CVE-2026-16118

High

Advisory

Published 17 Jul 2026In the index since 5 Sept 2026

Severity: High; worst across findings
CVSS: 7.1; base score, highest
EPSS: 0.002; 16th percentile
CISA KEV: Not listed; no confirmed exploitation
Charts affected: 811; of 17,787 indexed, latest versions
Container images: 920; deployed by those charts
Fix available: 2 of 2; affected packages

Red Hat Security Advisory: glib2 security update

Carried by container images the latest versions of 811 of 17,787 indexed charts deploy, on 920 images.

Affected package	Affected versions	Fixed in	Images
glib2.0deb	2.40.2-0ubuntu1, 2.48.2-0ubuntu1, 2.48.2-0ubuntu4.1, 2.48.2-0ubuntu4.4+44 more	2.84.4-3~deb13u5	488
glib2rpm	2.56.4-1.el8, 2.56.4-7.el8, 2.56.4-8.el8, 2.56.4-8.el8_2.1+33 more	0:2.56.4-178.el8_10, 0:2.68.4-19.el9_8.10, 0:2.80.4-12.el10_2.22	432

OSV records: DEBIAN-CVE-2026-16118 RHSA-2026:64799 RHSA-2026:64800 RHSA-2026:66451 RLSA-2026:64799 RLSA-2026:64800 RLSA-2026:66451 UBUNTU-CVE-2026-16118

Charts affected

811 by stars

Chart

Latest

Affected images

Radar Score

webhookie-allwebhookie

0.1.2

2 of 3 See more

webhookie-all webhookie 0.1.2

2 of the 3 container images this version deploys carry CVE-2026-16118.

Container image	Digest	Package	Fixed in
hookiesolutions/webhookie :latest	0629694246ba	glib2.0@2.64.6-1~ubuntu20.04.4	no fix listed
quay.io/keycloak/keycloak :14.0.0	3029dc0f1d38	glib2@2.56.4-10.el8_4	0:2.56.4-178.el8_10

Open the chart page →

28,699

juicefs-csi-driverwenerme

0.32.5

1 of 5 See more

juicefs-csi-driver wenerme 0.32.5

1 of the 5 container images this version deploys carry CVE-2026-16118.

Container image	Digest	Package	Fixed in
juicedata/juicefs-csi-driver :v0.32.5	95008ba63318	glib2.0@2.74.6-2+deb12u9	no fix listed

Open the chart page →

8,824

miniowenerme

8.0.10

1 of 1 See more

minio wenerme 8.0.10

1 of the 1 container images this version deploys carry CVE-2026-16118.

Container image	Digest	Package	Fixed in
minio/minio :RELEASE.2021-02-14T04-01-33Z	bd11edda91f3	glib2@2.56.4-8.el8	0:2.56.4-178.el8_10

Open the chart page →

6,915

minio-standalonewenerme

1.0.2

1 of 1 See more

minio-standalone wenerme 1.0.2

1 of the 1 container images this version deploys carry CVE-2026-16118.

Container image	Digest	Package	Fixed in
minio/minio :RELEASE.2022-01-04T07-41-07Z	1484c87239ea	glib2@2.56.4-156.el8	0:2.56.4-178.el8_10

Open the chart page →

6,138

wexa-studiowexa-studio

1.2.0

1 of 15 See more

wexa-studio wexa-studio 1.2.0

1 of the 15 container images this version deploys carry CVE-2026-16118.

Container image	Digest	Package	Fixed in
quay.io/mongodb/mongodb-kubernetes-operator :0.9.0	5ee4bd681085	glib2@2.56.4-166.el8_10	0:2.56.4-178.el8_10

Open the chart page →

14,618

Wordpresswordpress-mariadb

1.0.2

1 of 2 See more

Wordpress wordpress-mariadb 1.0.2

1 of the 2 container images this version deploys carry CVE-2026-16118.

Container image	Digest	Package	Fixed in
library/wordpress :latest	5a93c470ae82	glib2.0@2.84.4-3~deb13u3	2.84.4-3~deb13u5

Open the chart page →

5,635

playwright-synthetic-monitoringwork-adventure

1.0.1

1 of 1 See more

playwright-synthetic-monitoring work-adventure 1.0.1

1 of the 1 container images this version deploys carry CVE-2026-16118.

Container image	Digest	Package	Fixed in
workadventure/playwright-synthetic-monitoring :main	92b664c2a06f	glib2.0@2.72.4-0ubuntu2.3	no fix listed

Open the chart page →

14,172

workshop-pipelinesworkshop-pipelines

0.1.6

1 of 2 See more

workshop-pipelines workshop-pipelines 0.1.6

1 of the 2 container images this version deploys carry CVE-2026-16118.

