StackRadar

CVE-2026-85747

Medium

Advisory

Published 15 Oct 2026In the index since 16 Oct 2026
Severity
Medium
worst across findings
CVSS
6.8
base score, highest
EPSS
0.002
10th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
647
of 18,137 indexed, latest versions
Container images
634
deployed by those charts
Fix available
1 of 2
affected packages

Distribution: Client `manifests.Get()` does not verify returned content against requested digest

Carried by container images the latest versions of 647 of 18,137 indexed charts deploy, on 634 images.

Affected packageAffected versionsFixed inImages
github.com/docker/distributiongolangv0.0.0-20171011171712-7484e51bf6af, v0.0.0-20191216044856-a8371794149d, v0.0.0-20260602055908-11540eae06cb+dirty, v0.0.0-20260701071724-493dca9a81a8+dirty+12 moreno fix listed624
github.com/distribution/distribution/v3golangv0.0.0-20250402055438-9ed95e736522, v3.0.0, v3.0.0-20210316161203-a01c71e2477e, v3.0.0-20220526142353-ffbd94cbe269+9 more3.1.236
OSV records
GHSA-685w-q87j-wqw3
Trending
Rank 42 in indexed charts, since 16 Oct 2026. See the ranking →

Charts affected

647 by stars
ChartLatestAffected imagesRadar Score
panproto-application-nldesign0.1.01 of 5See more

pan proto-application-nldesign 0.1.0

1 of the 5 container images this version deploys carry CVE-2026-85747.

Container imageDigestPackageFixed in
conduction/pan-php:dev24f03c57568f
github.com/docker/distribution@v0.0.0-20191216044856-a8371794149d
no fix listed

Open the chart page →

11,388
proto-component-commongroundproto-component-commonground1.0.01 of 3See more

proto-component-commonground proto-component-commonground 1.0.0

1 of the 3 container images this version deploys carry CVE-2026-85747.

Container imageDigestPackageFixed in
ghcr.io/conductionnl/proto-component-commonground-php:latesteb36ead1954e
github.com/docker/distribution@v0.0.0-20191216044856-a8371794149d
no fix listed

Open the chart page →

9,547
loki-stackpyalive-cdmswebappVerified publisher2.6.51 of 4See more

loki-stack pyalive-cdmswebapp 2.6.5

1 of the 4 container images this version deploys carry CVE-2026-85747.

Container imageDigestPackageFixed in
grafana/promtail:2.4.2626900031c4e
github.com/docker/distribution@v2.7.1+incompatible
no fix listed

Open the chart page →

9,012
argo-workflowsquench-argo-workflowsVerified publisher0.0.81 of 1See more

argo-workflows quench-argo-workflows 0.0.8

1 of the 1 container images this version deploys carry CVE-2026-85747.

Container imageDigestPackageFixed in
ghcr.io/quenchworks/images/argo-workflowsdigest-pinned24498f85eed1
github.com/docker/distribution@v2.8.3+incompatible
no fix listed

Open the chart page →

17
concoursequench-concourseVerified publisher0.0.81 of 3See more

concourse quench-concourse 0.0.8

1 of the 3 container images this version deploys carry CVE-2026-85747.

Container imageDigestPackageFixed in
ghcr.io/quenchworks/images/concoursedigest-pinned755461ea934b
github.com/docker/distribution@v2.8.3+incompatible
no fix listed

Open the chart page →

348
connaisseurquench-connaisseurVerified publisher0.0.31 of 1See more

connaisseur quench-connaisseur 0.0.3

1 of the 1 container images this version deploys carry CVE-2026-85747.

Container imageDigestPackageFixed in
ghcr.io/quenchworks/images/connaisseurdigest-pinnedb88ae556af26
github.com/docker/distribution@v2.8.3+incompatible
no fix listed

Open the chart page →

65
gitops-stackquench-gitops-stackVerified publisher0.0.151 of 5See more

gitops-stack quench-gitops-stack 0.0.15

1 of the 5 container images this version deploys carry CVE-2026-85747.

Container imageDigestPackageFixed in
ghcr.io/quenchworks/images/argo-workflowsdigest-pinned24498f85eed1
github.com/docker/distribution@v2.8.3+incompatible
no fix listed

Open the chart page →

236
harborquench-harborVerified publisher0.0.441 of 9See more

harbor quench-harbor 0.0.44

1 of the 9 container images this version deploys carry CVE-2026-85747.

