StackRadar

CVE-2026-4437

High

Advisory

Published 20 Mar 2026In the index since 5 Sept 2026
Severity
High
worst across findings
CVSS
7.5
base score, highest
EPSS
0.003
25th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
988
of 17,787 indexed, latest versions
Container images
1,155
deployed by those charts
Fix available
3 of 4
affected packages

CVE-2026-4437 affecting package glibc for versions less than 2.38-19

Carried by container images the latest versions of 988 of 17,787 indexed charts deploy, on 1,155 images.

Affected packageAffected versionsFixed inImages
glibcdeb2.36-9, 2.36-9+deb12u1, 2.36-9+deb12u3, 2.36-9+deb12u4+19 more2.36-9+deb12u14, 2.39-0ubuntu8.8, 2.41-12+deb13u2+e2, 2.41-12+deb13u31,125
glibcapk2.37-r7, 2.38-r6, 2.39-r7, 2.40-r1+7 more2.43-r420
eglibcdeb2.19-0ubuntu6.3, 2.19-0ubuntu6.6, 2.19-0ubuntu6.13, 2.19-0ubuntu6.14+1 moreno fix listed7
glibcrpm2.38-16.azl3, 2.38-18.azl32.38-193
OSV records
CGA-28jr-9938-gm2mDEBIAN-CVE-2026-4437UBUNTU-CVE-2026-4437AZL-80279ECHO-3c7d-5484-9e80
Also known as
CGA-2vmx-p942-gvjv, CGA-3ppc-8crm-xcwj, CGA-447g-pcpw-fghr, CGA-4rv8-gm3c-8hh4, CGA-7wrv-wrfh-p8c9, CGA-9xfq-4v63-2prp, CGA-f493-mp32-m44p, CGA-pm9m-w6f6-3vcx, CGA-qfw8-frvf-4g9v, CGA-qgv8-8g95-5gfq, CGA-qjc4-84cm-3mxj, CGA-qvv7-4qrx-v7f8, CGA-rvmr-63g4-4mrj, CGA-wq5x-prm6-fhhx, CGA-xq4q-286c-rcpc, USN-8611-1

Charts affected

988 by stars
ChartLatestAffected imagesRadar Score
passbolt-hachristianhuthVerified publisher6.0.12 of 4See more

passbolt-ha christianhuth 6.0.1

2 of the 4 container images this version deploys carry CVE-2026-4437.

Container imageDigestPackageFixed in
bitnamilegacy/mysql:9.4.0-debian-12-r1ec13e229247a
glibc@2.36-9+deb12u10
2.36-9+deb12u14
bitnamilegacy/os-shell:12-debian-12-r50e328cff6e450
glibc@2.36-9+deb12u10
2.36-9+deb12u14

Open the chart page →

10,817
squestchristianhuthVerified publisher6.6.73 of 4See more

squest christianhuth 6.6.7

3 of the 4 container images this version deploys carry CVE-2026-4437.

Container imageDigestPackageFixed in
bitnamilegacy/mariadb:12.0.2-debian-12-r0888cdaae3cb9
glibc@2.36-9+deb12u10
2.36-9+deb12u14
bitnamilegacy/rabbitmq:4.1.3-debian-12-r19e635efba431
glibc@2.36-9+deb12u10
2.36-9+deb12u14
bitnamilegacy/redis:8.2.1-debian-12-r025bf63f3caf7
glibc@2.36-9+deb12u10
2.36-9+deb12u14

Open the chart page →

9,971
typo3christianhuthVerified publisher7.7.02 of 2See more

typo3 christianhuth 7.7.0

2 of the 2 container images this version deploys carry CVE-2026-4437.

Container imageDigestPackageFixed in
bitnamilegacy/mysql:9.4.0-debian-12-r1ec13e229247a
glibc@2.36-9+deb12u10
2.36-9+deb12u14
martinhelmich/typo3:12.4c83a4f3fd7ae
glibc@2.36-9+deb12u13
2.36-9+deb12u14

Open the chart page →

8,466
chromadbchromadb-helmVerified publisher0.2.21 of 1See more

chromadb chromadb-helm 0.2.2

1 of the 1 container images this version deploys carry CVE-2026-4437.

