StackRadar

CVE-2022-44638

High

Advisory

Published 3 Nov 2022In the index since 6 Sept 2026
Severity
High
worst across findings
CVSS
8.8
base score, highest
EPSS
0.015
73rd percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
134
of 17,781 indexed, latest versions
Container images
138
deployed by those charts
Fix available
3 of 3
affected packages

Red Hat Security Advisory: pixman security update

Carried by container images the latest versions of 134 of 17,781 indexed charts deploy, on 138 images.

Affected packageAffected versionsFixed inImages
pixmandeb0.30.2-2ubuntu1.1, 0.33.6-1, 0.34.0-2, 0.36.0-1+3 more0.30.2-2ubuntu1.2+esm1, 0.33.6-1ubuntu0.1~esm1, 0.34.0-2ubuntu0.1, 0.36.0-1+deb10u1+3 more118
pixmanapk0.40.0-r2, 0.40.0-r30.40.0-r3, 0.40.0-r416
pixmanrpm0.38.4-1.el8, 0.38.4-2.el80:0.38.4-3.el8_8, 0:0.38.4-3.el8_94
OSV records
ALPINE-CVE-2022-44638RHSA-2023:7531RHSA-2024:0131UBUNTU-CVE-2022-44638DLA-3179-1DSA-5276-1
Also known as
USN-5718-1, USN-5718-2

Charts affected

134 by stars
ChartLatestAffected imagesRadar Score
sample-appmongodb-helm-charts0.1.01 of 2See more

sample-app mongodb-helm-charts 0.1.0

1 of the 2 container images this version deploys carry CVE-2022-44638.

Container imageDigestPackageFixed in
quay.io/mongodb/farm-intro-frontend:0.199ccdfd543e1
pixman@0.36.0-1
0.36.0-1+deb10u1

Open the chart page →

6,438
face-recognitionmoreillonVerified publisher0.2.41 of 3See more

face-recognition moreillon 0.2.4

1 of the 3 container images this version deploys carry CVE-2022-44638.

Container imageDigestPackageFixed in
moreillon/face-recognition-fastapi:x86bacb2ddd8394
pixman@0.40.0-1
0.40.0-1.1~deb11u1

Open the chart page →

8,556
mozalert-controllermozilla0.4.01 of 1See more

mozalert-controller mozilla 0.4.0

1 of the 1 container images this version deploys carry CVE-2022-44638.

Container imageDigestPackageFixed in
afrank/mozalert-controller:latestd463c37b08d7
pixman@0.36.0-1
0.36.0-1+deb10u1

Open the chart page →

2,969
sentence-collectormozilla0.1.21 of 2See more

sentence-collector mozilla 0.1.2

1 of the 2 container images this version deploys carry CVE-2022-44638.

Container imageDigestPackageFixed in
mozilla/sentencecollector:2.0.91da6ff5c4895
pixman@0.36.0-1
0.36.0-1+deb10u1

Open the chart page →

6,684
cloudcmdmy0nVerified publisher0.0.31 of 1See more

cloudcmd my0n 0.0.3

1 of the 1 container images this version deploys carry CVE-2022-44638.

Container imageDigestPackageFixed in
coderaiser/cloudcmd:16.6.1b34a9775c7ce
pixman@0.36.0-1
0.36.0-1+deb10u1

Open the chart page →

3,128
betydbncsaVerified publisher0.6.11 of 4See more

betydb ncsa 0.6.1

1 of the 4 container images this version deploys carry CVE-2022-44638.

Container imageDigestPackageFixed in
pecan/bety:5.4.1f825d480cd62
pixman@0.40.0-1
0.40.0-1.1~deb11u1

Open the chart page →

9,542
pecanncsaVerified publisher0.6.22 of 15See more

pecan ncsa 0.6.2

2 of the 15 container images this version deploys carry CVE-2022-44638.

Container imageDigestPackageFixed in
pecan/bety:5.4.1f825d480cd62
pixman@0.40.0-1
0.40.0-1.1~deb11u1
pecan/monitor:1.7.273b2074f3fec
pixman@0.36.0-1
0.36.0-1+deb10u1

Open the chart page →

14,154
liquidsoapnorth141.0.01 of 1See more

liquidsoap north14 1.0.0

1 of the 1 container images this version deploys carry CVE-2022-44638.

