CVE-2024-28182
MediumAdvisory
Published 4 Apr 2024In the index since 5 Sept 2026
- Severity
- Medium
- worst across findings
- CVSS
- 5.3
- base score, highest
- EPSS
- 0.850
- 100th percentile
- CISA KEV
- Not listed
- no confirmed exploitation
- Charts affected
- 1,135
- of 17,787 indexed, latest versions
- Container images
- 1,142
- deployed by those charts
- Fix available
- 2 of 2
- affected packages
Red Hat Security Advisory: nghttp2 security update
Carried by container images the latest versions of 1,135 of 17,787 indexed charts deploy, on 1,142 images.
| Affected package | Affected versions | Fixed in | Images |
|---|---|---|---|
| nghttp2deb | 1.30.0-1ubuntu1, 1.36.0-2, 1.36.0-2+deb10u1, 1.36.0-2+deb10u2+9 more | 1.30.0-1ubuntu1+esm2, 1.36.0-2+deb10u3, 1.40.0-1ubuntu0.3, 1.43.0-1+deb11u2+2 more | 942 |
| nghttp2rpm | 1.33.0-1.el8, 1.33.0-1.el8_0.1, 1.33.0-3.el8_2.1, 1.33.0-3.el8_2.2+9 more | 0:1.33.0-4.el8_6.2, 0:1.33.0-5.el8_8.1, 0:1.33.0-6.el8_10.1, 0:1.43.0-5.el9_4.3+2 more | 200 |
- OSV records
- DEBIAN-CVE-2024-28182RHSA-2024:3501RHSA-2024:3701RHSA-2024:3763RHSA-2024:4252RLSA-2024:4252UBUNTU-CVE-2024-28182DLA-3804-1DLA-3898-1openSUSE-SU-2024:13825-1RLSA-2024:3501SUSE-SU-2024:1167-1
- Also known as
- RHSA-2024:3665, RHSA-2024:4576, RHSA-2024:4732, USN-6754-1
Charts affected
1,135 by stars
Container images carrying it
1,142 by charts deploying them
A fixed version is listed for 2 of the 2 affected packages.
| Container image | Digest | Package | Fixed in | Used by |
|---|---|---|---|---|
| substratusai/ | 61695be635eb | nghttp2 | 1.52.0-1+deb12u2 | 1 |
| supabase/ | d207e6e23ad3 | nghttp2 | 1.52.0-1+deb12u2 | 1 |
| supabase/ | 26d8070c55e9 | nghttp2 | 1.52.0-1+deb12u2 | 1 |
| svtechnmaa/ | d5a1390b5b75 | nghttp2 | 1.36.0-2+deb10u3 | 1 |
| svtechnmaa/ | 1d71314424aa | nghttp2 | 1.40.0-1ubuntu0.3 | 1 |
| svtechnmaa/ | e19aba397c1f | nghttp2 | 1.36.0-2+deb10u3 | 1 |
| svtechnmaa/ | a59d0b81dde2 | nghttp2 | 1.43.0-1+deb11u2 | 1 |
| svtechnmaa/ | 410a25b51f9f | nghttp2 | 1.43.0-1ubuntu0.2 | 1 |
| svtechnmaa/ | 18394b08e6c3 | nghttp2 | 1.52.0-1+deb12u2 | 1 |
| svtechnmaa/ | 6e368ace0977 | nghttp2 | 1.40.0-1ubuntu0.3 | 1 |
| t3nde/ | 77e008f764db | nghttp2 | 1.43.0-1+deb11u2 | 1 |
| tachyongroup/ | 7e79b9000856 | nghttp2 | 1.36.0-2+deb10u3 | 1 |
| tachyongroup/ | f4f7fabe1037 | nghttp2 | 1.43.0-1+deb11u2 | 1 |
