CVE-2026-2903
MediumAdvisory
Published 22 Feb 2026In the index since 5 Sept 2026
- Severity
- Medium
- worst across findings
- CVSS
- 4.8
- base score, highest
- EPSS
- 0.001
- 2nd percentile
- CISA KEV
- Not listed
- no confirmed exploitation
- Charts affected
- 63
- of 17,781 indexed, latest versions
- Container images
- 50
- deployed by those charts
- Fix available
- None
- affected package
The matching OSV records carry no description.
Carried by container images the latest versions of 63 of 17,781 indexed charts deploy, on 50 images.
| Affected package | Affected versions | Fixed in | Images |
|---|---|---|---|
| re2cdeb | 3.0-2, 4.1-1 | no fix listed | 50 |
- OSV records
- DEBIAN-CVE-2026-2903
Charts affected
63 by stars
| Chart | Latest | Affected images | Radar Score |
|---|---|---|---|
| wp-chartprojet-devops | 0.1.0 | 1 of 2See more | 5,203 |
| simple-coffeerubxkubeVerified publisher | 0.1.0 | 1 of 1See more | 2,460 |
| nextcloudsb-helm-charts | 0.4.0 | 1 of 2See more | 9,755 |
| phpmyadminsb-helm-charts | 0.3.0 | 1 of 1See more | 5,315 |
| wordpresssb-helm-charts | 0.4.0 | 1 of 2See more | 13,510 |
| wordpressschichtelVerified publisher | 0.10.10 | 1 of 2See more | 8,184 |
| typo3schoolguys-helmcharts | 0.4.2 | 1 of 1See more | 4,836 |
| wordpress-mysqlsikalabs | 0.1.2 | 1 of 2See more | 3,826 |
| nagvissvtech-public-helm-charts | 1.0.0 | 1 of 1See more | 9,102 |
| flask-contactstest-configmap | 1.0.1 | 1 of 3See more | 5,704 |
| nextcloudth-chartsVerified publisher | 0.4.0 | 1 of 1See more | 10,086 |
| web-dvwaweb-dvwa | 1.16.0 | 1 of 2See more | 10,001 |
| Wordpresswordpress-mariadb | 1.0.2 | 1 of 2See more | 5,560 |
Container images carrying it
50 by charts deploying them
A fixed version is listed for 0 of the 1 affected package.
| Container image | Digest | Package | Fixed in | Used by |
|---|---|---|---|---|
| library/ | 3a8a8d6b5289 | re2c | no fix listed | 7 |
| library/ | 5a93c470ae82 | re2c | no fix listed | 6 |
| fireflyiii/ | fe4ecec4c2ba | re2c | no fix listed | 2 |
| fireflyiii/ | ab52bf932546 | re2c | no fix listed | 2 |
| library/ | b97df9e0e1ee | re2c | no fix listed | 2 |
| library/ | 6e75aa8f767c | re2c | no fix listed | 2 |
| library/ | 30bff39330d1 | re2c | no fix listed | 2 |
| vdiogov/ | 6945f84f0058 | re2c | no fix listed | 2 |
| aapjeisbaas/ | 6b261abc7fb0 | re2c | no fix listed | 1 |
| adamzammit/ | e75e2f455c8d | re2c | no fix listed | 1 |
| akaunting/ | 52811b36ec3a | re2c | no fix listed | 1 |
| castopod/ | 1fd37280cbb2 | re2c | no fix listed | 1 |
| castopod/ | 4e4f0440520f | re2c | no fix listed | 1 |
| cspconsole/ | 46dda4a31bd6 | re2c | no fix listed | 1 |
| cybrarist/ | e9e2447ac666 | re2c | no fix listed | 1 |
| dokuwiki/ | f08ecfdda239 | re2c | no fix listed | 1 |
| dolibarr/ | 69ec52e3b7ef | re2c | no fix listed | 1 |
| dolibarr/ | 7ad88fc9b13c | re2c | no fix listed | 1 |
| domainmod/ | 4017bfe4c597 | re2c | no fix listed | 1 |
| espocrm/ | 1b5a24504ed9 | re2c | no fix listed | 1 |
| fireflyiii/ | ae69fdd95cde | re2c | no fix listed | 1 |
| glpi/ | 4b681082a79e | re2c | no fix listed | 1 |
| gulacedia/ | 67b467d961ca | re2c | no fix listed | 1 |
| kimai/ | 6dfc63199654 | re2c | no fix listed | 1 |
| kitware/ | d7767d9b9da4 | re2c | no fix listed | 1 |
| kixote/ | 4e9dff179519 | re2c | no fix listed | 1 |
| kixote/ | 628f79a08cc7 | re2c | no fix listed | 1 |
| library/ | 28f7931ecbcb | re2c | no fix listed | 1 |
| library/ | 2415789e1602 | re2c | no fix listed | 1 |
| library/ | 8e6bdd396496 | re2c | no fix listed | 1 |
| library/ | 588609d76b21 | re2c | no fix listed | 1 |
| library/ | b7faa1653c39 | re2c | no fix listed | 1 |
| library/ | 59fa733c9af6 | re2c | no fix listed | 1 |
| library/ | 8ae66efb09a2 | re2c | no fix listed | 1 |
| library/ | ad4a8bae2eb4 | re2c | no fix listed | 1 |
| library/ | f73396626d2f | re2c | no fix listed | 1 |
| martinhelmich/ | c83a4f3fd7ae | re2c | no fix listed | 1 |
| mautic/ | eb8cc73d97e1 | re2c | no fix listed | 1 |
| moodlehq/ | 922af5166835 | re2c | no fix listed | 1 |
| phpmyadmin/ | 42a200db07b4 | re2c | no fix listed | 1 |
| pockost/ | 7f5d293cbe4e | re2c | no fix listed | 1 |
| qjoly/ | ec94d3bdc035 | re2c | no fix listed | 1 |
| roundcube/ | 17d9d9580962 | re2c | no fix listed | 1 |
| serversideup/ | 8f8c2f010ac5 | re2c | no fix listed | 1 |
| svtechnmaa/ | 18394b08e6c3 | re2c | no fix listed | 1 |
| ghcr.io/ | 8be69156acbb | re2c | no fix listed | 1 |
| ghcr.io/ | 034151b61a80 | re2c | no fix listed | 1 |
| ghcr.io/ | 87eb325d306f | re2c | no fix listed | 1 |
| ghcr.io/ | 9b220ea83329 | re2c | no fix listed | 1 |
| registry.gitlab.com/ | d76185d7270d | re2c | no fix listed | 1 |