StackRadar

CVE-2024-28182

Medium

Advisory

Published 4 Apr 2024In the index since 5 Sept 2026
Severity
Medium
worst across findings
CVSS
5.3
base score, highest
EPSS
0.850
100th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
1,135
of 17,790 indexed, latest versions
Container images
1,142
deployed by those charts
Fix available
2 of 2
affected packages

Red Hat Security Advisory: nghttp2 security update

Carried by container images the latest versions of 1,135 of 17,790 indexed charts deploy, on 1,142 images.

Affected packageAffected versionsFixed inImages
nghttp2deb1.30.0-1ubuntu1, 1.36.0-2, 1.36.0-2+deb10u1, 1.36.0-2+deb10u2+9 more1.30.0-1ubuntu1+esm2, 1.36.0-2+deb10u3, 1.40.0-1ubuntu0.3, 1.43.0-1+deb11u2+2 more942
nghttp2rpm1.33.0-1.el8, 1.33.0-1.el8_0.1, 1.33.0-3.el8_2.1, 1.33.0-3.el8_2.2+9 more0:1.33.0-4.el8_6.2, 0:1.33.0-5.el8_8.1, 0:1.33.0-6.el8_10.1, 0:1.43.0-5.el9_4.3+2 more200
OSV records
DEBIAN-CVE-2024-28182RHSA-2024:3501RHSA-2024:3701RHSA-2024:3763RHSA-2024:4252RLSA-2024:4252UBUNTU-CVE-2024-28182DLA-3804-1DLA-3898-1openSUSE-SU-2024:13825-1RLSA-2024:3501SUSE-SU-2024:1167-1
Also known as
RHSA-2024:3665, RHSA-2024:4576, RHSA-2024:4732, USN-6754-1

Charts affected

1,135 by stars
ChartLatestAffected imagesRadar Score
istio-operatormetakube1.12.01 of 1See more

istio-operator metakube 1.12.0

1 of the 1 container images this version deploys carry CVE-2024-28182.

Container imageDigestPackageFixed in
istio/operator:1.12.06cfce8a071b9
nghttp2@1.40.0-1build1
1.40.0-1ubuntu0.3

Open the chart page →

8,950
alluremidokura-communityVerified publisher0.1.32 of 2See more

allure midokura-community 0.1.3

2 of the 2 container images this version deploys carry CVE-2024-28182.

Container imageDigestPackageFixed in
frankescobar/allure-docker-service:2.19.0cafa03b94dac
nghttp2@1.30.0-1ubuntu1
1.30.0-1ubuntu1+esm2
frankescobar/allure-docker-service-ui:7.0.34ebd8b4ef340
nghttp2@1.36.0-2+deb10u1
1.36.0-2+deb10u3

Open the chart page →

12,858
errbotmidokura-communityVerified publisher0.0.51 of 1See more

errbot midokura-community 0.0.5

1 of the 1 container images this version deploys carry CVE-2024-28182.

Container imageDigestPackageFixed in
errbotio/errbot:6.1.900ee4e0953ab
nghttp2@1.43.0-1
1.43.0-1+deb11u2

Open the chart page →

2,234
fossologymidokura-communityVerified publisher0.2.21 of 2See more

fossology midokura-community 0.2.2

1 of the 2 container images this version deploys carry CVE-2024-28182.

Container imageDigestPackageFixed in
fossology/fossology:4.2.18bd1f22ba7bb
nghttp2@1.36.0-2+deb10u1
1.36.0-2+deb10u3

Open the chart page →

3,295
unifimidokura-communityVerified publisher0.0.61 of 1See more

unifi midokura-community 0.0.6

1 of the 1 container images this version deploys carry CVE-2024-28182.

Container imageDigestPackageFixed in
linuxserver/unifi-controller:7.3.83ab105cc50322
nghttp2@1.40.0-1build1
1.40.0-1ubuntu0.3

Open the chart page →

11,281
minio-operatorminio-operator4.3.71 of 2See more

minio-operator minio-operator 4.3.7

1 of the 2 container images this version deploys carry CVE-2024-28182.

Container imageDigestPackageFixed in
minio/operator:v4.3.754393e03f3b2
nghttp2@1.33.0-3.el8_2.1
0:1.33.0-6.el8_10.1

Open the chart page →

6,085
cockroachdb-operatormmontesVerified publisher0.1.01 of 1See more

cockroachdb-operator mmontes 0.1.0

1 of the 1 container images this version deploys carry CVE-2024-28182.

