StackRadar

CVE-2024-28182

Medium

Advisory

Published 4 Apr 2024In the index since 5 Sept 2026
Severity
Medium
worst across findings
CVSS
5.3
base score, highest
EPSS
0.850
100th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
1,135
of 17,790 indexed, latest versions
Container images
1,142
deployed by those charts
Fix available
2 of 2
affected packages

Red Hat Security Advisory: nghttp2 security update

Carried by container images the latest versions of 1,135 of 17,790 indexed charts deploy, on 1,142 images.

Affected packageAffected versionsFixed inImages
nghttp2deb1.30.0-1ubuntu1, 1.36.0-2, 1.36.0-2+deb10u1, 1.36.0-2+deb10u2+9 more1.30.0-1ubuntu1+esm2, 1.36.0-2+deb10u3, 1.40.0-1ubuntu0.3, 1.43.0-1+deb11u2+2 more942
nghttp2rpm1.33.0-1.el8, 1.33.0-1.el8_0.1, 1.33.0-3.el8_2.1, 1.33.0-3.el8_2.2+9 more0:1.33.0-4.el8_6.2, 0:1.33.0-5.el8_8.1, 0:1.33.0-6.el8_10.1, 0:1.43.0-5.el9_4.3+2 more200
OSV records
DEBIAN-CVE-2024-28182RHSA-2024:3501RHSA-2024:3701RHSA-2024:3763RHSA-2024:4252RLSA-2024:4252UBUNTU-CVE-2024-28182DLA-3804-1DLA-3898-1openSUSE-SU-2024:13825-1RLSA-2024:3501SUSE-SU-2024:1167-1
Also known as
RHSA-2024:3665, RHSA-2024:4576, RHSA-2024:4732, USN-6754-1

Charts affected

1,135 by stars
ChartLatestAffected imagesRadar Score
pageshelm-chart-repos-camden1.0.02 of 3See more

pages helm-chart-repos-camden 1.0.0

2 of the 3 container images this version deploys carry CVE-2024-28182.

Container imageDigestPackageFixed in
dellcloud/pages:monitor6ba7b22caacd
nghttp2@1.40.0-1build1
1.40.0-1ubuntu0.3
flyway/flyway:6.4.422d97ceb0c47
nghttp2@1.30.0-1ubuntu1
1.30.0-1ubuntu1+esm2

Open the chart page →

20,242
ditto-operatorhelm-chartsVerified publisher0.3.01 of 1See more

ditto-operator helm-charts 0.3.0

1 of the 1 container images this version deploys carry CVE-2024-28182.

Container imageDigestPackageFixed in
ghcr.io/ctron/ditto-operator:0.4.061a9bb81b85c
nghttp2@1.33.0-3.el8_2.1
0:1.33.0-6.el8_10.1

Open the chart page →

2,673
hawkbit-operatorhelm-chartsVerified publisher0.1.41 of 1See more

hawkbit-operator helm-charts 0.1.4

1 of the 1 container images this version deploys carry CVE-2024-28182.

Container imageDigestPackageFixed in
ctron/hawkbit-operator:0.1.48fdea8f76499
nghttp2@1.33.0-3.el8_2.1
0:1.33.0-6.el8_10.1

Open the chart page →

5,791
iofoghelm-chartsVerified publisher0.1.11 of 3See more

iofog helm-charts 0.1.1

1 of the 3 container images this version deploys carry CVE-2024-28182.

Container imageDigestPackageFixed in
quay.io/ctrontesting/iofog-controller:latest10df27bc5560
nghttp2@1.33.0-3.el8_2.1
0:1.33.0-6.el8_10.1

Open the chart page →

24,171
streamsheetshelm-chartsVerified publisher0.2.35 of 8See more

streamsheets helm-charts 0.2.3

5 of the 8 container images this version deploys carry CVE-2024-28182.

