StackRadar

CVE-2024-28182

Medium

Advisory

Published 4 Apr 2024In the index since 5 Sept 2026
Severity
Medium
worst across findings
CVSS
5.3
base score, highest
EPSS
0.850
100th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
1,125
of 17,787 indexed, latest versions
Container images
1,134
deployed by those charts
Fix available
2 of 2
affected packages

Red Hat Security Advisory: nghttp2 security update

Carried by container images the latest versions of 1,125 of 17,787 indexed charts deploy, on 1,134 images.

Affected packageAffected versionsFixed inImages
nghttp2deb1.30.0-1ubuntu1, 1.36.0-2, 1.36.0-2+deb10u1, 1.36.0-2+deb10u2+9 more1.30.0-1ubuntu1+esm2, 1.36.0-2+deb10u3, 1.40.0-1ubuntu0.3, 1.43.0-1+deb11u2+2 more935
nghttp2rpm1.33.0-1.el8, 1.33.0-1.el8_0.1, 1.33.0-3.el8_2.1, 1.33.0-3.el8_2.2+9 more0:1.33.0-4.el8_6.2, 0:1.33.0-5.el8_8.1, 0:1.33.0-6.el8_10.1, 0:1.43.0-5.el9_4.3+2 more199
OSV records
DEBIAN-CVE-2024-28182RHSA-2024:3501RHSA-2024:3701RHSA-2024:3763RHSA-2024:4252RLSA-2024:4252UBUNTU-CVE-2024-28182DLA-3804-1DLA-3898-1openSUSE-SU-2024:13825-1RLSA-2024:3501SUSE-SU-2024:1167-1
Also known as
RHSA-2024:3665, RHSA-2024:4576, RHSA-2024:4732, USN-6754-1

Charts affected

1,125 by stars
ChartLatestAffected imagesRadar Score
dnation-kubernetes-monitoring-stackdnationcloud4.0.22 of 17See more

dnation-kubernetes-monitoring-stack dnationcloud 4.0.2

2 of the 17 container images this version deploys carry CVE-2024-28182.

Container imageDigestPackageFixed in
quay.io/minio/mc:RELEASE.2022-10-20T23-26-33Z50ee58bc9770
nghttp2@1.33.0-3.el8_2.1
0:1.33.0-4.el8_6.2
quay.io/minio/minio:RELEASE.2022-10-24T18-35-07Zd853057f2800
nghttp2@1.33.0-3.el8_2.1
0:1.33.0-4.el8_6.2

Open the chart page →

21,641
api-postsdniel0.9.11 of 1See more

api-posts dniel 0.9.1

1 of the 1 container images this version deploys carry CVE-2024-28182.

Container imageDigestPackageFixed in
dniel/api-posts:master45a667852f2a
nghttp2@1.30.0-1ubuntu1
1.30.0-1ubuntu1+esm2

Open the chart page →

8,986
doris-foundationdbdorisVerified publisher25.8.01 of 4See more

doris-foundationdb doris 25.8.0

1 of the 4 container images this version deploys carry CVE-2024-28182.

Container imageDigestPackageFixed in
foundationdb/foundationdb-kubernetes-sidecar:6.2.30-19ceb2f948c9f
nghttp2@1.36.0-2+deb10u1
1.36.0-2+deb10u3

Open the chart page →

3,167
codecovdoubanVerified publisher0.2.41 of 8See more

codecov douban 0.2.4

1 of the 8 container images this version deploys carry CVE-2024-28182.

Container imageDigestPackageFixed in
timescale/timescaledb-ha:pg14.6-ts2.9.1-p1cdb9ae118899
nghttp2@1.43.0-1build3
1.43.0-1ubuntu0.2

Open the chart page →

24,917
helpdeskdoubanVerified publisher0.3.31 of 2See more

helpdesk douban 0.3.3

1 of the 2 container images this version deploys carry CVE-2024-28182.

Container imageDigestPackageFixed in
douz/helpdesk:latest4384103d0219
nghttp2@1.43.0-1
1.43.0-1+deb11u2

Open the chart page →

4,550
overlorddoubanVerified publisher0.2.21 of 1See more

overlord douban 0.2.2

1 of the 1 container images this version deploys carry CVE-2024-28182.

Container imageDigestPackageFixed in
douz/overlord:latestf2bc7fc068c1
nghttp2@1.36.0-2+deb10u1
1.36.0-2+deb10u3

Open the chart page →

3,693
seleniumdoubanVerified publisher1.3.21 of 1See more

selenium douban 1.3.2

1 of the 1 container images this version deploys carry CVE-2024-28182.

