StackRadar

CVE-2026-6238

Medium

Advisory

Published 28 Apr 2026In the index since 5 Sept 2026
Severity
Medium
worst across findings
CVSS
6.5
base score, highest
EPSS
0.004
29th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
2,428
of 17,797 indexed, latest versions
Container images
2,445
deployed by those charts
Fix available
1 of 3
affected packages

CVE-2026-6238 affecting package glibc 2.38-21

Carried by container images the latest versions of 2,428 of 17,797 indexed charts deploy, on 2,445 images.

Affected packageAffected versionsFixed inImages
glibcdeb2.23-0ubuntu5, 2.23-0ubuntu7, 2.23-0ubuntu9, 2.23-0ubuntu10+61 more2.35-0ubuntu3.14, 2.39-0ubuntu8.8, 2.41-12+deb13u2+e5, 2.43-2ubuntu2.32,415
eglibcdeb2.19-0ubuntu6.3, 2.19-0ubuntu6.6, 2.19-0ubuntu6.13, 2.19-0ubuntu6.14+1 moreno fix listed7
glibcrpm2.38-16.azl3, 2.38-18.azl3, 2.38-20.azl3no fix listed23
OSV records
DEBIAN-CVE-2026-6238UBUNTU-CVE-2026-6238AZL-85004ECHO-916f-8705-1b52
Also known as
USN-8611-1

Charts affected

2,428 by stars
ChartLatestAffected imagesRadar Score
nginx-chartsongduckbae-nginx0.1.01 of 1See more

nginx-chart songduckbae-nginx 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-6238.

Container imageDigestPackageFixed in
library/nginx:latest05b8cb60c354
glibc@2.41-12+deb13u3
no fix listed

Open the chart page →

1,861
spacecapybara-chartspacecapy1.0.491 of 2See more

spacecapybara-chart spacecapy 1.0.49

1 of the 2 container images this version deploys carry CVE-2026-6238.

Container imageDigestPackageFixed in
sashafefler/spacecapybara_app:latestf96d7804c0ca
glibc@2.36-9+deb12u8
no fix listed

Open the chart page →

11,974
datadogspartan0.1.01 of 1See more

datadog spartan 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-6238.

Container imageDigestPackageFixed in
gcr.io/datadoghq/cluster-agent:7.61.06efe04ba4e06
glibc@2.39-0ubuntu8.3
2.39-0ubuntu8.8

Open the chart page →

3,292
speckle-preview-service-branch-testing6speckleVerified publisher2.23.14-branch.testing6.334655-b4e04ee1 of 1See more

speckle-preview-service-branch-testing6 speckle 2.23.14-branch.testing6.334655-b4e04ee

1 of the 1 container images this version deploys carry CVE-2026-6238.

Container imageDigestPackageFixed in
speckle/speckle-preview-service:2.23.14-branch.testing6.334655-b4e04ee6dee853ba74a
glibc@2.36-9+deb12u7
no fix listed

Open the chart page →

5,987
speckle-server-branch-hotfix-2.19.1speckleVerified publisher2.19.2-branch.hotfix-2.19.1.124125-665e7e15 of 5See more

speckle-server-branch-hotfix-2.19.1 speckle 2.19.2-branch.hotfix-2.19.1.124125-665e7e1

5 of the 5 container images this version deploys carry CVE-2026-6238.

Container imageDigestPackageFixed in
speckle/speckle-frontend-2:2.19.2-branch.hotfix-2.19.1.124125-665e7e14f9241665ae3
glibc@2.36-9+deb12u7
no fix listed
speckle/speckle-monitor-deployment:2.19.2-branch.hotfix-2.19.1.124125-665e7e1b696ac5022ab
glibc@2.36-9+deb12u7
no fix listed
speckle/speckle-preview-service:2.19.2-branch.hotfix-2.19.1.124125-665e7e1c102b087481a
glibc@2.36-9+deb12u7
no fix listed
speckle/speckle-server:2.19.2-branch.hotfix-2.19.1.124125-665e7e14b6a0750d5aa
glibc@2.36-9+deb12u7
no fix listed
speckle/speckle-webhook-service:2.19.2-branch.hotfix-2.19.1.124125-665e7e14828aee2277c
glibc@2.36-9+deb12u7
no fix listed

Open the chart page →

16,487
speckle-server-branch-hotfix-2.20.2speckleVerified publisher2.20.3-branch.hotfix-2.20.2.149555-37ea0cb5 of 5See more

speckle-server-branch-hotfix-2.20.2 speckle 2.20.3-branch.hotfix-2.20.2.149555-37ea0cb

5 of the 5 container images this version deploys carry CVE-2026-6238.

