StackRadar

CVE-2026-5928

High

Advisory

Published 20 Apr 2026In the index since 5 Sept 2026
Severity
High
worst across findings
CVSS
7.5
base score, highest
EPSS
0.004
30th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
2,447
of 17,787 indexed, latest versions
Container images
2,477
deployed by those charts
Fix available
2 of 4
affected packages

CVE-2026-5928 affecting package glibc 2.38-21

Carried by container images the latest versions of 2,447 of 17,787 indexed charts deploy, on 2,477 images.

Affected packageAffected versionsFixed inImages
glibcdeb2.23-0ubuntu5, 2.23-0ubuntu7, 2.23-0ubuntu9, 2.23-0ubuntu10+59 more2.35-0ubuntu3.14, 2.39-0ubuntu8.8, 2.41-12+deb13u2+e4, 2.41-12+deb13u4+1 more2,425
glibcapk2.37-r7, 2.38-r6, 2.39-r7, 2.40-r1+8 more2.43-r722
eglibcdeb2.19-0ubuntu6.3, 2.19-0ubuntu6.6, 2.19-0ubuntu6.13, 2.19-0ubuntu6.14+1 moreno fix listed7
glibcrpm2.38-16.azl3, 2.38-18.azl3, 2.38-20.azl3no fix listed23
OSV records
CGA-2gxw-5ffj-x2phDEBIAN-CVE-2026-5928UBUNTU-CVE-2026-5928AZL-83087ECHO-c634-adb4-1dbe
Also known as
CGA-482r-2xq8-f4x9, CGA-52fm-fh87-3chx, CGA-7rhh-qh9f-p756, CGA-8q82-f5j8-fh3w, CGA-cr8c-r5h5-5gc4, CGA-fwmr-xqf9-976q, CGA-h6w5-gmvw-7p3j, CGA-h8hx-28hx-583g, CGA-mff9-49w3-8vxq, CGA-q7rf-9pqj-g4hq, CGA-r747-wj6f-v7p4, CGA-vrh7-vv5q-5295, CGA-wxh3-3r3r-49wr, CGA-x688-wmjw-qhpm, CGA-xqv8-j654-32r2, USN-8611-1

Charts affected

2,447 by stars
ChartLatestAffected imagesRadar Score
service-gatewayappscodeVerified publisher2026.9.112 of 3See more

service-gateway appscode 2026.9.11

2 of the 3 container images this version deploys carry CVE-2026-5928.

Container imageDigestPackageFixed in
ghcr.io/voyagermesh/crd-manager:v0.3.0e67f14e5c853
glibc@2.36-9+deb12u14
no fix listed
ghcr.io/voyagermesh/gateway:v1.8.24237fd16a3cb
glibc@2.41-12+deb13u3
2.41-12+deb13u4

Open the chart page →

2,088
voyager-gatewayappscodeVerified publisher2026.7.212 of 2See more

voyager-gateway appscode 2026.7.21

2 of the 2 container images this version deploys carry CVE-2026-5928.

Container imageDigestPackageFixed in
ghcr.io/voyagermesh/crd-manager:v0.3.0e67f14e5c853
glibc@2.36-9+deb12u14
no fix listed
ghcr.io/voyagermesh/gateway:v1.8.24237fd16a3cb
glibc@2.41-12+deb13u3
2.41-12+deb13u4

Open the chart page →

1,265
haproxyappuio2.7.21 of 1See more

haproxy appuio 2.7.2

1 of the 1 container images this version deploys carry CVE-2026-5928.

Container imageDigestPackageFixed in
ghcr.io/vshn/haproxy-with-mysql:1.0.0a3c27ee3fb2f
glibc@2.36-9+deb12u1
no fix listed

Open the chart page →

4,899
dokuwikiarea-42Verified publisher0.1.81 of 1See more

dokuwiki area-42 0.1.8

1 of the 1 container images this version deploys carry CVE-2026-5928.

Container imageDigestPackageFixed in
dokuwiki/dokuwiki:2025-05-14af08ecfdda239
glibc@2.41-12
2.41-12+deb13u4

Open the chart page →

7,521
argocdargo-helm-charts1.0.01 of 3See more

argocd argo-helm-charts 1.0.0

1 of the 3 container images this version deploys carry CVE-2026-5928.

