StackRadar

CVE-2026-85747

Medium

Advisory

Published 15 Oct 2026In the index since 16 Oct 2026
Severity
Medium
worst across findings
CVSS
6.8
base score, highest
EPSS
0.002
10th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
647
of 18,137 indexed, latest versions
Container images
634
deployed by those charts
Fix available
1 of 2
affected packages

Distribution: Client `manifests.Get()` does not verify returned content against requested digest

Carried by container images the latest versions of 647 of 18,137 indexed charts deploy, on 634 images.

Affected packageAffected versionsFixed inImages
github.com/docker/distributiongolangv0.0.0-20171011171712-7484e51bf6af, v0.0.0-20191216044856-a8371794149d, v0.0.0-20260602055908-11540eae06cb+dirty, v0.0.0-20260701071724-493dca9a81a8+dirty+12 moreno fix listed624
github.com/distribution/distribution/v3golangv0.0.0-20250402055438-9ed95e736522, v3.0.0, v3.0.0-20210316161203-a01c71e2477e, v3.0.0-20220526142353-ffbd94cbe269+9 more3.1.236
OSV records
GHSA-685w-q87j-wqw3
Trending
Rank 42 in indexed charts, since 16 Oct 2026. See the ranking →

Charts affected

647 by stars
ChartLatestAffected imagesRadar Score
scannerappscodeVerified publisher2026.1.151 of 3See more

scanner appscode 2026.1.15

1 of the 3 container images this version deploys carry CVE-2026-85747.

Container imageDigestPackageFixed in
ghcr.io/appscode/scanner:v0.0.2116907aae5de1
github.com/docker/distribution@v2.8.3+incompatible
no fix listed

Open the chart page →

7,349
smtprelayappscodeVerified publisher2026.10.121 of 1See more

smtprelay appscode 2026.10.12

1 of the 1 container images this version deploys carry CVE-2026-85747.

Container imageDigestPackageFixed in
ghcr.io/appscode/smtprelay:v0.0.479c9c76a78e6
github.com/docker/distribution@v2.8.3+incompatible
no fix listed

Open the chart page →

1,424
stash-enterpriseappscodeVerified publisher0.42.01 of 4See more

stash-enterprise appscode 0.42.0

1 of the 4 container images this version deploys carry CVE-2026-85747.

Container imageDigestPackageFixed in
ghcr.io/stashed/stash-enterprise:v0.42.1759f3850eda9
github.com/docker/distribution@v2.8.3+incompatible
no fix listed

Open the chart page →

6,220
argocd-backup-s3argocd-backup-s3Verified publisher0.9.51 of 1See more

argocd-backup-s3 argocd-backup-s3 0.9.5

1 of the 1 container images this version deploys carry CVE-2026-85747.

Container imageDigestPackageFixed in
ghcr.io/oguzhan-yilmaz/argocd-backup-s3:latestb61c750ade19
github.com/docker/distribution@v2.7.1+incompatible
no fix listed

Open the chart page →

6,683
siemassist-iot-cybersecurity-monitroting-siem0.1.01 of 3See more

siem assist-iot-cybersecurity-monitroting-siem 0.1.0

1 of the 3 container images this version deploys carry CVE-2026-85747.

Container imageDigestPackageFixed in
assistiot/cybersecurity-monitoring_id-wzh:latest0aacefac9677
github.com/docker/distribution@v2.7.1+incompatible
no fix listed

Open the chart page →

12,535
helm-dashboardbeluga-cloudVerified publisher2.4.01 of 1See more

helm-dashboard beluga-cloud 2.4.0

1 of the 1 container images this version deploys carry CVE-2026-85747.

Container imageDigestPackageFixed in
ghcr.io/beluga-cloud/helm-dashboard/dashboard:1.3.39ab9a675c405
github.com/docker/distribution@v2.8.2+incompatible
no fix listed

Open the chart page →

3,680
yatai-image-builderbentomlVerified publisher3.0.441 of 1See more

yatai-image-builder bentoml 3.0.44

1 of the 1 container images this version deploys carry CVE-2026-85747.

Container imageDigestPackageFixed in
quay.io/bentoml/yatai-image-builder:3.0.4401d8538c4f48
github.com/docker/distribution@v2.8.2+incompatible
no fix listed

Open the chart page →

910
brpservicebrpservice1.1.01 of 4See more

brpservice brpservice 1.1.0

1 of the 4 container images this version deploys carry CVE-2026-85747.

