StackRadar

CVE-2026-3713

Medium

Advisory

Published 8 Mar 2026In the index since 5 Sept 2026
Severity
Medium
worst across findings
CVSS
5.3
base score, highest
EPSS
0.001
3rd percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
524
of 17,781 indexed, latest versions
Container images
372
deployed by those charts
Fix available
None
affected packages

The matching OSV records carry no description.

Carried by container images the latest versions of 524 of 17,781 indexed charts deploy, on 372 images.

Affected packageAffected versionsFixed inImages
libpngdeb1.2.50-1ubuntu2, 1.2.50-1ubuntu2.14.04.2, 1.2.50-1ubuntu2.14.04.3no fix listed7
libpng1.6deb1.6.39-2, 1.6.39-2+deb12u1, 1.6.39-2+deb12u3, 1.6.39-2+deb12u4+6 moreno fix listed365
OSV records
DEBIAN-CVE-2026-3713UBUNTU-CVE-2026-3713

Charts affected

524 by stars
ChartLatestAffected imagesRadar Score
chart-bookhelm-deploy-book0.1.01 of 3See more

chart-book helm-deploy-book 0.1.0

1 of the 3 container images this version deploys carry CVE-2026-3713.

Container imageDigestPackageFixed in
dannielkil/book-frontend:latest937993927694
libpng1.6@1.6.39-2
no fix listed

Open the chart page →

9,122
archiveboxhelmforgeVerified publisher1.1.121 of 1See more

archivebox helmforge 1.1.12

1 of the 1 container images this version deploys carry CVE-2026-3713.

Container imageDigestPackageFixed in
archivebox/archivebox:0.7.41a5a37331091
libpng1.6@1.6.39-2+deb12u5
no fix listed

Open the chart page →

7,633
castopodhelmforgeVerified publisher1.2.71 of 3See more

castopod helmforge 1.2.7

1 of the 3 container images this version deploys carry CVE-2026-3713.

Container imageDigestPackageFixed in
castopod/castopod:1.15.54e4f0440520f
libpng1.6@1.6.48-1+deb13u3
no fix listed

Open the chart page →

9,342
changedetectionhelmforgeVerified publisher1.1.151 of 1See more

changedetection helmforge 1.1.15

1 of the 1 container images this version deploys carry CVE-2026-3713.

Container imageDigestPackageFixed in
ghcr.io/dgtlmoon/changedetection.io:0.60.3ecacd9fd0c66
libpng1.6@1.6.39-2+deb12u5
no fix listed

Open the chart page →

2,595
chiefonboardinghelmforgeVerified publisher1.1.141 of 3See more

chiefonboarding helmforge 1.1.14

1 of the 3 container images this version deploys carry CVE-2026-3713.

Container imageDigestPackageFixed in
chiefonboarding/chiefonboarding:v2.4.159bc7aa60fe7
libpng1.6@1.6.48-1+deb13u3
no fix listed

Open the chart page →

10,849
dawarichhelmforgeVerified publisher1.0.01 of 4See more

dawarich helmforge 1.0.0

1 of the 4 container images this version deploys carry CVE-2026-3713.

Container imageDigestPackageFixed in
postgis/postgis:18-3.67e00e8c3539f
libpng1.6@1.6.48-1+deb13u5
no fix listed

Open the chart page →

4,742
discount-bandithelmforgeVerified publisher2.0.81 of 3See more

discount-bandit helmforge 2.0.8

1 of the 3 container images this version deploys carry CVE-2026-3713.

Container imageDigestPackageFixed in
cybrarist/discount-bandit:v4.0.4e9e2447ac666
libpng1.6@1.6.48-1+deb13u5
no fix listed

Open the chart page →

29,817
druidhelmforgeVerified publisher1.3.61 of 4See more

druid helmforge 1.3.6

1 of the 4 container images this version deploys carry CVE-2026-3713.

