CVE-2026-6368

Low

Advisory

Published 10 Aug 2026In the index since 5 Sept 2026

Severity: Low; worst across findings
CVSS: 2.1; base score, highest
EPSS: 0.001; 1st percentile
CISA KEV: Not listed; no confirmed exploitation
Charts affected: 2,606; of 17,821 indexed, latest versions
Container images: 2,650; deployed by those charts
Fix available: 1 of 3; affected packages

CVE-2026-6368 affecting package glibc 2.38-21

Carried by container images the latest versions of 2,606 of 17,821 indexed charts deploy, on 2,650 images.

Affected package	Affected versions	Fixed in	Images
glibcdeb	2.23-0ubuntu5, 2.23-0ubuntu7, 2.23-0ubuntu9, 2.23-0ubuntu10+63 more	2.35-0ubuntu3.15, 2.39-0ubuntu8.9, 2.41-12+deb13u3+e3, 2.43-2ubuntu2.4	2,630
glibcrpm	2.38-16.azl3, 2.38-18.azl3, 2.38-20.azl3	no fix listed	13
eglibcdeb	2.19-0ubuntu6.3, 2.19-0ubuntu6.6, 2.19-0ubuntu6.13, 2.19-0ubuntu6.14+1 more	no fix listed	7

OSV records: DEBIAN-CVE-2026-6368 UBUNTU-CVE-2026-6368 AZL-95495 ECHO-1dea-800f-5685
Also known as: USN-8737-1, USN-8737-2

Charts affected

2,606 by stars

Chart

Latest

Affected images

Radar Score

zahori-schedulerzahori

1.0.1

1 of 1 See more

zahori-scheduler zahori 1.0.1

1 of the 1 container images this version deploys carry CVE-2026-6368.

Container image	Digest	Package	Fixed in
zahoriaut/zahori-scheduler :1.0.0	47d0979b1184	glibc@2.27-3ubuntu1.6	no fix listed

Open the chart page →

2,485

changedetection-iozekker6

1.102.0

1 of 1 See more

changedetection-io zekker6 1.102.0

1 of the 1 container images this version deploys carry CVE-2026-6368.

Container image	Digest	Package	Fixed in
ghcr.io/dgtlmoon/changedetection.io :0.60.7	096dae27b5d6	glibc@2.36-9+deb12u14	no fix listed

Open the chart page →

2,697

endlessh-gozekker6

0.4.0

1 of 1 See more

endlessh-go zekker6 0.4.0

1 of the 1 container images this version deploys carry CVE-2026-6368.

Container image	Digest	Package	Fixed in
ghcr.io/shizunge/endlessh-go :2026.0730.0	8826dad32623	glibc@2.41-12+deb13u3	no fix listed

Open the chart page →

493

NEW_APPzekker6

0.0.0

1 of 1 See more

NEW_APP zekker6 0.0.0

1 of the 1 container images this version deploys carry CVE-2026-6368.

Container image	Digest	Package	Fixed in
library/nginx :latest	abe47724e466	glibc@2.41-12+deb13u4	no fix listed

Open the chart page →

1,956

clickhousezloi-space

1.2.0

2 of 3 See more

clickhouse zloi-space 1.2.0

2 of the 3 container images this version deploys carry CVE-2026-6368.

Container image	Digest	Package	Fixed in
yandex/clickhouse-client :21.3	863f94a0f607	glibc@2.27-3ubuntu1.4	no fix listed
yandex/clickhouse-server :21.3.20	4eccfffb01d7	glibc@2.31-0ubuntu9.2	no fix listed

Open the chart page →

9,296

zoo-project-druzoo-project

0.10.4

1 of 6 See more

zoo-project-dru zoo-project 0.10.4

1 of the 6 container images this version deploys carry CVE-2026-6368.

