StackRadar

CVE-2026-27135

High

Advisory

Published 18 Mar 2026In the index since 5 Sept 2026
Severity
High
worst across findings
CVSS
7.5
base score, highest
EPSS
0.008
54th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
1,451
of 17,790 indexed, latest versions
Container images
1,503
deployed by those charts
Fix available
3 of 3
affected packages

Red Hat Security Advisory: nghttp2 security update

Carried by container images the latest versions of 1,451 of 17,790 indexed charts deploy, on 1,503 images.

Affected packageAffected versionsFixed inImages
nghttp2deb1.30.0-1ubuntu1, 1.40.0-1build1, 1.40.0-1ubuntu0.1, 1.40.0-1ubuntu0.2+11 more1.30.0-1ubuntu1+esm3, 1.40.0-1ubuntu0.3+esm1, 1.43.0-1ubuntu0.3, 1.52.0-1+deb12u3+3 more935
nghttp2rpm1.33.0-1.el8, 1.33.0-1.el8_0.1, 1.33.0-3.el8_2.1, 1.33.0-3.el8_2.2+13 more0:1.33.0-6.el8_10.2, 0:1.43.0-6.el9_7.1, 0:1.64.0-2.el10_1.1, 1.64.0-150700.3.3.1+1 more322
nghttp2apk1.57.0-r0, 1.64.0-r0, 1.65.0-r0, 1.68.0-r01.68.1246
OSV records
ALPINE-CVE-2026-27135DEBIAN-CVE-2026-27135RHSA-2026:7666RHSA-2026:7667RHSA-2026:7668RLSA-2026:7667RLSA-2026:7668UBUNTU-CVE-2026-27135openSUSE-SU-2026:10437-1SUSE-SU-2026:1074-1
Also known as
RHSA-2026:8538, RHSA-2026:8539, RHSA-2026:8540, RHSA-2026:8541, RHSA-2026:8545, RHSA-2026:8547, RHSA-2026:8548, USN-8233-1

Charts affected

1,451 by stars
ChartLatestAffected imagesRadar Score
novosgamarcusrepo0.1.11 of 2See more

novosga marcusrepo 0.1.1

1 of the 2 container images this version deploys carry CVE-2026-27135.

Container imageDigestPackageFixed in
novosga/novosga:latest34b9acbe6e51
nghttp2@1.68.0-r0
1.68.1

Open the chart page →

3,713
marge-botmarge-bot-helm1.3.51 of 1See more

marge-bot marge-bot-helm 1.3.5

1 of the 1 container images this version deploys carry CVE-2026-27135.

Container imageDigestPackageFixed in
hiboxsystems/marge-bot:0.16.0b59f01bc0418
nghttp2@1.64.0-1.1
1.64.0-1.1+deb13u1

Open the chart page →

3,597
circleci-runnermatic-insurance0.1.11 of 1See more

circleci-runner matic-insurance 0.1.1

1 of the 1 container images this version deploys carry CVE-2026-27135.

Container imageDigestPackageFixed in
circleci/runner:launch-agent9bdc62f02162
nghttp2@1.40.0-1ubuntu0.3
1.40.0-1ubuntu0.3+esm1

Open the chart page →

4,152
eoloplantmca-eoloplaner0.1.03 of 7See more

eoloplant mca-eoloplaner 0.1.0

3 of the 7 container images this version deploys carry CVE-2026-27135.

Container imageDigestPackageFixed in
codeurjc/weatherservice:v1.0b9e2f7234349
nghttp2@1.33.0-3.el8_2.1
0:1.33.0-6.el8_10.2
hugohg34/toposervice:0.0.2812a03b3f274
nghttp2@1.40.0-1build1
1.40.0-1ubuntu0.3+esm1
library/mongo:5.0.6-focal8e70544b6c76
nghttp2@1.40.0-1build1
1.40.0-1ubuntu0.3+esm1

Open the chart page →

29,746
cloud-native-javamcouliba0.1.01 of 1See more

cloud-native-java mcouliba 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-27135.

