CVE-2026-46675

Medium

Advisory

Published 29 Sept 2026In the index since 30 Sept 2026

Severity: Medium; worst across findings
CVSS: 5.5; base score, highest
EPSS: —; probability of exploitation
CISA KEV: Not listed; no confirmed exploitation
Charts affected: 1,060; of 17,957 indexed, latest versions
Container images: 851; deployed by those charts
Fix available: None; affected packages

The matching OSV records carry no description.

Carried by container images the latest versions of 1,060 of 17,957 indexed charts deploy, on 851 images.

Affected package	Affected versions	Fixed in	Images
libpng1.6deb	1.6.34-1ubuntu0.18.04.1, 1.6.34-1ubuntu0.18.04.2, 1.6.37-2, 1.6.37-3build5+20 more	no fix listed	831
libpngdeb	1.2.50-1ubuntu2, 1.2.50-1ubuntu2.14.04.2, 1.2.50-1ubuntu2.14.04.3, 1.2.54-1ubuntu1+1 more	no fix listed	20

OSV records: UBUNTU-CVE-2026-46675 DEBIAN-CVE-2026-46675
Trending: Rank 23 in indexed charts, since 30 Sept 2026. See the ranking →

Charts affected

1,060 by stars

Chart

Latest

Affected images

Radar Score

am-pattern-1wso2

2.6.0-7

1 of 6 See more

am-pattern-1 wso2 2.6.0-7

1 of the 6 container images this version deploys carry CVE-2026-46675.

Container image	Digest	Package	Fixed in
wso2/wso2am :2.6.0	fbe0f4059b74	libpng1.6@1.6.37-2	no fix listed

Open the chart page →

32,105

ei-pattern-1wso2

6.6.0-3

3 of 6 See more

ei-pattern-1 wso2 6.6.0-3

3 of the 6 container images this version deploys carry CVE-2026-46675.

Container image	Digest	Package	Fixed in
wso2/wso2ei-analytics-dashboard :6.6.0	526a1ccae902	libpng1.6@1.6.34-1ubuntu0.18.04.2	no fix listed
wso2/wso2ei-analytics-worker :6.6.0	21e6b03449ac	libpng1.6@1.6.34-1ubuntu0.18.04.2	no fix listed
wso2/wso2ei-integrator :6.6.0	790cd8c3a5a2	libpng1.6@1.6.34-1ubuntu0.18.04.2	no fix listed

Open the chart page →

50,862

tabbyxd

1.0.6

1 of 2 See more

tabby xd 1.0.6

1 of the 2 container images this version deploys carry CVE-2026-46675.

Container image	Digest	Package	Fixed in
library/nginx :1.25	a484819eb602	libpng1.6@1.6.39-2	no fix listed

Open the chart page →

7,980

nginx-chartxxoznge-nginx

0.1.0

1 of 1 See more

nginx-chart xxoznge-nginx 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-46675.

Container image	Digest	Package	Fixed in
library/nginx :latest	abe47724e466	libpng1.6@1.6.48-1+deb13u5	no fix listed

Open the chart page →

1,765

my-nginx-appyasser-nginx-app

0.1.0

1 of 1 See more

my-nginx-app yasser-nginx-app 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-46675.

Container image	Digest	Package	Fixed in
library/nginx :stable	b972f831f200	libpng1.6@1.6.48-1+deb13u5	no fix listed

Open the chart page →

1,765

jenkinszanise-jenkins-helm-chart

0.1.0

1 of 1 See more

jenkins zanise-jenkins-helm-chart 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-46675.

Container image	Digest	Package	Fixed in
jenkins/jenkins :lts	c1e4c349365f	libpng1.6@1.6.48-1+deb13u5	no fix listed

Open the chart page →

2,766

changedetection-iozekker6

1.102.0

1 of 1 See more

changedetection-io zekker6 1.102.0

1 of the 1 container images this version deploys carry CVE-2026-46675.

