StackRadar

CVE-2026-89158

Medium

Advisory

Published 11 Sept 2026In the index since 12 Sept 2026
Severity
Medium
worst across findings
CVSS
6.5
base score, highest
EPSS
0.002
13th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
2,208
of 17,821 indexed, latest versions
Container images
2,210
deployed by those charts
Fix available
1 of 1
affected package

The matching OSV records carry no description.

Carried by container images the latest versions of 2,208 of 17,821 indexed charts deploy, on 2,210 images.

Affected packageAffected versionsFixed inImages
pcre2deb10.21-1, 10.34-7, 10.34-7ubuntu0.1, 10.39-3+ubuntu20.04.1+deb.sury.org+2+10 more10.42-1+deb12u1, 10.46-1~deb13u22,210
OSV records
DEBIAN-CVE-2026-89158UBUNTU-CVE-2026-89158
Trending
Rank 10 in indexed charts, since 12 Sept 2026. See the ranking →

Charts affected

2,208 by stars
ChartLatestAffected imagesRadar Score

Container images carrying it

2,210 by charts deploying them

A fixed version is listed for 1 of the 1 affected package.

Container imageDigestPackageFixed inUsed by
atlassian/bamboo:12.1.114af4bb6c8d46
pcre2@10.42-4ubuntu2.1
no fix listed
1
atlassian/bamboo-agent-base:12.1.1151c2d7274eef
pcre2@10.42-4ubuntu2.1
no fix listed
1
atlassian/bitbucket:10.2.705933f2b1cfd
pcre2@10.42-4ubuntu2.1
no fix listed
1
atlassian/confluence-server:7.10.03b9222ab32ef
pcre2@10.39-3ubuntu0.1
no fix listed
1
atlassian/crowd:7.2.3c81cc7d6bc9e
pcre2@10.42-4ubuntu2.1
no fix listed
1
atlassian/jira-software:8.14.037bc46cbec1a
pcre2@10.39-3ubuntu0.1
no fix listed
1
atlassian/jira-software:9.7.264a75aa4ec4e
pcre2@10.42-4ubuntu2.1
no fix listed
1
atlassian/jira-software:11.3.11e5548cd4eea8
pcre2@10.42-4ubuntu2.1
no fix listed
1
avaprotocol/ap-avs:1.2.0c430ea5c37d6
pcre2@10.42-1
10.42-1+deb12u1
1
avinash263/pyredis263:latestaa2b8727f1a6
pcre2@10.42-1
10.42-1+deb12u1
1
avzini/web-app:latestf40b30210ed0
pcre2@10.42-1
10.42-1+deb12u1
1
baserow/backend:2.3.37c00549b3a6f
pcre2@10.46-1~deb13u1
10.46-1~deb13u2
1
baserow/backend:1.31.1e0b3c8130b91
pcre2@10.42-1
10.42-1+deb12u1
1
baserow/baserow:1.30.1df0c42eb67e8
pcre2@10.42-1
10.42-1+deb12u1
1
baserow/web-frontend:2.3.3566d24c7d9f5
pcre2@10.46-1~deb13u1
10.46-1~deb13u2
1
bbernhard/signal-cli-rest-api:0.57549ad08d7e14
pcre2@10.34-7
no fix listed
1
beanbag/reviewboard:latest6b840f546e1c
pcre2@10.39-3ubuntu0.1
no fix listed
1
berkeleyskypilot/skypilot:0.13.03bc8bf8f4d83
pcre2@10.46-1~deb13u1
10.46-1~deb13u2
1
berkeleyskypilot/skypilot-nightly:latest8da2f3cda472
pcre2@10.46-1~deb13u1
10.46-1~deb13u2
1
beyzkaya/blog-backend:v1.0.112a6a3d1c5f9
