StackRadar

DLA-3621-1

UnscoredKEV

Advisory

Published 16 Oct 2023In the index since 5 Sept 2026
Severity
Unscored
worst across findings
CVSS
—
base score, highest
EPSS
1.000
100th percentile
CISA KEV
Listed
since 10 Oct 2023
Charts affected
216
of 17,781 indexed, latest versions
Container images
195
deployed by those charts
Fix available
1 of 1
affected package

nghttp2 - security update

Carried by container images the latest versions of 216 of 17,781 indexed charts deploy, on 195 images.

Affected packageAffected versionsFixed inImages
nghttp2deb1.36.0-2, 1.36.0-2+deb10u11.36.0-2+deb10u2195
OSV records
DLA-3621-1

Charts affected

216 by stars
ChartLatestAffected imagesRadar Score
taalhuizen-servicetaalhuizen-service1.0.01 of 3See more

taalhuizen-service taalhuizen-service 1.0.0

1 of the 3 container images this version deploys carry DLA-3621-1.

Container imageDigestPackageFixed in
ghcr.io/conductionnl/taalhuizen-service-nginx:latest0bbaa7487c63
nghttp2@1.36.0-2+deb10u1
1.36.0-2+deb10u2

Open the chart page →

7,480
vehicle-dashboardtest-vehi-dash0.1.03 of 7See more

vehicle-dashboard test-vehi-dash 0.1.0

3 of the 7 container images this version deploys carry DLA-3621-1.

Container imageDigestPackageFixed in
library/node:16.20f77a1aef2da8
nghttp2@1.36.0-2+deb10u1
1.36.0-2+deb10u2
samajh/alprbackend:latestea742b4372ad
nghttp2@1.36.0-2+deb10u1
1.36.0-2+deb10u2
samajh/alprfrontend:latest05ef4fddbb75
nghttp2@1.36.0-2+deb10u1
1.36.0-2+deb10u2

Open the chart page →

20,270
pock-helm-charttinote-chart0.1.01 of 3See more

pock-helm-chart tinote-chart 0.1.0

1 of the 3 container images this version deploys carry DLA-3621-1.

Container imageDigestPackageFixed in
nginx/nginx-ingress:1.11.1eb5b4fd73325
nghttp2@1.36.0-2+deb10u1
1.36.0-2+deb10u2

Open the chart page →

6,881
trouw-servicetrouw-service1.0.01 of 3See more

trouw-service trouw-service 1.0.0

1 of the 3 container images this version deploys carry DLA-3621-1.

Container imageDigestPackageFixed in
ghcr.io/conductionnl/trouw-service-nginx:latest86fe293b99a2
nghttp2@1.36.0-2+deb10u1
1.36.0-2+deb10u2

Open the chart page →

7,510
openldap-havcnngrVerified publisher1.0.01 of 3See more

openldap-ha vcnngr 1.0.0

1 of the 3 container images this version deploys carry DLA-3621-1.

Container imageDigestPackageFixed in
osixia/phpldapadmin:0.9.0d112b82be133
nghttp2@1.36.0-2+deb10u1
1.36.0-2+deb10u2

Open the chart page →

5,514
verhuis-serviceverhuis-service1.0.01 of 3See more

verhuis-service verhuis-service 1.0.0

1 of the 3 container images this version deploys carry DLA-3621-1.

Container imageDigestPackageFixed in
ghcr.io/conductionnl/verhuis-service-nginx:latest4473ce50435e
nghttp2@1.36.0-2+deb10u1
1.36.0-2+deb10u2

Open the chart page →

7,510
verzoekconversieserviceverzoekconversieservice1.0.01 of 3See more

verzoekconversieservice verzoekconversieservice 1.0.0

1 of the 3 container images this version deploys carry DLA-3621-1.

Container imageDigestPackageFixed in
ghcr.io/conductionnl/verzoekconversieservice-nginx:latestf449b82ce9d6
nghttp2@1.36.0-2+deb10u1
1.36.0-2+deb10u2

Open the chart page →

7,528
verzoekregistratiecomponentverzoekregistratiecomponent1.1.01 of 4See more

verzoekregistratiecomponent verzoekregistratiecomponent 1.1.0

1 of the 4 container images this version deploys carry DLA-3621-1.

