StackRadar

CVE-2026-77117

Medium

Advisory

Published 27 Aug 2026In the index since 5 Sept 2026
Severity
Medium
worst across findings
CVSS
5.9
base score, highest
EPSS
0.004
33rd percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
2,796
of 17,911 indexed, latest versions
Container images
2,825
deployed by those charts
Fix available
1 of 4
affected packages

The matching OSV records carry no description.

Carried by container images the latest versions of 2,796 of 17,911 indexed charts deploy, on 2,825 images.

Affected packageAffected versionsFixed inImages
glibcdeb2.23-0ubuntu5, 2.23-0ubuntu7, 2.23-0ubuntu9, 2.23-0ubuntu10+63 more2.35-0ubuntu3.15, 2.39-0ubuntu8.9, 2.41-12+deb13u3+e6, 2.43-2ubuntu2.42,674
eglibcdeb2.19-0ubuntu6.3, 2.19-0ubuntu6.6, 2.19-0ubuntu6.13, 2.19-0ubuntu6.14+1 moreno fix listed7
glibc-2.44apk2.44-r1, 2.44-r4, 2.44-r5, 2.44-r6no fix listed143
glibc-2.43apk2.43-r14no fix listed1
OSV records
DEBIAN-CVE-2026-77117UBUNTU-CVE-2026-77117CGA-26xq-9jxj-rw6fCGA-3mpj-r23j-gqxpCGA-6rxh-7rcg-6vm6CGA-86q6-jgw4-4qvqCGA-gm49-5xmv-9mwgCGA-gvr8-r35v-jwr6CGA-p9hr-458p-2fj5ECHO-52f8-53b9-ae20
Also known as
CGA-58cc-vw33-fmgw, CGA-965p-4jfr-2ph7, CGA-h2mc-94cg-jh7f, CGA-h7q9-f494-wj26, CGA-h9gc-g4cr-r6c4, CGA-hcvr-63qq-w73g, CGA-hm69-mxvx-ff6j, CGA-jjr2-x4j3-gqwr, CGA-jvq4-83m5-3qqg, CGA-m5f2-g9g8-q69p, CGA-qwjw-qj9j-qrf5, CGA-xxjm-mj25-24q2, USN-8737-1, USN-8737-2

Charts affected

2,796 by stars
ChartLatestAffected imagesRadar Score
james-komposeappscodeVerified publisher0.1.03 of 4See more

james-kompose appscode 0.1.0

3 of the 4 container images this version deploys carry CVE-2026-77117.

Container imageDigestPackageFixed in
library/cassandra:4.1.37cbcec0086ac
glibc@2.35-0ubuntu3.6
2.35-0ubuntu3.15
library/rabbitmq:3.12.1-managementf020c06da226
glibc@2.35-0ubuntu3.1
2.35-0ubuntu3.15
ghcr.io/appscode/inbox-server:MailetGroup4a2824296412
glibc@2.35-0ubuntu3.6
2.35-0ubuntu3.15

Open the chart page →

18,015
kubedb-autoscalerappscodeVerified publisher0.51.01 of 1See more

kubedb-autoscaler appscode 0.51.0

1 of the 1 container images this version deploys carry CVE-2026-77117.

Container imageDigestPackageFixed in
ghcr.io/kubedb/kubedb-autoscaler:v0.51.05d1182ac21f0
glibc@2.36-9+deb12u14
no fix listed

Open the chart page →

575
kubedb-certifiedappscodeVerified publisher2026.7.105 of 8See more

kubedb-certified appscode 2026.7.10

5 of the 8 container images this version deploys carry CVE-2026-77117.