Container imageDigestPackageFixed in
cockroachdb/cockroach-operator:v2.1.0983312754620
nghttp2@1.33.0-3.el8_2.1
0:1.33.0-6.el8_10.1

Open the chart page →

7,782
mongodbmmontesVerified publisher0.5.01 of 1See more

mongodb mmontes 0.5.0

1 of the 1 container images this version deploys carry CVE-2024-28182.

Container imageDigestPackageFixed in
library/mongo:4.4.1305678ae4e5e1
nghttp2@1.40.0-1build1
1.40.0-1ubuntu0.3

Open the chart page →

7,151
backendmojaloop0.1.05 of 6See more

backend mojaloop 0.1.0

5 of the 6 container images this version deploys carry CVE-2024-28182.

Container imageDigestPackageFixed in
bitnamilegacy/jmx-exporter:0.16.1d81bfc40888f
nghttp2@1.36.0-2+deb10u1
1.36.0-2+deb10u3
bitnamilegacy/kafka:2.8.1-debian-11-r7b6e381ffd6ae
nghttp2@1.43.0-1
1.43.0-1+deb11u2
bitnamilegacy/kafka-exporter-archived:1.3.2e527fbf75dce
nghttp2@1.36.0-2+deb10u1
1.36.0-2+deb10u3
bitnamilegacy/mysqld-exporter:0.13.0a7e14cc919cb
nghttp2@1.36.0-2+deb10u1
1.36.0-2+deb10u3
bitnamilegacy/zookeeper:3.7.2-debian-11-r5cbf54314c401
nghttp2@1.43.0-1+deb11u1
1.43.0-1+deb11u2

Open the chart page →

16,299
reporting-nifi-processor-svcmojaloop0.0.21 of 3See more

reporting-nifi-processor-svc mojaloop 0.0.2

1 of the 3 container images this version deploys carry CVE-2024-28182.

Container imageDigestPackageFixed in
library/mongo:6.0.271a63fc2438e
nghttp2@1.40.0-1build1
1.40.0-1ubuntu0.3

Open the chart page →

6,224
nginxmombe0903.0.11 of 1See more

nginx mombe090 3.0.1

1 of the 1 container images this version deploys carry CVE-2024-28182.

Container imageDigestPackageFixed in
library/nginx:1.22.0f0d28f204785
nghttp2@1.43.0-1
1.43.0-1+deb11u2

Open the chart page →

967
sample-appmongodb-helm-charts0.1.01 of 2See more

sample-app mongodb-helm-charts 0.1.0

1 of the 2 container images this version deploys carry CVE-2024-28182.

Container imageDigestPackageFixed in
quay.io/mongodb/farm-intro-frontend:0.199ccdfd543e1
nghttp2@1.36.0-2+deb10u1
1.36.0-2+deb10u3

Open the chart page →

6,438
api-proxymoreillonVerified publisher0.1.41 of 1See more

api-proxy moreillon 0.1.4

1 of the 1 container images this version deploys carry CVE-2024-28182.

Container imageDigestPackageFixed in
moreillon/api-proxy:2373c1953739ef6956b5
nghttp2@1.36.0-2+deb10u1
1.36.0-2+deb10u3

Open the chart page →

1,711
camera-viewermoreillonVerified publisher0.2.12 of 4See more

camera-viewer moreillon 0.2.1

2 of the 4 container images this version deploys carry CVE-2024-28182.

Container imageDigestPackageFixed in
bitnamilegacy/mongodb:6.0.4-debian-11-r10016dce036593
nghttp2@1.43.0-1
1.43.0-1+deb11u2
moreillon/camera-proxy:latestce60056b50c2
nghttp2@1.36.0-2+deb10u1
1.36.0-2+deb10u3

Open the chart page →

11,708
face-recognitionmoreillonVerified publisher0.2.42 of 3See more

face-recognition moreillon 0.2.4

2 of the 3 container images this version deploys carry CVE-2024-28182.

Container imageDigestPackageFixed in
bitnamilegacy/mongodb:6.0.4-debian-11-r10016dce036593
nghttp2@1.43.0-1
1.43.0-1+deb11u2
moreillon/face-recognition-fastapi:x86bacb2ddd8394
nghttp2@1.43.0-1
1.43.0-1+deb11u2

Open the chart page →

8,556
group-managermoreillonVerified publisher0.4.42 of 3See more

group-manager moreillon 0.4.4

2 of the 3 container images this version deploys carry CVE-2024-28182.

