StackRadar

CVE-2026-33540

High

Advisory

Published 6 Apr 2026In the index since 5 Sept 2026
Severity
High
worst across findings
CVSS
7.5
base score, highest
EPSS
0.003
20th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
57
of 17,781 indexed, latest versions
Container images
49
deployed by those charts
Fix available
1 of 2
affected packages

Distribution affected by pull-through cache credential exfiltration via www-authenticate bearer realm

Carried by container images the latest versions of 57 of 17,781 indexed charts deploy, on 49 images.

Affected packageAffected versionsFixed inImages
github.com/distribution/distribution/v3golangv0.0.0-20250402055438-9ed95e736522, v3.0.0, v3.0.0-20210316161203-a01c71e2477e, v3.0.0-20220526142353-ffbd94cbe269+8 more3.1.026
github.com/distribution/distributiongolangv2.7.1+incompatible, v2.8.0+incompatible, v2.8.1+incompatible, v2.8.2+incompatible+1 moreno fix listed23
OSV records
GHSA-3p65-76g6-3w7r
Also known as
GO-2026-5094

Charts affected

57 by stars
ChartLatestAffected imagesRadar Score
harborharborOfficialVerified publisher1.19.23 of 8See more

harbor harbor 1.19.2

3 of the 8 container images this version deploys carry CVE-2026-33540.

Container imageDigestPackageFixed in
goharbor/harbor-core:v2.15.2d7b780d23721
github.com/distribution/distribution@v2.8.2+incompatible
no fix listed
goharbor/harbor-jobservice:v2.15.2f71a4452a095
github.com/distribution/distribution@v2.8.2+incompatible
no fix listed
goharbor/harbor-registryctl:v2.15.2223d5cb49d5d
github.com/distribution/distribution@v2.8.2+incompatible
no fix listed

Open the chart page →

1,650
keelkeel1.2.21 of 1See more

keel keel 1.2.2

1 of the 1 container images this version deploys carry CVE-2026-33540.

Container imageDigestPackageFixed in
ghcr.io/keel-hq/keel:0.22.3315e188a07c2
github.com/distribution/distribution/v3@v3.0.0-20230722181636-7b502560cad4
3.1.0

Open the chart page →

809
kubescape-operatorkubescape1.40.41 of 6See more

kubescape-operator kubescape 1.40.4

1 of the 6 container images this version deploys carry CVE-2026-33540.

Container imageDigestPackageFixed in
quay.io/kubescape/node-agent:v0.3.2192044ed750f5e
github.com/distribution/distribution@v2.8.2+incompatible
no fix listed

Open the chart page →

920
waypointhashicorpVerified publisher0.1.211 of 2See more

waypoint hashicorp 0.1.21

1 of the 2 container images this version deploys carry CVE-2026-33540.

Container imageDigestPackageFixed in
hashicorp/waypoint:0.11.397d521a27498
github.com/distribution/distribution/v3@v3.0.0-20220526142353-ffbd94cbe269
3.1.0

Open the chart page →

4,167
drone-runner-dockerdroneVerified publisher0.7.01 of 3See more

drone-runner-docker drone 0.7.0

1 of the 3 container images this version deploys carry CVE-2026-33540.

Container imageDigestPackageFixed in
library/docker:20-dindaf96c680a7e1
github.com/distribution/distribution/v3@v3.0.0-20220725133111-4bf3547399eb
3.1.0

Open the chart page →

5,674
coreinstill-aiOfficialVerified publisher0.1.751 of 15See more

core instill-ai 0.1.75

1 of the 15 container images this version deploys carry CVE-2026-33540.

Container imageDigestPackageFixed in
instill/api-gateway:9bfdc88b53eaa51c523
github.com/distribution/distribution@v2.8.3+incompatible
no fix listed

Open the chart page →

30,816
loftloftVerified publisher0.0.0-ci.141 of 1See more

loft loft 0.0.0-ci.14

1 of the 1 container images this version deploys carry CVE-2026-33540.