Container imageDigestPackageFixed in
quay.io/argoproj/argocd:v2.14.115fc69e31c755
glibc@2.39-0ubuntu8.4
2.39-0ubuntu8.8

Open the chart page →

7,338
argonix-apiargonix0.2.31 of 4See more

argonix-api argonix 0.2.3

1 of the 4 container images this version deploys carry CVE-2026-5928.

Container imageDigestPackageFixed in
ghcr.io/argonix-io/argonix-api:1.0.0cb5f24732197
glibc@2.41-12+deb13u3
2.41-12+deb13u4

Open the chart page →

4,819
arlas-aiasarlas-stackVerified publisher28.8.012 of 22See more

arlas-aias arlas-stack 28.8.0

12 of the 22 container images this version deploys carry CVE-2026-5928.

Container imageDigestPackageFixed in
bitnamilegacy/elasticsearch:9.0.1-debian-12-r0e6f6ddcce2f1
glibc@2.36-9+deb12u10
no fix listed
bitnamilegacy/keycloak:26.3.3-debian-12-r0da3df0976a9f
glibc@2.36-9+deb12u10
no fix listed
bitnamilegacy/minio:2024.12.18-debian-12-r1c0ede65eb88e
glibc@2.36-9+deb12u9
no fix listed
bitnamilegacy/minio:2025.4.22-debian-12-r1d7cd0e172c4c
glibc@2.36-9+deb12u10
no fix listed
bitnamilegacy/os-shell:12-debian-12-r439ba5d16f9c64
glibc@2.36-9+deb12u10
no fix listed
bitnamilegacy/postgresql:17.6.0-debian-12-r0de520acd66fc
glibc@2.36-9+deb12u10
no fix listed
bitnamilegacy/rabbitmq:4.1.2-debian-12-r074a3d7c747eb
glibc@2.36-9+deb12u10
no fix listed
bitnamilegacy/redis:8.0.3-debian-12-r1189aae381e7f
glibc@2.36-9+deb12u10
no fix listed
gisaia/arlas-permissions-server:28.0.0e612fc722e02
glibc@2.41-12+deb13u2
2.41-12+deb13u4
gisaia/arlas-persistence-server:28.0.0f667e0ee79be
glibc@2.41-12+deb13u2
2.41-12+deb13u4
gisaia/arlas-server:28.0.04e693e7b6f37
glibc@2.41-12+deb13u2
2.41-12+deb13u4
ghcr.io/developmentseed/titiler:0.22.48ac53eb38393
glibc@2.36-9+deb12u10
no fix listed

Open the chart page →

40,411
arlas-servicesarlas-stackVerified publisher28.8.03 of 3See more

arlas-services arlas-stack 28.8.0

3 of the 3 container images this version deploys carry CVE-2026-5928.

Container imageDigestPackageFixed in
gisaia/arlas-permissions-server:28.0.0e612fc722e02
glibc@2.41-12+deb13u2
2.41-12+deb13u4
gisaia/arlas-persistence-server:28.0.0f667e0ee79be
glibc@2.41-12+deb13u2
2.41-12+deb13u4
gisaia/arlas-server:28.0.04e693e7b6f37
glibc@2.41-12+deb13u2
2.41-12+deb13u4

Open the chart page →

1,549
titilerarlas-stackVerified publisher28.8.01 of 1See more

titiler arlas-stack 28.8.0

1 of the 1 container images this version deploys carry CVE-2026-5928.

Container imageDigestPackageFixed in
ghcr.io/developmentseed/titiler:latest0f31f8b0441b
glibc@2.41-12+deb13u3
2.41-12+deb13u4

Open the chart page →

1,423
arma-reforgerarma-reforger0.5.31 of 8See more

arma-reforger arma-reforger 0.5.3

1 of the 8 container images this version deploys carry CVE-2026-5928.

Container imageDigestPackageFixed in
ghcr.io/brittonhayes/arma-reforger:latest6fde1edc0983
glibc@2.31-0ubuntu9.9
no fix listed

Open the chart page →

23,407
bind9artem-shestakov1.0.11 of 1See more

bind9 artem-shestakov 1.0.1

1 of the 1 container images this version deploys carry CVE-2026-5928.