Container imageDigestPackageFixed in
moreillon/group-manager:v4.9.0d5a0ec8394c0
nghttp2@1.36.0-2+deb10u1
1.36.0-2+deb10u3
moreillon/group-manager-front:v3.3.1c9f85db3baa5
nghttp2@1.52.0-1+deb12u1
1.52.0-1+deb12u2

Open the chart page →

9,900
mqtt-loggermoreillonVerified publisher0.3.14 of 5See more

mqtt-logger moreillon 0.3.1

4 of the 5 container images this version deploys carry CVE-2024-28182.

Container imageDigestPackageFixed in
bitnamilegacy/influxdb:2.6.1-debian-11-r18d17df1f9d745
nghttp2@1.43.0-1
1.43.0-1+deb11u2
bitnamilegacy/mongodb:6.0.4-debian-11-r10016dce036593
nghttp2@1.43.0-1
1.43.0-1+deb11u2
moreillon/mqtt-logger:9ffbf7180a8a7daf56f6
nghttp2@1.36.0-2+deb10u1
1.36.0-2+deb10u3
moreillon/mqtt-logger-front:50030b8bfc4d12db1d3e
nghttp2@1.43.0-1
1.43.0-1+deb11u2

Open the chart page →

11,008
user-manager-mongodbmoreillonVerified publisher0.6.23 of 4See more

user-manager-mongodb moreillon 0.6.2

3 of the 4 container images this version deploys carry CVE-2024-28182.

Container imageDigestPackageFixed in
bitnamilegacy/mongodb:6.0.10-debian-11-r842319decb591
nghttp2@1.43.0-1
1.43.0-1+deb11u2
moreillon/user-manager-front:v5.0.3b067dbbbb6af
nghttp2@1.52.0-1
1.52.0-1+deb12u2
moreillon/user-manager-mongoose:v5.0.1d2ee0423b797
nghttp2@1.52.0-1
1.52.0-1+deb12u2

Open the chart page →

25,844
user-manager-neo4jmoreillonVerified publisher0.9.74 of 6See more

user-manager-neo4j moreillon 0.9.7

4 of the 6 container images this version deploys carry CVE-2024-28182.

Container imageDigestPackageFixed in
moreillon/group-manager:v4.9.0d5a0ec8394c0
nghttp2@1.36.0-2+deb10u1
1.36.0-2+deb10u3
moreillon/group-manager-front:v3.3.1c9f85db3baa5
nghttp2@1.52.0-1+deb12u1
1.52.0-1+deb12u2
moreillon/user-manager:v5.0.2e1c9bfab5c16
nghttp2@1.52.0-1
1.52.0-1+deb12u2
moreillon/user-manager-front:v5.1.06597e6b98d21
nghttp2@1.52.0-1+deb12u1
1.52.0-1+deb12u2

Open the chart page →

30,524
genericmorremeyer8.0.01 of 1See more

generic morremeyer 8.0.0

1 of the 1 container images this version deploys carry CVE-2024-28182.

Container imageDigestPackageFixed in
library/nginx:1.25.167f9a4f10d14
nghttp2@1.52.0-1
1.52.0-1+deb12u2

Open the chart page →

6,877
chirpstackmosquitto-helm-chart0.5.01 of 8See more

chirpstack mosquitto-helm-chart 0.5.0

1 of the 8 container images this version deploys carry CVE-2024-28182.

Container imageDigestPackageFixed in
apachepulsar/pulsar:2.9.0d056c89b7131
nghttp2@1.40.0-1build1
1.40.0-1ubuntu0.3

Open the chart page →

26,022
pulsarmosquitto-helm-chart0.2.01 of 1See more

pulsar mosquitto-helm-chart 0.2.0

1 of the 1 container images this version deploys carry CVE-2024-28182.

Container imageDigestPackageFixed in
apachepulsar/pulsar:2.10.03b262ab7a7d9
nghttp2@1.40.0-1build1
1.40.0-1ubuntu0.3

Open the chart page →

15,727
mozalert-controllermozilla0.4.01 of 1See more

mozalert-controller mozilla 0.4.0

1 of the 1 container images this version deploys carry CVE-2024-28182.

Container imageDigestPackageFixed in
afrank/mozalert-controller:latestd463c37b08d7
nghttp2@1.36.0-2+deb10u1
1.36.0-2+deb10u3

Open the chart page →

2,969
sentence-collectormozilla0.1.21 of 2See more

sentence-collector mozilla 0.1.2

1 of the 2 container images this version deploys carry CVE-2024-28182.

