CVE-2026-16118

High

Advisory

Published 17 Jul 2026In the index since 5 Sept 2026

Severity: High; worst across findings
CVSS: 7.1; base score, highest
EPSS: 0.002; 16th percentile
CISA KEV: Not listed; no confirmed exploitation
Charts affected: 811; of 17,787 indexed, latest versions
Container images: 920; deployed by those charts
Fix available: 2 of 2; affected packages

Red Hat Security Advisory: glib2 security update

Carried by container images the latest versions of 811 of 17,787 indexed charts deploy, on 920 images.

Affected package	Affected versions	Fixed in	Images
glib2.0deb	2.40.2-0ubuntu1, 2.48.2-0ubuntu1, 2.48.2-0ubuntu4.1, 2.48.2-0ubuntu4.4+44 more	2.84.4-3~deb13u5	488
glib2rpm	2.56.4-1.el8, 2.56.4-7.el8, 2.56.4-8.el8, 2.56.4-8.el8_2.1+33 more	0:2.56.4-178.el8_10, 0:2.68.4-19.el9_8.10, 0:2.80.4-12.el10_2.22	432

OSV records: DEBIAN-CVE-2026-16118 RHSA-2026:64799 RHSA-2026:64800 RHSA-2026:66451 RLSA-2026:64799 RLSA-2026:64800 RLSA-2026:66451 UBUNTU-CVE-2026-16118

Charts affected

811 by stars

Chart

Latest

Affected images

Radar Score

webhookie-allwebhookie

0.1.2

2 of 3 See more

webhookie-all webhookie 0.1.2

2 of the 3 container images this version deploys carry CVE-2026-16118.

Container image	Digest	Package	Fixed in
hookiesolutions/webhookie :latest	0629694246ba	glib2.0@2.64.6-1~ubuntu20.04.4	no fix listed
quay.io/keycloak/keycloak :14.0.0	3029dc0f1d38	glib2@2.56.4-10.el8_4	0:2.56.4-178.el8_10

Open the chart page →

28,699

juicefs-csi-driverwenerme

0.32.5

1 of 5 See more

juicefs-csi-driver wenerme 0.32.5

1 of the 5 container images this version deploys carry CVE-2026-16118.

Container image	Digest	Package	Fixed in
juicedata/juicefs-csi-driver :v0.32.5	95008ba63318	glib2.0@2.74.6-2+deb12u9	no fix listed

Open the chart page →

8,824

miniowenerme

8.0.10

1 of 1 See more

minio wenerme 8.0.10

1 of the 1 container images this version deploys carry CVE-2026-16118.

Container image	Digest	Package	Fixed in
minio/minio :RELEASE.2021-02-14T04-01-33Z	bd11edda91f3	glib2@2.56.4-8.el8	0:2.56.4-178.el8_10

Open the chart page →

6,915

minio-standalonewenerme

1.0.2

1 of 1 See more

minio-standalone wenerme 1.0.2

1 of the 1 container images this version deploys carry CVE-2026-16118.

Container image	Digest	Package	Fixed in
minio/minio :RELEASE.2022-01-04T07-41-07Z	1484c87239ea	glib2@2.56.4-156.el8	0:2.56.4-178.el8_10

Open the chart page →

6,138

wexa-studiowexa-studio

1.2.0

1 of 15 See more

wexa-studio wexa-studio 1.2.0

1 of the 15 container images this version deploys carry CVE-2026-16118.

Container image	Digest	Package	Fixed in
quay.io/mongodb/mongodb-kubernetes-operator :0.9.0	5ee4bd681085	glib2@2.56.4-166.el8_10	0:2.56.4-178.el8_10

Open the chart page →

14,618

Wordpresswordpress-mariadb

1.0.2

1 of 2 See more

Wordpress wordpress-mariadb 1.0.2

1 of the 2 container images this version deploys carry CVE-2026-16118.

Container image	Digest	Package	Fixed in
library/wordpress :latest	5a93c470ae82	glib2.0@2.84.4-3~deb13u3	2.84.4-3~deb13u5

Open the chart page →

5,635

playwright-synthetic-monitoringwork-adventure

1.0.1

1 of 1 See more

playwright-synthetic-monitoring work-adventure 1.0.1

1 of the 1 container images this version deploys carry CVE-2026-16118.

Container image	Digest	Package	Fixed in
workadventure/playwright-synthetic-monitoring :main	92b664c2a06f	glib2.0@2.72.4-0ubuntu2.3	no fix listed

Open the chart page →

14,172

workshop-pipelinesworkshop-pipelines

0.1.6

1 of 2 See more

workshop-pipelines workshop-pipelines 0.1.6

1 of the 2 container images this version deploys carry CVE-2026-16118.

