DLA-4429-1

Unscored

Advisory

Published 31 Dec 2025In the index since 6 Sept 2026

Severity: Unscored; worst across findings
CVSS: —; base score, highest
EPSS: 0.006; 48th percentile
CISA KEV: Not listed; no confirmed exploitation
Charts affected: 52; of 17,781 indexed, latest versions
Container images: 59; deployed by those charts
Fix available: 1 of 1; affected package

imagemagick - security update

Carried by container images the latest versions of 52 of 17,781 indexed charts deploy, on 59 images.

Affected package	Affected versions	Fixed in	Images
imagemagickdeb	8:6.9.11.60+dfsg-1.3, 8:6.9.11.60+dfsg-1.3+deb11u1, 8:6.9.11.60+dfsg-1.3+deb11u4, 8:6.9.11.60+dfsg-1.3+deb11u5	8:6.9.11.60+dfsg-1.3+deb11u8	59

OSV records: DLA-4429-1

Charts affected

52 by stars

Chart

Latest

Affected images

Radar Score

wp-gats-helmwordpress-gatsby

0.0.1

1 of 3 See more

wp-gats-helm wordpress-gatsby 0.0.1

1 of the 3 container images this version deploys carry DLA-4429-1.

Container image	Digest	Package	Fixed in
library/wordpress :6.0.0-php8.0-apache	277c6c25980f	imagemagick@8:6.9.11.60+dfsg-1.3	8:6.9.11.60+dfsg-1.3+deb11u8

Open the chart page →

2,021

enterprise-gatewayzeet

3.2.2

1 of 2 See more

enterprise-gateway zeet 3.2.2

1 of the 2 container images this version deploys carry DLA-4429-1.

Container image	Digest	Package	Fixed in
elyra/kernel-image-puller :3.2.2	c922f1f1646a	imagemagick@8:6.9.11.60+dfsg-1.3+deb11u1	8:6.9.11.60+dfsg-1.3+deb11u8

Open the chart page →

1,838

Container images carrying it

59 by charts deploying them

A fixed version is listed for 1 of the 1 affected package.

