StackRadar

CVE-2026-85747

Medium

Advisory

Published 15 Oct 2026In the index since 16 Oct 2026
Severity
Medium
worst across findings
CVSS
6.8
base score, highest
EPSS
0.002
10th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
647
of 18,137 indexed, latest versions
Container images
634
deployed by those charts
Fix available
1 of 2
affected packages

Distribution: Client `manifests.Get()` does not verify returned content against requested digest

Carried by container images the latest versions of 647 of 18,137 indexed charts deploy, on 634 images.

Affected packageAffected versionsFixed inImages
github.com/docker/distributiongolangv0.0.0-20171011171712-7484e51bf6af, v0.0.0-20191216044856-a8371794149d, v0.0.0-20260602055908-11540eae06cb+dirty, v0.0.0-20260701071724-493dca9a81a8+dirty+12 moreno fix listed624
github.com/distribution/distribution/v3golangv0.0.0-20250402055438-9ed95e736522, v3.0.0, v3.0.0-20210316161203-a01c71e2477e, v3.0.0-20220526142353-ffbd94cbe269+9 more3.1.236
OSV records
GHSA-685w-q87j-wqw3
Trending
Rank 42 in indexed charts, since 16 Oct 2026. See the ranking →

Charts affected

647 by stars
ChartLatestAffected imagesRadar Score
panproto-application-nldesign0.1.01 of 5See more

pan proto-application-nldesign 0.1.0

1 of the 5 container images this version deploys carry CVE-2026-85747.

Container imageDigestPackageFixed in
conduction/pan-php:dev24f03c57568f
github.com/docker/distribution@v0.0.0-20191216044856-a8371794149d
no fix listed

Open the chart page →

11,388
proto-component-commongroundproto-component-commonground1.0.01 of 3See more

proto-component-commonground proto-component-commonground 1.0.0

1 of the 3 container images this version deploys carry CVE-2026-85747.

Container imageDigestPackageFixed in
ghcr.io/conductionnl/proto-component-commonground-php:latesteb36ead1954e
github.com/docker/distribution@v0.0.0-20191216044856-a8371794149d
no fix listed

Open the chart page →

9,547
loki-stackpyalive-cdmswebappVerified publisher2.6.51 of 4See more

loki-stack pyalive-cdmswebapp 2.6.5

1 of the 4 container images this version deploys carry CVE-2026-85747.

Container imageDigestPackageFixed in
grafana/promtail:2.4.2626900031c4e
github.com/docker/distribution@v2.7.1+incompatible
no fix listed

Open the chart page →

9,012
argo-workflowsquench-argo-workflowsVerified publisher0.0.81 of 1See more

argo-workflows quench-argo-workflows 0.0.8

1 of the 1 container images this version deploys carry CVE-2026-85747.

Container imageDigestPackageFixed in
ghcr.io/quenchworks/images/argo-workflowsdigest-pinned24498f85eed1
github.com/docker/distribution@v2.8.3+incompatible
no fix listed

Open the chart page →

17
concoursequench-concourseVerified publisher0.0.81 of 3See more

concourse quench-concourse 0.0.8

1 of the 3 container images this version deploys carry CVE-2026-85747.

Container imageDigestPackageFixed in
ghcr.io/quenchworks/images/concoursedigest-pinned755461ea934b
github.com/docker/distribution@v2.8.3+incompatible
no fix listed

Open the chart page →

348
connaisseurquench-connaisseurVerified publisher0.0.31 of 1See more

connaisseur quench-connaisseur 0.0.3

1 of the 1 container images this version deploys carry CVE-2026-85747.

Container imageDigestPackageFixed in
ghcr.io/quenchworks/images/connaisseurdigest-pinnedb88ae556af26
github.com/docker/distribution@v2.8.3+incompatible
no fix listed

Open the chart page →

65
gitops-stackquench-gitops-stackVerified publisher0.0.151 of 5See more

gitops-stack quench-gitops-stack 0.0.15

1 of the 5 container images this version deploys carry CVE-2026-85747.

