StackRadar

CVE-2026-33416

High

Advisory

Published 26 Mar 2026In the index since 5 Sept 2026
Severity
High
worst across findings
CVSS
7.5
base score, highest
EPSS
0.011
62nd percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
795
of 17,787 indexed, latest versions
Container images
759
deployed by those charts
Fix available
4 of 4
affected packages

Red Hat Security Advisory: libpng security update

Carried by container images the latest versions of 795 of 17,787 indexed charts deploy, on 759 images.

Affected packageAffected versionsFixed inImages
libpng1.6deb1.6.34-1ubuntu0.18.04.1, 1.6.34-1ubuntu0.18.04.2, 1.6.37-2, 1.6.37-3build5+12 more1.6.34-1ubuntu0.18.04.2+esm3, 1.6.37-2ubuntu0.1~esm3, 1.6.37-3ubuntu0.5, 1.6.39-2+deb12u4+3 more511
libpngapk1.6.43-r0, 1.6.44-r0, 1.6.45-r0, 1.6.47-r0+3 more1.6.56-r0141
libpngrpm2:1.5.13-7.el7_2, 2:1.6.34-5.el8, 2:1.6.37-12.el9, 2:1.6.37-12.el9_7.12:1.5.13-8.el7_9.3, 2:1.6.34-11.el8_10, 2:1.6.37-12.el9_7.487
libpngdeb1.2.50-1ubuntu2, 1.2.50-1ubuntu2.14.04.2, 1.2.50-1ubuntu2.14.04.3, 1.2.54-1ubuntu1+1 more1.2.50-1ubuntu2.14.04.3+esm2, 1.2.54-1ubuntu1.1+esm320
OSV records
ALPINE-CVE-2026-33416DEBIAN-CVE-2026-33416RHSA-2026:18028RHSA-2026:29898RHSA-2026:50808UBUNTU-CVE-2026-33416
Also known as
RHSA-2026:20548, RHSA-2026:20549, RHSA-2026:20550, RHSA-2026:29900, RHSA-2026:29901, RHSA-2026:29902, USN-8251-1, USN-8639-1

Charts affected

795 by stars
ChartLatestAffected imagesRadar Score
pagespages-nivesh1.0.02 of 3See more

pages pages-nivesh 1.0.0

2 of the 3 container images this version deploys carry CVE-2026-33416.

Container imageDigestPackageFixed in
dellcloud/pages:monitor6ba7b22caacd
libpng1.6@1.6.37-2
1.6.37-2ubuntu0.1~esm3
flyway/flyway:6.4.422d97ceb0c47
libpng1.6@1.6.34-1ubuntu0.18.04.2
1.6.34-1ubuntu0.18.04.2+esm3

Open the chart page →

20,190
pagespagessandeepgudu1.0.02 of 3See more

pages pagessandeepgudu 1.0.0

2 of the 3 container images this version deploys carry CVE-2026-33416.

Container imageDigestPackageFixed in
dellcloud/pages:monitor6ba7b22caacd
libpng1.6@1.6.37-2
1.6.37-2ubuntu0.1~esm3
flyway/flyway:6.4.422d97ceb0c47
libpng1.6@1.6.34-1ubuntu0.18.04.2
1.6.34-1ubuntu0.18.04.2+esm3

Open the chart page →

20,190
pagespages-shubhanker1.0.02 of 3See more

pages pages-shubhanker 1.0.0

2 of the 3 container images this version deploys carry CVE-2026-33416.

Container imageDigestPackageFixed in
dellcloud/pages:monitor6ba7b22caacd
libpng1.6@1.6.37-2
1.6.37-2ubuntu0.1~esm3
flyway/flyway:6.4.422d97ceb0c47
libpng1.6@1.6.34-1ubuntu0.18.04.2
1.6.34-1ubuntu0.18.04.2+esm3

Open the chart page →

20,190
pagespages-ssharma09091.0.02 of 3See more

pages pages-ssharma0909 1.0.0

2 of the 3 container images this version deploys carry CVE-2026-33416.

