StackRadar

CVE-2026-85747

Medium

Advisory

Published 15 Oct 2026In the index since 16 Oct 2026
Severity
Medium
worst across findings
CVSS
6.8
base score, highest
EPSS
0.002
10th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
647
of 18,137 indexed, latest versions
Container images
634
deployed by those charts
Fix available
1 of 2
affected packages

Distribution: Client `manifests.Get()` does not verify returned content against requested digest

Carried by container images the latest versions of 647 of 18,137 indexed charts deploy, on 634 images.

Affected packageAffected versionsFixed inImages
github.com/docker/distributiongolangv0.0.0-20171011171712-7484e51bf6af, v0.0.0-20191216044856-a8371794149d, v0.0.0-20260602055908-11540eae06cb+dirty, v0.0.0-20260701071724-493dca9a81a8+dirty+12 moreno fix listed624
github.com/distribution/distribution/v3golangv0.0.0-20250402055438-9ed95e736522, v3.0.0, v3.0.0-20210316161203-a01c71e2477e, v3.0.0-20220526142353-ffbd94cbe269+9 more3.1.236
OSV records
GHSA-685w-q87j-wqw3
Trending
Rank 42 in indexed charts, since 16 Oct 2026. See the ranking →

Charts affected

647 by stars
ChartLatestAffected imagesRadar Score
activityrelayfedihost0.1.41 of 2See more

activityrelay fedihost 0.1.4

1 of the 2 container images this version deploys carry CVE-2026-85747.

Container imageDigestPackageFixed in
quay.io/argoproj/argocd:v2.4.115b6701d8fb31
github.com/docker/distribution@v2.7.1+incompatible
no fix listed

Open the chart page →

16,148
azure-pipelines-agentfermosit0.0.11 of 1See more

azure-pipelines-agent fermosit 0.0.1

1 of the 1 container images this version deploys carry CVE-2026-85747.

Container imageDigestPackageFixed in
jmferrer/azure-devops-agent:latest030f68ec6998
github.com/docker/distribution@v2.7.1+incompatible
no fix listed

Open the chart page →

16,571
first-matefirst-mateVerified publisher1.0.51 of 1See more

first-mate first-mate 1.0.5

1 of the 1 container images this version deploys carry CVE-2026-85747.

Container imageDigestPackageFixed in
chriswells0/first-mate:1.0.5f3918ec8471c
github.com/docker/distribution@v2.8.1+incompatible
no fix listed

Open the chart page →

2,433
mission-control-tenantflanksourceVerified publisher1.0.922 of 3See more

mission-control-tenant flanksource 1.0.92

2 of the 3 container images this version deploys carry CVE-2026-85747.

Container imageDigestPackageFixed in
rancher/k3s:v1.28.2-k3s18c2599ecfca8
github.com/docker/distribution@v2.8.2+incompatible
no fix listed
ghcr.io/loft-sh/vcluster:0.16.484f70425f4dd
github.com/docker/distribution@v2.8.2+incompatible
no fix listed

Open the chart page →

8,157
fluxcd-helm-upgraderfluxcd-helm-upgraderVerified publisher0.7.71 of 1See more

fluxcd-helm-upgrader fluxcd-helm-upgrader 0.7.7

1 of the 1 container images this version deploys carry CVE-2026-85747.

Container imageDigestPackageFixed in
kenchrcum/fluxcd-helm-upgrader:0.7.7c326e28a8f5f
github.com/docker/distribution@v2.8.3+incompatible
no fix listed

Open the chart page →

3,275
flyte-depsflyte1.16.81 of 3See more

flyte-deps flyte 1.16.8

1 of the 3 container images this version deploys carry CVE-2026-85747.

Container imageDigestPackageFixed in
kubernetesui/dashboard:v2.2.0148991563e37
github.com/docker/distribution@v2.7.1+incompatible
no fix listed

Open the chart page →

3,486
flyte-devboxflyte0.1.01 of 13See more

flyte-devbox flyte 0.1.0

1 of the 13 container images this version deploys carry CVE-2026-85747.

