StackRadar

CVE-2026-85747

Medium

Advisory

Published 15 Oct 2026In the index since 16 Oct 2026
Severity
Medium
worst across findings
CVSS
6.8
base score, highest
EPSS
0.002
10th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
647
of 18,137 indexed, latest versions
Container images
634
deployed by those charts
Fix available
1 of 2
affected packages

Distribution: Client `manifests.Get()` does not verify returned content against requested digest

Carried by container images the latest versions of 647 of 18,137 indexed charts deploy, on 634 images.

Affected packageAffected versionsFixed inImages
github.com/docker/distributiongolangv0.0.0-20171011171712-7484e51bf6af, v0.0.0-20191216044856-a8371794149d, v0.0.0-20260602055908-11540eae06cb+dirty, v0.0.0-20260701071724-493dca9a81a8+dirty+12 moreno fix listed624
github.com/distribution/distribution/v3golangv0.0.0-20250402055438-9ed95e736522, v3.0.0, v3.0.0-20210316161203-a01c71e2477e, v3.0.0-20220526142353-ffbd94cbe269+9 more3.1.236
OSV records
GHSA-685w-q87j-wqw3
Trending
Rank 42 in indexed charts, since 16 Oct 2026. See the ranking →

Charts affected

647 by stars
ChartLatestAffected imagesRadar Score
kuperatorkusionstackVerified publisher0.7.41 of 1See more

kuperator kusionstack 0.7.4

1 of the 1 container images this version deploys carry CVE-2026-85747.

Container imageDigestPackageFixed in
kusionstack/kuperator:v0.7.4d2f72ae1d2f2
github.com/docker/distribution@v2.8.2+incompatible
no fix listed

Open the chart page →

1,423
kusionkusionstackVerified publisher0.14.11 of 3See more

kusion kusionstack 0.14.1

1 of the 3 container images this version deploys carry CVE-2026-85747.

Container imageDigestPackageFixed in
kusionstack/kusion:v0.14.0126c8f0b0976
github.com/docker/distribution@v2.8.3+incompatible
no fix listed

Open the chart page →

67,322
operatingkusionstackVerified publisher0.5.11 of 1See more

operating kusionstack 0.5.1

1 of the 1 container images this version deploys carry CVE-2026-85747.

Container imageDigestPackageFixed in
kusionstack/operating:v0.5.0c28bd96b986b
github.com/docker/distribution@v2.8.2+incompatible
no fix listed

Open the chart page →

2,623
dynatrace-operatorkvalitetsitVerified publisher1.3.01 of 1See more

dynatrace-operator kvalitetsit 1.3.0

1 of the 1 container images this version deploys carry CVE-2026-85747.

Container imageDigestPackageFixed in
public.ecr.aws/dynatrace/dynatrace-operator:v1.3.0f68901a54664
github.com/docker/distribution@v2.8.2+incompatible
no fix listed

Open the chart page →

1,958
longhornkvalitetsitVerified publisher1.1.1-01 of 2See more

longhorn kvalitetsit 1.1.1-0

1 of the 2 container images this version deploys carry CVE-2026-85747.

Container imageDigestPackageFixed in
longhornio/longhorn-manager:v1.1.1ede61fe2a472
github.com/docker/distribution@v2.7.1+incompatible
no fix listed

Open the chart page →

18,567
kvkkvkservice0.1.01 of 4See more

kvk kvkservice 0.1.0

1 of the 4 container images this version deploys carry CVE-2026-85747.

Container imageDigestPackageFixed in
conduction/kvk-php:dev8f177f9f8a7b
github.com/docker/distribution@v0.0.0-20191216044856-a8371794149d
no fix listed

Open the chart page →

11,195
ladeitladeit0.4.01 of 2See more

ladeit ladeit 0.4.0

1 of the 2 container images this version deploys carry CVE-2026-85747.

Container imageDigestPackageFixed in
kubeoperator/webkubectl:v2.4.0be8f0d624640
github.com/docker/distribution@v2.7.1+incompatible
no fix listed

Open the chart page →

29,237
lagoon-docker-hostlagoon-chartsVerified publisher0.7.01 of 1See more

lagoon-docker-host lagoon-charts 0.7.0

1 of the 1 container images this version deploys carry CVE-2026-85747.

