StackRadarChart IndexLive demo

DSA-5299-1

Unscored

Advisory

Published 10 Dec 2022In the index since 6 Sept 2026

Severity: Unscored; worst across findings
CVSS: —; base score, highest
EPSS: 0.018; 77th percentile
CISA KEV: Not listed; no confirmed exploitation
Charts affected: 22; of 17,781 indexed, latest versions
Container images: 21; deployed by those charts
Fix available: 1 of 1; affected package

openexr - security update

Carried by container images the latest versions of 22 of 17,781 indexed charts deploy, on 21 images.

Affected package	Affected versions	Fixed in	Images
openexrdeb	2.5.4-2	2.5.4-2+deb11u1	21

OSV records: DSA-5299-1

Charts affected

22 by stars

Chart

Latest

Affected images

Radar Score

kubeflowkubeflow

1 of 45 See more

kubeflow kubeflow 1.6.2

1 of the 45 container images this version deploys carry DSA-5299-1.

Container image	Digest	Package	Fixed in
gcr.io/ml-pipeline/metadata-writer :2.0.0-alpha.5	ec3ae9f6df47	openexr@2.5.4-2	2.5.4-2+deb11u1

Open the chart page →

96,941

k8s-telegram-sendertelegram-sender

1 of 1 See more

k8s-telegram-sender telegram-sender 0.0.1

1 of the 1 container images this version deploys carry DSA-5299-1.

Container image	Digest	Package	Fixed in
danuk/telegram-sender :0.0.1	026560388070	openexr@2.5.4-2	2.5.4-2+deb11u1

Open the chart page →

3,048

wombatwombat

1 of 1 See more

wombat wombat 4.1.28

1 of the 1 container images this version deploys carry DSA-5299-1.

Container image	Digest	Package	Fixed in
erlangsolutions/wombatoam :4.1.28	4680c990147a	openexr@2.5.4-2	2.5.4-2+deb11u1

Open the chart page →

3,697

frontenddemo-application

1 of 1 See more

frontend demo-application 0.1.0

1 of the 1 container images this version deploys carry DSA-5299-1.

Container image	Digest	Package	Fixed in
azhar008/flaskapplication :latest	a1e827b0adea	openexr@2.5.4-2	2.5.4-2+deb11u1

Open the chart page →

3,558

deepstackgeek-cookbook

1 of 2 See more

deepstack geek-cookbook 1.5.2

1 of the 2 container images this version deploys carry DSA-5299-1.

Container image	Digest	Package	Fixed in
robmarkcole/deepstack-ui :latest	410275726459	openexr@2.5.4-2	2.5.4-2+deb11u1

Open the chart page →

5,305

webtreesgeek-cookbook

1 of 1 See more

webtrees geek-cookbook 2.2.0

1 of the 1 container images this version deploys carry DSA-5299-1.

Container image	Digest	Package	Fixed in
ghcr.io/nathanvaughn/webtrees :2.0.19	69423a100fab	openexr@2.5.4-2	2.5.4-2+deb11u1

Open the chart page →

3,646

supersetinseefrlab

1 of 4 See more

superset inseefrlab 1.4.0

1 of the 4 container images this version deploys carry DSA-5299-1.

Container image	Digest	Package	Fixed in
apache/superset :9cdaa280429ec297db16d56c94fd77b5d2aff107	975ab033580d	openexr@2.5.4-2	2.5.4-2+deb11u1

Open the chart page →

7,129

pritunl-slack-apppritunl-slack-app

1 of 1 See more

pritunl-slack-app pritunl-slack-app 0.1.7

1 of the 1 container images this version deploys carry DSA-5299-1.

Container image	Digest	Package	Fixed in
nathanielvarona/pritunl-slack-app :0.1.10	b746a34e5597	openexr@2.5.4-2	2.5.4-2+deb11u1

Open the chart page →

2,871

robot-shopcloud-native-toolkit

1 of 12 See more

robot-shop cloud-native-toolkit 1.1.1

1 of the 12 container images this version deploys carry DSA-5299-1.

