StackRadar

CVE-2026-18938

Medium

Advisory

Published 7 Aug 2026In the index since 5 Sept 2026
Severity
Medium
worst across findings
CVSS
6.2
base score, highest
EPSS
0.001
1st percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
2,148
of 17,797 indexed, latest versions
Container images
2,099
deployed by those charts
Fix available
2 of 2
affected packages

CVE-2026-18938 affecting package p11-kit for versions less than 0.26.5-1

Carried by container images the latest versions of 2,148 of 17,797 indexed charts deploy, on 2,099 images.

Affected packageAffected versionsFixed inImages
p11-kitdeb0.23.9-2, 0.23.9-2ubuntu0.1, 0.23.20-1build1, 0.23.20-1ubuntu0.1+8 more0.23.9-2ubuntu0.1+esm1, 0.23.20-1ubuntu0.1+esm1, 0.24.0-6ubuntu0.1, 0.25.3-4ubuntu2.2+1 more2,098
p11-kitrpm0.25.0-1.azl30.26.5-11
OSV records
DEBIAN-CVE-2026-18938UBUNTU-CVE-2026-18938AZL-95481ECHO-09a0-891c-526d
Also known as
USN-8687-1

Charts affected

2,148 by stars
ChartLatestAffected imagesRadar Score
roundcubeencircle360-ossVerified publisher0.8.31 of 1See more

roundcube encircle360-oss 0.8.3

1 of the 1 container images this version deploys carry CVE-2026-18938.

Container imageDigestPackageFixed in
roundcube/roundcubemail:1.6.16-apache-nonroot17d9d9580962
p11-kit@0.25.5-3
no fix listed

Open the chart page →

5,690
paraerudikaVerified publisher0.3.01 of 1See more

para erudika 0.3.0

1 of the 1 container images this version deploys carry CVE-2026-18938.

Container imageDigestPackageFixed in
erudikaltd/para:latest_stable235e0bc53da2
p11-kit@0.26.2-2
no fix listed

Open the chart page →

1,142
beaconchain-explorerethereum-helm-chartsVerified publisher0.1.61 of 2See more

beaconchain-explorer ethereum-helm-charts 0.1.6

1 of the 2 container images this version deploys carry CVE-2026-18938.

Container imageDigestPackageFixed in
gobitfly/eth2-beaconchain-explorer:latest1d08a7986348
p11-kit@0.24.0-6build1
0.24.0-6ubuntu0.1

Open the chart page →

3,104
besuethereum-helm-chartsVerified publisher1.1.41 of 2See more

besu ethereum-helm-charts 1.1.4

1 of the 2 container images this version deploys carry CVE-2026-18938.

Container imageDigestPackageFixed in
hyperledger/besu:latest6f3f21ce5333
p11-kit@0.25.3-4ubuntu2.1
0.25.3-4ubuntu2.2

Open the chart page →

703
erigonethereum-helm-chartsVerified publisher2.0.21 of 2See more

erigon ethereum-helm-charts 2.0.2

1 of the 2 container images this version deploys carry CVE-2026-18938.

Container imageDigestPackageFixed in
erigontech/erigon:latest2252efdf9abe
p11-kit@0.24.1-2
no fix listed

Open the chart page →

1,136
lighthouseethereum-helm-chartsVerified publisher1.1.91 of 2See more

lighthouse ethereum-helm-charts 1.1.9

1 of the 2 container images this version deploys carry CVE-2026-18938.

Container imageDigestPackageFixed in
sigp/lighthouse:latest9a62bb870545
p11-kit@0.24.0-6build1
0.24.0-6ubuntu0.1

Open the chart page →

1,597
rethethereum-helm-chartsVerified publisher0.1.91 of 2See more

reth ethereum-helm-charts 0.1.9

1 of the 2 container images this version deploys carry CVE-2026-18938.

