CVE-2026-16118

High

Advisory

Published 17 Jul 2026In the index since 5 Sept 2026

Severity: High; worst across findings
CVSS: 7.1; base score, highest
EPSS: 0.002; 16th percentile
CISA KEV: Not listed; no confirmed exploitation
Charts affected: 811; of 17,787 indexed, latest versions
Container images: 920; deployed by those charts
Fix available: 2 of 2; affected packages

Red Hat Security Advisory: glib2 security update

Carried by container images the latest versions of 811 of 17,787 indexed charts deploy, on 920 images.

Affected package	Affected versions	Fixed in	Images
glib2.0deb	2.40.2-0ubuntu1, 2.48.2-0ubuntu1, 2.48.2-0ubuntu4.1, 2.48.2-0ubuntu4.4+44 more	2.84.4-3~deb13u5	488
glib2rpm	2.56.4-1.el8, 2.56.4-7.el8, 2.56.4-8.el8, 2.56.4-8.el8_2.1+33 more	0:2.56.4-178.el8_10, 0:2.68.4-19.el9_8.10, 0:2.80.4-12.el10_2.22	432

OSV records: DEBIAN-CVE-2026-16118 RHSA-2026:64799 RHSA-2026:64800 RHSA-2026:66451 RLSA-2026:64799 RLSA-2026:64800 RLSA-2026:66451 UBUNTU-CVE-2026-16118

Charts affected

811 by stars

Chart

Latest

Affected images

Radar Score

webhookie-allwebhookie

0.1.2

2 of 3 See more

webhookie-all webhookie 0.1.2

2 of the 3 container images this version deploys carry CVE-2026-16118.

Container image	Digest	Package	Fixed in
hookiesolutions/webhookie :latest	0629694246ba	glib2.0@2.64.6-1~ubuntu20.04.4	no fix listed
quay.io/keycloak/keycloak :14.0.0	3029dc0f1d38	glib2@2.56.4-10.el8_4	0:2.56.4-178.el8_10

Open the chart page →

28,699

juicefs-csi-driverwenerme

0.32.5

1 of 5 See more

juicefs-csi-driver wenerme 0.32.5

1 of the 5 container images this version deploys carry CVE-2026-16118.

Container image	Digest	Package	Fixed in
juicedata/juicefs-csi-driver :v0.32.5	95008ba63318	glib2.0@2.74.6-2+deb12u9	no fix listed

Open the chart page →

8,824

miniowenerme

8.0.10

1 of 1 See more

minio wenerme 8.0.10

1 of the 1 container images this version deploys carry CVE-2026-16118.

Container image	Digest	Package	Fixed in
minio/minio :RELEASE.2021-02-14T04-01-33Z	bd11edda91f3	glib2@2.56.4-8.el8	0:2.56.4-178.el8_10

Open the chart page →

6,915

minio-standalonewenerme

1.0.2

1 of 1 See more

minio-standalone wenerme 1.0.2

1 of the 1 container images this version deploys carry CVE-2026-16118.

Container image	Digest	Package	Fixed in
minio/minio :RELEASE.2022-01-04T07-41-07Z	1484c87239ea	glib2@2.56.4-156.el8	0:2.56.4-178.el8_10

Open the chart page →

6,138

wexa-studiowexa-studio

1.2.0

1 of 15 See more

wexa-studio wexa-studio 1.2.0

1 of the 15 container images this version deploys carry CVE-2026-16118.

Container image	Digest	Package	Fixed in
quay.io/mongodb/mongodb-kubernetes-operator :0.9.0	5ee4bd681085	glib2@2.56.4-166.el8_10	0:2.56.4-178.el8_10

Open the chart page →

14,618

Wordpresswordpress-mariadb

1.0.2

1 of 2 See more

Wordpress wordpress-mariadb 1.0.2

1 of the 2 container images this version deploys carry CVE-2026-16118.

Container image	Digest	Package	Fixed in
library/wordpress :latest	5a93c470ae82	glib2.0@2.84.4-3~deb13u3	2.84.4-3~deb13u5

Open the chart page →

5,635

playwright-synthetic-monitoringwork-adventure

1.0.1

1 of 1 See more

playwright-synthetic-monitoring work-adventure 1.0.1

1 of the 1 container images this version deploys carry CVE-2026-16118.

Container image	Digest	Package	Fixed in
workadventure/playwright-synthetic-monitoring :main	92b664c2a06f	glib2.0@2.72.4-0ubuntu2.3	no fix listed

Open the chart page →

14,172

workshop-pipelinesworkshop-pipelines

0.1.6

1 of 2 See more

workshop-pipelines workshop-pipelines 0.1.6

1 of the 2 container images this version deploys carry CVE-2026-16118.

