StackRadar

CVE-2024-28182

Medium

Advisory

Published 4 Apr 2024In the index since 5 Sept 2026
Severity
Medium
worst across findings
CVSS
5.3
base score, highest
EPSS
0.850
100th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
1,135
of 17,790 indexed, latest versions
Container images
1,142
deployed by those charts
Fix available
2 of 2
affected packages

Red Hat Security Advisory: nghttp2 security update

Carried by container images the latest versions of 1,135 of 17,790 indexed charts deploy, on 1,142 images.

Affected packageAffected versionsFixed inImages
nghttp2deb1.30.0-1ubuntu1, 1.36.0-2, 1.36.0-2+deb10u1, 1.36.0-2+deb10u2+9 more1.30.0-1ubuntu1+esm2, 1.36.0-2+deb10u3, 1.40.0-1ubuntu0.3, 1.43.0-1+deb11u2+2 more942
nghttp2rpm1.33.0-1.el8, 1.33.0-1.el8_0.1, 1.33.0-3.el8_2.1, 1.33.0-3.el8_2.2+9 more0:1.33.0-4.el8_6.2, 0:1.33.0-5.el8_8.1, 0:1.33.0-6.el8_10.1, 0:1.43.0-5.el9_4.3+2 more200
OSV records
DEBIAN-CVE-2024-28182RHSA-2024:3501RHSA-2024:3701RHSA-2024:3763RHSA-2024:4252RLSA-2024:4252UBUNTU-CVE-2024-28182DLA-3804-1DLA-3898-1openSUSE-SU-2024:13825-1RLSA-2024:3501SUSE-SU-2024:1167-1
Also known as
RHSA-2024:3665, RHSA-2024:4576, RHSA-2024:4732, USN-6754-1

Charts affected

1,135 by stars
ChartLatestAffected imagesRadar Score
istio-operatormetakube1.12.01 of 1See more

istio-operator metakube 1.12.0

1 of the 1 container images this version deploys carry CVE-2024-28182.

Container imageDigestPackageFixed in
istio/operator:1.12.06cfce8a071b9
nghttp2@1.40.0-1build1
1.40.0-1ubuntu0.3

Open the chart page →

8,950
alluremidokura-communityVerified publisher0.1.32 of 2See more

allure midokura-community 0.1.3

2 of the 2 container images this version deploys carry CVE-2024-28182.

Container imageDigestPackageFixed in
frankescobar/allure-docker-service:2.19.0cafa03b94dac
nghttp2@1.30.0-1ubuntu1
1.30.0-1ubuntu1+esm2
frankescobar/allure-docker-service-ui:7.0.34ebd8b4ef340
nghttp2@1.36.0-2+deb10u1
1.36.0-2+deb10u3

Open the chart page →

12,858
errbotmidokura-communityVerified publisher0.0.51 of 1See more

errbot midokura-community 0.0.5

1 of the 1 container images this version deploys carry CVE-2024-28182.

Container imageDigestPackageFixed in
errbotio/errbot:6.1.900ee4e0953ab
nghttp2@1.43.0-1
1.43.0-1+deb11u2

Open the chart page →

2,234
fossologymidokura-communityVerified publisher0.2.21 of 2See more

fossology midokura-community 0.2.2

1 of the 2 container images this version deploys carry CVE-2024-28182.

Container imageDigestPackageFixed in
fossology/fossology:4.2.18bd1f22ba7bb
nghttp2@1.36.0-2+deb10u1
1.36.0-2+deb10u3

Open the chart page →

3,295
unifimidokura-communityVerified publisher0.0.61 of 1See more

unifi midokura-community 0.0.6

1 of the 1 container images this version deploys carry CVE-2024-28182.

Container imageDigestPackageFixed in
linuxserver/unifi-controller:7.3.83ab105cc50322
nghttp2@1.40.0-1build1
1.40.0-1ubuntu0.3

Open the chart page →

11,281
minio-operatorminio-operator4.3.71 of 2See more

minio-operator minio-operator 4.3.7

1 of the 2 container images this version deploys carry CVE-2024-28182.

Container imageDigestPackageFixed in
minio/operator:v4.3.754393e03f3b2
nghttp2@1.33.0-3.el8_2.1
0:1.33.0-6.el8_10.1

Open the chart page →

6,085
cockroachdb-operatormmontesVerified publisher0.1.01 of 1See more

cockroachdb-operator mmontes 0.1.0

1 of the 1 container images this version deploys carry CVE-2024-28182.

