StackRadar

CVE-2026-85747

Medium

Advisory

Published 15 Oct 2026In the index since 16 Oct 2026
Severity
Medium
worst across findings
CVSS
6.8
base score, highest
EPSS
0.002
10th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
647
of 18,137 indexed, latest versions
Container images
634
deployed by those charts
Fix available
1 of 2
affected packages

Distribution: Client `manifests.Get()` does not verify returned content against requested digest

Carried by container images the latest versions of 647 of 18,137 indexed charts deploy, on 634 images.

Affected packageAffected versionsFixed inImages
github.com/docker/distributiongolangv0.0.0-20171011171712-7484e51bf6af, v0.0.0-20191216044856-a8371794149d, v0.0.0-20260602055908-11540eae06cb+dirty, v0.0.0-20260701071724-493dca9a81a8+dirty+12 moreno fix listed624
github.com/distribution/distribution/v3golangv0.0.0-20250402055438-9ed95e736522, v3.0.0, v3.0.0-20210316161203-a01c71e2477e, v3.0.0-20220526142353-ffbd94cbe269+9 more3.1.236
OSV records
GHSA-685w-q87j-wqw3
Trending
Rank 42 in indexed charts, since 16 Oct 2026. See the ranking →

Charts affected

647 by stars
ChartLatestAffected imagesRadar Score
landelijketabellencataloguslandelijketabellencatalogus1.0.01 of 3See more

landelijketabellencatalogus landelijketabellencatalogus 1.0.0

1 of the 3 container images this version deploys carry CVE-2026-85747.

Container imageDigestPackageFixed in
ghcr.io/conductionnl/landelijketabellencatalogus-php:latest26d91dcbba56
github.com/docker/distribution@v0.0.0-20191216044856-a8371794149d
no fix listed

Open the chart page →

9,547
linkerd-jaegerlinkerd2-edgeVerified publisher30.14.11-edge1 of 4See more

linkerd-jaeger linkerd2-edge 30.14.11-edge

1 of the 4 container images this version deploys carry CVE-2026-85747.

Container imageDigestPackageFixed in
otel/opentelemetry-collector-contrib:0.83.071fcef33ae71
github.com/docker/distribution@v2.8.2+incompatible
no fix listed

Open the chart page →

6,254
vcluster-k0sloftVerified publisher0.0.0-ci.31 of 2See more

vcluster-k0s loft 0.0.0-ci.3

1 of the 2 container images this version deploys carry CVE-2026-85747.

Container imageDigestPackageFixed in
k0sproject/k0s:v1.26.0-k0s.0f04635825d51
github.com/docker/distribution@v2.8.1+incompatible
no fix listed

Open the chart page →

4,091
voice-biometricslumenvox2.0.13 of 26See more

voice-biometrics lumenvox 2.0.1

3 of the 26 container images this version deploys carry CVE-2026-85747.

Container imageDigestPackageFixed in
library/traefik:v2.57d5a6ae66572
github.com/docker/distribution@v2.7.1+incompatible
no fix listed
lumenvox/cloud-license:2.0.09a69862e1248
github.com/docker/distribution@v2.7.1+incompatible
no fix listed
quay.io/prometheus/prometheus:v2.26.038d40a760569
github.com/docker/distribution@v2.7.1+incompatible
no fix listed

Open the chart page →

83,868
chartmuseummike75151.2.01 of 1See more

chartmuseum mike7515 1.2.0

1 of the 1 container images this version deploys carry CVE-2026-85747.

Container imageDigestPackageFixed in
ghcr.io/helm/chartmuseum:v0.15.0c298183a5208
github.com/docker/distribution@v2.8.1+incompatible
no fix listed

Open the chart page →

4,272
cloud9nicholaswildeVerified publisher1.0.01 of 1See more

cloud9 nicholaswilde 1.0.0

1 of the 1 container images this version deploys carry CVE-2026-85747.

