StackRadar

CVE-2026-42306

High

Advisory

Published 18 May 2026In the index since 5 Sept 2026
Severity
High
worst across findings
CVSS
7.2
base score, highest
EPSS
0.001
1st percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
579
of 17,781 indexed, latest versions
Container images
572
deployed by those charts
Fix available
1 of 3
affected packages

Docker: Race condition in docker cp allows bind mount redirection to host path

Carried by container images the latest versions of 579 of 17,781 indexed charts deploy, on 572 images.

Affected packageAffected versionsFixed inImages
github.com/docker/dockergolangv0.0.0-20180620051407-e2593239d949, v0.7.3-0.20190327010347-be7ac8be2ae0, v1.4.2-0.20190924003213-a8608b5b67c7, v1.4.2-0.20191121165722-d1d5f6476656+84 moreno fix listed547
github.com/moby/mobygolangv0.7.3-0.20190826074503-38ab9da00309, v1.4.2-0.20170731201646-1009e6a40b29, v1.13.1, v17.12.0-ce-rc1.0.20200618181300-9dc6525e6118+incompatible+4 moreno fix listed30
docker.iodeb20.10.24+dfsg1-1+deb12u1+b6, 26.1.5+dfsg1-9+b1326.1.5+dfsg1-9+deb13u12
OSV records
DEBIAN-CVE-2026-42306GHSA-rg2x-37c3-w2rh
Also known as
GO-2026-5617

Charts affected

579 by stars
ChartLatestAffected imagesRadar Score
argocdargo-helm-charts1.0.01 of 3See more

argocd argo-helm-charts 1.0.0

1 of the 3 container images this version deploys carry CVE-2026-42306.

Container imageDigestPackageFixed in
quay.io/argoproj/argocd:v2.14.115fc69e31c755
github.com/docker/docker@v25.0.6+incompatible
no fix listed

Open the chart page →

7,300
argonix-apiargonix0.2.01 of 4See more

argonix-api argonix 0.2.0

1 of the 4 container images this version deploys carry CVE-2026-42306.

Container imageDigestPackageFixed in
ghcr.io/argonix-io/argonix-api:1.0.068e17a8aaa40
github.com/docker/docker@v25.0.6+incompatible
no fix listed

Open the chart page →

4,923
arma-reforgerarma-reforger0.5.31 of 8See more

arma-reforger arma-reforger 0.5.3

1 of the 8 container images this version deploys carry CVE-2026-42306.

Container imageDigestPackageFixed in
quay.io/prometheus/prometheus:v2.41.01a3e9a878e50
github.com/docker/docker@v20.10.21+incompatible
no fix listed

Open the chart page →

23,353
dltkvassist-iot-data-integrity-verification0.2.02 of 9See more

dltkv assist-iot-data-integrity-verification 0.2.0

2 of the 9 container images this version deploys carry CVE-2026-42306.

Container imageDigestPackageFixed in
hyperledger/fabric-peer:2.46ff36af21eb1
github.com/docker/docker@v20.10.0-beta1.0.20201113105859-b6bfff2a628f+incompatible
no fix listed
hyperledger/fabric-tools:2.4b1194f509085
github.com/docker/docker@v20.10.0-beta1.0.20201113105859-b6bfff2a628f+incompatible
no fix listed

Open the chart page →

77,706
dltflassist-iot-dlt-based-fl0.2.02 of 9See more

dltfl assist-iot-dlt-based-fl 0.2.0

2 of the 9 container images this version deploys carry CVE-2026-42306.

Container imageDigestPackageFixed in
hyperledger/fabric-peer:2.46ff36af21eb1
github.com/docker/docker@v20.10.0-beta1.0.20201113105859-b6bfff2a628f+incompatible
no fix listed
hyperledger/fabric-tools:2.4b1194f509085
github.com/docker/docker@v20.10.0-beta1.0.20201113105859-b6bfff2a628f+incompatible
no fix listed

Open the chart page →

77,706
performanceandusagediagnosisassist-iot-pud1.0.01 of 7See more

performanceandusagediagnosis assist-iot-pud 1.0.0

1 of the 7 container images this version deploys carry CVE-2026-42306.

