CVE-2026-16118

High

Advisory

Published 17 Jul 2026In the index since 5 Sept 2026

Severity: High; worst across findings
CVSS: 7.1; base score, highest
EPSS: 0.002; 16th percentile
CISA KEV: Not listed; no confirmed exploitation
Charts affected: 811; of 17,787 indexed, latest versions
Container images: 920; deployed by those charts
Fix available: 2 of 2; affected packages

Red Hat Security Advisory: glib2 security update

Carried by container images the latest versions of 811 of 17,787 indexed charts deploy, on 920 images.

Affected package	Affected versions	Fixed in	Images
glib2.0deb	2.40.2-0ubuntu1, 2.48.2-0ubuntu1, 2.48.2-0ubuntu4.1, 2.48.2-0ubuntu4.4+44 more	2.84.4-3~deb13u5	488
glib2rpm	2.56.4-1.el8, 2.56.4-7.el8, 2.56.4-8.el8, 2.56.4-8.el8_2.1+33 more	0:2.56.4-178.el8_10, 0:2.68.4-19.el9_8.10, 0:2.80.4-12.el10_2.22	432

OSV records: DEBIAN-CVE-2026-16118 RHSA-2026:64799 RHSA-2026:64800 RHSA-2026:66451 RLSA-2026:64799 RLSA-2026:64800 RLSA-2026:66451 UBUNTU-CVE-2026-16118

Charts affected

811 by stars

Chart

Latest

Affected images

Radar Score

webhookie-allwebhookie

0.1.2

2 of 3 See more

webhookie-all webhookie 0.1.2

2 of the 3 container images this version deploys carry CVE-2026-16118.

Container image	Digest	Package	Fixed in
hookiesolutions/webhookie :latest	0629694246ba	glib2.0@2.64.6-1~ubuntu20.04.4	no fix listed
quay.io/keycloak/keycloak :14.0.0	3029dc0f1d38	glib2@2.56.4-10.el8_4	0:2.56.4-178.el8_10

Open the chart page →

28,699

juicefs-csi-driverwenerme

0.32.5

1 of 5 See more

juicefs-csi-driver wenerme 0.32.5

1 of the 5 container images this version deploys carry CVE-2026-16118.

Container image	Digest	Package	Fixed in
juicedata/juicefs-csi-driver :v0.32.5	95008ba63318	glib2.0@2.74.6-2+deb12u9	no fix listed

Open the chart page →

8,824

miniowenerme

8.0.10

1 of 1 See more

minio wenerme 8.0.10

1 of the 1 container images this version deploys carry CVE-2026-16118.

Container image	Digest	Package	Fixed in
minio/minio :RELEASE.2021-02-14T04-01-33Z	bd11edda91f3	glib2@2.56.4-8.el8	0:2.56.4-178.el8_10

Open the chart page →

6,915

minio-standalonewenerme

1.0.2

1 of 1 See more

minio-standalone wenerme 1.0.2

1 of the 1 container images this version deploys carry CVE-2026-16118.

Container image	Digest	Package	Fixed in
minio/minio :RELEASE.2022-01-04T07-41-07Z	1484c87239ea	glib2@2.56.4-156.el8	0:2.56.4-178.el8_10

Open the chart page →

6,138

wexa-studiowexa-studio

1.2.0

1 of 15 See more

wexa-studio wexa-studio 1.2.0

1 of the 15 container images this version deploys carry CVE-2026-16118.

Container image	Digest	Package	Fixed in
quay.io/mongodb/mongodb-kubernetes-operator :0.9.0	5ee4bd681085	glib2@2.56.4-166.el8_10	0:2.56.4-178.el8_10

Open the chart page →

14,618

Wordpresswordpress-mariadb

1.0.2

1 of 2 See more

Wordpress wordpress-mariadb 1.0.2

1 of the 2 container images this version deploys carry CVE-2026-16118.

Container image	Digest	Package	Fixed in
library/wordpress :latest	5a93c470ae82	glib2.0@2.84.4-3~deb13u3	2.84.4-3~deb13u5

Open the chart page →

5,635

playwright-synthetic-monitoringwork-adventure

1.0.1

1 of 1 See more

playwright-synthetic-monitoring work-adventure 1.0.1

1 of the 1 container images this version deploys carry CVE-2026-16118.

Container image	Digest	Package	Fixed in
workadventure/playwright-synthetic-monitoring :main	92b664c2a06f	glib2.0@2.72.4-0ubuntu2.3	no fix listed

Open the chart page →

14,172

workshop-pipelinesworkshop-pipelines

0.1.6

1 of 2 See more

workshop-pipelines workshop-pipelines 0.1.6

1 of the 2 container images this version deploys carry CVE-2026-16118.

Container image	Digest	Package	Fixed in
quay.io/maximilianopizarro/workshop-pipelines :latest	e383ba3e0966	glib2@2.56.4-156.el8	0:2.56.4-178.el8_10

Open the chart page →

11,592

keycloakxzaks

2.2.0

1 of 1 See more

keycloakx zaks 2.2.0

1 of the 1 container images this version deploys carry CVE-2026-16118.

