DLA-2786-1
UnscoredAdvisory
Published 16 Oct 2021In the index since 6 Sept 2026
- Severity
- Unscored
- worst across findings
- CVSS
- —
- base score, highest
- EPSS
- 0.106
- 96th percentile
- CISA KEV
- Not listed
- no confirmed exploitation
- Charts affected
- 103
- of 17,781 indexed, latest versions
- Container images
- 96
- deployed by those charts
- Fix available
- 1 of 1
- affected package
nghttp2 - security update
Carried by container images the latest versions of 103 of 17,781 indexed charts deploy, on 96 images.
| Affected package | Affected versions | Fixed in | Images |
|---|---|---|---|
| nghttp2deb | 1.18.1-1, 1.18.1-1+deb9u1 | 1.18.1-1+deb9u2 | 96 |
- OSV records
- DLA-2786-1
Charts affected
103 by stars
Container images carrying it
96 by charts deploying them
A fixed version is listed for 1 of the 1 affected package.
| Container image | Digest | Package | Fixed in | Used by |
|---|---|---|---|---|
| guacamole/ | 333a7f40c145 | nghttp2 | 1.18.1-1+deb9u2 | 1 |
| halkeye/ | 53eb2b3cd4cb | nghttp2 | 1.18.1-1+deb9u2 | 1 |
| halkeye/ | 77b05e95fdb5 | nghttp2 | 1.18.1-1+deb9u2 | 1 |
| i4trust/ | 3e77858e1219 | nghttp2 | 1.18.1-1+deb9u2 | 1 |
| jenkinsci/ | a1f33f004659 | nghttp2 | 1.18.1-1+deb9u2 | 1 |
| kubesphere/ | f1b5bf878196 | nghttp2 | 1.18.1-1+deb9u2 | 1 |
| leeyoongti/ | 21d66cb76352 | nghttp2 | 1.18.1-1+deb9u2 | 1 |
| library/ | ee75c9a737e7 | nghttp2 | 1.18.1-1+deb9u2 | 1 |
| library/ | 41ed3a1a16b6 | nghttp2 | 1.18.1-1+deb9u2 | 1 |
| library/ | 72b1b24a0288 | nghttp2 | 1.18.1-1+deb9u2 | 1 |
| library/ | 0ae5169e3d0f | nghttp2 | 1.18.1-1+deb9u2 | 1 |
| mirrorgitlabcontainers/ | 83599461ef8b | nghttp2 | 1.18.1-1+deb9u2 | 1 |
| mirrorgitlabcontainers/ | 9f3654f1eafc | nghttp2 | 1.18.1-1+deb9u2 | 1 |
| mirrorgitlabcontainers/ | 94d1431683fa | nghttp2 | 1.18.1-1+deb9u2 | 1 |
| mirrorgitlabcontainers/ | 9efd73993c34 | nghttp2 | 1.18.1-1+deb9u2 | 1 |
| mirrorgitlabcontainers/ | 30393f990f5c | nghttp2 | 1.18.1-1+deb9u2 | 1 |
| mirrorgitlabcontainers/ | a6d7bf42805a | nghttp2 | 1.18.1-1+deb9u2 | 1 |
| mirrorgitlabcontainers/ | 99931bd06b41 | nghttp2 | 1.18.1-1+deb9u2 | 1 |
| mumoshu/ | 02808a23186b | nghttp2 | 1.18.1-1+deb9u2 | 1 |
| mvitale1989/ | 1504ccda06df | nghttp2 | 1.18.1-1+deb9u2 | 1 |
| ncsapolyglot/ | c44b22eb58bb | nghttp2 | 1.18.1-1+deb9u2 | 1 |
| neilpeterson/ | fb47732ef36b | nghttp2 | 1.18.1-1+deb9u2 | 1 |
| neilpeterson/ | 3a8877032972 | nghttp2 | 1.18.1-1+deb9u2 | 1 |
| neilpeterson/ | 64fd8dab075f | nghttp2 | 1.18.1-1+deb9u2 | 1 |
| neilpeterson/ | 39ce9f92e899 | nghttp2 | 1.18.1-1+deb9u2 | 1 |
| nodered/ | 070643219ea2 | nghttp2 | 1.18.1-1+deb9u2 | 1 |
| ondrejsika/ | b1fd497416c8 | nghttp2 | 1.18.1-1+deb9u2 | 1 |
| opencord/ | 1d9ee8ce7fab | nghttp2 | 1.18.1-1+deb9u2 | 1 |
| openwhisk/ | b695a6ceb406 | nghttp2 | 1.18.1-1+deb9u2 | 1 |
| osixia/ | 58cce1b08592 | nghttp2 | 1.18.1-1+deb9u2 | 1 |
| pachyderm/ | 2b27f41d4d02 | nghttp2 | 1.18.1-1+deb9u2 | 1 |
| pihole/ | 8c172c4cf344 | nghttp2 | 1.18.1-1+deb9u2 | 1 |
| rakii8585/ | 026082a515ac | nghttp2 | 1.18.1-1+deb9u2 | 1 |
| raykrueger/ | c8baf3de57bb | nghttp2 | 1.18.1-1+deb9u2 | 1 |
| richardchesterwood/ | 0b540a28f5a6 | nghttp2 | 1.18.1-1+deb9u2 | 1 |
| richardchesterwood/ | 36c43961214c | nghttp2 | 1.18.1-1+deb9u2 | 1 |
| robotshop/ | 388349d5cb3c | nghttp2 | 1.18.1-1+deb9u2 | 1 |
| robotshop/ | d545747c1b97 | nghttp2 | 1.18.1-1+deb9u2 | 1 |
| robotshop/ | ea509182c180 | nghttp2 | 1.18.1-1+deb9u2 | 1 |
| royalwang/ | df99e2499f91 | nghttp2 | 1.18.1-1+deb9u2 | 1 |
| slagattollas/ | 6dd8ead8e2b1 | nghttp2 | 1.18.1-1+deb9u2 | 1 |
| vromero/ | 408d6a46b153 | nghttp2 | 1.18.1-1+deb9u2 | 1 |
| ghcr.io/ | 451706815103 | nghttp2 | 1.18.1-1+deb9u2 | 1 |
| ghcr.io/ | 763daf9caf8e | nghttp2 | 1.18.1-1+deb9u2 | 1 |
| ghcr.io/ | ab8e2f583e56 | nghttp2 | 1.18.1-1+deb9u2 | 1 |
| quay.io/ | 01c3b7acb301 | nghttp2 | 1.18.1-1+deb9u2 | 1 |