Container imageDigestPackageFixed in
quay.io/prometheus/prometheus:v2.36.2df0cd5887887
github.com/docker/docker@v20.10.16+incompatible
no fix listed

Open the chart page →

8,556
astrotrekastria0.0.22 of 4See more

astrotrek astria 0.0.2

2 of the 4 container images this version deploys carry CVE-2026-42306.

Container imageDigestPackageFixed in
ghcr.io/astriaorg/astria-indexer:0.1.05cf1e5709820
github.com/docker/docker@v25.0.6+incompatible
no fix listed
ghcr.io/astriaorg/astria-indexer-api:0.1.03490d9900af1
github.com/docker/docker@v25.0.6+incompatible
no fix listed

Open the chart page →

32,501
authorization-componentauthorization-component1.0.01 of 3See more

authorization-component authorization-component 1.0.0

1 of the 3 container images this version deploys carry CVE-2026-42306.

Container imageDigestPackageFixed in
ghcr.io/conductionnl/authorization-component-php:latest94a749392fcf
github.com/docker/docker@v1.4.2-0.20200203170920-46ec8731fbce
no fix listed

Open the chart page →

7,561
istio-discoveryaveshaVerified publisher1.16.01 of 1See more

istio-discovery avesha 1.16.0

1 of the 1 container images this version deploys carry CVE-2026-42306.

Container imageDigestPackageFixed in
istio/pilot:1.16.0ac0284d75ec9
github.com/docker/docker@v20.10.17+incompatible
no fix listed

Open the chart page →

6,908
helm-controllerazureorkestra0.1.12 of 2See more

helm-controller azureorkestra 0.1.1

2 of the 2 container images this version deploys carry CVE-2026-42306.

Container imageDigestPackageFixed in
fluxcd/helm-controller:v0.9.092b891e495d8
github.com/moby/moby@v17.12.0-ce-rc1.0.20200618181300-9dc6525e6118+incompatible
no fix listed
fluxcd/source-controller:v0.10.031a8c79a6803
github.com/moby/moby@v17.12.0-ce-rc1.0.20200618181300-9dc6525e6118+incompatible
no fix listed

Open the chart page →

7,705
prometheusazureorkestra14.8.01 of 6See more

prometheus azureorkestra 14.8.0

1 of the 6 container images this version deploys carry CVE-2026-42306.

Container imageDigestPackageFixed in
quay.io/prometheus/prometheus:v2.26.038d40a760569
github.com/docker/docker@v20.10.5+incompatible
no fix listed

Open the chart page →

9,661
balance-registrationbalance-registration0.1.01 of 4See more

balance-registration balance-registration 0.1.0

1 of the 4 container images this version deploys carry CVE-2026-42306.

Container imageDigestPackageFixed in
conduction/balance-registration-php:devc36094a41369
github.com/docker/docker@v1.4.2-0.20200203170920-46ec8731fbce
no fix listed

Open the chart page →

8,408
berichtserviceberichtservice1.0.01 of 3See more

berichtservice berichtservice 1.0.0

1 of the 3 container images this version deploys carry CVE-2026-42306.

Container imageDigestPackageFixed in
ghcr.io/conductionnl/berichtservice-php:latestee6a21e66ff0
github.com/docker/docker@v1.4.2-0.20200203170920-46ec8731fbce
no fix listed

Open the chart page →

7,342
wg-access-serverbicarus-labs0.9.91 of 1See more

wg-access-server bicarus-labs 0.9.9

1 of the 1 container images this version deploys carry CVE-2026-42306.

Container imageDigestPackageFixed in
bicarus/wg-access-server:v0.8.206cab48e9334
github.com/docker/docker@v20.10.8+incompatible
no fix listed

Open the chart page →

2,748
firehoseblip-firehoseVerified publisher0.0.181 of 11See more

firehose blip-firehose 0.0.18

1 of the 11 container images this version deploys carry CVE-2026-42306.

