CVE-2026-18938

Medium

Advisory

Published 7 Aug 2026In the index since 5 Sept 2026

Severity: Medium; worst across findings
CVSS: 6.2; base score, highest
EPSS: 0.001; 1st percentile
CISA KEV: Not listed; no confirmed exploitation
Charts affected: 2,154; of 17,803 indexed, latest versions
Container images: 2,107; deployed by those charts
Fix available: 2 of 2; affected packages

CVE-2026-18938 affecting package p11-kit for versions less than 0.26.5-1

Carried by container images the latest versions of 2,154 of 17,803 indexed charts deploy, on 2,107 images.

Affected package	Affected versions	Fixed in	Images
p11-kitdeb	0.23.9-2, 0.23.9-2ubuntu0.1, 0.23.20-1build1, 0.23.20-1ubuntu0.1+8 more	0.23.9-2ubuntu0.1+esm1, 0.23.20-1ubuntu0.1+esm1, 0.24.0-6ubuntu0.1, 0.25.3-4ubuntu2.2+1 more	2,106
p11-kitrpm	0.25.0-1.azl3	0.26.5-1	1

OSV records: DEBIAN-CVE-2026-18938 UBUNTU-CVE-2026-18938 AZL-95481 ECHO-09a0-891c-526d
Also known as: USN-8687-1

Charts affected

2,154 by stars

Chart

Latest

Affected images

Radar Score

changedetection-iozekker6

1.101.0

1 of 1 See more

changedetection-io zekker6 1.101.0

1 of the 1 container images this version deploys carry CVE-2026-18938.

Container image	Digest	Package	Fixed in
ghcr.io/dgtlmoon/changedetection.io :0.60.6	eb4a9f718801	p11-kit@0.24.1-2	no fix listed

Open the chart page →

2,649

NEW_APPzekker6

0.0.0

1 of 1 See more

NEW_APP zekker6 0.0.0

1 of the 1 container images this version deploys carry CVE-2026-18938.

Container image	Digest	Package	Fixed in
library/nginx :latest	05b8cb60c354	p11-kit@0.25.5-3	no fix listed

Open the chart page →

1,879

clickhousezloi-space

1.2.0

2 of 3 See more

clickhouse zloi-space 1.2.0

2 of the 3 container images this version deploys carry CVE-2026-18938.

Container image	Digest	Package	Fixed in
yandex/clickhouse-client :21.3	863f94a0f607	p11-kit@0.23.9-2ubuntu0.1	0.23.9-2ubuntu0.1+esm1
yandex/clickhouse-server :21.3.20	4eccfffb01d7	p11-kit@0.23.20-1ubuntu0.1	0.23.20-1ubuntu0.1+esm1

Open the chart page →

9,280

zoo-project-druzoo-project

0.10.4

1 of 6 See more

zoo-project-dru zoo-project 0.10.4

1 of the 6 container images this version deploys carry CVE-2026-18938.

Container image	Digest	Package	Fixed in
zooproject/zoo-project :dru-19f3c4eed7c9ec9d1f0375bbe59f9d204a42bd3a	9a507cb7e2dd	p11-kit@0.24.0-6build1	0.24.0-6ubuntu0.1

Open the chart page →

7,949

Container images carrying it

2,107 by charts deploying them

A fixed version is listed for 2 of the 2 affected packages.

