StackRadar

CVE-2026-4438

Medium

Advisory

Published 20 Mar 2026In the index since 5 Sept 2026
Severity
Medium
worst across findings
CVSS
5.4
base score, highest
EPSS
0.003
24th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
988
of 17,787 indexed, latest versions
Container images
1,155
deployed by those charts
Fix available
3 of 4
affected packages

CVE-2026-4438 affecting package glibc for versions less than 2.38-19

Carried by container images the latest versions of 988 of 17,787 indexed charts deploy, on 1,155 images.

Affected packageAffected versionsFixed inImages
glibcdeb2.36-9, 2.36-9+deb12u1, 2.36-9+deb12u3, 2.36-9+deb12u4+19 more2.36-9+deb12u14, 2.39-0ubuntu8.8, 2.41-12+deb13u2+e2, 2.41-12+deb13u31,125
glibcapk2.37-r7, 2.38-r6, 2.39-r7, 2.40-r1+7 more2.43-r420
eglibcdeb2.19-0ubuntu6.3, 2.19-0ubuntu6.6, 2.19-0ubuntu6.13, 2.19-0ubuntu6.14+1 moreno fix listed7
glibcrpm2.38-16.azl3, 2.38-18.azl32.38-193
OSV records
CGA-3jvw-cpqx-f8w2DEBIAN-CVE-2026-4438UBUNTU-CVE-2026-4438AZL-80282ECHO-49d5-1f6e-5068
Also known as
CGA-44m8-5gw6-5qvv, CGA-4w93-3fmj-w88c, CGA-5h5q-3r3v-xr9g, CGA-722r-222x-hhhf, CGA-7fmh-pg32-8pv7, CGA-c53j-fx2j-57cf, CGA-c8r4-qhfx-5jqj, CGA-fg6j-4w5q-pjf3, CGA-j3f7-h2g8-xp9q, CGA-p954-rwjw-2p5h, CGA-pfmv-47h7-9x9v, CGA-q89h-5j3w-f3m5, CGA-wf74-v63j-cxxf, CGA-wrpj-h6wm-4267, CGA-x9rq-r5hh-4fjj, USN-8611-1

Charts affected

988 by stars
ChartLatestAffected imagesRadar Score
speedtestsantisbon0.1.02 of 3See more

speedtest santisbon 0.1.0

2 of the 3 container images this version deploys carry CVE-2026-4438.

Container imageDigestPackageFixed in
library/influxdb:2.7b8d940ca9376
glibc@2.36-9+deb12u13
2.36-9+deb12u14
santisbon/speedtest:latest8ee3a1697227
glibc@2.36-9+deb12u1
2.36-9+deb12u14

Open the chart page →

12,668
airflowsb-helm-charts0.3.01 of 1See more

airflow sb-helm-charts 0.3.0

1 of the 1 container images this version deploys carry CVE-2026-4438.

Container imageDigestPackageFixed in
apache/airflow:2.8.1e5560ad0b86e
glibc@2.36-9+deb12u4
2.36-9+deb12u14

Open the chart page →

10,209
jellyfinsb-helm-charts0.4.01 of 1See more

jellyfin sb-helm-charts 0.4.0

1 of the 1 container images this version deploys carry CVE-2026-4438.

Container imageDigestPackageFixed in
jellyfin/jellyfin:10.10.317c3a8d9dddb
glibc@2.36-9+deb12u9
2.36-9+deb12u14

Open the chart page →

4,105
nextcloudsb-helm-charts0.4.01 of 2See more

nextcloud sb-helm-charts 0.4.0

1 of the 2 container images this version deploys carry CVE-2026-4438.

Container imageDigestPackageFixed in
library/nextcloud:31.0.10-apacheb7faa1653c39
glibc@2.41-12
2.41-12+deb13u3

Open the chart page →

9,755
phpmyadminsb-helm-charts0.3.01 of 1See more

phpmyadmin sb-helm-charts 0.3.0

1 of the 1 container images this version deploys carry CVE-2026-4438.

Container imageDigestPackageFixed in
library/phpmyadmin:5.2.16e75aa8f767c
glibc@2.36-9+deb12u9
2.36-9+deb12u14

Open the chart page →

5,315
postgresqlsb-helm-charts0.4.01 of 1See more

postgresql sb-helm-charts 0.4.0

1 of the 1 container images this version deploys carry CVE-2026-4438.

