StackRadar

CVE-2026-42306

High

Advisory

Published 18 May 2026In the index since 5 Sept 2026
Severity
High
worst across findings
CVSS
7.2
base score, highest
EPSS
0.001
1st percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
579
of 17,781 indexed, latest versions
Container images
572
deployed by those charts
Fix available
1 of 3
affected packages

Docker: Race condition in docker cp allows bind mount redirection to host path

Carried by container images the latest versions of 579 of 17,781 indexed charts deploy, on 572 images.

Affected packageAffected versionsFixed inImages
github.com/docker/dockergolangv0.0.0-20180620051407-e2593239d949, v0.7.3-0.20190327010347-be7ac8be2ae0, v1.4.2-0.20190924003213-a8608b5b67c7, v1.4.2-0.20191121165722-d1d5f6476656+84 moreno fix listed547
github.com/moby/mobygolangv0.7.3-0.20190826074503-38ab9da00309, v1.4.2-0.20170731201646-1009e6a40b29, v1.13.1, v17.12.0-ce-rc1.0.20200618181300-9dc6525e6118+incompatible+4 moreno fix listed30
docker.iodeb20.10.24+dfsg1-1+deb12u1+b6, 26.1.5+dfsg1-9+b1326.1.5+dfsg1-9+deb13u12
OSV records
DEBIAN-CVE-2026-42306GHSA-rg2x-37c3-w2rh
Also known as
GO-2026-5617

Charts affected

579 by stars
ChartLatestAffected imagesRadar Score
example-dev-toolsnoygal0.2.81 of 3See more

example-dev-tools noygal 0.2.8

1 of the 3 container images this version deploys carry CVE-2026-42306.

Container imageDigestPackageFixed in
linuxserver/cloud9:latest45c5fe102ff3
github.com/docker/docker@v20.10.3-0.20220121014307-40bb9831756f+incompatible
no fix listed

Open the chart page →

27,465
nai-knative-servingnutanix-helm-releasesVerified publisher1.13.11 of 4See more

nai-knative-serving nutanix-helm-releases 1.13.1

1 of the 4 container images this version deploys carry CVE-2026-42306.

Container imageDigestPackageFixed in
gcr.io/knative-releases/knative.dev/serving/cmd/controller:v1.13.153d9aa4d2c7a
github.com/docker/docker@v20.10.20+incompatible
no fix listed

Open the chart page →

3,738
lensoci-ai-incubations0.1.142 of 16See more

lens oci-ai-incubations 0.1.14

2 of the 16 container images this version deploys carry CVE-2026-42306.

Container imageDigestPackageFixed in
alpine/k8s:1.31.106dbe6f391eda
github.com/docker/docker@v28.0.0+incompatible
no fix listed
quay.io/prometheus/prometheus:v3.5.063805ebb8d2b
github.com/docker/docker@v28.2.2+incompatible
no fix listed

Open the chart page →

17,070
multicluster-meshocm-helm-chartsVerified publisher0.0.21 of 1See more

multicluster-mesh ocm-helm-charts 0.0.2

1 of the 1 container images this version deploys carry CVE-2026-42306.

Container imageDigestPackageFixed in
quay.io/open-cluster-management/multicluster-mesh-addon:latest3e010e1188f1
github.com/docker/docker@v20.10.12+incompatible
no fix listed

Open the chart page →

2,124
onedevonedev11.9.01 of 1See more

onedev onedev 11.9.0

1 of the 1 container images this version deploys carry CVE-2026-42306.

Container imageDigestPackageFixed in
1dev/server:11.9.0cd5b12fe5471
github.com/docker/docker@v28.0.4+incompatible
no fix listed

Open the chart page →

6,037
one-green-coreone-green-coreVerified publisher0.0.71 of 8See more

one-green-core one-green-core 0.0.7

1 of the 8 container images this version deploys carry CVE-2026-42306.

