StackRadar

DLA-4016-1

Unscored

Advisory

Published 16 Jan 2025In the index since 5 Sept 2026
Severity
Unscored
worst across findings
CVSS
—
base score, highest
EPSS
—
probability of exploitation
CISA KEV
Not listed
no confirmed exploitation
Charts affected
174
of 17,781 indexed, latest versions
Container images
182
deployed by those charts
Fix available
1 of 1
affected package

ucf - security update

Carried by container images the latest versions of 174 of 17,781 indexed charts deploy, on 182 images.

Affected packageAffected versionsFixed inImages
ucfdeb3.00433.0043+deb11u2182
OSV records
DLA-4016-1

Charts affected

174 by stars
ChartLatestAffected imagesRadar Score
imgproxyrock8sVerified publisher0.8.301 of 1See more

imgproxy rock8s 0.8.30

1 of the 1 container images this version deploys carry DLA-4016-1.

Container imageDigestPackageFixed in
darthsim/imgproxy:v3.15.040f6eb807444
ucf@3.0043
3.0043+deb11u2

Open the chart page →

2,022
syncstorageschichtelVerified publisher0.1.11 of 1See more

syncstorage schichtel 0.1.1

1 of the 1 container images this version deploys carry DLA-4016-1.

Container imageDigestPackageFixed in
mozilla/syncstorage-rs:0.15.893752877dced
ucf@3.0043
3.0043+deb11u2

Open the chart page →

1,318
unifi-protectschichtelVerified publisher0.10.11 of 1See more

unifi-protect schichtel 0.10.1

1 of the 1 container images this version deploys carry DLA-4016-1.

Container imageDigestPackageFixed in
markdegroot/unifi-protect-arm64:latestd8445f2a0de6
ucf@3.0043
3.0043+deb11u2

Open the chart page →

5,582
searchpesearchpe4.1.01 of 2See more

searchpe searchpe 4.1.0

1 of the 2 container images this version deploys carry DLA-4016-1.

Container imageDigestPackageFixed in
library/postgres:13.703652c675ae1
ucf@3.0043
3.0043+deb11u2

Open the chart page →

2,637
seataseataVerified publisher0.1.01 of 1See more

seata seata 0.1.0

1 of the 1 container images this version deploys carry DLA-4016-1.

Container imageDigestPackageFixed in
seataio/seata-server:latest703b5de7f1a6
ucf@3.0043
3.0043+deb11u2

Open the chart page →

4,245
skeleton-pipskeleton-pip0.1.01 of 1See more

skeleton-pip skeleton-pip 0.1.0

1 of the 1 container images this version deploys carry DLA-4016-1.

Container imageDigestPackageFixed in
ghcr.io/conductionnl/skeleton-pip:devce1ebe9387a2
ucf@3.0043
3.0043+deb11u2

Open the chart page →

1,126
marge-botslamdev0.0.11 of 1See more

marge-bot slamdev 0.0.1

1 of the 1 container images this version deploys carry DLA-4016-1.

Container imageDigestPackageFixed in
hiboxsystems/marge-bot:0.11.07235809b43b3
ucf@3.0043
3.0043+deb11u2

Open the chart page →

1,426
sneakerssneakers1.0.01 of 4See more

sneakers sneakers 1.0.0

1 of the 4 container images this version deploys carry DLA-4016-1.

Container imageDigestPackageFixed in
helga09/shoes_ukr:v1.1.17999bc8b77c0
ucf@3.0043
3.0043+deb11u2

Open the chart page →

7,574
speckle-server-branch-testingspeckleVerified publisher2.17.14-branch.testing.72707.921a5f81 of 5See more

speckle-server-branch-testing speckle 2.17.14-branch.testing.72707.921a5f8

1 of the 5 container images this version deploys carry DLA-4016-1.

Container imageDigestPackageFixed in
speckle/speckle-frontend:2.17.14-branch.testing.72707.921a5f8d9b58995a8b8
ucf@3.0043
3.0043+deb11u2

Open the chart page →

14,679
speckle-server-branch-testing2speckleVerified publisher2.18.11-branch.testing2.88634-335d4691 of 5See more

speckle-server-branch-testing2 speckle 2.18.11-branch.testing2.88634-335d469

1 of the 5 container images this version deploys carry DLA-4016-1.

Container imageDigestPackageFixed in
speckle/speckle-frontend:2.18.11-branch.testing2.88634-335d46982c052441110
ucf@3.0043
3.0043+deb11u2

Open the chart page →

14,221
speckle-server-branch-testing3speckleVerified publisher2.18.12-branch.testing3.88744-f55b3411 of 5See more

speckle-server-branch-testing3 speckle 2.18.12-branch.testing3.88744-f55b341

1 of the 5 container images this version deploys carry DLA-4016-1.

