StackRadar

CVE-2026-80489

Medium

Advisory

Published 28 Aug 2026In the index since 5 Sept 2026
Severity
Medium
worst across findings
CVSS
5.9
base score, highest
EPSS
0.004
35th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
2,645
of 17,821 indexed, latest versions
Container images
2,708
deployed by those charts
Fix available
1 of 3
affected packages

CVE-2026-80489 affecting package glibc 2.38-21

Carried by container images the latest versions of 2,645 of 17,821 indexed charts deploy, on 2,708 images.

Affected packageAffected versionsFixed inImages
glibcdeb2.23-0ubuntu5, 2.23-0ubuntu7, 2.23-0ubuntu9, 2.23-0ubuntu10+63 more2.35-0ubuntu3.15, 2.39-0ubuntu8.9, 2.41-12+deb13u3+e8, 2.43-2ubuntu2.42,687
eglibcdeb2.19-0ubuntu6.3, 2.19-0ubuntu6.6, 2.19-0ubuntu6.13, 2.19-0ubuntu6.14+1 moreno fix listed7
glibcrpm2.38-16.azl3, 2.38-18.azl3, 2.38-20.azl3no fix listed14
OSV records
DEBIAN-CVE-2026-80489UBUNTU-CVE-2026-80489AZL-100965ECHO-add6-7bb2-f327
Also known as
USN-8737-1, USN-8737-2

Charts affected

2,645 by stars
ChartLatestAffected imagesRadar Score
lightlyticslightlytics0.1.212 of 2See more

lightlytics lightlytics 0.1.21

2 of the 2 container images this version deploys carry CVE-2026-80489.

Container imageDigestPackageFixed in
public.ecr.aws/k6v9y5g3/cluster-agent:master.57536d051110158
glibc@2.36-9+deb12u9
no fix listed
public.ecr.aws/k6v9y5g3/cluster-agent:cost_k8s_process.5769e14a72b066d
glibc@2.36-9+deb12u9
no fix listed

Open the chart page →

5,475
linkdinglinkding0.2.31 of 1See more

linkding linkding 0.2.3

1 of the 1 container images this version deploys carry CVE-2026-80489.

Container imageDigestPackageFixed in
sissbruecker/linkding:1.41.0-plusa222fb777e1f
glibc@2.36-9+deb12u10
no fix listed

Open the chart page →

38,704
weblinzhengen0.1.71 of 1See more

web linzhengen 0.1.7

1 of the 1 container images this version deploys carry CVE-2026-80489.

Container imageDigestPackageFixed in
library/nginx:latest05b8cb60c354
glibc@2.41-12+deb13u3
no fix listed

Open the chart page →

1,887
listmonklistmonk-chartVerified publisher2.0.11 of 2See more

listmonk listmonk-chart 2.0.1

1 of the 2 container images this version deploys carry CVE-2026-80489.

Container imageDigestPackageFixed in
library/postgres:15dfbbb0ad8cab
glibc@2.41-12+deb13u4
no fix listed

Open the chart page →

2,716
pocketbase-halitesql0.0.31 of 1See more

pocketbase-ha litesql 0.0.3

1 of the 1 container images this version deploys carry CVE-2026-80489.

Container imageDigestPackageFixed in
ghcr.io/litesql/pocketbase-ha:latestc5b28608958b
glibc@2.41-12+deb13u3
no fix listed

Open the chart page →

1,171
ingresslivekit-server1.2.21 of 1See more

ingress livekit-server 1.2.2

1 of the 1 container images this version deploys carry CVE-2026-80489.

Container imageDigestPackageFixed in
livekit/ingress:v1.2.21ab01641b366
glibc@2.35-0ubuntu3.1
2.35-0ubuntu3.15

Open the chart page →

10,847
pagesliviu884422-pages1.0.02 of 3See more

pages liviu884422-pages 1.0.0

2 of the 3 container images this version deploys carry CVE-2026-80489.

Container imageDigestPackageFixed in
dellcloud/pages:monitor6ba7b22caacd
glibc@2.31-0ubuntu9.1
no fix listed
flyway/flyway:6.4.422d97ceb0c47
glibc@2.27-3ubuntu1
no fix listed

Open the chart page →

20,287
web-chartljw-ktcloudlab0.1.01 of 1See more

web-chart ljw-ktcloudlab 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-80489.

Container imageDigestPackageFixed in
library/nginx:latest05b8cb60c354
glibc@2.41-12+deb13u3
no fix listed

Open the chart page →

1,887
llmarinerllmariner1.53.11 of 21See more

llmariner llmariner 1.53.1

1 of the 21 container images this version deploys carry CVE-2026-80489.

