StackRadar

CVE-2026-85747

Medium

Advisory

Published 15 Oct 2026In the index since 16 Oct 2026
Severity
Medium
worst across findings
CVSS
6.8
base score, highest
EPSS
0.002
10th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
647
of 18,137 indexed, latest versions
Container images
634
deployed by those charts
Fix available
1 of 2
affected packages

Distribution: Client `manifests.Get()` does not verify returned content against requested digest

Carried by container images the latest versions of 647 of 18,137 indexed charts deploy, on 634 images.

Affected packageAffected versionsFixed inImages
github.com/docker/distributiongolangv0.0.0-20171011171712-7484e51bf6af, v0.0.0-20191216044856-a8371794149d, v0.0.0-20260602055908-11540eae06cb+dirty, v0.0.0-20260701071724-493dca9a81a8+dirty+12 moreno fix listed624
github.com/distribution/distribution/v3golangv0.0.0-20250402055438-9ed95e736522, v3.0.0, v3.0.0-20210316161203-a01c71e2477e, v3.0.0-20220526142353-ffbd94cbe269+9 more3.1.236
OSV records
GHSA-685w-q87j-wqw3
Trending
Rank 42 in indexed charts, since 16 Oct 2026. See the ranking →

Charts affected

647 by stars
ChartLatestAffected imagesRadar Score
custom-rhcl-consolecustom-rhcl-consoleVerified publisher0.1.21 of 3See more

custom-rhcl-console custom-rhcl-console 0.1.2

1 of the 3 container images this version deploys carry CVE-2026-85747.

Container imageDigestPackageFixed in
quay.io/openshift/origin-cli:latest10fef10863a3
github.com/distribution/distribution/v3@v3.0.0-20230519140516-983358f8e250
3.1.2

Open the chart page →

2,539
jupyterhubd4nVerified publisher3.3.71 of 7See more

jupyterhub d4n 3.3.7

1 of the 7 container images this version deploys carry CVE-2026-85747.

Container imageDigestPackageFixed in
registry.k8s.io/kube-scheduler:v1.28.1146cf7475c8da
github.com/docker/distribution@v2.8.2+incompatible
no fix listed

Open the chart page →

20,139
grafana-agentdandydev-chartsVerified publisher0.19.21 of 1See more

grafana-agent dandydev-charts 0.19.2

1 of the 1 container images this version deploys carry CVE-2026-85747.

Container imageDigestPackageFixed in
grafana/agent:v0.20.0825c09373d27
github.com/docker/distribution@v2.7.1+incompatible
no fix listed

Open the chart page →

4,839
dapr-agentsdapr-agents-devVerified publisher0.1.51 of 31See more

dapr-agents dapr-agents-dev 0.1.5

1 of the 31 container images this version deploys carry CVE-2026-85747.

Container imageDigestPackageFixed in
ghcr.io/kagent-dev/kagent/tools:0.0.13c8882543f693
github.com/docker/distribution@v2.8.3+incompatible
no fix listed

Open the chart page →

32,620
cloudwatch-agent-prometheusdasmeta0.2.21 of 1See more

cloudwatch-agent-prometheus dasmeta 0.2.2

1 of the 1 container images this version deploys carry CVE-2026-85747.

Container imageDigestPackageFixed in
amazon/cloudwatch-agent:1.247350.0b251780e745d1783c93
github.com/docker/distribution@v2.7.1-0.20190205005809-0d3efadf0154+incompatible
no fix listed

Open the chart page →

4,193
adot-exporter-for-eks-on-ec2dasmeta-adot0.15.51 of 1See more

adot-exporter-for-eks-on-ec2 dasmeta-adot 0.15.5

1 of the 1 container images this version deploys carry CVE-2026-85747.

Container imageDigestPackageFixed in
amazon/aws-otel-collector:v0.27.0d8ab0eef5074
github.com/docker/distribution@v2.8.1+incompatible
no fix listed

Open the chart page →

2,746
datadog-csi-driverdatadogVerified publisher0.18.01 of 2See more

datadog-csi-driver datadog 0.18.0

1 of the 2 container images this version deploys carry CVE-2026-85747.

Container imageDigestPackageFixed in
gcr.io/datadoghq/csi-driver:1.4.086c713de81d9
github.com/docker/distribution@v2.8.3+incompatible
no fix listed

Open the chart page →

3,565
agent-helmdatasaker0.1.81 of 6See more

agent-helm datasaker 0.1.8

1 of the 6 container images this version deploys carry CVE-2026-85747.

