USN-8947-1

Unscored

Advisory

Published 21 Oct 2026In the index since 22 Oct 2026

Severity: Unscored; worst across findings
CVSS: —; base score, highest
EPSS: —; probability of exploitation
CISA KEV: Not listed; no confirmed exploitation
Charts affected: 136; of 18,219 indexed, latest versions
Container images: 123; deployed by those charts
Fix available: 1 of 1; affected package

nss update

Carried by container images the latest versions of 136 of 18,219 indexed charts deploy, on 123 images.

Affected package	Affected versions	Fixed in	Images
nssdeb	2:3.17.1-0ubuntu0.14.04.1, 2:3.28.4-0ubuntu0.14.04.3, 2:3.28.4-0ubuntu0.16.04.3, 2:3.28.4-0ubuntu0.16.04.4+27 more	2:3.28.4-0ubuntu0.14.04.5+esm14, 2:3.28.4-0ubuntu0.16.04.14+esm6, 2:3.35-2ubuntu2.16+esm2, 2:3.98-0ubuntu0.20.04.2+esm2+3 more	123

OSV records: USN-8947-1

Charts affected

136 by stars

Chart

Latest

Affected images

Radar Score

penpotkubitodev

1.2.1

1 of 5 See more

penpot kubitodev 1.2.1

1 of the 5 container images this version deploys carry USN-8947-1.

Container image	Digest	Package	Fixed in
penpotapp/exporter :2.2.1	5c835ffd87ab	nss@2:3.98-0ubuntu0.22.04.2	2:3.98-0ubuntu0.22.04.5

Open the chart page →

19,874

ingresslivekit-server

1.2.2

1 of 1 See more

ingress livekit-server 1.2.2

1 of the 1 container images this version deploys carry USN-8947-1.

Container image	Digest	Package	Fixed in
livekit/ingress :v1.2.2	1ab01641b366	nss@2:3.68.2-0ubuntu1.2	2:3.98-0ubuntu0.22.04.5

Open the chart page →

12,458

unifimidokura-community

0.0.6

1 of 1 See more

unifi midokura-community 0.0.6

1 of the 1 container images this version deploys carry USN-8947-1.

Container image	Digest	Package	Fixed in
linuxserver/unifi-controller :7.3.83	ab105cc50322	nss@2:3.49.1-1ubuntu1.9	2:3.98-0ubuntu0.20.04.2+esm2

Open the chart page →

12,139

chirpstackmosquitto-helm-chart

0.5.0

1 of 8 See more

chirpstack mosquitto-helm-chart 0.5.0

1 of the 8 container images this version deploys carry USN-8947-1.

Container image	Digest	Package	Fixed in
apachepulsar/pulsar :2.9.0	d056c89b7131	nss@2:3.49.1-1ubuntu1.5	2:3.98-0ubuntu0.20.04.2+esm2

Open the chart page →

104,050

pulsarmosquitto-helm-chart

0.2.0

1 of 1 See more

pulsar mosquitto-helm-chart 0.2.0

1 of the 1 container images this version deploys carry USN-8947-1.

Container image	Digest	Package	Fixed in
apachepulsar/pulsar :2.10.0	3b262ab7a7d9	nss@2:3.49.1-1ubuntu1.6	2:3.98-0ubuntu0.20.04.2+esm2

Open the chart page →

16,922

smilencsa

1.1.0

1 of 23 See more

smile ncsa 1.1.0

1 of the 23 container images this version deploys carry USN-8947-1.

Container image	Digest	Package	Fixed in
socialmediamacroscope/autophrase :0.1.5	70fb11d4f531	nss@2:3.49.1-1ubuntu1.9	2:3.98-0ubuntu0.20.04.2+esm2

Open the chart page →

606,696

booksonicnicholaswilde

1.0.1

1 of 1 See more

booksonic nicholaswilde 1.0.1

1 of the 1 container images this version deploys carry USN-8947-1.

Container image	Digest	Package	Fixed in
ghcr.io/linuxserver/booksonic :version-1.2	677efca1065d	nss@2:3.35-2ubuntu2.13	2:3.35-2ubuntu2.16+esm2

Open the chart page →

17,921

digikamnicholaswilde

1.0.0

1 of 1 See more

digikam nicholaswilde 1.0.0

1 of the 1 container images this version deploys carry USN-8947-1.

