StackRadar

CVE-2026-85747

Medium

Advisory

Published 15 Oct 2026In the index since 16 Oct 2026
Severity
Medium
worst across findings
CVSS
6.8
base score, highest
EPSS
0.002
10th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
647
of 18,137 indexed, latest versions
Container images
634
deployed by those charts
Fix available
1 of 2
affected packages

Distribution: Client `manifests.Get()` does not verify returned content against requested digest

Carried by container images the latest versions of 647 of 18,137 indexed charts deploy, on 634 images.

Affected packageAffected versionsFixed inImages
github.com/docker/distributiongolangv0.0.0-20171011171712-7484e51bf6af, v0.0.0-20191216044856-a8371794149d, v0.0.0-20260602055908-11540eae06cb+dirty, v0.0.0-20260701071724-493dca9a81a8+dirty+12 moreno fix listed624
github.com/distribution/distribution/v3golangv0.0.0-20250402055438-9ed95e736522, v3.0.0, v3.0.0-20210316161203-a01c71e2477e, v3.0.0-20220526142353-ffbd94cbe269+9 more3.1.236
OSV records
GHSA-685w-q87j-wqw3
Trending
Rank 42 in indexed charts, since 16 Oct 2026. See the ranking →

Charts affected

647 by stars
ChartLatestAffected imagesRadar Score
voyager-gatewayappscodeVerified publisher2026.10.101 of 2See more

voyager-gateway appscode 2026.10.10

1 of the 2 container images this version deploys carry CVE-2026-85747.

Container imageDigestPackageFixed in
ghcr.io/voyagermesh/crd-manager:v0.4.04466bb77dc78
github.com/docker/distribution@v2.8.3+incompatible
no fix listed

Open the chart page →

2,017
appwriteappwrite-helmVerified publisher1.3.21 of 8See more

appwrite appwrite-helm 1.3.2

1 of the 8 container images this version deploys carry CVE-2026-85747.

Container imageDigestPackageFixed in
appwrite/appwrite:1.9.01aaa70127114
github.com/docker/distribution@v2.8.3+incompatible
no fix listed

Open the chart page →

13,374
harbor-scanner-trivyaqua-helm0.17.01 of 1See more

harbor-scanner-trivy aqua-helm 0.17.0

1 of the 1 container images this version deploys carry CVE-2026-85747.

Container imageDigestPackageFixed in
aquasec/harbor-scanner-trivy:0.20.07ea4aa3d2eb6
github.com/docker/distribution@v2.7.1+incompatible
no fix listed

Open the chart page →

6,517
argocdargo-helm-charts1.0.01 of 3See more

argocd argo-helm-charts 1.0.0

1 of the 3 container images this version deploys carry CVE-2026-85747.

Container imageDigestPackageFixed in
quay.io/argoproj/argocd:v2.14.115fc69e31c755
github.com/docker/distribution@v2.8.3+incompatible
no fix listed

Open the chart page →

10,306
argo-workflowsargo-helm-charts1.0.01 of 2See more

argo-workflows argo-helm-charts 1.0.0

1 of the 2 container images this version deploys carry CVE-2026-85747.

Container imageDigestPackageFixed in
quay.io/argoproj/workflow-controller:v3.7.166388d1b2f08
github.com/docker/distribution@v2.8.3+incompatible
no fix listed

Open the chart page →

2,864
argonix-apiargonix0.6.51 of 4See more

argonix-api argonix 0.6.5

1 of the 4 container images this version deploys carry CVE-2026-85747.

Container imageDigestPackageFixed in
ghcr.io/argonix-io/argonix-api:0.6.5431abcce7c1e
github.com/docker/distribution@v2.8.3+incompatible
no fix listed

Open the chart page →

6,186
arma-reforgerarma-reforger0.5.31 of 8See more

arma-reforger arma-reforger 0.5.3

1 of the 8 container images this version deploys carry CVE-2026-85747.

Container imageDigestPackageFixed in
quay.io/prometheus/prometheus:v2.41.01a3e9a878e50
github.com/docker/distribution@v2.8.1+incompatible
no fix listed

Open the chart page →

30,775
cluster-autoscalerarzu9.19.11 of 1See more

cluster-autoscaler arzu 9.19.1

1 of the 1 container images this version deploys carry CVE-2026-85747.

