StackRadar

CVE-2024-28182

Medium

Advisory

Published 4 Apr 2024In the index since 5 Sept 2026
Severity
Medium
worst across findings
CVSS
5.3
base score, highest
EPSS
0.850
100th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
1,125
of 17,781 indexed, latest versions
Container images
1,134
deployed by those charts
Fix available
2 of 2
affected packages

Red Hat Security Advisory: nghttp2 security update

Carried by container images the latest versions of 1,125 of 17,781 indexed charts deploy, on 1,134 images.

Affected packageAffected versionsFixed inImages
nghttp2deb1.30.0-1ubuntu1, 1.36.0-2, 1.36.0-2+deb10u1, 1.36.0-2+deb10u2+9 more1.30.0-1ubuntu1+esm2, 1.36.0-2+deb10u3, 1.40.0-1ubuntu0.3, 1.43.0-1+deb11u2+2 more935
nghttp2rpm1.33.0-1.el8, 1.33.0-1.el8_0.1, 1.33.0-3.el8_2.1, 1.33.0-3.el8_2.2+9 more0:1.33.0-4.el8_6.2, 0:1.33.0-5.el8_8.1, 0:1.33.0-6.el8_10.1, 0:1.43.0-5.el9_4.3+2 more199
OSV records
DEBIAN-CVE-2024-28182RHSA-2024:3501RHSA-2024:3701RHSA-2024:3763RHSA-2024:4252RLSA-2024:4252UBUNTU-CVE-2024-28182DLA-3804-1DLA-3898-1openSUSE-SU-2024:13825-1RLSA-2024:3501SUSE-SU-2024:1167-1
Also known as
RHSA-2024:3665, RHSA-2024:4576, RHSA-2024:4732, USN-6754-1

Charts affected

1,125 by stars
ChartLatestAffected imagesRadar Score
app-mobilityappmo0.1.02 of 5See more

app-mobility appmo 0.1.0

2 of the 5 container images this version deploys carry CVE-2024-28182.

Container imageDigestPackageFixed in
dellemc/csm-application-mobility-controller:v0.1.0148ada9060a9
nghttp2@1.33.0-3.el8_2.1
0:1.33.0-4.el8_6.2
dellemc/csm-application-mobility-velero-plugin:v0.1.0660cabd6d929
nghttp2@1.33.0-3.el8_2.1
0:1.33.0-4.el8_6.2

Open the chart page →

12,521
inbox-server-distributedappscodeVerified publisher2025.12.251 of 4See more

inbox-server-distributed appscode 2025.12.25

1 of the 4 container images this version deploys carry CVE-2024-28182.

Container imageDigestPackageFixed in
library/cassandra:4.1.37cbcec0086ac
nghttp2@1.43.0-1ubuntu0.1
1.43.0-1ubuntu0.2

Open the chart page →

15,573
james-komposeappscodeVerified publisher0.1.02 of 4See more

james-kompose appscode 0.1.0

2 of the 4 container images this version deploys carry CVE-2024-28182.

Container imageDigestPackageFixed in
library/cassandra:4.1.37cbcec0086ac
nghttp2@1.43.0-1ubuntu0.1
1.43.0-1ubuntu0.2
ghcr.io/appscode/inbox-server:MailetGroup4a2824296412
nghttp2@1.43.0-1ubuntu0.1
1.43.0-1ubuntu0.2

Open the chart page →

16,975
managed-serviceaccountappscodeVerified publisher2024.2.251 of 1See more

managed-serviceaccount appscode 2024.2.25

1 of the 1 container images this version deploys carry CVE-2024-28182.

Container imageDigestPackageFixed in
ghcr.io/kluster-manager/managed-serviceaccount:latest365183f83ac9
nghttp2@1.33.0-5.el8_9
0:1.33.0-6.el8_10.1

Open the chart page →

2,404
minioappscodeVerified publisher2026.9.111 of 1See more

minio appscode 2026.9.11

1 of the 1 container images this version deploys carry CVE-2024-28182.

