StackRadar

CVE-2019-15608

Medium

Advisory

Published 9 Feb 2022In the index since 6 Sept 2026
Severity
Medium
worst across findings
CVSS
5.9
base score, highest
EPSS
0.018
78th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
22
of 17,781 indexed, latest versions
Container images
21
deployed by those charts
Fix available
1 of 1
affected package

TOCTOU Race Condition in Yarn

Carried by container images the latest versions of 22 of 17,781 indexed charts deploy, on 21 images.

Affected packageAffected versionsFixed inImages
yarnnpm0.27.5, 1.3.2, 1.5.1, 1.7.0+5 more1.19.021
OSV records
GHSA-hjxc-462x-x77j

Charts affected

22 by stars
ChartLatestAffected imagesRadar Score
microcksmicrocksOfficialVerified publisher0.8.0-helm-3.kube-1.171 of 5See more

microcks microcks 0.8.0-helm-3.kube-1.17

1 of the 5 container images this version deploys carry CVE-2019-15608.

Container imageDigestPackageFixed in
microcks/microcks-postman-runtime:latestcb72e46a1b3c
yarn@1.12.3
1.19.0

Open the chart page →

10,732
hubotdecayofmind1.0.21 of 3See more

hubot decayofmind 1.0.2

1 of the 3 container images this version deploys carry CVE-2019-15608.

Container imageDigestPackageFixed in
decayofmind/hubot:3.3.21e18e92fe694
yarn@1.16.0
1.19.0

Open the chart page →

2,513
data-fairdata354-helmVerified publisher1.1.21 of 12See more

data-fair data354-helm 1.1.2

1 of the 12 container images this version deploys carry CVE-2019-15608.

Container imageDigestPackageFixed in
koumoul/openapi-viewer:18eeca2e8285b
yarn@1.3.2
1.19.0

Open the chart page →

38,346
uptimerobotgeek-cookbookVerified publisher3.0.41 of 1See more

uptimerobot geek-cookbook 3.0.4

1 of the 1 container images this version deploys carry CVE-2019-15608.

Container imageDigestPackageFixed in
billimek/node-influx-uptimerobot:latest5814f0bcf5ba
yarn@1.7.0
1.19.0

Open the chart page →

1,669
splice-helmsplice-helm0.1.71 of 13See more

splice-helm splice-helm 0.1.7

1 of the 13 container images this version deploys carry CVE-2019-15608.

Container imageDigestPackageFixed in
jupyterhub/configurable-http-proxy:3.0.0c36cf3cc1c99
yarn@0.27.5
1.19.0

Open the chart page →

1,477
statsdstatsd-airflow-smd0.1.191 of 1See more

statsd statsd-airflow-smd 0.1.19

1 of the 1 container images this version deploys carry CVE-2019-15608.

Container imageDigestPackageFixed in
statsd/statsd:v0.8.6dab129e74c25
yarn@1.13.0
1.19.0

Open the chart page →

4,185
istio-bookinfobookinfo1.2.21 of 6See more

istio-bookinfo bookinfo 1.2.2

1 of the 6 container images this version deploys carry CVE-2019-15608.

Container imageDigestPackageFixed in
istio/examples-bookinfo-ratings-v1:1.15.009b9d6958a13
yarn@1.16.0
1.19.0

Open the chart page →

18,980
hubotcloudnativeapp0.0.11 of 1See more

hubot cloudnativeapp 0.0.1

1 of the 1 container images this version deploys carry CVE-2019-15608.

Container imageDigestPackageFixed in
minddocdev/hubot:0.1.96c60b11a4fa7
yarn@1.9.4
1.19.0

Open the chart page →

2,580
kube-slackcloudnativeapp1.0.01 of 1See more

kube-slack cloudnativeapp 1.0.0

1 of the 1 container images this version deploys carry CVE-2019-15608.

Container imageDigestPackageFixed in
willwill/kube-slack:v4.1.1d443017aae98
yarn@1.13.0
1.19.0

Open the chart page →

1,937
node-redcloudnativeapp1.2.21 of 1See more

node-red cloudnativeapp 1.2.2

1 of the 1 container images this version deploys carry CVE-2019-15608.

Container imageDigestPackageFixed in
nodered/node-red-docker:0.19.6-v8070643219ea2
yarn@1.12.3
1.19.0

Open the chart page →

4,790
irslackdhalkeye0.1.01 of 1See more

irslackd halkeye 0.1.0

1 of the 1 container images this version deploys carry CVE-2019-15608.

Container imageDigestPackageFixed in
halkeye/irslackd:latest7638bfba70b0
yarn@1.12.3
1.19.0

Open the chart page →

2,064
ibm-microclimateibm-charts0.1.03 of 8See more

ibm-microclimate ibm-charts 0.1.0

3 of the 8 container images this version deploys carry CVE-2019-15608.

Container imageDigestPackageFixed in
ibmcom/microclimate-file-watcher:latestab3fd1fdfa18
yarn@1.5.1
1.19.0
ibmcom/microclimate-portal:latested5505e5c7ec
yarn@1.5.1
1.19.0
ibmcom/microclimate-theia:lateste17bdccc5030
yarn@1.5.1
1.19.0

Open the chart page →

57,669
indexer-chartindexer-application0.1.01 of 1See more

indexer-chart indexer-application 0.1.0

1 of the 1 container images this version deploys carry CVE-2019-15608.

Container imageDigestPackageFixed in
ibarreche/cloud-indexer-ci:latestb7a08274e69f
yarn@1.13.0
1.19.0

Open the chart page →

3,289
istio-bookinfoistio-bookinfo1.2.21 of 6See more

istio-bookinfo istio-bookinfo 1.2.2

1 of the 6 container images this version deploys carry CVE-2019-15608.