Container imageDigestPackageFixed in
ghcr.io/conductionnl/brpservice-php:latestc17f1ba17d36
github.com/docker/distribution@v0.0.0-20191216044856-a8371794149d
no fix listed

Open the chart page →

9,854
finops-stackcert-managerVerified publisher0.0.56 of 12See more

finops-stack cert-manager 0.0.5

6 of the 12 container images this version deploys carry CVE-2026-85747.

Container imageDigestPackageFixed in
ghcr.io/kyverno/background-controller:v1.12.506ed5db6cd33
github.com/docker/distribution@v2.8.3+incompatible
no fix listed
ghcr.io/kyverno/cleanup-controller:v1.12.5b914032ef9ad
github.com/docker/distribution@v2.8.3+incompatible
no fix listed
ghcr.io/kyverno/kyverno:v1.12.5a61c7022abcf
github.com/docker/distribution@v2.8.3+incompatible
no fix listed
ghcr.io/kyverno/kyverno-cli:v1.12.5832a32779e6d
github.com/docker/distribution@v2.8.3+incompatible
no fix listed
ghcr.io/kyverno/kyvernopre:v1.12.563f7eaf5aa8a
github.com/docker/distribution@v2.8.3+incompatible
no fix listed
ghcr.io/kyverno/reports-controller:v1.12.5c62e3347611c
github.com/docker/distribution@v2.8.3+incompatible
no fix listed

Open the chart page →

17,345
clairclair0.0.31 of 1See more

clair clair 0.0.3

1 of the 1 container images this version deploys carry CVE-2026-85747.

Container imageDigestPackageFixed in
quay.io/projectquay/clair:4.7.28d38ffa8fad7
github.com/docker/distribution@v2.8.1+incompatible
no fix listed

Open the chart page →

4,100
cloudflow-enterprise-componentscloudflow-helm-charts0.0.0-NIGHTLY011220201 of 9See more

cloudflow-enterprise-components cloudflow-helm-charts 0.0.0-NIGHTLY01122020

1 of the 9 container images this version deploys carry CVE-2026-85747.

Container imageDigestPackageFixed in
prom/prometheus:v2.21.0d43417c260e5
github.com/docker/distribution@v2.7.1+incompatible
no fix listed

Open the chart page →

6,656
cnpg-sandboxcloudnative-pgVerified publisher0.6.11 of 6See more

cnpg-sandbox cloudnative-pg 0.6.1

1 of the 6 container images this version deploys carry CVE-2026-85747.

Container imageDigestPackageFixed in
quay.io/prometheus-operator/prometheus-operator:v0.54.0be2aef39a2f8
github.com/docker/distribution@v2.7.1+incompatible
no fix listed

Open the chart page →

10,764
clusternet-hubclusternet1.0.01 of 1See more

clusternet-hub clusternet 1.0.0

1 of the 1 container images this version deploys carry CVE-2026-85747.

Container imageDigestPackageFixed in
ghcr.io/clusternet/clusternet-hub:v1.0.059f75504c5d4
github.com/docker/distribution@v2.8.3+incompatible
no fix listed

Open the chart page →

2,184
clusternet-schedulerclusternet1.0.01 of 1See more

clusternet-scheduler clusternet 1.0.0

1 of the 1 container images this version deploys carry CVE-2026-85747.

Container imageDigestPackageFixed in
ghcr.io/clusternet/clusternet-scheduler:v1.0.0a6ae5aff81ce
github.com/docker/distribution@v2.8.3+incompatible
no fix listed

Open the chart page →

2,184
cluster-setupcluster-setup1.5.01 of 8See more

cluster-setup cluster-setup 1.5.0

1 of the 8 container images this version deploys carry CVE-2026-85747.

Container imageDigestPackageFixed in
quay.io/argoproj/argocd:v3.0.395b5cf7ba6fe
github.com/docker/distribution@v2.8.3+incompatible
no fix listed

Open the chart page →

15,121
istio-allcode4devsVerified publisher1.2.01 of 6See more

istio-all code4devs 1.2.0

1 of the 6 container images this version deploys carry CVE-2026-85747.