Container image	Digest	Package	Fixed in
robotshop/rs-payment :latest	774b52c6180d	openexr@2.5.4-2	2.5.4-2+deb11u1

Open the chart page →

29,555

1 of 2 See more

helpdesk douban 0.3.3

1 of the 2 container images this version deploys carry DSA-5299-1.

Container image	Digest	Package	Fixed in
douz/helpdesk :latest	4384103d0219	openexr@2.5.4-2	2.5.4-2+deb11u1

Open the chart page →

4,550

tinyproxy-exporterdouban

1 of 1 See more

tinyproxy-exporter douban 0.1.2

1 of the 1 container images this version deploys carry DSA-5299-1.

Container image	Digest	Package	Fixed in
ghcr.io/leoquote/tinyproxy_exporter :master	6b4103d88dbb	openexr@2.5.4-2	2.5.4-2+deb11u1

Open the chart page →

3,421

smeejasfanzynoodle

1 of 1 See more

smeejas fanzynoodle 0.0.1

1 of the 1 container images this version deploys carry DSA-5299-1.

Container image	Digest	Package	Fixed in
fanzynoodle/smeejas :0.0.1	5f9916c1a287	openexr@2.5.4-2	2.5.4-2+deb11u1

Open the chart page →

4,127

activityrelayfedihost

1 of 2 See more

activityrelay fedihost 0.1.4

1 of the 2 container images this version deploys carry DSA-5299-1.

Container image	Digest	Package	Fixed in
stratospire/activityrelay :0.2.3	a4c34cb01117	openexr@2.5.4-2	2.5.4-2+deb11u1

Open the chart page →

13,450

large-systems-djangolarge-systems-django

1 of 1 See more

large-systems-django large-systems-django 1.0.0

1 of the 1 container images this version deploys carry DSA-5299-1.

Container image	Digest	Package	Fixed in
ha33ona/python :test	6affdfc644d0	openexr@2.5.4-2	2.5.4-2+deb11u1

Open the chart page →

3,891

weather-app-chartlocal-weatherapp

1 of 4 See more

weather-app-chart local-weatherapp 0.1.0

1 of the 4 container images this version deploys carry DSA-5299-1.

Container image	Digest	Package	Fixed in
youssef11gaber10/deployment-ui-react :latest	ba6853e35c60	openexr@2.5.4-2	2.5.4-2+deb11u1

Open the chart page →

5,905

face-recognitionmoreillon

1 of 3 See more

face-recognition moreillon 0.2.4

1 of the 3 container images this version deploys carry DSA-5299-1.

Container image	Digest	Package	Fixed in
moreillon/face-recognition-fastapi :x86	bacb2ddd8394	openexr@2.5.4-2	2.5.4-2+deb11u1

Open the chart page →

8,556

1 of 4 See more

betydb ncsa 0.6.1

1 of the 4 container images this version deploys carry DSA-5299-1.

Container image	Digest	Package	Fixed in
pecan/bety :5.4.1	f825d480cd62	openexr@2.5.4-2	2.5.4-2+deb11u1

Open the chart page →

9,542

1 of 15 See more

pecan ncsa 0.6.2

1 of the 15 container images this version deploys carry DSA-5299-1.

Container image	Digest	Package	Fixed in
pecan/bety :5.4.1	f825d480cd62	openexr@2.5.4-2	2.5.4-2+deb11u1

Open the chart page →

14,154

external-dns-host-networkphntom

1 of 1 See more

external-dns-host-network phntom 0.0.12

1 of the 1 container images this version deploys carry DSA-5299-1.

Container image	Digest	Package	Fixed in
phntom/external-dns-host-network :0.0.12	3adadbac8443	openexr@2.5.4-2	2.5.4-2+deb11u1

Open the chart page →

4,642

python-apppython-app-chart

1 of 2 See more

python-app python-app-chart 0.1.0

1 of the 2 container images this version deploys carry DSA-5299-1.