Container imageDigestPackageFixed in
mozilla/sentencecollector:2.0.91da6ff5c4895
nghttp2@1.36.0-2+deb10u1
1.36.0-2+deb10u3

Open the chart page →

6,684
mum-discord-botmum-discord-botVerified publisher0.3.71 of 1See more

mum-discord-bot mum-discord-bot 0.3.7

1 of the 1 container images this version deploys carry CVE-2024-28182.

Container imageDigestPackageFixed in
ghcr.io/drewburr-labs/mum-discord-bot:3.1.26e82914e1051
nghttp2@1.52.0-1+deb12u1
1.52.0-1+deb12u2

Open the chart page →

13,759
hello-wordmuraig-hello-word0.2.21 of 1See more

hello-word muraig-hello-word 0.2.2

1 of the 1 container images this version deploys carry CVE-2024-28182.

Container imageDigestPackageFixed in
library/nginx:1.24.0f6daac2445b0
nghttp2@1.43.0-1+deb11u1
1.43.0-1+deb11u2

Open the chart page →

532
pagesmuthu-pages1.0.02 of 3See more

pages muthu-pages 1.0.0

2 of the 3 container images this version deploys carry CVE-2024-28182.

Container imageDigestPackageFixed in
dellcloud/pages:monitor6ba7b22caacd
nghttp2@1.40.0-1build1
1.40.0-1ubuntu0.3
flyway/flyway:6.4.422d97ceb0c47
nghttp2@1.30.0-1ubuntu1
1.30.0-1ubuntu1+esm2

Open the chart page →

20,242
cloudcmdmy0nVerified publisher0.0.31 of 1See more

cloudcmd my0n 0.0.3

1 of the 1 container images this version deploys carry CVE-2024-28182.

Container imageDigestPackageFixed in
coderaiser/cloudcmd:16.6.1b34a9775c7ce
nghttp2@1.36.0-2+deb10u1
1.36.0-2+deb10u3

Open the chart page →

3,128
danboorumy0nVerified publisher0.0.21 of 1See more

danbooru my0n 0.0.2

1 of the 1 container images this version deploys carry CVE-2024-28182.

Container imageDigestPackageFixed in
ghcr.io/danbooru/danbooru:9cab67c0ac72a8c52289302c519715ceec2372d95f545698e907
nghttp2@1.43.0-1build3
1.43.0-1ubuntu0.2

Open the chart page →

12,851
danbooru-stackmy0nVerified publisher0.0.31 of 4See more

danbooru-stack my0n 0.0.3

1 of the 4 container images this version deploys carry CVE-2024-28182.

Container imageDigestPackageFixed in
ghcr.io/danbooru/danbooru:9cab67c0ac72a8c52289302c519715ceec2372d95f545698e907
nghttp2@1.43.0-1build3
1.43.0-1ubuntu0.2

Open the chart page →

12,851
my-app-namemy-app-name0.0.21 of 1See more

my-app-name my-app-name 0.0.2

1 of the 1 container images this version deploys carry CVE-2024-28182.

Container imageDigestPackageFixed in
viniciusfcf/gitops-quarkus-app-jvm:latestbba8ee1b5cd5
nghttp2@1.33.0-3.el8_2.1
0:1.33.0-6.el8_10.1

Open the chart page →

9,418
elasticsearch-chartmy-elasticsearch0.1.01 of 2See more

elasticsearch-chart my-elasticsearch 0.1.0

1 of the 2 container images this version deploys carry CVE-2024-28182.

Container imageDigestPackageFixed in
library/elasticsearch:7.17.35e6ac15bf6a5
nghttp2@1.40.0-1build1
1.40.0-1ubuntu0.3

Open the chart page →

9,345
myhelmappmyhelm-app1.1.01 of 1See more

myhelmapp myhelm-app 1.1.0

1 of the 1 container images this version deploys carry CVE-2024-28182.

Container imageDigestPackageFixed in
patdada/bella-docker:v1.0.075127147a624
nghttp2@1.36.0-2+deb10u1
1.36.0-2+deb10u3

Open the chart page →

1,625
my-helm-chartmy-helm-charts-2024Verified publisher0.1.01 of 1See more

my-helm-chart my-helm-charts-2024 0.1.0

1 of the 1 container images this version deploys carry CVE-2024-28182.

Container imageDigestPackageFixed in
shamimkuet/nginx:1.0.2b82902a76a04
nghttp2@1.52.0-1+deb12u1
1.52.0-1+deb12u2

Open the chart page →

5,394
Practica_4_helmmy-heml-appVerified publisher0.1.03 of 7See more

Practica_4_helm my-heml-app 0.1.0

3 of the 7 container images this version deploys carry CVE-2024-28182.