Container imageDigestPackageFixed in
speckle/speckle-frontend-2:2.20.3-branch.hotfix-2.20.2.149555-37ea0cbfdc008effc7a
glibc@2.36-9+deb12u7
no fix listed
speckle/speckle-monitor-deployment:2.20.3-branch.hotfix-2.20.2.149555-37ea0cb2faf1508c1d3
glibc@2.36-9+deb12u7
no fix listed
speckle/speckle-preview-service:2.20.3-branch.hotfix-2.20.2.149555-37ea0cbd3da0a84de98
glibc@2.36-9+deb12u7
no fix listed
speckle/speckle-server:2.20.3-branch.hotfix-2.20.2.149555-37ea0cb52f8eabf5cea
glibc@2.36-9+deb12u7
no fix listed
speckle/speckle-webhook-service:2.20.3-branch.hotfix-2.20.2.149555-37ea0cb107c63336ab5
glibc@2.36-9+deb12u7
no fix listed

Open the chart page →

16,519
speckle-server-branch-testingspeckleVerified publisher2.17.14-branch.testing.72707.921a5f84 of 5See more

speckle-server-branch-testing speckle 2.17.14-branch.testing.72707.921a5f8

4 of the 5 container images this version deploys carry CVE-2026-6238.

Container imageDigestPackageFixed in
speckle/speckle-monitor-deployment:2.17.14-branch.testing.72707.921a5f8ff1641ac3f1b
glibc@2.36-9+deb12u3
no fix listed
speckle/speckle-preview-service:2.17.14-branch.testing.72707.921a5f884fc39bca0c8
glibc@2.36-9+deb12u3
no fix listed
speckle/speckle-server:2.17.14-branch.testing.72707.921a5f849d10dcdfb91
glibc@2.36-9+deb12u3
no fix listed
speckle/speckle-webhook-service:2.17.14-branch.testing.72707.921a5f899913052b72e
glibc@2.36-9+deb12u3
no fix listed

Open the chart page →

14,767
speckle-server-branch-testing1speckleVerified publisher2.20.6-branch.testing1.154030-9b091145 of 5See more

speckle-server-branch-testing1 speckle 2.20.6-branch.testing1.154030-9b09114

5 of the 5 container images this version deploys carry CVE-2026-6238.

Container imageDigestPackageFixed in
speckle/speckle-frontend-2:2.20.6-branch.testing1.154030-9b0911432fc940d9b4c
glibc@2.36-9+deb12u7
no fix listed
speckle/speckle-monitor-deployment:2.20.6-branch.testing1.154030-9b09114738c77eb6f97
glibc@2.36-9+deb12u7
no fix listed
speckle/speckle-preview-service:2.20.6-branch.testing1.154030-9b091148f3c1ea153ba
glibc@2.36-9+deb12u7
no fix listed
speckle/speckle-server:2.20.6-branch.testing1.154030-9b09114e8413f57b327
glibc@2.36-9+deb12u7
no fix listed
speckle/speckle-webhook-service:2.20.6-branch.testing1.154030-9b09114cf1d99bad89a
glibc@2.36-9+deb12u7
no fix listed

Open the chart page →

16,519
speckle-server-branch-testing2speckleVerified publisher2.18.11-branch.testing2.88634-335d4694 of 5See more

speckle-server-branch-testing2 speckle 2.18.11-branch.testing2.88634-335d469

4 of the 5 container images this version deploys carry CVE-2026-6238.

Container imageDigestPackageFixed in
speckle/speckle-monitor-deployment:2.18.11-branch.testing2.88634-335d469d6790a97ad47
glibc@2.36-9+deb12u4
no fix listed
speckle/speckle-preview-service:2.18.11-branch.testing2.88634-335d4694bd113093583
glibc@2.36-9+deb12u4
no fix listed
speckle/speckle-server:2.18.11-branch.testing2.88634-335d469bf6a501b2210
glibc@2.36-9+deb12u4
no fix listed
speckle/speckle-webhook-service:2.18.11-branch.testing2.88634-335d469902b98ad5327
glibc@2.36-9+deb12u4
no fix listed

Open the chart page →

14,309
speckle-server-branch-testing3speckleVerified publisher2.18.12-branch.testing3.88744-f55b3414 of 5See more

speckle-server-branch-testing3 speckle 2.18.12-branch.testing3.88744-f55b341

4 of the 5 container images this version deploys carry CVE-2026-6238.

