StackRadar

CVE-2026-27135

High

Advisory

Published 18 Mar 2026In the index since 5 Sept 2026
Severity
High
worst across findings
CVSS
7.5
base score, highest
EPSS
0.008
54th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
1,448
of 17,781 indexed, latest versions
Container images
1,501
deployed by those charts
Fix available
3 of 3
affected packages

Red Hat Security Advisory: nghttp2 security update

Carried by container images the latest versions of 1,448 of 17,781 indexed charts deploy, on 1,501 images.

Affected packageAffected versionsFixed inImages
nghttp2deb1.30.0-1ubuntu1, 1.40.0-1build1, 1.40.0-1ubuntu0.1, 1.40.0-1ubuntu0.2+11 more1.30.0-1ubuntu1+esm3, 1.40.0-1ubuntu0.3+esm1, 1.43.0-1ubuntu0.3, 1.52.0-1+deb12u3+3 more935
nghttp2rpm1.33.0-1.el8, 1.33.0-1.el8_0.1, 1.33.0-3.el8_2.1, 1.33.0-3.el8_2.2+13 more0:1.33.0-6.el8_10.2, 0:1.43.0-6.el9_7.1, 0:1.64.0-2.el10_1.1, 1.64.0-150700.3.3.1+1 more321
nghttp2apk1.57.0-r0, 1.64.0-r0, 1.65.0-r0, 1.68.0-r01.68.1245
OSV records
ALPINE-CVE-2026-27135DEBIAN-CVE-2026-27135RHSA-2026:7666RHSA-2026:7667RHSA-2026:7668RLSA-2026:7667RLSA-2026:7668UBUNTU-CVE-2026-27135openSUSE-SU-2026:10437-1SUSE-SU-2026:1074-1
Also known as
RHSA-2026:8538, RHSA-2026:8539, RHSA-2026:8540, RHSA-2026:8541, RHSA-2026:8545, RHSA-2026:8547, RHSA-2026:8548, USN-8233-1

Charts affected

1,448 by stars
ChartLatestAffected imagesRadar Score
infrahubinfrahubVerified publisher4.33.21 of 5See more

infrahub infrahub 4.33.2

1 of the 5 container images this version deploys carry CVE-2026-27135.

Container imageDigestPackageFixed in
bitnamilegacy/rabbitmq:4.1.3-debian-12-r19e635efba431
nghttp2@1.52.0-1+deb12u2
1.52.0-1+deb12u3

Open the chart page →

10,428
plexk8s-home-lab-repo7.3.11 of 1See more

plex k8s-home-lab-repo 7.3.1

1 of the 1 container images this version deploys carry CVE-2026-27135.

Container imageDigestPackageFixed in
ghcr.io/home-operations/plex:1.43.1a9c3723cb31c
nghttp2@1.59.0-1ubuntu0.2
1.59.0-1ubuntu0.3

Open the chart page →

1,685
kamu-api-serverkamuVerified publisher0.89.01 of 1See more

kamu-api-server kamu 0.89.0

1 of the 1 container images this version deploys carry CVE-2026-27135.

Container imageDigestPackageFixed in
ghcr.io/kamu-data/kamu-api-server:0.89.04ed7a896dd2b
nghttp2@1.40.0-1ubuntu0.3
1.40.0-1ubuntu0.3+esm1

Open the chart page →

6,307
keycloak-operatorkeycloak-operatorVerified publisher0.0.41 of 1See more

keycloak-operator keycloak-operator 0.0.4

1 of the 1 container images this version deploys carry CVE-2026-27135.

Container imageDigestPackageFixed in
quay.io/keycloak/keycloak-operator:20.0.2b1710745fa64
nghttp2@1.33.0-3.el8_2.1
0:1.33.0-6.el8_10.2

Open the chart page →

4,652
percona-xtradb-clusterkfirfer1.5.101 of 3See more

percona-xtradb-cluster kfirfer 1.5.10

1 of the 3 container images this version deploys carry CVE-2026-27135.

