StackRadar

CVE-2017-20165

High

Advisory

Published 9 Jan 2023In the index since 6 Sept 2026
Severity
High
worst across findings
CVSS
7.5
base score, highest
EPSS
0.020
80th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
36
of 17,781 indexed, latest versions
Container images
33
deployed by those charts
Fix available
1 of 1
affected package

debug Inefficient Regular Expression Complexity vulnerability

Carried by container images the latest versions of 36 of 17,781 indexed charts deploy, on 33 images.

Affected packageAffected versionsFixed inImages
debugnpm0.7.2, 0.7.4, 0.8.1, 1.0.5+5 more2.6.933
OSV records
GHSA-9vvw-cc9w-f27h

Charts affected

36 by stars
ChartLatestAffected imagesRadar Score
microcksmicrocksOfficialVerified publisher0.8.0-helm-3.kube-1.171 of 5See more

microcks microcks 0.8.0-helm-3.kube-1.17

1 of the 5 container images this version deploys carry CVE-2017-20165.

Container imageDigestPackageFixed in
microcks/microcks-postman-runtime:latestcb72e46a1b3c
debug@2.6.7
2.6.9

Open the chart page →

10,732
netris-controllernetrisai2.8.21 of 14See more

netris-controller netrisai 2.8.2

1 of the 14 container images this version deploys carry CVE-2017-20165.

Container imageDigestPackageFixed in
netrisai/controller-web-service-backend:4.6.0-0086e865080e86c
debug@2.2.0
2.6.9

Open the chart page →

30,326
hubotdecayofmind1.0.21 of 3See more

hubot decayofmind 1.0.2

1 of the 3 container images this version deploys carry CVE-2017-20165.

Container imageDigestPackageFixed in
decayofmind/hubot:3.3.21e18e92fe694
debug@1.0.5
2.6.9

Open the chart page →

2,513
kongakonga1.1.01 of 1See more

konga konga 1.1.0

1 of the 1 container images this version deploys carry CVE-2017-20165.

Container imageDigestPackageFixed in
pantsel/konga:latestc8172b75607d
debug@2.2.0
2.6.9

Open the chart page →

5,209
data-fairdata354-helmVerified publisher1.1.21 of 12See more

data-fair data354-helm 1.1.2

1 of the 12 container images this version deploys carry CVE-2017-20165.

Container imageDigestPackageFixed in
koumoul/openapi-viewer:18eeca2e8285b
debug@2.6.8
2.6.9

Open the chart page →

38,346
iobrokereugen0.2.61 of 1See more

iobroker eugen 0.2.6

1 of the 1 container images this version deploys carry CVE-2017-20165.

Container imageDigestPackageFixed in
ghcr.io/buanet/iobroker:v9.1.2ca7dc7362968
debug@2.2.0
2.6.9

Open the chart page →

11,458
ranetogabisonfire0.1.21 of 1See more

raneto gabisonfire 0.1.2

1 of the 1 container images this version deploys carry CVE-2017-20165.

Container imageDigestPackageFixed in
ghcr.io/linuxserver/raneto:version-0.16.6ef768f3df5d0
debug@0.7.4
2.6.9

Open the chart page →

2,519
splice-helmsplice-helm0.1.71 of 13See more

splice-helm splice-helm 0.1.7

1 of the 13 container images this version deploys carry CVE-2017-20165.

Container imageDigestPackageFixed in
jupyterhub/configurable-http-proxy:3.0.0c36cf3cc1c99
debug@2.2.0
2.6.9

Open the chart page →

1,477
scrapoxywiremindVerified publisher0.3.41 of 1See more

scrapoxy wiremind 0.3.4

1 of the 1 container images this version deploys carry CVE-2017-20165.

Container imageDigestPackageFixed in
wiremind/scrapoxy:lateste7048929a676
debug@2.6.8
2.6.9

Open the chart page →

2,154
openapiassist-iot-open-api-management0.2.21 of 6See more

openapi assist-iot-open-api-management 0.2.2

1 of the 6 container images this version deploys carry CVE-2017-20165.

Container imageDigestPackageFixed in
pantsel/konga:latestc8172b75607d
debug@2.2.0
2.6.9

Open the chart page →

18,277
registry-uibryanalves0.2.01 of 1See more

registry-ui bryanalves 0.2.0

1 of the 1 container images this version deploys carry CVE-2017-20165.

