StackRadar

CVE-2026-18938

Medium

Advisory

Published 7 Aug 2026In the index since 5 Sept 2026
Severity
Medium
worst across findings
CVSS
6.2
base score, highest
EPSS
0.001
1st percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
2,158
of 17,790 indexed, latest versions
Container images
2,114
deployed by those charts
Fix available
2 of 2
affected packages

CVE-2026-18938 affecting package p11-kit for versions less than 0.26.5-1

Carried by container images the latest versions of 2,158 of 17,790 indexed charts deploy, on 2,114 images.

Affected packageAffected versionsFixed inImages
p11-kitdeb0.23.9-2, 0.23.9-2ubuntu0.1, 0.23.20-1build1, 0.23.20-1ubuntu0.1+8 more0.23.9-2ubuntu0.1+esm1, 0.23.20-1ubuntu0.1+esm1, 0.24.0-6ubuntu0.1, 0.25.3-4ubuntu2.2+1 more2,113
p11-kitrpm0.25.0-1.azl30.26.5-11
OSV records
DEBIAN-CVE-2026-18938UBUNTU-CVE-2026-18938AZL-95481ECHO-09a0-891c-526d
Also known as
USN-8687-1

Charts affected

2,158 by stars
ChartLatestAffected imagesRadar Score
pyroscopegrafana2.3.11 of 3See more

pyroscope grafana 2.3.1

1 of the 3 container images this version deploys carry CVE-2026-18938.

Container imageDigestPackageFixed in
grafana/alloy:v1.12.2f94b1c82957a
p11-kit@0.25.3-4ubuntu2.1
0.25.3-4ubuntu2.2

Open the chart page →

3,214
plantumlstevehipwellVerified publisher3.49.01 of 1See more

plantuml stevehipwell 3.49.0

1 of the 1 container images this version deploys carry CVE-2026-18938.

Container imageDigestPackageFixed in
plantuml/plantuml-server:jetty-v1.2026.85f6f99ec2fc1
p11-kit@0.25.3-4ubuntu2.1
0.25.3-4ubuntu2.2

Open the chart page →

1,926
rabbitmqgroundhog2k2.3.81 of 2See more

rabbitmq groundhog2k 2.3.8

1 of the 2 container images this version deploys carry CVE-2026-18938.

Container imageDigestPackageFixed in
library/rabbitmq:4.3.51773ab33af6a
p11-kit@0.25.3-4ubuntu2.1
0.25.3-4ubuntu2.2

Open the chart page →

1,045
stacks-blockchainhirosystemsVerified publisher2.2.21 of 1See more

stacks-blockchain hirosystems 2.2.2

1 of the 1 container images this version deploys carry CVE-2026-18938.

Container imageDigestPackageFixed in
blockstack/stacks-core:3.2.0.0.0f79944317326
p11-kit@0.24.1-2
no fix listed

Open the chart page →

1,396
ingresskongOfficialVerified publisher0.24.01 of 2See more

ingress kong 0.24.0

1 of the 2 container images this version deploys carry CVE-2026-18938.

Container imageDigestPackageFixed in
library/kong:3.92a8cf3b110cd
p11-kit@0.25.3-4ubuntu2.1
0.25.3-4ubuntu2.2

Open the chart page →

1,186
oktetooktetoOfficialVerified publisher0.0.0-2026-08-171 of 10See more

okteto okteto 0.0.0-2026-08-17

1 of the 10 container images this version deploys carry CVE-2026-18938.

Container imageDigestPackageFixed in
ghcr.io/okteto/pipeline-runner:0.0.0-2026-08-173e56bdd1b90d
p11-kit@0.25.5-3
no fix listed

Open the chart page →

5,532
yourlsyourlsOfficialVerified publisher8.9.111 of 2See more

yourls yourls 8.9.11

1 of the 2 container images this version deploys carry CVE-2026-18938.

Container imageDigestPackageFixed in
ghcr.io/yourls/yourls:1.10.69b220ea83329
p11-kit@0.25.5-3
no fix listed

Open the chart page →

2,269
apisix-ingress-controllerapisix1.3.11 of 2See more

apisix-ingress-controller apisix 1.3.1

1 of the 2 container images this version deploys carry CVE-2026-18938.

