StackRadar

CVE-2026-4438

Medium

Advisory

Published 20 Mar 2026In the index since 5 Sept 2026
Severity
Medium
worst across findings
CVSS
5.4
base score, highest
EPSS
0.003
24th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
988
of 17,787 indexed, latest versions
Container images
1,155
deployed by those charts
Fix available
3 of 4
affected packages

CVE-2026-4438 affecting package glibc for versions less than 2.38-19

Carried by container images the latest versions of 988 of 17,787 indexed charts deploy, on 1,155 images.

Affected packageAffected versionsFixed inImages
glibcdeb2.36-9, 2.36-9+deb12u1, 2.36-9+deb12u3, 2.36-9+deb12u4+19 more2.36-9+deb12u14, 2.39-0ubuntu8.8, 2.41-12+deb13u2+e2, 2.41-12+deb13u31,125
glibcapk2.37-r7, 2.38-r6, 2.39-r7, 2.40-r1+7 more2.43-r420
eglibcdeb2.19-0ubuntu6.3, 2.19-0ubuntu6.6, 2.19-0ubuntu6.13, 2.19-0ubuntu6.14+1 moreno fix listed7
glibcrpm2.38-16.azl3, 2.38-18.azl32.38-193
OSV records
CGA-3jvw-cpqx-f8w2DEBIAN-CVE-2026-4438UBUNTU-CVE-2026-4438AZL-80282ECHO-49d5-1f6e-5068
Also known as
CGA-44m8-5gw6-5qvv, CGA-4w93-3fmj-w88c, CGA-5h5q-3r3v-xr9g, CGA-722r-222x-hhhf, CGA-7fmh-pg32-8pv7, CGA-c53j-fx2j-57cf, CGA-c8r4-qhfx-5jqj, CGA-fg6j-4w5q-pjf3, CGA-j3f7-h2g8-xp9q, CGA-p954-rwjw-2p5h, CGA-pfmv-47h7-9x9v, CGA-q89h-5j3w-f3m5, CGA-wf74-v63j-cxxf, CGA-wrpj-h6wm-4267, CGA-x9rq-r5hh-4fjj, USN-8611-1

Charts affected

988 by stars
ChartLatestAffected imagesRadar Score
speedtestsantisbon0.1.02 of 3See more

speedtest santisbon 0.1.0

2 of the 3 container images this version deploys carry CVE-2026-4438.

Container imageDigestPackageFixed in
library/influxdb:2.7b8d940ca9376
glibc@2.36-9+deb12u13
2.36-9+deb12u14
santisbon/speedtest:latest8ee3a1697227
glibc@2.36-9+deb12u1
2.36-9+deb12u14

Open the chart page →

12,668
airflowsb-helm-charts0.3.01 of 1See more

airflow sb-helm-charts 0.3.0

1 of the 1 container images this version deploys carry CVE-2026-4438.

Container imageDigestPackageFixed in
apache/airflow:2.8.1e5560ad0b86e
glibc@2.36-9+deb12u4
2.36-9+deb12u14

Open the chart page →

10,209
jellyfinsb-helm-charts0.4.01 of 1See more

jellyfin sb-helm-charts 0.4.0

1 of the 1 container images this version deploys carry CVE-2026-4438.

Container imageDigestPackageFixed in
jellyfin/jellyfin:10.10.317c3a8d9dddb
glibc@2.36-9+deb12u9
2.36-9+deb12u14

Open the chart page →

4,105
nextcloudsb-helm-charts0.4.01 of 2See more

nextcloud sb-helm-charts 0.4.0

1 of the 2 container images this version deploys carry CVE-2026-4438.

Container imageDigestPackageFixed in
library/nextcloud:31.0.10-apacheb7faa1653c39
glibc@2.41-12
2.41-12+deb13u3

Open the chart page →

9,755
phpmyadminsb-helm-charts0.3.01 of 1See more

phpmyadmin sb-helm-charts 0.3.0

1 of the 1 container images this version deploys carry CVE-2026-4438.

Container imageDigestPackageFixed in
library/phpmyadmin:5.2.16e75aa8f767c
glibc@2.36-9+deb12u9
2.36-9+deb12u14

Open the chart page →

5,315
postgresqlsb-helm-charts0.4.01 of 1See more

postgresql sb-helm-charts 0.4.0

1 of the 1 container images this version deploys carry CVE-2026-4438.

Container imageDigestPackageFixed in
library/postgres:16.11468e1f126ca5
glibc@2.41-12+deb13u1
2.41-12+deb13u3

Open the chart page →

2,374
promtailsb-helm-charts0.4.01 of 1See more

promtail sb-helm-charts 0.4.0

1 of the 1 container images this version deploys carry CVE-2026-4438.

