StackRadar

CVE-2026-42306

High

Advisory

Published 18 May 2026In the index since 5 Sept 2026
Severity
High
worst across findings
CVSS
7.2
base score, highest
EPSS
0.001
1st percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
579
of 17,781 indexed, latest versions
Container images
572
deployed by those charts
Fix available
1 of 3
affected packages

Docker: Race condition in docker cp allows bind mount redirection to host path

Carried by container images the latest versions of 579 of 17,781 indexed charts deploy, on 572 images.

Affected packageAffected versionsFixed inImages
github.com/docker/dockergolangv0.0.0-20180620051407-e2593239d949, v0.7.3-0.20190327010347-be7ac8be2ae0, v1.4.2-0.20190924003213-a8608b5b67c7, v1.4.2-0.20191121165722-d1d5f6476656+84 moreno fix listed547
github.com/moby/mobygolangv0.7.3-0.20190826074503-38ab9da00309, v1.4.2-0.20170731201646-1009e6a40b29, v1.13.1, v17.12.0-ce-rc1.0.20200618181300-9dc6525e6118+incompatible+4 moreno fix listed30
docker.iodeb20.10.24+dfsg1-1+deb12u1+b6, 26.1.5+dfsg1-9+b1326.1.5+dfsg1-9+deb13u12
OSV records
DEBIAN-CVE-2026-42306GHSA-rg2x-37c3-w2rh
Also known as
GO-2026-5617

Charts affected

579 by stars
ChartLatestAffected imagesRadar Score
linkerd-preview-vizlinkerd-buoyantVerified publisher25.4.34 of 5See more

linkerd-preview-viz linkerd-buoyant 25.4.3

4 of the 5 container images this version deploys carry CVE-2026-42306.

Container imageDigestPackageFixed in
ghcr.io/buoyantio/metrics-api:preview-25.4.32cef2a3f97da
github.com/docker/docker@v26.1.5+incompatible
no fix listed
ghcr.io/buoyantio/prometheus:v2.55.12659f4c2ebb7
github.com/docker/docker@v27.2.0+incompatible
no fix listed
ghcr.io/buoyantio/tap:preview-25.4.3e02a8bd9e2c3
github.com/docker/docker@v26.1.5+incompatible
no fix listed
ghcr.io/buoyantio/web:preview-25.4.33ee1b62aa111
github.com/docker/docker@v26.1.5+incompatible
no fix listed

Open the chart page →

3,420
linkerd-dashboardlinkerd-dashboardOfficial0.11.11 of 2See more

linkerd-dashboard linkerd-dashboard 0.11.1

1 of the 2 container images this version deploys carry CVE-2026-42306.

Container imageDigestPackageFixed in
ghcr.io/buoyantio/prometheus:v3.3.1e2b8aa62b648
github.com/docker/docker@v28.0.1+incompatible
no fix listed

Open the chart page →

1,037
ocatiecataloguslocatiecatalogus1.0.01 of 3See more

ocatiecatalogus locatiecatalogus 1.0.0

1 of the 3 container images this version deploys carry CVE-2026-42306.

Container imageDigestPackageFixed in
ghcr.io/conductionnl/ocatiecatalogus-php:latestc22764cbfa97
github.com/docker/docker@v1.4.2-0.20200203170920-46ec8731fbce
no fix listed

Open the chart page →

7,510
devpod-proloftVerified publisher0.0.0-ci.4-do-not-use1 of 1See more

devpod-pro loft 0.0.0-ci.4-do-not-use

1 of the 1 container images this version deploys carry CVE-2026-42306.

Container imageDigestPackageFixed in
ghcr.io/loft-sh/devpod-pro:0.0.0-ci.4-do-not-use5dfa86b6451f
github.com/docker/docker@v24.0.7+incompatible
no fix listed

Open the chart page →

3,225
devspace-cloudloftVerified publisher0.3.31 of 8See more

devspace-cloud loft 0.3.3

1 of the 8 container images this version deploys carry CVE-2026-42306.