Container imageDigestPackageFixed in
ubuntu/bind9:9.16-20.04_beta5ee73f44e5d0
glibc@2.31-0ubuntu9.17
no fix listed

Open the chart page →

3,568
keystonearzu0.2.293 of 4See more

keystone arzu 0.2.29

3 of the 4 container images this version deploys carry CVE-2026-5928.

Container imageDigestPackageFixed in
library/rabbitmq:3.7-managementb6dd45cc35b3
glibc@2.27-3ubuntu1.2
no fix listed
openstackhelm/heat:wallaby-ubuntu_focalf728510bab3c
glibc@2.31-0ubuntu9.12
no fix listed
openstackhelm/keystone:wallaby-ubuntu_focale07d75953d2e
glibc@2.31-0ubuntu9.12
no fix listed

Open the chart page →

22,677
assemblylineassemblylineVerified publisher7.4.195 of 12See more

assemblyline assemblyline 7.4.19

5 of the 12 container images this version deploys carry CVE-2026-5928.

Container imageDigestPackageFixed in
cccs/assemblyline-core:4.7.4.stable19c914f21a41d7
glibc@2.36-9+deb12u14
no fix listed
cccs/assemblyline-rust:4.7.4.stable19c2f9619d9bcd
glibc@2.36-9+deb12u14
no fix listed
cccs/assemblyline-socketio:4.7.4.stable19caf40394bd17
glibc@2.36-9+deb12u14
no fix listed
cccs/assemblyline-ui:4.7.4.stable190426ed7884a2
glibc@2.36-9+deb12u14
no fix listed
library/redis:latest298e5b3bc566
glibc@2.41-12+deb13u3
2.41-12+deb13u4

Open the chart page →

12,092
dltkvassist-iot-data-integrity-verification0.2.03 of 9See more

dltkv assist-iot-data-integrity-verification 0.2.0

3 of the 9 container images this version deploys carry CVE-2026-5928.

Container imageDigestPackageFixed in
hyperledger/fabric-ca:latesta70b6ba64a08
glibc@2.35-0ubuntu3.13
2.35-0ubuntu3.14
hyperledger/fabric-ca-tools:latest4ce6f43ded2e
glibc@2.23-0ubuntu10
no fix listed
hyperledger/fabric-couchdb:0.4.15f6c724592abf
glibc@2.23-0ubuntu11
no fix listed

Open the chart page →

77,821
dltflassist-iot-dlt-based-fl0.2.03 of 9See more

dltfl assist-iot-dlt-based-fl 0.2.0

3 of the 9 container images this version deploys carry CVE-2026-5928.

Container imageDigestPackageFixed in
hyperledger/fabric-ca:latesta70b6ba64a08
glibc@2.35-0ubuntu3.13
2.35-0ubuntu3.14
hyperledger/fabric-ca-tools:latest4ce6f43ded2e
glibc@2.23-0ubuntu10
no fix listed
hyperledger/fabric-couchdb:0.4.15f6c724592abf
glibc@2.23-0ubuntu11
no fix listed

Open the chart page →

77,821
fl-orchestrator-guiassist-iot-fl-orchestrator0.1.01 of 3See more

fl-orchestrator-gui assist-iot-fl-orchestrator 0.1.0

1 of the 3 container images this version deploys carry CVE-2026-5928.

Container imageDigestPackageFixed in
assistiot/fl_orchestrator:dbmongo4-latestd157fbe150e3
glibc@2.31-0ubuntu9.9
no fix listed

Open the chart page →

9,407
idmassist-iot-identity-manager0.1.01 of 2See more

idm assist-iot-identity-manager 0.1.0

1 of the 2 container images this version deploys carry CVE-2026-5928.

Container imageDigestPackageFixed in
assistiot/identity-manager_db:latest0d3e6d35f168
glibc@2.36-9+deb12u3
no fix listed

Open the chart page →

12,799
locationprocessingassist-iot-location-processing1.0.01 of 3See more

locationprocessing assist-iot-location-processing 1.0.0

1 of the 3 container images this version deploys carry CVE-2026-5928.

Container imageDigestPackageFixed in
assistiot/location_processing:lateste9bae124095f
glibc@2.35-0ubuntu3.1
2.35-0ubuntu3.14

Open the chart page →

10,101
openapiassist-iot-open-api-management0.2.21 of 6See more

openapi assist-iot-open-api-management 0.2.2

1 of the 6 container images this version deploys carry CVE-2026-5928.

