StackRadar

DLA-4026-1

Unscored

Advisory

Published 20 Jan 2025In the index since 6 Sept 2026
Severity
Unscored
worst across findings
CVSS
base score, highest
EPSS
0.022
81st percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
116
of 17,781 indexed, latest versions
Container images
120
deployed by those charts
Fix available
1 of 1
affected package

tiff - security update

Carried by container images the latest versions of 116 of 17,781 indexed charts deploy, on 120 images.

Affected packageAffected versionsFixed inImages
tiffdeb4.2.0-1, 4.2.0-1+deb11u1, 4.2.0-1+deb11u3, 4.2.0-1+deb11u4+1 more4.2.0-1+deb11u6120
OSV records
DLA-4026-1

Charts affected

116 by stars
ChartLatestAffected imagesRadar Score
syncstorageschichtelVerified publisher0.1.11 of 1See more

syncstorage schichtel 0.1.1

1 of the 1 container images this version deploys carry DLA-4026-1.

Container imageDigestPackageFixed in
mozilla/syncstorage-rs:0.15.893752877dced
tiff@4.2.0-1+deb11u5
4.2.0-1+deb11u6

Open the chart page →

1,318
skeleton-pipskeleton-pip0.1.01 of 1See more

skeleton-pip skeleton-pip 0.1.0

1 of the 1 container images this version deploys carry DLA-4026-1.

Container imageDigestPackageFixed in
ghcr.io/conductionnl/skeleton-pip:devce1ebe9387a2
tiff@4.2.0-1+deb11u1
4.2.0-1+deb11u6

Open the chart page →

1,126
marge-botslamdev0.0.11 of 1See more

marge-bot slamdev 0.0.1

1 of the 1 container images this version deploys carry DLA-4026-1.

Container imageDigestPackageFixed in
hiboxsystems/marge-bot:0.11.07235809b43b3
tiff@4.2.0-1+deb11u1
4.2.0-1+deb11u6

Open the chart page →

1,426
frigatesmarthallVerified publisher1.0.61 of 1See more

frigate smarthall 1.0.6

1 of the 1 container images this version deploys carry DLA-4026-1.

Container imageDigestPackageFixed in
ghcr.io/blakeblackshear/frigate:0.12.0c862771e38e8
tiff@4.2.0-1+deb11u4
4.2.0-1+deb11u6

Open the chart page →

2,243
sneakerssneakers1.0.01 of 4See more

sneakers sneakers 1.0.0

1 of the 4 container images this version deploys carry DLA-4026-1.

Container imageDigestPackageFixed in
helga09/shoes_ukr:v1.1.17999bc8b77c0
tiff@4.2.0-1+deb11u4
4.2.0-1+deb11u6

Open the chart page →

7,574
speckle-server-branch-testingspeckleVerified publisher2.17.14-branch.testing.72707.921a5f81 of 5See more

speckle-server-branch-testing speckle 2.17.14-branch.testing.72707.921a5f8

1 of the 5 container images this version deploys carry DLA-4026-1.

Container imageDigestPackageFixed in
speckle/speckle-frontend:2.17.14-branch.testing.72707.921a5f8d9b58995a8b8
tiff@4.2.0-1+deb11u5
4.2.0-1+deb11u6

Open the chart page →

14,679
speckle-server-branch-testing2speckleVerified publisher2.18.11-branch.testing2.88634-335d4691 of 5See more

speckle-server-branch-testing2 speckle 2.18.11-branch.testing2.88634-335d469

1 of the 5 container images this version deploys carry DLA-4026-1.

Container imageDigestPackageFixed in
speckle/speckle-frontend:2.18.11-branch.testing2.88634-335d46982c052441110
tiff@4.2.0-1+deb11u5
4.2.0-1+deb11u6

Open the chart page →

14,221
speckle-server-branch-testing3speckleVerified publisher2.18.12-branch.testing3.88744-f55b3411 of 5See more

speckle-server-branch-testing3 speckle 2.18.12-branch.testing3.88744-f55b341

1 of the 5 container images this version deploys carry DLA-4026-1.

