StackRadarChart IndexLive demo

DLA-3758-1

Unscored

Advisory

Published 11 Mar 2024In the index since 6 Sept 2026

Severity: Unscored; worst across findings
CVSS: —; base score, highest
EPSS: 0.022; 81st percentile
CISA KEV: Not listed; no confirmed exploitation
Charts affected: 160; of 17,781 indexed, latest versions
Container images: 113; deployed by those charts
Fix available: 1 of 1; affected package

tiff - security update

Carried by container images the latest versions of 160 of 17,781 indexed charts deploy, on 113 images.

Affected package	Affected versions	Fixed in	Images
tiffdeb	4.0.10-4, 4.1.0+git191117-2~deb10u1, 4.1.0+git191117-2~deb10u2, 4.1.0+git191117-2~deb10u3+4 more	4.1.0+git191117-2~deb10u9	113

OSV records: DLA-3758-1

Charts affected

160 by stars

Chart

Latest

Affected images

Radar Score

pock-helm-charttinote-chart

1 of 3 See more

pock-helm-chart tinote-chart 0.1.0

1 of the 3 container images this version deploys carry DLA-3758-1.

Container image	Digest	Package	Fixed in
nginx/nginx-ingress :1.11.1	eb5b4fd73325	tiff@4.1.0+git191117-2~deb10u2	4.1.0+git191117-2~deb10u9

Open the chart page →

6,881

trouw-servicetrouw-service

1 of 3 See more

trouw-service trouw-service 1.0.0

1 of the 3 container images this version deploys carry DLA-3758-1.

Container image	Digest	Package	Fixed in
ghcr.io/conductionnl/trouw-service-nginx :latest	86fe293b99a2	tiff@4.1.0+git191117-2~deb10u2	4.1.0+git191117-2~deb10u9

Open the chart page →

7,510

verhuis-serviceverhuis-service

1 of 3 See more

verhuis-service verhuis-service 1.0.0

1 of the 3 container images this version deploys carry DLA-3758-1.

Container image	Digest	Package	Fixed in
ghcr.io/conductionnl/verhuis-service-nginx :latest	4473ce50435e	tiff@4.1.0+git191117-2~deb10u2	4.1.0+git191117-2~deb10u9

Open the chart page →

7,510

verzoekconversieserviceverzoekconversieservice

1 of 3 See more

verzoekconversieservice verzoekconversieservice 1.0.0

1 of the 3 container images this version deploys carry DLA-3758-1.

Container image	Digest	Package	Fixed in
ghcr.io/conductionnl/verzoekconversieservice-nginx :latest	f449b82ce9d6	tiff@4.1.0+git191117-2~deb10u2	4.1.0+git191117-2~deb10u9

Open the chart page →

7,528

verzoekregistratiecomponentverzoekregistratiecomponent

1 of 4 See more

verzoekregistratiecomponent verzoekregistratiecomponent 1.1.0

1 of the 4 container images this version deploys carry DLA-3758-1.

Container image	Digest	Package	Fixed in
ghcr.io/conductionnl/verzoekregistratiecomponent-nginx :latest	e0c5f8a95098	tiff@4.1.0+git191117-2~deb10u2	4.1.0+git191117-2~deb10u9

Open the chart page →

7,429

verzoektypecatalogusverzoektypecatalogus

1 of 4 See more

verzoektypecatalogus verzoektypecatalogus 1.1.0

1 of the 4 container images this version deploys carry DLA-3758-1.

Container image	Digest	Package	Fixed in
ghcr.io/conductionnl/verzoektypecatalogus-nginx :latest	42c75ea8082c	tiff@4.1.0+git191117-2~deb10u2	4.1.0+git191117-2~deb10u9

Open the chart page →

7,429

genievhdirk

1 of 1 See more

genie vhdirk 0.1.3

1 of the 1 container images this version deploys carry DLA-3758-1.