Container imageDigestPackageFixed in
library/telegraf:1.20.428e98eece020
github.com/docker/docker@v20.10.9+incompatible
no fix listed

Open the chart page →

9,558
anchore-engineopencloudcx1.13.01 of 2See more

anchore-engine opencloudcx 1.13.0

1 of the 2 container images this version deploys carry CVE-2026-42306.

Container imageDigestPackageFixed in
anchore/anchore-engine:v0.10.0bde9eedf639d
github.com/docker/docker@v17.12.0-ce-rc1.0.20200309214505-aa6a9891b09c+incompatible
no fix listed

Open the chart page →

18,023
voltha-infraopencord2.14.01 of 10See more

voltha-infra opencord 2.14.0

1 of the 10 container images this version deploys carry CVE-2026-42306.

Container imageDigestPackageFixed in
opencord/onos-classic-helm-utils:0.1.00d693ba85fd6
github.com/docker/docker@v17.12.0-ce-rc1.0.20200618181300-9dc6525e6118+incompatible
no fix listed

Open the chart page →

41,044
pro-builderopenfaas0.6.131 of 2See more

pro-builder openfaas 0.6.13

1 of the 2 container images this version deploys carry CVE-2026-42306.

Container imageDigestPackageFixed in
ghcr.io/openfaasltd/pro-builder:0.6.06c17297f9098
github.com/docker/docker@v25.0.6+incompatible
no fix listed

Open the chart page →

2,726
probuilderopenfaas0.2.01 of 2See more

probuilder openfaas 0.2.0

1 of the 2 container images this version deploys carry CVE-2026-42306.

Container imageDigestPackageFixed in
moby/buildkit:v0.10.0c2aeafaed434
github.com/docker/docker@v20.10.3-0.20220224222438-c78f6963a1c0+incompatible
no fix listed

Open the chart page →

4,751
openlitopenlit1.24.01 of 3See more

openlit openlit 1.24.0

1 of the 3 container images this version deploys carry CVE-2026-42306.

Container imageDigestPackageFixed in
ghcr.io/openlit/openlit:1.24.02434560e8f0e
github.com/docker/docker@v28.5.2+incompatible
no fix listed

Open the chart page →

5,017
fsmopenshift0.1.8-ubi.61 of 6See more

fsm openshift 0.1.8-ubi.6

1 of the 6 container images this version deploys carry CVE-2026-42306.

Container imageDigestPackageFixed in
quay.io/flomesh/fsm-manager-ubi8:0.1.8-ubi.63590af73f65a
github.com/docker/docker@v20.10.2+incompatible
no fix listed

Open the chart page →

16,556
harikubeopenshift0.16.31 of 3See more

harikube openshift 0.16.3

1 of the 3 container images this version deploys carry CVE-2026-42306.

Container imageDigestPackageFixed in
quay.io/harikube/vcluster-pro:0.32.1b741efae8d31
github.com/docker/docker@v25.0.6+incompatible
no fix listed

Open the chart page →

2,525
kb-cloud-installeropenshift2.1.351 of 1See more

kb-cloud-installer openshift 2.1.35

1 of the 1 container images this version deploys carry CVE-2026-42306.

Container imageDigestPackageFixed in
apecloud/kb-cloud-installer:v2.1.42-certified98abc64aa985
github.com/docker/docker@v27.1.1+incompatible
no fix listed

Open the chart page →

4,127
opscruiseopenshift0.35.1002 of 11See more

opscruise openshift 0.35.100

2 of the 11 container images this version deploys carry CVE-2026-42306.

Container imageDigestPackageFixed in
grafana/promtail:2.0.05fd12edcc694
github.com/docker/docker@v17.12.0-ce-rc1.0.20201009160326-9c15e82f19b0+incompatible
no fix listed
quay.io/prometheus/prometheus:v2.36.2df0cd5887887
github.com/docker/docker@v20.10.16+incompatible
no fix listed

Open the chart page →

8,201
redhat-trusted-application-pipelineopenshift1.0.21 of 2See more

redhat-trusted-application-pipeline openshift 1.0.2

1 of the 2 container images this version deploys carry CVE-2026-42306.

