

CVE-2026-18374

Medium

Advisory

Published 27 Aug 2026In the index since 5 Sept 2026
Severity
Medium
worst across findings
CVSS
4.9
base score, highest
EPSS
0.002
5th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
2,695
of 17,797 indexed, latest versions
Container images
2,729
deployed by those charts
Fix available
2 of 5
affected packages

CVE-2026-18374 affecting package glibc 2.38-21

Carried by container images the latest versions of 2,695 of 17,797 indexed charts deploy, on 2,729 images.

Affected packageAffected versionsFixed inImages
glibcdeb2.23-0ubuntu5, 2.23-0ubuntu7, 2.23-0ubuntu9, 2.23-0ubuntu10+66 more2.41-12+deb13u3+e72,618
eglibcdeb2.19-0ubuntu6.3, 2.19-0ubuntu6.6, 2.19-0ubuntu6.13, 2.19-0ubuntu6.14+1 moreno fix listed7
glibc-2.44apk2.44-r1, 2.44-r4, 2.44-r52.44-r676
glibcrpm2.38-16.azl3, 2.38-18.azl3, 2.38-20.azl3no fix listed23
glibc-2.43apk2.43-r14no fix listed5
OSV records
DEBIAN-CVE-2026-18374UBUNTU-CVE-2026-18374AZL-98042CGA-27g8-4xhq-hhr3CGA-2w63-hvq4-f4pcECHO-9169-1fd9-0c1c
Also known as
CGA-2r7g-4qmv-r3hh, CGA-3qmp-39qm-cjf8, CGA-3xw7-x4r7-x678, CGA-5g65-xm2q-rjhf, CGA-5wh2-vg99-j76x, CGA-63j2-v7q6-8x84, CGA-6rf5-rrq5-7pff, CGA-772j-3386-6g56, CGA-79v3-g2j9-ffq2, CGA-8hxc-pvg5-xr9j, CGA-c62g-2q4h-pjjg, CGA-f52m-j726-w2p6, CGA-h33h-m88h-4gc6, CGA-m923-g68q-v4rq, CGA-m9qj-fr43-382g, CGA-mm85-9c9x-q266, CGA-rh5w-p243-vcf7, CGA-v3jf-jvqj-vgxj, CGA-x2q5-w2xg-rgqc, CGA-x3rq-r7j3-jgpx

Charts affected

2,695 by stars
ChartLatestAffected imagesRadar Score

Container images carrying it

2,729 by charts deploying them

A fixed version is listed for 2 of the 5 affected packages.