Container imageDigestPackageFixed in
ghcr.io/api7/adc:0.27.1f65f53dd9668
p11-kit@0.24.1-2
no fix listed

Open the chart page →

1,661
actualbudgetcommunity-chartsVerified publisher1.9.41 of 1See more

actualbudget community-charts 1.9.4

1 of the 1 container images this version deploys carry CVE-2026-18938.

Container imageDigestPackageFixed in
actualbudget/actual-server:26.9.0552beab3dec8
p11-kit@0.24.1-2
no fix listed

Open the chart page →

1,112
concourseconcourseVerified publisher20.3.01 of 2See more

concourse concourse 20.3.0

1 of the 2 container images this version deploys carry CVE-2026-18938.

Container imageDigestPackageFixed in
library/postgres:1767f41722b7a8
p11-kit@0.25.5-3
no fix listed

Open the chart page →

2,054
san-iscsi-csienixOfficialVerified publisher4.0.21 of 7See more

san-iscsi-csi enix 4.0.2

1 of the 7 container images this version deploys carry CVE-2026-18938.

Container imageDigestPackageFixed in
enix/san-iscsi-csi:v4.0.2f963da81ecf7
p11-kit@0.23.9-2ubuntu0.1
0.23.9-2ubuntu0.1+esm1

Open the chart page →

4,168
openprojectopenproject-helm-chartsOfficialVerified publisher13.11.04 of 5See more

openproject openproject-helm-charts 13.11.0

4 of the 5 container images this version deploys carry CVE-2026-18938.

Container imageDigestPackageFixed in
bitnamilegacy/memcached:1.6.24-debian-12-r01d80b6a96f00
p11-kit@0.24.1-2
no fix listed
library/postgres:16f1c3376c26f2
p11-kit@0.25.5-3
no fix listed
openproject/hocuspocus:release-338001b288dc1359dfb5
p11-kit@0.24.1-2
no fix listed
openproject/openproject:17.8.0-slim48952034215d
p11-kit@0.25.5-3
no fix listed

Open the chart page →

20,067
wazuhwazuh-helm-morgovedVerified publisher2.0.71 of 5See more

wazuh wazuh-helm-morgoved 2.0.7

1 of the 5 container images this version deploys carry CVE-2026-18938.

Container imageDigestPackageFixed in
kinseii/wazuh-agent:4.14.17160eb143728
p11-kit@0.24.1-2
no fix listed

Open the chart page →

11,431
lemmyananace-chartsVerified publisher0.6.152 of 5See more

lemmy ananace-charts 0.6.15

2 of the 5 container images this version deploys carry CVE-2026-18938.

Container imageDigestPackageFixed in
dessalines/lemmy:0.19.2079e9f02c286c
p11-kit@0.24.1-2
no fix listed
dessalines/lemmy-ui:0.19.20ee4c620d8e93
p11-kit@0.25.5-3
no fix listed

Open the chart page →

7,255
zabbixcetic3.1.35 of 5See more

zabbix cetic 3.1.3

5 of the 5 container images this version deploys carry CVE-2026-18938.

Container imageDigestPackageFixed in
library/postgres:14156f0b253fd6
p11-kit@0.25.5-3
no fix listed
zabbix/zabbix-agent2:ubuntu-6.0.8e5b594057c9c
p11-kit@0.24.0-6build1
0.24.0-6ubuntu0.1
zabbix/zabbix-server-pgsql:ubuntu-6.0.8d59ffa07f615
p11-kit@0.24.0-6build1
0.24.0-6ubuntu0.1
zabbix/zabbix-web-nginx-pgsql:ubuntu-6.0.899e9a090b516
p11-kit@0.24.0-6build1
0.24.0-6ubuntu0.1
zabbix/zabbix-web-service:ubuntu-6.0.8ee4baa872280
p11-kit@0.24.0-6build1
0.24.0-6ubuntu0.1

Open the chart page →

33,928
csi-driver-smbcsi-driver-smbVerified publisher1.20.31 of 6See more

csi-driver-smb csi-driver-smb 1.20.3

1 of the 6 container images this version deploys carry CVE-2026-18938.