Container imageDigestPackageFixed in
uselagoon/docker-host:v3.6.12c89ed939b8b
github.com/docker/distribution@v2.8.3+incompatible
no fix listed

Open the chart page →

3,107
prometheuslectures-k8sinfra15.8.51 of 6See more

prometheus lectures-k8sinfra 15.8.5

1 of the 6 container images this version deploys carry CVE-2026-85747.

Container imageDigestPackageFixed in
quay.io/prometheus/prometheus:v2.37.056e7f18e05dd
github.com/docker/distribution@v2.7.1+incompatible
no fix listed

Open the chart page →

14,476
trivy-serverlemontechVerified publisher0.1.01 of 1See more

trivy-server lemontech 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-85747.

Container imageDigestPackageFixed in
aquasec/trivy:0.32.0973d0df16189
github.com/docker/distribution@v2.8.1+incompatible
no fix listed

Open the chart page →

5,274
kltlifecycle-toolkitOfficialVerified publisher0.2.61 of 4See more

klt lifecycle-toolkit 0.2.6

1 of the 4 container images this version deploys carry CVE-2026-85747.

Container imageDigestPackageFixed in
ghcr.io/keptn/scheduler:v0.8.20f7d277bb2b2
github.com/docker/distribution@v2.8.2+incompatible
no fix listed

Open the chart page →

7,574
linkerd-preview-vizlinkerd-buoyantVerified publisher25.4.33 of 5See more

linkerd-preview-viz linkerd-buoyant 25.4.3

3 of the 5 container images this version deploys carry CVE-2026-85747.

Container imageDigestPackageFixed in
ghcr.io/buoyantio/metrics-api:preview-25.4.32cef2a3f97da
github.com/docker/distribution@v2.8.3+incompatible
no fix listed
ghcr.io/buoyantio/tap:preview-25.4.3e02a8bd9e2c3
github.com/docker/distribution@v2.8.3+incompatible
no fix listed
ghcr.io/buoyantio/web:preview-25.4.33ee1b62aa111
github.com/docker/distribution@v2.8.3+incompatible
no fix listed

Open the chart page →

5,668
litefunctionslitefunctions0.1.12 of 19See more

litefunctions litefunctions 0.1.1

2 of the 19 container images this version deploys carry CVE-2026-85747.

Container imageDigestPackageFixed in
library/docker:28.3.3-dinda56b3bdde893
github.com/docker/distribution@v2.8.3+incompatible
no fix listed
ghcr.io/project-zot/zot:v2.1.144183bd731bcc
github.com/distribution/distribution/v3@v3.0.0
github.com/docker/distribution@v2.8.3+incompatible
3.1.2
no fix listed

Open the chart page →

20,038
ocatiecataloguslocatiecatalogus1.0.01 of 3See more

ocatiecatalogus locatiecatalogus 1.0.0

1 of the 3 container images this version deploys carry CVE-2026-85747.

Container imageDigestPackageFixed in
ghcr.io/conductionnl/ocatiecatalogus-php:latestc22764cbfa97
github.com/docker/distribution@v0.0.0-20191216044856-a8371794149d
no fix listed

Open the chart page →

9,547
devpod-proloftVerified publisher0.0.0-ci.4-do-not-use1 of 1See more

devpod-pro loft 0.0.0-ci.4-do-not-use

1 of the 1 container images this version deploys carry CVE-2026-85747.

Container imageDigestPackageFixed in
ghcr.io/loft-sh/devpod-pro:0.0.0-ci.4-do-not-use5dfa86b6451f
github.com/distribution/distribution/v3@v3.0.0-20230214150026-36d8c594d7aa
github.com/docker/distribution@v2.8.1+incompatible
3.1.2
no fix listed

Open the chart page →

4,078
devspace-cloudloftVerified publisher0.3.31 of 8See more

devspace-cloud loft 0.3.3

1 of the 8 container images this version deploys carry CVE-2026-85747.

