StackRadar

CVE-2026-6368

Low

Advisory

Published 10 Aug 2026In the index since 5 Sept 2026
Severity
Low
worst across findings
CVSS
2.1
base score, highest
EPSS
0.001
1st percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
2,631
of 17,805 indexed, latest versions
Container images
2,660
deployed by those charts
Fix available
1 of 3
affected packages

CVE-2026-6368 affecting package glibc 2.38-21

Carried by container images the latest versions of 2,631 of 17,805 indexed charts deploy, on 2,660 images.

Affected packageAffected versionsFixed inImages
glibcdeb2.23-0ubuntu5, 2.23-0ubuntu7, 2.23-0ubuntu9, 2.23-0ubuntu10+63 more2.35-0ubuntu3.15, 2.39-0ubuntu8.9, 2.41-12+deb13u3+e3, 2.43-2ubuntu2.42,633
glibcrpm2.38-16.azl3, 2.38-18.azl3, 2.38-20.azl3no fix listed20
eglibcdeb2.19-0ubuntu6.3, 2.19-0ubuntu6.6, 2.19-0ubuntu6.13, 2.19-0ubuntu6.14+1 moreno fix listed7
OSV records
DEBIAN-CVE-2026-6368UBUNTU-CVE-2026-6368AZL-95495ECHO-1dea-800f-5685
Also known as
USN-8737-1, USN-8737-2

Charts affected

2,631 by stars
ChartLatestAffected imagesRadar Score
netbird-reverse-proxychristianhuthVerified publisher0.1.01 of 1See more

netbird-reverse-proxy christianhuth 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-6368.

Container imageDigestPackageFixed in
netbirdio/reverse-proxy:0.72.43104d5ca3a76
glibc@2.41-12+deb13u3
no fix listed

Open the chart page →

952
polrchristianhuthVerified publisher4.3.01 of 2See more

polr christianhuth 4.3.0

1 of the 2 container images this version deploys carry CVE-2026-6368.

Container imageDigestPackageFixed in
bitnamilegacy/mysql:9.4.0-debian-12-r1ec13e229247a
glibc@2.36-9+deb12u10
no fix listed

Open the chart page →

6,021
proxysqlchristianhuthVerified publisher3.1.11 of 1See more

proxysql christianhuth 3.1.1

1 of the 1 container images this version deploys carry CVE-2026-6368.

Container imageDigestPackageFixed in
proxysql/proxysql:3.0.110e95d1b7cc32
glibc@2.41-12+deb13u3
no fix listed

Open the chart page →

1,316
timetaggerchristianhuthVerified publisher2.2.01 of 1See more

timetagger christianhuth 2.2.0

1 of the 1 container images this version deploys carry CVE-2026-6368.

Container imageDigestPackageFixed in
ghcr.io/almarklein/timetagger:v26.1.3-nonroot18a81afcb249
glibc@2.36-9+deb12u13
no fix listed

Open the chart page →

2,006
arbitrumchronicleVerified publisher0.3.41 of 1See more

arbitrum chronicle 0.3.4

1 of the 1 container images this version deploys carry CVE-2026-6368.

Container imageDigestPackageFixed in
offchainlabs/nitro-node:v3.7.6-c0fe95e9f779fa84b7b
glibc@2.36-9+deb12u13
no fix listed

Open the chart page →

7,205
basechronicleVerified publisher0.0.81 of 1See more

base chronicle 0.0.8

1 of the 1 container images this version deploys carry CVE-2026-6368.

Container imageDigestPackageFixed in
ghcr.io/base-org/node:v0.11.11aba0ffe55ea
glibc@2.35-0ubuntu3.8
2.35-0ubuntu3.15

Open the chart page →

4,901
rpc-routerchronicleVerified publisher0.2.91 of 1See more

rpc-router chronicle 0.2.9

1 of the 1 container images this version deploys carry CVE-2026-6368.

Container imageDigestPackageFixed in
drpcorg/dshackle:0.54.08858fae1859d
glibc@2.35-0ubuntu3.3
2.35-0ubuntu3.15

Open the chart page →

6,598
safe-watcherchronicleVerified publisher0.0.21 of 1See more

safe-watcher chronicle 0.0.2

1 of the 1 container images this version deploys carry CVE-2026-6368.

Container imageDigestPackageFixed in
ghcr.io/gearbox-protocol/safe-watcher:1.2.14e92a4508bee
glibc@2.36-9+deb12u9
no fix listed

Open the chart page →

921
spirechronicleVerified publisher0.3.61 of 1See more

spire chronicle 0.3.6

1 of the 1 container images this version deploys carry CVE-2026-6368.

