StackRadar

DLA-4396-1

Unscored

Advisory

Published 7 Dec 2025In the index since 6 Sept 2026
Severity
Unscored
worst across findings
CVSS
—
base score, highest
EPSS
0.004
35th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
170
of 17,781 indexed, latest versions
Container images
177
deployed by those charts
Fix available
1 of 1
affected package

libpng1.6 - security update

Carried by container images the latest versions of 170 of 17,781 indexed charts deploy, on 177 images.

Affected packageAffected versionsFixed inImages
libpng1.6deb1.6.37-31.6.37-3+deb11u1177
OSV records
DLA-4396-1

Charts affected

170 by stars
ChartLatestAffected imagesRadar Score
marge-botslamdev0.0.11 of 1See more

marge-bot slamdev 0.0.1

1 of the 1 container images this version deploys carry DLA-4396-1.

Container imageDigestPackageFixed in
hiboxsystems/marge-bot:0.11.07235809b43b3
libpng1.6@1.6.37-3
1.6.37-3+deb11u1

Open the chart page →

1,426
frigatesmarthallVerified publisher1.0.61 of 1See more

frigate smarthall 1.0.6

1 of the 1 container images this version deploys carry DLA-4396-1.

Container imageDigestPackageFixed in
ghcr.io/blakeblackshear/frigate:0.12.0c862771e38e8
libpng1.6@1.6.37-3
1.6.37-3+deb11u1

Open the chart page →

2,243
sneakerssneakers1.0.01 of 4See more

sneakers sneakers 1.0.0

1 of the 4 container images this version deploys carry DLA-4396-1.

Container imageDigestPackageFixed in
helga09/shoes_ukr:v1.1.17999bc8b77c0
libpng1.6@1.6.37-3
1.6.37-3+deb11u1

Open the chart page →

7,574
speckle-server-branch-testingspeckleVerified publisher2.17.14-branch.testing.72707.921a5f81 of 5See more

speckle-server-branch-testing speckle 2.17.14-branch.testing.72707.921a5f8

1 of the 5 container images this version deploys carry DLA-4396-1.

Container imageDigestPackageFixed in
speckle/speckle-frontend:2.17.14-branch.testing.72707.921a5f8d9b58995a8b8
libpng1.6@1.6.37-3
1.6.37-3+deb11u1

Open the chart page →

14,679
speckle-server-branch-testing2speckleVerified publisher2.18.11-branch.testing2.88634-335d4691 of 5See more

speckle-server-branch-testing2 speckle 2.18.11-branch.testing2.88634-335d469

1 of the 5 container images this version deploys carry DLA-4396-1.

Container imageDigestPackageFixed in
speckle/speckle-frontend:2.18.11-branch.testing2.88634-335d46982c052441110
libpng1.6@1.6.37-3
1.6.37-3+deb11u1

Open the chart page →

14,221
speckle-server-branch-testing3speckleVerified publisher2.18.12-branch.testing3.88744-f55b3411 of 5See more

speckle-server-branch-testing3 speckle 2.18.12-branch.testing3.88744-f55b341

1 of the 5 container images this version deploys carry DLA-4396-1.

Container imageDigestPackageFixed in
speckle/speckle-frontend:2.18.12-branch.testing3.88744-f55b341d5f689c9256c
libpng1.6@1.6.37-3
1.6.37-3+deb11u1

Open the chart page →

14,221
fdi-dotstatsuite-sfs-solrstatcan1.0.21 of 4See more

fdi-dotstatsuite-sfs-solr statcan 1.0.2

1 of the 4 container images this version deploys carry DLA-4396-1.

Container imageDigestPackageFixed in
library/solr:8.11.18c5f7881cebb
libpng1.6@1.6.37-3
1.6.37-3+deb11u1

Open the chart page →

6,065
solrstatcan1.5.101 of 3See more

solr statcan 1.5.10

1 of the 3 container images this version deploys carry DLA-4396-1.

Container imageDigestPackageFixed in
library/solr:8.11.18c5f7881cebb
libpng1.6@1.6.37-3
1.6.37-3+deb11u1

Open the chart page →

8,806
student-producerstudentproducerVerified publisher2.0.01 of 1See more

student-producer studentproducer 2.0.0

1 of the 1 container images this version deploys carry DLA-4396-1.

Container imageDigestPackageFixed in
aroralalit/student-producer:1.0.02a094f597b36
libpng1.6@1.6.37-3
1.6.37-3+deb11u1

Open the chart page →

3,018
daloradiussvtech-public-helm-charts1.0.01 of 1See more

daloradius svtech-public-helm-charts 1.0.0

1 of the 1 container images this version deploys carry DLA-4396-1.

