StackRadar

CVE-2025-64505

Medium

Advisory

Published 25 Nov 2025In the index since 5 Sept 2026
Severity
Medium
worst across findings
CVSS
6.1
base score, highest
EPSS
0.002
9th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
653
of 17,787 indexed, latest versions
Container images
589
deployed by those charts
Fix available
3 of 3
affected packages

The matching OSV records carry no description.

Carried by container images the latest versions of 653 of 17,787 indexed charts deploy, on 589 images.

Affected packageAffected versionsFixed inImages
libpng1.6deb1.6.34-1ubuntu0.18.04.1, 1.6.34-1ubuntu0.18.04.2, 1.6.37-2, 1.6.37-3build5+4 more1.6.34-1ubuntu0.18.04.2+esm1, 1.6.37-2ubuntu0.1~esm1, 1.6.37-3ubuntu0.1, 1.6.39-2+deb12u1+3 more464
libpngapk1.6.43-r0, 1.6.44-r0, 1.6.45-r0, 1.6.47-r01.6.51-r0, 1.6.53-r0105
libpngdeb1.2.50-1ubuntu2, 1.2.50-1ubuntu2.14.04.2, 1.2.50-1ubuntu2.14.04.3, 1.2.54-1ubuntu1+1 more1.2.50-1ubuntu2.14.04.3+esm1, 1.2.54-1ubuntu1.1+esm220
OSV records
ALPINE-CVE-2025-64505DEBIAN-CVE-2025-64505UBUNTU-CVE-2025-64505
Also known as
USN-7924-1, USN-8081-1

Charts affected

653 by stars
ChartLatestAffected imagesRadar Score
itm-servicesintelVerified publisher2.0.01 of 8See more

itm-services intel 2.0.0

1 of the 8 container images this version deploys carry CVE-2025-64505.

Container imageDigestPackageFixed in
intel/dlstreamer-pipeline-server:2022.1.1-ubuntu20aa8f5483a2ef
libpng1.6@1.6.37-2
1.6.37-2ubuntu0.1~esm1

Open the chart page →

18,137
multimodal-data-visualizationintelVerified publisher3.0.01 of 2See more

multimodal-data-visualization intel 3.0.0

1 of the 2 container images this version deploys carry CVE-2025-64505.

Container imageDigestPackageFixed in
intel/multimodal-data-visualization-streaming:3.01a89327e499b
libpng1.6@1.6.37-2
1.6.37-2ubuntu0.1~esm1

Open the chart page →

11,123
intelowlintelowl-helm6.6.1-01-06-20262 of 5See more

intelowl intelowl-helm 6.6.1-01-06-2026

2 of the 5 container images this version deploys carry CVE-2025-64505.

Container imageDigestPackageFixed in
intelowlproject/intelowl:v6.6.10b22e547ea6b
libpng1.6@1.6.39-2
1.6.39-2+deb12u1
intelowlproject/intelowl_nginx:v6.6.12f01e79b8064
libpng@1.6.47-r0
1.6.51-r0

Open the chart page →

16,558
daveit-at-mOfficialVerified publisher0.2.151 of 11See more

dave it-at-m 0.2.15

1 of the 11 container images this version deploys carry CVE-2025-64505.

Container imageDigestPackageFixed in
bitnamilegacy/elasticsearch:9.1.2-debian-12-r000176a47afa0
libpng1.6@1.6.39-2
1.6.39-2+deb12u1

Open the chart page →

15,245
opencloudjacobcolvinVerified publisher0.2.38 of 13See more

opencloud jacobcolvin 0.2.3

8 of the 13 container images this version deploys carry CVE-2025-64505.

Container imageDigestPackageFixed in
apache/tika:2.9.2.1-fullae0b86d3c4d0
libpng1.6@1.6.43-5build1
1.6.43-5ubuntu0.1
opencloudeu/opencloud-rolling:2.1.0f9634bb04905
libpng@1.6.44-r0
1.6.53-r0
opencloudeu/web-extensions:unzip-1.0.01691ad6612a3
libpng1.6@1.6.39-2
1.6.39-2+deb12u1
opencloudeu/web-extensions:draw-io-1.0.027cb9b952f0d
libpng1.6@1.6.39-2
1.6.39-2+deb12u1
opencloudeu/web-extensions:external-sites-1.0.05b176baa3694
libpng1.6@1.6.39-2
1.6.39-2+deb12u1
opencloudeu/web-extensions:importer-1.0.06e8b2df6c5a4
libpng1.6@1.6.39-2
1.6.39-2+deb12u1
opencloudeu/web-extensions:progress-bars-1.0.082f888a34440
libpng1.6@1.6.39-2
1.6.39-2+deb12u1
opencloudeu/web-extensions:json-viewer-1.0.0e0ac35a9576e
libpng1.6@1.6.39-2
1.6.39-2+deb12u1