| tautulli/ | c4da15f058ea | nghttp2 | 1.43.0-1+deb11u2 | 1 |
| teknas09/ | 12a1fa85c4aa | nghttp2 | 1.52.0-1+deb12u2 | 1 |
| testhubio/ | 56badee134b9 | nghttp2 | 1.36.0-2+deb10u3 | 1 |
| th0th/ | d06fa39f7406 | nghttp2 | 1.43.0-1+deb11u2 | 1 |
| thecodingmachine/ | 64001369dad5 | nghttp2 | 1.36.0-2+deb10u3 | 1 |
| thecodingmachine/ | 5bdab56da2fa | nghttp2 | 1.36.0-2+deb10u3 | 1 |
| thecodingmachine/ | d8f66979b9b4 | nghttp2 | 1.36.0-2+deb10u3 | 1 |
| thecodingmachine/ | 3ccd467543b3 | nghttp2 | 1.36.0-2+deb10u3 | 1 |
| theradius/ | 63ba348546ec | nghttp2 | 1.52.0-1+deb12u2 | 1 |
| thmmniii/ | 5438517d9fc2 | nghttp2 | 1.43.0-1ubuntu0.2 | 1 |
| thongngo3301/ | a341af5976e3 | nghttp2 | 1.52.0-1+deb12u2 | 1 |
| timescale/ | a8e3322e1cf9 | nghttp2 | 1.43.0-1ubuntu0.2 | 1 |
| timescale/ | cdb9ae118899 | nghttp2 | 1.43.0-1ubuntu0.2 | 1 |
| timescale/ | ed719c0cd19d | nghttp2 | 1.43.0-1ubuntu0.2 | 1 |
| tksky1/ | ec7b889f380f | nghttp2 | 1.43.0-1+deb11u2 | 1 |
| tooljet/ | c85a4720e42e | nghttp2 | 1.36.0-2+deb10u3 | 1 |
| torrespro/ | 6d3bd305a1ba | nghttp2 | 1.43.0-1+deb11u2 | 1 |
| trinodb/ | ee80ab5eeab2 | nghttp2 | 1.43.0-1ubuntu0.2 | 1 |
| twentycrm/ | 2f78405a78be | nghttp2 | 1.43.0-1ubuntu0.2 | 1 |
| uffizzi/ | 66e9e3937c60 | nghttp2 | 1.43.0-1+deb11u2 | 1 |
| vaultwarden/ | c2849f8189e4 | nghttp2 | 1.43.0-1+deb11u2 | 1 |
| vikunja/ | 863a426a8e49 | nghttp2 | 1.36.0-2+deb10u3 | 1 |
| vinanrra/ | f9534490bd2b | nghttp2 | 1.30.0-1ubuntu1+esm2 | 1 |
| viniciusfcf/ | bba8ee1b5cd5 | nghttp2 | 0:1.33.0-6.el8_10.1 | 1 |
| vividplanet/ | ae1c5b1cbecb | nghttp2 | 0:1.33.0-6.el8_10.1 | 1 |
| vlebediantsev/ | e7f20450d2ae | nghttp2 | 1.43.0-1+deb11u2 | 1 |
| vlebediantsev/ | 10393a89b4a8 | nghttp2 | 1.43.0-1+deb11u2 | 1 |
| vlebediantsev/ | df8bf38c535b | nghttp2 | 1.43.0-1+deb11u2 | 1 |
| vlebediantsev/ | 007c6670ff48 | nghttp2 | 1.52.0-1+deb12u2 | 1 |
| vlebediantsev/ | 945675fd2636 | nghttp2 | 1.52.0-1+deb12u2 | 1 |
| vlebediantsev/ | 427af418b75e | nghttp2 | 1.43.0-1+deb11u2 | 1 |
| vlebediantsev/ | 54f69d116c50 | nghttp2 | 1.52.0-1+deb12u2 | 1 |
| vlebediantsev/ | 9319437f3c8f | nghttp2 | 1.43.0-1+deb11u2 | 1 |
| volkerraschek/ | c4f10aebf87b | nghttp2 | 1.43.0-1+deb11u2 | 1 |
| voltha/ | e038acb950d3 | nghttp2 | 1.30.0-1ubuntu1+esm2 | 1 |
| wallarm/ | ea9608c82e40 | nghttp2 | 1.40.0-1ubuntu0.3 | 1 |
| wavefronthq/ | d1064d28f6eb | nghttp2 | 1.30.0-1ubuntu1+esm2 | 1 |