StackRadar

CVE-2026-5450

Critical

Advisory

Published 20 Apr 2026In the index since 5 Sept 2026
Severity
Critical
worst across findings
CVSS
9.8
base score, highest
EPSS
0.005
42nd percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
2,716
of 17,805 indexed, latest versions
Container images
2,849
deployed by those charts
Fix available
3 of 4
affected packages

Red Hat Security Advisory: glibc security, bug fix, and enhancement update

Carried by container images the latest versions of 2,716 of 17,805 indexed charts deploy, on 2,849 images.

Affected packageAffected versionsFixed inImages
glibcdeb2.23-0ubuntu5, 2.23-0ubuntu7, 2.23-0ubuntu9, 2.23-0ubuntu10+59 more2.35-0ubuntu3.14, 2.39-0ubuntu8.8, 2.41-12+deb13u2+e4, 2.41-12+deb13u4+1 more2,385
glibcapk2.37-r7, 2.38-r6, 2.39-r7, 2.40-r1+8 more2.43-r722
eglibcdeb2.19-0ubuntu6.3, 2.19-0ubuntu6.6, 2.19-0ubuntu6.13, 2.19-0ubuntu6.14+1 moreno fix listed7
glibcrpm2.17-260.el7_6.4, 2.17-260.el7_6.6, 2.17-292.el7, 2.17-307.el7.1+60 more0:2.17-326.el7_9.6, 0:2.28-251.el8_10.38, 0:2.34-272.el9_8, 0:2.39-126.el10_2435
OSV records
CGA-3qwq-5w83-3j3qDEBIAN-CVE-2026-5450UBUNTU-CVE-2026-5450RHSA-2026:33092RHSA-2026:33126RHSA-2026:33226RHSA-2026:34211RLSA-2026:33126RLSA-2026:33226AZL-83093ECHO-56eb-505f-7a61
Also known as
CGA-76f7-m58j-73wj, CGA-7x3v-c6pf-4v43, CGA-88p4-5g7h-3xrh, CGA-g425-f69f-xj8j, CGA-hq3x-5xh3-92jc, CGA-j9xg-mq3r-jh83, CGA-jgfr-5wmr-hfpc, CGA-mvj4-3q5f-wmwg, CGA-p427-94gh-pr7p, CGA-p7rp-4rm4-hg9q, CGA-qj6g-5h8p-677v, CGA-vc3j-8vcq-8pqc, CGA-vv29-hp4w-2hrw, CGA-wxx7-6vh7-9qhv, CGA-xrvh-57r4-pjhh, RHSA-2026:33227, RHSA-2026:33228, RHSA-2026:33229, RHSA-2026:33230, RHSA-2026:33231, RHSA-2026:36643, USN-8611-1

Charts affected

2,716 by stars
ChartLatestAffected imagesRadar Score
ovspluginopencord1.0.21 of 1See more

ovsplugin opencord 1.0.2

1 of the 1 container images this version deploys carry CVE-2026-5450.

Container imageDigestPackageFixed in
gopinatht/ovs-plugin-installer:latest632cb2e9c399
glibc@2.23-0ubuntu10
no fix listed

Open the chart page →

4,183
ponsimv2opencord1.2.31 of 2See more

ponsimv2 opencord 1.2.3

1 of the 2 container images this version deploys carry CVE-2026-5450.

Container imageDigestPackageFixed in
voltha/voltha-tester:1.7.0655c3048a602
glibc@2.23-0ubuntu11
no fix listed

Open the chart page →

65,092
sebaopencord1.0.06 of 17See more

seba opencord 1.0.0

6 of the 17 container images this version deploys carry CVE-2026-5450.

Container imageDigestPackageFixed in
tpdock/freeradius:2.2.93da600c95a49
glibc@2.23-0ubuntu9
no fix listed
voltha/voltha-cli:1.6.0c4e41e92f046
glibc@2.23-0ubuntu10
no fix listed
voltha/voltha-envoy:1.6.059ab2a00f712
eglibc@2.19-0ubuntu6.13
no fix listed
voltha/voltha-netconf:1.6.037f80524c207
glibc@2.23-0ubuntu10
no fix listed
voltha/voltha-ofagent:1.6.09ee8c1f4428c
glibc@2.23-0ubuntu10
no fix listed
voltha/voltha-voltha:1.6.0ff596b62de59
glibc@2.23-0ubuntu10
no fix listed

Open the chart page →

356,120
voltha-infraopencord2.14.04 of 10See more

voltha-infra opencord 2.14.0

4 of the 10 container images this version deploys carry CVE-2026-5450.

Container imageDigestPackageFixed in
freeradius/freeradius-server:3.0.2121c8bfa904d8
glibc@2.27-3ubuntu1
no fix listed
library/ubuntu:16.041f1a2d56de1d
glibc@2.23-0ubuntu11.3
no fix listed
voltha/bbsim-sadis-server:0.3.5259fc3a03f4e
glibc@2.27-3ubuntu1.6
no fix listed
voltha/voltha-onos:5.1.8e038acb950d3
glibc@2.27-3ubuntu1.2
no fix listed

Open the chart page →

41,148
opencost-parquet-exporteropencostVerified publisher0.3.11 of 1See more

opencost-parquet-exporter opencost 0.3.1

1 of the 1 container images this version deploys carry CVE-2026-5450.

