StackRadar

CVE-2026-4437

High

Advisory

Published 20 Mar 2026In the index since 5 Sept 2026
Severity
High
worst across findings
CVSS
7.5
base score, highest
EPSS
0.003
25th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
996
of 17,787 indexed, latest versions
Container images
1,167
deployed by those charts
Fix available
3 of 4
affected packages

CVE-2026-4437 affecting package glibc for versions less than 2.38-19

Carried by container images the latest versions of 996 of 17,787 indexed charts deploy, on 1,167 images.

Affected packageAffected versionsFixed inImages
glibcdeb2.36-9, 2.36-9+deb12u1, 2.36-9+deb12u3, 2.36-9+deb12u4+19 more2.36-9+deb12u14, 2.39-0ubuntu8.8, 2.41-12+deb13u2+e2, 2.41-12+deb13u31,137
glibcapk2.37-r7, 2.38-r6, 2.39-r7, 2.40-r1+7 more2.43-r420
eglibcdeb2.19-0ubuntu6.3, 2.19-0ubuntu6.6, 2.19-0ubuntu6.13, 2.19-0ubuntu6.14+1 moreno fix listed7
glibcrpm2.38-16.azl3, 2.38-18.azl32.38-193
OSV records
CGA-28jr-9938-gm2mDEBIAN-CVE-2026-4437UBUNTU-CVE-2026-4437AZL-80279ECHO-3c7d-5484-9e80
Also known as
CGA-2vmx-p942-gvjv, CGA-3ppc-8crm-xcwj, CGA-447g-pcpw-fghr, CGA-4rv8-gm3c-8hh4, CGA-7wrv-wrfh-p8c9, CGA-9xfq-4v63-2prp, CGA-f493-mp32-m44p, CGA-pm9m-w6f6-3vcx, CGA-qfw8-frvf-4g9v, CGA-qgv8-8g95-5gfq, CGA-qjc4-84cm-3mxj, CGA-qvv7-4qrx-v7f8, CGA-rvmr-63g4-4mrj, CGA-wq5x-prm6-fhhx, CGA-xq4q-286c-rcpc, USN-8611-1

Charts affected

996 by stars
ChartLatestAffected imagesRadar Score
test-helm-app1saam-helm-test0.1.01 of 1See more

test-helm-app1 saam-helm-test 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-4437.

Container imageDigestPackageFixed in
hamidyousefi93/saam-test:latestc34f071f6ed0
glibc@2.36-9+deb12u3
2.36-9+deb12u14

Open the chart page →

3,374
safe-stacksafe-global0.1.01 of 9See more

safe-stack safe-global 0.1.0

1 of the 9 container images this version deploys carry CVE-2026-4437.

Container imageDigestPackageFixed in
gjeanmart/safe-ganache-node:latest926264c8f2d1
glibc@2.36-9
2.36-9+deb12u14

Open the chart page →

17,736
safe-transaction-servicesafe-global0.1.01 of 6See more

safe-transaction-service safe-global 0.1.0

1 of the 6 container images this version deploys carry CVE-2026-4437.

Container imageDigestPackageFixed in
gjeanmart/safe-ganache-node:latest926264c8f2d1
glibc@2.36-9
2.36-9+deb12u14

Open the chart page →

14,792
sagawisesagawiseVerified publisher0.1.01 of 3See more

sagawise sagawise 0.1.0

1 of the 3 container images this version deploys carry CVE-2026-4437.

Container imageDigestPackageFixed in
venturenox/redis:latest83b471c193ba
glibc@2.36-9+deb12u9
2.36-9+deb12u14

Open the chart page →

4,104
evsantisbon0.2.02 of 5See more

ev santisbon 0.2.0

2 of the 5 container images this version deploys carry CVE-2026-4437.

Container imageDigestPackageFixed in
santisbon/evwatcher:latestc4e994ca4540
glibc@2.36-9+deb12u1
2.36-9+deb12u14
santisbon/evworker:lateste807283f8d69
glibc@2.36-9+deb12u1
2.36-9+deb12u14

Open the chart page →

12,090
speedtestsantisbon0.1.02 of 3See more

speedtest santisbon 0.1.0

2 of the 3 container images this version deploys carry CVE-2026-4437.

Container imageDigestPackageFixed in
library/influxdb:2.7b8d940ca9376
glibc@2.36-9+deb12u13
2.36-9+deb12u14
santisbon/speedtest:latest8ee3a1697227
glibc@2.36-9+deb12u1
2.36-9+deb12u14

Open the chart page →

11,314
airflowsb-helm-charts0.3.01 of 1See more

airflow sb-helm-charts 0.3.0

1 of the 1 container images this version deploys carry CVE-2026-4437.

