StackRadar

CVE-2026-85747

Medium

Advisory

Published 15 Oct 2026In the index since 16 Oct 2026
Severity
Medium
worst across findings
CVSS
6.8
base score, highest
EPSS
0.002
10th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
647
of 18,137 indexed, latest versions
Container images
634
deployed by those charts
Fix available
1 of 2
affected packages

Distribution: Client `manifests.Get()` does not verify returned content against requested digest

Carried by container images the latest versions of 647 of 18,137 indexed charts deploy, on 634 images.

Affected packageAffected versionsFixed inImages
github.com/docker/distributiongolangv0.0.0-20171011171712-7484e51bf6af, v0.0.0-20191216044856-a8371794149d, v0.0.0-20260602055908-11540eae06cb+dirty, v0.0.0-20260701071724-493dca9a81a8+dirty+12 moreno fix listed624
github.com/distribution/distribution/v3golangv0.0.0-20250402055438-9ed95e736522, v3.0.0, v3.0.0-20210316161203-a01c71e2477e, v3.0.0-20220526142353-ffbd94cbe269+9 more3.1.236
OSV records
GHSA-685w-q87j-wqw3
Trending
Rank 42 in indexed charts, since 16 Oct 2026. See the ranking →

Charts affected

647 by stars
ChartLatestAffected imagesRadar Score
gitlabgitlabVerified publisher10.5.01 of 21See more

gitlab gitlab 10.5.0

1 of the 21 container images this version deploys carry CVE-2026-85747.

Container imageDigestPackageFixed in
registry.gitlab.com/gitlab-org/build/cng/gitlab-container-registry:v4.42.0-gitlab4fed422a7637
github.com/docker/distribution@v0.0.0-20260924080132-64ce589791cc
no fix listed

Open the chart page →

20,464
harborharborOfficialVerified publisher1.19.23 of 8See more

harbor harbor 1.19.2

3 of the 8 container images this version deploys carry CVE-2026-85747.

Container imageDigestPackageFixed in
goharbor/harbor-registryctl:v2.15.2223d5cb49d5d
github.com/docker/distribution@v0.0.0-20260701071724-493dca9a81a8+dirty
no fix listed
goharbor/registry-photon:v2.15.2c4ebef61ceb5
github.com/docker/distribution@v0.0.0-20260701071724-493dca9a81a8+dirty
no fix listed
goharbor/trivy-adapter-photon:v2.15.2215c07b71c37
github.com/docker/distribution@v2.8.2+incompatible
no fix listed

Open the chart page →

3,440
rancherrancher-stable2.15.22 of 2See more

rancher rancher-stable 2.15.2

2 of the 2 container images this version deploys carry CVE-2026-85747.

Container imageDigestPackageFixed in
rancher/rancher:v2.15.20c3d8e570255
github.com/docker/distribution@v2.8.3+incompatible
no fix listed
rancher/shell:v0.8.21eeed72d4eda
github.com/docker/distribution@v2.8.3+incompatible
no fix listed

Open the chart page →

2,662
artifact-hubartifact-hubVerified publisher1.23.03 of 7See more

artifact-hub artifact-hub 1.23.0

3 of the 7 container images this version deploys carry CVE-2026-85747.

Container imageDigestPackageFixed in
aquasec/trivy:0.69.3bcc376de8d77
github.com/docker/distribution@v2.8.3+incompatible
no fix listed
artifacthub/scanner:v1.23.02d8365601f0e
github.com/docker/distribution@v2.8.3+incompatible
no fix listed
artifacthub/tracker:v1.23.05368d21a6e5c
github.com/docker/distribution@v2.8.3+incompatible
no fix listed

Open the chart page →

15,103
argocd-image-updaterargoOfficialVerified publisher1.3.21 of 1See more

argocd-image-updater argo 1.3.2

1 of the 1 container images this version deploys carry CVE-2026-85747.

