CVE-2019-9513
HighAdvisory
Published 13 Aug 2019In the index since 5 Sept 2026
- Severity
- High
- worst across findings
- CVSS
- 7.5
- base score, highest
- EPSS
- 0.816
- 100th percentile
- CISA KEV
- Not listed
- no confirmed exploitation
- Charts affected
- 186
- of 17,781 indexed, latest versions
- Container images
- 97
- deployed by those charts
- Fix available
- 4 of 5
- affected packages
The matching OSV records carry no description.
Carried by container images the latest versions of 186 of 17,781 indexed charts deploy, on 97 images.
| Affected package | Affected versions | Fixed in | Images |
|---|---|---|---|
| nghttp2deb | 1.30.0-1ubuntu1 | 1.30.0-1ubuntu1+esm2 | 72 |
| nghttp2apk | 1.32.0-r0, 1.35.1-r0, 1.38.0-r0 | 1.35.1-r1, 1.39.2-r0 | 18 |
| nodejsdeb | 4.2.6~dfsg-1ubuntu4.1, 7.10.1-2nodesource1~xenial1, 8.9.4-1nodesource1, 8.10.0~dfsg-2ubuntu0.4+4 more | no fix listed | 12 |
| nginxapk | 1.16.0-r1 | 1.16.1-r0 | 1 |
| nodejsapk | 10.14.2-r0 | 10.16.3-r0 | 1 |
- OSV records
- ALPINE-CVE-2019-9513UBUNTU-CVE-2019-9513
- Also known as
- USN-6754-1
Charts affected
186 by stars
Container images carrying it
97 by charts deploying them
A fixed version is listed for 4 of the 5 affected packages.
| Container image | Digest | Package | Fixed in | Used by |
|---|---|---|---|---|
| flyway/ | 22d97ceb0c47 | nghttp2 | 1.30.0-1ubuntu1+esm2 | 79 |
| gradiant/ | a1ee6de94c04 | nghttp2 | 1.39.2-r0 | 4 |
| library/ | 628741415fc9 | nghttp2 | 1.30.0-1ubuntu1+esm2 | 4 |
| library/ | 6efa05203990 | nghttp2 | 1.30.0-1ubuntu1+esm2 | 4 |
| oscarsotosanchez/ | 911ec961d10b | nghttp2 | 1.30.0-1ubuntu1+esm2 | 4 |
| anapsix/ | fae78e3809e9 | nghttp2 | 1.39.2-r0 | 3 |
| architectminds/ | 9735e59a1085 | nghttp2 | 1.39.2-r0 | 2 |
| freeradius/ | 21c8bfa904d8 | nghttp2 | 1.30.0-1ubuntu1+esm2 | 2 |
| istio/ | dbb7726d1bf0 | nghttp2 | 1.30.0-1ubuntu1+esm2 | 2 |
| istio/ | a78b7a165744 | nghttp2 | 1.30.0-1ubuntu1+esm2 | 2 |
| library/ | 5aa8400b4b3b | nghttp2 | 1.30.0-1ubuntu1+esm2 | 2 |
| library/ | 58b25d51baa1 | nghttp2 | 1.30.0-1ubuntu1+esm2 | 2 |
| pstauffer/ | 2663156457ab | nghttp2 | 1.39.2-r0 | 2 |
| ghcr.io/ | 4ee0764310e7 | nghttp2 | 1.30.0-1ubuntu1+esm2 | 2 |
| allegroai/ | 772827a01bb5 | nghttp2 | 1.30.0-1ubuntu1+esm2 | 1 |
