StackRadar

CVE-2026-42306

High

Advisory

Published 18 May 2026In the index since 5 Sept 2026
Severity
High
worst across findings
CVSS
7.2
base score, highest
EPSS
0.001
1st percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
579
of 17,781 indexed, latest versions
Container images
572
deployed by those charts
Fix available
1 of 3
affected packages

Docker: Race condition in docker cp allows bind mount redirection to host path

Carried by container images the latest versions of 579 of 17,781 indexed charts deploy, on 572 images.

Affected packageAffected versionsFixed inImages
github.com/docker/dockergolangv0.0.0-20180620051407-e2593239d949, v0.7.3-0.20190327010347-be7ac8be2ae0, v1.4.2-0.20190924003213-a8608b5b67c7, v1.4.2-0.20191121165722-d1d5f6476656+84 moreno fix listed547
github.com/moby/mobygolangv0.7.3-0.20190826074503-38ab9da00309, v1.4.2-0.20170731201646-1009e6a40b29, v1.13.1, v17.12.0-ce-rc1.0.20200618181300-9dc6525e6118+incompatible+4 moreno fix listed30
docker.iodeb20.10.24+dfsg1-1+deb12u1+b6, 26.1.5+dfsg1-9+b1326.1.5+dfsg1-9+deb13u12
OSV records
DEBIAN-CVE-2026-42306GHSA-rg2x-37c3-w2rh
Also known as
GO-2026-5617

Charts affected

579 by stars
ChartLatestAffected imagesRadar Score
rtcsic-charts0.1.11 of 5See more

rt csic-charts 0.1.1

1 of the 5 container images this version deploys carry CVE-2026-42306.

Container imageDigestPackageFixed in
dtzar/helm-kubectl:3.11.2a1041bb0f1d1
github.com/docker/docker@v20.10.21+incompatible
no fix listed

Open the chart page →

15,380
custom-rhcl-consolecustom-rhcl-consoleVerified publisher0.1.21 of 3See more

custom-rhcl-console custom-rhcl-console 0.1.2

1 of the 3 container images this version deploys carry CVE-2026-42306.

Container imageDigestPackageFixed in
quay.io/openshift/origin-cli:latest605eaa5d469c
github.com/docker/docker@v28.5.2+incompatible
no fix listed

Open the chart page →

1,885
cw-container-insightcwci0.7.01 of 1See more

cw-container-insight cwci 0.7.0

1 of the 1 container images this version deploys carry CVE-2026-42306.

Container imageDigestPackageFixed in
amazon/cloudwatch-agent:latest-arm649dea6643715a
github.com/docker/docker@v28.3.3+incompatible
no fix listed

Open the chart page →

274
grafana-agentdandydev-chartsVerified publisher0.19.21 of 1See more

grafana-agent dandydev-charts 0.19.2

1 of the 1 container images this version deploys carry CVE-2026-42306.

Container imageDigestPackageFixed in
grafana/agent:v0.20.0825c09373d27
github.com/docker/docker@v20.10.7+incompatible
no fix listed

Open the chart page →

3,238
dapr-agentsdapr-agents-devVerified publisher0.1.52 of 31See more

dapr-agents dapr-agents-dev 0.1.5

2 of the 31 container images this version deploys carry CVE-2026-42306.

Container imageDigestPackageFixed in
grafana/grafana:12.3.39e1e77ade304
github.com/moby/moby@v27.5.1+incompatible
no fix listed
otel/opentelemetry-collector-contrib:0.145.0a7343f018690
github.com/docker/docker@v28.5.2+incompatible
no fix listed

Open the chart page →

22,193
dask-gatewaydask2026.3.01 of 2See more

dask-gateway dask 2026.3.0

1 of the 2 container images this version deploys carry CVE-2026-42306.

Container imageDigestPackageFixed in
library/traefik:3.3.5104204dadedf
github.com/docker/docker@v27.1.1+incompatible
no fix listed

Open the chart page →

1,994
cloudwatch-agent-prometheusdasmeta0.2.21 of 1See more

cloudwatch-agent-prometheus dasmeta 0.2.2

1 of the 1 container images this version deploys carry CVE-2026-42306.