Container imageDigestPackageFixed in
registry.k8s.io/sig-storage/smbplugin:v1.20.3dc7746bb081e
p11-kit@0.24.1-2
no fix listed

Open the chart page →

3,005
kube-downscalerdeliveryheroVerified publisher0.7.61 of 1See more

kube-downscaler deliveryhero 0.7.6

1 of the 1 container images this version deploys carry CVE-2026-18938.

Container imageDigestPackageFixed in
hjacobs/kube-downscaler:23.2.0-6-gc9b88e84b2147f47425
p11-kit@0.24.1-2
no fix listed

Open the chart page →

4,310
synapsehalkeye0.40.01 of 2See more

synapse halkeye 0.40.0

1 of the 2 container images this version deploys carry CVE-2026-18938.

Container imageDigestPackageFixed in
ghcr.io/element-hq/synapse:v1.111.022ae556e0de4
p11-kit@0.24.1-2
no fix listed

Open the chart page →

6,562
stacks-blockchain-apihirosystemsVerified publisher6.5.12 of 5See more

stacks-blockchain-api hirosystems 6.5.1

2 of the 5 container images this version deploys carry CVE-2026-18938.

Container imageDigestPackageFixed in
blockstack/stacks-core:3.2.0.0.0f79944317326
p11-kit@0.24.1-2
no fix listed
hirosystems/stacks-blockchain-api:8.13.29c98b23c1515
p11-kit@0.24.1-2
no fix listed

Open the chart page →

8,409
imgproxyimgproxy1.1.01 of 1See more

imgproxy imgproxy 1.1.0

1 of the 1 container images this version deploys carry CVE-2026-18938.

Container imageDigestPackageFixed in
ghcr.io/imgproxy/imgproxy:v3.30.074c1bee92e04
p11-kit@0.25.3-4ubuntu2.1
0.25.3-4ubuntu2.2

Open the chart page →

2,373
redashredash4.2.01 of 3See more

redash redash 4.2.0

1 of the 3 container images this version deploys carry CVE-2026-18938.

Container imageDigestPackageFixed in
redash/redash:25.8.000d813437db5
p11-kit@0.24.1-2
no fix listed

Open the chart page →

6,049
daskdask2024.1.12 of 2See more

dask dask 2024.1.1

2 of the 2 container images this version deploys carry CVE-2026-18938.

Container imageDigestPackageFixed in
ghcr.io/dask/dask:2024.1.0080150de7d86
p11-kit@0.23.20-1ubuntu0.1
0.23.20-1ubuntu0.1+esm1
ghcr.io/dask/dask-notebook:2024.1.0f53bde3acd4f
p11-kit@0.24.0-6build1
0.24.0-6ubuntu0.1

Open the chart page →

12,838
dgraphdgraph24.1.41 of 1See more

dgraph dgraph 24.1.4

1 of the 1 container images this version deploys carry CVE-2026-18938.

Container imageDigestPackageFixed in
dgraph/dgraph:v24.1.4b57fa31f9b7f
p11-kit@0.25.3-4ubuntu2.1
0.25.3-4ubuntu2.2

Open the chart page →

3,044
factorio-server-chartsfactorio-server-chartsVerified publisher2.5.21 of 1See more

factorio-server-charts factorio-server-charts 2.5.2

1 of the 1 container images this version deploys carry CVE-2026-18938.

Container imageDigestPackageFixed in
factoriotools/factorio:lateste9227748c507
p11-kit@0.25.5-3
no fix listed

Open the chart page →

1,459
netbirdjaconiVerified publisher0.15.12 of 4See more

netbird jaconi 0.15.1

2 of the 4 container images this version deploys carry CVE-2026-18938.

Container imageDigestPackageFixed in
library/golang:latest512690a56605
p11-kit@0.25.5-3
no fix listed
netbirdio/management:0.45.10c9994b393ea
p11-kit@0.25.3-4ubuntu2.1
0.25.3-4ubuntu2.2

Open the chart page →

8,567
litellm-helmlitellm1.101.01 of 2See more

litellm-helm litellm 1.101.0

1 of the 2 container images this version deploys carry CVE-2026-18938.

Container imageDigestPackageFixed in
bitnamilegacy/postgresql:16.2.0-debian-12-r6ea55532b6f75
p11-kit@0.24.1-2
no fix listed

Open the chart page →

4,991
localstacklocalstack0.7.01 of 1See more

localstack localstack 0.7.0

1 of the 1 container images this version deploys carry CVE-2026-18938.