Container imageDigestPackageFixed in
speckle/speckle-monitor-deployment:2.18.12-branch.testing3.88744-f55b34181335b40696a
glibc@2.36-9+deb12u4
no fix listed
speckle/speckle-preview-service:2.18.12-branch.testing3.88744-f55b3414bd113093583
glibc@2.36-9+deb12u4
no fix listed
speckle/speckle-server:2.18.12-branch.testing3.88744-f55b34189a5872375f9
glibc@2.36-9+deb12u4
no fix listed
speckle/speckle-webhook-service:2.18.12-branch.testing3.88744-f55b341771f872cfa63
glibc@2.36-9+deb12u4
no fix listed

Open the chart page →

14,309
speckle-server-branch-testing4speckleVerified publisher2.20.2-branch.testing4.134160-9fad4b25 of 5See more

speckle-server-branch-testing4 speckle 2.20.2-branch.testing4.134160-9fad4b2

5 of the 5 container images this version deploys carry CVE-2026-6238.

Container imageDigestPackageFixed in
speckle/speckle-frontend-2:2.20.2-branch.testing4.134160-9fad4b210ad4ade8bf2
glibc@2.36-9+deb12u7
no fix listed
speckle/speckle-monitor-deployment:2.20.2-branch.testing4.134160-9fad4b23c8fbe855665
glibc@2.36-9+deb12u7
no fix listed
speckle/speckle-preview-service:2.20.2-branch.testing4.134160-9fad4b21f897ca906ea
glibc@2.36-9+deb12u7
no fix listed
speckle/speckle-server:2.20.2-branch.testing4.134160-9fad4b2687f43ab16f3
glibc@2.36-9+deb12u7
no fix listed
speckle/speckle-webhook-service:2.20.2-branch.testing4.134160-9fad4b270f5167d1d4d
glibc@2.36-9+deb12u7
no fix listed

Open the chart page →

16,138
speckle-server-branch-testing5speckleVerified publisher2.21.3-branch.testing5.219631-2153bef5 of 5See more

speckle-server-branch-testing5 speckle 2.21.3-branch.testing5.219631-2153bef

5 of the 5 container images this version deploys carry CVE-2026-6238.

Container imageDigestPackageFixed in
speckle/speckle-frontend-2:2.21.3-branch.testing5.219631-2153befd4ca6ebf09b9
glibc@2.36-9+deb12u7
no fix listed
speckle/speckle-monitor-deployment:2.21.3-branch.testing5.219631-2153befcf72ad0f25fb
glibc@2.36-9+deb12u7
no fix listed
speckle/speckle-preview-service:2.21.3-branch.testing5.219631-2153bef52cad5e3293e
glibc@2.36-9+deb12u7
no fix listed
speckle/speckle-server:2.21.3-branch.testing5.219631-2153bef8fd157733393
glibc@2.36-9+deb12u7
no fix listed
speckle/speckle-webhook-service:2.21.3-branch.testing5.219631-2153bef06ecc7a66a40
glibc@2.36-9+deb12u7
no fix listed

Open the chart page →

15,749
speckle-server-branch-testing6speckleVerified publisher2.25.10-branch.testing6.645-b125c1e4 of 4See more

speckle-server-branch-testing6 speckle 2.25.10-branch.testing6.645-b125c1e

4 of the 4 container images this version deploys carry CVE-2026-6238.

Container imageDigestPackageFixed in
speckle/speckle-monitor-deployment:2.25.10-branch.testing6.645-b125c1e2dbc553ed87c
glibc@2.36-9+deb12u7
no fix listed
speckle/speckle-preview-service:2.25.10-branch.testing6.645-b125c1e787adcb20a3a
glibc@2.36-9+deb12u7
no fix listed
speckle/speckle-server:2.25.10-branch.testing6.645-b125c1e75cdf256067b
glibc@2.36-9+deb12u10
no fix listed
speckle/speckle-webhook-service:2.25.10-branch.testing6.645-b125c1edd9db6cbe9bb
glibc@2.36-9+deb12u7
no fix listed

Open the chart page →

11,214
spoolmanspoolmanVerified publisher0.2.61 of 1See more

spoolman spoolman 0.2.6

1 of the 1 container images this version deploys carry CVE-2026-6238.