Container imageDigestPackageFixed in
minio/minio:RELEASE.2023-01-12T02-06-16Zfc6bedc99355
nghttp2@1.33.0-3.el8_2.1
0:1.33.0-6.el8_10.1

Open the chart page →

4,043
multicluster-controlplaneappscodeVerified publisher2025.4.301 of 1See more

multicluster-controlplane appscode 2025.4.30

1 of the 1 container images this version deploys carry CVE-2024-28182.

Container imageDigestPackageFixed in
ghcr.io/kluster-manager/multicluster-controlplane:latest6de40f528be9
nghttp2@1.33.0-5.el8_9
0:1.33.0-6.el8_10.1

Open the chart page →

2,569
cloud-portalappuio0.4.11 of 1See more

cloud-portal appuio 0.4.1

1 of the 1 container images this version deploys carry CVE-2024-28182.

Container imageDigestPackageFixed in
ghcr.io/appuio/cloud-portal:v0.2.18c7e08d32d70
nghttp2@1.43.0-1
1.43.0-1+deb11u2

Open the chart page →

1,286
haproxyappuio2.7.21 of 1See more

haproxy appuio 2.7.2

1 of the 1 container images this version deploys carry CVE-2024-28182.

Container imageDigestPackageFixed in
ghcr.io/vshn/haproxy-with-mysql:1.0.0a3c27ee3fb2f
nghttp2@1.52.0-1
1.52.0-1+deb12u2

Open the chart page →

5,657
maxscaleappuio2.0.11 of 1See more

maxscale appuio 2.0.1

1 of the 1 container images this version deploys carry CVE-2024-28182.

Container imageDigestPackageFixed in
ghcr.io/appuio/maxscale-docker:6.4.613a01be102b0
nghttp2@1.33.0-3.el8_3.1
0:1.33.0-6.el8_10.1

Open the chart page →

2,903
appwriteappwrite-helmVerified publisher1.3.21 of 8See more

appwrite appwrite-helm 1.3.2

1 of the 8 container images this version deploys carry CVE-2024-28182.

Container imageDigestPackageFixed in
kubegems/bitnami-shell:12-debian-12-r24e42e3aaacdd3
nghttp2@1.43.0-1
1.43.0-1+deb11u2

Open the chart page →

9,847
arma-reforgerarma-reforger0.5.31 of 8See more

arma-reforger arma-reforger 0.5.3

1 of the 8 container images this version deploys carry CVE-2024-28182.

Container imageDigestPackageFixed in
ghcr.io/brittonhayes/arma-reforger:latest6fde1edc0983
nghttp2@1.40.0-1build1
1.40.0-1ubuntu0.3

Open the chart page →

23,353
keystonearzu0.2.292 of 4See more

keystone arzu 0.2.29

2 of the 4 container images this version deploys carry CVE-2024-28182.

Container imageDigestPackageFixed in
openstackhelm/heat:wallaby-ubuntu_focalf728510bab3c
nghttp2@1.40.0-1ubuntu0.1
1.40.0-1ubuntu0.3
openstackhelm/keystone:wallaby-ubuntu_focale07d75953d2e
nghttp2@1.40.0-1ubuntu0.1
1.40.0-1ubuntu0.3

Open the chart page →

22,568
authorizationassist-iot-authorisation0.1.01 of 2See more

authorization assist-iot-authorisation 0.1.0

1 of the 2 container images this version deploys carry CVE-2024-28182.

Container imageDigestPackageFixed in
assistiot/authorization_svr:latestdb9361dad79b
nghttp2@1.36.0-2+deb10u1
1.36.0-2+deb10u3

Open the chart page →

5,537
automatedconfigurationassist-iot-automated-configuration1.0.03 of 5See more

automatedconfiguration assist-iot-automated-configuration 1.0.0

3 of the 5 container images this version deploys carry CVE-2024-28182.