Container imageDigestPackageFixed in
ghcr.io/paradigmxyz/reth:latest68e76b32ad9a
p11-kit@0.25.3-4ubuntu2.1
0.25.3-4ubuntu2.2

Open the chart page →

688
iobrokereugen0.2.61 of 1See more

iobroker eugen 0.2.6

1 of the 1 container images this version deploys carry CVE-2026-18938.

Container imageDigestPackageFixed in
ghcr.io/buanet/iobroker:v9.1.2ca7dc7362968
p11-kit@0.24.1-2
no fix listed

Open the chart page →

11,534
mcrouterevryfs-ossVerified publisher0.4.01 of 2See more

mcrouter evryfs-oss 0.4.0

1 of the 2 container images this version deploys carry CVE-2026-18938.

Container imageDigestPackageFixed in
quay.io/evryfs/docker-mcrouter:0.40.0-9a2d3a4c67b0f
p11-kit@0.23.9-2ubuntu0.1
0.23.9-2ubuntu0.1+esm1

Open the chart page →

6,531
akauntingf3k-techVerified publisher1.3121.01 of 4See more

akaunting f3k-tech 1.3121.0

1 of the 4 container images this version deploys carry CVE-2026-18938.

Container imageDigestPackageFixed in
bitnamilegacy/mariadb:latestbbd4e17f1ef8
p11-kit@0.24.1-2
no fix listed

Open the chart page →

4,375
fastapi-microservice-appfast-api-microservice-app1.3.04 of 4See more

fastapi-microservice-app fast-api-microservice-app 1.3.0

4 of the 4 container images this version deploys carry CVE-2026-18938.

Container imageDigestPackageFixed in
library/mongo:7.0b6421fd6d1c5
p11-kit@0.24.0-6build1
0.24.0-6ubuntu0.1
omkara25/simple-microservice-app-order-service:v2.18327546c7aac
p11-kit@0.24.1-2
no fix listed
omkara25/simple-microservice-app-payment-service:v2afff40172b6b
p11-kit@0.24.1-2
no fix listed
omkara25/simple-microservice-app-user-service:v2d62cba548580
p11-kit@0.24.1-2
no fix listed

Open the chart page →

9,683
federidfederidOfficialVerified publisher0.1.21 of 1See more

federid federid 0.1.2

1 of the 1 container images this version deploys carry CVE-2026-18938.

Container imageDigestPackageFixed in
federid/webhook:0.1.0fbfb7c6510a7
p11-kit@0.24.1-2
no fix listed

Open the chart page →

2,094
zabbix-server-mysqlfermosit3.0.23 of 4See more

zabbix-server-mysql fermosit 3.0.2

3 of the 4 container images this version deploys carry CVE-2026-18938.

Container imageDigestPackageFixed in
zabbix/zabbix-agent:ubuntu-6.4-latest349b924472a7
p11-kit@0.25.3-4ubuntu2.1
0.25.3-4ubuntu2.2
zabbix/zabbix-server-mysql:ubuntu-6.4-latest55d074b6b031
p11-kit@0.25.3-4ubuntu2.1
0.25.3-4ubuntu2.2
zabbix/zabbix-web-nginx-mysql:ubuntu-6.4-latest0e5f69c4c54e
p11-kit@0.25.3-4ubuntu2.1
0.25.3-4ubuntu2.2

Open the chart page →

13,027
ferriskeyferriskey0.8.01 of 3See more

ferriskey ferriskey 0.8.0

1 of the 3 container images this version deploys carry CVE-2026-18938.

Container imageDigestPackageFixed in
library/postgres:1767f41722b7a8
p11-kit@0.25.5-3
no fix listed

Open the chart page →

2,172
flink-operatorflink-operator0.1.11 of 2See more

flink-operator flink-operator 0.1.1

1 of the 2 container images this version deploys carry CVE-2026-18938.