Container imageDigestPackageFixed in
apache/airflow:2.8.1e5560ad0b86e
glibc@2.36-9+deb12u4
2.36-9+deb12u14

Open the chart page →

9,340
jellyfinsb-helm-charts0.4.01 of 1See more

jellyfin sb-helm-charts 0.4.0

1 of the 1 container images this version deploys carry CVE-2026-4437.

Container imageDigestPackageFixed in
jellyfin/jellyfin:10.10.317c3a8d9dddb
glibc@2.36-9+deb12u9
2.36-9+deb12u14

Open the chart page →

3,864
nextcloudsb-helm-charts0.4.01 of 2See more

nextcloud sb-helm-charts 0.4.0

1 of the 2 container images this version deploys carry CVE-2026-4437.

Container imageDigestPackageFixed in
library/nextcloud:31.0.10-apacheb7faa1653c39
glibc@2.41-12
2.41-12+deb13u3

Open the chart page →

9,687
phpmyadminsb-helm-charts0.3.01 of 1See more

phpmyadmin sb-helm-charts 0.3.0

1 of the 1 container images this version deploys carry CVE-2026-4437.

Container imageDigestPackageFixed in
library/phpmyadmin:5.2.16e75aa8f767c
glibc@2.36-9+deb12u9
2.36-9+deb12u14

Open the chart page →

5,065
postgresqlsb-helm-charts0.4.01 of 1See more

postgresql sb-helm-charts 0.4.0

1 of the 1 container images this version deploys carry CVE-2026-4437.

Container imageDigestPackageFixed in
library/postgres:16.11468e1f126ca5
glibc@2.41-12+deb13u1
2.41-12+deb13u3

Open the chart page →

2,345
promtailsb-helm-charts0.4.01 of 1See more

promtail sb-helm-charts 0.4.0

1 of the 1 container images this version deploys carry CVE-2026-4437.

Container imageDigestPackageFixed in
grafana/promtail:3.6.18dcfdf466da0
glibc@2.39-0ubuntu8.6
2.39-0ubuntu8.8

Open the chart page →

2,241
rsshubsb-helm-charts0.3.01 of 1See more

rsshub sb-helm-charts 0.3.0

1 of the 1 container images this version deploys carry CVE-2026-4437.

Container imageDigestPackageFixed in
diygod/rsshub:2025-11-097a6312cac0d5
glibc@2.36-9+deb12u13
2.36-9+deb12u14

Open the chart page →

4,559
vaultwardensb-helm-charts0.4.01 of 1See more

vaultwarden sb-helm-charts 0.4.0

1 of the 1 container images this version deploys carry CVE-2026-4437.

Container imageDigestPackageFixed in
vaultwarden/server:1.34.384fd8a47f58d
glibc@2.36-9+deb12u10
2.36-9+deb12u14

Open the chart page →

3,210
wordpresssb-helm-charts0.4.02 of 2See more

wordpress sb-helm-charts 0.4.0

2 of the 2 container images this version deploys carry CVE-2026-4437.

Container imageDigestPackageFixed in
library/mysql:8.0-debian9382e4f6f7f0
glibc@2.36-9+deb12u13
2.36-9+deb12u14
library/wordpress:6.4.3-apache8ae66efb09a2
glibc@2.36-9+deb12u4
2.36-9+deb12u14

Open the chart page →

12,009
factorioschichtelVerified publisher0.1.11 of 1See more

factorio schichtel 0.1.1

1 of the 1 container images this version deploys carry CVE-2026-4437.

Container imageDigestPackageFixed in
factoriotools/factorio:2.0.67-rootlessf7909f7361d6
glibc@2.41-12
2.41-12+deb13u3

Open the chart page →

2,983
photonschichtelVerified publisher0.2.01 of 1See more

photon schichtel 0.2.0

1 of the 1 container images this version deploys carry CVE-2026-4437.

Container imageDigestPackageFixed in
rtuszik/photon-docker:2.4.021549c60f9e6
glibc@2.39-0ubuntu8.6
2.39-0ubuntu8.8

Open the chart page →

2,865
wordpressschichtelVerified publisher0.10.101 of 2See more

wordpress schichtel 0.10.10

1 of the 2 container images this version deploys carry CVE-2026-4437.

Container imageDigestPackageFixed in
nginxinc/nginx-unprivileged:1.29.5c5b989ebc150
glibc@2.41-12+deb13u2
2.41-12+deb13u3

Open the chart page →

8,082
snipeitschmitzis6.1.01 of 2See more

snipeit schmitzis 6.1.0

1 of the 2 container images this version deploys carry CVE-2026-4437.