Container imageDigestPackageFixed in
ghcr.io/quenchworks/images/argo-workflowsdigest-pinned24498f85eed1
github.com/docker/distribution@v2.8.3+incompatible
no fix listed

Open the chart page →

236
harborquench-harborVerified publisher0.0.441 of 9See more

harbor quench-harbor 0.0.44

1 of the 9 container images this version deploys carry CVE-2026-85747.

Container imageDigestPackageFixed in
ghcr.io/quenchworks/images/harbor-registrydigest-pinnedc75b5434d4dc
github.com/docker/distribution@v0.0.0-20260602055908-11540eae06cb+dirty
no fix listed

Open the chart page →

589
kubescape-operatorquench-kubescape-operatorVerified publisher0.0.93 of 5See more

kubescape-operator quench-kubescape-operator 0.0.9

3 of the 5 container images this version deploys carry CVE-2026-85747.

Container imageDigestPackageFixed in
ghcr.io/quenchworks/images/kubescapedigest-pinneda624c51217ea
github.com/docker/distribution@v2.8.3+incompatible
no fix listed
ghcr.io/quenchworks/images/kubescape-operatordigest-pinnedb861c9a1b694
github.com/docker/distribution@v2.8.3+incompatible
no fix listed
ghcr.io/quenchworks/images/kubevulndigest-pinned1a91383dc427
github.com/docker/distribution@v2.8.3+incompatible
no fix listed

Open the chart page →

736
vclusterquench-vclusterVerified publisher0.0.51 of 1See more

vcluster quench-vcluster 0.0.5

1 of the 1 container images this version deploys carry CVE-2026-85747.

Container imageDigestPackageFixed in
ghcr.io/quenchworks/images/vclusterdigest-pinned77ba2823e2fe
github.com/docker/distribution@v2.8.3+incompatible
no fix listed

Open the chart page →

159
rad-pluginsradOfficialVerified publisher2.4.151 of 5See more

rad-plugins rad 2.4.15

1 of the 5 container images this version deploys carry CVE-2026-85747.

Container imageDigestPackageFixed in
public.ecr.aws/n8h5y2v5/rad-security/rad-sbom:v1.1.710f5aeaf1a77e
github.com/docker/distribution@v2.8.3+incompatible
no fix listed

Open the chart page →

1,121
rancher-auto-registerrancher-auto-registerVerified publisher0.1.01 of 1See more

rancher-auto-register rancher-auto-register 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-85747.

Container imageDigestPackageFixed in
registry.gitlab.com/xrow-public/ci-tools/tools:main90a7a94db2b0
github.com/docker/distribution@v2.8.3+incompatible
no fix listed

Open the chart page →

2,562
ansible-automation-platformredhat-cop0.0.91 of 1See more

ansible-automation-platform redhat-cop 0.0.9

1 of the 1 container images this version deploys carry CVE-2026-85747.

Container imageDigestPackageFixed in
quay.io/openshift/origin-cli:4.7464a3af4dfe0
github.com/docker/distribution@v2.7.1+incompatible
no fix listed

Open the chart page →

16,714
argocd-operatorredhat-cop1.2.21 of 1See more

argocd-operator redhat-cop 1.2.2

1 of the 1 container images this version deploys carry CVE-2026-85747.

Container imageDigestPackageFixed in
quay.io/openshift/origin-cli:4.7464a3af4dfe0
github.com/docker/distribution@v2.7.1+incompatible
no fix listed

Open the chart page →

16,714
gitops-operatorredhat-cop0.10.61 of 1See more

gitops-operator redhat-cop 0.10.6

1 of the 1 container images this version deploys carry CVE-2026-85747.

Container imageDigestPackageFixed in
quay.io/openshift/origin-cli:latest486bf8e8f5b5
github.com/distribution/distribution/v3@v3.0.0-20230519140516-983358f8e250
3.1.2

Open the chart page →

1,617
ploigosredhat-cop0.0.92 of 2See more

ploigos redhat-cop 0.0.9

2 of the 2 container images this version deploys carry CVE-2026-85747.