Container imageDigestPackageFixed in
linuxserver/cloud9:version-1.29.245c5fe102ff3
github.com/distribution/distribution/v3@v3.0.0-20210316161203-a01c71e2477e
github.com/docker/distribution@v2.8.0+incompatible
3.1.2
no fix listed

Open the chart page →

13,152
oadaoadaVerified publisher5.0.61 of 11See more

oada oada 5.0.6

1 of the 11 container images this version deploys carry CVE-2026-85747.

Container imageDigestPackageFixed in
groundnuty/k8s-wait-for:no-root-v2.0a26d3d3f6e1c
github.com/docker/distribution@v2.8.1+incompatible
no fix listed

Open the chart page →

15,493
kruiseopenkruise1.9.11 of 2See more

kruise openkruise 1.9.1

1 of the 2 container images this version deploys carry CVE-2026-85747.

Container imageDigestPackageFixed in
openkruise/kruise-manager:v1.9.1f81ae78a36a4
github.com/docker/distribution@v2.8.2+incompatible
no fix listed

Open the chart page →

2,885
opikopikOfficialVerified publisher2.2.1021 of 12See more

opik opik 2.2.102

1 of the 12 container images this version deploys carry CVE-2026-85747.

Container imageDigestPackageFixed in
ghcr.io/comet-ml/opik/opik-python-backend:2.2.10270a4a0fda819
github.com/docker/distribution@v2.8.3+incompatible
no fix listed

Open the chart page →

16,455
orbitalregorbitalregVerified publisher0.4.21 of 5See more

orbitalreg orbitalreg 0.4.2

1 of the 5 container images this version deploys carry CVE-2026-85747.

Container imageDigestPackageFixed in
orbitalreg/orbitalreg-scanner:0.4.27497639e8edd
github.com/docker/distribution@v2.8.3+incompatible
no fix listed

Open the chart page →

5,539
kubernetes-dashboard-proxyosc0.7.21 of 4See more

kubernetes-dashboard-proxy osc 0.7.2

1 of the 4 container images this version deploys carry CVE-2026-85747.

Container imageDigestPackageFixed in
kubernetesui/dashboard:v2.7.02e500d29e9d5
github.com/docker/distribution@v2.8.1+incompatible
no fix listed

Open the chart page →

9,144
hlf-peerowkin5.1.01 of 1See more

hlf-peer owkin 5.1.0

1 of the 1 container images this version deploys carry CVE-2026-85747.

Container imageDigestPackageFixed in
hyperledger/fabric-peer:2.2.1bf4995c86af6
github.com/docker/distribution@v2.7.1+incompatible
no fix listed

Open the chart page →

4,998
spirephilips-labsVerified publisher0.12.21 of 6See more

spire philips-labs 0.12.2

1 of the 6 container images this version deploys carry CVE-2026-85747.

Container imageDigestPackageFixed in
ghcr.io/spiffe/spire-agent:1.6.062517726d0c4
github.com/docker/distribution@v2.8.1+incompatible
no fix listed

Open the chart page →

11,397
chartmuseumphntom4.0.201 of 1See more

chartmuseum phntom 4.0.20

1 of the 1 container images this version deploys carry CVE-2026-85747.

Container imageDigestPackageFixed in
phntom/chartmuseum:v0.16.053883b65d9b7
github.com/docker/distribution@v2.8.2+incompatible
no fix listed

Open the chart page →

3,855
podtracepodtraceOfficialVerified publisher0.14.91 of 2See more

podtrace podtrace 0.14.9

1 of the 2 container images this version deploys carry CVE-2026-85747.

Container imageDigestPackageFixed in
alpine/k8s:1.37.1712dc5385d1c
github.com/docker/distribution@v2.8.3+incompatible
no fix listed

Open the chart page →

1,172
prometheusprometheus-worawutchan13.0.01 of 6See more

prometheus prometheus-worawutchan 13.0.0

1 of the 6 container images this version deploys carry CVE-2026-85747.

