CVE-2026-89161
HighAdvisory
Published 11 Sept 2026In the index since 12 Sept 2026
- Severity
- High
- worst across findings
- CVSS
- 7.4
- base score, highest
- EPSS
- 0.001
- 1st percentile
- CISA KEV
- Not listed
- no confirmed exploitation
- Charts affected
- 2,257
- of 17,792 indexed, latest versions
- Container images
- 2,191
- deployed by those charts
- Fix available
- 1 of 1
- affected package
The matching OSV records carry no description.
Carried by container images the latest versions of 2,257 of 17,792 indexed charts deploy, on 2,191 images.
| Affected package | Affected versions | Fixed in | Images |
|---|---|---|---|
| pcre2deb | 10.21-1, 10.34-7, 10.34-7ubuntu0.1, 10.39-3+ubuntu20.04.1+deb.sury.org+2+10 more | 10.42-1+deb12u1, 10.46-1~deb13u2 | 2,191 |
- OSV records
- DEBIAN-CVE-2026-89161UBUNTU-CVE-2026-89161ECHO-4e33-89ce-0def
- Trending
- Rank 2 in indexed charts, since 12 Sept 2026. See the ranking →
Charts affected
2,257 by stars
| Chart | Latest | Affected images | Radar Score |
|---|---|---|---|
| helm-demoyahoon-helm-demoVerified publisher | 1.0.0 | 1 of 1See more | 1,304 |
| my-nginx-appyasser-nginx-app | 0.1.0 | 1 of 1See more | 1,849 |
| api-snapyoukadevVerified publisher | 0.1.1 | 1 of 1See more | 2,684 |
| changedetection-iozekker6Verified publisher | 1.99.0 | 1 of 1See more | 2,612 |
| NEW_APPzekker6Verified publisher | 0.0.0 | 1 of 1See more | 1,849 |
| clickhousezloi-space | 1.2.0 | 1 of 3See more | 9,256 |
| zoo-project-druzoo-projectOfficialVerified publisher | 0.10.4 | 1 of 6See more | 7,929 |
Container images carrying it
2,191 by charts deploying them
A fixed version is listed for 1 of the 1 affected package.
| Container image | Digest | Package | Fixed in | Used by |
|---|---|---|---|---|
| glpi/ | 4b681082a79e | pcre2 | 10.46-1~deb13u2 | 1 |
| gobitfly/ | 1d08a7986348 | pcre2 | no fix listed | 1 |
| golenski/ | c863dcb0c513 | pcre2 | 10.42-1+deb12u1 | 1 |
| golenski/ | 3a2b36df247b | pcre2 | 10.42-1+deb12u1 | 1 |
| golenski/ | 954caf4aaf6a | pcre2 | 10.42-1+deb12u1 | 1 |
| gotenberg/ | 206a6c708fc6 | pcre2 | 10.46-1~deb13u2 | 1 |
| gotenberg/ | 67097317623a | pcre2 | 10.46-1~deb13u2 | 1 |
| gotenberg/ | a40f92d7419a | pcre2 | 10.46-1~deb13u2 | 1 |
| gradiant/ | 332031245fce | pcre2 | no fix listed | 1 |
| grafana/ | 3364714a2f64 | pcre2 | no fix listed | 1 |
| grafana/ | 01a63f4e032c | pcre2 | no fix listed | 1 |
| grafana/ | 06bdcbb51fc2 | pcre2 | no fix listed | 1 |
| grafana/ | 0f4434c92b3e | pcre2 | no fix listed | 1 |
| grafana/ | 491b0578c049 | pcre2 | no fix listed | 1 |
| grafana/ | 84b76d56c594 | pcre2 | no fix listed | 1 |
| grafana/ | 8c7256f412fe | pcre2 | no fix listed | 1 |
| grafana/ | b8ec653c4423 | pcre2 | no fix listed | 1 |
| grafana/ | f50931848bd8 | pcre2 | no fix listed | 1 |
| grafana/ | 36d07f8d276e | pcre2 | 10.42-1+deb12u1 | 1 |
| grafana/ | 8a3882e8c28b | pcre2 | 10.42-1+deb12u1 | 1 |
| grafana/ | 42f541f22063 | pcre2 | 10.42-1+deb12u1 | 1 |
| grafana/ | 65bfae480b57 | pcre2 | no fix listed | 1 |
| grafana/ | 8dcfdf466da0 | pcre2 | no fix listed | 1 |
| graphprotocol/ | b0436347fb24 | pcre2 | 10.42-1+deb12u1 | 1 |
| graphprotocol/ | f4452cdedd68 | pcre2 | 10.42-1+deb12u1 | 1 |
| graylog/ | 19de1aff48c2 | pcre2 | no fix listed | 1 |
| graylog/ | 598bd41fefd5 | pcre2 | no fix listed | 1 |
| graylog/ | bf3e1e7b7352 | pcre2 | no fix listed | 1 |
| graylog/ | 8a1f641cd7aa | pcre2 | no fix listed | 1 |
| greenkube/ | 0c01932282a4 | pcre2 | 10.42-1+deb12u1 | 1 |
| grpl/ | c00aafee6629 | pcre2 | no fix listed | 1 |
| guacamole/ | 0f62f6d17ab3 | pcre2 | no fix listed | 1 |
| guillh/ | 4fb99dbc32b2 | pcre2 | 10.42-1+deb12u1 | 1 |
| gulacedia/ | 67b467d961ca | pcre2 | 10.42-1+deb12u1 | 1 |
| hamidyousefi93/ | c34f071f6ed0 | pcre2 | 10.42-1+deb12u1 | 1 |
| hamzaarshad10/ | 2c1c3b86a8e7 | pcre2 | 10.42-1+deb12u1 | 1 |
| hamzaarshad10/ | 154f38e8668e | pcre2 | 10.42-1+deb12u1 | 1 |
| hansehe/ | bc8e45262bc4 | pcre2 | 10.42-1+deb12u1 | 1 |
| haohanyang/ | 54f2112602ee | pcre2 | 10.42-1+deb12u1 | 1 |
| haohanyang/ | f4f8fe4e21f1 | pcre2 | 10.42-1+deb12u1 | 1 |
| hassroutyyoussef/ | 1f01edf1ee0c | pcre2 | 10.42-1+deb12u1 | 1 |
| hassroutyyoussef/ | 2fc3d1617928 | pcre2 | 10.42-1+deb12u1 | 1 |
| hassroutyyoussef/ | e0392e2b4a90 | pcre2 | 10.42-1+deb12u1 | 1 |
| hasura/ | 0111b0204136 | pcre2 | no fix listed | 1 |
| hasura/ | f6c1c4b957d2 | pcre2 | no fix listed | 1 |
| haugene/ | 059216cfae4b | pcre2 | no fix listed | 1 |
| haveagitgat/ | 1256348872ce | pcre2 | no fix listed | 1 |
| haveagitgat/ | 1e3f9328327d | pcre2 | no fix listed | 1 |
| haveagitgat/ | 3ff0913202dd | pcre2 | no fix listed | 1 |
| hazegoodlife/ | 50f02d2d5d4d | pcre2 | 10.42-1+deb12u1 | 1 |