Container imageDigestPackageFixed in
codeurjc/server:v1.0310bea5b1ee7
nghttp2@1.33.0-3.el8_2.1
0:1.33.0-6.el8_10.1
codeurjc/weatherservice:v1.0b9e2f7234349
nghttp2@1.33.0-3.el8_2.1
0:1.33.0-4.el8_6.2
library/mongo:5.0.6-focal8e70544b6c76
nghttp2@1.40.0-1build1
1.40.0-1ubuntu0.3

Open the chart page →

27,822
myfirstdockerkubermyrepo0.1.01 of 1See more

myfirstdockerkuber myrepo 0.1.0

1 of the 1 container images this version deploys carry CVE-2024-28182.

Container imageDigestPackageFixed in
kodalisri/cherrys:testapp202268d66e1a
nghttp2@1.36.0-2+deb10u1
1.36.0-2+deb10u3

Open the chart page →

1,455
myweatherhelmmyweather1.3.111 of 7See more

myweatherhelm myweather 1.3.11

1 of the 7 container images this version deploys carry CVE-2024-28182.

Container imageDigestPackageFixed in
hecrom/myweatherangularclient:1.3.11bb0372939c19
nghttp2@1.52.0-1+deb12u1
1.52.0-1+deb12u2

Open the chart page →

18,042
pagesnarain1.0.02 of 3See more

pages narain 1.0.0

2 of the 3 container images this version deploys carry CVE-2024-28182.

Container imageDigestPackageFixed in
dellcloud/pages:monitor6ba7b22caacd
nghttp2@1.40.0-1build1
1.40.0-1ubuntu0.3
flyway/flyway:6.4.422d97ceb0c47
nghttp2@1.30.0-1ubuntu1
1.30.0-1ubuntu1+esm2

Open the chart page →

20,242
pagesnarasimha-pages1.0.02 of 3See more

pages narasimha-pages 1.0.0

2 of the 3 container images this version deploys carry CVE-2024-28182.

Container imageDigestPackageFixed in
dellcloud/pages:monitor6ba7b22caacd
nghttp2@1.40.0-1build1
1.40.0-1ubuntu0.3
flyway/flyway:6.4.422d97ceb0c47
nghttp2@1.30.0-1ubuntu1
1.30.0-1ubuntu1+esm2

Open the chart page →

20,242
akauntingnas-helm-chartsVerified publisher1.0.31 of 2See more

akaunting nas-helm-charts 1.0.3

1 of the 2 container images this version deploys carry CVE-2024-28182.

Container imageDigestPackageFixed in
akaunting/akaunting:3.0.1552811b36ec3a
nghttp2@1.52.0-1
1.52.0-1+deb12u2

Open the chart page →

12,876
pagesnavin-brixton1.0.02 of 3See more

pages navin-brixton 1.0.0

2 of the 3 container images this version deploys carry CVE-2024-28182.

Container imageDigestPackageFixed in
dellcloud/pages:monitor6ba7b22caacd
nghttp2@1.40.0-1build1
1.40.0-1ubuntu0.3
flyway/flyway:6.4.422d97ceb0c47
nghttp2@1.30.0-1ubuntu1
1.30.0-1ubuntu1+esm2

Open the chart page →

20,242
betydbncsaVerified publisher0.6.12 of 4See more

betydb ncsa 0.6.1

2 of the 4 container images this version deploys carry CVE-2024-28182.

Container imageDigestPackageFixed in
bitnamilegacy/postgresql:11.8.0c3f10b41989f
nghttp2@1.36.0-2+deb10u1
1.36.0-2+deb10u3
pecan/bety:5.4.1f825d480cd62
nghttp2@1.43.0-1
1.43.0-1+deb11u2

Open the chart page →

9,544
incorencsaVerified publisher1.38.02 of 29See more

incore ncsa 1.38.0

2 of the 29 container images this version deploys carry CVE-2024-28182.

Container imageDigestPackageFixed in
bitnamilegacy/keycloak:24.0.4cc599cbd15ff
nghttp2@1.52.0-1+deb12u1
1.52.0-1+deb12u2
bitnamilegacy/mongodb:4.4.5e3c9d6b4bc92
nghttp2@1.36.0-2+deb10u1
1.36.0-2+deb10u3

Open the chart page →

15,429
pecanncsaVerified publisher0.6.24 of 15See more

pecan ncsa 0.6.2

4 of the 15 container images this version deploys carry CVE-2024-28182.