Container imageDigestPackageFixed in
percona/percona-xtradb-cluster:8.0.32-24.21f978ab8912e
nghttp2@1.33.0-3.el8_2.1
0:1.33.0-6.el8_10.2

Open the chart page →

4,957
kubeflowkubeflow1.6.23 of 45See more

kubeflow kubeflow 1.6.2

3 of the 45 container images this version deploys carry CVE-2026-27135.

Container imageDigestPackageFixed in
istio/proxyv2:1.9.687a9db561d2e
nghttp2@1.30.0-1ubuntu1
1.30.0-1ubuntu1+esm3
istio/proxyv2:1.14.1df69c1a7af7c
nghttp2@1.40.0-1build1
1.40.0-1ubuntu0.3+esm1
library/python:3.7eedf63967cdb
nghttp2@1.52.0-1
1.52.0-1+deb12u3

Open the chart page →

96,941
kubernetes-loggingkubernetes-logging4.8.01 of 6See more

kubernetes-logging kubernetes-logging 4.8.0

1 of the 6 container images this version deploys carry CVE-2026-27135.

Container imageDigestPackageFixed in
opensearchproject/logstash-oss-with-opensearch-output-plugin:8.9.043b0cdaf26ed
nghttp2@1.40.0-1ubuntu0.1
1.40.0-1ubuntu0.3+esm1

Open the chart page →

10,530
venti-stackkuossOfficialVerified publisher0.5.02 of 9See more

venti-stack kuoss 0.5.0

2 of the 9 container images this version deploys carry CVE-2026-27135.

Container imageDigestPackageFixed in
ghcr.io/kuoss/lethe:v0.3.3ebdf55fd5705
nghttp2@1.65.0-r0
1.68.1
ghcr.io/kuoss/venti:v0.3.38ee3e70d77f1
nghttp2@1.65.0-r0
1.68.1

Open the chart page →

3,808
librechatlibrechat1.8.101 of 3See more

librechat librechat 1.8.10

1 of the 3 container images this version deploys carry CVE-2026-27135.

Container imageDigestPackageFixed in
ghcr.io/danny-avila/librechat:v0.7.78c68abbe1cff
nghttp2@1.64.0-r0
1.68.1

Open the chart page →

2,654
librechatlibrechat-openshiftVerified publisher1.9.01 of 3See more

librechat librechat-openshift 1.9.0

1 of the 3 container images this version deploys carry CVE-2026-27135.

Container imageDigestPackageFixed in
library/mongo:8.0.20098862b1339f
nghttp2@1.59.0-1ubuntu0.2
1.59.0-1ubuntu0.3

Open the chart page →

5,779
radarrloeken-at-homeVerified publisher5.27.0-nightly1 of 1See more

radarr loeken-at-home 5.27.0-nightly

1 of the 1 container images this version deploys carry CVE-2026-27135.

Container imageDigestPackageFixed in
loeken/radarr:5.27.0-nightlya24409d3846d
nghttp2@1.64.0-r0
1.68.1

Open the chart page →

586
headplanenbcloudVerified publisher0.1.21 of 4See more

headplane nbcloud 0.1.2

1 of the 4 container images this version deploys carry CVE-2026-27135.

Container imageDigestPackageFixed in
bitnamilegacy/kubectl:latestcd354d5b2556
nghttp2@1.52.0-1+deb12u2
1.52.0-1+deb12u3

Open the chart page →

7,949
open5gsopen5gsVerified publisher2.3.41 of 5See more

open5gs open5gs 2.3.4

1 of the 5 container images this version deploys carry CVE-2026-27135.

Container imageDigestPackageFixed in
gradiant/open5gs-dbctl:0.10.3332031245fce
nghttp2@1.59.0-1ubuntu0.2
1.59.0-1ubuntu0.3

Open the chart page →

9,261
mattermostphntom3.24.01 of 2See more

mattermost phntom 3.24.0

1 of the 2 container images this version deploys carry CVE-2026-27135.

