CVE-2026-16118

High

Advisory

Published 17 Jul 2026In the index since 5 Sept 2026

Severity: High; worst across findings
CVSS: 7.1; base score, highest
EPSS: 0.002; 16th percentile
CISA KEV: Not listed; no confirmed exploitation
Charts affected: 813; of 17,781 indexed, latest versions
Container images: 921; deployed by those charts
Fix available: 2 of 2; affected packages

Red Hat Security Advisory: glib2 security update

Carried by container images the latest versions of 813 of 17,781 indexed charts deploy, on 921 images.

Affected package	Affected versions	Fixed in	Images
glib2.0deb	2.40.2-0ubuntu1, 2.48.2-0ubuntu1, 2.48.2-0ubuntu4.1, 2.48.2-0ubuntu4.4+44 more	2.84.4-3~deb13u5	486
glib2rpm	2.56.4-1.el8, 2.56.4-7.el8, 2.56.4-8.el8, 2.56.4-8.el8_2.1+33 more	0:2.56.4-178.el8_10, 0:2.68.4-19.el9_8.10, 0:2.80.4-12.el10_2.22	435

OSV records: DEBIAN-CVE-2026-16118 RHSA-2026:64799 RHSA-2026:64800 RHSA-2026:66451 RLSA-2026:64799 RLSA-2026:64800 RLSA-2026:66451 UBUNTU-CVE-2026-16118

Charts affected

813 by stars

Chart

Latest

Affected images

Radar Score

webhookiewebhookie

0.1.2

1 of 1 See more

webhookie webhookie 0.1.2

1 of the 1 container images this version deploys carry CVE-2026-16118.

Container image	Digest	Package	Fixed in
hookiesolutions/webhookie :latest	0629694246ba	glib2.0@2.64.6-1~ubuntu20.04.4	no fix listed

Open the chart page →

14,364

webhookie-allwebhookie

0.1.2

2 of 3 See more

webhookie-all webhookie 0.1.2

2 of the 3 container images this version deploys carry CVE-2026-16118.

Container image	Digest	Package	Fixed in
hookiesolutions/webhookie :latest	0629694246ba	glib2.0@2.64.6-1~ubuntu20.04.4	no fix listed
quay.io/keycloak/keycloak :14.0.0	3029dc0f1d38	glib2@2.56.4-10.el8_4	0:2.56.4-178.el8_10

Open the chart page →

28,605

hazelcastwenerme

5.10.2

1 of 2 See more

hazelcast wenerme 5.10.2

1 of the 2 container images this version deploys carry CVE-2026-16118.

Container image	Digest	Package	Fixed in
hazelcast/management-center :5.5.2	991ddb27c251	glib2@2.68.4-19.el9_8.9	0:2.68.4-19.el9_8.10

Open the chart page →

2,634

juicefs-csi-driverwenerme

0.32.5

1 of 5 See more

juicefs-csi-driver wenerme 0.32.5

1 of the 5 container images this version deploys carry CVE-2026-16118.

Container image	Digest	Package	Fixed in
juicedata/juicefs-csi-driver :v0.32.5	95008ba63318	glib2.0@2.74.6-2+deb12u9	no fix listed

Open the chart page →

9,117

miniowenerme

8.0.10

1 of 1 See more

minio wenerme 8.0.10

1 of the 1 container images this version deploys carry CVE-2026-16118.

Container image	Digest	Package	Fixed in
minio/minio :RELEASE.2021-02-14T04-01-33Z	bd11edda91f3	glib2@2.56.4-8.el8	0:2.56.4-178.el8_10

Open the chart page →

6,915

minio-standalonewenerme

1.0.2

1 of 1 See more

minio-standalone wenerme 1.0.2

1 of the 1 container images this version deploys carry CVE-2026-16118.

Container image	Digest	Package	Fixed in
minio/minio :RELEASE.2022-01-04T07-41-07Z	1484c87239ea	glib2@2.56.4-156.el8	0:2.56.4-178.el8_10

Open the chart page →

6,138

wexa-studiowexa-studio

1.2.0

1 of 15 See more

wexa-studio wexa-studio 1.2.0

1 of the 15 container images this version deploys carry CVE-2026-16118.

Container image	Digest	Package	Fixed in
quay.io/mongodb/mongodb-kubernetes-operator :0.9.0	5ee4bd681085	glib2@2.56.4-166.el8_10	0:2.56.4-178.el8_10

Open the chart page →

14,983

Wordpresswordpress-mariadb

1.0.2

1 of 2 See more

Wordpress wordpress-mariadb 1.0.2

1 of the 2 container images this version deploys carry CVE-2026-16118.

Container image	Digest	Package	Fixed in
library/wordpress :latest	5a93c470ae82	glib2.0@2.84.4-3~deb13u3	2.84.4-3~deb13u5

Open the chart page →

5,560

playwright-synthetic-monitoringwork-adventure

1.0.1

1 of 1 See more

playwright-synthetic-monitoring work-adventure 1.0.1

1 of the 1 container images this version deploys carry CVE-2026-16118.