Container image	Digest	Package	Fixed in
quay.io/maximilianopizarro/workshop-pipelines :latest	e383ba3e0966	glib2@2.56.4-156.el8	0:2.56.4-178.el8_10

Open the chart page →

11,592

keycloakxzaks

2.2.0

1 of 1 See more

keycloakx zaks 2.2.0

1 of the 1 container images this version deploys carry CVE-2026-16118.

Container image	Digest	Package	Fixed in
quay.io/keycloak/keycloak :20.0.3	b8f2a453a17a	glib2@2.56.4-159.el8	0:2.56.4-178.el8_10

Open the chart page →

6,016

posthogzeet

0.23.2

1 of 9 See more

posthog zeet 0.23.2

1 of the 9 container images this version deploys carry CVE-2026-16118.

Container image	Digest	Package	Fixed in
altinity/clickhouse-operator :0.19.0	7a85f522c5bc	glib2@2.56.4-159.el8	0:2.56.4-178.el8_10

Open the chart page →

3,697

zoo-project-druzoo-project

0.10.4

1 of 6 See more

zoo-project-dru zoo-project 0.10.4

1 of the 6 container images this version deploys carry CVE-2026-16118.

Container image	Digest	Package	Fixed in
zooproject/zoo-project :dru-19f3c4eed7c9ec9d1f0375bbe59f9d204a42bd3a	9a507cb7e2dd	glib2.0@2.72.4-0ubuntu2.9	no fix listed

Open the chart page →

7,916

Container images carrying it

920 by charts deploying them

A fixed version is listed for 2 of the 2 affected packages.

