StackRadar

CVE-2023-3696

Critical

Advisory

Published 17 Jul 2023In the index since 8 Sept 2026
Severity
Critical
worst across findings
CVSS
10.0
base score, highest
EPSS
0.012
67th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
17
of 17,781 indexed, latest versions
Container images
17
deployed by those charts
Fix available
1 of 1
affected package

Mongoose Prototype Pollution vulnerability

Carried by container images the latest versions of 17 of 17,781 indexed charts deploy, on 17 images.

Affected packageAffected versionsFixed inImages
mongoosenpm4.13.14, 5.7.5, 5.12.5, 5.12.6+9 more5.13.20, 6.11.317
OSV records
GHSA-9m93-w8w6-76hh
Also known as
BIT-mongoose-2023-3696

Charts affected

17 by stars
ChartLatestAffected imagesRadar Score
ackeesudaVerified publisher0.2.11 of 1See more

ackee suda 0.2.1

1 of the 1 container images this version deploys carry CVE-2023-3696.

Container imageDigestPackageFixed in
electerious/ackee:3.2.05e7173fa321c
mongoose@6.0.6
6.11.3

Open the chart page →

1,602
open5gsadaptivenetlabVerified publisher1.0.31 of 3See more

open5gs adaptivenetlab 1.0.3

1 of the 3 container images this version deploys carry CVE-2023-3696.

Container imageDigestPackageFixed in
registry.gitlab.com/infinitydon/registry/open5gs-webui:v2.2.2fda21b0a0344
mongoose@4.13.14
5.13.20

Open the chart page →

25,443
openhab-cloudandibraeuVerified publisher1.2.61 of 1See more

openhab-cloud andibraeu 1.2.6

1 of the 1 container images this version deploys carry CVE-2023-3696.

Container imageDigestPackageFixed in
openhab/openhab-cloud:a8138a329dd2bac8c4b
mongoose@5.13.15
5.13.20

Open the chart page →

3,437
smartorchestratorassist-iot-smart-orchestrator4.0.03 of 14See more

smartorchestrator assist-iot-smart-orchestrator 4.0.0

3 of the 14 container images this version deploys carry CVE-2023-3696.

Container imageDigestPackageFixed in
assistiot/smart-orchestrator_cluster:latest4f41e1defe99
mongoose@6.3.4
6.11.3
assistiot/smart-orchestrator_enabler:latest89f37e88c871
mongoose@6.3.4
6.11.3
assistiot/smart-orchestrator_repository:latesta8b8dbed04a4
mongoose@6.3.4
6.11.3

Open the chart page →

45,363
backend-charteks-3-tier-app-chart0.1.01 of 1See more

backend-chart eks-3-tier-app-chart 0.1.0

1 of the 1 container images this version deploys carry CVE-2023-3696.

Container imageDigestPackageFixed in
arfath29/3-tier-app-backend:latestee0750b18406
mongoose@5.12.14
5.13.20

Open the chart page →

1,693
iotagent-ulfiware0.1.21 of 1See more

iotagent-ul fiware 0.1.2

1 of the 1 container images this version deploys carry CVE-2023-3696.

Container imageDigestPackageFixed in
fiware/iotagent-ul:1.14.0fe11f55a926d
mongoose@5.7.5
5.13.20

Open the chart page →

3,337
Governify-Bluejaygovernify0.1.01 of 12See more

Governify-Bluejay governify 0.1.0

1 of the 12 container images this version deploys carry CVE-2023-3696.

Container imageDigestPackageFixed in
governify/registry:v3.4.0d3f37f4f8168
mongoose@5.12.6
5.13.20

Open the chart page →

22,512
Governify-Falcongovernify0.1.01 of 10See more

Governify-Falcon governify 0.1.0

1 of the 10 container images this version deploys carry CVE-2023-3696.

Container imageDigestPackageFixed in
governify/registry:v3.4.0d3f37f4f8168
mongoose@5.12.6
5.13.20

Open the chart page →

24,319
yapijoelee2012Verified publisher0.2.01 of 1See more

yapi joelee2012 0.2.0

1 of the 1 container images this version deploys carry CVE-2023-3696.

Container imageDigestPackageFixed in
jayfong/yapi:1.10.2163e5d621910
mongoose@5.7.5
5.13.20

Open the chart page →

6,454
iotmmontesVerified publisher0.3.21 of 7See more

iot mmontes 0.3.2

1 of the 7 container images this version deploys carry CVE-2023-3696.

Container imageDigestPackageFixed in
ghcr.io/mmontes11/iot-back:v3.11.096683c54ae65
mongoose@5.13.16
5.13.20

Open the chart page →

10,608
admin-api-svcmojaloop12.0.01 of 4See more

admin-api-svc mojaloop 12.0.0

1 of the 4 container images this version deploys carry CVE-2023-3696.