Container imageDigestPackageFixed in
konradkleine/docker-registry-frontend:v2181aad54ee64
debug@1.0.5
2.6.9

Open the chart page →

4,069
otbrcharts-derwitt-devVerified publisher0.2.01 of 1See more

otbr charts-derwitt-dev 0.2.0

1 of the 1 container images this version deploys carry CVE-2017-20165.

Container imageDigestPackageFixed in
openthread/otbr:latestf307f59f6432
debug@2.2.0
2.6.9

Open the chart page →

12,779
ethereumcloudnativeapp1.0.01 of 3See more

ethereum cloudnativeapp 1.0.0

1 of the 3 container images this version deploys carry CVE-2017-20165.

Container imageDigestPackageFixed in
ethereumex/eth-stats-dashboard:v0.0.1a7603aa8df4c
debug@0.7.4
2.6.9

Open the chart page →

27,417
hubotcloudnativeapp0.0.11 of 1See more

hubot cloudnativeapp 0.0.1

1 of the 1 container images this version deploys carry CVE-2017-20165.

Container imageDigestPackageFixed in
minddocdev/hubot:0.1.96c60b11a4fa7
debug@1.0.5
2.6.9

Open the chart page →

2,580
kongacreate-databases0.1.01 of 1See more

konga create-databases 0.1.0

1 of the 1 container images this version deploys carry CVE-2017-20165.

Container imageDigestPackageFixed in
pantsel/konga:latestc8172b75607d
debug@2.2.0
2.6.9

Open the chart page →

5,209
backend-servicedev-krishan-dhaka-charts1.0.31 of 1See more

backend-service dev-krishan-dhaka-charts 1.0.3

1 of the 1 container images this version deploys carry CVE-2017-20165.

Container imageDigestPackageFixed in
devkrishan001/backend:latestf1c3acadeabe
debug@0.7.4
2.6.9

Open the chart page →

1,264
logentriesfairwinds-incubator0.2.21 of 1See more

logentries fairwinds-incubator 0.2.2

1 of the 1 container images this version deploys carry CVE-2017-20165.

Container imageDigestPackageFixed in
logentries/docker-logentries:0.2.1f1f90a236998
debug@2.6.0
2.6.9

Open the chart page →

1,597
wekan-oldgabisonfire0.1.21 of 1See more

wekan-old gabisonfire 0.1.2

1 of the 1 container images this version deploys carry CVE-2017-20165.

Container imageDigestPackageFixed in
wekanteam/wekan:v4.2268a51f0327df
debug@2.2.0
2.6.9

Open the chart page →

5,941
Governify-Bluejaygovernify0.1.01 of 12See more

Governify-Bluejay governify 0.1.0

1 of the 12 container images this version deploys carry CVE-2017-20165.

Container imageDigestPackageFixed in
governify/assets-manager:v1.4.12987672448c7
debug@0.8.1
2.6.9

Open the chart page →

22,512
Governify-Falcongovernify0.1.01 of 10See more

Governify-Falcon governify 0.1.0

1 of the 10 container images this version deploys carry CVE-2017-20165.

Container imageDigestPackageFixed in
governify/assets-manager:v1.4.12987672448c7
debug@0.8.1
2.6.9

Open the chart page →

24,319
gitter-irc-bridgehalkeye0.1.11 of 1See more

gitter-irc-bridge halkeye 0.1.1

1 of the 1 container images this version deploys carry CVE-2017-20165.

Container imageDigestPackageFixed in
halkeye/gitter-slack-bridge:v2.0.153eb2b3cd4cb
debug@0.8.1
2.6.9

Open the chart page →

3,642
matrix-appservice-gitterhalkeye0.1.01 of 1See more

matrix-appservice-gitter halkeye 0.1.0

1 of the 1 container images this version deploys carry CVE-2017-20165.

Container imageDigestPackageFixed in
matrixdotorg/matrix-appservice-gitter:latest0d37b4d42b47
debug@0.8.1
2.6.9

Open the chart page →

3,003
ibm-app-navigatoribm-charts1.0.12 of 5See more

ibm-app-navigator ibm-charts 1.0.1

2 of the 5 container images this version deploys carry CVE-2017-20165.

