StackRadar

CVE-2026-85747

Medium

Advisory

Published 15 Oct 2026In the index since 16 Oct 2026
Severity
Medium
worst across findings
CVSS
6.8
base score, highest
EPSS
0.002
10th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
647
of 18,137 indexed, latest versions
Container images
634
deployed by those charts
Fix available
1 of 2
affected packages

Distribution: Client `manifests.Get()` does not verify returned content against requested digest

Carried by container images the latest versions of 647 of 18,137 indexed charts deploy, on 634 images.

Affected packageAffected versionsFixed inImages
github.com/docker/distributiongolangv0.0.0-20171011171712-7484e51bf6af, v0.0.0-20191216044856-a8371794149d, v0.0.0-20260602055908-11540eae06cb+dirty, v0.0.0-20260701071724-493dca9a81a8+dirty+12 moreno fix listed624
github.com/distribution/distribution/v3golangv0.0.0-20250402055438-9ed95e736522, v3.0.0, v3.0.0-20210316161203-a01c71e2477e, v3.0.0-20220526142353-ffbd94cbe269+9 more3.1.236
OSV records
GHSA-685w-q87j-wqw3
Trending
Rank 42 in indexed charts, since 16 Oct 2026. See the ranking →

Charts affected

647 by stars
ChartLatestAffected imagesRadar Score
jupyterhubmizzoukube0.0.1-set.by.chartpress1 of 7See more

jupyterhub mizzoukube 0.0.1-set.by.chartpress

1 of the 7 container images this version deploys carry CVE-2026-85747.

Container imageDigestPackageFixed in
registry.k8s.io/kube-scheduler:v1.28.73ae5620a33bb
github.com/docker/distribution@v2.8.2+incompatible
no fix listed

Open the chart page →

2,598
replacermosquitto-helm-chart0.2.01 of 3See more

replacer mosquitto-helm-chart 0.2.0

1 of the 3 container images this version deploys carry CVE-2026-85747.

Container imageDigestPackageFixed in
ghcr.io/liangyuanpeng/replacer:v1.1.00b2a41c2a43e
github.com/docker/distribution@v2.7.1+incompatible
no fix listed

Open the chart page →

6,060
authmyaVerified publisher22.4.31 of 1See more

auth mya 22.4.3

1 of the 1 container images this version deploys carry CVE-2026-85747.

Container imageDigestPackageFixed in
cesanta/docker_auth:1.6.04d16885f3d4c
github.com/docker/distribution@v2.7.1+incompatible
no fix listed

Open the chart page →

3,639
cognativemyaVerified publisher0.2403.31 of 3See more

cognative mya 0.2403.3

1 of the 3 container images this version deploys carry CVE-2026-85747.

Container imageDigestPackageFixed in
otel/opentelemetry-collector-contrib:0.96.07ef2a2ff46b9
github.com/docker/distribution@v2.8.2+incompatible
no fix listed

Open the chart page →

9,659
agent-control-cdnewrelic1.0.03 of 3See more

agent-control-cd newrelic 1.0.0

3 of the 3 container images this version deploys carry CVE-2026-85747.

Container imageDigestPackageFixed in
ghcr.io/fluxcd/flux-cli:v2.5.1274a179fd402
github.com/docker/distribution@v2.8.3+incompatible
no fix listed
ghcr.io/fluxcd/helm-controller:v1.2.062eaa9c9a929
github.com/docker/distribution@v2.8.3+incompatible
no fix listed
ghcr.io/fluxcd/source-controller:v1.5.000cd9316a379
github.com/docker/distribution@v2.8.3+incompatible
no fix listed

Open the chart page →

7,434
digikamnicholaswildeVerified publisher1.0.01 of 1See more

digikam nicholaswilde 1.0.0

1 of the 1 container images this version deploys carry CVE-2026-85747.

Container imageDigestPackageFixed in
ghcr.io/linuxserver/digikam:version-7.3.055b4c7f320ae
github.com/distribution/distribution/v3@v3.0.0-20210316161203-a01c71e2477e
github.com/docker/distribution@v2.7.1+incompatible
3.1.2
no fix listed

Open the chart page →

26,877
doublecommandernicholaswildeVerified publisher1.0.21 of 1See more

doublecommander nicholaswilde 1.0.2

1 of the 1 container images this version deploys carry CVE-2026-85747.

