StackRadar

DLA-4026-1

Unscored

Advisory

Published 20 Jan 2025In the index since 6 Sept 2026
Severity
Unscored
worst across findings
CVSS
base score, highest
EPSS
0.022
81st percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
116
of 17,781 indexed, latest versions
Container images
120
deployed by those charts
Fix available
1 of 1
affected package

tiff - security update

Carried by container images the latest versions of 116 of 17,781 indexed charts deploy, on 120 images.

Affected packageAffected versionsFixed inImages
tiffdeb4.2.0-1, 4.2.0-1+deb11u1, 4.2.0-1+deb11u3, 4.2.0-1+deb11u4+1 more4.2.0-1+deb11u6120
OSV records
DLA-4026-1

Charts affected

116 by stars
ChartLatestAffected imagesRadar Score
syncstorageschichtelVerified publisher0.1.11 of 1See more

syncstorage schichtel 0.1.1

1 of the 1 container images this version deploys carry DLA-4026-1.

Container imageDigestPackageFixed in
mozilla/syncstorage-rs:0.15.893752877dced
tiff@4.2.0-1+deb11u5
4.2.0-1+deb11u6

Open the chart page →

1,318
skeleton-pipskeleton-pip0.1.01 of 1See more

skeleton-pip skeleton-pip 0.1.0

1 of the 1 container images this version deploys carry DLA-4026-1.

Container imageDigestPackageFixed in
ghcr.io/conductionnl/skeleton-pip:devce1ebe9387a2
tiff@4.2.0-1+deb11u1
4.2.0-1+deb11u6

Open the chart page →

1,126
marge-botslamdev0.0.11 of 1See more

marge-bot slamdev 0.0.1

1 of the 1 container images this version deploys carry DLA-4026-1.

Container imageDigestPackageFixed in
hiboxsystems/marge-bot:0.11.07235809b43b3
tiff@4.2.0-1+deb11u1
4.2.0-1+deb11u6

Open the chart page →

1,426
frigatesmarthallVerified publisher1.0.61 of 1See more

frigate smarthall 1.0.6

1 of the 1 container images this version deploys carry DLA-4026-1.

Container imageDigestPackageFixed in
ghcr.io/blakeblackshear/frigate:0.12.0c862771e38e8
tiff@4.2.0-1+deb11u4
4.2.0-1+deb11u6

Open the chart page →

2,243
sneakerssneakers1.0.01 of 4See more

sneakers sneakers 1.0.0

1 of the 4 container images this version deploys carry DLA-4026-1.

Container imageDigestPackageFixed in
helga09/shoes_ukr:v1.1.17999bc8b77c0
tiff@4.2.0-1+deb11u4
4.2.0-1+deb11u6

Open the chart page →

7,574
speckle-server-branch-testingspeckleVerified publisher2.17.14-branch.testing.72707.921a5f81 of 5See more

speckle-server-branch-testing speckle 2.17.14-branch.testing.72707.921a5f8

1 of the 5 container images this version deploys carry DLA-4026-1.

Container imageDigestPackageFixed in
speckle/speckle-frontend:2.17.14-branch.testing.72707.921a5f8d9b58995a8b8
tiff@4.2.0-1+deb11u5
4.2.0-1+deb11u6

Open the chart page →

14,679
speckle-server-branch-testing2speckleVerified publisher2.18.11-branch.testing2.88634-335d4691 of 5See more

speckle-server-branch-testing2 speckle 2.18.11-branch.testing2.88634-335d469

1 of the 5 container images this version deploys carry DLA-4026-1.

Container imageDigestPackageFixed in
speckle/speckle-frontend:2.18.11-branch.testing2.88634-335d46982c052441110
tiff@4.2.0-1+deb11u5
4.2.0-1+deb11u6

Open the chart page →

14,221
speckle-server-branch-testing3speckleVerified publisher2.18.12-branch.testing3.88744-f55b3411 of 5See more

speckle-server-branch-testing3 speckle 2.18.12-branch.testing3.88744-f55b341

1 of the 5 container images this version deploys carry DLA-4026-1.

Container imageDigestPackageFixed in
speckle/speckle-frontend:2.18.12-branch.testing3.88744-f55b341d5f689c9256c
tiff@4.2.0-1+deb11u5
4.2.0-1+deb11u6

Open the chart page →

14,221
icingawebsvtech-public-helm-charts1.0.01 of 2See more

icingaweb svtech-public-helm-charts 1.0.0

1 of the 2 container images this version deploys carry DLA-4026-1.

Container imageDigestPackageFixed in
svtechnmaa/svtech_icingaweb2:v1.0.2a59d0b81dde2
tiff@4.2.0-1+deb11u5
4.2.0-1+deb11u6

Open the chart page →

2,038
node-redth0ths-helm-charts0.2.11 of 2See more

node-red th0ths-helm-charts 0.2.1

1 of the 2 container images this version deploys carry DLA-4026-1.