Container imageDigestPackageFixed in
ghcr.io/loft-sh/loft:0.0.0-ci.14b69bcdaa8492
github.com/distribution/distribution/v3@v3.0.0-20230214150026-36d8c594d7aa
3.1.0

Open the chart page →

3,675
feedbacksystemthm-mni-iiVerified publisher0.47.12 of 10See more

feedbacksystem thm-mni-ii 0.47.1

2 of the 10 container images this version deploys carry CVE-2026-33540.

Container imageDigestPackageFixed in
library/docker:20.10.21-dind3153fa63f546
github.com/distribution/distribution/v3@v3.0.0-20220725133111-4bf3547399eb
3.1.0
thmmniii/fbs-runner:v1.27.186105349c1a3
github.com/distribution/distribution/v3@v3.0.0-20220725133111-4bf3547399eb
3.1.0

Open the chart page →

28,534
docker-in-dockerdocker-in-docker0.0.31 of 2See more

docker-in-docker docker-in-docker 0.0.3

1 of the 2 container images this version deploys carry CVE-2026-33540.

Container imageDigestPackageFixed in
library/docker:24.0.2-dind1d148deae16a
github.com/distribution/distribution/v3@v3.0.0-20230601133803-97b1d649c493
3.1.0

Open the chart page →

2,576
kubernetes-stateless-chartkubernetes-stateless-chart1.0.31 of 1See more

kubernetes-stateless-chart kubernetes-stateless-chart 1.0.3

1 of the 1 container images this version deploys carry CVE-2026-33540.

Container imageDigestPackageFixed in
portainer/portainer-ce:2.18.4-alpine3e61aaee1341
github.com/distribution/distribution/v3@v3.0.0-20230223072852-e5d5810851d1
3.1.0

Open the chart page →

3,274
airports-kafkaairports-kafka0.1.01 of 2See more

airports-kafka airports-kafka 0.1.0

1 of the 2 container images this version deploys carry CVE-2026-33540.

Container imageDigestPackageFixed in
wurstmeister/kafka:latest2d4bbf9cc83d
github.com/distribution/distribution/v3@v3.0.0-20210316161203-a01c71e2477e
3.1.0

Open the chart page →

4,547
aktoakto0.2.01 of 7See more

akto akto 0.2.0

1 of the 7 container images this version deploys carry CVE-2026-33540.

Container imageDigestPackageFixed in
keelhq/keel:latest73714afb4443
github.com/distribution/distribution/v3@v3.0.0-20230722181636-7b502560cad4
3.1.0

Open the chart page →

13,613
akto-hybrid-redactakto1.44.41 of 5See more

akto-hybrid-redact akto 1.44.4

1 of the 5 container images this version deploys carry CVE-2026-33540.

Container imageDigestPackageFixed in
keelhq/keel:latest73714afb4443
github.com/distribution/distribution/v3@v3.0.0-20230722181636-7b502560cad4
3.1.0

Open the chart page →

4,777
akto-mini-testingakto1.45.71 of 5See more

akto-mini-testing akto 1.45.7

1 of the 5 container images this version deploys carry CVE-2026-33540.

Container imageDigestPackageFixed in
public.ecr.aws/aktosecurity/keelhq-keel:akto_v1.0.01eb61443d68e
github.com/distribution/distribution/v3@v3.0.0-20230722181636-7b502560cad4
3.1.0

Open the chart page →

6,486
akto-mini-testing-kafkaakto1.42.11 of 5See more

akto-mini-testing-kafka akto 1.42.1

1 of the 5 container images this version deploys carry CVE-2026-33540.

Container imageDigestPackageFixed in
keelhq/keel:latest73714afb4443
github.com/distribution/distribution/v3@v3.0.0-20230722181636-7b502560cad4
3.1.0

Open the chart page →

6,397
akto-protectionakto0.1.01 of 4See more

akto-protection akto 0.1.0

1 of the 4 container images this version deploys carry CVE-2026-33540.