Container imageDigestPackageFixed in
mojaloop/central-ledger:v13.14.01abc8a7aa71c
mongoose@5.12.9
5.13.20

Open the chart page →

12,108
mojaloopmojaloop14.0.01 of 6See more

mojaloop mojaloop 14.0.0

1 of the 6 container images this version deploys carry CVE-2023-3696.

Container imageDigestPackageFixed in
mojaloop/central-ledger:v13.14.01abc8a7aa71c
mongoose@5.12.9
5.13.20

Open the chart page →

19,226
mqtt-loggermoreillonVerified publisher0.3.11 of 5See more

mqtt-logger moreillon 0.3.1

1 of the 5 container images this version deploys carry CVE-2023-3696.

Container imageDigestPackageFixed in
moreillon/mqtt-logger:9ffbf7180a8a7daf56f6
mongoose@6.4.4
6.11.3

Open the chart page →

10,959
flomesh-consoleopenshift0.70.0-30-ubi81 of 2See more

flomesh-console openshift 0.70.0-30-ubi8

1 of the 2 container images this version deploys carry CVE-2023-3696.

Container imageDigestPackageFixed in
quay.io/flomesh/flomesh-console-ubi8:0.70.0-30ce6938ff6709
mongoose@5.13.9
5.13.20

Open the chart page →

9,968
trudesktechpreta1.0.01 of 3See more

trudesk techpreta 1.0.0

1 of the 3 container images this version deploys carry CVE-2023-3696.

Container imageDigestPackageFixed in
polonel/trudesk:1.2.60cf6513f6fe3
mongoose@6.4.3
6.11.3

Open the chart page →

4,017
vehicle-dashboardtest-vehi-dash0.1.01 of 7See more

vehicle-dashboard test-vehi-dash 0.1.0

1 of the 7 container images this version deploys carry CVE-2023-3696.

Container imageDigestPackageFixed in
samajh/alprbackend:latestea742b4372ad
mongoose@5.13.15
5.13.20

Open the chart page →

20,270
pock-helm-charttinote-chart0.1.01 of 3See more

pock-helm-chart tinote-chart 0.1.0

1 of the 3 container images this version deploys carry CVE-2023-3696.

Container imageDigestPackageFixed in
denisshav/backend:latest4cc8dc5a4499
mongoose@5.12.5
5.13.20

Open the chart page →

6,881

Container images carrying it

17 by charts deploying them

A fixed version is listed for 1 of the 1 affected package.

Container imageDigestPackageFixed inUsed by
governify/registry:v3.4.0d3f37f4f8168
mongoose@5.12.6
5.13.20
2
mojaloop/central-ledger:v13.14.01abc8a7aa71c
mongoose@5.12.9
5.13.20
2
arfath29/3-tier-app-backend:latestee0750b18406
mongoose@5.12.14
5.13.20
1
assistiot/smart-orchestrator_cluster:latest4f41e1defe99
mongoose@6.3.4
6.11.3
1
assistiot/smart-orchestrator_enabler:latest89f37e88c871
mongoose@6.3.4
6.11.3
1
assistiot/smart-orchestrator_repository:latesta8b8dbed04a4
mongoose@6.3.4
6.11.3
1
denisshav/backend:latest4cc8dc5a4499
mongoose@5.12.5
5.13.20
1
electerious/ackee:3.2.05e7173fa321c
mongoose@6.0.6
6.11.3
1
fiware/iotagent-ul:1.14.0fe11f55a926d
mongoose@5.7.5
5.13.20
1
jayfong/yapi:1.10.2163e5d621910
mongoose@5.7.5
5.13.20
1
moreillon/mqtt-logger:9ffbf7180a8a7daf56f6
mongoose@6.4.4
6.11.3
1
openhab/openhab-cloud:a8138a329dd2bac8c4b
mongoose@5.13.15
5.13.20
1
polonel/trudesk:1.2.60cf6513f6fe3
mongoose@6.4.3
6.11.3
1
samajh/alprbackend:latestea742b4372ad
mongoose@5.13.15
5.13.20
1
ghcr.io/mmontes11/iot-back:v3.11.096683c54ae65
mongoose@5.13.16
5.13.20
1
quay.io/flomesh/flomesh-console-ubi8:0.70.0-30ce6938ff6709
mongoose@5.13.9
5.13.20
1
registry.gitlab.com/infinitydon/registry/open5gs-webui:v2.2.2fda21b0a0344
mongoose@4.13.14
5.13.20
1

syft 1.42.1 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.