StackRadar

CVE-2026-85747

Medium

Advisory

Published 15 Oct 2026In the index since 16 Oct 2026
Severity
Medium
worst across findings
CVSS
6.8
base score, highest
EPSS
0.002
10th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
647
of 18,137 indexed, latest versions
Container images
634
deployed by those charts
Fix available
1 of 2
affected packages

Distribution: Client `manifests.Get()` does not verify returned content against requested digest

Carried by container images the latest versions of 647 of 18,137 indexed charts deploy, on 634 images.

Affected packageAffected versionsFixed inImages
github.com/docker/distributiongolangv0.0.0-20171011171712-7484e51bf6af, v0.0.0-20191216044856-a8371794149d, v0.0.0-20260602055908-11540eae06cb+dirty, v0.0.0-20260701071724-493dca9a81a8+dirty+12 moreno fix listed624
github.com/distribution/distribution/v3golangv0.0.0-20250402055438-9ed95e736522, v3.0.0, v3.0.0-20210316161203-a01c71e2477e, v3.0.0-20220526142353-ffbd94cbe269+9 more3.1.236
OSV records
GHSA-685w-q87j-wqw3
Trending
Rank 42 in indexed charts, since 16 Oct 2026. See the ranking →

Charts affected

647 by stars
ChartLatestAffected imagesRadar Score
scannerappscodeVerified publisher2026.1.151 of 3See more

scanner appscode 2026.1.15

1 of the 3 container images this version deploys carry CVE-2026-85747.

Container imageDigestPackageFixed in
ghcr.io/appscode/scanner:v0.0.2116907aae5de1
github.com/docker/distribution@v2.8.3+incompatible
no fix listed

Open the chart page →

7,349
smtprelayappscodeVerified publisher2026.10.121 of 1See more

smtprelay appscode 2026.10.12

1 of the 1 container images this version deploys carry CVE-2026-85747.

Container imageDigestPackageFixed in
ghcr.io/appscode/smtprelay:v0.0.479c9c76a78e6
github.com/docker/distribution@v2.8.3+incompatible
no fix listed

Open the chart page →

1,424
stash-enterpriseappscodeVerified publisher0.42.01 of 4See more

stash-enterprise appscode 0.42.0

1 of the 4 container images this version deploys carry CVE-2026-85747.

Container imageDigestPackageFixed in
ghcr.io/stashed/stash-enterprise:v0.42.1759f3850eda9
github.com/docker/distribution@v2.8.3+incompatible
no fix listed

Open the chart page →

6,220
argocd-backup-s3argocd-backup-s3Verified publisher0.9.51 of 1See more

argocd-backup-s3 argocd-backup-s3 0.9.5

1 of the 1 container images this version deploys carry CVE-2026-85747.

Container imageDigestPackageFixed in
ghcr.io/oguzhan-yilmaz/argocd-backup-s3:latestb61c750ade19
github.com/docker/distribution@v2.7.1+incompatible
no fix listed

Open the chart page →

6,683
siemassist-iot-cybersecurity-monitroting-siem0.1.01 of 3See more

siem assist-iot-cybersecurity-monitroting-siem 0.1.0

1 of the 3 container images this version deploys carry CVE-2026-85747.

Container imageDigestPackageFixed in
assistiot/cybersecurity-monitoring_id-wzh:latest0aacefac9677
github.com/docker/distribution@v2.7.1+incompatible
no fix listed

Open the chart page →

12,535
helm-dashboardbeluga-cloudVerified publisher2.4.01 of 1See more

helm-dashboard beluga-cloud 2.4.0

1 of the 1 container images this version deploys carry CVE-2026-85747.

Container imageDigestPackageFixed in
ghcr.io/beluga-cloud/helm-dashboard/dashboard:1.3.39ab9a675c405
github.com/docker/distribution@v2.8.2+incompatible
no fix listed

Open the chart page →

3,680
yatai-image-builderbentomlVerified publisher3.0.441 of 1See more

yatai-image-builder bentoml 3.0.44

1 of the 1 container images this version deploys carry CVE-2026-85747.

