StackRadar

CVE-2026-80489

Medium

Advisory

Published 28 Aug 2026In the index since 5 Sept 2026
Severity
Medium
worst across findings
CVSS
5.9
base score, highest
EPSS
0.004
35th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
2,645
of 17,821 indexed, latest versions
Container images
2,708
deployed by those charts
Fix available
1 of 3
affected packages

CVE-2026-80489 affecting package glibc 2.38-21

Carried by container images the latest versions of 2,645 of 17,821 indexed charts deploy, on 2,708 images.

Affected packageAffected versionsFixed inImages
glibcdeb2.23-0ubuntu5, 2.23-0ubuntu7, 2.23-0ubuntu9, 2.23-0ubuntu10+63 more2.35-0ubuntu3.15, 2.39-0ubuntu8.9, 2.41-12+deb13u3+e8, 2.43-2ubuntu2.42,687
eglibcdeb2.19-0ubuntu6.3, 2.19-0ubuntu6.6, 2.19-0ubuntu6.13, 2.19-0ubuntu6.14+1 moreno fix listed7
glibcrpm2.38-16.azl3, 2.38-18.azl3, 2.38-20.azl3no fix listed14
OSV records
DEBIAN-CVE-2026-80489UBUNTU-CVE-2026-80489AZL-100965ECHO-add6-7bb2-f327
Also known as
USN-8737-1, USN-8737-2

Charts affected

2,645 by stars
ChartLatestAffected imagesRadar Score
duckdb-uiduckdb-ui0.5.21 of 1See more

duckdb-ui duckdb-ui 0.5.2

1 of the 1 container images this version deploys carry CVE-2026-80489.

Container imageDigestPackageFixed in
ghcr.io/beslovas/duckdb-ui:1.3.272f35584026d
glibc@2.36-9+deb12u13
no fix listed

Open the chart page →

4,507
cloudflaredduck-helm1.1.31 of 1See more

cloudflared duck-helm 1.1.3

1 of the 1 container images this version deploys carry CVE-2026-80489.

Container imageDigestPackageFixed in
cloudflare/cloudflared:2026.3.06b599ca3e974
glibc@2.41-12+deb13u1
no fix listed

Open the chart page →

1,399
postgres-backup-localduck-helm0.1.51 of 1See more

postgres-backup-local duck-helm 0.1.5

1 of the 1 container images this version deploys carry CVE-2026-80489.

Container imageDigestPackageFixed in
prodrigestivill/postgres-backup-local:latestf70742ebe42b
glibc@2.41-12
no fix listed

Open the chart page →

3,524
rundeckdwardu-helm-charts0.3.42 of 2See more

rundeck dwardu-helm-charts 0.3.4

2 of the 2 container images this version deploys carry CVE-2026-80489.

Container imageDigestPackageFixed in
library/nginx:stabled5792f71a949
glibc@2.41-12+deb13u3
no fix listed
rundeck/rundeck:3.2.74d64fe56f767
glibc@2.23-0ubuntu11
no fix listed

Open the chart page →

19,931
dynamic-configdynamic-configVerified publisher0.3.01 of 1See more

dynamic-config dynamic-config 0.3.0

1 of the 1 container images this version deploys carry CVE-2026-80489.

Container imageDigestPackageFixed in
ghcr.io/dynamic-config-rs/dynamic-config-webhook:v0.3.0f00f02c53f66
glibc@2.36-9+deb12u14
no fix listed

Open the chart page →

364
arbitrumdysnixVerified publisher0.1.11 of 1See more

arbitrum dysnix 0.1.1

1 of the 1 container images this version deploys carry CVE-2026-80489.

Container imageDigestPackageFixed in
offchainlabs/nitro-node:v3.1.0-7d1d84ce95865866129
glibc@2.36-9+deb12u7
no fix listed

Open the chart page →

9,296
base-consensusdysnixVerified publisher0.2.01 of 1See more

base-consensus dysnix 0.2.0

1 of the 1 container images this version deploys carry CVE-2026-80489.

