StackRadar

CVE-2026-85747

Medium

Advisory

Published 15 Oct 2026In the index since 16 Oct 2026
Severity
Medium
worst across findings
CVSS
6.8
base score, highest
EPSS
0.002
10th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
647
of 18,137 indexed, latest versions
Container images
634
deployed by those charts
Fix available
1 of 2
affected packages

Distribution: Client `manifests.Get()` does not verify returned content against requested digest

Carried by container images the latest versions of 647 of 18,137 indexed charts deploy, on 634 images.

Affected packageAffected versionsFixed inImages
github.com/docker/distributiongolangv0.0.0-20171011171712-7484e51bf6af, v0.0.0-20191216044856-a8371794149d, v0.0.0-20260602055908-11540eae06cb+dirty, v0.0.0-20260701071724-493dca9a81a8+dirty+12 moreno fix listed624
github.com/distribution/distribution/v3golangv0.0.0-20250402055438-9ed95e736522, v3.0.0, v3.0.0-20210316161203-a01c71e2477e, v3.0.0-20220526142353-ffbd94cbe269+9 more3.1.236
OSV records
GHSA-685w-q87j-wqw3
Trending
Rank 42 in indexed charts, since 16 Oct 2026. See the ranking →

Charts affected

647 by stars
ChartLatestAffected imagesRadar Score
akto-protectionakto0.1.01 of 4See more

akto-protection akto 0.1.0

1 of the 4 container images this version deploys carry CVE-2026-85747.

Container imageDigestPackageFixed in
keelhq/keel:latest73714afb4443
github.com/distribution/distribution/v3@v3.0.0-20230722181636-7b502560cad4
github.com/docker/distribution@v2.8.3+incompatible
3.1.2
no fix listed

Open the chart page →

12,737
akto-testing-db-layerakto1.42.171 of 2See more

akto-testing-db-layer akto 1.42.17

1 of the 2 container images this version deploys carry CVE-2026-85747.

Container imageDigestPackageFixed in
keelhq/keel:latest73714afb4443
github.com/distribution/distribution/v3@v3.0.0-20230722181636-7b502560cad4
github.com/docker/distribution@v2.8.3+incompatible
3.1.2
no fix listed

Open the chart page →

41,523
alustan-helmalustan-helm1.0.01 of 1See more

alustan-helm alustan-helm 1.0.0

1 of the 1 container images this version deploys carry CVE-2026-85747.

Container imageDigestPackageFixed in
alustan/install-argocd:1.0.0c16c34f46ad3
github.com/docker/distribution@v2.8.2+incompatible
no fix listed

Open the chart page →

2,578
amorphieamorphie0.1.22 of 18See more

amorphie amorphie 0.1.2

2 of the 18 container images this version deploys carry CVE-2026-85747.

Container imageDigestPackageFixed in
daprio/dashboard:0.14.07ba5d51e5b97
github.com/distribution/distribution/v3@v3.0.0-20230214150026-36d8c594d7aa
github.com/docker/distribution@v0.0.0-20191216044856-a8371794149d
3.1.2
no fix listed
hashicorp/vault:1.15.26b4e5dadf082
github.com/docker/distribution@v2.8.2+incompatible
no fix listed

Open the chart page →

35,391
ddosifyanteonVerified publisher1.7.51 of 13See more

ddosify anteon 1.7.5

1 of the 13 container images this version deploys carry CVE-2026-85747.

Container imageDigestPackageFixed in
prom/prometheus:v2.37.98176adea328e
github.com/docker/distribution@v2.7.1+incompatible
no fix listed

Open the chart page →

31,850
imagepullerapache-pulsar-helm-chart-repo1.0.11 of 2See more

imagepuller apache-pulsar-helm-chart-repo 1.0.1

1 of the 2 container images this version deploys carry CVE-2026-85747.

Container imageDigestPackageFixed in
library/docker:latest0b6d18a4a222
github.com/docker/distribution@v2.8.3+incompatible
no fix listed

Open the chart page →

314
accounts-uiappscodeVerified publisher2026.10.121 of 1See more

accounts-ui appscode 2026.10.12

1 of the 1 container images this version deploys carry CVE-2026-85747.