Container imageDigestPackageFixed in
snipe/snipe-it:v8.3.1141ebf2386fe
glibc@2.39-0ubuntu8.5
2.39-0ubuntu8.8

Open the chart page →

6,154
jellyfinschoolguys-helmcharts0.4.21 of 1See more

jellyfin schoolguys-helmcharts 0.4.2

1 of the 1 container images this version deploys carry CVE-2026-4437.

Container imageDigestPackageFixed in
jellyfin/jellyfin:10.11.81694ff069f0c
glibc@2.41-12+deb13u2
2.41-12+deb13u3

Open the chart page →

2,967
unboundschoolguys-helmcharts0.1.11 of 1See more

unbound schoolguys-helmcharts 0.1.1

1 of the 1 container images this version deploys carry CVE-2026-4437.

Container imageDigestPackageFixed in
mvance/unbound:1.20.04bf67b567f39
glibc@2.36-9+deb12u7
2.36-9+deb12u14

Open the chart page →

2,748
sealed-secrets-uisealed-secrets-uiVerified publisher0.0.81 of 1See more

sealed-secrets-ui sealed-secrets-ui 0.0.8

1 of the 1 container images this version deploys carry CVE-2026-4437.

Container imageDigestPackageFixed in
ghcr.io/noahburrell0/sealed-secrets-ui:v0.1.47e7368fb472d
glibc@2.36-9+deb12u9
2.36-9+deb12u14

Open the chart page →

4,570
postgresself-hosters-by-nightVerified publisher0.14.31 of 1See more

postgres self-hosters-by-night 0.14.3

1 of the 1 container images this version deploys carry CVE-2026-4437.

Container imageDigestPackageFixed in
library/postgres:18.11090bc3a8ccf
glibc@2.41-12+deb13u1
2.41-12+deb13u3

Open the chart page →

2,386
serviceexampleserviceexample-chart0.3.01 of 4See more

serviceexample serviceexample-chart 0.3.0

1 of the 4 container images this version deploys carry CVE-2026-4437.

Container imageDigestPackageFixed in
tibyandocker/serviceexample:latesta4ad592cea84
glibc@2.36-9+deb12u13
2.36-9+deb12u14

Open the chart page →

3,929
service-exampleservice-example-jt0.1.11 of 9See more

service-example service-example-jt 0.1.1

1 of the 9 container images this version deploys carry CVE-2026-4437.

Container imageDigestPackageFixed in
janzo83/serviceexample:latestfb3c4ac36f3e
glibc@2.36-9+deb12u13
2.36-9+deb12u14

Open the chart page →

7,105
first-chartshashkist-test0.1.01 of 3See more

first-chart shashkist-test 0.1.0

1 of the 3 container images this version deploys carry CVE-2026-4437.

Container imageDigestPackageFixed in
shashkist/flask-contacts-app:latest581de1fd6084
glibc@2.36-9+deb12u9
2.36-9+deb12u14

Open the chart page →

2,934
showroom-docs-mcpshowroom-docs-mcpVerified publisher2.1.01 of 4See more

showroom-docs-mcp showroom-docs-mcp 2.1.0

1 of the 4 container images this version deploys carry CVE-2026-4437.

Container imageDigestPackageFixed in
litellm/litellm-non_root:v1.82.3-stable09b217802ded
glibc@2.43-r2
2.43-r4

Open the chart page →

5,230
shulker-operatorshulker-operator0.13.01 of 1See more

shulker-operator shulker-operator 0.13.0

1 of the 1 container images this version deploys carry CVE-2026-4437.

Container imageDigestPackageFixed in
ghcr.io/jeremylvln/shulker-operator:0.13.027c55706c126
glibc@2.36-9+deb12u10
2.36-9+deb12u14

Open the chart page →

879
counter-dhlsikademo0.3.01 of 3See more

counter-dhl sikademo 0.3.0

1 of the 3 container images this version deploys carry CVE-2026-4437.

Container imageDigestPackageFixed in
ghcr.io/ondrejsika/counter-frontend:latestc4166d2eb8eb
glibc@2.36-9+deb12u13
2.36-9+deb12u14

Open the chart page →

4,857
mongosyncsinextraVerified publisher0.4.01 of 1See more

mongosync sinextra 0.4.0

1 of the 1 container images this version deploys carry CVE-2026-4437.

Container imageDigestPackageFixed in
ghcr.io/sergelogvinov/mongosync:1.15.0fa99ed475f03
glibc@2.39-0ubuntu8.5
2.39-0ubuntu8.8

Open the chart page →

2,854
yopasssky-sailVerified publisher1.3.12 of 2See more

yopass sky-sail 1.3.1

2 of the 2 container images this version deploys carry CVE-2026-4437.