Container imageDigestPackageFixed in
localstack/localstack-pro:latest4aef81c53168
p11-kit@0.25.5-3
no fix listed

Open the chart page →

2,228
gotenbergmaikumoriVerified publisher1.25.01 of 1See more

gotenberg maikumori 1.25.0

1 of the 1 container images this version deploys carry CVE-2026-18938.

Container imageDigestPackageFixed in
gotenberg/gotenberg:8.36.087c16b9f3642
p11-kit@0.25.5-3
no fix listed

Open the chart page →

9,747
argocdnicklasfrahm-argocdVerified publisher0.3.01 of 2See more

argocd nicklasfrahm-argocd 0.3.0

1 of the 2 container images this version deploys carry CVE-2026-18938.

Container imageDigestPackageFixed in
quay.io/argoproj/argocd:v3.1.1a36ab0c0860c
p11-kit@0.25.3-4ubuntu2.1
0.25.3-4ubuntu2.2

Open the chart page →

5,293
oneuptimeoneuptimeOfficialVerified publisher13.0.53 of 7See more

oneuptime oneuptime 13.0.5

3 of the 7 container images this version deploys carry CVE-2026-18938.

Container imageDigestPackageFixed in
library/postgres:latest4ef4dbc939d6
p11-kit@0.25.5-3
no fix listed
oneuptime/probe:release1069c9458fe7
p11-kit@0.24.1-2
no fix listed
oneuptime/runner:releasef6f2c1c536bc
p11-kit@0.25.5-3
no fix listed

Open the chart page →

11,432
openclawopenclaw-helmVerified publisher1.5.401 of 2See more

openclaw openclaw-helm 1.5.40

1 of the 2 container images this version deploys carry CVE-2026-18938.

Container imageDigestPackageFixed in
ghcr.io/openclaw/openclaw:2026.5.22dcfd14877740
p11-kit@0.24.1-2
no fix listed

Open the chart page →

5,710
prometheus-cloudwatch-exporterprometheus-communityVerified publisher0.28.21 of 1See more

prometheus-cloudwatch-exporter prometheus-community 0.28.2

1 of the 1 container images this version deploys carry CVE-2026-18938.

Container imageDigestPackageFixed in
prom/cloudwatch-exporter:v0.16.071c2e988af06
p11-kit@0.25.3-4ubuntu2
0.25.3-4ubuntu2.2

Open the chart page →

3,428
stalwart-mailstalwart-mailVerified publisher2.0.101 of 1See more

stalwart-mail stalwart-mail 2.0.10

1 of the 1 container images this version deploys carry CVE-2026-18938.

Container imageDigestPackageFixed in
stalwartlabs/stalwart:v0.16.2074ca4f7f6885
p11-kit@0.25.5-3
no fix listed

Open the chart page →

1,425
openvpn-asstenicVerified publisher0.1.91 of 1See more

openvpn-as stenic 0.1.9

1 of the 1 container images this version deploys carry CVE-2026-18938.

Container imageDigestPackageFixed in
ghcr.io/linuxserver/openvpn-as:version-2.8.6-916f8e7d-ubuntu184ee0764310e7
p11-kit@0.23.9-2
0.23.9-2ubuntu0.1+esm1

Open the chart page →

15,602
jellyfinutkuozdemirVerified publisher2.0.01 of 1See more

jellyfin utkuozdemir 2.0.0

1 of the 1 container images this version deploys carry CVE-2026-18938.

Container imageDigestPackageFixed in
linuxserver/jellyfin:10.7.72427dde159a2
p11-kit@0.23.20-1ubuntu0.1
0.23.20-1ubuntu0.1+esm1

Open the chart page →

7,920
camel-kcamel-kVerified publisher2.11.01 of 1See more

camel-k camel-k 2.11.0

1 of the 1 container images this version deploys carry CVE-2026-18938.

Container imageDigestPackageFixed in
apache/camel-k:2.11.0d173e7efe258
p11-kit@0.26.2-2
no fix listed

Open the chart page →

1,293
glasskube-operatorglasskubeOfficialVerified publisher0.12.21 of 3See more

glasskube-operator glasskube 0.12.2

1 of the 3 container images this version deploys carry CVE-2026-18938.

