StackRadar

CVE-2026-5435

High

Advisory

Published 28 Apr 2026In the index since 5 Sept 2026
Severity
High
worst across findings
CVSS
7.3
base score, highest
EPSS
0.002
15th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
2,516
of 17,828 indexed, latest versions
Container images
2,552
deployed by those charts
Fix available
1 of 3
affected packages

CVE-2026-5435 affecting package glibc 2.38-21

Carried by container images the latest versions of 2,516 of 17,828 indexed charts deploy, on 2,552 images.

Affected packageAffected versionsFixed inImages
glibcdeb2.23-0ubuntu5, 2.23-0ubuntu7, 2.23-0ubuntu9, 2.23-0ubuntu10+61 more2.35-0ubuntu3.14, 2.39-0ubuntu8.8, 2.41-12+deb13u2+e5, 2.43-2ubuntu2.32,532
eglibcdeb2.19-0ubuntu6.3, 2.19-0ubuntu6.6, 2.19-0ubuntu6.13, 2.19-0ubuntu6.14+1 moreno fix listed7
glibcrpm2.38-16.azl3, 2.38-18.azl3, 2.38-20.azl3no fix listed13
OSV records
DEBIAN-CVE-2026-5435UBUNTU-CVE-2026-5435AZL-84599ECHO-53d2-a97b-142d
Also known as
USN-8611-1

Charts affected

2,516 by stars
ChartLatestAffected imagesRadar Score
airbyteairbyte-v2Verified publisher2.3.01 of 10See more

airbyte airbyte-v2 2.3.0

1 of the 10 container images this version deploys carry CVE-2026-5435.

Container imageDigestPackageFixed in
airbyte/manifest-server:7.28.2deec511b51c3
glibc@2.36-9+deb12u13
no fix listed

Open the chart page →

12,181
akto-ai-guardrails-v2akto0.3.05 of 6See more

akto-ai-guardrails-v2 akto 0.3.0

5 of the 6 container images this version deploys carry CVE-2026-5435.

Container imageDigestPackageFixed in
aktosecurity/akto-agent-guard-anonymizer:1.1.4d4b100cbdc47
glibc@2.41-12+deb13u3
no fix listed
aktosecurity/akto-agent-guard-embedder:1.1.4dbc566b2376c
glibc@2.41-12+deb13u3
no fix listed
aktosecurity/akto-agent-guard-worker:1.1.4666eaffd5362
glibc@2.41-12+deb13u3
no fix listed
aktosecurity/data-ingestion-service:1.4.946ed5bcb04b2
glibc@2.43-2ubuntu2
2.43-2ubuntu2.3
redis/redis-stack-server:7.4.0-v172035434f455
glibc@2.35-0ubuntu3.8
2.35-0ubuntu3.14

Open the chart page →

42,635
akto-mini-runtimeakto0.7.221 of 3See more

akto-mini-runtime akto 0.7.22

1 of the 3 container images this version deploys carry CVE-2026-5435.

Container imageDigestPackageFixed in
public.ecr.aws/aktosecurity/redis:latestV8.6.2832d7785830f
glibc@2.41-12+deb13u2
no fix listed

Open the chart page →

2,687
akto-mini-runtime-shaakto0.7.231 of 3See more

akto-mini-runtime-sha akto 0.7.23

1 of the 3 container images this version deploys carry CVE-2026-5435.

Container imageDigestPackageFixed in
public.ecr.aws/aktosecurity/redisdigest-pinned47200b041382
glibc@2.36-9+deb12u13
no fix listed

Open the chart page →

3,299
akto-mini-testingakto1.45.71 of 5See more

akto-mini-testing akto 1.45.7

1 of the 5 container images this version deploys carry CVE-2026-5435.

Container imageDigestPackageFixed in
public.ecr.aws/aktosecurity/akto-ai-automated-testing:latest573542399fe4
glibc@2.36-9+deb12u14
no fix listed

Open the chart page →

6,606
akto-regional-setupakto1.4.01 of 9See more

akto-regional-setup akto 1.4.0

1 of the 9 container images this version deploys carry CVE-2026-5435.

