StackRadar

CVE-2026-25646

High

Advisory

Published 10 Feb 2026In the index since 5 Sept 2026
Severity
High
worst across findings
CVSS
8.1
base score, highest
EPSS
0.010
60th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
682
of 17,787 indexed, latest versions
Container images
628
deployed by those charts
Fix available
5 of 5
affected packages

Red Hat Security Advisory: libpng security update

Carried by container images the latest versions of 682 of 17,787 indexed charts deploy, on 628 images.

Affected packageAffected versionsFixed inImages
libpng1.6deb1.6.34-1ubuntu0.18.04.1, 1.6.34-1ubuntu0.18.04.2, 1.6.37-2, 1.6.37-3build5+8 more1.6.34-1ubuntu0.18.04.2+esm2, 1.6.37-2ubuntu0.1~esm2, 1.6.37-3ubuntu0.4, 1.6.39-2+deb12u3+3 more479
libpngapk1.6.43-r0, 1.6.44-r0, 1.6.45-r0, 1.6.47-r0+2 more1.6.55-r0123
libpngdeb1.2.50-1ubuntu2, 1.2.50-1ubuntu2.14.04.2, 1.2.50-1ubuntu2.14.04.3, 1.2.54-1ubuntu1+1 more1.2.50-1ubuntu2.14.04.3+esm1, 1.2.54-1ubuntu1.1+esm220
libpngrpm2:1.5.13-7.el7_22:1.5.13-8.el7_9.25
libpng16rpm1.6.40-150600.1.31.6.40-150600.3.12.11
OSV records
ALPINE-CVE-2026-25646DEBIAN-CVE-2026-25646RHSA-2026:4756UBUNTU-CVE-2026-25646SUSE-SU-2026:0597-1
Also known as
DSA-6138-1, USN-8035-1, USN-8039-1, USN-8081-1

Charts affected

682 by stars
ChartLatestAffected imagesRadar Score
pagespages-brian1.0.02 of 3See more

pages pages-brian 1.0.0

2 of the 3 container images this version deploys carry CVE-2026-25646.

Container imageDigestPackageFixed in
dellcloud/pages:monitor6ba7b22caacd
libpng1.6@1.6.37-2
1.6.37-2ubuntu0.1~esm2
flyway/flyway:6.4.422d97ceb0c47
libpng1.6@1.6.34-1ubuntu0.18.04.2
1.6.34-1ubuntu0.18.04.2+esm2

Open the chart page →

20,190
pagespages-buckll1.0.02 of 3See more

pages pages-buckll 1.0.0

2 of the 3 container images this version deploys carry CVE-2026-25646.

Container imageDigestPackageFixed in
dellcloud/pages:monitor6ba7b22caacd
libpng1.6@1.6.37-2
1.6.37-2ubuntu0.1~esm2
flyway/flyway:6.4.422d97ceb0c47
libpng1.6@1.6.34-1ubuntu0.18.04.2
1.6.34-1ubuntu0.18.04.2+esm2

Open the chart page →

20,190
pagespages-camden1.0.02 of 3See more

pages pages-camden 1.0.0

2 of the 3 container images this version deploys carry CVE-2026-25646.

Container imageDigestPackageFixed in
dellcloud/pages:monitor6ba7b22caacd
libpng1.6@1.6.37-2
1.6.37-2ubuntu0.1~esm2
flyway/flyway:6.4.422d97ceb0c47
libpng1.6@1.6.34-1ubuntu0.18.04.2
1.6.34-1ubuntu0.18.04.2+esm2

Open the chart page →

20,190
pagespages-camden7711.0.02 of 3See more

pages pages-camden771 1.0.0

2 of the 3 container images this version deploys carry CVE-2026-25646.

Container imageDigestPackageFixed in
dellcloud/pages:monitor6ba7b22caacd
libpng1.6@1.6.37-2
1.6.37-2ubuntu0.1~esm2
flyway/flyway:6.4.422d97ceb0c47
libpng1.6@1.6.34-1ubuntu0.18.04.2
1.6.34-1ubuntu0.18.04.2+esm2

Open the chart page →

20,190
pagespages-diarmuidkeane1.0.02 of 3See more

pages pages-diarmuidkeane 1.0.0

2 of the 3 container images this version deploys carry CVE-2026-25646.

