StackRadar

CVE-2026-95818

Low

Advisory

Published 22 Sept 2026In the index since 23 Sept 2026
Severity
Low
worst across findings
CVSS
3.6
base score, highest
EPSS
0.001
2nd percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
2,755
of 17,844 indexed, latest versions
Container images
2,797
deployed by those charts
Fix available
1 of 2
affected packages

The matching OSV records carry no description.

Carried by container images the latest versions of 2,755 of 17,844 indexed charts deploy, on 2,797 images.

Affected packageAffected versionsFixed inImages
glibcdeb2.23-0ubuntu5, 2.23-0ubuntu7, 2.23-0ubuntu9, 2.23-0ubuntu10+66 more2.41-12+deb13u4+e32,790
eglibcdeb2.19-0ubuntu6.3, 2.19-0ubuntu6.6, 2.19-0ubuntu6.13, 2.19-0ubuntu6.14+1 moreno fix listed7
OSV records
DEBIAN-CVE-2026-95818UBUNTU-CVE-2026-95818ECHO-f127-8d9c-ea3a
Trending
Rank 2 in indexed charts, since 23 Sept 2026. See the ranking →

Charts affected

2,755 by stars
ChartLatestAffected imagesRadar Score
endlessh-gozekker6Verified publisher0.4.01 of 1See more

endlessh-go zekker6 0.4.0

1 of the 1 container images this version deploys carry CVE-2026-95818.

Container imageDigestPackageFixed in
ghcr.io/shizunge/endlessh-go:2026.0730.08826dad32623
glibc@2.41-12+deb13u3
no fix listed

Open the chart page →

525
NEW_APPzekker6Verified publisher0.0.01 of 1See more

NEW_APP zekker6 0.0.0

1 of the 1 container images this version deploys carry CVE-2026-95818.

Container imageDigestPackageFixed in
library/nginx:latestabe47724e466
glibc@2.41-12+deb13u4
no fix listed

Open the chart page →

1,668
sockpuppetbrowserzekker6Verified publisher0.1.01 of 1See more

sockpuppetbrowser zekker6 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-95818.

Container imageDigestPackageFixed in
dgtlmoon/sockpuppetbrowser:latest1d8f72d2ce20
glibc@2.36-9+deb12u14
no fix listed

Open the chart page →

4,800
clickhousezloi-space1.2.02 of 3See more

clickhouse zloi-space 1.2.0

2 of the 3 container images this version deploys carry CVE-2026-95818.

Container imageDigestPackageFixed in
yandex/clickhouse-client:21.3863f94a0f607
glibc@2.27-3ubuntu1.4
no fix listed
yandex/clickhouse-server:21.3.204eccfffb01d7
glibc@2.31-0ubuntu9.2
no fix listed

Open the chart page →

9,537
zoo-project-druzoo-projectOfficialVerified publisher0.10.41 of 6See more

zoo-project-dru zoo-project 0.10.4

1 of the 6 container images this version deploys carry CVE-2026-95818.

Container imageDigestPackageFixed in
zooproject/zoo-project:dru-19f3c4eed7c9ec9d1f0375bbe59f9d204a42bd3a9a507cb7e2dd
glibc@2.35-0ubuntu3.14
no fix listed

Open the chart page →

8,360

Container images carrying it

2,797 by charts deploying them

A fixed version is listed for 1 of the 2 affected packages.

