StackRadar

CVE-2024-11831

Medium

Advisory

Published 10 Feb 2025In the index since 6 Sept 2026
Severity
Medium
worst across findings
CVSS
5.4
base score, highest
EPSS
0.011
64th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
82
of 17,781 indexed, latest versions
Container images
85
deployed by those charts
Fix available
1 of 2
affected packages

Cross-site Scripting (XSS) in serialize-javascript

Carried by container images the latest versions of 82 of 17,781 indexed charts deploy, on 85 images.

Affected packageAffected versionsFixed inImages
serialize-javascriptnpm6.0.0, 6.0.16.0.285
node-serialize-javascriptdeb6.0.1-1no fix listed1
OSV records
GHSA-76p7-773f-r4q5UBUNTU-CVE-2024-11831

Charts affected

82 by stars
ChartLatestAffected imagesRadar Score
netris-controllernetrisai2.8.21 of 14See more

netris-controller netrisai 2.8.2

1 of the 14 container images this version deploys carry CVE-2024-11831.

Container imageDigestPackageFixed in
netrisai/controller-web-service-backend:4.6.0-0086e865080e86c
serialize-javascript@6.0.0
6.0.2

Open the chart page →

30,326
redisinsightheywood8-helm-chartsVerified publisher0.4.51 of 1See more

redisinsight heywood8-helm-charts 0.4.5

1 of the 1 container images this version deploys carry CVE-2024-11831.

Container imageDigestPackageFixed in
heywood8/redisinsight:2.28.00bc9ab313d37
serialize-javascript@6.0.1
6.0.2

Open the chart page →

2,828
misskeyalytiVerified publisher1.0.01 of 1See more

misskey alyti 1.0.0

1 of the 1 container images this version deploys carry CVE-2024-11831.

Container imageDigestPackageFixed in
misskey/misskey:12.110.1e08b7c478093
serialize-javascript@6.0.0
6.0.2

Open the chart page →

5,251
klusterviewklusterviewVerified publisher0.1.01 of 4See more

klusterview klusterview 0.1.0

1 of the 4 container images this version deploys carry CVE-2024-11831.

Container imageDigestPackageFixed in
kyleslugg/klusterview:latestba8c36dfdfbd
serialize-javascript@6.0.1
6.0.2

Open the chart page →

3,795
convertigoconvertigoOfficialVerified publisher8.4.31 of 5See more

convertigo convertigo 8.4.3

1 of the 5 container images this version deploys carry CVE-2024-11831.

Container imageDigestPackageFixed in
baserow/baserow:1.30.1df0c42eb67e8
serialize-javascript@6.0.1
6.0.2

Open the chart page →

17,404
nightscoutgabe565Verified publisher0.13.01 of 2See more

nightscout gabe565 0.13.0

1 of the 2 container images this version deploys carry CVE-2024-11831.

Container imageDigestPackageFixed in
nightscout/cgm-remote-monitor:15.0.2ad29ca7a4de6
serialize-javascript@6.0.1
6.0.2

Open the chart page →

2,521
kubeviouskubevious1.2.23 of 7See more

kubevious kubevious 1.2.2

3 of the 7 container images this version deploys carry CVE-2024-11831.

Container imageDigestPackageFixed in
kubevious/backend:1.2.22d9ba6eb46b6
serialize-javascript@6.0.0
6.0.2
kubevious/collector:1.2.1f58226f9d84e
serialize-javascript@6.0.0
6.0.2
kubevious/parser:1.2.299ae7a5168c2
serialize-javascript@6.0.0
6.0.2

Open the chart page →

14,204
kobotoolboxone-acre-fundVerified publisher0.7.41 of 9See more

kobotoolbox one-acre-fund 0.7.4

1 of the 9 container images this version deploys carry CVE-2024-11831.

Container imageDigestPackageFixed in
kobotoolbox/kpi:2.022.24dbcacc01bccd4
serialize-javascript@6.0.0
6.0.2

Open the chart page →

18,517
data-fairdata354-helmVerified publisher1.1.22 of 12See more

data-fair data354-helm 1.1.2

2 of the 12 container images this version deploys carry CVE-2024-11831.

