CVE-2026-6368

Low

Advisory

Published 10 Aug 2026In the index since 5 Sept 2026

Severity: Low; worst across findings
CVSS: 2.1; base score, highest
EPSS: 0.001; 1st percentile
CISA KEV: Not listed; no confirmed exploitation
Charts affected: 2,606; of 17,821 indexed, latest versions
Container images: 2,650; deployed by those charts
Fix available: 1 of 3; affected packages

CVE-2026-6368 affecting package glibc 2.38-21

Carried by container images the latest versions of 2,606 of 17,821 indexed charts deploy, on 2,650 images.

Affected package	Affected versions	Fixed in	Images
glibcdeb	2.23-0ubuntu5, 2.23-0ubuntu7, 2.23-0ubuntu9, 2.23-0ubuntu10+63 more	2.35-0ubuntu3.15, 2.39-0ubuntu8.9, 2.41-12+deb13u3+e3, 2.43-2ubuntu2.4	2,630
glibcrpm	2.38-16.azl3, 2.38-18.azl3, 2.38-20.azl3	no fix listed	13
eglibcdeb	2.19-0ubuntu6.3, 2.19-0ubuntu6.6, 2.19-0ubuntu6.13, 2.19-0ubuntu6.14+1 more	no fix listed	7

OSV records: DEBIAN-CVE-2026-6368 UBUNTU-CVE-2026-6368 AZL-95495 ECHO-1dea-800f-5685
Also known as: USN-8737-1, USN-8737-2

Charts affected

2,606 by stars

Chart

Latest

Affected images

Radar Score

zahori-schedulerzahori

1.0.1

1 of 1 See more

zahori-scheduler zahori 1.0.1

1 of the 1 container images this version deploys carry CVE-2026-6368.

Container image	Digest	Package	Fixed in
zahoriaut/zahori-scheduler :1.0.0	47d0979b1184	glibc@2.27-3ubuntu1.6	no fix listed

Open the chart page →

2,485

changedetection-iozekker6

1.102.0

1 of 1 See more

changedetection-io zekker6 1.102.0

1 of the 1 container images this version deploys carry CVE-2026-6368.

Container image	Digest	Package	Fixed in
ghcr.io/dgtlmoon/changedetection.io :0.60.7	096dae27b5d6	glibc@2.36-9+deb12u14	no fix listed

Open the chart page →

2,697

endlessh-gozekker6

0.4.0

1 of 1 See more

endlessh-go zekker6 0.4.0

1 of the 1 container images this version deploys carry CVE-2026-6368.

Container image	Digest	Package	Fixed in
ghcr.io/shizunge/endlessh-go :2026.0730.0	8826dad32623	glibc@2.41-12+deb13u3	no fix listed

Open the chart page →

493

NEW_APPzekker6

0.0.0

1 of 1 See more

NEW_APP zekker6 0.0.0

1 of the 1 container images this version deploys carry CVE-2026-6368.

Container image	Digest	Package	Fixed in
library/nginx :latest	abe47724e466	glibc@2.41-12+deb13u4	no fix listed

Open the chart page →

1,956

clickhousezloi-space

1.2.0

2 of 3 See more

clickhouse zloi-space 1.2.0

2 of the 3 container images this version deploys carry CVE-2026-6368.

Container image	Digest	Package	Fixed in
yandex/clickhouse-client :21.3	863f94a0f607	glibc@2.27-3ubuntu1.4	no fix listed
yandex/clickhouse-server :21.3.20	4eccfffb01d7	glibc@2.31-0ubuntu9.2	no fix listed

Open the chart page →

9,296

zoo-project-druzoo-project

0.10.4

1 of 6 See more

zoo-project-dru zoo-project 0.10.4

1 of the 6 container images this version deploys carry CVE-2026-6368.

Container image	Digest	Package	Fixed in
zooproject/zoo-project :dru-19f3c4eed7c9ec9d1f0375bbe59f9d204a42bd3a	9a507cb7e2dd	glibc@2.35-0ubuntu3.14	2.35-0ubuntu3.15

Open the chart page →

7,966

Container images carrying it

2,650 by charts deploying them

A fixed version is listed for 1 of the 3 affected packages.