Container imageDigestPackageFixed in
quay.io/prometheus/prometheus:v2.22.1b899dbd1b901
github.com/docker/distribution@v2.7.1+incompatible
no fix listed

Open the chart page →

15,939
kubernetes-dashboardpyalive-cdmswebappVerified publisher5.8.01 of 1See more

kubernetes-dashboard pyalive-cdmswebapp 5.8.0

1 of the 1 container images this version deploys carry CVE-2026-85747.

Container imageDigestPackageFixed in
kubernetesui/dashboard:v2.6.1290bebc3cd96
github.com/docker/distribution@v2.8.1+incompatible
no fix listed

Open the chart page →

2,578
rke2-canalrke2-charts3.13.31 of 2See more

rke2-canal rke2-charts 3.13.3

1 of the 2 container images this version deploys carry CVE-2026-85747.

Container imageDigestPackageFixed in
rancher/hardened-flannel:v0.13.0-rancher142784bb38ed3
github.com/docker/distribution@v2.4.0+incompatible
no fix listed

Open the chart page →

7,436
cosignedsigstoreVerified publisher0.1.232 of 2See more

cosigned sigstore 0.1.23

2 of the 2 container images this version deploys carry CVE-2026-85747.

Container imageDigestPackageFixed in
gcr.io/projectsigstore/cosigneddigest-pinned784518ff3ee7
github.com/docker/distribution@v2.8.0+incompatible
no fix listed
gcr.io/projectsigstore/policy-webhookdigest-pinned82940e8c3e0d
github.com/docker/distribution@v2.8.0+incompatible
no fix listed

Open the chart page →

7,568
artifact-hubsoftonic1.19.04 of 8See more

artifact-hub softonic 1.19.0

4 of the 8 container images this version deploys carry CVE-2026-85747.

Container imageDigestPackageFixed in
aquasec/trivy:0.43.1944a04445179
github.com/docker/distribution@v2.8.2+incompatible
no fix listed
artifacthub/hub:v1.19.0111918d8c399
github.com/docker/distribution@v2.8.3+incompatible
no fix listed
artifacthub/scanner:v1.19.0323d026e78c3
github.com/docker/distribution@v2.8.3+incompatible
no fix listed
artifacthub/tracker:v1.19.06596c8c4d955
github.com/docker/distribution@v2.8.3+incompatible
no fix listed

Open the chart page →

18,809
gloosolo-gloo-edge0.0.0-fork2 of 5See more

gloo solo-gloo-edge 0.0.0-fork

2 of the 5 container images this version deploys carry CVE-2026-85747.

Container imageDigestPackageFixed in
quay.io/solo-io/discovery:0.0.0-fork5b62aaade3c9
github.com/docker/distribution@v2.7.1+incompatible
no fix listed
quay.io/solo-io/gloo:0.0.0-fork9a6c84560d44
github.com/docker/distribution@v2.7.1+incompatible
no fix listed

Open the chart page →

13,451
sp-otel-collectorsp-otel-collectorVerified publisher1.1.61 of 1See more

sp-otel-collector sp-otel-collector 1.1.6

1 of the 1 container images this version deploys carry CVE-2026-85747.

Container imageDigestPackageFixed in
quay.io/geored/spmm-collector-contrib:1.0.063baf86a49ac
github.com/docker/distribution@v2.8.2+incompatible
no fix listed

Open the chart page →

2,786
stackradar-scannerstackradarVerified publisher0.6.01 of 1See more

stackradar-scanner stackradar 0.6.0

1 of the 1 container images this version deploys carry CVE-2026-85747.

Container imageDigestPackageFixed in
ghcr.io/lockdep/stackradar-scanner:0.6.0a90480c17377
github.com/docker/distribution@v2.8.3+incompatible
no fix listed

Open the chart page →

1,893
stornxstornxVerified publisher1.1.11 of 9See more

stornx stornx 1.1.1

1 of the 9 container images this version deploys carry CVE-2026-85747.

