CVE-2026-58055
MediumAdvisory
Published 28 Jun 2026In the index since 5 Sept 2026
- Severity
- Medium
- worst across findings
- CVSS
- 6.3
- base score, highest
- EPSS
- 0.003
- 17th percentile
- CISA KEV
- Not listed
- no confirmed exploitation
- Charts affected
- 1,664
- of 17,787 indexed, latest versions
- Container images
- 1,592
- deployed by those charts
- Fix available
- 3 of 3
- affected packages
Red Hat Security Advisory: nghttp2 security update
Carried by container images the latest versions of 1,664 of 17,787 indexed charts deploy, on 1,592 images.
| Affected package | Affected versions | Fixed in | Images |
|---|---|---|---|
| nghttp2deb | 1.30.0-1ubuntu1, 1.40.0-1build1, 1.40.0-1ubuntu0.1, 1.40.0-1ubuntu0.2+20 more | 1.43.0-1ubuntu0.4, 1.59.0-1ubuntu0.4, 1.64.0-1.1+e2, 1.64.0-1.1ubuntu1.2+1 more | 1,188 |
| nghttp2apk | 1.63.0-r0, 1.64.0-r1, 1.66.0-r1, 1.68.0-r0+2 more | 1.70.0-r0 | 11 |
| nghttp2rpm | 1.33.0-1.el8, 1.33.0-1.el8_0.1, 1.33.0-3.el8_2.1, 1.33.0-3.el8_2.2+18 more | 0:1.33.0-6.el8_10.3, 0:1.43.0-6.el9_8.2, 0:1.68.0-3.el10_2.2, 1.64.0-150700.3.6.1+2 more | 393 |
- OSV records
- CGA-43r8-f2xj-r388CGA-7g67-8qrj-cr3qDEBIAN-CVE-2026-58055RHSA-2026:54650RHSA-2026:54662RHSA-2026:55804RLSA-2026:54650RLSA-2026:54662RLSA-2026:55804UBUNTU-CVE-2026-58055ECHO-401a-73df-0d29openSUSE-SU-2026:11156-1SUSE-SU-2026:22630-1SUSE-SU-2026:4029-1
- Also known as
- CGA-8pjw-3mvg-2x6m, CGA-mrwp-fgwh-65q5, USN-8495-1
Charts affected
1,664 by stars
| Chart | Latest | Affected images | Radar Score |
|---|---|---|---|
| tm-forum-apifiware | 0.17.15 | 19 of 19See more | 35,112 |
| trusted-issuers-listfiware | 0.18.7 | 1 of 1See more | 1,701 |
| trusted-issuers-registryfiware | 0.13.0 | 1 of 1See more | 7,087 |
| batchrunnerflanksourceVerified publisher | 1.0.44 | 1 of 1See more | 5,292 |
| mission-controlflanksourceVerified publisher | 0.1.336 | 1 of 8See more | 8,902 |
| flask-contactsflask-contacts-generic | 1.0.1 | 1 of 3See more | 5,704 |
| flinkflink | 0.5.1 | 1 of 1See more | 5,651 |
| floriapp-mongodbfloriapp | 1.0.0 | 1 of 1See more | 8,041 |
| fluent-bit-aggregatorfluent-bit-aggregatorOfficialVerified publisher | 1.1.2 | 1 of 1See more | 934 |
| fluent-bit-collectorfluent-bit-collectorOfficialVerified publisher | 1.1.2 | 1 of 1See more | 934 |
| fluentd-aggregatorfluentd-aggregatorOfficialVerified publisher | 1.0.0 | 1 of 2See more | 1,742 |
| fr24feederfnzv | 0.1.2 | 1 of 1See more | 2,271 |
| maxscalefour-allportalVerified publisher | 4.1.16 | 1 of 3See more | 6,611 |
| esphomegabe565Verified publisher | 0.15.0 | 1 of 1See more | 3,112 |
| scanservjsgabe565Verified publisher | 0.9.2 | 1 of 1See more | 13,241 |
| accumulogaffer | 2.2.1 | 1 of 4See more | 16,892 |
