StackRadar

CVE-2026-5450

Critical

Advisory

Published 20 Apr 2026In the index since 5 Sept 2026
Severity
Critical
worst across findings
CVSS
9.8
base score, highest
EPSS
0.005
42nd percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
2,656
of 17,821 indexed, latest versions
Container images
2,855
deployed by those charts
Fix available
3 of 4
affected packages

Red Hat Security Advisory: glibc security, bug fix, and enhancement update

Carried by container images the latest versions of 2,656 of 17,821 indexed charts deploy, on 2,855 images.

Affected packageAffected versionsFixed inImages
glibcdeb2.23-0ubuntu5, 2.23-0ubuntu7, 2.23-0ubuntu9, 2.23-0ubuntu10+59 more2.35-0ubuntu3.14, 2.39-0ubuntu8.8, 2.41-12+deb13u2+e4, 2.41-12+deb13u4+1 more2,405
glibcapk2.37-r7, 2.38-r6, 2.39-r7, 2.40-r1+8 more2.43-r722
eglibcdeb2.19-0ubuntu6.3, 2.19-0ubuntu6.6, 2.19-0ubuntu6.13, 2.19-0ubuntu6.14+1 moreno fix listed7
glibcrpm2.17-260.el7_6.4, 2.17-260.el7_6.6, 2.17-292.el7, 2.17-307.el7.1+60 more0:2.17-326.el7_9.6, 0:2.28-251.el8_10.38, 0:2.34-272.el9_8, 0:2.39-126.el10_2421
OSV records
CGA-3qwq-5w83-3j3qDEBIAN-CVE-2026-5450UBUNTU-CVE-2026-5450RHSA-2026:33092RHSA-2026:33126RHSA-2026:33226RHSA-2026:34211RLSA-2026:33126RLSA-2026:33226AZL-83093ECHO-56eb-505f-7a61
Also known as
CGA-76f7-m58j-73wj, CGA-7x3v-c6pf-4v43, CGA-88p4-5g7h-3xrh, CGA-g425-f69f-xj8j, CGA-hq3x-5xh3-92jc, CGA-j9xg-mq3r-jh83, CGA-jgfr-5wmr-hfpc, CGA-mvj4-3q5f-wmwg, CGA-p427-94gh-pr7p, CGA-p7rp-4rm4-hg9q, CGA-qj6g-5h8p-677v, CGA-vc3j-8vcq-8pqc, CGA-vv29-hp4w-2hrw, CGA-wxx7-6vh7-9qhv, CGA-xrvh-57r4-pjhh, RHSA-2026:33227, RHSA-2026:33228, RHSA-2026:33229, RHSA-2026:33230, RHSA-2026:33231, RHSA-2026:36643, USN-8611-1

Charts affected

2,656 by stars
ChartLatestAffected imagesRadar Score
zahori-schedulerzahoriVerified publisher1.0.11 of 1See more

zahori-scheduler zahori 1.0.1

1 of the 1 container images this version deploys carry CVE-2026-5450.

Container imageDigestPackageFixed in
zahoriaut/zahori-scheduler:1.0.047d0979b1184
glibc@2.27-3ubuntu1.6
no fix listed

Open the chart page →

2,485
keycloakxzaks2.2.01 of 1See more

keycloakx zaks 2.2.0

1 of the 1 container images this version deploys carry CVE-2026-5450.

Container imageDigestPackageFixed in
quay.io/keycloak/keycloak:20.0.3b8f2a453a17a
glibc@2.28-211.el8
0:2.28-251.el8_10.38

Open the chart page →

6,026
posthogzeet0.23.21 of 9See more

posthog zeet 0.23.2

1 of the 9 container images this version deploys carry CVE-2026-5450.

Container imageDigestPackageFixed in
altinity/clickhouse-operator:0.19.07a85f522c5bc
glibc@2.28-211.el8
0:2.28-251.el8_10.38

Open the chart page →

3,700
changedetection-iozekker6Verified publisher1.102.01 of 1See more

changedetection-io zekker6 1.102.0

1 of the 1 container images this version deploys carry CVE-2026-5450.

Container imageDigestPackageFixed in
ghcr.io/dgtlmoon/changedetection.io:0.60.7096dae27b5d6
glibc@2.36-9+deb12u14
no fix listed

Open the chart page →

2,697
endlessh-gozekker6Verified publisher0.4.01 of 1See more

endlessh-go zekker6 0.4.0

1 of the 1 container images this version deploys carry CVE-2026-5450.

