StackRadar

CVE-2026-85747

Medium

Advisory

Published 15 Oct 2026In the index since 16 Oct 2026
Severity
Medium
worst across findings
CVSS
6.8
base score, highest
EPSS
0.002
10th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
647
of 18,137 indexed, latest versions
Container images
634
deployed by those charts
Fix available
1 of 2
affected packages

Distribution: Client `manifests.Get()` does not verify returned content against requested digest

Carried by container images the latest versions of 647 of 18,137 indexed charts deploy, on 634 images.

Affected packageAffected versionsFixed inImages
github.com/docker/distributiongolangv0.0.0-20171011171712-7484e51bf6af, v0.0.0-20191216044856-a8371794149d, v0.0.0-20260602055908-11540eae06cb+dirty, v0.0.0-20260701071724-493dca9a81a8+dirty+12 moreno fix listed624
github.com/distribution/distribution/v3golangv0.0.0-20250402055438-9ed95e736522, v3.0.0, v3.0.0-20210316161203-a01c71e2477e, v3.0.0-20220526142353-ffbd94cbe269+9 more3.1.236
OSV records
GHSA-685w-q87j-wqw3
Trending
Rank 42 in indexed charts, since 16 Oct 2026. See the ranking →

Charts affected

647 by stars
ChartLatestAffected imagesRadar Score
custom-rhcl-consolecustom-rhcl-consoleVerified publisher0.1.21 of 3See more

custom-rhcl-console custom-rhcl-console 0.1.2

1 of the 3 container images this version deploys carry CVE-2026-85747.

Container imageDigestPackageFixed in
quay.io/openshift/origin-cli:latest10fef10863a3
github.com/distribution/distribution/v3@v3.0.0-20230519140516-983358f8e250
3.1.2

Open the chart page →

2,539
jupyterhubd4nVerified publisher3.3.71 of 7See more

jupyterhub d4n 3.3.7

1 of the 7 container images this version deploys carry CVE-2026-85747.

Container imageDigestPackageFixed in
registry.k8s.io/kube-scheduler:v1.28.1146cf7475c8da
github.com/docker/distribution@v2.8.2+incompatible
no fix listed

Open the chart page →

20,139
grafana-agentdandydev-chartsVerified publisher0.19.21 of 1See more

grafana-agent dandydev-charts 0.19.2

1 of the 1 container images this version deploys carry CVE-2026-85747.

Container imageDigestPackageFixed in
grafana/agent:v0.20.0825c09373d27
github.com/docker/distribution@v2.7.1+incompatible
no fix listed

Open the chart page →

4,839
dapr-agentsdapr-agents-devVerified publisher0.1.51 of 31See more

dapr-agents dapr-agents-dev 0.1.5

1 of the 31 container images this version deploys carry CVE-2026-85747.

Container imageDigestPackageFixed in
ghcr.io/kagent-dev/kagent/tools:0.0.13c8882543f693
github.com/docker/distribution@v2.8.3+incompatible
no fix listed

Open the chart page →

32,620
cloudwatch-agent-prometheusdasmeta0.2.21 of 1See more

cloudwatch-agent-prometheus dasmeta 0.2.2

1 of the 1 container images this version deploys carry CVE-2026-85747.

Container imageDigestPackageFixed in
amazon/cloudwatch-agent:1.247350.0b251780e745d1783c93
github.com/docker/distribution@v2.7.1-0.20190205005809-0d3efadf0154+incompatible
no fix listed

Open the chart page →

4,193
adot-exporter-for-eks-on-ec2dasmeta-adot0.15.51 of 1See more

adot-exporter-for-eks-on-ec2 dasmeta-adot 0.15.5

1 of the 1 container images this version deploys carry CVE-2026-85747.

Container imageDigestPackageFixed in
amazon/aws-otel-collector:v0.27.0d8ab0eef5074
github.com/docker/distribution@v2.8.1+incompatible
no fix listed

Open the chart page →

2,746
datadog-csi-driverdatadogVerified publisher0.18.01 of 2See more

datadog-csi-driver datadog 0.18.0

1 of the 2 container images this version deploys carry CVE-2026-85747.

Container imageDigestPackageFixed in
gcr.io/datadoghq/csi-driver:1.4.086c713de81d9
github.com/docker/distribution@v2.8.3+incompatible
no fix listed

Open the chart page →

3,565
agent-helmdatasaker0.1.81 of 6See more

agent-helm datasaker 0.1.8

1 of the 6 container images this version deploys carry CVE-2026-85747.