Container imageDigestPackageFixed in
ghcr.io/kubedb/kubedb-autoscaler:v0.51.05d1182ac21f0
glibc@2.36-9+deb12u14
no fix listed
ghcr.io/kubedb/kubedb-crd-manager:v0.21.09506a6cb98d1
glibc@2.36-9+deb12u14
no fix listed
ghcr.io/kubedb/kubedb-ops-manager:v0.53.06d4c9fe66e4f
glibc@2.36-9+deb12u14
no fix listed
ghcr.io/kubedb/kubedb-provisioner:v0.66.0e7041c3b41e7
glibc@2.36-9+deb12u14
no fix listed
ghcr.io/kubedb/kubedb-webhook-server:v0.42.0f7dcade6523b
glibc@2.36-9+deb12u14
no fix listed

Open the chart page →

4,725
kubedb-crd-managerappscodeVerified publisher0.21.01 of 1See more

kubedb-crd-manager appscode 0.21.0

1 of the 1 container images this version deploys carry CVE-2026-77117.

Container imageDigestPackageFixed in
ghcr.io/kubedb/kubedb-crd-manager:v0.21.09506a6cb98d1
glibc@2.36-9+deb12u14
no fix listed

Open the chart page →

559
kubedb-gitopsappscodeVerified publisher0.14.01 of 1See more

kubedb-gitops appscode 0.14.0

1 of the 1 container images this version deploys carry CVE-2026-77117.

Container imageDigestPackageFixed in
ghcr.io/kubedb/kubedb-gitops:v0.14.0c743f8d7a199
glibc@2.36-9+deb12u14
no fix listed

Open the chart page →

519
kubedb-oneappscodeVerified publisher2023.12.281 of 10See more

kubedb-one appscode 2023.12.28

1 of the 10 container images this version deploys carry CVE-2026-77117.

Container imageDigestPackageFixed in
ghcr.io/kubedb/kubedb-autoscaler:v0.25.0df6b11907d33
glibc@2.36-9+deb12u3
no fix listed

Open the chart page →

15,270
kubedb-ops-managerappscodeVerified publisher0.53.01 of 1See more

kubedb-ops-manager appscode 0.53.0

1 of the 1 container images this version deploys carry CVE-2026-77117.

Container imageDigestPackageFixed in
ghcr.io/kubedb/kubedb-ops-manager:v0.53.06d4c9fe66e4f
glibc@2.36-9+deb12u14
no fix listed

Open the chart page →

753
kubedb-webhook-serverappscodeVerified publisher0.42.01 of 1See more

kubedb-webhook-server appscode 0.42.0

1 of the 1 container images this version deploys carry CVE-2026-77117.

Container imageDigestPackageFixed in
ghcr.io/kubedb/kubedb-webhook-server:v0.42.0e0f4431c4704
glibc@2.36-9+deb12u14
no fix listed

Open the chart page →

483
kubevaultappscodeVerified publisher2026.8.71 of 2See more

kubevault appscode 2026.8.7

1 of the 2 container images this version deploys carry CVE-2026-77117.

Container imageDigestPackageFixed in
ghcr.io/kubevault/vault-operator:v0.25.0c8e042b5cee8
glibc@2.36-9+deb12u14
no fix listed

Open the chart page →

866
kubevault-certifiedappscodeVerified publisher2026.2.271 of 1See more

kubevault-certified appscode 2026.2.27

1 of the 1 container images this version deploys carry CVE-2026-77117.

Container imageDigestPackageFixed in
ghcr.io/kubevault/vault-operator:v0.24.00087cb49616f
glibc@2.36-9+deb12u13
no fix listed

Open the chart page →

1,187
kubevault-operatorappscodeVerified publisher0.25.01 of 1See more

kubevault-operator appscode 0.25.0

1 of the 1 container images this version deploys carry CVE-2026-77117.

Container imageDigestPackageFixed in
ghcr.io/kubevault/vault-operator:v0.25.0c8e042b5cee8
glibc@2.36-9+deb12u14
no fix listed

Open the chart page →

560
kubevault-webhook-serverappscodeVerified publisher0.25.01 of 2See more

kubevault-webhook-server appscode 0.25.0

1 of the 2 container images this version deploys carry CVE-2026-77117.