Container imageDigestPackageFixed in
ghcr.io/shizunge/endlessh-go:2026.0730.08826dad32623
glibc@2.41-12+deb13u3
2.41-12+deb13u4

Open the chart page →

493
clickhousezloi-space1.2.02 of 3See more

clickhouse zloi-space 1.2.0

2 of the 3 container images this version deploys carry CVE-2026-5450.

Container imageDigestPackageFixed in
yandex/clickhouse-client:21.3863f94a0f607
glibc@2.27-3ubuntu1.4
no fix listed
yandex/clickhouse-server:21.3.204eccfffb01d7
glibc@2.31-0ubuntu9.2
no fix listed

Open the chart page →

9,296

Container images carrying it

2,855 by charts deploying them

A fixed version is listed for 3 of the 4 affected packages.

Container imageDigestPackageFixed inUsed by
quay.io/hpestorage/filex-csi-driver:2.6.4b7f960bbf472
glibc@2.34-231.el9_7.2
0:2.34-272.el9_8
1
quay.io/hpestorage/filex-csi-init:2.6.42d867eefb233
glibc@2.34-125.el9_5.1
0:2.34-272.el9_8
1
quay.io/hpestorage/volume-group-provisioner:v1.0.107bf9d8f16a5d
glibc@2.34-270.el9_8
0:2.34-272.el9_8
1
quay.io/hpestorage/volume-group-snapshotter:v1.0.10caeaaffe7e2b
glibc@2.34-270.el9_8
0:2.34-272.el9_8
1
quay.io/hpestorage/volume-mutator:v1.3.109e98b2e697bd
glibc@2.34-270.el9_8
0:2.34-272.el9_8
1
quay.io/ibmgaragecloud/developer-dashboard:v1.4.47a4b9fedc724
glibc@2.28-101.el8
0:2.28-251.el8_10.38
1
quay.io/icdh/core-dump-handler:v9.0.0cc79b9e2a1c8
glibc@2.28-251.el8_10.5
0:2.28-251.el8_10.38
1
quay.io/jupyterhub/k8s-hub:4.4.2108fbb01c3fe
glibc@2.36-9+deb12u14
no fix listed
1
quay.io/jupyterhub/k8s-hub:4.3.5113e372cf71b
glibc@2.36-9+deb12u13
no fix listed
1
quay.io/jupyterhub/k8s-hub:4.3.492f883d09270
glibc@2.36-9+deb12u13
no fix listed
1
quay.io/jupyterhub/k8s-singleuser-sample:4.4.265e1b09fc8c9
glibc@2.36-9+deb12u14
no fix listed
1
quay.io/kannika/kannika-api:0.18.0bcf9906d5a3c
glibc@2.41-12+deb13u3
2.41-12+deb13u4
1
quay.io/kannika/kannika-console:0.18.0cc024a8ee909
glibc@2.36-9+deb12u14
no fix listed
1
quay.io/keycloak/keycloak:26.009a381c715ab
glibc@2.34-125.el9_5.1
0:2.34-272.el9_8
1
quay.io/keycloak/keycloak:14.0.03029dc0f1d38
glibc@2.28-151.el8
0:2.28-251.el8_10.38
1
quay.io/keycloak/keycloak:26.0.74388e2379b7e
glibc@2.34-125.el9_5.1
0:2.34-272.el9_8
1
quay.io/keycloak/keycloak:24.0.34d6f22991266
glibc@2.34-100.el9
0:2.34-272.el9_8
1
quay.io/keycloak/keycloak:23.0.34f72a5b0c076
glibc@2.34-83.el9_3.7
0:2.34-272.el9_8
1
quay.io/keycloak/keycloak:26.3.36a7217a100bd
glibc@2.34-168.el9_6.23
0:2.34-272.el9_8
1
quay.io/keycloak/keycloak:20.0.18830f76112b6
glibc@2.28-211.el8
0:2.28-251.el8_10.38
1
quay.io/keycloak/keycloak:26.5.68d44614c7479
glibc@2.34-231.el9_7.10
0:2.34-272.el9_8
1
quay.io/keycloak/keycloak:26.49409c59bdfb6
glibc@2.34-231.el9_7.2
0:2.34-272.el9_8
1
quay.io/keycloak/keycloak:26.6.39b0330756022
glibc@2.34-270.el9_8
0:2.34-272.el9_8
1
quay.io/keycloak/keycloak:26.0.6a93d22e13b86
