StackRadar

CVE-2026-4046

High

Advisory

Published 30 Mar 2026In the index since 5 Sept 2026
Severity
High
worst across findings
CVSS
7.5
base score, highest
EPSS
0.004
32nd percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
1,880
of 17,787 indexed, latest versions
Container images
2,125
deployed by those charts
Fix available
3 of 4
affected packages

Red Hat Security Advisory: glibc security update

Carried by container images the latest versions of 1,880 of 17,787 indexed charts deploy, on 2,125 images.

Affected packageAffected versionsFixed inImages
glibcdeb2.23-0ubuntu5, 2.23-0ubuntu7, 2.23-0ubuntu9, 2.23-0ubuntu10+55 more2.35-0ubuntu3.14, 2.36-9+deb12u14, 2.39-0ubuntu8.8, 2.41-12+deb13u2+e3+2 more1,863
glibcapk2.37-r6, 2.38-r6, 2.39-r7, 2.40-r1+7 more2.43-r620
eglibcdeb2.19-0ubuntu6.3, 2.19-0ubuntu6.6, 2.19-0ubuntu6.13, 2.19-0ubuntu6.14+1 moreno fix listed7
glibcrpm2.26-lp151.18.7, 2.28-42.el8_0.1, 2.28-72.el8_1.1, 2.28-101.el8+29 more0:2.28-251.el8_10.37, 2.38-20, 2.43-2.1235
OSV records
CGA-229m-666p-m6pjCGA-3m2c-2p7h-jh79DEBIAN-CVE-2026-4046UBUNTU-CVE-2026-4046RHSA-2026:20587RLSA-2026:20587AZL-81273ECHO-511d-493a-869eopenSUSE-SU-2026:10722-1
Also known as
CGA-4677-mx7m-c27p, CGA-5v9q-38j7-x3cg, CGA-6rph-gxmg-fqx5, CGA-89vv-3r63-429r, CGA-8mxx-m272-2w2r, CGA-947p-p8jf-59v6, CGA-9f7h-rwh4-rqq8, CGA-cr3q-p72f-c68p, CGA-hf3c-3g26-884q, CGA-hh2h-qhg9-85hm, CGA-hm83-4gr6-p3qh, CGA-qxqg-xq26-h75q, CGA-xg6m-vg6w-3m4x, CGA-xxcr-pv23-2mwh, USN-8611-1

Charts affected

1,880 by stars
ChartLatestAffected imagesRadar Score
speckle-server-branch-hotfix-2.19.1speckleVerified publisher2.19.2-branch.hotfix-2.19.1.124125-665e7e15 of 5See more

speckle-server-branch-hotfix-2.19.1 speckle 2.19.2-branch.hotfix-2.19.1.124125-665e7e1

5 of the 5 container images this version deploys carry CVE-2026-4046.

Container imageDigestPackageFixed in
speckle/speckle-frontend-2:2.19.2-branch.hotfix-2.19.1.124125-665e7e14f9241665ae3
glibc@2.36-9+deb12u7
2.36-9+deb12u14
speckle/speckle-monitor-deployment:2.19.2-branch.hotfix-2.19.1.124125-665e7e1b696ac5022ab
glibc@2.36-9+deb12u7
2.36-9+deb12u14
speckle/speckle-preview-service:2.19.2-branch.hotfix-2.19.1.124125-665e7e1c102b087481a
glibc@2.36-9+deb12u7
2.36-9+deb12u14
speckle/speckle-server:2.19.2-branch.hotfix-2.19.1.124125-665e7e14b6a0750d5aa
glibc@2.36-9+deb12u7
2.36-9+deb12u14
speckle/speckle-webhook-service:2.19.2-branch.hotfix-2.19.1.124125-665e7e14828aee2277c
glibc@2.36-9+deb12u7
2.36-9+deb12u14

Open the chart page →

15,684
speckle-server-branch-hotfix-2.20.2speckleVerified publisher2.20.3-branch.hotfix-2.20.2.149555-37ea0cb5 of 5See more

speckle-server-branch-hotfix-2.20.2 speckle 2.20.3-branch.hotfix-2.20.2.149555-37ea0cb

5 of the 5 container images this version deploys carry CVE-2026-4046.