Container imageDigestPackageFixed in
assistiot/open_api_backend:1.1.230812ba93555
glibc@2.35-0ubuntu3.5
2.35-0ubuntu3.14

Open the chart page →

18,331
resource-provisioningassist-iot-resource-provisioning1.0.01 of 7See more

resource-provisioning assist-iot-resource-provisioning 1.0.0

1 of the 7 container images this version deploys carry CVE-2026-5928.

Container imageDigestPackageFixed in
library/buildpack-deps:curl04907bdd423b
glibc@2.41-12+deb13u3
2.41-12+deb13u4

Open the chart page →

8,042
sdn-controllerassist-iot-sdn-controller2.4.01 of 1See more

sdn-controller assist-iot-sdn-controller 2.4.0

1 of the 1 container images this version deploys carry CVE-2026-5928.

Container imageDigestPackageFixed in
assistiot/sdn_controller:2.4.0ea254b6d8a31
glibc@2.31-0ubuntu9.9
no fix listed

Open the chart page →

7,982
sd-wanassist-iot-sd-wan1.0.01 of 2See more

sd-wan assist-iot-sd-wan 1.0.0

1 of the 2 container images this version deploys carry CVE-2026-5928.

Container imageDigestPackageFixed in
library/mongo:4.2.21-bionic9cb28f7291d9
glibc@2.27-3ubuntu1.6
no fix listed

Open the chart page →

5,368
smartorchestratorassist-iot-smart-orchestrator4.0.04 of 14See more

smartorchestrator assist-iot-smart-orchestrator 4.0.0

4 of the 14 container images this version deploys carry CVE-2026-5928.

Container imageDigestPackageFixed in
assistiot/smart-orchestrator_mcs:latest7d6a0d534c7f
glibc@2.36-9+deb12u4
no fix listed
assistiot/smart-orchestrator_scheduler:latest38b003e55ff3
glibc@2.36-9+deb12u4
no fix listed
assistiot/smart-orchestrator_scheduler_mc:latestb1dbe4d62a03
glibc@2.36-9+deb12u1
no fix listed
library/mongo:4.4.66efa05203990
glibc@2.27-3ubuntu1.4
no fix listed

Open the chart page →

42,460
videoaugmentationassist-iot-video-augmentation0.1.02 of 3See more

videoaugmentation assist-iot-video-augmentation 0.1.0

2 of the 3 container images this version deploys carry CVE-2026-5928.

Container imageDigestPackageFixed in
assistiot/video_augmentation:runner-cpu-lateste5ae539ce2cb
glibc@2.31-0ubuntu9.9
no fix listed
library/nginx:latest05b8cb60c354
glibc@2.41-12+deb13u3
2.41-12+deb13u4

Open the chart page →

13,986
account-monitorastria0.0.11 of 1See more

account-monitor astria 0.0.1

1 of the 1 container images this version deploys carry CVE-2026-5928.

Container imageDigestPackageFixed in
ghcr.io/astriaorg/account-monitor:latest4c8b42890035
glibc@2.36-9+deb12u13
no fix listed

Open the chart page →

1,870
astrotrekastria0.0.22 of 4See more

astrotrek astria 0.0.2

2 of the 4 container images this version deploys carry CVE-2026-5928.

Container imageDigestPackageFixed in
timescale/timescaledb-ha:pg15-latesta8e3322e1cf9
glibc@2.35-0ubuntu3.1
2.35-0ubuntu3.14
ghcr.io/astriaorg/astrotrek:0.1.05889bea38e56
glibc@2.36-9+deb12u8
no fix listed

Open the chart page →

31,807
auctioneerastria0.0.21 of 1See more

auctioneer astria 0.0.2

1 of the 1 container images this version deploys carry CVE-2026-5928.

Container imageDigestPackageFixed in
ghcr.io/astriaorg/auctioneer:pr-18391386b7b5e555
glibc@2.36-9+deb12u9
no fix listed

Open the chart page →

2,079
evm-bridge-withdrawerastria1.0.61 of 1See more

evm-bridge-withdrawer astria 1.0.6

1 of the 1 container images this version deploys carry CVE-2026-5928.