Container imageDigestPackageFixed in
ghcr.io/opencost/opencost-parquet-exporter:v0.2.1ce85ef0ce665
glibc@2.36-9+deb12u9
no fix listed

Open the chart page →

11,088
openlitopenlit1.24.01 of 3See more

openlit openlit 1.24.0

1 of the 3 container images this version deploys carry CVE-2026-5450.

Container imageDigestPackageFixed in
clickhouse/clickhouse-server:24.4.12e6587b81a26
glibc@2.31-0ubuntu9.15
no fix listed

Open the chart page →

5,220
openlit-controlleropenlit0.10.01 of 1See more

openlit-controller openlit 0.10.0

1 of the 1 container images this version deploys carry CVE-2026-5450.

Container imageDigestPackageFixed in
ghcr.io/openlit/openlit-controller:0.10.0165efd4469ea
glibc@2.36-9+deb12u14
no fix listed

Open the chart page →

1,412
sentinelopennms-helm-chartsVerified publisher0.4.01 of 2See more

sentinel opennms-helm-charts 0.4.0

1 of the 2 container images this version deploys carry CVE-2026-5450.

Container imageDigestPackageFixed in
opennms/sentinel:36.0.288869082a14f
glibc@2.39-124.el10_2
0:2.39-126.el10_2

Open the chart page →

2,087
minioopenobserve5.0.72 of 2See more

minio openobserve 5.0.7

2 of the 2 container images this version deploys carry CVE-2026-5450.

Container imageDigestPackageFixed in
quay.io/minio/mc:RELEASE.2023-01-28T20-29-38Zad34abeba912
glibc@2.28-211.el8
0:2.28-251.el8_10.38
quay.io/minio/minio:RELEASE.2023-02-10T18-48-39Za0a002cb113c
glibc@2.28-211.el8
0:2.28-251.el8_10.38

Open the chart page →

7,613
openpanelopenpanel0.9.01 of 6See more

openpanel openpanel 0.9.0

1 of the 6 container images this version deploys carry CVE-2026-5450.

Container imageDigestPackageFixed in
clickhouse/clickhouse-server:25.10.2.65e019438e1e05
glibc@2.35-0ubuntu3.11
2.35-0ubuntu3.14

Open the chart page →

3,477
llm-stackopenproject-helm-chartsVerified publisher1.1.02 of 2See more

llm-stack openproject-helm-charts 1.1.0

2 of the 2 container images this version deploys carry CVE-2026-5450.

Container imageDigestPackageFixed in
apache/apisix:3.16.0-ubuntu5e47692cac00
glibc@2.39-0ubuntu8.7
2.39-0ubuntu8.8
library/python:3.12-slim78387bc3881b
glibc@2.41-12+deb13u3
2.41-12+deb13u4

Open the chart page →

2,032
akeyless-api-gatewayopenshift1.41.21 of 1See more

akeyless-api-gateway openshift 1.41.2

1 of the 1 container images this version deploys carry CVE-2026-5450.

Container imageDigestPackageFixed in
akeyless/base-rhel:0.0.14ba8900a0061
glibc@2.28-236.el8_9.12
0:2.28-251.el8_10.38

Open the chart page →

12,178
alquimia-studioopenshift0.2.01 of 1See more

alquimia-studio openshift 0.2.0

1 of the 1 container images this version deploys carry CVE-2026-5450.

Container imageDigestPackageFixed in
alquimiaai/studio:certification38a1f0341982
glibc@2.34-231.el9_7.2
0:2.34-272.el9_8

Open the chart page →

2,408
bpjstk-serviceopenshift1.0.03 of 6See more

bpjstk-service openshift 1.0.0

3 of the 6 container images this version deploys carry CVE-2026-5450.

Container imageDigestPackageFixed in
andrianrf/backoffice:latest047a7837651e
glibc@2.28-251.el8_10.2
0:2.28-251.el8_10.38
andrianrf/backoffice-be:latest6036614803d4
glibc@2.34-60.el9
0:2.34-272.el9_8
andrianrf/iso-server:latest7da47f525c7d
glibc@2.34-60.el9
0:2.34-272.el9_8

Open the chart page →

35,089
canvas-oamportalopenshift4.0.01 of 1See more

canvas-oamportal openshift 4.0.0

1 of the 1 container images this version deploys carry CVE-2026-5450.

Container imageDigestPackageFixed in
gurolakman/oam:4.0.0ed8fd2062548
glibc@2.28-251.el8_10.4
0:2.28-251.el8_10.38

Open the chart page →

7,518
chatbot-ai-sampleopenshift0.1.62 of 4See more

chatbot-ai-sample openshift 0.1.6

2 of the 4 container images this version deploys carry CVE-2026-5450.