Container image	Digest	Package	Fixed in
quay.io/keycloak/keycloak :20.0.3	b8f2a453a17a	glib2@2.56.4-159.el8	0:2.56.4-178.el8_10

Open the chart page →

6,016

posthogzeet

0.23.2

1 of 9 See more

posthog zeet 0.23.2

1 of the 9 container images this version deploys carry CVE-2026-16118.

Container image	Digest	Package	Fixed in
altinity/clickhouse-operator :0.19.0	7a85f522c5bc	glib2@2.56.4-159.el8	0:2.56.4-178.el8_10

Open the chart page →

3,697

zoo-project-druzoo-project

0.10.4

1 of 6 See more

zoo-project-dru zoo-project 0.10.4

1 of the 6 container images this version deploys carry CVE-2026-16118.

Container image	Digest	Package	Fixed in
zooproject/zoo-project :dru-19f3c4eed7c9ec9d1f0375bbe59f9d204a42bd3a	9a507cb7e2dd	glib2.0@2.72.4-0ubuntu2.9	no fix listed

Open the chart page →

7,916

Container images carrying it

920 by charts deploying them

A fixed version is listed for 2 of the 2 affected packages.

Container image	Digest	Package	Fixed in	Used by
quay.io/flomesh/fsm-manager-ubi8 :0.1.8-ubi.6	3590af73f65a	glib2@2.56.4-159.el8	0:2.56.4-178.el8_10	1
quay.io/flomesh/osm-edge-bootstrap-ubi8 :1.2.1	e048bc7a17c2	glib2@2.56.4-159.el8	0:2.56.4-178.el8_10	1
quay.io/flomesh/osm-edge-controller-ubi8 :1.2.1	674f45865af1	glib2@2.56.4-159.el8	0:2.56.4-178.el8_10	1
quay.io/flomesh/osm-edge-crds-ubi8 :1.2.1	c3bc5e7a70e6	glib2@2.56.4-159.el8	0:2.56.4-178.el8_10	1
quay.io/flomesh/osm-edge-injector-ubi8 :1.2.1	8e9c39c34e89	glib2@2.56.4-159.el8	0:2.56.4-178.el8_10	1
quay.io/flomesh/osm-edge-preinstall-ubi8 :1.2.1	f94282a9cfec	glib2@2.56.4-159.el8	0:2.56.4-178.el8_10	1
quay.io/flomesh/pipy-repo-ubi8 :0.70.0-46	9912fdf6c183	glib2@2.56.4-159.el8	0:2.56.4-178.el8_10	1
quay.io/flomesh/pipy-ubi8 :0.50.0-88	24352dca6672	glib2@2.56.4-159.el8	0:2.56.4-178.el8_10	1
quay.io/flomesh/pipy-ubi8 :0.70.0-46	35d87a381432	glib2@2.56.4-159.el8	0:2.56.4-178.el8_10	1
quay.io/flomesh/toolbox-ubi8 :1.2.0	1f5e3161cb84	glib2@2.56.4-162.el8	0:2.56.4-178.el8_10	1
quay.io/galexrt/dellhw_exporter :v2.0.0-rc.1	8a1361fa38c1	glib2@2.68.4-14.el9_4.1	0:2.68.4-19.el9_8.10	1
quay.io/galexrt/dellhw_exporter :v2.0.0	b3a5806d73b5	glib2@2.68.4-18.el9_7.1	0:2.68.4-19.el9_8.10	1
quay.io/go-skynet/local-ai :latest	d78cd113b2bc	glib2.0@2.80.0-6ubuntu3.8	no fix listed	1
quay.io/harikube/vcluster-pro :0.32.1	b741efae8d31	glib2@2.68.4-19.el9_8.2	0:2.68.4-19.el9_8.10	1
quay.io/hpestorage/cosi-driver :v2.0.0	a4d2667f2b6e	glib2@2.68.4-14.el9_4.1	0:2.68.4-19.el9_8.10	1
quay.io/hpestorage/csi-driver :v3.3.0	e58e22427b38	glib2@2.68.4-19.el9_8.9	0:2.68.4-19.el9_8.10	1
quay.io/hpestorage/csi-driver :v3.2.0	ef7f4e1544fa	glib2@2.68.4-19.el9_8.1	0:2.68.4-19.el9_8.10	1
quay.io/hpestorage/csi-extensions :v1.2.11	89146672a7ac	glib2@2.68.4-19.el9_8.1	0:2.68.4-19.el9_8.10	1
quay.io/hpestorage/filex-csi-driver :2.6.4	b7f960bbf472	glib2@2.68.4-18.el9_7	0:2.68.4-19.el9_8.10	1
quay.io/hpestorage/filex-csi-init :2.6.4	2d867eefb233	glib2@2.68.4-14.el9_4.1	0:2.68.4-19.el9_8.10	1
quay.io/hpestorage/volume-group-provisioner :v1.0.10	7bf9d8f16a5d	glib2@2.68.4-19.el9_8.1	0:2.68.4-19.el9_8.10	1