Container imageDigestPackageFixed in
gcr.io/knative-releases/knative.dev/serving/cmd/controllerdigest-pinned5b93308a392c
github.com/docker/distribution@v2.8.3+incompatible
no fix listed

Open the chart page →

8,256
frinx-machinefrinx-helm-charts11.0.01 of 26See more

frinx-machine frinx-helm-charts 11.0.0

1 of the 26 container images this version deploys carry CVE-2026-85747.

Container imageDigestPackageFixed in
grafana/promtail:2.9.3b338a29de45e
github.com/docker/distribution@v2.8.2+incompatible
no fix listed

Open the chart page →

52,607
frinx-machine-monitoringfrinx-helm-charts0.1.21 of 8See more

frinx-machine-monitoring frinx-helm-charts 0.1.2

1 of the 8 container images this version deploys carry CVE-2026-85747.

Container imageDigestPackageFixed in
grafana/promtail:2.9.3b338a29de45e
github.com/docker/distribution@v2.8.2+incompatible
no fix listed

Open the chart page →

15,940
transsmutegabe565Verified publisher1.1.01 of 1See more

transsmute gabe565 1.1.0

1 of the 1 container images this version deploys carry CVE-2026-85747.

Container imageDigestPackageFixed in
ghcr.io/gabe565/transsmute:latestc8ac95a30c31
github.com/docker/distribution@v2.8.3+incompatible
no fix listed

Open the chart page →

1,360
galoygaloymoney0.34.71 of 24See more

galoy galoymoney 0.34.7

1 of the 24 container images this version deploys carry CVE-2026-85747.

Container imageDigestPackageFixed in
groundnuty/k8s-wait-for:v2.0c14d7271e401
github.com/docker/distribution@v2.8.1+incompatible
no fix listed

Open the chart page →

11,860
galoygaloymoney20.34.71 of 24See more

galoy galoymoney2 0.34.7

1 of the 24 container images this version deploys carry CVE-2026-85747.

Container imageDigestPackageFixed in
groundnuty/k8s-wait-for:v2.0c14d7271e401
github.com/docker/distribution@v2.8.1+incompatible
no fix listed

Open the chart page →

11,860
kafkagengxiankun-charts0.2.01 of 1See more

kafka gengxiankun-charts 0.2.0

1 of the 1 container images this version deploys carry CVE-2026-85747.

Container imageDigestPackageFixed in
wurstmeister/kafka:latest2d4bbf9cc83d
github.com/distribution/distribution/v3@v3.0.0-20210316161203-a01c71e2477e
github.com/docker/distribution@v2.8.0+incompatible
3.1.2
no fix listed

Open the chart page →

6,113
apid-helpergkarthiks0.1.41 of 1See more

apid-helper gkarthiks 0.1.4

1 of the 1 container images this version deploys carry CVE-2026-85747.

Container imageDigestPackageFixed in
quay.io/gkarthics/apid-helper:v0.2.3d7d93debf1f4
github.com/docker/distribution@v2.8.1+incompatible
no fix listed

Open the chart page →

3,355
harborgpg-dev1.18.31 of 8See more

harbor gpg-dev 1.18.3

1 of the 8 container images this version deploys carry CVE-2026-85747.

Container imageDigestPackageFixed in
goharbor/trivy-adapter-photon:v2.14.35c6f7162804c
github.com/docker/distribution@v2.8.3+incompatible
no fix listed

Open the chart page →

5,531
kubernetes-dashboardgpg-dev7.5.01 of 5See more

kubernetes-dashboard gpg-dev 7.5.0

1 of the 5 container images this version deploys carry CVE-2026-85747.

Container imageDigestPackageFixed in
kubernetesui/dashboard-api:1.7.060595892c2cf
github.com/docker/distribution@v2.8.3+incompatible
no fix listed

Open the chart page →

7,915
grafregistratiecomponentgrafregistratiecomponent1.0.01 of 3See more

grafregistratiecomponent grafregistratiecomponent 1.0.0

1 of the 3 container images this version deploys carry CVE-2026-85747.