Container imageDigestPackageFixed in
breton/cool:dev41b1bb483aa2
github.com/docker/distribution@v2.8.1+incompatible
no fix listed

Open the chart page →

2,644
itera-lmaarzu1.34.601 of 6See more

itera-lma arzu 1.34.60

1 of the 6 container images this version deploys carry CVE-2026-85747.

Container imageDigestPackageFixed in
quay.io/prometheus-operator/prometheus-operator:v0.57.0a2d502c204f9
github.com/docker/distribution@v2.8.1+incompatible
no fix listed

Open the chart page →

12,865
performanceandusagediagnosisassist-iot-pud1.0.01 of 7See more

performanceandusagediagnosis assist-iot-pud 1.0.0

1 of the 7 container images this version deploys carry CVE-2026-85747.

Container imageDigestPackageFixed in
quay.io/prometheus/prometheus:v2.36.2df0cd5887887
github.com/docker/distribution@v2.7.1+incompatible
no fix listed

Open the chart page →

13,194
authorization-componentauthorization-component1.0.01 of 3See more

authorization-component authorization-component 1.0.0

1 of the 3 container images this version deploys carry CVE-2026-85747.

Container imageDigestPackageFixed in
ghcr.io/conductionnl/authorization-component-php:latest94a749392fcf
github.com/docker/distribution@v0.0.0-20191216044856-a8371794149d
no fix listed

Open the chart page →

9,592
istio-discoveryaveshaVerified publisher1.16.01 of 1See more

istio-discovery avesha 1.16.0

1 of the 1 container images this version deploys carry CVE-2026-85747.

Container imageDigestPackageFixed in
istio/pilot:1.16.0ac0284d75ec9
github.com/docker/distribution@v2.8.1+incompatible
no fix listed

Open the chart page →

8,102
helm-controllerazureorkestra0.1.12 of 2See more

helm-controller azureorkestra 0.1.1

2 of the 2 container images this version deploys carry CVE-2026-85747.

Container imageDigestPackageFixed in
fluxcd/helm-controller:v0.9.092b891e495d8
github.com/docker/distribution@v0.0.0-20191216044856-a8371794149d
no fix listed
fluxcd/source-controller:v0.10.031a8c79a6803
github.com/docker/distribution@v0.0.0-20191216044856-a8371794149d
no fix listed

Open the chart page →

10,244
prometheusazureorkestra14.8.01 of 6See more

prometheus azureorkestra 14.8.0

1 of the 6 container images this version deploys carry CVE-2026-85747.

Container imageDigestPackageFixed in
quay.io/prometheus/prometheus:v2.26.038d40a760569
github.com/docker/distribution@v2.7.1+incompatible
no fix listed

Open the chart page →

15,490
balance-registrationbalance-registration0.1.01 of 4See more

balance-registration balance-registration 0.1.0

1 of the 4 container images this version deploys carry CVE-2026-85747.

Container imageDigestPackageFixed in
conduction/balance-registration-php:devc36094a41369
github.com/docker/distribution@v0.0.0-20191216044856-a8371794149d
no fix listed

Open the chart page →

11,064
berichtserviceberichtservice1.0.01 of 3See more

berichtservice berichtservice 1.0.0

1 of the 3 container images this version deploys carry CVE-2026-85747.

Container imageDigestPackageFixed in
ghcr.io/conductionnl/berichtservice-php:latestee6a21e66ff0
github.com/docker/distribution@v0.0.0-20191216044856-a8371794149d
no fix listed

Open the chart page →

9,417
bitpokebitpokeVerified publisher1.8.191 of 1See more

bitpoke bitpoke 1.8.19

1 of the 1 container images this version deploys carry CVE-2026-85747.

Container imageDigestPackageFixed in
gcr.io/press-labs-public/dashboard:1.8.19b88f88070fb0
github.com/docker/distribution@v2.7.1+incompatible
no fix listed

Open the chart page →

3,172
firehoseblip-firehoseVerified publisher0.0.181 of 11See more

firehose blip-firehose 0.0.18

1 of the 11 container images this version deploys carry CVE-2026-85747.

Container imageDigestPackageFixed in
hashicorp/vault:1.15.26b4e5dadf082
github.com/docker/distribution@v2.8.2+incompatible
no fix listed

Open the chart page →

16,282
kubermatic-operatorbuttahtoastVerified publisher2.24.51 of 1See more

kubermatic-operator buttahtoast 2.24.5

1 of the 1 container images this version deploys carry CVE-2026-85747.

