StackRadar

CVE-2024-28182

Medium

Advisory

Published 4 Apr 2024In the index since 5 Sept 2026
Severity
Medium
worst across findings
CVSS
5.3
base score, highest
EPSS
0.850
100th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
1,135
of 17,790 indexed, latest versions
Container images
1,142
deployed by those charts
Fix available
2 of 2
affected packages

Red Hat Security Advisory: nghttp2 security update

Carried by container images the latest versions of 1,135 of 17,790 indexed charts deploy, on 1,142 images.

Affected packageAffected versionsFixed inImages
nghttp2deb1.30.0-1ubuntu1, 1.36.0-2, 1.36.0-2+deb10u1, 1.36.0-2+deb10u2+9 more1.30.0-1ubuntu1+esm2, 1.36.0-2+deb10u3, 1.40.0-1ubuntu0.3, 1.43.0-1+deb11u2+2 more942
nghttp2rpm1.33.0-1.el8, 1.33.0-1.el8_0.1, 1.33.0-3.el8_2.1, 1.33.0-3.el8_2.2+9 more0:1.33.0-4.el8_6.2, 0:1.33.0-5.el8_8.1, 0:1.33.0-6.el8_10.1, 0:1.43.0-5.el9_4.3+2 more200
OSV records
DEBIAN-CVE-2024-28182RHSA-2024:3501RHSA-2024:3701RHSA-2024:3763RHSA-2024:4252RLSA-2024:4252UBUNTU-CVE-2024-28182DLA-3804-1DLA-3898-1openSUSE-SU-2024:13825-1RLSA-2024:3501SUSE-SU-2024:1167-1
Also known as
RHSA-2024:3665, RHSA-2024:4576, RHSA-2024:4732, USN-6754-1

Charts affected

1,135 by stars
ChartLatestAffected imagesRadar Score
voteappvoting-app-helm-charts-repo-cloudVerified publisher1.0.02 of 5See more

voteapp voting-app-helm-charts-repo-cloud 1.0.0

2 of the 5 container images this version deploys carry CVE-2024-28182.

Container imageDigestPackageFixed in
kodekloud/examplevotingapp_result:v1e510023fdf38
nghttp2@1.43.0-1
1.43.0-1+deb11u2
kodekloud/examplevotingapp_vote:v13a856afb02a3
nghttp2@1.43.0-1
1.43.0-1+deb11u2

Open the chart page →

8,287
kongwallarmVerified publisher4.6.31 of 7See more

kong wallarm 4.6.3

1 of the 7 container images this version deploys carry CVE-2024-28182.

Container imageDigestPackageFixed in
wallarm/kong:3.1.0-ubuntu-4.6.0ea9608c82e40
nghttp2@1.40.0-1build1
1.40.0-1ubuntu0.3

Open the chart page →

11,444
pageswalter1.0.02 of 3See more

pages walter 1.0.0

2 of the 3 container images this version deploys carry CVE-2024-28182.

Container imageDigestPackageFixed in
dellcloud/pages:monitor6ba7b22caacd
nghttp2@1.40.0-1build1
1.40.0-1ubuntu0.3
flyway/flyway:6.4.422d97ceb0c47
nghttp2@1.30.0-1ubuntu1
1.30.0-1ubuntu1+esm2

Open the chart page →

20,233
wazuh-manager-filebeatwazuh-manager-filebeat0.1.0-gamma1 of 1See more

wazuh-manager-filebeat wazuh-manager-filebeat 0.1.0-gamma

1 of the 1 container images this version deploys carry CVE-2024-28182.

Container imageDigestPackageFixed in
iosifache/wazuh-manager-filebeat:latest85df3f04b5da
nghttp2@1.40.0-1build1
1.40.0-1ubuntu0.3

Open the chart page →

11,167
apiwbstack0.36.01 of 1See more

api wbstack 0.36.0

1 of the 1 container images this version deploys carry CVE-2024-28182.

Container imageDigestPackageFixed in
ghcr.io/wbstack/api:8x.9.11eee94f9f7a53
nghttp2@1.43.0-1
1.43.0-1+deb11u2

Open the chart page →

2,019
istio-service-meshwbstack0.0.11 of 1See more

istio-service-mesh wbstack 0.0.1

1 of the 1 container images this version deploys carry CVE-2024-28182.

