StackRadar

CVE-2022-44638

High

Advisory

Published 3 Nov 2022In the index since 6 Sept 2026
Severity
High
worst across findings
CVSS
8.8
base score, highest
EPSS
0.015
73rd percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
134
of 17,781 indexed, latest versions
Container images
138
deployed by those charts
Fix available
3 of 3
affected packages

Red Hat Security Advisory: pixman security update

Carried by container images the latest versions of 134 of 17,781 indexed charts deploy, on 138 images.

Affected packageAffected versionsFixed inImages
pixmandeb0.30.2-2ubuntu1.1, 0.33.6-1, 0.34.0-2, 0.36.0-1+3 more0.30.2-2ubuntu1.2+esm1, 0.33.6-1ubuntu0.1~esm1, 0.34.0-2ubuntu0.1, 0.36.0-1+deb10u1+3 more118
pixmanapk0.40.0-r2, 0.40.0-r30.40.0-r3, 0.40.0-r416
pixmanrpm0.38.4-1.el8, 0.38.4-2.el80:0.38.4-3.el8_8, 0:0.38.4-3.el8_94
OSV records
ALPINE-CVE-2022-44638RHSA-2023:7531RHSA-2024:0131UBUNTU-CVE-2022-44638DLA-3179-1DSA-5276-1
Also known as
USN-5718-1, USN-5718-2

Charts affected

134 by stars
ChartLatestAffected imagesRadar Score
sample-appmongodb-helm-charts0.1.01 of 2See more

sample-app mongodb-helm-charts 0.1.0

1 of the 2 container images this version deploys carry CVE-2022-44638.

Container imageDigestPackageFixed in
quay.io/mongodb/farm-intro-frontend:0.199ccdfd543e1
pixman@0.36.0-1
0.36.0-1+deb10u1

Open the chart page →

6,438
face-recognitionmoreillonVerified publisher0.2.41 of 3See more

face-recognition moreillon 0.2.4

1 of the 3 container images this version deploys carry CVE-2022-44638.

Container imageDigestPackageFixed in
moreillon/face-recognition-fastapi:x86bacb2ddd8394
pixman@0.40.0-1
0.40.0-1.1~deb11u1

Open the chart page →

8,556
mozalert-controllermozilla0.4.01 of 1See more

mozalert-controller mozilla 0.4.0

1 of the 1 container images this version deploys carry CVE-2022-44638.

Container imageDigestPackageFixed in
afrank/mozalert-controller:latestd463c37b08d7
pixman@0.36.0-1
0.36.0-1+deb10u1

Open the chart page →

2,969
sentence-collectormozilla0.1.21 of 2See more

sentence-collector mozilla 0.1.2

1 of the 2 container images this version deploys carry CVE-2022-44638.

Container imageDigestPackageFixed in
mozilla/sentencecollector:2.0.91da6ff5c4895
pixman@0.36.0-1
0.36.0-1+deb10u1

Open the chart page →

6,684
cloudcmdmy0nVerified publisher0.0.31 of 1See more

cloudcmd my0n 0.0.3

1 of the 1 container images this version deploys carry CVE-2022-44638.

Container imageDigestPackageFixed in
coderaiser/cloudcmd:16.6.1b34a9775c7ce
pixman@0.36.0-1
0.36.0-1+deb10u1

Open the chart page →

3,128
betydbncsaVerified publisher0.6.11 of 4See more

betydb ncsa 0.6.1

1 of the 4 container images this version deploys carry CVE-2022-44638.

Container imageDigestPackageFixed in
pecan/bety:5.4.1f825d480cd62
pixman@0.40.0-1
0.40.0-1.1~deb11u1

Open the chart page →

9,542
pecanncsaVerified publisher0.6.22 of 15See more

pecan ncsa 0.6.2

2 of the 15 container images this version deploys carry CVE-2022-44638.

Container imageDigestPackageFixed in
pecan/bety:5.4.1f825d480cd62
pixman@0.40.0-1
0.40.0-1.1~deb11u1
pecan/monitor:1.7.273b2074f3fec
pixman@0.36.0-1
0.36.0-1+deb10u1

Open the chart page →

14,154
liquidsoapnorth141.0.01 of 1See more

liquidsoap north14 1.0.0

1 of the 1 container images this version deploys carry CVE-2022-44638.

