CVE-2026-18938

Medium

Advisory

Published 7 Aug 2026In the index since 5 Sept 2026

Severity: Medium; worst across findings
CVSS: 6.2; base score, highest
EPSS: 0.001; 1st percentile
CISA KEV: Not listed; no confirmed exploitation
Charts affected: 2,154; of 17,803 indexed, latest versions
Container images: 2,107; deployed by those charts
Fix available: 2 of 2; affected packages

CVE-2026-18938 affecting package p11-kit for versions less than 0.26.5-1

Carried by container images the latest versions of 2,154 of 17,803 indexed charts deploy, on 2,107 images.

Affected package	Affected versions	Fixed in	Images
p11-kitdeb	0.23.9-2, 0.23.9-2ubuntu0.1, 0.23.20-1build1, 0.23.20-1ubuntu0.1+8 more	0.23.9-2ubuntu0.1+esm1, 0.23.20-1ubuntu0.1+esm1, 0.24.0-6ubuntu0.1, 0.25.3-4ubuntu2.2+1 more	2,106
p11-kitrpm	0.25.0-1.azl3	0.26.5-1	1

OSV records: DEBIAN-CVE-2026-18938 UBUNTU-CVE-2026-18938 AZL-95481 ECHO-09a0-891c-526d
Also known as: USN-8687-1

Charts affected

2,154 by stars

Chart

Latest

Affected images

Radar Score

changedetection-iozekker6

1.101.0

1 of 1 See more

changedetection-io zekker6 1.101.0

1 of the 1 container images this version deploys carry CVE-2026-18938.

Container image	Digest	Package	Fixed in
ghcr.io/dgtlmoon/changedetection.io :0.60.6	eb4a9f718801	p11-kit@0.24.1-2	no fix listed

Open the chart page →

2,649

NEW_APPzekker6

0.0.0

1 of 1 See more

NEW_APP zekker6 0.0.0

1 of the 1 container images this version deploys carry CVE-2026-18938.

Container image	Digest	Package	Fixed in
library/nginx :latest	05b8cb60c354	p11-kit@0.25.5-3	no fix listed

Open the chart page →

1,879

clickhousezloi-space

1.2.0

2 of 3 See more

clickhouse zloi-space 1.2.0

2 of the 3 container images this version deploys carry CVE-2026-18938.

Container image	Digest	Package	Fixed in
yandex/clickhouse-client :21.3	863f94a0f607	p11-kit@0.23.9-2ubuntu0.1	0.23.9-2ubuntu0.1+esm1
yandex/clickhouse-server :21.3.20	4eccfffb01d7	p11-kit@0.23.20-1ubuntu0.1	0.23.20-1ubuntu0.1+esm1

Open the chart page →

9,280

zoo-project-druzoo-project

0.10.4

1 of 6 See more

zoo-project-dru zoo-project 0.10.4

1 of the 6 container images this version deploys carry CVE-2026-18938.

Container image	Digest	Package	Fixed in
zooproject/zoo-project :dru-19f3c4eed7c9ec9d1f0375bbe59f9d204a42bd3a	9a507cb7e2dd	p11-kit@0.24.0-6build1	0.24.0-6ubuntu0.1

Open the chart page →

7,949

Container images carrying it

2,107 by charts deploying them

A fixed version is listed for 2 of the 2 affected packages.

