StackRadar

DLA-4016-1

Unscored

Advisory

Published 16 Jan 2025In the index since 5 Sept 2026
Severity
Unscored
worst across findings
CVSS
base score, highest
EPSS
probability of exploitation
CISA KEV
Not listed
no confirmed exploitation
Charts affected
174
of 17,781 indexed, latest versions
Container images
182
deployed by those charts
Fix available
1 of 1
affected package

ucf - security update

Carried by container images the latest versions of 174 of 17,781 indexed charts deploy, on 182 images.

Affected packageAffected versionsFixed inImages
ucfdeb3.00433.0043+deb11u2182
OSV records
DLA-4016-1

Charts affected

174 by stars
ChartLatestAffected imagesRadar Score
imgproxyrock8sVerified publisher0.8.301 of 1See more

imgproxy rock8s 0.8.30

1 of the 1 container images this version deploys carry DLA-4016-1.

Container imageDigestPackageFixed in
darthsim/imgproxy:v3.15.040f6eb807444
ucf@3.0043
3.0043+deb11u2

Open the chart page →

2,022
syncstorageschichtelVerified publisher0.1.11 of 1See more

syncstorage schichtel 0.1.1

1 of the 1 container images this version deploys carry DLA-4016-1.

Container imageDigestPackageFixed in
mozilla/syncstorage-rs:0.15.893752877dced
ucf@3.0043
3.0043+deb11u2

Open the chart page →

1,318
unifi-protectschichtelVerified publisher0.10.11 of 1See more

unifi-protect schichtel 0.10.1

1 of the 1 container images this version deploys carry DLA-4016-1.

Container imageDigestPackageFixed in
markdegroot/unifi-protect-arm64:latestd8445f2a0de6
ucf@3.0043
3.0043+deb11u2

Open the chart page →

5,582
searchpesearchpe4.1.01 of 2See more

searchpe searchpe 4.1.0

1 of the 2 container images this version deploys carry DLA-4016-1.

Container imageDigestPackageFixed in
library/postgres:13.703652c675ae1
ucf@3.0043
3.0043+deb11u2

Open the chart page →

2,637
seataseataVerified publisher0.1.01 of 1See more

seata seata 0.1.0

1 of the 1 container images this version deploys carry DLA-4016-1.

Container imageDigestPackageFixed in
seataio/seata-server:latest703b5de7f1a6
ucf@3.0043
3.0043+deb11u2

Open the chart page →

4,245
skeleton-pipskeleton-pip0.1.01 of 1See more

skeleton-pip skeleton-pip 0.1.0

1 of the 1 container images this version deploys carry DLA-4016-1.

Container imageDigestPackageFixed in
ghcr.io/conductionnl/skeleton-pip:devce1ebe9387a2
ucf@3.0043
3.0043+deb11u2

Open the chart page →

1,126
marge-botslamdev0.0.11 of 1See more

marge-bot slamdev 0.0.1

1 of the 1 container images this version deploys carry DLA-4016-1.

Container imageDigestPackageFixed in
hiboxsystems/marge-bot:0.11.07235809b43b3
ucf@3.0043
3.0043+deb11u2

Open the chart page →

1,426
sneakerssneakers1.0.01 of 4See more

sneakers sneakers 1.0.0

1 of the 4 container images this version deploys carry DLA-4016-1.

Container imageDigestPackageFixed in
helga09/shoes_ukr:v1.1.17999bc8b77c0
ucf@3.0043
3.0043+deb11u2

Open the chart page →

7,574
speckle-server-branch-testingspeckleVerified publisher2.17.14-branch.testing.72707.921a5f81 of 5See more

speckle-server-branch-testing speckle 2.17.14-branch.testing.72707.921a5f8

1 of the 5 container images this version deploys carry DLA-4016-1.

Container imageDigestPackageFixed in
speckle/speckle-frontend:2.17.14-branch.testing.72707.921a5f8d9b58995a8b8
ucf@3.0043
3.0043+deb11u2

Open the chart page →

14,679
speckle-server-branch-testing2speckleVerified publisher2.18.11-branch.testing2.88634-335d4691 of 5See more

speckle-server-branch-testing2 speckle 2.18.11-branch.testing2.88634-335d469

1 of the 5 container images this version deploys carry DLA-4016-1.