Container imageDigestPackageFixed in
phntom/mattermost-team-edition:9.3.051cf9da4aa2e
nghttp2@1.43.0-1ubuntu0.1
1.43.0-1ubuntu0.3

Open the chart page →

8,722
unifi-controllerqonstruktVerified publisher2.6.11 of 1See more

unifi-controller qonstrukt 2.6.1

1 of the 1 container images this version deploys carry CVE-2026-27135.

Container imageDigestPackageFixed in
linuxserver/unifi-controller:8.0.240ae315a3a456
nghttp2@1.40.0-1ubuntu0.2
1.40.0-1ubuntu0.3+esm1

Open the chart page →

10,469
fulciosigstoreVerified publisher2.11.11 of 6See more

fulcio sigstore 2.11.1

1 of the 6 container images this version deploys carry CVE-2026-27135.

Container imageDigestPackageFixed in
curlimages/curl:8.17.0935d9100e9ba
nghttp2@1.65.0-r0
1.68.1

Open the chart page →

3,490
uffizzi-appuffizzi-app1.3.01 of 14See more

uffizzi-app uffizzi-app 1.3.0

1 of the 14 container images this version deploys carry CVE-2026-27135.

Container imageDigestPackageFixed in
uffizzi/controller:latest0344805f267b
nghttp2@1.52.0-1+deb12u1
1.52.0-1+deb12u3

Open the chart page →

19,337
unboundunbound-helmchartVerified publisher0.2.21 of 1See more

unbound unbound-helmchart 0.2.2

1 of the 1 container images this version deploys carry CVE-2026-27135.

Container imageDigestPackageFixed in
ghcr.io/pixelfederation/unbound:1.24.2_0fce820a03964
nghttp2@1.68.0-r0
1.68.1

Open the chart page →

1,494
reposilitevolker-raschekVerified publisher1.0.01 of 1See more

reposilite volker-raschek 1.0.0

1 of the 1 container images this version deploys carry CVE-2026-27135.

Container imageDigestPackageFixed in
dzikoysk/reposilite:3.5.264128c2d7a6ba
nghttp2@1.59.0-1ubuntu0.2
1.59.0-1ubuntu0.3

Open the chart page →

2,957
grafana-pdf-exporterwiremindVerified publisher2.1.11 of 1See more

grafana-pdf-exporter wiremind 2.1.1

1 of the 1 container images this version deploys carry CVE-2026-27135.

Container imageDigestPackageFixed in
ghcr.io/wiremind/grafana-pdf-exporter:v1.7dbaa8527bf4c
nghttp2@1.52.0-1
1.52.0-1+deb12u3

Open the chart page →

9,746
eshoponabpabp-charts1.0.01 of 15See more

eshoponabp abp-charts 1.0.0

1 of the 15 container images this version deploys carry CVE-2026-27135.

Container imageDigestPackageFixed in
library/mongo:4.2699d652ed674
nghttp2@1.30.0-1ubuntu1
1.30.0-1ubuntu1+esm3

Open the chart page →

19,799
code-serveralekcVerified publisher0.1.11 of 1See more

code-server alekc 0.1.1

1 of the 1 container images this version deploys carry CVE-2026-27135.

Container imageDigestPackageFixed in
linuxserver/code-server:4.10.1a5e43a05ae79
nghttp2@1.43.0-1build3
1.43.0-1ubuntu0.3

Open the chart page →

8,212
pod-gatewayangelnu7.1.11 of 2See more

pod-gateway angelnu 7.1.1

1 of the 2 container images this version deploys carry CVE-2026-27135.

Container imageDigestPackageFixed in
ghcr.io/angelnu/pod-gateway:v1.13.0a5b032e15f75
nghttp2@1.64.0-r0
1.68.1

Open the chart page →

1,133
openshift-consoleav1o-chartsVerified publisher0.3.61 of 1See more

openshift-console av1o-charts 0.3.6

1 of the 1 container images this version deploys carry CVE-2026-27135.