Container imageDigestPackageFixed in
amazon/cloudwatch-agent:1.247350.0b251780e745d1783c93
github.com/docker/docker@v1.13.1
no fix listed

Open the chart page →

2,977
adot-exporter-for-eks-on-ec2dasmeta-adot0.15.51 of 1See more

adot-exporter-for-eks-on-ec2 dasmeta-adot 0.15.5

1 of the 1 container images this version deploys carry CVE-2026-42306.

Container imageDigestPackageFixed in
amazon/aws-otel-collector:v0.27.0d8ab0eef5074
github.com/docker/docker@v23.0.1+incompatible
no fix listed

Open the chart page →

1,926
agent-helmdatasaker0.1.81 of 6See more

agent-helm datasaker 0.1.8

1 of the 6 container images this version deploys carry CVE-2026-42306.

Container imageDigestPackageFixed in
datasaker/dsk-container-agent:latest08b52999f67b
github.com/docker/docker@v20.10.24+incompatible
no fix listed

Open the chart page →

7,571
ambassador-operatordatawire0.3.01 of 1See more

ambassador-operator datawire 0.3.0

1 of the 1 container images this version deploys carry CVE-2026-42306.

Container imageDigestPackageFixed in
datawire/ambassador-operator:v1.3.0f95ae710d75c
github.com/moby/moby@v0.7.3-0.20190826074503-38ab9da00309
no fix listed

Open the chart page →

7,486
kyvernodevopstalesVerified publisher2.5.12 of 2See more

kyverno devopstales 2.5.1

2 of the 2 container images this version deploys carry CVE-2026-42306.

Container imageDigestPackageFixed in
ghcr.io/kyverno/kyverno:v1.7.19c73f1841ebc
github.com/docker/docker@v20.10.12+incompatible
no fix listed
ghcr.io/kyverno/kyvernopre:v1.7.1185d2eebc60c
github.com/docker/docker@v20.10.12+incompatible
no fix listed

Open the chart page →

4,722
ai-agentdevtron0.0.11 of 1See more

ai-agent devtron 0.0.1

1 of the 1 container images this version deploys carry CVE-2026-42306.

Container imageDigestPackageFixed in
quay.io/devtron/ai-agent:0.0.16545dac92173
github.com/docker/docker@v27.1.1+incompatible
no fix listed

Open the chart page →

9,607
argocddevtron1.8.11 of 3See more

argocd devtron 1.8.1

1 of the 3 container images this version deploys carry CVE-2026-42306.

Container imageDigestPackageFixed in
argoproj/argocd:v1.8.1830e86cacefd
github.com/docker/docker@v0.7.3-0.20190327010347-be7ac8be2ae0
no fix listed

Open the chart page →

10,466
argocd-certificate-refreshdevtron0.10.81 of 1See more

argocd-certificate-refresh devtron 0.10.8

1 of the 1 container images this version deploys carry CVE-2026-42306.

Container imageDigestPackageFixed in
quay.io/devtron/argocd-cert-refresh:v102b6db27eaf3d
github.com/docker/docker@v20.10.17+incompatible
no fix listed

Open the chart page →

12,949
argo-workflowdevtron0.1.61 of 1See more

argo-workflow devtron 0.1.6

1 of the 1 container images this version deploys carry CVE-2026-42306.

Container imageDigestPackageFixed in
quay.io/argoproj/workflow-controller:v3.4.7f0c6fba81a24
github.com/docker/docker@v20.10.24+incompatible
no fix listed

Open the chart page →

1,580
devtron-enterprisedevtron48.0.02 of 28See more

devtron-enterprise devtron 48.0.0

2 of the 28 container images this version deploys carry CVE-2026-42306.

Container imageDigestPackageFixed in
quay.io/devtron/image-scanner:94237c18-109-3942098580969b333
github.com/docker/docker@v24.0.5+incompatible
no fix listed
quay.io/devtron/kubectl:latest2ad610626658
github.com/docker/docker@v20.10.17+incompatible
no fix listed

Open the chart page →

68,240
securitydevtron0.2.21 of 1See more

security devtron 0.2.2

1 of the 1 container images this version deploys carry CVE-2026-42306.

Container imageDigestPackageFixed in
quay.io/devtron/image-scanner:b278f42b-334-1111988c64b1b6ec8
github.com/docker/docker@v20.10.7+incompatible
no fix listed

Open the chart page →

2,435
ai-agentdevtron-labs0.0.11 of 1See more

ai-agent devtron-labs 0.0.1

1 of the 1 container images this version deploys carry CVE-2026-42306.