Container imageDigestPackageFixed in
ghcr.io/linuxserver/doublecommander:version-0.8.2-1d92969a929c2
github.com/distribution/distribution/v3@v3.0.0-20210316161203-a01c71e2477e
github.com/docker/distribution@v2.7.1+incompatible
3.1.2
no fix listed

Open the chart page →

28,046
remminanicholaswildeVerified publisher0.1.41 of 1See more

remmina nicholaswilde 0.1.4

1 of the 1 container images this version deploys carry CVE-2026-85747.

Container imageDigestPackageFixed in
ghcr.io/linuxserver/remmina:version-1.2.0-rcgit.29dfsg-1ubuntu105955792e00f
github.com/distribution/distribution/v3@v3.0.0-20210316161203-a01c71e2477e
github.com/docker/distribution@v2.8.0+incompatible
3.1.2
no fix listed

Open the chart page →

24,738
sqlitebrowsernicholaswildeVerified publisher1.0.11 of 1See more

sqlitebrowser nicholaswilde 1.0.1

1 of the 1 container images this version deploys carry CVE-2026-85747.

Container imageDigestPackageFixed in
ghcr.io/linuxserver/sqlitebrowser:version-3.12.2-02876202105241947ubuntu18.04.1426e79828c4b
github.com/distribution/distribution/v3@v3.0.0-20210316161203-a01c71e2477e
github.com/docker/distribution@v2.7.1+incompatible
3.1.2
no fix listed

Open the chart page →

26,093
minio-operatornineinfra-charts5.0.91 of 1See more

minio-operator nineinfra-charts 5.0.9

1 of the 1 container images this version deploys carry CVE-2026-85747.

Container imageDigestPackageFixed in
minio/operator:v5.0.9170b154d2c61
github.com/docker/distribution@v2.8.2+incompatible
no fix listed

Open the chart page →

4,242
prometheusnodepulse25.0.02 of 6See more

prometheus nodepulse 25.0.0

2 of the 6 container images this version deploys carry CVE-2026-85747.

Container imageDigestPackageFixed in
quay.io/prometheus-operator/prometheus-config-reloader:v0.67.014feefde1b80
github.com/docker/distribution@v2.8.2+incompatible
no fix listed
quay.io/prometheus/prometheus:v2.47.0c5dd35038287
github.com/docker/distribution@v2.8.2+incompatible
no fix listed

Open the chart page →

12,071
kafka-helm-chartnotesprojectchart0.1.01 of 1See more

kafka-helm-chart notesprojectchart 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-85747.

Container imageDigestPackageFixed in
wurstmeister/kafka:latest2d4bbf9cc83d
github.com/distribution/distribution/v3@v3.0.0-20210316161203-a01c71e2477e
github.com/docker/distribution@v2.8.0+incompatible
3.1.2
no fix listed

Open the chart page →

6,113
notification-componentnotification-component1.0.01 of 4See more

notification-component notification-component 1.0.0

1 of the 4 container images this version deploys carry CVE-2026-85747.

Container imageDigestPackageFixed in
ghcr.io/conductionnl/notification-component-php:latestcd9656e6bc2c
github.com/docker/distribution@v0.0.0-20191216044856-a8371794149d
no fix listed

Open the chart page →

9,558
example-dev-toolsnoygal0.2.81 of 3See more

example-dev-tools noygal 0.2.8

1 of the 3 container images this version deploys carry CVE-2026-85747.

Container imageDigestPackageFixed in
linuxserver/cloud9:latest45c5fe102ff3
github.com/distribution/distribution/v3@v3.0.0-20210316161203-a01c71e2477e
github.com/docker/distribution@v2.8.0+incompatible
3.1.2
no fix listed

Open the chart page →

29,532
nai-knative-servingnutanix-helm-releasesVerified publisher1.13.11 of 4See more

nai-knative-serving nutanix-helm-releases 1.13.1

1 of the 4 container images this version deploys carry CVE-2026-85747.

Container imageDigestPackageFixed in
gcr.io/knative-releases/knative.dev/serving/cmd/controller:v1.13.153d9aa4d2c7a
github.com/docker/distribution@v2.8.1+incompatible
no fix listed

Open the chart page →

6,393
lensoci-ai-incubations0.1.141 of 16See more

lens oci-ai-incubations 0.1.14

1 of the 16 container images this version deploys carry CVE-2026-85747.

