StackRadar

CVE-2026-6238

Medium

Advisory

Published 28 Apr 2026In the index since 5 Sept 2026
Severity
Medium
worst across findings
CVSS
6.5
base score, highest
EPSS
0.004
30th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
2,490
of 17,832 indexed, latest versions
Container images
2,511
deployed by those charts
Fix available
1 of 3
affected packages

CVE-2026-6238 affecting package glibc 2.38-21

Carried by container images the latest versions of 2,490 of 17,832 indexed charts deploy, on 2,511 images.

Affected packageAffected versionsFixed inImages
glibcdeb2.23-0ubuntu5, 2.23-0ubuntu7, 2.23-0ubuntu9, 2.23-0ubuntu10+61 more2.35-0ubuntu3.14, 2.39-0ubuntu8.8, 2.41-12+deb13u2+e5, 2.43-2ubuntu2.32,491
eglibcdeb2.19-0ubuntu6.3, 2.19-0ubuntu6.6, 2.19-0ubuntu6.13, 2.19-0ubuntu6.14+1 moreno fix listed7
glibcrpm2.38-16.azl3, 2.38-18.azl3, 2.38-20.azl3no fix listed13
OSV records
DEBIAN-CVE-2026-6238UBUNTU-CVE-2026-6238AZL-85004ECHO-916f-8705-1b52
Also known as
USN-8611-1

Charts affected

2,490 by stars
ChartLatestAffected imagesRadar Score
hello-worldsikalabs0.17.01 of 1See more

hello-world sikalabs 0.17.0

1 of the 1 container images this version deploys carry CVE-2026-6238.

Container imageDigestPackageFixed in
ghcr.io/sikalabs/hello-world-server:latestcf8538bf6489
glibc@2.41-12+deb13u3
no fix listed

Open the chart page →

1,218
hello-world-examplesikalabs0.1.31 of 1See more

hello-world-example sikalabs 0.1.3

1 of the 1 container images this version deploys carry CVE-2026-6238.

Container imageDigestPackageFixed in
sikalabs/hello-world-server:latest5f49bf889a64
glibc@2.41-12+deb13u3
no fix listed

Open the chart page →

1,218
kubernetes-dashboard-gatewaysikalabs0.1.01 of 1See more

kubernetes-dashboard-gateway sikalabs 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-6238.

Container imageDigestPackageFixed in
library/nginx:latestabe47724e466
glibc@2.41-12+deb13u4
no fix listed

Open the chart page →

1,589
wordpress-mysqlsikalabs0.1.21 of 2See more

wordpress-mysql sikalabs 0.1.2

1 of the 2 container images this version deploys carry CVE-2026-6238.

Container imageDigestPackageFixed in
library/wordpress:latesta85a30d9e752
glibc@2.41-12+deb13u4
no fix listed

Open the chart page →

3,154
simple-websimple-webVerified publisher1.1.11 of 1See more

simple-web simple-web 1.1.1

1 of the 1 container images this version deploys carry CVE-2026-6238.

Container imageDigestPackageFixed in
library/nginx:latestabe47724e466
glibc@2.41-12+deb13u4
no fix listed

Open the chart page →

1,589
bitwardensinextraVerified publisher0.10.21 of 1See more

bitwarden sinextra 0.10.2

1 of the 1 container images this version deploys carry CVE-2026-6238.

Container imageDigestPackageFixed in
vaultwarden/server:1.37.2094b5689ed81
glibc@2.41-12+deb13u3
no fix listed

Open the chart page →

1,789
clickhouse-keepersinextraVerified publisher0.7.21 of 1See more

clickhouse-keeper sinextra 0.7.2

1 of the 1 container images this version deploys carry CVE-2026-6238.

Container imageDigestPackageFixed in
clickhouse/clickhouse-server:24.12.6a65ca89ddbe8
glibc@2.35-0ubuntu3.8
2.35-0ubuntu3.14

Open the chart page →

2,266
fluentdsinextraVerified publisher1.4.51 of 1See more

fluentd sinextra 1.4.5

1 of the 1 container images this version deploys carry CVE-2026-6238.

