StackRadar

CVE-2022-44638

High

Advisory

Published 3 Nov 2022In the index since 6 Sept 2026
Severity
High
worst across findings
CVSS
8.8
base score, highest
EPSS
0.015
73rd percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
134
of 17,781 indexed, latest versions
Container images
138
deployed by those charts
Fix available
3 of 3
affected packages

Red Hat Security Advisory: pixman security update

Carried by container images the latest versions of 134 of 17,781 indexed charts deploy, on 138 images.

Affected packageAffected versionsFixed inImages
pixmandeb0.30.2-2ubuntu1.1, 0.33.6-1, 0.34.0-2, 0.36.0-1+3 more0.30.2-2ubuntu1.2+esm1, 0.33.6-1ubuntu0.1~esm1, 0.34.0-2ubuntu0.1, 0.36.0-1+deb10u1+3 more118
pixmanapk0.40.0-r2, 0.40.0-r30.40.0-r3, 0.40.0-r416
pixmanrpm0.38.4-1.el8, 0.38.4-2.el80:0.38.4-3.el8_8, 0:0.38.4-3.el8_94
OSV records
ALPINE-CVE-2022-44638RHSA-2023:7531RHSA-2024:0131UBUNTU-CVE-2022-44638DLA-3179-1DSA-5276-1
Also known as
USN-5718-1, USN-5718-2

Charts affected

134 by stars
ChartLatestAffected imagesRadar Score
sample-appmongodb-helm-charts0.1.01 of 2See more

sample-app mongodb-helm-charts 0.1.0

1 of the 2 container images this version deploys carry CVE-2022-44638.

Container imageDigestPackageFixed in
quay.io/mongodb/farm-intro-frontend:0.199ccdfd543e1
pixman@0.36.0-1
0.36.0-1+deb10u1

Open the chart page →

6,438
face-recognitionmoreillonVerified publisher0.2.41 of 3See more

face-recognition moreillon 0.2.4

1 of the 3 container images this version deploys carry CVE-2022-44638.

Container imageDigestPackageFixed in
moreillon/face-recognition-fastapi:x86bacb2ddd8394
pixman@0.40.0-1
0.40.0-1.1~deb11u1

Open the chart page →

8,556
mozalert-controllermozilla0.4.01 of 1See more

mozalert-controller mozilla 0.4.0

1 of the 1 container images this version deploys carry CVE-2022-44638.

Container imageDigestPackageFixed in
afrank/mozalert-controller:latestd463c37b08d7
pixman@0.36.0-1
0.36.0-1+deb10u1

Open the chart page →

2,969
sentence-collectormozilla0.1.21 of 2See more

sentence-collector mozilla 0.1.2

1 of the 2 container images this version deploys carry CVE-2022-44638.

Container imageDigestPackageFixed in
mozilla/sentencecollector:2.0.91da6ff5c4895
pixman@0.36.0-1
0.36.0-1+deb10u1

Open the chart page →

6,684
cloudcmdmy0nVerified publisher0.0.31 of 1See more

cloudcmd my0n 0.0.3

1 of the 1 container images this version deploys carry CVE-2022-44638.

Container imageDigestPackageFixed in
coderaiser/cloudcmd:16.6.1b34a9775c7ce
pixman@0.36.0-1
0.36.0-1+deb10u1

Open the chart page →

3,128
betydbncsaVerified publisher0.6.11 of 4See more

betydb ncsa 0.6.1

1 of the 4 container images this version deploys carry CVE-2022-44638.

Container imageDigestPackageFixed in
pecan/bety:5.4.1f825d480cd62
pixman@0.40.0-1
0.40.0-1.1~deb11u1

Open the chart page →

9,542
pecanncsaVerified publisher0.6.22 of 15See more

pecan ncsa 0.6.2

2 of the 15 container images this version deploys carry CVE-2022-44638.

Container imageDigestPackageFixed in
pecan/bety:5.4.1f825d480cd62
pixman@0.40.0-1
0.40.0-1.1~deb11u1
pecan/monitor:1.7.273b2074f3fec
pixman@0.36.0-1
0.36.0-1+deb10u1

Open the chart page →

14,154
liquidsoapnorth141.0.01 of 1See more

liquidsoap north14 1.0.0

1 of the 1 container images this version deploys carry CVE-2022-44638.