Container imageDigestPackageFixed in
glasskube/operator:0.12.2be5133100d63
p11-kit@0.24.0-6build1
0.24.0-6ubuntu0.1

Open the chart page →

11,987
outlinekubitodevVerified publisher1.2.21 of 4See more

outline kubitodev 1.2.2

1 of the 4 container images this version deploys carry CVE-2026-18938.

Container imageDigestPackageFixed in
outlinewiki/outline:0.82.0494dfb9249a6
p11-kit@0.24.1-2
no fix listed

Open the chart page →

5,375
milvusmilvus-helm5.0.282 of 4See more

milvus milvus-helm 5.0.28

2 of the 4 container images this version deploys carry CVE-2026-18938.

Container imageDigestPackageFixed in
apachepulsar/pulsar:3.0.79c9947de139d
p11-kit@0.24.0-6build1
0.24.0-6ubuntu0.1
milvusdb/etcd:3.5.25-r1fededb2f2d63
p11-kit@0.24.0-6build1
0.24.0-6ubuntu0.1

Open the chart page →

10,782
prefect-serverprefectVerified publisher2026.9.141419102 of 2See more

prefect-server prefect 2026.9.14141910

2 of the 2 container images this version deploys carry CVE-2026-18938.

Container imageDigestPackageFixed in
bitnamilegacy/postgresql:14.13.0df6ec02e2b9a
p11-kit@0.24.1-2
no fix listed
prefecthq/prefect:3.8.6-python3.11f518ebb9c353
p11-kit@0.25.5-3
no fix listed

Open the chart page →

5,556
rocketmqrocketmq12.6.01 of 2See more

rocketmq rocketmq 12.6.0

1 of the 2 container images this version deploys carry CVE-2026-18938.

Container imageDigestPackageFixed in
apache/rocketmq:5.4.0319cd8a81ed1
p11-kit@0.25.3-4ubuntu2.1
0.25.3-4ubuntu2.2

Open the chart page →

6,400
snipeitt3n3.4.11 of 2See more

snipeit t3n 3.4.1

1 of the 2 container images this version deploys carry CVE-2026-18938.

Container imageDigestPackageFixed in
snipe/snipe-it:v6.0.1455fb7636a98c
p11-kit@0.23.20-1ubuntu0.1
0.23.20-1ubuntu0.1+esm1

Open the chart page →

18,589
codefreshcodefresh-onpremOfficialVerified publisher2.12.144 of 42See more

codefresh codefresh-onprem 2.12.14

4 of the 42 container images this version deploys carry CVE-2026-18938.

Container imageDigestPackageFixed in
bitnamilegacy/consul:1.21.4-debian-12-r133ae872fc99d
p11-kit@0.24.1-2
no fix listed
bitnamilegacy/mongodb:7.0.14-debian-12-r321e8f8baa432
p11-kit@0.24.1-2
no fix listed
bitnamilegacy/rabbitmq:4.1.39e635efba431
p11-kit@0.24.1-2
no fix listed
quay.io/codefresh/redis:7.4.3-debian-12-r0935f97598255
p11-kit@0.24.1-2
no fix listed

Open the chart page →

15,093
contourcontour0.8.01 of 2See more

contour contour 0.8.0

1 of the 2 container images this version deploys carry CVE-2026-18938.

Container imageDigestPackageFixed in
envoyproxy/envoy:v1.38.4447f857a0146
p11-kit@0.24.0-6build1
0.24.0-6ubuntu0.1

Open the chart page →

1,524
apim3graviteeioVerified publisher4.12.192 of 4See more

apim3 graviteeio 4.12.19

2 of the 4 container images this version deploys carry CVE-2026-18938.

Container imageDigestPackageFixed in
graviteeio/apim-gateway:4.12.19-debian05fd67a93056
p11-kit@0.25.5-3
no fix listed
graviteeio/apim-management-api:4.12.19-debian27374522cd04
p11-kit@0.25.5-3
no fix listed

Open the chart page →

4,852
wordpressgroundhog2k0.16.41 of 1See more

wordpress groundhog2k 0.16.4

1 of the 1 container images this version deploys carry CVE-2026-18938.

