StackRadar

CVE-2019-9513

High

Advisory

Published 13 Aug 2019In the index since 5 Sept 2026
Severity
High
worst across findings
CVSS
7.5
base score, highest
EPSS
0.816
100th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
186
of 17,781 indexed, latest versions
Container images
97
deployed by those charts
Fix available
4 of 5
affected packages

The matching OSV records carry no description.

Carried by container images the latest versions of 186 of 17,781 indexed charts deploy, on 97 images.

Affected packageAffected versionsFixed inImages
nghttp2deb1.30.0-1ubuntu11.30.0-1ubuntu1+esm272
nghttp2apk1.32.0-r0, 1.35.1-r0, 1.38.0-r01.35.1-r1, 1.39.2-r018
nodejsdeb4.2.6~dfsg-1ubuntu4.1, 7.10.1-2nodesource1~xenial1, 8.9.4-1nodesource1, 8.10.0~dfsg-2ubuntu0.4+4 moreno fix listed12
nginxapk1.16.0-r11.16.1-r01
nodejsapk10.14.2-r010.16.3-r01
OSV records
ALPINE-CVE-2019-9513UBUNTU-CVE-2019-9513
Also known as
USN-6754-1

Charts affected

186 by stars
ChartLatestAffected imagesRadar Score
pagespages-ssharma09091.0.01 of 3See more

pages pages-ssharma0909 1.0.0

1 of the 3 container images this version deploys carry CVE-2019-9513.

Container imageDigestPackageFixed in
flyway/flyway:6.4.422d97ceb0c47
nghttp2@1.30.0-1ubuntu1
1.30.0-1ubuntu1+esm2

Open the chart page →

20,190
pagespages-sucharitha1.0.01 of 3See more

pages pages-sucharitha 1.0.0

1 of the 3 container images this version deploys carry CVE-2019-9513.

Container imageDigestPackageFixed in
flyway/flyway:6.4.422d97ceb0c47
nghttp2@1.30.0-1ubuntu1
1.30.0-1ubuntu1+esm2

Open the chart page →

20,190
pagespages-sudhir1.0.01 of 3See more

pages pages-sudhir 1.0.0

1 of the 3 container images this version deploys carry CVE-2019-9513.

Container imageDigestPackageFixed in
flyway/flyway:6.4.422d97ceb0c47
nghttp2@1.30.0-1ubuntu1
1.30.0-1ubuntu1+esm2

Open the chart page →

20,190
pagespages-sushi1.0.01 of 3See more

pages pages-sushi 1.0.0

1 of the 3 container images this version deploys carry CVE-2019-9513.

Container imageDigestPackageFixed in
flyway/flyway:6.4.422d97ceb0c47
nghttp2@1.30.0-1ubuntu1
1.30.0-1ubuntu1+esm2

Open the chart page →

20,190
pagespages-vasanth58141.0.01 of 3See more

pages pages-vasanth5814 1.0.0

1 of the 3 container images this version deploys carry CVE-2019-9513.

Container imageDigestPackageFixed in
flyway/flyway:6.4.422d97ceb0c47
nghttp2@1.30.0-1ubuntu1
1.30.0-1ubuntu1+esm2

Open the chart page →

20,190
pagespages-vjp1.0.01 of 3See more

pages pages-vjp 1.0.0

1 of the 3 container images this version deploys carry CVE-2019-9513.

Container imageDigestPackageFixed in
flyway/flyway:6.4.422d97ceb0c47
nghttp2@1.30.0-1ubuntu1
1.30.0-1ubuntu1+esm2

Open the chart page →

20,190
pagespawan-pages1.0.01 of 3See more

pages pawan-pages 1.0.0

1 of the 3 container images this version deploys carry CVE-2019-9513.