Container imageDigestPackageFixed in
ghcr.io/chronicleprotocol/spire:0.68.379df4fb20322
glibc@2.36-9+deb12u13
no fix listed

Open the chart page →

1,553
tor-proxychronicleVerified publisher0.1.01 of 1See more

tor-proxy chronicle 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-6368.

Container imageDigestPackageFixed in
btcpayserver/tor:0.4.8.10e9585b68dc6b
glibc@2.36-9+deb12u3
no fix listed

Open the chart page →

3,380
zksyncchronicleVerified publisher0.1.02 of 2See more

zksync chronicle 0.1.0

2 of the 2 container images this version deploys carry CVE-2026-6368.

Container imageDigestPackageFixed in
library/postgres:14156f0b253fd6
glibc@2.41-12+deb13u3
no fix listed
matterlabs/external-node:v24.0.06cbfea4c694a
glibc@2.36-9+deb12u6
no fix listed

Open the chart page →

6,096
kamaji-etcdclastixVerified publisher0.18.01 of 4See more

kamaji-etcd clastix 0.18.0

1 of the 4 container images this version deploys carry CVE-2026-6368.

Container imageDigestPackageFixed in
cfssl/cfssl:latestc9018c2ddf0b
glibc@2.36-9+deb12u4
no fix listed

Open the chart page →

12,110
cloudflared-tunnelclouddrove0.1.41 of 1See more

cloudflared-tunnel clouddrove 0.1.4

1 of the 1 container images this version deploys carry CVE-2026-6368.

Container imageDigestPackageFixed in
cloudflare/cloudflared:2025.8.0eb5c9324efe3
glibc@2.36-9+deb12u10
no fix listed

Open the chart page →

1,816
cronjobclouddrove1.0.11 of 1See more

cronjob clouddrove 1.0.1

1 of the 1 container images this version deploys carry CVE-2026-6368.

Container imageDigestPackageFixed in
library/ubuntu:latest2260313b31c8
glibc@2.43-2ubuntu2.3
2.43-2ubuntu2.4

Open the chart page →

761
helmchartclouddrove1.4.01 of 1See more

helmchart clouddrove 1.4.0

1 of the 1 container images this version deploys carry CVE-2026-6368.

Container imageDigestPackageFixed in
library/nginx:latest05b8cb60c354
glibc@2.41-12+deb13u3
no fix listed

Open the chart page →

1,885
kube-acp-stackcloudentity2.28.02 of 7See more

kube-acp-stack cloudentity 2.28.0

2 of the 7 container images this version deploys carry CVE-2026-6368.

Container imageDigestPackageFixed in
bitnamilegacy/redis-cluster:7.4.3-debian-12-r0a53d023fdfaf
glibc@2.36-9+deb12u10
no fix listed
timescale/timescaledb-ha:pg17.2-ts2.18.2e8d0a9cc3db5
glibc@2.35-0ubuntu3.9
2.35-0ubuntu3.15

Open the chart page →

21,148
bitcoindcloudnativeapp0.2.11 of 2See more

bitcoind cloudnativeapp 0.2.1

1 of the 2 container images this version deploys carry CVE-2026-6368.

Container imageDigestPackageFixed in
arilot/docker-bitcoind:0.17.127a4f7e0f9f1
glibc@2.23-0ubuntu10
no fix listed

Open the chart page →

5,079
daskcloudnativeapp2.2.11 of 2See more

dask cloudnativeapp 2.2.1

1 of the 2 container images this version deploys carry CVE-2026-6368.

Container imageDigestPackageFixed in
daskdev/dask-notebook:1.1.0052630f5ca04
glibc@2.27-3ubuntu1
no fix listed

Open the chart page →

29,997
distributed-tensorflowcloudnativeapp0.1.11 of 1See more

distributed-tensorflow cloudnativeapp 0.1.1

1 of the 1 container images this version deploys carry CVE-2026-6368.

Container imageDigestPackageFixed in
cheyang/distributed-tf:1.6.046cc34755493
glibc@2.23-0ubuntu10
no fix listed

Open the chart page →

95,811
ethereumcloudnativeapp1.0.01 of 3See more

ethereum cloudnativeapp 1.0.0

1 of the 3 container images this version deploys carry CVE-2026-6368.