Open the chart page →

45,392
deconzjanip81-helm-chartsVerified publisher0.1.11 of 1See more

deconz janip81-helm-charts 0.1.1

1 of the 1 container images this version deploys carry CVE-2025-64505.

Container imageDigestPackageFixed in
deconzcommunity/deconz:2.29.2062de2362641
libpng1.6@1.6.39-2
1.6.39-2+deb12u1

Open the chart page →

10,816
esphomejeffrescVerified publisher0.2.21 of 1See more

esphome jeffresc 0.2.2

1 of the 1 container images this version deploys carry CVE-2025-64505.

Container imageDigestPackageFixed in
ghcr.io/esphome/esphome:2026.4.078a82d810709
libpng1.6@1.6.39-2
1.6.39-2+deb12u1

Open the chart page →

5,066
jellyfinjellyfin-helm10.9.101 of 1See more

jellyfin jellyfin-helm 10.9.10

1 of the 1 container images this version deploys carry CVE-2025-64505.

Container imageDigestPackageFixed in
jellyfin/jellyfin:10.9.1079fb3d73a3e9
libpng1.6@1.6.39-2
1.6.39-2+deb12u1

Open the chart page →

4,097
discord-experiencebotjfwenischVerified publisher0.7.41 of 1See more

discord-experiencebot jfwenisch 0.7.4

1 of the 1 container images this version deploys carry CVE-2025-64505.

Container imageDigestPackageFixed in
ghcr.io/jfwenisch/discord-experiencebot:latestb52ff07f9f0c
libpng1.6@1.6.34-1ubuntu0.18.04.2
1.6.34-1ubuntu0.18.04.2+esm1

Open the chart page →

7,842
steamcmd-managerjfwenischVerified publisher0.4.51 of 1See more

steamcmd-manager jfwenisch 0.4.5

1 of the 1 container images this version deploys carry CVE-2025-64505.

Container imageDigestPackageFixed in
ghcr.io/jfwenisch/steamcmd-manager:v0.4.5dab685e668d9
libpng1.6@1.6.43-5build1
1.6.43-5ubuntu0.1

Open the chart page →

6,648
webtoolsjfwenischVerified publisher0.1.41 of 1See more

webtools jfwenisch 0.1.4

1 of the 1 container images this version deploys carry CVE-2025-64505.

Container imageDigestPackageFixed in
ghcr.io/jfwenisch/webtools:v0.1.44569cae83c70
libpng1.6@1.6.43-5build1
1.6.43-5ubuntu0.1

Open the chart page →

6,629
image-storage-servicejtektVerified publisher0.4.32 of 4See more

image-storage-service jtekt 0.4.3

2 of the 4 container images this version deploys carry CVE-2025-64505.

Container imageDigestPackageFixed in
public.ecr.aws/jtekt-corporation/image-storage-service:v1.16.17b1493760c716
libpng1.6@1.6.39-2
1.6.39-2+deb12u1
public.ecr.aws/jtekt-corporation/image-storage-service-gui:v1.9.434823c8abe00
libpng1.6@1.6.39-2
1.6.39-2+deb12u1

Open the chart page →

22,665
shinsei-managerjtektVerified publisher0.2.05 of 8See more

shinsei-manager jtekt 0.2.0

5 of the 8 container images this version deploys carry CVE-2025-64505.

