StackRadar

CVE-2026-85747

Medium

Advisory

Published 15 Oct 2026In the index since 16 Oct 2026
Severity
Medium
worst across findings
CVSS
6.8
base score, highest
EPSS
0.002
10th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
647
of 18,137 indexed, latest versions
Container images
634
deployed by those charts
Fix available
1 of 2
affected packages

Distribution: Client `manifests.Get()` does not verify returned content against requested digest

Carried by container images the latest versions of 647 of 18,137 indexed charts deploy, on 634 images.

Affected packageAffected versionsFixed inImages
github.com/docker/distributiongolangv0.0.0-20171011171712-7484e51bf6af, v0.0.0-20191216044856-a8371794149d, v0.0.0-20260602055908-11540eae06cb+dirty, v0.0.0-20260701071724-493dca9a81a8+dirty+12 moreno fix listed624
github.com/distribution/distribution/v3golangv0.0.0-20250402055438-9ed95e736522, v3.0.0, v3.0.0-20210316161203-a01c71e2477e, v3.0.0-20220526142353-ffbd94cbe269+9 more3.1.236
OSV records
GHSA-685w-q87j-wqw3
Trending
Rank 42 in indexed charts, since 16 Oct 2026. See the ranking →

Charts affected

647 by stars
ChartLatestAffected imagesRadar Score
kubedbappscodeVerified publisher2026.10.125 of 8See more

kubedb appscode 2026.10.12

5 of the 8 container images this version deploys carry CVE-2026-85747.

Container imageDigestPackageFixed in
ghcr.io/appscode/petset:v0.2.0acf407bb57d7
github.com/docker/distribution@v2.8.3+incompatible
no fix listed
ghcr.io/kubedb/kubedb-autoscaler:v0.53.02cb0dea06e85
github.com/docker/distribution@v2.8.3+incompatible
no fix listed
ghcr.io/kubedb/kubedb-crd-manager:v0.23.0a9f457db14c0
github.com/docker/distribution@v2.8.3+incompatible
no fix listed
ghcr.io/kubedb/kubedb-ops-manager:v0.55.002322230569a
github.com/docker/distribution@v2.8.3+incompatible
no fix listed
ghcr.io/kubedb/kubedb-provisioner:v0.68.0dfbe507350f6
github.com/docker/distribution@v2.8.3+incompatible
no fix listed

Open the chart page →

4,435
fadicetic0.3.11 of 25See more

fadi cetic 0.3.1

1 of the 25 container images this version deploys carry CVE-2026-85747.

Container imageDigestPackageFixed in
library/traefik:2.5.47d0228d19042
github.com/docker/distribution@v2.7.1+incompatible
no fix listed

Open the chart page →

141,249
cloudquerycloudquery39.0.41 of 1See more

cloudquery cloudquery 39.0.4

1 of the 1 container images this version deploys carry CVE-2026-85747.

Container imageDigestPackageFixed in
ghcr.io/cloudquery/cloudquery:6.40.040b804fce7f9
github.com/docker/distribution@v2.8.3+incompatible
no fix listed

Open the chart page →

969
routercosmo-routerOfficialVerified publisher0.18.01 of 1See more

router cosmo-router 0.18.0

1 of the 1 container images this version deploys carry CVE-2026-85747.

Container imageDigestPackageFixed in
ghcr.io/wundergraph/cosmo/router:0.243.05afcab98d9d7
github.com/docker/distribution@v2.8.3+incompatible
no fix listed

Open the chart page →

2,326
daskhubdask2024.1.12 of 9See more

daskhub dask 2024.1.1

2 of the 9 container images this version deploys carry CVE-2026-85747.

Container imageDigestPackageFixed in
library/traefik:2.10.61957e3314f43
github.com/docker/distribution@v2.8.2+incompatible
no fix listed
registry.k8s.io/kube-scheduler:v1.26.110684e23172d9
github.com/docker/distribution@v2.8.1+incompatible
no fix listed

Open the chart page →

17,688
drone-runner-dockerdroneVerified publisher0.7.02 of 3See more

drone-runner-docker drone 0.7.0

2 of the 3 container images this version deploys carry CVE-2026-85747.