Container imageDigestPackageFixed in
ghcr.io/savonet/liquidsoap:v2.0.19e08148e1055
pixman@0.40.0-1
0.40.0-1.1~deb11u1

Open the chart page →

2,954
splashntppoolVerified publisher1.0.41 of 1See more

splash ntppool 1.0.4

1 of the 1 container images this version deploys carry CVE-2022-44638.

Container imageDigestPackageFixed in
scrapinghub/splash:3.4.1a5f89bc84606
pixman@0.34.0-2
0.34.0-2ubuntu0.1

Open the chart page →

27,633
cdn-remoteopencord0.2.42 of 3See more

cdn-remote opencord 0.2.4

2 of the 3 container images this version deploys carry CVE-2022-44638.

Container imageDigestPackageFixed in
omecproject/cdn-antmedia:1.0.0b4ae7d0d6b74
pixman@0.34.0-2
0.34.0-2ubuntu0.1
omecproject/cdn-video-repo:1.0.0d59ccb138ffb
pixman@0.33.6-1
0.33.6-1ubuntu0.1~esm1

Open the chart page →

63,223
mcord-cdn-remoteopencord0.1.61 of 2See more

mcord-cdn-remote opencord 0.1.6

1 of the 2 container images this version deploys carry CVE-2022-44638.

Container imageDigestPackageFixed in
omecproject/cdn-video-repo:remote-v3d59ccb138ffb
pixman@0.33.6-1
0.33.6-1ubuntu0.1~esm1

Open the chart page →

42,614
mcord-cdn-remote-freeopencord0.1.31 of 1See more

mcord-cdn-remote-free opencord 0.1.3

1 of the 1 container images this version deploys carry CVE-2022-44638.

Container imageDigestPackageFixed in
omecproject/cdn-video-repo:remote-v3d59ccb138ffb
pixman@0.33.6-1
0.33.6-1ubuntu0.1~esm1

Open the chart page →

29,124
openwhiskopenwhisk1.0.01 of 10See more

openwhisk openwhisk 1.0.0

1 of the 10 container images this version deploys carry CVE-2022-44638.

Container imageDigestPackageFixed in
openwhisk/kafkaprovider:2.1.063dc3d2a0904
pixman@0.36.0-1
0.36.0-1+deb10u1

Open the chart page →

36,215
issuegenopsmxVerified publisher1.0.21 of 1See more

issuegen opsmx 1.0.2

1 of the 1 container images this version deploys carry CVE-2022-44638.

Container imageDigestPackageFixed in
opsmx11/issuegen:v2.1.05c50ca123d88
pixman@0.30.2-2ubuntu1.1
0.30.2-2ubuntu1.2+esm1

Open the chart page →

26,339
external-dns-host-networkphntom0.0.121 of 1See more

external-dns-host-network phntom 0.0.12

1 of the 1 container images this version deploys carry CVE-2022-44638.

Container imageDigestPackageFixed in
phntom/external-dns-host-network:0.0.123adadbac8443
pixman@0.40.0-1
0.40.0-1.1~deb11u1

Open the chart page →

4,642
python-apppython-app-chart0.1.01 of 2See more

python-app python-app-chart 0.1.0

1 of the 2 container images this version deploys carry CVE-2022-44638.

Container imageDigestPackageFixed in
mnaggar3396/python-app:latest371d8ed84b15
pixman@0.40.0-1
0.40.0-1.1~deb11u1

Open the chart page →

3,382
python-fastapi-postgrespython-fastapi-postgres0.1.01 of 1See more

python-fastapi-postgres python-fastapi-postgres 0.1.0

1 of the 1 container images this version deploys carry CVE-2022-44638.

Container imageDigestPackageFixed in
archish27/python-fastapi-postgres:latest6610071a2101
pixman@0.40.0-1
0.40.0-1.1~deb11u1

Open the chart page →

2,983
dolibarrraphaelVerified publisher0.0.11 of 1See more

dolibarr raphael 0.0.1

1 of the 1 container images this version deploys carry CVE-2022-44638.

Container imageDigestPackageFixed in
monogramm/docker-dolibarr:13.0-alpine5afd99523984
pixman@0.40.0-r2
0.40.0-r3

Open the chart page →

3,466
javareact-java0.1.01 of 1See more

java react-java 0.1.0

1 of the 1 container images this version deploys carry CVE-2022-44638.

