StackRadarChart IndexLive demo

CVE-2017-16137

Low

Advisory

Published 9 Aug 2018In the index since 6 Sept 2026

Severity: Low; worst across findings
CVSS: 3.7; base score, highest
EPSS: 0.028; 86th percentile
CISA KEV: Not listed; no confirmed exploitation
Charts affected: 139; of 17,781 indexed, latest versions
Container images: 130; deployed by those charts
Fix available: 1 of 1; affected package

Regular Expression Denial of Service in debug

Carried by container images the latest versions of 139 of 17,781 indexed charts deploy, on 130 images.

Affected package	Affected versions	Fixed in	Images
debugnpm	0.7.2, 0.7.4, 0.8.1, 1.0.5+8 more	2.6.9, 3.2.7, 4.3.1	130

OSV records: GHSA-gxpj-cx7g-858c

Charts affected

139 by stars

Chart

Latest

Affected images

Radar Score

mojaloopmojaloop

2 of 6 See more

mojaloop mojaloop 14.0.0

2 of the 6 container images this version deploys carry CVE-2017-16137.

Container image	Digest	Package	Fixed in
mojaloop/event-sidecar :v11.0.1	89b8ab71b74b	debug@3.2.6	3.2.7
mojaloop/ml-api-adapter :v11.1.6	fb71d233c742	debug@3.2.6	3.2.7

Open the chart page →

19,226

reporting-legacy-apimojaloop

1 of 1 See more

reporting-legacy-api mojaloop 2.2.0

1 of the 1 container images this version deploys carry CVE-2017-16137.

Container image	Digest	Package	Fixed in
mojaloop/reporting :v12.1.0	d480a62103d6	debug@0.7.2	2.6.9

Open the chart page →

1,948

sample-appmongodb-helm-charts

1 of 2 See more

sample-app mongodb-helm-charts 0.1.0

1 of the 2 container images this version deploys carry CVE-2017-16137.

Container image	Digest	Package	Fixed in
quay.io/mongodb/farm-intro-frontend :0.1	99ccdfd543e1	debug@3.2.6	3.2.7

Open the chart page →

6,438

monocularmonocular

2 of 5 See more

monocular monocular 1.4.15

2 of the 5 container images this version deploys carry CVE-2017-16137.

Container image	Digest	Package	Fixed in
migmartri/prerender :latest	486aacfd5aa9	debug@0.7.4	2.6.9
quay.io/helmpack/monocular-ui :v1.10.0	86b71e90319f	debug@2.2.0	2.6.9

Open the chart page →

7,048

sentence-collectormozilla

1 of 2 See more

sentence-collector mozilla 0.1.2

1 of the 2 container images this version deploys carry CVE-2017-16137.

Container image	Digest	Package	Fixed in
mozilla/sentencecollector :2.0.9	1da6ff5c4895	debug@4.1.1	4.3.1

Open the chart page →

6,684

ghostmt190502

1 of 3 See more

4,960

2 of 23 See more

smile ncsa 1.1.0

2 of the 23 container images this version deploys carry CVE-2017-16137.

Container image	Digest	Package	Fixed in
socialmediamacroscope/smile_graphql :0.3.1	c5095e94bc65	debug@2.6.1	2.6.9
socialmediamacroscope/smile_server :0.3.3	1a528c794270	debug@3.2.6	3.2.7

Open the chart page →

109,294

example-dev-toolsnoygal

2 of 3 See more

example-dev-tools noygal 0.2.8

2 of the 3 container images this version deploys carry CVE-2017-16137.

Container image	Digest	Package	Fixed in
linuxserver/cloud9 :latest	45c5fe102ff3	debug@2.2.0	2.6.9
linuxserver/codimd :latest	b801bbcf6386	debug@4.1.1	4.3.1

Open the chart page →

27,465

ferdi-serverobeone

1 of 2 See more

ferdi-server obeone 1.0.3

1 of the 2 container images this version deploys carry CVE-2017-16137.

Container image	Digest	Package	Fixed in
getferdi/ferdi-server :1.3.2	6e620b85afaa	debug@4.1.1	4.3.1

Open the chart page →

1,866

flomesh-consoleopenshift

1 of 2 See more

flomesh-console openshift 0.70.0-30-ubi8

1 of the 2 container images this version deploys carry CVE-2017-16137.

