StackRadar

CVE-2026-5928

High

Advisory

Published 20 Apr 2026In the index since 5 Sept 2026
Severity
High
worst across findings
CVSS
7.5
base score, highest
EPSS
0.004
30th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
2,445
of 17,790 indexed, latest versions
Container images
2,477
deployed by those charts
Fix available
2 of 4
affected packages

CVE-2026-5928 affecting package glibc 2.38-21

Carried by container images the latest versions of 2,445 of 17,790 indexed charts deploy, on 2,477 images.

Affected packageAffected versionsFixed inImages
glibcdeb2.23-0ubuntu5, 2.23-0ubuntu7, 2.23-0ubuntu9, 2.23-0ubuntu10+59 more2.35-0ubuntu3.14, 2.39-0ubuntu8.8, 2.41-12+deb13u2+e4, 2.41-12+deb13u4+1 more2,425
glibcapk2.37-r7, 2.38-r6, 2.39-r7, 2.40-r1+8 more2.43-r722
eglibcdeb2.19-0ubuntu6.3, 2.19-0ubuntu6.6, 2.19-0ubuntu6.13, 2.19-0ubuntu6.14+1 moreno fix listed7
glibcrpm2.38-16.azl3, 2.38-18.azl3, 2.38-20.azl3no fix listed23
OSV records
CGA-2gxw-5ffj-x2phDEBIAN-CVE-2026-5928UBUNTU-CVE-2026-5928AZL-83087ECHO-c634-adb4-1dbe
Also known as
CGA-482r-2xq8-f4x9, CGA-52fm-fh87-3chx, CGA-7rhh-qh9f-p756, CGA-8q82-f5j8-fh3w, CGA-cr8c-r5h5-5gc4, CGA-fwmr-xqf9-976q, CGA-h6w5-gmvw-7p3j, CGA-h8hx-28hx-583g, CGA-mff9-49w3-8vxq, CGA-q7rf-9pqj-g4hq, CGA-r747-wj6f-v7p4, CGA-vrh7-vv5q-5295, CGA-wxh3-3r3r-49wr, CGA-x688-wmjw-qhpm, CGA-xqv8-j654-32r2, USN-8611-1

Charts affected

2,445 by stars
ChartLatestAffected imagesRadar Score
pombasmo-helm-chart6.0.01 of 17See more

pomba smo-helm-chart 6.0.0

1 of the 17 container images this version deploys carry CVE-2026-5928.

Container imageDigestPackageFixed in
oomk8s/readiness-check:2.0.07daa08b81954
glibc@2.23-0ubuntu9
no fix listed

Open the chart page →

29,256
portalsmo-helm-chart6.0.01 of 8See more

portal smo-helm-chart 6.0.0

1 of the 8 container images this version deploys carry CVE-2026-5928.

Container imageDigestPackageFixed in
oomk8s/readiness-check:2.0.07daa08b81954
glibc@2.23-0ubuntu9
no fix listed

Open the chart page →

27,513
sdcsmo-helm-chart6.0.01 of 14See more

sdc smo-helm-chart 6.0.0

1 of the 14 container images this version deploys carry CVE-2026-5928.

Container imageDigestPackageFixed in
oomk8s/readiness-check:2.0.2875814cc853d
glibc@2.23-0ubuntu11
no fix listed

Open the chart page →

25,804
sdnc-ansible-serversmo-helm-chart6.0.01 of 3See more

sdnc-ansible-server smo-helm-chart 6.0.0

1 of the 3 container images this version deploys carry CVE-2026-5928.

Container imageDigestPackageFixed in
oomk8s/readiness-check:2.0.2875814cc853d
glibc@2.23-0ubuntu11
no fix listed

Open the chart page →

25,804
sdnc-portalsmo-helm-chart6.0.01 of 3See more

sdnc-portal smo-helm-chart 6.0.0

1 of the 3 container images this version deploys carry CVE-2026-5928.

Container imageDigestPackageFixed in
oomk8s/readiness-check:2.0.2875814cc853d
glibc@2.23-0ubuntu11
no fix listed

Open the chart page →

25,804
sdnc-promsmo-helm-chart6.0.01 of 2See more

sdnc-prom smo-helm-chart 6.0.0

1 of the 2 container images this version deploys carry CVE-2026-5928.

Container imageDigestPackageFixed in
oomk8s/readiness-check:2.0.2875814cc853d
glibc@2.23-0ubuntu11
no fix listed

Open the chart page →

24,811
sdnc-websmo-helm-chart6.0.01 of 3See more

sdnc-web smo-helm-chart 6.0.0

1 of the 3 container images this version deploys carry CVE-2026-5928.