Container image	Digest	Package	Fixed in
ghcr.io/dgtlmoon/changedetection.io :0.60.7	096dae27b5d6	libpng1.6@1.6.39-2+deb12u5	no fix listed

Open the chart page →

2,916

NEW_APPzekker6

0.0.0

1 of 1 See more

NEW_APP zekker6 0.0.0

1 of the 1 container images this version deploys carry CVE-2026-46675.

Container image	Digest	Package	Fixed in
library/nginx :latest	abe47724e466	libpng1.6@1.6.48-1+deb13u5	no fix listed

Open the chart page →

1,765

sockpuppetbrowserzekker6

0.1.0

1 of 1 See more

sockpuppetbrowser zekker6 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-46675.

Container image	Digest	Package	Fixed in
dgtlmoon/sockpuppetbrowser :latest	1d8f72d2ce20	libpng1.6@1.6.39-2+deb12u5	no fix listed

Open the chart page →

4,916

zoo-project-druzoo-project

0.10.4

1 of 6 See more

zoo-project-dru zoo-project 0.10.4

1 of the 6 container images this version deploys carry CVE-2026-46675.

Container image	Digest	Package	Fixed in
zooproject/zoo-project :dru-19f3c4eed7c9ec9d1f0375bbe59f9d204a42bd3a	9a507cb7e2dd	libpng1.6@1.6.37-3ubuntu0.5	no fix listed

Open the chart page →

8,586

Container images carrying it

851 by charts deploying them

A fixed version is listed for 0 of the 2 affected packages.