Container imageDigestPackageFixed in
ghcr.io/quenchworks/images/harbor-registrydigest-pinnedc75b5434d4dc
github.com/docker/distribution@v0.0.0-20260602055908-11540eae06cb+dirty
no fix listed

Open the chart page →

589
kubescape-operatorquench-kubescape-operatorVerified publisher0.0.93 of 5See more

kubescape-operator quench-kubescape-operator 0.0.9

3 of the 5 container images this version deploys carry CVE-2026-85747.

Container imageDigestPackageFixed in
ghcr.io/quenchworks/images/kubescapedigest-pinneda624c51217ea
github.com/docker/distribution@v2.8.3+incompatible
no fix listed
ghcr.io/quenchworks/images/kubescape-operatordigest-pinnedb861c9a1b694
github.com/docker/distribution@v2.8.3+incompatible
no fix listed
ghcr.io/quenchworks/images/kubevulndigest-pinned1a91383dc427
github.com/docker/distribution@v2.8.3+incompatible
no fix listed

Open the chart page →

736
vclusterquench-vclusterVerified publisher0.0.51 of 1See more

vcluster quench-vcluster 0.0.5

1 of the 1 container images this version deploys carry CVE-2026-85747.

Container imageDigestPackageFixed in
ghcr.io/quenchworks/images/vclusterdigest-pinned77ba2823e2fe
github.com/docker/distribution@v2.8.3+incompatible
no fix listed

Open the chart page →

159
rad-pluginsradOfficialVerified publisher2.4.151 of 5See more

rad-plugins rad 2.4.15

1 of the 5 container images this version deploys carry CVE-2026-85747.

Container imageDigestPackageFixed in
public.ecr.aws/n8h5y2v5/rad-security/rad-sbom:v1.1.710f5aeaf1a77e
github.com/docker/distribution@v2.8.3+incompatible
no fix listed

Open the chart page →

1,121
rancher-auto-registerrancher-auto-registerVerified publisher0.1.01 of 1See more

rancher-auto-register rancher-auto-register 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-85747.

Container imageDigestPackageFixed in
registry.gitlab.com/xrow-public/ci-tools/tools:main90a7a94db2b0
github.com/docker/distribution@v2.8.3+incompatible
no fix listed

Open the chart page →

2,562
ansible-automation-platformredhat-cop0.0.91 of 1See more

ansible-automation-platform redhat-cop 0.0.9

1 of the 1 container images this version deploys carry CVE-2026-85747.

Container imageDigestPackageFixed in
quay.io/openshift/origin-cli:4.7464a3af4dfe0
github.com/docker/distribution@v2.7.1+incompatible
no fix listed

Open the chart page →

16,714
argocd-operatorredhat-cop1.2.21 of 1See more

argocd-operator redhat-cop 1.2.2

1 of the 1 container images this version deploys carry CVE-2026-85747.

Container imageDigestPackageFixed in
quay.io/openshift/origin-cli:4.7464a3af4dfe0
github.com/docker/distribution@v2.7.1+incompatible
no fix listed

Open the chart page →

16,714
gitops-operatorredhat-cop0.10.61 of 1See more

gitops-operator redhat-cop 0.10.6

1 of the 1 container images this version deploys carry CVE-2026-85747.

Container imageDigestPackageFixed in
quay.io/openshift/origin-cli:latest486bf8e8f5b5
github.com/distribution/distribution/v3@v3.0.0-20230519140516-983358f8e250
3.1.2

Open the chart page →

1,617
ploigosredhat-cop0.0.92 of 2See more

ploigos redhat-cop 0.0.9

2 of the 2 container images this version deploys carry CVE-2026-85747.

Container imageDigestPackageFixed in
quay.io/openshift/origin-cli:latest486bf8e8f5b5
github.com/distribution/distribution/v3@v3.0.0-20230519140516-983358f8e250
3.1.2
quay.io/openshift/origin-cli:4.66722d5041b47
github.com/docker/distribution@v2.7.1+incompatible
no fix listed

Open the chart page →

14,170
sonatype-nexusredhat-cop1.1.131 of 2See more

sonatype-nexus redhat-cop 1.1.13

1 of the 2 container images this version deploys carry CVE-2026-85747.

