StackRadar

CVE-2026-85747

Medium

Advisory

Published 15 Oct 2026In the index since 16 Oct 2026
Severity
Medium
worst across findings
CVSS
6.8
base score, highest
EPSS
0.002
10th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
647
of 18,137 indexed, latest versions
Container images
634
deployed by those charts
Fix available
1 of 2
affected packages

Distribution: Client `manifests.Get()` does not verify returned content against requested digest

Carried by container images the latest versions of 647 of 18,137 indexed charts deploy, on 634 images.

Affected packageAffected versionsFixed inImages
github.com/docker/distributiongolangv0.0.0-20171011171712-7484e51bf6af, v0.0.0-20191216044856-a8371794149d, v0.0.0-20260602055908-11540eae06cb+dirty, v0.0.0-20260701071724-493dca9a81a8+dirty+12 moreno fix listed624
github.com/distribution/distribution/v3golangv0.0.0-20250402055438-9ed95e736522, v3.0.0, v3.0.0-20210316161203-a01c71e2477e, v3.0.0-20220526142353-ffbd94cbe269+9 more3.1.236
OSV records
GHSA-685w-q87j-wqw3
Trending
Rank 42 in indexed charts, since 16 Oct 2026. See the ranking →

Charts affected

647 by stars
ChartLatestAffected imagesRadar Score
panproto-application-nldesign0.1.01 of 5See more

pan proto-application-nldesign 0.1.0

1 of the 5 container images this version deploys carry CVE-2026-85747.

Container imageDigestPackageFixed in
conduction/pan-php:dev24f03c57568f
github.com/docker/distribution@v0.0.0-20191216044856-a8371794149d
no fix listed

Open the chart page →

11,388
proto-component-commongroundproto-component-commonground1.0.01 of 3See more

proto-component-commonground proto-component-commonground 1.0.0

1 of the 3 container images this version deploys carry CVE-2026-85747.

Container imageDigestPackageFixed in
ghcr.io/conductionnl/proto-component-commonground-php:latesteb36ead1954e
github.com/docker/distribution@v0.0.0-20191216044856-a8371794149d
no fix listed

Open the chart page →

9,547
loki-stackpyalive-cdmswebappVerified publisher2.6.51 of 4See more

loki-stack pyalive-cdmswebapp 2.6.5

1 of the 4 container images this version deploys carry CVE-2026-85747.

Container imageDigestPackageFixed in
grafana/promtail:2.4.2626900031c4e
github.com/docker/distribution@v2.7.1+incompatible
no fix listed

Open the chart page →

9,012
argo-workflowsquench-argo-workflowsVerified publisher0.0.81 of 1See more

argo-workflows quench-argo-workflows 0.0.8

1 of the 1 container images this version deploys carry CVE-2026-85747.

Container imageDigestPackageFixed in
ghcr.io/quenchworks/images/argo-workflowsdigest-pinned24498f85eed1
github.com/docker/distribution@v2.8.3+incompatible
no fix listed

Open the chart page →

17
concoursequench-concourseVerified publisher0.0.81 of 3See more

concourse quench-concourse 0.0.8

1 of the 3 container images this version deploys carry CVE-2026-85747.

Container imageDigestPackageFixed in
ghcr.io/quenchworks/images/concoursedigest-pinned755461ea934b
github.com/docker/distribution@v2.8.3+incompatible
no fix listed

Open the chart page →

348
connaisseurquench-connaisseurVerified publisher0.0.31 of 1See more

connaisseur quench-connaisseur 0.0.3

1 of the 1 container images this version deploys carry CVE-2026-85747.

Container imageDigestPackageFixed in
ghcr.io/quenchworks/images/connaisseurdigest-pinnedb88ae556af26
github.com/docker/distribution@v2.8.3+incompatible
no fix listed

Open the chart page →

65
gitops-stackquench-gitops-stackVerified publisher0.0.151 of 5See more

gitops-stack quench-gitops-stack 0.0.15

1 of the 5 container images this version deploys carry CVE-2026-85747.

Container imageDigestPackageFixed in
ghcr.io/quenchworks/images/argo-workflowsdigest-pinned24498f85eed1
github.com/docker/distribution@v2.8.3+incompatible
no fix listed

Open the chart page →

236
harborquench-harborVerified publisher0.0.441 of 9See more

harbor quench-harbor 0.0.44

1 of the 9 container images this version deploys carry CVE-2026-85747.