Container image	Digest	Package	Fixed in
stanfordoval/almond-server :latest	1a63cdccedaf	tiff@4.1.0+git191117-2~deb10u4	4.1.0+git191117-2~deb10u9

Open the chart page →

3,129

weather-chartweather-web-app

1 of 1 See more

weather-chart weather-web-app 0.1.0

1 of the 1 container images this version deploys carry DLA-3758-1.

Container image	Digest	Package	Fixed in
zohardocker12/weather_app_flask :latest	b86d60dbb68d	tiff@4.1.0+git191117-2~deb10u2	4.1.0+git191117-2~deb10u9

Open the chart page →

2,670

myfirstchartww-helm-charts-repo

1 of 1 See more

myfirstchart ww-helm-charts-repo 0.1.0

1 of the 1 container images this version deploys carry DLA-3758-1.

Container image	Digest	Package	Fixed in
ghcr.io/stacksimplify/kubenginx :0.1.0	205961b09a80	tiff@4.1.0+git191117-2~deb10u1	4.1.0+git191117-2~deb10u9

Open the chart page →

1,138

myfirstchartzikilab

1 of 1 See more

myfirstchart zikilab 0.2.0

1 of the 1 container images this version deploys carry DLA-3758-1.

Container image	Digest	Package	Fixed in
ghcr.io/stacksimplify/kubenginxhelm :0.2.0	ae2268dcc930	tiff@4.1.0+git191117-2~deb10u1	4.1.0+git191117-2~deb10u9

Open the chart page →

1,138

Container images carrying it

113 by charts deploying them

A fixed version is listed for 1 of the 1 affected package.

Container image	Digest	Package	Fixed in	Used by
ghcr.io/conductionnl/trouw-service-nginx :latest	86fe293b99a2	tiff@4.1.0+git191117-2~deb10u2	4.1.0+git191117-2~deb10u9	1
ghcr.io/conductionnl/verhuis-service-nginx :latest	4473ce50435e	tiff@4.1.0+git191117-2~deb10u2	4.1.0+git191117-2~deb10u9	1
ghcr.io/conductionnl/verzoekconversieservice-nginx :latest	f449b82ce9d6	tiff@4.1.0+git191117-2~deb10u2	4.1.0+git191117-2~deb10u9	1
ghcr.io/conductionnl/verzoekregistratiecomponent-nginx :latest	e0c5f8a95098	tiff@4.1.0+git191117-2~deb10u2	4.1.0+git191117-2~deb10u9	1
ghcr.io/conductionnl/verzoektypecatalogus-nginx :latest	42c75ea8082c	tiff@4.1.0+git191117-2~deb10u2	4.1.0+git191117-2~deb10u9	1
ghcr.io/conductionnl/waardepapieren-balie-nginx :latest	2eb073ab8b83	tiff@4.1.0+git191117-2~deb10u2	4.1.0+git191117-2~deb10u9	1
ghcr.io/conductionnl/waardepapieren-register-nginx :latest	3fba727a3cc1	tiff@4.1.0+git191117-2~deb10u2	4.1.0+git191117-2~deb10u9	1
ghcr.io/grofers/legend :0.1	d6e901ad0ebd	tiff@4.1.0+git191117-2~deb10u1	4.1.0+git191117-2~deb10u9	1
ghcr.io/vincenttaglia/indexer-tools :v3.4.4	5bae30456ddb	tiff@4.1.0+git191117-2~deb10u8	4.1.0+git191117-2~deb10u9	1
quay.io/fairwinds/yelb-appserver :v0.6.0	fae21f06131f	tiff@4.1.0+git191117-2~deb10u3	4.1.0+git191117-2~deb10u9	1
quay.io/fairwinds/yelb-ui :v0.1.0	5ac114e567ed	tiff@4.1.0+git191117-2~deb10u1	4.1.0+git191117-2~deb10u9	1
quay.io/mongodb/farm-intro-frontend :0.1	99ccdfd543e1	tiff@4.1.0+git191117-2~deb10u2	4.1.0+git191117-2~deb10u9	1
registry.gitlab.com/open-forms/design-catalogue :latest	f21f19346b29	tiff@4.1.0+git191117-2~deb10u1	4.1.0+git191117-2~deb10u9	1