Container imageDigestPackageFixed in
drone/drone-runner-docker:1.8.1137e79c5e23c
github.com/docker/distribution@v2.7.1+incompatible
no fix listed
library/docker:20-dindaf96c680a7e1
github.com/distribution/distribution/v3@v3.0.0-20220725133111-4bf3547399eb
github.com/docker/distribution@v2.8.1+incompatible
3.1.2
no fix listed

Open the chart page →

7,677
k8s-image-swapperestahnVerified publisher1.11.01 of 2See more

k8s-image-swapper estahn 1.11.0

1 of the 2 container images this version deploys carry CVE-2026-85747.

Container imageDigestPackageFixed in
ghcr.io/estahn/k8s-image-swapper:1.5.102f5be9cde5f9
github.com/docker/distribution@v2.8.3+incompatible
no fix listed

Open the chart page →

2,681
flyteflyte1.16.81 of 11See more

flyte flyte 1.16.8

1 of the 11 container images this version deploys carry CVE-2026-85747.

Container imageDigestPackageFixed in
kubernetesui/dashboard:v2.2.0148991563e37
github.com/docker/distribution@v2.7.1+incompatible
no fix listed

Open the chart page →

4,634
kubeflowkubeflow1.6.22 of 45See more

kubeflow kubeflow 1.6.2

2 of the 45 container images this version deploys carry CVE-2026-85747.

Container imageDigestPackageFixed in
istio/proxyv2:1.14.1df69c1a7af7c
github.com/docker/distribution@v2.8.1+incompatible
no fix listed
gcr.io/knative-releases/knative.dev/serving/cmd/controller:v1.2.575cfdcfa050a
github.com/docker/distribution@v2.8.0+incompatible
no fix listed

Open the chart page →

192,473
vclustermainVerified publisher0.17.04 of 10See more

vcluster main 0.17.0

4 of the 10 container images this version deploys carry CVE-2026-85747.

Container imageDigestPackageFixed in
quay.io/kubermatic/machine-controller:v1.57.0476ae867ae56
github.com/docker/distribution@v2.8.2+incompatible
no fix listed
registry.k8s.io/kube-apiserver:v1.25.0f6902791fb9a
github.com/docker/distribution@v2.8.1+incompatible
no fix listed
registry.k8s.io/kube-controller-manager:v1.25.066ce7d460e53
github.com/docker/distribution@v2.8.1+incompatible
no fix listed
registry.k8s.io/kube-scheduler:v1.25.09330c53feca7
github.com/docker/distribution@v2.8.1+incompatible
no fix listed

Open the chart page →

17,222
helm-ai-kernelmindburn-labsOfficialVerified publisher0.11.11 of 2See more

helm-ai-kernel mindburn-labs 0.11.1

1 of the 2 container images this version deploys carry CVE-2026-85747.

Container imageDigestPackageFixed in
alpine/helmdigest-pinned105741fa6621
github.com/docker/distribution@v2.8.3+incompatible
no fix listed

Open the chart page →

3,001
policy-controllersigstoreVerified publisher0.10.81 of 2See more

policy-controller sigstore 0.10.8

1 of the 2 container images this version deploys carry CVE-2026-85747.

Container imageDigestPackageFixed in
ghcr.io/sigstore/policy-controller/policy-controllerdigest-pinned0bcd60beb93f
github.com/docker/distribution@v2.8.3+incompatible
no fix listed

Open the chart page →

1,447
steampipe-powerpipe-kubernetessteampipe-powerpipe-kubernetesVerified publisher0.13.11 of 2See more

steampipe-powerpipe-kubernetes steampipe-powerpipe-kubernetes 0.13.1

1 of the 2 container images this version deploys carry CVE-2026-85747.