Container imageDigestPackageFixed in
ghcr.io/appscode/b3:v2026.10.1265bce2a5ff54
github.com/docker/distribution@v2.8.3+incompatible
no fix listed

Open the chart page →

2,740
aceappscodeVerified publisher2026.10.151 of 5See more

ace appscode 2026.10.15

1 of the 5 container images this version deploys carry CVE-2026-85747.

Container imageDigestPackageFixed in
ghcr.io/appscode/b3:v2026.10.15d3f5046f536d
github.com/docker/distribution@v2.8.3+incompatible
no fix listed

Open the chart page →

6,553
ace-installerappscodeVerified publisher2026.10.152 of 2See more

ace-installer appscode 2026.10.15

2 of the 2 container images this version deploys carry CVE-2026-85747.

Container imageDigestPackageFixed in
library/registry:3.1.11be55279f18a
github.com/distribution/distribution/v3@v3.1.1
3.1.2
ghcr.io/appscode/b3:v2026.10.15d3f5046f536d
github.com/docker/distribution@v2.8.3+incompatible
no fix listed

Open the chart page →

3,761
ace-installer-certifiedappscodeVerified publisher2026.10.122 of 2See more

ace-installer-certified appscode 2026.10.12

2 of the 2 container images this version deploys carry CVE-2026-85747.

Container imageDigestPackageFixed in
library/registry:3.1.11be55279f18a
github.com/distribution/distribution/v3@v3.1.1
3.1.2
ghcr.io/appscode/b3:v2026.10.1265bce2a5ff54
github.com/docker/distribution@v2.8.3+incompatible
no fix listed

Open the chart page →

3,816
acerproxyappscodeVerified publisher2026.10.121 of 1See more

acerproxy appscode 2026.10.12

1 of the 1 container images this version deploys carry CVE-2026-85747.

Container imageDigestPackageFixed in
ghcr.io/appscode/acerproxy:v0.2.021de3771fdd5
github.com/docker/distribution@v2.8.3+incompatible
no fix listed

Open the chart page →

1,845
aceshifterappscodeVerified publisher2026.10.121 of 1See more

aceshifter appscode 2026.10.12

1 of the 1 container images this version deploys carry CVE-2026-85747.

Container imageDigestPackageFixed in
ghcr.io/appscode/aceshifter:v0.0.3e5f5c254a55a
github.com/docker/distribution@v2.8.3+incompatible
no fix listed

Open the chart page →

1,507
billingappscodeVerified publisher2026.10.121 of 1See more

billing appscode 2026.10.12

1 of the 1 container images this version deploys carry CVE-2026-85747.

Container imageDigestPackageFixed in
ghcr.io/appscode/b3:v2026.10.1265bce2a5ff54
github.com/docker/distribution@v2.8.3+incompatible
no fix listed

Open the chart page →

2,740
cattlesetappscodeVerified publisher2026.7.81 of 1See more

cattleset appscode 2026.7.8

1 of the 1 container images this version deploys carry CVE-2026-85747.

Container imageDigestPackageFixed in
ghcr.io/appscode/cattleset:v0.0.145554a03e448
github.com/docker/distribution@v2.8.3+incompatible
no fix listed

Open the chart page →

1,058
cluster-importerappscodeVerified publisher2026.10.121 of 1See more

cluster-importer appscode 2026.10.12

1 of the 1 container images this version deploys carry CVE-2026-85747.

Container imageDigestPackageFixed in
ghcr.io/appscode/ace:v0.2.0b8e03da90e70
github.com/docker/distribution@v2.8.3+incompatible
no fix listed

Open the chart page →

1,492
cluster-profile-managerappscodeVerified publisher2026.9.181 of 1See more

cluster-profile-manager appscode 2026.9.18

1 of the 1 container images this version deploys carry CVE-2026-85747.

