StackRadar

CVE-2026-27135

High

Advisory

Published 18 Mar 2026In the index since 5 Sept 2026
Severity
High
worst across findings
CVSS
7.5
base score, highest
EPSS
0.008
54th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
1,451
of 17,790 indexed, latest versions
Container images
1,503
deployed by those charts
Fix available
3 of 3
affected packages

Red Hat Security Advisory: nghttp2 security update

Carried by container images the latest versions of 1,451 of 17,790 indexed charts deploy, on 1,503 images.

Affected packageAffected versionsFixed inImages
nghttp2deb1.30.0-1ubuntu1, 1.40.0-1build1, 1.40.0-1ubuntu0.1, 1.40.0-1ubuntu0.2+11 more1.30.0-1ubuntu1+esm3, 1.40.0-1ubuntu0.3+esm1, 1.43.0-1ubuntu0.3, 1.52.0-1+deb12u3+3 more935
nghttp2rpm1.33.0-1.el8, 1.33.0-1.el8_0.1, 1.33.0-3.el8_2.1, 1.33.0-3.el8_2.2+13 more0:1.33.0-6.el8_10.2, 0:1.43.0-6.el9_7.1, 0:1.64.0-2.el10_1.1, 1.64.0-150700.3.3.1+1 more322
nghttp2apk1.57.0-r0, 1.64.0-r0, 1.65.0-r0, 1.68.0-r01.68.1246
OSV records
ALPINE-CVE-2026-27135DEBIAN-CVE-2026-27135RHSA-2026:7666RHSA-2026:7667RHSA-2026:7668RLSA-2026:7667RLSA-2026:7668UBUNTU-CVE-2026-27135openSUSE-SU-2026:10437-1SUSE-SU-2026:1074-1
Also known as
RHSA-2026:8538, RHSA-2026:8539, RHSA-2026:8540, RHSA-2026:8541, RHSA-2026:8545, RHSA-2026:8547, RHSA-2026:8548, USN-8233-1

Charts affected

1,451 by stars
ChartLatestAffected imagesRadar Score
hdx-oss-v2hdx-oss-v20.8.41 of 5See more

hdx-oss-v2 hdx-oss-v2 0.8.4

1 of the 5 container images this version deploys carry CVE-2026-27135.

Container imageDigestPackageFixed in
library/mongo:5.0.14-focal50cae5081ab4
nghttp2@1.40.0-1build1
1.40.0-1ubuntu0.3+esm1

Open the chart page →

6,751
heliconehelicone0.1.422 of 14See more

helicone helicone 0.1.42

2 of the 14 container images this version deploys carry CVE-2026-27135.

Container imageDigestPackageFixed in
helicone/clickhouse-migration-runner:v2025.03.05-14c69b971a7e4
nghttp2@1.40.0-1ubuntu0.3
1.40.0-1ubuntu0.3+esm1
helicone/supabase-migration-runner:v2025.03.05-14a913936c97b
nghttp2@1.52.0-1
1.52.0-1+deb12u3

Open the chart page →

25,183
helixhelix1.4.32 of 2See more

helix helix 1.4.3

2 of the 2 container images this version deploys carry CVE-2026-27135.

Container imageDigestPackageFixed in
quay.io/jupyterhub/configurable-http-proxy:5.2.0522738d5285e
nghttp2@1.68.0-r0
1.68.1
quay.io/jupyterhub/k8s-hub:4.3.492f883d09270
nghttp2@1.52.0-1+deb12u2
1.52.0-1+deb12u3

Open the chart page →

5,586
hello-worldhello-world-pponyVerified publisher0.3.01 of 1See more

hello-world hello-world-ppony 0.3.0

1 of the 1 container images this version deploys carry CVE-2026-27135.

Container imageDigestPackageFixed in
library/nginx:1.25.49ff236ed47fe
nghttp2@1.52.0-1+deb12u1
1.52.0-1+deb12u3

Open the chart page →

5,862
7dtdhelm-7dtd0.1.01 of 1See more

7dtd helm-7dtd 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-27135.