Container imageDigestPackageFixed in
redis/redis-stack-server:7.4.072035434f455
glibc@2.35-0ubuntu3.8
2.35-0ubuntu3.14

Open the chart page →

40,759
data-ingestion-serviceakto0.1.61 of 1See more

data-ingestion-service akto 0.1.6

1 of the 1 container images this version deploys carry CVE-2026-5435.

Container imageDigestPackageFixed in
aktosecurity/data-ingestion-servicedigest-pinned213aded7adc5
glibc@2.39-0ubuntu8.6
2.39-0ubuntu8.8

Open the chart page →

57,534
cliproxyapialekcVerified publisher0.5.81 of 1See more

cliproxyapi alekc 0.5.8

1 of the 1 container images this version deploys carry CVE-2026-5435.

Container imageDigestPackageFixed in
eceasy/cli-proxy-api:v7.3.10ee21d2cc4b8f
glibc@2.36-9+deb12u14
no fix listed

Open the chart page →

1,093
esphomealekcVerified publisher2.9.01 of 1See more

esphome alekc 2.9.0

1 of the 1 container images this version deploys carry CVE-2026-5435.

Container imageDigestPackageFixed in
esphome/esphome:2026.9.09959730a04c7
glibc@2.41-12+deb13u3
no fix listed

Open the chart page →

3,242
komodoalekcVerified publisher3.1.01 of 1See more

komodo alekc 3.1.0

1 of the 1 container images this version deploys carry CVE-2026-5435.

Container imageDigestPackageFixed in
ghcr.io/moghtech/komodo-core:2.3.3bca73d0eee14
glibc@2.41-12+deb13u3
no fix listed

Open the chart page →

1,957
alertigatealertigate0.6.01 of 1See more

alertigate alertigate 0.6.0

1 of the 1 container images this version deploys carry CVE-2026-5435.

Container imageDigestPackageFixed in
ghcr.io/feresberbeche/alertigate:2.0.07b9bba80f207
glibc@2.41-12+deb13u3
no fix listed

Open the chart page →

1,361
esphomealexmorbo-esphomeVerified publisher1.0.01 of 1See more

esphome alexmorbo-esphome 1.0.0

1 of the 1 container images this version deploys carry CVE-2026-5435.

Container imageDigestPackageFixed in
esphome/esphome:2024.12.2b2c6322700ac
glibc@2.36-9+deb12u3
no fix listed

Open the chart page →

6,391
flaresolverralexmorbo-flaresolverrVerified publisher0.2.01 of 1See more

flaresolverr alexmorbo-flaresolverr 0.2.0

1 of the 1 container images this version deploys carry CVE-2026-5435.

Container imageDigestPackageFixed in
flaresolverr/flaresolverr:v3.5.0139dfee1c6f8
glibc@2.36-9+deb12u14
no fix listed

Open the chart page →

27,797
slskdalexmorbo-slskdVerified publisher0.3.01 of 1See more

slskd alexmorbo-slskd 0.3.0

1 of the 1 container images this version deploys carry CVE-2026-5435.

Container imageDigestPackageFixed in
ghcr.io/slskd/slskd:0.25.1ab9ed50e028b
glibc@2.39-0ubuntu8.7
2.39-0ubuntu8.8

Open the chart page →

1,779
tubearchivistalexmorbo-tubearchivistVerified publisher0.1.01 of 2See more

tubearchivist alexmorbo-tubearchivist 0.1.0

1 of the 2 container images this version deploys carry CVE-2026-5435.

Container imageDigestPackageFixed in
valkey/valkey:9.0.1546304417fea
glibc@2.41-12
no fix listed

Open the chart page →

1,705
nginx-sni-proxyalexpressoVerified publisher1.0.21 of 1See more

nginx-sni-proxy alexpresso 1.0.2

1 of the 1 container images this version deploys carry CVE-2026-5435.