Container imageDigestPackageFixed in
quay.io/redhat-appstudio/appstudio-utils:dbbdd82734232e6289e8fbae5b4c858481a7c0577b4202c25b67
github.com/docker/docker@v23.0.5+incompatible
no fix listed

Open the chart page →

8,599
voyager-gatewayopenshift2026.1.151 of 2See more

voyager-gateway openshift 2026.1.15

1 of the 2 container images this version deploys carry CVE-2026-42306.

Container imageDigestPackageFixed in
ghcr.io/voyagermesh/gateway:v1.6.223f4da194134
github.com/docker/docker@v28.3.3+incompatible
no fix listed

Open the chart page →

2,567
openvscode-serveropenvscode-server-helmVerified publisher2.7.371 of 2See more

openvscode-server openvscode-server-helm 2.7.37

1 of the 2 container images this version deploys carry CVE-2026-42306.

Container imageDigestPackageFixed in
library/docker:23.0.1-dindd9a0fd8bdd15
github.com/docker/docker@v23.0.1+incompatible
no fix listed

Open the chart page →

4,237
operator-lifecycle-manageroperator-lifecycle-manager1.2.22 of 2See more

operator-lifecycle-manager operator-lifecycle-manager 1.2.2

2 of the 2 container images this version deploys carry CVE-2026-42306.

Container imageDigestPackageFixed in
quay.io/operator-framework/catalogd:v1.8.06ff40fa6257f
github.com/docker/docker@v28.5.2+incompatible
no fix listed
quay.io/operator-framework/operator-controller:v1.8.0bca5dfcc67ca
github.com/docker/docker@v28.5.2+incompatible
no fix listed

Open the chart page →

1,821
opslevelopslevelVerified publisher2025.1.221 of 10See more

opslevel opslevel 2025.1.22

1 of the 10 container images this version deploys carry CVE-2026-42306.

Container imageDigestPackageFixed in
replicated/replicated-sdk:1.0.0-beta.318751b4963250
github.com/docker/docker@v25.0.6+incompatible
no fix listed

Open the chart page →

5,554
orderregistratiecomponentorderregistratiecomponent1.0.01 of 3See more

orderregistratiecomponent orderregistratiecomponent 1.0.0

1 of the 3 container images this version deploys carry CVE-2026-42306.

Container imageDigestPackageFixed in
ghcr.io/conductionnl/orderregistratiecomponent-php:latestd17257e4fa27
github.com/docker/docker@v1.4.2-0.20200203170920-46ec8731fbce
no fix listed

Open the chart page →

7,492
osdfir-infrastructureosdfir-infrastructureVerified publisher2.15.04 of 40See more

osdfir-infrastructure osdfir-infrastructure 2.15.0

4 of the 40 container images this version deploys carry CVE-2026-42306.

Container imageDigestPackageFixed in
library/arangodb:3.11.81e75d74954a4
github.com/docker/docker@v24.0.7+incompatible
no fix listed
prom/prometheus:v3.0.1565ee8650122
github.com/docker/docker@v27.3.1+incompatible
no fix listed
gcr.io/kaniko-project/executor:latest4e7a52dd1f14
github.com/docker/docker@v28.1.1+incompatible
no fix listed
ghcr.io/openrelik/openrelik-worker-containers:latesta6d5abe94706
github.com/docker/docker@v28.5.2+incompatible
no fix listed

Open the chart page →

71,208
yetiosdfir-infrastructureVerified publisher1.0.51 of 4See more

yeti osdfir-infrastructure 1.0.5

1 of the 4 container images this version deploys carry CVE-2026-42306.