Container imageDigestPackageFixed in
ethereumex/eth-stats-dashboard:v0.0.1a7603aa8df4c
glibc@2.23-0ubuntu9
no fix listed

Open the chart page →

87,461
guestbookcloudnativeapp0.2.01 of 3See more

guestbook cloudnativeapp 0.2.0

1 of the 3 container images this version deploys carry CVE-2026-6368.

Container imageDigestPackageFixed in
resouer/redis-slave:v2e2f198b49ba7
eglibc@2.19-0ubuntu6.6
no fix listed

Open the chart page →

92,014
hlf-couchdbcloudnativeapp1.0.61 of 1See more

hlf-couchdb cloudnativeapp 1.0.6

1 of the 1 container images this version deploys carry CVE-2026-6368.

Container imageDigestPackageFixed in
hyperledger/fabric-couchdb:0.4.10c65891b6c237
glibc@2.23-0ubuntu10
no fix listed

Open the chart page →

92,792
hlf-ordcloudnativeapp1.2.51 of 1See more

hlf-ord cloudnativeapp 1.2.5

1 of the 1 container images this version deploys carry CVE-2026-6368.

Container imageDigestPackageFixed in
hyperledger/fabric-orderer:1.3.06ee1abcfd840
glibc@2.23-0ubuntu10
no fix listed

Open the chart page →

5,374
hlf-peercloudnativeapp1.2.61 of 1See more

hlf-peer cloudnativeapp 1.2.6

1 of the 1 container images this version deploys carry CVE-2026-6368.

Container imageDigestPackageFixed in
hyperledger/fabric-peer:1.3.06756c7c48234
glibc@2.23-0ubuntu10
no fix listed

Open the chart page →

5,374
mongodb-replicasetcloudnativeapp3.9.41 of 3See more

mongodb-replicaset cloudnativeapp 3.9.4

1 of the 3 container images this version deploys carry CVE-2026-6368.

Container imageDigestPackageFixed in
library/mongo:3.6146c1fd999a6
glibc@2.23-0ubuntu11.2
no fix listed

Open the chart page →

4,393
postgresqlcloudnativeapp5.0.01 of 2See more

postgresql cloudnativeapp 5.0.0

1 of the 2 container images this version deploys carry CVE-2026-6368.

Container imageDigestPackageFixed in
bitnami/minideb:latestab4d5b45116e
glibc@2.41-12+deb13u3
no fix listed

Open the chart page →

857
risk-advisorcloudnativeapp2.0.41 of 1See more

risk-advisor cloudnativeapp 2.0.4

1 of the 1 container images this version deploys carry CVE-2026-6368.

Container imageDigestPackageFixed in
pposkrobko/risk-advisor:v1.0.0eaf260341dba
glibc@2.23-0ubuntu5
no fix listed

Open the chart page →

5,054
rundeckcloudnativeapp0.1.02 of 2See more

rundeck cloudnativeapp 0.1.0

2 of the 2 container images this version deploys carry CVE-2026-6368.

Container imageDigestPackageFixed in
library/nginx:stabled5792f71a949
glibc@2.41-12+deb13u3
no fix listed
rundeck/rundeck:3.0.16b13e8059ad72
glibc@2.23-0ubuntu10
no fix listed

Open the chart page →

23,782
seleniumcloudnativeapp1.0.81 of 1See more

selenium cloudnativeapp 1.0.8

1 of the 1 container images this version deploys carry CVE-2026-6368.

Container imageDigestPackageFixed in
selenium/hub:3.141.5902f251d48d5f
glibc@2.31-0ubuntu9.1
no fix listed

Open the chart page →

11,898
seqcloudnativeapp1.0.01 of 1See more

seq cloudnativeapp 1.0.0

1 of the 1 container images this version deploys carry CVE-2026-6368.

Container imageDigestPackageFixed in
datalust/seq:5.0.832-pre9c731bb207a6
glibc@2.23-0ubuntu10
no fix listed

Open the chart page →

10,570
spark-history-servercloudnativeapp1.0.01 of 3See more

spark-history-server cloudnativeapp 1.0.0

1 of the 3 container images this version deploys carry CVE-2026-6368.

Container imageDigestPackageFixed in
lightbend/curl:7.47.0b0c9894ac8dd
glibc@2.23-0ubuntu10
no fix listed

Open the chart page →

14,097
unificloudnativeapp0.4.21 of 1See more

unifi cloudnativeapp 0.4.2

1 of the 1 container images this version deploys carry CVE-2026-6368.