Container imageDigestPackageFixed in
ghcr.io/conductionnl/verzoekregistratiecomponent-nginx:lateste0c5f8a95098
nghttp2@1.36.0-2+deb10u1
1.36.0-2+deb10u2

Open the chart page →

7,429
verzoektypecatalogusverzoektypecatalogus1.1.01 of 4See more

verzoektypecatalogus verzoektypecatalogus 1.1.0

1 of the 4 container images this version deploys carry DLA-3621-1.

Container imageDigestPackageFixed in
ghcr.io/conductionnl/verzoektypecatalogus-nginx:latest42c75ea8082c
nghttp2@1.36.0-2+deb10u1
1.36.0-2+deb10u2

Open the chart page →

7,429
genievhdirkVerified publisher0.1.31 of 1See more

genie vhdirk 0.1.3

1 of the 1 container images this version deploys carry DLA-3621-1.

Container imageDigestPackageFixed in
stanfordoval/almond-server:latest1a63cdccedaf
nghttp2@1.36.0-2+deb10u1
1.36.0-2+deb10u2

Open the chart page →

3,129
tool-cradlewbstack0.2.01 of 1See more

tool-cradle wbstack 0.2.0

1 of the 1 container images this version deploys carry DLA-3621-1.

Container imageDigestPackageFixed in
ghcr.io/wbstack/cradle:2.0.11c7a78c54f77
nghttp2@1.36.0-2+deb10u1
1.36.0-2+deb10u2

Open the chart page →

1,316
tool-quickstatementswbstack0.4.01 of 1See more

tool-quickstatements wbstack 0.4.0

1 of the 1 container images this version deploys carry DLA-3621-1.

Container imageDigestPackageFixed in
ghcr.io/wbstack/quickstatements:1.3.588423e422ea8
nghttp2@1.36.0-2+deb10u1
1.36.0-2+deb10u2

Open the chart page →

1,698
tool-widarwbstack0.4.01 of 1See more

tool-widar wbstack 0.4.0

1 of the 1 container images this version deploys carry DLA-3621-1.

Container imageDigestPackageFixed in
ghcr.io/wbstack/widar:1.31702fc9df79f
nghttp2@1.36.0-2+deb10u1
1.36.0-2+deb10u2

Open the chart page →

1,480
weather-chartweather-web-app0.1.01 of 1See more

weather-chart weather-web-app 0.1.0

1 of the 1 container images this version deploys carry DLA-3621-1.

Container imageDigestPackageFixed in
zohardocker12/weather_app_flask:latestb86d60dbb68d
nghttp2@1.36.0-2+deb10u1
1.36.0-2+deb10u2

Open the chart page →

2,670
sonarqubewebencryptor6.7.31 of 3See more

sonarqube webencryptor 6.7.3

1 of the 3 container images this version deploys carry DLA-3621-1.

Container imageDigestPackageFixed in
library/sonarqube:8.2-communitya246bc64207e
nghttp2@1.36.0-2+deb10u1
1.36.0-2+deb10u2

Open the chart page →

5,460
workadventureworkadventure1.1.04 of 9See more

workadventure workadventure 1.1.0

4 of the 9 container images this version deploys carry DLA-3621-1.

Container imageDigestPackageFixed in
thecodingmachine/workadventure-back:v1.17.764001369dad5
nghttp2@1.36.0-2+deb10u1
1.36.0-2+deb10u2
thecodingmachine/workadventure-map-storage:v1.17.75bdab56da2fa
nghttp2@1.36.0-2+deb10u1
1.36.0-2+deb10u2
thecodingmachine/workadventure-play:v1.17.7d8f66979b9b4
nghttp2@1.36.0-2+deb10u1
1.36.0-2+deb10u2
thecodingmachine/workadventure-uploader:v1.17.73ccd467543b3
nghttp2@1.36.0-2+deb10u1
1.36.0-2+deb10u2

Open the chart page →

16,083

Container images carrying it

195 by charts deploying them

A fixed version is listed for 1 of the 1 affected package.

