USN-8795-1

Unscored

Advisory

Published 21 Sept 2026In the index since 23 Sept 2026

Severity: Unscored; worst across findings
CVSS: —; base score, highest
EPSS: 0.003; 21st percentile
CISA KEV: Not listed; no confirmed exploitation
Charts affected: 18; of 17,939 indexed, latest versions
Container images: 13; deployed by those charts
Fix available: 1 of 1; affected package

openjdk-17 vulnerabilities

Carried by container images the latest versions of 18 of 17,939 indexed charts deploy, on 13 images.

Affected package	Affected versions	Fixed in	Images
openjdk-17deb	17.0.3+7-0ubuntu0.20.04.1, 17.0.8+7-1~22.04, 17.0.9+9-1~20.04, 17.0.10+7-1~22.04.1+5 more	17.0.20.1+1-1~20.04, 17.0.20.1+1-1~22.04, 17.0.20.1+1-1~24.04, 17.0.20.1+1-1~26.04	13

OSV records: USN-8795-1

Charts affected

18 by stars

Chart

Latest

Affected images

Radar Score

paperless-ngxfmjstudios

0.2.8

1 of 5 See more

paperless-ngx fmjstudios 0.2.8

1 of the 5 container images this version deploys carry USN-8795-1.

Container image	Digest	Package	Fixed in
apache/tika :2.9.0.0	92d055a84e9e	openjdk-17@17.0.8+7-1~22.04	17.0.20.1+1-1~22.04

Open the chart page →

32,529

cassandrakubelauncher

0.1.29

1 of 1 See more

cassandra kubelauncher 0.1.29

1 of the 1 container images this version deploys carry USN-8795-1.

Container image	Digest	Package	Fixed in
ghcr.io/kubelauncher/cassandradigest-pinned	4a2625365fc6	openjdk-17@17.0.20+8-1~26.04	17.0.20.1+1-1~26.04

Open the chart page →

1,165

kafkakubelauncher

0.1.27

1 of 1 See more

kafka kubelauncher 0.1.27

1 of the 1 container images this version deploys carry USN-8795-1.

Container image	Digest	Package	Fixed in
ghcr.io/kubelauncher/kafkadigest-pinned	1b681e349375	openjdk-17@17.0.20+8-1~26.04	17.0.20.1+1-1~26.04

Open the chart page →

1,418

zookeeperkubelauncher

0.2.11

1 of 1 See more

zookeeper kubelauncher 0.2.11

1 of the 1 container images this version deploys carry USN-8795-1.

Container image	Digest	Package	Fixed in
ghcr.io/kubelauncher/zookeeperdigest-pinned	7826e9caa461	openjdk-17@17.0.20+8-1~26.04	17.0.20.1+1-1~26.04

Open the chart page →

1,222

puppetserverpuppetserver

9.5.2

2 of 5 See more

puppetserver puppetserver 9.5.2

2 of the 5 container images this version deploys carry USN-8795-1.

Container image	Digest	Package	Fixed in
ghcr.io/voxpupuli/container-puppetdb :7.18.0-v1.5.0	a56dfe91f5b1	openjdk-17@17.0.10+7-1~22.04.1	17.0.20.1+1-1~22.04
ghcr.io/voxpupuli/container-puppetserver :7.17.0-v1.5.0	916746209ac5	openjdk-17@17.0.10+7-1~22.04.1	17.0.20.1+1-1~22.04

Open the chart page →

15,244

unifiunifi

1.16.0

1 of 1 See more

unifi unifi 1.16.0

1 of the 1 container images this version deploys carry USN-8795-1.

Container image	Digest	Package	Fixed in
jacobalberty/unifi :v10.0.162	896c0ab82d33	openjdk-17@17.0.15+6~us1-0ubuntu1~20.04	17.0.20.1+1-1~20.04

Open the chart page →

7,829

unifi-controllerqonstrukt

2.6.1

1 of 1 See more

unifi-controller qonstrukt 2.6.1

1 of the 1 container images this version deploys carry USN-8795-1.

Container image	Digest	Package	Fixed in
linuxserver/unifi-controller :8.0.24	0ae315a3a456	openjdk-17@17.0.9+9-1~20.04	17.0.20.1+1-1~20.04

Open the chart page →

10,976

nacosgujunxiang

0.1.5

1 of 1 See more

nacos gujunxiang 0.1.5

1 of the 1 container images this version deploys carry USN-8795-1.

Container image	Digest	Package	Fixed in
nacos/nacos-server :latest	1c191c30c8cd	openjdk-17@17.0.20+8-1~26.04	17.0.20.1+1-1~26.04

Open the chart page →

2,086

paperless-ngxadnoctem

0.4.2

1 of 5 See more

paperless-ngx adnoctem 0.4.2

1 of the 5 container images this version deploys carry USN-8795-1.

Container image	Digest	Package	Fixed in
apache/tika :2.9.0.0	92d055a84e9e	openjdk-17@17.0.8+7-1~22.04	17.0.20.1+1-1~22.04

Open the chart page →

22,217

nacosbytectl

0.1.6

1 of 1 See more

nacos bytectl 0.1.6

1 of the 1 container images this version deploys carry USN-8795-1.

Container image	Digest	Package	Fixed in
nacos/nacos-server :latest	1c191c30c8cd	openjdk-17@17.0.20+8-1~26.04	17.0.20.1+1-1~26.04

Open the chart page →

2,086

craftycontrollerdrewburr-labs-helm-charts

0.3.0

1 of 1 See more

craftycontroller drewburr-labs-helm-charts 0.3.0

1 of the 1 container images this version deploys carry USN-8795-1.

