CVE-2026-2781

Critical

Advisory

Published 24 Feb 2026In the index since 5 Sept 2026

Severity: Critical; worst across findings
CVSS: 9.8; base score, highest
EPSS: 0.004; 29th percentile
CISA KEV: Not listed; no confirmed exploitation
Charts affected: 155; of 17,781 indexed, latest versions
Container images: 146; deployed by those charts
Fix available: 1 of 1; affected package

nss - security update

Carried by container images the latest versions of 155 of 17,781 indexed charts deploy, on 146 images.

Affected package	Affected versions	Fixed in	Images
nssdeb	2:3.17.1-0ubuntu0.14.04.1, 2:3.28.4-0ubuntu0.14.04.3, 2:3.28.4-0ubuntu0.16.04.3, 2:3.28.4-0ubuntu0.16.04.4+27 more	2:3.28.4-0ubuntu0.14.04.5+esm13, 2:3.28.4-0ubuntu0.16.04.14+esm5, 2:3.35-2ubuntu2.16+esm1, 2:3.61-1+deb11u5+6 more	146

OSV records: DEBIAN-CVE-2026-2781 UBUNTU-CVE-2026-2781 DLA-4508-1
Also known as: DSA-6149-1, USN-8071-1, USN-8071-2

Charts affected

155 by stars

Chart

Latest

Affected images

Radar Score

maybe-financevicsufer

0.2.7

1 of 3 See more

maybe-finance vicsufer 0.2.7

1 of the 3 container images this version deploys carry CVE-2026-2781.

Container image	Digest	Package	Fixed in
ghcr.io/maybe-finance/maybe :0.5.0	c6ab95ca9130	nss@2:3.87.1-1+deb12u1	2:3.87.1-1+deb12u2

Open the chart page →

10,795

webhookiewebhookie

0.1.2

1 of 1 See more

webhookie webhookie 0.1.2

1 of the 1 container images this version deploys carry CVE-2026-2781.

Container image	Digest	Package	Fixed in
hookiesolutions/webhookie :latest	0629694246ba	nss@2:3.49.1-1ubuntu1.5	2:3.98-0ubuntu0.20.04.2+esm1

Open the chart page →

14,364

webhookie-allwebhookie

0.1.2

1 of 3 See more

webhookie-all webhookie 0.1.2

1 of the 3 container images this version deploys carry CVE-2026-2781.

Container image	Digest	Package	Fixed in
hookiesolutions/webhookie :latest	0629694246ba	nss@2:3.49.1-1ubuntu1.5	2:3.98-0ubuntu0.20.04.2+esm1

Open the chart page →

28,605

kibanawiremind

8.5.23

1 of 2 See more

kibana wiremind 8.5.23

1 of the 2 container images this version deploys carry CVE-2026-2781.

Container image	Digest	Package	Fixed in
library/kibana :8.18.0	04c0fc150f3a	nss@2:3.98-0ubuntu0.20.04.2	2:3.98-0ubuntu0.20.04.2+esm1

Open the chart page →

6,285

playwright-synthetic-monitoringwork-adventure

1.0.1

1 of 1 See more

playwright-synthetic-monitoring work-adventure 1.0.1

1 of the 1 container images this version deploys carry CVE-2026-2781.

Container image	Digest	Package	Fixed in
workadventure/playwright-synthetic-monitoring :main	92b664c2a06f	nss@2:3.98-0ubuntu0.22.04.2	2:3.98-0ubuntu0.22.04.3

Open the chart page →

14,100

Container images carrying it

146 by charts deploying them

A fixed version is listed for 1 of the 1 affected package.