Container image	Digest	Package	Fixed in	Used by
apachepulsar/pulsar :3.0.7	9c9947de139d	libpng1.6@1.6.37-3build5	no fix listed	1
apachepulsar/pulsar :2.9.0	d056c89b7131	libpng1.6@1.6.37-2	no fix listed	1
apachepulsar/pulsar :2.8.2	d538416d5afe	libpng1.6@1.6.37-2	no fix listed	1
apache/ranger :2.7.0	76c176e8a0e4	libpng1.6@1.6.37-3build5	no fix listed	1
apache/rocketmq :5.3.0	434d8398f996	libpng1.6@1.6.43-5build1	no fix listed	1
apache/rocketmq-exporter :0.0.2	c8fb51195444	libpng1.6@1.6.37-3build5	no fix listed	1
apache/skywalking-oap-server :9.2.0	133d35d2c263	libpng1.6@1.6.37-3build5	no fix listed	1
apache/skywalking-oap-server :8.9.1	b4ec8c18d079	libpng1.6@1.6.37-2	no fix listed	1
apache/skywalking-ui :9.2.0	295f1dc87d98	libpng1.6@1.6.37-3build5	no fix listed	1
apache/skywalking-ui :8.9.1	80530f0308a5	libpng1.6@1.6.37-2	no fix listed	1
apache/tika :latest-full	80072bb73dd3	libpng1.6@1.6.57-1	no fix listed	1
appwrite/new :1.1.159-self-hosted	1811ce1d8154	libpng1.6@1.6.48-1+deb13u5	no fix listed	1
archivebox/archivebox :0.9.70	8c21bb233130	libpng1.6@1.6.48-1+deb13u5	no fix listed	1
aristidetm/basic-notebook :3.6.5	469dbc951224	libpng1.6@1.6.39-2	no fix listed	1
arthurjguerra18/revwallet :v0.7.12	f540af20b307	libpng1.6@1.6.39-2	no fix listed	1
assistiot/cybersecurity-monitoring_ir-cas :latest	6a107f224c34	libpng1.6@1.6.37-2	no fix listed	1
assistiot/location_processing :latest	e9bae124095f	libpng1.6@1.6.37-3build5	no fix listed	1
assistiot/open_api_backend :1.1.2	30812ba93555	libpng1.6@1.6.37-3build5	no fix listed	1
assistiot/sdn_controller :2.4.0	ea254b6d8a31	libpng1.6@1.6.37-2	no fix listed	1
assistiot/smart-orchestrator_scheduler_mc :latest	b1dbe4d62a03	libpng1.6@1.6.39-2	no fix listed	1
assistiot/video_augmentation :runner-cpu-latest	e5ae539ce2cb	libpng1.6@1.6.37-2	no fix listed	1
atlassian/bamboo :12.1.11	9160c3bfb73b	libpng1.6@1.6.43-5ubuntu0.6	no fix listed	1
atlassian/bamboo-agent-base :12.1.11	47d6dadc050e	libpng1.6@1.6.43-5ubuntu0.6	no fix listed	1
atlassian/bitbucket :10.2.7	05933f2b1cfd	libpng1.6@1.6.43-5ubuntu0.6	no fix listed	1
atlassian/confluence-server :7.10.0	3b9222ab32ef	libpng1.6@1.6.37-3build5	no fix listed	1
atlassian/crowd :7.2.3	51e6d33676f6	libpng1.6@1.6.43-5ubuntu0.6	no fix listed	1
atlassian/crowd :5.2.2	708162b8c094	libpng1.6@1.6.43-5ubuntu0.6	no fix listed	1
atlassian/jira-software :8.14.0	37bc46cbec1a	libpng1.6@1.6.37-3build5	no fix listed	1
atlassian/jira-software :11.3.11	4046f4a668a4	libpng1.6@1.6.43-5ubuntu0.6	no fix listed	1
atlassian/jira-software :9.7.2	64a75aa4ec4e	libpng1.6@1.6.43-5build1	no fix listed	1
avinash263/pyredis263 :latest	aa2b8727f1a6	libpng1.6@1.6.39-2	no fix listed	1
avzini/web-app :latest	f40b30210ed0	libpng1.6@1.6.39-2	no fix listed	1
bbernhard/signal-cli-rest-api :0.57	549ad08d7e14	libpng1.6@1.6.37-2	no fix listed	1
beyzkaya/blog-backend :v1.0.1	12a6a3d1c5f9	libpng1.6@1.6.39-2	no fix listed	1
bitnamilegacy/elasticsearch :8.12.2	15d4647fd491	libpng1.6@1.6.39-2	no fix listed	1
bitnamilegacy/elasticsearch :9.0.1-debian-12-r0	e6f6ddcce2f1	libpng1.6@1.6.39-2	no fix listed	1
bitnamilegacy/grafana :11.4.0-debian-12-r0	cb8ab5515676	libpng1.6@1.6.39-2	no fix listed	1
bitnamilegacy/matomo :5.3.2-debian-12-r13	f02c000c54b1	libpng1.6@1.6.39-2	no fix listed	1
blackducksoftware/bdba-frontend :2026.9.1	0afa8763ccb8	libpng1.6@1.6.48-1+deb13u5	no fix listed	1
blakeblackshear/frigate :0.10.0-amd64	ae269270ad9e	libpng1.6@1.6.37-2	no fix listed	1
bnjbvr/kresus :0.22.1	37e216b182c8	libpng1.6@1.6.39-2	no fix listed	1
browserless/chrome :1.48.0-chrome-stable	c81ae5585b47	libpng1.6@1.6.37-2	no fix listed	1
buall/postgres-stack :18.6	881a785642cb	libpng1.6@1.6.48-1+deb13u5	no fix listed	1
budibase/database :2.1.0	d90f656261c9	libpng1.6@1.6.39-2+deb12u3	no fix listed	1
budibase/proxy :3.41.3	8d780b6ee602	libpng1.6@1.6.48-1+deb13u5	no fix listed	1
camptocamp/geomapfishapp-geoportal :latest	ae874f70cc16	libpng1.6@1.6.43-5ubuntu0.6	no fix listed	1
camptocamp/mapserver :master	5f9ddd0b9c5b	libpng1.6@1.6.57-1	no fix listed	1
camptocamp/mapserver :latest	98e908c81ff8	libpng1.6@1.6.43-5ubuntu0.6	no fix listed	1
carbone/carbone-ee :full-5.11.0	518172cbad49	libpng1.6@1.6.48-1+deb13u5	no fix listed	1
carlosmz87/test_helm_backend :latest	8ffa63aa995d	libpng1.6@1.6.39-2	no fix listed	1