CVE-2026-22801
HighAdvisory
Published 12 Jan 2026In the index since 5 Sept 2026
- Severity
- High
- worst across findings
- CVSS
- 7.8
- base score, highest
- EPSS
- 0.001
- 3rd percentile
- CISA KEV
- Not listed
- no confirmed exploitation
- Charts affected
- 640
- of 17,787 indexed, latest versions
- Container images
- 583
- deployed by those charts
- Fix available
- 2 of 2
- affected packages
The matching OSV records carry no description.
Carried by container images the latest versions of 640 of 17,787 indexed charts deploy, on 583 images.
| Affected package | Affected versions | Fixed in | Images |
|---|---|---|---|
| libpng1.6deb | 1.6.34-1ubuntu0.18.04.1, 1.6.34-1ubuntu0.18.04.2, 1.6.37-2, 1.6.37-3build5+6 more | 1.6.34-1ubuntu0.18.04.2+esm2, 1.6.37-2ubuntu0.1~esm2, 1.6.37-3ubuntu0.3, 1.6.39-2+deb12u2+3 more | 472 |
| libpngapk | 1.6.43-r0, 1.6.44-r0, 1.6.45-r0, 1.6.47-r0+1 more | 1.6.54-r0 | 111 |
- OSV records
- ALPINE-CVE-2026-22801DEBIAN-CVE-2026-22801UBUNTU-CVE-2026-22801
- Also known as
- USN-7963-1, USN-8035-1
Charts affected
640 by stars
Container images carrying it
583 by charts deploying them
A fixed version is listed for 2 of the 2 affected packages.
| Container image | Digest | Package | Fixed in | Used by |
|---|---|---|---|---|
| ghcr.io/ | 3fbe4c29d14c | libpng1.6 | 1.6.37-2ubuntu0.1~esm2 | 1 |
| ghcr.io/ | 26c51e44d932 | libpng | 1.6.54-r0 | 1 |
| ghcr.io/ | 9a5a3eb4a213 | libpng | 1.6.54-r0 | 1 |
| ghcr.io/ | cc4975f1a0be | libpng | 1.6.54-r0 | 1 |
| ghcr.io/ | dab0e07502a3 | libpng | 1.6.54-r0 | 1 |
| ghcr.io/ | dc6384d10cc8 | libpng | 1.6.54-r0 | 1 |
| ghcr.io/ | 8e53861be292 | libpng1.6 | 1.6.39-2+deb12u2 | 1 |
| ghcr.io/ | f8d06a32b1b2 | libpng1.6 | 1.6.48-1+deb13u2 | 1 |
| ghcr.io/ | 4447636e8102 | libpng | 1.6.54-r0 | 1 |
| ghcr.io/ | b52ff07f9f0c | libpng1.6 | 1.6.34-1ubuntu0.18.04.2+esm2 | 1 |
| ghcr.io/ | dab685e668d9 | libpng1.6 | 1.6.43-5ubuntu0.3 | 1 |
| ghcr.io/ | 4569cae83c70 | libpng1.6 | 1.6.43-5ubuntu0.3 | 1 |
| ghcr.io/ | 4d763d58f11d | libpng1.6 | 1.6.39-2+deb12u2 | 1 |
| ghcr.io/ | 6047599cd78e | libpng1.6 | 1.6.37-2ubuntu0.1~esm2 | 1 |
| ghcr.io/ | fdb5501cdfb9 | libpng1.6 | 1.6.37-2ubuntu0.1~esm2 | 1 |