Container imageDigestPackageFixed in
ghcr.io/savonet/liquidsoap:v2.0.19e08148e1055
pixman@0.40.0-1
0.40.0-1.1~deb11u1

Open the chart page →

2,954
splashntppoolVerified publisher1.0.41 of 1See more

splash ntppool 1.0.4

1 of the 1 container images this version deploys carry CVE-2022-44638.

Container imageDigestPackageFixed in
scrapinghub/splash:3.4.1a5f89bc84606
pixman@0.34.0-2
0.34.0-2ubuntu0.1

Open the chart page →

27,633
cdn-remoteopencord0.2.42 of 3See more

cdn-remote opencord 0.2.4

2 of the 3 container images this version deploys carry CVE-2022-44638.

Container imageDigestPackageFixed in
omecproject/cdn-antmedia:1.0.0b4ae7d0d6b74
pixman@0.34.0-2
0.34.0-2ubuntu0.1
omecproject/cdn-video-repo:1.0.0d59ccb138ffb
pixman@0.33.6-1
0.33.6-1ubuntu0.1~esm1

Open the chart page →

63,223
mcord-cdn-remoteopencord0.1.61 of 2See more

mcord-cdn-remote opencord 0.1.6

1 of the 2 container images this version deploys carry CVE-2022-44638.

Container imageDigestPackageFixed in
omecproject/cdn-video-repo:remote-v3d59ccb138ffb
pixman@0.33.6-1
0.33.6-1ubuntu0.1~esm1

Open the chart page →

42,614
mcord-cdn-remote-freeopencord0.1.31 of 1See more

mcord-cdn-remote-free opencord 0.1.3

1 of the 1 container images this version deploys carry CVE-2022-44638.

Container imageDigestPackageFixed in
omecproject/cdn-video-repo:remote-v3d59ccb138ffb
pixman@0.33.6-1
0.33.6-1ubuntu0.1~esm1

Open the chart page →

29,124
openwhiskopenwhisk1.0.01 of 10See more

openwhisk openwhisk 1.0.0

1 of the 10 container images this version deploys carry CVE-2022-44638.

Container imageDigestPackageFixed in
openwhisk/kafkaprovider:2.1.063dc3d2a0904
pixman@0.36.0-1
0.36.0-1+deb10u1

Open the chart page →

36,215
issuegenopsmxVerified publisher1.0.21 of 1See more

issuegen opsmx 1.0.2

1 of the 1 container images this version deploys carry CVE-2022-44638.

Container imageDigestPackageFixed in
opsmx11/issuegen:v2.1.05c50ca123d88
pixman@0.30.2-2ubuntu1.1
0.30.2-2ubuntu1.2+esm1

Open the chart page →

26,339
external-dns-host-networkphntom0.0.121 of 1See more

external-dns-host-network phntom 0.0.12

1 of the 1 container images this version deploys carry CVE-2022-44638.

Container imageDigestPackageFixed in
phntom/external-dns-host-network:0.0.123adadbac8443
pixman@0.40.0-1
0.40.0-1.1~deb11u1

Open the chart page →

4,642
python-apppython-app-chart0.1.01 of 2See more

python-app python-app-chart 0.1.0

1 of the 2 container images this version deploys carry CVE-2022-44638.

Container imageDigestPackageFixed in
mnaggar3396/python-app:latest371d8ed84b15
pixman@0.40.0-1
0.40.0-1.1~deb11u1

Open the chart page →

3,382
python-fastapi-postgrespython-fastapi-postgres0.1.01 of 1See more

python-fastapi-postgres python-fastapi-postgres 0.1.0

1 of the 1 container images this version deploys carry CVE-2022-44638.

Container imageDigestPackageFixed in
archish27/python-fastapi-postgres:latest6610071a2101
pixman@0.40.0-1
0.40.0-1.1~deb11u1

Open the chart page →

2,983
dolibarrraphaelVerified publisher0.0.11 of 1See more

dolibarr raphael 0.0.1

1 of the 1 container images this version deploys carry CVE-2022-44638.

Container imageDigestPackageFixed in
monogramm/docker-dolibarr:13.0-alpine5afd99523984
pixman@0.40.0-r2
0.40.0-r3

Open the chart page →

3,466
javareact-java0.1.01 of 1See more

java react-java 0.1.0

1 of the 1 container images this version deploys carry CVE-2022-44638.

Container imageDigestPackageFixed in
project2team4/react:latest3ff031a08887
pixman@0.38.4-0ubuntu1
0.38.4-0ubuntu2.1

Open the chart page →

15,520
stackrox-chartredhat-cop0.0.101 of 1See more

stackrox-chart redhat-cop 0.0.10

1 of the 1 container images this version deploys carry CVE-2022-44638.