Container imageDigestPackageFixed in
speckle/speckle-frontend-2:2.20.3-branch.hotfix-2.20.2.149555-37ea0cbfdc008effc7a
glibc@2.36-9+deb12u7
2.36-9+deb12u14
speckle/speckle-monitor-deployment:2.20.3-branch.hotfix-2.20.2.149555-37ea0cb2faf1508c1d3
glibc@2.36-9+deb12u7
2.36-9+deb12u14
speckle/speckle-preview-service:2.20.3-branch.hotfix-2.20.2.149555-37ea0cbd3da0a84de98
glibc@2.36-9+deb12u7
2.36-9+deb12u14
speckle/speckle-server:2.20.3-branch.hotfix-2.20.2.149555-37ea0cb52f8eabf5cea
glibc@2.36-9+deb12u7
2.36-9+deb12u14
speckle/speckle-webhook-service:2.20.3-branch.hotfix-2.20.2.149555-37ea0cb107c63336ab5
glibc@2.36-9+deb12u7
2.36-9+deb12u14

Open the chart page →

16,431
speckle-server-branch-testingspeckleVerified publisher2.17.14-branch.testing.72707.921a5f84 of 5See more

speckle-server-branch-testing speckle 2.17.14-branch.testing.72707.921a5f8

4 of the 5 container images this version deploys carry CVE-2026-4046.

Container imageDigestPackageFixed in
speckle/speckle-monitor-deployment:2.17.14-branch.testing.72707.921a5f8ff1641ac3f1b
glibc@2.36-9+deb12u3
2.36-9+deb12u14
speckle/speckle-preview-service:2.17.14-branch.testing.72707.921a5f884fc39bca0c8
glibc@2.36-9+deb12u3
2.36-9+deb12u14
speckle/speckle-server:2.17.14-branch.testing.72707.921a5f849d10dcdfb91
glibc@2.36-9+deb12u3
2.36-9+deb12u14
speckle/speckle-webhook-service:2.17.14-branch.testing.72707.921a5f899913052b72e
glibc@2.36-9+deb12u3
2.36-9+deb12u14

Open the chart page →

14,703
speckle-server-branch-testing1speckleVerified publisher2.20.6-branch.testing1.154030-9b091145 of 5See more

speckle-server-branch-testing1 speckle 2.20.6-branch.testing1.154030-9b09114

5 of the 5 container images this version deploys carry CVE-2026-4046.

Container imageDigestPackageFixed in
speckle/speckle-frontend-2:2.20.6-branch.testing1.154030-9b0911432fc940d9b4c
glibc@2.36-9+deb12u7
2.36-9+deb12u14
speckle/speckle-monitor-deployment:2.20.6-branch.testing1.154030-9b09114738c77eb6f97
glibc@2.36-9+deb12u7
2.36-9+deb12u14
speckle/speckle-preview-service:2.20.6-branch.testing1.154030-9b091148f3c1ea153ba
glibc@2.36-9+deb12u7
2.36-9+deb12u14
speckle/speckle-server:2.20.6-branch.testing1.154030-9b09114e8413f57b327
glibc@2.36-9+deb12u7
2.36-9+deb12u14
speckle/speckle-webhook-service:2.20.6-branch.testing1.154030-9b09114cf1d99bad89a
glibc@2.36-9+deb12u7
2.36-9+deb12u14

Open the chart page →

16,431
speckle-server-branch-testing2speckleVerified publisher2.18.11-branch.testing2.88634-335d4694 of 5See more

speckle-server-branch-testing2 speckle 2.18.11-branch.testing2.88634-335d469

4 of the 5 container images this version deploys carry CVE-2026-4046.

Container imageDigestPackageFixed in
speckle/speckle-monitor-deployment:2.18.11-branch.testing2.88634-335d469d6790a97ad47
glibc@2.36-9+deb12u4
2.36-9+deb12u14
speckle/speckle-preview-service:2.18.11-branch.testing2.88634-335d4694bd113093583
glibc@2.36-9+deb12u4
2.36-9+deb12u14
speckle/speckle-server:2.18.11-branch.testing2.88634-335d469bf6a501b2210
glibc@2.36-9+deb12u4
2.36-9+deb12u14
speckle/speckle-webhook-service:2.18.11-branch.testing2.88634-335d469902b98ad5327
glibc@2.36-9+deb12u4
2.36-9+deb12u14

Open the chart page →

14,245
speckle-server-branch-testing3speckleVerified publisher2.18.12-branch.testing3.88744-f55b3414 of 5See more

speckle-server-branch-testing3 speckle 2.18.12-branch.testing3.88744-f55b341

4 of the 5 container images this version deploys carry CVE-2026-4046.

