StackRadar

CVE-2026-46675

Medium

Advisory

Published 29 Sept 2026In the index since 30 Sept 2026
Severity
Medium
worst across findings
CVSS
5.5
base score, highest
EPSS
—
probability of exploitation
CISA KEV
Not listed
no confirmed exploitation
Charts affected
1,050
of 17,966 indexed, latest versions
Container images
840
deployed by those charts
Fix available
None
affected packages

The matching OSV records carry no description.

Carried by container images the latest versions of 1,050 of 17,966 indexed charts deploy, on 840 images.

Affected packageAffected versionsFixed inImages
libpng1.6deb1.6.34-1ubuntu0.18.04.1, 1.6.34-1ubuntu0.18.04.2, 1.6.37-2, 1.6.37-3build5+20 moreno fix listed820
libpngdeb1.2.50-1ubuntu2, 1.2.50-1ubuntu2.14.04.2, 1.2.50-1ubuntu2.14.04.3, 1.2.54-1ubuntu1+1 moreno fix listed20
OSV records
UBUNTU-CVE-2026-46675DEBIAN-CVE-2026-46675
Trending
Rank 23 in indexed charts, since 30 Sept 2026. See the ranking →

Charts affected

1,050 by stars
ChartLatestAffected imagesRadar Score

Container images carrying it

840 by charts deploying them

A fixed version is listed for 0 of the 2 affected packages.