Container imageDigestPackageFixed in
keelhq/keel:latest73714afb4443
github.com/distribution/distribution/v3@v3.0.0-20230722181636-7b502560cad4
3.1.0

Open the chart page →

11,285
akto-testing-db-layerakto1.42.161 of 2See more

akto-testing-db-layer akto 1.42.16

1 of the 2 container images this version deploys carry CVE-2026-33540.

Container imageDigestPackageFixed in
keelhq/keel:latest73714afb4443
github.com/distribution/distribution/v3@v3.0.0-20230722181636-7b502560cad4
3.1.0

Open the chart page →

5,489
amorphieamorphie0.1.21 of 18See more

amorphie amorphie 0.1.2

1 of the 18 container images this version deploys carry CVE-2026-33540.

Container imageDigestPackageFixed in
daprio/dashboard:0.14.07ba5d51e5b97
github.com/distribution/distribution/v3@v3.0.0-20230214150026-36d8c594d7aa
3.1.0

Open the chart page →

28,131
kubermatic-operatorbuttahtoastVerified publisher2.24.51 of 1See more

kubermatic-operator buttahtoast 2.24.5

1 of the 1 container images this version deploys carry CVE-2026-33540.

Container imageDigestPackageFixed in
quay.io/kubermatic/kubermatic:v2.24.5ebba936046ab
github.com/distribution/distribution/v3@v3.0.0-20230629214736-bac7f02e02a1
3.1.0

Open the chart page →

2,770
cp4d-deployercloud-native-toolkit1.0.01 of 1See more

cp4d-deployer cloud-native-toolkit 1.0.0

1 of the 1 container images this version deploys carry CVE-2026-33540.

Container imageDigestPackageFixed in
quay.io/cloudnativetoolkit/cloud-pak-deployer:latest13aaae779248
github.com/distribution/distribution@v2.8.1+incompatible
no fix listed

Open the chart page →

25,151
ocs-operatorcloud-native-toolkit0.2.41 of 1See more

ocs-operator cloud-native-toolkit 0.2.4

1 of the 1 container images this version deploys carry CVE-2026-33540.

Container imageDigestPackageFixed in
quay.io/openshift/origin-cli:latest605eaa5d469c
github.com/distribution/distribution/v3@v3.0.0-20230519140516-983358f8e250
3.1.0

Open the chart page →

369
refarch-infraconfigcloud-native-toolkit0.2.21 of 1See more

refarch-infraconfig cloud-native-toolkit 0.2.2

1 of the 1 container images this version deploys carry CVE-2026-33540.

Container imageDigestPackageFixed in
quay.io/openshift/origin-cli:latest605eaa5d469c
github.com/distribution/distribution/v3@v3.0.0-20230519140516-983358f8e250
3.1.0

Open the chart page →

369
argo-cdcluster-deploy0.3.21 of 3See more

argo-cd cluster-deploy 0.3.2

1 of the 3 container images this version deploys carry CVE-2026-33540.

Container imageDigestPackageFixed in
quay.io/argoprojlabs/argocd-image-updater:v1.2.13c56f354fac5
github.com/distribution/distribution/v3@v3.0.0-20230722181636-7b502560cad4
3.1.0

Open the chart page →

3,693
custom-rhcl-consolecustom-rhcl-consoleVerified publisher0.1.21 of 3See more

custom-rhcl-console custom-rhcl-console 0.1.2

1 of the 3 container images this version deploys carry CVE-2026-33540.

Container imageDigestPackageFixed in
quay.io/openshift/origin-cli:latest605eaa5d469c
github.com/distribution/distribution/v3@v3.0.0-20230519140516-983358f8e250
3.1.0

Open the chart page →

1,885
kyvernodevopstalesVerified publisher2.5.12 of 2See more

kyverno devopstales 2.5.1

2 of the 2 container images this version deploys carry CVE-2026-33540.

Container imageDigestPackageFixed in
ghcr.io/kyverno/kyverno:v1.7.19c73f1841ebc
github.com/distribution/distribution@v2.7.1+incompatible
no fix listed
ghcr.io/kyverno/kyvernopre:v1.7.1185d2eebc60c
github.com/distribution/distribution@v2.7.1+incompatible
no fix listed

Open the chart page →

4,722
kafkagengxiankun-charts0.2.01 of 1See more

kafka gengxiankun-charts 0.2.0

1 of the 1 container images this version deploys carry CVE-2026-33540.