Container imageDigestPackageFixed in
library/postgres:16.11468e1f126ca5
glibc@2.41-12+deb13u1
2.41-12+deb13u3

Open the chart page →

2,374
promtailsb-helm-charts0.4.01 of 1See more

promtail sb-helm-charts 0.4.0

1 of the 1 container images this version deploys carry CVE-2026-4438.

Container imageDigestPackageFixed in
grafana/promtail:3.6.18dcfdf466da0
glibc@2.39-0ubuntu8.6
2.39-0ubuntu8.8

Open the chart page →

2,202
rsshubsb-helm-charts0.3.01 of 1See more

rsshub sb-helm-charts 0.3.0

1 of the 1 container images this version deploys carry CVE-2026-4438.

Container imageDigestPackageFixed in
diygod/rsshub:2025-11-097a6312cac0d5
glibc@2.36-9+deb12u13
2.36-9+deb12u14

Open the chart page →

4,684
vaultwardensb-helm-charts0.4.01 of 1See more

vaultwarden sb-helm-charts 0.4.0

1 of the 1 container images this version deploys carry CVE-2026-4438.

Container imageDigestPackageFixed in
vaultwarden/server:1.34.384fd8a47f58d
glibc@2.36-9+deb12u10
2.36-9+deb12u14

Open the chart page →

3,318
wordpresssb-helm-charts0.4.02 of 2See more

wordpress sb-helm-charts 0.4.0

2 of the 2 container images this version deploys carry CVE-2026-4438.

Container imageDigestPackageFixed in
library/mysql:8.0-debian9382e4f6f7f0
glibc@2.36-9+deb12u13
2.36-9+deb12u14
library/wordpress:6.4.3-apache8ae66efb09a2
glibc@2.36-9+deb12u4
2.36-9+deb12u14

Open the chart page →

13,510
factorioschichtelVerified publisher0.1.11 of 1See more

factorio schichtel 0.1.1

1 of the 1 container images this version deploys carry CVE-2026-4438.

Container imageDigestPackageFixed in
factoriotools/factorio:2.0.67-rootlessf7909f7361d6
glibc@2.41-12
2.41-12+deb13u3

Open the chart page →

2,971
photonschichtelVerified publisher0.2.01 of 1See more

photon schichtel 0.2.0

1 of the 1 container images this version deploys carry CVE-2026-4438.

Container imageDigestPackageFixed in
rtuszik/photon-docker:2.4.021549c60f9e6
glibc@2.39-0ubuntu8.6
2.39-0ubuntu8.8

Open the chart page →

2,816
wordpressschichtelVerified publisher0.10.101 of 2See more

wordpress schichtel 0.10.10

1 of the 2 container images this version deploys carry CVE-2026-4438.

Container imageDigestPackageFixed in
nginxinc/nginx-unprivileged:1.29.5c5b989ebc150
glibc@2.41-12+deb13u2
2.41-12+deb13u3

Open the chart page →

8,184
snipeitschmitzis6.1.01 of 2See more

snipeit schmitzis 6.1.0

1 of the 2 container images this version deploys carry CVE-2026-4438.

Container imageDigestPackageFixed in
snipe/snipe-it:v8.3.1141ebf2386fe
glibc@2.39-0ubuntu8.5
2.39-0ubuntu8.8

Open the chart page →

6,094
jellyfinschoolguys-helmcharts0.4.21 of 1See more

jellyfin schoolguys-helmcharts 0.4.2

1 of the 1 container images this version deploys carry CVE-2026-4438.

Container imageDigestPackageFixed in
jellyfin/jellyfin:10.11.81694ff069f0c
glibc@2.41-12+deb13u2
2.41-12+deb13u3

Open the chart page →

3,001
unboundschoolguys-helmcharts0.1.11 of 1See more

unbound schoolguys-helmcharts 0.1.1

1 of the 1 container images this version deploys carry CVE-2026-4438.

Container imageDigestPackageFixed in
mvance/unbound:1.20.04bf67b567f39
glibc@2.36-9+deb12u7
2.36-9+deb12u14

Open the chart page →

3,103
sealed-secrets-uisealed-secrets-uiVerified publisher0.0.81 of 1See more

sealed-secrets-ui sealed-secrets-ui 0.0.8

1 of the 1 container images this version deploys carry CVE-2026-4438.

Container imageDigestPackageFixed in
ghcr.io/noahburrell0/sealed-secrets-ui:v0.1.47e7368fb472d
glibc@2.36-9+deb12u9
2.36-9+deb12u14

Open the chart page →

4,707
postgresself-hosters-by-nightVerified publisher0.14.31 of 1See more

postgres self-hosters-by-night 0.14.3

1 of the 1 container images this version deploys carry CVE-2026-4438.

