CVE-2026-6368

Low

Advisory

Published 10 Aug 2026In the index since 5 Sept 2026

Severity: Low; worst across findings
CVSS: 2.1; base score, highest
EPSS: 0.001; 1st percentile
CISA KEV: Not listed; no confirmed exploitation
Charts affected: 2,606; of 17,821 indexed, latest versions
Container images: 2,650; deployed by those charts
Fix available: 1 of 3; affected packages

CVE-2026-6368 affecting package glibc 2.38-21

Carried by container images the latest versions of 2,606 of 17,821 indexed charts deploy, on 2,650 images.

Affected package	Affected versions	Fixed in	Images
glibcdeb	2.23-0ubuntu5, 2.23-0ubuntu7, 2.23-0ubuntu9, 2.23-0ubuntu10+63 more	2.35-0ubuntu3.15, 2.39-0ubuntu8.9, 2.41-12+deb13u3+e3, 2.43-2ubuntu2.4	2,630
glibcrpm	2.38-16.azl3, 2.38-18.azl3, 2.38-20.azl3	no fix listed	13
eglibcdeb	2.19-0ubuntu6.3, 2.19-0ubuntu6.6, 2.19-0ubuntu6.13, 2.19-0ubuntu6.14+1 more	no fix listed	7

OSV records: DEBIAN-CVE-2026-6368 UBUNTU-CVE-2026-6368 AZL-95495 ECHO-1dea-800f-5685
Also known as: USN-8737-1, USN-8737-2

Charts affected

2,606 by stars

Chart

Latest

Affected images

Radar Score

zahori-schedulerzahori

1.0.1

1 of 1 See more

zahori-scheduler zahori 1.0.1

1 of the 1 container images this version deploys carry CVE-2026-6368.

Container image	Digest	Package	Fixed in
zahoriaut/zahori-scheduler :1.0.0	47d0979b1184	glibc@2.27-3ubuntu1.6	no fix listed

Open the chart page →

2,485

changedetection-iozekker6

1.102.0

1 of 1 See more

changedetection-io zekker6 1.102.0

1 of the 1 container images this version deploys carry CVE-2026-6368.

Container image	Digest	Package	Fixed in
ghcr.io/dgtlmoon/changedetection.io :0.60.7	096dae27b5d6	glibc@2.36-9+deb12u14	no fix listed

Open the chart page →

2,697

endlessh-gozekker6

0.4.0

1 of 1 See more

endlessh-go zekker6 0.4.0

1 of the 1 container images this version deploys carry CVE-2026-6368.

Container image	Digest	Package	Fixed in
ghcr.io/shizunge/endlessh-go :2026.0730.0	8826dad32623	glibc@2.41-12+deb13u3	no fix listed

Open the chart page →

493

NEW_APPzekker6

0.0.0

1 of 1 See more

NEW_APP zekker6 0.0.0

1 of the 1 container images this version deploys carry CVE-2026-6368.

Container image	Digest	Package	Fixed in
library/nginx :latest	abe47724e466	glibc@2.41-12+deb13u4	no fix listed

Open the chart page →

1,956

clickhousezloi-space

1.2.0

2 of 3 See more

clickhouse zloi-space 1.2.0

2 of the 3 container images this version deploys carry CVE-2026-6368.

Container image	Digest	Package	Fixed in
yandex/clickhouse-client :21.3	863f94a0f607	glibc@2.27-3ubuntu1.4	no fix listed
yandex/clickhouse-server :21.3.20	4eccfffb01d7	glibc@2.31-0ubuntu9.2	no fix listed

Open the chart page →

9,296

zoo-project-druzoo-project

0.10.4

1 of 6 See more

zoo-project-dru zoo-project 0.10.4

1 of the 6 container images this version deploys carry CVE-2026-6368.

