StackRadar

CVE-2026-5450

Critical

Advisory

Published 20 Apr 2026In the index since 5 Sept 2026
Severity
Critical
worst across findings
CVSS
9.8
base score, highest
EPSS
0.005
42nd percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
2,639
of 17,828 indexed, latest versions
Container images
2,901
deployed by those charts
Fix available
3 of 4
affected packages

Red Hat Security Advisory: glibc security, bug fix, and enhancement update

Carried by container images the latest versions of 2,639 of 17,828 indexed charts deploy, on 2,901 images.

Affected packageAffected versionsFixed inImages
glibcdeb2.23-0ubuntu5, 2.23-0ubuntu7, 2.23-0ubuntu9, 2.23-0ubuntu10+59 more2.35-0ubuntu3.14, 2.39-0ubuntu8.8, 2.41-12+deb13u2+e4, 2.41-12+deb13u4+1 more2,445
glibcapk2.37-r7, 2.38-r6, 2.39-r7, 2.40-r1+8 more2.43-r722
eglibcdeb2.19-0ubuntu6.3, 2.19-0ubuntu6.6, 2.19-0ubuntu6.13, 2.19-0ubuntu6.14+1 moreno fix listed7
glibcrpm2.17-260.el7_6.4, 2.17-260.el7_6.6, 2.17-292.el7, 2.17-307.el7.1+60 more0:2.17-326.el7_9.6, 0:2.28-251.el8_10.38, 0:2.34-272.el9_8, 0:2.39-126.el10_2427
OSV records
CGA-3qwq-5w83-3j3qDEBIAN-CVE-2026-5450UBUNTU-CVE-2026-5450RHSA-2026:33092RHSA-2026:33126RHSA-2026:33226RHSA-2026:34211RLSA-2026:33126RLSA-2026:33226AZL-83093ECHO-56eb-505f-7a61
Also known as
CGA-76f7-m58j-73wj, CGA-7x3v-c6pf-4v43, CGA-88p4-5g7h-3xrh, CGA-g425-f69f-xj8j, CGA-hq3x-5xh3-92jc, CGA-j9xg-mq3r-jh83, CGA-jgfr-5wmr-hfpc, CGA-mvj4-3q5f-wmwg, CGA-p427-94gh-pr7p, CGA-p7rp-4rm4-hg9q, CGA-qj6g-5h8p-677v, CGA-vc3j-8vcq-8pqc, CGA-vv29-hp4w-2hrw, CGA-wxx7-6vh7-9qhv, CGA-xrvh-57r4-pjhh, RHSA-2026:33227, RHSA-2026:33228, RHSA-2026:33229, RHSA-2026:33230, RHSA-2026:33231, RHSA-2026:36643, USN-8611-1

Charts affected

2,639 by stars
ChartLatestAffected imagesRadar Score
sonarrgeek-cookbookVerified publisher16.3.21 of 1See more

sonarr geek-cookbook 16.3.2

1 of the 1 container images this version deploys carry CVE-2026-5450.

Container imageDigestPackageFixed in
ghcr.io/k8s-at-home/sonarr:v3.0.8.15070eb230e2381a
glibc@2.35-0ubuntu3.1
2.35-0ubuntu3.14

Open the chart page →

13,378
stashgeek-cookbookVerified publisher3.4.21 of 1See more

stash geek-cookbook 3.4.2

1 of the 1 container images this version deploys carry CVE-2026-5450.

Container imageDigestPackageFixed in
stashapp/stash:latest24dbd7607174
glibc@2.31-0ubuntu9.2
no fix listed

Open the chart page →

15,958
tdarrgeek-cookbookVerified publisher4.6.22 of 2See more

tdarr geek-cookbook 4.6.2

2 of the 2 container images this version deploys carry CVE-2026-5450.

Container imageDigestPackageFixed in
haveagitgat/tdarr:2.00.181256348872ce
glibc@2.31-0ubuntu9.7
no fix listed
haveagitgat/tdarr_node:2.00.101e3f9328327d
glibc@2.31-0ubuntu9.1
no fix listed

Open the chart page →

101,443
wireguardgeek-cookbookVerified publisher1.4.21 of 1See more

wireguard geek-cookbook 1.4.2

1 of the 1 container images this version deploys carry CVE-2026-5450.

