StackRadar

CVE-2026-5450

Critical

Advisory

Published 20 Apr 2026In the index since 5 Sept 2026
Severity
Critical
worst across findings
CVSS
9.8
base score, highest
EPSS
0.005
42nd percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
2,716
of 17,805 indexed, latest versions
Container images
2,849
deployed by those charts
Fix available
3 of 4
affected packages

Red Hat Security Advisory: glibc security, bug fix, and enhancement update

Carried by container images the latest versions of 2,716 of 17,805 indexed charts deploy, on 2,849 images.

Affected packageAffected versionsFixed inImages
glibcdeb2.23-0ubuntu5, 2.23-0ubuntu7, 2.23-0ubuntu9, 2.23-0ubuntu10+59 more2.35-0ubuntu3.14, 2.39-0ubuntu8.8, 2.41-12+deb13u2+e4, 2.41-12+deb13u4+1 more2,385
glibcapk2.37-r7, 2.38-r6, 2.39-r7, 2.40-r1+8 more2.43-r722
eglibcdeb2.19-0ubuntu6.3, 2.19-0ubuntu6.6, 2.19-0ubuntu6.13, 2.19-0ubuntu6.14+1 moreno fix listed7
glibcrpm2.17-260.el7_6.4, 2.17-260.el7_6.6, 2.17-292.el7, 2.17-307.el7.1+60 more0:2.17-326.el7_9.6, 0:2.28-251.el8_10.38, 0:2.34-272.el9_8, 0:2.39-126.el10_2435
OSV records
CGA-3qwq-5w83-3j3qDEBIAN-CVE-2026-5450UBUNTU-CVE-2026-5450RHSA-2026:33092RHSA-2026:33126RHSA-2026:33226RHSA-2026:34211RLSA-2026:33126RLSA-2026:33226AZL-83093ECHO-56eb-505f-7a61
Also known as
CGA-76f7-m58j-73wj, CGA-7x3v-c6pf-4v43, CGA-88p4-5g7h-3xrh, CGA-g425-f69f-xj8j, CGA-hq3x-5xh3-92jc, CGA-j9xg-mq3r-jh83, CGA-jgfr-5wmr-hfpc, CGA-mvj4-3q5f-wmwg, CGA-p427-94gh-pr7p, CGA-p7rp-4rm4-hg9q, CGA-qj6g-5h8p-677v, CGA-vc3j-8vcq-8pqc, CGA-vv29-hp4w-2hrw, CGA-wxx7-6vh7-9qhv, CGA-xrvh-57r4-pjhh, RHSA-2026:33227, RHSA-2026:33228, RHSA-2026:33229, RHSA-2026:33230, RHSA-2026:33231, RHSA-2026:36643, USN-8611-1

Charts affected

2,716 by stars
ChartLatestAffected imagesRadar Score
tabbyxdVerified publisher1.0.61 of 2See more

tabby xd 1.0.6

1 of the 2 container images this version deploys carry CVE-2026-5450.

Container imageDigestPackageFixed in
library/nginx:1.25a484819eb602
glibc@2.36-9+deb12u7
no fix listed

Open the chart page →

7,672
xkopsxkops0.1.03 of 5See more

xkops xkops 0.1.0

3 of the 5 container images this version deploys carry CVE-2026-5450.

Container imageDigestPackageFixed in
hamzaarshad10/querybackend:1.6.22c1c3b86a8e7
glibc@2.36-9+deb12u8
no fix listed
hamzaarshad10/querypodpy:1.7154f38e8668e
glibc@2.36-9+deb12u8
no fix listed
murtazashah46/helmfile:latest4d11726cf803
glibc@2.36-9+deb12u8
no fix listed

Open the chart page →

13,875
xlinexline0.0.11 of 1See more

xline xline 0.0.1

1 of the 1 container images this version deploys carry CVE-2026-5450.

Container imageDigestPackageFixed in
ghcr.io/liangyuanpeng/xline:latest3d2eceb44a3b
glibc@2.39-0ubuntu8.1
2.39-0ubuntu8.8

Open the chart page →

2,156
nightingalexxl-job-adminVerified publisher0.2.111See more

nightingale xxl-job-admin 0.2.11

1 container image this version deploys carries CVE-2026-5450.