Container imageDigestPackageFixed in
vinanrra/7dtd-server:v0.4.4f9534490bd2b
nghttp2@1.30.0-1ubuntu1
1.30.0-1ubuntu1+esm3

Open the chart page →

10,673
pageshelm-chart-repos-camden1.0.02 of 3See more

pages helm-chart-repos-camden 1.0.0

2 of the 3 container images this version deploys carry CVE-2026-27135.

Container imageDigestPackageFixed in
dellcloud/pages:monitor6ba7b22caacd
nghttp2@1.40.0-1build1
1.40.0-1ubuntu0.3+esm1
flyway/flyway:6.4.422d97ceb0c47
nghttp2@1.30.0-1ubuntu1
1.30.0-1ubuntu1+esm3

Open the chart page →

20,242
esphomehelm-chart-roeiVerified publisher2025.3.01 of 1See more

esphome helm-chart-roei 2025.3.0

1 of the 1 container images this version deploys carry CVE-2026-27135.

Container imageDigestPackageFixed in
esphome/esphome:2025.3.0def8b6e4f517
nghttp2@1.52.0-1+deb12u2
1.52.0-1+deb12u3

Open the chart page →

6,036
home-assistanthelm-chart-roeiVerified publisher2025.3.01 of 1See more

home-assistant helm-chart-roei 2025.3.0

1 of the 1 container images this version deploys carry CVE-2026-27135.

Container imageDigestPackageFixed in
ghcr.io/home-assistant/home-assistant:2025.3.026c51e44d932
nghttp2@1.64.0-r0
1.68.1

Open the chart page →

4,651
home-assistant-matter-hubhelm-chart-roeiVerified publisher3.0.21 of 1See more

home-assistant-matter-hub helm-chart-roei 3.0.2

1 of the 1 container images this version deploys carry CVE-2026-27135.

Container imageDigestPackageFixed in
luligu/matterbridge:3.0.28f97884bebc2
nghttp2@1.52.0-1+deb12u2
1.52.0-1+deb12u3

Open the chart page →

3,829
ditto-operatorhelm-chartsVerified publisher0.3.01 of 1See more

ditto-operator helm-charts 0.3.0

1 of the 1 container images this version deploys carry CVE-2026-27135.

Container imageDigestPackageFixed in
ghcr.io/ctron/ditto-operator:0.4.061a9bb81b85c
nghttp2@1.33.0-3.el8_2.1
0:1.33.0-6.el8_10.2

Open the chart page →

2,673
hawkbit-operatorhelm-chartsVerified publisher0.1.41 of 1See more

hawkbit-operator helm-charts 0.1.4

1 of the 1 container images this version deploys carry CVE-2026-27135.

Container imageDigestPackageFixed in
ctron/hawkbit-operator:0.1.48fdea8f76499
nghttp2@1.33.0-3.el8_2.1
0:1.33.0-6.el8_10.2

Open the chart page →

5,791
iofoghelm-chartsVerified publisher0.1.11 of 3See more

iofog helm-charts 0.1.1

1 of the 3 container images this version deploys carry CVE-2026-27135.

Container imageDigestPackageFixed in
quay.io/ctrontesting/iofog-controller:latest10df27bc5560
nghttp2@1.33.0-3.el8_2.1
0:1.33.0-6.el8_10.2

Open the chart page →

24,171
streamsheetshelm-chartsVerified publisher0.2.35 of 8See more

streamsheets helm-charts 0.2.3

5 of the 8 container images this version deploys carry CVE-2026-27135.

Container imageDigestPackageFixed in
ghcr.io/ctron/streamsheets-base:2.4.00cf25ed621e2
nghttp2@1.33.0-3.el8_2.1
0:1.33.0-6.el8_10.2
ghcr.io/ctron/streamsheets-gateway:2.4.00635f17c9d2c
nghttp2@1.33.0-3.el8_2.1
0:1.33.0-6.el8_10.2
ghcr.io/ctron/streamsheets-service-graphs:2.4.0e34964e336c1
nghttp2@1.33.0-3.el8_2.1
0:1.33.0-6.el8_10.2
ghcr.io/ctron/streamsheets-service-machines:2.4.00c5a3398d1e4
nghttp2@1.33.0-3.el8_2.1
0:1.33.0-6.el8_10.2
ghcr.io/ctron/streamsheets-service-streams:2.4.08ba040e79ca0
nghttp2@1.33.0-3.el8_2.1
0:1.33.0-6.el8_10.2

Open the chart page →

89,964
chart-bookhelm-deploy-book0.1.01 of 3See more

chart-book helm-deploy-book 0.1.0

1 of the 3 container images this version deploys carry CVE-2026-27135.