Container imageDigestPackageFixed in
ghcr.io/k8s-at-home/wireguard:v1.0.20210424448045c4270b
glibc@2.31-0ubuntu9.2
no fix listed

Open the chart page →

7,735
gentrace-self-hostedgentrace-self-hostedVerified publisher0.1.33 of 9See more

gentrace-self-hosted gentrace-self-hosted 0.1.3

3 of the 9 container images this version deploys carry CVE-2026-5450.

Container imageDigestPackageFixed in
clickhouse/clickhouse-server:23.8512bb8a21483
glibc@2.31-0ubuntu9.16
no fix listed
confluentinc/cp-kafka:7.4.4c0224a1adf7a
glibc@2.28-236.el8.7
0:2.28-251.el8_10.38
library/postgres:15.38775adb39f0d
glibc@2.36-9+deb12u1
no fix listed

Open the chart page →

14,665
ghostfolioghostfolioVerified publisher0.5.41 of 3See more

ghostfolio ghostfolio 0.5.4

1 of the 3 container images this version deploys carry CVE-2026-5450.

Container imageDigestPackageFixed in
ghostfolio/ghostfolio:3.7.0e3c6ab53e49b
glibc@2.36-9+deb12u14
no fix listed

Open the chart page →

3,168
leantimegissilabs1.3.01 of 2See more

leantime gissilabs 1.3.0

1 of the 2 container images this version deploys carry CVE-2026-5450.

Container imageDigestPackageFixed in
library/mariadb:10.6.218a16204dc96c
glibc@2.31-0ubuntu9.17
no fix listed

Open the chart page →

6,516
openbaogitlabVerified publisher0.18.11 of 1See more

openbao gitlab 0.18.1

1 of the 1 container images this version deploys carry CVE-2026-5450.

Container imageDigestPackageFixed in
registry.gitlab.com/gitlab-org/build/cng/gitlab-openbao:v2.5.5-gitlab25b7636dfba3f
glibc@2.41-12+deb13u3
2.41-12+deb13u4

Open the chart page →

1,823
gorules-brmsgorulesVerified publisher1.18.11 of 1See more

gorules-brms gorules 1.18.1

1 of the 1 container images this version deploys carry CVE-2026-5450.

Container imageDigestPackageFixed in
gorules/brms:latest3cd59e25efad
glibc@2.41-12+deb13u3
2.41-12+deb13u4

Open the chart page →

338
meta-monitoringgrafana1.3.01 of 2See more

meta-monitoring grafana 1.3.0

1 of the 2 container images this version deploys carry CVE-2026-5450.

Container imageDigestPackageFixed in
grafana/alloy:v1.4.306bdcbb51fc2
glibc@2.39-0ubuntu8.3
2.39-0ubuntu8.8

Open the chart page →

3,627
greenkubegreenkubeVerified publisher0.3.01 of 3See more

greenkube greenkube 0.3.0

1 of the 3 container images this version deploys carry CVE-2026-5450.

Container imageDigestPackageFixed in
greenkube/greenkube:0.3.00c01932282a4
glibc@2.36-9+deb12u14
no fix listed

Open the chart page →

1,526
ghostgroundhog2k0.212.131 of 1See more

ghost groundhog2k 0.212.13

1 of the 1 container images this version deploys carry CVE-2026-5450.

Container imageDigestPackageFixed in
library/ghost:6.64.0a31d03f1f629
glibc@2.36-9+deb12u14
no fix listed

Open the chart page →

2,010
growthbookgrowthbook5.0.11 of 2See more

growthbook growthbook 5.0.1

1 of the 2 container images this version deploys carry CVE-2026-5450.

Container imageDigestPackageFixed in
growthbook/growthbook:5.0.1f53ead646b5f
glibc@2.36-9+deb12u14
no fix listed

Open the chart page →

749
IMgrycapOfficialVerified publisher1.8.01 of 3See more

IM grycap 1.8.0

1 of the 3 container images this version deploys carry CVE-2026-5450.