Container imageDigestPackageFixed in
quay.io/mcouliba/quarkus-serverless:1.0c2851757eca4
nghttp2@1.33.0-1.el8_0.1
0:1.33.0-6.el8_10.2

Open the chart page →

4,979
backstagemcwarmanVerified publisher0.10.101 of 2See more

backstage mcwarman 0.10.10

1 of the 2 container images this version deploys carry CVE-2026-27135.

Container imageDigestPackageFixed in
ghcr.io/mcwarman/backstage-sample-app/app:mainfae3c1f04311
nghttp2@1.64.0-1.1
1.64.0-1.1+deb13u1

Open the chart page →

9,765
dependency-trackmediamarktsaturn1.9.22 of 2See more

dependency-track mediamarktsaturn 1.9.2

2 of the 2 container images this version deploys carry CVE-2026-27135.

Container imageDigestPackageFixed in
dependencytrack/apiserver:4.14.21ba4f004e1ec
nghttp2@1.64.0-1.1
1.64.0-1.1+deb13u1
dependencytrack/frontend:4.14.200560b57a6cf
nghttp2@1.68.0-r0
1.68.1

Open the chart page →

3,840
tinymediamanagermedia-servarrVerified publisher1.6.21 of 2See more

tinymediamanager media-servarr 1.6.2

1 of the 2 container images this version deploys carry CVE-2026-27135.

Container imageDigestPackageFixed in
tinymediamanager/tinymediamanager:5.3.22b34dc85099e
nghttp2@1.64.0-1.1
1.64.0-1.1+deb13u1

Open the chart page →

8,147
meerschaummeerschaumVerified publisher0.2.01 of 1See more

meerschaum meerschaum 0.2.0

1 of the 1 container images this version deploys carry CVE-2026-27135.

Container imageDigestPackageFixed in
bmeares/meerschaum:2.8.48e9c5bacaa82
nghttp2@1.52.0-1+deb12u2
1.52.0-1+deb12u3

Open the chart page →

5,886
istiomesosphere1.25.11 of 2See more

istio mesosphere 1.25.1

1 of the 2 container images this version deploys carry CVE-2026-27135.

Container imageDigestPackageFixed in
bitnamilegacy/kubectl:1.29.2c74b703deed2
nghttp2@1.52.0-1+deb12u1
1.52.0-1+deb12u3

Open the chart page →

5,455
istio-helm-cnimesosphere1.25.11 of 1See more

istio-helm-cni mesosphere 1.25.1

1 of the 1 container images this version deploys carry CVE-2026-27135.

Container imageDigestPackageFixed in
istio/install-cni:1.29.0ce27c9ce43c8
nghttp2@1.59.0-1ubuntu0.2
1.59.0-1ubuntu0.3

Open the chart page →

2,584
istio-helm-istiodmesosphere1.25.12 of 2See more

istio-helm-istiod mesosphere 1.25.1

2 of the 2 container images this version deploys carry CVE-2026-27135.

Container imageDigestPackageFixed in
istio/pilot:1.29.0325156535773
nghttp2@1.59.0-1ubuntu0.2
1.59.0-1ubuntu0.3
mesosphere/kubectl:v1.35.0-alpineea01a9387771
nghttp2@1.65.0-r0
1.68.1

Open the chart page →

3,829
kubeaddons-catalogmesosphere0.1.161 of 2See more

kubeaddons-catalog mesosphere 0.1.16

1 of the 2 container images this version deploys carry CVE-2026-27135.

Container imageDigestPackageFixed in
mesosphere/kubeaddons-catalog:v0.11.4073db43d0b8b
nghttp2@1.40.0-1build1
1.40.0-1ubuntu0.3+esm1

Open the chart page →

12,052
kube-prometheus-stackmesosphere87.16.01 of 7See more

kube-prometheus-stack mesosphere 87.16.0

1 of the 7 container images this version deploys carry CVE-2026-27135.

