StackRadar

CVE-2026-27135

High

Advisory

Published 18 Mar 2026In the index since 5 Sept 2026
Severity
High
worst across findings
CVSS
7.5
base score, highest
EPSS
0.008
54th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
1,447
of 17,792 indexed, latest versions
Container images
1,495
deployed by those charts
Fix available
3 of 3
affected packages

Red Hat Security Advisory: nghttp2 security update

Carried by container images the latest versions of 1,447 of 17,792 indexed charts deploy, on 1,495 images.

Affected packageAffected versionsFixed inImages
nghttp2deb1.30.0-1ubuntu1, 1.40.0-1build1, 1.40.0-1ubuntu0.1, 1.40.0-1ubuntu0.2+11 more1.30.0-1ubuntu1+esm3, 1.40.0-1ubuntu0.3+esm1, 1.43.0-1ubuntu0.3, 1.52.0-1+deb12u3+3 more931
nghttp2rpm1.33.0-1.el8, 1.33.0-1.el8_0.1, 1.33.0-3.el8_2.1, 1.33.0-3.el8_2.2+13 more0:1.33.0-6.el8_10.2, 0:1.43.0-6.el9_7.1, 0:1.64.0-2.el10_1.1, 1.64.0-150700.3.3.1+1 more321
nghttp2apk1.57.0-r0, 1.64.0-r0, 1.65.0-r0, 1.68.0-r01.68.1243
OSV records
ALPINE-CVE-2026-27135DEBIAN-CVE-2026-27135RHSA-2026:7666RHSA-2026:7667RHSA-2026:7668RLSA-2026:7667RLSA-2026:7668UBUNTU-CVE-2026-27135openSUSE-SU-2026:10437-1SUSE-SU-2026:1074-1
Also known as
RHSA-2026:8538, RHSA-2026:8539, RHSA-2026:8540, RHSA-2026:8541, RHSA-2026:8545, RHSA-2026:8547, RHSA-2026:8548, USN-8233-1

Charts affected

1,447 by stars
ChartLatestAffected imagesRadar Score
pagesranjinigogga1.0.02 of 3See more

pages ranjinigogga 1.0.0

2 of the 3 container images this version deploys carry CVE-2026-27135.

Container imageDigestPackageFixed in
dellcloud/pages:monitor6ba7b22caacd
nghttp2@1.40.0-1build1
1.40.0-1ubuntu0.3+esm1
flyway/flyway:6.4.422d97ceb0c47
nghttp2@1.30.0-1ubuntu1
1.30.0-1ubuntu1+esm3

Open the chart page →

20,242
rdfoxrdfox-helm-chart0.1.22 of 2See more

rdfox rdfox-helm-chart 0.1.2

2 of the 2 container images this version deploys carry CVE-2026-27135.

Container imageDigestPackageFixed in
oxfordsemantic/rdfox:5.6db17910eb855
nghttp2@1.40.0-1build1
1.40.0-1ubuntu0.3+esm1
oxfordsemantic/rdfox-init:5.6baf570ff968d
nghttp2@1.40.0-1build1
1.40.0-1ubuntu0.3+esm1

Open the chart page →

12,884
javareact-java0.1.01 of 1See more

java react-java 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-27135.

Container imageDigestPackageFixed in
project2team4/react:latest3ff031a08887
nghttp2@1.40.0-1build1
1.40.0-1ubuntu0.3+esm1

Open the chart page →

15,570
sqpreadyset-sqp-nightly0.1.0-nightly.202604302 of 3See more

sqp readyset-sqp-nightly 0.1.0-nightly.20260430

2 of the 3 container images this version deploys carry CVE-2026-27135.

Container imageDigestPackageFixed in
readysettech/sqp:latest588f3507280e
nghttp2@1.59.0-1ubuntu0.2
1.59.0-1ubuntu0.3
readysettech/sqp-duckdb:latest67a83203ce60
nghttp2@1.59.0-1ubuntu0.2
1.59.0-1ubuntu0.3

Open the chart page →

3,524
pagesrebecca-pages1.0.02 of 3See more

pages rebecca-pages 1.0.0

2 of the 3 container images this version deploys carry CVE-2026-27135.