Container imageDigestPackageFixed in
oomk8s/readiness-check:2.0.2875814cc853d
glibc@2.23-0ubuntu11
no fix listed

Open the chart page →

24,811
ueb-listenersmo-helm-chart6.0.01 of 3See more

ueb-listener smo-helm-chart 6.0.0

1 of the 3 container images this version deploys carry CVE-2026-5928.

Container imageDigestPackageFixed in
oomk8s/readiness-check:2.0.2875814cc853d
glibc@2.23-0ubuntu11
no fix listed

Open the chart page →

25,804
sneakerssneakers1.0.01 of 4See more

sneakers sneakers 1.0.0

1 of the 4 container images this version deploys carry CVE-2026-5928.

Container imageDigestPackageFixed in
library/nginx:latest05b8cb60c354
glibc@2.41-12+deb13u3
2.41-12+deb13u4

Open the chart page →

7,596
daemonsetsnowplow-devopsVerified publisher0.6.01 of 1See more

daemonset snowplow-devops 0.6.0

1 of the 1 container images this version deploys carry CVE-2026-5928.

Container imageDigestPackageFixed in
library/nginx:latest05b8cb60c354
glibc@2.41-12+deb13u3
2.41-12+deb13u4

Open the chart page →

1,849
service-deploymentsnowplow-devopsVerified publisher0.43.01 of 1See more

service-deployment snowplow-devops 0.43.0

1 of the 1 container images this version deploys carry CVE-2026-5928.

Container imageDigestPackageFixed in
nginxinc/nginx-unprivileged:stablecb92301e719d
glibc@2.41-12+deb13u3
2.41-12+deb13u4

Open the chart page →

1,831
space-engineerssoblivionscall1.0.21 of 2See more

space-engineers soblivionscall 1.0.2

1 of the 2 container images this version deploys carry CVE-2026-5928.

Container imageDigestPackageFixed in
library/ubuntu:xenial1f1a2d56de1d
glibc@2.23-0ubuntu11.3
no fix listed

Open the chart page →

2,774
cost-analyzersoftonic2.5.51 of 6See more

cost-analyzer softonic 2.5.5

1 of the 6 container images this version deploys carry CVE-2026-5928.

Container imageDigestPackageFixed in
gcr.io/kubecost1/frontend:prod-2.5.5991c1465c658
glibc@2.40-r23
2.43-r7

Open the chart page →

7,957
bootzookasoftwaremillVerified publisher0.2.11 of 2See more

bootzooka softwaremill 0.2.1

1 of the 2 container images this version deploys carry CVE-2026-5928.

Container imageDigestPackageFixed in
softwaremill/bootzooka:latest845b5e8f8056
glibc@2.43-2ubuntu2
2.43-2ubuntu2.3

Open the chart page →

3,071
atlassian-confluencesomeblackmagic3.4.11 of 1See more

atlassian-confluence someblackmagic 3.4.1

1 of the 1 container images this version deploys carry CVE-2026-5928.

Container imageDigestPackageFixed in
atlassian/confluence-server:7.10.03b9222ab32ef
glibc@2.35-0ubuntu3.1
2.35-0ubuntu3.14

Open the chart page →

13,657
atlassian-jirasomeblackmagic3.3.21 of 1See more

atlassian-jira someblackmagic 3.3.2

1 of the 1 container images this version deploys carry CVE-2026-5928.

Container imageDigestPackageFixed in
atlassian/jira-software:8.14.037bc46cbec1a
glibc@2.35-0ubuntu3.6
2.35-0ubuntu3.14

Open the chart page →

13,130
testing-multitoolsomeblackmagic0.1.21 of 1See more

testing-multitool someblackmagic 0.1.2

1 of the 1 container images this version deploys carry CVE-2026-5928.

Container imageDigestPackageFixed in
someblackmagic/k8s-testing-multitool:v0.1.06eca64b6b440
glibc@2.31-0ubuntu9.7
no fix listed

Open the chart page →

30,779
nginx-chartsongduckbae-nginx0.1.01 of 1See more

nginx-chart songduckbae-nginx 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-5928.

Container imageDigestPackageFixed in
library/nginx:latest05b8cb60c354
glibc@2.41-12+deb13u3
2.41-12+deb13u4

Open the chart page →

1,849
spacecapybara-chartspacecapy1.0.491 of 2See more

spacecapybara-chart spacecapy 1.0.49

1 of the 2 container images this version deploys carry CVE-2026-5928.

Container imageDigestPackageFixed in
sashafefler/spacecapybara_app:latestf96d7804c0ca
glibc@2.36-9+deb12u8
no fix listed

Open the chart page →

11,979
datadogspartan0.1.01 of 1See more

datadog spartan 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-5928.

