StackRadar

CVE-2026-6238

Medium

Advisory

Published 28 Apr 2026In the index since 5 Sept 2026
Severity
Medium
worst across findings
CVSS
6.5
base score, highest
EPSS
0.004
30th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
2,490
of 17,813 indexed, latest versions
Container images
2,522
deployed by those charts
Fix available
1 of 3
affected packages

CVE-2026-6238 affecting package glibc 2.38-21

Carried by container images the latest versions of 2,490 of 17,813 indexed charts deploy, on 2,522 images.

Affected packageAffected versionsFixed inImages
glibcdeb2.23-0ubuntu5, 2.23-0ubuntu7, 2.23-0ubuntu9, 2.23-0ubuntu10+61 more2.35-0ubuntu3.14, 2.39-0ubuntu8.8, 2.41-12+deb13u2+e5, 2.43-2ubuntu2.32,496
eglibcdeb2.19-0ubuntu6.3, 2.19-0ubuntu6.6, 2.19-0ubuntu6.13, 2.19-0ubuntu6.14+1 moreno fix listed7
glibcrpm2.38-16.azl3, 2.38-18.azl3, 2.38-20.azl3no fix listed19
OSV records
DEBIAN-CVE-2026-6238UBUNTU-CVE-2026-6238AZL-85004ECHO-916f-8705-1b52
Also known as
USN-8611-1

Charts affected

2,490 by stars
ChartLatestAffected imagesRadar Score
kubernetes-dashboard-gatewaysikalabs0.1.01 of 1See more

kubernetes-dashboard-gateway sikalabs 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-6238.

Container imageDigestPackageFixed in
library/nginx:latest05b8cb60c354
glibc@2.41-12+deb13u3
no fix listed

Open the chart page →

1,956
wordpress-mysqlsikalabs0.1.21 of 2See more

wordpress-mysql sikalabs 0.1.2

1 of the 2 container images this version deploys carry CVE-2026-6238.

Container imageDigestPackageFixed in
library/wordpress:latest5a93c470ae82
glibc@2.41-12+deb13u3
no fix listed

Open the chart page →

4,052
simple-websimple-webVerified publisher1.1.11 of 1See more

simple-web simple-web 1.1.1

1 of the 1 container images this version deploys carry CVE-2026-6238.

Container imageDigestPackageFixed in
library/nginx:latest05b8cb60c354
glibc@2.41-12+deb13u3
no fix listed

Open the chart page →

1,956
bitwardensinextraVerified publisher0.10.21 of 1See more

bitwarden sinextra 0.10.2

1 of the 1 container images this version deploys carry CVE-2026-6238.

Container imageDigestPackageFixed in
vaultwarden/server:1.37.2094b5689ed81
glibc@2.41-12+deb13u3
no fix listed

Open the chart page →

1,792
clickhouse-keepersinextraVerified publisher0.7.21 of 1See more

clickhouse-keeper sinextra 0.7.2

1 of the 1 container images this version deploys carry CVE-2026-6238.

Container imageDigestPackageFixed in
clickhouse/clickhouse-server:24.12.6a65ca89ddbe8
glibc@2.35-0ubuntu3.8
2.35-0ubuntu3.14

Open the chart page →

2,243
fluentdsinextraVerified publisher1.4.51 of 1See more

fluentd sinextra 1.4.5

1 of the 1 container images this version deploys carry CVE-2026-6238.

Container imageDigestPackageFixed in
ghcr.io/sergelogvinov/fluentd:1.19.33273d13f1e75
glibc@2.41-12+deb13u3
no fix listed

Open the chart page →

1,140
headscalesinextraVerified publisher0.1.01 of 1See more

headscale sinextra 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-6238.

Container imageDigestPackageFixed in
ghcr.io/juanfont/headscale:v0.29.30e7f1c6e4ce6
glibc@2.41-12+deb13u3
no fix listed

Open the chart page →

576
infisicalsinextraVerified publisher0.6.01 of 1See more

infisical sinextra 0.6.0

1 of the 1 container images this version deploys carry CVE-2026-6238.

