StackRadar

CVE-2026-77117

Medium

Advisory

Published 27 Aug 2026In the index since 5 Sept 2026
Severity
Medium
worst across findings
CVSS
5.9
base score, highest
EPSS
0.004
35th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
2,590
of 17,803 indexed, latest versions
Container images
2,614
deployed by those charts
Fix available
1 of 2
affected packages

The matching OSV records carry no description.

Carried by container images the latest versions of 2,590 of 17,803 indexed charts deploy, on 2,614 images.

Affected packageAffected versionsFixed inImages
glibcdeb2.23-0ubuntu5, 2.23-0ubuntu7, 2.23-0ubuntu9, 2.23-0ubuntu10+63 more2.35-0ubuntu3.15, 2.39-0ubuntu8.9, 2.41-12+deb13u3+e6, 2.43-2ubuntu2.42,607
eglibcdeb2.19-0ubuntu6.3, 2.19-0ubuntu6.6, 2.19-0ubuntu6.13, 2.19-0ubuntu6.14+1 moreno fix listed7
OSV records
DEBIAN-CVE-2026-77117UBUNTU-CVE-2026-77117ECHO-52f8-53b9-ae20
Also known as
USN-8737-1, USN-8737-2

Charts affected

2,590 by stars
ChartLatestAffected imagesRadar Score
asya-playgroundasya1.1.31 of 1See more

asya-playground asya 1.1.3

1 of the 1 container images this version deploys carry CVE-2026-77117.

Container imageDigestPackageFixed in
localstack/localstack:3.19d278167f2b7
glibc@2.36-9+deb12u3
no fix listed

Open the chart page →

9,469
bamboo-agentatlassian-data-centerVerified publisher2.0.151 of 1See more

bamboo-agent atlassian-data-center 2.0.15

1 of the 1 container images this version deploys carry CVE-2026-77117.

Container imageDigestPackageFixed in
atlassian/bamboo-agent-base:12.1.1151c2d7274eef
glibc@2.39-0ubuntu8.8
2.39-0ubuntu8.9

Open the chart page →

1,721
auth0-operatorauth0-operator1.4.121 of 1See more

auth0-operator auth0-operator 1.4.12

1 of the 1 container images this version deploys carry CVE-2026-77117.

Container imageDigestPackageFixed in
ghcr.io/alethic/auth0-operator-image:1.4.122468990a8521
glibc@2.39-0ubuntu8.8
2.39-0ubuntu8.9

Open the chart page →

752
autopushautopushVerified publisher0.0.493 of 4See more

autopush autopush 0.0.49

3 of the 4 container images this version deploys carry CVE-2026-77117.

Container imageDigestPackageFixed in
valkey/valkey:9.1.2c123e3715db6
glibc@2.41-12+deb13u3
no fix listed
ghcr.io/wrenix/autopush-rs/autoconnect:1.84.285f93ced88b2
glibc@2.36-9+deb12u14
no fix listed
ghcr.io/wrenix/autopush-rs/autoendpoint:1.84.2d95e9a124eed
glibc@2.36-9+deb12u14
no fix listed

Open the chart page →

3,070
istio-discoveryaveshaVerified publisher1.16.01 of 1See more

istio-discovery avesha 1.16.0

1 of the 1 container images this version deploys carry CVE-2026-77117.

Container imageDigestPackageFixed in
istio/pilot:1.16.0ac0284d75ec9
glibc@2.35-0ubuntu3.1
2.35-0ubuntu3.15

Open the chart page →

6,970
webappavzi-webapp0.1.01 of 1See more

webapp avzi-webapp 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-77117.

Container imageDigestPackageFixed in
avzini/web-app:latestf40b30210ed0
glibc@2.36-9+deb12u3
no fix listed

Open the chart page →

6,296
nas-appsawesomeVerified publisher2.0.01 of 8See more

nas-apps awesome 2.0.0

1 of the 8 container images this version deploys carry CVE-2026-77117.

Container imageDigestPackageFixed in
library/nginx:latest05b8cb60c354
glibc@2.41-12+deb13u3
no fix listed

Open the chart page →

7,209
aws9helmaws9helm0.1.04 of 4See more

aws9helm aws9helm 0.1.0

4 of the 4 container images this version deploys carry CVE-2026-77117.

