CVE-2026-6238

Medium

Advisory

Published 28 Apr 2026In the index since 5 Sept 2026

Severity: Medium; worst across findings
CVSS: 6.5; base score, highest
EPSS: 0.004; 30th percentile
CISA KEV: Not listed; no confirmed exploitation
Charts affected: 2,504; of 17,821 indexed, latest versions
Container images: 2,538; deployed by those charts
Fix available: 1 of 3; affected packages

CVE-2026-6238 affecting package glibc 2.38-21

Carried by container images the latest versions of 2,504 of 17,821 indexed charts deploy, on 2,538 images.

Affected package	Affected versions	Fixed in	Images
glibcdeb	2.23-0ubuntu5, 2.23-0ubuntu7, 2.23-0ubuntu9, 2.23-0ubuntu10+61 more	2.35-0ubuntu3.14, 2.39-0ubuntu8.8, 2.41-12+deb13u2+e5, 2.43-2ubuntu2.3	2,517
eglibcdeb	2.19-0ubuntu6.3, 2.19-0ubuntu6.6, 2.19-0ubuntu6.13, 2.19-0ubuntu6.14+1 more	no fix listed	7
glibcrpm	2.38-16.azl3, 2.38-18.azl3, 2.38-20.azl3	no fix listed	14

OSV records: DEBIAN-CVE-2026-6238 UBUNTU-CVE-2026-6238 AZL-85004 ECHO-916f-8705-1b52
Also known as: USN-8611-1

Charts affected

2,504 by stars

Chart

Latest

Affected images

Radar Score

changedetection-iozekker6

1.102.0

1 of 1 See more

changedetection-io zekker6 1.102.0

1 of the 1 container images this version deploys carry CVE-2026-6238.

Container image	Digest	Package	Fixed in
ghcr.io/dgtlmoon/changedetection.io :0.60.7	096dae27b5d6	glibc@2.36-9+deb12u14	no fix listed

Open the chart page →

2,710

endlessh-gozekker6

0.4.0

1 of 1 See more

endlessh-go zekker6 0.4.0

1 of the 1 container images this version deploys carry CVE-2026-6238.

Container image	Digest	Package	Fixed in
ghcr.io/shizunge/endlessh-go :2026.0730.0	8826dad32623	glibc@2.41-12+deb13u3	no fix listed

Open the chart page →

411

NEW_APPzekker6

0.0.0

1 of 1 See more

NEW_APP zekker6 0.0.0

1 of the 1 container images this version deploys carry CVE-2026-6238.

Container image	Digest	Package	Fixed in
library/nginx :latest	abe47724e466	glibc@2.41-12+deb13u4	no fix listed

Open the chart page →

1,593

clickhousezloi-space

1.2.0

2 of 3 See more

clickhouse zloi-space 1.2.0

2 of the 3 container images this version deploys carry CVE-2026-6238.

Container image	Digest	Package	Fixed in
yandex/clickhouse-client :21.3	863f94a0f607	glibc@2.27-3ubuntu1.4	no fix listed
yandex/clickhouse-server :21.3.20	4eccfffb01d7	glibc@2.31-0ubuntu9.2	no fix listed

Open the chart page →

9,297

Container images carrying it

2,538 by charts deploying them

A fixed version is listed for 1 of the 3 affected packages.

