StackRadar

DLA-4449-1

Unscored

Advisory

Published 24 Jan 2026In the index since 6 Sept 2026
Severity
Unscored
worst across findings
CVSS
base score, highest
EPSS
0.008
55th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
9
of 17,781 indexed, latest versions
Container images
10
deployed by those charts
Fix available
1 of 1
affected package

zvbi - security update

Carried by container images the latest versions of 9 of 17,781 indexed charts deploy, on 10 images.

Affected packageAffected versionsFixed inImages
zvbideb0.2.35-180.2.35-18+deb11u110
OSV records
DLA-4449-1

Charts affected

9 by stars
ChartLatestAffected imagesRadar Score
servarrservarr1.0.21 of 10See more

servarr servarr 1.0.2

1 of the 10 container images this version deploys carry DLA-4449-1.

Container imageDigestPackageFixed in
jellyfin/jellyfin:10.8.1305a9734d7e83
zvbi@0.2.35-18
0.2.35-18+deb11u1

Open the chart page →

14,238
kobotoolboxone-acre-fundVerified publisher0.7.41 of 9See more

kobotoolbox one-acre-fund 0.7.4

1 of the 9 container images this version deploys carry DLA-4449-1.

Container imageDigestPackageFixed in
kobotoolbox/kpi:2.022.24dbcacc01bccd4
zvbi@0.2.35-18
0.2.35-18+deb11u1

Open the chart page →

18,517
mastodondefault-ghVerified publisher0.3.11 of 3See more

mastodon default-gh 0.3.1

1 of the 3 container images this version deploys carry DLA-4449-1.

Container imageDigestPackageFixed in
ghcr.io/mastodon/mastodon:v4.1.26b18e6d0eda4
zvbi@0.2.35-18
0.2.35-18+deb11u1

Open the chart page →

5,056
paperlessgeek-cookbookVerified publisher9.2.01 of 1See more

paperless geek-cookbook 9.2.0

1 of the 1 container images this version deploys carry DLA-4449-1.

Container imageDigestPackageFixed in
ghcr.io/paperless-ngx/paperless-ngx:1.8.09bbc9a90641e
zvbi@0.2.35-18
0.2.35-18+deb11u1

Open the chart page →

3,924
jellyfingeek-cookbookVerified publisher9.5.31 of 1See more

jellyfin geek-cookbook 9.5.3

1 of the 1 container images this version deploys carry DLA-4449-1.

Container imageDigestPackageFixed in
jellyfin/jellyfin:10.8.1ee24f4459a40
zvbi@0.2.35-18
0.2.35-18+deb11u1

Open the chart page →

1,381
motionlinuxoid690.1.01 of 1See more

motion linuxoid69 0.1.0

1 of the 1 container images this version deploys carry DLA-4449-1.

Container imageDigestPackageFixed in
ghcr.io/linuxoid69/motion:4.7.0-0.1.0f0f000c3fc47
zvbi@0.2.35-18
0.2.35-18+deb11u1

Open the chart page →

494
liquidsoapnorth141.0.01 of 1See more

liquidsoap north14 1.0.0

1 of the 1 container images this version deploys carry DLA-4449-1.

Container imageDigestPackageFixed in
ghcr.io/savonet/liquidsoap:v2.0.19e08148e1055
zvbi@0.2.35-18
0.2.35-18+deb11u1

Open the chart page →

2,954
libretimepodzone-chartsVerified publisher0.4.12 of 9See more

libretime podzone-charts 0.4.1

2 of the 9 container images this version deploys carry DLA-4449-1.

Container imageDigestPackageFixed in
ghcr.io/libretime/libretime-analyzer:latest3d5e236216ad
zvbi@0.2.35-18
0.2.35-18+deb11u1
ghcr.io/libretime/libretime-playout:latest71a8706531aa
zvbi@0.2.35-18
0.2.35-18+deb11u1

Open the chart page →

11,149
mastodonrivals-spaceVerified publisher3.1.21 of 3See more

mastodon rivals-space 3.1.2

1 of the 3 container images this version deploys carry DLA-4449-1.

Container imageDigestPackageFixed in
ghcr.io/rivals-space/rivals-mastodon:1.6.143b23d55e4be
zvbi@0.2.35-18
0.2.35-18+deb11u1

Open the chart page →

6,026

Container images carrying it

10 by charts deploying them

A fixed version is listed for 1 of the 1 affected package.

Container imageDigestPackageFixed inUsed by
jellyfin/jellyfin:10.8.1305a9734d7e83
zvbi@0.2.35-18
0.2.35-18+deb11u1
1
jellyfin/jellyfin:10.8.1ee24f4459a40
zvbi@0.2.35-18
0.2.35-18+deb11u1
1
kobotoolbox/kpi:2.022.24dbcacc01bccd4
zvbi@0.2.35-18
0.2.35-18+deb11u1
1
ghcr.io/libretime/libretime-analyzer:latest3d5e236216ad
zvbi@0.2.35-18
0.2.35-18+deb11u1
1
ghcr.io/libretime/libretime-playout:latest71a8706531aa
zvbi@0.2.35-18
0.2.35-18+deb11u1
1
ghcr.io/linuxoid69/motion:4.7.0-0.1.0f0f000c3fc47
zvbi@0.2.35-18
0.2.35-18+deb11u1
1
ghcr.io/mastodon/mastodon:v4.1.26b18e6d0eda4
zvbi@0.2.35-18
0.2.35-18+deb11u1
1
ghcr.io/paperless-ngx/paperless-ngx:1.8.09bbc9a90641e
zvbi@0.2.35-18
0.2.35-18+deb11u1
1
ghcr.io/rivals-space/rivals-mastodon:1.6.143b23d55e4be
zvbi@0.2.35-18
0.2.35-18+deb11u1
1
ghcr.io/savonet/liquidsoap:v2.0.19e08148e1055
zvbi@0.2.35-18
0.2.35-18+deb11u1
1

syft 1.42.1 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.