Container imageDigestPackageFixed in
devspacecloud/manager:0.3.349c397413f7b
github.com/docker/distribution@v0.0.0-20191216044856-a8371794149d
no fix listed

Open the chart page →

12,365
kioskloftVerified publisher0.2.111 of 1See more

kiosk loft 0.2.11

1 of the 1 container images this version deploys carry CVE-2026-85747.

Container imageDigestPackageFixed in
kiosksh/kiosk:0.2.11501725ba2025
github.com/docker/distribution@v0.0.0-20191216044856-a8371794149d
no fix listed

Open the chart page →

4,361
loft-agentloftVerified publisher3.2.41 of 1See more

loft-agent loft 3.2.4

1 of the 1 container images this version deploys carry CVE-2026-85747.

Container imageDigestPackageFixed in
ghcr.io/loft-sh/agent:3.2.45c109914ff73
github.com/docker/distribution@v2.8.1+incompatible
no fix listed

Open the chart page →

3,368
vcluster-control-planeloftVerified publisher0.0.0-ci.4-do-not-use1 of 1See more

vcluster-control-plane loft 0.0.0-ci.4-do-not-use

1 of the 1 container images this version deploys carry CVE-2026-85747.

Container imageDigestPackageFixed in
ghcr.io/loft-sh/vcluster-control-plane:0.0.0-ci.4-do-not-use45e744fc623f
github.com/distribution/distribution/v3@v3.0.0-20230214150026-36d8c594d7aa
github.com/docker/distribution@v2.8.2+incompatible
3.1.2
no fix listed

Open the chart page →

4,078
vcluster-proloftVerified publisher0.0.0-ci-run.102 of 2See more

vcluster-pro loft 0.0.0-ci-run.10

2 of the 2 container images this version deploys carry CVE-2026-85747.

Container imageDigestPackageFixed in
rancher/k3s:v1.26.0-k3s19380f5dbae9a
github.com/docker/distribution@v2.8.1+incompatible
no fix listed
ghcr.io/loft-sh/vcluster-pro:0.0.0-ci-run.10ab2e1fa19dd4
github.com/docker/distribution@v2.8.1+incompatible
no fix listed

Open the chart page →

6,966
vcluster-pro-eksloftVerified publisher0.0.0-ci-run.101 of 4See more

vcluster-pro-eks loft 0.0.0-ci-run.10

1 of the 4 container images this version deploys carry CVE-2026-85747.

Container imageDigestPackageFixed in
ghcr.io/loft-sh/vcluster-pro:0.0.0-ci-run.10ab2e1fa19dd4
github.com/docker/distribution@v2.8.1+incompatible
no fix listed

Open the chart page →

9,331
vcluster-pro-k0sloftVerified publisher0.0.0-ci-run.102 of 2See more

vcluster-pro-k0s loft 0.0.0-ci-run.10

2 of the 2 container images this version deploys carry CVE-2026-85747.

Container imageDigestPackageFixed in
k0sproject/k0s:v1.26.0-k0s.0f04635825d51
github.com/docker/distribution@v2.8.1+incompatible
no fix listed
ghcr.io/loft-sh/vcluster-pro:0.0.0-ci-run.10ab2e1fa19dd4
github.com/docker/distribution@v2.8.1+incompatible
no fix listed

Open the chart page →

7,690
vcluster-pro-k8sloftVerified publisher0.0.0-ci-run.103 of 4See more

vcluster-pro-k8s loft 0.0.0-ci-run.10

3 of the 4 container images this version deploys carry CVE-2026-85747.

Container imageDigestPackageFixed in
ghcr.io/loft-sh/vcluster-pro:0.0.0-ci-run.10ab2e1fa19dd4
github.com/docker/distribution@v2.8.1+incompatible
no fix listed
registry.k8s.io/kube-apiserver:v1.26.199e1ed9fbc8a
github.com/docker/distribution@v2.8.1+incompatible
no fix listed
registry.k8s.io/kube-controller-manager:v1.26.140adecbe3a40
github.com/docker/distribution@v2.8.1+incompatible
no fix listed

Open the chart page →

11,992
filebeatlog10x-elastic-helm-chartsVerified publisher1.5.11 of 1See more

filebeat log10x-elastic-helm-charts 1.5.1

1 of the 1 container images this version deploys carry CVE-2026-85747.

