StackRadar

DLA-4016-1

Unscored

Advisory

Published 16 Jan 2025In the index since 5 Sept 2026
Severity
Unscored
worst across findings
CVSS
base score, highest
EPSS
probability of exploitation
CISA KEV
Not listed
no confirmed exploitation
Charts affected
174
of 17,781 indexed, latest versions
Container images
182
deployed by those charts
Fix available
1 of 1
affected package

ucf - security update

Carried by container images the latest versions of 174 of 17,781 indexed charts deploy, on 182 images.

Affected packageAffected versionsFixed inImages
ucfdeb3.00433.0043+deb11u2182
OSV records
DLA-4016-1

Charts affected

174 by stars
ChartLatestAffected imagesRadar Score
imgproxyrock8sVerified publisher0.8.301 of 1See more

imgproxy rock8s 0.8.30

1 of the 1 container images this version deploys carry DLA-4016-1.

Container imageDigestPackageFixed in
darthsim/imgproxy:v3.15.040f6eb807444
ucf@3.0043
3.0043+deb11u2

Open the chart page →

2,022
syncstorageschichtelVerified publisher0.1.11 of 1See more

syncstorage schichtel 0.1.1

1 of the 1 container images this version deploys carry DLA-4016-1.

Container imageDigestPackageFixed in
mozilla/syncstorage-rs:0.15.893752877dced
ucf@3.0043
3.0043+deb11u2

Open the chart page →

1,318
unifi-protectschichtelVerified publisher0.10.11 of 1See more

unifi-protect schichtel 0.10.1

1 of the 1 container images this version deploys carry DLA-4016-1.

Container imageDigestPackageFixed in
markdegroot/unifi-protect-arm64:latestd8445f2a0de6
ucf@3.0043
3.0043+deb11u2

Open the chart page →

5,582
searchpesearchpe4.1.01 of 2See more

searchpe searchpe 4.1.0

1 of the 2 container images this version deploys carry DLA-4016-1.

Container imageDigestPackageFixed in
library/postgres:13.703652c675ae1
ucf@3.0043
3.0043+deb11u2

Open the chart page →

2,637
seataseataVerified publisher0.1.01 of 1See more

seata seata 0.1.0

1 of the 1 container images this version deploys carry DLA-4016-1.

Container imageDigestPackageFixed in
seataio/seata-server:latest703b5de7f1a6
ucf@3.0043
3.0043+deb11u2

Open the chart page →

4,245
skeleton-pipskeleton-pip0.1.01 of 1See more

skeleton-pip skeleton-pip 0.1.0

1 of the 1 container images this version deploys carry DLA-4016-1.

Container imageDigestPackageFixed in
ghcr.io/conductionnl/skeleton-pip:devce1ebe9387a2
ucf@3.0043
3.0043+deb11u2

Open the chart page →

1,126
marge-botslamdev0.0.11 of 1See more

marge-bot slamdev 0.0.1

1 of the 1 container images this version deploys carry DLA-4016-1.

Container imageDigestPackageFixed in
hiboxsystems/marge-bot:0.11.07235809b43b3
ucf@3.0043
3.0043+deb11u2

Open the chart page →

1,426
sneakerssneakers1.0.01 of 4See more

sneakers sneakers 1.0.0

1 of the 4 container images this version deploys carry DLA-4016-1.

Container imageDigestPackageFixed in
helga09/shoes_ukr:v1.1.17999bc8b77c0
ucf@3.0043
3.0043+deb11u2

Open the chart page →

7,574
speckle-server-branch-testingspeckleVerified publisher2.17.14-branch.testing.72707.921a5f81 of 5See more

speckle-server-branch-testing speckle 2.17.14-branch.testing.72707.921a5f8

1 of the 5 container images this version deploys carry DLA-4016-1.

Container imageDigestPackageFixed in
speckle/speckle-frontend:2.17.14-branch.testing.72707.921a5f8d9b58995a8b8
ucf@3.0043
3.0043+deb11u2

Open the chart page →

14,679
speckle-server-branch-testing2speckleVerified publisher2.18.11-branch.testing2.88634-335d4691 of 5See more

speckle-server-branch-testing2 speckle 2.18.11-branch.testing2.88634-335d469

1 of the 5 container images this version deploys carry DLA-4016-1.

