StackRadar

CVE-2026-42306

High

Advisory

Published 18 May 2026In the index since 5 Sept 2026
Severity
High
worst across findings
CVSS
7.2
base score, highest
EPSS
0.001
1st percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
579
of 17,781 indexed, latest versions
Container images
572
deployed by those charts
Fix available
1 of 3
affected packages

Docker: Race condition in docker cp allows bind mount redirection to host path

Carried by container images the latest versions of 579 of 17,781 indexed charts deploy, on 572 images.

Affected packageAffected versionsFixed inImages
github.com/docker/dockergolangv0.0.0-20180620051407-e2593239d949, v0.7.3-0.20190327010347-be7ac8be2ae0, v1.4.2-0.20190924003213-a8608b5b67c7, v1.4.2-0.20191121165722-d1d5f6476656+84 moreno fix listed547
github.com/moby/mobygolangv0.7.3-0.20190826074503-38ab9da00309, v1.4.2-0.20170731201646-1009e6a40b29, v1.13.1, v17.12.0-ce-rc1.0.20200618181300-9dc6525e6118+incompatible+4 moreno fix listed30
docker.iodeb20.10.24+dfsg1-1+deb12u1+b6, 26.1.5+dfsg1-9+b1326.1.5+dfsg1-9+deb13u12
OSV records
DEBIAN-CVE-2026-42306GHSA-rg2x-37c3-w2rh
Also known as
GO-2026-5617

Charts affected

579 by stars
ChartLatestAffected imagesRadar Score
example-dev-toolsnoygal0.2.81 of 3See more

example-dev-tools noygal 0.2.8

1 of the 3 container images this version deploys carry CVE-2026-42306.

Container imageDigestPackageFixed in
linuxserver/cloud9:latest45c5fe102ff3
github.com/docker/docker@v20.10.3-0.20220121014307-40bb9831756f+incompatible
no fix listed

Open the chart page →

27,465
nai-knative-servingnutanix-helm-releasesVerified publisher1.13.11 of 4See more

nai-knative-serving nutanix-helm-releases 1.13.1

1 of the 4 container images this version deploys carry CVE-2026-42306.

Container imageDigestPackageFixed in
gcr.io/knative-releases/knative.dev/serving/cmd/controller:v1.13.153d9aa4d2c7a
github.com/docker/docker@v20.10.20+incompatible
no fix listed

Open the chart page →

3,738
lensoci-ai-incubations0.1.142 of 16See more

lens oci-ai-incubations 0.1.14

2 of the 16 container images this version deploys carry CVE-2026-42306.

Container imageDigestPackageFixed in
alpine/k8s:1.31.106dbe6f391eda
github.com/docker/docker@v28.0.0+incompatible
no fix listed
quay.io/prometheus/prometheus:v3.5.063805ebb8d2b
github.com/docker/docker@v28.2.2+incompatible
no fix listed

Open the chart page →

17,070
multicluster-meshocm-helm-chartsVerified publisher0.0.21 of 1See more

multicluster-mesh ocm-helm-charts 0.0.2

1 of the 1 container images this version deploys carry CVE-2026-42306.

Container imageDigestPackageFixed in
quay.io/open-cluster-management/multicluster-mesh-addon:latest3e010e1188f1
github.com/docker/docker@v20.10.12+incompatible
no fix listed

Open the chart page →

2,124
onedevonedev11.9.01 of 1See more

onedev onedev 11.9.0

1 of the 1 container images this version deploys carry CVE-2026-42306.

Container imageDigestPackageFixed in
1dev/server:11.9.0cd5b12fe5471
github.com/docker/docker@v28.0.4+incompatible
no fix listed

Open the chart page →

6,037
one-green-coreone-green-coreVerified publisher0.0.71 of 8See more

one-green-core one-green-core 0.0.7

1 of the 8 container images this version deploys carry CVE-2026-42306.