Container image	Digest	Package	Fixed in	Used by
ghcr.io/djerfy/zabbix-kubernetes-discovery :v1.4.20	7a50c07e7c69	p11-kit@0.25.3-4ubuntu2.1	0.25.3-4ubuntu2.2	1
ghcr.io/donkie/spoolman :0.24.0	42135965c42d	p11-kit@0.24.1-2	no fix listed	1
ghcr.io/dragoangel/mcrouter :v2026.06.29.00	42afcffe67d0	p11-kit@0.25.3-4ubuntu2.1	0.25.3-4ubuntu2.2	1
ghcr.io/drewburr-labs/evobot :3.0.0	4ddbb244c82f	p11-kit@0.24.1-2	no fix listed	1
ghcr.io/drewburr-labs/mum-discord-bot :3.1.2	6e82914e1051	p11-kit@0.24.1-2	no fix listed	1
ghcr.io/dysnix/docker-bitcoind :0.29.0	490ca8e3dd21	p11-kit@0.25.3-4ubuntu2.1	0.25.3-4ubuntu2.2	1
ghcr.io/edgelesssys/coordinator :v0.5.0	bcd5b8d4c45c	p11-kit@0.23.9-2ubuntu0.1	0.23.9-2ubuntu0.1+esm1	1
ghcr.io/edgelesssys/edgelessdb-sgx-1gb :v0.3.2	7e1d7a11a11a	p11-kit@0.23.20-1ubuntu0.1	0.23.20-1ubuntu0.1+esm1	1
ghcr.io/edgelesssys/marblerun/coordinator :v1.9.2	e589db0d0a2c	p11-kit@0.24.0-6build1	0.24.0-6ubuntu0.1	1
ghcr.io/egos-tech/smtp :1.2.2	b5451793ad91	p11-kit@0.25.5-3	no fix listed	1
ghcr.io/element-hq/synapse :v1.111.0	22ae556e0de4	p11-kit@0.24.1-2	no fix listed	1
ghcr.io/enderdash-com/enderdash-agent :latest	8525a1a67958	p11-kit@0.25.3-4ubuntu2.1	0.25.3-4ubuntu2.2	1
ghcr.io/ente/web :5ab0c5b4c7a89c4e470ef6f793600da33cebf35d	3f4864eb7f11	p11-kit@0.25.5-3	no fix listed	1
ghcr.io/esphome/esphome :latest	000c5ee5ee96	p11-kit@0.25.5-3	no fix listed	1
ghcr.io/esphome/esphome :2026.4.0	78a82d810709	p11-kit@0.24.1-2	no fix listed	1
ghcr.io/ferama/rospo :v0.12.0	ab40c1745534	p11-kit@0.24.1-2	no fix listed	1
ghcr.io/ferama/vipien :v0.5.3	923a3f704b21	p11-kit@0.23.20-1ubuntu0.1	0.23.20-1ubuntu0.1+esm1	1
ghcr.io/feresberbeche/alertigate :1.2.1	628d49e0e01b	p11-kit@0.25.5-3	no fix listed	1
ghcr.io/firecrawl/firecrawl :2.11.349	ddbbb3023fea	p11-kit@0.24.1-2	no fix listed	1
ghcr.io/firecrawl/nuq-postgres :latest	f9388bd25ae2	p11-kit@0.25.5-3	no fix listed	1
ghcr.io/firecrawl/playwright-service :latest	1f6eba640320	p11-kit@0.24.1-2	no fix listed	1
ghcr.io/flanksource/mission-control-ai-assistant :1.0.12	29a635cbeeb5	p11-kit@0.24.1-2	no fix listed	1
ghcr.io/flanksource/postgres :17.6-497383c	ebcf66281fc1	p11-kit@0.24.1-2	no fix listed	1
ghcr.io/flaresolverr/flaresolverr :v3.4.0	ab535d1fef5d	p11-kit@0.24.1-2	no fix listed	1
ghcr.io/fluent/fluentd-aggregator-docker-image :2.1.0	ad25916eebbb	p11-kit@0.25.5-3	no fix listed	1
ghcr.io/formancehq/console :console-on.v1.1.1	a4d32c2f68b3	p11-kit@0.24.1-2	no fix listed	1
ghcr.io/formancehq/ledger :v1.9.2	03c1ddbda33b	p11-kit@0.24.0-6build1	0.24.0-6ubuntu0.1	1
ghcr.io/formancehq/membership :v1.11.0	24a0113d5fb0	p11-kit@0.24.0-6build1	0.24.0-6ubuntu0.1	1
ghcr.io/getsentry/sentry :26.7.2	7c5052aa4e3c	p11-kit@0.24.1-2	no fix listed	1
ghcr.io/getsentry/snuba :26.7.2	10f8d164109b	p11-kit@0.25.5-3	no fix listed	1
ghcr.io/getsentry/taskbroker :26.7.2	64d0da74a578	p11-kit@0.24.1-2	no fix listed	1
ghcr.io/goauthentik/server :2026.2.1	46a71d75dfd3	p11-kit@0.25.5-3	no fix listed	1
ghcr.io/goauthentik/server :2026.8.3	ab9b4e8cc4ab	p11-kit@0.25.5-3	no fix listed	1
ghcr.io/goauthentik/server :2026.5.6	ed120caf710c	p11-kit@0.25.5-3	no fix listed	1
ghcr.io/graphprotocol/availability-oracle :sha-28312fd	472a25038957	p11-kit@0.24.1-2	no fix listed	1
ghcr.io/gregperlinli/certvault :2.12.0	a7d0cc9e260a	p11-kit@0.25.3-4ubuntu2.1	0.25.3-4ubuntu2.2	1
ghcr.io/grycap/im :latest	06a16d4f279f	p11-kit@0.25.3-4ubuntu2.1	0.25.3-4ubuntu2.2	1
ghcr.io/haveagitgat/tdarr :2.00.18.2	3fbe4c29d14c	p11-kit@0.23.20-1ubuntu0.1	0.23.20-1ubuntu0.1+esm1	1
ghcr.io/hemslo/chat-search :latest	39d48995a5bd	p11-kit@0.24.1-2	no fix listed	1
ghcr.io/home-operations/plex :1.43.1	a9c3723cb31c	p11-kit@0.25.3-4ubuntu2.1	0.25.3-4ubuntu2.2	1
ghcr.io/htunn/ansible-inspec :0.2.12	cd25a5cc3f1b	p11-kit@0.25.5-3	no fix listed	1
ghcr.io/huggingface/text-embeddings-inference :cpu-1.6	66db77d7856c	p11-kit@0.24.1-2	no fix listed	1
ghcr.io/huggingface/text-embeddings-inference :cpu-1.9.3	ad950d30878e	p11-kit@0.24.1-2	no fix listed	1
ghcr.io/huscker/townsquare-backend :2.15.2	e106681e7673	p11-kit@0.24.1-2	no fix listed	1
ghcr.io/hypolia/kanri :0.1.2-rc4	fa7d5cc7fb7d	p11-kit@0.24.1-2	no fix listed	1
ghcr.io/icegatetech/icegate-ingest :0.1.1	bae3c441894a	p11-kit@0.24.1-2	no fix listed	1
ghcr.io/icegatetech/icegate-maintain :0.1.1	93e85b2b76ee	p11-kit@0.24.1-2	no fix listed	1
ghcr.io/icegatetech/icegate-query :0.1.1	7542b4e7fff2	p11-kit@0.24.1-2	no fix listed	1
ghcr.io/ignisda/ryot :v10.5.0	a752b6aee537	p11-kit@0.24.1-2	no fix listed	1
ghcr.io/iisas/domino-frontend :k8s	8e53861be292	p11-kit@0.24.1-2	no fix listed	1