Container imageDigestPackageFixed in
apache/druid:37.0.00116fb802786
libpng1.6@1.6.39-2+deb12u3
no fix listed

Open the chart page →

8,541
drupalhelmforgeVerified publisher1.2.131 of 2See more

drupal helmforge 1.2.13

1 of the 2 container images this version deploys carry CVE-2026-3713.

Container imageDigestPackageFixed in
library/drupal:11.4.6-php8.5-apache-bookworm28f7931ecbcb
libpng1.6@1.6.39-2+deb12u5
no fix listed

Open the chart page →

3,802
entehelmforgeVerified publisher1.0.21 of 4See more

ente helmforge 1.0.2

1 of the 4 container images this version deploys carry CVE-2026-3713.

Container imageDigestPackageFixed in
ghcr.io/ente/web:5ab0c5b4c7a89c4e470ef6f793600da33cebf35d3f4864eb7f11
libpng1.6@1.6.48-1+deb13u5
no fix listed

Open the chart page →

4,201
generichelmforgeVerified publisher3.1.51 of 1See more

generic helmforge 3.1.5

1 of the 1 container images this version deploys carry CVE-2026-3713.

Container imageDigestPackageFixed in
library/nginx:1.31.505b8cb60c354
libpng1.6@1.6.48-1+deb13u5
no fix listed

Open the chart page →

1,827
immichhelmforgeVerified publisher1.2.81 of 5See more

immich helmforge 1.2.8

1 of the 5 container images this version deploys carry CVE-2026-3713.

Container imageDigestPackageFixed in
ghcr.io/immich-app/immich-server:v3.1.0b434cb9287ee
libpng1.6@1.6.48-1+deb13u5
no fix listed

Open the chart page →

11,042
jenkinshelmforgeVerified publisher1.0.91 of 1See more

jenkins helmforge 1.0.9

1 of the 1 container images this version deploys carry CVE-2026-3713.

Container imageDigestPackageFixed in
jenkins/jenkins:2.568.3-lts-jdk21c1e4c349365f
libpng1.6@1.6.48-1+deb13u5
no fix listed

Open the chart page →

2,476
medikeephelmforgeVerified publisher2.0.01 of 3See more

medikeep helmforge 2.0.0

1 of the 3 container images this version deploys carry CVE-2026-3713.

Container imageDigestPackageFixed in
ghcr.io/afairgiant/medikeep:v0.69.0766699daa9ac
libpng1.6@1.6.39-2+deb12u5
no fix listed

Open the chart page →

6,022
moodlehelmforgeVerified publisher1.1.01 of 2See more

moodle helmforge 1.1.0

1 of the 2 container images this version deploys carry CVE-2026-3713.

Container imageDigestPackageFixed in
moodlehq/moodle-php-apache:8.4-bookworm922af5166835
libpng1.6@1.6.39-2+deb12u5
no fix listed

Open the chart page →

6,103
phpmyadminhelmforgeVerified publisher2.0.11 of 1See more

phpmyadmin helmforge 2.0.1

1 of the 1 container images this version deploys carry CVE-2026-3713.

Container imageDigestPackageFixed in
phpmyadmin/phpmyadmin:5.2.342a200db07b4
libpng1.6@1.6.48-1
no fix listed

Open the chart page →

4,751
uptime-kumahelmforgeVerified publisher1.5.121 of 1See more

uptime-kuma helmforge 1.5.12

1 of the 1 container images this version deploys carry CVE-2026-3713.

Container imageDigestPackageFixed in
louislam/uptime-kuma:2.5.33e24e96c89ef
libpng1.6@1.6.39-2+deb12u5
no fix listed

Open the chart page →

30,099
myapphelmingapp0.1.01 of 1See more

myapp helmingapp 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-3713.

Container imageDigestPackageFixed in
muhammedgamal/fp23:latest74b4cd69b6fa
libpng1.6@1.6.39-2
no fix listed

Open the chart page →

12,607
jellyfinhelm-l3st86Verified publisher0.1.81 of 1See more

jellyfin helm-l3st86 0.1.8

1 of the 1 container images this version deploys carry CVE-2026-3713.