Container imageDigestPackageFixed in
ghcr.io/chroma-core/chroma:1.5.3cfd193653bd6
glibc@2.41-12+deb13u1
2.41-12+deb13u3

Open the chart page →

1,432
nethermindchronicleVerified publisher0.0.131 of 1See more

nethermind chronicle 0.0.13

1 of the 1 container images this version deploys carry CVE-2026-4437.

Container imageDigestPackageFixed in
nethermind/nethermind:1.31.9aeca3b55bda5
glibc@2.39-0ubuntu8.4
2.39-0ubuntu8.8

Open the chart page →

2,031
spectrechronicleVerified publisher0.3.81 of 1See more

spectre chronicle 0.3.8

1 of the 1 container images this version deploys carry CVE-2026-4437.

Container imageDigestPackageFixed in
ghcr.io/chronicleprotocol/spectre:0.68.34e872bc016e8
glibc@2.36-9+deb12u13
2.36-9+deb12u14

Open the chart page →

1,515
cloudflared-ingress-operatorcloudflared-ingress-operatorVerified publisher0.3.21 of 1See more

cloudflared-ingress-operator cloudflared-ingress-operator 0.3.2

1 of the 1 container images this version deploys carry CVE-2026-4437.

Container imageDigestPackageFixed in
ghcr.io/livepeer/cloudflared-ingress-operator:latestc179cdcaa050
glibc@2.41-12+deb13u1
2.41-12+deb13u3

Open the chart page →

1,724
cloudttycloudtty0.8.91 of 2See more

cloudtty cloudtty 0.8.9

1 of the 2 container images this version deploys carry CVE-2026-4437.

Container imageDigestPackageFixed in
ghcr.io/cloudtty/cloudshell-operator:v0.8.9e43ad91f0684
glibc@2.36-9+deb12u13
2.36-9+deb12u14

Open the chart page →

3,951
cluster-setupcluster-setup1.5.01 of 8See more

cluster-setup cluster-setup 1.5.0

1 of the 8 container images this version deploys carry CVE-2026-4437.

Container imageDigestPackageFixed in
quay.io/argoproj/argocd:v3.0.395b5cf7ba6fe
glibc@2.39-0ubuntu8.4
2.39-0ubuntu8.8

Open the chart page →

10,037
istio-allcode4devsVerified publisher1.2.02 of 6See more

istio-all code4devs 1.2.0

2 of the 6 container images this version deploys carry CVE-2026-4437.

Container imageDigestPackageFixed in
istio/install-cni:1.24.2-distrolessaef4825e110f
glibc@2.40-r3
2.43-r4
istio/ztunnel:1.24.2-distroless3e475eb88965
glibc@2.40-r3
2.43-r4

Open the chart page →

4,784
istio-control-planecode4devsVerified publisher1.0.02 of 3See more

istio-control-plane code4devs 1.0.0

2 of the 3 container images this version deploys carry CVE-2026-4437.

Container imageDigestPackageFixed in
istio/install-cni:1.24.2-distrolessaef4825e110f
glibc@2.40-r3
2.43-r4
istio/ztunnel:1.24.2-distroless3e475eb88965
glibc@2.40-r3
2.43-r4

Open the chart page →

2,360
commonground-gatewaycommonground-gateway1.5.41 of 7See more

commonground-gateway commonground-gateway 1.5.4

1 of the 7 container images this version deploys carry CVE-2026-4437.

Container imageDigestPackageFixed in
ghcr.io/conductionnl/gateway-ui:stag6a5594b7b32c
glibc@2.36-9
2.36-9+deb12u14

Open the chart page →

9,724
cosmotech-copilot-apicosmotech-apiVerified publisher0.1.11 of 1See more

cosmotech-copilot-api cosmotech-api 0.1.1

1 of the 1 container images this version deploys carry CVE-2026-4437.

Container imageDigestPackageFixed in
ghcr.io/cosmo-tech/cosmotech-copilot-api:latesta2be95de450c
glibc@2.41-12+deb13u1
2.41-12+deb13u3

Open the chart page →

11,205
oci-registrycronce0.4.51 of 1See more

oci-registry cronce 0.4.5

1 of the 1 container images this version deploys carry CVE-2026-4437.