Container image	Digest	Package	Fixed in	Used by
jaegertracing/jaeger-cassandra-schema :1.53.0	d48d6dab2c65	glibc@2.35-0ubuntu3.5	2.35-0ubuntu3.14	4
library/httpd :2.4 :2.4.68 :latest	979c38c2228d	glibc@2.41-12+deb13u3	no fix listed	4
library/mongo :5.0-focal	5e15a3f014ed	glibc@2.31-0ubuntu9.17	no fix listed	4
library/mongo :4.2.12-bionic	628741415fc9	glibc@2.27-3ubuntu1.4	no fix listed	4
library/mongo :4.4.6	6efa05203990	glibc@2.27-3ubuntu1.4	no fix listed	4
library/nginx :1.27.1	287ff321f9e3	glibc@2.36-9+deb12u8	no fix listed	4
library/postgres :13	4689940c6838	glibc@2.41-12	no fix listed	4
library/postgres :17	67f41722b7a8	glibc@2.41-12+deb13u3	no fix listed	4
library/postgres :14	816cf7d06ec3	glibc@2.41-12+deb13u4	no fix listed	4
library/postgres :15	dfbbb0ad8cab	glibc@2.41-12+deb13u4	no fix listed	4
library/rabbitmq :3.11-management	c3f70098e01d	glibc@2.35-0ubuntu3.6	2.35-0ubuntu3.14	4
library/redis :7.2 :7.2-bookworm	0637954999d0	glibc@2.36-9+deb12u14	no fix listed	4
library/redis :7 :7.4 :7.4.11	71da9275c5f3	glibc@2.36-9+deb12u14	no fix listed	4
library/redis :6 :6.2	e7b96daa9a18	glibc@2.36-9+deb12u14	no fix listed	4
mastercloudapps/planner :v1.23	40a950b311b2	glibc@2.35-0ubuntu3.1	2.35-0ubuntu3.14	4
opea/llm-tgi :1.0	0c25aab3f106	glibc@2.36-9+deb12u8	no fix listed	4
oscarsotosanchez/weatherservice :v1.0	911ec961d10b	glibc@2.27-3ubuntu1.4	no fix listed	4
shashkist/flask-contacts-app :latest	581de1fd6084	glibc@2.36-9+deb12u9	no fix listed	4
valkey/valkey :9.0.2	930b41430fb7	glibc@2.41-12+deb13u1	no fix listed	4
ghcr.io/foundry-rs/foundry :latest	0c00cb0bda1a	glibc@2.35-0ubuntu3.13	2.35-0ubuntu3.14	4
ghcr.io/kubedb/kubedb-autoscaler :v0.51.0	5d1182ac21f0	glibc@2.36-9+deb12u14	no fix listed	4
ghcr.io/kubedb/kubedb-crd-manager :v0.21.0	9506a6cb98d1	glibc@2.36-9+deb12u14	no fix listed	4
ghcr.io/kubedb/kubedb-ops-manager :v0.53.0	6d4c9fe66e4f	glibc@2.36-9+deb12u14	no fix listed	4
ghcr.io/kubedb/kubedb-webhook-server :v0.42.0	f7dcade6523b	glibc@2.36-9+deb12u14	no fix listed	4
apache/apisix-ingress-controller :2.2.0	5c5efa4c7f2a	glibc@2.36-9+deb12u14	no fix listed	3
apache/superset :6.1.0 :latest	16b50bbef664	glibc@2.36-9+deb12u14	no fix listed	3
bitnamilegacy/etcd :latest	99b408c15272	glibc@2.36-9+deb12u10	no fix listed	3
bitnamilegacy/kubectl :latest	cd354d5b2556	glibc@2.36-9+deb12u10	no fix listed	3
bitnamilegacy/os-shell :12-debian-12-r51	77e65e9d633e	glibc@2.36-9+deb12u10	no fix listed	3
bitnamilegacy/pgpool :4.6.3-debian-12-r0	d3bf3910f148	glibc@2.36-9+deb12u10	no fix listed	3
bitnamilegacy/postgresql :17.6.0-debian-12-r0	de520acd66fc	glibc@2.36-9+deb12u10	no fix listed	3
bitnamilegacy/postgresql :14.13.0	df6ec02e2b9a	glibc@2.36-9+deb12u9	no fix listed	3
bitnamilegacy/postgresql-repmgr :17.6.0-debian-12-r2	f12387ec882b	glibc@2.36-9+deb12u10	no fix listed	3
bitnamilegacy/valkey-cluster :8.1.3-debian-12-r3	32869e769b7e	glibc@2.36-9+deb12u10	no fix listed	3
ciscolabs/rtsp-client :latest	a7b60ec88285	glibc@2.31-0ubuntu9.9	no fix listed	3
ciscolabs/rtsp-server :latest	b59fc10bb821	glibc@2.31-0ubuntu9.9	no fix listed	3
cloudve/cloudlaunch-server :latest	4a3d7fae90bb	glibc@2.31-0ubuntu9.2	no fix listed	3
codeurjc/planner :v1.0	800cf520c245	glibc@2.35-0ubuntu3.1	2.35-0ubuntu3.14	3
dgraph/dgraph :v21.12.0	3b55ea83fffe	glibc@2.31-0ubuntu9.2	no fix listed	3
dnationcloud/kubernetes-jsonnet-translator :2.0.1	78fed4f3c130	glibc@2.36-9+deb12u8	no fix listed	3
envoyproxy/envoy :v1.31.0	2bf7f042e396	glibc@2.35-0ubuntu3.8	2.35-0ubuntu3.14	3
envoyproxy/gateway :v1.7.5	156b7d32c73b	glibc@2.41-12+deb13u3	no fix listed	3
fluent/fluent-bit :5.1.2 :latest	d792375ca8e5	glibc@2.41-12+deb13u3	no fix listed	3
gchq/hdfs :3.3.3	5ec58edbb2db	glibc@2.39-0ubuntu8.1	2.39-0ubuntu8.8	3
guacamole/guacamole :1.6.0	f344085e618b	glibc@2.39-0ubuntu8.4	2.39-0ubuntu8.8	3
istio/kubectl :1.5.10	dbb7726d1bf0	glibc@2.27-3ubuntu1.2	no fix listed	3
jacobalberty/unifi :v10.0.162	896c0ab82d33	glibc@2.31-0ubuntu9.17	no fix listed	3
library/httpd :2.4 :2.4.68 :latest	454942557d44	glibc@2.41-12+deb13u4	no fix listed	3
library/memcached :1.6 :1.6.45	75c93cc91e76	glibc@2.41-12+deb13u3	no fix listed	3
library/nginx :stable	0aa2d81d65bc	glibc@2.41-12+deb13u4	no fix listed	3