Container imageDigestPackageFixed in
infisical/infisical:v0.165.602082bf13163
glibc@2.41-12+deb13u3
no fix listed

Open the chart page →

3,114
mongosqldsinextraVerified publisher0.3.71 of 1See more

mongosqld sinextra 0.3.7

1 of the 1 container images this version deploys carry CVE-2026-6238.

Container imageDigestPackageFixed in
ghcr.io/sergelogvinov/mongosqld:2.14.230b826375ed42
glibc@2.35-0ubuntu3.10
2.35-0ubuntu3.14

Open the chart page →

2,622
mongosyncsinextraVerified publisher0.4.01 of 1See more

mongosync sinextra 0.4.0

1 of the 1 container images this version deploys carry CVE-2026-6238.

Container imageDigestPackageFixed in
ghcr.io/sergelogvinov/mongosync:1.15.0fa99ed475f03
glibc@2.39-0ubuntu8.5
2.39-0ubuntu8.8

Open the chart page →

2,883
pgbouncersinextraVerified publisher0.17.01 of 1See more

pgbouncer sinextra 0.17.0

1 of the 1 container images this version deploys carry CVE-2026-6238.

Container imageDigestPackageFixed in
ghcr.io/sergelogvinov/pgbouncer:16.1518f1121ba0a4
glibc@2.36-9+deb12u14
no fix listed

Open the chart page →

1,982
service-commonsinextraVerified publisher0.3.161 of 1See more

service-common sinextra 0.3.16

1 of the 1 container images this version deploys carry CVE-2026-6238.

Container imageDigestPackageFixed in
library/haproxy:2.8.288baa7d29a27a
glibc@2.41-12+deb13u3
no fix listed

Open the chart page →

878
sistas-chatbotsistas-chatbot5.0.21 of 6See more

sistas-chatbot sistas-chatbot 5.0.2

1 of the 6 container images this version deploys carry CVE-2026-6238.

Container imageDigestPackageFixed in
jhipster/jhipster-registry:latest7184525acd4d
glibc@2.31-0ubuntu9.17
no fix listed

Open the chart page →

5,920
yopasssky-sailVerified publisher1.3.12 of 2See more

yopass sky-sail 1.3.1

2 of the 2 container images this version deploys carry CVE-2026-6238.

Container imageDigestPackageFixed in
jhaals/yopass:12.5.0916a1cf45d36
glibc@2.36-9+deb12u13
no fix listed
library/memcached:1.6.409ae868852d0b
glibc@2.41-12
no fix listed

Open the chart page →

3,077
envoyslamdev0.0.171 of 2See more

envoy slamdev 0.0.17

1 of the 2 container images this version deploys carry CVE-2026-6238.

Container imageDigestPackageFixed in
envoyproxy/envoy:v1.18.2e8b37c1d7578
glibc@2.27-3ubuntu1.4
no fix listed

Open the chart page →

4,727
gitlab-runnerslamdev0.0.11 of 1See more

gitlab-runner slamdev 0.0.1

1 of the 1 container images this version deploys carry CVE-2026-6238.

Container imageDigestPackageFixed in
gitlab/gitlab-runner:v15.3.0860d4a3fec7a
glibc@2.31-0ubuntu9.9
no fix listed

Open the chart page →

9,270
slothsloth0.16.01 of 2See more

sloth sloth 0.16.0

1 of the 2 container images this version deploys carry CVE-2026-6238.

Container imageDigestPackageFixed in
registry.k8s.io/git-sync/git-sync:v4.5.00e64aedb0d0a
glibc@2.41-12
no fix listed

Open the chart page →

4,014
oi-slurm-cluster-chartslurm-cluster-chart0.25.11 of 4See more

oi-slurm-cluster-chart slurm-cluster-chart 0.25.1

1 of the 4 container images this version deploys carry CVE-2026-6238.