Container imageDigestPackageFixed in
mcronce/oci-registry:v0.4.509519cd7bd2f
glibc@2.36-9+deb12u4
2.36-9+deb12u14

Open the chart page →

1,300
paperless-ngxcrystalnetVerified publisher0.2.221 of 3See more

paperless-ngx crystalnet 0.2.22

1 of the 3 container images this version deploys carry CVE-2026-4437.

Container imageDigestPackageFixed in
ghcr.io/paperless-ngx/paperless-ngx:2.13.10642357c5dbd
glibc@2.36-9+deb12u8
2.36-9+deb12u14

Open the chart page →

13,761
datacube-explorerdatacube-charts0.5.321 of 1See more

datacube-explorer datacube-charts 0.5.32

1 of the 1 container images this version deploys carry CVE-2026-4437.

Container imageDigestPackageFixed in
opendatacube/explorer:latest120457ffcd69
glibc@2.39-0ubuntu8.5
2.39-0ubuntu8.8

Open the chart page →

4,854
dbrepodbrepo1.13.315 of 25See more

dbrepo dbrepo 1.13.3

15 of the 25 container images this version deploys carry CVE-2026-4437.

Container imageDigestPackageFixed in
bitnamilegacy/grafana:11.4.0-debian-12-r0cb8ab5515676
glibc@2.36-9+deb12u9
2.36-9+deb12u14
bitnamilegacy/mariadb:11.4.5-debian-12-r128bc50a0961a7
glibc@2.36-9+deb12u10
2.36-9+deb12u14
bitnamilegacy/mariadb-galera:11.3.2-debian-12-r9aee9c668098f
glibc@2.36-9+deb12u7
2.36-9+deb12u14
bitnamilegacy/mysqld-exporter:0.15.1-debian-12-r2611a5f0b79e79
glibc@2.36-9+deb12u7
2.36-9+deb12u14
bitnamilegacy/nginx:1.28.0-debian-12-r0eaf9066e86f6
glibc@2.36-9+deb12u10
2.36-9+deb12u14
bitnamilegacy/openldap:2.6.8-debian-12-r16e412c178ef9
glibc@2.36-9+deb12u7
2.36-9+deb12u14
bitnamilegacy/opensearch:2.18.0-debian-12-r0d8440eb6b290
glibc@2.36-9+deb12u8
2.36-9+deb12u14
bitnamilegacy/os-shell:12-debian-12-r3217444b4b2c96
glibc@2.36-9+deb12u8
2.36-9+deb12u14
bitnamilegacy/postgres-exporter:0.15.0-debian-12-r44e7e1b3a90682
glibc@2.36-9+deb12u8
2.36-9+deb12u14
bitnamilegacy/postgresql:17.0.0-debian-12-r9d885ac277163
glibc@2.36-9+deb12u8
2.36-9+deb12u14
bitnamilegacy/postgresql:17.6.0-debian-12-r0de520acd66fc
glibc@2.36-9+deb12u10
2.36-9+deb12u14
bitnamilegacy/prometheus:2.54.1-debian-12-r408b1b7cb6a5b
glibc@2.36-9+deb12u8
2.36-9+deb12u14
bitnamilegacy/rabbitmq:3.13.7-debian-12-r2cd593809e359
glibc@2.36-9+deb12u7
2.36-9+deb12u14
bitnamilegacy/seaweedfs:3.87.0-debian-12-r10cb31d0fc356
glibc@2.36-9+deb12u10
2.36-9+deb12u14
bitnamilegacy/valkey:latest0384ca2eec63
glibc@2.36-9+deb12u10
2.36-9+deb12u14

Open the chart page →

52,635
mealiedeimosfr-charts1.0.151 of 1See more

mealie deimosfr-charts 1.0.15

1 of the 1 container images this version deploys carry CVE-2026-4437.

Container imageDigestPackageFixed in
ghcr.io/mealie-recipes/mealie:v3.24.00b08ac3a9f0a
glibc@2.41-12+deb13u2
2.41-12+deb13u3

Open the chart page →

4,028
kubedashdevopstalesOfficialVerified publisher4.0.02 of 8See more

kubedash devopstales 4.0.0

2 of the 8 container images this version deploys carry CVE-2026-4437.

Container imageDigestPackageFixed in
library/postgres:18.3a9abf4275f9e
glibc@2.41-12+deb13u2
2.41-12+deb13u3
library/redis:8.6.2009cc37796fb
glibc@2.41-12+deb13u2
2.41-12+deb13u3

Open the chart page →

9,205
dial-coredialOfficialVerified publisher6.0.01 of 2See more

dial-core dial 6.0.0

1 of the 2 container images this version deploys carry CVE-2026-4437.