Container imageDigestPackageFixed in
ghcr.io/sergelogvinov/fluentd:1.19.33273d13f1e75
glibc@2.41-12+deb13u3
no fix listed

Open the chart page →

1,138
headscalesinextraVerified publisher0.1.01 of 1See more

headscale sinextra 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-6238.

Container imageDigestPackageFixed in
ghcr.io/juanfont/headscale:v0.29.30e7f1c6e4ce6
glibc@2.41-12+deb13u3
no fix listed

Open the chart page →

572
infisicalsinextraVerified publisher0.6.01 of 1See more

infisical sinextra 0.6.0

1 of the 1 container images this version deploys carry CVE-2026-6238.

Container imageDigestPackageFixed in
infisical/infisical:v0.165.602082bf13163
glibc@2.41-12+deb13u3
no fix listed

Open the chart page →

3,110
mongosqldsinextraVerified publisher0.3.71 of 1See more

mongosqld sinextra 0.3.7

1 of the 1 container images this version deploys carry CVE-2026-6238.

Container imageDigestPackageFixed in
ghcr.io/sergelogvinov/mongosqld:2.14.230b826375ed42
glibc@2.35-0ubuntu3.10
2.35-0ubuntu3.14

Open the chart page →

2,645
mongosyncsinextraVerified publisher0.4.01 of 1See more

mongosync sinextra 0.4.0

1 of the 1 container images this version deploys carry CVE-2026-6238.

Container imageDigestPackageFixed in
ghcr.io/sergelogvinov/mongosync:1.15.0fa99ed475f03
glibc@2.39-0ubuntu8.5
2.39-0ubuntu8.8

Open the chart page →

2,907
pgbouncersinextraVerified publisher0.17.01 of 1See more

pgbouncer sinextra 0.17.0

1 of the 1 container images this version deploys carry CVE-2026-6238.

Container imageDigestPackageFixed in
ghcr.io/sergelogvinov/pgbouncer:16.1518f1121ba0a4
glibc@2.36-9+deb12u14
no fix listed

Open the chart page →

1,979
sistas-chatbotsistas-chatbot5.0.21 of 6See more

sistas-chatbot sistas-chatbot 5.0.2

1 of the 6 container images this version deploys carry CVE-2026-6238.

Container imageDigestPackageFixed in
jhipster/jhipster-registry:latest7184525acd4d
glibc@2.31-0ubuntu9.17
no fix listed

Open the chart page →

5,951
yopasssky-sailVerified publisher1.3.12 of 2See more

yopass sky-sail 1.3.1

2 of the 2 container images this version deploys carry CVE-2026-6238.

Container imageDigestPackageFixed in
jhaals/yopass:12.5.0916a1cf45d36
glibc@2.36-9+deb12u13
no fix listed
library/memcached:1.6.409ae868852d0b
glibc@2.41-12
no fix listed

Open the chart page →

3,070
envoyslamdev0.0.171 of 2See more

envoy slamdev 0.0.17

1 of the 2 container images this version deploys carry CVE-2026-6238.

Container imageDigestPackageFixed in
envoyproxy/envoy:v1.18.2e8b37c1d7578
glibc@2.27-3ubuntu1.4
no fix listed

Open the chart page →

4,750
gitlab-runnerslamdev0.0.11 of 1See more

gitlab-runner slamdev 0.0.1

1 of the 1 container images this version deploys carry CVE-2026-6238.

Container imageDigestPackageFixed in
gitlab/gitlab-runner:v15.3.0860d4a3fec7a
glibc@2.31-0ubuntu9.9
no fix listed

Open the chart page →

9,303
slothsloth0.16.01 of 2See more

sloth sloth 0.16.0

1 of the 2 container images this version deploys carry CVE-2026-6238.

