CVE-2026-5928
HighAdvisory
Published 20 Apr 2026In the index since 5 Sept 2026
- Severity
- High
- worst across findings
- CVSS
- 7.5
- base score, highest
- EPSS
- 0.004
- 30th percentile
- CISA KEV
- Not listed
- no confirmed exploitation
- Charts affected
- 2,416
- of 17,792 indexed, latest versions
- Container images
- 2,430
- deployed by those charts
- Fix available
- 2 of 4
- affected packages
CVE-2026-5928 affecting package glibc 2.38-21
Carried by container images the latest versions of 2,416 of 17,792 indexed charts deploy, on 2,430 images.
| Affected package | Affected versions | Fixed in | Images |
|---|---|---|---|
| glibcdeb | 2.23-0ubuntu5, 2.23-0ubuntu7, 2.23-0ubuntu9, 2.23-0ubuntu10+59 more | 2.35-0ubuntu3.14, 2.39-0ubuntu8.8, 2.41-12+deb13u2+e4, 2.41-12+deb13u4+1 more | 2,378 |
| glibcapk | 2.37-r7, 2.38-r6, 2.39-r7, 2.40-r1+8 more | 2.43-r7 | 22 |
| eglibcdeb | 2.19-0ubuntu6.3, 2.19-0ubuntu6.6, 2.19-0ubuntu6.13, 2.19-0ubuntu6.14+1 more | no fix listed | 7 |
| glibcrpm | 2.38-16.azl3, 2.38-18.azl3, 2.38-20.azl3 | no fix listed | 23 |
- OSV records
- CGA-2gxw-5ffj-x2phDEBIAN-CVE-2026-5928UBUNTU-CVE-2026-5928AZL-83087ECHO-c634-adb4-1dbe
- Also known as
- CGA-482r-2xq8-f4x9, CGA-52fm-fh87-3chx, CGA-7rhh-qh9f-p756, CGA-8q82-f5j8-fh3w, CGA-cr8c-r5h5-5gc4, CGA-fwmr-xqf9-976q, CGA-h6w5-gmvw-7p3j, CGA-h8hx-28hx-583g, CGA-mff9-49w3-8vxq, CGA-q7rf-9pqj-g4hq, CGA-r747-wj6f-v7p4, CGA-vrh7-vv5q-5295, CGA-wxh3-3r3r-49wr, CGA-x688-wmjw-qhpm, CGA-xqv8-j654-32r2, USN-8611-1
Charts affected
2,416 by stars
| Chart | Latest | Affected images | Radar Score |
|---|---|---|---|
| assertoorethereum-helm-chartsVerified publisher | 1.2.0 | 1 of 1See more | 2,924 |
| blutgangethereum-helm-chartsVerified publisher | 0.0.12 | 1 of 1See more | 2,535 |
| buildoor-overviewethereum-helm-chartsVerified publisher | 0.0.1 | 1 of 1See more | 855 |
| chaos-meshethereum-helm-chartsVerified publisher | 0.0.3 | 2 of 4See more | 12,202 |
| doraethereum-helm-chartsVerified publisher | 1.0.12 | 1 of 2See more | 3,016 |
| eleelethereum-helm-chartsVerified publisher | 0.1.7 | 1 of 1See more | 1,072 |
| forkyethereum-helm-chartsVerified publisher | 0.2.0 | 1 of 1See more | 1,735 |
| lodestarethereum-helm-chartsVerified publisher | 1.2.2 | 1 of 2See more | 2,544 |
| nethermindethereum-helm-chartsVerified publisher | 1.1.2 | 1 of 2See more | 977 |
| nimbusethereum-helm-chartsVerified publisher | 1.2.1 | 1 of 2See more | 986 |
| observoorethereum-helm-chartsVerified publisher | 0.0.3 | 1 of 1See more | 1,530 |
| powfaucetethereum-helm-chartsVerified publisher | 1.2.1 | 1 of 1See more | 4,479 |
| rpc-snooperethereum-helm-chartsVerified publisher | 0.0.2 | 1 of 1See more | 1,499 |
| spamoorethereum-helm-chartsVerified publisher | 1.0.1 | 1 of 1See more | 1,138 |
| splitoorethereum-helm-chartsVerified publisher | 0.0.1 | 1 of 1See more | 1,246 |
