StackRadar

CVE-2026-85747

Medium

Advisory

Published 15 Oct 2026In the index since 16 Oct 2026
Severity
Medium
worst across findings
CVSS
6.8
base score, highest
EPSS
0.002
10th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
647
of 18,137 indexed, latest versions
Container images
634
deployed by those charts
Fix available
1 of 2
affected packages

Distribution: Client `manifests.Get()` does not verify returned content against requested digest

Carried by container images the latest versions of 647 of 18,137 indexed charts deploy, on 634 images.

Affected packageAffected versionsFixed inImages
github.com/docker/distributiongolangv0.0.0-20171011171712-7484e51bf6af, v0.0.0-20191216044856-a8371794149d, v0.0.0-20260602055908-11540eae06cb+dirty, v0.0.0-20260701071724-493dca9a81a8+dirty+12 moreno fix listed624
github.com/distribution/distribution/v3golangv0.0.0-20250402055438-9ed95e736522, v3.0.0, v3.0.0-20210316161203-a01c71e2477e, v3.0.0-20220526142353-ffbd94cbe269+9 more3.1.236
OSV records
GHSA-685w-q87j-wqw3
Trending
Rank 42 in indexed charts, since 16 Oct 2026. See the ranking →

Charts affected

647 by stars
ChartLatestAffected imagesRadar Score
custom-rhcl-consolecustom-rhcl-consoleVerified publisher0.1.21 of 3See more

custom-rhcl-console custom-rhcl-console 0.1.2

1 of the 3 container images this version deploys carry CVE-2026-85747.

Container imageDigestPackageFixed in
quay.io/openshift/origin-cli:latest10fef10863a3
github.com/distribution/distribution/v3@v3.0.0-20230519140516-983358f8e250
3.1.2

Open the chart page →

2,539
jupyterhubd4nVerified publisher3.3.71 of 7See more

jupyterhub d4n 3.3.7

1 of the 7 container images this version deploys carry CVE-2026-85747.

Container imageDigestPackageFixed in
registry.k8s.io/kube-scheduler:v1.28.1146cf7475c8da
github.com/docker/distribution@v2.8.2+incompatible
no fix listed

Open the chart page →

20,139
grafana-agentdandydev-chartsVerified publisher0.19.21 of 1See more

grafana-agent dandydev-charts 0.19.2

1 of the 1 container images this version deploys carry CVE-2026-85747.

Container imageDigestPackageFixed in
grafana/agent:v0.20.0825c09373d27
github.com/docker/distribution@v2.7.1+incompatible
no fix listed

Open the chart page →

4,839
dapr-agentsdapr-agents-devVerified publisher0.1.51 of 31See more

dapr-agents dapr-agents-dev 0.1.5

1 of the 31 container images this version deploys carry CVE-2026-85747.

Container imageDigestPackageFixed in
ghcr.io/kagent-dev/kagent/tools:0.0.13c8882543f693
github.com/docker/distribution@v2.8.3+incompatible
no fix listed

Open the chart page →

32,620
cloudwatch-agent-prometheusdasmeta0.2.21 of 1See more

cloudwatch-agent-prometheus dasmeta 0.2.2

1 of the 1 container images this version deploys carry CVE-2026-85747.

Container imageDigestPackageFixed in
amazon/cloudwatch-agent:1.247350.0b251780e745d1783c93
github.com/docker/distribution@v2.7.1-0.20190205005809-0d3efadf0154+incompatible
no fix listed

Open the chart page →

4,193
adot-exporter-for-eks-on-ec2dasmeta-adot0.15.51 of 1See more

adot-exporter-for-eks-on-ec2 dasmeta-adot 0.15.5

1 of the 1 container images this version deploys carry CVE-2026-85747.

Container imageDigestPackageFixed in
amazon/aws-otel-collector:v0.27.0d8ab0eef5074
github.com/docker/distribution@v2.8.1+incompatible
no fix listed

Open the chart page →

2,746
datadog-csi-driverdatadogVerified publisher0.18.01 of 2See more

datadog-csi-driver datadog 0.18.0

1 of the 2 container images this version deploys carry CVE-2026-85747.

