StackRadar

CVE-2026-85747

Medium

Advisory

Published 15 Oct 2026In the index since 16 Oct 2026
Severity
Medium
worst across findings
CVSS
6.8
base score, highest
EPSS
0.002
10th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
647
of 18,137 indexed, latest versions
Container images
634
deployed by those charts
Fix available
1 of 2
affected packages

Distribution: Client `manifests.Get()` does not verify returned content against requested digest

Carried by container images the latest versions of 647 of 18,137 indexed charts deploy, on 634 images.

Affected packageAffected versionsFixed inImages
github.com/docker/distributiongolangv0.0.0-20171011171712-7484e51bf6af, v0.0.0-20191216044856-a8371794149d, v0.0.0-20260602055908-11540eae06cb+dirty, v0.0.0-20260701071724-493dca9a81a8+dirty+12 moreno fix listed624
github.com/distribution/distribution/v3golangv0.0.0-20250402055438-9ed95e736522, v3.0.0, v3.0.0-20210316161203-a01c71e2477e, v3.0.0-20220526142353-ffbd94cbe269+9 more3.1.236
OSV records
GHSA-685w-q87j-wqw3
Trending
Rank 42 in indexed charts, since 16 Oct 2026. See the ranking →

Charts affected

647 by stars
ChartLatestAffected imagesRadar Score
scannerappscodeVerified publisher2026.1.151 of 3See more

scanner appscode 2026.1.15

1 of the 3 container images this version deploys carry CVE-2026-85747.

Container imageDigestPackageFixed in
ghcr.io/appscode/scanner:v0.0.2116907aae5de1
github.com/docker/distribution@v2.8.3+incompatible
no fix listed

Open the chart page →

7,349
smtprelayappscodeVerified publisher2026.10.121 of 1See more

smtprelay appscode 2026.10.12

1 of the 1 container images this version deploys carry CVE-2026-85747.

Container imageDigestPackageFixed in
ghcr.io/appscode/smtprelay:v0.0.479c9c76a78e6
github.com/docker/distribution@v2.8.3+incompatible
no fix listed

Open the chart page →

1,424
stash-enterpriseappscodeVerified publisher0.42.01 of 4See more

stash-enterprise appscode 0.42.0

1 of the 4 container images this version deploys carry CVE-2026-85747.

Container imageDigestPackageFixed in
ghcr.io/stashed/stash-enterprise:v0.42.1759f3850eda9
github.com/docker/distribution@v2.8.3+incompatible
no fix listed

Open the chart page →

6,220
argocd-backup-s3argocd-backup-s3Verified publisher0.9.51 of 1See more

argocd-backup-s3 argocd-backup-s3 0.9.5

1 of the 1 container images this version deploys carry CVE-2026-85747.

Container imageDigestPackageFixed in
ghcr.io/oguzhan-yilmaz/argocd-backup-s3:latestb61c750ade19
github.com/docker/distribution@v2.7.1+incompatible
no fix listed

Open the chart page →

6,683
siemassist-iot-cybersecurity-monitroting-siem0.1.01 of 3See more

siem assist-iot-cybersecurity-monitroting-siem 0.1.0

1 of the 3 container images this version deploys carry CVE-2026-85747.

Container imageDigestPackageFixed in
assistiot/cybersecurity-monitoring_id-wzh:latest0aacefac9677
github.com/docker/distribution@v2.7.1+incompatible
no fix listed

Open the chart page →

12,535
helm-dashboardbeluga-cloudVerified publisher2.4.01 of 1See more

helm-dashboard beluga-cloud 2.4.0

1 of the 1 container images this version deploys carry CVE-2026-85747.

Container imageDigestPackageFixed in
ghcr.io/beluga-cloud/helm-dashboard/dashboard:1.3.39ab9a675c405
github.com/docker/distribution@v2.8.2+incompatible
no fix listed

Open the chart page →

3,680
yatai-image-builderbentomlVerified publisher3.0.441 of 1See more

yatai-image-builder bentoml 3.0.44

1 of the 1 container images this version deploys carry CVE-2026-85747.