Container imageDigestPackageFixed in
gcr.io/flink-operator/deployer:webhook-cert809338a69bd5
p11-kit@0.23.9-2
0.23.9-2ubuntu0.1+esm1

Open the chart page →

12,987
rss-bridgegabe565Verified publisher0.5.21 of 1See more

rss-bridge gabe565 0.5.2

1 of the 1 container images this version deploys carry CVE-2026-18938.

Container imageDigestPackageFixed in
ghcr.io/rss-bridge/rss-bridge:latest606896116558
p11-kit@0.24.1-2
no fix listed

Open the chart page →

2,218
bazarrgeek-cookbookVerified publisher10.6.21 of 1See more

bazarr geek-cookbook 10.6.2

1 of the 1 container images this version deploys carry CVE-2026-18938.

Container imageDigestPackageFixed in
ghcr.io/k8s-at-home/bazarr:v1.0.3fdb5501cdfb9
p11-kit@0.23.20-1ubuntu0.1
0.23.20-1ubuntu0.1+esm1

Open the chart page →

17,432
calibregeek-cookbookVerified publisher5.4.21 of 1See more

calibre geek-cookbook 5.4.2

1 of the 1 container images this version deploys carry CVE-2026-18938.

Container imageDigestPackageFixed in
linuxserver/calibre:version-v5.21.0a847b5b2d860
p11-kit@0.23.9-2ubuntu0.1
0.23.9-2ubuntu0.1+esm1

Open the chart page →

23,016
games-on-whalesgeek-cookbookVerified publisher1.8.23 of 7See more

games-on-whales geek-cookbook 1.8.2

3 of the 7 container images this version deploys carry CVE-2026-18938.

Container imageDigestPackageFixed in
ghcr.io/games-on-whales/pulseaudio:1.0.0f34f98405c10
p11-kit@0.23.20-1ubuntu0.1
0.23.20-1ubuntu0.1+esm1
ghcr.io/games-on-whales/retroarch:1.0.0103fbcec2314
p11-kit@0.23.20-1ubuntu0.1
0.23.20-1ubuntu0.1+esm1
ghcr.io/games-on-whales/steam:1.0.09b6105be7ad0
p11-kit@0.23.20-1ubuntu0.1
0.23.20-1ubuntu0.1+esm1

Open the chart page →

35,377
homebridgegeek-cookbookVerified publisher5.3.21 of 1See more

homebridge geek-cookbook 5.3.2

1 of the 1 container images this version deploys carry CVE-2026-18938.

Container imageDigestPackageFixed in
ghcr.io/oznu/homebridge:2022-07-08ff2af53897e7
p11-kit@0.23.20-1ubuntu0.1
0.23.20-1ubuntu0.1+esm1

Open the chart page →

15,797
lazylibrariangeek-cookbookVerified publisher7.4.21 of 1See more

lazylibrarian geek-cookbook 7.4.2

1 of the 1 container images this version deploys carry CVE-2026-18938.

Container imageDigestPackageFixed in
linuxserver/lazylibrarian:version-1152df82f93d2560e233
p11-kit@0.23.9-2ubuntu0.1
0.23.9-2ubuntu0.1+esm1

Open the chart page →

11,719
network-ups-toolsgeek-cookbookVerified publisher6.4.21 of 1See more

network-ups-tools geek-cookbook 6.4.2

1 of the 1 container images this version deploys carry CVE-2026-18938.

Container imageDigestPackageFixed in
ghcr.io/k8s-at-home/network-ups-tools:v2.7.4-2479-g86a32237cbd5d4cc1245
p11-kit@0.23.20-1ubuntu0.1
0.23.20-1ubuntu0.1+esm1

Open the chart page →

14,013
omada-controllergeek-cookbookVerified publisher4.4.21 of 1See more

omada-controller geek-cookbook 4.4.2

1 of the 1 container images this version deploys carry CVE-2026-18938.