Container imageDigestPackageFixed in
ghcr.io/kubevault/vault-operator:v0.25.0c8e042b5cee8
glibc@2.36-9+deb12u14
no fix listed

Open the chart page →

866
marketplace-apiappscodeVerified publisher2026.9.111 of 1See more

marketplace-api appscode 2026.9.11

1 of the 1 container images this version deploys carry CVE-2026-77117.

Container imageDigestPackageFixed in
ghcr.io/appscode/b3:v2026.9.1139076a89c36b
glibc@2.36-9+deb12u14
no fix listed

Open the chart page →

2,577
platform-apiappscodeVerified publisher2026.9.112 of 3See more

platform-api appscode 2026.9.11

2 of the 3 container images this version deploys carry CVE-2026-77117.

Container imageDigestPackageFixed in
ghcr.io/appscode/b3:v2026.9.1139076a89c36b
glibc@2.36-9+deb12u14
no fix listed
ghcr.io/appscode/gotenberg:8.25f9104080d9a7
glibc@2.41-12
no fix listed

Open the chart page →

39,390
s3proxyappscodeVerified publisher2026.9.111 of 1See more

s3proxy appscode 2026.9.11

1 of the 1 container images this version deploys carry CVE-2026-77117.

Container imageDigestPackageFixed in
ghcr.io/appscode/s3proxy:sha-a82ca6820518335f9f9
glibc@2.35-0ubuntu3.8
2.35-0ubuntu3.15

Open the chart page →

3,472
service-gatewayappscodeVerified publisher2026.9.112 of 3See more

service-gateway appscode 2026.9.11

2 of the 3 container images this version deploys carry CVE-2026-77117.

Container imageDigestPackageFixed in
ghcr.io/voyagermesh/crd-manager:v0.3.0e67f14e5c853
glibc@2.36-9+deb12u14
no fix listed
ghcr.io/voyagermesh/gateway:v1.8.24237fd16a3cb
glibc@2.41-12+deb13u3
no fix listed

Open the chart page →

2,256
service-vaultappscodeVerified publisher2026.9.111 of 2See more

service-vault appscode 2026.9.11

1 of the 2 container images this version deploys carry CVE-2026-77117.

Container imageDigestPackageFixed in
ghcr.io/kubevault/vault-operator:v0.25.0c8e042b5cee8
glibc@2.36-9+deb12u14
no fix listed

Open the chart page →

866
voyager-gatewayappscodeVerified publisher2026.7.212 of 2See more

voyager-gateway appscode 2026.7.21

2 of the 2 container images this version deploys carry CVE-2026-77117.

Container imageDigestPackageFixed in
ghcr.io/voyagermesh/crd-manager:v0.3.0e67f14e5c853
glibc@2.36-9+deb12u14
no fix listed
ghcr.io/voyagermesh/gateway:v1.8.24237fd16a3cb
glibc@2.41-12+deb13u3
no fix listed

Open the chart page →

1,431
haproxyappuio2.7.21 of 1See more

haproxy appuio 2.7.2

1 of the 1 container images this version deploys carry CVE-2026-77117.

Container imageDigestPackageFixed in
ghcr.io/vshn/haproxy-with-mysql:1.0.0a3c27ee3fb2f
glibc@2.36-9+deb12u1
no fix listed

Open the chart page →

5,875
dokuwikiarea-42Verified publisher0.1.81 of 1See more

dokuwiki area-42 0.1.8

1 of the 1 container images this version deploys carry CVE-2026-77117.

Container imageDigestPackageFixed in
dokuwiki/dokuwiki:2025-05-14af08ecfdda239
glibc@2.41-12
no fix listed

Open the chart page →

8,088
argocdargo-helm-charts1.0.01 of 3See more

argocd argo-helm-charts 1.0.0

1 of the 3 container images this version deploys carry CVE-2026-77117.

