StackRadarChart IndexLive demo

CVE-2020-7793

High

Advisory

Published 9 Feb 2022In the index since 6 Sept 2026

Severity: High; worst across findings
CVSS: 7.5; base score, highest
EPSS: 0.039; 90th percentile
CISA KEV: Not listed; no confirmed exploitation
Charts affected: 11; of 17,781 indexed, latest versions
Container images: 10; deployed by those charts
Fix available: 1 of 1; affected package

ua-parser-js Regular Expression Denial of Service vulnerability

Carried by container images the latest versions of 11 of 17,781 indexed charts deploy, on 10 images.

Affected package	Affected versions	Fixed in	Images
ua-parser-jsnpm	0.7.12, 0.7.17, 0.7.19, 0.7.20+2 more	0.7.23	10

OSV records: GHSA-394c-5j6w-4xmx

Charts affected

11 by stars

Chart

Latest

Affected images

Radar Score

open5gsopen5gs

1 of 5 See more

open5gs open5gs 2.3.4

1 of the 5 container images this version deploys carry CVE-2020-7793.

Container image	Digest	Package	Fixed in
gradiant/open5gs-webui :2.7.5	fbd10c017541	ua-parser-js@0.7.17	0.7.23

Open the chart page →

9,261

flagsmithone-acre-fund

1 of 6 See more

flagsmith one-acre-fund 0.1.5

1 of the 6 container images this version deploys carry CVE-2020-7793.

Container image	Digest	Package	Fixed in
flagsmith/flagsmith-frontend :v2.6.0	df02a29e8b0c	ua-parser-js@0.7.20	0.7.23

Open the chart page →

6,868

open5gs-webuiopen5gs-webui

1 of 2 See more

open5gs-webui open5gs-webui 2.3.1

1 of the 2 container images this version deploys carry CVE-2020-7793.

Container image	Digest	Package	Fixed in
gradiant/open5gs-webui :2.7.5	fbd10c017541	ua-parser-js@0.7.17	0.7.23

Open the chart page →

5,300

open5gsadaptivenetlab

1 of 3 See more

open5gs adaptivenetlab 1.0.3

1 of the 3 container images this version deploys carry CVE-2020-7793.

Container image	Digest	Package	Fixed in
registry.gitlab.com/infinitydon/registry/open5gs-webui :v2.2.2	fda21b0a0344	ua-parser-js@0.7.17	0.7.23

Open the chart page →

25,443

daskcloudnativeapp

1 of 2 See more

dask cloudnativeapp 2.2.1

1 of the 2 container images this version deploys carry CVE-2020-7793.

Container image	Digest	Package	Fixed in
daskdev/dask-notebook :1.1.0	052630f5ca04	ua-parser-js@0.7.19	0.7.23

Open the chart page →

29,901

1 of 7 See more

amundsen duyet 1.1.0

1 of the 7 container images this version deploys carry CVE-2020-7793.

Container image	Digest	Package	Fixed in
amundsendev/amundsen-frontend :2.1.1	69e7915e61c1	ua-parser-js@0.7.17	0.7.23

Open the chart page →

11,174

theloungegeek-cookbook

1 of 1 See more

thelounge geek-cookbook 3.4.2

1 of the 1 container images this version deploys carry CVE-2020-7793.

Container image	Digest	Package	Fixed in
thelounge/thelounge :4.2.0-alpine	639978459c3a	ua-parser-js@0.7.21	0.7.23

Open the chart page →

2,689

ibm-microclimateibm-charts

1 of 8 See more

ibm-microclimate ibm-charts 0.1.0

1 of the 8 container images this version deploys carry CVE-2020-7793.

Container image	Digest	Package	Fixed in
ibmcom/microclimate-portal :latest	ed5505e5c7ec	ua-parser-js@0.7.12	0.7.23

Open the chart page →

57,669

opendistro-eslsst-sqre

1 of 3 See more

opendistro-es lsst-sqre 1.4.1

1 of the 3 container images this version deploys carry CVE-2020-7793.

Container image	Digest	Package	Fixed in
amazon/opendistro-for-elasticsearch-kibana :1.4.0	5126e2e79a1f	ua-parser-js@0.7.19	0.7.23

Open the chart page →

7,929

frontendluiscajl

1 of 1 See more

frontend luiscajl 0.1.7

1 of the 1 container images this version deploys carry CVE-2020-7793.

Container image	Digest	Package	Fixed in
lavandadelpatio/frontend :latest	501c3f31e0bc	ua-parser-js@0.7.21	0.7.23

Open the chart page →

3,651

example-dev-toolsnoygal

1 of 3 See more

example-dev-tools noygal 0.2.8

1 of the 3 container images this version deploys carry CVE-2020-7793.

Container image	Digest	Package	Fixed in
linuxserver/cloud9 :latest	45c5fe102ff3	ua-parser-js@0.7.22	0.7.23

Open the chart page →

27,465

Container images carrying it

10 by charts deploying them

A fixed version is listed for 1 of the 1 affected package.

Container image	Digest	Package	Fixed in	Used by
gradiant/open5gs-webui :2.7.5	fbd10c017541	ua-parser-js@0.7.17	0.7.23	2
amazon/opendistro-for-elasticsearch-kibana :1.4.0	5126e2e79a1f	ua-parser-js@0.7.19	0.7.23	1
amundsendev/amundsen-frontend :2.1.1	69e7915e61c1	ua-parser-js@0.7.17	0.7.23	1
daskdev/dask-notebook :1.1.0	052630f5ca04	ua-parser-js@0.7.19	0.7.23	1
flagsmith/flagsmith-frontend :v2.6.0	df02a29e8b0c	ua-parser-js@0.7.20	0.7.23	1
ibmcom/microclimate-portal :latest	ed5505e5c7ec	ua-parser-js@0.7.12	0.7.23	1
lavandadelpatio/frontend :latest	501c3f31e0bc	ua-parser-js@0.7.21	0.7.23	1
linuxserver/cloud9 :latest	45c5fe102ff3	ua-parser-js@0.7.22	0.7.23	1
thelounge/thelounge :4.2.0-alpine	639978459c3a	ua-parser-js@0.7.21	0.7.23	1
registry.gitlab.com/infinitydon/registry/open5gs-webui :v2.2.2	fda21b0a0344	ua-parser-js@0.7.17	0.7.23	1