Container imageDigestPackageFixed in
moreillon/api-proxy:latestd7d4a5463525
libpng1.6@1.6.39-2
1.6.39-2+deb12u1
moreillon/user-manager:v5.0.2e1c9bfab5c16
libpng1.6@1.6.39-2
1.6.39-2+deb12u1
moreillon/user-manager-front:v5.0.3b067dbbbb6af
libpng1.6@1.6.39-2
1.6.39-2+deb12u1
public.ecr.aws/jtekt-corporation/shinsei-manager:v2.8.15cd62142d6ed
libpng1.6@1.6.39-2
1.6.39-2+deb12u1
public.ecr.aws/jtekt-corporation/shinsei-manager-front:v1.5.5f8fb4eea4071
libpng1.6@1.6.39-2
1.6.39-2+deb12u1

Open the chart page →

59,560
time-series-storagejtektVerified publisher0.1.101 of 2See more

time-series-storage jtekt 0.1.10

1 of the 2 container images this version deploys carry CVE-2025-64505.

Container imageDigestPackageFixed in
public.ecr.aws/jtekt-corporation/time-series-storage-service:v1.5.1046ef5c9ed50
libpng1.6@1.6.39-2
1.6.39-2+deb12u1

Open the chart page →

16,626
jellyfink8s-chartsVerified publisher0.2.41 of 1See more

jellyfin k8s-charts 0.2.4

1 of the 1 container images this version deploys carry CVE-2025-64505.

Container imageDigestPackageFixed in
jellyfin/jellyfin:10.10.696b09723b22f
libpng1.6@1.6.39-2
1.6.39-2+deb12u1

Open the chart page →

4,116
valheim-serverk8s-chartsVerified publisher1.3.01 of 1See more

valheim-server k8s-charts 1.3.0

1 of the 1 container images this version deploys carry CVE-2025-64505.

Container imageDigestPackageFixed in
mbround18/valheim:3.1.070bd4da591cd
libpng1.6@1.6.37-3build5
1.6.37-3ubuntu0.1

Open the chart page →

6,136
k8s-dev-podk8s-dev-pod0.3.11 of 1See more

k8s-dev-pod k8s-dev-pod 0.3.1

1 of the 1 container images this version deploys carry CVE-2025-64505.

Container imageDigestPackageFixed in
ghcr.io/bryopsida/k8s-dev-pod:main82d0b161161d
libpng1.6@1.6.43-5build1
1.6.43-5ubuntu0.1

Open the chart page →

8,879
beetsk8s-home-lab-repo3.1.11 of 1See more

beets k8s-home-lab-repo 3.1.1

1 of the 1 container images this version deploys carry CVE-2025-64505.

Container imageDigestPackageFixed in
ghcr.io/home-operations/beets:2.3.1cc4975f1a0be
libpng@1.6.47-r0
1.6.51-r0

Open the chart page →

2,732
unifik8sonlabVerified publisher0.3.71 of 1See more

unifi k8sonlab 0.3.7

1 of the 1 container images this version deploys carry CVE-2025-64505.

Container imageDigestPackageFixed in
jacobalberty/unifi:v10.0.162896c0ab82d33
libpng1.6@1.6.37-2
1.6.37-2ubuntu0.1~esm1

Open the chart page →

7,333
kadeck-teamskadeck1.1.211 of 1See more

kadeck-teams kadeck 1.1.21

1 of the 1 container images this version deploys carry CVE-2025-64505.

Container imageDigestPackageFixed in
xeotek/kadeck:6.3.439a3b37a17c5
libpng1.6@1.6.37-3build5
1.6.37-3ubuntu0.1

Open the chart page →

3,615
kadeck-webkadeck0.6.01 of 1See more

kadeck-web kadeck 0.6.0

1 of the 1 container images this version deploys carry CVE-2025-64505.

Container imageDigestPackageFixed in
xeotek/kadeck:4.2.94c6b04d9ce55
libpng1.6@1.6.37-2
1.6.37-2ubuntu0.1~esm1

Open the chart page →

7,292
kc-chartkc-chart1.0.01 of 3See more

kc-chart kc-chart 1.0.0

1 of the 3 container images this version deploys carry CVE-2025-64505.

Container imageDigestPackageFixed in
jhoncytech/bookworm-apache-wordpress:latest18c3ca1f411e
libpng1.6@1.6.39-2
1.6.39-2+deb12u1

Open the chart page →

7,599
allurekfirfer0.1.81 of 2See more

allure kfirfer 0.1.8

1 of the 2 container images this version deploys carry CVE-2025-64505.