Container imageDigestPackageFixed in
quay.io/argoprojlabs/argocd-image-updater:v1.3.1a578e328e8cb
github.com/distribution/distribution/v3@v3.1.1
3.1.2

Open the chart page →

407
falcofalcosecurity9.2.02 of 3See more

falco falcosecurity 9.2.0

2 of the 3 container images this version deploys carry CVE-2026-85747.

Container imageDigestPackageFixed in
falcosecurity/falco:0.45.0788f1129c542
github.com/docker/distribution@v2.8.3+incompatible
no fix listed
falcosecurity/falco-driver-loader:0.45.0d7d287d4dcee
github.com/docker/distribution@v2.8.3+incompatible
no fix listed

Open the chart page →

4,026
chartmuseumchartmuseumVerified publisher3.10.41 of 1See more

chartmuseum chartmuseum 3.10.4

1 of the 1 container images this version deploys carry CVE-2026-85747.

Container imageDigestPackageFixed in
ghcr.io/helm/chartmuseum:v0.16.3c81f105c3682
github.com/docker/distribution@v2.8.3+incompatible
no fix listed

Open the chart page →

2,159
openfaasopenfaas15.0.131 of 6See more

openfaas openfaas 15.0.13

1 of the 6 container images this version deploys carry CVE-2026-85747.

Container imageDigestPackageFixed in
ghcr.io/openfaas/gateway:0.27.14ee0eaecc490c
github.com/docker/distribution@v2.8.3+incompatible
no fix listed

Open the chart page →

5,740
linkerd-vizlinkerd2Verified publisher30.12.111 of 5See more

linkerd-viz linkerd2 30.12.11

1 of the 5 container images this version deploys carry CVE-2026-85747.

Container imageDigestPackageFixed in
prom/prometheus:v2.48.0b440bc0e8aa5
github.com/docker/distribution@v2.8.2+incompatible
no fix listed

Open the chart page →

2,078
portainerportainer245.2.01 of 1See more

portainer portainer 245.2.0

1 of the 1 container images this version deploys carry CVE-2026-85747.

Container imageDigestPackageFixed in
portainer/portainer-ce:2.45.203f94a406496
github.com/docker/distribution@v2.8.3+incompatible
no fix listed

Open the chart page →

585
vclusterloftVerified publisher0.0.0-ci.31 of 2See more

vcluster loft 0.0.0-ci.3

1 of the 2 container images this version deploys carry CVE-2026-85747.

Container imageDigestPackageFixed in
rancher/k3s:v1.26.0-k3s19380f5dbae9a
github.com/docker/distribution@v2.8.1+incompatible
no fix listed

Open the chart page →

3,367
mesherymesheryOfficialVerified publisher1.0.711 of 1See more

meshery meshery 1.0.71

1 of the 1 container images this version deploys carry CVE-2026-85747.

Container imageDigestPackageFixed in
meshery/meshery:stable-latestb3816d0c691d
github.com/docker/distribution@v2.8.3+incompatible
no fix listed

Open the chart page →

1,943
keelkeel1.2.31 of 1See more

keel keel 1.2.3

1 of the 1 container images this version deploys carry CVE-2026-85747.

Container imageDigestPackageFixed in
ghcr.io/keel-hq/keel:0.22.409872633675d
github.com/distribution/distribution/v3@v3.0.0-20230722181636-7b502560cad4
github.com/docker/distribution@v2.8.3+incompatible
3.1.2
no fix listed

Open the chart page →

1,158
dragonflydragonflyVerified publisher1.8.61 of 3See more

dragonfly dragonfly 1.8.6

1 of the 3 container images this version deploys carry CVE-2026-85747.

Container imageDigestPackageFixed in
dragonflyoss/scheduler:v2.5.2d5dea9e662cd
github.com/docker/distribution@v2.8.3+incompatible
no fix listed

Open the chart page →

5,523
rancherrancher-latest2.15.22 of 2See more

rancher rancher-latest 2.15.2

2 of the 2 container images this version deploys carry CVE-2026-85747.