Container imageDigestPackageFixed in
quay.io/openshift/origin-console:4.10.00bbe8b451fa3
nghttp2@1.33.0-3.el8_2.2
0:1.33.0-6.el8_10.2

Open the chart page →

9,052
backup-zenbzen0.1.41 of 1See more

backup-zen bzen 0.1.4

1 of the 1 container images this version deploys carry CVE-2026-27135.

Container imageDigestPackageFixed in
rezachalak/bzen-mongo:1.0.034f694325191
nghttp2@1.40.0-1ubuntu0.1
1.40.0-1ubuntu0.3+esm1

Open the chart page →

7,960
certscertsVerified publisher2.1.31 of 1See more

certs certs 2.1.3

1 of the 1 container images this version deploys carry CVE-2026-27135.

Container imageDigestPackageFixed in
mathnao/certs:2.1.3b900e6b64684
nghttp2@1.64.0-r0
1.68.1

Open the chart page →

695
collabora-codechrisingenhaag2.6.01 of 1See more

collabora-code chrisingenhaag 2.6.0

1 of the 1 container images this version deploys carry CVE-2026-27135.

Container imageDigestPackageFixed in
collabora/code:23.05.10.1.105299b452f7f
nghttp2@1.52.0-1+deb12u1
1.52.0-1+deb12u3

Open the chart page →

4,180
coder-observabilitycoder-observabilityVerified publisher0.7.33 of 21See more

coder-observability coder-observability 0.7.3

3 of the 21 container images this version deploys carry CVE-2026-27135.

Container imageDigestPackageFixed in
grafana/grafana:10.4.19a9043254ba16
nghttp2@1.64.0-r0
1.68.1
quay.io/minio/mc:RELEASE.2022-09-16T09-16-47Z546a8b52d7b0
nghttp2@1.33.0-3.el8_2.1
0:1.33.0-6.el8_10.2
quay.io/minio/minio:RELEASE.2022-09-17T00-09-45Zc3d20bc2ea08
nghttp2@1.33.0-3.el8_2.1
0:1.33.0-6.el8_10.2

Open the chart page →

24,700
codetogethercodetogether1.4.251 of 1See more

codetogether codetogether 1.4.25

1 of the 1 container images this version deploys carry CVE-2026-27135.

Container imageDigestPackageFixed in
codetogether/codetogether:latest4348c8a38752
nghttp2@1.43.0-5.el9_4.3
0:1.43.0-6.el9_7.1

Open the chart page →

7,450
convertigoconvertigoOfficialVerified publisher8.4.32 of 5See more

convertigo convertigo 8.4.3

2 of the 5 container images this version deploys carry CVE-2026-27135.

Container imageDigestPackageFixed in
baserow/baserow:1.30.1df0c42eb67e8
nghttp2@1.52.0-1+deb12u2
1.52.0-1+deb12u3
library/couchdb:3.4.22817ad50b5c5
nghttp2@1.52.0-1+deb12u2
1.52.0-1+deb12u3

Open the chart page →

17,404
core-dump-handlercore-dump-handler9.0.01 of 1See more

core-dump-handler core-dump-handler 9.0.0

1 of the 1 container images this version deploys carry CVE-2026-27135.

Container imageDigestPackageFixed in
quay.io/icdh/core-dump-handler:v9.0.0cc79b9e2a1c8
nghttp2@1.33.0-6.el8_10.1
0:1.33.0-6.el8_10.2

Open the chart page →

3,080
cosmocosmo-platformOfficialVerified publisher0.20.02 of 10See more

cosmo cosmo-platform 0.20.0

2 of the 10 container images this version deploys carry CVE-2026-27135.