Container imageDigestPackageFixed in
confluentinc/cp-kafka:7.5.1dc9b972db002
nghttp2@1.33.0-3.el8_2.1
0:1.33.0-5.el8_8.1
confluentinc/cp-zookeeper:7.5.10bec03c1f3ce
nghttp2@1.33.0-3.el8_2.1
0:1.33.0-5.el8_8.1
eventstore/eventstore:20.10.2-buster-slimc82d2479f468
nghttp2@1.36.0-2+deb10u1
1.36.0-2+deb10u3

Open the chart page →

14,728
dltkvassist-iot-data-integrity-verification0.2.01 of 9See more

dltkv assist-iot-data-integrity-verification 0.2.0

1 of the 9 container images this version deploys carry CVE-2024-28182.

Container imageDigestPackageFixed in
assistiot/dlt_api:2.0.0e36a8922fa0c
nghttp2@1.36.0-2+deb10u1
1.36.0-2+deb10u3

Open the chart page →

77,706
dltflassist-iot-dlt-based-fl0.2.01 of 9See more

dltfl assist-iot-dlt-based-fl 0.2.0

1 of the 9 container images this version deploys carry CVE-2024-28182.

Container imageDigestPackageFixed in
assistiot/dlt_api:2.1.0c8a170683be7
nghttp2@1.36.0-2+deb10u1
1.36.0-2+deb10u3

Open the chart page →

77,706
fllocaloperationsassist-iot-fl-local-operations1.1.01 of 3See more

fllocaloperations assist-iot-fl-local-operations 1.1.0

1 of the 3 container images this version deploys carry CVE-2024-28182.

Container imageDigestPackageFixed in
assistiot/fl_repository_db:latestad8f72108636
nghttp2@1.43.0-1
1.43.0-1+deb11u2

Open the chart page →

3,786
fl-orchestrator-guiassist-iot-fl-orchestrator0.1.01 of 3See more

fl-orchestrator-gui assist-iot-fl-orchestrator 0.1.0

1 of the 3 container images this version deploys carry CVE-2024-28182.

Container imageDigestPackageFixed in
assistiot/fl_orchestrator:dbmongo4-latestd157fbe150e3
nghttp2@1.40.0-1build1
1.40.0-1ubuntu0.3

Open the chart page →

9,369
flrepositorydbassist-iot-fl-repository1.1.01 of 2See more

flrepositorydb assist-iot-fl-repository 1.1.0

1 of the 2 container images this version deploys carry CVE-2024-28182.

Container imageDigestPackageFixed in
assistiot/fl_repository_db:latestad8f72108636
nghttp2@1.43.0-1
1.43.0-1+deb11u2

Open the chart page →

4,367
idmassist-iot-identity-manager0.1.01 of 2See more

idm assist-iot-identity-manager 0.1.0

1 of the 2 container images this version deploys carry CVE-2024-28182.

Container imageDigestPackageFixed in
assistiot/identity-manager_kc:latest0df4b4fa899a
nghttp2@1.33.0-3.el8_2.1
0:1.33.0-4.el8_6.2

Open the chart page →

13,352
locationprocessingassist-iot-location-processing1.0.02 of 3See more

locationprocessing assist-iot-location-processing 1.0.0

2 of the 3 container images this version deploys carry CVE-2024-28182.

Container imageDigestPackageFixed in
assistiot/location_processing:lateste9bae124095f
nghttp2@1.43.0-1build3
1.43.0-1ubuntu0.2
postgis/postgis:15-3.3a2fc46b52819
nghttp2@1.43.0-1
1.43.0-1+deb11u2

Open the chart page →

10,061
openapiassist-iot-open-api-management0.2.21 of 6See more

openapi assist-iot-open-api-management 0.2.2

1 of the 6 container images this version deploys carry CVE-2024-28182.

Container imageDigestPackageFixed in
assistiot/open_api_backend:1.1.230812ba93555
nghttp2@1.43.0-1ubuntu0.1
1.43.0-1ubuntu0.2

Open the chart page →

18,277
resource-provisioningassist-iot-resource-provisioning1.0.01 of 7See more

resource-provisioning assist-iot-resource-provisioning 1.0.0

1 of the 7 container images this version deploys carry CVE-2024-28182.