Container imageDigestPackageFixed in
quay.io/bentoml/yatai-image-builder:3.0.4401d8538c4f48
github.com/docker/distribution@v2.8.2+incompatible
no fix listed

Open the chart page →

910
brpservicebrpservice1.1.01 of 4See more

brpservice brpservice 1.1.0

1 of the 4 container images this version deploys carry CVE-2026-85747.

Container imageDigestPackageFixed in
ghcr.io/conductionnl/brpservice-php:latestc17f1ba17d36
github.com/docker/distribution@v0.0.0-20191216044856-a8371794149d
no fix listed

Open the chart page →

9,854
finops-stackcert-managerVerified publisher0.0.56 of 12See more

finops-stack cert-manager 0.0.5

6 of the 12 container images this version deploys carry CVE-2026-85747.

Container imageDigestPackageFixed in
ghcr.io/kyverno/background-controller:v1.12.506ed5db6cd33
github.com/docker/distribution@v2.8.3+incompatible
no fix listed
ghcr.io/kyverno/cleanup-controller:v1.12.5b914032ef9ad
github.com/docker/distribution@v2.8.3+incompatible
no fix listed
ghcr.io/kyverno/kyverno:v1.12.5a61c7022abcf
github.com/docker/distribution@v2.8.3+incompatible
no fix listed
ghcr.io/kyverno/kyverno-cli:v1.12.5832a32779e6d
github.com/docker/distribution@v2.8.3+incompatible
no fix listed
ghcr.io/kyverno/kyvernopre:v1.12.563f7eaf5aa8a
github.com/docker/distribution@v2.8.3+incompatible
no fix listed
ghcr.io/kyverno/reports-controller:v1.12.5c62e3347611c
github.com/docker/distribution@v2.8.3+incompatible
no fix listed

Open the chart page →

17,345
clairclair0.0.31 of 1See more

clair clair 0.0.3

1 of the 1 container images this version deploys carry CVE-2026-85747.

Container imageDigestPackageFixed in
quay.io/projectquay/clair:4.7.28d38ffa8fad7
github.com/docker/distribution@v2.8.1+incompatible
no fix listed

Open the chart page →

4,100
cloudflow-enterprise-componentscloudflow-helm-charts0.0.0-NIGHTLY011220201 of 9See more

cloudflow-enterprise-components cloudflow-helm-charts 0.0.0-NIGHTLY01122020

1 of the 9 container images this version deploys carry CVE-2026-85747.

Container imageDigestPackageFixed in
prom/prometheus:v2.21.0d43417c260e5
github.com/docker/distribution@v2.7.1+incompatible
no fix listed

Open the chart page →

6,656
cnpg-sandboxcloudnative-pgVerified publisher0.6.11 of 6See more

cnpg-sandbox cloudnative-pg 0.6.1

1 of the 6 container images this version deploys carry CVE-2026-85747.

Container imageDigestPackageFixed in
quay.io/prometheus-operator/prometheus-operator:v0.54.0be2aef39a2f8
github.com/docker/distribution@v2.7.1+incompatible
no fix listed

Open the chart page →

10,764
clusternet-hubclusternet1.0.01 of 1See more

clusternet-hub clusternet 1.0.0

1 of the 1 container images this version deploys carry CVE-2026-85747.

Container imageDigestPackageFixed in
ghcr.io/clusternet/clusternet-hub:v1.0.059f75504c5d4
github.com/docker/distribution@v2.8.3+incompatible
no fix listed

Open the chart page →

2,184
clusternet-schedulerclusternet1.0.01 of 1See more

clusternet-scheduler clusternet 1.0.0

1 of the 1 container images this version deploys carry CVE-2026-85747.

Container imageDigestPackageFixed in
ghcr.io/clusternet/clusternet-scheduler:v1.0.0a6ae5aff81ce
github.com/docker/distribution@v2.8.3+incompatible
no fix listed

Open the chart page →

2,184
cluster-setupcluster-setup1.5.01 of 8See more

cluster-setup cluster-setup 1.5.0

1 of the 8 container images this version deploys carry CVE-2026-85747.