Container imageDigestPackageFixed in
kuzwolka/aws9:main1ad759b961b1
glibc@2.36-9+deb12u10
no fix listed
kuzwolka/aws9:news3e8880fbbb96
glibc@2.36-9+deb12u10
no fix listed
kuzwolka/aws9:blog4a7707410bf1
glibc@2.36-9+deb12u10
no fix listed
kuzwolka/aws9:shop84a9d9766345
glibc@2.36-9+deb12u10
no fix listed

Open the chart page →

18,336
aws-web-service-proxifiedaws-web-service-proxified1.8.01 of 2See more

aws-web-service-proxified aws-web-service-proxified 1.8.0

1 of the 2 container images this version deploys carry CVE-2026-77117.

Container imageDigestPackageFixed in
library/httpd:latest979c38c2228d
glibc@2.41-12+deb13u3
no fix listed

Open the chart page →

3,062
azp-agentazp-agent1.2.01 of 1See more

azp-agent azp-agent 1.2.0

1 of the 1 container images this version deploys carry CVE-2026-77117.

Container imageDigestPackageFixed in
cheveo/azp-agent:1.0.282240f890884
glibc@2.35-0ubuntu3.9
2.35-0ubuntu3.15

Open the chart page →

3,323
azure-voteazure-sample0.1.11 of 2See more

azure-vote azure-sample 0.1.1

1 of the 2 container images this version deploys carry CVE-2026-77117.

Container imageDigestPackageFixed in
library/redis:latest298e5b3bc566
glibc@2.41-12+deb13u3
no fix listed

Open the chart page →

5,274
ragflowbaboulinet0.1.12 of 5See more

ragflow baboulinet 0.1.1

2 of the 5 container images this version deploys carry CVE-2026-77117.

Container imageDigestPackageFixed in
infiniflow/infinity:v0.7.0992c87a68612
glibc@2.35-0ubuntu3.13
2.35-0ubuntu3.15
valkey/valkey:83fbd2e3e4b6e
glibc@2.41-12+deb13u3
no fix listed

Open the chart page →

6,071
backstage-pyactionsbackstage-pyactionsVerified publisher0.1.01 of 1See more

backstage-pyactions backstage-pyactions 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-77117.

Container imageDigestPackageFixed in
mawad98/backstage-pyactions:demo99422c56a274
glibc@2.41-12+deb13u2
no fix listed

Open the chart page →

2,780
basic-auth-s3-nginxbasic-auth-s3-nginxVerified publisher1.0.01 of 1See more

basic-auth-s3-nginx basic-auth-s3-nginx 1.0.0

1 of the 1 container images this version deploys carry CVE-2026-77117.

Container imageDigestPackageFixed in
dachichang/basic-auth-s3-nginx:1.0.07ccac90a935e
glibc@2.36-9+deb12u3
no fix listed

Open the chart page →

6,296
bookinfobasictechno0.1.03 of 6See more

bookinfo basictechno 0.1.0

3 of the 6 container images this version deploys carry CVE-2026-77117.

Container imageDigestPackageFixed in
istio/examples-bookinfo-reviews-v1:1.17.0b8f16a765eea
glibc@2.31-0ubuntu9.9
no fix listed
istio/examples-bookinfo-reviews-v2:1.17.072f25a55f078
glibc@2.31-0ubuntu9.9
no fix listed
istio/examples-bookinfo-reviews-v3:1.17.08f92fc1b6592
glibc@2.31-0ubuntu9.9
no fix listed

Open the chart page →

20,856
my-nginx-appbassant-nginx-app0.1.01 of 1See more

my-nginx-app bassant-nginx-app 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-77117.

Container imageDigestPackageFixed in
library/nginx:stabled5792f71a949
glibc@2.41-12+deb13u3
no fix listed

Open the chart page →

1,879
mealiebdclark-helm-chartsVerified publisher0.1.151 of 1See more

mealie bdclark-helm-charts 0.1.15

1 of the 1 container images this version deploys carry CVE-2026-77117.