pcre2@10.42-1
10.42-1+deb12u1
1
bicarus/elrond-rosetta:v1.3.50.0b1dab0721e1c
pcre2@10.34-7
no fix listed
1
bicarus/mx-notifier:1.1.8bed688d16762
pcre2@10.34-7
no fix listed
1
bitnamilegacy/cassandra:4.1.7-debian-12-r32b7a217999a1
pcre2@10.42-1
10.42-1+deb12u1
1
bitnamilegacy/clickhouse:24.12.3-debian-12-r13cf6544f6c6c
pcre2@10.42-1
10.42-1+deb12u1
1
bitnamilegacy/clickhouse:24.12.4c7e70bf1d3fb
pcre2@10.42-1
10.42-1+deb12u1
1
bitnamilegacy/clickhouse:24.6.2-debian-12-r3dcc172c6c55f
pcre2@10.42-1
10.42-1+deb12u1
1
bitnamilegacy/consul:1.21.4-debian-12-r133ae872fc99d
pcre2@10.42-1
10.42-1+deb12u1
1
bitnamilegacy/elasticsearch:8.12.215d4647fd491
pcre2@10.42-1
10.42-1+deb12u1
1
bitnamilegacy/elasticsearch:9.0.1-debian-12-r0e6f6ddcce2f1
pcre2@10.42-1
10.42-1+deb12u1
1
bitnamilegacy/git:latest4b08d0c5af8d
pcre2@10.42-1
10.42-1+deb12u1
1
bitnamilegacy/grafana:11.4.0-debian-12-r0cb8ab5515676
pcre2@10.42-1
10.42-1+deb12u1
1
bitnamilegacy/keycloak:24.0.4cc599cbd15ff
pcre2@10.42-1
10.42-1+deb12u1
1
bitnamilegacy/keycloak:26.3.3-debian-12-r0da3df0976a9f
pcre2@10.42-1
10.42-1+deb12u1
1
bitnamilegacy/kubectl:1.301249fc292e84
pcre2@10.42-1
10.42-1+deb12u1
1
bitnamilegacy/kubectl:1.3164614ef8290f
pcre2@10.42-1
10.42-1+deb12u1
1
bitnamilegacy/kubectl:1.30.5744f84cf7493
pcre2@10.42-1
10.42-1+deb12u1
1
bitnamilegacy/kubectl:1.29.3f5fc0d561d9e
pcre2@10.42-1
10.42-1+deb12u1
1
bitnamilegacy/kube-state-metrics:204a3044b384b
pcre2@10.42-1
10.42-1+deb12u1
1
bitnamilegacy/mariadb:11.3.2-debian-12-r9320c70dfd914
pcre2@10.42-1
10.42-1+deb12u1
1
bitnamilegacy/mariadb:11.2.6-debian-12-r0373c3c260571
pcre2@10.42-1
10.42-1+deb12u1
1
bitnamilegacy/mariadb:11.4.3-debian-12-r08b3778160e34
pcre2@10.42-1
10.42-1+deb12u1
1
bitnamilegacy/mariadb:11.4.5-debian-12-r128bc50a0961a7
pcre2@10.42-1
10.42-1+deb12u1
1
bitnamilegacy/mariadb:11.4.7-debian-12-r290dc6acb7b2e
pcre2@10.42-1
10.42-1+deb12u1
1
bitnamilegacy/mariadb:latestbbd4e17f1ef8
pcre2@10.42-1
10.42-1+deb12u1
1
bitnamilegacy/mariadb-galera:11.3.2-debian-12-r9aee9c668098f
pcre2@10.42-1
10.42-1+deb12u1
1
bitnamilegacy/mariadb-galera:11.4.3-debian-12-r0cb8beb6dbb58
pcre2@10.42-1
10.42-1+deb12u1
1
bitnamilegacy/matomo:5.3.2-debian-12-r13f02c000c54b1
pcre2@10.42-1
10.42-1+deb12u1
1
bitnamilegacy/memcached:1.6.24-debian-12-r01d80b6a96f00
pcre2@10.42-1
10.42-1+deb12u1
1
bitnamilegacy/memcached:1.6.29-debian-12-r4ff0e7239c17c
pcre2@10.42-1
10.42-1+deb12u1
1
bitnamilegacy/minio:2024.8.3-debian-12-r15501c419f42e
pcre2@10.42-1
10.42-1+deb12u1
1

syft 1.42.1 · advisories as of 20 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.