Container imageDigestPackageFixed in
ghcr.io/quenchworks/images/harbor-registrydigest-pinnedc75b5434d4dc
github.com/docker/distribution@v0.0.0-20260602055908-11540eae06cb+dirty
no fix listed

Open the chart page →

589
kubescape-operatorquench-kubescape-operatorVerified publisher0.0.93 of 5See more

kubescape-operator quench-kubescape-operator 0.0.9

3 of the 5 container images this version deploys carry CVE-2026-85747.

Container imageDigestPackageFixed in
ghcr.io/quenchworks/images/kubescapedigest-pinneda624c51217ea
github.com/docker/distribution@v2.8.3+incompatible
no fix listed
ghcr.io/quenchworks/images/kubescape-operatordigest-pinnedb861c9a1b694
github.com/docker/distribution@v2.8.3+incompatible
no fix listed
ghcr.io/quenchworks/images/kubevulndigest-pinned1a91383dc427
github.com/docker/distribution@v2.8.3+incompatible
no fix listed

Open the chart page →

736
vclusterquench-vclusterVerified publisher0.0.51 of 1See more

vcluster quench-vcluster 0.0.5

1 of the 1 container images this version deploys carry CVE-2026-85747.

Container imageDigestPackageFixed in
ghcr.io/quenchworks/images/vclusterdigest-pinned77ba2823e2fe
github.com/docker/distribution@v2.8.3+incompatible
no fix listed

Open the chart page →

159
rad-pluginsradOfficialVerified publisher2.4.151 of 5See more

rad-plugins rad 2.4.15

1 of the 5 container images this version deploys carry CVE-2026-85747.

Container imageDigestPackageFixed in
public.ecr.aws/n8h5y2v5/rad-security/rad-sbom:v1.1.710f5aeaf1a77e
github.com/docker/distribution@v2.8.3+incompatible
no fix listed

Open the chart page →

1,121
rancher-auto-registerrancher-auto-registerVerified publisher0.1.01 of 1See more

rancher-auto-register rancher-auto-register 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-85747.

Container imageDigestPackageFixed in
registry.gitlab.com/xrow-public/ci-tools/tools:main90a7a94db2b0
github.com/docker/distribution@v2.8.3+incompatible
no fix listed

Open the chart page →

2,562
ansible-automation-platformredhat-cop0.0.91 of 1See more

ansible-automation-platform redhat-cop 0.0.9

1 of the 1 container images this version deploys carry CVE-2026-85747.

Container imageDigestPackageFixed in
quay.io/openshift/origin-cli:4.7464a3af4dfe0
github.com/docker/distribution@v2.7.1+incompatible
no fix listed

Open the chart page →

16,714
argocd-operatorredhat-cop1.2.21 of 1See more

argocd-operator redhat-cop 1.2.2

1 of the 1 container images this version deploys carry CVE-2026-85747.

Container imageDigestPackageFixed in
quay.io/openshift/origin-cli:4.7464a3af4dfe0
github.com/docker/distribution@v2.7.1+incompatible
no fix listed

Open the chart page →

16,714
gitops-operatorredhat-cop0.10.61 of 1See more

gitops-operator redhat-cop 0.10.6

1 of the 1 container images this version deploys carry CVE-2026-85747.

Container imageDigestPackageFixed in
quay.io/openshift/origin-cli:latest486bf8e8f5b5
github.com/distribution/distribution/v3@v3.0.0-20230519140516-983358f8e250
3.1.2

Open the chart page →

1,617
ploigosredhat-cop0.0.92 of 2See more

ploigos redhat-cop 0.0.9

2 of the 2 container images this version deploys carry CVE-2026-85747.

Container imageDigestPackageFixed in
quay.io/openshift/origin-cli:latest486bf8e8f5b5
github.com/distribution/distribution/v3@v3.0.0-20230519140516-983358f8e250
3.1.2
quay.io/openshift/origin-cli:4.66722d5041b47
github.com/docker/distribution@v2.7.1+incompatible
no fix listed

Open the chart page →

14,170
sonatype-nexusredhat-cop1.1.131 of 2See more

sonatype-nexus redhat-cop 1.1.13

1 of the 2 container images this version deploys carry CVE-2026-85747.