Container imageDigestPackageFixed in
quay.io/rht-labs/stack-do500:3.0.86ba82beff18e
pixman@0.38.4-1.el8
0:0.38.4-3.el8_9

Open the chart page →

29,227
laravel-workerrenoki-co1.1.01 of 1See more

laravel-worker renoki-co 1.1.0

1 of the 1 container images this version deploys carry CVE-2022-44638.

Container imageDigestPackageFixed in
quay.io/renokico/laravel-helm-demo:worker-0.6.04b188259267e
pixman@0.40.0-r2
0.40.0-r3

Open the chart page →

5,687
jsonvisiorlex0.1.01 of 1See more

jsonvisio rlex 0.1.0

1 of the 1 container images this version deploys carry CVE-2022-44638.

Container imageDigestPackageFixed in
rlex/jsonvisio:1.9.5cd50ff65118e
pixman@0.36.0-1
0.36.0-1+deb10u1

Open the chart page →

2,100
test-helm-app2saam-helm-test0.1.01 of 1See more

test-helm-app2 saam-helm-test 0.1.0

1 of the 1 container images this version deploys carry CVE-2022-44638.

Container imageDigestPackageFixed in
asdkant/fastapi-hello-world:latesta23d8bf7c885
pixman@0.36.0-1
0.36.0-1+deb10u1

Open the chart page →

2,770
weblateslamdev0.0.111 of 2See more

weblate slamdev 0.0.11

1 of the 2 container images this version deploys carry CVE-2022-44638.

Container imageDigestPackageFixed in
weblate/weblate:3.11.3-182848df56ecd
pixman@0.36.0-1
0.36.0-1+deb10u1

Open the chart page →

8,694
testing-multitoolsomeblackmagic0.1.21 of 1See more

testing-multitool someblackmagic 0.1.2

1 of the 1 container images this version deploys carry CVE-2022-44638.

Container imageDigestPackageFixed in
someblackmagic/k8s-testing-multitool:v0.1.06eca64b6b440
pixman@0.38.4-0ubuntu1
0.38.4-0ubuntu2.1

Open the chart page →

30,687
allurestakaterVerified publisher1.0.11 of 1See more

allure stakater 1.0.1

1 of the 1 container images this version deploys carry CVE-2022-44638.

Container imageDigestPackageFixed in
quay.io/eformat/jenkins-agent-graalvm:latesta3b9a07648b6
pixman@0.38.4-1.el8
0:0.38.4-3.el8_9

Open the chart page →

28,165
nordmart-reviewstakaterVerified publisher0.0.61 of 3See more

nordmart-review stakater 0.0.6

1 of the 3 container images this version deploys carry CVE-2022-44638.

Container imageDigestPackageFixed in
stakater/stakater-nordmart-review-ui:1.0.143f4926eedc74
pixman@0.36.0-1
0.36.0-1+deb10u1

Open the chart page →

11,554
nordmart-review-instancestakaterVerified publisher1.0.01 of 3See more

nordmart-review-instance stakater 1.0.0

1 of the 3 container images this version deploys carry CVE-2022-44638.

Container imageDigestPackageFixed in
stakater/stakater-nordmart-review-ui:1.0.143f4926eedc74
pixman@0.36.0-1
0.36.0-1+deb10u1

Open the chart page →

11,554
krokiteochenglim1.0.14 of 5See more

kroki teochenglim 1.0.1

4 of the 5 container images this version deploys carry CVE-2022-44638.

Container imageDigestPackageFixed in
yuzutech/kroki:0.17.0192b7b27c857
pixman@0.40.0-r3
0.40.0-r4
yuzutech/kroki-bpmn:0.16.0bd629239a64e
pixman@0.40.0-r2
0.40.0-r3
yuzutech/kroki-excalidraw:0.16.015c9eef47a62
pixman@0.40.0-r2
0.40.0-r3
yuzutech/kroki-mermaid:0.16.07acc8fe7caba
pixman@0.40.0-r2
0.40.0-r3

Open the chart page →

8,715
vehicle-dashboardtest-vehi-dash0.1.02 of 7See more

vehicle-dashboard test-vehi-dash 0.1.0

2 of the 7 container images this version deploys carry CVE-2022-44638.