| gaffer-road-trafficgaffer | 2.2.1 | 1 of 8See more | 9,342 |
| galoy-depsgaloymoney | 0.10.20 | 1 of 9See more | 11,961 |
| galoy-depsgaloymoney2 | 0.10.20 | 1 of 9See more | 11,961 |
| pagesgary-pages | 1.0.0 | 2 of 3See more | 20,190 |
| airsonicgeek-cookbookVerified publisher | 6.4.2 | 1 of 1See more | 18,230 |
| apache-musicindexgeek-cookbookVerified publisher | 2.4.2 | 1 of 1See more | 14,659 |
| booksonic-airgeek-cookbookVerified publisher | 6.4.2 | 1 of 1See more | 19,215 |
| calibre-webgeek-cookbookVerified publisher | 8.4.2 | 1 of 1See more | 16,123 |
| delugegeek-cookbookVerified publisher | 5.4.2 | 1 of 1See more | 13,551 |
| double-takegeek-cookbookVerified publisher | 2.3.2 | 1 of 1See more | 12,222 |
| embygeek-cookbookVerified publisher | 3.4.2 | 1 of 1See more | 8,545 |
| factoriogeek-cookbookVerified publisher | 1.2.2 | 1 of 2See more | 1,437 |
| gapsgeek-cookbookVerified publisher | 5.4.2 | 1 of 1See more | 8,943 |
| haste-servergeek-cookbookVerified publisher | 3.4.2 | 1 of 1See more | 10,994 |
| icinga2geek-cookbookVerified publisher | 4.2.0 | 1 of 1See more | 9,077 |
| jackettgeek-cookbookVerified publisher | 11.7.2 | 1 of 1See more | 9,698 |
| komgageek-cookbookVerified publisher | 2.4.2 | 1 of 1See more | 12,581 |
| lidarrgeek-cookbookVerified publisher | 14.2.2 | 1 of 1See more | 14,283 |
| mopidygeek-cookbookVerified publisher | 0.1.2 | 1 of 1See more | 12,958 |
| nzbgetgeek-cookbookVerified publisher | 12.4.2 | 1 of 1See more | 12,076 |
| nzbhydra2geek-cookbookVerified publisher | 10.4.2 | 1 of 1See more | 17,702 |
| openkmgeek-cookbookVerified publisher | 4.2.0 | 1 of 1See more | 27,949 |
| photoprismgeek-cookbookVerified publisher | 7.2.0 | 1 of 1See more | 19,503 |
| puppeteergeek-cookbookVerified publisher | 1.2.2 | 1 of 1See more | 15,730 |
| qbittorrentgeek-cookbookVerified publisher | 13.5.2 | 1 of 1See more | 11,807 |
| radarrgeek-cookbookVerified publisher | 16.3.2 | 1 of 1See more | 10,379 |
| readarrgeek-cookbookVerified publisher | 6.4.2 | 1 of 1See more | 7,768 |
| resilio-syncgeek-cookbookVerified publisher | 5.4.2 | 1 of 1See more | 5,895 |
| satisfactorygeek-cookbookVerified publisher | 1.2.2 | 1 of 1See more | 3,427 |
| sdtdgeek-cookbookVerified publisher | 0.3.2 | 1 of 1See more | 2,511 |
| seafilegeek-cookbookVerified publisher | 3.2.0 | 1 of 1See more | 24,293 |
| skypilotgeek-cookbookVerified publisher | 0.0.1 | 1 of 3See more | 8,923 |
| teedygeek-cookbookVerified publisher | 6.2.0 | 1 of 1See more | 26,944 |
| transmissiongeek-cookbookVerified publisher | 8.4.3 | 1 of 1See more | 11,861 |
Container images carrying it
1,592 by charts deploying them
A fixed version is listed for 3 of the 3 affected packages.