Container imageDigestPackageFixed inUsed by
gcr.io/google-samples/microservices-demo/loadgenerator:v0.2.3360130ab5850
nghttp2@1.36.0-2+deb10u1
1.36.0-2+deb10u2
1
ghcr.io/chaos-mesh/chaos-daemon:v2.5.1cf78fdf7403a
nghttp2@1.36.0-2+deb10u1
1.36.0-2+deb10u2
1
ghcr.io/conductionnl/adresservice-nginx:latest849af80ab017
nghttp2@1.36.0-2+deb10u1
1.36.0-2+deb10u2
1
ghcr.io/conductionnl/authorization-component-nginx:latest02d0644aa99b
nghttp2@1.36.0-2+deb10u1
1.36.0-2+deb10u2
1
ghcr.io/conductionnl/bisc-frontend:latestd8a0334cddfc
nghttp2@1.36.0-2+deb10u1
1.36.0-2+deb10u2
1
ghcr.io/conductionnl/brpservice-nginx:latest4db9b77c4425
nghttp2@1.36.0-2+deb10u1
1.36.0-2+deb10u2
1
ghcr.io/conductionnl/eherkenning-ui-nginx:latestfcd2100d863f
nghttp2@1.36.0-2+deb10u1
1.36.0-2+deb10u2
1
ghcr.io/conductionnl/grafregistratiecomponent-nginx:latestd0daf48dec68
nghttp2@1.36.0-2+deb10u1
1.36.0-2+deb10u2
1
ghcr.io/conductionnl/instemmingservice-nginx:latesteeeb4e9f0485
nghttp2@1.36.0-2+deb10u1
1.36.0-2+deb10u2
1
ghcr.io/conductionnl/landelijketabellencatalogus-nginx:lateste7076242888a
nghttp2@1.36.0-2+deb10u1
1.36.0-2+deb10u2
1
ghcr.io/conductionnl/loggingcomponent-nginx:latestcee37e9cef09
nghttp2@1.36.0-2+deb10u1
1.36.0-2+deb10u2
1
ghcr.io/conductionnl/logicservice-nginx:latest7c8ee08c591c
nghttp2@1.36.0-2+deb10u1
1.36.0-2+deb10u2
1
ghcr.io/conductionnl/memo-component-nginx:latestfd28182f7ecf
nghttp2@1.36.0-2+deb10u1
1.36.0-2+deb10u2
1
ghcr.io/conductionnl/notification-component-nginx:latestd53bda41ee3b
nghttp2@1.36.0-2+deb10u1
1.36.0-2+deb10u2
1
ghcr.io/conductionnl/ocatiecatalogus-nginx:latestc46374fc8f32
nghttp2@1.36.0-2+deb10u1
1.36.0-2+deb10u2
1
ghcr.io/conductionnl/orderregistratiecomponent-nginx:latest42acee4ab31c
nghttp2@1.36.0-2+deb10u1
1.36.0-2+deb10u2
1
ghcr.io/conductionnl/procestypecatalogus-nginx:latestca6fc575a3ba
nghttp2@1.36.0-2+deb10u1
1.36.0-2+deb10u2
1
ghcr.io/conductionnl/productenendienstencatalogus-nginx:latest4095e7207822
nghttp2@1.36.0-2+deb10u1
1.36.0-2+deb10u2
1
ghcr.io/conductionnl/proto-component-commonground-nginx:latest5b1384e29b7d
nghttp2@1.36.0-2+deb10u1
1.36.0-2+deb10u2
1
ghcr.io/conductionnl/review-component-nginx:latest5df5f92870a5
nghttp2@1.36.0-2+deb10u1
1.36.0-2+deb10u2
1
ghcr.io/conductionnl/taalhuizen-service-nginx:latest0bbaa7487c63
nghttp2@1.36.0-2+deb10u1
1.36.0-2+deb10u2
1
ghcr.io/conductionnl/trouw-service-nginx:latest86fe293b99a2
nghttp2@1.36.0-2+deb10u1