Container imageDigestPackageFixed in
selenium/hub:3.141.5902f251d48d5f
nghttp2@1.40.0-1build1
1.40.0-1ubuntu0.3

Open the chart page →

11,782
tinyproxy-exporterdoubanVerified publisher0.1.21 of 1See more

tinyproxy-exporter douban 0.1.2

1 of the 1 container images this version deploys carry CVE-2024-28182.

Container imageDigestPackageFixed in
ghcr.io/leoquote/tinyproxy_exporter:master6b4103d88dbb
nghttp2@1.43.0-1
1.43.0-1+deb11u2

Open the chart page →

3,421
eoloplannerdreyg-jescribanob-chart-eoloplanner0.1.02 of 7See more

eoloplanner dreyg-jescribanob-chart-eoloplanner 0.1.0

2 of the 7 container images this version deploys carry CVE-2024-28182.

Container imageDigestPackageFixed in
library/mongo:4.2.12-bionic628741415fc9
nghttp2@1.30.0-1ubuntu1
1.30.0-1ubuntu1+esm2
oscarsotosanchez/weatherservice:v1.0911ec961d10b
nghttp2@1.30.0-1ubuntu1
1.30.0-1ubuntu1+esm2

Open the chart page →

24,656
drogue-cloud-coredrogue-iotVerified publisher0.7.1120 of 22See more

drogue-cloud-core drogue-iot 0.7.11

20 of the 22 container images this version deploys carry CVE-2024-28182.

Container imageDigestPackageFixed in
ghcr.io/drogue-iot/authentication-service:0.11.0857b137fc7b3
nghttp2@1.43.0-5.el9
0:1.43.0-5.el9_4.3
ghcr.io/drogue-iot/coap-endpoint:0.11.044790b71aa22
nghttp2@1.43.0-5.el9
0:1.43.0-5.el9_4.3
ghcr.io/drogue-iot/command-endpoint:0.11.06dce3158b851
nghttp2@1.43.0-5.el9
0:1.43.0-5.el9_4.3
ghcr.io/drogue-iot/console-backend:0.11.025d229ae5bde
nghttp2@1.43.0-5.el9
0:1.43.0-5.el9_4.3
ghcr.io/drogue-iot/console-frontend:0.11.0558972f9374c
nghttp2@1.43.0-5.el9
0:1.43.0-5.el9_4.3
ghcr.io/drogue-iot/database-migration:0.11.057072c72a7cd
nghttp2@1.43.0-5.el9
0:1.43.0-5.el9_4.3
ghcr.io/drogue-iot/device-management-controller:0.11.0200aea1a2b42
nghttp2@1.43.0-5.el9
0:1.43.0-5.el9_4.3
ghcr.io/drogue-iot/device-management-service:0.11.0f4a5bfc06a74
nghttp2@1.43.0-5.el9
0:1.43.0-5.el9_4.3
ghcr.io/drogue-iot/device-state-service:0.11.0fbf0738cfc7e
nghttp2@1.43.0-5.el9
0:1.43.0-5.el9_4.3
ghcr.io/drogue-iot/http-endpoint:0.11.0b612c18479e0
nghttp2@1.43.0-5.el9
0:1.43.0-5.el9_4.3
ghcr.io/drogue-iot/knative-operator:0.11.0e2d927639f6e
nghttp2@1.43.0-5.el9
0:1.43.0-5.el9_4.3
ghcr.io/drogue-iot/mqtt-endpoint:0.11.032c6d2f5eab9
nghttp2@1.43.0-5.el9
0:1.43.0-5.el9_4.3
ghcr.io/drogue-iot/mqtt-integration:0.11.07ac2adb6ca49
nghttp2@1.43.0-5.el9
0:1.43.0-5.el9_4.3
ghcr.io/drogue-iot/outbox-controller:0.11.01a958edafdb1
nghttp2@1.43.0-5.el9
0:1.43.0-5.el9_4.3
ghcr.io/drogue-iot/test-cert-generator:0.11.06ba7e1608286
nghttp2@1.33.0-3.el8_2.1
0:1.33.0-6.el8_10.1
ghcr.io/drogue-iot/topic-strimzi-operator:0.11.05253fbf8d04c
nghttp2@1.43.0-5.el9
0:1.43.0-5.el9_4.3
ghcr.io/drogue-iot/ttn-operator:0.11.07dd5ac80c8f1
nghttp2@1.43.0-5.el9
0:1.43.0-5.el9_4.3
ghcr.io/drogue-iot/user-auth-service:0.11.0adebc40ddf98
nghttp2@1.43.0-5.el9
0:1.43.0-5.el9_4.3
ghcr.io/drogue-iot/websocket-integration:0.11.0372dcd370945
nghttp2@1.43.0-5.el9
0:1.43.0-5.el9_4.3
quay.io/keycloak/keycloak:20.0054ef67eb7da
nghttp2@1.33.0-3.el8_2.1
0:1.33.0-6.el8_10.1

Open the chart page →

55,666
drogue-cloud-examplesdrogue-iotVerified publisher0.7.114 of 6See more

drogue-cloud-examples drogue-iot 0.7.11

4 of the 6 container images this version deploys carry CVE-2024-28182.