Container imageDigestPackageFixed in
hashicorp/vault:1.15.26b4e5dadf082
github.com/docker/docker@v24.0.5+incompatible
no fix listed

Open the chart page →

13,459
prometheusbook-k8sinfra-v226.0.11 of 6See more

prometheus book-k8sinfra-v2 26.0.1

1 of the 6 container images this version deploys carry CVE-2026-42306.

Container imageDigestPackageFixed in
prom/prometheus:v3.0.1565ee8650122
github.com/docker/docker@v27.3.1+incompatible
no fix listed

Open the chart page →

5,304
pyroscopebook-k8sinfra-v21.10.01 of 3See more

pyroscope book-k8sinfra-v2 1.10.0

1 of the 3 container images this version deploys carry CVE-2026-42306.

Container imageDigestPackageFixed in
grafana/alloy:v1.1.1c3dac4e26471
github.com/docker/docker@v25.0.5+incompatible
no fix listed

Open the chart page →

3,244
accelerationbuttahtoastVerified publisher0.1.01 of 1See more

acceleration buttahtoast 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-42306.

Container imageDigestPackageFixed in
goharbor/harbor-acceld:0.2.13451103a6c8d8
github.com/docker/docker@v24.0.7+incompatible
no fix listed

Open the chart page →

1,400
kubermatic-operatorbuttahtoastVerified publisher2.24.51 of 1See more

kubermatic-operator buttahtoast 2.24.5

1 of the 1 container images this version deploys carry CVE-2026-42306.

Container imageDigestPackageFixed in
quay.io/kubermatic/kubermatic:v2.24.5ebba936046ab
github.com/docker/docker@v20.10.24+incompatible
no fix listed

Open the chart page →

2,770
caninecanine0.1.101 of 7See more

canine canine 0.1.10

1 of the 7 container images this version deploys carry CVE-2026-42306.

Container imageDigestPackageFixed in
ghcr.io/caninehq/canine:latesta058034ca006
github.com/docker/docker@v25.0.6+incompatible
no fix listed

Open the chart page →

14,130
ranchercarbide-charts2.15.11 of 2See more

rancher carbide-charts 2.15.1

1 of the 2 container images this version deploys carry CVE-2026-42306.

Container imageDigestPackageFixed in
rancher/rancher:v2.15.15f6c4dc52a05
github.com/docker/docker@v25.0.15-0.20260325154711-d2dbc0547253+incompatible
no fix listed

Open the chart page →

1,456
temporalcastaiVerified publisher0.54.21 of 14See more

temporal castai 0.54.2

1 of the 14 container images this version deploys carry CVE-2026-42306.

Container imageDigestPackageFixed in
quay.io/prometheus/prometheus:v2.53.0075b1ba2c4eb
github.com/docker/docker@v26.1.3+incompatible
no fix listed

Open the chart page →

16,198
catalyst-agentscatalyst-agents0.1.303 of 18See more

catalyst-agents catalyst-agents 0.1.30

3 of the 18 container images this version deploys carry CVE-2026-42306.

Container imageDigestPackageFixed in
alpine/k8s:1.32.3eec354133193
github.com/docker/docker@v25.0.6+incompatible
no fix listed
ghcr.io/chaos-mesh/chaos-daemon:v2.8.369b1d3c09cfa
github.com/docker/docker@v28.5.2+incompatible
no fix listed
ghcr.io/chaos-mesh/chaos-mesh:v2.8.3bdb31f3121a2
github.com/docker/docker@v28.5.2+incompatible
no fix listed

Open the chart page →

15,027
checkin-componentcheckin-component0.1.01 of 4See more

checkin-component checkin-component 0.1.0

1 of the 4 container images this version deploys carry CVE-2026-42306.