Container imageDigestPackageFixed in
quay.io/ai-lab/llamacpp_python:latest70d138997acd
glibc@2.34-100.el9_4.3
0:2.34-272.el9_8
quay.io/redhat-ai-dev/chatbot:latest59fe607dfdf2
glibc@2.34-100.el9_4.2
0:2.34-272.el9_8

Open the chart page →

19,181
exporteropenshift1.0.473 of 3See more

exporter openshift 1.0.47

3 of the 3 container images this version deploys carry CVE-2026-5450.

Container imageDigestPackageFixed in
public.ecr.aws/perfectscale-io/kube-state-metrics:4.1.14-redhat849e235e2d3e
glibc@2.28-251.el8_10.5
0:2.28-251.el8_10.38
public.ecr.aws/perfectscale-io/psc-exporter:v1.0.45-redhat9083e60c38bc
glibc@2.34-125.el9_5.1
0:2.34-272.el9_8
public.ecr.aws/perfectscale-io/ubi9/ubi:9.5d7c3def9252b
glibc@2.34-125.el9_5.1
0:2.34-272.el9_8

Open the chart page →

13,076
fineractopenshift0.1.11 of 4See more

fineract openshift 0.1.1

1 of the 4 container images this version deploys carry CVE-2026-5450.

Container imageDigestPackageFixed in
library/nginx:latest05b8cb60c354
glibc@2.41-12+deb13u3
2.41-12+deb13u4

Open the chart page →

7,889
flomesh-consoleopenshift0.70.0-30-ubi82 of 2See more

flomesh-console openshift 0.70.0-30-ubi8

2 of the 2 container images this version deploys carry CVE-2026-5450.

Container imageDigestPackageFixed in
quay.io/flomesh/flomesh-console-ubi8:0.70.0-30ce6938ff6709
glibc@2.28-211.el8
0:2.28-251.el8_10.38
quay.io/flomesh/pipy-repo-ubi8:0.70.0-469912fdf6c183
glibc@2.28-211.el8
0:2.28-251.el8_10.38

Open the chart page →

9,990
fsmopenshift0.1.8-ubi.66 of 6See more

fsm openshift 0.1.8-ubi.6

6 of the 6 container images this version deploys carry CVE-2026-5450.

Container imageDigestPackageFixed in
quay.io/flomesh/curl-ubi8:7.84.0bef31fa5f5f3
glibc@2.28-251.el8_10.2
0:2.28-251.el8_10.38
quay.io/flomesh/fsm-bootstrap-ubi8:0.1.8-ubi.6e6d7afb1a4bf
glibc@2.28-211.el8
0:2.28-251.el8_10.38
quay.io/flomesh/fsm-ingress-pipy-ubi8:0.1.8-ubi.6fce990dece01
glibc@2.28-211.el8
0:2.28-251.el8_10.38
quay.io/flomesh/fsm-manager-ubi8:0.1.8-ubi.63590af73f65a
glibc@2.28-211.el8
0:2.28-251.el8_10.38
quay.io/flomesh/pipy-ubi8:0.50.0-8824352dca6672
glibc@2.28-211.el8
0:2.28-251.el8_10.38
quay.io/flomesh/toolbox-ubi8:1.2.01f5e3161cb84
glibc@2.28-251.el8_10.2
0:2.28-251.el8_10.38

Open the chart page →

16,567
kb-cloud-installeropenshift2.1.351 of 1See more

kb-cloud-installer openshift 2.1.35

1 of the 1 container images this version deploys carry CVE-2026-5450.

Container imageDigestPackageFixed in
apecloud/kb-cloud-installer:v2.1.42-certified98abc64aa985
glibc@2.34-231.el9_7.2
0:2.34-272.el9_8

Open the chart page →

4,234
kite-agentopenshift1.0.01 of 1See more

kite-agent openshift 1.0.0

1 of the 1 container images this version deploys carry CVE-2026-5450.

Container imageDigestPackageFixed in
quay.io/fengyuanxing/zte_endogenous_security/kite-agent:V2.0.0734808044936
glibc@2.28-251.el8_10.34
0:2.28-251.el8_10.38

Open the chart page →

5,863
kubedb-certifiedopenshift2026.7.105 of 8See more

kubedb-certified openshift 2026.7.10

5 of the 8 container images this version deploys carry CVE-2026-5450.

Container imageDigestPackageFixed in
ghcr.io/kubedb/kubedb-autoscaler:v0.51.05d1182ac21f0
glibc@2.36-9+deb12u14
no fix listed
ghcr.io/kubedb/kubedb-crd-manager:v0.21.09506a6cb98d1
glibc@2.36-9+deb12u14
no fix listed
ghcr.io/kubedb/kubedb-ops-manager:v0.53.06d4c9fe66e4f
glibc@2.36-9+deb12u14
no fix listed
ghcr.io/kubedb/kubedb-provisioner:v0.66.0824d6d78d451
glibc@2.36-9+deb12u14
no fix listed
ghcr.io/kubedb/kubedb-webhook-server:v0.42.0f7dcade6523b
glibc@2.36-9+deb12u14
no fix listed

Open the chart page →

4,489
mattermost-team-editionopenshift6.6.831 of 4See more

mattermost-team-edition openshift 6.6.83

1 of the 4 container images this version deploys carry CVE-2026-5450.

