StackRadarChart IndexLive demo

CVE-2017-16119

High

Advisory

Published 24 Jul 2018In the index since 6 Sept 2026

Severity: High; worst across findings
CVSS: 7.5; base score, highest
EPSS: 0.016; 74th percentile
CISA KEV: Not listed; no confirmed exploitation
Charts affected: 19; of 17,781 indexed, latest versions
Container images: 15; deployed by those charts
Fix available: 1 of 1; affected package

Regular Expression Denial of Service in fresh

Carried by container images the latest versions of 19 of 17,781 indexed charts deploy, on 15 images.

Affected package	Affected versions	Fixed in	Images
freshnpm	0.2.0, 0.3.0, 0.5.0	0.5.2	15

OSV records: GHSA-9qj9-36jm-prpv

Charts affected

19 by stars

Chart

Latest

Affected images

Radar Score

microcksmicrocks

0.8.0-helm-3.kube-1.17

1 of 5 See more

microcks microcks 0.8.0-helm-3.kube-1.17

1 of the 5 container images this version deploys carry CVE-2017-16119.

Container image	Digest	Package	Fixed in
microcks/microcks-postman-runtime :latest	cb72e46a1b3c	fresh@0.5.0	0.5.2

Open the chart page →

10,732

netris-controllernetrisai

1 of 14 See more

netris-controller netrisai 2.8.2

1 of the 14 container images this version deploys carry CVE-2017-16119.

Container image	Digest	Package	Fixed in
netrisai/controller-web-service-backend :4.6.0-008	6e865080e86c	fresh@0.3.0	0.5.2

Open the chart page →

30,326

open5gsopen5gs

1 of 5 See more

open5gs open5gs 2.3.4

1 of the 5 container images this version deploys carry CVE-2017-16119.

Container image	Digest	Package	Fixed in
gradiant/open5gs-webui :2.7.5	fbd10c017541	fresh@0.5.0	0.5.2

Open the chart page →

9,261

kongakonga

1 of 1 See more

5,209

open5gs-webuiopen5gs-webui

1 of 2 See more

open5gs-webui open5gs-webui 2.3.1

1 of the 2 container images this version deploys carry CVE-2017-16119.

Container image	Digest	Package	Fixed in
gradiant/open5gs-webui :2.7.5	fbd10c017541	fresh@0.5.0	0.5.2

Open the chart page →

5,300

open5gsadaptivenetlab

1 of 3 See more

open5gs adaptivenetlab 1.0.3

1 of the 3 container images this version deploys carry CVE-2017-16119.

Container image	Digest	Package	Fixed in
registry.gitlab.com/infinitydon/registry/open5gs-webui :v2.2.2	fda21b0a0344	fresh@0.5.0	0.5.2

Open the chart page →

25,443

openapiassist-iot-open-api-management

1 of 6 See more

openapi assist-iot-open-api-management 0.2.2

1 of the 6 container images this version deploys carry CVE-2017-16119.

Container image	Digest	Package	Fixed in
pantsel/konga :latest	c8172b75607d	fresh@0.3.0	0.5.2

Open the chart page →

18,277

registry-uibryanalves

1 of 1 See more

registry-ui bryanalves 0.2.0

1 of the 1 container images this version deploys carry CVE-2017-16119.

Container image	Digest	Package	Fixed in
konradkleine/docker-registry-frontend :v2	181aad54ee64	fresh@0.3.0	0.5.2

Open the chart page →

4,069

ethereumcloudnativeapp

1 of 3 See more

ethereum cloudnativeapp 1.0.0

1 of the 3 container images this version deploys carry CVE-2017-16119.

Container image	Digest	Package	Fixed in
ethereumex/eth-stats-dashboard :v0.0.1	a7603aa8df4c	fresh@0.3.0	0.5.2

Open the chart page →

27,417

kongacreate-databases

1 of 1 See more

konga create-databases 0.1.0

1 of the 1 container images this version deploys carry CVE-2017-16119.

Container image	Digest	Package	Fixed in
pantsel/konga :latest	c8172b75607d	fresh@0.3.0	0.5.2

Open the chart page →

5,209

wekan-oldgabisonfire

1 of 1 See more

wekan-old gabisonfire 0.1.2

1 of the 1 container images this version deploys carry CVE-2017-16119.