Container imageDigestPackageFixed in
ghcr.io/conductionnl/grafregistratiecomponent-php:latest35225eaa87ab
github.com/docker/distribution@v0.0.0-20191216044856-a8371794149d
no fix listed

Open the chart page →

9,547
grapple-installergrapple-installer0.3.231 of 1See more

grapple-installer grapple-installer 0.3.23

1 of the 1 container images this version deploys carry CVE-2026-85747.

Container imageDigestPackageFixed in
grpl/grapple-cli:0.2.127c00aafee6629
github.com/docker/distribution@v2.8.3+incompatible
no fix listed

Open the chart page →

90,357
siembolgresearch0.1.61 of 4See more

siembol gresearch 0.1.6

1 of the 4 container images this version deploys carry CVE-2026-85747.

Container imageDigestPackageFixed in
alpine/k8s:1.18.16a41efe02a041
github.com/docker/distribution@v0.0.0-20191216044856-a8371794149d
no fix listed

Open the chart page →

16,471
act-runnergringolitoVerified publisher0.2.01 of 1See more

act-runner gringolito 0.2.0

1 of the 1 container images this version deploys carry CVE-2026-85747.

Container imageDigestPackageFixed in
gitea/act_runner:0.2.11-dind-rootless6120b1165f3a
github.com/docker/distribution@v2.8.3+incompatible
no fix listed

Open the chart page →

3,263
docker-authhalkeye0.1.11 of 1See more

docker-auth halkeye 0.1.1

1 of the 1 container images this version deploys carry CVE-2026-85747.

Container imageDigestPackageFixed in
cesanta/docker_auth:1.6.04d16885f3d4c
github.com/docker/distribution@v2.7.1+incompatible
no fix listed

Open the chart page →

3,639
helm-airportshelm-airports0.1.01 of 7See more

helm-airports helm-airports 0.1.0

1 of the 7 container images this version deploys carry CVE-2026-85747.

Container imageDigestPackageFixed in
wurstmeister/kafka:latest2d4bbf9cc83d
github.com/distribution/distribution/v3@v3.0.0-20210316161203-a01c71e2477e
github.com/docker/distribution@v2.8.0+incompatible
3.1.2
no fix listed

Open the chart page →

15,451
airports-kafkahelm-airports-dan0.1.01 of 2See more

airports-kafka helm-airports-dan 0.1.0

1 of the 2 container images this version deploys carry CVE-2026-85747.

Container imageDigestPackageFixed in
wurstmeister/kafka:latest2d4bbf9cc83d
github.com/distribution/distribution/v3@v3.0.0-20210316161203-a01c71e2477e
github.com/docker/distribution@v2.8.0+incompatible
3.1.2
no fix listed

Open the chart page →

6,113
helm-airportshelm-airports-dan0.1.01 of 7See more

helm-airports helm-airports-dan 0.1.0

1 of the 7 container images this version deploys carry CVE-2026-85747.

Container imageDigestPackageFixed in
wurstmeister/kafka:latest2d4bbf9cc83d
github.com/distribution/distribution/v3@v3.0.0-20210316161203-a01c71e2477e
github.com/docker/distribution@v2.8.0+incompatible
3.1.2
no fix listed

Open the chart page →

8,017
airports-kafkahelm-airports-kafka0.1.01 of 2See more

airports-kafka helm-airports-kafka 0.1.0

1 of the 2 container images this version deploys carry CVE-2026-85747.

Container imageDigestPackageFixed in
wurstmeister/kafka:latest2d4bbf9cc83d
github.com/distribution/distribution/v3@v3.0.0-20210316161203-a01c71e2477e
github.com/docker/distribution@v2.8.0+incompatible
3.1.2
no fix listed

Open the chart page →

6,113
logging-stackhelm-charts-alexis-carbillet0.1.01 of 9See more

logging-stack helm-charts-alexis-carbillet 0.1.0

1 of the 9 container images this version deploys carry CVE-2026-85747.