Container imageDigestPackageFixed in
project2team4/react:latest3ff031a08887
pixman@0.38.4-0ubuntu1
0.38.4-0ubuntu2.1

Open the chart page →

15,520
stackrox-chartredhat-cop0.0.101 of 1See more

stackrox-chart redhat-cop 0.0.10

1 of the 1 container images this version deploys carry CVE-2022-44638.

Container imageDigestPackageFixed in
quay.io/rht-labs/stack-do500:3.0.86ba82beff18e
pixman@0.38.4-1.el8
0:0.38.4-3.el8_9

Open the chart page →

29,227
laravel-workerrenoki-co1.1.01 of 1See more

laravel-worker renoki-co 1.1.0

1 of the 1 container images this version deploys carry CVE-2022-44638.

Container imageDigestPackageFixed in
quay.io/renokico/laravel-helm-demo:worker-0.6.04b188259267e
pixman@0.40.0-r2
0.40.0-r3

Open the chart page →

5,687
jsonvisiorlex0.1.01 of 1See more

jsonvisio rlex 0.1.0

1 of the 1 container images this version deploys carry CVE-2022-44638.

Container imageDigestPackageFixed in
rlex/jsonvisio:1.9.5cd50ff65118e
pixman@0.36.0-1
0.36.0-1+deb10u1

Open the chart page →

2,100
test-helm-app2saam-helm-test0.1.01 of 1See more

test-helm-app2 saam-helm-test 0.1.0

1 of the 1 container images this version deploys carry CVE-2022-44638.

Container imageDigestPackageFixed in
asdkant/fastapi-hello-world:latesta23d8bf7c885
pixman@0.36.0-1
0.36.0-1+deb10u1

Open the chart page →

2,770
weblateslamdev0.0.111 of 2See more

weblate slamdev 0.0.11

1 of the 2 container images this version deploys carry CVE-2022-44638.

Container imageDigestPackageFixed in
weblate/weblate:3.11.3-182848df56ecd
pixman@0.36.0-1
0.36.0-1+deb10u1

Open the chart page →

8,694
testing-multitoolsomeblackmagic0.1.21 of 1See more

testing-multitool someblackmagic 0.1.2

1 of the 1 container images this version deploys carry CVE-2022-44638.

Container imageDigestPackageFixed in
someblackmagic/k8s-testing-multitool:v0.1.06eca64b6b440
pixman@0.38.4-0ubuntu1
0.38.4-0ubuntu2.1

Open the chart page →

30,687
allurestakaterVerified publisher1.0.11 of 1See more

allure stakater 1.0.1

1 of the 1 container images this version deploys carry CVE-2022-44638.

Container imageDigestPackageFixed in
quay.io/eformat/jenkins-agent-graalvm:latesta3b9a07648b6
pixman@0.38.4-1.el8
0:0.38.4-3.el8_9

Open the chart page →

28,165
nordmart-reviewstakaterVerified publisher0.0.61 of 3See more

nordmart-review stakater 0.0.6

1 of the 3 container images this version deploys carry CVE-2022-44638.

Container imageDigestPackageFixed in
stakater/stakater-nordmart-review-ui:1.0.143f4926eedc74
pixman@0.36.0-1
0.36.0-1+deb10u1

Open the chart page →

11,554
nordmart-review-instancestakaterVerified publisher1.0.01 of 3See more

nordmart-review-instance stakater 1.0.0

1 of the 3 container images this version deploys carry CVE-2022-44638.

Container imageDigestPackageFixed in
stakater/stakater-nordmart-review-ui:1.0.143f4926eedc74
pixman@0.36.0-1
0.36.0-1+deb10u1

Open the chart page →

11,554
krokiteochenglim1.0.14 of 5See more

kroki teochenglim 1.0.1

4 of the 5 container images this version deploys carry CVE-2022-44638.

Container imageDigestPackageFixed in
yuzutech/kroki:0.17.0192b7b27c857
pixman@0.40.0-r3
0.40.0-r4
yuzutech/kroki-bpmn:0.16.0bd629239a64e
pixman@0.40.0-r2
0.40.0-r3
yuzutech/kroki-excalidraw:0.16.015c9eef47a62
pixman@0.40.0-r2
0.40.0-r3
yuzutech/kroki-mermaid:0.16.07acc8fe7caba
pixman@0.40.0-r2
0.40.0-r3

Open the chart page →

8,715
vehicle-dashboardtest-vehi-dash0.1.02 of 7See more

vehicle-dashboard test-vehi-dash 0.1.0

2 of the 7 container images this version deploys carry CVE-2022-44638.