Container imageDigestPackageFixed in
log10x/filebeat-10x:1.1.39-native7d6a79dacd58
github.com/docker/distribution@v2.8.1+incompatible
no fix listed

Open the chart page →

8,123
loggingcomponentloggingcomponent1.0.01 of 3See more

loggingcomponent loggingcomponent 1.0.0

1 of the 3 container images this version deploys carry CVE-2026-85747.

Container imageDigestPackageFixed in
ghcr.io/conductionnl/loggingcomponent-php:latest834b8e1af290
github.com/docker/distribution@v0.0.0-20191216044856-a8371794149d
no fix listed

Open the chart page →

9,522
logicservicelogicservice1.0.01 of 4See more

logicservice logicservice 1.0.0

1 of the 4 container images this version deploys carry CVE-2026-85747.

Container imageDigestPackageFixed in
ghcr.io/conductionnl/logicservice-php:latest72aae2080595
github.com/docker/distribution@v0.0.0-20191216044856-a8371794149d
no fix listed

Open the chart page →

9,512
apica-ascentlogiqai2.0.41 of 19See more

apica-ascent logiqai 2.0.4

1 of the 19 container images this version deploys carry CVE-2026-85747.

Container imageDigestPackageFixed in
logiqai/flash:v3.10.265b996bc7bdc
github.com/docker/distribution@v2.8.3+incompatible
no fix listed

Open the chart page →

22,364
telegraf-dslsst-sqre1.0.231 of 1See more

telegraf-ds lsst-sqre 1.0.23

1 of the 1 container images this version deploys carry CVE-2026-85747.

Container imageDigestPackageFixed in
library/telegraf:1.19-alpineaddb86c0c520
github.com/docker/distribution@v2.7.1+incompatible
no fix listed

Open the chart page →

4,999
gitea-runnerm0sh1-helm-charts0.2.32 of 2See more

gitea-runner m0sh1-helm-charts 0.2.3

2 of the 2 container images this version deploys carry CVE-2026-85747.

Container imageDigestPackageFixed in
gitea/act_runner:0.3.08368754bb612
github.com/docker/distribution@v2.8.3+incompatible
no fix listed
library/docker:29.3.0-dind-alpine3.231ba18449911d
github.com/docker/distribution@v2.8.3+incompatible
no fix listed

Open the chart page →

5,327
m9sweeperm9sweeperVerified publisher1.6.01 of 6See more

m9sweeper m9sweeper 1.6.0

1 of the 6 container images this version deploys carry CVE-2026-85747.

Container imageDigestPackageFixed in
ghcr.io/m9sweeper/trawler:1.6.0df917c5a7e54
github.com/docker/distribution@v2.8.2+incompatible
no fix listed

Open the chart page →

12,105
kruisematrixone-operatorVerified publisher1.8.31 of 2See more

kruise matrixone-operator 1.8.3

1 of the 2 container images this version deploys carry CVE-2026-85747.

Container imageDigestPackageFixed in
openkruise/kruise-manager:v1.8.30482722b4e56
github.com/docker/distribution@v2.8.2+incompatible
no fix listed

Open the chart page →

3,171
mattermost-calls-offloadermattermostVerified publisher0.2.11 of 1See more

mattermost-calls-offloader mattermost 0.2.1

1 of the 1 container images this version deploys carry CVE-2026-85747.

Container imageDigestPackageFixed in
mattermost/calls-offloader:v0.9.0b440b282599e
github.com/docker/distribution@v2.7.1+incompatible
no fix listed

Open the chart page →

1,999
medewerkercatalogusmedewerkercatalogus1.0.01 of 3See more

medewerkercatalogus medewerkercatalogus 1.0.0

1 of the 3 container images this version deploys carry CVE-2026-85747.