Container imageDigestPackageFixed in
speckle/speckle-monitor-deployment:2.18.12-branch.testing3.88744-f55b34181335b40696a
glibc@2.36-9+deb12u4
2.36-9+deb12u14
speckle/speckle-preview-service:2.18.12-branch.testing3.88744-f55b3414bd113093583
glibc@2.36-9+deb12u4
2.36-9+deb12u14
speckle/speckle-server:2.18.12-branch.testing3.88744-f55b34189a5872375f9
glibc@2.36-9+deb12u4
2.36-9+deb12u14
speckle/speckle-webhook-service:2.18.12-branch.testing3.88744-f55b341771f872cfa63
glibc@2.36-9+deb12u4
2.36-9+deb12u14

Open the chart page →

14,245
speckle-server-branch-testing4speckleVerified publisher2.20.2-branch.testing4.134160-9fad4b25 of 5See more

speckle-server-branch-testing4 speckle 2.20.2-branch.testing4.134160-9fad4b2

5 of the 5 container images this version deploys carry CVE-2026-4046.

Container imageDigestPackageFixed in
speckle/speckle-frontend-2:2.20.2-branch.testing4.134160-9fad4b210ad4ade8bf2
glibc@2.36-9+deb12u7
2.36-9+deb12u14
speckle/speckle-monitor-deployment:2.20.2-branch.testing4.134160-9fad4b23c8fbe855665
glibc@2.36-9+deb12u7
2.36-9+deb12u14
speckle/speckle-preview-service:2.20.2-branch.testing4.134160-9fad4b21f897ca906ea
glibc@2.36-9+deb12u7
2.36-9+deb12u14
speckle/speckle-server:2.20.2-branch.testing4.134160-9fad4b2687f43ab16f3
glibc@2.36-9+deb12u7
2.36-9+deb12u14
speckle/speckle-webhook-service:2.20.2-branch.testing4.134160-9fad4b270f5167d1d4d
glibc@2.36-9+deb12u7
2.36-9+deb12u14

Open the chart page →

16,050
speckle-server-branch-testing5speckleVerified publisher2.21.3-branch.testing5.219631-2153bef5 of 5See more

speckle-server-branch-testing5 speckle 2.21.3-branch.testing5.219631-2153bef

5 of the 5 container images this version deploys carry CVE-2026-4046.

Container imageDigestPackageFixed in
speckle/speckle-frontend-2:2.21.3-branch.testing5.219631-2153befd4ca6ebf09b9
glibc@2.36-9+deb12u7
2.36-9+deb12u14
speckle/speckle-monitor-deployment:2.21.3-branch.testing5.219631-2153befcf72ad0f25fb
glibc@2.36-9+deb12u7
2.36-9+deb12u14
speckle/speckle-preview-service:2.21.3-branch.testing5.219631-2153bef52cad5e3293e
glibc@2.36-9+deb12u7
2.36-9+deb12u14
speckle/speckle-server:2.21.3-branch.testing5.219631-2153bef8fd157733393
glibc@2.36-9+deb12u7
2.36-9+deb12u14
speckle/speckle-webhook-service:2.21.3-branch.testing5.219631-2153bef06ecc7a66a40
glibc@2.36-9+deb12u7
2.36-9+deb12u14

Open the chart page →

14,500
speckle-server-branch-testing6speckleVerified publisher2.25.10-branch.testing6.645-b125c1e4 of 4See more

speckle-server-branch-testing6 speckle 2.25.10-branch.testing6.645-b125c1e

4 of the 4 container images this version deploys carry CVE-2026-4046.

Container imageDigestPackageFixed in
speckle/speckle-monitor-deployment:2.25.10-branch.testing6.645-b125c1e2dbc553ed87c
glibc@2.36-9+deb12u7
2.36-9+deb12u14
speckle/speckle-preview-service:2.25.10-branch.testing6.645-b125c1e787adcb20a3a
glibc@2.36-9+deb12u7
2.36-9+deb12u14
speckle/speckle-server:2.25.10-branch.testing6.645-b125c1e75cdf256067b
glibc@2.36-9+deb12u10
2.36-9+deb12u14
speckle/speckle-webhook-service:2.25.10-branch.testing6.645-b125c1edd9db6cbe9bb
glibc@2.36-9+deb12u7
2.36-9+deb12u14

Open the chart page →

10,647
ocean-network-clientspot1.1.61 of 1See more

ocean-network-client spot 1.1.6

1 of the 1 container images this version deploys carry CVE-2026-4046.

Container imageDigestPackageFixed in
public.ecr.aws/spotinst/spot-network-client:1.0.1486380a01587d
glibc@2.39-0ubuntu8.7
2.39-0ubuntu8.8

Open the chart page →

2,259
spotinst-ocean-network-clientspot1.0.01 of 1See more

spotinst-ocean-network-client spot 1.0.0

1 of the 1 container images this version deploys carry CVE-2026-4046.

