StackRadar

CVE-2026-77117

Medium

Advisory

Published 27 Aug 2026In the index since 5 Sept 2026
Severity
Medium
worst across findings
CVSS
5.9
base score, highest
EPSS
0.004
33rd percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
2,838
of 17,939 indexed, latest versions
Container images
2,864
deployed by those charts
Fix available
1 of 3
affected packages

The matching OSV records carry no description.

Carried by container images the latest versions of 2,838 of 17,939 indexed charts deploy, on 2,864 images.

Affected packageAffected versionsFixed inImages
glibcdeb2.23-0ubuntu5, 2.23-0ubuntu7, 2.23-0ubuntu9, 2.23-0ubuntu10+64 more2.35-0ubuntu3.15, 2.39-0ubuntu8.9, 2.41-12+deb13u3+e6, 2.43-2ubuntu2.42,699
glibc-2.44apk2.44-r1, 2.44-r4, 2.44-r6no fix listed158
eglibcdeb2.19-0ubuntu6.3, 2.19-0ubuntu6.6, 2.19-0ubuntu6.13, 2.19-0ubuntu6.14+1 moreno fix listed7
OSV records
CGA-3wqx-vm4q-p554DEBIAN-CVE-2026-77117UBUNTU-CVE-2026-77117CGA-6rxh-7rcg-6vm6CGA-86q6-jgw4-4qvqCGA-gm49-5xmv-9mwgCGA-gvr8-r35v-jwr6CGA-p9hr-458p-2fj5ECHO-52f8-53b9-ae20
Also known as
CGA-26xq-9jxj-rw6f, CGA-h2mc-94cg-jh7f, CGA-h9gc-g4cr-r6c4, CGA-hcvr-63qq-w73g, CGA-hm69-mxvx-ff6j, CGA-m5f2-g9g8-q69p, CGA-qwjw-qj9j-qrf5, CGA-xxjm-mj25-24q2, USN-8737-1, USN-8737-2

Charts affected

2,838 by stars
ChartLatestAffected imagesRadar Score

Container images carrying it

2,864 by charts deploying them

A fixed version is listed for 1 of the 3 affected packages.

