CVE-2026-40930
MediumAdvisory
Published 4 Jun 2026In the index since 5 Sept 2026
- Severity
- Medium
- worst across findings
- CVSS
- 5.4
- base score, highest
- EPSS
- 0.002
- 10th percentile
- CISA KEV
- Not listed
- no confirmed exploitation
- Charts affected
- 333
- of 17,787 indexed, latest versions
- Container images
- 262
- deployed by those charts
- Fix available
- 2 of 2
- affected packages
The matching OSV records carry no description.
Carried by container images the latest versions of 333 of 17,787 indexed charts deploy, on 262 images.
| Affected package | Affected versions | Fixed in | Images |
|---|---|---|---|
| libpng1.6deb | 1.6.37-2, 1.6.37-3build5, 1.6.37-3ubuntu0.4, 1.6.37-3ubuntu0.5 | 1.6.37-2ubuntu0.1~esm3, 1.6.37-3ubuntu0.6 | 210 |
| libpngapk | 1.6.53-r0, 1.6.54-r0, 1.6.55-r0, 1.6.56-r0+1 more | 1.6.58-r1 | 52 |
- OSV records
- ALPINE-CVE-2026-40930UBUNTU-CVE-2026-40930
- Also known as
- USN-8639-1
Charts affected
333 by stars
| Chart | Latest | Affected images | Radar Score |
|---|---|---|---|
| airsonicgeek-cookbookVerified publisher | 6.4.2 | 1 of 1See more | 18,217 |
| calibre-webgeek-cookbookVerified publisher | 8.4.2 | 1 of 1See more | 16,178 |
| double-takegeek-cookbookVerified publisher | 2.3.2 | 1 of 1See more | 12,270 |
| gapsgeek-cookbookVerified publisher | 5.4.2 | 1 of 1See more | 8,982 |
| lidarrgeek-cookbookVerified publisher | 14.2.2 | 1 of 1See more | 14,328 |
| nzbhydra2geek-cookbookVerified publisher | 10.4.2 | 1 of 1See more | 17,758 |
| openkmgeek-cookbookVerified publisher | 4.2.0 | 1 of 1See more | 28,039 |
| photoprismgeek-cookbookVerified publisher | 7.2.0 | 1 of 1See more | 19,560 |
| puppeteergeek-cookbookVerified publisher | 1.2.2 | 1 of 1See more | 15,792 |
| seafilegeek-cookbookVerified publisher | 3.2.0 | 1 of 1See more | 24,355 |
| xtevegeek-cookbookVerified publisher | 8.4.2 | 1 of 1See more | 17,996 |
| dispatchoor-uigeneral-helm-chartsVerified publisher | 0.1.0 | 1 of 1See more | 1,339 |
| geonetwork-k8sgeonetwork-k8sVerified publisher | 4.2.8 | 2 of 5See more | 34,879 |
| jaegergpg-dev | 3.3.3 | 1 of 5See more | 19,291 |
| video-analytics-demogpu-operator | 0.1.9 | 1 of 3See more | 15,780 |
| gravitino-iceberg-rest-server-helmgravitino-iceberg-rest-server | 1.3.11 | 1 of 1See more | 4,604 |
| grayloggraylogVerified publisher | 1.0.2 | 1 of 4See more | 5,339 |
| hawk-envoy-pluginhawk | 0.1.0 | 1 of 4See more | 9,151 |
| pageshelm-chart-repos-camden | 1.0.0 | 1 of 3See more | 20,233 |
| nginx-charthelm-chart-sample-app | 0.1.0 | 1 of 1See more | 4,596 |
| appwritehelmforgeVerified publisher | 1.3.4 | 1 of 5See more | 7,010 |
| ckanhelmforgeVerified publisher | 1.3.8 | 1 of 6See more | 9,991 |
| countlyhelmforgeVerified publisher | 1.2.6 | 1 of 3See more | 18,923 |
