StackRadar

CVE-2026-2100

High

Advisory

Published 10 Feb 2026In the index since 5 Sept 2026
Severity
High
worst across findings
CVSS
7.5
base score, highest
EPSS
0.012
65th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
159
of 17,781 indexed, latest versions
Container images
188
deployed by those charts
Fix available
2 of 2
affected packages

Red Hat Security Advisory: p11-kit security update

Carried by container images the latest versions of 159 of 17,781 indexed charts deploy, on 188 images.

Affected packageAffected versionsFixed inImages
p11-kitapk0.25.5-r20.26.2-r079
p11-kitrpm0.23.2-lp151.3.3, 0.24.1-2.el9, 0.25.3-2.el9, 0.25.3-3.el9_50:0.26.2-1.el9, 0.26.2-1.1109
OSV records
ALPINE-CVE-2026-2100RHSA-2026:18599RLSA-2026:18599openSUSE-SU-2026:10169-1

Charts affected

159 by stars
ChartLatestAffected imagesRadar Score
minecraftsyntaxerror404Verified publisher1.2.231 of 2See more

minecraft syntaxerror404 1.2.23

1 of the 2 container images this version deploys carry CVE-2026-2100.

Container imageDigestPackageFixed in
library/eclipse-temurin:25.0.3_9-jre-alpine-3.2328db6fdf60e3
p11-kit@0.25.5-r2
0.26.2-r0

Open the chart page →

458
tekton-ci-environment-injectortekton-ci-environment-injectorVerified publisher0.2.41 of 1See more

tekton-ci-environment-injector tekton-ci-environment-injector 0.2.4

1 of the 1 container images this version deploys carry CVE-2026-2100.

Container imageDigestPackageFixed in
quay.io/poundex/tekton-ci-environment-injector:0.2.46dd65f22949c
p11-kit@0.25.5-r2
0.26.2-r0

Open the chart page →

510
tikatikaVerified publisher0.3.01 of 1See more

tika tika 0.3.0

1 of the 1 container images this version deploys carry CVE-2026-2100.

Container imageDigestPackageFixed in
ghcr.io/kenchrcum/tika:3.3.0-full708446bc6783
p11-kit@0.25.5-r2
0.26.2-r0

Open the chart page →

1,825
togglr-backendtogglrVerified publisher1.0.01 of 1See more

togglr-backend togglr 1.0.0

1 of the 1 container images this version deploys carry CVE-2026-2100.

Container imageDigestPackageFixed in
gdrocha/togglr-backend:1.0.0d5ae64e83d4c
p11-kit@0.25.5-r2
0.26.2-r0

Open the chart page →

3,221
opencloudunxwaresVerified publisher0.2.31 of 13See more

opencloud unxwares 0.2.3

1 of the 13 container images this version deploys carry CVE-2026-2100.

Container imageDigestPackageFixed in
quay.io/keycloak/keycloak:26.1.4044a457e0498
p11-kit@0.25.3-3.el9_5
0:0.26.2-1.el9

Open the chart page →

45,239
wikiwikijs3.0.01 of 2See more

wiki wikijs 3.0.0

1 of the 2 container images this version deploys carry CVE-2026-2100.

Container imageDigestPackageFixed in
requarks/wiki:268f0d1848261
p11-kit@0.25.5-r2
0.26.2-r0

Open the chart page →

5,459
metabasewiremindVerified publisher2.27.5-wiremind01 of 1See more

metabase wiremind 2.27.5-wiremind0

1 of the 1 container images this version deploys carry CVE-2026-2100.

Container imageDigestPackageFixed in
metabase/metabase:v0.61.1.x9491ed11c901
p11-kit@0.25.5-r2
0.26.2-r0

Open the chart page →

1,639
language-toolzekker6Verified publisher1.12.11 of 2See more

language-tool zekker6 1.12.1

1 of the 2 container images this version deploys carry CVE-2026-2100.

Container imageDigestPackageFixed in
erikvl87/languagetool:6.7-dockerupdate-3e1ea6a975388
p11-kit@0.25.5-r2
0.26.2-r0

Open the chart page →

1,571
zipkinzipkinVerified publisher0.5.01 of 1See more

zipkin zipkin 0.5.0

1 of the 1 container images this version deploys carry CVE-2026-2100.