Container imageDigestPackageFixed in
library/arangodb:3.11.81e75d74954a4
github.com/docker/docker@v24.0.7+incompatible
no fix listed

Open the chart page →

6,583
lokiot-container-kit1.0.11 of 5See more

loki ot-container-kit 1.0.1

1 of the 5 container images this version deploys carry CVE-2026-42306.

Container imageDigestPackageFixed in
grafana/promtail:3.0.0d3de3da9431c
github.com/docker/docker@v25.0.3+incompatible
no fix listed

Open the chart page →

4,831
vm-standaloneot-container-kit0.0.41 of 6See more

vm-standalone ot-container-kit 0.0.4

1 of the 6 container images this version deploys carry CVE-2026-42306.

Container imageDigestPackageFixed in
quay.io/opstree/grafana:12.4.3b61c1ed2f015
github.com/moby/moby@v28.0.1+incompatible
no fix listed

Open the chart page →

3,378
adotowan-charts0.1.01 of 1See more

adot owan-charts 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-42306.

Container imageDigestPackageFixed in
public.ecr.aws/aws-observability/aws-otel-collector:v0.43.38aa9ea5f67b8
github.com/docker/docker@v27.4.1+incompatible
no fix listed

Open the chart page →

1,016
arpap2p-avs0.1.31 of 2See more

arpa p2p-avs 0.1.3

1 of the 2 container images this version deploys carry CVE-2026-42306.

Container imageDigestPackageFixed in
ghcr.io/arpa-network/node-client:latest657a2c9f6e6d
github.com/docker/docker@v25.0.5+incompatible
no fix listed

Open the chart page →

1,980
parcaparca4.19.02 of 2See more

parca parca 4.19.0

2 of the 2 container images this version deploys carry CVE-2026-42306.

Container imageDigestPackageFixed in
ghcr.io/parca-dev/parca:v0.20.00d1df8f436f7
github.com/docker/docker@v24.0.4+incompatible
no fix listed
ghcr.io/parca-dev/parca-agent:v0.28.06d6794f45f3e
github.com/docker/docker@v24.0.7+incompatible
no fix listed

Open the chart page →

3,350
parcaparca-chart0.1.01 of 1See more

parca parca-chart 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-42306.

Container imageDigestPackageFixed in
ghcr.io/parca-dev/parca:v0.20.00d1df8f436f7
github.com/docker/docker@v24.0.4+incompatible
no fix listed

Open the chart page →

1,978
parcaparca-rr0.1.02 of 2See more

parca parca-rr 0.1.0

2 of the 2 container images this version deploys carry CVE-2026-42306.

Container imageDigestPackageFixed in
ghcr.io/parca-dev/parca:v0.24.23776500fde82
github.com/docker/docker@v28.2.2+incompatible
no fix listed
ghcr.io/parca-dev/parca-agent:v0.42.0adc0eeb4dd05
github.com/docker/docker@v28.0.4+incompatible
no fix listed

Open the chart page →

2,366
istio-operatorparticuleio1.7.01 of 1See more

istio-operator particuleio 1.7.0

1 of the 1 container images this version deploys carry CVE-2026-42306.

Container imageDigestPackageFixed in
gcr.io/istio-testing/operator:latest8d4576f7b98f
github.com/docker/docker@v26.0.2+incompatible
no fix listed

Open the chart page →

4,120
pet-battle-infrapetbattle1.0.322 of 2See more

pet-battle-infra petbattle 1.0.32

2 of the 2 container images this version deploys carry CVE-2026-42306.

Container imageDigestPackageFixed in
quay.io/openshift/origin-cli:latest605eaa5d469c
github.com/docker/docker@v28.5.2+incompatible
no fix listed
quay.io/openshift/origin-cli:4.8bb5e052770e5
github.com/docker/docker@v20.10.3+incompatible
no fix listed

Open the chart page →

15,466
pet-battle-tournamentpetbattle1.0.402 of 3See more

pet-battle-tournament petbattle 1.0.40

2 of the 3 container images this version deploys carry CVE-2026-42306.