Container imageDigestPackageFixed in
flyway/flyway:6.4.422d97ceb0c47
nghttp2@1.30.0-1ubuntu1
1.30.0-1ubuntu1+esm2

Open the chart page →

20,190
pagespighosh-pages1.0.01 of 3See more

pages pighosh-pages 1.0.0

1 of the 3 container images this version deploys carry CVE-2019-9513.

Container imageDigestPackageFixed in
flyway/flyway:6.4.422d97ceb0c47
nghttp2@1.30.0-1ubuntu1
1.30.0-1ubuntu1+esm2

Open the chart page →

20,190
keydbpozetron0.5.31 of 1See more

keydb pozetron 0.5.3

1 of the 1 container images this version deploys carry CVE-2019-9513.

Container imageDigestPackageFixed in
pozetroninc/keydb:v6.0.1653ae64f29da8
nghttp2@1.30.0-1ubuntu1
1.30.0-1ubuntu1+esm2

Open the chart page →

7,009
practica-helmpractica-helm0.1.02 of 7See more

practica-helm practica-helm 0.1.0

2 of the 7 container images this version deploys carry CVE-2019-9513.

Container imageDigestPackageFixed in
library/mongo:4.4-bionic3d0e6df9fd5b
nghttp2@1.30.0-1ubuntu1
1.30.0-1ubuntu1+esm2
slagattollas/weatherservice-practica:latest68e7f56393fc
nghttp2@1.30.0-1ubuntu1
1.30.0-1ubuntu1+esm2

Open the chart page →

28,484
pagesprasanthi1.0.01 of 3See more

pages prasanthi 1.0.0

1 of the 3 container images this version deploys carry CVE-2019-9513.

Container imageDigestPackageFixed in
flyway/flyway:6.4.422d97ceb0c47
nghttp2@1.30.0-1ubuntu1
1.30.0-1ubuntu1+esm2

Open the chart page →

20,190
pagesranjinigogga1.0.01 of 3See more

pages ranjinigogga 1.0.0

1 of the 3 container images this version deploys carry CVE-2019-9513.

Container imageDigestPackageFixed in
flyway/flyway:6.4.422d97ceb0c47
nghttp2@1.30.0-1ubuntu1
1.30.0-1ubuntu1+esm2

Open the chart page →

20,190
pagesrebecca-pages1.0.01 of 3See more

pages rebecca-pages 1.0.0

1 of the 3 container images this version deploys carry CVE-2019-9513.

Container imageDigestPackageFixed in
flyway/flyway:6.4.422d97ceb0c47
nghttp2@1.30.0-1ubuntu1
1.30.0-1ubuntu1+esm2

Open the chart page →

20,190
bookinforgnu1.0.01 of 7See more

bookinfo rgnu 1.0.0

1 of the 7 container images this version deploys carry CVE-2019-9513.

Container imageDigestPackageFixed in
pstauffer/curl:latest2663156457ab
nghttp2@1.32.0-r0
1.39.2-r0

Open the chart page →

20,462
istio-bookinforgnu1.0.21 of 7See more

istio-bookinfo rgnu 1.0.2

1 of the 7 container images this version deploys carry CVE-2019-9513.

Container imageDigestPackageFixed in
pstauffer/curl:latest2663156457ab
nghttp2@1.32.0-r0
1.39.2-r0

Open the chart page →

20,462
pagesroccohiggins-pages1.0.01 of 3See more

pages roccohiggins-pages 1.0.0

1 of the 3 container images this version deploys carry CVE-2019-9513.

Container imageDigestPackageFixed in
flyway/flyway:6.4.422d97ceb0c47
nghttp2@1.30.0-1ubuntu1
1.30.0-1ubuntu1+esm2

Open the chart page →

20,190
pagesronan-pages1.0.01 of 3See more

pages ronan-pages 1.0.0

1 of the 3 container images this version deploys carry CVE-2019-9513.