Container image	Digest	Package	Fixed in
mnaggar3396/python-app :latest	371d8ed84b15	openexr@2.5.4-2	2.5.4-2+deb11u1

Open the chart page →

3,382

python-fastapi-postgrespython-fastapi-postgres

1 of 1 See more

python-fastapi-postgres python-fastapi-postgres 0.1.0

1 of the 1 container images this version deploys carry DSA-5299-1.

Container image	Digest	Package	Fixed in
archish27/python-fastapi-postgres :latest	6610071a2101	openexr@2.5.4-2	2.5.4-2+deb11u1

Open the chart page →

2,983

vinyl-lib-chartvinyl-lib

1 of 1 See more

vinyl-lib-chart vinyl-lib 0.1.0

1 of the 1 container images this version deploys carry DSA-5299-1.

Container image	Digest	Package	Fixed in
kporwit/vinyl_lib_app :v0.1.1	217de0302218	openexr@2.5.4-2	2.5.4-2+deb11u1

Open the chart page →

3,392

Container images carrying it

21 by charts deploying them

A fixed version is listed for 1 of the 1 affected package.

Container image	Digest	Package	Fixed in	Used by
pecan/bety :5.4.1	f825d480cd62	openexr@2.5.4-2	2.5.4-2+deb11u1	2
apache/superset :9cdaa280429ec297db16d56c94fd77b5d2aff107	975ab033580d	openexr@2.5.4-2	2.5.4-2+deb11u1	1
archish27/python-fastapi-postgres :latest	6610071a2101	openexr@2.5.4-2	2.5.4-2+deb11u1	1
azhar008/flaskapplication :latest	a1e827b0adea	openexr@2.5.4-2	2.5.4-2+deb11u1	1
danuk/telegram-sender :0.0.1	026560388070	openexr@2.5.4-2	2.5.4-2+deb11u1	1
douz/helpdesk :latest	4384103d0219	openexr@2.5.4-2	2.5.4-2+deb11u1	1
erlangsolutions/wombatoam :4.1.28	4680c990147a	openexr@2.5.4-2	2.5.4-2+deb11u1	1
fanzynoodle/smeejas :0.0.1	5f9916c1a287	openexr@2.5.4-2	2.5.4-2+deb11u1	1
ha33ona/python :test	6affdfc644d0	openexr@2.5.4-2	2.5.4-2+deb11u1	1
kporwit/vinyl_lib_app :v0.1.1	217de0302218	openexr@2.5.4-2	2.5.4-2+deb11u1	1
mnaggar3396/python-app :latest	371d8ed84b15	openexr@2.5.4-2	2.5.4-2+deb11u1	1
moreillon/face-recognition-fastapi :x86	bacb2ddd8394	openexr@2.5.4-2	2.5.4-2+deb11u1	1
nathanielvarona/pritunl-slack-app :0.1.10	b746a34e5597	openexr@2.5.4-2	2.5.4-2+deb11u1	1
phntom/external-dns-host-network :0.0.12	3adadbac8443	openexr@2.5.4-2	2.5.4-2+deb11u1	1
robmarkcole/deepstack-ui :latest	410275726459	openexr@2.5.4-2	2.5.4-2+deb11u1	1
robotshop/rs-payment :latest	774b52c6180d	openexr@2.5.4-2	2.5.4-2+deb11u1	1
stratospire/activityrelay :0.2.3	a4c34cb01117	openexr@2.5.4-2	2.5.4-2+deb11u1	1
youssef11gaber10/deployment-ui-react :latest	ba6853e35c60	openexr@2.5.4-2	2.5.4-2+deb11u1	1
gcr.io/ml-pipeline/metadata-writer :2.0.0-alpha.5	ec3ae9f6df47	openexr@2.5.4-2	2.5.4-2+deb11u1	1
ghcr.io/leoquote/tinyproxy_exporter :master	6b4103d88dbb	openexr@2.5.4-2	2.5.4-2+deb11u1	1
ghcr.io/nathanvaughn/webtrees :2.0.19	69423a100fab	openexr@2.5.4-2	2.5.4-2+deb11u1	1