Container imageDigestPackageFixed in
ghcr.io/kluster-manager/cluster-profile:v0.13.0b8b0aaef2543
github.com/docker/distribution@v2.8.3+incompatible
no fix listed

Open the chart page →

413
crd-managerappscodeVerified publisher2026.10.101 of 1See more

crd-manager appscode 2026.10.10

1 of the 1 container images this version deploys carry CVE-2026-85747.

Container imageDigestPackageFixed in
ghcr.io/voyagermesh/crd-manager:v0.4.04466bb77dc78
github.com/docker/distribution@v2.8.3+incompatible
no fix listed

Open the chart page →

1,115
dns-proxyappscodeVerified publisher2026.10.121 of 1See more

dns-proxy appscode 2026.10.12

1 of the 1 container images this version deploys carry CVE-2026-85747.

Container imageDigestPackageFixed in
ghcr.io/appscode/cloudflare-dns-proxy:v0.0.5dfbef0285e14
github.com/docker/distribution@v2.8.3+incompatible
no fix listed

Open the chart page →

1,108
fargocdappscodeVerified publisher2026.9.181 of 1See more

fargocd appscode 2026.9.18

1 of the 1 container images this version deploys carry CVE-2026-85747.

Container imageDigestPackageFixed in
ghcr.io/appscode/fargocd:v0.1.0c59d775d9a7c
github.com/docker/distribution@v2.8.3+incompatible
no fix listed

Open the chart page →

784
fargocd-managerappscodeVerified publisher2026.9.181 of 1See more

fargocd-manager appscode 2026.9.18

1 of the 1 container images this version deploys carry CVE-2026-85747.

Container imageDigestPackageFixed in
ghcr.io/appscode/fargocd:v0.1.0c59d775d9a7c
github.com/docker/distribution@v2.8.3+incompatible
no fix listed

Open the chart page →

784
gh-ci-webhookappscodeVerified publisher2026.10.121 of 1See more

gh-ci-webhook appscode 2026.10.12

1 of the 1 container images this version deploys carry CVE-2026-85747.

Container imageDigestPackageFixed in
ghcr.io/appscode/gh-ci-webhook:v0.0.2036ce246d884e
github.com/docker/distribution@v2.8.2+incompatible
no fix listed

Open the chart page →

2,013
inbox-agentappscodeVerified publisher2026.6.21 of 2See more

inbox-agent appscode 2026.6.2

1 of the 2 container images this version deploys carry CVE-2026-85747.

Container imageDigestPackageFixed in
ghcr.io/appscode/inbox-agent:v0.0.6f630e47772c9
github.com/docker/distribution@v2.8.3+incompatible
no fix listed

Open the chart page →

2,835
kubedb-autoscalerappscodeVerified publisher0.53.01 of 1See more

kubedb-autoscaler appscode 0.53.0

1 of the 1 container images this version deploys carry CVE-2026-85747.

Container imageDigestPackageFixed in
ghcr.io/kubedb/kubedb-autoscaler:v0.53.02cb0dea06e85
github.com/docker/distribution@v2.8.3+incompatible
no fix listed

Open the chart page →

369
kubedb-certifiedappscodeVerified publisher2026.7.105 of 8See more

kubedb-certified appscode 2026.7.10

5 of the 8 container images this version deploys carry CVE-2026-85747.

Container imageDigestPackageFixed in
ghcr.io/appscode/petset:v0.1.093fa0daf603c
github.com/docker/distribution@v2.8.3+incompatible
no fix listed
ghcr.io/kubedb/kubedb-autoscaler:v0.51.05d1182ac21f0
github.com/docker/distribution@v2.8.3+incompatible
no fix listed
ghcr.io/kubedb/kubedb-crd-manager:v0.21.09506a6cb98d1
github.com/docker/distribution@v2.8.3+incompatible
no fix listed
ghcr.io/kubedb/kubedb-ops-manager:v0.53.06d4c9fe66e4f
github.com/docker/distribution@v2.8.3+incompatible
no fix listed
ghcr.io/kubedb/kubedb-provisioner:v0.66.0e7041c3b41e7
github.com/docker/distribution@v2.8.3+incompatible
no fix listed

Open the chart page →

7,522
kubedb-crd-managerappscodeVerified publisher0.23.01 of 1See more

kubedb-crd-manager appscode 0.23.0

1 of the 1 container images this version deploys carry CVE-2026-85747.