Container imageDigestPackageFixed in
gcr.io/datadoghq/cluster-agent:7.61.06efe04ba4e06
glibc@2.39-0ubuntu8.3
2.39-0ubuntu8.8

Open the chart page →

3,284
speckle-preview-service-branch-testing6speckleVerified publisher2.23.14-branch.testing6.334655-b4e04ee1 of 1See more

speckle-preview-service-branch-testing6 speckle 2.23.14-branch.testing6.334655-b4e04ee

1 of the 1 container images this version deploys carry CVE-2026-5928.

Container imageDigestPackageFixed in
speckle/speckle-preview-service:2.23.14-branch.testing6.334655-b4e04ee6dee853ba74a
glibc@2.36-9+deb12u7
no fix listed

Open the chart page →

5,968
speckle-server-branch-hotfix-2.19.1speckleVerified publisher2.19.2-branch.hotfix-2.19.1.124125-665e7e15 of 5See more

speckle-server-branch-hotfix-2.19.1 speckle 2.19.2-branch.hotfix-2.19.1.124125-665e7e1

5 of the 5 container images this version deploys carry CVE-2026-5928.

Container imageDigestPackageFixed in
speckle/speckle-frontend-2:2.19.2-branch.hotfix-2.19.1.124125-665e7e14f9241665ae3
glibc@2.36-9+deb12u7
no fix listed
speckle/speckle-monitor-deployment:2.19.2-branch.hotfix-2.19.1.124125-665e7e1b696ac5022ab
glibc@2.36-9+deb12u7
no fix listed
speckle/speckle-preview-service:2.19.2-branch.hotfix-2.19.1.124125-665e7e1c102b087481a
glibc@2.36-9+deb12u7
no fix listed
speckle/speckle-server:2.19.2-branch.hotfix-2.19.1.124125-665e7e14b6a0750d5aa
glibc@2.36-9+deb12u7
no fix listed
speckle/speckle-webhook-service:2.19.2-branch.hotfix-2.19.1.124125-665e7e14828aee2277c
glibc@2.36-9+deb12u7
no fix listed

Open the chart page →

16,463
speckle-server-branch-hotfix-2.20.2speckleVerified publisher2.20.3-branch.hotfix-2.20.2.149555-37ea0cb5 of 5See more

speckle-server-branch-hotfix-2.20.2 speckle 2.20.3-branch.hotfix-2.20.2.149555-37ea0cb

5 of the 5 container images this version deploys carry CVE-2026-5928.

Container imageDigestPackageFixed in
speckle/speckle-frontend-2:2.20.3-branch.hotfix-2.20.2.149555-37ea0cbfdc008effc7a
glibc@2.36-9+deb12u7
no fix listed
speckle/speckle-monitor-deployment:2.20.3-branch.hotfix-2.20.2.149555-37ea0cb2faf1508c1d3
glibc@2.36-9+deb12u7
no fix listed
speckle/speckle-preview-service:2.20.3-branch.hotfix-2.20.2.149555-37ea0cbd3da0a84de98
glibc@2.36-9+deb12u7
no fix listed
speckle/speckle-server:2.20.3-branch.hotfix-2.20.2.149555-37ea0cb52f8eabf5cea
glibc@2.36-9+deb12u7
no fix listed
speckle/speckle-webhook-service:2.20.3-branch.hotfix-2.20.2.149555-37ea0cb107c63336ab5
glibc@2.36-9+deb12u7
no fix listed

Open the chart page →

16,495
speckle-server-branch-testingspeckleVerified publisher2.17.14-branch.testing.72707.921a5f84 of 5See more

speckle-server-branch-testing speckle 2.17.14-branch.testing.72707.921a5f8

4 of the 5 container images this version deploys carry CVE-2026-5928.

Container imageDigestPackageFixed in
speckle/speckle-monitor-deployment:2.17.14-branch.testing.72707.921a5f8ff1641ac3f1b
glibc@2.36-9+deb12u3
no fix listed
speckle/speckle-preview-service:2.17.14-branch.testing.72707.921a5f884fc39bca0c8
glibc@2.36-9+deb12u3
no fix listed
speckle/speckle-server:2.17.14-branch.testing.72707.921a5f849d10dcdfb91
glibc@2.36-9+deb12u3
no fix listed
speckle/speckle-webhook-service:2.17.14-branch.testing.72707.921a5f899913052b72e
glibc@2.36-9+deb12u3
no fix listed

Open the chart page →

14,756
speckle-server-branch-testing1speckleVerified publisher2.20.6-branch.testing1.154030-9b091145 of 5See more

speckle-server-branch-testing1 speckle 2.20.6-branch.testing1.154030-9b09114

5 of the 5 container images this version deploys carry CVE-2026-5928.