Container imageDigestPackageFixed in
ghcr.io/ctron/streamsheets-base:2.4.00cf25ed621e2
nghttp2@1.33.0-3.el8_2.1
0:1.33.0-6.el8_10.1
ghcr.io/ctron/streamsheets-gateway:2.4.00635f17c9d2c
nghttp2@1.33.0-3.el8_2.1
0:1.33.0-6.el8_10.1
ghcr.io/ctron/streamsheets-service-graphs:2.4.0e34964e336c1
nghttp2@1.33.0-3.el8_2.1
0:1.33.0-6.el8_10.1
ghcr.io/ctron/streamsheets-service-machines:2.4.00c5a3398d1e4
nghttp2@1.33.0-3.el8_2.1
0:1.33.0-6.el8_10.1
ghcr.io/ctron/streamsheets-service-streams:2.4.08ba040e79ca0
nghttp2@1.33.0-3.el8_2.1
0:1.33.0-6.el8_10.1

Open the chart page →

89,964
backstagehelm-charts-nr0.1.152 of 2See more

backstage helm-charts-nr 0.1.15

2 of the 2 container images this version deploys carry CVE-2024-28182.

Container imageDigestPackageFixed in
martinaif/backstage-k8s-demo-backend:test143bc40a3da0e
nghttp2@1.36.0-2+deb10u1
1.36.0-2+deb10u3
martinaif/backstage-k8s-demo-frontend:test1f07fbe15e5b5
nghttp2@1.36.0-2+deb10u1
1.36.0-2+deb10u3

Open the chart page →

8,213
prometheus-sentry-exporterhelm-charts-nr0.1.51 of 1See more

prometheus-sentry-exporter helm-charts-nr 0.1.5

1 of the 1 container images this version deploys carry CVE-2024-28182.

Container imageDigestPackageFixed in
ujamii/prometheus-sentry-exporter:0.5.06243197349e1
nghttp2@1.36.0-2
1.36.0-2+deb10u3

Open the chart page →

2,474
weblatehelm-charts-nr0.3.21 of 3See more

weblate helm-charts-nr 0.3.2

1 of the 3 container images this version deploys carry CVE-2024-28182.

Container imageDigestPackageFixed in
weblate/weblate:4.2.2-169c160d37a3c
nghttp2@1.36.0-2+deb10u1
1.36.0-2+deb10u3

Open the chart page →

7,987
chart-bookhelm-deploy-book0.1.01 of 3See more

chart-book helm-deploy-book 0.1.0

1 of the 3 container images this version deploys carry CVE-2024-28182.

Container imageDigestPackageFixed in
dannielkil/book-frontend:latest937993927694
nghttp2@1.52.0-1+deb12u1
1.52.0-1+deb12u2

Open the chart page →

9,148
countlyhelmforgeVerified publisher1.2.61 of 3See more

countly helmforge 1.2.6

1 of the 3 container images this version deploys carry CVE-2024-28182.

Container imageDigestPackageFixed in
countly/countly-server:25.05.4e3c238248f99
nghttp2@1.40.0-1build1
1.40.0-1ubuntu0.3

Open the chart page →

18,938
myapphelmingapp0.1.01 of 1See more

myapp helmingapp 0.1.0

1 of the 1 container images this version deploys carry CVE-2024-28182.

Container imageDigestPackageFixed in
muhammedgamal/fp23:latest74b4cd69b6fa
nghttp2@1.52.0-1+deb12u1
1.52.0-1+deb12u2

Open the chart page →

12,680
pageshelm-repo1.0.02 of 3See more

pages helm-repo 1.0.0

2 of the 3 container images this version deploys carry CVE-2024-28182.

Container imageDigestPackageFixed in
dellcloud/pages:monitor6ba7b22caacd
nghttp2@1.40.0-1build1
1.40.0-1ubuntu0.3
flyway/flyway:6.4.422d97ceb0c47
nghttp2@1.30.0-1ubuntu1
1.30.0-1ubuntu1+esm2

Open the chart page →

20,242
samplehelmapphelmtraining3.0.01 of 1See more

samplehelmapp helmtraining 3.0.0

1 of the 1 container images this version deploys carry CVE-2024-28182.

Container imageDigestPackageFixed in
praravind1801/helmimages:3.0.0f29d637b9ce1
nghttp2@1.52.0-1+deb12u1
1.52.0-1+deb12u2

Open the chart page →

5,996
nominatimheywood8-helm-chartsVerified publisher3.10.81 of 3See more

nominatim heywood8-helm-charts 3.10.8

1 of the 3 container images this version deploys carry CVE-2024-28182.