Container imageDigestPackageFixed in
speckle/speckle-frontend:2.18.12-branch.testing3.88744-f55b341d5f689c9256c
tiff@4.2.0-1+deb11u5
4.2.0-1+deb11u6

Open the chart page →

14,221
icingawebsvtech-public-helm-charts1.0.01 of 2See more

icingaweb svtech-public-helm-charts 1.0.0

1 of the 2 container images this version deploys carry DLA-4026-1.

Container imageDigestPackageFixed in
svtechnmaa/svtech_icingaweb2:v1.0.2a59d0b81dde2
tiff@4.2.0-1+deb11u5
4.2.0-1+deb11u6

Open the chart page →

2,038
node-redth0ths-helm-charts0.2.11 of 2See more

node-red th0ths-helm-charts 0.2.1

1 of the 2 container images this version deploys carry DLA-4026-1.

Container imageDigestPackageFixed in
th0th/node-red:4.0.3-debiand06fa39f7406
tiff@4.2.0-1+deb11u5
4.2.0-1+deb11u6

Open the chart page →

2,408
vinyl-lib-chartvinyl-libVerified publisher0.1.01 of 1See more

vinyl-lib-chart vinyl-lib 0.1.0

1 of the 1 container images this version deploys carry DLA-4026-1.

Container imageDigestPackageFixed in
kporwit/vinyl_lib_app:v0.1.1217de0302218
tiff@4.2.0-1+deb11u1
4.2.0-1+deb11u6

Open the chart page →

3,392
apiwbstack0.36.01 of 1See more

api wbstack 0.36.0

1 of the 1 container images this version deploys carry DLA-4026-1.

Container imageDigestPackageFixed in
ghcr.io/wbstack/api:8x.9.11eee94f9f7a53
tiff@4.2.0-1+deb11u1
4.2.0-1+deb11u6

Open the chart page →

2,019
mediawikiwbstack0.14.01 of 1See more

mediawiki wbstack 0.14.0

1 of the 1 container images this version deploys carry DLA-4026-1.

Container imageDigestPackageFixed in
ghcr.io/wbstack/mediawiki:1.37-7.4-20220621-fp-beta-0c3012c8a34b4
tiff@4.2.0-1+deb11u1
4.2.0-1+deb11u6

Open the chart page →

2,132
webresourcecataloguswebresourcecatalogus1.1.01 of 4See more

webresourcecatalogus webresourcecatalogus 1.1.0

1 of the 4 container images this version deploys carry DLA-4026-1.

Container imageDigestPackageFixed in
ghcr.io/conductionnl/webresourcecatalogus-nginx:latest6de60c83128d
tiff@4.2.0-1+deb11u1
4.2.0-1+deb11u6

Open the chart page →

7,552
wp-gats-helmwordpress-gatsby0.0.11 of 3See more

wp-gats-helm wordpress-gatsby 0.0.1

1 of the 3 container images this version deploys carry DLA-4026-1.

Container imageDigestPackageFixed in
library/wordpress:6.0.0-php8.0-apache277c6c25980f
tiff@4.2.0-1+deb11u1
4.2.0-1+deb11u6

Open the chart page →

2,021
enterprise-gatewayzeet3.2.21 of 2See more

enterprise-gateway zeet 3.2.2

1 of the 2 container images this version deploys carry DLA-4026-1.

Container imageDigestPackageFixed in
elyra/kernel-image-puller:3.2.2c922f1f1646a
tiff@4.2.0-1+deb11u4
4.2.0-1+deb11u6

Open the chart page →

1,838

Container images carrying it

120 by charts deploying them

A fixed version is listed for 1 of the 1 affected package.

