DLA-4485-1

Unscored

Advisory

Published 20 Feb 2026In the index since 5 Sept 2026

Severity: Unscored; worst across findings
CVSS: —; base score, highest
EPSS: —; probability of exploitation
CISA KEV: Not listed; no confirmed exploitation
Charts affected: 401; of 17,787 indexed, latest versions
Container images: 425; deployed by those charts
Fix available: 1 of 1; affected package

ca-certificates - CA certificates update

Carried by container images the latest versions of 401 of 17,787 indexed charts deploy, on 425 images.

Affected package	Affected versions	Fixed in	Images
ca-certificatesdeb	20210119	20230311+deb12u1~deb11u1	425

OSV records: DLA-4485-1

Charts affected

401 by stars

Chart

Latest

Affected images

Radar Score

enterprise-gatewayzeet

3.2.2

1 of 2 See more

enterprise-gateway zeet 3.2.2

1 of the 2 container images this version deploys carry DLA-4485-1.

Container image	Digest	Package	Fixed in
elyra/kernel-image-puller :3.2.2	c922f1f1646a	ca-certificates@20210119	20230311+deb12u1~deb11u1

Open the chart page →

1,838

Container images carrying it

425 by charts deploying them

A fixed version is listed for 1 of the 1 affected package.

Container image	Digest	Package	Fixed in	Used by
ghcr.io/volosoft/eshoponabp/gateway-web-public :1.0.0	50cab15c80d9	ca-certificates@20210119	20230311+deb12u1~deb11u1	1
ghcr.io/volosoft/eshoponabp/service-administration :1.0.0	206a9bee17a8	ca-certificates@20210119	20230311+deb12u1~deb11u1	1
ghcr.io/volosoft/eshoponabp/service-basket :1.0.0	dd5ce454072e	ca-certificates@20210119	20230311+deb12u1~deb11u1	1
ghcr.io/volosoft/eshoponabp/service-catalog :1.0.0	7ecb00f53d99	ca-certificates@20210119	20230311+deb12u1~deb11u1	1
ghcr.io/volosoft/eshoponabp/service-identity :1.0.0	e53bf47b62d0	ca-certificates@20210119	20230311+deb12u1~deb11u1	1
ghcr.io/volosoft/eshoponabp/service-ordering :1.0.1	5e836b17337f	ca-certificates@20210119	20230311+deb12u1~deb11u1	1
ghcr.io/volosoft/eshoponabp/service-payment :1.0.0	2ca91145099c	ca-certificates@20210119	20230311+deb12u1~deb11u1	1
ghcr.io/wbstack/api :8x.9.11	eee94f9f7a53	ca-certificates@20210119	20230311+deb12u1~deb11u1	1
ghcr.io/wbstack/mediawiki :1.37-7.4-20220621-fp-beta-0	c3012c8a34b4	ca-certificates@20210119	20230311+deb12u1~deb11u1	1
ghcr.io/zcube/bitnami-compat/redis :7.0-debian-11-r55	118a403046f7	ca-certificates@20210119	20230311+deb12u1~deb11u1	1
mcr.microsoft.com/oss/azure/aad-pod-identity/nmi :v1.8.17	77788bf38938	ca-certificates@20210119	20230311+deb12u1~deb11u1	1
public.ecr.aws/jtekt-corporation/annotation-tool :ef974ad9	abd817eb6845	ca-certificates@20210119	20230311+deb12u1~deb11u1	1
public.ecr.aws/jtekt-corporation/polygonal-annotation-tool :a3fa9360	56efd38500d6	ca-certificates@20210119	20230311+deb12u1~deb11u1	1
public.ecr.aws/r3m4q3r9/pleco :0.24.0	651739583336	ca-certificates@20210119	20230311+deb12u1~deb11u1	1
public.ecr.aws/t0u0d5o5/ecr_authenticator :latest	077e4e57e41c	ca-certificates@20210119	20230311+deb12u1~deb11u1	1
quay.io/bentoml/yatai :0.4.6	14b482c1f1b8	ca-certificates@20210119	20230311+deb12u1~deb11u1	1
quay.io/fluentd_elasticsearch/fluentd :v4.2.3	99079df58561	ca-certificates@20210119	20230311+deb12u1~deb11u1	1
quay.io/hewlettpackardenterprise/squest :2.8.4	65694109877e	ca-certificates@20210119	20230311+deb12u1~deb11u1	1
quay.io/jupyterhub/k8s-hub :3.2.1	2528c6e57587	ca-certificates@20210119	20230311+deb12u1~deb11u1	1
quay.io/mongodb/farm-intro-backend :0.1	1a9ce0b8fbd4	ca-certificates@20210119	20230311+deb12u1~deb11u1	1
quay.io/nird-toolkit/jupyterhub-server :20221215-e6aa80e	cae8c0622533	ca-certificates@20210119	20230311+deb12u1~deb11u1	1
quay.io/snowdrop/spring-boot-rest-http-example :2.7	b1a054613715	ca-certificates@20210119	20230311+deb12u1~deb11u1	1
registry.gitlab.com/open-forms/forms-catalogue :latest	4eaf9c911f33	ca-certificates@20210119	20230311+deb12u1~deb11u1	1
registry.gitlab.com/open-forms/request-registry :latest	0886cbbc5f95	ca-certificates@20210119	20230311+deb12u1~deb11u1	1
registry.k8s.io/git-sync/git-sync :v3.6.9	6fa9042f6128	ca-certificates@20210119	20230311+deb12u1~deb11u1	1