Container imageDigestPackageFixed in
datasaker/dsk-container-agent:latest08b52999f67b
github.com/docker/distribution@v2.8.2+incompatible
no fix listed

Open the chart page →

11,451
ambassador-agentdatawire1.0.221 of 1See more

ambassador-agent datawire 1.0.22

1 of the 1 container images this version deploys carry CVE-2026-85747.

Container imageDigestPackageFixed in
ambassador/ambassador-agent:1.0.227a1ea0d934fb
github.com/docker/distribution@v2.8.2+incompatible
no fix listed

Open the chart page →

1,658
ambassador-operatordatawire0.3.01 of 1See more

ambassador-operator datawire 0.3.0

1 of the 1 container images this version deploys carry CVE-2026-85747.

Container imageDigestPackageFixed in
datawire/ambassador-operator:v1.3.0f95ae710d75c
github.com/docker/distribution@v2.7.1+incompatible
no fix listed

Open the chart page →

8,906
kyvernodevopstalesVerified publisher2.5.12 of 2See more

kyverno devopstales 2.5.1

2 of the 2 container images this version deploys carry CVE-2026-85747.

Container imageDigestPackageFixed in
ghcr.io/kyverno/kyverno:v1.7.19c73f1841ebc
github.com/docker/distribution@v2.8.0+incompatible
no fix listed
ghcr.io/kyverno/kyvernopre:v1.7.1185d2eebc60c
github.com/docker/distribution@v2.8.0+incompatible
no fix listed

Open the chart page →

6,816
ai-agentdevtron0.0.11 of 1See more

ai-agent devtron 0.0.1

1 of the 1 container images this version deploys carry CVE-2026-85747.

Container imageDigestPackageFixed in
quay.io/devtron/ai-agent:0.0.16545dac92173
github.com/docker/distribution@v2.8.3+incompatible
no fix listed

Open the chart page →

11,152
argocddevtron1.8.11 of 3See more

argocd devtron 1.8.1

1 of the 3 container images this version deploys carry CVE-2026-85747.

Container imageDigestPackageFixed in
argoproj/argocd:v1.8.1830e86cacefd
github.com/docker/distribution@v2.7.1+incompatible
no fix listed

Open the chart page →

14,181
argocd-certificate-refreshdevtron0.10.81 of 1See more

argocd-certificate-refresh devtron 0.10.8

1 of the 1 container images this version deploys carry CVE-2026-85747.

Container imageDigestPackageFixed in
quay.io/devtron/argocd-cert-refresh:v102b6db27eaf3d
github.com/docker/distribution@v2.8.1+incompatible
no fix listed

Open the chart page →

14,709
argo-workflowdevtron0.1.61 of 1See more

argo-workflow devtron 0.1.6

1 of the 1 container images this version deploys carry CVE-2026-85747.

Container imageDigestPackageFixed in
quay.io/argoproj/workflow-controller:v3.4.7f0c6fba81a24
github.com/docker/distribution@v2.8.1+incompatible
no fix listed

Open the chart page →

2,345
devtron-enterprisedevtron48.0.03 of 28See more

devtron-enterprise devtron 48.0.0

3 of the 28 container images this version deploys carry CVE-2026-85747.

Container imageDigestPackageFixed in
quay.io/devtron/image-scanner:94237c18-109-3942098580969b333
github.com/docker/distribution@v2.8.3+incompatible
no fix listed
quay.io/devtron/inception:7beef376-948-313784c3b91bebd3d
github.com/docker/distribution@v2.7.1+incompatible
no fix listed
quay.io/devtron/kubectl:latest2ad610626658
github.com/docker/distribution@v2.8.1+incompatible
no fix listed

Open the chart page →

90,212
devtron-in-clustercddevtron0.10.21 of 2See more

devtron-in-clustercd devtron 0.10.2

1 of the 2 container images this version deploys carry CVE-2026-85747.

Container imageDigestPackageFixed in
quay.io/devtron/kubewatch:49f906a5-419-14814eec0305b594c
github.com/docker/distribution@v2.8.2+incompatible
no fix listed

Open the chart page →

7,030
devtron-logs-dumpdevtron0.1.01 of 1See more

devtron-logs-dump devtron 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-85747.