Container image	Digest	Package	Fixed in	Used by
ldapaccountmanager/lam :8.0.1	d46cf25d1dda	imagemagick@8:6.9.11.60+dfsg-1.3	8:6.9.11.60+dfsg-1.3+deb11u8	2
pecan/bety :5.4.1	f825d480cd62	imagemagick@8:6.9.11.60+dfsg-1.3	8:6.9.11.60+dfsg-1.3+deb11u8	2
yzhou442/equiz :latest	a3f7ca69e28d	imagemagick@8:6.9.11.60+dfsg-1.3	8:6.9.11.60+dfsg-1.3+deb11u8	2
allegroai/clearml-serving-inference :1.3.0	fca885e8cfc6	imagemagick@8:6.9.11.60+dfsg-1.3+deb11u1	8:6.9.11.60+dfsg-1.3+deb11u8	1
allegroai/clearml-serving-statistics :1.3.0	c58d9da7bdf8	imagemagick@8:6.9.11.60+dfsg-1.3+deb11u1	8:6.9.11.60+dfsg-1.3+deb11u8	1
apache/superset :9cdaa280429ec297db16d56c94fd77b5d2aff107	975ab033580d	imagemagick@8:6.9.11.60+dfsg-1.3	8:6.9.11.60+dfsg-1.3+deb11u8	1
archish27/python-fastapi-postgres :latest	6610071a2101	imagemagick@8:6.9.11.60+dfsg-1.3	8:6.9.11.60+dfsg-1.3+deb11u8	1
assistiot/resource-provisioning_prc :1.0.0	8b5d118bdf0e	imagemagick@8:6.9.11.60+dfsg-1.3+deb11u1	8:6.9.11.60+dfsg-1.3+deb11u8	1
azhar008/flaskapplication :latest	a1e827b0adea	imagemagick@8:6.9.11.60+dfsg-1.3	8:6.9.11.60+dfsg-1.3+deb11u8	1
buntha/mlflow :2.1.1	154542cc3083	imagemagick@8:6.9.11.60+dfsg-1.3	8:6.9.11.60+dfsg-1.3+deb11u8	1
danuk/telegram-sender :0.0.1	026560388070	imagemagick@8:6.9.11.60+dfsg-1.3	8:6.9.11.60+dfsg-1.3+deb11u8	1
douz/helpdesk :latest	4384103d0219	imagemagick@8:6.9.11.60+dfsg-1.3	8:6.9.11.60+dfsg-1.3+deb11u8	1
elyra/kernel-image-puller :3.2.2	c922f1f1646a	imagemagick@8:6.9.11.60+dfsg-1.3+deb11u1	8:6.9.11.60+dfsg-1.3+deb11u8	1
erlangsolutions/wombatoam :4.1.28	4680c990147a	imagemagick@8:6.9.11.60+dfsg-1.3	8:6.9.11.60+dfsg-1.3+deb11u8	1
factly/hunting :0.2.0-stagv1.2	ca5bc71d1d5c	imagemagick@8:6.9.11.60+dfsg-1.3	8:6.9.11.60+dfsg-1.3+deb11u8	1
fanzynoodle/smeejas :0.0.1	5f9916c1a287	imagemagick@8:6.9.11.60+dfsg-1.3	8:6.9.11.60+dfsg-1.3+deb11u8	1
golenski/db-init :1.0.0	86ca17cd3063	imagemagick@8:6.9.11.60+dfsg-1.3+deb11u4	8:6.9.11.60+dfsg-1.3+deb11u8	1
ha33ona/python :test	6affdfc644d0	imagemagick@8:6.9.11.60+dfsg-1.3	8:6.9.11.60+dfsg-1.3+deb11u8	1
helga09/shoes_ukr :v1.1.1	7999bc8b77c0	imagemagick@8:6.9.11.60+dfsg-1.3+deb11u1	8:6.9.11.60+dfsg-1.3+deb11u8	1
kporwit/vinyl_lib_app :v0.1.1	217de0302218	imagemagick@8:6.9.11.60+dfsg-1.3	8:6.9.11.60+dfsg-1.3+deb11u8	1
library/python :3.12.9-bullseye	ed4450bab88f	imagemagick@8:6.9.11.60+dfsg-1.3+deb11u4	8:6.9.11.60+dfsg-1.3+deb11u8	1
library/wordpress :6.0.0-php8.0-apache	277c6c25980f	imagemagick@8:6.9.11.60+dfsg-1.3	8:6.9.11.60+dfsg-1.3+deb11u8	1
maissacrement/pock8snodejs :0.0.1	6da0db1159da	imagemagick@8:6.9.11.60+dfsg-1.3+deb11u1	8:6.9.11.60+dfsg-1.3+deb11u8	1
mautic/mautic :v4-apache	94ea4acf4049	imagemagick@8:6.9.11.60+dfsg-1.3+deb11u5	8:6.9.11.60+dfsg-1.3+deb11u8	1
mnaggar3396/python-app :latest	371d8ed84b15	imagemagick@8:6.9.11.60+dfsg-1.3	8:6.9.11.60+dfsg-1.3+deb11u8	1
moreillon/face-recognition-fastapi :x86	bacb2ddd8394	imagemagick@8:6.9.11.60+dfsg-1.3	8:6.9.11.60+dfsg-1.3+deb11u8	1