Container imageDigestPackageFixed in
rancher/rancher:v2.15.20c3d8e570255
github.com/docker/distribution@v2.8.3+incompatible
no fix listed
rancher/shell:v0.8.21eeed72d4eda
github.com/docker/distribution@v2.8.3+incompatible
no fix listed

Open the chart page →

2,662
stackgres-operatorstackgres-chartsOfficialVerified publisher1.19.31 of 2See more

stackgres-operator stackgres-charts 1.19.3

1 of the 2 container images this version deploys carry CVE-2026-85747.

Container imageDigestPackageFixed in
quay.io/ongres/kubectl:v1.25.16-build-6.5304dada9e4503
github.com/docker/distribution@v2.8.1+incompatible
no fix listed

Open the chart page →

3,209
pulsarapache4.8.02 of 10See more

pulsar apache 4.8.0

2 of the 10 container images this version deploys carry CVE-2026-85747.

Container imageDigestPackageFixed in
alpine/k8s:1.32.12048f8d9c8cc7
github.com/docker/distribution@v2.8.3+incompatible
no fix listed
rancher/kubectl:v1.25.085a0d1148784
github.com/docker/distribution@v2.8.1+incompatible
no fix listed

Open the chart page →

13,667
operatorminio-operator7.1.11 of 1See more

operator minio-operator 7.1.1

1 of the 1 container images this version deploys carry CVE-2026-85747.

Container imageDigestPackageFixed in
quay.io/minio/operator:v7.1.1cd587f60c43d
github.com/docker/distribution@v2.8.3+incompatible
no fix listed

Open the chart page →

1,446
vela-corekubevela1.11.01 of 3See more

vela-core kubevela 1.11.0

1 of the 3 container images this version deploys carry CVE-2026-85747.

Container imageDigestPackageFixed in
oamdev/vela-core:v1.11.095fa412c934e
github.com/docker/distribution@v2.8.3+incompatible
no fix listed

Open the chart page →

6,956
oktetooktetoOfficialVerified publisher0.0.0-2026-08-312 of 10See more

okteto okteto 0.0.0-2026-08-31

2 of the 10 container images this version deploys carry CVE-2026-85747.

Container imageDigestPackageFixed in
ghcr.io/okteto/backend:0.0.0-2026-08-316171cb2b2a72
github.com/docker/distribution@v2.8.2-beta.1+incompatible
no fix listed
ghcr.io/okteto/registry:0.0.0-2026-08-3169131511501f
github.com/docker/distribution@v0.0.0-20260803174359-77a4b05a258a
no fix listed

Open the chart page →

8,657
oncallgrafana1.16.51 of 12See more

oncall grafana 1.16.5

1 of the 12 container images this version deploys carry CVE-2026-85747.

Container imageDigestPackageFixed in
quay.io/jetstack/cert-manager-ctl:v1.8.0595c548dee6f
github.com/docker/distribution@v2.8.1+incompatible
no fix listed

Open the chart page →

23,946
wazuhwazuh-helm-morgovedVerified publisher2.0.71 of 5See more

wazuh wazuh-helm-morgoved 2.0.7

1 of the 5 container images this version deploys carry CVE-2026-85747.

Container imageDigestPackageFixed in
wazuh/wazuh-manager:4.14.3f09282d281f6
github.com/docker/distribution@v2.7.1+incompatible
no fix listed

Open the chart page →

13,924
aws-cloudwatch-metricsaws0.0.111 of 1See more

aws-cloudwatch-metrics aws 0.0.11

1 of the 1 container images this version deploys carry CVE-2026-85747.

Container imageDigestPackageFixed in
amazon/cloudwatch-agent:1.300032.2b36173b79b02f03a
github.com/docker/distribution@v2.8.2+incompatible
no fix listed

Open the chart page →

2,256
linkerd-jaegerlinkerd2Verified publisher30.12.111 of 4See more

linkerd-jaeger linkerd2 30.12.11

1 of the 4 container images this version deploys carry CVE-2026-85747.