Container imageDigestPackageFixed in
pecan/bety:5.4.1f825d480cd62
nghttp2@1.43.0-1
1.43.0-1+deb11u2
pecan/docs:1.7.2eaa878d57ef2
nghttp2@1.36.0-2+deb10u1
1.36.0-2+deb10u3
pecan/monitor:1.7.273b2074f3fec
nghttp2@1.36.0-2+deb10u1
1.36.0-2+deb10u3
pecan/web:1.7.2814d678c5550
nghttp2@1.43.0-1
1.43.0-1+deb11u2

Open the chart page →

14,156
smilencsaVerified publisher1.1.014 of 23See more

smile ncsa 1.1.0

14 of the 23 container images this version deploys carry CVE-2024-28182.

Container imageDigestPackageFixed in
socialmediamacroscope/autophrase:0.1.570fb11d4f531
nghttp2@1.40.0-1ubuntu0.1
1.40.0-1ubuntu0.3
socialmediamacroscope/classification_predict:0.1.24fb86885d64d
nghttp2@1.43.0-1
1.43.0-1+deb11u2
socialmediamacroscope/classification_split:0.1.24bfda60829fe
nghttp2@1.43.0-1
1.43.0-1+deb11u2
socialmediamacroscope/classification_train:0.1.207477060bba8
nghttp2@1.43.0-1
1.43.0-1+deb11u2
socialmediamacroscope/clowder_create_collection:0.1.0c969f7677983
nghttp2@1.43.0-1
1.43.0-1+deb11u2
socialmediamacroscope/clowder_create_dataset:0.1.09b4211832429
nghttp2@1.43.0-1
1.43.0-1+deb11u2
socialmediamacroscope/clowder_create_space:0.1.0999f2ff2c128
nghttp2@1.43.0-1
1.43.0-1+deb11u2
socialmediamacroscope/clowder_list:0.1.051cb17626519
nghttp2@1.43.0-1
1.43.0-1+deb11u2
socialmediamacroscope/clowder_upload_file:0.1.274e35f64db68
nghttp2@1.43.0-1
1.43.0-1+deb11u2
socialmediamacroscope/histogram:0.1.26418f9bdb4d2
nghttp2@1.52.0-1
1.52.0-1+deb12u2
socialmediamacroscope/network_analysis:0.1.3b351c21422e6
nghttp2@1.52.0-1
1.52.0-1+deb12u2
socialmediamacroscope/preprocessing:0.1.3ca863306314b
nghttp2@1.52.0-1
1.52.0-1+deb12u2
socialmediamacroscope/screen_name_prompt:0.1.2724f3f5702e0
nghttp2@1.43.0-1
1.43.0-1+deb11u2
socialmediamacroscope/topic_modeling:0.1.3fa490acac2f8
nghttp2@1.52.0-1
1.52.0-1+deb12u2

Open the chart page →

109,730
papergirlneoskop3.2.61 of 5See more

papergirl neoskop 3.2.6

1 of the 5 container images this version deploys carry CVE-2024-28182.

Container imageDigestPackageFixed in
minio/mc:RELEASE.2022-05-09T04-08-26Z4b415310d8d0
nghttp2@1.33.0-3.el8_2.1
0:1.33.0-6.el8_10.1

Open the chart page →

6,989
nginx-samplenginx-sample0.5.01 of 1See more

nginx-sample nginx-sample 0.5.0

1 of the 1 container images this version deploys carry CVE-2024-28182.

Container imageDigestPackageFixed in
library/nginx:1.27.098f8ec75657d
nghttp2@1.52.0-1+deb12u1
1.52.0-1+deb12u2

Open the chart page →

5,344
nginx-sample-dependentnginx-sample-dependent0.2.01 of 1See more

nginx-sample-dependent nginx-sample-dependent 0.2.0

1 of the 1 container images this version deploys carry CVE-2024-28182.

Container imageDigestPackageFixed in
library/nginx:1.27.098f8ec75657d
nghttp2@1.52.0-1+deb12u1
1.52.0-1+deb12u2

Open the chart page →

5,344
minio-directpvnineinfra-charts4.0.81 of 5See more

minio-directpv nineinfra-charts 4.0.8

1 of the 5 container images this version deploys carry CVE-2024-28182.