Container image	Digest	Package	Fixed in
quay.io/maximilianopizarro/workshop-pipelines :latest	e383ba3e0966	glib2@2.56.4-156.el8	0:2.56.4-178.el8_10

Open the chart page →

11,592

keycloakxzaks

2.2.0

1 of 1 See more

keycloakx zaks 2.2.0

1 of the 1 container images this version deploys carry CVE-2026-16118.

Container image	Digest	Package	Fixed in
quay.io/keycloak/keycloak :20.0.3	b8f2a453a17a	glib2@2.56.4-159.el8	0:2.56.4-178.el8_10

Open the chart page →

6,016

posthogzeet

0.23.2

1 of 9 See more

posthog zeet 0.23.2

1 of the 9 container images this version deploys carry CVE-2026-16118.

Container image	Digest	Package	Fixed in
altinity/clickhouse-operator :0.19.0	7a85f522c5bc	glib2@2.56.4-159.el8	0:2.56.4-178.el8_10

Open the chart page →

3,697

zoo-project-druzoo-project

0.10.4

1 of 6 See more

zoo-project-dru zoo-project 0.10.4

1 of the 6 container images this version deploys carry CVE-2026-16118.

Container image	Digest	Package	Fixed in
zooproject/zoo-project :dru-19f3c4eed7c9ec9d1f0375bbe59f9d204a42bd3a	9a507cb7e2dd	glib2.0@2.72.4-0ubuntu2.9	no fix listed

Open the chart page →

7,916

Container images carrying it

920 by charts deploying them

A fixed version is listed for 2 of the 2 affected packages.