Container imageDigestPackageFixed in
conduction/checkin-component-php:dev3423845692c1
github.com/docker/docker@v1.4.2-0.20200203170920-46ec8731fbce
no fix listed

Open the chart page →

8,408
ethereum-metrics-exporterchronicleVerified publisher0.1.41 of 1See more

ethereum-metrics-exporter chronicle 0.1.4

1 of the 1 container images this version deploys carry CVE-2026-42306.

Container imageDigestPackageFixed in
samcm/ethereum-metrics-exporter:0.29.291a2d9a015c1
github.com/docker/docker@v26.1.5+incompatible
no fix listed

Open the chart page →

684
capsule-rancher-addonclastixVerified publisher0.1.11 of 5See more

capsule-rancher-addon clastix 0.1.1

1 of the 5 container images this version deploys carry CVE-2026-42306.

Container imageDigestPackageFixed in
quay.io/jetstack/cert-manager-ctl:v1.11.074611761f052
github.com/docker/docker@v20.10.17+incompatible
no fix listed

Open the chart page →

7,104
cp4d-deployercloud-native-toolkit1.0.01 of 1See more

cp4d-deployer cloud-native-toolkit 1.0.0

1 of the 1 container images this version deploys carry CVE-2026-42306.

Container imageDigestPackageFixed in
quay.io/cloudnativetoolkit/cloud-pak-deployer:latest13aaae779248
github.com/docker/docker@v20.10.3+incompatible
no fix listed

Open the chart page →

25,151
ibm-toolkit-installcloud-native-toolkit0.3.01 of 1See more

ibm-toolkit-install cloud-native-toolkit 0.3.0

1 of the 1 container images this version deploys carry CVE-2026-42306.

Container imageDigestPackageFixed in
quay.io/ibmgaragecloud/cli-tools:v0.159663f06adcb1
github.com/docker/docker@v1.4.2-0.20191121165722-d1d5f6476656
no fix listed

Open the chart page →

6,695
iteration-zerocloud-native-toolkit0.2.01 of 1See more

iteration-zero cloud-native-toolkit 0.2.0

1 of the 1 container images this version deploys carry CVE-2026-42306.

Container imageDigestPackageFixed in
quay.io/cloudnativetoolkit/cli-tools:v1.1-v1.8.2d6fd2a9e3273
github.com/docker/docker@v20.10.3+incompatible
no fix listed

Open the chart page →

6,921
ocs-operatorcloud-native-toolkit0.2.41 of 1See more

ocs-operator cloud-native-toolkit 0.2.4

1 of the 1 container images this version deploys carry CVE-2026-42306.

Container imageDigestPackageFixed in
quay.io/openshift/origin-cli:latest605eaa5d469c
github.com/docker/docker@v28.5.2+incompatible
no fix listed

Open the chart page →

369
refarch-infraconfigcloud-native-toolkit0.2.21 of 1See more

refarch-infraconfig cloud-native-toolkit 0.2.2

1 of the 1 container images this version deploys carry CVE-2026-42306.

Container imageDigestPackageFixed in
quay.io/openshift/origin-cli:latest605eaa5d469c
github.com/docker/docker@v28.5.2+incompatible
no fix listed

Open the chart page →

369
galaxykubemancloudve2.10.11 of 7See more

galaxykubeman cloudve 2.10.1

1 of the 7 container images this version deploys carry CVE-2026-42306.

Container imageDigestPackageFixed in
galaxy/cloudman-server:lateste5c265fe9fcd
github.com/docker/docker@v20.10.17+incompatible
no fix listed

Open the chart page →

16,069
pulsarcloudve0.2.02 of 2See more

pulsar cloudve 0.2.0

2 of the 2 container images this version deploys carry CVE-2026-42306.

Container imageDigestPackageFixed in
galaxy/pulsar-kubernetes:0.15.7e50a890e24c9
github.com/docker/docker@v27.5.1+incompatible
no fix listed
library/docker:dind5efed980cba3
github.com/docker/docker@v28.5.2+incompatible
no fix listed

Open the chart page →

6,162
monitoringcluster-deploy0.3.02 of 11See more

monitoring cluster-deploy 0.3.0

2 of the 11 container images this version deploys carry CVE-2026-42306.