Container imageDigestPackageFixed in
jellyfin/jellyfin:latestaefb67e6a7ff
libpng1.6@1.6.48-1+deb13u5
no fix listed

Open the chart page →

2,604
openbashelm-openbasVerified publisher1.8.141 of 7See more

openbas helm-openbas 1.8.14

1 of the 7 container images this version deploys carry CVE-2026-3713.

Container imageDigestPackageFixed in
openbas/caldera-server:5.1.0a277796d9724
libpng1.6@1.6.39-2
no fix listed

Open the chart page →

25,017
my-nginxhelmtaiwo0.1.01 of 1See more

my-nginx helmtaiwo 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-3713.

Container imageDigestPackageFixed in
library/nginx:latest05b8cb60c354
libpng1.6@1.6.48-1+deb13u5
no fix listed

Open the chart page →

1,827
samplehelmapphelmtraining3.0.01 of 1See more

samplehelmapp helmtraining 3.0.0

1 of the 1 container images this version deploys carry CVE-2026-3713.

Container imageDigestPackageFixed in
praravind1801/helmimages:3.0.0f29d637b9ce1
libpng1.6@1.6.39-2
no fix listed

Open the chart page →

5,973
paperlesshomelabcihelmchartstestVerified publisher9.1.91 of 1See more

paperless homelabcihelmchartstest 9.1.9

1 of the 1 container images this version deploys carry CVE-2026-3713.

Container imageDigestPackageFixed in
ghcr.io/paperless-ngx/paperless-ngx:2.0.1ab255bea133e
libpng1.6@1.6.39-2
no fix listed

Open the chart page →

16,384
paperlesshpVerified publisher0.1.12 of 5See more

paperless hp 0.1.1

2 of the 5 container images this version deploys carry CVE-2026-3713.

Container imageDigestPackageFixed in
gotenberg/gotenberg:8.3467097317623a
libpng1.6@1.6.48-1+deb13u5
no fix listed
ghcr.io/paperless-ngx/paperless-ngx:3.1.3aa810a36942c
libpng1.6@1.6.48-1+deb13u5
no fix listed

Open the chart page →

26,612
hydrahydraVerified publisher0.9.51 of 2See more

hydra hydra 0.9.5

1 of the 2 container images this version deploys carry CVE-2026-3713.

Container imageDigestPackageFixed in
ghcr.io/smarter-project/hydra/isolated-vm:main4457b79b24cd
libpng1.6@1.6.39-2+deb12u3
no fix listed

Open the chart page →

9,011
isolated-vmhydraVerified publisher0.9.41 of 1See more

isolated-vm hydra 0.9.4

1 of the 1 container images this version deploys carry CVE-2026-3713.

Container imageDigestPackageFixed in
ghcr.io/smarter-project/hydra/isolated-vm:main4457b79b24cd
libpng1.6@1.6.39-2+deb12u3
no fix listed

Open the chart page →

7,733
nginx-charthyomin-nginx0.1.01 of 1See more

nginx-chart hyomin-nginx 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-3713.

Container imageDigestPackageFixed in
library/nginx:latest05b8cb60c354
libpng1.6@1.6.48-1+deb13u5
no fix listed

Open the chart page →

1,827
nginx-charthyun-nginx0.1.01 of 1See more

nginx-chart hyun-nginx 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-3713.

Container imageDigestPackageFixed in
library/nginx:latest05b8cb60c354
libpng1.6@1.6.48-1+deb13u5
no fix listed

Open the chart page →

1,827
ibm-microclimateibm-charts0.1.01 of 8See more

ibm-microclimate ibm-charts 0.1.0

1 of the 8 container images this version deploys carry CVE-2026-3713.

Container imageDigestPackageFixed in
jenkins/jenkins:ltsc1e4c349365f
libpng1.6@1.6.48-1+deb13u5
no fix listed

Open the chart page →

57,669
nextjsicoretechVerified publisher1.2.01 of 1See more

nextjs icoretech 1.2.0

1 of the 1 container images this version deploys carry CVE-2026-3713.