Container imageDigestPackageFixed in
timescale/timescaledb-ha:pg14-ts2.6-latested719c0cd19d
nghttp2@1.43.0-1build3
1.43.0-1ubuntu0.2
ghcr.io/ctron/kubectl:1.25e37d61b5277c
nghttp2@1.33.0-5.el8_9
0:1.33.0-6.el8_10.1
ghcr.io/drogue-iot/drogue-event-source:0.2.1e2e812a4cf8e
nghttp2@1.33.0-3.el8_2.1
0:1.33.0-6.el8_10.1
ghcr.io/drogue-iot/postgresql-pusher:0.2.1c6bb121ced90
nghttp2@1.33.0-3.el8_2.1
0:1.33.0-6.el8_10.1

Open the chart page →

30,699
drogue-cloud-twindrogue-iotVerified publisher0.7.111 of 8See more

drogue-cloud-twin drogue-iot 0.7.11

1 of the 8 container images this version deploys carry CVE-2024-28182.

Container imageDigestPackageFixed in
quay.io/keycloak/keycloak:20.0054ef67eb7da
nghttp2@1.33.0-3.el8_2.1
0:1.33.0-6.el8_10.1

Open the chart page →

6,915
pgdump-to-s3duck-helm0.1.41 of 1See more

pgdump-to-s3 duck-helm 0.1.4

1 of the 1 container images this version deploys carry CVE-2024-28182.

Container imageDigestPackageFixed in
ghcr.io/ducksify/pgdump-to-s3:latestc42c0946bd0f
nghttp2@1.43.0-1
1.43.0-1+deb11u2

Open the chart page →

1,362
arbitrumdysnixVerified publisher0.1.11 of 1See more

arbitrum dysnix 0.1.1

1 of the 1 container images this version deploys carry CVE-2024-28182.

Container imageDigestPackageFixed in
offchainlabs/nitro-node:v3.1.0-7d1d84ce95865866129
nghttp2@1.52.0-1+deb12u1
1.52.0-1+deb12u2

Open the chart page →

9,244
kafkamagicdysnixVerified publisher0.2.31 of 1See more

kafkamagic dysnix 0.2.3

1 of the 1 container images this version deploys carry CVE-2024-28182.

Container imageDigestPackageFixed in
digitsy/kafka-magic:2.0.3.4f91d7f56b55d
nghttp2@1.36.0-2+deb10u1
1.36.0-2+deb10u3

Open the chart page →

1,906
pritunldysnixVerified publisher0.2.71 of 3See more

pritunl dysnix 0.2.7

1 of the 3 container images this version deploys carry CVE-2024-28182.

Container imageDigestPackageFixed in
ghcr.io/dysnix/bitnami/mongodb:4.4.11-debian-10-r5073116e61007
nghttp2@1.36.0-2+deb10u1
1.36.0-2+deb10u3

Open the chart page →

5,055
eav-componenteav-component1.0.01 of 3See more

eav-component eav-component 1.0.0

1 of the 3 container images this version deploys carry CVE-2024-28182.

Container imageDigestPackageFixed in
ghcr.io/conductionnl/eav-component-nginx:latestd785c893096c
nghttp2@1.43.0-1
1.43.0-1+deb11u2

Open the chart page →

7,255
mintakaeclipse-aeriosVerified publisher1.0.01 of 2See more

mintaka eclipse-aerios 1.0.0

1 of the 2 container images this version deploys carry CVE-2024-28182.

Container imageDigestPackageFixed in
fiware/mintaka:0.7.092a3c5cf43c0
nghttp2@1.33.0-3.el8_2.1
0:1.33.0-4.el8_6.2

Open the chart page →

11,482
openldap-stack-haeclipse-aeriosVerified publisher4.1.21 of 4See more

openldap-stack-ha eclipse-aerios 4.1.2

1 of the 4 container images this version deploys carry CVE-2024-28182.

Container imageDigestPackageFixed in
osixia/phpldapadmin:0.9.0d112b82be133
nghttp2@1.36.0-2+deb10u1
1.36.0-2+deb10u3

Open the chart page →

7,534
marblerun-coordinatoredgelesssysVerified publisher0.5.01 of 1See more

marblerun-coordinator edgelesssys 0.5.0

1 of the 1 container images this version deploys carry CVE-2024-28182.

