StackRadar

DLA-4306-1

Unscored

Advisory

Published 21 Sept 2025In the index since 5 Sept 2026
Severity
Unscored
worst across findings
CVSS
—
base score, highest
EPSS
0.005
39th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
464
of 17,787 indexed, latest versions
Container images
479
deployed by those charts
Fix available
1 of 1
affected package

pam - security update

Carried by container images the latest versions of 464 of 17,787 indexed charts deploy, on 479 images.

Affected packageAffected versionsFixed inImages
pamdeb1.4.0-9, 1.4.0-9+deb11u11.4.0-9+deb11u2479
OSV records
DLA-4306-1

Charts affected

464 by stars
ChartLatestAffected imagesRadar Score
homarrvhdirkVerified publisher0.1.51 of 1See more

homarr vhdirk 0.1.5

1 of the 1 container images this version deploys carry DLA-4306-1.

Container imageDigestPackageFixed in
ghcr.io/ajnart/homarr:lateste103abadfb52
pam@1.4.0-9+deb11u1
1.4.0-9+deb11u2

Open the chart page →

2,789
vinyl-lib-chartvinyl-libVerified publisher0.1.01 of 1See more

vinyl-lib-chart vinyl-lib 0.1.0

1 of the 1 container images this version deploys carry DLA-4306-1.

Container imageDigestPackageFixed in
kporwit/vinyl_lib_app:v0.1.1217de0302218
pam@1.4.0-9+deb11u1
1.4.0-9+deb11u2

Open the chart page →

3,392
hedgedocvista0.1.11 of 1See more

hedgedoc vista 0.1.1

1 of the 1 container images this version deploys carry DLA-4306-1.

Container imageDigestPackageFixed in
quay.io/hedgedoc/hedgedoc:1.9.4e09967519a1d
pam@1.4.0-9+deb11u1
1.4.0-9+deb11u2

Open the chart page →

3,118
resultappvoting-app-helm-charts-repoVerified publisher1.0.01 of 1See more

resultapp voting-app-helm-charts-repo 1.0.0

1 of the 1 container images this version deploys carry DLA-4306-1.

Container imageDigestPackageFixed in
kodekloud/examplevotingapp_result:v1e510023fdf38
pam@1.4.0-9+deb11u1
1.4.0-9+deb11u2

Open the chart page →

1,263
voteappvoting-app-helm-charts-repoVerified publisher1.0.02 of 5See more

voteapp voting-app-helm-charts-repo 1.0.0

2 of the 5 container images this version deploys carry DLA-4306-1.

Container imageDigestPackageFixed in
kodekloud/examplevotingapp_result:v1e510023fdf38
pam@1.4.0-9+deb11u1
1.4.0-9+deb11u2
kodekloud/examplevotingapp_vote:v13a856afb02a3
pam@1.4.0-9+deb11u1
1.4.0-9+deb11u2

Open the chart page →

8,262
resultappvoting-app-helm-charts-repo-cloudVerified publisher1.0.01 of 1See more

resultapp voting-app-helm-charts-repo-cloud 1.0.0

1 of the 1 container images this version deploys carry DLA-4306-1.

Container imageDigestPackageFixed in
kodekloud/examplevotingapp_result:v1e510023fdf38
pam@1.4.0-9+deb11u1
1.4.0-9+deb11u2

Open the chart page →

1,263
voteappvoting-app-helm-charts-repo-cloudVerified publisher1.0.02 of 5See more

voteapp voting-app-helm-charts-repo-cloud 1.0.0

2 of the 5 container images this version deploys carry DLA-4306-1.

Container imageDigestPackageFixed in
kodekloud/examplevotingapp_result:v1e510023fdf38
pam@1.4.0-9+deb11u1
1.4.0-9+deb11u2
kodekloud/examplevotingapp_vote:v13a856afb02a3
pam@1.4.0-9+deb11u1
1.4.0-9+deb11u2

Open the chart page →

8,262
apiwbstack0.36.01 of 1See more

api wbstack 0.36.0

1 of the 1 container images this version deploys carry DLA-4306-1.

Container imageDigestPackageFixed in
ghcr.io/wbstack/api:8x.9.11eee94f9f7a53
pam@1.4.0-9+deb11u1
1.4.0-9+deb11u2

Open the chart page →

2,019
mediawikiwbstack0.14.01 of 1See more

mediawiki wbstack 0.14.0

1 of the 1 container images this version deploys carry DLA-4306-1.

Container imageDigestPackageFixed in
ghcr.io/wbstack/mediawiki:1.37-7.4-20220621-fp-beta-0c3012c8a34b4
pam@1.4.0-9+deb11u1
1.4.0-9+deb11u2

Open the chart page →

2,132
drillwearefrank1.3.62 of 3See more

drill wearefrank 1.3.6

2 of the 3 container images this version deploys carry DLA-4306-1.