Container imageDigestPackageFixed in
otel/opentelemetry-collector:0.59.0ee9da0b08d83
github.com/docker/distribution@v2.8.1+incompatible
no fix listed

Open the chart page →

6,416
kubescape-operatorkubescape1.40.54 of 6See more

kubescape-operator kubescape 1.40.5

4 of the 6 container images this version deploys carry CVE-2026-85747.

Container imageDigestPackageFixed in
quay.io/kubescape/kubescape:v4.0.14418fa941ecc0
github.com/docker/distribution@v2.8.3+incompatible
no fix listed
quay.io/kubescape/kubevuln:v0.3.4309bed2f723ea0
github.com/docker/distribution@v2.8.3+incompatible
no fix listed
quay.io/kubescape/node-agent:v0.3.2192044ed750f5e
github.com/docker/distribution@v2.8.3+incompatible
no fix listed
quay.io/kubescape/operator:v0.2.1721ddcd2788e1e
github.com/docker/distribution@v2.8.3+incompatible
no fix listed

Open the chart page →

2,530
linkerd-vizlinkerd2-edgeVerified publisher30.14.11-edge1 of 5See more

linkerd-viz linkerd2-edge 30.14.11-edge

1 of the 5 container images this version deploys carry CVE-2026-85747.

Container imageDigestPackageFixed in
prom/prometheus:v2.48.1a67e5e402ff5
github.com/docker/distribution@v2.8.2+incompatible
no fix listed

Open the chart page →

2,043
codefreshcodefresh-onpremOfficialVerified publisher2.12.221 of 42See more

codefresh codefresh-onprem 2.12.22

1 of the 42 container images this version deploys carry CVE-2026-85747.

Container imageDigestPackageFixed in
quay.io/codefresh/dind:3.0.250885ab519dac
github.com/docker/distribution@v2.8.3+incompatible
no fix listed

Open the chart page →

20,035
loki-simple-scalablegrafana1.8.111 of 3See more

loki-simple-scalable grafana 1.8.11

1 of the 3 container images this version deploys carry CVE-2026-85747.

Container imageDigestPackageFixed in
grafana/agent-operator:v0.25.1a136c6208aa3
github.com/docker/distribution@v2.8.1+incompatible
no fix listed

Open the chart page →

8,922
coreneuvectorchartsVerified publisher2.11.23 of 5See more

core neuvectorcharts 2.11.2

3 of the 5 container images this version deploys carry CVE-2026-85747.

Container imageDigestPackageFixed in
neuvector/controller:5.6.2824e29cf32c5
github.com/docker/distribution@v2.8.3+incompatible
no fix listed
neuvector/enforcer:5.6.272e1deee40fb
github.com/docker/distribution@v2.8.3+incompatible
no fix listed
neuvector/scanner:6175d3e676ab0
github.com/docker/distribution@v2.8.3+incompatible
no fix listed

Open the chart page →

1,181
diunnicholaswildeVerified publisher1.0.01 of 1See more

diun nicholaswilde 1.0.0

1 of the 1 container images this version deploys carry CVE-2026-85747.

Container imageDigestPackageFixed in
ghcr.io/crazy-max/diun:4.19.0c94e32b888e4
github.com/docker/distribution@v2.7.1+incompatible
no fix listed

Open the chart page →

4,986
waypointhashicorpVerified publisher0.1.211 of 2See more

waypoint hashicorp 0.1.21

1 of the 2 container images this version deploys carry CVE-2026-85747.

Container imageDigestPackageFixed in
hashicorp/waypoint:0.11.397d521a27498
github.com/distribution/distribution/v3@v3.0.0-20220526142353-ffbd94cbe269
github.com/docker/distribution@v2.8.1+incompatible
3.1.2
no fix listed

Open the chart page →

5,089
connaisseurconnaisseurVerified publisher2.13.01 of 2See more

connaisseur connaisseur 2.13.0

1 of the 2 container images this version deploys carry CVE-2026-85747.