Container imageDigestPackageFixed in
ghcr.io/edgelesssys/coordinator:v0.5.0bcd5b8d4c45c
nghttp2@1.30.0-1ubuntu1
1.30.0-1ubuntu1+esm2

Open the chart page →

10,981
pagesedgwarepages1.0.02 of 3See more

pages edgwarepages 1.0.0

2 of the 3 container images this version deploys carry CVE-2024-28182.

Container imageDigestPackageFixed in
dellcloud/pages:monitor6ba7b22caacd
nghttp2@1.40.0-1build1
1.40.0-1ubuntu0.3
flyway/flyway:6.4.422d97ceb0c47
nghttp2@1.30.0-1ubuntu1
1.30.0-1ubuntu1+esm2

Open the chart page →

20,190
education-componenteducation-component1.0.01 of 3See more

education-component education-component 1.0.0

1 of the 3 container images this version deploys carry CVE-2024-28182.

Container imageDigestPackageFixed in
ghcr.io/conductionnl/education-component-nginx:latest38900bc76ee0
nghttp2@1.43.0-1
1.43.0-1+deb11u2

Open the chart page →

7,327
egeria-baseegeria-charts4.3.01 of 5See more

egeria-base egeria-charts 4.3.0

1 of the 5 container images this version deploys carry CVE-2024-28182.

Container imageDigestPackageFixed in
quay.io/strimzi/operator:0.37.052f376e64b9b
nghttp2@1.33.0-3.el8_2.1
0:1.33.0-5.el8_8.1

Open the chart page →

4,046
egeria-ctsegeria-charts4.3.01 of 3See more

egeria-cts egeria-charts 4.3.0

1 of the 3 container images this version deploys carry CVE-2024-28182.

Container imageDigestPackageFixed in
quay.io/strimzi/operator:0.37.052f376e64b9b
nghttp2@1.33.0-3.el8_2.1
0:1.33.0-5.el8_8.1

Open the chart page →

4,033
egeria-ptsegeria-charts4.3.01 of 3See more

egeria-pts egeria-charts 4.3.0

1 of the 3 container images this version deploys carry CVE-2024-28182.

Container imageDigestPackageFixed in
quay.io/strimzi/operator:0.37.052f376e64b9b
nghttp2@1.33.0-3.el8_2.1
0:1.33.0-5.el8_8.1

Open the chart page →

4,033
odpi-egeria-labegeria-charts4.3.01 of 4See more

odpi-egeria-lab egeria-charts 4.3.0

1 of the 4 container images this version deploys carry CVE-2024-28182.

Container imageDigestPackageFixed in
quay.io/strimzi/operator:0.37.052f376e64b9b
nghttp2@1.33.0-3.el8_2.1
0:1.33.0-5.el8_8.1

Open the chart page →

4,033
eherkenning-uieherkenning-ui1.0.01 of 3See more

eherkenning-ui eherkenning-ui 1.0.0

1 of the 3 container images this version deploys carry CVE-2024-28182.

Container imageDigestPackageFixed in
ghcr.io/conductionnl/eherkenning-ui-nginx:latestfcd2100d863f
nghttp2@1.36.0-2+deb10u1
1.36.0-2+deb10u3

Open the chart page →

7,510
backend-charteks-3-tier-app-chart0.1.01 of 1See more

backend-chart eks-3-tier-app-chart 0.1.0

1 of the 1 container images this version deploys carry CVE-2024-28182.

Container imageDigestPackageFixed in
arfath29/3-tier-app-backend:latestee0750b18406
nghttp2@1.36.0-2+deb10u1
1.36.0-2+deb10u3

Open the chart page →

1,693
frontend-charteks-3-tier-app-chart0.1.01 of 1See more

frontend-chart eks-3-tier-app-chart 0.1.0

1 of the 1 container images this version deploys carry CVE-2024-28182.

Container imageDigestPackageFixed in
arfath29/3-tier-app-frontend:latest384b3e377f47
nghttp2@1.36.0-2+deb10u1
1.36.0-2+deb10u3

Open the chart page →

3,744
mongodb-charteks-3-tier-app-chart0.1.01 of 1See more

mongodb-chart eks-3-tier-app-chart 0.1.0

1 of the 1 container images this version deploys carry CVE-2024-28182.

Container imageDigestPackageFixed in
library/mongo:4.4.66efa05203990
nghttp2@1.30.0-1ubuntu1
1.30.0-1ubuntu1+esm2

Open the chart page →

8,041
seafileeleksbai0.1.11 of 3See more

seafile eleksbai 0.1.1

1 of the 3 container images this version deploys carry CVE-2024-28182.

Container imageDigestPackageFixed in
seafileltd/seafile-mc:9.0.106693911bcc40
nghttp2@1.40.0-1build1
1.40.0-1ubuntu0.3

Open the chart page →

25,122
sftpemberstackVerified publisher5.1.711 of 1See more

sftp emberstack 5.1.71

1 of the 1 container images this version deploys carry CVE-2024-28182.

