StackRadar

CVE-2026-34502

High

Advisory

Published 6 Aug 2026In the index since 6 Sept 2026
Severity
High
worst across findings
CVSS
7.5
base score, highest
EPSS
0.005
42nd percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
155
of 17,781 indexed, latest versions
Container images
159
deployed by those charts
Fix available
3 of 3
affected packages

Apache Portable Runtime Utility: Heap buffer overflow in APR memcached client

Carried by container images the latest versions of 155 of 17,781 indexed charts deploy, on 159 images.

Affected packageAffected versionsFixed inImages
apr-utildeb1.6.1-4ubuntu2, 1.6.1-4ubuntu2.2, 1.6.1-5ubuntu4.22.04.2, 1.6.3-1+2 more1.6.1-4ubuntu2.2+esm1, 1.6.1-5ubuntu4.22.04.3, 1.6.3-1.1ubuntu7.1, 1.6.3-1+deb12u1+1 more149
apr-utilapk1.6.3-r1, 1.6.3-r21.6.4-r08
apr-utilbitnami1.6.31.6.52
OSV records
ALPINE-CVE-2026-34502BIT-apr-util-2026-34502DEBIAN-CVE-2026-34502UBUNTU-CVE-2026-34502
Also known as
USN-8719-1

Charts affected

155 by stars
ChartLatestAffected imagesRadar Score
openprojectopenproject-helm-chartsOfficialVerified publisher13.11.01 of 5See more

openproject openproject-helm-charts 13.11.0

1 of the 5 container images this version deploys carry CVE-2026-34502.

Container imageDigestPackageFixed in
openproject/hocuspocus:release-338001b288dc1359dfb5
apr-util@1.6.3-1
1.6.3-1+deb12u1

Open the chart page →

19,926
snipeitt3n3.4.11 of 2See more

snipeit t3n 3.4.1

1 of the 2 container images this version deploys carry CVE-2026-34502.

Container imageDigestPackageFixed in
snipe/snipe-it:v6.0.1455fb7636a98c
apr-util@1.6.1-4ubuntu2
1.6.1-4ubuntu2.2+esm1

Open the chart page →

18,509
renterdartur9010Verified publisher1.4.41 of 2See more

renterd artur9010 1.4.4

1 of the 2 container images this version deploys carry CVE-2026-34502.

Container imageDigestPackageFixed in
artur9010/wait-for:v1.0.06b4de3ce8b0e
apr-util@1.6.3-1
1.6.3-1+deb12u1

Open the chart page →

8,493
devtron-operatordevtron0.23.31 of 11See more

devtron-operator devtron 0.23.3

1 of the 11 container images this version deploys carry CVE-2026-34502.

Container imageDigestPackageFixed in
quay.io/devtron/devtron-utils:dup-chart-repo-v1.1.095d6f0e05636
apr-util@1.6.3-1
1.6.3-1+deb12u1

Open the chart page →

32,902
monicamonicaOfficialVerified publisher1.0.151 of 1See more

monica monica 1.0.15

1 of the 1 container images this version deploys carry CVE-2026-34502.

Container imageDigestPackageFixed in
ghcr.io/monicahq/monica-next:main8be69156acbb
apr-util@1.6.3-3+b1
1.6.3-3+deb13u1

Open the chart page →

5,634
bookstackgabe565Verified publisher0.20.01 of 1See more

bookstack gabe565 0.20.0

1 of the 1 container images this version deploys carry CVE-2026-34502.

Container imageDigestPackageFixed in
ghcr.io/linuxserver/bookstack:version-v24.12.1cc795b254b73
apr-util@1.6.3-r1
1.6.4-r0

Open the chart page →

2,811
uffizzi-controlleruffizzi-controller2.4.61 of 11See more

uffizzi-controller uffizzi-controller 2.4.6

1 of the 11 container images this version deploys carry CVE-2026-34502.