Container imageDigestPackageFixed in
openzipkin/zipkin-slim:3.6.0a69e1057df36
p11-kit@0.25.5-r2
0.26.2-r0

Open the chart page →

1,159

Container images carrying it

188 by charts deploying them

A fixed version is listed for 2 of the 2 affected packages.

Container imageDigestPackageFixed inUsed by
ghcr.io/drogue-iot/device-state-service:0.11.0fbf0738cfc7e
p11-kit@0.24.1-2.el9
0:0.26.2-1.el9
1
ghcr.io/drogue-iot/http-endpoint:0.11.0b612c18479e0
p11-kit@0.24.1-2.el9
0:0.26.2-1.el9
1
ghcr.io/drogue-iot/knative-operator:0.11.0e2d927639f6e
p11-kit@0.24.1-2.el9
0:0.26.2-1.el9
1
ghcr.io/drogue-iot/mqtt-endpoint:0.11.032c6d2f5eab9
p11-kit@0.24.1-2.el9
0:0.26.2-1.el9
1
ghcr.io/drogue-iot/mqtt-integration:0.11.07ac2adb6ca49
p11-kit@0.24.1-2.el9
0:0.26.2-1.el9
1
ghcr.io/drogue-iot/outbox-controller:0.11.01a958edafdb1
p11-kit@0.24.1-2.el9
0:0.26.2-1.el9
1
ghcr.io/drogue-iot/topic-strimzi-operator:0.11.05253fbf8d04c
p11-kit@0.24.1-2.el9
0:0.26.2-1.el9
1
ghcr.io/drogue-iot/ttn-operator:0.11.07dd5ac80c8f1
p11-kit@0.24.1-2.el9
0:0.26.2-1.el9
1
ghcr.io/drogue-iot/user-auth-service:0.11.0adebc40ddf98
p11-kit@0.24.1-2.el9
0:0.26.2-1.el9
1
ghcr.io/drogue-iot/websocket-integration:0.11.0372dcd370945
p11-kit@0.24.1-2.el9
0:0.26.2-1.el9
1
ghcr.io/gla-rad/enav-api-gateway:latest8f4345c77dda
p11-kit@0.25.5-r2
0.26.2-r0
1
ghcr.io/gla-rad/enav-aton-admin-service:latestcf85570b1324
p11-kit@0.25.5-r2
0.26.2-r0
1
ghcr.io/gla-rad/enav-aton-service:latest3be878690629
p11-kit@0.25.5-r2
0.26.2-r0
1
ghcr.io/gla-rad/enav-aton-service-client:latestf1629ac5f9ec
p11-kit@0.25.5-r2
0.26.2-r0
1
ghcr.io/gla-rad/enav-ckeeper:latest415323ef112b
p11-kit@0.25.5-r2
0.26.2-r0
1
ghcr.io/gla-rad/enav-eureka:latest05002092c621
p11-kit@0.25.5-r2
0.26.2-r0
1
ghcr.io/gla-rad/enav-msg-broker:latest6fe372e4e481
p11-kit@0.25.5-r2
0.26.2-r0
1
ghcr.io/gla-rad/enav-vdes-controller:latestc4c52955814f
p11-kit@0.25.5-r2
0.26.2-r0
1
ghcr.io/grafana/alloy-operator:1.3.02088dcb22aaa
p11-kit@0.25.3-3.el9_5
0:0.26.2-1.el9
1
ghcr.io/grafana/alloy-operator:1.7.02ce23f948e02
p11-kit@0.25.3-3.el9_5
0:0.26.2-1.el9
1
ghcr.io/grafana/alloy-operator:1.8.1ae85d68749c7
p11-kit@0.25.3-3.el9_5
0:0.26.2-1.el9
1
ghcr.io/home-operations/beets:2.3.1cc4975f1a0be
p11-kit@0.25.5-r2
0.26.2-r0
1
ghcr.io/it-at-m/dave-document-storage/dave-document-storage:10.0.09c7fc07330c9
p11-kit@0.25.3-3.el9_5
0:0.26.2-1.el9
1
ghcr.io/it-at-m/kf-app-eai:1.0.65de339b3d537
p11-kit@0.25.3-3.el9_5
0:0.26.2-1.el9
1