Container imageDigestPackageFixed in
quay.io/devtron/k8s-utils:807ca3c2-488-14005f296c2ec5db7
github.com/docker/distribution@v2.8.1+incompatible
no fix listed

Open the chart page →

5,962
kube-prometheus-stackdevtron19.3.01 of 6See more

kube-prometheus-stack devtron 19.3.0

1 of the 6 container images this version deploys carry CVE-2026-85747.

Container imageDigestPackageFixed in
quay.io/prometheus-operator/prometheus-operator:v0.50.0ab4f480f2cc6
github.com/docker/distribution@v2.7.1+incompatible
no fix listed

Open the chart page →

12,276
securitydevtron0.2.21 of 1See more

security devtron 0.2.2

1 of the 1 container images this version deploys carry CVE-2026-85747.

Container imageDigestPackageFixed in
quay.io/devtron/image-scanner:b278f42b-334-1111988c64b1b6ec8
github.com/docker/distribution@v2.7.1+incompatible
no fix listed

Open the chart page →

3,540
ai-agentdevtron-labs0.0.11 of 1See more

ai-agent devtron-labs 0.0.1

1 of the 1 container images this version deploys carry CVE-2026-85747.

Container imageDigestPackageFixed in
quay.io/devtron/ai-agent:0.0.16545dac92173
github.com/docker/distribution@v2.8.3+incompatible
no fix listed

Open the chart page →

11,152
argocddevtron-labs1.8.11 of 3See more

argocd devtron-labs 1.8.1

1 of the 3 container images this version deploys carry CVE-2026-85747.

Container imageDigestPackageFixed in
argoproj/argocd:v1.8.1830e86cacefd
github.com/docker/distribution@v2.7.1+incompatible
no fix listed

Open the chart page →

14,181
argocd-certificate-refreshdevtron-labs0.10.81 of 1See more

argocd-certificate-refresh devtron-labs 0.10.8

1 of the 1 container images this version deploys carry CVE-2026-85747.

Container imageDigestPackageFixed in
quay.io/devtron/argocd-cert-refresh:v102b6db27eaf3d
github.com/docker/distribution@v2.8.1+incompatible
no fix listed

Open the chart page →

14,709
argo-workflowdevtron-labs0.1.61 of 1See more

argo-workflow devtron-labs 0.1.6

1 of the 1 container images this version deploys carry CVE-2026-85747.

Container imageDigestPackageFixed in
quay.io/argoproj/workflow-controller:v3.4.7f0c6fba81a24
github.com/docker/distribution@v2.8.1+incompatible
no fix listed

Open the chart page →

2,345
clairdevtron-labs0.1.141 of 2See more

clair devtron-labs 0.1.14

1 of the 2 container images this version deploys carry CVE-2026-85747.

Container imageDigestPackageFixed in
quay.io/devtron/clair:4.3.675fb847ac045
github.com/docker/distribution@v2.7.1+incompatible
no fix listed

Open the chart page →

8,148
devtron-enterprisedevtron-labs48.0.03 of 28See more

devtron-enterprise devtron-labs 48.0.0

3 of the 28 container images this version deploys carry CVE-2026-85747.

Container imageDigestPackageFixed in
quay.io/devtron/image-scanner:94237c18-109-3942098580969b333
github.com/docker/distribution@v2.8.3+incompatible
no fix listed
quay.io/devtron/inception:7beef376-948-313784c3b91bebd3d
github.com/docker/distribution@v2.7.1+incompatible
no fix listed
quay.io/devtron/kubectl:latest2ad610626658
github.com/docker/distribution@v2.8.1+incompatible
no fix listed

Open the chart page →

90,212
devtron-in-clustercddevtron-labs0.10.21 of 2See more

devtron-in-clustercd devtron-labs 0.10.2

1 of the 2 container images this version deploys carry CVE-2026-85747.

Container imageDigestPackageFixed in
quay.io/devtron/kubewatch:49f906a5-419-14814eec0305b594c
github.com/docker/distribution@v2.8.2+incompatible
no fix listed

Open the chart page →

7,030
devtron-logs-dumpdevtron-labs0.1.01 of 1See more

devtron-logs-dump devtron-labs 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-85747.