Container imageDigestPackageFixed in
ghcr.io/savonet/liquidsoap:v2.0.19e08148e1055
pixman@0.40.0-1
0.40.0-1.1~deb11u1

Open the chart page →

2,954
splashntppoolVerified publisher1.0.41 of 1See more

splash ntppool 1.0.4

1 of the 1 container images this version deploys carry CVE-2022-44638.

Container imageDigestPackageFixed in
scrapinghub/splash:3.4.1a5f89bc84606
pixman@0.34.0-2
0.34.0-2ubuntu0.1

Open the chart page →

27,633
cdn-remoteopencord0.2.42 of 3See more

cdn-remote opencord 0.2.4

2 of the 3 container images this version deploys carry CVE-2022-44638.

Container imageDigestPackageFixed in
omecproject/cdn-antmedia:1.0.0b4ae7d0d6b74
pixman@0.34.0-2
0.34.0-2ubuntu0.1
omecproject/cdn-video-repo:1.0.0d59ccb138ffb
pixman@0.33.6-1
0.33.6-1ubuntu0.1~esm1

Open the chart page →

63,223
mcord-cdn-remoteopencord0.1.61 of 2See more

mcord-cdn-remote opencord 0.1.6

1 of the 2 container images this version deploys carry CVE-2022-44638.

Container imageDigestPackageFixed in
omecproject/cdn-video-repo:remote-v3d59ccb138ffb
pixman@0.33.6-1
0.33.6-1ubuntu0.1~esm1

Open the chart page →

42,614
mcord-cdn-remote-freeopencord0.1.31 of 1See more

mcord-cdn-remote-free opencord 0.1.3

1 of the 1 container images this version deploys carry CVE-2022-44638.

Container imageDigestPackageFixed in
omecproject/cdn-video-repo:remote-v3d59ccb138ffb
pixman@0.33.6-1
0.33.6-1ubuntu0.1~esm1

Open the chart page →

29,124
openwhiskopenwhisk1.0.01 of 10See more

openwhisk openwhisk 1.0.0

1 of the 10 container images this version deploys carry CVE-2022-44638.

Container imageDigestPackageFixed in
openwhisk/kafkaprovider:2.1.063dc3d2a0904
pixman@0.36.0-1
0.36.0-1+deb10u1

Open the chart page →

36,215
issuegenopsmxVerified publisher1.0.21 of 1See more

issuegen opsmx 1.0.2

1 of the 1 container images this version deploys carry CVE-2022-44638.

Container imageDigestPackageFixed in
opsmx11/issuegen:v2.1.05c50ca123d88
pixman@0.30.2-2ubuntu1.1
0.30.2-2ubuntu1.2+esm1

Open the chart page →

26,339
external-dns-host-networkphntom0.0.121 of 1See more

external-dns-host-network phntom 0.0.12

1 of the 1 container images this version deploys carry CVE-2022-44638.

Container imageDigestPackageFixed in
phntom/external-dns-host-network:0.0.123adadbac8443
pixman@0.40.0-1
0.40.0-1.1~deb11u1

Open the chart page →

4,642
python-apppython-app-chart0.1.01 of 2See more

python-app python-app-chart 0.1.0

1 of the 2 container images this version deploys carry CVE-2022-44638.

Container imageDigestPackageFixed in
mnaggar3396/python-app:latest371d8ed84b15
pixman@0.40.0-1
0.40.0-1.1~deb11u1

Open the chart page →

3,382
python-fastapi-postgrespython-fastapi-postgres0.1.01 of 1See more

python-fastapi-postgres python-fastapi-postgres 0.1.0

1 of the 1 container images this version deploys carry CVE-2022-44638.

Container imageDigestPackageFixed in
archish27/python-fastapi-postgres:latest6610071a2101
pixman@0.40.0-1
0.40.0-1.1~deb11u1

Open the chart page →

2,983
dolibarrraphaelVerified publisher0.0.11 of 1See more

dolibarr raphael 0.0.1

1 of the 1 container images this version deploys carry CVE-2022-44638.

Container imageDigestPackageFixed in
monogramm/docker-dolibarr:13.0-alpine5afd99523984
pixman@0.40.0-r2
0.40.0-r3

Open the chart page →

3,466
javareact-java0.1.01 of 1See more

java react-java 0.1.0

1 of the 1 container images this version deploys carry CVE-2022-44638.

Container imageDigestPackageFixed in
project2team4/react:latest3ff031a08887
pixman@0.38.4-0ubuntu1
0.38.4-0ubuntu2.1

Open the chart page →

15,520
stackrox-chartredhat-cop0.0.101 of 1See more

stackrox-chart redhat-cop 0.0.10

1 of the 1 container images this version deploys carry CVE-2022-44638.

