StackRadarChart IndexLive demo

CVE-2019-20922

High

Advisory

Published 10 Feb 2022In the index since 6 Sept 2026

Severity: High; worst across findings
CVSS: 7.5; base score, highest
EPSS: 0.038; 89th percentile
CISA KEV: Not listed; no confirmed exploitation
Charts affected: 10; of 17,781 indexed, latest versions
Container images: 8; deployed by those charts
Fix available: 1 of 1; affected package

Regular Expression Denial of Service in Handlebars

Carried by container images the latest versions of 10 of 17,781 indexed charts deploy, on 8 images.

Affected package	Affected versions	Fixed in	Images
handlebarsnpm	4.0.6, 4.0.10, 4.0.11, 4.0.12+2 more	4.4.5	8

OSV records: GHSA-62gr-4qp9-h98f
Also known as: SNYK-JS-HANDLEBARS-480388

Charts affected

10 by stars

Chart

Latest

Affected images

Radar Score

netris-controllernetrisai

1 of 14 See more

netris-controller netrisai 2.8.2

1 of the 14 container images this version deploys carry CVE-2019-20922.

Container image	Digest	Package	Fixed in
graphiteapp/graphite-statsd :1.1.7-6	04a0037cc2ae	handlebars@4.1.2	4.4.5

Open the chart page →

30,326

kongakonga

1 of 1 See more

konga konga 1.1.0

1 of the 1 container images this version deploys carry CVE-2019-20922.

Container image	Digest	Package	Fixed in
pantsel/konga :latest	c8172b75607d	handlebars@4.0.10	4.4.5

Open the chart page →

5,209

openapiassist-iot-open-api-management

1 of 6 See more

openapi assist-iot-open-api-management 0.2.2

1 of the 6 container images this version deploys carry CVE-2019-20922.

Container image	Digest	Package	Fixed in
pantsel/konga :latest	c8172b75607d	handlebars@4.0.10	4.4.5

Open the chart page →

18,277

daskcloudnativeapp

1 of 2 See more

dask cloudnativeapp 2.2.1

1 of the 2 container images this version deploys carry CVE-2019-20922.

Container image	Digest	Package	Fixed in
daskdev/dask-notebook :1.1.0	052630f5ca04	handlebars@4.0.12	4.4.5

Open the chart page →

29,901

kongacreate-databases

1 of 1 See more

konga create-databases 0.1.0

1 of the 1 container images this version deploys carry CVE-2019-20922.

Container image	Digest	Package	Fixed in
pantsel/konga :latest	c8172b75607d	handlebars@4.0.10	4.4.5

Open the chart page →

5,209

ibm-app-navigatoribm-charts

1 of 5 See more

ibm-app-navigator ibm-charts 1.0.1

1 of the 5 container images this version deploys carry CVE-2019-20922.

Container image	Digest	Package	Fixed in
ibmcom/app-nav-ui :1.0.1	e2a86997b36b	handlebars@4.1.2	4.4.5

Open the chart page →

32,915

ibm-microclimateibm-charts

1 of 8 See more

ibm-microclimate ibm-charts 0.1.0

1 of the 8 container images this version deploys carry CVE-2019-20922.

Container image	Digest	Package	Fixed in
ibmcom/microclimate-portal :latest	ed5505e5c7ec	handlebars@4.0.11	4.4.5

Open the chart page →

57,669

monocularjenkins-x

1 of 4 See more

monocular jenkins-x 0.6.4

1 of the 4 container images this version deploys carry CVE-2019-20922.

Container image	Digest	Package	Fixed in
migmartri/prerender :latest	486aacfd5aa9	handlebars@4.0.6	4.4.5

Open the chart page →

4,614

opendistro-eslsst-sqre

1 of 3 See more

opendistro-es lsst-sqre 1.4.1

1 of the 3 container images this version deploys carry CVE-2019-20922.

Container image	Digest	Package	Fixed in
amazon/opendistro-for-elasticsearch-kibana :1.4.0	5126e2e79a1f	handlebars@4.3.5	4.4.5

Open the chart page →

7,929

monocularmonocular

2 of 5 See more

monocular monocular 1.4.15

2 of the 5 container images this version deploys carry CVE-2019-20922.

Container image	Digest	Package	Fixed in
migmartri/prerender :latest	486aacfd5aa9	handlebars@4.0.6	4.4.5
quay.io/helmpack/monocular-ui :v1.10.0	86b71e90319f	handlebars@4.0.10	4.4.5

Open the chart page →

7,048

Container images carrying it

8 by charts deploying them

A fixed version is listed for 1 of the 1 affected package.

Container image	Digest	Package	Fixed in	Used by
pantsel/konga :latest	c8172b75607d	handlebars@4.0.10	4.4.5	3
migmartri/prerender :latest	486aacfd5aa9	handlebars@4.0.6	4.4.5	2
amazon/opendistro-for-elasticsearch-kibana :1.4.0	5126e2e79a1f	handlebars@4.3.5	4.4.5	1
daskdev/dask-notebook :1.1.0	052630f5ca04	handlebars@4.0.12	4.4.5	1
graphiteapp/graphite-statsd :1.1.7-6	04a0037cc2ae	handlebars@4.1.2	4.4.5	1
ibmcom/app-nav-ui :1.0.1	e2a86997b36b	handlebars@4.1.2	4.4.5	1
ibmcom/microclimate-portal :latest	ed5505e5c7ec	handlebars@4.0.11	4.4.5	1
quay.io/helmpack/monocular-ui :v1.10.0	86b71e90319f	handlebars@4.0.10	4.4.5	1