StackRadar

CVE-2026-5928

High

Advisory

Published 20 Apr 2026In the index since 5 Sept 2026
Severity
High
worst across findings
CVSS
7.5
base score, highest
EPSS
0.004
30th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
2,447
of 17,787 indexed, latest versions
Container images
2,477
deployed by those charts
Fix available
2 of 4
affected packages

CVE-2026-5928 affecting package glibc 2.38-21

Carried by container images the latest versions of 2,447 of 17,787 indexed charts deploy, on 2,477 images.

Affected packageAffected versionsFixed inImages
glibcdeb2.23-0ubuntu5, 2.23-0ubuntu7, 2.23-0ubuntu9, 2.23-0ubuntu10+59 more2.35-0ubuntu3.14, 2.39-0ubuntu8.8, 2.41-12+deb13u2+e4, 2.41-12+deb13u4+1 more2,425
glibcapk2.37-r7, 2.38-r6, 2.39-r7, 2.40-r1+8 more2.43-r722
eglibcdeb2.19-0ubuntu6.3, 2.19-0ubuntu6.6, 2.19-0ubuntu6.13, 2.19-0ubuntu6.14+1 moreno fix listed7
glibcrpm2.38-16.azl3, 2.38-18.azl3, 2.38-20.azl3no fix listed23
OSV records
CGA-2gxw-5ffj-x2phDEBIAN-CVE-2026-5928UBUNTU-CVE-2026-5928AZL-83087ECHO-c634-adb4-1dbe
Also known as
CGA-482r-2xq8-f4x9, CGA-52fm-fh87-3chx, CGA-7rhh-qh9f-p756, CGA-8q82-f5j8-fh3w, CGA-cr8c-r5h5-5gc4, CGA-fwmr-xqf9-976q, CGA-h6w5-gmvw-7p3j, CGA-h8hx-28hx-583g, CGA-mff9-49w3-8vxq, CGA-q7rf-9pqj-g4hq, CGA-r747-wj6f-v7p4, CGA-vrh7-vv5q-5295, CGA-wxh3-3r3r-49wr, CGA-x688-wmjw-qhpm, CGA-xqv8-j654-32r2, USN-8611-1

Charts affected

2,447 by stars
ChartLatestAffected imagesRadar Score
bbsim-sadis-serveropencord0.3.51 of 1See more

bbsim-sadis-server opencord 0.3.5

1 of the 1 container images this version deploys carry CVE-2026-5928.

Container imageDigestPackageFixed in
voltha/bbsim-sadis-server:0.4.0762b272d439e
glibc@2.27-3ubuntu1.6
no fix listed

Open the chart page →

3,720
cdn-remoteopencord0.2.42 of 3See more

cdn-remote opencord 0.2.4

2 of the 3 container images this version deploys carry CVE-2026-5928.

Container imageDigestPackageFixed in
omecproject/cdn-antmedia:1.0.0b4ae7d0d6b74
glibc@2.27-3ubuntu1
no fix listed
omecproject/cdn-video-repo:1.0.0d59ccb138ffb
glibc@2.23-0ubuntu10
no fix listed

Open the chart page →

63,277
comacopencord1.0.03 of 9See more

comac opencord 1.0.0

3 of the 9 container images this version deploys carry CVE-2026-5928.

Container imageDigestPackageFixed in
omecproject/mcord-synchronizer:comac-1.0.0cfdb566dd949
glibc@2.23-0ubuntu10
no fix listed
omecproject/onos-progran:1.0.05715e5648aa0
glibc@2.23-0ubuntu9
no fix listed
omecproject/progran-synchronizer:comac-1.0.0d109a8e57e71
glibc@2.23-0ubuntu10
no fix listed

Open the chart page →

88,616
comac-cuopencord0.1.11 of 4See more

comac-cu opencord 0.1.1

1 of the 4 container images this version deploys carry CVE-2026-5928.

Container imageDigestPackageFixed in
ngick8stesting/c3po-mmeinit:latest1e764eab77b4
glibc@2.27-3ubuntu1
no fix listed

Open the chart page →

8,053
comac-platformopencord0.0.171 of 11See more

comac-platform opencord 0.0.17

1 of the 11 container images this version deploys carry CVE-2026-5928.