Container imageDigestPackageFixed in
speckle/speckle-frontend:2.18.12-branch.testing3.88744-f55b341d5f689c9256c
ucf@3.0043
3.0043+deb11u2

Open the chart page →

14,221
fdi-dotstatsuite-sfs-solrstatcan1.0.21 of 4See more

fdi-dotstatsuite-sfs-solr statcan 1.0.2

1 of the 4 container images this version deploys carry DLA-4016-1.

Container imageDigestPackageFixed in
library/solr:8.11.18c5f7881cebb
ucf@3.0043
3.0043+deb11u2

Open the chart page →

6,065
solrstatcan1.5.101 of 3See more

solr statcan 1.5.10

1 of the 3 container images this version deploys carry DLA-4016-1.

Container imageDigestPackageFixed in
library/solr:8.11.18c5f7881cebb
ucf@3.0043
3.0043+deb11u2

Open the chart page →

8,806
student-producerstudentproducerVerified publisher2.0.01 of 1See more

student-producer studentproducer 2.0.0

1 of the 1 container images this version deploys carry DLA-4016-1.

Container imageDigestPackageFixed in
aroralalit/student-producer:1.0.02a094f597b36
ucf@3.0043
3.0043+deb11u2

Open the chart page →

3,018
icingawebsvtech-public-helm-charts1.0.01 of 2See more

icingaweb svtech-public-helm-charts 1.0.0

1 of the 2 container images this version deploys carry DLA-4016-1.

Container imageDigestPackageFixed in
svtechnmaa/svtech_icingaweb2:v1.0.2a59d0b81dde2
ucf@3.0043
3.0043+deb11u2

Open the chart page →

2,038
node-redth0ths-helm-charts0.2.11 of 2See more

node-red th0ths-helm-charts 0.2.1

1 of the 2 container images this version deploys carry DLA-4016-1.

Container imageDigestPackageFixed in
th0th/node-red:4.0.3-debiand06fa39f7406
ucf@3.0043
3.0043+deb11u2

Open the chart page →

2,408
thingsboardthingsboardVerified publisher0.1.34 of 12See more

thingsboard thingsboard 0.1.3

4 of the 12 container images this version deploys carry DLA-4016-1.

Container imageDigestPackageFixed in
thingsboard/tb-coap-transport:3.4.1bd45a09d85d9
ucf@3.0043
3.0043+deb11u2
thingsboard/tb-http-transport:3.4.1a06f53c5e2da
ucf@3.0043
3.0043+deb11u2
thingsboard/tb-mqtt-transport:3.4.1030f316ce301
ucf@3.0043
3.0043+deb11u2
thingsboard/tb-node:3.4.1645f43b688f7
ucf@3.0043
3.0043+deb11u2

Open the chart page →

25,394
vinyl-lib-chartvinyl-libVerified publisher0.1.01 of 1See more

vinyl-lib-chart vinyl-lib 0.1.0

1 of the 1 container images this version deploys carry DLA-4016-1.

Container imageDigestPackageFixed in
kporwit/vinyl_lib_app:v0.1.1217de0302218
ucf@3.0043
3.0043+deb11u2

Open the chart page →

3,392
apiwbstack0.36.01 of 1See more

api wbstack 0.36.0

1 of the 1 container images this version deploys carry DLA-4016-1.

Container imageDigestPackageFixed in
ghcr.io/wbstack/api:8x.9.11eee94f9f7a53
ucf@3.0043
3.0043+deb11u2

Open the chart page →

2,019
mediawikiwbstack0.14.01 of 1See more

mediawiki wbstack 0.14.0

1 of the 1 container images this version deploys carry DLA-4016-1.

Container imageDigestPackageFixed in
ghcr.io/wbstack/mediawiki:1.37-7.4-20220621-fp-beta-0c3012c8a34b4
ucf@3.0043
3.0043+deb11u2

Open the chart page →

2,132
drillwearefrank1.3.61 of 3See more

drill wearefrank 1.3.6

1 of the 3 container images this version deploys carry DLA-4016-1.

Container imageDigestPackageFixed in
apache/drill:1.21.11f96558fd292
ucf@3.0043
3.0043+deb11u2

Open the chart page →

9,397
webresourcecataloguswebresourcecatalogus1.1.01 of 4See more

webresourcecatalogus webresourcecatalogus 1.1.0

1 of the 4 container images this version deploys carry DLA-4016-1.

Container imageDigestPackageFixed in
ghcr.io/conductionnl/webresourcecatalogus-nginx:latest6de60c83128d
ucf@3.0043
3.0043+deb11u2

Open the chart page →

7,552
wp-gats-helmwordpress-gatsby0.0.11 of 3See more

wp-gats-helm wordpress-gatsby 0.0.1

1 of the 3 container images this version deploys carry DLA-4016-1.

Container imageDigestPackageFixed in
library/wordpress:6.0.0-php8.0-apache277c6c25980f
ucf@3.0043
3.0043+deb11u2

Open the chart page →

2,021
enterprise-gatewayzeet3.2.21 of 2See more

enterprise-gateway zeet 3.2.2

1 of the 2 container images this version deploys carry DLA-4016-1.