Container imageDigestPackageFixed in
quay.io/rht-labs/stack-do500:3.0.86ba82beff18e
pixman@0.38.4-1.el8
0:0.38.4-3.el8_9

Open the chart page →

29,227
laravel-workerrenoki-co1.1.01 of 1See more

laravel-worker renoki-co 1.1.0

1 of the 1 container images this version deploys carry CVE-2022-44638.

Container imageDigestPackageFixed in
quay.io/renokico/laravel-helm-demo:worker-0.6.04b188259267e
pixman@0.40.0-r2
0.40.0-r3

Open the chart page →

5,687
jsonvisiorlex0.1.01 of 1See more

jsonvisio rlex 0.1.0

1 of the 1 container images this version deploys carry CVE-2022-44638.

Container imageDigestPackageFixed in
rlex/jsonvisio:1.9.5cd50ff65118e
pixman@0.36.0-1
0.36.0-1+deb10u1

Open the chart page →

2,100
test-helm-app2saam-helm-test0.1.01 of 1See more

test-helm-app2 saam-helm-test 0.1.0

1 of the 1 container images this version deploys carry CVE-2022-44638.

Container imageDigestPackageFixed in
asdkant/fastapi-hello-world:latesta23d8bf7c885
pixman@0.36.0-1
0.36.0-1+deb10u1

Open the chart page →

2,770
weblateslamdev0.0.111 of 2See more

weblate slamdev 0.0.11

1 of the 2 container images this version deploys carry CVE-2022-44638.

Container imageDigestPackageFixed in
weblate/weblate:3.11.3-182848df56ecd
pixman@0.36.0-1
0.36.0-1+deb10u1

Open the chart page →

8,694
testing-multitoolsomeblackmagic0.1.21 of 1See more

testing-multitool someblackmagic 0.1.2

1 of the 1 container images this version deploys carry CVE-2022-44638.

Container imageDigestPackageFixed in
someblackmagic/k8s-testing-multitool:v0.1.06eca64b6b440
pixman@0.38.4-0ubuntu1
0.38.4-0ubuntu2.1

Open the chart page →

30,687
allurestakaterVerified publisher1.0.11 of 1See more

allure stakater 1.0.1

1 of the 1 container images this version deploys carry CVE-2022-44638.

Container imageDigestPackageFixed in
quay.io/eformat/jenkins-agent-graalvm:latesta3b9a07648b6
pixman@0.38.4-1.el8
0:0.38.4-3.el8_9

Open the chart page →

28,165
nordmart-reviewstakaterVerified publisher0.0.61 of 3See more

nordmart-review stakater 0.0.6

1 of the 3 container images this version deploys carry CVE-2022-44638.

Container imageDigestPackageFixed in
stakater/stakater-nordmart-review-ui:1.0.143f4926eedc74
pixman@0.36.0-1
0.36.0-1+deb10u1

Open the chart page →

11,554
nordmart-review-instancestakaterVerified publisher1.0.01 of 3See more

nordmart-review-instance stakater 1.0.0

1 of the 3 container images this version deploys carry CVE-2022-44638.

Container imageDigestPackageFixed in
stakater/stakater-nordmart-review-ui:1.0.143f4926eedc74
pixman@0.36.0-1
0.36.0-1+deb10u1

Open the chart page →

11,554
krokiteochenglim1.0.14 of 5See more

kroki teochenglim 1.0.1

4 of the 5 container images this version deploys carry CVE-2022-44638.

Container imageDigestPackageFixed in
yuzutech/kroki:0.17.0192b7b27c857
pixman@0.40.0-r3
0.40.0-r4
yuzutech/kroki-bpmn:0.16.0bd629239a64e
pixman@0.40.0-r2
0.40.0-r3
yuzutech/kroki-excalidraw:0.16.015c9eef47a62
pixman@0.40.0-r2
0.40.0-r3
yuzutech/kroki-mermaid:0.16.07acc8fe7caba
pixman@0.40.0-r2
0.40.0-r3

Open the chart page →

8,715
vehicle-dashboardtest-vehi-dash0.1.02 of 7See more

vehicle-dashboard test-vehi-dash 0.1.0

2 of the 7 container images this version deploys carry CVE-2022-44638.