Container imageDigestPackageFixed in
quay.io/openshift/origin-jenkins-agent-base:latestc241c971aef8
github.com/distribution/distribution/v3@v3.0.0-20230519140516-983358f8e250
3.1.2

Open the chart page →

17,370
stackrox-chartredhat-cop0.0.101 of 1See more

stackrox-chart redhat-cop 0.0.10

1 of the 1 container images this version deploys carry CVE-2026-85747.

Container imageDigestPackageFixed in
quay.io/rht-labs/stack-do500:3.0.86ba82beff18e
github.com/docker/distribution@v2.7.1+incompatible
no fix listed

Open the chart page →

31,361
retromretsamedocVerified publisher2026.2.51 of 1See more

retrom retsamedoc 2026.2.5

1 of the 1 container images this version deploys carry CVE-2026-85747.

Container imageDigestPackageFixed in
ghcr.io/jmberesford/retrom-service:retrom-v0.7.144d763d58f11d
github.com/docker/distribution@v2.8.3+incompatible
no fix listed

Open the chart page →

8,520
review-componentreview-component1.0.01 of 3See more

review-component review-component 1.0.0

1 of the 3 container images this version deploys carry CVE-2026-85747.

Container imageDigestPackageFixed in
ghcr.io/conductionnl/review-component-php:latestafe623824b82
github.com/docker/distribution@v0.0.0-20191216044856-a8371794149d
no fix listed

Open the chart page →

9,505
krr-enforcerrobusta0.3.51 of 2See more

krr-enforcer robusta 0.3.5

1 of the 2 container images this version deploys carry CVE-2026-85747.

Container imageDigestPackageFixed in
alpine/k8s:1.30.0bd01dae02676
github.com/docker/distribution@v2.8.2+incompatible
no fix listed

Open the chart page →

4,885
gitlab-operatorrock8sVerified publisher0.7.01 of 2See more

gitlab-operator rock8s 0.7.0

1 of the 2 container images this version deploys carry CVE-2026-85747.

Container imageDigestPackageFixed in
registry.gitlab.com/gitlab-org/cloud-native/gitlab-operator:0.5.136b19b72120e
github.com/docker/distribution@v2.7.1+incompatible
no fix listed

Open the chart page →

6,684
mailserverrock8sVerified publisher0.1.21 of 1See more

mailserver rock8s 0.1.2

1 of the 1 container images this version deploys carry CVE-2026-85747.

Container imageDigestPackageFixed in
registry.gitlab.com/bitspur/rock8s/images/kube-commands:3.1880ef8ceffc92
github.com/docker/distribution@v2.8.2+incompatible
no fix listed

Open the chart page →

2,699
ai-agentromholdings0.0.11 of 1See more

ai-agent romholdings 0.0.1

1 of the 1 container images this version deploys carry CVE-2026-85747.

Container imageDigestPackageFixed in
quay.io/devtron/ai-agent:0.0.16545dac92173
github.com/docker/distribution@v2.8.3+incompatible
no fix listed

Open the chart page →

11,152
argocdromholdings1.8.11 of 3See more

argocd romholdings 1.8.1

1 of the 3 container images this version deploys carry CVE-2026-85747.

Container imageDigestPackageFixed in
argoproj/argocd:v1.8.1830e86cacefd
github.com/docker/distribution@v2.7.1+incompatible
no fix listed

Open the chart page →

14,181
argocd-certificate-refreshromholdings0.10.81 of 1See more

argocd-certificate-refresh romholdings 0.10.8

1 of the 1 container images this version deploys carry CVE-2026-85747.

Container imageDigestPackageFixed in
quay.io/devtron/argocd-cert-refresh:v102b6db27eaf3d
github.com/docker/distribution@v2.8.1+incompatible
no fix listed

Open the chart page →

14,709
argo-workflowromholdings0.1.61 of 1See more

argo-workflow romholdings 0.1.6

1 of the 1 container images this version deploys carry CVE-2026-85747.

Container imageDigestPackageFixed in
quay.io/argoproj/workflow-controller:v3.4.7f0c6fba81a24
github.com/docker/distribution@v2.8.1+incompatible
no fix listed

Open the chart page →

2,345
clairromholdings0.1.141 of 2See more

clair romholdings 0.1.14

1 of the 2 container images this version deploys carry CVE-2026-85747.

