StackRadar

CVE-2026-18938

Medium

Advisory

Published 7 Aug 2026In the index since 5 Sept 2026
Severity
Medium
worst across findings
CVSS
6.2
base score, highest
EPSS
0.001
1st percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
2,148
of 17,797 indexed, latest versions
Container images
2,099
deployed by those charts
Fix available
2 of 2
affected packages

CVE-2026-18938 affecting package p11-kit for versions less than 0.26.5-1

Carried by container images the latest versions of 2,148 of 17,797 indexed charts deploy, on 2,099 images.

Affected packageAffected versionsFixed inImages
p11-kitdeb0.23.9-2, 0.23.9-2ubuntu0.1, 0.23.20-1build1, 0.23.20-1ubuntu0.1+8 more0.23.9-2ubuntu0.1+esm1, 0.23.20-1ubuntu0.1+esm1, 0.24.0-6ubuntu0.1, 0.25.3-4ubuntu2.2+1 more2,098
p11-kitrpm0.25.0-1.azl30.26.5-11
OSV records
DEBIAN-CVE-2026-18938UBUNTU-CVE-2026-18938AZL-95481ECHO-09a0-891c-526d
Also known as
USN-8687-1

Charts affected

2,148 by stars
ChartLatestAffected imagesRadar Score

Container images carrying it

2,099 by charts deploying them

A fixed version is listed for 2 of the 2 affected packages.