Container imageDigestPackageFixed in
ptthanh1511/daloradius:1.2-devafecc5143fcb
libpng1.6@1.6.37-3
1.6.37-3+deb11u1

Open the chart page →

718
icingawebsvtech-public-helm-charts1.0.01 of 2See more

icingaweb svtech-public-helm-charts 1.0.0

1 of the 2 container images this version deploys carry DLA-4396-1.

Container imageDigestPackageFixed in
svtechnmaa/svtech_icingaweb2:v1.0.2a59d0b81dde2
libpng1.6@1.6.37-3
1.6.37-3+deb11u1

Open the chart page →

2,038
node-redth0ths-helm-charts0.2.11 of 2See more

node-red th0ths-helm-charts 0.2.1

1 of the 2 container images this version deploys carry DLA-4396-1.

Container imageDigestPackageFixed in
th0th/node-red:4.0.3-debiand06fa39f7406
libpng1.6@1.6.37-3
1.6.37-3+deb11u1

Open the chart page →

2,408
thingsboardthingsboardVerified publisher0.1.34 of 12See more

thingsboard thingsboard 0.1.3

4 of the 12 container images this version deploys carry DLA-4396-1.

Container imageDigestPackageFixed in
thingsboard/tb-coap-transport:3.4.1bd45a09d85d9
libpng1.6@1.6.37-3
1.6.37-3+deb11u1
thingsboard/tb-http-transport:3.4.1a06f53c5e2da
libpng1.6@1.6.37-3
1.6.37-3+deb11u1
thingsboard/tb-mqtt-transport:3.4.1030f316ce301
libpng1.6@1.6.37-3
1.6.37-3+deb11u1
thingsboard/tb-node:3.4.1645f43b688f7
libpng1.6@1.6.37-3
1.6.37-3+deb11u1

Open the chart page →

25,394
vinyl-lib-chartvinyl-libVerified publisher0.1.01 of 1See more

vinyl-lib-chart vinyl-lib 0.1.0

1 of the 1 container images this version deploys carry DLA-4396-1.

Container imageDigestPackageFixed in
kporwit/vinyl_lib_app:v0.1.1217de0302218
libpng1.6@1.6.37-3
1.6.37-3+deb11u1

Open the chart page →

3,392
apiwbstack0.36.01 of 1See more

api wbstack 0.36.0

1 of the 1 container images this version deploys carry DLA-4396-1.

Container imageDigestPackageFixed in
ghcr.io/wbstack/api:8x.9.11eee94f9f7a53
libpng1.6@1.6.37-3
1.6.37-3+deb11u1

Open the chart page →

2,019
mediawikiwbstack0.14.01 of 1See more

mediawiki wbstack 0.14.0

1 of the 1 container images this version deploys carry DLA-4396-1.

Container imageDigestPackageFixed in
ghcr.io/wbstack/mediawiki:1.37-7.4-20220621-fp-beta-0c3012c8a34b4
libpng1.6@1.6.37-3
1.6.37-3+deb11u1

Open the chart page →

2,132
drillwearefrank1.3.61 of 3See more

drill wearefrank 1.3.6

1 of the 3 container images this version deploys carry DLA-4396-1.

Container imageDigestPackageFixed in
apache/drill:1.21.11f96558fd292
libpng1.6@1.6.37-3
1.6.37-3+deb11u1

Open the chart page →

9,397
webresourcecataloguswebresourcecatalogus1.1.01 of 4See more

webresourcecatalogus webresourcecatalogus 1.1.0

1 of the 4 container images this version deploys carry DLA-4396-1.

Container imageDigestPackageFixed in
ghcr.io/conductionnl/webresourcecatalogus-nginx:latest6de60c83128d
libpng1.6@1.6.37-3
1.6.37-3+deb11u1

Open the chart page →

7,552
wp-gats-helmwordpress-gatsby0.0.11 of 3See more

wp-gats-helm wordpress-gatsby 0.0.1

1 of the 3 container images this version deploys carry DLA-4396-1.

Container imageDigestPackageFixed in
library/wordpress:6.0.0-php8.0-apache277c6c25980f
libpng1.6@1.6.37-3
1.6.37-3+deb11u1

Open the chart page →

2,021
enterprise-gatewayzeet3.2.21 of 2See more

enterprise-gateway zeet 3.2.2

1 of the 2 container images this version deploys carry DLA-4396-1.

Container imageDigestPackageFixed in
elyra/kernel-image-puller:3.2.2c922f1f1646a
libpng1.6@1.6.37-3
1.6.37-3+deb11u1

Open the chart page →

1,838

Container images carrying it

177 by charts deploying them

A fixed version is listed for 1 of the 1 affected package.

