StackRadar

CVE-2026-58055

Medium

Advisory

Published 28 Jun 2026In the index since 5 Sept 2026
Severity
Medium
worst across findings
CVSS
6.3
base score, highest
EPSS
0.003
17th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
1,664
of 17,787 indexed, latest versions
Container images
1,592
deployed by those charts
Fix available
3 of 3
affected packages

Red Hat Security Advisory: nghttp2 security update

Carried by container images the latest versions of 1,664 of 17,787 indexed charts deploy, on 1,592 images.

Affected packageAffected versionsFixed inImages
nghttp2deb1.30.0-1ubuntu1, 1.40.0-1build1, 1.40.0-1ubuntu0.1, 1.40.0-1ubuntu0.2+20 more1.43.0-1ubuntu0.4, 1.59.0-1ubuntu0.4, 1.64.0-1.1+e2, 1.64.0-1.1ubuntu1.2+1 more1,188
nghttp2apk1.63.0-r0, 1.64.0-r1, 1.66.0-r1, 1.68.0-r0+2 more1.70.0-r011
nghttp2rpm1.33.0-1.el8, 1.33.0-1.el8_0.1, 1.33.0-3.el8_2.1, 1.33.0-3.el8_2.2+18 more0:1.33.0-6.el8_10.3, 0:1.43.0-6.el9_8.2, 0:1.68.0-3.el10_2.2, 1.64.0-150700.3.6.1+2 more393
OSV records
CGA-43r8-f2xj-r388CGA-7g67-8qrj-cr3qDEBIAN-CVE-2026-58055RHSA-2026:54650RHSA-2026:54662RHSA-2026:55804RLSA-2026:54650RLSA-2026:54662RLSA-2026:55804UBUNTU-CVE-2026-58055ECHO-401a-73df-0d29openSUSE-SU-2026:11156-1SUSE-SU-2026:22630-1SUSE-SU-2026:4029-1
Also known as
CGA-8pjw-3mvg-2x6m, CGA-mrwp-fgwh-65q5, USN-8495-1

Charts affected

1,664 by stars
ChartLatestAffected imagesRadar Score
code-serveralekcVerified publisher0.1.11 of 1See more

code-server alekc 0.1.1

1 of the 1 container images this version deploys carry CVE-2026-58055.

Container imageDigestPackageFixed in
linuxserver/code-server:4.10.1a5e43a05ae79
nghttp2@1.43.0-1build3
1.43.0-1ubuntu0.4

Open the chart page →

8,212
vaultwardenandrenarchyVerified publisher6.27.01 of 1See more

vaultwarden andrenarchy 6.27.0

1 of the 1 container images this version deploys carry CVE-2026-58055.

Container imageDigestPackageFixed in
vaultwarden/server:1.37.2094b5689ed81
nghttp2@1.64.0-1.1+deb13u1
no fix listed

Open the chart page →

1,744
openshift-consoleav1o-chartsVerified publisher0.3.61 of 1See more

openshift-console av1o-charts 0.3.6

1 of the 1 container images this version deploys carry CVE-2026-58055.

Container imageDigestPackageFixed in
quay.io/openshift/origin-console:4.10.00bbe8b451fa3
nghttp2@1.33.0-3.el8_2.2
0:1.33.0-6.el8_10.3

Open the chart page →

9,052
backup-zenbzen0.1.41 of 1See more

backup-zen bzen 0.1.4

1 of the 1 container images this version deploys carry CVE-2026-58055.

Container imageDigestPackageFixed in
rezachalak/bzen-mongo:1.0.034f694325191
nghttp2@1.40.0-1ubuntu0.1
no fix listed

Open the chart page →

7,960
collabora-codechrisingenhaag2.6.01 of 1See more

collabora-code chrisingenhaag 2.6.0

1 of the 1 container images this version deploys carry CVE-2026-58055.

Container imageDigestPackageFixed in
collabora/code:23.05.10.1.105299b452f7f
nghttp2@1.52.0-1+deb12u1
no fix listed

Open the chart page →

4,180
coder-observabilitycoder-observabilityVerified publisher0.7.32 of 21See more

coder-observability coder-observability 0.7.3

2 of the 21 container images this version deploys carry CVE-2026-58055.

