StackRadarChart IndexLive demo

CVE-2017-20162

Medium

Advisory

Published 5 Jan 2023In the index since 6 Sept 2026

Severity: Medium; worst across findings
CVSS: 5.3; base score, highest
EPSS: 0.010; 61st percentile
CISA KEV: Not listed; no confirmed exploitation
Charts affected: 27; of 17,781 indexed, latest versions
Container images: 26; deployed by those charts
Fix available: 1 of 2; affected packages

Vercel ms Inefficient Regular Expression Complexity vulnerability

Carried by container images the latest versions of 27 of 17,781 indexed charts deploy, on 26 images.

Affected package	Affected versions	Fixed in	Images
msnpm	0.7.1, 0.7.2, 0.7.3	2.0.0	23
npmdeb	3.5.2-0ubuntu4, 6.14.4+ds-1ubuntu2, 9.2.0~ds1-2	no fix listed	6

OSV records: GHSA-w9mr-4mfr-499f UBUNTU-CVE-2017-20162

Charts affected

27 by stars

Chart

Latest

Affected images

Radar Score

microcksmicrocks

0.8.0-helm-3.kube-1.17

1 of 5 See more

microcks microcks 0.8.0-helm-3.kube-1.17

1 of the 5 container images this version deploys carry CVE-2017-20162.

Container image	Digest	Package	Fixed in
microcks/microcks-postman-runtime :latest	cb72e46a1b3c	ms@0.7.1	2.0.0

Open the chart page →

10,732

netris-controllernetrisai

1 of 14 See more

netris-controller netrisai 2.8.2

1 of the 14 container images this version deploys carry CVE-2017-20162.

Container image	Digest	Package	Fixed in
netrisai/controller-web-service-backend :4.6.0-008	6e865080e86c	ms@0.7.1	2.0.0

Open the chart page →

30,326

kongakonga

1 of 1 See more

5,209

1 of 1 See more

iobroker eugen 0.2.6

1 of the 1 container images this version deploys carry CVE-2017-20162.

Container image	Digest	Package	Fixed in
ghcr.io/buanet/iobroker :v9.1.2	ca7dc7362968	ms@0.7.1	2.0.0

Open the chart page →

11,458

splice-helmsplice-helm

1 of 13 See more

splice-helm splice-helm 0.1.7

1 of the 13 container images this version deploys carry CVE-2017-20162.

Container image	Digest	Package	Fixed in
jupyterhub/configurable-http-proxy :3.0.0	c36cf3cc1c99	ms@0.7.1	2.0.0

Open the chart page →

1,477

openapiassist-iot-open-api-management

1 of 6 See more

openapi assist-iot-open-api-management 0.2.2

1 of the 6 container images this version deploys carry CVE-2017-20162.

Container image	Digest	Package	Fixed in
pantsel/konga :latest	c8172b75607d	ms@0.7.2	2.0.0

Open the chart page →

18,277

registry-uibryanalves

1 of 1 See more

registry-ui bryanalves 0.2.0

1 of the 1 container images this version deploys carry CVE-2017-20162.

Container image	Digest	Package	Fixed in
konradkleine/docker-registry-frontend :v2	181aad54ee64	ms@0.7.2	2.0.0

Open the chart page →

4,069

otbrcharts-derwitt-dev

1 of 1 See more

otbr charts-derwitt-dev 0.2.0

1 of the 1 container images this version deploys carry CVE-2017-20162.

Container image	Digest	Package	Fixed in
openthread/otbr :latest	f307f59f6432	ms@0.7.1 npm@3.5.2-0ubuntu4	2.0.0 no fix listed

Open the chart page →

12,779

ethereumcloudnativeapp

1 of 3 See more

ethereum cloudnativeapp 1.0.0

1 of the 3 container images this version deploys carry CVE-2017-20162.

Container image	Digest	Package	Fixed in
ethereumex/eth-stats-dashboard :v0.0.1	a7603aa8df4c	ms@0.7.1 npm@3.5.2-0ubuntu4	2.0.0 no fix listed

Open the chart page →

27,417

codehubcodehub

1 of 5 See more

codehub codehub 6.2.18

1 of the 5 container images this version deploys carry CVE-2017-20162.

Container image	Digest	Package	Fixed in
jupyterhub/jupyterhub :5.4.6	3974ba945e65	npm@9.2.0~ds1-2	no fix listed

Open the chart page →

13,220

kongacreate-databases

1 of 1 See more

konga create-databases 0.1.0

1 of the 1 container images this version deploys carry CVE-2017-20162.