Container image	Digest	Package	Fixed in
zooproject/zoo-project :dru-19f3c4eed7c9ec9d1f0375bbe59f9d204a42bd3a	9a507cb7e2dd	glibc@2.35-0ubuntu3.14	2.35-0ubuntu3.15

Open the chart page →

7,966

Container images carrying it

2,650 by charts deploying them

A fixed version is listed for 1 of the 3 affected packages.

Container image	Digest	Package	Fixed in	Used by
ghcr.io/astriaorg/account-monitor :latest	4c8b42890035	glibc@2.36-9+deb12u13	no fix listed	1
ghcr.io/astriaorg/astrotrek :0.1.0	5889bea38e56	glibc@2.36-9+deb12u8	no fix listed	1
ghcr.io/astriaorg/auctioneer :pr-1839	1386b7b5e555	glibc@2.36-9+deb12u9	no fix listed	1
ghcr.io/astriaorg/conductor :1.1.0	1f97d131b1d1	glibc@2.36-9+deb12u9	no fix listed	1
ghcr.io/astriaorg/evm-bridge-withdrawer :1.0.2	9c88e1aff357	glibc@2.36-9+deb12u9	no fix listed	1
ghcr.io/astriaorg/hermes :0.5.0	4f33a0a9f75e	glibc@2.39-0ubuntu8.3	2.39-0ubuntu8.9	1
ghcr.io/astriaorg/sequencer :latest	44f82ee0b24c	glibc@2.36-9+deb12u13	no fix listed	1
ghcr.io/astriaorg/sequencer-relayer :latest	5f6c74993f08	glibc@2.36-9+deb12u13	no fix listed	1
ghcr.io/atuinsh/atuin :18.12.0	e953fa9e36ef	glibc@2.36-9+deb12u13	no fix listed	1
ghcr.io/avistotelecom/docker-wazuh-agent :4.12.0	8766ba08bf1a	glibc@2.36-9+deb12u10	no fix listed	1
ghcr.io/backstage/backstage :latest	792e262ea504	glibc@2.41-12+deb13u3	no fix listed	1
ghcr.io/base/node-reth :v1.1.1	8eb6e492fe3c	glibc@2.39-0ubuntu8.7	2.39-0ubuntu8.9	1
ghcr.io/base-org/node :v0.11.1	1aba0ffe55ea	glibc@2.35-0ubuntu3.8	2.35-0ubuntu3.15	1
ghcr.io/beluga-cloud/jellyfin/jellyfin :10.8.13	68f52b993a7f	glibc@2.35-0ubuntu3.5	2.35-0ubuntu3.15	1
ghcr.io/beslovas/duckdb-ui :1.3.2	72f35584026d	glibc@2.36-9+deb12u13	no fix listed	1
ghcr.io/bitwarden/sm-operator :2.1.0	846624161f32	glibc@2.36-9+deb12u14	no fix listed	1
ghcr.io/blockscout/smart-contract-verifier :main	9a43f0cc5797	glibc@2.39-0ubuntu8.8	2.39-0ubuntu8.9	1
ghcr.io/botify-labs/airbyte_exporter :2.3.0	2105b1f33013	glibc@2.36-9+deb12u3	no fix listed	1
ghcr.io/brittonhayes/arma-reforger :latest	6fde1edc0983	glibc@2.31-0ubuntu9.9	no fix listed	1
ghcr.io/browserless/chrome :v2.56.7	d600eac6283f	glibc@2.39-0ubuntu8.8	2.39-0ubuntu8.9	1
ghcr.io/browserless/chromium :v2.55.4	2ed0183564d7	glibc@2.39-0ubuntu8.8	2.39-0ubuntu8.9	1
ghcr.io/browserless/chromium :v2.43.0	853e6f105b51	glibc@2.39-0ubuntu8.7	2.39-0ubuntu8.9	1
ghcr.io/buanet/iobroker :v9.1.2	ca7dc7362968	glibc@2.36-9+deb12u7	no fix listed	1