Container imageDigestPackageFixed in
quay.io/minio/mc:RELEASE.2022-09-16T09-16-47Z546a8b52d7b0
nghttp2@1.33.0-3.el8_2.1
0:1.33.0-6.el8_10.3
quay.io/minio/minio:RELEASE.2022-09-17T00-09-45Zc3d20bc2ea08
nghttp2@1.33.0-3.el8_2.1
0:1.33.0-6.el8_10.3

Open the chart page →

24,700
codetogethercodetogether1.4.251 of 1See more

codetogether codetogether 1.4.25

1 of the 1 container images this version deploys carry CVE-2026-58055.

Container imageDigestPackageFixed in
codetogether/codetogether:latest4348c8a38752
nghttp2@1.43.0-5.el9_4.3
0:1.43.0-6.el9_8.2

Open the chart page →

7,450
convertigoconvertigoOfficialVerified publisher8.4.32 of 5See more

convertigo convertigo 8.4.3

2 of the 5 container images this version deploys carry CVE-2026-58055.

Container imageDigestPackageFixed in
baserow/baserow:1.30.1df0c42eb67e8
nghttp2@1.52.0-1+deb12u2
no fix listed
library/couchdb:3.4.22817ad50b5c5
nghttp2@1.52.0-1+deb12u2
no fix listed

Open the chart page →

17,404
core-dump-handlercore-dump-handler9.0.01 of 1See more

core-dump-handler core-dump-handler 9.0.0

1 of the 1 container images this version deploys carry CVE-2026-58055.

Container imageDigestPackageFixed in
quay.io/icdh/core-dump-handler:v9.0.0cc79b9e2a1c8
nghttp2@1.33.0-6.el8_10.1
0:1.33.0-6.el8_10.3

Open the chart page →

3,080
cosmocosmo-platformOfficialVerified publisher0.20.02 of 10See more

cosmo cosmo-platform 0.20.0

2 of the 10 container images this version deploys carry CVE-2026-58055.

Container imageDigestPackageFixed in
bitnamilegacy/minio:2025.7.23-debian-12-r56dabb4a2088c
nghttp2@1.52.0-1+deb12u2
no fix listed
ghcr.io/wundergraph/cosmo/otelcollector:0.18.15a6fe78d4d15
nghttp2@1.52.0-1+deb12u2
no fix listed

Open the chart page →

28,839
dask-kubernetes-operatordask2026.3.01 of 1See more

dask-kubernetes-operator dask 2026.3.0

1 of the 1 container images this version deploys carry CVE-2026-58055.

Container imageDigestPackageFixed in
ghcr.io/dask/dask-kubernetes-operator:2026.3.03225d2bc6b3c
nghttp2@1.64.0-1.1
no fix listed

Open the chart page →

9,316
zabbix-kubernetes-discoverydjerfyVerified publisher1.4.201 of 1See more

zabbix-kubernetes-discovery djerfy 1.4.20

1 of the 1 container images this version deploys carry CVE-2026-58055.

Container imageDigestPackageFixed in
ghcr.io/djerfy/zabbix-kubernetes-discovery:v1.4.207a50c07e7c69
nghttp2@1.59.0-1ubuntu0.1
1.59.0-1ubuntu0.4

Open the chart page →

4,147
edgelessdbedgelesssysVerified publisher0.3.21 of 1See more

edgelessdb edgelesssys 0.3.2

1 of the 1 container images this version deploys carry CVE-2026-58055.

Container imageDigestPackageFixed in
ghcr.io/edgelesssys/edgelessdb-sgx-1gb:v0.3.27e1d7a11a11a
nghttp2@1.40.0-1build1
no fix listed

Open the chart page →

4,830
openshift-secured-appeximiaitVerified publisher0.5.01 of 1See more

openshift-secured-app eximiait 0.5.0

1 of the 1 container images this version deploys carry CVE-2026-58055.