Container imageDigestPackageFixed in
dellcloud/pages:monitor6ba7b22caacd
libpng1.6@1.6.37-2
1.6.37-2ubuntu0.1~esm3
flyway/flyway:6.4.422d97ceb0c47
libpng1.6@1.6.34-1ubuntu0.18.04.2
1.6.34-1ubuntu0.18.04.2+esm3

Open the chart page →

20,190
pagespages-sucharitha1.0.02 of 3See more

pages pages-sucharitha 1.0.0

2 of the 3 container images this version deploys carry CVE-2026-33416.

Container imageDigestPackageFixed in
dellcloud/pages:monitor6ba7b22caacd
libpng1.6@1.6.37-2
1.6.37-2ubuntu0.1~esm3
flyway/flyway:6.4.422d97ceb0c47
libpng1.6@1.6.34-1ubuntu0.18.04.2
1.6.34-1ubuntu0.18.04.2+esm3

Open the chart page →

20,190
pagespages-sudhir1.0.02 of 3See more

pages pages-sudhir 1.0.0

2 of the 3 container images this version deploys carry CVE-2026-33416.

Container imageDigestPackageFixed in
dellcloud/pages:monitor6ba7b22caacd
libpng1.6@1.6.37-2
1.6.37-2ubuntu0.1~esm3
flyway/flyway:6.4.422d97ceb0c47
libpng1.6@1.6.34-1ubuntu0.18.04.2
1.6.34-1ubuntu0.18.04.2+esm3

Open the chart page →

20,190
pagespages-sushi1.0.02 of 3See more

pages pages-sushi 1.0.0

2 of the 3 container images this version deploys carry CVE-2026-33416.

Container imageDigestPackageFixed in
dellcloud/pages:monitor6ba7b22caacd
libpng1.6@1.6.37-2
1.6.37-2ubuntu0.1~esm3
flyway/flyway:6.4.422d97ceb0c47
libpng1.6@1.6.34-1ubuntu0.18.04.2
1.6.34-1ubuntu0.18.04.2+esm3

Open the chart page →

20,190
pagespages-vasanth58141.0.02 of 3See more

pages pages-vasanth5814 1.0.0

2 of the 3 container images this version deploys carry CVE-2026-33416.

Container imageDigestPackageFixed in
dellcloud/pages:monitor6ba7b22caacd
libpng1.6@1.6.37-2
1.6.37-2ubuntu0.1~esm3
flyway/flyway:6.4.422d97ceb0c47
libpng1.6@1.6.34-1ubuntu0.18.04.2
1.6.34-1ubuntu0.18.04.2+esm3

Open the chart page →

20,190
pagespages-vjp1.0.02 of 3See more

pages pages-vjp 1.0.0

2 of the 3 container images this version deploys carry CVE-2026-33416.

Container imageDigestPackageFixed in
dellcloud/pages:monitor6ba7b22caacd
libpng1.6@1.6.37-2
1.6.37-2ubuntu0.1~esm3
flyway/flyway:6.4.422d97ceb0c47
libpng1.6@1.6.34-1ubuntu0.18.04.2
1.6.34-1ubuntu0.18.04.2+esm3

Open the chart page →

20,190
parcial-1parcial-1-chart1.0.01 of 5See more

parcial-1 parcial-1-chart 1.0.0

1 of the 5 container images this version deploys carry CVE-2026-33416.

Container imageDigestPackageFixed in
esteban1930/frontend-1:1.8.0f9078279632c
libpng@1.6.47-r0
1.6.56-r0

Open the chart page →

3,844
home-assistantpascaliskeVerified publisher0.1.11 of 1See more

home-assistant pascaliske 0.1.1

1 of the 1 container images this version deploys carry CVE-2026-33416.

Container imageDigestPackageFixed in
ghcr.io/home-assistant/home-assistant:2025.12.59a5a3eb4a213
libpng@1.6.47-r0
1.6.56-r0

Open the chart page →

4,749
pagespawan-pages1.0.02 of 3See more

pages pawan-pages 1.0.0

2 of the 3 container images this version deploys carry CVE-2026-33416.