Container image	Digest	Package	Fixed in
workadventure/playwright-synthetic-monitoring :main	92b664c2a06f	glib2.0@2.72.4-0ubuntu2.3	no fix listed

Open the chart page →

14,100

workshop-pipelinesworkshop-pipelines

0.1.6

1 of 2 See more

workshop-pipelines workshop-pipelines 0.1.6

1 of the 2 container images this version deploys carry CVE-2026-16118.

Container image	Digest	Package	Fixed in
quay.io/maximilianopizarro/workshop-pipelines :latest	e383ba3e0966	glib2@2.56.4-156.el8	0:2.56.4-178.el8_10

Open the chart page →

11,577

keycloakxzaks

2.2.0

1 of 1 See more

keycloakx zaks 2.2.0

1 of the 1 container images this version deploys carry CVE-2026-16118.

Container image	Digest	Package	Fixed in
quay.io/keycloak/keycloak :20.0.3	b8f2a453a17a	glib2@2.56.4-159.el8	0:2.56.4-178.el8_10

Open the chart page →

6,016

posthogzeet

0.23.2

1 of 9 See more

posthog zeet 0.23.2

1 of the 9 container images this version deploys carry CVE-2026-16118.

Container image	Digest	Package	Fixed in
altinity/clickhouse-operator :0.19.0	7a85f522c5bc	glib2@2.56.4-159.el8	0:2.56.4-178.el8_10

Open the chart page →

3,697

zoo-project-druzoo-project

0.10.4

1 of 6 See more

zoo-project-dru zoo-project 0.10.4

1 of the 6 container images this version deploys carry CVE-2026-16118.

Container image	Digest	Package	Fixed in
zooproject/zoo-project :dru-19f3c4eed7c9ec9d1f0375bbe59f9d204a42bd3a	9a507cb7e2dd	glib2.0@2.72.4-0ubuntu2.9	no fix listed

Open the chart page →

7,849

Container images carrying it

921 by charts deploying them

A fixed version is listed for 2 of the 2 affected packages.