Container imageDigestPackageFixed in
bitnamilegacy/kubectl:1.29.2c74b703deed2
nghttp2@1.52.0-1+deb12u1
1.52.0-1+deb12u3

Open the chart page →

7,452
prometheus-operatormesosphere12.11.131 of 8See more

prometheus-operator mesosphere 12.11.13

1 of the 8 container images this version deploys carry CVE-2026-27135.

Container imageDigestPackageFixed in
grafana/grafana:12.3.39e1e77ade304
nghttp2@1.68.0-r0
1.68.1

Open the chart page →

11,704
dexmesosphere-stable2.14.11 of 5See more

dex mesosphere-stable 2.14.1

1 of the 5 container images this version deploys carry CVE-2026-27135.

Container imageDigestPackageFixed in
bitnamilegacy/kubectl:1.29.2c74b703deed2
nghttp2@1.52.0-1+deb12u1
1.52.0-1+deb12u3

Open the chart page →

19,270
istiomesosphere-stable1.25.11 of 2See more

istio mesosphere-stable 1.25.1

1 of the 2 container images this version deploys carry CVE-2026-27135.

Container imageDigestPackageFixed in
bitnamilegacy/kubectl:1.29.2c74b703deed2
nghttp2@1.52.0-1+deb12u1
1.52.0-1+deb12u3

Open the chart page →

5,455
istio-helm-cnimesosphere-stable1.23.61 of 1See more

istio-helm-cni mesosphere-stable 1.23.6

1 of the 1 container images this version deploys carry CVE-2026-27135.

Container imageDigestPackageFixed in
istio/install-cni:1.23.6ab34c4740f44
nghttp2@1.59.0-1ubuntu0.2
1.59.0-1ubuntu0.3

Open the chart page →

3,335
istio-helm-istiodmesosphere-stable1.23.62 of 2See more

istio-helm-istiod mesosphere-stable 1.23.6

2 of the 2 container images this version deploys carry CVE-2026-27135.

Container imageDigestPackageFixed in
istio/pilot:1.23.69c3d6a218181
nghttp2@1.59.0-1ubuntu0.2
1.59.0-1ubuntu0.3
mesosphere/kubectl:v1.35.0-alpineea01a9387771
nghttp2@1.65.0-r0
1.68.1

Open the chart page →

4,656
kommandermesosphere-stable0.39.21 of 29See more

kommander mesosphere-stable 0.39.2

1 of the 29 container images this version deploys carry CVE-2026-27135.

Container imageDigestPackageFixed in
mesosphere/kubeaddons-catalog:v0.11.4073db43d0b8b
nghttp2@1.40.0-1build1
1.40.0-1ubuntu0.3+esm1

Open the chart page →

68,417
kube-prometheus-stackmesosphere-stable75.9.12 of 7See more

kube-prometheus-stack mesosphere-stable 75.9.1

2 of the 7 container images this version deploys carry CVE-2026-27135.

Container imageDigestPackageFixed in
bitnamilegacy/kubectl:1.29.2c74b703deed2
nghttp2@1.52.0-1+deb12u1
1.52.0-1+deb12u3
grafana/grafana:12.0.2b5b59bfc7561
nghttp2@1.64.0-r0
1.68.1

Open the chart page →

10,227
metabase-k8smetabase-k8s1.0.01 of 1See more

metabase-k8s metabase-k8s 1.0.0

1 of the 1 container images this version deploys carry CVE-2026-27135.

Container imageDigestPackageFixed in
metabase/metabase:v0.53.4.17807bc5cad17
nghttp2@1.64.0-r0
1.68.1

Open the chart page →

2,589
istio-operatormetakube1.12.01 of 1See more

istio-operator metakube 1.12.0

1 of the 1 container images this version deploys carry CVE-2026-27135.

Container imageDigestPackageFixed in
istio/operator:1.12.06cfce8a071b9
nghttp2@1.40.0-1build1
1.40.0-1ubuntu0.3+esm1

Open the chart page →

8,950
elasticmicroboxlabs0.3.01 of 1See more

elastic microboxlabs 0.3.0

1 of the 1 container images this version deploys carry CVE-2026-27135.