Container imageDigestPackageFixed in
ghcr.io/mealie-recipes/mealie:v3.25.16066c29eca95
glibc@2.41-12+deb13u2
no fix listed

Open the chart page →

4,091
wyoming-piperbdclark-helm-chartsVerified publisher0.1.41 of 1See more

wyoming-piper bdclark-helm-charts 0.1.4

1 of the 1 container images this version deploys carry CVE-2026-77117.

Container imageDigestPackageFixed in
rhasspy/wyoming-piper:2.5.27d39aafac409
glibc@2.41-12+deb13u3
no fix listed

Open the chart page →

1,229
pangolinbdcode0.14.11 of 1See more

pangolin bdcode 0.14.1

1 of the 1 container images this version deploys carry CVE-2026-77117.

Container imageDigestPackageFixed in
fosrl/pangolin:latest83a55f933b4d
glibc@2.36-9+deb12u14
no fix listed

Open the chart page →

1,949
helm-samplebehnambm-helm-chart1.0.11 of 3See more

helm-sample behnambm-helm-chart 1.0.1

1 of the 3 container images this version deploys carry CVE-2026-77117.

Container imageDigestPackageFixed in
library/redis:771da9275c5f3
glibc@2.36-9+deb12u14
no fix listed

Open the chart page →

2,775
pagesberrutig-pages1.0.02 of 3See more

pages berrutig-pages 1.0.0

2 of the 3 container images this version deploys carry CVE-2026-77117.

Container imageDigestPackageFixed in
dellcloud/pages:monitor6ba7b22caacd
glibc@2.31-0ubuntu9.1
no fix listed
flyway/flyway:6.4.422d97ceb0c47
glibc@2.27-3ubuntu1
no fix listed

Open the chart page →

20,261
algorand-participationbiatec-repoVerified publisher4.4.11 of 1See more

algorand-participation biatec-repo 4.4.1

1 of the 1 container images this version deploys carry CVE-2026-77117.

Container imageDigestPackageFixed in
scholtz2/algorand-participation-mainnet-extended:4.4.1-stable5aaa5d4ab8b8
glibc@2.35-0ubuntu3.8
2.35-0ubuntu3.15

Open the chart page →

7,392
algorand-relaybiatec-repoVerified publisher4.4.11 of 1See more

algorand-relay biatec-repo 4.4.1

1 of the 1 container images this version deploys carry CVE-2026-77117.

Container imageDigestPackageFixed in
scholtz2/algorand-relay-mainnet:4.4.1-stablee9af7d8ff6bb
glibc@2.39-0ubuntu8.6
2.39-0ubuntu8.9

Open the chart page →

5,263
mx-nodebicarus-labs0.1.01 of 1See more

mx-node bicarus-labs 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-77117.

Container imageDigestPackageFixed in
bicarus/elrond-rosetta:v1.3.50.0b1dab0721e1c
glibc@2.31-0ubuntu9.9
no fix listed

Open the chart page →

70,424
mx-notifierbicarus-labs1.1.91 of 1See more

mx-notifier bicarus-labs 1.1.9

1 of the 1 container images this version deploys carry CVE-2026-77117.

Container imageDigestPackageFixed in
bicarus/mx-notifier:1.1.8bed688d16762
glibc@2.31-0ubuntu9.9
no fix listed

Open the chart page →

3,776
huebigdata-chartsVerified publisher1.0.41 of 2See more

hue bigdata-charts 1.0.4

1 of the 2 container images this version deploys carry CVE-2026-77117.

Container imageDigestPackageFixed in
gethue/hue:4.10.05702b2c37ff9
glibc@2.27-3ubuntu1.4
no fix listed

Open the chart page →

83,011
bitpokebitpokeVerified publisher1.8.191 of 1See more

bitpoke bitpoke 1.8.19

1 of the 1 container images this version deploys carry CVE-2026-77117.

Container imageDigestPackageFixed in
gcr.io/press-labs-public/dashboard:1.8.19b88f88070fb0
glibc@2.36-9+deb12u10
no fix listed

Open the chart page →

2,349
sm-operatorbitwarden2.0.31 of 1See more

sm-operator bitwarden 2.0.3

1 of the 1 container images this version deploys carry CVE-2026-77117.