Container imageDigestPackageFixed in
emberstack/sftp:5.1.711d81a5df909b
nghttp2@1.43.0-1+deb11u1
1.43.0-1+deb11u2

Open the chart page →

680
reddarkemmas-chartsVerified publisher0.0.21 of 1See more

reddark emmas-charts 0.0.2

1 of the 1 container images this version deploys carry CVE-2024-28182.

Container imageDigestPackageFixed in
ghcr.io/0xemma/reddark:main2a115e991894
nghttp2@1.43.0-1
1.43.0-1+deb11u2

Open the chart page →

1,998
elasticsearch-umbrellaempathyco0.8.121 of 3See more

elasticsearch-umbrella empathyco 0.8.12

1 of the 3 container images this version deploys carry CVE-2024-28182.

Container imageDigestPackageFixed in
empathyco/elasticsearch:7.17.2-memlock03e724e41eeb
nghttp2@1.40.0-1build1
1.40.0-1ubuntu0.3

Open the chart page →

10,564
kube-ecp-stackemqx-operator2.5.11 of 16See more

kube-ecp-stack emqx-operator 2.5.1

1 of the 16 container images this version deploys carry CVE-2024-28182.

Container imageDigestPackageFixed in
library/telegraf:1.27507a3eecf809
nghttp2@1.52.0-1+deb12u1
1.52.0-1+deb12u2

Open the chart page →

23,685
internal-appeoc-chartsVerified publisher1.0.01 of 1See more

internal-app eoc-charts 1.0.0

1 of the 1 container images this version deploys carry CVE-2024-28182.

Container imageDigestPackageFixed in
library/nginx:1.24.0f6daac2445b0
nghttp2@1.43.0-1+deb11u1
1.43.0-1+deb11u2

Open the chart page →

532
eolicplantseolicplantsVerified publisher0.1.02 of 7See more

eolicplants eolicplants 0.1.0

2 of the 7 container images this version deploys carry CVE-2024-28182.

Container imageDigestPackageFixed in
library/mongo:4.2.12-bionic628741415fc9
nghttp2@1.30.0-1ubuntu1
1.30.0-1ubuntu1+esm2
oscarsotosanchez/weatherservice:v1.0911ec961d10b
nghttp2@1.30.0-1ubuntu1
1.30.0-1ubuntu1+esm2

Open the chart page →

27,291
eoloPlanteolo-plannerVerified publisher0.1.03 of 7See more

eoloPlant eolo-planner 0.1.0

3 of the 7 container images this version deploys carry CVE-2024-28182.

Container imageDigestPackageFixed in
mastercloudapps/planner:v1.2340a950b311b2
nghttp2@1.43.0-1build3
1.43.0-1ubuntu0.2
mastercloudapps/server:v2.23f3d24dfe2686
nghttp2@1.33.0-3.el8_2.1
0:1.33.0-6.el8_10.1
mastercloudapps/weatherservice:v1.23de859d29c116
nghttp2@1.33.0-3.el8_2.1
0:1.33.0-4.el8_6.2

Open the chart page →

27,537
eoloplannereoloplannerVerified publisher0.1.04 of 7See more

eoloplanner eoloplanner 0.1.0

4 of the 7 container images this version deploys carry CVE-2024-28182.

Container imageDigestPackageFixed in
codeurjc/planner:v1.0800cf520c245
nghttp2@1.43.0-1build3
1.43.0-1ubuntu0.2
codeurjc/server:v1.0310bea5b1ee7
nghttp2@1.33.0-3.el8_2.1
0:1.33.0-6.el8_10.1
codeurjc/weatherservice:v1.0b9e2f7234349
nghttp2@1.33.0-3.el8_2.1
0:1.33.0-4.el8_6.2
library/mongo:5.0.6-focal8e70544b6c76
nghttp2@1.40.0-1build1
1.40.0-1ubuntu0.3

Open the chart page →

32,205
eoloPlannerCommunicationsKubernetes3eoloplannercommunicationskuberneteshelmVerified publisher0.1.03 of 7See more

eoloPlannerCommunicationsKubernetes3 eoloplannercommunicationskuberneteshelm 0.1.0

3 of the 7 container images this version deploys carry CVE-2024-28182.

Container imageDigestPackageFixed in
mastercloudapps/planner:v1.2340a950b311b2
nghttp2@1.43.0-1build3
1.43.0-1ubuntu0.2
mastercloudapps/server:v2.23f3d24dfe2686
nghttp2@1.33.0-3.el8_2.1
0:1.33.0-6.el8_10.1
mastercloudapps/weatherservice:v1.23de859d29c116
nghttp2@1.33.0-3.el8_2.1
0:1.33.0-4.el8_6.2

Open the chart page →

27,537
eoloplanner-mcaeoloplanner-mcaVerified publisher0.1.02 of 7See more

eoloplanner-mca eoloplanner-mca 0.1.0

2 of the 7 container images this version deploys carry CVE-2024-28182.