Container imageDigestPackageFixed in
quay.io/openshift/origin-cli:latest486bf8e8f5b5
github.com/distribution/distribution/v3@v3.0.0-20230519140516-983358f8e250
3.1.2
quay.io/openshift/origin-cli:4.66722d5041b47
github.com/docker/distribution@v2.7.1+incompatible
no fix listed

Open the chart page →

14,170
sonatype-nexusredhat-cop1.1.131 of 2See more

sonatype-nexus redhat-cop 1.1.13

1 of the 2 container images this version deploys carry CVE-2026-85747.

Container imageDigestPackageFixed in
quay.io/openshift/origin-jenkins-agent-base:latestc241c971aef8
github.com/distribution/distribution/v3@v3.0.0-20230519140516-983358f8e250
3.1.2

Open the chart page →

17,370
stackrox-chartredhat-cop0.0.101 of 1See more

stackrox-chart redhat-cop 0.0.10

1 of the 1 container images this version deploys carry CVE-2026-85747.

Container imageDigestPackageFixed in
quay.io/rht-labs/stack-do500:3.0.86ba82beff18e
github.com/docker/distribution@v2.7.1+incompatible
no fix listed

Open the chart page →

31,361
retromretsamedocVerified publisher2026.2.51 of 1See more

retrom retsamedoc 2026.2.5

1 of the 1 container images this version deploys carry CVE-2026-85747.

Container imageDigestPackageFixed in
ghcr.io/jmberesford/retrom-service:retrom-v0.7.144d763d58f11d
github.com/docker/distribution@v2.8.3+incompatible
no fix listed

Open the chart page →

8,520
review-componentreview-component1.0.01 of 3See more

review-component review-component 1.0.0

1 of the 3 container images this version deploys carry CVE-2026-85747.

Container imageDigestPackageFixed in
ghcr.io/conductionnl/review-component-php:latestafe623824b82
github.com/docker/distribution@v0.0.0-20191216044856-a8371794149d
no fix listed

Open the chart page →

9,505
krr-enforcerrobusta0.3.51 of 2See more

krr-enforcer robusta 0.3.5

1 of the 2 container images this version deploys carry CVE-2026-85747.

Container imageDigestPackageFixed in
alpine/k8s:1.30.0bd01dae02676
github.com/docker/distribution@v2.8.2+incompatible
no fix listed

Open the chart page →

4,885
gitlab-operatorrock8sVerified publisher0.7.01 of 2See more

gitlab-operator rock8s 0.7.0

1 of the 2 container images this version deploys carry CVE-2026-85747.

Container imageDigestPackageFixed in
registry.gitlab.com/gitlab-org/cloud-native/gitlab-operator:0.5.136b19b72120e
github.com/docker/distribution@v2.7.1+incompatible
no fix listed

Open the chart page →

6,684
mailserverrock8sVerified publisher0.1.21 of 1See more

mailserver rock8s 0.1.2

1 of the 1 container images this version deploys carry CVE-2026-85747.

Container imageDigestPackageFixed in
registry.gitlab.com/bitspur/rock8s/images/kube-commands:3.1880ef8ceffc92
github.com/docker/distribution@v2.8.2+incompatible
no fix listed

Open the chart page →

2,699
ai-agentromholdings0.0.11 of 1See more

ai-agent romholdings 0.0.1

1 of the 1 container images this version deploys carry CVE-2026-85747.

Container imageDigestPackageFixed in
quay.io/devtron/ai-agent:0.0.16545dac92173
github.com/docker/distribution@v2.8.3+incompatible
no fix listed

Open the chart page →

11,152
argocdromholdings1.8.11 of 3See more

argocd romholdings 1.8.1

1 of the 3 container images this version deploys carry CVE-2026-85747.