Container imageDigestPackageFixed in
mattermost/mattermost-team-edition:10.11.2b8bd1246cb3a
glibc@2.36-9+deb12u10
no fix listed

Open the chart page →

4,127
orion-ldopenshift1.0.32 of 2See more

orion-ld openshift 1.0.3

2 of the 2 container images this version deploys carry CVE-2026-5450.

Container imageDigestPackageFixed in
quay.io/fiware/orion-ld:1.0.1ea838e5b4051
glibc@2.28-151.el8
0:2.28-251.el8_10.38
quay.io/opencloudio/ibm-mongodb:4.0.24d8c631a6dc43
glibc@2.28-151.el8
0:2.28-251.el8_10.38

Open the chart page →

14,729
osm-edgeopenshift1.2.1-ubi87 of 7See more

osm-edge openshift 1.2.1-ubi8

7 of the 7 container images this version deploys carry CVE-2026-5450.

Container imageDigestPackageFixed in
quay.io/flomesh/curl-ubi8:7.84.0bef31fa5f5f3
glibc@2.28-251.el8_10.2
0:2.28-251.el8_10.38
quay.io/flomesh/osm-edge-bootstrap-ubi8:1.2.1e048bc7a17c2
glibc@2.28-211.el8
0:2.28-251.el8_10.38
quay.io/flomesh/osm-edge-controller-ubi8:1.2.1674f45865af1
glibc@2.28-211.el8
0:2.28-251.el8_10.38
quay.io/flomesh/osm-edge-crds-ubi8:1.2.1c3bc5e7a70e6
glibc@2.28-211.el8
0:2.28-251.el8_10.38
quay.io/flomesh/osm-edge-injector-ubi8:1.2.18e9c39c34e89
glibc@2.28-211.el8
0:2.28-251.el8_10.38
quay.io/flomesh/osm-edge-preinstall-ubi8:1.2.1f94282a9cfec
glibc@2.28-211.el8
0:2.28-251.el8_10.38
quay.io/flomesh/pipy-ubi8:0.70.0-4635d87a381432
glibc@2.28-211.el8
0:2.28-251.el8_10.38

Open the chart page →

19,476
redhat-trusted-application-pipelineopenshift1.0.21 of 2See more

redhat-trusted-application-pipeline openshift 1.0.2

1 of the 2 container images this version deploys carry CVE-2026-5450.

Container imageDigestPackageFixed in
quay.io/redhat-appstudio/appstudio-utils:dbbdd82734232e6289e8fbae5b4c858481a7c0577b4202c25b67
glibc@2.34-60.el9
0:2.34-272.el9_8

Open the chart page →

8,687
smsf-configurationopenshift1.0.41 of 1See more

smsf-configuration openshift 1.0.4

1 of the 1 container images this version deploys carry CVE-2026-5450.

Container imageDigestPackageFixed in
gurolakman/smsf-configuration:1.0.49abb3882bcbd
glibc@2.28-236.el8.7
0:2.28-251.el8_10.38

Open the chart page →

13,612
smsf-dispatcheropenshift1.0.41 of 1See more

smsf-dispatcher openshift 1.0.4

1 of the 1 container images this version deploys carry CVE-2026-5450.

Container imageDigestPackageFixed in
gurolakman/smsf-dispatcher:1.0.46537e8ed8de8
glibc@2.28-236.el8.7
0:2.28-251.el8_10.38

Open the chart page →

11,754
smsf-momtopenshift1.0.41 of 1See more

smsf-momt openshift 1.0.4

1 of the 1 container images this version deploys carry CVE-2026-5450.

Container imageDigestPackageFixed in
gurolakman/smsf-momt:1.0.4ce23b20a8a17
glibc@2.28-236.el8.7
0:2.28-251.el8_10.38

Open the chart page →

13,574
smsf-registrationopenshift1.0.41 of 1See more

smsf-registration openshift 1.0.4

1 of the 1 container images this version deploys carry CVE-2026-5450.

Container imageDigestPackageFixed in
gurolakman/smsf-registration:1.0.4b22e746edd5d
glibc@2.28-236.el8.7
0:2.28-251.el8_10.38

Open the chart page →

13,557
ussigw-configurationopenshift1.0.41 of 1See more

ussigw-configuration openshift 1.0.4

1 of the 1 container images this version deploys carry CVE-2026-5450.

Container imageDigestPackageFixed in
gurolakman/ussigw-configuration:1.0.4bf18525c5ad9
glibc@2.28-236.el8.7
0:2.28-251.el8_10.38

Open the chart page →

13,461
ussigw-coreopenshift1.0.41 of 1See more

ussigw-core openshift 1.0.4

1 of the 1 container images this version deploys carry CVE-2026-5450.