Container image	Digest	Package	Fixed in
quay.io/maximilianopizarro/workshop-pipelines :latest	e383ba3e0966	glib2@2.56.4-156.el8	0:2.56.4-178.el8_10

Open the chart page →

11,592

keycloakxzaks

2.2.0

1 of 1 See more

keycloakx zaks 2.2.0

1 of the 1 container images this version deploys carry CVE-2026-16118.

Container image	Digest	Package	Fixed in
quay.io/keycloak/keycloak :20.0.3	b8f2a453a17a	glib2@2.56.4-159.el8	0:2.56.4-178.el8_10

Open the chart page →

6,016

posthogzeet

0.23.2

1 of 9 See more

posthog zeet 0.23.2

1 of the 9 container images this version deploys carry CVE-2026-16118.

Container image	Digest	Package	Fixed in
altinity/clickhouse-operator :0.19.0	7a85f522c5bc	glib2@2.56.4-159.el8	0:2.56.4-178.el8_10

Open the chart page →

3,697

zoo-project-druzoo-project

0.10.4

1 of 6 See more

zoo-project-dru zoo-project 0.10.4

1 of the 6 container images this version deploys carry CVE-2026-16118.

Container image	Digest	Package	Fixed in
zooproject/zoo-project :dru-19f3c4eed7c9ec9d1f0375bbe59f9d204a42bd3a	9a507cb7e2dd	glib2.0@2.72.4-0ubuntu2.9	no fix listed

Open the chart page →

7,916

Container images carrying it

920 by charts deploying them

A fixed version is listed for 2 of the 2 affected packages.