Container image	Digest	Package	Fixed in
zooproject/zoo-project :dru-19f3c4eed7c9ec9d1f0375bbe59f9d204a42bd3a	9a507cb7e2dd	glibc@2.35-0ubuntu3.14	2.35-0ubuntu3.15

Open the chart page →

7,966

Container images carrying it

2,650 by charts deploying them

A fixed version is listed for 1 of the 3 affected packages.

Container image	Digest	Package	Fixed in	Used by
ghcr.io/cosmo-tech/cosmotech-copilot-api :latest	a2be95de450c	glibc@2.41-12+deb13u1	no fix listed	1
ghcr.io/cosmo-workspace/dev-code-server :v0.0.3	16fda01ae58a	glibc@2.36-9+deb12u10	no fix listed	1
ghcr.io/ctfd/ctfd :3.8.2	870e396fddf8	glibc@2.36-9+deb12u13	no fix listed	1
ghcr.io/dakera-ai/dakera :0.11.101	af610992a416	glibc@2.41-12+deb13u3	no fix listed	1
ghcr.io/dakera-ai/dakera-mcp :0.10.11	a3d48418b14a	glibc@2.36-9+deb12u14	no fix listed	1
ghcr.io/damap-org/damap-backend :5.0.0	f3d0c7d35498	glibc@2.39-0ubuntu8.7	2.39-0ubuntu8.9	1
ghcr.io/damap-org/damap-frontend :5.0.1	609f48af4efc	glibc@2.41-12+deb13u3	no fix listed	1
ghcr.io/danielgines/brightdata-exporter :0.2.17	6920d17cf6ff	glibc@2.41-12+deb13u2	no fix listed	1
ghcr.io/dani-garcia/vaultwarden :1.35.2	d89a6d21e361	glibc@2.41-12	no fix listed	1
ghcr.io/danny-avila/librechat-rag-api-dev-lite :latest	f9f34c8ed688	glibc@2.41-12+deb13u3	no fix listed	1
ghcr.io/dask/dask :2024.1.0	080150de7d86	glibc@2.31-0ubuntu9.14	no fix listed	1
ghcr.io/dask/dask-kubernetes-operator :2026.3.0	3225d2bc6b3c	glibc@2.41-12+deb13u1	no fix listed	1
ghcr.io/dask/dask-notebook :2024.1.0	f53bde3acd4f	glibc@2.35-0ubuntu3.6	2.35-0ubuntu3.15	1
ghcr.io/data-fair/elasticsearch :7.17.1	aa45adaf59a7	glibc@2.31-0ubuntu9.2	no fix listed	1
ghcr.io/defguard/defguard :2.1.0	df2e31d3b4f5	glibc@2.41-12+deb13u3	no fix listed	1
ghcr.io/defguard/defguard-proxy :2.1.0	8765a28e383e	glibc@2.41-12+deb13u3	no fix listed	1
ghcr.io/defguard/gateway :2.1.0	738b2b6f413b	glibc@2.41-12+deb13u3	no fix listed	1
ghcr.io/deltabadger/deltabadger :2.23.3	bffe3c22fabc	glibc@2.41-12+deb13u1	no fix listed	1
ghcr.io/developmentseed/titiler :0.22.4	8ac53eb38393	glibc@2.36-9+deb12u10	no fix listed	1
ghcr.io/deven96/ahnlich-db :latest	45d8b5aab491	glibc@2.41-12+deb13u3	no fix listed	1
ghcr.io/devops-ia/steampipe :v2.4.1	a982103d91d3	glibc@2.36-9+deb12u13	no fix listed	1
ghcr.io/dfir-iris/iriswebapp_app :v2.4.26	e59ebde55709	glibc@2.41-12	no fix listed	1
ghcr.io/dgtlmoon/changedetection.io :0.60.5	f69554198005	glibc@2.36-9+deb12u14	no fix listed	1