Container imageDigestPackageFixed in
mediagis/nominatim:4.2d0eae7b51374
nghttp2@1.43.0-1ubuntu0.1
1.43.0-1ubuntu0.2

Open the chart page →

14,363
printserverhmediadeVerified publisher1.0.22 of 4See more

printserver hmediade 1.0.2

2 of the 4 container images this version deploys carry CVE-2024-28182.

Container imageDigestPackageFixed in
hmediade/printserver:latest481a552c8e1c
nghttp2@1.43.0-1ubuntu0.1
1.43.0-1ubuntu0.2
hmediade/printserver-init:latest7f005eb6c718
nghttp2@1.43.0-1ubuntu0.1
1.43.0-1ubuntu0.2

Open the chart page →

10,948
paperlesshomelabcihelmchartstestVerified publisher9.1.91 of 1See more

paperless homelabcihelmchartstest 9.1.9

1 of the 1 container images this version deploys carry CVE-2024-28182.

Container imageDigestPackageFixed in
ghcr.io/paperless-ngx/paperless-ngx:2.0.1ab255bea133e
nghttp2@1.52.0-1
1.52.0-1+deb12u2

Open the chart page →

16,415
httpbin2022httpbin2022Verified publisher0.1.11 of 1See more

httpbin2022 httpbin2022 0.1.1

1 of the 1 container images this version deploys carry CVE-2024-28182.

Container imageDigestPackageFixed in
mshanley80/httpbin2022:latest5b189a70c0fb
nghttp2@1.40.0-1build1
1.40.0-1ubuntu0.3

Open the chart page →

8,751
eoloplanthttpd-eoloplant0.1.04 of 7See more

eoloplant httpd-eoloplant 0.1.0

4 of the 7 container images this version deploys carry CVE-2024-28182.

Container imageDigestPackageFixed in
codeurjc/planner:v1.0800cf520c245
nghttp2@1.43.0-1build3
1.43.0-1ubuntu0.2
codeurjc/server:v1.0310bea5b1ee7
nghttp2@1.33.0-3.el8_2.1
0:1.33.0-6.el8_10.1
codeurjc/weatherservice:v1.0b9e2f7234349
nghttp2@1.33.0-3.el8_2.1
0:1.33.0-4.el8_6.2
library/mongo:5.0.6-focal8e70544b6c76
nghttp2@1.40.0-1build1
1.40.0-1ubuntu0.3

Open the chart page →

32,372
nexus3huangchengwu-helm-chart0.1.01 of 1See more

nexus3 huangchengwu-helm-chart 0.1.0

1 of the 1 container images this version deploys carry CVE-2024-28182.

Container imageDigestPackageFixed in
sonatype/nexus3:3.53.04bd975493104
nghttp2@1.33.0-3.el8_2.1
0:1.33.0-6.el8_10.1

Open the chart page →

4,463
prometheushuangchengwu-helm-chart0.1.02 of 3See more

prometheus huangchengwu-helm-chart 0.1.0

2 of the 3 container images this version deploys carry CVE-2024-28182.

Container imageDigestPackageFixed in
apache/skywalking-oap-server:9.2.0133d35d2c263
nghttp2@1.43.0-1build3
1.43.0-1ubuntu0.2
apache/skywalking-ui:9.2.0295f1dc87d98
nghttp2@1.43.0-1build3
1.43.0-1ubuntu0.2

Open the chart page →

16,495
skywalking-v1huangchengwu-helm-chart0.1.02 of 4See more

skywalking-v1 huangchengwu-helm-chart 0.1.0

2 of the 4 container images this version deploys carry CVE-2024-28182.

Container imageDigestPackageFixed in
apache/skywalking-oap-server:8.9.1b4ec8c18d079
nghttp2@1.40.0-1build1
1.40.0-1ubuntu0.3
apache/skywalking-ui:8.9.180530f0308a5
nghttp2@1.40.0-1build1
1.40.0-1ubuntu0.3

Open the chart page →

20,741
mvfi4trustVerified publisher1.1.21 of 1See more

mvf i4trust 1.1.2

1 of the 1 container images this version deploys carry CVE-2024-28182.

Container imageDigestPackageFixed in
wistefan/mvf:lateste0887302b2d8
nghttp2@1.43.0-1build3
1.43.0-1ubuntu0.2

Open the chart page →

7,211
vcwaltidi4trustVerified publisher0.0.191 of 1See more

vcwaltid i4trust 0.0.19

1 of the 1 container images this version deploys carry CVE-2024-28182.