Container imageDigestPackageFixed in
samajh/alprbackend:latestea742b4372ad
pixman@0.36.0-1
0.36.0-1+deb10u1
samajh/alprfrontend:latest05ef4fddbb75
pixman@0.36.0-1
0.36.0-1+deb10u1

Open the chart page →

20,270
genievhdirkVerified publisher0.1.31 of 1See more

genie vhdirk 0.1.3

1 of the 1 container images this version deploys carry CVE-2022-44638.

Container imageDigestPackageFixed in
stanfordoval/almond-server:latest1a63cdccedaf
pixman@0.36.0-1
0.36.0-1+deb10u1

Open the chart page →

3,129
vinyl-lib-chartvinyl-libVerified publisher0.1.01 of 1See more

vinyl-lib-chart vinyl-lib 0.1.0

1 of the 1 container images this version deploys carry CVE-2022-44638.

Container imageDigestPackageFixed in
kporwit/vinyl_lib_app:v0.1.1217de0302218
pixman@0.40.0-1
0.40.0-1.1~deb11u1

Open the chart page →

3,392
mediawikiwbstack0.14.01 of 1See more

mediawiki wbstack 0.14.0

1 of the 1 container images this version deploys carry CVE-2022-44638.

Container imageDigestPackageFixed in
ghcr.io/wbstack/mediawiki:1.37-7.4-20220621-fp-beta-0c3012c8a34b4
pixman@0.40.0-1
0.40.0-1.1~deb11u1

Open the chart page →

2,132
weather-chartweather-web-app0.1.01 of 1See more

weather-chart weather-web-app 0.1.0

1 of the 1 container images this version deploys carry CVE-2022-44638.

Container imageDigestPackageFixed in
zohardocker12/weather_app_flask:latestb86d60dbb68d
pixman@0.36.0-1
0.36.0-1+deb10u1

Open the chart page →

2,670

Container images carrying it

138 by charts deploying them

A fixed version is listed for 3 of the 3 affected packages.