Container imageDigestPackageFixed in
alpine/k8s:1.31.106dbe6f391eda
github.com/docker/distribution@v2.8.1+incompatible
no fix listed

Open the chart page →

24,416
multicluster-meshocm-helm-chartsVerified publisher0.0.21 of 1See more

multicluster-mesh ocm-helm-charts 0.0.2

1 of the 1 container images this version deploys carry CVE-2026-85747.

Container imageDigestPackageFixed in
quay.io/open-cluster-management/multicluster-mesh-addon:latest3e010e1188f1
github.com/docker/distribution@v2.7.1+incompatible
no fix listed

Open the chart page →

2,849
onedevonedev11.9.01 of 1See more

onedev onedev 11.9.0

1 of the 1 container images this version deploys carry CVE-2026-85747.

Container imageDigestPackageFixed in
1dev/server:11.9.0cd5b12fe5471
github.com/docker/distribution@v2.8.3+incompatible
no fix listed

Open the chart page →

7,365
one-green-coreone-green-coreVerified publisher0.0.71 of 8See more

one-green-core one-green-core 0.0.7

1 of the 8 container images this version deploys carry CVE-2026-85747.

Container imageDigestPackageFixed in
library/telegraf:1.20.428e98eece020
github.com/docker/distribution@v2.7.1+incompatible
no fix listed

Open the chart page →

13,931
anchore-engineopencloudcx1.13.01 of 2See more

anchore-engine opencloudcx 1.13.0

1 of the 2 container images this version deploys carry CVE-2026-85747.

Container imageDigestPackageFixed in
anchore/anchore-engine:v0.10.0bde9eedf639d
github.com/docker/distribution@v2.7.1+incompatible
no fix listed

Open the chart page →

19,948
voltha-infraopencord2.14.01 of 10See more

voltha-infra opencord 2.14.0

1 of the 10 container images this version deploys carry CVE-2026-85747.

Container imageDigestPackageFixed in
opencord/onos-classic-helm-utils:0.1.00d693ba85fd6
github.com/docker/distribution@v0.0.0-20191216044856-a8371794149d
no fix listed

Open the chart page →

45,981
probuilderopenfaas0.2.01 of 2See more

probuilder openfaas 0.2.0

1 of the 2 container images this version deploys carry CVE-2026-85747.

Container imageDigestPackageFixed in
moby/buildkit:v0.10.0c2aeafaed434
github.com/docker/distribution@v2.8.0+incompatible
no fix listed

Open the chart page →

5,894
fsmopenshift0.1.8-ubi.63 of 6See more

fsm openshift 0.1.8-ubi.6

3 of the 6 container images this version deploys carry CVE-2026-85747.

Container imageDigestPackageFixed in
quay.io/flomesh/fsm-bootstrap-ubi8:0.1.8-ubi.6e6d7afb1a4bf
github.com/docker/distribution@v2.8.1+incompatible
no fix listed
quay.io/flomesh/fsm-ingress-pipy-ubi8:0.1.8-ubi.6fce990dece01
github.com/docker/distribution@v2.8.1+incompatible
no fix listed
quay.io/flomesh/fsm-manager-ubi8:0.1.8-ubi.63590af73f65a
github.com/docker/distribution@v2.8.1+incompatible
no fix listed

Open the chart page →

20,028
harikubeopenshift0.16.31 of 3See more

harikube openshift 0.16.3

1 of the 3 container images this version deploys carry CVE-2026-85747.

Container imageDigestPackageFixed in
quay.io/harikube/vcluster-pro:0.32.1b741efae8d31
github.com/docker/distribution@v2.8.3+incompatible
no fix listed

Open the chart page →

4,027
kb-cloud-installeropenshift2.1.351 of 1See more

kb-cloud-installer openshift 2.1.35

1 of the 1 container images this version deploys carry CVE-2026-85747.

Container imageDigestPackageFixed in
apecloud/kb-cloud-installer:v2.1.42-certified98abc64aa985
github.com/distribution/distribution/v3@v3.0.0
github.com/docker/distribution@v2.8.2+incompatible
3.1.2
no fix listed

Open the chart page →

5,261
kubedb-certifiedopenshift2026.7.105 of 8See more

kubedb-certified openshift 2026.7.10

5 of the 8 container images this version deploys carry CVE-2026-85747.

