StackRadar

DSA-4349-1

Unscored

Advisory

Published 30 Nov 2018In the index since 8 Sept 2026
Severity
Unscored
worst across findings
CVSS
—
base score, highest
EPSS
0.150
97th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
25
of 17,781 indexed, latest versions
Container images
23
deployed by those charts
Fix available
1 of 1
affected package

tiff - security update

Carried by container images the latest versions of 25 of 17,781 indexed charts deploy, on 23 images.

Affected packageAffected versionsFixed inImages
tiffdeb4.0.8-2+deb9u1, 4.0.8-2+deb9u24.0.8-2+deb9u423
OSV records
DSA-4349-1

Charts affected

25 by stars
ChartLatestAffected imagesRadar Score
agendaserviceagendaservice1.0.01 of 3See more

agendaservice agendaservice 1.0.0

1 of the 3 container images this version deploys carry DSA-4349-1.

Container imageDigestPackageFixed in
conduction/agendaservice-nginx:lateste1c176458aaf
tiff@4.0.8-2+deb9u2
4.0.8-2+deb9u4

Open the chart page →

7,209
aks-helloworldazure-sample0.1.11 of 1See more

aks-helloworld azure-sample 0.1.1

1 of the 1 container images this version deploys carry DSA-4349-1.

Container imageDigestPackageFixed in
neilpeterson/aks-helloworld:v1fb47732ef36b
tiff@4.0.8-2+deb9u1
4.0.8-2+deb9u4

Open the chart page →

4,269
azure-voteazure-sample0.1.11 of 2See more

azure-vote azure-sample 0.1.1

1 of the 2 container images this version deploys carry DSA-4349-1.

Container imageDigestPackageFixed in
neilpeterson/azure-vote-front:v384062718347c
tiff@4.0.8-2+deb9u1
4.0.8-2+deb9u4

Open the chart page →

5,224
azure-vote-osbaazure-sample0.1.01 of 1See more

azure-vote-osba azure-sample 0.1.0

1 of the 1 container images this version deploys carry DSA-4349-1.

Container imageDigestPackageFixed in
neilpeterson/azure-vote-front:v384062718347c
tiff@4.0.8-2+deb9u1
4.0.8-2+deb9u4

Open the chart page →

4,269
twitter-sentimentazure-sample0.1.02 of 3See more

twitter-sentiment azure-sample 0.1.0

2 of the 3 container images this version deploys carry DSA-4349-1.

Container imageDigestPackageFixed in
neilpeterson/chart-tweet:latest64fd8dab075f
tiff@4.0.8-2+deb9u1
4.0.8-2+deb9u4
neilpeterson/process-tweet:latest39ce9f92e899
tiff@4.0.8-2+deb9u2
4.0.8-2+deb9u4

Open the chart page →

11,833
balance-registrationbalance-registration0.1.01 of 4See more

balance-registration balance-registration 0.1.0

1 of the 4 container images this version deploys carry DSA-4349-1.

Container imageDigestPackageFixed in
conduction/balance-registration-nginx:dev9e24264ea8f3
tiff@4.0.8-2+deb9u2
4.0.8-2+deb9u4

Open the chart page →

8,408
generic-webbryanalves0.2.01 of 1See more

generic-web bryanalves 0.2.0

1 of the 1 container images this version deploys carry DSA-4349-1.

Container imageDigestPackageFixed in
library/nginx:1.13.12b1d09e971889
tiff@4.0.8-2+deb9u2
4.0.8-2+deb9u4

Open the chart page →

961
honeywell-exporterbryanalves0.1.11 of 1See more

honeywell-exporter bryanalves 0.1.1

1 of the 1 container images this version deploys carry DSA-4349-1.

Container imageDigestPackageFixed in
bryanalves/honeywell_exporter:0.0.1195f73dce8b21
tiff@4.0.8-2+deb9u2
4.0.8-2+deb9u4

Open the chart page →

5,437
rtorrentbryanalves0.6.01 of 2See more

rtorrent bryanalves 0.6.0

1 of the 2 container images this version deploys carry DSA-4349-1.

Container imageDigestPackageFixed in
library/nginx:1.13.12b1d09e971889
tiff@4.0.8-2+deb9u2
4.0.8-2+deb9u4

Open the chart page →

961
smart-exporterbryanalves0.2.21 of 1See more

smart-exporter bryanalves 0.2.2

1 of the 1 container images this version deploys carry DSA-4349-1.

Container imageDigestPackageFixed in
bryanalves/smart_exporter:0.2af47dfbb9413
tiff@4.0.8-2+deb9u2
4.0.8-2+deb9u4

Open the chart page →

4,131
checkin-componentcheckin-component0.1.01 of 4See more

checkin-component checkin-component 0.1.0

1 of the 4 container images this version deploys carry DSA-4349-1.