Container imageDigestPackageFixed in
devspacecloud/manager:0.3.349c397413f7b
github.com/docker/docker@v1.4.2-0.20200203170920-46ec8731fbce
no fix listed

Open the chart page →

9,880
kioskloftVerified publisher0.2.111 of 1See more

kiosk loft 0.2.11

1 of the 1 container images this version deploys carry CVE-2026-42306.

Container imageDigestPackageFixed in
kiosksh/kiosk:0.2.11501725ba2025
github.com/moby/moby@v17.12.0-ce-rc1.0.20200618181300-9dc6525e6118+incompatible
no fix listed

Open the chart page →

3,086
loft-agentloftVerified publisher3.2.41 of 1See more

loft-agent loft 3.2.4

1 of the 1 container images this version deploys carry CVE-2026-42306.

Container imageDigestPackageFixed in
ghcr.io/loft-sh/agent:3.2.45c109914ff73
github.com/docker/docker@v20.10.21+incompatible
no fix listed

Open the chart page →

2,444
vcluster-control-planeloftVerified publisher0.0.0-ci.4-do-not-use1 of 1See more

vcluster-control-plane loft 0.0.0-ci.4-do-not-use

1 of the 1 container images this version deploys carry CVE-2026-42306.

Container imageDigestPackageFixed in
ghcr.io/loft-sh/vcluster-control-plane:0.0.0-ci.4-do-not-use45e744fc623f
github.com/docker/docker@v24.0.7+incompatible
no fix listed

Open the chart page →

3,225
vcluster-proloftVerified publisher0.0.0-ci-run.102 of 2See more

vcluster-pro loft 0.0.0-ci-run.10

2 of the 2 container images this version deploys carry CVE-2026-42306.

Container imageDigestPackageFixed in
rancher/k3s:v1.26.0-k3s19380f5dbae9a
github.com/docker/docker@v20.10.12+incompatible
no fix listed
ghcr.io/loft-sh/vcluster-pro:0.0.0-ci-run.10ab2e1fa19dd4
github.com/docker/docker@v20.10.21+incompatible
no fix listed

Open the chart page →

5,085
vcluster-pro-eksloftVerified publisher0.0.0-ci-run.101 of 4See more

vcluster-pro-eks loft 0.0.0-ci-run.10

1 of the 4 container images this version deploys carry CVE-2026-42306.

Container imageDigestPackageFixed in
ghcr.io/loft-sh/vcluster-pro:0.0.0-ci-run.10ab2e1fa19dd4
github.com/docker/docker@v20.10.21+incompatible
no fix listed

Open the chart page →

5,936
vcluster-pro-k0sloftVerified publisher0.0.0-ci-run.102 of 2See more

vcluster-pro-k0s loft 0.0.0-ci-run.10

2 of the 2 container images this version deploys carry CVE-2026-42306.

Container imageDigestPackageFixed in
k0sproject/k0s:v1.26.0-k0s.0f04635825d51
github.com/docker/docker@v20.10.17+incompatible
no fix listed
ghcr.io/loft-sh/vcluster-pro:0.0.0-ci-run.10ab2e1fa19dd4
github.com/docker/docker@v20.10.21+incompatible
no fix listed

Open the chart page →

5,768
vcluster-pro-k8sloftVerified publisher0.0.0-ci-run.101 of 4See more

vcluster-pro-k8s loft 0.0.0-ci-run.10

1 of the 4 container images this version deploys carry CVE-2026-42306.

Container imageDigestPackageFixed in
ghcr.io/loft-sh/vcluster-pro:0.0.0-ci-run.10ab2e1fa19dd4
github.com/docker/docker@v20.10.21+incompatible
no fix listed

Open the chart page →

8,202
vnode-runtimeloftVerified publisher0.3.31 of 1See more

vnode-runtime loft 0.3.3

1 of the 1 container images this version deploys carry CVE-2026-42306.