Container imageDigestPackageFixed in
jhaals/yopass:12.5.0916a1cf45d36
glibc@2.36-9+deb12u13
2.36-9+deb12u14
library/memcached:1.6.409ae868852d0b
glibc@2.41-12
2.41-12+deb13u3

Open the chart page →

2,990
slothsloth0.16.01 of 2See more

sloth sloth 0.16.0

1 of the 2 container images this version deploys carry CVE-2026-4437.

Container imageDigestPackageFixed in
registry.k8s.io/git-sync/git-sync:v4.5.00e64aedb0d0a
glibc@2.41-12
2.41-12+deb13u3

Open the chart page →

3,929
mealiesmarthallVerified publisher0.0.101 of 1See more

mealie smarthall 0.0.10

1 of the 1 container images this version deploys carry CVE-2026-4437.

Container imageDigestPackageFixed in
ghcr.io/mealie-recipes/mealie:v1.4.0b56da41cf178
glibc@2.36-9+deb12u4
2.36-9+deb12u14

Open the chart page →

5,571
cost-analyzersoftonic2.5.51 of 6See more

cost-analyzer softonic 2.5.5

1 of the 6 container images this version deploys carry CVE-2026-4437.

Container imageDigestPackageFixed in
gcr.io/kubecost1/frontend:prod-2.5.5991c1465c658
glibc@2.40-r23
2.43-r4

Open the chart page →

7,935
spacecapybara-chartspacecapy1.0.491 of 2See more

spacecapybara-chart spacecapy 1.0.49

1 of the 2 container images this version deploys carry CVE-2026-4437.

Container imageDigestPackageFixed in
sashafefler/spacecapybara_app:latestf96d7804c0ca
glibc@2.36-9+deb12u8
2.36-9+deb12u14

Open the chart page →

11,243
datadogspartan0.1.01 of 1See more

datadog spartan 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-4437.

Container imageDigestPackageFixed in
gcr.io/datadoghq/cluster-agent:7.61.06efe04ba4e06
glibc@2.39-0ubuntu8.3
2.39-0ubuntu8.8

Open the chart page →

3,272
speckle-preview-service-branch-testing6speckleVerified publisher2.23.14-branch.testing6.334655-b4e04ee1 of 1See more

speckle-preview-service-branch-testing6 speckle 2.23.14-branch.testing6.334655-b4e04ee

1 of the 1 container images this version deploys carry CVE-2026-4437.

Container imageDigestPackageFixed in
speckle/speckle-preview-service:2.23.14-branch.testing6.334655-b4e04ee6dee853ba74a
glibc@2.36-9+deb12u7
2.36-9+deb12u14

Open the chart page →

5,636
speckle-server-branch-hotfix-2.19.1speckleVerified publisher2.19.2-branch.hotfix-2.19.1.124125-665e7e15 of 5See more

speckle-server-branch-hotfix-2.19.1 speckle 2.19.2-branch.hotfix-2.19.1.124125-665e7e1

5 of the 5 container images this version deploys carry CVE-2026-4437.

Container imageDigestPackageFixed in
speckle/speckle-frontend-2:2.19.2-branch.hotfix-2.19.1.124125-665e7e14f9241665ae3
glibc@2.36-9+deb12u7
2.36-9+deb12u14
speckle/speckle-monitor-deployment:2.19.2-branch.hotfix-2.19.1.124125-665e7e1b696ac5022ab
glibc@2.36-9+deb12u7
2.36-9+deb12u14
speckle/speckle-preview-service:2.19.2-branch.hotfix-2.19.1.124125-665e7e1c102b087481a
glibc@2.36-9+deb12u7
2.36-9+deb12u14
speckle/speckle-server:2.19.2-branch.hotfix-2.19.1.124125-665e7e14b6a0750d5aa
glibc@2.36-9+deb12u7
2.36-9+deb12u14
speckle/speckle-webhook-service:2.19.2-branch.hotfix-2.19.1.124125-665e7e14828aee2277c
glibc@2.36-9+deb12u7
2.36-9+deb12u14

Open the chart page →

15,684
speckle-server-branch-hotfix-2.20.2speckleVerified publisher2.20.3-branch.hotfix-2.20.2.149555-37ea0cb5 of 5See more

speckle-server-branch-hotfix-2.20.2 speckle 2.20.3-branch.hotfix-2.20.2.149555-37ea0cb

5 of the 5 container images this version deploys carry CVE-2026-4437.