Container imageDigestPackageFixed in
quay.io/fiware/waltid:1.14.1-SNAPSHOT93889c3d8a34
nghttp2@1.43.0-1build3
1.43.0-1ubuntu0.2

Open the chart page →

7,938
ibm-object-storage-pluginibm-charts1.1.52 of 2See more

ibm-object-storage-plugin ibm-charts 1.1.5

2 of the 2 container images this version deploys carry CVE-2024-28182.

Container imageDigestPackageFixed in
ibmcom/ibmcloud-object-storage-driver:1.8.16c796a4c693b4
nghttp2@1.33.0-1.el8_0.1
0:1.33.0-6.el8_10.1
ibmcom/ibmcloud-object-storage-plugin:1.8.169c73804b37a3
nghttp2@1.33.0-1.el8_0.1
0:1.33.0-6.el8_10.1

Open the chart page →

12,460
ibm-skydive-devibm-charts1.1.21 of 1See more

ibm-skydive-dev ibm-charts 1.1.2

1 of the 1 container images this version deploys carry CVE-2024-28182.

Container imageDigestPackageFixed in
ibmcom/skydive:0.22.0395e60cc6e3d
nghttp2@1.30.0-1ubuntu1
1.30.0-1ubuntu1+esm2

Open the chart page →

12,628
ibm-ucv-prodibm-helm5.2.62 of 16See more

ibm-ucv-prod ibm-helm 5.2.6

2 of the 16 container images this version deploys carry CVE-2024-28182.

Container imageDigestPackageFixed in
bitnamilegacy/kubectl:1.22.13d0e426ccff33
nghttp2@1.43.0-1
1.43.0-1+deb11u2
ibmcom/opencontent-common-utils:1.1.2cd5065df7304
nghttp2@1.33.0-1.el8
0:1.33.0-6.el8_10.1

Open the chart page →

12,161
eoloserverihuertas2021-vmartinp2021-helm0.1.03 of 7See more

eoloserver ihuertas2021-vmartinp2021-helm 0.1.0

3 of the 7 container images this version deploys carry CVE-2024-28182.

Container imageDigestPackageFixed in
codeurjc/server:v1.0310bea5b1ee7
nghttp2@1.33.0-3.el8_2.1
0:1.33.0-6.el8_10.1
codeurjc/weatherservice:v1.0b9e2f7234349
nghttp2@1.33.0-3.el8_2.1
0:1.33.0-4.el8_6.2
library/mongo:5.0.6-focal8e70544b6c76
nghttp2@1.40.0-1build1
1.40.0-1ubuntu0.3

Open the chart page →

27,822
ikigaiikigai-chartVerified publisher0.0.94 of 58See more

ikigai ikigai-chart 0.0.9

4 of the 58 container images this version deploys carry CVE-2024-28182.

Container imageDigestPackageFixed in
dremio/dremio-oss:24.1.080ed2e3b7c43
nghttp2@1.43.0-1build3
1.43.0-1ubuntu0.2
jupyterhub/k8s-hub:1.2.0e4770285aaf7
nghttp2@1.40.0-1build1
1.40.0-1ubuntu0.3
kuberay/operator:v1.0.04e6ac8a3a2c4
nghttp2@1.33.0-5.el8_8
0:1.33.0-5.el8_8.1
library/zookeeper:3.8-temurin55d1e5b2e601
nghttp2@1.43.0-1build3
1.43.0-1ubuntu0.2

Open the chart page →

37,874
erpnextimprowisedVerified publisher3.3.01 of 3See more

erpnext improwised 3.3.0

1 of the 3 container images this version deploys carry CVE-2024-28182.

Container imageDigestPackageFixed in
improwised/erpnext-worker:v13.4.197280b55cbd4
nghttp2@1.36.0-2+deb10u1
1.36.0-2+deb10u3

Open the chart page →

6,502
frigateimprowisedVerified publisher1.1.01 of 1See more

frigate improwised 1.1.0

1 of the 1 container images this version deploys carry CVE-2024-28182.

Container imageDigestPackageFixed in
ghcr.io/blakeblackshear/frigate:0.13.07a5244e4c8dc
nghttp2@1.43.0-1+deb11u1
1.43.0-1+deb11u2

Open the chart page →

2,159
kore-boardimprowisedVerified publisher0.5.81 of 4See more

kore-board improwised 0.5.8

1 of the 4 container images this version deploys carry CVE-2024-28182.