Container imageDigestPackageFixed in
quay.io/devtron/k8s-utils:807ca3c2-488-14005f296c2ec5db7
github.com/docker/distribution@v2.8.1+incompatible
no fix listed

Open the chart page →

5,962
devtron-operatordevtron-labs0.23.32 of 11See more

devtron-operator devtron-labs 0.23.3

2 of the 11 container images this version deploys carry CVE-2026-85747.

Container imageDigestPackageFixed in
quay.io/devtron/hyperion:0874dcaf-280-3928701d5d8c4cecb
github.com/docker/distribution@v2.8.2+incompatible
no fix listed
quay.io/devtron/kubectl:latest2ad610626658
github.com/docker/distribution@v2.8.1+incompatible
no fix listed

Open the chart page →

42,853
kube-prometheus-stackdevtron-labs19.3.01 of 6See more

kube-prometheus-stack devtron-labs 19.3.0

1 of the 6 container images this version deploys carry CVE-2026-85747.

Container imageDigestPackageFixed in
quay.io/prometheus-operator/prometheus-operator:v0.50.0ab4f480f2cc6
github.com/docker/distribution@v2.7.1+incompatible
no fix listed

Open the chart page →

12,276
securitydevtron-labs0.2.21 of 1See more

security devtron-labs 0.2.2

1 of the 1 container images this version deploys carry CVE-2026-85747.

Container imageDigestPackageFixed in
quay.io/devtron/image-scanner:b278f42b-334-1111988c64b1b6ec8
github.com/docker/distribution@v2.7.1+incompatible
no fix listed

Open the chart page →

3,540
nova-exporterdjjudas21Verified publisher0.1.161 of 1See more

nova-exporter djjudas21 0.1.16

1 of the 1 container images this version deploys carry CVE-2026-85747.

Container imageDigestPackageFixed in
djjudas21/nova-exporter:0.0.10e9094580885c
github.com/docker/distribution@v2.8.3+incompatible
no fix listed

Open the chart page →

1,987
docker-authdocker-auth1.14.01 of 1See more

docker-auth docker-auth 1.14.0

1 of the 1 container images this version deploys carry CVE-2026-85747.

Container imageDigestPackageFixed in
cesanta/docker_auth:1.14.098e0307e0d2d
github.com/docker/distribution@v2.8.2-beta.1+incompatible
no fix listed

Open the chart page →

2,054
docparserdocparser0.1.01 of 4See more

docparser docparser 0.1.0

1 of the 4 container images this version deploys carry CVE-2026-85747.

Container imageDigestPackageFixed in
conduction/docparser-php:devb6f95c8ead7d
github.com/docker/distribution@v0.0.0-20191216044856-a8371794149d
no fix listed

Open the chart page →

11,064
furan2dollarshaveclubVerified publisher0.2.01 of 1See more

furan2 dollarshaveclub 0.2.0

1 of the 1 container images this version deploys carry CVE-2026-85747.

Container imageDigestPackageFixed in
dollarshaveclub/furan2:master14a257836529
github.com/docker/distribution@v2.7.1+incompatible
no fix listed

Open the chart page →

4,230
k8s-crondoubanVerified publisher0.2.01 of 1See more

k8s-cron douban 0.2.0

1 of the 1 container images this version deploys carry CVE-2026-85747.

Container imageDigestPackageFixed in
alpine/k8s:1.28.2fc059f056ad0
github.com/docker/distribution@v2.8.2+incompatible
no fix listed

Open the chart page →

4,564
overlorddoubanVerified publisher0.2.21 of 1See more

overlord douban 0.2.2

1 of the 1 container images this version deploys carry CVE-2026-85747.

Container imageDigestPackageFixed in
douz/overlord:latestf2bc7fc068c1
github.com/docker/distribution@v2.7.1+incompatible
no fix listed

Open the chart page →

5,750
drogue-cloud-examplesdrogue-iotVerified publisher0.7.111 of 6See more

drogue-cloud-examples drogue-iot 0.7.11

1 of the 6 container images this version deploys carry CVE-2026-85747.

Container imageDigestPackageFixed in
ghcr.io/ctron/kubectl:1.25e37d61b5277c
github.com/docker/distribution@v2.8.1+incompatible
no fix listed

Open the chart page →

35,192
drogue-cloud-metricsdrogue-iotVerified publisher0.7.111 of 8See more

drogue-cloud-metrics drogue-iot 0.7.11

1 of the 8 container images this version deploys carry CVE-2026-85747.