Container imageDigestPackageFixed in
speckle/speckle-frontend-2:2.20.3-branch.hotfix-2.20.2.149555-37ea0cbfdc008effc7a
glibc@2.36-9+deb12u7
2.36-9+deb12u14
speckle/speckle-monitor-deployment:2.20.3-branch.hotfix-2.20.2.149555-37ea0cb2faf1508c1d3
glibc@2.36-9+deb12u7
2.36-9+deb12u14
speckle/speckle-preview-service:2.20.3-branch.hotfix-2.20.2.149555-37ea0cbd3da0a84de98
glibc@2.36-9+deb12u7
2.36-9+deb12u14
speckle/speckle-server:2.20.3-branch.hotfix-2.20.2.149555-37ea0cb52f8eabf5cea
glibc@2.36-9+deb12u7
2.36-9+deb12u14
speckle/speckle-webhook-service:2.20.3-branch.hotfix-2.20.2.149555-37ea0cb107c63336ab5
glibc@2.36-9+deb12u7
2.36-9+deb12u14

Open the chart page →

16,431
speckle-server-branch-testingspeckleVerified publisher2.17.14-branch.testing.72707.921a5f84 of 5See more

speckle-server-branch-testing speckle 2.17.14-branch.testing.72707.921a5f8

4 of the 5 container images this version deploys carry CVE-2026-4437.

Container imageDigestPackageFixed in
speckle/speckle-monitor-deployment:2.17.14-branch.testing.72707.921a5f8ff1641ac3f1b
glibc@2.36-9+deb12u3
2.36-9+deb12u14
speckle/speckle-preview-service:2.17.14-branch.testing.72707.921a5f884fc39bca0c8
glibc@2.36-9+deb12u3
2.36-9+deb12u14
speckle/speckle-server:2.17.14-branch.testing.72707.921a5f849d10dcdfb91
glibc@2.36-9+deb12u3
2.36-9+deb12u14
speckle/speckle-webhook-service:2.17.14-branch.testing.72707.921a5f899913052b72e
glibc@2.36-9+deb12u3
2.36-9+deb12u14

Open the chart page →

14,703
speckle-server-branch-testing1speckleVerified publisher2.20.6-branch.testing1.154030-9b091145 of 5See more

speckle-server-branch-testing1 speckle 2.20.6-branch.testing1.154030-9b09114

5 of the 5 container images this version deploys carry CVE-2026-4437.

Container imageDigestPackageFixed in
speckle/speckle-frontend-2:2.20.6-branch.testing1.154030-9b0911432fc940d9b4c
glibc@2.36-9+deb12u7
2.36-9+deb12u14
speckle/speckle-monitor-deployment:2.20.6-branch.testing1.154030-9b09114738c77eb6f97
glibc@2.36-9+deb12u7
2.36-9+deb12u14
speckle/speckle-preview-service:2.20.6-branch.testing1.154030-9b091148f3c1ea153ba
glibc@2.36-9+deb12u7
2.36-9+deb12u14
speckle/speckle-server:2.20.6-branch.testing1.154030-9b09114e8413f57b327
glibc@2.36-9+deb12u7
2.36-9+deb12u14
speckle/speckle-webhook-service:2.20.6-branch.testing1.154030-9b09114cf1d99bad89a
glibc@2.36-9+deb12u7
2.36-9+deb12u14

Open the chart page →

16,431
speckle-server-branch-testing2speckleVerified publisher2.18.11-branch.testing2.88634-335d4694 of 5See more

speckle-server-branch-testing2 speckle 2.18.11-branch.testing2.88634-335d469

4 of the 5 container images this version deploys carry CVE-2026-4437.

Container imageDigestPackageFixed in
speckle/speckle-monitor-deployment:2.18.11-branch.testing2.88634-335d469d6790a97ad47
glibc@2.36-9+deb12u4
2.36-9+deb12u14
speckle/speckle-preview-service:2.18.11-branch.testing2.88634-335d4694bd113093583
glibc@2.36-9+deb12u4
2.36-9+deb12u14
speckle/speckle-server:2.18.11-branch.testing2.88634-335d469bf6a501b2210
glibc@2.36-9+deb12u4
2.36-9+deb12u14
speckle/speckle-webhook-service:2.18.11-branch.testing2.88634-335d469902b98ad5327
glibc@2.36-9+deb12u4
2.36-9+deb12u14

Open the chart page →

14,245
speckle-server-branch-testing3speckleVerified publisher2.18.12-branch.testing3.88744-f55b3414 of 5See more

speckle-server-branch-testing3 speckle 2.18.12-branch.testing3.88744-f55b341

4 of the 5 container images this version deploys carry CVE-2026-4437.