Container imageDigestPackageFixed in
wurstmeister/kafka:latest2d4bbf9cc83d
github.com/distribution/distribution/v3@v3.0.0-20210316161203-a01c71e2477e
3.1.0

Open the chart page →

4,547
harborgpg-dev1.18.33 of 8See more

harbor gpg-dev 1.18.3

3 of the 8 container images this version deploys carry CVE-2026-33540.

Container imageDigestPackageFixed in
goharbor/harbor-core:v2.14.3a30e5a8be3d9
github.com/distribution/distribution@v2.8.2+incompatible
no fix listed
goharbor/harbor-jobservice:v2.14.3e2b0298e894d
github.com/distribution/distribution@v2.8.2+incompatible
no fix listed
goharbor/harbor-registryctl:v2.14.3ddf6bb429eb6
github.com/distribution/distribution@v2.8.2+incompatible
no fix listed

Open the chart page →

3,376
helm-airportshelm-airports0.1.01 of 7See more

helm-airports helm-airports 0.1.0

1 of the 7 container images this version deploys carry CVE-2026-33540.

Container imageDigestPackageFixed in
wurstmeister/kafka:latest2d4bbf9cc83d
github.com/distribution/distribution/v3@v3.0.0-20210316161203-a01c71e2477e
3.1.0

Open the chart page →

12,696
airports-kafkahelm-airports-dan0.1.01 of 2See more

airports-kafka helm-airports-dan 0.1.0

1 of the 2 container images this version deploys carry CVE-2026-33540.

Container imageDigestPackageFixed in
wurstmeister/kafka:latest2d4bbf9cc83d
github.com/distribution/distribution/v3@v3.0.0-20210316161203-a01c71e2477e
3.1.0

Open the chart page →

4,547
helm-airportshelm-airports-dan0.1.01 of 7See more

helm-airports helm-airports-dan 0.1.0

1 of the 7 container images this version deploys carry CVE-2026-33540.

Container imageDigestPackageFixed in
wurstmeister/kafka:latest2d4bbf9cc83d
github.com/distribution/distribution/v3@v3.0.0-20210316161203-a01c71e2477e
3.1.0

Open the chart page →

5,573
airports-kafkahelm-airports-kafka0.1.01 of 2See more

airports-kafka helm-airports-kafka 0.1.0

1 of the 2 container images this version deploys carry CVE-2026-33540.

Container imageDigestPackageFixed in
wurstmeister/kafka:latest2d4bbf9cc83d
github.com/distribution/distribution/v3@v3.0.0-20210316161203-a01c71e2477e
3.1.0

Open the chart page →

4,547
harborhelm-harborVerified publisher2.3.53 of 8See more

harbor helm-harbor 2.3.5

3 of the 8 container images this version deploys carry CVE-2026-33540.

Container imageDigestPackageFixed in
goharbor/harbor-core:v2.15.2d7b780d23721
github.com/distribution/distribution@v2.8.2+incompatible
no fix listed
goharbor/harbor-jobservice:v2.15.2f71a4452a095
github.com/distribution/distribution@v2.8.2+incompatible
no fix listed
goharbor/harbor-registryctl:v2.15.2223d5cb49d5d
github.com/distribution/distribution@v2.8.2+incompatible
no fix listed

Open the chart page →

1,650
kubebbkubebb0.0.11 of 1See more

kubebb kubebb 0.0.1

1 of the 1 container images this version deploys carry CVE-2026-33540.

Container imageDigestPackageFixed in
kubebb/core:lateste366c34a9b8d
github.com/distribution/distribution/v3@v3.0.0-20220526142353-ffbd94cbe269
3.1.0

Open the chart page →

1,749
kubebb-corekubebb0.1.271 of 1See more

kubebb-core kubebb 0.1.27

1 of the 1 container images this version deploys carry CVE-2026-33540.