Container imageDigestPackageFixed in
ghcr.io/loft-sh/vnode-runtime:0.3.3b065ec5a5239
github.com/docker/docker@v27.1.1+incompatible
no fix listed

Open the chart page →

2,467
loggingcomponentloggingcomponent1.0.01 of 3See more

loggingcomponent loggingcomponent 1.0.0

1 of the 3 container images this version deploys carry CVE-2026-42306.

Container imageDigestPackageFixed in
ghcr.io/conductionnl/loggingcomponent-php:latest834b8e1af290
github.com/docker/docker@v1.4.2-0.20200203170920-46ec8731fbce
no fix listed

Open the chart page →

7,492
nightingalelogic3579Verified publisher0.3.12 of 6See more

nightingale logic3579 0.3.1

2 of the 6 container images this version deploys carry CVE-2026-42306.

Container imageDigestPackageFixed in
flashcatcloud/categraf:latest42e6ab16472e
github.com/docker/docker@v28.5.2+incompatible
no fix listed
quay.io/prometheus/prometheus:v2.54.1f6639335d34a
github.com/docker/docker@v27.0.3+incompatible
no fix listed

Open the chart page →

8,938
logicservicelogicservice1.0.01 of 4See more

logicservice logicservice 1.0.0

1 of the 4 container images this version deploys carry CVE-2026-42306.

Container imageDigestPackageFixed in
ghcr.io/conductionnl/logicservice-php:latest72aae2080595
github.com/docker/docker@v1.4.2-0.20200203170920-46ec8731fbce
no fix listed

Open the chart page →

7,499
apica-ascentlogiqai2.0.41 of 19See more

apica-ascent logiqai 2.0.4

1 of the 19 container images this version deploys carry CVE-2026-42306.

Container imageDigestPackageFixed in
logiqai/flash:v3.10.265b996bc7bdc
github.com/docker/docker@v24.0.7+incompatible
no fix listed

Open the chart page →

23,613
sasquatchlsst-sqre0.1.131 of 6See more

sasquatch lsst-sqre 0.1.13

1 of the 6 container images this version deploys carry CVE-2026-42306.

Container imageDigestPackageFixed in
library/kapacitor:1.6.37232f6388a4d
github.com/docker/docker@v20.10.5+incompatible
no fix listed

Open the chart page →

9,332
telegraf-dslsst-sqre1.0.231 of 1See more

telegraf-ds lsst-sqre 1.0.23

1 of the 1 container images this version deploys carry CVE-2026-42306.

Container imageDigestPackageFixed in
library/telegraf:1.19-alpineaddb86c0c520
github.com/docker/docker@v20.10.7+incompatible
no fix listed

Open the chart page →

3,764
m9sweeperm9sweeperVerified publisher1.6.01 of 6See more

m9sweeper m9sweeper 1.6.0

1 of the 6 container images this version deploys carry CVE-2026-42306.

Container imageDigestPackageFixed in
ghcr.io/m9sweeper/trawler:1.6.0df917c5a7e54
github.com/docker/docker@v24.0.7+incompatible
no fix listed

Open the chart page →

9,774
magistralamagistrala-devopsVerified publisher0.16.21 of 42See more

magistrala magistrala-devops 0.16.2

1 of the 42 container images this version deploys carry CVE-2026-42306.

Container imageDigestPackageFixed in
quay.io/prometheus/prometheus:v3.1.06559acbd5d77
github.com/docker/docker@v27.4.1+incompatible
no fix listed

Open the chart page →

24,400
mattermost-calls-offloadermattermostVerified publisher0.2.11 of 1See more

mattermost-calls-offloader mattermost 0.2.1

1 of the 1 container images this version deploys carry CVE-2026-42306.

