StackRadar

CVE-2026-85747

Medium

Advisory

Published 15 Oct 2026In the index since 16 Oct 2026
Severity
Medium
worst across findings
CVSS
6.8
base score, highest
EPSS
0.002
10th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
647
of 18,137 indexed, latest versions
Container images
634
deployed by those charts
Fix available
1 of 2
affected packages

Distribution: Client `manifests.Get()` does not verify returned content against requested digest

Carried by container images the latest versions of 647 of 18,137 indexed charts deploy, on 634 images.

Affected packageAffected versionsFixed inImages
github.com/docker/distributiongolangv0.0.0-20171011171712-7484e51bf6af, v0.0.0-20191216044856-a8371794149d, v0.0.0-20260602055908-11540eae06cb+dirty, v0.0.0-20260701071724-493dca9a81a8+dirty+12 moreno fix listed624
github.com/distribution/distribution/v3golangv0.0.0-20250402055438-9ed95e736522, v3.0.0, v3.0.0-20210316161203-a01c71e2477e, v3.0.0-20220526142353-ffbd94cbe269+9 more3.1.236
OSV records
GHSA-685w-q87j-wqw3
Trending
Rank 42 in indexed charts, since 16 Oct 2026. See the ranking →

Charts affected

647 by stars
ChartLatestAffected imagesRadar Score
panproto-application-nldesign0.1.01 of 5See more

pan proto-application-nldesign 0.1.0

1 of the 5 container images this version deploys carry CVE-2026-85747.

Container imageDigestPackageFixed in
conduction/pan-php:dev24f03c57568f
github.com/docker/distribution@v0.0.0-20191216044856-a8371794149d
no fix listed

Open the chart page →

11,388
proto-component-commongroundproto-component-commonground1.0.01 of 3See more

proto-component-commonground proto-component-commonground 1.0.0

1 of the 3 container images this version deploys carry CVE-2026-85747.

Container imageDigestPackageFixed in
ghcr.io/conductionnl/proto-component-commonground-php:latesteb36ead1954e
github.com/docker/distribution@v0.0.0-20191216044856-a8371794149d
no fix listed

Open the chart page →

9,547
loki-stackpyalive-cdmswebappVerified publisher2.6.51 of 4See more

loki-stack pyalive-cdmswebapp 2.6.5

1 of the 4 container images this version deploys carry CVE-2026-85747.

Container imageDigestPackageFixed in
grafana/promtail:2.4.2626900031c4e
github.com/docker/distribution@v2.7.1+incompatible
no fix listed

Open the chart page →

9,012
argo-workflowsquench-argo-workflowsVerified publisher0.0.81 of 1See more

argo-workflows quench-argo-workflows 0.0.8

1 of the 1 container images this version deploys carry CVE-2026-85747.

Container imageDigestPackageFixed in
ghcr.io/quenchworks/images/argo-workflowsdigest-pinned24498f85eed1
github.com/docker/distribution@v2.8.3+incompatible
no fix listed

Open the chart page →

17
concoursequench-concourseVerified publisher0.0.81 of 3See more

concourse quench-concourse 0.0.8

1 of the 3 container images this version deploys carry CVE-2026-85747.

Container imageDigestPackageFixed in
ghcr.io/quenchworks/images/concoursedigest-pinned755461ea934b
github.com/docker/distribution@v2.8.3+incompatible
no fix listed

Open the chart page →

348
connaisseurquench-connaisseurVerified publisher0.0.31 of 1See more

connaisseur quench-connaisseur 0.0.3

1 of the 1 container images this version deploys carry CVE-2026-85747.

Container imageDigestPackageFixed in
ghcr.io/quenchworks/images/connaisseurdigest-pinnedb88ae556af26
github.com/docker/distribution@v2.8.3+incompatible
no fix listed

Open the chart page →

65
gitops-stackquench-gitops-stackVerified publisher0.0.151 of 5See more

gitops-stack quench-gitops-stack 0.0.15

1 of the 5 container images this version deploys carry CVE-2026-85747.

Container imageDigestPackageFixed in
ghcr.io/quenchworks/images/argo-workflowsdigest-pinned24498f85eed1
github.com/docker/distribution@v2.8.3+incompatible
no fix listed

Open the chart page →

236
harborquench-harborVerified publisher0.0.441 of 9See more

harbor quench-harbor 0.0.44

1 of the 9 container images this version deploys carry CVE-2026-85747.

