StackRadar

CVE-2026-3713

Medium

Advisory

Published 8 Mar 2026In the index since 5 Sept 2026
Severity
Medium
worst across findings
CVSS
5.3
base score, highest
EPSS
0.001
3rd percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
524
of 17,781 indexed, latest versions
Container images
372
deployed by those charts
Fix available
None
affected packages

The matching OSV records carry no description.

Carried by container images the latest versions of 524 of 17,781 indexed charts deploy, on 372 images.

Affected packageAffected versionsFixed inImages
libpngdeb1.2.50-1ubuntu2, 1.2.50-1ubuntu2.14.04.2, 1.2.50-1ubuntu2.14.04.3no fix listed7
libpng1.6deb1.6.39-2, 1.6.39-2+deb12u1, 1.6.39-2+deb12u3, 1.6.39-2+deb12u4+6 moreno fix listed365
OSV records
DEBIAN-CVE-2026-3713UBUNTU-CVE-2026-3713

Charts affected

524 by stars
ChartLatestAffected imagesRadar Score
helm-composenousefreakVerified publisher0.1.31 of 2See more

helm-compose nousefreak 0.1.3

1 of the 2 container images this version deploys carry CVE-2026-3713.

Container imageDigestPackageFixed in
library/wordpress:latest5a93c470ae82
libpng1.6@1.6.48-1+deb13u5
no fix listed

Open the chart page →

14,250
nginx-s3olopostVerified publisher0.2.11 of 1See more

nginx-s3 olopost 0.2.1

1 of the 1 container images this version deploys carry CVE-2026-3713.

Container imageDigestPackageFixed in
ghcr.io/nginxinc/nginx-s3-gateway/nginx-oss-s3-gateway:unprivileged-oss3db8145349a3
libpng1.6@1.6.39-2
no fix listed

Open the chart page →

5,039
onechartonechart-slVerified publisher0.76.01 of 1See more

onechart onechart-sl 0.76.0

1 of the 1 container images this version deploys carry CVE-2026-3713.

Container imageDigestPackageFixed in
library/nginx:latest05b8cb60c354
libpng1.6@1.6.48-1+deb13u5
no fix listed

Open the chart page →

1,827
opencatalogiopencatalogi1.0.62 of 8See more

opencatalogi opencatalogi 1.0.6

2 of the 8 container images this version deploys carry CVE-2026-3713.

Container imageDigestPackageFixed in
ghcr.io/conductionnl/gateway-ui:stag6a5594b7b32c
libpng1.6@1.6.39-2
no fix listed
ghcr.io/opencatalogi/web-app:deva1a7f507f6ae
libpng1.6@1.6.39-2
no fix listed

Open the chart page →

14,838
opentelemetry-demoopentelemetry-helmVerified publisher0.41.11 of 34See more

opentelemetry-demo opentelemetry-helm 0.41.1

1 of the 34 container images this version deploys carry CVE-2026-3713.

Container imageDigestPackageFixed in
ghcr.io/open-telemetry/demo:3.0.0-fraud-detection1cdfd1bcf476
libpng1.6@1.6.39-2+deb12u3
no fix listed

Open the chart page →

22,420
paperless-ngxpaperlessVerified publisher0.4.01 of 3See more

paperless-ngx paperless 0.4.0

1 of the 3 container images this version deploys carry CVE-2026-3713.

Container imageDigestPackageFixed in
ghcr.io/paperless-ngx/paperless-ngxdigest-pinnedaa810a36942c
libpng1.6@1.6.48-1+deb13u5
no fix listed

Open the chart page →

8,489
peertubepeertubeVerified publisher0.1.31 of 1See more

peertube peertube 0.1.3

1 of the 1 container images this version deploys carry CVE-2026-3713.

Container imageDigestPackageFixed in
chocobozzz/peertube:v8.1.5052712130691
libpng1.6@1.6.48-1+deb13u5
no fix listed

Open the chart page →

7,035
playgroundplayground0.1.11 of 1See more

playground playground 0.1.1

1 of the 1 container images this version deploys carry CVE-2026-3713.