Container imageDigestPackageFixed in
ghcr.io/data-fair/data-fair:3cc9498b64b5b
serialize-javascript@6.0.1
6.0.2
ghcr.io/data-fair/processings:15a9216989707
serialize-javascript@6.0.1
6.0.2

Open the chart page →

38,346
joplin-serverdjjudas21Verified publisher5.5.81 of 1See more

joplin-server djjudas21 5.5.8

1 of the 1 container images this version deploys carry CVE-2024-11831.

Container imageDigestPackageFixed in
joplin/server:2.14.2-betab87564ef34e9
serialize-javascript@6.0.1
6.0.2

Open the chart page →

3,925
jspolicyloftVerified publisher0.2.21 of 1See more

jspolicy loft 0.2.2

1 of the 1 container images this version deploys carry CVE-2024-11831.

Container imageDigestPackageFixed in
loftsh/jspolicy:0.2.225deb9bd2683
serialize-javascript@6.0.1
6.0.2

Open the chart page →

2,309
pumejwebapppumejnodejswebapp0.1.01 of 1See more

pumejwebapp pumejnodejswebapp 0.1.0

1 of the 1 container images this version deploys carry CVE-2024-11831.

Container imageDigestPackageFixed in
pumejlab/nodejs-webapp:latestf563eabcb819
serialize-javascript@6.0.0
6.0.2

Open the chart page →

1,164
youtubedl-materialyoutubedl-materialVerified publisher0.0.11 of 1See more

youtubedl-material youtubedl-material 0.0.1

1 of the 1 container images this version deploys carry CVE-2024-11831.

Container imageDigestPackageFixed in
tzahi12345/youtubedl-material:latest2f943d584711
serialize-javascript@6.0.0
6.0.2

Open the chart page →

9,783
openhab-cloudandibraeuVerified publisher1.2.61 of 1See more

openhab-cloud andibraeu 1.2.6

1 of the 1 container images this version deploys carry CVE-2024-11831.

Container imageDigestPackageFixed in
openhab/openhab-cloud:a8138a329dd2bac8c4b
serialize-javascript@6.0.0
6.0.2

Open the chart page →

3,437
apimap-developerapimapOfficialVerified publisher1.4.11 of 1See more

apimap-developer apimap 1.4.1

1 of the 1 container images this version deploys carry CVE-2024-11831.

Container imageDigestPackageFixed in
apimap/developer:v1.3.1406d3858e20c
serialize-javascript@6.0.0
6.0.2

Open the chart page →

2,353
apimap-portalapimapOfficialVerified publisher2.4.01 of 1See more

apimap-portal apimap 2.4.0

1 of the 1 container images this version deploys carry CVE-2024-11831.

Container imageDigestPackageFixed in
apimap/portal:v2.4.0041a4790c65c
serialize-javascript@6.0.0
6.0.2

Open the chart page →

2,396
openapiassist-iot-open-api-management0.2.21 of 6See more

openapi assist-iot-open-api-management 0.2.2

1 of the 6 container images this version deploys carry CVE-2024-11831.

Container imageDigestPackageFixed in
assistiot/open_api_frontend:1.0.1f11d82defc70
serialize-javascript@6.0.1
6.0.2

Open the chart page →

18,277
awesomeblessingappawesomeblessingapp1.1.01 of 1See more

awesomeblessingapp awesomeblessingapp 1.1.0

1 of the 1 container images this version deploys carry CVE-2024-11831.

Container imageDigestPackageFixed in
bnwokoye/nodejswebapp:latest74de7dc7ebfb
serialize-javascript@6.0.0
6.0.2

Open the chart page →

1,267
myhelmappbelihelmapp1.1.01 of 1See more

myhelmapp belihelmapp 1.1.0

1 of the 1 container images this version deploys carry CVE-2024-11831.

Container imageDigestPackageFixed in
belirta/beli-docker:v1.0.0f65ad0e23b4d
serialize-javascript@6.0.0
6.0.2

Open the chart page →

1,187
mx-apibicarus-labs0.1.01 of 4See more

mx-api bicarus-labs 0.1.0

1 of the 4 container images this version deploys carry CVE-2024-11831.