Container imageDigestPackageFixed in
jacobalberty/unifi:5.10.19c409924e2463
glibc@2.23-0ubuntu10
no fix listed

Open the chart page →

22,560
webpagetest-agentcloudnativeapp0.2.01 of 1See more

webpagetest-agent cloudnativeapp 0.2.0

1 of the 1 container images this version deploys carry CVE-2026-6368.

Container imageDigestPackageFixed in
timothyclarke/wptagent:2018-01-2322c41e5ca7e2
glibc@2.23-0ubuntu9
no fix listed

Open the chart page →

137,688
robot-shopcloud-native-toolkit1.1.11 of 12See more

robot-shop cloud-native-toolkit 1.1.1

1 of the 12 container images this version deploys carry CVE-2026-6368.

Container imageDigestPackageFixed in
robotshop/rs-mongodb:latest119b545823cd
glibc@2.31-0ubuntu9.2
no fix listed

Open the chart page →

29,653
phpmyadmincloudpirates-phpmyadmin0.1.01 of 1See more

phpmyadmin cloudpirates-phpmyadmin 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-6368.

Container imageDigestPackageFixed in
library/phpmyadmin:5.2.3-apacheadc486045303
glibc@2.41-12+deb13u4
no fix listed

Open the chart page →

2,209
cloudpremcloudprem0.0.0-build.00306ba7288bb8d46dd8c6190af79ef5b6fbdbad2 of 6See more

cloudprem cloudprem 0.0.0-build.00306ba7288bb8d46dd8c6190af79ef5b6fbdbad

2 of the 6 container images this version deploys carry CVE-2026-6368.

Container imageDigestPackageFixed in
ghcr.io/formancehq/console:console-on.v1.1.1a4d32c2f68b3
glibc@2.36-9+deb12u10
no fix listed
ghcr.io/formancehq/membership:v1.11.024a0113d5fb0
glibc@2.35-0ubuntu3.10
2.35-0ubuntu3.15

Open the chart page →

18,459
cloudlaunchcloudve0.6.01 of 5See more

cloudlaunch cloudve 0.6.0

1 of the 5 container images this version deploys carry CVE-2026-6368.

Container imageDigestPackageFixed in
cloudve/cloudlaunch-server:latest4a3d7fae90bb
glibc@2.31-0ubuntu9.2
no fix listed

Open the chart page →

12,571
cloudlaunch-servercloudve0.2.02 of 5See more

cloudlaunch-server cloudve 0.2.0

2 of the 5 container images this version deploys carry CVE-2026-6368.

Container imageDigestPackageFixed in
bitnami/minideb:latestab4d5b45116e
glibc@2.41-12+deb13u3
no fix listed
cloudve/cloudlaunch-server:latest4a3d7fae90bb
glibc@2.31-0ubuntu9.2
no fix listed

Open the chart page →

12,295
cloudlaunchservercloudve0.6.01 of 4See more

cloudlaunchserver cloudve 0.6.0

1 of the 4 container images this version deploys carry CVE-2026-6368.

Container imageDigestPackageFixed in
cloudve/cloudlaunch-server:latest4a3d7fae90bb
glibc@2.31-0ubuntu9.2
no fix listed

Open the chart page →

11,706
galaxycloudve6.8.71 of 3See more

galaxy cloudve 6.8.7

1 of the 3 container images this version deploys carry CVE-2026-6368.

Container imageDigestPackageFixed in
quay.io/galaxyproject/galaxy-min:26.1.12c324c9789f5
glibc@2.41-12+deb13u3
no fix listed

Open the chart page →

5,647
galaxy-depscloudve1.1.11 of 7See more

galaxy-deps cloudve 1.1.1

1 of the 7 container images this version deploys carry CVE-2026-6368.

Container imageDigestPackageFixed in
bitnamilegacy/kubectl:latestcd354d5b2556
glibc@2.36-9+deb12u10
no fix listed

Open the chart page →

10,625
galaxykubemancloudve2.10.11 of 7See more

galaxykubeman cloudve 2.10.1

1 of the 7 container images this version deploys carry CVE-2026-6368.

Container imageDigestPackageFixed in
galaxy/cloudman-server:lateste5c265fe9fcd
glibc@2.31-0ubuntu9.9
no fix listed

Open the chart page →

16,206
galaxy-stablecloudve2.0.02 of 5See more

galaxy-stable cloudve 2.0.0

2 of the 5 container images this version deploys carry CVE-2026-6368.