Container imageDigestPackageFixed in
ghcr.io/kore3lab/kore-board.terminal:v0.5.5f52e66eff50b
nghttp2@1.30.0-1ubuntu1
1.30.0-1ubuntu1+esm2

Open the chart page →

16,230
cloudshellinseefrlab4.3.01 of 2See more

cloudshell inseefrlab 4.3.0

1 of the 2 container images this version deploys carry CVE-2024-28182.

Container imageDigestPackageFixed in
inseefrlab/shelly:cloudshell31f04ca7436b
nghttp2@1.43.0-1ubuntu0.1
1.43.0-1ubuntu0.2

Open the chart page →

10,554
delta-sharing-serverinseefrlab1.2.11 of 1See more

delta-sharing-server inseefrlab 1.2.1

1 of the 1 container images this version deploys carry CVE-2024-28182.

Container imageDigestPackageFixed in
deltaio/delta-sharing-server:0.2.08b75118187c5
nghttp2@1.36.0-2+deb10u1
1.36.0-2+deb10u3

Open the chart page →

6,176
openrefineinseefrlab3.5.01 of 1See more

openrefine inseefrlab 3.5.0

1 of the 1 container images this version deploys carry CVE-2024-28182.

Container imageDigestPackageFixed in
easypi/openrefine:3.7.0d2950a36a576
nghttp2@1.43.0-1
1.43.0-1+deb11u2

Open the chart page →

1,756
pinotinseefrlab0.2.01 of 2See more

pinot inseefrlab 0.2.0

1 of the 2 container images this version deploys carry CVE-2024-28182.

Container imageDigestPackageFixed in
apachepinot/pinot:latest-jdk110018bb04ced7
nghttp2@1.43.0-1
1.43.0-1+deb11u2

Open the chart page →

10,779
redashinseefrlab2.1.01 of 3See more

redash inseefrlab 2.1.0

1 of the 3 container images this version deploys carry CVE-2024-28182.

Container imageDigestPackageFixed in
redash/redash:10.0.0.b503639392753c0376
nghttp2@1.36.0-2+deb10u1
1.36.0-2+deb10u3

Open the chart page →

3,314
instemmingserviceinstemmingservice1.0.01 of 3See more

instemmingservice instemmingservice 1.0.0

1 of the 3 container images this version deploys carry CVE-2024-28182.

Container imageDigestPackageFixed in
ghcr.io/conductionnl/instemmingservice-nginx:latesteeeb4e9f0485
nghttp2@1.36.0-2+deb10u1
1.36.0-2+deb10u3

Open the chart page →

7,519
evi-miniointelVerified publisher3.0.32 of 2See more

evi-minio intel 3.0.3

2 of the 2 container images this version deploys carry CVE-2024-28182.

Container imageDigestPackageFixed in
quay.io/minio/mc:RELEASE.2023-01-28T20-29-38Zad34abeba912
nghttp2@1.33.0-3.el8_2.1
0:1.33.0-6.el8_10.1
quay.io/minio/minio:RELEASE.2023-02-10T18-48-39Za0a002cb113c
nghttp2@1.33.0-3.el8_2.1
0:1.33.0-6.el8_10.1

Open the chart page →

7,471
itm-mqtt-brokerintelVerified publisher1.0.01 of 1See more

itm-mqtt-broker intel 1.0.0

1 of the 1 container images this version deploys carry CVE-2024-28182.

Container imageDigestPackageFixed in
hivemq/hivemq4:dns-4.5.144d194450d48e
nghttp2@1.43.0-1
1.43.0-1+deb11u2

Open the chart page →

2,654
itm-servicesintelVerified publisher2.0.01 of 8See more

itm-services intel 2.0.0

1 of the 8 container images this version deploys carry CVE-2024-28182.

Container imageDigestPackageFixed in
intel/dlstreamer-pipeline-server:2022.1.1-ubuntu20aa8f5483a2ef
nghttp2@1.40.0-1build1
1.40.0-1ubuntu0.3

Open the chart page →

18,155
kesintelVerified publisher0.8.31 of 1See more

kes intel 0.8.3

1 of the 1 container images this version deploys carry CVE-2024-28182.