Container imageDigestPackageFixed in
mattermost/calls-offloader:v0.9.0b440b282599e
github.com/docker/docker@v20.10.9+incompatible
no fix listed

Open the chart page →

1,414
mayastormayastorVerified publisher2.12.11 of 31See more

mayastor mayastor 2.12.1

1 of the 31 container images this version deploys carry CVE-2026-42306.

Container imageDigestPackageFixed in
grafana/alloy:v1.8.17790f6f7fbd8
github.com/docker/docker@v27.5.1+incompatible
no fix listed

Open the chart page →

21,064
mdai-hubmdai-hubVerified publisher0.10.11 of 14See more

mdai-hub mdai-hub 0.10.1

1 of the 14 container images this version deploys carry CVE-2026-42306.

Container imageDigestPackageFixed in
ghcr.io/open-telemetry/opentelemetry-operator/opentelemetry-operator:0.148.0590e50477b76
github.com/docker/docker@v28.5.2+incompatible
no fix listed

Open the chart page →

4,742
medewerkercatalogusmedewerkercatalogus1.0.01 of 3See more

medewerkercatalogus medewerkercatalogus 1.0.0

1 of the 3 container images this version deploys carry CVE-2026-42306.

Container imageDigestPackageFixed in
ghcr.io/conductionnl/medewerkercatalogus-php:latest1ea5412bed26
github.com/docker/docker@v1.4.2-0.20200203170920-46ec8731fbce
no fix listed

Open the chart page →

7,327
memo-componentmemo-component1.0.01 of 3See more

memo-component memo-component 1.0.0

1 of the 3 container images this version deploys carry CVE-2026-42306.

Container imageDigestPackageFixed in
ghcr.io/conductionnl/memo-component-php:latestef77f4c089a1
github.com/docker/docker@v1.4.2-0.20200203170920-46ec8731fbce
no fix listed

Open the chart page →

7,510
kube-oidc-proxymesosphere0.3.41 of 1See more

kube-oidc-proxy mesosphere 0.3.4

1 of the 1 container images this version deploys carry CVE-2026-42306.

Container imageDigestPackageFixed in
quay.io/jetstack/kube-oidc-proxy:v0.3.0e045b26eb6df
github.com/docker/docker@v0.7.3-0.20190327010347-be7ac8be2ae0
no fix listed

Open the chart page →

3,144
prometheus-operatormesosphere12.11.131 of 8See more

prometheus-operator mesosphere 12.11.13

1 of the 8 container images this version deploys carry CVE-2026-42306.

Container imageDigestPackageFixed in
grafana/grafana:12.3.39e1e77ade304
github.com/moby/moby@v27.5.1+incompatible
no fix listed

Open the chart page →

11,689
traefik2mesosphere9.18.01 of 1See more

traefik2 mesosphere 9.18.0

1 of the 1 container images this version deploys carry CVE-2026-42306.

Container imageDigestPackageFixed in
library/traefik:2.4.8eda951fd29a8
github.com/docker/docker@v17.12.0-ce-rc1.0.20200204220554-5f6d6f3f2203+incompatible
no fix listed

Open the chart page →

3,341
cert-manager-setupmesosphere-stable0.2.101 of 5See more

cert-manager-setup mesosphere-stable 0.2.10

1 of the 5 container images this version deploys carry CVE-2026-42306.

Container imageDigestPackageFixed in
quay.io/jetstack/cert-manager-ctl:v1.11.074611761f052
github.com/docker/docker@v20.10.17+incompatible
no fix listed

Open the chart page →

7,179
istio-helm-istiodmesosphere-stable1.23.61 of 2See more

istio-helm-istiod mesosphere-stable 1.23.6

1 of the 2 container images this version deploys carry CVE-2026-42306.

Container imageDigestPackageFixed in
istio/pilot:1.23.69c3d6a218181
github.com/docker/docker@v26.1.5+incompatible
no fix listed

Open the chart page →

4,603
knativemesosphere-stable1.10.81 of 7See more

knative mesosphere-stable 1.10.8

1 of the 7 container images this version deploys carry CVE-2026-42306.

