StackRadar

CVE-2026-85747

Medium

Advisory

Published 15 Oct 2026In the index since 16 Oct 2026
Severity
Medium
worst across findings
CVSS
6.8
base score, highest
EPSS
0.002
10th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
647
of 18,137 indexed, latest versions
Container images
634
deployed by those charts
Fix available
1 of 2
affected packages

Distribution: Client `manifests.Get()` does not verify returned content against requested digest

Carried by container images the latest versions of 647 of 18,137 indexed charts deploy, on 634 images.

Affected packageAffected versionsFixed inImages
github.com/docker/distributiongolangv0.0.0-20171011171712-7484e51bf6af, v0.0.0-20191216044856-a8371794149d, v0.0.0-20260602055908-11540eae06cb+dirty, v0.0.0-20260701071724-493dca9a81a8+dirty+12 moreno fix listed624
github.com/distribution/distribution/v3golangv0.0.0-20250402055438-9ed95e736522, v3.0.0, v3.0.0-20210316161203-a01c71e2477e, v3.0.0-20220526142353-ffbd94cbe269+9 more3.1.236
OSV records
GHSA-685w-q87j-wqw3
Trending
Rank 42 in indexed charts, since 16 Oct 2026. See the ranking →

Charts affected

647 by stars
ChartLatestAffected imagesRadar Score
custom-rhcl-consolecustom-rhcl-consoleVerified publisher0.1.21 of 3See more

custom-rhcl-console custom-rhcl-console 0.1.2

1 of the 3 container images this version deploys carry CVE-2026-85747.

Container imageDigestPackageFixed in
quay.io/openshift/origin-cli:latest10fef10863a3
github.com/distribution/distribution/v3@v3.0.0-20230519140516-983358f8e250
3.1.2

Open the chart page →

2,539
jupyterhubd4nVerified publisher3.3.71 of 7See more

jupyterhub d4n 3.3.7

1 of the 7 container images this version deploys carry CVE-2026-85747.

Container imageDigestPackageFixed in
registry.k8s.io/kube-scheduler:v1.28.1146cf7475c8da
github.com/docker/distribution@v2.8.2+incompatible
no fix listed

Open the chart page →

20,139
grafana-agentdandydev-chartsVerified publisher0.19.21 of 1See more

grafana-agent dandydev-charts 0.19.2

1 of the 1 container images this version deploys carry CVE-2026-85747.

Container imageDigestPackageFixed in
grafana/agent:v0.20.0825c09373d27
github.com/docker/distribution@v2.7.1+incompatible
no fix listed

Open the chart page →

4,839
dapr-agentsdapr-agents-devVerified publisher0.1.51 of 31See more

dapr-agents dapr-agents-dev 0.1.5

1 of the 31 container images this version deploys carry CVE-2026-85747.

Container imageDigestPackageFixed in
ghcr.io/kagent-dev/kagent/tools:0.0.13c8882543f693
github.com/docker/distribution@v2.8.3+incompatible
no fix listed

Open the chart page →

32,620
cloudwatch-agent-prometheusdasmeta0.2.21 of 1See more

cloudwatch-agent-prometheus dasmeta 0.2.2

1 of the 1 container images this version deploys carry CVE-2026-85747.

Container imageDigestPackageFixed in
amazon/cloudwatch-agent:1.247350.0b251780e745d1783c93
github.com/docker/distribution@v2.7.1-0.20190205005809-0d3efadf0154+incompatible
no fix listed

Open the chart page →

4,193
adot-exporter-for-eks-on-ec2dasmeta-adot0.15.51 of 1See more

adot-exporter-for-eks-on-ec2 dasmeta-adot 0.15.5

1 of the 1 container images this version deploys carry CVE-2026-85747.

Container imageDigestPackageFixed in
amazon/aws-otel-collector:v0.27.0d8ab0eef5074
github.com/docker/distribution@v2.8.1+incompatible
no fix listed

Open the chart page →

2,746
datadog-csi-driverdatadogVerified publisher0.18.01 of 2See more

datadog-csi-driver datadog 0.18.0

1 of the 2 container images this version deploys carry CVE-2026-85747.