Container imageDigestPackageFixed in
minio/kes:v0.22.255f3aef5803e
nghttp2@1.33.0-3.el8_2.1
0:1.33.0-6.el8_10.1

Open the chart page →

3,577
tcs-issuerintelVerified publisher0.5.01 of 2See more

tcs-issuer intel 0.5.0

1 of the 2 container images this version deploys carry CVE-2024-28182.

Container imageDigestPackageFixed in
intel/trusted-certificate-issuer:0.5.0591a9db4a427
nghttp2@1.40.0-1build1
1.40.0-1ubuntu0.3

Open the chart page →

5,999
intelowlintelowl-helm6.6.1-01-06-20261 of 5See more

intelowl intelowl-helm 6.6.1-01-06-2026

1 of the 5 container images this version deploys carry CVE-2024-28182.

Container imageDigestPackageFixed in
intelowlproject/intelowl:v6.6.10b22e547ea6b
nghttp2@1.52.0-1+deb12u1
1.52.0-1+deb12u2

Open the chart page →

17,966
backstageirembo-backstage-helmVerified publisher1.0.51 of 3See more

backstage irembo-backstage-helm 1.0.5

1 of the 3 container images this version deploys carry CVE-2024-28182.

Container imageDigestPackageFixed in
roadiehq/community-backstage-image:latestef355bf5b639
nghttp2@1.36.0-2+deb10u1
1.36.0-2+deb10u3

Open the chart page →

7,234
istio-aws-private-ingress-customizedistio-aws-private-ingress-customized1.0.01 of 1See more

istio-aws-private-ingress-customized istio-aws-private-ingress-customized 1.0.0

1 of the 1 container images this version deploys carry CVE-2024-28182.

Container imageDigestPackageFixed in
istio/proxyv2:1.18.0757d28c24100
nghttp2@1.43.0-1build3
1.43.0-1ubuntu0.2

Open the chart page →

5,579
istio-azure-private-ingress-customizedistio-azure-private-ingress-customized1.0.01 of 1See more

istio-azure-private-ingress-customized istio-azure-private-ingress-customized 1.0.0

1 of the 1 container images this version deploys carry CVE-2024-28182.

Container imageDigestPackageFixed in
istio/proxyv2:1.18.0757d28c24100
nghttp2@1.43.0-1build3
1.43.0-1ubuntu0.2

Open the chart page →

5,579
wjh-rechnerit-at-mOfficialVerified publisher1.0.41 of 1See more

wjh-rechner it-at-m 1.0.4

1 of the 1 container images this version deploys carry CVE-2024-28182.

Container imageDigestPackageFixed in
ghcr.io/it-at-m/wjh-rechner:1.0.0bc70cdb5a01a
nghttp2@1.43.0-5.el9_3.1
0:1.43.0-5.el9_4.3

Open the chart page →

3,501
twitch-predictions-recorderjacobcolvinVerified publisher0.1.01 of 1See more

twitch-predictions-recorder jacobcolvin 0.1.0

1 of the 1 container images this version deploys carry CVE-2024-28182.

Container imageDigestPackageFixed in
macropower/twitch_predictions_recorder:v0.21e9c4fb89787
nghttp2@1.43.0-1
1.43.0-1+deb11u2

Open the chart page →

2,669
jellyfinjellyfin-helm10.9.101 of 1See more

jellyfin jellyfin-helm 10.9.10

1 of the 1 container images this version deploys carry CVE-2024-28182.

Container imageDigestPackageFixed in
jellyfin/jellyfin:10.9.1079fb3d73a3e9
nghttp2@1.52.0-1+deb12u1
1.52.0-1+deb12u2

Open the chart page →

4,511
jx-app-anchorejenkins-x0.0.41 of 2See more

jx-app-anchore jenkins-x 0.0.4

1 of the 2 container images this version deploys carry CVE-2024-28182.

Container imageDigestPackageFixed in
anchore/anchore-engine:v0.7.1ed9b3badd17c
nghttp2@1.33.0-1.el8_0.1
0:1.33.0-6.el8_10.1

Open the chart page →

9,854

Container images carrying it

1,142 by charts deploying them

A fixed version is listed for 2 of the 2 affected packages.