ghcr.io/camptocamp/pgbouncer :latest	19dc5663cac4	glibc@2.41-12+deb13u3	no fix listed	1
ghcr.io/camptocamp/tetragon-policy-builder :master	0e99f12bb040	glibc@2.36-9+deb12u9	no fix listed	1
ghcr.io/camunda-community-hub/zeebe-simple-monitor :2.6.2	d9d796a1b846	glibc@2.35-0ubuntu3.5	2.35-0ubuntu3.15	1
ghcr.io/caninehq/canine :latest	a058034ca006	glibc@2.36-9+deb12u7	no fix listed	1
ghcr.io/cfi2017/opencve-scheduler :3.0.0	8d943799621b	glibc@2.36-9+deb12u9	no fix listed	1
ghcr.io/cfi2017/opencve-web :3.0.0	6961eab190a2	glibc@2.41-12+deb13u3	no fix listed	1
ghcr.io/chaos-mesh/chaos-daemon :v2.8.4	0d28dbd95b03	glibc@2.36-9+deb12u14	no fix listed	1
ghcr.io/chaos-mesh/chaos-daemon :v2.8.3	69b1d3c09cfa	glibc@2.36-9+deb12u14	no fix listed	1
ghcr.io/chaos-mesh/chaos-daemon :v2.7.2	9608d9b51452	glibc@2.36-9+deb12u10	no fix listed	1
ghcr.io/chaos-mesh/chaos-daemon :v2.8.0	fb609bc264d9	glibc@2.36-9+deb12u13	no fix listed	1
ghcr.io/chaos-mesh/chaos-dashboard :v2.7.2	11cdbbc479b3	glibc@2.36-9+deb12u10	no fix listed	1
ghcr.io/chaos-mesh/chaos-dashboard :v2.8.4	8a8ec8d4c9ea	glibc@2.36-9+deb12u14	no fix listed	1
ghcr.io/chaos-mesh/chaos-dashboard :v2.8.0	e7f9e8f1d565	glibc@2.36-9+deb12u13	no fix listed	1
ghcr.io/chgl/fhir-server-exporter :v3.0.18	b7d58a342e94	glibc@2.43-2ubuntu2.3	2.43-2ubuntu2.4	1
ghcr.io/chgl/magnifhir :v1.5.2	13f121613edd	glibc@2.35-0ubuntu3.6	2.35-0ubuntu3.15	1
ghcr.io/chroma-core/chroma :1.5.3	cfd193653bd6	glibc@2.41-12+deb13u1	no fix listed	1
ghcr.io/chronicleprotocol/ghost :0.78.5	951d71162065	glibc@2.36-9+deb12u14	no fix listed	1
ghcr.io/chronicleprotocol/spectre :0.68.3	4e872bc016e8	glibc@2.36-9+deb12u13	no fix listed	1
ghcr.io/chronicleprotocol/spire :0.68.3	79df4fb20322	glibc@2.36-9+deb12u13	no fix listed	1
ghcr.io/cjmalloy/jasper :v1.3.282	726a947bb65b	glibc@2.36-9+deb12u14	no fix listed	1
ghcr.io/cjmalloy/jasper-ui :v1.3.623	246dc2160efe	glibc@2.41-12+deb13u3	no fix listed	1
ghcr.io/cloudtty/cloudshell-operator :v0.8.10	14f036e33ef1	glibc@2.41-12+deb13u4	no fix listed	1
ghcr.io/cohdi/composable-dra-driver :v0.2.2	8c05f7366981	glibc@2.41-12+deb13u3	no fix listed	1
ghcr.io/colenio/slo-reporting :0.3.31	6b64d194a27d	glibc@2.36-9+deb12u9	no fix listed	1
ghcr.io/containeroo/filesystem-exporter :v1.5.2	a66121e16d4e	glibc@2.36-9+deb12u14	no fix listed	1
ghcr.io/cosanet/cosanet :1.0.0	98cb5d9fa215	glibc@2.41-12	no fix listed	1
ghcr.io/cosmicrocks/datum :v0.4.0beta	76771c3cc8c3	glibc@2.39-0ubuntu8.6	2.39-0ubuntu8.9	1