StackRadarChart IndexLive demo

CVE-2020-36048

High

Advisory

Published 9 Feb 2022In the index since 6 Sept 2026

Severity: High; worst across findings
CVSS: 7.5; base score, highest
EPSS: 0.032; 88th percentile
CISA KEV: Not listed; no confirmed exploitation
Charts affected: 21; of 17,781 indexed, latest versions
Container images: 21; deployed by those charts
Fix available: 1 of 1; affected package

Resource exhaustion in engine.io

Carried by container images the latest versions of 21 of 17,781 indexed charts deploy, on 21 images.

Affected package	Affected versions	Fixed in	Images
engine.ionpm	1.6.9, 1.6.11, 1.8.3, 1.8.5+8 more	3.6.0	21

OSV records: GHSA-j4f2-536g-r55m

Charts affected

21 by stars

Chart

Latest

Affected images

Radar Score

kongakonga

1 of 1 See more

5,209

data-fairdata354-helm

1 of 12 See more

data-fair data354-helm 1.1.2

1 of the 12 container images this version deploys carry CVE-2020-36048.

Container image	Digest	Package	Fixed in
ghcr.io/data-fair/simple-directory :4	38a4f32fad82	engine.io@3.3.2	3.6.0

Open the chart page →

38,346

restreamerutkuozdemir

1 of 1 See more

restreamer utkuozdemir 1.1.0

1 of the 1 container images this version deploys carry CVE-2020-36048.

Container image	Digest	Package	Fixed in
datarhei/restreamer :0.6.4	655e12f9eeed	engine.io@3.4.0	3.6.0

Open the chart page →

2,598

scrapoxywiremind

1 of 1 See more

scrapoxy wiremind 0.3.4

1 of the 1 container images this version deploys carry CVE-2020-36048.

Container image	Digest	Package	Fixed in
wiremind/scrapoxy :latest	e7048929a676	engine.io@3.1.5	3.6.0

Open the chart page →

2,154

angular-chartangular-application

1 of 1 See more

angular-chart angular-application 0.1.0

1 of the 1 container images this version deploys carry CVE-2020-36048.

Container image	Digest	Package	Fixed in
ibarreche/cloud-front-ci :latest	c8970ac1c8dc	engine.io@3.2.1	3.6.0

Open the chart page →

3,237

openapiassist-iot-open-api-management

1 of 6 See more

openapi assist-iot-open-api-management 0.2.2

1 of the 6 container images this version deploys carry CVE-2020-36048.

Container image	Digest	Package	Fixed in
pantsel/konga :latest	c8172b75607d	engine.io@1.8.3	3.6.0

Open the chart page →

18,277

registry-uibryanalves

1 of 1 See more

registry-ui bryanalves 0.2.0

1 of the 1 container images this version deploys carry CVE-2020-36048.

Container image	Digest	Package	Fixed in
konradkleine/docker-registry-frontend :v2	181aad54ee64	engine.io@1.8.3	3.6.0

Open the chart page →

4,069

1 of 1 See more

maildev cnieg 1.1.1

1 of the 1 container images this version deploys carry CVE-2020-36048.

Container image	Digest	Package	Fixed in
cnieg/maildev :v1.1.9	98ee05668915	engine.io@3.3.2	3.6.0

Open the chart page →

2,449

kongacreate-databases

1 of 1 See more

konga create-databases 0.1.0

1 of the 1 container images this version deploys carry CVE-2020-36048.

Container image	Digest	Package	Fixed in
pantsel/konga :latest	c8172b75607d	engine.io@1.8.3	3.6.0

Open the chart page →

5,209

nightscoutgeek-cookbook

1 of 1 See more

nightscout geek-cookbook 1.2.2

1 of the 1 container images this version deploys carry CVE-2020-36048.

Container image	Digest	Package	Fixed in
nightscout/cgm-remote-monitor :14.2.5	00c3b4833f1b	engine.io@3.5.0	3.6.0

Open the chart page →

4,043

shinobigeek-cookbook

1 of 1 See more

shinobi geek-cookbook 1.2.2

1 of the 1 container images this version deploys carry CVE-2020-36048.

Container image	Digest	Package	Fixed in
shinobisystems/shinobi :dev	3ca746937856	engine.io@3.5.0	3.6.0

Open the chart page →

4,591

theloungegeek-cookbook

1 of 1 See more

thelounge geek-cookbook 3.4.2

1 of the 1 container images this version deploys carry CVE-2020-36048.

Container image	Digest	Package	Fixed in
thelounge/thelounge :4.2.0-alpine	639978459c3a	engine.io@3.4.2	3.6.0

Open the chart page →

2,689

ibm-microclimateibm-charts

2 of 8 See more

ibm-microclimate ibm-charts 0.1.0

2 of the 8 container images this version deploys carry CVE-2020-36048.

Container image	Digest	Package	Fixed in
ibmcom/microclimate-file-watcher :latest	ab3fd1fdfa18	engine.io@3.2.0	3.6.0
ibmcom/microclimate-portal :latest	ed5505e5c7ec	engine.io@3.1.4	3.6.0

Open the chart page →

57,669

erpnextimprowised

1 of 3 See more

erpnext improwised 3.3.0

1 of the 3 container images this version deploys carry CVE-2020-36048.