Container imageDigestPackageFixed in
frankescobar/allure-docker-service:2.21.08a4d7e9308de
libpng1.6@1.6.34-1ubuntu0.18.04.2
1.6.34-1ubuntu0.18.04.2+esm1

Open the chart page →

12,541
kubeflowkromanow94-kubeflow0.5.12 of 30See more

kubeflow kromanow94-kubeflow 0.5.1

2 of the 30 container images this version deploys carry CVE-2025-64505.

Container imageDigestPackageFixed in
library/python:3.7eedf63967cdb
libpng1.6@1.6.39-2
1.6.39-2+deb12u1
gcr.io/ml-pipeline/metadata-writer:2.3.09bcfd2abc361
libpng1.6@1.6.39-2
1.6.39-2+deb12u1

Open the chart page →

68,994
kron-aapm-agentkron-aapm-agent1.1.01 of 1See more

kron-aapm-agent kron-aapm-agent 1.1.0

1 of the 1 container images this version deploys carry CVE-2025-64505.

Container imageDigestPackageFixed in
krontechnology/aapm-agent:1.1.07feef7d2ab42
libpng1.6@1.6.37-2
1.6.37-2ubuntu0.1~esm1

Open the chart page →

8,922
chaos-meshkubeblocksVerified publisher2.7.21 of 4See more

chaos-mesh kubeblocks 2.7.2

1 of the 4 container images this version deploys carry CVE-2025-64505.

Container imageDigestPackageFixed in
ghcr.io/chaos-mesh/chaos-daemon:v2.7.29608d9b51452
libpng1.6@1.6.39-2
1.6.39-2+deb12u1

Open the chart page →

13,517
flaresolverrkubernetes-homelab-helm-chartsVerified publisher0.1.21 of 1See more

flaresolverr kubernetes-homelab-helm-charts 0.1.2

1 of the 1 container images this version deploys carry CVE-2025-64505.

Container imageDigestPackageFixed in
ghcr.io/flaresolverr/flaresolverr:v3.4.67962759d99d7
libpng1.6@1.6.39-2
1.6.39-2+deb12u1

Open the chart page →

33,591
kube-httpcachekubernetes-replicator0.9.11 of 1See more

kube-httpcache kubernetes-replicator 0.9.1

1 of the 1 container images this version deploys carry CVE-2025-64505.

Container imageDigestPackageFixed in
quay.io/mittwald/kube-httpcache:stable2169032c5840
libpng1.6@1.6.39-2
1.6.39-2+deb12u1

Open the chart page →

4,118
kubestellar-uikubestellaruiVerified publisher0.1.11 of 4See more

kubestellar-ui kubestellarui 0.1.1

1 of the 4 container images this version deploys carry CVE-2025-64505.

Container imageDigestPackageFixed in
mavrick1/kubestellar-f:latest56bd8eaa53a4
libpng@1.6.47-r0
1.6.53-r0

Open the chart page →

4,763
excalidrawkubitodevVerified publisher1.0.31 of 1See more

excalidraw kubitodev 1.0.3

1 of the 1 container images this version deploys carry CVE-2025-64505.

Container imageDigestPackageFixed in
excalidraw/excalidraw:latestf7ee194addd6
libpng@1.6.47-r0
1.6.53-r0

Open the chart page →

840
penpotkubitodevVerified publisher1.2.12 of 5See more

penpot kubitodev 1.2.1

2 of the 5 container images this version deploys carry CVE-2025-64505.

Container imageDigestPackageFixed in
penpotapp/backend:2.2.147853d9bb9dd
libpng1.6@1.6.37-3build5
1.6.37-3ubuntu0.1
penpotapp/exporter:2.2.15c835ffd87ab
libpng1.6@1.6.37-3build5
1.6.37-3ubuntu0.1

Open the chart page →

17,002
kusionkusionstackVerified publisher0.14.11 of 3See more

kusion kusionstack 0.14.1

1 of the 3 container images this version deploys carry CVE-2025-64505.

Container imageDigestPackageFixed in
kusionstack/kusion:v0.14.0126c8f0b0976
libpng1.6@1.6.37-3build5
1.6.37-3ubuntu0.1

Open the chart page →

6,879
fstyr-ddp-keycloak-application-platform-configkvalitetsitVerified publisher0.1.131 of 1See more

fstyr-ddp-keycloak-application-platform-config kvalitetsit 0.1.13

1 of the 1 container images this version deploys carry CVE-2025-64505.