Container imageDigestPackageFixed in
ghcr.io/astriaorg/evm-bridge-withdrawer:1.0.29c88e1aff357
glibc@2.36-9+deb12u9
no fix listed

Open the chart page →

2,061
evm-rollupastria4.1.01 of 2See more

evm-rollup astria 4.1.0

1 of the 2 container images this version deploys carry CVE-2026-5928.

Container imageDigestPackageFixed in
ghcr.io/astriaorg/conductor:latest3ea8164b0eae
glibc@2.36-9+deb12u13
no fix listed

Open the chart page →

3,921
evm-stackastria5.0.31 of 2See more

evm-stack astria 5.0.3

1 of the 2 container images this version deploys carry CVE-2026-5928.

Container imageDigestPackageFixed in
ghcr.io/astriaorg/conductor:latest3ea8164b0eae
glibc@2.36-9+deb12u13
no fix listed

Open the chart page →

3,921
flame-rollupastria0.1.31 of 2See more

flame-rollup astria 0.1.3

1 of the 2 container images this version deploys carry CVE-2026-5928.

Container imageDigestPackageFixed in
ghcr.io/astriaorg/conductor:1.1.01f97d131b1d1
glibc@2.36-9+deb12u9
no fix listed

Open the chart page →

3,587
graph-nodeastria0.2.22 of 3See more

graph-node astria 0.2.2

2 of the 3 container images this version deploys carry CVE-2026-5928.

Container imageDigestPackageFixed in
graphprotocol/graph-node:latestb0436347fb24
glibc@2.36-9+deb12u9
no fix listed
library/postgres:latest4ef4dbc939d6
glibc@2.41-12+deb13u3
2.41-12+deb13u4

Open the chart page →

5,394
hermesastria0.7.11 of 1See more

hermes astria 0.7.1

1 of the 1 container images this version deploys carry CVE-2026-5928.

Container imageDigestPackageFixed in
ghcr.io/astriaorg/hermes:0.5.04f33a0a9f75e
glibc@2.39-0ubuntu8.3
2.39-0ubuntu8.8

Open the chart page →

1,991
hyperlane-agentsastria0.1.41 of 2See more

hyperlane-agents astria 0.1.4

1 of the 2 container images this version deploys carry CVE-2026-5928.

Container imageDigestPackageFixed in
gcr.io/abacus-labs-dev/hyperlane-agent:10c0ab1-20231215-220639f33e88324a40
glibc@2.35-0ubuntu3.4
2.35-0ubuntu3.14

Open the chart page →

2,537
sequencerastria4.0.01 of 3See more

sequencer astria 4.0.0

1 of the 3 container images this version deploys carry CVE-2026-5928.

Container imageDigestPackageFixed in
ghcr.io/astriaorg/sequencer:latest44f82ee0b24c
glibc@2.36-9+deb12u13
no fix listed

Open the chart page →

6,239
sequencer-relayerastria2.0.01 of 1See more

sequencer-relayer astria 2.0.0

1 of the 1 container images this version deploys carry CVE-2026-5928.

Container imageDigestPackageFixed in
ghcr.io/astriaorg/sequencer-relayer:latest5f6c74993f08
glibc@2.36-9+deb12u13
no fix listed

Open the chart page →

1,870
asya-playgroundasya1.1.31 of 1See more

asya-playground asya 1.1.3

1 of the 1 container images this version deploys carry CVE-2026-5928.

Container imageDigestPackageFixed in
localstack/localstack:3.19d278167f2b7
glibc@2.36-9+deb12u3
no fix listed

Open the chart page →

8,555
autopushautopushVerified publisher0.0.493 of 4See more

autopush autopush 0.0.49

3 of the 4 container images this version deploys carry CVE-2026-5928.

Container imageDigestPackageFixed in
valkey/valkey:9.1.2c123e3715db6
glibc@2.41-12+deb13u3
2.41-12+deb13u4
ghcr.io/wrenix/autopush-rs/autoconnect:1.84.285f93ced88b2
glibc@2.36-9+deb12u14
no fix listed
ghcr.io/wrenix/autopush-rs/autoendpoint:1.84.2d95e9a124eed
glibc@2.36-9+deb12u14
no fix listed

Open the chart page →

2,822
istio-discoveryaveshaVerified publisher1.16.01 of 1See more

istio-discovery avesha 1.16.0

1 of the 1 container images this version deploys carry CVE-2026-5928.

