StackRadarChart IndexLive demo

CVE-2023-30533

High

Advisory

Published 24 Apr 2023In the index since 6 Sept 2026

Severity: High; worst across findings
CVSS: 7.8; base score, highest
EPSS: 0.010; 61st percentile
CISA KEV: Not listed; no confirmed exploitation
Charts affected: 17; of 17,781 indexed, latest versions
Container images: 16; deployed by those charts
Fix available: None; affected package

Prototype Pollution in sheetJS

Carried by container images the latest versions of 17 of 17,781 indexed charts deploy, on 16 images.

Affected package	Affected versions	Fixed in	Images
xlsxnpm	0.16.9, 0.17.5, 0.18.5, 0.19.3+2 more	no fix listed	16

OSV records: GHSA-4r6h-8v6p-xvw6

Charts affected

17 by stars

Chart

Latest

Affected images

Radar Score

budibasebudibase

1 of 7 See more

budibase budibase 0.0.0-master

1 of the 7 container images this version deploys carry CVE-2023-30533.

Container image	Digest	Package	Fixed in
budibase/apps :3.41.3	44fe6feab985	xlsx@0.20.3	no fix listed

Open the chart page →

10,775

n8nn8n

1 of 1 See more

5,639

baserowbaserow-chart

1 of 6 See more

baserow baserow-chart 1.0.56

1 of the 6 container images this version deploys carry CVE-2023-30533.

Container image	Digest	Package	Fixed in
baserow/web-frontend :2.3.3	566d24c7d9f5	xlsx@0.20.3	no fix listed

Open the chart page →

17,263

n8none-acre-fund

1 of 3 See more

n8n one-acre-fund 0.1.52

1 of the 3 container images this version deploys carry CVE-2023-30533.

Container image	Digest	Package	Fixed in
n8nio/n8n :0.212.0	a9195bc499a3	xlsx@0.17.5	no fix listed

Open the chart page →

7,776

nocodbzekker6

1 of 1 See more

nocodb zekker6 1.10.0

1 of the 1 container images this version deploys carry CVE-2023-30533.

Container image	Digest	Package	Fixed in
nocodb/nocodb :0.301.5	d9516f0bf546	xlsx@0.20.3	no fix listed

Open the chart page →

4,016

data-fairdata354-helm

1 of 12 See more

data-fair data354-helm 1.1.2

1 of the 12 container images this version deploys carry CVE-2023-30533.

Container image	Digest	Package	Fixed in
ghcr.io/data-fair/data-fair :3	cc9498b64b5b	xlsx@0.18.5	no fix listed

Open the chart page →

38,346

n8nn8n-helm

1 of 1 See more

n8n n8n-helm 2.25.7

1 of the 1 container images this version deploys carry CVE-2023-30533.

Container image	Digest	Package	Fixed in
n8nio/n8n :2.25.7	761374d4eb84	xlsx@0.20.2	no fix listed

Open the chart page →

2,575

nocodbinseefrlab

1 of 1 See more

nocodb inseefrlab 0.2.0

1 of the 1 container images this version deploys carry CVE-2023-30533.

Container image	Digest	Package	Fixed in
nocodb/nocodb :latest	4b760f0d2547	xlsx@0.20.3	no fix listed

Open the chart page →

781

n8njanip81-helm-charts

1 of 1 See more

n8n janip81-helm-charts 0.1.4

1 of the 1 container images this version deploys carry CVE-2023-30533.

Container image	Digest	Package	Fixed in
n8nio/n8n :1.86.0	8b39ed5a2de9	xlsx@0.20.2	no fix listed

Open the chart page →

5,826

image-storage-servicejtekt

1 of 4 See more

image-storage-service jtekt 0.4.3

1 of the 4 container images this version deploys carry CVE-2023-30533.

Container image	Digest	Package	Fixed in
public.ecr.aws/jtekt-corporation/image-storage-service :v1.16.17	b1493760c716	xlsx@0.17.5	no fix listed

Open the chart page →

22,589

sqlpadkronkltd

1 of 1 See more

sqlpad kronkltd 0.1.0

1 of the 1 container images this version deploys carry CVE-2023-30533.