Container imageDigestPackageFixed inUsed by
moreillon/mqtt-logger-front:50030b8bfc4d12db1d3e
tiff@4.2.0-1+deb11u3
4.2.0-1+deb11u6
1
mozilla/syncstorage-rs:0.15.893752877dced
tiff@4.2.0-1+deb11u5
4.2.0-1+deb11u6
1
nathanielvarona/pritunl-slack-app:0.1.10b746a34e5597
tiff@4.2.0-1+deb11u1
4.2.0-1+deb11u6
1
nrrrus/nginx-test:latest5f55cd4ef557
tiff@4.2.0-1+deb11u1
4.2.0-1+deb11u6
1
openzaak/open-zaak:1.6.02ca2ea6e0ae9
tiff@4.2.0-1+deb11u1
4.2.0-1+deb11u6
1
passbolt/passbolt:3.9.0-2-ce-non-rootec046e112d5c
tiff@4.2.0-1+deb11u3
4.2.0-1+deb11u6
1
penpotapp/frontend:2.2.18974882a0542
tiff@4.2.0-1+deb11u4
4.2.0-1+deb11u6
1
phntom/email-manager:0.1.22d8e2a9f2f085
tiff@4.2.0-1+deb11u3
4.2.0-1+deb11u6
1
phntom/external-dns-host-network:0.0.123adadbac8443
tiff@4.2.0-1+deb11u1
4.2.0-1+deb11u6
1
phntom/mattermost-defaultbackend:6.4.0c318dc90a4bf
tiff@4.2.0-1
4.2.0-1+deb11u6
1
robmarkcole/deepstack-ui:latest410275726459
tiff@4.2.0-1
4.2.0-1+deb11u6
1
robotshop/rs-payment:latest774b52c6180d
tiff@4.2.0-1
4.2.0-1+deb11u6
1
roundcube/roundcubemail:1.5.3-apachea8ea6fd751dc
tiff@4.2.0-1+deb11u1
4.2.0-1+deb11u6
1
salehmir/jesse:1.10.101afa95f979e9
tiff@4.2.0-1+deb11u5
4.2.0-1+deb11u6
1
simpleidserver/faaswebsite:0.0.4367218ae760f
tiff@4.2.0-1
4.2.0-1+deb11u6
1
socialmediamacroscope/classification_predict:0.1.24fb86885d64d
tiff@4.2.0-1+deb11u3
4.2.0-1+deb11u6
1
socialmediamacroscope/classification_split:0.1.24bfda60829fe
tiff@4.2.0-1+deb11u3
4.2.0-1+deb11u6
1
socialmediamacroscope/classification_train:0.1.207477060bba8
tiff@4.2.0-1+deb11u3
4.2.0-1+deb11u6
1
socialmediamacroscope/clowder_create_collection:0.1.0c969f7677983
tiff@4.2.0-1+deb11u4
4.2.0-1+deb11u6
1
socialmediamacroscope/clowder_create_dataset:0.1.09b4211832429
tiff@4.2.0-1+deb11u4
4.2.0-1+deb11u6
1
socialmediamacroscope/clowder_create_space:0.1.0999f2ff2c128
tiff@4.2.0-1+deb11u4
4.2.0-1+deb11u6
1
socialmediamacroscope/clowder_list:0.1.051cb17626519
tiff@4.2.0-1+deb11u4
4.2.0-1+deb11u6
1
socialmediamacroscope/clowder_upload_file:0.1.274e35f64db68
tiff@4.2.0-1+deb11u4
4.2.0-1+deb11u6
1
socialmediamacroscope/screen_name_prompt:0.1.2724f3f5702e0
tiff@4.2.0-1+deb11u3
4.2.0-1+deb11u6
1
speckle/speckle-frontend:2.18.11-branch.testing2.88634-335d46982c052441110
tiff@4.2.0-1+deb11u5
4.2.0-1+deb11u6
1
speckle/speckle-frontend:2.18.12-branch.testing3.88744-f55b341d5f689c9256c
tiff@4.2.0-1+deb11u5