Container imageDigestPackageFixed in
dellcloud/pages:monitor6ba7b22caacd
nghttp2@1.40.0-1build1
1.40.0-1ubuntu0.3+esm1
flyway/flyway:6.4.422d97ceb0c47
nghttp2@1.30.0-1ubuntu1
1.30.0-1ubuntu1+esm3

Open the chart page →

20,242
ibm-mongodb-enterprise-helmredhat0.3.01 of 1See more

ibm-mongodb-enterprise-helm redhat 0.3.0

1 of the 1 container images this version deploys carry CVE-2026-27135.

Container imageDigestPackageFixed in
ibmcom/ibm-enterprise-mongodb-ppc64le:4.4d28bf361327a
nghttp2@1.33.0-3.el8_2.1
0:1.33.0-6.el8_10.2

Open the chart page →

12,382
ansible-automation-platformredhat-cop0.0.91 of 1See more

ansible-automation-platform redhat-cop 0.0.9

1 of the 1 container images this version deploys carry CVE-2026-27135.

Container imageDigestPackageFixed in
quay.io/openshift/origin-cli:4.7464a3af4dfe0
nghttp2@1.33.0-3.el8_2.1
0:1.33.0-6.el8_10.2

Open the chart page →

15,299
argocd-operatorredhat-cop1.2.21 of 1See more

argocd-operator redhat-cop 1.2.2

1 of the 1 container images this version deploys carry CVE-2026-27135.

Container imageDigestPackageFixed in
quay.io/openshift/origin-cli:4.7464a3af4dfe0
nghttp2@1.33.0-3.el8_2.1
0:1.33.0-6.el8_10.2

Open the chart page →

15,299
ploigosredhat-cop0.0.91 of 2See more

ploigos redhat-cop 0.0.9

1 of the 2 container images this version deploys carry CVE-2026-27135.

Container imageDigestPackageFixed in
quay.io/openshift/origin-cli:4.66722d5041b47
nghttp2@1.33.0-3.el8_2.1
0:1.33.0-6.el8_10.2

Open the chart page →

11,446
sonarquberedhat-cop0.1.131 of 1See more

sonarqube redhat-cop 0.1.13

1 of the 1 container images this version deploys carry CVE-2026-27135.

Container imageDigestPackageFixed in
library/sonarqube:10.7.0-community0842dcd4c8f8
nghttp2@1.43.0-1ubuntu0.2
1.43.0-1ubuntu0.3

Open the chart page →

4,245
sonatype-nexusredhat-cop1.1.131 of 2See more

sonatype-nexus redhat-cop 1.1.13

1 of the 2 container images this version deploys carry CVE-2026-27135.

Container imageDigestPackageFixed in
quay.io/openshift/origin-jenkins-agent-base:latestc241c971aef8
nghttp2@1.33.0-4.el8_6.1
0:1.33.0-6.el8_10.2

Open the chart page →

16,388
stackrox-chartredhat-cop0.0.101 of 1See more

stackrox-chart redhat-cop 0.0.10

1 of the 1 container images this version deploys carry CVE-2026-27135.

Container imageDigestPackageFixed in
quay.io/rht-labs/stack-do500:3.0.86ba82beff18e
nghttp2@1.33.0-3.el8_2.1
0:1.33.0-6.el8_10.2

Open the chart page →

29,564
redis-enforce-expireredis-enforce-expire1.0.01 of 1See more

redis-enforce-expire redis-enforce-expire 1.0.0

1 of the 1 container images this version deploys carry CVE-2026-27135.

Container imageDigestPackageFixed in
udhos/redis-enforce-expire:1.0.0615b6a7d742e
nghttp2@1.68.0-r0
1.68.1

Open the chart page →

1,303
esphomeretsamedocVerified publisher2026.2.51 of 1See more

esphome retsamedoc 2026.2.5

1 of the 1 container images this version deploys carry CVE-2026-27135.