Container imageDigestPackageFixed in
gcr.io/datadoghq/csi-driver:1.4.086c713de81d9
github.com/docker/distribution@v2.8.3+incompatible
no fix listed

Open the chart page →

3,565
agent-helmdatasaker0.1.81 of 6See more

agent-helm datasaker 0.1.8

1 of the 6 container images this version deploys carry CVE-2026-85747.

Container imageDigestPackageFixed in
datasaker/dsk-container-agent:latest08b52999f67b
github.com/docker/distribution@v2.8.2+incompatible
no fix listed

Open the chart page →

11,451
ambassador-agentdatawire1.0.221 of 1See more

ambassador-agent datawire 1.0.22

1 of the 1 container images this version deploys carry CVE-2026-85747.

Container imageDigestPackageFixed in
ambassador/ambassador-agent:1.0.227a1ea0d934fb
github.com/docker/distribution@v2.8.2+incompatible
no fix listed

Open the chart page →

1,658
ambassador-operatordatawire0.3.01 of 1See more

ambassador-operator datawire 0.3.0

1 of the 1 container images this version deploys carry CVE-2026-85747.

Container imageDigestPackageFixed in
datawire/ambassador-operator:v1.3.0f95ae710d75c
github.com/docker/distribution@v2.7.1+incompatible
no fix listed

Open the chart page →

8,906
kyvernodevopstalesVerified publisher2.5.12 of 2See more

kyverno devopstales 2.5.1

2 of the 2 container images this version deploys carry CVE-2026-85747.

Container imageDigestPackageFixed in
ghcr.io/kyverno/kyverno:v1.7.19c73f1841ebc
github.com/docker/distribution@v2.8.0+incompatible
no fix listed
ghcr.io/kyverno/kyvernopre:v1.7.1185d2eebc60c
github.com/docker/distribution@v2.8.0+incompatible
no fix listed

Open the chart page →

6,816
ai-agentdevtron0.0.11 of 1See more

ai-agent devtron 0.0.1

1 of the 1 container images this version deploys carry CVE-2026-85747.

Container imageDigestPackageFixed in
quay.io/devtron/ai-agent:0.0.16545dac92173
github.com/docker/distribution@v2.8.3+incompatible
no fix listed

Open the chart page →

11,152
argocddevtron1.8.11 of 3See more

argocd devtron 1.8.1

1 of the 3 container images this version deploys carry CVE-2026-85747.

Container imageDigestPackageFixed in
argoproj/argocd:v1.8.1830e86cacefd
github.com/docker/distribution@v2.7.1+incompatible
no fix listed

Open the chart page →

14,181
argocd-certificate-refreshdevtron0.10.81 of 1See more

argocd-certificate-refresh devtron 0.10.8

1 of the 1 container images this version deploys carry CVE-2026-85747.

Container imageDigestPackageFixed in
quay.io/devtron/argocd-cert-refresh:v102b6db27eaf3d
github.com/docker/distribution@v2.8.1+incompatible
no fix listed

Open the chart page →

14,709
argo-workflowdevtron0.1.61 of 1See more

argo-workflow devtron 0.1.6

1 of the 1 container images this version deploys carry CVE-2026-85747.

Container imageDigestPackageFixed in
quay.io/argoproj/workflow-controller:v3.4.7f0c6fba81a24
github.com/docker/distribution@v2.8.1+incompatible
no fix listed

Open the chart page →

2,345
devtron-enterprisedevtron48.0.03 of 28See more

devtron-enterprise devtron 48.0.0

3 of the 28 container images this version deploys carry CVE-2026-85747.

Container imageDigestPackageFixed in
quay.io/devtron/image-scanner:94237c18-109-3942098580969b333
github.com/docker/distribution@v2.8.3+incompatible
no fix listed
quay.io/devtron/inception:7beef376-948-313784c3b91bebd3d
github.com/docker/distribution@v2.7.1+incompatible
no fix listed
quay.io/devtron/kubectl:latest2ad610626658
github.com/docker/distribution@v2.8.1+incompatible
no fix listed

Open the chart page →

90,212
devtron-in-clustercddevtron0.10.21 of 2See more

devtron-in-clustercd devtron 0.10.2

1 of the 2 container images this version deploys carry CVE-2026-85747.

Container imageDigestPackageFixed in
quay.io/devtron/kubewatch:49f906a5-419-14814eec0305b594c
github.com/docker/distribution@v2.8.2+incompatible
no fix listed

Open the chart page →

7,030
devtron-logs-dumpdevtron0.1.01 of 1See more

devtron-logs-dump devtron 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-85747.