Container imageDigestPackageFixed in
bicarus/mx-api-service:1.0.2-hf1dab88659ae3b
serialize-javascript@6.0.0
6.0.2

Open the chart page →

4,455
chatgpt-next-webchatgpt-next-web0.1.11 of 1See more

chatgpt-next-web chatgpt-next-web 0.1.1

1 of the 1 container images this version deploys carry CVE-2024-11831.

Container imageDigestPackageFixed in
yidadaa/chatgpt-next-web:latesteaaa469ddeeb
serialize-javascript@6.0.1
6.0.2

Open the chart page →

1,977
countlychristianhuthVerified publisher5.2.12 of 3See more

countly christianhuth 5.2.1

2 of the 3 container images this version deploys carry CVE-2024-11831.

Container imageDigestPackageFixed in
countly/api:25.05.4f4cc7447c4f5
serialize-javascript@6.0.1
6.0.2
countly/frontend:25.05.42acbc11499b6
serialize-javascript@6.0.1
6.0.2

Open the chart page →

7,295
codehubcodehubVerified publisher6.2.181 of 5See more

codehub codehub 6.2.18

1 of the 5 container images this version deploys carry CVE-2024-11831.

Container imageDigestPackageFixed in
jupyterhub/jupyterhub:5.4.63974ba945e65
node-serialize-javascript@6.0.1-1
serialize-javascript@6.0.1
no fix listed
6.0.2

Open the chart page →

13,220
coderstudio-strapi-devcoderstudio-strapi-devVerified publisher0.0.11 of 3See more

coderstudio-strapi-dev coderstudio-strapi-dev 0.0.1

1 of the 3 container images this version deploys carry CVE-2024-11831.

Container imageDigestPackageFixed in
rcdelacruz/my-strapi-app:js-amd6438007f358355
serialize-javascript@6.0.1
6.0.2

Open the chart page →

5,141
docker-composecoderstudio-strapi-devVerified publisher0.0.11 of 3See more

docker-compose coderstudio-strapi-dev 0.0.1

1 of the 3 container images this version deploys carry CVE-2024-11831.

Container imageDigestPackageFixed in
rcdelacruz/my-strapi-app:js-amd6438007f358355
serialize-javascript@6.0.1
6.0.2

Open the chart page →

5,141
strapi-devcoderstudio-strapi-devVerified publisher0.0.11 of 3See more

strapi-dev coderstudio-strapi-dev 0.0.1

1 of the 3 container images this version deploys carry CVE-2024-11831.

Container imageDigestPackageFixed in
rcdelacruz/my-strapi-app:js-amd6438007f358355
serialize-javascript@6.0.1
6.0.2

Open the chart page →

5,141
containers-security-chartscontainers-security0.1.02 of 7See more

containers-security-charts containers-security 0.1.0

2 of the 7 container images this version deploys carry CVE-2024-11831.

Container imageDigestPackageFixed in
coldatom/containers-security-api:latesteae9e82da080
serialize-javascript@6.0.1
6.0.2
coldatom/containers-security-front:latest7c2fbbb41bcf
serialize-javascript@6.0.1
6.0.2

Open the chart page →

9,146
myawesomeappcuriousgeekshelmfirstapp0.1.21 of 1See more

myawesomeapp curiousgeekshelmfirstapp 0.1.2

1 of the 1 container images this version deploys carry CVE-2024-11831.

Container imageDigestPackageFixed in
srini78/nodejswebappeks:latest5d1cbdc6833a
serialize-javascript@6.0.0
6.0.2

Open the chart page →

1,267
bee-localchainethersphereVerified publisher0.2.01 of 1See more

bee-localchain ethersphere 0.2.0

1 of the 1 container images this version deploys carry CVE-2024-11831.

Container imageDigestPackageFixed in
ethersphere/bee-localchain:latest0558799ca992
serialize-javascript@6.0.0
6.0.2

Open the chart page →

2,266
geth-swapethersphereVerified publisher0.6.31 of 2See more

geth-swap ethersphere 0.6.3

1 of the 2 container images this version deploys carry CVE-2024-11831.