quay.io/hpestorage/volume-group-snapshotter :v1.0.10	caeaaffe7e2b	glib2@2.68.4-19.el9_8.1	0:2.68.4-19.el9_8.10	1
quay.io/hpestorage/volume-mutator :v1.3.10	9e98b2e697bd	glib2@2.68.4-19.el9_8.1	0:2.68.4-19.el9_8.10	1
quay.io/ibmgaragecloud/developer-dashboard :v1.4.4	7a4b9fedc724	glib2@2.56.4-8.el8	0:2.56.4-178.el8_10	1
quay.io/icdh/core-dump-handler :v9.0.0	cc79b9e2a1c8	glib2@2.56.4-165.el8_10	0:2.56.4-178.el8_10	1
quay.io/keycloak/keycloak :14.0.0	3029dc0f1d38	glib2@2.56.4-10.el8_4	0:2.56.4-178.el8_10	1
quay.io/keycloak/keycloak :20.0.1	8830f76112b6	glib2@2.56.4-159.el8	0:2.56.4-178.el8_10	1
quay.io/keycloak/keycloak :20.0.3	b8f2a453a17a	glib2@2.56.4-159.el8	0:2.56.4-178.el8_10	1
quay.io/keycloak/keycloak-operator :19.0.3-legacy	09d52508fee9	glib2@2.56.4-158.el8	0:2.56.4-178.el8_10	1
quay.io/keycloak/keycloak-operator :19.0.2-legacy	15fa0ed662b1	glib2@2.56.4-158.el8	0:2.56.4-178.el8_10	1
quay.io/keycloak/keycloak-operator :18.0.0-legacy	36ce77526145	glib2@2.56.4-156.el8	0:2.56.4-178.el8_10	1
quay.io/keycloak/keycloak-operator :20.0.2	b1710745fa64	glib2@2.56.4-159.el8	0:2.56.4-178.el8_10	1
quay.io/konveyor/move2kube-ui :latest	ec6ab507c5da	glib2@2.56.4-165.el8_10	0:2.56.4-178.el8_10	1
quay.io/kuadrant/authorino-operator :v0.26.0	03b2acc469f4	glib2@2.68.4-19.el9_8.1	0:2.68.4-19.el9_8.10	1
quay.io/kuadrant/authorino-operator :v0.25.3	95a0670bffe6	glib2@2.68.4-19.el9_8.9	0:2.68.4-19.el9_8.10	1
quay.io/kubev2v/forklift-operator :release-2.12	68657c36c086	glib2@2.68.4-19.el9_8.2	0:2.68.4-19.el9_8.10	1
quay.io/kubevirt/kubemacpool :v0.45.0	eebb65b8a12c	glib2@2.68.4-14.el9_4.1	0:2.68.4-19.el9_8.10	1
quay.io/manusa/kubernetes_mcp_server :v0.0.47	150f76e844d9	glib2@2.68.4-16.el9_6.2	0:2.68.4-19.el9_8.10	1
quay.io/maximilianopizarro/custom-rhcl-console :dns-prober-v0.1.2	1a592ee6651a	glib2@2.68.4-19.el9_8.2	0:2.68.4-19.el9_8.10	1
quay.io/maximilianopizarro/custom-rhcl-console :v0.1.2	70bb0cabd653	glib2@2.68.4-19.el9_8.2	0:2.68.4-19.el9_8.10	1
quay.io/maximilianopizarro/neuralbank-backend :latest	a53899fcfc01	glib2@2.68.4-18.el9_7	0:2.68.4-19.el9_8.10	1
quay.io/maximilianopizarro/neuralbank-frontend :latest	5f4572ef6d6f	glib2@2.68.4-18.el9_7	0:2.68.4-19.el9_8.10	1
quay.io/maximilianopizarro/neuroface-backend :v1.4.1	3194d46df0f9	glib2@2.68.4-19.el9_8.1	0:2.68.4-19.el9_8.10	1
quay.io/maximilianopizarro/neuroface-backend :latest	cba71dc08c8a	glib2@2.68.4-19.el9_8.1	0:2.68.4-19.el9_8.10	1
quay.io/maximilianopizarro/neuroface-frontend :v1.4.1	841b70cd1424	glib2@2.68.4-18.el9_7	0:2.68.4-19.el9_8.10	1
quay.io/maximilianopizarro/neuroface-frontend :latest	dcf24040cc77	glib2@2.68.4-18.el9_7	0:2.68.4-19.el9_8.10	1
quay.io/maximilianopizarro/nfl-api-bills :1.0.1	b596a4687bb0	glib2@2.56.4-165.el8_10	0:2.56.4-178.el8_10	1
quay.io/maximilianopizarro/nfl-wallet-api-customers :1.0.1	d50c80a85b35	glib2@2.56.4-165.el8_10	0:2.56.4-178.el8_10	1
quay.io/maximilianopizarro/nfl-wallet-api-raiders :1.0.1	f9c71dc2bc5f	glib2@2.56.4-165.el8_10	0:2.56.4-178.el8_10	1
quay.io/maximilianopizarro/nfl-wallet-webapp :1.0.1	3fead5702be7	glib2@2.56.4-168.el8_10	0:2.56.4-178.el8_10	1