Container imageDigestPackageFixed in
omecproject/mcord-synchronizer:comac-1.0.0cfdb566dd949
glibc@2.23-0ubuntu10
no fix listed

Open the chart page →

26,234
freeradiusopencord1.0.41 of 1See more

freeradius opencord 1.0.4

1 of the 1 container images this version deploys carry CVE-2026-5928.

Container imageDigestPackageFixed in
freeradius/freeradius-server:3.0.2121c8bfa904d8
glibc@2.27-3ubuntu1
no fix listed

Open the chart page →

15,722
mcord-cdn-remoteopencord0.1.62 of 2See more

mcord-cdn-remote opencord 0.1.6

2 of the 2 container images this version deploys carry CVE-2026-5928.

Container imageDigestPackageFixed in
omecproject/cdn-video-repo:remote-v3d59ccb138ffb
glibc@2.23-0ubuntu10
no fix listed
woojoong/wowza:latestec230db19652
glibc@2.27-3ubuntu1
no fix listed

Open the chart page →

42,662
mcord-cdn-remote-freeopencord0.1.31 of 1See more

mcord-cdn-remote-free opencord 0.1.3

1 of the 1 container images this version deploys carry CVE-2026-5928.

Container imageDigestPackageFixed in
omecproject/cdn-video-repo:remote-v3d59ccb138ffb
glibc@2.23-0ubuntu10
no fix listed

Open the chart page →

29,158
mcord-control-planeopencord0.2.22 of 5See more

mcord-control-plane opencord 0.2.2

2 of the 5 container images this version deploys carry CVE-2026-5928.

Container imageDigestPackageFixed in
ngick8stesting/c3po-mme:mwca-mme-debug8dd6dea45be4
glibc@2.23-0ubuntu10
no fix listed
ngick8stesting/c3po-mmeinit:latest1e764eab77b4
glibc@2.27-3ubuntu1
no fix listed

Open the chart page →

15,660
oaisimopencord0.1.72 of 3See more

oaisim opencord 0.1.7

2 of the 3 container images this version deploys carry CVE-2026-5928.

Container imageDigestPackageFixed in
omecproject/lte-softmodem:1.1.0b5ddd36ec20c
glibc@2.27-3ubuntu1.2
no fix listed
omecproject/lte-uesoftmodem:1.1.0686f8bc37d8c
glibc@2.27-3ubuntu1.4
no fix listed

Open the chart page →

14,550
omec-control-planeopencord0.1.315 of 8See more

omec-control-plane opencord 0.1.31

5 of the 8 container images this version deploys carry CVE-2026-5928.

Container imageDigestPackageFixed in
omecproject/c3po-hss:master-latest638671ef4842
glibc@2.23-0ubuntu11.3
no fix listed
omecproject/c3po-hssdb:master-latest28a90cc26716
glibc@2.31-0ubuntu9.2
no fix listed
omecproject/mme-exporter:paging-latestbcc5f19fd676
glibc@2.27-3ubuntu1
no fix listed
omecproject/ngic-cp:central-cp-multi-upfs-latest24a389a0a4fe
glibc@2.27-3ubuntu1
no fix listed
omecproject/openmme:master-latest64776cb9edb3
glibc@2.23-0ubuntu11.2
no fix listed

Open the chart page →

40,795
onosopencord3.0.21 of 1See more

onos opencord 3.0.2

1 of the 1 container images this version deploys carry CVE-2026-5928.

Container imageDigestPackageFixed in
onosproject/onos:2.2.144914a8d4b3f
glibc@2.27-3ubuntu1
no fix listed

Open the chart page →

12,939
onos-progranopencord1.2.71 of 2See more

onos-progran opencord 1.2.7

1 of the 2 container images this version deploys carry CVE-2026-5928.

Container imageDigestPackageFixed in
muluder/prograncontrollermcord:0.1.843b597a93da7
glibc@2.23-0ubuntu9
no fix listed

Open the chart page →

38,889
ovspluginopencord1.0.21 of 1See more

ovsplugin opencord 1.0.2

1 of the 1 container images this version deploys carry CVE-2026-5928.

Container imageDigestPackageFixed in
gopinatht/ovs-plugin-installer:latest632cb2e9c399
glibc@2.23-0ubuntu10
no fix listed

Open the chart page →

4,170
ponsimv2opencord1.2.31 of 2See more

ponsimv2 opencord 1.2.3

1 of the 2 container images this version deploys carry CVE-2026-5928.

