StackRadar

CVE-2026-2100

High

Advisory

Published 10 Feb 2026In the index since 5 Sept 2026
Severity
High
worst across findings
CVSS
7.5
base score, highest
EPSS
0.012
65th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
159
of 17,781 indexed, latest versions
Container images
188
deployed by those charts
Fix available
2 of 2
affected packages

Red Hat Security Advisory: p11-kit security update

Carried by container images the latest versions of 159 of 17,781 indexed charts deploy, on 188 images.

Affected packageAffected versionsFixed inImages
p11-kitapk0.25.5-r20.26.2-r079
p11-kitrpm0.23.2-lp151.3.3, 0.24.1-2.el9, 0.25.3-2.el9, 0.25.3-3.el9_50:0.26.2-1.el9, 0.26.2-1.1109
OSV records
ALPINE-CVE-2026-2100RHSA-2026:18599RLSA-2026:18599openSUSE-SU-2026:10169-1

Charts affected

159 by stars
ChartLatestAffected imagesRadar Score
minecraftsyntaxerror404Verified publisher1.2.231 of 2See more

minecraft syntaxerror404 1.2.23

1 of the 2 container images this version deploys carry CVE-2026-2100.

Container imageDigestPackageFixed in
library/eclipse-temurin:25.0.3_9-jre-alpine-3.2328db6fdf60e3
p11-kit@0.25.5-r2
0.26.2-r0

Open the chart page →

458
tekton-ci-environment-injectortekton-ci-environment-injectorVerified publisher0.2.41 of 1See more

tekton-ci-environment-injector tekton-ci-environment-injector 0.2.4

1 of the 1 container images this version deploys carry CVE-2026-2100.

Container imageDigestPackageFixed in
quay.io/poundex/tekton-ci-environment-injector:0.2.46dd65f22949c
p11-kit@0.25.5-r2
0.26.2-r0

Open the chart page →

510
tikatikaVerified publisher0.3.01 of 1See more

tika tika 0.3.0

1 of the 1 container images this version deploys carry CVE-2026-2100.

Container imageDigestPackageFixed in
ghcr.io/kenchrcum/tika:3.3.0-full708446bc6783
p11-kit@0.25.5-r2
0.26.2-r0

Open the chart page →

1,825
togglr-backendtogglrVerified publisher1.0.01 of 1See more

togglr-backend togglr 1.0.0

1 of the 1 container images this version deploys carry CVE-2026-2100.

Container imageDigestPackageFixed in
gdrocha/togglr-backend:1.0.0d5ae64e83d4c
p11-kit@0.25.5-r2
0.26.2-r0

Open the chart page →

3,221
opencloudunxwaresVerified publisher0.2.31 of 13See more

opencloud unxwares 0.2.3

1 of the 13 container images this version deploys carry CVE-2026-2100.

Container imageDigestPackageFixed in
quay.io/keycloak/keycloak:26.1.4044a457e0498
p11-kit@0.25.3-3.el9_5
0:0.26.2-1.el9

Open the chart page →

45,239
wikiwikijs3.0.01 of 2See more

wiki wikijs 3.0.0

1 of the 2 container images this version deploys carry CVE-2026-2100.

Container imageDigestPackageFixed in
requarks/wiki:268f0d1848261
p11-kit@0.25.5-r2
0.26.2-r0

Open the chart page →

5,459
metabasewiremindVerified publisher2.27.5-wiremind01 of 1See more

metabase wiremind 2.27.5-wiremind0

1 of the 1 container images this version deploys carry CVE-2026-2100.

Container imageDigestPackageFixed in
metabase/metabase:v0.61.1.x9491ed11c901
p11-kit@0.25.5-r2
0.26.2-r0

Open the chart page →

1,639
language-toolzekker6Verified publisher1.12.11 of 2See more

language-tool zekker6 1.12.1

1 of the 2 container images this version deploys carry CVE-2026-2100.