Container imageDigestPackageFixed in
ghcr.io/grycap/im:latest06a16d4f279f
glibc@2.39-0ubuntu8.5
2.39-0ubuntu8.8

Open the chart page →

4,260
castopodh2mVerified publisher1.12.101 of 3See more

castopod h2m 1.12.10

1 of the 3 container images this version deploys carry CVE-2026-5450.

Container imageDigestPackageFixed in
castopod/castopod:1.12.101fd37280cbb2
glibc@2.36-9+deb12u8
no fix listed

Open the chart page →

10,089
haproxy-redis-sentinelhaproxy-redis-sentinelVerified publisher0.1.32 of 2See more

haproxy-redis-sentinel haproxy-redis-sentinel 0.1.3

2 of the 2 container images this version deploys carry CVE-2026-5450.

Container imageDigestPackageFixed in
library/haproxy:3.1-bookworm49a0a0d6f0b8
glibc@2.36-9+deb12u10
no fix listed
ghcr.io/parmincloud/haproxy-redis-sentinel:1.0.040a00a6456ae
glibc@2.36-9+deb12u10
no fix listed

Open the chart page →

4,365
harp-proxyharp0.8.11 of 1See more

harp-proxy harp 0.8.1

1 of the 1 container images this version deploys carry CVE-2026-5450.

Container imageDigestPackageFixed in
makersquad/harp-proxy:0.8.1a40dd258c527
glibc@2.36-9+deb12u10
no fix listed

Open the chart page →

6,569
hawkhawk1.1.52 of 4See more

hawk hawk 1.1.5

2 of the 4 container images this version deploys carry CVE-2026-5450.

Container imageDigestPackageFixed in
library/postgres:16.109f23e02d766
glibc@2.36-9+deb12u4
no fix listed
ghcr.io/privacyengineering/hawk-service:latestbfedf47bb5e0
glibc@2.35-0ubuntu3.6
2.35-0ubuntu3.14

Open the chart page →

13,784
clickstackhdx-oss-v21.1.11 of 5See more

clickstack hdx-oss-v2 1.1.1

1 of the 5 container images this version deploys carry CVE-2026-5450.

Container imageDigestPackageFixed in
library/mongo:5.0.32-focal3b6c281e1c08
glibc@2.31-0ubuntu9.17
no fix listed

Open the chart page →

4,794
guacamolehelmforgeVerified publisher1.5.22 of 5See more

guacamole helmforge 1.5.2

2 of the 5 container images this version deploys carry CVE-2026-5450.

Container imageDigestPackageFixed in
guacamole/guacamole:1.6.0f344085e618b
glibc@2.39-0ubuntu8.4
2.39-0ubuntu8.8
library/postgres:17.5-bookwormfbcea1bd13b6
glibc@2.36-9+deb12u10
no fix listed

Open the chart page →

8,672
matomohelmforgeVerified publisher2.3.01 of 3See more

matomo helmforge 2.3.0

1 of the 3 container images this version deploys carry CVE-2026-5450.

Container imageDigestPackageFixed in
library/matomo:5.13.0-apache8e6bdd396496
glibc@2.41-12+deb13u3
2.41-12+deb13u4

Open the chart page →

2,826
uptime-kumahelmforgeVerified publisher1.5.131 of 1See more

uptime-kuma helmforge 1.5.13

1 of the 1 container images this version deploys carry CVE-2026-5450.

Container imageDigestPackageFixed in
louislam/uptime-kuma:2.5.4917318f9d7be
glibc@2.36-9+deb12u14
no fix listed

Open the chart page →

30,720
valkeyhelmforgeVerified publisher2.0.41 of 1See more

valkey helmforge 2.0.4

1 of the 1 container images this version deploys carry CVE-2026-5450.

Container imageDigestPackageFixed in
valkey/valkey:9.1.2c123e3715db6
glibc@2.41-12+deb13u3
2.41-12+deb13u4

Open the chart page →

858
vaultwardenhelmforgeVerified publisher1.14.11 of 1See more

vaultwarden helmforge 1.14.1

1 of the 1 container images this version deploys carry CVE-2026-5450.