ghcr.io/it-at-m/wjh-rechner:1.0.0bc70cdb5a01a
p11-kit@0.24.1-2.el9
0:0.26.2-1.el9
1
ghcr.io/itobey/fddb-exporter:2.4.1a824933e0f87
p11-kit@0.25.5-r2
0.26.2-r0
1
ghcr.io/jeremylong/open-vulnerability-data-mirror:v9.0.49a69aa14dc3e
p11-kit@0.25.5-r2
0.26.2-r0
1
ghcr.io/kanisterio/controller:0.118.0d22616a5998b
p11-kit@0.25.3-3.el9_5
0:0.26.2-1.el9
1
ghcr.io/karakeep-app/karakeep:0.27.1abd7d6b11b1b
p11-kit@0.25.5-r2
0.26.2-r0
1
ghcr.io/karakeep-app/karakeep:0.26.0f575a34ed3f8
p11-kit@0.25.5-r2
0.26.2-r0
1
ghcr.io/kenchrcum/tika:3.3.0-full708446bc6783
p11-kit@0.25.5-r2
0.26.2-r0
1
ghcr.io/kluster-manager/managed-serviceaccount:v0.10.0fc256885915b
p11-kit@0.25.3-3.el9_5
0:0.26.2-1.el9
1
ghcr.io/kluster-manager/registration-operator:v1.2.00cbced8e6240
p11-kit@0.25.3-3.el9_5
0:0.26.2-1.el9
1
ghcr.io/llm-d/llm-d-model-service:v0.0.158b99a8104a2f
p11-kit@0.25.3-3.el9_5
0:0.26.2-1.el9
1
ghcr.io/microboxlabs/miot-calendar:latest-jvm7157cdc0bf5b
p11-kit@0.25.3-3.el9_5
0:0.26.2-1.el9
1
ghcr.io/microboxlabs/miot-srv:latest4ec11d229028
p11-kit@0.25.3-3.el9_5
0:0.26.2-1.el9
1
ghcr.io/microboxlabs/miot-srv:latest5796553b41ae
p11-kit@0.25.3-3.el9_5
0:0.26.2-1.el9
1
ghcr.io/open-telemetry/demo:3.0.0-kafka0601750a3ca4
p11-kit@0.25.5-r2
0.26.2-r0
1
ghcr.io/projectnessie/nessie:0.92.19efe3c74d55f
p11-kit@0.25.3-2.el9
0:0.26.2-1.el9
1
ghcr.io/wenisch-tech/chronoreaper:1.1.10447726cec07b
p11-kit@0.25.5-r2
0.26.2-r0
1
ghcr.io/wundergraph/cosmo/keycloak:0.13.0b37408461b9b
p11-kit@0.25.3-3.el9_5
0:0.26.2-1.el9
1
public.ecr.aws/aktosecurity/akto-puppeteer-replay:1.49.4_latestf1c5763d565e
p11-kit@0.25.5-r2
0.26.2-r0
1
public.ecr.aws/aktosecurity/confluentinc-cp-kafka:8.1.0-1-ubi99026dbbf280d
p11-kit@0.25.3-3.el9_5
0:0.26.2-1.el9
1
public.ecr.aws/dynatrace/dynatrace-operator:v1.3.0f68901a54664
p11-kit@0.25.3-2.el9
0:0.26.2-1.el9
1
public.ecr.aws/perfectscale-io/psc-exporter:v1.0.45-redhat9083e60c38bc
p11-kit@0.25.3-2.el9
0:0.26.2-1.el9
1
public.ecr.aws/perfectscale-io/ubi9/ubi:9.5d7c3def9252b
p11-kit@0.25.3-2.el9
0:0.26.2-1.el9
1
public.ecr.aws/v0r6c2e2/hive-metastore:latest794b3bff9510
p11-kit@0.25.3-2.el9
0:0.26.2-1.el9
1
public.ecr.aws/v0r6c2e2/trino:latestc265156b00d1
p11-kit@0.25.3-3.el9_5
0:0.26.2-1.el9
1
quay.io/ai-lab/llamacpp_python:latest70d138997acd
p11-kit@0.25.3-2.el9
0:0.26.2-1.el9
1
quay.io/argoprojlabs/argocd-image-updater:v1.2.13c56f354fac5
p11-kit@0.25.5-r2
0.26.2-r0
1

syft 1.42.1 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.