Container image	Digest	Package	Fixed in	Used by
linuxserver/calibre :version-v5.21.0	a847b5b2d860	glib2.0@2.56.4-0ubuntu0.18.04.8	no fix listed	1
linuxserver/calibre-web :0.6.24	241009026e6f	glib2.0@2.80.0-6ubuntu3.4	no fix listed	1
linuxserver/calibre-web :version-0.6.12	938810eca3d3	glib2.0@2.64.6-1~ubuntu20.04.4	no fix listed	1
linuxserver/deluge :18.04.1	0ac871624394	glib2.0@2.56.4-0ubuntu0.18.04.9	no fix listed	1
linuxserver/deluge :version-2.0.3-2201906121747ubuntu18.04.1	2ce561a95e7b	glib2.0@2.56.4-0ubuntu0.18.04.8	no fix listed	1
linuxserver/jellyfin :10.7.7	2427dde159a2	glib2.0@2.64.6-1~ubuntu20.04.4	no fix listed	1
linuxserver/unifi-controller :8.0.24	0ae315a3a456	glib2.0@2.64.6-1~ubuntu20.04.6	no fix listed	1
linuxserver/unifi-controller :7.3.83	ab105cc50322	glib2.0@2.64.6-1~ubuntu20.04.4	no fix listed	1
livekit/ingress :v1.2.2	1ab01641b366	glib2.0@2.72.4-0ubuntu2.2	no fix listed	1
louislam/uptime-kuma :2.5.3	3e24e96c89ef	glib2.0@2.74.6-2+deb12u9	no fix listed	1
louislam/uptime-kuma :2.0.2	4c364ef96aad	glib2.0@2.74.6-2+deb12u7	no fix listed	1
louislam/uptime-kuma :2.4.0	91e963bfda56	glib2.0@2.74.6-2+deb12u9	no fix listed	1
machines/filestash :latest	0b8fc005e52e	glib2.0@2.84.4-3~deb13u3	2.84.4-3~deb13u5	1
mariadb/maxscale :23.02.2	56c5e0908148	glib2@2.56.4-161.el8	0:2.56.4-178.el8_10	1
mathesar/mathesar :0.12.0	091757cb01fe	glib2.0@2.74.6-2+deb12u9	no fix listed	1
mbround18/valheim :3.1.0	70bd4da591cd	glib2.0@2.72.4-0ubuntu2.4	no fix listed	1
merlos/zookeeper :3.9.3	a38fc7e09ed7	glib2.0@2.74.6-2+deb12u4	no fix listed	1
mindsdb/mindsdb :latest	163011c09299	glib2.0@2.84.4-3~deb13u2	2.84.4-3~deb13u5	1
minio/kes :v0.22.2	55f3aef5803e	glib2@2.56.4-159.el8	0:2.56.4-178.el8_10	1
minio/mc :RELEASE.2021-02-14T04-28-06Z	2a374c124d44	glib2@2.56.4-8.el8	0:2.56.4-178.el8_10	1
minio/mc :RELEASE.2022-05-09T04-08-26Z	4b415310d8d0	glib2@2.56.4-156.el8	0:2.56.4-178.el8_10	1
minio/mc :RELEASE.2023-02-28T00-12-59Z	c631532a394e	glib2@2.56.4-159.el8	0:2.56.4-178.el8_10	1
minio/minio :RELEASE.2022-01-04T07-41-07Z	1484c87239ea	glib2@2.56.4-156.el8	0:2.56.4-178.el8_10	1
minio/minio :RELEASE.2023-03-20T20-16-18Z	6d770d7f255c	glib2@2.56.4-159.el8	0:2.56.4-178.el8_10	1
minio/minio :RELEASE.2022-10-24T18-35-07Z	f9576903f19d	glib2@2.56.4-158.el8	0:2.56.4-178.el8_10	1
minio/minio :RELEASE.2023-01-12T02-06-16Z	fc6bedc99355	glib2@2.56.4-159.el8	0:2.56.4-178.el8_10	1
minio/operator :v5.0.9	170b154d2c61	glib2@2.56.4-161.el8	0:2.56.4-178.el8_10	1
minio/operator :v4.1.0	2adc5be088f5	glib2@2.56.4-9.el8	0:2.56.4-178.el8_10	1
mintproject/model-catalog-fastapi :7dd88dc5bf1fe6a6d4703ea0a077afee45cb2561	02260d20a21f	glib2.0@2.74.6-2+deb12u5	no fix listed	1
mitre/vulcan :latest	2bc4dfb8150f	glib2@2.68.4-19.el9_8.9	0:2.68.4-19.el9_8.10	1
mlikiowa/napcat-docker :latest	1336a777f9a4	glib2.0@2.72.4-0ubuntu2.3	no fix listed	1
mockserver/mockserver :mockserver-7.6.0	80b3b1a26f35	glib2.0@2.74.6-2+deb12u8	no fix listed	1
moreillon/api-proxy :latest	d7d4a5463525	glib2.0@2.74.6-2+deb12u6	no fix listed	1
moreillon/food-manager :latest	e8fd856e593d	glib2.0@2.74.6-2+deb12u6	no fix listed	1
moreillon/group-manager :latest	3caa8f710ee0	glib2.0@2.74.6-2+deb12u8	no fix listed	1
moreillon/user-manager-mongoose :v5.0.1	d2ee0423b797	glib2.0@2.74.6-2	no fix listed	1
muhammedgamal/fp23 :latest	74b4cd69b6fa	glib2.0@2.74.6-2+deb12u2	no fix listed	1
muluder/prograncontrollermcord :0.1.8	43b597a93da7	glib2.0@2.48.2-0ubuntu1	no fix listed	1
netdata/netdata :v2.11.0	c45c71eb23ff	glib2.0@2.84.4-3~deb13u3	2.84.4-3~deb13u5	1
netskopeprivateaccess/publisher_u22 :latest	93e2fd164a93	glib2.0@2.72.4-0ubuntu2.9	no fix listed	1
nousresearch/hermes-agent :v2026.8.27	e0df6adebddf	glib2.0@2.84.4-3~deb13u3	2.84.4-3~deb13u5	1
nutanix/cn-rwx-operator :1.1.0	0082e0cebd42	glib2@2.80.4-12.el10_2.13	0:2.80.4-12.el10_2.22	1
omecproject/cdn-antmedia :1.0.0	b4ae7d0d6b74	glib2.0@2.56.4-0ubuntu0.18.04.2	no fix listed	1
omecproject/mme-exporter :paging-latest	bcc5f19fd676	glib2.0@2.56.4-0ubuntu0.18.04.4	no fix listed	1
omecproject/onos-progran :1.0.0	5715e5648aa0	glib2.0@2.48.2-0ubuntu1	no fix listed	1
omecproject/progran-synchronizer :comac-1.0.0	d109a8e57e71	glib2.0@2.48.2-0ubuntu4.1	no fix listed	1
oneuptime/probe :release	6b2d98713711	glib2.0@2.74.6-2+deb12u9	no fix listed	1
onyxdotapp/onyx-backend :latest	473fdffe4e67	glib2.0@2.84.4-3~deb13u3	2.84.4-3~deb13u5	1
opea/codegen-ui :1.0	2bee4eb66f3e	glib2.0@2.74.6-2	no fix listed	1
opea/codetrans-ui :1.0	3ef121f34610	glib2.0@2.74.6-2	no fix listed	1