Container imageDigestPackageFixed in
speckle/speckle-frontend-2:2.20.6-branch.testing1.154030-9b0911432fc940d9b4c
glibc@2.36-9+deb12u7
no fix listed
speckle/speckle-monitor-deployment:2.20.6-branch.testing1.154030-9b09114738c77eb6f97
glibc@2.36-9+deb12u7
no fix listed
speckle/speckle-preview-service:2.20.6-branch.testing1.154030-9b091148f3c1ea153ba
glibc@2.36-9+deb12u7
no fix listed
speckle/speckle-server:2.20.6-branch.testing1.154030-9b09114e8413f57b327
glibc@2.36-9+deb12u7
no fix listed
speckle/speckle-webhook-service:2.20.6-branch.testing1.154030-9b09114cf1d99bad89a
glibc@2.36-9+deb12u7
no fix listed

Open the chart page →

16,495
speckle-server-branch-testing2speckleVerified publisher2.18.11-branch.testing2.88634-335d4694 of 5See more

speckle-server-branch-testing2 speckle 2.18.11-branch.testing2.88634-335d469

4 of the 5 container images this version deploys carry CVE-2026-5928.

Container imageDigestPackageFixed in
speckle/speckle-monitor-deployment:2.18.11-branch.testing2.88634-335d469d6790a97ad47
glibc@2.36-9+deb12u4
no fix listed
speckle/speckle-preview-service:2.18.11-branch.testing2.88634-335d4694bd113093583
glibc@2.36-9+deb12u4
no fix listed
speckle/speckle-server:2.18.11-branch.testing2.88634-335d469bf6a501b2210
glibc@2.36-9+deb12u4
no fix listed
speckle/speckle-webhook-service:2.18.11-branch.testing2.88634-335d469902b98ad5327
glibc@2.36-9+deb12u4
no fix listed

Open the chart page →

14,299
speckle-server-branch-testing3speckleVerified publisher2.18.12-branch.testing3.88744-f55b3414 of 5See more

speckle-server-branch-testing3 speckle 2.18.12-branch.testing3.88744-f55b341

4 of the 5 container images this version deploys carry CVE-2026-5928.

Container imageDigestPackageFixed in
speckle/speckle-monitor-deployment:2.18.12-branch.testing3.88744-f55b34181335b40696a
glibc@2.36-9+deb12u4
no fix listed
speckle/speckle-preview-service:2.18.12-branch.testing3.88744-f55b3414bd113093583
glibc@2.36-9+deb12u4
no fix listed
speckle/speckle-server:2.18.12-branch.testing3.88744-f55b34189a5872375f9
glibc@2.36-9+deb12u4
no fix listed
speckle/speckle-webhook-service:2.18.12-branch.testing3.88744-f55b341771f872cfa63
glibc@2.36-9+deb12u4
no fix listed

Open the chart page →

14,299
speckle-server-branch-testing4speckleVerified publisher2.20.2-branch.testing4.134160-9fad4b25 of 5See more

speckle-server-branch-testing4 speckle 2.20.2-branch.testing4.134160-9fad4b2

5 of the 5 container images this version deploys carry CVE-2026-5928.

Container imageDigestPackageFixed in
speckle/speckle-frontend-2:2.20.2-branch.testing4.134160-9fad4b210ad4ade8bf2
glibc@2.36-9+deb12u7
no fix listed
speckle/speckle-monitor-deployment:2.20.2-branch.testing4.134160-9fad4b23c8fbe855665
glibc@2.36-9+deb12u7
no fix listed
speckle/speckle-preview-service:2.20.2-branch.testing4.134160-9fad4b21f897ca906ea
glibc@2.36-9+deb12u7
no fix listed
speckle/speckle-server:2.20.2-branch.testing4.134160-9fad4b2687f43ab16f3
glibc@2.36-9+deb12u7
no fix listed
speckle/speckle-webhook-service:2.20.2-branch.testing4.134160-9fad4b270f5167d1d4d
glibc@2.36-9+deb12u7
no fix listed

Open the chart page →

16,114
speckle-server-branch-testing5speckleVerified publisher2.21.3-branch.testing5.219631-2153bef5 of 5See more

speckle-server-branch-testing5 speckle 2.21.3-branch.testing5.219631-2153bef

5 of the 5 container images this version deploys carry CVE-2026-5928.

