DLA-4306-1
UnscoredAdvisory
Published 21 Sept 2025In the index since 5 Sept 2026
- Severity
- Unscored
- worst across findings
- CVSS
- —
- base score, highest
- EPSS
- 0.005
- 39th percentile
- CISA KEV
- Not listed
- no confirmed exploitation
- Charts affected
- 464
- of 17,781 indexed, latest versions
- Container images
- 479
- deployed by those charts
- Fix available
- 1 of 1
- affected package
pam - security update
Carried by container images the latest versions of 464 of 17,781 indexed charts deploy, on 479 images.
| Affected package | Affected versions | Fixed in | Images |
|---|---|---|---|
| pamdeb | 1.4.0-9, 1.4.0-9+deb11u1 | 1.4.0-9+deb11u2 | 479 |
- OSV records
- DLA-4306-1
Charts affected
464 by stars
| Chart | Latest | Affected images | Radar Score |
|---|---|---|---|
| homarrvhdirkVerified publisher | 0.1.5 | 1 of 1See more | 2,789 |
| vinyl-lib-chartvinyl-libVerified publisher | 0.1.0 | 1 of 1See more | 3,392 |
| hedgedocvista | 0.1.1 | 1 of 1See more | 3,118 |
| resultappvoting-app-helm-charts-repoVerified publisher | 1.0.0 | 1 of 1See more | 1,263 |
| voteappvoting-app-helm-charts-repoVerified publisher | 1.0.0 | 2 of 5See more | 8,262 |
| resultappvoting-app-helm-charts-repo-cloudVerified publisher | 1.0.0 | 1 of 1See more | 1,263 |
| voteappvoting-app-helm-charts-repo-cloudVerified publisher | 1.0.0 | 2 of 5See more | 8,262 |
| apiwbstack | 0.36.0 | 1 of 1See more | 2,019 |
| mediawikiwbstack | 0.14.0 | 1 of 1See more | 2,132 |
| drillwearefrank | 1.3.6 | 2 of 3See more | 9,397 |
| webresourcecataloguswebresourcecatalogus | 1.1.0 | 1 of 4See more | 7,552 |
| vaultwardenwitcom-gmbh | 0.2.0 | 1 of 2See more | 1,585 |
| wp-gats-helmwordpress-gatsby | 0.0.1 | 1 of 3See more | 2,021 |
| enterprise-gatewayzeet | 3.2.2 | 1 of 2See more | 1,838 |
Container images carrying it
479 by charts deploying them
A fixed version is listed for 1 of the 1 affected package.
| Container image | Digest | Package | Fixed in | Used by |
|---|---|---|---|---|
| dannielkil/ | e3b479a55a69 | pam | 1.4.0-9+deb11u2 | 1 |
| danuk/ | dd0e6585c44f | pam | 1.4.0-9+deb11u2 | 1 |
| danuk/ | 026560388070 | pam | 1.4.0-9+deb11u2 | 1 |
| darkobas/ | 62e6464491ba | pam | 1.4.0-9+deb11u2 | 1 |
| darkobas/ | a0349a0eedf0 | pam | 1.4.0-9+deb11u2 | 1 |
| darthsim/ | 40f6eb807444 | pam | 1.4.0-9+deb11u2 | 1 |
| datappeal/ | e38c085a3567 | pam | 1.4.0-9+deb11u2 | 1 |
| davidvmar/ | 0d221e834a21 | pam | 1.4.0-9+deb11u2 | 1 |
