CVE-2026-5435

High

Advisory

Published 28 Apr 2026In the index since 5 Sept 2026

Severity: High; worst across findings
CVSS: 7.3; base score, highest
EPSS: 0.002; 15th percentile
CISA KEV: Not listed; no confirmed exploitation
Charts affected: 2,490; of 17,832 indexed, latest versions
Container images: 2,511; deployed by those charts
Fix available: 1 of 3; affected packages

CVE-2026-5435 affecting package glibc 2.38-21

Carried by container images the latest versions of 2,490 of 17,832 indexed charts deploy, on 2,511 images.

Affected package	Affected versions	Fixed in	Images
glibcdeb	2.23-0ubuntu5, 2.23-0ubuntu7, 2.23-0ubuntu9, 2.23-0ubuntu10+61 more	2.35-0ubuntu3.14, 2.39-0ubuntu8.8, 2.41-12+deb13u2+e5, 2.43-2ubuntu2.3	2,491
eglibcdeb	2.19-0ubuntu6.3, 2.19-0ubuntu6.6, 2.19-0ubuntu6.13, 2.19-0ubuntu6.14+1 more	no fix listed	7
glibcrpm	2.38-16.azl3, 2.38-18.azl3, 2.38-20.azl3	no fix listed	13

OSV records: DEBIAN-CVE-2026-5435 UBUNTU-CVE-2026-5435 AZL-84599 ECHO-53d2-a97b-142d
Also known as: USN-8611-1

Charts affected

2,490 by stars

Chart

Latest

Affected images

Radar Score

openlitopenlit

1.24.0

1 of 3 See more

openlit openlit 1.24.0

1 of the 3 container images this version deploys carry CVE-2026-5435.

Container image	Digest	Package	Fixed in
clickhouse/clickhouse-server :24.4.1	2e6587b81a26	glibc@2.31-0ubuntu9.15	no fix listed

Open the chart page →

5,250

openlit-controlleropenlit

0.10.0

1 of 1 See more

openlit-controller openlit 0.10.0

1 of the 1 container images this version deploys carry CVE-2026-5435.

Container image	Digest	Package	Fixed in
ghcr.io/openlit/openlit-controller :0.10.0	165efd4469ea	glibc@2.36-9+deb12u14	no fix listed

Open the chart page →

1,416

openpanelopenpanel

0.9.0

1 of 6 See more

openpanel openpanel 0.9.0

1 of the 6 container images this version deploys carry CVE-2026-5435.

Container image	Digest	Package	Fixed in
clickhouse/clickhouse-server :25.10.2.65	e019438e1e05	glibc@2.35-0ubuntu3.11	2.35-0ubuntu3.14

Open the chart page →

3,508

llm-stackopenproject-helm-charts

1.1.0

2 of 2 See more

llm-stack openproject-helm-charts 1.1.0

2 of the 2 container images this version deploys carry CVE-2026-5435.

Container image	Digest	Package	Fixed in
apache/apisix :3.16.0-ubuntu	5e47692cac00	glibc@2.39-0ubuntu8.7	2.39-0ubuntu8.8
library/python :3.12-slim	78387bc3881b	glibc@2.41-12+deb13u3	no fix listed

Open the chart page →

2,068

fineractopenshift

0.1.1

1 of 4 See more

fineract openshift 0.1.1

1 of the 4 container images this version deploys carry CVE-2026-5435.

Container image	Digest	Package	Fixed in
library/nginx :latest	abe47724e466	glibc@2.41-12+deb13u4	no fix listed

Open the chart page →

8,024

kubedb-certifiedopenshift

2026.7.10

5 of 8 See more

kubedb-certified openshift 2026.7.10

5 of the 8 container images this version deploys carry CVE-2026-5435.