ghcr.io/ding113/claude-code-hub :latest	87f9e8a92bd7	glibc@2.41-12+deb13u3	no fix listed	1
ghcr.io/djcass44/cso-proxy :cccf49fd	b360d44125ad	glibc@2.27-3ubuntu1.4	no fix listed	1
ghcr.io/djerfy/zabbix-kubernetes-discovery :v1.4.20	7a50c07e7c69	glibc@2.39-0ubuntu8.3	2.39-0ubuntu8.9	1
ghcr.io/donkie/spoolman :0.24.0	42135965c42d	glibc@2.36-9+deb12u14	no fix listed	1
ghcr.io/dragoangel/mcrouter :v2026.06.29.00	42afcffe67d0	glibc@2.39-0ubuntu8.7	2.39-0ubuntu8.9	1
ghcr.io/drakkan/sftpgo :v2.7.5	9011fe608d33	glibc@2.41-12+deb13u3	no fix listed	1
ghcr.io/drewburr-labs/evobot :3.0.0	4ddbb244c82f	glibc@2.36-9+deb12u3	no fix listed	1
ghcr.io/drewburr-labs/mum-discord-bot :3.1.2	6e82914e1051	glibc@2.36-9+deb12u3	no fix listed	1
ghcr.io/dynamic-config-rs/dynamic-config-webhook :v0.3.0	f00f02c53f66	glibc@2.36-9+deb12u14	no fix listed	1
ghcr.io/dysnix/docker-bitcoind :0.29.0	490ca8e3dd21	glibc@2.39-0ubuntu8.4	2.39-0ubuntu8.9	1
ghcr.io/edgelesssys/coordinator :v0.5.0	bcd5b8d4c45c	glibc@2.27-3ubuntu1.4	no fix listed	1
ghcr.io/edgelesssys/edgelessdb-sgx-1gb :v0.3.2	7e1d7a11a11a	glibc@2.31-0ubuntu9.9	no fix listed	1
ghcr.io/edgelesssys/marblerun/coordinator :v1.9.2	e589db0d0a2c	glibc@2.35-0ubuntu3.14	2.35-0ubuntu3.15	1
ghcr.io/eenchev/prometheus-universal-exporter :latest	99122b443cf9	glibc@2.41-12+deb13u4	no fix listed	1
ghcr.io/egos-tech/smtp :1.2.2	b5451793ad91	glibc@2.41-12+deb13u2	no fix listed	1
ghcr.io/elastiflow/mermin :v0.4.1	205053c8a3e2	glibc@2.41-12+deb13u3	no fix listed	1
ghcr.io/element-hq/matrix-authentication-service :1.24.0	52c18ffcc940	glibc@2.41-12+deb13u3	no fix listed	1
ghcr.io/element-hq/matrix-authentication-service :0.14.0	834ea54370f0	glibc@2.36-9+deb12u9	no fix listed	1
ghcr.io/element-hq/synapse :v1.111.0	22ae556e0de4	glibc@2.36-9+deb12u7	no fix listed	1
ghcr.io/emissary-ingress/emissary :4.1.0	4a981156abee	glibc@2.36-9+deb12u14	no fix listed	1
ghcr.io/ente/web :5ab0c5b4c7a89c4e470ef6f793600da33cebf35d	3f4864eb7f11	glibc@2.41-12+deb13u3	no fix listed	1
ghcr.io/erlkoenig91/prompt-db-backend :1.0.7	ab120359810d	glibc@2.41-12+deb13u3	no fix listed	1
ghcr.io/esphome/esphome :2026.4.0	78a82d810709	glibc@2.36-9+deb12u13	no fix listed	1
ghcr.io/ferama/rospo :v0.12.0	ab40c1745534	glibc@2.36-9+deb12u3	no fix listed	1
ghcr.io/ferama/vipien :v0.5.3	923a3f704b21	glibc@2.31-0ubuntu9.7	no fix listed	1
ghcr.io/feresberbeche/alertigate :2.0.0	7b9bba80f207	glibc@2.41-12+deb13u3	no fix listed	1
ghcr.io/ferriskey/ferriskey-api :0.8.0	7b479fc31340	glibc@2.36-9+deb12u14	no fix listed	1