Container imageDigestPackageFixed in
uffizzi/controller:latest0344805f267b
apr-util@1.6.3-1
1.6.3-1+deb12u1

Open the chart page →

14,240
dolibarrcowboysysopVerified publisher9.0.31 of 3See more

dolibarr cowboysysop 9.0.3

1 of the 3 container images this version deploys carry CVE-2026-34502.

Container imageDigestPackageFixed in
dolibarr/dolibarr:22.0.47ad88fc9b13c
apr-util@1.6.3-1
1.6.3-1+deb12u1

Open the chart page →

9,106
glpiglpi-conteiner0.1.01 of 3See more

glpi glpi-conteiner 0.1.0

1 of the 3 container images this version deploys carry CVE-2026-34502.

Container imageDigestPackageFixed in
vdiogov/glpi-conteiner:latest6945f84f0058
apr-util@1.6.3-1
1.6.3-1+deb12u1

Open the chart page →

12,170
kubeflowkubeflow1.6.21 of 45See more

kubeflow kubeflow 1.6.2

1 of the 45 container images this version deploys carry CVE-2026-34502.

Container imageDigestPackageFixed in
library/python:3.7eedf63967cdb
apr-util@1.6.3-1
1.6.3-1+deb12u1

Open the chart page →

96,941
uffizzi-appuffizzi-app1.3.01 of 14See more

uffizzi-app uffizzi-app 1.3.0

1 of the 14 container images this version deploys carry CVE-2026-34502.

Container imageDigestPackageFixed in
uffizzi/controller:latest0344805f267b
apr-util@1.6.3-1
1.6.3-1+deb12u1

Open the chart page →

19,337
athens-proxyvolker-raschekVerified publisher2.0.31 of 1See more

athens-proxy volker-raschek 2.0.3

1 of the 1 container images this version deploys carry CVE-2026-34502.

Container imageDigestPackageFixed in
gomods/athens:v0.17.10f61d1e62359
apr-util@1.6.3-r2
1.6.4-r0

Open the chart page →

2,039
athens-proxyathens-chartsOfficialVerified publisher0.17.11 of 1See more

athens-proxy athens-charts 0.17.1

1 of the 1 container images this version deploys carry CVE-2026-34502.

Container imageDigestPackageFixed in
gomods/athens:v0.18.197cc113b34b0
apr-util@1.6.3-r2
1.6.4-r0

Open the chart page →

1,298
bookstackbookstack-mgVerified publisher0.3.11 of 2See more

bookstack bookstack-mg 0.3.1

1 of the 2 container images this version deploys carry CVE-2026-34502.

Container imageDigestPackageFixed in
linuxserver/bookstack:26.05.202605282ebf97852661
apr-util@1.6.3-r2
1.6.4-r0

Open the chart page →

1,896
cosmocosmo-platformOfficialVerified publisher0.20.01 of 10See more

cosmo cosmo-platform 0.20.0

1 of the 10 container images this version deploys carry CVE-2026-34502.

Container imageDigestPackageFixed in
ghcr.io/wundergraph/cosmo/otelcollector:0.18.15a6fe78d4d15
apr-util@1.6.3-1
1.6.3-1+deb12u1

Open the chart page →

28,839
dask-kubernetes-operatordask2026.3.01 of 1See more

dask-kubernetes-operator dask 2026.3.0

1 of the 1 container images this version deploys carry CVE-2026-34502.

Container imageDigestPackageFixed in
ghcr.io/dask/dask-kubernetes-operator:2026.3.03225d2bc6b3c
apr-util@1.6.3-3+b1
1.6.3-3+deb13u1

Open the chart page →

9,316
coreinstill-aiOfficialVerified publisher0.1.753 of 15See more

core instill-ai 0.1.75

3 of the 15 container images this version deploys carry CVE-2026-34502.