Container imageDigestPackageFixed in
quay.io/argoproj/argocd:v3.0.395b5cf7ba6fe
github.com/docker/distribution@v2.8.3+incompatible
no fix listed

Open the chart page →

15,121
istio-allcode4devsVerified publisher1.2.01 of 6See more

istio-all code4devs 1.2.0

1 of the 6 container images this version deploys carry CVE-2026-85747.

Container imageDigestPackageFixed in
istio/pilot:1.24.2-distroless137e44e3d1d2
github.com/docker/distribution@v2.8.3+incompatible
no fix listed

Open the chart page →

7,163
istio-control-planecode4devsVerified publisher1.0.01 of 3See more

istio-control-plane code4devs 1.0.0

1 of the 3 container images this version deploys carry CVE-2026-85747.

Container imageDigestPackageFixed in
istio/pilot:1.24.2-distroless137e44e3d1d2
github.com/docker/distribution@v2.8.3+incompatible
no fix listed

Open the chart page →

3,527
contactcataloguscontact-catalogus1.0.01 of 3See more

contactcatalogus contact-catalogus 1.0.0

1 of the 3 container images this version deploys carry CVE-2026-85747.

Container imageDigestPackageFixed in
ghcr.io/conductionnl/contactcatalogus-php:latesteeb625bd660c
github.com/docker/distribution@v0.0.0-20191216044856-a8371794149d
no fix listed

Open the chart page →

9,378
dregsydeliveryheroVerified publisher0.1.51 of 1See more

dregsy deliveryhero 0.1.5

1 of the 1 container images this version deploys carry CVE-2026-85747.

Container imageDigestPackageFixed in
xelalex/dregsy:0.4.3574054e1c417
github.com/docker/distribution@v2.8.1+incompatible
no fix listed

Open the chart page →

4,036
trivy-operatordevopstalesVerified publisher2.5.01 of 1See more

trivy-operator devopstales 2.5.0

1 of the 1 container images this version deploys carry CVE-2026-85747.

Container imageDigestPackageFixed in
devopstales/trivy-operator:2.575136aa7a26e
github.com/docker/distribution@v2.8.1+incompatible
no fix listed

Open the chart page →

6,626
clairdevtron0.1.141 of 2See more

clair devtron 0.1.14

1 of the 2 container images this version deploys carry CVE-2026-85747.

Container imageDigestPackageFixed in
quay.io/devtron/clair:4.3.675fb847ac045
github.com/docker/distribution@v2.7.1+incompatible
no fix listed

Open the chart page →

8,148
digispoof-interfacedigispoof-interface1.0.01 of 3See more

digispoof-interface digispoof-interface 1.0.0

1 of the 3 container images this version deploys carry CVE-2026-85747.

Container imageDigestPackageFixed in
ghcr.io/conductionnl/digispoof-interface-php:latest03aba499950f
github.com/docker/distribution@v0.0.0-20191216044856-a8371794149d
no fix listed

Open the chart page →

9,933
dnation-pingdnationcloud0.1.91 of 5See more

dnation-ping dnationcloud 0.1.9

1 of the 5 container images this version deploys carry CVE-2026-85747.

Container imageDigestPackageFixed in
prom/prometheus:v2.21.0d43417c260e5
github.com/docker/distribution@v2.7.1+incompatible
no fix listed

Open the chart page →

15,335
docker-in-dockerdocker-in-docker0.0.31 of 2See more

docker-in-docker docker-in-docker 0.0.3

1 of the 2 container images this version deploys carry CVE-2026-85747.

Container imageDigestPackageFixed in
library/docker:24.0.2-dind1d148deae16a
github.com/distribution/distribution/v3@v3.0.0-20230601133803-97b1d649c493
github.com/docker/distribution@v2.8.2+incompatible
3.1.2
no fix listed

Open the chart page →

3,400
dockyarddockyardVerified publisher0.5.01 of 1See more

dockyard dockyard 0.5.0

1 of the 1 container images this version deploys carry CVE-2026-85747.