Container imageDigestPackageFixed in
grafana/promtail:3.6.18dcfdf466da0
glibc@2.39-0ubuntu8.6
2.39-0ubuntu8.8

Open the chart page →

2,202
rsshubsb-helm-charts0.3.01 of 1See more

rsshub sb-helm-charts 0.3.0

1 of the 1 container images this version deploys carry CVE-2026-4438.

Container imageDigestPackageFixed in
diygod/rsshub:2025-11-097a6312cac0d5
glibc@2.36-9+deb12u13
2.36-9+deb12u14

Open the chart page →

4,684
vaultwardensb-helm-charts0.4.01 of 1See more

vaultwarden sb-helm-charts 0.4.0

1 of the 1 container images this version deploys carry CVE-2026-4438.

Container imageDigestPackageFixed in
vaultwarden/server:1.34.384fd8a47f58d
glibc@2.36-9+deb12u10
2.36-9+deb12u14

Open the chart page →

3,318
wordpresssb-helm-charts0.4.02 of 2See more

wordpress sb-helm-charts 0.4.0

2 of the 2 container images this version deploys carry CVE-2026-4438.

Container imageDigestPackageFixed in
library/mysql:8.0-debian9382e4f6f7f0
glibc@2.36-9+deb12u13
2.36-9+deb12u14
library/wordpress:6.4.3-apache8ae66efb09a2
glibc@2.36-9+deb12u4
2.36-9+deb12u14

Open the chart page →

13,510
factorioschichtelVerified publisher0.1.11 of 1See more

factorio schichtel 0.1.1

1 of the 1 container images this version deploys carry CVE-2026-4438.

Container imageDigestPackageFixed in
factoriotools/factorio:2.0.67-rootlessf7909f7361d6
glibc@2.41-12
2.41-12+deb13u3

Open the chart page →

2,971
photonschichtelVerified publisher0.2.01 of 1See more

photon schichtel 0.2.0

1 of the 1 container images this version deploys carry CVE-2026-4438.

Container imageDigestPackageFixed in
rtuszik/photon-docker:2.4.021549c60f9e6
glibc@2.39-0ubuntu8.6
2.39-0ubuntu8.8

Open the chart page →

2,816
wordpressschichtelVerified publisher0.10.101 of 2See more

wordpress schichtel 0.10.10

1 of the 2 container images this version deploys carry CVE-2026-4438.

Container imageDigestPackageFixed in
nginxinc/nginx-unprivileged:1.29.5c5b989ebc150
glibc@2.41-12+deb13u2
2.41-12+deb13u3

Open the chart page →

8,184
snipeitschmitzis6.1.01 of 2See more

snipeit schmitzis 6.1.0

1 of the 2 container images this version deploys carry CVE-2026-4438.

Container imageDigestPackageFixed in
snipe/snipe-it:v8.3.1141ebf2386fe
glibc@2.39-0ubuntu8.5
2.39-0ubuntu8.8

Open the chart page →

6,094
jellyfinschoolguys-helmcharts0.4.21 of 1See more

jellyfin schoolguys-helmcharts 0.4.2

1 of the 1 container images this version deploys carry CVE-2026-4438.

Container imageDigestPackageFixed in
jellyfin/jellyfin:10.11.81694ff069f0c
glibc@2.41-12+deb13u2
2.41-12+deb13u3

Open the chart page →

3,001
unboundschoolguys-helmcharts0.1.11 of 1See more

unbound schoolguys-helmcharts 0.1.1

1 of the 1 container images this version deploys carry CVE-2026-4438.

Container imageDigestPackageFixed in
mvance/unbound:1.20.04bf67b567f39
glibc@2.36-9+deb12u7
2.36-9+deb12u14

Open the chart page →

3,103
sealed-secrets-uisealed-secrets-uiVerified publisher0.0.81 of 1See more

sealed-secrets-ui sealed-secrets-ui 0.0.8

1 of the 1 container images this version deploys carry CVE-2026-4438.

Container imageDigestPackageFixed in
ghcr.io/noahburrell0/sealed-secrets-ui:v0.1.47e7368fb472d
glibc@2.36-9+deb12u9
2.36-9+deb12u14

Open the chart page →

4,707
postgresself-hosters-by-nightVerified publisher0.14.31 of 1See more

postgres self-hosters-by-night 0.14.3

1 of the 1 container images this version deploys carry CVE-2026-4438.