Container imageDigestPackageFixed in
flyway/flyway:6.4.422d97ceb0c47
nghttp2@1.30.0-1ubuntu1
1.30.0-1ubuntu1+esm2

Open the chart page →

20,190
pagessamanvithkaranth1.0.01 of 3See more

pages samanvithkaranth 1.0.0

1 of the 3 container images this version deploys carry CVE-2019-9513.

Container imageDigestPackageFixed in
flyway/flyway:6.4.422d97ceb0c47
nghttp2@1.30.0-1ubuntu1
1.30.0-1ubuntu1+esm2

Open the chart page →

20,190
pagessarubits-pages1.0.01 of 3See more

pages sarubits-pages 1.0.0

1 of the 3 container images this version deploys carry CVE-2019-9513.

Container imageDigestPackageFixed in
flyway/flyway:6.4.422d97ceb0c47
nghttp2@1.30.0-1ubuntu1
1.30.0-1ubuntu1+esm2

Open the chart page →

20,190
pagessekharpkube1.0.01 of 3See more

pages sekharpkube 1.0.0

1 of the 3 container images this version deploys carry CVE-2019-9513.

Container imageDigestPackageFixed in
flyway/flyway:6.4.422d97ceb0c47
nghttp2@1.30.0-1ubuntu1
1.30.0-1ubuntu1+esm2

Open the chart page →

20,190
pagesshrutiujlan-pages1.0.01 of 3See more

pages shrutiujlan-pages 1.0.0

1 of the 3 container images this version deploys carry CVE-2019-9513.

Container imageDigestPackageFixed in
flyway/flyway:6.4.422d97ceb0c47
nghttp2@1.30.0-1ubuntu1
1.30.0-1ubuntu1+esm2

Open the chart page →

20,190
spotinst-ocean-network-clientspot1.0.01 of 1See more

spotinst-ocean-network-client spot 1.0.0

1 of the 1 container images this version deploys carry CVE-2019-9513.

Container imageDigestPackageFixed in
public.ecr.aws/spotinst/spot-network-client:1.0.0-8-lb_endpoint-d0ec127efcecf98b912
nghttp2@1.30.0-1ubuntu1
1.30.0-1ubuntu1+esm2

Open the chart page →

6,950
pagessrinipages1.0.01 of 3See more

pages srinipages 1.0.0

1 of the 3 container images this version deploys carry CVE-2019-9513.

Container imageDigestPackageFixed in
flyway/flyway:6.4.422d97ceb0c47
nghttp2@1.30.0-1ubuntu1
1.30.0-1ubuntu1+esm2

Open the chart page →

20,190
unifistartechnicaVerified publisher0.1.31 of 2See more

unifi startechnica 0.1.3

1 of the 2 container images this version deploys carry CVE-2019-9513.

Container imageDigestPackageFixed in
jacobalberty/unifi:v7.1.664a3616625dda
nghttp2@1.30.0-1ubuntu1
1.30.0-1ubuntu1+esm2

Open the chart page →

14,493
pagesstephendillondell1.0.01 of 3See more

pages stephendillondell 1.0.0

1 of the 3 container images this version deploys carry CVE-2019-9513.

Container imageDigestPackageFixed in
flyway/flyway:6.4.422d97ceb0c47
nghttp2@1.30.0-1ubuntu1
1.30.0-1ubuntu1+esm2

Open the chart page →

20,190
pagessunilb2590-pages1.0.01 of 3See more

pages sunilb2590-pages 1.0.0

1 of the 3 container images this version deploys carry CVE-2019-9513.

Container imageDigestPackageFixed in
flyway/flyway:6.4.422d97ceb0c47
nghttp2@1.30.0-1ubuntu1
1.30.0-1ubuntu1+esm2

Open the chart page →

20,190
istio-discoverytemp-charts0.3.31 of 1See more

istio-discovery temp-charts 0.3.3

1 of the 1 container images this version deploys carry CVE-2019-9513.