Container imageDigestPackageFixed in
securesystemsengineering/connaisseur:v3.13.0cef2efbd8bd3
github.com/docker/distribution@v2.8.3+incompatible
no fix listed

Open the chart page →

4,279
devtron-operatordevtron0.23.32 of 11See more

devtron-operator devtron 0.23.3

2 of the 11 container images this version deploys carry CVE-2026-85747.

Container imageDigestPackageFixed in
quay.io/devtron/hyperion:0874dcaf-280-3928701d5d8c4cecb
github.com/docker/distribution@v2.8.2+incompatible
no fix listed
quay.io/devtron/kubectl:latest2ad610626658
github.com/docker/distribution@v2.8.1+incompatible
no fix listed

Open the chart page →

42,853
drone-runner-kubedroneVerified publisher0.1.101 of 1See more

drone-runner-kube drone 0.1.10

1 of the 1 container images this version deploys carry CVE-2026-85747.

Container imageDigestPackageFixed in
drone/drone-runner-kube:1.0.0-rc.34359bf2bb3dc
github.com/docker/distribution@v2.7.1+incompatible
no fix listed

Open the chart page →

3,123
ilumilumOfficialVerified publisher6.7.31 of 19See more

ilum ilum 6.7.3

1 of the 19 container images this version deploys carry CVE-2026-85747.

Container imageDigestPackageFixed in
ilum/api:6.7.3624fd09528c8
github.com/docker/distribution@v2.8.3+incompatible
no fix listed

Open the chart page →

28,180
temporallemontechVerified publisher0.37.01 of 13See more

temporal lemontech 0.37.0

1 of the 13 container images this version deploys carry CVE-2026-85747.

Container imageDigestPackageFixed in
quay.io/prometheus/prometheus:v2.31.1a8779cfe553e
github.com/docker/distribution@v2.7.1+incompatible
no fix listed

Open the chart page →

22,060
syftopenmined0.9.51 of 6See more

syft openmined 0.9.5

1 of the 6 container images this version deploys carry CVE-2026-85747.

Container imageDigestPackageFixed in
library/traefik:v2.11.00a5157f742d2
github.com/docker/distribution@v2.8.2+incompatible
no fix listed

Open the chart page →

21,622
helm-exportersstarcherVerified publisher0.5.01 of 1See more

helm-exporter sstarcher 0.5.0

1 of the 1 container images this version deploys carry CVE-2026-85747.

Container imageDigestPackageFixed in
sstarcher/helm-exporter:0.5.011769d01ba35
github.com/docker/distribution@v2.7.1+incompatible
no fix listed

Open the chart page →

5,547
istio-operatorwiremindVerified publisher1.18.21 of 1See more

istio-operator wiremind 1.18.2

1 of the 1 container images this version deploys carry CVE-2026-85747.

Container imageDigestPackageFixed in
istio/operator:1.18.270f9d1fe5fff
github.com/docker/distribution@v2.8.2+incompatible
no fix listed

Open the chart page →

6,667
codercoderOfficialVerified publisher1.44.61 of 2See more

coder coder 1.44.6

1 of the 2 container images this version deploys carry CVE-2026-85747.

Container imageDigestPackageFixed in
coderenvs/coder-service:1.44.61deffc4670e6
github.com/docker/distribution@v2.8.1+incompatible
no fix listed

Open the chart page →

8,103
dronecommunity-chartsVerified publisher0.1.52 of 2See more

drone community-charts 0.1.5

2 of the 2 container images this version deploys carry CVE-2026-85747.

Container imageDigestPackageFixed in
drone/drone:2.28.255897c8fb22d
github.com/docker/distribution@v2.8.2-beta.1+incompatible
no fix listed
drone/drone-runner-kube:1.0.0-rc.34359bf2bb3dc
github.com/docker/distribution@v2.7.1+incompatible
no fix listed

Open the chart page →

4,247
emqx-operatoremqx-operator2.3.31 of 2See more

emqx-operator emqx-operator 2.3.3

1 of the 2 container images this version deploys carry CVE-2026-85747.