Container imageDigestPackageFixed in
esphome/esphome:2024.3.09ab8cc88b28c
nghttp2@1.52.0-1+deb12u1
1.52.0-1+deb12u3

Open the chart page →

7,459
juicepassproxyretsamedocVerified publisher2026.2.41 of 1See more

juicepassproxy retsamedoc 2026.2.4

1 of the 1 container images this version deploys carry CVE-2026-27135.

Container imageDigestPackageFixed in
ghcr.io/juicerescue/juicepassproxy:0.5.1984dc4f19162
nghttp2@1.52.0-1+deb12u2
1.52.0-1+deb12u3

Open the chart page →

3,955
claude-relayrevolution10.1.371 of 4See more

claude-relay revolution1 0.1.37

1 of the 4 container images this version deploys carry CVE-2026-27135.

Container imageDigestPackageFixed in
ghcr.io/wei-shaw/claude-relay-service:v1.1.292398c34934453
nghttp2@1.64.0-r0
1.68.1

Open the chart page →

4,624
istio-helloworldrgnu1.0.12 of 2See more

istio-helloworld rgnu 1.0.1

2 of the 2 container images this version deploys carry CVE-2026-27135.

Container imageDigestPackageFixed in
istio/examples-helloworld-v1:latest328b237e4fb1
nghttp2@1.52.0-1+deb12u1
1.52.0-1+deb12u3
istio/examples-helloworld-v2:latest0a7f02b2c7c9
nghttp2@1.52.0-1+deb12u1
1.52.0-1+deb12u3

Open the chart page →

9,452
rhbk-neurofacerhbk-neurofaceVerified publisher1.0.01 of 4See more

rhbk-neuroface rhbk-neuroface 1.0.0

1 of the 4 container images this version deploys carry CVE-2026-27135.

Container imageDigestPackageFixed in
quay.io/maximilianopizarro/neuroface-frontend:latestdcf24040cc77
nghttp2@1.43.0-6.el9
0:1.43.0-6.el9_7.1

Open the chart page →

3,882
kresusrm3lVerified publisher0.2.11 of 3See more

kresus rm3l 0.2.1

1 of the 3 container images this version deploys carry CVE-2026-27135.

Container imageDigestPackageFixed in
bnjbvr/kresus:0.22.137e216b182c8
nghttp2@1.52.0-1+deb12u2
1.52.0-1+deb12u3

Open the chart page →

15,681
wallosrm3lVerified publisher0.1.01 of 1See more

wallos rm3l 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-27135.

Container imageDigestPackageFixed in
ghcr.io/ellite/wallos:2.46.09ce55520e7bd
nghttp2@1.64.0-r0
1.68.1

Open the chart page →

1,529
pagesroccohiggins-pages1.0.02 of 3See more

pages roccohiggins-pages 1.0.0

2 of the 3 container images this version deploys carry CVE-2026-27135.

Container imageDigestPackageFixed in
dellcloud/pages:monitor6ba7b22caacd
nghttp2@1.40.0-1build1
1.40.0-1ubuntu0.3+esm1
flyway/flyway:6.4.422d97ceb0c47
nghttp2@1.30.0-1ubuntu1
1.30.0-1ubuntu1+esm3

Open the chart page →

20,242
gitlab-operatorrock8sVerified publisher0.7.01 of 2See more

gitlab-operator rock8s 0.7.0

1 of the 2 container images this version deploys carry CVE-2026-27135.

Container imageDigestPackageFixed in
registry.gitlab.com/gitlab-org/cloud-native/gitlab-operator:0.5.136b19b72120e
nghttp2@1.33.0-3.el8_2.1
0:1.33.0-6.el8_10.2

Open the chart page →

5,430
matrix-stackrock8sVerified publisher0.8.11 of 7See more

matrix-stack rock8s 0.8.1

1 of the 7 container images this version deploys carry CVE-2026-27135.