Container imageDigestPackageFixed in
library/elasticsearch:8.17.32cc40b15dff8
nghttp2@1.40.0-1ubuntu0.3
1.40.0-1ubuntu0.3+esm1

Open the chart page →

4,297
miot-calendarmicroboxlabs0.1.01 of 1See more

miot-calendar microboxlabs 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-27135.

Container imageDigestPackageFixed in
ghcr.io/microboxlabs/miot-calendar:latest-jvm7157cdc0bf5b
nghttp2@1.43.0-6.el9
0:1.43.0-6.el9_7.1

Open the chart page →

1,970
miot-modulithmicroboxlabs0.6.01 of 1See more

miot-modulith microboxlabs 0.6.0

1 of the 1 container images this version deploys carry CVE-2026-27135.

Container imageDigestPackageFixed in
ghcr.io/microboxlabs/miot-srv:latest5796553b41ae
nghttp2@1.43.0-6.el9
0:1.43.0-6.el9_7.1

Open the chart page →

1,447
modulariotmicroboxlabs0.9.01 of 4See more

modulariot microboxlabs 0.9.0

1 of the 4 container images this version deploys carry CVE-2026-27135.

Container imageDigestPackageFixed in
ghcr.io/microboxlabs/miot-srv:latest4ec11d229028
nghttp2@1.43.0-6.el9
0:1.43.0-6.el9_7.1

Open the chart page →

2,291
microcks-operatormicrocksVerified publisher0.0.111 of 1See more

microcks-operator microcks 0.0.11

1 of the 1 container images this version deploys carry CVE-2026-27135.

Container imageDigestPackageFixed in
quay.io/microcks/microcks-operator:0.0.1196d1054d4a61
nghttp2@1.43.0-6.el9
0:1.43.0-6.el9_7.1

Open the chart page →

1,279
alluremidokura-communityVerified publisher0.1.31 of 2See more

allure midokura-community 0.1.3

1 of the 2 container images this version deploys carry CVE-2026-27135.

Container imageDigestPackageFixed in
frankescobar/allure-docker-service:2.19.0cafa03b94dac
nghttp2@1.30.0-1ubuntu1
1.30.0-1ubuntu1+esm3

Open the chart page →

12,858
folding-at-homemidokura-communityVerified publisher0.0.31 of 1See more

folding-at-home midokura-community 0.0.3

1 of the 1 container images this version deploys carry CVE-2026-27135.

Container imageDigestPackageFixed in
linuxserver/foldingathome:7.6.219a997426d71e
nghttp2@1.59.0-1ubuntu0.1
1.59.0-1ubuntu0.3

Open the chart page →

2,943
unifimidokura-communityVerified publisher0.0.61 of 1See more

unifi midokura-community 0.0.6

1 of the 1 container images this version deploys carry CVE-2026-27135.

Container imageDigestPackageFixed in
linuxserver/unifi-controller:7.3.83ab105cc50322
nghttp2@1.40.0-1build1
1.40.0-1ubuntu0.3+esm1

Open the chart page →

11,281
teimilvus-helm1.6.01 of 1See more

tei milvus-helm 1.6.0

1 of the 1 container images this version deploys carry CVE-2026-27135.

Container imageDigestPackageFixed in
ghcr.io/huggingface/text-embeddings-inference:cpu-1.666db77d7856c
nghttp2@1.52.0-1+deb12u2
1.52.0-1+deb12u3

Open the chart page →

3,301
mini-blogmini-blog-helm0.1.02 of 3See more

mini-blog mini-blog-helm 0.1.0

2 of the 3 container images this version deploys carry CVE-2026-27135.

Container imageDigestPackageFixed in
beyzkaya/blog-backend:v1.0.112a6a3d1c5f9
nghttp2@1.52.0-1+deb12u2
1.52.0-1+deb12u3
beyzkaya/blog-frontend:v1.0.0bf412d75c510
nghttp2@1.65.0-r0
1.68.1

Open the chart page →

13,107
minio-operatorminio-operator4.3.71 of 2See more

minio-operator minio-operator 4.3.7

1 of the 2 container images this version deploys carry CVE-2026-27135.