Container imageDigestPackageFixed in
library/mariadb:10.10334b315c10e5
glibc@2.35-0ubuntu3.6
2.35-0ubuntu3.14

Open the chart page →

4,400
slurm-cluster-chartslurm-cluster-chart0.25.01 of 4See more

slurm-cluster-chart slurm-cluster-chart 0.25.0

1 of the 4 container images this version deploys carry CVE-2026-6238.

Container imageDigestPackageFixed in
library/mariadb:10.10334b315c10e5
glibc@2.35-0ubuntu3.6
2.35-0ubuntu3.14

Open the chart page →

4,400
amt-configuresmarthallVerified publisher0.1.11 of 1See more

amt-configure smarthall 0.1.1

1 of the 1 container images this version deploys carry CVE-2026-6238.

Container imageDigestPackageFixed in
boxcutter/meshcmd:1.1.384e13f01bcab
glibc@2.35-0ubuntu3.1
2.35-0ubuntu3.14

Open the chart page →

2,782
mealiesmarthallVerified publisher0.0.101 of 1See more

mealie smarthall 0.0.10

1 of the 1 container images this version deploys carry CVE-2026-6238.

Container imageDigestPackageFixed in
ghcr.io/mealie-recipes/mealie:v1.4.0b56da41cf178
glibc@2.36-9+deb12u4
no fix listed

Open the chart page →

5,653
aafsmo-helm-chart6.0.01 of 14See more

aaf smo-helm-chart 6.0.0

1 of the 14 container images this version deploys carry CVE-2026-6238.

Container imageDigestPackageFixed in
oomk8s/readiness-check:2.0.2875814cc853d
glibc@2.23-0ubuntu11
no fix listed

Open the chart page →

83,667
aaismo-helm-chart6.0.01 of 14See more

aai smo-helm-chart 6.0.0

1 of the 14 container images this version deploys carry CVE-2026-6238.

Container imageDigestPackageFixed in
oomk8s/readiness-check:2.0.2875814cc853d
glibc@2.23-0ubuntu11
no fix listed

Open the chart page →

83,701
dgbuildersmo-helm-chart6.0.01 of 3See more

dgbuilder smo-helm-chart 6.0.0

1 of the 3 container images this version deploys carry CVE-2026-6238.

Container imageDigestPackageFixed in
oomk8s/readiness-check:2.0.07daa08b81954
glibc@2.23-0ubuntu9
no fix listed

Open the chart page →

88,339
dmaap-listenersmo-helm-chart6.0.01 of 3See more

dmaap-listener smo-helm-chart 6.0.0

1 of the 3 container images this version deploys carry CVE-2026-6238.

Container imageDigestPackageFixed in
oomk8s/readiness-check:2.0.2875814cc853d
glibc@2.23-0ubuntu11
no fix listed

Open the chart page →

83,667
elasticsearchsmo-helm-chart6.0.01 of 5See more

elasticsearch smo-helm-chart 6.0.0

1 of the 5 container images this version deploys carry CVE-2026-6238.

Container imageDigestPackageFixed in
oomk8s/readiness-check:2.0.2875814cc853d
glibc@2.23-0ubuntu11
no fix listed

Open the chart page →

82,674
logsmo-helm-chart6.0.01 of 6See more

log smo-helm-chart 6.0.0

1 of the 6 container images this version deploys carry CVE-2026-6238.

Container imageDigestPackageFixed in
oomk8s/readiness-check:2.0.07daa08b81954
glibc@2.23-0ubuntu9
no fix listed

Open the chart page →

89,093
mariadb-initsmo-helm-chart6.0.01 of 2See more

mariadb-init smo-helm-chart 6.0.0

1 of the 2 container images this version deploys carry CVE-2026-6238.

Container imageDigestPackageFixed in
oomk8s/readiness-check:2.0.2875814cc853d
glibc@2.23-0ubuntu11
no fix listed

Open the chart page →

82,674
msbsmo-helm-chart6.0.01 of 6See more

msb smo-helm-chart 6.0.0

1 of the 6 container images this version deploys carry CVE-2026-6238.