Container imageDigestPackageFixed in
istio/pilot:1.10.0294ca55bd1cc
nghttp2@1.30.0-1ubuntu1
1.30.0-1ubuntu1+esm2

Open the chart page →

10,568
istio-ingresstemp-charts0.3.31 of 1See more

istio-ingress temp-charts 0.3.3

1 of the 1 container images this version deploys carry CVE-2019-9513.

Container imageDigestPackageFixed in
istio/proxyv2:1.10.088c6c693e67a
nghttp2@1.30.0-1ubuntu1
1.30.0-1ubuntu1+esm2

Open the chart page →

10,514
pagestest43221.0.01 of 3See more

pages test4322 1.0.0

1 of the 3 container images this version deploys carry CVE-2019-9513.

Container imageDigestPackageFixed in
flyway/flyway:6.4.422d97ceb0c47
nghttp2@1.30.0-1ubuntu1
1.30.0-1ubuntu1+esm2

Open the chart page →

20,190
pagesthiru-pages1.0.01 of 3See more

pages thiru-pages 1.0.0

1 of the 3 container images this version deploys carry CVE-2019-9513.

Container imageDigestPackageFixed in
flyway/flyway:6.4.422d97ceb0c47
nghttp2@1.30.0-1ubuntu1
1.30.0-1ubuntu1+esm2

Open the chart page →

20,190
pagesthuy-pages1.0.01 of 3See more

pages thuy-pages 1.0.0

1 of the 3 container images this version deploys carry CVE-2019-9513.

Container imageDigestPackageFixed in
flyway/flyway:6.4.422d97ceb0c47
nghttp2@1.30.0-1ubuntu1
1.30.0-1ubuntu1+esm2

Open the chart page →

20,190
pagesvictor-pages1.0.01 of 3See more

pages victor-pages 1.0.0

1 of the 3 container images this version deploys carry CVE-2019-9513.

Container imageDigestPackageFixed in
flyway/flyway:6.4.422d97ceb0c47
nghttp2@1.30.0-1ubuntu1
1.30.0-1ubuntu1+esm2

Open the chart page →

20,190
pageswalter1.0.01 of 3See more

pages walter 1.0.0

1 of the 3 container images this version deploys carry CVE-2019-9513.

Container imageDigestPackageFixed in
flyway/flyway:6.4.422d97ceb0c47
nghttp2@1.30.0-1ubuntu1
1.30.0-1ubuntu1+esm2

Open the chart page →

20,190
wbaas-backupwbstack0.1.01 of 1See more

wbaas-backup wbstack 0.1.0

1 of the 1 container images this version deploys carry CVE-2019-9513.

Container imageDigestPackageFixed in
ghcr.io/wmde/wbaas-backup:v0.1.78e6a9516eac0
nghttp2@1.30.0-1ubuntu1
1.30.0-1ubuntu1+esm2

Open the chart page →

9,743
emissary-ingresswenerme8.12.21 of 2See more

emissary-ingress wenerme 8.12.2

1 of the 2 container images this version deploys carry CVE-2019-9513.

Container imageDigestPackageFixed in
istio/kubectl:1.5.10dbb7726d1bf0
nghttp2@1.30.0-1ubuntu1
1.30.0-1ubuntu1+esm2

Open the chart page →

10,843
satisfyymrs1.0.21 of 1See more

satisfy ymrs 1.0.2

1 of the 1 container images this version deploys carry CVE-2019-9513.

Container imageDigestPackageFixed in
anapsix/satisfydigest-pinnedfae78e3809e9
nghttp2@1.32.0-r0
1.39.2-r0

Open the chart page →

1,572

Container images carrying it

97 by charts deploying them

A fixed version is listed for 4 of the 5 affected packages.