Container imageDigestPackageFixed in
assistiot/resource-provisioning_prc:1.0.08b5d118bdf0e
nghttp2@1.43.0-1
1.43.0-1+deb11u2

Open the chart page →

8,032
sdn-controllerassist-iot-sdn-controller2.4.01 of 1See more

sdn-controller assist-iot-sdn-controller 2.4.0

1 of the 1 container images this version deploys carry CVE-2024-28182.

Container imageDigestPackageFixed in
assistiot/sdn_controller:2.4.0ea254b6d8a31
nghttp2@1.40.0-1ubuntu0.1
1.40.0-1ubuntu0.3

Open the chart page →

7,936
sd-wanassist-iot-sd-wan1.0.01 of 2See more

sd-wan assist-iot-sd-wan 1.0.0

1 of the 2 container images this version deploys carry CVE-2024-28182.

Container imageDigestPackageFixed in
library/mongo:4.2.21-bionic9cb28f7291d9
nghttp2@1.30.0-1ubuntu1
1.30.0-1ubuntu1+esm2

Open the chart page →

5,363
smartorchestratorassist-iot-smart-orchestrator4.0.02 of 14See more

smartorchestrator assist-iot-smart-orchestrator 4.0.0

2 of the 14 container images this version deploys carry CVE-2024-28182.

Container imageDigestPackageFixed in
assistiot/smart-orchestrator_scheduler_mc:latestb1dbe4d62a03
nghttp2@1.52.0-1
1.52.0-1+deb12u2
library/mongo:4.4.66efa05203990
nghttp2@1.30.0-1ubuntu1
1.30.0-1ubuntu1+esm2

Open the chart page →

45,363
videoaugmentationassist-iot-video-augmentation0.1.01 of 3See more

videoaugmentation assist-iot-video-augmentation 0.1.0

1 of the 3 container images this version deploys carry CVE-2024-28182.

Container imageDigestPackageFixed in
assistiot/video_augmentation:runner-cpu-lateste5ae539ce2cb
nghttp2@1.40.0-1build1
1.40.0-1ubuntu0.3

Open the chart page →

13,913
astrotrekastria0.0.22 of 4See more

astrotrek astria 0.0.2

2 of the 4 container images this version deploys carry CVE-2024-28182.

Container imageDigestPackageFixed in
timescale/timescaledb-ha:pg15-latesta8e3322e1cf9
nghttp2@1.43.0-1build3
1.43.0-1ubuntu0.2
ghcr.io/astriaorg/astrotrek:0.1.05889bea38e56
nghttp2@1.52.0-1+deb12u1
1.52.0-1+deb12u2

Open the chart page →

32,501
asya-playgroundasya1.1.31 of 1See more

asya-playground asya 1.1.3

1 of the 1 container images this version deploys carry CVE-2024-28182.

Container imageDigestPackageFixed in
localstack/localstack:3.19d278167f2b7
nghttp2@1.52.0-1+deb12u1
1.52.0-1+deb12u2

Open the chart page →

9,412
authorization-componentauthorization-component1.0.01 of 3See more

authorization-component authorization-component 1.0.0

1 of the 3 container images this version deploys carry CVE-2024-28182.

Container imageDigestPackageFixed in
ghcr.io/conductionnl/authorization-component-nginx:latest02d0644aa99b
nghttp2@1.36.0-2+deb10u1
1.36.0-2+deb10u3

Open the chart page →

7,561
istio-discoveryaveshaVerified publisher1.16.01 of 1See more

istio-discovery avesha 1.16.0

1 of the 1 container images this version deploys carry CVE-2024-28182.

Container imageDigestPackageFixed in
istio/pilot:1.16.0ac0284d75ec9
nghttp2@1.43.0-1build3
1.43.0-1ubuntu0.2

Open the chart page →

6,908
webappavzi-webapp0.1.01 of 1See more

webapp avzi-webapp 0.1.0

1 of the 1 container images this version deploys carry CVE-2024-28182.