Container imageDigestPackageFixed in
voltha/voltha-tester:1.7.0655c3048a602
glibc@2.23-0ubuntu11
no fix listed

Open the chart page →

12,631
sebaopencord1.0.06 of 17See more

seba opencord 1.0.0

6 of the 17 container images this version deploys carry CVE-2026-5928.

Container imageDigestPackageFixed in
tpdock/freeradius:2.2.93da600c95a49
glibc@2.23-0ubuntu9
no fix listed
voltha/voltha-cli:1.6.0c4e41e92f046
glibc@2.23-0ubuntu10
no fix listed
voltha/voltha-envoy:1.6.059ab2a00f712
eglibc@2.19-0ubuntu6.13
no fix listed
voltha/voltha-netconf:1.6.037f80524c207
glibc@2.23-0ubuntu10
no fix listed
voltha/voltha-ofagent:1.6.09ee8c1f4428c
glibc@2.23-0ubuntu10
no fix listed
voltha/voltha-voltha:1.6.0ff596b62de59
glibc@2.23-0ubuntu10
no fix listed

Open the chart page →

93,965
voltha-infraopencord2.14.04 of 10See more

voltha-infra opencord 2.14.0

4 of the 10 container images this version deploys carry CVE-2026-5928.

Container imageDigestPackageFixed in
freeradius/freeradius-server:3.0.2121c8bfa904d8
glibc@2.27-3ubuntu1
no fix listed
library/ubuntu:16.041f1a2d56de1d
glibc@2.23-0ubuntu11.3
no fix listed
voltha/bbsim-sadis-server:0.3.5259fc3a03f4e
glibc@2.27-3ubuntu1.6
no fix listed
voltha/voltha-onos:5.1.8e038acb950d3
glibc@2.27-3ubuntu1.2
no fix listed

Open the chart page →

41,088
opencost-parquet-exporteropencostVerified publisher0.3.11 of 1See more

opencost-parquet-exporter opencost 0.3.1

1 of the 1 container images this version deploys carry CVE-2026-5928.

Container imageDigestPackageFixed in
ghcr.io/opencost/opencost-parquet-exporter:v0.2.1ce85ef0ce665
glibc@2.36-9+deb12u9
no fix listed

Open the chart page →

11,003
openlitopenlit1.24.01 of 3See more

openlit openlit 1.24.0

1 of the 3 container images this version deploys carry CVE-2026-5928.

Container imageDigestPackageFixed in
clickhouse/clickhouse-server:24.4.12e6587b81a26
glibc@2.31-0ubuntu9.15
no fix listed

Open the chart page →

5,056
openlit-controlleropenlit0.10.01 of 1See more

openlit-controller openlit 0.10.0

1 of the 1 container images this version deploys carry CVE-2026-5928.

Container imageDigestPackageFixed in
ghcr.io/openlit/openlit-controller:0.10.0165efd4469ea
glibc@2.36-9+deb12u14
no fix listed

Open the chart page →

1,296
openpanelopenpanel0.9.01 of 6See more

openpanel openpanel 0.9.0

1 of the 6 container images this version deploys carry CVE-2026-5928.

Container imageDigestPackageFixed in
clickhouse/clickhouse-server:25.10.2.65e019438e1e05
glibc@2.35-0ubuntu3.11
2.35-0ubuntu3.14

Open the chart page →

3,462
llm-stackopenproject-helm-chartsVerified publisher1.1.02 of 2See more

llm-stack openproject-helm-charts 1.1.0

2 of the 2 container images this version deploys carry CVE-2026-5928.

Container imageDigestPackageFixed in
apache/apisix:3.16.0-ubuntu5e47692cac00
glibc@2.39-0ubuntu8.7
2.39-0ubuntu8.8
library/python:3.12-slim78387bc3881b
glibc@2.41-12+deb13u3
2.41-12+deb13u4

Open the chart page →

1,977
fineractopenshift0.1.11 of 4See more

fineract openshift 0.1.1

1 of the 4 container images this version deploys carry CVE-2026-5928.

Container imageDigestPackageFixed in
library/nginx:latest05b8cb60c354
glibc@2.41-12+deb13u3
2.41-12+deb13u4

Open the chart page →

7,848
kubedb-certifiedopenshift2026.7.105 of 8See more

kubedb-certified openshift 2026.7.10

5 of the 8 container images this version deploys carry CVE-2026-5928.

