StackRadar

CVE-2026-6238

Medium

Advisory

Published 28 Apr 2026In the index since 5 Sept 2026
Severity
Medium
worst across findings
CVSS
6.5
base score, highest
EPSS
0.004
30th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
2,464
of 17,828 indexed, latest versions
Container images
2,496
deployed by those charts
Fix available
1 of 3
affected packages

CVE-2026-6238 affecting package glibc 2.38-21

Carried by container images the latest versions of 2,464 of 17,828 indexed charts deploy, on 2,496 images.

Affected packageAffected versionsFixed inImages
glibcdeb2.23-0ubuntu5, 2.23-0ubuntu7, 2.23-0ubuntu9, 2.23-0ubuntu10+60 more2.35-0ubuntu3.14, 2.39-0ubuntu8.8, 2.41-12+deb13u2+e5, 2.43-2ubuntu2.32,476
eglibcdeb2.19-0ubuntu6.3, 2.19-0ubuntu6.6, 2.19-0ubuntu6.13, 2.19-0ubuntu6.14+1 moreno fix listed7
glibcrpm2.38-16.azl3, 2.38-18.azl3, 2.38-20.azl3no fix listed13
OSV records
DEBIAN-CVE-2026-6238UBUNTU-CVE-2026-6238AZL-85004ECHO-916f-8705-1b52
Also known as
USN-8611-1

Charts affected

2,464 by stars
ChartLatestAffected imagesRadar Score

Container images carrying it

2,496 by charts deploying them

A fixed version is listed for 1 of the 3 affected packages.

Container imageDigestPackageFixed inUsed by
library/mariadb:10.422edfe1c7834
glibc@2.31-0ubuntu9.16
no fix listed
1
library/mariadb:10.8.2-focal490f01279be1
glibc@2.31-0ubuntu9.2
no fix listed
1
library/mariadb:12.0.25b6a1eac15b8
glibc@2.39-0ubuntu8.6
2.39-0ubuntu8.8
1
library/mariadb:12.3.2628f228f0fd5
glibc@2.39-0ubuntu8.7
2.39-0ubuntu8.8
1
library/mariadb:11.8.46b848cb24fbb
glibc@2.39-0ubuntu8.6
2.39-0ubuntu8.8
1
library/mariadb:10.6.218a16204dc96c
glibc@2.31-0ubuntu9.17
no fix listed
1
library/mariadb:10.79a48ac9f196f
glibc@2.31-0ubuntu9.9
no fix listed
1
library/mariadb:12.2.2b1cb255a9939
glibc@2.39-0ubuntu8.7
2.39-0ubuntu8.8
1
library/mariadb:10.10.2bfc25a68e113
glibc@2.35-0ubuntu3.1
2.35-0ubuntu3.14
1
library/mariadb:10.6.15e22328f4d714
glibc@2.31-0ubuntu9.12
no fix listed
1
library/mariadb:10.9.4fbb8456ebdb1
glibc@2.35-0ubuntu3.1
2.35-0ubuntu3.14
1
library/mariadb:11.7.2fcc7fcd7114a
glibc@2.39-0ubuntu8.4
2.39-0ubuntu8.8
1
library/matomo:5.1.2-apache2415789e1602
glibc@2.36-9+deb12u9
no fix listed
1
library/matomo:5.13.0-apache8e6bdd396496
glibc@2.41-12+deb13u3
no fix listed
1
library/memcached:1.6.4226983a43c918
glibc@2.41-12+deb13u3
no fix listed
1
library/memcached:1.6.409ae868852d0b
glibc@2.41-12
no fix listed
1
library/memcached:1.6.40cc523a19da58
glibc@2.41-12+deb13u1
no fix listed
1
library/memcached:1.6.45dc561d52bb8a
glibc@2.41-12+deb13u3
no fix listed
1
library/memcached:1.6.42-trixiee2a8683c7fbb
glibc@2.41-12+deb13u3
no fix listed
1
library/mongo:7.0.140032d2ca20db
glibc@2.35-0ubuntu3.8
2.35-0ubuntu3.14
1
library/mongo:4.4.1305678ae4e5e1
glibc@2.31-0ubuntu9.7
no fix listed
1
library/mongo:3.6146c1fd999a6
glibc@2.23-0ubuntu11.2
no fix listed
1
library/mongo:5.0.32-focal3b6c281e1c08
glibc@2.31-0ubuntu9.17
no fix listed
1
library/mongo:4.4-bionic3d0e6df9fd5b
glibc@2.27-3ubuntu1.4
no fix listed
1
library/mongo:5.0.14-focal50cae5081ab4
glibc@2.31-0ubuntu9.9
no fix listed
1
library/mongo:6.0.12646902910d6a
glibc@2.35-0ubuntu3.6
2.35-0ubuntu3.14
1
library/mongo:4.2699d652ed674
glibc@2.27-3ubuntu1.6
no fix listed
1
library/mongo:4.2.16ca49afbcb2b
glibc@2.27-3ubuntu1
no fix listed
1
library/mongo:6.0.271a63fc2438e
glibc@2.31-0ubuntu9.9
no fix listed
1
library/mongo:5.0.217c81758cb295
glibc@2.31-0ubuntu9.12
no fix listed
1
library/mongo:7.0.28-jammy88785f6f665a
glibc@2.35-0ubuntu3.11
2.35-0ubuntu3.14
1
library/mongo:4.2.21-bionic9cb28f7291d9
glibc@2.27-3ubuntu1.6
no fix listed
1
library/mongo:7.0.12ae1cf99fa7bf
glibc@2.35-0ubuntu3.8
2.35-0ubuntu3.14
1
library/mongo:4.4.18d23ec07162ca
glibc@2.31-0ubuntu9.9
no fix listed
1
library/mongo:8.0.11dca8d11fe467
glibc@2.39-0ubuntu8.5
2.39-0ubuntu8.8
1
library/mysql:8.0-debian9382e4f6f7f0
glibc@2.36-9+deb12u13
no fix listed
1
library/neo4j:2026.05.0-enterprise2caf944aa4a5
glibc@2.41-12+deb13u3
no fix listed
1
library/neo4j:2026.02.25ab4ab0358cf
glibc@2.41-12+deb13u2
no fix listed
1
library/neo4j:2026.05.06c162e2432f8
glibc@2.41-12+deb13u3
no fix listed
1
library/nextcloud:35.0.0:35.0.0-apache3e9f6eaa5dc8
glibc@2.41-12+deb13u4
no fix listed
1
library/nextcloud:31.0.6-apache588609d76b21
glibc@2.36-9+deb12u10
no fix listed
1
library/nextcloud:34.0.4-apachea5ace30c695a
glibc@2.41-12+deb13u4
no fix listed
1
library/nextcloud:34.0.4-apacheb13a87affb7e
glibc@2.41-12+deb13u4
no fix listed
1
library/nextcloud:31.0.10-apacheb7faa1653c39
glibc@2.41-12
no fix listed
1
library/nginx:1.27.409369da6b103
glibc@2.36-9+deb12u10
no fix listed
1
library/nginx:1.291881968aff6f
glibc@2.41-12+deb13u2
no fix listed
1
library/nginx:1.276784fb0834aa
glibc@2.36-9+deb12u10
no fix listed
1
library/nginx:1.25.167f9a4f10d14
glibc@2.36-9+deb12u1
no fix listed
1
library/nginx:1.25.49ff236ed47fe
glibc@2.36-9+deb12u4
no fix listed
1
library/nginx:1.31a53fc6c27208
glibc@2.41-12+deb13u3
no fix listed
1

syft 1.42.1 · advisories as of 21 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.