Container imageDigestPackageFixed in
library/postgres:18.11090bc3a8ccf
glibc@2.41-12+deb13u1
2.41-12+deb13u3

Open the chart page →

2,374
serviceexampleserviceexample-chart0.3.01 of 4See more

serviceexample serviceexample-chart 0.3.0

1 of the 4 container images this version deploys carry CVE-2026-4438.

Container imageDigestPackageFixed in
tibyandocker/serviceexample:latesta4ad592cea84
glibc@2.36-9+deb12u13
2.36-9+deb12u14

Open the chart page →

3,928
service-exampleservice-example-jt0.1.11 of 9See more

service-example service-example-jt 0.1.1

1 of the 9 container images this version deploys carry CVE-2026-4438.

Container imageDigestPackageFixed in
janzo83/serviceexample:latestfb3c4ac36f3e
glibc@2.36-9+deb12u13
2.36-9+deb12u14

Open the chart page →

7,157
first-chartshashkist-test0.1.01 of 3See more

first-chart shashkist-test 0.1.0

1 of the 3 container images this version deploys carry CVE-2026-4438.

Container imageDigestPackageFixed in
shashkist/flask-contacts-app:latest581de1fd6084
glibc@2.36-9+deb12u9
2.36-9+deb12u14

Open the chart page →

3,045
showroom-docs-mcpshowroom-docs-mcpVerified publisher2.1.01 of 4See more

showroom-docs-mcp showroom-docs-mcp 2.1.0

1 of the 4 container images this version deploys carry CVE-2026-4438.

Container imageDigestPackageFixed in
litellm/litellm-non_root:v1.82.3-stable09b217802ded
glibc@2.43-r2
2.43-r4

Open the chart page →

5,201
shulker-operatorshulker-operator0.13.01 of 1See more

shulker-operator shulker-operator 0.13.0

1 of the 1 container images this version deploys carry CVE-2026-4438.

Container imageDigestPackageFixed in
ghcr.io/jeremylvln/shulker-operator:0.13.027c55706c126
glibc@2.36-9+deb12u10
2.36-9+deb12u14

Open the chart page →

879
counter-dhlsikademo0.3.01 of 3See more

counter-dhl sikademo 0.3.0

1 of the 3 container images this version deploys carry CVE-2026-4438.

Container imageDigestPackageFixed in
ghcr.io/ondrejsika/counter-frontend:latestc4166d2eb8eb
glibc@2.36-9+deb12u13
2.36-9+deb12u14

Open the chart page →

4,820
mongosyncsinextraVerified publisher0.4.01 of 1See more

mongosync sinextra 0.4.0

1 of the 1 container images this version deploys carry CVE-2026-4438.

Container imageDigestPackageFixed in
ghcr.io/sergelogvinov/mongosync:1.15.0fa99ed475f03
glibc@2.39-0ubuntu8.5
2.39-0ubuntu8.8

Open the chart page →

2,815
yopasssky-sailVerified publisher1.3.12 of 2See more

yopass sky-sail 1.3.1

2 of the 2 container images this version deploys carry CVE-2026-4438.

Container imageDigestPackageFixed in
jhaals/yopass:12.5.0916a1cf45d36
glibc@2.36-9+deb12u13
2.36-9+deb12u14
library/memcached:1.6.409ae868852d0b
glibc@2.41-12
2.41-12+deb13u3

Open the chart page →

2,986
slothsloth0.16.01 of 2See more

sloth sloth 0.16.0

1 of the 2 container images this version deploys carry CVE-2026-4438.

Container imageDigestPackageFixed in
registry.k8s.io/git-sync/git-sync:v4.5.00e64aedb0d0a
glibc@2.41-12
2.41-12+deb13u3

Open the chart page →

3,962
mealiesmarthallVerified publisher0.0.101 of 1See more

mealie smarthall 0.0.10

1 of the 1 container images this version deploys carry CVE-2026-4438.

Container imageDigestPackageFixed in
ghcr.io/mealie-recipes/mealie:v1.4.0b56da41cf178
glibc@2.36-9+deb12u4
2.36-9+deb12u14

Open the chart page →

5,565
cost-analyzersoftonic2.5.51 of 6See more

cost-analyzer softonic 2.5.5

1 of the 6 container images this version deploys carry CVE-2026-4438.

Container imageDigestPackageFixed in
gcr.io/kubecost1/frontend:prod-2.5.5991c1465c658
glibc@2.40-r23
2.43-r4

Open the chart page →

7,901
spacecapybara-chartspacecapy1.0.491 of 2See more

spacecapybara-chart spacecapy 1.0.49

1 of the 2 container images this version deploys carry CVE-2026-4438.