Container imageDigestPackageFixed in
flashcatcloud/categraf:latest42e6ab16472e
glibc@2.39-0ubuntu8.7
2.39-0ubuntu8.8

Open the chart page →

—
pgcatxxl-job-adminVerified publisher0.3.31See more

pgcat xxl-job-admin 0.3.3

1 container image this version deploys carries CVE-2026-5450.

Container imageDigestPackageFixed in
ghcr.io/postgresml/pgcat:v1.2.0627761f6dcbc
glibc@2.36-9+deb12u7
no fix listed

Open the chart page →

—
nginx-chartxxoznge-nginx0.1.01 of 1See more

nginx-chart xxoznge-nginx 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-5450.

Container imageDigestPackageFixed in
library/nginx:latest05b8cb60c354
glibc@2.41-12+deb13u3
2.41-12+deb13u4

Open the chart page →

1,879
helm-demoyahoon-helm-demoVerified publisher1.0.01 of 1See more

helm-demo yahoon-helm-demo 1.0.0

1 of the 1 container images this version deploys carry CVE-2026-5450.

Container imageDigestPackageFixed in
ghcr.io/yahoon/helm-demo:1.0.02930290a758c
glibc@2.41-12+deb13u3
2.41-12+deb13u4

Open the chart page →

1,330
my-nginx-appyasser-nginx-app0.1.01 of 1See more

my-nginx-app yasser-nginx-app 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-5450.

Container imageDigestPackageFixed in
library/nginx:stabled5792f71a949
glibc@2.41-12+deb13u3
2.41-12+deb13u4

Open the chart page →

1,879
api-snapyoukadevVerified publisher0.1.11 of 1See more

api-snap youkadev 0.1.1

1 of the 1 container images this version deploys carry CVE-2026-5450.

Container imageDigestPackageFixed in
youkadev/api-snap:0.1.14db0f9428e67
glibc@2.36-9+deb12u4
no fix listed

Open the chart page →

2,710
zahori-schedulerzahoriVerified publisher1.0.11 of 1See more

zahori-scheduler zahori 1.0.1

1 of the 1 container images this version deploys carry CVE-2026-5450.

Container imageDigestPackageFixed in
zahoriaut/zahori-scheduler:1.0.047d0979b1184
glibc@2.27-3ubuntu1.6
no fix listed

Open the chart page →

2,477
keycloakxzaks2.2.01 of 1See more

keycloakx zaks 2.2.0

1 of the 1 container images this version deploys carry CVE-2026-5450.

Container imageDigestPackageFixed in
quay.io/keycloak/keycloak:20.0.3b8f2a453a17a
glibc@2.28-211.el8
0:2.28-251.el8_10.38

Open the chart page →

6,021
posthogzeet0.23.21 of 9See more

posthog zeet 0.23.2

1 of the 9 container images this version deploys carry CVE-2026-5450.

Container imageDigestPackageFixed in
altinity/clickhouse-operator:0.19.07a85f522c5bc
glibc@2.28-211.el8
0:2.28-251.el8_10.38

Open the chart page →

3,700
changedetection-iozekker6Verified publisher1.102.01See more

changedetection-io zekker6 1.102.0

1 container image this version deploys carries CVE-2026-5450.

Container imageDigestPackageFixed in
ghcr.io/dgtlmoon/changedetection.io:0.60.7096dae27b5d6
glibc@2.36-9+deb12u14
no fix listed

Open the chart page →

—
endlessh-gozekker6Verified publisher0.4.01 of 1See more

endlessh-go zekker6 0.4.0

1 of the 1 container images this version deploys carry CVE-2026-5450.

Container imageDigestPackageFixed in
ghcr.io/shizunge/endlessh-go:2026.0730.08826dad32623
glibc@2.41-12+deb13u3
2.41-12+deb13u4

Open the chart page →

490
NEW_APPzekker6Verified publisher0.0.01 of 1See more

NEW_APP zekker6 0.0.0

1 of the 1 container images this version deploys carry CVE-2026-5450.