Container imageDigestPackageFixed in
quay.io/minio/directpv:v4.0.84560083eb77d
nghttp2@1.33.0-3.el8_2.1
0:1.33.0-5.el8_8.1

Open the chart page →

7,067
minio-operatornineinfra-charts5.0.91 of 1See more

minio-operator nineinfra-charts 5.0.9

1 of the 1 container images this version deploys carry CVE-2024-28182.

Container imageDigestPackageFixed in
minio/operator:v5.0.9170b154d2c61
nghttp2@1.33.0-3.el8_2.1
0:1.33.0-5.el8_8.1

Open the chart page →

3,425

Container images carrying it

1,142 by charts deploying them

A fixed version is listed for 2 of the 2 affected packages.

Container imageDigestPackageFixed inUsed by
wazuh/wazuh-manager:4.4.121994f40e0da
nghttp2@1.40.0-1build1
1.40.0-1ubuntu0.3
1
weblate/weblate:3.11.3-182848df56ecd
nghttp2@1.36.0-2+deb10u1
1.36.0-2+deb10u3
1
wiremind/pghoard:12-2019-11-264dea42c8166c
nghttp2@1.36.0-2+deb10u1
1.36.0-2+deb10u3
1
wistefan/mvf:lateste0887302b2d8
nghttp2@1.43.0-1build3
1.43.0-1ubuntu0.2
1
wolveix/satisfactory-server:v1.2.4db00d63f4791
nghttp2@1.36.0-2+deb10u1
1.36.0-2+deb10u3
1
xeotek/kadeck:4.2.94c6b04d9ce55
nghttp2@1.40.0-1build1
1.40.0-1ubuntu0.3
1
xom4ekp2p/infini-route-attestators-public-mainnet-attester:latestd0e0aa238b02
nghttp2@1.52.0-1+deb12u1
1.52.0-1+deb12u2
1
xom4ekp2p/infini-route-attestators-public-mainnet-avs-webapi:latest2745b5fd8785
nghttp2@1.52.0-1+deb12u1
1.52.0-1+deb12u2
1
xtrendence/cryptofolio:V.2.2.0e6e6612bb94c
nghttp2@1.43.0-1
1.43.0-1+deb11u2
1
youssef11gaber10/deployment-ui-react:latestba6853e35c60
nghttp2@1.43.0-1
1.43.0-1+deb11u2
1
zabbix/zabbix-agent:ubuntu-5.4.62127168cab03
nghttp2@1.40.0-1build1
1.40.0-1ubuntu0.3
1
zabbix/zabbix-agent2:ubuntu-6.0.8e5b594057c9c
nghttp2@1.43.0-1build3
1.43.0-1ubuntu0.2
1
zabbix/zabbix-server-pgsql:ubuntu-5.4.66c946b1f45cd
nghttp2@1.40.0-1build1
1.40.0-1ubuntu0.3
1
zabbix/zabbix-server-pgsql:ubuntu-6.0.8d59ffa07f615
nghttp2@1.43.0-1build3
1.43.0-1ubuntu0.2
1
zabbix/zabbix-web-nginx-pgsql:ubuntu-5.4.601de79c31391
nghttp2@1.40.0-1build1
1.40.0-1ubuntu0.3
1
zabbix/zabbix-web-nginx-pgsql:ubuntu-6.0.899e9a090b516
nghttp2@1.43.0-1build3
1.43.0-1ubuntu0.2
1
zammad/zammad-docker-compose:zammad-4.1.0-312808e2dfa810
nghttp2@1.36.0-2+deb10u1
1.36.0-2+deb10u3
1
zbalogh/reservation-api-server:1.0.97c247e399a1f
nghttp2@1.43.0-1
1.43.0-1+deb11u2
1
zohardocker12/weather_app_flask:latestb86d60dbb68d
nghttp2@1.36.0-2+deb10u1
1.36.0-2+deb10u3
1
zzorica/k8s-mgmt-pod:0.5.2640ca4de2922
nghttp2@1.43.0-1
1.43.0-1+deb11u2
1
gcr.io/flink-operator/deployer:webhook-cert809338a69bd5
nghttp2@1.30.0-1ubuntu1
1.30.0-1ubuntu1+esm2
1
gcr.io/google-samples/microservices-demo/loadgenerator:v0.2.3360130ab5850
nghttp2@1.36.0-2+deb10u1
1.36.0-2+deb10u3
1
gcr.io/istio-release/pilot:1.11.1c552478f8f11