Container imageDigestPackageFixed in
sashafefler/spacecapybara_app:latestf96d7804c0ca
glibc@2.36-9+deb12u8
2.36-9+deb12u14

Open the chart page →

11,888
datadogspartan0.1.01 of 1See more

datadog spartan 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-4438.

Container imageDigestPackageFixed in
gcr.io/datadoghq/cluster-agent:7.61.06efe04ba4e06
glibc@2.39-0ubuntu8.3
2.39-0ubuntu8.8

Open the chart page →

3,232
speckle-preview-service-branch-testing6speckleVerified publisher2.23.14-branch.testing6.334655-b4e04ee1 of 1See more

speckle-preview-service-branch-testing6 speckle 2.23.14-branch.testing6.334655-b4e04ee

1 of the 1 container images this version deploys carry CVE-2026-4438.

Container imageDigestPackageFixed in
speckle/speckle-preview-service:2.23.14-branch.testing6.334655-b4e04ee6dee853ba74a
glibc@2.36-9+deb12u7
2.36-9+deb12u14

Open the chart page →

5,950
speckle-server-branch-hotfix-2.19.1speckleVerified publisher2.19.2-branch.hotfix-2.19.1.124125-665e7e15 of 5See more

speckle-server-branch-hotfix-2.19.1 speckle 2.19.2-branch.hotfix-2.19.1.124125-665e7e1

5 of the 5 container images this version deploys carry CVE-2026-4438.

Container imageDigestPackageFixed in
speckle/speckle-frontend-2:2.19.2-branch.hotfix-2.19.1.124125-665e7e14f9241665ae3
glibc@2.36-9+deb12u7
2.36-9+deb12u14
speckle/speckle-monitor-deployment:2.19.2-branch.hotfix-2.19.1.124125-665e7e1b696ac5022ab
glibc@2.36-9+deb12u7
2.36-9+deb12u14
speckle/speckle-preview-service:2.19.2-branch.hotfix-2.19.1.124125-665e7e1c102b087481a
glibc@2.36-9+deb12u7
2.36-9+deb12u14
speckle/speckle-server:2.19.2-branch.hotfix-2.19.1.124125-665e7e14b6a0750d5aa
glibc@2.36-9+deb12u7
2.36-9+deb12u14
speckle/speckle-webhook-service:2.19.2-branch.hotfix-2.19.1.124125-665e7e14828aee2277c
glibc@2.36-9+deb12u7
2.36-9+deb12u14

Open the chart page →

16,368
speckle-server-branch-hotfix-2.20.2speckleVerified publisher2.20.3-branch.hotfix-2.20.2.149555-37ea0cb5 of 5See more

speckle-server-branch-hotfix-2.20.2 speckle 2.20.3-branch.hotfix-2.20.2.149555-37ea0cb

5 of the 5 container images this version deploys carry CVE-2026-4438.

Container imageDigestPackageFixed in
speckle/speckle-frontend-2:2.20.3-branch.hotfix-2.20.2.149555-37ea0cbfdc008effc7a
glibc@2.36-9+deb12u7
2.36-9+deb12u14
speckle/speckle-monitor-deployment:2.20.3-branch.hotfix-2.20.2.149555-37ea0cb2faf1508c1d3
glibc@2.36-9+deb12u7
2.36-9+deb12u14
speckle/speckle-preview-service:2.20.3-branch.hotfix-2.20.2.149555-37ea0cbd3da0a84de98
glibc@2.36-9+deb12u7
2.36-9+deb12u14
speckle/speckle-server:2.20.3-branch.hotfix-2.20.2.149555-37ea0cb52f8eabf5cea
glibc@2.36-9+deb12u7
2.36-9+deb12u14
speckle/speckle-webhook-service:2.20.3-branch.hotfix-2.20.2.149555-37ea0cb107c63336ab5
glibc@2.36-9+deb12u7
2.36-9+deb12u14

Open the chart page →

16,400
speckle-server-branch-testingspeckleVerified publisher2.17.14-branch.testing.72707.921a5f84 of 5See more

speckle-server-branch-testing speckle 2.17.14-branch.testing.72707.921a5f8

4 of the 5 container images this version deploys carry CVE-2026-4438.

