StackRadar

CVE-2026-5435

High

Advisory

Published 28 Apr 2026In the index since 5 Sept 2026
Severity
High
worst across findings
CVSS
7.3
base score, highest
EPSS
0.002
15th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
2,464
of 17,828 indexed, latest versions
Container images
2,496
deployed by those charts
Fix available
1 of 3
affected packages

CVE-2026-5435 affecting package glibc 2.38-21

Carried by container images the latest versions of 2,464 of 17,828 indexed charts deploy, on 2,496 images.

Affected packageAffected versionsFixed inImages
glibcdeb2.23-0ubuntu5, 2.23-0ubuntu7, 2.23-0ubuntu9, 2.23-0ubuntu10+60 more2.35-0ubuntu3.14, 2.39-0ubuntu8.8, 2.41-12+deb13u2+e5, 2.43-2ubuntu2.32,476
eglibcdeb2.19-0ubuntu6.3, 2.19-0ubuntu6.6, 2.19-0ubuntu6.13, 2.19-0ubuntu6.14+1 moreno fix listed7
glibcrpm2.38-16.azl3, 2.38-18.azl3, 2.38-20.azl3no fix listed13
OSV records
DEBIAN-CVE-2026-5435UBUNTU-CVE-2026-5435AZL-84599ECHO-53d2-a97b-142d
Also known as
USN-8611-1

Charts affected

2,464 by stars
ChartLatestAffected imagesRadar Score

Container images carrying it

2,496 by charts deploying them

A fixed version is listed for 1 of the 3 affected packages.