Container imageDigestPackageFixed in
ghcr.io/kubedb/kubedb-autoscaler:v0.51.05d1182ac21f0
glibc@2.36-9+deb12u14
no fix listed
ghcr.io/kubedb/kubedb-crd-manager:v0.21.09506a6cb98d1
glibc@2.36-9+deb12u14
no fix listed
ghcr.io/kubedb/kubedb-ops-manager:v0.53.06d4c9fe66e4f
glibc@2.36-9+deb12u14
no fix listed
ghcr.io/kubedb/kubedb-provisioner:v0.66.0824d6d78d451
glibc@2.36-9+deb12u14
no fix listed
ghcr.io/kubedb/kubedb-webhook-server:v0.42.0f7dcade6523b
glibc@2.36-9+deb12u14
no fix listed

Open the chart page →

4,048
mattermost-team-editionopenshift6.6.831 of 4See more

mattermost-team-edition openshift 6.6.83

1 of the 4 container images this version deploys carry CVE-2026-5928.

Container imageDigestPackageFixed in
mattermost/mattermost-team-edition:10.11.2b8bd1246cb3a
glibc@2.36-9+deb12u10
no fix listed

Open the chart page →

4,095
voyager-gatewayopenshift2026.1.152 of 2See more

voyager-gateway openshift 2026.1.15

2 of the 2 container images this version deploys carry CVE-2026-5928.

Container imageDigestPackageFixed in
ghcr.io/voyagermesh/crd-manager:v0.1.013fd0cccafe8
glibc@2.36-9+deb12u13
no fix listed
ghcr.io/voyagermesh/gateway:v1.6.223f4da194134
glibc@2.36-9+deb12u13
no fix listed

Open the chart page →

2,579
sohaopensohaVerified publisher0.1.91 of 2See more

soha opensoha 0.1.9

1 of the 2 container images this version deploys carry CVE-2026-5928.

Container imageDigestPackageFixed in
pgvector/pgvector:0.8.5-pg18-trixie9d2e61c7352b
glibc@2.41-12+deb13u3
2.41-12+deb13u4

Open the chart page →

1,770
open-vpnopenvpn0.0.11 of 1See more

open-vpn openvpn 0.0.1

1 of the 1 container images this version deploys carry CVE-2026-5928.

Container imageDigestPackageFixed in
ghcr.io/linuxserver/openvpn-as:version-2.8.6-916f8e7d-ubuntu184ee0764310e7
glibc@2.27-3ubuntu1.2
no fix listed

Open the chart page →

15,607
terminalsopen-webui0.7.02 of 2See more

terminals open-webui 0.7.0

2 of the 2 container images this version deploys carry CVE-2026-5928.

Container imageDigestPackageFixed in
ghcr.io/open-webui/terminals:latest5d2fd44366a4
glibc@2.41-12+deb13u3
2.41-12+deb13u4
ghcr.io/open-webui/terminals-operator:latest6287ce8be502
glibc@2.41-12+deb13u3
2.41-12+deb13u4

Open the chart page →

1,998
openwhiskopenwhisk1.0.01 of 10See more

openwhisk openwhisk 1.0.0

1 of the 10 container images this version deploys carry CVE-2026-5928.

Container imageDigestPackageFixed in
openwhisk/ow-utils:1.0.0c80dba0de3aa
glibc@2.27-3ubuntu1.2
no fix listed

Open the chart page →

36,230
kubernetes-syncopslevelVerified publisher0.8.01 of 1See more

kubernetes-sync opslevel 0.8.0

1 of the 1 container images this version deploys carry CVE-2026-5928.

Container imageDigestPackageFixed in
public.ecr.aws/opslevel/kubectl-opslevel:v2024.9.571697b5ff713
glibc@2.36-9+deb12u8
no fix listed

Open the chart page →

1,729
opslevelopslevelVerified publisher2025.1.221 of 10See more

opslevel opslevel 2025.1.22

1 of the 10 container images this version deploys carry CVE-2026-5928.

Container imageDigestPackageFixed in
replicated/replicated-sdk:1.0.0-beta.318751b4963250
glibc@2.40-r2
2.43-r7

Open the chart page →

5,609
issuegenopsmxVerified publisher1.0.21 of 1See more

issuegen opsmx 1.0.2

1 of the 1 container images this version deploys carry CVE-2026-5928.

Container imageDigestPackageFixed in
opsmx11/issuegen:v2.1.05c50ca123d88
eglibc@2.19-0ubuntu6.14
no fix listed

Open the chart page →

26,367
hiveopstty0.1.91 of 4See more

hive opstty 0.1.9

1 of the 4 container images this version deploys carry CVE-2026-5928.