Container imageDigestPackageFixed in
argoproj/argocd:v1.8.1830e86cacefd
github.com/docker/distribution@v2.7.1+incompatible
no fix listed

Open the chart page →

14,181
argocd-certificate-refreshromholdings0.10.81 of 1See more

argocd-certificate-refresh romholdings 0.10.8

1 of the 1 container images this version deploys carry CVE-2026-85747.

Container imageDigestPackageFixed in
quay.io/devtron/argocd-cert-refresh:v102b6db27eaf3d
github.com/docker/distribution@v2.8.1+incompatible
no fix listed

Open the chart page →

14,709
argo-workflowromholdings0.1.61 of 1See more

argo-workflow romholdings 0.1.6

1 of the 1 container images this version deploys carry CVE-2026-85747.

Container imageDigestPackageFixed in
quay.io/argoproj/workflow-controller:v3.4.7f0c6fba81a24
github.com/docker/distribution@v2.8.1+incompatible
no fix listed

Open the chart page →

2,345
clairromholdings0.1.141 of 2See more

clair romholdings 0.1.14

1 of the 2 container images this version deploys carry CVE-2026-85747.

Container imageDigestPackageFixed in
quay.io/devtron/clair:4.3.675fb847ac045
github.com/docker/distribution@v2.7.1+incompatible
no fix listed

Open the chart page →

8,148
devtron-enterpriseromholdings48.0.03 of 28See more

devtron-enterprise romholdings 48.0.0

3 of the 28 container images this version deploys carry CVE-2026-85747.

Container imageDigestPackageFixed in
quay.io/devtron/image-scanner:94237c18-109-3942098580969b333
github.com/docker/distribution@v2.8.3+incompatible
no fix listed
quay.io/devtron/inception:7beef376-948-313784c3b91bebd3d
github.com/docker/distribution@v2.7.1+incompatible
no fix listed
quay.io/devtron/kubectl:latest2ad610626658
github.com/docker/distribution@v2.8.1+incompatible
no fix listed

Open the chart page →

90,212
devtron-in-clustercdromholdings0.10.21 of 2See more

devtron-in-clustercd romholdings 0.10.2

1 of the 2 container images this version deploys carry CVE-2026-85747.

Container imageDigestPackageFixed in
quay.io/devtron/kubewatch:49f906a5-419-14814eec0305b594c
github.com/docker/distribution@v2.8.2+incompatible
no fix listed

Open the chart page →

7,030
devtron-logs-dumpromholdings0.1.01 of 1See more

devtron-logs-dump romholdings 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-85747.

Container imageDigestPackageFixed in
quay.io/devtron/k8s-utils:807ca3c2-488-14005f296c2ec5db7
github.com/docker/distribution@v2.8.1+incompatible
no fix listed

Open the chart page →

5,962
devtron-operatorromholdings0.23.32 of 11See more

devtron-operator romholdings 0.23.3

2 of the 11 container images this version deploys carry CVE-2026-85747.

Container imageDigestPackageFixed in
quay.io/devtron/hyperion:0874dcaf-280-3928701d5d8c4cecb
github.com/docker/distribution@v2.8.2+incompatible
no fix listed
quay.io/devtron/kubectl:latest2ad610626658
github.com/docker/distribution@v2.8.1+incompatible
no fix listed

Open the chart page →

42,853
kube-prometheus-stackromholdings19.3.01 of 6See more

kube-prometheus-stack romholdings 19.3.0

1 of the 6 container images this version deploys carry CVE-2026-85747.

Container imageDigestPackageFixed in
quay.io/prometheus-operator/prometheus-operator:v0.50.0ab4f480f2cc6
github.com/docker/distribution@v2.7.1+incompatible
no fix listed

Open the chart page →

12,276
securityromholdings0.2.21 of 1See more

security romholdings 0.2.2

1 of the 1 container images this version deploys carry CVE-2026-85747.

Container imageDigestPackageFixed in
quay.io/devtron/image-scanner:b278f42b-334-1111988c64b1b6ec8
github.com/docker/distribution@v2.7.1+incompatible
no fix listed

Open the chart page →

3,540
spindlerubxkubeVerified publisher0.1.21 of 2See more

spindle rubxkube 0.1.2

1 of the 2 container images this version deploys carry CVE-2026-85747.