Container image	Digest	Package	Fixed in	Used by
library/ghost :6.37.0	1ef2e532ca4d	glibc@2.36-9+deb12u13	no fix listed	1
library/ghost :6.25.1	2654b1e90413	glibc@2.36-9+deb12u13	no fix listed	1
library/ghost :6.41.1	29773d6be407	glibc@2.36-9+deb12u14	no fix listed	1
library/ghost :5.79.0	83f7bf209844	glibc@2.36-9+deb12u4	no fix listed	1
library/ghost :6.63.0	e05bc1169fb2	glibc@2.36-9+deb12u14	no fix listed	1
library/golang :latest	3680233e3204	glibc@2.41-12+deb13u4	no fix listed	1
library/haproxy :3.4.1	0f597665a2a6	glibc@2.41-12+deb13u3	no fix listed	1
library/haproxy :3.1-bookworm	49a0a0d6f0b8	glibc@2.36-9+deb12u10	no fix listed	1
library/haproxy :2.8.28	8baa7d29a27a	glibc@2.41-12+deb13u3	no fix listed	1
library/haproxy :3.2	ad870ce41292	glibc@2.41-12+deb13u4	no fix listed	1
library/haproxy :3.2	de601ccc9a79	glibc@2.41-12+deb13u3	no fix listed	1
library/haproxy :2.9.6	fc5748ff7c72	glibc@2.36-9+deb12u4	no fix listed	1
library/httpd :2.4.63	1ae8051591a5	glibc@2.36-9+deb12u10	no fix listed	1
library/influxdb :3.10.5-core	695a8063ff10	glibc@2.39-0ubuntu8.8	2.39-0ubuntu8.9	1
library/influxdb :3.11.2-enterprise	6ce2bf22499b	glibc@2.39-0ubuntu8.8	2.39-0ubuntu8.9	1
library/influxdb :1.12.3-meta	8812029260b5	glibc@2.36-9+deb12u13	no fix listed	1
library/influxdb :1.12.3-data	b0f9fc41ed79	glibc@2.36-9+deb12u13	no fix listed	1
library/influxdb :latest	f75e48af0598	glibc@2.36-9+deb12u14	no fix listed	1
library/kibana :7.17.15	0172f1c538e7	glibc@2.31-0ubuntu9.14	no fix listed	1
library/kibana :8.18.0	04c0fc150f3a	glibc@2.31-0ubuntu9.17	no fix listed	1
library/kibana :7.17.8	c5781ba340ef	glibc@2.31-0ubuntu9.9	no fix listed	1
library/kibana :7.17.3	e2e2031c15be	glibc@2.31-0ubuntu9.7	no fix listed	1
library/kong :3.8.0	fd78090e9e77	glibc@2.35-0ubuntu3.14	2.35-0ubuntu3.15	1
library/logstash :7.17.8	17a4f64e9cf5	glibc@2.31-0ubuntu9.9	no fix listed	1
library/mariadb :10.7.3	07e06f2e7ae9	glibc@2.31-0ubuntu9.7	no fix listed	1
library/mariadb :10.11.2	1c33370a599c	glibc@2.35-0ubuntu3.1	2.35-0ubuntu3.15	1
library/mariadb :10.4	22edfe1c7834	glibc@2.31-0ubuntu9.16	no fix listed	1
library/mariadb :11	2439dcd7d140	glibc@2.39-0ubuntu8.8	2.39-0ubuntu8.9	1
library/mariadb :10.8.2-focal	490f01279be1	glibc@2.31-0ubuntu9.2	no fix listed	1
library/mariadb :12.0.2	5b6a1eac15b8	glibc@2.39-0ubuntu8.6	2.39-0ubuntu8.9	1
library/mariadb :12.3.2	628f228f0fd5	glibc@2.39-0ubuntu8.7	2.39-0ubuntu8.9	1
library/mariadb :11.8.4	6b848cb24fbb	glibc@2.39-0ubuntu8.6	2.39-0ubuntu8.9	1
library/mariadb :10.6.21	8a16204dc96c	glibc@2.31-0ubuntu9.17	no fix listed	1
library/mariadb :10.7	9a48ac9f196f	glibc@2.31-0ubuntu9.9	no fix listed	1
library/mariadb :12.3.2	a02fe89cb597	glibc@2.39-0ubuntu8.8	2.39-0ubuntu8.9	1
library/mariadb :12.3.3	ab1c3dd38194	glibc@2.39-0ubuntu8.8	2.39-0ubuntu8.9	1
library/mariadb :12.2.2	b1cb255a9939	glibc@2.39-0ubuntu8.7	2.39-0ubuntu8.9	1
library/mariadb :10.10.2	bfc25a68e113	glibc@2.35-0ubuntu3.1	2.35-0ubuntu3.15	1
library/mariadb :10 :10.11	ce66c7be32a0	glibc@2.35-0ubuntu3.14	2.35-0ubuntu3.15	1
library/mariadb :10.6.15	e22328f4d714	glibc@2.31-0ubuntu9.12	no fix listed	1
library/mariadb :10.9.4	fbb8456ebdb1	glibc@2.35-0ubuntu3.1	2.35-0ubuntu3.15	1
library/mariadb :11.7.2	fcc7fcd7114a	glibc@2.39-0ubuntu8.4	2.39-0ubuntu8.9	1
library/matomo :5.1.2-apache	2415789e1602	glibc@2.36-9+deb12u9	no fix listed	1
library/matomo :5.13.0-apache	8e6bdd396496	glibc@2.41-12+deb13u3	no fix listed	1
library/memcached :1.6.42	26983a43c918	glibc@2.41-12+deb13u3	no fix listed	1
library/memcached :1.6.40	9ae868852d0b	glibc@2.41-12	no fix listed	1
library/memcached :1.6.40	cc523a19da58	glibc@2.41-12+deb13u1	no fix listed	1
library/memcached :1.6.45	dc561d52bb8a	glibc@2.41-12+deb13u3	no fix listed	1
library/memcached :1.6.42-trixie	e2a8683c7fbb	glibc@2.41-12+deb13u3	no fix listed	1
library/mongo :7.0.14	0032d2ca20db	glibc@2.35-0ubuntu3.8	2.35-0ubuntu3.15	1