Container imageDigestPackageFixed in
vaultwarden/server:1.37.31587c45feaa4
glibc@2.41-12+deb13u3
2.41-12+deb13u4

Open the chart page →

1,526
velerohelmforgeVerified publisher1.4.101 of 2See more

velero helmforge 1.4.10

1 of the 2 container images this version deploys carry CVE-2026-5450.

Container imageDigestPackageFixed in
velero/velero:v1.18.237396519f399
glibc@2.35-0ubuntu3.13
2.35-0ubuntu3.14

Open the chart page →

1,461
helm-operatorhelm-operatorVerified publisher0.0.21 of 1See more

helm-operator helm-operator 0.0.2

1 of the 1 container images this version deploys carry CVE-2026-5450.

Container imageDigestPackageFixed in
bsgrigorov/helm-operator:latest45ab095f09c8
glibc@2.28-127.el8_3.2
0:2.28-251.el8_10.38

Open the chart page →

6,990
helmuphelmupVerified publisher0.1.03 of 3See more

helmup helmup 0.1.0

3 of the 3 container images this version deploys carry CVE-2026-5450.

Container imageDigestPackageFixed in
sirrend/helmup-engine:0.1.13699e79e3d4e2
glibc@2.36-9+deb12u7
no fix listed
sirrend/helmup-github-scraper:0.1.47ca688c7abf5
glibc@2.36-9+deb12u7
no fix listed
sirrend/helmup-notifications-service:0.1.3997866417011
glibc@2.36-9+deb12u7
no fix listed

Open the chart page →

16,732
hivemq-swarmhivemqOfficialVerified publisher0.2.701 of 1See more

hivemq-swarm hivemq 0.2.70

1 of the 1 container images this version deploys carry CVE-2026-5450.

Container imageDigestPackageFixed in
hivemq/hivemq-swarm:4.54.0f9746d5d70fa
glibc@2.39-0ubuntu8.7
2.39-0ubuntu8.8

Open the chart page →

1,450
hiverhiverVerified publisher0.1.4510 of 10See more

hiver hiver 0.1.45

10 of the 10 container images this version deploys carry CVE-2026-5450.

Container imageDigestPackageFixed in
hiversh/antigravity:0.1.45-microvm0e36d98402bc
glibc@2.36-9+deb12u14
no fix listed
hiversh/browser:0.1.45-microvmb5048c6342ce
glibc@2.36-9+deb12u14
no fix listed
hiversh/claude:0.1.45-microvm2fbf9f264498
glibc@2.36-9+deb12u14
no fix listed
hiversh/codex:0.1.45-microvm4f43130f51e5
glibc@2.36-9+deb12u14
no fix listed
hiversh/controller:0.1.45b0b85f8942c7
glibc@2.36-9+deb12u14
no fix listed
hiversh/copilot:0.1.45-microvm50c07b84f298
glibc@2.36-9+deb12u14
no fix listed
hiversh/gateway:0.1.45839226cc6e41
glibc@2.35-0ubuntu3.11
2.35-0ubuntu3.14
hiversh/node:0.1.45-alpine-microvm836a37641941
glibc@2.36-9+deb12u14
no fix listed
hiversh/openclaw:0.1.45-microvm958b7ebb4eb4
glibc@2.36-9+deb12u14
no fix listed
hiversh/python:0.1.45-3.13-alpine-microvm63a5ae179a9f
glibc@2.36-9+deb12u14
no fix listed

Open the chart page →

22,177
holoinsightholoinsight0.2.52 of 6See more

holoinsight holoinsight 0.2.5

2 of the 6 container images this version deploys carry CVE-2026-5450.

Container imageDigestPackageFixed in
ceresdb/ceresdb-server:v1.0.053b2d0dbba1f
glibc@2.31-0ubuntu9.9
no fix listed
library/elasticsearch:7.16.18d5fd89230d7
glibc@2.31-0ubuntu9.2
no fix listed

Open the chart page →

27,944
refineryhoneycomb3.4.01 of 2See more

refinery honeycomb 3.4.0

1 of the 2 container images this version deploys carry CVE-2026-5450.