Container image	Digest	Package	Fixed in	Used by
codeurjc/weatherservice :v1.0	b9e2f7234349	glib2@2.56.4-158.el8_6.1	0:2.56.4-178.el8_10	10
codeurjc/server :v1.0	310bea5b1ee7	glib2@2.56.4-159.el8	0:2.56.4-178.el8_10	8
ghcr.io/paperless-ngx/paperless-ngx :3.1.3	aa810a36942c	glib2.0@2.84.4-3~deb13u3	2.84.4-3~deb13u5	7
public.ecr.aws/aktosecurity/confluentinc-cp-kafka :8.2.2 :8.2.2-1-ubi9	8e01c0305844	glib2@2.68.4-19.el9_8.1	0:2.68.4-19.el9_8.10	7
library/wordpress :7.1.0-apache :latest	5a93c470ae82	glib2.0@2.84.4-3~deb13u3	2.84.4-3~deb13u5	6
flaresolverr/flaresolverr :latest :v3.5.0	139dfee1c6f8	glib2.0@2.74.6-2+deb12u9	no fix listed	5
hyperledger/fabric-ca-tools :latest	4ce6f43ded2e	glib2.0@2.48.2-0ubuntu1	no fix listed	4
hyperledger/fabric-couchdb :0.4.15	f6c724592abf	glib2.0@2.48.2-0ubuntu4.1	no fix listed	4
mastercloudapps/server :v2.23	f3d24dfe2686	glib2@2.56.4-159.el8	0:2.56.4-178.el8_10	4
mastercloudapps/weatherservice :v1.23	de859d29c116	glib2@2.56.4-158.el8_6.1	0:2.56.4-178.el8_10	4
quay.io/strimzi/operator :0.37.0	52f376e64b9b	glib2@2.56.4-161.el8	0:2.56.4-178.el8_10	4
ciscolabs/rtsp-client :latest	a7b60ec88285	glib2.0@2.64.6-1~ubuntu20.04.4	no fix listed	3
ciscolabs/rtsp-server :latest	b59fc10bb821	glib2.0@2.64.6-1~ubuntu20.04.4	no fix listed	3
cockroachdb/cockroach-self-signer-cert :1.10	07a49acec18d	glib2@2.56.4-168.el8_10	0:2.56.4-178.el8_10	3
jacobalberty/unifi :v10.0.162	896c0ab82d33	glib2.0@2.64.6-1~ubuntu20.04.9	no fix listed	3
langflowai/langflow :1.12.0 :latest	65796601f3fc	glib2@2.80.4-12.el10_2.21	0:2.80.4-12.el10_2.22	3
library/node :lts	be23f54a88d3	glib2.0@2.74.6-2+deb12u9	no fix listed	3
minio/minio :RELEASE.2021-02-14T04-01-33Z	bd11edda91f3	glib2@2.56.4-8.el8	0:2.56.4-178.el8_10	3
omecproject/cdn-video-repo :1.0.0 :remote-v3	d59ccb138ffb	glib2.0@2.48.2-0ubuntu4.1	no fix listed	3
solace/solace-pubsub-standard :latest	8e8ad105595e	glib2@2.68.4-19.el9_8.9	0:2.68.4-19.el9_8.10	3
quay.io/devtron/ai-agent :0.0.1	6545dac92173	glib2.0@2.74.6-2+deb12u3	no fix listed	3
quay.io/devtron/clair :4.3.6	75fb847ac045	glib2@2.56.4-156.el8	0:2.56.4-178.el8_10	3
quay.io/devtron/notifier :9804331c-372-39294	709c7da19c5a	glib2.0@2.74.6-2+deb12u7	no fix listed	3
quay.io/openshift/origin-oauth-proxy :4.14	a7dff785d821	glib2@2.56.4-158.el8_6.1	0:2.56.4-178.el8_10	3
quay.io/redhat-cop/kube-rbac-proxy :v0.11.0	c68135620167	glib2@2.56.4-156.el8	0:2.56.4-178.el8_10	3
apache/druid :37.0.0	0116fb802786	glib2.0@2.74.6-2+deb12u8	no fix listed	2
apacherocketmq/rocketmq-dashboard :2.1.0	ce78506bd6fe	glib2@2.68.4-16.el9_6.2	0:2.68.4-19.el9_8.10	2
apache/tika :2.9.2.1-full	ae0b86d3c4d0	glib2.0@2.80.0-6ubuntu3.1	no fix listed	2
cockroachdb/cockroach :v26.3.1	204f131510c7	glib2@2.80.4-12.el10_2.21	0:2.80.4-12.el10_2.22	2
confluentinc/cp-kafka :6.2.11-1-ubi8	ac776fad95a5	glib2@2.56.4-161.el8	0:2.56.4-178.el8_10	2
confluentinc/cp-zookeeper :latest	7610a50b13e7	glib2@2.56.4-165.el8_10	0:2.56.4-178.el8_10	2
confluentinc/cp-zookeeper :6.2.11-1-ubi8	cae577096489	glib2@2.56.4-161.el8	0:2.56.4-178.el8_10	2
gjeanmart/safe-ganache-node :latest	926264c8f2d1	glib2.0@2.74.6-2	no fix listed	2
gotenberg/gotenberg :8.36.0	87c16b9f3642	glib2.0@2.84.4-3~deb13u3	2.84.4-3~deb13u5	2
gotenberg/gotenberg :8 :8.37.0	f29984bd1e22	glib2.0@2.84.4-3~deb13u3	2.84.4-3~deb13u5	2
hazelcast/management-center :5.5.2	991ddb27c251	glib2@2.68.4-19.el9_8.9	0:2.68.4-19.el9_8.10	2
homebridge/homebridge :latest	77c685a40911	glib2.0@2.80.0-6ubuntu3.8	no fix listed	2
hookiesolutions/webhookie :latest	0629694246ba	glib2.0@2.64.6-1~ubuntu20.04.4	no fix listed	2
hyperledger/besu :22.4-openjdk-latest	a674d35eec9a	glib2.0@2.64.6-1~ubuntu20.04.4	no fix listed	2
kurento/kurento-media-server :latest	03c0d34d0828	glib2.0@2.80.0-6ubuntu3.4	no fix listed	2
library/nextcloud :34.0.3 :34.0.3-apache	b97df9e0e1ee	glib2.0@2.84.4-3~deb13u3	2.84.4-3~deb13u5	2
library/python :3.7	eedf63967cdb	glib2.0@2.74.6-2	no fix listed	2
library/redmine :6.1.3-trixie	f474a901faec	glib2.0@2.84.4-3~deb13u3	2.84.4-3~deb13u5	2
library/wordpress :6.8.3-apache :6.8-apache	30bff39330d1	glib2.0@2.84.4-3~deb13u1	2.84.4-3~deb13u5	2
louislam/uptime-kuma :2.5.4	917318f9d7be	glib2.0@2.74.6-2+deb12u9	no fix listed	2
louislam/uptime-kuma :2.3.2	9aeb4e51d038	glib2.0@2.74.6-2+deb12u8	no fix listed	2
louislam/uptime-kuma :2.5.0	a8610b3b4c38	glib2.0@2.74.6-2+deb12u9	no fix listed	2
minio/operator :v4.3.7	54393e03f3b2	glib2@2.56.4-156.el8	0:2.56.4-178.el8_10	2
moreillon/user-manager :v5.0.2	e1c9bfab5c16	glib2.0@2.74.6-2	no fix listed	2
omecproject/mcord-synchronizer :comac-1.0.0	cfdb566dd949	glib2.0@2.48.2-0ubuntu4.1	no fix listed	2