Container imageDigestPackageFixed inUsed by
geopython/pycsw:3.0.0-beta284662ea6b78b
glibc@2.36-9+deb12u13
no fix listed
1
geoscienceaustralia/dea-k8s-data:latestf4039b45572a
glibc@2.27-3ubuntu1.2
no fix listed
1
geoservercloud/geoserver-cloud-gateway:1.0-RC2ca58b74529cd
glibc@2.31-0ubuntu9.2
no fix listed
1
geoservercloud/geoserver-cloud-rest:1.0-RC25dc0c93a1710
glibc@2.31-0ubuntu9.2
no fix listed
1
geoservercloud/geoserver-cloud-wcs:1.0-RC247ae1bdb4bcc
glibc@2.31-0ubuntu9.2
no fix listed
1
geoservercloud/geoserver-cloud-webui:1.0-RC228c3e5a8c5a3
glibc@2.31-0ubuntu9.2
no fix listed
1
geoservercloud/geoserver-cloud-wfs:1.0-RC28c70ee06d5ab
glibc@2.31-0ubuntu9.2
no fix listed
1
geoservercloud/geoserver-cloud-wms:1.0-RC242775ba6a4da
glibc@2.31-0ubuntu9.2
no fix listed
1
gethue/hue:4.11.011b649636e68
glibc@2.31-0ubuntu9.9
no fix listed
1
gethue/hue:4.10.05702b2c37ff9
glibc@2.27-3ubuntu1.4
no fix listed
1
gethue/hue:latest7d5c1b9f8a79
glibc@2.35-0ubuntu3.10
2.35-0ubuntu3.14
1
getsentry/relay:24.10.0ba7bf9163219
glibc@2.36-9+deb12u8
no fix listed
1
ghostfolio/ghostfolio:3.7.0e3c6ab53e49b
glibc@2.36-9+deb12u14
no fix listed
1
ghusta/postgres-world-db:latest879d0919fdcc
glibc@2.41-12+deb13u3
no fix listed
1
gitlab/gitlab-runner:v15.3.0860d4a3fec7a
glibc@2.31-0ubuntu9.9
no fix listed
1
glasskube/operator:0.12.2be5133100d63
glibc@2.35-0ubuntu3.4
2.35-0ubuntu3.14
1
glpi/glpi:latest7b50172cdb7d
glibc@2.41-12+deb13u4
no fix listed
1
gobitfly/eth2-beaconchain-explorer:latest1d08a7986348
glibc@2.35-0ubuntu3.9
2.35-0ubuntu3.14
1
golenski/fibonacci-msg-relay:1.0.0c863dcb0c513
glibc@2.36-9+deb12u1
no fix listed
1
golenski/fibonacci-task-manager:2.0.03a2b36df247b
glibc@2.36-9+deb12u1
no fix listed
1
golenski/fibonacci-worker:2.0.0954caf4aaf6a
glibc@2.36-9+deb12u1
no fix listed
1
gopaddle/gopaddle:5.0435359250b63
glibc@2.35-0ubuntu3.8
2.35-0ubuntu3.14
1
gopinatht/ovs-plugin-installer:latest632cb2e9c399
glibc@2.23-0ubuntu10
no fix listed
1
gorules/brms:latest3cd59e25efad
glibc@2.41-12+deb13u3
no fix listed
1
gotenberg/gotenberg:8-chromium0d28ae9a9644
glibc@2.41-12+deb13u3
no fix listed
1
gotenberg/gotenberg:8.30206a6c708fc6
glibc@2.41-12+deb13u2
no fix listed
1
gotenberg/gotenberg:8.3467097317623a
glibc@2.41-12+deb13u3
no fix listed
1
gotenberg/gotenberg:8.0.1cf0b9a7ca3cf
glibc@2.36-9+deb12u3
no fix listed
1
gotson/komga:0.99.49b15ea6bfc30
glibc@2.27-3ubuntu1.2
no fix listed
1
gradiant/open5gs-dbctl:0.10.3332031245fce
glibc@2.39-0ubuntu8.4
2.39-0ubuntu8.8
1
grafana/agent:v0.44.23364714a2f64
glibc@2.39-0ubuntu8.3
2.39-0ubuntu8.8
1
grafana/alloy:v1.5.101a63f4e032c
glibc@2.39-0ubuntu8.3
2.39-0ubuntu8.8
1
grafana/alloy:v1.4.306bdcbb51fc2
glibc@2.39-0ubuntu8.3
2.39-0ubuntu8.8
1
grafana/alloy:v1.18.0491b0578c049
glibc@2.39-0ubuntu8.7
2.39-0ubuntu8.8
1
grafana/alloy:v1.16.384b76d56c594
glibc@2.39-0ubuntu8.7
2.39-0ubuntu8.8
1
grafana/alloy:v1.11.38c7256f412fe
glibc@2.39-0ubuntu8.6
2.39-0ubuntu8.8
1
grafana/alloy:v1.14.0f50931848bd8
glibc@2.39-0ubuntu8.7
2.39-0ubuntu8.8
1
grafana/beyla:1.3.336d07f8d276e
glibc@2.36-9+deb12u4
no fix listed
1
grafana/fluent-plugin-loki:latest4f0438bdebb5
glibc@2.36-9+deb12u10
no fix listed
1
grafana/loki:3.2.0882e30c20683
glibc@2.36-9+deb12u8
no fix listed
1
grafana/loki-canary:3.2.049e03f80d361
glibc@2.36-9+deb12u8
no fix listed
1
grafana/mcp-grafana:1.5.107c6614a8f8b
glibc@2.36-9+deb12u14
no fix listed
1
grafana/mcp-grafana:0.14.042f541f22063
glibc@2.36-9+deb12u13
no fix listed
1
grafana/promtail:3.5.165bfae480b57
glibc@2.39-0ubuntu8.4
2.39-0ubuntu8.8
1
grafana/promtail:3.6.18dcfdf466da0
glibc@2.39-0ubuntu8.6
2.39-0ubuntu8.8
1
graphprotocol/graph-node:latestb0436347fb24
glibc@2.36-9+deb12u9
no fix listed
1
graphprotocol/graph-node:v0.37.0f4452cdedd68
glibc@2.36-9+deb12u9
no fix listed
1
graylog/graylog:6.1.1019de1aff48c2
glibc@2.35-0ubuntu3.9
2.35-0ubuntu3.14
1
greenkube/greenkube:0.3.00c01932282a4
glibc@2.36-9+deb12u14
no fix listed
1
growthbook/growthbook:latestcbf1bc59e9a9
glibc@2.36-9+deb12u14
no fix listed
1

syft 1.42.1 · advisories as of 21 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.