StackRadarChart IndexLive demo

CVE-2016-1000232

Medium

Advisory

Published 10 Oct 2018In the index since 6 Sept 2026

Severity: Medium; worst across findings
CVSS: 5.3; base score, highest
EPSS: 0.024; 83rd percentile
CISA KEV: Not listed; no confirmed exploitation
Charts affected: 11; of 17,781 indexed, latest versions
Container images: 8; deployed by those charts
Fix available: 1 of 1; affected package

ReDoS via long string of semicolons in tough-cookie

Carried by container images the latest versions of 11 of 17,781 indexed charts deploy, on 8 images.

Affected package	Affected versions	Fixed in	Images
tough-cookienpm	0.12.1, 2.2.0, 2.2.2	2.3.0	8

OSV records: GHSA-qhv9-728r-6jqg

Charts affected

11 by stars

Chart

Latest

Affected images

Radar Score

kongakonga

1 of 1 See more

konga konga 1.1.0

1 of the 1 container images this version deploys carry CVE-2016-1000232.

Container image	Digest	Package	Fixed in
pantsel/konga :latest	c8172b75607d	tough-cookie@2.2.2	2.3.0

Open the chart page →

5,209

openapiassist-iot-open-api-management

1 of 6 See more

openapi assist-iot-open-api-management 0.2.2

1 of the 6 container images this version deploys carry CVE-2016-1000232.

Container image	Digest	Package	Fixed in
pantsel/konga :latest	c8172b75607d	tough-cookie@2.2.2	2.3.0

Open the chart page →

18,277

registry-uibryanalves

1 of 1 See more

registry-ui bryanalves 0.2.0

1 of the 1 container images this version deploys carry CVE-2016-1000232.

Container image	Digest	Package	Fixed in
konradkleine/docker-registry-frontend :v2	181aad54ee64	tough-cookie@0.12.1	2.3.0

Open the chart page →

4,069

otbrcharts-derwitt-dev

1 of 1 See more

otbr charts-derwitt-dev 0.2.0

1 of the 1 container images this version deploys carry CVE-2016-1000232.

Container image	Digest	Package	Fixed in
openthread/otbr :latest	f307f59f6432	tough-cookie@2.2.0	2.3.0

Open the chart page →

12,779

ethereumcloudnativeapp

1 of 3 See more

ethereum cloudnativeapp 1.0.0

1 of the 3 container images this version deploys carry CVE-2016-1000232.

Container image	Digest	Package	Fixed in
ethereumex/eth-stats-dashboard :v0.0.1	a7603aa8df4c	tough-cookie@2.2.0	2.3.0

Open the chart page →

27,417

kongacreate-databases

1 of 1 See more

konga create-databases 0.1.0

1 of the 1 container images this version deploys carry CVE-2016-1000232.

Container image	Digest	Package	Fixed in
pantsel/konga :latest	c8172b75607d	tough-cookie@2.2.2	2.3.0

Open the chart page →

5,209

wekan-oldgabisonfire

1 of 1 See more

wekan-old gabisonfire 0.1.2

1 of the 1 container images this version deploys carry CVE-2016-1000232.

Container image	Digest	Package	Fixed in
wekanteam/wekan :v4.22	68a51f0327df	tough-cookie@0.12.1	2.3.0

Open the chart page →

5,941

example-dev-toolsnoygal

1 of 3 See more

example-dev-tools noygal 0.2.8

1 of the 3 container images this version deploys carry CVE-2016-1000232.

Container image	Digest	Package	Fixed in
linuxserver/cloud9 :latest	45c5fe102ff3	tough-cookie@2.2.2	2.3.0

Open the chart page →

27,465

openwhiskopenwhisk

1 of 10 See more

openwhisk openwhisk 1.0.0

1 of the 10 container images this version deploys carry CVE-2016-1000232.

Container image	Digest	Package	Fixed in
openwhisk/ow-utils :1.0.0	c80dba0de3aa	tough-cookie@2.2.0	2.3.0

Open the chart page →

36,215

kurento_webrtc_demostunner

1 of 2 See more

kurento_webrtc_demo stunner 0.1.0

1 of the 2 container images this version deploys carry CVE-2016-1000232.

Container image	Digest	Package	Fixed in
l7mp/kurento-one2one-call-server :latest	fd2b2d06fff6	tough-cookie@2.2.2	2.3.0

Open the chart page →

12,460

stunner-kurento-one2one-callstunner

1 of 2 See more

stunner-kurento-one2one-call stunner 0.1.0

1 of the 2 container images this version deploys carry CVE-2016-1000232.

Container image	Digest	Package	Fixed in
l7mp/kurento-one2one-call-server :latest	fd2b2d06fff6	tough-cookie@2.2.2	2.3.0

Open the chart page →

12,460

Container images carrying it

8 by charts deploying them

A fixed version is listed for 1 of the 1 affected package.

Container image	Digest	Package	Fixed in	Used by
pantsel/konga :latest	c8172b75607d	tough-cookie@2.2.2	2.3.0	3
l7mp/kurento-one2one-call-server :latest	fd2b2d06fff6	tough-cookie@2.2.2	2.3.0	2
ethereumex/eth-stats-dashboard :v0.0.1	a7603aa8df4c	tough-cookie@2.2.0	2.3.0	1
konradkleine/docker-registry-frontend :v2	181aad54ee64	tough-cookie@0.12.1	2.3.0	1
linuxserver/cloud9 :latest	45c5fe102ff3	tough-cookie@2.2.2	2.3.0	1
openthread/otbr :latest	f307f59f6432	tough-cookie@2.2.0	2.3.0	1
openwhisk/ow-utils :1.0.0	c80dba0de3aa	tough-cookie@2.2.0	2.3.0	1
wekanteam/wekan :v4.22	68a51f0327df	tough-cookie@0.12.1	2.3.0	1