DLA-3937-1
UnscoredAdvisory
Published 27 Oct 2024In the index since 6 Sept 2026
- Severity
- Unscored
- worst across findings
- CVSS
- —
- base score, highest
- EPSS
- 0.013
- 68th percentile
- CISA KEV
- Not listed
- no confirmed exploitation
- Charts affected
- 17
- of 17,781 indexed, latest versions
- Container images
- 21
- deployed by those charts
- Fix available
- 1 of 1
- affected package
nss - security update
Carried by container images the latest versions of 17 of 17,781 indexed charts deploy, on 21 images.
| Affected package | Affected versions | Fixed in | Images |
|---|---|---|---|
| nssdeb | 2:3.61-1+deb11u1, 2:3.61-1+deb11u2, 2:3.61-1+deb11u3 | 2:3.61-1+deb11u4 | 21 |
- OSV records
- DLA-3937-1
Charts affected
17 by stars
| Chart | Latest | Affected images | Radar Score |
|---|---|---|---|
| servarrkubitodevVerified publisher | 1.5.2 | 1 of 10See more | 3,004 |
| servarrservarr | 1.0.2 | 1 of 10See more | 14,238 |
| kobotoolboxone-acre-fundVerified publisher | 0.7.4 | 2 of 9See more | 18,517 |
| open-zaakopen-zaak | 0.8.0 | 1 of 3See more | 4,045 |
| thingsboard-clusterthingsboard-cluster-bettaVerified publisher | 0.2.26 | 1 of 6See more | 14,566 |
| anteonanteonVerified publisher | 2.6.4 | 1 of 13See more | 22,202 |
| paperlessgeek-cookbookVerified publisher | 9.2.0 | 1 of 1See more | 3,924 |
| locationprocessingassist-iot-location-processing | 1.0.0 | 1 of 3See more | 10,061 |
| camerahubcamerahub | 0.10.21 | 1 of 2See more | 2,507 |
| countlychristianhuthVerified publisher | 5.2.1 | 2 of 3See more | 7,295 |
| adventurelogdjjudas21Verified publisher | 0.1.1 | 1 of 3See more | 7,459 |
| openldap-stack-haeclipse-aeriosVerified publisher | 4.1.2 | 1 of 4See more | 7,534 |
| sasquatchlsst-sqre | 0.1.13 | 1 of 6See more | 9,332 |
| radar-kafkaradar-baseVerified publisher | 0.4.1 | 1 of 2See more | 4,219 |
| bastillion-upstreamrock8sVerified publisher | 0.1.0 | 1 of 1See more | 3,051 |
| node-redth0ths-helm-charts | 0.2.1 | 1 of 2See more | 2,408 |
| thingsboardthingsboardVerified publisher | 0.1.3 | 4 of 12See more | 25,394 |
Container images carrying it
21 by charts deploying them
A fixed version is listed for 1 of the 1 affected package.
| Container image | Digest | Package | Fixed in | Used by |
|---|---|---|---|---|
| postgis/ | a2fc46b52819 | nss | 2:3.61-1+deb11u4 | 2 |
| camerahub/ | a5af37dd6e1b | nss | 2:3.61-1+deb11u4 | 1 |
| countly/ | f4cc7447c4f5 | nss | 2:3.61-1+deb11u4 | 1 |
| countly/ | 2acbc11499b6 | nss | 2:3.61-1+deb11u4 | 1 |
| ddosify/ | e5be48b37348 | nss | 2:3.61-1+deb11u4 | 1 |
| eclipseaerios/ | 0208743f315e | nss | 2:3.61-1+deb11u4 | 1 |
| iamdorsah/ | db83a0254d81 | nss | 2:3.61-1+deb11u4 | 1 |
| kobotoolbox/ | b15679454415 | nss | 2:3.61-1+deb11u4 | 1 |
| kobotoolbox/ | bcacc01bccd4 | nss | 2:3.61-1+deb11u4 | 1 |
| lsstsqre/ | e139fde946d7 | nss | 2:3.61-1+deb11u4 | 1 |
| openzaak/ | 2ca2ea6e0ae9 | nss | 2:3.61-1+deb11u4 | 1 |
| th0th/ | d06fa39f7406 | nss | 2:3.61-1+deb11u4 | 1 |
| thingsboard/ | bd45a09d85d9 | nss | 2:3.61-1+deb11u4 | 1 |
| thingsboard/ | a06f53c5e2da | nss | 2:3.61-1+deb11u4 | 1 |
| thingsboard/ | 030f316ce301 | nss | 2:3.61-1+deb11u4 | 1 |
| thingsboard/ | 645f43b688f7 | nss | 2:3.61-1+deb11u4 | 1 |
| thingsboard/ | f40a542832c4 | nss | 2:3.61-1+deb11u4 | 1 |
| ghcr.io/ | 088412db1051 | nss | 2:3.61-1+deb11u4 | 1 |
| ghcr.io/ | f104ee51e512 | nss | 2:3.61-1+deb11u4 | 1 |
| ghcr.io/ | 7e25f7048aff | nss | 2:3.61-1+deb11u4 | 1 |
| ghcr.io/ | 9bbc9a90641e | nss | 2:3.61-1+deb11u4 | 1 |