Container imageDigestPackageFixed in
speckle/speckle-monitor-deployment:2.17.14-branch.testing.72707.921a5f8ff1641ac3f1b
glibc@2.36-9+deb12u3
2.36-9+deb12u14
speckle/speckle-preview-service:2.17.14-branch.testing.72707.921a5f884fc39bca0c8
glibc@2.36-9+deb12u3
2.36-9+deb12u14
speckle/speckle-server:2.17.14-branch.testing.72707.921a5f849d10dcdfb91
glibc@2.36-9+deb12u3
2.36-9+deb12u14
speckle/speckle-webhook-service:2.17.14-branch.testing.72707.921a5f899913052b72e
glibc@2.36-9+deb12u3
2.36-9+deb12u14

Open the chart page →

14,679
speckle-server-branch-testing1speckleVerified publisher2.20.6-branch.testing1.154030-9b091145 of 5See more

speckle-server-branch-testing1 speckle 2.20.6-branch.testing1.154030-9b09114

5 of the 5 container images this version deploys carry CVE-2026-4438.

Container imageDigestPackageFixed in
speckle/speckle-frontend-2:2.20.6-branch.testing1.154030-9b0911432fc940d9b4c
glibc@2.36-9+deb12u7
2.36-9+deb12u14
speckle/speckle-monitor-deployment:2.20.6-branch.testing1.154030-9b09114738c77eb6f97
glibc@2.36-9+deb12u7
2.36-9+deb12u14
speckle/speckle-preview-service:2.20.6-branch.testing1.154030-9b091148f3c1ea153ba
glibc@2.36-9+deb12u7
2.36-9+deb12u14
speckle/speckle-server:2.20.6-branch.testing1.154030-9b09114e8413f57b327
glibc@2.36-9+deb12u7
2.36-9+deb12u14
speckle/speckle-webhook-service:2.20.6-branch.testing1.154030-9b09114cf1d99bad89a
glibc@2.36-9+deb12u7
2.36-9+deb12u14

Open the chart page →

16,400
speckle-server-branch-testing2speckleVerified publisher2.18.11-branch.testing2.88634-335d4694 of 5See more

speckle-server-branch-testing2 speckle 2.18.11-branch.testing2.88634-335d469

4 of the 5 container images this version deploys carry CVE-2026-4438.

Container imageDigestPackageFixed in
speckle/speckle-monitor-deployment:2.18.11-branch.testing2.88634-335d469d6790a97ad47
glibc@2.36-9+deb12u4
2.36-9+deb12u14
speckle/speckle-preview-service:2.18.11-branch.testing2.88634-335d4694bd113093583
glibc@2.36-9+deb12u4
2.36-9+deb12u14
speckle/speckle-server:2.18.11-branch.testing2.88634-335d469bf6a501b2210
glibc@2.36-9+deb12u4
2.36-9+deb12u14
speckle/speckle-webhook-service:2.18.11-branch.testing2.88634-335d469902b98ad5327
glibc@2.36-9+deb12u4
2.36-9+deb12u14

Open the chart page →

14,221
speckle-server-branch-testing3speckleVerified publisher2.18.12-branch.testing3.88744-f55b3414 of 5See more

speckle-server-branch-testing3 speckle 2.18.12-branch.testing3.88744-f55b341

4 of the 5 container images this version deploys carry CVE-2026-4438.

Container imageDigestPackageFixed in
speckle/speckle-monitor-deployment:2.18.12-branch.testing3.88744-f55b34181335b40696a
glibc@2.36-9+deb12u4
2.36-9+deb12u14
speckle/speckle-preview-service:2.18.12-branch.testing3.88744-f55b3414bd113093583
glibc@2.36-9+deb12u4
2.36-9+deb12u14
speckle/speckle-server:2.18.12-branch.testing3.88744-f55b34189a5872375f9
glibc@2.36-9+deb12u4
2.36-9+deb12u14
speckle/speckle-webhook-service:2.18.12-branch.testing3.88744-f55b341771f872cfa63
glibc@2.36-9+deb12u4
2.36-9+deb12u14

Open the chart page →

14,221
speckle-server-branch-testing4speckleVerified publisher2.20.2-branch.testing4.134160-9fad4b25 of 5See more

speckle-server-branch-testing4 speckle 2.20.2-branch.testing4.134160-9fad4b2

5 of the 5 container images this version deploys carry CVE-2026-4438.