nghttp2@1.40.0-1build1
1.40.0-1ubuntu0.3
1
gcr.io/istio-release/proxyv2:1.11.19538fabe49fd
nghttp2@1.40.0-1build1
1.40.0-1ubuntu0.3
1
gcr.io/ml-pipeline/metadata-writer:2.3.09bcfd2abc361
nghttp2@1.52.0-1+deb12u1
1.52.0-1+deb12u2
1
gcr.io/ml-pipeline/metadata-writer:2.0.0-alpha.5ec3ae9f6df47
nghttp2@1.43.0-1
1.43.0-1+deb11u2
1
ghcr.io/0xemma/reddark:main2a115e991894
nghttp2@1.43.0-1
1.43.0-1+deb11u2
1
ghcr.io/appscode/inbox-server:MailetGroup4a2824296412
nghttp2@1.43.0-1ubuntu0.1
1.43.0-1ubuntu0.2
1
ghcr.io/appuio/cloud-portal:v0.2.18c7e08d32d70
nghttp2@1.43.0-1
1.43.0-1+deb11u2
1
ghcr.io/appuio/maxscale-docker:6.4.613a01be102b0
nghttp2@1.33.0-3.el8_3.1
0:1.33.0-6.el8_10.1
1
ghcr.io/astriaorg/astrotrek:0.1.05889bea38e56
nghttp2@1.52.0-1+deb12u1
1.52.0-1+deb12u2
1
ghcr.io/blakeblackshear/frigate:0.14.122e3d0b486df
nghttp2@1.43.0-1+deb11u1
1.43.0-1+deb11u2
1
ghcr.io/blakeblackshear/frigate:0.13.07a5244e4c8dc
nghttp2@1.43.0-1+deb11u1
1.43.0-1+deb11u2
1
ghcr.io/blakeblackshear/frigate:0.12.0c862771e38e8
nghttp2@1.43.0-1
1.43.0-1+deb11u2
1
ghcr.io/brittonhayes/arma-reforger:latest6fde1edc0983
nghttp2@1.40.0-1build1
1.40.0-1ubuntu0.3
1
ghcr.io/buanet/iobroker:v9.1.2ca7dc7362968
nghttp2@1.52.0-1+deb12u1
1.52.0-1+deb12u2
1
ghcr.io/camunda-community-hub/zeebe-simple-monitor:2.6.2d9d796a1b846
nghttp2@1.43.0-1ubuntu0.1
1.43.0-1ubuntu0.2
1
ghcr.io/cfcontainerizationbot/kubecf-kubectl:v1.19.261daa1bba5cb
nghttp2@1.40.0-1.15
1.40.0-150200.17.1
1
ghcr.io/chaos-mesh/chaos-daemon:v2.5.1cf78fdf7403a
nghttp2@1.36.0-2+deb10u1
1.36.0-2+deb10u3
1
ghcr.io/chatwoot/pgvector:14.4.0-debian-11-r0f759f1510d09
nghttp2@1.43.0-1
1.43.0-1+deb11u2
1
ghcr.io/codingducksrl/wordpress:6.0.23113c0960507
nghttp2@1.43.0-1
1.43.0-1+deb11u2
1
ghcr.io/conductionnl/adresservice-nginx:latest849af80ab017
nghttp2@1.36.0-2+deb10u1
1.36.0-2+deb10u3
1
ghcr.io/conductionnl/authorization-component-nginx:latest02d0644aa99b
nghttp2@1.36.0-2+deb10u1
1.36.0-2+deb10u3
1
ghcr.io/conductionnl/berichtservice-nginx:latest833d26df3840
nghttp2@1.43.0-1
1.43.0-1+deb11u2
1
ghcr.io/conductionnl/bisc-frontend:latestd8a0334cddfc
nghttp2@1.36.0-2+deb10u1
1.36.0-2+deb10u3
1
ghcr.io/conductionnl/brpservice-nginx:latest4db9b77c4425
nghttp2@1.36.0-2+deb10u1
1.36.0-2+deb10u3
1
ghcr.io/conductionnl/contactcatalogus-nginx:latest480c84fa9e63
nghttp2@1.43.0-1
1.43.0-1+deb11u2
1
ghcr.io/conductionnl/digispoof-interface-nginx:latest8fa4597217a4
nghttp2@1.43.0-1
1.43.0-1+deb11u2
1
ghcr.io/conductionnl/eav-component-nginx:latestd785c893096c
nghttp2@1.43.0-1
1.43.0-1+deb11u2
1
ghcr.io/conductionnl/education-component-nginx:latest38900bc76ee0
nghttp2@1.43.0-1
1.43.0-1+deb11u2
1

syft 1.42.1 · advisories as of 16 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.