Container imageDigestPackageFixed in
ghcr.io/kgma74/dockyard:0.5.015d1d5769e91
github.com/docker/distribution@v2.8.3+incompatible
no fix listed

Open the chart page →

2,172
dragonfly-stackdragonflyVerified publisher0.1.22 of 7See more

dragonfly-stack dragonfly 0.1.2

2 of the 7 container images this version deploys carry CVE-2026-85747.

Container imageDigestPackageFixed in
dragonflyoss/manager:v2.1.49c3ef7f10698d
github.com/docker/distribution@v2.8.3+incompatible
no fix listed
ghcr.io/containerd/nydus-snapshotter:v0.9.056f8617363b4
github.com/docker/distribution@v2.8.2+incompatible
no fix listed

Open the chart page →

22,928
nydus-snapshotterdragonflyVerified publisher0.0.101 of 2See more

nydus-snapshotter dragonfly 0.0.10

1 of the 2 container images this version deploys carry CVE-2026-85747.

Container imageDigestPackageFixed in
ghcr.io/containerd/nydus-snapshotter:v0.9.056f8617363b4
github.com/docker/distribution@v2.8.2+incompatible
no fix listed

Open the chart page →

4,581
elchi-stackelchi2.0.61 of 10See more

elchi-stack elchi 2.0.6

1 of the 10 container images this version deploys carry CVE-2026-85747.

Container imageDigestPackageFixed in
otel/opentelemetry-collector-contrib:0.89.0995f17004231
github.com/docker/distribution@v2.8.2+incompatible
no fix listed

Open the chart page →

17,918
ipfs-clusterethereum-helm-chartsVerified publisher0.1.141 of 3See more

ipfs-cluster ethereum-helm-charts 0.1.14

1 of the 3 container images this version deploys carry CVE-2026-85747.

Container imageDigestPackageFixed in
lachlanevenson/k8s-kubectl:v1.25.4af5cea3f2e40
github.com/docker/distribution@v2.8.1+incompatible
no fix listed

Open the chart page →

6,687
fsmfsmOfficialVerified publisher0.2.112 of 5See more

fsm fsm 0.2.11

2 of the 5 container images this version deploys carry CVE-2026-85747.

Container imageDigestPackageFixed in
flomesh/fsm-ingress-pipy:0.2.11cc39c96711c4
github.com/docker/distribution@v2.8.2+incompatible
no fix listed
flomesh/fsm-manager:0.2.1122f849c70b25
github.com/docker/distribution@v2.8.2+incompatible
no fix listed

Open the chart page →

5,885
otel-collectorgeek-cookbookVerified publisher1.2.21 of 1See more

otel-collector geek-cookbook 1.2.2

1 of the 1 container images this version deploys carry CVE-2026-85747.

Container imageDigestPackageFixed in
otel/opentelemetry-collector-contrib:0.46.0ba173aa85f3f
github.com/docker/distribution@v2.8.0+incompatible
no fix listed

Open the chart page →

3,652
gomenhashaigomenhashaiOfficialVerified publisher1.3.41 of 1See more

gomenhashai gomenhashai 1.3.4

1 of the 1 container images this version deploys carry CVE-2026-85747.

Container imageDigestPackageFixed in
ghcr.io/gomenhashai/gomenhashai:v1.3.36f031172a5ec
github.com/docker/distribution@v2.8.3+incompatible
no fix listed

Open the chart page →

1,078
phlaregrafana0.5.41 of 1See more

phlare grafana 0.5.4

1 of the 1 container images this version deploys carry CVE-2026-85747.

Container imageDigestPackageFixed in
grafana/phlare:0.5.1330f990cdad9
github.com/docker/distribution@v2.8.1+incompatible
no fix listed

Open the chart page →

2,919
helm-operatorhelm-operatorVerified publisher0.0.21 of 1See more

helm-operator helm-operator 0.0.2

1 of the 1 container images this version deploys carry CVE-2026-85747.

Container imageDigestPackageFixed in
bsgrigorov/helm-operator:latest45ab095f09c8
github.com/docker/distribution@v2.7.1+incompatible
no fix listed

Open the chart page →

8,435
helmuphelmupVerified publisher0.1.01 of 3See more

helmup helmup 0.1.0

1 of the 3 container images this version deploys carry CVE-2026-85747.