Container imageDigestPackageFixed in
library/wordpress:7.1.0-apache5a93c470ae82
p11-kit@0.25.5-3
no fix listed

Open the chart page →

3,752
velero-uiotwldVerified publisher0.15.01 of 1See more

velero-ui otwld 0.15.0

1 of the 1 container images this version deploys carry CVE-2026-18938.

Container imageDigestPackageFixed in
otwld/velero-ui:0.10.2d1954b759e47
p11-kit@0.24.1-2
no fix listed

Open the chart page →

1,354
stackstorm-hastackstormVerified publisher1.1.012 of 17See more

stackstorm-ha stackstorm 1.1.0

12 of the 17 container images this version deploys carry CVE-2026-18938.

Container imageDigestPackageFixed in
stackstorm/st2actionrunner:3.888235ba70cad
p11-kit@0.23.20-1ubuntu0.1
0.23.20-1ubuntu0.1+esm1
stackstorm/st2api:3.86f56d239d280
p11-kit@0.23.20-1ubuntu0.1
0.23.20-1ubuntu0.1+esm1
stackstorm/st2auth:3.833ecfda16608
p11-kit@0.23.20-1ubuntu0.1
0.23.20-1ubuntu0.1+esm1
stackstorm/st2garbagecollector:3.84e3f8c7ca52d
p11-kit@0.23.20-1ubuntu0.1
0.23.20-1ubuntu0.1+esm1
stackstorm/st2notifier:3.8f190a6212195
p11-kit@0.23.20-1ubuntu0.1
0.23.20-1ubuntu0.1+esm1
stackstorm/st2rulesengine:3.8259503496ff9
p11-kit@0.23.20-1ubuntu0.1
0.23.20-1ubuntu0.1+esm1
stackstorm/st2scheduler:3.8b1de2055c362
p11-kit@0.23.20-1ubuntu0.1
0.23.20-1ubuntu0.1+esm1
stackstorm/st2sensorcontainer:3.8b1a338f64773
p11-kit@0.23.20-1ubuntu0.1
0.23.20-1ubuntu0.1+esm1
stackstorm/st2stream:3.81c8904a3bf67
p11-kit@0.23.20-1ubuntu0.1
0.23.20-1ubuntu0.1+esm1
stackstorm/st2timersengine:3.81bf35bfaf00c
p11-kit@0.23.20-1ubuntu0.1
0.23.20-1ubuntu0.1+esm1
stackstorm/st2web:3.809989a26c8b7
p11-kit@0.23.20-1ubuntu0.1
0.23.20-1ubuntu0.1+esm1
stackstorm/st2workflowengine:3.819fdfffdbba8
p11-kit@0.23.20-1ubuntu0.1
0.23.20-1ubuntu0.1+esm1

Open the chart page →

96,933
supabasetokens-studioVerified publisher1.0.06 of 14See more

supabase tokens-studio 1.0.0

6 of the 14 container images this version deploys carry CVE-2026-18938.

Container imageDigestPackageFixed in
darthsim/imgproxy:v3.26476cb08c816a
p11-kit@0.25.3-4ubuntu2.1
0.25.3-4ubuntu2.2
library/kong:3.8.0712e407b20ea
p11-kit@0.24.0-6build1
0.24.0-6ubuntu0.1
supabase/edge-runtime:v1.59.0eff9c554d649
p11-kit@0.24.1-2
no fix listed
supabase/postgres-meta:v0.84.2d0a96973e9f1
p11-kit@0.24.1-2
no fix listed
supabase/realtime:v2.33.8d207e6e23ad3
p11-kit@0.24.1-2
no fix listed
supabase/studio:20241021-9f9b08326d8070c55e9
p11-kit@0.24.1-2
no fix listed

Open the chart page →

23,365
renterdartur9010Verified publisher1.4.42 of 2See more

renterd artur9010 1.4.4

2 of the 2 container images this version deploys carry CVE-2026-18938.

Container imageDigestPackageFixed in
artur9010/wait-for:v1.0.06b4de3ce8b0e
p11-kit@0.24.1-2
no fix listed
ghcr.io/siafoundation/renterd:2.9.0e0334f124863
p11-kit@0.24.1-2
no fix listed

Open the chart page →

8,586

Container images carrying it

2,114 by charts deploying them

A fixed version is listed for 2 of the 2 affected packages.