Container imageDigestPackageFixed in
gcr.io/datadoghq/csi-driver:1.4.086c713de81d9
github.com/docker/distribution@v2.8.3+incompatible
no fix listed

Open the chart page →

3,565
agent-helmdatasaker0.1.81 of 6See more

agent-helm datasaker 0.1.8

1 of the 6 container images this version deploys carry CVE-2026-85747.

Container imageDigestPackageFixed in
datasaker/dsk-container-agent:latest08b52999f67b
github.com/docker/distribution@v2.8.2+incompatible
no fix listed

Open the chart page →

11,451
ambassador-agentdatawire1.0.221 of 1See more

ambassador-agent datawire 1.0.22

1 of the 1 container images this version deploys carry CVE-2026-85747.

Container imageDigestPackageFixed in
ambassador/ambassador-agent:1.0.227a1ea0d934fb
github.com/docker/distribution@v2.8.2+incompatible
no fix listed

Open the chart page →

1,658
ambassador-operatordatawire0.3.01 of 1See more

ambassador-operator datawire 0.3.0

1 of the 1 container images this version deploys carry CVE-2026-85747.

Container imageDigestPackageFixed in
datawire/ambassador-operator:v1.3.0f95ae710d75c
github.com/docker/distribution@v2.7.1+incompatible
no fix listed

Open the chart page →

8,906
kyvernodevopstalesVerified publisher2.5.12 of 2See more

kyverno devopstales 2.5.1

2 of the 2 container images this version deploys carry CVE-2026-85747.

Container imageDigestPackageFixed in
ghcr.io/kyverno/kyverno:v1.7.19c73f1841ebc
github.com/docker/distribution@v2.8.0+incompatible
no fix listed
ghcr.io/kyverno/kyvernopre:v1.7.1185d2eebc60c
github.com/docker/distribution@v2.8.0+incompatible
no fix listed

Open the chart page →

6,816
ai-agentdevtron0.0.11 of 1See more

ai-agent devtron 0.0.1

1 of the 1 container images this version deploys carry CVE-2026-85747.

Container imageDigestPackageFixed in
quay.io/devtron/ai-agent:0.0.16545dac92173
github.com/docker/distribution@v2.8.3+incompatible
no fix listed

Open the chart page →

11,152
argocddevtron1.8.11 of 3See more

argocd devtron 1.8.1

1 of the 3 container images this version deploys carry CVE-2026-85747.

Container imageDigestPackageFixed in
argoproj/argocd:v1.8.1830e86cacefd
github.com/docker/distribution@v2.7.1+incompatible
no fix listed

Open the chart page →

14,181
argocd-certificate-refreshdevtron0.10.81 of 1See more

argocd-certificate-refresh devtron 0.10.8

1 of the 1 container images this version deploys carry CVE-2026-85747.

Container imageDigestPackageFixed in
quay.io/devtron/argocd-cert-refresh:v102b6db27eaf3d
github.com/docker/distribution@v2.8.1+incompatible
no fix listed

Open the chart page →

14,709
argo-workflowdevtron0.1.61 of 1See more

argo-workflow devtron 0.1.6

1 of the 1 container images this version deploys carry CVE-2026-85747.

Container imageDigestPackageFixed in
quay.io/argoproj/workflow-controller:v3.4.7f0c6fba81a24
github.com/docker/distribution@v2.8.1+incompatible
no fix listed

Open the chart page →

2,345
devtron-enterprisedevtron48.0.03 of 28See more

devtron-enterprise devtron 48.0.0

3 of the 28 container images this version deploys carry CVE-2026-85747.