Container imageDigestPackageFixed in
quay.io/argoproj/argocd:v2.14.115fc69e31c755
glibc@2.39-0ubuntu8.4
2.39-0ubuntu8.9

Open the chart page →

7,933
istio-discoveryargonaut-charts0.3.31 of 1See more

istio-discovery argonaut-charts 0.3.3

1 of the 1 container images this version deploys carry CVE-2026-77117.

Container imageDigestPackageFixed in
istio/pilot:1.10.0294ca55bd1cc
glibc@2.27-3ubuntu1.4
no fix listed

Open the chart page →

77,599
istio-ingressargonaut-charts0.3.31 of 1See more

istio-ingress argonaut-charts 0.3.3

1 of the 1 container images this version deploys carry CVE-2026-77117.

Container imageDigestPackageFixed in
istio/proxyv2:1.10.088c6c693e67a
glibc@2.27-3ubuntu1.4
no fix listed

Open the chart page →

77,545
argonix-apiargonix0.4.21 of 4See more

argonix-api argonix 0.4.2

1 of the 4 container images this version deploys carry CVE-2026-77117.

Container imageDigestPackageFixed in
ghcr.io/argonix-io/argonix-api:1.0.0f64dfe735284
glibc@2.41-12+deb13u4
no fix listed

Open the chart page →

5,110
arlas-aiasarlas-stackVerified publisher28.9.012 of 22See more

arlas-aias arlas-stack 28.9.0

12 of the 22 container images this version deploys carry CVE-2026-77117.

Container imageDigestPackageFixed in
bitnamilegacy/elasticsearch:9.0.1-debian-12-r0e6f6ddcce2f1
glibc@2.36-9+deb12u10
no fix listed
bitnamilegacy/keycloak:26.3.3-debian-12-r0da3df0976a9f
glibc@2.36-9+deb12u10
no fix listed
bitnamilegacy/minio:2024.12.18-debian-12-r1c0ede65eb88e
glibc@2.36-9+deb12u9
no fix listed
bitnamilegacy/minio:2025.4.22-debian-12-r1d7cd0e172c4c
glibc@2.36-9+deb12u10
no fix listed
bitnamilegacy/os-shell:12-debian-12-r439ba5d16f9c64
glibc@2.36-9+deb12u10
no fix listed
bitnamilegacy/postgresql:17.6.0-debian-12-r0de520acd66fc
glibc@2.36-9+deb12u10
no fix listed
bitnamilegacy/rabbitmq:4.1.2-debian-12-r074a3d7c747eb
glibc@2.36-9+deb12u10
no fix listed
bitnamilegacy/redis:8.0.3-debian-12-r1189aae381e7f
glibc@2.36-9+deb12u10
no fix listed
gisaia/arlas-permissions-server:28.0.0e612fc722e02
glibc@2.41-12+deb13u2
no fix listed
gisaia/arlas-persistence-server:28.0.0f667e0ee79be
glibc@2.41-12+deb13u2
no fix listed
gisaia/arlas-server:28.0.04e693e7b6f37
glibc@2.41-12+deb13u2
no fix listed
ghcr.io/developmentseed/titiler:0.22.48ac53eb38393
glibc@2.36-9+deb12u10
no fix listed

Open the chart page →

41,544
arlas-servicesarlas-stackVerified publisher28.9.03 of 3See more

arlas-services arlas-stack 28.9.0

3 of the 3 container images this version deploys carry CVE-2026-77117.

Container imageDigestPackageFixed in
gisaia/arlas-permissions-server:28.0.0e612fc722e02
glibc@2.41-12+deb13u2
no fix listed
gisaia/arlas-persistence-server:28.0.0f667e0ee79be
glibc@2.41-12+deb13u2
no fix listed
gisaia/arlas-server:28.0.04e693e7b6f37
glibc@2.41-12+deb13u2
no fix listed

Open the chart page →

1,731
titilerarlas-stackVerified publisher28.9.01 of 1See more

titiler arlas-stack 28.9.0

1 of the 1 container images this version deploys carry CVE-2026-77117.