Container imageDigestPackageFixed in
quay.io/kubermatic/kubermatic:v2.24.5ebba936046ab
github.com/distribution/distribution/v3@v3.0.0-20230629214736-bac7f02e02a1
github.com/docker/distribution@v2.8.1+incompatible
3.1.2
no fix listed

Open the chart page →

3,602
caninecanine0.1.101 of 7See more

canine canine 0.1.10

1 of the 7 container images this version deploys carry CVE-2026-85747.

Container imageDigestPackageFixed in
ghcr.io/caninehq/canine:latest68b19aee1c64
github.com/docker/distribution@v2.8.3+incompatible
no fix listed

Open the chart page →

18,808
ranchercarbide-charts2.15.22 of 2See more

rancher carbide-charts 2.15.2

2 of the 2 container images this version deploys carry CVE-2026-85747.

Container imageDigestPackageFixed in
rancher/rancher:v2.15.20c3d8e570255
github.com/docker/distribution@v2.8.3+incompatible
no fix listed
rancher/shell:v0.8.21eeed72d4eda
github.com/docker/distribution@v2.8.3+incompatible
no fix listed

Open the chart page →

2,662
castware-componentscastaiVerified publisher0.4.01 of 1See more

castware-components castai 0.4.0

1 of the 1 container images this version deploys carry CVE-2026-85747.

Container imageDigestPackageFixed in
lachlanevenson/k8s-kubectl:v1.25.4af5cea3f2e40
github.com/docker/distribution@v2.8.1+incompatible
no fix listed

Open the chart page →

4,350
catalyst-agentscatalyst-agents0.1.351 of 18See more

catalyst-agents catalyst-agents 0.1.35

1 of the 18 container images this version deploys carry CVE-2026-85747.

Container imageDigestPackageFixed in
alpine/k8s:1.32.3eec354133193
github.com/docker/distribution@v2.8.1+incompatible
no fix listed

Open the chart page →

25,104
checkin-componentcheckin-component0.1.01 of 4See more

checkin-component checkin-component 0.1.0

1 of the 4 container images this version deploys carry CVE-2026-85747.

Container imageDigestPackageFixed in
conduction/checkin-component-php:dev3423845692c1
github.com/docker/distribution@v0.0.0-20191216044856-a8371794149d
no fix listed

Open the chart page →

11,064
clairclair-helmVerified publisher0.12.01 of 3See more

clair clair-helm 0.12.0

1 of the 3 container images this version deploys carry CVE-2026-85747.

Container imageDigestPackageFixed in
quay.io/projectquay/clair:4.9.023329c3368e4
github.com/docker/distribution@v2.8.3+incompatible
no fix listed

Open the chart page →

2,516
capsule-rancher-addonclastixVerified publisher0.1.11 of 5See more

capsule-rancher-addon clastix 0.1.1

1 of the 5 container images this version deploys carry CVE-2026-85747.

Container imageDigestPackageFixed in
quay.io/jetstack/cert-manager-ctl:v1.11.074611761f052
github.com/docker/distribution@v2.8.1+incompatible
no fix listed

Open the chart page →

11,368
cp4d-deployercloud-native-toolkit1.0.01 of 1See more

cp4d-deployer cloud-native-toolkit 1.0.0

1 of the 1 container images this version deploys carry CVE-2026-85747.

Container imageDigestPackageFixed in
quay.io/cloudnativetoolkit/cloud-pak-deployer:latest13aaae779248
github.com/docker/distribution@v2.8.1+incompatible
no fix listed

Open the chart page →

26,828
ibm-toolkit-installcloud-native-toolkit0.3.01 of 1See more

ibm-toolkit-install cloud-native-toolkit 0.3.0

1 of the 1 container images this version deploys carry CVE-2026-85747.

Container imageDigestPackageFixed in
quay.io/ibmgaragecloud/cli-tools:v0.159663f06adcb1
github.com/docker/distribution@v2.7.1+incompatible
no fix listed

Open the chart page →

8,205
iteration-zerocloud-native-toolkit0.2.01 of 1See more

iteration-zero cloud-native-toolkit 0.2.0

1 of the 1 container images this version deploys carry CVE-2026-85747.

Container imageDigestPackageFixed in
quay.io/cloudnativetoolkit/cli-tools:v1.1-v1.8.2d6fd2a9e3273
github.com/docker/distribution@v2.7.1+incompatible
no fix listed

Open the chart page →

8,419
ocs-operatorcloud-native-toolkit0.2.41 of 1See more

ocs-operator cloud-native-toolkit 0.2.4

1 of the 1 container images this version deploys carry CVE-2026-85747.