Container imageDigestPackageFixed in
matrixdotorg/synapse:v1.127.1c3c4a9de2a0b
nghttp2@1.52.0-1+deb12u2
1.52.0-1+deb12u3

Open the chart page →

9,299
rocketchat-voiprocketchat-server0.1.01 of 1See more

rocketchat-voip rocketchat-server 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-27135.

Container imageDigestPackageFixed in
rocketchat/freeswitch:stablecfba5c20a5cc
nghttp2@1.52.0-1+deb12u2
1.52.0-1+deb12u3

Open the chart page →

5,763
ai-agentromholdings0.0.11 of 1See more

ai-agent romholdings 0.0.1

1 of the 1 container images this version deploys carry CVE-2026-27135.

Container imageDigestPackageFixed in
quay.io/devtron/ai-agent:0.0.16545dac92173
nghttp2@1.52.0-1+deb12u1
1.52.0-1+deb12u3

Open the chart page →

9,685
argocd-certificate-refreshromholdings0.10.81 of 1See more

argocd-certificate-refresh romholdings 0.10.8

1 of the 1 container images this version deploys carry CVE-2026-27135.

Container imageDigestPackageFixed in
quay.io/devtron/argocd-cert-refresh:v102b6db27eaf3d
nghttp2@1.43.0-1build3
1.43.0-1ubuntu0.3

Open the chart page →

13,011
clairromholdings0.1.141 of 2See more

clair romholdings 0.1.14

1 of the 2 container images this version deploys carry CVE-2026-27135.

Container imageDigestPackageFixed in
quay.io/devtron/clair:4.3.675fb847ac045
nghttp2@1.33.0-3.el8_2.1
0:1.33.0-6.el8_10.2

Open the chart page →

6,237
devtron-enterpriseromholdings48.0.02 of 28See more

devtron-enterprise romholdings 48.0.0

2 of the 28 container images this version deploys carry CVE-2026-27135.

Container imageDigestPackageFixed in
quay.io/devtron/devtron-utils:dup-chart-repo-v1.1.095d6f0e05636
nghttp2@1.52.0-1
1.52.0-1+deb12u3
quay.io/devtron/notifier:9804331c-372-39294709c7da19c5a
nghttp2@1.52.0-1+deb12u2
1.52.0-1+deb12u3

Open the chart page →

68,695
devtron-logs-dumpromholdings0.1.01 of 1See more

devtron-logs-dump romholdings 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-27135.

Container imageDigestPackageFixed in
quay.io/devtron/k8s-utils:807ca3c2-488-14005f296c2ec5db7
nghttp2@1.43.0-1build3
1.43.0-1ubuntu0.3

Open the chart page →

4,972
devtron-operatorromholdings0.23.31 of 11See more

devtron-operator romholdings 0.23.3

1 of the 11 container images this version deploys carry CVE-2026-27135.

Container imageDigestPackageFixed in
quay.io/devtron/devtron-utils:dup-chart-repo-v1.1.095d6f0e05636
nghttp2@1.52.0-1
1.52.0-1+deb12u3

Open the chart page →

33,180
dgraphromholdings0.0.201 of 1See more

dgraph romholdings 0.0.20

1 of the 1 container images this version deploys carry CVE-2026-27135.

Container imageDigestPackageFixed in
dgraph/dgraph:v21.12.03b55ea83fffe
nghttp2@1.40.0-1build1
1.40.0-1ubuntu0.3+esm1

Open the chart page →

11,959
rommromm-helm-chartVerified publisher1.5.51 of 3See more

romm romm-helm-chart 1.5.5

1 of the 3 container images this version deploys carry CVE-2026-27135.

Container imageDigestPackageFixed in
rommapp/romm:5.2.03512f2ca4557
nghttp2@1.68.0-r0
1.68.1

Open the chart page →

3,420
pagesronan-pages1.0.02 of 3See more

pages ronan-pages 1.0.0

2 of the 3 container images this version deploys carry CVE-2026-27135.