Container imageDigestPackageFixed in
th0th/node-red:4.0.3-debiand06fa39f7406
tiff@4.2.0-1+deb11u5
4.2.0-1+deb11u6

Open the chart page →

2,408
vinyl-lib-chartvinyl-libVerified publisher0.1.01 of 1See more

vinyl-lib-chart vinyl-lib 0.1.0

1 of the 1 container images this version deploys carry DLA-4026-1.

Container imageDigestPackageFixed in
kporwit/vinyl_lib_app:v0.1.1217de0302218
tiff@4.2.0-1+deb11u1
4.2.0-1+deb11u6

Open the chart page →

3,392
apiwbstack0.36.01 of 1See more

api wbstack 0.36.0

1 of the 1 container images this version deploys carry DLA-4026-1.

Container imageDigestPackageFixed in
ghcr.io/wbstack/api:8x.9.11eee94f9f7a53
tiff@4.2.0-1+deb11u1
4.2.0-1+deb11u6

Open the chart page →

2,019
mediawikiwbstack0.14.01 of 1See more

mediawiki wbstack 0.14.0

1 of the 1 container images this version deploys carry DLA-4026-1.

Container imageDigestPackageFixed in
ghcr.io/wbstack/mediawiki:1.37-7.4-20220621-fp-beta-0c3012c8a34b4
tiff@4.2.0-1+deb11u1
4.2.0-1+deb11u6

Open the chart page →

2,132
webresourcecataloguswebresourcecatalogus1.1.01 of 4See more

webresourcecatalogus webresourcecatalogus 1.1.0

1 of the 4 container images this version deploys carry DLA-4026-1.

Container imageDigestPackageFixed in
ghcr.io/conductionnl/webresourcecatalogus-nginx:latest6de60c83128d
tiff@4.2.0-1+deb11u1
4.2.0-1+deb11u6

Open the chart page →

7,552
wp-gats-helmwordpress-gatsby0.0.11 of 3See more

wp-gats-helm wordpress-gatsby 0.0.1

1 of the 3 container images this version deploys carry DLA-4026-1.

Container imageDigestPackageFixed in
library/wordpress:6.0.0-php8.0-apache277c6c25980f
tiff@4.2.0-1+deb11u1
4.2.0-1+deb11u6

Open the chart page →

2,021
enterprise-gatewayzeet3.2.21 of 2See more

enterprise-gateway zeet 3.2.2

1 of the 2 container images this version deploys carry DLA-4026-1.

Container imageDigestPackageFixed in
elyra/kernel-image-puller:3.2.2c922f1f1646a
tiff@4.2.0-1+deb11u4
4.2.0-1+deb11u6

Open the chart page →

1,838

Container images carrying it

120 by charts deploying them

A fixed version is listed for 1 of the 1 affected package.