Container imageDigestPackageFixed in
bitnamilegacy/postgresql:16233f361c5819
glibc@2.36-9+deb12u9
no fix listed

Open the chart page →

4,539
grrosdfir-infrastructureVerified publisher1.0.32 of 5See more

grr osdfir-infrastructure 1.0.3

2 of the 5 container images this version deploys carry CVE-2026-5928.

Container imageDigestPackageFixed in
library/mariadb:11.3.2e101f9db3191
glibc@2.35-0ubuntu3.7
2.35-0ubuntu3.14
ghcr.io/google/fleetspeak:v0.1.17cd264d33efd4
glibc@2.36-9+deb12u7
no fix listed

Open the chart page →

10,965
osdfir-infrastructureosdfir-infrastructureVerified publisher2.15.025 of 40See more

osdfir-infrastructure osdfir-infrastructure 2.15.0

25 of the 40 container images this version deploys carry CVE-2026-5928.

Container imageDigestPackageFixed in
bitnamilegacy/git:latest4b08d0c5af8d
glibc@2.36-9+deb12u10
no fix listed
chromadb/chroma:1.5.7fc8dc8e11fb2
glibc@2.41-12+deb13u2
2.41-12+deb13u4
library/mariadb:11.3.2e101f9db3191
glibc@2.35-0ubuntu3.7
2.35-0ubuntu3.14
yetiplatform/yeti:2.9.09bcbe2650a14
glibc@2.41-12+deb13u3
2.41-12+deb13u4
yetiplatform/yeti-frontend:2.9.0873ef15d267b
glibc@2.41-12+deb13u3
2.41-12+deb13u4
ghcr.io/google/fleetspeak:v0.1.17cd264d33efd4
glibc@2.36-9+deb12u7
no fix listed
ghcr.io/openrelik/openrelik-mediator:latest42efc445b19e
glibc@2.36-9+deb12u14
no fix listed
ghcr.io/openrelik/openrelik-metrics:latest3d0f1ddeebf5
glibc@2.36-9+deb12u13
no fix listed
ghcr.io/openrelik/openrelik-server:latestce1132261523
glibc@2.36-9+deb12u14
no fix listed
ghcr.io/openrelik/openrelik-worker-analyzer-config:latest1269d3d8d2c2
glibc@2.39-0ubuntu8.7
2.39-0ubuntu8.8
ghcr.io/openrelik/openrelik-worker-analyzer-logs:latestb175cc61959a
glibc@2.39-0ubuntu8.7
2.39-0ubuntu8.8
ghcr.io/openrelik/openrelik-worker-bulkextractor:latest67498ee2e639
glibc@2.39-0ubuntu8.7
2.39-0ubuntu8.8
ghcr.io/openrelik/openrelik-worker-capa:latest71323a4f3fc5
glibc@2.39-0ubuntu8.7
2.39-0ubuntu8.8
ghcr.io/openrelik/openrelik-worker-chromecreds:latest76d4fbcc6ff0
glibc@2.39-0ubuntu8.7
2.39-0ubuntu8.8
ghcr.io/openrelik/openrelik-worker-cloud-logs:latesta5d7e3cf71d3
glibc@2.39-0ubuntu8.7
2.39-0ubuntu8.8
ghcr.io/openrelik/openrelik-worker-containers:latesta6d5abe94706
glibc@2.39-0ubuntu8.7
2.39-0ubuntu8.8
ghcr.io/openrelik/openrelik-worker-dfindexeddb:latest31966a825782
glibc@2.39-0ubuntu8.7
2.39-0ubuntu8.8
ghcr.io/openrelik/openrelik-worker-extraction:latestec9fc5864cd5
glibc@2.39-0ubuntu8.7
2.39-0ubuntu8.8
ghcr.io/openrelik/openrelik-worker-floss:latest7a331eb83c6a
glibc@2.39-0ubuntu8.7
2.39-0ubuntu8.8
ghcr.io/openrelik/openrelik-worker-grep:latest470ff3529746
glibc@2.39-0ubuntu8.7
2.39-0ubuntu8.8
ghcr.io/openrelik/openrelik-worker-os-creds:latest7fc7ec101f08
glibc@2.39-0ubuntu8.7
2.39-0ubuntu8.8
ghcr.io/openrelik/openrelik-worker-plaso:latest75537ea8c851
glibc@2.39-0ubuntu8.7
2.39-0ubuntu8.8
ghcr.io/openrelik/openrelik-worker-strings:latest6e05055b701f
glibc@2.39-0ubuntu8.7
2.39-0ubuntu8.8
ghcr.io/openrelik/openrelik-worker-timesketch:latest4cb88b603cdc
glibc@2.39-0ubuntu8.7
2.39-0ubuntu8.8
ghcr.io/openrelik/openrelik-worker-yara:latestbd7fbf4505b5
glibc@2.39-0ubuntu8.7
2.39-0ubuntu8.8