Container imageDigestPackageFixed in
ghcr.io/base/node-reth:v1.1.18eb6e492fe3c
glibc@2.39-0ubuntu8.7
2.39-0ubuntu8.9

Open the chart page →

1,782
bitcoinddysnixVerified publisher0.4.31 of 2See more

bitcoind dysnix 0.4.3

1 of the 2 container images this version deploys carry CVE-2026-80489.

Container imageDigestPackageFixed in
ghcr.io/dysnix/docker-bitcoind:0.29.0490ca8e3dd21
glibc@2.39-0ubuntu8.4
2.39-0ubuntu8.9

Open the chart page →

2,001
gcp-local-ssd-raiddysnixVerified publisher0.1.71 of 2See more

gcp-local-ssd-raid dysnix 0.1.7

1 of the 2 container images this version deploys carry CVE-2026-80489.

Container imageDigestPackageFixed in
registry.k8s.io/sig-storage/local-volume-provisioner:v2.8.03e2bf2eaef9f
glibc@2.36-9+deb12u10
no fix listed

Open the chart page →

2,213
rethdysnixVerified publisher0.0.111 of 2See more

reth dysnix 0.0.11

1 of the 2 container images this version deploys carry CVE-2026-80489.

Container imageDigestPackageFixed in
ghcr.io/paradigmxyz/reth:v2.2.0505fca5e87d6
glibc@2.39-0ubuntu8.7
2.39-0ubuntu8.9

Open the chart page →

1,095
aerios-k8s-shimeclipse-aeriosVerified publisher1.0.01 of 1See more

aerios-k8s-shim eclipse-aerios 1.0.0

1 of the 1 container images this version deploys carry CVE-2026-80489.

Container imageDigestPackageFixed in
eclipseaerios/aerios-k8s-shim:v1.0.0d4ed3d8e5db4
glibc@2.41-12+deb13u3
no fix listed

Open the chart page →

1,426
hlo-allocatoreclipse-aeriosVerified publisher3.0.01 of 1See more

hlo-allocator eclipse-aerios 3.0.0

1 of the 1 container images this version deploys carry CVE-2026-80489.

Container imageDigestPackageFixed in
eclipseaerios/hlo-allocator:v3.0.03cc1d94cfe96
glibc@2.41-12+deb13u3
no fix listed

Open the chart page →

1,477
hlo-data-aggregatoreclipse-aeriosVerified publisher3.0.01 of 1See more

hlo-data-aggregator eclipse-aerios 3.0.0

1 of the 1 container images this version deploys carry CVE-2026-80489.

Container imageDigestPackageFixed in
eclipseaerios/hlo-data-aggregator:v3.0.0b433c2b9f5dc
glibc@2.41-12+deb13u3
no fix listed

Open the chart page →

1,636
hlo-deployment-engineeclipse-aeriosVerified publisher3.0.01 of 1See more

hlo-deployment-engine eclipse-aerios 3.0.0

1 of the 1 container images this version deploys carry CVE-2026-80489.

Container imageDigestPackageFixed in
eclipseaerios/hlo-deployment-engine:v3.0.0d582d39208c7
glibc@2.41-12+deb13u3
no fix listed

Open the chart page →

1,646
hlo-fe-engineeclipse-aeriosVerified publisher3.0.01 of 1See more

hlo-fe-engine eclipse-aerios 3.0.0

1 of the 1 container images this version deploys carry CVE-2026-80489.

Container imageDigestPackageFixed in
eclipseaerios/hlo-fe-engine:v3.0.08ed2df4ca692
glibc@2.41-12+deb13u3
no fix listed

Open the chart page →

1,636
idmeclipse-aeriosVerified publisher2.0.01 of 2See more

idm eclipse-aerios 2.0.0

1 of the 2 container images this version deploys carry CVE-2026-80489.