nathanielvarona/pritunl-slack-app :0.1.10	b746a34e5597	imagemagick@8:6.9.11.60+dfsg-1.3	8:6.9.11.60+dfsg-1.3+deb11u8	1
owanio1992/devpi :6.16.0	4ade8e1e4d7e	imagemagick@8:6.9.11.60+dfsg-1.3+deb11u5	8:6.9.11.60+dfsg-1.3+deb11u8	1
phntom/email-manager :0.1.22	d8e2a9f2f085	imagemagick@8:6.9.11.60+dfsg-1.3	8:6.9.11.60+dfsg-1.3+deb11u8	1
phntom/external-dns-host-network :0.0.12	3adadbac8443	imagemagick@8:6.9.11.60+dfsg-1.3	8:6.9.11.60+dfsg-1.3+deb11u8	1
robmarkcole/deepstack-ui :latest	410275726459	imagemagick@8:6.9.11.60+dfsg-1.3	8:6.9.11.60+dfsg-1.3+deb11u8	1
robotshop/rs-payment :latest	774b52c6180d	imagemagick@8:6.9.11.60+dfsg-1.3	8:6.9.11.60+dfsg-1.3+deb11u8	1
roundcube/roundcubemail :1.5.3-apache	a8ea6fd751dc	imagemagick@8:6.9.11.60+dfsg-1.3	8:6.9.11.60+dfsg-1.3+deb11u8	1
socialmediamacroscope/classification_predict :0.1.2	4fb86885d64d	imagemagick@8:6.9.11.60+dfsg-1.3	8:6.9.11.60+dfsg-1.3+deb11u8	1
socialmediamacroscope/classification_split :0.1.2	4bfda60829fe	imagemagick@8:6.9.11.60+dfsg-1.3	8:6.9.11.60+dfsg-1.3+deb11u8	1
socialmediamacroscope/classification_train :0.1.2	07477060bba8	imagemagick@8:6.9.11.60+dfsg-1.3	8:6.9.11.60+dfsg-1.3+deb11u8	1
socialmediamacroscope/clowder_create_collection :0.1.0	c969f7677983	imagemagick@8:6.9.11.60+dfsg-1.3+deb11u1	8:6.9.11.60+dfsg-1.3+deb11u8	1
socialmediamacroscope/clowder_create_dataset :0.1.0	9b4211832429	imagemagick@8:6.9.11.60+dfsg-1.3+deb11u1	8:6.9.11.60+dfsg-1.3+deb11u8	1
socialmediamacroscope/clowder_create_space :0.1.0	999f2ff2c128	imagemagick@8:6.9.11.60+dfsg-1.3+deb11u1	8:6.9.11.60+dfsg-1.3+deb11u8	1
socialmediamacroscope/clowder_list :0.1.0	51cb17626519	imagemagick@8:6.9.11.60+dfsg-1.3+deb11u1	8:6.9.11.60+dfsg-1.3+deb11u8	1
socialmediamacroscope/clowder_upload_file :0.1.2	74e35f64db68	imagemagick@8:6.9.11.60+dfsg-1.3+deb11u1	8:6.9.11.60+dfsg-1.3+deb11u8	1
socialmediamacroscope/screen_name_prompt :0.1.2	724f3f5702e0	imagemagick@8:6.9.11.60+dfsg-1.3	8:6.9.11.60+dfsg-1.3+deb11u8	1
stratospire/activityrelay :0.2.3	a4c34cb01117	imagemagick@8:6.9.11.60+dfsg-1.3	8:6.9.11.60+dfsg-1.3+deb11u8	1
svtechnmaa/svtech_icingaweb2 :v1.0.2	a59d0b81dde2	imagemagick@8:6.9.11.60+dfsg-1.3+deb11u1	8:6.9.11.60+dfsg-1.3+deb11u8	1
youssef11gaber10/deployment-ui-react :latest	ba6853e35c60	imagemagick@8:6.9.11.60+dfsg-1.3	8:6.9.11.60+dfsg-1.3+deb11u8	1
gcr.io/ml-pipeline/metadata-writer :2.0.0-alpha.5	ec3ae9f6df47	imagemagick@8:6.9.11.60+dfsg-1.3	8:6.9.11.60+dfsg-1.3+deb11u8	1
ghcr.io/0xemma/reddark :main	2a115e991894	imagemagick@8:6.9.11.60+dfsg-1.3+deb11u1	8:6.9.11.60+dfsg-1.3+deb11u8	1
ghcr.io/codingducksrl/wordpress :6.0.2	3113c0960507	imagemagick@8:6.9.11.60+dfsg-1.3	8:6.9.11.60+dfsg-1.3+deb11u8	1
ghcr.io/facebook/threatexchange/hma :1.0.17	84d09c6b75a7	imagemagick@8:6.9.11.60+dfsg-1.3+deb11u4	8:6.9.11.60+dfsg-1.3+deb11u8	1
ghcr.io/leoquote/tinyproxy_exporter :master	6b4103d88dbb	imagemagick@8:6.9.11.60+dfsg-1.3	8:6.9.11.60+dfsg-1.3+deb11u8	1