Container image	Digest	Package	Fixed in
ghcr.io/linuxserver/digikam :version-7.3.0	55b4c7f320ae	nss@2:3.35-2ubuntu2.13	2:3.35-2ubuntu2.16+esm2

Open the chart page →

27,461

remminanicholaswilde

0.1.4

1 of 1 See more

remmina nicholaswilde 0.1.4

1 of the 1 container images this version deploys carry USN-8947-1.

Container image	Digest	Package	Fixed in
ghcr.io/linuxserver/remmina :version-1.2.0-rcgit.29dfsg-1ubuntu1	05955792e00f	nss@2:3.35-2ubuntu2.14	2:3.35-2ubuntu2.16+esm2

Open the chart page →

25,346

nominatimnominatim-chart

1.3.0

1 of 3 See more

nominatim nominatim-chart 1.3.0

1 of the 3 container images this version deploys carry USN-8947-1.

Container image	Digest	Package	Fixed in
mediagis/nominatim :3.7	c15e941485ef	nss@2:3.49.1-1ubuntu1.8	2:3.98-0ubuntu0.20.04.2+esm2

Open the chart page →

25,556

zookeeper-helm-chartnotesprojectchart

0.1.0

1 of 1 See more

zookeeper-helm-chart notesprojectchart 0.1.0

1 of the 1 container images this version deploys carry USN-8947-1.

Container image	Digest	Package	Fixed in
wurstmeister/zookeeper :latest	7a7fd44a7210	nss@2:3.17.1-0ubuntu0.14.04.1	2:3.28.4-0ubuntu0.14.04.5+esm14

Open the chart page →

42,256

splashntppool

1.0.4

1 of 1 See more

splash ntppool 1.0.4

1 of the 1 container images this version deploys carry USN-8947-1.

Container image	Digest	Package	Fixed in
scrapinghub/splash :3.4.1	a5f89bc84606	nss@2:3.35-2ubuntu2.7	2:3.35-2ubuntu2.16+esm2

Open the chart page →

93,943

onedevonedev

11.9.0

1 of 1 See more

onedev onedev 11.9.0

1 of the 1 container images this version deploys carry USN-8947-1.

Container image	Digest	Package	Fixed in
1dev/server :11.9.0	cd5b12fe5471	nss@2:3.98-1build1	2:3.98-1ubuntu0.3

Open the chart page →

7,505

cdn-remoteopencord

0.2.4

1 of 3 See more

cdn-remote opencord 0.2.4

1 of the 3 container images this version deploys carry USN-8947-1.

Container image	Digest	Package	Fixed in
omecproject/cdn-antmedia :1.0.0	b4ae7d0d6b74	nss@2:3.35-2ubuntu2.2	2:3.35-2ubuntu2.16+esm2

Open the chart page →

66,345

issuegenopsmx

1.0.2

1 of 1 See more

issuegen opsmx 1.0.2

1 of the 1 container images this version deploys carry USN-8947-1.

Container image	Digest	Package	Fixed in
opsmx11/issuegen :v2.1.0	5c50ca123d88	nss@2:3.28.4-0ubuntu0.14.04.3	2:3.28.4-0ubuntu0.14.04.5+esm14

Open the chart page →

27,175

unifiqaoru

1.1.8

1 of 2 See more

unifi qaoru 1.1.8

1 of the 2 container images this version deploys carry USN-8947-1.

Container image	Digest	Package	Fixed in
linuxserver/unifi-network-application :10.6.106-ls150	4d5fc889c2f2	nss@2:3.120-1ubuntu2.1	2:3.120-1ubuntu2.2

Open the chart page →

4,247

javareact-java

0.1.0

1 of 1 See more

java react-java 0.1.0

1 of the 1 container images this version deploys carry USN-8947-1.

Container image	Digest	Package	Fixed in
project2team4/react :latest	3ff031a08887	nss@2:3.49.1-1ubuntu1.6	2:3.98-0ubuntu0.20.04.2+esm2

Open the chart page →

16,777

checkmkrtomik-helm-charts

0.1.0

1 of 1 See more

checkmk rtomik-helm-charts 0.1.0

1 of the 1 container images this version deploys carry USN-8947-1.