Container imageDigestPackageFixed in
ghcr.io/donkie/spoolman:0.26.1cf9b41e17b93
glibc@2.36-9+deb12u14
no fix listed

Open the chart page →

1,804
ocean-network-clientspot1.1.61 of 1See more

ocean-network-client spot 1.1.6

1 of the 1 container images this version deploys carry CVE-2026-6238.

Container imageDigestPackageFixed in
public.ecr.aws/spotinst/spot-network-client:1.0.1486380a01587d
glibc@2.39-0ubuntu8.7
2.39-0ubuntu8.8

Open the chart page →

2,271
spotinst-ocean-network-clientspot1.0.01 of 1See more

spotinst-ocean-network-client spot 1.0.0

1 of the 1 container images this version deploys carry CVE-2026-6238.

Container imageDigestPackageFixed in
public.ecr.aws/spotinst/spot-network-client:1.0.0-8-lb_endpoint-d0ec127efcecf98b912
glibc@2.27-3ubuntu1.6
no fix listed

Open the chart page →

6,966
airflowsqream-chartsVerified publisher1.17.01 of 4See more

airflow sqream-charts 1.17.0

1 of the 4 container images this version deploys carry CVE-2026-6238.

Container imageDigestPackageFixed in
library/redis:7.2-bookworm74566c6910d1
glibc@2.36-9+deb12u14
no fix listed

Open the chart page →

1,861
envoy-proxysqream-chartsVerified publisher0.6.01 of 2See more

envoy-proxy sqream-charts 0.6.0

1 of the 2 container images this version deploys carry CVE-2026-6238.

Container imageDigestPackageFixed in
envoyproxy/envoy:v1.30.1e596fda6a0ce
glibc@2.35-0ubuntu3.7
2.35-0ubuntu3.14

Open the chart page →

2,319
squadsquadVerified publisher0.1.111 of 1See more

squad squad 0.1.11

1 of the 1 container images this version deploys carry CVE-2026-6238.

Container imageDigestPackageFixed in
cm2network/squad:latest8cba47f53df5
glibc@2.41-12+deb13u1
no fix listed

Open the chart page →

2,510
srebotsrebot0.14.01 of 2See more

srebot srebot 0.14.0

1 of the 2 container images this version deploys carry CVE-2026-6238.

Container imageDigestPackageFixed in
ghcr.io/shadrus/srebot:0.14.09b4415e937b2
glibc@2.41-12+deb13u3
no fix listed

Open the chart page →

1,578
pagessrinipages1.0.02 of 3See more

pages srinipages 1.0.0

2 of the 3 container images this version deploys carry CVE-2026-6238.

Container imageDigestPackageFixed in
dellcloud/pages:monitor6ba7b22caacd
glibc@2.31-0ubuntu9.1
no fix listed
flyway/flyway:6.4.422d97ceb0c47
glibc@2.27-3ubuntu1
no fix listed

Open the chart page →

20,262
servicexssl-hep1.8.511 of 16See more

servicex ssl-hep 1.8.5

11 of the 16 container images this version deploys carry CVE-2026-6238.

Container imageDigestPackageFixed in
library/python:3.1070c9cc675605
glibc@2.41-12+deb13u3
no fix listed
ncsa/checks:main0b738bbc8d70
glibc@2.41-12
no fix listed
sslhep/servicex_app:v1.8.51d12f943cec5
glibc@2.41-12+deb13u3
no fix listed
sslhep/servicex_code_gen_atlas_xaod:v1.8.5e7aff7f97b89
glibc@2.41-12+deb13u3
no fix listed
sslhep/servicex_code_gen_func_adl_uproot:v1.8.5b01b8ee966ed
glibc@2.41-12+deb13u3
no fix listed
sslhep/servicex_code_gen_python:v1.8.50e4175a4e1eb
glibc@2.41-12+deb13u3
no fix listed
sslhep/servicex_code_gen_raw_uproot:v1.8.5671980005c57
glibc@2.41-12+deb13u3
no fix listed
sslhep/servicex_code_gen_topcp:v1.8.5596db2abdd09
glibc@2.41-12+deb13u3
no fix listed
sslhep/servicex-did-finder-atlasopenmagic:v1.8.554aaf1721d03
glibc@2.41-12+deb13u3
no fix listed
sslhep/servicex-did-finder-cernopendata:v1.8.52cb88ceab5bb
glibc@2.41-12+deb13u3
no fix listed
sslhep/servicex-did-finder-xrootd:v1.8.5c284442b44e3
glibc@2.41-12+deb13u3
no fix listed

Open the chart page →

68,323
jenkinsstakaterVerified publisher0.21.01 of 1See more

jenkins stakater 0.21.0

1 of the 1 container images this version deploys carry CVE-2026-6238.