Container imageDigestPackageFixed in
gcr.io/knative-releases/knative.dev/serving/cmd/controller:v1.10.298a2cc7fd62e
github.com/docker/docker@v20.10.20+incompatible
no fix listed

Open the chart page →

7,479
kommandermesosphere-stable0.39.23 of 29See more

kommander mesosphere-stable 0.39.2

3 of the 29 container images this version deploys carry CVE-2026-42306.

Container imageDigestPackageFixed in
mesosphere/kommander-federation-utility-apiserver:v0.21.2f9b769c65e24
github.com/docker/docker@v20.10.2+incompatible
no fix listed
mesosphere/kubeaddons-addon-initializer:v0.2.8c10011f866f2
github.com/docker/docker@v1.13.1
github.com/moby/moby@v1.13.1
no fix listed
no fix listed
thanosio/thanos:v0.15.0b12d5c31bf5a
github.com/docker/docker@v17.12.0-ce-rc1.0.20200706150819-a40b877fbb9e+incompatible
no fix listed

Open the chart page →

68,284
opsportalmesosphere-stable0.9.51 of 3See more

opsportal mesosphere-stable 0.9.5

1 of the 3 container images this version deploys carry CVE-2026-42306.

Container imageDigestPackageFixed in
mesosphere/kubeaddons-addon-initializer:v0.2.09f863160127b
github.com/docker/docker@v1.13.1
github.com/moby/moby@v1.13.1
no fix listed
no fix listed

Open the chart page →

7,027
istio-operatormetakube1.12.01 of 1See more

istio-operator metakube 1.12.0

1 of the 1 container images this version deploys carry CVE-2026-42306.

Container imageDigestPackageFixed in
istio/operator:1.12.06cfce8a071b9
github.com/moby/moby@v17.12.0-ce-rc1.0.20200618181300-9dc6525e6118+incompatible
no fix listed

Open the chart page →

8,902
wg-access-servermglants0.4.71 of 1See more

wg-access-server mglants 0.4.7

1 of the 1 container images this version deploys carry CVE-2026-42306.

Container imageDigestPackageFixed in
place1/wg-access-server:v0.4.62b2f3ea80ed6
github.com/docker/docker@v1.13.1
no fix listed

Open the chart page →

2,745
kube-agent-chartmiddleware-labsVerified publisher0.1.21 of 1See more

kube-agent-chart middleware-labs 0.1.2

1 of the 1 container images this version deploys carry CVE-2026-42306.

Container imageDigestPackageFixed in
ghcr.io/middleware-labs/agent-kube-go:dev17369c4cd390
github.com/docker/docker@v20.10.22+incompatible
no fix listed

Open the chart page →

1,799
mw-autoinstrumentationmiddleware-labsVerified publisher1.2.61 of 6See more

mw-autoinstrumentation middleware-labs 1.2.6

1 of the 6 container images this version deploys carry CVE-2026-42306.

Container imageDigestPackageFixed in
ghcr.io/open-telemetry/opentelemetry-operator/opentelemetry-operator:0.132.05e331c925091
github.com/docker/docker@v28.0.0+incompatible
no fix listed

Open the chart page →

3,713
mw-kube-agentmiddleware-labsVerified publisher0.1.21 of 1See more

mw-kube-agent middleware-labs 0.1.2

1 of the 1 container images this version deploys carry CVE-2026-42306.

Container imageDigestPackageFixed in
ghcr.io/middleware-labs/mw-kube-agent:master056f0953763d
github.com/docker/docker@v24.0.5+incompatible
no fix listed

Open the chart page →

1,594
sshportalmidokura-communityVerified publisher0.1.41 of 2See more

sshportal midokura-community 0.1.4

1 of the 2 container images this version deploys carry CVE-2026-42306.