Container imageDigestPackageFixed in
ghcr.io/quenchworks/images/harbor-registrydigest-pinnedc75b5434d4dc
github.com/docker/distribution@v0.0.0-20260602055908-11540eae06cb+dirty
no fix listed

Open the chart page →

589
kubescape-operatorquench-kubescape-operatorVerified publisher0.0.93 of 5See more

kubescape-operator quench-kubescape-operator 0.0.9

3 of the 5 container images this version deploys carry CVE-2026-85747.

Container imageDigestPackageFixed in
ghcr.io/quenchworks/images/kubescapedigest-pinneda624c51217ea
github.com/docker/distribution@v2.8.3+incompatible
no fix listed
ghcr.io/quenchworks/images/kubescape-operatordigest-pinnedb861c9a1b694
github.com/docker/distribution@v2.8.3+incompatible
no fix listed
ghcr.io/quenchworks/images/kubevulndigest-pinned1a91383dc427
github.com/docker/distribution@v2.8.3+incompatible
no fix listed

Open the chart page →

736
vclusterquench-vclusterVerified publisher0.0.51 of 1See more

vcluster quench-vcluster 0.0.5

1 of the 1 container images this version deploys carry CVE-2026-85747.

Container imageDigestPackageFixed in
ghcr.io/quenchworks/images/vclusterdigest-pinned77ba2823e2fe
github.com/docker/distribution@v2.8.3+incompatible
no fix listed

Open the chart page →

159
rad-pluginsradOfficialVerified publisher2.4.151 of 5See more

rad-plugins rad 2.4.15

1 of the 5 container images this version deploys carry CVE-2026-85747.

Container imageDigestPackageFixed in
public.ecr.aws/n8h5y2v5/rad-security/rad-sbom:v1.1.710f5aeaf1a77e
github.com/docker/distribution@v2.8.3+incompatible
no fix listed

Open the chart page →

1,121
rancher-auto-registerrancher-auto-registerVerified publisher0.1.01 of 1See more

rancher-auto-register rancher-auto-register 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-85747.

Container imageDigestPackageFixed in
registry.gitlab.com/xrow-public/ci-tools/tools:main90a7a94db2b0
github.com/docker/distribution@v2.8.3+incompatible
no fix listed

Open the chart page →

2,562
ansible-automation-platformredhat-cop0.0.91 of 1See more

ansible-automation-platform redhat-cop 0.0.9

1 of the 1 container images this version deploys carry CVE-2026-85747.

Container imageDigestPackageFixed in
quay.io/openshift/origin-cli:4.7464a3af4dfe0
github.com/docker/distribution@v2.7.1+incompatible
no fix listed

Open the chart page →

16,714
argocd-operatorredhat-cop1.2.21 of 1See more

argocd-operator redhat-cop 1.2.2

1 of the 1 container images this version deploys carry CVE-2026-85747.

Container imageDigestPackageFixed in
quay.io/openshift/origin-cli:4.7464a3af4dfe0
github.com/docker/distribution@v2.7.1+incompatible
no fix listed

Open the chart page →

16,714
gitops-operatorredhat-cop0.10.61 of 1See more

gitops-operator redhat-cop 0.10.6

1 of the 1 container images this version deploys carry CVE-2026-85747.

Container imageDigestPackageFixed in
quay.io/openshift/origin-cli:latest486bf8e8f5b5
github.com/distribution/distribution/v3@v3.0.0-20230519140516-983358f8e250
3.1.2

Open the chart page →

1,617
ploigosredhat-cop0.0.92 of 2See more

ploigos redhat-cop 0.0.9

2 of the 2 container images this version deploys carry CVE-2026-85747.

Container imageDigestPackageFixed in
quay.io/openshift/origin-cli:latest486bf8e8f5b5
github.com/distribution/distribution/v3@v3.0.0-20230519140516-983358f8e250
3.1.2
quay.io/openshift/origin-cli:4.66722d5041b47
github.com/docker/distribution@v2.7.1+incompatible
no fix listed

Open the chart page →

14,170
sonatype-nexusredhat-cop1.1.131 of 2See more

sonatype-nexus redhat-cop 1.1.13

1 of the 2 container images this version deploys carry CVE-2026-85747.