Container imageDigestPackageFixed in
library/postgres:18.11090bc3a8ccf
glibc@2.41-12+deb13u1
2.41-12+deb13u3

Open the chart page →

2,374
serviceexampleserviceexample-chart0.3.01 of 4See more

serviceexample serviceexample-chart 0.3.0

1 of the 4 container images this version deploys carry CVE-2026-4438.

Container imageDigestPackageFixed in
tibyandocker/serviceexample:latesta4ad592cea84
glibc@2.36-9+deb12u13
2.36-9+deb12u14

Open the chart page →

3,928
service-exampleservice-example-jt0.1.11 of 9See more

service-example service-example-jt 0.1.1

1 of the 9 container images this version deploys carry CVE-2026-4438.

Container imageDigestPackageFixed in
janzo83/serviceexample:latestfb3c4ac36f3e
glibc@2.36-9+deb12u13
2.36-9+deb12u14

Open the chart page →

7,157
first-chartshashkist-test0.1.01 of 3See more

first-chart shashkist-test 0.1.0

1 of the 3 container images this version deploys carry CVE-2026-4438.

Container imageDigestPackageFixed in
shashkist/flask-contacts-app:latest581de1fd6084
glibc@2.36-9+deb12u9
2.36-9+deb12u14

Open the chart page →

3,045
showroom-docs-mcpshowroom-docs-mcpVerified publisher2.1.01 of 4See more

showroom-docs-mcp showroom-docs-mcp 2.1.0

1 of the 4 container images this version deploys carry CVE-2026-4438.

Container imageDigestPackageFixed in
litellm/litellm-non_root:v1.82.3-stable09b217802ded
glibc@2.43-r2
2.43-r4

Open the chart page →

5,201
shulker-operatorshulker-operator0.13.01 of 1See more

shulker-operator shulker-operator 0.13.0

1 of the 1 container images this version deploys carry CVE-2026-4438.

Container imageDigestPackageFixed in
ghcr.io/jeremylvln/shulker-operator:0.13.027c55706c126
glibc@2.36-9+deb12u10
2.36-9+deb12u14

Open the chart page →

879
counter-dhlsikademo0.3.01 of 3See more

counter-dhl sikademo 0.3.0

1 of the 3 container images this version deploys carry CVE-2026-4438.

Container imageDigestPackageFixed in
ghcr.io/ondrejsika/counter-frontend:latestc4166d2eb8eb
glibc@2.36-9+deb12u13
2.36-9+deb12u14

Open the chart page →

4,820
mongosyncsinextraVerified publisher0.4.01 of 1See more

mongosync sinextra 0.4.0

1 of the 1 container images this version deploys carry CVE-2026-4438.

Container imageDigestPackageFixed in
ghcr.io/sergelogvinov/mongosync:1.15.0fa99ed475f03
glibc@2.39-0ubuntu8.5
2.39-0ubuntu8.8

Open the chart page →

2,815
yopasssky-sailVerified publisher1.3.12 of 2See more

yopass sky-sail 1.3.1

2 of the 2 container images this version deploys carry CVE-2026-4438.

Container imageDigestPackageFixed in
jhaals/yopass:12.5.0916a1cf45d36
glibc@2.36-9+deb12u13
2.36-9+deb12u14
library/memcached:1.6.409ae868852d0b
glibc@2.41-12
2.41-12+deb13u3

Open the chart page →

2,986
slothsloth0.16.01 of 2See more

sloth sloth 0.16.0

1 of the 2 container images this version deploys carry CVE-2026-4438.

Container imageDigestPackageFixed in
registry.k8s.io/git-sync/git-sync:v4.5.00e64aedb0d0a
glibc@2.41-12
2.41-12+deb13u3

Open the chart page →

3,962
mealiesmarthallVerified publisher0.0.101 of 1See more

mealie smarthall 0.0.10

1 of the 1 container images this version deploys carry CVE-2026-4438.

Container imageDigestPackageFixed in
ghcr.io/mealie-recipes/mealie:v1.4.0b56da41cf178
glibc@2.36-9+deb12u4
2.36-9+deb12u14

Open the chart page →

5,565
cost-analyzersoftonic2.5.51 of 6See more

cost-analyzer softonic 2.5.5

1 of the 6 container images this version deploys carry CVE-2026-4438.