Container imageDigestPackageFixed in
quay.io/openshift/origin-oauth-proxy:4.14a7dff785d821
nghttp2@1.33.0-4.el8_6.1
0:1.33.0-6.el8_10.3

Open the chart page →

12,042
openshift-secured-pgadmineximiaitVerified publisher0.2.01 of 2See more

openshift-secured-pgadmin eximiait 0.2.0

1 of the 2 container images this version deploys carry CVE-2026-58055.

Container imageDigestPackageFixed in
quay.io/openshift/origin-oauth-proxy:4.14a7dff785d821
nghttp2@1.33.0-4.el8_6.1
0:1.33.0-6.el8_10.3

Open the chart page →

14,546
openshift-secured-redisInsighteximiaitVerified publisher0.9.21 of 2See more

openshift-secured-redisInsight eximiait 0.9.2

1 of the 2 container images this version deploys carry CVE-2026-58055.

Container imageDigestPackageFixed in
quay.io/openshift/origin-oauth-proxy:4.14a7dff785d821
nghttp2@1.33.0-4.el8_6.1
0:1.33.0-6.el8_10.3

Open the chart page →

13,874
zabbix-agentfermosit0.0.51 of 1See more

zabbix-agent fermosit 0.0.5

1 of the 1 container images this version deploys carry CVE-2026-58055.

Container imageDigestPackageFixed in
zabbix/zabbix-agent:ubuntu-6.4-latest349b924472a7
nghttp2@1.59.0-1ubuntu0.1
1.59.0-1ubuntu0.4

Open the chart page →

2,369
keydbfinkinfridomVerified publisher0.48.31 of 1See more

keydb finkinfridom 0.48.3

1 of the 1 container images this version deploys carry CVE-2026-58055.

Container imageDigestPackageFixed in
eqalpha/keydb:x86_64_v6.3.4eceb1806730c
nghttp2@1.40.0-1ubuntu0.1
no fix listed

Open the chart page →

5,264
rsshubgabe565Verified publisher0.8.01 of 3See more

rsshub gabe565 0.8.0

1 of the 3 container images this version deploys carry CVE-2026-58055.

Container imageDigestPackageFixed in
diygod/rsshub:latest1d4b508b6357
nghttp2@1.64.0-1.1+deb13u1
no fix listed

Open the chart page →

1,717
calibregeek-cookbookVerified publisher5.4.21 of 1See more

calibre geek-cookbook 5.4.2

1 of the 1 container images this version deploys carry CVE-2026-58055.

Container imageDigestPackageFixed in
linuxserver/calibre:version-v5.21.0a847b5b2d860
nghttp2@1.30.0-1ubuntu1
no fix listed

Open the chart page →

22,773
network-ups-toolsgeek-cookbookVerified publisher6.4.21 of 1See more

network-ups-tools geek-cookbook 6.4.2

1 of the 1 container images this version deploys carry CVE-2026-58055.

Container imageDigestPackageFixed in
ghcr.io/k8s-at-home/network-ups-tools:v2.7.4-2479-g86a32237cbd5d4cc1245
nghttp2@1.40.0-1build1
no fix listed

Open the chart page →

13,950
plexgeek-cookbookVerified publisher6.4.31 of 1See more

plex geek-cookbook 6.4.3

1 of the 1 container images this version deploys carry CVE-2026-58055.

Container imageDigestPackageFixed in
ghcr.io/k8s-at-home/plex:v1.28.0.5999-97678ded3ef756c7d784b
nghttp2@1.40.0-1build1
no fix listed

Open the chart page →

9,627
signal-cli-rest-apigeek-cookbookVerified publisher1.2.21 of 1See more

signal-cli-rest-api geek-cookbook 1.2.2

1 of the 1 container images this version deploys carry CVE-2026-58055.

Container imageDigestPackageFixed in
bbernhard/signal-cli-rest-api:0.57549ad08d7e14
nghttp2@1.40.0-1build1
no fix listed

Open the chart page →

10,154
tautulligeek-cookbookVerified publisher11.4.21 of 1See more

tautulli geek-cookbook 11.4.2

1 of the 1 container images this version deploys carry CVE-2026-58055.