Container imageDigestPackageFixed in
speckle/speckle-monitor-deployment:2.18.12-branch.testing3.88744-f55b34181335b40696a
glibc@2.36-9+deb12u4
2.36-9+deb12u14
speckle/speckle-preview-service:2.18.12-branch.testing3.88744-f55b3414bd113093583
glibc@2.36-9+deb12u4
2.36-9+deb12u14
speckle/speckle-server:2.18.12-branch.testing3.88744-f55b34189a5872375f9
glibc@2.36-9+deb12u4
2.36-9+deb12u14
speckle/speckle-webhook-service:2.18.12-branch.testing3.88744-f55b341771f872cfa63
glibc@2.36-9+deb12u4
2.36-9+deb12u14

Open the chart page →

14,245
speckle-server-branch-testing4speckleVerified publisher2.20.2-branch.testing4.134160-9fad4b25 of 5See more

speckle-server-branch-testing4 speckle 2.20.2-branch.testing4.134160-9fad4b2

5 of the 5 container images this version deploys carry CVE-2026-4437.

Container imageDigestPackageFixed in
speckle/speckle-frontend-2:2.20.2-branch.testing4.134160-9fad4b210ad4ade8bf2
glibc@2.36-9+deb12u7
2.36-9+deb12u14
speckle/speckle-monitor-deployment:2.20.2-branch.testing4.134160-9fad4b23c8fbe855665
glibc@2.36-9+deb12u7
2.36-9+deb12u14
speckle/speckle-preview-service:2.20.2-branch.testing4.134160-9fad4b21f897ca906ea
glibc@2.36-9+deb12u7
2.36-9+deb12u14
speckle/speckle-server:2.20.2-branch.testing4.134160-9fad4b2687f43ab16f3
glibc@2.36-9+deb12u7
2.36-9+deb12u14
speckle/speckle-webhook-service:2.20.2-branch.testing4.134160-9fad4b270f5167d1d4d
glibc@2.36-9+deb12u7
2.36-9+deb12u14

Open the chart page →

16,050
speckle-server-branch-testing5speckleVerified publisher2.21.3-branch.testing5.219631-2153bef5 of 5See more

speckle-server-branch-testing5 speckle 2.21.3-branch.testing5.219631-2153bef

5 of the 5 container images this version deploys carry CVE-2026-4437.

Container imageDigestPackageFixed in
speckle/speckle-frontend-2:2.21.3-branch.testing5.219631-2153befd4ca6ebf09b9
glibc@2.36-9+deb12u7
2.36-9+deb12u14
speckle/speckle-monitor-deployment:2.21.3-branch.testing5.219631-2153befcf72ad0f25fb
glibc@2.36-9+deb12u7
2.36-9+deb12u14
speckle/speckle-preview-service:2.21.3-branch.testing5.219631-2153bef52cad5e3293e
glibc@2.36-9+deb12u7
2.36-9+deb12u14
speckle/speckle-server:2.21.3-branch.testing5.219631-2153bef8fd157733393
glibc@2.36-9+deb12u7
2.36-9+deb12u14
speckle/speckle-webhook-service:2.21.3-branch.testing5.219631-2153bef06ecc7a66a40
glibc@2.36-9+deb12u7
2.36-9+deb12u14

Open the chart page →

14,500
speckle-server-branch-testing6speckleVerified publisher2.25.10-branch.testing6.645-b125c1e4 of 4See more

speckle-server-branch-testing6 speckle 2.25.10-branch.testing6.645-b125c1e

4 of the 4 container images this version deploys carry CVE-2026-4437.

Container imageDigestPackageFixed in
speckle/speckle-monitor-deployment:2.25.10-branch.testing6.645-b125c1e2dbc553ed87c
glibc@2.36-9+deb12u7
2.36-9+deb12u14
speckle/speckle-preview-service:2.25.10-branch.testing6.645-b125c1e787adcb20a3a
glibc@2.36-9+deb12u7
2.36-9+deb12u14
speckle/speckle-server:2.25.10-branch.testing6.645-b125c1e75cdf256067b
glibc@2.36-9+deb12u10
2.36-9+deb12u14
speckle/speckle-webhook-service:2.25.10-branch.testing6.645-b125c1edd9db6cbe9bb
glibc@2.36-9+deb12u7
2.36-9+deb12u14

Open the chart page →

10,647
ocean-network-clientspot1.1.61 of 1See more

ocean-network-client spot 1.1.6

1 of the 1 container images this version deploys carry CVE-2026-4437.

Container imageDigestPackageFixed in
public.ecr.aws/spotinst/spot-network-client:1.0.1486380a01587d
glibc@2.39-0ubuntu8.7
2.39-0ubuntu8.8

Open the chart page →

2,259
squadsquadVerified publisher0.1.111 of 1See more

squad squad 0.1.11

1 of the 1 container images this version deploys carry CVE-2026-4437.