Container imageDigestPackageFixed in
istio/pilot:1.29.1f8b0e412ac4a
github.com/docker/distribution@v2.8.3+incompatible
no fix listed

Open the chart page →

16,719
consolestratosVerified publisher4.4.01 of 4See more

console stratos 4.4.0

1 of the 4 container images this version deploys carry CVE-2026-85747.

Container imageDigestPackageFixed in
splatform/stratos-jetstream:4.4.0-bc65c315c886311c331b9
github.com/docker/distribution@v2.7.1+incompatible
no fix listed

Open the chart page →

31,417
syncerdsyncerdVerified publisher0.2.21 of 1See more

syncerd syncerd 0.2.2

1 of the 1 container images this version deploys carry CVE-2026-85747.

Container imageDigestPackageFixed in
ghcr.io/clouddrove/syncerd:latest73a1bb038de3
github.com/docker/distribution@v2.8.2+incompatible
no fix listed

Open the chart page →

415
system-upgrade-controllersystem-upgradeVerified publisher0.2.141 of 1See more

system-upgrade-controller system-upgrade 0.2.14

1 of the 1 container images this version deploys carry CVE-2026-85747.

Container imageDigestPackageFixed in
rancher/system-upgrade-controller:v0.20.261b68d4372ba
github.com/docker/distribution@v2.8.3+incompatible
no fix listed

Open the chart page →

234
system-upgrade-controllersystem-upgrade-controllerVerified publisher1.12.11 of 1See more

system-upgrade-controller system-upgrade-controller 1.12.1

1 of the 1 container images this version deploys carry CVE-2026-85747.

Container imageDigestPackageFixed in
rancher/system-upgrade-controller:v0.20.261b68d4372ba
github.com/docker/distribution@v2.8.3+incompatible
no fix listed

Open the chart page →

234
spa-reloadertoucanVerified publisher0.1.01 of 1See more

spa-reloader toucan 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-85747.

Container imageDigestPackageFixed in
toucansoftware/spa-reloader:latestc187b1fba501
github.com/docker/distribution@v2.7.1+incompatible
no fix listed

Open the chart page →

3,482
traefik-hubtraefikOfficialVerified publisher4.2.01 of 1See more

traefik-hub traefik 4.2.0

1 of the 1 container images this version deploys carry CVE-2026-85747.

Container imageDigestPackageFixed in
ghcr.io/traefik/traefik-hub:v2.11.0322f5f8cc105
github.com/docker/distribution@v2.8.2+incompatible
no fix listed

Open the chart page →

3,942
guardrails-agent-kubernetesturbotVerified publisher0.3.01 of 1See more

guardrails-agent-kubernetes turbot 0.3.0

1 of the 1 container images this version deploys carry CVE-2026-85747.

Container imageDigestPackageFixed in
ghcr.io/turbot/guardrails-agent-kubernetes:0.3.09d01bf9c9224
github.com/docker/distribution@v2.8.3+incompatible
no fix listed

Open the chart page →

4,927
upbot-operatorupbot-operator0.0.201 of 2See more

upbot-operator upbot-operator 0.0.20

1 of the 2 container images this version deploys carry CVE-2026-85747.

Container imageDigestPackageFixed in
alpine/k8s:1.28.13e5c0b053fed7
github.com/docker/distribution@v2.8.2+incompatible
no fix listed

Open the chart page →

5,751
user-componentuser-component1.2.01 of 4See more

user-component user-component 1.2.0

1 of the 4 container images this version deploys carry CVE-2026-85747.

Container imageDigestPackageFixed in
ghcr.io/conductionnl/user-component-php:latest198db44fabb5
github.com/docker/distribution@v0.0.0-20191216044856-a8371794149d
no fix listed

Open the chart page →

9,378
devportal-admin-uiveecode-platformVerified publisher0.5.41 of 1See more

devportal-admin-ui veecode-platform 0.5.4

1 of the 1 container images this version deploys carry CVE-2026-85747.