Container imageDigestPackageFixed in
ghcr.io/k8s-at-home/tautulli:v2.7.74ea617c30397
nghttp2@1.40.0-1build1
no fix listed

Open the chart page →

10,628
unifigeek-cookbookVerified publisher5.1.31 of 1See more

unifi geek-cookbook 5.1.3

1 of the 1 container images this version deploys carry CVE-2026-58055.

Container imageDigestPackageFixed in
jacobalberty/unifi:v7.4.162b3edc809a3ff
nghttp2@1.30.0-1ubuntu1
no fix listed

Open the chart page →

11,839
apimgraviteeioVerified publisher4.12.192 of 4See more

apim graviteeio 4.12.19

2 of the 4 container images this version deploys carry CVE-2026-58055.

Container imageDigestPackageFixed in
graviteeio/apim-gateway:4.12.19-debian05fd67a93056
nghttp2@1.64.0-1.1+deb13u1
no fix listed
graviteeio/apim-management-api:4.12.19-debian27374522cd04
nghttp2@1.64.0-1.1+deb13u1
no fix listed

Open the chart page →

4,806
hpe-cosi-driverhpe-storageVerified publisher2.0.01 of 2See more

hpe-cosi-driver hpe-storage 2.0.0

1 of the 2 container images this version deploys carry CVE-2026-58055.

Container imageDigestPackageFixed in
quay.io/hpestorage/cosi-driver:v2.0.0a4d2667f2b6e
nghttp2@1.43.0-6.el9
0:1.43.0-6.el9_8.2

Open the chart page →

1,648
infrahub-enterpriseinfrahub-enterpriseVerified publisher4.19.21 of 5See more

infrahub-enterprise infrahub-enterprise 4.19.2

1 of the 5 container images this version deploys carry CVE-2026-58055.

Container imageDigestPackageFixed in
bitnamilegacy/rabbitmq:4.1.3-debian-12-r19e635efba431
nghttp2@1.52.0-1+deb12u2
no fix listed

Open the chart page →

10,530
coreinstill-aiOfficialVerified publisher0.1.753 of 15See more

core instill-ai 0.1.75

3 of the 15 container images this version deploys carry CVE-2026-58055.

Container imageDigestPackageFixed in
instill/artifact-backend:b28766ac4a393e601ed
nghttp2@1.64.0-1.1
no fix listed
instill/mgmt-backend:d0933d4ebe12f77a3f9
nghttp2@1.64.0-1.1
no fix listed
instill/model-backend:611f0f2e980125e5ba5
nghttp2@1.64.0-1.1
no fix listed

Open the chart page →

30,816
dayz-dedicated-serverjespernohrVerified publisher0.1.21 of 3See more

dayz-dedicated-server jespernohr 0.1.2

1 of the 3 container images this version deploys carry CVE-2026-58055.

Container imageDigestPackageFixed in
ghcr.io/jespernohr/dayz-dedicated-server:0.1.1ec01d3ac7887
nghttp2@1.59.0-1ubuntu0.1
1.59.0-1ubuntu0.4

Open the chart page →

4,309
wireguardk8s-home-lab-repo1.6.01 of 1See more

wireguard k8s-home-lab-repo 1.6.0

1 of the 1 container images this version deploys carry CVE-2026-58055.

Container imageDigestPackageFixed in
ghcr.io/k8s-home-lab/wireguard:v1.0.20210914779858b5e11d
nghttp2@1.40.0-1ubuntu0.1
no fix listed

Open the chart page →

7,337
webdavk8s-webdavVerified publisher0.0.71 of 1See more

webdav k8s-webdav 0.0.7

1 of the 1 container images this version deploys carry CVE-2026-58055.

Container imageDigestPackageFixed in
library/httpd:2.4979c38c2228d
nghttp2@1.64.0-1.1+deb13u1
no fix listed

Open the chart page →

1,681
kanister-operatorkanister0.118.01 of 1See more

kanister-operator kanister 0.118.0

1 of the 1 container images this version deploys carry CVE-2026-58055.