Container imageDigestPackageFixed in
quay.io/devtron/image-scanner:94237c18-109-3942098580969b333
github.com/docker/distribution@v2.8.3+incompatible
no fix listed
quay.io/devtron/inception:7beef376-948-313784c3b91bebd3d
github.com/docker/distribution@v2.7.1+incompatible
no fix listed
quay.io/devtron/kubectl:latest2ad610626658
github.com/docker/distribution@v2.8.1+incompatible
no fix listed

Open the chart page →

90,212
devtron-in-clustercddevtron0.10.21 of 2See more

devtron-in-clustercd devtron 0.10.2

1 of the 2 container images this version deploys carry CVE-2026-85747.

Container imageDigestPackageFixed in
quay.io/devtron/kubewatch:49f906a5-419-14814eec0305b594c
github.com/docker/distribution@v2.8.2+incompatible
no fix listed

Open the chart page →

7,030
devtron-logs-dumpdevtron0.1.01 of 1See more

devtron-logs-dump devtron 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-85747.

Container imageDigestPackageFixed in
quay.io/devtron/k8s-utils:807ca3c2-488-14005f296c2ec5db7
github.com/docker/distribution@v2.8.1+incompatible
no fix listed

Open the chart page →

5,962
kube-prometheus-stackdevtron19.3.01 of 6See more

kube-prometheus-stack devtron 19.3.0

1 of the 6 container images this version deploys carry CVE-2026-85747.

Container imageDigestPackageFixed in
quay.io/prometheus-operator/prometheus-operator:v0.50.0ab4f480f2cc6
github.com/docker/distribution@v2.7.1+incompatible
no fix listed

Open the chart page →

12,276
securitydevtron0.2.21 of 1See more

security devtron 0.2.2

1 of the 1 container images this version deploys carry CVE-2026-85747.

Container imageDigestPackageFixed in
quay.io/devtron/image-scanner:b278f42b-334-1111988c64b1b6ec8
github.com/docker/distribution@v2.7.1+incompatible
no fix listed

Open the chart page →

3,540
ai-agentdevtron-labs0.0.11 of 1See more

ai-agent devtron-labs 0.0.1

1 of the 1 container images this version deploys carry CVE-2026-85747.

Container imageDigestPackageFixed in
quay.io/devtron/ai-agent:0.0.16545dac92173
github.com/docker/distribution@v2.8.3+incompatible
no fix listed

Open the chart page →

11,152
argocddevtron-labs1.8.11 of 3See more

argocd devtron-labs 1.8.1

1 of the 3 container images this version deploys carry CVE-2026-85747.

Container imageDigestPackageFixed in
argoproj/argocd:v1.8.1830e86cacefd
github.com/docker/distribution@v2.7.1+incompatible
no fix listed

Open the chart page →

14,181
argocd-certificate-refreshdevtron-labs0.10.81 of 1See more

argocd-certificate-refresh devtron-labs 0.10.8

1 of the 1 container images this version deploys carry CVE-2026-85747.

Container imageDigestPackageFixed in
quay.io/devtron/argocd-cert-refresh:v102b6db27eaf3d
github.com/docker/distribution@v2.8.1+incompatible
no fix listed

Open the chart page →

14,709
argo-workflowdevtron-labs0.1.61 of 1See more

argo-workflow devtron-labs 0.1.6

1 of the 1 container images this version deploys carry CVE-2026-85747.

Container imageDigestPackageFixed in
quay.io/argoproj/workflow-controller:v3.4.7f0c6fba81a24
github.com/docker/distribution@v2.8.1+incompatible
no fix listed

Open the chart page →

2,345
clairdevtron-labs0.1.141 of 2See more

clair devtron-labs 0.1.14

1 of the 2 container images this version deploys carry CVE-2026-85747.

Container imageDigestPackageFixed in
quay.io/devtron/clair:4.3.675fb847ac045
github.com/docker/distribution@v2.7.1+incompatible
no fix listed

Open the chart page →

8,148
devtron-enterprisedevtron-labs48.0.03 of 28See more

devtron-enterprise devtron-labs 48.0.0

3 of the 28 container images this version deploys carry CVE-2026-85747.