Container imageDigestPackageFixed in
dannielkil/book-frontend:latest937993927694
nghttp2@1.52.0-1+deb12u1
1.52.0-1+deb12u3

Open the chart page →

9,148
castopodhelmforgeVerified publisher1.2.71 of 3See more

castopod helmforge 1.2.7

1 of the 3 container images this version deploys carry CVE-2026-27135.

Container imageDigestPackageFixed in
castopod/castopod:1.15.54e4f0440520f
nghttp2@1.64.0-1.1
1.64.0-1.1+deb13u1

Open the chart page →

9,485
ckanhelmforgeVerified publisher1.3.81 of 6See more

ckan helmforge 1.3.8

1 of the 6 container images this version deploys carry CVE-2026-27135.

Container imageDigestPackageFixed in
ckan/ckan-solr:2.11-solr9ef8e5d3e6be1
nghttp2@1.43.0-1ubuntu0.2
1.43.0-1ubuntu0.3

Open the chart page →

10,027
countlyhelmforgeVerified publisher1.2.61 of 3See more

countly helmforge 1.2.6

1 of the 3 container images this version deploys carry CVE-2026-27135.

Container imageDigestPackageFixed in
countly/countly-server:25.05.4e3c238248f99
nghttp2@1.40.0-1build1
1.40.0-1ubuntu0.3+esm1

Open the chart page →

18,938
croniclehelmforgeVerified publisher1.1.101 of 1See more

cronicle helmforge 1.1.10

1 of the 1 container images this version deploys carry CVE-2026-27135.

Container imageDigestPackageFixed in
soulteary/cronicle:0.9.80ac2512fa6e39
nghttp2@1.64.0-r0
1.68.1

Open the chart page →

1,271
discount-bandithelmforgeVerified publisher2.0.81 of 3See more

discount-bandit helmforge 2.0.8

1 of the 3 container images this version deploys carry CVE-2026-27135.

Container imageDigestPackageFixed in
cybrarist/discount-bandit:v4.0.4e9e2447ac666
nghttp2@1.64.0-1.1
1.64.0-1.1+deb13u1

Open the chart page →

29,930
fastmcp-serverhelmforgeVerified publisher1.7.41 of 1See more

fastmcp-server helmforge 1.7.4

1 of the 1 container images this version deploys carry CVE-2026-27135.

Container imageDigestPackageFixed in
helmforge/fastmcp-server:0.11.2fcb7017327d6
nghttp2@1.64.0-1.1
1.64.0-1.1+deb13u1

Open the chart page →

3,304
jupyterhubhelmforgeVerified publisher1.0.61 of 3See more

jupyterhub helmforge 1.0.6

1 of the 3 container images this version deploys carry CVE-2026-27135.

Container imageDigestPackageFixed in
quay.io/jupyterhub/k8s-hub:4.3.5113e372cf71b
nghttp2@1.52.0-1+deb12u2
1.52.0-1+deb12u3

Open the chart page →

5,361
mcp-serverhelmforgeVerified publisher1.0.01 of 1See more

mcp-server helmforge 1.0.0

1 of the 1 container images this version deploys carry CVE-2026-27135.

Container imageDigestPackageFixed in
helmforge/fastmcp-server:0.2.061f759a1421f
nghttp2@1.64.0-1.1
1.64.0-1.1+deb13u1

Open the chart page →

3,453
middlewarehelmforgeVerified publisher1.2.61 of 4See more

middleware helmforge 1.2.6

1 of the 4 container images this version deploys carry CVE-2026-27135.

Container imageDigestPackageFixed in
middlewareeng/middleware:0.3.1747d880812f1
nghttp2@1.52.0-1+deb12u2
1.52.0-1+deb12u3

Open the chart page →

9,771
phpmyadminhelmforgeVerified publisher2.0.11 of 1See more

phpmyadmin helmforge 2.0.1

1 of the 1 container images this version deploys carry CVE-2026-27135.