Container imageDigestPackageFixed in
istio/pilot:1.17.1ce9d87606701
nghttp2@1.43.0-1build3
1.43.0-1ubuntu0.2

Open the chart page →

6,272
mediawikiwbstack0.14.01 of 1See more

mediawiki wbstack 0.14.0

1 of the 1 container images this version deploys carry CVE-2024-28182.

Container imageDigestPackageFixed in
ghcr.io/wbstack/mediawiki:1.37-7.4-20220621-fp-beta-0c3012c8a34b4
nghttp2@1.43.0-1
1.43.0-1+deb11u2

Open the chart page →

2,132
supersetwbstack0.1.01 of 1See more

superset wbstack 0.1.0

1 of the 1 container images this version deploys carry CVE-2024-28182.

Container imageDigestPackageFixed in
apache/superset:4.0.1ab9467fd712c
nghttp2@1.52.0-1+deb12u1
1.52.0-1+deb12u2

Open the chart page →

6,540
tool-cradlewbstack0.2.01 of 1See more

tool-cradle wbstack 0.2.0

1 of the 1 container images this version deploys carry CVE-2024-28182.

Container imageDigestPackageFixed in
ghcr.io/wbstack/cradle:2.0.11c7a78c54f77
nghttp2@1.36.0-2+deb10u1
1.36.0-2+deb10u3

Open the chart page →

1,316
tool-quickstatementswbstack0.4.01 of 1See more

tool-quickstatements wbstack 0.4.0

1 of the 1 container images this version deploys carry CVE-2024-28182.

Container imageDigestPackageFixed in
ghcr.io/wbstack/quickstatements:1.3.588423e422ea8
nghttp2@1.36.0-2+deb10u1
1.36.0-2+deb10u3

Open the chart page →

1,698
tool-widarwbstack0.4.01 of 1See more

tool-widar wbstack 0.4.0

1 of the 1 container images this version deploys carry CVE-2024-28182.

Container imageDigestPackageFixed in
ghcr.io/wbstack/widar:1.31702fc9df79f
nghttp2@1.36.0-2+deb10u1
1.36.0-2+deb10u3

Open the chart page →

1,480
wbaas-backupwbstack0.1.01 of 1See more

wbaas-backup wbstack 0.1.0

1 of the 1 container images this version deploys carry CVE-2024-28182.

Container imageDigestPackageFixed in
ghcr.io/wmde/wbaas-backup:v0.1.78e6a9516eac0
nghttp2@1.30.0-1ubuntu1
1.30.0-1ubuntu1+esm2

Open the chart page →

9,748
drillwearefrank1.3.62 of 3See more

drill wearefrank 1.3.6

2 of the 3 container images this version deploys carry CVE-2024-28182.

Container imageDigestPackageFixed in
apache/drill:1.21.11f96558fd292
nghttp2@1.43.0-1
1.43.0-1+deb11u2
bitnamilegacy/zookeeper:3.9.0-debian-11-r1110ed1ea3c8d1
nghttp2@1.43.0-1
1.43.0-1+deb11u2

Open the chart page →

9,399
weather-chartweather-web-app0.1.01 of 1See more

weather-chart weather-web-app 0.1.0

1 of the 1 container images this version deploys carry CVE-2024-28182.

Container imageDigestPackageFixed in
zohardocker12/weather_app_flask:latestb86d60dbb68d
nghttp2@1.36.0-2+deb10u1
1.36.0-2+deb10u3

Open the chart page →

2,671
myweatherhelmwebapp11.3.501 of 8See more

myweatherhelm webapp1 1.3.50

1 of the 8 container images this version deploys carry CVE-2024-28182.

Container imageDigestPackageFixed in
mcr.microsoft.com/azure-sql-edge:latest902628a8be89
nghttp2@1.40.0-1ubuntu0.1
1.40.0-1ubuntu0.3

Open the chart page →

9,225
myweatherhelm-schedulingwebapp11.3.921 of 9See more

myweatherhelm-scheduling webapp1 1.3.92

1 of the 9 container images this version deploys carry CVE-2024-28182.