Container imageDigestPackageFixed in
library/nginx:latest05b8cb60c354
libpng1.6@1.6.48-1+deb13u5
no fix listed

Open the chart page →

1,827
matomopockostVerified publisher1.3.01 of 3See more

matomo pockost 1.3.0

1 of the 3 container images this version deploys carry CVE-2026-3713.

Container imageDigestPackageFixed in
pockost/matomo:5.13.07f5d293cbe4e
libpng1.6@1.6.48-1+deb13u5
no fix listed

Open the chart page →

5,047
portraitportraitVerified publisher0.2.131 of 8See more

portrait portrait 0.2.13

1 of the 8 container images this version deploys carry CVE-2026-3713.

Container imageDigestPackageFixed in
treskon/portrait-web-setup:DEV-latesta475d80e4ecf
libpng1.6@1.6.39-2
no fix listed

Open the chart page →

31,844
JenkinsprasoonjenkinsVerified publisher0.1.01 of 1See more

Jenkins prasoonjenkins 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-3713.

Container imageDigestPackageFixed in
jenkins/jenkins:ltsc1e4c349365f
libpng1.6@1.6.48-1+deb13u5
no fix listed

Open the chart page →

2,476
redmineredmine-helm-chartVerified publisher0.2.61 of 1See more

redmine redmine-helm-chart 0.2.6

1 of the 1 container images this version deploys carry CVE-2026-3713.

Container imageDigestPackageFixed in
library/redmine:6.1.3-trixief474a901faec
libpng1.6@1.6.48-1+deb13u5
no fix listed

Open the chart page →

4,240
kimai2robjuz5.0.131 of 2See more

kimai2 robjuz 5.0.13

1 of the 2 container images this version deploys carry CVE-2026-3713.

Container imageDigestPackageFixed in
kimai/kimai2:2.65.06dfc63199654
libpng1.6@1.6.39-2+deb12u5
no fix listed

Open the chart page →

4,693
rocketadminrocketadminOfficialVerified publisher1.0.421 of 1See more

rocketadmin rocketadmin 1.0.42

1 of the 1 container images this version deploys carry CVE-2026-3713.

Container imageDigestPackageFixed in
rocketadmin/rocketadmin:1.17.710955ef540b9
libpng1.6@1.6.39-2+deb12u4
no fix listed

Open the chart page →

5,482
fluent-bitromanow-helm-chartsVerified publisher1.7.31 of 1See more

fluent-bit romanow-helm-charts 1.7.3

1 of the 1 container images this version deploys carry CVE-2026-3713.

Container imageDigestPackageFixed in
fluent/fluent-bit:4.0-debuge76397ef3983
libpng1.6@1.6.39-2+deb12u1
no fix listed

Open the chart page →

7,740
baikalrubxkubeVerified publisher1.3.11 of 1See more

baikal rubxkube 1.3.1

1 of the 1 container images this version deploys carry CVE-2026-3713.

Container imageDigestPackageFixed in
ckulka/baikal:0.10.1-nginx434bdd162247
libpng1.6@1.6.39-2
no fix listed

Open the chart page →

5,315
kyoorubxkubeVerified publisher0.1.102 of 9See more

kyoo rubxkube 0.1.10

2 of the 9 container images this version deploys carry CVE-2026-3713.

Container imageDigestPackageFixed in
ghcr.io/zoriya/kyoo_autosync:4.7.1fbba58ddb1a6
libpng1.6@1.6.39-2
no fix listed
ghcr.io/zoriya/kyoo_scanner:4.7.17dc0ee57b628
libpng1.6@1.6.39-2
no fix listed

Open the chart page →

30,234
uptime-kumasb-helm-charts0.4.01 of 1See more

uptime-kuma sb-helm-charts 0.4.0

1 of the 1 container images this version deploys carry CVE-2026-3713.

Container imageDigestPackageFixed in
louislam/uptime-kuma:2.0.24c364ef96aad
libpng1.6@1.6.39-2
no fix listed

Open the chart page →

38,107
immichsecustorVerified publisher2.0.41 of 1See more

immich secustor 2.0.4

1 of the 1 container images this version deploys carry CVE-2026-3713.