Container imageDigestPackageFixed in
quay.io/devtron/ai-agent:0.0.16545dac92173
github.com/docker/docker@v27.1.1+incompatible
no fix listed

Open the chart page →

9,607
argocddevtron-labs1.8.11 of 3See more

argocd devtron-labs 1.8.1

1 of the 3 container images this version deploys carry CVE-2026-42306.

Container imageDigestPackageFixed in
argoproj/argocd:v1.8.1830e86cacefd
github.com/docker/docker@v0.7.3-0.20190327010347-be7ac8be2ae0
no fix listed

Open the chart page →

10,466
argocd-certificate-refreshdevtron-labs0.10.81 of 1See more

argocd-certificate-refresh devtron-labs 0.10.8

1 of the 1 container images this version deploys carry CVE-2026-42306.

Container imageDigestPackageFixed in
quay.io/devtron/argocd-cert-refresh:v102b6db27eaf3d
github.com/docker/docker@v20.10.17+incompatible
no fix listed

Open the chart page →

12,949
argo-workflowdevtron-labs0.1.61 of 1See more

argo-workflow devtron-labs 0.1.6

1 of the 1 container images this version deploys carry CVE-2026-42306.

Container imageDigestPackageFixed in
quay.io/argoproj/workflow-controller:v3.4.7f0c6fba81a24
github.com/docker/docker@v20.10.24+incompatible
no fix listed

Open the chart page →

1,580
clairdevtron-labs0.1.141 of 2See more

clair devtron-labs 0.1.14

1 of the 2 container images this version deploys carry CVE-2026-42306.

Container imageDigestPackageFixed in
quay.io/devtron/clair:4.3.675fb847ac045
github.com/docker/docker@v20.10.7+incompatible
no fix listed

Open the chart page →

6,237
devtron-enterprisedevtron-labs48.0.02 of 28See more

devtron-enterprise devtron-labs 48.0.0

2 of the 28 container images this version deploys carry CVE-2026-42306.

Container imageDigestPackageFixed in
quay.io/devtron/image-scanner:94237c18-109-3942098580969b333
github.com/docker/docker@v24.0.5+incompatible
no fix listed
quay.io/devtron/kubectl:latest2ad610626658
github.com/docker/docker@v20.10.17+incompatible
no fix listed

Open the chart page →

68,240
devtron-operatordevtron-labs0.23.31 of 11See more

devtron-operator devtron-labs 0.23.3

1 of the 11 container images this version deploys carry CVE-2026-42306.

Container imageDigestPackageFixed in
quay.io/devtron/kubectl:latest2ad610626658
github.com/docker/docker@v20.10.17+incompatible
no fix listed

Open the chart page →

32,902
securitydevtron-labs0.2.21 of 1See more

security devtron-labs 0.2.2

1 of the 1 container images this version deploys carry CVE-2026-42306.

Container imageDigestPackageFixed in
quay.io/devtron/image-scanner:b278f42b-334-1111988c64b1b6ec8
github.com/docker/docker@v20.10.7+incompatible
no fix listed

Open the chart page →

2,435
direktivdirektivVerified publisher0.10.01 of 6See more

direktiv direktiv 0.10.0

1 of the 6 container images this version deploys carry CVE-2026-42306.

Container imageDigestPackageFixed in
otel/opentelemetry-collector-k8s:0.120.01e45d9483faa
github.com/docker/docker@v27.5.1+incompatible
no fix listed

Open the chart page →

3,470
docparserdocparser0.1.01 of 4See more

docparser docparser 0.1.0

1 of the 4 container images this version deploys carry CVE-2026-42306.

Container imageDigestPackageFixed in
conduction/docparser-php:devb6f95c8ead7d
github.com/docker/docker@v1.4.2-0.20200203170920-46ec8731fbce
no fix listed

Open the chart page →

8,408
k8s-crondoubanVerified publisher0.2.01 of 1See more

k8s-cron douban 0.2.0

1 of the 1 container images this version deploys carry CVE-2026-42306.

Container imageDigestPackageFixed in
alpine/k8s:1.28.2fc059f056ad0
github.com/docker/docker@v20.10.24+incompatible
no fix listed

Open the chart page →

3,659
overlorddoubanVerified publisher0.2.21 of 1See more

overlord douban 0.2.2

1 of the 1 container images this version deploys carry CVE-2026-42306.