Container imageDigestPackageFixed in
bitnamilegacy/minio:2025.7.23-debian-12-r56dabb4a2088c
nghttp2@1.52.0-1+deb12u2
1.52.0-1+deb12u3
ghcr.io/wundergraph/cosmo/otelcollector:0.18.15a6fe78d4d15
nghttp2@1.52.0-1+deb12u2
1.52.0-1+deb12u3

Open the chart page →

28,839
dask-kubernetes-operatordask2026.3.01 of 1See more

dask-kubernetes-operator dask 2026.3.0

1 of the 1 container images this version deploys carry CVE-2026-27135.

Container imageDigestPackageFixed in
ghcr.io/dask/dask-kubernetes-operator:2026.3.03225d2bc6b3c
nghttp2@1.64.0-1.1
1.64.0-1.1+deb13u1

Open the chart page →

9,316
zabbix-kubernetes-discoverydjerfyVerified publisher1.4.201 of 1See more

zabbix-kubernetes-discovery djerfy 1.4.20

1 of the 1 container images this version deploys carry CVE-2026-27135.

Container imageDigestPackageFixed in
ghcr.io/djerfy/zabbix-kubernetes-discovery:v1.4.207a50c07e7c69
nghttp2@1.59.0-1ubuntu0.1
1.59.0-1ubuntu0.3

Open the chart page →

4,147
duplistatusduplistatusVerified publisher1.2.01 of 2See more

duplistatus duplistatus 1.2.0

1 of the 2 container images this version deploys carry CVE-2026-27135.

Container imageDigestPackageFixed in
curlimages/curl:8.18.0d94d07ba9e7d
nghttp2@1.68.0-r0
1.68.1

Open the chart page →

1,870
bscdysnixVerified publisher0.6.591 of 4See more

bsc dysnix 0.6.59

1 of the 4 container images this version deploys carry CVE-2026-27135.

Container imageDigestPackageFixed in
ghcr.io/bnb-chain/bsc:1.6.2fd0e3ec7d960
nghttp2@1.64.0-r0
1.68.1

Open the chart page →

2,012
edgelessdbedgelesssysVerified publisher0.3.21 of 1See more

edgelessdb edgelesssys 0.3.2

1 of the 1 container images this version deploys carry CVE-2026-27135.

Container imageDigestPackageFixed in
ghcr.io/edgelesssys/edgelessdb-sgx-1gb:v0.3.27e1d7a11a11a
nghttp2@1.40.0-1build1
1.40.0-1ubuntu0.3+esm1

Open the chart page →

4,830
openshift-secured-appeximiaitVerified publisher0.5.01 of 1See more

openshift-secured-app eximiait 0.5.0

1 of the 1 container images this version deploys carry CVE-2026-27135.

Container imageDigestPackageFixed in
quay.io/openshift/origin-oauth-proxy:4.14a7dff785d821
nghttp2@1.33.0-4.el8_6.1
0:1.33.0-6.el8_10.2

Open the chart page →

12,042
openshift-secured-pgadmineximiaitVerified publisher0.2.01 of 2See more

openshift-secured-pgadmin eximiait 0.2.0

1 of the 2 container images this version deploys carry CVE-2026-27135.

Container imageDigestPackageFixed in
quay.io/openshift/origin-oauth-proxy:4.14a7dff785d821
nghttp2@1.33.0-4.el8_6.1
0:1.33.0-6.el8_10.2

Open the chart page →

14,546
openshift-secured-redisInsighteximiaitVerified publisher0.9.21 of 2See more

openshift-secured-redisInsight eximiait 0.9.2

1 of the 2 container images this version deploys carry CVE-2026-27135.

Container imageDigestPackageFixed in
quay.io/openshift/origin-oauth-proxy:4.14a7dff785d821
nghttp2@1.33.0-4.el8_6.1
0:1.33.0-6.el8_10.2

Open the chart page →

13,874
zabbix-agentfermosit0.0.51 of 1See more

zabbix-agent fermosit 0.0.5

1 of the 1 container images this version deploys carry CVE-2026-27135.

