CVE-2026-2781
CriticalAdvisory
Published 24 Feb 2026In the index since 5 Sept 2026
- Severity
- Critical
- worst across findings
- CVSS
- 9.8
- base score, highest
- EPSS
- 0.004
- 29th percentile
- CISA KEV
- Not listed
- no confirmed exploitation
- Charts affected
- 155
- of 17,781 indexed, latest versions
- Container images
- 146
- deployed by those charts
- Fix available
- 1 of 1
- affected package
nss - security update
Carried by container images the latest versions of 155 of 17,781 indexed charts deploy, on 146 images.
| Affected package | Affected versions | Fixed in | Images |
|---|---|---|---|
| nssdeb | 2:3.17.1-0ubuntu0.14.04.1, 2:3.28.4-0ubuntu0.14.04.3, 2:3.28.4-0ubuntu0.16.04.3, 2:3.28.4-0ubuntu0.16.04.4+27 more | 2:3.28.4-0ubuntu0.14.04.5+esm13, 2:3.28.4-0ubuntu0.16.04.14+esm5, 2:3.35-2ubuntu2.16+esm1, 2:3.61-1+deb11u5+6 more | 146 |
- OSV records
- DEBIAN-CVE-2026-2781UBUNTU-CVE-2026-2781DLA-4508-1
- Also known as
- DSA-6149-1, USN-8071-1, USN-8071-2
Charts affected
155 by stars
| Chart | Latest | Affected images | Radar Score |
|---|---|---|---|
| maybe-financevicsuferVerified publisher | 0.2.7 | 1 of 3See more | 10,795 |
| webhookiewebhookie | 0.1.2 | 1 of 1See more | 14,364 |
| webhookie-allwebhookie | 0.1.2 | 1 of 3See more | 28,605 |
| kibanawiremindVerified publisher | 8.5.23 | 1 of 2See more | 6,285 |
| playwright-synthetic-monitoringwork-adventure | 1.0.1 | 1 of 1See more | 14,100 |
Container images carrying it
146 by charts deploying them
A fixed version is listed for 1 of the 1 affected package.
| Container image | Digest | Package | Fixed in | Used by |
|---|---|---|---|---|
| jacobalberty/ | c409924e2463 | nss | 2:3.28.4-0ubuntu0.16.04.14+esm5 | 1 |
| jaedb/ | 048cfbf58d57 | nss | 2:3.87.1-1+deb12u2 | 1 |
| jpgouin/ | bfdd0088c776 | nss | 2:3.87.1-1+deb12u2 | 1 |
| kinseii/ | 7160eb143728 | nss | 2:3.87.1-1+deb12u2 | 1 |
| kobotoolbox/ | b15679454415 | nss | 2:3.61-1+deb11u5 | 1 |
| kobotoolbox/ | bcacc01bccd4 | nss | 2:3.61-1+deb11u5 | 1 |
| library/ | 0172f1c538e7 | nss | 2:3.98-0ubuntu0.20.04.2+esm1 | 1 |
| library/ | 04c0fc150f3a | nss | 2:3.98-0ubuntu0.20.04.2+esm1 | 1 |
| library/ | c5781ba340ef | nss | 2:3.98-0ubuntu0.20.04.2+esm1 | 1 |
| library/ | e2e2031c15be | nss | 2:3.98-0ubuntu0.20.04.2+esm1 | 1 |
| linuxserver/ | a847b5b2d860 | nss | 2:3.35-2ubuntu2.16+esm1 | 1 |
| linuxserver/ | 938810eca3d3 | nss | 2:3.98-0ubuntu0.20.04.2+esm1 | 1 |
