StackRadarChart IndexLive demo

CVE-2017-18077

High

Advisory

Published 29 Jan 2018In the index since 6 Sept 2026

Severity: High; worst across findings
CVSS: 7.5; base score, highest
EPSS: 0.026; 84th percentile
CISA KEV: Not listed; no confirmed exploitation
Charts affected: 14; of 17,781 indexed, latest versions
Container images: 14; deployed by those charts
Fix available: 1 of 1; affected package

ReDoS in brace-expansion

Carried by container images the latest versions of 14 of 17,781 indexed charts deploy, on 14 images.

Affected package	Affected versions	Fixed in	Images
brace-expansionnpm	1.1.1, 1.1.2, 1.1.4, 1.1.5+1 more	1.1.7	14

OSV records: GHSA-832h-xg76-4gv6

Charts affected

14 by stars

Chart

Latest

Affected images

Radar Score

microcksmicrocks

0.8.0-helm-3.kube-1.17

1 of 5 See more

microcks microcks 0.8.0-helm-3.kube-1.17

1 of the 5 container images this version deploys carry CVE-2017-18077.

Container image	Digest	Package	Fixed in
microcks/microcks-postman-runtime :latest	cb72e46a1b3c	brace-expansion@1.1.6	1.1.7

Open the chart page →

10,732

splice-helmsplice-helm

1 of 13 See more

splice-helm splice-helm 0.1.7

1 of the 13 container images this version deploys carry CVE-2017-18077.

Container image	Digest	Package	Fixed in
jupyterhub/configurable-http-proxy :3.0.0	c36cf3cc1c99	brace-expansion@1.1.6	1.1.7

Open the chart page →

1,477

otbrcharts-derwitt-dev

1 of 1 See more

otbr charts-derwitt-dev 0.2.0

1 of the 1 container images this version deploys carry CVE-2017-18077.

Container image	Digest	Package	Fixed in
openthread/otbr :latest	f307f59f6432	brace-expansion@1.1.1	1.1.7

Open the chart page →

12,779

ethereumcloudnativeapp

1 of 3 See more

ethereum cloudnativeapp 1.0.0

1 of the 3 container images this version deploys carry CVE-2017-18077.

Container image	Digest	Package	Fixed in
ethereumex/eth-stats-dashboard :v0.0.1	a7603aa8df4c	brace-expansion@1.1.1	1.1.7

Open the chart page →

27,417

webpagetest-agentcloudnativeapp

1 of 1 See more

webpagetest-agent cloudnativeapp 0.2.0

1 of the 1 container images this version deploys carry CVE-2017-18077.

Container image	Digest	Package	Fixed in
timothyclarke/wptagent :2018-01-23	22c41e5ca7e2	brace-expansion@1.1.6	1.1.7

Open the chart page →

77,758

logentriesfairwinds-incubator

1 of 1 See more

logentries fairwinds-incubator 0.2.2

1 of the 1 container images this version deploys carry CVE-2017-18077.

Container image	Digest	Package	Fixed in
logentries/docker-logentries :0.2.1	f1f90a236998	brace-expansion@1.1.6	1.1.7

Open the chart page →

1,597

wekan-oldgabisonfire

1 of 1 See more

wekan-old gabisonfire 0.1.2

1 of the 1 container images this version deploys carry CVE-2017-18077.

Container image	Digest	Package	Fixed in
wekanteam/wekan :v4.22	68a51f0327df	brace-expansion@1.1.6	1.1.7

Open the chart page →

5,941

ibm-app-navigatoribm-charts

2 of 5 See more

ibm-app-navigator ibm-charts 1.0.1

2 of the 5 container images this version deploys carry CVE-2017-18077.

Container image	Digest	Package	Fixed in
ibmcom/app-nav-init :1.0.1	240ff499eb5b	brace-expansion@1.1.5	1.1.7
ibmcom/app-nav-ui :1.0.1	e2a86997b36b	brace-expansion@1.1.5	1.1.7

Open the chart page →

32,915

monocularjenkins-x

1 of 4 See more

monocular jenkins-x 0.6.4

1 of the 4 container images this version deploys carry CVE-2017-18077.