| xatuethereum-helm-chartsVerified publisher | 0.0.1 | 1 of 1See more | 606 |
| xatu-cannonethereum-helm-chartsVerified publisher | 0.2.2 | 1 of 1See more | 606 |
| xatu-cl-mimicryethereum-helm-chartsVerified publisher | 0.0.2 | 1 of 1See more | 606 |
| xatu-consumoorethereum-helm-chartsVerified publisher | 0.0.1 | 1 of 1See more | 606 |
| xatu-discoveryethereum-helm-chartsVerified publisher | 0.0.6 | 1 of 1See more | 606 |
| xatu-mimicryethereum-helm-chartsVerified publisher | 0.0.7 | 1 of 1See more | 606 |
| xatu-relay-monitorethereum-helm-chartsVerified publisher | 0.0.1 | 1 of 1See more | 606 |
| xatu-sageethereum-helm-chartsVerified publisher | 0.0.1 | 1 of 1See more | 606 |
| xatu-sentryethereum-helm-chartsVerified publisher | 0.0.8 | 1 of 1See more | 606 |
| xatu-sentry-logsethereum-helm-chartsVerified publisher | 0.0.2 | 1 of 1See more | 905 |
| xatu-serverethereum-helm-chartsVerified publisher | 0.0.14 | 1 of 1See more | 606 |
| beeethersphereVerified publisher | 0.17.4 | 1 of 1See more | 3,483 |
| beekeeperethersphereVerified publisher | 0.4.14 | 1 of 1See more | 1,626 |
| bee-overlay-exporterethersphereVerified publisher | 0.1.0 | 1 of 1See more | 874 |
| beeport-uiethersphereVerified publisher | 0.76.2 | 2 of 3See more | 7,463 |
| multichain-uiethersphereVerified publisher | 0.73.1 | 2 of 3See more | 7,463 |
| nethermindethersphereVerified publisher | 0.2.1 | 1 of 1See more | 4,967 |
| static-siteethersphereVerified publisher | 0.73.1 | 2 of 2See more | 6,951 |
| network-toolseugen | 0.2.4 | 1 of 1See more | 986 |
| snyk-farcaster-agenteugen | 1.0.1 | 1 of 1See more | 1,100 |
| supportpalevilgn0me | 0.1.6 | 1 of 1See more | 20,983 |
| evobotevobotVerified publisher | 0.1.1 | 1 of 1See more | 3,009 |
| spring-boot-adminevryfs-ossVerified publisher | 0.1.10 | 1 of 1See more | 6,041 |
| express-ts-app-helm-chartsexpress-ts-app-helm-chartsVerified publisher | 1.0.0 | 1 of 4See more | 5,813 |
| extended-ceph-exporterextended-ceph-exporterVerified publisher | 1.10.0 | 1 of 2See more | 2,926 |
| faasnetfaasnet | 0.0.4 | 1 of 5See more | 7,704 |
| capsizefairwinds-incubator | 0.2.0 | 1 of 1See more | 829 |
| datadog-apmfairwinds-incubator | 2.0.0 | 1 of 1See more | 2,838 |
| oom-event-generatorfairwinds-incubator | 0.2.2 | 1 of 1See more | 4,647 |
| yelbfairwinds-incubator | 0.1.1 | 1 of 5See more | 5,113 |
| event-generatorfalcosecurity | 0.4.0 | 1 of 1See more | 3,796 |
| farm-observabilityfarm-observabilityOfficialVerified publisher | 0.27.2 | 2 of 18See more | 13,409 |
| jenkinsfatihtepe-jenkins | 1.0.0 | 1 of 1See more | 2,498 |
| quickstartfeatureformVerified publisher | 0.1.1 | 2 of 3See more | 3,575 |
| activityrelayfedihost | 0.1.4 | 1 of 2See more | 13,502 |
Container images carrying it
2,430 by charts deploying them
A fixed version is listed for 2 of the 4 affected packages.