Container imageDigestPackageFixed in
grafana/agent-operator:v0.25.1a136c6208aa3
github.com/docker/distribution@v2.8.1+incompatible
no fix listed

Open the chart page →

17,733
monitoring-stackhelm-charts-alexis-carbillet0.1.01 of 11See more

monitoring-stack helm-charts-alexis-carbillet 0.1.0

1 of the 11 container images this version deploys carry CVE-2026-85747.

Container imageDigestPackageFixed in
prom/prometheus:v2.48.1a67e5e402ff5
github.com/docker/distribution@v2.8.2+incompatible
no fix listed

Open the chart page →

16,121
dregsyhelm-charts-nr0.1.51 of 1See more

dregsy helm-charts-nr 0.1.5

1 of the 1 container images this version deploys carry CVE-2026-85747.

Container imageDigestPackageFixed in
xelalex/dregsy:0.4.3574054e1c417
github.com/docker/distribution@v2.8.1+incompatible
no fix listed

Open the chart page →

4,036
kube-benchhelm-charts-nr0.1.171 of 1See more

kube-bench helm-charts-nr 0.1.17

1 of the 1 container images this version deploys carry CVE-2026-85747.

Container imageDigestPackageFixed in
aquasec/kube-bench:v0.8.0ea3e33bc3c4e
github.com/docker/distribution@v2.8.2+incompatible
no fix listed

Open the chart page →

2,316
openreplayhelmforgeVerified publisher1.0.08 of 24See more

openreplay helmforge 1.0.0

8 of the 24 container images this version deploys carry CVE-2026-85747.

Container imageDigestPackageFixed in
public.ecr.aws/p1t3u8a3/api:v1.28.512aeda8dbac7
github.com/docker/distribution@v2.8.3+incompatible
no fix listed
public.ecr.aws/p1t3u8a3/assets:v1.28.0fee63ead0e74
github.com/docker/distribution@v2.8.3+incompatible
no fix listed
public.ecr.aws/p1t3u8a3/canvases:v1.28.08d2b3a947a14
github.com/docker/distribution@v2.8.3+incompatible
no fix listed
public.ecr.aws/p1t3u8a3/db:v1.28.02c99078d7957
github.com/docker/distribution@v2.8.3+incompatible
no fix listed
public.ecr.aws/p1t3u8a3/http:v1.28.0cd0e4469cd02
github.com/docker/distribution@v2.8.3+incompatible
no fix listed
public.ecr.aws/p1t3u8a3/sink:v1.28.06b80fb10b443
github.com/docker/distribution@v2.8.3+incompatible
no fix listed
public.ecr.aws/p1t3u8a3/spot:v1.28.00ba5cb666370
github.com/docker/distribution@v2.8.3+incompatible
no fix listed
public.ecr.aws/p1t3u8a3/storage:v1.28.02f9784a385ce
github.com/docker/distribution@v2.8.3+incompatible
no fix listed

Open the chart page →

14,774
harborhelm-harborVerified publisher2.3.73 of 8See more

harbor helm-harbor 2.3.7

3 of the 8 container images this version deploys carry CVE-2026-85747.

Container imageDigestPackageFixed in
goharbor/harbor-registryctl:v2.15.430bd1ace4e3b
github.com/docker/distribution@v0.0.0-20260921091602-ac7c4cedc2f4+dirty
no fix listed
goharbor/registry-photon:v2.15.4dc0cb388a644
github.com/docker/distribution@v0.0.0-20260921091602-ac7c4cedc2f4+dirty
no fix listed
goharbor/trivy-adapter-photon:v2.15.4813ca81b4a4e
github.com/docker/distribution@v2.8.2+incompatible
no fix listed

Open the chart page →

1,640
svacerhelm-svacer0.6.01 of 1See more

svacer helm-svacer 0.6.0

1 of the 1 container images this version deploys carry CVE-2026-85747.