Container imageDigestPackageFixed in
ghcr.io/bitwarden/sm-operator:2.1.0846624161f32
glibc@2.36-9+deb12u14
no fix listed

Open the chart page →

546
baserowblackbird-cloudVerified publisher1.0.171 of 6See more

baserow blackbird-cloud 1.0.17

1 of the 6 container images this version deploys carry CVE-2026-77117.

Container imageDigestPackageFixed in
baserow/backend:1.31.1e0b3c8130b91
glibc@2.36-9+deb12u9
no fix listed

Open the chart page →

10,256
bdbablackduck2026.6.36 of 9See more

bdba blackduck 2026.6.3

6 of the 9 container images this version deploys carry CVE-2026-77117.

Container imageDigestPackageFixed in
blackducksoftware/bdba-fluentd:2026.6.3c14bbbf45536
glibc@2.41-12+deb13u3
no fix listed
blackducksoftware/bdba-frontend:2026.6.3b10eaea94fd3
glibc@2.41-12+deb13u3
no fix listed
fluent/fluent-bit:4.2.6a52221a2a3eb
glibc@2.41-12+deb13u3
no fix listed
library/memcached:1.6.42-trixiee2a8683c7fbb
glibc@2.41-12+deb13u3
no fix listed
library/postgres:15.18-bookworme8db9bd3e9e1
glibc@2.36-9+deb12u14
no fix listed
library/rabbitmq:4.2.87561d672fae4
glibc@2.39-0ubuntu8.7
2.39-0ubuntu8.9

Open the chart page →

9,916
firehoseblip-firehoseVerified publisher0.0.181 of 11See more

firehose blip-firehose 0.0.18

1 of the 11 container images this version deploys carry CVE-2026-77117.

Container imageDigestPackageFixed in
obsidiandynamics/kafdrop:3.30.05337c9e0e2de
glibc@2.31-0ubuntu9.7
no fix listed

Open the chart page →

13,543
bluespacebluespace0.3.01 of 1See more

bluespace bluespace 0.3.0

1 of the 1 container images this version deploys carry CVE-2026-77117.

Container imageDigestPackageFixed in
library/nginx:latest05b8cb60c354
glibc@2.41-12+deb13u3
no fix listed

Open the chart page →

1,879
bnkrbnkr1.0.51 of 2See more

bnkr bnkr 1.0.5

1 of the 2 container images this version deploys carry CVE-2026-77117.

Container imageDigestPackageFixed in
engrmth/bnkr:2.1.06d8464e6f0e8
glibc@2.31-0ubuntu9.2
no fix listed

Open the chart page →

15,319
istio-bookinfobookinfo1.2.23 of 6See more

istio-bookinfo bookinfo 1.2.2

3 of the 6 container images this version deploys carry CVE-2026-77117.

Container imageDigestPackageFixed in
istio/examples-bookinfo-reviews-v1:1.15.040e8aba77c1b
glibc@2.23-0ubuntu11
no fix listed
istio/examples-bookinfo-reviews-v2:1.15.0e86d247b7ac2
glibc@2.23-0ubuntu11
no fix listed
istio/examples-bookinfo-reviews-v3:1.15.0e454cab754cf
glibc@2.23-0ubuntu11
no fix listed

Open the chart page →

19,058
colosseumbook-k8sinfra-v21.0.184 of 5See more

colosseum book-k8sinfra-v2 1.0.18

4 of the 5 container images this version deploys carry CVE-2026-77117.

Container imageDigestPackageFixed in
sysnet4admin/colosseum-agg:logbc25b152d88e
glibc@2.35-0ubuntu3.13
2.35-0ubuntu3.15
sysnet4admin/colosseum-cms:loge74b43c7f492
glibc@2.36-9+deb12u10
no fix listed
sysnet4admin/colosseum-prm:log5802bfcd7fed
glibc@2.36-9+deb12u10
no fix listed
sysnet4admin/colosseum-rwd:log74ded2d92f07
glibc@2.41-12
no fix listed

Open the chart page →

27,300
csi-driver-nfsbook-k8sinfra-v24.12.11 of 6See more

csi-driver-nfs book-k8sinfra-v2 4.12.1

1 of the 6 container images this version deploys carry CVE-2026-77117.