Container imageDigestPackageFixed in
quay.io/openshift/origin-jenkins-agent-base:latestc241c971aef8
github.com/distribution/distribution/v3@v3.0.0-20230519140516-983358f8e250
3.1.2

Open the chart page →

17,370
stackrox-chartredhat-cop0.0.101 of 1See more

stackrox-chart redhat-cop 0.0.10

1 of the 1 container images this version deploys carry CVE-2026-85747.

Container imageDigestPackageFixed in
quay.io/rht-labs/stack-do500:3.0.86ba82beff18e
github.com/docker/distribution@v2.7.1+incompatible
no fix listed

Open the chart page →

31,361
retromretsamedocVerified publisher2026.2.51 of 1See more

retrom retsamedoc 2026.2.5

1 of the 1 container images this version deploys carry CVE-2026-85747.

Container imageDigestPackageFixed in
ghcr.io/jmberesford/retrom-service:retrom-v0.7.144d763d58f11d
github.com/docker/distribution@v2.8.3+incompatible
no fix listed

Open the chart page →

8,520
review-componentreview-component1.0.01 of 3See more

review-component review-component 1.0.0

1 of the 3 container images this version deploys carry CVE-2026-85747.

Container imageDigestPackageFixed in
ghcr.io/conductionnl/review-component-php:latestafe623824b82
github.com/docker/distribution@v0.0.0-20191216044856-a8371794149d
no fix listed

Open the chart page →

9,505
krr-enforcerrobusta0.3.51 of 2See more

krr-enforcer robusta 0.3.5

1 of the 2 container images this version deploys carry CVE-2026-85747.

Container imageDigestPackageFixed in
alpine/k8s:1.30.0bd01dae02676
github.com/docker/distribution@v2.8.2+incompatible
no fix listed

Open the chart page →

4,885
gitlab-operatorrock8sVerified publisher0.7.01 of 2See more

gitlab-operator rock8s 0.7.0

1 of the 2 container images this version deploys carry CVE-2026-85747.

Container imageDigestPackageFixed in
registry.gitlab.com/gitlab-org/cloud-native/gitlab-operator:0.5.136b19b72120e
github.com/docker/distribution@v2.7.1+incompatible
no fix listed

Open the chart page →

6,684
mailserverrock8sVerified publisher0.1.21 of 1See more

mailserver rock8s 0.1.2

1 of the 1 container images this version deploys carry CVE-2026-85747.

Container imageDigestPackageFixed in
registry.gitlab.com/bitspur/rock8s/images/kube-commands:3.1880ef8ceffc92
github.com/docker/distribution@v2.8.2+incompatible
no fix listed

Open the chart page →

2,699
ai-agentromholdings0.0.11 of 1See more

ai-agent romholdings 0.0.1

1 of the 1 container images this version deploys carry CVE-2026-85747.

Container imageDigestPackageFixed in
quay.io/devtron/ai-agent:0.0.16545dac92173
github.com/docker/distribution@v2.8.3+incompatible
no fix listed

Open the chart page →

11,152
argocdromholdings1.8.11 of 3See more

argocd romholdings 1.8.1

1 of the 3 container images this version deploys carry CVE-2026-85747.

Container imageDigestPackageFixed in
argoproj/argocd:v1.8.1830e86cacefd
github.com/docker/distribution@v2.7.1+incompatible
no fix listed

Open the chart page →

14,181
argocd-certificate-refreshromholdings0.10.81 of 1See more

argocd-certificate-refresh romholdings 0.10.8

1 of the 1 container images this version deploys carry CVE-2026-85747.

Container imageDigestPackageFixed in
quay.io/devtron/argocd-cert-refresh:v102b6db27eaf3d
github.com/docker/distribution@v2.8.1+incompatible
no fix listed

Open the chart page →

14,709
argo-workflowromholdings0.1.61 of 1See more

argo-workflow romholdings 0.1.6

1 of the 1 container images this version deploys carry CVE-2026-85747.

Container imageDigestPackageFixed in
quay.io/argoproj/workflow-controller:v3.4.7f0c6fba81a24
github.com/docker/distribution@v2.8.1+incompatible
no fix listed

Open the chart page →

2,345
clairromholdings0.1.141 of 2See more

clair romholdings 0.1.14

1 of the 2 container images this version deploys carry CVE-2026-85747.