Container imageDigestPackageFixed in
sirrend/helmup-engine:0.1.13699e79e3d4e2
github.com/docker/distribution@v2.8.3+incompatible
no fix listed

Open the chart page →

19,100
holoinsightholoinsight0.2.51 of 6See more

holoinsight holoinsight 0.2.5

1 of the 6 container images this version deploys carry CVE-2026-85747.

Container imageDigestPackageFixed in
holoinsight/otelcontribcol:latest42ba8dc3113c
github.com/docker/distribution@v2.8.1+incompatible
no fix listed

Open the chart page →

30,395
holoinsight-agentholoinsight0.2.51 of 2See more

holoinsight-agent holoinsight 0.2.5

1 of the 2 container images this version deploys carry CVE-2026-85747.

Container imageDigestPackageFixed in
holoinsight/agent:latest5c3994e742f8
github.com/docker/distribution@v2.8.1+incompatible
no fix listed

Open the chart page →

2,503
htnn-controllerhtnnVerified publisher0.5.01 of 1See more

htnn-controller htnn 0.5.0

1 of the 1 container images this version deploys carry CVE-2026-85747.

Container imageDigestPackageFixed in
ghcr.io/mosn/htnn-controller:v0.3.1c379e66246be
github.com/docker/distribution@v2.8.3+incompatible
no fix listed

Open the chart page →

5,210
jetic-operatorjetic-operatorVerified publisher2.0.21 of 1See more

jetic-operator jetic-operator 2.0.2

1 of the 1 container images this version deploys carry CVE-2026-85747.

Container imageDigestPackageFixed in
apache/camel-k:1.10.43bb13d14f64a
github.com/docker/distribution@v2.8.0+incompatible
no fix listed

Open the chart page →

10,981
kdiffkdiff-snapshotsVerified publisher0.0.2031 of 2See more

kdiff kdiff-snapshots 0.0.203

1 of the 2 container images this version deploys carry CVE-2026-85747.

Container imageDigestPackageFixed in
ghcr.io/oguzhan-yilmaz/kdiff-snapshots:0.0.2035bc5ca66d55a
github.com/docker/distribution@v2.8.3+incompatible
no fix listed

Open the chart page →

9,411
kdiff-snapshotskdiff-snapshotsVerified publisher0.0.551 of 1See more

kdiff-snapshots kdiff-snapshots 0.0.55

1 of the 1 container images this version deploys carry CVE-2026-85747.

Container imageDigestPackageFixed in
ghcr.io/oguzhan-yilmaz/kdiff-snapshots:0.0.55d7f93d2182fe
github.com/docker/distribution@v2.8.3+incompatible
no fix listed

Open the chart page →

6,928
ks-corekubeblocksVerified publisher1.1.32 of 5See more

ks-core kubeblocks 1.1.3

2 of the 5 container images this version deploys carry CVE-2026-85747.

Container imageDigestPackageFixed in
kubesphere/ks-extensions-museum:latest29681958f220
github.com/docker/distribution@v2.8.2+incompatible
no fix listed
kubesphere/kubectl:v1.27.1649b445b1b732
github.com/docker/distribution@v2.8.2+incompatible
no fix listed

Open the chart page →

6,367
kubegems-installerkubegemsOfficial1.24.101 of 1See more

kubegems-installer kubegems 1.24.10

1 of the 1 container images this version deploys carry CVE-2026-85747.

Container imageDigestPackageFixed in
kubegems/kubegems:v1.24.10a730bcf9322a
github.com/docker/distribution@v2.8.2+incompatible
no fix listed

Open the chart page →

4,095
kubegems-localkubegemsOfficial1.24.102 of 2See more

kubegems-local kubegems 1.24.10

2 of the 2 container images this version deploys carry CVE-2026-85747.

Container imageDigestPackageFixed in
kubegems/kubectl:latestc3b4be9a54f5
github.com/docker/distribution@v2.8.1+incompatible
no fix listed
kubegems/kubegems:v1.24.10a730bcf9322a
github.com/docker/distribution@v2.8.2+incompatible
no fix listed

Open the chart page →

7,628
kubernetes-stateless-chartkubernetes-stateless-chart1.0.31 of 1See more

kubernetes-stateless-chart kubernetes-stateless-chart 1.0.3

1 of the 1 container images this version deploys carry CVE-2026-85747.