Container imageDigestPackageFixed in
dellcloud/pages:monitor6ba7b22caacd
nghttp2@1.40.0-1build1
1.40.0-1ubuntu0.3+esm1
flyway/flyway:6.4.422d97ceb0c47
nghttp2@1.30.0-1ubuntu1
1.30.0-1ubuntu1+esm3

Open the chart page →

20,242
routehub-serverroutehub-helm1.0.11 of 3See more

routehub-server routehub-helm 1.0.1

1 of the 3 container images this version deploys carry CVE-2026-27135.

Container imageDigestPackageFixed in
eqalpha/keydb:latest6537505c4235
nghttp2@1.40.0-1ubuntu0.1
1.40.0-1ubuntu0.3+esm1

Open the chart page →

6,954
vsl-rpcrss30.3.41 of 4See more

vsl-rpc rss3 0.3.4

1 of the 4 container images this version deploys carry CVE-2026-27135.

Container imageDigestPackageFixed in
quay.io/curl/curl:8.16.0b17b13321678
nghttp2@1.65.0-r0
1.68.1

Open the chart page →

4,615
vsl-sequencerrss30.3.41 of 4See more

vsl-sequencer rss3 0.3.4

1 of the 4 container images this version deploys carry CVE-2026-27135.

Container imageDigestPackageFixed in
quay.io/curl/curl:8.16.0b17b13321678
nghttp2@1.65.0-r0
1.68.1

Open the chart page →

4,615
paperless-ngxrtomik-helm-chartsVerified publisher0.0.51 of 1See more

paperless-ngx rtomik-helm-charts 0.0.5

1 of the 1 container images this version deploys carry CVE-2026-27135.

Container imageDigestPackageFixed in
ghcr.io/paperless-ngx/paperless-ngx:2.20.357ad9565bff3
nghttp2@1.64.0-1.1
1.64.0-1.1+deb13u1

Open the chart page →

10,638
tandoorrtomik-helm-chartsVerified publisher0.0.11 of 1See more

tandoor rtomik-helm-charts 0.0.1

1 of the 1 container images this version deploys carry CVE-2026-27135.

Container imageDigestPackageFixed in
vabene1111/recipes:2.3.50f8d061895e9
nghttp2@1.65.0-r0
1.68.1

Open the chart page →

4,549
stirling-pdfrubxkubeVerified publisher0.1.21 of 1See more

stirling-pdf rubxkube 0.1.2

1 of the 1 container images this version deploys carry CVE-2026-27135.

Container imageDigestPackageFixed in
ghcr.io/stirling-tools/stirling-pdf:2.14.33b3670fce70b
nghttp2@1.59.0-1ubuntu0.2
1.59.0-1ubuntu0.3

Open the chart page →

6,303
trmnl-serverrubxkubeVerified publisher0.1.01 of 2See more

trmnl-server rubxkube 0.1.0

1 of the 2 container images this version deploys carry CVE-2026-27135.

Container imageDigestPackageFixed in
alpine/git:2.47.2062a01ad7a0e
nghttp2@1.64.0-r0
1.68.1

Open the chart page →

2,778
your-spotifyrubxkubeVerified publisher1.0.11 of 3See more

your-spotify rubxkube 1.0.1

1 of the 3 container images this version deploys carry CVE-2026-27135.

Container imageDigestPackageFixed in
bitnamilegacy/mongodb:latestb0652af9c8d0
nghttp2@1.52.0-1+deb12u2
1.52.0-1+deb12u3

Open the chart page →

5,102
rybbitrybbit-helm1.3.01 of 7See more

rybbit rybbit-helm 1.3.0

1 of the 7 container images this version deploys carry CVE-2026-27135.

Container imageDigestPackageFixed in
alpine/k8s:1.32.12048f8d9c8cc7
nghttp2@1.68.0-r0
1.68.1

Open the chart page →

5,852
nadekobotryuunosukeds30.1.21 of 2See more

nadekobot ryuunosukeds3 0.1.2

1 of the 2 container images this version deploys carry CVE-2026-27135.