Container imageDigestPackageFixed in
ghcr.io/oguzhan-yilmaz/steampipe-powerpipe-kubernetes--steampipe:latestc0c8d53df9f3
github.com/docker/distribution@v2.8.3+incompatible
no fix listed

Open the chart page →

7,067
uffizzi-appuffizzi-app1.3.01 of 14See more

uffizzi-app uffizzi-app 1.3.0

1 of the 14 container images this version deploys carry CVE-2026-85747.

Container imageDigestPackageFixed in
quay.io/jetstack/cert-manager-ctl:v1.13.24d9fce2c050e
github.com/docker/distribution@v2.8.2+incompatible
no fix listed

Open the chart page →

26,632
aperture-controlleraperture2.34.01 of 5See more

aperture-controller aperture 2.34.0

1 of the 5 container images this version deploys carry CVE-2026-85747.

Container imageDigestPackageFixed in
quay.io/prometheus/prometheus:v2.33.591100b06e86d
github.com/docker/distribution@v2.7.1+incompatible
no fix listed

Open the chart page →

7,684
openshift-consoleav1o-chartsVerified publisher0.3.61 of 1See more

openshift-console av1o-charts 0.3.6

1 of the 1 container images this version deploys carry CVE-2026-85747.

Container imageDigestPackageFixed in
quay.io/openshift/origin-console:4.10.00bbe8b451fa3
github.com/docker/distribution@v2.7.1+incompatible
no fix listed

Open the chart page →

10,454
prometheusaveshaVerified publisher19.3.01 of 4See more

prometheus avesha 19.3.0

1 of the 4 container images this version deploys carry CVE-2026-85747.

Container imageDigestPackageFixed in
quay.io/prometheus/prometheus:v2.41.01a3e9a878e50
github.com/docker/distribution@v2.8.1+incompatible
no fix listed

Open the chart page →

8,756
cadvisorcadvisorVerified publisher0.1.151 of 1See more

cadvisor cadvisor 0.1.15

1 of the 1 container images this version deploys carry CVE-2026-85747.

Container imageDigestPackageFixed in
gcr.io/cadvisor/cadvisor:v0.47.2e6c562b5e983
github.com/docker/distribution@v2.8.1+incompatible
no fix listed

Open the chart page →

2,430
cert-managerchoerodon1.8.21 of 4See more

cert-manager choerodon 1.8.2

1 of the 4 container images this version deploys carry CVE-2026-85747.

Container imageDigestPackageFixed in
quay.io/jetstack/cert-manager-ctl:v1.8.281b2d775edad
github.com/docker/distribution@v2.8.1+incompatible
no fix listed

Open the chart page →

11,811
cosmocosmo-platformOfficialVerified publisher0.22.11 of 10See more

cosmo cosmo-platform 0.22.1

1 of the 10 container images this version deploys carry CVE-2026-85747.

Container imageDigestPackageFixed in
ghcr.io/wundergraph/cosmo/controlplane:0.133.149800ff775f3
github.com/docker/distribution@v2.8.3+incompatible
no fix listed

Open the chart page →

35,666
dapr-dashboarddapr0.15.01 of 1See more

dapr-dashboard dapr 0.15.0

1 of the 1 container images this version deploys carry CVE-2026-85747.

Container imageDigestPackageFixed in
daprio/dashboard:0.15.04be696707bd1
github.com/docker/distribution@v0.0.0-20191216044856-a8371794149d
no fix listed

Open the chart page →

1,955
kube-benchdeliveryheroVerified publisher0.1.171 of 1See more

kube-bench deliveryhero 0.1.17

1 of the 1 container images this version deploys carry CVE-2026-85747.

Container imageDigestPackageFixed in
aquasec/kube-bench:v0.8.0ea3e33bc3c4e
github.com/docker/distribution@v2.8.2+incompatible
no fix listed

Open the chart page →

2,316
headscaleheadscaleVerified publisher1.0.201 of 3See more

headscale headscale 1.0.20

1 of the 3 container images this version deploys carry CVE-2026-85747.

