StackRadar

CVE-2026-5450

Critical

Advisory

Published 20 Apr 2026In the index since 5 Sept 2026
Severity
Critical
worst across findings
CVSS
9.8
base score, highest
EPSS
0.005
42nd percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
2,703
of 17,803 indexed, latest versions
Container images
2,861
deployed by those charts
Fix available
3 of 4
affected packages

Red Hat Security Advisory: glibc security, bug fix, and enhancement update

Carried by container images the latest versions of 2,703 of 17,803 indexed charts deploy, on 2,861 images.

Affected packageAffected versionsFixed inImages
glibcdeb2.23-0ubuntu5, 2.23-0ubuntu7, 2.23-0ubuntu9, 2.23-0ubuntu10+59 more2.35-0ubuntu3.14, 2.39-0ubuntu8.8, 2.41-12+deb13u2+e4, 2.41-12+deb13u4+1 more2,394
glibcapk2.37-r7, 2.38-r6, 2.39-r7, 2.40-r1+8 more2.43-r722
eglibcdeb2.19-0ubuntu6.3, 2.19-0ubuntu6.6, 2.19-0ubuntu6.13, 2.19-0ubuntu6.14+1 moreno fix listed7
glibcrpm2.17-260.el7_6.4, 2.17-260.el7_6.6, 2.17-292.el7, 2.17-307.el7.1+60 more0:2.17-326.el7_9.6, 0:2.28-251.el8_10.38, 0:2.34-272.el9_8, 0:2.39-126.el10_2438
OSV records
CGA-3qwq-5w83-3j3qDEBIAN-CVE-2026-5450UBUNTU-CVE-2026-5450RHSA-2026:33092RHSA-2026:33126RHSA-2026:33226RHSA-2026:34211RLSA-2026:33126RLSA-2026:33226AZL-83093ECHO-56eb-505f-7a61
Also known as
CGA-76f7-m58j-73wj, CGA-7x3v-c6pf-4v43, CGA-88p4-5g7h-3xrh, CGA-g425-f69f-xj8j, CGA-hq3x-5xh3-92jc, CGA-j9xg-mq3r-jh83, CGA-jgfr-5wmr-hfpc, CGA-mvj4-3q5f-wmwg, CGA-p427-94gh-pr7p, CGA-p7rp-4rm4-hg9q, CGA-qj6g-5h8p-677v, CGA-vc3j-8vcq-8pqc, CGA-vv29-hp4w-2hrw, CGA-wxx7-6vh7-9qhv, CGA-xrvh-57r4-pjhh, RHSA-2026:33227, RHSA-2026:33228, RHSA-2026:33229, RHSA-2026:33230, RHSA-2026:33231, RHSA-2026:36643, USN-8611-1

Charts affected

2,703 by stars
ChartLatestAffected imagesRadar Score
endlessh-gozekker6Verified publisher0.4.01 of 1See more

endlessh-go zekker6 0.4.0

1 of the 1 container images this version deploys carry CVE-2026-5450.

Container imageDigestPackageFixed in
ghcr.io/shizunge/endlessh-go:2026.0730.08826dad32623
glibc@2.41-12+deb13u3
2.41-12+deb13u4

Open the chart page →

485
NEW_APPzekker6Verified publisher0.0.01 of 1See more

NEW_APP zekker6 0.0.0

1 of the 1 container images this version deploys carry CVE-2026-5450.

Container imageDigestPackageFixed in
library/nginx:latest05b8cb60c354
glibc@2.41-12+deb13u3
2.41-12+deb13u4

Open the chart page →

1,861
clickhousezloi-space1.2.02 of 3See more

clickhouse zloi-space 1.2.0

2 of the 3 container images this version deploys carry CVE-2026-5450.

Container imageDigestPackageFixed in
yandex/clickhouse-client:21.3863f94a0f607
glibc@2.27-3ubuntu1.4
no fix listed
yandex/clickhouse-server:21.3.204eccfffb01d7
glibc@2.31-0ubuntu9.2
no fix listed

Open the chart page →

9,272

Container images carrying it

2,861 by charts deploying them

A fixed version is listed for 3 of the 4 affected packages.