Container imageDigestPackageFixed in
kubebb/core:v0.1.62b9e7f451d6b
github.com/distribution/distribution/v3@v3.0.0-20220526142353-ffbd94cbe269
3.1.0

Open the chart page →

1,938
harborkubesphereVerified publisher1.9.33 of 11See more

harbor kubesphere 1.9.3

3 of the 11 container images this version deploys carry CVE-2026-33540.

Container imageDigestPackageFixed in
goharbor/harbor-core:v2.5.386bf3031f4a7
github.com/distribution/distribution@v2.8.0+incompatible
no fix listed
goharbor/harbor-jobservice:v2.5.38d5339ff2d74
github.com/distribution/distribution@v2.8.0+incompatible
no fix listed
goharbor/harbor-registryctl:v2.5.37f82ed1e2635
github.com/distribution/distribution@v2.8.0+incompatible
no fix listed

Open the chart page →

17,798
devpod-proloftVerified publisher0.0.0-ci.4-do-not-use1 of 1See more

devpod-pro loft 0.0.0-ci.4-do-not-use

1 of the 1 container images this version deploys carry CVE-2026-33540.

Container imageDigestPackageFixed in
ghcr.io/loft-sh/devpod-pro:0.0.0-ci.4-do-not-use5dfa86b6451f
github.com/distribution/distribution/v3@v3.0.0-20230214150026-36d8c594d7aa
3.1.0

Open the chart page →

3,225
vcluster-control-planeloftVerified publisher0.0.0-ci.4-do-not-use1 of 1See more

vcluster-control-plane loft 0.0.0-ci.4-do-not-use

1 of the 1 container images this version deploys carry CVE-2026-33540.

Container imageDigestPackageFixed in
ghcr.io/loft-sh/vcluster-control-plane:0.0.0-ci.4-do-not-use45e744fc623f
github.com/distribution/distribution/v3@v3.0.0-20230214150026-36d8c594d7aa
3.1.0

Open the chart page →

3,225
aws-api-gateway-operatormintel0.1.21 of 11See more

aws-api-gateway-operator mintel 0.1.2

1 of the 11 container images this version deploys carry CVE-2026-33540.

Container imageDigestPackageFixed in
library/docker:20.10-dindaf96c680a7e1
github.com/distribution/distribution/v3@v3.0.0-20220725133111-4bf3547399eb
3.1.0

Open the chart page →

10,603
standard-application-stackmintel11.4.01 of 12See more

standard-application-stack mintel 11.4.0

1 of the 12 container images this version deploys carry CVE-2026-33540.

Container imageDigestPackageFixed in
library/docker:20.10-dindaf96c680a7e1
github.com/distribution/distribution/v3@v3.0.0-20220725133111-4bf3547399eb
3.1.0

Open the chart page →

10,603
kafka-helm-chartnotesprojectchart0.1.01 of 1See more

kafka-helm-chart notesprojectchart 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-33540.

Container imageDigestPackageFixed in
wurstmeister/kafka:latest2d4bbf9cc83d
github.com/distribution/distribution/v3@v3.0.0-20210316161203-a01c71e2477e
3.1.0

Open the chart page →

4,547
example-dev-toolsnoygal0.2.81 of 3See more

example-dev-tools noygal 0.2.8

1 of the 3 container images this version deploys carry CVE-2026-33540.

Container imageDigestPackageFixed in
linuxserver/cloud9:latest45c5fe102ff3
github.com/distribution/distribution/v3@v3.0.0-20210316161203-a01c71e2477e
3.1.0

Open the chart page →

27,465
kb-cloud-installeropenshift2.1.351 of 1See more

kb-cloud-installer openshift 2.1.35

1 of the 1 container images this version deploys carry CVE-2026-33540.

Container imageDigestPackageFixed in
apecloud/kb-cloud-installer:v2.1.42-certified98abc64aa985
github.com/distribution/distribution/v3@v3.0.0
3.1.0

Open the chart page →

4,127
openvscode-serveropenvscode-server-helmVerified publisher2.7.371 of 2See more

openvscode-server openvscode-server-helm 2.7.37

1 of the 2 container images this version deploys carry CVE-2026-33540.