Container imageDigestPackageFixed in
library/telegraf:1.20.428e98eece020
github.com/docker/docker@v20.10.9+incompatible
no fix listed

Open the chart page →

9,558
anchore-engineopencloudcx1.13.01 of 2See more

anchore-engine opencloudcx 1.13.0

1 of the 2 container images this version deploys carry CVE-2026-42306.

Container imageDigestPackageFixed in
anchore/anchore-engine:v0.10.0bde9eedf639d
github.com/docker/docker@v17.12.0-ce-rc1.0.20200309214505-aa6a9891b09c+incompatible
no fix listed

Open the chart page →

18,023
voltha-infraopencord2.14.01 of 10See more

voltha-infra opencord 2.14.0

1 of the 10 container images this version deploys carry CVE-2026-42306.

Container imageDigestPackageFixed in
opencord/onos-classic-helm-utils:0.1.00d693ba85fd6
github.com/docker/docker@v17.12.0-ce-rc1.0.20200618181300-9dc6525e6118+incompatible
no fix listed

Open the chart page →

41,044
pro-builderopenfaas0.6.131 of 2See more

pro-builder openfaas 0.6.13

1 of the 2 container images this version deploys carry CVE-2026-42306.

Container imageDigestPackageFixed in
ghcr.io/openfaasltd/pro-builder:0.6.06c17297f9098
github.com/docker/docker@v25.0.6+incompatible
no fix listed

Open the chart page →

2,726
probuilderopenfaas0.2.01 of 2See more

probuilder openfaas 0.2.0

1 of the 2 container images this version deploys carry CVE-2026-42306.

Container imageDigestPackageFixed in
moby/buildkit:v0.10.0c2aeafaed434
github.com/docker/docker@v20.10.3-0.20220224222438-c78f6963a1c0+incompatible
no fix listed

Open the chart page →

4,751
openlitopenlit1.24.01 of 3See more

openlit openlit 1.24.0

1 of the 3 container images this version deploys carry CVE-2026-42306.

Container imageDigestPackageFixed in
ghcr.io/openlit/openlit:1.24.02434560e8f0e
github.com/docker/docker@v28.5.2+incompatible
no fix listed

Open the chart page →

5,017
fsmopenshift0.1.8-ubi.61 of 6See more

fsm openshift 0.1.8-ubi.6

1 of the 6 container images this version deploys carry CVE-2026-42306.

Container imageDigestPackageFixed in
quay.io/flomesh/fsm-manager-ubi8:0.1.8-ubi.63590af73f65a
github.com/docker/docker@v20.10.2+incompatible
no fix listed

Open the chart page →

16,556
harikubeopenshift0.16.31 of 3See more

harikube openshift 0.16.3

1 of the 3 container images this version deploys carry CVE-2026-42306.

Container imageDigestPackageFixed in
quay.io/harikube/vcluster-pro:0.32.1b741efae8d31
github.com/docker/docker@v25.0.6+incompatible
no fix listed

Open the chart page →

2,525
kb-cloud-installeropenshift2.1.351 of 1See more

kb-cloud-installer openshift 2.1.35

1 of the 1 container images this version deploys carry CVE-2026-42306.

Container imageDigestPackageFixed in
apecloud/kb-cloud-installer:v2.1.42-certified98abc64aa985
github.com/docker/docker@v27.1.1+incompatible
no fix listed

Open the chart page →

4,127
opscruiseopenshift0.35.1002 of 11See more

opscruise openshift 0.35.100

2 of the 11 container images this version deploys carry CVE-2026-42306.

Container imageDigestPackageFixed in
grafana/promtail:2.0.05fd12edcc694
github.com/docker/docker@v17.12.0-ce-rc1.0.20201009160326-9c15e82f19b0+incompatible
no fix listed
quay.io/prometheus/prometheus:v2.36.2df0cd5887887
github.com/docker/docker@v20.10.16+incompatible
no fix listed

Open the chart page →

8,201
redhat-trusted-application-pipelineopenshift1.0.21 of 2See more

redhat-trusted-application-pipeline openshift 1.0.2

1 of the 2 container images this version deploys carry CVE-2026-42306.