Container imageDigestPackageFixed in
portainer/portainer-ce:2.18.4-alpine3e61aaee1341
github.com/distribution/distribution/v3@v3.0.0-20230223072852-e5d5810851d1
github.com/docker/distribution@v2.8.1+incompatible
3.1.2
no fix listed

Open the chart page →

4,239
mesherykubesphere-stable0.5.010 of 13See more

meshery kubesphere-stable 0.5.0

10 of the 13 container images this version deploys carry CVE-2026-85747.

Container imageDigestPackageFixed in
layer5/meshery:stable-latest78a8be21bef3
github.com/docker/distribution@v2.8.3+incompatible
no fix listed
layer5/meshery-app-mesh:stable-latest77d59943b3d6
github.com/docker/distribution@v2.8.1+incompatible
no fix listed
layer5/meshery-consul:stable-latest25a4cc38abcd
github.com/docker/distribution@v2.8.2+incompatible
no fix listed
layer5/meshery-istio:stable-latestfde47c141ec6
github.com/docker/distribution@v2.8.2+incompatible
no fix listed
layer5/meshery-kuma:stable-latest9d25f029a8a2
github.com/docker/distribution@v2.8.2+incompatible
no fix listed
layer5/meshery-linkerd:stable-latestb99c73bac1f5
github.com/docker/distribution@v2.8.2+incompatible
no fix listed
layer5/meshery-nginx-sm:stable-latestb3864dfd47ad
github.com/docker/distribution@v2.8.2+incompatible
no fix listed
layer5/meshery-nsm:stable-latestebd6a8faf21f
github.com/docker/distribution@v2.7.1+incompatible
no fix listed
layer5/meshery-osm:stable-latestec898e5786c6
github.com/docker/distribution@v2.8.1+incompatible
no fix listed
layer5/meshery-traefik-mesh:stable-latest797fa7a03570
github.com/docker/distribution@v2.8.2+incompatible
no fix listed

Open the chart page →

35,120
kubeservice-cosign-webhookkubservice-chartsVerified publisher1.1.12 of 5See more

kubeservice-cosign-webhook kubservice-charts 1.1.1

2 of the 5 container images this version deploys carry CVE-2026-85747.

Container imageDigestPackageFixed in
dongjiang1989/cosign-webhook:v1.1.02a3ead6a55dc
github.com/docker/distribution@v2.8.2+incompatible
no fix listed
quay.io/jetstack/cert-manager-ctl:v1.13.1c10bde7ff9ad
github.com/docker/distribution@v2.8.2+incompatible
no fix listed

Open the chart page →

10,677
kubeservice-custom-limitrangekubservice-chartsVerified publisher1.3.01 of 5See more

kubeservice-custom-limitrange kubservice-charts 1.3.0

1 of the 5 container images this version deploys carry CVE-2026-85747.

Container imageDigestPackageFixed in
quay.io/jetstack/cert-manager-ctl:v1.13.1c10bde7ff9ad
github.com/docker/distribution@v2.8.2+incompatible
no fix listed

Open the chart page →

9,528
kubeservice-namespace-node-affinitykubservice-chartsVerified publisher1.1.21 of 5See more

kubeservice-namespace-node-affinity kubservice-charts 1.1.2

1 of the 5 container images this version deploys carry CVE-2026-85747.

Container imageDigestPackageFixed in
quay.io/jetstack/cert-manager-ctl:v1.13.1c10bde7ff9ad
github.com/docker/distribution@v2.8.2+incompatible
no fix listed

Open the chart page →

10,617
lagoon-remotelagoon-chartsVerified publisher0.107.01 of 1See more

lagoon-remote lagoon-charts 0.107.0

1 of the 1 container images this version deploys carry CVE-2026-85747.

Container imageDigestPackageFixed in
uselagoon/docker-host:v3.6.12c89ed939b8b
github.com/docker/distribution@v2.8.3+incompatible
no fix listed

Open the chart page →

3,107

Container images carrying it

634 by charts deploying them

A fixed version is listed for 1 of the 2 affected packages.