Container imageDigestPackageFixed in
dellcloud/pages:monitor6ba7b22caacd
libpng1.6@1.6.37-2
1.6.37-2ubuntu0.1~esm2
flyway/flyway:6.4.422d97ceb0c47
libpng1.6@1.6.34-1ubuntu0.18.04.2
1.6.34-1ubuntu0.18.04.2+esm2

Open the chart page →

20,190
pagespages-draco1.0.02 of 3See more

pages pages-draco 1.0.0

2 of the 3 container images this version deploys carry CVE-2026-25646.

Container imageDigestPackageFixed in
dellcloud/pages:monitor6ba7b22caacd
libpng1.6@1.6.37-2
1.6.37-2ubuntu0.1~esm2
flyway/flyway:6.4.422d97ceb0c47
libpng1.6@1.6.34-1ubuntu0.18.04.2
1.6.34-1ubuntu0.18.04.2+esm2

Open the chart page →

20,190
pagespages-ellora1.0.02 of 3See more

pages pages-ellora 1.0.0

2 of the 3 container images this version deploys carry CVE-2026-25646.

Container imageDigestPackageFixed in
dellcloud/pages:monitor6ba7b22caacd
libpng1.6@1.6.37-2
1.6.37-2ubuntu0.1~esm2
flyway/flyway:6.4.422d97ceb0c47
libpng1.6@1.6.34-1ubuntu0.18.04.2
1.6.34-1ubuntu0.18.04.2+esm2

Open the chart page →

20,190
pagespages-finchley1.0.02 of 3See more

pages pages-finchley 1.0.0

2 of the 3 container images this version deploys carry CVE-2026-25646.

Container imageDigestPackageFixed in
dellcloud/pages:monitor6ba7b22caacd
libpng1.6@1.6.37-2
1.6.37-2ubuntu0.1~esm2
flyway/flyway:6.4.422d97ceb0c47
libpng1.6@1.6.34-1ubuntu0.18.04.2
1.6.34-1ubuntu0.18.04.2+esm2

Open the chart page →

20,190
pagespages-fornax1.0.02 of 3See more

pages pages-fornax 1.0.0

2 of the 3 container images this version deploys carry CVE-2026-25646.

Container imageDigestPackageFixed in
dellcloud/pages:monitor6ba7b22caacd
libpng1.6@1.6.37-2
1.6.37-2ubuntu0.1~esm2
flyway/flyway:6.4.422d97ceb0c47
libpng1.6@1.6.34-1ubuntu0.18.04.2
1.6.34-1ubuntu0.18.04.2+esm2

Open the chart page →

20,190
pagespages-harsh1.0.02 of 3See more

pages pages-harsh 1.0.0

2 of the 3 container images this version deploys carry CVE-2026-25646.

Container imageDigestPackageFixed in
dellcloud/pages:monitor6ba7b22caacd
libpng1.6@1.6.37-2
1.6.37-2ubuntu0.1~esm2
flyway/flyway:6.4.422d97ceb0c47
libpng1.6@1.6.34-1ubuntu0.18.04.2
1.6.34-1ubuntu0.18.04.2+esm2

Open the chart page →

20,190
pagespagesk1.0.02 of 3See more

pages pagesk 1.0.0

2 of the 3 container images this version deploys carry CVE-2026-25646.

Container imageDigestPackageFixed in
dellcloud/pages:monitor6ba7b22caacd
libpng1.6@1.6.37-2
1.6.37-2ubuntu0.1~esm2
flyway/flyway:6.4.422d97ceb0c47
libpng1.6@1.6.34-1ubuntu0.18.04.2
1.6.34-1ubuntu0.18.04.2+esm2

Open the chart page →

20,190
pagespages-microservice-ashim1.0.02 of 3See more

pages pages-microservice-ashim 1.0.0

2 of the 3 container images this version deploys carry CVE-2026-25646.

Container imageDigestPackageFixed in
dellcloud/pages:monitor6ba7b22caacd
libpng1.6@1.6.37-2
1.6.37-2ubuntu0.1~esm2
flyway/flyway:6.4.422d97ceb0c47
libpng1.6@1.6.34-1ubuntu0.18.04.2
1.6.34-1ubuntu0.18.04.2+esm2

Open the chart page →

20,190
pagespages-mihai1.0.02 of 3See more

pages pages-mihai 1.0.0

2 of the 3 container images this version deploys carry CVE-2026-25646.