Container imageDigestPackageFixed in
ghcr.io/developmentseed/titiler:latestfe8f2224e674
glibc-2.44@2.44-r6
no fix listed

Open the chart page →

64
arma-reforgerarma-reforger0.5.31 of 8See more

arma-reforger arma-reforger 0.5.3

1 of the 8 container images this version deploys carry CVE-2026-77117.

Container imageDigestPackageFixed in
ghcr.io/brittonhayes/arma-reforger:latest6fde1edc0983
glibc@2.31-0ubuntu9.9
no fix listed

Open the chart page →

23,780
bind9artem-shestakov1.0.11 of 1See more

bind9 artem-shestakov 1.0.1

1 of the 1 container images this version deploys carry CVE-2026-77117.

Container imageDigestPackageFixed in
ubuntu/bind9:9.16-20.04_beta5ee73f44e5d0
glibc@2.31-0ubuntu9.17
no fix listed

Open the chart page →

3,902
keystonearzu0.2.293 of 4See more

keystone arzu 0.2.29

3 of the 4 container images this version deploys carry CVE-2026-77117.

Container imageDigestPackageFixed in
library/rabbitmq:3.7-managementb6dd45cc35b3
glibc@2.27-3ubuntu1.2
no fix listed
openstackhelm/heat:wallaby-ubuntu_focalf728510bab3c
glibc@2.31-0ubuntu9.12
no fix listed
openstackhelm/keystone:wallaby-ubuntu_focale07d75953d2e
glibc@2.31-0ubuntu9.12
no fix listed

Open the chart page →

23,538
assemblylineassemblylineVerified publisher7.4.215 of 12See more

assemblyline assemblyline 7.4.21

5 of the 12 container images this version deploys carry CVE-2026-77117.

Container imageDigestPackageFixed in
cccs/assemblyline-core:4.7.4.stable2125fdf4aa72ab
glibc@2.36-9+deb12u14
no fix listed
cccs/assemblyline-rust:4.7.4.stable21871423aa4655
glibc@2.36-9+deb12u14
no fix listed
cccs/assemblyline-socketio:4.7.4.stable21ba390e87f340
glibc@2.36-9+deb12u14
no fix listed
cccs/assemblyline-ui:4.7.4.stable210623c3fd039e
glibc@2.36-9+deb12u14
no fix listed
library/redis:latest718f745deb7d
glibc@2.41-12+deb13u4
no fix listed

Open the chart page →

12,736
dltkvassist-iot-data-integrity-verification0.2.03 of 9See more

dltkv assist-iot-data-integrity-verification 0.2.0

3 of the 9 container images this version deploys carry CVE-2026-77117.

Container imageDigestPackageFixed in
hyperledger/fabric-ca:latesta70b6ba64a08
glibc@2.35-0ubuntu3.13
2.35-0ubuntu3.15
hyperledger/fabric-ca-tools:latest4ce6f43ded2e
glibc@2.23-0ubuntu10
no fix listed
hyperledger/fabric-couchdb:0.4.15f6c724592abf
glibc@2.23-0ubuntu11
no fix listed

Open the chart page →

198,835
dltflassist-iot-dlt-based-fl0.2.03 of 9See more

dltfl assist-iot-dlt-based-fl 0.2.0

3 of the 9 container images this version deploys carry CVE-2026-77117.

Container imageDigestPackageFixed in
hyperledger/fabric-ca:latesta70b6ba64a08
glibc@2.35-0ubuntu3.13
2.35-0ubuntu3.15
hyperledger/fabric-ca-tools:latest4ce6f43ded2e
glibc@2.23-0ubuntu10
no fix listed
hyperledger/fabric-couchdb:0.4.15f6c724592abf
glibc@2.23-0ubuntu11
no fix listed

Open the chart page →

198,835
fl-orchestrator-guiassist-iot-fl-orchestrator0.1.01 of 3See more

fl-orchestrator-gui assist-iot-fl-orchestrator 0.1.0

1 of the 3 container images this version deploys carry CVE-2026-77117.