Container imageDigestPackageFixed in
quay.io/devtron/clair:4.3.675fb847ac045
github.com/docker/distribution@v2.7.1+incompatible
no fix listed

Open the chart page →

8,148
devtron-enterpriseromholdings48.0.03 of 28See more

devtron-enterprise romholdings 48.0.0

3 of the 28 container images this version deploys carry CVE-2026-85747.

Container imageDigestPackageFixed in
quay.io/devtron/image-scanner:94237c18-109-3942098580969b333
github.com/docker/distribution@v2.8.3+incompatible
no fix listed
quay.io/devtron/inception:7beef376-948-313784c3b91bebd3d
github.com/docker/distribution@v2.7.1+incompatible
no fix listed
quay.io/devtron/kubectl:latest2ad610626658
github.com/docker/distribution@v2.8.1+incompatible
no fix listed

Open the chart page →

90,212
devtron-in-clustercdromholdings0.10.21 of 2See more

devtron-in-clustercd romholdings 0.10.2

1 of the 2 container images this version deploys carry CVE-2026-85747.

Container imageDigestPackageFixed in
quay.io/devtron/kubewatch:49f906a5-419-14814eec0305b594c
github.com/docker/distribution@v2.8.2+incompatible
no fix listed

Open the chart page →

7,030
devtron-logs-dumpromholdings0.1.01 of 1See more

devtron-logs-dump romholdings 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-85747.

Container imageDigestPackageFixed in
quay.io/devtron/k8s-utils:807ca3c2-488-14005f296c2ec5db7
github.com/docker/distribution@v2.8.1+incompatible
no fix listed

Open the chart page →

5,962
devtron-operatorromholdings0.23.32 of 11See more

devtron-operator romholdings 0.23.3

2 of the 11 container images this version deploys carry CVE-2026-85747.

Container imageDigestPackageFixed in
quay.io/devtron/hyperion:0874dcaf-280-3928701d5d8c4cecb
github.com/docker/distribution@v2.8.2+incompatible
no fix listed
quay.io/devtron/kubectl:latest2ad610626658
github.com/docker/distribution@v2.8.1+incompatible
no fix listed

Open the chart page →

42,853
kube-prometheus-stackromholdings19.3.01 of 6See more

kube-prometheus-stack romholdings 19.3.0

1 of the 6 container images this version deploys carry CVE-2026-85747.

Container imageDigestPackageFixed in
quay.io/prometheus-operator/prometheus-operator:v0.50.0ab4f480f2cc6
github.com/docker/distribution@v2.7.1+incompatible
no fix listed

Open the chart page →

12,276
securityromholdings0.2.21 of 1See more

security romholdings 0.2.2

1 of the 1 container images this version deploys carry CVE-2026-85747.

Container imageDigestPackageFixed in
quay.io/devtron/image-scanner:b278f42b-334-1111988c64b1b6ec8
github.com/docker/distribution@v2.7.1+incompatible
no fix listed

Open the chart page →

3,540
spindlerubxkubeVerified publisher0.1.21 of 2See more

spindle rubxkube 0.1.2

1 of the 2 container images this version deploys carry CVE-2026-85747.

Container imageDigestPackageFixed in
library/docker:29.8.1-dind3f3c01aaaebf
github.com/docker/distribution@v2.8.3+incompatible
no fix listed

Open the chart page →

2,014
rybbitrybbit-helm1.3.21 of 7See more

rybbit rybbit-helm 1.3.2

1 of the 7 container images this version deploys carry CVE-2026-85747.

Container imageDigestPackageFixed in
alpine/k8s:1.32.12048f8d9c8cc7
github.com/docker/distribution@v2.8.3+incompatible
no fix listed

Open the chart page →

8,880
prometheussaurabh6-prometheus0.2.01 of 1See more

prometheus saurabh6-prometheus 0.2.0

1 of the 1 container images this version deploys carry CVE-2026-85747.

Container imageDigestPackageFixed in
saurabh6/prometheus_setup:v19d4dbe7c1815
github.com/docker/distribution@v2.7.1+incompatible
no fix listed

Open the chart page →

3,865
opentelemetry-collectorsb-helm-charts0.3.01 of 1See more

opentelemetry-collector sb-helm-charts 0.3.0

1 of the 1 container images this version deploys carry CVE-2026-85747.

