DLA-1846-2
UnscoredAdvisory
Published 28 Jul 2019In the index since 6 Sept 2026
- Severity
- Unscored
- worst across findings
- CVSS
- —
- base score, highest
- EPSS
- —
- probability of exploitation
- CISA KEV
- Not listed
- no confirmed exploitation
- Charts affected
- 14
- of 17,781 indexed, latest versions
- Container images
- 10
- deployed by those charts
- Fix available
- 1 of 1
- affected package
unzip - regression update
Carried by container images the latest versions of 14 of 17,781 indexed charts deploy, on 10 images.
| Affected package | Affected versions | Fixed in | Images |
|---|---|---|---|
| unzipdeb | 6.0-16+deb8u2, 6.0-16+deb8u3 | 6.0-16+deb8u5 | 10 |
- OSV records
- DLA-1846-2
Charts affected
14 by stars
| Chart | Latest | Affected images | Radar Score |
|---|---|---|---|
| rocketmqgin | 1.1.0 | 1 of 2See more | 9,154 |
| hadoopcloudnativeapp | 1.1.0 | 1 of 1See more | 5,772 |
| hadoopmiuler | 1.2.2 | 1 of 1See more | 5,772 |
| graylogt3n | 1.0.0 | 1 of 3See more | 8,063 |
| cosbenchcloudnativeapp | 1.0.1 | 1 of 1See more | 4,906 |
| linkerdcloudnativeapp | 0.4.1 | 1 of 2See more | 1,419 |
| webpagetest-servercloudnativeapp | 0.2.1 | 1 of 1See more | 3,716 |
| mauticdevtron | 0.1.3 | 1 of 3See more | 2,939 |
| mauticdevtron-labs | 0.1.3 | 1 of 3See more | 2,939 |
| hapi-fhirhapi-fhirVerified publisher | 0.1.0 | 1 of 1See more | 6,362 |
| monocularjenkins-x | 0.6.4 | 1 of 4See more | 4,614 |
| monocularmonocular | 1.4.15 | 1 of 5See more | 7,048 |
| polyglotncsaVerified publisher | 0.1.1 | 1 of 18See more | 55,726 |
| mauticromholdings | 0.1.3 | 1 of 3See more | 2,939 |
Container images carrying it
10 by charts deploying them
A fixed version is listed for 1 of the 1 affected package.
| Container image | Digest | Package | Fixed in | Used by |
|---|---|---|---|---|
| mautic/ | a954c5868d76 | unzip | 6.0-16+deb8u5 | 3 |
| danisla/ | 255ba2dd739b | unzip | 6.0-16+deb8u5 | 2 |
| migmartri/ | 486aacfd5aa9 | unzip | 6.0-16+deb8u5 | 2 |
| apacherocketmq/ | 24799aff6cf8 | unzip | 6.0-16+deb8u5 | 1 |
| buoyantio/ | f4048edaca6f | unzip | 6.0-16+deb8u5 | 1 |
| graylog2/ | 8ff28c66e6c1 | unzip | 6.0-16+deb8u5 | 1 |
| ncsapolyglot/ | 2ba4af461d51 | unzip | 6.0-16+deb8u5 | 1 |
| polyakov/ | dbcef69146b8 | unzip | 6.0-16+deb8u5 | 1 |
| timothyclarke/ | 40a80ced8031 | unzip | 6.0-16+deb8u5 | 1 |
| zenko/ | 386a1f48ec0e | unzip | 6.0-16+deb8u5 | 1 |