Container image	Digest	Package	Fixed in	Used by
castopod/castopod :1.15.5	4e4f0440520f	glib2.0@2.84.4-3~deb13u2	2.84.4-3~deb13u5	1
checkmk/check-mk-community :2.5.0p6	c11b422210c4	glib2.0@2.72.4-0ubuntu2.9	no fix listed	1
chetangautamm/repo :sipp.v3	e7f7049e1544	glib2.0@2.64.6-1~ubuntu20.04.1	no fix listed	1
cheyang/distributed-tf :1.6.0	46cc34755493	glib2.0@2.48.2-0ubuntu1	no fix listed	1
chiefonboarding/chiefonboarding :v2.4.1	59bc7aa60fe7	glib2.0@2.84.4-3~deb13u2	2.84.4-3~deb13u5	1
chocobozzz/peertube :v8.1.5	052712130691	glib2.0@2.84.4-3~deb13u3	2.84.4-3~deb13u5	1
chriseaton/adventureworks :latest	54c3384ce701	glib2.0@2.72.4-0ubuntu2.4	no fix listed	1
ckulka/baikal :0.10.1-nginx	434bdd162247	glib2.0@2.74.6-2+deb12u6	no fix listed	1
cleveritcz/opencve :1.5.0	c75c1636e0b7	glib2@2.68.4-11.el9	0:2.68.4-19.el9_8.10	1
cloudtooling/moodle :5.2.3	f4f04e0fc401	glib2.0@2.74.6-2+deb12u9	no fix listed	1
cloudve/janis-terminal :latest	af56e77ca587	glib2.0@2.56.4-0ubuntu0.18.04.6	no fix listed	1
cockroachdb/cockroach :v22.2.9	1116820f4134	glib2@2.56.4-159.el8	0:2.56.4-178.el8_10	1
cockroachdb/cockroachdb-operator-v2 :v1.0.0	4335d8bcbd3d	glib2@2.68.4-16.el9_6.2	0:2.68.4-19.el9_8.10	1
cockroachdb/cockroach-operator :v2.1.0	983312754620	glib2@2.56.4-10.el8_4.1	0:2.56.4-178.el8_10	1
codedesignplus/ms-emails-grpc :latest	e336012bc781	glib2.0@2.74.6-2+deb12u9	no fix listed	1
codedesignplus/ms-emails-rest :latest	ac84661c605e	glib2.0@2.74.6-2+deb12u9	no fix listed	1
coderenvs/coder-service :1.44.6	1deffc4670e6	glib2@2.56.4-161.el8	0:2.56.4-178.el8_10	1
coderenvs/timescale :1.44.6	76fd37fe6830	glib2@2.56.4-161.el8	0:2.56.4-178.el8_10	1
codetogether/codetogether :latest	4348c8a38752	glib2@2.68.4-14.el9	0:2.68.4-19.el9_8.10	1
confluentinc/cp-enterprise-control-center :6.1.0	f2975d507a2a	glib2@2.56.4-8.el8	0:2.56.4-178.el8_10	1
confluentinc/cp-enterprise-kafka :6.1.0	8f1544df1f48	glib2@2.56.4-8.el8	0:2.56.4-178.el8_10	1
confluentinc/cp-kafka :latest	0ad069035863	glib2@2.68.4-19.el9_8.2	0:2.68.4-19.el9_8.10	1
confluentinc/cp-kafka :7.1.2.amd64	3bf359d5e340	glib2@2.56.4-158.el8	0:2.56.4-178.el8_10	1
confluentinc/cp-kafka :7.6.6	83dbca3efd2a	glib2@2.56.4-165.el8_10	0:2.56.4-178.el8_10	1
confluentinc/cp-kafka :7.8.0-3-ubi8	adc392d28a1e	glib2@2.56.4-165.el8_10	0:2.56.4-178.el8_10	1
confluentinc/cp-kafka :7.4.4	c0224a1adf7a	glib2@2.56.4-161.el8	0:2.56.4-178.el8_10	1
confluentinc/cp-kafka :7.5.1	dc9b972db002	glib2@2.56.4-161.el8	0:2.56.4-178.el8_10	1
confluentinc/cp-kafka-connect :6.1.0	4bc70a83ca6f	glib2@2.56.4-8.el8	0:2.56.4-178.el8_10	1
confluentinc/cp-kafka-rest :6.1.0	b0b7aa26254a	glib2@2.56.4-8.el8	0:2.56.4-178.el8_10	1
confluentinc/cp-ksqldb-server :7.6.0	8ec46c27982f	glib2@2.56.4-161.el8	0:2.56.4-178.el8_10	1
confluentinc/cp-ksqldb-server :6.1.0	ee403d5b9090	glib2@2.56.4-8.el8	0:2.56.4-178.el8_10	1
confluentinc/cp-schema-registry :6.1.0	b651d4b6185a	glib2@2.56.4-8.el8	0:2.56.4-178.el8_10	1
confluentinc/cp-schema-registry :latest	f0cfd047a839	glib2@2.68.4-19.el9_8.2	0:2.68.4-19.el9_8.10	1
confluentinc/cp-zookeeper :7.5.1	0bec03c1f3ce	glib2@2.56.4-161.el8	0:2.56.4-178.el8_10	1
confluentinc/cp-zookeeper :7.8.0-3-ubi8	5ca5f3269814	glib2@2.56.4-165.el8_10	0:2.56.4-178.el8_10	1
confluentinc/cp-zookeeper :6.1.0	78c190f4472c	glib2@2.56.4-8.el8	0:2.56.4-178.el8_10	1
countly/countly-server :25.05.4	e3c238248f99	glib2.0@2.64.6-1~ubuntu20.04.7	no fix listed	1
craftypath/sops-operator :v0.8.0	402a0024c732	glib2@2.56.4-10.el8_4	0:2.56.4-178.el8_10	1
ctron/hawkbit-operator :0.1.4	8fdea8f76499	glib2@2.56.4-8.el8	0:2.56.4-178.el8_10	1
cybrarist/discount-bandit :v4.0.4	e9e2447ac666	glib2.0@2.84.4-3~deb13u3	2.84.4-3~deb13u5	1
daskdev/dask-notebook :1.1.0	052630f5ca04	glib2.0@2.56.3-0ubuntu0.18.04.1	no fix listed	1
datadog/extendeddaemonset :v0.8.0	513a4377aed5	glib2@2.56.4-156.el8	0:2.56.4-178.el8_10	1
datamate/seafile-professional :11.0.20	2dd66b722464	glib2.0@2.72.4-0ubuntu2.6	no fix listed	1
datawire/ambassador-operator :v1.3.0	f95ae710d75c	glib2@2.56.4-10.el8_4	0:2.56.4-178.el8_10	1
deconzcommunity/deconz :2.29.2	062de2362641	glib2.0@2.74.6-2+deb12u5	no fix listed	1
dellemc/csm-application-mobility-controller :v0.1.0	148ada9060a9	glib2@2.56.4-158.el8	0:2.56.4-178.el8_10	1
dellemc/csm-application-mobility-velero-plugin :v0.1.0	660cabd6d929	glib2@2.56.4-158.el8	0:2.56.4-178.el8_10	1
dgraziotin/nginx-webdav-nononsense :1.23.1	38f2de42bed0	glib2.0@2.64.6-1~ubuntu20.04.4	no fix listed	1
dokuwiki/dokuwiki :2025-05-14a	f08ecfdda239	glib2.0@2.84.3-1	2.84.4-3~deb13u5	1
dongjiang1989/lxcfs :v6.0.3	4bf9ae391948	glib2.0@2.64.6-1~ubuntu20.04.9	no fix listed	1