Container imageDigestPackageFixed in
mbentley/omada-controller:4.3f4e682274bed
p11-kit@0.23.9-2ubuntu0.1
0.23.9-2ubuntu0.1+esm1

Open the chart page →

11,593
ombigeek-cookbookVerified publisher11.5.21 of 1See more

ombi geek-cookbook 11.5.2

1 of the 1 container images this version deploys carry CVE-2026-18938.

Container imageDigestPackageFixed in
ghcr.io/linuxserver/ombi:4.16.124c1b67cf39af
p11-kit@0.24.0-6build1
0.24.0-6ubuntu0.1

Open the chart page →

5,186
protonmail-bridgegeek-cookbookVerified publisher5.4.21 of 1See more

protonmail-bridge geek-cookbook 5.4.2

1 of the 1 container images this version deploys carry CVE-2026-18938.

Container imageDigestPackageFixed in
shenxn/protonmail-bridge:1.8.7-1acf31af7c111
p11-kit@0.23.9-2ubuntu0.1
0.23.9-2ubuntu0.1+esm1

Open the chart page →

8,048
prowlarrgeek-cookbookVerified publisher4.5.21 of 1See more

prowlarr geek-cookbook 4.5.2

1 of the 1 container images this version deploys carry CVE-2026-18938.

Container imageDigestPackageFixed in
ghcr.io/k8s-at-home/prowlarr:v0.3.0.1710c863aa9875fa
p11-kit@0.23.20-1ubuntu0.1
0.23.20-1ubuntu0.1+esm1

Open the chart page →

11,624
sabnzbdgeek-cookbookVerified publisher9.4.21 of 1See more

sabnzbd geek-cookbook 9.4.2

1 of the 1 container images this version deploys carry CVE-2026-18938.

Container imageDigestPackageFixed in
ghcr.io/k8s-at-home/sabnzbd:v3.3.1c2d6e775db5a
p11-kit@0.23.20-1ubuntu0.1
0.23.20-1ubuntu0.1+esm1

Open the chart page →

10,295
sonarrgeek-cookbookVerified publisher16.3.21 of 1See more

sonarr geek-cookbook 16.3.2

1 of the 1 container images this version deploys carry CVE-2026-18938.

Container imageDigestPackageFixed in
ghcr.io/k8s-at-home/sonarr:v3.0.8.15070eb230e2381a
p11-kit@0.24.0-6build1
0.24.0-6ubuntu0.1

Open the chart page →

13,147
stashgeek-cookbookVerified publisher3.4.21 of 1See more

stash geek-cookbook 3.4.2

1 of the 1 container images this version deploys carry CVE-2026-18938.

Container imageDigestPackageFixed in
stashapp/stash:latest24dbd7607174
p11-kit@0.23.20-1ubuntu0.1
0.23.20-1ubuntu0.1+esm1

Open the chart page →

15,910
tdarrgeek-cookbookVerified publisher4.6.22 of 2See more

tdarr geek-cookbook 4.6.2

2 of the 2 container images this version deploys carry CVE-2026-18938.

Container imageDigestPackageFixed in
haveagitgat/tdarr:2.00.181256348872ce
p11-kit@0.23.20-1ubuntu0.1
0.23.20-1ubuntu0.1+esm1
haveagitgat/tdarr_node:2.00.101e3f9328327d
p11-kit@0.23.20-1build1
0.23.20-1ubuntu0.1+esm1

Open the chart page →

31,162
valheimgeek-cookbookVerified publisher4.4.21 of 1See more

valheim geek-cookbook 4.4.2

1 of the 1 container images this version deploys carry CVE-2026-18938.

Container imageDigestPackageFixed in
ghcr.io/lloesche/valheim-server:latest20fde516ce31
p11-kit@0.25.5-3
no fix listed

Open the chart page →

4,927
wireguardgeek-cookbookVerified publisher1.4.21 of 1See more

wireguard geek-cookbook 1.4.2

1 of the 1 container images this version deploys carry CVE-2026-18938.