Container imageDigestPackageFixed in
avzini/web-app:latestf40b30210ed0
nghttp2@1.52.0-1
1.52.0-1+deb12u2

Open the chart page →

6,297
nas-appsawesomeVerified publisher2.0.01 of 8See more

nas-apps awesome 2.0.0

1 of the 8 container images this version deploys carry CVE-2024-28182.

Container imageDigestPackageFixed in
adolfintel/speedtest:latest1f828fe83374
nghttp2@1.43.0-1
1.43.0-1+deb11u2

Open the chart page →

7,152
webserverazureorkestra1.0.01 of 1See more

webserver azureorkestra 1.0.0

1 of the 1 container images this version deploys carry CVE-2024-28182.

Container imageDigestPackageFixed in
nmalhotr/webserver:v1.0.03419361fb0dd
nghttp2@1.36.0-2+deb10u1
1.36.0-2+deb10u3

Open the chart page →

3,037
basic-auth-s3-nginxbasic-auth-s3-nginxVerified publisher1.0.01 of 1See more

basic-auth-s3-nginx basic-auth-s3-nginx 1.0.0

1 of the 1 container images this version deploys carry CVE-2024-28182.

Container imageDigestPackageFixed in
dachichang/basic-auth-s3-nginx:1.0.07ccac90a935e
nghttp2@1.52.0-1
1.52.0-1+deb12u2

Open the chart page →

6,297
bookinfobasictechno0.1.03 of 6See more

bookinfo basictechno 0.1.0

3 of the 6 container images this version deploys carry CVE-2024-28182.

Container imageDigestPackageFixed in
istio/examples-bookinfo-reviews-v1:1.17.0b8f16a765eea
nghttp2@1.40.0-1build1
1.40.0-1ubuntu0.3
istio/examples-bookinfo-reviews-v2:1.17.072f25a55f078
nghttp2@1.40.0-1build1
1.40.0-1ubuntu0.3
istio/examples-bookinfo-reviews-v3:1.17.08f92fc1b6592
nghttp2@1.40.0-1build1
1.40.0-1ubuntu0.3

Open the chart page →

20,671
block-buster-helm-appbb-app-helm-chartsVerified publisher7.6.21 of 1See more

block-buster-helm-app bb-app-helm-charts 7.6.2

1 of the 1 container images this version deploys carry CVE-2024-28182.

Container imageDigestPackageFixed in
siddharth67/block-buster-dev:7.6.04e1151ea5774
nghttp2@1.43.0-1
1.43.0-1+deb11u2

Open the chart page →

977
bbrf-serverbbrf-server0.1.01 of 1See more

bbrf-server bbrf-server 0.1.0

1 of the 1 container images this version deploys carry CVE-2024-28182.

Container imageDigestPackageFixed in
honoki/bbrf-server:latest07c4ea597019
nghttp2@1.36.0-2+deb10u1
1.36.0-2+deb10u3

Open the chart page →

908
berichtserviceberichtservice1.0.01 of 3See more

berichtservice berichtservice 1.0.0

1 of the 3 container images this version deploys carry CVE-2024-28182.

Container imageDigestPackageFixed in
ghcr.io/conductionnl/berichtservice-nginx:latest833d26df3840
nghttp2@1.43.0-1
1.43.0-1+deb11u2

Open the chart page →

7,342
pagesberrutig-pages1.0.02 of 3See more

pages berrutig-pages 1.0.0

2 of the 3 container images this version deploys carry CVE-2024-28182.

Container imageDigestPackageFixed in
dellcloud/pages:monitor6ba7b22caacd
nghttp2@1.40.0-1build1
1.40.0-1ubuntu0.3
flyway/flyway:6.4.422d97ceb0c47
nghttp2@1.30.0-1ubuntu1
1.30.0-1ubuntu1+esm2

Open the chart page →

20,190
mx-apibicarus-labs0.1.01 of 4See more

mx-api bicarus-labs 0.1.0

1 of the 4 container images this version deploys carry CVE-2024-28182.