Container imageDigestPackageFixed in
gcr.io/kubecost1/frontend:prod-2.5.5991c1465c658
glibc@2.40-r23
2.43-r4

Open the chart page →

7,901
spacecapybara-chartspacecapy1.0.491 of 2See more

spacecapybara-chart spacecapy 1.0.49

1 of the 2 container images this version deploys carry CVE-2026-4438.

Container imageDigestPackageFixed in
sashafefler/spacecapybara_app:latestf96d7804c0ca
glibc@2.36-9+deb12u8
2.36-9+deb12u14

Open the chart page →

11,888
datadogspartan0.1.01 of 1See more

datadog spartan 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-4438.

Container imageDigestPackageFixed in
gcr.io/datadoghq/cluster-agent:7.61.06efe04ba4e06
glibc@2.39-0ubuntu8.3
2.39-0ubuntu8.8

Open the chart page →

3,232
speckle-preview-service-branch-testing6speckleVerified publisher2.23.14-branch.testing6.334655-b4e04ee1 of 1See more

speckle-preview-service-branch-testing6 speckle 2.23.14-branch.testing6.334655-b4e04ee

1 of the 1 container images this version deploys carry CVE-2026-4438.

Container imageDigestPackageFixed in
speckle/speckle-preview-service:2.23.14-branch.testing6.334655-b4e04ee6dee853ba74a
glibc@2.36-9+deb12u7
2.36-9+deb12u14

Open the chart page →

5,950
speckle-server-branch-hotfix-2.19.1speckleVerified publisher2.19.2-branch.hotfix-2.19.1.124125-665e7e15 of 5See more

speckle-server-branch-hotfix-2.19.1 speckle 2.19.2-branch.hotfix-2.19.1.124125-665e7e1

5 of the 5 container images this version deploys carry CVE-2026-4438.

Container imageDigestPackageFixed in
speckle/speckle-frontend-2:2.19.2-branch.hotfix-2.19.1.124125-665e7e14f9241665ae3
glibc@2.36-9+deb12u7
2.36-9+deb12u14
speckle/speckle-monitor-deployment:2.19.2-branch.hotfix-2.19.1.124125-665e7e1b696ac5022ab
glibc@2.36-9+deb12u7
2.36-9+deb12u14
speckle/speckle-preview-service:2.19.2-branch.hotfix-2.19.1.124125-665e7e1c102b087481a
glibc@2.36-9+deb12u7
2.36-9+deb12u14
speckle/speckle-server:2.19.2-branch.hotfix-2.19.1.124125-665e7e14b6a0750d5aa
glibc@2.36-9+deb12u7
2.36-9+deb12u14
speckle/speckle-webhook-service:2.19.2-branch.hotfix-2.19.1.124125-665e7e14828aee2277c
glibc@2.36-9+deb12u7
2.36-9+deb12u14

Open the chart page →

16,368
speckle-server-branch-hotfix-2.20.2speckleVerified publisher2.20.3-branch.hotfix-2.20.2.149555-37ea0cb5 of 5See more

speckle-server-branch-hotfix-2.20.2 speckle 2.20.3-branch.hotfix-2.20.2.149555-37ea0cb

5 of the 5 container images this version deploys carry CVE-2026-4438.

Container imageDigestPackageFixed in
speckle/speckle-frontend-2:2.20.3-branch.hotfix-2.20.2.149555-37ea0cbfdc008effc7a
glibc@2.36-9+deb12u7
2.36-9+deb12u14
speckle/speckle-monitor-deployment:2.20.3-branch.hotfix-2.20.2.149555-37ea0cb2faf1508c1d3
glibc@2.36-9+deb12u7
2.36-9+deb12u14
speckle/speckle-preview-service:2.20.3-branch.hotfix-2.20.2.149555-37ea0cbd3da0a84de98
glibc@2.36-9+deb12u7
2.36-9+deb12u14
speckle/speckle-server:2.20.3-branch.hotfix-2.20.2.149555-37ea0cb52f8eabf5cea
glibc@2.36-9+deb12u7
2.36-9+deb12u14
speckle/speckle-webhook-service:2.20.3-branch.hotfix-2.20.2.149555-37ea0cb107c63336ab5
glibc@2.36-9+deb12u7
2.36-9+deb12u14

Open the chart page →

16,400
speckle-server-branch-testingspeckleVerified publisher2.17.14-branch.testing.72707.921a5f84 of 5See more

speckle-server-branch-testing speckle 2.17.14-branch.testing.72707.921a5f8

4 of the 5 container images this version deploys carry CVE-2026-4438.