Container imageDigestPackageFixed in
minio/operator:v4.3.754393e03f3b2
nghttp2@1.33.0-3.el8_2.1
0:1.33.0-6.el8_10.2

Open the chart page →

6,085
MINTmint8.0.22 of 15See more

MINT mint 8.0.2

2 of the 15 container images this version deploys carry CVE-2026-27135.

Container imageDigestPackageFixed in
mintproject/graphql-engine:305c0dbeba1878eafe348f21fc300fbfc017d9dc83aade2c1855
nghttp2@1.40.0-1ubuntu0.3
1.40.0-1ubuntu0.3+esm1
mintproject/model-catalog-fastapi:7dd88dc5bf1fe6a6d4703ea0a077afee45cb256102260d20a21f
nghttp2@1.52.0-1+deb12u2
1.52.0-1+deb12u3

Open the chart page →

43,532
cockroachdb-operatormmontesVerified publisher0.1.01 of 1See more

cockroachdb-operator mmontes 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-27135.

Container imageDigestPackageFixed in
cockroachdb/cockroach-operator:v2.1.0983312754620
nghttp2@1.33.0-3.el8_2.1
0:1.33.0-6.el8_10.2

Open the chart page →

7,782
mongodbmmontesVerified publisher0.5.01 of 1See more

mongodb mmontes 0.5.0

1 of the 1 container images this version deploys carry CVE-2026-27135.

Container imageDigestPackageFixed in
library/mongo:4.4.1305678ae4e5e1
nghttp2@1.40.0-1build1
1.40.0-1ubuntu0.3+esm1

Open the chart page →

7,151
reporting-nifi-processor-svcmojaloop0.0.21 of 3See more

reporting-nifi-processor-svc mojaloop 0.0.2

1 of the 3 container images this version deploys carry CVE-2026-27135.

Container imageDigestPackageFixed in
library/mongo:6.0.271a63fc2438e
nghttp2@1.40.0-1build1
1.40.0-1ubuntu0.3+esm1

Open the chart page →

6,224
mollysocketmollysocket-wrenixVerified publisher0.1.141 of 2See more

mollysocket mollysocket-wrenix 0.1.14

1 of the 2 container images this version deploys carry CVE-2026-27135.

Container imageDigestPackageFixed in
alpine/kubectl:1.35.3c4a11ae9a1cb
nghttp2@1.68.0-r0
1.68.1

Open the chart page →

2,540
mongodb-admin-interfacemongo-db-admin-interfaceVerified publisher0.1.01 of 2See more

mongodb-admin-interface mongo-db-admin-interface 0.1.0

1 of the 2 container images this version deploys carry CVE-2026-27135.

Container imageDigestPackageFixed in
library/mongo:5.041108d183e97
nghttp2@1.40.0-1ubuntu0.3
1.40.0-1ubuntu0.3+esm1

Open the chart page →

5,220
enterprise-operatormongodb-helm-charts1.33.01 of 1See more

enterprise-operator mongodb-helm-charts 1.33.0

1 of the 1 container images this version deploys carry CVE-2026-27135.

Container imageDigestPackageFixed in
quay.io/mongodb/mongodb-enterprise-operator-ubi:1.33.0b05101723412
nghttp2@1.43.0-6.el9
0:1.43.0-6.el9_7.1

Open the chart page →

1,562
mongopingmongoping1.3.11 of 1See more

mongoping mongoping 1.3.1

1 of the 1 container images this version deploys carry CVE-2026-27135.

Container imageDigestPackageFixed in
udhos/mongoping:1.3.103b08b63f524
nghttp2@1.64.0-r0
1.68.1

Open the chart page →

1,137
camera-viewermoreillonVerified publisher0.2.12 of 4See more

camera-viewer moreillon 0.2.1

2 of the 4 container images this version deploys carry CVE-2026-27135.