Container imageDigestPackageFixed in
ibmcom/app-nav-init:1.0.1240ff499eb5b
debug@2.2.0
2.6.9
ibmcom/app-nav-ui:1.0.1e2a86997b36b
debug@2.2.0
2.6.9

Open the chart page →

32,915
ibm-microclimateibm-charts0.1.01 of 8See more

ibm-microclimate ibm-charts 0.1.0

1 of the 8 container images this version deploys carry CVE-2017-20165.

Container imageDigestPackageFixed in
ibmcom/microclimate-portal:latested5505e5c7ec
debug@0.7.4
2.6.9

Open the chart page →

57,669
backstageirembo-backstage-helmVerified publisher1.0.51 of 3See more

backstage irembo-backstage-helm 1.0.5

1 of the 3 container images this version deploys carry CVE-2017-20165.

Container imageDigestPackageFixed in
roadiehq/community-backstage-image:latestef355bf5b639
debug@2.2.0
2.6.9

Open the chart page →

7,232
monocularjenkins-x0.6.41 of 4See more

monocular jenkins-x 0.6.4

1 of the 4 container images this version deploys carry CVE-2017-20165.

Container imageDigestPackageFixed in
migmartri/prerender:latest486aacfd5aa9
debug@0.7.4
2.6.9

Open the chart page →

4,614
yapijoelee2012Verified publisher0.2.01 of 1See more

yapi joelee2012 0.2.0

1 of the 1 container images this version deploys carry CVE-2017-20165.

Container imageDigestPackageFixed in
jayfong/yapi:1.10.2163e5d621910
debug@2.2.0
2.6.9

Open the chart page →

6,454
nubladolsst-sqre0.9.231 of 5See more

nublado lsst-sqre 0.9.23

1 of the 5 container images this version deploys carry CVE-2017-20165.

Container imageDigestPackageFixed in
lsstsqre/sciplat-hub:latest5e0ade6bed1c
debug@2.2.0
2.6.9

Open the chart page →

5,786
finance-portalmojaloop5.1.41 of 11See more

finance-portal mojaloop 5.1.4

1 of the 11 container images this version deploys carry CVE-2017-20165.

Container imageDigestPackageFixed in
mojaloop/reporting:v12.1.0d480a62103d6
debug@0.7.2
2.6.9

Open the chart page →

14,809
reporting-legacy-apimojaloop2.2.01 of 1See more

reporting-legacy-api mojaloop 2.2.0

1 of the 1 container images this version deploys carry CVE-2017-20165.

Container imageDigestPackageFixed in
mojaloop/reporting:v12.1.0d480a62103d6
debug@0.7.2
2.6.9

Open the chart page →

1,948
monocularmonocular1.4.152 of 5See more

monocular monocular 1.4.15

2 of the 5 container images this version deploys carry CVE-2017-20165.

Container imageDigestPackageFixed in
migmartri/prerender:latest486aacfd5aa9
debug@0.7.4
2.6.9
quay.io/helmpack/monocular-ui:v1.10.086b71e90319f
debug@2.2.0
2.6.9

Open the chart page →

7,048
smilencsaVerified publisher1.1.01 of 23See more

smile ncsa 1.1.0

1 of the 23 container images this version deploys carry CVE-2017-20165.

Container imageDigestPackageFixed in
socialmediamacroscope/smile_graphql:0.3.1c5095e94bc65
debug@2.6.1
2.6.9

Open the chart page →

109,294
example-dev-toolsnoygal0.2.81 of 3See more

example-dev-tools noygal 0.2.8

1 of the 3 container images this version deploys carry CVE-2017-20165.

Container imageDigestPackageFixed in
linuxserver/cloud9:latest45c5fe102ff3
debug@2.2.0
2.6.9

Open the chart page →

27,465
openwhiskopenwhisk1.0.01 of 10See more

openwhisk openwhisk 1.0.0

1 of the 10 container images this version deploys carry CVE-2017-20165.

Container imageDigestPackageFixed in
openwhisk/ow-utils:1.0.0c80dba0de3aa
debug@2.2.0
2.6.9

Open the chart page →

36,215
wekanschmitzis1.1.11 of 1See more

wekan schmitzis 1.1.1

1 of the 1 container images this version deploys carry CVE-2017-20165.