Container imageDigestPackageFixed in
quay.io/openshift/origin-cli:lateste7965645fac6
github.com/distribution/distribution/v3@v3.0.0-20230519140516-983358f8e250
3.1.2

Open the chart page →

598
refarch-infraconfigcloud-native-toolkit0.2.21 of 1See more

refarch-infraconfig cloud-native-toolkit 0.2.2

1 of the 1 container images this version deploys carry CVE-2026-85747.

Container imageDigestPackageFixed in
quay.io/openshift/origin-cli:lateste7965645fac6
github.com/distribution/distribution/v3@v3.0.0-20230519140516-983358f8e250
3.1.2

Open the chart page →

598
galaxykubemancloudve2.10.11 of 7See more

galaxykubeman cloudve 2.10.1

1 of the 7 container images this version deploys carry CVE-2026-85747.

Container imageDigestPackageFixed in
galaxy/cloudman-server:lateste5c265fe9fcd
github.com/docker/distribution@v2.8.1+incompatible
no fix listed

Open the chart page →

20,472
pulsarcloudve0.2.02 of 2See more

pulsar cloudve 0.2.0

2 of the 2 container images this version deploys carry CVE-2026-85747.

Container imageDigestPackageFixed in
galaxy/pulsar-kubernetes:0.15.7e50a890e24c9
github.com/docker/distribution@v2.8.3+incompatible
no fix listed
library/docker:dind0b6d18a4a222
github.com/docker/distribution@v2.8.3+incompatible
no fix listed

Open the chart page →

7,405
argo-cdcluster-deploy0.3.31 of 3See more

argo-cd cluster-deploy 0.3.3

1 of the 3 container images this version deploys carry CVE-2026-85747.

Container imageDigestPackageFixed in
quay.io/argoprojlabs/argocd-image-updater:v1.3.0cb009167015c
github.com/distribution/distribution/v3@v3.1.1
3.1.2

Open the chart page →

3,879
clusterfactoryclusterfactory0.2.01 of 5See more

clusterfactory clusterfactory 0.2.0

1 of the 5 container images this version deploys carry CVE-2026-85747.

Container imageDigestPackageFixed in
gitea/act_runner:0.3.1c2a169c5e998
github.com/docker/distribution@v2.8.3+incompatible
no fix listed

Open the chart page →

8,284
clusternet-controller-managerclusternet1.0.01 of 1See more

clusternet-controller-manager clusternet 1.0.0

1 of the 1 container images this version deploys carry CVE-2026-85747.

Container imageDigestPackageFixed in
ghcr.io/clusternet/clusternet-controller-manager:v1.0.02ce077d3d02d
github.com/docker/distribution@v2.8.3+incompatible
no fix listed

Open the chart page →

2,184
cluster-octopuscluster-octopus1.0.01 of 1See more

cluster-octopus cluster-octopus 1.0.0

1 of the 1 container images this version deploys carry CVE-2026-85747.

Container imageDigestPackageFixed in
cgtysylr/cluster-octopus:1.0.0aec0f8a38a77
github.com/docker/distribution@v2.8.2+incompatible
no fix listed

Open the chart page →

1,733
door-agentcnoVerified publisher3.0.154 of 15See more

door-agent cno 3.0.15

4 of the 15 container images this version deploys carry CVE-2026-85747.

Container imageDigestPackageFixed in
beopenit/door-agent:v3.0.5d24c323fe7c3
github.com/docker/distribution@v2.8.3+incompatible
no fix listed
beopenit/door-helm:v3.0.1b4d9f9bee224
github.com/docker/distribution@v0.0.0-20191216044856-a8371794149d
no fix listed
library/docker:27-cli851f91d24121
github.com/docker/distribution@v2.8.3+incompatible
no fix listed
library/docker:27-dindaa3df78ecf32
github.com/docker/distribution@v2.8.3+incompatible
no fix listed

Open the chart page →

27,869
cgrccommongroundregistratiecomponent0.1.01 of 3See more

cgrc commongroundregistratiecomponent 0.1.0

1 of the 3 container images this version deploys carry CVE-2026-85747.