Container imageDigestPackageFixed in
alpine/k8s:1.37.0b421c2e9419e
github.com/docker/distribution@v2.8.3+incompatible
no fix listed

Open the chart page →

2,900
coreinstill-aiOfficialVerified publisher0.1.751 of 15See more

core instill-ai 0.1.75

1 of the 15 container images this version deploys carry CVE-2026-85747.

Container imageDigestPackageFixed in
groundnuty/k8s-wait-for:v2.0c14d7271e401
github.com/docker/distribution@v2.8.1+incompatible
no fix listed

Open the chart page →

14,442
jenkins-operatorjenkins0.8.11 of 1See more

jenkins-operator jenkins 0.8.1

1 of the 1 container images this version deploys carry CVE-2026-85747.

Container imageDigestPackageFixed in
quay.io/jenkins-kubernetes-operator/operator:v0.8.171cb50263c3b
github.com/docker/distribution@v2.7.1+incompatible
no fix listed

Open the chart page →

3,454
kubevpnkubevpn-charts2.11.101 of 1See more

kubevpn kubevpn-charts 2.11.10

1 of the 1 container images this version deploys carry CVE-2026-85747.

Container imageDigestPackageFixed in
ghcr.io/kubenetworks/kubevpn:v2.11.104bab151b3613
github.com/docker/distribution@v2.8.3+incompatible
no fix listed

Open the chart page →

1,923
kubeservice-lxcfs-webhookkubservice-chartsVerified publisher1.6.01 of 6See more

kubeservice-lxcfs-webhook kubservice-charts 1.6.0

1 of the 6 container images this version deploys carry CVE-2026-85747.

Container imageDigestPackageFixed in
quay.io/jetstack/cert-manager-ctl:v1.13.1c10bde7ff9ad
github.com/docker/distribution@v2.8.2+incompatible
no fix listed

Open the chart page →

62,400
karporkusionstackVerified publisher0.7.71 of 3See more

karpor kusionstack 0.7.7

1 of the 3 container images this version deploys carry CVE-2026-85747.

Container imageDigestPackageFixed in
kusionstack/karpor:v0.6.4b707d3bf0abd
github.com/docker/distribution@v2.8.1+incompatible
no fix listed

Open the chart page →

4,644
loftloftVerified publisher0.0.0-ci.141 of 1See more

loft loft 0.0.0-ci.14

1 of the 1 container images this version deploys carry CVE-2026-85747.

Container imageDigestPackageFixed in
ghcr.io/loft-sh/loft:0.0.0-ci.14b69bcdaa8492
github.com/distribution/distribution/v3@v3.0.0-20230214150026-36d8c594d7aa
github.com/docker/distribution@v2.8.1+incompatible
3.1.2
no fix listed

Open the chart page →

4,654
vcluster-k8sloftVerified publisher0.0.0-ci.32 of 4See more

vcluster-k8s loft 0.0.0-ci.3

2 of the 4 container images this version deploys carry CVE-2026-85747.

Container imageDigestPackageFixed in
registry.k8s.io/kube-apiserver:v1.26.199e1ed9fbc8a
github.com/docker/distribution@v2.8.1+incompatible
no fix listed
registry.k8s.io/kube-controller-manager:v1.26.140adecbe3a40
github.com/docker/distribution@v2.8.1+incompatible
no fix listed

Open the chart page →

8,393
vcluster-platformloftVerified publisher4.12.31 of 1See more

vcluster-platform loft 4.12.3

1 of the 1 container images this version deploys carry CVE-2026-85747.

Container imageDigestPackageFixed in
ghcr.io/loft-sh/vcluster-platform:4.12.30783a83d770b
github.com/docker/distribution@v2.8.3+incompatible
no fix listed

Open the chart page →

1,189
veleromesosphere3.2.51 of 1See more

velero mesosphere 3.2.5

1 of the 1 container images this version deploys carry CVE-2026-85747.