Container imageDigestPackageFixed in
istio/pilot:1.16.0ac0284d75ec9
glibc@2.35-0ubuntu3.1
2.35-0ubuntu3.14

Open the chart page →

6,948
webappavzi-webapp0.1.01 of 1See more

webapp avzi-webapp 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-5928.

Container imageDigestPackageFixed in
avzini/web-app:latestf40b30210ed0
glibc@2.36-9+deb12u3
no fix listed

Open the chart page →

5,291
nas-appsawesomeVerified publisher2.0.01 of 8See more

nas-apps awesome 2.0.0

1 of the 8 container images this version deploys carry CVE-2026-5928.

Container imageDigestPackageFixed in
library/nginx:latest05b8cb60c354
glibc@2.41-12+deb13u3
2.41-12+deb13u4

Open the chart page →

7,166
aws9helmaws9helm0.1.04 of 4See more

aws9helm aws9helm 0.1.0

4 of the 4 container images this version deploys carry CVE-2026-5928.

Container imageDigestPackageFixed in
kuzwolka/aws9:main1ad759b961b1
glibc@2.36-9+deb12u10
no fix listed
kuzwolka/aws9:news3e8880fbbb96
glibc@2.36-9+deb12u10
no fix listed
kuzwolka/aws9:blog4a7707410bf1
glibc@2.36-9+deb12u10
no fix listed
kuzwolka/aws9:shop84a9d9766345
glibc@2.36-9+deb12u10
no fix listed

Open the chart page →

16,920
aws-web-service-proxifiedaws-web-service-proxified1.8.01 of 2See more

aws-web-service-proxified aws-web-service-proxified 1.8.0

1 of the 2 container images this version deploys carry CVE-2026-5928.

Container imageDigestPackageFixed in
library/httpd:latest979c38c2228d
glibc@2.41-12+deb13u3
2.41-12+deb13u4

Open the chart page →

3,021
azp-agentazp-agent1.2.01 of 1See more

azp-agent azp-agent 1.2.0

1 of the 1 container images this version deploys carry CVE-2026-5928.

Container imageDigestPackageFixed in
cheveo/azp-agent:1.0.282240f890884
glibc@2.35-0ubuntu3.9
2.35-0ubuntu3.14

Open the chart page →

3,308
kubernetes-providerazureappconfiguration-kubernetesprovider2.6.71 of 1See more

kubernetes-provider azureappconfiguration-kubernetesprovider 2.6.7

1 of the 1 container images this version deploys carry CVE-2026-5928.

Container imageDigestPackageFixed in
mcr.microsoft.com/azure-app-configuration/kubernetes-provider:2.6.7da4db80de17e
glibc@2.38-20.azl3
no fix listed

Open the chart page →

141
azurefile-csi-driverazurefile-csi-driverVerified publisher1.35.76 of 7See more

azurefile-csi-driver azurefile-csi-driver 1.35.7

6 of the 7 container images this version deploys carry CVE-2026-5928.

Container imageDigestPackageFixed in
mcr.microsoft.com/oss/v2/kubernetes-csi/azurefile-csi:v1.35.76e43ba0bd009
glibc@2.38-20.azl3
no fix listed
mcr.microsoft.com/oss/v2/kubernetes-csi/csi-node-driver-registrar:v2.17.0b767078c36e0
glibc@2.38-20.azl3
no fix listed
mcr.microsoft.com/oss/v2/kubernetes-csi/csi-provisioner:v6.3.09915a2058ad6
glibc@2.38-20.azl3
no fix listed
mcr.microsoft.com/oss/v2/kubernetes-csi/csi-resizer:v2.2.04bfe19fe8919
glibc@2.38-20.azl3
no fix listed
mcr.microsoft.com/oss/v2/kubernetes-csi/csi-snapshotter:v8.5.08b3ce8339944
glibc@2.38-20.azl3
no fix listed
mcr.microsoft.com/oss/v2/kubernetes-csi/livenessprobe:v2.19.0bd19535678a8
glibc@2.38-20.azl3
no fix listed

Open the chart page →

1,112
azure-voteazure-sample0.1.11 of 2See more

azure-vote azure-sample 0.1.1

1 of the 2 container images this version deploys carry CVE-2026-5928.