Container imageDigestPackageFixed in
datasaker/dsk-container-agent:latest08b52999f67b
github.com/docker/distribution@v2.8.2+incompatible
no fix listed

Open the chart page →

11,451
ambassador-agentdatawire1.0.221 of 1See more

ambassador-agent datawire 1.0.22

1 of the 1 container images this version deploys carry CVE-2026-85747.

Container imageDigestPackageFixed in
ambassador/ambassador-agent:1.0.227a1ea0d934fb
github.com/docker/distribution@v2.8.2+incompatible
no fix listed

Open the chart page →

1,658
ambassador-operatordatawire0.3.01 of 1See more

ambassador-operator datawire 0.3.0

1 of the 1 container images this version deploys carry CVE-2026-85747.

Container imageDigestPackageFixed in
datawire/ambassador-operator:v1.3.0f95ae710d75c
github.com/docker/distribution@v2.7.1+incompatible
no fix listed

Open the chart page →

8,906
kyvernodevopstalesVerified publisher2.5.12 of 2See more

kyverno devopstales 2.5.1

2 of the 2 container images this version deploys carry CVE-2026-85747.

Container imageDigestPackageFixed in
ghcr.io/kyverno/kyverno:v1.7.19c73f1841ebc
github.com/docker/distribution@v2.8.0+incompatible
no fix listed
ghcr.io/kyverno/kyvernopre:v1.7.1185d2eebc60c
github.com/docker/distribution@v2.8.0+incompatible
no fix listed

Open the chart page →

6,816
ai-agentdevtron0.0.11 of 1See more

ai-agent devtron 0.0.1

1 of the 1 container images this version deploys carry CVE-2026-85747.

Container imageDigestPackageFixed in
quay.io/devtron/ai-agent:0.0.16545dac92173
github.com/docker/distribution@v2.8.3+incompatible
no fix listed

Open the chart page →

11,152
argocddevtron1.8.11 of 3See more

argocd devtron 1.8.1

1 of the 3 container images this version deploys carry CVE-2026-85747.

Container imageDigestPackageFixed in
argoproj/argocd:v1.8.1830e86cacefd
github.com/docker/distribution@v2.7.1+incompatible
no fix listed

Open the chart page →

14,181
argocd-certificate-refreshdevtron0.10.81 of 1See more

argocd-certificate-refresh devtron 0.10.8

1 of the 1 container images this version deploys carry CVE-2026-85747.

Container imageDigestPackageFixed in
quay.io/devtron/argocd-cert-refresh:v102b6db27eaf3d
github.com/docker/distribution@v2.8.1+incompatible
no fix listed

Open the chart page →

14,709
argo-workflowdevtron0.1.61 of 1See more

argo-workflow devtron 0.1.6

1 of the 1 container images this version deploys carry CVE-2026-85747.

Container imageDigestPackageFixed in
quay.io/argoproj/workflow-controller:v3.4.7f0c6fba81a24
github.com/docker/distribution@v2.8.1+incompatible
no fix listed

Open the chart page →

2,345
devtron-enterprisedevtron48.0.03 of 28See more

devtron-enterprise devtron 48.0.0

3 of the 28 container images this version deploys carry CVE-2026-85747.

Container imageDigestPackageFixed in
quay.io/devtron/image-scanner:94237c18-109-3942098580969b333
github.com/docker/distribution@v2.8.3+incompatible
no fix listed
quay.io/devtron/inception:7beef376-948-313784c3b91bebd3d
github.com/docker/distribution@v2.7.1+incompatible
no fix listed
quay.io/devtron/kubectl:latest2ad610626658
github.com/docker/distribution@v2.8.1+incompatible
no fix listed

Open the chart page →

90,212
devtron-in-clustercddevtron0.10.21 of 2See more

devtron-in-clustercd devtron 0.10.2

1 of the 2 container images this version deploys carry CVE-2026-85747.

Container imageDigestPackageFixed in
quay.io/devtron/kubewatch:49f906a5-419-14814eec0305b594c
github.com/docker/distribution@v2.8.2+incompatible
no fix listed

Open the chart page →

7,030
devtron-logs-dumpdevtron0.1.01 of 1See more

devtron-logs-dump devtron 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-85747.