Container imageDigestPackageFixed in
ghcr.io/conductionnl/medewerkercatalogus-php:latest1ea5412bed26
github.com/docker/distribution@v0.0.0-20191216044856-a8371794149d
no fix listed

Open the chart page →

9,402
mediawiki-backupmediawiki-backupVerified publisher0.2.11 of 1See more

mediawiki-backup mediawiki-backup 0.2.1

1 of the 1 container images this version deploys carry CVE-2026-85747.

Container imageDigestPackageFixed in
ghcr.io/fernferret/mediawiki-backup:v0.2.2bbef381294ed
github.com/docker/distribution@v2.8.1+incompatible
no fix listed

Open the chart page →

2,778
memo-componentmemo-component1.0.01 of 3See more

memo-component memo-component 1.0.0

1 of the 3 container images this version deploys carry CVE-2026-85747.

Container imageDigestPackageFixed in
ghcr.io/conductionnl/memo-component-php:latestef77f4c089a1
github.com/docker/distribution@v0.0.0-20191216044856-a8371794149d
no fix listed

Open the chart page →

9,547
istio-helm-istiodmesosphere1.25.11 of 2See more

istio-helm-istiod mesosphere 1.25.1

1 of the 2 container images this version deploys carry CVE-2026-85747.

Container imageDigestPackageFixed in
istio/pilot:1.29.0325156535773
github.com/docker/distribution@v2.8.3+incompatible
no fix listed

Open the chart page →

4,959
prometheus-operatormesosphere12.11.131 of 8See more

prometheus-operator mesosphere 12.11.13

1 of the 8 container images this version deploys carry CVE-2026-85747.

Container imageDigestPackageFixed in
quay.io/prometheus-operator/prometheus-operator:v0.44.0983627001c89
github.com/docker/distribution@v2.7.1+incompatible
no fix listed

Open the chart page →

16,624
traefik2mesosphere9.18.01 of 1See more

traefik2 mesosphere 9.18.0

1 of the 1 container images this version deploys carry CVE-2026-85747.

Container imageDigestPackageFixed in
library/traefik:2.4.8eda951fd29a8
github.com/docker/distribution@v2.7.1+incompatible
no fix listed

Open the chart page →

4,648
cert-manager-setupmesosphere-stable0.2.101 of 5See more

cert-manager-setup mesosphere-stable 0.2.10

1 of the 5 container images this version deploys carry CVE-2026-85747.

Container imageDigestPackageFixed in
quay.io/jetstack/cert-manager-ctl:v1.11.074611761f052
github.com/docker/distribution@v2.8.1+incompatible
no fix listed

Open the chart page →

11,193
istio-helm-istiodmesosphere-stable1.23.61 of 2See more

istio-helm-istiod mesosphere-stable 1.23.6

1 of the 2 container images this version deploys carry CVE-2026-85747.

Container imageDigestPackageFixed in
istio/pilot:1.23.69c3d6a218181
github.com/docker/distribution@v2.8.3+incompatible
no fix listed

Open the chart page →

5,927
knativemesosphere-stable1.10.81 of 7See more

knative mesosphere-stable 1.10.8

1 of the 7 container images this version deploys carry CVE-2026-85747.

Container imageDigestPackageFixed in
gcr.io/knative-releases/knative.dev/serving/cmd/controller:v1.10.298a2cc7fd62e
github.com/docker/distribution@v2.8.1+incompatible
no fix listed

Open the chart page →

12,452
kommandermesosphere-stable0.39.23 of 29See more

kommander mesosphere-stable 0.39.2

3 of the 29 container images this version deploys carry CVE-2026-85747.

Container imageDigestPackageFixed in
mesosphere/kommander-federation-utility-apiserver:v0.21.2f9b769c65e24
github.com/docker/distribution@v2.7.1+incompatible
no fix listed
thanosio/thanos:v0.15.0b12d5c31bf5a
github.com/docker/distribution@v2.7.1+incompatible
no fix listed
gcr.io/kubecost1/server:prod-1.81.0a348db3e4d74
github.com/docker/distribution@v2.7.1+incompatible
no fix listed

Open the chart page →

93,237
veleromesosphere-stable3.2.51 of 1See more

velero mesosphere-stable 3.2.5

1 of the 1 container images this version deploys carry CVE-2026-85747.