Container imageDigestPackageFixed inUsed by
flyway/flyway:6.4.422d97ceb0c47
nghttp2@1.30.0-1ubuntu1
1.30.0-1ubuntu1+esm2
79
gradiant/hbase-base:2.0.1a1ee6de94c04
nghttp2@1.32.0-r0
1.39.2-r0
4
library/mongo:4.2.12-bionic628741415fc9
nghttp2@1.30.0-1ubuntu1
1.30.0-1ubuntu1+esm2
4
library/mongo:4.4.66efa05203990
nghttp2@1.30.0-1ubuntu1
1.30.0-1ubuntu1+esm2
4
oscarsotosanchez/weatherservice:v1.0911ec961d10b
nghttp2@1.30.0-1ubuntu1
1.30.0-1ubuntu1+esm2
4
anapsix/satisfyfae78e3809e9
nghttp2@1.32.0-r0
1.39.2-r0
3
architectminds/aws-kubectl:1.19735e59a1085
nghttp2@1.38.0-r0
1.39.2-r0
2
freeradius/freeradius-server:3.0.2121c8bfa904d8
nghttp2@1.30.0-1ubuntu1
1.30.0-1ubuntu1+esm2
2
istio/kubectl:1.5.10dbb7726d1bf0
nghttp2@1.30.0-1ubuntu1
1.30.0-1ubuntu1+esm2
2
istio/proxyv2:1.10.3a78b7a165744
nghttp2@1.30.0-1ubuntu1
1.30.0-1ubuntu1+esm2
2
library/cassandra:3.11.65aa8400b4b3b
nghttp2@1.30.0-1ubuntu1
1.30.0-1ubuntu1+esm2
2
library/mongo:4.2.358b25d51baa1
nghttp2@1.30.0-1ubuntu1
1.30.0-1ubuntu1+esm2
2
pstauffer/curl:latest2663156457ab
nghttp2@1.32.0-r0
1.39.2-r0
2
ghcr.io/linuxserver/openvpn-as:version-2.8.6-916f8e7d-ubuntu184ee0764310e7
nghttp2@1.30.0-1ubuntu1
1.30.0-1ubuntu1+esm2
2
allegroai/clearml-agent-k8s-base:1.24-21772827a01bb5
nghttp2@1.30.0-1ubuntu1
1.30.0-1ubuntu1+esm2
1
cloudve/ttyd:latestd79c1c5881c0
nghttp2@1.30.0-1ubuntu1
1.30.0-1ubuntu1+esm2
1
cribl/cribl:3.0.2762747cb6796
nghttp2@1.30.0-1ubuntu1
1.30.0-1ubuntu1+esm2
1
daskdev/dask-notebook:1.1.0052630f5ca04
nghttp2@1.30.0-1ubuntu1
1.30.0-1ubuntu1+esm2
1
dniel/api-posts:master45a667852f2a
nghttp2@1.30.0-1ubuntu1
1.30.0-1ubuntu1+esm2
1
elastictranscoder/media:627e21dc963ab3858c6b
nghttp2@1.30.0-1ubuntu1
1.30.0-1ubuntu1+esm2
1
elastictranscoder/media-storage:f6d861a026208b8c2359
nghttp2@1.30.0-1ubuntu1
1.30.0-1ubuntu1+esm2
1
elastictranscoder/transcoder:627e21dcb4a0327029e6
nghttp2@1.30.0-1ubuntu1
1.30.0-1ubuntu1+esm2
1
elastictranscoder/transcoder-handler:627e21dc5b75d19e2733
nghttp2@1.30.0-1ubuntu1
1.30.0-1ubuntu1+esm2
1
eqalpha/keydb:x86_64_v6.3.2fd9351ce27a7
nghttp2@1.30.0-1ubuntu1
1.30.0-1ubuntu1+esm2
1
ethereumex/eth-stats-dashboard:v0.0.1a7603aa8df4c
nodejs@4.2.6~dfsg-1ubuntu4.1
no fix listed
1