Container imageDigestPackageFixed in
library/nginx:latestabe47724e466
glibc@2.41-12+deb13u4
no fix listed

Open the chart page →

1,589
redisalexvanderberkelVerified publisher2.2.01 of 1See more

redis alexvanderberkel 2.2.0

1 of the 1 container images this version deploys carry CVE-2026-5435.

Container imageDigestPackageFixed in
library/redis:8.2.15fa2edb1e408
glibc@2.36-9+deb12u13
no fix listed

Open the chart page →

1,900
alibaba-rsocket-brokeralibaba-rsocket-brokerVerified publisher0.1.31 of 1See more

alibaba-rsocket-broker alibaba-rsocket-broker 0.1.3

1 of the 1 container images this version deploys carry CVE-2026-5435.

Container imageDigestPackageFixed in
linuxchina/alibaba-rsocket-broker:1.1.3-k8sf758e2e567ee
glibc@2.27-3ubuntu1.5
no fix listed

Open the chart page →

89,955
allure-docker-helm-chartallure-service-chartVerified publisher0.1.01 of 2See more

allure-docker-helm-chart allure-service-chart 0.1.0

1 of the 2 container images this version deploys carry CVE-2026-5435.

Container imageDigestPackageFixed in
frankescobar/allure-docker-service:latestdc171ec796d5
glibc@2.39-0ubuntu8.7
2.39-0ubuntu8.8

Open the chart page →

3,744
katalogalpineworks0.1.21 of 5See more

katalog alpineworks 0.1.2

1 of the 5 container images this version deploys carry CVE-2026-5435.

Container imageDigestPackageFixed in
ghcr.io/alpineworks/katalog-migrations:v1.0.562c44a384e13
glibc@2.36-9+deb12u9
no fix listed

Open the chart page →

4,573
pagesalstom-pages-app1.0.02 of 3See more

pages alstom-pages-app 1.0.0

2 of the 3 container images this version deploys carry CVE-2026-5435.

Container imageDigestPackageFixed in
dellcloud/pages:monitor6ba7b22caacd
glibc@2.31-0ubuntu9.1
no fix listed
flyway/flyway:6.4.422d97ceb0c47
glibc@2.27-3ubuntu1
no fix listed

Open the chart page →

20,350
amorphieamorphie0.1.22 of 18See more

amorphie amorphie 0.1.2

2 of the 18 container images this version deploys carry CVE-2026-5435.

Container imageDigestPackageFixed in
camunda/zeebe:8.4.5ab5abc09e407
glibc@2.35-0ubuntu3.6
2.35-0ubuntu3.14
ghcr.io/camunda-community-hub/zeebe-simple-monitor:2.6.2d9d796a1b846
glibc@2.35-0ubuntu3.5
2.35-0ubuntu3.14

Open the chart page →

28,511
anchore-admission-controlleranchore-charts0.9.01 of 2See more

anchore-admission-controller anchore-charts 0.9.0

1 of the 2 container images this version deploys carry CVE-2026-5435.

Container imageDigestPackageFixed in
cfssl/cfssl:v1.6.5c9018c2ddf0b
glibc@2.36-9+deb12u4
no fix listed

Open the chart page →

7,641
music-assistant-serverandibraeuVerified publisher2.1.21 of 1See more

music-assistant-server andibraeu 2.1.2

1 of the 1 container images this version deploys carry CVE-2026-5435.

Container imageDigestPackageFixed in
ghcr.io/music-assistant/server:2.9.950666a6f8d7f
glibc@2.36-9+deb12u14
no fix listed

Open the chart page →

5,800
stalwartandibraeuVerified publisher1.0.21 of 1See more

stalwart andibraeu 1.0.2

1 of the 1 container images this version deploys carry CVE-2026-5435.

Container imageDigestPackageFixed in
stalwartlabs/stalwart:v0.16.1425001929f36a
glibc@2.41-12+deb13u3
no fix listed

Open the chart page →

1,632
pagesandrei-pages1.0.02 of 3See more

pages andrei-pages 1.0.0

2 of the 3 container images this version deploys carry CVE-2026-5435.