Container imageDigestPackageFixed in
quay.io/devtron/clair:4.3.675fb847ac045
github.com/docker/distribution@v2.7.1+incompatible
no fix listed

Open the chart page →

8,148
devtron-enterpriseromholdings48.0.03 of 28See more

devtron-enterprise romholdings 48.0.0

3 of the 28 container images this version deploys carry CVE-2026-85747.

Container imageDigestPackageFixed in
quay.io/devtron/image-scanner:94237c18-109-3942098580969b333
github.com/docker/distribution@v2.8.3+incompatible
no fix listed
quay.io/devtron/inception:7beef376-948-313784c3b91bebd3d
github.com/docker/distribution@v2.7.1+incompatible
no fix listed
quay.io/devtron/kubectl:latest2ad610626658
github.com/docker/distribution@v2.8.1+incompatible
no fix listed

Open the chart page →

90,212
devtron-in-clustercdromholdings0.10.21 of 2See more

devtron-in-clustercd romholdings 0.10.2

1 of the 2 container images this version deploys carry CVE-2026-85747.

Container imageDigestPackageFixed in
quay.io/devtron/kubewatch:49f906a5-419-14814eec0305b594c
github.com/docker/distribution@v2.8.2+incompatible
no fix listed

Open the chart page →

7,030
devtron-logs-dumpromholdings0.1.01 of 1See more

devtron-logs-dump romholdings 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-85747.

Container imageDigestPackageFixed in
quay.io/devtron/k8s-utils:807ca3c2-488-14005f296c2ec5db7
github.com/docker/distribution@v2.8.1+incompatible
no fix listed

Open the chart page →

5,962
devtron-operatorromholdings0.23.32 of 11See more

devtron-operator romholdings 0.23.3

2 of the 11 container images this version deploys carry CVE-2026-85747.

Container imageDigestPackageFixed in
quay.io/devtron/hyperion:0874dcaf-280-3928701d5d8c4cecb
github.com/docker/distribution@v2.8.2+incompatible
no fix listed
quay.io/devtron/kubectl:latest2ad610626658
github.com/docker/distribution@v2.8.1+incompatible
no fix listed

Open the chart page →

42,853
kube-prometheus-stackromholdings19.3.01 of 6See more

kube-prometheus-stack romholdings 19.3.0

1 of the 6 container images this version deploys carry CVE-2026-85747.

Container imageDigestPackageFixed in
quay.io/prometheus-operator/prometheus-operator:v0.50.0ab4f480f2cc6
github.com/docker/distribution@v2.7.1+incompatible
no fix listed

Open the chart page →

12,276
securityromholdings0.2.21 of 1See more

security romholdings 0.2.2

1 of the 1 container images this version deploys carry CVE-2026-85747.

Container imageDigestPackageFixed in
quay.io/devtron/image-scanner:b278f42b-334-1111988c64b1b6ec8
github.com/docker/distribution@v2.7.1+incompatible
no fix listed

Open the chart page →

3,540
spindlerubxkubeVerified publisher0.1.21 of 2See more

spindle rubxkube 0.1.2

1 of the 2 container images this version deploys carry CVE-2026-85747.

Container imageDigestPackageFixed in
library/docker:29.8.1-dind3f3c01aaaebf
github.com/docker/distribution@v2.8.3+incompatible
no fix listed

Open the chart page →

2,014
rybbitrybbit-helm1.3.21 of 7See more

rybbit rybbit-helm 1.3.2

1 of the 7 container images this version deploys carry CVE-2026-85747.

Container imageDigestPackageFixed in
alpine/k8s:1.32.12048f8d9c8cc7
github.com/docker/distribution@v2.8.3+incompatible
no fix listed

Open the chart page →

8,880
prometheussaurabh6-prometheus0.2.01 of 1See more

prometheus saurabh6-prometheus 0.2.0

1 of the 1 container images this version deploys carry CVE-2026-85747.

Container imageDigestPackageFixed in
saurabh6/prometheus_setup:v19d4dbe7c1815
github.com/docker/distribution@v2.7.1+incompatible
no fix listed

Open the chart page →

3,865
opentelemetry-collectorsb-helm-charts0.3.01 of 1See more

opentelemetry-collector sb-helm-charts 0.3.0

1 of the 1 container images this version deploys carry CVE-2026-85747.

Container imageDigestPackageFixed in
otel/opentelemetry-collector-contrib:0.96.07ef2a2ff46b9
github.com/docker/distribution@v2.8.2+incompatible
no fix listed

Open the chart page →

2,444
ed-traefikscaleway-charts0.2.01 of 1See more

ed-traefik scaleway-charts 0.2.0

1 of the 1 container images this version deploys carry CVE-2026-85747.