Container imageDigestPackageFixed in
dellcloud/pages:monitor6ba7b22caacd
libpng1.6@1.6.37-2
1.6.37-2ubuntu0.1~esm2
flyway/flyway:6.4.422d97ceb0c47
libpng1.6@1.6.34-1ubuntu0.18.04.2
1.6.34-1ubuntu0.18.04.2+esm2

Open the chart page →

20,190
pagespages-nivesh1.0.02 of 3See more

pages pages-nivesh 1.0.0

2 of the 3 container images this version deploys carry CVE-2026-25646.

Container imageDigestPackageFixed in
dellcloud/pages:monitor6ba7b22caacd
libpng1.6@1.6.37-2
1.6.37-2ubuntu0.1~esm2
flyway/flyway:6.4.422d97ceb0c47
libpng1.6@1.6.34-1ubuntu0.18.04.2
1.6.34-1ubuntu0.18.04.2+esm2

Open the chart page →

20,190
pagespagessandeepgudu1.0.02 of 3See more

pages pagessandeepgudu 1.0.0

2 of the 3 container images this version deploys carry CVE-2026-25646.

Container imageDigestPackageFixed in
dellcloud/pages:monitor6ba7b22caacd
libpng1.6@1.6.37-2
1.6.37-2ubuntu0.1~esm2
flyway/flyway:6.4.422d97ceb0c47
libpng1.6@1.6.34-1ubuntu0.18.04.2
1.6.34-1ubuntu0.18.04.2+esm2

Open the chart page →

20,190
pagespages-shubhanker1.0.02 of 3See more

pages pages-shubhanker 1.0.0

2 of the 3 container images this version deploys carry CVE-2026-25646.

Container imageDigestPackageFixed in
dellcloud/pages:monitor6ba7b22caacd
libpng1.6@1.6.37-2
1.6.37-2ubuntu0.1~esm2
flyway/flyway:6.4.422d97ceb0c47
libpng1.6@1.6.34-1ubuntu0.18.04.2
1.6.34-1ubuntu0.18.04.2+esm2

Open the chart page →

20,190
pagespages-ssharma09091.0.02 of 3See more

pages pages-ssharma0909 1.0.0

2 of the 3 container images this version deploys carry CVE-2026-25646.

Container imageDigestPackageFixed in
dellcloud/pages:monitor6ba7b22caacd
libpng1.6@1.6.37-2
1.6.37-2ubuntu0.1~esm2
flyway/flyway:6.4.422d97ceb0c47
libpng1.6@1.6.34-1ubuntu0.18.04.2
1.6.34-1ubuntu0.18.04.2+esm2

Open the chart page →

20,190
pagespages-sucharitha1.0.02 of 3See more

pages pages-sucharitha 1.0.0

2 of the 3 container images this version deploys carry CVE-2026-25646.

Container imageDigestPackageFixed in
dellcloud/pages:monitor6ba7b22caacd
libpng1.6@1.6.37-2
1.6.37-2ubuntu0.1~esm2
flyway/flyway:6.4.422d97ceb0c47
libpng1.6@1.6.34-1ubuntu0.18.04.2
1.6.34-1ubuntu0.18.04.2+esm2

Open the chart page →

20,190
pagespages-sudhir1.0.02 of 3See more

pages pages-sudhir 1.0.0

2 of the 3 container images this version deploys carry CVE-2026-25646.

Container imageDigestPackageFixed in
dellcloud/pages:monitor6ba7b22caacd
libpng1.6@1.6.37-2
1.6.37-2ubuntu0.1~esm2
flyway/flyway:6.4.422d97ceb0c47
libpng1.6@1.6.34-1ubuntu0.18.04.2
1.6.34-1ubuntu0.18.04.2+esm2

Open the chart page →

20,190
pagespages-sushi1.0.02 of 3See more

pages pages-sushi 1.0.0

2 of the 3 container images this version deploys carry CVE-2026-25646.

Container imageDigestPackageFixed in
dellcloud/pages:monitor6ba7b22caacd
libpng1.6@1.6.37-2
1.6.37-2ubuntu0.1~esm2
flyway/flyway:6.4.422d97ceb0c47
libpng1.6@1.6.34-1ubuntu0.18.04.2
1.6.34-1ubuntu0.18.04.2+esm2

Open the chart page →

20,190
pagespages-vasanth58141.0.02 of 3See more

pages pages-vasanth5814 1.0.0

2 of the 3 container images this version deploys carry CVE-2026-25646.