Container image	Digest	Package	Fixed in
ghcr.io/kubedb/kubedb-autoscaler :v0.51.0	5d1182ac21f0	glibc@2.36-9+deb12u14	no fix listed
ghcr.io/kubedb/kubedb-crd-manager :v0.21.0	9506a6cb98d1	glibc@2.36-9+deb12u14	no fix listed
ghcr.io/kubedb/kubedb-ops-manager :v0.53.0	6d4c9fe66e4f	glibc@2.36-9+deb12u14	no fix listed
ghcr.io/kubedb/kubedb-provisioner :v0.66.0	e7041c3b41e7	glibc@2.36-9+deb12u14	no fix listed
ghcr.io/kubedb/kubedb-webhook-server :v0.42.0	f7dcade6523b	glibc@2.36-9+deb12u14	no fix listed

Open the chart page →

4,485

mattermost-team-editionopenshift

6.6.83

1 of 4 See more

mattermost-team-edition openshift 6.6.83

1 of the 4 container images this version deploys carry CVE-2026-5435.

Container image	Digest	Package	Fixed in
mattermost/mattermost-team-edition :10.11.2	b8bd1246cb3a	glibc@2.36-9+deb12u10	no fix listed

Open the chart page →

4,121

voyager-gatewayopenshift

2026.1.15

2 of 2 See more

voyager-gateway openshift 2026.1.15

2 of the 2 container images this version deploys carry CVE-2026-5435.

Container image	Digest	Package	Fixed in
ghcr.io/voyagermesh/crd-manager :v0.1.0	13fd0cccafe8	glibc@2.36-9+deb12u13	no fix listed
ghcr.io/voyagermesh/gateway :v1.6.2	23f4da194134	glibc@2.36-9+deb12u13	no fix listed

Open the chart page →

2,685

sohaopensoha

0.1.10

1 See more

soha opensoha 0.1.10

1 container image this version deploys carries CVE-2026-5435.

Container image	Digest	Package	Fixed in
pgvector/pgvector :0.8.5-pg18-trixie	9d2e61c7352b	glibc@2.41-12+deb13u3	no fix listed

Open the chart page →

—

open-vpnopenvpn

0.0.1

1 of 1 See more

open-vpn openvpn 0.0.1

1 of the 1 container images this version deploys carry CVE-2026-5435.

Container image	Digest	Package	Fixed in
ghcr.io/linuxserver/openvpn-as :version-2.8.6-916f8e7d-ubuntu18	4ee0764310e7	glibc@2.27-3ubuntu1.2	no fix listed

Open the chart page →

78,680

terminalsopen-webui

0.7.0

2 of 2 See more

terminals open-webui 0.7.0

2 of the 2 container images this version deploys carry CVE-2026-5435.

Container image	Digest	Package	Fixed in
ghcr.io/open-webui/terminals :latest	5d2fd44366a4	glibc@2.41-12+deb13u3	no fix listed
ghcr.io/open-webui/terminals-operator :latest	6287ce8be502	glibc@2.41-12+deb13u3	no fix listed

Open the chart page →

2,106

openwhiskopenwhisk

1.0.0

1 of 10 See more

openwhisk openwhisk 1.0.0

1 of the 10 container images this version deploys carry CVE-2026-5435.

Container image	Digest	Package	Fixed in
openwhisk/ow-utils :1.0.0	c80dba0de3aa	glibc@2.27-3ubuntu1.2	no fix listed

Open the chart page →

99,366

kubernetes-syncopslevel

0.8.0

1 of 1 See more

kubernetes-sync opslevel 0.8.0

1 of the 1 container images this version deploys carry CVE-2026-5435.

Container image	Digest	Package	Fixed in
public.ecr.aws/opslevel/kubectl-opslevel :v2024.9.5	71697b5ff713	glibc@2.36-9+deb12u8	no fix listed

Open the chart page →

1,753

issuegenopsmx

1.0.2

1 of 1 See more

issuegen opsmx 1.0.2

1 of the 1 container images this version deploys carry CVE-2026-5435.

Container image	Digest	Package	Fixed in
opsmx11/issuegen :v2.1.0	5c50ca123d88	eglibc@2.19-0ubuntu6.14	no fix listed

Open the chart page →

26,434

hiveopstty

0.1.9

1 of 4 See more

hive opstty 0.1.9

1 of the 4 container images this version deploys carry CVE-2026-5435.