Container imageDigestPackageFixed in
public.ecr.aws/spotinst/spot-network-client:1.0.0-8-lb_endpoint-d0ec127efcecf98b912
glibc@2.27-3ubuntu1.6
no fix listed

Open the chart page →

6,955
envoy-proxysqream-chartsVerified publisher0.6.01 of 2See more

envoy-proxy sqream-charts 0.6.0

1 of the 2 container images this version deploys carry CVE-2026-4046.

Container imageDigestPackageFixed in
envoyproxy/envoy:v1.30.1e596fda6a0ce
glibc@2.35-0ubuntu3.7
2.35-0ubuntu3.14

Open the chart page →

2,309
squadsquadVerified publisher0.1.111 of 1See more

squad squad 0.1.11

1 of the 1 container images this version deploys carry CVE-2026-4046.

Container imageDigestPackageFixed in
cm2network/squad:latest8cba47f53df5
glibc@2.41-12+deb13u1
2.41-12+deb13u3

Open the chart page →

2,499
pagessrinipages1.0.02 of 3See more

pages srinipages 1.0.0

2 of the 3 container images this version deploys carry CVE-2026-4046.

Container imageDigestPackageFixed in
dellcloud/pages:monitor6ba7b22caacd
glibc@2.31-0ubuntu9.1
no fix listed
flyway/flyway:6.4.422d97ceb0c47
glibc@2.27-3ubuntu1
no fix listed

Open the chart page →

20,233
servicexssl-hep1.8.51 of 16See more

servicex ssl-hep 1.8.5

1 of the 16 container images this version deploys carry CVE-2026-4046.

Container imageDigestPackageFixed in
ncsa/checks:main0b738bbc8d70
glibc@2.41-12
2.41-12+deb13u3

Open the chart page →

65,130
allurestakaterVerified publisher1.0.11 of 1See more

allure stakater 1.0.1

1 of the 1 container images this version deploys carry CVE-2026-4046.

Container imageDigestPackageFixed in
quay.io/eformat/jenkins-agent-graalvm:latesta3b9a07648b6
glibc@2.28-151.el8
0:2.28-251.el8_10.37

Open the chart page →

28,165
nordmart-reviewstakaterVerified publisher0.0.61 of 3See more

nordmart-review stakater 0.0.6

1 of the 3 container images this version deploys carry CVE-2026-4046.

Container imageDigestPackageFixed in
stakater/stakater-nordmart-review:1.0.35954d2be66e95
glibc@2.28-189.5.el8_6
0:2.28-251.el8_10.37

Open the chart page →

11,554
nordmart-review-instancestakaterVerified publisher1.0.01 of 3See more

nordmart-review-instance stakater 1.0.0

1 of the 3 container images this version deploys carry CVE-2026-4046.

Container imageDigestPackageFixed in
stakater/stakater-nordmart-review:1.0.35954d2be66e95
glibc@2.28-189.5.el8_6
0:2.28-251.el8_10.37

Open the chart page →

11,554
workshop-operatorstakaterVerified publisher0.0.381 of 2See more

workshop-operator stakater 0.0.38

1 of the 2 container images this version deploys carry CVE-2026-4046.

Container imageDigestPackageFixed in
stakater/workshop-operator:v0.0.3897bf456cc97c
glibc@2.28-164.el8
0:2.28-251.el8_10.37

Open the chart page →

6,671
stakefishstakefish0.1.01 of 8See more

stakefish stakefish 0.1.0

1 of the 8 container images this version deploys carry CVE-2026-4046.

Container imageDigestPackageFixed in
thongngo3301/stakefish:latesta341af5976e3
glibc@2.36-9+deb12u1
2.36-9+deb12u14

Open the chart page →

18,426
erigonstakewise2.61.21 of 3See more

erigon stakewise 2.61.2

1 of the 3 container images this version deploys carry CVE-2026-4046.

Container imageDigestPackageFixed in
erigontech/erigon:v2.61.288706754b627
glibc@2.36-9+deb12u9
2.36-9+deb12u14

Open the chart page →

2,854
lighthouse-validatorstakewise7.0.11 of 2See more

lighthouse-validator stakewise 7.0.1

1 of the 2 container images this version deploys carry CVE-2026-4046.

Container imageDigestPackageFixed in
sigp/lighthouse:v7.0.12cae720e9a35
glibc@2.35-0ubuntu3.9
2.35-0ubuntu3.14

Open the chart page →

2,020
lodestar-validatorstakewise1.2.01 of 1See more

lodestar-validator stakewise 1.2.0

1 of the 1 container images this version deploys carry CVE-2026-4046.