Container imageDigestPackageFixed in
speckle/speckle-frontend:2.18.11-branch.testing2.88634-335d46982c052441110
ucf@3.0043
3.0043+deb11u2

Open the chart page →

14,221
speckle-server-branch-testing3speckleVerified publisher2.18.12-branch.testing3.88744-f55b3411 of 5See more

speckle-server-branch-testing3 speckle 2.18.12-branch.testing3.88744-f55b341

1 of the 5 container images this version deploys carry DLA-4016-1.

Container imageDigestPackageFixed in
speckle/speckle-frontend:2.18.12-branch.testing3.88744-f55b341d5f689c9256c
ucf@3.0043
3.0043+deb11u2

Open the chart page →

14,221
fdi-dotstatsuite-sfs-solrstatcan1.0.21 of 4See more

fdi-dotstatsuite-sfs-solr statcan 1.0.2

1 of the 4 container images this version deploys carry DLA-4016-1.

Container imageDigestPackageFixed in
library/solr:8.11.18c5f7881cebb
ucf@3.0043
3.0043+deb11u2

Open the chart page →

6,065
solrstatcan1.5.101 of 3See more

solr statcan 1.5.10

1 of the 3 container images this version deploys carry DLA-4016-1.

Container imageDigestPackageFixed in
library/solr:8.11.18c5f7881cebb
ucf@3.0043
3.0043+deb11u2

Open the chart page →

8,806
student-producerstudentproducerVerified publisher2.0.01 of 1See more

student-producer studentproducer 2.0.0

1 of the 1 container images this version deploys carry DLA-4016-1.

Container imageDigestPackageFixed in
aroralalit/student-producer:1.0.02a094f597b36
ucf@3.0043
3.0043+deb11u2

Open the chart page →

3,018
icingawebsvtech-public-helm-charts1.0.01 of 2See more

icingaweb svtech-public-helm-charts 1.0.0

1 of the 2 container images this version deploys carry DLA-4016-1.

Container imageDigestPackageFixed in
svtechnmaa/svtech_icingaweb2:v1.0.2a59d0b81dde2
ucf@3.0043
3.0043+deb11u2

Open the chart page →

2,038
node-redth0ths-helm-charts0.2.11 of 2See more

node-red th0ths-helm-charts 0.2.1

1 of the 2 container images this version deploys carry DLA-4016-1.

Container imageDigestPackageFixed in
th0th/node-red:4.0.3-debiand06fa39f7406
ucf@3.0043
3.0043+deb11u2

Open the chart page →

2,408
thingsboardthingsboardVerified publisher0.1.34 of 12See more

thingsboard thingsboard 0.1.3

4 of the 12 container images this version deploys carry DLA-4016-1.

Container imageDigestPackageFixed in
thingsboard/tb-coap-transport:3.4.1bd45a09d85d9
ucf@3.0043
3.0043+deb11u2
thingsboard/tb-http-transport:3.4.1a06f53c5e2da
ucf@3.0043
3.0043+deb11u2
thingsboard/tb-mqtt-transport:3.4.1030f316ce301
ucf@3.0043
3.0043+deb11u2
thingsboard/tb-node:3.4.1645f43b688f7
ucf@3.0043
3.0043+deb11u2

Open the chart page →

25,394
vinyl-lib-chartvinyl-libVerified publisher0.1.01 of 1See more

vinyl-lib-chart vinyl-lib 0.1.0

1 of the 1 container images this version deploys carry DLA-4016-1.

Container imageDigestPackageFixed in
kporwit/vinyl_lib_app:v0.1.1217de0302218
ucf@3.0043
3.0043+deb11u2

Open the chart page →

3,392
apiwbstack0.36.01 of 1See more

api wbstack 0.36.0

1 of the 1 container images this version deploys carry DLA-4016-1.