Container imageDigestPackageFixed in
speckle/speckle-monitor-deployment:2.17.14-branch.testing.72707.921a5f8ff1641ac3f1b
glibc@2.36-9+deb12u3
2.36-9+deb12u14
speckle/speckle-preview-service:2.17.14-branch.testing.72707.921a5f884fc39bca0c8
glibc@2.36-9+deb12u3
2.36-9+deb12u14
speckle/speckle-server:2.17.14-branch.testing.72707.921a5f849d10dcdfb91
glibc@2.36-9+deb12u3
2.36-9+deb12u14
speckle/speckle-webhook-service:2.17.14-branch.testing.72707.921a5f899913052b72e
glibc@2.36-9+deb12u3
2.36-9+deb12u14

Open the chart page →

14,679
speckle-server-branch-testing1speckleVerified publisher2.20.6-branch.testing1.154030-9b091145 of 5See more

speckle-server-branch-testing1 speckle 2.20.6-branch.testing1.154030-9b09114

5 of the 5 container images this version deploys carry CVE-2026-4438.

Container imageDigestPackageFixed in
speckle/speckle-frontend-2:2.20.6-branch.testing1.154030-9b0911432fc940d9b4c
glibc@2.36-9+deb12u7
2.36-9+deb12u14
speckle/speckle-monitor-deployment:2.20.6-branch.testing1.154030-9b09114738c77eb6f97
glibc@2.36-9+deb12u7
2.36-9+deb12u14
speckle/speckle-preview-service:2.20.6-branch.testing1.154030-9b091148f3c1ea153ba
glibc@2.36-9+deb12u7
2.36-9+deb12u14
speckle/speckle-server:2.20.6-branch.testing1.154030-9b09114e8413f57b327
glibc@2.36-9+deb12u7
2.36-9+deb12u14
speckle/speckle-webhook-service:2.20.6-branch.testing1.154030-9b09114cf1d99bad89a
glibc@2.36-9+deb12u7
2.36-9+deb12u14

Open the chart page →

16,400
speckle-server-branch-testing2speckleVerified publisher2.18.11-branch.testing2.88634-335d4694 of 5See more

speckle-server-branch-testing2 speckle 2.18.11-branch.testing2.88634-335d469

4 of the 5 container images this version deploys carry CVE-2026-4438.

Container imageDigestPackageFixed in
speckle/speckle-monitor-deployment:2.18.11-branch.testing2.88634-335d469d6790a97ad47
glibc@2.36-9+deb12u4
2.36-9+deb12u14
speckle/speckle-preview-service:2.18.11-branch.testing2.88634-335d4694bd113093583
glibc@2.36-9+deb12u4
2.36-9+deb12u14
speckle/speckle-server:2.18.11-branch.testing2.88634-335d469bf6a501b2210
glibc@2.36-9+deb12u4
2.36-9+deb12u14
speckle/speckle-webhook-service:2.18.11-branch.testing2.88634-335d469902b98ad5327
glibc@2.36-9+deb12u4
2.36-9+deb12u14

Open the chart page →

14,221
speckle-server-branch-testing3speckleVerified publisher2.18.12-branch.testing3.88744-f55b3414 of 5See more

speckle-server-branch-testing3 speckle 2.18.12-branch.testing3.88744-f55b341

4 of the 5 container images this version deploys carry CVE-2026-4438.

Container imageDigestPackageFixed in
speckle/speckle-monitor-deployment:2.18.12-branch.testing3.88744-f55b34181335b40696a
glibc@2.36-9+deb12u4
2.36-9+deb12u14
speckle/speckle-preview-service:2.18.12-branch.testing3.88744-f55b3414bd113093583
glibc@2.36-9+deb12u4
2.36-9+deb12u14
speckle/speckle-server:2.18.12-branch.testing3.88744-f55b34189a5872375f9
glibc@2.36-9+deb12u4
2.36-9+deb12u14
speckle/speckle-webhook-service:2.18.12-branch.testing3.88744-f55b341771f872cfa63
glibc@2.36-9+deb12u4
2.36-9+deb12u14

Open the chart page →

14,221
speckle-server-branch-testing4speckleVerified publisher2.20.2-branch.testing4.134160-9fad4b25 of 5See more

speckle-server-branch-testing4 speckle 2.20.2-branch.testing4.134160-9fad4b2

5 of the 5 container images this version deploys carry CVE-2026-4438.