Container imageDigestPackageFixed in
samajh/alprbackend:latestea742b4372ad
pixman@0.36.0-1
0.36.0-1+deb10u1
samajh/alprfrontend:latest05ef4fddbb75
pixman@0.36.0-1
0.36.0-1+deb10u1

Open the chart page →

20,270
genievhdirkVerified publisher0.1.31 of 1See more

genie vhdirk 0.1.3

1 of the 1 container images this version deploys carry CVE-2022-44638.

Container imageDigestPackageFixed in
stanfordoval/almond-server:latest1a63cdccedaf
pixman@0.36.0-1
0.36.0-1+deb10u1

Open the chart page →

3,129
vinyl-lib-chartvinyl-libVerified publisher0.1.01 of 1See more

vinyl-lib-chart vinyl-lib 0.1.0

1 of the 1 container images this version deploys carry CVE-2022-44638.

Container imageDigestPackageFixed in
kporwit/vinyl_lib_app:v0.1.1217de0302218
pixman@0.40.0-1
0.40.0-1.1~deb11u1

Open the chart page →

3,392
mediawikiwbstack0.14.01 of 1See more

mediawiki wbstack 0.14.0

1 of the 1 container images this version deploys carry CVE-2022-44638.

Container imageDigestPackageFixed in
ghcr.io/wbstack/mediawiki:1.37-7.4-20220621-fp-beta-0c3012c8a34b4
pixman@0.40.0-1
0.40.0-1.1~deb11u1

Open the chart page →

2,132
weather-chartweather-web-app0.1.01 of 1See more

weather-chart weather-web-app 0.1.0

1 of the 1 container images this version deploys carry CVE-2022-44638.

Container imageDigestPackageFixed in
zohardocker12/weather_app_flask:latestb86d60dbb68d
pixman@0.36.0-1
0.36.0-1+deb10u1

Open the chart page →

2,670

Container images carrying it

138 by charts deploying them

A fixed version is listed for 3 of the 3 affected packages.