Container imageDigestPackageFixed in
quay.io/openshift/origin-jenkins-agent-base:latestc241c971aef8
github.com/distribution/distribution/v3@v3.0.0-20230519140516-983358f8e250
3.1.2

Open the chart page →

17,370
stackrox-chartredhat-cop0.0.101 of 1See more

stackrox-chart redhat-cop 0.0.10

1 of the 1 container images this version deploys carry CVE-2026-85747.

Container imageDigestPackageFixed in
quay.io/rht-labs/stack-do500:3.0.86ba82beff18e
github.com/docker/distribution@v2.7.1+incompatible
no fix listed

Open the chart page →

31,361
retromretsamedocVerified publisher2026.2.51 of 1See more

retrom retsamedoc 2026.2.5

1 of the 1 container images this version deploys carry CVE-2026-85747.

Container imageDigestPackageFixed in
ghcr.io/jmberesford/retrom-service:retrom-v0.7.144d763d58f11d
github.com/docker/distribution@v2.8.3+incompatible
no fix listed

Open the chart page →

8,520
review-componentreview-component1.0.01 of 3See more

review-component review-component 1.0.0

1 of the 3 container images this version deploys carry CVE-2026-85747.

Container imageDigestPackageFixed in
ghcr.io/conductionnl/review-component-php:latestafe623824b82
github.com/docker/distribution@v0.0.0-20191216044856-a8371794149d
no fix listed

Open the chart page →

9,505
krr-enforcerrobusta0.3.51 of 2See more

krr-enforcer robusta 0.3.5

1 of the 2 container images this version deploys carry CVE-2026-85747.

Container imageDigestPackageFixed in
alpine/k8s:1.30.0bd01dae02676
github.com/docker/distribution@v2.8.2+incompatible
no fix listed

Open the chart page →

4,885
gitlab-operatorrock8sVerified publisher0.7.01 of 2See more

gitlab-operator rock8s 0.7.0

1 of the 2 container images this version deploys carry CVE-2026-85747.

Container imageDigestPackageFixed in
registry.gitlab.com/gitlab-org/cloud-native/gitlab-operator:0.5.136b19b72120e
github.com/docker/distribution@v2.7.1+incompatible
no fix listed

Open the chart page →

6,684
mailserverrock8sVerified publisher0.1.21 of 1See more

mailserver rock8s 0.1.2

1 of the 1 container images this version deploys carry CVE-2026-85747.

Container imageDigestPackageFixed in
registry.gitlab.com/bitspur/rock8s/images/kube-commands:3.1880ef8ceffc92
github.com/docker/distribution@v2.8.2+incompatible
no fix listed

Open the chart page →

2,699
ai-agentromholdings0.0.11 of 1See more

ai-agent romholdings 0.0.1

1 of the 1 container images this version deploys carry CVE-2026-85747.

Container imageDigestPackageFixed in
quay.io/devtron/ai-agent:0.0.16545dac92173
github.com/docker/distribution@v2.8.3+incompatible
no fix listed

Open the chart page →

11,152
argocdromholdings1.8.11 of 3See more

argocd romholdings 1.8.1

1 of the 3 container images this version deploys carry CVE-2026-85747.

Container imageDigestPackageFixed in
argoproj/argocd:v1.8.1830e86cacefd
github.com/docker/distribution@v2.7.1+incompatible
no fix listed

Open the chart page →

14,181
argocd-certificate-refreshromholdings0.10.81 of 1See more

argocd-certificate-refresh romholdings 0.10.8

1 of the 1 container images this version deploys carry CVE-2026-85747.

Container imageDigestPackageFixed in
quay.io/devtron/argocd-cert-refresh:v102b6db27eaf3d
github.com/docker/distribution@v2.8.1+incompatible
no fix listed

Open the chart page →

14,709
argo-workflowromholdings0.1.61 of 1See more

argo-workflow romholdings 0.1.6

1 of the 1 container images this version deploys carry CVE-2026-85747.

Container imageDigestPackageFixed in
quay.io/argoproj/workflow-controller:v3.4.7f0c6fba81a24
github.com/docker/distribution@v2.8.1+incompatible
no fix listed

Open the chart page →

2,345
clairromholdings0.1.141 of 2See more

clair romholdings 0.1.14

1 of the 2 container images this version deploys carry CVE-2026-85747.