Container imageDigestPackageFixed in
speckle/speckle-frontend-2:2.20.2-branch.testing4.134160-9fad4b210ad4ade8bf2
glibc@2.36-9+deb12u7
2.36-9+deb12u14
speckle/speckle-monitor-deployment:2.20.2-branch.testing4.134160-9fad4b23c8fbe855665
glibc@2.36-9+deb12u7
2.36-9+deb12u14
speckle/speckle-preview-service:2.20.2-branch.testing4.134160-9fad4b21f897ca906ea
glibc@2.36-9+deb12u7
2.36-9+deb12u14
speckle/speckle-server:2.20.2-branch.testing4.134160-9fad4b2687f43ab16f3
glibc@2.36-9+deb12u7
2.36-9+deb12u14
speckle/speckle-webhook-service:2.20.2-branch.testing4.134160-9fad4b270f5167d1d4d
glibc@2.36-9+deb12u7
2.36-9+deb12u14

Open the chart page →

16,019
speckle-server-branch-testing5speckleVerified publisher2.21.3-branch.testing5.219631-2153bef5 of 5See more

speckle-server-branch-testing5 speckle 2.21.3-branch.testing5.219631-2153bef

5 of the 5 container images this version deploys carry CVE-2026-4438.

Container imageDigestPackageFixed in
speckle/speckle-frontend-2:2.21.3-branch.testing5.219631-2153befd4ca6ebf09b9
glibc@2.36-9+deb12u7
2.36-9+deb12u14
speckle/speckle-monitor-deployment:2.21.3-branch.testing5.219631-2153befcf72ad0f25fb
glibc@2.36-9+deb12u7
2.36-9+deb12u14
speckle/speckle-preview-service:2.21.3-branch.testing5.219631-2153bef52cad5e3293e
glibc@2.36-9+deb12u7
2.36-9+deb12u14
speckle/speckle-server:2.21.3-branch.testing5.219631-2153bef8fd157733393
glibc@2.36-9+deb12u7
2.36-9+deb12u14
speckle/speckle-webhook-service:2.21.3-branch.testing5.219631-2153bef06ecc7a66a40
glibc@2.36-9+deb12u7
2.36-9+deb12u14

Open the chart page →

15,635
speckle-server-branch-testing6speckleVerified publisher2.25.10-branch.testing6.645-b125c1e4 of 4See more

speckle-server-branch-testing6 speckle 2.25.10-branch.testing6.645-b125c1e

4 of the 4 container images this version deploys carry CVE-2026-4438.

Container imageDigestPackageFixed in
speckle/speckle-monitor-deployment:2.25.10-branch.testing6.645-b125c1e2dbc553ed87c
glibc@2.36-9+deb12u7
2.36-9+deb12u14
speckle/speckle-preview-service:2.25.10-branch.testing6.645-b125c1e787adcb20a3a
glibc@2.36-9+deb12u7
2.36-9+deb12u14
speckle/speckle-server:2.25.10-branch.testing6.645-b125c1e75cdf256067b
glibc@2.36-9+deb12u10
2.36-9+deb12u14
speckle/speckle-webhook-service:2.25.10-branch.testing6.645-b125c1edd9db6cbe9bb
glibc@2.36-9+deb12u7
2.36-9+deb12u14

Open the chart page →

11,100
ocean-network-clientspot1.1.61 of 1See more

ocean-network-client spot 1.1.6

1 of the 1 container images this version deploys carry CVE-2026-4438.

Container imageDigestPackageFixed in
public.ecr.aws/spotinst/spot-network-client:1.0.1486380a01587d
glibc@2.39-0ubuntu8.7
2.39-0ubuntu8.8

Open the chart page →

2,220
squadsquadVerified publisher0.1.111 of 1See more

squad squad 0.1.11

1 of the 1 container images this version deploys carry CVE-2026-4438.

Container imageDigestPackageFixed in
cm2network/squad:latest8cba47f53df5
glibc@2.41-12+deb13u1
2.41-12+deb13u3

Open the chart page →

2,487
servicexssl-hep1.8.51 of 16See more

servicex ssl-hep 1.8.5

1 of the 16 container images this version deploys carry CVE-2026-4438.

Container imageDigestPackageFixed in
ncsa/checks:main0b738bbc8d70
glibc@2.41-12
2.41-12+deb13u3

Open the chart page →

66,266
stakefishstakefish0.1.01 of 8See more

stakefish stakefish 0.1.0

1 of the 8 container images this version deploys carry CVE-2026-4438.