Container imageDigestPackageFixed in
quay.io/bentoml/yatai-image-builder:3.0.4401d8538c4f48
github.com/docker/distribution@v2.8.2+incompatible
no fix listed

Open the chart page →

910
brpservicebrpservice1.1.01 of 4See more

brpservice brpservice 1.1.0

1 of the 4 container images this version deploys carry CVE-2026-85747.

Container imageDigestPackageFixed in
ghcr.io/conductionnl/brpservice-php:latestc17f1ba17d36
github.com/docker/distribution@v0.0.0-20191216044856-a8371794149d
no fix listed

Open the chart page →

9,854
finops-stackcert-managerVerified publisher0.0.56 of 12See more

finops-stack cert-manager 0.0.5

6 of the 12 container images this version deploys carry CVE-2026-85747.

Container imageDigestPackageFixed in
ghcr.io/kyverno/background-controller:v1.12.506ed5db6cd33
github.com/docker/distribution@v2.8.3+incompatible
no fix listed
ghcr.io/kyverno/cleanup-controller:v1.12.5b914032ef9ad
github.com/docker/distribution@v2.8.3+incompatible
no fix listed
ghcr.io/kyverno/kyverno:v1.12.5a61c7022abcf
github.com/docker/distribution@v2.8.3+incompatible
no fix listed
ghcr.io/kyverno/kyverno-cli:v1.12.5832a32779e6d
github.com/docker/distribution@v2.8.3+incompatible
no fix listed
ghcr.io/kyverno/kyvernopre:v1.12.563f7eaf5aa8a
github.com/docker/distribution@v2.8.3+incompatible
no fix listed
ghcr.io/kyverno/reports-controller:v1.12.5c62e3347611c
github.com/docker/distribution@v2.8.3+incompatible
no fix listed

Open the chart page →

17,345
clairclair0.0.31 of 1See more

clair clair 0.0.3

1 of the 1 container images this version deploys carry CVE-2026-85747.

Container imageDigestPackageFixed in
quay.io/projectquay/clair:4.7.28d38ffa8fad7
github.com/docker/distribution@v2.8.1+incompatible
no fix listed

Open the chart page →

4,100
cloudflow-enterprise-componentscloudflow-helm-charts0.0.0-NIGHTLY011220201 of 9See more

cloudflow-enterprise-components cloudflow-helm-charts 0.0.0-NIGHTLY01122020

1 of the 9 container images this version deploys carry CVE-2026-85747.

Container imageDigestPackageFixed in
prom/prometheus:v2.21.0d43417c260e5
github.com/docker/distribution@v2.7.1+incompatible
no fix listed

Open the chart page →

6,656
cnpg-sandboxcloudnative-pgVerified publisher0.6.11 of 6See more

cnpg-sandbox cloudnative-pg 0.6.1

1 of the 6 container images this version deploys carry CVE-2026-85747.

Container imageDigestPackageFixed in
quay.io/prometheus-operator/prometheus-operator:v0.54.0be2aef39a2f8
github.com/docker/distribution@v2.7.1+incompatible
no fix listed

Open the chart page →

10,764
clusternet-hubclusternet1.0.01 of 1See more

clusternet-hub clusternet 1.0.0

1 of the 1 container images this version deploys carry CVE-2026-85747.

Container imageDigestPackageFixed in
ghcr.io/clusternet/clusternet-hub:v1.0.059f75504c5d4
github.com/docker/distribution@v2.8.3+incompatible
no fix listed

Open the chart page →

2,184
clusternet-schedulerclusternet1.0.01 of 1See more

clusternet-scheduler clusternet 1.0.0

1 of the 1 container images this version deploys carry CVE-2026-85747.

Container imageDigestPackageFixed in
ghcr.io/clusternet/clusternet-scheduler:v1.0.0a6ae5aff81ce
github.com/docker/distribution@v2.8.3+incompatible
no fix listed

Open the chart page →

2,184
cluster-setupcluster-setup1.5.01 of 8See more

cluster-setup cluster-setup 1.5.0

1 of the 8 container images this version deploys carry CVE-2026-85747.