Container imageDigestPackageFixed in
library/nginx:latest05b8cb60c354
libpng1.6@1.6.48-1+deb13u5
no fix listed

Open the chart page →

1,827
ilum-unity-catalogilumVerified publisher0.1.01 of 4See more

ilum-unity-catalog ilum 0.1.0

1 of the 4 container images this version deploys carry CVE-2026-3713.

Container imageDigestPackageFixed in
unitycatalog/unitycatalog-ui:main-aadc6fc3a688197b218
libpng1.6@1.6.39-2
no fix listed

Open the chart page →

11,812
web-chartimcherry57780.1.01 of 1See more

web-chart imcherry5778 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-3713.

Container imageDigestPackageFixed in
library/nginx:latest05b8cb60c354
libpng1.6@1.6.48-1+deb13u5
no fix listed

Open the chart page →

1,827
onechartimioVerified publisher0.76.01 of 1See more

onechart imio 0.76.0

1 of the 1 container images this version deploys carry CVE-2026-3713.

Container imageDigestPackageFixed in
library/nginx:latest05b8cb60c354
libpng1.6@1.6.48-1+deb13u5
no fix listed

Open the chart page →

1,827
op-stackinfradao0.0.11 of 1See more

op-stack infradao 0.0.1

1 of the 1 container images this version deploys carry CVE-2026-3713.

Container imageDigestPackageFixed in
library/nginx:latest05b8cb60c354
libpng1.6@1.6.48-1+deb13u5
no fix listed

Open the chart page →

1,827
intelowlintelowl-helm6.6.1-01-06-20261 of 5See more

intelowl intelowl-helm 6.6.1-01-06-2026

1 of the 5 container images this version deploys carry CVE-2026-3713.

Container imageDigestPackageFixed in
intelowlproject/intelowl:v6.6.10b22e547ea6b
libpng1.6@1.6.39-2
no fix listed

Open the chart page →

17,852
inventreeinventreeOfficialVerified publisher0.4.282 of 2See more

inventree inventree 0.4.28

2 of the 2 container images this version deploys carry CVE-2026-3713.

Container imageDigestPackageFixed in
inventree/inventree:1.5.4a946ec09da3e
libpng1.6@1.6.48-1+deb13u5
no fix listed
library/nginx:stabled5792f71a949
libpng1.6@1.6.48-1+deb13u5
no fix listed

Open the chart page →

5,788
daveit-at-mOfficialVerified publisher0.2.151 of 11See more

dave it-at-m 0.2.15

1 of the 11 container images this version deploys carry CVE-2026-3713.

Container imageDigestPackageFixed in
bitnamilegacy/elasticsearch:9.1.2-debian-12-r000176a47afa0
libpng1.6@1.6.39-2
no fix listed

Open the chart page →

15,089
opencloudjacobcolvinVerified publisher0.2.36 of 13See more

opencloud jacobcolvin 0.2.3

6 of the 13 container images this version deploys carry CVE-2026-3713.

Container imageDigestPackageFixed in
opencloudeu/web-extensions:unzip-1.0.01691ad6612a3
libpng1.6@1.6.39-2
no fix listed
opencloudeu/web-extensions:draw-io-1.0.027cb9b952f0d
libpng1.6@1.6.39-2
no fix listed
opencloudeu/web-extensions:external-sites-1.0.05b176baa3694
libpng1.6@1.6.39-2
no fix listed
opencloudeu/web-extensions:importer-1.0.06e8b2df6c5a4
libpng1.6@1.6.39-2
no fix listed
opencloudeu/web-extensions:progress-bars-1.0.082f888a34440
libpng1.6@1.6.39-2
no fix listed
opencloudeu/web-extensions:json-viewer-1.0.0e0ac35a9576e
libpng1.6@1.6.39-2
no fix listed

Open the chart page →

45,239
web-chartjaeeyun-ktcloudlab0.1.01 of 1See more

web-chart jaeeyun-ktcloudlab 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-3713.