Container imageDigestPackageFixed in
quay.io/devtron/image-scanner:94237c18-109-3942098580969b333
github.com/docker/distribution@v2.8.3+incompatible
no fix listed
quay.io/devtron/inception:7beef376-948-313784c3b91bebd3d
github.com/docker/distribution@v2.7.1+incompatible
no fix listed
quay.io/devtron/kubectl:latest2ad610626658
github.com/docker/distribution@v2.8.1+incompatible
no fix listed

Open the chart page →

90,212
devtron-in-clustercddevtron-labs0.10.21 of 2See more

devtron-in-clustercd devtron-labs 0.10.2

1 of the 2 container images this version deploys carry CVE-2026-85747.

Container imageDigestPackageFixed in
quay.io/devtron/kubewatch:49f906a5-419-14814eec0305b594c
github.com/docker/distribution@v2.8.2+incompatible
no fix listed

Open the chart page →

7,030
devtron-logs-dumpdevtron-labs0.1.01 of 1See more

devtron-logs-dump devtron-labs 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-85747.

Container imageDigestPackageFixed in
quay.io/devtron/k8s-utils:807ca3c2-488-14005f296c2ec5db7
github.com/docker/distribution@v2.8.1+incompatible
no fix listed

Open the chart page →

5,962
devtron-operatordevtron-labs0.23.32 of 11See more

devtron-operator devtron-labs 0.23.3

2 of the 11 container images this version deploys carry CVE-2026-85747.

Container imageDigestPackageFixed in
quay.io/devtron/hyperion:0874dcaf-280-3928701d5d8c4cecb
github.com/docker/distribution@v2.8.2+incompatible
no fix listed
quay.io/devtron/kubectl:latest2ad610626658
github.com/docker/distribution@v2.8.1+incompatible
no fix listed

Open the chart page →

42,853
kube-prometheus-stackdevtron-labs19.3.01 of 6See more

kube-prometheus-stack devtron-labs 19.3.0

1 of the 6 container images this version deploys carry CVE-2026-85747.

Container imageDigestPackageFixed in
quay.io/prometheus-operator/prometheus-operator:v0.50.0ab4f480f2cc6
github.com/docker/distribution@v2.7.1+incompatible
no fix listed

Open the chart page →

12,276
securitydevtron-labs0.2.21 of 1See more

security devtron-labs 0.2.2

1 of the 1 container images this version deploys carry CVE-2026-85747.

Container imageDigestPackageFixed in
quay.io/devtron/image-scanner:b278f42b-334-1111988c64b1b6ec8
github.com/docker/distribution@v2.7.1+incompatible
no fix listed

Open the chart page →

3,540
nova-exporterdjjudas21Verified publisher0.1.161 of 1See more

nova-exporter djjudas21 0.1.16

1 of the 1 container images this version deploys carry CVE-2026-85747.

Container imageDigestPackageFixed in
djjudas21/nova-exporter:0.0.10e9094580885c
github.com/docker/distribution@v2.8.3+incompatible
no fix listed

Open the chart page →

1,987
docker-authdocker-auth1.14.01 of 1See more

docker-auth docker-auth 1.14.0

1 of the 1 container images this version deploys carry CVE-2026-85747.

Container imageDigestPackageFixed in
cesanta/docker_auth:1.14.098e0307e0d2d
github.com/docker/distribution@v2.8.2-beta.1+incompatible
no fix listed

Open the chart page →

2,054
docparserdocparser0.1.01 of 4See more

docparser docparser 0.1.0

1 of the 4 container images this version deploys carry CVE-2026-85747.

Container imageDigestPackageFixed in
conduction/docparser-php:devb6f95c8ead7d
github.com/docker/distribution@v0.0.0-20191216044856-a8371794149d
no fix listed

Open the chart page →

11,064
furan2dollarshaveclubVerified publisher0.2.01 of 1See more

furan2 dollarshaveclub 0.2.0

1 of the 1 container images this version deploys carry CVE-2026-85747.