Container imageDigestPackageFixed in
public.ecr.aws/cloudnatix/llmariner/model-manager-loader:1.27.026ac7263a823
glibc@2.41-12
no fix listed

Open the chart page →

13,116
jellyfinlmatfyVerified publisher0.1.31 of 1See more

jellyfin lmatfy 0.1.3

1 of the 1 container images this version deploys carry CVE-2026-80489.

Container imageDigestPackageFixed in
jellyfin/jellyfin:10.11aefb67e6a7ff
glibc@2.41-12+deb13u3
no fix listed

Open the chart page →

2,603
mt-mcp-grafanaloafoe0.10.01 of 2See more

mt-mcp-grafana loafoe 0.10.0

1 of the 2 container images this version deploys carry CVE-2026-80489.

Container imageDigestPackageFixed in
grafana/mcp-grafana:0.14.042f541f22063
glibc@2.36-9+deb12u13
no fix listed

Open the chart page →

1,989
mt-mcp-proxyloafoe0.3.01 of 2See more

mt-mcp-proxy loafoe 0.3.0

1 of the 2 container images this version deploys carry CVE-2026-80489.

Container imageDigestPackageFixed in
ghcr.io/github/github-mcp-server:latest508a0857ec76
glibc@2.36-9+deb12u14
no fix listed

Open the chart page →

505
locust-pluginslocust-pluginsVerified publisher0.0.41 of 3See more

locust-plugins locust-plugins 0.0.4

1 of the 3 container images this version deploys carry CVE-2026-80489.

Container imageDigestPackageFixed in
locustio/locust:2.24.151d866285170
glibc@2.36-9+deb12u4
no fix listed

Open the chart page →

7,513
uptime-kumaloeken-at-homeVerified publisher2.3.21 of 1See more

uptime-kuma loeken-at-home 2.3.2

1 of the 1 container images this version deploys carry CVE-2026-80489.

Container imageDigestPackageFixed in
louislam/uptime-kuma:2.3.29aeb4e51d038
glibc@2.36-9+deb12u13
no fix listed

Open the chart page →

33,946
vnode-runtimeloftVerified publisher0.3.31 of 1See more

vnode-runtime loft 0.3.3

1 of the 1 container images this version deploys carry CVE-2026-80489.

Container imageDigestPackageFixed in
ghcr.io/loft-sh/vnode-runtime:0.3.3b065ec5a5239
glibc@2.35-0ubuntu3.14
2.35-0ubuntu3.15

Open the chart page →

2,546
nightingalelogic3579Verified publisher0.3.13 of 6See more

nightingale logic3579 0.3.1

3 of the 6 container images this version deploys carry CVE-2026-80489.

Container imageDigestPackageFixed in
flashcatcloud/categraf:latest42e6ab16472e
glibc@2.39-0ubuntu8.7
2.39-0ubuntu8.9
flashcatcloud/nightingale:8.5.1421acb36181b
glibc@2.41-12+deb13u1
no fix listed
library/redis:6.2e7b96daa9a18
glibc@2.36-9+deb12u14
no fix listed

Open the chart page →

9,105
rocketmq-exporterlogic3579Verified publisher0.0.21 of 1See more

rocketmq-exporter logic3579 0.0.2

1 of the 1 container images this version deploys carry CVE-2026-80489.

Container imageDigestPackageFixed in
apache/rocketmq-exporter:0.0.2c8fb51195444
glibc@2.35-0ubuntu3.6
2.35-0ubuntu3.15

Open the chart page →

6,692
login-test-backendlogin-test-backend0.1.01 of 2See more

login-test-backend login-test-backend 0.1.0

1 of the 2 container images this version deploys carry CVE-2026-80489.

Container imageDigestPackageFixed in
aboogie/login_test_backend:new9c41a4483ac8
glibc@2.36-9+deb12u7
no fix listed

Open the chart page →

6,623
apica-ascentlogiqai2.0.41 of 19See more

apica-ascent logiqai 2.0.4

1 of the 19 container images this version deploys carry CVE-2026-80489.

Container imageDigestPackageFixed in
logiqai/flash:v3.10.265b996bc7bdc
glibc@2.36-9+deb12u8
no fix listed

Open the chart page →

23,824
clickhouselohmag0.2.01 of 1See more

clickhouse lohmag 0.2.0

1 of the 1 container images this version deploys carry CVE-2026-80489.