Container imageDigestPackageFixed in
quay.io/prometheus/prometheus:v2.26.038d40a760569
github.com/docker/distribution@v2.7.1+incompatible
no fix listed

Open the chart page →

20,745
temporaldtrdnk-helm-chartsVerified publisher0.35.01 of 13See more

temporal dtrdnk-helm-charts 0.35.0

1 of the 13 container images this version deploys carry CVE-2026-85747.

Container imageDigestPackageFixed in
quay.io/prometheus/prometheus:v2.31.1a8779cfe553e
github.com/docker/distribution@v2.7.1+incompatible
no fix listed

Open the chart page →

28,791
eav-componenteav-component1.0.01 of 3See more

eav-component eav-component 1.0.0

1 of the 3 container images this version deploys carry CVE-2026-85747.

Container imageDigestPackageFixed in
ghcr.io/conductionnl/eav-component-php:latest24bbca4a52a8
github.com/docker/distribution@v0.0.0-20191216044856-a8371794149d
no fix listed

Open the chart page →

9,225
openfaas2eclipse-aeriosVerified publisher12.0.52 of 6See more

openfaas2 eclipse-aerios 12.0.5

2 of the 6 container images this version deploys carry CVE-2026-85747.

Container imageDigestPackageFixed in
ghcr.io/openfaas/faas-netes:0.18.1224431adc8e2d
github.com/docker/distribution@v2.8.3+incompatible
no fix listed
ghcr.io/openfaas/gateway:0.27.1382b15393116e
github.com/docker/distribution@v2.8.3+incompatible
no fix listed

Open the chart page →

10,319
education-componenteducation-component1.0.01 of 3See more

education-component education-component 1.0.0

1 of the 3 container images this version deploys carry CVE-2026-85747.

Container imageDigestPackageFixed in
ghcr.io/conductionnl/education-component-php:latestda6b05a1a601
github.com/docker/distribution@v0.0.0-20191216044856-a8371794149d
no fix listed

Open the chart page →

9,402
eherkenning-uieherkenning-ui1.0.01 of 3See more

eherkenning-ui eherkenning-ui 1.0.0

1 of the 3 container images this version deploys carry CVE-2026-85747.

Container imageDigestPackageFixed in
ghcr.io/conductionnl/eherkenning-ui-php:latestdeed102b4255
github.com/docker/distribution@v0.0.0-20191216044856-a8371794149d
no fix listed

Open the chart page →

9,547
kube-ecp-stackemqx-operator2.5.11 of 16See more

kube-ecp-stack emqx-operator 2.5.1

1 of the 16 container images this version deploys carry CVE-2026-85747.

Container imageDigestPackageFixed in
library/telegraf:1.27507a3eecf809
github.com/docker/distribution@v2.8.2+incompatible
no fix listed

Open the chart page →

31,597
eoapi-supporteoapiVerified publisher0.1.72 of 7See more

eoapi-support eoapi 0.1.7

2 of the 7 container images this version deploys carry CVE-2026-85747.

Container imageDigestPackageFixed in
quay.io/prometheus-operator/prometheus-config-reloader:v0.67.014feefde1b80
github.com/docker/distribution@v2.8.2+incompatible
no fix listed
quay.io/prometheus/prometheus:v2.47.0c5dd35038287
github.com/docker/distribution@v2.8.2+incompatible
no fix listed

Open the chart page →

13,046
edp-headlampepmdedpVerified publisher0.25.01 of 1See more

edp-headlamp epmdedp 0.25.0

1 of the 1 container images this version deploys carry CVE-2026-85747.

Container imageDigestPackageFixed in
epamedp/edp-headlamp:0.25.093417e18bb1a
github.com/docker/distribution@v2.8.3+incompatible
no fix listed

Open the chart page →

1,889
syncoor-serverethereum-helm-chartsVerified publisher0.0.11 of 1See more

syncoor-server ethereum-helm-charts 0.0.1

1 of the 1 container images this version deploys carry CVE-2026-85747.

Container imageDigestPackageFixed in
ghcr.io/ethpandaops/syncoor:master233aa9808fc7
github.com/docker/distribution@v2.8.3+incompatible
no fix listed

Open the chart page →

1,472
faasnetfaasnet0.0.41 of 5See more

faasnet faasnet 0.0.4

1 of the 5 container images this version deploys carry CVE-2026-85747.