Container image	Digest	Package	Fixed in
bitnamilegacy/postgresql :16	233f361c5819	glibc@2.36-9+deb12u9	no fix listed

Open the chart page →

4,747

grrosdfir-infrastructure

1.0.3

2 of 5 See more

grr osdfir-infrastructure 1.0.3

2 of the 5 container images this version deploys carry CVE-2026-5435.

Container image	Digest	Package	Fixed in
library/mariadb :11.3.2	e101f9db3191	glibc@2.35-0ubuntu3.7	2.35-0ubuntu3.14
ghcr.io/google/fleetspeak :v0.1.17	cd264d33efd4	glibc@2.36-9+deb12u7	no fix listed

Open the chart page →

11,107

osdfir-infrastructureosdfir-infrastructure

2.15.0

25 of 40 See more

osdfir-infrastructure osdfir-infrastructure 2.15.0

25 of the 40 container images this version deploys carry CVE-2026-5435.

Container image	Digest	Package	Fixed in
bitnamilegacy/git :latest	4b08d0c5af8d	glibc@2.36-9+deb12u10	no fix listed
chromadb/chroma :1.5.7	fc8dc8e11fb2	glibc@2.41-12+deb13u2	no fix listed
library/mariadb :11.3.2	e101f9db3191	glibc@2.35-0ubuntu3.7	2.35-0ubuntu3.14
yetiplatform/yeti :2.9.0	9bcbe2650a14	glibc@2.41-12+deb13u3	no fix listed
yetiplatform/yeti-frontend :2.9.0	873ef15d267b	glibc@2.41-12+deb13u3	no fix listed
ghcr.io/google/fleetspeak :v0.1.17	cd264d33efd4	glibc@2.36-9+deb12u7	no fix listed
ghcr.io/openrelik/openrelik-mediator :latest	42efc445b19e	glibc@2.36-9+deb12u14	no fix listed
ghcr.io/openrelik/openrelik-metrics :latest	3d0f1ddeebf5	glibc@2.36-9+deb12u13	no fix listed
ghcr.io/openrelik/openrelik-server :latest	ce1132261523	glibc@2.36-9+deb12u14	no fix listed
ghcr.io/openrelik/openrelik-worker-analyzer-config :latest	1269d3d8d2c2	glibc@2.39-0ubuntu8.7	2.39-0ubuntu8.8
ghcr.io/openrelik/openrelik-worker-analyzer-logs :latest	b175cc61959a	glibc@2.39-0ubuntu8.7	2.39-0ubuntu8.8
ghcr.io/openrelik/openrelik-worker-bulkextractor :latest	67498ee2e639	glibc@2.39-0ubuntu8.7	2.39-0ubuntu8.8
ghcr.io/openrelik/openrelik-worker-capa :latest	71323a4f3fc5	glibc@2.39-0ubuntu8.7	2.39-0ubuntu8.8
ghcr.io/openrelik/openrelik-worker-chromecreds :latest	76d4fbcc6ff0	glibc@2.39-0ubuntu8.7	2.39-0ubuntu8.8
ghcr.io/openrelik/openrelik-worker-cloud-logs :latest	a5d7e3cf71d3	glibc@2.39-0ubuntu8.7	2.39-0ubuntu8.8
ghcr.io/openrelik/openrelik-worker-containers :latest	a6d5abe94706	glibc@2.39-0ubuntu8.7	2.39-0ubuntu8.8
ghcr.io/openrelik/openrelik-worker-dfindexeddb :latest	31966a825782	glibc@2.39-0ubuntu8.7	2.39-0ubuntu8.8
ghcr.io/openrelik/openrelik-worker-extraction :latest	ec9fc5864cd5	glibc@2.39-0ubuntu8.7	2.39-0ubuntu8.8
ghcr.io/openrelik/openrelik-worker-floss :latest	7a331eb83c6a	glibc@2.39-0ubuntu8.7	2.39-0ubuntu8.8
ghcr.io/openrelik/openrelik-worker-grep :latest	470ff3529746	glibc@2.39-0ubuntu8.7	2.39-0ubuntu8.8
ghcr.io/openrelik/openrelik-worker-os-creds :latest	7fc7ec101f08	glibc@2.39-0ubuntu8.7	2.39-0ubuntu8.8
ghcr.io/openrelik/openrelik-worker-plaso :latest	75537ea8c851	glibc@2.39-0ubuntu8.7	2.39-0ubuntu8.8
ghcr.io/openrelik/openrelik-worker-strings :latest	6e05055b701f	glibc@2.39-0ubuntu8.7	2.39-0ubuntu8.8
ghcr.io/openrelik/openrelik-worker-timesketch :latest	4cb88b603cdc	glibc@2.39-0ubuntu8.7	2.39-0ubuntu8.8
ghcr.io/openrelik/openrelik-worker-yara :latest	bd7fbf4505b5	glibc@2.39-0ubuntu8.7	2.39-0ubuntu8.8