Container imageDigestPackageFixed in
registry.k8s.io/git-sync/git-sync:v4.5.00e64aedb0d0a
glibc@2.41-12
no fix listed

Open the chart page →

4,023
oi-slurm-cluster-chartslurm-cluster-chart0.25.11 of 4See more

oi-slurm-cluster-chart slurm-cluster-chart 0.25.1

1 of the 4 container images this version deploys carry CVE-2026-6238.

Container imageDigestPackageFixed in
library/mariadb:10.10334b315c10e5
glibc@2.35-0ubuntu3.6
2.35-0ubuntu3.14

Open the chart page →

4,436
slurm-cluster-chartslurm-cluster-chart0.25.01 of 4See more

slurm-cluster-chart slurm-cluster-chart 0.25.0

1 of the 4 container images this version deploys carry CVE-2026-6238.

Container imageDigestPackageFixed in
library/mariadb:10.10334b315c10e5
glibc@2.35-0ubuntu3.6
2.35-0ubuntu3.14

Open the chart page →

4,436
amt-configuresmarthallVerified publisher0.1.11 of 1See more

amt-configure smarthall 0.1.1

1 of the 1 container images this version deploys carry CVE-2026-6238.

Container imageDigestPackageFixed in
boxcutter/meshcmd:1.1.384e13f01bcab
glibc@2.35-0ubuntu3.1
2.35-0ubuntu3.14

Open the chart page →

2,805
mealiesmarthallVerified publisher0.0.101 of 1See more

mealie smarthall 0.0.10

1 of the 1 container images this version deploys carry CVE-2026-6238.

Container imageDigestPackageFixed in
ghcr.io/mealie-recipes/mealie:v1.4.0b56da41cf178
glibc@2.36-9+deb12u4
no fix listed

Open the chart page →

5,655
aafsmo-helm-chart6.0.01 of 14See more

aaf smo-helm-chart 6.0.0

1 of the 14 container images this version deploys carry CVE-2026-6238.

Container imageDigestPackageFixed in
oomk8s/readiness-check:2.0.2875814cc853d
glibc@2.23-0ubuntu11
no fix listed

Open the chart page →

80,883
aaismo-helm-chart6.0.01 of 14See more

aai smo-helm-chart 6.0.0

1 of the 14 container images this version deploys carry CVE-2026-6238.

Container imageDigestPackageFixed in
oomk8s/readiness-check:2.0.2875814cc853d
glibc@2.23-0ubuntu11
no fix listed

Open the chart page →

80,916
dgbuildersmo-helm-chart6.0.01 of 3See more

dgbuilder smo-helm-chart 6.0.0

1 of the 3 container images this version deploys carry CVE-2026-6238.

Container imageDigestPackageFixed in
oomk8s/readiness-check:2.0.07daa08b81954
glibc@2.23-0ubuntu9
no fix listed

Open the chart page →

85,602
dmaap-listenersmo-helm-chart6.0.01 of 3See more

dmaap-listener smo-helm-chart 6.0.0

1 of the 3 container images this version deploys carry CVE-2026-6238.

Container imageDigestPackageFixed in
oomk8s/readiness-check:2.0.2875814cc853d
glibc@2.23-0ubuntu11
no fix listed

Open the chart page →

80,883
elasticsearchsmo-helm-chart6.0.01 of 5See more

elasticsearch smo-helm-chart 6.0.0

1 of the 5 container images this version deploys carry CVE-2026-6238.

Container imageDigestPackageFixed in
oomk8s/readiness-check:2.0.2875814cc853d
glibc@2.23-0ubuntu11
no fix listed

Open the chart page →

79,890
logsmo-helm-chart6.0.01 of 6See more

log smo-helm-chart 6.0.0

1 of the 6 container images this version deploys carry CVE-2026-6238.

Container imageDigestPackageFixed in
oomk8s/readiness-check:2.0.07daa08b81954
glibc@2.23-0ubuntu9
no fix listed

Open the chart page →

86,356
mariadb-initsmo-helm-chart6.0.01 of 2See more

mariadb-init smo-helm-chart 6.0.0

1 of the 2 container images this version deploys carry CVE-2026-6238.