Container imageDigestPackageFixed in
otel/opentelemetry-collector-contrib:0.96.07ef2a2ff46b9
github.com/docker/distribution@v2.8.2+incompatible
no fix listed

Open the chart page →

2,444
ed-traefikscaleway-charts0.2.01 of 1See more

ed-traefik scaleway-charts 0.2.0

1 of the 1 container images this version deploys carry CVE-2026-85747.

Container imageDigestPackageFixed in
library/traefik:v1.7.345d47b7bb2546
github.com/docker/distribution@v2.7.1+incompatible
no fix listed

Open the chart page →

3,269
ed-traefik2scaleway-charts0.2.01 of 1See more

ed-traefik2 scaleway-charts 0.2.0

1 of the 1 container images this version deploys carry CVE-2026-85747.

Container imageDigestPackageFixed in
library/traefik:2.5.62f603f8d3abe
github.com/docker/distribution@v2.7.1+incompatible
no fix listed

Open the chart page →

4,314
crproxyschichtelVerified publisher0.1.41 of 1See more

crproxy schichtel 0.1.4

1 of the 1 container images this version deploys carry CVE-2026-85747.

Container imageDigestPackageFixed in
ghcr.io/daocloud/crproxy/crproxy:v0.8.0ee1eb3c9c9a1
github.com/distribution/distribution/v3@v3.0.0-20220907155224-78b9c98c5c31
3.1.2

Open the chart page →

1,965
centralbrainsciencemeshVerified publisher0.0.31 of 5See more

centralbrain sciencemesh 0.0.3

1 of the 5 container images this version deploys carry CVE-2026-85747.

Container imageDigestPackageFixed in
quay.io/prometheus/prometheus:v2.22.1b899dbd1b901
github.com/docker/distribution@v2.7.1+incompatible
no fix listed

Open the chart page →

14,674
hermitcrabseal-ioVerified publisher0.1.41 of 2See more

hermitcrab seal-io 0.1.4

1 of the 2 container images this version deploys carry CVE-2026-85747.

Container imageDigestPackageFixed in
sealio/terraform-deployer:v1.5.7-seal.1b0389d9848a5
github.com/docker/distribution@v2.8.1+incompatible
no fix listed

Open the chart page →

6,463
sigstore-probersigstoreVerified publisher0.3.11 of 1See more

sigstore-prober sigstore 0.3.1

1 of the 1 container images this version deploys carry CVE-2026-85747.

Container imageDigestPackageFixed in
ghcr.io/sigstore/sigstore-probers/prober:v1.0.1d1e914e6d6b9
github.com/docker/distribution@v2.8.3+incompatible
no fix listed

Open the chart page →

908
loggensikalabs0.1.01 of 1See more

loggen sikalabs 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-85747.

Container imageDigestPackageFixed in
sikalabs/slu:v0.72.07bd267f30247
github.com/docker/distribution@v2.8.2+incompatible
no fix listed

Open the chart page →

3,091
metrics-generatorsikalabs0.2.01 of 1See more

metrics-generator sikalabs 0.2.0

1 of the 1 container images this version deploys carry CVE-2026-85747.

Container imageDigestPackageFixed in
sikalabs/slu:v0.34.0fdc0c6711add
github.com/docker/distribution@v0.0.0-20171011171712-7484e51bf6af
no fix listed

Open the chart page →

3,692
olmsikalabs0.3.01 of 2See more

olm sikalabs 0.3.0

1 of the 2 container images this version deploys carry CVE-2026-85747.

Container imageDigestPackageFixed in
quay.io/operator-framework/olmdigest-pinned40d0363f4aa6
github.com/docker/distribution@v2.8.3+incompatible
no fix listed

Open the chart page →

2,026
sikalabs-harbor-master-snapshotsikalabs2023.6.203 of 8See more

sikalabs-harbor-master-snapshot sikalabs 2023.6.20

3 of the 8 container images this version deploys carry CVE-2026-85747.

Container imageDigestPackageFixed in
goharbor/harbor-registryctl:devca0765d1c0eb
github.com/docker/distribution@v0.0.0-20260921091602-ac7c4cedc2f4+dirty
no fix listed
goharbor/registry-photon:dev2d344e1d870d
github.com/docker/distribution@v0.0.0-20260921091602-ac7c4cedc2f4+dirty
no fix listed
goharbor/trivy-adapter-photon:dev72aa75db0f6c
github.com/docker/distribution@v2.8.2+incompatible
no fix listed

Open the chart page →

1,155
system-upgrade-controllersinextraVerified publisher0.6.11 of 1See more

system-upgrade-controller sinextra 0.6.1

1 of the 1 container images this version deploys carry CVE-2026-85747.