Container imageDigestPackageFixed in
quay.io/devtron/k8s-utils:807ca3c2-488-14005f296c2ec5db7
github.com/docker/distribution@v2.8.1+incompatible
no fix listed

Open the chart page →

5,962
kube-prometheus-stackdevtron19.3.01 of 6See more

kube-prometheus-stack devtron 19.3.0

1 of the 6 container images this version deploys carry CVE-2026-85747.

Container imageDigestPackageFixed in
quay.io/prometheus-operator/prometheus-operator:v0.50.0ab4f480f2cc6
github.com/docker/distribution@v2.7.1+incompatible
no fix listed

Open the chart page →

12,276
securitydevtron0.2.21 of 1See more

security devtron 0.2.2

1 of the 1 container images this version deploys carry CVE-2026-85747.

Container imageDigestPackageFixed in
quay.io/devtron/image-scanner:b278f42b-334-1111988c64b1b6ec8
github.com/docker/distribution@v2.7.1+incompatible
no fix listed

Open the chart page →

3,540
ai-agentdevtron-labs0.0.11 of 1See more

ai-agent devtron-labs 0.0.1

1 of the 1 container images this version deploys carry CVE-2026-85747.

Container imageDigestPackageFixed in
quay.io/devtron/ai-agent:0.0.16545dac92173
github.com/docker/distribution@v2.8.3+incompatible
no fix listed

Open the chart page →

11,152
argocddevtron-labs1.8.11 of 3See more

argocd devtron-labs 1.8.1

1 of the 3 container images this version deploys carry CVE-2026-85747.

Container imageDigestPackageFixed in
argoproj/argocd:v1.8.1830e86cacefd
github.com/docker/distribution@v2.7.1+incompatible
no fix listed

Open the chart page →

14,181
argocd-certificate-refreshdevtron-labs0.10.81 of 1See more

argocd-certificate-refresh devtron-labs 0.10.8

1 of the 1 container images this version deploys carry CVE-2026-85747.

Container imageDigestPackageFixed in
quay.io/devtron/argocd-cert-refresh:v102b6db27eaf3d
github.com/docker/distribution@v2.8.1+incompatible
no fix listed

Open the chart page →

14,709
argo-workflowdevtron-labs0.1.61 of 1See more

argo-workflow devtron-labs 0.1.6

1 of the 1 container images this version deploys carry CVE-2026-85747.

Container imageDigestPackageFixed in
quay.io/argoproj/workflow-controller:v3.4.7f0c6fba81a24
github.com/docker/distribution@v2.8.1+incompatible
no fix listed

Open the chart page →

2,345
clairdevtron-labs0.1.141 of 2See more

clair devtron-labs 0.1.14

1 of the 2 container images this version deploys carry CVE-2026-85747.

Container imageDigestPackageFixed in
quay.io/devtron/clair:4.3.675fb847ac045
github.com/docker/distribution@v2.7.1+incompatible
no fix listed

Open the chart page →

8,148
devtron-enterprisedevtron-labs48.0.03 of 28See more

devtron-enterprise devtron-labs 48.0.0

3 of the 28 container images this version deploys carry CVE-2026-85747.

Container imageDigestPackageFixed in
quay.io/devtron/image-scanner:94237c18-109-3942098580969b333
github.com/docker/distribution@v2.8.3+incompatible
no fix listed
quay.io/devtron/inception:7beef376-948-313784c3b91bebd3d
github.com/docker/distribution@v2.7.1+incompatible
no fix listed
quay.io/devtron/kubectl:latest2ad610626658
github.com/docker/distribution@v2.8.1+incompatible
no fix listed

Open the chart page →

90,212
devtron-in-clustercddevtron-labs0.10.21 of 2See more

devtron-in-clustercd devtron-labs 0.10.2

1 of the 2 container images this version deploys carry CVE-2026-85747.

Container imageDigestPackageFixed in
quay.io/devtron/kubewatch:49f906a5-419-14814eec0305b594c
github.com/docker/distribution@v2.8.2+incompatible
no fix listed

Open the chart page →

7,030
devtron-logs-dumpdevtron-labs0.1.01 of 1See more

devtron-logs-dump devtron-labs 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-85747.