Container imageDigestPackageFixed in
grafana/grafana:12.4.1e932bd6ed0e0
github.com/moby/moby@v28.0.1+incompatible
no fix listed
quay.io/prometheus/prometheus:v3.10.07571a304e67f
github.com/docker/docker@v28.5.2+incompatible
no fix listed

Open the chart page →

8,183
clusterfactoryclusterfactory0.2.01 of 5See more

clusterfactory clusterfactory 0.2.0

1 of the 5 container images this version deploys carry CVE-2026-42306.

Container imageDigestPackageFixed in
gitea/act_runner:0.3.1c2a169c5e998
github.com/docker/docker@v25.0.13+incompatible
no fix listed

Open the chart page →

7,168
clusternet-controller-managerclusternet1.0.01 of 1See more

clusternet-controller-manager clusternet 1.0.0

1 of the 1 container images this version deploys carry CVE-2026-42306.

Container imageDigestPackageFixed in
ghcr.io/clusternet/clusternet-controller-manager:v1.0.02ce077d3d02d
github.com/docker/docker@v25.0.5+incompatible
no fix listed

Open the chart page →

1,394
door-agentcnoVerified publisher3.0.154 of 15See more

door-agent cno 3.0.15

4 of the 15 container images this version deploys carry CVE-2026-42306.

Container imageDigestPackageFixed in
beopenit/door-agent:v3.0.5d24c323fe7c3
github.com/docker/docker@v25.0.6+incompatible
no fix listed
beopenit/door-helm:v3.0.1b4d9f9bee224
github.com/docker/docker@v20.10.24+incompatible
no fix listed
library/docker:27-cli851f91d24121
github.com/docker/docker@v27.5.0+incompatible
no fix listed
library/docker:27-dindaa3df78ecf32
github.com/docker/docker@v27.5.0+incompatible
no fix listed

Open the chart page →

19,338
loki-stackcommon-chartsVerified publisher1.0.31 of 12See more

loki-stack common-charts 1.0.3

1 of the 12 container images this version deploys carry CVE-2026-42306.

Container imageDigestPackageFixed in
grafana/alloy:v1.18.0491b0578c049
github.com/docker/docker@v28.5.2+incompatible
no fix listed

Open the chart page →

5,329
cgrccommongroundregistratiecomponent0.1.01 of 3See more

cgrc commongroundregistratiecomponent 0.1.0

1 of the 3 container images this version deploys carry CVE-2026-42306.

Container imageDigestPackageFixed in
conduction/cgrc-php:dev25415534d245
github.com/docker/docker@v1.4.2-0.20200203170920-46ec8731fbce
no fix listed

Open the chart page →

7,572
conduction-uiconduction-ui0.1.01 of 6See more

conduction-ui conduction-ui 0.1.0

1 of the 6 container images this version deploys carry CVE-2026-42306.

Container imageDigestPackageFixed in
conduction/conduction-ui-php:dev2744565516e8
github.com/docker/docker@v1.4.2-0.20200203170920-46ec8731fbce
no fix listed

Open the chart page →

12,907
betaalservicecontacten-catalog1.0.01 of 3See more

betaalservice contacten-catalog 1.0.0

1 of the 3 container images this version deploys carry CVE-2026-42306.

Container imageDigestPackageFixed in
conduction/betaalservice-php:latestece1ab544c57
github.com/docker/docker@v1.4.2-0.20200203170920-46ec8731fbce
no fix listed

Open the chart page →

7,209
contactmoment-componentcontactmoment-component0.1.01 of 4See more

contactmoment-component contactmoment-component 0.1.0

1 of the 4 container images this version deploys carry CVE-2026-42306.