Container imageDigestPackageFixed in
ghcr.io/appscode/petset:v0.1.093fa0daf603c
github.com/docker/distribution@v2.8.3+incompatible
no fix listed
ghcr.io/kubedb/kubedb-autoscaler:v0.51.05d1182ac21f0
github.com/docker/distribution@v2.8.3+incompatible
no fix listed
ghcr.io/kubedb/kubedb-crd-manager:v0.21.09506a6cb98d1
github.com/docker/distribution@v2.8.3+incompatible
no fix listed
ghcr.io/kubedb/kubedb-ops-manager:v0.53.06d4c9fe66e4f
github.com/docker/distribution@v2.8.3+incompatible
no fix listed
ghcr.io/kubedb/kubedb-provisioner:v0.66.0e7041c3b41e7
github.com/docker/distribution@v2.8.3+incompatible
no fix listed

Open the chart page →

7,522
kubestash-certifiedopenshift2026.7.101 of 2See more

kubestash-certified openshift 2026.7.10

1 of the 2 container images this version deploys carry CVE-2026-85747.

Container imageDigestPackageFixed in
ghcr.io/kubestash/kubestash:v0.29.00686b2a40280
github.com/docker/distribution@v2.8.3+incompatible
no fix listed

Open the chart page →

1,820
opscruiseopenshift0.35.1002 of 11See more

opscruise openshift 0.35.100

2 of the 11 container images this version deploys carry CVE-2026-85747.

Container imageDigestPackageFixed in
grafana/promtail:2.0.05fd12edcc694
github.com/docker/distribution@v2.7.1+incompatible
no fix listed
quay.io/prometheus/prometheus:v2.36.2df0cd5887887
github.com/docker/distribution@v2.7.1+incompatible
no fix listed

Open the chart page →

12,013
redhat-trusted-application-pipelineopenshift1.0.21 of 2See more

redhat-trusted-application-pipeline openshift 1.0.2

1 of the 2 container images this version deploys carry CVE-2026-85747.

Container imageDigestPackageFixed in
quay.io/redhat-appstudio/appstudio-utils:dbbdd82734232e6289e8fbae5b4c858481a7c0577b4202c25b67
github.com/docker/distribution@v2.8.2+incompatible
no fix listed

Open the chart page →

10,154
voyager-gatewayopenshift2026.1.152 of 2See more

voyager-gateway openshift 2026.1.15

2 of the 2 container images this version deploys carry CVE-2026-85747.

Container imageDigestPackageFixed in
ghcr.io/voyagermesh/crd-manager:v0.1.013fd0cccafe8
github.com/docker/distribution@v2.8.3+incompatible
no fix listed
ghcr.io/voyagermesh/gateway:v1.6.223f4da194134
github.com/docker/distribution@v2.8.3+incompatible
no fix listed

Open the chart page →

3,683
openvscode-serveropenvscode-server-helmVerified publisher2.7.441 of 2See more

openvscode-server openvscode-server-helm 2.7.44

1 of the 2 container images this version deploys carry CVE-2026-85747.

Container imageDigestPackageFixed in
library/docker:23.0.1-dindd9a0fd8bdd15
github.com/distribution/distribution/v3@v3.0.0-20230223072852-e5d5810851d1
github.com/docker/distribution@v2.8.1+incompatible
3.1.2
no fix listed

Open the chart page →

5,201
operator-lifecycle-manageroperator-lifecycle-managerVerified publisher1.2.22 of 2See more

operator-lifecycle-manager operator-lifecycle-manager 1.2.2

2 of the 2 container images this version deploys carry CVE-2026-85747.

Container imageDigestPackageFixed in
quay.io/operator-framework/catalogd:v1.8.06ff40fa6257f
github.com/docker/distribution@v2.8.3+incompatible
no fix listed
quay.io/operator-framework/operator-controller:v1.8.0bca5dfcc67ca
github.com/docker/distribution@v2.8.3+incompatible
no fix listed

Open the chart page →

2,874
opslevelopslevelVerified publisher2025.1.221 of 10See more

opslevel opslevel 2025.1.22

1 of the 10 container images this version deploys carry CVE-2026-85747.

Container imageDigestPackageFixed in
replicated/replicated-sdk:1.0.0-beta.318751b4963250
github.com/docker/distribution@v2.8.3+incompatible
no fix listed

Open the chart page →

2,761
orderregistratiecomponentorderregistratiecomponent1.0.01 of 3See more

orderregistratiecomponent orderregistratiecomponent 1.0.0

1 of the 3 container images this version deploys carry CVE-2026-85747.