Container imageDigestPackageFixed in
douz/overlord:latestf2bc7fc068c1
github.com/docker/docker@v1.13.1
no fix listed

Open the chart page →

3,693
drogue-cloud-metricsdrogue-iotVerified publisher0.7.111 of 8See more

drogue-cloud-metrics drogue-iot 0.7.11

1 of the 8 container images this version deploys carry CVE-2026-42306.

Container imageDigestPackageFixed in
quay.io/prometheus/prometheus:v2.26.038d40a760569
github.com/docker/docker@v20.10.5+incompatible
no fix listed

Open the chart page →

13,558
temporaldtrdnk-helm-chartsVerified publisher0.35.01 of 13See more

temporal dtrdnk-helm-charts 0.35.0

1 of the 13 container images this version deploys carry CVE-2026-42306.

Container imageDigestPackageFixed in
quay.io/prometheus/prometheus:v2.31.1a8779cfe553e
github.com/docker/docker@v20.10.9+incompatible
no fix listed

Open the chart page →

20,205
eav-componenteav-component1.0.01 of 3See more

eav-component eav-component 1.0.0

1 of the 3 container images this version deploys carry CVE-2026-42306.

Container imageDigestPackageFixed in
ghcr.io/conductionnl/eav-component-php:latest24bbca4a52a8
github.com/docker/docker@v1.4.2-0.20200203170920-46ec8731fbce
no fix listed

Open the chart page →

7,255
openfaas2eclipse-aeriosVerified publisher12.0.51 of 6See more

openfaas2 eclipse-aerios 12.0.5

1 of the 6 container images this version deploys carry CVE-2026-42306.

Container imageDigestPackageFixed in
prom/prometheus:v2.51.24f6c47e39a90
github.com/docker/docker@v25.0.3+incompatible
no fix listed

Open the chart page →

6,678
education-componenteducation-component1.0.01 of 3See more

education-component education-component 1.0.0

1 of the 3 container images this version deploys carry CVE-2026-42306.

Container imageDigestPackageFixed in
ghcr.io/conductionnl/education-component-php:latestda6b05a1a601
github.com/docker/docker@v1.4.2-0.20200203170920-46ec8731fbce
no fix listed

Open the chart page →

7,327
eherkenning-uieherkenning-ui1.0.01 of 3See more

eherkenning-ui eherkenning-ui 1.0.0

1 of the 3 container images this version deploys carry CVE-2026-42306.

Container imageDigestPackageFixed in
ghcr.io/conductionnl/eherkenning-ui-php:latestdeed102b4255
github.com/docker/docker@v1.4.2-0.20200203170920-46ec8731fbce
no fix listed

Open the chart page →

7,510
kube-ecp-stackemqx-operator2.5.14 of 16See more

kube-ecp-stack emqx-operator 2.5.1

4 of the 16 container images this version deploys carry CVE-2026-42306.

Container imageDigestPackageFixed in
emqx/ecp-main:2.5.1fa876f71e5d6
github.com/docker/docker@v27.3.1+incompatible
no fix listed
emqxecp/otelcol:2.5.04c31d9bec846
github.com/docker/docker@v27.0.3+incompatible
no fix listed
library/telegraf:1.27507a3eecf809
github.com/docker/docker@v24.0.5+incompatible
no fix listed
ghcr.io/buoyantio/prometheus:v2.55.12659f4c2ebb7
github.com/docker/docker@v27.2.0+incompatible
no fix listed

Open the chart page →

23,685
eoapi-supporteoapiVerified publisher0.1.71 of 7See more

eoapi-support eoapi 0.1.7

1 of the 7 container images this version deploys carry CVE-2026-42306.

Container imageDigestPackageFixed in
quay.io/prometheus/prometheus:v2.47.0c5dd35038287
github.com/docker/docker@v24.0.4+incompatible
no fix listed

Open the chart page →

8,648
edp-headlampepmdedpVerified publisher0.25.01 of 1See more

edp-headlamp epmdedp 0.25.0

1 of the 1 container images this version deploys carry CVE-2026-42306.

Container imageDigestPackageFixed in
epamedp/edp-headlamp:0.25.093417e18bb1a
github.com/docker/docker@v24.0.7+incompatible
no fix listed

Open the chart page →

1,259
benchmarkoor-apiethereum-helm-chartsVerified publisher0.1.01 of 1See more

benchmarkoor-api ethereum-helm-charts 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-42306.