Container imageDigestPackageFixed in
moul/sshportal:v1.19.3332b603727c3
github.com/docker/docker@v20.10.12+incompatible
no fix listed

Open the chart page →

2,338
minio-operatorminio-operator4.3.71 of 2See more

minio-operator minio-operator 4.3.7

1 of the 2 container images this version deploys carry CVE-2026-42306.

Container imageDigestPackageFixed in
minio/operator:v4.3.754393e03f3b2
github.com/docker/docker@v1.4.2-0.20190924003213-a8608b5b67c7
no fix listed

Open the chart page →

6,085
aws-api-gateway-operatormintel0.1.21 of 11See more

aws-api-gateway-operator mintel 0.1.2

1 of the 11 container images this version deploys carry CVE-2026-42306.

Container imageDigestPackageFixed in
library/docker:20.10-dindaf96c680a7e1
github.com/docker/docker@v23.0.0-rc.1+incompatible
no fix listed

Open the chart page →

10,603
standard-application-stackmintel11.4.01 of 12See more

standard-application-stack mintel 11.4.0

1 of the 12 container images this version deploys carry CVE-2026-42306.

Container imageDigestPackageFixed in
library/docker:20.10-dindaf96c680a7e1
github.com/docker/docker@v23.0.0-rc.1+incompatible
no fix listed

Open the chart page →

10,603
cognativemyaVerified publisher0.2403.31 of 3See more

cognative mya 0.2403.3

1 of the 3 container images this version deploys carry CVE-2026-42306.

Container imageDigestPackageFixed in
otel/opentelemetry-collector-contrib:0.96.07ef2a2ff46b9
github.com/docker/docker@v24.0.9+incompatible
no fix listed

Open the chart page →

7,309
agent-control-cdnewrelic1.0.02 of 3See more

agent-control-cd newrelic 1.0.0

2 of the 3 container images this version deploys carry CVE-2026-42306.

Container imageDigestPackageFixed in
ghcr.io/fluxcd/helm-controller:v1.2.062eaa9c9a929
github.com/docker/docker@v27.1.2+incompatible
no fix listed
ghcr.io/fluxcd/source-controller:v1.5.000cd9316a379
github.com/docker/docker@v27.5.0+incompatible
no fix listed

Open the chart page →

5,034
minio-operatornineinfra-charts5.0.91 of 1See more

minio-operator nineinfra-charts 5.0.9

1 of the 1 container images this version deploys carry CVE-2026-42306.

Container imageDigestPackageFixed in
minio/operator:v5.0.9170b154d2c61
github.com/docker/docker@v20.10.24+incompatible
no fix listed

Open the chart page →

3,419
node-debug-dashboardnode-debug-dashboardVerified publisher0.3.21 of 1See more

node-debug-dashboard node-debug-dashboard 0.3.2

1 of the 1 container images this version deploys carry CVE-2026-42306.

Container imageDigestPackageFixed in
ghcr.io/samr037/node-debug-dashboard:0.3.0c79b2e64a211
github.com/docker/docker@v27.3.1+incompatible
no fix listed

Open the chart page →

6,854
prometheusnodepulse25.0.01 of 6See more

prometheus nodepulse 25.0.0

1 of the 6 container images this version deploys carry CVE-2026-42306.

Container imageDigestPackageFixed in
quay.io/prometheus/prometheus:v2.47.0c5dd35038287
github.com/docker/docker@v24.0.4+incompatible
no fix listed

Open the chart page →

7,740
kafka-helm-chartnotesprojectchart0.1.01 of 1See more

kafka-helm-chart notesprojectchart 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-42306.

Container imageDigestPackageFixed in
wurstmeister/kafka:latest2d4bbf9cc83d
github.com/docker/docker@v20.10.3-0.20220121014307-40bb9831756f+incompatible
no fix listed

Open the chart page →

4,547
notification-componentnotification-component1.0.01 of 4See more

notification-component notification-component 1.0.0

1 of the 4 container images this version deploys carry CVE-2026-42306.

