StackRadar

CVE-2026-6368

Low

Advisory

Published 10 Aug 2026In the index since 5 Sept 2026
Severity
Low
worst across findings
CVSS
2.1
base score, highest
EPSS
0.001
1st percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
2,586
of 17,797 indexed, latest versions
Container images
2,623
deployed by those charts
Fix available
1 of 3
affected packages

CVE-2026-6368 affecting package glibc 2.38-21

Carried by container images the latest versions of 2,586 of 17,797 indexed charts deploy, on 2,623 images.

Affected packageAffected versionsFixed inImages
glibcdeb2.23-0ubuntu5, 2.23-0ubuntu7, 2.23-0ubuntu9, 2.23-0ubuntu10+63 more2.35-0ubuntu3.15, 2.39-0ubuntu8.9, 2.41-12+deb13u3+e3, 2.43-2ubuntu2.42,593
glibcrpm2.38-16.azl3, 2.38-18.azl3, 2.38-20.azl3no fix listed23
eglibcdeb2.19-0ubuntu6.3, 2.19-0ubuntu6.6, 2.19-0ubuntu6.13, 2.19-0ubuntu6.14+1 moreno fix listed7
OSV records
DEBIAN-CVE-2026-6368UBUNTU-CVE-2026-6368AZL-95495ECHO-1dea-800f-5685
Also known as
USN-8737-1, USN-8737-2

Charts affected

2,586 by stars
ChartLatestAffected imagesRadar Score

Container images carrying it

2,623 by charts deploying them

A fixed version is listed for 1 of the 3 affected packages.