Container imageDigestPackageFixed in
oomk8s/readiness-check:2.0.07daa08b81954
glibc@2.23-0ubuntu9
no fix listed

Open the chart page →

87,346
multicloudsmo-helm-chart6.0.01 of 14See more

multicloud smo-helm-chart 6.0.0

1 of the 14 container images this version deploys carry CVE-2026-6238.

Container imageDigestPackageFixed in
oomk8s/ubuntu-init:1.0.03adf3d21ad3b
glibc@2.23-0ubuntu7
no fix listed

Open the chart page →

9,620
pndasmo-helm-chart6.0.01 of 3See more

pnda smo-helm-chart 6.0.0

1 of the 3 container images this version deploys carry CVE-2026-6238.

Container imageDigestPackageFixed in
oomk8s/readiness-check:2.0.07daa08b81954
glibc@2.23-0ubuntu9
no fix listed

Open the chart page →

87,346
pombasmo-helm-chart6.0.01 of 17See more

pomba smo-helm-chart 6.0.0

1 of the 17 container images this version deploys carry CVE-2026-6238.

Container imageDigestPackageFixed in
oomk8s/readiness-check:2.0.07daa08b81954
glibc@2.23-0ubuntu9
no fix listed

Open the chart page →

89,093
portalsmo-helm-chart6.0.01 of 8See more

portal smo-helm-chart 6.0.0

1 of the 8 container images this version deploys carry CVE-2026-6238.

Container imageDigestPackageFixed in
oomk8s/readiness-check:2.0.07daa08b81954
glibc@2.23-0ubuntu9
no fix listed

Open the chart page →

87,346
sdcsmo-helm-chart6.0.01 of 14See more

sdc smo-helm-chart 6.0.0

1 of the 14 container images this version deploys carry CVE-2026-6238.

Container imageDigestPackageFixed in
oomk8s/readiness-check:2.0.2875814cc853d
glibc@2.23-0ubuntu11
no fix listed

Open the chart page →

83,667
sdnc-ansible-serversmo-helm-chart6.0.01 of 3See more

sdnc-ansible-server smo-helm-chart 6.0.0

1 of the 3 container images this version deploys carry CVE-2026-6238.

Container imageDigestPackageFixed in
oomk8s/readiness-check:2.0.2875814cc853d
glibc@2.23-0ubuntu11
no fix listed

Open the chart page →

83,667
sdnc-portalsmo-helm-chart6.0.01 of 3See more

sdnc-portal smo-helm-chart 6.0.0

1 of the 3 container images this version deploys carry CVE-2026-6238.

Container imageDigestPackageFixed in
oomk8s/readiness-check:2.0.2875814cc853d
glibc@2.23-0ubuntu11
no fix listed

Open the chart page →

83,667
sdnc-promsmo-helm-chart6.0.01 of 2See more

sdnc-prom smo-helm-chart 6.0.0

1 of the 2 container images this version deploys carry CVE-2026-6238.

Container imageDigestPackageFixed in
oomk8s/readiness-check:2.0.2875814cc853d
glibc@2.23-0ubuntu11
no fix listed

Open the chart page →

82,674
sdnc-websmo-helm-chart6.0.01 of 3See more

sdnc-web smo-helm-chart 6.0.0

1 of the 3 container images this version deploys carry CVE-2026-6238.

Container imageDigestPackageFixed in
oomk8s/readiness-check:2.0.2875814cc853d
glibc@2.23-0ubuntu11
no fix listed

Open the chart page →

82,674
ueb-listenersmo-helm-chart6.0.01 of 3See more

ueb-listener smo-helm-chart 6.0.0

1 of the 3 container images this version deploys carry CVE-2026-6238.