Container imageDigestPackageFixed in
yandex/clickhouse-server:19.17ab1738a64b70
glibc@2.27-3ubuntu1
no fix listed

Open the chart page →

5,932
allure_docker_servicelovemew67Verified publisher0.0.11 of 1See more

allure_docker_service lovemew67 0.0.1

1 of the 1 container images this version deploys carry CVE-2026-80489.

Container imageDigestPackageFixed in
frankescobar/allure-docker-service:2.27.00815040339a9
glibc@2.27-3ubuntu1.2
no fix listed

Open the chart page →

65,440
cloudflare-tunnel-remotelovemew67Verified publisher0.1.21 of 1See more

cloudflare-tunnel-remote lovemew67 0.1.2

1 of the 1 container images this version deploys carry CVE-2026-80489.

Container imageDigestPackageFixed in
cloudflare/cloudflared:latestb269e8abd07a
glibc@2.41-12+deb13u3
no fix listed

Open the chart page →

356
mongo_guilovemew67Verified publisher0.0.21 of 1See more

mongo_gui lovemew67 0.0.2

1 of the 1 container images this version deploys carry CVE-2026-80489.

Container imageDigestPackageFixed in
haohanyang/compass-web:0.1.1e3952b14ae8e
glibc@2.36-9+deb12u9
no fix listed

Open the chart page →

2,019
oncall-hobbylovemew67Verified publisher0.0.51 of 2See more

oncall-hobby lovemew67 0.0.5

1 of the 2 container images this version deploys carry CVE-2026-80489.

Container imageDigestPackageFixed in
library/redis:7.0.15352c1fdadc91
glibc@2.36-9+deb12u8
no fix listed

Open the chart page →

5,911
vulnerability-scaninglovemew67Verified publisher0.0.31 of 2See more

vulnerability-scaning lovemew67 0.0.3

1 of the 2 container images this version deploys carry CVE-2026-80489.

Container imageDigestPackageFixed in
frankescobar/allure-docker-service:2.35.14154286c0209
glibc@2.39-0ubuntu8.6
2.39-0ubuntu8.9

Open the chart page →

5,245
loxilbloxilbVerified publisher0.1.02 of 2See more

loxilb loxilb 0.1.0

2 of the 2 container images this version deploys carry CVE-2026-80489.

Container imageDigestPackageFixed in
ghcr.io/loxilb-io/kube-loxilb:latest6f65e53e252d
glibc@2.35-0ubuntu3.14
2.35-0ubuntu3.15
ghcr.io/loxilb-io/loxilb:latesta475b43946b3
glibc@2.35-0ubuntu3.14
2.35-0ubuntu3.15

Open the chart page →

4,440
lsdisklsdiskVerified publisher2.0.71 of 4See more

lsdisk lsdisk 2.0.7

1 of the 4 container images this version deploys carry CVE-2026-80489.

Container imageDigestPackageFixed in
danialnabiyan1382/lsdisk:v2.0.8f96a7ebf1f42
glibc@2.36-9+deb12u13
no fix listed

Open the chart page →

5,016
nublado2lsst-sqre0.8.51 of 2See more

nublado2 lsst-sqre 0.8.5

1 of the 2 container images this version deploys carry CVE-2026-80489.

Container imageDigestPackageFixed in
lsstsqre/nublado2:2.0.1b75bf8aaafa4
glibc@2.31-0ubuntu9.2
no fix listed

Open the chart page →

91,575
redislsst-sqre1.2.11 of 1See more

redis lsst-sqre 1.2.1

1 of the 1 container images this version deploys carry CVE-2026-80489.

Container imageDigestPackageFixed in
library/redis:8.10.1298e5b3bc566
glibc@2.41-12+deb13u3
no fix listed

Open the chart page →

929
squash-apilsst-sqre0.1.61 of 3See more

squash-api lsst-sqre 0.1.6

1 of the 3 container images this version deploys carry CVE-2026-80489.

Container imageDigestPackageFixed in
library/redis:6.2143f7bfc2358
glibc@2.36-9+deb12u14
no fix listed

Open the chart page →

6,595
elastictranscoderluiscajl0.46.04 of 4See more

elastictranscoder luiscajl 0.46.0

4 of the 4 container images this version deploys carry CVE-2026-80489.

Container imageDigestPackageFixed in
elastictranscoder/media:627e21dc963ab3858c6b
glibc@2.27-3ubuntu1.2
no fix listed
elastictranscoder/media-storage:f6d861a026208b8c2359
glibc@2.27-3ubuntu1.2
no fix listed
elastictranscoder/transcoder:627e21dcb4a0327029e6
glibc@2.27-3ubuntu1.2
no fix listed
elastictranscoder/transcoder-handler:627e21dc5b75d19e2733
glibc@2.27-3ubuntu1.2
no fix listed

Open the chart page →

58,354
flaresolverrluiscajl0.0.31 of 1See more

flaresolverr luiscajl 0.0.3

1 of the 1 container images this version deploys carry CVE-2026-80489.