Container imageDigestPackageFixed in
gurolakman/ussigw-core:1.0.48739565c3ea2
glibc@2.28-236.el8.7
0:2.28-251.el8_10.38

Open the chart page →

13,105
voyager-gatewayopenshift2026.1.152 of 2See more

voyager-gateway openshift 2026.1.15

2 of the 2 container images this version deploys carry CVE-2026-5450.

Container imageDigestPackageFixed in
ghcr.io/voyagermesh/crd-manager:v0.1.013fd0cccafe8
glibc@2.36-9+deb12u13
no fix listed
ghcr.io/voyagermesh/gateway:v1.6.223f4da194134
glibc@2.36-9+deb12u13
no fix listed

Open the chart page →

2,685
openshift-integration-operatoropenshift-integration-operatorVerified publisher0.8.22 of 2See more

openshift-integration-operator openshift-integration-operator 0.8.2

2 of the 2 container images this version deploys carry CVE-2026-5450.

Container imageDigestPackageFixed in
quay.io/maximilianopizarro/integration-console-plugin:v0.8.2270ed23a9afd
glibc@2.34-270.el9_8
0:2.34-272.el9_8
quay.io/maximilianopizarro/openshift-integration-operator:v0.8.2d6fc43ac802e
glibc@2.34-125.el9_5.3
0:2.34-272.el9_8

Open the chart page →

2,080
sohaopensohaVerified publisher0.1.91 of 2See more

soha opensoha 0.1.9

1 of the 2 container images this version deploys carry CVE-2026-5450.

Container imageDigestPackageFixed in
pgvector/pgvector:0.8.5-pg18-trixie9d2e61c7352b
glibc@2.41-12+deb13u3
2.41-12+deb13u4

Open the chart page →

1,818
open-vpnopenvpn0.0.11 of 1See more

open-vpn openvpn 0.0.1

1 of the 1 container images this version deploys carry CVE-2026-5450.

Container imageDigestPackageFixed in
ghcr.io/linuxserver/openvpn-as:version-2.8.6-916f8e7d-ubuntu184ee0764310e7
glibc@2.27-3ubuntu1.2
no fix listed

Open the chart page →

77,005
terminalsopen-webui0.7.02 of 2See more

terminals open-webui 0.7.0

2 of the 2 container images this version deploys carry CVE-2026-5450.

Container imageDigestPackageFixed in
ghcr.io/open-webui/terminals:latest5d2fd44366a4
glibc@2.41-12+deb13u3
2.41-12+deb13u4
ghcr.io/open-webui/terminals-operator:latest6287ce8be502
glibc@2.41-12+deb13u3
2.41-12+deb13u4

Open the chart page →

2,098
openwhiskopenwhisk1.0.01 of 10See more

openwhisk openwhisk 1.0.0

1 of the 10 container images this version deploys carry CVE-2026-5450.

Container imageDigestPackageFixed in
openwhisk/ow-utils:1.0.0c80dba0de3aa
glibc@2.27-3ubuntu1.2
no fix listed

Open the chart page →

97,725
kubernetes-syncopslevelVerified publisher0.8.01 of 1See more

kubernetes-sync opslevel 0.8.0

1 of the 1 container images this version deploys carry CVE-2026-5450.

Container imageDigestPackageFixed in
public.ecr.aws/opslevel/kubectl-opslevel:v2024.9.571697b5ff713
glibc@2.36-9+deb12u8
no fix listed

Open the chart page →

1,753
opslevelopslevelVerified publisher2025.1.222 of 10See more

opslevel opslevel 2025.1.22

2 of the 10 container images this version deploys carry CVE-2026-5450.

Container imageDigestPackageFixed in
minio/mc:RELEASE.2023-02-28T00-12-59Zc631532a394e
glibc@2.28-211.el8
0:2.28-251.el8_10.38
replicated/replicated-sdk:1.0.0-beta.318751b4963250
glibc@2.40-r2
2.43-r7

Open the chart page →

5,670
issuegenopsmxVerified publisher1.0.21 of 1See more

issuegen opsmx 1.0.2

1 of the 1 container images this version deploys carry CVE-2026-5450.

Container imageDigestPackageFixed in
opsmx11/issuegen:v2.1.05c50ca123d88
eglibc@2.19-0ubuntu6.14
no fix listed

Open the chart page →

26,367
hiveopstty0.1.91 of 4See more

hive opstty 0.1.9

1 of the 4 container images this version deploys carry CVE-2026-5450.

Container imageDigestPackageFixed in
bitnamilegacy/postgresql:16233f361c5819
glibc@2.36-9+deb12u9
no fix listed

Open the chart page →

4,732
grrosdfir-infrastructureVerified publisher1.0.32 of 5See more

grr osdfir-infrastructure 1.0.3

2 of the 5 container images this version deploys carry CVE-2026-5450.