Container imageDigestPackageFixed in
ispras/svacer:11-2-042aa9fa9f189
github.com/docker/distribution@v2.8.3+incompatible
no fix listed

Open the chart page →

7,280
kubefaashfoxy-helm-charts0.1.62 of 4See more

kubefaas hfoxy-helm-charts 0.1.6

2 of the 4 container images this version deploys carry CVE-2026-85747.

Container imageDigestPackageFixed in
hfoxy4/kubefaas-builder:main-2afc7570bfb65aaad93
github.com/docker/distribution@v2.8.2+incompatible
no fix listed
library/docker:27.0.1-dind2416984b43dd
github.com/docker/distribution@v2.8.3+incompatible
no fix listed

Open the chart page →

8,073
holmesholmes0.1.01 of 1See more

holmes holmes 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-85747.

Container imageDigestPackageFixed in
quay.io/operator-framework/olm:master39081bf0c4a9
github.com/docker/distribution@v2.8.1+incompatible
no fix listed

Open the chart page →

2,907
cac-systemhuangchengwu-helm-chart0.1.01 of 9See more

cac-system huangchengwu-helm-chart 0.1.0

1 of the 9 container images this version deploys carry CVE-2026-85747.

Container imageDigestPackageFixed in
quay.io/jetstack/cert-manager-ctl:v1.12.08d54fe9d0c0d
github.com/docker/distribution@v2.8.2+incompatible
no fix listed

Open the chart page →

16,601
ilum-apiilumVerified publisher6.7.31 of 1See more

ilum-api ilum 6.7.3

1 of the 1 container images this version deploys carry CVE-2026-85747.

Container imageDigestPackageFixed in
ilum/api:6.7.3624fd09528c8
github.com/docker/distribution@v2.8.3+incompatible
no fix listed

Open the chart page →

3,243
kore-boardimprowisedVerified publisher0.5.81 of 4See more

kore-board improwised 0.5.8

1 of the 4 container images this version deploys carry CVE-2026-85747.

Container imageDigestPackageFixed in
ghcr.io/kore3lab/kore-board.terminal:v0.5.5f52e66eff50b
github.com/docker/distribution@v2.8.1+incompatible
no fix listed

Open the chart page →

19,543
registry-container-webhookinnagoVerified publisher2.0.21 of 1See more

registry-container-webhook innago 2.0.2

1 of the 1 container images this version deploys carry CVE-2026-85747.

Container imageDigestPackageFixed in
ghcr.io/indeedeng/harbor-container-webhook:main45ca15fc294f
github.com/docker/distribution@v2.8.3+incompatible
no fix listed

Open the chart page →

1,164
cloudshellinseefrlab4.3.01 of 2See more

cloudshell inseefrlab 4.3.0

1 of the 2 container images this version deploys carry CVE-2026-85747.

Container imageDigestPackageFixed in
inseefrlab/shelly:cloudshell31f04ca7436b
github.com/docker/distribution@v2.8.2+incompatible
no fix listed

Open the chart page →

12,448
instemmingserviceinstemmingservice1.0.01 of 3See more

instemmingservice instemmingservice 1.0.0

1 of the 3 container images this version deploys carry CVE-2026-85747.

Container imageDigestPackageFixed in
ghcr.io/conductionnl/instemmingservice-php:latest4ffe222b3e3a
github.com/docker/distribution@v0.0.0-20191216044856-a8371794149d
no fix listed

Open the chart page →

9,547
istio-aws-private-ingress-customizedistio-aws-private-ingress-customized1.0.01 of 1See more

istio-aws-private-ingress-customized istio-aws-private-ingress-customized 1.0.0

1 of the 1 container images this version deploys carry CVE-2026-85747.

Container imageDigestPackageFixed in
istio/proxyv2:1.18.0757d28c24100
github.com/docker/distribution@v2.8.2+incompatible
no fix listed

Open the chart page →

6,576
istio-azure-private-ingress-customizedistio-azure-private-ingress-customized1.0.01 of 1See more

istio-azure-private-ingress-customized istio-azure-private-ingress-customized 1.0.0

1 of the 1 container images this version deploys carry CVE-2026-85747.

