StackRadar

DLA-4396-1

Unscored

Advisory

Published 7 Dec 2025In the index since 6 Sept 2026
Severity
Unscored
worst across findings
CVSS
—
base score, highest
EPSS
0.004
35th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
170
of 17,781 indexed, latest versions
Container images
177
deployed by those charts
Fix available
1 of 1
affected package

libpng1.6 - security update

Carried by container images the latest versions of 170 of 17,781 indexed charts deploy, on 177 images.

Affected packageAffected versionsFixed inImages
libpng1.6deb1.6.37-31.6.37-3+deb11u1177
OSV records
DLA-4396-1

Charts affected

170 by stars
ChartLatestAffected imagesRadar Score
marge-botslamdev0.0.11 of 1See more

marge-bot slamdev 0.0.1

1 of the 1 container images this version deploys carry DLA-4396-1.

Container imageDigestPackageFixed in
hiboxsystems/marge-bot:0.11.07235809b43b3
libpng1.6@1.6.37-3
1.6.37-3+deb11u1

Open the chart page →

1,426
frigatesmarthallVerified publisher1.0.61 of 1See more

frigate smarthall 1.0.6

1 of the 1 container images this version deploys carry DLA-4396-1.

Container imageDigestPackageFixed in
ghcr.io/blakeblackshear/frigate:0.12.0c862771e38e8
libpng1.6@1.6.37-3
1.6.37-3+deb11u1

Open the chart page →

2,243
sneakerssneakers1.0.01 of 4See more

sneakers sneakers 1.0.0

1 of the 4 container images this version deploys carry DLA-4396-1.

Container imageDigestPackageFixed in
helga09/shoes_ukr:v1.1.17999bc8b77c0
libpng1.6@1.6.37-3
1.6.37-3+deb11u1

Open the chart page →

7,574
speckle-server-branch-testingspeckleVerified publisher2.17.14-branch.testing.72707.921a5f81 of 5See more

speckle-server-branch-testing speckle 2.17.14-branch.testing.72707.921a5f8

1 of the 5 container images this version deploys carry DLA-4396-1.

Container imageDigestPackageFixed in
speckle/speckle-frontend:2.17.14-branch.testing.72707.921a5f8d9b58995a8b8
libpng1.6@1.6.37-3
1.6.37-3+deb11u1

Open the chart page →

14,679
speckle-server-branch-testing2speckleVerified publisher2.18.11-branch.testing2.88634-335d4691 of 5See more

speckle-server-branch-testing2 speckle 2.18.11-branch.testing2.88634-335d469

1 of the 5 container images this version deploys carry DLA-4396-1.

Container imageDigestPackageFixed in
speckle/speckle-frontend:2.18.11-branch.testing2.88634-335d46982c052441110
libpng1.6@1.6.37-3
1.6.37-3+deb11u1

Open the chart page →

14,221
speckle-server-branch-testing3speckleVerified publisher2.18.12-branch.testing3.88744-f55b3411 of 5See more

speckle-server-branch-testing3 speckle 2.18.12-branch.testing3.88744-f55b341

1 of the 5 container images this version deploys carry DLA-4396-1.

Container imageDigestPackageFixed in
speckle/speckle-frontend:2.18.12-branch.testing3.88744-f55b341d5f689c9256c
libpng1.6@1.6.37-3
1.6.37-3+deb11u1

Open the chart page →

14,221
fdi-dotstatsuite-sfs-solrstatcan1.0.21 of 4See more

fdi-dotstatsuite-sfs-solr statcan 1.0.2

1 of the 4 container images this version deploys carry DLA-4396-1.

Container imageDigestPackageFixed in
library/solr:8.11.18c5f7881cebb
libpng1.6@1.6.37-3
1.6.37-3+deb11u1

Open the chart page →

6,065
solrstatcan1.5.101 of 3See more

solr statcan 1.5.10

1 of the 3 container images this version deploys carry DLA-4396-1.

Container imageDigestPackageFixed in
library/solr:8.11.18c5f7881cebb
libpng1.6@1.6.37-3
1.6.37-3+deb11u1

Open the chart page →

8,806
student-producerstudentproducerVerified publisher2.0.01 of 1See more

student-producer studentproducer 2.0.0

1 of the 1 container images this version deploys carry DLA-4396-1.