Container imageDigestPackageFixed in
conduction/contactmoment-component-php:deve1d4ad1e22a8
github.com/docker/docker@v1.4.2-0.20200203170920-46ec8731fbce
no fix listed

Open the chart page →

8,408
cosmo-traefikcosmoVerified publisher0.9.11 of 2See more

cosmo-traefik cosmo 0.9.1

1 of the 2 container images this version deploys carry CVE-2026-42306.

Container imageDigestPackageFixed in
library/traefik:v2.10.11489caffaedb
github.com/docker/docker@v20.10.21+incompatible
no fix listed

Open the chart page →

3,672
dev-code-servercosmoVerified publisher0.0.71 of 2See more

dev-code-server cosmo 0.0.7

1 of the 2 container images this version deploys carry CVE-2026-42306.

Container imageDigestPackageFixed in
library/docker:dind5efed980cba3
github.com/docker/docker@v28.5.2+incompatible
no fix listed

Open the chart page →

14,559
katibcowboysysopVerified publisher2.4.21 of 4See more

katib cowboysysop 2.4.2

1 of the 4 container images this version deploys carry CVE-2026-42306.

Container imageDigestPackageFixed in
kubeflowkatib/katib-controller:v0.12.012a28c8a0b41
github.com/docker/docker@v1.4.2-0.20190924003213-a8608b5b67c7
no fix listed

Open the chart page →

6,542
electric-mailcryptexlabsVerified publisher0.0.11 of 5See more

electric-mail cryptexlabs 0.0.1

1 of the 5 container images this version deploys carry CVE-2026-42306.

Container imageDigestPackageFixed in
hashicorp/vault:1.8.34db614d40d0e
github.com/docker/docker@v17.12.0-ce-rc1.0.20200309214505-aa6a9891b09c+incompatible
no fix listed

Open the chart page →

5,973
purple-piecryptexlabsVerified publisher0.0.11 of 4See more

purple-pie cryptexlabs 0.0.1

1 of the 4 container images this version deploys carry CVE-2026-42306.

Container imageDigestPackageFixed in
hashicorp/vault:1.8.34db614d40d0e
github.com/docker/docker@v17.12.0-ce-rc1.0.20200309214505-aa6a9891b09c+incompatible
no fix listed

Open the chart page →

5,973
csghubcsghubVerified publisher2.4.32 of 34See more

csghub csghub 2.4.3

2 of the 34 container images this version deploys carry CVE-2026-42306.

Container imageDigestPackageFixed in
envoyproxy/gateway:v1.7.5156b7d32c73b
github.com/docker/docker@v28.5.2+incompatible
no fix listed
opencsghq/csghub-server:v2.4.0-ee302c9d45d8a8
github.com/docker/docker@v28.5.1+incompatible
no fix listed

Open the chart page →

58,897
csgshipcsghubVerified publisher0.4.61 of 10See more

csgship csghub 0.4.6

1 of the 10 container images this version deploys carry CVE-2026-42306.

Container imageDigestPackageFixed in
envoyproxy/gateway:v1.7.5156b7d32c73b
github.com/docker/docker@v28.5.2+incompatible
no fix listed

Open the chart page →

11,335
dataflowcsghubVerified publisher2.5.01 of 7See more

dataflow csghub 2.5.0

1 of the 7 container images this version deploys carry CVE-2026-42306.

Container imageDigestPackageFixed in
envoyproxy/gateway:v1.7.5156b7d32c73b
github.com/docker/docker@v28.5.2+incompatible
no fix listed

Open the chart page →

6,632

Container images carrying it

572 by charts deploying them

A fixed version is listed for 1 of the 3 affected packages.