Container imageDigestPackageFixed in
chainsafe/lodestar:v1.27.07b9fe4aa8073
glibc@2.36-9+deb12u9
2.36-9+deb12u14

Open the chart page →

3,968
nethermindstakewise2.8.21 of 3See more

nethermind stakewise 2.8.2

1 of the 3 container images this version deploys carry CVE-2026-4046.

Container imageDigestPackageFixed in
nethermind/nethermind:1.31.893e57917371a
glibc@2.39-0ubuntu8.4
2.39-0ubuntu8.8

Open the chart page →

2,070
operatorstakewise2.1.11 of 5See more

operator stakewise 2.1.1

1 of the 5 container images this version deploys carry CVE-2026-4046.

Container imageDigestPackageFixed in
sigp/lighthouse:v2.1.2ad501f02cfef
glibc@2.31-0ubuntu9.2
no fix listed

Open the chart page →

6,584
rethstakewise1.2.11 of 3See more

reth stakewise 1.2.1

1 of the 3 container images this version deploys carry CVE-2026-4046.

Container imageDigestPackageFixed in
ghcr.io/paradigmxyz/reth:v1.3.121e5290e8b743
glibc@2.35-0ubuntu3.9
2.35-0ubuntu3.14

Open the chart page →

2,016
ssv-nodestakewise2.2.01 of 2See more

ssv-node stakewise 2.2.0

1 of the 2 container images this version deploys carry CVE-2026-4046.

Container imageDigestPackageFixed in
bloxstaking/ssv-node:v2.2.0bf6d7d2fdc93
glibc@2.36-9+deb12u9
2.36-9+deb12u14

Open the chart page →

6,531
teku-validatorstakewise4.3.21 of 2See more

teku-validator stakewise 4.3.2

1 of the 2 container images this version deploys carry CVE-2026-4046.

Container imageDigestPackageFixed in
consensys/teku:25.4.1bf6ecd2ea716
glibc@2.39-0ubuntu8.4
2.39-0ubuntu8.8

Open the chart page →

3,192
verostakewise0.8.31 of 2See more

vero stakewise 0.8.3

1 of the 2 container images this version deploys carry CVE-2026-4046.

Container imageDigestPackageFixed in
ghcr.io/serenita-org/vero:v0.8.3e5a7ec714acc
glibc@2.36-9+deb12u7
2.36-9+deb12u14

Open the chart page →

3,180
open-appsec-injectorstartechnicaVerified publisher1.1.21 of 3See more

open-appsec-injector startechnica 1.1.2

1 of the 3 container images this version deploys carry CVE-2026-4046.

Container imageDigestPackageFixed in
ghcr.io/openappsec/openappsec-waf-webhook:1.1.345b979b962043
glibc@2.41-12
2.41-12+deb13u3

Open the chart page →

4,315
unifistartechnicaVerified publisher0.1.31 of 2See more

unifi startechnica 0.1.3

1 of the 2 container images this version deploys carry CVE-2026-4046.

Container imageDigestPackageFixed in
jacobalberty/unifi:v7.1.664a3616625dda
glibc@2.27-3ubuntu1.5
no fix listed

Open the chart page →

14,519
minio-operatorstatcan4.1.01 of 2See more

minio-operator statcan 4.1.0

1 of the 2 container images this version deploys carry CVE-2026-4046.

Container imageDigestPackageFixed in
minio/operator:v4.1.02adc5be088f5
glibc@2.28-151.el8
0:2.28-251.el8_10.37

Open the chart page →

6,595
trinostatcan1.23.41 of 2See more

trino statcan 1.23.4

1 of the 2 container images this version deploys carry CVE-2026-4046.

Container imageDigestPackageFixed in
trinodb/trino:405ee80ab5eeab2
glibc@2.35-0ubuntu3.1
2.35-0ubuntu3.14

Open the chart page →

13,817
static-src-people-detector-appstatic-src-people-detector-chartVerified publisher1.5.51 of 6See more

static-src-people-detector-app static-src-people-detector-chart 1.5.5

1 of the 6 container images this version deploys carry CVE-2026-4046.

Container imageDigestPackageFixed in
library/mongo:4.4.18d23ec07162ca
glibc@2.31-0ubuntu9.9
no fix listed

Open the chart page →

13,684
pagesstephendillondell1.0.02 of 3See more

pages stephendillondell 1.0.0

2 of the 3 container images this version deploys carry CVE-2026-4046.