Container imageDigestPackageFixed in
mcr.microsoft.com/azure-sql-edge:latest902628a8be89
nghttp2@1.40.0-1ubuntu0.1
1.40.0-1ubuntu0.3

Open the chart page →

9,225
web-dvwaweb-dvwa1.16.01 of 2See more

web-dvwa web-dvwa 1.16.0

1 of the 2 container images this version deploys carry CVE-2024-28182.

Container imageDigestPackageFixed in
gulacedia/web-dvwa-new:v367b467d961ca
nghttp2@1.52.0-1
1.52.0-1+deb12u2

Open the chart page →

8,858
sonarqubewebencryptor6.7.31 of 3See more

sonarqube webencryptor 6.7.3

1 of the 3 container images this version deploys carry CVE-2024-28182.

Container imageDigestPackageFixed in
library/sonarqube:8.2-communitya246bc64207e
nghttp2@1.36.0-2+deb10u1
1.36.0-2+deb10u3

Open the chart page →

5,462
webhookie-allwebhookie0.1.21 of 3See more

webhookie-all webhookie 0.1.2

1 of the 3 container images this version deploys carry CVE-2024-28182.

Container imageDigestPackageFixed in
quay.io/keycloak/keycloak:14.0.03029dc0f1d38
nghttp2@1.33.0-3.el8_2.1
0:1.33.0-6.el8_10.1

Open the chart page →

28,699
webresourcecataloguswebresourcecatalogus1.1.01 of 4See more

webresourcecatalogus webresourcecatalogus 1.1.0

1 of the 4 container images this version deploys carry CVE-2024-28182.

Container imageDigestPackageFixed in
ghcr.io/conductionnl/webresourcecatalogus-nginx:latest6de60c83128d
nghttp2@1.43.0-1
1.43.0-1+deb11u2

Open the chart page →

7,552
emissary-ingresswenerme8.12.21 of 2See more

emissary-ingress wenerme 8.12.2

1 of the 2 container images this version deploys carry CVE-2024-28182.

Container imageDigestPackageFixed in
istio/kubectl:1.5.10dbb7726d1bf0
nghttp2@1.30.0-1ubuntu1
1.30.0-1ubuntu1+esm2

Open the chart page →

10,857
longhornwenerme1.2.31 of 2See more

longhorn wenerme 1.2.3

1 of the 2 container images this version deploys carry CVE-2024-28182.

Container imageDigestPackageFixed in
longhornio/longhorn-manager:v1.2.3dca34321452c
nghttp2@1.40.0-1build1
1.40.0-1ubuntu0.3

Open the chart page →

15,287
miniowenerme8.0.101 of 1See more

minio wenerme 8.0.10

1 of the 1 container images this version deploys carry CVE-2024-28182.

Container imageDigestPackageFixed in
minio/minio:RELEASE.2021-02-14T04-01-33Zbd11edda91f3
nghttp2@1.33.0-3.el8_2.1
0:1.33.0-6.el8_10.1

Open the chart page →

6,915
minio-standalonewenerme1.0.21 of 1See more

minio-standalone wenerme 1.0.2

1 of the 1 container images this version deploys carry CVE-2024-28182.

Container imageDigestPackageFixed in
minio/minio:RELEASE.2022-01-04T07-41-07Z1484c87239ea
nghttp2@1.33.0-3.el8_2.1
0:1.33.0-6.el8_10.1

Open the chart page →

6,138
jaegerwikimedia3.1.21 of 4See more

jaeger wikimedia 3.1.2

1 of the 4 container images this version deploys carry CVE-2024-28182.

Container imageDigestPackageFixed in
jaegertracing/jaeger-cassandra-schema:1.53.0d48d6dab2c65
nghttp2@1.43.0-1ubuntu0.1
1.43.0-1ubuntu0.2

Open the chart page →

9,296
marge-botwiremindVerified publisher1.4.41 of 1See more

marge-bot wiremind 1.4.4

1 of the 1 container images this version deploys carry CVE-2024-28182.