Container imageDigestPackageFixed in
ghcr.io/kanisterio/controller:0.118.0d22616a5998b
nghttp2@1.43.0-6.el9
0:1.43.0-6.el9_8.2

Open the chart page →

1,145
kraken-cikraken-ciVerified publisher1.7.361 of 10See more

kraken-ci kraken-ci 1.7.36

1 of the 10 container images this version deploys carry CVE-2026-58055.

Container imageDigestPackageFixed in
minio/minio:RELEASE.2022-10-24T18-35-07Zf9576903f19d
nghttp2@1.33.0-3.el8_2.1
0:1.33.0-6.el8_10.3

Open the chart page →

7,273
radondb-mysqlkubesphere-testVerified publisher1.0.11 of 3See more

radondb-mysql kubesphere-test 1.0.1

1 of the 3 container images this version deploys carry CVE-2026-58055.

Container imageDigestPackageFixed in
xenondb/percona:5.7.330e26872a2b67
nghttp2@1.40.0-1build1
no fix listed

Open the chart page →

7,342
kubeservice-lxcfs-webhookkubservice-chartsVerified publisher1.6.01 of 6See more

kubeservice-lxcfs-webhook kubservice-charts 1.6.0

1 of the 6 container images this version deploys carry CVE-2026-58055.

Container imageDigestPackageFixed in
dongjiang1989/lxcfs:v6.0.34bf9ae391948
nghttp2@1.40.0-1ubuntu0.3
no fix listed

Open the chart page →

11,582
kafdroplsst-sqre0.1.31 of 1See more

kafdrop lsst-sqre 0.1.3

1 of the 1 container images this version deploys carry CVE-2026-58055.

Container imageDigestPackageFixed in
obsidiandynamics/kafdrop:3.30.05337c9e0e2de
nghttp2@1.40.0-1build1
no fix listed

Open the chart page →

7,901
kubecostmesosphere-stable0.37.51 of 9See more

kubecost mesosphere-stable 0.37.5

1 of the 9 container images this version deploys carry CVE-2026-58055.

Container imageDigestPackageFixed in
bitnamilegacy/kubectl:1.30.5744f84cf7493
nghttp2@1.52.0-1+deb12u1
no fix listed

Open the chart page →

17,693
move2kubemove2kube0.3.151 of 1See more

move2kube move2kube 0.3.15

1 of the 1 container images this version deploys carry CVE-2026-58055.

Container imageDigestPackageFixed in
quay.io/konveyor/move2kube-ui:latestec6ab507c5da
nghttp2@1.33.0-6.el8_10.1
0:1.33.0-6.el8_10.3

Open the chart page →

3,793
keycloak-operatornewsaktuell0.1.71 of 1See more

keycloak-operator newsaktuell 0.1.7

1 of the 1 container images this version deploys carry CVE-2026-58055.

Container imageDigestPackageFixed in
quay.io/keycloak/keycloak-operator:19.0.3-legacy09d52508fee9
nghttp2@1.33.0-3.el8_2.1
0:1.33.0-6.el8_10.3

Open the chart page →

5,067
observalobservalVerified publisher1.13.11 of 8See more

observal observal 1.13.1

1 of the 8 container images this version deploys carry CVE-2026-58055.

Container imageDigestPackageFixed in
ghcr.io/observal/observal-api:1.13.1153b8b893232
nghttp2@1.64.0-1.1+deb13u1
no fix listed

Open the chart page →

5,828
openclaw-with-brainopenclaw-with-brainVerified publisher0.1.671 of 3See more

openclaw-with-brain openclaw-with-brain 0.1.67

1 of the 3 container images this version deploys carry CVE-2026-58055.

Container imageDigestPackageFixed in
ghcr.io/openclaw/openclaw:2026.6.10af7ea052cf21
nghttp2@1.52.0-1+deb12u3
no fix listed

Open the chart page →

5,218
oesopsmxVerified publisher4.0.327 of 25See more

oes opsmx 4.0.32

7 of the 25 container images this version deploys carry CVE-2026-58055.