Container imageDigestPackageFixed in
quay.io/devtron/k8s-utils:807ca3c2-488-14005f296c2ec5db7
github.com/docker/distribution@v2.8.1+incompatible
no fix listed

Open the chart page →

5,962
kube-prometheus-stackdevtron19.3.01 of 6See more

kube-prometheus-stack devtron 19.3.0

1 of the 6 container images this version deploys carry CVE-2026-85747.

Container imageDigestPackageFixed in
quay.io/prometheus-operator/prometheus-operator:v0.50.0ab4f480f2cc6
github.com/docker/distribution@v2.7.1+incompatible
no fix listed

Open the chart page →

12,276
securitydevtron0.2.21 of 1See more

security devtron 0.2.2

1 of the 1 container images this version deploys carry CVE-2026-85747.

Container imageDigestPackageFixed in
quay.io/devtron/image-scanner:b278f42b-334-1111988c64b1b6ec8
github.com/docker/distribution@v2.7.1+incompatible
no fix listed

Open the chart page →

3,540
ai-agentdevtron-labs0.0.11 of 1See more

ai-agent devtron-labs 0.0.1

1 of the 1 container images this version deploys carry CVE-2026-85747.

Container imageDigestPackageFixed in
quay.io/devtron/ai-agent:0.0.16545dac92173
github.com/docker/distribution@v2.8.3+incompatible
no fix listed

Open the chart page →

11,152
argocddevtron-labs1.8.11 of 3See more

argocd devtron-labs 1.8.1

1 of the 3 container images this version deploys carry CVE-2026-85747.

Container imageDigestPackageFixed in
argoproj/argocd:v1.8.1830e86cacefd
github.com/docker/distribution@v2.7.1+incompatible
no fix listed

Open the chart page →

14,181
argocd-certificate-refreshdevtron-labs0.10.81 of 1See more

argocd-certificate-refresh devtron-labs 0.10.8

1 of the 1 container images this version deploys carry CVE-2026-85747.

Container imageDigestPackageFixed in
quay.io/devtron/argocd-cert-refresh:v102b6db27eaf3d
github.com/docker/distribution@v2.8.1+incompatible
no fix listed

Open the chart page →

14,709
argo-workflowdevtron-labs0.1.61 of 1See more

argo-workflow devtron-labs 0.1.6

1 of the 1 container images this version deploys carry CVE-2026-85747.

Container imageDigestPackageFixed in
quay.io/argoproj/workflow-controller:v3.4.7f0c6fba81a24
github.com/docker/distribution@v2.8.1+incompatible
no fix listed

Open the chart page →

2,345
clairdevtron-labs0.1.141 of 2See more

clair devtron-labs 0.1.14

1 of the 2 container images this version deploys carry CVE-2026-85747.

Container imageDigestPackageFixed in
quay.io/devtron/clair:4.3.675fb847ac045
github.com/docker/distribution@v2.7.1+incompatible
no fix listed

Open the chart page →

8,148
devtron-enterprisedevtron-labs48.0.03 of 28See more

devtron-enterprise devtron-labs 48.0.0

3 of the 28 container images this version deploys carry CVE-2026-85747.

Container imageDigestPackageFixed in
quay.io/devtron/image-scanner:94237c18-109-3942098580969b333
github.com/docker/distribution@v2.8.3+incompatible
no fix listed
quay.io/devtron/inception:7beef376-948-313784c3b91bebd3d
github.com/docker/distribution@v2.7.1+incompatible
no fix listed
quay.io/devtron/kubectl:latest2ad610626658
github.com/docker/distribution@v2.8.1+incompatible
no fix listed

Open the chart page →

90,212
devtron-in-clustercddevtron-labs0.10.21 of 2See more

devtron-in-clustercd devtron-labs 0.10.2

1 of the 2 container images this version deploys carry CVE-2026-85747.

Container imageDigestPackageFixed in
quay.io/devtron/kubewatch:49f906a5-419-14814eec0305b594c
github.com/docker/distribution@v2.8.2+incompatible
no fix listed

Open the chart page →

7,030
devtron-logs-dumpdevtron-labs0.1.01 of 1See more

devtron-logs-dump devtron-labs 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-85747.