Container imageDigestPackageFixed in
quay.io/devtron/clair:4.3.675fb847ac045
github.com/docker/distribution@v2.7.1+incompatible
no fix listed

Open the chart page →

8,148
devtron-enterpriseromholdings48.0.03 of 28See more

devtron-enterprise romholdings 48.0.0

3 of the 28 container images this version deploys carry CVE-2026-85747.

Container imageDigestPackageFixed in
quay.io/devtron/image-scanner:94237c18-109-3942098580969b333
github.com/docker/distribution@v2.8.3+incompatible
no fix listed
quay.io/devtron/inception:7beef376-948-313784c3b91bebd3d
github.com/docker/distribution@v2.7.1+incompatible
no fix listed
quay.io/devtron/kubectl:latest2ad610626658
github.com/docker/distribution@v2.8.1+incompatible
no fix listed

Open the chart page →

90,212
devtron-in-clustercdromholdings0.10.21 of 2See more

devtron-in-clustercd romholdings 0.10.2

1 of the 2 container images this version deploys carry CVE-2026-85747.

Container imageDigestPackageFixed in
quay.io/devtron/kubewatch:49f906a5-419-14814eec0305b594c
github.com/docker/distribution@v2.8.2+incompatible
no fix listed

Open the chart page →

7,030
devtron-logs-dumpromholdings0.1.01 of 1See more

devtron-logs-dump romholdings 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-85747.

Container imageDigestPackageFixed in
quay.io/devtron/k8s-utils:807ca3c2-488-14005f296c2ec5db7
github.com/docker/distribution@v2.8.1+incompatible
no fix listed

Open the chart page →

5,962
devtron-operatorromholdings0.23.32 of 11See more

devtron-operator romholdings 0.23.3

2 of the 11 container images this version deploys carry CVE-2026-85747.

Container imageDigestPackageFixed in
quay.io/devtron/hyperion:0874dcaf-280-3928701d5d8c4cecb
github.com/docker/distribution@v2.8.2+incompatible
no fix listed
quay.io/devtron/kubectl:latest2ad610626658
github.com/docker/distribution@v2.8.1+incompatible
no fix listed

Open the chart page →

42,853
kube-prometheus-stackromholdings19.3.01 of 6See more

kube-prometheus-stack romholdings 19.3.0

1 of the 6 container images this version deploys carry CVE-2026-85747.

Container imageDigestPackageFixed in
quay.io/prometheus-operator/prometheus-operator:v0.50.0ab4f480f2cc6
github.com/docker/distribution@v2.7.1+incompatible
no fix listed

Open the chart page →

12,276
securityromholdings0.2.21 of 1See more

security romholdings 0.2.2

1 of the 1 container images this version deploys carry CVE-2026-85747.

Container imageDigestPackageFixed in
quay.io/devtron/image-scanner:b278f42b-334-1111988c64b1b6ec8
github.com/docker/distribution@v2.7.1+incompatible
no fix listed

Open the chart page →

3,540
spindlerubxkubeVerified publisher0.1.21 of 2See more

spindle rubxkube 0.1.2

1 of the 2 container images this version deploys carry CVE-2026-85747.

Container imageDigestPackageFixed in
library/docker:29.8.1-dind3f3c01aaaebf
github.com/docker/distribution@v2.8.3+incompatible
no fix listed

Open the chart page →

2,014
rybbitrybbit-helm1.3.21 of 7See more

rybbit rybbit-helm 1.3.2

1 of the 7 container images this version deploys carry CVE-2026-85747.

Container imageDigestPackageFixed in
alpine/k8s:1.32.12048f8d9c8cc7
github.com/docker/distribution@v2.8.3+incompatible
no fix listed

Open the chart page →

8,880
prometheussaurabh6-prometheus0.2.01 of 1See more

prometheus saurabh6-prometheus 0.2.0

1 of the 1 container images this version deploys carry CVE-2026-85747.

Container imageDigestPackageFixed in
saurabh6/prometheus_setup:v19d4dbe7c1815
github.com/docker/distribution@v2.7.1+incompatible
no fix listed

Open the chart page →

3,865
opentelemetry-collectorsb-helm-charts0.3.01 of 1See more

opentelemetry-collector sb-helm-charts 0.3.0

1 of the 1 container images this version deploys carry CVE-2026-85747.