Container imageDigestPackageFixed in
quay.io/opsmxpublic/ubi8-gate:isd-spin-2025.10.01-5c720954-2025112608102b3554029737
nghttp2@1.33.0-6.el8_10.1
0:1.33.0-6.el8_10.3
quay.io/opsmxpublic/ubi8-oes-audit-client:isd-spin-2025.10.01-cb1bfce-20251126103732a5b1887eab
nghttp2@1.33.0-6.el8_10.1
0:1.33.0-6.el8_10.3
quay.io/opsmxpublic/ubi8-oes-autopilot:isd-spin-2025.10.01-af26a30d4-20251126105458bd0bcf72f9
nghttp2@1.33.0-6.el8_10.1
0:1.33.0-6.el8_10.3
quay.io/opsmxpublic/ubi8-oes-datascience:isd-spin-2025.10.01-af26a30d4-202511261054d8f66f4117fe
nghttp2@1.64.0-1.1
no fix listed
quay.io/opsmxpublic/ubi8-oes-db:v3.0.089ee6493af89
nghttp2@1.33.0-3.el8_2.1
0:1.33.0-6.el8_10.3
quay.io/opsmxpublic/ubi8-oes-platform:isd-spin-2025.10.01-a7c191ec-2025112611228ed603ab7417
nghttp2@1.33.0-6.el8_10.1
0:1.33.0-6.el8_10.3
quay.io/opsmxpublic/ubi8-oes-ui:isd-spin-2025.10.01-e6f6f01-2025121006405d934bb66884
nghttp2@1.33.0-6.el8_10.1
0:1.33.0-6.el8_10.3

Open the chart page →

107,811
part-dbpart-dbVerified publisher0.1.21 of 1See more

part-db part-db 0.1.2

1 of the 1 container images this version deploys carry CVE-2026-58055.

Container imageDigestPackageFixed in
jbtronics/part-db1:latest5db71f6db59d
nghttp2@1.52.0-1+deb12u3
no fix listed

Open the chart page →

3,327
psmdb-operatorpercona1.23.11 of 1See more

psmdb-operator percona 1.23.1

1 of the 1 container images this version deploys carry CVE-2026-58055.

Container imageDigestPackageFixed in
percona/percona-server-mongodb-operator:1.23.0feaff989e253
nghttp2@1.68.0-3.el10_2.1
0:1.68.0-3.el10_2.2

Open the chart page →

246
phpmyadminphpmyadminVerified publisher1.0.31 of 1See more

phpmyadmin phpmyadmin 1.0.3

1 of the 1 container images this version deploys carry CVE-2026-58055.

Container imageDigestPackageFixed in
library/phpmyadmin:5.2.3-apache3a8a8d6b5289
nghttp2@1.64.0-1.1+deb13u1
no fix listed

Open the chart page →

2,582
ipmi-exporterpnnl-miscscripts0.1.151 of 1See more

ipmi-exporter pnnl-miscscripts 0.1.15

1 of the 1 container images this version deploys carry CVE-2026-58055.

Container imageDigestPackageFixed in
pnnlmiscscripts/ipmi-exporter:1.2.0-181e18992d8e3
nghttp2@1.33.0-5.el8_8
0:1.33.0-6.el8_10.3

Open the chart page →

2,995
qgis-serverqgis-serverVerified publisher0.1.101 of 3See more

qgis-server qgis-server 0.1.10

1 of the 3 container images this version deploys carry CVE-2026-58055.

Container imageDigestPackageFixed in
library/nginx:1.27.409369da6b103
nghttp2@1.52.0-1+deb12u2
no fix listed

Open the chart page →

5,435
repoflowrepoflow-helm-public0.9.12 of 8See more

repoflow repoflow-helm-public 0.9.1

2 of the 8 container images this version deploys carry CVE-2026-58055.