Container imageDigestPackageFixed in
bitnamilegacy/kubectl:1.26.4a0a972324d93
github.com/docker/distribution@v2.8.1+incompatible
no fix listed

Open the chart page →

2,824
move2kubemove2kube0.3.151 of 1See more

move2kube move2kube 0.3.15

1 of the 1 container images this version deploys carry CVE-2026-85747.

Container imageDigestPackageFixed in
quay.io/konveyor/move2kube-ui:latestec6ab507c5da
github.com/docker/distribution@v2.8.2+incompatible
no fix listed

Open the chart page →

4,932
oesopsmxVerified publisher4.0.321 of 25See more

oes opsmx 4.0.32

1 of the 25 container images this version deploys carry CVE-2026-85747.

Container imageDigestPackageFixed in
quay.io/opsmxpublic/create-secret:v4.0.4defc3263e0e9
github.com/docker/distribution@v2.8.1+incompatible
no fix listed

Open the chart page →

112,529
plecopleco0.24.01 of 1See more

pleco pleco 0.24.0

1 of the 1 container images this version deploys carry CVE-2026-85747.

Container imageDigestPackageFixed in
public.ecr.aws/r3m4q3r9/pleco:0.24.0651739583336
github.com/docker/distribution@v2.8.2+incompatible
no fix listed

Open the chart page →

2,068
kube-prometheus-stackprometheus-worawutchan12.8.01 of 6See more

kube-prometheus-stack prometheus-worawutchan 12.8.0

1 of the 6 container images this version deploys carry CVE-2026-85747.

Container imageDigestPackageFixed in
quay.io/prometheus-operator/prometheus-operator:v0.44.0983627001c89
github.com/docker/distribution@v2.7.1+incompatible
no fix listed

Open the chart page →

17,271
sn-platformstreamnative1.11.461 of 9See more

sn-platform streamnative 1.11.46

1 of the 9 container images this version deploys carry CVE-2026-85747.

Container imageDigestPackageFixed in
quay.io/prometheus/prometheus:v2.43.0f5c29683a301
github.com/docker/distribution@v2.8.1+incompatible
no fix listed

Open the chart page →

77,636
feedbacksystemthm-mni-iiVerified publisher0.48.32 of 14See more

feedbacksystem thm-mni-ii 0.48.3

2 of the 14 container images this version deploys carry CVE-2026-85747.

Container imageDigestPackageFixed in
library/docker:20.10.21-dind3153fa63f546
github.com/distribution/distribution/v3@v3.0.0-20220725133111-4bf3547399eb
github.com/docker/distribution@v2.8.1+incompatible
3.1.2
no fix listed
ghcr.io/thm-mni-ii/fbs-runner:v2.0.9ffaf49a4d687
github.com/distribution/distribution/v3@v3.0.0-20220725133111-4bf3547399eb
github.com/docker/distribution@v2.8.1+incompatible
3.1.2
no fix listed

Open the chart page →

29,972
maeshtraefikOfficialVerified publisher2.1.21 of 7See more

maesh traefik 2.1.2

1 of the 7 container images this version deploys carry CVE-2026-85747.

Container imageDigestPackageFixed in
containous/maesh:v1.3.2587162516502
github.com/docker/distribution@v2.7.1+incompatible
no fix listed

Open the chart page →

6,061
traefik-meshtraefikOfficialVerified publisher4.1.11 of 7See more

traefik-mesh traefik 4.1.1

1 of the 7 container images this version deploys carry CVE-2026-85747.

Container imageDigestPackageFixed in
library/traefik:v2.57d5a6ae66572
github.com/docker/distribution@v2.7.1+incompatible
no fix listed

Open the chart page →

13,283
argocdtwomartensVerified publisher0.1.11 of 3See more

argocd twomartens 0.1.1

1 of the 3 container images this version deploys carry CVE-2026-85747.