Container imageDigestPackageFixed in
assistiot/fl_orchestrator:dbmongo4-latestd157fbe150e3
glibc@2.31-0ubuntu9.9
no fix listed

Open the chart page →

9,605
idmassist-iot-identity-manager0.1.01 of 2See more

idm assist-iot-identity-manager 0.1.0

1 of the 2 container images this version deploys carry CVE-2026-77117.

Container imageDigestPackageFixed in
assistiot/identity-manager_db:latest0d3e6d35f168
glibc@2.36-9+deb12u3
no fix listed

Open the chart page →

13,724
locationprocessingassist-iot-location-processing1.0.01 of 3See more

locationprocessing assist-iot-location-processing 1.0.0

1 of the 3 container images this version deploys carry CVE-2026-77117.

Container imageDigestPackageFixed in
assistiot/location_processing:lateste9bae124095f
glibc@2.35-0ubuntu3.1
2.35-0ubuntu3.15

Open the chart page →

10,385
openapiassist-iot-open-api-management0.2.21 of 6See more

openapi assist-iot-open-api-management 0.2.2

1 of the 6 container images this version deploys carry CVE-2026-77117.

Container imageDigestPackageFixed in
assistiot/open_api_backend:1.1.230812ba93555
glibc@2.35-0ubuntu3.5
2.35-0ubuntu3.15

Open the chart page →

92,517
resource-provisioningassist-iot-resource-provisioning1.0.01 of 7See more

resource-provisioning assist-iot-resource-provisioning 1.0.0

1 of the 7 container images this version deploys carry CVE-2026-77117.

Container imageDigestPackageFixed in
library/buildpack-deps:curl9071eeb01ff8
glibc@2.41-12+deb13u4
no fix listed

Open the chart page →

7,999
sdn-controllerassist-iot-sdn-controller2.4.01 of 1See more

sdn-controller assist-iot-sdn-controller 2.4.0

1 of the 1 container images this version deploys carry CVE-2026-77117.

Container imageDigestPackageFixed in
assistiot/sdn_controller:2.4.0ea254b6d8a31
glibc@2.31-0ubuntu9.9
no fix listed

Open the chart page →

8,282
sd-wanassist-iot-sd-wan1.0.01 of 2See more

sd-wan assist-iot-sd-wan 1.0.0

1 of the 2 container images this version deploys carry CVE-2026-77117.

Container imageDigestPackageFixed in
library/mongo:4.2.21-bionic9cb28f7291d9
glibc@2.27-3ubuntu1.6
no fix listed

Open the chart page →

5,517
smartorchestratorassist-iot-smart-orchestrator4.0.04 of 14See more

smartorchestrator assist-iot-smart-orchestrator 4.0.0

4 of the 14 container images this version deploys carry CVE-2026-77117.

Container imageDigestPackageFixed in
assistiot/smart-orchestrator_mcs:latest7d6a0d534c7f
glibc@2.36-9+deb12u4
no fix listed
assistiot/smart-orchestrator_scheduler:latest38b003e55ff3
glibc@2.36-9+deb12u4
no fix listed
assistiot/smart-orchestrator_scheduler_mc:latestb1dbe4d62a03
glibc@2.36-9+deb12u1
no fix listed
library/mongo:4.4.66efa05203990
glibc@2.27-3ubuntu1.4
no fix listed

Open the chart page →

47,088
videoaugmentationassist-iot-video-augmentation0.1.02 of 3See more

videoaugmentation assist-iot-video-augmentation 0.1.0

2 of the 3 container images this version deploys carry CVE-2026-77117.