Container imageDigestPackageFixed in
bitnamilegacy/kubectl:1.26.4a0a972324d93
github.com/docker/distribution@v2.8.1+incompatible
no fix listed

Open the chart page →

2,824
istio-operatormetakube1.12.01 of 1See more

istio-operator metakube 1.12.0

1 of the 1 container images this version deploys carry CVE-2026-85747.

Container imageDigestPackageFixed in
istio/operator:1.12.06cfce8a071b9
github.com/docker/distribution@v0.0.0-20191216044856-a8371794149d
no fix listed

Open the chart page →

10,406
argomicroslacVerified publisher0.1.01 of 4See more

argo microslac 0.1.0

1 of the 4 container images this version deploys carry CVE-2026-85747.

Container imageDigestPackageFixed in
quay.io/argoproj/argocd:v2.10.783c86003b781
github.com/docker/distribution@v2.8.2+incompatible
no fix listed

Open the chart page →

12,982
kube-agent-chartmiddleware-labsVerified publisher0.1.21 of 1See more

kube-agent-chart middleware-labs 0.1.2

1 of the 1 container images this version deploys carry CVE-2026-85747.

Container imageDigestPackageFixed in
ghcr.io/middleware-labs/agent-kube-go:dev17369c4cd390
github.com/docker/distribution@v2.8.1+incompatible
no fix listed

Open the chart page →

2,647
mw-kube-agentmiddleware-labsVerified publisher0.1.21 of 1See more

mw-kube-agent middleware-labs 0.1.2

1 of the 1 container images this version deploys carry CVE-2026-85747.

Container imageDigestPackageFixed in
ghcr.io/middleware-labs/mw-kube-agent:master056f0953763d
github.com/docker/distribution@v2.8.2+incompatible
no fix listed

Open the chart page →

2,285
aws-api-gateway-operatormintel0.1.21 of 11See more

aws-api-gateway-operator mintel 0.1.2

1 of the 11 container images this version deploys carry CVE-2026-85747.

Container imageDigestPackageFixed in
library/docker:20.10-dindaf96c680a7e1
github.com/distribution/distribution/v3@v3.0.0-20220725133111-4bf3547399eb
github.com/docker/distribution@v2.8.1+incompatible
3.1.2
no fix listed

Open the chart page →

12,052
standard-application-stackmintel11.5.01 of 12See more

standard-application-stack mintel 11.5.0

1 of the 12 container images this version deploys carry CVE-2026-85747.

Container imageDigestPackageFixed in
library/docker:20.10-dindaf96c680a7e1
github.com/distribution/distribution/v3@v3.0.0-20220725133111-4bf3547399eb
github.com/docker/distribution@v2.8.1+incompatible
3.1.2
no fix listed

Open the chart page →

12,239
mitosmitosVerified publisher1.6.01 of 7See more

mitos mitos 1.6.0

1 of the 7 container images this version deploys carry CVE-2026-85747.

Container imageDigestPackageFixed in
ghcr.io/mitos-run/mitos-forkd:v1.6.0979b462ab7d6
github.com/docker/distribution@v2.8.3+incompatible
no fix listed

Open the chart page →

3,641

Container images carrying it

634 by charts deploying them

A fixed version is listed for 1 of the 2 affected packages.