Container imageDigestPackageFixed in
ethersphere/bee-localchain:latest0558799ca992
serialize-javascript@6.0.0
6.0.2

Open the chart page →

4,756
fickyhelmappfickyhelmapp1.1.01 of 1See more

fickyhelmapp fickyhelmapp 1.1.0

1 of the 1 container images this version deploys carry CVE-2024-11831.

Container imageDigestPackageFixed in
tundeficky/nodejs-app:v1.0.03cf9a9ce54e8
serialize-javascript@6.0.0
6.0.2

Open the chart page →

3,311
canary-checkerflanksourceVerified publisher1.2.01 of 2See more

canary-checker flanksource 1.2.0

1 of the 2 container images this version deploys carry CVE-2024-11831.

Container imageDigestPackageFixed in
flanksource/canary-checker-ui:v1.4.281764c84e550db
serialize-javascript@6.0.1
6.0.2

Open the chart page →

4,650
Governify-Bluejaygovernify0.1.01 of 12See more

Governify-Bluejay governify 0.1.0

1 of the 12 container images this version deploys carry CVE-2024-11831.

Container imageDigestPackageFixed in
governify/assets-manager:v1.4.12987672448c7
serialize-javascript@6.0.0
6.0.2

Open the chart page →

22,512
Governify-Falcongovernify0.1.01 of 10See more

Governify-Falcon governify 0.1.0

1 of the 10 container images this version deploys carry CVE-2024-11831.

Container imageDigestPackageFixed in
governify/assets-manager:v1.4.12987672448c7
serialize-javascript@6.0.0
6.0.2

Open the chart page →

24,319
h2ph2pVerified publisher1.0.11 of 1See more

h2p h2p 1.0.1

1 of the 1 container images this version deploys carry CVE-2024-11831.

Container imageDigestPackageFixed in
dacinfomotion/h2p:latest68fa393b472c
serialize-javascript@6.0.0
6.0.2

Open the chart page →

1,713
countlyhelmforgeVerified publisher1.2.61 of 3See more

countly helmforge 1.2.6

1 of the 3 container images this version deploys carry CVE-2024-11831.

Container imageDigestPackageFixed in
countly/countly-server:25.05.4e3c238248f99
serialize-javascript@6.0.0
6.0.2

Open the chart page →

18,813
townsquarehuscker-chartsVerified publisher1.0.41 of 2See more

townsquare huscker-charts 1.0.4

1 of the 2 container images this version deploys carry CVE-2024-11831.

Container imageDigestPackageFixed in
ghcr.io/huscker/townsquare-backend:2.15.2e106681e7673
serialize-javascript@6.0.1
6.0.2

Open the chart page →

3,407
dtlinfradao0.0.11 of 1See more

dtl infradao 0.0.1

1 of the 1 container images this version deploys carry CVE-2024-11831.

Container imageDigestPackageFixed in
ethereumoptimism/data-transport-layer:0.5.56e07968a0e686
serialize-javascript@6.0.0
6.0.2

Open the chart page →

4,944
keyoxide-webittrident-oss0.2.31 of 1See more

keyoxide-web ittrident-oss 0.2.3

1 of the 1 container images this version deploys carry CVE-2024-11831.

Container imageDigestPackageFixed in
keyoxide/keyoxide:stable96f27a71269d
serialize-javascript@6.0.0
6.0.2

Open the chart page →

2,363
annotation-tooljtektVerified publisher0.1.51 of 2See more

annotation-tool jtekt 0.1.5

1 of the 2 container images this version deploys carry CVE-2024-11831.

Container imageDigestPackageFixed in
moreillon/api-proxy:a3e8b41e9e578c9653b6
serialize-javascript@6.0.0
6.0.2

Open the chart page →

2,315
image-storage-servicejtektVerified publisher0.4.31 of 4See more

image-storage-service jtekt 0.4.3

1 of the 4 container images this version deploys carry CVE-2024-11831.

Container imageDigestPackageFixed in
public.ecr.aws/jtekt-corporation/image-storage-service:v1.16.17b1493760c716
serialize-javascript@6.0.0
6.0.2

Open the chart page →

22,589
polygonal-annotation-tooljtektVerified publisher0.1.51 of 2See more

polygonal-annotation-tool jtekt 0.1.5

1 of the 2 container images this version deploys carry CVE-2024-11831.