Container imageDigestPackageFixed in
erikvl87/languagetool:6.7-dockerupdate-3e1ea6a975388
p11-kit@0.25.5-r2
0.26.2-r0

Open the chart page →

1,571
zipkinzipkinVerified publisher0.5.01 of 1See more

zipkin zipkin 0.5.0

1 of the 1 container images this version deploys carry CVE-2026-2100.

Container imageDigestPackageFixed in
openzipkin/zipkin-slim:3.6.0a69e1057df36
p11-kit@0.25.5-r2
0.26.2-r0

Open the chart page →

1,159

Container images carrying it

188 by charts deploying them

A fixed version is listed for 2 of the 2 affected packages.

Container imageDigestPackageFixed inUsed by
gitea/gitea:1.26.27d13848af126
p11-kit@0.25.5-r2
0.26.2-r0
1
glarad/mc-service-registry:latest7b02b9e7f1ef
p11-kit@0.25.5-r2
0.26.2-r0
1
grafana/otel-lgtm:0.11.1009d8c3ce4f3a
p11-kit@0.25.3-3.el9_5
0:0.26.2-1.el9
1
hammerspaceinc/csi-plugin:v1.2.8-rc2395bee4504fc
p11-kit@0.25.3-3.el9_5
0:0.26.2-1.el9
1
hashicorp/boundary:0.21.037bf86488b74
p11-kit@0.25.5-r2
0.26.2-r0
1
hashicorp/boundary:latest76a201954ca0
p11-kit@0.25.5-r2
0.26.2-r0
1
hazelcast/hazelcast:latestf086bf0ecb23
p11-kit@0.25.5-r2
0.26.2-r0
1
jlesage/firefox:v25.03.1055c28defe31
p11-kit@0.25.5-r2
0.26.2-r0
1
kenchrcum/fluxcd-helm-upgrader:0.7.7c326e28a8f5f
p11-kit@0.25.5-r2
0.26.2-r0
1
library/eclipse-temurin:25.0.3_9-jre-alpine-3.2328db6fdf60e3
p11-kit@0.25.5-r2
0.26.2-r0
1
library/logstash:9.1.233eae14f0867
p11-kit@0.25.3-3.el9_5
0:0.26.2-1.el9
1
loeken/jellyfin:10.11.87efbc24e47b0
p11-kit@0.25.5-r2
0.26.2-r0
1
metabase/metabase:v0.53.4.17807bc5cad17
p11-kit@0.25.5-r2
0.26.2-r0
1
nacos/nacos-server:v3.0.20e951a1d07bb
p11-kit@0.25.5-r2
0.26.2-r0
1
nacos/nacos-server:v3.0.130a39cb0c54d
p11-kit@0.25.5-r2
0.26.2-r0
1
openzipkin/zipkin-slim:3.6.0a69e1057df36
p11-kit@0.25.5-r2
0.26.2-r0
1
operaton/operaton:1.0.0-beta-4b35867ffe4d8
p11-kit@0.25.5-r2
0.26.2-r0
1
percona/percona-postgresql-operator:2.8.06cce2698d3f5
p11-kit@0.25.3-3.el9_5
0:0.26.2-1.el9
1
percona/percona-server-mongodb-operator:1.20.1d09453ce7886
p11-kit@0.25.3-3.el9_5
0:0.26.2-1.el9
1
percona/percona-xtradb-cluster-operator:1.14.03232ae01d0ff
p11-kit@0.24.1-2.el9
0:0.26.2-1.el9
1
razzy10/product-service:latest702e411956db
p11-kit@0.25.3-3.el9_5
0:0.26.2-1.el9
1
redislabs/operator:8.0.18-119078e713bb6a
p11-kit@0.25.3-3.el9_5
0:0.26.2-1.el9
1
rm3l/dev-feed-api:latest9a7f732245a3
p11-kit@0.24.1-2.el9
0:0.26.2-1.el9
1
saidsef/scapy-containerised:v2025.02f17f7c435891