Container imageDigestPackageFixed in
instill/artifact-backend:b28766ac4a393e601ed
apr-util@1.6.3-3+b1
1.6.3-3+deb13u1
instill/mgmt-backend:d0933d4ebe12f77a3f9
apr-util@1.6.3-3+b1
1.6.3-3+deb13u1
instill/model-backend:611f0f2e980125e5ba5
apr-util@1.6.3-3+b1
1.6.3-3+deb13u1

Open the chart page →

30,816
pretixtechwolf12Verified publisher2026.7.01 of 3See more

pretix techwolf12 2026.7.0

1 of the 3 container images this version deploys carry CVE-2026-34502.

Container imageDigestPackageFixed in
pretix/standalone:2026.7.05df3b7aa852e
apr-util@1.6.3-3+b1
1.6.3-3+deb13u1

Open the chart page →

9,770
typo3christianhuthVerified publisher7.7.01 of 2See more

typo3 christianhuth 7.7.0

1 of the 2 container images this version deploys carry CVE-2026-34502.

Container imageDigestPackageFixed in
martinhelmich/typo3:12.4c83a4f3fd7ae
apr-util@1.6.3-1
1.6.3-1+deb12u1

Open the chart page →

8,466
cosmotech-copilot-apicosmotech-apiVerified publisher0.1.11 of 1See more

cosmotech-copilot-api cosmotech-api 0.1.1

1 of the 1 container images this version deploys carry CVE-2026-34502.

Container imageDigestPackageFixed in
ghcr.io/cosmo-tech/cosmotech-copilot-api:latesta2be95de450c
apr-util@1.6.3-3+b1
1.6.3-3+deb13u1

Open the chart page →

11,205
dragonfly-stackdragonflyVerified publisher0.1.21 of 7See more

dragonfly-stack dragonfly 0.1.2

1 of the 7 container images this version deploys carry CVE-2026-34502.

Container imageDigestPackageFixed in
dragonflyoss/client:v0.1.82edf3e921f4e0
apr-util@1.6.3-1
1.6.3-1+deb12u1

Open the chart page →

18,376
enbuildenbuildVerified publisher0.0.501 of 6See more

enbuild enbuild 0.0.50

1 of the 6 container images this version deploys carry CVE-2026-34502.

Container imageDigestPackageFixed in
registry.gitlab.com/enbuild-staging/vivsoft-platform-ui/enbuild-mq-consumer:1.0.310e3cd8c7776d
apr-util@1.6.3-1
1.6.3-1+deb12u1

Open the chart page →

31,510
roundcubeencircle360-ossVerified publisher0.8.31 of 1See more

roundcube encircle360-oss 0.8.3

1 of the 1 container images this version deploys carry CVE-2026-34502.

Container imageDigestPackageFixed in
roundcube/roundcubemail:1.6.16-apache-nonroot17d9d9580962
apr-util@1.6.3-3+b1
1.6.3-3+deb13u1

Open the chart page →

5,584
vulnz-nvd-mirroreugen1.0.01 of 1See more

vulnz-nvd-mirror eugen 1.0.0

1 of the 1 container images this version deploys carry CVE-2026-34502.

Container imageDigestPackageFixed in
ghcr.io/jeremylong/open-vulnerability-data-mirror:v9.0.49a69aa14dc3e
apr-util@1.6.3-r2
1.6.4-r0

Open the chart page →

1,675
tdarrgeek-cookbookVerified publisher4.6.21 of 2See more

tdarr geek-cookbook 4.6.2

1 of the 2 container images this version deploys carry CVE-2026-34502.

Container imageDigestPackageFixed in
haveagitgat/tdarr_node:2.00.101e3f9328327d
apr-util@1.6.1-4ubuntu2
1.6.1-4ubuntu2.2+esm1

Open the chart page →

31,000
iris-webappiris-webapp0.2.41 of 2See more

iris-webapp iris-webapp 0.2.4

1 of the 2 container images this version deploys carry CVE-2026-34502.

