USN-8688-1

Unscored

Advisory

Published 27 Aug 2026In the index since 5 Sept 2026

Severity: Unscored; worst across findings
CVSS: —; base score, highest
EPSS: —; probability of exploitation
CISA KEV: Not listed; no confirmed exploitation
Charts affected: 1,002; of 17,787 indexed, latest versions
Container images: 942; deployed by those charts
Fix available: 1 of 1; affected package

pam vulnerability

Carried by container images the latest versions of 1,002 of 17,787 indexed charts deploy, on 942 images.

Affected package	Affected versions	Fixed in	Images
pamdeb	1.1.8-3.2ubuntu4, 1.1.8-3.6ubuntu2, 1.1.8-3.6ubuntu2.18.04.1, 1.1.8-3.6ubuntu2.18.04.2+22 more	1.1.8-3.6ubuntu2.18.04.6+esm2, 1.3.1-5ubuntu4.7+esm1, 1.4.0-11ubuntu2.8, 1.5.3-5ubuntu5.7	942

OSV records: USN-8688-1

Charts affected

1,002 by stars

Chart

Latest

Affected images

Radar Score

clickhousezloi-space

1.2.0

2 of 3 See more

clickhouse zloi-space 1.2.0

2 of the 3 container images this version deploys carry USN-8688-1.

Container image	Digest	Package	Fixed in
yandex/clickhouse-client :21.3	863f94a0f607	pam@1.1.8-3.6ubuntu2.18.04.3	1.1.8-3.6ubuntu2.18.04.6+esm2
yandex/clickhouse-server :21.3.20	4eccfffb01d7	pam@1.3.1-5ubuntu4.3	1.3.1-5ubuntu4.7+esm1

Open the chart page →

9,250

zoo-project-druzoo-project

0.10.4

1 of 6 See more

zoo-project-dru zoo-project 0.10.4

1 of the 6 container images this version deploys carry USN-8688-1.

Container image	Digest	Package	Fixed in
zooproject/zoo-project :dru-19f3c4eed7c9ec9d1f0375bbe59f9d204a42bd3a	9a507cb7e2dd	pam@1.4.0-11ubuntu2.7	1.4.0-11ubuntu2.8

Open the chart page →

7,916

Container images carrying it

942 by charts deploying them

A fixed version is listed for 1 of the 1 affected package.

