StackRadar

CVE-2016-10540

High

Advisory

Published 31 May 2018In the index since 6 Sept 2026
Severity
High
worst across findings
CVSS
7.5
base score, highest
EPSS
0.017
76th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
21
of 17,781 indexed, latest versions
Container images
18
deployed by those charts
Fix available
2 of 2
affected packages

Regular Expression Denial of Service in minimatch

Carried by container images the latest versions of 21 of 17,781 indexed charts deploy, on 18 images.

Affected packageAffected versionsFixed inImages
minimatchnpm0.2.14, 0.3.0, 1.0.0, 2.0.10+1 more3.0.218
node-minimatchdeb1.0.0-11.0.0-1ubuntu0.1~esm21
OSV records
GHSA-hxm2-r34f-qmc5UBUNTU-CVE-2016-10540
Also known as
USN-4783-1

Charts affected

21 by stars
ChartLatestAffected imagesRadar Score
netris-controllernetrisai2.8.21 of 14See more

netris-controller netrisai 2.8.2

1 of the 14 container images this version deploys carry CVE-2016-10540.

Container imageDigestPackageFixed in
netrisai/controller-web-service-backend:4.6.0-0086e865080e86c
minimatch@0.3.0
3.0.2

Open the chart page →

30,326
hubotdecayofmind1.0.21 of 3See more

hubot decayofmind 1.0.2

1 of the 3 container images this version deploys carry CVE-2016-10540.

Container imageDigestPackageFixed in
decayofmind/hubot:3.3.21e18e92fe694
minimatch@2.0.10
3.0.2

Open the chart page →

2,513
kongakonga1.1.01 of 1See more

konga konga 1.1.0

1 of the 1 container images this version deploys carry CVE-2016-10540.

Container imageDigestPackageFixed in
pantsel/konga:latestc8172b75607d
minimatch@2.0.10
3.0.2

Open the chart page →

5,209
scrapoxywiremindVerified publisher0.3.41 of 1See more

scrapoxy wiremind 0.3.4

1 of the 1 container images this version deploys carry CVE-2016-10540.

Container imageDigestPackageFixed in
wiremind/scrapoxy:lateste7048929a676
minimatch@2.0.10
3.0.2

Open the chart page →

2,154
openapiassist-iot-open-api-management0.2.21 of 6See more

openapi assist-iot-open-api-management 0.2.2

1 of the 6 container images this version deploys carry CVE-2016-10540.

Container imageDigestPackageFixed in
pantsel/konga:latestc8172b75607d
minimatch@2.0.10
3.0.2

Open the chart page →

18,277
registry-uibryanalves0.2.01 of 1See more

registry-ui bryanalves 0.2.0

1 of the 1 container images this version deploys carry CVE-2016-10540.

Container imageDigestPackageFixed in
konradkleine/docker-registry-frontend:v2181aad54ee64
minimatch@2.0.10
3.0.2

Open the chart page →

4,069
otbrcharts-derwitt-devVerified publisher0.2.01 of 1See more

otbr charts-derwitt-dev 0.2.0

1 of the 1 container images this version deploys carry CVE-2016-10540.

Container imageDigestPackageFixed in
openthread/otbr:latestf307f59f6432
minimatch@3.0.0
3.0.2

Open the chart page →

12,779
ethereumcloudnativeapp1.0.01 of 3See more

ethereum cloudnativeapp 1.0.0

1 of the 3 container images this version deploys carry CVE-2016-10540.

Container imageDigestPackageFixed in
ethereumex/eth-stats-dashboard:v0.0.1a7603aa8df4c
minimatch@0.3.0
node-minimatch@1.0.0-1
3.0.2
1.0.0-1ubuntu0.1~esm2

Open the chart page →

27,417
hubotcloudnativeapp0.0.11 of 1See more

hubot cloudnativeapp 0.0.1

1 of the 1 container images this version deploys carry CVE-2016-10540.

Container imageDigestPackageFixed in
minddocdev/hubot:0.1.96c60b11a4fa7
minimatch@0.3.0
3.0.2

Open the chart page →

2,580
kongacreate-databases0.1.01 of 1See more

konga create-databases 0.1.0

1 of the 1 container images this version deploys carry CVE-2016-10540.

Container imageDigestPackageFixed in
pantsel/konga:latestc8172b75607d
minimatch@2.0.10
3.0.2

Open the chart page →

5,209
wekan-oldgabisonfire0.1.21 of 1See more

wekan-old gabisonfire 0.1.2

1 of the 1 container images this version deploys carry CVE-2016-10540.

Container imageDigestPackageFixed in
wekanteam/wekan:v4.2268a51f0327df
minimatch@2.0.10
3.0.2

Open the chart page →

5,941
ibm-microclimateibm-charts0.1.01 of 8See more

ibm-microclimate ibm-charts 0.1.0

1 of the 8 container images this version deploys carry CVE-2016-10540.

Container imageDigestPackageFixed in
ibmcom/microclimate-portal:latested5505e5c7ec
minimatch@0.2.14
3.0.2

Open the chart page →

57,669
backstageirembo-backstage-helmVerified publisher1.0.51 of 3See more

backstage irembo-backstage-helm 1.0.5

1 of the 3 container images this version deploys carry CVE-2016-10540.