Container imageDigestPackageFixed inUsed by
intel/dlstreamer-pipeline-server:2022.1.1-ubuntu20aa8f5483a2ef
pixman@0.38.4-0ubuntu1
0.38.4-0ubuntu2.1
1
jakowenko/double-take:1.6.0b858bac9e32a
pixman@0.38.4-0ubuntu1
0.38.4-0ubuntu2.1
1
jellyfin/jellyfin:10.8.1ee24f4459a40
pixman@0.40.0-1
0.40.0-1.1~deb11u1
1
kobotoolbox/kpi:2.022.24dbcacc01bccd4
pixman@0.40.0-1
0.40.0-1.1~deb11u1
1
kporwit/vinyl_lib_app:v0.1.1217de0302218
pixman@0.40.0-1
0.40.0-1.1~deb11u1
1
librenms/librenms:22.4.14f1f3d667cc7
pixman@0.40.0-r3
0.40.0-r4
1
linuxserver/calibre:version-v5.21.0a847b5b2d860
pixman@0.34.0-2
0.34.0-2ubuntu0.1
1
linuxserver/calibre-web:version-0.6.12938810eca3d3
pixman@0.38.4-0ubuntu1
0.38.4-0ubuntu2.1
1
linuxserver/jellyfin:10.7.72427dde159a2
pixman@0.38.4-0ubuntu1
0.38.4-0ubuntu2.1
1
lsstdm/alert-stream-simulator:v1.2.1973df082d006
pixman@0.36.0-1
0.36.0-1+deb10u1
1
lsstdm/lsst_alert_packet:tickets-DM-3274374c97a490940
pixman@0.36.0-1
0.36.0-1+deb10u1
1
lsstsqre/kafkaaggregator:masterbe1b21060854
pixman@0.36.0-1
0.36.0-1+deb10u1
1
lsstsqre/squash-api:0.5.34879415ec6ac
pixman@0.36.0-1
0.36.0-1+deb10u1
1
mnaggar3396/python-app:latest371d8ed84b15
pixman@0.40.0-1
0.40.0-1.1~deb11u1
1
monogramm/docker-dolibarr:13.0-alpine5afd99523984
pixman@0.40.0-r2
0.40.0-r3
1
moreillon/face-recognition-fastapi:x86bacb2ddd8394
pixman@0.40.0-1
0.40.0-1.1~deb11u1
1
mozilla/sentencecollector:2.0.91da6ff5c4895
pixman@0.36.0-1
0.36.0-1+deb10u1
1
nathanielvarona/pritunl-slack-app:0.1.10b746a34e5597
pixman@0.40.0-1
0.40.0-1.1~deb11u1
1
octoprint/octoprint:1.4.0106c26efcd8a
pixman@0.36.0-1
0.36.0-1+deb10u1
1
octoprint/octoprint:1.6.1ea3bffae2470
pixman@0.36.0-1
0.36.0-1+deb10u1
1
omecproject/cdn-antmedia:1.0.0b4ae7d0d6b74
pixman@0.34.0-2
0.34.0-2ubuntu0.1
1
openemr/openemr:6.1.089eaa6d9a4e3
pixman@0.40.0-r3
0.40.0-r4
1
openkm/openkm-ce:6.3.113bc465a7461b
pixman@0.38.4-0ubuntu1
0.38.4-0ubuntu2.1
1
openproject/community:12.0.2734743d11094
pixman@0.36.0-1
0.36.0-1+deb10u1
1
openwhisk/kafkaprovider:2.1.063dc3d2a0904
pixman@0.36.0-1
0.36.0-1+deb10u1
1
opsmx11/issuegen:v2.1.05c50ca123d88
pixman@0.30.2-2ubuntu1.1
0.30.2-2ubuntu1.2+esm1
1
pecan/monitor:1.7.273b2074f3fec
pixman@0.36.0-1
0.36.0-1+deb10u1
1
phntom/external-dns-host-network:0.0.123adadbac8443
pixman@0.40.0-1
0.40.0-1.1~deb11u1
1
photoprism/photoprism:220629-jammy2954334adbda
pixman@0.40.0-1build4
0.40.0-1ubuntu0.22.04.1
1
plumdog/db-operator:latest0c2fa2db0357
pixman@0.36.0-1
0.36.0-1+deb10u1
1
project2team4/react:latest3ff031a08887
pixman@0.38.4-0ubuntu1
0.38.4-0ubuntu2.1
1
rlex/jsonvisio:1.9.5cd50ff65118e
pixman@0.36.0-1
0.36.0-1+deb10u1
1
roadiehq/community-backstage-image:latestef355bf5b639
pixman@0.36.0-1
0.36.0-1+deb10u1
1
robmarkcole/deepstack-ui:latest410275726459
pixman@0.40.0-1
0.40.0-1.1~deb11u1
1
robotshop/rs-payment:latest774b52c6180d
pixman@0.40.0-1
0.40.0-1.1~deb11u1
1
samajh/alprbackend:latestea742b4372ad
pixman@0.36.0-1
0.36.0-1+deb10u1
1
samajh/alprfrontend:latest05ef4fddbb75
pixman@0.36.0-1
0.36.0-1+deb10u1
1
scrapinghub/splash:3.4.1a5f89bc84606
pixman@0.34.0-2
0.34.0-2ubuntu0.1
1
shinobisystems/shinobi:dev3ca746937856
pixman@0.36.0-1
0.36.0-1+deb10u1
1
shinobisystems/shinobi:latestc2f5ce2e1067
pixman@0.36.0-1
0.36.0-1+deb10u1
1
sinusbot/docker:1.0.0-beta.14-dc94a7cc7a4f3cc4393
pixman@0.36.0-1
0.36.0-1+deb10u1
1
sismics/docs:v1.10f4b0ef019cf1
pixman@0.34.0-2
0.34.0-2ubuntu0.1
1
someblackmagic/k8s-testing-multitool:v0.1.06eca64b6b440
pixman@0.38.4-0ubuntu1
0.38.4-0ubuntu2.1
1
stanfordoval/almond-server:latest1a63cdccedaf
pixman@0.36.0-1
0.36.0-1+deb10u1
1
stashapp/stash:latest24dbd7607174
pixman@0.38.4-0ubuntu1
0.38.4-0ubuntu2.1
1
tensorflow/tensorflow:1.6.0-devel1e3172090703
pixman@0.33.6-1
0.33.6-1ubuntu0.1~esm1
1
timothyclarke/wptagent:2018-01-2322c41e5ca7e2
pixman@0.33.6-1
0.33.6-1ubuntu0.1~esm1
1
tooljet/tooljet-ce:v1.18.0c85a4720e42e
pixman@0.36.0-1
0.36.0-1+deb10u1
1
turt2live/matrix-media-repo:v1.2.8bfbd459f89a5
pixman@0.40.0-r2
0.40.0-r3
1
tvanro/prerender-alpine:6.4.06909015f0328
pixman@0.40.0-r2
0.40.0-r3
1

syft 1.42.1 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.