Container imageDigestPackageFixed in
library/redis:latest298e5b3bc566
glibc@2.41-12+deb13u3
2.41-12+deb13u4

Open the chart page →

5,238
ragflowbaboulinet0.1.12 of 5See more

ragflow baboulinet 0.1.1

2 of the 5 container images this version deploys carry CVE-2026-5928.

Container imageDigestPackageFixed in
infiniflow/infinity:v0.7.0992c87a68612
glibc@2.35-0ubuntu3.13
2.35-0ubuntu3.14
valkey/valkey:83fbd2e3e4b6e
glibc@2.41-12+deb13u3
2.41-12+deb13u4

Open the chart page →

5,860
backstage-pyactionsbackstage-pyactionsVerified publisher0.1.01 of 1See more

backstage-pyactions backstage-pyactions 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-5928.

Container imageDigestPackageFixed in
mawad98/backstage-pyactions:demo99422c56a274
glibc@2.41-12+deb13u2
2.41-12+deb13u4

Open the chart page →

2,750
basic-auth-s3-nginxbasic-auth-s3-nginxVerified publisher1.0.01 of 1See more

basic-auth-s3-nginx basic-auth-s3-nginx 1.0.0

1 of the 1 container images this version deploys carry CVE-2026-5928.

Container imageDigestPackageFixed in
dachichang/basic-auth-s3-nginx:1.0.07ccac90a935e
glibc@2.36-9+deb12u3
no fix listed

Open the chart page →

6,310

Container images carrying it

2,477 by charts deploying them

A fixed version is listed for 2 of the 4 affected packages.