Container imageDigestPackageFixed in
ghcr.io/wbstack/api:8x.9.11eee94f9f7a53
ucf@3.0043
3.0043+deb11u2

Open the chart page →

2,019
mediawikiwbstack0.14.01 of 1See more

mediawiki wbstack 0.14.0

1 of the 1 container images this version deploys carry DLA-4016-1.

Container imageDigestPackageFixed in
ghcr.io/wbstack/mediawiki:1.37-7.4-20220621-fp-beta-0c3012c8a34b4
ucf@3.0043
3.0043+deb11u2

Open the chart page →

2,132
drillwearefrank1.3.61 of 3See more

drill wearefrank 1.3.6

1 of the 3 container images this version deploys carry DLA-4016-1.

Container imageDigestPackageFixed in
apache/drill:1.21.11f96558fd292
ucf@3.0043
3.0043+deb11u2

Open the chart page →

9,397
webresourcecataloguswebresourcecatalogus1.1.01 of 4See more

webresourcecatalogus webresourcecatalogus 1.1.0

1 of the 4 container images this version deploys carry DLA-4016-1.

Container imageDigestPackageFixed in
ghcr.io/conductionnl/webresourcecatalogus-nginx:latest6de60c83128d
ucf@3.0043
3.0043+deb11u2

Open the chart page →

7,552
wp-gats-helmwordpress-gatsby0.0.11 of 3See more

wp-gats-helm wordpress-gatsby 0.0.1

1 of the 3 container images this version deploys carry DLA-4016-1.

Container imageDigestPackageFixed in
library/wordpress:6.0.0-php8.0-apache277c6c25980f
ucf@3.0043
3.0043+deb11u2

Open the chart page →

2,021
enterprise-gatewayzeet3.2.21 of 2See more

enterprise-gateway zeet 3.2.2

1 of the 2 container images this version deploys carry DLA-4016-1.

Container imageDigestPackageFixed in
elyra/kernel-image-puller:3.2.2c922f1f1646a
ucf@3.0043
3.0043+deb11u2

Open the chart page →

1,838

Container images carrying it

182 by charts deploying them

A fixed version is listed for 1 of the 1 affected package.