p11-kit@0.25.5-r2
0.26.2-r0
1
seldonio/seldon-core-operator:1.19.0544e3bf71bd1
p11-kit@0.25.3-3.el9_5
0:0.26.2-1.el9
1
semaphoreui/semaphore:v2.18.3e9260bfa8255
p11-kit@0.25.5-r2
0.26.2-r0
1
siakhooi/query:1.0.0f1f4b5b1b870
p11-kit@0.25.5-r2
0.26.2-r0
1
traccar/traccar:6.7-alpine621c8d6d46fd
p11-kit@0.25.5-r2
0.26.2-r0
1
trinodb/trino:45038c6f24ab1a4
p11-kit@0.25.3-2.el9
0:0.26.2-1.el9
1
yuzutech/kroki-bpmn:0.29.1444805c4b917
p11-kit@0.25.5-r2
0.26.2-r0
1
yuzutech/kroki-diagramsnet:0.29.1b810edbf9c62
p11-kit@0.25.5-r2
0.26.2-r0
1
yuzutech/kroki-excalidraw:0.29.157917319ea70
p11-kit@0.25.5-r2
0.26.2-r0
1
yuzutech/kroki-mermaid:0.29.1963b4acfde6e
p11-kit@0.25.5-r2
0.26.2-r0
1
gcr.io/kasten-images/restorectl:8.0.145a0884f9a90c
p11-kit@0.25.3-3.el9_5
0:0.26.2-1.el9
1
gcr.io/kubecost1/cost-model:prod-2.5.502b90651367f
p11-kit@0.25.3-3.el9_5
0:0.26.2-1.el9
1
gcr.io/kubecost1/cost-model:prod-2.6.39e507ac0aebb
p11-kit@0.25.3-3.el9_5
0:0.26.2-1.el9
1
gcr.io/kubecost1/kubecost-modeling:v0.1.24a2259b098b13
p11-kit@0.25.3-3.el9_5
0:0.26.2-1.el9
1
gcr.io/kubecost1/kubecost-modeling:v0.1.22a461dc5cb96a
p11-kit@0.25.3-3.el9_5
0:0.26.2-1.el9
1
gcr.io/spotinst-artifacts/spot-ocean-metric-exporter:1.0.5ae57b62291aa
p11-kit@0.25.5-r2
0.26.2-r0
1
ghcr.io/adfinis/kubernetes-etcd-backup:v1.4.68ec6c4812a7e
p11-kit@0.25.3-3.el9_5
0:0.26.2-1.el9
1
ghcr.io/booklore-app/booklore:v2.3.1d3d3af34bc2c
p11-kit@0.25.5-r2
0.26.2-r0
1
ghcr.io/devops-ia/cp-schema-registry:8.1.1-msk-iam-auth2.3.530d1a445acc7
p11-kit@0.25.3-3.el9_5
0:0.26.2-1.el9
1
ghcr.io/drogue-iot/authentication-service:0.11.0857b137fc7b3
p11-kit@0.24.1-2.el9
0:0.26.2-1.el9
1
ghcr.io/drogue-iot/coap-endpoint:0.11.044790b71aa22
p11-kit@0.24.1-2.el9
0:0.26.2-1.el9
1
ghcr.io/drogue-iot/command-endpoint:0.11.06dce3158b851
p11-kit@0.24.1-2.el9
0:0.26.2-1.el9
1
ghcr.io/drogue-iot/console-backend:0.11.025d229ae5bde
p11-kit@0.24.1-2.el9
0:0.26.2-1.el9
1
ghcr.io/drogue-iot/console-frontend:0.11.0558972f9374c
p11-kit@0.24.1-2.el9
0:0.26.2-1.el9
1
ghcr.io/drogue-iot/database-migration:0.11.057072c72a7cd
p11-kit@0.24.1-2.el9
0:0.26.2-1.el9
1
ghcr.io/drogue-iot/device-management-controller:0.11.0200aea1a2b42
p11-kit@0.24.1-2.el9
0:0.26.2-1.el9
1
ghcr.io/drogue-iot/device-management-service:0.11.0f4a5bfc06a74
p11-kit@0.24.1-2.el9
0:0.26.2-1.el9
1

syft 1.42.1 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.