StackRadar

CVE-2026-18938

Medium

Advisory

Published 7 Aug 2026In the index since 5 Sept 2026
Severity
Medium
worst across findings
CVSS
6.2
base score, highest
EPSS
0.001
1st percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
2,154
of 17,803 indexed, latest versions
Container images
2,107
deployed by those charts
Fix available
2 of 2
affected packages

CVE-2026-18938 affecting package p11-kit for versions less than 0.26.5-1

Carried by container images the latest versions of 2,154 of 17,803 indexed charts deploy, on 2,107 images.

Affected packageAffected versionsFixed inImages
p11-kitdeb0.23.9-2, 0.23.9-2ubuntu0.1, 0.23.20-1build1, 0.23.20-1ubuntu0.1+8 more0.23.9-2ubuntu0.1+esm1, 0.23.20-1ubuntu0.1+esm1, 0.24.0-6ubuntu0.1, 0.25.3-4ubuntu2.2+1 more2,106
p11-kitrpm0.25.0-1.azl30.26.5-11
OSV records
DEBIAN-CVE-2026-18938UBUNTU-CVE-2026-18938AZL-95481ECHO-09a0-891c-526d
Also known as
USN-8687-1

Charts affected

2,154 by stars
ChartLatestAffected imagesRadar Score
changedetection-iozekker6Verified publisher1.101.01 of 1See more

changedetection-io zekker6 1.101.0

1 of the 1 container images this version deploys carry CVE-2026-18938.

Container imageDigestPackageFixed in
ghcr.io/dgtlmoon/changedetection.io:0.60.6eb4a9f718801
p11-kit@0.24.1-2
no fix listed

Open the chart page →

2,649
NEW_APPzekker6Verified publisher0.0.01 of 1See more

NEW_APP zekker6 0.0.0

1 of the 1 container images this version deploys carry CVE-2026-18938.

Container imageDigestPackageFixed in
library/nginx:latest05b8cb60c354
p11-kit@0.25.5-3
no fix listed

Open the chart page →

1,879
clickhousezloi-space1.2.02 of 3See more

clickhouse zloi-space 1.2.0

2 of the 3 container images this version deploys carry CVE-2026-18938.

Container imageDigestPackageFixed in
yandex/clickhouse-client:21.3863f94a0f607
p11-kit@0.23.9-2ubuntu0.1
0.23.9-2ubuntu0.1+esm1
yandex/clickhouse-server:21.3.204eccfffb01d7
p11-kit@0.23.20-1ubuntu0.1
0.23.20-1ubuntu0.1+esm1

Open the chart page →

9,280
zoo-project-druzoo-projectOfficialVerified publisher0.10.41 of 6See more

zoo-project-dru zoo-project 0.10.4

1 of the 6 container images this version deploys carry CVE-2026-18938.

Container imageDigestPackageFixed in
zooproject/zoo-project:dru-19f3c4eed7c9ec9d1f0375bbe59f9d204a42bd3a9a507cb7e2dd
p11-kit@0.24.0-6build1
0.24.0-6ubuntu0.1

Open the chart page →

7,949

Container images carrying it

2,107 by charts deploying them

A fixed version is listed for 2 of the 2 affected packages.

