StackRadarChart IndexLive demo

CVE-2018-3750

Critical

Advisory

Published 9 Oct 2018In the index since 6 Sept 2026

Severity: Critical; worst across findings
CVSS: 9.8; base score, highest
EPSS: 0.021; 81st percentile
CISA KEV: Not listed; no confirmed exploitation
Charts affected: 24; of 17,781 indexed, latest versions
Container images: 23; deployed by those charts
Fix available: 1 of 1; affected package

Prototype Pollution in deep-extend

Carried by container images the latest versions of 24 of 17,781 indexed charts deploy, on 23 images.

Affected package	Affected versions	Fixed in	Images
deep-extendnpm	0.2.11, 0.4.1, 0.4.2	0.5.1	23

OSV records: GHSA-hr2v-3952-633q

Charts affected

24 by stars

Chart

Latest

Affected images

Radar Score

calibregeek-cookbook

1 of 1 See more

calibre geek-cookbook 5.4.2

1 of the 1 container images this version deploys carry CVE-2018-3750.

Container image	Digest	Package	Fixed in
linuxserver/calibre :version-v5.21.0	a847b5b2d860	deep-extend@0.4.2	0.5.1

Open the chart page →

22,773

kongakonga

1 of 1 See more

5,209

dltbrokerassist-iot-distributed-broker

2 of 9 See more

dltbroker assist-iot-distributed-broker 0.2.0

2 of the 9 container images this version deploys carry CVE-2018-3750.

Container image	Digest	Package	Fixed in
hyperledger/fabric-ca-tools :latest	4ce6f43ded2e	deep-extend@0.4.2	0.5.1
hyperledger/fabric-couchdb :0.4.15	f6c724592abf	deep-extend@0.4.2	0.5.1

Open the chart page →

77,706

dltloggingassist-iot-logging-auditing

2 of 9 See more

dltlogging assist-iot-logging-auditing 0.2.0

2 of the 9 container images this version deploys carry CVE-2018-3750.

Container image	Digest	Package	Fixed in
hyperledger/fabric-ca-tools :latest	4ce6f43ded2e	deep-extend@0.4.2	0.5.1
hyperledger/fabric-couchdb :0.4.15	f6c724592abf	deep-extend@0.4.2	0.5.1

Open the chart page →

77,687

data-fairdata354-helm

1 of 12 See more

data-fair data354-helm 1.1.2

1 of the 12 container images this version deploys carry CVE-2018-3750.

Container image	Digest	Package	Fixed in
koumoul/openapi-viewer :1	8eeca2e8285b	deep-extend@0.4.2	0.5.1

Open the chart page →

38,346

dltkvassist-iot-data-integrity-verification

2 of 9 See more

dltkv assist-iot-data-integrity-verification 0.2.0

2 of the 9 container images this version deploys carry CVE-2018-3750.

Container image	Digest	Package	Fixed in
hyperledger/fabric-ca-tools :latest	4ce6f43ded2e	deep-extend@0.4.2	0.5.1
hyperledger/fabric-couchdb :0.4.15	f6c724592abf	deep-extend@0.4.2	0.5.1

Open the chart page →

77,706

dltflassist-iot-dlt-based-fl

2 of 9 See more

dltfl assist-iot-dlt-based-fl 0.2.0

2 of the 9 container images this version deploys carry CVE-2018-3750.

Container image	Digest	Package	Fixed in
hyperledger/fabric-ca-tools :latest	4ce6f43ded2e	deep-extend@0.4.2	0.5.1
hyperledger/fabric-couchdb :0.4.15	f6c724592abf	deep-extend@0.4.2	0.5.1

Open the chart page →

77,706

openapiassist-iot-open-api-management

1 of 6 See more

openapi assist-iot-open-api-management 0.2.2

1 of the 6 container images this version deploys carry CVE-2018-3750.

Container image	Digest	Package	Fixed in
pantsel/konga :latest	c8172b75607d	deep-extend@0.4.2	0.5.1

Open the chart page →

18,277

registry-uibryanalves

1 of 1 See more

registry-ui bryanalves 0.2.0

1 of the 1 container images this version deploys carry CVE-2018-3750.