Container imageDigestPackageFixed in
veecode/devportal-admin-ui:0.4.30c69fd286b489
github.com/docker/distribution@v2.8.3+incompatible
no fix listed

Open the chart page →

6,298
waardepapierenwaardepapieren1.0.01 of 3See more

waardepapieren waardepapieren 1.0.0

1 of the 3 container images this version deploys carry CVE-2026-85747.

Container imageDigestPackageFixed in
ghcr.io/conductionnl/waardepapieren-php:latestb2666ffcbad8
github.com/docker/distribution@v0.0.0-20191216044856-a8371794149d
no fix listed

Open the chart page →

10,240
waardepapieren-baliewaardepapieren-balie1.0.01 of 3See more

waardepapieren-balie waardepapieren-balie 1.0.0

1 of the 3 container images this version deploys carry CVE-2026-85747.

Container imageDigestPackageFixed in
ghcr.io/conductionnl/waardepapieren-balie-php:latestf36c423cd259
github.com/docker/distribution@v0.0.0-20191216044856-a8371794149d
no fix listed

Open the chart page →

9,916
waardepapieren-registerwaardepapieren-register1.1.01 of 4See more

waardepapieren-register waardepapieren-register 1.1.0

1 of the 4 container images this version deploys carry CVE-2026-85747.

Container imageDigestPackageFixed in
ghcr.io/conductionnl/waardepapieren-register-php:latest9affab218351
github.com/docker/distribution@v0.0.0-20191216044856-a8371794149d
no fix listed

Open the chart page →

9,443
harborwener1.19.23 of 8See more

harbor wener 1.19.2

3 of the 8 container images this version deploys carry CVE-2026-85747.

Container imageDigestPackageFixed in
goharbor/harbor-registryctl:v2.15.2223d5cb49d5d
github.com/docker/distribution@v0.0.0-20260701071724-493dca9a81a8+dirty
no fix listed
goharbor/registry-photon:v2.15.2c4ebef61ceb5
github.com/docker/distribution@v0.0.0-20260701071724-493dca9a81a8+dirty
no fix listed
goharbor/trivy-adapter-photon:v2.15.2215c07b71c37
github.com/docker/distribution@v2.8.2+incompatible
no fix listed

Open the chart page →

3,440
adresserviceadresservice1.1.01 of 5See more

adresservice adresservice 1.1.0

1 of the 5 container images this version deploys carry CVE-2026-85747.

Container imageDigestPackageFixed in
ghcr.io/conductionnl/adresservice-php:latestc5075f0320cd
github.com/docker/distribution@v0.0.0-20191216044856-a8371794149d
no fix listed

Open the chart page →

9,460
bootaerokube1.0.11 of 4See more

boot aerokube 1.0.1

1 of the 4 container images this version deploys carry CVE-2026-85747.

Container imageDigestPackageFixed in
quay.io/aerokube/keygen:1.0.1578934444f04
github.com/docker/distribution@v2.8.1+incompatible
no fix listed

Open the chart page →

10,314
browser-opsaerokube2.6.71 of 1See more

browser-ops aerokube 2.6.7

1 of the 1 container images this version deploys carry CVE-2026-85747.

Container imageDigestPackageFixed in
quay.io/aerokube/browser-ops:2.6.7807c1bb67086
github.com/docker/distribution@v2.8.2+incompatible
no fix listed

Open the chart page →

1,144
agendaserviceagendaservice1.0.01 of 3See more

agendaservice agendaservice 1.0.0

1 of the 3 container images this version deploys carry CVE-2026-85747.

Container imageDigestPackageFixed in
conduction/agendaservice-php:latest9cfeeb6c7c20
github.com/docker/distribution@v0.0.0-20191216044856-a8371794149d
no fix listed

Open the chart page →

9,142
agentkube-operatoragentkube-operator0.3.01 of 1See more

agentkube-operator agentkube-operator 0.3.0

1 of the 1 container images this version deploys carry CVE-2026-85747.