Container imageDigestPackageFixed in
speckle/speckle-frontend-2:2.20.2-branch.testing4.134160-9fad4b210ad4ade8bf2
glibc@2.36-9+deb12u7
2.36-9+deb12u14
speckle/speckle-monitor-deployment:2.20.2-branch.testing4.134160-9fad4b23c8fbe855665
glibc@2.36-9+deb12u7
2.36-9+deb12u14
speckle/speckle-preview-service:2.20.2-branch.testing4.134160-9fad4b21f897ca906ea
glibc@2.36-9+deb12u7
2.36-9+deb12u14
speckle/speckle-server:2.20.2-branch.testing4.134160-9fad4b2687f43ab16f3
glibc@2.36-9+deb12u7
2.36-9+deb12u14
speckle/speckle-webhook-service:2.20.2-branch.testing4.134160-9fad4b270f5167d1d4d
glibc@2.36-9+deb12u7
2.36-9+deb12u14

Open the chart page →

16,019
speckle-server-branch-testing5speckleVerified publisher2.21.3-branch.testing5.219631-2153bef5 of 5See more

speckle-server-branch-testing5 speckle 2.21.3-branch.testing5.219631-2153bef

5 of the 5 container images this version deploys carry CVE-2026-4438.

Container imageDigestPackageFixed in
speckle/speckle-frontend-2:2.21.3-branch.testing5.219631-2153befd4ca6ebf09b9
glibc@2.36-9+deb12u7
2.36-9+deb12u14
speckle/speckle-monitor-deployment:2.21.3-branch.testing5.219631-2153befcf72ad0f25fb
glibc@2.36-9+deb12u7
2.36-9+deb12u14
speckle/speckle-preview-service:2.21.3-branch.testing5.219631-2153bef52cad5e3293e
glibc@2.36-9+deb12u7
2.36-9+deb12u14
speckle/speckle-server:2.21.3-branch.testing5.219631-2153bef8fd157733393
glibc@2.36-9+deb12u7
2.36-9+deb12u14
speckle/speckle-webhook-service:2.21.3-branch.testing5.219631-2153bef06ecc7a66a40
glibc@2.36-9+deb12u7
2.36-9+deb12u14

Open the chart page →

15,635
speckle-server-branch-testing6speckleVerified publisher2.25.10-branch.testing6.645-b125c1e4 of 4See more

speckle-server-branch-testing6 speckle 2.25.10-branch.testing6.645-b125c1e

4 of the 4 container images this version deploys carry CVE-2026-4438.

Container imageDigestPackageFixed in
speckle/speckle-monitor-deployment:2.25.10-branch.testing6.645-b125c1e2dbc553ed87c
glibc@2.36-9+deb12u7
2.36-9+deb12u14
speckle/speckle-preview-service:2.25.10-branch.testing6.645-b125c1e787adcb20a3a
glibc@2.36-9+deb12u7
2.36-9+deb12u14
speckle/speckle-server:2.25.10-branch.testing6.645-b125c1e75cdf256067b
glibc@2.36-9+deb12u10
2.36-9+deb12u14
speckle/speckle-webhook-service:2.25.10-branch.testing6.645-b125c1edd9db6cbe9bb
glibc@2.36-9+deb12u7
2.36-9+deb12u14

Open the chart page →

11,100
ocean-network-clientspot1.1.61 of 1See more

ocean-network-client spot 1.1.6

1 of the 1 container images this version deploys carry CVE-2026-4438.

Container imageDigestPackageFixed in
public.ecr.aws/spotinst/spot-network-client:1.0.1486380a01587d
glibc@2.39-0ubuntu8.7
2.39-0ubuntu8.8

Open the chart page →

2,220
squadsquadVerified publisher0.1.111 of 1See more

squad squad 0.1.11

1 of the 1 container images this version deploys carry CVE-2026-4438.

Container imageDigestPackageFixed in
cm2network/squad:latest8cba47f53df5
glibc@2.41-12+deb13u1
2.41-12+deb13u3

Open the chart page →

2,487
servicexssl-hep1.8.51 of 16See more

servicex ssl-hep 1.8.5

1 of the 16 container images this version deploys carry CVE-2026-4438.

Container imageDigestPackageFixed in
ncsa/checks:main0b738bbc8d70
glibc@2.41-12
2.41-12+deb13u3

Open the chart page →

66,266
stakefishstakefish0.1.01 of 8See more

stakefish stakefish 0.1.0

1 of the 8 container images this version deploys carry CVE-2026-4438.

Container imageDigestPackageFixed in
thongngo3301/stakefish:latesta341af5976e3
glibc@2.36-9+deb12u1
2.36-9+deb12u14

Open the chart page →

20,223
erigonstakewise2.61.21 of 3See more

erigon stakewise 2.61.2

1 of the 3 container images this version deploys carry CVE-2026-4438.

Container imageDigestPackageFixed in
erigontech/erigon:v2.61.288706754b627
glibc@2.36-9+deb12u9
2.36-9+deb12u14

Open the chart page →

2,938
lodestar-validatorstakewise1.2.01 of 1See more

lodestar-validator stakewise 1.2.0

1 of the 1 container images this version deploys carry CVE-2026-4438.