Container image	Digest	Package	Fixed in
quay.io/flomesh/flomesh-console-ubi8 :0.70.0-30	ce6938ff6709	debug@4.1.1	4.3.1

Open the chart page →

9,968

openwhiskopenwhisk

2 of 10 See more

openwhisk openwhisk 1.0.0

2 of the 10 container images this version deploys carry CVE-2017-16137.

Container image	Digest	Package	Fixed in
openwhisk/alarmprovider :2.2.0	b695a6ceb406	debug@3.2.6	3.2.7
openwhisk/ow-utils :1.0.0	c80dba0de3aa	debug@2.2.0	2.6.9

Open the chart page →

36,215

myappp4-helm

1 of 6 See more

myapp p4-helm 0.1.0

1 of the 6 container images this version deploys carry CVE-2017-16137.

Container image	Digest	Package	Fixed in
fjvela/urjc-fjvela-external-service :1.0.1	a8ebe5ca13fc	debug@3.2.6	3.2.7

Open the chart page →

19,720

codimdphntom

1 of 3 See more

6,524

practica-helmpractica-helm

1 of 7 See more

practica-helm practica-helm 0.1.0

1 of the 7 container images this version deploys carry CVE-2017-16137.

Container image	Digest	Package	Fixed in
slagattollas/weatherservice-practica :latest	68e7f56393fc	debug@3.2.6	3.2.7

Open the chart page →

28,484

stackrox-chartredhat-cop

1 of 1 See more

stackrox-chart redhat-cop 0.0.10

1 of the 1 container images this version deploys carry CVE-2017-16137.

Container image	Digest	Package	Fixed in
quay.io/rht-labs/stack-do500 :3.0.8	6ba82beff18e	debug@3.2.6	3.2.7

Open the chart page →

29,227

1 of 1 See more

5,215

unifi-protectschichtel

1 of 1 See more

unifi-protect schichtel 0.10.1

1 of the 1 container images this version deploys carry CVE-2017-16137.

Container image	Digest	Package	Fixed in
markdegroot/unifi-protect-arm64 :latest	d8445f2a0de6	debug@4.2.0	4.3.1

Open the chart page →

5,582

hedgedocschmitzis

1 of 1 See more

hedgedoc schmitzis 0.1.12

1 of the 1 container images this version deploys carry CVE-2017-16137.

Container image	Digest	Package	Fixed in
quay.io/hedgedoc/hedgedoc :1.9.4	e09967519a1d	debug@4.1.1	4.3.1

Open the chart page →

3,118

wekanschmitzis

1 of 1 See more

wekan schmitzis 1.1.1

1 of the 1 container images this version deploys carry CVE-2017-16137.

Container image	Digest	Package	Fixed in
quay.io/wekan/wekan :v5.65	cb17600883a3	debug@2.2.0	2.6.9

Open the chart page →

3,638

parkingsikalabs

1 of 1 See more

parking sikalabs 0.1.0

1 of the 1 container images this version deploys carry CVE-2017-16137.

Container image	Digest	Package	Fixed in
ondrejsika/parking :latest	b1fd497416c8	debug@4.1.1	4.3.1

Open the chart page →

3,696

speedtest-trackersoblivionscall

1 of 1 See more

speedtest-tracker soblivionscall 3.0.4

1 of the 1 container images this version deploys carry CVE-2017-16137.

Container image	Digest	Package	Fixed in
henrywhitaker3/speedtest-tracker :latest	47159a940229	debug@3.2.6	3.2.7

Open the chart page →

2,460

sorry-cypresssoftonic

1 of 4 See more

sorry-cypress softonic 1.20.0

1 of the 4 container images this version deploys carry CVE-2017-16137.

Container image	Digest	Package	Fixed in
agoldis/sorry-cypress-director :2.5.11	10228ecd353b	debug@4.2.0	4.3.1

Open the chart page →

4,285

pachydermstatcan

1 of 4 See more

pachyderm statcan 0.5.1

1 of the 4 container images this version deploys carry CVE-2017-16137.

Container image	Digest	Package	Fixed in
pachyderm/grpc-proxy :0.4.9	2b27f41d4d02	debug@3.2.6	3.2.7

Open the chart page →

4,967

grafanasvtech-public-helm-charts

1 of 2 See more

grafana svtech-public-helm-charts 1.0.0

1 of the 2 container images this version deploys carry CVE-2017-16137.