Container imageDigestPackageFixed in
library/redis:8.48df317692c59
glibc@2.41-12+deb13u3
2.41-12+deb13u4

Open the chart page →

1,018
hpe-greenlake-file-csi-driverhpe-storageVerified publisher2.6.42 of 7See more

hpe-greenlake-file-csi-driver hpe-storage 2.6.4

2 of the 7 container images this version deploys carry CVE-2026-5450.

Container imageDigestPackageFixed in
quay.io/hpestorage/filex-csi-driver:2.6.4b7f960bbf472
glibc@2.34-231.el9_7.2
0:2.34-272.el9_8
quay.io/hpestorage/filex-csi-init:2.6.42d867eefb233
glibc@2.34-125.el9_5.1
0:2.34-272.el9_8

Open the chart page →

6,314
htnn-controllerhtnnVerified publisher0.5.01 of 1See more

htnn-controller htnn 0.5.0

1 of the 1 container images this version deploys carry CVE-2026-5450.

Container imageDigestPackageFixed in
ghcr.io/mosn/htnn-controller:v0.3.1c379e66246be
glibc@2.35-0ubuntu3.7
2.35-0ubuntu3.14

Open the chart page →

4,386
huehue1.0.31 of 3See more

hue hue 1.0.3

1 of the 3 container images this version deploys carry CVE-2026-5450.

Container imageDigestPackageFixed in
gethue/hue:latest7d5c1b9f8a79
glibc@2.35-0ubuntu3.10
2.35-0ubuntu3.14

Open the chart page →

62,311
iceberg-resticeberg-rest-fixture0.0.11 of 2See more

iceberg-rest iceberg-rest-fixture 0.0.1

1 of the 2 container images this version deploys carry CVE-2026-5450.

Container imageDigestPackageFixed in
ahmetfurkandemir/iceberg-rest-fixture-postgresql:1.10.0142231a0b8b7
glibc@2.35-0ubuntu3.10
2.35-0ubuntu3.14

Open the chart page →

3,572
spoolmanideaplexusVerified publisher2.7.11 of 1See more

spoolman ideaplexus 2.7.1

1 of the 1 container images this version deploys carry CVE-2026-5450.

Container imageDigestPackageFixed in
ghcr.io/donkie/spoolman:0.26.1cf9b41e17b93
glibc@2.36-9+deb12u14
no fix listed

Open the chart page →

1,843
backendikusi-bk-chart1.0.32 of 3See more

backend ikusi-bk-chart 1.0.3

2 of the 3 container images this version deploys carry CVE-2026-5450.

Container imageDigestPackageFixed in
kyovint/kyoimgtransactions:1.0.048c19e3ae9a3
glibc@2.41-12
2.41-12+deb13u4
kyovint/kyoimgusers:1.0.080084149156e
glibc@2.41-12
2.41-12+deb13u4

Open the chart page →

5,724
odooimioVerified publisher3.1.01 of 3See more

odoo imio 3.1.0

1 of the 3 container images this version deploys carry CVE-2026-5450.

Container imageDigestPackageFixed in
library/postgres:17.10ebba4f4de37f
glibc@2.41-12+deb13u3
2.41-12+deb13u4

Open the chart page →

3,136
immichimmich-helm0.3.04 of 4See more

immich immich-helm 0.3.0

4 of the 4 container images this version deploys carry CVE-2026-5450.

Container imageDigestPackageFixed in
valkey/valkey:8.1.481db6d39e1bb
glibc@2.41-12
2.41-12+deb13u4
ghcr.io/immich-app/immich-machine-learning:v2.3.1379e31b8c751
glibc@2.36-9+deb12u13
no fix listed
ghcr.io/immich-app/immich-server:v2.3.1f8d06a32b1b2
glibc@2.41-12
2.41-12+deb13u4
ghcr.io/immich-app/postgres:14-vectorchord0.4.3-pgvectors0.2.0bcf63357191b
glibc@2.36-9+deb12u10
no fix listed

Open the chart page →

15,883
valkey-clusterinnagoVerified publisher1.1.01 of 2See more

valkey-cluster innago 1.1.0

1 of the 2 container images this version deploys carry CVE-2026-5450.