Container imageDigestPackageFixed in
library/mariadb:11.3.2e101f9db3191
glibc@2.35-0ubuntu3.7
2.35-0ubuntu3.14
ghcr.io/google/fleetspeak:v0.1.17cd264d33efd4
glibc@2.36-9+deb12u7
no fix listed

Open the chart page →

11,047
osdfir-infrastructureosdfir-infrastructureVerified publisher2.15.025 of 40See more

osdfir-infrastructure osdfir-infrastructure 2.15.0

25 of the 40 container images this version deploys carry CVE-2026-5450.

Container imageDigestPackageFixed in
bitnamilegacy/git:latest4b08d0c5af8d
glibc@2.36-9+deb12u10
no fix listed
chromadb/chroma:1.5.7fc8dc8e11fb2
glibc@2.41-12+deb13u2
2.41-12+deb13u4
library/mariadb:11.3.2e101f9db3191
glibc@2.35-0ubuntu3.7
2.35-0ubuntu3.14
yetiplatform/yeti:2.9.09bcbe2650a14
glibc@2.41-12+deb13u3
2.41-12+deb13u4
yetiplatform/yeti-frontend:2.9.0873ef15d267b
glibc@2.41-12+deb13u3
2.41-12+deb13u4
ghcr.io/google/fleetspeak:v0.1.17cd264d33efd4
glibc@2.36-9+deb12u7
no fix listed
ghcr.io/openrelik/openrelik-mediator:latest42efc445b19e
glibc@2.36-9+deb12u14
no fix listed
ghcr.io/openrelik/openrelik-metrics:latest3d0f1ddeebf5
glibc@2.36-9+deb12u13
no fix listed
ghcr.io/openrelik/openrelik-server:latestce1132261523
glibc@2.36-9+deb12u14
no fix listed
ghcr.io/openrelik/openrelik-worker-analyzer-config:latest1269d3d8d2c2
glibc@2.39-0ubuntu8.7
2.39-0ubuntu8.8
ghcr.io/openrelik/openrelik-worker-analyzer-logs:latestb175cc61959a
glibc@2.39-0ubuntu8.7
2.39-0ubuntu8.8
ghcr.io/openrelik/openrelik-worker-bulkextractor:latest67498ee2e639
glibc@2.39-0ubuntu8.7
2.39-0ubuntu8.8
ghcr.io/openrelik/openrelik-worker-capa:latest71323a4f3fc5
glibc@2.39-0ubuntu8.7
2.39-0ubuntu8.8
ghcr.io/openrelik/openrelik-worker-chromecreds:latest76d4fbcc6ff0
glibc@2.39-0ubuntu8.7
2.39-0ubuntu8.8
ghcr.io/openrelik/openrelik-worker-cloud-logs:latesta5d7e3cf71d3
glibc@2.39-0ubuntu8.7
2.39-0ubuntu8.8
ghcr.io/openrelik/openrelik-worker-containers:latesta6d5abe94706
glibc@2.39-0ubuntu8.7
2.39-0ubuntu8.8
ghcr.io/openrelik/openrelik-worker-dfindexeddb:latest31966a825782
glibc@2.39-0ubuntu8.7
2.39-0ubuntu8.8
ghcr.io/openrelik/openrelik-worker-extraction:latestec9fc5864cd5
glibc@2.39-0ubuntu8.7
2.39-0ubuntu8.8
ghcr.io/openrelik/openrelik-worker-floss:latest7a331eb83c6a
glibc@2.39-0ubuntu8.7
2.39-0ubuntu8.8
ghcr.io/openrelik/openrelik-worker-grep:latest470ff3529746
glibc@2.39-0ubuntu8.7
2.39-0ubuntu8.8
ghcr.io/openrelik/openrelik-worker-os-creds:latest7fc7ec101f08
glibc@2.39-0ubuntu8.7
2.39-0ubuntu8.8
ghcr.io/openrelik/openrelik-worker-plaso:latest75537ea8c851
glibc@2.39-0ubuntu8.7
2.39-0ubuntu8.8
ghcr.io/openrelik/openrelik-worker-strings:latest6e05055b701f
glibc@2.39-0ubuntu8.7
2.39-0ubuntu8.8
ghcr.io/openrelik/openrelik-worker-timesketch:latest4cb88b603cdc
glibc@2.39-0ubuntu8.7
2.39-0ubuntu8.8
ghcr.io/openrelik/openrelik-worker-yara:latestbd7fbf4505b5
glibc@2.39-0ubuntu8.7
2.39-0ubuntu8.8

Open the chart page →

184,580
yetiosdfir-infrastructureVerified publisher1.0.52 of 4See more

yeti osdfir-infrastructure 1.0.5

2 of the 4 container images this version deploys carry CVE-2026-5450.