Container image	Digest	Package	Fixed in
checkmk/check-mk-community :2.5.0p6	c11b422210c4	nss@2:3.98-0ubuntu0.22.04.3	2:3.98-0ubuntu0.22.04.5

Open the chart page →

9,934

suwayomirubxkube

0.1.2

1 of 1 See more

suwayomi rubxkube 0.1.2

1 of the 1 container images this version deploys carry USN-8947-1.

Container image	Digest	Package	Fixed in
ghcr.io/suwayomi/suwayomi-server :v2.3.2320	d2c3218c7f9f	nss@2:3.98-1ubuntu0.2	2:3.98-1ubuntu0.3

Open the chart page →

2,267

seafileschmitzis

13.0.13

1 of 4 See more

seafile schmitzis 13.0.13

1 of the 4 container images this version deploys carry USN-8947-1.

Container image	Digest	Package	Fixed in
schmitzis/monorepo :seafile-13.0-latest	c583f1be2af2	nss@2:3.98-1ubuntu0.2	2:3.98-1ubuntu0.3

Open the chart page →

44,979

photoprismschoolguys-helmcharts

0.3.8

1 of 1 See more

photoprism schoolguys-helmcharts 0.3.8

1 of the 1 container images this version deploys carry USN-8947-1.

Container image	Digest	Package	Fixed in
photoprism/photoprism :260601	650c6ad5a651	nss@2:3.120-1ubuntu2	2:3.120-1ubuntu2.2

Open the chart page →

63,151

unifistartechnica

0.1.3

1 of 2 See more

unifi startechnica 0.1.3

1 of the 2 container images this version deploys carry USN-8947-1.

Container image	Digest	Package	Fixed in
jacobalberty/unifi :v7.1.66	4a3616625dda	nss@2:3.35-2ubuntu2.14	2:3.35-2ubuntu2.16+esm2

Open the chart page →

16,451

kurento_webrtc_demostunner

0.1.0

1 of 2 See more

kurento_webrtc_demo stunner 0.1.0

1 of the 2 container images this version deploys carry USN-8947-1.

Container image	Digest	Package	Fixed in
kurento/kurento-media-server :latest	03c0d34d0828	nss@2:3.98-1build1	2:3.98-1ubuntu0.3

Open the chart page →

14,012

stunner-kurento-one2one-callstunner

0.1.0

1 of 2 See more

stunner-kurento-one2one-call stunner 0.1.0

1 of the 2 container images this version deploys carry USN-8947-1.

Container image	Digest	Package	Fixed in
kurento/kurento-media-server :latest	03c0d34d0828	nss@2:3.98-1build1	2:3.98-1ubuntu0.3

Open the chart page →

14,012

rundecksvtech-public-helm-charts

1.0.0

1 of 2 See more

rundeck svtech-public-helm-charts 1.0.0

1 of the 2 container images this version deploys carry USN-8947-1.

Container image	Digest	Package	Fixed in
svtechnmaa/svtech_rundeck :v1.2.2	6e368ace0977	nss@2:3.49.1-1ubuntu1.9	2:3.98-0ubuntu0.20.04.2+esm2

Open the chart page →

76,535

stash-boxswuuper-github

0.1.1

1 of 2 See more

stash-box swuuper-github 0.1.1

1 of the 2 container images this version deploys carry USN-8947-1.

Container image	Digest	Package	Fixed in
stashapp/stash-box :latest	a534c8afdf39	nss@2:3.98-1build1	2:3.98-1ubuntu0.3

Open the chart page →

10,097

the0the0

0.15.0

1 of 9 See more

the0 the0 0.15.0

1 of the 9 container images this version deploys carry USN-8947-1.

Container image	Digest	Package	Fixed in
ghcr.io/alexanderwanyoike/the0/runtime :1.20.0	6c62af793ac8	nss@2:3.98-1ubuntu0.2	2:3.98-1ubuntu0.3

Open the chart page →

7,890

openunison-operatortremolo

3.0.33

1 of 1 See more

openunison-operator tremolo 3.0.33

1 of the 1 container images this version deploys carry USN-8947-1.