Container imageDigestPackageFixed in
phpmyadmin/phpmyadmin:5.2.342a200db07b4
nghttp2@1.64.0-1.1
1.64.0-1.1+deb13u1

Open the chart page →

4,819
supersethelmforgeVerified publisher1.3.61 of 5See more

superset helmforge 1.3.6

1 of the 5 container images this version deploys carry CVE-2026-27135.

Container imageDigestPackageFixed in
helmforge/kubectl:1.35.3c3f97e954c47
nghttp2@1.65.0-r0
1.68.1

Open the chart page →

5,784
text-embeddings-inferencehelmforgeVerified publisher1.0.01 of 2See more

text-embeddings-inference helmforge 1.0.0

1 of the 2 container images this version deploys carry CVE-2026-27135.

Container imageDigestPackageFixed in
ghcr.io/huggingface/text-embeddings-inference:cpu-1.9.3ad950d30878e
nghttp2@1.52.0-1+deb12u2
1.52.0-1+deb12u3

Open the chart page →

2,563
myapphelmingapp0.1.01 of 1See more

myapp helmingapp 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-27135.

Container imageDigestPackageFixed in
muhammedgamal/fp23:latest74b4cd69b6fa
nghttp2@1.52.0-1+deb12u1
1.52.0-1+deb12u3

Open the chart page →

12,680
openaevhelm-openbasVerified publisher2.0.51 of 7See more

openaev helm-openbas 2.0.5

1 of the 7 container images this version deploys carry CVE-2026-27135.

Container imageDigestPackageFixed in
bitnamilegacy/rabbitmq:4.1.2-debian-12-r1fac502149c40
nghttp2@1.52.0-1+deb12u2
1.52.0-1+deb12u3

Open the chart page →

7,528
openbashelm-openbasVerified publisher1.8.143 of 7See more

openbas helm-openbas 1.8.14

3 of the 7 container images this version deploys carry CVE-2026-27135.

Container imageDigestPackageFixed in
bitnamilegacy/rabbitmq:4.1.2-debian-12-r1fac502149c40
nghttp2@1.52.0-1+deb12u2
1.52.0-1+deb12u3
openbas/caldera-server:5.1.0a277796d9724
nghttp2@1.52.0-1+deb12u2
1.52.0-1+deb12u3
openbas/platform:2.0.5d986d80b0a75
nghttp2@1.59.0-1ubuntu0.2
1.59.0-1ubuntu0.3

Open the chart page →

25,190
release-cleanerhelm-release-cleanerVerified publisher1.0.01 of 1See more

release-cleaner helm-release-cleaner 1.0.0

1 of the 1 container images this version deploys carry CVE-2026-27135.

Container imageDigestPackageFixed in
alpine/helm:4.1.0905a068da431
nghttp2@1.68.0-r0
1.68.1

Open the chart page →

2,001
pageshelm-repo1.0.02 of 3See more

pages helm-repo 1.0.0

2 of the 3 container images this version deploys carry CVE-2026-27135.

Container imageDigestPackageFixed in
dellcloud/pages:monitor6ba7b22caacd
nghttp2@1.40.0-1build1
1.40.0-1ubuntu0.3+esm1
flyway/flyway:6.4.422d97ceb0c47
nghttp2@1.30.0-1ubuntu1
1.30.0-1ubuntu1+esm3

Open the chart page →

20,242
steampipehelm-steampipeVerified publisher2.4.11 of 1See more

steampipe helm-steampipe 2.4.1

1 of the 1 container images this version deploys carry CVE-2026-27135.

Container imageDigestPackageFixed in
ghcr.io/devops-ia/steampipe:v2.4.1a982103d91d3
nghttp2@1.52.0-1+deb12u2
1.52.0-1+deb12u3

Open the chart page →

3,154
svacerhelm-svacer0.6.01 of 1See more

svacer helm-svacer 0.6.0

1 of the 1 container images this version deploys carry CVE-2026-27135.

