DLA-4306-1
UnscoredAdvisory
Published 21 Sept 2025In the index since 5 Sept 2026
- Severity
- Unscored
- worst across findings
- CVSS
- —
- base score, highest
- EPSS
- 0.005
- 39th percentile
- CISA KEV
- Not listed
- no confirmed exploitation
- Charts affected
- 464
- of 17,781 indexed, latest versions
- Container images
- 479
- deployed by those charts
- Fix available
- 1 of 1
- affected package
pam - security update
Carried by container images the latest versions of 464 of 17,781 indexed charts deploy, on 479 images.
| Affected package | Affected versions | Fixed in | Images |
|---|---|---|---|
| pamdeb | 1.4.0-9, 1.4.0-9+deb11u1 | 1.4.0-9+deb11u2 | 479 |
- OSV records
- DLA-4306-1
Charts affected
464 by stars
| Chart | Latest | Affected images | Radar Score |
|---|---|---|---|
| homarrvhdirkVerified publisher | 0.1.5 | 1 of 1See more | 2,789 |
| vinyl-lib-chartvinyl-libVerified publisher | 0.1.0 | 1 of 1See more | 3,392 |
| hedgedocvista | 0.1.1 | 1 of 1See more | 3,118 |
| resultappvoting-app-helm-charts-repoVerified publisher | 1.0.0 | 1 of 1See more | 1,263 |
| voteappvoting-app-helm-charts-repoVerified publisher | 1.0.0 | 2 of 5See more | 8,262 |
| resultappvoting-app-helm-charts-repo-cloudVerified publisher | 1.0.0 | 1 of 1See more | 1,263 |
| voteappvoting-app-helm-charts-repo-cloudVerified publisher | 1.0.0 | 2 of 5See more | 8,262 |
| apiwbstack | 0.36.0 | 1 of 1See more | 2,019 |
| mediawikiwbstack | 0.14.0 | 1 of 1See more | 2,132 |
| drillwearefrank | 1.3.6 | 2 of 3See more | 9,397 |
| webresourcecataloguswebresourcecatalogus | 1.1.0 | 1 of 4See more | 7,552 |
| vaultwardenwitcom-gmbh | 0.2.0 | 1 of 2See more | 1,585 |
| wp-gats-helmwordpress-gatsby | 0.0.1 | 1 of 3See more | 2,021 |
| enterprise-gatewayzeet | 3.2.2 | 1 of 2See more | 1,838 |
Container images carrying it
479 by charts deploying them
A fixed version is listed for 1 of the 1 affected package.
| Container image | Digest | Package | Fixed in | Used by |
|---|---|---|---|---|
| gradiant/ | 75277742fc8a | pam | 1.4.0-9+deb11u2 | 16 |
| wurstmeister/ | 2d4bbf9cc83d | pam | 1.4.0-9+deb11u2 | 7 |
| bitnamilegacy/ | 42319decb591 | pam | 1.4.0-9+deb11u2 | 6 |
| library/ | 2bcabc23b454 | pam | 1.4.0-9+deb11u2 | 6 |
| library/ | fc5ecd863862 | pam | 1.4.0-9+deb11u2 | 5 |
| postgis/ | 01a6a70e41e6 | pam | 1.4.0-9+deb11u2 | 5 |
| bitnamilegacy/ | 5dba7e6a514d | pam | 1.4.0-9+deb11u2 | 4 |
| kodekloud/ | e510023fdf38 | pam | 1.4.0-9+deb11u2 | 4 |