Container imageDigestPackageFixed in
ghcr.io/ethpandaops/benchmarkoor:latest5470b2ec3161
github.com/docker/docker@v27.5.1+incompatible
no fix listed

Open the chart page →

899
chaos-meshethereum-helm-chartsVerified publisher0.0.33 of 4See more

chaos-mesh ethereum-helm-charts 0.0.3

3 of the 4 container images this version deploys carry CVE-2026-42306.

Container imageDigestPackageFixed in
ghcr.io/chaos-mesh/chaos-daemon:v2.8.0fb609bc264d9
github.com/docker/docker@v26.1.5+incompatible
no fix listed
ghcr.io/chaos-mesh/chaos-dashboard:v2.8.0e7f9e8f1d565
github.com/docker/docker@v26.1.5+incompatible
no fix listed
ghcr.io/chaos-mesh/chaos-mesh:v2.8.0091b906a0b13
github.com/docker/docker@v26.1.5+incompatible
no fix listed

Open the chart page →

12,127
ethereum-metrics-exporterethereum-helm-chartsVerified publisher0.2.11 of 1See more

ethereum-metrics-exporter ethereum-helm-charts 0.2.1

1 of the 1 container images this version deploys carry CVE-2026-42306.

Container imageDigestPackageFixed in
samcm/ethereum-metrics-exporter:latest91a2d9a015c1
github.com/docker/docker@v26.1.5+incompatible
no fix listed

Open the chart page →

684
syncoor-serverethereum-helm-chartsVerified publisher0.0.11 of 1See more

syncoor-server ethereum-helm-charts 0.0.1

1 of the 1 container images this version deploys carry CVE-2026-42306.

Container imageDigestPackageFixed in
ghcr.io/ethpandaops/syncoor:master233aa9808fc7
github.com/docker/docker@v28.5.2+incompatible
no fix listed

Open the chart page →

952
tracoor-agentethereum-helm-chartsVerified publisher0.0.11 of 1See more

tracoor-agent ethereum-helm-charts 0.0.1

1 of the 1 container images this version deploys carry CVE-2026-42306.

Container imageDigestPackageFixed in
ethpandaops/tracoor:latestd8514b9f4c59
github.com/docker/docker@v27.1.1+incompatible
no fix listed

Open the chart page →

905
tracoor-serverethereum-helm-chartsVerified publisher0.0.21 of 1See more

tracoor-server ethereum-helm-charts 0.0.2

1 of the 1 container images this version deploys carry CVE-2026-42306.

Container imageDigestPackageFixed in
ethpandaops/tracoor:latestd8514b9f4c59
github.com/docker/docker@v27.1.1+incompatible
no fix listed

Open the chart page →

905
tracoor-singleethereum-helm-chartsVerified publisher0.0.51 of 2See more

tracoor-single ethereum-helm-charts 0.0.5

1 of the 2 container images this version deploys carry CVE-2026-42306.

Container imageDigestPackageFixed in
ethpandaops/tracoor:latestd8514b9f4c59
github.com/docker/docker@v27.1.1+incompatible
no fix listed

Open the chart page →

905
express-ts-app-helm-chartsexpress-ts-app-helm-chartsVerified publisher1.0.01 of 4See more

express-ts-app-helm-charts express-ts-app-helm-charts 1.0.0

1 of the 4 container images this version deploys carry CVE-2026-42306.

Container imageDigestPackageFixed in
grafana/promtail:3.5.165bfae480b57
github.com/docker/docker@v28.0.4+incompatible
no fix listed

Open the chart page →

5,748
faasnetfaasnet0.0.41 of 5See more

faasnet faasnet 0.0.4

1 of the 5 container images this version deploys carry CVE-2026-42306.

Container imageDigestPackageFixed in
simpleidserver/faasprometheus:0.0.425e378d57d78
github.com/docker/docker@v20.10.8+incompatible
no fix listed

Open the chart page →

7,617
datadog-apmfairwinds-incubator2.0.01 of 1See more

datadog-apm fairwinds-incubator 2.0.0

1 of the 1 container images this version deploys carry CVE-2026-42306.