Container imageDigestPackageFixed inUsed by
ghcr.io/music-assistant/server:2.7.53522e8a7a8f0
p11-kit@0.24.1-2
no fix listed
1
ghcr.io/music-assistant/server:2.9.950666a6f8d7f
p11-kit@0.24.1-2
no fix listed
1
ghcr.io/music-assistant/server:2.10.3885872224fa5
p11-kit@0.25.5-3
no fix listed
1
ghcr.io/music-assistant/server:2.8.7eef3ee7810d0
p11-kit@0.24.1-2
no fix listed
1
ghcr.io/nathanvaughn/webtrees:2.2.6034151b61a80
p11-kit@0.25.5-3
no fix listed
1
ghcr.io/nefelim4ag/k8s-ssh-bastion:0.5.04d337e14c80b
p11-kit@0.25.3-4ubuntu2
0.25.3-4ubuntu2.2
1
ghcr.io/nefelim4ag/pingdom-operator:0.0.15f8c7afdcf439
p11-kit@0.24.1-2
no fix listed
1
ghcr.io/netbox-community/netbox:v4.7.01685e91c61bb
p11-kit@0.26.2-2
no fix listed
1
ghcr.io/nmshd/backbone-admin-cli:7.2.1f7d095c04a75
p11-kit@0.25.3-4ubuntu2.1
0.25.3-4ubuntu2.2
1
ghcr.io/noahburrell0/sealed-secrets-ui:v0.1.47e7368fb472d
p11-kit@0.24.1-2
no fix listed
1
ghcr.io/observal/observal-api:1.13.1153b8b893232
p11-kit@0.25.5-3
no fix listed
1
ghcr.io/oguzhan-yilmaz/argocd-backup-s3:latestb61c750ade19
p11-kit@0.24.1-2
no fix listed
1
ghcr.io/oguzhan-yilmaz/kdiff-snapshots:0.0.2035bc5ca66d55a
p11-kit@0.24.1-2
no fix listed
1
ghcr.io/oguzhan-yilmaz/kdiff-snapshots:0.0.55d7f93d2182fe
p11-kit@0.24.1-2
no fix listed
1
ghcr.io/oguzhan-yilmaz/steampipe-powerpipe-kubernetes--powerpipe:latesta16ab5ca10a7
p11-kit@0.24.1-2
no fix listed
1
ghcr.io/oguzhan-yilmaz/steampipe-powerpipe-kubernetes--steampipe:latestc0c8d53df9f3
p11-kit@0.24.1-2
no fix listed
1
ghcr.io/okteto/pipeline-runner:0.0.0-2026-08-03:0.0.0-2026-08-173e56bdd1b90d
p11-kit@0.25.5-3
no fix listed
1
ghcr.io/ondrejsika/counter-frontend:latestc4166d2eb8eb
p11-kit@0.24.1-2
no fix listed
1
ghcr.io/opencatalogi/web-app:deva1a7f507f6ae
p11-kit@0.24.1-2
no fix listed
1
ghcr.io/openclaw/openclaw:2026.6.10af7ea052cf21
p11-kit@0.24.1-2
no fix listed
1
ghcr.io/openclaw/openclaw:2026.5.22dcfd14877740
p11-kit@0.24.1-2
no fix listed
1
ghcr.io/opencost/opencost-parquet-exporter:v0.2.1ce85ef0ce665
p11-kit@0.24.1-2
no fix listed
1
ghcr.io/openlit/openlit-controller:0.10.0165efd4469ea
p11-kit@0.24.1-2
no fix listed
1
ghcr.io/openrelik/openrelik-mediator:latest42efc445b19e
p11-kit@0.24.1-2
no fix listed
1
ghcr.io/openrelik/openrelik-metrics:latest3d0f1ddeebf5
p11-kit@0.24.1-2
no fix listed
1
ghcr.io/openrelik/openrelik-server:latestce1132261523
p11-kit@0.24.1-2
no fix listed
1
ghcr.io/openrelik/openrelik-worker-analyzer-config:latest1269d3d8d2c2
p11-kit@0.25.3-4ubuntu2.1
0.25.3-4ubuntu2.2
1