Container imageDigestPackageFixed in
cockroachdb/cockroach-operator:v2.1.0983312754620
nghttp2@1.33.0-3.el8_2.1
0:1.33.0-6.el8_10.1

Open the chart page →

7,782
mongodbmmontesVerified publisher0.5.01 of 1See more

mongodb mmontes 0.5.0

1 of the 1 container images this version deploys carry CVE-2024-28182.

Container imageDigestPackageFixed in
library/mongo:4.4.1305678ae4e5e1
nghttp2@1.40.0-1build1
1.40.0-1ubuntu0.3

Open the chart page →

7,151
backendmojaloop0.1.05 of 6See more

backend mojaloop 0.1.0

5 of the 6 container images this version deploys carry CVE-2024-28182.

Container imageDigestPackageFixed in
bitnamilegacy/jmx-exporter:0.16.1d81bfc40888f
nghttp2@1.36.0-2+deb10u1
1.36.0-2+deb10u3
bitnamilegacy/kafka:2.8.1-debian-11-r7b6e381ffd6ae
nghttp2@1.43.0-1
1.43.0-1+deb11u2
bitnamilegacy/kafka-exporter-archived:1.3.2e527fbf75dce
nghttp2@1.36.0-2+deb10u1
1.36.0-2+deb10u3
bitnamilegacy/mysqld-exporter:0.13.0a7e14cc919cb
nghttp2@1.36.0-2+deb10u1
1.36.0-2+deb10u3
bitnamilegacy/zookeeper:3.7.2-debian-11-r5cbf54314c401
nghttp2@1.43.0-1+deb11u1
1.43.0-1+deb11u2

Open the chart page →

16,299
reporting-nifi-processor-svcmojaloop0.0.21 of 3See more

reporting-nifi-processor-svc mojaloop 0.0.2

1 of the 3 container images this version deploys carry CVE-2024-28182.

Container imageDigestPackageFixed in
library/mongo:6.0.271a63fc2438e
nghttp2@1.40.0-1build1
1.40.0-1ubuntu0.3

Open the chart page →

6,224
nginxmombe0903.0.11 of 1See more

nginx mombe090 3.0.1

1 of the 1 container images this version deploys carry CVE-2024-28182.

Container imageDigestPackageFixed in
library/nginx:1.22.0f0d28f204785
nghttp2@1.43.0-1
1.43.0-1+deb11u2

Open the chart page →

967
sample-appmongodb-helm-charts0.1.01 of 2See more

sample-app mongodb-helm-charts 0.1.0

1 of the 2 container images this version deploys carry CVE-2024-28182.

Container imageDigestPackageFixed in
quay.io/mongodb/farm-intro-frontend:0.199ccdfd543e1
nghttp2@1.36.0-2+deb10u1
1.36.0-2+deb10u3

Open the chart page →

6,438
api-proxymoreillonVerified publisher0.1.41 of 1See more

api-proxy moreillon 0.1.4

1 of the 1 container images this version deploys carry CVE-2024-28182.

Container imageDigestPackageFixed in
moreillon/api-proxy:2373c1953739ef6956b5
nghttp2@1.36.0-2+deb10u1
1.36.0-2+deb10u3

Open the chart page →

1,711
camera-viewermoreillonVerified publisher0.2.12 of 4See more

camera-viewer moreillon 0.2.1

2 of the 4 container images this version deploys carry CVE-2024-28182.

Container imageDigestPackageFixed in
bitnamilegacy/mongodb:6.0.4-debian-11-r10016dce036593
nghttp2@1.43.0-1
1.43.0-1+deb11u2
moreillon/camera-proxy:latestce60056b50c2
nghttp2@1.36.0-2+deb10u1
1.36.0-2+deb10u3

Open the chart page →

11,708
face-recognitionmoreillonVerified publisher0.2.42 of 3See more

face-recognition moreillon 0.2.4

2 of the 3 container images this version deploys carry CVE-2024-28182.

Container imageDigestPackageFixed in
bitnamilegacy/mongodb:6.0.4-debian-11-r10016dce036593
nghttp2@1.43.0-1
1.43.0-1+deb11u2
moreillon/face-recognition-fastapi:x86bacb2ddd8394
nghttp2@1.43.0-1
1.43.0-1+deb11u2

Open the chart page →

8,556
group-managermoreillonVerified publisher0.4.42 of 3See more

group-manager moreillon 0.4.4

2 of the 3 container images this version deploys carry CVE-2024-28182.