Container imageDigestPackageFixed in
dellcloud/pages:monitor6ba7b22caacd
glibc@2.31-0ubuntu9.1
no fix listed
flyway/flyway:6.4.422d97ceb0c47
glibc@2.27-3ubuntu1
no fix listed

Open the chart page →

20,233
sn-platform-slimstreamnative1.11.441 of 6See more

sn-platform-slim streamnative 1.11.44

1 of the 6 container images this version deploys carry CVE-2026-4046.

Container imageDigestPackageFixed in
streamnative/apache-pulsar-grafana-dashboard-k8s:0.1.20e6d7aa3ef32
glibc@2.31-0ubuntu9.16
no fix listed

Open the chart page →

10,182
wonder-mesh-netstrrl-helm2026.629.01 of 3See more

wonder-mesh-net strrl-helm 2026.629.0

1 of the 3 container images this version deploys carry CVE-2026-4046.

Container imageDigestPackageFixed in
headscale/headscale:0.27.1cd37b3001857
glibc@2.36-9+deb12u13
2.36-9+deb12u14

Open the chart page →

5,017
kurento_webrtc_demostunner0.1.01 of 2See more

kurento_webrtc_demo stunner 0.1.0

1 of the 2 container images this version deploys carry CVE-2026-4046.

Container imageDigestPackageFixed in
kurento/kurento-media-server:latest03c0d34d0828
glibc@2.39-0ubuntu8.6
2.39-0ubuntu8.8

Open the chart page →

12,524
stunner-kurento-one2one-callstunner0.1.01 of 2See more

stunner-kurento-one2one-call stunner 0.1.0

1 of the 2 container images this version deploys carry CVE-2026-4046.

Container imageDigestPackageFixed in
kurento/kurento-media-server:latest03c0d34d0828
glibc@2.39-0ubuntu8.6
2.39-0ubuntu8.8

Open the chart page →

12,524
artifactory-cleanupsubshellVerified publisher1.0.11 of 1See more

artifactory-cleanup subshell 1.0.1

1 of the 1 container images this version deploys carry CVE-2026-4046.

Container imageDigestPackageFixed in
devopshq/artifactory-cleanup:1.0.1830e093bffa91
glibc@2.36-9+deb12u10
2.36-9+deb12u14

Open the chart page →

2,540
group-challengesubshell-labVerified publisher2.1.01 of 2See more

group-challenge subshell-lab 2.1.0

1 of the 2 container images this version deploys carry CVE-2026-4046.

Container imageDigestPackageFixed in
darthsim/imgproxy:v3.29.17d12c7c8fc66
glibc@2.39-0ubuntu8.4
2.39-0ubuntu8.8

Open the chart page →

2,579
substra-backendsubstraVerified publisher26.15.31 of 7See more

substra-backend substra 26.15.3

1 of the 7 container images this version deploys carry CVE-2026-4046.

Container imageDigestPackageFixed in
ghcr.io/substra/substra-backend:1.0.121967f54ec86
glibc@2.39-0ubuntu8.3
2.39-0ubuntu8.8

Open the chart page →

4,782
substra-frontendsubstraVerified publisher1.2.31 of 1See more

substra-frontend substra 1.2.3

1 of the 1 container images this version deploys carry CVE-2026-4046.

Container imageDigestPackageFixed in
ghcr.io/substra/substra-frontend:1.0.0e230e6ac0722
glibc@2.36-9+deb12u7
2.36-9+deb12u14

Open the chart page →

2,629
verbasubstratusVerified publisher0.4.01 of 1See more

verba substratus 0.4.0

1 of the 1 container images this version deploys carry CVE-2026-4046.

Container imageDigestPackageFixed in
substratusai/verba:v0.4.0-baseURL261695be635eb
glibc@2.36-9+deb12u6
2.36-9+deb12u14

Open the chart page →

12,937
3d-printing-cost-calculatorssudo-kraken-3d-printing-cost-calculatorsVerified publisher0.1.41 of 1See more

3d-printing-cost-calculators sudo-kraken-3d-printing-cost-calculators 0.1.4

1 of the 1 container images this version deploys carry CVE-2026-4046.

Container imageDigestPackageFixed in
ghcr.io/sudo-kraken/3d-printing-cost-calculators:v1.1.1220c5e4e1a3d
glibc@2.36-9+deb12u13
2.36-9+deb12u14

Open the chart page →

2,577
authentik-webfinger-proxysudo-kraken-authentik-webfinger-proxyVerified publisher0.1.41 of 1See more

authentik-webfinger-proxy sudo-kraken-authentik-webfinger-proxy 0.1.4

1 of the 1 container images this version deploys carry CVE-2026-4046.