Container imageDigestPackageFixed in
jenkins/jenkins:ltsc1e4c349365f
glibc@2.41-12+deb13u3
no fix listed

Open the chart page →

2,498
stakefishstakefish0.1.01 of 8See more

stakefish stakefish 0.1.0

1 of the 8 container images this version deploys carry CVE-2026-6238.

Container imageDigestPackageFixed in
thongngo3301/stakefish:latesta341af5976e3
glibc@2.36-9+deb12u1
no fix listed

Open the chart page →

20,317
erigonstakewise2.61.21 of 3See more

erigon stakewise 2.61.2

1 of the 3 container images this version deploys carry CVE-2026-6238.

Container imageDigestPackageFixed in
erigontech/erigon:v2.61.288706754b627
glibc@2.36-9+deb12u9
no fix listed

Open the chart page →

2,975
lighthouse-validatorstakewise7.0.11 of 2See more

lighthouse-validator stakewise 7.0.1

1 of the 2 container images this version deploys carry CVE-2026-6238.

Container imageDigestPackageFixed in
sigp/lighthouse:v7.0.12cae720e9a35
glibc@2.35-0ubuntu3.9
2.35-0ubuntu3.14

Open the chart page →

2,029
lodestar-validatorstakewise1.2.01 of 1See more

lodestar-validator stakewise 1.2.0

1 of the 1 container images this version deploys carry CVE-2026-6238.

Container imageDigestPackageFixed in
chainsafe/lodestar:v1.27.07b9fe4aa8073
glibc@2.36-9+deb12u9
no fix listed

Open the chart page →

4,082
nethermindstakewise2.8.21 of 3See more

nethermind stakewise 2.8.2

1 of the 3 container images this version deploys carry CVE-2026-6238.

Container imageDigestPackageFixed in
nethermind/nethermind:1.31.893e57917371a
glibc@2.39-0ubuntu8.4
2.39-0ubuntu8.8

Open the chart page →

2,087
operatorstakewise2.1.11 of 5See more

operator stakewise 2.1.1

1 of the 5 container images this version deploys carry CVE-2026-6238.

Container imageDigestPackageFixed in
sigp/lighthouse:v2.1.2ad501f02cfef
glibc@2.31-0ubuntu9.2
no fix listed

Open the chart page →

6,595
rethstakewise1.2.11 of 3See more

reth stakewise 1.2.1

1 of the 3 container images this version deploys carry CVE-2026-6238.

Container imageDigestPackageFixed in
ghcr.io/paradigmxyz/reth:v1.3.121e5290e8b743
glibc@2.35-0ubuntu3.9
2.35-0ubuntu3.14

Open the chart page →

2,025
ssv-nodestakewise2.2.01 of 2See more

ssv-node stakewise 2.2.0

1 of the 2 container images this version deploys carry CVE-2026-6238.

Container imageDigestPackageFixed in
bloxstaking/ssv-node:v2.2.0bf6d7d2fdc93
glibc@2.36-9+deb12u9
no fix listed

Open the chart page →

6,951
teku-validatorstakewise4.3.21 of 2See more

teku-validator stakewise 4.3.2

1 of the 2 container images this version deploys carry CVE-2026-6238.

Container imageDigestPackageFixed in
consensys/teku:25.4.1bf6ecd2ea716
glibc@2.39-0ubuntu8.4
2.39-0ubuntu8.8

Open the chart page →

3,205
verostakewise0.8.31 of 2See more

vero stakewise 0.8.3

1 of the 2 container images this version deploys carry CVE-2026-6238.

Container imageDigestPackageFixed in
ghcr.io/serenita-org/vero:v0.8.3e5a7ec714acc
glibc@2.36-9+deb12u7
no fix listed

Open the chart page →

3,484
stalwartstalwart-helmVerified publisher0.7.181 of 2See more

stalwart stalwart-helm 0.7.18

1 of the 2 container images this version deploys carry CVE-2026-6238.

