CVE-2026-46675

Medium

Advisory

Published 29 Sept 2026In the index since 30 Sept 2026

Severity: Medium; worst across findings
CVSS: 5.5; base score, highest
EPSS: —; probability of exploitation
CISA KEV: Not listed; no confirmed exploitation
Charts affected: 1,060; of 17,957 indexed, latest versions
Container images: 851; deployed by those charts
Fix available: None; affected packages

The matching OSV records carry no description.

Carried by container images the latest versions of 1,060 of 17,957 indexed charts deploy, on 851 images.

Affected package	Affected versions	Fixed in	Images
libpng1.6deb	1.6.34-1ubuntu0.18.04.1, 1.6.34-1ubuntu0.18.04.2, 1.6.37-2, 1.6.37-3build5+20 more	no fix listed	831
libpngdeb	1.2.50-1ubuntu2, 1.2.50-1ubuntu2.14.04.2, 1.2.50-1ubuntu2.14.04.3, 1.2.54-1ubuntu1+1 more	no fix listed	20

OSV records: UBUNTU-CVE-2026-46675 DEBIAN-CVE-2026-46675
Trending: Rank 23 in indexed charts, since 30 Sept 2026. See the ranking →

Charts affected

1,060 by stars

Chart

Latest

Affected images

Radar Score

am-pattern-1wso2

2.6.0-7

1 of 6 See more

am-pattern-1 wso2 2.6.0-7

1 of the 6 container images this version deploys carry CVE-2026-46675.

Container image	Digest	Package	Fixed in
wso2/wso2am :2.6.0	fbe0f4059b74	libpng1.6@1.6.37-2	no fix listed

Open the chart page →

32,105

ei-pattern-1wso2

6.6.0-3

3 of 6 See more

ei-pattern-1 wso2 6.6.0-3

3 of the 6 container images this version deploys carry CVE-2026-46675.

Container image	Digest	Package	Fixed in
wso2/wso2ei-analytics-dashboard :6.6.0	526a1ccae902	libpng1.6@1.6.34-1ubuntu0.18.04.2	no fix listed
wso2/wso2ei-analytics-worker :6.6.0	21e6b03449ac	libpng1.6@1.6.34-1ubuntu0.18.04.2	no fix listed
wso2/wso2ei-integrator :6.6.0	790cd8c3a5a2	libpng1.6@1.6.34-1ubuntu0.18.04.2	no fix listed

Open the chart page →

50,862

tabbyxd

1.0.6

1 of 2 See more

tabby xd 1.0.6

1 of the 2 container images this version deploys carry CVE-2026-46675.

Container image	Digest	Package	Fixed in
library/nginx :1.25	a484819eb602	libpng1.6@1.6.39-2	no fix listed

Open the chart page →

7,980

nginx-chartxxoznge-nginx

0.1.0

1 of 1 See more

nginx-chart xxoznge-nginx 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-46675.

Container image	Digest	Package	Fixed in
library/nginx :latest	abe47724e466	libpng1.6@1.6.48-1+deb13u5	no fix listed

Open the chart page →

1,765

my-nginx-appyasser-nginx-app

0.1.0

1 of 1 See more

my-nginx-app yasser-nginx-app 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-46675.

Container image	Digest	Package	Fixed in
library/nginx :stable	b972f831f200	libpng1.6@1.6.48-1+deb13u5	no fix listed

Open the chart page →

1,765

jenkinszanise-jenkins-helm-chart

0.1.0

1 of 1 See more

jenkins zanise-jenkins-helm-chart 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-46675.

Container image	Digest	Package	Fixed in
jenkins/jenkins :lts	c1e4c349365f	libpng1.6@1.6.48-1+deb13u5	no fix listed

Open the chart page →

2,766

changedetection-iozekker6

1.102.0

1 of 1 See more

changedetection-io zekker6 1.102.0

1 of the 1 container images this version deploys carry CVE-2026-46675.