Container imageDigestPackageFixed in
ghcr.io/dfir-iris/iriswebapp_app:v2.4.26e59ebde55709
apr-util@1.6.3-3+b1
1.6.3-3+deb13u1

Open the chart page →

11,764
owncloudkubernetes-homelab-helm-chartsVerified publisher0.1.01 of 3See more

owncloud kubernetes-homelab-helm-charts 0.1.0

1 of the 3 container images this version deploys carry CVE-2026-34502.

Container imageDigestPackageFixed in
owncloud/server:10.16.274c53d341076
apr-util@1.6.1-5ubuntu4.22.04.2
1.6.1-5ubuntu4.22.04.3

Open the chart page →

9,858
food-managermoreillonVerified publisher0.5.01 of 2See more

food-manager moreillon 0.5.0

1 of the 2 container images this version deploys carry CVE-2026-34502.

Container imageDigestPackageFixed in
moreillon/food-manager:lateste8fd856e593d
apr-util@1.6.3-1
1.6.3-1+deb12u1

Open the chart page →

13,738
redminemt1905027.3.41 of 3See more

redmine mt190502 7.3.4

1 of the 3 container images this version deploys carry CVE-2026-34502.

Container imageDigestPackageFixed in
library/redmine:6.1.204ac44a2595b
apr-util@1.6.3-3+b1
1.6.3-3+deb13u1

Open the chart page →

7,527
portraitportraitVerified publisher0.2.131 of 8See more

portrait portrait 0.2.13

1 of the 8 container images this version deploys carry CVE-2026-34502.

Container imageDigestPackageFixed in
treskon/portrait-web-setup:DEV-latesta475d80e4ecf
apr-util@1.6.3-1
1.6.3-1+deb12u1

Open the chart page →

31,844
phpqonstruktVerified publisher0.2.01 of 1See more

php qonstrukt 0.2.0

1 of the 1 container images this version deploys carry CVE-2026-34502.

Container imageDigestPackageFixed in
qonstrukt/php:8.4-v8-apache089af7925aa1
apr-util@1.6.3-1.1ubuntu7
1.6.3-1.1ubuntu7.1

Open the chart page →

23,964
kimai2robjuz5.0.131 of 2See more

kimai2 robjuz 5.0.13

1 of the 2 container images this version deploys carry CVE-2026-34502.

Container imageDigestPackageFixed in
kimai/kimai2:2.65.06dfc63199654
apr-util@1.6.3-1
1.6.3-1+deb12u1

Open the chart page →

4,693
kyoorubxkubeVerified publisher0.1.102 of 9See more

kyoo rubxkube 0.1.10

2 of the 9 container images this version deploys carry CVE-2026-34502.

Container imageDigestPackageFixed in
ghcr.io/zoriya/kyoo_autosync:4.7.1fbba58ddb1a6
apr-util@1.6.3-1
1.6.3-1+deb12u1
ghcr.io/zoriya/kyoo_scanner:4.7.17dc0ee57b628
apr-util@1.6.3-1
1.6.3-1+deb12u1

Open the chart page →

30,234
sogosogoVerified publisher0.3.51 of 2See more

sogo sogo 0.3.5

1 of the 2 container images this version deploys carry CVE-2026-34502.

Container imageDigestPackageFixed in
sonroyaalmerol/docker-sogo:5.12.43f60f3abe990
apr-util@1.6.3-3+b1
1.6.3-3+deb13u1

Open the chart page →

7,126
unitycatalogunitycatalogVerified publisher0.0.21 of 4See more

unitycatalog unitycatalog 0.0.2

1 of the 4 container images this version deploys carry CVE-2026-34502.

Container imageDigestPackageFixed in
ghcr.io/sdwbgn/unitycatalog-helm/docker/unitycatalog-ui:0.2.1-5d668c1ed07e7ca098d
apr-util@1.6.3-1
1.6.3-1+deb12u1

Open the chart page →

12,581
wordpress-e2e-setupwoocommerce-e2e-setup0.1.11 of 2See more

wordpress-e2e-setup woocommerce-e2e-setup 0.1.1

1 of the 2 container images this version deploys carry CVE-2026-34502.