Container imageDigestPackageFixed in
quay.io/devtron/k8s-utils:807ca3c2-488-14005f296c2ec5db7
github.com/docker/distribution@v2.8.1+incompatible
no fix listed

Open the chart page →

5,962
devtron-operatordevtron-labs0.23.32 of 11See more

devtron-operator devtron-labs 0.23.3

2 of the 11 container images this version deploys carry CVE-2026-85747.

Container imageDigestPackageFixed in
quay.io/devtron/hyperion:0874dcaf-280-3928701d5d8c4cecb
github.com/docker/distribution@v2.8.2+incompatible
no fix listed
quay.io/devtron/kubectl:latest2ad610626658
github.com/docker/distribution@v2.8.1+incompatible
no fix listed

Open the chart page →

42,853
kube-prometheus-stackdevtron-labs19.3.01 of 6See more

kube-prometheus-stack devtron-labs 19.3.0

1 of the 6 container images this version deploys carry CVE-2026-85747.

Container imageDigestPackageFixed in
quay.io/prometheus-operator/prometheus-operator:v0.50.0ab4f480f2cc6
github.com/docker/distribution@v2.7.1+incompatible
no fix listed

Open the chart page →

12,276
securitydevtron-labs0.2.21 of 1See more

security devtron-labs 0.2.2

1 of the 1 container images this version deploys carry CVE-2026-85747.

Container imageDigestPackageFixed in
quay.io/devtron/image-scanner:b278f42b-334-1111988c64b1b6ec8
github.com/docker/distribution@v2.7.1+incompatible
no fix listed

Open the chart page →

3,540
nova-exporterdjjudas21Verified publisher0.1.161 of 1See more

nova-exporter djjudas21 0.1.16

1 of the 1 container images this version deploys carry CVE-2026-85747.

Container imageDigestPackageFixed in
djjudas21/nova-exporter:0.0.10e9094580885c
github.com/docker/distribution@v2.8.3+incompatible
no fix listed

Open the chart page →

1,987
docker-authdocker-auth1.14.01 of 1See more

docker-auth docker-auth 1.14.0

1 of the 1 container images this version deploys carry CVE-2026-85747.

Container imageDigestPackageFixed in
cesanta/docker_auth:1.14.098e0307e0d2d
github.com/docker/distribution@v2.8.2-beta.1+incompatible
no fix listed

Open the chart page →

2,054
docparserdocparser0.1.01 of 4See more

docparser docparser 0.1.0

1 of the 4 container images this version deploys carry CVE-2026-85747.

Container imageDigestPackageFixed in
conduction/docparser-php:devb6f95c8ead7d
github.com/docker/distribution@v0.0.0-20191216044856-a8371794149d
no fix listed

Open the chart page →

11,064
furan2dollarshaveclubVerified publisher0.2.01 of 1See more

furan2 dollarshaveclub 0.2.0

1 of the 1 container images this version deploys carry CVE-2026-85747.

Container imageDigestPackageFixed in
dollarshaveclub/furan2:master14a257836529
github.com/docker/distribution@v2.7.1+incompatible
no fix listed

Open the chart page →

4,230
k8s-crondoubanVerified publisher0.2.01 of 1See more

k8s-cron douban 0.2.0

1 of the 1 container images this version deploys carry CVE-2026-85747.

Container imageDigestPackageFixed in
alpine/k8s:1.28.2fc059f056ad0
github.com/docker/distribution@v2.8.2+incompatible
no fix listed

Open the chart page →

4,564
overlorddoubanVerified publisher0.2.21 of 1See more

overlord douban 0.2.2

1 of the 1 container images this version deploys carry CVE-2026-85747.

Container imageDigestPackageFixed in
douz/overlord:latestf2bc7fc068c1
github.com/docker/distribution@v2.7.1+incompatible
no fix listed

Open the chart page →

5,750
drogue-cloud-examplesdrogue-iotVerified publisher0.7.111 of 6See more

drogue-cloud-examples drogue-iot 0.7.11

1 of the 6 container images this version deploys carry CVE-2026-85747.