Container imageDigestPackageFixed in
oomk8s/readiness-check:2.0.2875814cc853d
glibc@2.23-0ubuntu11
no fix listed

Open the chart page →

79,890
msbsmo-helm-chart6.0.01 of 6See more

msb smo-helm-chart 6.0.0

1 of the 6 container images this version deploys carry CVE-2026-6238.

Container imageDigestPackageFixed in
oomk8s/readiness-check:2.0.07daa08b81954
glibc@2.23-0ubuntu9
no fix listed

Open the chart page →

84,609
multicloudsmo-helm-chart6.0.01 of 14See more

multicloud smo-helm-chart 6.0.0

1 of the 14 container images this version deploys carry CVE-2026-6238.

Container imageDigestPackageFixed in
oomk8s/ubuntu-init:1.0.03adf3d21ad3b
glibc@2.23-0ubuntu7
no fix listed

Open the chart page →

9,496
pndasmo-helm-chart6.0.01 of 3See more

pnda smo-helm-chart 6.0.0

1 of the 3 container images this version deploys carry CVE-2026-6238.

Container imageDigestPackageFixed in
oomk8s/readiness-check:2.0.07daa08b81954
glibc@2.23-0ubuntu9
no fix listed

Open the chart page →

84,609
pombasmo-helm-chart6.0.01 of 17See more

pomba smo-helm-chart 6.0.0

1 of the 17 container images this version deploys carry CVE-2026-6238.

Container imageDigestPackageFixed in
oomk8s/readiness-check:2.0.07daa08b81954
glibc@2.23-0ubuntu9
no fix listed

Open the chart page →

86,356
portalsmo-helm-chart6.0.01 of 8See more

portal smo-helm-chart 6.0.0

1 of the 8 container images this version deploys carry CVE-2026-6238.

Container imageDigestPackageFixed in
oomk8s/readiness-check:2.0.07daa08b81954
glibc@2.23-0ubuntu9
no fix listed

Open the chart page →

84,609
sdcsmo-helm-chart6.0.01 of 14See more

sdc smo-helm-chart 6.0.0

1 of the 14 container images this version deploys carry CVE-2026-6238.

Container imageDigestPackageFixed in
oomk8s/readiness-check:2.0.2875814cc853d
glibc@2.23-0ubuntu11
no fix listed

Open the chart page →

80,883
sdnc-ansible-serversmo-helm-chart6.0.01 of 3See more

sdnc-ansible-server smo-helm-chart 6.0.0

1 of the 3 container images this version deploys carry CVE-2026-6238.

Container imageDigestPackageFixed in
oomk8s/readiness-check:2.0.2875814cc853d
glibc@2.23-0ubuntu11
no fix listed

Open the chart page →

80,883
sdnc-portalsmo-helm-chart6.0.01 of 3See more

sdnc-portal smo-helm-chart 6.0.0

1 of the 3 container images this version deploys carry CVE-2026-6238.

Container imageDigestPackageFixed in
oomk8s/readiness-check:2.0.2875814cc853d
glibc@2.23-0ubuntu11
no fix listed

Open the chart page →

80,883
sdnc-promsmo-helm-chart6.0.01 of 2See more

sdnc-prom smo-helm-chart 6.0.0

1 of the 2 container images this version deploys carry CVE-2026-6238.

Container imageDigestPackageFixed in
oomk8s/readiness-check:2.0.2875814cc853d
glibc@2.23-0ubuntu11
no fix listed

Open the chart page →

79,890
sdnc-websmo-helm-chart6.0.01 of 3See more

sdnc-web smo-helm-chart 6.0.0

1 of the 3 container images this version deploys carry CVE-2026-6238.

Container imageDigestPackageFixed in
oomk8s/readiness-check:2.0.2875814cc853d
glibc@2.23-0ubuntu11
no fix listed

Open the chart page →

79,890
ueb-listenersmo-helm-chart6.0.01 of 3See more

ueb-listener smo-helm-chart 6.0.0

1 of the 3 container images this version deploys carry CVE-2026-6238.