Container imageDigestPackageFixed in
ghcr.io/immich-app/immich-server:v3.2.0ae13784ffcfc
libpng1.6@1.6.48-1+deb13u5
no fix listed

Open the chart page →

3,059
sentry-k8ssentry-k8sVerified publisher1.4.11 of 11See more

sentry-k8s sentry-k8s 1.4.1

1 of the 11 container images this version deploys carry CVE-2026-3713.

Container imageDigestPackageFixed in
ghcr.io/getsentry/taskbroker:26.7.264d0da74a578
libpng1.6@1.6.39-2+deb12u5
no fix listed

Open the chart page →

16,449
sogosogoVerified publisher0.3.51 of 2See more

sogo sogo 0.3.5

1 of the 2 container images this version deploys carry CVE-2026-3713.

Container imageDigestPackageFixed in
sonroyaalmerol/docker-sogo:5.12.43f60f3abe990
libpng1.6@1.6.48-1+deb13u1
no fix listed

Open the chart page →

7,126
nginx-chartsomnath-chartVerified publisher0.1.91 of 1See more

nginx-chart somnath-chart 0.1.9

1 of the 1 container images this version deploys carry CVE-2026-3713.

Container imageDigestPackageFixed in
somnathmore/custom-nginx:v2bdfc06cad4ec
libpng1.6@1.6.39-2
no fix listed

Open the chart page →

5,676
speckle-serverspeckleVerified publisher2.26.31 of 4See more

speckle-server speckle 2.26.3

1 of the 4 container images this version deploys carry CVE-2026-3713.

Container imageDigestPackageFixed in
speckle/speckle-preview-service:2.26.3092384dba45d
libpng1.6@1.6.39-2
no fix listed

Open the chart page →

10,380
app-fullsynkubeVerified publisher1.0.01 of 1See more

app-full synkube 1.0.0

1 of the 1 container images this version deploys carry CVE-2026-3713.

Container imageDigestPackageFixed in
library/nginx:latest6e23479198b9
libpng1.6@1.6.48-1+deb13u4
no fix listed

Open the chart page →

3,240
kubedeploysysbee1.2.21 of 1See more

kubedeploy sysbee 1.2.2

1 of the 1 container images this version deploys carry CVE-2026-3713.

Container imageDigestPackageFixed in
library/nginx:latest05b8cb60c354
libpng1.6@1.6.48-1+deb13u5
no fix listed

Open the chart page →

1,827
apptaxmd-helm-chart0.0.21 of 1See more

app taxmd-helm-chart 0.0.2

1 of the 1 container images this version deploys carry CVE-2026-3713.

Container imageDigestPackageFixed in
library/nginx:latest05b8cb60c354
libpng1.6@1.6.48-1+deb13u5
no fix listed

Open the chart page →

1,827
jenkinstestchart0.1.91 of 2See more

jenkins testchart 0.1.9

1 of the 2 container images this version deploys carry CVE-2026-3713.

Container imageDigestPackageFixed in
jenkins/jenkins:2.426.1-jdk11b470bcdc4ecd
libpng1.6@1.6.39-2
no fix listed

Open the chart page →

9,102
jenkinstest-jenkins9.1.01 of 2See more

jenkins test-jenkins 9.1.0

1 of the 2 container images this version deploys carry CVE-2026-3713.

Container imageDigestPackageFixed in
jenkins/jenkins:2.426.1-jdk11b470bcdc4ecd
libpng1.6@1.6.39-2
no fix listed

Open the chart page →

9,102
typemilltypemill-helm-chart2.2.02 of 2See more

typemill typemill-helm-chart 2.2.0

2 of the 2 container images this version deploys carry CVE-2026-3713.