Container imageDigestPackageFixed in
quay.io/redhat-appstudio/appstudio-utils:dbbdd82734232e6289e8fbae5b4c858481a7c0577b4202c25b67
github.com/docker/docker@v23.0.5+incompatible
no fix listed

Open the chart page →

8,599
voyager-gatewayopenshift2026.1.151 of 2See more

voyager-gateway openshift 2026.1.15

1 of the 2 container images this version deploys carry CVE-2026-42306.

Container imageDigestPackageFixed in
ghcr.io/voyagermesh/gateway:v1.6.223f4da194134
github.com/docker/docker@v28.3.3+incompatible
no fix listed

Open the chart page →

2,567
openvscode-serveropenvscode-server-helmVerified publisher2.7.371 of 2See more

openvscode-server openvscode-server-helm 2.7.37

1 of the 2 container images this version deploys carry CVE-2026-42306.

Container imageDigestPackageFixed in
library/docker:23.0.1-dindd9a0fd8bdd15
github.com/docker/docker@v23.0.1+incompatible
no fix listed

Open the chart page →

4,237
operator-lifecycle-manageroperator-lifecycle-manager1.2.22 of 2See more

operator-lifecycle-manager operator-lifecycle-manager 1.2.2

2 of the 2 container images this version deploys carry CVE-2026-42306.

Container imageDigestPackageFixed in
quay.io/operator-framework/catalogd:v1.8.06ff40fa6257f
github.com/docker/docker@v28.5.2+incompatible
no fix listed
quay.io/operator-framework/operator-controller:v1.8.0bca5dfcc67ca
github.com/docker/docker@v28.5.2+incompatible
no fix listed

Open the chart page →

1,821
opslevelopslevelVerified publisher2025.1.221 of 10See more

opslevel opslevel 2025.1.22

1 of the 10 container images this version deploys carry CVE-2026-42306.

Container imageDigestPackageFixed in
replicated/replicated-sdk:1.0.0-beta.318751b4963250
github.com/docker/docker@v25.0.6+incompatible
no fix listed

Open the chart page →

5,554
orderregistratiecomponentorderregistratiecomponent1.0.01 of 3See more

orderregistratiecomponent orderregistratiecomponent 1.0.0

1 of the 3 container images this version deploys carry CVE-2026-42306.

Container imageDigestPackageFixed in
ghcr.io/conductionnl/orderregistratiecomponent-php:latestd17257e4fa27
github.com/docker/docker@v1.4.2-0.20200203170920-46ec8731fbce
no fix listed

Open the chart page →

7,492
osdfir-infrastructureosdfir-infrastructureVerified publisher2.15.04 of 40See more

osdfir-infrastructure osdfir-infrastructure 2.15.0

4 of the 40 container images this version deploys carry CVE-2026-42306.

Container imageDigestPackageFixed in
library/arangodb:3.11.81e75d74954a4
github.com/docker/docker@v24.0.7+incompatible
no fix listed
prom/prometheus:v3.0.1565ee8650122
github.com/docker/docker@v27.3.1+incompatible
no fix listed
gcr.io/kaniko-project/executor:latest4e7a52dd1f14
github.com/docker/docker@v28.1.1+incompatible
no fix listed
ghcr.io/openrelik/openrelik-worker-containers:latesta6d5abe94706
github.com/docker/docker@v28.5.2+incompatible
no fix listed

Open the chart page →

71,208
yetiosdfir-infrastructureVerified publisher1.0.51 of 4See more

yeti osdfir-infrastructure 1.0.5

1 of the 4 container images this version deploys carry CVE-2026-42306.