Container imageDigestPackageFixed in
conduction/cgrc-php:dev25415534d245
github.com/docker/distribution@v0.0.0-20191216044856-a8371794149d
no fix listed

Open the chart page →

10,227
conduction-uiconduction-ui0.1.01 of 6See more

conduction-ui conduction-ui 0.1.0

1 of the 6 container images this version deploys carry CVE-2026-85747.

Container imageDigestPackageFixed in
conduction/conduction-ui-php:dev2744565516e8
github.com/docker/distribution@v0.0.0-20191216044856-a8371794149d
no fix listed

Open the chart page →

15,774
betaalservicecontacten-catalog1.0.01 of 3See more

betaalservice contacten-catalog 1.0.0

1 of the 3 container images this version deploys carry CVE-2026-85747.

Container imageDigestPackageFixed in
conduction/betaalservice-php:latestece1ab544c57
github.com/docker/distribution@v0.0.0-20191216044856-a8371794149d
no fix listed

Open the chart page →

9,142
contactmoment-componentcontactmoment-component0.1.01 of 4See more

contactmoment-component contactmoment-component 0.1.0

1 of the 4 container images this version deploys carry CVE-2026-85747.

Container imageDigestPackageFixed in
conduction/contactmoment-component-php:deve1d4ad1e22a8
github.com/docker/distribution@v0.0.0-20191216044856-a8371794149d
no fix listed

Open the chart page →

11,064
cosmo-traefikcosmoVerified publisher0.9.11 of 2See more

cosmo-traefik cosmo 0.9.1

1 of the 2 container images this version deploys carry CVE-2026-85747.

Container imageDigestPackageFixed in
library/traefik:v2.10.11489caffaedb
github.com/docker/distribution@v2.8.1+incompatible
no fix listed

Open the chart page →

4,504
dev-code-servercosmoVerified publisher0.0.71 of 2See more

dev-code-server cosmo 0.0.7

1 of the 2 container images this version deploys carry CVE-2026-85747.

Container imageDigestPackageFixed in
library/docker:dind7dcdfc4a2024
github.com/docker/distribution@v2.8.3+incompatible
no fix listed

Open the chart page →

17,435
couchbase-monitor-stackcouchbaseVerified publisher2.1.21 of 5See more

couchbase-monitor-stack couchbase 2.1.2

1 of the 5 container images this version deploys carry CVE-2026-85747.

Container imageDigestPackageFixed in
quay.io/prometheus-operator/prometheus-operator:v0.50.0ab4f480f2cc6
github.com/docker/distribution@v2.7.1+incompatible
no fix listed

Open the chart page →

9,504
katibcowboysysopVerified publisher2.4.21 of 4See more

katib cowboysysop 2.4.2

1 of the 4 container images this version deploys carry CVE-2026-85747.

Container imageDigestPackageFixed in
kubeflowkatib/katib-controller:v0.12.012a28c8a0b41
github.com/docker/distribution@v2.7.1+incompatible
no fix listed

Open the chart page →

10,152
crossplane-controllerscrossplane0.12.01 of 1See more

crossplane-controllers crossplane 0.12.0

1 of the 1 container images this version deploys carry CVE-2026-85747.

Container imageDigestPackageFixed in
crossplane/crossplane:v0.12.066666e6963af
github.com/docker/distribution@v2.7.1+incompatible
no fix listed

Open the chart page →

3,586
csghubcsghubVerified publisher2.6.01 of 35See more

csghub csghub 2.6.0

1 of the 35 container images this version deploys carry CVE-2026-85747.

Container imageDigestPackageFixed in
quay.io/argoproj/workflow-controller:v3.7.11c46aa0ded8ed
github.com/docker/distribution@v2.8.3+incompatible
no fix listed

Open the chart page →

67,811
rtcsic-charts0.1.11 of 5See more

rt csic-charts 0.1.1

1 of the 5 container images this version deploys carry CVE-2026-85747.

Container imageDigestPackageFixed in
dtzar/helm-kubectl:3.11.2a1041bb0f1d1
github.com/docker/distribution@v2.8.1+incompatible
no fix listed

Open the chart page →

17,944
wazuhcsic-charts0.1.01 of 4See more

wazuh csic-charts 0.1.0

1 of the 4 container images this version deploys carry CVE-2026-85747.

Container imageDigestPackageFixed in
wazuh/wazuh-manager:4.4.121994f40e0da
github.com/docker/distribution@v2.7.1+incompatible
no fix listed

Open the chart page →

16,221

Container images carrying it

634 by charts deploying them

A fixed version is listed for 1 of the 2 affected packages.