Container imageDigestPackageFixed in
dellcloud/pages:monitor6ba7b22caacd
libpng1.6@1.6.37-2
1.6.37-2ubuntu0.1~esm2
flyway/flyway:6.4.422d97ceb0c47
libpng1.6@1.6.34-1ubuntu0.18.04.2
1.6.34-1ubuntu0.18.04.2+esm2

Open the chart page →

20,190
pagespages-vjp1.0.02 of 3See more

pages pages-vjp 1.0.0

2 of the 3 container images this version deploys carry CVE-2026-25646.

Container imageDigestPackageFixed in
dellcloud/pages:monitor6ba7b22caacd
libpng1.6@1.6.37-2
1.6.37-2ubuntu0.1~esm2
flyway/flyway:6.4.422d97ceb0c47
libpng1.6@1.6.34-1ubuntu0.18.04.2
1.6.34-1ubuntu0.18.04.2+esm2

Open the chart page →

20,190
parcial-1parcial-1-chart1.0.01 of 5See more

parcial-1 parcial-1-chart 1.0.0

1 of the 5 container images this version deploys carry CVE-2026-25646.

Container imageDigestPackageFixed in
esteban1930/frontend-1:1.8.0f9078279632c
libpng@1.6.47-r0
1.6.55-r0

Open the chart page →

3,844
home-assistantpascaliskeVerified publisher0.1.11 of 1See more

home-assistant pascaliske 0.1.1

1 of the 1 container images this version deploys carry CVE-2026-25646.

Container imageDigestPackageFixed in
ghcr.io/home-assistant/home-assistant:2025.12.59a5a3eb4a213
libpng@1.6.47-r0
1.6.55-r0

Open the chart page →

4,749
pagespawan-pages1.0.02 of 3See more

pages pawan-pages 1.0.0

2 of the 3 container images this version deploys carry CVE-2026-25646.

Container imageDigestPackageFixed in
dellcloud/pages:monitor6ba7b22caacd
libpng1.6@1.6.37-2
1.6.37-2ubuntu0.1~esm2
flyway/flyway:6.4.422d97ceb0c47
libpng1.6@1.6.34-1ubuntu0.18.04.2
1.6.34-1ubuntu0.18.04.2+esm2

Open the chart page →

20,190
matomopetbattle11.0.11 of 2See more

matomo petbattle 11.0.1

1 of the 2 container images this version deploys carry CVE-2026-25646.

Container imageDigestPackageFixed in
bitnamilegacy/matomo:5.3.2-debian-12-r13f02c000c54b1
libpng1.6@1.6.39-2
1.6.39-2+deb12u3

Open the chart page →

11,061
dummy-servicephanVerified publisher0.3.41 of 1See more

dummy-service phan 0.3.4

1 of the 1 container images this version deploys carry CVE-2026-25646.

Container imageDigestPackageFixed in
phan2410/dummy-service:0.0.89c6ed6de26ca
libpng1.6@1.6.39-2
1.6.39-2+deb12u3

Open the chart page →

5,706
falcon-asgi-serverphanVerified publisher0.1.01 of 1See more

falcon-asgi-server phan 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-25646.

Container imageDigestPackageFixed in
phan2410/falcon-asgi-server:0.1.04a86d138832d
libpng1.6@1.6.39-2
1.6.39-2+deb12u3

Open the chart page →

8,189
phronetisphronetis0.1.271 of 2See more

phronetis phronetis 0.1.27

1 of the 2 container images this version deploys carry CVE-2026-25646.

Container imageDigestPackageFixed in
knspar/phronetis-operator:0.1.60c4f0543ee58
libpng1.6@1.6.39-2
1.6.39-2+deb12u3

Open the chart page →

16,196
seafilephybros-helm-charts4.0.11 of 1See more

seafile phybros-helm-charts 4.0.1

1 of the 1 container images this version deploys carry CVE-2026-25646.

Container imageDigestPackageFixed in
seafileltd/seafile-mc:9.0.97ac833196f60
libpng1.6@1.6.37-2
1.6.37-2ubuntu0.1~esm2

Open the chart page →

22,084
pagespighosh-pages1.0.02 of 3See more

pages pighosh-pages 1.0.0

2 of the 3 container images this version deploys carry CVE-2026-25646.