Container imageDigestPackageFixed in
library/docker:23.0.1-dindd9a0fd8bdd15
github.com/distribution/distribution/v3@v3.0.0-20230223072852-e5d5810851d1
3.1.0

Open the chart page →

4,237
pet-battle-infrapetbattle1.0.321 of 2See more

pet-battle-infra petbattle 1.0.32

1 of the 2 container images this version deploys carry CVE-2026-33540.

Container imageDigestPackageFixed in
quay.io/openshift/origin-cli:latest605eaa5d469c
github.com/distribution/distribution/v3@v3.0.0-20230519140516-983358f8e250
3.1.0

Open the chart page →

15,466
pet-battle-tournamentpetbattle1.0.401 of 3See more

pet-battle-tournament petbattle 1.0.40

1 of the 3 container images this version deploys carry CVE-2026-33540.

Container imageDigestPackageFixed in
quay.io/openshift/origin-cli:latest605eaa5d469c
github.com/distribution/distribution/v3@v3.0.0-20230519140516-983358f8e250
3.1.0

Open the chart page →

15,466
pixie-operator-chartpixie0.1.71 of 3See more

pixie-operator-chart pixie 0.1.7

1 of the 3 container images this version deploys carry CVE-2026-33540.

Container imageDigestPackageFixed in
quay.io/operator-framework/olmdigest-pinned1b6002156f56
github.com/distribution/distribution@v2.7.1+incompatible
no fix listed

Open the chart page →

1,899
pixie-operator-helm2-chartpixie0.1.21 of 2See more

pixie-operator-helm2-chart pixie 0.1.2

1 of the 2 container images this version deploys carry CVE-2026-33540.

Container imageDigestPackageFixed in
quay.io/operator-framework/olmdigest-pinnedf9ea8cef95ac
github.com/distribution/distribution@v2.7.1+incompatible
no fix listed

Open the chart page →

1,753
harborquench-harborVerified publisher0.0.193 of 9See more

harbor quench-harbor 0.0.19

3 of the 9 container images this version deploys carry CVE-2026-33540.

Container imageDigestPackageFixed in
ghcr.io/quenchworks/images/harbor-coredigest-pinned5dc9b1d47431
github.com/distribution/distribution@v2.8.2+incompatible
no fix listed
ghcr.io/quenchworks/images/harbor-jobservicedigest-pinned49da7eecfd3f
github.com/distribution/distribution@v2.8.2+incompatible
no fix listed
ghcr.io/quenchworks/images/harbor-registryctldigest-pinned7e0e7599e798
github.com/distribution/distribution@v2.8.2+incompatible
no fix listed

Open the chart page →

567
gitops-operatorredhat-cop0.10.61 of 1See more

gitops-operator redhat-cop 0.10.6

1 of the 1 container images this version deploys carry CVE-2026-33540.

Container imageDigestPackageFixed in
quay.io/openshift/origin-cli:latest605eaa5d469c
github.com/distribution/distribution/v3@v3.0.0-20230519140516-983358f8e250
3.1.0

Open the chart page →

369
ploigosredhat-cop0.0.91 of 2See more

ploigos redhat-cop 0.0.9

1 of the 2 container images this version deploys carry CVE-2026-33540.

Container imageDigestPackageFixed in
quay.io/openshift/origin-cli:latest605eaa5d469c
github.com/distribution/distribution/v3@v3.0.0-20230519140516-983358f8e250
3.1.0

Open the chart page →

11,437

Container images carrying it

49 by charts deploying them

A fixed version is listed for 1 of the 2 affected packages.