Container imageDigestPackageFixed in
valkey/valkey:9.0.2930b41430fb7
glibc@2.41-12+deb13u1
2.41-12+deb13u3

Open the chart page →

1,521
directusdirectus-io2.1.02 of 3See more

directus directus-io 2.1.0

2 of the 3 container images this version deploys carry CVE-2026-4437.

Container imageDigestPackageFixed in
bitnamilegacy/mysql:9.4.0-debian-12-r1ec13e229247a
glibc@2.36-9+deb12u10
2.36-9+deb12u14
bitnamilegacy/redis:8.2.1-debian-12-r025bf63f3caf7
glibc@2.36-9+deb12u10
2.36-9+deb12u14

Open the chart page →

7,473
dominodominoVerified publisher0.1.112 of 3See more

domino domino 0.1.11

2 of the 3 container images this version deploys carry CVE-2026-4437.

Container imageDigestPackageFixed in
library/postgres:134689940c6838
glibc@2.41-12
2.41-12+deb13u3
ghcr.io/tauffer-consulting/domino-rest:latest8bf880fe8c73
glibc@2.36-9+deb12u4
2.36-9+deb12u14

Open the chart page →

8,823
dragonfly-stackdragonflyVerified publisher0.1.21 of 7See more

dragonfly-stack dragonfly 0.1.2

1 of the 7 container images this version deploys carry CVE-2026-4437.

Container imageDigestPackageFixed in
dragonflyoss/client:v0.1.82edf3e921f4e0
glibc@2.36-9+deb12u7
2.36-9+deb12u14

Open the chart page →

18,376
craftycontrollerdrewburr-labs-helm-chartsVerified publisher0.3.01 of 1See more

craftycontroller drewburr-labs-helm-charts 0.3.0

1 of the 1 container images this version deploys carry CVE-2026-4437.

Container imageDigestPackageFixed in
registry.gitlab.com/crafty-controller/crafty-4:latest166a06f73d8c
glibc@2.39-0ubuntu8.7
2.39-0ubuntu8.8

Open the chart page →

3,671
rstudiodsri-helm-charts0.1.281 of 1See more

rstudio dsri-helm-charts 0.1.28

1 of the 1 container images this version deploys carry CVE-2026-4437.

Container imageDigestPackageFixed in
ghcr.io/maastrichtu-ids/rstudio:latest981aa4c109e1
glibc@2.39-0ubuntu8.4
2.39-0ubuntu8.8

Open the chart page →

5,670
egagenteginnovationsVerified publisher0.10.01 of 1See more

egagent eginnovations 0.10.0

1 of the 1 container images this version deploys carry CVE-2026-4437.

Container imageDigestPackageFixed in
eginnovations/agent:7.5.4e4dfe242fe9f
glibc@2.42-0ubuntu3.1
no fix listed

Open the chart page →

1,340
enbuildenbuildVerified publisher0.0.502 of 6See more

enbuild enbuild 0.0.50

2 of the 6 container images this version deploys carry CVE-2026-4437.

Container imageDigestPackageFixed in
registry.gitlab.com/enbuild-staging/vivsoft-platform-ui/enbuild-frontend:1.0.3166353ce9bf98
glibc@2.41-12+deb13u2
2.41-12+deb13u3
registry.gitlab.com/enbuild-staging/vivsoft-platform-ui/rabbitmq:3.12.145a9334f371f3
glibc@2.36-9+deb12u7
2.36-9+deb12u14

Open the chart page →

31,510
kubevirtencircle360-ossVerified publisher0.2.11 of 1See more

kubevirt encircle360-oss 0.2.1

1 of the 1 container images this version deploys carry CVE-2026-4437.

Container imageDigestPackageFixed in
quay.io/kubevirt/virt-operator:v1.7.037d2ef21e3e5
glibc@2.36-9+deb12u10
2.36-9+deb12u14

Open the chart page →

850
iobrokereugen0.2.61 of 1See more

iobroker eugen 0.2.6

1 of the 1 container images this version deploys carry CVE-2026-4437.