Container imageDigestPackageFixed in
ghcr.io/k8s-at-home/wireguard:v1.0.20210424448045c4270b
p11-kit@0.23.20-1ubuntu0.1
0.23.20-1ubuntu0.1+esm1

Open the chart page →

7,709
gentrace-self-hostedgentrace-self-hostedVerified publisher0.1.32 of 9See more

gentrace-self-hosted gentrace-self-hosted 0.1.3

2 of the 9 container images this version deploys carry CVE-2026-18938.

Container imageDigestPackageFixed in
clickhouse/clickhouse-server:23.8512bb8a21483
p11-kit@0.23.20-1ubuntu0.1
0.23.20-1ubuntu0.1+esm1
library/postgres:15.38775adb39f0d
p11-kit@0.24.1-2
no fix listed

Open the chart page →

15,661
ghostfolioghostfolioVerified publisher0.5.41 of 3See more

ghostfolio ghostfolio 0.5.4

1 of the 3 container images this version deploys carry CVE-2026-18938.

Container imageDigestPackageFixed in
ghostfolio/ghostfolio:3.7.0e3c6ab53e49b
p11-kit@0.24.1-2
no fix listed

Open the chart page →

3,150
leantimegissilabs1.3.01 of 2See more

leantime gissilabs 1.3.0

1 of the 2 container images this version deploys carry CVE-2026-18938.

Container imageDigestPackageFixed in
library/mariadb:10.6.218a16204dc96c
p11-kit@0.23.20-1ubuntu0.1
0.23.20-1ubuntu0.1+esm1

Open the chart page →

6,469
openbaogitlabVerified publisher0.18.11 of 1See more

openbao gitlab 0.18.1

1 of the 1 container images this version deploys carry CVE-2026-18938.

Container imageDigestPackageFixed in
registry.gitlab.com/gitlab-org/build/cng/gitlab-openbao:v2.5.5-gitlab25b7636dfba3f
p11-kit@0.25.5-3
no fix listed

Open the chart page →

1,797
meta-monitoringgrafana1.3.01 of 2See more

meta-monitoring grafana 1.3.0

1 of the 2 container images this version deploys carry CVE-2026-18938.

Container imageDigestPackageFixed in
grafana/alloy:v1.4.306bdcbb51fc2
p11-kit@0.25.3-4ubuntu2.1
0.25.3-4ubuntu2.2

Open the chart page →

3,580
greenkubegreenkubeVerified publisher0.3.01 of 3See more

greenkube greenkube 0.3.0

1 of the 3 container images this version deploys carry CVE-2026-18938.

Container imageDigestPackageFixed in
greenkube/greenkube:0.3.00c01932282a4
p11-kit@0.24.1-2
no fix listed

Open the chart page →

1,835
IMgrycapOfficialVerified publisher1.8.01 of 3See more

IM grycap 1.8.0

1 of the 3 container images this version deploys carry CVE-2026-18938.

Container imageDigestPackageFixed in
ghcr.io/grycap/im:latest06a16d4f279f
p11-kit@0.25.3-4ubuntu2.1
0.25.3-4ubuntu2.2

Open the chart page →

4,209
castopodh2mVerified publisher1.12.101 of 3See more

castopod h2m 1.12.10

1 of the 3 container images this version deploys carry CVE-2026-18938.

Container imageDigestPackageFixed in
castopod/castopod:1.12.101fd37280cbb2
p11-kit@0.24.1-2
no fix listed

Open the chart page →

10,172
haproxy-redis-sentinelhaproxy-redis-sentinelVerified publisher0.1.32 of 2See more

haproxy-redis-sentinel haproxy-redis-sentinel 0.1.3

2 of the 2 container images this version deploys carry CVE-2026-18938.

Container imageDigestPackageFixed in
library/haproxy:3.1-bookworm49a0a0d6f0b8
p11-kit@0.24.1-2
no fix listed
ghcr.io/parmincloud/haproxy-redis-sentinel:1.0.040a00a6456ae
p11-kit@0.24.1-2
no fix listed

Open the chart page →

4,332
harp-proxyharp0.8.11 of 1See more

harp-proxy harp 0.8.1

1 of the 1 container images this version deploys carry CVE-2026-18938.