Container imageDigestPackageFixed in
library/postgres:16.4e62fbf9d3e2b
glibc@2.36-9+deb12u9
no fix listed

Open the chart page →

4,610
iotaeclipse-aeriosVerified publisher1.0.21 of 4See more

iota eclipse-aerios 1.0.2

1 of the 4 container images this version deploys carry CVE-2026-80489.

Container imageDigestPackageFixed in
eclipseaerios/iota-messages-api:lateste7f5ba0bc64d
glibc@2.41-12
no fix listed

Open the chart page →

13,647
orion-ldeclipse-aeriosVerified publisher1.0.01 of 2See more

orion-ld eclipse-aerios 1.0.0

1 of the 2 container images this version deploys carry CVE-2026-80489.

Container imageDigestPackageFixed in
library/mongo:7.0.12ae1cf99fa7bf
glibc@2.35-0ubuntu3.8
2.35-0ubuntu3.15

Open the chart page →

9,831
redpandaeclipse-aeriosVerified publisher5.7.81 of 4See more

redpanda eclipse-aerios 5.7.8

1 of the 4 container images this version deploys carry CVE-2026-80489.

Container imageDigestPackageFixed in
redpandadata/redpanda:latest468bd13a9f2b
glibc@2.41-12+deb13u3
no fix listed

Open the chart page →

1,621
self-awarenesseclipse-aeriosVerified publisher1.4.41 of 2See more

self-awareness eclipse-aerios 1.4.4

1 of the 2 container images this version deploys carry CVE-2026-80489.

Container imageDigestPackageFixed in
eclipseaerios/self-awareness-hardware-info:1.4.434b72f45b46a
glibc@2.41-12
no fix listed

Open the chart page →

2,277
self-orchestratoreclipse-aeriosVerified publisher1.2.01 of 1See more

self-orchestrator eclipse-aerios 1.2.0

1 of the 1 container images this version deploys carry CVE-2026-80489.

Container imageDigestPackageFixed in
eclipseaerios/self-orchestrator:1.2.08b123bec5679
glibc@2.36-9+deb12u9
no fix listed

Open the chart page →

2,445
trustmanagereclipse-aeriosVerified publisher1.0.01 of 1See more

trustmanager eclipse-aerios 1.0.0

1 of the 1 container images this version deploys carry CVE-2026-80489.

Container imageDigestPackageFixed in
eclipseaerios/trust-manager:1.0.0f55442e2c0ed
glibc@2.41-12
no fix listed

Open the chart page →

1,970
marblerunedgelesssysVerified publisher1.9.21 of 1See more

marblerun edgelesssys 1.9.2

1 of the 1 container images this version deploys carry CVE-2026-80489.

Container imageDigestPackageFixed in
ghcr.io/edgelesssys/marblerun/coordinator:v1.9.2e589db0d0a2c
glibc@2.35-0ubuntu3.14
2.35-0ubuntu3.15

Open the chart page →

1,873
marblerun-coordinatoredgelesssysVerified publisher0.5.01 of 1See more

marblerun-coordinator edgelesssys 0.5.0

1 of the 1 container images this version deploys carry CVE-2026-80489.

Container imageDigestPackageFixed in
ghcr.io/edgelesssys/coordinator:v0.5.0bcd5b8d4c45c
glibc@2.27-3ubuntu1.4
no fix listed

Open the chart page →

11,044
pagesedgwarepages1.0.02 of 3See more

pages edgwarepages 1.0.0

2 of the 3 container images this version deploys carry CVE-2026-80489.

Container imageDigestPackageFixed in
dellcloud/pages:monitor6ba7b22caacd
glibc@2.31-0ubuntu9.1
no fix listed
flyway/flyway:6.4.422d97ceb0c47
glibc@2.27-3ubuntu1
no fix listed

Open the chart page →

20,287
deploy-elibraryeducative-helm-bookapp0.5.01 of 1See more

deploy-elibrary educative-helm-bookapp 0.5.0

1 of the 1 container images this version deploys carry CVE-2026-80489.