Container imageDigestPackageFixed in
ispras/svacer:11-2-042aa9fa9f189
nghttp2@1.43.0-1ubuntu0.2
1.43.0-1ubuntu0.3

Open the chart page →

6,085
samplehelmapphelmtraining3.0.01 of 1See more

samplehelmapp helmtraining 3.0.0

1 of the 1 container images this version deploys carry CVE-2026-27135.

Container imageDigestPackageFixed in
praravind1801/helmimages:3.0.0f29d637b9ce1
nghttp2@1.52.0-1+deb12u1
1.52.0-1+deb12u3

Open the chart page →

5,996
nominatimheywood8-helm-chartsVerified publisher3.10.81 of 3See more

nominatim heywood8-helm-charts 3.10.8

1 of the 3 container images this version deploys carry CVE-2026-27135.

Container imageDigestPackageFixed in
mediagis/nominatim:4.2d0eae7b51374
nghttp2@1.43.0-1ubuntu0.1
1.43.0-1ubuntu0.3

Open the chart page →

14,363
printserverhmediadeVerified publisher1.0.22 of 4See more

printserver hmediade 1.0.2

2 of the 4 container images this version deploys carry CVE-2026-27135.

Container imageDigestPackageFixed in
hmediade/printserver:latest481a552c8e1c
nghttp2@1.43.0-1ubuntu0.1
1.43.0-1ubuntu0.3
hmediade/printserver-init:latest7f005eb6c718
nghttp2@1.43.0-1ubuntu0.1
1.43.0-1ubuntu0.3

Open the chart page →

10,948
home-ha-mockhome-ha-mockVerified publisher2.0.51 of 1See more

home-ha-mock home-ha-mock 2.0.5

1 of the 1 container images this version deploys carry CVE-2026-27135.

Container imageDigestPackageFixed in
ghcr.io/smarter-project/home-ha-mock:main95ee018cf558
nghttp2@1.52.0-1+deb12u2
1.52.0-1+deb12u3

Open the chart page →

3,065
paperlesshomelabcihelmchartstestVerified publisher9.1.91 of 1See more

paperless homelabcihelmchartstest 9.1.9

1 of the 1 container images this version deploys carry CVE-2026-27135.

Container imageDigestPackageFixed in
ghcr.io/paperless-ngx/paperless-ngx:2.0.1ab255bea133e
nghttp2@1.52.0-1
1.52.0-1+deb12u3

Open the chart page →

16,415
home-security-demohome-security-demoVerified publisher2.0.121 of 3See more

home-security-demo home-security-demo 2.0.12

1 of the 3 container images this version deploys carry CVE-2026-27135.

Container imageDigestPackageFixed in
ghcr.io/smarter-project/home-ha-mock:main95ee018cf558
nghttp2@1.52.0-1+deb12u2
1.52.0-1+deb12u3

Open the chart page →

3,148
hammerspace-csihscsi1.2.81 of 6See more

hammerspace-csi hscsi 1.2.8

1 of the 6 container images this version deploys carry CVE-2026-27135.

Container imageDigestPackageFixed in
hammerspaceinc/csi-plugin:v1.2.8-rc2395bee4504fc
nghttp2@1.43.0-6.el9
0:1.43.0-6.el9_7.1

Open the chart page →

4,498
httpbin2022httpbin2022Verified publisher0.1.11 of 1See more

httpbin2022 httpbin2022 0.1.1

1 of the 1 container images this version deploys carry CVE-2026-27135.

Container imageDigestPackageFixed in
mshanley80/httpbin2022:latest5b189a70c0fb
nghttp2@1.40.0-1build1
1.40.0-1ubuntu0.3+esm1

Open the chart page →

8,751
eoloplanthttpd-eoloplant0.1.04 of 7See more

eoloplant httpd-eoloplant 0.1.0

4 of the 7 container images this version deploys carry CVE-2026-27135.