Container imageDigestPackageFixed in
quay.io/prometheus/prometheus:v2.43.0f5c29683a301
github.com/docker/distribution@v2.8.1+incompatible
no fix listed

Open the chart page →

2,539
airports-kafkaairports-kafka0.1.01 of 2See more

airports-kafka airports-kafka 0.1.0

1 of the 2 container images this version deploys carry CVE-2026-85747.

Container imageDigestPackageFixed in
wurstmeister/kafka:latest2d4bbf9cc83d
github.com/distribution/distribution/v3@v3.0.0-20210316161203-a01c71e2477e
github.com/docker/distribution@v2.8.0+incompatible
3.1.2
no fix listed

Open the chart page →

6,113
akeyless-secrets-injectionakeyless-services-helmVerified publisher2.4.01 of 1See more

akeyless-secrets-injection akeyless-services-helm 2.4.0

1 of the 1 container images this version deploys carry CVE-2026-85747.

Container imageDigestPackageFixed in
akeyless/k8s-webhook-server:0.39.0996cd9afb3b4
github.com/docker/distribution@v2.8.3+incompatible
no fix listed

Open the chart page →

759
aktoakto0.2.01 of 7See more

akto akto 0.2.0

1 of the 7 container images this version deploys carry CVE-2026-85747.

Container imageDigestPackageFixed in
keelhq/keel:latest73714afb4443
github.com/distribution/distribution/v3@v3.0.0-20230722181636-7b502560cad4
github.com/docker/distribution@v2.8.3+incompatible
3.1.2
no fix listed

Open the chart page →

14,778
akto-hybrid-redactakto1.44.91 of 5See more

akto-hybrid-redact akto 1.44.9

1 of the 5 container images this version deploys carry CVE-2026-85747.

Container imageDigestPackageFixed in
keelhq/keel:latest73714afb4443
github.com/distribution/distribution/v3@v3.0.0-20230722181636-7b502560cad4
github.com/docker/distribution@v2.8.3+incompatible
3.1.2
no fix listed

Open the chart page →

5,752
akto-mini-runtimeakto0.7.231 of 5See more

akto-mini-runtime akto 0.7.23

1 of the 5 container images this version deploys carry CVE-2026-85747.

Container imageDigestPackageFixed in
public.ecr.aws/aktosecurity/keelhq-keel:latest1eb61443d68e
github.com/distribution/distribution/v3@v3.0.0-20230722181636-7b502560cad4
github.com/docker/distribution@v2.8.3+incompatible
3.1.2
no fix listed

Open the chart page →

6,495
akto-mini-testingakto1.46.11 of 5See more

akto-mini-testing akto 1.46.1

1 of the 5 container images this version deploys carry CVE-2026-85747.

Container imageDigestPackageFixed in
public.ecr.aws/aktosecurity/keelhq-keel:akto_v1.0.01eb61443d68e
github.com/distribution/distribution/v3@v3.0.0-20230722181636-7b502560cad4
github.com/docker/distribution@v2.8.3+incompatible
3.1.2
no fix listed

Open the chart page →

6,240
akto-mini-testing-kafkaakto1.42.11 of 5See more

akto-mini-testing-kafka akto 1.42.1

1 of the 5 container images this version deploys carry CVE-2026-85747.

Container imageDigestPackageFixed in
keelhq/keel:latest73714afb4443
github.com/distribution/distribution/v3@v3.0.0-20230722181636-7b502560cad4
github.com/docker/distribution@v2.8.3+incompatible
3.1.2
no fix listed

Open the chart page →

7,892

Container images carrying it

634 by charts deploying them

A fixed version is listed for 1 of the 2 affected packages.