Container imageDigestPackageFixed in
adorsys/keycloak-config-cli:6.3.0-26.1.085be7a45a94c
libpng1.6@1.6.43-5build1
1.6.43-5ubuntu0.1

Open the chart page →

3,143
keycloak-application-platform-configkvalitetsitVerified publisher0.0.291 of 1See more

keycloak-application-platform-config kvalitetsit 0.0.29

1 of the 1 container images this version deploys carry CVE-2025-64505.

Container imageDigestPackageFixed in
adorsys/keycloak-config-cli:6.1.6-25.0.1eb49a2dcbbb8
libpng1.6@1.6.43-5build1
1.6.43-5ubuntu0.1

Open the chart page →

3,373
stakitkvalitetsitVerified publisher0.3.111 of 3See more

stakit kvalitetsit 0.3.11

1 of the 3 container images this version deploys carry CVE-2025-64505.

Container imageDigestPackageFixed in
kvalitetsit/stakit-backend:0.3.0f0af0ba589af
libpng1.6@1.6.37-3build5
1.6.37-3ubuntu0.1

Open the chart page →

7,842
pageslatif-pages1.0.02 of 3See more

pages latif-pages 1.0.0

2 of the 3 container images this version deploys carry CVE-2025-64505.

Container imageDigestPackageFixed in
dellcloud/pages:monitor6ba7b22caacd
libpng1.6@1.6.37-2
1.6.37-2ubuntu0.1~esm1
flyway/flyway:6.4.422d97ceb0c47
libpng1.6@1.6.34-1ubuntu0.18.04.2
1.6.34-1ubuntu0.18.04.2+esm1

Open the chart page →

20,233
pageslavanya-pages1.0.02 of 3See more

pages lavanya-pages 1.0.0

2 of the 3 container images this version deploys carry CVE-2025-64505.

Container imageDigestPackageFixed in
dellcloud/pages:monitor6ba7b22caacd
libpng1.6@1.6.37-2
1.6.37-2ubuntu0.1~esm1
flyway/flyway:6.4.422d97ceb0c47
libpng1.6@1.6.34-1ubuntu0.18.04.2
1.6.34-1ubuntu0.18.04.2+esm1

Open the chart page →

20,233
excalidrawlinkding0.2.31 of 1See more

excalidraw linkding 0.2.3

1 of the 1 container images this version deploys carry CVE-2025-64505.

Container imageDigestPackageFixed in
excalidraw/excalidraw:latestf7ee194addd6
libpng@1.6.47-r0
1.6.53-r0

Open the chart page →

840
linkdinglinkding0.2.31 of 1See more

linkding linkding 0.2.3

1 of the 1 container images this version deploys carry CVE-2025-64505.

Container imageDigestPackageFixed in
sissbruecker/linkding:1.41.0-plusa222fb777e1f
libpng1.6@1.6.39-2
1.6.39-2+deb12u1

Open the chart page →

37,518
ingresslivekit-server1.2.21 of 1See more

ingress livekit-server 1.2.2

1 of the 1 container images this version deploys carry CVE-2025-64505.

Container imageDigestPackageFixed in
livekit/ingress:v1.2.21ab01641b366
libpng1.6@1.6.37-3build5
1.6.37-3ubuntu0.1

Open the chart page →

10,773
pagesliviu884422-pages1.0.02 of 3See more

pages liviu884422-pages 1.0.0

2 of the 3 container images this version deploys carry CVE-2025-64505.

Container imageDigestPackageFixed in
dellcloud/pages:monitor6ba7b22caacd
libpng1.6@1.6.37-2
1.6.37-2ubuntu0.1~esm1
flyway/flyway:6.4.422d97ceb0c47
libpng1.6@1.6.34-1ubuntu0.18.04.2
1.6.34-1ubuntu0.18.04.2+esm1

Open the chart page →

20,233
rocketmq-exporterlogic3579Verified publisher0.0.21 of 1See more

rocketmq-exporter logic3579 0.0.2

1 of the 1 container images this version deploys carry CVE-2025-64505.

Container imageDigestPackageFixed in
apache/rocketmq-exporter:0.0.2c8fb51195444
libpng1.6@1.6.37-3build5
1.6.37-3ubuntu0.1

Open the chart page →

6,674
apica-ascentlogiqai2.0.41 of 19See more

apica-ascent logiqai 2.0.4

1 of the 19 container images this version deploys carry CVE-2025-64505.