Container imageDigestPackageFixed in
bicarus/mx-api-service:1.0.2-hf1dab88659ae3b
nghttp2@1.36.0-2+deb10u1
1.36.0-2+deb10u3

Open the chart page →

4,455
huebigdata-chartsVerified publisher1.0.41 of 2See more

hue bigdata-charts 1.0.4

1 of the 2 container images this version deploys carry CVE-2024-28182.

Container imageDigestPackageFixed in
gethue/hue:4.10.05702b2c37ff9
nghttp2@1.30.0-1ubuntu1
1.30.0-1ubuntu1+esm2

Open the chart page →

22,891
firehoseblip-firehoseVerified publisher0.0.181 of 11See more

firehose blip-firehose 0.0.18

1 of the 11 container images this version deploys carry CVE-2024-28182.

Container imageDigestPackageFixed in
obsidiandynamics/kafdrop:3.30.05337c9e0e2de
nghttp2@1.40.0-1build1
1.40.0-1ubuntu0.3

Open the chart page →

13,459
block-buster-helm-appblockbaster-helmapp7.6.01 of 1See more

block-buster-helm-app blockbaster-helmapp 7.6.0

1 of the 1 container images this version deploys carry CVE-2024-28182.

Container imageDigestPackageFixed in
siddharth67/block-buster-dev:7.6.04e1151ea5774
nghttp2@1.43.0-1
1.43.0-1+deb11u2

Open the chart page →

977
bnkrbnkr1.0.51 of 2See more

bnkr bnkr 1.0.5

1 of the 2 container images this version deploys carry CVE-2024-28182.

Container imageDigestPackageFixed in
engrmth/bnkr:2.1.06d8464e6f0e8
nghttp2@1.40.0-1build1
1.40.0-1ubuntu0.3

Open the chart page →

15,253
jaegerbook-k8sinfra-v23.4.02 of 5See more

jaeger book-k8sinfra-v2 3.4.0

2 of the 5 container images this version deploys carry CVE-2024-28182.

Container imageDigestPackageFixed in
jaegertracing/jaeger-cassandra-schema:1.53.0d48d6dab2c65
nghttp2@1.43.0-1ubuntu0.1
1.43.0-1ubuntu0.2
library/cassandra:3.11.65aa8400b4b3b
nghttp2@1.30.0-1ubuntu1
1.30.0-1ubuntu1+esm2

Open the chart page →

19,229
jenkinsbook-k8sinfra-v25.1.121 of 2See more

jenkins book-k8sinfra-v2 5.1.12

1 of the 2 container images this version deploys carry CVE-2024-28182.

Container imageDigestPackageFixed in
jenkins/jenkins:2.440.3-jdk17de4fea113221
nghttp2@1.52.0-1+deb12u1
1.52.0-1+deb12u2

Open the chart page →

8,323
mprimebrannon0.3.11 of 1See more

mprime brannon 0.3.1

1 of the 1 container images this version deploys carry CVE-2024-28182.

Container imageDigestPackageFixed in
brannondorsey/mprime:p95v303b62f957f0839c2
nghttp2@1.36.0-2+deb10u1
1.36.0-2+deb10u3

Open the chart page →

1,155
pagesbrian-pages1.0.02 of 3See more

pages brian-pages 1.0.0

2 of the 3 container images this version deploys carry CVE-2024-28182.

Container imageDigestPackageFixed in
dellcloud/pages:monitor6ba7b22caacd
nghttp2@1.40.0-1build1
1.40.0-1ubuntu0.3
flyway/flyway:6.4.422d97ceb0c47
nghttp2@1.30.0-1ubuntu1
1.30.0-1ubuntu1+esm2

Open the chart page →

20,190
pagesbrixton-mayuribhavsar23-pages1.0.02 of 3See more

pages brixton-mayuribhavsar23-pages 1.0.0

2 of the 3 container images this version deploys carry CVE-2024-28182.

Container imageDigestPackageFixed in
dellcloud/pages:monitor6ba7b22caacd
nghttp2@1.40.0-1build1
1.40.0-1ubuntu0.3
flyway/flyway:6.4.422d97ceb0c47
nghttp2@1.30.0-1ubuntu1
1.30.0-1ubuntu1+esm2

Open the chart page →

20,190

Container images carrying it

1,134 by charts deploying them

A fixed version is listed for 2 of the 2 affected packages.