Container imageDigestPackageFixed in
ghcr.io/conductionnl/notification-component-php:latestcd9656e6bc2c
github.com/docker/docker@v1.4.2-0.20200203170920-46ec8731fbce
no fix listed

Open the chart page →

7,527

Container images carrying it

572 by charts deploying them

A fixed version is listed for 1 of the 3 affected packages.

Container imageDigestPackageFixed inUsed by
wurstmeister/kafka:latest2d4bbf9cc83d
github.com/docker/docker@v20.10.3-0.20220121014307-40bb9831756f+incompatible
no fix listed
7
quay.io/openshift/origin-cli:latest605eaa5d469c
github.com/docker/docker@v28.5.2+incompatible
no fix listed
7
quay.io/devtron/kubectl:latest2ad610626658
github.com/docker/docker@v20.10.17+incompatible
no fix listed
6
keelhq/keel:latest73714afb4443
github.com/docker/docker@v27.3.1+incompatible
no fix listed
5
hyperledger/fabric-peer:2.46ff36af21eb1
github.com/docker/docker@v20.10.0-beta1.0.20201113105859-b6bfff2a628f+incompatible
no fix listed
4
hyperledger/fabric-tools:2.4b1194f509085
github.com/docker/docker@v20.10.0-beta1.0.20201113105859-b6bfff2a628f+incompatible
no fix listed
4
rancher/rancher:v2.15.15f6c4dc52a05
github.com/docker/docker@v25.0.15-0.20260325154711-d2dbc0547253+incompatible
no fix listed
4
ghcr.io/loft-sh/vcluster-pro:0.0.0-ci-run.10ab2e1fa19dd4
github.com/docker/docker@v20.10.21+incompatible
no fix listed
4
quay.io/jetstack/cert-manager-ctl:v1.13.1c10bde7ff9ad
github.com/docker/docker@v23.0.3+incompatible
no fix listed
4
argoproj/argocd:v1.8.1830e86cacefd
github.com/docker/docker@v0.7.3-0.20190327010347-be7ac8be2ae0
no fix listed
3
envoyproxy/gateway:v1.7.5156b7d32c73b
github.com/docker/docker@v28.5.2+incompatible
no fix listed
3
ethpandaops/tracoor:latestd8514b9f4c59
github.com/docker/docker@v27.1.1+incompatible
no fix listed
3
grafana/promtail:2.4.2626900031c4e
github.com/docker/docker@v20.10.8+incompatible
no fix listed
3
library/docker:20.10-dind:20-dindaf96c680a7e1
github.com/docker/docker@v23.0.0-rc.1+incompatible
no fix listed
3
prom/prometheus:v3.0.1565ee8650122
github.com/docker/docker@v27.3.1+incompatible
no fix listed
3
quay.io/argoproj/workflow-controller:v3.4.7f0c6fba81a24
github.com/docker/docker@v20.10.24+incompatible
no fix listed
3
quay.io/devtron/ai-agent:0.0.16545dac92173
github.com/docker/docker@v27.1.1+incompatible
no fix listed
3
quay.io/devtron/argocd-cert-refresh:v102b6db27eaf3d
github.com/docker/docker@v20.10.17+incompatible
no fix listed
3
quay.io/devtron/clair:4.3.675fb847ac045
github.com/docker/docker@v20.10.7+incompatible
no fix listed
3
quay.io/devtron/image-scanner:b278f42b-334-1111988c64b1b6ec8
github.com/docker/docker@v20.10.7+incompatible
no fix listed
3
quay.io/devtron/image-scanner:94237c18-109-3942098580969b333
github.com/docker/docker@v24.0.5+incompatible
no fix listed
3
quay.io/prometheus/prometheus:v2.41.01a3e9a878e50
github.com/docker/docker@v20.10.21+incompatible
no fix listed
3
quay.io/prometheus/prometheus:v2.55.0378f4e037035