Container imageDigestPackageFixed in
dellcloud/pages:monitor6ba7b22caacd
libpng1.6@1.6.37-2
1.6.37-2ubuntu0.1~esm3
flyway/flyway:6.4.422d97ceb0c47
libpng1.6@1.6.34-1ubuntu0.18.04.2
1.6.34-1ubuntu0.18.04.2+esm3

Open the chart page →

20,190
matomopetbattle11.0.11 of 2See more

matomo petbattle 11.0.1

1 of the 2 container images this version deploys carry CVE-2026-33416.

Container imageDigestPackageFixed in
bitnamilegacy/matomo:5.3.2-debian-12-r13f02c000c54b1
libpng1.6@1.6.39-2
1.6.39-2+deb12u4

Open the chart page →

11,061
dummy-servicephanVerified publisher0.3.41 of 1See more

dummy-service phan 0.3.4

1 of the 1 container images this version deploys carry CVE-2026-33416.

Container imageDigestPackageFixed in
phan2410/dummy-service:0.0.89c6ed6de26ca
libpng1.6@1.6.39-2
1.6.39-2+deb12u4

Open the chart page →

5,706
falcon-asgi-serverphanVerified publisher0.1.01 of 1See more

falcon-asgi-server phan 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-33416.

Container imageDigestPackageFixed in
phan2410/falcon-asgi-server:0.1.04a86d138832d
libpng1.6@1.6.39-2
1.6.39-2+deb12u4

Open the chart page →

8,189
phronetisphronetis0.1.271 of 2See more

phronetis phronetis 0.1.27

1 of the 2 container images this version deploys carry CVE-2026-33416.

Container imageDigestPackageFixed in
knspar/phronetis-operator:0.1.60c4f0543ee58
libpng1.6@1.6.39-2
1.6.39-2+deb12u4

Open the chart page →

16,196
seafilephybros-helm-charts4.0.11 of 1See more

seafile phybros-helm-charts 4.0.1

1 of the 1 container images this version deploys carry CVE-2026-33416.

Container imageDigestPackageFixed in
seafileltd/seafile-mc:9.0.97ac833196f60
libpng1.6@1.6.37-2
1.6.37-2ubuntu0.1~esm3

Open the chart page →

22,084
pagespighosh-pages1.0.02 of 3See more

pages pighosh-pages 1.0.0

2 of the 3 container images this version deploys carry CVE-2026-33416.

Container imageDigestPackageFixed in
dellcloud/pages:monitor6ba7b22caacd
libpng1.6@1.6.37-2
1.6.37-2ubuntu0.1~esm3
flyway/flyway:6.4.422d97ceb0c47
libpng1.6@1.6.34-1ubuntu0.18.04.2
1.6.34-1ubuntu0.18.04.2+esm3

Open the chart page →

20,190
subgraph-oraclepinaxVerified publisher0.0.11 of 1See more

subgraph-oracle pinax 0.0.1

1 of the 1 container images this version deploys carry CVE-2026-33416.

Container imageDigestPackageFixed in
ghcr.io/graphprotocol/availability-oracle:sha-28312fd472a25038957
libpng1.6@1.6.39-2
1.6.39-2+deb12u4

Open the chart page →

11,347
pingdom-operatorpingdom-operator0.0.201 of 1See more

pingdom-operator pingdom-operator 0.0.20

1 of the 1 container images this version deploys carry CVE-2026-33416.

Container imageDigestPackageFixed in
ghcr.io/nefelim4ag/pingdom-operator:0.0.15f8c7afdcf439
libpng1.6@1.6.39-2
1.6.39-2+deb12u4

Open the chart page →

11,923
spring-boot-openshiftpiominVerified publisher0.3.111 of 1See more

spring-boot-openshift piomin 0.3.11

1 of the 1 container images this version deploys carry CVE-2026-33416.

Container imageDigestPackageFixed in
piomin/sample-spring-kotlin-microservice:1.1871f784dd6bc
libpng1.6@1.6.37-3build5
1.6.37-3ubuntu0.5

Open the chart page →

7,576
k8s-node-image9-1-24pnnl-miscscripts0.2.1492 of 2See more

k8s-node-image9-1-24 pnnl-miscscripts 0.2.149

2 of the 2 container images this version deploys carry CVE-2026-33416.