Container imageDigestPackageFixed in
stalwartlabs/stalwart:v0.16.22388dcb75a707
glibc@2.41-12+deb13u3
no fix listed

Open the chart page →

1,425
multus-cnistartechnicaVerified publisher0.1.41 of 1See more

multus-cni startechnica 0.1.4

1 of the 1 container images this version deploys carry CVE-2026-6238.

Container imageDigestPackageFixed in
ghcr.io/k8snetworkplumbingwg/multus-cni:latest-thickb2136983532b
glibc@2.41-12+deb13u3
no fix listed

Open the chart page →

1,036
open-appsec-injectorstartechnicaVerified publisher1.1.21 of 3See more

open-appsec-injector startechnica 1.1.2

1 of the 3 container images this version deploys carry CVE-2026-6238.

Container imageDigestPackageFixed in
ghcr.io/openappsec/openappsec-waf-webhook:1.1.345b979b962043
glibc@2.41-12
no fix listed

Open the chart page →

4,335
unifistartechnicaVerified publisher0.1.31 of 2See more

unifi startechnica 0.1.3

1 of the 2 container images this version deploys carry CVE-2026-6238.

Container imageDigestPackageFixed in
jacobalberty/unifi:v7.1.664a3616625dda
glibc@2.27-3ubuntu1.5
no fix listed

Open the chart page →

14,596
trinostatcan1.23.41 of 2See more

trino statcan 1.23.4

1 of the 2 container images this version deploys carry CVE-2026-6238.

Container imageDigestPackageFixed in
trinodb/trino:405ee80ab5eeab2
glibc@2.35-0ubuntu3.1
2.35-0ubuntu3.14

Open the chart page →

13,900
static-src-people-detector-appstatic-src-people-detector-chartVerified publisher1.5.51 of 6See more

static-src-people-detector-app static-src-people-detector-chart 1.5.5

1 of the 6 container images this version deploys carry CVE-2026-6238.

Container imageDigestPackageFixed in
library/mongo:4.4.18d23ec07162ca
glibc@2.31-0ubuntu9.9
no fix listed

Open the chart page →

13,704
steadybit-agentsteadybit3.1.1661See more

steadybit-agent steadybit 3.1.166

1 container image this version deploys carries CVE-2026-6238.

Container imageDigestPackageFixed in
ghcr.io/steadybit/agent:2.4.52bc7b260e44e
glibc@2.41-12+deb13u3
no fix listed

Open the chart page →

—
pagesstephendillondell1.0.02 of 3See more

pages stephendillondell 1.0.0

2 of the 3 container images this version deploys carry CVE-2026-6238.

Container imageDigestPackageFixed in
dellcloud/pages:monitor6ba7b22caacd
glibc@2.31-0ubuntu9.1
no fix listed
flyway/flyway:6.4.422d97ceb0c47
glibc@2.27-3ubuntu1
no fix listed

Open the chart page →

20,262
its-mytabsstone0.3.01 of 1See more

its-mytabs stone 0.3.0

1 of the 1 container images this version deploys carry CVE-2026-6238.

Container imageDigestPackageFixed in
louislam/its-mytabs:1.7.02e478d3170bd
glibc@2.41-12+deb13u3
no fix listed

Open the chart page →

1,507
minkstoneshi-tscharts0.1.01 of 1See more

mink stoneshi-tscharts 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-6238.

Container imageDigestPackageFixed in
library/nginx:stabled5792f71a949
glibc@2.41-12+deb13u3
no fix listed

Open the chart page →

1,861
sn-platform-slimstreamnative1.11.441 of 6See more

sn-platform-slim streamnative 1.11.44

1 of the 6 container images this version deploys carry CVE-2026-6238.

Container imageDigestPackageFixed in
streamnative/apache-pulsar-grafana-dashboard-k8s:0.1.20e6d7aa3ef32
glibc@2.31-0ubuntu9.16
no fix listed

Open the chart page →

10,270
wonder-mesh-netstrrl-helm2026.629.02 of 3See more

wonder-mesh-net strrl-helm 2026.629.0

2 of the 3 container images this version deploys carry CVE-2026-6238.

Container imageDigestPackageFixed in
headscale/headscale:0.27.1cd37b3001857
glibc@2.36-9+deb12u13
no fix listed
ghcr.io/strrl/wonder-mesh-net:v2026.629.0625b140372fd
glibc@2.36-9+deb12u14
no fix listed

Open the chart page →

5,130
kurento_webrtc_demostunner0.1.01 of 2See more

kurento_webrtc_demo stunner 0.1.0

1 of the 2 container images this version deploys carry CVE-2026-6238.