Container imageDigestPackageFixed in
flaresolverr/flaresolverr:latest139dfee1c6f8
glibc@2.36-9+deb12u14
no fix listed

Open the chart page →

27,831
plex-rclone-wireguardluiscajl1.0.191 of 2See more

plex-rclone-wireguard luiscajl 1.0.19

1 of the 2 container images this version deploys carry CVE-2026-80489.

Container imageDigestPackageFixed in
ghcr.io/linuxserver/plex:latest7f9a1d574958
glibc@2.43-2ubuntu2.3
2.43-2ubuntu2.4

Open the chart page →

876
hyperglassm0nsterrr-hyperglassVerified publisher4.2.11 of 2See more

hyperglass m0nsterrr-hyperglass 4.2.1

1 of the 2 container images this version deploys carry CVE-2026-80489.

Container imageDigestPackageFixed in
valkey/valkey:9.0.2930b41430fb7
glibc@2.41-12+deb13u1
no fix listed

Open the chart page →

4,647
jellyfinm0nsterrr-jellyfinVerified publisher2.3.51 of 1See more

jellyfin m0nsterrr-jellyfin 2.3.5

1 of the 1 container images this version deploys carry CVE-2026-80489.

Container imageDigestPackageFixed in
jellyfin/jellyfin:10.11.11aefb67e6a7ff
glibc@2.41-12+deb13u3
no fix listed

Open the chart page →

2,603
kea-exporterm0nsterrr-kea-exporterVerified publisher2.2.11 of 1See more

kea-exporter m0nsterrr-kea-exporter 2.2.1

1 of the 1 container images this version deploys carry CVE-2026-80489.

Container imageDigestPackageFixed in
ghcr.io/mweinelt/kea-exporter:v0.7.1d7b77020e924
glibc@2.41-12+deb13u3
no fix listed

Open the chart page →

1,100
m9sweeperm9sweeperVerified publisher1.6.01 of 6See more

m9sweeper m9sweeper 1.6.0

1 of the 6 container images this version deploys carry CVE-2026-80489.

Container imageDigestPackageFixed in
ghcr.io/m9sweeper/trawler:1.6.0df917c5a7e54
glibc@2.36-9+deb12u4
no fix listed

Open the chart page →

9,778
magistralamagistrala-devopsVerified publisher0.16.22 of 42See more

magistrala magistrala-devops 0.16.2

2 of the 42 container images this version deploys carry CVE-2026-80489.

Container imageDigestPackageFixed in
envoyproxy/envoy:v1.31-latestcaa5b411be16
glibc@2.35-0ubuntu3.10
2.35-0ubuntu3.15
jaegertracing/jaeger-cassandra-schema:1.53.0d48d6dab2c65
glibc@2.35-0ubuntu3.5
2.35-0ubuntu3.15

Open the chart page →

24,724
docker-mailservermailserverVerified publisher0.2.651 of 9See more

docker-mailserver mailserver 0.2.65

1 of the 9 container images this version deploys carry CVE-2026-80489.

Container imageDigestPackageFixed in
mvance/unbound:1.22.076906da36d18
glibc@2.36-9+deb12u8
no fix listed

Open the chart page →

11,486
demoshopmakaira2.4.02 of 4See more

demoshop makaira 2.4.0

2 of the 4 container images this version deploys carry CVE-2026-80489.

Container imageDigestPackageFixed in
library/nginx:stabled5792f71a949
glibc@2.41-12+deb13u3
no fix listed
library/php:8.4-fpm59fa733c9af6
glibc@2.41-12+deb13u3
no fix listed

Open the chart page →

4,597
plane-mcp-servermakeplaneVerified publisher1.0.02 of 2See more

plane-mcp-server makeplane 1.0.0

2 of the 2 container images this version deploys carry CVE-2026-80489.

Container imageDigestPackageFixed in
makeplane/plane-mcp-server:v0.3.071b7252adef0
glibc@2.41-12+deb13u3
no fix listed
valkey/valkey:9.1.164e361b630ec
glibc@2.41-12+deb13u3
no fix listed

Open the chart page →

2,581
nodecg-chartmarathon-charts0.1.51 of 2See more

nodecg-chart marathon-charts 0.1.5

1 of the 2 container images this version deploys carry CVE-2026-80489.