Container imageDigestPackageFixed in
pnnlmiscscripts/anaconda9:1714885940.021839-nginx-1cfbc9b70cbf8
libpng@1.6.44-r0
1.6.56-r0
pnnlmiscscripts/k8s-node-image9:1.24.17-nginx-882c8dc938b2f9
libpng@1.6.43-r0
1.6.56-r0

Open the chart page →

1,491
k8s-node-image9-1-25pnnl-miscscripts0.2.1052 of 2See more

k8s-node-image9-1-25 pnnl-miscscripts 0.2.105

2 of the 2 container images this version deploys carry CVE-2026-33416.

Container imageDigestPackageFixed in
pnnlmiscscripts/anaconda9:1714885940.021839-nginx-1cfbc9b70cbf8
libpng@1.6.44-r0
1.6.56-r0
pnnlmiscscripts/k8s-node-image9:1.25.16-nginx-772c202c43c0aa
libpng@1.6.43-r0
1.6.56-r0

Open the chart page →

1,491
k8s-node-image9-1-26pnnl-miscscripts0.2.922 of 2See more

k8s-node-image9-1-26 pnnl-miscscripts 0.2.92

2 of the 2 container images this version deploys carry CVE-2026-33416.

Container imageDigestPackageFixed in
pnnlmiscscripts/anaconda9:1714885940.021839-nginx-1cfbc9b70cbf8
libpng@1.6.44-r0
1.6.56-r0
pnnlmiscscripts/k8s-node-image9:1.26.15-nginx-579785e5b82334
libpng@1.6.43-r0
1.6.56-r0

Open the chart page →

1,491
k8s-node-image9-1-27pnnl-miscscripts0.2.902 of 2See more

k8s-node-image9-1-27 pnnl-miscscripts 0.2.90

2 of the 2 container images this version deploys carry CVE-2026-33416.

Container imageDigestPackageFixed in
pnnlmiscscripts/anaconda9:1714885940.021839-nginx-1cfbc9b70cbf8
libpng@1.6.44-r0
1.6.56-r0
pnnlmiscscripts/k8s-node-image9:1.27.16-nginx-306e1a36d646a3
libpng@1.6.43-r0
1.6.56-r0

Open the chart page →

1,491
k8s-node-image9-1-28pnnl-miscscripts0.2.1022 of 2See more

k8s-node-image9-1-28 pnnl-miscscripts 0.2.102

2 of the 2 container images this version deploys carry CVE-2026-33416.

Container imageDigestPackageFixed in
pnnlmiscscripts/anaconda9:1714885940.021839-nginx-1cfbc9b70cbf8
libpng@1.6.44-r0
1.6.56-r0
pnnlmiscscripts/k8s-node-image9:1.28.15-nginx-72b91d6a46e06
libpng@1.6.43-r0
1.6.56-r0

Open the chart page →

1,491
k8s-node-image9-1-29pnnl-miscscripts0.2.642 of 2See more

k8s-node-image9-1-29 pnnl-miscscripts 0.2.64

2 of the 2 container images this version deploys carry CVE-2026-33416.

Container imageDigestPackageFixed in
pnnlmiscscripts/anaconda9:1714885940.021839-nginx-1cfbc9b70cbf8
libpng@1.6.44-r0
1.6.56-r0
pnnlmiscscripts/k8s-node-image9:1.29.10-nginx-7fcd82530bc8b
libpng@1.6.43-r0
1.6.56-r0

Open the chart page →

1,491
k8s-node-image9-1-30pnnl-miscscripts0.2.561 of 2See more

k8s-node-image9-1-30 pnnl-miscscripts 0.2.56

1 of the 2 container images this version deploys carry CVE-2026-33416.

Container imageDigestPackageFixed in
pnnlmiscscripts/k8s-node-image9:1.30.11-nginx-7f9297eea817d
libpng@1.6.44-r0
1.6.56-r0

Open the chart page →

619
k8s-node-image9-1-31pnnl-miscscripts0.2.271 of 2See more

k8s-node-image9-1-31 pnnl-miscscripts 0.2.27

1 of the 2 container images this version deploys carry CVE-2026-33416.