Container imageDigestPackageFixed in
makersquad/harp-proxy:0.8.1a40dd258c527
p11-kit@0.24.1-2
no fix listed

Open the chart page →

6,438
hawkhawk1.1.52 of 4See more

hawk hawk 1.1.5

2 of the 4 container images this version deploys carry CVE-2026-18938.

Container imageDigestPackageFixed in
library/postgres:16.109f23e02d766
p11-kit@0.24.1-2
no fix listed
ghcr.io/privacyengineering/hawk-service:latestbfedf47bb5e0
p11-kit@0.24.0-6build1
0.24.0-6ubuntu0.1

Open the chart page →

13,704
clickstackhdx-oss-v21.1.11 of 5See more

clickstack hdx-oss-v2 1.1.1

1 of the 5 container images this version deploys carry CVE-2026-18938.

Container imageDigestPackageFixed in
library/mongo:5.0.32-focal3b6c281e1c08
p11-kit@0.23.20-1ubuntu0.1
0.23.20-1ubuntu0.1+esm1

Open the chart page →

4,761
hello-helmhellok8s0.1.01 of 2See more

hello-helm hellok8s 0.1.0

1 of the 2 container images this version deploys carry CVE-2026-18938.

Container imageDigestPackageFixed in
library/nginx:latest05b8cb60c354
p11-kit@0.25.5-3
no fix listed

Open the chart page →

2,034
guacamolehelmforgeVerified publisher1.5.23 of 5See more

guacamole helmforge 1.5.2

3 of the 5 container images this version deploys carry CVE-2026-18938.

Container imageDigestPackageFixed in
guacamole/guacamole:1.6.0f344085e618b
p11-kit@0.25.3-4ubuntu2.1
0.25.3-4ubuntu2.2
library/postgres:18.6-trixie4ef4dbc939d6
p11-kit@0.25.5-3
no fix listed
library/postgres:17.5-bookwormfbcea1bd13b6
p11-kit@0.24.1-2
no fix listed

Open the chart page →

8,908
mariadbhelmforgeVerified publisher2.1.11 of 1See more

mariadb helmforge 2.1.1

1 of the 1 container images this version deploys carry CVE-2026-18938.

Container imageDigestPackageFixed in
library/mariadb:12.3.3dd9b303aed4f
p11-kit@0.25.3-4ubuntu2.1
0.25.3-4ubuntu2.2

Open the chart page →

1,935
matomohelmforgeVerified publisher2.3.01 of 3See more

matomo helmforge 2.3.0

1 of the 3 container images this version deploys carry CVE-2026-18938.

Container imageDigestPackageFixed in
library/matomo:5.13.0-apache8e6bdd396496
p11-kit@0.25.5-3
no fix listed

Open the chart page →

2,773
uptime-kumahelmforgeVerified publisher1.5.131 of 1See more

uptime-kuma helmforge 1.5.13

1 of the 1 container images this version deploys carry CVE-2026-18938.

Container imageDigestPackageFixed in
louislam/uptime-kuma:2.5.4917318f9d7be
p11-kit@0.24.1-2
no fix listed

Open the chart page →

30,398
vaultwardenhelmforgeVerified publisher1.14.01 of 1See more

vaultwarden helmforge 1.14.0

1 of the 1 container images this version deploys carry CVE-2026-18938.

Container imageDigestPackageFixed in
vaultwarden/server:1.37.31587c45feaa4
p11-kit@0.25.5-3
no fix listed

Open the chart page →

1,503

Container images carrying it

2,099 by charts deploying them

A fixed version is listed for 2 of the 2 affected packages.

No deployed image carries CVE-2026-18938.

syft 1.42.1 · advisories as of 17 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.