Container imageDigestPackageFixed in
simpleidserver/faasprometheus:0.0.425e378d57d78
github.com/docker/distribution@v2.7.1+incompatible
no fix listed

Open the chart page →

10,727
skopeo-syncfairwinds-incubator0.3.11 of 1See more

skopeo-sync fairwinds-incubator 0.3.1

1 of the 1 container images this version deploys carry CVE-2026-85747.

Container imageDigestPackageFixed in
quay.io/skopeo/stable:v1.134853591bd1d2
github.com/docker/distribution@v2.8.2+incompatible
no fix listed

Open the chart page →

2,480

Container images carrying it

634 by charts deploying them

A fixed version is listed for 1 of the 2 affected packages.

Container imageDigestPackageFixed inUsed by
istio/pilot:1.24.2-distroless137e44e3d1d2
github.com/docker/distribution@v2.8.3+incompatible
no fix listed
2
istio/proxyv2:1.18.0757d28c24100
github.com/docker/distribution@v2.8.2+incompatible
no fix listed
2
k0sproject/k0s:v1.26.0-k0s.0f04635825d51
github.com/docker/distribution@v2.8.1+incompatible
no fix listed
2
kubernetesui/dashboard:v2.2.0148991563e37
github.com/docker/distribution@v2.7.1+incompatible
no fix listed
2
lachlanevenson/k8s-kubectl:v1.25.4af5cea3f2e40
github.com/docker/distribution@v2.8.1+incompatible
no fix listed
2
library/docker:dind:latest0b6d18a4a222
github.com/docker/distribution@v2.8.3+incompatible
no fix listed
2
library/traefik:v2.57d5a6ae66572
github.com/docker/distribution@v2.7.1+incompatible
no fix listed
2
library/traefik:2.4.8eda951fd29a8
github.com/docker/distribution@v2.7.1+incompatible
no fix listed
2
library/traefik:2.2.8f5af5a5ce17f
github.com/docker/distribution@v2.7.1+incompatible
no fix listed
2
linuxserver/cloud9:latest:version-1.29.245c5fe102ff3
github.com/distribution/distribution/v3@v3.0.0-20210316161203-a01c71e2477e
github.com/docker/distribution@v2.8.0+incompatible
3.1.2
no fix listed
2
longhornio/longhorn-manager:v1.2.3dca34321452c
github.com/docker/distribution@v2.7.1+incompatible
no fix listed
2
otel/opentelemetry-collector-contrib:0.96.07ef2a2ff46b9
github.com/docker/distribution@v2.8.2+incompatible
no fix listed
2
prom/prometheus:v2.37.98176adea328e
github.com/docker/distribution@v2.7.1+incompatible
no fix listed
2
prom/prometheus:v2.48.1a67e5e402ff5
github.com/docker/distribution@v2.8.2+incompatible
no fix listed
2
prom/prometheus:v2.21.0d43417c260e5
github.com/docker/distribution@v2.7.1+incompatible
no fix listed
2
rancher/k3s:v1.26.0-k3s19380f5dbae9a
github.com/docker/distribution@v2.8.1+incompatible
no fix listed
2
uselagoon/docker-host:v3.6.12c89ed939b8b
github.com/docker/distribution@v2.8.3+incompatible
no fix listed
2
xelalex/dregsy:0.4.3574054e1c417
github.com/docker/distribution@v2.8.1+incompatible
no fix listed
2
gcr.io/knative-releases/knative.dev/serving/cmd/controller5b93308a392c
github.com/docker/distribution@v2.8.3+incompatible
no fix listed
2
ghcr.io/appscode/fargocd:v0.1.0c59d775d9a7c
github.com/docker/distribution@v2.8.3+incompatible
no fix listed
2
ghcr.io/appscode/petset:v0.1.093fa0daf603c
github.com/docker/distribution@v2.8.3+incompatible
no fix listed
2
ghcr.io/appscode/service-provider:v0.0.2f6e481386d70
github.com/docker/distribution@v2.8.3+incompatible
no fix listed
2
ghcr.io/containerd/nydus-snapshotter:v0.9.056f8617363b4
github.com/docker/distribution@v2.8.2+incompatible
no fix listed
2
ghcr.io/kubedb/kubedb-autoscaler:v0.53.02cb0dea06e85