Container imageDigestPackageFixed in
dollarshaveclub/furan2:master14a257836529
github.com/docker/distribution@v2.7.1+incompatible
no fix listed

Open the chart page →

4,230
k8s-crondoubanVerified publisher0.2.01 of 1See more

k8s-cron douban 0.2.0

1 of the 1 container images this version deploys carry CVE-2026-85747.

Container imageDigestPackageFixed in
alpine/k8s:1.28.2fc059f056ad0
github.com/docker/distribution@v2.8.2+incompatible
no fix listed

Open the chart page →

4,564
overlorddoubanVerified publisher0.2.21 of 1See more

overlord douban 0.2.2

1 of the 1 container images this version deploys carry CVE-2026-85747.

Container imageDigestPackageFixed in
douz/overlord:latestf2bc7fc068c1
github.com/docker/distribution@v2.7.1+incompatible
no fix listed

Open the chart page →

5,750
drogue-cloud-examplesdrogue-iotVerified publisher0.7.111 of 6See more

drogue-cloud-examples drogue-iot 0.7.11

1 of the 6 container images this version deploys carry CVE-2026-85747.

Container imageDigestPackageFixed in
ghcr.io/ctron/kubectl:1.25e37d61b5277c
github.com/docker/distribution@v2.8.1+incompatible
no fix listed

Open the chart page →

35,192
drogue-cloud-metricsdrogue-iotVerified publisher0.7.111 of 8See more

drogue-cloud-metrics drogue-iot 0.7.11

1 of the 8 container images this version deploys carry CVE-2026-85747.

Container imageDigestPackageFixed in
quay.io/prometheus/prometheus:v2.26.038d40a760569
github.com/docker/distribution@v2.7.1+incompatible
no fix listed

Open the chart page →

20,745
temporaldtrdnk-helm-chartsVerified publisher0.35.01 of 13See more

temporal dtrdnk-helm-charts 0.35.0

1 of the 13 container images this version deploys carry CVE-2026-85747.

Container imageDigestPackageFixed in
quay.io/prometheus/prometheus:v2.31.1a8779cfe553e
github.com/docker/distribution@v2.7.1+incompatible
no fix listed

Open the chart page →

28,791
eav-componenteav-component1.0.01 of 3See more

eav-component eav-component 1.0.0

1 of the 3 container images this version deploys carry CVE-2026-85747.

Container imageDigestPackageFixed in
ghcr.io/conductionnl/eav-component-php:latest24bbca4a52a8
github.com/docker/distribution@v0.0.0-20191216044856-a8371794149d
no fix listed

Open the chart page →

9,225
openfaas2eclipse-aeriosVerified publisher12.0.52 of 6See more

openfaas2 eclipse-aerios 12.0.5

2 of the 6 container images this version deploys carry CVE-2026-85747.

Container imageDigestPackageFixed in
ghcr.io/openfaas/faas-netes:0.18.1224431adc8e2d
github.com/docker/distribution@v2.8.3+incompatible
no fix listed
ghcr.io/openfaas/gateway:0.27.1382b15393116e
github.com/docker/distribution@v2.8.3+incompatible
no fix listed

Open the chart page →

10,319
education-componenteducation-component1.0.01 of 3See more

education-component education-component 1.0.0

1 of the 3 container images this version deploys carry CVE-2026-85747.

Container imageDigestPackageFixed in
ghcr.io/conductionnl/education-component-php:latestda6b05a1a601
github.com/docker/distribution@v0.0.0-20191216044856-a8371794149d
no fix listed

Open the chart page →

9,402
eherkenning-uieherkenning-ui1.0.01 of 3See more

eherkenning-ui eherkenning-ui 1.0.0

1 of the 3 container images this version deploys carry CVE-2026-85747.

Container imageDigestPackageFixed in
ghcr.io/conductionnl/eherkenning-ui-php:latestdeed102b4255
github.com/docker/distribution@v0.0.0-20191216044856-a8371794149d
no fix listed

Open the chart page →

9,547
kube-ecp-stackemqx-operator2.5.11 of 16See more

kube-ecp-stack emqx-operator 2.5.1

1 of the 16 container images this version deploys carry CVE-2026-85747.