Container imageDigestPackageFixed in
codeurjc/planner:v1.0800cf520c245
nghttp2@1.43.0-1build3
1.43.0-1ubuntu0.3
codeurjc/server:v1.0310bea5b1ee7
nghttp2@1.33.0-3.el8_2.1
0:1.33.0-6.el8_10.2
codeurjc/weatherservice:v1.0b9e2f7234349
nghttp2@1.33.0-3.el8_2.1
0:1.33.0-6.el8_10.2
library/mongo:5.0.6-focal8e70544b6c76
nghttp2@1.40.0-1build1
1.40.0-1ubuntu0.3+esm1

Open the chart page →

32,372
nexus3huangchengwu-helm-chart0.1.01 of 1See more

nexus3 huangchengwu-helm-chart 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-27135.

Container imageDigestPackageFixed in
sonatype/nexus3:3.53.04bd975493104
nghttp2@1.33.0-3.el8_2.1
0:1.33.0-6.el8_10.2

Open the chart page →

4,463
prometheushuangchengwu-helm-chart0.1.02 of 3See more

prometheus huangchengwu-helm-chart 0.1.0

2 of the 3 container images this version deploys carry CVE-2026-27135.

Container imageDigestPackageFixed in
apache/skywalking-oap-server:9.2.0133d35d2c263
nghttp2@1.43.0-1build3
1.43.0-1ubuntu0.3
apache/skywalking-ui:9.2.0295f1dc87d98
nghttp2@1.43.0-1build3
1.43.0-1ubuntu0.3

Open the chart page →

16,495
skywalking-v1huangchengwu-helm-chart0.1.02 of 4See more

skywalking-v1 huangchengwu-helm-chart 0.1.0

2 of the 4 container images this version deploys carry CVE-2026-27135.

Container imageDigestPackageFixed in
apache/skywalking-oap-server:8.9.1b4ec8c18d079
nghttp2@1.40.0-1build1
1.40.0-1ubuntu0.3+esm1
apache/skywalking-ui:8.9.180530f0308a5
nghttp2@1.40.0-1build1
1.40.0-1ubuntu0.3+esm1

Open the chart page →

20,741
townsquarehuscker-chartsVerified publisher1.0.41 of 2See more

townsquare huscker-charts 1.0.4

1 of the 2 container images this version deploys carry CVE-2026-27135.

Container imageDigestPackageFixed in
ghcr.io/huscker/townsquare-frontend:2.15.2dc6384d10cc8
nghttp2@1.64.0-r0
1.68.1

Open the chart page →

3,428
hydrahydraVerified publisher0.9.51 of 2See more

hydra hydra 0.9.5

1 of the 2 container images this version deploys carry CVE-2026-27135.

Container imageDigestPackageFixed in
ghcr.io/smarter-project/hydra/isolated-vm:main4457b79b24cd
nghttp2@1.52.0-1+deb12u2
1.52.0-1+deb12u3

Open the chart page →

9,084
isolated-vmhydraVerified publisher0.9.41 of 1See more

isolated-vm hydra 0.9.4

1 of the 1 container images this version deploys carry CVE-2026-27135.

Container imageDigestPackageFixed in
ghcr.io/smarter-project/hydra/isolated-vm:main4457b79b24cd
nghttp2@1.52.0-1+deb12u2
1.52.0-1+deb12u3

Open the chart page →

7,785
hyperglance-helmhyperglance-helmVerified publisher10.0.53 of 6See more

hyperglance-helm hyperglance-helm 10.0.5

3 of the 6 container images this version deploys carry CVE-2026-27135.

Container imageDigestPackageFixed in
hyperglance/init:wildfly467ad8491bc3
nghttp2@1.43.0-1ubuntu0.2
1.43.0-1ubuntu0.3
hyperglance/init:postgres9fd5faf1fe80
nghttp2@1.43.0-1ubuntu0.2
1.43.0-1ubuntu0.3
hyperglance/init:apacheb2f8c6d52623
nghttp2@1.43.0-1ubuntu0.2
1.43.0-1ubuntu0.3

Open the chart page →

11,180
mvfi4trustVerified publisher1.1.21 of 1See more

mvf i4trust 1.1.2

1 of the 1 container images this version deploys carry CVE-2026-27135.

Container imageDigestPackageFixed in
wistefan/mvf:lateste0887302b2d8
nghttp2@1.43.0-1build3
1.43.0-1ubuntu0.3

Open the chart page →

7,211

Container images carrying it

1,503 by charts deploying them

A fixed version is listed for 3 of the 3 affected packages.