Container imageDigestPackageFixed inUsed by
ghcr.io/k8s-at-home/xteve:v2.2.0.200292b3614670f
nghttp2@1.40.0-1build1
1.40.0-1ubuntu0.3
1
ghcr.io/k8s-home-lab/wireguard:v1.0.20210914779858b5e11d
nghttp2@1.40.0-1ubuntu0.1
1.40.0-1ubuntu0.3
1
ghcr.io/kedacore/external-scaler-azure-cosmos-db:0.1.04985d164ead9
nghttp2@1.36.0-2+deb10u1
1.36.0-2+deb10u3
1
ghcr.io/kiaedev/kiae:latestebd03028ff6a
nghttp2@1.43.0-1
1.43.0-1+deb11u2
1
ghcr.io/kluster-manager/managed-serviceaccount:latest365183f83ac9
nghttp2@1.33.0-5.el8_9
0:1.33.0-6.el8_10.1
1
ghcr.io/kluster-manager/multicluster-controlplane:latest6de40f528be9
nghttp2@1.33.0-5.el8_9
0:1.33.0-6.el8_10.1
1
ghcr.io/kore3lab/kore-board.terminal:v0.5.5f52e66eff50b
nghttp2@1.30.0-1ubuntu1
1.30.0-1ubuntu1+esm2
1
ghcr.io/kvaps/kubefarm-ltsp:v0.13.424efef013a53
nghttp2@1.40.0-1build1
1.40.0-1ubuntu0.3
1
ghcr.io/kvaps/linstor-satellite:v1.14.0a573fb9bc809
nghttp2@1.36.0-2+deb10u1
1.36.0-2+deb10u3
1
ghcr.io/kvaps/opennebula:v5.12.0.4-1e28e0e7de11b
nghttp2@1.40.0-1build1
1.40.0-1ubuntu0.3
1
ghcr.io/kvaps/opennebula-exporter:v5.12.0.401563adc95fd
nghttp2@1.40.0-1build1
1.40.0-1ubuntu0.3
1
ghcr.io/kvaps/opennebula-exporter:v5.12.0.4-12b92df1143b9
nghttp2@1.40.0-1build1
1.40.0-1ubuntu0.3
1
ghcr.io/kvaps/opennebula-flow:v5.12.0.4-1600221f0f43f
nghttp2@1.40.0-1build1
1.40.0-1ubuntu0.3
1
ghcr.io/kvaps/opennebula-gate:v5.12.0.4-1a85e03d8bc1d
nghttp2@1.40.0-1build1
1.40.0-1ubuntu0.3
1
ghcr.io/leoquote/tinyproxy_exporter:master6b4103d88dbb
nghttp2@1.43.0-1
1.43.0-1+deb11u2
1
ghcr.io/libreconnect/ferriscompany:0.1.0-rc6ed86db9f0efe
nghttp2@1.52.0-1+deb12u1
1.52.0-1+deb12u2
1
ghcr.io/libretime/libretime-legacy:latest35b4531189c2
nghttp2@1.43.0-1
1.43.0-1+deb11u2
1
ghcr.io/linuxserver/booksonic-air:version-v2009.1.0baa4fa9549dc
nghttp2@1.30.0-1ubuntu1
1.30.0-1ubuntu1+esm2
1
ghcr.io/linuxserver/ombi:4.16.124c1b67cf39af
nghttp2@1.43.0-1build3
1.43.0-1ubuntu0.2
1
ghcr.io/linuxserver/resilio-sync:version-2.7.2.1375605b6d544028
nghttp2@1.30.0-1ubuntu1
1.30.0-1ubuntu1+esm2
1
ghcr.io/lsst-sqre/strimzi-registry-operator:0.6.07e25f7048aff
nghttp2@1.43.0-1
1.43.0-1+deb11u2
1
ghcr.io/melodyyangaws/hive-metastore:3.0.0e949b0f733f0
nghttp2@1.43.0-1
1.43.0-1+deb11u2
1
ghcr.io/mroxso/pollstr:latest0b4f97faa3d0
nghttp2@1.43.0-1
1.43.0-1+deb11u2
1
ghcr.io/nathanvaughn/webtrees:2.0.1969423a100fab
nghttp2@1.43.0-1
1.43.0-1+deb11u2
1
ghcr.io/nefelim4ag/pingdom-operator:0.0.15f8c7afdcf439
nghttp2@1.52.0-1+deb12u1