Container image	Digest	Package	Fixed in	Used by
library/mongo :4.2.21-bionic	9cb28f7291d9	p11-kit@0.23.9-2ubuntu0.1	0.23.9-2ubuntu0.1+esm1	1
library/mongo :7.0.12	ae1cf99fa7bf	p11-kit@0.24.0-6build1	0.24.0-6ubuntu0.1	1
library/mongo :4.4.18	d23ec07162ca	p11-kit@0.23.20-1ubuntu0.1	0.23.20-1ubuntu0.1+esm1	1
library/mongo :8.0.11	dca8d11fe467	p11-kit@0.25.3-4ubuntu2.1	0.25.3-4ubuntu2.2	1
library/mysql :8.0-debian	9382e4f6f7f0	p11-kit@0.24.1-2	no fix listed	1
library/neo4j :2026.05.0-enterprise	2caf944aa4a5	p11-kit@0.25.5-3	no fix listed	1
library/neo4j :2026.02.2	5ab4ab0358cf	p11-kit@0.25.5-3	no fix listed	1
library/neo4j :2026.05.0	6c162e2432f8	p11-kit@0.25.5-3	no fix listed	1
library/nextcloud :31.0.6-apache	588609d76b21	p11-kit@0.24.1-2	no fix listed	1
library/nextcloud :34.0.4 :34.0.4-apache	8418c398d767	p11-kit@0.25.5-3	no fix listed	1
library/nextcloud :31.0.10-apache	b7faa1653c39	p11-kit@0.25.5-3	no fix listed	1
library/nextcloud :34.0.3 :34.0.3-apache	b97df9e0e1ee	p11-kit@0.25.5-3	no fix listed	1
library/nextcloud :34.0.4-apache	de4ad9389386	p11-kit@0.25.5-3	no fix listed	1
library/nginx :1.27.4	09369da6b103	p11-kit@0.24.1-2	no fix listed	1
library/nginx :1.29	1881968aff6f	p11-kit@0.25.5-3	no fix listed	1
library/nginx :1.27	6784fb0834aa	p11-kit@0.24.1-2	no fix listed	1
library/nginx :1.25.1	67f9a4f10d14	p11-kit@0.24.1-2	no fix listed	1
library/nginx :1.25.4	9ff236ed47fe	p11-kit@0.24.1-2	no fix listed	1
library/nginx :1.31	a53fc6c27208	p11-kit@0.25.5-3	no fix listed	1
library/nginx :1.27.3	fb197595ebe7	p11-kit@0.24.1-2	no fix listed	1
library/node :22-bookworm-slim	83f487e0a634	p11-kit@0.24.1-2	no fix listed	1
library/node :20	8f693eaa7e0a	p11-kit@0.24.1-2	no fix listed	1
library/node :latest	f5d1cc40abc1	p11-kit@0.25.5-3	no fix listed	1
library/php :8.4-fpm	59fa733c9af6	p11-kit@0.25.5-3	no fix listed	1
library/phpmyadmin :5.2.3-apache	adc486045303	p11-kit@0.25.5-3	no fix listed	1
library/postgres :18.0	073e7c8b84e2	p11-kit@0.25.5-3	no fix listed	1
library/postgres :17.4	304ab8135187	p11-kit@0.24.1-2	no fix listed	1
library/postgres :18.4	3a82e1f56c8f	p11-kit@0.25.5-3	no fix listed	1
library/postgres :16.11	468e1f126ca5	p11-kit@0.25.5-3	no fix listed	1
library/postgres :16.6	557fea37a744	p11-kit@0.24.1-2	no fix listed	1
library/postgres :18.3	69e8582b781c	p11-kit@0.25.5-3	no fix listed	1
library/postgres :15.18	6eb0add3b77c	p11-kit@0.25.5-3	no fix listed	1
library/postgres :15.3	8775adb39f0d	p11-kit@0.24.1-2	no fix listed	1
library/postgres :18.4	8ff36f3c6637	p11-kit@0.25.5-3	no fix listed	1
library/postgres :18.3	a9abf4275f9e	p11-kit@0.25.5-3	no fix listed	1
library/postgres :17.5	aadf2c0696f5	p11-kit@0.25.5-3	no fix listed	1
library/postgres :13.12	ced3ba927f4c	p11-kit@0.24.1-2	no fix listed	1
library/postgres :15.18-bookworm	e8db9bd3e9e1	p11-kit@0.24.1-2	no fix listed	1
library/postgres :14.22	eba8ddbdd837	p11-kit@0.25.5-3	no fix listed	1
library/postgres :17.10	ebba4f4de37f	p11-kit@0.25.5-3	no fix listed	1
library/postgres :17.5-bookworm	fbcea1bd13b6	p11-kit@0.24.1-2	no fix listed	1
library/python :3.10	70c9cc675605	p11-kit@0.25.5-3	no fix listed	1
library/python :3.8	d41127070014	p11-kit@0.24.1-2	no fix listed	1
library/python :3.9	da5aee29682d	p11-kit@0.25.5-3	no fix listed	1
library/rabbitmq :3.12.10	0742852455ad	p11-kit@0.24.0-6build1	0.24.0-6ubuntu0.1	1
library/rabbitmq :3.11.5-management	1b0f675d2f24	p11-kit@0.23.20-1ubuntu0.1	0.23.20-1ubuntu0.1+esm1	1
library/rabbitmq :4.2.8	7561d672fae4	p11-kit@0.25.3-4ubuntu2.1	0.25.3-4ubuntu2.2	1
library/rabbitmq :3.7-management	b6dd45cc35b3	p11-kit@0.23.9-2	0.23.9-2ubuntu0.1+esm1	1
library/rabbitmq :4.3.4-management	eb5295d08332	p11-kit@0.25.3-4ubuntu2.1	0.25.3-4ubuntu2.2	1
library/redis :8.4.0	3906b477e4b6	p11-kit@0.24.1-2	no fix listed	1