Container imageDigestPackageFixed in
elyra/kernel-image-puller:3.2.2c922f1f1646a
ucf@3.0043
3.0043+deb11u2

Open the chart page →

1,838

Container images carrying it

182 by charts deploying them

A fixed version is listed for 1 of the 1 affected package.

Container imageDigestPackageFixed inUsed by
ghcr.io/conductionnl/medewerkercatalogus-nginx:latest06c3b27462e6
ucf@3.0043
3.0043+deb11u2
1
ghcr.io/conductionnl/skeleton-pip:devce1ebe9387a2
ucf@3.0043
3.0043+deb11u2
1
ghcr.io/conductionnl/user-component-nginx:latestb721579df8c3
ucf@3.0043
3.0043+deb11u2
1
ghcr.io/conductionnl/waardepapieren-nginx:latestaf31cf6cd59f
ucf@3.0043
3.0043+deb11u2
1
ghcr.io/conductionnl/webresourcecatalogus-nginx:latest6de60c83128d
ucf@3.0043
3.0043+deb11u2
1
ghcr.io/flaresolverr/flaresolverr:v3.3.16088412db1051
ucf@3.0043
3.0043+deb11u2
1
ghcr.io/flaresolverr/flaresolverr:v3.3.21f104ee51e512
ucf@3.0043
3.0043+deb11u2
1
ghcr.io/fleeksoft/hbase/hdfs:3.3.3.2ac62269785ac
ucf@3.0043
3.0043+deb11u2
1
ghcr.io/g0dscookie/aptly:latestedd095d3c0ee
ucf@3.0043
3.0043+deb11u2
1
ghcr.io/g0dscookie/icinga2:2.13.5da81246ccfc9
ucf@3.0043
3.0043+deb11u2
1
ghcr.io/k10app/frontend:latest066b5ac6b119
ucf@3.0043
3.0043+deb11u2
1
ghcr.io/k10app/staticcache:lateste77805689a8e
ucf@3.0043
3.0043+deb11u2
1
ghcr.io/k8s-at-home/theme-park:v1.7.3f8a5ec8f4669
ucf@3.0043
3.0043+deb11u2
1
ghcr.io/leoquote/tinyproxy_exporter:master6b4103d88dbb
ucf@3.0043
3.0043+deb11u2
1
ghcr.io/lsst-sqre/strimzi-registry-operator:0.6.07e25f7048aff
ucf@3.0043
3.0043+deb11u2
1
ghcr.io/mastodon/mastodon:v4.1.26b18e6d0eda4
ucf@3.0043
3.0043+deb11u2
1
ghcr.io/mroxso/pollstr:latest0b4f97faa3d0
ucf@3.0043
3.0043+deb11u2
1
ghcr.io/nathanvaughn/webtrees:2.0.1969423a100fab
ucf@3.0043
3.0043+deb11u2
1
ghcr.io/paperless-ngx/paperless-ngx:1.8.09bbc9a90641e
ucf@3.0043
3.0043+deb11u2
1
ghcr.io/privacyengineering/hawk-monitor:master13309f068a56
ucf@3.0043
3.0043+deb11u2
1
ghcr.io/remla23-team17/app:1.0.05816dbddf47d
ucf@3.0043
3.0043+deb11u2
1
ghcr.io/remla23-team17/model-service:1.0.0aa59fe2c4f6a
ucf@3.0043
3.0043+deb11u2
1
ghcr.io/rivals-space/rivals-mastodon:1.6.143b23d55e4be
ucf@3.0043
3.0043+deb11u2
1
ghcr.io/rodg/nodecg-base:latest31be4bf87070
ucf@3.0043
3.0043+deb11u2
1
ghcr.io/savonet/liquidsoap:v2.0.19e08148e1055
ucf@3.0043
3.0043+deb11u2
1
ghcr.io/wbstack/api:8x.9.11eee94f9f7a53
ucf@3.0043
3.0043+deb11u2
1
ghcr.io/wbstack/mediawiki:1.37-7.4-20220621-fp-beta-0c3012c8a34b4
ucf@3.0043
3.0043+deb11u2
1
public.ecr.aws/jtekt-corporation/annotation-tool:ef974ad9abd817eb6845
ucf@3.0043
3.0043+deb11u2
1
public.ecr.aws/jtekt-corporation/polygonal-annotation-tool:a3fa936056efd38500d6
ucf@3.0043
3.0043+deb11u2
1
quay.io/bentoml/yatai:0.4.614b482c1f1b8
ucf@3.0043
3.0043+deb11u2
1
quay.io/snowdrop/spring-boot-rest-http-example:2.7b1a054613715
ucf@3.0043
3.0043+deb11u2
1
registry.gitlab.com/vicamo/docker-sshd/sshd:3.0-stable22c33d693fe2
ucf@3.0043
3.0043+deb11u2
1

syft 1.42.1 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.