Container imageDigestPackageFixed in
istio/pilot:1.24.2-distroless137e44e3d1d2
github.com/docker/distribution@v2.8.3+incompatible
no fix listed

Open the chart page →

7,163
istio-control-planecode4devsVerified publisher1.0.01 of 3See more

istio-control-plane code4devs 1.0.0

1 of the 3 container images this version deploys carry CVE-2026-85747.

Container imageDigestPackageFixed in
istio/pilot:1.24.2-distroless137e44e3d1d2
github.com/docker/distribution@v2.8.3+incompatible
no fix listed

Open the chart page →

3,527
contactcataloguscontact-catalogus1.0.01 of 3See more

contactcatalogus contact-catalogus 1.0.0

1 of the 3 container images this version deploys carry CVE-2026-85747.

Container imageDigestPackageFixed in
ghcr.io/conductionnl/contactcatalogus-php:latesteeb625bd660c
github.com/docker/distribution@v0.0.0-20191216044856-a8371794149d
no fix listed

Open the chart page →

9,378
dregsydeliveryheroVerified publisher0.1.51 of 1See more

dregsy deliveryhero 0.1.5

1 of the 1 container images this version deploys carry CVE-2026-85747.

Container imageDigestPackageFixed in
xelalex/dregsy:0.4.3574054e1c417
github.com/docker/distribution@v2.8.1+incompatible
no fix listed

Open the chart page →

4,036
trivy-operatordevopstalesVerified publisher2.5.01 of 1See more

trivy-operator devopstales 2.5.0

1 of the 1 container images this version deploys carry CVE-2026-85747.

Container imageDigestPackageFixed in
devopstales/trivy-operator:2.575136aa7a26e
github.com/docker/distribution@v2.8.1+incompatible
no fix listed

Open the chart page →

6,626
clairdevtron0.1.141 of 2See more

clair devtron 0.1.14

1 of the 2 container images this version deploys carry CVE-2026-85747.

Container imageDigestPackageFixed in
quay.io/devtron/clair:4.3.675fb847ac045
github.com/docker/distribution@v2.7.1+incompatible
no fix listed

Open the chart page →

8,148
digispoof-interfacedigispoof-interface1.0.01 of 3See more

digispoof-interface digispoof-interface 1.0.0

1 of the 3 container images this version deploys carry CVE-2026-85747.

Container imageDigestPackageFixed in
ghcr.io/conductionnl/digispoof-interface-php:latest03aba499950f
github.com/docker/distribution@v0.0.0-20191216044856-a8371794149d
no fix listed

Open the chart page →

9,933
dnation-pingdnationcloud0.1.91 of 5See more

dnation-ping dnationcloud 0.1.9

1 of the 5 container images this version deploys carry CVE-2026-85747.

Container imageDigestPackageFixed in
prom/prometheus:v2.21.0d43417c260e5
github.com/docker/distribution@v2.7.1+incompatible
no fix listed

Open the chart page →

15,335
docker-in-dockerdocker-in-docker0.0.31 of 2See more

docker-in-docker docker-in-docker 0.0.3

1 of the 2 container images this version deploys carry CVE-2026-85747.

Container imageDigestPackageFixed in
library/docker:24.0.2-dind1d148deae16a
github.com/distribution/distribution/v3@v3.0.0-20230601133803-97b1d649c493
github.com/docker/distribution@v2.8.2+incompatible
3.1.2
no fix listed

Open the chart page →

3,400
dockyarddockyardVerified publisher0.5.01 of 1See more

dockyard dockyard 0.5.0

1 of the 1 container images this version deploys carry CVE-2026-85747.

Container imageDigestPackageFixed in
ghcr.io/kgma74/dockyard:0.5.015d1d5769e91
github.com/docker/distribution@v2.8.3+incompatible
no fix listed

Open the chart page →

2,172
dragonfly-stackdragonflyVerified publisher0.1.22 of 7See more

dragonfly-stack dragonfly 0.1.2

2 of the 7 container images this version deploys carry CVE-2026-85747.

Container imageDigestPackageFixed in
dragonflyoss/manager:v2.1.49c3ef7f10698d
github.com/docker/distribution@v2.8.3+incompatible
no fix listed
ghcr.io/containerd/nydus-snapshotter:v0.9.056f8617363b4
github.com/docker/distribution@v2.8.2+incompatible
no fix listed

Open the chart page →

22,928
nydus-snapshotterdragonflyVerified publisher0.0.101 of 2See more

nydus-snapshotter dragonfly 0.0.10

1 of the 2 container images this version deploys carry CVE-2026-85747.