Container imageDigestPackageFixed in
ryuunosukeds3/nadeko-bot-docker:latestc0398f13e8a9
nghttp2@1.43.0-1ubuntu0.2
1.43.0-1ubuntu0.3

Open the chart page →

8,733
transmissionryuunosukeds31.6.21 of 2See more

transmission ryuunosukeds3 1.6.2

1 of the 2 container images this version deploys carry CVE-2026-27135.

Container imageDigestPackageFixed in
library/python:3.9da5aee29682d
nghttp2@1.64.0-1.1
1.64.0-1.1+deb13u1

Open the chart page →

9,631
vrisingryuunosukeds30.1.01 of 1See more

vrising ryuunosukeds3 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-27135.

Container imageDigestPackageFixed in
trueosiris/vrising:latest9356f98ad561
nghttp2@1.43.0-1ubuntu0.2
1.43.0-1ubuntu0.3

Open the chart page →

7,403
safe-stacksafe-global0.1.01 of 9See more

safe-stack safe-global 0.1.0

1 of the 9 container images this version deploys carry CVE-2026-27135.

Container imageDigestPackageFixed in
gjeanmart/safe-ganache-node:latest926264c8f2d1
nghttp2@1.52.0-1
1.52.0-1+deb12u3

Open the chart page →

19,707
safe-transaction-servicesafe-global0.1.01 of 6See more

safe-transaction-service safe-global 0.1.0

1 of the 6 container images this version deploys carry CVE-2026-27135.

Container imageDigestPackageFixed in
gjeanmart/safe-ganache-node:latest926264c8f2d1
nghttp2@1.52.0-1
1.52.0-1+deb12u3

Open the chart page →

16,739
sagawisesagawiseVerified publisher0.1.01 of 3See more

sagawise sagawise 0.1.0

1 of the 3 container images this version deploys carry CVE-2026-27135.

Container imageDigestPackageFixed in
venturenox/sagawise:latestc11d32f18718
nghttp2@1.64.0-r0
1.68.1

Open the chart page →

4,210
fmtok8s-conference-chartsalaboy0.1.41 of 6See more

fmtok8s-conference-chart salaboy 0.1.4

1 of the 6 container images this version deploys carry CVE-2026-27135.

Container imageDigestPackageFixed in
ghcr.io/salaboy/fmtok8s-frontend:v0.1.103fd01b4f56e
nghttp2@1.43.0-1build3
1.43.0-1ubuntu0.3

Open the chart page →

16,193
fmtok8s-frontendsalaboy0.1.31 of 1See more

fmtok8s-frontend salaboy 0.1.3

1 of the 1 container images this version deploys carry CVE-2026-27135.

Container imageDigestPackageFixed in
ghcr.io/salaboy/fmtok8s-frontend:v0.1.103fd01b4f56e
nghttp2@1.43.0-1build3
1.43.0-1ubuntu0.3

Open the chart page →

8,100

Container images carrying it

1,495 by charts deploying them

A fixed version is listed for 3 of the 3 affected packages.

