CVE-2026-16118

High

Advisory

Published 17 Jul 2026In the index since 5 Sept 2026

Severity: High; worst across findings
CVSS: 7.1; base score, highest
EPSS: 0.002; 16th percentile
CISA KEV: Not listed; no confirmed exploitation
Charts affected: 811; of 17,787 indexed, latest versions
Container images: 920; deployed by those charts
Fix available: 2 of 2; affected packages

Red Hat Security Advisory: glib2 security update

Carried by container images the latest versions of 811 of 17,787 indexed charts deploy, on 920 images.

Affected package	Affected versions	Fixed in	Images
glib2.0deb	2.40.2-0ubuntu1, 2.48.2-0ubuntu1, 2.48.2-0ubuntu4.1, 2.48.2-0ubuntu4.4+44 more	2.84.4-3~deb13u5	488
glib2rpm	2.56.4-1.el8, 2.56.4-7.el8, 2.56.4-8.el8, 2.56.4-8.el8_2.1+33 more	0:2.56.4-178.el8_10, 0:2.68.4-19.el9_8.10, 0:2.80.4-12.el10_2.22	432

OSV records: DEBIAN-CVE-2026-16118 RHSA-2026:64799 RHSA-2026:64800 RHSA-2026:66451 RLSA-2026:64799 RLSA-2026:64800 RLSA-2026:66451 UBUNTU-CVE-2026-16118

Charts affected

811 by stars

Chart

Latest

Affected images

Radar Score

webhookie-allwebhookie

0.1.2

2 of 3 See more

webhookie-all webhookie 0.1.2

2 of the 3 container images this version deploys carry CVE-2026-16118.

Container image	Digest	Package	Fixed in
hookiesolutions/webhookie :latest	0629694246ba	glib2.0@2.64.6-1~ubuntu20.04.4	no fix listed
quay.io/keycloak/keycloak :14.0.0	3029dc0f1d38	glib2@2.56.4-10.el8_4	0:2.56.4-178.el8_10

Open the chart page →

28,699

juicefs-csi-driverwenerme

0.32.5

1 of 5 See more

juicefs-csi-driver wenerme 0.32.5

1 of the 5 container images this version deploys carry CVE-2026-16118.

Container image	Digest	Package	Fixed in
juicedata/juicefs-csi-driver :v0.32.5	95008ba63318	glib2.0@2.74.6-2+deb12u9	no fix listed

Open the chart page →

8,824

miniowenerme

8.0.10

1 of 1 See more

minio wenerme 8.0.10

1 of the 1 container images this version deploys carry CVE-2026-16118.

Container image	Digest	Package	Fixed in
minio/minio :RELEASE.2021-02-14T04-01-33Z	bd11edda91f3	glib2@2.56.4-8.el8	0:2.56.4-178.el8_10

Open the chart page →

6,915

minio-standalonewenerme

1.0.2

1 of 1 See more

minio-standalone wenerme 1.0.2

1 of the 1 container images this version deploys carry CVE-2026-16118.

Container image	Digest	Package	Fixed in
minio/minio :RELEASE.2022-01-04T07-41-07Z	1484c87239ea	glib2@2.56.4-156.el8	0:2.56.4-178.el8_10

Open the chart page →

6,138

wexa-studiowexa-studio

1.2.0

1 of 15 See more

wexa-studio wexa-studio 1.2.0

1 of the 15 container images this version deploys carry CVE-2026-16118.

Container image	Digest	Package	Fixed in
quay.io/mongodb/mongodb-kubernetes-operator :0.9.0	5ee4bd681085	glib2@2.56.4-166.el8_10	0:2.56.4-178.el8_10

Open the chart page →

14,618

Wordpresswordpress-mariadb

1.0.2

1 of 2 See more

Wordpress wordpress-mariadb 1.0.2

1 of the 2 container images this version deploys carry CVE-2026-16118.

Container image	Digest	Package	Fixed in
library/wordpress :latest	5a93c470ae82	glib2.0@2.84.4-3~deb13u3	2.84.4-3~deb13u5

Open the chart page →

5,635

playwright-synthetic-monitoringwork-adventure

1.0.1

1 of 1 See more

playwright-synthetic-monitoring work-adventure 1.0.1

1 of the 1 container images this version deploys carry CVE-2026-16118.

Container image	Digest	Package	Fixed in
workadventure/playwright-synthetic-monitoring :main	92b664c2a06f	glib2.0@2.72.4-0ubuntu2.3	no fix listed

Open the chart page →

14,172

workshop-pipelinesworkshop-pipelines

0.1.6

1 of 2 See more

workshop-pipelines workshop-pipelines 0.1.6

1 of the 2 container images this version deploys carry CVE-2026-16118.