Container imageDigestPackageFixed in
dellcloud/pages:monitor6ba7b22caacd
glibc@2.31-0ubuntu9.1
no fix listed
flyway/flyway:6.4.422d97ceb0c47
glibc@2.27-3ubuntu1
no fix listed

Open the chart page →

20,350
omada-controllerandrelote-k8sVerified publisher4.5.01 of 1See more

omada-controller andrelote-k8s 4.5.0

1 of the 1 container images this version deploys carry CVE-2026-5435.

Container imageDigestPackageFixed in
mbentley/omada-controller:4.3f4e682274bed
glibc@2.27-3ubuntu1.6
no fix listed

Open the chart page →

11,662
mathesarandrenarchyVerified publisher1.8.01 of 1See more

mathesar andrenarchy 1.8.0

1 of the 1 container images this version deploys carry CVE-2026-5435.

Container imageDigestPackageFixed in
mathesar/mathesar:0.12.0091757cb01fe
glibc@2.36-9+deb12u14
no fix listed

Open the chart page →

7,204
speech-to-phraseandrenarchyVerified publisher1.3.01 of 1See more

speech-to-phrase andrenarchy 1.3.0

1 of the 1 container images this version deploys carry CVE-2026-5435.

Container imageDigestPackageFixed in
rhasspy/wyoming-speech-to-phrase:1.4.3e532f0dbc6b2
glibc@2.36-9+deb12u13
no fix listed

Open the chart page →

4,105
games-on-whalesangelnu2.0.04 of 7See more

games-on-whales angelnu 2.0.0

4 of the 7 container images this version deploys carry CVE-2026-5435.

Container imageDigestPackageFixed in
andrewmackrodt/firefox-x11:142.0.1-r133f9080470c9
glibc@2.35-0ubuntu3.10
2.35-0ubuntu3.14
ghcr.io/games-on-whales/pulseaudio:1.0.0f34f98405c10
glibc@2.31-0ubuntu9.2
no fix listed
ghcr.io/games-on-whales/retroarch:1.0.0103fbcec2314
glibc@2.31-0ubuntu9.2
no fix listed
ghcr.io/games-on-whales/steam:1.0.09b6105be7ad0
glibc@2.31-0ubuntu9.2
no fix listed

Open the chart page →

116,070
ansible-inspecansible-inspec0.2.171 of 2See more

ansible-inspec ansible-inspec 0.2.17

1 of the 2 container images this version deploys carry CVE-2026-5435.

Container imageDigestPackageFixed in
ghcr.io/htunn/ansible-inspec:0.2.12cd25a5cc3f1b
glibc@2.41-12+deb13u1
no fix listed

Open the chart page →

5,684
ddosifyanteonVerified publisher1.7.52 of 13See more

ddosify anteon 1.7.5

2 of the 13 container images this version deploys carry CVE-2026-5435.

Container imageDigestPackageFixed in
ddosify/selfhosted_alaz_backend:1.0.6a43c5155fa1c
glibc@2.36-9+deb12u4
no fix listed
ddosify/selfhosted_backend:2.6.11ac323d52bfb4
glibc@2.36-9+deb12u4
no fix listed

Open the chart page →

26,322
antigenic-stalwart-helm-chartantigenic-stalwart-helm-chartVerified publisher1.0.51 of 2See more

antigenic-stalwart-helm-chart antigenic-stalwart-helm-chart 1.0.5

1 of the 2 container images this version deploys carry CVE-2026-5435.

Container imageDigestPackageFixed in
stalwartlabs/stalwart:v0.15.5dcf575db2d53
glibc@2.41-12+deb13u1
no fix listed

Open the chart page →

1,486
antrea-uiantreaVerified publisher0.8.01 of 2See more

antrea-ui antrea 0.8.0

1 of the 2 container images this version deploys carry CVE-2026-5435.