Container imageDigestPackageFixed in
istio/proxyv2:1.18.0757d28c24100
github.com/docker/distribution@v2.8.2+incompatible
no fix listed

Open the chart page →

6,576
traefikitscontainedVerified publisher9.18.41 of 1See more

traefik itscontained 9.18.4

1 of the 1 container images this version deploys carry CVE-2026-85747.

Container imageDigestPackageFixed in
library/traefik:2.4.8eda951fd29a8
github.com/docker/distribution@v2.7.1+incompatible
no fix listed

Open the chart page →

4,648
koptimizejaconiVerified publisher0.5.42 of 2See more

koptimize jaconi 0.5.4

2 of the 2 container images this version deploys carry CVE-2026-85747.

Container imageDigestPackageFixed in
alpine/k8s:1.27.321b24e6bf801
github.com/docker/distribution@v2.8.1+incompatible
no fix listed
ghcr.io/jaconi-io/koptimize:1.2.5aca1bbd609b6
github.com/docker/distribution@v2.8.2+incompatible
no fix listed

Open the chart page →

7,490
jx-app-datadogjenkins-x0.0.101 of 2See more

jx-app-datadog jenkins-x 0.0.10

1 of the 2 container images this version deploys carry CVE-2026-85747.

Container imageDigestPackageFixed in
datadog/agent:6aad9994de6a7
github.com/docker/distribution@v2.8.3+incompatible
no fix listed

Open the chart page →

5,061
missing-container-metricsjimdo-missing-container-metrics0.5.01 of 1See more

missing-container-metrics jimdo-missing-container-metrics 0.5.0

1 of the 1 container images this version deploys carry CVE-2026-85747.

Container imageDigestPackageFixed in
dmilhdef/missing-container-metrics:v0.21.0fada1a6e7638
github.com/docker/distribution@v2.7.1+incompatible
no fix listed

Open the chart page →

3,671
distributionjouveVerified publisher0.2.31 of 1See more

distribution jouve 0.2.3

1 of the 1 container images this version deploys carry CVE-2026-85747.

Container imageDigestPackageFixed in
distribution/distribution:3.1.1bca24727f400
github.com/distribution/distribution/v3@v3.1.1
3.1.2

Open the chart page →

1,278
k10appk10app0.2.11 of 11See more

k10app k10app 0.2.1

1 of the 11 container images this version deploys carry CVE-2026-85747.

Container imageDigestPackageFixed in
ghcr.io/k10app/businit:latest94c9a3e799c2
github.com/docker/distribution@v2.8.1+incompatible
no fix listed

Open the chart page →

12,284
traefikk3s20.3.1+up20.3.01 of 1See more

traefik k3s 20.3.1+up20.3.0

1 of the 1 container images this version deploys carry CVE-2026-85747.

Container imageDigestPackageFixed in
rancher/mirrored-library-traefik:2.9.40842af6afcdf
github.com/docker/distribution@v2.7.1+incompatible
no fix listed

Open the chart page →

4,287
deploydefenderk8s-custom-controllerVerified publisher0.1.31 of 1See more

deploydefender k8s-custom-controller 0.1.3

1 of the 1 container images this version deploys carry CVE-2026-85747.

Container imageDigestPackageFixed in
ghcr.io/manzil-infinity180/deploydefender:ea3ab0bb646cdbeddd1aca483ecf650f9ac0d0847fbc6855c8b3
github.com/docker/distribution@v2.8.3+incompatible
no fix listed

Open the chart page →

2,520

Container images carrying it

634 by charts deploying them

A fixed version is listed for 1 of the 2 affected packages.