Container imageDigestPackageFixed inUsed by
ghcr.io/m9sweeper/trawler:1.6.0df917c5a7e54
github.com/docker/distribution@v2.8.2+incompatible
no fix listed
1
ghcr.io/manzil-infinity180/deploydefender:ea3ab0bb646cdbeddd1aca483ecf650f9ac0d0847fbc6855c8b3
github.com/docker/distribution@v2.8.3+incompatible
no fix listed
1
ghcr.io/middleware-labs/agent-kube-go:dev17369c4cd390
github.com/docker/distribution@v2.8.1+incompatible
no fix listed
1
ghcr.io/middleware-labs/mw-kube-agent:master056f0953763d
github.com/docker/distribution@v2.8.2+incompatible
no fix listed
1
ghcr.io/mitos-run/mitos-forkd:v1.6.0979b462ab7d6
github.com/docker/distribution@v2.8.3+incompatible
no fix listed
1
ghcr.io/mosn/htnn-controller:v0.3.1c379e66246be
github.com/docker/distribution@v2.8.3+incompatible
no fix listed
1
ghcr.io/oguzhan-yilmaz/argocd-backup-s3:latestb61c750ade19
github.com/docker/distribution@v2.7.1+incompatible
no fix listed
1
ghcr.io/oguzhan-yilmaz/kdiff-snapshots:0.0.2035bc5ca66d55a
github.com/docker/distribution@v2.8.3+incompatible
no fix listed
1
ghcr.io/oguzhan-yilmaz/kdiff-snapshots:0.0.55d7f93d2182fe
github.com/docker/distribution@v2.8.3+incompatible
no fix listed
1
ghcr.io/oguzhan-yilmaz/steampipe-powerpipe-kubernetes--steampipe:latestc0c8d53df9f3
github.com/docker/distribution@v2.8.3+incompatible
no fix listed
1
ghcr.io/okteto/backend:0.0.0-2026-08-316171cb2b2a72
github.com/docker/distribution@v2.8.2-beta.1+incompatible
no fix listed
1
ghcr.io/okteto/registry:0.0.0-2026-08-17:0.0.0-2026-08-24:0.0.0-2026-08-3169131511501f
github.com/docker/distribution@v0.0.0-20260803174359-77a4b05a258a
no fix listed
1
ghcr.io/openclarity/grype-server:v0.6.079412399f301
github.com/docker/distribution@v2.8.2+incompatible
no fix listed
1
ghcr.io/openclarity/kubeclarity:v2.23.314450f52a708
github.com/docker/distribution@v2.8.2+incompatible
no fix listed
1
ghcr.io/openfaas/faas-netes:0.18.1224431adc8e2d
github.com/docker/distribution@v2.8.3+incompatible
no fix listed
1
ghcr.io/openfaas/gateway:0.27.1382b15393116e
github.com/docker/distribution@v2.8.3+incompatible
no fix listed
1
ghcr.io/openfaas/gateway:0.27.14ee0eaecc490c
github.com/docker/distribution@v2.8.3+incompatible
no fix listed
1
ghcr.io/openrelik/openrelik-worker-containers:latesta6d5abe94706
github.com/docker/distribution@v2.8.3+incompatible
no fix listed
1
ghcr.io/parca-dev/parca-agent:v0.28.06d6794f45f3e
github.com/docker/distribution@v2.8.3+incompatible
no fix listed
1
ghcr.io/pipe-cd/pipecd:v0.39.00fae829caf29
github.com/docker/distribution@v2.7.1+incompatible
no fix listed
1
ghcr.io/project-zot/zot:v2.1.144183bd731bcc
github.com/distribution/distribution/v3@v3.0.0
github.com/docker/distribution@v2.8.3+incompatible
3.1.2
no fix listed
1
ghcr.io/quenchworks/images/concourse755461ea934b
github.com/docker/distribution@v2.8.3+incompatible
no fix listed
1
ghcr.io/quenchworks/images/connaisseurb88ae556af26
github.com/docker/distribution@v2.8.3+incompatible
no fix listed
1
ghcr.io/quenchworks/images/harbor-registryc75b5434d4dc
github.com/docker/distribution@v0.0.0-20260602055908-11540eae06cb+dirty
no fix listed
1
ghcr.io/quenchworks/images/kubescapea624c51217ea
github.com/docker/distribution@v2.8.3+incompatible
no fix listed
1