Container imageDigestPackageFixed in
apache/drill:1.21.11f96558fd292
pam@1.4.0-9+deb11u1
1.4.0-9+deb11u2
bitnamilegacy/zookeeper:3.9.0-debian-11-r1110ed1ea3c8d1
pam@1.4.0-9+deb11u1
1.4.0-9+deb11u2

Open the chart page →

9,397
webresourcecataloguswebresourcecatalogus1.1.01 of 4See more

webresourcecatalogus webresourcecatalogus 1.1.0

1 of the 4 container images this version deploys carry DLA-4306-1.

Container imageDigestPackageFixed in
ghcr.io/conductionnl/webresourcecatalogus-nginx:latest6de60c83128d
pam@1.4.0-9+deb11u1
1.4.0-9+deb11u2

Open the chart page →

7,552
vaultwardenwitcom-gmbh0.2.01 of 2See more

vaultwarden witcom-gmbh 0.2.0

1 of the 2 container images this version deploys carry DLA-4306-1.

Container imageDigestPackageFixed in
vaultwarden/server:1.25.239f34c5159a2
pam@1.4.0-9+deb11u1
1.4.0-9+deb11u2

Open the chart page →

1,585
wp-gats-helmwordpress-gatsby0.0.11 of 3See more

wp-gats-helm wordpress-gatsby 0.0.1

1 of the 3 container images this version deploys carry DLA-4306-1.

Container imageDigestPackageFixed in
library/wordpress:6.0.0-php8.0-apache277c6c25980f
pam@1.4.0-9+deb11u1
1.4.0-9+deb11u2

Open the chart page →

2,021
enterprise-gatewayzeet3.2.21 of 2See more

enterprise-gateway zeet 3.2.2

1 of the 2 container images this version deploys carry DLA-4306-1.

Container imageDigestPackageFixed in
elyra/kernel-image-puller:3.2.2c922f1f1646a
pam@1.4.0-9+deb11u1
1.4.0-9+deb11u2

Open the chart page →

1,838

Container images carrying it

479 by charts deploying them

A fixed version is listed for 1 of the 1 affected package.