github.com/docker/distribution@v2.8.3+incompatible
no fix listed
2
ghcr.io/kubedb/kubedb-autoscaler:v0.51.05d1182ac21f0
github.com/docker/distribution@v2.8.3+incompatible
no fix listed
2
ghcr.io/kubedb/kubedb-crd-manager:v0.21.09506a6cb98d1
github.com/docker/distribution@v2.8.3+incompatible
no fix listed
2
ghcr.io/kubedb/kubedb-crd-manager:v0.23.0a9f457db14c0
github.com/docker/distribution@v2.8.3+incompatible
no fix listed
2
ghcr.io/kubedb/kubedb-ops-manager:v0.55.002322230569a
github.com/docker/distribution@v2.8.3+incompatible
no fix listed
2
ghcr.io/kubedb/kubedb-ops-manager:v0.53.06d4c9fe66e4f
github.com/docker/distribution@v2.8.3+incompatible
no fix listed
2
ghcr.io/kubedb/kubedb-provisioner:v0.68.0dfbe507350f6
github.com/docker/distribution@v2.8.3+incompatible
no fix listed
2
ghcr.io/kubedb/kubedb-provisioner:v0.66.0e7041c3b41e7
github.com/docker/distribution@v2.8.3+incompatible
no fix listed
2
ghcr.io/kubestash/kubestash:v0.29.00686b2a40280
github.com/docker/distribution@v2.8.3+incompatible
no fix listed
2
ghcr.io/kubestash/kubestash:v0.30.04ff37f9863d5
github.com/docker/distribution@v2.8.3+incompatible
no fix listed
2
ghcr.io/parca-dev/parca:v0.20.00d1df8f436f7
github.com/docker/distribution@v2.8.2+incompatible
no fix listed
2
ghcr.io/quenchworks/images/argo-workflows24498f85eed1
github.com/docker/distribution@v2.8.3+incompatible
no fix listed
2
public.ecr.aws/aktosecurity/keelhq-keel:akto_v1.0.0:latest1eb61443d68e
github.com/distribution/distribution/v3@v3.0.0-20230722181636-7b502560cad4
github.com/docker/distribution@v2.8.3+incompatible
3.1.2
no fix listed
2
quay.io/argoproj/argocd:v2.14.115fc69e31c755
github.com/docker/distribution@v2.8.3+incompatible
no fix listed
2
quay.io/jetstack/cert-manager-ctl:v1.11.074611761f052
github.com/docker/distribution@v2.8.1+incompatible
no fix listed
2
quay.io/openshift/origin-cli:4.7464a3af4dfe0
github.com/docker/distribution@v2.7.1+incompatible
no fix listed
2
quay.io/openshift/origin-cli:4.8bb5e052770e5
github.com/docker/distribution@v2.7.1+incompatible
no fix listed
2
quay.io/openshift/origin-cli:lateste7965645fac6
github.com/distribution/distribution/v3@v3.0.0-20230519140516-983358f8e250
3.1.2
2
quay.io/prometheus-operator/prometheus-config-reloader:v0.67.014feefde1b80
github.com/docker/distribution@v2.8.2+incompatible
no fix listed
2
quay.io/prometheus-operator/prometheus-operator:v0.44.0983627001c89
github.com/docker/distribution@v2.7.1+incompatible
no fix listed
2
quay.io/prometheus/prometheus:v2.22.1b899dbd1b901
github.com/docker/distribution@v2.7.1+incompatible
no fix listed
2
quay.io/prometheus/prometheus:v2.47.0c5dd35038287
github.com/docker/distribution@v2.8.2+incompatible
no fix listed
2
quay.io/prometheus/prometheus:v2.36.2df0cd5887887
github.com/docker/distribution@v2.7.1+incompatible
no fix listed
2
registry.k8s.io/kube-apiserver:v1.26.199e1ed9fbc8a
github.com/docker/distribution@v2.8.1+incompatible
no fix listed
2
registry.k8s.io/kube-controller-manager:v1.26.140adecbe3a40
github.com/docker/distribution@v2.8.1+incompatible
no fix listed
2
1dev/server:11.9.0cd5b12fe5471
github.com/docker/distribution@v2.8.3+incompatible
no fix listed
1
agentarea/agentarea-mcp-manager:latest377d326784f9
github.com/docker/distribution@v2.8.3+incompatible
no fix listed
1

syft 1.42.1 · advisories as of 16 Oct 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.