Container image	Digest	Package	Fixed in
quay.io/maximilianopizarro/workshop-pipelines :latest	e383ba3e0966	glib2@2.56.4-156.el8	0:2.56.4-178.el8_10

Open the chart page →

11,592

keycloakxzaks

2.2.0

1 of 1 See more

keycloakx zaks 2.2.0

1 of the 1 container images this version deploys carry CVE-2026-16118.

Container image	Digest	Package	Fixed in
quay.io/keycloak/keycloak :20.0.3	b8f2a453a17a	glib2@2.56.4-159.el8	0:2.56.4-178.el8_10

Open the chart page →

6,016

posthogzeet

0.23.2

1 of 9 See more

posthog zeet 0.23.2

1 of the 9 container images this version deploys carry CVE-2026-16118.

Container image	Digest	Package	Fixed in
altinity/clickhouse-operator :0.19.0	7a85f522c5bc	glib2@2.56.4-159.el8	0:2.56.4-178.el8_10

Open the chart page →

3,697

zoo-project-druzoo-project

0.10.4

1 of 6 See more

zoo-project-dru zoo-project 0.10.4

1 of the 6 container images this version deploys carry CVE-2026-16118.

Container image	Digest	Package	Fixed in
zooproject/zoo-project :dru-19f3c4eed7c9ec9d1f0375bbe59f9d204a42bd3a	9a507cb7e2dd	glib2.0@2.72.4-0ubuntu2.9	no fix listed

Open the chart page →

7,916

Container images carrying it

920 by charts deploying them

A fixed version is listed for 2 of the 2 affected packages.

