StackRadarChart IndexLive demo

DLA-4026-1

Unscored

Advisory

Published 20 Jan 2025In the index since 6 Sept 2026

Severity: Unscored; worst across findings
CVSS: —; base score, highest
EPSS: 0.022; 81st percentile
CISA KEV: Not listed; no confirmed exploitation
Charts affected: 116; of 17,781 indexed, latest versions
Container images: 120; deployed by those charts
Fix available: 1 of 1; affected package

tiff - security update

Carried by container images the latest versions of 116 of 17,781 indexed charts deploy, on 120 images.

Affected package	Affected versions	Fixed in	Images
tiffdeb	4.2.0-1, 4.2.0-1+deb11u1, 4.2.0-1+deb11u3, 4.2.0-1+deb11u4+1 more	4.2.0-1+deb11u6	120

OSV records: DLA-4026-1

Charts affected

116 by stars

Chart

Latest

Affected images

Radar Score

syncstorageschichtel

1 of 1 See more

syncstorage schichtel 0.1.1

1 of the 1 container images this version deploys carry DLA-4026-1.

Container image	Digest	Package	Fixed in
mozilla/syncstorage-rs :0.15.8	93752877dced	tiff@4.2.0-1+deb11u5	4.2.0-1+deb11u6

Open the chart page →

1,318

skeleton-pipskeleton-pip

1 of 1 See more

skeleton-pip skeleton-pip 0.1.0

1 of the 1 container images this version deploys carry DLA-4026-1.

Container image	Digest	Package	Fixed in
ghcr.io/conductionnl/skeleton-pip :dev	ce1ebe9387a2	tiff@4.2.0-1+deb11u1	4.2.0-1+deb11u6

Open the chart page →

1,126

marge-botslamdev

1 of 1 See more

marge-bot slamdev 0.0.1

1 of the 1 container images this version deploys carry DLA-4026-1.

Container image	Digest	Package	Fixed in
hiboxsystems/marge-bot :0.11.0	7235809b43b3	tiff@4.2.0-1+deb11u1	4.2.0-1+deb11u6

Open the chart page →

1,426

frigatesmarthall

1 of 1 See more

frigate smarthall 1.0.6

1 of the 1 container images this version deploys carry DLA-4026-1.

Container image	Digest	Package	Fixed in
ghcr.io/blakeblackshear/frigate :0.12.0	c862771e38e8	tiff@4.2.0-1+deb11u4	4.2.0-1+deb11u6

Open the chart page →

2,243

sneakerssneakers

1 of 4 See more

sneakers sneakers 1.0.0

1 of the 4 container images this version deploys carry DLA-4026-1.

Container image	Digest	Package	Fixed in
helga09/shoes_ukr :v1.1.1	7999bc8b77c0	tiff@4.2.0-1+deb11u4	4.2.0-1+deb11u6

Open the chart page →

7,574

speckle-server-branch-testingspeckle

2.17.14-branch.testing.72707.921a5f8

1 of 5 See more

speckle-server-branch-testing speckle 2.17.14-branch.testing.72707.921a5f8

1 of the 5 container images this version deploys carry DLA-4026-1.

Container image	Digest	Package	Fixed in
speckle/speckle-frontend :2.17.14-branch.testing.72707.921a5f8	d9b58995a8b8	tiff@4.2.0-1+deb11u5	4.2.0-1+deb11u6

Open the chart page →

14,679

speckle-server-branch-testing2speckle

2.18.11-branch.testing2.88634-335d469

1 of 5 See more

speckle-server-branch-testing2 speckle 2.18.11-branch.testing2.88634-335d469

1 of the 5 container images this version deploys carry DLA-4026-1.

Container image	Digest	Package	Fixed in
speckle/speckle-frontend :2.18.11-branch.testing2.88634-335d469	82c052441110	tiff@4.2.0-1+deb11u5	4.2.0-1+deb11u6

Open the chart page →

14,221

speckle-server-branch-testing3speckle

2.18.12-branch.testing3.88744-f55b341

1 of 5 See more

speckle-server-branch-testing3 speckle 2.18.12-branch.testing3.88744-f55b341

1 of the 5 container images this version deploys carry DLA-4026-1.

Container image	Digest	Package	Fixed in
speckle/speckle-frontend :2.18.12-branch.testing3.88744-f55b341	d5f689c9256c	tiff@4.2.0-1+deb11u5	4.2.0-1+deb11u6

Open the chart page →

14,221

icingawebsvtech-public-helm-charts

1 of 2 See more

icingaweb svtech-public-helm-charts 1.0.0

1 of the 2 container images this version deploys carry DLA-4026-1.

Container image	Digest	Package	Fixed in
svtechnmaa/svtech_icingaweb2 :v1.0.2	a59d0b81dde2	tiff@4.2.0-1+deb11u5	4.2.0-1+deb11u6

Open the chart page →

2,038

node-redth0ths-helm-charts

1 of 2 See more

node-red th0ths-helm-charts 0.2.1

1 of the 2 container images this version deploys carry DLA-4026-1.

Container image	Digest	Package	Fixed in
th0th/node-red :4.0.3-debian	d06fa39f7406	tiff@4.2.0-1+deb11u5	4.2.0-1+deb11u6

Open the chart page →

2,408

vinyl-lib-chartvinyl-lib

1 of 1 See more

vinyl-lib-chart vinyl-lib 0.1.0

1 of the 1 container images this version deploys carry DLA-4026-1.

Container image	Digest	Package	Fixed in
kporwit/vinyl_lib_app :v0.1.1	217de0302218	tiff@4.2.0-1+deb11u1	4.2.0-1+deb11u6

Open the chart page →

3,392

apiwbstack

1 of 1 See more

api wbstack 0.36.0

1 of the 1 container images this version deploys carry DLA-4026-1.