Container imageDigestPackageFixed in
dellcloud/pages:monitor6ba7b22caacd
libpng1.6@1.6.37-2
1.6.37-2ubuntu0.1~esm2
flyway/flyway:6.4.422d97ceb0c47
libpng1.6@1.6.34-1ubuntu0.18.04.2
1.6.34-1ubuntu0.18.04.2+esm2

Open the chart page →

20,190
subgraph-oraclepinaxVerified publisher0.0.11 of 1See more

subgraph-oracle pinax 0.0.1

1 of the 1 container images this version deploys carry CVE-2026-25646.

Container imageDigestPackageFixed in
ghcr.io/graphprotocol/availability-oracle:sha-28312fd472a25038957
libpng1.6@1.6.39-2
1.6.39-2+deb12u3

Open the chart page →

11,347
pingdom-operatorpingdom-operator0.0.201 of 1See more

pingdom-operator pingdom-operator 0.0.20

1 of the 1 container images this version deploys carry CVE-2026-25646.

Container imageDigestPackageFixed in
ghcr.io/nefelim4ag/pingdom-operator:0.0.15f8c7afdcf439
libpng1.6@1.6.39-2
1.6.39-2+deb12u3

Open the chart page →

11,923
spring-boot-openshiftpiominVerified publisher0.3.111 of 1See more

spring-boot-openshift piomin 0.3.11

1 of the 1 container images this version deploys carry CVE-2026-25646.

Container imageDigestPackageFixed in
piomin/sample-spring-kotlin-microservice:1.1871f784dd6bc
libpng1.6@1.6.37-3build5
1.6.37-3ubuntu0.4

Open the chart page →

7,576
k8s-node-image9-1-24pnnl-miscscripts0.2.1492 of 2See more

k8s-node-image9-1-24 pnnl-miscscripts 0.2.149

2 of the 2 container images this version deploys carry CVE-2026-25646.

Container imageDigestPackageFixed in
pnnlmiscscripts/anaconda9:1714885940.021839-nginx-1cfbc9b70cbf8
libpng@1.6.44-r0
1.6.55-r0
pnnlmiscscripts/k8s-node-image9:1.24.17-nginx-882c8dc938b2f9
libpng@1.6.43-r0
1.6.55-r0

Open the chart page →

1,491
k8s-node-image9-1-25pnnl-miscscripts0.2.1052 of 2See more

k8s-node-image9-1-25 pnnl-miscscripts 0.2.105

2 of the 2 container images this version deploys carry CVE-2026-25646.

Container imageDigestPackageFixed in
pnnlmiscscripts/anaconda9:1714885940.021839-nginx-1cfbc9b70cbf8
libpng@1.6.44-r0
1.6.55-r0
pnnlmiscscripts/k8s-node-image9:1.25.16-nginx-772c202c43c0aa
libpng@1.6.43-r0
1.6.55-r0

Open the chart page →

1,491
k8s-node-image9-1-26pnnl-miscscripts0.2.922 of 2See more

k8s-node-image9-1-26 pnnl-miscscripts 0.2.92

2 of the 2 container images this version deploys carry CVE-2026-25646.

Container imageDigestPackageFixed in
pnnlmiscscripts/anaconda9:1714885940.021839-nginx-1cfbc9b70cbf8
libpng@1.6.44-r0
1.6.55-r0
pnnlmiscscripts/k8s-node-image9:1.26.15-nginx-579785e5b82334
libpng@1.6.43-r0
1.6.55-r0

Open the chart page →

1,491
k8s-node-image9-1-27pnnl-miscscripts0.2.902 of 2See more

k8s-node-image9-1-27 pnnl-miscscripts 0.2.90

2 of the 2 container images this version deploys carry CVE-2026-25646.

Container imageDigestPackageFixed in
pnnlmiscscripts/anaconda9:1714885940.021839-nginx-1cfbc9b70cbf8
libpng@1.6.44-r0
1.6.55-r0
pnnlmiscscripts/k8s-node-image9:1.27.16-nginx-306e1a36d646a3
libpng@1.6.43-r0
1.6.55-r0

Open the chart page →

1,491
k8s-node-image9-1-28pnnl-miscscripts0.2.1022 of 2See more

k8s-node-image9-1-28 pnnl-miscscripts 0.2.102

2 of the 2 container images this version deploys carry CVE-2026-25646.