Container image	Digest	Package	Fixed in
registry.gitlab.com/crafty-controller/crafty-4 :latest	7b6e87514259	openjdk-17@17.0.20+8-1~24.04	17.0.20.1+1-1~24.04

Open the chart page →

39,424

puppetservercamptocamp3

1.0.1

1 of 2 See more

puppetserver camptocamp3 1.0.1

1 of the 2 container images this version deploys carry USN-8795-1.

Container image	Digest	Package	Fixed in
ghcr.io/voxpupuli/puppetserver :8.7.0-main	63873f3f698e	openjdk-17@17.0.13+11-2ubuntu1~22.04	17.0.20.1+1-1~22.04

Open the chart page →

6,200

sumo-besu-genesisconsensys

0.1.75

1 of 1 See more

sumo-besu-genesis consensys 0.1.75

1 of the 1 container images this version deploys carry USN-8795-1.

Container image	Digest	Package	Fixed in
hyperledger/besu :22.4-openjdk-latest	a674d35eec9a	openjdk-17@17.0.3+7-0ubuntu0.20.04.1	17.0.20.1+1-1~20.04

Open the chart page →

8,338

sumo-besu-nodeconsensys

0.1.75

1 of 4 See more

sumo-besu-node consensys 0.1.75

1 of the 4 container images this version deploys carry USN-8795-1.

Container image	Digest	Package	Fixed in
hyperledger/besu :22.4-openjdk-latest	a674d35eec9a	openjdk-17@17.0.3+7-0ubuntu0.20.04.1	17.0.20.1+1-1~20.04

Open the chart page →

8,338

unifiegeback

2.1.6

1 of 1 See more

unifi egeback 2.1.6

1 of the 1 container images this version deploys carry USN-8795-1.

Container image	Digest	Package	Fixed in
jacobalberty/unifi :v10.0.162	896c0ab82d33	openjdk-17@17.0.15+6~us1-0ubuntu1~20.04	17.0.20.1+1-1~20.04

Open the chart page →

7,829

opencloudjacobcolvin

0.2.3

1 of 13 See more

opencloud jacobcolvin 0.2.3

1 of the 13 container images this version deploys carry USN-8795-1.

Container image	Digest	Package	Fixed in
apache/tika :2.9.2.1-full	ae0b86d3c4d0	openjdk-17@17.0.11+9-1	17.0.20.1+1-1~24.04

Open the chart page →

46,329

unifik8sonlab

0.3.7

1 of 1 See more

unifi k8sonlab 0.3.7

1 of the 1 container images this version deploys carry USN-8795-1.

Container image	Digest	Package	Fixed in
jacobalberty/unifi :v10.0.162	896c0ab82d33	openjdk-17@17.0.15+6~us1-0ubuntu1~20.04	17.0.20.1+1-1~20.04

Open the chart page →

7,829

opencloudunxwares

0.2.3

1 of 13 See more

opencloud unxwares 0.2.3

1 of the 13 container images this version deploys carry USN-8795-1.

Container image	Digest	Package	Fixed in
apache/tika :2.9.2.1-full	ae0b86d3c4d0	openjdk-17@17.0.11+9-1	17.0.20.1+1-1~24.04

Open the chart page →

46,329

Container images carrying it

13 by charts deploying them

A fixed version is listed for 1 of the 1 affected package.

Container image	Digest	Package	Fixed in	Used by
jacobalberty/unifi :v10.0.162	896c0ab82d33	openjdk-17@17.0.15+6~us1-0ubuntu1~20.04	17.0.20.1+1-1~20.04	3
apache/tika :2.9.0.0	92d055a84e9e	openjdk-17@17.0.8+7-1~22.04	17.0.20.1+1-1~22.04	2
apache/tika :2.9.2.1-full	ae0b86d3c4d0	openjdk-17@17.0.11+9-1	17.0.20.1+1-1~24.04	2
hyperledger/besu :22.4-openjdk-latest	a674d35eec9a	openjdk-17@17.0.3+7-0ubuntu0.20.04.1	17.0.20.1+1-1~20.04	2
nacos/nacos-server :latest	1c191c30c8cd	openjdk-17@17.0.20+8-1~26.04	17.0.20.1+1-1~26.04	2
linuxserver/unifi-controller :8.0.24	0ae315a3a456	openjdk-17@17.0.9+9-1~20.04	17.0.20.1+1-1~20.04	1
ghcr.io/kubelauncher/cassandra	4a2625365fc6	openjdk-17@17.0.20+8-1~26.04	17.0.20.1+1-1~26.04	1
ghcr.io/kubelauncher/kafka	1b681e349375	openjdk-17@17.0.20+8-1~26.04	17.0.20.1+1-1~26.04	1
ghcr.io/kubelauncher/zookeeper	7826e9caa461	openjdk-17@17.0.20+8-1~26.04	17.0.20.1+1-1~26.04	1
ghcr.io/voxpupuli/container-puppetdb :7.18.0-v1.5.0	a56dfe91f5b1	openjdk-17@17.0.10+7-1~22.04.1	17.0.20.1+1-1~22.04	1
ghcr.io/voxpupuli/container-puppetserver :7.17.0-v1.5.0	916746209ac5	openjdk-17@17.0.10+7-1~22.04.1	17.0.20.1+1-1~22.04	1
ghcr.io/voxpupuli/puppetserver :8.7.0-main	63873f3f698e	openjdk-17@17.0.13+11-2ubuntu1~22.04	17.0.20.1+1-1~22.04	1
registry.gitlab.com/crafty-controller/crafty-4 :latest	7b6e87514259	openjdk-17@17.0.20+8-1~24.04	17.0.20.1+1-1~24.04	1