| linuxserver/ | 0ae315a3a456 | nss | 2:3.98-0ubuntu0.20.04.2+esm1 | 1 |
| linuxserver/ | ab105cc50322 | nss | 2:3.98-0ubuntu0.20.04.2+esm1 | 1 |
| livekit/ | 1ab01641b366 | nss | 2:3.98-0ubuntu0.22.04.3 | 1 |
| localstack/ | 9d278167f2b7 | nss | 2:3.87.1-1+deb12u2 | 1 |
| louislam/ | 4c364ef96aad | nss | 2:3.87.1-1+deb12u2 | 1 |
| lsstsqre/ | e139fde946d7 | nss | 2:3.61-1+deb11u5 | 1 |
| mediagis/ | c15e941485ef | nss | 2:3.98-0ubuntu0.20.04.2+esm1 | 1 |
| mediagis/ | d0eae7b51374 | nss | 2:3.98-0ubuntu0.22.04.3 | 1 |
| merlos/ | a38fc7e09ed7 | nss | 2:3.87.1-1+deb12u2 | 1 |
| mlikiowa/ | 1336a777f9a4 | nss | 2:3.98-0ubuntu0.22.04.3 | 1 |
| omecproject/ | b4ae7d0d6b74 | nss | 2:3.35-2ubuntu2.16+esm1 | 1 |
| openkm/ | 3bc465a7461b | nss | 2:3.98-0ubuntu0.20.04.2+esm1 | 1 |
| openzaak/ | 2ca2ea6e0ae9 | nss | 2:3.61-1+deb11u5 | 1 |
| opsmx11/ | 5c50ca123d88 | nss | 2:3.28.4-0ubuntu0.14.04.5+esm13 | 1 |
| penpotapp/ | 5c835ffd87ab | nss | 2:3.98-0ubuntu0.22.04.3 | 1 |
| phntom/ | 51cf9da4aa2e | nss | 2:3.98-0ubuntu0.22.04.3 | 1 |
| photoprism/ | db16ee6b1ba3 | nss | 2:3.114-1ubuntu0.1 | 1 |
| photoprism/ | fc6fd632ca74 | nss | 2:3.98-1ubuntu0.1 | 1 |
| project2team4/ | 3ff031a08887 | nss | 2:3.98-0ubuntu0.20.04.2+esm1 | 1 |
| rundeck/ | 4d64fe56f767 | nss | 2:3.28.4-0ubuntu0.16.04.14+esm5 | 1 |
| rundeck/ | b13e8059ad72 | nss | 2:3.28.4-0ubuntu0.16.04.14+esm5 | 1 |
| sbs20/ | dad1fd6e9a98 | nss | 2:3.87.1-1+deb12u2 | 1 |
| scrapinghub/ | a5f89bc84606 | nss | 2:3.35-2ubuntu2.16+esm1 | 1 |
| sismics/ | f4b0ef019cf1 | nss | 2:3.35-2ubuntu2.16+esm1 | 1 |
| sissbruecker/ | a222fb777e1f | nss | 2:3.87.1-1+deb12u2 | 1 |
| socialmediamacroscope/ | 70fb11d4f531 | nss | 2:3.98-0ubuntu0.20.04.2+esm1 | 1 |
| speckle/ | 092384dba45d | nss | 2:3.87.1-1+deb12u2 | 1 |
| speckle/ | 1f897ca906ea | nss | 2:3.87.1-1+deb12u2 | 1 |
| speckle/ | 52cad5e3293e | nss | 2:3.87.1-1+deb12u2 | 1 |
| speckle/ | 6dee853ba74a | nss | 2:3.87.1-1+deb12u2 | 1 |
| speckle/ | 787adcb20a3a | nss | 2:3.87.1-1+deb12u2 | 1 |
| speckle/ | 84fc39bca0c8 | nss | 2:3.87.1-1+deb12u2 | 1 |
| speckle/ | 8f3c1ea153ba | nss | 2:3.87.1-1+deb12u2 | 1 |
| speckle/ | c102b087481a | nss | 2:3.87.1-1+deb12u2 | 1 |
| speckle/ | d3da0a84de98 | nss | 2:3.87.1-1+deb12u2 | 1 |
| stashapp/ | a534c8afdf39 | nss | 2:3.98-1ubuntu0.1 | 1 |
| svtechnmaa/ | 6e368ace0977 | nss | 2:3.98-0ubuntu0.20.04.2+esm1 | 1 |
| tensorflow/ | 1e3172090703 | nss | 2:3.28.4-0ubuntu0.16.04.14+esm5 | 1 |