Container imageDigestPackageFixed in
ghcr.io/kubedb/kubedb-crd-manager:v0.23.0a9f457db14c0
github.com/docker/distribution@v2.8.3+incompatible
no fix listed

Open the chart page →

353
kubedb-dashboardappscodeVerified publisher0.44.01 of 1See more

kubedb-dashboard appscode 0.44.0

1 of the 1 container images this version deploys carry CVE-2026-85747.

Container imageDigestPackageFixed in
ghcr.io/kubedb/kubedb-kibana:v0.44.021591d9d6774
github.com/docker/distribution@v2.8.3+incompatible
no fix listed

Open the chart page →

85
kubedb-oneappscodeVerified publisher2023.12.287 of 10See more

kubedb-one appscode 2023.12.28

7 of the 10 container images this version deploys carry CVE-2026-85747.

Container imageDigestPackageFixed in
ghcr.io/kubedb/kubedb-autoscaler:v0.25.0df6b11907d33
github.com/docker/distribution@v2.8.1+incompatible
no fix listed
ghcr.io/kubedb/kubedb-dashboard:v0.16.07bfe1c07bd9b
github.com/docker/distribution@v2.8.2+incompatible
no fix listed
ghcr.io/kubedb/kubedb-ops-manager:v0.27.1ec36422b09af
github.com/docker/distribution@v2.8.2+incompatible
no fix listed
ghcr.io/kubedb/kubedb-provisioner:v0.40.242574f512837
github.com/docker/distribution@v2.8.2+incompatible
no fix listed
ghcr.io/kubedb/kubedb-schema-manager:v0.16.09518de37eed5
github.com/docker/distribution@v2.8.1+incompatible
no fix listed
ghcr.io/kubedb/kubedb-webhook-server:v0.16.2e24894e32cbc
github.com/docker/distribution@v2.8.2+incompatible
no fix listed
ghcr.io/stashed/stash-enterprise:v0.32.0e9bde36e34b7
github.com/docker/distribution@v2.8.1+incompatible
no fix listed

Open the chart page →

22,589
kubedb-ops-managerappscodeVerified publisher0.55.01 of 1See more

kubedb-ops-manager appscode 0.55.0

1 of the 1 container images this version deploys carry CVE-2026-85747.

Container imageDigestPackageFixed in
ghcr.io/kubedb/kubedb-ops-manager:v0.55.002322230569a
github.com/docker/distribution@v2.8.3+incompatible
no fix listed

Open the chart page →

565
kubedb-schema-managerappscodeVerified publisher0.44.01 of 1See more

kubedb-schema-manager appscode 0.44.0

1 of the 1 container images this version deploys carry CVE-2026-85747.

Container imageDigestPackageFixed in
ghcr.io/kubedb/kubedb-schema-manager:v0.44.000d017146f24
github.com/docker/distribution@v2.8.3+incompatible
no fix listed

Open the chart page →

82
kubestashappscodeVerified publisher2026.10.121 of 2See more

kubestash appscode 2026.10.12

1 of the 2 container images this version deploys carry CVE-2026-85747.

Container imageDigestPackageFixed in
ghcr.io/kubestash/kubestash:v0.30.04ff37f9863d5
github.com/docker/distribution@v2.8.3+incompatible
no fix listed

Open the chart page →

1,806
kubestash-certifiedappscodeVerified publisher2026.7.101 of 2See more

kubestash-certified appscode 2026.7.10

1 of the 2 container images this version deploys carry CVE-2026-85747.