Container imageDigestPackageFixed inUsed by
public.ecr.aws/p1t3u8a3/http:v1.28.0cd0e4469cd02
github.com/docker/distribution@v2.8.3+incompatible
no fix listed
1
public.ecr.aws/p1t3u8a3/sink:v1.28.06b80fb10b443
github.com/docker/distribution@v2.8.3+incompatible
no fix listed
1
public.ecr.aws/p1t3u8a3/spot:v1.28.00ba5cb666370
github.com/docker/distribution@v2.8.3+incompatible
no fix listed
1
public.ecr.aws/p1t3u8a3/storage:v1.28.02f9784a385ce
github.com/docker/distribution@v2.8.3+incompatible
no fix listed
1
public.ecr.aws/r3m4q3r9/pleco:0.24.0651739583336
github.com/docker/distribution@v2.8.2+incompatible
no fix listed
1
quay.io/aerokube/browser-ops:2.6.7807c1bb67086
github.com/docker/distribution@v2.8.2+incompatible
no fix listed
1
quay.io/aerokube/keygen:1.0.1578934444f04
github.com/docker/distribution@v2.8.1+incompatible
no fix listed
1
quay.io/argoproj/argocd:v2.4.115b6701d8fb31
github.com/docker/distribution@v2.7.1+incompatible
no fix listed
1
quay.io/argoproj/argocd:v2.10.783c86003b781
github.com/docker/distribution@v2.8.2+incompatible
no fix listed
1
quay.io/argoproj/argocd:v3.0.395b5cf7ba6fe
github.com/docker/distribution@v2.8.3+incompatible
no fix listed
1
quay.io/argoproj/argocd:v2.8.6acaf37352569
github.com/docker/distribution@v2.8.2+incompatible
no fix listed
1
quay.io/argoprojlabs/argocd-image-updater:v1.3.0cb009167015c
github.com/distribution/distribution/v3@v3.1.1
3.1.2
1
quay.io/argoproj/workflow-controller:v3.7.166388d1b2f08
github.com/docker/distribution@v2.8.3+incompatible
no fix listed
1
quay.io/argoproj/workflow-controller:v3.5.56ab0da144235
github.com/docker/distribution@v2.8.2+incompatible
no fix listed
1
quay.io/argoproj/workflow-controller:v3.7.11c46aa0ded8ed
github.com/docker/distribution@v2.8.3+incompatible
no fix listed
1
quay.io/bentoml/yatai:0.4.614b482c1f1b8
github.com/docker/distribution@v2.7.1+incompatible
no fix listed
1
quay.io/bentoml/yatai-image-builder:3.0.4401d8538c4f48
github.com/docker/distribution@v2.8.2+incompatible
no fix listed
1
quay.io/cloudnativetoolkit/cli-tools:v1.1-v1.8.2d6fd2a9e3273
github.com/docker/distribution@v2.7.1+incompatible
no fix listed
1
quay.io/cloudnativetoolkit/cloud-pak-deployer:latest13aaae779248
github.com/docker/distribution@v2.8.1+incompatible
no fix listed
1
quay.io/codefresh/dind:3.0.250885ab519dac
github.com/docker/distribution@v2.8.3+incompatible
no fix listed
1
quay.io/eformat/jenkins-agent-graalvm:latesta3b9a07648b6
github.com/docker/distribution@v2.7.1+incompatible
no fix listed
1
quay.io/flomesh/fsm-bootstrap-ubi8:0.1.8-ubi.6e6d7afb1a4bf
github.com/docker/distribution@v2.8.1+incompatible
no fix listed
1
quay.io/flomesh/fsm-ingress-pipy-ubi8:0.1.8-ubi.6fce990dece01
github.com/docker/distribution@v2.8.1+incompatible
no fix listed
1
quay.io/flomesh/fsm-manager-ubi8:0.1.8-ubi.63590af73f65a
github.com/docker/distribution@v2.8.1+incompatible
no fix listed
1
quay.io/geored/spmm-collector-contrib:1.0.063baf86a49ac
github.com/docker/distribution@v2.8.2+incompatible
no fix listed
1
quay.io/gkarthics/apid-helper:v0.2.3d7d93debf1f4
github.com/docker/distribution@v2.8.1+incompatible