Container imageDigestPackageFixed in
quay.io/argoproj/argocd:v2.8.6acaf37352569
github.com/docker/distribution@v2.8.2+incompatible
no fix listed

Open the chart page →

12,688
vaultvaultVerified publisher1.22.01 of 4See more

vault vault 1.22.0

1 of the 4 container images this version deploys carry CVE-2026-85747.

Container imageDigestPackageFixed in
alpine/k8s:1.35.5d870622d0040
github.com/docker/distribution@v2.8.3+incompatible
no fix listed

Open the chart page →

6,299
yataiyataiVerified publisher0.4.61 of 2See more

yatai yatai 0.4.6

1 of the 2 container images this version deploys carry CVE-2026-85747.

Container imageDigestPackageFixed in
quay.io/bentoml/yatai:0.4.614b482c1f1b8
github.com/docker/distribution@v2.7.1+incompatible
no fix listed

Open the chart page →

5,887
agentareaagentareaVerified publisher0.0.271 of 17See more

agentarea agentarea 0.0.27

1 of the 17 container images this version deploys carry CVE-2026-85747.

Container imageDigestPackageFixed in
agentarea/agentarea-mcp-manager:latest377d326784f9
github.com/docker/distribution@v2.8.3+incompatible
no fix listed

Open the chart page →

16,861
traefikaigisukVerified publisher0.1.11 of 1See more

traefik aigisuk 0.1.1

1 of the 1 container images this version deploys carry CVE-2026-85747.

Container imageDigestPackageFixed in
library/traefik:2.7.0-rc2b70710baceeb
github.com/docker/distribution@v2.7.1+incompatible
no fix listed

Open the chart page →

3,988
clearml-servingallegroaiVerified publisher1.6.21 of 9See more

clearml-serving allegroai 1.6.2

1 of the 9 container images this version deploys carry CVE-2026-85747.

Container imageDigestPackageFixed in
quay.io/prometheus/prometheus:v2.41.01a3e9a878e50
github.com/docker/distribution@v2.8.1+incompatible
no fix listed

Open the chart page →

25,834
upcloud-csiankra-chartsVerified publisher0.4.11 of 8See more

upcloud-csi ankra-charts 0.4.1

1 of the 8 container images this version deploys carry CVE-2026-85747.

Container imageDigestPackageFixed in
alpine/k8s:1.31.137a319b15cfc9
github.com/docker/distribution@v2.8.1+incompatible
no fix listed

Open the chart page →

23,152
anteonanteonVerified publisher2.6.41 of 13See more

anteon anteon 2.6.4

1 of the 13 container images this version deploys carry CVE-2026-85747.

Container imageDigestPackageFixed in
prom/prometheus:v2.37.98176adea328e
github.com/docker/distribution@v2.7.1+incompatible
no fix listed

Open the chart page →

28,233
kubedb-opscenterappscodeVerified publisher2026.10.121 of 1See more

kubedb-opscenter appscode 2026.10.12

1 of the 1 container images this version deploys carry CVE-2026-85747.

Container imageDigestPackageFixed in
ghcr.io/kubedb/kubedb-ui-server:v0.44.0be49f4d7e01a
github.com/docker/distribution@v2.8.3+incompatible
no fix listed

Open the chart page →

190
kubedb-provisionerappscodeVerified publisher0.68.01 of 1See more

kubedb-provisioner appscode 0.68.0

1 of the 1 container images this version deploys carry CVE-2026-85747.

Container imageDigestPackageFixed in
ghcr.io/kubedb/kubedb-provisioner:v0.68.0dfbe507350f6
github.com/docker/distribution@v2.8.3+incompatible
no fix listed

Open the chart page →

565

Container images carrying it

634 by charts deploying them

A fixed version is listed for 1 of the 2 affected packages.