Container imageDigestPackageFixed in
logiqai/flash:v3.10.265b996bc7bdc
libpng1.6@1.6.39-2
1.6.39-2+deb12u1

Open the chart page →

23,255
elastictranscoderluiscajl0.46.04 of 4See more

elastictranscoder luiscajl 0.46.0

4 of the 4 container images this version deploys carry CVE-2025-64505.

Container imageDigestPackageFixed in
elastictranscoder/media:627e21dc963ab3858c6b
libpng1.6@1.6.34-1ubuntu0.18.04.2
1.6.34-1ubuntu0.18.04.2+esm1
elastictranscoder/media-storage:f6d861a026208b8c2359
libpng1.6@1.6.34-1ubuntu0.18.04.2
1.6.34-1ubuntu0.18.04.2+esm1
elastictranscoder/transcoder:627e21dcb4a0327029e6
libpng1.6@1.6.34-1ubuntu0.18.04.2
1.6.34-1ubuntu0.18.04.2+esm1
elastictranscoder/transcoder-handler:627e21dc5b75d19e2733
libpng1.6@1.6.34-1ubuntu0.18.04.2
1.6.34-1ubuntu0.18.04.2+esm1

Open the chart page →

58,225
hyperglassm0nsterrr-hyperglassVerified publisher4.2.11 of 2See more

hyperglass m0nsterrr-hyperglass 4.2.1

1 of the 2 container images this version deploys carry CVE-2025-64505.

Container imageDigestPackageFixed in
ghcr.io/m0nsterrr/hyperglass:v2.0.4f7b5d20c5e42
libpng@1.6.43-r0
1.6.53-r0

Open the chart page →

4,659
magistralamagistrala-devopsVerified publisher0.16.21 of 42See more

magistrala magistrala-devops 0.16.2

1 of the 42 container images this version deploys carry CVE-2025-64505.

Container imageDigestPackageFixed in
jaegertracing/jaeger-cassandra-schema:1.53.0d48d6dab2c65
libpng1.6@1.6.37-3build5
1.6.37-3ubuntu0.1

Open the chart page →

24,488
eoloplantmca-eoloplaner0.1.01 of 7See more

eoloplant mca-eoloplaner 0.1.0

1 of the 7 container images this version deploys carry CVE-2025-64505.

Container imageDigestPackageFixed in
hugohg34/toposervice:0.0.2812a03b3f274
libpng1.6@1.6.37-2
1.6.37-2ubuntu0.1~esm1

Open the chart page →

29,712
backstagemcwarmanVerified publisher0.10.101 of 2See more

backstage mcwarman 0.10.10

1 of the 2 container images this version deploys carry CVE-2025-64505.

Container imageDigestPackageFixed in
ghcr.io/mcwarman/backstage-sample-app/app:mainfae3c1f04311
libpng1.6@1.6.48-1
1.6.48-1+deb13u1

Open the chart page →

9,707
cameramedia-streaming-meshVerified publisher0.2.52 of 3See more

camera media-streaming-mesh 0.2.5

2 of the 3 container images this version deploys carry CVE-2025-64505.

Container imageDigestPackageFixed in
ciscolabs/rtsp-client:latesta7b60ec88285
libpng1.6@1.6.37-2
1.6.37-2ubuntu0.1~esm1
ciscolabs/rtsp-server:latestb59fc10bb821
libpng1.6@1.6.37-2
1.6.37-2ubuntu0.1~esm1

Open the chart page →

18,712
msm-rtspmedia-streaming-meshVerified publisher0.0.22 of 2See more

msm-rtsp media-streaming-mesh 0.0.2

2 of the 2 container images this version deploys carry CVE-2025-64505.

Container imageDigestPackageFixed in
ciscolabs/rtsp-client:latesta7b60ec88285
libpng1.6@1.6.37-2
1.6.37-2ubuntu0.1~esm1
ciscolabs/rtsp-server:latestb59fc10bb821
libpng1.6@1.6.37-2
1.6.37-2ubuntu0.1~esm1

Open the chart page →

18,712

Container images carrying it

589 by charts deploying them

A fixed version is listed for 3 of the 3 affected packages.