Container imageDigestPackageFixed in
library/kong:3.6a42d2b4503e7
nghttp2@1.43.0-1ubuntu0.2
1.43.0-1ubuntu0.3
moreillon/camera-viewer:lateste418cc694bd5
nghttp2@1.52.0-1+deb12u2
1.52.0-1+deb12u3

Open the chart page →

11,708
group-managermoreillonVerified publisher0.4.42 of 3See more

group-manager moreillon 0.4.4

2 of the 3 container images this version deploys carry CVE-2026-27135.

Container imageDigestPackageFixed in
library/kong:3.6a42d2b4503e7
nghttp2@1.43.0-1ubuntu0.2
1.43.0-1ubuntu0.3
moreillon/group-manager-front:v3.3.1c9f85db3baa5
nghttp2@1.52.0-1+deb12u1
1.52.0-1+deb12u3

Open the chart page →

9,900
mqtt-loggermoreillonVerified publisher0.3.11 of 5See more

mqtt-logger moreillon 0.3.1

1 of the 5 container images this version deploys carry CVE-2026-27135.

Container imageDigestPackageFixed in
library/kong:3.6a42d2b4503e7
nghttp2@1.43.0-1ubuntu0.2
1.43.0-1ubuntu0.3

Open the chart page →

11,008
user-manager-mongodbmoreillonVerified publisher0.6.23 of 4See more

user-manager-mongodb moreillon 0.6.2

3 of the 4 container images this version deploys carry CVE-2026-27135.

Container imageDigestPackageFixed in
library/kong:3.6a42d2b4503e7
nghttp2@1.43.0-1ubuntu0.2
1.43.0-1ubuntu0.3
moreillon/user-manager-front:v5.0.3b067dbbbb6af
nghttp2@1.52.0-1
1.52.0-1+deb12u3
moreillon/user-manager-mongoose:v5.0.1d2ee0423b797
nghttp2@1.52.0-1
1.52.0-1+deb12u3

Open the chart page →

25,844
user-manager-neo4jmoreillonVerified publisher0.9.74 of 6See more

user-manager-neo4j moreillon 0.9.7

4 of the 6 container images this version deploys carry CVE-2026-27135.

Container imageDigestPackageFixed in
library/kong:3.6a42d2b4503e7
nghttp2@1.43.0-1ubuntu0.2
1.43.0-1ubuntu0.3
moreillon/group-manager-front:v3.3.1c9f85db3baa5
nghttp2@1.52.0-1+deb12u1
1.52.0-1+deb12u3
moreillon/user-manager:v5.0.2e1c9bfab5c16
nghttp2@1.52.0-1
1.52.0-1+deb12u3
moreillon/user-manager-front:v5.1.06597e6b98d21
nghttp2@1.52.0-1+deb12u1
1.52.0-1+deb12u3

Open the chart page →

30,524
genericmorremeyer8.0.01 of 1See more

generic morremeyer 8.0.0

1 of the 1 container images this version deploys carry CVE-2026-27135.

Container imageDigestPackageFixed in
library/nginx:1.25.167f9a4f10d14
nghttp2@1.52.0-1
1.52.0-1+deb12u3

Open the chart page →

6,877
chirpstackmosquitto-helm-chart0.5.01 of 8See more

chirpstack mosquitto-helm-chart 0.5.0

1 of the 8 container images this version deploys carry CVE-2026-27135.

Container imageDigestPackageFixed in
apachepulsar/pulsar:2.9.0d056c89b7131
nghttp2@1.40.0-1build1
1.40.0-1ubuntu0.3+esm1

Open the chart page →

26,022
pulsarmosquitto-helm-chart0.2.01 of 1See more

pulsar mosquitto-helm-chart 0.2.0

1 of the 1 container images this version deploys carry CVE-2026-27135.

Container imageDigestPackageFixed in
apachepulsar/pulsar:2.10.03b262ab7a7d9
nghttp2@1.40.0-1build1
1.40.0-1ubuntu0.3+esm1

Open the chart page →

15,727

Container images carrying it

1,503 by charts deploying them

A fixed version is listed for 3 of the 3 affected packages.