Container imageDigestPackageFixed inUsed by
ghcr.io/postgresml/pgcat:main245f9d2f5f5b
glibc@2.36-9+deb12u3
no fix listed
2
ghcr.io/project-zot/zot:v2.1.216b69512c00dc
glibc@2.41-12+deb13u3
2.41-12+deb13u4
2
ghcr.io/rss3-network/agentdata:0.1.0fd8d3e6e4cdf
glibc@2.36-9+deb12u9
no fix listed
2
ghcr.io/salaboy/fmtok8s-agenda-service:v0.0.1-native6c5efe150958
glibc@2.27-3ubuntu1.6
no fix listed
2
ghcr.io/salaboy/fmtok8s-c4p-service:v0.0.1-native3f7cc45fd20b
glibc@2.27-3ubuntu1.6
no fix listed
2
ghcr.io/salaboy/fmtok8s-frontend:v0.1.103fd01b4f56e
glibc@2.35-0ubuntu3
2.35-0ubuntu3.14
2
ghcr.io/smarter-project/home-ha-mock:main95ee018cf558
glibc@2.36-9+deb12u10
no fix listed
2
ghcr.io/smarter-project/hydra/isolated-vm:main4457b79b24cd
glibc@2.36-9+deb12u13
no fix listed
2
ghcr.io/voyagermesh/gateway:v1.8.24237fd16a3cb
glibc@2.41-12+deb13u3
2.41-12+deb13u4
2
mcr.microsoft.com/azure-sql-edge:latest902628a8be89
glibc@2.31-0ubuntu9.9
no fix listed
2
public.ecr.aws/aktosecurity/confluentinc-cp-kafka:8.1.1-1-ubi9d20bd62f0182
glibc@2.34-231.el9_7.2
0:2.34-272.el9_8
2
public.ecr.aws/cloudnatix/llmariner/model-manager-loader:1.27.026ac7263a823
glibc@2.41-12
2.41-12+deb13u4
2
public.ecr.aws/gravitational/tbot-distroless:18.11.1f64ff28fd9bd
glibc@2.36-9+deb12u14
no fix listed
2
quay.io/argoproj/argocd:v2.14.115fc69e31c755
glibc@2.39-0ubuntu8.4
2.39-0ubuntu8.8
2
quay.io/flomesh/curl-ubi8:7.84.0bef31fa5f5f3
glibc@2.28-251.el8_10.2
0:2.28-251.el8_10.38
2
quay.io/keycloak/keycloak:26.1.4044a457e0498
glibc@2.34-125.el9_5.3
0:2.34-272.el9_8
2
quay.io/keycloak/keycloak:20.0054ef67eb7da
glibc@2.28-211.el8
0:2.28-251.el8_10.38
2
quay.io/keycloak/keycloak:17.0.1-legacy68f9f38c8f30
glibc@2.28-164.el8_5.3
0:2.28-251.el8_10.38
2
quay.io/kubevirt/kubevirt-cloud-controller-manager:v0.6.037ad4c475941
glibc@2.34-231.el9_7.10
0:2.34-272.el9_8
2
quay.io/minio/mc:RELEASE.2023-09-29T16-41-22Za784ce6e3b1b
glibc@2.28-225.el8
0:2.28-251.el8_10.38
2
quay.io/minio/mc:RELEASE.2023-01-28T20-29-38Zad34abeba912
glibc@2.28-211.el8
0:2.28-251.el8_10.38
2
quay.io/minio/minio:RELEASE.2023-09-30T07-02-29Z6262bc9a2730
glibc@2.28-225.el8
0:2.28-251.el8_10.38
2
quay.io/minio/minio:RELEASE.2023-07-21T21-12-44Z8e5e9490cd50
glibc@2.28-225.el8
0:2.28-251.el8_10.38
2
quay.io/minio/minio:RELEASE.2023-02-10T18-48-39Za0a002cb113c
glibc@2.28-211.el8
0:2.28-251.el8_10.38
2
quay.io/mongodb/mongodb-kubernetes-operator:0.13.02dcc6393e6f7