Container imageDigestPackageFixed in
library/nginx:latest05b8cb60c354
libpng1.6@1.6.48-1+deb13u5
no fix listed

Open the chart page →

1,827
nginx-chartjaeki-nginx0.1.01 of 1See more

nginx-chart jaeki-nginx 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-3713.

Container imageDigestPackageFixed in
library/nginx:latest05b8cb60c354
libpng1.6@1.6.48-1+deb13u5
no fix listed

Open the chart page →

1,827
deconzjanip81-helm-chartsVerified publisher0.1.11 of 1See more

deconz janip81-helm-charts 0.1.1

1 of the 1 container images this version deploys carry CVE-2026-3713.

Container imageDigestPackageFixed in
deconzcommunity/deconz:2.29.2062de2362641
libpng1.6@1.6.39-2
no fix listed

Open the chart page →

10,780
jasperjasperVerified publisher1.0.2021 of 2See more

jasper jasper 1.0.202

1 of the 2 container images this version deploys carry CVE-2026-3713.

Container imageDigestPackageFixed in
ghcr.io/cjmalloy/jasper:v1.3.282726a947bb65b
libpng1.6@1.6.39-2+deb12u5
no fix listed

Open the chart page →

5,998
jasper-uijasperVerified publisher1.0.341 of 1See more

jasper-ui jasper 1.0.34

1 of the 1 container images this version deploys carry CVE-2026-3713.

Container imageDigestPackageFixed in
ghcr.io/cjmalloy/jasper-ui:v1.3.623246dc2160efe
libpng1.6@1.6.48-1+deb13u5
no fix listed

Open the chart page →

2,559
esphomejeffrescVerified publisher0.2.21 of 1See more

esphome jeffresc 0.2.2

1 of the 1 container images this version deploys carry CVE-2026-3713.

Container imageDigestPackageFixed in
ghcr.io/esphome/esphome:2026.4.078a82d810709
libpng1.6@1.6.39-2
no fix listed

Open the chart page →

5,040
jellyfinjellyfin-helm10.9.101 of 1See more

jellyfin jellyfin-helm 10.9.10

1 of the 1 container images this version deploys carry CVE-2026-3713.

Container imageDigestPackageFixed in
jellyfin/jellyfin:10.9.1079fb3d73a3e9
libpng1.6@1.6.39-2
no fix listed

Open the chart page →

4,489
jellyfinjellyfin--jellyfin-helm3.0.01 of 1See more

jellyfin jellyfin--jellyfin-helm 3.0.0

1 of the 1 container images this version deploys carry CVE-2026-3713.

Container imageDigestPackageFixed in
jellyfin/jellyfin:10.11.717285f9cce63
libpng1.6@1.6.48-1+deb13u4
no fix listed

Open the chart page →

3,001
jx-app-jenkinsjenkins-x0.0.151 of 2See more

jx-app-jenkins jenkins-x 0.0.15

1 of the 2 container images this version deploys carry CVE-2026-3713.

Container imageDigestPackageFixed in
jenkins/jenkins:ltsc1e4c349365f
libpng1.6@1.6.48-1+deb13u5
no fix listed

Open the chart page →

2,476
nginx-chartjinbok-nginx0.1.01 of 1See more

nginx-chart jinbok-nginx 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-3713.

Container imageDigestPackageFixed in
library/nginx:latest05b8cb60c354
libpng1.6@1.6.48-1+deb13u5
no fix listed

Open the chart page →

1,827
nginx-chartjiungVerified publisher0.1.01 of 1See more

nginx-chart jiung 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-3713.

Container imageDigestPackageFixed in
library/nginx:latest05b8cb60c354
libpng1.6@1.6.48-1+deb13u5
no fix listed

Open the chart page →

1,827
nginx-chartjongh09160.1.01 of 1See more

nginx-chart jongh0916 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-3713.