Container imageDigestPackageFixed in
pnnlmiscscripts/k8s-node-image9:1.31.7-nginx-7e3e189d9d519
libpng@1.6.44-r0
1.6.56-r0

Open the chart page →

619
k8s-oidc-discovery-providerpnnl-miscscripts0.1.21 of 2See more

k8s-oidc-discovery-provider pnnl-miscscripts 0.1.2

1 of the 2 container images this version deploys carry CVE-2026-33416.

Container imageDigestPackageFixed in
library/nginx:1.29.49dd288848f44
libpng1.6@1.6.48-1+deb13u1
1.6.48-1+deb13u4

Open the chart page →

4,260
pod-birdspod-birds0.1.01 of 1See more

pod-birds pod-birds 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-33416.

Container imageDigestPackageFixed in
teknas09/bird-pod:latest12a1fa85c4aa
libpng1.6@1.6.39-2
1.6.39-2+deb12u4

Open the chart page →

12,912
podnat-state-storepodnat-controller0.3.21 of 1See more

podnat-state-store podnat-controller 0.3.2

1 of the 1 container images this version deploys carry CVE-2026-33416.

Container imageDigestPackageFixed in
dgraziotin/nginx-webdav-nononsense:1.23.138f2de42bed0
libpng1.6@1.6.37-2
1.6.37-2ubuntu0.1~esm3

Open the chart page →

9,167
pagesprasanthi1.0.02 of 3See more

pages prasanthi 1.0.0

2 of the 3 container images this version deploys carry CVE-2026-33416.

Container imageDigestPackageFixed in
dellcloud/pages:monitor6ba7b22caacd
libpng1.6@1.6.37-2
1.6.37-2ubuntu0.1~esm3
flyway/flyway:6.4.422d97ceb0c47
libpng1.6@1.6.34-1ubuntu0.18.04.2
1.6.34-1ubuntu0.18.04.2+esm3

Open the chart page →

20,190
flink-kubernetes-operatorpresto-loadbalancer1.10.01 of 1See more

flink-kubernetes-operator presto-loadbalancer 1.10.0

1 of the 1 container images this version deploys carry CVE-2026-33416.

Container imageDigestPackageFixed in
ghcr.io/apache/flink-kubernetes-operator:c703255e9c2ce635b89
libpng1.6@1.6.37-3build5
1.6.37-3ubuntu0.5

Open the chart page →

3,277
prompt-dbprompt-dbVerified publisher1.0.71 of 3See more

prompt-db prompt-db 1.0.7

1 of the 3 container images this version deploys carry CVE-2026-33416.

Container imageDigestPackageFixed in
ghcr.io/erlkoenig91/prompt-db-frontend:1.0.7121dc29eb14d
libpng@1.6.47-r0
1.6.56-r0

Open the chart page →

3,332
pumperlypumperlyVerified publisher0.1.21 of 3See more

pumperly pumperly 0.1.2

1 of the 3 container images this version deploys carry CVE-2026-33416.

Container imageDigestPackageFixed in
postgis/postgis:17-3.4-alpine5a1dbedac34e
libpng@1.6.44-r0
1.6.56-r0

Open the chart page →

2,854
pyredispyredis-helm0.1.01 of 2See more

pyredis pyredis-helm 0.1.0

1 of the 2 container images this version deploys carry CVE-2026-33416.

Container imageDigestPackageFixed in
avinash263/pyredis263:latestaa2b8727f1a6
libpng1.6@1.6.39-2
1.6.39-2+deb12u4

Open the chart page →

14,537
mychartpythonweb0.1.01 of 1See more

mychart pythonweb 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-33416.

Container imageDigestPackageFixed in
qichenxu4pd/pythonexample:1.0f3a8502bc21b
libpng1.6@1.6.39-2
1.6.39-2+deb12u4

Open the chart page →

12,566
mypythonpythonweb0.1.01 of 1See more

mypython pythonweb 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-33416.

Container imageDigestPackageFixed in
qichenxu4pd/pythonexample:1.0f3a8502bc21b
libpng1.6@1.6.39-2
1.6.39-2+deb12u4

Open the chart page →

12,566
cupsr2dlan-helm-chartsVerified publisher0.1.01 of 1See more

cups r2dlan-helm-charts 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-33416.