Container imageDigestPackageFixed in
alpine/k8s:1.31.49c4976d47656
github.com/docker/distribution@v2.8.3+incompatible
no fix listed

Open the chart page →

6,086
kube-routerenixVerified publisher1.10.01 of 1See more

kube-router enix 1.10.0

1 of the 1 container images this version deploys carry CVE-2026-85747.

Container imageDigestPackageFixed in
cloudnativelabs/kube-router:v1.6.00ec7cd73f43f
github.com/docker/distribution@v2.8.2+incompatible
no fix listed

Open the chart page →

3,190
meshery-operatormesheryOfficialVerified publisher1.0.711 of 2See more

meshery-operator meshery 1.0.71

1 of the 2 container images this version deploys carry CVE-2026-85747.

Container imageDigestPackageFixed in
alpine/k8s:1.35.6b7a12c5ddf26
github.com/docker/distribution@v2.8.3+incompatible
no fix listed

Open the chart page →

3,580
missing-container-metricsmissing-container-metrics0.1.11 of 1See more

missing-container-metrics missing-container-metrics 0.1.1

1 of the 1 container images this version deploys carry CVE-2026-85747.

Container imageDigestPackageFixed in
dmilhdef/missing-container-metrics:v0.21.0fada1a6e7638
github.com/docker/distribution@v2.7.1+incompatible
no fix listed

Open the chart page →

3,671
system-upgrade-controllernimbolus0.7.01 of 1See more

system-upgrade-controller nimbolus 0.7.0

1 of the 1 container images this version deploys carry CVE-2026-85747.

Container imageDigestPackageFixed in
rancher/system-upgrade-controller:v0.18.09813f85653c8
github.com/docker/distribution@v2.8.3+incompatible
no fix listed

Open the chart page →

765
olmolmVerified publisher0.46.01 of 1See more

olm olm 0.46.0

1 of the 1 container images this version deploys carry CVE-2026-85747.

Container imageDigestPackageFixed in
quay.io/operator-framework/olm:v0.46.04404599eb7b7
github.com/docker/distribution@v2.8.3+incompatible
no fix listed

Open the chart page →

560
backstagerhdh-chartVerified publisher4.0.11 of 2See more

backstage rhdh-chart 4.0.1

1 of the 2 container images this version deploys carry CVE-2026-85747.

Container imageDigestPackageFixed in
quay.io/rhdh/rhdh-hub-rhel9:lateste992092fcc9b
github.com/docker/distribution@v2.8.3+incompatible
no fix listed

Open the chart page →

2,083
snyk-monitorsnyk2.23.261 of 2See more

snyk-monitor snyk 2.23.26

1 of the 2 container images this version deploys carry CVE-2026-85747.

Container imageDigestPackageFixed in
snyk/kubernetes-monitor:2.23.26fb5ad76ce84e
github.com/docker/distribution@v2.8.3+incompatible
no fix listed

Open the chart page →

1,153
wazuhwazuh-helmVerified publisher0.0.81 of 4See more

wazuh wazuh-helm 0.0.8

1 of the 4 container images this version deploys carry CVE-2026-85747.

Container imageDigestPackageFixed in
wazuh/wazuh-manager:4.11.11da5c38c6a78
github.com/docker/distribution@v2.7.1+incompatible
no fix listed

Open the chart page →

8,125

Container images carrying it

634 by charts deploying them

A fixed version is listed for 1 of the 2 affected packages.