Container imageDigestPackageFixed inUsed by
ghcr.io/m9sweeper/trawler:1.6.0df917c5a7e54
github.com/docker/distribution@v2.8.2+incompatible
no fix listed
1
ghcr.io/manzil-infinity180/deploydefender:ea3ab0bb646cdbeddd1aca483ecf650f9ac0d0847fbc6855c8b3
github.com/docker/distribution@v2.8.3+incompatible
no fix listed
1
ghcr.io/middleware-labs/agent-kube-go:dev17369c4cd390
github.com/docker/distribution@v2.8.1+incompatible
no fix listed
1
ghcr.io/middleware-labs/mw-kube-agent:master056f0953763d
github.com/docker/distribution@v2.8.2+incompatible
no fix listed
1
ghcr.io/mitos-run/mitos-forkd:v1.6.0979b462ab7d6
github.com/docker/distribution@v2.8.3+incompatible
no fix listed
1
ghcr.io/mosn/htnn-controller:v0.3.1c379e66246be
github.com/docker/distribution@v2.8.3+incompatible
no fix listed
1
ghcr.io/oguzhan-yilmaz/argocd-backup-s3:latestb61c750ade19
github.com/docker/distribution@v2.7.1+incompatible
no fix listed
1
ghcr.io/oguzhan-yilmaz/kdiff-snapshots:0.0.2035bc5ca66d55a
github.com/docker/distribution@v2.8.3+incompatible
no fix listed
1
ghcr.io/oguzhan-yilmaz/kdiff-snapshots:0.0.55d7f93d2182fe
github.com/docker/distribution@v2.8.3+incompatible
no fix listed
1
ghcr.io/oguzhan-yilmaz/steampipe-powerpipe-kubernetes--steampipe:latestc0c8d53df9f3
github.com/docker/distribution@v2.8.3+incompatible
no fix listed
1
ghcr.io/okteto/backend:0.0.0-2026-08-316171cb2b2a72
github.com/docker/distribution@v2.8.2-beta.1+incompatible
no fix listed
1
ghcr.io/okteto/registry:0.0.0-2026-08-17:0.0.0-2026-08-24:0.0.0-2026-08-3169131511501f
github.com/docker/distribution@v0.0.0-20260803174359-77a4b05a258a
no fix listed
1
ghcr.io/openclarity/grype-server:v0.6.079412399f301
github.com/docker/distribution@v2.8.2+incompatible
no fix listed
1
ghcr.io/openclarity/kubeclarity:v2.23.314450f52a708
github.com/docker/distribution@v2.8.2+incompatible
no fix listed
1
ghcr.io/openfaas/faas-netes:0.18.1224431adc8e2d
github.com/docker/distribution@v2.8.3+incompatible
no fix listed
1
ghcr.io/openfaas/gateway:0.27.1382b15393116e
github.com/docker/distribution@v2.8.3+incompatible
no fix listed
1
ghcr.io/openfaas/gateway:0.27.14ee0eaecc490c
github.com/docker/distribution@v2.8.3+incompatible
no fix listed
1
ghcr.io/openrelik/openrelik-worker-containers:latesta6d5abe94706
github.com/docker/distribution@v2.8.3+incompatible
no fix listed
1
ghcr.io/parca-dev/parca-agent:v0.28.06d6794f45f3e
github.com/docker/distribution@v2.8.3+incompatible
no fix listed
1
ghcr.io/pipe-cd/pipecd:v0.39.00fae829caf29
github.com/docker/distribution@v2.7.1+incompatible
no fix listed
1
ghcr.io/project-zot/zot:v2.1.144183bd731bcc
github.com/distribution/distribution/v3@v3.0.0
github.com/docker/distribution@v2.8.3+incompatible
3.1.2
no fix listed
1
ghcr.io/quenchworks/images/concourse755461ea934b
github.com/docker/distribution@v2.8.3+incompatible
no fix listed
1
ghcr.io/quenchworks/images/connaisseurb88ae556af26
github.com/docker/distribution@v2.8.3+incompatible
no fix listed
1
ghcr.io/quenchworks/images/harbor-registryc75b5434d4dc
github.com/docker/distribution@v0.0.0-20260602055908-11540eae06cb+dirty
no fix listed
1
ghcr.io/quenchworks/images/kubescapea624c51217ea
github.com/docker/distribution@v2.8.3+incompatible
no fix listed
1