Container imageDigestPackageFixed in
anujdatar/cups:25.07.01685df04a643b
libpng1.6@1.6.39-2
1.6.39-2+deb12u4

Open the chart page →

7,685
nginx-chartrabsnginx0.1.01 of 1See more

nginx-chart rabsnginx 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-33416.

Container imageDigestPackageFixed in
library/nginx:1.276784fb0834aa
libpng1.6@1.6.39-2
1.6.39-2+deb12u4

Open the chart page →

4,456
app-configradar-baseVerified publisher1.7.21 of 1See more

app-config radar-base 1.7.2

1 of the 1 container images this version deploys carry CVE-2026-33416.

Container imageDigestPackageFixed in
ghcr.io/radar-base/radar-app-config/radar-app-config:0.6.24431db7b486b
libpng1.6@1.6.43-5ubuntu0.5
1.6.43-5ubuntu0.6

Open the chart page →

2,036
app-config-frontendradar-baseVerified publisher2.4.11 of 1See more

app-config-frontend radar-base 2.4.1

1 of the 1 container images this version deploys carry CVE-2026-33416.

Container imageDigestPackageFixed in
ghcr.io/radar-base/radar-app-config/radar-app-config-frontend:0.6.2c5f1e2ca5781
libpng@1.6.44-r0
1.6.56-r0

Open the chart page →

807
catalog-serverradar-baseVerified publisher0.9.31 of 1See more

catalog-server radar-base 0.9.3

1 of the 1 container images this version deploys carry CVE-2026-33416.

Container imageDigestPackageFixed in
ghcr.io/radar-base/radar-schemas/radar-schemas-tools:0.8.16c442e8bfe6b4
libpng1.6@1.6.43-5ubuntu0.5
1.6.43-5ubuntu0.6

Open the chart page →

2,418
data-dashboard-backendradar-baseVerified publisher0.6.21 of 1See more

data-dashboard-backend radar-base 0.6.2

1 of the 1 container images this version deploys carry CVE-2026-33416.

Container imageDigestPackageFixed in
ghcr.io/radar-base/radar-data-dashboard-backend/radar-data-dashboard-backend:0.2.4d1e55350923c
libpng1.6@1.6.43-5ubuntu0.5
1.6.43-5ubuntu0.6

Open the chart page →

2,019
radar-gatewayradar-baseVerified publisher1.9.01 of 2See more

radar-gateway radar-base 1.9.0

1 of the 2 container images this version deploys carry CVE-2026-33416.

Container imageDigestPackageFixed in
ghcr.io/radar-base/radar-gateway/radar-gateway:0.9.4219d894aa7a6
libpng1.6@1.6.43-5ubuntu0.5
1.6.43-5ubuntu0.6

Open the chart page →

2,284
radar-homeradar-baseVerified publisher0.5.51 of 1See more

radar-home radar-base 0.5.5

1 of the 1 container images this version deploys carry CVE-2026-33416.

Container imageDigestPackageFixed in
ghcr.io/radar-base/radar-home/radar-home:0.1.71cfe3da9d812
libpng@1.6.44-r0
1.6.56-r0

Open the chart page →

807
radar-integrationradar-baseVerified publisher0.9.01 of 1See more

radar-integration radar-base 0.9.0

1 of the 1 container images this version deploys carry CVE-2026-33416.

Container imageDigestPackageFixed in
radarbase/radar-redcapintegration:1.0.6fcd973d4796d
libpng1.6@1.6.43-5build1
1.6.43-5ubuntu0.6

Open the chart page →

2,855
radar-outputradar-baseVerified publisher1.2.101 of 1See more

radar-output radar-base 1.2.10

1 of the 1 container images this version deploys carry CVE-2026-33416.

Container imageDigestPackageFixed in
ghcr.io/radar-base/radar-output-restructure/radar-output-restructure:3.0.67fb9c70e96a4
libpng1.6@1.6.43-5ubuntu0.5
1.6.43-5ubuntu0.6

Open the chart page →

2,465
radar-push-endpointradar-baseVerified publisher0.6.81 of 2See more

radar-push-endpoint radar-base 0.6.8

1 of the 2 container images this version deploys carry CVE-2026-33416.