1.52.0-1+deb12u2
1
ghcr.io/opencatalogi/web-app:deva1a7f507f6ae
nghttp2@1.52.0-1+deb12u1
1.52.0-1+deb12u2
1
ghcr.io/open-telemetry/demo:1.12.0-imageprovider4e322858fe56
nghttp2@1.52.0-1+deb12u1
1.52.0-1+deb12u2
1
ghcr.io/open-telemetry/demo:1.12.0-quoteservice87eb325d306f
nghttp2@1.52.0-1+deb12u1
1.52.0-1+deb12u2
1
ghcr.io/oznu/homebridge:2022-07-08ff2af53897e7
nghttp2@1.40.0-1build1
1.40.0-1ubuntu0.3
1
ghcr.io/paperless-ngx/paperless-ngx:2.13.10642357c5dbd
nghttp2@1.52.0-1+deb12u1
1.52.0-1+deb12u2
1
ghcr.io/paperless-ngx/paperless-ngx:1.8.09bbc9a90641e
nghttp2@1.43.0-1
1.43.0-1+deb11u2
1
ghcr.io/paperless-ngx/paperless-ngx:2.0.1ab255bea133e
nghttp2@1.52.0-1
1.52.0-1+deb12u2
1
ghcr.io/privacyengineering/collector-go:main7217f1a4fa28
nghttp2@1.36.0-2+deb10u1
1.36.0-2+deb10u3
1
ghcr.io/privacyengineering/consumer:main73f59c032812
nghttp2@1.36.0-2+deb10u1
1.36.0-2+deb10u3
1
ghcr.io/privacyengineering/hawk-monitor:master13309f068a56
nghttp2@1.43.0-1
1.43.0-1+deb11u2
1
ghcr.io/remla23-team17/app:1.0.05816dbddf47d
nghttp2@1.43.0-1
1.43.0-1+deb11u2
1
ghcr.io/remla23-team17/model-service:1.0.0aa59fe2c4f6a
nghttp2@1.43.0-1
1.43.0-1+deb11u2
1
ghcr.io/rodg/nodecg-base:latest31be4bf87070
nghttp2@1.43.0-1
1.43.0-1+deb11u2
1
ghcr.io/savonet/liquidsoap:v2.0.19e08148e1055
nghttp2@1.43.0-1
1.43.0-1+deb11u2
1
ghcr.io/sergelogvinov/keydb:6.3.376a19ddc3626
nghttp2@1.43.0-1
1.43.0-1+deb11u2
1
ghcr.io/simoncaron/velero-notifications:1.0.0d058963d4de7
nghttp2@1.43.0-1
1.43.0-1+deb11u2
1
ghcr.io/smarter-project/audio-client:v3.1.23c8375dc5487
nghttp2@1.40.0-1build1
1.40.0-1ubuntu0.3
1
ghcr.io/smarter-project/gstreamer:v1.0.25ecb16015aa8
nghttp2@1.40.0-1build1
1.40.0-1ubuntu0.3
1
ghcr.io/smarter-project/image-detector:v2.5.31dcca70c6446
nghttp2@1.40.0-1build1
1.40.0-1ubuntu0.3
1
ghcr.io/vincenttaglia/indexer-tools:v3.4.45bae30456ddb
nghttp2@1.36.0-2+deb10u1
1.36.0-2+deb10u3
1
ghcr.io/voxpupuli/container-puppetdb:7.18.0-v1.5.0a56dfe91f5b1
nghttp2@1.43.0-1ubuntu0.1
1.43.0-1ubuntu0.2
1
ghcr.io/voxpupuli/container-puppetserver:7.17.0-v1.5.0916746209ac5
nghttp2@1.43.0-1ubuntu0.1
1.43.0-1ubuntu0.2
1
ghcr.io/vshn/haproxy-with-mysql:1.0.0a3c27ee3fb2f
nghttp2@1.52.0-1
1.52.0-1+deb12u2
1
ghcr.io/wbstack/api:8x.9.11eee94f9f7a53
nghttp2@1.43.0-1
1.43.0-1+deb11u2
1
ghcr.io/wbstack/cradle:2.0.11c7a78c54f77
nghttp2@1.36.0-2+deb10u1
1.36.0-2+deb10u3
1

syft 1.42.1 · advisories as of 16 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.