Container imageDigestPackageFixed in
aroralalit/student-producer:1.0.02a094f597b36
libpng1.6@1.6.37-3
1.6.37-3+deb11u1

Open the chart page →

3,018
daloradiussvtech-public-helm-charts1.0.01 of 1See more

daloradius svtech-public-helm-charts 1.0.0

1 of the 1 container images this version deploys carry DLA-4396-1.

Container imageDigestPackageFixed in
ptthanh1511/daloradius:1.2-devafecc5143fcb
libpng1.6@1.6.37-3
1.6.37-3+deb11u1

Open the chart page →

718
icingawebsvtech-public-helm-charts1.0.01 of 2See more

icingaweb svtech-public-helm-charts 1.0.0

1 of the 2 container images this version deploys carry DLA-4396-1.

Container imageDigestPackageFixed in
svtechnmaa/svtech_icingaweb2:v1.0.2a59d0b81dde2
libpng1.6@1.6.37-3
1.6.37-3+deb11u1

Open the chart page →

2,038
node-redth0ths-helm-charts0.2.11 of 2See more

node-red th0ths-helm-charts 0.2.1

1 of the 2 container images this version deploys carry DLA-4396-1.

Container imageDigestPackageFixed in
th0th/node-red:4.0.3-debiand06fa39f7406
libpng1.6@1.6.37-3
1.6.37-3+deb11u1

Open the chart page →

2,408
thingsboardthingsboardVerified publisher0.1.34 of 12See more

thingsboard thingsboard 0.1.3

4 of the 12 container images this version deploys carry DLA-4396-1.

Container imageDigestPackageFixed in
thingsboard/tb-coap-transport:3.4.1bd45a09d85d9
libpng1.6@1.6.37-3
1.6.37-3+deb11u1
thingsboard/tb-http-transport:3.4.1a06f53c5e2da
libpng1.6@1.6.37-3
1.6.37-3+deb11u1
thingsboard/tb-mqtt-transport:3.4.1030f316ce301
libpng1.6@1.6.37-3
1.6.37-3+deb11u1
thingsboard/tb-node:3.4.1645f43b688f7
libpng1.6@1.6.37-3
1.6.37-3+deb11u1

Open the chart page →

25,394
vinyl-lib-chartvinyl-libVerified publisher0.1.01 of 1See more

vinyl-lib-chart vinyl-lib 0.1.0

1 of the 1 container images this version deploys carry DLA-4396-1.

Container imageDigestPackageFixed in
kporwit/vinyl_lib_app:v0.1.1217de0302218
libpng1.6@1.6.37-3
1.6.37-3+deb11u1

Open the chart page →

3,392
apiwbstack0.36.01 of 1See more

api wbstack 0.36.0

1 of the 1 container images this version deploys carry DLA-4396-1.

Container imageDigestPackageFixed in
ghcr.io/wbstack/api:8x.9.11eee94f9f7a53
libpng1.6@1.6.37-3
1.6.37-3+deb11u1

Open the chart page →

2,019
mediawikiwbstack0.14.01 of 1See more

mediawiki wbstack 0.14.0

1 of the 1 container images this version deploys carry DLA-4396-1.

Container imageDigestPackageFixed in
ghcr.io/wbstack/mediawiki:1.37-7.4-20220621-fp-beta-0c3012c8a34b4
libpng1.6@1.6.37-3
1.6.37-3+deb11u1

Open the chart page →

2,132
drillwearefrank1.3.61 of 3See more

drill wearefrank 1.3.6

1 of the 3 container images this version deploys carry DLA-4396-1.

Container imageDigestPackageFixed in
apache/drill:1.21.11f96558fd292
libpng1.6@1.6.37-3
1.6.37-3+deb11u1

Open the chart page →

9,397
webresourcecataloguswebresourcecatalogus1.1.01 of 4See more

webresourcecatalogus webresourcecatalogus 1.1.0

1 of the 4 container images this version deploys carry DLA-4396-1.