Container imageDigestPackageFixed inUsed by
wurstmeister/kafka:latest2d4bbf9cc83d
github.com/distribution/distribution/v3@v3.0.0-20210316161203-a01c71e2477e
3.1.0
7
quay.io/openshift/origin-cli:latest605eaa5d469c
github.com/distribution/distribution/v3@v3.0.0-20230519140516-983358f8e250
3.1.0
7
keelhq/keel:latest73714afb4443
github.com/distribution/distribution/v3@v3.0.0-20230722181636-7b502560cad4
3.1.0
5
goharbor/harbor-core:v2.15.2d7b780d23721
github.com/distribution/distribution@v2.8.2+incompatible
no fix listed
3
goharbor/harbor-jobservice:v2.15.2f71a4452a095
github.com/distribution/distribution@v2.8.2+incompatible
no fix listed
3
goharbor/harbor-registryctl:v2.15.2223d5cb49d5d
github.com/distribution/distribution@v2.8.2+incompatible
no fix listed
3
library/docker:20.10-dind:20-dindaf96c680a7e1
github.com/distribution/distribution/v3@v3.0.0-20220725133111-4bf3547399eb
3.1.0
3
apecloud/kb-cloud-installer:v2.1.42-certified98abc64aa985
github.com/distribution/distribution/v3@v3.0.0
3.1.0
1
daprio/dashboard:0.14.07ba5d51e5b97
github.com/distribution/distribution/v3@v3.0.0-20230214150026-36d8c594d7aa
3.1.0
1
goharbor/harbor-core:v2.9.06412d679fdc3
github.com/distribution/distribution@v2.8.2+incompatible
no fix listed
1
goharbor/harbor-core:v2.5.386bf3031f4a7
github.com/distribution/distribution@v2.8.0+incompatible
no fix listed
1
goharbor/harbor-core:v2.14.3a30e5a8be3d9
github.com/distribution/distribution@v2.8.2+incompatible
no fix listed
1
goharbor/harbor-core:v2.11.1c017dd84ee96
github.com/distribution/distribution@v2.8.2+incompatible
no fix listed
1
goharbor/harbor-jobservice:v2.9.039435daedd0c
github.com/distribution/distribution@v2.8.2+incompatible
no fix listed
1
goharbor/harbor-jobservice:v2.5.38d5339ff2d74
github.com/distribution/distribution@v2.8.0+incompatible
no fix listed
1
goharbor/harbor-jobservice:v2.14.3e2b0298e894d
github.com/distribution/distribution@v2.8.2+incompatible
no fix listed
1
goharbor/harbor-registryctl:v2.5.37f82ed1e2635
github.com/distribution/distribution@v2.8.0+incompatible
no fix listed
1
goharbor/harbor-registryctl:v2.9.0cce272836449
github.com/distribution/distribution@v2.8.2+incompatible
no fix listed
1
goharbor/harbor-registryctl:v2.14.3ddf6bb429eb6
github.com/distribution/distribution@v2.8.2+incompatible
no fix listed
1
hashicorp/waypoint:0.11.397d521a27498
github.com/distribution/distribution/v3@v3.0.0-20220526142353-ffbd94cbe269
3.1.0
1
instill/api-gateway:9bfdc88b53eaa51c523
github.com/distribution/distribution@v2.8.3+incompatible
no fix listed
1
kubebb/core:v0.1.62b9e7f451d6b
github.com/distribution/distribution/v3@v3.0.0-20220526142353-ffbd94cbe269
3.1.0
1
kubebb/core:lateste366c34a9b8d
github.com/distribution/distribution/v3@v3.0.0-20220526142353-ffbd94cbe269
3.1.0
1
library/docker:24.0.2-dind1d148deae16a
github.com/distribution/distribution/v3@v3.0.0-20230601133803-97b1d649c493
3.1.0
1
library/docker:20.10.21-dind3153fa63f546
github.com/distribution/distribution/v3@v3.0.0-20220725133111-4bf3547399eb
3.1.0
1
library/docker:23.0.6-dindafa5d5134900
github.com/distribution/distribution/v3@v3.0.0-20230214150026-36d8c594d7aa