Container imageDigestPackageFixed in
quay.io/openshift/origin-cli:latest605eaa5d469c
github.com/docker/docker@v28.5.2+incompatible
no fix listed
quay.io/openshift/origin-cli:4.8bb5e052770e5
github.com/docker/docker@v20.10.3+incompatible
no fix listed

Open the chart page →

15,466
loki-stackphntom2.10.21 of 2See more

loki-stack phntom 2.10.2

1 of the 2 container images this version deploys carry CVE-2026-42306.

Container imageDigestPackageFixed in
grafana/promtail:2.4.2626900031c4e
github.com/docker/docker@v20.10.8+incompatible
no fix listed

Open the chart page →

5,708
npre-essentialsphntom0.1.602 of 22See more

npre-essentials phntom 0.1.60

2 of the 22 container images this version deploys carry CVE-2026-42306.

Container imageDigestPackageFixed in
grafana/promtail:2.7.0c16c710f7333
github.com/docker/docker@v20.10.18+incompatible
no fix listed
phntom/chartmuseum:v0.15.29242b4df9e65
github.com/docker/docker@v20.10.17+incompatible
no fix listed

Open the chart page →

26,840
pixie-operator-chartpixie0.1.71 of 3See more

pixie-operator-chart pixie 0.1.7

1 of the 3 container images this version deploys carry CVE-2026-42306.

Container imageDigestPackageFixed in
quay.io/operator-framework/olmdigest-pinned1b6002156f56
github.com/docker/docker@v24.0.7+incompatible
no fix listed

Open the chart page →

1,899
pixie-operator-helm2-chartpixie0.1.21 of 2See more

pixie-operator-helm2-chart pixie 0.1.2

1 of the 2 container images this version deploys carry CVE-2026-42306.

Container imageDigestPackageFixed in
quay.io/operator-framework/olmdigest-pinnedf9ea8cef95ac
github.com/docker/docker@v20.10.21+incompatible
no fix listed

Open the chart page →

1,753
planectlplanectlVerified publisher0.7.03 of 10See more

planectl planectl 0.7.0

3 of the 10 container images this version deploys carry CVE-2026-42306.

Container imageDigestPackageFixed in
alpine/k8s:1.30.2cd560fce90f7
github.com/docker/docker@v24.0.9+incompatible
no fix listed
gitea/act_runner:0.2.11c57233403eff
github.com/docker/docker@v25.0.5+incompatible
no fix listed
quay.io/argoproj/argocd:v2.14.115fc69e31c755
github.com/docker/docker@v25.0.6+incompatible
no fix listed

Open the chart page →

25,934
gitlab-runner-operatorpnnl-miscscripts0.1.61 of 1See more

gitlab-runner-operator pnnl-miscscripts 0.1.6

1 of the 1 container images this version deploys carry CVE-2026-42306.

Container imageDigestPackageFixed in
pnnlmiscscripts/gitlab-runner-operator:0.1.3-1155131891741
github.com/docker/docker@v25.0.6+incompatible
github.com/moby/moby@v0.7.3-0.20190826074503-38ab9da00309
no fix listed
no fix listed

Open the chart page →

11,151
procestypecatalogusprocestypecatalogus1.1.01 of 4See more

procestypecatalogus procestypecatalogus 1.1.0

1 of the 4 container images this version deploys carry CVE-2026-42306.

Container imageDigestPackageFixed in
ghcr.io/conductionnl/procestypecatalogus-php:latest956c4fb64796
github.com/docker/docker@v1.4.2-0.20200203170920-46ec8731fbce
no fix listed

Open the chart page →

7,429
productenendienstencatalogusproductenendienstencatalogus1.0.01 of 3See more

productenendienstencatalogus productenendienstencatalogus 1.0.0

1 of the 3 container images this version deploys carry CVE-2026-42306.