Container imageDigestPackageFixed in
library/traefik:v1.7.345d47b7bb2546
github.com/docker/distribution@v2.7.1+incompatible
no fix listed

Open the chart page →

3,269
ed-traefik2scaleway-charts0.2.01 of 1See more

ed-traefik2 scaleway-charts 0.2.0

1 of the 1 container images this version deploys carry CVE-2026-85747.

Container imageDigestPackageFixed in
library/traefik:2.5.62f603f8d3abe
github.com/docker/distribution@v2.7.1+incompatible
no fix listed

Open the chart page →

4,314
crproxyschichtelVerified publisher0.1.41 of 1See more

crproxy schichtel 0.1.4

1 of the 1 container images this version deploys carry CVE-2026-85747.

Container imageDigestPackageFixed in
ghcr.io/daocloud/crproxy/crproxy:v0.8.0ee1eb3c9c9a1
github.com/distribution/distribution/v3@v3.0.0-20220907155224-78b9c98c5c31
3.1.2

Open the chart page →

1,965
centralbrainsciencemeshVerified publisher0.0.31 of 5See more

centralbrain sciencemesh 0.0.3

1 of the 5 container images this version deploys carry CVE-2026-85747.

Container imageDigestPackageFixed in
quay.io/prometheus/prometheus:v2.22.1b899dbd1b901
github.com/docker/distribution@v2.7.1+incompatible
no fix listed

Open the chart page →

14,674
hermitcrabseal-ioVerified publisher0.1.41 of 2See more

hermitcrab seal-io 0.1.4

1 of the 2 container images this version deploys carry CVE-2026-85747.

Container imageDigestPackageFixed in
sealio/terraform-deployer:v1.5.7-seal.1b0389d9848a5
github.com/docker/distribution@v2.8.1+incompatible
no fix listed

Open the chart page →

6,463
sigstore-probersigstoreVerified publisher0.3.11 of 1See more

sigstore-prober sigstore 0.3.1

1 of the 1 container images this version deploys carry CVE-2026-85747.

Container imageDigestPackageFixed in
ghcr.io/sigstore/sigstore-probers/prober:v1.0.1d1e914e6d6b9
github.com/docker/distribution@v2.8.3+incompatible
no fix listed

Open the chart page →

908
loggensikalabs0.1.01 of 1See more

loggen sikalabs 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-85747.

Container imageDigestPackageFixed in
sikalabs/slu:v0.72.07bd267f30247
github.com/docker/distribution@v2.8.2+incompatible
no fix listed

Open the chart page →

3,091
metrics-generatorsikalabs0.2.01 of 1See more

metrics-generator sikalabs 0.2.0

1 of the 1 container images this version deploys carry CVE-2026-85747.

Container imageDigestPackageFixed in
sikalabs/slu:v0.34.0fdc0c6711add
github.com/docker/distribution@v0.0.0-20171011171712-7484e51bf6af
no fix listed

Open the chart page →

3,692
olmsikalabs0.3.01 of 2See more

olm sikalabs 0.3.0

1 of the 2 container images this version deploys carry CVE-2026-85747.

Container imageDigestPackageFixed in
quay.io/operator-framework/olmdigest-pinned40d0363f4aa6
github.com/docker/distribution@v2.8.3+incompatible
no fix listed

Open the chart page →

2,026
sikalabs-harbor-master-snapshotsikalabs2023.6.203 of 8See more

sikalabs-harbor-master-snapshot sikalabs 2023.6.20

3 of the 8 container images this version deploys carry CVE-2026-85747.

Container imageDigestPackageFixed in
goharbor/harbor-registryctl:devca0765d1c0eb
github.com/docker/distribution@v0.0.0-20260921091602-ac7c4cedc2f4+dirty
no fix listed
goharbor/registry-photon:dev2d344e1d870d
github.com/docker/distribution@v0.0.0-20260921091602-ac7c4cedc2f4+dirty
no fix listed
goharbor/trivy-adapter-photon:dev72aa75db0f6c
github.com/docker/distribution@v2.8.2+incompatible
no fix listed

Open the chart page →

1,155
system-upgrade-controllersinextraVerified publisher0.6.11 of 1See more

system-upgrade-controller sinextra 0.6.1

1 of the 1 container images this version deploys carry CVE-2026-85747.