Container imageDigestPackageFixed in
library/docker:29.8.1-dind3f3c01aaaebf
github.com/docker/distribution@v2.8.3+incompatible
no fix listed

Open the chart page →

2,014
rybbitrybbit-helm1.3.21 of 7See more

rybbit rybbit-helm 1.3.2

1 of the 7 container images this version deploys carry CVE-2026-85747.

Container imageDigestPackageFixed in
alpine/k8s:1.32.12048f8d9c8cc7
github.com/docker/distribution@v2.8.3+incompatible
no fix listed

Open the chart page →

8,880
prometheussaurabh6-prometheus0.2.01 of 1See more

prometheus saurabh6-prometheus 0.2.0

1 of the 1 container images this version deploys carry CVE-2026-85747.

Container imageDigestPackageFixed in
saurabh6/prometheus_setup:v19d4dbe7c1815
github.com/docker/distribution@v2.7.1+incompatible
no fix listed

Open the chart page →

3,865
opentelemetry-collectorsb-helm-charts0.3.01 of 1See more

opentelemetry-collector sb-helm-charts 0.3.0

1 of the 1 container images this version deploys carry CVE-2026-85747.

Container imageDigestPackageFixed in
otel/opentelemetry-collector-contrib:0.96.07ef2a2ff46b9
github.com/docker/distribution@v2.8.2+incompatible
no fix listed

Open the chart page →

2,444
ed-traefikscaleway-charts0.2.01 of 1See more

ed-traefik scaleway-charts 0.2.0

1 of the 1 container images this version deploys carry CVE-2026-85747.

Container imageDigestPackageFixed in
library/traefik:v1.7.345d47b7bb2546
github.com/docker/distribution@v2.7.1+incompatible
no fix listed

Open the chart page →

3,269
ed-traefik2scaleway-charts0.2.01 of 1See more

ed-traefik2 scaleway-charts 0.2.0

1 of the 1 container images this version deploys carry CVE-2026-85747.

Container imageDigestPackageFixed in
library/traefik:2.5.62f603f8d3abe
github.com/docker/distribution@v2.7.1+incompatible
no fix listed

Open the chart page →

4,314
crproxyschichtelVerified publisher0.1.41 of 1See more

crproxy schichtel 0.1.4

1 of the 1 container images this version deploys carry CVE-2026-85747.

Container imageDigestPackageFixed in
ghcr.io/daocloud/crproxy/crproxy:v0.8.0ee1eb3c9c9a1
github.com/distribution/distribution/v3@v3.0.0-20220907155224-78b9c98c5c31
3.1.2

Open the chart page →

1,965
centralbrainsciencemeshVerified publisher0.0.31 of 5See more

centralbrain sciencemesh 0.0.3

1 of the 5 container images this version deploys carry CVE-2026-85747.

Container imageDigestPackageFixed in
quay.io/prometheus/prometheus:v2.22.1b899dbd1b901
github.com/docker/distribution@v2.7.1+incompatible
no fix listed

Open the chart page →

14,674
hermitcrabseal-ioVerified publisher0.1.41 of 2See more

hermitcrab seal-io 0.1.4

1 of the 2 container images this version deploys carry CVE-2026-85747.

Container imageDigestPackageFixed in
sealio/terraform-deployer:v1.5.7-seal.1b0389d9848a5
github.com/docker/distribution@v2.8.1+incompatible
no fix listed

Open the chart page →

6,463
sigstore-probersigstoreVerified publisher0.3.11 of 1See more

sigstore-prober sigstore 0.3.1

1 of the 1 container images this version deploys carry CVE-2026-85747.

Container imageDigestPackageFixed in
ghcr.io/sigstore/sigstore-probers/prober:v1.0.1d1e914e6d6b9
github.com/docker/distribution@v2.8.3+incompatible
no fix listed

Open the chart page →

908
loggensikalabs0.1.01 of 1See more

loggen sikalabs 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-85747.

