StackRadar

CVE-2026-77117

Medium

Advisory

Published 27 Aug 2026In the index since 5 Sept 2026
Severity
Medium
worst across findings
CVSS
5.9
base score, highest
EPSS
0.004
33rd percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
2,838
of 17,939 indexed, latest versions
Container images
2,864
deployed by those charts
Fix available
1 of 3
affected packages

The matching OSV records carry no description.

Carried by container images the latest versions of 2,838 of 17,939 indexed charts deploy, on 2,864 images.

Affected packageAffected versionsFixed inImages
glibcdeb2.23-0ubuntu5, 2.23-0ubuntu7, 2.23-0ubuntu9, 2.23-0ubuntu10+64 more2.35-0ubuntu3.15, 2.39-0ubuntu8.9, 2.41-12+deb13u3+e6, 2.43-2ubuntu2.42,699
glibc-2.44apk2.44-r1, 2.44-r4, 2.44-r6no fix listed158
eglibcdeb2.19-0ubuntu6.3, 2.19-0ubuntu6.6, 2.19-0ubuntu6.13, 2.19-0ubuntu6.14+1 moreno fix listed7
OSV records
CGA-3wqx-vm4q-p554DEBIAN-CVE-2026-77117UBUNTU-CVE-2026-77117CGA-6rxh-7rcg-6vm6CGA-86q6-jgw4-4qvqCGA-gm49-5xmv-9mwgCGA-gvr8-r35v-jwr6CGA-p9hr-458p-2fj5ECHO-52f8-53b9-ae20
Also known as
CGA-26xq-9jxj-rw6f, CGA-h2mc-94cg-jh7f, CGA-h9gc-g4cr-r6c4, CGA-hcvr-63qq-w73g, CGA-hm69-mxvx-ff6j, CGA-m5f2-g9g8-q69p, CGA-qwjw-qj9j-qrf5, CGA-xxjm-mj25-24q2, USN-8737-1, USN-8737-2

Charts affected

2,838 by stars
ChartLatestAffected imagesRadar Score

Container images carrying it

2,864 by charts deploying them

A fixed version is listed for 1 of the 3 affected packages.