Container imageDigestPackageFixed in
library/mongo:4.2.12-bionic628741415fc9
nghttp2@1.30.0-1ubuntu1
1.30.0-1ubuntu1+esm2
oscarsotosanchez/weatherservice:v1.0911ec961d10b
nghttp2@1.30.0-1ubuntu1
1.30.0-1ubuntu1+esm2

Open the chart page →

27,256
eoloplannereoloplanner-molynx-gat0.1.03 of 7See more

eoloplanner eoloplanner-molynx-gat 0.1.0

3 of the 7 container images this version deploys carry CVE-2024-28182.

Container imageDigestPackageFixed in
codeurjc/server:v1.0310bea5b1ee7
nghttp2@1.33.0-3.el8_2.1
0:1.33.0-6.el8_10.1
codeurjc/weatherservice:v1.0b9e2f7234349
nghttp2@1.33.0-3.el8_2.1
0:1.33.0-4.el8_6.2
library/mongo:4.4.66efa05203990
nghttp2@1.30.0-1ubuntu1
1.30.0-1ubuntu1+esm2

Open the chart page →

28,482
eolo-plannereolo-planner-repo0.1.03 of 7See more

eolo-planner eolo-planner-repo 0.1.0

3 of the 7 container images this version deploys carry CVE-2024-28182.

Container imageDigestPackageFixed in
arturisimo/server-urjc:v1.0d8dc4430531e
nghttp2@1.36.0-2+deb10u1
1.36.0-2+deb10u3
codeurjc/weatherservice:v1.0b9e2f7234349
nghttp2@1.33.0-3.el8_2.1
0:1.33.0-4.el8_6.2
library/mongo:5.0.6-focal8e70544b6c76
nghttp2@1.40.0-1build1
1.40.0-1ubuntu0.3

Open the chart page →

27,096
eoloplanteoloplant1.0.03 of 7See more

eoloplant eoloplant 1.0.0

3 of the 7 container images this version deploys carry CVE-2024-28182.

Container imageDigestPackageFixed in
mastercloudapps/planner:v1.2340a950b311b2
nghttp2@1.43.0-1build3
1.43.0-1ubuntu0.2
mastercloudapps/server:v2.23f3d24dfe2686
nghttp2@1.33.0-3.el8_2.1
0:1.33.0-6.el8_10.1
mastercloudapps/weatherservice:v1.23de859d29c116
nghttp2@1.33.0-3.el8_2.1
0:1.33.0-4.el8_6.2

Open the chart page →

27,537
eoloplantseoloplants-urjcVerified publisher0.1.03 of 7See more

eoloplants eoloplants-urjc 0.1.0

3 of the 7 container images this version deploys carry CVE-2024-28182.

Container imageDigestPackageFixed in
codeurjc/server:v1.0310bea5b1ee7
nghttp2@1.33.0-3.el8_2.1
0:1.33.0-6.el8_10.1
codeurjc/weatherservice:v1.0b9e2f7234349
nghttp2@1.33.0-3.el8_2.1
0:1.33.0-4.el8_6.2
library/mongo:5.0.6-focal8e70544b6c76
nghttp2@1.40.0-1build1
1.40.0-1ubuntu0.3

Open the chart page →

27,721
servereoloserverVerified publisher0.1.04 of 7See more

server eoloserver 0.1.0

4 of the 7 container images this version deploys carry CVE-2024-28182.

Container imageDigestPackageFixed in
codeurjc/planner:v1.0800cf520c245
nghttp2@1.43.0-1build3
1.43.0-1ubuntu0.2
codeurjc/server:v1.0310bea5b1ee7
nghttp2@1.33.0-3.el8_2.1
0:1.33.0-6.el8_10.1
codeurjc/weatherservice:v1.0b9e2f7234349
nghttp2@1.33.0-3.el8_2.1
0:1.33.0-4.el8_6.2
library/mongo:5.0.6-focal8e70544b6c76
nghttp2@1.40.0-1build1
1.40.0-1ubuntu0.3

Open the chart page →

32,205
flywayeosc-lot-1Verified publisher0.7.01 of 3See more

flyway eosc-lot-1 0.7.0

1 of the 3 container images this version deploys carry CVE-2024-28182.

Container imageDigestPackageFixed in
flyway/flyway:9.1545b5d7cdc75a
nghttp2@1.40.0-1build1
1.40.0-1ubuntu0.3

Open the chart page →

9,334
equizequiz0.0.11 of 3See more

equiz equiz 0.0.1

1 of the 3 container images this version deploys carry CVE-2024-28182.