Container imageDigestPackageFixed in
moreillon/group-manager:v4.9.0d5a0ec8394c0
nghttp2@1.36.0-2+deb10u1
1.36.0-2+deb10u3
moreillon/group-manager-front:v3.3.1c9f85db3baa5
nghttp2@1.52.0-1+deb12u1
1.52.0-1+deb12u2

Open the chart page →

9,900
mqtt-loggermoreillonVerified publisher0.3.14 of 5See more

mqtt-logger moreillon 0.3.1

4 of the 5 container images this version deploys carry CVE-2024-28182.

Container imageDigestPackageFixed in
bitnamilegacy/influxdb:2.6.1-debian-11-r18d17df1f9d745
nghttp2@1.43.0-1
1.43.0-1+deb11u2
bitnamilegacy/mongodb:6.0.4-debian-11-r10016dce036593
nghttp2@1.43.0-1
1.43.0-1+deb11u2
moreillon/mqtt-logger:9ffbf7180a8a7daf56f6
nghttp2@1.36.0-2+deb10u1
1.36.0-2+deb10u3
moreillon/mqtt-logger-front:50030b8bfc4d12db1d3e
nghttp2@1.43.0-1
1.43.0-1+deb11u2

Open the chart page →

11,008
user-manager-mongodbmoreillonVerified publisher0.6.23 of 4See more

user-manager-mongodb moreillon 0.6.2

3 of the 4 container images this version deploys carry CVE-2024-28182.

Container imageDigestPackageFixed in
bitnamilegacy/mongodb:6.0.10-debian-11-r842319decb591
nghttp2@1.43.0-1
1.43.0-1+deb11u2
moreillon/user-manager-front:v5.0.3b067dbbbb6af
nghttp2@1.52.0-1
1.52.0-1+deb12u2
moreillon/user-manager-mongoose:v5.0.1d2ee0423b797
nghttp2@1.52.0-1
1.52.0-1+deb12u2

Open the chart page →

25,844
user-manager-neo4jmoreillonVerified publisher0.9.74 of 6See more

user-manager-neo4j moreillon 0.9.7

4 of the 6 container images this version deploys carry CVE-2024-28182.

Container imageDigestPackageFixed in
moreillon/group-manager:v4.9.0d5a0ec8394c0
nghttp2@1.36.0-2+deb10u1
1.36.0-2+deb10u3
moreillon/group-manager-front:v3.3.1c9f85db3baa5
nghttp2@1.52.0-1+deb12u1
1.52.0-1+deb12u2
moreillon/user-manager:v5.0.2e1c9bfab5c16
nghttp2@1.52.0-1
1.52.0-1+deb12u2
moreillon/user-manager-front:v5.1.06597e6b98d21
nghttp2@1.52.0-1+deb12u1
1.52.0-1+deb12u2

Open the chart page →

30,524
genericmorremeyer8.0.01 of 1See more

generic morremeyer 8.0.0

1 of the 1 container images this version deploys carry CVE-2024-28182.

Container imageDigestPackageFixed in
library/nginx:1.25.167f9a4f10d14
nghttp2@1.52.0-1
1.52.0-1+deb12u2

Open the chart page →

6,877
chirpstackmosquitto-helm-chart0.5.01 of 8See more

chirpstack mosquitto-helm-chart 0.5.0

1 of the 8 container images this version deploys carry CVE-2024-28182.

Container imageDigestPackageFixed in
apachepulsar/pulsar:2.9.0d056c89b7131
nghttp2@1.40.0-1build1
1.40.0-1ubuntu0.3

Open the chart page →

26,022
pulsarmosquitto-helm-chart0.2.01 of 1See more

pulsar mosquitto-helm-chart 0.2.0

1 of the 1 container images this version deploys carry CVE-2024-28182.

Container imageDigestPackageFixed in
apachepulsar/pulsar:2.10.03b262ab7a7d9
nghttp2@1.40.0-1build1
1.40.0-1ubuntu0.3

Open the chart page →

15,727
mozalert-controllermozilla0.4.01 of 1See more

mozalert-controller mozilla 0.4.0

1 of the 1 container images this version deploys carry CVE-2024-28182.

Container imageDigestPackageFixed in
afrank/mozalert-controller:latestd463c37b08d7
nghttp2@1.36.0-2+deb10u1
1.36.0-2+deb10u3

Open the chart page →

2,969
sentence-collectormozilla0.1.21 of 2See more

sentence-collector mozilla 0.1.2

1 of the 2 container images this version deploys carry CVE-2024-28182.

Container imageDigestPackageFixed in
mozilla/sentencecollector:2.0.91da6ff5c4895
nghttp2@1.36.0-2+deb10u1
1.36.0-2+deb10u3

Open the chart page →

6,684
mum-discord-botmum-discord-botVerified publisher0.3.71 of 1See more

mum-discord-bot mum-discord-bot 0.3.7

1 of the 1 container images this version deploys carry CVE-2024-28182.