Container imageDigestPackageFixed in
library/wordpress:6.8-apache30bff39330d1
apr-util@1.6.3-3+b1
1.6.3-3+deb13u1

Open the chart page →

7,696
zcash-stackzcashVerified publisher0.4.51 of 2See more

zcash-stack zcash 0.4.5

1 of the 2 container images this version deploys carry CVE-2026-34502.

Container imageDigestPackageFixed in
electriccoinco/lightwalletd:v0.5.42ae3a551e111
apr-util@1.6.3-3+b1
1.6.3-3+deb13u1

Open the chart page →

2,835
linkstackadnoctemVerified publisher0.4.01 of 1See more

linkstack adnoctem 0.4.0

1 of the 1 container images this version deploys carry CVE-2026-34502.

Container imageDigestPackageFixed in
linkstackorg/linkstack:latest1c8b05399ee4
apr-util@1.6.3-r1
1.6.4-r0

Open the chart page →

2,092
anchore-admission-controlleranchore-charts0.8.41 of 2See more

anchore-admission-controller anchore-charts 0.8.4

1 of the 2 container images this version deploys carry CVE-2026-34502.

Container imageDigestPackageFixed in
cfssl/cfssl:v1.6.5c9018c2ddf0b
apr-util@1.6.3-1
1.6.3-1+deb12u1

Open the chart page →

7,852
mathesarandrenarchyVerified publisher1.8.01 of 1See more

mathesar andrenarchy 1.8.0

1 of the 1 container images this version deploys carry CVE-2026-34502.

Container imageDigestPackageFixed in
mathesar/mathesar:0.12.0091757cb01fe
apr-util@1.6.3-1
1.6.3-1+deb12u1

Open the chart page →

7,239
dokuwikiarea-42Verified publisher0.1.81 of 1See more

dokuwiki area-42 0.1.8

1 of the 1 container images this version deploys carry CVE-2026-34502.

Container imageDigestPackageFixed in
dokuwiki/dokuwiki:2025-05-14af08ecfdda239
apr-util@1.6.3-3+b1
1.6.3-3+deb13u1

Open the chart page →

7,489
keystonearzu0.2.292 of 4See more

keystone arzu 0.2.29

2 of the 4 container images this version deploys carry CVE-2026-34502.

Container imageDigestPackageFixed in
openstackhelm/heat:wallaby-ubuntu_focalf728510bab3c
apr-util@1.6.1-4ubuntu2.2
1.6.1-4ubuntu2.2+esm1
openstackhelm/keystone:wallaby-ubuntu_focale07d75953d2e
apr-util@1.6.1-4ubuntu2.2
1.6.1-4ubuntu2.2+esm1

Open the chart page →

22,568
smartorchestratorassist-iot-smart-orchestrator4.0.01 of 14See more

smartorchestrator assist-iot-smart-orchestrator 4.0.0

1 of the 14 container images this version deploys carry CVE-2026-34502.

Container imageDigestPackageFixed in
assistiot/smart-orchestrator_scheduler_mc:latestb1dbe4d62a03
apr-util@1.6.3-1
1.6.3-1+deb12u1

Open the chart page →

45,363
astrotrekastria0.0.21 of 4See more

astrotrek astria 0.0.2

1 of the 4 container images this version deploys carry CVE-2026-34502.

Container imageDigestPackageFixed in
ghcr.io/astriaorg/astrotrek:0.1.05889bea38e56
apr-util@1.6.3-1
1.6.3-1+deb12u1

Open the chart page →

32,501
colosseumbook-k8sinfra-v21.0.182 of 5See more

colosseum book-k8sinfra-v2 1.0.18

2 of the 5 container images this version deploys carry CVE-2026-34502.