Container imageDigestPackageFixed in
library/arangodb:3.11.81e75d74954a4
github.com/docker/docker@v24.0.7+incompatible
no fix listed

Open the chart page →

6,583
lokiot-container-kit1.0.11 of 5See more

loki ot-container-kit 1.0.1

1 of the 5 container images this version deploys carry CVE-2026-42306.

Container imageDigestPackageFixed in
grafana/promtail:3.0.0d3de3da9431c
github.com/docker/docker@v25.0.3+incompatible
no fix listed

Open the chart page →

4,831
vm-standaloneot-container-kit0.0.41 of 6See more

vm-standalone ot-container-kit 0.0.4

1 of the 6 container images this version deploys carry CVE-2026-42306.

Container imageDigestPackageFixed in
quay.io/opstree/grafana:12.4.3b61c1ed2f015
github.com/moby/moby@v28.0.1+incompatible
no fix listed

Open the chart page →

3,378
adotowan-charts0.1.01 of 1See more

adot owan-charts 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-42306.

Container imageDigestPackageFixed in
public.ecr.aws/aws-observability/aws-otel-collector:v0.43.38aa9ea5f67b8
github.com/docker/docker@v27.4.1+incompatible
no fix listed

Open the chart page →

1,016
arpap2p-avs0.1.31 of 2See more

arpa p2p-avs 0.1.3

1 of the 2 container images this version deploys carry CVE-2026-42306.

Container imageDigestPackageFixed in
ghcr.io/arpa-network/node-client:latest657a2c9f6e6d
github.com/docker/docker@v25.0.5+incompatible
no fix listed

Open the chart page →

1,980
parcaparca4.19.02 of 2See more

parca parca 4.19.0

2 of the 2 container images this version deploys carry CVE-2026-42306.

Container imageDigestPackageFixed in
ghcr.io/parca-dev/parca:v0.20.00d1df8f436f7
github.com/docker/docker@v24.0.4+incompatible
no fix listed
ghcr.io/parca-dev/parca-agent:v0.28.06d6794f45f3e
github.com/docker/docker@v24.0.7+incompatible
no fix listed

Open the chart page →

3,350
parcaparca-chart0.1.01 of 1See more

parca parca-chart 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-42306.

Container imageDigestPackageFixed in
ghcr.io/parca-dev/parca:v0.20.00d1df8f436f7
github.com/docker/docker@v24.0.4+incompatible
no fix listed

Open the chart page →

1,978
parcaparca-rr0.1.02 of 2See more

parca parca-rr 0.1.0

2 of the 2 container images this version deploys carry CVE-2026-42306.

Container imageDigestPackageFixed in
ghcr.io/parca-dev/parca:v0.24.23776500fde82
github.com/docker/docker@v28.2.2+incompatible
no fix listed
ghcr.io/parca-dev/parca-agent:v0.42.0adc0eeb4dd05
github.com/docker/docker@v28.0.4+incompatible
no fix listed

Open the chart page →

2,366
istio-operatorparticuleio1.7.01 of 1See more

istio-operator particuleio 1.7.0

1 of the 1 container images this version deploys carry CVE-2026-42306.

Container imageDigestPackageFixed in
gcr.io/istio-testing/operator:latest8d4576f7b98f
github.com/docker/docker@v26.0.2+incompatible
no fix listed

Open the chart page →

4,120
pet-battle-infrapetbattle1.0.322 of 2See more

pet-battle-infra petbattle 1.0.32

2 of the 2 container images this version deploys carry CVE-2026-42306.

Container imageDigestPackageFixed in
quay.io/openshift/origin-cli:latest605eaa5d469c
github.com/docker/docker@v28.5.2+incompatible
no fix listed
quay.io/openshift/origin-cli:4.8bb5e052770e5
github.com/docker/docker@v20.10.3+incompatible
no fix listed

Open the chart page →

15,466
pet-battle-tournamentpetbattle1.0.402 of 3See more

pet-battle-tournament petbattle 1.0.40

2 of the 3 container images this version deploys carry CVE-2026-42306.

