StackRadarChart IndexLive demo

CVE-2021-23436

Critical

Advisory

Published 2 Sept 2021In the index since 6 Sept 2026

Severity: Critical; worst across findings
CVSS: 9.8; base score, highest
EPSS: 0.018; 77th percentile
CISA KEV: Not listed; no confirmed exploitation
Charts affected: 9; of 17,781 indexed, latest versions
Container images: 9; deployed by those charts
Fix available: 1 of 1; affected package

Prototype Pollution in immer

Carried by container images the latest versions of 9 of 17,781 indexed charts deploy, on 9 images.

Affected package	Affected versions	Fixed in	Images
immernpm	7.0.9, 7.0.15, 8.0.1, 8.0.4+1 more	9.0.6	9

OSV records: GHSA-33f9-j839-rf8h

Charts affected

9 by stars

Chart

Latest

Affected images

Radar Score

joplin-serverdjjudas21

1 of 1 See more

joplin-server djjudas21 5.5.8

1 of the 1 container images this version deploys carry CVE-2021-23436.

Container image	Digest	Package	Fixed in
joplin/server :2.14.2-beta	b87564ef34e9	immer@7.0.15	9.0.6

Open the chart page →

3,925

conduction-uiconduction-ui

1 of 6 See more

conduction-ui conduction-ui 0.1.0

1 of the 6 container images this version deploys carry CVE-2021-23436.

Container image	Digest	Package	Fixed in
conduction/conduction-ui-app :dev	d591f5e6f2a9	immer@8.0.1	9.0.6

Open the chart page →

12,907

frontend-charteks-3-tier-app-chart

1 of 1 See more

frontend-chart eks-3-tier-app-chart 0.1.0

1 of the 1 container images this version deploys carry CVE-2021-23436.

Container image	Digest	Package	Fixed in
arfath29/3-tier-app-frontend :latest	384b3e377f47	immer@8.0.1	9.0.6

Open the chart page →

3,744

backstageirembo-backstage-helm

1 of 3 See more

backstage irembo-backstage-helm 1.0.5

1 of the 3 container images this version deploys carry CVE-2021-23436.

Container image	Digest	Package	Fixed in
roadiehq/community-backstage-image :latest	ef355bf5b639	immer@9.0.5	9.0.6

Open the chart page →

7,232

yapijoelee2012

1 of 1 See more

6,454

sample-appmongodb-helm-charts

1 of 2 See more

sample-app mongodb-helm-charts 0.1.0

1 of the 2 container images this version deploys carry CVE-2021-23436.

Container image	Digest	Package	Fixed in
quay.io/mongodb/farm-intro-frontend :0.1	99ccdfd543e1	immer@7.0.9	9.0.6

Open the chart page →

6,438

flomesh-consoleopenshift

1 of 2 See more

flomesh-console openshift 0.70.0-30-ubi8

1 of the 2 container images this version deploys carry CVE-2021-23436.

Container image	Digest	Package	Fixed in
quay.io/flomesh/flomesh-console-ubi8 :0.70.0-30	ce6938ff6709	immer@8.0.4	9.0.6

Open the chart page →

9,968

joplinrubxkube

1 of 2 See more

joplin rubxkube 1.3.1

1 of the 2 container images this version deploys carry CVE-2021-23436.

Container image	Digest	Package	Fixed in
joplin/server :3.0-beta	52af57880c0e	immer@7.0.15	9.0.6

Open the chart page →

7,413

vehicle-dashboardtest-vehi-dash

1 of 7 See more

vehicle-dashboard test-vehi-dash 0.1.0

1 of the 7 container images this version deploys carry CVE-2021-23436.

Container image	Digest	Package	Fixed in
samajh/alprfrontend :latest	05ef4fddbb75	immer@8.0.1	9.0.6

Open the chart page →

20,270

Container images carrying it

9 by charts deploying them

A fixed version is listed for 1 of the 1 affected package.

Container image	Digest	Package	Fixed in	Used by
arfath29/3-tier-app-frontend :latest	384b3e377f47	immer@8.0.1	9.0.6	1
conduction/conduction-ui-app :dev	d591f5e6f2a9	immer@8.0.1	9.0.6	1
jayfong/yapi :1.10.2	163e5d621910	immer@8.0.4	9.0.6	1
joplin/server :3.0-beta	52af57880c0e	immer@7.0.15	9.0.6	1
joplin/server :2.14.2-beta	b87564ef34e9	immer@7.0.15	9.0.6	1
roadiehq/community-backstage-image :latest	ef355bf5b639	immer@9.0.5	9.0.6	1
samajh/alprfrontend :latest	05ef4fddbb75	immer@8.0.1	9.0.6	1
quay.io/flomesh/flomesh-console-ubi8 :0.70.0-30	ce6938ff6709	immer@8.0.4	9.0.6	1
quay.io/mongodb/farm-intro-frontend :0.1	99ccdfd543e1	immer@7.0.9	9.0.6	1