Container imageDigestPackageFixed in
quay.io/argoproj/argocd:v3.0.395b5cf7ba6fe
github.com/docker/distribution@v2.8.3+incompatible
no fix listed

Open the chart page →

15,121
istio-allcode4devsVerified publisher1.2.01 of 6See more

istio-all code4devs 1.2.0

1 of the 6 container images this version deploys carry CVE-2026-85747.

Container imageDigestPackageFixed in
istio/pilot:1.24.2-distroless137e44e3d1d2
github.com/docker/distribution@v2.8.3+incompatible
no fix listed

Open the chart page →

7,163
istio-control-planecode4devsVerified publisher1.0.01 of 3See more

istio-control-plane code4devs 1.0.0

1 of the 3 container images this version deploys carry CVE-2026-85747.

Container imageDigestPackageFixed in
istio/pilot:1.24.2-distroless137e44e3d1d2
github.com/docker/distribution@v2.8.3+incompatible
no fix listed

Open the chart page →

3,527
contactcataloguscontact-catalogus1.0.01 of 3See more

contactcatalogus contact-catalogus 1.0.0

1 of the 3 container images this version deploys carry CVE-2026-85747.

Container imageDigestPackageFixed in
ghcr.io/conductionnl/contactcatalogus-php:latesteeb625bd660c
github.com/docker/distribution@v0.0.0-20191216044856-a8371794149d
no fix listed

Open the chart page →

9,378
dregsydeliveryheroVerified publisher0.1.51 of 1See more

dregsy deliveryhero 0.1.5

1 of the 1 container images this version deploys carry CVE-2026-85747.

Container imageDigestPackageFixed in
xelalex/dregsy:0.4.3574054e1c417
github.com/docker/distribution@v2.8.1+incompatible
no fix listed

Open the chart page →

4,036
trivy-operatordevopstalesVerified publisher2.5.01 of 1See more

trivy-operator devopstales 2.5.0

1 of the 1 container images this version deploys carry CVE-2026-85747.

Container imageDigestPackageFixed in
devopstales/trivy-operator:2.575136aa7a26e
github.com/docker/distribution@v2.8.1+incompatible
no fix listed

Open the chart page →

6,626
clairdevtron0.1.141 of 2See more

clair devtron 0.1.14

1 of the 2 container images this version deploys carry CVE-2026-85747.

Container imageDigestPackageFixed in
quay.io/devtron/clair:4.3.675fb847ac045
github.com/docker/distribution@v2.7.1+incompatible
no fix listed

Open the chart page →

8,148
digispoof-interfacedigispoof-interface1.0.01 of 3See more

digispoof-interface digispoof-interface 1.0.0

1 of the 3 container images this version deploys carry CVE-2026-85747.

Container imageDigestPackageFixed in
ghcr.io/conductionnl/digispoof-interface-php:latest03aba499950f
github.com/docker/distribution@v0.0.0-20191216044856-a8371794149d
no fix listed

Open the chart page →

9,933
dnation-pingdnationcloud0.1.91 of 5See more

dnation-ping dnationcloud 0.1.9

1 of the 5 container images this version deploys carry CVE-2026-85747.

Container imageDigestPackageFixed in
prom/prometheus:v2.21.0d43417c260e5
github.com/docker/distribution@v2.7.1+incompatible
no fix listed

Open the chart page →

15,335
docker-in-dockerdocker-in-docker0.0.31 of 2See more

docker-in-docker docker-in-docker 0.0.3

1 of the 2 container images this version deploys carry CVE-2026-85747.

Container imageDigestPackageFixed in
library/docker:24.0.2-dind1d148deae16a
github.com/distribution/distribution/v3@v3.0.0-20230601133803-97b1d649c493
github.com/docker/distribution@v2.8.2+incompatible
3.1.2
no fix listed

Open the chart page →

3,400
dockyarddockyardVerified publisher0.5.01 of 1See more

dockyard dockyard 0.5.0

1 of the 1 container images this version deploys carry CVE-2026-85747.