Container imageDigestPackageFixed in
oomk8s/readiness-check:2.0.2875814cc853d
glibc@2.23-0ubuntu11
no fix listed

Open the chart page →

83,667
sneakerssneakers1.0.01 of 4See more

sneakers sneakers 1.0.0

1 of the 4 container images this version deploys carry CVE-2026-6238.

Container imageDigestPackageFixed in
library/nginx:latest05b8cb60c354
glibc@2.41-12+deb13u3
no fix listed

Open the chart page →

7,708
daemonsetsnowplow-devopsVerified publisher0.6.01 of 1See more

daemonset snowplow-devops 0.6.0

1 of the 1 container images this version deploys carry CVE-2026-6238.

Container imageDigestPackageFixed in
library/nginx:latest05b8cb60c354
glibc@2.41-12+deb13u3
no fix listed

Open the chart page →

1,956
service-deploymentsnowplow-devopsVerified publisher0.43.01 of 1See more

service-deployment snowplow-devops 0.43.0

1 of the 1 container images this version deploys carry CVE-2026-6238.

Container imageDigestPackageFixed in
nginxinc/nginx-unprivileged:stablecb92301e719d
glibc@2.41-12+deb13u3
no fix listed

Open the chart page →

1,938
space-engineerssoblivionscall1.0.21 of 2See more

space-engineers soblivionscall 1.0.2

1 of the 2 container images this version deploys carry CVE-2026-6238.

Container imageDigestPackageFixed in
library/ubuntu:xenial1f1a2d56de1d
glibc@2.23-0ubuntu11.3
no fix listed

Open the chart page →

2,793
bootzookasoftwaremillVerified publisher0.2.11 of 2See more

bootzooka softwaremill 0.2.1

1 of the 2 container images this version deploys carry CVE-2026-6238.

Container imageDigestPackageFixed in
softwaremill/bootzooka:latest845b5e8f8056
glibc@2.43-2ubuntu2
2.43-2ubuntu2.3

Open the chart page →

3,131
atlassian-confluencesomeblackmagic3.4.11 of 1See more

atlassian-confluence someblackmagic 3.4.1

1 of the 1 container images this version deploys carry CVE-2026-6238.

Container imageDigestPackageFixed in
atlassian/confluence-server:7.10.03b9222ab32ef
glibc@2.35-0ubuntu3.1
2.35-0ubuntu3.14

Open the chart page →

13,691
atlassian-jirasomeblackmagic3.3.21 of 1See more

atlassian-jira someblackmagic 3.3.2

1 of the 1 container images this version deploys carry CVE-2026-6238.

Container imageDigestPackageFixed in
atlassian/jira-software:8.14.037bc46cbec1a
glibc@2.35-0ubuntu3.6
2.35-0ubuntu3.14

Open the chart page →

13,152
testing-multitoolsomeblackmagic0.1.21 of 1See more

testing-multitool someblackmagic 0.1.2

1 of the 1 container images this version deploys carry CVE-2026-6238.

Container imageDigestPackageFixed in
someblackmagic/k8s-testing-multitool:v0.1.06eca64b6b440
glibc@2.31-0ubuntu9.7
no fix listed

Open the chart page →

101,945
nginx-chartsongduckbae-nginx0.1.01 of 1See more

nginx-chart songduckbae-nginx 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-6238.

Container imageDigestPackageFixed in
library/nginx:latest05b8cb60c354
glibc@2.41-12+deb13u3
no fix listed

Open the chart page →

1,956
spacecapybara-chartspacecapy1.0.491 of 2See more

spacecapybara-chart spacecapy 1.0.49

1 of the 2 container images this version deploys carry CVE-2026-6238.

Container imageDigestPackageFixed in
sashafefler/spacecapybara_app:latestf96d7804c0ca
glibc@2.36-9+deb12u8
no fix listed

Open the chart page →

12,121
datadogspartan0.1.01 of 1See more

datadog spartan 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-6238.