| Container image | Digest | Package | Fixed in | Used by |
|---|---|---|---|---|
| ghcr.io/ | 1c1dfe35447f | glibc | 2.41-12+deb13u4 | 1 |
| ghcr.io/ | da69941fa6b8 | glibc | 2.41-12+deb13u4 | 1 |
| ghcr.io/ | 2e6e09fa77dd | glibc | no fix listed | 1 |
| ghcr.io/ | 7e7368fb472d | glibc | no fix listed | 1 |
| ghcr.io/ | 75849fe6548a | glibc | no fix listed | 1 |
| ghcr.io/ | 7d8fb8e996b6 | glibc | 2.41-12+deb13u4 | 1 |
| ghcr.io/ | f43af285c6e0 | glibc | 2.41-12+deb13u4 | 1 |
| ghcr.io/ | 7073131db60b | glibc | 2.41-12+deb13u4 | 1 |
| ghcr.io/ | 534baa453d3d | glibc | no fix listed | 1 |
| ghcr.io/ | 153b8b893232 | glibc | 2.41-12+deb13u4 | 1 |
| ghcr.io/ | b61c750ade19 | glibc | no fix listed | 1 |
| ghcr.io/ | 5bc5ca66d55a | glibc | no fix listed | 1 |
| ghcr.io/ | d7f93d2182fe | glibc | no fix listed | 1 |
| ghcr.io/ | a16ab5ca10a7 | glibc | no fix listed | 1 |
| ghcr.io/ | c0c8d53df9f3 | glibc | no fix listed | 1 |
| ghcr.io/ | 3e56bdd1b90d | glibc | 2.41-12+deb13u4 | 1 |
| ghcr.io/ | c4166d2eb8eb | glibc | no fix listed | 1 |
| ghcr.io/ | 5b979b962043 | glibc | 2.41-12+deb13u4 | 1 |
| ghcr.io/ | a1a7f507f6ae | glibc | no fix listed | 1 |
| ghcr.io/ | af7ea052cf21 | glibc | no fix listed | 1 |
| ghcr.io/ | dcfd14877740 | glibc | no fix listed | 1 |
| ghcr.io/ | ce85ef0ce665 | glibc | no fix listed | 1 |
| ghcr.io/ | 165efd4469ea | glibc | no fix listed | 1 |
| ghcr.io/ | 42efc445b19e | glibc | no fix listed | 1 |
| ghcr.io/ | 3d0f1ddeebf5 | glibc | no fix listed | 1 |
| ghcr.io/ | ce1132261523 | glibc | no fix listed | 1 |
| ghcr.io/ | 1269d3d8d2c2 | glibc | 2.39-0ubuntu8.8 | 1 |
| ghcr.io/ | b175cc61959a | glibc | 2.39-0ubuntu8.8 | 1 |
| ghcr.io/ | 67498ee2e639 | glibc | 2.39-0ubuntu8.8 | 1 |
| ghcr.io/ | 71323a4f3fc5 | glibc | 2.39-0ubuntu8.8 | 1 |
| ghcr.io/ | 76d4fbcc6ff0 | glibc | 2.39-0ubuntu8.8 | 1 |
| ghcr.io/ | a5d7e3cf71d3 | glibc | 2.39-0ubuntu8.8 | 1 |
| ghcr.io/ | a6d5abe94706 | glibc | 2.39-0ubuntu8.8 | 1 |
| ghcr.io/ | 31966a825782 | glibc | 2.39-0ubuntu8.8 | 1 |
| ghcr.io/ | ec9fc5864cd5 | glibc | 2.39-0ubuntu8.8 | 1 |
| ghcr.io/ | 7a331eb83c6a | glibc | 2.39-0ubuntu8.8 | 1 |
| ghcr.io/ | 470ff3529746 | glibc | 2.39-0ubuntu8.8 | 1 |
| ghcr.io/ | 7fc7ec101f08 | glibc | 2.39-0ubuntu8.8 | 1 |
| ghcr.io/ | 75537ea8c851 | glibc | 2.39-0ubuntu8.8 | 1 |
| ghcr.io/ | 6e05055b701f | glibc | 2.39-0ubuntu8.8 | 1 |
| ghcr.io/ | 4cb88b603cdc | glibc | 2.39-0ubuntu8.8 | 1 |
| ghcr.io/ | bd7fbf4505b5 | glibc | 2.39-0ubuntu8.8 | 1 |
| ghcr.io/ | 02602e60edbf | glibc | 2.41-12+deb13u4 | 1 |
| ghcr.io/ | 1c53bfb59697 | glibc | 2.35-0ubuntu3.14 | 1 |
| ghcr.io/ | 1cdfd1bcf476 | glibc | no fix listed | 1 |
| ghcr.io/ | 4e322858fe56 | glibc | no fix listed | 1 |
| ghcr.io/ | 654f860148ba | glibc | 2.41-12+deb13u4 | 1 |
| ghcr.io/ | 66ba53497f1f | glibc | 2.41-12+deb13u4 | 1 |
| ghcr.io/ | 6d051840bb29 | glibc | no fix listed | 1 |
| ghcr.io/ | 74c490f862da | glibc | 2.39-0ubuntu8.8 | 1 |