Container imageDigestPackageFixed inUsed by
public.ecr.aws/p1t3u8a3/http:v1.28.0cd0e4469cd02
github.com/docker/distribution@v2.8.3+incompatible
no fix listed
1
public.ecr.aws/p1t3u8a3/sink:v1.28.06b80fb10b443
github.com/docker/distribution@v2.8.3+incompatible
no fix listed
1
public.ecr.aws/p1t3u8a3/spot:v1.28.00ba5cb666370
github.com/docker/distribution@v2.8.3+incompatible
no fix listed
1
public.ecr.aws/p1t3u8a3/storage:v1.28.02f9784a385ce
github.com/docker/distribution@v2.8.3+incompatible
no fix listed
1
public.ecr.aws/r3m4q3r9/pleco:0.24.0651739583336
github.com/docker/distribution@v2.8.2+incompatible
no fix listed
1
quay.io/aerokube/browser-ops:2.6.7807c1bb67086
github.com/docker/distribution@v2.8.2+incompatible
no fix listed
1
quay.io/aerokube/keygen:1.0.1578934444f04
github.com/docker/distribution@v2.8.1+incompatible
no fix listed
1
quay.io/argoproj/argocd:v2.4.115b6701d8fb31
github.com/docker/distribution@v2.7.1+incompatible
no fix listed
1
quay.io/argoproj/argocd:v2.10.783c86003b781
github.com/docker/distribution@v2.8.2+incompatible
no fix listed
1
quay.io/argoproj/argocd:v3.0.395b5cf7ba6fe
github.com/docker/distribution@v2.8.3+incompatible
no fix listed
1
quay.io/argoproj/argocd:v2.8.6acaf37352569
github.com/docker/distribution@v2.8.2+incompatible
no fix listed
1
quay.io/argoprojlabs/argocd-image-updater:v1.3.0cb009167015c
github.com/distribution/distribution/v3@v3.1.1
3.1.2
1
quay.io/argoproj/workflow-controller:v3.7.166388d1b2f08
github.com/docker/distribution@v2.8.3+incompatible
no fix listed
1
quay.io/argoproj/workflow-controller:v3.5.56ab0da144235
github.com/docker/distribution@v2.8.2+incompatible
no fix listed
1
quay.io/argoproj/workflow-controller:v3.7.11c46aa0ded8ed
github.com/docker/distribution@v2.8.3+incompatible
no fix listed
1
quay.io/bentoml/yatai:0.4.614b482c1f1b8
github.com/docker/distribution@v2.7.1+incompatible
no fix listed
1
quay.io/bentoml/yatai-image-builder:3.0.4401d8538c4f48
github.com/docker/distribution@v2.8.2+incompatible
no fix listed
1
quay.io/cloudnativetoolkit/cli-tools:v1.1-v1.8.2d6fd2a9e3273
github.com/docker/distribution@v2.7.1+incompatible
no fix listed
1
quay.io/cloudnativetoolkit/cloud-pak-deployer:latest13aaae779248
github.com/docker/distribution@v2.8.1+incompatible
no fix listed
1
quay.io/codefresh/dind:3.0.250885ab519dac
github.com/docker/distribution@v2.8.3+incompatible
no fix listed
1
quay.io/eformat/jenkins-agent-graalvm:latesta3b9a07648b6
github.com/docker/distribution@v2.7.1+incompatible
no fix listed
1
quay.io/flomesh/fsm-bootstrap-ubi8:0.1.8-ubi.6e6d7afb1a4bf
github.com/docker/distribution@v2.8.1+incompatible
no fix listed
1
quay.io/flomesh/fsm-ingress-pipy-ubi8:0.1.8-ubi.6fce990dece01
github.com/docker/distribution@v2.8.1+incompatible
no fix listed
1
quay.io/flomesh/fsm-manager-ubi8:0.1.8-ubi.63590af73f65a
github.com/docker/distribution@v2.8.1+incompatible
no fix listed
1
quay.io/geored/spmm-collector-contrib:1.0.063baf86a49ac
github.com/docker/distribution@v2.8.2+incompatible
no fix listed
1
quay.io/gkarthics/apid-helper:v0.2.3d7d93debf1f4
github.com/docker/distribution@v2.8.1+incompatible