Container imageDigestPackageFixed inUsed by
veecode/devportalfe33373b7e5d
github.com/docker/distribution@v2.8.3+incompatible
no fix listed
1
veecode/devportal-admin-ui:0.4.30c69fd286b489
github.com/docker/distribution@v2.8.3+incompatible
no fix listed
1
wazuh/wazuh-manager:4.11.11da5c38c6a78
github.com/docker/distribution@v2.7.1+incompatible
no fix listed
1
wazuh/wazuh-manager:4.4.121994f40e0da
github.com/docker/distribution@v2.7.1+incompatible
no fix listed
1
wazuh/wazuh-manager:4.14.45a065930682d
github.com/docker/distribution@v2.7.1+incompatible
no fix listed
1
wazuh/wazuh-manager:4.14.3f09282d281f6
github.com/docker/distribution@v2.7.1+incompatible
no fix listed
1
gcr.io/cadvisor/cadvisor:v0.40.0135327c978de
github.com/docker/distribution@v2.7.1+incompatible
no fix listed
1
gcr.io/cadvisor/cadvisor:v0.47.2e6c562b5e983
github.com/docker/distribution@v2.8.1+incompatible
no fix listed
1
gcr.io/datadoghq/csi-driver:1.4.086c713de81d9
github.com/docker/distribution@v2.8.3+incompatible
no fix listed
1
gcr.io/gloo-mesh/gloo-mesh:1.1.2a4011eae6a0b
github.com/docker/distribution@v0.0.0-20191216044856-a8371794149d
no fix listed
1
gcr.io/istio-testing/operator:latest8d4576f7b98f
github.com/docker/distribution@v2.8.3+incompatible
no fix listed
1
gcr.io/kaniko-project/executor:latest4e7a52dd1f14
github.com/docker/distribution@v2.8.3+incompatible
no fix listed
1
gcr.io/knative-releases/knative.dev/serving/cmd/controller:v1.13.153d9aa4d2c7a
github.com/docker/distribution@v2.8.1+incompatible
no fix listed
1
gcr.io/knative-releases/knative.dev/serving/cmd/controller:v1.2.575cfdcfa050a
github.com/docker/distribution@v2.8.0+incompatible
no fix listed
1
gcr.io/knative-releases/knative.dev/serving/cmd/controller:v1.10.298a2cc7fd62e
github.com/docker/distribution@v2.8.1+incompatible
no fix listed
1
gcr.io/knative-releases/knative.dev/serving/cmd/controllerbac158dfb0c7
github.com/docker/distribution@v2.8.0+incompatible
no fix listed
1
gcr.io/kubecost1/server:prod-1.82.22b1a3d08caac
github.com/docker/distribution@v2.7.1+incompatible
no fix listed
1
gcr.io/kubecost1/server:prod-1.81.0a348db3e4d74
github.com/docker/distribution@v2.7.1+incompatible
no fix listed
1
gcr.io/press-labs-public/dashboard:1.8.19b88f88070fb0
github.com/docker/distribution@v2.7.1+incompatible
no fix listed
1
gcr.io/projectsigstore/cosigned784518ff3ee7
github.com/docker/distribution@v2.8.0+incompatible
no fix listed
1
gcr.io/projectsigstore/policy-webhook82940e8c3e0d
github.com/docker/distribution@v2.8.0+incompatible
no fix listed
1
ghcr.io/appscode/ace:v0.2.0b8e03da90e70
github.com/docker/distribution@v2.8.3+incompatible
no fix listed
1
ghcr.io/appscode/acerproxy:v0.2.021de3771fdd5
github.com/docker/distribution@v2.8.3+incompatible
no fix listed
1
ghcr.io/appscode/aceshifter:v0.0.3e5f5c254a55a
github.com/docker/distribution@v2.8.3+incompatible
no fix listed
1
ghcr.io/appscode/b3:v2023.03.235f5a40fc1702
github.com/docker/distribution@v2.8.1+incompatible
no fix listed
1