Container imageDigestPackageFixed in
speckle/speckle-frontend-2:2.21.3-branch.testing5.219631-2153befd4ca6ebf09b9
glibc@2.36-9+deb12u7
no fix listed
speckle/speckle-monitor-deployment:2.21.3-branch.testing5.219631-2153befcf72ad0f25fb
glibc@2.36-9+deb12u7
no fix listed
speckle/speckle-preview-service:2.21.3-branch.testing5.219631-2153bef52cad5e3293e
glibc@2.36-9+deb12u7
no fix listed
speckle/speckle-server:2.21.3-branch.testing5.219631-2153bef8fd157733393
glibc@2.36-9+deb12u7
no fix listed
speckle/speckle-webhook-service:2.21.3-branch.testing5.219631-2153bef06ecc7a66a40
glibc@2.36-9+deb12u7
no fix listed

Open the chart page →

15,725
speckle-server-branch-testing6speckleVerified publisher2.25.10-branch.testing6.645-b125c1e4 of 4See more

speckle-server-branch-testing6 speckle 2.25.10-branch.testing6.645-b125c1e

4 of the 4 container images this version deploys carry CVE-2026-5928.

Container imageDigestPackageFixed in
speckle/speckle-monitor-deployment:2.25.10-branch.testing6.645-b125c1e2dbc553ed87c
glibc@2.36-9+deb12u7
no fix listed
speckle/speckle-preview-service:2.25.10-branch.testing6.645-b125c1e787adcb20a3a
glibc@2.36-9+deb12u7
no fix listed
speckle/speckle-server:2.25.10-branch.testing6.645-b125c1e75cdf256067b
glibc@2.36-9+deb12u10
no fix listed
speckle/speckle-webhook-service:2.25.10-branch.testing6.645-b125c1edd9db6cbe9bb
glibc@2.36-9+deb12u7
no fix listed

Open the chart page →

11,167
spoolmanspoolmanVerified publisher0.2.61 of 1See more

spoolman spoolman 0.2.6

1 of the 1 container images this version deploys carry CVE-2026-5928.

Container imageDigestPackageFixed in
ghcr.io/donkie/spoolman:0.26.1cf9b41e17b93
glibc@2.36-9+deb12u14
no fix listed

Open the chart page →

1,797
ocean-network-clientspot1.1.61 of 1See more

ocean-network-client spot 1.1.6

1 of the 1 container images this version deploys carry CVE-2026-5928.

Container imageDigestPackageFixed in
public.ecr.aws/spotinst/spot-network-client:1.0.1486380a01587d
glibc@2.39-0ubuntu8.7
2.39-0ubuntu8.8

Open the chart page →

2,264
spotinst-ocean-network-clientspot1.0.01 of 1See more

spotinst-ocean-network-client spot 1.0.0

1 of the 1 container images this version deploys carry CVE-2026-5928.

Container imageDigestPackageFixed in
public.ecr.aws/spotinst/spot-network-client:1.0.0-8-lb_endpoint-d0ec127efcecf98b912
glibc@2.27-3ubuntu1.6
no fix listed

Open the chart page →

6,959
airflowsqream-chartsVerified publisher1.17.01 of 4See more

airflow sqream-charts 1.17.0

1 of the 4 container images this version deploys carry CVE-2026-5928.

Container imageDigestPackageFixed in
library/redis:7.2-bookworm74566c6910d1
glibc@2.36-9+deb12u14
no fix listed

Open the chart page →

1,854
envoy-proxysqream-chartsVerified publisher0.6.01 of 2See more

envoy-proxy sqream-charts 0.6.0

1 of the 2 container images this version deploys carry CVE-2026-5928.

Container imageDigestPackageFixed in
envoyproxy/envoy:v1.30.1e596fda6a0ce
glibc@2.35-0ubuntu3.7
2.35-0ubuntu3.14

Open the chart page →

2,312
squadsquadVerified publisher0.1.111 of 1See more

squad squad 0.1.11

1 of the 1 container images this version deploys carry CVE-2026-5928.

Container imageDigestPackageFixed in
cm2network/squad:latest8cba47f53df5
glibc@2.41-12+deb13u1
2.41-12+deb13u4

Open the chart page →

2,509
srebotsrebot0.14.01 of 2See more

srebot srebot 0.14.0

1 of the 2 container images this version deploys carry CVE-2026-5928.

Container imageDigestPackageFixed in
ghcr.io/shadrus/srebot:0.14.09b4415e937b2
glibc@2.41-12+deb13u3
2.41-12+deb13u4

Open the chart page →

1,565
pagessrinipages1.0.02 of 3See more

pages srinipages 1.0.0

2 of the 3 container images this version deploys carry CVE-2026-5928.