Container imageDigestPackageFixed in
ghcr.io/drewburr-labs/mum-discord-bot:3.1.26e82914e1051
nghttp2@1.52.0-1+deb12u1
1.52.0-1+deb12u2

Open the chart page →

13,759
hello-wordmuraig-hello-word0.2.21 of 1See more

hello-word muraig-hello-word 0.2.2

1 of the 1 container images this version deploys carry CVE-2024-28182.

Container imageDigestPackageFixed in
library/nginx:1.24.0f6daac2445b0
nghttp2@1.43.0-1+deb11u1
1.43.0-1+deb11u2

Open the chart page →

532
pagesmuthu-pages1.0.02 of 3See more

pages muthu-pages 1.0.0

2 of the 3 container images this version deploys carry CVE-2024-28182.

Container imageDigestPackageFixed in
dellcloud/pages:monitor6ba7b22caacd
nghttp2@1.40.0-1build1
1.40.0-1ubuntu0.3
flyway/flyway:6.4.422d97ceb0c47
nghttp2@1.30.0-1ubuntu1
1.30.0-1ubuntu1+esm2

Open the chart page →

20,242
cloudcmdmy0nVerified publisher0.0.31 of 1See more

cloudcmd my0n 0.0.3

1 of the 1 container images this version deploys carry CVE-2024-28182.

Container imageDigestPackageFixed in
coderaiser/cloudcmd:16.6.1b34a9775c7ce
nghttp2@1.36.0-2+deb10u1
1.36.0-2+deb10u3

Open the chart page →

3,128
danboorumy0nVerified publisher0.0.21 of 1See more

danbooru my0n 0.0.2

1 of the 1 container images this version deploys carry CVE-2024-28182.

Container imageDigestPackageFixed in
ghcr.io/danbooru/danbooru:9cab67c0ac72a8c52289302c519715ceec2372d95f545698e907
nghttp2@1.43.0-1build3
1.43.0-1ubuntu0.2

Open the chart page →

12,851
danbooru-stackmy0nVerified publisher0.0.31 of 4See more

danbooru-stack my0n 0.0.3

1 of the 4 container images this version deploys carry CVE-2024-28182.

Container imageDigestPackageFixed in
ghcr.io/danbooru/danbooru:9cab67c0ac72a8c52289302c519715ceec2372d95f545698e907
nghttp2@1.43.0-1build3
1.43.0-1ubuntu0.2

Open the chart page →

12,851
my-app-namemy-app-name0.0.21 of 1See more

my-app-name my-app-name 0.0.2

1 of the 1 container images this version deploys carry CVE-2024-28182.

Container imageDigestPackageFixed in
viniciusfcf/gitops-quarkus-app-jvm:latestbba8ee1b5cd5
nghttp2@1.33.0-3.el8_2.1
0:1.33.0-6.el8_10.1

Open the chart page →

9,418
elasticsearch-chartmy-elasticsearch0.1.01 of 2See more

elasticsearch-chart my-elasticsearch 0.1.0

1 of the 2 container images this version deploys carry CVE-2024-28182.

Container imageDigestPackageFixed in
library/elasticsearch:7.17.35e6ac15bf6a5
nghttp2@1.40.0-1build1
1.40.0-1ubuntu0.3

Open the chart page →

9,345
myhelmappmyhelm-app1.1.01 of 1See more

myhelmapp myhelm-app 1.1.0

1 of the 1 container images this version deploys carry CVE-2024-28182.

Container imageDigestPackageFixed in
patdada/bella-docker:v1.0.075127147a624
nghttp2@1.36.0-2+deb10u1
1.36.0-2+deb10u3

Open the chart page →

1,625
my-helm-chartmy-helm-charts-2024Verified publisher0.1.01 of 1See more

my-helm-chart my-helm-charts-2024 0.1.0

1 of the 1 container images this version deploys carry CVE-2024-28182.

Container imageDigestPackageFixed in
shamimkuet/nginx:1.0.2b82902a76a04
nghttp2@1.52.0-1+deb12u1
1.52.0-1+deb12u2

Open the chart page →

5,394
Practica_4_helmmy-heml-appVerified publisher0.1.03 of 7See more

Practica_4_helm my-heml-app 0.1.0

3 of the 7 container images this version deploys carry CVE-2024-28182.