Open the chart page →

72,154
yetiosdfir-infrastructureVerified publisher1.0.52 of 4See more

yeti osdfir-infrastructure 1.0.5

2 of the 4 container images this version deploys carry CVE-2026-5928.

Container imageDigestPackageFixed in
yetiplatform/yeti:latest9c3006cedcca
glibc@2.41-12+deb13u3
2.41-12+deb13u4
yetiplatform/yeti-frontend:latest709064278c7e
glibc@2.41-12+deb13u3
2.41-12+deb13u4

Open the chart page →

6,544
fluent-bitot-container-kit0.0.31 of 2See more

fluent-bit ot-container-kit 0.0.3

1 of the 2 container images this version deploys carry CVE-2026-5928.

Container imageDigestPackageFixed in
quay.io/opstree/fluent-bit:5.0.3391eef5a68ff
glibc@2.41-12+deb13u2
2.41-12+deb13u4

Open the chart page →

874
loki-standaloneot-container-kit1.0.22 of 5See more

loki-standalone ot-container-kit 1.0.2

2 of the 5 container images this version deploys carry CVE-2026-5928.

Container imageDigestPackageFixed in
quay.io/opstree/k8s-sidecar:2.7.126aa9bb3386b
glibc@2.41-12+deb13u2
2.41-12+deb13u4
quay.io/opstree/memcached:1.6.38-alpine3.22cabbdfd2c3fe
glibc@2.41-12+deb13u2
2.41-12+deb13u4

Open the chart page →

3,593
vm-standaloneot-container-kit0.0.42 of 6See more

vm-standalone ot-container-kit 0.0.4

2 of the 6 container images this version deploys carry CVE-2026-5928.

Container imageDigestPackageFixed in
quay.io/opstree/grafana:12.4.3b61c1ed2f015
glibc@2.41-12+deb13u2
2.41-12+deb13u4
quay.io/opstree/k8s-sidecar:2.7.37075d455b219
glibc@2.41-12+deb13u2
2.41-12+deb13u4

Open the chart page →

3,390
webot-container-kit0.1.01 of 1See more

web ot-container-kit 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-5928.

Container imageDigestPackageFixed in
library/nginx:latest05b8cb60c354
glibc@2.41-12+deb13u3
2.41-12+deb13u4

Open the chart page →

1,839
workerot-container-kit0.1.01 of 1See more

worker ot-container-kit 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-5928.

Container imageDigestPackageFixed in
library/nginx:latest05b8cb60c354
glibc@2.41-12+deb13u3
2.41-12+deb13u4

Open the chart page →

1,839
lens-metric-proxyowan-charts0.1.01 of 1See more

lens-metric-proxy owan-charts 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-5928.

Container imageDigestPackageFixed in
library/nginx:stabled5792f71a949
glibc@2.41-12+deb13u3
2.41-12+deb13u4

Open the chart page →

1,839
automatap2p-avs0.1.01 of 2See more

automata p2p-avs 0.1.0

1 of the 2 container images this version deploys carry CVE-2026-5928.

Container imageDigestPackageFixed in
ghcr.io/foundry-rs/foundry:latest0c00cb0bda1a
glibc@2.35-0ubuntu3.13
2.35-0ubuntu3.14

Open the chart page →

3,660
avap2p-avs0.1.01 of 1See more

ava p2p-avs 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-5928.

Container imageDigestPackageFixed in
avaprotocol/ap-avs:1.2.0c430ea5c37d6
glibc@2.36-9+deb12u7
no fix listed

Open the chart page →

3,133
k3p2p-avs0.1.51 of 2See more

k3 p2p-avs 0.1.5

1 of the 2 container images this version deploys carry CVE-2026-5928.