Container imageDigestPackageFixed inUsed by
veecode/devportalfe33373b7e5d
github.com/docker/distribution@v2.8.3+incompatible
no fix listed
1
veecode/devportal-admin-ui:0.4.30c69fd286b489
github.com/docker/distribution@v2.8.3+incompatible
no fix listed
1
wazuh/wazuh-manager:4.11.11da5c38c6a78
github.com/docker/distribution@v2.7.1+incompatible
no fix listed
1
wazuh/wazuh-manager:4.4.121994f40e0da
github.com/docker/distribution@v2.7.1+incompatible
no fix listed
1
wazuh/wazuh-manager:4.14.45a065930682d
github.com/docker/distribution@v2.7.1+incompatible
no fix listed
1
wazuh/wazuh-manager:4.14.3f09282d281f6
github.com/docker/distribution@v2.7.1+incompatible
no fix listed
1
gcr.io/cadvisor/cadvisor:v0.40.0135327c978de
github.com/docker/distribution@v2.7.1+incompatible
no fix listed
1
gcr.io/cadvisor/cadvisor:v0.47.2e6c562b5e983
github.com/docker/distribution@v2.8.1+incompatible
no fix listed
1
gcr.io/datadoghq/csi-driver:1.4.086c713de81d9
github.com/docker/distribution@v2.8.3+incompatible
no fix listed
1
gcr.io/gloo-mesh/gloo-mesh:1.1.2a4011eae6a0b
github.com/docker/distribution@v0.0.0-20191216044856-a8371794149d
no fix listed
1
gcr.io/istio-testing/operator:latest8d4576f7b98f
github.com/docker/distribution@v2.8.3+incompatible
no fix listed
1
gcr.io/kaniko-project/executor:latest4e7a52dd1f14
github.com/docker/distribution@v2.8.3+incompatible
no fix listed
1
gcr.io/knative-releases/knative.dev/serving/cmd/controller:v1.13.153d9aa4d2c7a
github.com/docker/distribution@v2.8.1+incompatible
no fix listed
1
gcr.io/knative-releases/knative.dev/serving/cmd/controller:v1.2.575cfdcfa050a
github.com/docker/distribution@v2.8.0+incompatible
no fix listed
1
gcr.io/knative-releases/knative.dev/serving/cmd/controller:v1.10.298a2cc7fd62e
github.com/docker/distribution@v2.8.1+incompatible
no fix listed
1
gcr.io/knative-releases/knative.dev/serving/cmd/controllerbac158dfb0c7
github.com/docker/distribution@v2.8.0+incompatible
no fix listed
1
gcr.io/kubecost1/server:prod-1.82.22b1a3d08caac
github.com/docker/distribution@v2.7.1+incompatible
no fix listed
1
gcr.io/kubecost1/server:prod-1.81.0a348db3e4d74
github.com/docker/distribution@v2.7.1+incompatible
no fix listed
1
gcr.io/press-labs-public/dashboard:1.8.19b88f88070fb0
github.com/docker/distribution@v2.7.1+incompatible
no fix listed
1
gcr.io/projectsigstore/cosigned784518ff3ee7
github.com/docker/distribution@v2.8.0+incompatible
no fix listed
1
gcr.io/projectsigstore/policy-webhook82940e8c3e0d
github.com/docker/distribution@v2.8.0+incompatible
no fix listed
1
ghcr.io/appscode/ace:v0.2.0b8e03da90e70
github.com/docker/distribution@v2.8.3+incompatible
no fix listed
1
ghcr.io/appscode/acerproxy:v0.2.021de3771fdd5
github.com/docker/distribution@v2.8.3+incompatible
no fix listed
1
ghcr.io/appscode/aceshifter:v0.0.3e5f5c254a55a
github.com/docker/distribution@v2.8.3+incompatible
no fix listed
1
ghcr.io/appscode/b3:v2023.03.235f5a40fc1702
github.com/docker/distribution@v2.8.1+incompatible
no fix listed
1