Container imageDigestPackageFixed in
ghcr.io/buanet/iobroker:v9.1.2ca7dc7362968
glibc@2.36-9+deb12u7
2.36-9+deb12u14

Open the chart page →

11,458
akauntingf3k-techVerified publisher1.3121.01 of 4See more

akaunting f3k-tech 1.3121.0

1 of the 4 container images this version deploys carry CVE-2026-4437.

Container imageDigestPackageFixed in
bitnamilegacy/mariadb:latestbbd4e17f1ef8
glibc@2.36-9+deb12u10
2.36-9+deb12u14

Open the chart page →

4,333
cap-captcha-serverf3k-techVerified publisher0.21.01 of 1See more

cap-captcha-server f3k-tech 0.21.0

1 of the 1 container images this version deploys carry CVE-2026-4437.

Container imageDigestPackageFixed in
tiago2/cap:2.159f5ae4e261e
glibc@2.41-12+deb13u1
2.41-12+deb13u3

Open the chart page →

1,664
recaptcha-v3-verifierf3k-techVerified publisher1.110.01 of 1See more

recaptcha-v3-verifier f3k-tech 1.110.0

1 of the 1 container images this version deploys carry CVE-2026-4437.

Container imageDigestPackageFixed in
f3ktech/recaptcha-v3-verifier:1.1.048e78987cf91
glibc@2.36-9+deb12u13
2.36-9+deb12u14

Open the chart page →

1,208
fastapi-microservice-appfast-api-microservice-app1.3.03 of 4See more

fastapi-microservice-app fast-api-microservice-app 1.3.0

3 of the 4 container images this version deploys carry CVE-2026-4437.

Container imageDigestPackageFixed in
omkara25/simple-microservice-app-order-service:v2.18327546c7aac
glibc@2.36-9+deb12u10
2.36-9+deb12u14
omkara25/simple-microservice-app-payment-service:v2afff40172b6b
glibc@2.36-9+deb12u10
2.36-9+deb12u14
omkara25/simple-microservice-app-user-service:v2d62cba548580
glibc@2.36-9+deb12u10
2.36-9+deb12u14

Open the chart page →

9,562
federidfederidOfficialVerified publisher0.1.21 of 1See more

federid federid 0.1.2

1 of the 1 container images this version deploys carry CVE-2026-4437.

Container imageDigestPackageFixed in
federid/webhook:0.1.0fbfb7c6510a7
glibc@2.36-9+deb12u9
2.36-9+deb12u14

Open the chart page →

2,064
zabbix-server-mysqlfermosit3.0.23 of 4See more

zabbix-server-mysql fermosit 3.0.2

3 of the 4 container images this version deploys carry CVE-2026-4437.

Container imageDigestPackageFixed in
zabbix/zabbix-agent:ubuntu-6.4-latest349b924472a7
glibc@2.39-0ubuntu8.3
2.39-0ubuntu8.8
zabbix/zabbix-server-mysql:ubuntu-6.4-latest55d074b6b031
glibc@2.39-0ubuntu8.3
2.39-0ubuntu8.8
zabbix/zabbix-web-nginx-mysql:ubuntu-6.4-latest0e5f69c4c54e
glibc@2.39-0ubuntu8.3
2.39-0ubuntu8.8

Open the chart page →

12,840
valheimgeek-cookbookVerified publisher4.4.21 of 1See more

valheim geek-cookbook 4.4.2

1 of the 1 container images this version deploys carry CVE-2026-4437.

Container imageDigestPackageFixed in
ghcr.io/lloesche/valheim-server:latest20fde516ce31
glibc@2.41-12+deb13u2
2.41-12+deb13u3

Open the chart page →

4,879
gentrace-self-hostedgentrace-self-hostedVerified publisher0.1.31 of 9See more

gentrace-self-hosted gentrace-self-hosted 0.1.3

1 of the 9 container images this version deploys carry CVE-2026-4437.

Container imageDigestPackageFixed in
library/postgres:15.38775adb39f0d
glibc@2.36-9+deb12u1
2.36-9+deb12u14

Open the chart page →

15,562
meta-monitoringgrafana1.3.01 of 2See more

meta-monitoring grafana 1.3.0

1 of the 2 container images this version deploys carry CVE-2026-4437.