Container imageDigestPackageFixed in
ghcr.io/foundry-rs/foundry:latest0c00cb0bda1a
glibc@2.35-0ubuntu3.13
2.35-0ubuntu3.14

Open the chart page →

2,339
mishtip2p-avs0.1.01 of 2See more

mishti p2p-avs 0.1.0

1 of the 2 container images this version deploys carry CVE-2026-5928.

Container imageDigestPackageFixed in
ghcr.io/foundry-rs/foundry:latest0c00cb0bda1a
glibc@2.35-0ubuntu3.13
2.35-0ubuntu3.14

Open the chart page →

4,038
radiusp2p-avs0.1.01 of 1See more

radius p2p-avs 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-5928.

Container imageDigestPackageFixed in
theradius/loggia:0.463ba348546ec
glibc@2.36-9+deb12u4
no fix listed

Open the chart page →

11,095
ungatep2p-avs0.1.03 of 3See more

ungate p2p-avs 0.1.0

3 of the 3 container images this version deploys carry CVE-2026-5928.

Container imageDigestPackageFixed in
xom4ekp2p/infini-route-attestators-public-mainnet-attester:latestd0e0aa238b02
glibc@2.36-9+deb12u7
no fix listed
xom4ekp2p/infini-route-attestators-public-mainnet-avs-webapi:latest2745b5fd8785
glibc@2.36-9+deb12u7
no fix listed
ghcr.io/foundry-rs/foundry:latest0c00cb0bda1a
glibc@2.35-0ubuntu3.13
2.35-0ubuntu3.14

Open the chart page →

25,681
p4p40.1.04 of 7See more

p4 p4 0.1.0

4 of the 7 container images this version deploys carry CVE-2026-5928.

Container imageDigestPackageFixed in
codeurjc/toposervice:v1.239fb4c11e6a49
glibc@2.27-3ubuntu1.6
no fix listed
library/mongo:5.0-focal5e15a3f014ed
glibc@2.31-0ubuntu9.17
no fix listed
library/rabbitmq:3.11-managementc3f70098e01d
glibc@2.35-0ubuntu3.6
2.35-0ubuntu3.14
mastercloudapps/planner:v1.2340a950b311b2
glibc@2.35-0ubuntu3.1
2.35-0ubuntu3.14

Open the chart page →

27,667

Container images carrying it

2,477 by charts deploying them

A fixed version is listed for 2 of the 4 affected packages.