Container imageDigestPackageFixed in
antrea/antrea-ui-frontend:v0.8.0ee9686bcefb8
glibc@2.41-12+deb13u2
no fix listed

Open the chart page →

3,373
glauthanza-labsVerified publisher1.0.11 of 1See more

glauth anza-labs 1.0.1

1 of the 1 container images this version deploys carry CVE-2026-5435.

Container imageDigestPackageFixed in
ghcr.io/glauth/glauth:v2.5.209c782ca5984
glibc@2.41-12+deb13u3
no fix listed

Open the chart page →

1,324
apispringbootHelmapispringboot0.1.01 of 1See more

apispringbootHelm apispringboot 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-5435.

Container imageDigestPackageFixed in
rabeh/apibootspring:1.0941007b6946e
glibc@2.35-0ubuntu3.4
2.35-0ubuntu3.14

Open the chart page →

6,341
d.vazquezm.2021_helmapphelmVerified publisher1.0.01 of 6See more

d.vazquezm.2021_helm apphelm 1.0.0

1 of the 6 container images this version deploys carry CVE-2026-5435.

Container imageDigestPackageFixed in
library/mongo:5.0.6-focal8e70544b6c76
glibc@2.31-0ubuntu9.7
no fix listed

Open the chart page →

19,835
accounts-uiappscodeVerified publisher2026.9.111 of 1See more

accounts-ui appscode 2026.9.11

1 of the 1 container images this version deploys carry CVE-2026-5435.

Container imageDigestPackageFixed in
ghcr.io/appscode/b3:v2026.9.1176d28575b71c
glibc@2.36-9+deb12u14
no fix listed

Open the chart page →

2,706
aceappscodeVerified publisher2026.9.111 of 2See more

ace appscode 2026.9.11

1 of the 2 container images this version deploys carry CVE-2026-5435.

Container imageDigestPackageFixed in
ghcr.io/appscode/b3:v2026.9.1176d28575b71c
glibc@2.36-9+deb12u14
no fix listed

Open the chart page →

3,008
ace-installerappscodeVerified publisher2026.9.111 of 2See more

ace-installer appscode 2026.9.11

1 of the 2 container images this version deploys carry CVE-2026-5435.

Container imageDigestPackageFixed in
ghcr.io/appscode/b3:v2026.9.1176d28575b71c
glibc@2.36-9+deb12u14
no fix listed

Open the chart page →

3,364
ace-installer-certifiedappscodeVerified publisher2026.9.111 of 2See more

ace-installer-certified appscode 2026.9.11

1 of the 2 container images this version deploys carry CVE-2026-5435.

Container imageDigestPackageFixed in
ghcr.io/appscode/b3:v2026.9.1178a9fb785ec5
glibc@2.36-9+deb12u14
no fix listed

Open the chart page →

3,139
billingappscodeVerified publisher2026.9.111 of 1See more

billing appscode 2026.9.11

1 of the 1 container images this version deploys carry CVE-2026-5435.

Container imageDigestPackageFixed in
ghcr.io/appscode/b3:v2026.9.1176d28575b71c
glibc@2.36-9+deb12u14
no fix listed

Open the chart page →

2,706
cert-manager-csi-driver-cacertsappscodeVerified publisher2026.9.181 of 3See more

cert-manager-csi-driver-cacerts appscode 2026.9.18

1 of the 3 container images this version deploys carry CVE-2026-5435.

Container imageDigestPackageFixed in
ghcr.io/appscode/csi-driver-cacerts:v0.6.0ab213b156017
glibc@2.36-9+deb12u14
no fix listed

Open the chart page →

2,512
crd-managerappscodeVerified publisher2026.7.211 of 1See more

crd-manager appscode 2026.7.21

1 of the 1 container images this version deploys carry CVE-2026-5435.

Container imageDigestPackageFixed in
ghcr.io/voyagermesh/crd-manager:v0.3.0e67f14e5c853
glibc@2.36-9+deb12u14
no fix listed

Open the chart page →

809
inbox-serverappscodeVerified publisher2025.12.251 of 1See more

inbox-server appscode 2025.12.25

1 of the 1 container images this version deploys carry CVE-2026-5435.

