CVE-2026-6042
MediumAdvisory
Published 10 Apr 2026In the index since 5 Sept 2026
- Severity
- Medium
- worst across findings
- CVSS
- 4.8
- base score, highest
- EPSS
- 0.002
- 15th percentile
- CISA KEV
- Not listed
- no confirmed exploitation
- Charts affected
- 1,052
- of 17,790 indexed, latest versions
- Container images
- 1,109
- deployed by those charts
- Fix available
- 1 of 2
- affected packages
The matching OSV records carry no description.
Carried by container images the latest versions of 1,052 of 17,790 indexed charts deploy, on 1,109 images.
| Affected package | Affected versions | Fixed in | Images |
|---|---|---|---|
| muslapk | 1.2.4_git20230717-r4, 1.2.4_git20230717-r5, 1.2.5-r0, 1.2.5-r1+4 more | 1.2.4_git20230717-r6, 1.2.5-r2, 1.2.5-r10, 1.2.5-r11+2 more | 1,108 |
| musldeb | 1.2.2-4 | no fix listed | 1 |
- OSV records
- ALPINE-CVE-2026-6042UBUNTU-CVE-2026-6042
Charts affected
1,052 by stars
Container images carrying it
1,109 by charts deploying them
A fixed version is listed for 1 of the 2 affected packages.
| Container image | Digest | Package | Fixed in | Used by |
|---|---|---|---|---|
| library/ | 6aaf3f5e6bc8 | musl | 1.2.5-r2 | 1 |
| library/ | 77697a75da9f | musl | 1.2.5-r10 | 1 |
| library/ | c1e88455c852 | musl | 1.2.5-r2 | 1 |
| library/ | c9d92d840fd0 | musl | 1.2.5-r2 | 1 |
| library/ | 0a5157f742d2 | musl | 1.2.4_git20230717-r6 | 1 |
| library/ | 104204dadedf | musl | 1.2.5-r10 | 1 |
| library/ | 6db2c9e4c2dd | musl | 1.2.4_git20230717-r6 | 1 |
| library/ | a84e1d4adb58 | musl | 1.2.5-r22 | 1 |
| librenms/ | 0920bc9117a8 | musl | 1.2.4_git20230717-r6 | 1 |
| lifailon/ | ea37e4b6b952 | musl | 1.2.5-r11 | 1 |
| linkstackorg/ | 1c8b05399ee4 | musl | 1.2.5-r11 | 1 |
| linode/ | 09f3282bf53d | musl | 1.2.5-r22 | 1 |
| linuxserver/ | 052eac68ccc0 | musl | 1.2.5-r10 | 1 |
| linuxserver/ | 71597f4461e4 | musl | 1.2.5-r2 | 1 |
| linuxserver/ | 53ea39d2485c | musl | 1.2.5-r2 | 1 |
| linuxserver/ | 6108ed066d4a | musl | 1.2.5-r11 | 1 |
| linuxserver/ | b7f906899cd3 | musl | 1.2.5-r2 | 1 |
| lissy93/ | 700862839553 | musl | 1.2.5-r22 | 1 |
| listmonk/ | bf3903d54a46 | musl | 1.2.5-r22 | 1 |
| litlyx/ | 02225e77d316 | musl | 1.2.5-r11 | 1 |
| litlyx/ | e64ff2d52385 | musl | 1.2.5-r11 | 1 |
| litlyx/ | 10407f36613f | musl | 1.2.5-r11 | 1 |
| livekit/ | 3602a85840d5 | musl | 1.2.5-r11 | 1 |
| loeken/ | a24409d3846d | musl | 1.2.5-r10 | 1 |
| maildev/ | 180ef51f65ee | musl | 1.2.5-r10 | 1 |
| mathieuruellan/ | 04572c8a1b04 | musl | 1.2.5-r2 | 1 |
| mathnao/ | b900e6b64684 | musl | 1.2.5-r10 | 1 |
| mauricenino/ | 236997816917 | musl | 1.2.5-r10 | 1 |
| mavrick1/ | 45ca0429a1d4 | musl | 1.2.5-r10 | 1 |
| mavrick1/ | 56bd8eaa53a4 | musl | 1.2.5-r10 | 1 |
| megaease/ | fad1c7452958 | musl | 1.2.5-r22 | 1 |
| metabase/ | 7807bc5cad17 | musl | 1.2.5-r10 | 1 |
| mikefarah/ | 2c100efaca06 | musl | 1.2.5-r10 | 1 |
| miniflux/ | a3ca6bbc1f74 | musl | 1.2.5-r22 | 1 |
| moonrailgun/ | b528c8f8fcc4 | musl | 1.2.5-r2 | 1 |
| mrasif/ | 375a1ed8fdc0 | musl | 1.2.5-r22 | 1 |
| mvisonneau/ | fc45ad8abf10 | musl | 1.2.5-r2 | 1 |
| mziyabo/ | 3067dce17983 | musl | 1.2.5-r2 | 1 |
| n8nio/ | 8b39ed5a2de9 | musl | 1.2.5-r10 | 1 |
| n8nio/ | dd171d45102a | musl | 1.2.4_git20230717-r6 | 1 |
| n8nio/ | ed16e560c40e | musl | 1.2.5-r11 | 1 |
| nacos/ | 0e951a1d07bb | musl | 1.2.5-r11 | 1 |
| nacos/ | 30a39cb0c54d | musl | 1.2.5-r10 | 1 |
| natsio/ | 1cc420186664 | musl | 1.2.4_git20230717-r6 | 1 |
| natsio/ | abdc9f9f0120 | musl | 1.2.5-r11 | 1 |
| natsio/ | e808e0644ce1 | musl | 1.2.4_git20230717-r6 | 1 |
| natsio/ | 0d50270fa374 | musl | 1.2.4_git20230717-r6 | 1 |
| natsio/ | 47094fcae2f4 | musl | 1.2.5-r11 | 1 |
| natsio/ | 5b21830a9e9d | musl | 1.2.5-r2 | 1 |
| natsio/ | 81edf32a3680 | musl | 1.2.5-r11 | 1 |