Container imageDigestPackageFixed in
sysnet4admin/colosseum-cms:loge74b43c7f492
apr-util@1.6.3-1
1.6.3-1+deb12u1
sysnet4admin/colosseum-prm:log5802bfcd7fed
apr-util@1.6.3-1
1.6.3-1+deb12u1

Open the chart page →

26,996
httpd-ldapauth-proxycamptocamp31.0.21 of 1See more

httpd-ldapauth-proxy camptocamp3 1.0.2

1 of the 1 container images this version deploys carry CVE-2026-34502.

Container imageDigestPackageFixed in
library/httpd:2.4.631ae8051591a5
apr-util@1.6.3-1
1.6.3-1+deb12u1

Open the chart page →

3,311
lamphttpdcamptocamp31.0.111 of 1See more

lamphttpd camptocamp3 1.0.11

1 of the 1 container images this version deploys carry CVE-2026-34502.

Container imageDigestPackageFixed in
library/httpd:2.4-alpine1b766f17b840
apr-util@1.6.3-r2
1.6.4-r0

Open the chart page →

901
tetragon-policy-buildercamptocamp30.1.11 of 1See more

tetragon-policy-builder camptocamp3 0.1.1

1 of the 1 container images this version deploys carry CVE-2026-34502.

Container imageDigestPackageFixed in
ghcr.io/camptocamp/tetragon-policy-builder:master0e99f12bb040
apr-util@1.6.3-1
1.6.3-1+deb12u1

Open the chart page →

10,776
chart-dnazarenochart-dnazareno0.1.01 of 3See more

chart-dnazareno chart-dnazareno 0.1.0

1 of the 3 container images this version deploys carry CVE-2026-34502.

Container imageDigestPackageFixed in
library/phpmyadmin:5.2.16e75aa8f767c
apr-util@1.6.3-1
1.6.3-1+deb12u1

Open the chart page →

5,778
kamaji-etcdclastixVerified publisher0.17.01 of 4See more

kamaji-etcd clastix 0.17.0

1 of the 4 container images this version deploys carry CVE-2026-34502.

Container imageDigestPackageFixed in
cfssl/cfssl:latestc9018c2ddf0b
apr-util@1.6.3-1
1.6.3-1+deb12u1

Open the chart page →

11,995

Container images carrying it

159 by charts deploying them

A fixed version is listed for 3 of the 3 affected packages.

Container imageDigestPackageFixed inUsed by
ghcr.io/zoriya/kyoo_scanner:4.7.17dc0ee57b628
apr-util@1.6.3-1
1.6.3-1+deb12u1
1
public.ecr.aws/jtekt-corporation/image-storage-service:v1.16.17b1493760c716
apr-util@1.6.3-1
1.6.3-1+deb12u1
1
public.ecr.aws/jtekt-corporation/shinsei-manager:v2.8.15cd62142d6ed
apr-util@1.6.3-1
1.6.3-1+deb12u1
1
public.ecr.aws/jtekt-corporation/time-series-storage-service:v1.5.1046ef5c9ed50
apr-util@1.6.3-1
1.6.3-1+deb12u1
1
public.ecr.aws/supportpal/helpdesk-monolithic:4.0.4573779e57fae
apr-util@1.6.1-4ubuntu2
1.6.1-4ubuntu2.2+esm1
1
public.ecr.aws/truefoundrycloud/async-service-distributor:5d48113bc678d694a0c8f8dabb2207c5aa2cfc53f74851ce31f5
apr-util@1.6.3-1
1.6.3-1+deb12u1
1
quay.io/yushiwho/api:e1f9d77e0d9b93dbf2b
apr-util@1.6.3-1
1.6.3-1+deb12u1
1
registry.gitlab.com/enbuild-staging/vivsoft-platform-ui/enbuild-mq-consumer:1.0.310e3cd8c7776d
apr-util@1.6.3-1
1.6.3-1+deb12u1
1
registry.gitlab.com/school_guy/docker-typo3:13.4.30-197d868ed76185d7270d
apr-util@1.6.3-1
1.6.3-1+deb12u1
1

syft 1.42.1 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.