no fix listed
1
quay.io/harikube/vcluster-pro:0.32.1b741efae8d31
github.com/docker/distribution@v2.8.3+incompatible
no fix listed
1
quay.io/ibmgaragecloud/cli-tools:v0.159663f06adcb1
github.com/docker/distribution@v2.7.1+incompatible
no fix listed
1
quay.io/jenkins-kubernetes-operator/operator:v0.8.171cb50263c3b
github.com/docker/distribution@v2.7.1+incompatible
no fix listed
1
quay.io/jetstack/cert-manager-ctl:v1.13.24d9fce2c050e
github.com/docker/distribution@v2.8.2+incompatible
no fix listed
1
quay.io/jetstack/cert-manager-ctl:v1.8.0595c548dee6f
github.com/docker/distribution@v2.8.1+incompatible
no fix listed
1
quay.io/jetstack/cert-manager-ctl:v1.8.281b2d775edad
github.com/docker/distribution@v2.8.1+incompatible
no fix listed
1
quay.io/jetstack/cert-manager-ctl:v1.12.08d54fe9d0c0d
github.com/docker/distribution@v2.8.2+incompatible
no fix listed
1
quay.io/konveyor/move2kube-ui:latestec6ab507c5da
github.com/docker/distribution@v2.8.2+incompatible
no fix listed
1
quay.io/kube-ops/promtail:2.2.134de6387233b
github.com/docker/distribution@v2.7.1+incompatible
no fix listed
1
quay.io/kubermatic/kubermatic:v2.24.5ebba936046ab
github.com/distribution/distribution/v3@v3.0.0-20230629214736-bac7f02e02a1
github.com/docker/distribution@v2.8.1+incompatible
3.1.2
no fix listed
1
quay.io/kubermatic/machine-controller:v1.57.0476ae867ae56
github.com/docker/distribution@v2.8.2+incompatible
no fix listed
1
quay.io/kubescape/kubescape:v4.0.14418fa941ecc0
github.com/docker/distribution@v2.8.3+incompatible
no fix listed
1
quay.io/kubescape/kubevuln:v0.3.4309bed2f723ea0
github.com/docker/distribution@v2.8.3+incompatible
no fix listed
1
quay.io/kubescape/node-agent:v0.3.2192044ed750f5e
github.com/docker/distribution@v2.8.3+incompatible
no fix listed
1
quay.io/kubescape/operator:v0.2.1721ddcd2788e1e
github.com/docker/distribution@v2.8.3+incompatible
no fix listed
1
quay.io/minio/operator:v7.1.1cd587f60c43d
github.com/docker/distribution@v2.8.3+incompatible
no fix listed
1
quay.io/mittwald/brudi-operator:v0.2.3edb322094359
github.com/docker/distribution@v0.0.0-20191216044856-a8371794149d
no fix listed
1
quay.io/mittwald/harbor-operator:v1.6.365a38180e27a
github.com/docker/distribution@v2.8.3+incompatible
no fix listed
1
quay.io/ongres/kubectl:v1.25.16-build-6.5304dada9e4503
github.com/docker/distribution@v2.8.1+incompatible
no fix listed
1
quay.io/open-cluster-management/multicluster-mesh-addon:latest3e010e1188f1
github.com/docker/distribution@v2.7.1+incompatible
no fix listed
1
quay.io/openshift/origin-cli:latest10fef10863a3
github.com/distribution/distribution/v3@v3.0.0-20230519140516-983358f8e250
3.1.2
1
quay.io/openshift/origin-cli:4.66722d5041b47
github.com/docker/distribution@v2.7.1+incompatible
no fix listed
1
quay.io/openshift/origin-console:4.10.00bbe8b451fa3
github.com/docker/distribution@v2.7.1+incompatible
no fix listed
1
quay.io/openshift/origin-jenkins-agent-base:latestc241c971aef8
github.com/distribution/distribution/v3@v3.0.0-20230519140516-983358f8e250
3.1.2
1

syft 1.42.1 · advisories as of 16 Oct 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.