Container image	Digest	Package	Fixed in
ghcr.io/wbstack/api :8x.9.11	eee94f9f7a53	tiff@4.2.0-1+deb11u1	4.2.0-1+deb11u6

Open the chart page →

2,019

mediawikiwbstack

1 of 1 See more

mediawiki wbstack 0.14.0

1 of the 1 container images this version deploys carry DLA-4026-1.

Container image	Digest	Package	Fixed in
ghcr.io/wbstack/mediawiki :1.37-7.4-20220621-fp-beta-0	c3012c8a34b4	tiff@4.2.0-1+deb11u1	4.2.0-1+deb11u6

Open the chart page →

2,132

webresourcecataloguswebresourcecatalogus

1 of 4 See more

webresourcecatalogus webresourcecatalogus 1.1.0

1 of the 4 container images this version deploys carry DLA-4026-1.

Container image	Digest	Package	Fixed in
ghcr.io/conductionnl/webresourcecatalogus-nginx :latest	6de60c83128d	tiff@4.2.0-1+deb11u1	4.2.0-1+deb11u6

Open the chart page →

7,552

wp-gats-helmwordpress-gatsby

1 of 3 See more

wp-gats-helm wordpress-gatsby 0.0.1

1 of the 3 container images this version deploys carry DLA-4026-1.

Container image	Digest	Package	Fixed in
library/wordpress :6.0.0-php8.0-apache	277c6c25980f	tiff@4.2.0-1+deb11u1	4.2.0-1+deb11u6

Open the chart page →

2,021

enterprise-gatewayzeet

1 of 2 See more

enterprise-gateway zeet 3.2.2

1 of the 2 container images this version deploys carry DLA-4026-1.

Container image	Digest	Package	Fixed in
elyra/kernel-image-puller :3.2.2	c922f1f1646a	tiff@4.2.0-1+deb11u4	4.2.0-1+deb11u6

Open the chart page →

1,838

Container images carrying it

120 by charts deploying them

A fixed version is listed for 1 of the 1 affected package.

Container image	Digest	Package	Fixed in	Used by
ghcr.io/flaresolverr/flaresolverr :v3.3.21	f104ee51e512	tiff@4.2.0-1+deb11u5	4.2.0-1+deb11u6	1
ghcr.io/g0dscookie/aptly :latest	edd095d3c0ee	tiff@4.2.0-1+deb11u1	4.2.0-1+deb11u6	1
ghcr.io/k10app/frontend :latest	066b5ac6b119	tiff@4.2.0-1+deb11u1	4.2.0-1+deb11u6	1
ghcr.io/k10app/staticcache :latest	e77805689a8e	tiff@4.2.0-1+deb11u1	4.2.0-1+deb11u6	1
ghcr.io/k8s-at-home/theme-park :v1.7.3	f8a5ec8f4669	tiff@4.2.0-1+deb11u1	4.2.0-1+deb11u6	1
ghcr.io/leoquote/tinyproxy_exporter :master	6b4103d88dbb	tiff@4.2.0-1	4.2.0-1+deb11u6	1
ghcr.io/mastodon/mastodon :v4.1.2	6b18e6d0eda4	tiff@4.2.0-1+deb11u4	4.2.0-1+deb11u6	1
ghcr.io/mroxso/pollstr :latest	0b4f97faa3d0	tiff@4.2.0-1+deb11u4	4.2.0-1+deb11u6	1
ghcr.io/nathanvaughn/webtrees :2.0.19	69423a100fab	tiff@4.2.0-1	4.2.0-1+deb11u6	1
ghcr.io/paperless-ngx/paperless-ngx :1.8.0	9bbc9a90641e	tiff@4.2.0-1+deb11u1	4.2.0-1+deb11u6	1
ghcr.io/privacyengineering/hawk-monitor :master	13309f068a56	tiff@4.2.0-1+deb11u1	4.2.0-1+deb11u6	1
ghcr.io/remla23-team17/app :1.0.0	5816dbddf47d	tiff@4.2.0-1+deb11u4	4.2.0-1+deb11u6	1
ghcr.io/remla23-team17/model-service :1.0.0	aa59fe2c4f6a	tiff@4.2.0-1+deb11u4	4.2.0-1+deb11u6	1
ghcr.io/rivals-space/rivals-mastodon :1.6.1	43b23d55e4be	tiff@4.2.0-1+deb11u3	4.2.0-1+deb11u6	1
ghcr.io/rodg/nodecg-base :latest	31be4bf87070	tiff@4.2.0-1+deb11u4	4.2.0-1+deb11u6	1
ghcr.io/savonet/liquidsoap :v2.0.1	9e08148e1055	tiff@4.2.0-1	4.2.0-1+deb11u6	1
ghcr.io/wbstack/api :8x.9.11	eee94f9f7a53	tiff@4.2.0-1+deb11u1	4.2.0-1+deb11u6	1
ghcr.io/wbstack/mediawiki :1.37-7.4-20220621-fp-beta-0	c3012c8a34b4	tiff@4.2.0-1+deb11u1	4.2.0-1+deb11u6	1
public.ecr.aws/jtekt-corporation/annotation-tool :ef974ad9	abd817eb6845	tiff@4.2.0-1+deb11u1	4.2.0-1+deb11u6	1
public.ecr.aws/jtekt-corporation/polygonal-annotation-tool :a3fa9360	56efd38500d6	tiff@4.2.0-1+deb11u4	4.2.0-1+deb11u6	1