Container imageDigestPackageFixed inUsed by
udhos/redis-enforce-expire:1.0.0615b6a7d742e
nghttp2@1.68.0-r0
1.68.1
1
udhos/secrets:1.0.6daa2b4eaac09
nghttp2@1.64.0-r0
1.68.1
1
udhos/token-server:1.0.9728013f2fac1
nghttp2@1.65.0-r0
1.68.1
1
unitycatalog/unitycatalog-ui:main-aadc6fc3a688197b218
nghttp2@1.52.0-1+deb12u2
1.52.0-1+deb12u3
1
vabene1111/recipes:2.3.50f8d061895e9
nghttp2@1.65.0-r0
1.68.1
1
vaultwarden/server:1.35.443498a94b22f
nghttp2@1.64.0-1.1
1.64.0-1.1+deb13u1
1
vaultwarden/server:1.34.384fd8a47f58d
nghttp2@1.52.0-1+deb12u2
1.52.0-1+deb12u3
1
vaultwarden/server:1.35.79a8eec71f4a5
nghttp2@1.64.0-1.1
1.64.0-1.1+deb13u1
1
vcnngr/pnbackend:latesteaf44ad0ad1f
nghttp2@1.64.0-r0
1.68.1
1
vcnngr/pnfrontend:latest4e4979ab8c41
nghttp2@1.65.0-r0
1.68.1
1
veecode/devportal-admin-ui:0.4.30c69fd286b489
nghttp2@1.52.0-1+deb12u2
1.52.0-1+deb12u3
1
venturenox/sagawise:latestc11d32f18718
nghttp2@1.64.0-r0
1.68.1
1
vinanrra/7dtd-server:v0.4.4f9534490bd2b
nghttp2@1.30.0-1ubuntu1
1.30.0-1ubuntu1+esm3
1
viniciusfcf/gitops-quarkus-app-jvm:latestbba8ee1b5cd5
nghttp2@1.33.0-3.el8_2.1
0:1.33.0-6.el8_10.2
1
vividplanet/swr-cache-proxy:v1ae1c5b1cbecb
nghttp2@1.33.0-5.el8_9
0:1.33.0-6.el8_10.2
1
vlebediantsev/notes-admin-front:latest007c6670ff48
nghttp2@1.52.0-1
1.52.0-1+deb12u3
1
vlebediantsev/notes-project-front:latest945675fd2636
nghttp2@1.52.0-1
1.52.0-1+deb12u3
1
vlebediantsev/registration-ms-front-app-host:latest54f69d116c50
nghttp2@1.52.0-1
1.52.0-1+deb12u3
1
voltha/voltha-onos:5.1.8e038acb950d3
nghttp2@1.30.0-1ubuntu1
1.30.0-1ubuntu1+esm3
1
wallarm/api-gateway:0.2.0a3d4d2f780e8
nghttp2@1.52.0-1+deb12u2
1.52.0-1+deb12u3
1
wallarm/kong:3.1.0-ubuntu-4.6.0ea9608c82e40
nghttp2@1.40.0-1build1
1.40.0-1ubuntu0.3+esm1
1
wavefronthq/proxy:9.2d1064d28f6eb
nghttp2@1.30.0-1ubuntu1
1.30.0-1ubuntu1+esm3
1
wazuh/wazuh-manager:4.4.121994f40e0da
nghttp2@1.40.0-1build1
1.40.0-1ubuntu0.3+esm1
1
wistefan/mvf:lateste0887302b2d8
nghttp2@1.43.0-1build3
1.43.0-1ubuntu0.3
1
wolveix/satisfactory-server:v1.9.1199be1064b18
nghttp2@1.43.0-1ubuntu0.2
1.43.0-1ubuntu0.3
1
wolveix/satisfactory-server:v1.9.9464d11e36e10
nghttp2@1.43.0-1ubuntu0.2
1.43.0-1ubuntu0.3
1
workadventure/playwright-synthetic-monitoring:main92b664c2a06f
nghttp2@1.43.0-1ubuntu0.2
1.43.0-1ubuntu0.3
1
xeotek/kadeck:6.3.439a3b37a17c5