Container imageDigestPackageFixed in
maksymhencha/educative-helm-bookapp:0.0.27f096a681192
glibc@2.31-0ubuntu9.17
no fix listed

Open the chart page →

5,179
vaultwardenedudip0.11.01 of 1See more

vaultwarden edudip 0.11.0

1 of the 1 container images this version deploys carry CVE-2026-80489.

Container imageDigestPackageFixed in
vaultwarden/server:1.37.1ebdfe70701c6
glibc@2.41-12+deb13u3
no fix listed

Open the chart page →

2,085
esphomeegebackVerified publisher2.0.251 of 1See more

esphome egeback 2.0.25

1 of the 1 container images this version deploys carry CVE-2026-80489.

Container imageDigestPackageFixed in
esphome/esphome:2026.7.44866347cb5b4
glibc@2.41-12+deb13u3
no fix listed

Open the chart page →

3,145
teslamateegebackVerified publisher2.1.91 of 1See more

teslamate egeback 2.1.9

1 of the 1 container images this version deploys carry CVE-2026-80489.

Container imageDigestPackageFixed in
teslamate/teslamate:4.1.1cc87082e7d67
glibc@2.41-12+deb13u3
no fix listed

Open the chart page →

1,057
unifiegebackVerified publisher2.1.61 of 1See more

unifi egeback 2.1.6

1 of the 1 container images this version deploys carry CVE-2026-80489.

Container imageDigestPackageFixed in
jacobalberty/unifi:v10.0.162896c0ab82d33
glibc@2.31-0ubuntu9.17
no fix listed

Open the chart page →

7,481
uptime-kumaegebackVerified publisher2.0.121 of 1See more

uptime-kuma egeback 2.0.12

1 of the 1 container images this version deploys carry CVE-2026-80489.

Container imageDigestPackageFixed in
louislam/uptime-kuma:2.5.0a8610b3b4c38
glibc@2.36-9+deb12u14
no fix listed

Open the chart page →

30,740
egressgatewayegressgateway0.6.92 of 2See more

egressgateway egressgateway 0.6.9

2 of the 2 container images this version deploys carry CVE-2026-80489.

Container imageDigestPackageFixed in
ghcr.io/spidernet-io/egressgateway-agent:v0.6.9a8ec2f74c9d0
glibc@2.39-0ubuntu8.4
2.39-0ubuntu8.9
ghcr.io/spidernet-io/egressgateway-controller:v0.6.99deda7b68c34
glibc@2.39-0ubuntu8.4
2.39-0ubuntu8.9

Open the chart page →

4,004
mongodb-charteks-3-tier-app-chart0.1.01 of 1See more

mongodb-chart eks-3-tier-app-chart 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-80489.

Container imageDigestPackageFixed in
library/mongo:4.4.66efa05203990
glibc@2.27-3ubuntu1.4
no fix listed

Open the chart page →

8,070
postgresqleks-storageclass0.1.01 of 1See more

postgresql eks-storageclass 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-80489.

Container imageDigestPackageFixed in
library/postgres:1767f41722b7a8
glibc@2.41-12+deb13u3
no fix listed

Open the chart page →

1,618
netobserv-flowelastiflowVerified publisher0.11.01 of 1See more

netobserv-flow elastiflow 0.11.0

1 of the 1 container images this version deploys carry CVE-2026-80489.

Container imageDigestPackageFixed in
elastiflow/flow-collector:7.26.0fee67842e16b
glibc@2.39-0ubuntu8.7
2.39-0ubuntu8.9

Open the chart page →

1,519
seafileeleksbai0.1.13 of 3See more

seafile eleksbai 0.1.1

3 of the 3 container images this version deploys carry CVE-2026-80489.

Container imageDigestPackageFixed in
library/mariadb:10.692e50059ea0a
glibc@2.35-0ubuntu3.14
2.35-0ubuntu3.15
library/memcached:1.675c93cc91e76
glibc@2.41-12+deb13u3
no fix listed
seafileltd/seafile-mc:9.0.106693911bcc40
glibc@2.31-0ubuntu9.2
no fix listed

Open the chart page →

92,585
rabbitmqemberstackVerified publisher1.0.211 of 1See more

rabbitmq emberstack 1.0.21

1 of the 1 container images this version deploys carry CVE-2026-80489.