Container imageDigestPackageFixed in
ghcr.io/ctron/kubectl:1.25e37d61b5277c
github.com/docker/distribution@v2.8.1+incompatible
no fix listed

Open the chart page →

35,192
drogue-cloud-metricsdrogue-iotVerified publisher0.7.111 of 8See more

drogue-cloud-metrics drogue-iot 0.7.11

1 of the 8 container images this version deploys carry CVE-2026-85747.

Container imageDigestPackageFixed in
quay.io/prometheus/prometheus:v2.26.038d40a760569
github.com/docker/distribution@v2.7.1+incompatible
no fix listed

Open the chart page →

20,745
temporaldtrdnk-helm-chartsVerified publisher0.35.01 of 13See more

temporal dtrdnk-helm-charts 0.35.0

1 of the 13 container images this version deploys carry CVE-2026-85747.

Container imageDigestPackageFixed in
quay.io/prometheus/prometheus:v2.31.1a8779cfe553e
github.com/docker/distribution@v2.7.1+incompatible
no fix listed

Open the chart page →

28,791
eav-componenteav-component1.0.01 of 3See more

eav-component eav-component 1.0.0

1 of the 3 container images this version deploys carry CVE-2026-85747.

Container imageDigestPackageFixed in
ghcr.io/conductionnl/eav-component-php:latest24bbca4a52a8
github.com/docker/distribution@v0.0.0-20191216044856-a8371794149d
no fix listed

Open the chart page →

9,225
openfaas2eclipse-aeriosVerified publisher12.0.52 of 6See more

openfaas2 eclipse-aerios 12.0.5

2 of the 6 container images this version deploys carry CVE-2026-85747.

Container imageDigestPackageFixed in
ghcr.io/openfaas/faas-netes:0.18.1224431adc8e2d
github.com/docker/distribution@v2.8.3+incompatible
no fix listed
ghcr.io/openfaas/gateway:0.27.1382b15393116e
github.com/docker/distribution@v2.8.3+incompatible
no fix listed

Open the chart page →

10,319
education-componenteducation-component1.0.01 of 3See more

education-component education-component 1.0.0

1 of the 3 container images this version deploys carry CVE-2026-85747.

Container imageDigestPackageFixed in
ghcr.io/conductionnl/education-component-php:latestda6b05a1a601
github.com/docker/distribution@v0.0.0-20191216044856-a8371794149d
no fix listed

Open the chart page →

9,402
eherkenning-uieherkenning-ui1.0.01 of 3See more

eherkenning-ui eherkenning-ui 1.0.0

1 of the 3 container images this version deploys carry CVE-2026-85747.

Container imageDigestPackageFixed in
ghcr.io/conductionnl/eherkenning-ui-php:latestdeed102b4255
github.com/docker/distribution@v0.0.0-20191216044856-a8371794149d
no fix listed

Open the chart page →

9,547
kube-ecp-stackemqx-operator2.5.11 of 16See more

kube-ecp-stack emqx-operator 2.5.1

1 of the 16 container images this version deploys carry CVE-2026-85747.

Container imageDigestPackageFixed in
library/telegraf:1.27507a3eecf809
github.com/docker/distribution@v2.8.2+incompatible
no fix listed

Open the chart page →

31,597
eoapi-supporteoapiVerified publisher0.1.72 of 7See more

eoapi-support eoapi 0.1.7

2 of the 7 container images this version deploys carry CVE-2026-85747.

Container imageDigestPackageFixed in
quay.io/prometheus-operator/prometheus-config-reloader:v0.67.014feefde1b80
github.com/docker/distribution@v2.8.2+incompatible
no fix listed
quay.io/prometheus/prometheus:v2.47.0c5dd35038287
github.com/docker/distribution@v2.8.2+incompatible
no fix listed

Open the chart page →

13,046
edp-headlampepmdedpVerified publisher0.25.01 of 1See more

edp-headlamp epmdedp 0.25.0

1 of the 1 container images this version deploys carry CVE-2026-85747.

Container imageDigestPackageFixed in
epamedp/edp-headlamp:0.25.093417e18bb1a
github.com/docker/distribution@v2.8.3+incompatible
no fix listed

Open the chart page →

1,889
syncoor-serverethereum-helm-chartsVerified publisher0.0.11 of 1See more

syncoor-server ethereum-helm-charts 0.0.1

1 of the 1 container images this version deploys carry CVE-2026-85747.