Container image	Digest	Package	Fixed in
pantsel/konga :latest	c8172b75607d	ms@0.7.2	2.0.0

Open the chart page →

5,209

logentriesfairwinds-incubator

1 of 1 See more

logentries fairwinds-incubator 0.2.2

1 of the 1 container images this version deploys carry CVE-2017-20162.

Container image	Digest	Package	Fixed in
logentries/docker-logentries :0.2.1	f1f90a236998	ms@0.7.2	2.0.0

Open the chart page →

1,597

wekan-oldgabisonfire

1 of 1 See more

wekan-old gabisonfire 0.1.2

1 of the 1 container images this version deploys carry CVE-2017-20162.

Container image	Digest	Package	Fixed in
wekanteam/wekan :v4.22	68a51f0327df	ms@0.7.1	2.0.0

Open the chart page →

5,941

ibm-app-navigatoribm-charts

2 of 5 See more

ibm-app-navigator ibm-charts 1.0.1

2 of the 5 container images this version deploys carry CVE-2017-20162.

Container image	Digest	Package	Fixed in
ibmcom/app-nav-init :1.0.1	240ff499eb5b	ms@0.7.1	2.0.0
ibmcom/app-nav-ui :1.0.1	e2a86997b36b	ms@0.7.1	2.0.0

Open the chart page →

32,915

ibm-microclimateibm-charts

1 of 8 See more

ibm-microclimate ibm-charts 0.1.0

1 of the 8 container images this version deploys carry CVE-2017-20162.

Container image	Digest	Package	Fixed in
ibmcom/microclimate-portal :latest	ed5505e5c7ec	ms@0.7.1	2.0.0

Open the chart page →

57,669

backstageirembo-backstage-helm

1 of 3 See more

backstage irembo-backstage-helm 1.0.5

1 of the 3 container images this version deploys carry CVE-2017-20162.

Container image	Digest	Package	Fixed in
roadiehq/community-backstage-image :latest	ef355bf5b639	ms@0.7.1	2.0.0

Open the chart page →

7,232

monocularjenkins-x

1 of 4 See more

monocular jenkins-x 0.6.4

1 of the 4 container images this version deploys carry CVE-2017-20162.

Container image	Digest	Package	Fixed in
migmartri/prerender :latest	486aacfd5aa9	ms@0.7.2	2.0.0

Open the chart page →

4,614

yapijoelee2012

1 of 1 See more

6,454

nubladolsst-sqre

1 of 5 See more

nublado lsst-sqre 0.9.23

1 of the 5 container images this version deploys carry CVE-2017-20162.

Container image	Digest	Package	Fixed in
lsstsqre/sciplat-hub :latest	5e0ade6bed1c	ms@0.7.1	2.0.0

Open the chart page →

5,786

nublado2lsst-sqre

1 of 2 See more

nublado2 lsst-sqre 0.8.5

1 of the 2 container images this version deploys carry CVE-2017-20162.

Container image	Digest	Package	Fixed in
lsstsqre/nublado2 :2.0.1	b75bf8aaafa4	npm@6.14.4+ds-1ubuntu2	no fix listed

Open the chart page →

17,779

monocularmonocular

2 of 5 See more

monocular monocular 1.4.15

2 of the 5 container images this version deploys carry CVE-2017-20162.

Container image	Digest	Package	Fixed in
migmartri/prerender :latest	486aacfd5aa9	ms@0.7.2	2.0.0
quay.io/helmpack/monocular-ui :v1.10.0	86b71e90319f	ms@0.7.3	2.0.0

Open the chart page →

7,048

1 of 23 See more

smile ncsa 1.1.0

1 of the 23 container images this version deploys carry CVE-2017-20162.

Container image	Digest	Package	Fixed in
socialmediamacroscope/smile_graphql :0.3.1	c5095e94bc65	ms@0.7.1	2.0.0

Open the chart page →

109,294

example-dev-toolsnoygal

1 of 3 See more

example-dev-tools noygal 0.2.8

1 of the 3 container images this version deploys carry CVE-2017-20162.

Container image	Digest	Package	Fixed in
linuxserver/cloud9 :latest	45c5fe102ff3	ms@0.7.1	2.0.0

Open the chart page →

27,465

openwhiskopenwhisk

1 of 10 See more

openwhisk openwhisk 1.0.0

1 of the 10 container images this version deploys carry CVE-2017-20162.