Container imageDigestPackageFixed inUsed by
ghcr.io/music-assistant/server:2.7.53522e8a7a8f0
nghttp2@1.52.0-1+deb12u2
1.52.0-1+deb12u3
1
ghcr.io/music-assistant/server:2.8.7eef3ee7810d0
nghttp2@1.52.0-1+deb12u2
1.52.0-1+deb12u3
1
ghcr.io/mydecisive/octant-ui:0.0.1-testing61e4066b22fb
nghttp2@1.68.0-r0
1.68.1
1
ghcr.io/ncsa/jupyterhub-metrics/collector:1.3.0dcb8c731bb1b
nghttp2@1.65.0-r0
1.68.1
1
ghcr.io/nefelim4ag/pingdom-operator:0.0.15f8c7afdcf439
nghttp2@1.52.0-1+deb12u1
1.52.0-1+deb12u3
1
ghcr.io/noahburrell0/sealed-secrets-ui:v0.1.47e7368fb472d
nghttp2@1.52.0-1+deb12u2
1.52.0-1+deb12u3
1
ghcr.io/oguzhan-yilmaz/argocd-backup-s3:latestb61c750ade19
nghttp2@1.52.0-1+deb12u2
1.52.0-1+deb12u3
1
ghcr.io/oguzhan-yilmaz/kdiff-snapshots:0.0.2035bc5ca66d55a
nghttp2@1.52.0-1+deb12u2
1.52.0-1+deb12u3
1
ghcr.io/oguzhan-yilmaz/kdiff-snapshots:0.0.55d7f93d2182fe
nghttp2@1.52.0-1+deb12u2
1.52.0-1+deb12u3
1
ghcr.io/opencatalogi/web-app:deva1a7f507f6ae
nghttp2@1.52.0-1+deb12u1
1.52.0-1+deb12u3
1
ghcr.io/opencost/opencost-parquet-exporter:v0.2.1ce85ef0ce665
nghttp2@1.52.0-1+deb12u2
1.52.0-1+deb12u3
1
ghcr.io/opencost/opencost-ui:1.118.0571f87e528ea
nghttp2@1.65.0-r0
1.68.1
1
ghcr.io/openrelik/openrelik-ui:latest7f91594d5eb3
nghttp2@1.68.0-r0
1.68.1
1
ghcr.io/open-telemetry/demo:1.12.0-imageprovider4e322858fe56
nghttp2@1.52.0-1+deb12u1
1.52.0-1+deb12u3
1
ghcr.io/open-telemetry/demo:1.12.0-quoteservice87eb325d306f
nghttp2@1.52.0-1+deb12u1
1.52.0-1+deb12u3
1
ghcr.io/open-telemetry/demo:3.0.0-image-provider93e1585e97ac
nghttp2@1.65.0-r0
1.68.1
1
ghcr.io/open-telemetry/demo:1.12.0-adservicea59e5eead495
nghttp2@1.59.0-1ubuntu0.1
1.59.0-1ubuntu0.3
1
ghcr.io/oznu/homebridge:2022-07-08ff2af53897e7
nghttp2@1.40.0-1build1
1.40.0-1ubuntu0.3+esm1
1
ghcr.io/pabloromeo/clusterplex_orchestrator:1.4.160fe80de2d22c
nghttp2@1.52.0-1+deb12u2
1.52.0-1+deb12u3
1
ghcr.io/paperless-ngx/paperless-ngx:2.13.10642357c5dbd
nghttp2@1.52.0-1+deb12u1
1.52.0-1+deb12u3
1
ghcr.io/paperless-ngx/paperless-ngx:2.20.134b05bcd28e69
nghttp2@1.64.0-1.1
1.64.0-1.1+deb13u1
1
ghcr.io/paperless-ngx/paperless-ngx:2.20.357ad9565bff3
nghttp2@1.64.0-1.1
1.64.0-1.1+deb13u1
1
ghcr.io/paperless-ngx/paperless-ngx:2.20.5665f2f5cc548
nghttp2@1.64.0-1.1
1.64.0-1.1+deb13u1
1
ghcr.io/paperless-ngx/paperless-ngx:2.0.1ab255bea133e
nghttp2@1.52.0-1
1.52.0-1+deb12u3
1
ghcr.io/paperless-ngx/paperless-ngx:2.20.14b89f83345532
nghttp2@1.64.0-1.1
1.64.0-1.1+deb13u1
1
ghcr.io/pixelfederation/unbound:1.24.2_0fce820a03964
nghttp2@1.68.0-r0
1.68.1
1
ghcr.io/projectnessie/nessie:0.92.19efe3c74d55f
nghttp2@1.43.0-5.el9_4.3
0:1.43.0-6.el9_7.1