Container imageDigestPackageFixed in
pnnlmiscscripts/anaconda9:1714885940.021839-nginx-1cfbc9b70cbf8
libpng@1.6.44-r0
1.6.55-r0
pnnlmiscscripts/k8s-node-image9:1.28.15-nginx-72b91d6a46e06
libpng@1.6.43-r0
1.6.55-r0

Open the chart page →

1,491
k8s-node-image9-1-29pnnl-miscscripts0.2.642 of 2See more

k8s-node-image9-1-29 pnnl-miscscripts 0.2.64

2 of the 2 container images this version deploys carry CVE-2026-25646.

Container imageDigestPackageFixed in
pnnlmiscscripts/anaconda9:1714885940.021839-nginx-1cfbc9b70cbf8
libpng@1.6.44-r0
1.6.55-r0
pnnlmiscscripts/k8s-node-image9:1.29.10-nginx-7fcd82530bc8b
libpng@1.6.43-r0
1.6.55-r0

Open the chart page →

1,491
k8s-node-image9-1-30pnnl-miscscripts0.2.561 of 2See more

k8s-node-image9-1-30 pnnl-miscscripts 0.2.56

1 of the 2 container images this version deploys carry CVE-2026-25646.

Container imageDigestPackageFixed in
pnnlmiscscripts/k8s-node-image9:1.30.11-nginx-7f9297eea817d
libpng@1.6.44-r0
1.6.55-r0

Open the chart page →

619
k8s-node-image9-1-31pnnl-miscscripts0.2.271 of 2See more

k8s-node-image9-1-31 pnnl-miscscripts 0.2.27

1 of the 2 container images this version deploys carry CVE-2026-25646.

Container imageDigestPackageFixed in
pnnlmiscscripts/k8s-node-image9:1.31.7-nginx-7e3e189d9d519
libpng@1.6.44-r0
1.6.55-r0

Open the chart page →

619
k8s-oidc-discovery-providerpnnl-miscscripts0.1.21 of 2See more

k8s-oidc-discovery-provider pnnl-miscscripts 0.1.2

1 of the 2 container images this version deploys carry CVE-2026-25646.

Container imageDigestPackageFixed in
library/nginx:1.29.49dd288848f44
libpng1.6@1.6.48-1+deb13u1
1.6.48-1+deb13u3

Open the chart page →

4,260
pod-birdspod-birds0.1.01 of 1See more

pod-birds pod-birds 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-25646.

Container imageDigestPackageFixed in
teknas09/bird-pod:latest12a1fa85c4aa
libpng1.6@1.6.39-2
1.6.39-2+deb12u3

Open the chart page →

12,912
podnat-state-storepodnat-controller0.3.21 of 1See more

podnat-state-store podnat-controller 0.3.2

1 of the 1 container images this version deploys carry CVE-2026-25646.

Container imageDigestPackageFixed in
dgraziotin/nginx-webdav-nononsense:1.23.138f2de42bed0
libpng1.6@1.6.37-2
1.6.37-2ubuntu0.1~esm2

Open the chart page →

9,167
pagesprasanthi1.0.02 of 3See more

pages prasanthi 1.0.0

2 of the 3 container images this version deploys carry CVE-2026-25646.

Container imageDigestPackageFixed in
dellcloud/pages:monitor6ba7b22caacd
libpng1.6@1.6.37-2
1.6.37-2ubuntu0.1~esm2
flyway/flyway:6.4.422d97ceb0c47
libpng1.6@1.6.34-1ubuntu0.18.04.2
1.6.34-1ubuntu0.18.04.2+esm2

Open the chart page →

20,190
flink-kubernetes-operatorpresto-loadbalancer1.10.01 of 1See more

flink-kubernetes-operator presto-loadbalancer 1.10.0

1 of the 1 container images this version deploys carry CVE-2026-25646.

Container imageDigestPackageFixed in
ghcr.io/apache/flink-kubernetes-operator:c703255e9c2ce635b89
libpng1.6@1.6.37-3build5
1.6.37-3ubuntu0.4

Open the chart page →

3,277
prompt-dbprompt-dbVerified publisher1.0.71 of 3See more

prompt-db prompt-db 1.0.7

1 of the 3 container images this version deploys carry CVE-2026-25646.

