StackRadarChart IndexLive demo

CVE-2022-25873

Medium

Advisory

Published 19 Sept 2022In the index since 6 Sept 2026

Severity: Medium; worst across findings
CVSS: 5.4; base score, highest
EPSS: 0.007; 52nd percentile
CISA KEV: Not listed; no confirmed exploitation
Charts affected: 3; of 17,781 indexed, latest versions
Container images: 3; deployed by those charts
Fix available: 1 of 1; affected package

Vuetify Cross-site Scripting vulnerability

Carried by container images the latest versions of 3 of 17,781 indexed charts deploy, on 3 images.

Affected package	Affected versions	Fixed in	Images
vuetifynpm	2.5.3, 2.5.14, 2.6.6	2.6.10	3

OSV records: GHSA-q4q5-c5cv-2p68

Charts affected

3 by stars

Chart

Latest

Affected images

Radar Score

mealiegeek-cookbook

1 of 2 See more

mealie geek-cookbook 5.1.2

1 of the 2 container images this version deploys carry CVE-2022-25873.

Container image	Digest	Package	Fixed in
hkotel/mealie :frontend-v1.0.0beta-2	3c04c0e85039	vuetify@2.6.6	2.6.10

Open the chart page →

7,579

zwavejs2mqttgeek-cookbook

1 of 1 See more

zwavejs2mqtt geek-cookbook 5.4.2

1 of the 1 container images this version deploys carry CVE-2022-25873.

Container image	Digest	Package	Fixed in
zwavejs/zwavejs2mqtt :5.0.2	15a6040fb468	vuetify@2.5.3	2.6.10

Open the chart page →

3,476

data-fairdata354-helm

1 of 12 See more

data-fair data354-helm 1.1.2

1 of the 12 container images this version deploys carry CVE-2022-25873.

Container image	Digest	Package	Fixed in
ghcr.io/data-fair/metrics :0	a8d40779eeae	vuetify@2.5.14	2.6.10

Open the chart page →

38,346

Container images carrying it

3 by charts deploying them

A fixed version is listed for 1 of the 1 affected package.

Container image	Digest	Package	Fixed in	Used by
hkotel/mealie :frontend-v1.0.0beta-2	3c04c0e85039	vuetify@2.6.6	2.6.10	1
zwavejs/zwavejs2mqtt :5.0.2	15a6040fb468	vuetify@2.5.3	2.6.10	1
ghcr.io/data-fair/metrics :0	a8d40779eeae	vuetify@2.5.14	2.6.10	1