Container imageDigestPackageFixed in
rancher/system-upgrade-controller:v0.19.234fa058fe453
github.com/docker/distribution@v2.8.3+incompatible
no fix listed

Open the chart page →

653
teamcitysinextraVerified publisher1.1.01 of 3See more

teamcity sinextra 1.1.0

1 of the 3 container images this version deploys carry CVE-2026-85747.

Container imageDigestPackageFixed in
library/docker:26.1-dinddd43b430341a
github.com/docker/distribution@v2.8.3+incompatible
no fix listed

Open the chart page →

3,136

Container images carrying it

634 by charts deploying them

A fixed version is listed for 1 of the 2 affected packages.

Container imageDigestPackageFixed inUsed by
conduction/balance-registration-php:devc36094a41369
github.com/docker/distribution@v0.0.0-20191216044856-a8371794149d
no fix listed
1
conduction/betaalservice-php:latestece1ab544c57
github.com/docker/distribution@v0.0.0-20191216044856-a8371794149d
no fix listed
1
conduction/cgrc-php:dev25415534d245
github.com/docker/distribution@v0.0.0-20191216044856-a8371794149d
no fix listed
1
conduction/checkin-component-php:dev3423845692c1
github.com/docker/distribution@v0.0.0-20191216044856-a8371794149d
no fix listed
1
conduction/conduction-ui-php:dev2744565516e8
github.com/docker/distribution@v0.0.0-20191216044856-a8371794149d
no fix listed
1
conduction/contactmoment-component-php:deve1d4ad1e22a8
github.com/docker/distribution@v0.0.0-20191216044856-a8371794149d
no fix listed
1
conduction/docparser-php:devb6f95c8ead7d
github.com/docker/distribution@v0.0.0-20191216044856-a8371794149d
no fix listed
1
conduction/kvk-php:dev8f177f9f8a7b
github.com/docker/distribution@v0.0.0-20191216044856-a8371794149d
no fix listed
1
conduction/pan-php:dev24f03c57568f
github.com/docker/distribution@v0.0.0-20191216044856-a8371794149d
no fix listed
1
containous/maesh:v1.3.2587162516502
github.com/docker/distribution@v2.7.1+incompatible
no fix listed
1
crossplane/crossplane:v0.12.066666e6963af
github.com/docker/distribution@v2.7.1+incompatible
no fix listed
1
daprio/dashboard:0.15.04be696707bd1
github.com/docker/distribution@v0.0.0-20191216044856-a8371794149d
no fix listed
1
daprio/dashboard:0.14.07ba5d51e5b97
github.com/distribution/distribution/v3@v3.0.0-20230214150026-36d8c594d7aa
github.com/docker/distribution@v0.0.0-20191216044856-a8371794149d
3.1.2
no fix listed
1
datadog/agent:6aad9994de6a7
github.com/docker/distribution@v2.8.3+incompatible
no fix listed
1
datasaker/dsk-container-agent:latest08b52999f67b
github.com/docker/distribution@v2.8.2+incompatible
no fix listed
1
datawire/ambassador-operator:v1.3.0f95ae710d75c
github.com/docker/distribution@v2.7.1+incompatible
no fix listed
1
devopstales/trivy-operator:2.575136aa7a26e
github.com/docker/distribution@v2.8.1+incompatible
no fix listed
1
devspacecloud/manager:0.3.349c397413f7b
github.com/docker/distribution@v0.0.0-20191216044856-a8371794149d
no fix listed
1
distribution/distribution:3.1.1bca24727f400
github.com/distribution/distribution/v3@v3.1.1
3.1.2
1
djjudas21/nova-exporter:0.0.10e9094580885c
github.com/docker/distribution@v2.8.3+incompatible
no fix listed
1
dollarshaveclub/furan2:master14a257836529
github.com/docker/distribution@v2.7.1+incompatible
no fix listed
1
dongjiang1989/cosign-webhook:v1.1.02a3ead6a55dc