Container imageDigestPackageFixed inUsed by
ghcr.io/smarter-project/hydra/crismux:main673d5229df1f
glibc@2.36-9+deb12u13
no fix listed
3
ghcr.io/voyagermesh/crd-manager:v0.3.0e67f14e5c853
glibc@2.36-9+deb12u14
no fix listed
3
quay.io/devtron/ai-agent:0.0.16545dac92173
glibc@2.36-9+deb12u8
no fix listed
3
quay.io/devtron/argocd-cert-refresh:v102b6db27eaf3d
glibc@2.35-0ubuntu3.1
2.35-0ubuntu3.15
3
quay.io/devtron/casbin:172ef62b-9450794d-464-394225bf041aacadd
glibc@2.39-0ubuntu8.3
2.39-0ubuntu8.9
3
quay.io/devtron/chart-sync:94237c18-1021-3941960566529446a
glibc@2.39-0ubuntu8.3
2.39-0ubuntu8.9
3
quay.io/devtron/chart-sync:3b3d6d0e-836-39296721b5c9634d4
glibc@2.39-0ubuntu8.3
2.39-0ubuntu8.9
3
quay.io/devtron/devtron:9450794d-930-394159795f3f9f031
glibc@2.39-0ubuntu8.3
2.39-0ubuntu8.9
3
quay.io/devtron/google-chat-alert-manager:v2.0.239f2c6e0af38
glibc@2.31-0ubuntu9.7
no fix listed
3
quay.io/devtron/hyperion:0874dcaf-280-3928701d5d8c4cecb
glibc@2.39-0ubuntu8.3
2.39-0ubuntu8.9
3
quay.io/devtron/inception:7beef376-948-313784c3b91bebd3d
glibc@2.23-0ubuntu11.3
no fix listed
3
quay.io/devtron/k8s-utils:807ca3c2-488-14005f296c2ec5db7
glibc@2.35-0ubuntu3.1
2.35-0ubuntu3.15
3
quay.io/devtron/kubelink:94237c18-314-394179d25865295af
glibc@2.39-0ubuntu8.3
2.39-0ubuntu8.9
3
quay.io/devtron/kubelink:09867a9c-564-39289ea6dd1e4ce71
glibc@2.39-0ubuntu8.3
2.39-0ubuntu8.9
3
quay.io/devtron/notifier:9804331c-372-39294709c7da19c5a
glibc@2.36-9+deb12u13
no fix listed
3
actualbudget/actual-server:26.9.0552beab3dec8
glibc@2.36-9+deb12u14
no fix listed
2
alazidis/kube-netlag:1.1.00e8c84152201
glibc@2.39-0ubuntu8.7
2.39-0ubuntu8.9
2
alexandreroman/hello:latest4b79473442be
glibc@2.27-3ubuntu1
no fix listed
2
apache/druid:37.0.00116fb802786
glibc@2.36-9+deb12u13
no fix listed
2
apache/iotdb:0.13.3-nodeafa47bf1692a
glibc@2.31-0ubuntu9.9
no fix listed
2
apache/nifi-registry:1.26.07cdfd8deec92
glibc@2.35-0ubuntu3.7
2.35-0ubuntu3.15
2
apache/rocketmq:5.4.0319cd8a81ed1
glibc@2.39-0ubuntu8.7
2.39-0ubuntu8.9
2
apache/tika:2.9.0.092d055a84e9e
glibc@2.35-0ubuntu3.1
2.35-0ubuntu3.15
2
apache/tika:2.9.2.1-fullae0b86d3c4d0
glibc@2.39-0ubuntu8.1
2.39-0ubuntu8.9
2
bitnamilegacy/elasticsearch:9.1.2-debian-12-r000176a47afa0
glibc@2.36-9+deb12u10
no fix listed
2
bitnamilegacy/mariadb:11.4.5-debian-12-r933ce23601fc9
glibc@2.36-9+deb12u10
no fix listed
2
bitnamilegacy/postgresql:16.4.0-debian-12-r1494bc968141e7
glibc@2.36-9+deb12u8
no fix listed
2
bitnamilegacy/redis:latest5927ff3702df
glibc@2.36-9+deb12u10
no fix listed
2
bitnami/minideb:latest3e8d78d6682d
glibc@2.41-12+deb13u4
no fix listed
2
blockstack/stacks-core:3.2.0.0.0f79944317326
glibc@2.36-9+deb12u10
no fix listed
2
cagriekin/pg-ha:2.0.2-pg186559f9b476e1
glibc@2.41-12+deb13u4
no fix listed
2
cfssl/cfssl:latest:v1.6.5c9018c2ddf0b
glibc@2.36-9+deb12u4
no fix listed
2
chromedp/headless-shell:148.0.7778.97313ed7255ae1
glibc@2.41-12+deb13u2
no fix listed
2
clickhouse/clickhouse-server:24.2ed9640bfff07
glibc@2.31-0ubuntu9.15
no fix listed
2
cloudflare/cloudflared:2026.9.3072c067d25cc
glibc@2.41-12+deb13u4
no fix listed
2
cloudflare/cloudflared:2026.6.16d91c121b803
glibc@2.41-12+deb13u3
no fix listed
2
csiplugin/csi-neonsan:v1.2.21fa83d45417f
glibc@2.23-0ubuntu11.3
no fix listed
2
dagster/user-code-example:1.13.24206c454797f7
glibc@2.41-12+deb13u4
no fix listed
2
datagrok/grok_connect:latestf5876d3aebb8
glibc@2.35-0ubuntu3.14
2.35-0ubuntu3.15
2
dbeaver/cloudbeaver:21.3.00c0985098263
glibc@2.31-0ubuntu9.2
no fix listed
2
deepflowce/clickhouse-server:22.8.6.71bc1882f75c18
glibc@2.31-0ubuntu9.9
no fix listed
2
dzikoysk/reposilite:3.6.390de4c8e6c0e
glibc@2.39-0ubuntu8.8
2.39-0ubuntu8.9
2
envoyproxy/gateway:v1.9.10049bcb384c5
glibc@2.41-12+deb13u3
no fix listed
2
eqalpha/keydb:latest6537505c4235
glibc@2.31-0ubuntu9.12
no fix listed
2
eqalpha/keydb:x86_64_v6.3.4eceb1806730c
glibc@2.31-0ubuntu9.12
no fix listed
2
fireflyiii/core:version-6.5.9fe4ecec4c2ba
glibc@2.41-12+deb13u2
no fix listed
2
fireflyiii/data-importer:version-2.2.3ab52bf932546
glibc@2.41-12+deb13u2
no fix listed
2
flashcatcloud/categraf:latest42e6ab16472e
glibc@2.39-0ubuntu8.7
2.39-0ubuntu8.9
2
freeradius/freeradius-server:3.0.2121c8bfa904d8
glibc@2.27-3ubuntu1
no fix listed
2
freikin/dawarich:1.15.2e58334ca5697
glibc@2.41-12+deb13u4
no fix listed
2

syft 1.42.1 · advisories as of 28 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.