Container imageDigestPackageFixed in
oomk8s/readiness-check:2.0.2875814cc853d
glibc@2.23-0ubuntu11
no fix listed

Open the chart page →

80,883
sneakerssneakers1.0.01 of 4See more

sneakers sneakers 1.0.0

1 of the 4 container images this version deploys carry CVE-2026-6238.

Container imageDigestPackageFixed in
library/nginx:latest05b8cb60c354
glibc@2.41-12+deb13u3
no fix listed

Open the chart page →

7,717
daemonsetsnowplow-devopsVerified publisher0.6.01 of 1See more

daemonset snowplow-devops 0.6.0

1 of the 1 container images this version deploys carry CVE-2026-6238.

Container imageDigestPackageFixed in
library/nginx:latestabe47724e466
glibc@2.41-12+deb13u4
no fix listed

Open the chart page →

1,589
service-deploymentsnowplow-devopsVerified publisher0.43.01 of 1See more

service-deployment snowplow-devops 0.43.0

1 of the 1 container images this version deploys carry CVE-2026-6238.

Container imageDigestPackageFixed in
nginxinc/nginx-unprivileged:stable0918d093d608
glibc@2.41-12+deb13u4
no fix listed

Open the chart page →

1,589
space-engineerssoblivionscall1.0.21 of 2See more

space-engineers soblivionscall 1.0.2

1 of the 2 container images this version deploys carry CVE-2026-6238.

Container imageDigestPackageFixed in
library/ubuntu:xenial1f1a2d56de1d
glibc@2.23-0ubuntu11.3
no fix listed

Open the chart page →

2,816
bootzookasoftwaremillVerified publisher0.2.11 of 2See more

bootzooka softwaremill 0.2.1

1 of the 2 container images this version deploys carry CVE-2026-6238.

Container imageDigestPackageFixed in
softwaremill/bootzooka:latest845b5e8f8056
glibc@2.43-2ubuntu2
2.43-2ubuntu2.3

Open the chart page →

3,176
atlassian-confluencesomeblackmagic3.4.11 of 1See more

atlassian-confluence someblackmagic 3.4.1

1 of the 1 container images this version deploys carry CVE-2026-6238.

Container imageDigestPackageFixed in
atlassian/confluence-server:7.10.03b9222ab32ef
glibc@2.35-0ubuntu3.1
2.35-0ubuntu3.14

Open the chart page →

13,727
atlassian-jirasomeblackmagic3.3.21 of 1See more

atlassian-jira someblackmagic 3.3.2

1 of the 1 container images this version deploys carry CVE-2026-6238.

Container imageDigestPackageFixed in
atlassian/jira-software:8.14.037bc46cbec1a
glibc@2.35-0ubuntu3.6
2.35-0ubuntu3.14

Open the chart page →

13,173
testing-multitoolsomeblackmagic0.1.21 of 1See more

testing-multitool someblackmagic 0.1.2

1 of the 1 container images this version deploys carry CVE-2026-6238.

Container imageDigestPackageFixed in
someblackmagic/k8s-testing-multitool:v0.1.06eca64b6b440
glibc@2.31-0ubuntu9.7
no fix listed

Open the chart page →

99,493
nginx-chartsongduckbae-nginx0.1.01 of 1See more

nginx-chart songduckbae-nginx 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-6238.

Container imageDigestPackageFixed in
library/nginx:latest05b8cb60c354
glibc@2.41-12+deb13u3
no fix listed

Open the chart page →

1,965
spacecapybara-chartspacecapy1.0.491 of 2See more

spacecapybara-chart spacecapy 1.0.49

1 of the 2 container images this version deploys carry CVE-2026-6238.

Container imageDigestPackageFixed in
sashafefler/spacecapybara_app:latestf96d7804c0ca
glibc@2.36-9+deb12u8
no fix listed

Open the chart page →

12,126

Container images carrying it

2,511 by charts deploying them

A fixed version is listed for 1 of the 3 affected packages.

No deployed image carries CVE-2026-6238.

syft 1.42.1 · advisories as of 22 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.