| ghcr.io/ | 54ebc1f90963 | libpng1.6 | 1.6.37-2ubuntu0.1~esm2 | 1 |
| ghcr.io/ | ef3670f7e0a8 | libpng1.6 | 1.6.37-2ubuntu0.1~esm2 | 1 |
| ghcr.io/ | 0eb230e2381a | libpng1.6 | 1.6.37-3ubuntu0.3 | 1 |
| ghcr.io/ | 292b3614670f | libpng1.6 | 1.6.37-2ubuntu0.1~esm2 | 1 |
| ghcr.io/ | abd7d6b11b1b | libpng | 1.6.54-r0 | 1 |
| ghcr.io/ | f575a34ed3f8 | libpng | 1.6.54-r0 | 1 |
| ghcr.io/ | 865ff4da5686 | libpng1.6 | 1.6.37-2ubuntu0.1~esm2 | 1 |
| ghcr.io/ | 24efef013a53 | libpng1.6 | 1.6.37-2ubuntu0.1~esm2 | 1 |
| ghcr.io/ | e28e0e7de11b | libpng1.6 | 1.6.37-2ubuntu0.1~esm2 | 1 |
| ghcr.io/ | 01563adc95fd | libpng1.6 | 1.6.37-2ubuntu0.1~esm2 | 1 |
| ghcr.io/ | 2b92df1143b9 | libpng1.6 | 1.6.37-2ubuntu0.1~esm2 | 1 |
| ghcr.io/ | 600221f0f43f | libpng1.6 | 1.6.37-2ubuntu0.1~esm2 | 1 |
| ghcr.io/ | a85e03d8bc1d | libpng1.6 | 1.6.37-2ubuntu0.1~esm2 | 1 |
| ghcr.io/ | ed86db9f0efe | libpng1.6 | 1.6.39-2+deb12u2 | 1 |
| ghcr.io/ | baa4fa9549dc | libpng1.6 | 1.6.34-1ubuntu0.18.04.2+esm2 | 1 |
| ghcr.io/ | cc795b254b73 | libpng | 1.6.54-r0 | 1 |
| ghcr.io/ | f7b5d20c5e42 | libpng | 1.6.54-r0 | 1 |
| ghcr.io/ | 981aa4c109e1 | libpng1.6 | 1.6.43-5ubuntu0.3 | 1 |
| ghcr.io/ | c6ab95ca9130 | libpng1.6 | 1.6.39-2+deb12u2 | 1 |
| ghcr.io/ | fae3c1f04311 | libpng1.6 | 1.6.48-1+deb13u2 | 1 |
| ghcr.io/ | 8be69156acbb | libpng1.6 | 1.6.48-1+deb13u2 | 1 |
| ghcr.io/ | 3522e8a7a8f0 | libpng1.6 | 1.6.39-2+deb12u2 | 1 |
| ghcr.io/ | f8c7afdcf439 | libpng1.6 | 1.6.39-2+deb12u2 | 1 |
| ghcr.io/ | a1a7f507f6ae | libpng1.6 | 1.6.39-2+deb12u2 | 1 |
| ghcr.io/ | ce85ef0ce665 | libpng1.6 | 1.6.39-2+deb12u2 | 1 |
| ghcr.io/ | 571f87e528ea | libpng | 1.6.54-r0 | 1 |
| ghcr.io/ | 4e322858fe56 | libpng1.6 | 1.6.39-2+deb12u2 | 1 |
| ghcr.io/ | 85c9935ff31b | libpng1.6 | 1.6.39-2+deb12u2 | 1 |
| ghcr.io/ | a59e5eead495 | libpng1.6 | 1.6.43-5ubuntu0.3 | 1 |
| ghcr.io/ | e6c593fe75eb | libpng1.6 | 1.6.43-5ubuntu0.3 | 1 |
| ghcr.io/ | afb3e9282952 | libpng1.6 | 1.6.37-3ubuntu0.3 | 1 |
| ghcr.io/ | ff2af53897e7 | libpng1.6 | 1.6.37-2ubuntu0.1~esm2 | 1 |
| ghcr.io/ | 0642357c5dbd | libpng1.6 | 1.6.39-2+deb12u2 | 1 |
| ghcr.io/ | 57ad9565bff3 | libpng1.6 | 1.6.48-1+deb13u2 | 1 |
| ghcr.io/ | 665f2f5cc548 | libpng1.6 | 1.6.48-1+deb13u2 | 1 |