Container image	Digest	Package	Fixed in
frappe/frappe-socketio :v13.4.1	2095767a9e82	engine.io@3.5.0	3.6.0

Open the chart page →

6,501

cloudshellinseefrlab

1 of 2 See more

cloudshell inseefrlab 4.3.0

1 of the 2 container images this version deploys carry CVE-2020-36048.

Container image	Digest	Package	Fixed in
inseefrlab/shelly :cloudshell	31f04ca7436b	engine.io@3.3.2	3.6.0

Open the chart page →

10,494

yapijoelee2012

1 of 1 See more

yapi joelee2012 0.2.0

1 of the 1 container images this version deploys carry CVE-2020-36048.

Container image	Digest	Package	Fixed in
jayfong/yapi :1.10.2	163e5d621910	engine.io@1.8.5	3.6.0

Open the chart page →

6,454

shinobik8s-home-lab-repo

1 of 1 See more

shinobi k8s-home-lab-repo 2.1.1

1 of the 1 container images this version deploys carry CVE-2020-36048.

Container image	Digest	Package	Fixed in
shinobisystems/shinobi :latest	c2f5ce2e1067	engine.io@3.5.0	3.6.0

Open the chart page →

4,667

example-dev-toolsnoygal

2 of 3 See more

example-dev-tools noygal 0.2.8

2 of the 3 container images this version deploys carry CVE-2020-36048.

Container image	Digest	Package	Fixed in
linuxserver/cloud9 :latest	45c5fe102ff3	engine.io@1.6.9	3.6.0
linuxserver/codimd :latest	b801bbcf6386	engine.io@3.4.2	3.6.0

Open the chart page →

27,465

codimdphntom

1 of 3 See more

codimd phntom 0.1.12

1 of the 3 container images this version deploys carry CVE-2020-36048.

Container image	Digest	Package	Fixed in
phntom/codimd :2.4.3	1b9aafbb62e6	engine.io@3.3.2	3.6.0

Open the chart page →

6,524

1 of 1 See more

dashkiosk t3n 2.0.0

1 of the 1 container images this version deploys carry CVE-2020-36048.

Container image	Digest	Package	Fixed in
quay.io/t3n/dashkiosk :v2.7.8	c973e166a5dc	engine.io@1.6.11	3.6.0

Open the chart page →

3,827

csmmth-charts

1 of 3 See more

csmm th-charts 0.1.0

1 of the 3 container images this version deploys carry CVE-2020-36048.

Container image	Digest	Package	Fixed in
catalysm/csmm :latest	f003b35f54d9	engine.io@3.5.0	3.6.0

Open the chart page →

3,576

Container images carrying it

21 by charts deploying them

A fixed version is listed for 1 of the 1 affected package.

Container image	Digest	Package	Fixed in	Used by
pantsel/konga :latest	c8172b75607d	engine.io@1.8.3	3.6.0	3
catalysm/csmm :latest	f003b35f54d9	engine.io@3.5.0	3.6.0	1
cnieg/maildev :v1.1.9	98ee05668915	engine.io@3.3.2	3.6.0	1
datarhei/restreamer :0.6.4	655e12f9eeed	engine.io@3.4.0	3.6.0	1
frappe/frappe-socketio :v13.4.1	2095767a9e82	engine.io@3.5.0	3.6.0	1
ibarreche/cloud-front-ci :latest	c8970ac1c8dc	engine.io@3.2.1	3.6.0	1
ibmcom/microclimate-file-watcher :latest	ab3fd1fdfa18	engine.io@3.2.0	3.6.0	1
ibmcom/microclimate-portal :latest	ed5505e5c7ec	engine.io@3.1.4	3.6.0	1
inseefrlab/shelly :cloudshell	31f04ca7436b	engine.io@3.3.2	3.6.0	1
jayfong/yapi :1.10.2	163e5d621910	engine.io@1.8.5	3.6.0	1
konradkleine/docker-registry-frontend :v2	181aad54ee64	engine.io@1.8.3	3.6.0	1
linuxserver/cloud9 :latest	45c5fe102ff3	engine.io@1.6.9	3.6.0	1
linuxserver/codimd :latest	b801bbcf6386	engine.io@3.4.2	3.6.0	1
nightscout/cgm-remote-monitor :14.2.5	00c3b4833f1b	engine.io@3.5.0	3.6.0	1
phntom/codimd :2.4.3	1b9aafbb62e6	engine.io@3.3.2	3.6.0	1
shinobisystems/shinobi :dev	3ca746937856	engine.io@3.5.0	3.6.0	1
shinobisystems/shinobi :latest	c2f5ce2e1067	engine.io@3.5.0	3.6.0	1
thelounge/thelounge :4.2.0-alpine	639978459c3a	engine.io@3.4.2	3.6.0	1
wiremind/scrapoxy :latest	e7048929a676	engine.io@3.1.5	3.6.0	1
ghcr.io/data-fair/simple-directory :4	38a4f32fad82	engine.io@3.3.2	3.6.0	1
quay.io/t3n/dashkiosk :v2.7.8	c973e166a5dc	engine.io@1.6.11	3.6.0	1