Container imageDigestPackageFixed in
assistiot/video_augmentation:runner-cpu-lateste5ae539ce2cb
glibc@2.31-0ubuntu9.9
no fix listed
library/nginx:latestabe47724e466
glibc@2.41-12+deb13u4
no fix listed

Open the chart page →

80,157
account-monitorastria0.0.11 of 1See more

account-monitor astria 0.0.1

1 of the 1 container images this version deploys carry CVE-2026-77117.

Container imageDigestPackageFixed in
ghcr.io/astriaorg/account-monitor:latest4c8b42890035
glibc@2.36-9+deb12u13
no fix listed

Open the chart page →

2,099
astrotrekastria0.0.22 of 4See more

astrotrek astria 0.0.2

2 of the 4 container images this version deploys carry CVE-2026-77117.

Container imageDigestPackageFixed in
timescale/timescaledb-ha:pg15-latesta8e3322e1cf9
glibc@2.35-0ubuntu3.1
2.35-0ubuntu3.15
ghcr.io/astriaorg/astrotrek:0.1.05889bea38e56
glibc@2.36-9+deb12u8
no fix listed

Open the chart page →

33,841
auctioneerastria0.0.21 of 1See more

auctioneer astria 0.0.2

1 of the 1 container images this version deploys carry CVE-2026-77117.

Container imageDigestPackageFixed in
ghcr.io/astriaorg/auctioneer:pr-18391386b7b5e555
glibc@2.36-9+deb12u9
no fix listed

Open the chart page →

2,349
evm-bridge-withdrawerastria1.0.61 of 1See more

evm-bridge-withdrawer astria 1.0.6

1 of the 1 container images this version deploys carry CVE-2026-77117.

Container imageDigestPackageFixed in
ghcr.io/astriaorg/evm-bridge-withdrawer:1.0.29c88e1aff357
glibc@2.36-9+deb12u9
no fix listed

Open the chart page →

2,325
evm-rollupastria4.1.01 of 2See more

evm-rollup astria 4.1.0

1 of the 2 container images this version deploys carry CVE-2026-77117.

Container imageDigestPackageFixed in
ghcr.io/astriaorg/conductor:latest3ea8164b0eae
glibc@2.36-9+deb12u13
no fix listed

Open the chart page →

4,197
evm-stackastria5.0.31 of 2See more

evm-stack astria 5.0.3

1 of the 2 container images this version deploys carry CVE-2026-77117.

Container imageDigestPackageFixed in
ghcr.io/astriaorg/conductor:latest3ea8164b0eae
glibc@2.36-9+deb12u13
no fix listed

Open the chart page →

4,197
flame-rollupastria0.1.31 of 2See more

flame-rollup astria 0.1.3

1 of the 2 container images this version deploys carry CVE-2026-77117.

Container imageDigestPackageFixed in
ghcr.io/astriaorg/conductor:1.1.01f97d131b1d1
glibc@2.36-9+deb12u9
no fix listed

Open the chart page →

4,034
graph-nodeastria0.2.22 of 3See more

graph-node astria 0.2.2

2 of the 3 container images this version deploys carry CVE-2026-77117.

Container imageDigestPackageFixed in
graphprotocol/graph-node:latestb0436347fb24
glibc@2.36-9+deb12u9
no fix listed
library/postgres:latest86c951e05bf5
glibc@2.41-12+deb13u4
no fix listed

Open the chart page →

5,355

Container images carrying it

2,825 by charts deploying them

A fixed version is listed for 1 of the 4 affected packages.