Container imageDigestPackageFixed in
samajh/alprbackend:latestea742b4372ad
pixman@0.36.0-1
0.36.0-1+deb10u1
samajh/alprfrontend:latest05ef4fddbb75
pixman@0.36.0-1
0.36.0-1+deb10u1

Open the chart page →

20,270
genievhdirkVerified publisher0.1.31 of 1See more

genie vhdirk 0.1.3

1 of the 1 container images this version deploys carry CVE-2022-44638.

Container imageDigestPackageFixed in
stanfordoval/almond-server:latest1a63cdccedaf
pixman@0.36.0-1
0.36.0-1+deb10u1

Open the chart page →

3,129
vinyl-lib-chartvinyl-libVerified publisher0.1.01 of 1See more

vinyl-lib-chart vinyl-lib 0.1.0

1 of the 1 container images this version deploys carry CVE-2022-44638.

Container imageDigestPackageFixed in
kporwit/vinyl_lib_app:v0.1.1217de0302218
pixman@0.40.0-1
0.40.0-1.1~deb11u1

Open the chart page →

3,392
mediawikiwbstack0.14.01 of 1See more

mediawiki wbstack 0.14.0

1 of the 1 container images this version deploys carry CVE-2022-44638.

Container imageDigestPackageFixed in
ghcr.io/wbstack/mediawiki:1.37-7.4-20220621-fp-beta-0c3012c8a34b4
pixman@0.40.0-1
0.40.0-1.1~deb11u1

Open the chart page →

2,132
weather-chartweather-web-app0.1.01 of 1See more

weather-chart weather-web-app 0.1.0

1 of the 1 container images this version deploys carry CVE-2022-44638.

Container imageDigestPackageFixed in
zohardocker12/weather_app_flask:latestb86d60dbb68d
pixman@0.36.0-1
0.36.0-1+deb10u1

Open the chart page →

2,670

Container images carrying it

138 by charts deploying them

A fixed version is listed for 3 of the 3 affected packages.