Container imageDigestPackageFixed in
istio/examples-bookinfo-ratings-v1:1.15.009b9d6958a13
yarn@1.16.0
1.19.0

Open the chart page →

18,980
statsdkeyporttech0.1.191 of 1See more

statsd keyporttech 0.1.19

1 of the 1 container images this version deploys carry CVE-2019-15608.

Container imageDigestPackageFixed in
statsd/statsd:v0.8.6dab129e74c25
yarn@1.13.0
1.19.0

Open the chart page →

4,185
sample-bookinfokubesphere-testVerified publisher1.0.01 of 4See more

sample-bookinfo kubesphere-test 1.0.0

1 of the 4 container images this version deploys carry CVE-2019-15608.

Container imageDigestPackageFixed in
kubesphere/examples-bookinfo-ratings-v1:1.13.0f1b5bf878196
yarn@1.15.2
1.19.0

Open the chart page →

9,378
devspace-cloudloftVerified publisher0.3.31 of 8See more

devspace-cloud loft 0.3.3

1 of the 8 container images this version deploys carry CVE-2019-15608.

Container imageDigestPackageFixed in
devspacecloud/ui:0.3.3deef55ff29a7
yarn@1.15.2
1.19.0

Open the chart page →

9,880
frontendluiscajl0.1.71 of 1See more

frontend luiscajl 0.1.7

1 of the 1 container images this version deploys carry CVE-2019-15608.

Container imageDigestPackageFixed in
lavandadelpatio/frontend:latest501c3f31e0bc
yarn@1.15.2
1.19.0

Open the chart page →

3,651
bookinforgnu1.0.01 of 7See more

bookinfo rgnu 1.0.0

1 of the 7 container images this version deploys carry CVE-2019-15608.

Container imageDigestPackageFixed in
istio/examples-bookinfo-ratings-v1:1.14.0eb0f1a725ca8
yarn@1.15.2
1.19.0

Open the chart page →

20,462
istio-bookinforgnu1.0.21 of 7See more

istio-bookinfo rgnu 1.0.2

1 of the 7 container images this version deploys carry CVE-2019-15608.

Container imageDigestPackageFixed in
istio/examples-bookinfo-ratings-v1:1.14.0eb0f1a725ca8
yarn@1.15.2
1.19.0

Open the chart page →

20,462
pachydermstatcan0.5.11 of 4See more

pachyderm statcan 0.5.1

1 of the 4 container images this version deploys carry CVE-2019-15608.

Container imageDigestPackageFixed in
pachyderm/grpc-proxy:0.4.92b27f41d4d02
yarn@1.15.2
1.19.0

Open the chart page →

4,967
helloworldyotron-helm-charts0.1.01 of 1See more

helloworld yotron-helm-charts 0.1.0

1 of the 1 container images this version deploys carry CVE-2019-15608.

Container imageDigestPackageFixed in
a5hut0sh/helloworld:1.02ae77620e616
yarn@1.12.3
1.19.0

Open the chart page →

1,309

Container images carrying it

21 by charts deploying them

A fixed version is listed for 1 of the 1 affected package.

Container imageDigestPackageFixed inUsed by
istio/examples-bookinfo-ratings-v1:1.15.009b9d6958a13
yarn@1.16.0
1.19.0
2
istio/examples-bookinfo-ratings-v1:1.14.0eb0f1a725ca8
yarn@1.15.2
1.19.0
2
statsd/statsd:v0.8.6dab129e74c25
yarn@1.13.0
1.19.0
2
a5hut0sh/helloworld:1.02ae77620e616
yarn@1.12.3
1.19.0
1
billimek/node-influx-uptimerobot:latest5814f0bcf5ba
yarn@1.7.0
1.19.0
1
decayofmind/hubot:3.3.21e18e92fe694
yarn@1.16.0
1.19.0
1
devspacecloud/ui:0.3.3deef55ff29a7
yarn@1.15.2
1.19.0
1
halkeye/irslackd:latest7638bfba70b0
yarn@1.12.3
1.19.0
1
ibarreche/cloud-indexer-ci:latestb7a08274e69f
yarn@1.13.0
1.19.0
1
ibmcom/microclimate-file-watcher:latestab3fd1fdfa18
yarn@1.5.1
1.19.0
1
ibmcom/microclimate-portal:latested5505e5c7ec
yarn@1.5.1
1.19.0
1
ibmcom/microclimate-theia:lateste17bdccc5030
yarn@1.5.1
1.19.0
1
jupyterhub/configurable-http-proxy:3.0.0c36cf3cc1c99
yarn@0.27.5
1.19.0
1
koumoul/openapi-viewer:18eeca2e8285b
yarn@1.3.2
1.19.0
1
kubesphere/examples-bookinfo-ratings-v1:1.13.0f1b5bf878196
yarn@1.15.2
1.19.0
1
lavandadelpatio/frontend:latest501c3f31e0bc
yarn@1.15.2
1.19.0
1
microcks/microcks-postman-runtime:latestcb72e46a1b3c
yarn@1.12.3
1.19.0
1
minddocdev/hubot:0.1.96c60b11a4fa7
yarn@1.9.4
1.19.0
1
nodered/node-red-docker:0.19.6-v8070643219ea2
yarn@1.12.3
1.19.0
1
pachyderm/grpc-proxy:0.4.92b27f41d4d02
yarn@1.15.2
1.19.0
1
willwill/kube-slack:v4.1.1d443017aae98
yarn@1.13.0
1.19.0
1

syft 1.42.1 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.