3.1.0
1
library/docker:23.0.1-dindd9a0fd8bdd15
github.com/distribution/distribution/v3@v3.0.0-20230223072852-e5d5810851d1
3.1.0
1
linuxserver/cloud9:latest45c5fe102ff3
github.com/distribution/distribution/v3@v3.0.0-20210316161203-a01c71e2477e
3.1.0
1
portainer/portainer-ce:2.18.4-alpine3e61aaee1341
github.com/distribution/distribution/v3@v3.0.0-20230223072852-e5d5810851d1
3.1.0
1
thmmniii/fbs-runner:v1.27.186105349c1a3
github.com/distribution/distribution/v3@v3.0.0-20220725133111-4bf3547399eb
3.1.0
1
ghcr.io/daocloud/crproxy/crproxy:v0.8.0ee1eb3c9c9a1
github.com/distribution/distribution/v3@v3.0.0-20220907155224-78b9c98c5c31
3.1.0
1
ghcr.io/distribution/distribution:3.0.04ba3adf47f5c
github.com/distribution/distribution/v3@v0.0.0-20250402055438-9ed95e736522
3.1.0
1
ghcr.io/keel-hq/keel:0.22.3315e188a07c2
github.com/distribution/distribution/v3@v3.0.0-20230722181636-7b502560cad4
3.1.0
1
ghcr.io/kyverno/kyverno:v1.7.19c73f1841ebc
github.com/distribution/distribution@v2.7.1+incompatible
no fix listed
1
ghcr.io/kyverno/kyvernopre:v1.7.1185d2eebc60c
github.com/distribution/distribution@v2.7.1+incompatible
no fix listed
1
ghcr.io/loft-sh/devpod-pro:0.0.0-ci.4-do-not-use5dfa86b6451f
github.com/distribution/distribution/v3@v3.0.0-20230214150026-36d8c594d7aa
3.1.0
1
ghcr.io/loft-sh/loft:0.0.0-ci.14b69bcdaa8492
github.com/distribution/distribution/v3@v3.0.0-20230214150026-36d8c594d7aa
3.1.0
1
ghcr.io/loft-sh/vcluster-control-plane:0.0.0-ci.4-do-not-use45e744fc623f
github.com/distribution/distribution/v3@v3.0.0-20230214150026-36d8c594d7aa
3.1.0
1
ghcr.io/quenchworks/images/harbor-core5dc9b1d47431
github.com/distribution/distribution@v2.8.2+incompatible
no fix listed
1
ghcr.io/quenchworks/images/harbor-jobservice49da7eecfd3f
github.com/distribution/distribution@v2.8.2+incompatible
no fix listed
1
ghcr.io/quenchworks/images/harbor-registryctl7e0e7599e798
github.com/distribution/distribution@v2.8.2+incompatible
no fix listed
1
public.ecr.aws/aktosecurity/keelhq-keel:akto_v1.0.01eb61443d68e
github.com/distribution/distribution/v3@v3.0.0-20230722181636-7b502560cad4
3.1.0
1
quay.io/argoprojlabs/argocd-image-updater:v1.2.13c56f354fac5
github.com/distribution/distribution/v3@v3.0.0-20230722181636-7b502560cad4
3.1.0
1
quay.io/cloudnativetoolkit/cloud-pak-deployer:latest13aaae779248
github.com/distribution/distribution@v2.8.1+incompatible
no fix listed
1
quay.io/kubermatic/kubermatic:v2.24.5ebba936046ab
github.com/distribution/distribution/v3@v3.0.0-20230629214736-bac7f02e02a1
3.1.0
1
quay.io/kubescape/node-agent:v0.3.2192044ed750f5e
github.com/distribution/distribution@v2.8.2+incompatible
no fix listed
1
quay.io/openshift/origin-jenkins-agent-base:latestc241c971aef8
github.com/distribution/distribution/v3@v3.0.0-20230519140516-983358f8e250
3.1.0
1
quay.io/operator-framework/olm1b6002156f56
github.com/distribution/distribution@v2.7.1+incompatible
no fix listed
1
quay.io/operator-framework/olmf9ea8cef95ac
github.com/distribution/distribution@v2.7.1+incompatible
no fix listed
1

syft 1.42.1 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.