Container imageDigestPackageFixed in
hiboxsystems/marge-bot:0.14.0dcffb926e563
nghttp2@1.52.0-1+deb12u1
1.52.0-1+deb12u2

Open the chart page →

5,548
vaultwardenwitcom-gmbh0.2.01 of 2See more

vaultwarden witcom-gmbh 0.2.0

1 of the 2 container images this version deploys carry CVE-2024-28182.

Container imageDigestPackageFixed in
vaultwarden/server:1.25.239f34c5159a2
nghttp2@1.43.0-1
1.43.0-1+deb11u2

Open the chart page →

1,585
wp-gats-helmwordpress-gatsby0.0.11 of 3See more

wp-gats-helm wordpress-gatsby 0.0.1

1 of the 3 container images this version deploys carry CVE-2024-28182.

Container imageDigestPackageFixed in
library/wordpress:6.0.0-php8.0-apache277c6c25980f
nghttp2@1.43.0-1
1.43.0-1+deb11u2

Open the chart page →

2,021
workadventureworkadventure1.1.04 of 9See more

workadventure workadventure 1.1.0

4 of the 9 container images this version deploys carry CVE-2024-28182.

Container imageDigestPackageFixed in
thecodingmachine/workadventure-back:v1.17.764001369dad5
nghttp2@1.36.0-2+deb10u1
1.36.0-2+deb10u3
thecodingmachine/workadventure-map-storage:v1.17.75bdab56da2fa
nghttp2@1.36.0-2+deb10u1
1.36.0-2+deb10u3
thecodingmachine/workadventure-play:v1.17.7d8f66979b9b4
nghttp2@1.36.0-2+deb10u1
1.36.0-2+deb10u3
thecodingmachine/workadventure-uploader:v1.17.73ccd467543b3
nghttp2@1.36.0-2+deb10u1
1.36.0-2+deb10u3

Open the chart page →

16,083
workshop-pipelinesworkshop-pipelines0.1.61 of 2See more

workshop-pipelines workshop-pipelines 0.1.6

1 of the 2 container images this version deploys carry CVE-2024-28182.

Container imageDigestPackageFixed in
quay.io/maximilianopizarro/workshop-pipelines:lateste383ba3e0966
nghttp2@1.33.0-3.el8_2.1
0:1.33.0-6.el8_10.1

Open the chart page →

11,592
tabbyxdVerified publisher1.0.61 of 2See more

tabby xd 1.0.6

1 of the 2 container images this version deploys carry CVE-2024-28182.

Container imageDigestPackageFixed in
library/nginx:1.25a484819eb602
nghttp2@1.52.0-1+deb12u1
1.52.0-1+deb12u2

Open the chart page →

7,685
xkopsxkops0.1.01 of 5See more

xkops xkops 0.1.0

1 of the 5 container images this version deploys carry CVE-2024-28182.

Container imageDigestPackageFixed in
murtazashah46/helmfile:latest4d11726cf803
nghttp2@1.52.0-1+deb12u1
1.52.0-1+deb12u2

Open the chart page →

13,197
keycloakxzaks2.2.01 of 1See more

keycloakx zaks 2.2.0

1 of the 1 container images this version deploys carry CVE-2024-28182.

Container imageDigestPackageFixed in
quay.io/keycloak/keycloak:20.0.3b8f2a453a17a
nghttp2@1.33.0-3.el8_2.1
0:1.33.0-6.el8_10.1

Open the chart page →

6,016
enterprise-gatewayzeet3.2.21 of 2See more

enterprise-gateway zeet 3.2.2

1 of the 2 container images this version deploys carry CVE-2024-28182.

Container imageDigestPackageFixed in
elyra/kernel-image-puller:3.2.2c922f1f1646a
nghttp2@1.43.0-1
1.43.0-1+deb11u2

Open the chart page →

1,838
posthogzeet0.23.21 of 9See more

posthog zeet 0.23.2

1 of the 9 container images this version deploys carry CVE-2024-28182.

Container imageDigestPackageFixed in
altinity/clickhouse-operator:0.19.07a85f522c5bc
nghttp2@1.33.0-3.el8_2.1
0:1.33.0-6.el8_10.1

Open the chart page →

3,697

Container images carrying it

1,142 by charts deploying them

A fixed version is listed for 2 of the 2 affected packages.

