StackRadar

CVE-2026-16118

High

Advisory

Published 17 Jul 2026In the index since 5 Sept 2026
Severity
High
worst across findings
CVSS
7.1
base score, highest
EPSS
0.002
16th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
811
of 17,787 indexed, latest versions
Container images
920
deployed by those charts
Fix available
2 of 2
affected packages

Red Hat Security Advisory: glib2 security update

Carried by container images the latest versions of 811 of 17,787 indexed charts deploy, on 920 images.

Affected packageAffected versionsFixed inImages
glib2.0deb2.40.2-0ubuntu1, 2.48.2-0ubuntu1, 2.48.2-0ubuntu4.1, 2.48.2-0ubuntu4.4+44 more2.84.4-3~deb13u5488
glib2rpm2.56.4-1.el8, 2.56.4-7.el8, 2.56.4-8.el8, 2.56.4-8.el8_2.1+33 more0:2.56.4-178.el8_10, 0:2.68.4-19.el9_8.10, 0:2.80.4-12.el10_2.22432
OSV records
DEBIAN-CVE-2026-16118RHSA-2026:64799RHSA-2026:64800RHSA-2026:66451RLSA-2026:64799RLSA-2026:64800RLSA-2026:66451UBUNTU-CVE-2026-16118

Charts affected

811 by stars
ChartLatestAffected imagesRadar Score
webhookie-allwebhookie0.1.22 of 3See more

webhookie-all webhookie 0.1.2

2 of the 3 container images this version deploys carry CVE-2026-16118.

Container imageDigestPackageFixed in
hookiesolutions/webhookie:latest0629694246ba
glib2.0@2.64.6-1~ubuntu20.04.4
no fix listed
quay.io/keycloak/keycloak:14.0.03029dc0f1d38
glib2@2.56.4-10.el8_4
0:2.56.4-178.el8_10

Open the chart page →

28,699
juicefs-csi-driverwenerme0.32.51 of 5See more

juicefs-csi-driver wenerme 0.32.5

1 of the 5 container images this version deploys carry CVE-2026-16118.

Container imageDigestPackageFixed in
juicedata/juicefs-csi-driver:v0.32.595008ba63318
glib2.0@2.74.6-2+deb12u9
no fix listed

Open the chart page →

8,824
miniowenerme8.0.101 of 1See more

minio wenerme 8.0.10

1 of the 1 container images this version deploys carry CVE-2026-16118.

Container imageDigestPackageFixed in
minio/minio:RELEASE.2021-02-14T04-01-33Zbd11edda91f3
glib2@2.56.4-8.el8
0:2.56.4-178.el8_10

Open the chart page →

6,915
minio-standalonewenerme1.0.21 of 1See more

minio-standalone wenerme 1.0.2

1 of the 1 container images this version deploys carry CVE-2026-16118.

Container imageDigestPackageFixed in
minio/minio:RELEASE.2022-01-04T07-41-07Z1484c87239ea
glib2@2.56.4-156.el8
0:2.56.4-178.el8_10

Open the chart page →

6,138
wexa-studiowexa-studio1.2.01 of 15See more

wexa-studio wexa-studio 1.2.0

1 of the 15 container images this version deploys carry CVE-2026-16118.

Container imageDigestPackageFixed in
quay.io/mongodb/mongodb-kubernetes-operator:0.9.05ee4bd681085
glib2@2.56.4-166.el8_10
0:2.56.4-178.el8_10

Open the chart page →

14,618
Wordpresswordpress-mariadb1.0.21 of 2See more

Wordpress wordpress-mariadb 1.0.2

1 of the 2 container images this version deploys carry CVE-2026-16118.

Container imageDigestPackageFixed in
library/wordpress:latest5a93c470ae82
glib2.0@2.84.4-3~deb13u3
2.84.4-3~deb13u5

Open the chart page →

5,635
playwright-synthetic-monitoringwork-adventure1.0.11 of 1See more

playwright-synthetic-monitoring work-adventure 1.0.1

1 of the 1 container images this version deploys carry CVE-2026-16118.

Container imageDigestPackageFixed in
workadventure/playwright-synthetic-monitoring:main92b664c2a06f
glib2.0@2.72.4-0ubuntu2.3
no fix listed

Open the chart page →

14,172
workshop-pipelinesworkshop-pipelines0.1.61 of 2See more

workshop-pipelines workshop-pipelines 0.1.6

1 of the 2 container images this version deploys carry CVE-2026-16118.

Container imageDigestPackageFixed in
quay.io/maximilianopizarro/workshop-pipelines:lateste383ba3e0966
glib2@2.56.4-156.el8
0:2.56.4-178.el8_10

Open the chart page →

11,592
keycloakxzaks2.2.01 of 1See more

keycloakx zaks 2.2.0

1 of the 1 container images this version deploys carry CVE-2026-16118.