Container imageDigestPackageFixed in
ghcr.io/sudo-kraken/authentik-webfinger-proxy:v1.1.1e1351a977607
glibc@2.36-9+deb12u13
2.36-9+deb12u14

Open the chart page →

2,657
fantasy-dice-chambersudo-kraken-fantasy-dice-chamberVerified publisher0.1.31 of 1See more

fantasy-dice-chamber sudo-kraken-fantasy-dice-chamber 0.1.3

1 of the 1 container images this version deploys carry CVE-2026-4046.

Container imageDigestPackageFixed in
ghcr.io/sudo-kraken/fantasy-dice-chamber:v1.3.299fd4cb0f4fe
glibc@2.36-9+deb12u13
2.36-9+deb12u14

Open the chart page →

2,689
finances-trackersudo-kraken-finances-trackerVerified publisher0.1.51 of 1See more

finances-tracker sudo-kraken-finances-tracker 0.1.5

1 of the 1 container images this version deploys carry CVE-2026-4046.

Container imageDigestPackageFixed in
ghcr.io/sudo-kraken/finances-tracker:v1.1.1c73527cde81c
glibc@2.36-9+deb12u13
2.36-9+deb12u14

Open the chart page →

2,657
flaresolverrsudo-kraken-flaresolverrVerified publisher2.1.41 of 1See more

flaresolverr sudo-kraken-flaresolverr 2.1.4

1 of the 1 container images this version deploys carry CVE-2026-4046.

Container imageDigestPackageFixed in
ghcr.io/flaresolverr/flaresolverr:v3.4.67962759d99d7
glibc@2.36-9+deb12u13
2.36-9+deb12u14

Open the chart page →

33,591
jellyfinsudo-kraken-jellyfinVerified publisher2.1.31 of 1See more

jellyfin sudo-kraken-jellyfin 2.1.3

1 of the 1 container images this version deploys carry CVE-2026-4046.

Container imageDigestPackageFixed in
jellyfin/jellyfin:10.11.6333b64771663
glibc@2.41-12+deb13u1
2.41-12+deb13u3

Open the chart page →

3,355

Container images carrying it

2,125 by charts deploying them

A fixed version is listed for 3 of the 4 affected packages.