Container imageDigestPackageFixed in
hasura/graphql-engine:v2.48.10f6c1c4b957d2
nghttp2@1.43.0-1ubuntu0.2
1.43.0-1ubuntu0.4
library/elasticsearch:8.15.0310b9fc03b06
nghttp2@1.40.0-1ubuntu0.3
no fix listed

Open the chart page →

13,521
nominatimrobjuz6.4.11 of 4See more

nominatim robjuz 6.4.1

1 of the 4 container images this version deploys carry CVE-2026-58055.

Container imageDigestPackageFixed in
mediagis/nominatim:5.3.27923a8e67197
nghttp2@1.59.0-1ubuntu0.3
1.59.0-1ubuntu0.4

Open the chart page →

8,690

Container images carrying it

1,592 by charts deploying them

A fixed version is listed for 3 of the 3 affected packages.

Container imageDigestPackageFixed inUsed by
mariadb/maxscale:23.02.256c5e0908148
nghttp2@1.33.0-3.el8_3.1
0:1.33.0-6.el8_10.3
1
mariusm/vingress:0.5.0b3db186c3d72
nghttp2@1.64.0-1.1+deb13u1
no fix listed
1
martinhelmich/typo3:12.4c83a4f3fd7ae
nghttp2@1.52.0-1+deb12u2
no fix listed
1
mathesar/mathesar:0.12.0091757cb01fe
nghttp2@1.52.0-1+deb12u3
no fix listed
1
matrixdotorg/synapse:v1.160.078de1d10bef0
nghttp2@1.64.0-1.1+deb13u1
no fix listed
1
matrixdotorg/synapse:v1.127.1c3c4a9de2a0b
nghttp2@1.52.0-1+deb12u2
no fix listed
1
matterlabs/external-node:9734bf2-17870579939295dadc06bdf3b
nghttp2@1.52.0-1+deb12u1
no fix listed
1
matterlabs/external-node:v24.0.06cbfea4c694a
nghttp2@1.52.0-1+deb12u1
no fix listed
1
mautic/mautic:7-apacheeb8cc73d97e1
nghttp2@1.52.0-1+deb12u3
no fix listed
1
mawad98/backstage-pyactions:demo99422c56a274
nghttp2@1.64.0-1.1
no fix listed
1
mbround18/valheim:3.1.070bd4da591cd
nghttp2@1.43.0-1ubuntu0.2
1.43.0-1ubuntu0.4
1
mediagis/nominatim:5.3.27923a8e67197
nghttp2@1.59.0-1ubuntu0.3
1.59.0-1ubuntu0.4
1
mediagis/nominatim:3.7c15e941485ef
nghttp2@1.40.0-1build1
no fix listed
1
mediagis/nominatim:4.2d0eae7b51374
nghttp2@1.43.0-1ubuntu0.1
1.43.0-1ubuntu0.4
1
middlewareeng/middleware:0.3.1747d880812f1
nghttp2@1.52.0-1+deb12u2
no fix listed
1
milvusdb/milvus:v2.2.13a3a55e1c1497
nghttp2@1.40.0-1build1
no fix listed
1
mindsdb/mindsdb:latest163011c09299
nghttp2@1.64.0-1.1
no fix listed
1
minio/kes:v0.22.255f3aef5803e
nghttp2@1.33.0-3.el8_2.1
0:1.33.0-6.el8_10.3
1
minio/mc:RELEASE.2021-02-14T04-28-06Z2a374c124d44
nghttp2@1.33.0-3.el8_2.1
0:1.33.0-6.el8_10.3
1
minio/mc:RELEASE.2022-05-09T04-08-26Z4b415310d8d0
nghttp2@1.33.0-3.el8_2.1
0:1.33.0-6.el8_10.3
1
minio/mc:RELEASE.2023-02-28T00-12-59Zc631532a394e
nghttp2@1.33.0-3.el8_2.1
0:1.33.0-6.el8_10.3
1
minio/minio:RELEASE.2022-01-04T07-41-07Z1484c87239ea
nghttp2@1.33.0-3.el8_2.1
0:1.33.0-6.el8_10.3
1