ghcr.io/appscode/cattleset:v0.0.145554a03e448
github.com/docker/distribution@v2.8.3+incompatible
no fix listed
1
ghcr.io/appscode/cloudflare-dns-proxy:v0.0.5dfbef0285e14
github.com/docker/distribution@v2.8.3+incompatible
no fix listed
1
ghcr.io/appscode/gh-ci-webhook:v0.0.2036ce246d884e
github.com/docker/distribution@v2.8.2+incompatible
no fix listed
1
ghcr.io/appscode/inbox-agent:v0.0.6f630e47772c9
github.com/docker/distribution@v2.8.3+incompatible
no fix listed
1
ghcr.io/appscode/kube-ui-server:v0.8.05f458bcbaa65
github.com/docker/distribution@v2.8.3+incompatible
no fix listed
1
ghcr.io/appscode/outboxsyncer:v0.6.0c52861c4669f
github.com/docker/distribution@v2.8.3+incompatible
no fix listed
1
ghcr.io/appscode/panopticon:v0.0.243ea0e226a86d
github.com/docker/distribution@v2.8.3+incompatible
no fix listed
1
ghcr.io/appscode/petset:v0.2.0913f0858eb24
github.com/docker/distribution@v2.8.3+incompatible
no fix listed
1
ghcr.io/appscode/petset:v0.2.0acf407bb57d7
github.com/docker/distribution@v2.8.3+incompatible
no fix listed
1
ghcr.io/appscode/scanner:v0.0.2116907aae5de1
github.com/docker/distribution@v2.8.3+incompatible
no fix listed
1
ghcr.io/appscode/smtprelay:v0.0.479c9c76a78e6
github.com/docker/distribution@v2.8.3+incompatible
no fix listed
1
ghcr.io/aquasecurity/trivy-operator:0.16.0a608b798fda5
github.com/docker/distribution@v2.8.2+incompatible
no fix listed
1
ghcr.io/argonix-io/argonix-api:0.6.5431abcce7c1e
github.com/docker/distribution@v2.8.3+incompatible
no fix listed
1
ghcr.io/beluga-cloud/helm-dashboard/dashboard:1.3.39ab9a675c405
github.com/docker/distribution@v2.8.2+incompatible
no fix listed
1
ghcr.io/buoyantio/metrics-api:preview-25.4.32cef2a3f97da
github.com/docker/distribution@v2.8.3+incompatible
no fix listed
1
ghcr.io/buoyantio/tap:preview-25.4.3e02a8bd9e2c3
github.com/docker/distribution@v2.8.3+incompatible
no fix listed
1
ghcr.io/buoyantio/web:preview-25.4.33ee1b62aa111
github.com/docker/distribution@v2.8.3+incompatible
no fix listed
1
ghcr.io/caninehq/canine:latest68b19aee1c64
github.com/docker/distribution@v2.8.3+incompatible
no fix listed
1
ghcr.io/chaos-mesh/chaos-daemon:v2.7.29608d9b51452
github.com/docker/distribution@v2.8.2+incompatible
no fix listed
1
ghcr.io/chaos-mesh/chaos-daemon:v2.5.1cf78fdf7403a
github.com/docker/distribution@v2.8.1+incompatible
no fix listed
1
ghcr.io/chaos-mesh/chaos-dashboard:v2.7.211cdbbc479b3
github.com/docker/distribution@v2.8.2+incompatible
no fix listed
1
ghcr.io/chaos-mesh/chaos-dashboard:v2.5.1448cb346b12c
github.com/docker/distribution@v2.8.1+incompatible
no fix listed
1
ghcr.io/chaos-mesh/chaos-mesh:v2.5.1700bb42ac21d
github.com/docker/distribution@v2.8.1+incompatible
no fix listed
1
ghcr.io/chaos-mesh/chaos-mesh:v2.7.28bc853c7414c
github.com/docker/distribution@v2.8.2+incompatible
no fix listed
1
ghcr.io/clouddrove/syncerd:latest73a1bb038de3
github.com/docker/distribution@v2.8.2+incompatible
no fix listed
1

syft 1.42.1 · advisories as of 16 Oct 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.