Container imageDigestPackageFixed in
rancher/system-upgrade-controller:v0.19.234fa058fe453
github.com/docker/distribution@v2.8.3+incompatible
no fix listed

Open the chart page →

653
teamcitysinextraVerified publisher1.1.01 of 3See more

teamcity sinextra 1.1.0

1 of the 3 container images this version deploys carry CVE-2026-85747.

Container imageDigestPackageFixed in
library/docker:26.1-dinddd43b430341a
github.com/docker/distribution@v2.8.3+incompatible
no fix listed

Open the chart page →

3,136

Container images carrying it

634 by charts deploying them

A fixed version is listed for 1 of the 2 affected packages.

Container imageDigestPackageFixed inUsed by
istio/pilot:1.24.2-distroless137e44e3d1d2
github.com/docker/distribution@v2.8.3+incompatible
no fix listed
2
istio/proxyv2:1.18.0757d28c24100
github.com/docker/distribution@v2.8.2+incompatible
no fix listed
2
k0sproject/k0s:v1.26.0-k0s.0f04635825d51
github.com/docker/distribution@v2.8.1+incompatible
no fix listed
2
kubernetesui/dashboard:v2.2.0148991563e37
github.com/docker/distribution@v2.7.1+incompatible
no fix listed
2
lachlanevenson/k8s-kubectl:v1.25.4af5cea3f2e40
github.com/docker/distribution@v2.8.1+incompatible
no fix listed
2
library/docker:dind:latest0b6d18a4a222
github.com/docker/distribution@v2.8.3+incompatible
no fix listed
2
library/traefik:v2.57d5a6ae66572
github.com/docker/distribution@v2.7.1+incompatible
no fix listed
2
library/traefik:2.4.8eda951fd29a8
github.com/docker/distribution@v2.7.1+incompatible
no fix listed
2
library/traefik:2.2.8f5af5a5ce17f
github.com/docker/distribution@v2.7.1+incompatible
no fix listed
2
linuxserver/cloud9:latest:version-1.29.245c5fe102ff3
github.com/distribution/distribution/v3@v3.0.0-20210316161203-a01c71e2477e
github.com/docker/distribution@v2.8.0+incompatible
3.1.2
no fix listed
2
longhornio/longhorn-manager:v1.2.3dca34321452c
github.com/docker/distribution@v2.7.1+incompatible
no fix listed
2
otel/opentelemetry-collector-contrib:0.96.07ef2a2ff46b9
github.com/docker/distribution@v2.8.2+incompatible
no fix listed
2
prom/prometheus:v2.37.98176adea328e
github.com/docker/distribution@v2.7.1+incompatible
no fix listed
2
prom/prometheus:v2.48.1a67e5e402ff5
github.com/docker/distribution@v2.8.2+incompatible
no fix listed
2
prom/prometheus:v2.21.0d43417c260e5
github.com/docker/distribution@v2.7.1+incompatible
no fix listed
2
rancher/k3s:v1.26.0-k3s19380f5dbae9a
github.com/docker/distribution@v2.8.1+incompatible
no fix listed
2
uselagoon/docker-host:v3.6.12c89ed939b8b
github.com/docker/distribution@v2.8.3+incompatible
no fix listed
2
xelalex/dregsy:0.4.3574054e1c417
github.com/docker/distribution@v2.8.1+incompatible
no fix listed
2
gcr.io/knative-releases/knative.dev/serving/cmd/controller5b93308a392c
github.com/docker/distribution@v2.8.3+incompatible
no fix listed
2
ghcr.io/appscode/fargocd:v0.1.0c59d775d9a7c
github.com/docker/distribution@v2.8.3+incompatible
no fix listed
2
ghcr.io/appscode/petset:v0.1.093fa0daf603c
github.com/docker/distribution@v2.8.3+incompatible
no fix listed
2
ghcr.io/appscode/service-provider:v0.0.2f6e481386d70
github.com/docker/distribution@v2.8.3+incompatible
no fix listed
2
ghcr.io/containerd/nydus-snapshotter:v0.9.056f8617363b4
github.com/docker/distribution@v2.8.2+incompatible
no fix listed
2
ghcr.io/kubedb/kubedb-autoscaler:v0.53.02cb0dea06e85