Container imageDigestPackageFixed in
ghcr.io/containerd/nydus-snapshotter:v0.9.056f8617363b4
github.com/docker/distribution@v2.8.2+incompatible
no fix listed

Open the chart page →

4,581
elchi-stackelchi2.0.61 of 10See more

elchi-stack elchi 2.0.6

1 of the 10 container images this version deploys carry CVE-2026-85747.

Container imageDigestPackageFixed in
otel/opentelemetry-collector-contrib:0.89.0995f17004231
github.com/docker/distribution@v2.8.2+incompatible
no fix listed

Open the chart page →

17,918
ipfs-clusterethereum-helm-chartsVerified publisher0.1.141 of 3See more

ipfs-cluster ethereum-helm-charts 0.1.14

1 of the 3 container images this version deploys carry CVE-2026-85747.

Container imageDigestPackageFixed in
lachlanevenson/k8s-kubectl:v1.25.4af5cea3f2e40
github.com/docker/distribution@v2.8.1+incompatible
no fix listed

Open the chart page →

6,687
fsmfsmOfficialVerified publisher0.2.112 of 5See more

fsm fsm 0.2.11

2 of the 5 container images this version deploys carry CVE-2026-85747.

Container imageDigestPackageFixed in
flomesh/fsm-ingress-pipy:0.2.11cc39c96711c4
github.com/docker/distribution@v2.8.2+incompatible
no fix listed
flomesh/fsm-manager:0.2.1122f849c70b25
github.com/docker/distribution@v2.8.2+incompatible
no fix listed

Open the chart page →

5,885
otel-collectorgeek-cookbookVerified publisher1.2.21 of 1See more

otel-collector geek-cookbook 1.2.2

1 of the 1 container images this version deploys carry CVE-2026-85747.

Container imageDigestPackageFixed in
otel/opentelemetry-collector-contrib:0.46.0ba173aa85f3f
github.com/docker/distribution@v2.8.0+incompatible
no fix listed

Open the chart page →

3,652
gomenhashaigomenhashaiOfficialVerified publisher1.3.41 of 1See more

gomenhashai gomenhashai 1.3.4

1 of the 1 container images this version deploys carry CVE-2026-85747.

Container imageDigestPackageFixed in
ghcr.io/gomenhashai/gomenhashai:v1.3.36f031172a5ec
github.com/docker/distribution@v2.8.3+incompatible
no fix listed

Open the chart page →

1,078
phlaregrafana0.5.41 of 1See more

phlare grafana 0.5.4

1 of the 1 container images this version deploys carry CVE-2026-85747.

Container imageDigestPackageFixed in
grafana/phlare:0.5.1330f990cdad9
github.com/docker/distribution@v2.8.1+incompatible
no fix listed

Open the chart page →

2,919
helm-operatorhelm-operatorVerified publisher0.0.21 of 1See more

helm-operator helm-operator 0.0.2

1 of the 1 container images this version deploys carry CVE-2026-85747.

Container imageDigestPackageFixed in
bsgrigorov/helm-operator:latest45ab095f09c8
github.com/docker/distribution@v2.7.1+incompatible
no fix listed

Open the chart page →

8,435
helmuphelmupVerified publisher0.1.01 of 3See more

helmup helmup 0.1.0

1 of the 3 container images this version deploys carry CVE-2026-85747.

Container imageDigestPackageFixed in
sirrend/helmup-engine:0.1.13699e79e3d4e2
github.com/docker/distribution@v2.8.3+incompatible
no fix listed

Open the chart page →

19,100
holoinsightholoinsight0.2.51 of 6See more

holoinsight holoinsight 0.2.5

1 of the 6 container images this version deploys carry CVE-2026-85747.

Container imageDigestPackageFixed in
holoinsight/otelcontribcol:latest42ba8dc3113c
github.com/docker/distribution@v2.8.1+incompatible
no fix listed

Open the chart page →

30,395
holoinsight-agentholoinsight0.2.51 of 2See more

holoinsight-agent holoinsight 0.2.5

1 of the 2 container images this version deploys carry CVE-2026-85747.