Container imageDigestPackageFixed in
ghcr.io/ethpandaops/syncoor:master233aa9808fc7
github.com/docker/distribution@v2.8.3+incompatible
no fix listed

Open the chart page →

1,472
faasnetfaasnet0.0.41 of 5See more

faasnet faasnet 0.0.4

1 of the 5 container images this version deploys carry CVE-2026-85747.

Container imageDigestPackageFixed in
simpleidserver/faasprometheus:0.0.425e378d57d78
github.com/docker/distribution@v2.7.1+incompatible
no fix listed

Open the chart page →

10,727
skopeo-syncfairwinds-incubator0.3.11 of 1See more

skopeo-sync fairwinds-incubator 0.3.1

1 of the 1 container images this version deploys carry CVE-2026-85747.

Container imageDigestPackageFixed in
quay.io/skopeo/stable:v1.134853591bd1d2
github.com/docker/distribution@v2.8.2+incompatible
no fix listed

Open the chart page →

2,480

Container images carrying it

634 by charts deploying them

A fixed version is listed for 1 of the 2 affected packages.

Container imageDigestPackageFixed inUsed by
conduction/balance-registration-php:devc36094a41369
github.com/docker/distribution@v0.0.0-20191216044856-a8371794149d
no fix listed
1
conduction/betaalservice-php:latestece1ab544c57
github.com/docker/distribution@v0.0.0-20191216044856-a8371794149d
no fix listed
1
conduction/cgrc-php:dev25415534d245
github.com/docker/distribution@v0.0.0-20191216044856-a8371794149d
no fix listed
1
conduction/checkin-component-php:dev3423845692c1
github.com/docker/distribution@v0.0.0-20191216044856-a8371794149d
no fix listed
1
conduction/conduction-ui-php:dev2744565516e8
github.com/docker/distribution@v0.0.0-20191216044856-a8371794149d
no fix listed
1
conduction/contactmoment-component-php:deve1d4ad1e22a8
github.com/docker/distribution@v0.0.0-20191216044856-a8371794149d
no fix listed
1
conduction/docparser-php:devb6f95c8ead7d
github.com/docker/distribution@v0.0.0-20191216044856-a8371794149d
no fix listed
1
conduction/kvk-php:dev8f177f9f8a7b
github.com/docker/distribution@v0.0.0-20191216044856-a8371794149d
no fix listed
1
conduction/pan-php:dev24f03c57568f
github.com/docker/distribution@v0.0.0-20191216044856-a8371794149d
no fix listed
1
containous/maesh:v1.3.2587162516502
github.com/docker/distribution@v2.7.1+incompatible
no fix listed
1
crossplane/crossplane:v0.12.066666e6963af
github.com/docker/distribution@v2.7.1+incompatible
no fix listed
1
daprio/dashboard:0.15.04be696707bd1
github.com/docker/distribution@v0.0.0-20191216044856-a8371794149d
no fix listed
1
daprio/dashboard:0.14.07ba5d51e5b97
github.com/distribution/distribution/v3@v3.0.0-20230214150026-36d8c594d7aa
github.com/docker/distribution@v0.0.0-20191216044856-a8371794149d
3.1.2
no fix listed
1
datadog/agent:6aad9994de6a7
github.com/docker/distribution@v2.8.3+incompatible
no fix listed
1
datasaker/dsk-container-agent:latest08b52999f67b
github.com/docker/distribution@v2.8.2+incompatible
no fix listed
1
datawire/ambassador-operator:v1.3.0f95ae710d75c
github.com/docker/distribution@v2.7.1+incompatible
no fix listed
1
devopstales/trivy-operator:2.575136aa7a26e
github.com/docker/distribution@v2.8.1+incompatible
no fix listed
1
devspacecloud/manager:0.3.349c397413f7b
github.com/docker/distribution@v0.0.0-20191216044856-a8371794149d
no fix listed
1
distribution/distribution:3.1.1bca24727f400
github.com/distribution/distribution/v3@v3.1.1
3.1.2
1
djjudas21/nova-exporter:0.0.10e9094580885c
github.com/docker/distribution@v2.8.3+incompatible
no fix listed
1