ghcr.io/quenchworks/images/kubescape-operatorb861c9a1b694
github.com/docker/distribution@v2.8.3+incompatible
no fix listed
1
ghcr.io/quenchworks/images/kubevuln1a91383dc427
github.com/docker/distribution@v2.8.3+incompatible
no fix listed
1
ghcr.io/quenchworks/images/vcluster77ba2823e2fe
github.com/docker/distribution@v2.8.3+incompatible
no fix listed
1
ghcr.io/sigstore/policy-controller/policy-controller0bcd60beb93f
github.com/docker/distribution@v2.8.3+incompatible
no fix listed
1
ghcr.io/sigstore/sigstore-probers/prober:v1.0.1d1e914e6d6b9
github.com/docker/distribution@v2.8.3+incompatible
no fix listed
1
ghcr.io/spiffe/spire-agent:1.6.062517726d0c4
github.com/docker/distribution@v2.8.1+incompatible
no fix listed
1
ghcr.io/stashed/stash:v0.42.03a98245a7667
github.com/docker/distribution@v2.8.2+incompatible
no fix listed
1
ghcr.io/stashed/stash-enterprise:v0.42.1759f3850eda9
github.com/docker/distribution@v2.8.3+incompatible
no fix listed
1
ghcr.io/stashed/stash-enterprise:v0.32.0e9bde36e34b7
github.com/docker/distribution@v2.8.1+incompatible
no fix listed
1
ghcr.io/thm-mni-ii/fbs-runner:v2.0.9ffaf49a4d687
github.com/distribution/distribution/v3@v3.0.0-20220725133111-4bf3547399eb
github.com/docker/distribution@v2.8.1+incompatible
3.1.2
no fix listed
1
ghcr.io/traefik/traefik-hub:v2.11.0322f5f8cc105
github.com/docker/distribution@v2.8.2+incompatible
no fix listed
1
ghcr.io/turbot/guardrails-agent-kubernetes:0.3.09d01bf9c9224
github.com/docker/distribution@v2.8.3+incompatible
no fix listed
1
ghcr.io/voyagermesh/crd-manager:v0.1.013fd0cccafe8
github.com/docker/distribution@v2.8.3+incompatible
no fix listed
1
ghcr.io/voyagermesh/gateway:v1.6.223f4da194134
github.com/docker/distribution@v2.8.3+incompatible
no fix listed
1
ghcr.io/voyagermesh/voyager:v17.5.04964ceaf9d35
github.com/docker/distribution@v2.8.3+incompatible
no fix listed
1
ghcr.io/wundergraph/cosmo/controlplane:0.133.149800ff775f3
github.com/docker/distribution@v2.8.3+incompatible
no fix listed
1
ghcr.io/wundergraph/cosmo/router:0.243.05afcab98d9d7
github.com/docker/distribution@v2.8.3+incompatible
no fix listed
1
public.ecr.aws/boundless-software/switchblade:release-v0.0.19-lcm01d8413d5075
github.com/docker/distribution@v2.8.2+incompatible
no fix listed
1
public.ecr.aws/dynatrace/dynatrace-operator:v1.3.0f68901a54664
github.com/docker/distribution@v2.8.2+incompatible
no fix listed
1
public.ecr.aws/n8h5y2v5/rad-security/rad-sbom:v1.1.710f5aeaf1a77e
github.com/docker/distribution@v2.8.3+incompatible
no fix listed
1
public.ecr.aws/n8h5y2v5/rad-security/rad-sbom:v1.1.34e97e0e7a2088
github.com/docker/distribution@v2.8.3+incompatible
no fix listed
1
public.ecr.aws/p1t3u8a3/api:v1.28.512aeda8dbac7
github.com/docker/distribution@v2.8.3+incompatible
no fix listed
1
public.ecr.aws/p1t3u8a3/assets:v1.28.0fee63ead0e74
github.com/docker/distribution@v2.8.3+incompatible
no fix listed
1
public.ecr.aws/p1t3u8a3/canvases:v1.28.08d2b3a947a14
github.com/docker/distribution@v2.8.3+incompatible
no fix listed
1
public.ecr.aws/p1t3u8a3/db:v1.28.02c99078d7957
github.com/docker/distribution@v2.8.3+incompatible
no fix listed
1

syft 1.42.1 · advisories as of 16 Oct 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.