Container image	Digest	Package	Fixed in
ghcr.io/dgtlmoon/changedetection.io :0.60.7	096dae27b5d6	libpng1.6@1.6.39-2+deb12u5	no fix listed

Open the chart page →

2,916

NEW_APPzekker6

0.0.0

1 of 1 See more

NEW_APP zekker6 0.0.0

1 of the 1 container images this version deploys carry CVE-2026-46675.

Container image	Digest	Package	Fixed in
library/nginx :latest	abe47724e466	libpng1.6@1.6.48-1+deb13u5	no fix listed

Open the chart page →

1,765

sockpuppetbrowserzekker6

0.1.0

1 of 1 See more

sockpuppetbrowser zekker6 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-46675.

Container image	Digest	Package	Fixed in
dgtlmoon/sockpuppetbrowser :latest	1d8f72d2ce20	libpng1.6@1.6.39-2+deb12u5	no fix listed

Open the chart page →

4,916

zoo-project-druzoo-project

0.10.4

1 of 6 See more

zoo-project-dru zoo-project 0.10.4

1 of the 6 container images this version deploys carry CVE-2026-46675.

Container image	Digest	Package	Fixed in
zooproject/zoo-project :dru-19f3c4eed7c9ec9d1f0375bbe59f9d204a42bd3a	9a507cb7e2dd	libpng1.6@1.6.37-3ubuntu0.5	no fix listed

Open the chart page →

8,586

Container images carrying it

851 by charts deploying them

A fixed version is listed for 0 of the 2 affected packages.