Container imageDigestPackageFixed in
otel/opentelemetry-collector-contrib:0.96.07ef2a2ff46b9
github.com/docker/distribution@v2.8.2+incompatible
no fix listed

Open the chart page →

2,444
ed-traefikscaleway-charts0.2.01 of 1See more

ed-traefik scaleway-charts 0.2.0

1 of the 1 container images this version deploys carry CVE-2026-85747.

Container imageDigestPackageFixed in
library/traefik:v1.7.345d47b7bb2546
github.com/docker/distribution@v2.7.1+incompatible
no fix listed

Open the chart page →

3,269
ed-traefik2scaleway-charts0.2.01 of 1See more

ed-traefik2 scaleway-charts 0.2.0

1 of the 1 container images this version deploys carry CVE-2026-85747.

Container imageDigestPackageFixed in
library/traefik:2.5.62f603f8d3abe
github.com/docker/distribution@v2.7.1+incompatible
no fix listed

Open the chart page →

4,314
crproxyschichtelVerified publisher0.1.41 of 1See more

crproxy schichtel 0.1.4

1 of the 1 container images this version deploys carry CVE-2026-85747.

Container imageDigestPackageFixed in
ghcr.io/daocloud/crproxy/crproxy:v0.8.0ee1eb3c9c9a1
github.com/distribution/distribution/v3@v3.0.0-20220907155224-78b9c98c5c31
3.1.2

Open the chart page →

1,965
centralbrainsciencemeshVerified publisher0.0.31 of 5See more

centralbrain sciencemesh 0.0.3

1 of the 5 container images this version deploys carry CVE-2026-85747.

Container imageDigestPackageFixed in
quay.io/prometheus/prometheus:v2.22.1b899dbd1b901
github.com/docker/distribution@v2.7.1+incompatible
no fix listed

Open the chart page →

14,674
hermitcrabseal-ioVerified publisher0.1.41 of 2See more

hermitcrab seal-io 0.1.4

1 of the 2 container images this version deploys carry CVE-2026-85747.

Container imageDigestPackageFixed in
sealio/terraform-deployer:v1.5.7-seal.1b0389d9848a5
github.com/docker/distribution@v2.8.1+incompatible
no fix listed

Open the chart page →

6,463
sigstore-probersigstoreVerified publisher0.3.11 of 1See more

sigstore-prober sigstore 0.3.1

1 of the 1 container images this version deploys carry CVE-2026-85747.

Container imageDigestPackageFixed in
ghcr.io/sigstore/sigstore-probers/prober:v1.0.1d1e914e6d6b9
github.com/docker/distribution@v2.8.3+incompatible
no fix listed

Open the chart page →

908
loggensikalabs0.1.01 of 1See more

loggen sikalabs 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-85747.

Container imageDigestPackageFixed in
sikalabs/slu:v0.72.07bd267f30247
github.com/docker/distribution@v2.8.2+incompatible
no fix listed

Open the chart page →

3,091
metrics-generatorsikalabs0.2.01 of 1See more

metrics-generator sikalabs 0.2.0

1 of the 1 container images this version deploys carry CVE-2026-85747.

Container imageDigestPackageFixed in
sikalabs/slu:v0.34.0fdc0c6711add
github.com/docker/distribution@v0.0.0-20171011171712-7484e51bf6af
no fix listed

Open the chart page →

3,692
olmsikalabs0.3.01 of 2See more

olm sikalabs 0.3.0

1 of the 2 container images this version deploys carry CVE-2026-85747.

Container imageDigestPackageFixed in
quay.io/operator-framework/olmdigest-pinned40d0363f4aa6
github.com/docker/distribution@v2.8.3+incompatible
no fix listed

Open the chart page →

2,026
sikalabs-harbor-master-snapshotsikalabs2023.6.203 of 8See more

sikalabs-harbor-master-snapshot sikalabs 2023.6.20

3 of the 8 container images this version deploys carry CVE-2026-85747.