Container imageDigestPackageFixed in
kurento/kurento-media-server:latest03c0d34d0828
glibc@2.39-0ubuntu8.6
2.39-0ubuntu8.8

Open the chart page →

12,613
stunner-kurento-one2one-callstunner0.1.01 of 2See more

stunner-kurento-one2one-call stunner 0.1.0

1 of the 2 container images this version deploys carry CVE-2026-6238.

Container imageDigestPackageFixed in
kurento/kurento-media-server:latest03c0d34d0828
glibc@2.39-0ubuntu8.6
2.39-0ubuntu8.8

Open the chart page →

12,613
artifactory-cleanupsubshellVerified publisher1.0.11 of 1See more

artifactory-cleanup subshell 1.0.1

1 of the 1 container images this version deploys carry CVE-2026-6238.

Container imageDigestPackageFixed in
devopshq/artifactory-cleanup:1.0.1830e093bffa91
glibc@2.36-9+deb12u10
no fix listed

Open the chart page →

2,558
group-challengesubshell-labVerified publisher2.1.01 of 2See more

group-challenge subshell-lab 2.1.0

1 of the 2 container images this version deploys carry CVE-2026-6238.

Container imageDigestPackageFixed in
darthsim/imgproxy:v3.29.17d12c7c8fc66
glibc@2.39-0ubuntu8.4
2.39-0ubuntu8.8

Open the chart page →

2,602
orchestratorsubstraVerified publisher8.8.01 of 3See more

orchestrator substra 8.8.0

1 of the 3 container images this version deploys carry CVE-2026-6238.

Container imageDigestPackageFixed in
library/postgres:1767f41722b7a8
glibc@2.41-12+deb13u3
no fix listed

Open the chart page →

3,039

Container images carrying it

2,445 by charts deploying them

A fixed version is listed for 1 of the 3 affected packages.