Container imageDigestPackageFixed in
ghcr.io/conductionnl/productenendienstencatalogus-php:latest7242da105081
github.com/docker/docker@v1.4.2-0.20200203170920-46ec8731fbce
no fix listed

Open the chart page →

7,510
panproto-application-nldesign0.1.01 of 5See more

pan proto-application-nldesign 0.1.0

1 of the 5 container images this version deploys carry CVE-2026-42306.

Container imageDigestPackageFixed in
conduction/pan-php:dev24f03c57568f
github.com/docker/docker@v1.4.2-0.20200203170920-46ec8731fbce
no fix listed

Open the chart page →

8,725
proto-component-commongroundproto-component-commonground1.0.01 of 3See more

proto-component-commonground proto-component-commonground 1.0.0

1 of the 3 container images this version deploys carry CVE-2026-42306.

Container imageDigestPackageFixed in
ghcr.io/conductionnl/proto-component-commonground-php:latesteb36ead1954e
github.com/docker/docker@v1.4.2-0.20200203170920-46ec8731fbce
no fix listed

Open the chart page →

7,510
loki-stackpyalive-cdmswebappVerified publisher2.6.51 of 4See more

loki-stack pyalive-cdmswebapp 2.6.5

1 of the 4 container images this version deploys carry CVE-2026-42306.

Container imageDigestPackageFixed in
grafana/promtail:2.4.2626900031c4e
github.com/docker/docker@v20.10.8+incompatible
no fix listed

Open the chart page →

6,525
qualys-scannerqualys-helm-chartVerified publisher2.1.01 of 1See more

qualys-scanner qualys-helm-chart 2.1.0

1 of the 1 container images this version deploys carry CVE-2026-42306.

Container imageDigestPackageFixed in
qualys/qscanner:5.1.0-59ff255352422
github.com/docker/docker@v28.5.2+incompatible
no fix listed

Open the chart page →

246
kratosradar-baseVerified publisher0.43.11 of 1See more

kratos radar-base 0.43.1

1 of the 1 container images this version deploys carry CVE-2026-42306.

Container imageDigestPackageFixed in
oryd/kratos:v1.1.08f15006a080d
github.com/docker/docker@v20.10.24+incompatible
no fix listed

Open the chart page →

1,776
kubecostradar-baseVerified publisher1.0.01 of 7See more

kubecost radar-base 1.0.0

1 of the 7 container images this version deploys carry CVE-2026-42306.

Container imageDigestPackageFixed in
quay.io/prometheus/prometheus:v3.2.05888c188cf09
github.com/docker/docker@v27.4.1+incompatible
no fix listed

Open the chart page →

9,355
radar-kratosradar-baseVerified publisher0.1.51 of 1See more

radar-kratos radar-base 0.1.5

1 of the 1 container images this version deploys carry CVE-2026-42306.

Container imageDigestPackageFixed in
oryd/kratos:v1.3.1fe2428f103a6
github.com/docker/docker@v27.1.1+incompatible
no fix listed

Open the chart page →

1,561
rancher-auto-registerrancher-auto-registerVerified publisher0.1.01 of 1See more

rancher-auto-register rancher-auto-register 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-42306.

Container imageDigestPackageFixed in
registry.gitlab.com/xrow-public/ci-tools/tools:main9b9d1ed86b6a
github.com/docker/docker@v28.5.1+incompatible
no fix listed

Open the chart page →

1,837
ansible-automation-platformredhat-cop0.0.91 of 1See more

ansible-automation-platform redhat-cop 0.0.9

1 of the 1 container images this version deploys carry CVE-2026-42306.

Container imageDigestPackageFixed in
quay.io/openshift/origin-cli:4.7464a3af4dfe0
github.com/docker/docker@v1.4.2-0.20191121165722-d1d5f6476656
no fix listed

Open the chart page →

15,291

Container images carrying it

572 by charts deploying them

A fixed version is listed for 1 of the 3 affected packages.