| ddosify/ | e5be48b37348 | pam | 1.4.0-9+deb11u2 | 1 |
| ddosify/ | 71b8768f49bc | pam | 1.4.0-9+deb11u2 | 1 |
| douz/ | 4384103d0219 | pam | 1.4.0-9+deb11u2 | 1 |
| duck1123/ | f4d5b6526c2a | pam | 1.4.0-9+deb11u2 | 1 |
| duck1123/ | 119fc5d4cbfb | pam | 1.4.0-9+deb11u2 | 1 |
| easypi/ | d2950a36a576 | pam | 1.4.0-9+deb11u2 | 1 |
| easysoft/ | 592ad5df1f8b | pam | 1.4.0-9+deb11u2 | 1 |
| eclipseaerios/ | 0208743f315e | pam | 1.4.0-9+deb11u2 | 1 |
| eclipseaerios/ | c8af377c709f | pam | 1.4.0-9+deb11u2 | 1 |
| elyra/ | c922f1f1646a | pam | 1.4.0-9+deb11u2 | 1 |
| emberstack/ | 1d81a5df909b | pam | 1.4.0-9+deb11u2 | 1 |
| erlangsolutions/ | 4680c990147a | pam | 1.4.0-9+deb11u2 | 1 |
| errbotio/ | 00ee4e0953ab | pam | 1.4.0-9+deb11u2 | 1 |
| ethersphere/ | 3a8a3926caa2 | pam | 1.4.0-9+deb11u2 | 1 |
| evk02/ | ef6ff257ef35 | pam | 1.4.0-9+deb11u2 | 1 |
| expediagroup/ | 4f2cf61e7de9 | pam | 1.4.0-9+deb11u2 | 1 |
| factly/ | ca5bc71d1d5c | pam | 1.4.0-9+deb11u2 | 1 |
| fanzynoodle/ | 5f9916c1a287 | pam | 1.4.0-9+deb11u2 | 1 |
| farberg/ | 4b4a22487394 | pam | 1.4.0-9+deb11u2 | 1 |
| filegator/ | ce163db220d4 | pam | 1.4.0-9+deb11u2 | 1 |
| flag5/ | 4ad5748bfcc6 | pam | 1.4.0-9+deb11u2 | 1 |
| flofree/ | 6b6486c5f81e | pam | 1.4.0-9+deb11u2 | 1 |
| golenski/ | 86ca17cd3063 | pam | 1.4.0-9+deb11u2 | 1 |
| gophish/ | 8a57cd171999 | pam | 1.4.0-9+deb11u2 | 1 |
| gotify/ | 09c79bc1e403 | pam | 1.4.0-9+deb11u2 | 1 |
| gradiant/ | e3bf364fe713 | pam | 1.4.0-9+deb11u2 | 1 |
| grafana/ | 072527b12cdf | pam | 1.4.0-9+deb11u2 | 1 |
| grafana/ | 63a2e57a5b14 | pam | 1.4.0-9+deb11u2 | 1 |
| grafana/ | c16c710f7333 | pam | 1.4.0-9+deb11u2 | 1 |
| grafana/ | d3de3da9431c | pam | 1.4.0-9+deb11u2 | 1 |
| gresearchdev/ | 91863a50afb7 | pam | 1.4.0-9+deb11u2 | 1 |
| gresearchdev/ | 8dad36a05ebf | pam | 1.4.0-9+deb11u2 | 1 |
| gustavostingelin/ | 82dcb2fbef58 | pam | 1.4.0-9+deb11u2 | 1 |
| ha33ona/ | 6affdfc644d0 | pam | 1.4.0-9+deb11u2 | 1 |
| hazelcast/ | a825ecbe9fda | pam | 1.4.0-9+deb11u2 | 1 |
| healthchecks/ | e82bb0836e30 | pam | 1.4.0-9+deb11u2 | 1 |
| hecrom/ | 92e5588d55f3 | pam | 1.4.0-9+deb11u2 | 1 |
| hecrom/ | 203ee6853a27 | pam | 1.4.0-9+deb11u2 | 1 |
| hecrom/ | c502a4b758f0 | pam | 1.4.0-9+deb11u2 | 1 |
| helga09/ | e283539bcb8c | pam | 1.4.0-9+deb11u2 | 1 |
| helga09/ | 7999bc8b77c0 | pam | 1.4.0-9+deb11u2 | 1 |
| heywood8/ | 0bc9ab313d37 | pam | 1.4.0-9+deb11u2 | 1 |