Container imageDigestPackageFixed in
quay.io/openshift/origin-cli:latest605eaa5d469c
github.com/docker/docker@v28.5.2+incompatible
no fix listed
quay.io/openshift/origin-cli:4.8bb5e052770e5
github.com/docker/docker@v20.10.3+incompatible
no fix listed

Open the chart page →

15,466
loki-stackphntom2.10.21 of 2See more

loki-stack phntom 2.10.2

1 of the 2 container images this version deploys carry CVE-2026-42306.

Container imageDigestPackageFixed in
grafana/promtail:2.4.2626900031c4e
github.com/docker/docker@v20.10.8+incompatible
no fix listed

Open the chart page →

5,708
npre-essentialsphntom0.1.602 of 22See more

npre-essentials phntom 0.1.60

2 of the 22 container images this version deploys carry CVE-2026-42306.

Container imageDigestPackageFixed in
grafana/promtail:2.7.0c16c710f7333
github.com/docker/docker@v20.10.18+incompatible
no fix listed
phntom/chartmuseum:v0.15.29242b4df9e65
github.com/docker/docker@v20.10.17+incompatible
no fix listed

Open the chart page →

26,840
pixie-operator-chartpixie0.1.71 of 3See more

pixie-operator-chart pixie 0.1.7

1 of the 3 container images this version deploys carry CVE-2026-42306.

Container imageDigestPackageFixed in
quay.io/operator-framework/olmdigest-pinned1b6002156f56
github.com/docker/docker@v24.0.7+incompatible
no fix listed

Open the chart page →

1,899
pixie-operator-helm2-chartpixie0.1.21 of 2See more

pixie-operator-helm2-chart pixie 0.1.2

1 of the 2 container images this version deploys carry CVE-2026-42306.

Container imageDigestPackageFixed in
quay.io/operator-framework/olmdigest-pinnedf9ea8cef95ac
github.com/docker/docker@v20.10.21+incompatible
no fix listed

Open the chart page →

1,753
planectlplanectlVerified publisher0.7.03 of 10See more

planectl planectl 0.7.0

3 of the 10 container images this version deploys carry CVE-2026-42306.

Container imageDigestPackageFixed in
alpine/k8s:1.30.2cd560fce90f7
github.com/docker/docker@v24.0.9+incompatible
no fix listed
gitea/act_runner:0.2.11c57233403eff
github.com/docker/docker@v25.0.5+incompatible
no fix listed
quay.io/argoproj/argocd:v2.14.115fc69e31c755
github.com/docker/docker@v25.0.6+incompatible
no fix listed

Open the chart page →

25,934
gitlab-runner-operatorpnnl-miscscripts0.1.61 of 1See more

gitlab-runner-operator pnnl-miscscripts 0.1.6

1 of the 1 container images this version deploys carry CVE-2026-42306.

Container imageDigestPackageFixed in
pnnlmiscscripts/gitlab-runner-operator:0.1.3-1155131891741
github.com/docker/docker@v25.0.6+incompatible
github.com/moby/moby@v0.7.3-0.20190826074503-38ab9da00309
no fix listed
no fix listed

Open the chart page →

11,151
procestypecatalogusprocestypecatalogus1.1.01 of 4See more

procestypecatalogus procestypecatalogus 1.1.0

1 of the 4 container images this version deploys carry CVE-2026-42306.

Container imageDigestPackageFixed in
ghcr.io/conductionnl/procestypecatalogus-php:latest956c4fb64796
github.com/docker/docker@v1.4.2-0.20200203170920-46ec8731fbce
no fix listed

Open the chart page →

7,429
productenendienstencatalogusproductenendienstencatalogus1.0.01 of 3See more

productenendienstencatalogus productenendienstencatalogus 1.0.0

1 of the 3 container images this version deploys carry CVE-2026-42306.