Container imageDigestPackageFixed inUsed by
ghcr.io/kubiyabot/kubernetes:1.32.0b5ade0d9cc6b
github.com/docker/docker@v25.0.6+incompatible
no fix listed
1
ghcr.io/kubiyabot/tool-manager:0.5.80cca6760763a
github.com/docker/docker@v28.3.2+incompatible
no fix listed
1
ghcr.io/kubiyabot/workflow-engine:v1.46.2560a16a56d4e
github.com/docker/docker@v27.4.1+incompatible
no fix listed
1
ghcr.io/kyverno/background-controller:v1.12.506ed5db6cd33
github.com/docker/docker@v25.0.5+incompatible
no fix listed
1
ghcr.io/kyverno/cleanup-controller:v1.12.5b914032ef9ad
github.com/docker/docker@v25.0.5+incompatible
no fix listed
1
ghcr.io/kyverno/kyverno:v1.7.19c73f1841ebc
github.com/docker/docker@v20.10.12+incompatible
no fix listed
1
ghcr.io/kyverno/kyverno:v1.12.5a61c7022abcf
github.com/docker/docker@v25.0.5+incompatible
no fix listed
1
ghcr.io/kyverno/kyverno-cli:v1.12.5832a32779e6d
github.com/docker/docker@v25.0.5+incompatible
no fix listed
1
ghcr.io/kyverno/kyvernopre:v1.7.1185d2eebc60c
github.com/docker/docker@v20.10.12+incompatible
no fix listed
1
ghcr.io/kyverno/kyvernopre:v1.12.563f7eaf5aa8a
github.com/docker/docker@v25.0.5+incompatible
no fix listed
1
ghcr.io/kyverno/reports-controller:v1.12.5c62e3347611c
github.com/docker/docker@v25.0.5+incompatible
no fix listed
1
ghcr.io/lockdep/stackradar-scanner:0.3.0dd8a35d50c2d
github.com/docker/docker@v28.5.2+incompatible
no fix listed
1
ghcr.io/loft-sh/agent:3.2.45c109914ff73
github.com/docker/docker@v20.10.21+incompatible
no fix listed
1
ghcr.io/loft-sh/devpod-pro:0.0.0-ci.4-do-not-use5dfa86b6451f
github.com/docker/docker@v24.0.7+incompatible
no fix listed
1
ghcr.io/loft-sh/loft:0.0.0-ci.14b69bcdaa8492
github.com/docker/docker@v20.10.21+incompatible
no fix listed
1
ghcr.io/loft-sh/vcluster:0.16.484f70425f4dd
github.com/docker/docker@v23.0.0-rc.1+incompatible
no fix listed
1
ghcr.io/loft-sh/vcluster-control-plane:0.0.0-ci.4-do-not-use45e744fc623f
github.com/docker/docker@v24.0.7+incompatible
no fix listed
1
ghcr.io/loft-sh/vcluster-platform:4.12.0ef92da4621e6
github.com/docker/docker@v28.5.2+incompatible
no fix listed
1
ghcr.io/loft-sh/vnode-runtime:0.3.3b065ec5a5239
github.com/docker/docker@v27.1.1+incompatible
no fix listed
1
ghcr.io/m9sweeper/trawler:1.6.0df917c5a7e54
github.com/docker/docker@v24.0.7+incompatible
no fix listed
1
ghcr.io/manzil-infinity180/deploydefender:ea3ab0bb646cdbeddd1aca483ecf650f9ac0d0847fbc6855c8b3
github.com/docker/docker@v27.1.1+incompatible
no fix listed
1
ghcr.io/middleware-labs/agent-kube-go:dev17369c4cd390
github.com/docker/docker@v20.10.22+incompatible
no fix listed
1
ghcr.io/middleware-labs/mw-kube-agent:master056f0953763d
github.com/docker/docker@v24.0.5+incompatible
no fix listed
1
ghcr.io/middleware-labs/mw-kube-agent:1.12.09c7bc0f9bb35
github.com/docker/docker@v27.3.1+incompatible
no fix listed
1
ghcr.io/mosn/htnn-controller:v0.3.1c379e66246be
github.com/docker/docker@v25.0.5+incompatible
no fix listed
1
ghcr.io/oguzhan-yilmaz/kdiff-snapshots:0.0.2035bc5ca66d55a
github.com/docker/docker@v25.0.6+incompatible