no fix listed
1
quay.io/harikube/vcluster-pro:0.32.1b741efae8d31
github.com/docker/distribution@v2.8.3+incompatible
no fix listed
1
quay.io/ibmgaragecloud/cli-tools:v0.159663f06adcb1
github.com/docker/distribution@v2.7.1+incompatible
no fix listed
1
quay.io/jenkins-kubernetes-operator/operator:v0.8.171cb50263c3b
github.com/docker/distribution@v2.7.1+incompatible
no fix listed
1
quay.io/jetstack/cert-manager-ctl:v1.13.24d9fce2c050e
github.com/docker/distribution@v2.8.2+incompatible
no fix listed
1
quay.io/jetstack/cert-manager-ctl:v1.8.0595c548dee6f
github.com/docker/distribution@v2.8.1+incompatible
no fix listed
1
quay.io/jetstack/cert-manager-ctl:v1.8.281b2d775edad
github.com/docker/distribution@v2.8.1+incompatible
no fix listed
1
quay.io/jetstack/cert-manager-ctl:v1.12.08d54fe9d0c0d
github.com/docker/distribution@v2.8.2+incompatible
no fix listed
1
quay.io/konveyor/move2kube-ui:latestec6ab507c5da
github.com/docker/distribution@v2.8.2+incompatible
no fix listed
1
quay.io/kube-ops/promtail:2.2.134de6387233b
github.com/docker/distribution@v2.7.1+incompatible
no fix listed
1
quay.io/kubermatic/kubermatic:v2.24.5ebba936046ab
github.com/distribution/distribution/v3@v3.0.0-20230629214736-bac7f02e02a1
github.com/docker/distribution@v2.8.1+incompatible
3.1.2
no fix listed
1
quay.io/kubermatic/machine-controller:v1.57.0476ae867ae56
github.com/docker/distribution@v2.8.2+incompatible
no fix listed
1
quay.io/kubescape/kubescape:v4.0.14418fa941ecc0
github.com/docker/distribution@v2.8.3+incompatible
no fix listed
1
quay.io/kubescape/kubevuln:v0.3.4309bed2f723ea0
github.com/docker/distribution@v2.8.3+incompatible
no fix listed
1
quay.io/kubescape/node-agent:v0.3.2192044ed750f5e
github.com/docker/distribution@v2.8.3+incompatible
no fix listed
1
quay.io/kubescape/operator:v0.2.1721ddcd2788e1e
github.com/docker/distribution@v2.8.3+incompatible
no fix listed
1
quay.io/minio/operator:v7.1.1cd587f60c43d
github.com/docker/distribution@v2.8.3+incompatible
no fix listed
1
quay.io/mittwald/brudi-operator:v0.2.3edb322094359
github.com/docker/distribution@v0.0.0-20191216044856-a8371794149d
no fix listed
1
quay.io/mittwald/harbor-operator:v1.6.365a38180e27a
github.com/docker/distribution@v2.8.3+incompatible
no fix listed
1
quay.io/ongres/kubectl:v1.25.16-build-6.5304dada9e4503
github.com/docker/distribution@v2.8.1+incompatible
no fix listed
1
quay.io/open-cluster-management/multicluster-mesh-addon:latest3e010e1188f1
github.com/docker/distribution@v2.7.1+incompatible
no fix listed
1
quay.io/openshift/origin-cli:latest10fef10863a3
github.com/distribution/distribution/v3@v3.0.0-20230519140516-983358f8e250
3.1.2
1
quay.io/openshift/origin-cli:4.66722d5041b47
github.com/docker/distribution@v2.7.1+incompatible
no fix listed
1
quay.io/openshift/origin-console:4.10.00bbe8b451fa3
github.com/docker/distribution@v2.7.1+incompatible
no fix listed
1
quay.io/openshift/origin-jenkins-agent-base:latestc241c971aef8
github.com/distribution/distribution/v3@v3.0.0-20230519140516-983358f8e250
3.1.2
1

syft 1.42.1 · advisories as of 16 Oct 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.