StackRadar

CVE-2016-20018

High

Advisory

Published 19 Dec 2022In the index since 6 Sept 2026
Severity
High
worst across findings
CVSS
7.5
base score, highest
EPSS
0.010
62nd percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
30
of 17,781 indexed, latest versions
Container images
25
deployed by those charts
Fix available
1 of 1
affected package

Knex.js has a limited SQL injection vulnerability

Carried by container images the latest versions of 30 of 17,781 indexed charts deploy, on 25 images.

Affected packageAffected versionsFixed inImages
knexnpm0.12.7, 0.15.2, 0.20.15, 0.21.5+8 more2.4.025
OSV records
GHSA-4jv9-3563-23j3

Charts affected

30 by stars
ChartLatestAffected imagesRadar Score
uptime-kumaduyet0.1.71 of 1See more

uptime-kuma duyet 0.1.7

1 of the 1 container images this version deploys carry CVE-2016-20018.

Container imageDigestPackageFixed in
louislam/uptime-kuma:1.18.5a84767d7934f
knex@0.95.15
2.4.0

Open the chart page →

4,515
backstagedeliveryheroVerified publisher0.1.151 of 2See more

backstage deliveryhero 0.1.15

1 of the 2 container images this version deploys carry CVE-2016-20018.

Container imageDigestPackageFixed in
martinaif/backstage-k8s-demo-backend:test143bc40a3da0e
knex@0.21.5
2.4.0

Open the chart page →

8,213
wikijsgeek-cookbookVerified publisher6.4.21 of 1See more

wikijs geek-cookbook 6.4.2

1 of the 1 container images this version deploys carry CVE-2016-20018.

Container imageDigestPackageFixed in
ghcr.io/linuxserver/wikijs:version-2.5.20158d377933678
knex@0.21.19
2.4.0

Open the chart page →

5,946
ghostgeek-cookbookVerified publisher2.2.01 of 1See more

ghost geek-cookbook 2.2.0

1 of the 1 container images this version deploys carry CVE-2016-20018.

Container imageDigestPackageFixed in
library/ghost:4.37.0767230c0f263
knex@0.21.21
2.4.0

Open the chart page →

4,260
uptime-kumageek-cookbookVerified publisher1.4.21 of 1See more

uptime-kuma geek-cookbook 1.4.2

1 of the 1 container images this version deploys carry CVE-2016-20018.

Container imageDigestPackageFixed in
louislam/uptime-kuma:1.17.1a4eab252e5a2
knex@0.95.15
2.4.0

Open the chart page →

5,079
wikiwenerme2.2.01 of 2See more

wiki wenerme 2.2.0

1 of the 2 container images this version deploys carry CVE-2016-20018.

Container imageDigestPackageFixed in
requarks/wiki:latest68f0d1848261
knex@0.21.7
2.4.0

Open the chart page →

3,833
ghostchart-ghost0.1.51 of 2See more

ghost chart-ghost 0.1.5

1 of the 2 container images this version deploys carry CVE-2016-20018.

Container imageDigestPackageFixed in
library/ghost:6.22.0-alpine3.23ac533a6988ee
knex@0.20.15
2.4.0

Open the chart page →

4,083
authfcryptexlabsVerified publisher0.12.131 of 4See more

authf cryptexlabs 0.12.13

1 of the 4 container images this version deploys carry CVE-2016-20018.

Container imageDigestPackageFixed in
cryptexlabs/authf:0.12.11189c07411d7c
knex@0.95.15
2.4.0

Open the chart page →

3,769
shinobigeek-cookbookVerified publisher1.2.21 of 1See more

shinobi geek-cookbook 1.2.2

1 of the 1 container images this version deploys carry CVE-2016-20018.

Container imageDigestPackageFixed in
shinobisystems/shinobi:dev3ca746937856
knex@0.21.19
2.4.0

Open the chart page →

4,591
ghostghostVerified publisher0.1.01 of 4See more

ghost ghost 0.1.0

1 of the 4 container images this version deploys carry CVE-2016-20018.

Container imageDigestPackageFixed in
library/ghost:5.79.083f7bf209844
knex@0.20.15
2.4.0

Open the chart page →

9,019
backstagehelm-charts-nr0.1.151 of 2See more

backstage helm-charts-nr 0.1.15

1 of the 2 container images this version deploys carry CVE-2016-20018.

Container imageDigestPackageFixed in
martinaif/backstage-k8s-demo-backend:test143bc40a3da0e
knex@0.21.5
2.4.0

Open the chart page →

8,213
wikijshomeenterpriseinc1.4.01 of 1See more

wikijs homeenterpriseinc 1.4.0

1 of the 1 container images this version deploys carry CVE-2016-20018.