dollarshaveclub/furan2:master14a257836529
github.com/docker/distribution@v2.7.1+incompatible
no fix listed
1
dongjiang1989/cosign-webhook:v1.1.02a3ead6a55dc
github.com/docker/distribution@v2.8.2+incompatible
no fix listed
1
douz/overlord:latestf2bc7fc068c1
github.com/docker/distribution@v2.7.1+incompatible
no fix listed
1
dragonflyoss/manager:v2.1.49c3ef7f10698d
github.com/docker/distribution@v2.8.3+incompatible
no fix listed
1
dragonflyoss/scheduler:v2.5.2d5dea9e662cd
github.com/docker/distribution@v2.8.3+incompatible
no fix listed
1
drone/drone:2.28.255897c8fb22d
github.com/docker/distribution@v2.8.2-beta.1+incompatible
no fix listed
1
drone/drone-runner-docker:1.8.1137e79c5e23c
github.com/docker/distribution@v2.7.1+incompatible
no fix listed
1
dtzar/helm-kubectl:3.11.2a1041bb0f1d1
github.com/docker/distribution@v2.8.1+incompatible
no fix listed
1
elastic/apm-server:7.17.6c7a1c63257d0
github.com/docker/distribution@v2.8.0+incompatible
no fix listed
1
epamedp/edp-headlamp:0.25.093417e18bb1a
github.com/docker/distribution@v2.8.3+incompatible
no fix listed
1
falcosecurity/falco:0.45.0788f1129c542
github.com/docker/distribution@v2.8.3+incompatible
no fix listed
1
falcosecurity/falco-driver-loader:0.45.0d7d287d4dcee
github.com/docker/distribution@v2.8.3+incompatible
no fix listed
1
flomesh/fsm-ingress-pipy:0.2.11cc39c96711c4
github.com/docker/distribution@v2.8.2+incompatible
no fix listed
1
flomesh/fsm-manager:0.2.1122f849c70b25
github.com/docker/distribution@v2.8.2+incompatible
no fix listed
1
fluxcd/helm-controller:v0.9.092b891e495d8
github.com/docker/distribution@v0.0.0-20191216044856-a8371794149d
no fix listed
1
fluxcd/source-controller:v0.10.031a8c79a6803
github.com/docker/distribution@v0.0.0-20191216044856-a8371794149d
no fix listed
1
galaxy/cloudman-server:lateste5c265fe9fcd
github.com/docker/distribution@v2.8.1+incompatible
no fix listed
1
galaxy/pulsar-kubernetes:0.15.7e50a890e24c9
github.com/docker/distribution@v2.8.3+incompatible
no fix listed
1
gitea/act_runner:0.2.11-dind-rootless6120b1165f3a
github.com/docker/distribution@v2.8.3+incompatible
no fix listed
1
gitea/act_runner:0.3.08368754bb612
github.com/docker/distribution@v2.8.3+incompatible
no fix listed
1
gitea/act_runner:0.3.1c2a169c5e998
github.com/docker/distribution@v2.8.3+incompatible
no fix listed
1
gitea/act_runner:0.2.11c57233403eff
github.com/docker/distribution@v2.8.3+incompatible
no fix listed
1
gitlab/gitlab-runner:v15.3.0860d4a3fec7a
github.com/docker/distribution@v2.7.0+incompatible
no fix listed
1
gitlab/gitlab-runner:alpine-v13.2.1fd7e5dfb9f30
github.com/docker/distribution@v2.7.0+incompatible
no fix listed
1
gocrane/craned:v0.5.1a1400909118c
github.com/docker/distribution@v2.7.1+incompatible
no fix listed
1
gocrane/crane-scheduler:0.0.239ba6d11b2079
github.com/docker/distribution@v2.7.1+incompatible
no fix listed
1
goharbor/chartmuseum-photon:v2.5.36ab3ca28e9e5
github.com/docker/distribution@v2.7.1+incompatible
no fix listed
1
goharbor/harbor-registryctl:v2.15.430bd1ace4e3b
github.com/docker/distribution@v0.0.0-20260921091602-ac7c4cedc2f4+dirty
no fix listed
1
goharbor/harbor-registryctl:devca0765d1c0eb
github.com/docker/distribution@v0.0.0-20260921091602-ac7c4cedc2f4+dirty
no fix listed
1
goharbor/registry-photon:dev2d344e1d870d
github.com/docker/distribution@v0.0.0-20260921091602-ac7c4cedc2f4+dirty
no fix listed
1

syft 1.42.1 · advisories as of 16 Oct 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.