Container imageDigestPackageFixed inUsed by
library/elasticsearch:7.17.35e6ac15bf6a5
glibc@2.31-0ubuntu9.7
no fix listed
2
library/elasticsearch:8.19.1289729a95066a
glibc@2.39-0ubuntu8.7
2.39-0ubuntu8.8
2
library/ghost:6.63.0e05bc1169fb2
glibc@2.36-9+deb12u14
no fix listed
2
library/haproxy:3.2de601ccc9a79
glibc@2.41-12+deb13u3
2.41-12+deb13u4
2
library/influxdb:2.7b8d940ca9376
glibc@2.36-9+deb12u13
no fix listed
2
library/mariadb:10.8.30abf60f81588
glibc@2.35-0ubuntu3.1
2.35-0ubuntu3.14
2
library/mariadb:10.10334b315c10e5
glibc@2.35-0ubuntu3.6
2.35-0ubuntu3.14
2
library/mariadb:12.0.2:12.0-noble607835cd628b
glibc@2.39-0ubuntu8.6
2.39-0ubuntu8.8
2
library/mariadb:11.3.2e101f9db3191
glibc@2.35-0ubuntu3.7
2.35-0ubuntu3.14
2
library/mongo:8.0.20098862b1339f
glibc@2.39-0ubuntu8.7
2.39-0ubuntu8.8
2
library/mongo:5.041108d183e97
glibc@2.31-0ubuntu9.17
no fix listed
2
library/mongo:4.2.358b25d51baa1
glibc@2.27-3ubuntu1
no fix listed
2
library/nextcloud:34.0.3:34.0.3-apacheb97df9e0e1ee
glibc@2.41-12+deb13u3
2.41-12+deb13u4
2
library/nginx:latest6e23479198b9
glibc@2.41-12+deb13u2
2.41-12+deb13u4
2
library/nginx:1.27.098f8ec75657d
glibc@2.36-9+deb12u7
no fix listed
2
library/nginx:1.29.49dd288848f44
glibc@2.41-12+deb13u1
2.41-12+deb13u4
2
library/phpmyadmin:5.2.16e75aa8f767c
glibc@2.36-9+deb12u9
no fix listed
2
library/postgres:17-bookworm051f7b7b3abd
glibc@2.36-9+deb12u14
no fix listed
2
library/postgres:16.109f23e02d766
glibc@2.36-9+deb12u4
no fix listed
2
library/postgres:18.11090bc3a8ccf
glibc@2.41-12+deb13u1
2.41-12+deb13u4
2
library/postgres:16.24aea012537ed
glibc@2.36-9+deb12u6
no fix listed
2
library/postgres:18.06f3e42ad37de
glibc@2.41-12
2.41-12+deb13u4
2
library/postgres:16.4e62fbf9d3e2b
glibc@2.36-9+deb12u9
no fix listed
2
library/python:3.14-slim:3-slimcad9a2c87176
glibc@2.41-12+deb13u3
2.41-12+deb13u4
2
library/python:3.7eedf63967cdb
glibc@2.36-9+deb12u1
no fix listed
2
library/rabbitmq:4.1.0-management935b3f84c1e4
glibc@2.39-0ubuntu8.4
2.39-0ubuntu8.8
2
library/rabbitmq:3.12.1-managementf020c06da226
glibc@2.35-0ubuntu3.1
2.35-0ubuntu3.14
2
library/redis:7.2.3a7cee7c8178f
glibc@2.36-9+deb12u3
no fix listed
2
library/redis:8.2.2f0957bcaa75f
glibc@2.36-9+deb12u13
no fix listed
2
library/redmine:6.1.3-trixief474a901faec
glibc@2.41-12+deb13u3
2.41-12+deb13u4
2
library/ubuntu:16.04:xenial1f1a2d56de1d
glibc@2.23-0ubuntu11.3
no fix listed
2
library/wordpress:6.8.3-apache:6.8-apache30bff39330d1
glibc@2.41-12
2.41-12+deb13u4
2
lightstep/collector:2021-01-26_23-02-36Z11c5569aaf3b
glibc@2.23-0ubuntu11
no fix listed
2
localstack/localstack-pro:latest4aef81c53168
glibc@2.41-12+deb13u3
2.41-12+deb13u4
2
locustio/locust:2.32.2a0d4b88e42c1
glibc@2.36-9+deb12u8
no fix listed
2
louislam/uptime-kuma:2.5.4917318f9d7be
glibc@2.36-9+deb12u14
no fix listed
2
louislam/uptime-kuma:2.3.29aeb4e51d038
glibc@2.36-9+deb12u13
no fix listed
2
louislam/uptime-kuma:2.5.0a8610b3b4c38
glibc@2.36-9+deb12u14
no fix listed
2
mattermost/mattermost-team-edition:10.11.2b8bd1246cb3a
glibc@2.36-9+deb12u10
no fix listed
2
mbentley/omada-controller:4.3f4e682274bed
glibc@2.27-3ubuntu1.6
no fix listed
2
meshery/meshery:stable-latest44b64ee128fb
glibc@2.36-9+deb12u14
no fix listed
2
mesosphere/kubeaddons-catalog:v0.11.4073db43d0b8b
glibc@2.31-0ubuntu9.1
no fix listed
2
moreillon/group-manager-front:v3.3.1c9f85db3baa5
glibc@2.36-9+deb12u7
no fix listed
2
moreillon/user-manager:v5.0.2e1c9bfab5c16
glibc@2.36-9+deb12u3
no fix listed
2
moreillon/user-manager-front:v5.0.3b067dbbbb6af
glibc@2.36-9+deb12u3
no fix listed
2
ngick8stesting/c3po-mmeinit:latest1e764eab77b4
glibc@2.27-3ubuntu1
no fix listed
2
nginxinc/nginx-unprivileged:stablecb92301e719d
glibc@2.41-12+deb13u3
2.41-12+deb13u4
2
nutanix/nai-jobs:v2.8.09c373718e1b1
glibc@2.41-12+deb13u3
2.41-12+deb13u4
2
obolnetwork/charon:v1.10.0278c7e2897b6
glibc@2.41-12+deb13u2
2.41-12+deb13u4
2
obsidiandynamics/kafdrop:3.30.05337c9e0e2de
glibc@2.31-0ubuntu9.7
no fix listed
2

syft 1.42.1 · advisories as of 15 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.