Container imageDigestPackageFixed in
cm2network/squad:latest8cba47f53df5
glibc@2.41-12+deb13u1
2.41-12+deb13u3

Open the chart page →

2,499
servicexssl-hep1.8.51 of 16See more

servicex ssl-hep 1.8.5

1 of the 16 container images this version deploys carry CVE-2026-4437.

Container imageDigestPackageFixed in
ncsa/checks:main0b738bbc8d70
glibc@2.41-12
2.41-12+deb13u3

Open the chart page →

65,130
stakefishstakefish0.1.01 of 8See more

stakefish stakefish 0.1.0

1 of the 8 container images this version deploys carry CVE-2026-4437.

Container imageDigestPackageFixed in
thongngo3301/stakefish:latesta341af5976e3
glibc@2.36-9+deb12u1
2.36-9+deb12u14

Open the chart page →

18,426

Container images carrying it

1,167 by charts deploying them

A fixed version is listed for 3 of the 4 affected packages.

Container imageDigestPackageFixed inUsed by
ghcr.io/kagent-dev/doc2vec/mcp:1.1.14ace1de323f4a
glibc@2.42-r4
2.43-r4
1
ghcr.io/kubedb/kubedb-autoscaler:v0.25.0df6b11907d33
glibc@2.36-9+deb12u3
2.36-9+deb12u14
1
ghcr.io/kubelauncher/openldap8978aa002bc0
glibc@2.39-0ubuntu8.6
2.39-0ubuntu8.8
1
ghcr.io/kubevault/vault-operator:v0.24.00087cb49616f
glibc@2.36-9+deb12u13
2.36-9+deb12u14
1
ghcr.io/kubiyabot/agent-manager:v0.4.13757bdd779345
glibc@2.41-12
2.41-12+deb13u3
1
ghcr.io/kubiyabot/kubernetes:1.32.0b5ade0d9cc6b
glibc@2.36-9+deb12u9
2.36-9+deb12u14
1
ghcr.io/leprechaun/owntracks-exporter:0.1.11-de545066099e1abd6d08
glibc@2.36-9+deb12u1
2.36-9+deb12u14
1
ghcr.io/liangyuanpeng/xline:latest3d2eceb44a3b
glibc@2.39-0ubuntu8.1
2.39-0ubuntu8.8
1
ghcr.io/libreconnect/ferriscompany:0.1.0-rc6ed86db9f0efe
glibc@2.36-9+deb12u8
2.36-9+deb12u14
1
ghcr.io/linuxserver/ombi:4.53.50caadf03b804
glibc@2.39-0ubuntu8.7
2.39-0ubuntu8.8
1
ghcr.io/linuxserver/plex:version-1.41.4.9463-630c9f557e6d2775e77ec
glibc@2.39-0ubuntu8.4
2.39-0ubuntu8.8
1
ghcr.io/livepeer/cloudflared-ingress-operator:latestc179cdcaa050
glibc@2.41-12+deb13u1
2.41-12+deb13u3
1
ghcr.io/lloesche/valheim-server:latest20fde516ce31
glibc@2.41-12+deb13u2
2.41-12+deb13u3
1
ghcr.io/m9sweeper/trawler:1.6.0df917c5a7e54
glibc@2.36-9+deb12u4
2.36-9+deb12u14
1
ghcr.io/maastrichtu-ids/rstudio:latest981aa4c109e1
glibc@2.39-0ubuntu8.4
2.39-0ubuntu8.8
1
ghcr.io/maybe-finance/maybe:0.5.0c6ab95ca9130
glibc@2.36-9+deb12u9
2.36-9+deb12u14
1
ghcr.io/mcwarman/backstage-sample-app/app:mainfae3c1f04311
glibc@2.41-12
2.41-12+deb13u3
1
ghcr.io/mcwarman/backstage-sample-app/backend:main07aba09a594f
glibc@2.36-9+deb12u13
2.36-9+deb12u14
1
ghcr.io/mealie-recipes/mealie:v3.24.00b08ac3a9f0a
glibc@2.41-12+deb13u2
2.41-12+deb13u3
1
ghcr.io/mealie-recipes/mealie:v3.2.1322369a5b748
glibc@2.41-12
2.41-12+deb13u3
1
ghcr.io/mealie-recipes/mealie:v3.25.16066c29eca95
glibc@2.41-12+deb13u2
2.41-12+deb13u3
1