Container imageDigestPackageFixed in
speckle/speckle-frontend:2.18.11-branch.testing2.88634-335d46982c052441110
ucf@3.0043
3.0043+deb11u2

Open the chart page →

14,221
speckle-server-branch-testing3speckleVerified publisher2.18.12-branch.testing3.88744-f55b3411 of 5See more

speckle-server-branch-testing3 speckle 2.18.12-branch.testing3.88744-f55b341

1 of the 5 container images this version deploys carry DLA-4016-1.

Container imageDigestPackageFixed in
speckle/speckle-frontend:2.18.12-branch.testing3.88744-f55b341d5f689c9256c
ucf@3.0043
3.0043+deb11u2

Open the chart page →

14,221
fdi-dotstatsuite-sfs-solrstatcan1.0.21 of 4See more

fdi-dotstatsuite-sfs-solr statcan 1.0.2

1 of the 4 container images this version deploys carry DLA-4016-1.

Container imageDigestPackageFixed in
library/solr:8.11.18c5f7881cebb
ucf@3.0043
3.0043+deb11u2

Open the chart page →

6,065
solrstatcan1.5.101 of 3See more

solr statcan 1.5.10

1 of the 3 container images this version deploys carry DLA-4016-1.

Container imageDigestPackageFixed in
library/solr:8.11.18c5f7881cebb
ucf@3.0043
3.0043+deb11u2

Open the chart page →

8,806
student-producerstudentproducerVerified publisher2.0.01 of 1See more

student-producer studentproducer 2.0.0

1 of the 1 container images this version deploys carry DLA-4016-1.

Container imageDigestPackageFixed in
aroralalit/student-producer:1.0.02a094f597b36
ucf@3.0043
3.0043+deb11u2

Open the chart page →

3,018
icingawebsvtech-public-helm-charts1.0.01 of 2See more

icingaweb svtech-public-helm-charts 1.0.0

1 of the 2 container images this version deploys carry DLA-4016-1.

Container imageDigestPackageFixed in
svtechnmaa/svtech_icingaweb2:v1.0.2a59d0b81dde2
ucf@3.0043
3.0043+deb11u2

Open the chart page →

2,038
node-redth0ths-helm-charts0.2.11 of 2See more

node-red th0ths-helm-charts 0.2.1

1 of the 2 container images this version deploys carry DLA-4016-1.

Container imageDigestPackageFixed in
th0th/node-red:4.0.3-debiand06fa39f7406
ucf@3.0043
3.0043+deb11u2

Open the chart page →

2,408
thingsboardthingsboardVerified publisher0.1.34 of 12See more

thingsboard thingsboard 0.1.3

4 of the 12 container images this version deploys carry DLA-4016-1.

Container imageDigestPackageFixed in
thingsboard/tb-coap-transport:3.4.1bd45a09d85d9
ucf@3.0043
3.0043+deb11u2
thingsboard/tb-http-transport:3.4.1a06f53c5e2da
ucf@3.0043
3.0043+deb11u2
thingsboard/tb-mqtt-transport:3.4.1030f316ce301
ucf@3.0043
3.0043+deb11u2
thingsboard/tb-node:3.4.1645f43b688f7
ucf@3.0043
3.0043+deb11u2

Open the chart page →

25,394
vinyl-lib-chartvinyl-libVerified publisher0.1.01 of 1See more

vinyl-lib-chart vinyl-lib 0.1.0

1 of the 1 container images this version deploys carry DLA-4016-1.

Container imageDigestPackageFixed in
kporwit/vinyl_lib_app:v0.1.1217de0302218
ucf@3.0043
3.0043+deb11u2

Open the chart page →

3,392
apiwbstack0.36.01 of 1See more

api wbstack 0.36.0

1 of the 1 container images this version deploys carry DLA-4016-1.

Container imageDigestPackageFixed in
ghcr.io/wbstack/api:8x.9.11eee94f9f7a53
ucf@3.0043
3.0043+deb11u2

Open the chart page →

2,019
mediawikiwbstack0.14.01 of 1See more

mediawiki wbstack 0.14.0

1 of the 1 container images this version deploys carry DLA-4016-1.