Container imageDigestPackageFixed in
holoinsight/agent:latest5c3994e742f8
github.com/docker/distribution@v2.8.1+incompatible
no fix listed

Open the chart page →

2,503
htnn-controllerhtnnVerified publisher0.5.01 of 1See more

htnn-controller htnn 0.5.0

1 of the 1 container images this version deploys carry CVE-2026-85747.

Container imageDigestPackageFixed in
ghcr.io/mosn/htnn-controller:v0.3.1c379e66246be
github.com/docker/distribution@v2.8.3+incompatible
no fix listed

Open the chart page →

5,210
jetic-operatorjetic-operatorVerified publisher2.0.21 of 1See more

jetic-operator jetic-operator 2.0.2

1 of the 1 container images this version deploys carry CVE-2026-85747.

Container imageDigestPackageFixed in
apache/camel-k:1.10.43bb13d14f64a
github.com/docker/distribution@v2.8.0+incompatible
no fix listed

Open the chart page →

10,981
kdiffkdiff-snapshotsVerified publisher0.0.2031 of 2See more

kdiff kdiff-snapshots 0.0.203

1 of the 2 container images this version deploys carry CVE-2026-85747.

Container imageDigestPackageFixed in
ghcr.io/oguzhan-yilmaz/kdiff-snapshots:0.0.2035bc5ca66d55a
github.com/docker/distribution@v2.8.3+incompatible
no fix listed

Open the chart page →

9,411
kdiff-snapshotskdiff-snapshotsVerified publisher0.0.551 of 1See more

kdiff-snapshots kdiff-snapshots 0.0.55

1 of the 1 container images this version deploys carry CVE-2026-85747.

Container imageDigestPackageFixed in
ghcr.io/oguzhan-yilmaz/kdiff-snapshots:0.0.55d7f93d2182fe
github.com/docker/distribution@v2.8.3+incompatible
no fix listed

Open the chart page →

6,928
ks-corekubeblocksVerified publisher1.1.32 of 5See more

ks-core kubeblocks 1.1.3

2 of the 5 container images this version deploys carry CVE-2026-85747.

Container imageDigestPackageFixed in
kubesphere/ks-extensions-museum:latest29681958f220
github.com/docker/distribution@v2.8.2+incompatible
no fix listed
kubesphere/kubectl:v1.27.1649b445b1b732
github.com/docker/distribution@v2.8.2+incompatible
no fix listed

Open the chart page →

6,367
kubegems-installerkubegemsOfficial1.24.101 of 1See more

kubegems-installer kubegems 1.24.10

1 of the 1 container images this version deploys carry CVE-2026-85747.

Container imageDigestPackageFixed in
kubegems/kubegems:v1.24.10a730bcf9322a
github.com/docker/distribution@v2.8.2+incompatible
no fix listed

Open the chart page →

4,095
kubegems-localkubegemsOfficial1.24.102 of 2See more

kubegems-local kubegems 1.24.10

2 of the 2 container images this version deploys carry CVE-2026-85747.

Container imageDigestPackageFixed in
kubegems/kubectl:latestc3b4be9a54f5
github.com/docker/distribution@v2.8.1+incompatible
no fix listed
kubegems/kubegems:v1.24.10a730bcf9322a
github.com/docker/distribution@v2.8.2+incompatible
no fix listed

Open the chart page →

7,628
kubernetes-stateless-chartkubernetes-stateless-chart1.0.31 of 1See more

kubernetes-stateless-chart kubernetes-stateless-chart 1.0.3

1 of the 1 container images this version deploys carry CVE-2026-85747.

Container imageDigestPackageFixed in
portainer/portainer-ce:2.18.4-alpine3e61aaee1341
github.com/distribution/distribution/v3@v3.0.0-20230223072852-e5d5810851d1
github.com/docker/distribution@v2.8.1+incompatible
3.1.2
no fix listed

Open the chart page →

4,239
mesherykubesphere-stable0.5.010 of 13See more

meshery kubesphere-stable 0.5.0

10 of the 13 container images this version deploys carry CVE-2026-85747.