Container imageDigestPackageFixed inUsed by
ghcr.io/m9sweeper/trawler:1.6.0df917c5a7e54
github.com/docker/distribution@v2.8.2+incompatible
no fix listed
1
ghcr.io/manzil-infinity180/deploydefender:ea3ab0bb646cdbeddd1aca483ecf650f9ac0d0847fbc6855c8b3
github.com/docker/distribution@v2.8.3+incompatible
no fix listed
1
ghcr.io/middleware-labs/agent-kube-go:dev17369c4cd390
github.com/docker/distribution@v2.8.1+incompatible
no fix listed
1
ghcr.io/middleware-labs/mw-kube-agent:master056f0953763d
github.com/docker/distribution@v2.8.2+incompatible
no fix listed
1
ghcr.io/mitos-run/mitos-forkd:v1.6.0979b462ab7d6
github.com/docker/distribution@v2.8.3+incompatible
no fix listed
1
ghcr.io/mosn/htnn-controller:v0.3.1c379e66246be
github.com/docker/distribution@v2.8.3+incompatible
no fix listed
1
ghcr.io/oguzhan-yilmaz/argocd-backup-s3:latestb61c750ade19
github.com/docker/distribution@v2.7.1+incompatible
no fix listed
1
ghcr.io/oguzhan-yilmaz/kdiff-snapshots:0.0.2035bc5ca66d55a
github.com/docker/distribution@v2.8.3+incompatible
no fix listed
1
ghcr.io/oguzhan-yilmaz/kdiff-snapshots:0.0.55d7f93d2182fe
github.com/docker/distribution@v2.8.3+incompatible
no fix listed
1
ghcr.io/oguzhan-yilmaz/steampipe-powerpipe-kubernetes--steampipe:latestc0c8d53df9f3
github.com/docker/distribution@v2.8.3+incompatible
no fix listed
1
ghcr.io/okteto/backend:0.0.0-2026-08-316171cb2b2a72
github.com/docker/distribution@v2.8.2-beta.1+incompatible
no fix listed
1
ghcr.io/okteto/registry:0.0.0-2026-08-17:0.0.0-2026-08-24:0.0.0-2026-08-3169131511501f
github.com/docker/distribution@v0.0.0-20260803174359-77a4b05a258a
no fix listed
1
ghcr.io/openclarity/grype-server:v0.6.079412399f301
github.com/docker/distribution@v2.8.2+incompatible
no fix listed
1
ghcr.io/openclarity/kubeclarity:v2.23.314450f52a708
github.com/docker/distribution@v2.8.2+incompatible
no fix listed
1
ghcr.io/openfaas/faas-netes:0.18.1224431adc8e2d
github.com/docker/distribution@v2.8.3+incompatible
no fix listed
1
ghcr.io/openfaas/gateway:0.27.1382b15393116e
github.com/docker/distribution@v2.8.3+incompatible
no fix listed
1
ghcr.io/openfaas/gateway:0.27.14ee0eaecc490c
github.com/docker/distribution@v2.8.3+incompatible
no fix listed
1
ghcr.io/openrelik/openrelik-worker-containers:latesta6d5abe94706
github.com/docker/distribution@v2.8.3+incompatible
no fix listed
1
ghcr.io/parca-dev/parca-agent:v0.28.06d6794f45f3e
github.com/docker/distribution@v2.8.3+incompatible
no fix listed
1
ghcr.io/pipe-cd/pipecd:v0.39.00fae829caf29
github.com/docker/distribution@v2.7.1+incompatible
no fix listed
1
ghcr.io/project-zot/zot:v2.1.144183bd731bcc
github.com/distribution/distribution/v3@v3.0.0
github.com/docker/distribution@v2.8.3+incompatible
3.1.2
no fix listed
1
ghcr.io/quenchworks/images/concourse755461ea934b
github.com/docker/distribution@v2.8.3+incompatible
no fix listed
1
ghcr.io/quenchworks/images/connaisseurb88ae556af26
github.com/docker/distribution@v2.8.3+incompatible
no fix listed
1
ghcr.io/quenchworks/images/harbor-registryc75b5434d4dc
github.com/docker/distribution@v0.0.0-20260602055908-11540eae06cb+dirty
no fix listed
1
ghcr.io/quenchworks/images/kubescapea624c51217ea
github.com/docker/distribution@v2.8.3+incompatible
no fix listed
1
