CVE-2026-27135 - CVE Scans - 2026-11-13
Last scan: 2026-11-13T01:12:43Z
Go to the main page | Go to CVE index
Advisory: https://www.suse.com/security/cve/CVE-2026-27135.html
The images that have the vulnerable dependency in a version that isn't affected by this CVE (not vulnerable or fixed) are listed as "not affected".
Search:
| Image | Release | Binary/Package | Dependency | Patched version | Severity | Status | Justification (for status not affected) |
|---|---|---|---|---|---|---|---|
| rancher/mirrored-library-nginx:1.29.1-alpine | Harvester v1.8-head | nghttp2-libs | nghttp2-libs@1.65.0-r0 | 1.68.1 | HIGH | affected | |
| rancher/mirrored-library-nginx:1.29.1-alpine | Harvester v1.8.2 | nghttp2-libs | nghttp2-libs@1.65.0-r0 | 1.68.1 | HIGH | affected | |
| rancher/mirrored-library-nginx:1.29.1-alpine | Harvester v1.9-head | nghttp2-libs | nghttp2-libs@1.65.0-r0 | 1.68.1 | HIGH | affected | |
| rancher/mirrored-library-nginx:1.29.1-alpine | Harvester v1.9.0 | nghttp2-libs | nghttp2-libs@1.65.0-r0 | 1.68.1 | HIGH | affected | |
| rancher/mirrored-grafana-grafana:11.5.5 | Rancher Prime v2.12-head | nghttp2-libs | nghttp2-libs@1.64.0-r0 | 1.68.1 | HIGH | affected | |
| rancher/mirrored-grafana-grafana:11.5.5 | Rancher Prime v2.12.15 | nghttp2-libs | nghttp2-libs@1.64.0-r0 | 1.68.1 | HIGH | affected | |
| seldonio/mlserver:1.7.1 | SUSE AI latest | libnghttp2 | libnghttp2@1.43.0-6.el9 | 1.43.0-6.el9_7.1 | HIGH | affected | |
| ghcr.io/kubeflow/model-registry/controller:v0.3.8 | SUSE AI latest | libnghttp2 | libnghttp2@1.43.0-6.el9 | 1.43.0-6.el9_7.1 | HIGH | not affected | vulnerable code not in execute path |
| ghcr.io/kubeflow/model-registry/server:v0.3.8 | SUSE AI latest | libnghttp2 | libnghttp2@1.43.0-6.el9 | 1.43.0-6.el9_7.1 | HIGH | not affected | vulnerable code not in execute path |
| ghcr.io/kubeflow/model-registry/storage-initializer:v0.3.8 | SUSE AI latest | libnghttp2 | libnghttp2@1.43.0-6.el9 | 1.43.0-6.el9_7.1 | HIGH | not affected | vulnerable code not in execute path |
| alpine/k8s:1.36.2 | SUSE AI latest | nghttp2-libs | nghttp2-libs@1.69.0-r0 | 1.68.1 | HIGH | not affected | version of the dependency not affected |