Container imageDigestPackageFixed in
roadiehq/community-backstage-image:latestef355bf5b639
minimatch@0.3.0
3.0.2

Open the chart page →

7,232
monocularjenkins-x0.6.41 of 4See more

monocular jenkins-x 0.6.4

1 of the 4 container images this version deploys carry CVE-2016-10540.

Container imageDigestPackageFixed in
migmartri/prerender:latest486aacfd5aa9
minimatch@0.3.0
3.0.2

Open the chart page →

4,614
monocularmonocular1.4.152 of 5See more

monocular monocular 1.4.15

2 of the 5 container images this version deploys carry CVE-2016-10540.

Container imageDigestPackageFixed in
migmartri/prerender:latest486aacfd5aa9
minimatch@0.3.0
3.0.2
quay.io/helmpack/monocular-ui:v1.10.086b71e90319f
minimatch@0.3.0
3.0.2

Open the chart page →

7,048
example-dev-toolsnoygal0.2.81 of 3See more

example-dev-tools noygal 0.2.8

1 of the 3 container images this version deploys carry CVE-2016-10540.

Container imageDigestPackageFixed in
linuxserver/cloud9:latest45c5fe102ff3
minimatch@1.0.0
3.0.2

Open the chart page →

27,465
openwhiskopenwhisk1.0.01 of 10See more

openwhisk openwhisk 1.0.0

1 of the 10 container images this version deploys carry CVE-2016-10540.

Container imageDigestPackageFixed in
openwhisk/ow-utils:1.0.0c80dba0de3aa
minimatch@3.0.0
3.0.2

Open the chart page →

36,215
gristrlex0.1.01 of 1See more

grist rlex 0.1.0

1 of the 1 container images this version deploys carry CVE-2016-10540.

Container imageDigestPackageFixed in
gristlabs/grist:0.7.96e71b1914a7e
minimatch@0.3.0
3.0.2

Open the chart page →

5,215
wekanschmitzis1.1.11 of 1See more

wekan schmitzis 1.1.1

1 of the 1 container images this version deploys carry CVE-2016-10540.

Container imageDigestPackageFixed in
quay.io/wekan/wekan:v5.65cb17600883a3
minimatch@2.0.10
3.0.2

Open the chart page →

3,638
kurento_webrtc_demostunner0.1.01 of 2See more

kurento_webrtc_demo stunner 0.1.0

1 of the 2 container images this version deploys carry CVE-2016-10540.

Container imageDigestPackageFixed in
l7mp/kurento-one2one-call-server:latestfd2b2d06fff6
minimatch@2.0.10
3.0.2

Open the chart page →

12,460
stunner-kurento-one2one-callstunner0.1.01 of 2See more

stunner-kurento-one2one-call stunner 0.1.0

1 of the 2 container images this version deploys carry CVE-2016-10540.

Container imageDigestPackageFixed in
l7mp/kurento-one2one-call-server:latestfd2b2d06fff6
minimatch@2.0.10
3.0.2

Open the chart page →

12,460

Container images carrying it

18 by charts deploying them

A fixed version is listed for 2 of the 2 affected packages.

Container imageDigestPackageFixed inUsed by
pantsel/konga:latestc8172b75607d
minimatch@2.0.10
3.0.2
3
l7mp/kurento-one2one-call-server:latestfd2b2d06fff6
minimatch@2.0.10
3.0.2
2
migmartri/prerender:latest486aacfd5aa9
minimatch@0.3.0
3.0.2
2
decayofmind/hubot:3.3.21e18e92fe694
minimatch@2.0.10
3.0.2
1
ethereumex/eth-stats-dashboard:v0.0.1a7603aa8df4c
minimatch@0.3.0
node-minimatch@1.0.0-1
3.0.2
1.0.0-1ubuntu0.1~esm2
1
gristlabs/grist:0.7.96e71b1914a7e
minimatch@0.3.0
3.0.2
1
ibmcom/microclimate-portal:latested5505e5c7ec
minimatch@0.2.14
3.0.2
1
konradkleine/docker-registry-frontend:v2181aad54ee64
minimatch@2.0.10
3.0.2
1
linuxserver/cloud9:latest45c5fe102ff3
minimatch@1.0.0
3.0.2
1
minddocdev/hubot:0.1.96c60b11a4fa7
minimatch@0.3.0
3.0.2
1
netrisai/controller-web-service-backend:4.6.0-0086e865080e86c
minimatch@0.3.0
3.0.2
1
openthread/otbr:latestf307f59f6432
minimatch@3.0.0
3.0.2
1
openwhisk/ow-utils:1.0.0c80dba0de3aa
minimatch@3.0.0
3.0.2
1
roadiehq/community-backstage-image:latestef355bf5b639
minimatch@0.3.0
3.0.2
1
wekanteam/wekan:v4.2268a51f0327df
minimatch@2.0.10
3.0.2
1
wiremind/scrapoxy:lateste7048929a676
minimatch@2.0.10
3.0.2
1
quay.io/helmpack/monocular-ui:v1.10.086b71e90319f
minimatch@0.3.0
3.0.2
1
quay.io/wekan/wekan:v5.65cb17600883a3
minimatch@2.0.10
3.0.2
1

syft 1.42.1 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.