Container imageDigestPackageFixed in
dellcloud/pages:monitor6ba7b22caacd
glibc@2.31-0ubuntu9.1
no fix listed
flyway/flyway:6.4.422d97ceb0c47
glibc@2.27-3ubuntu1
no fix listed

Open the chart page →

20,242
servicexssl-hep1.8.511 of 16See more

servicex ssl-hep 1.8.5

11 of the 16 container images this version deploys carry CVE-2026-5928.

Container imageDigestPackageFixed in
library/python:3.1070c9cc675605
glibc@2.41-12+deb13u3
2.41-12+deb13u4
ncsa/checks:main0b738bbc8d70
glibc@2.41-12
2.41-12+deb13u4
sslhep/servicex_app:v1.8.51d12f943cec5
glibc@2.41-12+deb13u3
2.41-12+deb13u4
sslhep/servicex_code_gen_atlas_xaod:v1.8.5e7aff7f97b89
glibc@2.41-12+deb13u3
2.41-12+deb13u4
sslhep/servicex_code_gen_func_adl_uproot:v1.8.5b01b8ee966ed
glibc@2.41-12+deb13u3
2.41-12+deb13u4
sslhep/servicex_code_gen_python:v1.8.50e4175a4e1eb
glibc@2.41-12+deb13u3
2.41-12+deb13u4
sslhep/servicex_code_gen_raw_uproot:v1.8.5671980005c57
glibc@2.41-12+deb13u3
2.41-12+deb13u4
sslhep/servicex_code_gen_topcp:v1.8.5596db2abdd09
glibc@2.41-12+deb13u3
2.41-12+deb13u4
sslhep/servicex-did-finder-atlasopenmagic:v1.8.554aaf1721d03
glibc@2.41-12+deb13u3
2.41-12+deb13u4
sslhep/servicex-did-finder-cernopendata:v1.8.52cb88ceab5bb
glibc@2.41-12+deb13u3
2.41-12+deb13u4
sslhep/servicex-did-finder-xrootd:v1.8.5c284442b44e3
glibc@2.41-12+deb13u3
2.41-12+deb13u4

Open the chart page →

67,262
jenkinsstakaterVerified publisher0.21.01 of 1See more

jenkins stakater 0.21.0

1 of the 1 container images this version deploys carry CVE-2026-5928.

Container imageDigestPackageFixed in
jenkins/jenkins:ltsc1e4c349365f
glibc@2.41-12+deb13u3
2.41-12+deb13u4

Open the chart page →

2,498
stakefishstakefish0.1.01 of 8See more

stakefish stakefish 0.1.0

1 of the 8 container images this version deploys carry CVE-2026-5928.

Container imageDigestPackageFixed in
thongngo3301/stakefish:latesta341af5976e3
glibc@2.36-9+deb12u1
no fix listed

Open the chart page →

20,321
erigonstakewise2.61.21 of 3See more

erigon stakewise 2.61.2

1 of the 3 container images this version deploys carry CVE-2026-5928.

Container imageDigestPackageFixed in
erigontech/erigon:v2.61.288706754b627
glibc@2.36-9+deb12u9
no fix listed

Open the chart page →

2,968
lighthouse-validatorstakewise7.0.11 of 2See more

lighthouse-validator stakewise 7.0.1

1 of the 2 container images this version deploys carry CVE-2026-5928.

Container imageDigestPackageFixed in
sigp/lighthouse:v7.0.12cae720e9a35
glibc@2.35-0ubuntu3.9
2.35-0ubuntu3.14

Open the chart page →

2,022
lodestar-validatorstakewise1.2.01 of 1See more

lodestar-validator stakewise 1.2.0

1 of the 1 container images this version deploys carry CVE-2026-5928.

Container imageDigestPackageFixed in
chainsafe/lodestar:v1.27.07b9fe4aa8073
glibc@2.36-9+deb12u9
no fix listed

Open the chart page →

4,074
nethermindstakewise2.8.21 of 3See more

nethermind stakewise 2.8.2

1 of the 3 container images this version deploys carry CVE-2026-5928.

Container imageDigestPackageFixed in
nethermind/nethermind:1.31.893e57917371a
glibc@2.39-0ubuntu8.4
2.39-0ubuntu8.8

Open the chart page →

2,076
operatorstakewise2.1.11 of 5See more

operator stakewise 2.1.1

1 of the 5 container images this version deploys carry CVE-2026-5928.

Container imageDigestPackageFixed in
sigp/lighthouse:v2.1.2ad501f02cfef
glibc@2.31-0ubuntu9.2
no fix listed

Open the chart page →

6,587
rethstakewise1.2.11 of 3See more

reth stakewise 1.2.1

1 of the 3 container images this version deploys carry CVE-2026-5928.