no fix listed
1
ghcr.io/oguzhan-yilmaz/kdiff-snapshots:0.0.55d7f93d2182fe
github.com/docker/docker@v25.0.6+incompatible
no fix listed
1
ghcr.io/oguzhan-yilmaz/steampipe-powerpipe-kubernetes--steampipe:latestc0c8d53df9f3
github.com/docker/docker@v25.0.6+incompatible
no fix listed
1
ghcr.io/openclarity/grype-server:v0.6.079412399f301
github.com/docker/docker@v24.0.5+incompatible
no fix listed
1
ghcr.io/openclarity/kubeclarity:v2.23.314450f52a708
github.com/docker/docker@v24.0.7+incompatible
no fix listed
1
ghcr.io/openconfig/gnmic:0.45.0d422a9ebd4a2
github.com/docker/docker@v28.5.1+incompatible
no fix listed
1
ghcr.io/openfaasltd/pro-builder:0.6.06c17297f9098
github.com/docker/docker@v25.0.6+incompatible
no fix listed
1
ghcr.io/openlit/openlit:1.24.02434560e8f0e
github.com/docker/docker@v28.5.2+incompatible
no fix listed
1
ghcr.io/openrelik/openrelik-worker-containers:latesta6d5abe94706
github.com/docker/docker@v28.5.2+incompatible
no fix listed
1
ghcr.io/open-telemetry/opentelemetry-operator/opentelemetry-operator:0.148.0590e50477b76
github.com/docker/docker@v28.5.2+incompatible
no fix listed
1
ghcr.io/open-telemetry/opentelemetry-operator/opentelemetry-operator:0.132.05e331c925091
github.com/docker/docker@v28.0.0+incompatible
no fix listed
1
ghcr.io/open-telemetry/opentelemetry-operator/opentelemetry-operator:0.144.079b81912f1fb
github.com/docker/docker@v28.5.2+incompatible
no fix listed
1
ghcr.io/parca-dev/parca:v0.24.23776500fde82
github.com/docker/docker@v28.2.2+incompatible
no fix listed
1
ghcr.io/parca-dev/parca-agent:v0.28.06d6794f45f3e
github.com/docker/docker@v24.0.7+incompatible
no fix listed
1
ghcr.io/parca-dev/parca-agent:v0.42.0adc0eeb4dd05
github.com/docker/docker@v28.0.4+incompatible
no fix listed
1
ghcr.io/qjoly/spindle:v1.16.1-alphaaab0c99d313f
github.com/docker/docker@v28.2.2+incompatible
no fix listed
1
ghcr.io/samr037/node-debug-dashboard:0.3.0c79b2e64a211
github.com/docker/docker@v27.3.1+incompatible
no fix listed
1
ghcr.io/spiffe/spire-agent:1.6.062517726d0c4
github.com/docker/docker@v23.0.1+incompatible
no fix listed
1
ghcr.io/stashed/stash:v0.42.03a98245a7667
github.com/docker/docker@v28.0.0+incompatible
no fix listed
1
ghcr.io/substra/fabric-peer:0.2.4f681e0343a31
github.com/docker/docker@v20.10.0-beta1.0.20201113105859-b6bfff2a628f+incompatible
no fix listed
1
ghcr.io/substra/fabric-tools:0.2.43491a0f31c4a
github.com/docker/docker@v20.10.0-beta1.0.20201113105859-b6bfff2a628f+incompatible
no fix listed
1
ghcr.io/synapsecns/sanguine/explorer:latest00131e3d1eaf
github.com/docker/docker@v26.1.3+incompatible
no fix listed
1
ghcr.io/tjm/vault-gcp-secrets:v1.19.59f157fe035f1
github.com/docker/docker@v27.2.1+incompatible
no fix listed
1
ghcr.io/traefik/traefik-hub:v2.11.0322f5f8cc105
github.com/docker/docker@v20.10.21+incompatible
no fix listed
1
ghcr.io/turbot/guardrails-agent-kubernetes:0.3.09d01bf9c9224
github.com/docker/docker@v25.0.6+incompatible
no fix listed
1

syft 1.42.1 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.