Container imageDigestPackageFixed in
quay.io/devtron/k8s-utils:807ca3c2-488-14005f296c2ec5db7
github.com/docker/distribution@v2.8.1+incompatible
no fix listed

Open the chart page →

5,962
devtron-operatordevtron-labs0.23.32 of 11See more

devtron-operator devtron-labs 0.23.3

2 of the 11 container images this version deploys carry CVE-2026-85747.

Container imageDigestPackageFixed in
quay.io/devtron/hyperion:0874dcaf-280-3928701d5d8c4cecb
github.com/docker/distribution@v2.8.2+incompatible
no fix listed
quay.io/devtron/kubectl:latest2ad610626658
github.com/docker/distribution@v2.8.1+incompatible
no fix listed

Open the chart page →

42,853
kube-prometheus-stackdevtron-labs19.3.01 of 6See more

kube-prometheus-stack devtron-labs 19.3.0

1 of the 6 container images this version deploys carry CVE-2026-85747.

Container imageDigestPackageFixed in
quay.io/prometheus-operator/prometheus-operator:v0.50.0ab4f480f2cc6
github.com/docker/distribution@v2.7.1+incompatible
no fix listed

Open the chart page →

12,276
securitydevtron-labs0.2.21 of 1See more

security devtron-labs 0.2.2

1 of the 1 container images this version deploys carry CVE-2026-85747.

Container imageDigestPackageFixed in
quay.io/devtron/image-scanner:b278f42b-334-1111988c64b1b6ec8
github.com/docker/distribution@v2.7.1+incompatible
no fix listed

Open the chart page →

3,540
nova-exporterdjjudas21Verified publisher0.1.161 of 1See more

nova-exporter djjudas21 0.1.16

1 of the 1 container images this version deploys carry CVE-2026-85747.

Container imageDigestPackageFixed in
djjudas21/nova-exporter:0.0.10e9094580885c
github.com/docker/distribution@v2.8.3+incompatible
no fix listed

Open the chart page →

1,987
docker-authdocker-auth1.14.01 of 1See more

docker-auth docker-auth 1.14.0

1 of the 1 container images this version deploys carry CVE-2026-85747.

Container imageDigestPackageFixed in
cesanta/docker_auth:1.14.098e0307e0d2d
github.com/docker/distribution@v2.8.2-beta.1+incompatible
no fix listed

Open the chart page →

2,054
docparserdocparser0.1.01 of 4See more

docparser docparser 0.1.0

1 of the 4 container images this version deploys carry CVE-2026-85747.

Container imageDigestPackageFixed in
conduction/docparser-php:devb6f95c8ead7d
github.com/docker/distribution@v0.0.0-20191216044856-a8371794149d
no fix listed

Open the chart page →

11,064
furan2dollarshaveclubVerified publisher0.2.01 of 1See more

furan2 dollarshaveclub 0.2.0

1 of the 1 container images this version deploys carry CVE-2026-85747.

Container imageDigestPackageFixed in
dollarshaveclub/furan2:master14a257836529
github.com/docker/distribution@v2.7.1+incompatible
no fix listed

Open the chart page →

4,230
k8s-crondoubanVerified publisher0.2.01 of 1See more

k8s-cron douban 0.2.0

1 of the 1 container images this version deploys carry CVE-2026-85747.

Container imageDigestPackageFixed in
alpine/k8s:1.28.2fc059f056ad0
github.com/docker/distribution@v2.8.2+incompatible
no fix listed

Open the chart page →

4,564
overlorddoubanVerified publisher0.2.21 of 1See more

overlord douban 0.2.2

1 of the 1 container images this version deploys carry CVE-2026-85747.

Container imageDigestPackageFixed in
douz/overlord:latestf2bc7fc068c1
github.com/docker/distribution@v2.7.1+incompatible
no fix listed

Open the chart page →

5,750
drogue-cloud-examplesdrogue-iotVerified publisher0.7.111 of 6See more

drogue-cloud-examples drogue-iot 0.7.11

1 of the 6 container images this version deploys carry CVE-2026-85747.

Container imageDigestPackageFixed in
ghcr.io/ctron/kubectl:1.25e37d61b5277c
github.com/docker/distribution@v2.8.1+incompatible
no fix listed

Open the chart page →

35,192
drogue-cloud-metricsdrogue-iotVerified publisher0.7.111 of 8See more

drogue-cloud-metrics drogue-iot 0.7.11

1 of the 8 container images this version deploys carry CVE-2026-85747.