Container imageDigestPackageFixed in
thongngo3301/stakefish:latesta341af5976e3
glibc@2.36-9+deb12u1
2.36-9+deb12u14

Open the chart page →

20,223
erigonstakewise2.61.21 of 3See more

erigon stakewise 2.61.2

1 of the 3 container images this version deploys carry CVE-2026-4438.

Container imageDigestPackageFixed in
erigontech/erigon:v2.61.288706754b627
glibc@2.36-9+deb12u9
2.36-9+deb12u14

Open the chart page →

2,938
lodestar-validatorstakewise1.2.01 of 1See more

lodestar-validator stakewise 1.2.0

1 of the 1 container images this version deploys carry CVE-2026-4438.

Container imageDigestPackageFixed in
chainsafe/lodestar:v1.27.07b9fe4aa8073
glibc@2.36-9+deb12u9
2.36-9+deb12u14

Open the chart page →

4,052
nethermindstakewise2.8.21 of 3See more

nethermind stakewise 2.8.2

1 of the 3 container images this version deploys carry CVE-2026-4438.

Container imageDigestPackageFixed in
nethermind/nethermind:1.31.893e57917371a
glibc@2.39-0ubuntu8.4
2.39-0ubuntu8.8

Open the chart page →

2,031
ssv-nodestakewise2.2.01 of 2See more

ssv-node stakewise 2.2.0

1 of the 2 container images this version deploys carry CVE-2026-4438.

Container imageDigestPackageFixed in
bloxstaking/ssv-node:v2.2.0bf6d7d2fdc93
glibc@2.36-9+deb12u9
2.36-9+deb12u14

Open the chart page →

6,779
teku-validatorstakewise4.3.21 of 2See more

teku-validator stakewise 4.3.2

1 of the 2 container images this version deploys carry CVE-2026-4438.

Container imageDigestPackageFixed in
consensys/teku:25.4.1bf6ecd2ea716
glibc@2.39-0ubuntu8.4
2.39-0ubuntu8.8

Open the chart page →

3,153

Container images carrying it

1,155 by charts deploying them

A fixed version is listed for 3 of the 4 affected packages.