glibc@2.34-125.el9_5.1
0:2.34-272.el9_8
1
quay.io/keycloak/keycloak:20.0.3b8f2a453a17a
glibc@2.28-211.el8
0:2.28-251.el8_10.38
1
quay.io/keycloak/keycloak-operator:19.0.3-legacy09d52508fee9
glibc@2.28-189.5.el8_6
0:2.28-251.el8_10.38
1
quay.io/keycloak/keycloak-operator:19.0.2-legacy15fa0ed662b1
glibc@2.28-189.5.el8_6
0:2.28-251.el8_10.38
1
quay.io/keycloak/keycloak-operator:18.0.0-legacy36ce77526145
glibc@2.28-164.el8_5.3
0:2.28-251.el8_10.38
1
quay.io/keycloak/keycloak-operator:20.0.2b1710745fa64
glibc@2.28-211.el8
0:2.28-251.el8_10.38
1
quay.io/kiali/kiali:v1.89.30dcdb1c1e747
glibc@2.28-236.el8_9.12
0:2.28-251.el8_10.38
1
quay.io/kiali/kiali:v2.23.07652b1285f50
glibc@2.34-231.el9_7.10
0:2.34-272.el9_8
1
quay.io/konveyor/move2kube-ui:latestec6ab507c5da
glibc@2.28-251.el8_10.11
0:2.28-251.el8_10.38
1
quay.io/kubevirt/kubemacpool:v0.45.0eebb65b8a12c
glibc@2.34-125.el9_5.1
0:2.34-272.el9_8
1
quay.io/kubevirt/virt-operator:v1.7.037d2ef21e3e5
glibc@2.36-9+deb12u10
no fix listed
1
quay.io/kubevirt/virt-operator:v1.8.465d23c9ad917
glibc@2.36-9+deb12u13
no fix listed
1
quay.io/kubevirt/vm-console-proxy:v0.8.08d6b4b6e99bd
glibc@2.34-125.el9_5.3
0:2.34-272.el9_8
1
quay.io/lakekeeper/catalog:v0.13.3db2ba6168eb1
glibc@2.41-12+deb13u3
2.41-12+deb13u4
1
quay.io/manusa/kubernetes_mcp_server:v0.0.47150f76e844d9
glibc@2.34-168.el9_6.20
0:2.34-272.el9_8
1
quay.io/maximilianopizarro/integration-console-plugin:v0.8.2270ed23a9afd
glibc@2.34-270.el9_8
0:2.34-272.el9_8
1
quay.io/maximilianopizarro/neuralbank-backend:latesta53899fcfc01
glibc@2.34-231.el9_7.2
0:2.34-272.el9_8
1
quay.io/maximilianopizarro/neuralbank-frontend:latest5f4572ef6d6f
glibc@2.34-231.el9_7.2
0:2.34-272.el9_8
1
quay.io/maximilianopizarro/neuroface-backend:v1.4.13194d46df0f9
glibc@2.34-270.el9_8
0:2.34-272.el9_8
1
quay.io/maximilianopizarro/neuroface-backend:latestcba71dc08c8a
glibc@2.34-270.el9_8
0:2.34-272.el9_8
1
quay.io/maximilianopizarro/neuroface-frontend:v1.4.1841b70cd1424
glibc@2.34-231.el9_7.2
0:2.34-272.el9_8
1
quay.io/maximilianopizarro/neuroface-frontend:latestdcf24040cc77
glibc@2.34-231.el9_7.2
0:2.34-272.el9_8
1
quay.io/maximilianopizarro/nfl-api-bills:1.0.1b596a4687bb0
glibc@2.28-251.el8_10.5
0:2.28-251.el8_10.38
1
quay.io/maximilianopizarro/nfl-wallet-api-customers:1.0.1d50c80a85b35
glibc@2.28-251.el8_10.5
0:2.28-251.el8_10.38
1
quay.io/maximilianopizarro/nfl-wallet-api-raiders:1.0.1f9c71dc2bc5f
glibc@2.28-251.el8_10.5
0:2.28-251.el8_10.38
1
quay.io/maximilianopizarro/nfl-wallet-webapp:1.0.13fead5702be7
glibc@2.28-251.el8_10.31
0:2.28-251.el8_10.38
1
quay.io/maximilianopizarro/openshift-integration-operator:v0.8.2d6fc43ac802e
glibc@2.34-125.el9_5.3
0:2.34-272.el9_8
1

syft 1.42.1 · advisories as of 20 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.