Container image	Digest	Package	Fixed in	Used by
th0th/node-red :4.0.3-debian	d06fa39f7406	nss@2:3.61-1+deb11u3	2:3.61-1+deb11u5	1
thingsboard/tb-coap-transport :3.4.1	bd45a09d85d9	nss@2:3.61-1+deb11u2	2:3.61-1+deb11u5	1
thingsboard/tb-http-transport :3.4.1	a06f53c5e2da	nss@2:3.61-1+deb11u2	2:3.61-1+deb11u5	1
thingsboard/tb-mqtt-transport :3.4.1	030f316ce301	nss@2:3.61-1+deb11u2	2:3.61-1+deb11u5	1
thingsboard/tb-node :3.4.1	645f43b688f7	nss@2:3.61-1+deb11u2	2:3.61-1+deb11u5	1
thingsboard/tb-node :3.6.0	f40a542832c4	nss@2:3.61-1+deb11u3	2:3.61-1+deb11u5	1
thingsboard/tb-postgres :latest	2d17e4e36edc	nss@2:3.87.1-1+deb12u1	2:3.87.1-1+deb12u2	1
timescale/timescaledb-ha :pg15-latest	a8e3322e1cf9	nss@2:3.68.2-0ubuntu1.2	2:3.98-0ubuntu0.22.04.3	1
timescale/timescaledb-ha :pg14.6-ts2.9.1-p1	cdb9ae118899	nss@2:3.68.2-0ubuntu1.1	2:3.98-0ubuntu0.22.04.3	1
timescale/timescaledb-ha :pg17.2-ts2.18.2	e8d0a9cc3db5	nss@2:3.98-0ubuntu0.22.04.2	2:3.98-0ubuntu0.22.04.3	1
timescale/timescaledb-ha :pg14-ts2.6-latest	ed719c0cd19d	nss@2:3.68.2-0ubuntu1	2:3.98-0ubuntu0.22.04.3	1
timothyclarke/wptagent :2018-01-23	22c41e5ca7e2	nss@2:3.28.4-0ubuntu0.16.04.3	2:3.28.4-0ubuntu0.16.04.14+esm5	1
wavefronthq/proxy :9.2	d1064d28f6eb	nss@2:3.35-2ubuntu2.11	2:3.35-2ubuntu2.16+esm1	1
wazuh/wazuh-dashboard :4.4.1	1787550d2358	nss@2:3.49.1-1ubuntu1.9	2:3.98-0ubuntu0.20.04.2+esm1	1
workadventure/playwright-synthetic-monitoring :main	92b664c2a06f	nss@2:3.98-0ubuntu0.22.04.2	2:3.98-0ubuntu0.22.04.3	1
zabbix/zabbix-web-service :ubuntu-7.0.23	915b3183e054	nss@2:3.98-1build1	2:3.98-1ubuntu0.1	1
zabbix/zabbix-web-service :ubuntu-6.0.8	ee4baa872280	nss@2:3.68.2-0ubuntu1.1	2:3.98-0ubuntu0.22.04.3	1
ghcr.io/appscode/gotenberg :8.25	f9104080d9a7	nss@2:3.110-1	2:3.110-1+deb13u1	1
ghcr.io/avistotelecom/docker-wazuh-agent :4.12.0	8766ba08bf1a	nss@2:3.87.1-1+deb12u1	2:3.87.1-1+deb12u2	1
ghcr.io/chaos-mesh/chaos-daemon :v2.7.2	9608d9b51452	nss@2:3.87.1-1+deb12u1	2:3.87.1-1+deb12u2	1
ghcr.io/chaos-mesh/chaos-daemon :v2.8.0	fb609bc264d9	nss@2:3.87.1-1+deb12u1	2:3.87.1-1+deb12u2	1
ghcr.io/flaresolverr/flaresolverr :v3.3.16	088412db1051	nss@2:3.61-1+deb11u3	2:3.61-1+deb11u5	1
ghcr.io/flaresolverr/flaresolverr :v3.4.0	ab535d1fef5d	nss@2:3.87.1-1+deb12u1	2:3.87.1-1+deb12u2	1
ghcr.io/flaresolverr/flaresolverr :v3.3.21	f104ee51e512	nss@2:3.61-1+deb11u3	2:3.61-1+deb11u5	1