Container imageDigestPackageFixed in
ghcr.io/conductionnl/orderregistratiecomponent-php:latestd17257e4fa27
github.com/docker/distribution@v0.0.0-20191216044856-a8371794149d
no fix listed

Open the chart page →

9,522
osdfir-infrastructureosdfir-infrastructureVerified publisher2.15.02 of 40See more

osdfir-infrastructure osdfir-infrastructure 2.15.0

2 of the 40 container images this version deploys carry CVE-2026-85747.

Container imageDigestPackageFixed in
gcr.io/kaniko-project/executor:latest4e7a52dd1f14
github.com/docker/distribution@v2.8.3+incompatible
no fix listed
ghcr.io/openrelik/openrelik-worker-containers:latesta6d5abe94706
github.com/docker/distribution@v2.8.3+incompatible
no fix listed

Open the chart page →

242,362
k8s-vault-webhookot-container-kit0.2.01 of 1See more

k8s-vault-webhook ot-container-kit 0.2.0

1 of the 1 container images this version deploys carry CVE-2026-85747.

Container imageDigestPackageFixed in
quay.io/opstree/k8s-vault-webhook:2.063b67ffcdb84
github.com/docker/distribution@v0.0.0-20171011171712-7484e51bf6af
no fix listed

Open the chart page →

3,875
parcaparca4.19.02 of 2See more

parca parca 4.19.0

2 of the 2 container images this version deploys carry CVE-2026-85747.

Container imageDigestPackageFixed in
ghcr.io/parca-dev/parca:v0.20.00d1df8f436f7
github.com/docker/distribution@v2.8.2+incompatible
no fix listed
ghcr.io/parca-dev/parca-agent:v0.28.06d6794f45f3e
github.com/docker/distribution@v2.8.3+incompatible
no fix listed

Open the chart page →

4,815
parcaparca-chart0.1.01 of 1See more

parca parca-chart 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-85747.

Container imageDigestPackageFixed in
ghcr.io/parca-dev/parca:v0.20.00d1df8f436f7
github.com/docker/distribution@v2.8.2+incompatible
no fix listed

Open the chart page →

2,727
istio-operatorparticuleio1.7.01 of 1See more

istio-operator particuleio 1.7.0

1 of the 1 container images this version deploys carry CVE-2026-85747.

Container imageDigestPackageFixed in
gcr.io/istio-testing/operator:latest8d4576f7b98f
github.com/docker/distribution@v2.8.3+incompatible
no fix listed

Open the chart page →

5,013
pet-battle-infrapetbattle1.0.322 of 2See more

pet-battle-infra petbattle 1.0.32

2 of the 2 container images this version deploys carry CVE-2026-85747.

Container imageDigestPackageFixed in
quay.io/openshift/origin-cli:latest486bf8e8f5b5
github.com/distribution/distribution/v3@v3.0.0-20230519140516-983358f8e250
3.1.2
quay.io/openshift/origin-cli:4.8bb5e052770e5
github.com/docker/distribution@v2.7.1+incompatible
no fix listed

Open the chart page →

18,040
pet-battle-tournamentpetbattle1.0.402 of 3See more

pet-battle-tournament petbattle 1.0.40

2 of the 3 container images this version deploys carry CVE-2026-85747.

Container imageDigestPackageFixed in
quay.io/openshift/origin-cli:latest486bf8e8f5b5
github.com/distribution/distribution/v3@v3.0.0-20230519140516-983358f8e250
3.1.2
quay.io/openshift/origin-cli:4.8bb5e052770e5
github.com/docker/distribution@v2.7.1+incompatible
no fix listed

Open the chart page →

18,040
external-dns-host-networkphntom0.0.121 of 1See more

external-dns-host-network phntom 0.0.12

1 of the 1 container images this version deploys carry CVE-2026-85747.

Container imageDigestPackageFixed in
phntom/external-dns-host-network:0.0.123adadbac8443
github.com/docker/distribution@v2.8.1+incompatible
no fix listed

Open the chart page →

6,595
loki-stackphntom2.10.21 of 2See more

loki-stack phntom 2.10.2

1 of the 2 container images this version deploys carry CVE-2026-85747.