Container imageDigestPackageFixed in
quay.io/prometheus/prometheus:v2.26.038d40a760569
github.com/docker/distribution@v2.7.1+incompatible
no fix listed

Open the chart page →

20,745
temporaldtrdnk-helm-chartsVerified publisher0.35.01 of 13See more

temporal dtrdnk-helm-charts 0.35.0

1 of the 13 container images this version deploys carry CVE-2026-85747.

Container imageDigestPackageFixed in
quay.io/prometheus/prometheus:v2.31.1a8779cfe553e
github.com/docker/distribution@v2.7.1+incompatible
no fix listed

Open the chart page →

28,791
eav-componenteav-component1.0.01 of 3See more

eav-component eav-component 1.0.0

1 of the 3 container images this version deploys carry CVE-2026-85747.

Container imageDigestPackageFixed in
ghcr.io/conductionnl/eav-component-php:latest24bbca4a52a8
github.com/docker/distribution@v0.0.0-20191216044856-a8371794149d
no fix listed

Open the chart page →

9,225
openfaas2eclipse-aeriosVerified publisher12.0.52 of 6See more

openfaas2 eclipse-aerios 12.0.5

2 of the 6 container images this version deploys carry CVE-2026-85747.

Container imageDigestPackageFixed in
ghcr.io/openfaas/faas-netes:0.18.1224431adc8e2d
github.com/docker/distribution@v2.8.3+incompatible
no fix listed
ghcr.io/openfaas/gateway:0.27.1382b15393116e
github.com/docker/distribution@v2.8.3+incompatible
no fix listed

Open the chart page →

10,319
education-componenteducation-component1.0.01 of 3See more

education-component education-component 1.0.0

1 of the 3 container images this version deploys carry CVE-2026-85747.

Container imageDigestPackageFixed in
ghcr.io/conductionnl/education-component-php:latestda6b05a1a601
github.com/docker/distribution@v0.0.0-20191216044856-a8371794149d
no fix listed

Open the chart page →

9,402
eherkenning-uieherkenning-ui1.0.01 of 3See more

eherkenning-ui eherkenning-ui 1.0.0

1 of the 3 container images this version deploys carry CVE-2026-85747.

Container imageDigestPackageFixed in
ghcr.io/conductionnl/eherkenning-ui-php:latestdeed102b4255
github.com/docker/distribution@v0.0.0-20191216044856-a8371794149d
no fix listed

Open the chart page →

9,547
kube-ecp-stackemqx-operator2.5.11 of 16See more

kube-ecp-stack emqx-operator 2.5.1

1 of the 16 container images this version deploys carry CVE-2026-85747.

Container imageDigestPackageFixed in
library/telegraf:1.27507a3eecf809
github.com/docker/distribution@v2.8.2+incompatible
no fix listed

Open the chart page →

31,597
eoapi-supporteoapiVerified publisher0.1.72 of 7See more

eoapi-support eoapi 0.1.7

2 of the 7 container images this version deploys carry CVE-2026-85747.

Container imageDigestPackageFixed in
quay.io/prometheus-operator/prometheus-config-reloader:v0.67.014feefde1b80
github.com/docker/distribution@v2.8.2+incompatible
no fix listed
quay.io/prometheus/prometheus:v2.47.0c5dd35038287
github.com/docker/distribution@v2.8.2+incompatible
no fix listed

Open the chart page →

13,046
edp-headlampepmdedpVerified publisher0.25.01 of 1See more

edp-headlamp epmdedp 0.25.0

1 of the 1 container images this version deploys carry CVE-2026-85747.

Container imageDigestPackageFixed in
epamedp/edp-headlamp:0.25.093417e18bb1a
github.com/docker/distribution@v2.8.3+incompatible
no fix listed

Open the chart page →

1,889
syncoor-serverethereum-helm-chartsVerified publisher0.0.11 of 1See more

syncoor-server ethereum-helm-charts 0.0.1

1 of the 1 container images this version deploys carry CVE-2026-85747.

Container imageDigestPackageFixed in
ghcr.io/ethpandaops/syncoor:master233aa9808fc7
github.com/docker/distribution@v2.8.3+incompatible
no fix listed

Open the chart page →

1,472
faasnetfaasnet0.0.41 of 5See more

faasnet faasnet 0.0.4

1 of the 5 container images this version deploys carry CVE-2026-85747.