Container imageDigestPackageFixed inUsed by
aktosecurity/data-ingestion-service:1.4.946ed5bcb04b2
glibc@2.43-2ubuntu2
2.43-2ubuntu2.4
1
aktosecurity/data-ingestion-service:1.5.35d4eab1c36b9
glibc@2.43-2ubuntu2.3
2.43-2ubuntu2.4
1
aktosecurity/mini-runtime:1.72.15498e3e35ecc2
glibc@2.43-2ubuntu2.3
2.43-2ubuntu2.4
1
alazidis/stornx:1.1.1602d4f7f090c
glibc@2.36-9+deb12u13
no fix listed
1
allegroai/clearml:2.0.0-613713ae38f7daf
glibc@2.36-9+deb12u9
no fix listed
1
allegroai/clearml-agent-k8s-base:1.24-21772827a01bb5
glibc@2.27-3ubuntu1.6
no fix listed
1
altinity/clickhouse-server:25.3.6.10034.altinitystable3396b15c51a2
glibc@2.35-0ubuntu3.10
2.35-0ubuntu3.15
1
andrcuns/dependabot-gitlab:7.7.0-alpha.143060f159f4c
glibc@2.39-0ubuntu8.8
2.39-0ubuntu8.9
1
andrewgaul/s3proxy:sha-85b0f987dc1d34174a5
glibc@2.39-0ubuntu8.3
2.39-0ubuntu8.9
1
andrewgolikov55/intel-gpu-exporter:latestfcc001b61c0e
glibc@2.35-0ubuntu3.4
2.35-0ubuntu3.15
1
andrewmackrodt/firefox-x11:142.0.1-r133f9080470c9
glibc@2.35-0ubuntu3.10
2.35-0ubuntu3.15
1
anguda/ant-media:2.5c435285fc241
glibc@2.31-0ubuntu9.9
no fix listed
1
ankane/pgvector:v0.5.1d3a9d8ac27bb
glibc@2.36-9+deb12u3
no fix listed
1
antrea/antrea-agent-ubuntu:v2.7.0c10bc45c6272
glibc@2.39-0ubuntu8.8
2.39-0ubuntu8.9
1
antrea/antrea-controller-ubuntu:v2.7.0f1373d39217c
glibc@2.39-0ubuntu8.8
2.39-0ubuntu8.9
1
antrea/antrea-ui-frontend:v0.8.0ee9686bcefb8
glibc@2.41-12+deb13u2
no fix listed
1
antrea/flow-aggregator:v2.7.0065193e7572f
glibc@2.39-0ubuntu8.8
2.39-0ubuntu8.9
1
anujdatar/cups:25.07.01685df04a643b
glibc@2.36-9+deb12u10
no fix listed
1
apache/activemq-artemis:2.44.00305c26f19ed
glibc@2.39-0ubuntu8.6
2.39-0ubuntu8.9
1
apache/activemq-artemis:2.37.0bae523439ee3
glibc@2.39-0ubuntu8.2
2.39-0ubuntu8.9
1
apache/airflow:2.8.4-python3.964e58748b6b9
glibc@2.36-9+deb12u4
no fix listed
1
apache/airflow:2.10.2-python3.9ce90bdc3d2af
glibc@2.36-9+deb12u8
no fix listed
1
apache/airflow:2.8.1e5560ad0b86e
glibc@2.36-9+deb12u4
no fix listed
1
apache/apisix:3.16.0-ubuntu5e47692cac00
glibc@2.39-0ubuntu8.7
2.39-0ubuntu8.9
1
apache/camel-k:2.11.0d173e7efe258
glibc@2.43-2ubuntu2.3
2.43-2ubuntu2.4
1
apache/druid:29.0.10cef139b6bf1
glibc@2.36-9+deb12u4
no fix listed
1
apache/gravitino-iceberg-rest:1.3.080136ae753ee
glibc@2.35-0ubuntu3.11
2.35-0ubuntu3.15
1
apache/hertzbeat:1.8.075d48a62748f
glibc@2.39-0ubuntu8.7
2.39-0ubuntu8.9
1
apache/hertzbeat-collector:1.8.0a2bab1be574c
glibc@2.39-0ubuntu8.7
2.39-0ubuntu8.9
1
apache/iotdb:0.13.3-nodeafa47bf1692a
glibc@2.31-0ubuntu9.9
no fix listed
1
apache/nifi-registry:1.27.063b8e3e40742
glibc@2.35-0ubuntu3.8
2.35-0ubuntu3.15
1
apachepulsar/pulsar:3.1.016f9fdab3fa6
glibc@2.35-0ubuntu3.1
2.35-0ubuntu3.15
1
apachepulsar/pulsar:2.10.03b262ab7a7d9
glibc@2.31-0ubuntu9.2
no fix listed
1
apachepulsar/pulsar:3.0.79c9947de139d
glibc@2.35-0ubuntu3.8
2.35-0ubuntu3.15
1
apachepulsar/pulsar:2.9.0d056c89b7131
glibc@2.31-0ubuntu9.2
no fix listed
1
apachepulsar/pulsar:2.8.2d538416d5afe
glibc@2.31-0ubuntu9.2
no fix listed
1
apache/ranger:2.7.076c176e8a0e4
glibc@2.35-0ubuntu3.10
2.35-0ubuntu3.15
1
apache/rocketmq:5.3.0434d8398f996
glibc@2.39-0ubuntu8.2
2.39-0ubuntu8.9
1
apache/rocketmq-exporter:0.0.2c8fb51195444
glibc@2.35-0ubuntu3.6
2.35-0ubuntu3.15
1
apache/skywalking-oap-server:9.2.0133d35d2c263
glibc@2.35-0ubuntu3.1
2.35-0ubuntu3.15
1
apache/skywalking-oap-server:8.9.1b4ec8c18d079
glibc@2.31-0ubuntu9.2
no fix listed
1
apache/skywalking-ui:9.2.0295f1dc87d98
glibc@2.35-0ubuntu3.1
2.35-0ubuntu3.15
1
apache/skywalking-ui:8.9.180530f0308a5
glibc@2.31-0ubuntu9.2
no fix listed
1
apache/superset:4.0.1ab9467fd712c
glibc@2.36-9+deb12u6
no fix listed
1
apache/tika:latest-full80072bb73dd3
glibc@2.43-2ubuntu2.3
2.43-2ubuntu2.4
1
apache/tika:3.3.1.090b7fa1dc018
glibc@2.43-2ubuntu2
2.43-2ubuntu2.4
1
apache/tika:2.9.0.092d055a84e9e
glibc@2.35-0ubuntu3.1
2.35-0ubuntu3.15
1
apecloud/aperag:v0.0.0-nightly8ac9947a2c84
glibc@2.41-12
no fix listed
1
appwrite/new:1.1.96-self-hostedaf65a77db50e
glibc@2.41-12+deb13u3
no fix listed
1
archivebox/archivebox:0.7.41a5a37331091
glibc@2.36-9+deb12u14
no fix listed
1

syft 1.42.1 · advisories as of 17 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.