Container imageDigestPackageFixed inUsed by
ghcr.io/paperless-ngx/paperless-ngx:3.1.3aa810a36942c
glibc@2.41-12+deb13u3
no fix listed
5
artifacthub/postgres:latest4fd34fa635cc
glibc@2.41-12
no fix listed
4
bitnamilegacy/mariadb:12.0.2-debian-12-r0888cdaae3cb9
glibc@2.36-9+deb12u10
no fix listed
4
bitnamilegacy/mysql:9.4.0-debian-12-r1ec13e229247a
glibc@2.36-9+deb12u10
no fix listed
4
bitnamilegacy/postgresql:16233f361c5819
glibc@2.36-9+deb12u9
no fix listed
4
bitnamilegacy/rabbitmq:4.1.2:4.1.2-debian-12-r1fac502149c40
glibc@2.36-9+deb12u10
no fix listed
4
cloudflare/cloudflared:2026.3.06b599ca3e974
glibc@2.41-12+deb13u1
no fix listed
4
flaresolverr/flaresolverr:latest:v3.5.0139dfee1c6f8
glibc@2.36-9+deb12u14
no fix listed
4
fluent/fluent-bit:5.1.2:latestd792375ca8e5
glibc@2.41-12+deb13u3
no fix listed
4
hyperledger/fabric-ca:latesta70b6ba64a08
glibc@2.35-0ubuntu3.13
no fix listed
4
hyperledger/fabric-ca-tools:latest4ce6f43ded2e
glibc@2.23-0ubuntu10
no fix listed
4
hyperledger/fabric-couchdb:0.4.15f6c724592abf
glibc@2.23-0ubuntu11
no fix listed
4
jaegertracing/jaeger-cassandra-schema:1.53.0d48d6dab2c65
glibc@2.35-0ubuntu3.5
no fix listed
4
library/memcached:1.6.45d956c0a57fd7
glibc@2.41-12+deb13u4
no fix listed
4
library/mongo:5.0-focal5e15a3f014ed
glibc@2.31-0ubuntu9.17
no fix listed
4
library/mongo:4.2.12-bionic628741415fc9
glibc@2.27-3ubuntu1.4
no fix listed
4
library/mongo:4.4.66efa05203990
glibc@2.27-3ubuntu1.4
no fix listed
4
library/nginx:1.27.1287ff321f9e3
glibc@2.36-9+deb12u8
no fix listed
4
library/postgres:134689940c6838
glibc@2.41-12
no fix listed
4
library/rabbitmq:3.11-managementc3f70098e01d
glibc@2.35-0ubuntu3.6
no fix listed
4
library/redis:7:7.4:7.4.11c6eabf748fc7
glibc@2.36-9+deb12u14
no fix listed
4
mastercloudapps/planner:v1.2340a950b311b2
glibc@2.35-0ubuntu3.1
no fix listed
4
opea/llm-tgi:1.00c25aab3f106
glibc@2.36-9+deb12u8
no fix listed
4
oscarsotosanchez/weatherservice:v1.0911ec961d10b
glibc@2.27-3ubuntu1.4
no fix listed
4
shashkist/flask-contacts-app:latest581de1fd6084
glibc@2.36-9+deb12u9
no fix listed
4
valkey/valkey:9.1.2:latest418652cfb58e
glibc@2.41-12+deb13u4
no fix listed
4
valkey/valkey:9.0.2930b41430fb7
glibc@2.41-12+deb13u1
no fix listed
4
valkey/valkey:9.1.2:latestc123e3715db6
glibc@2.41-12+deb13u3
no fix listed
4
vaultwarden/server:1.37.2:latest094b5689ed81
glibc@2.41-12+deb13u3
no fix listed
4
ghcr.io/flaresolverr/flaresolverr:latest:v3.5.2c80ae007ce2c
glibc@2.36-9+deb12u14
no fix listed
4
ghcr.io/foundry-rs/foundry:latest0c00cb0bda1a
glibc@2.35-0ubuntu3.13
no fix listed
4
ghcr.io/kubedb/kubedb-autoscaler:v0.51.05d1182ac21f0
glibc@2.36-9+deb12u14
no fix listed
4
ghcr.io/kubedb/kubedb-crd-manager:v0.21.09506a6cb98d1
glibc@2.36-9+deb12u14
no fix listed
4
ghcr.io/kubedb/kubedb-ops-manager:v0.53.06d4c9fe66e4f
glibc@2.36-9+deb12u14
no fix listed
4
ghcr.io/kubedb/kubedb-provisioner:v0.66.0e7041c3b41e7
glibc@2.36-9+deb12u14
no fix listed
4
ghcr.io/kubevault/vault-operator:v0.25.0c8e042b5cee8
glibc@2.36-9+deb12u14
no fix listed
4
quay.io/argoproj/argocd:v3.5.3dd3f47d5a5e4
glibc@2.43-2ubuntu2.4
no fix listed
4
apache/apisix:3.18.0-ubuntu9ee5df1611f9
glibc@2.39-0ubuntu8.8
no fix listed
3
apache/apisix-ingress-controller:2.2.05c5efa4c7f2a
glibc@2.36-9+deb12u14
no fix listed
3
apache/superset:6.1.0:latest16b50bbef664
glibc@2.36-9+deb12u14
no fix listed
3
bitnamilegacy/etcd:latest99b408c15272
glibc@2.36-9+deb12u10
no fix listed
3
bitnamilegacy/kubectl:latestcd354d5b2556
glibc@2.36-9+deb12u10
no fix listed
3
bitnamilegacy/os-shell:12-debian-12-r5177e65e9d633e
glibc@2.36-9+deb12u10
no fix listed
3
bitnamilegacy/pgpool:4.6.3-debian-12-r0d3bf3910f148
glibc@2.36-9+deb12u10
no fix listed
3
bitnamilegacy/postgresql:17.6.0-debian-12-r0de520acd66fc
glibc@2.36-9+deb12u10
no fix listed
3
bitnamilegacy/postgresql:14.13.0df6ec02e2b9a
glibc@2.36-9+deb12u9
no fix listed
3
bitnamilegacy/postgresql-repmgr:17.6.0-debian-12-r2f12387ec882b
glibc@2.36-9+deb12u10
no fix listed
3
bitnamilegacy/valkey-cluster:8.1.3-debian-12-r332869e769b7e
glibc@2.36-9+deb12u10
no fix listed
3
ciscolabs/rtsp-client:latesta7b60ec88285
glibc@2.31-0ubuntu9.9
no fix listed
3
ciscolabs/rtsp-server:latestb59fc10bb821
glibc@2.31-0ubuntu9.9
no fix listed
3

syft 1.42.1 · advisories as of 25 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.