Container imageDigestPackageFixed in
codeurjc/server:v1.0310bea5b1ee7
nghttp2@1.33.0-3.el8_2.1
0:1.33.0-6.el8_10.1
codeurjc/weatherservice:v1.0b9e2f7234349
nghttp2@1.33.0-3.el8_2.1
0:1.33.0-4.el8_6.2
library/mongo:5.0.6-focal8e70544b6c76
nghttp2@1.40.0-1build1
1.40.0-1ubuntu0.3

Open the chart page →

27,822
myfirstdockerkubermyrepo0.1.01 of 1See more

myfirstdockerkuber myrepo 0.1.0

1 of the 1 container images this version deploys carry CVE-2024-28182.

Container imageDigestPackageFixed in
kodalisri/cherrys:testapp202268d66e1a
nghttp2@1.36.0-2+deb10u1
1.36.0-2+deb10u3

Open the chart page →

1,455
myweatherhelmmyweather1.3.111 of 7See more

myweatherhelm myweather 1.3.11

1 of the 7 container images this version deploys carry CVE-2024-28182.

Container imageDigestPackageFixed in
hecrom/myweatherangularclient:1.3.11bb0372939c19
nghttp2@1.52.0-1+deb12u1
1.52.0-1+deb12u2

Open the chart page →

18,042
pagesnarain1.0.02 of 3See more

pages narain 1.0.0

2 of the 3 container images this version deploys carry CVE-2024-28182.

Container imageDigestPackageFixed in
dellcloud/pages:monitor6ba7b22caacd
nghttp2@1.40.0-1build1
1.40.0-1ubuntu0.3
flyway/flyway:6.4.422d97ceb0c47
nghttp2@1.30.0-1ubuntu1
1.30.0-1ubuntu1+esm2

Open the chart page →

20,242
pagesnarasimha-pages1.0.02 of 3See more

pages narasimha-pages 1.0.0

2 of the 3 container images this version deploys carry CVE-2024-28182.

Container imageDigestPackageFixed in
dellcloud/pages:monitor6ba7b22caacd
nghttp2@1.40.0-1build1
1.40.0-1ubuntu0.3
flyway/flyway:6.4.422d97ceb0c47
nghttp2@1.30.0-1ubuntu1
1.30.0-1ubuntu1+esm2

Open the chart page →

20,242
akauntingnas-helm-chartsVerified publisher1.0.31 of 2See more

akaunting nas-helm-charts 1.0.3

1 of the 2 container images this version deploys carry CVE-2024-28182.

Container imageDigestPackageFixed in
akaunting/akaunting:3.0.1552811b36ec3a
nghttp2@1.52.0-1
1.52.0-1+deb12u2

Open the chart page →

12,876
pagesnavin-brixton1.0.02 of 3See more

pages navin-brixton 1.0.0

2 of the 3 container images this version deploys carry CVE-2024-28182.

Container imageDigestPackageFixed in
dellcloud/pages:monitor6ba7b22caacd
nghttp2@1.40.0-1build1
1.40.0-1ubuntu0.3
flyway/flyway:6.4.422d97ceb0c47
nghttp2@1.30.0-1ubuntu1
1.30.0-1ubuntu1+esm2

Open the chart page →

20,242
betydbncsaVerified publisher0.6.12 of 4See more

betydb ncsa 0.6.1

2 of the 4 container images this version deploys carry CVE-2024-28182.

Container imageDigestPackageFixed in
bitnamilegacy/postgresql:11.8.0c3f10b41989f
nghttp2@1.36.0-2+deb10u1
1.36.0-2+deb10u3
pecan/bety:5.4.1f825d480cd62
nghttp2@1.43.0-1
1.43.0-1+deb11u2

Open the chart page →

9,544
incorencsaVerified publisher1.38.02 of 29See more

incore ncsa 1.38.0

2 of the 29 container images this version deploys carry CVE-2024-28182.

Container imageDigestPackageFixed in
bitnamilegacy/keycloak:24.0.4cc599cbd15ff
nghttp2@1.52.0-1+deb12u1
1.52.0-1+deb12u2
bitnamilegacy/mongodb:4.4.5e3c9d6b4bc92
nghttp2@1.36.0-2+deb10u1
1.36.0-2+deb10u3

Open the chart page →

15,429
pecanncsaVerified publisher0.6.24 of 15See more

pecan ncsa 0.6.2

4 of the 15 container images this version deploys carry CVE-2024-28182.