Container imageDigestPackageFixed in
quay.io/keycloak/keycloak:20.0.3b8f2a453a17a
glib2@2.56.4-159.el8
0:2.56.4-178.el8_10

Open the chart page →

6,016
posthogzeet0.23.21 of 9See more

posthog zeet 0.23.2

1 of the 9 container images this version deploys carry CVE-2026-16118.

Container imageDigestPackageFixed in
altinity/clickhouse-operator:0.19.07a85f522c5bc
glib2@2.56.4-159.el8
0:2.56.4-178.el8_10

Open the chart page →

3,697
zoo-project-druzoo-projectOfficialVerified publisher0.10.41 of 6See more

zoo-project-dru zoo-project 0.10.4

1 of the 6 container images this version deploys carry CVE-2026-16118.

Container imageDigestPackageFixed in
zooproject/zoo-project:dru-19f3c4eed7c9ec9d1f0375bbe59f9d204a42bd3a9a507cb7e2dd
glib2.0@2.72.4-0ubuntu2.9
no fix listed

Open the chart page →

7,916

Container images carrying it

920 by charts deploying them

A fixed version is listed for 2 of the 2 affected packages.

Container imageDigestPackageFixed inUsed by
quay.io/maximilianopizarro/openshift-integration-operator:v0.8.2d6fc43ac802e
glib2@2.68.4-14.el9_4.1
0:2.68.4-19.el9_8.10
1
quay.io/maximilianopizarro/showroom-docs-mcp:latest1a6eff92827a
glib2@2.68.4-14.el9_4.1
0:2.68.4-19.el9_8.10
1
quay.io/maximilianopizarro/workshop-pipelines:lateste383ba3e0966
glib2@2.56.4-156.el8
0:2.56.4-178.el8_10
1
quay.io/mcouliba/quarkus-serverless:1.0c2851757eca4
glib2@2.56.4-7.el8
0:2.56.4-178.el8_10
1
quay.io/microcks/microcks-operator:0.0.1196d1054d4a61
glib2@2.68.4-18.el9_7.1
0:2.68.4-19.el9_8.10
1
quay.io/minio/directpv:v4.0.84560083eb77d
glib2@2.56.4-161.el8
0:2.56.4-178.el8_10
1
quay.io/minio/mc:RELEASE.2022-10-20T23-26-33Z50ee58bc9770
glib2@2.56.4-158.el8
0:2.56.4-178.el8_10
1
quay.io/minio/mc:RELEASE.2022-09-16T09-16-47Z546a8b52d7b0
glib2@2.56.4-158.el8
0:2.56.4-178.el8_10
1
quay.io/minio/minio:RELEASE.2022-09-17T00-09-45Zc3d20bc2ea08
glib2@2.56.4-158.el8
0:2.56.4-178.el8_10
1
quay.io/minio/minio:RELEASE.2022-10-24T18-35-07Zd853057f2800
glib2@2.56.4-158.el8
0:2.56.4-178.el8_10
1
quay.io/mittwald/brudi-operator:v0.2.3edb322094359
glib2@2.56.4-161.el8
0:2.56.4-178.el8_10
1
quay.io/mongodb/mongodb-enterprise-operator-ubi:1.33.0b05101723412
glib2@2.68.4-16.el9_6.2
0:2.68.4-19.el9_8.10
1
quay.io/mongodb/mongodb-kubernetes:1.12.014d7c95972c5
glib2@2.68.4-19.el9_8.9
0:2.68.4-19.el9_8.10
1
quay.io/mongodb/mongodb-kubernetes-operator:0.3.0107a7c73af59
glib2@2.56.4-8.el8
0:2.56.4-178.el8_10
1
quay.io/mongodb/mongodb-kubernetes-operator:0.9.05ee4bd681085
glib2@2.56.4-166.el8_10
0:2.56.4-178.el8_10
1
quay.io/netobserv/network-observability-operator:1.12.0-communityb05d21a015b0
glib2@2.68.4-19.el9_8.1
0:2.68.4-19.el9_8.10
1
quay.io/nmstate/kubernetes-nmstate-operator:v0.87.04dce694f01ea
glib2@2.68.4-19.el9_8.2
0:2.68.4-19.el9_8.10
1
quay.io/ongres/kubectl:v1.25.16-build-6.5304dada9e4503
glib2@2.56.4-169.el8_10
0:2.56.4-178.el8_10
1
quay.io/open-cluster-management/kueue-addon:v0.1.47f728514fead
glib2@2.68.4-16.el9_6.2
0:2.68.4-19.el9_8.10
1
quay.io/open-cluster-management/managed-serviceaccount:v0.10.0d6284bd7765a
glib2@2.68.4-18.el9_7.1
0:2.68.4-19.el9_8.10
1
quay.io/open-cluster-management/multicluster-controlplane:latest9888240f644b