Container image	Digest	Package	Fixed in
svtechnmaa/svtech_grafana :v1.2.2	1d71314424aa	debug@4.1.1	4.3.1

Open the chart page →

10,902

1 of 1 See more

dashkiosk t3n 2.0.0

1 of the 1 container images this version deploys carry CVE-2017-16137.

Container image	Digest	Package	Fixed in
quay.io/t3n/dashkiosk :v2.7.8	c973e166a5dc	debug@2.2.0	2.6.9

Open the chart page →

3,827

trudesktechpreta

1 of 3 See more

trudesk techpreta 1.0.0

1 of the 3 container images this version deploys carry CVE-2017-16137.

Container image	Digest	Package	Fixed in
polonel/trudesk :1.2.6	0cf6513f6fe3	debug@4.1.1	4.3.1

Open the chart page →

4,017

vehicle-dashboardtest-vehi-dash

1 of 7 See more

vehicle-dashboard test-vehi-dash 0.1.0

1 of the 7 container images this version deploys carry CVE-2017-16137.

Container image	Digest	Package	Fixed in
samajh/alprbackend :latest	ea742b4372ad	debug@4.1.1	4.3.1

Open the chart page →

20,270

csmmth-charts

1 of 3 See more

3,576

thingsboardthingsboard

1 of 12 See more

thingsboard thingsboard 0.1.3

1 of the 12 container images this version deploys carry CVE-2017-16137.

Container image	Digest	Package	Fixed in
thingsboard/tb-js-executor :3.4.1	13e1eadf8ace	debug@4.1.1	4.3.1

Open the chart page →

25,394

kubernetes-external-secretstrozz

1 of 1 See more

kubernetes-external-secrets trozz 6.3.0

1 of the 1 container images this version deploys carry CVE-2017-16137.

Container image	Digest	Package	Fixed in
ghcr.io/external-secrets/kubernetes-external-secrets :6.3.0	eab9bd0b6986	debug@4.1.1	4.3.1

Open the chart page →

2,838

1 of 1 See more

hedgedoc vista 0.1.1

1 of the 1 container images this version deploys carry CVE-2017-16137.

Container image	Digest	Package	Fixed in
quay.io/hedgedoc/hedgedoc :1.9.4	e09967519a1d	debug@4.1.1	4.3.1

Open the chart page →

3,118

resultappvoting-app-helm-charts-repo

1 of 1 See more

resultapp voting-app-helm-charts-repo 1.0.0

1 of the 1 container images this version deploys carry CVE-2017-16137.

Container image	Digest	Package	Fixed in
kodekloud/examplevotingapp_result :v1	e510023fdf38	debug@4.1.1	4.3.1

Open the chart page →

1,263

voteappvoting-app-helm-charts-repo

1 of 5 See more

voteapp voting-app-helm-charts-repo 1.0.0

1 of the 5 container images this version deploys carry CVE-2017-16137.

Container image	Digest	Package	Fixed in
kodekloud/examplevotingapp_result :v1	e510023fdf38	debug@4.1.1	4.3.1

Open the chart page →

8,262

resultappvoting-app-helm-charts-repo-cloud

1 of 1 See more

resultapp voting-app-helm-charts-repo-cloud 1.0.0

1 of the 1 container images this version deploys carry CVE-2017-16137.

Container image	Digest	Package	Fixed in
kodekloud/examplevotingapp_result :v1	e510023fdf38	debug@4.1.1	4.3.1

Open the chart page →

1,263

voteappvoting-app-helm-charts-repo-cloud

1 of 5 See more

voteapp voting-app-helm-charts-repo-cloud 1.0.0

1 of the 5 container images this version deploys carry CVE-2017-16137.

Container image	Digest	Package	Fixed in
kodekloud/examplevotingapp_result :v1	e510023fdf38	debug@4.1.1	4.3.1

Open the chart page →

8,262

queryservice-gatewaywbstack

1 of 1 See more

queryservice-gateway wbstack 0.2.0

1 of the 1 container images this version deploys carry CVE-2017-16137.

Container image	Digest	Package	Fixed in
ghcr.io/wbstack/queryservice-gateway :2.2	ab8e2f583e56	debug@4.1.1	4.3.1

Open the chart page →

2,559

temporalwenerme

1 of 13 See more

temporal wenerme 0.15.1

1 of the 13 container images this version deploys carry CVE-2017-16137.