Container imageDigestPackageFixed in
layer5/meshery:stable-latest78a8be21bef3
github.com/docker/distribution@v2.8.3+incompatible
no fix listed
layer5/meshery-app-mesh:stable-latest77d59943b3d6
github.com/docker/distribution@v2.8.1+incompatible
no fix listed
layer5/meshery-consul:stable-latest25a4cc38abcd
github.com/docker/distribution@v2.8.2+incompatible
no fix listed
layer5/meshery-istio:stable-latestfde47c141ec6
github.com/docker/distribution@v2.8.2+incompatible
no fix listed
layer5/meshery-kuma:stable-latest9d25f029a8a2
github.com/docker/distribution@v2.8.2+incompatible
no fix listed
layer5/meshery-linkerd:stable-latestb99c73bac1f5
github.com/docker/distribution@v2.8.2+incompatible
no fix listed
layer5/meshery-nginx-sm:stable-latestb3864dfd47ad
github.com/docker/distribution@v2.8.2+incompatible
no fix listed
layer5/meshery-nsm:stable-latestebd6a8faf21f
github.com/docker/distribution@v2.7.1+incompatible
no fix listed
layer5/meshery-osm:stable-latestec898e5786c6
github.com/docker/distribution@v2.8.1+incompatible
no fix listed
layer5/meshery-traefik-mesh:stable-latest797fa7a03570
github.com/docker/distribution@v2.8.2+incompatible
no fix listed

Open the chart page →

35,120
kubeservice-cosign-webhookkubservice-chartsVerified publisher1.1.12 of 5See more

kubeservice-cosign-webhook kubservice-charts 1.1.1

2 of the 5 container images this version deploys carry CVE-2026-85747.

Container imageDigestPackageFixed in
dongjiang1989/cosign-webhook:v1.1.02a3ead6a55dc
github.com/docker/distribution@v2.8.2+incompatible
no fix listed
quay.io/jetstack/cert-manager-ctl:v1.13.1c10bde7ff9ad
github.com/docker/distribution@v2.8.2+incompatible
no fix listed

Open the chart page →

10,677
kubeservice-custom-limitrangekubservice-chartsVerified publisher1.3.01 of 5See more

kubeservice-custom-limitrange kubservice-charts 1.3.0

1 of the 5 container images this version deploys carry CVE-2026-85747.

Container imageDigestPackageFixed in
quay.io/jetstack/cert-manager-ctl:v1.13.1c10bde7ff9ad
github.com/docker/distribution@v2.8.2+incompatible
no fix listed

Open the chart page →

9,528
kubeservice-namespace-node-affinitykubservice-chartsVerified publisher1.1.21 of 5See more

kubeservice-namespace-node-affinity kubservice-charts 1.1.2

1 of the 5 container images this version deploys carry CVE-2026-85747.

Container imageDigestPackageFixed in
quay.io/jetstack/cert-manager-ctl:v1.13.1c10bde7ff9ad
github.com/docker/distribution@v2.8.2+incompatible
no fix listed

Open the chart page →

10,617
lagoon-remotelagoon-chartsVerified publisher0.107.01 of 1See more

lagoon-remote lagoon-charts 0.107.0

1 of the 1 container images this version deploys carry CVE-2026-85747.

Container imageDigestPackageFixed in
uselagoon/docker-host:v3.6.12c89ed939b8b
github.com/docker/distribution@v2.8.3+incompatible
no fix listed

Open the chart page →

3,107

Container images carrying it

634 by charts deploying them

A fixed version is listed for 1 of the 2 affected packages.