Container imageDigestPackageFixed in
requarks/wiki:canary-2.5.2438b5865a7386c
knex@0.21.21
2.4.0

Open the chart page →

4,253
backstageirembo-backstage-helmVerified publisher1.0.51 of 3See more

backstage irembo-backstage-helm 1.0.5

1 of the 3 container images this version deploys carry CVE-2016-20018.

Container imageDigestPackageFixed in
roadiehq/community-backstage-image:latestef355bf5b639
knex@0.95.6
2.4.0

Open the chart page →

7,232
ghostjanip81-helm-chartsVerified publisher0.1.21 of 1See more

ghost janip81-helm-charts 0.1.2

1 of the 1 container images this version deploys carry CVE-2016-20018.

Container imageDigestPackageFixed in
library/ghost:6.37.01ef2e532ca4d
knex@0.20.15
2.4.0

Open the chart page →

3,436
ghostk8s-home-lab-repo4.1.01 of 1See more

ghost k8s-home-lab-repo 4.1.0

1 of the 1 container images this version deploys carry CVE-2016-20018.

Container imageDigestPackageFixed in
library/ghost:6.41.129773d6be407
knex@0.20.15
2.4.0

Open the chart page →

3,092
shinobik8s-home-lab-repo2.1.11 of 1See more

shinobi k8s-home-lab-repo 2.1.1

1 of the 1 container images this version deploys carry CVE-2016-20018.

Container imageDigestPackageFixed in
shinobisystems/shinobi:latestc2f5ce2e1067
knex@0.21.19
2.4.0

Open the chart page →

4,667
tooljetkrzwiatrzyk1.1.11 of 2See more

tooljet krzwiatrzyk 1.1.1

1 of the 2 container images this version deploys carry CVE-2016-20018.

Container imageDigestPackageFixed in
tooljet/tooljet-ce:v1.18.0c85a4720e42e
knex@0.95.15
2.4.0

Open the chart page →

5,410
ghostkubernetes-homelab-helm-chartsVerified publisher0.1.21 of 2See more

ghost kubernetes-homelab-helm-charts 0.1.2

1 of the 2 container images this version deploys carry CVE-2016-20018.

Container imageDigestPackageFixed in
library/ghost:6.39.0-alpine77196da4b0df
knex@0.20.15
2.4.0

Open the chart page →

2,756
account-lookup-servicemojaloop13.0.01 of 4See more

account-lookup-service mojaloop 13.0.0

1 of the 4 container images this version deploys carry CVE-2016-20018.

Container imageDigestPackageFixed in
mojaloop/account-lookup-service:v11.8.0b06d3287ea82
knex@0.95.5
2.4.0

Open the chart page →

11,695
account-lookup-service-adminmojaloop13.0.01 of 4See more

account-lookup-service-admin mojaloop 13.0.0

1 of the 4 container images this version deploys carry CVE-2016-20018.

Container imageDigestPackageFixed in
mojaloop/account-lookup-service:v11.8.0b06d3287ea82
knex@0.95.5
2.4.0

Open the chart page →

11,695
admin-api-svcmojaloop12.0.01 of 4See more

admin-api-svc mojaloop 12.0.0

1 of the 4 container images this version deploys carry CVE-2016-20018.

Container imageDigestPackageFixed in
mojaloop/central-ledger:v13.14.01abc8a7aa71c
knex@0.95.11
2.4.0

Open the chart page →

12,108
mojaloopmojaloop14.0.02 of 6See more

mojaloop mojaloop 14.0.0

2 of the 6 container images this version deploys carry CVE-2016-20018.

Container imageDigestPackageFixed in
mojaloop/account-lookup-service:v11.8.0b06d3287ea82
knex@0.95.5
2.4.0
mojaloop/central-ledger:v13.14.01abc8a7aa71c
knex@0.95.11
2.4.0

Open the chart page →

19,226
ghostmt1905028.25.11 of 3See more

ghost mt190502 8.25.1

1 of the 3 container images this version deploys carry CVE-2016-20018.

Container imageDigestPackageFixed in
library/ghost:6.25.12654b1e90413
knex@0.20.15
2.4.0

Open the chart page →

4,960
ferdi-serverobeoneVerified publisher1.0.31 of 2See more

ferdi-server obeone 1.0.3

1 of the 2 container images this version deploys carry CVE-2016-20018.

Container imageDigestPackageFixed in
getferdi/ferdi-server:1.3.26e620b85afaa
knex@0.15.2
2.4.0

Open the chart page →

1,866
flomesh-consoleopenshift0.70.0-30-ubi81 of 2See more

flomesh-console openshift 0.70.0-30-ubi8

1 of the 2 container images this version deploys carry CVE-2016-20018.