4.2.0-1+deb11u6
1
speckle/speckle-frontend:2.17.14-branch.testing.72707.921a5f8d9b58995a8b8
tiff@4.2.0-1+deb11u5
4.2.0-1+deb11u6
1
stratospire/activityrelay:0.2.3a4c34cb01117
tiff@4.2.0-1+deb11u1
4.2.0-1+deb11u6
1
svtechnmaa/svtech_icingaweb2:v1.0.2a59d0b81dde2
tiff@4.2.0-1+deb11u5
4.2.0-1+deb11u6
1
swisscomcloud/esc-vm-scheduler-web:latestb6639d1a922e
tiff@4.2.0-1+deb11u1
4.2.0-1+deb11u6
1
th0th/node-red:4.0.3-debiand06fa39f7406
tiff@4.2.0-1+deb11u5
4.2.0-1+deb11u6
1
youssef11gaber10/deployment-ui-react:latestba6853e35c60
tiff@4.2.0-1+deb11u1
4.2.0-1+deb11u6
1
gcr.io/ml-pipeline/metadata-writer:2.0.0-alpha.5ec3ae9f6df47
tiff@4.2.0-1+deb11u1
4.2.0-1+deb11u6
1
ghcr.io/0xemma/reddark:main2a115e991894
tiff@4.2.0-1+deb11u4
4.2.0-1+deb11u6
1
ghcr.io/appuio/cloud-portal:v0.2.18c7e08d32d70
tiff@4.2.0-1+deb11u1
4.2.0-1+deb11u6
1
ghcr.io/blakeblackshear/frigate:0.14.122e3d0b486df
tiff@4.2.0-1+deb11u5
4.2.0-1+deb11u6
1
ghcr.io/blakeblackshear/frigate:0.13.07a5244e4c8dc
tiff@4.2.0-1+deb11u5
4.2.0-1+deb11u6
1
ghcr.io/blakeblackshear/frigate:0.12.0c862771e38e8
tiff@4.2.0-1+deb11u4
4.2.0-1+deb11u6
1
ghcr.io/codingducksrl/wordpress:6.0.23113c0960507
tiff@4.2.0-1+deb11u1
4.2.0-1+deb11u6
1
ghcr.io/conductionnl/berichtservice-nginx:latest833d26df3840
tiff@4.2.0-1+deb11u1
4.2.0-1+deb11u6
1
ghcr.io/conductionnl/contactcatalogus-nginx:latest480c84fa9e63
tiff@4.2.0-1+deb11u1
4.2.0-1+deb11u6
1
ghcr.io/conductionnl/digispoof-interface-nginx:latest8fa4597217a4
tiff@4.2.0-1
4.2.0-1+deb11u6
1
ghcr.io/conductionnl/eav-component-nginx:latestd785c893096c
tiff@4.2.0-1+deb11u1
4.2.0-1+deb11u6
1
ghcr.io/conductionnl/education-component-nginx:latest38900bc76ee0
tiff@4.2.0-1+deb11u1
4.2.0-1+deb11u6
1
ghcr.io/conductionnl/medewerkercatalogus-nginx:latest06c3b27462e6
tiff@4.2.0-1+deb11u1
4.2.0-1+deb11u6
1
ghcr.io/conductionnl/skeleton-pip:devce1ebe9387a2
tiff@4.2.0-1+deb11u1
4.2.0-1+deb11u6
1
ghcr.io/conductionnl/user-component-nginx:latestb721579df8c3
tiff@4.2.0-1+deb11u1
4.2.0-1+deb11u6
1
ghcr.io/conductionnl/waardepapieren-nginx:latestaf31cf6cd59f
tiff@4.2.0-1
4.2.0-1+deb11u6
1
ghcr.io/conductionnl/webresourcecatalogus-nginx:latest6de60c83128d
tiff@4.2.0-1+deb11u1
4.2.0-1+deb11u6
1
ghcr.io/flaresolverr/flaresolverr:v3.3.16088412db1051
tiff@4.2.0-1+deb11u5
4.2.0-1+deb11u6
1

syft 1.42.1 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.