frankescobar/allure-docker-service:2.21.08a4d7e9308de
nghttp2@1.30.0-1ubuntu1
1.30.0-1ubuntu1+esm2
1
frankescobar/allure-docker-service:2.19.0cafa03b94dac
nghttp2@1.30.0-1ubuntu1
1.30.0-1ubuntu1+esm2
1
galaxy/galaxy-init:v18.010267bad550e6
nodejs@9.11.1-1nodesource1
no fix listed
1
geoscienceaustralia/dea-k8s-data:latestf4039b45572a
nghttp2@1.30.0-1ubuntu1
1.30.0-1ubuntu1+esm2
1
gethue/hue:4.10.05702b2c37ff9
nghttp2@1.30.0-1ubuntu1
nodejs@14.17.0-1nodesource1
1.30.0-1ubuntu1+esm2
no fix listed
1
gocd/gocd-agent-alpine-3.9:v19.3.053588bd3221f
nghttp2@1.35.1-r0
1.35.1-r1
1
gocd/gocd-server:v19.3.02da45cb09d57
nghttp2@1.35.1-r0
1.35.1-r1
1
gotson/komga:0.99.49b15ea6bfc30
nghttp2@1.30.0-1ubuntu1
1.30.0-1ubuntu1+esm2
1
hazelcast/hazelcast:3.11.2ca7d5589744f
nghttp2@1.32.0-r0
1.39.2-r0
1
hazelcast/hazelcast-jet:3.0df495e64ea65
nghttp2@1.35.1-r0
1.35.1-r1
1
huginn/huginn-single-process:4d17829cf6b15b004ad3f4be196303dca4944810c794eddc7b47
nghttp2@1.30.0-1ubuntu1
1.30.0-1ubuntu1+esm2
1
ibmcom/icp-sert-bats:3.2.0b558f2b444ae
nghttp2@1.35.1-r0
nodejs@10.14.2-r0
1.35.1-r1
10.16.3-r0
1
ibmcom/icp-storage-util:3.2.0c44e1ef21075
nghttp2@1.35.1-r0
1.35.1-r1
1
ibmcom/microclimate-theia:lateste17bdccc5030
nodejs@4.2.6~dfsg-1ubuntu4.1
no fix listed
1
ibmcom/skydive:0.22.0395e60cc6e3d
nghttp2@1.30.0-1ubuntu1
1.30.0-1ubuntu1+esm2
1
istio/install-cni:1.10.32232f365aed6
nghttp2@1.30.0-1ubuntu1
1.30.0-1ubuntu1+esm2
1
istio/operator:1.10.3655eefa11c84
nghttp2@1.30.0-1ubuntu1
1.30.0-1ubuntu1+esm2
1
istio/pilot:1.10.0294ca55bd1cc
nghttp2@1.30.0-1ubuntu1
1.30.0-1ubuntu1+esm2
1
istio/pilot:1.10.3e7e110a421c2
nghttp2@1.30.0-1ubuntu1
1.30.0-1ubuntu1+esm2
1
istio/proxyv2:1.9.687a9db561d2e
nghttp2@1.30.0-1ubuntu1
1.30.0-1ubuntu1+esm2
1
istio/proxyv2:1.10.088c6c693e67a
nghttp2@1.30.0-1ubuntu1
1.30.0-1ubuntu1+esm2
1
jacobalberty/unifi:v7.1.664a3616625dda
nghttp2@1.30.0-1ubuntu1
1.30.0-1ubuntu1+esm2
1
jacobalberty/unifi:v7.4.162b3edc809a3ff
nghttp2@1.30.0-1ubuntu1
1.30.0-1ubuntu1+esm2
1
kubeaws/kube-spot-termination-notice-handler:1.13.0-1c9cd2ba4373a
nghttp2@1.35.1-r0
1.35.1-r1
1
kubeoperator/webkubectl:v2.4.0be8f0d624640
nghttp2@1.30.0-1ubuntu1
1.30.0-1ubuntu1+esm2
1

syft 1.42.1 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.