Container imageDigestPackageFixed in
kixote/typemilldigest-pinned4e9dff179519
libpng1.6@1.6.48-1+deb13u5
no fix listed
kixote/typemilldigest-pinned628f79a08cc7
libpng1.6@1.6.48-1+deb13u5
no fix listed

Open the chart page →

5,338
unitycatalogunitycatalogVerified publisher0.0.21 of 4See more

unitycatalog unitycatalog 0.0.2

1 of the 4 container images this version deploys carry CVE-2026-3713.

Container imageDigestPackageFixed in
ghcr.io/sdwbgn/unitycatalog-helm/docker/unitycatalog-ui:0.2.1-5d668c1ed07e7ca098d
libpng1.6@1.6.39-2
no fix listed

Open the chart page →

12,581
kafka-devwikimedia0.2.01 of 1See more

kafka-dev wikimedia 0.2.0

1 of the 1 container images this version deploys carry CVE-2026-3713.

Container imageDigestPackageFixed in
wurstmeister/zookeeper:latest7a7fd44a7210
libpng@1.2.50-1ubuntu2
no fix listed

Open the chart page →

41,427
wordpress-e2e-setupwoocommerce-e2e-setup0.1.11 of 2See more

wordpress-e2e-setup woocommerce-e2e-setup 0.1.1

1 of the 2 container images this version deploys carry CVE-2026-3713.

Container imageDigestPackageFixed in
library/wordpress:6.8-apache30bff39330d1
libpng1.6@1.6.48-1
no fix listed

Open the chart page →

7,696
wordpress-helmwordpress-helm0.2.91 of 4See more

wordpress-helm wordpress-helm 0.2.9

1 of the 4 container images this version deploys carry CVE-2026-3713.

Container imageDigestPackageFixed in
aapjeisbaas/wp-frankenphp:v0.2.26b261abc7fb0
libpng1.6@1.6.48-1+deb13u5
no fix listed

Open the chart page →

8,217
changedetection-iozekker6Verified publisher1.99.01 of 1See more

changedetection-io zekker6 1.99.0

1 of the 1 container images this version deploys carry CVE-2026-3713.

Container imageDigestPackageFixed in
ghcr.io/dgtlmoon/changedetection.io:0.60.47bb6963b730d
libpng1.6@1.6.39-2+deb12u5
no fix listed

Open the chart page →

2,595
jenkinsaditisingh-jenkins1.0.01 of 1See more

jenkins aditisingh-jenkins 1.0.0

1 of the 1 container images this version deploys carry CVE-2026-3713.

Container imageDigestPackageFixed in
jenkins/jenkins:ltsc1e4c349365f
libpng1.6@1.6.48-1+deb13u5
no fix listed

Open the chart page →

2,476
gotenbergadnoctemVerified publisher0.5.01 of 1See more

gotenberg adnoctem 0.5.0

1 of the 1 container images this version deploys carry CVE-2026-3713.

Container imageDigestPackageFixed in
gotenberg/gotenberg:8.37.0f29984bd1e22
libpng1.6@1.6.48-1+deb13u5
no fix listed

Open the chart page →

5,582
linkwardenadnoctemVerified publisher0.5.11 of 2See more

linkwarden adnoctem 0.5.1

1 of the 2 container images this version deploys carry CVE-2026-3713.

Container imageDigestPackageFixed in
ghcr.io/linkwarden/linkwarden:v2.16.30664c28a039b
libpng1.6@1.6.39-2+deb12u5
no fix listed

Open the chart page →

3,820
uptime-kumaadnoctemVerified publisher0.4.11 of 1See more

uptime-kuma adnoctem 0.4.1

1 of the 1 container images this version deploys carry CVE-2026-3713.

Container imageDigestPackageFixed in
louislam/uptime-kuma:2.5.4917318f9d7be
libpng1.6@1.6.39-2+deb12u5
no fix listed

Open the chart page →

30,028
esphomealekcVerified publisher2.8.11 of 1See more

esphome alekc 2.8.1

1 of the 1 container images this version deploys carry CVE-2026-3713.

Container imageDigestPackageFixed in
esphome/esphome:2026.8.285abea33854b
libpng1.6@1.6.48-1+deb13u5
no fix listed

Open the chart page →

3,112
esphomealexmorbo-esphomeVerified publisher1.0.01 of 1See more

esphome alexmorbo-esphome 1.0.0

1 of the 1 container images this version deploys carry CVE-2026-3713.