Container imageDigestPackageFixed in
ghcr.io/conductionnl/productenendienstencatalogus-php:latest7242da105081
github.com/docker/docker@v1.4.2-0.20200203170920-46ec8731fbce
no fix listed

Open the chart page →

7,510
panproto-application-nldesign0.1.01 of 5See more

pan proto-application-nldesign 0.1.0

1 of the 5 container images this version deploys carry CVE-2026-42306.

Container imageDigestPackageFixed in
conduction/pan-php:dev24f03c57568f
github.com/docker/docker@v1.4.2-0.20200203170920-46ec8731fbce
no fix listed

Open the chart page →

8,725
proto-component-commongroundproto-component-commonground1.0.01 of 3See more

proto-component-commonground proto-component-commonground 1.0.0

1 of the 3 container images this version deploys carry CVE-2026-42306.

Container imageDigestPackageFixed in
ghcr.io/conductionnl/proto-component-commonground-php:latesteb36ead1954e
github.com/docker/docker@v1.4.2-0.20200203170920-46ec8731fbce
no fix listed

Open the chart page →

7,510
loki-stackpyalive-cdmswebappVerified publisher2.6.51 of 4See more

loki-stack pyalive-cdmswebapp 2.6.5

1 of the 4 container images this version deploys carry CVE-2026-42306.

Container imageDigestPackageFixed in
grafana/promtail:2.4.2626900031c4e
github.com/docker/docker@v20.10.8+incompatible
no fix listed

Open the chart page →

6,525
qualys-scannerqualys-helm-chartVerified publisher2.1.01 of 1See more

qualys-scanner qualys-helm-chart 2.1.0

1 of the 1 container images this version deploys carry CVE-2026-42306.

Container imageDigestPackageFixed in
qualys/qscanner:5.1.0-59ff255352422
github.com/docker/docker@v28.5.2+incompatible
no fix listed

Open the chart page →

246
kratosradar-baseVerified publisher0.43.11 of 1See more

kratos radar-base 0.43.1

1 of the 1 container images this version deploys carry CVE-2026-42306.

Container imageDigestPackageFixed in
oryd/kratos:v1.1.08f15006a080d
github.com/docker/docker@v20.10.24+incompatible
no fix listed

Open the chart page →

1,776
kubecostradar-baseVerified publisher1.0.01 of 7See more

kubecost radar-base 1.0.0

1 of the 7 container images this version deploys carry CVE-2026-42306.

Container imageDigestPackageFixed in
quay.io/prometheus/prometheus:v3.2.05888c188cf09
github.com/docker/docker@v27.4.1+incompatible
no fix listed

Open the chart page →

9,355
radar-kratosradar-baseVerified publisher0.1.51 of 1See more

radar-kratos radar-base 0.1.5

1 of the 1 container images this version deploys carry CVE-2026-42306.

Container imageDigestPackageFixed in
oryd/kratos:v1.3.1fe2428f103a6
github.com/docker/docker@v27.1.1+incompatible
no fix listed

Open the chart page →

1,561
rancher-auto-registerrancher-auto-registerVerified publisher0.1.01 of 1See more

rancher-auto-register rancher-auto-register 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-42306.

Container imageDigestPackageFixed in
registry.gitlab.com/xrow-public/ci-tools/tools:main9b9d1ed86b6a
github.com/docker/docker@v28.5.1+incompatible
no fix listed

Open the chart page →

1,837
ansible-automation-platformredhat-cop0.0.91 of 1See more

ansible-automation-platform redhat-cop 0.0.9

1 of the 1 container images this version deploys carry CVE-2026-42306.