Container image	Digest	Package	Fixed in	Used by
geoservercloud/geoserver-cloud-wfs :1.0-RC3	5288f320cf36	libpng1.6@1.6.37-2	no fix listed	2
geoservercloud/geoserver-cloud-wms :1.0-RC3	a30a60ac6cd0	libpng1.6@1.6.37-2	no fix listed	2
gjeanmart/safe-ganache-node :latest	926264c8f2d1	libpng1.6@1.6.39-2	no fix listed	2
gotenberg/gotenberg :8.36.0	87c16b9f3642	libpng1.6@1.6.48-1+deb13u5	no fix listed	2
gotenberg/gotenberg :8 :8.37.0	f29984bd1e22	libpng1.6@1.6.48-1+deb13u5	no fix listed	2
gradiant/srsran-5g :23_10_1	9061b1bf0f36	libpng1.6@1.6.37-2	no fix listed	2
graviteeio/apim-gateway :4.12.20-debian	8f1a14449381	libpng1.6@1.6.48-1+deb13u5	no fix listed	2
graviteeio/apim-management-api :4.12.20-debian	d30d085395ca	libpng1.6@1.6.48-1+deb13u5	no fix listed	2
homebridge/homebridge :latest	77c685a40911	libpng1.6@1.6.43-5ubuntu0.6	no fix listed	2
hookiesolutions/webhookie :latest	0629694246ba	libpng1.6@1.6.37-2	no fix listed	2
hyperledger/besu :22.4-openjdk-latest	a674d35eec9a	libpng1.6@1.6.37-2	no fix listed	2
jenkins/jenkins :2.426.1-jdk11	b470bcdc4ecd	libpng1.6@1.6.39-2	no fix listed	2
jenkins/jenkins :2.541.3-jdk21	c4098086090c	libpng1.6@1.6.48-1+deb13u3	no fix listed	2
juicedata/juicefs-csi-driver :v0.33.0	f918e7331c05	libpng1.6@1.6.39-2+deb12u5	no fix listed	2
kurento/kurento-media-server :latest	03c0d34d0828	libpng1.6@1.6.43-5build1	no fix listed	2
library/cassandra :3.11.6	5aa8400b4b3b	libpng1.6@1.6.34-1ubuntu0.18.04.2	no fix listed	2
library/cassandra :4.1.3	7cbcec0086ac	libpng1.6@1.6.37-3build5	no fix listed	2
library/nginx :latest	6e23479198b9	libpng1.6@1.6.48-1+deb13u4	no fix listed	2
library/nginx :1.27.0	98f8ec75657d	libpng1.6@1.6.39-2	no fix listed	2
library/nginx :1.29.4	9dd288848f44	libpng1.6@1.6.48-1+deb13u1	no fix listed	2
library/python :3.7	eedf63967cdb	libpng1.6@1.6.39-2	no fix listed	2
library/redmine :6.1.3-trixie	f474a901faec	libpng1.6@1.6.48-1+deb13u5	no fix listed	2
library/wordpress :6.8.3-apache :6.8-apache	30bff39330d1	libpng1.6@1.6.48-1	no fix listed	2
library/wordpress :latest	8746e7e072e3	libpng1.6@1.6.48-1+deb13u5	no fix listed	2
library/wordpress :latest	a85a30d9e752	libpng1.6@1.6.48-1+deb13u5	no fix listed	2
louislam/uptime-kuma :2.5.4	917318f9d7be	libpng1.6@1.6.39-2+deb12u5	no fix listed	2
louislam/uptime-kuma :2.3.2	9aeb4e51d038	libpng1.6@1.6.39-2+deb12u4	no fix listed	2
louislam/uptime-kuma :2.5.0	a8610b3b4c38	libpng1.6@1.6.39-2+deb12u5	no fix listed	2
louislam/uptime-kuma :2.5.5	c74379ac4509	libpng1.6@1.6.39-2+deb12u5	no fix listed	2
mbentley/omada-controller :4.3	f4e682274bed	libpng1.6@1.6.34-1ubuntu0.18.04.2	no fix listed	2
moreillon/group-manager-front :v3.3.1	c9f85db3baa5	libpng1.6@1.6.39-2	no fix listed	2
moreillon/user-manager :v5.0.2	e1c9bfab5c16	libpng1.6@1.6.39-2	no fix listed	2
moreillon/user-manager-front :v5.0.3	b067dbbbb6af	libpng1.6@1.6.39-2	no fix listed	2
nginxinc/nginx-unprivileged :stable	0918d093d608	libpng1.6@1.6.48-1+deb13u5	no fix listed	2
nousresearch/hermes-agent :v2026.9.24	fca358f12efd	libpng1.6@1.6.48-1+deb13u5	no fix listed	2
obsidiandynamics/kafdrop :3.30.0	5337c9e0e2de	libpng1.6@1.6.37-2	no fix listed	2
opencloudeu/web-extensions :unzip-1.0.0	1691ad6612a3	libpng1.6@1.6.39-2	no fix listed	2
opencloudeu/web-extensions :draw-io-1.0.0	27cb9b952f0d	libpng1.6@1.6.39-2	no fix listed	2
opencloudeu/web-extensions :external-sites-1.0.0	5b176baa3694	libpng1.6@1.6.39-2	no fix listed	2
opencloudeu/web-extensions :progress-bars-1.0.0	82f888a34440	libpng1.6@1.6.39-2	no fix listed	2
opencloudeu/web-extensions :json-viewer-1.0.0	e0ac35a9576e	libpng1.6@1.6.39-2	no fix listed	2
opendatacube/ows :latest	668cbb41473c	libpng1.6@1.6.43-5build1	no fix listed	2
piomin/sample-spring-kotlin-microservice :1.1	871f784dd6bc	libpng1.6@1.6.37-3build5	no fix listed	2
plantuml/plantuml-server :jetty-v1.2026.8	5f6f99ec2fc1	libpng1.6@1.6.43-5ubuntu0.6	no fix listed	2
qichenxu4pd/pythonexample :1.0	f3a8502bc21b	libpng1.6@1.6.39-2	no fix listed	2
seafileltd/seafile-mc :11.0.12	d0c66e4621bd	libpng1.6@1.6.37-3build5	no fix listed	2
speckle/speckle-preview-service :2.18.11-branch.testing2.88634-335d469 :2.18.12-branch.testing3.88744-f55b341	4bd113093583	libpng1.6@1.6.39-2	no fix listed	2
vdiogov/glpi-conteiner :latest	6945f84f0058	libpng1.6@1.6.39-2	no fix listed	2
wurstmeister/zookeeper :latest	7a7fd44a7210	libpng@1.2.50-1ubuntu2	no fix listed	2
ghcr.io/appscode/inbox-server :latest :postgres-latest	536358d7b17e	libpng1.6@1.6.37-3build5	no fix listed	2