Container imageDigestPackageFixed in
ghcr.io/kgma74/dockyard:0.5.015d1d5769e91
github.com/docker/distribution@v2.8.3+incompatible
no fix listed

Open the chart page →

2,172
dragonfly-stackdragonflyVerified publisher0.1.22 of 7See more

dragonfly-stack dragonfly 0.1.2

2 of the 7 container images this version deploys carry CVE-2026-85747.

Container imageDigestPackageFixed in
dragonflyoss/manager:v2.1.49c3ef7f10698d
github.com/docker/distribution@v2.8.3+incompatible
no fix listed
ghcr.io/containerd/nydus-snapshotter:v0.9.056f8617363b4
github.com/docker/distribution@v2.8.2+incompatible
no fix listed

Open the chart page →

22,928
nydus-snapshotterdragonflyVerified publisher0.0.101 of 2See more

nydus-snapshotter dragonfly 0.0.10

1 of the 2 container images this version deploys carry CVE-2026-85747.

Container imageDigestPackageFixed in
ghcr.io/containerd/nydus-snapshotter:v0.9.056f8617363b4
github.com/docker/distribution@v2.8.2+incompatible
no fix listed

Open the chart page →

4,581
elchi-stackelchi2.0.61 of 10See more

elchi-stack elchi 2.0.6

1 of the 10 container images this version deploys carry CVE-2026-85747.

Container imageDigestPackageFixed in
otel/opentelemetry-collector-contrib:0.89.0995f17004231
github.com/docker/distribution@v2.8.2+incompatible
no fix listed

Open the chart page →

17,918
ipfs-clusterethereum-helm-chartsVerified publisher0.1.141 of 3See more

ipfs-cluster ethereum-helm-charts 0.1.14

1 of the 3 container images this version deploys carry CVE-2026-85747.

Container imageDigestPackageFixed in
lachlanevenson/k8s-kubectl:v1.25.4af5cea3f2e40
github.com/docker/distribution@v2.8.1+incompatible
no fix listed

Open the chart page →

6,687
fsmfsmOfficialVerified publisher0.2.112 of 5See more

fsm fsm 0.2.11

2 of the 5 container images this version deploys carry CVE-2026-85747.

Container imageDigestPackageFixed in
flomesh/fsm-ingress-pipy:0.2.11cc39c96711c4
github.com/docker/distribution@v2.8.2+incompatible
no fix listed
flomesh/fsm-manager:0.2.1122f849c70b25
github.com/docker/distribution@v2.8.2+incompatible
no fix listed

Open the chart page →

5,885
otel-collectorgeek-cookbookVerified publisher1.2.21 of 1See more

otel-collector geek-cookbook 1.2.2

1 of the 1 container images this version deploys carry CVE-2026-85747.

Container imageDigestPackageFixed in
otel/opentelemetry-collector-contrib:0.46.0ba173aa85f3f
github.com/docker/distribution@v2.8.0+incompatible
no fix listed

Open the chart page →

3,652
gomenhashaigomenhashaiOfficialVerified publisher1.3.41 of 1See more

gomenhashai gomenhashai 1.3.4

1 of the 1 container images this version deploys carry CVE-2026-85747.

Container imageDigestPackageFixed in
ghcr.io/gomenhashai/gomenhashai:v1.3.36f031172a5ec
github.com/docker/distribution@v2.8.3+incompatible
no fix listed

Open the chart page →

1,078
phlaregrafana0.5.41 of 1See more

phlare grafana 0.5.4

1 of the 1 container images this version deploys carry CVE-2026-85747.

Container imageDigestPackageFixed in
grafana/phlare:0.5.1330f990cdad9
github.com/docker/distribution@v2.8.1+incompatible
no fix listed

Open the chart page →

2,919
helm-operatorhelm-operatorVerified publisher0.0.21 of 1See more

helm-operator helm-operator 0.0.2

1 of the 1 container images this version deploys carry CVE-2026-85747.

Container imageDigestPackageFixed in
bsgrigorov/helm-operator:latest45ab095f09c8
github.com/docker/distribution@v2.7.1+incompatible
no fix listed

Open the chart page →

8,435
helmuphelmupVerified publisher0.1.01 of 3See more

helmup helmup 0.1.0

1 of the 3 container images this version deploys carry CVE-2026-85747.