Container imageDigestPackageFixed inUsed by
library/nginx:1.21:1.21.62bcabc23b454
ucf@3.0043
3.0043+deb11u2
6
library/postgres:14.13162a6ead070
ucf@3.0043
3.0043+deb11u2
3
library/solr:8.11.18c5f7881cebb
ucf@3.0043
3.0043+deb11u2
3
ldapaccountmanager/lam:8.0.1d46cf25d1dda
ucf@3.0043
3.0043+deb11u2
2
library/adminer:4.8.1-standalone34d37131366c
ucf@3.0043
3.0043+deb11u2
2
library/nginx:1.24.0f6daac2445b0
ucf@3.0043
3.0043+deb11u2
2
passbolt/passbolt:3.4.0-ce-non-root655547e17263
ucf@3.0043
3.0043+deb11u2
2
pecan/bety:5.4.1f825d480cd62
ucf@3.0043
3.0043+deb11u2
2
postgis/postgis:15-3.3a2fc46b52819
ucf@3.0043
3.0043+deb11u2
2
scorpiobroker/scorpio:config-server_1.1.0c46c1517e523
ucf@3.0043
3.0043+deb11u2
2
yzhou442/equiz:latesta3f7ca69e28d
ucf@3.0043
3.0043+deb11u2
2
activepieces/activepieces:0.23.0c26188b44e62
ucf@3.0043
3.0043+deb11u2
1
aidasi/swpapi:v1-1-net6-k8s-test-beta838b5e2080bc
ucf@3.0043
3.0043+deb11u2
1
aidasi/swpspa:v1-1-net6-k8s-test-betadee4ec566312
ucf@3.0043
3.0043+deb11u2
1
allegroai/clearml-serving-inference:1.3.0fca885e8cfc6
ucf@3.0043
3.0043+deb11u2
1
allegroai/clearml-serving-statistics:1.3.0c58d9da7bdf8
ucf@3.0043
3.0043+deb11u2
1
andreacioni/kube-workload-restarter:0.0.242938b310090a
ucf@3.0043
3.0043+deb11u2
1
andrianrf/bpjstk-service:latest46abe878d9d8
ucf@3.0043
3.0043+deb11u2
1
andrianrf/bpjstk-simulator:latestb63fdb51d39d
ucf@3.0043
3.0043+deb11u2
1
andrianrf/iso-client:latestba560086ce15
ucf@3.0043
3.0043+deb11u2
1
apache/drill:1.21.11f96558fd292
ucf@3.0043
3.0043+deb11u2
1
apache/superset:9cdaa280429ec297db16d56c94fd77b5d2aff107975ab033580d
ucf@3.0043
3.0043+deb11u2
1
archish27/python-fastapi-postgres:latest6610071a2101
ucf@3.0043
3.0043+deb11u2
1
aroralalit/student-producer:1.0.02a094f597b36
ucf@3.0043
3.0043+deb11u2
1
assistiot/cybersecurity-monitoring_ir-thv:latestc8b6c7eaa0cd
ucf@3.0043
3.0043+deb11u2
1
assistiot/resource-provisioning_prc:1.0.08b5d118bdf0e
ucf@3.0043
3.0043+deb11u2
1
atmoz/sftp:latest0960390462a4
ucf@3.0043
3.0043+deb11u2
1
atomix/atomix:3.1.127738ff4f5c63
ucf@3.0043
3.0043+deb11u2
1
azhar008/flaskapplication:latesta1e827b0adea
ucf@3.0043
3.0043+deb11u2
1
buntha/mlflow:2.1.1154542cc3083
ucf@3.0043
3.0043+deb11u2
1
calltelemetry/web:0.6.7457a7e353542
ucf@3.0043
3.0043+deb11u2
1
camerahub/camerahub:0.36.23a5af37dd6e1b
ucf@3.0043
3.0043+deb11u2
1
chubaofs/cfs-client:3.2.015ff74209ce7
ucf@3.0043
3.0043+deb11u2
1
chubaofs/cfs-server:3.2.0205030e045f2
ucf@3.0043
3.0043+deb11u2
1
countly/api:25.05.4f4cc7447c4f5
ucf@3.0043
3.0043+deb11u2
1
countly/frontend:25.05.42acbc11499b6
ucf@3.0043
3.0043+deb11u2
1
danuk/k8s-sftp-gcs:latestdd0e6585c44f
ucf@3.0043
3.0043+deb11u2
1
danuk/telegram-sender:0.0.1026560388070
ucf@3.0043
3.0043+deb11u2
1
darkobas/ethexporter:latest62e6464491ba
ucf@3.0043
3.0043+deb11u2
1
darkobas/tokenexporter:latesta0349a0eedf0
ucf@3.0043
3.0043+deb11u2
1
darthsim/imgproxy:v3.15.040f6eb807444
ucf@3.0043
3.0043+deb11u2
1
davidvmar/urjc-davidvmar-worker:1.0.10d221e834a21
ucf@3.0043
3.0043+deb11u2
1
douz/helpdesk:latest4384103d0219
ucf@3.0043
3.0043+deb11u2
1
duck1123/astral:latestf4d5b6526c2a
ucf@3.0043
3.0043+deb11u2
1
duck1123/me.untethr.nostr-relay:0.2.1119fc5d4cbfb
ucf@3.0043
3.0043+deb11u2
1
elyra/kernel-image-puller:3.2.2c922f1f1646a
ucf@3.0043
3.0043+deb11u2
1
emberstack/sftp:5.1.711d81a5df909b
ucf@3.0043
3.0043+deb11u2
1
erlangsolutions/wombatoam:4.1.284680c990147a
ucf@3.0043
3.0043+deb11u2
1
evk02/mlflow:2.2.1ef6ff257ef35
ucf@3.0043
3.0043+deb11u2
1
factly/hunting:0.2.0-stagv1.2ca5bc71d1d5c
ucf@3.0043
3.0043+deb11u2
1

syft 1.42.1 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.