Container imageDigestPackageFixed inUsed by
dellcloud/pages:monitor6ba7b22caacd
glibc@2.31-0ubuntu9.1
no fix listed
79
flyway/flyway:6.4.422d97ceb0c47
glibc@2.27-3ubuntu1
no fix listed
79
codeurjc/toposervice:v1.0:v1.239fb4c11e6a49
glibc@2.27-3ubuntu1.6
no fix listed
13
bitnamilegacy/postgresql:17.6.0-debian-12-r4926356130b77
glibc@2.36-9+deb12u10
2.36-9+deb12u14
11
oomk8s/readiness-check:2.0.2875814cc853d
glibc@2.23-0ubuntu11
no fix listed
11
codeurjc/weatherservice:v1.0b9e2f7234349
glibc@2.28-189.5.el8_6
0:2.28-251.el8_10.37
10
library/mongo:5.0.6-focal8e70544b6c76
glibc@2.31-0ubuntu9.7
no fix listed
10
library/rabbitmq:3.9-management8a279e9396a8
glibc@2.35-0ubuntu3.6
2.35-0ubuntu3.14
10
codeurjc/server:v1.0310bea5b1ee7
glibc@2.28-211.el8
0:2.28-251.el8_10.37
8
library/rabbitmq:3.13-management:3-managemente582c0bc7766
glibc@2.39-0ubuntu8.6
2.39-0ubuntu8.8
8
library/kong:3.6a42d2b4503e7
glibc@2.35-0ubuntu3.10
2.35-0ubuntu3.14
7
bitnamilegacy/postgresql:17.5.0:latest42a8200d3597
glibc@2.36-9+deb12u10
2.36-9+deb12u14
6
bitnamilegacy/rabbitmq:4.1.3:4.1.3-debian-12-r19e635efba431
glibc@2.36-9+deb12u10
2.36-9+deb12u14
6
bitnamilegacy/redis:8.2.1-debian-12-r025bf63f3caf7
glibc@2.36-9+deb12u10
2.36-9+deb12u14
6
oomk8s/readiness-check:2.0.07daa08b81954
glibc@2.23-0ubuntu9
no fix listed
6
quay.io/devtron/devtron-utils:dup-chart-repo-v1.1.095d6f0e05636
glibc@2.36-9+deb12u3
2.36-9+deb12u14
6
quay.io/devtron/postgres:14.91b594392f7cb
glibc@2.36-9+deb12u3
2.36-9+deb12u14
6
bitnamilegacy/kubectl:1.29.2c74b703deed2
glibc@2.36-9+deb12u4
2.36-9+deb12u14
5
library/mongo:4.44be76f674fc4
glibc@2.31-0ubuntu9.17
no fix listed
5
library/postgres:122f2a8c2a7d10
glibc@2.36-9+deb12u9
2.36-9+deb12u14
5
solsson/kafka:latest41e5d8f6f290
glibc@2.31-0ubuntu9.9
no fix listed
5
artifacthub/postgres:latest4fd34fa635cc
glibc@2.41-12
2.41-12+deb13u3
4
bitnamilegacy/mariadb:12.0.2-debian-12-r0888cdaae3cb9
glibc@2.36-9+deb12u10
2.36-9+deb12u14
4
bitnamilegacy/mysql:9.4.0-debian-12-r1ec13e229247a
glibc@2.36-9+deb12u10
2.36-9+deb12u14
4
bitnamilegacy/postgresql:16233f361c5819
glibc@2.36-9+deb12u9
2.36-9+deb12u14
4
bitnamilegacy/postgresql:17.6.0-debian-12-r0de520acd66fc
glibc@2.36-9+deb12u10
2.36-9+deb12u14
4
bitnamilegacy/rabbitmq:4.1.2:4.1.2-debian-12-r1fac502149c40
glibc@2.36-9+deb12u10
2.36-9+deb12u14
4
cloudflare/cloudflared:2026.3.06b599ca3e974
glibc@2.41-12+deb13u1
2.41-12+deb13u3
4
hyperledger/fabric-ca:latesta70b6ba64a08
glibc@2.35-0ubuntu3.13
2.35-0ubuntu3.14
4
hyperledger/fabric-ca-tools:latest4ce6f43ded2e
glibc@2.23-0ubuntu10
no fix listed
4
hyperledger/fabric-couchdb:0.4.15f6c724592abf
glibc@2.23-0ubuntu11
no fix listed
4
jaegertracing/jaeger-cassandra-schema:1.53.0d48d6dab2c65
glibc@2.35-0ubuntu3.5
2.35-0ubuntu3.14
4
library/mongo:5.0-focal5e15a3f014ed
glibc@2.31-0ubuntu9.17
no fix listed
4
library/mongo:4.2.12-bionic628741415fc9
glibc@2.27-3ubuntu1.4
no fix listed
4
library/mongo:4.4.66efa05203990
glibc@2.27-3ubuntu1.4
no fix listed
4
library/nginx:1.27.1287ff321f9e3
glibc@2.36-9+deb12u8
2.36-9+deb12u14
4
library/postgres:134689940c6838
glibc@2.41-12
2.41-12+deb13u3
4
library/rabbitmq:3.11-managementc3f70098e01d
glibc@2.35-0ubuntu3.6
2.35-0ubuntu3.14
4
mastercloudapps/planner:v1.2340a950b311b2
glibc@2.35-0ubuntu3.1
2.35-0ubuntu3.14
4
mastercloudapps/server:v2.23f3d24dfe2686
glibc@2.28-211.el8
0:2.28-251.el8_10.37
4
mastercloudapps/weatherservice:v1.23de859d29c116
glibc@2.28-189.5.el8_6
0:2.28-251.el8_10.37
4
opea/llm-tgi:1.00c25aab3f106
glibc@2.36-9+deb12u8
2.36-9+deb12u14
4
oscarsotosanchez/weatherservice:v1.0911ec961d10b
glibc@2.27-3ubuntu1.4
no fix listed
4
shashkist/flask-contacts-app:latest581de1fd6084
glibc@2.36-9+deb12u9
2.36-9+deb12u14
4
valkey/valkey:9.0.2930b41430fb7
glibc@2.41-12+deb13u1
2.41-12+deb13u3
4
ghcr.io/foundry-rs/foundry:latest0c00cb0bda1a
glibc@2.35-0ubuntu3.13
2.35-0ubuntu3.14
4
quay.io/strimzi/operator:0.37.052f376e64b9b
glibc@2.28-225.el8
0:2.28-251.el8_10.37
4
bitnamilegacy/kubectl:latestcd354d5b2556
glibc@2.36-9+deb12u10
2.36-9+deb12u14
3
bitnamilegacy/os-shell:12-debian-12-r5177e65e9d633e
glibc@2.36-9+deb12u10
2.36-9+deb12u14
3
bitnamilegacy/postgresql:14.13.0df6ec02e2b9a
glibc@2.36-9+deb12u9
2.36-9+deb12u14
3

syft 1.42.1 · advisories as of 15 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.