Container image	Digest	Package	Fixed in
wekanteam/wekan :v4.22	68a51f0327df	fresh@0.3.0	0.5.2

Open the chart page →

5,941

ibm-microclimateibm-charts

1 of 8 See more

ibm-microclimate ibm-charts 0.1.0

1 of the 8 container images this version deploys carry CVE-2017-16119.

Container image	Digest	Package	Fixed in
ibmcom/microclimate-portal :latest	ed5505e5c7ec	fresh@0.5.0	0.5.2

Open the chart page →

57,669

yapijoelee2012

1 of 1 See more

6,454

finance-portalmojaloop

1 of 11 See more

finance-portal mojaloop 5.1.4

1 of the 11 container images this version deploys carry CVE-2017-16119.

Container image	Digest	Package	Fixed in
mojaloop/reporting :v12.1.0	d480a62103d6	fresh@0.2.0	0.5.2

Open the chart page →

14,809

reporting-legacy-apimojaloop

1 of 1 See more

reporting-legacy-api mojaloop 2.2.0

1 of the 1 container images this version deploys carry CVE-2017-16119.

Container image	Digest	Package	Fixed in
mojaloop/reporting :v12.1.0	d480a62103d6	fresh@0.2.0	0.5.2

Open the chart page →

1,948

1 of 23 See more

smile ncsa 1.1.0

1 of the 23 container images this version deploys carry CVE-2017-16119.

Container image	Digest	Package	Fixed in
socialmediamacroscope/smile_graphql :0.3.1	c5095e94bc65	fresh@0.3.0	0.5.2

Open the chart page →

109,294

example-dev-toolsnoygal

1 of 3 See more

example-dev-tools noygal 0.2.8

1 of the 3 container images this version deploys carry CVE-2017-16119.

Container image	Digest	Package	Fixed in
linuxserver/cloud9 :latest	45c5fe102ff3	fresh@0.2.0	0.5.2

Open the chart page →

27,465

wekanschmitzis

1 of 1 See more

wekan schmitzis 1.1.1

1 of the 1 container images this version deploys carry CVE-2017-16119.

Container image	Digest	Package	Fixed in
quay.io/wekan/wekan :v5.65	cb17600883a3	fresh@0.3.0	0.5.2

Open the chart page →

3,638

1 of 1 See more

dashkiosk t3n 2.0.0

1 of the 1 container images this version deploys carry CVE-2017-16119.

Container image	Digest	Package	Fixed in
quay.io/t3n/dashkiosk :v2.7.8	c973e166a5dc	fresh@0.3.0	0.5.2

Open the chart page →

3,827

Container images carrying it

15 by charts deploying them

A fixed version is listed for 1 of the 1 affected package.

Container image	Digest	Package	Fixed in	Used by
pantsel/konga :latest	c8172b75607d	fresh@0.3.0	0.5.2	3
gradiant/open5gs-webui :2.7.5	fbd10c017541	fresh@0.5.0	0.5.2	2
mojaloop/reporting :v12.1.0	d480a62103d6	fresh@0.2.0	0.5.2	2
ethereumex/eth-stats-dashboard :v0.0.1	a7603aa8df4c	fresh@0.3.0	0.5.2	1
ibmcom/microclimate-portal :latest	ed5505e5c7ec	fresh@0.5.0	0.5.2	1
jayfong/yapi :1.10.2	163e5d621910	fresh@0.3.0	0.5.2	1
konradkleine/docker-registry-frontend :v2	181aad54ee64	fresh@0.3.0	0.5.2	1
linuxserver/cloud9 :latest	45c5fe102ff3	fresh@0.2.0	0.5.2	1
microcks/microcks-postman-runtime :latest	cb72e46a1b3c	fresh@0.5.0	0.5.2	1
netrisai/controller-web-service-backend :4.6.0-008	6e865080e86c	fresh@0.3.0	0.5.2	1
socialmediamacroscope/smile_graphql :0.3.1	c5095e94bc65	fresh@0.3.0	0.5.2	1
wekanteam/wekan :v4.22	68a51f0327df	fresh@0.3.0	0.5.2	1
quay.io/t3n/dashkiosk :v2.7.8	c973e166a5dc	fresh@0.3.0	0.5.2	1
quay.io/wekan/wekan :v5.65	cb17600883a3	fresh@0.3.0	0.5.2	1
registry.gitlab.com/infinitydon/registry/open5gs-webui :v2.2.2	fda21b0a0344	fresh@0.5.0	0.5.2	1