Container imageDigestPackageFixed inUsed by
assistiot/cybersecurity-monitoring_ir-thv:latestc8b6c7eaa0cd
nghttp2@1.43.0-1
1.43.0-1+deb11u2
1
assistiot/dlt_api:2.1.0c8a170683be7
nghttp2@1.36.0-2+deb10u1
1.36.0-2+deb10u3
1
assistiot/fl_orchestrator:dbmongo4-latestd157fbe150e3
nghttp2@1.40.0-1build1
1.40.0-1ubuntu0.3
1
assistiot/identity-manager_kc:latest0df4b4fa899a
nghttp2@1.33.0-3.el8_2.1
0:1.33.0-4.el8_6.2
1
assistiot/location_processing:lateste9bae124095f
nghttp2@1.43.0-1build3
1.43.0-1ubuntu0.2
1
assistiot/open_api_backend:1.1.230812ba93555
nghttp2@1.43.0-1ubuntu0.1
1.43.0-1ubuntu0.2
1
assistiot/resource-provisioning_prc:1.0.08b5d118bdf0e
nghttp2@1.43.0-1
1.43.0-1+deb11u2
1
assistiot/sdn_controller:2.4.0ea254b6d8a31
nghttp2@1.40.0-1ubuntu0.1
1.40.0-1ubuntu0.3
1
assistiot/smart-orchestrator_scheduler_mc:latestb1dbe4d62a03
nghttp2@1.52.0-1
1.52.0-1+deb12u2
1
assistiot/video_augmentation:runner-cpu-lateste5ae539ce2cb
nghttp2@1.40.0-1build1
1.40.0-1ubuntu0.3
1
atlassian/confluence-server:7.10.03b9222ab32ef
nghttp2@1.43.0-1build3
1.43.0-1ubuntu0.2
1
atlassian/jira-software:8.14.037bc46cbec1a
nghttp2@1.43.0-1ubuntu0.1
1.43.0-1ubuntu0.2
1
atomix/atomix:3.1.127738ff4f5c63
nghttp2@1.43.0-1
1.43.0-1+deb11u2
1
avinash263/pyredis263:latestaa2b8727f1a6
nghttp2@1.52.0-1
1.52.0-1+deb12u2
1
avzini/web-app:latestf40b30210ed0
nghttp2@1.52.0-1
1.52.0-1+deb12u2
1
azhar008/flaskapplication:latesta1e827b0adea
nghttp2@1.43.0-1
1.43.0-1+deb11u2
1
bastilimbach/docker-magicmirror:v2.15.041b0835ab31e
nghttp2@1.36.0-2+deb10u1
1.36.0-2+deb10u3
1
bbernhard/signal-cli-rest-api:0.57549ad08d7e14
nghttp2@1.40.0-1build1
1.40.0-1ubuntu0.3
1
benbusby/whoogle-search:0.5.4f77f7e6e4ad2
nghttp2@1.36.0-2+deb10u1
1.36.0-2+deb10u3
1
beopenit/door-helm:v3.0.1b4d9f9bee224
nghttp2@1.33.0-3.el8_2.1
0:1.33.0-5.el8_8.1
1
bicarus/mx-api-service:1.0.2-hf1dab88659ae3b
nghttp2@1.36.0-2+deb10u1
1.36.0-2+deb10u3
1
bitnamilegacy/elasticsearch:8.12.215d4647fd491
nghttp2@1.52.0-1+deb12u1
1.52.0-1+deb12u2
1
bitnamilegacy/elasticsearch:8.12.1-debian-11-r29cfd2df1294d
nghttp2@1.43.0-1+deb11u1
1.43.0-1+deb11u2
1
bitnamilegacy/jmx-exporter:0.16.1d81bfc40888f
nghttp2@1.36.0-2+deb10u1
1.36.0-2+deb10u3
1
bitnamilegacy/kafka:3.5.0-debian-11-r08657bb93a581
nghttp2@1.43.0-1
1.43.0-1+deb11u2
1
bitnamilegacy/kafka:3.4.0-debian-11-r6ac64829e45b3