Container imageDigestPackageFixed in
library/nginx:latest05b8cb60c354
glibc@2.41-12+deb13u3
2.41-12+deb13u4

Open the chart page →

1,879
clickhousezloi-space1.2.02 of 3See more

clickhouse zloi-space 1.2.0

2 of the 3 container images this version deploys carry CVE-2026-5450.

Container imageDigestPackageFixed in
yandex/clickhouse-client:21.3863f94a0f607
glibc@2.27-3ubuntu1.4
no fix listed
yandex/clickhouse-server:21.3.204eccfffb01d7
glibc@2.31-0ubuntu9.2
no fix listed

Open the chart page →

9,280

Container images carrying it

2,849 by charts deploying them

A fixed version is listed for 3 of the 4 affected packages.

Container imageDigestPackageFixed inUsed by
hiversh/python:0.1.45-3.13-alpine-microvm63a5ae179a9f
glibc@2.36-9+deb12u14
no fix listed
1
hjacobs/kube-janitor:23.7.0fbb303ed463c
glibc@2.36-9
no fix listed
1
hjacobs/kube-web-view:23.8.0431f1bf013d0
glibc@2.36-9+deb12u1
no fix listed
1
hmediade/printserver:latest481a552c8e1c
glibc@2.35-0ubuntu3.6
2.35-0ubuntu3.14
1
hmediade/printserver-init:latest7f005eb6c718
glibc@2.35-0ubuntu3.6
2.35-0ubuntu3.14
1
housewrecker/gaps:latestf417dd0a7547
glibc@2.31-0ubuntu9.7
no fix listed
1
huginn/huginn-single-process:4d17829cf6b15b004ad3f4be196303dca4944810c794eddc7b47
glibc@2.27-3ubuntu1.4
no fix listed
1
hugohg34/toposervice:0.0.2812a03b3f274
glibc@2.31-0ubuntu9.7
no fix listed
1
hyperglance/init:wildfly467ad8491bc3
glibc@2.35-0ubuntu3.13
2.35-0ubuntu3.14
1
hyperglance/init:postgres9fd5faf1fe80
glibc@2.35-0ubuntu3.13
2.35-0ubuntu3.14
1
hyperglance/init:apacheb2f8c6d52623
glibc@2.35-0ubuntu3.13
2.35-0ubuntu3.14
1
hyperledger/fabric-couchdb:0.4.10c65891b6c237
glibc@2.23-0ubuntu10
no fix listed
1
hyperledger/fabric-orderer:1.3.06ee1abcfd840
glibc@2.23-0ubuntu10
no fix listed
1
hyperledger/fabric-peer:1.3.06756c7c48234
glibc@2.23-0ubuntu10
no fix listed
1
hyperledgerk8s/fabric-operator:7776e7129a8af8be270
glibc@2.28-211.el8
0:2.28-251.el8_10.38
1
hyperledgerk8s/minio-mc:RELEASE.2023-01-28T20-29-38Z729b3d128487
glibc@2.28-211.el8
0:2.28-251.el8_10.38
1
hyperledgerk8s/minio-minio:RELEASE.2023-02-10T18-48-39Zed0b0c56f1ea
glibc@2.28-211.el8
0:2.28-251.el8_10.38
1
ibmcom/app-nav-api:1.0.1ce9d2a564273
glibc@2.17-260.el7_6.4
0:2.17-326.el7_9.6
1
ibmcom/app-nav-controller:1.0.1ee4624ba513d
glibc@2.17-260.el7_6.4
0:2.17-326.el7_9.6
1
ibmcom/app-nav-init:1.0.1240ff499eb5b
glibc@2.17-260.el7_6.4
0:2.17-326.el7_9.6
1
ibmcom/app-nav-ui:1.0.1e2a86997b36b
glibc@2.17-260.el7_6.4
0:2.17-326.el7_9.6
1
ibmcom/app-nav-was-controller:1.0.1a6748792da26
glibc@2.17-260.el7_6.6