Container imageDigestPackageFixed in
pecan/bety:5.4.1f825d480cd62
nghttp2@1.43.0-1
1.43.0-1+deb11u2
pecan/docs:1.7.2eaa878d57ef2
nghttp2@1.36.0-2+deb10u1
1.36.0-2+deb10u3
pecan/monitor:1.7.273b2074f3fec
nghttp2@1.36.0-2+deb10u1
1.36.0-2+deb10u3
pecan/web:1.7.2814d678c5550
nghttp2@1.43.0-1
1.43.0-1+deb11u2

Open the chart page →

14,156
smilencsaVerified publisher1.1.014 of 23See more

smile ncsa 1.1.0

14 of the 23 container images this version deploys carry CVE-2024-28182.

Container imageDigestPackageFixed in
socialmediamacroscope/autophrase:0.1.570fb11d4f531
nghttp2@1.40.0-1ubuntu0.1
1.40.0-1ubuntu0.3
socialmediamacroscope/classification_predict:0.1.24fb86885d64d
nghttp2@1.43.0-1
1.43.0-1+deb11u2
socialmediamacroscope/classification_split:0.1.24bfda60829fe
nghttp2@1.43.0-1
1.43.0-1+deb11u2
socialmediamacroscope/classification_train:0.1.207477060bba8
nghttp2@1.43.0-1
1.43.0-1+deb11u2
socialmediamacroscope/clowder_create_collection:0.1.0c969f7677983
nghttp2@1.43.0-1
1.43.0-1+deb11u2
socialmediamacroscope/clowder_create_dataset:0.1.09b4211832429
nghttp2@1.43.0-1
1.43.0-1+deb11u2
socialmediamacroscope/clowder_create_space:0.1.0999f2ff2c128
nghttp2@1.43.0-1
1.43.0-1+deb11u2
socialmediamacroscope/clowder_list:0.1.051cb17626519
nghttp2@1.43.0-1
1.43.0-1+deb11u2
socialmediamacroscope/clowder_upload_file:0.1.274e35f64db68
nghttp2@1.43.0-1
1.43.0-1+deb11u2
socialmediamacroscope/histogram:0.1.26418f9bdb4d2
nghttp2@1.52.0-1
1.52.0-1+deb12u2
socialmediamacroscope/network_analysis:0.1.3b351c21422e6
nghttp2@1.52.0-1
1.52.0-1+deb12u2
socialmediamacroscope/preprocessing:0.1.3ca863306314b
nghttp2@1.52.0-1
1.52.0-1+deb12u2
socialmediamacroscope/screen_name_prompt:0.1.2724f3f5702e0
nghttp2@1.43.0-1
1.43.0-1+deb11u2
socialmediamacroscope/topic_modeling:0.1.3fa490acac2f8
nghttp2@1.52.0-1
1.52.0-1+deb12u2

Open the chart page →

109,730
papergirlneoskop3.2.61 of 5See more

papergirl neoskop 3.2.6

1 of the 5 container images this version deploys carry CVE-2024-28182.

Container imageDigestPackageFixed in
minio/mc:RELEASE.2022-05-09T04-08-26Z4b415310d8d0
nghttp2@1.33.0-3.el8_2.1
0:1.33.0-6.el8_10.1

Open the chart page →

6,989
nginx-samplenginx-sample0.5.01 of 1See more

nginx-sample nginx-sample 0.5.0

1 of the 1 container images this version deploys carry CVE-2024-28182.

Container imageDigestPackageFixed in
library/nginx:1.27.098f8ec75657d
nghttp2@1.52.0-1+deb12u1
1.52.0-1+deb12u2

Open the chart page →

5,344
nginx-sample-dependentnginx-sample-dependent0.2.01 of 1See more

nginx-sample-dependent nginx-sample-dependent 0.2.0

1 of the 1 container images this version deploys carry CVE-2024-28182.

Container imageDigestPackageFixed in
library/nginx:1.27.098f8ec75657d
nghttp2@1.52.0-1+deb12u1
1.52.0-1+deb12u2

Open the chart page →

5,344
minio-directpvnineinfra-charts4.0.81 of 5See more

minio-directpv nineinfra-charts 4.0.8

1 of the 5 container images this version deploys carry CVE-2024-28182.

Container imageDigestPackageFixed in
quay.io/minio/directpv:v4.0.84560083eb77d
nghttp2@1.33.0-3.el8_2.1
0:1.33.0-5.el8_8.1

Open the chart page →

7,067
minio-operatornineinfra-charts5.0.91 of 1See more

minio-operator nineinfra-charts 5.0.9

1 of the 1 container images this version deploys carry CVE-2024-28182.

Container imageDigestPackageFixed in
minio/operator:v5.0.9170b154d2c61
nghttp2@1.33.0-3.el8_2.1
0:1.33.0-5.el8_8.1

Open the chart page →

3,425

Container images carrying it

1,142 by charts deploying them

A fixed version is listed for 2 of the 2 affected packages.