Container imageDigestPackageFixed in
ghcr.io/erlkoenig91/prompt-db-frontend:1.0.7121dc29eb14d
libpng@1.6.47-r0
1.6.55-r0

Open the chart page →

3,332
pumperlypumperlyVerified publisher0.1.21 of 3See more

pumperly pumperly 0.1.2

1 of the 3 container images this version deploys carry CVE-2026-25646.

Container imageDigestPackageFixed in
postgis/postgis:17-3.4-alpine5a1dbedac34e
libpng@1.6.44-r0
1.6.55-r0

Open the chart page →

2,854
pyredispyredis-helm0.1.01 of 2See more

pyredis pyredis-helm 0.1.0

1 of the 2 container images this version deploys carry CVE-2026-25646.

Container imageDigestPackageFixed in
avinash263/pyredis263:latestaa2b8727f1a6
libpng1.6@1.6.39-2
1.6.39-2+deb12u3

Open the chart page →

14,537

Container images carrying it

628 by charts deploying them

A fixed version is listed for 5 of the 5 affected packages.

Container imageDigestPackageFixed inUsed by
apachepulsar/pulsar:2.9.0d056c89b7131
libpng1.6@1.6.37-2
1.6.37-2ubuntu0.1~esm2
1
apachepulsar/pulsar:2.8.2d538416d5afe
libpng1.6@1.6.37-2
1.6.37-2ubuntu0.1~esm2
1
apache/ranger:2.7.076c176e8a0e4
libpng1.6@1.6.37-3build5
1.6.37-3ubuntu0.4
1
apache/rocketmq:5.3.0434d8398f996
libpng1.6@1.6.43-5build1
1.6.43-5ubuntu0.5
1
apache/rocketmq-exporter:0.0.2c8fb51195444
libpng1.6@1.6.37-3build5
1.6.37-3ubuntu0.4
1
apache/skywalking-oap-server:9.2.0133d35d2c263
libpng1.6@1.6.37-3build5
1.6.37-3ubuntu0.4
1
apache/skywalking-oap-server:8.9.1b4ec8c18d079
libpng1.6@1.6.37-2
1.6.37-2ubuntu0.1~esm2
1
apache/skywalking-ui:9.2.0295f1dc87d98
libpng1.6@1.6.37-3build5
1.6.37-3ubuntu0.4
1
apache/skywalking-ui:8.9.180530f0308a5
libpng1.6@1.6.37-2
1.6.37-2ubuntu0.1~esm2
1
apache/tika:2.9.0.092d055a84e9e
libpng1.6@1.6.37-3build5
1.6.37-3ubuntu0.4
1
appwrite/console:7.5.7aaa11ceab999
libpng@1.6.44-r0
1.6.55-r0
1
aristidetm/basic-notebook:3.6.5469dbc951224
libpng1.6@1.6.39-2
1.6.39-2+deb12u3
1
arthurjguerra18/revwallet:v0.7.12f540af20b307
libpng1.6@1.6.39-2
1.6.39-2+deb12u3
1
assistiot/cybersecurity-monitoring_ir-cas:latest6a107f224c34
libpng1.6@1.6.37-2
1.6.37-2ubuntu0.1~esm2
1
assistiot/location_processing:lateste9bae124095f
libpng1.6@1.6.37-3build5
1.6.37-3ubuntu0.4
1
assistiot/open_api_backend:1.1.230812ba93555
libpng1.6@1.6.37-3build5
1.6.37-3ubuntu0.4
1
assistiot/sdn_controller:2.4.0ea254b6d8a31
libpng1.6@1.6.37-2
1.6.37-2ubuntu0.1~esm2
1
assistiot/smart-orchestrator_scheduler_mc:latestb1dbe4d62a03
libpng1.6@1.6.39-2
1.6.39-2+deb12u3
1
assistiot/video_augmentation:runner-cpu-lateste5ae539ce2cb
libpng1.6@1.6.37-2
1.6.37-2ubuntu0.1~esm2
1
atlassian/confluence-server:7.10.03b9222ab32ef
libpng1.6@1.6.37-3build5