Container imageDigestPackageFixed in
ghcr.io/conductionnl/webresourcecatalogus-nginx:latest6de60c83128d
libpng1.6@1.6.37-3
1.6.37-3+deb11u1

Open the chart page →

7,552
wp-gats-helmwordpress-gatsby0.0.11 of 3See more

wp-gats-helm wordpress-gatsby 0.0.1

1 of the 3 container images this version deploys carry DLA-4396-1.

Container imageDigestPackageFixed in
library/wordpress:6.0.0-php8.0-apache277c6c25980f
libpng1.6@1.6.37-3
1.6.37-3+deb11u1

Open the chart page →

2,021
enterprise-gatewayzeet3.2.21 of 2See more

enterprise-gateway zeet 3.2.2

1 of the 2 container images this version deploys carry DLA-4396-1.

Container imageDigestPackageFixed in
elyra/kernel-image-puller:3.2.2c922f1f1646a
libpng1.6@1.6.37-3
1.6.37-3+deb11u1

Open the chart page →

1,838

Container images carrying it

177 by charts deploying them

A fixed version is listed for 1 of the 1 affected package.

Container imageDigestPackageFixed inUsed by
library/nginx:1.21:1.21.62bcabc23b454
libpng1.6@1.6.37-3
1.6.37-3+deb11u1
6
library/solr:8.11.18c5f7881cebb
libpng1.6@1.6.37-3
1.6.37-3+deb11u1
3
mockserver/mockserver:5.15.0:mockserver-5.15.00f9ef78c9489
libpng1.6@1.6.37-3
1.6.37-3+deb11u1
3
phpmyadmin/phpmyadmin:5.2.0ae6dadd9cf3c
libpng1.6@1.6.37-3
1.6.37-3+deb11u1
3
blakeblackshear/frigate:0.11.18330b0a265b8
libpng1.6@1.6.37-3
1.6.37-3+deb11u1
2
ldapaccountmanager/lam:8.0.1d46cf25d1dda
libpng1.6@1.6.37-3
1.6.37-3+deb11u1
2
library/nginx:1.24.0f6daac2445b0
libpng1.6@1.6.37-3
1.6.37-3+deb11u1
2
passbolt/passbolt:3.4.0-ce-non-root655547e17263
libpng1.6@1.6.37-3
1.6.37-3+deb11u1
2
pecan/bety:5.4.1f825d480cd62
libpng1.6@1.6.37-3
1.6.37-3+deb11u1
2
postgis/postgis:15-3.3a2fc46b52819
libpng1.6@1.6.37-3
1.6.37-3+deb11u1
2
scorpiobroker/scorpio:config-server_1.1.0c46c1517e523
libpng1.6@1.6.37-3
1.6.37-3+deb11u1
2
yzhou442/equiz:latesta3f7ca69e28d
libpng1.6@1.6.37-3
1.6.37-3+deb11u1
2
activepieces/activepieces:0.23.0c26188b44e62
libpng1.6@1.6.37-3
1.6.37-3+deb11u1
1
adolfintel/speedtest:latest1f828fe83374
libpng1.6@1.6.37-3
1.6.37-3+deb11u1
1
aidasi/swpapi:v1-1-net6-k8s-test-beta838b5e2080bc
libpng1.6@1.6.37-3
1.6.37-3+deb11u1
1
aidasi/swpspa:v1-1-net6-k8s-test-betadee4ec566312
libpng1.6@1.6.37-3
1.6.37-3+deb11u1
1
allegroai/clearml-serving-inference:1.3.0fca885e8cfc6
libpng1.6@1.6.37-3
1.6.37-3+deb11u1
1
allegroai/clearml-serving-statistics:1.3.0c58d9da7bdf8
libpng1.6@1.6.37-3
1.6.37-3+deb11u1
1
andrianrf/bpjstk-service:latest46abe878d9d8
libpng1.6@1.6.37-3
1.6.37-3+deb11u1
1
andrianrf/bpjstk-simulator:latestb63fdb51d39d