1
ghcr.io/radar-base/radar-app-config/radar-app-config:0.6.24431db7b486b
nghttp2@1.59.0-1ubuntu0.2
1.59.0-1ubuntu0.3
1
ghcr.io/radar-base/radar-data-dashboard-backend/radar-data-dashboard-backend:0.2.4d1e55350923c
nghttp2@1.59.0-1ubuntu0.2
1.59.0-1ubuntu0.3
1
ghcr.io/radar-base/radar-gateway/radar-gateway:0.9.4219d894aa7a6
nghttp2@1.59.0-1ubuntu0.2
1.59.0-1ubuntu0.3
1
ghcr.io/radar-base/radar-output-restructure/radar-output-restructure:3.0.67fb9c70e96a4
nghttp2@1.59.0-1ubuntu0.2
1.59.0-1ubuntu0.3
1
ghcr.io/radar-base/radar-schemas/radar-schemas-tools:0.8.16c442e8bfe6b4
nghttp2@1.59.0-1ubuntu0.2
1.59.0-1ubuntu0.3
1
ghcr.io/radar-base/radar-upload-source-connector/radar-upload-connect-backend:0.6.46a04b43b8d9a
nghttp2@1.59.0-1ubuntu0.2
1.59.0-1ubuntu0.3
1
ghcr.io/radar-base/radar-upload-source-connector/radar-upload-connect-frontend:0.6.47e27863545fc
nghttp2@1.64.0-r0
1.68.1
1
ghcr.io/rajnandan1/kener:3.2.182b993cb232eb
nghttp2@1.52.0-1+deb12u2
1.52.0-1+deb12u3
1
ghcr.io/reiche-world/traefik-secrets-exporter:0.0.21485ff93cbf9
nghttp2@1.68.0-r0
1.68.1
1
ghcr.io/reitermarkus/7d2d:main39953b387b61
nghttp2@1.64.0-1.1
1.64.0-1.1+deb13u1
1
ghcr.io/sdwbgn/unitycatalog-helm/docker/unitycatalog-ui:0.2.1-5d668c1ed07e7ca098d
nghttp2@1.52.0-1+deb12u2
1.52.0-1+deb12u3
1
ghcr.io/sergelogvinov/mongodb:8.0.101eee8e20a87f
nghttp2@1.52.0-1+deb12u2
1.52.0-1+deb12u3
1
ghcr.io/sergelogvinov/mongosync:1.15.0fa99ed475f03
nghttp2@1.59.0-1ubuntu0.2
1.59.0-1ubuntu0.3
1
ghcr.io/sissbruecker/linkding:1.45.061b2eb9eed8e
nghttp2@1.64.0-1.1
1.64.0-1.1+deb13u1
1
ghcr.io/smarter-project/audio-client:v3.1.23c8375dc5487
nghttp2@1.40.0-1build1
1.40.0-1ubuntu0.3+esm1
1
ghcr.io/smarter-project/gstreamer:v1.0.25ecb16015aa8
nghttp2@1.40.0-1build1
1.40.0-1ubuntu0.3+esm1
1
ghcr.io/smarter-project/image-detector:v2.5.31dcca70c6446
nghttp2@1.40.0-1build1
1.40.0-1ubuntu0.3+esm1
1
ghcr.io/stirling-tools/stirling-pdf:2.14.33b3670fce70b
nghttp2@1.59.0-1ubuntu0.2
1.59.0-1ubuntu0.3
1
ghcr.io/streamingfast/firehose-core:v1.12.391fca773a63f
nghttp2@1.59.0-1ubuntu0.2
1.59.0-1ubuntu0.3
1
ghcr.io/streamingfast/firehose-ethereum:v2.12.489969b78fb07
nghttp2@1.59.0-1ubuntu0.2
1.59.0-1ubuntu0.3
1
ghcr.io/streamingfast/firehose-ethereum:v2.14.3bf816072380e
nghttp2@1.59.0-1ubuntu0.2
1.59.0-1ubuntu0.3
1
ghcr.io/streamingfast/firehose-ethereum:v2.12.4-gethd7bdfa7b41da
nghttp2@1.59.0-1ubuntu0.2
1.59.0-1ubuntu0.3
1
ghcr.io/streamingfast/go-ethereum:geth-v1.16.9-fh3.08e3cb38953a3
nghttp2@1.59.0-1ubuntu0.2
1.59.0-1ubuntu0.3
1

syft 1.42.1 · advisories as of 16 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.