Container imageDigestPackageFixed inUsed by
bitnamilegacy/postgresql-repmgr:17.6.0-debian-12-r2f12387ec882b
glibc@2.36-9+deb12u10
2.36-9+deb12u14
2
bitnamilegacy/redis:latest5927ff3702df
glibc@2.36-9+deb12u10
2.36-9+deb12u14
2
bitnamilegacy/valkey-cluster:8.1.3-debian-12-r332869e769b7e
glibc@2.36-9+deb12u10
2.36-9+deb12u14
2
blockstack/stacks-core:3.2.0.0.0f79944317326
glibc@2.36-9+deb12u10
2.36-9+deb12u14
2
cfssl/cfssl:latest:v1.6.5c9018c2ddf0b
glibc@2.36-9+deb12u4
2.36-9+deb12u14
2
chromedp/headless-shell:148.0.7778.97313ed7255ae1
glibc@2.41-12+deb13u2
2.41-12+deb13u3
2
fireflyiii/core:version-6.5.9fe4ecec4c2ba
glibc@2.41-12+deb13u2
2.41-12+deb13u3
2
fireflyiii/data-importer:version-2.2.3ab52bf932546
glibc@2.41-12+deb13u2
2.41-12+deb13u3
2
gisaia/arlas-permissions-server:28.0.0e612fc722e02
glibc@2.41-12+deb13u2
2.41-12+deb13u3
2
gisaia/arlas-persistence-server:28.0.0f667e0ee79be
glibc@2.41-12+deb13u2
2.41-12+deb13u3
2
gisaia/arlas-server:28.0.04e693e7b6f37
glibc@2.41-12+deb13u2
2.41-12+deb13u3
2
gjeanmart/safe-ganache-node:latest926264c8f2d1
glibc@2.36-9
2.36-9+deb12u14
2
grafana/alloy:v1.8.17790f6f7fbd8
glibc@2.39-0ubuntu8.4
2.39-0ubuntu8.8
2
grafana/alloy:v1.12.2f94b1c82957a
glibc@2.39-0ubuntu8.6
2.39-0ubuntu8.8
2
hjacobs/kube-downscaler:23.2.0-6-gc9b88e84b2147f47425
glibc@2.36-9
2.36-9+deb12u14
2
ilum/marquez:0.54.06e1d709d41f8
glibc@2.36-9+deb12u13
2.36-9+deb12u14
2
istio/install-cni:1.24.2-distrolessaef4825e110f
glibc@2.40-r3
2.43-r4
2
istio/ztunnel:1.24.2-distroless3e475eb88965
glibc@2.40-r3
2.43-r4
2
jenkins/jenkins:2.426.1-jdk11b470bcdc4ecd
glibc@2.36-9+deb12u3
2.36-9+deb12u14
2
jenkins/jenkins:2.541.3-jdk21c4098086090c
glibc@2.41-12
2.41-12+deb13u3
2
kurento/kurento-media-server:latest03c0d34d0828
glibc@2.39-0ubuntu8.6
2.39-0ubuntu8.8
2
langgenius/dify-sandbox:0.2.009b7e8705673
glibc@2.36-9+deb12u6
2.36-9+deb12u14
2
library/elasticsearch:8.19.1289729a95066a
glibc@2.39-0ubuntu8.7
2.39-0ubuntu8.8
2
library/influxdb:2.7b8d940ca9376
glibc@2.36-9+deb12u13
2.36-9+deb12u14
2
library/mariadb:12.0.2:12.0-noble607835cd628b
glibc@2.39-0ubuntu8.6
2.39-0ubuntu8.8
2
library/mongo:8.0.20098862b1339f
glibc@2.39-0ubuntu8.7
2.39-0ubuntu8.8
2
library/nginx:latest6e23479198b9
glibc@2.41-12+deb13u2
2.41-12+deb13u3
2
library/nginx:1.27.098f8ec75657d
glibc@2.36-9+deb12u7
2.36-9+deb12u14
2
library/nginx:1.29.49dd288848f44
glibc@2.41-12+deb13u1
2.41-12+deb13u3
2
library/phpmyadmin:5.2.16e75aa8f767c
glibc@2.36-9+deb12u9
2.36-9+deb12u14
2
library/postgres:16.109f23e02d766
glibc@2.36-9+deb12u4
2.36-9+deb12u14
2
library/postgres:18.11090bc3a8ccf
glibc@2.41-12+deb13u1
2.41-12+deb13u3
2
library/postgres:16.24aea012537ed
glibc@2.36-9+deb12u6
2.36-9+deb12u14
2
library/postgres:18.06f3e42ad37de
glibc@2.41-12
2.41-12+deb13u3
2
library/postgres:16.4e62fbf9d3e2b
glibc@2.36-9+deb12u9
2.36-9+deb12u14
2
library/python:3.7eedf63967cdb
glibc@2.36-9+deb12u1
2.36-9+deb12u14
2
library/rabbitmq:4.1.0-management935b3f84c1e4
glibc@2.39-0ubuntu8.4
2.39-0ubuntu8.8
2
library/redis:7.2.3a7cee7c8178f
glibc@2.36-9+deb12u3
2.36-9+deb12u14
2
library/redis:8.2.2f0957bcaa75f
glibc@2.36-9+deb12u13
2.36-9+deb12u14
2
library/wordpress:6.8.3-apache:6.8-apache30bff39330d1
glibc@2.41-12
2.41-12+deb13u3
2
locustio/locust:2.32.2a0d4b88e42c1
glibc@2.36-9+deb12u8
2.36-9+deb12u14
2
louislam/uptime-kuma:2.3.29aeb4e51d038
glibc@2.36-9+deb12u13
2.36-9+deb12u14
2
mattermost/mattermost-team-edition:10.11.2b8bd1246cb3a
glibc@2.36-9+deb12u10
2.36-9+deb12u14
2
moreillon/group-manager-front:v3.3.1c9f85db3baa5
glibc@2.36-9+deb12u7
2.36-9+deb12u14
2
moreillon/user-manager:v5.0.2e1c9bfab5c16
glibc@2.36-9+deb12u3
2.36-9+deb12u14
2
moreillon/user-manager-front:v5.0.3b067dbbbb6af
glibc@2.36-9+deb12u3
2.36-9+deb12u14
2
obolnetwork/charon:v1.10.0278c7e2897b6
glibc@2.41-12+deb13u2
2.41-12+deb13u3
2
opea/embedding-tei:1.05c9639de61c1
glibc@2.36-9+deb12u8
2.36-9+deb12u14
2
opea/reranking-tei:1.0e48613afb191
glibc@2.36-9+deb12u8
2.36-9+deb12u14
2
opea/retriever-redis:1.0eb746b263705
glibc@2.36-9+deb12u8
2.36-9+deb12u14
2

syft 1.42.1 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.