Container imageDigestPackageFixed in
yzhou442/equiz:latesta3f7ca69e28d
nghttp2@1.43.0-1
1.43.0-1+deb11u2

Open the chart page →

7,541
equizequiz-chart0.0.11 of 3See more

equiz equiz-chart 0.0.1

1 of the 3 container images this version deploys carry CVE-2024-28182.

Container imageDigestPackageFixed in
yzhou442/equiz:latesta3f7ca69e28d
nghttp2@1.43.0-1
1.43.0-1+deb11u2

Open the chart page →

7,541
ethexporterethersphereVerified publisher0.3.01 of 1See more

ethexporter ethersphere 0.3.0

1 of the 1 container images this version deploys carry CVE-2024-28182.

Container imageDigestPackageFixed in
darkobas/ethexporter:latest62e6464491ba
nghttp2@1.43.0-1
1.43.0-1+deb11u2

Open the chart page →

2,394

Container images carrying it

1,134 by charts deploying them

A fixed version is listed for 2 of the 2 affected packages.

Container imageDigestPackageFixed inUsed by
qichenxu4pd/pythonexample:1.0f3a8502bc21b
nghttp2@1.52.0-1+deb12u1
1.52.0-1+deb12u2
2
quickwit/quickwit:v0.8.2363ff56ce456
nghttp2@1.52.0-1+deb12u1
1.52.0-1+deb12u2
2
radondb/pgpool:4.2.2-debian-10-r1801ef77b5b87
nghttp2@1.36.0-2+deb10u1
1.36.0-2+deb10u3
2
radondb/postgresql-repmgr:11.11.0-debian-r1bcfb7f67c6f5
nghttp2@1.36.0-2+deb10u1
1.36.0-2+deb10u3
2
scorpiobroker/scorpio:config-server_1.1.0c46c1517e523
nghttp2@1.43.0-1
1.43.0-1+deb11u2
2
stakater/stakater-nordmart-review:1.0.35954d2be66e95
nghttp2@1.33.0-3.el8_2.1
0:1.33.0-4.el8_6.2
2
stakater/stakater-nordmart-review-ui:1.0.143f4926eedc74
nghttp2@1.36.0-2+deb10u1
1.36.0-2+deb10u3
2
svtechnmaa/svtech_debuger:v1.0.0b2987abe57d3
nghttp2@1.43.0-1build3
1.43.0-1ubuntu0.2
2
tzahi12345/youtubedl-material:4.3.2:latest2f943d584711
nghttp2@1.43.0-1build3
1.43.0-1ubuntu0.2
2
uffizzi/controller:latest0344805f267b
nghttp2@1.52.0-1+deb12u1
1.52.0-1+deb12u2
2
ujamii/prometheus-sentry-exporter:0.5.06243197349e1
nghttp2@1.36.0-2
1.36.0-2+deb10u3
2
vaultwarden/server:1.25.239f34c5159a2
nghttp2@1.43.0-1
1.43.0-1+deb11u2
2
vdiogov/glpi-conteiner:latest6945f84f0058
nghttp2@1.52.0-1+deb12u1
1.52.0-1+deb12u2
2
weblate/weblate:4.2.2-169c160d37a3c
nghttp2@1.36.0-2+deb10u1
1.36.0-2+deb10u3
2
yzhou442/equiz:latesta3f7ca69e28d
nghttp2@1.43.0-1
1.43.0-1+deb11u2
2
ghcr.io/codingducksrl/laravel:8.15be52524664c
nghttp2@1.43.0-1build3
1.43.0-1ubuntu0.2
2
ghcr.io/danbooru/danbooru:9cab67c0ac72a8c52289302c519715ceec2372d95f545698e907
nghttp2@1.43.0-1build3
1.43.0-1ubuntu0.2
2
ghcr.io/games-on-whales/retroarch:1.0.0103fbcec2314
nghttp2@1.40.0-1build1
1.40.0-1ubuntu0.3
2
ghcr.io/google/fleetspeak:v0.1.17cd264d33efd4
nghttp2@1.52.0-1+deb12u1
1.52.0-1+deb12u2
2
ghcr.io/linuxserver/openvpn-as:version-2.8.6-916f8e7d-ubuntu184ee0764310e7
nghttp2@1.30.0-1ubuntu1
1.30.0-1ubuntu1+esm2
2
ghcr.io/nginxinc/nginx-s3-gateway/nginx-oss-s3-gateway:unprivileged-oss:unprivileged-oss-202503313db8145349a3