Container imageDigestPackageFixed inUsed by
decisionrules/ai-engine:latest38c377e7c01e
glibc@2.41-12+deb13u3
2.41-12+deb13u4
1
deconzcommunity/deconz:2.29.2062de2362641
glibc@2.36-9+deb12u9
no fix listed
1
deepflowce/clickhouse-server:22.8.6.71bc1882f75c18
glibc@2.31-0ubuntu9.9
no fix listed
1
deepflowce/deepflow-agent:v6.2.6.529332fee7fc2
glibc@2.35-0ubuntu3.1
2.35-0ubuntu3.14
1
defactops/defactops-backend:1.0.2307b663c0092a
glibc@2.36-9+deb12u7
no fix listed
1
defectdojo/defectdojo-django:3.3.100c597abdbb535
glibc@2.41-12+deb13u3
2.41-12+deb13u4
1
deimosfr/dnsmasq-k8s:1.4.1284c4040fc6d
glibc@2.41-12
2.41-12+deb13u4
1
dellcloud/category:distributed02fc234353a9
glibc@2.31-0ubuntu9.1
no fix listed
1
dellcloud/pages:1.04d2eb25b9225
glibc@2.31-0ubuntu9.1
no fix listed
1
dependencytrack/apiserver:4.14.21ba4f004e1ec
glibc@2.41-12+deb13u2
2.41-12+deb13u4
1
dependencytrack/apiserver:latestf1da63ed610a
glibc@2.41-12+deb13u3
2.41-12+deb13u4
1
dessalines/lemmy:0.19.2079e9f02c286c
glibc@2.36-9+deb12u14
no fix listed
1
dessalines/lemmy-ui:0.19.20ee4c620d8e93
glibc@2.41-12+deb13u3
2.41-12+deb13u4
1
devopsgoofy/k8s-platform:latestad865312099f
glibc@2.36-9+deb12u9
no fix listed
1
devopshq/artifactory-cleanup:1.0.1830e093bffa91
glibc@2.36-9+deb12u10
no fix listed
1
dgraph/dgraph:v24.1.4b57fa31f9b7f
glibc@2.39-0ubuntu8.5
2.39-0ubuntu8.8
1
dgraziotin/nginx-webdav-nononsense:1.23.138f2de42bed0
glibc@2.31-0ubuntu9.7
no fix listed
1
diygod/rsshub:latest1d4b508b6357
glibc@2.41-12+deb13u3
2.41-12+deb13u4
1
diygod/rsshub:2025-11-097a6312cac0d5
glibc@2.36-9+deb12u13
no fix listed
1
djjudas21/alertify:0.1.0ba22be670c37
glibc@2.36-9+deb12u10
no fix listed
1
dniel/api-posts:master45a667852f2a
glibc@2.27-3ubuntu1
no fix listed
1
dobtc/bitcoin:25.1a870f7cb1105
glibc@2.36-9+deb12u3
no fix listed
1
docmost/docmost:0.95.041c8d777cf23
glibc@2.36-9+deb12u14
no fix listed
1
dokuwiki/dokuwiki:2025-05-14af08ecfdda239
glibc@2.41-12
2.41-12+deb13u4
1
dolibarr/dolibarr:24.0.069ec52e3b7ef
glibc@2.36-9+deb12u14
no fix listed
1
dolibarr/dolibarr:22.0.47ad88fc9b13c
glibc@2.36-9+deb12u13
no fix listed
1
domainmod/domainmod:4.23.04017bfe4c597
glibc@2.36-9+deb12u9
no fix listed
1
dongjiang1989/lxcfs:v6.0.34bf9ae391948
glibc@2.31-0ubuntu9.17
no fix listed
1
dragonflyoss/client:v1.5.4a1b52779c4dd
glibc@2.36-9+deb12u14
no fix listed
1
dragonflyoss/client:v0.1.82edf3e921f4e0
glibc@2.36-9+deb12u7
no fix listed
1
dremio/dremio-oss:24.1.080ed2e3b7c43
glibc@2.35-0ubuntu3.1
2.35-0ubuntu3.14
1
drorivry4/rego:lateste035d49b15ca
glibc@2.36-9+deb12u4
no fix listed
1
drpcorg/dshackle:0.54.08858fae1859d
glibc@2.35-0ubuntu3.3
2.35-0ubuntu3.14
1
drumsergio/genieacs:1.2.16.028244054e1bf
glibc@2.36-9+deb12u13
no fix listed
1
dserio83/velero-api:0.3.16b3d9115fee2
glibc@2.36-9+deb12u10
no fix listed
1
dserio83/velero-watchdog:0.1.8d5deae589229
glibc@2.36-9+deb12u10
no fix listed
1
duck1123/cert-downloader:latest0e29f19fa67c
glibc@2.35-0ubuntu3.1
2.35-0ubuntu3.14
1
duck1123/lnd-fileserver:latest9d6fb247b714
glibc@2.35-0ubuntu3.1
2.35-0ubuntu3.14
1
dzikoysk/reposilite:3.5.264128c2d7a6ba
glibc@2.39-0ubuntu8.5
2.39-0ubuntu8.8
1
eceasy/cli-proxy-api:v7.3.2783500b16bd5
glibc@2.36-9+deb12u14
no fix listed
1
eclipseaerios/aerios-k8s-shim:v1.0.0d4ed3d8e5db4
glibc@2.41-12+deb13u3
2.41-12+deb13u4
1
eclipseaerios/hlo-allocator:v3.0.03cc1d94cfe96
glibc@2.41-12+deb13u3
2.41-12+deb13u4
1
eclipseaerios/hlo-data-aggregator:v3.0.0b433c2b9f5dc
glibc@2.41-12+deb13u3
2.41-12+deb13u4
1
eclipseaerios/hlo-deployment-engine:v3.0.0d582d39208c7
glibc@2.41-12+deb13u3
2.41-12+deb13u4
1
eclipseaerios/hlo-fe-engine:v3.0.08ed2df4ca692
glibc@2.41-12+deb13u3
2.41-12+deb13u4
1
eclipseaerios/iota-messages-api:lateste7f5ba0bc64d
glibc@2.41-12
2.41-12+deb13u4
1
eclipseaerios/self-awareness-hardware-info:1.4.434b72f45b46a
glibc@2.41-12
2.41-12+deb13u4
1
eclipseaerios/self-orchestrator:1.2.08b123bec5679
glibc@2.36-9+deb12u9
no fix listed
1
eclipseaerios/trust-manager:1.0.0f55442e2c0ed
glibc@2.41-12
2.41-12+deb13u4
1
eginnovations/agent:7.5.4e4dfe242fe9f
glibc@2.42-0ubuntu3.1
no fix listed
1

syft 1.42.1 · advisories as of 15 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.