Container imageDigestPackageFixed in
grafana/promtail:2.4.2626900031c4e
github.com/docker/distribution@v2.7.1+incompatible
no fix listed

Open the chart page →

8,441
npre-essentialsphntom0.1.603 of 22See more

npre-essentials phntom 0.1.60

3 of the 22 container images this version deploys carry CVE-2026-85747.

Container imageDigestPackageFixed in
grafana/promtail:2.7.0c16c710f7333
github.com/docker/distribution@v2.7.1+incompatible
no fix listed
phntom/chartmuseum:v0.15.29242b4df9e65
github.com/docker/distribution@v2.8.1+incompatible
no fix listed
quay.io/prometheus-operator/prometheus-operator:v0.61.1cd7d1a82ef00
github.com/docker/distribution@v2.8.1+incompatible
no fix listed

Open the chart page →

39,518
pixie-operator-chartpixie0.1.71 of 3See more

pixie-operator-chart pixie 0.1.7

1 of the 3 container images this version deploys carry CVE-2026-85747.

Container imageDigestPackageFixed in
quay.io/operator-framework/olmdigest-pinned1b6002156f56
github.com/docker/distribution@v2.8.2+incompatible
no fix listed

Open the chart page →

2,672
pixie-operator-helm2-chartpixie0.1.21 of 2See more

pixie-operator-helm2-chart pixie 0.1.2

1 of the 2 container images this version deploys carry CVE-2026-85747.

Container imageDigestPackageFixed in
quay.io/operator-framework/olmdigest-pinnedf9ea8cef95ac
github.com/docker/distribution@v2.8.1+incompatible
no fix listed

Open the chart page →

2,628
planectlplanectlVerified publisher0.7.03 of 10See more

planectl planectl 0.7.0

3 of the 10 container images this version deploys carry CVE-2026-85747.

Container imageDigestPackageFixed in
alpine/k8s:1.30.2cd560fce90f7
github.com/docker/distribution@v2.8.1+incompatible
no fix listed
gitea/act_runner:0.2.11c57233403eff
github.com/docker/distribution@v2.8.3+incompatible
no fix listed
quay.io/argoproj/argocd:v2.14.115fc69e31c755
github.com/docker/distribution@v2.8.3+incompatible
no fix listed

Open the chart page →

32,462
gitlab-runner-operatorpnnl-miscscripts0.1.61 of 1See more

gitlab-runner-operator pnnl-miscscripts 0.1.6

1 of the 1 container images this version deploys carry CVE-2026-85747.

Container imageDigestPackageFixed in
pnnlmiscscripts/gitlab-runner-operator:0.1.3-1155131891741
github.com/docker/distribution@v2.7.1+incompatible
no fix listed

Open the chart page →

12,810
procestypecatalogusprocestypecatalogus1.1.01 of 4See more

procestypecatalogus procestypecatalogus 1.1.0

1 of the 4 container images this version deploys carry CVE-2026-85747.

Container imageDigestPackageFixed in
ghcr.io/conductionnl/procestypecatalogus-php:latest956c4fb64796
github.com/docker/distribution@v0.0.0-20191216044856-a8371794149d
no fix listed

Open the chart page →

9,443
productenendienstencatalogusproductenendienstencatalogus1.0.01 of 3See more

productenendienstencatalogus productenendienstencatalogus 1.0.0

1 of the 3 container images this version deploys carry CVE-2026-85747.

Container imageDigestPackageFixed in
ghcr.io/conductionnl/productenendienstencatalogus-php:latest7242da105081
github.com/docker/distribution@v0.0.0-20191216044856-a8371794149d
no fix listed

Open the chart page →

9,547

Container images carrying it

634 by charts deploying them

A fixed version is listed for 1 of the 2 affected packages.