nghttp2@1.43.0-1ubuntu0.2
1.43.0-1ubuntu0.3
1
xeotek/kadeck:4.2.94c6b04d9ce55
nghttp2@1.40.0-1build1
1.40.0-1ubuntu0.3+esm1
1
xom4ekp2p/infini-route-attestators-public-mainnet-attester:latestd0e0aa238b02
nghttp2@1.52.0-1+deb12u1
1.52.0-1+deb12u3
1
xom4ekp2p/infini-route-attestators-public-mainnet-avs-webapi:latest2745b5fd8785
nghttp2@1.52.0-1+deb12u1
1.52.0-1+deb12u3
1
zabbix/zabbix-agent:ubuntu-5.4.62127168cab03
nghttp2@1.40.0-1build1
1.40.0-1ubuntu0.3+esm1
1
zabbix/zabbix-agent2:ubuntu-7.0.237322a94c5d7a
nghttp2@1.59.0-1ubuntu0.2
1.59.0-1ubuntu0.3
1
zabbix/zabbix-agent2:ubuntu-6.0.8e5b594057c9c
nghttp2@1.43.0-1build3
1.43.0-1ubuntu0.3
1
zabbix/zabbix-server-mysql:ubuntu-6.4-latest55d074b6b031
nghttp2@1.59.0-1ubuntu0.1
1.59.0-1ubuntu0.3
1
zabbix/zabbix-server-pgsql:ubuntu-5.4.66c946b1f45cd
nghttp2@1.40.0-1build1
1.40.0-1ubuntu0.3+esm1
1
zabbix/zabbix-server-pgsql:ubuntu-7.0.237e8c8e059533
nghttp2@1.59.0-1ubuntu0.2
1.59.0-1ubuntu0.3
1
zabbix/zabbix-server-pgsql:ubuntu-6.0.8d59ffa07f615
nghttp2@1.43.0-1build3
1.43.0-1ubuntu0.3
1
zabbix/zabbix-web-nginx-mysql:ubuntu-6.4-latest0e5f69c4c54e
nghttp2@1.59.0-1ubuntu0.1
1.59.0-1ubuntu0.3
1
zabbix/zabbix-web-nginx-pgsql:ubuntu-5.4.601de79c31391
nghttp2@1.40.0-1build1
1.40.0-1ubuntu0.3+esm1
1
zabbix/zabbix-web-nginx-pgsql:ubuntu-7.0.237d4d58086515
nghttp2@1.59.0-1ubuntu0.2
1.59.0-1ubuntu0.3
1
zabbix/zabbix-web-nginx-pgsql:ubuntu-6.0.899e9a090b516
nghttp2@1.43.0-1build3
1.43.0-1ubuntu0.3
1
zabbix/zabbix-web-service:ubuntu-7.0.23915b3183e054
nghttp2@1.59.0-1ubuntu0.2
1.59.0-1ubuntu0.3
1
zbalogh/reservation-angular-ui:1.0.95eb19e460b3c
nghttp2@1.65.0-r0
1.68.1
1
zepai/knowledge-graph-mcp:v0.2.16ab0ee79926b
nghttp2@1.52.0-1+deb12u2
1.52.0-1+deb12u3
1
zimengxiong/excalidash-frontend:0.4.27242629350b06
nghttp2@1.68.0-r0
1.68.1
1
gcr.io/datadoghq/cluster-agent:7.61.06efe04ba4e06
nghttp2@1.59.0-1ubuntu0.1
1.59.0-1ubuntu0.3
1
gcr.io/datadoghq/private-action-runner:v1.21.05f5918f843a4
nghttp2@1.59.0-1ubuntu0.2
1.59.0-1ubuntu0.3
1
gcr.io/flink-operator/deployer:webhook-cert809338a69bd5
nghttp2@1.30.0-1ubuntu1
1.30.0-1ubuntu1+esm3
1
gcr.io/istio-release/pilot:1.11.1c552478f8f11
nghttp2@1.40.0-1build1
1.40.0-1ubuntu0.3+esm1
1

syft 1.42.1 · advisories as of 16 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.