ghcr.io/jfwenisch/discord-experiencebot :latest	b52ff07f9f0c	nss@2:3.35-2ubuntu2.16	2:3.35-2ubuntu2.16+esm1	1
ghcr.io/jfwenisch/steamcmd-manager :v0.4.5	dab685e668d9	nss@2:3.98-1build1	2:3.98-1ubuntu0.1	1
ghcr.io/jfwenisch/webtools :v0.1.4	4569cae83c70	nss@2:3.98-1build1	2:3.98-1ubuntu0.1	1
ghcr.io/jr0dd/puppeteer :v13.3.2	6047599cd78e	nss@2:3.49.1-1ubuntu1.6	2:3.98-0ubuntu0.20.04.2+esm1	1
ghcr.io/k8s-at-home/network-ups-tools :v2.7.4-2479-g86a32237	cbd5d4cc1245	nss@2:3.49.1-1ubuntu1.5	2:3.98-0ubuntu0.20.04.2+esm1	1
ghcr.io/k8s-at-home/nzbhydra2 :v3.14.2	ef3670f7e0a8	nss@2:3.49.1-1ubuntu1.5	2:3.98-0ubuntu0.20.04.2+esm1	1
ghcr.io/kubeflow/spark-operator/controller :2.2.1	865ff4da5686	nss@2:3.98-0ubuntu0.20.04.2	2:3.98-0ubuntu0.20.04.2+esm1	1
ghcr.io/linuxserver/booksonic-air :version-v2009.1.0	baa4fa9549dc	nss@2:3.35-2ubuntu2.13	2:3.35-2ubuntu2.16+esm1	1
ghcr.io/lsst-sqre/strimzi-registry-operator :0.6.0	7e25f7048aff	nss@2:3.61-1+deb11u2	2:3.61-1+deb11u5	1
ghcr.io/maybe-finance/maybe :0.5.0	c6ab95ca9130	nss@2:3.87.1-1+deb12u1	2:3.87.1-1+deb12u2	1
ghcr.io/open-telemetry/demo :1.12.0-loadgenerator	85c9935ff31b	nss@2:3.87.1-1	2:3.87.1-1+deb12u2	1
ghcr.io/paperless-ngx/paperless-ngx :2.13.1	0642357c5dbd	nss@2:3.87.1-1	2:3.87.1-1+deb12u2	1
ghcr.io/paperless-ngx/paperless-ngx :2.20.3	57ad9565bff3	nss@2:3.110-1	2:3.110-1+deb13u1	1
ghcr.io/paperless-ngx/paperless-ngx :2.20.5	665f2f5cc548	nss@2:3.110-1	2:3.110-1+deb13u1	1
ghcr.io/paperless-ngx/paperless-ngx :1.8.0	9bbc9a90641e	nss@2:3.61-1+deb11u2	2:3.61-1+deb11u5	1
ghcr.io/paperless-ngx/paperless-ngx :2.0.1	ab255bea133e	nss@2:3.87.1-1	2:3.87.1-1+deb12u2	1
ghcr.io/star-whale/server :0.6.15	8368359c8dd0	nss@2:3.49.1-1ubuntu1.8	2:3.98-0ubuntu0.20.04.2+esm1	1
ghcr.io/voxpupuli/container-puppetdb :7.18.0-v1.5.0	a56dfe91f5b1	nss@2:3.98-0ubuntu0.22.04.2	2:3.98-0ubuntu0.22.04.3	1
ghcr.io/voxpupuli/container-puppetserver :7.17.0-v1.5.0	916746209ac5	nss@2:3.98-0ubuntu0.22.04.2	2:3.98-0ubuntu0.22.04.3	1
ghcr.io/voxpupuli/puppetserver :8.7.0-main	63873f3f698e	nss@2:3.98-0ubuntu0.22.04.2	2:3.98-0ubuntu0.22.04.3	1
ghcr.io/wiremind/grafana-pdf-exporter :v1.7	dbaa8527bf4c	nss@2:3.87.1-1	2:3.87.1-1+deb12u2	1
quay.io/opsmxpublic/spin-sample-pipeline :v1.0.1	c6a934439421	nss@2:3.28.4-0ubuntu0.16.04.6	2:3.28.4-0ubuntu0.16.04.14+esm5	1