Container image	Digest	Package	Fixed in
openwhisk/ow-utils :1.0.0	c80dba0de3aa	ms@0.7.1 npm@3.5.2-0ubuntu4	2.0.0 no fix listed

Open the chart page →

36,215

wekanschmitzis

1 of 1 See more

wekan schmitzis 1.1.1

1 of the 1 container images this version deploys carry CVE-2017-20162.

Container image	Digest	Package	Fixed in
quay.io/wekan/wekan :v5.65	cb17600883a3	ms@0.7.1	2.0.0

Open the chart page →

3,638

grafanasvtech-public-helm-charts

1 of 2 See more

grafana svtech-public-helm-charts 1.0.0

1 of the 2 container images this version deploys carry CVE-2017-20162.

Container image	Digest	Package	Fixed in
svtechnmaa/svtech_grafana :v1.2.2	1d71314424aa	npm@6.14.4+ds-1ubuntu2	no fix listed

Open the chart page →

10,902

1 of 1 See more

dashkiosk t3n 2.0.0

1 of the 1 container images this version deploys carry CVE-2017-20162.

Container image	Digest	Package	Fixed in
quay.io/t3n/dashkiosk :v2.7.8	c973e166a5dc	ms@0.7.1	2.0.0

Open the chart page →

3,827

Container images carrying it

26 by charts deploying them

A fixed version is listed for 1 of the 2 affected packages.

Container image	Digest	Package	Fixed in	Used by
pantsel/konga :latest	c8172b75607d	ms@0.7.2	2.0.0	3
migmartri/prerender :latest	486aacfd5aa9	ms@0.7.2	2.0.0	2
ethereumex/eth-stats-dashboard :v0.0.1	a7603aa8df4c	ms@0.7.1 npm@3.5.2-0ubuntu4	2.0.0 no fix listed	1
ibmcom/app-nav-init :1.0.1	240ff499eb5b	ms@0.7.1	2.0.0	1
ibmcom/app-nav-ui :1.0.1	e2a86997b36b	ms@0.7.1	2.0.0	1
ibmcom/microclimate-portal :latest	ed5505e5c7ec	ms@0.7.1	2.0.0	1
jayfong/yapi :1.10.2	163e5d621910	ms@0.7.2	2.0.0	1
jupyterhub/configurable-http-proxy :3.0.0	c36cf3cc1c99	ms@0.7.1	2.0.0	1
jupyterhub/jupyterhub :5.4.6	3974ba945e65	npm@9.2.0~ds1-2	no fix listed	1
konradkleine/docker-registry-frontend :v2	181aad54ee64	ms@0.7.2	2.0.0	1
linuxserver/cloud9 :latest	45c5fe102ff3	ms@0.7.1	2.0.0	1
logentries/docker-logentries :0.2.1	f1f90a236998	ms@0.7.2	2.0.0	1
lsstsqre/nublado2 :2.0.1	b75bf8aaafa4	npm@6.14.4+ds-1ubuntu2	no fix listed	1
lsstsqre/sciplat-hub :latest	5e0ade6bed1c	ms@0.7.1	2.0.0	1
microcks/microcks-postman-runtime :latest	cb72e46a1b3c	ms@0.7.1	2.0.0	1
netrisai/controller-web-service-backend :4.6.0-008	6e865080e86c	ms@0.7.1	2.0.0	1
openthread/otbr :latest	f307f59f6432	ms@0.7.1 npm@3.5.2-0ubuntu4	2.0.0 no fix listed	1
openwhisk/ow-utils :1.0.0	c80dba0de3aa	ms@0.7.1 npm@3.5.2-0ubuntu4	2.0.0 no fix listed	1
roadiehq/community-backstage-image :latest	ef355bf5b639	ms@0.7.1	2.0.0	1
socialmediamacroscope/smile_graphql :0.3.1	c5095e94bc65	ms@0.7.1	2.0.0	1
svtechnmaa/svtech_grafana :v1.2.2	1d71314424aa	npm@6.14.4+ds-1ubuntu2	no fix listed	1
wekanteam/wekan :v4.22	68a51f0327df	ms@0.7.1	2.0.0	1
ghcr.io/buanet/iobroker :v9.1.2	ca7dc7362968	ms@0.7.1	2.0.0	1
quay.io/helmpack/monocular-ui :v1.10.0	86b71e90319f	ms@0.7.3	2.0.0	1
quay.io/t3n/dashkiosk :v2.7.8	c973e166a5dc	ms@0.7.1	2.0.0	1
quay.io/wekan/wekan :v5.65	cb17600883a3	ms@0.7.1	2.0.0	1