Container imageDigestPackageFixed in
quay.io/openshift/origin-cli:4.7464a3af4dfe0
github.com/docker/docker@v1.4.2-0.20191121165722-d1d5f6476656
no fix listed

Open the chart page →

15,291

Container images carrying it

572 by charts deploying them

A fixed version is listed for 1 of the 3 affected packages.

Container imageDigestPackageFixed inUsed by
hashicorp/boundary:0.21.037bf86488b74
github.com/docker/docker@v28.5.2+incompatible
no fix listed
1
hashicorp/boundary:0.8.1fb70bd9210ff
github.com/docker/docker@v20.10.7+incompatible
no fix listed
1
hashicorp/vault:1.15.40b01ed3924e6
github.com/docker/docker@v24.0.5+incompatible
no fix listed
1
hashicorp/vault:1.19.0bbb7f98dc67d
github.com/docker/docker@v27.2.1+incompatible
no fix listed
1
hashicorp/vault:1.8.4dfc3500beb0e
github.com/docker/docker@v17.12.0-ce-rc1.0.20200309214505-aa6a9891b09c+incompatible
no fix listed
1
hashicorp/waypoint:0.11.397d521a27498
github.com/docker/docker@v20.10.17+incompatible
no fix listed
1
hiversh/controller:0.1.45b0b85f8942c7
docker.io@20.10.24+dfsg1-1+deb12u1+b6
no fix listed
1
hyperledger/fabric-peer:2.2.1bf4995c86af6
github.com/docker/docker@v17.12.0-ce-rc1.0.20190628135806-70f67c6240bb+incompatible
no fix listed
1
hyperledgerk8s/bc-explorer:v202305041f1a06b61f18
github.com/docker/docker@v20.10.12+incompatible
no fix listed
1
hyperledgerk8s/bc-saas:v0.0.1-20230524d8bc31176257
github.com/docker/docker@v20.10.12+incompatible
no fix listed
1
hyperledgerk8s/fabric-operator:7776e7129a8af8be270
github.com/docker/docker@v20.10.12+incompatible
no fix listed
1
inseefrlab/shelly:cloudshell31f04ca7436b
github.com/docker/docker@v24.0.6+incompatible
no fix listed
1
ispras/svacer:11-2-042aa9fa9f189
github.com/docker/docker@v24.0.7+incompatible
no fix listed
1
istio/operator:1.12.06cfce8a071b9
github.com/moby/moby@v17.12.0-ce-rc1.0.20200618181300-9dc6525e6118+incompatible
no fix listed
1
istio/operator:1.18.270f9d1fe5fff
github.com/docker/docker@v23.0.3+incompatible
no fix listed
1
istio/pilot:1.23.69c3d6a218181
github.com/docker/docker@v26.1.5+incompatible
no fix listed
1
istio/pilot:1.16.0ac0284d75ec9
github.com/docker/docker@v20.10.17+incompatible
no fix listed
1
istio/pilot:1.17.1ce9d87606701
github.com/docker/docker@v23.0.0-rc.2+incompatible
no fix listed
1
istio/pilot:1.15.2db08d6963975
github.com/docker/docker@v20.10.17+incompatible
no fix listed
1
istio/proxyv2:1.14.1df69c1a7af7c
github.com/docker/docker@v20.10.12+incompatible
no fix listed
1
itzg/mc-router:1.16.1bb552b59fb53
github.com/docker/docker@v20.10.17+incompatible
no fix listed
1
itzg/mc-router:lateste06735ea7487
github.com/docker/docker@v28.5.2+incompatible
no fix listed
1
jamesread/olivetin:3000.19.0af9d7c4db6dc
github.com/docker/docker@v28.5.2+incompatible
no fix listed
1
jmferrer/azure-devops-agent:latest030f68ec6998
github.com/moby/moby@v0.7.3-0.20190826074503-38ab9da00309
no fix listed
1
kenchrcum/fluxcd-helm-upgrader:0.7.7c326e28a8f5f