Container imageDigestPackageFixed in
library/rabbitmq:managementffd1b50c522a
glibc@2.39-0ubuntu8.8
2.39-0ubuntu8.9

Open the chart page →

1,068
redisemberstackVerified publisher1.0.211 of 1See more

redis emberstack 1.0.21

1 of the 1 container images this version deploys carry CVE-2026-80489.

Container imageDigestPackageFixed in
library/redis:8.0.2b43d2dcbbdb1
glibc@2.36-9+deb12u10
no fix listed

Open the chart page →

2,024
emissary-ingressemissary-ingress4.1.01 of 1See more

emissary-ingress emissary-ingress 4.1.0

1 of the 1 container images this version deploys carry CVE-2026-80489.

Container imageDigestPackageFixed in
ghcr.io/emissary-ingress/emissary:4.1.04a981156abee
glibc@2.36-9+deb12u14
no fix listed

Open the chart page →

971
elasticsearch-umbrellaempathyco0.8.121 of 3See more

elasticsearch-umbrella empathyco 0.8.12

1 of the 3 container images this version deploys carry CVE-2026-80489.

Container imageDigestPackageFixed in
empathyco/elasticsearch:7.17.2-memlock03e724e41eeb
glibc@2.31-0ubuntu9.7
no fix listed

Open the chart page →

10,673
kube-ecp-stackemqx-operator2.5.13 of 16See more

kube-ecp-stack emqx-operator 2.5.1

3 of the 16 container images this version deploys carry CVE-2026-80489.

Container imageDigestPackageFixed in
datalayers/datalayers:v2.2.1017b292079239
glibc@2.35-0ubuntu3.8
2.35-0ubuntu3.15
emqx/ecp-ui:2.5.1e33e9816f147
glibc@2.36-9+deb12u9
no fix listed
library/telegraf:1.27507a3eecf809
glibc@2.36-9+deb12u4
no fix listed

Open the chart page →

24,090
enclaveenclave0.1.11 of 1See more

enclave enclave 0.1.1

1 of the 1 container images this version deploys carry CVE-2026-80489.

Container imageDigestPackageFixed in
enclavenetworks/enclave:latest0a99759300d1
glibc@2.31-0ubuntu9.17
no fix listed

Open the chart page →

2,763
enderdash-agentenderdashVerified publisher0.1.61 of 1See more

enderdash-agent enderdash 0.1.6

1 of the 1 container images this version deploys carry CVE-2026-80489.

Container imageDigestPackageFixed in
ghcr.io/enderdash-com/enderdash-agent:latest818a0773d686
glibc@2.39-0ubuntu8.8
2.39-0ubuntu8.9

Open the chart page →

530
kube-packetloss-exporterenixVerified publisher0.2.11 of 2See more

kube-packetloss-exporter enix 0.2.1

1 of the 2 container images this version deploys carry CVE-2026-80489.

Container imageDigestPackageFixed in
bitnamilegacy/kubectl:1.3164614ef8290f
glibc@2.36-9+deb12u9
no fix listed

Open the chart page →

6,150
monitoring-proxyenixVerified publisher0.3.01 of 2See more

monitoring-proxy enix 0.3.0

1 of the 2 container images this version deploys carry CVE-2026-80489.

Container imageDigestPackageFixed in
library/haproxy:2.9.6fc5748ff7c72
glibc@2.36-9+deb12u4
no fix listed

Open the chart page →

3,925
topomatikenixVerified publisher1.3.11 of 1See more

topomatik enix 1.3.1

1 of the 1 container images this version deploys carry CVE-2026-80489.

Container imageDigestPackageFixed in
quay.io/enix/topomatik:1.3.1d9f0bec83ef0
glibc@2.35-0ubuntu3.13
2.35-0ubuntu3.15

Open the chart page →

2,174
backbone-helm-chartenmeshed-backboneVerified publisher7.2.17 of 7See more

backbone-helm-chart enmeshed-backbone 7.2.1

7 of the 7 container images this version deploys carry CVE-2026-80489.