Container imageDigestPackageFixed inUsed by
oryd/keto:v26.2.0bfdb8b9e283a
github.com/docker/docker@v28.5.1+incompatible
no fix listed
1
oryd/kratos:v26.2.02a13bb8d362c
github.com/docker/docker@v28.3.3+incompatible
no fix listed
1
oryd/kratos:v1.1.08f15006a080d
github.com/docker/docker@v20.10.24+incompatible
no fix listed
1
otel/opentelemetry-collector:0.100.09e36620d6c2c
github.com/docker/docker@v25.0.5+incompatible
no fix listed
1
otel/opentelemetry-collector:0.59.0ee9da0b08d83
github.com/docker/docker@v20.10.17+incompatible
no fix listed
1
otel/opentelemetry-collector-contrib:0.114.037fa87091cfa
github.com/docker/docker@v27.3.1+incompatible
no fix listed
1
otel/opentelemetry-collector-contrib:0.143.03bc07732530c
github.com/docker/docker@v28.5.2+incompatible
no fix listed
1
otel/opentelemetry-collector-contrib:0.113.05ac3e0ba2b0b
github.com/docker/docker@v27.3.1+incompatible
no fix listed
1
otel/opentelemetry-collector-contrib:0.83.071fcef33ae71
github.com/docker/docker@v24.0.5+incompatible
no fix listed
1
otel/opentelemetry-collector-contrib:0.108.0923eb1cfae32
github.com/docker/docker@v27.1.1+incompatible
no fix listed
1
otel/opentelemetry-collector-contrib:0.89.0995f17004231
github.com/docker/docker@v24.0.7+incompatible
no fix listed
1
otel/opentelemetry-collector-contrib:0.145.0a7343f018690
github.com/docker/docker@v28.5.2+incompatible
no fix listed
1
otel/opentelemetry-collector-contrib:0.46.0ba173aa85f3f
github.com/docker/docker@v20.10.12+incompatible
no fix listed
1
otel/opentelemetry-collector-contrib:0.81.0c6671841470b
github.com/docker/docker@v24.0.2+incompatible
no fix listed
1
otel/opentelemetry-collector-contrib:0.63.1dfb3a55ea8c9
github.com/docker/docker@v20.10.20+incompatible
no fix listed
1
otel/opentelemetry-collector-contrib:0.139.0faf125d656fa
github.com/docker/docker@v28.5.1+incompatible
no fix listed
1
otel/opentelemetry-collector-k8s:0.120.01e45d9483faa
github.com/docker/docker@v27.5.1+incompatible
no fix listed
1
phntom/chartmuseum:v0.16.053883b65d9b7
github.com/docker/docker@v20.10.24+incompatible
no fix listed
1
phntom/chartmuseum:v0.15.29242b4df9e65
github.com/docker/docker@v20.10.17+incompatible
no fix listed
1
pnnlmiscscripts/gitlab-runner-operator:0.1.3-1155131891741
github.com/docker/docker@v25.0.6+incompatible
github.com/moby/moby@v0.7.3-0.20190826074503-38ab9da00309
no fix listed
no fix listed
1
portainer/portainer-ce:2.18.4-alpine3e61aaee1341
github.com/docker/docker@v23.0.3+incompatible
no fix listed
1
portainer/portainer-ce:2.45.0511f3f06c96f
github.com/docker/docker@v28.5.2+incompatible
no fix listed
1
prom/prometheus:v2.51.24f6c47e39a90
github.com/docker/docker@v25.0.3+incompatible
no fix listed
1
prom/prometheus:v2.48.0b440bc0e8aa5
github.com/docker/docker@v24.0.6+incompatible
no fix listed
1
prom/prometheus:v2.22.2f7ffebdd428b
github.com/docker/docker@v17.12.0-ce-rc1.0.20200706150819-a40b877fbb9e+incompatible