| openreel-videohelmforgeVerified publisher | 1.0.3 | 1 of 1See more | 1,086 |
| pageshelm-repo | 1.0.0 | 1 of 3See more | 20,233 |
| svacerhelm-svacer | 0.6.0 | 1 of 1See more | 6,076 |
| nominatimheywood8-helm-chartsVerified publisher | 3.10.8 | 1 of 3See more | 14,350 |
| printserverhmediadeVerified publisher | 1.0.2 | 1 of 4See more | 10,918 |
| eoloplanthttpd-eoloplant | 0.1.0 | 1 of 7See more | 32,336 |
| prometheushuangchengwu-helm-chart | 0.1.0 | 2 of 3See more | 16,482 |
| skywalking-v1huangchengwu-helm-chart | 0.1.0 | 2 of 4See more | 20,727 |
| mvfi4trustVerified publisher | 1.1.2 | 1 of 1See more | 7,184 |
| vcwaltidi4trustVerified publisher | 0.0.19 | 1 of 1See more | 7,902 |
| ikigaiikigai-chartVerified publisher | 0.0.9 | 2 of 58See more | 37,844 |
| nifi-registryimprowisedVerified publisher | 1.0.0 | 1 of 2See more | 5,360 |
| itm-servicesintelVerified publisher | 2.0.0 | 1 of 8See more | 18,137 |
| multimodal-data-visualizationintelVerified publisher | 3.0.0 | 1 of 2See more | 11,123 |
| manyfoldjeffrescVerified publisher | 1.0.3 | 1 of 1See more | 1,961 |
| valheim-serverk8s-chartsVerified publisher | 1.3.0 | 1 of 1See more | 6,136 |
| audiobookshelfk8s-home-lab-repo | 2.0.1 | 1 of 1See more | 2,351 |
| lidarrk8s-home-lab-repo | 15.3.1 | 1 of 1See more | 1,568 |
| unifik8sonlabVerified publisher | 0.3.7 | 1 of 1See more | 7,333 |
| kadeck-teamskadeck | 1.1.21 | 1 of 1See more | 3,615 |
| kadeck-webkadeck | 0.6.0 | 1 of 1See more | 7,292 |
| kron-aapm-agentkron-aapm-agent | 1.1.0 | 1 of 1See more | 8,922 |
| aapm-servicekron-pam-aapm-helmcharts | 1.2.5 | 1 of 1See more | 2,645 |
| kron-aapm-agentkron-pam-aapm-helmcharts | 1.2.5 | 1 of 1See more | 2,746 |
| kubernetes-netskope-publisherkubernetes-netskope-publisherVerified publisher | 1.5.0 | 1 of 2See more | 3,583 |
| penpotkubitodevVerified publisher | 1.2.1 | 2 of 5See more | 17,002 |
| kusionkusionstackVerified publisher | 0.14.1 | 1 of 3See more | 6,879 |
Container images carrying it
262 by charts deploying them
A fixed version is listed for 2 of the 2 affected packages.
| Container image | Digest | Package | Fixed in | Used by |
|---|---|---|---|---|
| dellcloud/ | 6ba7b22caacd | libpng1.6 | 1.6.37-2ubuntu0.1~esm3 | 79 |
| nginxinc/ | 0c79d56aee56 | libpng | 1.6.58-r1 | 6 |
| solsson/ | 41e5d8f6f290 | libpng1.6 | 1.6.37-2ubuntu0.1~esm3 | 5 |
| jaegertracing/ | d48d6dab2c65 | libpng1.6 | 1.6.37-3ubuntu0.6 | 4 |
| mastercloudapps/ | 40a950b311b2 | libpng1.6 | 1.6.37-3ubuntu0.6 | 4 |
| ciscolabs/ | a7b60ec88285 | libpng1.6 | 1.6.37-2ubuntu0.1~esm3 | 3 |
| ciscolabs/ | b59fc10bb821 | libpng1.6 | 1.6.37-2ubuntu0.1~esm3 | 3 |
| codeurjc/ | 800cf520c245 | libpng1.6 | 1.6.37-3ubuntu0.6 | 3 |
| jacobalberty/ | 896c0ab82d33 | libpng1.6 | 1.6.37-2ubuntu0.1~esm3 | 3 |
| selenium/ | 02f251d48d5f | libpng1.6 | 1.6.37-2ubuntu0.1~esm3 | 3 |