ghcr.io/mealie-recipes/mealie:v1.4.0b56da41cf178
glibc@2.36-9+deb12u4
2.36-9+deb12u14
1
ghcr.io/mealie-recipes/mealie:v3.7.0bb2939094eed
glibc@2.41-12
2.41-12+deb13u3
1
ghcr.io/media-streaming-mesh/msm-admission-webhook:latest3e811d67189c
glibc@2.39-0ubuntu8.3
2.39-0ubuntu8.8
1
ghcr.io/media-streaming-mesh/msm-cni:latestfe0b89b818a6
glibc@2.39-0ubuntu8.3
2.39-0ubuntu8.8
1
ghcr.io/media-streaming-mesh/msm-cp:latest8cb08fc7010b
glibc@2.39-0ubuntu8.2
2.39-0ubuntu8.8
1
ghcr.io/media-streaming-mesh/msm-dp:latest7ffcb25b4cfc
glibc@2.39-0ubuntu8.2
2.39-0ubuntu8.8
1
ghcr.io/media-streaming-mesh/msm-nc:latest296fe4970e38
glibc@2.39-0ubuntu8.2
2.39-0ubuntu8.8
1
ghcr.io/middleware-labs/mw-kube-agent:1.12.09c7bc0f9bb35
glibc@2.39-0ubuntu8.3
2.39-0ubuntu8.8
1
ghcr.io/middleware-labs/mw-kube-agent:1.21.0ff23f452813a
glibc@2.39-0ubuntu8.7
2.39-0ubuntu8.8
1
ghcr.io/mollyim/mollysocket:1.1.12a687393f8c8
glibc@2.36-9+deb12u3
2.36-9+deb12u14
1
ghcr.io/monicahq/monica-next:main8be69156acbb
glibc@2.41-12
2.41-12+deb13u3
1
ghcr.io/music-assistant/server:2.7.53522e8a7a8f0
glibc@2.36-9+deb12u13
2.36-9+deb12u14
1
ghcr.io/music-assistant/server:2.8.7eef3ee7810d0
glibc@2.36-9+deb12u13
2.36-9+deb12u14
1
ghcr.io/nefelim4ag/k8s-ssh-bastion:0.5.04d337e14c80b
glibc@2.39-0ubuntu8.2
2.39-0ubuntu8.8
1
ghcr.io/nefelim4ag/pingdom-operator:0.0.15f8c7afdcf439
glibc@2.36-9+deb12u7
2.36-9+deb12u14
1
ghcr.io/nicolargo/klances:0.1.374d6d33376eb
glibc@2.41-12+deb13u1
2.41-12+deb13u3
1
ghcr.io/nnstd/glauth:2.52e6e09fa77dd
glibc@2.36-9+deb12u10
2.36-9+deb12u14
1
ghcr.io/noahburrell0/sealed-secrets-ui:v0.1.47e7368fb472d
glibc@2.36-9+deb12u9
2.36-9+deb12u14
1
ghcr.io/oguzhan-yilmaz/argocd-backup-s3:latestb61c750ade19
glibc@2.36-9+deb12u13
2.36-9+deb12u14
1
ghcr.io/oguzhan-yilmaz/kdiff-snapshots:0.0.2035bc5ca66d55a
glibc@2.36-9+deb12u13
2.36-9+deb12u14
1
ghcr.io/oguzhan-yilmaz/kdiff-snapshots:0.0.55d7f93d2182fe
glibc@2.36-9+deb12u10
2.36-9+deb12u14
1
ghcr.io/ondrejsika/counter-frontend:latestc4166d2eb8eb
glibc@2.36-9+deb12u13
2.36-9+deb12u14
1
ghcr.io/openappsec/openappsec-waf-webhook:1.1.345b979b962043
glibc@2.41-12
2.41-12+deb13u3
1
ghcr.io/opencatalogi/web-app:deva1a7f507f6ae
glibc@2.36-9+deb12u8
2.36-9+deb12u14
1
ghcr.io/openclaw/openclaw:2026.5.22dcfd14877740
glibc@2.36-9+deb12u13
2.36-9+deb12u14
1
ghcr.io/opencost/opencost-parquet-exporter:v0.2.1ce85ef0ce665
glibc@2.36-9+deb12u9
2.36-9+deb12u14
1
ghcr.io/openrelik/openrelik-metrics:latest3d0f1ddeebf5
glibc@2.36-9+deb12u13
2.36-9+deb12u14
1
ghcr.io/openrelik/openrelik-worker-analyzer-config:latest1269d3d8d2c2
glibc@2.39-0ubuntu8.7
2.39-0ubuntu8.8
1
ghcr.io/openrelik/openrelik-worker-analyzer-logs:latestb175cc61959a
glibc@2.39-0ubuntu8.7
2.39-0ubuntu8.8
1

syft 1.42.1 · advisories as of 15 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.