Container imageDigestPackageFixed in
zabbix/zabbix-agent:ubuntu-6.4-latest349b924472a7
nghttp2@1.59.0-1ubuntu0.1
1.59.0-1ubuntu0.3

Open the chart page →

2,369
keydbfinkinfridomVerified publisher0.48.31 of 1See more

keydb finkinfridom 0.48.3

1 of the 1 container images this version deploys carry CVE-2026-27135.

Container imageDigestPackageFixed in
eqalpha/keydb:x86_64_v6.3.4eceb1806730c
nghttp2@1.40.0-1ubuntu0.1
1.40.0-1ubuntu0.3+esm1

Open the chart page →

5,264
healthchecksgabe565Verified publisher0.17.01 of 1See more

healthchecks gabe565 0.17.0

1 of the 1 container images this version deploys carry CVE-2026-27135.

Container imageDigestPackageFixed in
ghcr.io/linuxserver/healthchecks:version-v3.9b5c6bfb00b03
nghttp2@1.64.0-r0
1.68.1

Open the chart page →

2,286
calibregeek-cookbookVerified publisher5.4.21 of 1See more

calibre geek-cookbook 5.4.2

1 of the 1 container images this version deploys carry CVE-2026-27135.

Container imageDigestPackageFixed in
linuxserver/calibre:version-v5.21.0a847b5b2d860
nghttp2@1.30.0-1ubuntu1
1.30.0-1ubuntu1+esm3

Open the chart page →

22,773
network-ups-toolsgeek-cookbookVerified publisher6.4.21 of 1See more

network-ups-tools geek-cookbook 6.4.2

1 of the 1 container images this version deploys carry CVE-2026-27135.

Container imageDigestPackageFixed in
ghcr.io/k8s-at-home/network-ups-tools:v2.7.4-2479-g86a32237cbd5d4cc1245
nghttp2@1.40.0-1build1
1.40.0-1ubuntu0.3+esm1

Open the chart page →

13,950
plexgeek-cookbookVerified publisher6.4.31 of 1See more

plex geek-cookbook 6.4.3

1 of the 1 container images this version deploys carry CVE-2026-27135.

Container imageDigestPackageFixed in
ghcr.io/k8s-at-home/plex:v1.28.0.5999-97678ded3ef756c7d784b
nghttp2@1.40.0-1build1
1.40.0-1ubuntu0.3+esm1

Open the chart page →

9,627
signal-cli-rest-apigeek-cookbookVerified publisher1.2.21 of 1See more

signal-cli-rest-api geek-cookbook 1.2.2

1 of the 1 container images this version deploys carry CVE-2026-27135.

Container imageDigestPackageFixed in
bbernhard/signal-cli-rest-api:0.57549ad08d7e14
nghttp2@1.40.0-1build1
1.40.0-1ubuntu0.3+esm1

Open the chart page →

10,154
tautulligeek-cookbookVerified publisher11.4.21 of 1See more

tautulli geek-cookbook 11.4.2

1 of the 1 container images this version deploys carry CVE-2026-27135.

Container imageDigestPackageFixed in
ghcr.io/k8s-at-home/tautulli:v2.7.74ea617c30397
nghttp2@1.40.0-1build1
1.40.0-1ubuntu0.3+esm1

Open the chart page →

10,628
unifigeek-cookbookVerified publisher5.1.31 of 1See more

unifi geek-cookbook 5.1.3

1 of the 1 container images this version deploys carry CVE-2026-27135.

Container imageDigestPackageFixed in
jacobalberty/unifi:v7.4.162b3edc809a3ff
nghttp2@1.30.0-1ubuntu1
1.30.0-1ubuntu1+esm3

Open the chart page →

11,839
simple-krr-dashboardhelm-simple-krr-dashboardVerified publisher1.6.21 of 3See more

simple-krr-dashboard helm-simple-krr-dashboard 1.6.2

1 of the 3 container images this version deploys carry CVE-2026-27135.

Container imageDigestPackageFixed in
alpine/kubectl:1.35.2ec8f734b0a10
nghttp2@1.68.0-r0
1.68.1

Open the chart page →

2,234

Container images carrying it

1,501 by charts deploying them

A fixed version is listed for 3 of the 3 affected packages.