minio/minio:RELEASE.2023-03-20T20-16-18Z6d770d7f255c
nghttp2@1.33.0-3.el8_2.1
0:1.33.0-6.el8_10.3
1
minio/minio:RELEASE.2022-10-24T18-35-07Zf9576903f19d
nghttp2@1.33.0-3.el8_2.1
0:1.33.0-6.el8_10.3
1
minio/minio:RELEASE.2023-01-12T02-06-16Zfc6bedc99355
nghttp2@1.33.0-3.el8_2.1
0:1.33.0-6.el8_10.3
1
minio/operator:v5.0.9170b154d2c61
nghttp2@1.33.0-3.el8_2.1
0:1.33.0-6.el8_10.3
1
minio/operator:v4.1.02adc5be088f5
nghttp2@1.33.0-3.el8_2.1
0:1.33.0-6.el8_10.3
1
mintproject/graphql-engine:305c0dbeba1878eafe348f21fc300fbfc017d9dc83aade2c1855
nghttp2@1.40.0-1ubuntu0.3
no fix listed
1
mintproject/model-catalog-fastapi:7dd88dc5bf1fe6a6d4703ea0a077afee45cb256102260d20a21f
nghttp2@1.52.0-1+deb12u2
no fix listed
1
mlikiowa/napcat-docker:latest1336a777f9a4
nghttp2@1.43.0-1ubuntu0.2
1.43.0-1ubuntu0.4
1
moodlehq/moodle-php-apache:8.4-bookworm922af5166835
nghttp2@1.52.0-1+deb12u3
no fix listed
1
moreillon/api-proxy:latestd7d4a5463525
nghttp2@1.52.0-1+deb12u2
no fix listed
1
moreillon/camera-viewer:lateste418cc694bd5
nghttp2@1.52.0-1+deb12u2
no fix listed
1
moreillon/food-manager:lateste8fd856e593d
nghttp2@1.52.0-1+deb12u2
no fix listed
1
moreillon/group-manager:latest3caa8f710ee0
nghttp2@1.52.0-1+deb12u2
no fix listed
1
moreillon/group-manager-front:latest5f0a38498271
nghttp2@1.64.0-1.1
no fix listed
1
moreillon/user-manager-front:v5.1.06597e6b98d21
nghttp2@1.52.0-1+deb12u1
no fix listed
1
moreillon/user-manager-mongoose:v5.0.1d2ee0423b797
nghttp2@1.52.0-1
no fix listed
1
mshanley80/httpbin2022:latest5b189a70c0fb
nghttp2@1.40.0-1build1
no fix listed
1
muhammedgamal/fp23:latest74b4cd69b6fa
nghttp2@1.52.0-1+deb12u1
no fix listed
1
murtazashah46/helmfile:latest4d11726cf803
nghttp2@1.52.0-1+deb12u1
no fix listed
1
mvance/unbound:1.20.04bf67b567f39
nghttp2@1.52.0-1+deb12u1
no fix listed
1
mvance/unbound:1.22.076906da36d18
nghttp2@1.52.0-1+deb12u1
no fix listed
1
n3uronhub/n3uron:v1.22.4423a0bdd9cb9
nghttp2@1.64.0-1.1+deb13u1
no fix listed
1
netboxcommunity/netbox:v3.2.83d652dca5351
nghttp2@1.43.0-1build3
1.43.0-1ubuntu0.4
1
netdata/netdata:v2.11.0c45c71eb23ff
nghttp2@1.64.0-1.1+deb13u1
no fix listed
1
networktocode/nautobot:3.0-py3.13ed484336b1ad
nghttp2@1.64.0-1.1
no fix listed
1
neuvector/controller:5.6.1ae45c394f1ac
nghttp2@1.64.0-150700.3.3.1
1.64.0-150700.3.6.1
1
neuvector/enforcer:5.6.1aa2137cc90ec
nghttp2@1.64.0-150700.3.3.1
1.64.0-150700.3.6.1
1
neuvector/prometheus-exporter:1.0.181d78ed4eef40
nghttp2@1.64.0-150700.3.3.1
1.64.0-150700.3.6.1
1

syft 1.42.1 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.