Container imageDigestPackageFixed in
radarbase/radar-push-endpoint:0.4.0e1758508e033
libpng1.6@1.6.43-5build1
1.6.43-5ubuntu0.6

Open the chart page →

3,018

Container images carrying it

759 by charts deploying them

A fixed version is listed for 4 of the 4 affected packages.

Container imageDigestPackageFixed inUsed by
gotson/komga:0.99.49b15ea6bfc30
libpng1.6@1.6.34-1ubuntu0.18.04.2
1.6.34-1ubuntu0.18.04.2+esm3
1
graylog/graylog:6.1.1019de1aff48c2
libpng1.6@1.6.37-3build5
1.6.37-3ubuntu0.5
1
gridgain/community:8.9.11d32d182a0e6a
libpng@1.6.43-r0
1.6.56-r0
1
guacamole/guacamole:1.5.50f62f6d17ab3
libpng1.6@1.6.37-3build5
1.6.37-3ubuntu0.5
1
gulacedia/web-dvwa-new:v367b467d961ca
libpng1.6@1.6.39-2
1.6.39-2+deb12u4
1
gurolakman/oam:4.0.0ed8fd2062548
libpng@2:1.6.34-5.el8
2:1.6.34-11.el8_10
1
gurolakman/smsf-configuration:1.0.49abb3882bcbd
libpng@2:1.6.34-5.el8
2:1.6.34-11.el8_10
1
gurolakman/smsf-dispatcher:1.0.46537e8ed8de8
libpng@2:1.6.34-5.el8
2:1.6.34-11.el8_10
1
gurolakman/smsf-momt:1.0.4ce23b20a8a17
libpng@2:1.6.34-5.el8
2:1.6.34-11.el8_10
1
gurolakman/smsf-registration:1.0.4b22e746edd5d
libpng@2:1.6.34-5.el8
2:1.6.34-11.el8_10
1
gurolakman/ussigw-configuration:1.0.4bf18525c5ad9
libpng@2:1.6.34-5.el8
2:1.6.34-11.el8_10
1
gurolakman/ussigw-core:1.0.48739565c3ea2
libpng@2:1.6.34-5.el8
2:1.6.34-11.el8_10
1
hamzaarshad10/queryfrontend:1.1.5.14cd359d9a78c3
libpng@1.6.44-r0
1.6.56-r0
1
haveagitgat/tdarr:2.00.181256348872ce
libpng1.6@1.6.37-2
1.6.37-2ubuntu0.1~esm3
1
haveagitgat/tdarr_node:2.00.101e3f9328327d
libpng1.6@1.6.37-2
1.6.37-2ubuntu0.1~esm3
1
haveagitgat/tdarr_node:2.17.013ff0913202dd
libpng1.6@1.6.37-2
1.6.37-2ubuntu0.1~esm3
1
hazegoodlife/haaze:veggiesite50f02d2d5d4d
libpng1.6@1.6.39-2
1.6.39-2+deb12u4
1
hazegoodlife/haaze:milksite8d4c63169e14
libpng1.6@1.6.39-2
1.6.39-2+deb12u4
1
hazelcast/management-center:5.3.2f9d34300d330
libpng@2:1.6.34-5.el8
2:1.6.34-11.el8_10
1
hecrom/myweatherangularclient:1.3.11bb0372939c19
libpng1.6@1.6.39-2
1.6.39-2+deb12u4
1
helicone/supabase-migration-runner:v2025.03.05-14a913936c97b
libpng1.6@1.6.39-2
1.6.39-2+deb12u4
1
hivemq/hivemq-operator:4.7.10241d6a8e1963
libpng1.6@1.6.37-3build5
1.6.37-3ubuntu0.5
1
hmediade/printserver:latest481a552c8e1c
libpng1.6@1.6.37-3build5
1.6.37-3ubuntu0.5
1
housewrecker/gaps:latestf417dd0a7547
libpng1.6@1.6.37-2
1.6.37-2ubuntu0.1~esm3
1