Container imageDigestPackageFixed inUsed by
hyperledger/fabric-ca-tools:latest4ce6f43ded2e
pixman@0.33.6-1
0.33.6-1ubuntu0.1~esm1
4
hyperledger/fabric-couchdb:0.4.15f6c724592abf
pixman@0.33.6-1
0.33.6-1ubuntu0.1~esm1
4
ciscolabs/rtsp-client:latesta7b60ec88285
pixman@0.38.4-0ubuntu1
0.38.4-0ubuntu2.1
3
ciscolabs/rtsp-server:latestb59fc10bb821
pixman@0.38.4-0ubuntu1
0.38.4-0ubuntu2.1
3
omecproject/cdn-video-repo:1.0.0:remote-v3d59ccb138ffb
pixman@0.33.6-1
0.33.6-1ubuntu0.1~esm1
3
amancevice/superset:0.35.212a0a9e66550
pixman@0.36.0-1
0.36.0-1+deb10u1
2
martinaif/backstage-k8s-demo-backend:test143bc40a3da0e
pixman@0.36.0-1
0.36.0-1+deb10u1
2
pecan/bety:5.4.1f825d480cd62
pixman@0.40.0-1
0.40.0-1.1~deb11u1
2
stakater/stakater-nordmart-review-ui:1.0.143f4926eedc74
pixman@0.36.0-1
0.36.0-1+deb10u1
2
weblate/weblate:4.2.2-169c160d37a3c
pixman@0.36.0-1
0.36.0-1+deb10u1
2
ghcr.io/games-on-whales/retroarch:1.0.0103fbcec2314
pixman@0.38.4-0ubuntu1
0.38.4-0ubuntu2.1
2
ghcr.io/games-on-whales/steam:1.0.09b6105be7ad0
pixman@0.38.4-0ubuntu1
0.38.4-0ubuntu2.1
2
afrank/mozalert-controller:latestd463c37b08d7
pixman@0.36.0-1
0.36.0-1+deb10u1
1
airsonicadvanced/airsonic-advanced:latestf7cbafac2806
pixman@0.38.4-0ubuntu1
0.38.4-0ubuntu2.1
1
anonaddy/anonaddy:0.12.3957a95565166
pixman@0.40.0-r3
0.40.0-r4
1
apache/superset:9cdaa280429ec297db16d56c94fd77b5d2aff107975ab033580d
pixman@0.40.0-1
0.40.0-1.1~deb11u1
1
archish27/python-fastapi-postgres:latest6610071a2101
pixman@0.40.0-1
0.40.0-1.1~deb11u1
1
arturisimo/server-urjc:v1.0d8dc4430531e
pixman@0.36.0-1
0.36.0-1+deb10u1
1
asdkant/fastapi-hello-world:latesta23d8bf7c885
pixman@0.36.0-1
0.36.0-1+deb10u1
1
azhar008/flaskapplication:latesta1e827b0adea
pixman@0.40.0-1
0.40.0-1.1~deb11u1
1
bastilimbach/docker-magicmirror:v2.15.041b0835ab31e
pixman@0.36.0-1
0.36.0-1+deb10u1
1
bicarus/mx-api-service:1.0.2-hf1dab88659ae3b
pixman@0.36.0-1
0.36.0-1+deb10u1
1
browserless/chrome:1.48.0-chrome-stablec81ae5585b47
pixman@0.38.4-0ubuntu1
0.38.4-0ubuntu2.1
1
camptocamp/bucket-cloner:latestacfafc308d88
pixman@0.36.0-1
0.36.0-1+deb10u1
1
camptocamp/ekorre:0.1.035c91d5fda04
pixman@0.36.0-1
0.36.0-1+deb10u1
1
cdignam/kodiak:v0.54.05a6a55b39cee
pixman@0.36.0-1
0.36.0-1+deb10u1
1
ceticasbl/pg-ldap-sync:latest6c0aa7567145
pixman@0.36.0-1
0.36.0-1+deb10u1
1
cheyang/distributed-tf:1.6.046cc34755493
pixman@0.33.6-1
0.33.6-1ubuntu0.1~esm1
1
coderaiser/cloudcmd:16.6.1b34a9775c7ce
pixman@0.36.0-1
0.36.0-1+deb10u1
1
crazymax/rrdcached:1.7.2-r4042536a06596
pixman@0.40.0-r2
0.40.0-r3
1
danuk/telegram-sender:0.0.1026560388070
pixman@0.40.0-1
0.40.0-1.1~deb11u1
1
daskdev/dask-notebook:1.1.0052630f5ca04
pixman@0.34.0-2
0.34.0-2ubuntu0.1
1
deconzcommunity/deconz:2.12.066541bbb78952
pixman@0.36.0-1
0.36.0-1+deb10u1
1
douz/helpdesk:latest4384103d0219
pixman@0.40.0-1
0.40.0-1.1~deb11u1
1
duck1123/me.untethr.nostr-relay:0.2.1119fc5d4cbfb
pixman@0.40.0-1
0.40.0-1.1~deb11u1
1
eclipseaerios/self-service-password:5.2.32f93bfa4cf0d
pixman@0.40.0-r3
0.40.0-r4
1
elastictranscoder/transcoder:627e21dcb4a0327029e6
pixman@0.34.0-2
0.34.0-2ubuntu0.1
1
elastictranscoder/transcoder-handler:627e21dc5b75d19e2733
pixman@0.34.0-2
0.34.0-2ubuntu0.1
1
erlangsolutions/wombatoam:4.1.284680c990147a
pixman@0.40.0-1
0.40.0-1.1~deb11u1
1
fanzynoodle/smeejas:0.0.15f9916c1a287
pixman@0.40.0-1
0.40.0-1.1~deb11u1
1
fluidtrendslab/platform:latestbf49de7a4100
pixman@0.40.0-r3
0.40.0-r4
1
gollumorg/gollum:latest7cd5305a3cf7
pixman@0.36.0-1
0.36.0-1+deb10u1
1
guacamole/guacd:1.1.02288530a4d1c
pixman@0.36.0-1
0.36.0-1+deb10u1
1
guacamole/guacd:1.3.049d43948140f
pixman@0.36.0-1
0.36.0-1+deb10u1
1
ha33ona/python:test6affdfc644d0
pixman@0.40.0-1
0.40.0-1.1~deb11u1
1
haveagitgat/tdarr:2.00.181256348872ce
pixman@0.38.4-0ubuntu1
0.38.4-0ubuntu2.1
1
hazelcast/management-center:5.3.2f9d34300d330
pixman@0.38.4-2.el8
0:0.38.4-3.el8_8
1
huginn/huginn-single-process:4d17829cf6b15b004ad3f4be196303dca4944810c794eddc7b47
pixman@0.34.0-2
0.34.0-2ubuntu0.1
1
hyperledger/fabric-couchdb:0.4.10c65891b6c237
pixman@0.33.6-1
0.33.6-1ubuntu0.1~esm1
1
ianw/quickchart:v1.7.1dc49dd460c37
pixman@0.40.0-r3
0.40.0-r4
1

syft 1.42.1 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.