Container imageDigestPackageFixed in
yetiplatform/yeti:latest9c3006cedcca
glibc@2.41-12+deb13u3
2.41-12+deb13u4
yetiplatform/yeti-frontend:latest709064278c7e
glibc@2.41-12+deb13u3
2.41-12+deb13u4

Open the chart page →

6,756
fluent-bitot-container-kit0.0.31 of 2See more

fluent-bit ot-container-kit 0.0.3

1 of the 2 container images this version deploys carry CVE-2026-5450.

Container imageDigestPackageFixed in
quay.io/opstree/fluent-bit:5.0.3391eef5a68ff
glibc@2.41-12+deb13u2
2.41-12+deb13u4

Open the chart page →

925
loki-standaloneot-container-kit1.0.22 of 5See more

loki-standalone ot-container-kit 1.0.2

2 of the 5 container images this version deploys carry CVE-2026-5450.

Container imageDigestPackageFixed in
quay.io/opstree/k8s-sidecar:2.7.126aa9bb3386b
glibc@2.41-12+deb13u2
2.41-12+deb13u4
quay.io/opstree/memcached:1.6.38-alpine3.22cabbdfd2c3fe
glibc@2.41-12+deb13u2
2.41-12+deb13u4

Open the chart page →

3,658
vm-standaloneot-container-kit0.0.42 of 6See more

vm-standalone ot-container-kit 0.0.4

2 of the 6 container images this version deploys carry CVE-2026-5450.

Container imageDigestPackageFixed in
quay.io/opstree/grafana:12.4.3b61c1ed2f015
glibc@2.41-12+deb13u2
2.41-12+deb13u4
quay.io/opstree/k8s-sidecar:2.7.37075d455b219
glibc@2.41-12+deb13u2
2.41-12+deb13u4

Open the chart page →

3,499
webot-container-kit0.1.01 of 1See more

web ot-container-kit 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-5450.

Container imageDigestPackageFixed in
library/nginx:latest05b8cb60c354
glibc@2.41-12+deb13u3
2.41-12+deb13u4

Open the chart page →

1,879

Container images carrying it

2,849 by charts deploying them

A fixed version is listed for 3 of the 4 affected packages.