Container imageDigestPackageFixed in
esphome/esphome:2024.12.2b2c6322700ac
libpng1.6@1.6.39-2
no fix listed

Open the chart page →

6,324
flaresolverralexmorbo-flaresolverrVerified publisher0.2.01 of 1See more

flaresolverr alexmorbo-flaresolverr 0.2.0

1 of the 1 container images this version deploys carry CVE-2026-3713.

Container imageDigestPackageFixed in
flaresolverr/flaresolverr:v3.5.0139dfee1c6f8
libpng1.6@1.6.39-2+deb12u5
no fix listed

Open the chart page →

27,274
nginx-sni-proxyalexpressoVerified publisher1.0.21 of 1See more

nginx-sni-proxy alexpresso 1.0.2

1 of the 1 container images this version deploys carry CVE-2026-3713.

Container imageDigestPackageFixed in
library/nginx:latest05b8cb60c354
libpng1.6@1.6.48-1+deb13u5
no fix listed

Open the chart page →

1,827
music-assistant-serverandibraeuVerified publisher2.1.21 of 1See more

music-assistant-server andibraeu 2.1.2

1 of the 1 container images this version deploys carry CVE-2026-3713.

Container imageDigestPackageFixed in
ghcr.io/music-assistant/server:2.9.950666a6f8d7f
libpng1.6@1.6.39-2+deb12u5
no fix listed

Open the chart page →

5,817
mathesarandrenarchyVerified publisher1.8.01 of 1See more

mathesar andrenarchy 1.8.0

1 of the 1 container images this version deploys carry CVE-2026-3713.

Container imageDigestPackageFixed in
mathesar/mathesar:0.12.0091757cb01fe
libpng1.6@1.6.39-2+deb12u5
no fix listed

Open the chart page →

7,239
antrea-uiantreaVerified publisher0.8.01 of 2See more

antrea-ui antrea 0.8.0

1 of the 2 container images this version deploys carry CVE-2026-3713.

Container imageDigestPackageFixed in
antrea/antrea-ui-frontend:v0.8.0ee9686bcefb8
libpng1.6@1.6.48-1+deb13u5
no fix listed

Open the chart page →

3,239
platform-apiappscodeVerified publisher2026.9.111 of 3See more

platform-api appscode 2026.9.11

1 of the 3 container images this version deploys carry CVE-2026-3713.

Container imageDigestPackageFixed in
ghcr.io/appscode/gotenberg:8.25f9104080d9a7
libpng1.6@1.6.48-1
no fix listed

Open the chart page →

37,268
dokuwikiarea-42Verified publisher0.1.81 of 1See more

dokuwiki area-42 0.1.8

1 of the 1 container images this version deploys carry CVE-2026-3713.

Container imageDigestPackageFixed in
dokuwiki/dokuwiki:2025-05-14af08ecfdda239
libpng1.6@1.6.48-1
no fix listed

Open the chart page →

7,489
argonix-apiargonix0.2.01 of 4See more

argonix-api argonix 0.2.0

1 of the 4 container images this version deploys carry CVE-2026-3713.

Container imageDigestPackageFixed in
ghcr.io/argonix-io/argonix-api:1.0.068e17a8aaa40
libpng1.6@1.6.48-1+deb13u5
no fix listed

Open the chart page →

4,923
arlas-aiasarlas-stackVerified publisher28.8.01 of 22See more

arlas-aias arlas-stack 28.8.0

1 of the 22 container images this version deploys carry CVE-2026-3713.

Container imageDigestPackageFixed in
bitnamilegacy/elasticsearch:9.0.1-debian-12-r0e6f6ddcce2f1
libpng1.6@1.6.39-2
no fix listed

Open the chart page →

40,238
smartorchestratorassist-iot-smart-orchestrator4.0.01 of 14See more

smartorchestrator assist-iot-smart-orchestrator 4.0.0

1 of the 14 container images this version deploys carry CVE-2026-3713.