ghcr.io/quenchworks/images/kubescape-operatorb861c9a1b694
github.com/docker/distribution@v2.8.3+incompatible
no fix listed
1
ghcr.io/quenchworks/images/kubevuln1a91383dc427
github.com/docker/distribution@v2.8.3+incompatible
no fix listed
1
ghcr.io/quenchworks/images/vcluster77ba2823e2fe
github.com/docker/distribution@v2.8.3+incompatible
no fix listed
1
ghcr.io/sigstore/policy-controller/policy-controller0bcd60beb93f
github.com/docker/distribution@v2.8.3+incompatible
no fix listed
1
ghcr.io/sigstore/sigstore-probers/prober:v1.0.1d1e914e6d6b9
github.com/docker/distribution@v2.8.3+incompatible
no fix listed
1
ghcr.io/spiffe/spire-agent:1.6.062517726d0c4
github.com/docker/distribution@v2.8.1+incompatible
no fix listed
1
ghcr.io/stashed/stash:v0.42.03a98245a7667
github.com/docker/distribution@v2.8.2+incompatible
no fix listed
1
ghcr.io/stashed/stash-enterprise:v0.42.1759f3850eda9
github.com/docker/distribution@v2.8.3+incompatible
no fix listed
1
ghcr.io/stashed/stash-enterprise:v0.32.0e9bde36e34b7
github.com/docker/distribution@v2.8.1+incompatible
no fix listed
1
ghcr.io/thm-mni-ii/fbs-runner:v2.0.9ffaf49a4d687
github.com/distribution/distribution/v3@v3.0.0-20220725133111-4bf3547399eb
github.com/docker/distribution@v2.8.1+incompatible
3.1.2
no fix listed
1
ghcr.io/traefik/traefik-hub:v2.11.0322f5f8cc105
github.com/docker/distribution@v2.8.2+incompatible
no fix listed
1
ghcr.io/turbot/guardrails-agent-kubernetes:0.3.09d01bf9c9224
github.com/docker/distribution@v2.8.3+incompatible
no fix listed
1
ghcr.io/voyagermesh/crd-manager:v0.1.013fd0cccafe8
github.com/docker/distribution@v2.8.3+incompatible
no fix listed
1
ghcr.io/voyagermesh/gateway:v1.6.223f4da194134
github.com/docker/distribution@v2.8.3+incompatible
no fix listed
1
ghcr.io/voyagermesh/voyager:v17.5.04964ceaf9d35
github.com/docker/distribution@v2.8.3+incompatible
no fix listed
1
ghcr.io/wundergraph/cosmo/controlplane:0.133.149800ff775f3
github.com/docker/distribution@v2.8.3+incompatible
no fix listed
1
ghcr.io/wundergraph/cosmo/router:0.243.05afcab98d9d7
github.com/docker/distribution@v2.8.3+incompatible
no fix listed
1
public.ecr.aws/boundless-software/switchblade:release-v0.0.19-lcm01d8413d5075
github.com/docker/distribution@v2.8.2+incompatible
no fix listed
1
public.ecr.aws/dynatrace/dynatrace-operator:v1.3.0f68901a54664
github.com/docker/distribution@v2.8.2+incompatible
no fix listed
1
public.ecr.aws/n8h5y2v5/rad-security/rad-sbom:v1.1.710f5aeaf1a77e
github.com/docker/distribution@v2.8.3+incompatible
no fix listed
1
public.ecr.aws/n8h5y2v5/rad-security/rad-sbom:v1.1.34e97e0e7a2088
github.com/docker/distribution@v2.8.3+incompatible
no fix listed
1
public.ecr.aws/p1t3u8a3/api:v1.28.512aeda8dbac7
github.com/docker/distribution@v2.8.3+incompatible
no fix listed
1
public.ecr.aws/p1t3u8a3/assets:v1.28.0fee63ead0e74
github.com/docker/distribution@v2.8.3+incompatible
no fix listed
1
public.ecr.aws/p1t3u8a3/canvases:v1.28.08d2b3a947a14
github.com/docker/distribution@v2.8.3+incompatible
no fix listed
1
public.ecr.aws/p1t3u8a3/db:v1.28.02c99078d7957
github.com/docker/distribution@v2.8.3+incompatible
no fix listed
1

syft 1.42.1 · advisories as of 16 Oct 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.