Container imageDigestPackageFixed inUsed by
actualbudget/actual-server:25.3.158fecd9088b7
glibc@2.36-9+deb12u9
no fix listed
1
adamzammit/limesurvey:7.1.1fdb06d62c22e
glibc@2.41-12+deb13u3
no fix listed
1
adorsys/keycloak-config-cli:6.3.0-26.1.085be7a45a94c
glibc@2.39-0ubuntu8.3
no fix listed
1
adorsys/keycloak-config-cli:6.1.6-25.0.1eb49a2dcbbb8
glibc@2.39-0ubuntu8.2
no fix listed
1
adwerx/github-actions-runner:2.276.1-20.04-1840d2b078682
glibc@2.31-0ubuntu9.1
no fix listed
1
agentarea/agentarea-api:latest9e15e16fa758
glibc@2.41-12+deb13u3
no fix listed
1
agentarea/agentarea-mcp-runner:latestd3c209a5d531
glibc@2.36-9+deb12u14
no fix listed
1
agentarea/agentarea-worker:latest1e5cb68ee77a
glibc@2.41-12+deb13u3
no fix listed
1
ahmetfurkandemir/iceberg-rest-fixture-postgresql:1.10.0142231a0b8b7
glibc@2.35-0ubuntu3.10
no fix listed
1
aibrix/gateway-plugins:v0.7.05b93ea4c753a
glibc@2.36-9+deb12u14
no fix listed
1
aibrix/metadata-service:v0.7.063fb81a64377
glibc@2.36-9+deb12u14
no fix listed
1
airbyte/manifest-server:7.28.2deec511b51c3
glibc@2.36-9+deb12u13
no fix listed
1
airbyte/pod-sweeper:1.5.198d2c39d512e
glibc@2.36-9+deb12u9
no fix listed
1
airsonicadvanced/airsonic-advanced:latestf7cbafac2806
glibc@2.31-0ubuntu9.2
no fix listed
1
akaunting/akaunting:3.0.1552811b36ec3a
glibc@2.36-9
no fix listed
1
akeyless/base:latest759e4289fae8
glibc@2.39-0ubuntu8.7
no fix listed
1
akeyless/gateway:5.4.0d4768a9b089c
glibc@2.39-0ubuntu8.9
no fix listed
1
aktosecurity/akto-agent-guard-anonymizer:1.1.4d4b100cbdc47
glibc@2.41-12+deb13u3
no fix listed
1
aktosecurity/akto-agent-guard-embedder:1.1.4dbc566b2376c
glibc@2.41-12+deb13u3
no fix listed
1
aktosecurity/akto-agent-guard-worker:1.1.4666eaffd5362
glibc@2.41-12+deb13u3
no fix listed
1
aktosecurity/akto-api-security-dashboard:latest3aeaee66bc66
glibc@2.39-0ubuntu8.8
no fix listed
1
aktosecurity/akto-threat-detection-backend:latest15ebb75b94dc
glibc@2.43-2ubuntu2.3
no fix listed
1
aktosecurity/akto-threat-detection-backend:1.15.7a6c1b933517f
glibc@2.43-2ubuntu2.3
no fix listed
1
aktosecurity/data-ingestion-service213aded7adc5
glibc@2.39-0ubuntu8.6
no fix listed
1
aktosecurity/data-ingestion-service:1.4.946ed5bcb04b2
glibc@2.43-2ubuntu2
no fix listed
1
aktosecurity/data-ingestion-service:1.5.35d4eab1c36b9
glibc@2.43-2ubuntu2.3
no fix listed
1
aktosecurity/mini-runtime:1.72.15498e3e35ecc2
glibc@2.43-2ubuntu2.3
no fix listed
1
alazidis/stornx:1.1.1602d4f7f090c
glibc@2.36-9+deb12u13
no fix listed
1
allegroai/clearml:2.0.0-613713ae38f7daf
glibc@2.36-9+deb12u9
no fix listed
1
allegroai/clearml-agent-k8s-base:1.24-21772827a01bb5
glibc@2.27-3ubuntu1.6
no fix listed
1
altinity/clickhouse-server:25.3.6.10034.altinitystable3396b15c51a2
glibc@2.35-0ubuntu3.10
no fix listed
1
andrcuns/dependabot-gitlab:7.7.0-alpha.143060f159f4c
glibc@2.39-0ubuntu8.8
no fix listed
1
andrewgaul/s3proxy:sha-85b0f987dc1d34174a5
glibc@2.39-0ubuntu8.3
no fix listed
1
andrewgolikov55/intel-gpu-exporter:latestfcc001b61c0e
glibc@2.35-0ubuntu3.4
no fix listed
1
andrewmackrodt/firefox-x11:142.0.1-r133f9080470c9
glibc@2.35-0ubuntu3.10
no fix listed
1
anguda/ant-media:2.5c435285fc241
glibc@2.31-0ubuntu9.9
no fix listed
1
ankane/pgvector:v0.5.1d3a9d8ac27bb
glibc@2.36-9+deb12u3
no fix listed
1
antrea/antrea-agent-ubuntu:v2.7.0c10bc45c6272
glibc@2.39-0ubuntu8.8
no fix listed
1
antrea/antrea-controller-ubuntu:v2.7.0f1373d39217c
glibc@2.39-0ubuntu8.8
no fix listed
1
antrea/antrea-ui-frontend:v0.8.0ee9686bcefb8
glibc@2.41-12+deb13u2
no fix listed
1
antrea/flow-aggregator:v2.7.0065193e7572f
glibc@2.39-0ubuntu8.8
no fix listed
1
anujdatar/cups:25.07.01685df04a643b
glibc@2.36-9+deb12u10
no fix listed
1
apache/activemq-artemis:2.44.00305c26f19ed
glibc@2.39-0ubuntu8.6
no fix listed
1
apache/activemq-artemis:2.37.0bae523439ee3
glibc@2.39-0ubuntu8.2
no fix listed
1
apache/airflow:2.8.4-python3.964e58748b6b9
glibc@2.36-9+deb12u4
no fix listed
1
apache/airflow:2.10.2-python3.9ce90bdc3d2af
glibc@2.36-9+deb12u8
no fix listed
1
apache/airflow:2.8.1e5560ad0b86e
glibc@2.36-9+deb12u4
no fix listed
1
apache/apisix:3.16.0-ubuntu5e47692cac00
glibc@2.39-0ubuntu8.7
no fix listed
1
apache/camel-k:2.11.0d173e7efe258
glibc@2.43-2ubuntu2.3
no fix listed
1
apache/druid:29.0.10cef139b6bf1
glibc@2.36-9+deb12u4
no fix listed
1

syft 1.42.1 · advisories as of 17 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.