Container imageDigestPackageFixed in
ghcr.io/appscode/inbox-server:postgres-latest536358d7b17e
glibc@2.35-0ubuntu3.11
2.35-0ubuntu3.14

Open the chart page →

4,106
inbox-server-distributedappscodeVerified publisher2025.12.253 of 4See more

inbox-server-distributed appscode 2025.12.25

3 of the 4 container images this version deploys carry CVE-2026-5435.

Container imageDigestPackageFixed in
library/cassandra:4.1.37cbcec0086ac
glibc@2.35-0ubuntu3.6
2.35-0ubuntu3.14
library/rabbitmq:3.12.1-managementf020c06da226
glibc@2.35-0ubuntu3.1
2.35-0ubuntu3.14
ghcr.io/appscode/inbox-server:latest536358d7b17e
glibc@2.35-0ubuntu3.11
2.35-0ubuntu3.14

Open the chart page →

15,997
james-komposeappscodeVerified publisher0.1.03 of 4See more

james-kompose appscode 0.1.0

3 of the 4 container images this version deploys carry CVE-2026-5435.

Container imageDigestPackageFixed in
library/cassandra:4.1.37cbcec0086ac
glibc@2.35-0ubuntu3.6
2.35-0ubuntu3.14
library/rabbitmq:3.12.1-managementf020c06da226
glibc@2.35-0ubuntu3.1
2.35-0ubuntu3.14
ghcr.io/appscode/inbox-server:MailetGroup4a2824296412
glibc@2.35-0ubuntu3.6
2.35-0ubuntu3.14

Open the chart page →

17,380
kubedb-autoscalerappscodeVerified publisher0.51.01 of 1See more

kubedb-autoscaler appscode 0.51.0

1 of the 1 container images this version deploys carry CVE-2026-5435.

Container imageDigestPackageFixed in
ghcr.io/kubedb/kubedb-autoscaler:v0.51.05d1182ac21f0
glibc@2.36-9+deb12u14
no fix listed

Open the chart page →

538
kubedb-certifiedappscodeVerified publisher2026.7.105 of 8See more

kubedb-certified appscode 2026.7.10

5 of the 8 container images this version deploys carry CVE-2026-5435.

Container imageDigestPackageFixed in
ghcr.io/kubedb/kubedb-autoscaler:v0.51.05d1182ac21f0
glibc@2.36-9+deb12u14
no fix listed
ghcr.io/kubedb/kubedb-crd-manager:v0.21.09506a6cb98d1
glibc@2.36-9+deb12u14
no fix listed
ghcr.io/kubedb/kubedb-ops-manager:v0.53.06d4c9fe66e4f
glibc@2.36-9+deb12u14
no fix listed
ghcr.io/kubedb/kubedb-provisioner:v0.66.0e7041c3b41e7
glibc@2.36-9+deb12u14
no fix listed
ghcr.io/kubedb/kubedb-webhook-server:v0.42.0f7dcade6523b
glibc@2.36-9+deb12u14
no fix listed

Open the chart page →

4,485
kubedb-crd-managerappscodeVerified publisher0.21.01 of 1See more

kubedb-crd-manager appscode 0.21.0

1 of the 1 container images this version deploys carry CVE-2026-5435.

Container imageDigestPackageFixed in
ghcr.io/kubedb/kubedb-crd-manager:v0.21.09506a6cb98d1
glibc@2.36-9+deb12u14
no fix listed

Open the chart page →

522

Container images carrying it

2,552 by charts deploying them

A fixed version is listed for 1 of the 3 affected packages.

Container imageDigestPackageFixed inUsed by
registry.k8s.io/sig-storage/nfsplugin:v4.13.41eb5a85180a4
glibc@2.36-9+deb12u14
no fix listed
1
registry.k8s.io/sig-storage/nfsplugin:v4.11.0ce5b5ccd5eb0
glibc@2.36-9+deb12u10
no fix listed
1

syft 1.42.1 · advisories as of 22 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.