| ncsa/ | cc46a03e16ed | pam | 1.4.0-9+deb11u2 | 4 |
| bitnamilegacy/ | 016dce036593 | pam | 1.4.0-9+deb11u2 | 3 |
| bitnamilegacy/ | cc301eef7436 | pam | 1.4.0-9+deb11u2 | 3 |
| grafana/ | 626900031c4e | pam | 1.4.0-9+deb11u2 | 3 |
| library/ | 299ebda2c7e3 | pam | 1.4.0-9+deb11u2 | 3 |
| library/ | 3162a6ead070 | pam | 1.4.0-9+deb11u2 | 3 |
| library/ | 8c5f7881cebb | pam | 1.4.0-9+deb11u2 | 3 |
| phpmyadmin/ | ae6dadd9cf3c | pam | 1.4.0-9+deb11u2 | 3 |
| siddharth67/ | 4e1151ea5774 | pam | 1.4.0-9+deb11u2 | 3 |
| signoz/ | fcc4a3288154 | pam | 1.4.0-9+deb11u2 | 3 |
| supertokens/ | 18d34c781347 | pam | 1.4.0-9+deb11u2 | 3 |
| gcr.io/ | 2a685a38dd01 | pam | 1.4.0-9+deb11u2 | 3 |
| 1password/ | 29d0c6cb67eb | pam | 1.4.0-9+deb11u2 | 2 |
| assistiot/ | ad8f72108636 | pam | 1.4.0-9+deb11u2 | 2 |
| bitnamilegacy/ | d17df1f9d745 | pam | 1.4.0-9+deb11u2 | 2 |
| bitnamilegacy/ | a0a972324d93 | pam | 1.4.0-9+deb11u2 | 2 |
| bitnamilegacy/ | 2cb5982dcbf4 | pam | 1.4.0-9+deb11u2 | 2 |
| bitnamilegacy/ | 7e7ebb082031 | pam | 1.4.0-9+deb11u2 | 2 |
| bitnamilegacy/ | 10ed1ea3c8d1 | pam | 1.4.0-9+deb11u2 | 2 |
| blakeblackshear/ | 8330b0a265b8 | pam | 1.4.0-9+deb11u2 | 2 |
| cculianu/ | 6445fb75abea | pam | 1.4.0-9+deb11u2 | 2 |
| dependencytrack/ | 485ac0952c02 | pam | 1.4.0-9+deb11u2 | 2 |
| falcosecurity/ | 0d427b8d5fc6 | pam | 1.4.0-9+deb11u2 | 2 |
| free5gc/ | b6b362a39fdd | pam | 1.4.0-9+deb11u2 | 2 |
| free5gc/ | 9adeb18492cb | pam | 1.4.0-9+deb11u2 | 2 |
| gradiant/ | fbd10c017541 | pam | 1.4.0-9+deb11u2 | 2 |
| grafana/ | a136c6208aa3 | pam | 1.4.0-9+deb11u2 | 2 |
| ilum/ | 42b6d774c37d | pam | 1.4.0-9+deb11u2 | 2 |
| kodekloud/ | 3a856afb02a3 | pam | 1.4.0-9+deb11u2 | 2 |
| ldapaccountmanager/ | d46cf25d1dda | pam | 1.4.0-9+deb11u2 | 2 |
| library/ | 34d37131366c | pam | 1.4.0-9+deb11u2 | 2 |
| library/ | 52d3dec8d455 | pam | 1.4.0-9+deb11u2 | 2 |
| library/ | 56a9453c4064 | pam | 1.4.0-9+deb11u2 | 2 |
| library/ | f6daac2445b0 | pam | 1.4.0-9+deb11u2 | 2 |
| passbolt/ | 655547e17263 | pam | 1.4.0-9+deb11u2 | 2 |
| pecan/ | f825d480cd62 | pam | 1.4.0-9+deb11u2 | 2 |
| postgis/ | a2fc46b52819 | pam | 1.4.0-9+deb11u2 | 2 |
| scorpiobroker/ | 01e11d800459 | pam | 1.4.0-9+deb11u2 | 2 |
| scorpiobroker/ | 3f05a113a4be | pam | 1.4.0-9+deb11u2 | 2 |
| scorpiobroker/ | 5073ceef2fa0 | pam | 1.4.0-9+deb11u2 | 2 |
| scorpiobroker/ | 62dae3dd0eeb | pam | 1.4.0-9+deb11u2 | 2 |
| scorpiobroker/ | a2cfcf0947fd | pam | 1.4.0-9+deb11u2 | 2 |