Open the chart page →

200,900

yetiosdfir-infrastructure

1.0.5

2 of 4 See more

yeti osdfir-infrastructure 1.0.5

2 of the 4 container images this version deploys carry CVE-2026-5435.

Container image	Digest	Package	Fixed in
yetiplatform/yeti :latest	9c3006cedcca	glibc@2.41-12+deb13u3	no fix listed
yetiplatform/yeti-frontend :latest	709064278c7e	glibc@2.41-12+deb13u3	no fix listed

Open the chart page →

6,893

fluent-bitot-container-kit

0.0.3

1 of 2 See more

fluent-bit ot-container-kit 0.0.3

1 of the 2 container images this version deploys carry CVE-2026-5435.

Container image	Digest	Package	Fixed in
quay.io/opstree/fluent-bit :5.0.3	391eef5a68ff	glibc@2.41-12+deb13u2	no fix listed

Open the chart page →

925

loki-standaloneot-container-kit

1.0.2

2 of 5 See more

loki-standalone ot-container-kit 1.0.2

2 of the 5 container images this version deploys carry CVE-2026-5435.

Container image	Digest	Package	Fixed in
quay.io/opstree/k8s-sidecar :2.7.1	26aa9bb3386b	glibc@2.41-12+deb13u2	no fix listed
quay.io/opstree/memcached :1.6.38-alpine3.22	cabbdfd2c3fe	glibc@2.41-12+deb13u2	no fix listed

Open the chart page →

3,661

vm-standaloneot-container-kit

0.0.4

2 of 6 See more

vm-standalone ot-container-kit 0.0.4

2 of the 6 container images this version deploys carry CVE-2026-5435.

Container image	Digest	Package	Fixed in
quay.io/opstree/grafana :12.4.3	b61c1ed2f015	glibc@2.41-12+deb13u2	no fix listed
quay.io/opstree/k8s-sidecar :2.7.3	7075d455b219	glibc@2.41-12+deb13u2	no fix listed

Open the chart page →

3,501

webot-container-kit

0.1.0

1 of 1 See more

web ot-container-kit 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-5435.

Container image	Digest	Package	Fixed in
library/nginx :latest	abe47724e466	glibc@2.41-12+deb13u4	no fix listed

Open the chart page →

1,965

workerot-container-kit

0.1.0

1 of 1 See more

worker ot-container-kit 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-5435.

Container image	Digest	Package	Fixed in
library/nginx :latest	abe47724e466	glibc@2.41-12+deb13u4	no fix listed

Open the chart page →

1,965

akash-hostname-operatorovrclk-2

11.5.1

1 of 1 See more

akash-hostname-operator ovrclk-2 11.5.1

1 of the 1 container images this version deploys carry CVE-2026-5435.

Container image	Digest	Package	Fixed in
ghcr.io/akash-network/provider :0.6.8	8c780ae8d1bb	glibc@2.39-0ubuntu8.3	2.39-0ubuntu8.8

Open the chart page →

3,561

akash-inventory-operatorovrclk-2

11.5.1

1 of 1 See more

akash-inventory-operator ovrclk-2 11.5.1

1 of the 1 container images this version deploys carry CVE-2026-5435.