Container imageDigestPackageFixed in
ghcr.io/kubestash/kubestash:v0.29.00686b2a40280
github.com/docker/distribution@v2.8.3+incompatible
no fix listed

Open the chart page →

1,820
kubestash-operatorappscodeVerified publisher0.30.01 of 2See more

kubestash-operator appscode 0.30.0

1 of the 2 container images this version deploys carry CVE-2026-85747.

Container imageDigestPackageFixed in
ghcr.io/kubestash/kubestash:v0.30.04ff37f9863d5
github.com/docker/distribution@v2.8.3+incompatible
no fix listed

Open the chart page →

1,806
kube-ui-serverappscodeVerified publisher2026.10.121 of 1See more

kube-ui-server appscode 2026.10.12

1 of the 1 container images this version deploys carry CVE-2026-85747.

Container imageDigestPackageFixed in
ghcr.io/appscode/kube-ui-server:v0.8.05f458bcbaa65
github.com/docker/distribution@v2.8.3+incompatible
no fix listed

Open the chart page →

364
kubevaultappscodeVerified publisher2026.10.121 of 3See more

kubevault appscode 2026.10.12

1 of the 3 container images this version deploys carry CVE-2026-85747.

Container imageDigestPackageFixed in
ghcr.io/kubevault/vault-operator:v0.26.0572f2d93c8de
github.com/docker/distribution@v2.8.3+incompatible
no fix listed

Open the chart page →

1,304
kubevault-certifiedappscodeVerified publisher2026.2.271 of 1See more

kubevault-certified appscode 2026.2.27

1 of the 1 container images this version deploys carry CVE-2026-85747.

Container imageDigestPackageFixed in
ghcr.io/kubevault/vault-operator:v0.24.00087cb49616f
github.com/docker/distribution@v2.8.3+incompatible
no fix listed

Open the chart page →

1,624
kubevault-operatorappscodeVerified publisher0.26.01 of 1See more

kubevault-operator appscode 0.26.0

1 of the 1 container images this version deploys carry CVE-2026-85747.

Container imageDigestPackageFixed in
ghcr.io/kubevault/vault-operator:v0.26.0572f2d93c8de
github.com/docker/distribution@v2.8.3+incompatible
no fix listed

Open the chart page →

317
kubevault-webhook-serverappscodeVerified publisher0.26.01 of 2See more

kubevault-webhook-server appscode 0.26.0

1 of the 2 container images this version deploys carry CVE-2026-85747.

Container imageDigestPackageFixed in
ghcr.io/kubevault/vault-operator:v0.26.0572f2d93c8de
github.com/docker/distribution@v2.8.3+incompatible
no fix listed

Open the chart page →

1,025
marketplace-apiappscodeVerified publisher2026.10.121 of 1See more

marketplace-api appscode 2026.10.12

1 of the 1 container images this version deploys carry CVE-2026-85747.

Container imageDigestPackageFixed in
ghcr.io/appscode/b3:v2026.10.1265bce2a5ff54
github.com/docker/distribution@v2.8.3+incompatible
no fix listed

Open the chart page →

2,740
outbox-syncerappscodeVerified publisher2026.10.121 of 1See more

outbox-syncer appscode 2026.10.12

1 of the 1 container images this version deploys carry CVE-2026-85747.

Container imageDigestPackageFixed in
ghcr.io/appscode/outboxsyncer:v0.6.0c52861c4669f
github.com/docker/distribution@v2.8.3+incompatible
no fix listed

Open the chart page →

363
panopticonappscodeVerified publisher2026.9.181 of 2See more

panopticon appscode 2026.9.18

1 of the 2 container images this version deploys carry CVE-2026-85747.

Container imageDigestPackageFixed in
ghcr.io/appscode/panopticon:v0.0.243ea0e226a86d
github.com/docker/distribution@v2.8.3+incompatible
no fix listed

Open the chart page →

1,093
petsetappscodeVerified publisher2026.9.181 of 1See more

petset appscode 2026.9.18

1 of the 1 container images this version deploys carry CVE-2026-85747.