github.com/docker/distribution@v2.8.3+incompatible
no fix listed
2
ghcr.io/kubedb/kubedb-autoscaler:v0.51.05d1182ac21f0
github.com/docker/distribution@v2.8.3+incompatible
no fix listed
2
ghcr.io/kubedb/kubedb-crd-manager:v0.21.09506a6cb98d1
github.com/docker/distribution@v2.8.3+incompatible
no fix listed
2
ghcr.io/kubedb/kubedb-crd-manager:v0.23.0a9f457db14c0
github.com/docker/distribution@v2.8.3+incompatible
no fix listed
2
ghcr.io/kubedb/kubedb-ops-manager:v0.55.002322230569a
github.com/docker/distribution@v2.8.3+incompatible
no fix listed
2
ghcr.io/kubedb/kubedb-ops-manager:v0.53.06d4c9fe66e4f
github.com/docker/distribution@v2.8.3+incompatible
no fix listed
2
ghcr.io/kubedb/kubedb-provisioner:v0.68.0dfbe507350f6
github.com/docker/distribution@v2.8.3+incompatible
no fix listed
2
ghcr.io/kubedb/kubedb-provisioner:v0.66.0e7041c3b41e7
github.com/docker/distribution@v2.8.3+incompatible
no fix listed
2
ghcr.io/kubestash/kubestash:v0.29.00686b2a40280
github.com/docker/distribution@v2.8.3+incompatible
no fix listed
2
ghcr.io/kubestash/kubestash:v0.30.04ff37f9863d5
github.com/docker/distribution@v2.8.3+incompatible
no fix listed
2
ghcr.io/parca-dev/parca:v0.20.00d1df8f436f7
github.com/docker/distribution@v2.8.2+incompatible
no fix listed
2
ghcr.io/quenchworks/images/argo-workflows24498f85eed1
github.com/docker/distribution@v2.8.3+incompatible
no fix listed
2
public.ecr.aws/aktosecurity/keelhq-keel:akto_v1.0.0:latest1eb61443d68e
github.com/distribution/distribution/v3@v3.0.0-20230722181636-7b502560cad4
github.com/docker/distribution@v2.8.3+incompatible
3.1.2
no fix listed
2
quay.io/argoproj/argocd:v2.14.115fc69e31c755
github.com/docker/distribution@v2.8.3+incompatible
no fix listed
2
quay.io/jetstack/cert-manager-ctl:v1.11.074611761f052
github.com/docker/distribution@v2.8.1+incompatible
no fix listed
2
quay.io/openshift/origin-cli:4.7464a3af4dfe0
github.com/docker/distribution@v2.7.1+incompatible
no fix listed
2
quay.io/openshift/origin-cli:4.8bb5e052770e5
github.com/docker/distribution@v2.7.1+incompatible
no fix listed
2
quay.io/openshift/origin-cli:lateste7965645fac6
github.com/distribution/distribution/v3@v3.0.0-20230519140516-983358f8e250
3.1.2
2
quay.io/prometheus-operator/prometheus-config-reloader:v0.67.014feefde1b80
github.com/docker/distribution@v2.8.2+incompatible
no fix listed
2
quay.io/prometheus-operator/prometheus-operator:v0.44.0983627001c89
github.com/docker/distribution@v2.7.1+incompatible
no fix listed
2
quay.io/prometheus/prometheus:v2.22.1b899dbd1b901
github.com/docker/distribution@v2.7.1+incompatible
no fix listed
2
quay.io/prometheus/prometheus:v2.47.0c5dd35038287
github.com/docker/distribution@v2.8.2+incompatible
no fix listed
2
quay.io/prometheus/prometheus:v2.36.2df0cd5887887
github.com/docker/distribution@v2.7.1+incompatible
no fix listed
2
registry.k8s.io/kube-apiserver:v1.26.199e1ed9fbc8a
github.com/docker/distribution@v2.8.1+incompatible
no fix listed
2
registry.k8s.io/kube-controller-manager:v1.26.140adecbe3a40
github.com/docker/distribution@v2.8.1+incompatible
no fix listed
2
1dev/server:11.9.0cd5b12fe5471
github.com/docker/distribution@v2.8.3+incompatible
no fix listed
1
agentarea/agentarea-mcp-manager:latest377d326784f9
github.com/docker/distribution@v2.8.3+incompatible
no fix listed
1

syft 1.42.1 · advisories as of 16 Oct 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.