Container imageDigestPackageFixed in
simpleidserver/faasprometheus:0.0.425e378d57d78
github.com/docker/distribution@v2.7.1+incompatible
no fix listed

Open the chart page →

10,727
skopeo-syncfairwinds-incubator0.3.11 of 1See more

skopeo-sync fairwinds-incubator 0.3.1

1 of the 1 container images this version deploys carry CVE-2026-85747.

Container imageDigestPackageFixed in
quay.io/skopeo/stable:v1.134853591bd1d2
github.com/docker/distribution@v2.8.2+incompatible
no fix listed

Open the chart page →

2,480

Container images carrying it

634 by charts deploying them

A fixed version is listed for 1 of the 2 affected packages.

Container imageDigestPackageFixed inUsed by
veecode/devportalfe33373b7e5d
github.com/docker/distribution@v2.8.3+incompatible
no fix listed
1
veecode/devportal-admin-ui:0.4.30c69fd286b489
github.com/docker/distribution@v2.8.3+incompatible
no fix listed
1
wazuh/wazuh-manager:4.11.11da5c38c6a78
github.com/docker/distribution@v2.7.1+incompatible
no fix listed
1
wazuh/wazuh-manager:4.4.121994f40e0da
github.com/docker/distribution@v2.7.1+incompatible
no fix listed
1
wazuh/wazuh-manager:4.14.45a065930682d
github.com/docker/distribution@v2.7.1+incompatible
no fix listed
1
wazuh/wazuh-manager:4.14.3f09282d281f6
github.com/docker/distribution@v2.7.1+incompatible
no fix listed
1
gcr.io/cadvisor/cadvisor:v0.40.0135327c978de
github.com/docker/distribution@v2.7.1+incompatible
no fix listed
1
gcr.io/cadvisor/cadvisor:v0.47.2e6c562b5e983
github.com/docker/distribution@v2.8.1+incompatible
no fix listed
1
gcr.io/datadoghq/csi-driver:1.4.086c713de81d9
github.com/docker/distribution@v2.8.3+incompatible
no fix listed
1
gcr.io/gloo-mesh/gloo-mesh:1.1.2a4011eae6a0b
github.com/docker/distribution@v0.0.0-20191216044856-a8371794149d
no fix listed
1
gcr.io/istio-testing/operator:latest8d4576f7b98f
github.com/docker/distribution@v2.8.3+incompatible
no fix listed
1
gcr.io/kaniko-project/executor:latest4e7a52dd1f14
github.com/docker/distribution@v2.8.3+incompatible
no fix listed
1
gcr.io/knative-releases/knative.dev/serving/cmd/controller:v1.13.153d9aa4d2c7a
github.com/docker/distribution@v2.8.1+incompatible
no fix listed
1
gcr.io/knative-releases/knative.dev/serving/cmd/controller:v1.2.575cfdcfa050a
github.com/docker/distribution@v2.8.0+incompatible
no fix listed
1
gcr.io/knative-releases/knative.dev/serving/cmd/controller:v1.10.298a2cc7fd62e
github.com/docker/distribution@v2.8.1+incompatible
no fix listed
1
gcr.io/knative-releases/knative.dev/serving/cmd/controllerbac158dfb0c7
github.com/docker/distribution@v2.8.0+incompatible
no fix listed
1
gcr.io/kubecost1/server:prod-1.82.22b1a3d08caac
github.com/docker/distribution@v2.7.1+incompatible
no fix listed
1
gcr.io/kubecost1/server:prod-1.81.0a348db3e4d74
github.com/docker/distribution@v2.7.1+incompatible
no fix listed
1
gcr.io/press-labs-public/dashboard:1.8.19b88f88070fb0
github.com/docker/distribution@v2.7.1+incompatible
no fix listed
1
gcr.io/projectsigstore/cosigned784518ff3ee7
github.com/docker/distribution@v2.8.0+incompatible
no fix listed
1
gcr.io/projectsigstore/policy-webhook82940e8c3e0d
github.com/docker/distribution@v2.8.0+incompatible
no fix listed
1
ghcr.io/appscode/ace:v0.2.0b8e03da90e70
github.com/docker/distribution@v2.8.3+incompatible
no fix listed
1
ghcr.io/appscode/acerproxy:v0.2.021de3771fdd5