huginn/huginn-single-process:4d17829cf6b15b004ad3f4be196303dca4944810c794eddc7b47
libpng1.6@1.6.34-1ubuntu0.18.04.2
1.6.34-1ubuntu0.18.04.2+esm3
1
hugohg34/toposervice:0.0.2812a03b3f274
libpng1.6@1.6.37-2
1.6.37-2ubuntu0.1~esm3
1
hyperledger/fabric-couchdb:0.4.10c65891b6c237
libpng@1.2.54-1ubuntu1
1.2.54-1ubuntu1.1+esm3
1
ibmcom/app-nav-init:1.0.1240ff499eb5b
libpng@2:1.5.13-7.el7_2
2:1.5.13-8.el7_9.3
1
ibmcom/app-nav-ui:1.0.1e2a86997b36b
libpng@2:1.5.13-7.el7_2
2:1.5.13-8.el7_9.3
1
ibmcom/bai-elasticsearch-dev:19.0.25441dba2fa00
libpng@2:1.5.13-7.el7_2
2:1.5.13-8.el7_9.3
1
ibmcom/bai-flink-dev:19.0.2e31ff09e8aad
libpng@2:1.5.13-7.el7_2
2:1.5.13-8.el7_9.3
1
ibmcom/bai-flink-zookeeper-dev:19.0.258548034cf55
libpng@2:1.5.13-7.el7_2
2:1.5.13-8.el7_9.3
1
intel/dlstreamer-pipeline-server:2022.1.1-ubuntu20aa8f5483a2ef
libpng1.6@1.6.37-2
1.6.37-2ubuntu0.1~esm3
1
intel/multimodal-data-visualization-streaming:3.01a89327e499b
libpng1.6@1.6.37-2
1.6.37-2ubuntu0.1~esm3
1
intelowlproject/intelowl:v6.6.10b22e547ea6b
libpng1.6@1.6.39-2
1.6.39-2+deb12u4
1
intelowlproject/intelowl_nginx:v6.6.12f01e79b8064
libpng@1.6.47-r0
1.6.56-r0
1
ispras/svacer:11-2-042aa9fa9f189
libpng1.6@1.6.37-3build5
1.6.37-3ubuntu0.5
1
istio/examples-bookinfo-reviews-v1:1.17.0b8f16a765eea
libpng1.6@1.6.37-2
1.6.37-2ubuntu0.1~esm3
1
istio/examples-bookinfo-reviews-v2:1.17.072f25a55f078
libpng1.6@1.6.37-2
1.6.37-2ubuntu0.1~esm3
1
istio/examples-bookinfo-reviews-v3:1.17.08f92fc1b6592
libpng1.6@1.6.37-2
1.6.37-2ubuntu0.1~esm3
1
jacobalberty/unifi:v7.1.664a3616625dda
libpng1.6@1.6.34-1ubuntu0.18.04.2
1.6.34-1ubuntu0.18.04.2+esm3
1
jacobalberty/unifi:v7.4.162b3edc809a3ff
libpng1.6@1.6.34-1ubuntu0.18.04.2
1.6.34-1ubuntu0.18.04.2+esm3
1
jacobalberty/unifi:5.10.19c409924e2463
libpng@1.2.54-1ubuntu1.1
1.2.54-1ubuntu1.1+esm3
1
jaedb/iris:latest048cfbf58d57
libpng1.6@1.6.39-2
1.6.39-2+deb12u4
1
jakowenko/double-take:1.6.0b858bac9e32a
libpng1.6@1.6.37-2
1.6.37-2ubuntu0.1~esm3
1
jellyfin/jellyfin:10.10.317c3a8d9dddb
libpng1.6@1.6.39-2
1.6.39-2+deb12u4
1
jellyfin/jellyfin:10.11.6333b64771663
libpng1.6@1.6.48-1+deb13u1
1.6.48-1+deb13u4
1
jellyfin/jellyfin:10.9.1079fb3d73a3e9
libpng1.6@1.6.39-2
1.6.39-2+deb12u4
1
jellyfin/jellyfin:10.10.77ae36aab93ef
libpng1.6@1.6.39-2
1.6.39-2+deb12u4
1
jellyfin/jellyfin:10.10.696b09723b22f
libpng1.6@1.6.39-2
1.6.39-2+deb12u4
1

syft 1.42.1 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.