glib2@2.56.4-169.el8_10
0:2.56.4-178.el8_10
1
quay.io/openshift/origin-cli:4.66722d5041b47
glib2@2.56.4-8.el8_2.1
0:2.56.4-178.el8_10
1
quay.io/openshift/origin-console:4.10.00bbe8b451fa3
glib2@2.56.4-8.el8_2.1
0:2.56.4-178.el8_10
1
quay.io/openshift/origin-jenkins-agent-base:latestc241c971aef8
glib2@2.56.4-158.el8_6.1
0:2.56.4-178.el8_10
1
quay.io/opsmxpublic/spin-sample-pipeline:v1.0.1c6a934439421
glib2.0@2.48.2-0ubuntu4.4
no fix listed
1
quay.io/opsmxpublic/ubi8-gate:isd-spin-2025.10.01-5c720954-2025112608102b3554029737
glib2@2.56.4-167.el8_10
0:2.56.4-178.el8_10
1
quay.io/opsmxpublic/ubi8-oes-audit-client:isd-spin-2025.10.01-cb1bfce-20251126103732a5b1887eab
glib2@2.56.4-167.el8_10
0:2.56.4-178.el8_10
1
quay.io/opsmxpublic/ubi8-oes-autopilot:isd-spin-2025.10.01-af26a30d4-20251126105458bd0bcf72f9
glib2@2.56.4-167.el8_10
0:2.56.4-178.el8_10
1
quay.io/opsmxpublic/ubi8-oes-db:v3.0.089ee6493af89
glib2@2.56.4-10.el8_4.1
0:2.56.4-178.el8_10
1
quay.io/opsmxpublic/ubi8-oes-platform:isd-spin-2025.10.01-a7c191ec-2025112611228ed603ab7417
glib2@2.56.4-167.el8_10
0:2.56.4-178.el8_10
1
quay.io/opsmxpublic/ubi8-oes-ui:isd-spin-2025.10.01-e6f6f01-2025121006405d934bb66884
glib2@2.56.4-167.el8_10
0:2.56.4-178.el8_10
1
quay.io/projectquay/clair:4.9.023329c3368e4
glib2@2.56.4-167.el8_10
0:2.56.4-178.el8_10
1
quay.io/redhat-ai-dev/chatbot:latest59fe607dfdf2
glib2@2.68.4-14.el9
0:2.68.4-19.el9_8.10
1
quay.io/redhat-appstudio/appstudio-utils:dbbdd82734232e6289e8fbae5b4c858481a7c0577b4202c25b67
glib2@2.68.4-6.el9
0:2.68.4-19.el9_8.10
1
quay.io/redhat-cop/cert-utils-operator:v1.3.120290e7b2800a
glib2@2.56.4-161.el8
0:2.56.4-178.el8_10
1
quay.io/redhat-cop/patch-operator:v0.1.11030ade9b9428
glib2@2.68.4-14.el9
0:2.68.4-19.el9_8.10
1
quay.io/redhat-cop/vault-config-operator:v1.0.2e191cd9545d9
glib2@2.68.4-19.el9_8.9
0:2.68.4-19.el9_8.10
1
quay.io/rhdh/rhdh-hub-rhel9:latest0b26358f5793
glib2@2.68.4-19.el9_8.9
0:2.68.4-19.el9_8.10
1
quay.io/rht-labs/stack-do500:3.0.86ba82beff18e
glib2@2.56.4-10.el8_4.1
0:2.56.4-178.el8_10
1
quay.io/seamware/consent-facade:0.0.14be844c750c7e
glib2@2.56.4-165.el8_10
0:2.56.4-178.el8_10
1
quay.io/sshaaf/keycloak-mcp-server:0.4.0b7e9cba72f8a
glib2@2.68.4-14.el9_4.1
0:2.68.4-19.el9_8.10
1
quay.io/strimzi/operator:latest1af5dc3dcf8c
glib2@2.68.4-19.el9_8.9
0:2.68.4-19.el9_8.10
1
quay.io/strimzi/operator:0.45.158c727cd2e68
glib2@2.68.4-16.el9_6.2
0:2.68.4-19.el9_8.10
1
quay.io/strimzi/operator:0.36.1e9e03b31007c
glib2@2.56.4-161.el8
0:2.56.4-178.el8_10
1
quay.io/wi_stefan/dss-validation-service:0.0.18e928db29ee1
glib2@2.56.4-159.el8
0:2.56.4-178.el8_10
1
quay.io/yushiwho/api:e1f9d77e0d9b93dbf2b
glib2.0@2.74.6-2
no fix listed
1
quay.io/zncdatadev/airflow-operator:0.4.0b716ef483b75
glib2@2.68.4-19.el9_8.9
0:2.68.4-19.el9_8.10
1
quay.io/zncdatadev/commons-operator:0.4.01a353def9fe1
glib2@2.68.4-19.el9_8.9
0:2.68.4-19.el9_8.10
1
quay.io/zncdatadev/dolphinscheduler-operator:0.4.0d0a4e55eeb7f
glib2@2.68.4-19.el9_8.9
0:2.68.4-19.el9_8.10
1
quay.io/zncdatadev/hbase-operator:0.4.069e9a1b0daf8
glib2@2.68.4-19.el9_8.9
0:2.68.4-19.el9_8.10
1

syft 1.42.1 · advisories as of 15 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.