Container imageDigestPackageFixed in
ghcr.io/paradigmxyz/reth:v1.3.121e5290e8b743
glibc@2.35-0ubuntu3.9
2.35-0ubuntu3.14

Open the chart page →

2,018
ssv-nodestakewise2.2.01 of 2See more

ssv-node stakewise 2.2.0

1 of the 2 container images this version deploys carry CVE-2026-5928.

Container imageDigestPackageFixed in
bloxstaking/ssv-node:v2.2.0bf6d7d2fdc93
glibc@2.36-9+deb12u9
no fix listed

Open the chart page →

6,873
teku-validatorstakewise4.3.21 of 2See more

teku-validator stakewise 4.3.2

1 of the 2 container images this version deploys carry CVE-2026-5928.

Container imageDigestPackageFixed in
consensys/teku:25.4.1bf6ecd2ea716
glibc@2.39-0ubuntu8.4
2.39-0ubuntu8.8

Open the chart page →

3,198
verostakewise0.8.31 of 2See more

vero stakewise 0.8.3

1 of the 2 container images this version deploys carry CVE-2026-5928.

Container imageDigestPackageFixed in
ghcr.io/serenita-org/vero:v0.8.3e5a7ec714acc
glibc@2.36-9+deb12u7
no fix listed

Open the chart page →

3,475

Container images carrying it

2,477 by charts deploying them

A fixed version is listed for 2 of the 4 affected packages.