Container imageDigestPackageFixed in
registry.k8s.io/sig-storage/nfsplugin:v4.11.0ce5b5ccd5eb0
glibc@2.36-9+deb12u10
no fix listed

Open the chart page →

6,290
jaegerbook-k8sinfra-v23.4.02 of 5See more

jaeger book-k8sinfra-v2 3.4.0

2 of the 5 container images this version deploys carry CVE-2026-77117.

Container imageDigestPackageFixed in
jaegertracing/jaeger-cassandra-schema:1.53.0d48d6dab2c65
glibc@2.35-0ubuntu3.5
2.35-0ubuntu3.15
library/cassandra:3.11.65aa8400b4b3b
glibc@2.27-3ubuntu1.2
no fix listed

Open the chart page →

19,370
jenkinsbook-k8sinfra-v25.1.121 of 2See more

jenkins book-k8sinfra-v2 5.1.12

1 of the 2 container images this version deploys carry CVE-2026-77117.

Container imageDigestPackageFixed in
jenkins/jenkins:2.440.3-jdk17de4fea113221
glibc@2.36-9+deb12u4
no fix listed

Open the chart page →

8,351
flaresolverrbrandan-schmitz-helm-chartsVerified publisher1.4.01 of 1See more

flaresolverr brandan-schmitz-helm-charts 1.4.0

1 of the 1 container images this version deploys carry CVE-2026-77117.

Container imageDigestPackageFixed in
flaresolverr/flaresolverr:v3.5.0139dfee1c6f8
glibc@2.36-9+deb12u14
no fix listed

Open the chart page →

27,754
tenantsbrbarmex-tenant2.0.01 of 1See more

tenants brbarmex-tenant 2.0.0

1 of the 1 container images this version deploys carry CVE-2026-77117.

Container imageDigestPackageFixed in
library/nginx:latest05b8cb60c354
glibc@2.41-12+deb13u3
no fix listed

Open the chart page →

1,879
pagesbrian-pages1.0.02 of 3See more

pages brian-pages 1.0.0

2 of the 3 container images this version deploys carry CVE-2026-77117.

Container imageDigestPackageFixed in
dellcloud/pages:monitor6ba7b22caacd
glibc@2.31-0ubuntu9.1
no fix listed
flyway/flyway:6.4.422d97ceb0c47
glibc@2.27-3ubuntu1
no fix listed

Open the chart page →

20,261
pagesbrixton-mayuribhavsar23-pages1.0.02 of 3See more

pages brixton-mayuribhavsar23-pages 1.0.0

2 of the 3 container images this version deploys carry CVE-2026-77117.

Container imageDigestPackageFixed in
dellcloud/pages:monitor6ba7b22caacd
glibc@2.31-0ubuntu9.1
no fix listed
flyway/flyway:6.4.422d97ceb0c47
glibc@2.27-3ubuntu1
no fix listed

Open the chart page →

20,261
pagesbrixton-pages1.0.02 of 3See more

pages brixton-pages 1.0.0

2 of the 3 container images this version deploys carry CVE-2026-77117.

Container imageDigestPackageFixed in
dellcloud/pages:monitor6ba7b22caacd
glibc@2.31-0ubuntu9.1
no fix listed
flyway/flyway:6.4.422d97ceb0c47
glibc@2.27-3ubuntu1
no fix listed

Open the chart page →

20,261
ombibryanalves0.4.01 of 1See more

ombi bryanalves 0.4.0

1 of the 1 container images this version deploys carry CVE-2026-77117.

Container imageDigestPackageFixed in
linuxserver/ombi:3.0.4572-ls452fbb21fb4903
glibc@2.27-3ubuntu1
no fix listed

Open the chart page →

10,796
plexbryanalves0.5.01 of 1See more

plex bryanalves 0.5.0

1 of the 1 container images this version deploys carry CVE-2026-77117.

Container imageDigestPackageFixed in
plexinc/pms-docker:1.25.4.5487-648a8f9f946ea59b96f2b
glibc@2.31-0ubuntu9.2
no fix listed

Open the chart page →

6,764
tautullibryanalves0.1.01 of 1See more

tautulli bryanalves 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-77117.