github.com/docker/distribution@v2.8.3+incompatible
no fix listed
1
ghcr.io/appscode/aceshifter:v0.0.3e5f5c254a55a
github.com/docker/distribution@v2.8.3+incompatible
no fix listed
1
ghcr.io/appscode/b3:v2023.03.235f5a40fc1702
github.com/docker/distribution@v2.8.1+incompatible
no fix listed
1
ghcr.io/appscode/cattleset:v0.0.145554a03e448
github.com/docker/distribution@v2.8.3+incompatible
no fix listed
1
ghcr.io/appscode/cloudflare-dns-proxy:v0.0.5dfbef0285e14
github.com/docker/distribution@v2.8.3+incompatible
no fix listed
1
ghcr.io/appscode/gh-ci-webhook:v0.0.2036ce246d884e
github.com/docker/distribution@v2.8.2+incompatible
no fix listed
1
ghcr.io/appscode/inbox-agent:v0.0.6f630e47772c9
github.com/docker/distribution@v2.8.3+incompatible
no fix listed
1
ghcr.io/appscode/kube-ui-server:v0.8.05f458bcbaa65
github.com/docker/distribution@v2.8.3+incompatible
no fix listed
1
ghcr.io/appscode/outboxsyncer:v0.6.0c52861c4669f
github.com/docker/distribution@v2.8.3+incompatible
no fix listed
1
ghcr.io/appscode/panopticon:v0.0.243ea0e226a86d
github.com/docker/distribution@v2.8.3+incompatible
no fix listed
1
ghcr.io/appscode/petset:v0.2.0913f0858eb24
github.com/docker/distribution@v2.8.3+incompatible
no fix listed
1
ghcr.io/appscode/petset:v0.2.0acf407bb57d7
github.com/docker/distribution@v2.8.3+incompatible
no fix listed
1
ghcr.io/appscode/scanner:v0.0.2116907aae5de1
github.com/docker/distribution@v2.8.3+incompatible
no fix listed
1
ghcr.io/appscode/smtprelay:v0.0.479c9c76a78e6
github.com/docker/distribution@v2.8.3+incompatible
no fix listed
1
ghcr.io/aquasecurity/trivy-operator:0.16.0a608b798fda5
github.com/docker/distribution@v2.8.2+incompatible
no fix listed
1
ghcr.io/argonix-io/argonix-api:0.6.5431abcce7c1e
github.com/docker/distribution@v2.8.3+incompatible
no fix listed
1
ghcr.io/beluga-cloud/helm-dashboard/dashboard:1.3.39ab9a675c405
github.com/docker/distribution@v2.8.2+incompatible
no fix listed
1
ghcr.io/buoyantio/metrics-api:preview-25.4.32cef2a3f97da
github.com/docker/distribution@v2.8.3+incompatible
no fix listed
1
ghcr.io/buoyantio/tap:preview-25.4.3e02a8bd9e2c3
github.com/docker/distribution@v2.8.3+incompatible
no fix listed
1
ghcr.io/buoyantio/web:preview-25.4.33ee1b62aa111
github.com/docker/distribution@v2.8.3+incompatible
no fix listed
1
ghcr.io/caninehq/canine:latest68b19aee1c64
github.com/docker/distribution@v2.8.3+incompatible
no fix listed
1
ghcr.io/chaos-mesh/chaos-daemon:v2.7.29608d9b51452
github.com/docker/distribution@v2.8.2+incompatible
no fix listed
1
ghcr.io/chaos-mesh/chaos-daemon:v2.5.1cf78fdf7403a
github.com/docker/distribution@v2.8.1+incompatible
no fix listed
1
ghcr.io/chaos-mesh/chaos-dashboard:v2.7.211cdbbc479b3
github.com/docker/distribution@v2.8.2+incompatible
no fix listed
1
ghcr.io/chaos-mesh/chaos-dashboard:v2.5.1448cb346b12c
github.com/docker/distribution@v2.8.1+incompatible
no fix listed
1
ghcr.io/chaos-mesh/chaos-mesh:v2.5.1700bb42ac21d
github.com/docker/distribution@v2.8.1+incompatible
no fix listed
1
ghcr.io/chaos-mesh/chaos-mesh:v2.7.28bc853c7414c
github.com/docker/distribution@v2.8.2+incompatible
no fix listed
1
ghcr.io/clouddrove/syncerd:latest73a1bb038de3
github.com/docker/distribution@v2.8.2+incompatible
no fix listed
1

syft 1.42.1 · advisories as of 16 Oct 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.