Container imageDigestPackageFixed inUsed by
alpine/kubectl:1.35.3c4a11ae9a1cb
nghttp2@1.68.0-r0
1.68.1
1
alquimiaai/studio:certification38a1f0341982
nghttp2@1.43.0-6.el9
0:1.43.0-6.el9_7.1
1
altinity/clickhouse-operator:0.19.07a85f522c5bc
nghttp2@1.33.0-3.el8_2.1
0:1.33.0-6.el8_10.2
1
altinity/clickhouse-operator:0.20.08f0f582d41f0
nghttp2@1.33.0-3.el8_2.1
0:1.33.0-6.el8_10.2
1
altinity/metrics-exporter:0.20.01a46d104406d
nghttp2@1.33.0-3.el8_2.1
0:1.33.0-6.el8_10.2
1
anchore/anchore-engine:v0.10.0bde9eedf639d
nghttp2@1.33.0-3.el8_2.1
0:1.33.0-6.el8_10.2
1
anchore/anchore-engine:v0.7.1ed9b3badd17c
nghttp2@1.33.0-1.el8_0.1
0:1.33.0-6.el8_10.2
1
andrewgaul/s3proxy:sha-85b0f987dc1d34174a5
nghttp2@1.59.0-1ubuntu0.1
1.59.0-1ubuntu0.3
1
andrianrf/backoffice:latest047a7837651e
nghttp2@1.33.0-6.el8_10.1
0:1.33.0-6.el8_10.2
1
andrianrf/backoffice-be:latest6036614803d4
nghttp2@1.43.0-5.el9
0:1.43.0-6.el9_7.1
1
andrianrf/iso-server:latest7da47f525c7d
nghttp2@1.43.0-5.el9
0:1.43.0-6.el9_7.1
1
anguda/ant-media:2.5c435285fc241
nghttp2@1.40.0-1build1
1.40.0-1ubuntu0.3+esm1
1
antrea/antrea-ui-frontend:v0.8.0ee9686bcefb8
nghttp2@1.64.0-1.1
1.64.0-1.1+deb13u1
1
anujdatar/cups:25.07.01685df04a643b
nghttp2@1.52.0-1+deb12u2
1.52.0-1+deb12u3
1
apache/activemq-artemis:2.44.00305c26f19ed
nghttp2@1.59.0-1ubuntu0.2
1.59.0-1ubuntu0.3
1
apache/activemq-artemis:2.37.0bae523439ee3
nghttp2@1.59.0-1ubuntu0.1
1.59.0-1ubuntu0.3
1
apache/airflow:2.8.4-python3.964e58748b6b9
nghttp2@1.52.0-1+deb12u1
1.52.0-1+deb12u3
1
apache/airflow:2.10.2-python3.9ce90bdc3d2af
nghttp2@1.52.0-1+deb12u1
1.52.0-1+deb12u3
1
apache/airflow:2.8.1e5560ad0b86e
nghttp2@1.52.0-1+deb12u1
1.52.0-1+deb12u3
1
apache/camel-k:1.10.43bb13d14f64a
nghttp2@1.33.0-3.el8_2.1
0:1.33.0-6.el8_10.2
1
apache/gravitino-iceberg-rest:1.3.080136ae753ee
nghttp2@1.43.0-1ubuntu0.2
1.43.0-1ubuntu0.3
1
apache/hertzbeat:1.8.075d48a62748f
nghttp2@1.59.0-1ubuntu0.2
1.59.0-1ubuntu0.3
1
apache/hertzbeat-collector:1.8.0a2bab1be574c
nghttp2@1.59.0-1ubuntu0.2
1.59.0-1ubuntu0.3
1
apache/iotdb:0.13.3-nodeafa47bf1692a
nghttp2@1.40.0-1build1
1.40.0-1ubuntu0.3+esm1
1
apache/nifi-registry:1.27.063b8e3e40742
nghttp2@1.43.0-1ubuntu0.2
1.43.0-1ubuntu0.3