Container imageDigestPackageFixed inUsed by
bitnamilegacy/influxdb:2.6.1-debian-11-r18d17df1f9d745
nghttp2@1.43.0-1
1.43.0-1+deb11u2
2
bitnamilegacy/kubectl:1.23.59ae933929409
nghttp2@1.36.0-2+deb10u1
1.36.0-2+deb10u3
2
bitnamilegacy/kubectl:1.26.4a0a972324d93
nghttp2@1.43.0-1
1.43.0-1+deb11u2
2
bitnamilegacy/mongodb:4.4.14fe2bd7b4036
nghttp2@1.36.0-2+deb10u1
1.36.0-2+deb10u3
2
bitnamilegacy/os-shell:11-debian-11-r722cb5982dcbf4
nghttp2@1.43.0-1
1.43.0-1+deb11u2
2
bitnamilegacy/postgresql:14.4.0-debian-11-r237e7ebb082031
nghttp2@1.43.0-1
1.43.0-1+deb11u2
2
bitnamilegacy/zookeeper:3.9.0-debian-11-r1110ed1ea3c8d1
nghttp2@1.43.0-1
1.43.0-1+deb11u2
2
cfssl/cfssl:latest:v1.6.5c9018c2ddf0b
nghttp2@1.52.0-1+deb12u1
1.52.0-1+deb12u2
2
confluentinc/cp-kafka:6.2.11-1-ubi8ac776fad95a5
nghttp2@1.33.0-3.el8_2.1
0:1.33.0-5.el8_8.1
2
confluentinc/cp-zookeeper:6.2.11-1-ubi8cae577096489
nghttp2@1.33.0-3.el8_2.1
0:1.33.0-5.el8_8.1
2
eqalpha/keydb:latest6537505c4235
nghttp2@1.40.0-1ubuntu0.1
1.40.0-1ubuntu0.3
2
eqalpha/keydb:x86_64_v6.3.4eceb1806730c
nghttp2@1.40.0-1ubuntu0.1
1.40.0-1ubuntu0.3
2
falcosecurity/falco-driver-loader:0.33.11fe583eee4af
nghttp2@1.36.0-2+deb10u1
1.36.0-2+deb10u3
2
freeradius/freeradius-server:3.0.2121c8bfa904d8
nghttp2@1.30.0-1ubuntu1
1.30.0-1ubuntu1+esm2
2
geoservercloud/geoserver-cloud-gateway:1.0-RC3756559ee788a
nghttp2@1.40.0-1build1
1.40.0-1ubuntu0.3
2
geoservercloud/geoserver-cloud-rest:1.0-RC399540eef78ad
nghttp2@1.40.0-1build1
1.40.0-1ubuntu0.3
2
geoservercloud/geoserver-cloud-wcs:1.0-RC35c254c53a357
nghttp2@1.40.0-1build1
1.40.0-1ubuntu0.3
2
geoservercloud/geoserver-cloud-webui:1.0-RC3c687b1cbc891
nghttp2@1.40.0-1build1
1.40.0-1ubuntu0.3
2
geoservercloud/geoserver-cloud-wfs:1.0-RC35288f320cf36
nghttp2@1.40.0-1build1
1.40.0-1ubuntu0.3
2
geoservercloud/geoserver-cloud-wms:1.0-RC3a30a60ac6cd0
nghttp2@1.40.0-1build1
1.40.0-1ubuntu0.3
2
gjeanmart/safe-ganache-node:latest926264c8f2d1
nghttp2@1.52.0-1
1.52.0-1+deb12u2
2
ilum/mongodb:6.0.542b6d774c37d
nghttp2@1.43.0-1+deb11u1
1.43.0-1+deb11u2
2
istio/kubectl:1.5.10dbb7726d1bf0
nghttp2@1.30.0-1ubuntu1
1.30.0-1ubuntu1+esm2
2
istio/proxyv2:1.18.0757d28c24100
nghttp2@1.43.0-1build3
1.43.0-1ubuntu0.2
2