| cloudve/ | d79c1c5881c0 | nghttp2 | 1.30.0-1ubuntu1+esm2 | 1 |
| cribl/ | 762747cb6796 | nghttp2 | 1.30.0-1ubuntu1+esm2 | 1 |
| daskdev/ | 052630f5ca04 | nghttp2 | 1.30.0-1ubuntu1+esm2 | 1 |
| dniel/ | 45a667852f2a | nghttp2 | 1.30.0-1ubuntu1+esm2 | 1 |
| elastictranscoder/ | 963ab3858c6b | nghttp2 | 1.30.0-1ubuntu1+esm2 | 1 |
| elastictranscoder/ | 26208b8c2359 | nghttp2 | 1.30.0-1ubuntu1+esm2 | 1 |
| elastictranscoder/ | b4a0327029e6 | nghttp2 | 1.30.0-1ubuntu1+esm2 | 1 |
| elastictranscoder/ | 5b75d19e2733 | nghttp2 | 1.30.0-1ubuntu1+esm2 | 1 |
| eqalpha/ | fd9351ce27a7 | nghttp2 | 1.30.0-1ubuntu1+esm2 | 1 |
| ethereumex/ | a7603aa8df4c | nodejs | no fix listed | 1 |
| frankescobar/ | 8a4d7e9308de | nghttp2 | 1.30.0-1ubuntu1+esm2 | 1 |
| frankescobar/ | cafa03b94dac | nghttp2 | 1.30.0-1ubuntu1+esm2 | 1 |
| galaxy/ | 0267bad550e6 | nodejs | no fix listed | 1 |
| geoscienceaustralia/ | f4039b45572a | nghttp2 | 1.30.0-1ubuntu1+esm2 | 1 |
| gethue/ | 5702b2c37ff9 | nghttp2 nodejs | 1.30.0-1ubuntu1+esm2 no fix listed | 1 |
| gocd/ | 53588bd3221f | nghttp2 | 1.35.1-r1 | 1 |
| gocd/ | 2da45cb09d57 | nghttp2 | 1.35.1-r1 | 1 |
| gotson/ | 9b15ea6bfc30 | nghttp2 | 1.30.0-1ubuntu1+esm2 | 1 |
| hazelcast/ | ca7d5589744f | nghttp2 | 1.39.2-r0 | 1 |
| hazelcast/ | df495e64ea65 | nghttp2 | 1.35.1-r1 | 1 |
| huginn/ | c794eddc7b47 | nghttp2 | 1.30.0-1ubuntu1+esm2 | 1 |
| ibmcom/ | b558f2b444ae | nghttp2 nodejs | 1.35.1-r1 10.16.3-r0 | 1 |
| ibmcom/ | c44e1ef21075 | nghttp2 | 1.35.1-r1 | 1 |
| ibmcom/ | e17bdccc5030 | nodejs | no fix listed | 1 |
| ibmcom/ | 395e60cc6e3d | nghttp2 | 1.30.0-1ubuntu1+esm2 | 1 |
| istio/ | 2232f365aed6 | nghttp2 | 1.30.0-1ubuntu1+esm2 | 1 |
| istio/ | 655eefa11c84 | nghttp2 | 1.30.0-1ubuntu1+esm2 | 1 |
| istio/ | 294ca55bd1cc | nghttp2 | 1.30.0-1ubuntu1+esm2 | 1 |
| istio/ | e7e110a421c2 | nghttp2 | 1.30.0-1ubuntu1+esm2 | 1 |
| istio/ | 87a9db561d2e | nghttp2 | 1.30.0-1ubuntu1+esm2 | 1 |
| istio/ | 88c6c693e67a | nghttp2 | 1.30.0-1ubuntu1+esm2 | 1 |
| jacobalberty/ | 4a3616625dda | nghttp2 | 1.30.0-1ubuntu1+esm2 | 1 |
| jacobalberty/ | b3edc809a3ff | nghttp2 | 1.30.0-1ubuntu1+esm2 | 1 |
| kubeaws/ | c9cd2ba4373a | nghttp2 | 1.35.1-r1 | 1 |
| kubeoperator/ | be8f0d624640 | nghttp2 | 1.30.0-1ubuntu1+esm2 | 1 |