Container imageDigestPackageFixed in
sikalabs/slu:v0.72.07bd267f30247
github.com/docker/distribution@v2.8.2+incompatible
no fix listed

Open the chart page →

3,091
metrics-generatorsikalabs0.2.01 of 1See more

metrics-generator sikalabs 0.2.0

1 of the 1 container images this version deploys carry CVE-2026-85747.

Container imageDigestPackageFixed in
sikalabs/slu:v0.34.0fdc0c6711add
github.com/docker/distribution@v0.0.0-20171011171712-7484e51bf6af
no fix listed

Open the chart page →

3,692
olmsikalabs0.3.01 of 2See more

olm sikalabs 0.3.0

1 of the 2 container images this version deploys carry CVE-2026-85747.

Container imageDigestPackageFixed in
quay.io/operator-framework/olmdigest-pinned40d0363f4aa6
github.com/docker/distribution@v2.8.3+incompatible
no fix listed

Open the chart page →

2,026
sikalabs-harbor-master-snapshotsikalabs2023.6.203 of 8See more

sikalabs-harbor-master-snapshot sikalabs 2023.6.20

3 of the 8 container images this version deploys carry CVE-2026-85747.

Container imageDigestPackageFixed in
goharbor/harbor-registryctl:devca0765d1c0eb
github.com/docker/distribution@v0.0.0-20260921091602-ac7c4cedc2f4+dirty
no fix listed
goharbor/registry-photon:dev2d344e1d870d
github.com/docker/distribution@v0.0.0-20260921091602-ac7c4cedc2f4+dirty
no fix listed
goharbor/trivy-adapter-photon:dev72aa75db0f6c
github.com/docker/distribution@v2.8.2+incompatible
no fix listed

Open the chart page →

1,155
system-upgrade-controllersinextraVerified publisher0.6.11 of 1See more

system-upgrade-controller sinextra 0.6.1

1 of the 1 container images this version deploys carry CVE-2026-85747.

Container imageDigestPackageFixed in
rancher/system-upgrade-controller:v0.19.234fa058fe453
github.com/docker/distribution@v2.8.3+incompatible
no fix listed

Open the chart page →

653
teamcitysinextraVerified publisher1.1.01 of 3See more

teamcity sinextra 1.1.0

1 of the 3 container images this version deploys carry CVE-2026-85747.

Container imageDigestPackageFixed in
library/docker:26.1-dinddd43b430341a
github.com/docker/distribution@v2.8.3+incompatible
no fix listed

Open the chart page →

3,136

Container images carrying it

634 by charts deploying them

A fixed version is listed for 1 of the 2 affected packages.