Container imageDigestPackageFixed inUsed by
ildarmukhametzyanov/priceapp:0.115d23720a3ee
p11-kit@0.24.1-2
no fix listed
1
improwised/proxysql:master-6b26e59-171765063828940522e8b7
p11-kit@0.24.1-2
no fix listed
1
infiniflow/infinity:v0.7.0992c87a68612
p11-kit@0.24.0-6build1
0.24.0-6ubuntu0.1
1
inseefrlab/shelly:cloudshell31f04ca7436b
p11-kit@0.24.0-6build1
0.24.0-6ubuntu0.1
1
instill/artifact-backend:b28766ac4a393e601ed
p11-kit@0.25.5-3
no fix listed
1
instill/mgmt-backend:d0933d4ebe12f77a3f9
p11-kit@0.25.5-3
no fix listed
1
instill/model-backend:611f0f2e980125e5ba5
p11-kit@0.25.5-3
no fix listed
1
instructure/kinesalite:latest34400d82f28f
p11-kit@0.23.20-1ubuntu0.1
0.23.20-1ubuntu0.1+esm1
1
intel/dlstreamer-pipeline-server:2022.1.1-ubuntu20aa8f5483a2ef
p11-kit@0.23.20-1ubuntu0.1
0.23.20-1ubuntu0.1+esm1
1
intel/multimodal-data-visualization-streaming:3.01a89327e499b
p11-kit@0.23.20-1ubuntu0.1
0.23.20-1ubuntu0.1+esm1
1
intelowlproject/intelowl:v6.6.10b22e547ea6b
p11-kit@0.24.1-2
no fix listed
1
intel/trusted-certificate-issuer:0.5.0591a9db4a427
p11-kit@0.23.20-1ubuntu0.1
0.23.20-1ubuntu0.1+esm1
1
inventree/inventree:1.5.4a946ec09da3e
p11-kit@0.25.5-3
no fix listed
1
iofog/router:2.0.17260cf861479
p11-kit@0.23.9-2
0.23.9-2ubuntu0.1+esm1
1
iomesh/csi-driver:v2.8.01a151f602451
p11-kit@0.24.0-6build1
0.24.0-6ubuntu0.1
1
iomesh/csi-driver:v2.7.25d3f9bf9240b
p11-kit@0.24.0-6build1
0.24.0-6ubuntu0.1
1
iomesh/node-disk-manager:1.8.0002c4b92fd34
p11-kit@0.23.20-1ubuntu0.1
0.23.20-1ubuntu0.1+esm1
1
iomesh/node-disk-manager:1.8.0-2292ad270082e
p11-kit@0.25.3-4ubuntu2
0.25.3-4ubuntu2.2
1
iomesh/node-disk-operator:1.8.0-1de4aa40684ad
p11-kit@0.25.3-4ubuntu2
0.25.3-4ubuntu2.2
1
iomesh/node-disk-operator:1.8.0f6c76380db34
p11-kit@0.23.20-1ubuntu0.1
0.23.20-1ubuntu0.1+esm1
1
iosifache/wazuh-manager-filebeat:latest85df3f04b5da
p11-kit@0.23.20-1ubuntu0.1
0.23.20-1ubuntu0.1+esm1
1
ironmansoftware/universal:3.3.1-ubuntu-20.041943c73cce31
p11-kit@0.23.20-1ubuntu0.1
0.23.20-1ubuntu0.1+esm1
1
ispras/svacer:11-2-042aa9fa9f189
p11-kit@0.24.0-6build1
0.24.0-6ubuntu0.1
1
istio/examples-bookinfo-reviews-v1:1.17.0b8f16a765eea
p11-kit@0.23.20-1ubuntu0.1
0.23.20-1ubuntu0.1+esm1
1
istio/examples-bookinfo-reviews-v2:1.17.072f25a55f078
p11-kit@0.23.20-1ubuntu0.1
0.23.20-1ubuntu0.1+esm1
1
istio/examples-bookinfo-reviews-v3:1.17.08f92fc1b6592
p11-kit@0.23.20-1ubuntu0.1
0.23.20-1ubuntu0.1+esm1
1
istio/examples-helloworld-v1:latest328b237e4fb1
p11-kit@0.24.1-2
no fix listed
1
istio/examples-helloworld-v2:latest0a7f02b2c7c9
p11-kit@0.24.1-2
no fix listed
1
istio/install-cni:1.10.32232f365aed6
p11-kit@0.23.9-2ubuntu0.1
0.23.9-2ubuntu0.1+esm1
1
istio/install-cni:1.23.6ab34c4740f44
p11-kit@0.25.3-4ubuntu2.1
0.25.3-4ubuntu2.2
1
istio/install-cni:1.29.0ce27c9ce43c8
p11-kit@0.25.3-4ubuntu2.1
0.25.3-4ubuntu2.2
1
istio/operator:1.10.3655eefa11c84
p11-kit@0.23.9-2ubuntu0.1
0.23.9-2ubuntu0.1+esm1
1
istio/operator:1.12.06cfce8a071b9
p11-kit@0.23.20-1ubuntu0.1
0.23.20-1ubuntu0.1+esm1
1
istio/operator:1.18.270f9d1fe5fff
p11-kit@0.24.0-6build1
0.24.0-6ubuntu0.1
1
istio/pilot:1.10.0294ca55bd1cc
p11-kit@0.23.9-2ubuntu0.1
0.23.9-2ubuntu0.1+esm1
1
istio/pilot:1.29.0325156535773
p11-kit@0.25.3-4ubuntu2.1
0.25.3-4ubuntu2.2
1
istio/pilot:1.23.69c3d6a218181
p11-kit@0.25.3-4ubuntu2.1
0.25.3-4ubuntu2.2
1
istio/pilot:1.16.0ac0284d75ec9
p11-kit@0.24.0-6build1
0.24.0-6ubuntu0.1
1
istio/pilot:1.17.1ce9d87606701
p11-kit@0.24.0-6build1
0.24.0-6ubuntu0.1
1
istio/pilot:1.15.2db08d6963975
p11-kit@0.24.0-6build1
0.24.0-6ubuntu0.1
1
istio/pilot:1.10.3e7e110a421c2
p11-kit@0.23.9-2ubuntu0.1
0.23.9-2ubuntu0.1+esm1
1
istio/pilot:1.29.1f8b0e412ac4a
p11-kit@0.25.3-4ubuntu2.1
0.25.3-4ubuntu2.2
1
istio/proxyv2:1.9.687a9db561d2e
p11-kit@0.23.9-2ubuntu0.1
0.23.9-2ubuntu0.1+esm1
1
istio/proxyv2:1.10.088c6c693e67a
p11-kit@0.23.9-2ubuntu0.1
0.23.9-2ubuntu0.1+esm1
1
istio/proxyv2:1.14.1df69c1a7af7c
p11-kit@0.23.20-1ubuntu0.1
0.23.20-1ubuntu0.1+esm1
1
istio/ztunnel:1.25.005f3972d80a9
p11-kit@0.25.3-4ubuntu2.1
0.25.3-4ubuntu2.2
1
itzg/bungeecord:latest1c59f9631f3b
p11-kit@0.26.2-2
no fix listed
1
itzg/minecraft-server:latest8672e335dbef
p11-kit@0.25.3-4ubuntu2.1
0.25.3-4ubuntu2.2
1
ixsystems/truecommand:3.2.019c218455cd2
p11-kit@0.25.5-3
no fix listed
1
jacobalberty/unifi:v7.1.664a3616625dda
p11-kit@0.23.9-2ubuntu0.1
0.23.9-2ubuntu0.1+esm1
1

syft 1.42.1 · advisories as of 18 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.