Container imageDigestPackageFixed in
conduction/checkin-component-nginx:dev583d2cd8476c
tiff@4.0.8-2+deb9u2
4.0.8-2+deb9u4

Open the chart page →

8,408
riemanncloudnativeapp0.1.21 of 1See more

riemann cloudnativeapp 0.1.2

1 of the 1 container images this version deploys carry DSA-4349-1.

Container imageDigestPackageFixed in
raykrueger/riemann:0.2.14c8baf3de57bb
tiff@4.0.8-2+deb9u1
4.0.8-2+deb9u4

Open the chart page →

6,497
cgrccommongroundregistratiecomponent0.1.01 of 3See more

cgrc commongroundregistratiecomponent 0.1.0

1 of the 3 container images this version deploys carry DSA-4349-1.

Container imageDigestPackageFixed in
conduction/cgrc-nginx:devd8e23f10e882
tiff@4.0.8-2+deb9u2
4.0.8-2+deb9u4

Open the chart page →

7,572
conduction-uiconduction-ui0.1.01 of 6See more

conduction-ui conduction-ui 0.1.0

1 of the 6 container images this version deploys carry DSA-4349-1.

Container imageDigestPackageFixed in
conduction/conduction-ui-nginx:devd9b38e234de9
tiff@4.0.8-2+deb9u2
4.0.8-2+deb9u4

Open the chart page →

12,907
betaalservicecontacten-catalog1.0.01 of 3See more

betaalservice contacten-catalog 1.0.0

1 of the 3 container images this version deploys carry DSA-4349-1.

Container imageDigestPackageFixed in
conduction/betaalservice-nginx:latestd3577ddd5c67
tiff@4.0.8-2+deb9u2
4.0.8-2+deb9u4

Open the chart page →

7,209
contactmoment-componentcontactmoment-component0.1.01 of 4See more

contactmoment-component contactmoment-component 0.1.0

1 of the 4 container images this version deploys carry DSA-4349-1.

Container imageDigestPackageFixed in
conduction/contactmoment-component-nginx:dev353dc46303ac
tiff@4.0.8-2+deb9u2
4.0.8-2+deb9u4

Open the chart page →

8,408
prometheus-aws-costs-exporterdeliveryheroVerified publisher0.1.51 of 1See more

prometheus-aws-costs-exporter deliveryhero 0.1.5

1 of the 1 container images this version deploys carry DSA-4349-1.

Container imageDigestPackageFixed in
nachomillangarcia/prometheus_aws_cost_exporter:lateste4ce056f2d6d
tiff@4.0.8-2+deb9u2
4.0.8-2+deb9u4

Open the chart page →

3,553
docparserdocparser0.1.01 of 4See more

docparser docparser 0.1.0

1 of the 4 container images this version deploys carry DSA-4349-1.

Container imageDigestPackageFixed in
conduction/docparser-nginx:dev08524d8327b8
tiff@4.0.8-2+deb9u2
4.0.8-2+deb9u4

Open the chart page →

8,408
prometheus-aws-costs-exporterhelm-charts-nr0.1.51 of 1See more

prometheus-aws-costs-exporter helm-charts-nr 0.1.5

1 of the 1 container images this version deploys carry DSA-4349-1.

Container imageDigestPackageFixed in
nachomillangarcia/prometheus_aws_cost_exporter:lateste4ce056f2d6d
tiff@4.0.8-2+deb9u2
4.0.8-2+deb9u4

Open the chart page →

3,553
jenkinsjenkins-x0.10.381 of 2See more

jenkins jenkins-x 0.10.38

1 of the 2 container images this version deploys carry DSA-4349-1.

Container imageDigestPackageFixed in
jenkinsci/jenkins:2.67a1f33f004659
tiff@4.0.8-2+deb9u1
4.0.8-2+deb9u4

Open the chart page →

10,682
kvkkvkservice0.1.01 of 4See more

kvk kvkservice 0.1.0

1 of the 4 container images this version deploys carry DSA-4349-1.

Container imageDigestPackageFixed in
conduction/kvk-nginx:devcf163d2b95b5
tiff@4.0.8-2+deb9u2
4.0.8-2+deb9u4

Open the chart page →

8,534
elasticsearch2ncsaVerified publisher0.2.21 of 2See more

elasticsearch2 ncsa 0.2.2

1 of the 2 container images this version deploys carry DSA-4349-1.

Container imageDigestPackageFixed in
library/elasticsearch:2.4.641ed3a1a16b6
tiff@4.0.8-2+deb9u2
4.0.8-2+deb9u4

Open the chart page →

4,911
polyglotncsaVerified publisher0.1.11 of 18See more

polyglot ncsa 0.1.1

1 of the 18 container images this version deploys carry DSA-4349-1.