Container imageDigestPackageFixed in
sirrend/helmup-engine:0.1.13699e79e3d4e2
github.com/docker/distribution@v2.8.3+incompatible
no fix listed

Open the chart page →

19,100
holoinsightholoinsight0.2.51 of 6See more

holoinsight holoinsight 0.2.5

1 of the 6 container images this version deploys carry CVE-2026-85747.

Container imageDigestPackageFixed in
holoinsight/otelcontribcol:latest42ba8dc3113c
github.com/docker/distribution@v2.8.1+incompatible
no fix listed

Open the chart page →

30,395
holoinsight-agentholoinsight0.2.51 of 2See more

holoinsight-agent holoinsight 0.2.5

1 of the 2 container images this version deploys carry CVE-2026-85747.

Container imageDigestPackageFixed in
holoinsight/agent:latest5c3994e742f8
github.com/docker/distribution@v2.8.1+incompatible
no fix listed

Open the chart page →

2,503
htnn-controllerhtnnVerified publisher0.5.01 of 1See more

htnn-controller htnn 0.5.0

1 of the 1 container images this version deploys carry CVE-2026-85747.

Container imageDigestPackageFixed in
ghcr.io/mosn/htnn-controller:v0.3.1c379e66246be
github.com/docker/distribution@v2.8.3+incompatible
no fix listed

Open the chart page →

5,210
jetic-operatorjetic-operatorVerified publisher2.0.21 of 1See more

jetic-operator jetic-operator 2.0.2

1 of the 1 container images this version deploys carry CVE-2026-85747.

Container imageDigestPackageFixed in
apache/camel-k:1.10.43bb13d14f64a
github.com/docker/distribution@v2.8.0+incompatible
no fix listed

Open the chart page →

10,981
kdiffkdiff-snapshotsVerified publisher0.0.2031 of 2See more

kdiff kdiff-snapshots 0.0.203

1 of the 2 container images this version deploys carry CVE-2026-85747.

Container imageDigestPackageFixed in
ghcr.io/oguzhan-yilmaz/kdiff-snapshots:0.0.2035bc5ca66d55a
github.com/docker/distribution@v2.8.3+incompatible
no fix listed

Open the chart page →

9,411
kdiff-snapshotskdiff-snapshotsVerified publisher0.0.551 of 1See more

kdiff-snapshots kdiff-snapshots 0.0.55

1 of the 1 container images this version deploys carry CVE-2026-85747.

Container imageDigestPackageFixed in
ghcr.io/oguzhan-yilmaz/kdiff-snapshots:0.0.55d7f93d2182fe
github.com/docker/distribution@v2.8.3+incompatible
no fix listed

Open the chart page →

6,928
ks-corekubeblocksVerified publisher1.1.32 of 5See more

ks-core kubeblocks 1.1.3

2 of the 5 container images this version deploys carry CVE-2026-85747.

Container imageDigestPackageFixed in
kubesphere/ks-extensions-museum:latest29681958f220
github.com/docker/distribution@v2.8.2+incompatible
no fix listed
kubesphere/kubectl:v1.27.1649b445b1b732
github.com/docker/distribution@v2.8.2+incompatible
no fix listed

Open the chart page →

6,367
kubegems-installerkubegemsOfficial1.24.101 of 1See more

kubegems-installer kubegems 1.24.10

1 of the 1 container images this version deploys carry CVE-2026-85747.

Container imageDigestPackageFixed in
kubegems/kubegems:v1.24.10a730bcf9322a
github.com/docker/distribution@v2.8.2+incompatible
no fix listed

Open the chart page →

4,095
kubegems-localkubegemsOfficial1.24.102 of 2See more

kubegems-local kubegems 1.24.10

2 of the 2 container images this version deploys carry CVE-2026-85747.

Container imageDigestPackageFixed in
kubegems/kubectl:latestc3b4be9a54f5
github.com/docker/distribution@v2.8.1+incompatible
no fix listed
kubegems/kubegems:v1.24.10a730bcf9322a
github.com/docker/distribution@v2.8.2+incompatible
no fix listed

Open the chart page →

7,628
kubernetes-stateless-chartkubernetes-stateless-chart1.0.31 of 1See more

kubernetes-stateless-chart kubernetes-stateless-chart 1.0.3

1 of the 1 container images this version deploys carry CVE-2026-85747.