ghcr.io/openrelik/openrelik-worker-analyzer-logs:latestb175cc61959a
p11-kit@0.25.3-4ubuntu2.1
0.25.3-4ubuntu2.2
1
ghcr.io/openrelik/openrelik-worker-bulkextractor:latest67498ee2e639
p11-kit@0.25.3-4ubuntu2.1
0.25.3-4ubuntu2.2
1
ghcr.io/openrelik/openrelik-worker-capa:latest71323a4f3fc5
p11-kit@0.25.3-4ubuntu2.1
0.25.3-4ubuntu2.2
1
ghcr.io/openrelik/openrelik-worker-chromecreds:latest76d4fbcc6ff0
p11-kit@0.25.3-4ubuntu2.1
0.25.3-4ubuntu2.2
1
ghcr.io/openrelik/openrelik-worker-cloud-logs:latesta5d7e3cf71d3
p11-kit@0.25.3-4ubuntu2.1
0.25.3-4ubuntu2.2
1
ghcr.io/openrelik/openrelik-worker-containers:latesta6d5abe94706
p11-kit@0.25.3-4ubuntu2.1
0.25.3-4ubuntu2.2
1
ghcr.io/openrelik/openrelik-worker-dfindexeddb:latest31966a825782
p11-kit@0.25.3-4ubuntu2.1
0.25.3-4ubuntu2.2
1
ghcr.io/openrelik/openrelik-worker-extraction:latestec9fc5864cd5
p11-kit@0.25.3-4ubuntu2.1
0.25.3-4ubuntu2.2
1
ghcr.io/openrelik/openrelik-worker-floss:latest7a331eb83c6a
p11-kit@0.25.3-4ubuntu2.1
0.25.3-4ubuntu2.2
1
ghcr.io/openrelik/openrelik-worker-grep:latest470ff3529746
p11-kit@0.25.3-4ubuntu2.1
0.25.3-4ubuntu2.2
1
ghcr.io/openrelik/openrelik-worker-os-creds:latest7fc7ec101f08
p11-kit@0.25.3-4ubuntu2.1
0.25.3-4ubuntu2.2
1
ghcr.io/openrelik/openrelik-worker-plaso:latest75537ea8c851
p11-kit@0.25.3-4ubuntu2.1
0.25.3-4ubuntu2.2
1
ghcr.io/openrelik/openrelik-worker-strings:latest6e05055b701f
p11-kit@0.25.3-4ubuntu2.1
0.25.3-4ubuntu2.2
1
ghcr.io/openrelik/openrelik-worker-timesketch:latest4cb88b603cdc
p11-kit@0.25.3-4ubuntu2.1
0.25.3-4ubuntu2.2
1
ghcr.io/openrelik/openrelik-worker-yara:latestbd7fbf4505b5
p11-kit@0.25.3-4ubuntu2.1
0.25.3-4ubuntu2.2
1
ghcr.io/open-telemetry/demo:3.0.0-frontend-proxy1c53bfb59697
p11-kit@0.24.0-6build1
0.24.0-6ubuntu0.1
1
ghcr.io/open-telemetry/demo:1.12.0-imageprovider4e322858fe56
p11-kit@0.24.1-2
no fix listed
1
ghcr.io/open-telemetry/demo:1.12.0-accountingservice6d051840bb29
p11-kit@0.24.1-2
no fix listed
1
ghcr.io/open-telemetry/demo:3.0.0-accounting74c490f862da
p11-kit@0.25.3-4ubuntu2.1
0.25.3-4ubuntu2.2
1
ghcr.io/open-telemetry/demo:1.12.0-loadgenerator85c9935ff31b
p11-kit@0.24.1-2
no fix listed
1
ghcr.io/open-telemetry/demo:1.12.0-quoteservice87eb325d306f
p11-kit@0.24.1-2
no fix listed
1
ghcr.io/open-telemetry/demo:1.12.0-frontendproxy9fdec1be03e4
p11-kit@0.24.0-6build1
0.24.0-6ubuntu0.1
1
ghcr.io/open-telemetry/demo:1.12.0-emailservicea1f5cebb5240
p11-kit@0.24.1-2
no fix listed
1

syft 1.42.1 · advisories as of 16 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.