Container imageDigestPackageFixed inUsed by
ghcr.io/gomenhashai/gomenhashai:v1.3.36f031172a5ec
github.com/docker/distribution@v2.8.3+incompatible
no fix listed
1
ghcr.io/helm/chartmuseum:v0.16.071d1f1c0179e
github.com/docker/distribution@v2.8.2+incompatible
no fix listed
1
ghcr.io/helm/chartmuseum:v0.14.0878ef6a31fa0
github.com/docker/distribution@v2.7.1+incompatible
no fix listed
1
ghcr.io/helm/chartmuseum:v0.15.0c298183a5208
github.com/docker/distribution@v2.8.1+incompatible
no fix listed
1
ghcr.io/helm/chartmuseum:v0.16.3c81f105c3682
github.com/docker/distribution@v2.8.3+incompatible
no fix listed
1
ghcr.io/indeedeng/harbor-container-webhook:main45ca15fc294f
github.com/docker/distribution@v2.8.3+incompatible
no fix listed
1
ghcr.io/jaconi-io/koptimize:1.2.5aca1bbd609b6
github.com/docker/distribution@v2.8.2+incompatible
no fix listed
1
ghcr.io/jmberesford/retrom-service:retrom-v0.7.144d763d58f11d
github.com/docker/distribution@v2.8.3+incompatible
no fix listed
1
ghcr.io/k10app/businit:latest94c9a3e799c2
github.com/docker/distribution@v2.8.1+incompatible
no fix listed
1
ghcr.io/kagent-dev/kagent/tools:0.0.13c8882543f693
github.com/docker/distribution@v2.8.3+incompatible
no fix listed
1
ghcr.io/keel-hq/keel:0.22.409872633675d
github.com/distribution/distribution/v3@v3.0.0-20230722181636-7b502560cad4
github.com/docker/distribution@v2.8.3+incompatible
3.1.2
no fix listed
1
ghcr.io/keptn/scheduler:v0.8.20f7d277bb2b2
github.com/docker/distribution@v2.8.2+incompatible
no fix listed
1
ghcr.io/kgma74/dockyard:0.5.015d1d5769e91
github.com/docker/distribution@v2.8.3+incompatible
no fix listed
1
ghcr.io/kluster-manager/cluster-profile:v0.13.0b8b0aaef2543
github.com/docker/distribution@v2.8.3+incompatible
no fix listed
1
ghcr.io/kore3lab/kore-board.terminal:v0.5.5f52e66eff50b
github.com/docker/distribution@v2.8.1+incompatible
no fix listed
1
ghcr.io/krateoplatformops/core-provider:0.10.2205bcfac23e3
github.com/docker/distribution@v2.8.3+incompatible
no fix listed
1
ghcr.io/krateoplatformops/finops-composition-definition-parser:0.1.2d9d82c32f418
github.com/docker/distribution@v2.8.3+incompatible
no fix listed
1
ghcr.io/krateoplatformops/ghcr.io/loft-sh/vcluster:0.19.68849703f0ff8
github.com/docker/distribution@v2.8.2+incompatible
no fix listed
1
ghcr.io/kubedb/kubedb-autoscaler:v0.25.0df6b11907d33
github.com/docker/distribution@v2.8.1+incompatible
no fix listed
1
ghcr.io/kubedb/kubedb-dashboard:v0.16.07bfe1c07bd9b
github.com/docker/distribution@v2.8.2+incompatible
no fix listed
1
ghcr.io/kubedb/kubedb-kibana:v0.44.021591d9d6774
github.com/docker/distribution@v2.8.3+incompatible
no fix listed
1
ghcr.io/kubedb/kubedb-ops-manager:v0.27.1ec36422b09af
github.com/docker/distribution@v2.8.2+incompatible
no fix listed
1
ghcr.io/kubedb/kubedb-provisioner:v0.40.242574f512837
github.com/docker/distribution@v2.8.2+incompatible
no fix listed
1
ghcr.io/kubedb/kubedb-schema-manager:v0.44.000d017146f24
github.com/docker/distribution@v2.8.3+incompatible
no fix listed
1
ghcr.io/kubedb/kubedb-schema-manager:v0.16.09518de37eed5
github.com/docker/distribution@v2.8.1+incompatible
no fix listed
1
ghcr.io/kubedb/kubedb-ui-server:v0.44.0be49f4d7e01a
github.com/docker/distribution@v2.8.3+incompatible
no fix listed
1
ghcr.io/kubedb/kubedb-webhook-server:v0.16.2e24894e32cbc
github.com/docker/distribution@v2.8.2+incompatible
no fix listed
1
ghcr.io/kubenetworks/kubevpn:v2.11.104bab151b3613