1
apachepulsar/pulsar:3.1.016f9fdab3fa6
nghttp2@1.43.0-1build3
1.43.0-1ubuntu0.3
1
apachepulsar/pulsar:2.10.03b262ab7a7d9
nghttp2@1.40.0-1build1
1.40.0-1ubuntu0.3+esm1
1
apachepulsar/pulsar:3.0.79c9947de139d
nghttp2@1.43.0-1ubuntu0.2
1.43.0-1ubuntu0.3
1
apachepulsar/pulsar:2.9.0d056c89b7131
nghttp2@1.40.0-1build1
1.40.0-1ubuntu0.3+esm1
1
apachepulsar/pulsar:2.8.2d538416d5afe
nghttp2@1.40.0-1build1
1.40.0-1ubuntu0.3+esm1
1
apache/ranger:2.7.076c176e8a0e4
nghttp2@1.43.0-1ubuntu0.2
1.43.0-1ubuntu0.3
1
apache/rocketmq:5.3.0434d8398f996
nghttp2@1.59.0-1ubuntu0.1
1.59.0-1ubuntu0.3
1
apache/rocketmq-exporter:0.0.2c8fb51195444
nghttp2@1.43.0-1ubuntu0.1
1.43.0-1ubuntu0.3
1
apache/skywalking-oap-server:9.2.0133d35d2c263
nghttp2@1.43.0-1build3
1.43.0-1ubuntu0.3
1
apache/skywalking-oap-server:8.9.1b4ec8c18d079
nghttp2@1.40.0-1build1
1.40.0-1ubuntu0.3+esm1
1
apache/skywalking-ui:9.2.0295f1dc87d98
nghttp2@1.43.0-1build3
1.43.0-1ubuntu0.3
1
apache/skywalking-ui:8.9.180530f0308a5
nghttp2@1.40.0-1build1
1.40.0-1ubuntu0.3+esm1
1
apache/superset:4.0.1ab9467fd712c
nghttp2@1.52.0-1+deb12u1
1.52.0-1+deb12u3
1
apecloud/aperag:v0.0.0-nightly8ac9947a2c84
nghttp2@1.64.0-1.1
1.64.0-1.1+deb13u1
1
apecloud/kb-cloud-installer:v2.1.42-certified98abc64aa985
nghttp2@1.43.0-6.el9
0:1.43.0-6.el9_7.1
1
apecloud/smartfs-csi-driver:0.1.1ff2858eab9cc
nghttp2@1.33.0-5.el8_8
0:1.33.0-6.el8_10.2
1
apicurio/apicurio-registry-kafkasql:2.1.0.Finala97d67487532
nghttp2@1.33.0-3.el8_2.1
0:1.33.0-6.el8_10.2
1
apicurio/apicurio-studio-api:0.2.62.Final302d202ed149
nghttp2@1.33.0-3.el8_2.1
0:1.33.0-6.el8_10.2
1
apicurio/apicurio-studio-ui:0.2.62.Final349c845270c2
nghttp2@1.33.0-3.el8_2.1
0:1.33.0-6.el8_10.2
1
apicurio/apicurio-studio-ws:0.2.62.Final27a91978a388
nghttp2@1.33.0-3.el8_2.1
0:1.33.0-6.el8_10.2
1
appwrite/appwrite:1.9.01aaa70127114
nghttp2@1.68.0-r0
1.68.1
1
appwrite/console:8.7.383dcdc8492ac6
nghttp2@1.68.0-r0
1.68.1
1
aquasec/tracee:0.24.1cfbbfee972e6
nghttp2@1.64.0-r0
1.68.1
1
aquasec/trivy:0.69.3bcc376de8d77
nghttp2@1.68.0-r0
1.68.1
1
aristidetm/basic-notebook:3.6.5469dbc951224
nghttp2@1.52.0-1+deb12u1
1.52.0-1+deb12u3
1

syft 1.42.1 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.