Container imageDigestPackageFixed in
ghcr.io/appscode/petset:v0.2.0913f0858eb24
github.com/docker/distribution@v2.8.3+incompatible
no fix listed

Open the chart page →

743
platform-apiappscodeVerified publisher2026.10.151 of 3See more

platform-api appscode 2026.10.15

1 of the 3 container images this version deploys carry CVE-2026-85747.

Container imageDigestPackageFixed in
ghcr.io/appscode/b3:v2026.10.15d3f5046f536d
github.com/docker/distribution@v2.8.3+incompatible
no fix listed

Open the chart page →

44,222
prom-proxyappscodeVerified publisher2023.3.231 of 1See more

prom-proxy appscode 2023.3.23

1 of the 1 container images this version deploys carry CVE-2026-85747.

Container imageDigestPackageFixed in
ghcr.io/appscode/b3:v2023.03.235f5a40fc1702
github.com/docker/distribution@v2.8.1+incompatible
no fix listed

Open the chart page →

3,539
regcacheappscodeVerified publisher2026.10.121 of 1See more

regcache appscode 2026.10.12

1 of the 1 container images this version deploys carry CVE-2026-85747.

Container imageDigestPackageFixed in
library/registry:3.1.11be55279f18a
github.com/distribution/distribution/v3@v3.1.1
3.1.2

Open the chart page →

1,076
service-backendappscodeVerified publisher2026.10.121 of 1See more

service-backend appscode 2026.10.12

1 of the 1 container images this version deploys carry CVE-2026-85747.

Container imageDigestPackageFixed in
ghcr.io/appscode/service-provider:v0.0.2f6e481386d70
github.com/docker/distribution@v2.8.3+incompatible
no fix listed

Open the chart page →

1,859
service-gatewayappscodeVerified publisher2026.10.121 of 3See more

service-gateway appscode 2026.10.12

1 of the 3 container images this version deploys carry CVE-2026-85747.

Container imageDigestPackageFixed in
ghcr.io/voyagermesh/crd-manager:v0.4.04466bb77dc78
github.com/docker/distribution@v2.8.3+incompatible
no fix listed

Open the chart page →

3,593
service-providerappscodeVerified publisher2026.10.121 of 2See more

service-provider appscode 2026.10.12

1 of the 2 container images this version deploys carry CVE-2026-85747.

Container imageDigestPackageFixed in
ghcr.io/appscode/service-provider:v0.0.2f6e481386d70
github.com/docker/distribution@v2.8.3+incompatible
no fix listed

Open the chart page →

3,329
service-vaultappscodeVerified publisher2026.10.121 of 3See more

service-vault appscode 2026.10.12

1 of the 3 container images this version deploys carry CVE-2026-85747.

Container imageDigestPackageFixed in
ghcr.io/kubevault/vault-operator:v0.26.0572f2d93c8de
github.com/docker/distribution@v2.8.3+incompatible
no fix listed

Open the chart page →

1,304
stash-communityappscodeVerified publisher0.42.01 of 4See more

stash-community appscode 0.42.0

1 of the 4 container images this version deploys carry CVE-2026-85747.

Container imageDigestPackageFixed in
ghcr.io/stashed/stash:v0.42.03a98245a7667
github.com/docker/distribution@v2.8.2+incompatible
no fix listed

Open the chart page →

6,266
voyagerappscodeVerified publisher2026.3.231 of 1See more

voyager appscode 2026.3.23

1 of the 1 container images this version deploys carry CVE-2026-85747.

Container imageDigestPackageFixed in
ghcr.io/voyagermesh/voyager:v17.5.04964ceaf9d35
github.com/docker/distribution@v2.8.3+incompatible
no fix listed

Open the chart page →

1,148

Container images carrying it

634 by charts deploying them

A fixed version is listed for 1 of the 2 affected packages.