github.com/docker/distribution@v2.8.3+incompatible
no fix listed
1
ghcr.io/kubevault/vault-operator:v0.24.00087cb49616f
github.com/docker/distribution@v2.8.3+incompatible
no fix listed
1
ghcr.io/kubiyabot/kubernetes:1.32.0b5ade0d9cc6b
github.com/docker/distribution@v2.8.3+incompatible
no fix listed
1
ghcr.io/kyverno/background-controller:v1.12.506ed5db6cd33
github.com/docker/distribution@v2.8.3+incompatible
no fix listed
1
ghcr.io/kyverno/cleanup-controller:v1.12.5b914032ef9ad
github.com/docker/distribution@v2.8.3+incompatible
no fix listed
1
ghcr.io/kyverno/kyverno:v1.7.19c73f1841ebc
github.com/docker/distribution@v2.8.0+incompatible
no fix listed
1
ghcr.io/kyverno/kyverno:v1.12.5a61c7022abcf
github.com/docker/distribution@v2.8.3+incompatible
no fix listed
1
ghcr.io/kyverno/kyverno-cli:v1.12.5832a32779e6d
github.com/docker/distribution@v2.8.3+incompatible
no fix listed
1
ghcr.io/kyverno/kyvernopre:v1.7.1185d2eebc60c
github.com/docker/distribution@v2.8.0+incompatible
no fix listed
1
ghcr.io/kyverno/kyvernopre:v1.12.563f7eaf5aa8a
github.com/docker/distribution@v2.8.3+incompatible
no fix listed
1
ghcr.io/kyverno/reports-controller:v1.12.5c62e3347611c
github.com/docker/distribution@v2.8.3+incompatible
no fix listed
1
ghcr.io/liangyuanpeng/replacer:v1.1.00b2a41c2a43e
github.com/docker/distribution@v2.7.1+incompatible
no fix listed
1
ghcr.io/linuxserver/digikam:version-7.3.055b4c7f320ae
github.com/distribution/distribution/v3@v3.0.0-20210316161203-a01c71e2477e
github.com/docker/distribution@v2.7.1+incompatible
3.1.2
no fix listed
1
ghcr.io/linuxserver/doublecommander:version-0.8.2-1d92969a929c2
github.com/distribution/distribution/v3@v3.0.0-20210316161203-a01c71e2477e
github.com/docker/distribution@v2.7.1+incompatible
3.1.2
no fix listed
1
ghcr.io/linuxserver/remmina:version-1.2.0-rcgit.29dfsg-1ubuntu105955792e00f
github.com/distribution/distribution/v3@v3.0.0-20210316161203-a01c71e2477e
github.com/docker/distribution@v2.8.0+incompatible
3.1.2
no fix listed
1
ghcr.io/linuxserver/sqlitebrowser:version-3.12.2-02876202105241947ubuntu18.04.1426e79828c4b
github.com/distribution/distribution/v3@v3.0.0-20210316161203-a01c71e2477e
github.com/docker/distribution@v2.7.1+incompatible
3.1.2
no fix listed
1
ghcr.io/lockdep/stackradar-scanner:0.6.0a90480c17377
github.com/docker/distribution@v2.8.3+incompatible
no fix listed
1
ghcr.io/loft-sh/agent:3.2.45c109914ff73
github.com/docker/distribution@v2.8.1+incompatible
no fix listed
1
ghcr.io/loft-sh/devpod-pro:0.0.0-ci.4-do-not-use5dfa86b6451f
github.com/distribution/distribution/v3@v3.0.0-20230214150026-36d8c594d7aa
github.com/docker/distribution@v2.8.1+incompatible
3.1.2
no fix listed
1
ghcr.io/loft-sh/loft:0.0.0-ci.14b69bcdaa8492
github.com/distribution/distribution/v3@v3.0.0-20230214150026-36d8c594d7aa
github.com/docker/distribution@v2.8.1+incompatible
3.1.2
no fix listed
1
ghcr.io/loft-sh/vcluster:0.16.484f70425f4dd
github.com/docker/distribution@v2.8.2+incompatible
no fix listed
1
ghcr.io/loft-sh/vcluster-control-plane:0.0.0-ci.4-do-not-use45e744fc623f
github.com/distribution/distribution/v3@v3.0.0-20230214150026-36d8c594d7aa
github.com/docker/distribution@v2.8.2+incompatible
3.1.2
no fix listed
1
ghcr.io/loft-sh/vcluster-platform:4.12.30783a83d770b
github.com/docker/distribution@v2.8.3+incompatible
no fix listed
1

syft 1.42.1 · advisories as of 16 Oct 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.