libpng1.6@1.6.37-3
1.6.37-3+deb11u1
1
andrianrf/iso-client:latestba560086ce15
libpng1.6@1.6.37-3
1.6.37-3+deb11u1
1
apache/drill:1.21.11f96558fd292
libpng1.6@1.6.37-3
1.6.37-3+deb11u1
1
apache/superset:9cdaa280429ec297db16d56c94fd77b5d2aff107975ab033580d
libpng1.6@1.6.37-3
1.6.37-3+deb11u1
1
archish27/python-fastapi-postgres:latest6610071a2101
libpng1.6@1.6.37-3
1.6.37-3+deb11u1
1
aroralalit/student-producer:1.0.02a094f597b36
libpng1.6@1.6.37-3
1.6.37-3+deb11u1
1
assistiot/cybersecurity-monitoring_ir-thv:latestc8b6c7eaa0cd
libpng1.6@1.6.37-3
1.6.37-3+deb11u1
1
assistiot/resource-provisioning_prc:1.0.08b5d118bdf0e
libpng1.6@1.6.37-3
1.6.37-3+deb11u1
1
atomix/atomix:3.1.127738ff4f5c63
libpng1.6@1.6.37-3
1.6.37-3+deb11u1
1
azhar008/flaskapplication:latesta1e827b0adea
libpng1.6@1.6.37-3
1.6.37-3+deb11u1
1
bitnamilegacy/elasticsearch:8.12.1-debian-11-r29cfd2df1294d
libpng1.6@1.6.37-3
1.6.37-3+deb11u1
1
buntha/mlflow:2.1.1154542cc3083
libpng1.6@1.6.37-3
1.6.37-3+deb11u1
1
camerahub/camerahub:0.36.23a5af37dd6e1b
libpng1.6@1.6.37-3
1.6.37-3+deb11u1
1
chandanteekinavar/findery-market-product-service:1.0c49ff7c141c0
libpng1.6@1.6.37-3
1.6.37-3+deb11u1
1
countly/api:25.05.4f4cc7447c4f5
libpng1.6@1.6.37-3
1.6.37-3+deb11u1
1
countly/frontend:25.05.42acbc11499b6
libpng1.6@1.6.37-3
1.6.37-3+deb11u1
1
danuk/telegram-sender:0.0.1026560388070
libpng1.6@1.6.37-3
1.6.37-3+deb11u1
1
davidvmar/urjc-davidvmar-worker:1.0.10d221e834a21
libpng1.6@1.6.37-3
1.6.37-3+deb11u1
1
douz/helpdesk:latest4384103d0219
libpng1.6@1.6.37-3
1.6.37-3+deb11u1
1
duck1123/astral:latestf4d5b6526c2a
libpng1.6@1.6.37-3
1.6.37-3+deb11u1
1
duck1123/me.untethr.nostr-relay:0.2.1119fc5d4cbfb
libpng1.6@1.6.37-3
1.6.37-3+deb11u1
1
elyra/kernel-image-puller:3.2.2c922f1f1646a
libpng1.6@1.6.37-3
1.6.37-3+deb11u1
1
erlangsolutions/wombatoam:4.1.284680c990147a
libpng1.6@1.6.37-3
1.6.37-3+deb11u1
1
evk02/mlflow:2.2.1ef6ff257ef35
libpng1.6@1.6.37-3
1.6.37-3+deb11u1
1
factly/hunting:0.2.0-stagv1.2ca5bc71d1d5c
libpng1.6@1.6.37-3
1.6.37-3+deb11u1
1
fanzynoodle/smeejas:0.0.15f9916c1a287
libpng1.6@1.6.37-3
1.6.37-3+deb11u1
1
farberg/apache-knox-docker:1.6.14b4a22487394
libpng1.6@1.6.37-3
1.6.37-3+deb11u1
1
golenski/db-init:1.0.086ca17cd3063
libpng1.6@1.6.37-3
1.6.37-3+deb11u1
1
ha33ona/python:test6affdfc644d0
libpng1.6@1.6.37-3
1.6.37-3+deb11u1
1
helga09/shoes_ukr:v1.1.17999bc8b77c0
libpng1.6@1.6.37-3
1.6.37-3+deb11u1
1
heywood8/redisinsight:2.28.00bc9ab313d37
libpng1.6@1.6.37-3
1.6.37-3+deb11u1
1

syft 1.42.1 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.