Container imageDigestPackageFixed inUsed by
public.ecr.aws/p1t3u8a3/http:v1.28.0cd0e4469cd02
github.com/docker/distribution@v2.8.3+incompatible
no fix listed
1
public.ecr.aws/p1t3u8a3/sink:v1.28.06b80fb10b443
github.com/docker/distribution@v2.8.3+incompatible
no fix listed
1
public.ecr.aws/p1t3u8a3/spot:v1.28.00ba5cb666370
github.com/docker/distribution@v2.8.3+incompatible
no fix listed
1
public.ecr.aws/p1t3u8a3/storage:v1.28.02f9784a385ce
github.com/docker/distribution@v2.8.3+incompatible
no fix listed
1
public.ecr.aws/r3m4q3r9/pleco:0.24.0651739583336
github.com/docker/distribution@v2.8.2+incompatible
no fix listed
1
quay.io/aerokube/browser-ops:2.6.7807c1bb67086
github.com/docker/distribution@v2.8.2+incompatible
no fix listed
1
quay.io/aerokube/keygen:1.0.1578934444f04
github.com/docker/distribution@v2.8.1+incompatible
no fix listed
1
quay.io/argoproj/argocd:v2.4.115b6701d8fb31
github.com/docker/distribution@v2.7.1+incompatible
no fix listed
1
quay.io/argoproj/argocd:v2.10.783c86003b781
github.com/docker/distribution@v2.8.2+incompatible
no fix listed
1
quay.io/argoproj/argocd:v3.0.395b5cf7ba6fe
github.com/docker/distribution@v2.8.3+incompatible
no fix listed
1
quay.io/argoproj/argocd:v2.8.6acaf37352569
github.com/docker/distribution@v2.8.2+incompatible
no fix listed
1
quay.io/argoprojlabs/argocd-image-updater:v1.3.0cb009167015c
github.com/distribution/distribution/v3@v3.1.1
3.1.2
1
quay.io/argoproj/workflow-controller:v3.7.166388d1b2f08
github.com/docker/distribution@v2.8.3+incompatible
no fix listed
1
quay.io/argoproj/workflow-controller:v3.5.56ab0da144235
github.com/docker/distribution@v2.8.2+incompatible
no fix listed
1
quay.io/argoproj/workflow-controller:v3.7.11c46aa0ded8ed
github.com/docker/distribution@v2.8.3+incompatible
no fix listed
1
quay.io/bentoml/yatai:0.4.614b482c1f1b8
github.com/docker/distribution@v2.7.1+incompatible
no fix listed
1
quay.io/bentoml/yatai-image-builder:3.0.4401d8538c4f48
github.com/docker/distribution@v2.8.2+incompatible
no fix listed
1
quay.io/cloudnativetoolkit/cli-tools:v1.1-v1.8.2d6fd2a9e3273
github.com/docker/distribution@v2.7.1+incompatible
no fix listed
1
quay.io/cloudnativetoolkit/cloud-pak-deployer:latest13aaae779248
github.com/docker/distribution@v2.8.1+incompatible
no fix listed
1
quay.io/codefresh/dind:3.0.250885ab519dac
github.com/docker/distribution@v2.8.3+incompatible
no fix listed
1
quay.io/eformat/jenkins-agent-graalvm:latesta3b9a07648b6
github.com/docker/distribution@v2.7.1+incompatible
no fix listed
1
quay.io/flomesh/fsm-bootstrap-ubi8:0.1.8-ubi.6e6d7afb1a4bf
github.com/docker/distribution@v2.8.1+incompatible
no fix listed
1
quay.io/flomesh/fsm-ingress-pipy-ubi8:0.1.8-ubi.6fce990dece01
github.com/docker/distribution@v2.8.1+incompatible
no fix listed
1
quay.io/flomesh/fsm-manager-ubi8:0.1.8-ubi.63590af73f65a
github.com/docker/distribution@v2.8.1+incompatible
no fix listed
1
quay.io/geored/spmm-collector-contrib:1.0.063baf86a49ac
github.com/docker/distribution@v2.8.2+incompatible
no fix listed
1
quay.io/gkarthics/apid-helper:v0.2.3d7d93debf1f4
github.com/docker/distribution@v2.8.1+incompatible