Container image	Digest	Package	Fixed in
ghcr.io/openunison/openunison-kubernetes-operator :1.0.15	33fbac79f442	nss@2:3.98-1ubuntu0.2	2:3.98-1ubuntu0.3

Open the chart page →

850

orchestratremolo

3.1.58

2 of 5 See more

orchestra tremolo 3.1.58

2 of the 5 container images this version deploys carry USN-8947-1.

Container image	Digest	Package	Fixed in
ghcr.io/openunison/openunison-k8s :1.0.53	d8c8e5a4830f	nss@2:3.98-1ubuntu0.2	2:3.98-1ubuntu0.3
ghcr.io/openunison/openunison-kubernetes-operator :1.0.15	33fbac79f442	nss@2:3.98-1ubuntu0.2	2:3.98-1ubuntu0.3

Open the chart page →

3,431

altinnendata-apitumogroup

0.1.26

1 of 1 See more

altinnendata-api tumogroup 0.1.26

1 of the 1 container images this version deploys carry USN-8947-1.

Container image	Digest	Package	Fixed in
sondresjo/altinnendata-api :v1.11.0	a4227f072808	nss@2:3.98-1ubuntu0.2	2:3.98-1ubuntu0.3

Open the chart page →

973

browserlessvictorlane

0.2.0

1 of 1 See more

browserless victorlane 0.2.0

1 of the 1 container images this version deploys carry USN-8947-1.

Container image	Digest	Package	Fixed in
ghcr.io/browserless/chromium :v2.43.0	853e6f105b51	nss@2:3.98-1ubuntu0.1	2:3.98-1ubuntu0.3

Open the chart page →

5,455

webhookiewebhookie

0.1.2

1 of 1 See more

webhookie webhookie 0.1.2

1 of the 1 container images this version deploys carry USN-8947-1.

Container image	Digest	Package	Fixed in
hookiesolutions/webhookie :latest	0629694246ba	nss@2:3.49.1-1ubuntu1.5	2:3.98-0ubuntu0.20.04.2+esm2

Open the chart page →

15,456

webhookie-allwebhookie

0.1.2

1 of 3 See more

webhookie-all webhookie 0.1.2

1 of the 3 container images this version deploys carry USN-8947-1.

Container image	Digest	Package	Fixed in
hookiesolutions/webhookie :latest	0629694246ba	nss@2:3.49.1-1ubuntu1.5	2:3.98-0ubuntu0.20.04.2+esm2

Open the chart page →

30,929

kibanawiremind

8.5.24

1 of 2 See more

kibana wiremind 8.5.24

1 of the 2 container images this version deploys carry USN-8947-1.

Container image	Digest	Package	Fixed in
library/kibana :8.19.22	4116dd6a5838	nss@2:3.98-1ubuntu0.2	2:3.98-1ubuntu0.3

Open the chart page →

1,748

playwright-synthetic-monitoringwork-adventure

1.0.1

1 of 1 See more

playwright-synthetic-monitoring work-adventure 1.0.1

1 of the 1 container images this version deploys carry USN-8947-1.

Container image	Digest	Package	Fixed in
workadventure/playwright-synthetic-monitoring :main	92b664c2a06f	nss@2:3.98-0ubuntu0.22.04.2	2:3.98-0ubuntu0.22.04.5

Open the chart page →

16,160

zoo-project-druzoo-project

0.10.9

1 of 6 See more

zoo-project-dru zoo-project 0.10.9

1 of the 6 container images this version deploys carry USN-8947-1.

Container image	Digest	Package	Fixed in
zooproject/zoo-project :dru-51e7d55383f24594959b69e58518961c6aa66740	da112e8d03f1	nss@2:3.98-0ubuntu0.22.04.4	2:3.98-0ubuntu0.22.04.5

Open the chart page →

7,537

Container images carrying it

123 by charts deploying them

A fixed version is listed for 1 of the 1 affected package.