1.36.0-2+deb10u2
1
ghcr.io/conductionnl/verhuis-service-nginx:latest4473ce50435e
nghttp2@1.36.0-2+deb10u1
1.36.0-2+deb10u2
1
ghcr.io/conductionnl/verzoekconversieservice-nginx:latestf449b82ce9d6
nghttp2@1.36.0-2+deb10u1
1.36.0-2+deb10u2
1
ghcr.io/conductionnl/verzoekregistratiecomponent-nginx:lateste0c5f8a95098
nghttp2@1.36.0-2+deb10u1
1.36.0-2+deb10u2
1
ghcr.io/conductionnl/verzoektypecatalogus-nginx:latest42c75ea8082c
nghttp2@1.36.0-2+deb10u1
1.36.0-2+deb10u2
1
ghcr.io/conductionnl/waardepapieren-balie-nginx:latest2eb073ab8b83
nghttp2@1.36.0-2+deb10u1
1.36.0-2+deb10u2
1
ghcr.io/conductionnl/waardepapieren-register-nginx:latest3fba727a3cc1
nghttp2@1.36.0-2+deb10u1
1.36.0-2+deb10u2
1
ghcr.io/dysnix/bitnami/mongodb:4.4.11-debian-10-r5073116e61007
nghttp2@1.36.0-2+deb10u1
1.36.0-2+deb10u2
1
ghcr.io/grofers/legend:0.1d6e901ad0ebd
nghttp2@1.36.0-2+deb10u1
1.36.0-2+deb10u2
1
ghcr.io/k8s-at-home/leaf2mqtt:v0.1fc9f5aca6cf4
nghttp2@1.36.0-2+deb10u1
1.36.0-2+deb10u2
1
ghcr.io/kedacore/external-scaler-azure-cosmos-db:0.1.04985d164ead9
nghttp2@1.36.0-2+deb10u1
1.36.0-2+deb10u2
1
ghcr.io/kvaps/linstor-satellite:v1.14.0a573fb9bc809
nghttp2@1.36.0-2+deb10u1
1.36.0-2+deb10u2
1
ghcr.io/privacyengineering/collector-go:main7217f1a4fa28
nghttp2@1.36.0-2+deb10u1
1.36.0-2+deb10u2
1
ghcr.io/privacyengineering/consumer:main73f59c032812
nghttp2@1.36.0-2+deb10u1
1.36.0-2+deb10u2
1
ghcr.io/vincenttaglia/indexer-tools:v3.4.45bae30456ddb
nghttp2@1.36.0-2+deb10u1
1.36.0-2+deb10u2
1
ghcr.io/wbstack/cradle:2.0.11c7a78c54f77
nghttp2@1.36.0-2+deb10u1
1.36.0-2+deb10u2
1
ghcr.io/wbstack/quickstatements:1.3.588423e422ea8
nghttp2@1.36.0-2+deb10u1
1.36.0-2+deb10u2
1
ghcr.io/wbstack/widar:1.31702fc9df79f
nghttp2@1.36.0-2+deb10u1
1.36.0-2+deb10u2
1
mcr.microsoft.com/oss/bitnami/redis:6.0.8.9e1e9cf5297a6
nghttp2@1.36.0-2+deb10u1
1.36.0-2+deb10u2
1
quay.io/fairwinds/yelb-appserver:v0.6.0fae21f06131f
nghttp2@1.36.0-2+deb10u1
1.36.0-2+deb10u2
1
quay.io/mongodb/farm-intro-frontend:0.199ccdfd543e1
nghttp2@1.36.0-2+deb10u1
1.36.0-2+deb10u2
1
quay.io/opsmxpublic/bitnami-kubectl:1.18.5a8b21cec412c
nghttp2@1.36.0-2+deb10u1
1.36.0-2+deb10u2
1
quay.io/opsmxpublic/bitnami-redis:5.0.7-debian-10-r09a8d95ca0bd9
nghttp2@1.36.0-2+deb10u1
1.36.0-2+deb10u2
1
registry.gitlab.com/open-forms/design-catalogue:latestf21f19346b29
nghttp2@1.36.0-2+deb10u1
1.36.0-2+deb10u2
1

syft 1.42.1 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.