Container imageDigestPackageFixed inUsed by
opea/docsum-ui:1.07f854e9bffaf
nghttp2@1.52.0-1+deb12u1
1.52.0-1+deb12u3
1
opea/speecht5:1.0249afad3d268
nghttp2@1.52.0-1+deb12u1
1.52.0-1+deb12u3
1
openbas/caldera-server:5.1.0a277796d9724
nghttp2@1.52.0-1+deb12u2
1.52.0-1+deb12u3
1
openbas/platform:2.0.5d986d80b0a75
nghttp2@1.59.0-1ubuntu0.2
1.59.0-1ubuntu0.3
1
opencsghq/csghub-server:v2.4.0-ee302c9d45d8a8
nghttp2@1.52.0-1+deb12u2
1.52.0-1+deb12u3
1
opencsghq/csghub-xnet:v2.4.0-ee04121fd19ef9
nghttp2@1.52.0-1+deb12u2
1.52.0-1+deb12u3
1
opencsghq/csgship-portal:v1.2.1865814dc87a1
nghttp2@1.64.0-r0
1.68.1
1
opencsghq/gitlab-gitaly:v17.5.0bdd2c58b9744
nghttp2@1.52.0-1+deb12u1
1.52.0-1+deb12u3
1
opencsghq/gitlab-shell:v17.5.0f6d7e7d6be5d
nghttp2@1.52.0-1+deb12u1
1.52.0-1+deb12u3
1
opencsghq/kubectl:latestb6d87e1048c2
nghttp2@1.52.0-1+deb12u2
1.52.0-1+deb12u3
1
opendatacube/explorer:latest120457ffcd69
nghttp2@1.59.0-1ubuntu0.2
1.59.0-1ubuntu0.3
1
opendatacube/pipelines:wofs-1.225d810e8504b8
nghttp2@1.30.0-1ubuntu1
1.30.0-1ubuntu1+esm3
1
opendatacube/restcube:latest91870111837c
nghttp2@1.30.0-1ubuntu1
1.30.0-1ubuntu1+esm3
1
opendatacube/wms:latest1b90cdf68831
nghttp2@1.30.0-1ubuntu1
1.30.0-1ubuntu1+esm3
1
opendatacube/wps:latest80df355a660b
nghttp2@1.43.0-1ubuntu0.2
1.43.0-1ubuntu0.3
1
openelevation/open-elevation:latest82fb21612e86
nghttp2@1.40.0-1build1
1.40.0-1ubuntu0.3+esm1
1
openkm/openkm-ce:6.3.113bc465a7461b
nghttp2@1.40.0-1build1
1.40.0-1ubuntu0.3+esm1
1
openproject/hocuspocus:release-338001b288dc1359dfb5
nghttp2@1.52.0-1+deb12u2
1.52.0-1+deb12u3
1
opensearchproject/logstash-oss-with-opensearch-output-plugin:8.9.043b0cdaf26ed
nghttp2@1.40.0-1ubuntu0.1
1.40.0-1ubuntu0.3+esm1
1
openstackhelm/heat:wallaby-ubuntu_focalf728510bab3c
nghttp2@1.40.0-1ubuntu0.1
1.40.0-1ubuntu0.3+esm1
1
openstackhelm/keystone:wallaby-ubuntu_focale07d75953d2e
nghttp2@1.40.0-1ubuntu0.1
1.40.0-1ubuntu0.3+esm1
1
openthread/otbr:latestf307f59f6432
nghttp2@1.30.0-1ubuntu1
1.30.0-1ubuntu1+esm3
1
openvino/model_server:2025.2.11e7cd1d70cc1
nghttp2@1.59.0-1ubuntu0.2
1.59.0-1ubuntu0.3
1
openwhisk/ow-utils:1.0.0c80dba0de3aa
nghttp2@1.30.0-1ubuntu1
1.30.0-1ubuntu1+esm3
1
operaton/operaton:1.0.0-beta-4b35867ffe4d8
nghttp2@1.64.0-r0
1.68.1
1
orbitalreg/orbitalreg-frontend:0.1.04fd449582a3c