Container imageDigestPackageFixed inUsed by
ghcr.io/ctron/ditto-operator:0.4.061a9bb81b85c
glibc@2.28-164.el8
0:2.28-251.el8_10.38
1
ghcr.io/ctron/kubectl:1.25e37d61b5277c
glibc@2.28-236.el8_9.12
0:2.28-251.el8_10.38
1
ghcr.io/ctron/streamsheets-base:2.4.00cf25ed621e2
glibc@2.28-151.el8
0:2.28-251.el8_10.38
1
ghcr.io/ctron/streamsheets-gateway:2.4.00635f17c9d2c
glibc@2.28-151.el8
0:2.28-251.el8_10.38
1
ghcr.io/ctron/streamsheets-service-graphs:2.4.0e34964e336c1
glibc@2.28-151.el8
0:2.28-251.el8_10.38
1
ghcr.io/ctron/streamsheets-service-machines:2.4.00c5a3398d1e4
glibc@2.28-151.el8
0:2.28-251.el8_10.38
1
ghcr.io/ctron/streamsheets-service-streams:2.4.08ba040e79ca0
glibc@2.28-151.el8
0:2.28-251.el8_10.38
1
ghcr.io/dakera-ai/dakera:0.11.101af610992a416
glibc@2.41-12+deb13u3
2.41-12+deb13u4
1
ghcr.io/dakera-ai/dakera-mcp:0.10.11a3d48418b14a
glibc@2.36-9+deb12u14
no fix listed
1
ghcr.io/damap-org/damap-backend:5.0.0f3d0c7d35498
glibc@2.39-0ubuntu8.7
2.39-0ubuntu8.8
1
ghcr.io/damap-org/damap-frontend:5.0.1609f48af4efc
glibc@2.41-12+deb13u3
2.41-12+deb13u4
1
ghcr.io/danielgines/brightdata-exporter:0.2.176920d17cf6ff
glibc@2.41-12+deb13u2
2.41-12+deb13u4
1
ghcr.io/dani-garcia/vaultwarden:1.35.2d89a6d21e361
glibc@2.41-12
2.41-12+deb13u4
1
ghcr.io/danny-avila/librechat-rag-api-dev-lite:latestf9f34c8ed688
glibc@2.41-12+deb13u3
2.41-12+deb13u4
1
ghcr.io/dask/dask:2024.1.0080150de7d86
glibc@2.31-0ubuntu9.14
no fix listed
1
ghcr.io/dask/dask-kubernetes-operator:2026.3.03225d2bc6b3c
glibc@2.41-12+deb13u1
2.41-12+deb13u4
1
ghcr.io/dask/dask-notebook:2024.1.0f53bde3acd4f
glibc@2.35-0ubuntu3.6
2.35-0ubuntu3.14
1
ghcr.io/data-fair/elasticsearch:7.17.1aa45adaf59a7
glibc@2.31-0ubuntu9.2
no fix listed
1
ghcr.io/defguard/defguard:2.1.0df2e31d3b4f5
glibc@2.41-12+deb13u3
2.41-12+deb13u4
1
ghcr.io/defguard/defguard-proxy:2.1.08765a28e383e
glibc@2.41-12+deb13u3
2.41-12+deb13u4
1
ghcr.io/defguard/gateway:2.1.0738b2b6f413b
glibc@2.41-12+deb13u3
2.41-12+deb13u4
1
ghcr.io/deltabadger/deltabadger:2.23.3bffe3c22fabc
glibc@2.41-12+deb13u1
2.41-12+deb13u4
1
ghcr.io/developmentseed/titiler:0.22.48ac53eb38393
glibc@2.36-9+deb12u10
no fix listed
1
ghcr.io/deven96/ahnlich-db:latest45d8b5aab491
glibc@2.41-12+deb13u3
2.41-12+deb13u4
1
ghcr.io/devops-ia/cp-schema-registry:8.1.1-msk-iam-auth2.3.530d1a445acc7
glibc@2.34-231.el9_7.2
0:2.34-272.el9_8
1
ghcr.io/devops-ia/steampipe:v2.4.1a982103d91d3
glibc@2.36-9+deb12u13
no fix listed
1
ghcr.io/dfir-iris/iriswebapp_app:v2.4.26e59ebde55709
glibc@2.41-12
2.41-12+deb13u4
1
ghcr.io/dgtlmoon/changedetection.io:0.60.3:latestecacd9fd0c66
glibc@2.36-9+deb12u14
no fix listed
1
ghcr.io/dgtlmoon/changedetection.io:0.60.5f69554198005
glibc@2.36-9+deb12u14
no fix listed
1
ghcr.io/ding113/claude-code-hub:latest87f9e8a92bd7
glibc@2.41-12+deb13u3
2.41-12+deb13u4
1
ghcr.io/djcass44/cso-proxy:cccf49fdb360d44125ad
glibc@2.27-3ubuntu1.4
no fix listed
1
ghcr.io/djerfy/zabbix-kubernetes-discovery:v1.4.207a50c07e7c69
glibc@2.39-0ubuntu8.3
2.39-0ubuntu8.8
1
ghcr.io/donkie/spoolman:0.24.042135965c42d
glibc@2.36-9+deb12u14
no fix listed
1
ghcr.io/dragoangel/mcrouter:v2026.06.29.0042afcffe67d0
glibc@2.39-0ubuntu8.7
2.39-0ubuntu8.8
1
ghcr.io/drewburr-labs/evobot:3.0.04ddbb244c82f
glibc@2.36-9+deb12u3
no fix listed
1
ghcr.io/drewburr-labs/mum-discord-bot:3.1.26e82914e1051
glibc@2.36-9+deb12u3
no fix listed
1
ghcr.io/drogue-iot/authentication-service:0.11.0857b137fc7b3
glibc@2.34-40.el9
0:2.34-272.el9_8
1
ghcr.io/drogue-iot/coap-endpoint:0.11.044790b71aa22
glibc@2.34-40.el9
0:2.34-272.el9_8
1
ghcr.io/drogue-iot/command-endpoint:0.11.06dce3158b851
glibc@2.34-40.el9
0:2.34-272.el9_8
1
ghcr.io/drogue-iot/console-backend:0.11.025d229ae5bde
glibc@2.34-40.el9
0:2.34-272.el9_8
1
ghcr.io/drogue-iot/console-frontend:0.11.0558972f9374c
glibc@2.34-40.el9
0:2.34-272.el9_8
1
ghcr.io/drogue-iot/database-migration:0.11.057072c72a7cd
glibc@2.34-40.el9
0:2.34-272.el9_8
1
ghcr.io/drogue-iot/device-management-controller:0.11.0200aea1a2b42
glibc@2.34-40.el9
0:2.34-272.el9_8
1
ghcr.io/drogue-iot/device-management-service:0.11.0f4a5bfc06a74
glibc@2.34-40.el9
0:2.34-272.el9_8
1
ghcr.io/drogue-iot/device-state-service:0.11.0fbf0738cfc7e
glibc@2.34-40.el9
0:2.34-272.el9_8
1
ghcr.io/drogue-iot/drogue-event-source:0.2.1e2e812a4cf8e
glibc@2.28-164.el8
0:2.28-251.el8_10.38
1
ghcr.io/drogue-iot/http-endpoint:0.11.0b612c18479e0
glibc@2.34-40.el9
0:2.34-272.el9_8
1
ghcr.io/drogue-iot/knative-operator:0.11.0e2d927639f6e
glibc@2.34-40.el9
0:2.34-272.el9_8
1
ghcr.io/drogue-iot/mqtt-endpoint:0.11.032c6d2f5eab9
glibc@2.34-40.el9
0:2.34-272.el9_8
1
ghcr.io/drogue-iot/mqtt-integration:0.11.07ac2adb6ca49
glibc@2.34-40.el9
0:2.34-272.el9_8
1

syft 1.42.1 · advisories as of 18 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.