Container imageDigestPackageFixed inUsed by
quay.io/operator-framework/catalogd:v1.8.06ff40fa6257f
github.com/docker/distribution@v2.8.3+incompatible
no fix listed
1
quay.io/operator-framework/olm1b6002156f56
github.com/docker/distribution@v2.8.2+incompatible
no fix listed
1
quay.io/operator-framework/olm:master39081bf0c4a9
github.com/docker/distribution@v2.8.1+incompatible
no fix listed
1
quay.io/operator-framework/olm40d0363f4aa6
github.com/docker/distribution@v2.8.3+incompatible
no fix listed
1
quay.io/operator-framework/olm:v0.46.04404599eb7b7
github.com/docker/distribution@v2.8.3+incompatible
no fix listed
1
quay.io/operator-framework/olmf9ea8cef95ac
github.com/docker/distribution@v2.8.1+incompatible
no fix listed
1
quay.io/operator-framework/operator-controller:v1.8.0bca5dfcc67ca
github.com/docker/distribution@v2.8.3+incompatible
no fix listed
1
quay.io/opsmxpublic/create-secret:v4.0.4defc3263e0e9
github.com/docker/distribution@v2.8.1+incompatible
no fix listed
1
quay.io/opstree/k8s-vault-webhook:2.063b67ffcdb84
github.com/docker/distribution@v0.0.0-20171011171712-7484e51bf6af
no fix listed
1
quay.io/projectquay/clair:4.9.023329c3368e4
github.com/docker/distribution@v2.8.3+incompatible
no fix listed
1
quay.io/projectquay/clair:4.7.28d38ffa8fad7
github.com/docker/distribution@v2.8.1+incompatible
no fix listed
1
quay.io/prometheus-operator/prometheus-operator:v0.57.0a2d502c204f9
github.com/docker/distribution@v2.8.1+incompatible
no fix listed
1
quay.io/prometheus-operator/prometheus-operator:v0.54.0be2aef39a2f8
github.com/docker/distribution@v2.7.1+incompatible
no fix listed
1
quay.io/prometheus-operator/prometheus-operator:v0.61.1cd7d1a82ef00
github.com/docker/distribution@v2.8.1+incompatible
no fix listed
1
quay.io/prometheus/prometheus:v2.39.14748e26f9369
github.com/docker/distribution@v2.7.1+incompatible
no fix listed
1
quay.io/prometheus/prometheus:v2.37.056e7f18e05dd
github.com/docker/distribution@v2.7.1+incompatible
no fix listed
1
quay.io/prometheus/prometheus:v2.33.591100b06e86d
github.com/docker/distribution@v2.7.1+incompatible
no fix listed
1
quay.io/prometheus/prometheus:v2.34.0b37103e03399
github.com/docker/distribution@v2.7.1+incompatible
no fix listed
1
quay.io/redhat-appstudio/appstudio-utils:dbbdd82734232e6289e8fbae5b4c858481a7c0577b4202c25b67
github.com/docker/distribution@v2.8.2+incompatible
no fix listed
1
quay.io/rhdh/rhdh-hub-rhel9:lateste992092fcc9b
github.com/docker/distribution@v2.8.3+incompatible
no fix listed
1
quay.io/rht-labs/stack-do500:3.0.86ba82beff18e
github.com/docker/distribution@v2.7.1+incompatible
no fix listed
1
quay.io/skopeo/stable:v1.134853591bd1d2
github.com/docker/distribution@v2.8.2+incompatible
no fix listed
1
quay.io/solo-io/discovery:0.0.0-fork5b62aaade3c9
github.com/docker/distribution@v2.7.1+incompatible
no fix listed
1
quay.io/solo-io/gloo:0.0.0-fork9a6c84560d44
github.com/docker/distribution@v2.7.1+incompatible
no fix listed
1
registry.gitlab.com/bitspur/rock8s/images/kube-commands:3.1880ef8ceffc92
github.com/docker/distribution@v2.8.2+incompatible
no fix listed
1
registry.gitlab.com/gitlab-org/build/cng/gitlab-container-registry:v4.42.0-gitlab4fed422a7637
github.com/docker/distribution@v0.0.0-20260924080132-64ce589791cc
no fix listed
1
registry.gitlab.com/gitlab-org/cloud-native/gitlab-operator:0.5.136b19b72120e
github.com/docker/distribution@v2.7.1+incompatible
no fix listed
1
registry.gitlab.com/xrow-public/ci-tools/tools:main90a7a94db2b0
github.com/docker/distribution@v2.8.3+incompatible
no fix listed
1
registry.k8s.io/kube-apiserver:v1.25.0f6902791fb9a
github.com/docker/distribution@v2.8.1+incompatible
no fix listed
1
registry.k8s.io/kube-controller-manager:v1.25.066ce7d460e53
github.com/docker/distribution@v2.8.1+incompatible
no fix listed
1
registry.k8s.io/kube-scheduler:v1.26.110684e23172d9
github.com/docker/distribution@v2.8.1+incompatible
no fix listed
1
registry.k8s.io/kube-scheduler:v1.28.73ae5620a33bb
github.com/docker/distribution@v2.8.2+incompatible
no fix listed
1
registry.k8s.io/kube-scheduler:v1.28.1146cf7475c8da
github.com/docker/distribution@v2.8.2+incompatible
no fix listed
1
registry.k8s.io/kube-scheduler:v1.25.09330c53feca7
github.com/docker/distribution@v2.8.1+incompatible
no fix listed
1

syft 1.42.1 · advisories as of 16 Oct 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.