Container imageDigestPackageFixed inUsed by
ghcr.io/gomenhashai/gomenhashai:v1.3.36f031172a5ec
github.com/docker/distribution@v2.8.3+incompatible
no fix listed
1
ghcr.io/helm/chartmuseum:v0.16.071d1f1c0179e
github.com/docker/distribution@v2.8.2+incompatible
no fix listed
1
ghcr.io/helm/chartmuseum:v0.14.0878ef6a31fa0
github.com/docker/distribution@v2.7.1+incompatible
no fix listed
1
ghcr.io/helm/chartmuseum:v0.15.0c298183a5208
github.com/docker/distribution@v2.8.1+incompatible
no fix listed
1
ghcr.io/helm/chartmuseum:v0.16.3c81f105c3682
github.com/docker/distribution@v2.8.3+incompatible
no fix listed
1
ghcr.io/indeedeng/harbor-container-webhook:main45ca15fc294f
github.com/docker/distribution@v2.8.3+incompatible
no fix listed
1
ghcr.io/jaconi-io/koptimize:1.2.5aca1bbd609b6
github.com/docker/distribution@v2.8.2+incompatible
no fix listed
1
ghcr.io/jmberesford/retrom-service:retrom-v0.7.144d763d58f11d
github.com/docker/distribution@v2.8.3+incompatible
no fix listed
1
ghcr.io/k10app/businit:latest94c9a3e799c2
github.com/docker/distribution@v2.8.1+incompatible
no fix listed
1
ghcr.io/kagent-dev/kagent/tools:0.0.13c8882543f693
github.com/docker/distribution@v2.8.3+incompatible
no fix listed
1
ghcr.io/keel-hq/keel:0.22.409872633675d
github.com/distribution/distribution/v3@v3.0.0-20230722181636-7b502560cad4
github.com/docker/distribution@v2.8.3+incompatible
3.1.2
no fix listed
1
ghcr.io/keptn/scheduler:v0.8.20f7d277bb2b2
github.com/docker/distribution@v2.8.2+incompatible
no fix listed
1
ghcr.io/kgma74/dockyard:0.5.015d1d5769e91
github.com/docker/distribution@v2.8.3+incompatible
no fix listed
1
ghcr.io/kluster-manager/cluster-profile:v0.13.0b8b0aaef2543
github.com/docker/distribution@v2.8.3+incompatible
no fix listed
1
ghcr.io/kore3lab/kore-board.terminal:v0.5.5f52e66eff50b
github.com/docker/distribution@v2.8.1+incompatible
no fix listed
1
ghcr.io/krateoplatformops/core-provider:0.10.2205bcfac23e3
github.com/docker/distribution@v2.8.3+incompatible
no fix listed
1
ghcr.io/krateoplatformops/finops-composition-definition-parser:0.1.2d9d82c32f418
github.com/docker/distribution@v2.8.3+incompatible
no fix listed
1
ghcr.io/krateoplatformops/ghcr.io/loft-sh/vcluster:0.19.68849703f0ff8
github.com/docker/distribution@v2.8.2+incompatible
no fix listed
1
ghcr.io/kubedb/kubedb-autoscaler:v0.25.0df6b11907d33
github.com/docker/distribution@v2.8.1+incompatible
no fix listed
1
ghcr.io/kubedb/kubedb-dashboard:v0.16.07bfe1c07bd9b
github.com/docker/distribution@v2.8.2+incompatible
no fix listed
1
ghcr.io/kubedb/kubedb-kibana:v0.44.021591d9d6774
github.com/docker/distribution@v2.8.3+incompatible
no fix listed
1
ghcr.io/kubedb/kubedb-ops-manager:v0.27.1ec36422b09af
github.com/docker/distribution@v2.8.2+incompatible
no fix listed
1
ghcr.io/kubedb/kubedb-provisioner:v0.40.242574f512837
github.com/docker/distribution@v2.8.2+incompatible
no fix listed
1
ghcr.io/kubedb/kubedb-schema-manager:v0.44.000d017146f24
github.com/docker/distribution@v2.8.3+incompatible
no fix listed
1
ghcr.io/kubedb/kubedb-schema-manager:v0.16.09518de37eed5
github.com/docker/distribution@v2.8.1+incompatible
no fix listed
1
ghcr.io/kubedb/kubedb-ui-server:v0.44.0be49f4d7e01a
github.com/docker/distribution@v2.8.3+incompatible
no fix listed
1
ghcr.io/kubedb/kubedb-webhook-server:v0.16.2e24894e32cbc
github.com/docker/distribution@v2.8.2+incompatible
no fix listed
1
ghcr.io/kubenetworks/kubevpn:v2.11.104bab151b3613