Container imageDigestPackageFixed in
grafana/alloy:v1.4.306bdcbb51fc2
glibc@2.39-0ubuntu8.3
2.39-0ubuntu8.8

Open the chart page →

3,518
IMgrycapOfficialVerified publisher1.8.01 of 3See more

IM grycap 1.8.0

1 of the 3 container images this version deploys carry CVE-2026-4437.

Container imageDigestPackageFixed in
ghcr.io/grycap/im:latest06a16d4f279f
glibc@2.39-0ubuntu8.5
2.39-0ubuntu8.8

Open the chart page →

4,132
castopodh2mVerified publisher1.12.101 of 3See more

castopod h2m 1.12.10

1 of the 3 container images this version deploys carry CVE-2026-4437.

Container imageDigestPackageFixed in
castopod/castopod:1.12.101fd37280cbb2
glibc@2.36-9+deb12u8
2.36-9+deb12u14

Open the chart page →

10,072
haproxy-redis-sentinelhaproxy-redis-sentinelVerified publisher0.1.32 of 2See more

haproxy-redis-sentinel haproxy-redis-sentinel 0.1.3

2 of the 2 container images this version deploys carry CVE-2026-4437.

Container imageDigestPackageFixed in
library/haproxy:3.1-bookworm49a0a0d6f0b8
glibc@2.36-9+deb12u10
2.36-9+deb12u14
ghcr.io/parmincloud/haproxy-redis-sentinel:1.0.040a00a6456ae
glibc@2.36-9+deb12u10
2.36-9+deb12u14

Open the chart page →

4,277
harp-proxyharp0.8.11 of 1See more

harp-proxy harp 0.8.1

1 of the 1 container images this version deploys carry CVE-2026-4437.

Container imageDigestPackageFixed in
makersquad/harp-proxy:0.8.1a40dd258c527
glibc@2.36-9+deb12u10
2.36-9+deb12u14

Open the chart page →

6,374
hawkhawk1.1.51 of 4See more

hawk hawk 1.1.5

1 of the 4 container images this version deploys carry CVE-2026-4437.

Container imageDigestPackageFixed in
library/postgres:16.109f23e02d766
glibc@2.36-9+deb12u4
2.36-9+deb12u14

Open the chart page →

13,610
guacamolehelmforgeVerified publisher1.5.22 of 5See more

guacamole helmforge 1.5.2

2 of the 5 container images this version deploys carry CVE-2026-4437.

Container imageDigestPackageFixed in
guacamole/guacamole:1.6.0f344085e618b
glibc@2.39-0ubuntu8.4
2.39-0ubuntu8.8
library/postgres:17.5-bookwormfbcea1bd13b6
glibc@2.36-9+deb12u10
2.36-9+deb12u14

Open the chart page →

8,716
helmuphelmupVerified publisher0.1.03 of 3See more

helmup helmup 0.1.0

3 of the 3 container images this version deploys carry CVE-2026-4437.

Container imageDigestPackageFixed in
sirrend/helmup-engine:0.1.13699e79e3d4e2
glibc@2.36-9+deb12u7
2.36-9+deb12u14
sirrend/helmup-github-scraper:0.1.47ca688c7abf5
glibc@2.36-9+deb12u7
2.36-9+deb12u14
sirrend/helmup-notifications-service:0.1.3997866417011
glibc@2.36-9+deb12u7
2.36-9+deb12u14

Open the chart page →

16,514
hivemq-swarmhivemqOfficialVerified publisher0.2.701 of 1See more

hivemq-swarm hivemq 0.2.70

1 of the 1 container images this version deploys carry CVE-2026-4437.

Container imageDigestPackageFixed in
hivemq/hivemq-swarm:4.54.0f9746d5d70fa
glibc@2.39-0ubuntu8.7
2.39-0ubuntu8.8

Open the chart page →

1,350
backendikusi-bk-chart1.0.32 of 3See more

backend ikusi-bk-chart 1.0.3

2 of the 3 container images this version deploys carry CVE-2026-4437.

Container imageDigestPackageFixed in
kyovint/kyoimgtransactions:1.0.048c19e3ae9a3
glibc@2.41-12
2.41-12+deb13u3
kyovint/kyoimgusers:1.0.080084149156e
glibc@2.41-12
2.41-12+deb13u3

Open the chart page →

5,940
immichimmich-helm0.3.04 of 4See more

immich immich-helm 0.3.0

4 of the 4 container images this version deploys carry CVE-2026-4437.