Container imageDigestPackageFixed in
chainsafe/lodestar:v1.27.07b9fe4aa8073
glibc@2.36-9+deb12u9
2.36-9+deb12u14

Open the chart page →

4,052
nethermindstakewise2.8.21 of 3See more

nethermind stakewise 2.8.2

1 of the 3 container images this version deploys carry CVE-2026-4438.

Container imageDigestPackageFixed in
nethermind/nethermind:1.31.893e57917371a
glibc@2.39-0ubuntu8.4
2.39-0ubuntu8.8

Open the chart page →

2,031
ssv-nodestakewise2.2.01 of 2See more

ssv-node stakewise 2.2.0

1 of the 2 container images this version deploys carry CVE-2026-4438.

Container imageDigestPackageFixed in
bloxstaking/ssv-node:v2.2.0bf6d7d2fdc93
glibc@2.36-9+deb12u9
2.36-9+deb12u14

Open the chart page →

6,779
teku-validatorstakewise4.3.21 of 2See more

teku-validator stakewise 4.3.2

1 of the 2 container images this version deploys carry CVE-2026-4438.

Container imageDigestPackageFixed in
consensys/teku:25.4.1bf6ecd2ea716
glibc@2.39-0ubuntu8.4
2.39-0ubuntu8.8

Open the chart page →

3,153

Container images carrying it

1,155 by charts deploying them

A fixed version is listed for 3 of the 4 affected packages.