Container imageDigestPackageFixed in
tautulli/tautulli:latest670e68dd9efc
glibc@2.41-12+deb13u3
no fix listed

Open the chart page →

1,948
node-appbryopsida0.5.12 of 2See more

node-app bryopsida 0.5.1

2 of the 2 container images this version deploys carry CVE-2026-77117.

Container imageDigestPackageFixed in
library/node:ltsbe23f54a88d3
glibc@2.36-9+deb12u14
no fix listed
ghcr.io/bryopsida/k8s-dev-pod:main82d0b161161d
glibc@2.39-0ubuntu8.4
2.39-0ubuntu8.9

Open the chart page →

68,447
plexbryopsida0.2.01 of 1See more

plex bryopsida 0.2.0

1 of the 1 container images this version deploys carry CVE-2026-77117.

Container imageDigestPackageFixed in
ghcr.io/linuxserver/plex:latest7f9a1d574958
glibc@2.43-2ubuntu2.3
2.43-2ubuntu2.4

Open the chart page →

868
nginx-chartbtrepoVerified publisher0.1.01 of 1See more

nginx-chart btrepo 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-77117.

Container imageDigestPackageFixed in
library/nginx:latest05b8cb60c354
glibc@2.41-12+deb13u3
no fix listed

Open the chart page →

1,879
category-microservicebusi-adsVerified publisher1.0.02 of 2See more

category-microservice busi-ads 1.0.0

2 of the 2 container images this version deploys carry CVE-2026-77117.

Container imageDigestPackageFixed in
dellcloud/category:distributed02fc234353a9
glibc@2.31-0ubuntu9.1
no fix listed
library/mongo:latest5211c51171f5
glibc@2.39-0ubuntu8.8
2.39-0ubuntu8.9

Open the chart page →

11,974

Container images carrying it

2,614 by charts deploying them

A fixed version is listed for 1 of the 2 affected packages.

Container imageDigestPackageFixed inUsed by
registry.gitlab.com/infinitydon/registry/open5gs-aio:v2.2.2f6385712935f
glibc@2.31-0ubuntu9.2
no fix listed
1
registry.gitlab.com/school_guy/docker-typo3:13.4.30-197d868ed76185d7270d
glibc@2.36-9+deb12u14
no fix listed
1
registry.k8s.io/csi-secrets-store/driver:v1.6.1b48d7d13dd06
glibc@2.36-9+deb12u14
no fix listed
1
registry.k8s.io/dns/k8s-dns-node-cache:1.23.081a13703d6b8
glibc@2.36-9+deb12u3
no fix listed
1
registry.k8s.io/dns/k8s-dns-node-cache:1.26.78b9a78d101a1
glibc@2.36-9+deb12u13
no fix listed
1
registry.k8s.io/dns/k8s-dns-node-cache:1.23.1e3dccb1a21d1
glibc@2.36-9+deb12u7
no fix listed
1
registry.k8s.io/git-sync/git-sync:v4.5.00e64aedb0d0a
glibc@2.41-12
no fix listed
1
registry.k8s.io/git-sync/git-sync:v4.1.0fd9722fd02e3
glibc@2.36-9+deb12u3
no fix listed
1
registry.k8s.io/node-problem-detector/node-problem-detector:v0.8.2052f0618e9bc2
glibc@2.36-9+deb12u8
no fix listed
1
registry.k8s.io/node-problem-detector/node-problem-detector:v1.35.1c380751accc5
glibc@2.36-9+deb12u13
no fix listed
1
registry.k8s.io/sig-storage/local-volume-provisioner:v2.8.03e2bf2eaef9f
glibc@2.36-9+deb12u10
no fix listed
1
registry.k8s.io/sig-storage/local-volume-provisioner:v2.9.0f9d65db8bda2
glibc@2.36-9+deb12u14
no fix listed
1
registry.k8s.io/sig-storage/nfsplugin:v4.13.41eb5a85180a4
glibc@2.36-9+deb12u14
no fix listed
1
registry.k8s.io/sig-storage/nfsplugin:v4.11.0ce5b5ccd5eb0
glibc@2.36-9+deb12u10
no fix listed
1

syft 1.42.1 · advisories as of 18 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.