Container imageDigestPackageFixed in
goharbor/harbor-registryctl:devca0765d1c0eb
github.com/docker/distribution@v0.0.0-20260921091602-ac7c4cedc2f4+dirty
no fix listed
goharbor/registry-photon:dev2d344e1d870d
github.com/docker/distribution@v0.0.0-20260921091602-ac7c4cedc2f4+dirty
no fix listed
goharbor/trivy-adapter-photon:dev72aa75db0f6c
github.com/docker/distribution@v2.8.2+incompatible
no fix listed

Open the chart page →

1,155
system-upgrade-controllersinextraVerified publisher0.6.11 of 1See more

system-upgrade-controller sinextra 0.6.1

1 of the 1 container images this version deploys carry CVE-2026-85747.

Container imageDigestPackageFixed in
rancher/system-upgrade-controller:v0.19.234fa058fe453
github.com/docker/distribution@v2.8.3+incompatible
no fix listed

Open the chart page →

653
teamcitysinextraVerified publisher1.1.01 of 3See more

teamcity sinextra 1.1.0

1 of the 3 container images this version deploys carry CVE-2026-85747.

Container imageDigestPackageFixed in
library/docker:26.1-dinddd43b430341a
github.com/docker/distribution@v2.8.3+incompatible
no fix listed

Open the chart page →

3,136

Container images carrying it

634 by charts deploying them

A fixed version is listed for 1 of the 2 affected packages.

