CVE-2024-1580
HighAdvisory
Published 19 Feb 2024In the index since 6 Sept 2026
- Severity
- High
- worst across findings
- CVSS
- 8.8
- base score, highest
- EPSS
- 0.018
- 78th percentile
- CISA KEV
- Not listed
- no confirmed exploitation
- Charts affected
- 116
- of 17,781 indexed, latest versions
- Container images
- 125
- deployed by those charts
- Fix available
- 1 of 1
- affected package
dav1d - security update
Carried by container images the latest versions of 116 of 17,781 indexed charts deploy, on 125 images.
| Affected package | Affected versions | Fixed in | Images |
|---|---|---|---|
| dav1ddeb | 0.7.1-3, 0.9.2-1, 1.0.0-2 | 0.7.1-3+deb11u1, 1.0.0-2+deb12u1 | 125 |
Charts affected
116 by stars
| Chart | Latest | Affected images | Radar Score |
|---|---|---|---|
| verbasubstratusVerified publisher | 0.4.0 | 1 of 1See more | 13,390 |
| icingawebsvtech-public-helm-charts | 1.0.0 | 1 of 2See more | 2,038 |
| nagvissvtech-public-helm-charts | 1.0.0 | 1 of 1See more | 9,102 |
| super-mariotechpreta | 0.1.1 | 1 of 1See more | 6,297 |
| codegentest-opea | 1.0.0 | 1 of 5See more | 28,814 |
| codetranstest-opea | 1.0.0 | 1 of 5See more | 28,385 |
| docsumtest-opea | 1.0.0 | 1 of 5See more | 28,858 |
| tfy-distributortruefoundryVerified publisher | 0.0.1 | 1 of 4See more | 17,323 |
| demo-backendv2flyVerified publisher | 0.0.3 | 1 of 1See more | 14,358 |
| vinyl-lib-chartvinyl-libVerified publisher | 0.1.0 | 1 of 1See more | 3,392 |
| apiwbstack | 0.36.0 | 1 of 1See more | 2,019 |
| mediawikiwbstack | 0.14.0 | 1 of 1See more | 2,132 |
| wp-gats-helmwordpress-gatsby | 0.0.1 | 1 of 3See more | 2,021 |
| playwright-synthetic-monitoringwork-adventure | 1.0.1 | 1 of 1See more | 14,100 |
| enterprise-gatewayzeet | 3.2.2 | 1 of 2See more | 1,838 |
| zoo-project-druzoo-projectOfficialVerified publisher | 0.10.4 | 1 of 6See more | 7,849 |
Container images carrying it
125 by charts deploying them
A fixed version is listed for 1 of the 1 affected package.
| Container image | Digest | Package | Fixed in | Used by |
|---|---|---|---|---|
| moreillon/ | d2ee0423b797 | dav1d | 1.0.0-2+deb12u1 | 1 |
| nathanielvarona/ | b746a34e5597 | dav1d | 0.7.1-3+deb11u1 | 1 |
| nirmalnaveen/ | 8541a39162f3 | dav1d | 1.0.0-2+deb12u1 | 1 |
| opea/ | 2bee4eb66f3e | dav1d | 1.0.0-2+deb12u1 | 1 |
| opea/ | 3ef121f34610 | dav1d | 1.0.0-2+deb12u1 | 1 |
| opea/ | 7f854e9bffaf | dav1d | 1.0.0-2+deb12u1 | 1 |
| openzaak/ | 2ca2ea6e0ae9 | dav1d | 0.7.1-3+deb11u1 | 1 |
| owncloud/ | 74c53d341076 | dav1d | no fix listed | 1 |
| owncloud/ | b3f9efdcd7f7 | dav1d | no fix listed | 1 |