Container imageDigestPackageFixed in
library/telegraf:1.27507a3eecf809
github.com/docker/distribution@v2.8.2+incompatible
no fix listed

Open the chart page →

31,597
eoapi-supporteoapiVerified publisher0.1.72 of 7See more

eoapi-support eoapi 0.1.7

2 of the 7 container images this version deploys carry CVE-2026-85747.

Container imageDigestPackageFixed in
quay.io/prometheus-operator/prometheus-config-reloader:v0.67.014feefde1b80
github.com/docker/distribution@v2.8.2+incompatible
no fix listed
quay.io/prometheus/prometheus:v2.47.0c5dd35038287
github.com/docker/distribution@v2.8.2+incompatible
no fix listed

Open the chart page →

13,046
edp-headlampepmdedpVerified publisher0.25.01 of 1See more

edp-headlamp epmdedp 0.25.0

1 of the 1 container images this version deploys carry CVE-2026-85747.

Container imageDigestPackageFixed in
epamedp/edp-headlamp:0.25.093417e18bb1a
github.com/docker/distribution@v2.8.3+incompatible
no fix listed

Open the chart page →

1,889
syncoor-serverethereum-helm-chartsVerified publisher0.0.11 of 1See more

syncoor-server ethereum-helm-charts 0.0.1

1 of the 1 container images this version deploys carry CVE-2026-85747.

Container imageDigestPackageFixed in
ghcr.io/ethpandaops/syncoor:master233aa9808fc7
github.com/docker/distribution@v2.8.3+incompatible
no fix listed

Open the chart page →

1,472
faasnetfaasnet0.0.41 of 5See more

faasnet faasnet 0.0.4

1 of the 5 container images this version deploys carry CVE-2026-85747.

Container imageDigestPackageFixed in
simpleidserver/faasprometheus:0.0.425e378d57d78
github.com/docker/distribution@v2.7.1+incompatible
no fix listed

Open the chart page →

10,727
skopeo-syncfairwinds-incubator0.3.11 of 1See more

skopeo-sync fairwinds-incubator 0.3.1

1 of the 1 container images this version deploys carry CVE-2026-85747.

Container imageDigestPackageFixed in
quay.io/skopeo/stable:v1.134853591bd1d2
github.com/docker/distribution@v2.8.2+incompatible
no fix listed

Open the chart page →

2,480

Container images carrying it

634 by charts deploying them

A fixed version is listed for 1 of the 2 affected packages.