Container imageDigestPackageFixed in
moreillon/api-proxy:a3e8b41e9e578c9653b6
serialize-javascript@6.0.0
6.0.2

Open the chart page →

2,231
shinsei-managerjtektVerified publisher0.2.04 of 8See more

shinsei-manager jtekt 0.2.0

4 of the 8 container images this version deploys carry CVE-2024-11831.

Container imageDigestPackageFixed in
moreillon/api-proxy:latestd7d4a5463525
serialize-javascript@6.0.0
6.0.2
moreillon/group-manager:latest3caa8f710ee0
serialize-javascript@6.0.0
6.0.2
moreillon/user-manager:v5.0.2e1c9bfab5c16
serialize-javascript@6.0.0
6.0.2
public.ecr.aws/jtekt-corporation/shinsei-manager:v2.8.15cd62142d6ed
serialize-javascript@6.0.0
6.0.2

Open the chart page →

63,461
time-series-storagejtektVerified publisher0.1.101 of 2See more

time-series-storage jtekt 0.1.10

1 of the 2 container images this version deploys carry CVE-2024-11831.

Container imageDigestPackageFixed in
public.ecr.aws/jtekt-corporation/time-series-storage-service:v1.5.1046ef5c9ed50
serialize-javascript@6.0.0
6.0.2

Open the chart page →

16,600
youtubedl-materialk8s-home-lab-repo5.1.11 of 1See more

youtubedl-material k8s-home-lab-repo 5.1.1

1 of the 1 container images this version deploys carry CVE-2024-11831.

Container imageDigestPackageFixed in
tzahi12345/youtubedl-material:4.3.22f943d584711
serialize-javascript@6.0.0
6.0.2

Open the chart page →

9,783
visual-regression-trackerkokuwa5.1.01 of 4See more

visual-regression-tracker kokuwa 5.1.0

1 of the 4 container images this version deploys carry CVE-2024-11831.

Container imageDigestPackageFixed in
visualregressiontracker/api:5.0.11941aeb8c8bf9
serialize-javascript@6.0.1
6.0.2

Open the chart page →

9,098
workload-operatorkubevious0.0.31 of 1See more

workload-operator kubevious 0.0.3

1 of the 1 container images this version deploys carry CVE-2024-11831.

Container imageDigestPackageFixed in
kubevious/workload-operator:1.0.20b0f4c507eb6
serialize-javascript@6.0.0
6.0.2

Open the chart page →

2,008
api-proxymoreillonVerified publisher0.1.41 of 1See more

api-proxy moreillon 0.1.4

1 of the 1 container images this version deploys carry CVE-2024-11831.

Container imageDigestPackageFixed in
moreillon/api-proxy:2373c1953739ef6956b5
serialize-javascript@6.0.0
6.0.2

Open the chart page →

1,712
face-recognitionmoreillonVerified publisher0.2.41 of 3See more

face-recognition moreillon 0.2.4

1 of the 3 container images this version deploys carry CVE-2024-11831.

Container imageDigestPackageFixed in
moreillon/face-recognition-fastapi-front:latestc1072f4ab6aa
serialize-javascript@6.0.0
6.0.2

Open the chart page →

8,556
group-managermoreillonVerified publisher0.4.41 of 3See more

group-manager moreillon 0.4.4

1 of the 3 container images this version deploys carry CVE-2024-11831.

Container imageDigestPackageFixed in
moreillon/group-manager:v4.9.0d5a0ec8394c0
serialize-javascript@6.0.0
6.0.2

Open the chart page →

9,835

Container images carrying it

85 by charts deploying them

A fixed version is listed for 1 of the 2 affected packages.