Container imageDigestPackageFixed inUsed by
carbone/carbone-ee:full-5.11.0518172cbad49
glibc@2.41-12+deb13u3
no fix listed
1
carlosmz87/test_helm_backend:latest8ffa63aa995d
glibc@2.36-9+deb12u9
no fix listed
1
castai/hibernate:v0.14da62858c8381
glibc@2.41-12+deb13u3
no fix listed
1
castlemock/castlemock:latestb7f3f1527ba9
glibc@2.39-0ubuntu8.4
2.39-0ubuntu8.8
1
castopod/castopod:1.12.101fd37280cbb2
glibc@2.36-9+deb12u8
no fix listed
1
castopod/castopod:1.15.54e4f0440520f
glibc@2.41-12+deb13u1
no fix listed
1
cbioportal/cbioportal:6.4.1-web-shenandoah08debbd2dbf9
glibc@2.39-0ubuntu8.6
2.39-0ubuntu8.8
1
cccs/assemblyline-core:4.7.4.stable20098127270065
glibc@2.36-9+deb12u14
no fix listed
1
cccs/assemblyline-rust:4.7.4.stable202be5e6a57427
glibc@2.36-9+deb12u14
no fix listed
1
cccs/assemblyline-socketio:4.7.4.stable202b88493b62f7
glibc@2.36-9+deb12u14
no fix listed
1
cccs/assemblyline-ui:4.7.4.stable20efa75509b854
glibc@2.36-9+deb12u14
no fix listed
1
chaerr/kridge:demo-operator-v0.1.266833deec017
glibc@2.31-0ubuntu9.9
no fix listed
1
chainsafe/lodestar:latest5593f6e97912
glibc@2.36-9+deb12u14
no fix listed
1
chainsafe/lodestar:v1.27.07b9fe4aa8073
glibc@2.36-9+deb12u9
no fix listed
1
checkmk/check-mk-community:2.5.0p6c11b422210c4
glibc@2.35-0ubuntu3.13
2.35-0ubuntu3.14
1
chetangautamm/repo:Opensips_Buildb4b94155ff5a
eglibc@2.19-0ubuntu6.15
no fix listed
1
chetangautamm/repo:sipp.v3e7f7049e1544
glibc@2.31-0ubuntu9.1
no fix listed
1
cheveo/azp-agent:1.0.282240f890884
glibc@2.35-0ubuntu3.9
2.35-0ubuntu3.14
1
cheyang/distributed-tf:1.6.046cc34755493
glibc@2.23-0ubuntu10
no fix listed
1
chiefonboarding/chiefonboarding:v2.5.0d0964135ea82
glibc@2.41-12+deb13u3
no fix listed
1
chocobozzz/peertube:v8.1.5052712130691
glibc@2.41-12+deb13u3
no fix listed
1
chriseaton/adventureworks:latest54c3384ce701
glibc@2.35-0ubuntu3.9
2.35-0ubuntu3.14
1
chromadb/chroma:1.5.7fc8dc8e11fb2
glibc@2.41-12+deb13u2
no fix listed
1
circleci/runner:launch-agent9bdc62f02162
glibc@2.31-0ubuntu9.16
no fix listed
1
ciscolabs/msm-nc:0710202336d02faad958
glibc@2.35-0ubuntu3.1
2.35-0ubuntu3.14
1
citizenstig/httpbin:latestb81c818ccb86
glibc@2.23-0ubuntu5
no fix listed
1
ckan/ckan-base:2.12.087ecf3f27ad6
glibc@2.36-9+deb12u14
no fix listed
1
ckan/ckan-solr:2.11-solr9ef8e5d3e6be1
glibc@2.35-0ubuntu3.13
2.35-0ubuntu3.14
1
ckulka/baikal:0.10.1-nginx434bdd162247
glibc@2.36-9+deb12u10
no fix listed
1
clickhouse/clickhouse-server:24.81ffa82edee00
glibc@2.31-0ubuntu9.16
no fix listed
1
clickhouse/clickhouse-server:24.4.12e6587b81a26
glibc@2.31-0ubuntu9.15
no fix listed
1
clickhouse/clickhouse-server:23.8512bb8a21483
glibc@2.31-0ubuntu9.16
no fix listed
1
clickhouse/clickhouse-server:25.3.2.398745843b17f9
glibc@2.35-0ubuntu3.8
2.35-0ubuntu3.14
1
clickhouse/clickhouse-server:26.3.1092098d3b31dd
glibc@2.35-0ubuntu3.13
2.35-0ubuntu3.14
1
clickhouse/clickhouse-server:24.12.6a65ca89ddbe8
glibc@2.35-0ubuntu3.8
2.35-0ubuntu3.14
1
clickhouse/clickhouse-server:25.3.14.14b627d7a9bc0e
glibc@2.35-0ubuntu3.11
2.35-0ubuntu3.14
1
clickhouse/clickhouse-server:23.4.2.11dc5658853ce1
glibc@2.35-0ubuntu3.1
2.35-0ubuntu3.14
1
clickhouse/clickhouse-server:25.10.2.65e019438e1e05
glibc@2.35-0ubuntu3.11
2.35-0ubuntu3.14
1
cloudflare/cloudflared:2025.8.0eb5c9324efe3
glibc@2.36-9+deb12u10
no fix listed
1
cloudflare/cloudflared:2026.9.0ff69a2225ad7
glibc@2.41-12+deb13u3
no fix listed
1
cloudtooling/moodle:5.2.3f4f04e0fc401
glibc@2.36-9+deb12u14
no fix listed
1
cloudve/janis-terminal:latestaf56e77ca587
glibc@2.27-3ubuntu1
no fix listed
1
cloudve/ttyd:latestd79c1c5881c0
glibc@2.27-3ubuntu1
no fix listed
1
clowder/clowder2-backend:2.0.0-beta.411f3d844e4c0
glibc@2.36-9+deb12u13
no fix listed
1
clowder/clowder2-heartbeat:2.0.0-beta.414155326c7b9
glibc@2.36-9+deb12u13
no fix listed
1
clowder/clowder2-messages:2.0.0-beta.4bf146f1ca24f
glibc@2.36-9+deb12u13
no fix listed
1
cm2network/squad:latest8cba47f53df5
glibc@2.41-12+deb13u1
no fix listed
1
codedesignplus/ms-emails-grpc:lateste336012bc781
glibc@2.36-9+deb12u14
no fix listed
1
codedesignplus/ms-emails-rest:latestac84661c605e
glibc@2.36-9+deb12u14
no fix listed
1
codedesignplus/ms-licenses-grpc:latest360144457f4d
glibc@2.36-9+deb12u14
no fix listed
1

syft 1.42.1 · advisories as of 17 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.