Container imageDigestPackageFixed inUsed by
weblate/weblate:3.11.3-182848df56ecd
pixman@0.36.0-1
0.36.0-1+deb10u1
1
youssef11gaber10/deployment-ui-react:latestba6853e35c60
pixman@0.40.0-1
0.40.0-1.1~deb11u1
1
yuzutech/kroki:0.17.0192b7b27c857
pixman@0.40.0-r3
0.40.0-r4
1
yuzutech/kroki-bpmn:0.16.0bd629239a64e
pixman@0.40.0-r2
0.40.0-r3
1
yuzutech/kroki-excalidraw:0.16.015c9eef47a62
pixman@0.40.0-r2
0.40.0-r3
1
yuzutech/kroki-mermaid:0.16.07acc8fe7caba
pixman@0.40.0-r2
0.40.0-r3
1
zabbix/zabbix-web-service:ubuntu-6.0.8ee4baa872280
pixman@0.40.0-1build4
0.40.0-1ubuntu0.22.04.1
1
zohardocker12/weather_app_flask:latestb86d60dbb68d
pixman@0.36.0-1
0.36.0-1+deb10u1
1
gcr.io/ml-pipeline/metadata-writer:2.0.0-alpha.5ec3ae9f6df47
pixman@0.40.0-1
0.40.0-1.1~deb11u1
1
ghcr.io/grofers/legend:0.1d6e901ad0ebd
pixman@0.36.0-1
0.36.0-1+deb10u1
1
ghcr.io/haveagitgat/tdarr:2.00.18.23fbe4c29d14c
pixman@0.38.4-0ubuntu1
0.38.4-0ubuntu2.1
1
ghcr.io/jenkins-x/nexus:0.1.378caf5289fe73
pixman@0.38.4-1.el8
0:0.38.4-3.el8_9
1
ghcr.io/jr0dd/puppeteer:v13.3.26047599cd78e
pixman@0.38.4-0ubuntu1
0.38.4-0ubuntu2.1
1
ghcr.io/k8s-at-home/bazarr:v1.0.3fdb5501cdfb9
pixman@0.38.4-0ubuntu1
0.38.4-0ubuntu2.1
1
ghcr.io/k8s-at-home/lidarr:v1.0.0.225554ebc1f90963
pixman@0.38.4-0ubuntu1
0.38.4-0ubuntu2.1
1
ghcr.io/k8s-at-home/sonarr:v3.0.8.15070eb230e2381a
pixman@0.40.0-1build4
0.40.0-1ubuntu0.22.04.1
1
ghcr.io/k8s-at-home/xteve:v2.2.0.200292b3614670f
pixman@0.38.4-0ubuntu1
0.38.4-0ubuntu2.1
1
ghcr.io/kvaps/opennebula:v5.12.0.4-1e28e0e7de11b
pixman@0.38.4-0ubuntu1
0.38.4-0ubuntu2.1
1
ghcr.io/kvaps/opennebula-exporter:v5.12.0.401563adc95fd
pixman@0.38.4-0ubuntu1
0.38.4-0ubuntu2.1
1
ghcr.io/kvaps/opennebula-exporter:v5.12.0.4-12b92df1143b9
pixman@0.38.4-0ubuntu1
0.38.4-0ubuntu2.1
1
ghcr.io/kvaps/opennebula-flow:v5.12.0.4-1600221f0f43f
pixman@0.38.4-0ubuntu1
0.38.4-0ubuntu2.1
1
ghcr.io/kvaps/opennebula-gate:v5.12.0.4-1a85e03d8bc1d
pixman@0.38.4-0ubuntu1
0.38.4-0ubuntu2.1
1
ghcr.io/leoquote/tinyproxy_exporter:master6b4103d88dbb
pixman@0.40.0-1
0.40.0-1.1~deb11u1
1
ghcr.io/linuxserver/booksonic-air:version-v2009.1.0baa4fa9549dc
pixman@0.34.0-2
0.34.0-2ubuntu0.1
1
ghcr.io/nathanvaughn/webtrees:2.0.1969423a100fab
pixman@0.40.0-1
0.40.0-1.1~deb11u1
1
ghcr.io/oznu/homebridge:2022-07-08ff2af53897e7
pixman@0.38.4-0ubuntu1
0.38.4-0ubuntu2.1
1
ghcr.io/paperless-ngx/paperless-ngx:1.8.09bbc9a90641e
pixman@0.40.0-1
0.40.0-1.1~deb11u1
1
ghcr.io/savonet/liquidsoap:v2.0.19e08148e1055
pixman@0.40.0-1
0.40.0-1.1~deb11u1
1
ghcr.io/smarter-project/gstreamer:v1.0.25ecb16015aa8
pixman@0.38.4-0ubuntu1
0.38.4-0ubuntu2.1
1
ghcr.io/smarter-project/image-detector:v2.5.31dcca70c6446
pixman@0.38.4-0ubuntu1
0.38.4-0ubuntu2.1
1
ghcr.io/wbstack/mediawiki:1.37-7.4-20220621-fp-beta-0c3012c8a34b4
pixman@0.40.0-1
0.40.0-1.1~deb11u1
1
quay.io/eformat/jenkins-agent-graalvm:latesta3b9a07648b6
pixman@0.38.4-1.el8
0:0.38.4-3.el8_9
1
quay.io/mongodb/farm-intro-frontend:0.199ccdfd543e1
pixman@0.36.0-1
0.36.0-1+deb10u1
1
quay.io/opsmxpublic/spin-sample-pipeline:v1.0.1c6a934439421
pixman@0.33.6-1
0.33.6-1ubuntu0.1~esm1
1
quay.io/renokico/laravel-helm-demo:0.6.03207f957e80c
pixman@0.40.0-r2
0.40.0-r3
1
quay.io/renokico/laravel-helm-demo:worker-0.6.04b188259267e
pixman@0.40.0-r2
0.40.0-r3
1
quay.io/rht-labs/stack-do500:3.0.86ba82beff18e
pixman@0.38.4-1.el8
0:0.38.4-3.el8_9
1
registry.gitlab.com/open-forms/design-catalogue:latestf21f19346b29
pixman@0.36.0-1
0.36.0-1+deb10u1
1

syft 1.42.1 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.