Container image	Digest	Package	Fixed in	Used by
antrea/flow-aggregator :v2.7.0	065193e7572f	pam@1.5.3-5ubuntu5.6	1.5.3-5ubuntu5.7	1
apache/activemq-artemis :2.44.0	0305c26f19ed	pam@1.5.3-5ubuntu5.5	1.5.3-5ubuntu5.7	1
apache/activemq-artemis :2.37.0	bae523439ee3	pam@1.5.3-5ubuntu5.1	1.5.3-5ubuntu5.7	1
apache/apisix :3.16.0-ubuntu	5e47692cac00	pam@1.5.3-5ubuntu5.5	1.5.3-5ubuntu5.7	1
apache/gravitino-iceberg-rest :1.3.0	80136ae753ee	pam@1.4.0-11ubuntu2.6	1.4.0-11ubuntu2.8	1
apache/hertzbeat :1.8.0	75d48a62748f	pam@1.5.3-5ubuntu5.5	1.5.3-5ubuntu5.7	1
apache/hertzbeat-collector :1.8.0	a2bab1be574c	pam@1.5.3-5ubuntu5.5	1.5.3-5ubuntu5.7	1
apache/iotdb :0.13.3-node	afa47bf1692a	pam@1.3.1-5ubuntu4.3	1.3.1-5ubuntu4.7+esm1	1
apache/nifi-registry :1.27.0	63b8e3e40742	pam@1.4.0-11ubuntu2.4	1.4.0-11ubuntu2.8	1
apachepulsar/pulsar :3.1.0	16f9fdab3fa6	pam@1.4.0-11ubuntu2.3	1.4.0-11ubuntu2.8	1
apachepulsar/pulsar :2.10.0	3b262ab7a7d9	pam@1.3.1-5ubuntu4.3	1.3.1-5ubuntu4.7+esm1	1
apachepulsar/pulsar :3.0.7	9c9947de139d	pam@1.4.0-11ubuntu2.4	1.4.0-11ubuntu2.8	1
apachepulsar/pulsar :2.9.0	d056c89b7131	pam@1.3.1-5ubuntu4.3	1.3.1-5ubuntu4.7+esm1	1
apachepulsar/pulsar :2.8.2	d538416d5afe	pam@1.3.1-5ubuntu4.3	1.3.1-5ubuntu4.7+esm1	1
apache/ranger :2.7.0	76c176e8a0e4	pam@1.4.0-11ubuntu2.6	1.4.0-11ubuntu2.8	1
apache/rocketmq :5.3.0	434d8398f996	pam@1.5.3-5ubuntu5.1	1.5.3-5ubuntu5.7	1
apache/rocketmq-exporter :0.0.2	c8fb51195444	pam@1.4.0-11ubuntu2.3	1.4.0-11ubuntu2.8	1
apache/skywalking-oap-server :9.2.0	133d35d2c263	pam@1.4.0-11ubuntu2	1.4.0-11ubuntu2.8	1
apache/skywalking-oap-server :8.9.1	b4ec8c18d079	pam@1.3.1-5ubuntu4.3	1.3.1-5ubuntu4.7+esm1	1
apache/skywalking-ui :9.2.0	295f1dc87d98	pam@1.4.0-11ubuntu2	1.4.0-11ubuntu2.8	1
apache/skywalking-ui :8.9.1	80530f0308a5	pam@1.3.1-5ubuntu4.3	1.3.1-5ubuntu4.7+esm1	1
apache/tika :2.9.0.0	92d055a84e9e	pam@1.4.0-11ubuntu2.3	1.4.0-11ubuntu2.8	1
arunvelsriram/utils :latest	655ad18fd8d6	pam@1.5.3-5ubuntu5.4	1.5.3-5ubuntu5.7	1
assistiot/cybersecurity-monitoring_ir-cas :latest	6a107f224c34	pam@1.3.1-5ubuntu4.6	1.3.1-5ubuntu4.7+esm1	1
assistiot/fl_orchestrator :dbmongo4-latest	d157fbe150e3	pam@1.3.1-5ubuntu4.3	1.3.1-5ubuntu4.7+esm1	1
assistiot/location_processing :latest	e9bae124095f	pam@1.4.0-11ubuntu2	1.4.0-11ubuntu2.8	1
assistiot/open_api_backend :1.1.2	30812ba93555	pam@1.4.0-11ubuntu2.3	1.4.0-11ubuntu2.8	1
assistiot/sdn_controller :2.4.0	ea254b6d8a31	pam@1.3.1-5ubuntu4.3	1.3.1-5ubuntu4.7+esm1	1
assistiot/video_augmentation :runner-cpu-latest	e5ae539ce2cb	pam@1.3.1-5ubuntu4.6	1.3.1-5ubuntu4.7+esm1	1
atlassian/confluence-server :7.10.0	3b9222ab32ef	pam@1.4.0-11ubuntu2	1.4.0-11ubuntu2.8	1
atlassian/jira-software :8.14.0	37bc46cbec1a	pam@1.4.0-11ubuntu2.4	1.4.0-11ubuntu2.8	1
atlassian/jira-software :9.7.2	64a75aa4ec4e	pam@1.5.3-5ubuntu5.1	1.5.3-5ubuntu5.7	1
bbernhard/signal-cli-rest-api :0.57	549ad08d7e14	pam@1.3.1-5ubuntu4.3	1.3.1-5ubuntu4.7+esm1	1
beanbag/reviewboard :latest	6b840f546e1c	pam@1.4.0-11ubuntu2.7	1.4.0-11ubuntu2.8	1
bicarus/elrond-rosetta :v1.3.50.0	b1dab0721e1c	pam@1.3.1-5ubuntu4.3	1.3.1-5ubuntu4.7+esm1	1
bicarus/mx-notifier :1.1.8	bed688d16762	pam@1.3.1-5ubuntu4.3	1.3.1-5ubuntu4.7+esm1	1
blakeblackshear/frigate :0.10.0-amd64	ae269270ad9e	pam@1.3.1-5ubuntu4.3	1.3.1-5ubuntu4.7+esm1	1
boxcutter/meshcmd :1.1.3	84e13f01bcab	pam@1.4.0-11ubuntu2.3	1.4.0-11ubuntu2.8	1
browserless/chrome :1.48.0-chrome-stable	c81ae5585b47	pam@1.3.1-5ubuntu4.2	1.3.1-5ubuntu4.7+esm1	1
camunda/zeebe :8.4.5	ab5abc09e407	pam@1.4.0-11ubuntu2.4	1.4.0-11ubuntu2.8	1
castlemock/castlemock :latest	b7f3f1527ba9	pam@1.5.3-5ubuntu5.1	1.5.3-5ubuntu5.7	1
cbioportal/cbioportal :6.4.1-web-shenandoah	08debbd2dbf9	pam@1.5.3-5ubuntu5.5	1.5.3-5ubuntu5.7	1
chaerr/kridge :demo-operator-v0.1.2	66833deec017	pam@1.3.1-5ubuntu4.6	1.3.1-5ubuntu4.7+esm1	1
checkmk/check-mk-community :2.5.0p6	c11b422210c4	pam@1.4.0-11ubuntu2.6	1.4.0-11ubuntu2.8	1
chetangautamm/repo :sipp.v3	e7f7049e1544	pam@1.3.1-5ubuntu4.1	1.3.1-5ubuntu4.7+esm1	1
cheveo/azp-agent :1.0.2	82240f890884	pam@1.4.0-11ubuntu2.5	1.4.0-11ubuntu2.8	1
chriseaton/adventureworks :latest	54c3384ce701	pam@1.4.0-11ubuntu2.5	1.4.0-11ubuntu2.8	1
circleci/runner :launch-agent	9bdc62f02162	pam@1.3.1-5ubuntu4.7	1.3.1-5ubuntu4.7+esm1	1
ciscolabs/msm-nc :07102023	36d02faad958	pam@1.4.0-11ubuntu2.3	1.4.0-11ubuntu2.8	1
ckan/ckan-solr :2.11-solr9	ef8e5d3e6be1	pam@1.4.0-11ubuntu2.6	1.4.0-11ubuntu2.8	1