nghttp2@1.43.0-1
1.43.0-1+deb11u2
1
bitnamilegacy/kafka:2.8.1-debian-11-r7b6e381ffd6ae
nghttp2@1.43.0-1
1.43.0-1+deb11u2
1
bitnamilegacy/kafka-exporter-archived:1.3.2e527fbf75dce
nghttp2@1.36.0-2+deb10u1
1.36.0-2+deb10u3
1
bitnamilegacy/keycloak:20.0.5cb04e49e6eb1
nghttp2@1.43.0-1
1.43.0-1+deb11u2
1
bitnamilegacy/keycloak:24.0.4cc599cbd15ff
nghttp2@1.52.0-1+deb12u1
1.52.0-1+deb12u2
1
bitnamilegacy/kubectl:1.18.850c5c23d5e8c
nghttp2@1.36.0-2+deb10u1
1.36.0-2+deb10u3
1
bitnamilegacy/kubectl:1.30.5744f84cf7493
nghttp2@1.52.0-1+deb12u1
1.52.0-1+deb12u2
1
bitnamilegacy/kubectl:1.22.13d0e426ccff33
nghttp2@1.43.0-1
1.43.0-1+deb11u2
1
bitnamilegacy/kubectl:1.29.3f5fc0d561d9e
nghttp2@1.52.0-1+deb12u1
1.52.0-1+deb12u2
1
bitnamilegacy/minio:2023.12.230b60b6565ab2
nghttp2@1.43.0-1+deb11u1
1.43.0-1+deb11u2
1
bitnamilegacy/minio:2022.12.12-debian-11-r90f7c8ac484ac
nghttp2@1.43.0-1
1.43.0-1+deb11u2
1
bitnamilegacy/minio:2024.8.3-debian-12-r15501c419f42e
nghttp2@1.52.0-1+deb12u1
1.52.0-1+deb12u2
1
bitnamilegacy/minio:2023.12.23-debian-11-r25bb0aa825d16
nghttp2@1.43.0-1+deb11u1
1.43.0-1+deb11u2
1
bitnamilegacy/minio:2024.7.4-debian-12-r0952f86d1116c
nghttp2@1.52.0-1+deb12u1
1.52.0-1+deb12u2
1
bitnamilegacy/mongodb:7.0.14-debian-12-r321e8f8baa432
nghttp2@1.52.0-1+deb12u1
1.52.0-1+deb12u2
1
bitnamilegacy/mongodb:7.0.8-debian-12-r23163c3842bfd
nghttp2@1.52.0-1+deb12u1
1.52.0-1+deb12u2
1
bitnamilegacy/mongodb:5.0.103bb1deeaf9d0
nghttp2@1.43.0-1
1.43.0-1+deb11u2
1
bitnamilegacy/mongodb:7.0.5-debian-11-r66fe59ed5d79f
nghttp2@1.43.0-1+deb11u1
1.43.0-1+deb11u2
1
bitnamilegacy/mongodb:4.4.5e3c9d6b4bc92
nghttp2@1.36.0-2+deb10u1
1.36.0-2+deb10u3
1
bitnamilegacy/mysqld-exporter:0.13.0a7e14cc919cb
nghttp2@1.36.0-2+deb10u1
1.36.0-2+deb10u3
1
bitnamilegacy/opensearch:2.18.0-debian-12-r0d8440eb6b290
nghttp2@1.52.0-1+deb12u1
1.52.0-1+deb12u2
1
bitnamilegacy/os-shell:12-debian-12-r3217444b4b2c96
nghttp2@1.52.0-1+deb12u1
1.52.0-1+deb12u2
1
bitnamilegacy/os-shell:11-debian-11-r968643af4facff
nghttp2@1.43.0-1+deb11u1
1.43.0-1+deb11u2
1
bitnamilegacy/os-shell:12-debian-12-r16d24925821dd2
nghttp2@1.52.0-1+deb12u1
1.52.0-1+deb12u2
1
bitnamilegacy/postgresql:11.8.0c3f10b41989f
nghttp2@1.36.0-2+deb10u1
1.36.0-2+deb10u3
1

syft 1.42.1 · advisories as of 15 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.