Container imageDigestPackageFixed in
ghcr.io/wbstack/mediawiki:1.37-7.4-20220621-fp-beta-0c3012c8a34b4
ucf@3.0043
3.0043+deb11u2

Open the chart page →

2,132
drillwearefrank1.3.61 of 3See more

drill wearefrank 1.3.6

1 of the 3 container images this version deploys carry DLA-4016-1.

Container imageDigestPackageFixed in
apache/drill:1.21.11f96558fd292
ucf@3.0043
3.0043+deb11u2

Open the chart page →

9,397
webresourcecataloguswebresourcecatalogus1.1.01 of 4See more

webresourcecatalogus webresourcecatalogus 1.1.0

1 of the 4 container images this version deploys carry DLA-4016-1.

Container imageDigestPackageFixed in
ghcr.io/conductionnl/webresourcecatalogus-nginx:latest6de60c83128d
ucf@3.0043
3.0043+deb11u2

Open the chart page →

7,552
wp-gats-helmwordpress-gatsby0.0.11 of 3See more

wp-gats-helm wordpress-gatsby 0.0.1

1 of the 3 container images this version deploys carry DLA-4016-1.

Container imageDigestPackageFixed in
library/wordpress:6.0.0-php8.0-apache277c6c25980f
ucf@3.0043
3.0043+deb11u2

Open the chart page →

2,021
enterprise-gatewayzeet3.2.21 of 2See more

enterprise-gateway zeet 3.2.2

1 of the 2 container images this version deploys carry DLA-4016-1.

Container imageDigestPackageFixed in
elyra/kernel-image-puller:3.2.2c922f1f1646a
ucf@3.0043
3.0043+deb11u2

Open the chart page →

1,838

Container images carrying it

182 by charts deploying them

A fixed version is listed for 1 of the 1 affected package.

