DLA-4348-1
UnscoredAdvisory
Published 26 Oct 2025In the index since 6 Sept 2026
- Severity
- Unscored
- worst across findings
- CVSS
- —
- base score, highest
- EPSS
- 0.005
- 40th percentile
- CISA KEV
- Not listed
- no confirmed exploitation
- Charts affected
- 14
- of 17,781 indexed, latest versions
- Container images
- 14
- deployed by those charts
- Fix available
- 1 of 1
- affected package
python-pip - security update
Carried by container images the latest versions of 14 of 17,781 indexed charts deploy, on 14 images.
| Affected package | Affected versions | Fixed in | Images |
|---|---|---|---|
| python-pipdeb | 20.3.4-4, 20.3.4-4+deb11u1 | 20.3.4-4+deb11u2 | 14 |
- OSV records
- DLA-4348-1
Charts affected
14 by stars
| Chart | Latest | Affected images | Radar Score |
|---|---|---|---|
| frigateblakeblackshear | 7.8.0 | 1 of 1See more | 3,004 |
| whisperandrenarchyVerified publisher | 1.0.0 | 1 of 1See more | 687 |
| syncstorage-rschristianhuthVerified publisher | 6.1.1 | 1 of 2See more | 693 |
| pgbenchcloudnative-pgVerified publisher | 0.1.0 | 1 of 1See more | 2,713 |
| cubefscubefs | 3.2.0 | 2 of 10See more | 15,891 |
| genesis-generatorethereum-helm-chartsVerified publisher | 0.2.3 | 1 of 2See more | 3,135 |
| paperlessgeek-cookbookVerified publisher | 9.2.0 | 1 of 1See more | 3,924 |
| resource-provisioningassist-iot-resource-provisioning | 1.0.0 | 1 of 7See more | 8,032 |
| frigatebryopsida | 0.2.1 | 1 of 2See more | 2,573 |
| pgdump-to-s3duck-helm | 0.1.4 | 1 of 1See more | 1,362 |
| frigateimprowisedVerified publisher | 1.1.0 | 1 of 1See more | 2,159 |
| frigatek8s-home-lab-repo | 9.1.1 | 1 of 1See more | 2,370 |
| syncstorageschichtelVerified publisher | 0.1.1 | 1 of 1See more | 1,318 |
| frigatesmarthallVerified publisher | 1.0.6 | 1 of 1See more | 2,243 |
Container images carrying it
14 by charts deploying them
A fixed version is listed for 1 of the 1 affected package.
| Container image | Digest | Package | Fixed in | Used by |
|---|---|---|---|---|
| blakeblackshear/ | 8330b0a265b8 | python-pip | 20.3.4-4+deb11u2 | 2 |
| assistiot/ | 8b5d118bdf0e | python-pip | 20.3.4-4+deb11u2 | 1 |
| chubaofs/ | 15ff74209ce7 | python-pip | 20.3.4-4+deb11u2 | 1 |
| chubaofs/ | 205030e045f2 | python-pip | 20.3.4-4+deb11u2 | 1 |
| mozilla/ | 93752877dced | python-pip | 20.3.4-4+deb11u2 | 1 |
| rhasspy/ | 80b99ddeef6c | python-pip | 20.3.4-4+deb11u2 | 1 |
| skylenet/ | 210353ce7c89 | python-pip | 20.3.4-4+deb11u2 | 1 |
| ghcr.io/ | 22e3d0b486df | python-pip | 20.3.4-4+deb11u2 | 1 |
| ghcr.io/ | 7a5244e4c8dc | python-pip | 20.3.4-4+deb11u2 | 1 |
| ghcr.io/ | c862771e38e8 | python-pip | 20.3.4-4+deb11u2 | 1 |
| ghcr.io/ | b3b30d04b362 | python-pip | 20.3.4-4+deb11u2 | 1 |
| ghcr.io/ | c42c0946bd0f | python-pip | 20.3.4-4+deb11u2 | 1 |
| ghcr.io/ | 9bbc9a90641e | python-pip | 20.3.4-4+deb11u2 | 1 |
| ghcr.io/ | 7d244e514216 | python-pip | 20.3.4-4+deb11u2 | 1 |