Container imageDigestPackageFixed in
portainer/portainer-ce:2.18.4-alpine3e61aaee1341
github.com/distribution/distribution/v3@v3.0.0-20230223072852-e5d5810851d1
github.com/docker/distribution@v2.8.1+incompatible
3.1.2
no fix listed

Open the chart page →

4,239
mesherykubesphere-stable0.5.010 of 13See more

meshery kubesphere-stable 0.5.0

10 of the 13 container images this version deploys carry CVE-2026-85747.

Container imageDigestPackageFixed in
layer5/meshery:stable-latest78a8be21bef3
github.com/docker/distribution@v2.8.3+incompatible
no fix listed
layer5/meshery-app-mesh:stable-latest77d59943b3d6
github.com/docker/distribution@v2.8.1+incompatible
no fix listed
layer5/meshery-consul:stable-latest25a4cc38abcd
github.com/docker/distribution@v2.8.2+incompatible
no fix listed
layer5/meshery-istio:stable-latestfde47c141ec6
github.com/docker/distribution@v2.8.2+incompatible
no fix listed
layer5/meshery-kuma:stable-latest9d25f029a8a2
github.com/docker/distribution@v2.8.2+incompatible
no fix listed
layer5/meshery-linkerd:stable-latestb99c73bac1f5
github.com/docker/distribution@v2.8.2+incompatible
no fix listed
layer5/meshery-nginx-sm:stable-latestb3864dfd47ad
github.com/docker/distribution@v2.8.2+incompatible
no fix listed
layer5/meshery-nsm:stable-latestebd6a8faf21f
github.com/docker/distribution@v2.7.1+incompatible
no fix listed
layer5/meshery-osm:stable-latestec898e5786c6
github.com/docker/distribution@v2.8.1+incompatible
no fix listed
layer5/meshery-traefik-mesh:stable-latest797fa7a03570
github.com/docker/distribution@v2.8.2+incompatible
no fix listed

Open the chart page →

35,120
kubeservice-cosign-webhookkubservice-chartsVerified publisher1.1.12 of 5See more

kubeservice-cosign-webhook kubservice-charts 1.1.1

2 of the 5 container images this version deploys carry CVE-2026-85747.

Container imageDigestPackageFixed in
dongjiang1989/cosign-webhook:v1.1.02a3ead6a55dc
github.com/docker/distribution@v2.8.2+incompatible
no fix listed
quay.io/jetstack/cert-manager-ctl:v1.13.1c10bde7ff9ad
github.com/docker/distribution@v2.8.2+incompatible
no fix listed

Open the chart page →

10,677
kubeservice-custom-limitrangekubservice-chartsVerified publisher1.3.01 of 5See more

kubeservice-custom-limitrange kubservice-charts 1.3.0

1 of the 5 container images this version deploys carry CVE-2026-85747.

Container imageDigestPackageFixed in
quay.io/jetstack/cert-manager-ctl:v1.13.1c10bde7ff9ad
github.com/docker/distribution@v2.8.2+incompatible
no fix listed

Open the chart page →

9,528
kubeservice-namespace-node-affinitykubservice-chartsVerified publisher1.1.21 of 5See more

kubeservice-namespace-node-affinity kubservice-charts 1.1.2

1 of the 5 container images this version deploys carry CVE-2026-85747.

Container imageDigestPackageFixed in
quay.io/jetstack/cert-manager-ctl:v1.13.1c10bde7ff9ad
github.com/docker/distribution@v2.8.2+incompatible
no fix listed

Open the chart page →

10,617
lagoon-remotelagoon-chartsVerified publisher0.107.01 of 1See more

lagoon-remote lagoon-charts 0.107.0

1 of the 1 container images this version deploys carry CVE-2026-85747.