Container imageDigestPackageFixed inUsed by
ghcr.io/k10app/frontend:latest066b5ac6b119
libpng1.6@1.6.37-3
1.6.37-3+deb11u1
1
ghcr.io/k10app/staticcache:lateste77805689a8e
libpng1.6@1.6.37-3
1.6.37-3+deb11u1
1
ghcr.io/k8s-at-home/theme-park:v1.7.3f8a5ec8f4669
libpng1.6@1.6.37-3
1.6.37-3+deb11u1
1
ghcr.io/leoquote/tinyproxy_exporter:master6b4103d88dbb
libpng1.6@1.6.37-3
1.6.37-3+deb11u1
1
ghcr.io/libretime/libretime-analyzer:latest3d5e236216ad
libpng1.6@1.6.37-3
1.6.37-3+deb11u1
1
ghcr.io/libretime/libretime-legacy:latest35b4531189c2
libpng1.6@1.6.37-3
1.6.37-3+deb11u1
1
ghcr.io/libretime/libretime-playout:latest71a8706531aa
libpng1.6@1.6.37-3
1.6.37-3+deb11u1
1
ghcr.io/linuxoid69/motion:4.7.0-0.1.0f0f000c3fc47
libpng1.6@1.6.37-3
1.6.37-3+deb11u1
1
ghcr.io/lsst-sqre/strimzi-registry-operator:0.6.07e25f7048aff
libpng1.6@1.6.37-3
1.6.37-3+deb11u1
1
ghcr.io/mastodon/mastodon:v4.1.26b18e6d0eda4
libpng1.6@1.6.37-3
1.6.37-3+deb11u1
1
ghcr.io/mroxso/pollstr:latest0b4f97faa3d0
libpng1.6@1.6.37-3
1.6.37-3+deb11u1
1
ghcr.io/nathanvaughn/webtrees:2.0.1969423a100fab
libpng1.6@1.6.37-3
1.6.37-3+deb11u1
1
ghcr.io/navikt/mock-oauth2-server:2.1.1065d4ed47ce09
libpng1.6@1.6.37-3
1.6.37-3+deb11u1
1
ghcr.io/open-telemetry/demo:1.12.0-frauddetectionservice77cefdab4d5c
libpng1.6@1.6.37-3
1.6.37-3+deb11u1
1
ghcr.io/paperless-ngx/paperless-ngx:1.8.09bbc9a90641e
libpng1.6@1.6.37-3
1.6.37-3+deb11u1
1
ghcr.io/porelli/firefox-sync:syncstorage-rs-mysql-0.18.27d244e514216
libpng1.6@1.6.37-3
1.6.37-3+deb11u1
1
ghcr.io/privacyengineering/hawk-monitor:master13309f068a56
libpng1.6@1.6.37-3
1.6.37-3+deb11u1
1
ghcr.io/remla23-team17/app:1.0.05816dbddf47d
libpng1.6@1.6.37-3
1.6.37-3+deb11u1
1
ghcr.io/remla23-team17/model-service:1.0.0aa59fe2c4f6a
libpng1.6@1.6.37-3
1.6.37-3+deb11u1
1
ghcr.io/rivals-space/rivals-mastodon:1.6.143b23d55e4be
libpng1.6@1.6.37-3
1.6.37-3+deb11u1
1
ghcr.io/rodg/nodecg-base:latest31be4bf87070
libpng1.6@1.6.37-3
1.6.37-3+deb11u1
1
ghcr.io/savonet/liquidsoap:v2.0.19e08148e1055
libpng1.6@1.6.37-3
1.6.37-3+deb11u1
1
ghcr.io/wbstack/api:8x.9.11eee94f9f7a53
libpng1.6@1.6.37-3
1.6.37-3+deb11u1
1
ghcr.io/wbstack/mediawiki:1.37-7.4-20220621-fp-beta-0c3012c8a34b4
libpng1.6@1.6.37-3
1.6.37-3+deb11u1
1
public.ecr.aws/jtekt-corporation/annotation-tool:ef974ad9abd817eb6845
libpng1.6@1.6.37-3
1.6.37-3+deb11u1
1
public.ecr.aws/jtekt-corporation/polygonal-annotation-tool:a3fa936056efd38500d6
libpng1.6@1.6.37-3
1.6.37-3+deb11u1
1
quay.io/snowdrop/spring-boot-rest-http-example:2.7b1a054613715
libpng1.6@1.6.37-3
1.6.37-3+deb11u1
1

syft 1.42.1 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.