Container imageDigestPackageFixed in
ghcr.io/nmshd/backbone-admin-cli:7.2.1f7d095c04a75
glibc@2.39-0ubuntu8.8
2.39-0ubuntu8.9
ghcr.io/nmshd/backbone-admin-ui:7.2.169c9f075d2d9
glibc@2.41-12+deb13u3+dhi1
no fix listed
ghcr.io/nmshd/backbone-consumer-api:7.2.1b8f0ce01d057
glibc@2.41-12+deb13u3+dhi1
no fix listed
ghcr.io/nmshd/backbone-database-migrator:7.2.12c0c5e022714
glibc@2.41-12+deb13u3+dhi1
no fix listed
ghcr.io/nmshd/backbone-event-handler:7.2.1f4d6a2006530
glibc@2.41-12+deb13u3+dhi1
no fix listed
ghcr.io/nmshd/backbone-housekeeper:7.2.11c1dfe35447f
glibc@2.41-12+deb13u3+dhi1
no fix listed
ghcr.io/nmshd/backbone-identity-deletion-jobs:7.2.1da69941fa6b8
glibc@2.41-12+deb13u3+dhi1
no fix listed

Open the chart page →

3,934
connector-helm-chartenmeshed-connectorOfficialVerified publisher7.4.121 of 1See more

connector-helm-chart enmeshed-connector 7.4.12

1 of the 1 container images this version deploys carry CVE-2026-80489.

Container imageDigestPackageFixed in
ghcr.io/nmshd/connector:7.4.122f1c515eafa9
glibc@2.41-12+deb13u4+dhi0
no fix listed

Open the chart page →

276
mariadbeoc-chartsVerified publisher0.3.141 of 1See more

mariadb eoc-charts 0.3.14

1 of the 1 container images this version deploys carry CVE-2026-80489.

Container imageDigestPackageFixed in
library/mariadb:10.6.15e22328f4d714
glibc@2.31-0ubuntu9.12
no fix listed

Open the chart page →

5,179
nginx-charteoc-chartsVerified publisher2.0.01 of 1See more

nginx-chart eoc-charts 2.0.0

1 of the 1 container images this version deploys carry CVE-2026-80489.

Container imageDigestPackageFixed in
library/nginx:latestabe47724e466
glibc@2.41-12+deb13u4
no fix listed

Open the chart page →

1,593

Container images carrying it

2,708 by charts deploying them

A fixed version is listed for 1 of the 3 affected packages.

Container imageDigestPackageFixed inUsed by
registry.k8s.io/git-sync/git-sync:v4.5.00e64aedb0d0a
glibc@2.41-12
no fix listed
1
registry.k8s.io/git-sync/git-sync:v4.1.0fd9722fd02e3
glibc@2.36-9+deb12u3
no fix listed
1
registry.k8s.io/node-problem-detector/node-problem-detector:v0.8.2052f0618e9bc2
glibc@2.36-9+deb12u8
no fix listed
1
registry.k8s.io/node-problem-detector/node-problem-detector:v1.35.1c380751accc5
glibc@2.36-9+deb12u13
no fix listed
1
registry.k8s.io/sig-storage/local-volume-provisioner:v2.8.03e2bf2eaef9f
glibc@2.36-9+deb12u10
no fix listed
1
registry.k8s.io/sig-storage/local-volume-provisioner:v2.9.0f9d65db8bda2
glibc@2.36-9+deb12u14
no fix listed
1
registry.k8s.io/sig-storage/nfsplugin:v4.13.41eb5a85180a4
glibc@2.36-9+deb12u14
no fix listed
1
registry.k8s.io/sig-storage/nfsplugin:v4.11.0ce5b5ccd5eb0
glibc@2.36-9+deb12u10
no fix listed
1

syft 1.42.1 · advisories as of 21 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.