Container image	Digest	Package	Fixed in	Used by
redislabs/operator :8.0.18-11	9078e713bb6a	glib2@2.68.4-18.el9_7.1	0:2.68.4-19.el9_8.10	1
resouer/redis-slave :v2	e2f198b49ba7	glib2.0@2.40.2-0ubuntu1	no fix listed	1
rm3l/dev-feed-api :latest	9a7f732245a3	glib2@2.68.4-6.el9	0:2.68.4-19.el9_8.10	1
rm3l/mac-oui :1.8.0	3a5e1f95c132	glib2@2.56.4-161.el8	0:2.56.4-178.el8_10	1
rosette/root-rli :7.23.21.c82.0	a4467d3bb211	glib2@2.56.4-169.el8_10	0:2.56.4-178.el8_10	1
roundcube/roundcubemail :1.6.16-apache-nonroot	17d9d9580962	glib2.0@2.84.4-3~deb13u3	2.84.4-3~deb13u5	1
rspamd/rspamd :4.1.4	e870599c970d	glib2.0@2.84.4-3~deb13u3	2.84.4-3~deb13u5	1
ryshe/terraria :latest	b1c89f7f359a	glib2.0@2.74.6-2+deb12u8	no fix listed	1
ryuunosukeds3/nadeko-bot-docker :latest	c0398f13e8a9	glib2.0@2.72.4-0ubuntu2.4	no fix listed	1
sarwansharma/minio :v3	59d1da9385d1	glib2@2.56.4-158.el8	0:2.56.4-178.el8_10	1
sashafefler/spacecapybara_app :latest	f96d7804c0ca	glib2.0@2.74.6-2+deb12u3	no fix listed	1
sbs20/scanservjs :release-v3.0.3	dad1fd6e9a98	glib2.0@2.74.6-2	no fix listed	1
scholtz2/algorand-participation-aramidmain-extended :4.4.1-stable	f12ce1cfb72e	glib2.0@2.72.4-0ubuntu2.3	no fix listed	1
scholtz2/algorand-participation-mainnet-extended :4.4.1-stable	5aaa5d4ab8b8	glib2.0@2.72.4-0ubuntu2.3	no fix listed	1
scholtz2/algorand-participation-voimain-extended :4.4.1-stable	64966de56d9f	glib2.0@2.72.4-0ubuntu2.3	no fix listed	1
scholtz2/algorand-relay-mainnet :4.4.1-stable	e9af7d8ff6bb	glib2.0@2.80.0-6ubuntu3.4	no fix listed	1
scholtz2/aramid-algo-follow-node :v4.3.0-stable	1ec63eca86b6	glib2.0@2.80.0-6ubuntu3.4	no fix listed	1
scholtz2/aramid-algo-node :v4.4.1-stable	70263d8fab5b	glib2.0@2.80.0-6ubuntu3.4	no fix listed	1
scholtz2/aramid-conduit :v1.9.0-stable	3a3b3d3277d2	glib2.0@2.88.0-1	no fix listed	1
scholtz2/aramid-indexer :v3.9.0-stable	6770214bc881	glib2.0@2.88.0-1	no fix listed	1
scrapinghub/splash :3.4.1	a5f89bc84606	glib2.0@2.56.4-0ubuntu0.18.04.4	no fix listed	1
seafileltd/seafile-mc :9.0.10	6693911bcc40	glib2.0@2.64.6-1~ubuntu20.04.3	no fix listed	1
seafileltd/seafile-mc :10.0.1	70628f29c663	glib2.0@2.64.6-1~ubuntu20.04.6	no fix listed	1
seafileltd/seafile-mc :9.0.9	7ac833196f60	glib2.0@2.64.6-1~ubuntu20.04.3	no fix listed	1
seafileltd/seafile-mc :11.0.12	d0c66e4621bd	glib2.0@2.72.4-0ubuntu2.3	no fix listed	1
seafileltd/seafile-mc :8.0.7	ed0fcda5e6a9	glib2.0@2.64.6-1~ubuntu20.04.3	no fix listed	1
seldonio/seldon-core-operator :1.19.0	544e3bf71bd1	glib2@2.68.4-18.el9_7.1	0:2.68.4-19.el9_8.10	1
seldonio/seldon-request-logger :1.11.2	4e985d2006a8	glib2@2.56.4-10.el8_4.1	0:2.56.4-178.el8_10	1
selenium/node-chrome :4.48.0-20260905	5ac71fd8dd1e	glib2.0@2.80.0-6ubuntu3.8	no fix listed	1
selenium/node-firefox :4.48.0-20260905	74a5c1c90f95	glib2.0@2.80.0-6ubuntu3.8	no fix listed	1
shenxn/protonmail-bridge :1.8.7-1	acf31af7c111	glib2.0@2.56.4-0ubuntu0.18.04.8	no fix listed	1
sigma2as/minio :20240306-3a2e4f5	c284ead9ec3e	glib2@2.56.4-158.el8	0:2.56.4-178.el8_10	1
signalen/backend :2.50.14	760256000738	glib2.0@2.74.6-2+deb12u9	no fix listed	1
sismics/docs :v1.10	f4b0ef019cf1	glib2.0@2.56.2-0ubuntu0.18.04.2	no fix listed	1
sissbruecker/linkding :1.41.0-plus	a222fb777e1f	glib2.0@2.74.6-2+deb12u6	no fix listed	1
snipe/snipe-it :v6.0.14	55fb7636a98c	glib2.0@2.64.6-1~ubuntu20.04.4	no fix listed	1
socialmediamacroscope/autophrase :0.1.5	70fb11d4f531	glib2.0@2.64.6-1~ubuntu20.04.6	no fix listed	1
socialmediamacroscope/collect_reddit_comment :0.1.2	19d3d26d53ee	glib2.0@2.56.4-0ubuntu0.18.04.9	no fix listed	1
socialmediamacroscope/histogram :0.1.2	6418f9bdb4d2	glib2.0@2.74.6-2	no fix listed	1
socialmediamacroscope/image_crawler :0.1.2	f508216be63c	glib2.0@2.56.4-0ubuntu0.18.04.9	no fix listed	1
socialmediamacroscope/network_analysis :0.1.3	b351c21422e6	glib2.0@2.74.6-2	no fix listed	1
socialmediamacroscope/preprocessing :0.1.3	ca863306314b	glib2.0@2.74.6-2	no fix listed	1
socialmediamacroscope/topic_modeling :0.1.3	fa490acac2f8	glib2.0@2.74.6-2	no fix listed	1
someblackmagic/k8s-testing-multitool :v0.1.0	6eca64b6b440	glib2.0@2.64.6-1~ubuntu20.04.4	no fix listed	1
sonatype/nexus3 :3.53.0	4bd975493104	glib2@2.56.4-159.el8	0:2.56.4-178.el8_10	1
sonatype/nexus3 :3.58.1	586060431b64	glib2@2.56.4-161.el8	0:2.56.4-178.el8_10	1
sondresjo/garge-api :v2.12.6	f41e452800ff	glib2.0@2.80.0-6ubuntu3.8	no fix listed	1
sonroyaalmerol/docker-sogo :5.12.4	3f60f3abe990	glib2.0@2.84.4-3~deb13u2	2.84.4-3~deb13u5	1
speckle/speckle-preview-service :2.26.3	092384dba45d	glib2.0@2.74.6-2+deb12u7	no fix listed	1
speckle/speckle-preview-service :2.20.2-branch.testing4.134160-9fad4b2	1f897ca906ea	glib2.0@2.74.6-2+deb12u3	no fix listed	1