Container imageDigestPackageFixed in
ncsapolyglot/converters-avconv:latestc44b22eb58bb
tiff@4.0.8-2+deb9u1
4.0.8-2+deb9u4

Open the chart page →

55,726
panproto-application-nldesign0.1.01 of 5See more

pan proto-application-nldesign 0.1.0

1 of the 5 container images this version deploys carry DSA-4349-1.

Container imageDigestPackageFixed in
conduction/pan-nginx:devaf3e9f551ad1
tiff@4.0.8-2+deb9u2
4.0.8-2+deb9u4

Open the chart page →

8,725
pachydermstatcan0.5.11 of 4See more

pachyderm statcan 0.5.1

1 of the 4 container images this version deploys carry DSA-4349-1.

Container imageDigestPackageFixed in
pachyderm/dash:1.9.094e9a281e5a4
tiff@4.0.8-2+deb9u2
4.0.8-2+deb9u4

Open the chart page →

4,967

Container images carrying it

23 by charts deploying them

A fixed version is listed for 1 of the 1 affected package.

Container imageDigestPackageFixed inUsed by
library/nginx:1.13.12b1d09e971889
tiff@4.0.8-2+deb9u2
4.0.8-2+deb9u4
2
nachomillangarcia/prometheus_aws_cost_exporter:lateste4ce056f2d6d
tiff@4.0.8-2+deb9u2
4.0.8-2+deb9u4
2
neilpeterson/azure-vote-front:v384062718347c
tiff@4.0.8-2+deb9u1
4.0.8-2+deb9u4
2
bryanalves/honeywell_exporter:0.0.1195f73dce8b21
tiff@4.0.8-2+deb9u2
4.0.8-2+deb9u4
1
bryanalves/smart_exporter:0.2af47dfbb9413
tiff@4.0.8-2+deb9u2
4.0.8-2+deb9u4
1
conduction/agendaservice-nginx:lateste1c176458aaf
tiff@4.0.8-2+deb9u2
4.0.8-2+deb9u4
1
conduction/balance-registration-nginx:dev9e24264ea8f3
tiff@4.0.8-2+deb9u2
4.0.8-2+deb9u4
1
conduction/betaalservice-nginx:latestd3577ddd5c67
tiff@4.0.8-2+deb9u2
4.0.8-2+deb9u4
1
conduction/cgrc-nginx:devd8e23f10e882
tiff@4.0.8-2+deb9u2
4.0.8-2+deb9u4
1
conduction/checkin-component-nginx:dev583d2cd8476c
tiff@4.0.8-2+deb9u2
4.0.8-2+deb9u4
1
conduction/conduction-ui-nginx:devd9b38e234de9
tiff@4.0.8-2+deb9u2
4.0.8-2+deb9u4
1
conduction/contactmoment-component-nginx:dev353dc46303ac
tiff@4.0.8-2+deb9u2
4.0.8-2+deb9u4
1
conduction/docparser-nginx:dev08524d8327b8
tiff@4.0.8-2+deb9u2
4.0.8-2+deb9u4
1
conduction/kvk-nginx:devcf163d2b95b5
tiff@4.0.8-2+deb9u2
4.0.8-2+deb9u4
1
conduction/pan-nginx:devaf3e9f551ad1
tiff@4.0.8-2+deb9u2
4.0.8-2+deb9u4
1
jenkinsci/jenkins:2.67a1f33f004659
tiff@4.0.8-2+deb9u1
4.0.8-2+deb9u4
1
library/elasticsearch:2.4.641ed3a1a16b6
tiff@4.0.8-2+deb9u2
4.0.8-2+deb9u4
1
ncsapolyglot/converters-avconv:latestc44b22eb58bb
tiff@4.0.8-2+deb9u1
4.0.8-2+deb9u4
1
neilpeterson/aks-helloworld:v1fb47732ef36b
tiff@4.0.8-2+deb9u1
4.0.8-2+deb9u4
1
neilpeterson/chart-tweet:latest64fd8dab075f
tiff@4.0.8-2+deb9u1
4.0.8-2+deb9u4
1
neilpeterson/process-tweet:latest39ce9f92e899
tiff@4.0.8-2+deb9u2
4.0.8-2+deb9u4
1
pachyderm/dash:1.9.094e9a281e5a4
tiff@4.0.8-2+deb9u2
4.0.8-2+deb9u4
1
raykrueger/riemann:0.2.14c8baf3de57bb
tiff@4.0.8-2+deb9u1
4.0.8-2+deb9u4
1

syft 1.42.1 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.