Container imageDigestPackageFixed in
galaxy/galaxy-init:v18.010267bad550e6
eglibc@2.19-0ubuntu6.14
no fix listed
galaxy/galaxy-stable:v18.018e577a626dfd
eglibc@2.19-0ubuntu6.14
no fix listed

Open the chart page →

171,911
janisterminalcloudve0.1.01 of 2See more

janisterminal cloudve 0.1.0

1 of the 2 container images this version deploys carry CVE-2026-6368.

Container imageDigestPackageFixed in
cloudve/janis-terminal:latestaf56e77ca587
glibc@2.27-3ubuntu1
no fix listed

Open the chart page →

80,967
postgresqlcloudve4.0.01 of 2See more

postgresql cloudve 4.0.0

1 of the 2 container images this version deploys carry CVE-2026-6368.

Container imageDigestPackageFixed in
bitnami/minideb:latest835e5f8392c3
glibc@2.41-12+deb13u3
no fix listed

Open the chart page →

857
pulsarcloudve0.2.01 of 2See more

pulsar cloudve 0.2.0

1 of the 2 container images this version deploys carry CVE-2026-6368.

Container imageDigestPackageFixed in
galaxy/pulsar-kubernetes:0.15.7e50a890e24c9
glibc@2.36-9+deb12u10
no fix listed

Open the chart page →

6,216
terminalmancloudve0.3.41 of 1See more

terminalman cloudve 0.3.4

1 of the 1 container images this version deploys carry CVE-2026-6368.

Container imageDigestPackageFixed in
cloudve/ttyd:latestd79c1c5881c0
glibc@2.27-3ubuntu1
no fix listed

Open the chart page →

13,201
argo-cdcluster-deploy0.3.21 of 3See more

argo-cd cluster-deploy 0.3.2

1 of the 3 container images this version deploys carry CVE-2026-6368.

Container imageDigestPackageFixed in
quay.io/argoproj/argocd:v3.5.10deb1a1c9176
glibc@2.43-2ubuntu2.3
2.43-2ubuntu2.4

Open the chart page →

3,836
authentikcluster-deploy0.2.01 of 1See more

authentik cluster-deploy 0.2.0

1 of the 1 container images this version deploys carry CVE-2026-6368.

Container imageDigestPackageFixed in
ghcr.io/goauthentik/server:2026.5.6ed120caf710c
glibc@2.41-12+deb13u3
no fix listed

Open the chart page →

2,553
chowdacluster-deploy0.2.01 of 1See more

chowda cluster-deploy 0.2.0

1 of the 1 container images this version deploys carry CVE-2026-6368.

Container imageDigestPackageFixed in
ghcr.io/wgbh-mla/chowda:main86ab9effd1a5
glibc@2.41-12+deb13u3
no fix listed

Open the chart page →

1,878

Container images carrying it

2,660 by charts deploying them

A fixed version is listed for 1 of the 3 affected packages.

Container imageDigestPackageFixed inUsed by
registry.k8s.io/dns/k8s-dns-node-cache:1.26.78b9a78d101a1
glibc@2.36-9+deb12u13
no fix listed
1
registry.k8s.io/dns/k8s-dns-node-cache:1.23.1e3dccb1a21d1
glibc@2.36-9+deb12u7
no fix listed
1
registry.k8s.io/git-sync/git-sync:v4.5.00e64aedb0d0a
glibc@2.41-12
no fix listed
1
registry.k8s.io/git-sync/git-sync:v4.1.0fd9722fd02e3
glibc@2.36-9+deb12u3
no fix listed
1
registry.k8s.io/node-problem-detector/node-problem-detector:v0.8.2052f0618e9bc2
glibc@2.36-9+deb12u8
no fix listed
1
registry.k8s.io/node-problem-detector/node-problem-detector:v1.35.1c380751accc5
glibc@2.36-9+deb12u13
no fix listed
1
registry.k8s.io/sig-storage/local-volume-provisioner:v2.8.03e2bf2eaef9f
glibc@2.36-9+deb12u10
no fix listed
1
registry.k8s.io/sig-storage/local-volume-provisioner:v2.9.0f9d65db8bda2
glibc@2.36-9+deb12u14
no fix listed
1
registry.k8s.io/sig-storage/nfsplugin:v4.13.41eb5a85180a4
glibc@2.36-9+deb12u14
no fix listed
1
registry.k8s.io/sig-storage/nfsplugin:v4.11.0ce5b5ccd5eb0
glibc@2.36-9+deb12u10
no fix listed
1

syft 1.42.1 · advisories as of 19 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.