nghttp2@1.52.0-1+deb12u1
1.52.0-1+deb12u2
2
ghcr.io/salaboy/fmtok8s-frontend:v0.1.103fd01b4f56e
nghttp2@1.43.0-1build3
1.43.0-1ubuntu0.2
2
mcr.microsoft.com/azure-sql-edge:latest902628a8be89
nghttp2@1.40.0-1ubuntu0.1
1.40.0-1ubuntu0.3
2
quay.io/flomesh/curl-ubi8:7.84.0bef31fa5f5f3
nghttp2@1.33.0-5.el8_9
0:1.33.0-6.el8_10.1
2
quay.io/keycloak/keycloak:20.0054ef67eb7da
nghttp2@1.33.0-3.el8_2.1
0:1.33.0-6.el8_10.1
2
quay.io/keycloak/keycloak:17.0.1-legacy68f9f38c8f30
nghttp2@1.33.0-3.el8_2.1
0:1.33.0-6.el8_10.1
2
quay.io/minio/mc:RELEASE.2023-09-29T16-41-22Za784ce6e3b1b
nghttp2@1.33.0-3.el8_2.1
0:1.33.0-5.el8_8.1
2
quay.io/minio/mc:RELEASE.2023-01-28T20-29-38Zad34abeba912
nghttp2@1.33.0-3.el8_2.1
0:1.33.0-6.el8_10.1
2
quay.io/minio/minio:RELEASE.2023-09-30T07-02-29Z6262bc9a2730
nghttp2@1.33.0-3.el8_2.1
0:1.33.0-5.el8_8.1
2
quay.io/minio/minio:RELEASE.2023-07-21T21-12-44Z8e5e9490cd50
nghttp2@1.33.0-3.el8_2.1
0:1.33.0-5.el8_8.1
2
quay.io/minio/minio:RELEASE.2023-02-10T18-48-39Za0a002cb113c
nghttp2@1.33.0-3.el8_2.1
0:1.33.0-6.el8_10.1
2
quay.io/opencloudio/ibm-mongodb:4.0.24d8c631a6dc43
nghttp2@1.33.0-3.el8_2.1
0:1.33.0-6.el8_10.1
2
quay.io/openshift/origin-cli:4.7464a3af4dfe0
nghttp2@1.33.0-3.el8_2.1
0:1.33.0-6.el8_10.1
2
quay.io/openshift/origin-cli:4.8bb5e052770e5
nghttp2@1.33.0-3.el8_2.1
0:1.33.0-6.el8_10.1
2
quay.io/strimzi/operator:0.39.002f6f143fc6d
nghttp2@1.33.0-5.el8_9
0:1.33.0-6.el8_10.1
2
5200710/hadoop:3.2.3-java8092d3088a5fb
nghttp2@1.40.0-1ubuntu0.2
1.40.0-1ubuntu0.3
1
5200710/hive:3.1.3-postgresql-metastoree34ab066d2ed
nghttp2@1.36.0-2+deb10u1
1.36.0-2+deb10u3
1
abohatyrenko/bucket-backup-restore:latestfa98af15a13e
nghttp2@1.43.0-1+deb11u1
1.43.0-1+deb11u2
1
aboogie/login_test_backend:new9c41a4483ac8
nghttp2@1.52.0-1+deb12u1
1.52.0-1+deb12u2
1
activepieces/activepieces:0.23.0c26188b44e62
nghttp2@1.43.0-1+deb11u1
1.43.0-1+deb11u2
1
adolfintel/speedtest:latest1f828fe83374
nghttp2@1.43.0-1
1.43.0-1+deb11u2
1
adwerx/github-actions-runner:2.276.1-20.04-1840d2b078682
nghttp2@1.40.0-1build1
1.40.0-1ubuntu0.3
1
afrank/mozalert-controller:latestd463c37b08d7
nghttp2@1.36.0-2+deb10u1
1.36.0-2+deb10u3
1
aidasi/swpspa:v1-1-net6-k8s-test-betadee4ec566312
nghttp2@1.43.0-1
1.43.0-1+deb11u2
1
airsonicadvanced/airsonic-advanced:latestf7cbafac2806
nghttp2@1.40.0-1build1
1.40.0-1ubuntu0.3
1
akaunting/akaunting:3.0.1552811b36ec3a
nghttp2@1.52.0-1
1.52.0-1+deb12u2
1
akeyless/base-rhel:0.0.14ba8900a0061
nghttp2@1.33.0-5.el8_9
0:1.33.0-6.el8_10.1
1
alerta/alerta-web:8.5.04786b9eaa606
nghttp2@1.36.0-2+deb10u1
1.36.0-2+deb10u3
1
allegroai/clearml-agent-k8s-base:1.24-21772827a01bb5
nghttp2@1.30.0-1ubuntu1
1.30.0-1ubuntu1+esm2
1
allegroai/clearml-serving-inference:1.3.0fca885e8cfc6
nghttp2@1.43.0-1
1.43.0-1+deb11u2
1

syft 1.42.1 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.