Container imageDigestPackageFixed inUsed by
moreillon/group-manager:latest3caa8f710ee0
serialize-javascript@6.0.0
6.0.2
1
mpopoola1/nodejsapp:latest061fc532de7d
serialize-javascript@6.0.0
6.0.2
1
netrisai/controller-web-service-backend:4.6.0-0086e865080e86c
serialize-javascript@6.0.0
6.0.2
1
nightscout/cgm-remote-monitor:15.0.2ad29ca7a4de6
serialize-javascript@6.0.1
6.0.2
1
nightscout/cgm-remote-monitor:15.0.3f604dc4c03ca
serialize-javascript@6.0.1
6.0.2
1
nottiey/mynodejswebapp:latest9c35a24c9eb3
serialize-javascript@6.0.0
6.0.2
1
okaforuchena/uo-docker:V1.0.0004e81250f48
serialize-javascript@6.0.0
6.0.2
1
ooghenekaro/amazon:latest03394ba1d6d8
serialize-javascript@6.0.1
6.0.2
1
ooghenekaro/hans-docker:v1.0.0d1f972aa844a
serialize-javascript@6.0.0
6.0.2
1
ooghenekaro/nodejswebapp:latestea5b71588a76
serialize-javascript@6.0.0
6.0.2
1
ooghenekaro/nodejswebappoct:lateste010f5fecbc7
serialize-javascript@6.0.0
6.0.2
1
openhab/openhab-cloud:a8138a329dd2bac8c4b
serialize-javascript@6.0.0
6.0.2
1
patdada/bella-docker:v1.0.075127147a624
serialize-javascript@6.0.0
6.0.2
1
pumejlab/nodejs-webapp:latestf563eabcb819
serialize-javascript@6.0.0
6.0.2
1
safeglobal/safe-client-gateway-nest:v1.51.012ccfd93fcaf
serialize-javascript@6.0.1
6.0.2
1
srini78/nodejswebappeks:latest5d1cbdc6833a
serialize-javascript@6.0.0
6.0.2
1
thecodingmachine/workadventure-map-storage:v1.17.75bdab56da2fa
serialize-javascript@6.0.1
6.0.2
1
tobirachel/node-project3:v17d9f37154994
serialize-javascript@6.0.0
6.0.2
1
tundeficky/nodejs-app:v1.0.03cf9a9ce54e8
serialize-javascript@6.0.0
6.0.2
1
visualregressiontracker/api:5.0.11941aeb8c8bf9
serialize-javascript@6.0.1
6.0.2
1
vlebediantsev/notes-admin-front:latest007c6670ff48
serialize-javascript@6.0.1
6.0.2
1
vlebediantsev/notes-project-front:latest945675fd2636
serialize-javascript@6.0.1
6.0.2
1
vlebediantsev/registration-ms-front-app-host:latest54f69d116c50
serialize-javascript@6.0.1
6.0.2
1
winfred008/amazon:910a68de5b398
serialize-javascript@6.0.0
6.0.2
1
yidadaa/chatgpt-next-web:latesteaaa469ddeeb
serialize-javascript@6.0.1
6.0.2
1
ghcr.io/data-fair/data-fair:3cc9498b64b5b
serialize-javascript@6.0.1
6.0.2
1
ghcr.io/data-fair/processings:15a9216989707
serialize-javascript@6.0.1
6.0.2
1
ghcr.io/huscker/townsquare-backend:2.15.2e106681e7673
serialize-javascript@6.0.1
6.0.2
1
ghcr.io/trieb-work/saleor-apps/saleor-app-products-feed:1.23.11d435b4ab372
serialize-javascript@6.0.1
6.0.2
1
ghcr.io/trieb-work/saleor-apps/saleor-app-search:1.24.328edefb6c92d
serialize-javascript@6.0.1
6.0.2
1
ghcr.io/trieb-work/saleor-apps/saleor-app-smtp:1.4.357a06bfba327
serialize-javascript@6.0.1
6.0.2
1
ghcr.io/woodenmaiden/relfinderreformedapi:1.1.20708d30433d4
serialize-javascript@6.0.1
6.0.2
1
public.ecr.aws/jtekt-corporation/image-storage-service:v1.16.17b1493760c716
serialize-javascript@6.0.0
6.0.2
1
public.ecr.aws/jtekt-corporation/shinsei-manager:v2.8.15cd62142d6ed
serialize-javascript@6.0.0
6.0.2
1
public.ecr.aws/jtekt-corporation/time-series-storage-service:v1.5.1046ef5c9ed50
serialize-javascript@6.0.0
6.0.2
1

syft 1.42.1 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.