Container imageDigestPackageFixed in
quay.io/wekan/wekan:v5.65cb17600883a3
debug@2.2.0
2.6.9

Open the chart page →

3,638
dashkioskt3n2.0.01 of 1See more

dashkiosk t3n 2.0.0

1 of the 1 container images this version deploys carry CVE-2017-20165.

Container imageDigestPackageFixed in
quay.io/t3n/dashkiosk:v2.7.8c973e166a5dc
debug@2.2.0
2.6.9

Open the chart page →

3,827

Container images carrying it

33 by charts deploying them

A fixed version is listed for 1 of the 1 affected package.

Container imageDigestPackageFixed inUsed by
pantsel/konga:latestc8172b75607d
debug@2.2.0
2.6.9
3
governify/assets-manager:v1.4.12987672448c7
debug@0.8.1
2.6.9
2
migmartri/prerender:latest486aacfd5aa9
debug@0.7.4
2.6.9
2
mojaloop/reporting:v12.1.0d480a62103d6
debug@0.7.2
2.6.9
2
decayofmind/hubot:3.3.21e18e92fe694
debug@1.0.5
2.6.9
1
devkrishan001/backend:latestf1c3acadeabe
debug@0.7.4
2.6.9
1
ethereumex/eth-stats-dashboard:v0.0.1a7603aa8df4c
debug@0.7.4
2.6.9
1
halkeye/gitter-slack-bridge:v2.0.153eb2b3cd4cb
debug@0.8.1
2.6.9
1
ibmcom/app-nav-init:1.0.1240ff499eb5b
debug@2.2.0
2.6.9
1
ibmcom/app-nav-ui:1.0.1e2a86997b36b
debug@2.2.0
2.6.9
1
ibmcom/microclimate-portal:latested5505e5c7ec
debug@0.7.4
2.6.9
1
jayfong/yapi:1.10.2163e5d621910
debug@2.2.0
2.6.9
1
jupyterhub/configurable-http-proxy:3.0.0c36cf3cc1c99
debug@2.2.0
2.6.9
1
konradkleine/docker-registry-frontend:v2181aad54ee64
debug@1.0.5
2.6.9
1
koumoul/openapi-viewer:18eeca2e8285b
debug@2.6.8
2.6.9
1
linuxserver/cloud9:latest45c5fe102ff3
debug@2.2.0
2.6.9
1
logentries/docker-logentries:0.2.1f1f90a236998
debug@2.6.0
2.6.9
1
lsstsqre/sciplat-hub:latest5e0ade6bed1c
debug@2.2.0
2.6.9
1
matrixdotorg/matrix-appservice-gitter:latest0d37b4d42b47
debug@0.8.1
2.6.9
1
microcks/microcks-postman-runtime:latestcb72e46a1b3c
debug@2.6.7
2.6.9
1
minddocdev/hubot:0.1.96c60b11a4fa7
debug@1.0.5
2.6.9
1
netrisai/controller-web-service-backend:4.6.0-0086e865080e86c
debug@2.2.0
2.6.9
1
openthread/otbr:latestf307f59f6432
debug@2.2.0
2.6.9
1
openwhisk/ow-utils:1.0.0c80dba0de3aa
debug@2.2.0
2.6.9
1
roadiehq/community-backstage-image:latestef355bf5b639
debug@2.2.0
2.6.9
1
socialmediamacroscope/smile_graphql:0.3.1c5095e94bc65
debug@2.6.1
2.6.9
1
wekanteam/wekan:v4.2268a51f0327df
debug@2.2.0
2.6.9
1
wiremind/scrapoxy:lateste7048929a676
debug@2.6.8
2.6.9
1
ghcr.io/buanet/iobroker:v9.1.2ca7dc7362968
debug@2.2.0
2.6.9
1
ghcr.io/linuxserver/raneto:version-0.16.6ef768f3df5d0
debug@0.7.4
2.6.9
1
quay.io/helmpack/monocular-ui:v1.10.086b71e90319f
debug@2.2.0
2.6.9
1
quay.io/t3n/dashkiosk:v2.7.8c973e166a5dc
debug@2.2.0
2.6.9
1
quay.io/wekan/wekan:v5.65cb17600883a3
debug@2.2.0
2.6.9
1

syft 1.42.1 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.