Container imageDigestPackageFixed inUsed by
ghcr.io/conductionnl/eherkenning-ui-nginx:latestfcd2100d863f
nghttp2@1.36.0-2+deb10u1
1.36.0-2+deb10u3
1
ghcr.io/conductionnl/grafregistratiecomponent-nginx:latestd0daf48dec68
nghttp2@1.36.0-2+deb10u1
1.36.0-2+deb10u3
1
ghcr.io/conductionnl/instemmingservice-nginx:latesteeeb4e9f0485
nghttp2@1.36.0-2+deb10u1
1.36.0-2+deb10u3
1
ghcr.io/conductionnl/landelijketabellencatalogus-nginx:lateste7076242888a
nghttp2@1.36.0-2+deb10u1
1.36.0-2+deb10u3
1
ghcr.io/conductionnl/loggingcomponent-nginx:latestcee37e9cef09
nghttp2@1.36.0-2+deb10u1
1.36.0-2+deb10u3
1
ghcr.io/conductionnl/logicservice-nginx:latest7c8ee08c591c
nghttp2@1.36.0-2+deb10u1
1.36.0-2+deb10u3
1
ghcr.io/conductionnl/medewerkercatalogus-nginx:latest06c3b27462e6
nghttp2@1.43.0-1
1.43.0-1+deb11u2
1
ghcr.io/conductionnl/memo-component-nginx:latestfd28182f7ecf
nghttp2@1.36.0-2+deb10u1
1.36.0-2+deb10u3
1
ghcr.io/conductionnl/notification-component-nginx:latestd53bda41ee3b
nghttp2@1.36.0-2+deb10u1
1.36.0-2+deb10u3
1
ghcr.io/conductionnl/ocatiecatalogus-nginx:latestc46374fc8f32
nghttp2@1.36.0-2+deb10u1
1.36.0-2+deb10u3
1
ghcr.io/conductionnl/orderregistratiecomponent-nginx:latest42acee4ab31c
nghttp2@1.36.0-2+deb10u1
1.36.0-2+deb10u3
1
ghcr.io/conductionnl/procestypecatalogus-nginx:latestca6fc575a3ba
nghttp2@1.36.0-2+deb10u1
1.36.0-2+deb10u3
1
ghcr.io/conductionnl/productenendienstencatalogus-nginx:latest4095e7207822
nghttp2@1.36.0-2+deb10u1
1.36.0-2+deb10u3
1
ghcr.io/conductionnl/proto-component-commonground-nginx:latest5b1384e29b7d
nghttp2@1.36.0-2+deb10u1
1.36.0-2+deb10u3
1
ghcr.io/conductionnl/review-component-nginx:latest5df5f92870a5
nghttp2@1.36.0-2+deb10u1
1.36.0-2+deb10u3
1
ghcr.io/conductionnl/skeleton-pip:devce1ebe9387a2
nghttp2@1.43.0-1
1.43.0-1+deb11u2
1
ghcr.io/conductionnl/taalhuizen-service-nginx:latest0bbaa7487c63
nghttp2@1.36.0-2+deb10u1
1.36.0-2+deb10u3
1
ghcr.io/conductionnl/trouw-service-nginx:latest86fe293b99a2
nghttp2@1.36.0-2+deb10u1
1.36.0-2+deb10u3
1
ghcr.io/conductionnl/user-component-nginx:latestb721579df8c3
nghttp2@1.43.0-1
1.43.0-1+deb11u2
1
ghcr.io/conductionnl/verhuis-service-nginx:latest4473ce50435e
nghttp2@1.36.0-2+deb10u1
1.36.0-2+deb10u3
1
ghcr.io/conductionnl/verzoekconversieservice-nginx:latestf449b82ce9d6
nghttp2@1.36.0-2+deb10u1
1.36.0-2+deb10u3
1
ghcr.io/conductionnl/verzoekregistratiecomponent-nginx:lateste0c5f8a95098
nghttp2@1.36.0-2+deb10u1
1.36.0-2+deb10u3
1
ghcr.io/conductionnl/verzoektypecatalogus-nginx:latest42c75ea8082c
nghttp2@1.36.0-2+deb10u1
1.36.0-2+deb10u3
1
ghcr.io/conductionnl/waardepapieren-balie-nginx:latest2eb073ab8b83
nghttp2@1.36.0-2+deb10u1
1.36.0-2+deb10u3
1