Container image	Digest	Package	Fixed in	Used by
ghcr.io/browserless/chromium :v2.43.0	853e6f105b51	nss@2:3.98-1ubuntu0.1	2:3.98-1ubuntu0.3	1
ghcr.io/gnzsnz/ib-gateway	1e2236804ac9	nss@2:3.98-1ubuntu0.2	2:3.98-1ubuntu0.3	1
ghcr.io/jr0dd/puppeteer :v13.3.2	6047599cd78e	nss@2:3.49.1-1ubuntu1.6	2:3.98-0ubuntu0.20.04.2+esm2	1
ghcr.io/k8s-at-home/network-ups-tools :v2.7.4-2479-g86a32237	cbd5d4cc1245	nss@2:3.49.1-1ubuntu1.5	2:3.98-0ubuntu0.20.04.2+esm2	1
ghcr.io/k8s-at-home/nzbhydra2 :v3.14.2	ef3670f7e0a8	nss@2:3.49.1-1ubuntu1.5	2:3.98-0ubuntu0.20.04.2+esm2	1
ghcr.io/kubeflow/spark-operator/controller :2.2.1	865ff4da5686	nss@2:3.98-0ubuntu0.20.04.2	2:3.98-0ubuntu0.20.04.2+esm2	1
ghcr.io/kubelauncher/cassandra	1d64d8ae4281	nss@2:3.120-1ubuntu2.1	2:3.120-1ubuntu2.2	1
ghcr.io/kubelauncher/kafka	1cd80b53f4fd	nss@2:3.120-1ubuntu2.1	2:3.120-1ubuntu2.2	1
ghcr.io/kubelauncher/keycloak	235dbb1e0f07	nss@2:3.120-1ubuntu2.1	2:3.120-1ubuntu2.2	1
ghcr.io/kubelauncher/zookeeper	9a85b8701c5e	nss@2:3.120-1ubuntu2.1	2:3.120-1ubuntu2.2	1
ghcr.io/linuxserver/booksonic :version-1.2	677efca1065d	nss@2:3.35-2ubuntu2.13	2:3.35-2ubuntu2.16+esm2	1
ghcr.io/linuxserver/booksonic-air :version-v2009.1.0	baa4fa9549dc	nss@2:3.35-2ubuntu2.13	2:3.35-2ubuntu2.16+esm2	1
ghcr.io/linuxserver/digikam :version-7.3.0	55b4c7f320ae	nss@2:3.35-2ubuntu2.13	2:3.35-2ubuntu2.16+esm2	1
ghcr.io/linuxserver/papermerge :version-v2.0.1	98ba2dd3f0bd	nss@2:3.49.1-1ubuntu1.8	2:3.98-0ubuntu0.20.04.2+esm2	1
ghcr.io/linuxserver/remmina :version-1.2.0-rcgit.29dfsg-1ubuntu1	05955792e00f	nss@2:3.35-2ubuntu2.14	2:3.35-2ubuntu2.16+esm2	1
ghcr.io/openunison/openunison-k8s :1.0.53	d8c8e5a4830f	nss@2:3.98-1ubuntu0.2	2:3.98-1ubuntu0.3	1
ghcr.io/star-whale/server :0.6.15	8368359c8dd0	nss@2:3.49.1-1ubuntu1.8	2:3.98-0ubuntu0.20.04.2+esm2	1
ghcr.io/suwayomi/suwayomi-server :v2.3.2320	d2c3218c7f9f	nss@2:3.98-1ubuntu0.2	2:3.98-1ubuntu0.3	1
ghcr.io/voxpupuli/container-puppetdb :7.18.0-v1.5.0	a56dfe91f5b1	nss@2:3.98-0ubuntu0.22.04.2	2:3.98-0ubuntu0.22.04.5	1
ghcr.io/voxpupuli/container-puppetserver :7.17.0-v1.5.0	916746209ac5	nss@2:3.98-0ubuntu0.22.04.2	2:3.98-0ubuntu0.22.04.5	1
ghcr.io/voxpupuli/puppetserver :8.7.0-main	63873f3f698e	nss@2:3.98-0ubuntu0.22.04.2	2:3.98-0ubuntu0.22.04.5	1
quay.io/opsmxpublic/spin-sample-pipeline :v1.0.1	c6a934439421	nss@2:3.28.4-0ubuntu0.16.04.6	2:3.28.4-0ubuntu0.16.04.14+esm6	1
registry.gitlab.com/crafty-controller/crafty-4 :latest	7b6e87514259	nss@2:3.98-1ubuntu0.2	2:3.98-1ubuntu0.3	1