Container imageDigestPackageFixed inUsed by
bitnamilegacy/postgresql:17.6.0-debian-12-r4926356130b77
glibc@2.36-9+deb12u10
2.36-9+deb12u14
11
library/rabbitmq:3.13-management:3-managemente582c0bc7766
glibc@2.39-0ubuntu8.6
2.39-0ubuntu8.8
8
bitnamilegacy/postgresql:17.5.0:latest42a8200d3597
glibc@2.36-9+deb12u10
2.36-9+deb12u14
6
bitnamilegacy/rabbitmq:4.1.3:4.1.3-debian-12-r19e635efba431
glibc@2.36-9+deb12u10
2.36-9+deb12u14
6
bitnamilegacy/redis:8.2.1-debian-12-r025bf63f3caf7
glibc@2.36-9+deb12u10
2.36-9+deb12u14
6
quay.io/devtron/devtron-utils:dup-chart-repo-v1.1.095d6f0e05636
glibc@2.36-9+deb12u3
2.36-9+deb12u14
6
quay.io/devtron/postgres:14.91b594392f7cb
glibc@2.36-9+deb12u3
2.36-9+deb12u14
6
bitnamilegacy/kubectl:1.29.2c74b703deed2
glibc@2.36-9+deb12u4
2.36-9+deb12u14
5
library/postgres:122f2a8c2a7d10
glibc@2.36-9+deb12u9
2.36-9+deb12u14
5
artifacthub/postgres:latest4fd34fa635cc
glibc@2.41-12
2.41-12+deb13u3
4
bitnamilegacy/mariadb:12.0.2-debian-12-r0888cdaae3cb9
glibc@2.36-9+deb12u10
2.36-9+deb12u14
4
bitnamilegacy/mysql:9.4.0-debian-12-r1ec13e229247a
glibc@2.36-9+deb12u10
2.36-9+deb12u14
4
bitnamilegacy/postgresql:16233f361c5819
glibc@2.36-9+deb12u9
2.36-9+deb12u14
4
bitnamilegacy/postgresql:17.6.0-debian-12-r0de520acd66fc
glibc@2.36-9+deb12u10
2.36-9+deb12u14
4
bitnamilegacy/rabbitmq:4.1.2:4.1.2-debian-12-r1fac502149c40
glibc@2.36-9+deb12u10
2.36-9+deb12u14
4
cloudflare/cloudflared:2026.3.06b599ca3e974
glibc@2.41-12+deb13u1
2.41-12+deb13u3
4
library/nginx:1.27.1287ff321f9e3
glibc@2.36-9+deb12u8
2.36-9+deb12u14
4
library/postgres:134689940c6838
glibc@2.41-12
2.41-12+deb13u3
4
opea/llm-tgi:1.00c25aab3f106
glibc@2.36-9+deb12u8
2.36-9+deb12u14
4
shashkist/flask-contacts-app:latest581de1fd6084
glibc@2.36-9+deb12u9
2.36-9+deb12u14
4
valkey/valkey:9.0.2930b41430fb7
glibc@2.41-12+deb13u1
2.41-12+deb13u3
4
bitnamilegacy/kubectl:latestcd354d5b2556
glibc@2.36-9+deb12u10
2.36-9+deb12u14
3
bitnamilegacy/os-shell:12-debian-12-r5177e65e9d633e
glibc@2.36-9+deb12u10
2.36-9+deb12u14
3
bitnamilegacy/postgresql:14.13.0df6ec02e2b9a
glibc@2.36-9+deb12u9
2.36-9+deb12u14
3
dnationcloud/kubernetes-jsonnet-translator:2.0.178fed4f3c130
glibc@2.36-9+deb12u8
2.36-9+deb12u14
3
gchq/hdfs:3.3.35ec58edbb2db
glibc@2.39-0ubuntu8.1
2.39-0ubuntu8.8
3
guacamole/guacamole:1.6.0f344085e618b
glibc@2.39-0ubuntu8.4
2.39-0ubuntu8.8
3
library/nginx:1.25:1.25.5a484819eb602
glibc@2.36-9+deb12u7
2.36-9+deb12u14
3
ghcr.io/bat-bs/bitnami-pgvector:pg1619ebe07b4daf
glibc@2.36-9+deb12u9
2.36-9+deb12u14
3
ghcr.io/conductionnl/gateway-ui:stag6a5594b7b32c
glibc@2.36-9
2.36-9+deb12u14
3
ghcr.io/huggingface/text-embeddings-inference:cpu-1.50502794a4d86
glibc@2.36-9+deb12u7
2.36-9+deb12u14
3
ghcr.io/smarter-project/hydra/crismux:main673d5229df1f
glibc@2.36-9+deb12u13
2.36-9+deb12u14
3
quay.io/devtron/ai-agent:0.0.16545dac92173
glibc@2.36-9+deb12u8
2.36-9+deb12u14
3
quay.io/devtron/casbin:172ef62b-9450794d-464-394225bf041aacadd
glibc@2.39-0ubuntu8.3
2.39-0ubuntu8.8
3
quay.io/devtron/chart-sync:94237c18-1021-3941960566529446a
glibc@2.39-0ubuntu8.3
2.39-0ubuntu8.8
3
quay.io/devtron/chart-sync:3b3d6d0e-836-39296721b5c9634d4
glibc@2.39-0ubuntu8.3
2.39-0ubuntu8.8
3
quay.io/devtron/devtron:9450794d-930-394159795f3f9f031
glibc@2.39-0ubuntu8.3
2.39-0ubuntu8.8
3
quay.io/devtron/hyperion:0874dcaf-280-3928701d5d8c4cecb
glibc@2.39-0ubuntu8.3
2.39-0ubuntu8.8
3
quay.io/devtron/kubelink:94237c18-314-394179d25865295af
glibc@2.39-0ubuntu8.3
2.39-0ubuntu8.8
3
quay.io/devtron/kubelink:09867a9c-564-39289ea6dd1e4ce71
glibc@2.39-0ubuntu8.3
2.39-0ubuntu8.8
3
quay.io/devtron/notifier:9804331c-372-39294709c7da19c5a
glibc@2.36-9+deb12u13
2.36-9+deb12u14
3
alazidis/kube-netlag:1.1.00e8c84152201
glibc@2.39-0ubuntu8.7
2.39-0ubuntu8.8
2
apache/druid:37.0.00116fb802786
glibc@2.36-9+deb12u13
2.36-9+deb12u14
2
apache/rocketmq:5.4.0319cd8a81ed1
glibc@2.39-0ubuntu8.7
2.39-0ubuntu8.8
2
apache/tika:2.9.2.1-fullae0b86d3c4d0
glibc@2.39-0ubuntu8.1
2.39-0ubuntu8.8
2
bitnamilegacy/elasticsearch:9.1.2-debian-12-r000176a47afa0
glibc@2.36-9+deb12u10
2.36-9+deb12u14
2
bitnamilegacy/etcd:latest99b408c15272
glibc@2.36-9+deb12u10
2.36-9+deb12u14
2
bitnamilegacy/mariadb:11.4.5-debian-12-r933ce23601fc9
glibc@2.36-9+deb12u10
2.36-9+deb12u14
2
bitnamilegacy/pgpool:4.6.3-debian-12-r0d3bf3910f148
glibc@2.36-9+deb12u10
2.36-9+deb12u14
2
bitnamilegacy/postgresql:16.4.0-debian-12-r1494bc968141e7
glibc@2.36-9+deb12u8
2.36-9+deb12u14
2

syft 1.42.1 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.