| penpotapp/ | 47853d9bb9dd | dav1d | no fix listed | 1 |
| penpotapp/ | 5c835ffd87ab | dav1d | no fix listed | 1 |
| phntom/ | d8e2a9f2f085 | dav1d | 0.7.1-3+deb11u1 | 1 |
| phntom/ | 3adadbac8443 | dav1d | 0.7.1-3+deb11u1 | 1 |
| photoprism/ | 2954334adbda | dav1d | no fix listed | 1 |
| praravind1801/ | f29d637b9ce1 | dav1d | 1.0.0-2+deb12u1 | 1 |
| robmarkcole/ | 410275726459 | dav1d | 0.7.1-3+deb11u1 | 1 |
| robotshop/ | 774b52c6180d | dav1d | 0.7.1-3+deb11u1 | 1 |
| roundcube/ | a8ea6fd751dc | dav1d | 0.7.1-3+deb11u1 | 1 |
| ryuunosukeds3/ | c0398f13e8a9 | dav1d | no fix listed | 1 |
| santisbon/ | c4e994ca4540 | dav1d | 1.0.0-2+deb12u1 | 1 |
| santisbon/ | e807283f8d69 | dav1d | 1.0.0-2+deb12u1 | 1 |
| santisbon/ | 8ee3a1697227 | dav1d | 1.0.0-2+deb12u1 | 1 |
| sbs20/ | dad1fd6e9a98 | dav1d | 1.0.0-2+deb12u1 | 1 |
| socialmediamacroscope/ | 4fb86885d64d | dav1d | 0.7.1-3+deb11u1 | 1 |
| socialmediamacroscope/ | 4bfda60829fe | dav1d | 0.7.1-3+deb11u1 | 1 |
| socialmediamacroscope/ | 07477060bba8 | dav1d | 0.7.1-3+deb11u1 | 1 |
| socialmediamacroscope/ | c969f7677983 | dav1d | 0.7.1-3+deb11u1 | 1 |
| socialmediamacroscope/ | 9b4211832429 | dav1d | 0.7.1-3+deb11u1 | 1 |
| socialmediamacroscope/ | 999f2ff2c128 | dav1d | 0.7.1-3+deb11u1 | 1 |
| socialmediamacroscope/ | 51cb17626519 | dav1d | 0.7.1-3+deb11u1 | 1 |
| socialmediamacroscope/ | 74e35f64db68 | dav1d | 0.7.1-3+deb11u1 | 1 |
| socialmediamacroscope/ | 6418f9bdb4d2 | dav1d | 1.0.0-2+deb12u1 | 1 |
| socialmediamacroscope/ | b351c21422e6 | dav1d | 1.0.0-2+deb12u1 | 1 |
| socialmediamacroscope/ | ca863306314b | dav1d | 1.0.0-2+deb12u1 | 1 |
| socialmediamacroscope/ | 724f3f5702e0 | dav1d | 0.7.1-3+deb11u1 | 1 |
| socialmediamacroscope/ | fa490acac2f8 | dav1d | 1.0.0-2+deb12u1 | 1 |
| stratospire/ | a4c34cb01117 | dav1d | 0.7.1-3+deb11u1 | 1 |
| substratusai/ | 61695be635eb | dav1d | 1.0.0-2+deb12u1 | 1 |
| svtechnmaa/ | a59d0b81dde2 | dav1d | 0.7.1-3+deb11u1 | 1 |
| svtechnmaa/ | 18394b08e6c3 | dav1d | 1.0.0-2+deb12u1 | 1 |
| teknas09/ | 12a1fa85c4aa | dav1d | 1.0.0-2+deb12u1 | 1 |
| theradius/ | 63ba348546ec | dav1d | 1.0.0-2+deb12u1 | 1 |
| thongngo3301/ | a341af5976e3 | dav1d | 1.0.0-2+deb12u1 | 1 |
| timescale/ | a8e3322e1cf9 | dav1d | no fix listed | 1 |
| timescale/ | cdb9ae118899 | dav1d | no fix listed | 1 |
| timescale/ | d7db8f1085a3 | dav1d | no fix listed | 1 |
| timescale/ | e8d0a9cc3db5 | dav1d | no fix listed | 1 |
| timescale/ | ed719c0cd19d | dav1d | no fix listed | 1 |
| vlebediantsev/ | 007c6670ff48 | dav1d | 1.0.0-2+deb12u1 | 1 |
| vlebediantsev/ | 945675fd2636 | dav1d | 1.0.0-2+deb12u1 | 1 |