Container image	Digest	Package	Fixed in
konradkleine/docker-registry-frontend :v2	181aad54ee64	deep-extend@0.2.11	0.5.1

Open the chart page →

4,069

daskcloudnativeapp

1 of 2 See more

dask cloudnativeapp 2.2.1

1 of the 2 container images this version deploys carry CVE-2018-3750.

Container image	Digest	Package	Fixed in
daskdev/dask-notebook :1.1.0	052630f5ca04	deep-extend@0.4.2	0.5.1

Open the chart page →

29,901

ethereumcloudnativeapp

1 of 3 See more

ethereum cloudnativeapp 1.0.0

1 of the 3 container images this version deploys carry CVE-2018-3750.

Container image	Digest	Package	Fixed in
ethereumex/eth-stats-dashboard :v0.0.1	a7603aa8df4c	deep-extend@0.4.2	0.5.1

Open the chart page →

27,417

hlf-couchdbcloudnativeapp

1 of 1 See more

hlf-couchdb cloudnativeapp 1.0.6

1 of the 1 container images this version deploys carry CVE-2018-3750.

Container image	Digest	Package	Fixed in
hyperledger/fabric-couchdb :0.4.10	c65891b6c237	deep-extend@0.4.2	0.5.1

Open the chart page →

33,963

node-redcloudnativeapp

1 of 1 See more

node-red cloudnativeapp 1.2.2

1 of the 1 container images this version deploys carry CVE-2018-3750.

Container image	Digest	Package	Fixed in
nodered/node-red-docker :0.19.6-v8	070643219ea2	deep-extend@0.4.2	0.5.1

Open the chart page →

4,790

webpagetest-agentcloudnativeapp

1 of 1 See more

webpagetest-agent cloudnativeapp 0.2.0

1 of the 1 container images this version deploys carry CVE-2018-3750.

Container image	Digest	Package	Fixed in
timothyclarke/wptagent :2018-01-23	22c41e5ca7e2	deep-extend@0.4.2	0.5.1

Open the chart page →

77,758

developer-dashboardcloud-native-toolkit

1 of 1 See more

developer-dashboard cloud-native-toolkit 1.4.1

1 of the 1 container images this version deploys carry CVE-2018-3750.

Container image	Digest	Package	Fixed in
quay.io/ibmgaragecloud/developer-dashboard :v1.4.4	7a4b9fedc724	deep-extend@0.4.2	0.5.1

Open the chart page →

25,456

galaxy-stablecloudve

1 of 5 See more

galaxy-stable cloudve 2.0.0

1 of the 5 container images this version deploys carry CVE-2018-3750.

Container image	Digest	Package	Fixed in
galaxy/galaxy-init :v18.01	0267bad550e6	deep-extend@0.4.2	0.5.1

Open the chart page →

70,895

kongacreate-databases

1 of 1 See more

konga create-databases 0.1.0

1 of the 1 container images this version deploys carry CVE-2018-3750.

Container image	Digest	Package	Fixed in
pantsel/konga :latest	c8172b75607d	deep-extend@0.4.2	0.5.1

Open the chart page →

5,209

wekan-oldgabisonfire

1 of 1 See more

wekan-old gabisonfire 0.1.2

1 of the 1 container images this version deploys carry CVE-2018-3750.

Container image	Digest	Package	Fixed in
wekanteam/wekan :v4.22	68a51f0327df	deep-extend@0.2.11	0.5.1

Open the chart page →

5,941

ibm-app-navigatoribm-charts

2 of 5 See more

ibm-app-navigator ibm-charts 1.0.1

2 of the 5 container images this version deploys carry CVE-2018-3750.

Container image	Digest	Package	Fixed in
ibmcom/app-nav-init :1.0.1	240ff499eb5b	deep-extend@0.4.2	0.5.1
ibmcom/app-nav-ui :1.0.1	e2a86997b36b	deep-extend@0.4.1	0.5.1

Open the chart page →

32,915

ibm-microclimateibm-charts

3 of 8 See more

ibm-microclimate ibm-charts 0.1.0

3 of the 8 container images this version deploys carry CVE-2018-3750.

Container image	Digest	Package	Fixed in
ibmcom/microclimate-file-watcher :latest	ab3fd1fdfa18	deep-extend@0.4.2	0.5.1
ibmcom/microclimate-portal :latest	ed5505e5c7ec	deep-extend@0.4.2	0.5.1
ibmcom/microclimate-theia :latest	e17bdccc5030	deep-extend@0.4.2	0.5.1

Open the chart page →

57,669

yapijoelee2012

1 of 1 See more

yapi joelee2012 0.2.0

1 of the 1 container images this version deploys carry CVE-2018-3750.