nghttp2@1.64.0-r0
1.68.1
1
owncloud/ocis:8.0.1b38fd8fdd58f
nghttp2@1.68.0-r0
1.68.1
1
owncloud/server:10.15.051d9b74fc2a8
nghttp2@1.40.0-1ubuntu0.3
1.40.0-1ubuntu0.3+esm1
1
oxfordsemantic/rdfox:5.6db17910eb855
nghttp2@1.40.0-1build1
1.40.0-1ubuntu0.3+esm1
1
oxfordsemantic/rdfox-init:5.6baf570ff968d
nghttp2@1.40.0-1build1
1.40.0-1ubuntu0.3+esm1
1
penpotapp/backend:2.2.147853d9bb9dd
nghttp2@1.43.0-1ubuntu0.2
1.43.0-1ubuntu0.3
1
penpotapp/exporter:2.2.15c835ffd87ab
nghttp2@1.43.0-1ubuntu0.2
1.43.0-1ubuntu0.3
1
percona/percona-postgresql-operator:2.8.06cce2698d3f5
nghttp2@1.43.0-6.el9
0:1.43.0-6.el9_7.1
1
percona/percona-server-mongodb-operator:1.20.1d09453ce7886
nghttp2@1.43.0-6.el9
0:1.43.0-6.el9_7.1
1
percona/percona-xtradb-cluster:8.0.32-24.21f978ab8912e
nghttp2@1.33.0-3.el8_2.1
0:1.33.0-6.el8_10.2
1
percona/percona-xtradb-cluster-operator:1.14.03232ae01d0ff
nghttp2@1.43.0-5.el9_3.1
0:1.43.0-6.el9_7.1
1
peterdavehello/tor-socks-proxy:latest0cc12d36d312
nghttp2@1.68.0-r0
1.68.1
1
phan2410/falcon-asgi-server:0.1.04a86d138832d
nghttp2@1.52.0-1+deb12u2
1.52.0-1+deb12u3
1
phntom/mattermost-team-edition:9.3.051cf9da4aa2e
nghttp2@1.43.0-1ubuntu0.1
1.43.0-1ubuntu0.3
1
photoprism/photoprism:220629-jammy2954334adbda
nghttp2@1.43.0-1build3
1.43.0-1ubuntu0.3
1
photoprism/photoprism:251130db16ee6b1ba3
nghttp2@1.64.0-1.1ubuntu1
1.64.0-1.1ubuntu1.1
1
photoprism/photoprism:240711-cefc6fd632ca74
nghttp2@1.59.0-1ubuntu0.1
1.59.0-1ubuntu0.3
1
phpmyadmin/phpmyadmin:5.2.342a200db07b4
nghttp2@1.64.0-1.1
1.64.0-1.1+deb13u1
1
pk910/powfaucet:v2-stable3dcae6a62896
nghttp2@1.52.0-1+deb12u2
1.52.0-1+deb12u3
1
plantuml/plantuml-server:jetty-v1.2026.85f6f99ec2fc1
nghttp2@1.59.0-1ubuntu0.2
1.59.0-1ubuntu0.3
1
plexinc/pms-docker:1.25.4.5487-648a8f9f946ea59b96f2b
nghttp2@1.40.0-1build1
1.40.0-1ubuntu0.3+esm1
1
pmoscode/excalidraw:v0.18.08ee61554699c
nghttp2@1.65.0-r0
1.68.1
1
pnnlmiscscripts/gitlab-runner-operator:0.1.3-1155131891741
nghttp2@1.33.0-1.el8_0.1
0:1.33.0-6.el8_10.2
1
pnnlmiscscripts/ipmi-exporter:1.2.0-181e18992d8e3
nghttp2@1.33.0-5.el8_8
0:1.33.0-6.el8_10.2
1
pnnlmiscscripts/tenant-namespace-operator:0.1.24-18af4b7551d40
nghttp2@1.33.0-3.el8_2.1
0:1.33.0-6.el8_10.2
1

syft 1.42.1 · advisories as of 16 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.