Container imageDigestPackageFixed inUsed by
remche/shinyproxy:2.6.18bcda8a04d3b
ucf@3.0043
3.0043+deb11u2
1
robmarkcole/deepstack-ui:latest410275726459
ucf@3.0043
3.0043+deb11u2
1
robotshop/rs-dispatch:latestde81f1d07b02
ucf@3.0043
3.0043+deb11u2
1
robotshop/rs-payment:latest774b52c6180d
ucf@3.0043
3.0043+deb11u2
1
robotshop/rs-shipping:latest89753ab48919
ucf@3.0043
3.0043+deb11u2
1
roundcube/roundcubemail:1.5.3-apachea8ea6fd751dc
ucf@3.0043
3.0043+deb11u2
1
salehmir/jesse:1.10.101afa95f979e9
ucf@3.0043
3.0043+deb11u2
1
seataio/seata-server:latest703b5de7f1a6
ucf@3.0043
3.0043+deb11u2
1
simpleidserver/faaswebsite:0.0.4367218ae760f
ucf@3.0043
3.0043+deb11u2
1
socialmediamacroscope/classification_predict:0.1.24fb86885d64d
ucf@3.0043
3.0043+deb11u2
1
socialmediamacroscope/classification_split:0.1.24bfda60829fe
ucf@3.0043
3.0043+deb11u2
1
socialmediamacroscope/classification_train:0.1.207477060bba8
ucf@3.0043
3.0043+deb11u2
1
socialmediamacroscope/clowder_create_collection:0.1.0c969f7677983
ucf@3.0043
3.0043+deb11u2
1
socialmediamacroscope/clowder_create_dataset:0.1.09b4211832429
ucf@3.0043
3.0043+deb11u2
1
socialmediamacroscope/clowder_create_space:0.1.0999f2ff2c128
ucf@3.0043
3.0043+deb11u2
1
socialmediamacroscope/clowder_list:0.1.051cb17626519
ucf@3.0043
3.0043+deb11u2
1
socialmediamacroscope/clowder_upload_file:0.1.274e35f64db68
ucf@3.0043
3.0043+deb11u2
1
socialmediamacroscope/screen_name_prompt:0.1.2724f3f5702e0
ucf@3.0043
3.0043+deb11u2
1
speckle/speckle-frontend:2.18.11-branch.testing2.88634-335d46982c052441110
ucf@3.0043
3.0043+deb11u2
1
speckle/speckle-frontend:2.18.12-branch.testing3.88744-f55b341d5f689c9256c
ucf@3.0043
3.0043+deb11u2
1
speckle/speckle-frontend:2.17.14-branch.testing.72707.921a5f8d9b58995a8b8
ucf@3.0043
3.0043+deb11u2
1
stratospire/activityrelay:0.2.3a4c34cb01117
ucf@3.0043
3.0043+deb11u2
1
svtechnmaa/svtech_icingaweb2:v1.0.2a59d0b81dde2
ucf@3.0043
3.0043+deb11u2
1
swisscomcloud/esc-vm-scheduler-web:latestb6639d1a922e
ucf@3.0043
3.0043+deb11u2
1
tachyongroup/mlflow-deployment-controller-ui:mlflow-controller-0.1.8f4f7fabe1037
ucf@3.0043
3.0043+deb11u2
1
th0th/node-red:4.0.3-debiand06fa39f7406
ucf@3.0043
3.0043+deb11u2
1
thingsboard/tb-coap-transport:3.4.1bd45a09d85d9
ucf@3.0043
3.0043+deb11u2
1
thingsboard/tb-http-transport:3.4.1a06f53c5e2da
ucf@3.0043
3.0043+deb11u2
1
thingsboard/tb-mqtt-transport:3.4.1030f316ce301
ucf@3.0043
3.0043+deb11u2
1
thingsboard/tb-node:3.4.1645f43b688f7
ucf@3.0043
3.0043+deb11u2
1
thingsboard/tb-node:3.6.0f40a542832c4
ucf@3.0043
3.0043+deb11u2
1
tksky1/cubeuniverse:0.1alphaec7b889f380f
ucf@3.0043
3.0043+deb11u2
1
torrespro/mca-worker:2.0.06d3bd305a1ba
ucf@3.0043
3.0043+deb11u2
1
vlebediantsev/config-server-another:lateste7f20450d2ae
ucf@3.0043
3.0043+deb11u2
1
vlebediantsev/file-system-ms-final:latest10393a89b4a8
ucf@3.0043
3.0043+deb11u2
1
vlebediantsev/logic-ms:latestdf8bf38c535b
ucf@3.0043
3.0043+deb11u2
1
vlebediantsev/registration-ms-final:latest427af418b75e
ucf@3.0043
3.0043+deb11u2
1
vlebediantsev/user-data-ms-final-final:latest9319437f3c8f
ucf@3.0043
3.0043+deb11u2
1
youssef11gaber10/deployment-ui-react:latestba6853e35c60
ucf@3.0043
3.0043+deb11u2
1
zbalogh/reservation-api-server:1.0.97c247e399a1f
ucf@3.0043
3.0043+deb11u2
1
gcr.io/ml-pipeline/metadata-writer:2.0.0-alpha.5ec3ae9f6df47
ucf@3.0043
3.0043+deb11u2
1
ghcr.io/0xemma/reddark:main2a115e991894
ucf@3.0043
3.0043+deb11u2
1
ghcr.io/appuio/cloud-portal:v0.2.18c7e08d32d70
ucf@3.0043
3.0043+deb11u2
1
ghcr.io/cloudnative-pg/postgresql:14.5b3b30d04b362
ucf@3.0043
3.0043+deb11u2
1
ghcr.io/codingducksrl/wordpress:6.0.23113c0960507
ucf@3.0043
3.0043+deb11u2
1
ghcr.io/conductionnl/berichtservice-nginx:latest833d26df3840
ucf@3.0043
3.0043+deb11u2
1
ghcr.io/conductionnl/contactcatalogus-nginx:latest480c84fa9e63
ucf@3.0043
3.0043+deb11u2
1
ghcr.io/conductionnl/digispoof-interface-nginx:latest8fa4597217a4
ucf@3.0043
3.0043+deb11u2
1
ghcr.io/conductionnl/eav-component-nginx:latestd785c893096c
ucf@3.0043
3.0043+deb11u2
1
ghcr.io/conductionnl/education-component-nginx:latest38900bc76ee0
ucf@3.0043
3.0043+deb11u2
1

syft 1.42.1 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.