| apache/ | 7cdfd8deec92 | libpng1.6 | 1.6.37-3ubuntu0.6 | 2 |
| geoservercloud/ | 756559ee788a | libpng1.6 | 1.6.37-2ubuntu0.1~esm3 | 2 |
| geoservercloud/ | 99540eef78ad | libpng1.6 | 1.6.37-2ubuntu0.1~esm3 | 2 |
| geoservercloud/ | 5c254c53a357 | libpng1.6 | 1.6.37-2ubuntu0.1~esm3 | 2 |
| geoservercloud/ | c687b1cbc891 | libpng1.6 | 1.6.37-2ubuntu0.1~esm3 | 2 |
| geoservercloud/ | 5288f320cf36 | libpng1.6 | 1.6.37-2ubuntu0.1~esm3 | 2 |
| geoservercloud/ | a30a60ac6cd0 | libpng1.6 | 1.6.37-2ubuntu0.1~esm3 | 2 |
| hookiesolutions/ | 0629694246ba | libpng1.6 | 1.6.37-2ubuntu0.1~esm3 | 2 |
| hyperledger/ | a674d35eec9a | libpng1.6 | 1.6.37-2ubuntu0.1~esm3 | 2 |
| library/ | 7cbcec0086ac | libpng1.6 | 1.6.37-3ubuntu0.6 | 2 |
| obsidiandynamics/ | 5337c9e0e2de | libpng1.6 | 1.6.37-2ubuntu0.1~esm3 | 2 |
| piomin/ | 871f784dd6bc | libpng1.6 | 1.6.37-3ubuntu0.6 | 2 |
| ghcr.io/ | 536358d7b17e | libpng1.6 | 1.6.37-3ubuntu0.6 | 2 |
| ghcr.io/ | 5be52524664c | libpng1.6 | 1.6.37-3ubuntu0.6 | 2 |
| ghcr.io/ | 5f545698e907 | libpng1.6 | 1.6.37-3ubuntu0.6 | 2 |
| ghcr.io/ | 103fbcec2314 | libpng1.6 | 1.6.37-2ubuntu0.1~esm3 | 2 |
| ghcr.io/ | 9b6105be7ad0 | libpng1.6 | 1.6.37-2ubuntu0.1~esm3 | 2 |
| ghcr.io/ | 03fd01b4f56e | libpng1.6 | 1.6.37-3ubuntu0.6 | 2 |
| registry.gitlab.com/ | 9bdb1062d960 | libpng | 1.6.58-r1 | 2 |
| 5200710/ | 092d3088a5fb | libpng1.6 | 1.6.37-2ubuntu0.1~esm3 | 1 |
| ahmetfurkandemir/ | 142231a0b8b7 | libpng1.6 | 1.6.37-3ubuntu0.6 | 1 |
| airsonicadvanced/ | f7cbafac2806 | libpng1.6 | 1.6.37-2ubuntu0.1~esm3 | 1 |
| andrewgolikov55/ | fcc001b61c0e | libpng1.6 | 1.6.37-3ubuntu0.6 | 1 |
| andrewmackrodt/ | 33f9080470c9 | libpng1.6 | 1.6.37-3ubuntu0.6 | 1 |
| anguda/ | c435285fc241 | libpng1.6 | 1.6.37-2ubuntu0.1~esm3 | 1 |
| apache/ | 80136ae753ee | libpng1.6 | 1.6.37-3ubuntu0.6 | 1 |
| apache/ | afa47bf1692a | libpng1.6 | 1.6.37-2ubuntu0.1~esm3 | 1 |
| apache/ | 63b8e3e40742 | libpng1.6 | 1.6.37-3ubuntu0.6 | 1 |
| apachepulsar/ | 16f9fdab3fa6 | libpng1.6 | 1.6.37-3ubuntu0.6 | 1 |
| apachepulsar/ | 3b262ab7a7d9 | libpng1.6 | 1.6.37-2ubuntu0.1~esm3 | 1 |
| apachepulsar/ | 9c9947de139d | libpng1.6 | 1.6.37-3ubuntu0.6 | 1 |
| apachepulsar/ | d056c89b7131 | libpng1.6 | 1.6.37-2ubuntu0.1~esm3 | 1 |
| apachepulsar/ | d538416d5afe | libpng1.6 | 1.6.37-2ubuntu0.1~esm3 | 1 |
| apache/ | 76c176e8a0e4 | libpng1.6 | 1.6.37-3ubuntu0.6 | 1 |
| apache/ | c8fb51195444 | libpng1.6 | 1.6.37-3ubuntu0.6 | 1 |
| apache/ | 133d35d2c263 | libpng1.6 | 1.6.37-3ubuntu0.6 | 1 |
| apache/ | b4ec8c18d079 | libpng1.6 | 1.6.37-2ubuntu0.1~esm3 | 1 |
| apache/ | 295f1dc87d98 | libpng1.6 | 1.6.37-3ubuntu0.6 | 1 |
| apache/ | 80530f0308a5 | libpng1.6 | 1.6.37-2ubuntu0.1~esm3 | 1 |
| apache/ | 92d055a84e9e | libpng1.6 | 1.6.37-3ubuntu0.6 | 1 |