Container imageDigestPackageFixed inUsed by
ghcr.io/cosmo-workspace/dev-code-server:v0.0.316fda01ae58a
libpng1.6@1.6.39-2
1.6.39-2+deb12u1
1
ghcr.io/dask/dask-notebook:2024.1.0f53bde3acd4f
libpng1.6@1.6.37-3build5
1.6.37-3ubuntu0.1
1
ghcr.io/dfir-iris/iriswebapp_app:v2.4.26e59ebde55709
libpng1.6@1.6.48-1
1.6.48-1+deb13u1
1
ghcr.io/drewburr-labs/mum-discord-bot:3.1.26e82914e1051
libpng1.6@1.6.39-2
1.6.39-2+deb12u1
1
ghcr.io/element-hq/hydrogen-web:v0.5.12d15d14b201a
libpng@1.6.44-r0
1.6.53-r0
1
ghcr.io/ellite/wallos:2.46.09ce55520e7bd
libpng@1.6.44-r0
1.6.53-r0
1
ghcr.io/erlkoenig91/prompt-db-frontend:1.0.7121dc29eb14d
libpng@1.6.47-r0
1.6.53-r0
1
ghcr.io/esphome/esphome:2026.4.078a82d810709
libpng1.6@1.6.39-2
1.6.39-2+deb12u1
1
ghcr.io/flaresolverr/flaresolverr:v3.4.0ab535d1fef5d
libpng1.6@1.6.39-2
1.6.39-2+deb12u1
1
ghcr.io/graphprotocol/availability-oracle:sha-28312fd472a25038957
libpng1.6@1.6.39-2
1.6.39-2+deb12u1
1
ghcr.io/haveagitgat/tdarr:2.00.18.23fbe4c29d14c
libpng1.6@1.6.37-2
1.6.37-2ubuntu0.1~esm1
1
ghcr.io/home-assistant/home-assistant:2025.3.026c51e44d932
libpng@1.6.44-r0
1.6.53-r0
1
ghcr.io/home-assistant/home-assistant:2025.12.59a5a3eb4a213
libpng@1.6.47-r0
1.6.51-r0
1
ghcr.io/home-operations/beets:2.3.1cc4975f1a0be
libpng@1.6.47-r0
1.6.51-r0
1
ghcr.io/huscker/townsquare-frontend:2.15.2dc6384d10cc8
libpng@1.6.47-r0
1.6.53-r0
1
ghcr.io/iisas/domino-frontend:k8s8e53861be292
libpng1.6@1.6.39-2
1.6.39-2+deb12u1
1
ghcr.io/immich-app/immich-server:v2.3.1f8d06a32b1b2
libpng1.6@1.6.48-1
1.6.48-1+deb13u1
1
ghcr.io/jaydee94/kubeseal-webgui/ui:4.5.34447636e8102
libpng@1.6.47-r0
1.6.53-r0
1
ghcr.io/jfwenisch/discord-experiencebot:latestb52ff07f9f0c
libpng1.6@1.6.34-1ubuntu0.18.04.2
1.6.34-1ubuntu0.18.04.2+esm1
1
ghcr.io/jfwenisch/steamcmd-manager:v0.4.5dab685e668d9
libpng1.6@1.6.43-5build1
1.6.43-5ubuntu0.1
1
ghcr.io/jfwenisch/webtools:v0.1.44569cae83c70
libpng1.6@1.6.43-5build1
1.6.43-5ubuntu0.1
1
ghcr.io/jmberesford/retrom-service:retrom-v0.7.144d763d58f11d
libpng1.6@1.6.39-2
1.6.39-2+deb12u1
1
ghcr.io/jr0dd/puppeteer:v13.3.26047599cd78e
libpng1.6@1.6.37-2
1.6.37-2ubuntu0.1~esm1
1
ghcr.io/k8s-at-home/bazarr:v1.0.3fdb5501cdfb9
libpng1.6@1.6.37-2
1.6.37-2ubuntu0.1~esm1
1
ghcr.io/k8s-at-home/lidarr:v1.0.0.225554ebc1f90963
libpng1.6@1.6.37-2
1.6.37-2ubuntu0.1~esm1
1
ghcr.io/k8s-at-home/nzbhydra2:v3.14.2ef3670f7e0a8