github.com/docker/docker@v27.2.0+incompatible
no fix listed
3
quay.io/prometheus/prometheus:v2.26.038d40a760569
github.com/docker/docker@v20.10.5+incompatible
no fix listed
3
quay.io/prometheus/prometheus:v3.10.07571a304e67f
github.com/docker/docker@v28.5.2+incompatible
no fix listed
3
quay.io/prometheus/prometheus:v2.31.1a8779cfe553e
github.com/docker/docker@v20.10.9+incompatible
no fix listed
3
quay.io/prometheus/prometheus:v2.43.0f5c29683a301
github.com/docker/docker@v23.0.1+incompatible
no fix listed
3
registry.gitlab.com/gitlab-org/gitlab-runner:alpine-v19.3.1af0325804248
github.com/docker/docker@v28.5.2+incompatible
no fix listed
3
dmilhdef/missing-container-metrics:v0.21.0fada1a6e7638
github.com/docker/docker@v1.13.1
no fix listed
2
dtzar/helm-kubectl:3.14.455429449408e
github.com/docker/docker@v24.0.9+incompatible
no fix listed
2
grafana/alloy:v1.8.17790f6f7fbd8
github.com/docker/docker@v27.5.1+incompatible
no fix listed
2
grafana/alloy:v1.12.2f94b1c82957a
github.com/docker/docker@v28.5.1+incompatible
no fix listed
2
grafana/grafana:12.3.12175aaa91c96
github.com/moby/moby@v27.5.1+incompatible
no fix listed
2
grafana/grafana:12.3.39e1e77ade304
github.com/moby/moby@v27.5.1+incompatible
no fix listed
2
grafana/grafana:12.4.1e932bd6ed0e0
github.com/moby/moby@v28.0.1+incompatible
no fix listed
2
hashicorp/vault:1.8.34db614d40d0e
github.com/docker/docker@v17.12.0-ce-rc1.0.20200309214505-aa6a9891b09c+incompatible
no fix listed
2
hashicorp/vault:1.15.26b4e5dadf082
github.com/docker/docker@v24.0.5+incompatible
no fix listed
2
hashicorp/vault:1.12.18de4d5f31b38
github.com/docker/docker@v20.10.18+incompatible
no fix listed
2
ilum/api:6.7.3624fd09528c8
github.com/docker/docker@v25.0.6+incompatible
no fix listed
2
inaccel/daemon:latest093e1ea90ab8
github.com/docker/docker@v25.0.2+incompatible
no fix listed
2
istio/proxyv2:1.18.0757d28c24100
github.com/docker/docker@v23.0.3+incompatible
no fix listed
2
k0sproject/k0s:v1.26.0-k0s.0f04635825d51
github.com/docker/docker@v20.10.17+incompatible
no fix listed
2
library/arangodb:3.11.81e75d74954a4
github.com/docker/docker@v24.0.7+incompatible
no fix listed
2
library/docker:dind5efed980cba3
github.com/docker/docker@v28.5.2+incompatible
no fix listed
2
library/traefik:v2.57d5a6ae66572
github.com/docker/docker@v20.10.7+incompatible
no fix listed
2
lightninglabs/lnd:v0.18.3-betaf86bbec4dfb3
github.com/docker/docker@v24.0.7+incompatible
no fix listed
2
meshery/meshery:stable-latest9b68e81d392e
github.com/docker/docker@v28.5.2+incompatible
no fix listed
2
minio/operator:v4.3.754393e03f3b2
github.com/docker/docker@v1.4.2-0.20190924003213-a8608b5b67c7
no fix listed
2
oryd/kratos:v1.0.0d06fc5845f63
github.com/docker/docker@v20.10.24+incompatible
no fix listed
2
oryd/kratos:v1.3.1fe2428f103a6
github.com/docker/docker@v27.1.1+incompatible
no fix listed
2

syft 1.42.1 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.