Container imageDigestPackageFixed in
valkey/valkey:8.1.481db6d39e1bb
glibc@2.41-12
2.41-12+deb13u3
ghcr.io/immich-app/immich-machine-learning:v2.3.1379e31b8c751
glibc@2.36-9+deb12u13
2.36-9+deb12u14
ghcr.io/immich-app/immich-server:v2.3.1f8d06a32b1b2
glibc@2.41-12
2.41-12+deb13u3
ghcr.io/immich-app/postgres:14-vectorchord0.4.3-pgvectors0.2.0bcf63357191b
glibc@2.36-9+deb12u10
2.36-9+deb12u14

Open the chart page →

15,712
valkey-clusterinnagoVerified publisher1.1.01 of 2See more

valkey-cluster innago 1.1.0

1 of the 2 container images this version deploys carry CVE-2026-4437.

Container imageDigestPackageFixed in
valkey/valkey:8.0.1c5d4f082b76d
glibc@2.36-9+deb12u8
2.36-9+deb12u14

Open the chart page →

2,622
iris-webappiris-webapp0.2.41 of 2See more

iris-webapp iris-webapp 0.2.4

1 of the 2 container images this version deploys carry CVE-2026-4437.

Container imageDigestPackageFixed in
ghcr.io/dfir-iris/iriswebapp_app:v2.4.26e59ebde55709
glibc@2.41-12
2.41-12+deb13u3

Open the chart page →

11,764

Container images carrying it

1,155 by charts deploying them

A fixed version is listed for 3 of the 4 affected packages.