| Container image | Digest | Package | Fixed in | Used by |
|---|---|---|---|---|
| apicurio/ | 27a91978a388 | nghttp2 | 0:1.33.0-6.el8_10.3 | 1 |
| archivebox/ | 1a5a37331091 | nghttp2 | no fix listed | 1 |
| aristidetm/ | 469dbc951224 | nghttp2 | no fix listed | 1 |
| artur9010/ | 6b4de3ce8b0e | nghttp2 | no fix listed | 1 |
| arunvelsriram/ | 655ad18fd8d6 | nghttp2 | 1.59.0-1ubuntu0.4 | 1 |
| assistiot/ | 6a107f224c34 | nghttp2 | no fix listed | 1 |
| assistiot/ | d157fbe150e3 | nghttp2 | no fix listed | 1 |
| assistiot/ | 0df4b4fa899a | nghttp2 | 0:1.33.0-6.el8_10.3 | 1 |
| assistiot/ | e9bae124095f | nghttp2 | 1.43.0-1ubuntu0.4 | 1 |
| assistiot/ | 30812ba93555 | nghttp2 | 1.43.0-1ubuntu0.4 | 1 |
| assistiot/ | ea254b6d8a31 | nghttp2 | no fix listed | 1 |
| assistiot/ | b1dbe4d62a03 | nghttp2 | no fix listed | 1 |
| assistiot/ | e5ae539ce2cb | nghttp2 | no fix listed | 1 |
| atlassian/ | 3b9222ab32ef | nghttp2 | 1.43.0-1ubuntu0.4 | 1 |
| atlassian/ | 37bc46cbec1a | nghttp2 | 1.43.0-1ubuntu0.4 | 1 |
| atlassian/ | 64a75aa4ec4e | nghttp2 | 1.59.0-1ubuntu0.4 | 1 |
| avinash263/ | aa2b8727f1a6 | nghttp2 | no fix listed | 1 |
| avzini/ | f40b30210ed0 | nghttp2 | no fix listed | 1 |
| baserow/ | 7c00549b3a6f | nghttp2 | no fix listed | 1 |
| baserow/ | e0b3c8130b91 | nghttp2 | no fix listed | 1 |
| baserow/ | df0c42eb67e8 | nghttp2 | no fix listed | 1 |
| bbernhard/ | 549ad08d7e14 | nghttp2 | no fix listed | 1 |
| beopenit/ | b4d9f9bee224 | nghttp2 | 0:1.33.0-6.el8_10.3 | 1 |
| berkeleyskypilot/ | 3bc8bf8f4d83 | nghttp2 | no fix listed | 1 |
| berkeleyskypilot/ | 8da2f3cda472 | nghttp2 | no fix listed | 1 |
| beyzkaya/ | 12a6a3d1c5f9 | nghttp2 | no fix listed | 1 |
| bitnamilegacy/ | 15d4647fd491 | nghttp2 | no fix listed | 1 |
| bitnamilegacy/ | e6f6ddcce2f1 | nghttp2 | no fix listed | 1 |
| bitnamilegacy/ | 4b08d0c5af8d | nghttp2 | no fix listed | 1 |
| bitnamilegacy/ | cb8ab5515676 | nghttp2 | no fix listed | 1 |
| bitnamilegacy/ | cc599cbd15ff | nghttp2 | no fix listed | 1 |
| bitnamilegacy/ | da3df0976a9f | nghttp2 | no fix listed | 1 |
| bitnamilegacy/ | 1249fc292e84 | nghttp2 | no fix listed | 1 |
| bitnamilegacy/ | 64614ef8290f | nghttp2 | no fix listed | 1 |
| bitnamilegacy/ | 744f84cf7493 | nghttp2 | no fix listed | 1 |
| bitnamilegacy/ | f5fc0d561d9e | nghttp2 | no fix listed | 1 |
| bitnamilegacy/ | f02c000c54b1 | nghttp2 | no fix listed | 1 |
| bitnamilegacy/ | 5501c419f42e | nghttp2 | no fix listed | 1 |
| bitnamilegacy/ | 6dabb4a2088c | nghttp2 | no fix listed | 1 |
| bitnamilegacy/ | 8935e75fa5d1 | nghttp2 | no fix listed | 1 |
| bitnamilegacy/ | 952f86d1116c | nghttp2 | no fix listed | 1 |
| bitnamilegacy/ | ba9f3b4b0b00 | nghttp2 | no fix listed | 1 |
| bitnamilegacy/ | c0ede65eb88e | nghttp2 | no fix listed | 1 |
| bitnamilegacy/ | cce234b4381a | nghttp2 | no fix listed | 1 |
| bitnamilegacy/ | d7cd0e172c4c | nghttp2 | no fix listed | 1 |
| bitnamilegacy/ | 21e8f8baa432 | nghttp2 | no fix listed | 1 |
| bitnamilegacy/ | 2579e968033e | nghttp2 | no fix listed | 1 |
| bitnamilegacy/ | 3163c3842bfd | nghttp2 | no fix listed | 1 |
| bitnamilegacy/ | b0652af9c8d0 | nghttp2 | no fix listed | 1 |
| bitnamilegacy/ | d8440eb6b290 | nghttp2 | no fix listed | 1 |