ghcr.io/appscode/cattleset:v0.0.145554a03e448
github.com/docker/distribution@v2.8.3+incompatible
no fix listed
1
ghcr.io/appscode/cloudflare-dns-proxy:v0.0.5dfbef0285e14
github.com/docker/distribution@v2.8.3+incompatible
no fix listed
1
ghcr.io/appscode/gh-ci-webhook:v0.0.2036ce246d884e
github.com/docker/distribution@v2.8.2+incompatible
no fix listed
1
ghcr.io/appscode/inbox-agent:v0.0.6f630e47772c9
github.com/docker/distribution@v2.8.3+incompatible
no fix listed
1
ghcr.io/appscode/kube-ui-server:v0.8.05f458bcbaa65
github.com/docker/distribution@v2.8.3+incompatible
no fix listed
1
ghcr.io/appscode/outboxsyncer:v0.6.0c52861c4669f
github.com/docker/distribution@v2.8.3+incompatible
no fix listed
1
ghcr.io/appscode/panopticon:v0.0.243ea0e226a86d
github.com/docker/distribution@v2.8.3+incompatible
no fix listed
1
ghcr.io/appscode/petset:v0.2.0913f0858eb24
github.com/docker/distribution@v2.8.3+incompatible
no fix listed
1
ghcr.io/appscode/petset:v0.2.0acf407bb57d7
github.com/docker/distribution@v2.8.3+incompatible
no fix listed
1
ghcr.io/appscode/scanner:v0.0.2116907aae5de1
github.com/docker/distribution@v2.8.3+incompatible
no fix listed
1
ghcr.io/appscode/smtprelay:v0.0.479c9c76a78e6
github.com/docker/distribution@v2.8.3+incompatible
no fix listed
1
ghcr.io/aquasecurity/trivy-operator:0.16.0a608b798fda5
github.com/docker/distribution@v2.8.2+incompatible
no fix listed
1
ghcr.io/argonix-io/argonix-api:0.6.5431abcce7c1e
github.com/docker/distribution@v2.8.3+incompatible
no fix listed
1
ghcr.io/beluga-cloud/helm-dashboard/dashboard:1.3.39ab9a675c405
github.com/docker/distribution@v2.8.2+incompatible
no fix listed
1
ghcr.io/buoyantio/metrics-api:preview-25.4.32cef2a3f97da
github.com/docker/distribution@v2.8.3+incompatible
no fix listed
1
ghcr.io/buoyantio/tap:preview-25.4.3e02a8bd9e2c3
github.com/docker/distribution@v2.8.3+incompatible
no fix listed
1
ghcr.io/buoyantio/web:preview-25.4.33ee1b62aa111
github.com/docker/distribution@v2.8.3+incompatible
no fix listed
1
ghcr.io/caninehq/canine:latest68b19aee1c64
github.com/docker/distribution@v2.8.3+incompatible
no fix listed
1
ghcr.io/chaos-mesh/chaos-daemon:v2.7.29608d9b51452
github.com/docker/distribution@v2.8.2+incompatible
no fix listed
1
ghcr.io/chaos-mesh/chaos-daemon:v2.5.1cf78fdf7403a
github.com/docker/distribution@v2.8.1+incompatible
no fix listed
1
ghcr.io/chaos-mesh/chaos-dashboard:v2.7.211cdbbc479b3
github.com/docker/distribution@v2.8.2+incompatible
no fix listed
1
ghcr.io/chaos-mesh/chaos-dashboard:v2.5.1448cb346b12c
github.com/docker/distribution@v2.8.1+incompatible
no fix listed
1
ghcr.io/chaos-mesh/chaos-mesh:v2.5.1700bb42ac21d
github.com/docker/distribution@v2.8.1+incompatible
no fix listed
1
ghcr.io/chaos-mesh/chaos-mesh:v2.7.28bc853c7414c
github.com/docker/distribution@v2.8.2+incompatible
no fix listed
1
ghcr.io/clouddrove/syncerd:latest73a1bb038de3
github.com/docker/distribution@v2.8.2+incompatible
no fix listed
1

syft 1.42.1 · advisories as of 16 Oct 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.