Container imageDigestPackageFixed in
library/nginx:latest05b8cb60c354
libpng1.6@1.6.48-1+deb13u5
no fix listed

Open the chart page →

1,827

Container images carrying it

372 by charts deploying them

A fixed version is listed for 0 of the 2 affected packages.

Container imageDigestPackageFixed inUsed by
ghcr.io/steadybit/agent:2.4.52bc7b260e44e
libpng1.6@1.6.48-1+deb13u5
no fix listed
1
ghcr.io/wgbh-mla/pbcore-util:pr-66e04659a3baa
libpng1.6@1.6.39-2+deb12u1
no fix listed
1
ghcr.io/wiremind/grafana-pdf-exporter:v1.7dbaa8527bf4c
libpng1.6@1.6.39-2
no fix listed
1
ghcr.io/wittdennis/calibre-web:1.1.1aa7d5d5dd6be
libpng1.6@1.6.39-2+deb12u5
no fix listed
1
ghcr.io/wizarrrr/wizarr:4.2.0-beta.3d19d886d5090
libpng1.6@1.6.39-2
no fix listed
1
ghcr.io/yurymkomarov/docker/kubernetes-kiosk-chromium:0.1.27bff29dcec72
libpng1.6@1.6.39-2+deb12u4
no fix listed
1
ghcr.io/zammad/zammad:7.1.3-0011e65123a43ecc
libpng1.6@1.6.48-1+deb13u5
no fix listed
1
ghcr.io/zoriya/kyoo_autosync:4.7.1fbba58ddb1a6
libpng1.6@1.6.39-2
no fix listed
1
ghcr.io/zoriya/kyoo_scanner:4.7.17dc0ee57b628
libpng1.6@1.6.39-2
no fix listed
1
public.ecr.aws/jtekt-corporation/image-storage-service:v1.16.17b1493760c716
libpng1.6@1.6.39-2
no fix listed
1
public.ecr.aws/jtekt-corporation/image-storage-service-gui:v1.9.434823c8abe00
libpng1.6@1.6.39-2
no fix listed
1
public.ecr.aws/jtekt-corporation/shinsei-manager:v2.8.15cd62142d6ed
libpng1.6@1.6.39-2
no fix listed
1
public.ecr.aws/jtekt-corporation/shinsei-manager-front:v1.5.5f8fb4eea4071
libpng1.6@1.6.39-2
no fix listed
1
public.ecr.aws/jtekt-corporation/time-series-storage-service:v1.5.1046ef5c9ed50
libpng1.6@1.6.39-2
no fix listed
1
public.ecr.aws/outerbounds/metaflow_metadata_service:v2.4.13f7567ce3419d
libpng1.6@1.6.39-2
no fix listed
1
public.ecr.aws/truefoundrycloud/async-service-distributor:5d48113bc678d694a0c8f8dabb2207c5aa2cfc53f74851ce31f5
libpng1.6@1.6.39-2
no fix listed
1
quay.io/kannika/kannika-api:0.18.0bcf9906d5a3c
libpng1.6@1.6.48-1+deb13u5
no fix listed
1
quay.io/mittwald/kube-httpcache:stable2169032c5840
libpng1.6@1.6.39-2
no fix listed
1
quay.io/yushiwho/api:e1f9d77e0d9b93dbf2b
libpng1.6@1.6.39-2
no fix listed
1
registry.gitlab.com/enbuild-staging/vivsoft-platform-ui/enbuild-frontend:1.0.3166353ce9bf98
libpng1.6@1.6.48-1+deb13u4
no fix listed
1
registry.gitlab.com/enbuild-staging/vivsoft-platform-ui/enbuild-mq-consumer:1.0.310e3cd8c7776d
libpng1.6@1.6.39-2+deb12u5
no fix listed
1
registry.gitlab.com/school_guy/docker-typo3:13.4.30-197d868ed76185d7270d
libpng1.6@1.6.39-2+deb12u5
no fix listed
1

syft 1.42.1 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.