Container imageDigestPackageFixed in
quay.io/flomesh/flomesh-console-ubi8:0.70.0-30ce6938ff6709
knex@0.21.18
2.4.0

Open the chart page →

9,968
simple-db-app-chartsimple-db-app0.1.01 of 2See more

simple-db-app-chart simple-db-app 0.1.0

1 of the 2 container images this version deploys carry CVE-2016-20018.

Container imageDigestPackageFixed in
htmlprogrammer2001/simple-db-app:1.0a7e0a233a9bc
knex@0.95.15
2.4.0

Open the chart page →

1,925
simple-db-app-chart-with-dependencysimple-db-app0.1.01 of 3See more

simple-db-app-chart-with-dependency simple-db-app 0.1.0

1 of the 3 container images this version deploys carry CVE-2016-20018.

Container imageDigestPackageFixed in
htmlprogrammer2001/simple-db-app:1.0a7e0a233a9bc
knex@0.95.15
2.4.0

Open the chart page →

1,925
pwssoketi0.2.41 of 1See more

pws soketi 0.2.4

1 of the 1 container images this version deploys carry CVE-2016-20018.

Container imageDigestPackageFixed in
quay.io/soketi/pws:0.8-16-alpine399d2e6b10ef
knex@0.95.11
2.4.0

Open the chart page →

3,228
csmmth-chartsVerified publisher0.1.01 of 3See more

csmm th-charts 0.1.0

1 of the 3 container images this version deploys carry CVE-2016-20018.

Container imageDigestPackageFixed in
catalysm/csmm:latestf003b35f54d9
knex@0.12.7
2.4.0

Open the chart page →

3,576
wikiwikijs3.0.01 of 2See more

wiki wikijs 3.0.0

1 of the 2 container images this version deploys carry CVE-2016-20018.

Container imageDigestPackageFixed in
requarks/wiki:268f0d1848261
knex@0.21.7
2.4.0

Open the chart page →

5,459

Container images carrying it

25 by charts deploying them

A fixed version is listed for 1 of the 1 affected package.

Container imageDigestPackageFixed inUsed by
mojaloop/account-lookup-service:v11.8.0b06d3287ea82
knex@0.95.5
2.4.0
3
htmlprogrammer2001/simple-db-app:1.0a7e0a233a9bc
knex@0.95.15
2.4.0
2
martinaif/backstage-k8s-demo-backend:test143bc40a3da0e
knex@0.21.5
2.4.0
2
mojaloop/central-ledger:v13.14.01abc8a7aa71c
knex@0.95.11
2.4.0
2
requarks/wiki:2:latest68f0d1848261
knex@0.21.7
2.4.0
2
catalysm/csmm:latestf003b35f54d9
knex@0.12.7
2.4.0
1
cryptexlabs/authf:0.12.11189c07411d7c
knex@0.95.15
2.4.0
1
getferdi/ferdi-server:1.3.26e620b85afaa
knex@0.15.2
2.4.0
1
library/ghost:6.37.01ef2e532ca4d
knex@0.20.15
2.4.0
1
library/ghost:6.25.12654b1e90413
knex@0.20.15
2.4.0
1
library/ghost:6.41.129773d6be407
knex@0.20.15
2.4.0
1
library/ghost:4.37.0767230c0f263
knex@0.21.21
2.4.0
1
library/ghost:6.39.0-alpine77196da4b0df
knex@0.20.15
2.4.0
1
library/ghost:5.79.083f7bf209844
knex@0.20.15
2.4.0
1
library/ghost:6.22.0-alpine3.23ac533a6988ee
knex@0.20.15
2.4.0
1
louislam/uptime-kuma:1.17.1a4eab252e5a2
knex@0.95.15
2.4.0
1
louislam/uptime-kuma:1.18.5a84767d7934f
knex@0.95.15
2.4.0
1
requarks/wiki:canary-2.5.2438b5865a7386c
knex@0.21.21
2.4.0
1
roadiehq/community-backstage-image:latestef355bf5b639
knex@0.95.6
2.4.0
1
shinobisystems/shinobi:dev3ca746937856
knex@0.21.19
2.4.0
1
shinobisystems/shinobi:latestc2f5ce2e1067
knex@0.21.19
2.4.0
1
tooljet/tooljet-ce:v1.18.0c85a4720e42e
knex@0.95.15
2.4.0
1
ghcr.io/linuxserver/wikijs:version-2.5.20158d377933678
knex@0.21.19
2.4.0
1
quay.io/flomesh/flomesh-console-ubi8:0.70.0-30ce6938ff6709
knex@0.21.18
2.4.0
1
quay.io/soketi/pws:0.8-16-alpine399d2e6b10ef
knex@0.95.11
2.4.0
1

syft 1.42.1 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.