github.com/docker/distribution@v2.8.2+incompatible
no fix listed
1
douz/overlord:latestf2bc7fc068c1
github.com/docker/distribution@v2.7.1+incompatible
no fix listed
1
dragonflyoss/manager:v2.1.49c3ef7f10698d
github.com/docker/distribution@v2.8.3+incompatible
no fix listed
1
dragonflyoss/scheduler:v2.5.2d5dea9e662cd
github.com/docker/distribution@v2.8.3+incompatible
no fix listed
1
drone/drone:2.28.255897c8fb22d
github.com/docker/distribution@v2.8.2-beta.1+incompatible
no fix listed
1
drone/drone-runner-docker:1.8.1137e79c5e23c
github.com/docker/distribution@v2.7.1+incompatible
no fix listed
1
dtzar/helm-kubectl:3.11.2a1041bb0f1d1
github.com/docker/distribution@v2.8.1+incompatible
no fix listed
1
elastic/apm-server:7.17.6c7a1c63257d0
github.com/docker/distribution@v2.8.0+incompatible
no fix listed
1
epamedp/edp-headlamp:0.25.093417e18bb1a
github.com/docker/distribution@v2.8.3+incompatible
no fix listed
1
falcosecurity/falco:0.45.0788f1129c542
github.com/docker/distribution@v2.8.3+incompatible
no fix listed
1
falcosecurity/falco-driver-loader:0.45.0d7d287d4dcee
github.com/docker/distribution@v2.8.3+incompatible
no fix listed
1
flomesh/fsm-ingress-pipy:0.2.11cc39c96711c4
github.com/docker/distribution@v2.8.2+incompatible
no fix listed
1
flomesh/fsm-manager:0.2.1122f849c70b25
github.com/docker/distribution@v2.8.2+incompatible
no fix listed
1
fluxcd/helm-controller:v0.9.092b891e495d8
github.com/docker/distribution@v0.0.0-20191216044856-a8371794149d
no fix listed
1
fluxcd/source-controller:v0.10.031a8c79a6803
github.com/docker/distribution@v0.0.0-20191216044856-a8371794149d
no fix listed
1
galaxy/cloudman-server:lateste5c265fe9fcd
github.com/docker/distribution@v2.8.1+incompatible
no fix listed
1
galaxy/pulsar-kubernetes:0.15.7e50a890e24c9
github.com/docker/distribution@v2.8.3+incompatible
no fix listed
1
gitea/act_runner:0.2.11-dind-rootless6120b1165f3a
github.com/docker/distribution@v2.8.3+incompatible
no fix listed
1
gitea/act_runner:0.3.08368754bb612
github.com/docker/distribution@v2.8.3+incompatible
no fix listed
1
gitea/act_runner:0.3.1c2a169c5e998
github.com/docker/distribution@v2.8.3+incompatible
no fix listed
1
gitea/act_runner:0.2.11c57233403eff
github.com/docker/distribution@v2.8.3+incompatible
no fix listed
1
gitlab/gitlab-runner:v15.3.0860d4a3fec7a
github.com/docker/distribution@v2.7.0+incompatible
no fix listed
1
gitlab/gitlab-runner:alpine-v13.2.1fd7e5dfb9f30
github.com/docker/distribution@v2.7.0+incompatible
no fix listed
1
gocrane/craned:v0.5.1a1400909118c
github.com/docker/distribution@v2.7.1+incompatible
no fix listed
1
gocrane/crane-scheduler:0.0.239ba6d11b2079
github.com/docker/distribution@v2.7.1+incompatible
no fix listed
1
goharbor/chartmuseum-photon:v2.5.36ab3ca28e9e5
github.com/docker/distribution@v2.7.1+incompatible
no fix listed
1
goharbor/harbor-registryctl:v2.15.430bd1ace4e3b
github.com/docker/distribution@v0.0.0-20260921091602-ac7c4cedc2f4+dirty
no fix listed
1
goharbor/harbor-registryctl:devca0765d1c0eb
github.com/docker/distribution@v0.0.0-20260921091602-ac7c4cedc2f4+dirty
no fix listed
1
goharbor/registry-photon:dev2d344e1d870d
github.com/docker/distribution@v0.0.0-20260921091602-ac7c4cedc2f4+dirty
no fix listed
1

syft 1.42.1 · advisories as of 16 Oct 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.