Container imageDigestPackageFixed in
assistiot/smart-orchestrator_scheduler_mc:latestb1dbe4d62a03
libpng1.6@1.6.39-2
no fix listed

Open the chart page →

45,363

Container images carrying it

372 by charts deploying them

A fixed version is listed for 0 of the 2 affected packages.

Container imageDigestPackageFixed inUsed by
ghcr.io/steadybit/agent:2.4.52bc7b260e44e
libpng1.6@1.6.48-1+deb13u5
no fix listed
1
ghcr.io/wgbh-mla/pbcore-util:pr-66e04659a3baa
libpng1.6@1.6.39-2+deb12u1
no fix listed
1
ghcr.io/wiremind/grafana-pdf-exporter:v1.7dbaa8527bf4c
libpng1.6@1.6.39-2
no fix listed
1
ghcr.io/wittdennis/calibre-web:1.1.1aa7d5d5dd6be
libpng1.6@1.6.39-2+deb12u5
no fix listed
1
ghcr.io/wizarrrr/wizarr:4.2.0-beta.3d19d886d5090
libpng1.6@1.6.39-2
no fix listed
1
ghcr.io/yurymkomarov/docker/kubernetes-kiosk-chromium:0.1.27bff29dcec72
libpng1.6@1.6.39-2+deb12u4
no fix listed
1
ghcr.io/zammad/zammad:7.1.3-0011e65123a43ecc
libpng1.6@1.6.48-1+deb13u5
no fix listed
1
ghcr.io/zoriya/kyoo_autosync:4.7.1fbba58ddb1a6
libpng1.6@1.6.39-2
no fix listed
1
ghcr.io/zoriya/kyoo_scanner:4.7.17dc0ee57b628
libpng1.6@1.6.39-2
no fix listed
1
public.ecr.aws/jtekt-corporation/image-storage-service:v1.16.17b1493760c716
libpng1.6@1.6.39-2
no fix listed
1
public.ecr.aws/jtekt-corporation/image-storage-service-gui:v1.9.434823c8abe00
libpng1.6@1.6.39-2
no fix listed
1
public.ecr.aws/jtekt-corporation/shinsei-manager:v2.8.15cd62142d6ed
libpng1.6@1.6.39-2
no fix listed
1
public.ecr.aws/jtekt-corporation/shinsei-manager-front:v1.5.5f8fb4eea4071
libpng1.6@1.6.39-2
no fix listed
1
public.ecr.aws/jtekt-corporation/time-series-storage-service:v1.5.1046ef5c9ed50
libpng1.6@1.6.39-2
no fix listed
1
public.ecr.aws/outerbounds/metaflow_metadata_service:v2.4.13f7567ce3419d
libpng1.6@1.6.39-2
no fix listed
1
public.ecr.aws/truefoundrycloud/async-service-distributor:5d48113bc678d694a0c8f8dabb2207c5aa2cfc53f74851ce31f5
libpng1.6@1.6.39-2
no fix listed
1
quay.io/kannika/kannika-api:0.18.0bcf9906d5a3c
libpng1.6@1.6.48-1+deb13u5
no fix listed
1
quay.io/mittwald/kube-httpcache:stable2169032c5840
libpng1.6@1.6.39-2
no fix listed
1
quay.io/yushiwho/api:e1f9d77e0d9b93dbf2b
libpng1.6@1.6.39-2
no fix listed
1
registry.gitlab.com/enbuild-staging/vivsoft-platform-ui/enbuild-frontend:1.0.3166353ce9bf98
libpng1.6@1.6.48-1+deb13u4
no fix listed
1
registry.gitlab.com/enbuild-staging/vivsoft-platform-ui/enbuild-mq-consumer:1.0.310e3cd8c7776d
libpng1.6@1.6.39-2+deb12u5
no fix listed
1
registry.gitlab.com/school_guy/docker-typo3:13.4.30-197d868ed76185d7270d
libpng1.6@1.6.39-2+deb12u5
no fix listed
1

syft 1.42.1 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.