Container imageDigestPackageFixed inUsed by
structurizr/onpremises:2025.11.094b5ffb5119c8
libpng1.6@1.6.43-5build1
no fix listed
1
substratusai/verba:v0.4.0-baseURL261695be635eb
libpng1.6@1.6.39-2
no fix listed
1
svtechnmaa/svtech_nagvis:v1.2.118394b08e6c3
libpng1.6@1.6.39-2
no fix listed
1
svtechnmaa/svtech_rundeck:v1.2.26e368ace0977
libpng1.6@1.6.37-2
no fix listed
1
swimmwatch/cloakbrowser-mcp:1.14.1f6986203a121
libpng1.6@1.6.39-2+deb12u5
no fix listed
1
sysnet4admin/colosseum-agg:logbc25b152d88e
libpng1.6@1.6.37-3ubuntu0.5
no fix listed
1
sysnet4admin/colosseum-cms:loge74b43c7f492
libpng1.6@1.6.39-2
no fix listed
1
sysnet4admin/colosseum-prm:log5802bfcd7fed
libpng1.6@1.6.39-2
no fix listed
1
tchiotludo/akhq:0.28.0c2824dc2ae44
libpng1.6@1.6.57-1
no fix listed
1
teknas09/bird-pod:latest12a1fa85c4aa
libpng1.6@1.6.39-2
no fix listed
1
tensorflow/tensorflow:1.6.0-devel1e3172090703
libpng@1.2.54-1ubuntu1
no fix listed
1
themoah/klag:0.2.17eb502c8890ae
libpng1.6@1.6.43-5ubuntu0.6
no fix listed
1
theradius/loggia:0.463ba348546ec
libpng1.6@1.6.39-2
no fix listed
1
thingsboard/tb-postgres:latest2d17e4e36edc
libpng1.6@1.6.39-2+deb12u1
no fix listed
1
thongngo3301/stakefish:latesta341af5976e3
libpng1.6@1.6.39-2
no fix listed
1
timescale/timescaledb-ha:pg164f288c0a5213
libpng1.6@1.6.37-3ubuntu0.6
no fix listed
1
timescale/timescaledb-ha:pg15-latesta8e3322e1cf9
libpng1.6@1.6.37-3build5
no fix listed
1
timescale/timescaledb-ha:pg14.6-ts2.9.1-p1cdb9ae118899
libpng1.6@1.6.37-3build5
no fix listed
1
timescale/timescaledb-ha:pg17.2-ts2.18.2e8d0a9cc3db5
libpng1.6@1.6.37-3build5
no fix listed
1
timescale/timescaledb-ha:pg14-ts2.6-latested719c0cd19d
libpng1.6@1.6.37-3build5
no fix listed
1
timothyclarke/wptagent:2018-01-2322c41e5ca7e2
libpng@1.2.54-1ubuntu1
no fix listed
1
tinymediamanager/tinymediamanager:5.3.36f332431a2ae
libpng1.6@1.6.48-1+deb13u3
no fix listed
1
treskon/portrait:DEV-latest88e813f22347
libpng1.6@1.6.57-1
no fix listed
1
treskon/portrait-web-setup:DEV-latesta475d80e4ecf
libpng1.6@1.6.39-2
no fix listed
1
trinodb/trino:405ee80ab5eeab2
libpng1.6@1.6.37-3build5
no fix listed
1
trueosiris/vrising:latest9356f98ad561
libpng1.6@1.6.37-3ubuntu0.4
no fix listed
1
unitycatalog/unitycatalog-ui:main-aadc6fc3a688197b218
libpng1.6@1.6.39-2
no fix listed
1
vinanrra/7dtd-server:v0.4.4f9534490bd2b
libpng1.6@1.6.34-1ubuntu0.18.04.2
no fix listed
1
vlebediantsev/notes-admin-front:latest007c6670ff48
libpng1.6@1.6.39-2
no fix listed
1
vlebediantsev/notes-project-front:latest945675fd2636
libpng1.6@1.6.39-2
no fix listed
1
vlebediantsev/registration-ms-front-app-host:latest54f69d116c50
libpng1.6@1.6.39-2
no fix listed
1
voltha/voltha-envoy:1.6.059ab2a00f712
libpng@1.2.50-1ubuntu2.14.04.2
no fix listed
1
voltha/voltha-onos:5.1.8e038acb950d3
libpng1.6@1.6.34-1ubuntu0.18.04.2
no fix listed
1
voska/hass-mcp:latest7142a431e2c5
libpng1.6@1.6.39-2
no fix listed
1
wallarm/kong:3.1.0-ubuntu-4.6.0ea9608c82e40
libpng1.6@1.6.37-2
no fix listed
1
wavefronthq/proxy:9.2d1064d28f6eb
libpng1.6@1.6.34-1ubuntu0.18.04.2
no fix listed
1
wazuh/wazuh-dashboard:4.4.11787550d2358
libpng1.6@1.6.37-2
no fix listed
1
wiktorn/overpass-api:latest9bb5f4a9b54c
libpng1.6@1.6.39-2+deb12u5
no fix listed
1
wistefan/mvf:lateste0887302b2d8
libpng1.6@1.6.37-3build5
no fix listed
1
workadventure/playwright-synthetic-monitoring:main92b664c2a06f
libpng1.6@1.6.37-3build5
no fix listed
1
wso2/wso2am:2.6.0fbe0f4059b74
libpng1.6@1.6.37-2
no fix listed
1
wso2/wso2ei-analytics-dashboard:6.6.0526a1ccae902
libpng1.6@1.6.34-1ubuntu0.18.04.2
no fix listed
1
wso2/wso2ei-analytics-worker:6.6.021e6b03449ac
libpng1.6@1.6.34-1ubuntu0.18.04.2
no fix listed
1
wso2/wso2ei-integrator:6.6.0790cd8c3a5a2
libpng1.6@1.6.34-1ubuntu0.18.04.2
no fix listed
1
xeladock/mysql_dns:latest4baf531453f1
libpng1.6@1.6.37-3build5
no fix listed
1
xeladock/nginx2:latestc259a67b1dff
libpng1.6@1.6.37-3build5
no fix listed
1
xeotek/kadeck:6.3.439a3b37a17c5
libpng1.6@1.6.37-3build5
no fix listed
1
xeotek/kadeck:4.2.94c6b04d9ce55
libpng1.6@1.6.37-2
no fix listed
1
xom4ekp2p/infini-route-attestators-public-mainnet-attester:latestd0e0aa238b02
libpng1.6@1.6.39-2
no fix listed
1
xom4ekp2p/infini-route-attestators-public-mainnet-avs-webapi:latest2745b5fd8785
libpng1.6@1.6.39-2
no fix listed
1

syft 1.42.1 · advisories as of 30 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.