Container imageDigestPackageFixed inUsed by
ghcr.io/conductionnl/education-component-nginx:latest38900bc76ee0
pam@1.4.0-9+deb11u1
1.4.0-9+deb11u2
1
ghcr.io/conductionnl/medewerkercatalogus-nginx:latest06c3b27462e6
pam@1.4.0-9+deb11u1
1.4.0-9+deb11u2
1
ghcr.io/conductionnl/skeleton-pip:devce1ebe9387a2
pam@1.4.0-9+deb11u1
1.4.0-9+deb11u2
1
ghcr.io/conductionnl/user-component-nginx:latestb721579df8c3
pam@1.4.0-9+deb11u1
1.4.0-9+deb11u2
1
ghcr.io/conductionnl/waardepapieren-nginx:latestaf31cf6cd59f
pam@1.4.0-9+deb11u1
1.4.0-9+deb11u2
1
ghcr.io/conductionnl/webresourcecatalogus-nginx:latest6de60c83128d
pam@1.4.0-9+deb11u1
1.4.0-9+deb11u2
1
ghcr.io/cunningpike/fediblockhole:0.4.22abc5f0350dc
pam@1.4.0-9+deb11u1
1.4.0-9+deb11u2
1
ghcr.io/dask/dask-gateway-server:2024.1.0881e7acfc5a0
pam@1.4.0-9+deb11u1
1.4.0-9+deb11u2
1
ghcr.io/dgtlmoon/changedetection.io:0.39.4f1ce4c56ccaa
pam@1.4.0-9+deb11u1
1.4.0-9+deb11u2
1
ghcr.io/dodevops/azure-app-exporter/azure-app-exporter:0.1.38b472877847f5
pam@1.4.0-9+deb11u1
1.4.0-9+deb11u2
1
ghcr.io/ducksify/pgdump-to-s3:latestc42c0946bd0f
pam@1.4.0-9+deb11u1
1.4.0-9+deb11u2
1
ghcr.io/eshepelyuk/dckr/cmak-3.0.0.6:1.2.090a34412c6b5
pam@1.4.0-9+deb11u1
1.4.0-9+deb11u2
1
ghcr.io/facebook/threatexchange/hma:1.0.1784d09c6b75a7
pam@1.4.0-9+deb11u1
1.4.0-9+deb11u2
1
ghcr.io/flaresolverr/flaresolverr:v3.3.16088412db1051
pam@1.4.0-9+deb11u1
1.4.0-9+deb11u2
1
ghcr.io/flaresolverr/flaresolverr:v3.3.21f104ee51e512
pam@1.4.0-9+deb11u1
1.4.0-9+deb11u2
1
ghcr.io/fleeksoft/hbase/hdfs:3.3.3.2ac62269785ac
pam@1.4.0-9+deb11u1
1.4.0-9+deb11u2
1
ghcr.io/g0dscookie/aptly:latestedd095d3c0ee
pam@1.4.0-9+deb11u1
1.4.0-9+deb11u2
1
ghcr.io/g0dscookie/icinga2:2.13.5da81246ccfc9
pam@1.4.0-9+deb11u1
1.4.0-9+deb11u2
1
ghcr.io/hoverkraft-tech/ovh-snapshoter/app:0.4.1010d271f08ab3
pam@1.4.0-9+deb11u1
1.4.0-9+deb11u2
1
ghcr.io/justarchinet/archisteamfarm:5.2.5.4c7c0a52303cb
pam@1.4.0-9+deb11u1
1.4.0-9+deb11u2
1
ghcr.io/k10app/frontend:latest066b5ac6b119
pam@1.4.0-9+deb11u1
1.4.0-9+deb11u2
1
ghcr.io/k10app/staticcache:lateste77805689a8e
pam@1.4.0-9+deb11u1
1.4.0-9+deb11u2
1
ghcr.io/k8s-at-home/theme-park:v1.7.3f8a5ec8f4669
pam@1.4.0-9+deb11u1
1.4.0-9+deb11u2
1
ghcr.io/kiaedev/kiae:latestebd03028ff6a
pam@1.4.0-9+deb11u1
1.4.0-9+deb11u2
1
ghcr.io/komputing/fauceth:release4ab8fa4143b4
pam@1.4.0-9+deb11u1
1.4.0-9+deb11u2
1
ghcr.io/leoquote/tinyproxy_exporter:master6b4103d88dbb
pam@1.4.0-9
1.4.0-9+deb11u2
1
ghcr.io/libretime/libretime-analyzer:latest3d5e236216ad
pam@1.4.0-9+deb11u1
1.4.0-9+deb11u2
1
ghcr.io/libretime/libretime-api:latesteae026cc8909
pam@1.4.0-9+deb11u1
1.4.0-9+deb11u2
1
ghcr.io/libretime/libretime-legacy:latest35b4531189c2
pam@1.4.0-9+deb11u1
1.4.0-9+deb11u2
1
ghcr.io/libretime/libretime-playout:latest71a8706531aa
pam@1.4.0-9+deb11u1
1.4.0-9+deb11u2
1
ghcr.io/libretime/libretime-worker:latestd39ff5272b2e
pam@1.4.0-9+deb11u1
1.4.0-9+deb11u2
1
ghcr.io/linuxoid69/motion:4.7.0-0.1.0f0f000c3fc47
pam@1.4.0-9+deb11u1
1.4.0-9+deb11u2
1
ghcr.io/lsst-sqre/strimzi-registry-operator:0.6.07e25f7048aff
pam@1.4.0-9+deb11u1
1.4.0-9+deb11u2
1
ghcr.io/mastodon/mastodon:v4.1.26b18e6d0eda4
pam@1.4.0-9+deb11u1
1.4.0-9+deb11u2
1
ghcr.io/melodyyangaws/hive-metastore:3.0.0e949b0f733f0
pam@1.4.0-9+deb11u1
1.4.0-9+deb11u2
1
ghcr.io/mroxso/pollstr:latest0b4f97faa3d0
pam@1.4.0-9+deb11u1
1.4.0-9+deb11u2
1
ghcr.io/nathanvaughn/webtrees:2.0.1969423a100fab
pam@1.4.0-9+deb11u1
1.4.0-9+deb11u2
1
ghcr.io/openlit/openlit:1.24.02434560e8f0e
pam@1.4.0-9+deb11u1
1.4.0-9+deb11u2
1
ghcr.io/paperless-ngx/paperless-ngx:1.8.09bbc9a90641e
pam@1.4.0-9+deb11u1
1.4.0-9+deb11u2
1
ghcr.io/porelli/firefox-sync:syncstorage-rs-mysql-0.18.27d244e514216
pam@1.4.0-9+deb11u1
1.4.0-9+deb11u2
1
ghcr.io/privacyengineering/hawk-monitor:master13309f068a56
pam@1.4.0-9+deb11u1
1.4.0-9+deb11u2
1
ghcr.io/remla23-team17/app:1.0.05816dbddf47d
pam@1.4.0-9+deb11u1
1.4.0-9+deb11u2
1
ghcr.io/remla23-team17/model-service:1.0.0aa59fe2c4f6a
pam@1.4.0-9+deb11u1
1.4.0-9+deb11u2
1
ghcr.io/rivals-space/rivals-mastodon:1.6.143b23d55e4be
pam@1.4.0-9+deb11u1
1.4.0-9+deb11u2
1
ghcr.io/rodg/nodecg-base:latest31be4bf87070
pam@1.4.0-9+deb11u1
1.4.0-9+deb11u2
1
ghcr.io/savonet/liquidsoap:v2.0.19e08148e1055
pam@1.4.0-9+deb11u1
1.4.0-9+deb11u2
1
ghcr.io/sergelogvinov/keydb:6.3.376a19ddc3626
pam@1.4.0-9+deb11u1
1.4.0-9+deb11u2
1
ghcr.io/simoncaron/velero-notifications:1.0.0d058963d4de7
pam@1.4.0-9+deb11u1
1.4.0-9+deb11u2
1
ghcr.io/volosoft/eshoponabp/app-authserver:1.0.022ce496c67d7
pam@1.4.0-9+deb11u1
1.4.0-9+deb11u2
1
ghcr.io/volosoft/eshoponabp/app-publicweb:1.0.07e53010dda55
pam@1.4.0-9+deb11u1
1.4.0-9+deb11u2
1

syft 1.42.1 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.