Container imageDigestPackageFixed inUsed by
ciscolabs/rtsp-client:latesta7b60ec88285
glibc@2.31-0ubuntu9.9
no fix listed
3
ciscolabs/rtsp-server:latestb59fc10bb821
glibc@2.31-0ubuntu9.9
no fix listed
3
cloudve/cloudlaunch-server:latest4a3d7fae90bb
glibc@2.31-0ubuntu9.2
no fix listed
3
codeurjc/planner:v1.0800cf520c245
glibc@2.35-0ubuntu3.1
2.35-0ubuntu3.15
3
dgraph/dgraph:v21.12.03b55ea83fffe
glibc@2.31-0ubuntu9.2
no fix listed
3
dnationcloud/kubernetes-jsonnet-translator:2.0.178fed4f3c130
glibc@2.36-9+deb12u8
no fix listed
3
emberstack/kubernetes-reflector:10.0.6551dbd5880929
glibc@2.39-0ubuntu8.8
2.39-0ubuntu8.9
3
envoyproxy/envoy:v1.31.02bf7f042e396
glibc@2.35-0ubuntu3.8
2.35-0ubuntu3.15
3
envoyproxy/gateway:v1.7.5156b7d32c73b
glibc@2.41-12+deb13u3
no fix listed
3
gchq/hdfs:3.3.35ec58edbb2db
glibc@2.39-0ubuntu8.1
2.39-0ubuntu8.9
3
istio/kubectl:1.5.10dbb7726d1bf0
glibc@2.27-3ubuntu1.2
no fix listed
3
jacobalberty/unifi:v10.0.162896c0ab82d33
glibc@2.31-0ubuntu9.17
no fix listed
3
joplin/server:3.7.2:latest3f7b852959aa
glibc@2.36-9+deb12u14
no fix listed
3
library/mongo:4.2.16ca49afbcb2b
glibc@2.27-3ubuntu1
no fix listed
3
library/nginx:1.25:1.25.5a484819eb602
glibc@2.36-9+deb12u7
no fix listed
3
library/node:lts64af3819f927
glibc@2.36-9+deb12u14
no fix listed
3
library/zookeeper:3.9.57d0f24ebb67b
glibc@2.35-0ubuntu3.14
2.35-0ubuntu3.15
3
localstack/localstack:latest4abc29e923e5
glibc@2.41-12+deb13u3
no fix listed
3
mcp/grafana:latest9362bcf6aa0e
glibc@2.36-9+deb12u14
no fix listed
3
meshery/meshery:stable-latest44b64ee128fb
glibc@2.36-9+deb12u14
no fix listed
3
omecproject/cdn-video-repo:1.0.0:remote-v3d59ccb138ffb
glibc@2.23-0ubuntu10
no fix listed
3
opencloudeu/web-extensions:importer-1.0.06e8b2df6c5a4
glibc@2.36-9+deb12u9
no fix listed
3
opencsghq/postgres:15.19b98600564e07
glibc@2.41-12+deb13u3
no fix listed
3
openebs/node-disk-manager:2.1.0f6c18b0f8c8a
glibc@2.35-0ubuntu3.1
2.35-0ubuntu3.15
3
openebs/node-disk-operator:2.1.06afe2123c457
glibc@2.35-0ubuntu3.1
2.35-0ubuntu3.15
3
selenium/hub:3.141.5902f251d48d5f
glibc@2.31-0ubuntu9.1
no fix listed
3
sigp/lighthouse:latest-amd6450f66cfebb6d
glibc@2.35-0ubuntu3.13
2.35-0ubuntu3.15
3
timberio/vector:0.58.0-distroless-libc6c93dfe2554c
glibc@2.36-9+deb12u14
no fix listed
3
tykio/tyk-dashboard:v5.13.21161bd297135
glibc@2.41-12+deb13u3
no fix listed
3
tykio/tyk-gateway-ee:v5.13.250b3e4f5398a
glibc@2.41-12+deb13u3+dhi1
no fix listed
3
valkey/valkey:9.1.2:latestc123e3715db6
glibc@2.41-12+deb13u3
no fix listed
3
vaultwarden/server:1.37.3:latest1587c45feaa4
glibc@2.41-12+deb13u3
no fix listed
3
vaultwarden/server:1.37.1ebdfe70701c6
glibc@2.41-12+deb13u3
no fix listed
3
ghcr.io/api7/adc:0.27.1f65f53dd9668
glibc@2.36-9+deb12u14
no fix listed
3
ghcr.io/bat-bs/bitnami-pgvector:pg1619ebe07b4daf
glibc@2.36-9+deb12u9
no fix listed
3
ghcr.io/conductionnl/gateway-ui:stag6a5594b7b32c
glibc@2.36-9
no fix listed
3
ghcr.io/flyteorg/flyte-connectors:py3.12-v2.3.6896fc7b18b1b
glibc@2.36-9+deb12u14
no fix listed
3
ghcr.io/huggingface/text-embeddings-inference:cpu-1.50502794a4d86
glibc@2.36-9+deb12u7
no fix listed
3
ghcr.io/paperless-ngx/paperless-ngx:3.2.15fa76604a81d
glibc@2.41-12+deb13u4
no fix listed
3
ghcr.io/quenchworks/images/alertmanagerd1e7285865d8
glibc-2.44@2.44-r6
no fix listed
3
ghcr.io/quenchworks/images/caddy8e89a25b3251
glibc-2.44@2.44-r6
no fix listed
3
ghcr.io/quenchworks/images/keycloakff8d99f4b5f0
glibc-2.44@2.44-r6
no fix listed
3
ghcr.io/quenchworks/images/kubectl4033ac5e5f35
glibc-2.44@2.44-r6
no fix listed
3
ghcr.io/quenchworks/images/loki42ab0d3d3b27
glibc-2.44@2.44-r6
no fix listed
3
ghcr.io/quenchworks/images/mariadb147848cf3b18
glibc-2.44@2.44-r6
no fix listed
3
ghcr.io/quenchworks/images/mysqle5659a7b362f
glibc-2.44@2.44-r6
no fix listed
3
ghcr.io/quenchworks/images/otel-collector19e461bc40f0
glibc-2.44@2.44-r6
no fix listed
3
ghcr.io/quenchworks/images/seaweedfsbe19f91d040b
glibc-2.44@2.44-r6
no fix listed
3
ghcr.io/quenchworks/images/tempo8a879434b173
glibc-2.44@2.44-r6
no fix listed
3
ghcr.io/quenchworks/images/vector35a18e31fafe
glibc-2.44@2.44-r6
no fix listed
3

syft 1.42.1 · advisories as of 28 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.