Container image	Digest	Package	Fixed in
ghcr.io/akash-network/provider :0.6.8	8c780ae8d1bb	glibc@2.39-0ubuntu8.3	2.39-0ubuntu8.8

Open the chart page →

3,561

akash-ip-operatorovrclk-2

11.5.1

1 of 1 See more

akash-ip-operator ovrclk-2 11.5.1

1 of the 1 container images this version deploys carry CVE-2026-5435.

Container image	Digest	Package	Fixed in
ghcr.io/akash-network/provider :0.6.8	8c780ae8d1bb	glibc@2.39-0ubuntu8.3	2.39-0ubuntu8.8

Open the chart page →

3,561

lens-metric-proxyowan-charts

0.1.0

1 of 1 See more

lens-metric-proxy owan-charts 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-5435.

Container image	Digest	Package	Fixed in
library/nginx :stable	0aa2d81d65bc	glibc@2.41-12+deb13u4	no fix listed

Open the chart page →

1,589

automatap2p-avs

0.1.0

1 of 2 See more

automata p2p-avs 0.1.0

1 of the 2 container images this version deploys carry CVE-2026-5435.

Container image	Digest	Package	Fixed in
ghcr.io/foundry-rs/foundry :latest	0c00cb0bda1a	glibc@2.35-0ubuntu3.13	2.35-0ubuntu3.14

Open the chart page →

3,726

avap2p-avs

0.1.0

1 of 1 See more

ava p2p-avs 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-5435.

Container image	Digest	Package	Fixed in
avaprotocol/ap-avs :1.2.0	c430ea5c37d6	glibc@2.36-9+deb12u7	no fix listed

Open the chart page →

3,353

k3p2p-avs

0.1.5

1 of 2 See more

k3 p2p-avs 0.1.5

1 of the 2 container images this version deploys carry CVE-2026-5435.

Container image	Digest	Package	Fixed in
ghcr.io/foundry-rs/foundry :latest	0c00cb0bda1a	glibc@2.35-0ubuntu3.13	2.35-0ubuntu3.14

Open the chart page →

2,395

mishtip2p-avs

0.1.0

1 of 2 See more

mishti p2p-avs 0.1.0

1 of the 2 container images this version deploys carry CVE-2026-5435.

Container image	Digest	Package	Fixed in
ghcr.io/foundry-rs/foundry :latest	0c00cb0bda1a	glibc@2.35-0ubuntu3.13	2.35-0ubuntu3.14

Open the chart page →

4,110

radiusp2p-avs

0.1.0

1 of 1 See more

radius p2p-avs 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-5435.

Container image	Digest	Package	Fixed in
theradius/loggia :0.4	63ba348546ec	glibc@2.36-9+deb12u4	no fix listed

Open the chart page →

12,578

ungatep2p-avs

0.1.0

3 of 3 See more

ungate p2p-avs 0.1.0

3 of the 3 container images this version deploys carry CVE-2026-5435.

Container image	Digest	Package	Fixed in
xom4ekp2p/infini-route-attestators-public-mainnet-attester :latest	d0e0aa238b02	glibc@2.36-9+deb12u7	no fix listed
xom4ekp2p/infini-route-attestators-public-mainnet-avs-webapi :latest	2745b5fd8785	glibc@2.36-9+deb12u7	no fix listed
ghcr.io/foundry-rs/foundry :latest	0c00cb0bda1a	glibc@2.35-0ubuntu3.13	2.35-0ubuntu3.14

Open the chart page →

27,946

p4p4

0.1.0

4 of 7 See more

p4 p4 0.1.0

4 of the 7 container images this version deploys carry CVE-2026-5435.

Container image	Digest	Package	Fixed in
codeurjc/toposervice :v1.23	9fb4c11e6a49	glibc@2.27-3ubuntu1.6	no fix listed
library/mongo :5.0-focal	5e15a3f014ed	glibc@2.31-0ubuntu9.17	no fix listed
library/rabbitmq :3.11-management	c3f70098e01d	glibc@2.35-0ubuntu3.6	2.35-0ubuntu3.14
mastercloudapps/planner :v1.23	40a950b311b2	glibc@2.35-0ubuntu3.1	2.35-0ubuntu3.14