ghcr.io/conductionnl/waardepapieren-nginx:latestaf31cf6cd59f
nghttp2@1.43.0-1
1.43.0-1+deb11u2
1
ghcr.io/conductionnl/waardepapieren-register-nginx:latest3fba727a3cc1
nghttp2@1.36.0-2+deb10u1
1.36.0-2+deb10u3
1
ghcr.io/conductionnl/webresourcecatalogus-nginx:latest6de60c83128d
nghttp2@1.43.0-1
1.43.0-1+deb11u2
1
ghcr.io/ctron/ditto-operator:0.4.061a9bb81b85c
nghttp2@1.33.0-3.el8_2.1
0:1.33.0-6.el8_10.1
1
ghcr.io/ctron/kubectl:1.25e37d61b5277c
nghttp2@1.33.0-5.el8_9
0:1.33.0-6.el8_10.1
1
ghcr.io/ctron/streamsheets-base:2.4.00cf25ed621e2
nghttp2@1.33.0-3.el8_2.1
0:1.33.0-6.el8_10.1
1
ghcr.io/ctron/streamsheets-gateway:2.4.00635f17c9d2c
nghttp2@1.33.0-3.el8_2.1
0:1.33.0-6.el8_10.1
1
ghcr.io/ctron/streamsheets-service-graphs:2.4.0e34964e336c1
nghttp2@1.33.0-3.el8_2.1
0:1.33.0-6.el8_10.1
1
ghcr.io/ctron/streamsheets-service-machines:2.4.00c5a3398d1e4
nghttp2@1.33.0-3.el8_2.1
0:1.33.0-6.el8_10.1
1
ghcr.io/ctron/streamsheets-service-streams:2.4.08ba040e79ca0
nghttp2@1.33.0-3.el8_2.1
0:1.33.0-6.el8_10.1
1
ghcr.io/dask/dask:2024.1.0080150de7d86
nghttp2@1.40.0-1ubuntu0.2
1.40.0-1ubuntu0.3
1
ghcr.io/dask/dask-notebook:2024.1.0f53bde3acd4f
nghttp2@1.43.0-1ubuntu0.1
1.43.0-1ubuntu0.2
1
ghcr.io/data-fair/elasticsearch:7.17.1aa45adaf59a7
nghttp2@1.40.0-1build1
1.40.0-1ubuntu0.3
1
ghcr.io/drewburr-labs/mum-discord-bot:3.1.26e82914e1051
nghttp2@1.52.0-1+deb12u1
1.52.0-1+deb12u2
1
ghcr.io/drogue-iot/authentication-service:0.11.0857b137fc7b3
nghttp2@1.43.0-5.el9
0:1.43.0-5.el9_4.3
1
ghcr.io/drogue-iot/coap-endpoint:0.11.044790b71aa22
nghttp2@1.43.0-5.el9
0:1.43.0-5.el9_4.3
1
ghcr.io/drogue-iot/command-endpoint:0.11.06dce3158b851
nghttp2@1.43.0-5.el9
0:1.43.0-5.el9_4.3
1
ghcr.io/drogue-iot/console-backend:0.11.025d229ae5bde
nghttp2@1.43.0-5.el9
0:1.43.0-5.el9_4.3
1
ghcr.io/drogue-iot/console-frontend:0.11.0558972f9374c
nghttp2@1.43.0-5.el9
0:1.43.0-5.el9_4.3
1
ghcr.io/drogue-iot/database-migration:0.11.057072c72a7cd
nghttp2@1.43.0-5.el9
0:1.43.0-5.el9_4.3
1
ghcr.io/drogue-iot/device-management-controller:0.11.0200aea1a2b42
nghttp2@1.43.0-5.el9
0:1.43.0-5.el9_4.3
1
ghcr.io/drogue-iot/device-management-service:0.11.0f4a5bfc06a74
nghttp2@1.43.0-5.el9
0:1.43.0-5.el9_4.3
1
ghcr.io/drogue-iot/device-state-service:0.11.0fbf0738cfc7e
nghttp2@1.43.0-5.el9
0:1.43.0-5.el9_4.3
1
ghcr.io/drogue-iot/drogue-event-source:0.2.1e2e812a4cf8e
nghttp2@1.33.0-3.el8_2.1
0:1.33.0-6.el8_10.1
1
ghcr.io/drogue-iot/http-endpoint:0.11.0b612c18479e0
nghttp2@1.43.0-5.el9
0:1.43.0-5.el9_4.3
1
ghcr.io/drogue-iot/knative-operator:0.11.0e2d927639f6e
nghttp2@1.43.0-5.el9
0:1.43.0-5.el9_4.3
1

syft 1.42.1 · advisories as of 16 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.