0:2.17-326.el7_9.6
1
ibmcom/bai-admin-dev:19.0.202d882f2836e
glibc@2.17-292.el7
0:2.17-326.el7_9.6
1
ibmcom/bai-elasticsearch-dev:19.0.25441dba2fa00
glibc@2.17-292.el7
0:2.17-326.el7_9.6
1
ibmcom/bai-flink-dev:19.0.2e31ff09e8aad
glibc@2.17-292.el7
0:2.17-326.el7_9.6
1
ibmcom/bai-flink-zookeeper-dev:19.0.258548034cf55
glibc@2.17-292.el7
0:2.17-326.el7_9.6
1
ibmcom/bai-init-dev:19.0.2b138f1eac0b1
glibc@2.17-292.el7
0:2.17-326.el7_9.6
1
ibmcom/bai-setup-dev:19.0.2b8e8df11072d
glibc@2.17-292.el7
0:2.17-326.el7_9.6
1
ibmcom/ibmcloud-object-storage-driver:1.8.16c796a4c693b4
glibc@2.28-101.el8
0:2.28-251.el8_10.38
1
ibmcom/ibmcloud-object-storage-plugin:1.8.169c73804b37a3
glibc@2.28-101.el8
0:2.28-251.el8_10.38
1
ibmcom/ibm-enterprise-mongodb-ppc64le:4.4d28bf361327a
glibc@2.28-127.el8_3.2
0:2.28-251.el8_10.38
1
ibmcom/ibm-workload-scheduler-agent-dynamic-dev:9.4.0.047e4dc1e27cdf
glibc@2.23-0ubuntu10
no fix listed
1
ibmcom/icp-swift-sample:latestb5d8c6714dbc
glibc@2.23-0ubuntu10
no fix listed
1
ibmcom/microclimate-theia:lateste17bdccc5030
glibc@2.23-0ubuntu9
no fix listed
1
ibmcom/opencontent-common-utils:1.1.2cd5065df7304
glibc@2.28-42.el8_0.1
0:2.28-251.el8_10.38
1
ibmcom/skydive:0.22.0395e60cc6e3d
glibc@2.27-3ubuntu1
no fix listed
1
ibmcom/voice-gateway-mr:1.0.5.00762ab1df6c1
glibc@2.17-292.el7
0:2.17-326.el7_9.6
1
ibmcom/websphere-liberty:javaee8-ubi-min28ae40e05980
glibc@2.17-292.el7
0:2.17-326.el7_9.6
1
ildarmukhametzyanov/priceapp:0.115d23720a3ee
glibc@2.36-9+deb12u1
no fix listed
1
ilum/streamlit-example:1.0.0ce5dcdeb22ba
glibc@2.41-12
2.41-12+deb13u4
1
improwised/proxysql:master-6b26e59-171765063828940522e8b7
glibc@2.36-9+deb12u7
no fix listed
1
infiniflow/infinity:v0.7.0992c87a68612
glibc@2.35-0ubuntu3.13
2.35-0ubuntu3.14
1
inseefrlab/shelly:cloudshell31f04ca7436b
glibc@2.35-0ubuntu3.5
2.35-0ubuntu3.14
1
instill/artifact-backend:b28766ac4a393e601ed
glibc@2.41-12+deb13u1
2.41-12+deb13u4
1
instill/mgmt-backend:d0933d4ebe12f77a3f9
glibc@2.41-12+deb13u1
2.41-12+deb13u4
1
instill/model-backend:611f0f2e980125e5ba5
glibc@2.41-12+deb13u1
2.41-12+deb13u4
1
instructure/kinesalite:latest34400d82f28f
glibc@2.31-0ubuntu9.17
no fix listed
1
intel/dlstreamer-pipeline-server:2022.1.1-ubuntu20aa8f5483a2ef
glibc@2.31-0ubuntu9.9
no fix listed
1
intel/multimodal-data-visualization-streaming:3.01a89327e499b
glibc@2.31-0ubuntu9.9
no fix listed
1
intelowlproject/intelowl:v6.6.10b22e547ea6b
glibc@2.36-9+deb12u4
no fix listed
1

syft 1.42.1 · advisories as of 18 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.