Container image	Digest	Package	Fixed in
migmartri/prerender :latest	486aacfd5aa9	brace-expansion@1.1.6	1.1.7

Open the chart page →

4,614

nubladolsst-sqre

1 of 5 See more

nublado lsst-sqre 0.9.23

1 of the 5 container images this version deploys carry CVE-2017-18077.

Container image	Digest	Package	Fixed in
lsstsqre/sciplat-hub :latest	5e0ade6bed1c	brace-expansion@1.1.6	1.1.7

Open the chart page →

5,786

monocularmonocular

1 of 5 See more

monocular monocular 1.4.15

1 of the 5 container images this version deploys carry CVE-2017-18077.

Container image	Digest	Package	Fixed in
migmartri/prerender :latest	486aacfd5aa9	brace-expansion@1.1.6	1.1.7

Open the chart page →

7,048

example-dev-toolsnoygal

1 of 3 See more

example-dev-tools noygal 0.2.8

1 of the 3 container images this version deploys carry CVE-2017-18077.

Container image	Digest	Package	Fixed in
linuxserver/cloud9 :latest	45c5fe102ff3	brace-expansion@1.1.4	1.1.7

Open the chart page →

27,465

openwhiskopenwhisk

1 of 10 See more

openwhisk openwhisk 1.0.0

1 of the 10 container images this version deploys carry CVE-2017-18077.

Container image	Digest	Package	Fixed in
openwhisk/ow-utils :1.0.0	c80dba0de3aa	brace-expansion@1.1.2	1.1.7

Open the chart page →

36,215

wekanschmitzis

1 of 1 See more

wekan schmitzis 1.1.1

1 of the 1 container images this version deploys carry CVE-2017-18077.

Container image	Digest	Package	Fixed in
quay.io/wekan/wekan :v5.65	cb17600883a3	brace-expansion@1.1.6	1.1.7

Open the chart page →

3,638

Container images carrying it

14 by charts deploying them

A fixed version is listed for 1 of the 1 affected package.

Container image	Digest	Package	Fixed in	Used by
migmartri/prerender :latest	486aacfd5aa9	brace-expansion@1.1.6	1.1.7	2
ethereumex/eth-stats-dashboard :v0.0.1	a7603aa8df4c	brace-expansion@1.1.1	1.1.7	1
ibmcom/app-nav-init :1.0.1	240ff499eb5b	brace-expansion@1.1.5	1.1.7	1
ibmcom/app-nav-ui :1.0.1	e2a86997b36b	brace-expansion@1.1.5	1.1.7	1
jupyterhub/configurable-http-proxy :3.0.0	c36cf3cc1c99	brace-expansion@1.1.6	1.1.7	1
linuxserver/cloud9 :latest	45c5fe102ff3	brace-expansion@1.1.4	1.1.7	1
logentries/docker-logentries :0.2.1	f1f90a236998	brace-expansion@1.1.6	1.1.7	1
lsstsqre/sciplat-hub :latest	5e0ade6bed1c	brace-expansion@1.1.6	1.1.7	1
microcks/microcks-postman-runtime :latest	cb72e46a1b3c	brace-expansion@1.1.6	1.1.7	1
openthread/otbr :latest	f307f59f6432	brace-expansion@1.1.1	1.1.7	1
openwhisk/ow-utils :1.0.0	c80dba0de3aa	brace-expansion@1.1.2	1.1.7	1
timothyclarke/wptagent :2018-01-23	22c41e5ca7e2	brace-expansion@1.1.6	1.1.7	1
wekanteam/wekan :v4.22	68a51f0327df	brace-expansion@1.1.6	1.1.7	1
quay.io/wekan/wekan :v5.65	cb17600883a3	brace-expansion@1.1.6	1.1.7	1