Container imageDigestPackageFixed in
uselagoon/docker-host:v3.6.12c89ed939b8b
github.com/docker/distribution@v2.8.3+incompatible
no fix listed

Open the chart page →

3,107

Container images carrying it

634 by charts deploying them

A fixed version is listed for 1 of the 2 affected packages.

Container imageDigestPackageFixed inUsed by
dtzar/helm-kubectl:3.14.455429449408e
github.com/docker/distribution@v2.8.2+incompatible
no fix listed
8
wurstmeister/kafka:latest2d4bbf9cc83d
github.com/distribution/distribution/v3@v3.0.0-20210316161203-a01c71e2477e
github.com/docker/distribution@v2.8.0+incompatible
3.1.2
no fix listed
7
quay.io/devtron/kubectl:latest2ad610626658
github.com/docker/distribution@v2.8.1+incompatible
no fix listed
6
keelhq/keel:latest73714afb4443
github.com/distribution/distribution/v3@v3.0.0-20230722181636-7b502560cad4
github.com/docker/distribution@v2.8.3+incompatible
3.1.2
no fix listed
5
rancher/rancher:v2.15.20c3d8e570255
github.com/docker/distribution@v2.8.3+incompatible
no fix listed
5
rancher/shell:v0.8.21eeed72d4eda
github.com/docker/distribution@v2.8.3+incompatible
no fix listed
5
ghcr.io/appscode/b3:v2026.10.1265bce2a5ff54
github.com/docker/distribution@v2.8.3+incompatible
no fix listed
4
ghcr.io/kubevault/vault-operator:v0.26.0572f2d93c8de
github.com/docker/distribution@v2.8.3+incompatible
no fix listed
4
ghcr.io/loft-sh/vcluster-pro:0.0.0-ci-run.10ab2e1fa19dd4
github.com/docker/distribution@v2.8.1+incompatible
no fix listed
4
quay.io/jetstack/cert-manager-ctl:v1.13.1c10bde7ff9ad
github.com/docker/distribution@v2.8.2+incompatible
no fix listed
4
quay.io/openshift/origin-cli:latest486bf8e8f5b5
github.com/distribution/distribution/v3@v3.0.0-20230519140516-983358f8e250
3.1.2
4
quay.io/prometheus-operator/prometheus-operator:v0.50.0ab4f480f2cc6
github.com/docker/distribution@v2.7.1+incompatible
no fix listed
4
argoproj/argocd:v1.8.1830e86cacefd
github.com/docker/distribution@v2.7.1+incompatible
no fix listed
3
goharbor/harbor-registryctl:v2.15.2223d5cb49d5d
github.com/docker/distribution@v0.0.0-20260701071724-493dca9a81a8+dirty
no fix listed
3
goharbor/registry-photon:v2.15.2c4ebef61ceb5
github.com/docker/distribution@v0.0.0-20260701071724-493dca9a81a8+dirty
no fix listed
3
goharbor/trivy-adapter-photon:v2.15.2215c07b71c37
github.com/docker/distribution@v2.8.2+incompatible
no fix listed
3
grafana/promtail:2.4.2626900031c4e
github.com/docker/distribution@v2.7.1+incompatible
no fix listed
3
groundnuty/k8s-wait-for:v2.0c14d7271e401
github.com/docker/distribution@v2.8.1+incompatible
no fix listed
3
kubegems/kubegems:v1.24.10a730bcf9322a
github.com/docker/distribution@v2.8.2+incompatible
no fix listed
3
library/docker:20.10-dind:20-dindaf96c680a7e1
github.com/distribution/distribution/v3@v3.0.0-20220725133111-4bf3547399eb
github.com/docker/distribution@v2.8.1+incompatible
3.1.2
no fix listed
3
library/registry:3.1.1:latest1be55279f18a
github.com/distribution/distribution/v3@v3.1.1
3.1.2
3
meshery/meshery:stable-latestb3816d0c691d
github.com/docker/distribution@v2.8.3+incompatible
no fix listed
3
rancher/system-upgrade-controller:v0.20.261b68d4372ba
github.com/docker/distribution@v2.8.3+incompatible
no fix listed