istio/proxyv2:1.10.3a78b7a165744
nghttp2@1.30.0-1ubuntu1
1.30.0-1ubuntu1+esm2
2
jenkins/jenkins:2.426.1-jdk11b470bcdc4ecd
nghttp2@1.52.0-1
1.52.0-1+deb12u2
2
kodekloud/examplevotingapp_vote:v13a856afb02a3
nghttp2@1.43.0-1
1.43.0-1+deb11u2
2
ldapaccountmanager/lam:8.0.1d46cf25d1dda
nghttp2@1.43.0-1
1.43.0-1+deb11u2
2
library/cassandra:3.11.65aa8400b4b3b
nghttp2@1.30.0-1ubuntu1
1.30.0-1ubuntu1+esm2
2
library/cassandra:4.1.37cbcec0086ac
nghttp2@1.43.0-1ubuntu0.1
1.43.0-1ubuntu0.2
2
library/couchdb:3.1.1b422509b1648
nghttp2@1.36.0-2+deb10u1
1.36.0-2+deb10u3
2
library/elasticsearch:7.17.35e6ac15bf6a5
nghttp2@1.40.0-1build1
1.40.0-1ubuntu0.3
2
library/mongo:4.2.358b25d51baa1
nghttp2@1.30.0-1ubuntu1
1.30.0-1ubuntu1+esm2
2
library/nginx:1.27.098f8ec75657d
nghttp2@1.52.0-1+deb12u1
1.52.0-1+deb12u2
2
library/nginx:1.24.0f6daac2445b0
nghttp2@1.43.0-1+deb11u1
1.43.0-1+deb11u2
2
library/python:3.7eedf63967cdb
nghttp2@1.52.0-1
1.52.0-1+deb12u2
2
martinaif/backstage-k8s-demo-backend:test143bc40a3da0e
nghttp2@1.36.0-2+deb10u1
1.36.0-2+deb10u3
2
martinaif/backstage-k8s-demo-frontend:test1f07fbe15e5b5
nghttp2@1.36.0-2+deb10u1
1.36.0-2+deb10u3
2
mesosphere/kubeaddons-catalog:v0.11.4073db43d0b8b
nghttp2@1.40.0-1build1
1.40.0-1ubuntu0.3
2
minio/operator:v4.3.754393e03f3b2
nghttp2@1.33.0-3.el8_2.1
0:1.33.0-6.el8_10.1
2
moreillon/group-manager:v4.9.0d5a0ec8394c0
nghttp2@1.36.0-2+deb10u1
1.36.0-2+deb10u3
2
moreillon/group-manager-front:v3.3.1c9f85db3baa5
nghttp2@1.52.0-1+deb12u1
1.52.0-1+deb12u2
2
moreillon/user-manager:v5.0.2e1c9bfab5c16
nghttp2@1.52.0-1
1.52.0-1+deb12u2
2
moreillon/user-manager-front:v5.0.3b067dbbbb6af
nghttp2@1.52.0-1
1.52.0-1+deb12u2
2
obsidiandynamics/kafdrop:3.30.05337c9e0e2de
nghttp2@1.40.0-1build1
1.40.0-1ubuntu0.3
2
openmf/community-app:latest496b60a51f28
nghttp2@1.36.0-2+deb10u1
1.36.0-2+deb10u3
2
passbolt/passbolt:3.4.0-ce-non-root655547e17263
nghttp2@1.43.0-1
1.43.0-1+deb11u2
2
pecan/bety:5.4.1f825d480cd62
nghttp2@1.43.0-1
1.43.0-1+deb11u2
2
piomin/sample-spring-kotlin-microservice:1.1871f784dd6bc
nghttp2@1.43.0-1build3
1.43.0-1ubuntu0.2
2
postgis/postgis:15-3.3a2fc46b52819
nghttp2@1.43.0-1
1.43.0-1+deb11u2
2

syft 1.42.1 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.