glibc@2.28-251.el8_10.13
0:2.28-251.el8_10.38
2
quay.io/opencloudio/ibm-mongodb:4.0.24d8c631a6dc43
glibc@2.28-151.el8
0:2.28-251.el8_10.38
2
quay.io/open-cluster-management/registration-operator:v1.3.1df6c926a2b54
glibc@2.34-231.el9_7.10
0:2.34-272.el9_8
2
quay.io/openshift/origin-cli:4.7464a3af4dfe0
glibc@2.28-151.el8
0:2.28-251.el8_10.38
2
quay.io/openshift/origin-cli:4.8bb5e052770e5
glibc@2.28-151.el8
0:2.28-251.el8_10.38
2
quay.io/strimzi/operator:0.39.002f6f143fc6d
glibc@2.28-236.el8_9.12
0:2.28-251.el8_10.38
2
quay.io/strimzi/operator:0.46.0ac434a48ac2b
glibc@2.34-125.el9_5.8
0:2.34-272.el9_8
2
quay.io/zncdatadev/tools:1.0.0-kubedoop0.0.0-dev382fca2054c9
glibc@2.34-168.el9_6.24
0:2.34-272.el9_8
2
registry.k8s.io/sig-storage/smbplugin:v1.20.3dc7746bb081e
glibc@2.36-9+deb12u14
no fix listed
2
1dev/server:11.9.0cd5b12fe5471
glibc@2.39-0ubuntu8.4
2.39-0ubuntu8.8
1
1password/connect-api:1.8.2e915c0c84397
glibc@2.41-12+deb13u1
2.41-12+deb13u4
1
1password/connect-sync:1.8.26297ca6136c0
glibc@2.41-12+deb13u1
2.41-12+deb13u4
1
48n6e/camellia-redis-proxy:1.4.0-jdk-21-0.0.1a6ed886fddfc
glibc@2.36-9+deb12u1
no fix listed
1
5200710/hadoop:3.2.3-java8092d3088a5fb
glibc@2.31-0ubuntu9.14
no fix listed
1
a10networks/acos-prometheus-exporter:latest8dc58d434d71
glibc@2.27-3ubuntu1
no fix listed
1
aapjeisbaas/wp-frankenphp:v0.2.26b261abc7fb0
glibc@2.41-12+deb13u2
2.41-12+deb13u4
1
aboogie/login_test_backend:new9c41a4483ac8
glibc@2.36-9+deb12u7
no fix listed
1
actualbudget/actual-server:25.3.158fecd9088b7
glibc@2.36-9+deb12u9
no fix listed
1
adamzammit/limesurvey:7.1.1fdb06d62c22e
glibc@2.41-12+deb13u3
2.41-12+deb13u4
1
adorsys/keycloak-config-cli:6.3.0-26.1.085be7a45a94c
glibc@2.39-0ubuntu8.3
2.39-0ubuntu8.8
1
adorsys/keycloak-config-cli:6.1.6-25.0.1eb49a2dcbbb8
glibc@2.39-0ubuntu8.2
2.39-0ubuntu8.8
1
adwerx/github-actions-runner:2.276.1-20.04-1840d2b078682
glibc@2.31-0ubuntu9.1
no fix listed
1
agentarea/agentarea-api:latest9e15e16fa758
glibc@2.41-12+deb13u3
2.41-12+deb13u4
1
agentarea/agentarea-mcp-runner:latestd3c209a5d531
glibc@2.36-9+deb12u14
no fix listed
1
agentarea/agentarea-worker:latest1e5cb68ee77a
glibc@2.41-12+deb13u3
2.41-12+deb13u4
1
ahmetfurkandemir/iceberg-rest-fixture-postgresql:1.10.0142231a0b8b7
glibc@2.35-0ubuntu3.10
2.35-0ubuntu3.14
1

syft 1.42.1 · advisories as of 17 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.