Container imageDigestPackageFixed inUsed by
goharbor/registry-photon:v2.15.4dc0cb388a644
github.com/docker/distribution@v0.0.0-20260921091602-ac7c4cedc2f4+dirty
no fix listed
1
goharbor/trivy-adapter-photon:v2.14.35c6f7162804c
github.com/docker/distribution@v2.8.3+incompatible
no fix listed
1
goharbor/trivy-adapter-photon:dev72aa75db0f6c
github.com/docker/distribution@v2.8.2+incompatible
no fix listed
1
goharbor/trivy-adapter-photon:v2.15.4813ca81b4a4e
github.com/docker/distribution@v2.8.2+incompatible
no fix listed
1
goharbor/trivy-adapter-photon:v2.5.3b9522c3f5056
github.com/docker/distribution@v2.8.1+incompatible
no fix listed
1
goharbor/trivy-adapter-photon:v2.9.0dc5b882a7db4
github.com/docker/distribution@v2.8.2+incompatible
no fix listed
1
grafana/agent:v0.20.0825c09373d27
github.com/docker/distribution@v2.7.1+incompatible
no fix listed
1
grafana/agent-operator:v0.34.1045c9125634c
github.com/docker/distribution@v2.8.2+incompatible
no fix listed
1
grafana/phlare:0.5.1330f990cdad9
github.com/docker/distribution@v2.8.1+incompatible
no fix listed
1
grafana/promtail:2.6.1072527b12cdf
github.com/docker/distribution@v2.7.1+incompatible
no fix listed
1
grafana/promtail:2.0.05fd12edcc694
github.com/docker/distribution@v2.7.1+incompatible
no fix listed
1
grafana/promtail:2.9.1063a2e57a5b14
github.com/docker/distribution@v2.8.2+incompatible
no fix listed
1
grafana/promtail:2.7.0c16c710f7333
github.com/docker/distribution@v2.7.1+incompatible
no fix listed
1
groundnuty/k8s-wait-for:no-root-v2.0a26d3d3f6e1c
github.com/docker/distribution@v2.8.1+incompatible
no fix listed
1
grpl/grapple-cli:0.2.127c00aafee6629
github.com/docker/distribution@v2.8.3+incompatible
no fix listed
1
hashicorp/vault:1.15.40b01ed3924e6
github.com/docker/distribution@v2.8.2+incompatible
no fix listed
1
hashicorp/waypoint:0.11.397d521a27498
github.com/distribution/distribution/v3@v3.0.0-20220526142353-ffbd94cbe269
github.com/docker/distribution@v2.8.1+incompatible
3.1.2
no fix listed
1
hfoxy4/kubefaas-builder:main-2afc7570bfb65aaad93
github.com/docker/distribution@v2.8.2+incompatible
no fix listed
1
holoinsight/agent:latest5c3994e742f8
github.com/docker/distribution@v2.8.1+incompatible
no fix listed
1
holoinsight/otelcontribcol:latest42ba8dc3113c
github.com/docker/distribution@v2.8.1+incompatible
no fix listed
1
hyperledger/fabric-peer:2.2.1bf4995c86af6
github.com/docker/distribution@v2.7.1+incompatible
no fix listed
1
inseefrlab/shelly:cloudshell31f04ca7436b
github.com/docker/distribution@v2.8.2+incompatible
no fix listed
1
iomesh/deck:v0.1.0a31e26b6ae22
github.com/docker/distribution@v2.8.2+incompatible
no fix listed
1
iosifache/wazuh-manager-filebeat:latest85df3f04b5da
github.com/docker/distribution@v2.7.1+incompatible
no fix listed
1
ispras/svacer:11-2-042aa9fa9f189
github.com/docker/distribution@v2.8.3+incompatible
no fix listed
1
istio/operator:1.12.06cfce8a071b9
github.com/docker/distribution@v0.0.0-20191216044856-a8371794149d
no fix listed
1
istio/operator:1.18.270f9d1fe5fff
github.com/docker/distribution@v2.8.2+incompatible
no fix listed
1
istio/pilot:1.29.0325156535773
github.com/docker/distribution@v2.8.3+incompatible
no fix listed
1
istio/pilot:1.23.69c3d6a218181
github.com/docker/distribution@v2.8.3+incompatible
no fix listed
1
istio/pilot:1.16.0ac0284d75ec9
github.com/docker/distribution@v2.8.1+incompatible
no fix listed
1
istio/pilot:1.17.1ce9d87606701
github.com/docker/distribution@v2.8.1+incompatible
no fix listed
1
istio/pilot:1.15.2db08d6963975
github.com/docker/distribution@v2.8.1+incompatible
no fix listed
1
istio/pilot:1.29.1f8b0e412ac4a
github.com/docker/distribution@v2.8.3+incompatible
no fix listed
1
istio/proxyv2:1.14.1df69c1a7af7c
github.com/docker/distribution@v2.8.1+incompatible
no fix listed
1
itzg/mc-router:1.16.1bb552b59fb53
github.com/docker/distribution@v2.8.1+incompatible
no fix listed
1
jmferrer/azure-devops-agent:latest030f68ec6998
github.com/docker/distribution@v2.7.1+incompatible
no fix listed
1
kadalu/kadalu-operator:1.2.03726d7a805f2
github.com/docker/distribution@v2.8.2+incompatible
no fix listed
1
keelhq/keel:0.19.202ac4ea616c4
github.com/docker/distribution@v2.8.1+incompatible
no fix listed
1
kenchrcum/fluxcd-helm-upgrader:0.7.7c326e28a8f5f
github.com/docker/distribution@v2.8.3+incompatible
no fix listed
1
kfirfer/gcloud-mysql:1.0.3c257c1e0e8b9
github.com/docker/distribution@v2.8.2+incompatible
no fix listed
1
kiosksh/kiosk:0.2.11501725ba2025
github.com/docker/distribution@v0.0.0-20191216044856-a8371794149d
no fix listed
1
kubebb/core:v0.1.62b9e7f451d6b
github.com/distribution/distribution/v3@v3.0.0-20220526142353-ffbd94cbe269
github.com/docker/distribution@v2.8.1+incompatible
3.1.2
no fix listed
1
kubebb/core:lateste366c34a9b8d
github.com/distribution/distribution/v3@v3.0.0-20220526142353-ffbd94cbe269
github.com/docker/distribution@v2.8.1+incompatible
3.1.2
no fix listed
1
kubebb/mesh-operator:v5.7.0163ebbfc7a82
github.com/docker/distribution@v2.8.1+incompatible
no fix listed
1
kubeedge/edgemesh-agent:latest460c6061b608
github.com/docker/distribution@v2.8.0+incompatible
no fix listed
1
kubeflowkatib/katib-controller:v0.12.012a28c8a0b41
github.com/docker/distribution@v2.7.1+incompatible
no fix listed
1
kubeflowkatib/katib-controller:v0.17.072f14e03b9e1
github.com/docker/distribution@v2.8.2+incompatible
no fix listed
1
kubegems/kubectl:latestc3b4be9a54f5
github.com/docker/distribution@v2.8.1+incompatible
no fix listed
1
kubeoperator/webkubectl:v2.4.0be8f0d624640
github.com/docker/distribution@v2.7.1+incompatible
no fix listed
1
kubernetesui/dashboard:v2.6.1290bebc3cd96
github.com/docker/distribution@v2.8.1+incompatible
no fix listed
1

syft 1.42.1 · advisories as of 16 Oct 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.