Container imageDigestPackageFixed in
public.ecr.aws/datadog/agent:7.73.0f4925b15ce94
github.com/docker/docker@v28.5.1+incompatible
no fix listed

Open the chart page →

2,785
skopeo-syncfairwinds-incubator0.3.11 of 1See more

skopeo-sync fairwinds-incubator 0.3.1

1 of the 1 container images this version deploys carry CVE-2026-42306.

Container imageDigestPackageFixed in
quay.io/skopeo/stable:v1.134853591bd1d2
github.com/docker/docker@v24.0.2+incompatible
no fix listed

Open the chart page →

1,736
event-generatorfalcosecurity0.4.01 of 1See more

event-generator falcosecurity 0.4.0

1 of the 1 container images this version deploys carry CVE-2026-42306.

Container imageDigestPackageFixed in
falcosecurity/event-generator:latest932956d86c99
github.com/docker/docker@v28.5.2+incompatible
no fix listed

Open the chart page →

3,773

Container images carrying it

572 by charts deploying them

A fixed version is listed for 1 of the 3 affected packages.

Container imageDigestPackageFixed inUsed by
oryd/keto:v26.2.0bfdb8b9e283a
github.com/docker/docker@v28.5.1+incompatible
no fix listed
1
oryd/kratos:v26.2.02a13bb8d362c
github.com/docker/docker@v28.3.3+incompatible
no fix listed
1
oryd/kratos:v1.1.08f15006a080d
github.com/docker/docker@v20.10.24+incompatible
no fix listed
1
otel/opentelemetry-collector:0.100.09e36620d6c2c
github.com/docker/docker@v25.0.5+incompatible
no fix listed
1
otel/opentelemetry-collector:0.59.0ee9da0b08d83
github.com/docker/docker@v20.10.17+incompatible
no fix listed
1
otel/opentelemetry-collector-contrib:0.114.037fa87091cfa
github.com/docker/docker@v27.3.1+incompatible
no fix listed
1
otel/opentelemetry-collector-contrib:0.143.03bc07732530c
github.com/docker/docker@v28.5.2+incompatible
no fix listed
1
otel/opentelemetry-collector-contrib:0.113.05ac3e0ba2b0b
github.com/docker/docker@v27.3.1+incompatible
no fix listed
1
otel/opentelemetry-collector-contrib:0.83.071fcef33ae71
github.com/docker/docker@v24.0.5+incompatible
no fix listed
1
otel/opentelemetry-collector-contrib:0.108.0923eb1cfae32
github.com/docker/docker@v27.1.1+incompatible
no fix listed
1
otel/opentelemetry-collector-contrib:0.89.0995f17004231
github.com/docker/docker@v24.0.7+incompatible
no fix listed
1
otel/opentelemetry-collector-contrib:0.145.0a7343f018690
github.com/docker/docker@v28.5.2+incompatible
no fix listed
1
otel/opentelemetry-collector-contrib:0.46.0ba173aa85f3f
github.com/docker/docker@v20.10.12+incompatible
no fix listed
1
otel/opentelemetry-collector-contrib:0.81.0c6671841470b
github.com/docker/docker@v24.0.2+incompatible
no fix listed
1
otel/opentelemetry-collector-contrib:0.63.1dfb3a55ea8c9
github.com/docker/docker@v20.10.20+incompatible
no fix listed
1
otel/opentelemetry-collector-contrib:0.139.0faf125d656fa
github.com/docker/docker@v28.5.1+incompatible
no fix listed
1
otel/opentelemetry-collector-k8s:0.120.01e45d9483faa
github.com/docker/docker@v27.5.1+incompatible
no fix listed
1
phntom/chartmuseum:v0.16.053883b65d9b7
github.com/docker/docker@v20.10.24+incompatible
no fix listed
1
phntom/chartmuseum:v0.15.29242b4df9e65
github.com/docker/docker@v20.10.17+incompatible
no fix listed
1
pnnlmiscscripts/gitlab-runner-operator:0.1.3-1155131891741
github.com/docker/docker@v25.0.6+incompatible
github.com/moby/moby@v0.7.3-0.20190826074503-38ab9da00309
no fix listed
no fix listed
1