1.6.37-3ubuntu0.4
1
atlassian/jira-software:8.14.037bc46cbec1a
libpng1.6@1.6.37-3build5
1.6.37-3ubuntu0.4
1
atlassian/jira-software:9.7.264a75aa4ec4e
libpng1.6@1.6.43-5build1
1.6.43-5ubuntu0.5
1
avinash263/pyredis263:latestaa2b8727f1a6
libpng1.6@1.6.39-2
1.6.39-2+deb12u3
1
avzini/web-app:latestf40b30210ed0
libpng1.6@1.6.39-2
1.6.39-2+deb12u3
1
awesometechnologies/synapse-admin:0.11.4a1c1f4662875
libpng@1.6.54-r0
1.6.55-r0
1
bbernhard/signal-cli-rest-api:0.57549ad08d7e14
libpng1.6@1.6.37-2
1.6.37-2ubuntu0.1~esm2
1
beyzkaya/blog-backend:v1.0.112a6a3d1c5f9
libpng1.6@1.6.39-2
1.6.39-2+deb12u3
1
beyzkaya/blog-frontend:v1.0.0bf412d75c510
libpng@1.6.47-r0
1.6.55-r0
1
bitnamilegacy/elasticsearch:8.12.215d4647fd491
libpng1.6@1.6.39-2
1.6.39-2+deb12u3
1
bitnamilegacy/elasticsearch:9.0.1-debian-12-r0e6f6ddcce2f1
libpng1.6@1.6.39-2
1.6.39-2+deb12u3
1
bitnamilegacy/grafana:11.4.0-debian-12-r0cb8ab5515676
libpng1.6@1.6.39-2
1.6.39-2+deb12u3
1
bitnamilegacy/matomo:5.3.2-debian-12-r13f02c000c54b1
libpng1.6@1.6.39-2
1.6.39-2+deb12u3
1
blakeblackshear/frigate:0.10.0-amd64ae269270ad9e
libpng1.6@1.6.37-2
1.6.37-2ubuntu0.1~esm2
1
bnjbvr/kresus:0.22.137e216b182c8
libpng1.6@1.6.39-2
1.6.39-2+deb12u3
1
browserless/chrome:1.48.0-chrome-stablec81ae5585b47
libpng1.6@1.6.37-2
1.6.37-2ubuntu0.1~esm2
1
carlosmz87/test_helm_backend:latest8ffa63aa995d
libpng1.6@1.6.39-2
1.6.39-2+deb12u3
1
carlosmz87/test_helm_frontend:latest79f4b528f42a
libpng@1.6.44-r0
1.6.55-r0
1
castlemock/castlemock:latestb7f3f1527ba9
libpng1.6@1.6.43-5build1
1.6.43-5ubuntu0.5
1
castopod/castopod:1.12.101fd37280cbb2
libpng1.6@1.6.39-2
1.6.39-2+deb12u3
1
cbioportal/cbioportal:6.4.1-web-shenandoah08debbd2dbf9
libpng1.6@1.6.43-5build1
1.6.43-5ubuntu0.5
1
chandanteekinavar/findery-market-frontend:1.06de5bd44a325
libpng@1.6.44-r0
1.6.55-r0
1
chetangautamm/repo:Opensips_Buildb4b94155ff5a
libpng@1.2.50-1ubuntu2.14.04.3
1.2.50-1ubuntu2.14.04.3+esm1
1
cheyang/distributed-tf:1.6.046cc34755493
libpng@1.2.54-1ubuntu1
1.2.54-1ubuntu1.1+esm2
1
chibisafe/chibisafe-server:latest3da4fcbc1a18
libpng@1.6.47-r0
1.6.55-r0
1
ckulka/baikal:0.10.1-nginx434bdd162247
libpng1.6@1.6.39-2
1.6.39-2+deb12u3
1
clowder/clowder2-frontend:2.0.0-beta.4fe97882672ca
libpng@1.6.47-r0
1.6.55-r0
1
collabora/code:24.04.13.2.101dc4ab83977
libpng1.6@1.6.39-2
1.6.39-2+deb12u3
1
collabora/code:23.05.10.1.105299b452f7f
libpng1.6@1.6.39-2
1.6.39-2+deb12u3
1
commerceexperts/searchhub-smartsuggest-service:1.3.0341eebe7239b
libpng@1.6.43-r0
1.6.55-r0
1
copyparty/ac:1.19.200a0a8605062c
libpng@1.6.47-r0
1.6.55-r0
1

syft 1.42.1 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.