3
ghcr.io/appscode/b3:v2026.10.15d3f5046f536d
github.com/docker/distribution@v2.8.3+incompatible
no fix listed
3
ghcr.io/voyagermesh/crd-manager:v0.4.04466bb77dc78
github.com/docker/distribution@v2.8.3+incompatible
no fix listed
3
quay.io/argoprojlabs/argocd-image-updater:v1.3.1a578e328e8cb
github.com/distribution/distribution/v3@v3.1.1
3.1.2
3
quay.io/argoproj/workflow-controller:v3.4.7f0c6fba81a24
github.com/docker/distribution@v2.8.1+incompatible
no fix listed
3
quay.io/devtron/ai-agent:0.0.16545dac92173
github.com/docker/distribution@v2.8.3+incompatible
no fix listed
3
quay.io/devtron/argocd-cert-refresh:v102b6db27eaf3d
github.com/docker/distribution@v2.8.1+incompatible
no fix listed
3
quay.io/devtron/clair:4.3.675fb847ac045
github.com/docker/distribution@v2.7.1+incompatible
no fix listed
3
quay.io/devtron/hyperion:0874dcaf-280-3928701d5d8c4cecb
github.com/docker/distribution@v2.8.2+incompatible
no fix listed
3
quay.io/devtron/image-scanner:b278f42b-334-1111988c64b1b6ec8
github.com/docker/distribution@v2.7.1+incompatible
no fix listed
3
quay.io/devtron/image-scanner:94237c18-109-3942098580969b333
github.com/docker/distribution@v2.8.3+incompatible
no fix listed
3
quay.io/devtron/inception:7beef376-948-313784c3b91bebd3d
github.com/docker/distribution@v2.7.1+incompatible
no fix listed
3
quay.io/devtron/k8s-utils:807ca3c2-488-14005f296c2ec5db7
github.com/docker/distribution@v2.8.1+incompatible
no fix listed
3
quay.io/devtron/kubewatch:49f906a5-419-14814eec0305b594c
github.com/docker/distribution@v2.8.2+incompatible
no fix listed
3
quay.io/prometheus/prometheus:v2.41.01a3e9a878e50
github.com/docker/distribution@v2.8.1+incompatible
no fix listed
3
quay.io/prometheus/prometheus:v2.26.038d40a760569
github.com/docker/distribution@v2.7.1+incompatible
no fix listed
3
quay.io/prometheus/prometheus:v2.31.1a8779cfe553e
github.com/docker/distribution@v2.7.1+incompatible
no fix listed
3
quay.io/prometheus/prometheus:v2.43.0f5c29683a301
github.com/docker/distribution@v2.8.1+incompatible
no fix listed
3
alpine/k8s:1.32.12048f8d9c8cc7
github.com/docker/distribution@v2.8.3+incompatible
no fix listed
2
aquasec/kube-bench:v0.8.0ea3e33bc3c4e
github.com/docker/distribution@v2.8.2+incompatible
no fix listed
2
bitnamilegacy/kubectl:1.26.4a0a972324d93
github.com/docker/distribution@v2.8.1+incompatible
no fix listed
2
cesanta/docker_auth:1.6.04d16885f3d4c
github.com/docker/distribution@v2.7.1+incompatible
no fix listed
2
dmilhdef/missing-container-metrics:v0.21.0fada1a6e7638
github.com/docker/distribution@v2.7.1+incompatible
no fix listed
2
drone/drone-runner-kube:1.0.0-rc.34359bf2bb3dc
github.com/docker/distribution@v2.7.1+incompatible
no fix listed
2
grafana/agent-operator:v0.25.1a136c6208aa3
github.com/docker/distribution@v2.8.1+incompatible
no fix listed
2
grafana/promtail:2.9.3b338a29de45e
github.com/docker/distribution@v2.8.2+incompatible
no fix listed
2
hashicorp/vault:1.15.26b4e5dadf082
github.com/docker/distribution@v2.8.2+incompatible
no fix listed
2
ilum/api:6.7.3624fd09528c8
github.com/docker/distribution@v2.8.3+incompatible
no fix listed
2

syft 1.42.1 · advisories as of 16 Oct 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.