Container imageDigestPackageFixed inUsed by
wolveix/satisfactory-server:latest:v1.9.10e103700ae6ae
glibc@2.35-0ubuntu3.10
2.35-0ubuntu3.14
2
wurstmeister/zookeeper:latest7a7fd44a7210
eglibc@2.19-0ubuntu6.3
no fix listed
2
zabbix/zabbix-agent:ubuntu-6.4-latest349b924472a7
glibc@2.39-0ubuntu8.3
2.39-0ubuntu8.8
2
gcr.io/cloud-tagging-10302018/gtm-cloud-image:stable688d35c6c544
glibc@2.41-12+deb13u3
2.41-12+deb13u4
2
gcr.io/google_containers/kubernetes-dashboard-init-amd64:v1.0.0fbe12aa24de6
glibc@2.23-0ubuntu9
no fix listed
2
ghcr.io/api7/adc:0.27.1f65f53dd9668
glibc@2.36-9+deb12u14
no fix listed
2
ghcr.io/appscode/inbox-server:latest:postgres-latest536358d7b17e
glibc@2.35-0ubuntu3.11
2.35-0ubuntu3.14
2
ghcr.io/astriaorg/conductor:latest3ea8164b0eae
glibc@2.36-9+deb12u13
no fix listed
2
ghcr.io/bryopsida/k8s-dev-pod:main82d0b161161d
glibc@2.39-0ubuntu8.4
2.39-0ubuntu8.8
2
ghcr.io/chroma-core/chroma:1.5.91e0b73a187a2
glibc@2.41-12+deb13u2
2.41-12+deb13u4
2
ghcr.io/codingducksrl/laravel:8.15be52524664c
glibc@2.35-0ubuntu3.1
2.35-0ubuntu3.14
2
ghcr.io/danbooru/danbooru:9cab67c0ac72a8c52289302c519715ceec2372d95f545698e907
glibc@2.35-0ubuntu3.1
2.35-0ubuntu3.14
2
ghcr.io/flaresolverr/flaresolverr:v3.4.67962759d99d7
glibc@2.36-9+deb12u13
no fix listed
2
ghcr.io/flaresolverr/flaresolverr:v3.5.2c80ae007ce2c
glibc@2.36-9+deb12u14
no fix listed
2
ghcr.io/flyteorg/flyte-connectors:py3.12-v2.3.6896fc7b18b1b
glibc@2.36-9+deb12u14
no fix listed
2
ghcr.io/games-on-whales/pulseaudio:1.0.0f34f98405c10
glibc@2.31-0ubuntu9.2
no fix listed
2
ghcr.io/games-on-whales/retroarch:1.0.0103fbcec2314
glibc@2.31-0ubuntu9.2
no fix listed
2
ghcr.io/games-on-whales/steam:1.0.09b6105be7ad0
glibc@2.31-0ubuntu9.2
no fix listed
2
ghcr.io/google/fleetspeak:v0.1.17cd264d33efd4
glibc@2.36-9+deb12u7
no fix listed
2
ghcr.io/immich-app/postgres:14-vectorchord0.4.3-pgvectors0.2.0bcf63357191b
glibc@2.36-9+deb12u10
no fix listed
2
ghcr.io/juanfont/headscale:0.29.3:v0.29.30e7f1c6e4ce6
glibc@2.41-12+deb13u3
2.41-12+deb13u4
2
ghcr.io/libredb/libredb-studio:0.15.04b696f960ac1
glibc@2.41-12+deb13u3
2.41-12+deb13u4
2
ghcr.io/linuxserver/openvpn-as:version-2.8.6-916f8e7d-ubuntu184ee0764310e7
glibc@2.27-3ubuntu1.2
no fix listed
2
ghcr.io/lissy93/web-check:latesta4e021c0f6a9
glibc@2.36-9+deb12u14
no fix listed
2
ghcr.io/mumble-voip/mumble-server:v1.6.87002fd613b6a35
glibc@2.39-0ubuntu8.7
2.39-0ubuntu8.8
2
ghcr.io/nginxinc/nginx-s3-gateway/nginx-oss-s3-gateway:unprivileged-oss:unprivileged-oss-202503313db8145349a3
glibc@2.36-9+deb12u8
no fix listed
2
ghcr.io/nucleuscloud/neosync/api:0.5.41e2abb798f29f
glibc@2.36-9+deb12u10
no fix listed
2
ghcr.io/nucleuscloud/neosync/worker:0.5.4196f42450c5b1
glibc@2.36-9+deb12u10
no fix listed
2
ghcr.io/postgresml/pgcat:main245f9d2f5f5b
glibc@2.36-9+deb12u3
no fix listed
2
ghcr.io/project-zot/zot:v2.1.216b69512c00dc
glibc@2.41-12+deb13u3
2.41-12+deb13u4
2
ghcr.io/rss3-network/agentdata:0.1.0fd8d3e6e4cdf
glibc@2.36-9+deb12u9
no fix listed
2
ghcr.io/salaboy/fmtok8s-agenda-service:v0.0.1-native6c5efe150958
glibc@2.27-3ubuntu1.6
no fix listed
2
ghcr.io/salaboy/fmtok8s-c4p-service:v0.0.1-native3f7cc45fd20b
glibc@2.27-3ubuntu1.6
no fix listed
2
ghcr.io/salaboy/fmtok8s-frontend:v0.1.103fd01b4f56e
glibc@2.35-0ubuntu3
2.35-0ubuntu3.14
2
ghcr.io/smarter-project/home-ha-mock:main95ee018cf558
glibc@2.36-9+deb12u10
no fix listed
2
ghcr.io/smarter-project/hydra/isolated-vm:main4457b79b24cd
glibc@2.36-9+deb12u13
no fix listed
2
ghcr.io/voyagermesh/gateway:v1.8.24237fd16a3cb
glibc@2.41-12+deb13u3
2.41-12+deb13u4
2
mcr.microsoft.com/azure-sql-edge:latest902628a8be89
glibc@2.31-0ubuntu9.9
no fix listed
2
public.ecr.aws/cloudnatix/llmariner/model-manager-loader:1.27.026ac7263a823
glibc@2.41-12
2.41-12+deb13u4
2
public.ecr.aws/gravitational/tbot-distroless:18.11.04ba5ace31fea
glibc@2.36-9+deb12u14
no fix listed
2
quay.io/argoproj/argocd:v2.14.115fc69e31c755
glibc@2.39-0ubuntu8.4
2.39-0ubuntu8.8
2
registry.k8s.io/sig-storage/smbplugin:v1.20.3dc7746bb081e
glibc@2.36-9+deb12u14
no fix listed
2
1dev/server:11.9.0cd5b12fe5471
glibc@2.39-0ubuntu8.4
2.39-0ubuntu8.8
1
1password/connect-api:1.8.2e915c0c84397
glibc@2.41-12+deb13u1
2.41-12+deb13u4
1
1password/connect-sync:1.8.26297ca6136c0
glibc@2.41-12+deb13u1
2.41-12+deb13u4
1
48n6e/camellia-redis-proxy:1.4.0-jdk-21-0.0.1a6ed886fddfc
glibc@2.36-9+deb12u1
no fix listed
1
5200710/hadoop:3.2.3-java8092d3088a5fb
glibc@2.31-0ubuntu9.14
no fix listed
1
a10networks/acos-prometheus-exporter:latest8dc58d434d71
glibc@2.27-3ubuntu1
no fix listed
1
aapjeisbaas/wp-frankenphp:v0.2.26b261abc7fb0
glibc@2.41-12+deb13u2
2.41-12+deb13u4
1
aboogie/login_test_backend:new9c41a4483ac8
glibc@2.36-9+deb12u7
no fix listed
1

syft 1.42.1 · advisories as of 16 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.