Container imageDigestPackageFixed in
valkey/valkey:8.0.1c5d4f082b76d
glibc@2.36-9+deb12u8
no fix listed

Open the chart page →

2,670
elasticinseefrlab2.2.02 of 2See more

elastic inseefrlab 2.2.0

2 of the 2 container images this version deploys carry CVE-2026-5450.

Container imageDigestPackageFixed in
library/elasticsearch:7.17.35e6ac15bf6a5
glibc@2.31-0ubuntu9.7
no fix listed
library/kibana:7.17.3e2e2031c15be
glibc@2.31-0ubuntu9.7
no fix listed

Open the chart page →

17,521
iris-webappiris-webapp0.2.41 of 2See more

iris-webapp iris-webapp 0.2.4

1 of the 2 container images this version deploys carry CVE-2026-5450.

Container imageDigestPackageFixed in
ghcr.io/dfir-iris/iriswebapp_app:v2.4.26e59ebde55709
glibc@2.41-12
2.41-12+deb13u4

Open the chart page →

11,855
cniistio1.10.31 of 1See more

cni istio 1.10.3

1 of the 1 container images this version deploys carry CVE-2026-5450.

Container imageDigestPackageFixed in
istio/install-cni:1.10.32232f365aed6
glibc@2.27-3ubuntu1.4
no fix listed

Open the chart page →

71,989
discoveryistio1.10.31 of 1See more

discovery istio 1.10.3

1 of the 1 container images this version deploys carry CVE-2026-5450.

Container imageDigestPackageFixed in
istio/pilot:1.10.3e7e110a421c2
glibc@2.27-3ubuntu1.4
no fix listed

Open the chart page →

72,063
egressistio1.10.31 of 1See more

egress istio 1.10.3

1 of the 1 container images this version deploys carry CVE-2026-5450.

Container imageDigestPackageFixed in
istio/proxyv2:1.10.3a78b7a165744
glibc@2.27-3ubuntu1.4
no fix listed

Open the chart page →

72,009
ingressistio1.10.31 of 1See more

ingress istio 1.10.3

1 of the 1 container images this version deploys carry CVE-2026-5450.

Container imageDigestPackageFixed in
istio/proxyv2:1.10.3a78b7a165744
glibc@2.27-3ubuntu1.4
no fix listed

Open the chart page →

72,009
operatoristio1.10.31 of 1See more

operator istio 1.10.3

1 of the 1 container images this version deploys carry CVE-2026-5450.

Container imageDigestPackageFixed in
istio/operator:1.10.3655eefa11c84
glibc@2.27-3ubuntu1.4
no fix listed

Open the chart page →

72,290
jellyfinjellyfinVerified publisher0.3.301 of 1See more

jellyfin jellyfin 0.3.30

1 of the 1 container images this version deploys carry CVE-2026-5450.

Container imageDigestPackageFixed in
ghcr.io/jellyfin/jellyfin:10.11.1145f648c382a0
glibc@2.41-12+deb13u3
2.41-12+deb13u4

Open the chart page →

2,681
jenkinsjenkins-cicd-tool0.1.01 of 1See more

jenkins jenkins-cicd-tool 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-5450.

Container imageDigestPackageFixed in
jenkins/jenkins:ltsc1e4c349365f
glibc@2.41-12+deb13u3
2.41-12+deb13u4

Open the chart page →

2,545
jetic-operatorjetic-operatorVerified publisher2.0.21 of 1See more

jetic-operator jetic-operator 2.0.2

1 of the 1 container images this version deploys carry CVE-2026-5450.

Container imageDigestPackageFixed in
apache/camel-k:1.10.43bb13d14f64a
glibc@2.28-189.5.el8_6
0:2.28-251.el8_10.38

Open the chart page →

9,413

Container images carrying it

2,901 by charts deploying them

A fixed version is listed for 3 of the 4 affected packages.

Container imageDigestPackageFixed inUsed by
registry.k8s.io/sig-storage/nfsplugin:v4.11.0ce5b5ccd5eb0
glibc@2.36-9+deb12u10
no fix listed
1

syft 1.42.1 · advisories as of 22 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.