github.com/docker/docker@v28.3.3+incompatible
no fix listed
1
kfirfer/gcloud-mysql:1.0.3c257c1e0e8b9
github.com/docker/docker@v24.0.7+incompatible
no fix listed
1
kiosksh/kiosk:0.2.11501725ba2025
github.com/moby/moby@v17.12.0-ce-rc1.0.20200618181300-9dc6525e6118+incompatible
no fix listed
1
kubebb/core:v0.1.62b9e7f451d6b
github.com/docker/docker@v20.10.17+incompatible
no fix listed
1
kubebb/core:lateste366c34a9b8d
github.com/docker/docker@v20.10.17+incompatible
no fix listed
1
kubebb/kube-oidc-proxy-ce:v0.3.0-2022100858d5efec568b
github.com/docker/docker@v20.10.17+incompatible
no fix listed
1
kubebb/mesh-operator:v5.7.0163ebbfc7a82
github.com/docker/docker@v20.10.17+incompatible
no fix listed
1
kubeflowkatib/katib-controller:v0.12.012a28c8a0b41
github.com/docker/docker@v1.4.2-0.20190924003213-a8608b5b67c7
no fix listed
1
kubeflowkatib/katib-controller:v0.17.072f14e03b9e1
github.com/docker/docker@v24.0.9+incompatible
no fix listed
1
kubeoperator/webkubectl:v2.4.0be8f0d624640
github.com/docker/docker@v1.4.2-0.20200203170920-46ec8731fbce
no fix listed
1
kubeovn/kube-ovn:v1.14.06722b54eb5c0
github.com/docker/docker@v28.2.2+incompatible
no fix listed
1
kubeshop/testkube-api-server:2.1.162e97dc620d9b4
github.com/docker/docker@v27.3.1+incompatible
no fix listed
1
kubesphere/ks-extensions-museum:latest29681958f220
github.com/docker/docker@v23.0.3+incompatible
no fix listed
1
kubesphere/kubectl:v1.27.1649b445b1b732
github.com/docker/docker@v20.10.21+incompatible
no fix listed
1
kubesphere/openelb:v0.5.0b5b665c4672c
github.com/docker/docker@v0.7.3-0.20190327010347-be7ac8be2ae0
no fix listed
1
kubesphere/openelb:v0.4.4ed7311a0f9e4
github.com/docker/docker@v0.7.3-0.20190327010347-be7ac8be2ae0
no fix listed
1
kubesphere/porter:v0.4.38d1ed5ee1d2e
github.com/docker/docker@v0.7.3-0.20190327010347-be7ac8be2ae0
no fix listed
1
kusionstack/kusion:v0.14.0126c8f0b0976
github.com/docker/docker@v27.3.1+incompatible
no fix listed
1
layer5/meshery:stable-latest78a8be21bef3
github.com/docker/docker@v28.0.4+incompatible
no fix listed
1
layer5/meshery-app-mesh:stable-latest77d59943b3d6
github.com/docker/docker@v20.10.17+incompatible
no fix listed
1
layer5/meshery-consul:stable-latest25a4cc38abcd
github.com/docker/docker@v24.0.6+incompatible
no fix listed
1
layer5/meshery-istio:stable-latestfde47c141ec6
github.com/docker/docker@v24.0.7+incompatible
no fix listed
1
layer5/meshery-kuma:stable-latest9d25f029a8a2
github.com/docker/docker@v20.10.21+incompatible
no fix listed
1
layer5/meshery-linkerd:stable-latestb99c73bac1f5
github.com/docker/docker@v24.0.7+incompatible
no fix listed
1
layer5/meshery-nginx-sm:stable-latestb3864dfd47ad
github.com/docker/docker@v20.10.21+incompatible
no fix listed
1
layer5/meshery-nsm:stable-latestebd6a8faf21f
github.com/docker/docker@v1.4.2-0.20200203170920-46ec8731fbce
no fix listed
1

syft 1.42.1 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.