Container image	Digest	Package	Fixed in
sqlpad/sqlpad :6.7	d3d2f430dffd	xlsx@0.16.9	no fix listed

Open the chart page →

3,397

portfolio-trackerkubernetes-homelab-helm-charts

1 of 3 See more

portfolio-tracker kubernetes-homelab-helm-charts 0.1.0

1 of the 3 container images this version deploys carry CVE-2023-30533.

Container image	Digest	Package	Fixed in
ghcr.io/harish2k01/portfolio-tracker :0.1.0	56efa3085895	xlsx@0.18.5	no fix listed

Open the chart page →

1,498

finance-portalmojaloop

1 of 11 See more

finance-portal mojaloop 5.1.4

1 of the 11 container images this version deploys carry CVE-2023-30533.

Container image	Digest	Package	Fixed in
mojaloop/reporting :v12.1.0	d480a62103d6	xlsx@0.18.5	no fix listed

Open the chart page →

14,809

reporting-legacy-apimojaloop

1 of 1 See more

reporting-legacy-api mojaloop 2.2.0

1 of the 1 container images this version deploys carry CVE-2023-30533.

Container image	Digest	Package	Fixed in
mojaloop/reporting :v12.1.0	d480a62103d6	xlsx@0.18.5	no fix listed

Open the chart page →

1,948

nocodbone-acre-fund

1 of 3 See more

nocodb one-acre-fund 0.4.6

1 of the 3 container images this version deploys carry CVE-2023-30533.

Container image	Digest	Package	Fixed in
nocodb/nocodb :0.258.0	6779a4ddedf2	xlsx@0.20.3	no fix listed

Open the chart page →

4,219

claude-relayrevolution1

1 of 4 See more

claude-relay revolution1 0.1.37

1 of the 4 container images this version deploys carry CVE-2023-30533.

Container image	Digest	Package	Fixed in
ghcr.io/wei-shaw/claude-relay-service :v1.1.292	398c34934453	xlsx@0.18.5	no fix listed

Open the chart page →

4,600

simple-prima-notavcnngr

1 of 4 See more

simple-prima-nota vcnngr 0.5.3

1 of the 4 container images this version deploys carry CVE-2023-30533.

Container image	Digest	Package	Fixed in
vcnngr/pnbackend :latest	eaf44ad0ad1f	xlsx@0.18.5	no fix listed

Open the chart page →

4,768

Container images carrying it

16 by charts deploying them

A fixed version is listed for 0 of the 1 affected package.

Container image	Digest	Package	Fixed in	Used by
mojaloop/reporting :v12.1.0	d480a62103d6	xlsx@0.18.5	no fix listed	2
baserow/web-frontend :2.3.3	566d24c7d9f5	xlsx@0.20.3	no fix listed	1
budibase/apps :3.41.3	44fe6feab985	xlsx@0.20.3	no fix listed	1
n8nio/n8n :2.25.7	761374d4eb84	xlsx@0.20.2	no fix listed	1
n8nio/n8n :1.86.0	8b39ed5a2de9	xlsx@0.20.2	no fix listed	1
n8nio/n8n :0.212.0	a9195bc499a3	xlsx@0.17.5	no fix listed	1
n8nio/n8n :1.33.1	dd171d45102a	xlsx@0.19.3	no fix listed	1
nocodb/nocodb :latest	4b760f0d2547	xlsx@0.20.3	no fix listed	1
nocodb/nocodb :0.258.0	6779a4ddedf2	xlsx@0.20.3	no fix listed	1
nocodb/nocodb :0.301.5	d9516f0bf546	xlsx@0.20.3	no fix listed	1
sqlpad/sqlpad :6.7	d3d2f430dffd	xlsx@0.16.9	no fix listed	1
vcnngr/pnbackend :latest	eaf44ad0ad1f	xlsx@0.18.5	no fix listed	1
ghcr.io/data-fair/data-fair :3	cc9498b64b5b	xlsx@0.18.5	no fix listed	1
ghcr.io/harish2k01/portfolio-tracker :0.1.0	56efa3085895	xlsx@0.18.5	no fix listed	1
ghcr.io/wei-shaw/claude-relay-service :v1.1.292	398c34934453	xlsx@0.18.5	no fix listed	1
public.ecr.aws/jtekt-corporation/image-storage-service :v1.16.17	b1493760c716	xlsx@0.17.5	no fix listed	1