no fix listed
1
qualys/qscanner:5.1.0-59ff255352422
github.com/docker/docker@v28.5.2+incompatible
no fix listed
1
rancher/k3s:v1.28.2-k3s18c2599ecfca8
github.com/docker/docker@v24.0.0-rc.2.0.20230801142700-69c9adb7d386+incompatible
no fix listed
1
rancher/k3s:v1.25.3-k3s1eaa270df79cc
github.com/docker/docker@v20.10.7+incompatible
no fix listed
1
replicated/replicated-sdk:1.0.0-beta.318751b4963250
github.com/docker/docker@v25.0.6+incompatible
no fix listed
1
runatlantis/atlantis:v0.16.145fbaf7e207c
github.com/docker/docker@v0.0.0-20180620051407-e2593239d949
no fix listed
1
securesystemsengineering/connaisseur:v3.12.038918befbdad
github.com/docker/docker@v28.5.2+incompatible
no fix listed
1
semaphoreui/semaphore:latest:v2.19.123996804607eb
github.com/docker/docker@v28.5.2+incompatible
no fix listed
1
semaphoreui/semaphore:v2.19.1498ad9bc7a2a0
github.com/docker/docker@v28.5.2+incompatible
no fix listed
1
signoz/signoz-otel-collector:v0.144.972aa1e4c1ec5
github.com/docker/docker@v28.5.2+incompatible
no fix listed
1
sikalabs/slu:v0.72.07bd267f30247
github.com/docker/docker@v24.0.7+incompatible
no fix listed
1
simpleidserver/faasprometheus:0.0.425e378d57d78
github.com/docker/docker@v20.10.8+incompatible
no fix listed
1
sirrend/helmup-engine:0.1.13699e79e3d4e2
github.com/docker/docker@v25.0.5+incompatible
no fix listed
1
someblackmagic/k8s-testing-multitool:v0.1.06eca64b6b440
github.com/docker/docker@v20.10.12+incompatible
no fix listed
1
sstarcher/helm-exporter:0.5.011769d01ba35
github.com/moby/moby@v0.7.3-0.20190826074503-38ab9da00309
no fix listed
1
streamnative/pulsar_vault_init:v1.0.731533fa9fab7
github.com/docker/docker@v20.10.10+incompatible
no fix listed
1
thanosio/thanos:v0.15.0b12d5c31bf5a
github.com/docker/docker@v17.12.0-ce-rc1.0.20200706150819-a40b877fbb9e+incompatible
no fix listed
1
traefik/traefikee:v2.12.10acc7fcca5f1c
github.com/docker/docker@v28.5.2+incompatible
no fix listed
1
veecode/devportalc443520aebf7
github.com/docker/docker@v28.5.1+incompatible
no fix listed
1
veecode/devportal-admin-ui:0.4.30c69fd286b489
github.com/docker/docker@v25.0.6+incompatible
no fix listed
1
wallarm/aih-scanner:2.7.11f1cb26db1f5b
github.com/docker/docker@v28.3.3+incompatible
no fix listed
1
wallarm/node-native-processing:0.23.07db2da8fce0b
github.com/docker/docker@v28.5.2+incompatible
no fix listed
1
gcr.io/cadvisor/cadvisor:v0.40.0135327c978de
github.com/docker/docker@v20.10.7+incompatible
no fix listed
1
gcr.io/cadvisor/cadvisor:v0.47.2e6c562b5e983
github.com/docker/docker@v20.10.21+incompatible
no fix listed
1
gcr.io/cadvisor/cadvisor:v0.52.1f40e65878e25
github.com/docker/docker@v26.1.4+incompatible
no fix listed
1
gcr.io/datadoghq/cluster-agent:7.61.06efe04ba4e06
github.com/docker/docker@v27.3.1+incompatible
no fix listed
1

syft 1.42.1 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.