portainer/portainer-ce:2.18.4-alpine3e61aaee1341
github.com/docker/docker@v23.0.3+incompatible
no fix listed
1
portainer/portainer-ce:2.45.0511f3f06c96f
github.com/docker/docker@v28.5.2+incompatible
no fix listed
1
prom/prometheus:v2.51.24f6c47e39a90
github.com/docker/docker@v25.0.3+incompatible
no fix listed
1
prom/prometheus:v2.48.0b440bc0e8aa5
github.com/docker/docker@v24.0.6+incompatible
no fix listed
1
prom/prometheus:v2.22.2f7ffebdd428b
github.com/docker/docker@v17.12.0-ce-rc1.0.20200706150819-a40b877fbb9e+incompatible
no fix listed
1
qualys/qscanner:5.1.0-59ff255352422
github.com/docker/docker@v28.5.2+incompatible
no fix listed
1
rancher/k3s:v1.28.2-k3s18c2599ecfca8
github.com/docker/docker@v24.0.0-rc.2.0.20230801142700-69c9adb7d386+incompatible
no fix listed
1
rancher/k3s:v1.25.3-k3s1eaa270df79cc
github.com/docker/docker@v20.10.7+incompatible
no fix listed
1
replicated/replicated-sdk:1.0.0-beta.318751b4963250
github.com/docker/docker@v25.0.6+incompatible
no fix listed
1
runatlantis/atlantis:v0.16.145fbaf7e207c
github.com/docker/docker@v0.0.0-20180620051407-e2593239d949
no fix listed
1
securesystemsengineering/connaisseur:v3.12.038918befbdad
github.com/docker/docker@v28.5.2+incompatible
no fix listed
1
semaphoreui/semaphore:latest:v2.19.123996804607eb
github.com/docker/docker@v28.5.2+incompatible
no fix listed
1
semaphoreui/semaphore:v2.19.1498ad9bc7a2a0
github.com/docker/docker@v28.5.2+incompatible
no fix listed
1
signoz/signoz-otel-collector:v0.144.972aa1e4c1ec5
github.com/docker/docker@v28.5.2+incompatible
no fix listed
1
sikalabs/slu:v0.72.07bd267f30247
github.com/docker/docker@v24.0.7+incompatible
no fix listed
1
simpleidserver/faasprometheus:0.0.425e378d57d78
github.com/docker/docker@v20.10.8+incompatible
no fix listed
1
sirrend/helmup-engine:0.1.13699e79e3d4e2
github.com/docker/docker@v25.0.5+incompatible
no fix listed
1
someblackmagic/k8s-testing-multitool:v0.1.06eca64b6b440
github.com/docker/docker@v20.10.12+incompatible
no fix listed
1
sstarcher/helm-exporter:0.5.011769d01ba35
github.com/moby/moby@v0.7.3-0.20190826074503-38ab9da00309
no fix listed
1
streamnative/pulsar_vault_init:v1.0.731533fa9fab7
github.com/docker/docker@v20.10.10+incompatible
no fix listed
1
thanosio/thanos:v0.15.0b12d5c31bf5a
github.com/docker/docker@v17.12.0-ce-rc1.0.20200706150819-a40b877fbb9e+incompatible
no fix listed
1
traefik/traefikee:v2.12.10acc7fcca5f1c
github.com/docker/docker@v28.5.2+incompatible
no fix listed
1
veecode/devportalc443520aebf7
github.com/docker/docker@v28.5.1+incompatible
no fix listed
1
veecode/devportal-admin-ui:0.4.30c69fd286b489
github.com/docker/docker@v25.0.6+incompatible
no fix listed
1
wallarm/aih-scanner:2.7.11f1cb26db1f5b
github.com/docker/docker@v28.3.3+incompatible
no fix listed
1
wallarm/node-native-processing:0.23.07db2da8fce0b
github.com/docker/docker@v28.5.2+incompatible
no fix listed
1
gcr.io/cadvisor/cadvisor:v0.40.0135327c978de
github.com/docker/docker@v20.10.7+incompatible
no fix listed
1
gcr.io/cadvisor/cadvisor:v0.47.2e6c562b5e983
github.com/docker/docker@v20.10.21+incompatible
no fix listed
1
gcr.io/cadvisor/cadvisor:v0.52.1f40e65878e25
github.com/docker/docker@v26.1.4+incompatible
no fix listed
1
gcr.io/datadoghq/cluster-agent:7.61.06efe04ba4e06
github.com/docker/docker@v27.3.1+incompatible
no fix listed
1

syft 1.42.1 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.