libpng1.6@1.6.37-2
1.6.37-2ubuntu0.1~esm1
1
ghcr.io/k8s-at-home/sonarr:v3.0.8.15070eb230e2381a
libpng1.6@1.6.37-3build5
1.6.37-3ubuntu0.1
1
ghcr.io/k8s-at-home/xteve:v2.2.0.200292b3614670f
libpng1.6@1.6.37-2
1.6.37-2ubuntu0.1~esm1
1
ghcr.io/karakeep-app/karakeep:0.27.1abd7d6b11b1b
libpng@1.6.47-r0
1.6.51-r0
1
ghcr.io/karakeep-app/karakeep:0.26.0f575a34ed3f8
libpng@1.6.47-r0
1.6.51-r0
1
ghcr.io/kubeflow/spark-operator/controller:2.2.1865ff4da5686
libpng1.6@1.6.37-2
1.6.37-2ubuntu0.1~esm1
1
ghcr.io/kvaps/kubefarm-ltsp:v0.13.424efef013a53
libpng1.6@1.6.37-2
1.6.37-2ubuntu0.1~esm1
1
ghcr.io/kvaps/opennebula:v5.12.0.4-1e28e0e7de11b
libpng1.6@1.6.37-2
1.6.37-2ubuntu0.1~esm1
1
ghcr.io/kvaps/opennebula-exporter:v5.12.0.401563adc95fd
libpng1.6@1.6.37-2
1.6.37-2ubuntu0.1~esm1
1
ghcr.io/kvaps/opennebula-exporter:v5.12.0.4-12b92df1143b9
libpng1.6@1.6.37-2
1.6.37-2ubuntu0.1~esm1
1
ghcr.io/kvaps/opennebula-flow:v5.12.0.4-1600221f0f43f
libpng1.6@1.6.37-2
1.6.37-2ubuntu0.1~esm1
1
ghcr.io/kvaps/opennebula-gate:v5.12.0.4-1a85e03d8bc1d
libpng1.6@1.6.37-2
1.6.37-2ubuntu0.1~esm1
1
ghcr.io/libreconnect/ferriscompany:0.1.0-rc6ed86db9f0efe
libpng1.6@1.6.39-2
1.6.39-2+deb12u1
1
ghcr.io/linuxserver/booksonic-air:version-v2009.1.0baa4fa9549dc
libpng1.6@1.6.34-1ubuntu0.18.04.2
1.6.34-1ubuntu0.18.04.2+esm1
1
ghcr.io/linuxserver/bookstack:version-v24.12.1cc795b254b73
libpng@1.6.44-r0
1.6.53-r0
1
ghcr.io/m0nsterrr/hyperglass:v2.0.4f7b5d20c5e42
libpng@1.6.43-r0
1.6.53-r0
1
ghcr.io/maastrichtu-ids/rstudio:latest981aa4c109e1
libpng1.6@1.6.43-5build1
1.6.43-5ubuntu0.1
1
ghcr.io/maybe-finance/maybe:0.5.0c6ab95ca9130
libpng1.6@1.6.39-2
1.6.39-2+deb12u1
1
ghcr.io/mcwarman/backstage-sample-app/app:mainfae3c1f04311
libpng1.6@1.6.48-1
1.6.48-1+deb13u1
1
ghcr.io/monicahq/monica-next:main8be69156acbb
libpng1.6@1.6.48-1
1.6.48-1+deb13u1
1
ghcr.io/nefelim4ag/pingdom-operator:0.0.15f8c7afdcf439
libpng1.6@1.6.39-2
1.6.39-2+deb12u1
1
ghcr.io/opencatalogi/web-app:deva1a7f507f6ae
libpng1.6@1.6.39-2
1.6.39-2+deb12u1
1
ghcr.io/opencost/opencost-parquet-exporter:v0.2.1ce85ef0ce665
libpng1.6@1.6.39-2
1.6.39-2+deb12u1
1
ghcr.io/opencost/opencost-ui:1.118.0571f87e528ea
libpng@1.6.47-r0
1.6.51-r0
1
ghcr.io/open-telemetry/demo:1.12.0-imageprovider4e322858fe56
libpng1.6@1.6.39-2
1.6.39-2+deb12u1
1

syft 1.42.1 · advisories as of 15 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.