Container imageDigestPackageFixed in
ghcr.io/rodg/rtmp-controller:latest67f99a5beab7
glibc@2.36-9
no fix listed

Open the chart page →

7,406
eirmargaysVerified publisher1.7.21 of 1See more

eir margays 1.7.2

1 of the 1 container images this version deploys carry CVE-2026-80489.

Container imageDigestPackageFixed in
margays/eir:v1.7.22883fdd06fd7
glibc@2.36-9+deb12u13
no fix listed

Open the chart page →

747
marge-botmarge-bot-helm1.3.51 of 1See more

marge-bot marge-bot-helm 1.3.5

1 of the 1 container images this version deploys carry CVE-2026-80489.

Container imageDigestPackageFixed in
hiboxsystems/marge-bot:0.16.0b59f01bc0418
glibc@2.41-12
no fix listed

Open the chart page →

3,639
circleci-runnermatic-insurance0.1.11 of 1See more

circleci-runner matic-insurance 0.1.1

1 of the 1 container images this version deploys carry CVE-2026-80489.

Container imageDigestPackageFixed in
circleci/runner:launch-agent9bdc62f02162
glibc@2.31-0ubuntu9.16
no fix listed

Open the chart page →

4,172
nginxmatic-insurance1.1.11 of 1See more

nginx matic-insurance 1.1.1

1 of the 1 container images this version deploys carry CVE-2026-80489.

Container imageDigestPackageFixed in
library/nginx:stabled5792f71a949
glibc@2.41-12+deb13u3
no fix listed

Open the chart page →

1,887
matrix-authentication-servicematrix-authentication-serviceVerified publisher0.1.241 of 1See more

matrix-authentication-service matrix-authentication-service 0.1.24

1 of the 1 container images this version deploys carry CVE-2026-80489.

Container imageDigestPackageFixed in
ghcr.io/element-hq/matrix-authentication-service:1.24.052c18ffcc940
glibc@2.41-12+deb13u3
no fix listed

Open the chart page →

334
mattermostmattermostVerified publisher2.8.11 of 1See more

mattermost mattermost 2.8.1

1 of the 1 container images this version deploys carry CVE-2026-80489.

Container imageDigestPackageFixed in
mattermost/mattermost-enterprise-edition:11.71ba5ee61fc81
glibc@2.36-9+deb12u14
no fix listed

Open the chart page →

383
mattermost-team-editionmattermost-team-edition6.6.831 of 4See more

mattermost-team-edition mattermost-team-edition 6.6.83

1 of the 4 container images this version deploys carry CVE-2026-80489.

Container imageDigestPackageFixed in
mattermost/mattermost-team-edition:10.11.2b8bd1246cb3a
glibc@2.36-9+deb12u10
no fix listed

Open the chart page →

4,131
mauticmautic-chartVerified publisher1.0.22 of 3See more

mautic mautic-chart 1.0.2

2 of the 3 container images this version deploys carry CVE-2026-80489.

Container imageDigestPackageFixed in
bitnamilegacy/mariadb:11.2.6-debian-12-r0373c3c260571
glibc@2.36-9+deb12u8
no fix listed
mautic/mautic:7-apacheeb8cc73d97e1
glibc@2.36-9+deb12u14
no fix listed

Open the chart page →

8,359

Container images carrying it

2,708 by charts deploying them

A fixed version is listed for 1 of the 3 affected packages.

Container imageDigestPackageFixed inUsed by
registry.k8s.io/git-sync/git-sync:v4.5.00e64aedb0d0a
glibc@2.41-12
no fix listed
1
registry.k8s.io/git-sync/git-sync:v4.1.0fd9722fd02e3
glibc@2.36-9+deb12u3
no fix listed
1
registry.k8s.io/node-problem-detector/node-problem-detector:v0.8.2052f0618e9bc2
glibc@2.36-9+deb12u8
no fix listed
1
registry.k8s.io/node-problem-detector/node-problem-detector:v1.35.1c380751accc5
glibc@2.36-9+deb12u13
no fix listed
1
registry.k8s.io/sig-storage/local-volume-provisioner:v2.8.03e2bf2eaef9f
glibc@2.36-9+deb12u10
no fix listed
1
registry.k8s.io/sig-storage/local-volume-provisioner:v2.9.0f9d65db8bda2
glibc@2.36-9+deb12u14
no fix listed
1
registry.k8s.io/sig-storage/nfsplugin:v4.13.41eb5a85180a4
glibc@2.36-9+deb12u14
no fix listed
1
registry.k8s.io/sig-storage/nfsplugin:v4.11.0ce5b5ccd5eb0
glibc@2.36-9+deb12u10
no fix listed
1

syft 1.42.1 · advisories as of 21 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.