no fix listed
1
quay.io/harikube/vcluster-pro:0.32.1b741efae8d31
github.com/docker/distribution@v2.8.3+incompatible
no fix listed
1
quay.io/ibmgaragecloud/cli-tools:v0.159663f06adcb1
github.com/docker/distribution@v2.7.1+incompatible
no fix listed
1
quay.io/jenkins-kubernetes-operator/operator:v0.8.171cb50263c3b
github.com/docker/distribution@v2.7.1+incompatible
no fix listed
1
quay.io/jetstack/cert-manager-ctl:v1.13.24d9fce2c050e
github.com/docker/distribution@v2.8.2+incompatible
no fix listed
1
quay.io/jetstack/cert-manager-ctl:v1.8.0595c548dee6f
github.com/docker/distribution@v2.8.1+incompatible
no fix listed
1
quay.io/jetstack/cert-manager-ctl:v1.8.281b2d775edad
github.com/docker/distribution@v2.8.1+incompatible
no fix listed
1
quay.io/jetstack/cert-manager-ctl:v1.12.08d54fe9d0c0d
github.com/docker/distribution@v2.8.2+incompatible
no fix listed
1
quay.io/konveyor/move2kube-ui:latestec6ab507c5da
github.com/docker/distribution@v2.8.2+incompatible
no fix listed
1
quay.io/kube-ops/promtail:2.2.134de6387233b
github.com/docker/distribution@v2.7.1+incompatible
no fix listed
1
quay.io/kubermatic/kubermatic:v2.24.5ebba936046ab
github.com/distribution/distribution/v3@v3.0.0-20230629214736-bac7f02e02a1
github.com/docker/distribution@v2.8.1+incompatible
3.1.2
no fix listed
1
quay.io/kubermatic/machine-controller:v1.57.0476ae867ae56
github.com/docker/distribution@v2.8.2+incompatible
no fix listed
1
quay.io/kubescape/kubescape:v4.0.14418fa941ecc0
github.com/docker/distribution@v2.8.3+incompatible
no fix listed
1
quay.io/kubescape/kubevuln:v0.3.4309bed2f723ea0
github.com/docker/distribution@v2.8.3+incompatible
no fix listed
1
quay.io/kubescape/node-agent:v0.3.2192044ed750f5e
github.com/docker/distribution@v2.8.3+incompatible
no fix listed
1
quay.io/kubescape/operator:v0.2.1721ddcd2788e1e
github.com/docker/distribution@v2.8.3+incompatible
no fix listed
1
quay.io/minio/operator:v7.1.1cd587f60c43d
github.com/docker/distribution@v2.8.3+incompatible
no fix listed
1
quay.io/mittwald/brudi-operator:v0.2.3edb322094359
github.com/docker/distribution@v0.0.0-20191216044856-a8371794149d
no fix listed
1
quay.io/mittwald/harbor-operator:v1.6.365a38180e27a
github.com/docker/distribution@v2.8.3+incompatible
no fix listed
1
quay.io/ongres/kubectl:v1.25.16-build-6.5304dada9e4503
github.com/docker/distribution@v2.8.1+incompatible
no fix listed
1
quay.io/open-cluster-management/multicluster-mesh-addon:latest3e010e1188f1
github.com/docker/distribution@v2.7.1+incompatible
no fix listed
1
quay.io/openshift/origin-cli:latest10fef10863a3
github.com/distribution/distribution/v3@v3.0.0-20230519140516-983358f8e250
3.1.2
1
quay.io/openshift/origin-cli:4.66722d5041b47
github.com/docker/distribution@v2.7.1+incompatible
no fix listed
1
quay.io/openshift/origin-console:4.10.00bbe8b451fa3
github.com/docker/distribution@v2.7.1+incompatible
no fix listed
1
quay.io/openshift/origin-jenkins-agent-base:latestc241c971aef8
github.com/distribution/distribution/v3@v3.0.0-20230519140516-983358f8e250
3.1.2
1

syft 1.42.1 · advisories as of 16 Oct 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.