Container imageDigestPackageFixed in
gcr.io/datadoghq/cluster-agent:7.61.06efe04ba4e06
glibc@2.39-0ubuntu8.3
2.39-0ubuntu8.8

Open the chart page →

3,313

Container images carrying it

2,522 by charts deploying them

A fixed version is listed for 1 of the 3 affected packages.

Container imageDigestPackageFixed inUsed by
registry.gitlab.com/gitlab-org/build/cng/gitlab-base:v19.4.0696d798a5c85
glibc@2.41-12+deb13u3
no fix listed
1
registry.gitlab.com/gitlab-org/build/cng/gitlab-container-registry:v4.40.2-gitlabdc1a8972c640
glibc@2.36-9+deb12u14
no fix listed
1
registry.gitlab.com/gitlab-org/build/cng/gitlab-exporter:17.0.26645e014f75d
glibc@2.41-12+deb13u4
no fix listed
1
registry.gitlab.com/gitlab-org/build/cng/gitlab-kas:v19.4.08ae8be4645ce
glibc@2.41-12+deb13u4
no fix listed
1
registry.gitlab.com/gitlab-org/build/cng/gitlab-openbao:v2.5.5-gitlab25b7636dfba3f
glibc@2.41-12+deb13u3
no fix listed
1
registry.gitlab.com/gitlab-org/build/cng/gitlab-shell:v14.57.3aca1bb3d5b7e
glibc@2.41-12+deb13u3
no fix listed
1
registry.gitlab.com/gitlab-org/build/cng/gitlab-workhorse-ee:v19.4.02256b49461fa
glibc@2.41-12+deb13u3
no fix listed
1
registry.gitlab.com/gitlab-org/build/cng/kubectl:v19.4.048ee51dd67d4
glibc@2.41-12+deb13u3
no fix listed
1
registry.gitlab.com/infinitydon/registry/open5gs-aio:v2.2.2f6385712935f
glibc@2.31-0ubuntu9.2
no fix listed
1
registry.gitlab.com/school_guy/docker-typo3:13.4.30-197d868ed76185d7270d
glibc@2.36-9+deb12u14
no fix listed
1
registry.k8s.io/csi-secrets-store/driver:v1.6.1b48d7d13dd06
glibc@2.36-9+deb12u14
no fix listed
1
registry.k8s.io/dns/k8s-dns-node-cache:1.23.081a13703d6b8
glibc@2.36-9+deb12u3
no fix listed
1
registry.k8s.io/dns/k8s-dns-node-cache:1.26.78b9a78d101a1
glibc@2.36-9+deb12u13
no fix listed
1
registry.k8s.io/dns/k8s-dns-node-cache:1.23.1e3dccb1a21d1
glibc@2.36-9+deb12u7
no fix listed
1
registry.k8s.io/git-sync/git-sync:v4.5.00e64aedb0d0a
glibc@2.41-12
no fix listed
1
registry.k8s.io/git-sync/git-sync:v4.1.0fd9722fd02e3
glibc@2.36-9+deb12u3
no fix listed
1
registry.k8s.io/node-problem-detector/node-problem-detector:v0.8.2052f0618e9bc2
glibc@2.36-9+deb12u8
no fix listed
1
registry.k8s.io/node-problem-detector/node-problem-detector:v1.35.1c380751accc5
glibc@2.36-9+deb12u13
no fix listed
1
registry.k8s.io/sig-storage/local-volume-provisioner:v2.8.03e2bf2eaef9f
glibc@2.36-9+deb12u10
no fix listed
1
registry.k8s.io/sig-storage/local-volume-provisioner:v2.9.0f9d65db8bda2
glibc@2.36-9+deb12u14
no fix listed
1
registry.k8s.io/sig-storage/nfsplugin:v4.13.41eb5a85180a4
glibc@2.36-9+deb12u14
no fix listed
1
registry.k8s.io/sig-storage/nfsplugin:v4.11.0ce5b5ccd5eb0
glibc@2.36-9+deb12u10
no fix listed
1

syft 1.42.1 · advisories as of 20 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.