Container imageDigestPackageFixed inUsed by
cybrarist/discount-bandit:v4.0.4e9e2447ac666
p11-kit@0.25.5-3
no fix listed
1
cyfershepard/jellystat:1.1.11c4e2dfa8bddf
p11-kit@0.24.1-2
no fix listed
1
cznic/knot-resolver:v6.4.2fe71c5214fdc
p11-kit@0.25.5-3
no fix listed
1
dachichang/basic-auth-s3-nginx:1.0.07ccac90a935e
p11-kit@0.24.1-2
no fix listed
1
daedalusproject/base_kubectl:latest6f72b5119eda
p11-kit@0.23.20-1build1
0.23.20-1ubuntu0.1+esm1
1
danialnabiyan1382/lsdisk:v2.0.8f96a7ebf1f42
p11-kit@0.24.1-2
no fix listed
1
dannielkil/book-frontend:latest937993927694
p11-kit@0.24.1-2
no fix listed
1
darthsim/imgproxy:v3.30.13b709e4a0e5e
p11-kit@0.25.3-4ubuntu2.1
0.25.3-4ubuntu2.2
1
darthsim/imgproxy:v3.26476cb08c816a
p11-kit@0.25.3-4ubuntu2.1
0.25.3-4ubuntu2.2
1
darthsim/imgproxy:v3.29.17d12c7c8fc66
p11-kit@0.25.3-4ubuntu2.1
0.25.3-4ubuntu2.2
1
daskdev/dask-notebook:1.1.0052630f5ca04
p11-kit@0.23.9-2
0.23.9-2ubuntu0.1+esm1
1
dasmeta/mongodb-bi-connector:1.0.3fa657960dfec
p11-kit@0.23.9-2ubuntu0.1
0.23.9-2ubuntu0.1+esm1
1
datadog/agent:6aad9994de6a7
p11-kit@0.25.3-4ubuntu2.1
0.25.3-4ubuntu2.2
1
datafuselabs/databend-meta:v1.2.279ba877ee6cb4d
p11-kit@0.24.1-2
no fix listed
1
datafuselabs/databend-query:v1.2.279a936843b85b4
p11-kit@0.24.1-2
no fix listed
1
datalayers/datalayers:v2.2.1017b292079239
p11-kit@0.24.0-6build1
0.24.0-6ubuntu0.1
1
datalust/seq-input-gelf:3.0.441-x643de34aed5642
p11-kit@0.23.20-1ubuntu0.1
0.23.20-1ubuntu0.1+esm1
1
datamate/seafile-professional:11.0.202dd66b722464
p11-kit@0.24.0-6build1
0.24.0-6ubuntu0.1
1
dbeaver/cloudbeaver:26.1.287ab86d00f8c
p11-kit@0.25.3-4ubuntu2.1
0.25.3-4ubuntu2.2
1
dbgate/dbgate:7.2.3f2dc7423ea88
p11-kit@0.24.1-2
no fix listed
1
dblaci/ubuntu-ssh-rsync:20231020eea697611af4
p11-kit@0.24.0-6build1
0.24.0-6ubuntu0.1
1
ddosify/alaz:v0.12.0ea602056d9ce
p11-kit@0.24.1-2
no fix listed
1
ddosify/selfhosted_alaz_backend:1.0.6a43c5155fa1c
p11-kit@0.24.1-2
no fix listed
1
ddosify/selfhosted_backend:3.2.93c11e3182652
p11-kit@0.24.1-2
no fix listed
1
ddosify/selfhosted_backend:2.6.11ac323d52bfb4
p11-kit@0.24.1-2
no fix listed
1
ddosify/selfhosted_hammermanager:2.0.2b796b8c73011
p11-kit@0.24.1-2
no fix listed
1
deconzcommunity/deconz:2.29.2062de2362641
p11-kit@0.24.1-2
no fix listed
1
deepflowce/clickhouse-server:22.8.6.71bc1882f75c18
p11-kit@0.23.20-1ubuntu0.1
0.23.20-1ubuntu0.1+esm1
1
deepflowce/deepflow-agent:v6.2.6.529332fee7fc2
p11-kit@0.24.0-6build1
0.24.0-6ubuntu0.1
1
defactops/defactops-backend:1.0.2307b663c0092a
p11-kit@0.24.1-2
no fix listed
1
defectdojo/defectdojo-django:3.3.100c597abdbb535
p11-kit@0.25.5-3
no fix listed
1
dellcloud/category:distributed02fc234353a9
p11-kit@0.23.20-1ubuntu0.1
0.23.20-1ubuntu0.1+esm1
1
dellcloud/pages:1.04d2eb25b9225
p11-kit@0.23.20-1ubuntu0.1
0.23.20-1ubuntu0.1+esm1
1
dependencytrack/apiserver:4.14.21ba4f004e1ec
p11-kit@0.25.5-3
no fix listed
1
dependencytrack/apiserver:latestf1da63ed610a
p11-kit@0.25.5-3
no fix listed
1
dessalines/lemmy:0.19.2079e9f02c286c
p11-kit@0.24.1-2
no fix listed
1
dessalines/lemmy-ui:0.19.20ee4c620d8e93
p11-kit@0.25.5-3
no fix listed
1
devopsgoofy/k8s-platform:latestad865312099f
p11-kit@0.24.1-2
no fix listed
1
devopshq/artifactory-cleanup:1.0.1830e093bffa91
p11-kit@0.24.1-2
no fix listed
1
dgraph/dgraph:v24.1.4b57fa31f9b7f
p11-kit@0.25.3-4ubuntu2.1
0.25.3-4ubuntu2.2
1
dgraziotin/nginx-webdav-nononsense:1.23.138f2de42bed0
p11-kit@0.23.20-1ubuntu0.1
0.23.20-1ubuntu0.1+esm1
1
diygod/rsshub:latest1d4b508b6357
p11-kit@0.25.5-3
no fix listed
1
diygod/rsshub:2025-11-097a6312cac0d5
p11-kit@0.24.1-2
no fix listed
1
djjudas21/alertify:0.1.0ba22be670c37
p11-kit@0.24.1-2
no fix listed
1
dniel/api-posts:master45a667852f2a
p11-kit@0.23.9-2
0.23.9-2ubuntu0.1+esm1
1
dobtc/bitcoin:25.1a870f7cb1105
p11-kit@0.24.1-2
no fix listed
1
docmost/docmost:0.96.0b56947fcfd08
p11-kit@0.25.5-3
no fix listed
1
dokuwiki/dokuwiki:2025-05-14af08ecfdda239
p11-kit@0.25.5-3
no fix listed
1
dolibarr/dolibarr:24.0.069ec52e3b7ef
p11-kit@0.24.1-2
no fix listed
1
dolibarr/dolibarr:22.0.47ad88fc9b13c
p11-kit@0.24.1-2
no fix listed
1

syft 1.42.1 · advisories as of 17 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.