Container imageDigestPackageFixed inUsed by
registry.gitlab.com/enbuild-staging/vivsoft-platform-ui/rabbitmq:3.12.145a9334f371f3
glibc@2.36-9+deb12u7
no fix listed
1
registry.gitlab.com/gitlab-org/build/cng/certificates:v19.4.104019bb2e325
glibc@2.41-12+deb13u4
no fix listed
1
registry.gitlab.com/gitlab-org/build/cng/gitaly:v19.4.198d46dc7e071
glibc@2.41-12+deb13u4
no fix listed
1
registry.gitlab.com/gitlab-org/build/cng/gitlab-base:v19.4.19df7d5aa03fe
glibc@2.41-12+deb13u4
no fix listed
1
registry.gitlab.com/gitlab-org/build/cng/gitlab-container-registry:v4.40.2-gitlabb21661438ee9
glibc@2.36-9+deb12u14
no fix listed
1
registry.gitlab.com/gitlab-org/build/cng/gitlab-exporter:17.0.25b0d50fcd5ea
glibc@2.41-12+deb13u4
no fix listed
1
registry.gitlab.com/gitlab-org/build/cng/gitlab-kas:v19.4.14ed6de4d77e1
glibc@2.41-12+deb13u4
no fix listed
1
registry.gitlab.com/gitlab-org/build/cng/gitlab-openbao:v2.6.2-gitlab1a80159109e74
glibc@2.41-12+deb13u4
no fix listed
1
registry.gitlab.com/gitlab-org/build/cng/gitlab-shell:v14.57.3180688274b2c
glibc@2.41-12+deb13u4
no fix listed
1
registry.gitlab.com/gitlab-org/build/cng/gitlab-workhorse-ee:v19.4.17419aa33eb17
glibc@2.41-12+deb13u4
no fix listed
1
registry.gitlab.com/gitlab-org/build/cng/kubectl:v19.4.1a072f0a41f28
glibc@2.41-12+deb13u4
no fix listed
1
registry.gitlab.com/infinitydon/registry/open5gs-aio:v2.2.2f6385712935f
glibc@2.31-0ubuntu9.2
no fix listed
1
registry.gitlab.com/school_guy/docker-typo3:13.4.30-197d868ed76185d7270d
glibc@2.36-9+deb12u14
no fix listed
1
registry.k8s.io/csi-secrets-store/driver:v1.6.1b48d7d13dd06
glibc@2.36-9+deb12u14
no fix listed
1
registry.k8s.io/dns/k8s-dns-node-cache:1.23.081a13703d6b8
glibc@2.36-9+deb12u3
no fix listed
1
registry.k8s.io/dns/k8s-dns-node-cache:1.26.78b9a78d101a1
glibc@2.36-9+deb12u13
no fix listed
1
registry.k8s.io/dns/k8s-dns-node-cache:1.23.1e3dccb1a21d1
glibc@2.36-9+deb12u7
no fix listed
1
registry.k8s.io/git-sync/git-sync:v4.5.00e64aedb0d0a
glibc@2.41-12
no fix listed
1
registry.k8s.io/git-sync/git-sync:v4.1.0fd9722fd02e3
glibc@2.36-9+deb12u3
no fix listed
1
registry.k8s.io/node-problem-detector/node-problem-detector:v0.8.2052f0618e9bc2
glibc@2.36-9+deb12u8
no fix listed
1
registry.k8s.io/node-problem-detector/node-problem-detector:v1.35.1c380751accc5
glibc@2.36-9+deb12u13
no fix listed
1
registry.k8s.io/sig-storage/local-volume-provisioner:v2.8.03e2bf2eaef9f
glibc@2.36-9+deb12u10
no fix listed
1
registry.k8s.io/sig-storage/local-volume-provisioner:v2.9.0f9d65db8bda2
glibc@2.36-9+deb12u14
no fix listed
1
registry.k8s.io/sig-storage/nfsplugin:v4.13.41eb5a85180a4
glibc@2.36-9+deb12u14
no fix listed
1
registry.k8s.io/sig-storage/nfsplugin:v4.11.0ce5b5ccd5eb0
glibc@2.36-9+deb12u10
no fix listed
1

syft 1.42.1 · advisories as of 26 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.