Container image	Digest	Package	Fixed in
temporalio/web :1.14.0	33cfa863d8ce	debug@3.2.6	3.2.7

Open the chart page →

22,665

wikiwikijs

1 of 2 See more

5,459

opendistro-eswitcom-gmbh

1 of 3 See more

opendistro-es witcom-gmbh 1.13.3

1 of the 3 container images this version deploys carry CVE-2017-16137.

Container image	Digest	Package	Fixed in
amazon/opendistro-for-elasticsearch-kibana :1.13.2	c740d7a89475	debug@4.1.1	4.3.1

Open the chart page →

5,806

Container images carrying it

130 by charts deploying them

A fixed version is listed for 1 of the 1 affected package.

Container image	Digest	Package	Fixed in	Used by
thelounge/thelounge :4.2.0-alpine	639978459c3a	debug@3.2.6	3.2.7	1
thingsboard/tb-js-executor :3.4.1	13e1eadf8ace	debug@4.1.1	4.3.1	1
treskon/portrait-ui :DEV-latest	e7970783bc8d	debug@3.2.6	3.2.7	1
tzahi12345/youtubedl-material :4.2	3720b856bd2f	debug@4.1.1	4.3.1	1
wekanteam/wekan :v4.22	68a51f0327df	debug@2.2.0	2.6.9	1
wiremind/scrapoxy :latest	e7048929a676	debug@3.2.6	3.2.7	1
zooz/predator :1.6	f491d1f7a865	debug@4.2.0	4.3.1	1
ghcr.io/buanet/iobroker :v9.1.2	ca7dc7362968	debug@2.2.0	2.6.9	1
ghcr.io/ctron/streamsheets-gateway :2.4.0	0635f17c9d2c	debug@4.1.1	4.3.1	1
ghcr.io/ctron/streamsheets-service-graphs :2.4.0	e34964e336c1	debug@3.2.6	3.2.7	1
ghcr.io/ctron/streamsheets-service-machines :2.4.0	0c5a3398d1e4	debug@3.2.6	3.2.7	1
ghcr.io/ctron/streamsheets-service-streams :2.4.0	8ba040e79ca0	debug@3.2.6	3.2.7	1
ghcr.io/data-fair/simple-directory :4	38a4f32fad82	debug@4.1.1	4.3.1	1
ghcr.io/exposr/exposrd :v0.12.0	561c8f23bdb6	debug@4.1.1	4.3.1	1
ghcr.io/external-secrets/kubernetes-external-secrets :6.3.0	eab9bd0b6986	debug@4.1.1	4.3.1	1
ghcr.io/flaresolverr/flaresolverr :v1.2.8	96f8c08c0c1b	debug@4.2.0	4.3.1	1
ghcr.io/k8s-at-home/haste-server :latest	827aa2f2389d	debug@4.1.1	4.3.1	1
ghcr.io/leoquote/mergeable :latest	451706815103	debug@4.1.1	4.3.1	1
ghcr.io/linuxserver/raneto :version-0.16.6	ef768f3df5d0	debug@4.1.1	4.3.1	1
ghcr.io/linuxserver/wikijs :version-2.5.201	58d377933678	debug@4.1.1	4.3.1	1
ghcr.io/mmontes11/iot-back :v3.11.0	96683c54ae65	debug@4.1.1	4.3.1	1
ghcr.io/mmontes11/iot-thing :v3.11.0	542e91e8499c	debug@4.1.1	4.3.1	1
ghcr.io/wbstack/queryservice-gateway :2.2	ab8e2f583e56	debug@4.1.1	4.3.1	1
quay.io/flomesh/flomesh-console-ubi8 :0.70.0-30	ce6938ff6709	debug@4.1.1	4.3.1	1
quay.io/helmpack/monocular-ui :v1.10.0	86b71e90319f	debug@2.2.0	2.6.9	1
quay.io/ibmgaragecloud/developer-dashboard :v1.4.4	7a4b9fedc724	debug@3.2.6	3.2.7	1
quay.io/mongodb/farm-intro-frontend :0.1	99ccdfd543e1	debug@3.2.6	3.2.7	1
quay.io/rht-labs/stack-do500 :3.0.8	6ba82beff18e	debug@3.2.6	3.2.7	1
quay.io/t3n/dashkiosk :v2.7.8	c973e166a5dc	debug@2.2.0	2.6.9	1
quay.io/wekan/wekan :v5.65	cb17600883a3	debug@2.2.0	2.6.9	1