Container imageDigestPackageFixed inUsed by
netbirdio/management:0.45.10c9994b393ea
glibc@2.39-0ubuntu8.4
2.39-0ubuntu8.8
1
netbirdio/relay:0.45.1872e3add0e1e
glibc@2.36-9+deb12u10
2.36-9+deb12u14
1
netbirdio/signal:0.45.146ce5a45538f
glibc@2.36-9+deb12u10
2.36-9+deb12u14
1
nethermind/nethermind:1.31.893e57917371a
glibc@2.39-0ubuntu8.4
2.39-0ubuntu8.8
1
nethermind/nethermind:1.31.9aeca3b55bda5
glibc@2.39-0ubuntu8.4
2.39-0ubuntu8.8
1
netrisai/bare-metal-dpu-agent:4.7.0.003c271efe749d0
glibc@2.39-0ubuntu8.7
2.39-0ubuntu8.8
1
networktocode/nautobot:3.0-py3.13ed484336b1ad
glibc@2.41-12+deb13u2
2.41-12+deb13u3
1
newrelic/newrelic-agent-control-cli:0.48.01a448492b55a
glibc@2.41-12
2.41-12+deb13u3
1
nginxinc/nginx-unprivileged:1.29.5c5b989ebc150
glibc@2.41-12+deb13u2
2.41-12+deb13u3
1
nirmalnaveen/supermario:latest8541a39162f3
glibc@2.36-9+deb12u3
2.36-9+deb12u14
1
obolnetwork/helios:e10e753cb7e97d39d46
glibc@2.39-0ubuntu8.4
2.39-0ubuntu8.8
1
offchainlabs/nitro-node:v3.7.6-c0fe95e9f779fa84b7b
glibc@2.36-9+deb12u13
2.36-9+deb12u14
1
offchainlabs/nitro-node:v3.1.0-7d1d84ce95865866129
glibc@2.36-9+deb12u7
2.36-9+deb12u14
1
oled01/automx2:2025.1.105d3e398e675
glibc@2.36-9+deb12u10
2.36-9+deb12u14
1
olvid/bot-daemon:2.0.1e0e6b165d879
glibc@2.39-0ubuntu8.7
2.39-0ubuntu8.8
1
omkara25/simple-microservice-app-order-service:v2.18327546c7aac
glibc@2.36-9+deb12u10
2.36-9+deb12u14
1
omkara25/simple-microservice-app-payment-service:v2afff40172b6b
glibc@2.36-9+deb12u10
2.36-9+deb12u14
1
omkara25/simple-microservice-app-user-service:v2d62cba548580
glibc@2.36-9+deb12u10
2.36-9+deb12u14
1
opea/asr:1.025dd26d9cd09
glibc@2.36-9+deb12u8
2.36-9+deb12u14
1
opea/chatqna:1.038c51b791efa
glibc@2.36-9+deb12u8
2.36-9+deb12u14
1
opea/codegen:1.058f91683892d
glibc@2.36-9+deb12u8
2.36-9+deb12u14
1
opea/codegen-ui:1.02bee4eb66f3e
glibc@2.36-9+deb12u4
2.36-9+deb12u14
1
opea/codetrans:1.0e2436483b73d
glibc@2.36-9+deb12u8
2.36-9+deb12u14
1
opea/codetrans-ui:1.03ef121f34610
glibc@2.36-9+deb12u4
2.36-9+deb12u14
1
opea/docsum:1.03eaa91849512
glibc@2.36-9+deb12u8
2.36-9+deb12u14
1
opea/docsum-ui:1.07f854e9bffaf
glibc@2.36-9+deb12u4
2.36-9+deb12u14
1
opea/guardrails-tgi:1.0262c6048aab8
glibc@2.36-9+deb12u8
2.36-9+deb12u14
1
opea/guardrails-tgi:latestf68bec6a1271
glibc@2.36-9+deb12u9
2.36-9+deb12u14
1
opea/llm-docsum-tgi:1.002f9e8fa5d71
glibc@2.36-9+deb12u8
2.36-9+deb12u14
1
opea/speecht5:1.0249afad3d268
glibc@2.36-9+deb12u8
2.36-9+deb12u14
1
opea/tts:1.0257ae94709e9
glibc@2.36-9+deb12u8
2.36-9+deb12u14
1
opea/web-retriever-chroma:1.0fe08165d7770
glibc@2.36-9+deb12u8
2.36-9+deb12u14
1
openbas/caldera-server:5.1.0a277796d9724
glibc@2.36-9+deb12u9
2.36-9+deb12u14
1
openbas/platform:2.0.5d986d80b0a75
glibc@2.39-0ubuntu8.6
2.39-0ubuntu8.8
1
opencsghq/agenticflow:ee-v0.6-52f03fead54db
glibc@2.36-9+deb12u10
2.36-9+deb12u14
1
opencsghq/csghub-portal:v2.4.0-ee93ad59164d87
glibc@2.36-9+deb12u10
2.36-9+deb12u14
1
opencsghq/csghub-server:v2.4.0-ee302c9d45d8a8
glibc@2.36-9+deb12u13
2.36-9+deb12u14
1
opencsghq/csghub-xnet:v2.4.0-ee04121fd19ef9
glibc@2.36-9+deb12u13
2.36-9+deb12u14
1
opencsghq/gitlab-gitaly:v17.5.0bdd2c58b9744
glibc@2.36-9+deb12u8
2.36-9+deb12u14
1
opencsghq/gitlab-shell:v17.5.0f6d7e7d6be5d
glibc@2.36-9+deb12u8
2.36-9+deb12u14
1
opencsghq/kubectl:latestb6d87e1048c2
glibc@2.36-9+deb12u10
2.36-9+deb12u14
1
opendatacube/explorer:latest120457ffcd69
glibc@2.39-0ubuntu8.5
2.39-0ubuntu8.8
1
openmined/syft-backend:0.9.5b72f74a68b32
glibc@2.40-r8
2.43-r4
1
openmined/syft-frontend:0.9.5d11524a3854a
glibc@2.40-r8
2.43-r4
1
openpolicyagent/opa:0.53.16a58dea59933
glibc@2.37-r7
2.43-r4
1
openproject/hocuspocus:release-338001b288dc1359dfb5
glibc@2.36-9+deb12u10
2.36-9+deb12u14
1
openvino/model_server:2025.2.11e7cd1d70cc1
glibc@2.39-0ubuntu8.4
2.39-0ubuntu8.8
1
openvpn/openvpn-as:latest2253c10ec652
glibc@2.39-0ubuntu8.7
2.39-0ubuntu8.8
1
opsmx11/issuegen:v2.1.05c50ca123d88
eglibc@2.19-0ubuntu6.14
no fix listed
1
outlinewiki/outline:0.82.0494dfb9249a6
glibc@2.36-9+deb12u9
2.36-9+deb12u14
1

syft 1.42.1 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.