Container imageDigestPackageFixed inUsed by
library/nginx:1.21:1.21.62bcabc23b454
tiff@4.2.0-1+deb11u1
4.2.0-1+deb11u6
6
blakeblackshear/frigate:0.11.18330b0a265b8
tiff@4.2.0-1+deb11u1
4.2.0-1+deb11u6
2
ldapaccountmanager/lam:8.0.1d46cf25d1dda
tiff@4.2.0-1+deb11u1
4.2.0-1+deb11u6
2
library/nginx:1.24.0f6daac2445b0
tiff@4.2.0-1+deb11u5
4.2.0-1+deb11u6
2
passbolt/passbolt:3.4.0-ce-non-root655547e17263
tiff@4.2.0-1
4.2.0-1+deb11u6
2
pecan/bety:5.4.1f825d480cd62
tiff@4.2.0-1
4.2.0-1+deb11u6
2
postgis/postgis:15-3.3a2fc46b52819
tiff@4.2.0-1+deb11u4
4.2.0-1+deb11u6
2
yzhou442/equiz:latesta3f7ca69e28d
tiff@4.2.0-1+deb11u1
4.2.0-1+deb11u6
2
activepieces/activepieces:0.23.0c26188b44e62
tiff@4.2.0-1+deb11u5
4.2.0-1+deb11u6
1
aidasi/swpapi:v1-1-net6-k8s-test-beta838b5e2080bc
tiff@4.2.0-1+deb11u4
4.2.0-1+deb11u6
1
aidasi/swpspa:v1-1-net6-k8s-test-betadee4ec566312
tiff@4.2.0-1+deb11u1
4.2.0-1+deb11u6
1
allegroai/clearml-serving-inference:1.3.0fca885e8cfc6
tiff@4.2.0-1+deb11u4
4.2.0-1+deb11u6
1
allegroai/clearml-serving-statistics:1.3.0c58d9da7bdf8
tiff@4.2.0-1+deb11u4
4.2.0-1+deb11u6
1
apache/superset:9cdaa280429ec297db16d56c94fd77b5d2aff107975ab033580d
tiff@4.2.0-1
4.2.0-1+deb11u6
1
archish27/python-fastapi-postgres:latest6610071a2101
tiff@4.2.0-1+deb11u1
4.2.0-1+deb11u6
1
assistiot/resource-provisioning_prc:1.0.08b5d118bdf0e
tiff@4.2.0-1+deb11u4
4.2.0-1+deb11u6
1
azhar008/flaskapplication:latesta1e827b0adea
tiff@4.2.0-1
4.2.0-1+deb11u6
1
buntha/mlflow:2.1.1154542cc3083
tiff@4.2.0-1+deb11u1
4.2.0-1+deb11u6
1
camerahub/camerahub:0.36.23a5af37dd6e1b
tiff@4.2.0-1+deb11u4
4.2.0-1+deb11u6
1
countly/api:25.05.4f4cc7447c4f5
tiff@4.2.0-1+deb11u5
4.2.0-1+deb11u6
1
countly/frontend:25.05.42acbc11499b6
tiff@4.2.0-1+deb11u5
4.2.0-1+deb11u6
1
danuk/telegram-sender:0.0.1026560388070
tiff@4.2.0-1+deb11u1
4.2.0-1+deb11u6
1
douz/helpdesk:latest4384103d0219
tiff@4.2.0-1+deb11u1
4.2.0-1+deb11u6
1
duck1123/astral:latestf4d5b6526c2a
tiff@4.2.0-1+deb11u3
4.2.0-1+deb11u6
1
elyra/kernel-image-puller:3.2.2c922f1f1646a
tiff@4.2.0-1+deb11u4
4.2.0-1+deb11u6
1
erlangsolutions/wombatoam:4.1.284680c990147a
tiff@4.2.0-1+deb11u1
4.2.0-1+deb11u6
1
evk02/mlflow:2.2.1ef6ff257ef35
tiff@4.2.0-1+deb11u4
4.2.0-1+deb11u6
1
factly/hunting:0.2.0-stagv1.2ca5bc71d1d5c
tiff@4.2.0-1+deb11u1
4.2.0-1+deb11u6
1
fanzynoodle/smeejas:0.0.15f9916c1a287
tiff@4.2.0-1
4.2.0-1+deb11u6
1
golenski/db-init:1.0.086ca17cd3063
tiff@4.2.0-1+deb11u5
4.2.0-1+deb11u6
1
ha33ona/python:test6affdfc644d0
tiff@4.2.0-1
4.2.0-1+deb11u6
1
helga09/shoes_ukr:v1.1.17999bc8b77c0
tiff@4.2.0-1+deb11u4
4.2.0-1+deb11u6
1
heywood8/redisinsight:2.28.00bc9ab313d37
tiff@4.2.0-1+deb11u4
4.2.0-1+deb11u6
1
hiboxsystems/marge-bot:0.11.07235809b43b3
tiff@4.2.0-1+deb11u1
4.2.0-1+deb11u6
1
hiboxsystems/marge-bot:0.12.1a96c10b61a59
tiff@4.2.0-1+deb11u4
4.2.0-1+deb11u6
1
kobotoolbox/kobocat:2.022.24ab15679454415
tiff@4.2.0-1+deb11u1
4.2.0-1+deb11u6
1
kobotoolbox/kpi:2.022.24dbcacc01bccd4
tiff@4.2.0-1+deb11u1
4.2.0-1+deb11u6
1
kporwit/vinyl_lib_app:v0.1.1217de0302218
tiff@4.2.0-1+deb11u1
4.2.0-1+deb11u6
1
kubebb/hello-world:0.1.0b746824819f3
tiff@4.2.0-1+deb11u1
4.2.0-1+deb11u6
1
library/nginx:1.23.03536d368b898
tiff@4.2.0-1+deb11u1
4.2.0-1+deb11u6
1
library/nginx:1.23.2ab589a3c466e
tiff@4.2.0-1+deb11u1
4.2.0-1+deb11u6
1
library/nginx:1.23.3f4e3b6489888
tiff@4.2.0-1+deb11u4
4.2.0-1+deb11u6
1
library/nginx:1.23f5747a42e3ad
tiff@4.2.0-1+deb11u4
4.2.0-1+deb11u6
1
library/wordpress:6.0.0-php8.0-apache277c6c25980f
tiff@4.2.0-1+deb11u1
4.2.0-1+deb11u6
1
lnbitsdocker/lnbits-legend:latest26fae6327477
tiff@4.2.0-1+deb11u5
4.2.0-1+deb11u6
1
lnbitsdocker/lnbits-legend:0.10.6a11aaa6d2b21
tiff@4.2.0-1+deb11u4
4.2.0-1+deb11u6
1
maissacrement/pock8snodejs:0.0.16da0db1159da
tiff@4.2.0-1+deb11u4
4.2.0-1+deb11u6
1
mide/minecraft-overviewer:latest4eee0dcb715f
tiff@4.2.0-1+deb11u4
4.2.0-1+deb11u6
1
mnaggar3396/python-app:latest371d8ed84b15
tiff@4.2.0-1+deb11u1
4.2.0-1+deb11u6
1
moreillon/face-recognition-fastapi:x86bacb2ddd8394
tiff@4.2.0-1
4.2.0-1+deb11u6
1

syft 1.42.1 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.