Container image	Digest	Package	Fixed in	Used by
opea/docsum-ui :1.0	7f854e9bffaf	glib2.0@2.74.6-2	no fix listed	1
opea/speecht5 :1.0	249afad3d268	glib2.0@2.74.6-2+deb12u3	no fix listed	1
openaev/platform :3.260904.0	0a12ce8b3db9	glib2.0@2.80.0-6ubuntu3.8	no fix listed	1
opencsghq/agenticflow :ee-v0.6-5	2f03fead54db	glib2.0@2.74.6-2+deb12u9	no fix listed	1
opencsghq/csgbot :v0.6.7-ee	af7191a9cf8a	glib2.0@2.84.4-3~deb13u3	2.84.4-3~deb13u5	1
opencsghq/label-studio :v2.5.0	47e22aa71870	glib2.0@2.84.4-3~deb13u3	2.84.4-3~deb13u5	1
opencsghq/label-studio :v2.4.0	b4e849fcf94a	glib2.0@2.84.4-3~deb13u3	2.84.4-3~deb13u5	1
opendatacube/explorer :latest	120457ffcd69	glib2.0@2.80.0-6ubuntu3.4	no fix listed	1
opendatacube/pipelines :wofs-1.22	5d810e8504b8	glib2.0@2.56.3-0ubuntu0.18.04.1	no fix listed	1
opendatacube/restcube :latest	91870111837c	glib2.0@2.56.4-0ubuntu0.18.04.2	no fix listed	1
opendatacube/wms :latest	1b90cdf68831	glib2.0@2.56.4-0ubuntu0.18.04.2	no fix listed	1
opendatacube/wps :latest	80df355a660b	glib2.0@2.72.4-0ubuntu2.5	no fix listed	1
openebs/rawfile-localpv :v0.15.2	a39ef27ea28b	glib2.0@2.84.4-3~deb13u3	2.84.4-3~deb13u5	1
openelevation/open-elevation :latest	82fb21612e86	glib2.0@2.64.6-1~ubuntu20.04.4	no fix listed	1
openhab/openhab :5.2.1	bfd4a60e90da	glib2.0@2.84.4-3~deb13u3	2.84.4-3~deb13u5	1
openkm/openkm-ce :6.3.11	3bc465a7461b	glib2.0@2.64.6-1~ubuntu20.04.4	no fix listed	1
opennms/sentinel :36.0.2	88869082a14f	glib2@2.80.4-12.el10_2.13	0:2.80.4-12.el10_2.22	1
openproject/hocuspocus :release-338001b2	88dc1359dfb5	glib2.0@2.74.6-2+deb12u6	no fix listed	1
openproject/openproject :17.8.0-slim	48952034215d	glib2.0@2.84.4-3~deb13u3	2.84.4-3~deb13u5	1
openthread/otbr :latest	f307f59f6432	glib2.0@2.56.4-0ubuntu0.18.04.9	no fix listed	1
openwhisk/ow-utils :1.0.0	c80dba0de3aa	glib2.0@2.56.4-0ubuntu0.18.04.6	no fix listed	1
opsmx11/issuegen :v2.1.0	5c50ca123d88	glib2.0@2.40.2-0ubuntu1	no fix listed	1
owncloud/server :10.15.0	51d9b74fc2a8	glib2.0@2.64.6-1~ubuntu20.04.7	no fix listed	1
owncloud/server :10.16.2	74c53d341076	glib2.0@2.72.4-0ubuntu2.9	no fix listed	1
owncloud/server :10.16.3	b3f9efdcd7f7	glib2.0@2.72.4-0ubuntu2.9	no fix listed	1
penpotapp/backend :2.2.1	47853d9bb9dd	glib2.0@2.72.4-0ubuntu2.3	no fix listed	1
penpotapp/exporter :2.2.1	5c835ffd87ab	glib2.0@2.72.4-0ubuntu2.3	no fix listed	1
penpotapp/exporter :2.17.2	72a8061e8806	glib2.0@2.88.0-1	no fix listed	1
percona/percona-postgresql-operator :2.8.0	6cce2698d3f5	glib2@2.68.4-18.el9_7	0:2.68.4-19.el9_8.10	1
percona/percona-server-mongodb-operator :1.20.1	d09453ce7886	glib2@2.68.4-16.el9	0:2.68.4-19.el9_8.10	1
percona/percona-server-mongodb-operator :1.23.0	feaff989e253	glib2@2.80.4-12.el10_2.14	0:2.80.4-12.el10_2.22	1
percona/percona-server-mysql-operator :1.2.0	28bfc38c1d4b	glib2@2.68.4-19.el9_8.1	0:2.68.4-19.el9_8.10	1
percona/percona-xtradb-cluster :8.0.32-24.2	1f978ab8912e	glib2@2.56.4-158.el8_6.1	0:2.56.4-178.el8_10	1
percona/percona-xtradb-cluster-operator :1.14.0	3232ae01d0ff	glib2@2.68.4-11.el9	0:2.68.4-19.el9_8.10	1
percona/percona-xtradb-cluster-operator :1.20.0	ac4d0995c71e	glib2@2.68.4-19.el9_8.1	0:2.68.4-19.el9_8.10	1
phan2410/falcon-asgi-server :0.1.0	4a86d138832d	glib2.0@2.74.6-2+deb12u5	no fix listed	1
phntom/mattermost-team-edition :9.3.0	51cf9da4aa2e	glib2.0@2.72.4-0ubuntu2.2	no fix listed	1
photoprism/photoprism :220629-jammy	2954334adbda	glib2.0@2.72.1-1	no fix listed	1
photoprism/photoprism :260601	650c6ad5a651	glib2.0@2.88.0-1	no fix listed	1
photoprism/photoprism :260728	958642220223	glib2.0@2.88.0-1	no fix listed	1
photoprism/photoprism :240711-ce	fc6fd632ca74	glib2.0@2.80.0-6ubuntu3.1	no fix listed	1
pnnlmiscscripts/gitlab-runner-operator :0.1.3-1	155131891741	glib2@2.56.4-7.el8	0:2.56.4-178.el8_10	1
pnnlmiscscripts/ipmi-exporter :1.2.0-1	81e18992d8e3	glib2@2.56.4-161.el8	0:2.56.4-178.el8_10	1
pnnlmiscscripts/tenant-namespace-operator :0.1.24-1	8af4b7551d40	glib2@2.56.4-161.el8	0:2.56.4-178.el8_10	1
posit/package-manager :2026.09.0-ubuntu-24.04	527493ef621b	glib2.0@2.80.0-6ubuntu3.8	no fix listed	1
pretix/standalone :2026.7.0	5df3b7aa852e	glib2.0@2.84.4-3~deb13u3	2.84.4-3~deb13u5	1
project2team4/react :latest	3ff031a08887	glib2.0@2.64.6-1~ubuntu20.04.4	no fix listed	1
pschiffe/pdns-admin :0.4.1	37ebba8c2b8f	glib2@2.68.4-19.el9_8.2	0:2.68.4-19.el9_8.10	1
qonstrukt/php :8.4-v8-apache	089af7925aa1	glib2.0@2.80.0-6ubuntu3.8	no fix listed	1
razzy10/product-service :latest	702e411956db	glib2@2.68.4-16.el9_6.2	0:2.68.4-19.el9_8.10	1