Container image	Digest	Package	Fixed in
jayfong/yapi :1.10.2	163e5d621910	deep-extend@0.4.2	0.5.1

Open the chart page →

6,454

example-dev-toolsnoygal

1 of 3 See more

example-dev-tools noygal 0.2.8

1 of the 3 container images this version deploys carry CVE-2018-3750.

Container image	Digest	Package	Fixed in
linuxserver/cloud9 :latest	45c5fe102ff3	deep-extend@0.4.1	0.5.1

Open the chart page →

27,465

comacopencord

1 of 9 See more

comac opencord 1.0.0

1 of the 9 container images this version deploys carry CVE-2018-3750.

Container image	Digest	Package	Fixed in
omecproject/onos-progran :1.0.0	5715e5648aa0	deep-extend@0.4.2	0.5.1

Open the chart page →

88,546

onos-progranopencord

1 of 2 See more

onos-progran opencord 1.2.7

1 of the 2 container images this version deploys carry CVE-2018-3750.

Container image	Digest	Package	Fixed in
muluder/prograncontrollermcord :0.1.8	43b597a93da7	deep-extend@0.4.2	0.5.1

Open the chart page →

38,865

Container images carrying it

23 by charts deploying them

A fixed version is listed for 1 of the 1 affected package.

Container image	Digest	Package	Fixed in	Used by
hyperledger/fabric-ca-tools :latest	4ce6f43ded2e	deep-extend@0.4.2	0.5.1	4
hyperledger/fabric-couchdb :0.4.15	f6c724592abf	deep-extend@0.4.2	0.5.1	4
pantsel/konga :latest	c8172b75607d	deep-extend@0.4.2	0.5.1	3
daskdev/dask-notebook :1.1.0	052630f5ca04	deep-extend@0.4.2	0.5.1	1
ethereumex/eth-stats-dashboard :v0.0.1	a7603aa8df4c	deep-extend@0.4.2	0.5.1	1
galaxy/galaxy-init :v18.01	0267bad550e6	deep-extend@0.4.2	0.5.1	1
hyperledger/fabric-couchdb :0.4.10	c65891b6c237	deep-extend@0.4.2	0.5.1	1
ibmcom/app-nav-init :1.0.1	240ff499eb5b	deep-extend@0.4.2	0.5.1	1
ibmcom/app-nav-ui :1.0.1	e2a86997b36b	deep-extend@0.4.1	0.5.1	1
ibmcom/microclimate-file-watcher :latest	ab3fd1fdfa18	deep-extend@0.4.2	0.5.1	1
ibmcom/microclimate-portal :latest	ed5505e5c7ec	deep-extend@0.4.2	0.5.1	1
ibmcom/microclimate-theia :latest	e17bdccc5030	deep-extend@0.4.2	0.5.1	1
jayfong/yapi :1.10.2	163e5d621910	deep-extend@0.4.2	0.5.1	1
konradkleine/docker-registry-frontend :v2	181aad54ee64	deep-extend@0.2.11	0.5.1	1
koumoul/openapi-viewer :1	8eeca2e8285b	deep-extend@0.4.2	0.5.1	1
linuxserver/calibre :version-v5.21.0	a847b5b2d860	deep-extend@0.4.2	0.5.1	1
linuxserver/cloud9 :latest	45c5fe102ff3	deep-extend@0.4.1	0.5.1	1
muluder/prograncontrollermcord :0.1.8	43b597a93da7	deep-extend@0.4.2	0.5.1	1
nodered/node-red-docker :0.19.6-v8	070643219ea2	deep-extend@0.4.2	0.5.1	1
omecproject/onos-progran :1.0.0	5715e5648aa0	deep-extend@0.4.2	0.5.1	1
timothyclarke/wptagent :2018-01-23	22c41e5ca7e2	deep-extend@0.4.2	0.5.1	1
wekanteam/wekan :v4.22	68a51f0327df	deep-extend@0.2.11	0.5.1	1
quay.io/ibmgaragecloud/developer-dashboard :v1.4.4	7a4b9fedc724	deep-extend@0.4.2	0.5.1	1