Container imageDigestPackageFixed inUsed by
quay.io/operator-framework/catalogd:v1.8.06ff40fa6257f
github.com/docker/distribution@v2.8.3+incompatible
no fix listed
1
quay.io/operator-framework/olm1b6002156f56
github.com/docker/distribution@v2.8.2+incompatible
no fix listed
1
quay.io/operator-framework/olm:master39081bf0c4a9
github.com/docker/distribution@v2.8.1+incompatible
no fix listed
1
quay.io/operator-framework/olm40d0363f4aa6
github.com/docker/distribution@v2.8.3+incompatible
no fix listed
1
quay.io/operator-framework/olm:v0.46.04404599eb7b7
github.com/docker/distribution@v2.8.3+incompatible
no fix listed
1
quay.io/operator-framework/olmf9ea8cef95ac
github.com/docker/distribution@v2.8.1+incompatible
no fix listed
1
quay.io/operator-framework/operator-controller:v1.8.0bca5dfcc67ca
github.com/docker/distribution@v2.8.3+incompatible
no fix listed
1
quay.io/opsmxpublic/create-secret:v4.0.4defc3263e0e9
github.com/docker/distribution@v2.8.1+incompatible
no fix listed
1
quay.io/opstree/k8s-vault-webhook:2.063b67ffcdb84
github.com/docker/distribution@v0.0.0-20171011171712-7484e51bf6af
no fix listed
1
quay.io/projectquay/clair:4.9.023329c3368e4
github.com/docker/distribution@v2.8.3+incompatible
no fix listed
1
quay.io/projectquay/clair:4.7.28d38ffa8fad7
github.com/docker/distribution@v2.8.1+incompatible
no fix listed
1
quay.io/prometheus-operator/prometheus-operator:v0.57.0a2d502c204f9
github.com/docker/distribution@v2.8.1+incompatible
no fix listed
1
quay.io/prometheus-operator/prometheus-operator:v0.54.0be2aef39a2f8
github.com/docker/distribution@v2.7.1+incompatible
no fix listed
1
quay.io/prometheus-operator/prometheus-operator:v0.61.1cd7d1a82ef00
github.com/docker/distribution@v2.8.1+incompatible
no fix listed
1
quay.io/prometheus/prometheus:v2.39.14748e26f9369
github.com/docker/distribution@v2.7.1+incompatible
no fix listed
1
quay.io/prometheus/prometheus:v2.37.056e7f18e05dd
github.com/docker/distribution@v2.7.1+incompatible
no fix listed
1
quay.io/prometheus/prometheus:v2.33.591100b06e86d
github.com/docker/distribution@v2.7.1+incompatible
no fix listed
1
quay.io/prometheus/prometheus:v2.34.0b37103e03399
github.com/docker/distribution@v2.7.1+incompatible
no fix listed
1
quay.io/redhat-appstudio/appstudio-utils:dbbdd82734232e6289e8fbae5b4c858481a7c0577b4202c25b67
github.com/docker/distribution@v2.8.2+incompatible
no fix listed
1
quay.io/rhdh/rhdh-hub-rhel9:lateste992092fcc9b
github.com/docker/distribution@v2.8.3+incompatible
no fix listed
1
quay.io/rht-labs/stack-do500:3.0.86ba82beff18e
github.com/docker/distribution@v2.7.1+incompatible
no fix listed
1
quay.io/skopeo/stable:v1.134853591bd1d2
github.com/docker/distribution@v2.8.2+incompatible
no fix listed
1
quay.io/solo-io/discovery:0.0.0-fork5b62aaade3c9
github.com/docker/distribution@v2.7.1+incompatible
no fix listed
1
quay.io/solo-io/gloo:0.0.0-fork9a6c84560d44
github.com/docker/distribution@v2.7.1+incompatible
no fix listed
1
registry.gitlab.com/bitspur/rock8s/images/kube-commands:3.1880ef8ceffc92
github.com/docker/distribution@v2.8.2+incompatible
no fix listed
1
registry.gitlab.com/gitlab-org/build/cng/gitlab-container-registry:v4.42.0-gitlab4fed422a7637
github.com/docker/distribution@v0.0.0-20260924080132-64ce589791cc
no fix listed
1
registry.gitlab.com/gitlab-org/cloud-native/gitlab-operator:0.5.136b19b72120e
github.com/docker/distribution@v2.7.1+incompatible
no fix listed
1
registry.gitlab.com/xrow-public/ci-tools/tools:main90a7a94db2b0
github.com/docker/distribution@v2.8.3+incompatible
no fix listed
1
registry.k8s.io/kube-apiserver:v1.25.0f6902791fb9a
github.com/docker/distribution@v2.8.1+incompatible
no fix listed
1
registry.k8s.io/kube-controller-manager:v1.25.066ce7d460e53
github.com/docker/distribution@v2.8.1+incompatible
no fix listed
1
registry.k8s.io/kube-scheduler:v1.26.110684e23172d9
github.com/docker/distribution@v2.8.1+incompatible
no fix listed
1
registry.k8s.io/kube-scheduler:v1.28.73ae5620a33bb
github.com/docker/distribution@v2.8.2+incompatible
no fix listed
1
registry.k8s.io/kube-scheduler:v1.28.1146cf7475c8da
github.com/docker/distribution@v2.8.2+incompatible
no fix listed
1
registry.k8s.io/kube-scheduler:v1.25.09330c53feca7
github.com/docker/distribution@v2.8.1+incompatible
no fix listed
1

syft 1.42.1 · advisories as of 16 Oct 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.