github.com/docker/distribution@v2.8.3+incompatible
no fix listed
1
ghcr.io/kubevault/vault-operator:v0.24.00087cb49616f
github.com/docker/distribution@v2.8.3+incompatible
no fix listed
1
ghcr.io/kubiyabot/kubernetes:1.32.0b5ade0d9cc6b
github.com/docker/distribution@v2.8.3+incompatible
no fix listed
1
ghcr.io/kyverno/background-controller:v1.12.506ed5db6cd33
github.com/docker/distribution@v2.8.3+incompatible
no fix listed
1
ghcr.io/kyverno/cleanup-controller:v1.12.5b914032ef9ad
github.com/docker/distribution@v2.8.3+incompatible
no fix listed
1
ghcr.io/kyverno/kyverno:v1.7.19c73f1841ebc
github.com/docker/distribution@v2.8.0+incompatible
no fix listed
1
ghcr.io/kyverno/kyverno:v1.12.5a61c7022abcf
github.com/docker/distribution@v2.8.3+incompatible
no fix listed
1
ghcr.io/kyverno/kyverno-cli:v1.12.5832a32779e6d
github.com/docker/distribution@v2.8.3+incompatible
no fix listed
1
ghcr.io/kyverno/kyvernopre:v1.7.1185d2eebc60c
github.com/docker/distribution@v2.8.0+incompatible
no fix listed
1
ghcr.io/kyverno/kyvernopre:v1.12.563f7eaf5aa8a
github.com/docker/distribution@v2.8.3+incompatible
no fix listed
1
ghcr.io/kyverno/reports-controller:v1.12.5c62e3347611c
github.com/docker/distribution@v2.8.3+incompatible
no fix listed
1
ghcr.io/liangyuanpeng/replacer:v1.1.00b2a41c2a43e
github.com/docker/distribution@v2.7.1+incompatible
no fix listed
1
ghcr.io/linuxserver/digikam:version-7.3.055b4c7f320ae
github.com/distribution/distribution/v3@v3.0.0-20210316161203-a01c71e2477e
github.com/docker/distribution@v2.7.1+incompatible
3.1.2
no fix listed
1
ghcr.io/linuxserver/doublecommander:version-0.8.2-1d92969a929c2
github.com/distribution/distribution/v3@v3.0.0-20210316161203-a01c71e2477e
github.com/docker/distribution@v2.7.1+incompatible
3.1.2
no fix listed
1
ghcr.io/linuxserver/remmina:version-1.2.0-rcgit.29dfsg-1ubuntu105955792e00f
github.com/distribution/distribution/v3@v3.0.0-20210316161203-a01c71e2477e
github.com/docker/distribution@v2.8.0+incompatible
3.1.2
no fix listed
1
ghcr.io/linuxserver/sqlitebrowser:version-3.12.2-02876202105241947ubuntu18.04.1426e79828c4b
github.com/distribution/distribution/v3@v3.0.0-20210316161203-a01c71e2477e
github.com/docker/distribution@v2.7.1+incompatible
3.1.2
no fix listed
1
ghcr.io/lockdep/stackradar-scanner:0.6.0a90480c17377
github.com/docker/distribution@v2.8.3+incompatible
no fix listed
1
ghcr.io/loft-sh/agent:3.2.45c109914ff73
github.com/docker/distribution@v2.8.1+incompatible
no fix listed
1
ghcr.io/loft-sh/devpod-pro:0.0.0-ci.4-do-not-use5dfa86b6451f
github.com/distribution/distribution/v3@v3.0.0-20230214150026-36d8c594d7aa
github.com/docker/distribution@v2.8.1+incompatible
3.1.2
no fix listed
1
ghcr.io/loft-sh/loft:0.0.0-ci.14b69bcdaa8492
github.com/distribution/distribution/v3@v3.0.0-20230214150026-36d8c594d7aa
github.com/docker/distribution@v2.8.1+incompatible
3.1.2
no fix listed
1
ghcr.io/loft-sh/vcluster:0.16.484f70425f4dd
github.com/docker/distribution@v2.8.2+incompatible
no fix listed
1
ghcr.io/loft-sh/vcluster-control-plane:0.0.0-ci.4-do-not-use45e744fc623f
github.com/distribution/distribution/v3@v3.0.0-20230214150026-36d8c594d7aa
github.com/docker/distribution@v2.8.2+incompatible
3.1.2
no fix listed
1
ghcr.io/loft-sh/vcluster-platform:4.12.30783a83d770b
github.com/docker/distribution@v2.8.3+incompatible
no fix listed
1

syft 1.42.1 · advisories as of 16 Oct 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.