ghcr.io/quenchworks/images/kubescape-operatorb861c9a1b694
github.com/docker/distribution@v2.8.3+incompatible
no fix listed
1
ghcr.io/quenchworks/images/kubevuln1a91383dc427
github.com/docker/distribution@v2.8.3+incompatible
no fix listed
1
ghcr.io/quenchworks/images/vcluster77ba2823e2fe
github.com/docker/distribution@v2.8.3+incompatible
no fix listed
1
ghcr.io/sigstore/policy-controller/policy-controller0bcd60beb93f
github.com/docker/distribution@v2.8.3+incompatible
no fix listed
1
ghcr.io/sigstore/sigstore-probers/prober:v1.0.1d1e914e6d6b9
github.com/docker/distribution@v2.8.3+incompatible
no fix listed
1
ghcr.io/spiffe/spire-agent:1.6.062517726d0c4
github.com/docker/distribution@v2.8.1+incompatible
no fix listed
1
ghcr.io/stashed/stash:v0.42.03a98245a7667
github.com/docker/distribution@v2.8.2+incompatible
no fix listed
1
ghcr.io/stashed/stash-enterprise:v0.42.1759f3850eda9
github.com/docker/distribution@v2.8.3+incompatible
no fix listed
1
ghcr.io/stashed/stash-enterprise:v0.32.0e9bde36e34b7
github.com/docker/distribution@v2.8.1+incompatible
no fix listed
1
ghcr.io/thm-mni-ii/fbs-runner:v2.0.9ffaf49a4d687
github.com/distribution/distribution/v3@v3.0.0-20220725133111-4bf3547399eb
github.com/docker/distribution@v2.8.1+incompatible
3.1.2
no fix listed
1
ghcr.io/traefik/traefik-hub:v2.11.0322f5f8cc105
github.com/docker/distribution@v2.8.2+incompatible
no fix listed
1
ghcr.io/turbot/guardrails-agent-kubernetes:0.3.09d01bf9c9224
github.com/docker/distribution@v2.8.3+incompatible
no fix listed
1
ghcr.io/voyagermesh/crd-manager:v0.1.013fd0cccafe8
github.com/docker/distribution@v2.8.3+incompatible
no fix listed
1
ghcr.io/voyagermesh/gateway:v1.6.223f4da194134
github.com/docker/distribution@v2.8.3+incompatible
no fix listed
1
ghcr.io/voyagermesh/voyager:v17.5.04964ceaf9d35
github.com/docker/distribution@v2.8.3+incompatible
no fix listed
1
ghcr.io/wundergraph/cosmo/controlplane:0.133.149800ff775f3
github.com/docker/distribution@v2.8.3+incompatible
no fix listed
1
ghcr.io/wundergraph/cosmo/router:0.243.05afcab98d9d7
github.com/docker/distribution@v2.8.3+incompatible
no fix listed
1
public.ecr.aws/boundless-software/switchblade:release-v0.0.19-lcm01d8413d5075
github.com/docker/distribution@v2.8.2+incompatible
no fix listed
1
public.ecr.aws/dynatrace/dynatrace-operator:v1.3.0f68901a54664
github.com/docker/distribution@v2.8.2+incompatible
no fix listed
1
public.ecr.aws/n8h5y2v5/rad-security/rad-sbom:v1.1.710f5aeaf1a77e
github.com/docker/distribution@v2.8.3+incompatible
no fix listed
1
public.ecr.aws/n8h5y2v5/rad-security/rad-sbom:v1.1.34e97e0e7a2088
github.com/docker/distribution@v2.8.3+incompatible
no fix listed
1
public.ecr.aws/p1t3u8a3/api:v1.28.512aeda8dbac7
github.com/docker/distribution@v2.8.3+incompatible
no fix listed
1
public.ecr.aws/p1t3u8a3/assets:v1.28.0fee63ead0e74
github.com/docker/distribution@v2.8.3+incompatible
no fix listed
1
public.ecr.aws/p1t3u8a3/canvases:v1.28.08d2b3a947a14
github.com/docker/distribution@v2.8.3+incompatible
no fix listed
1
public.ecr.aws/p1t3u8a3/db:v1.28.02c99078d7957
github.com/docker/distribution@v2.8.3+incompatible
no fix listed
1

syft 1.42.1 · advisories as of 16 Oct 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.