StackRadar

CVE-2024-11831

Medium

Advisory

Published 10 Feb 2025In the index since 6 Sept 2026
Severity
Medium
worst across findings
CVSS
5.4
base score, highest
EPSS
0.011
64th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
82
of 17,781 indexed, latest versions
Container images
85
deployed by those charts
Fix available
1 of 2
affected packages

Cross-site Scripting (XSS) in serialize-javascript

Carried by container images the latest versions of 82 of 17,781 indexed charts deploy, on 85 images.

Affected packageAffected versionsFixed inImages
serialize-javascriptnpm6.0.0, 6.0.16.0.285
node-serialize-javascriptdeb6.0.1-1no fix listed1
OSV records
GHSA-76p7-773f-r4q5UBUNTU-CVE-2024-11831

Charts affected

82 by stars
ChartLatestAffected imagesRadar Score
user-manager-neo4jmoreillonVerified publisher0.9.72 of 6See more

user-manager-neo4j moreillon 0.9.7

2 of the 6 container images this version deploys carry CVE-2024-11831.

Container imageDigestPackageFixed in
moreillon/group-manager:v4.9.0d5a0ec8394c0
serialize-javascript@6.0.0
6.0.2
moreillon/user-manager:v5.0.2e1c9bfab5c16
serialize-javascript@6.0.0
6.0.2

Open the chart page →

30,363
nightscoutmt1905021.1.01 of 3See more

nightscout mt190502 1.1.0

1 of the 3 container images this version deploys carry CVE-2024-11831.

Container imageDigestPackageFixed in
nightscout/cgm-remote-monitor:15.0.3f604dc4c03ca
serialize-javascript@6.0.1
6.0.2

Open the chart page →

6,608
myawesomeappmyawesomapp-mitchxxx0.1.11 of 1See more

myawesomeapp myawesomapp-mitchxxx 0.1.1

1 of the 1 container images this version deploys carry CVE-2024-11831.

Container imageDigestPackageFixed in
mitchxxx/amazon:214e72480ec63a
serialize-javascript@6.0.1
6.0.2

Open the chart page →

2,116
myawesomeappmyawesomeapp1.1.01 of 1See more

myawesomeapp myawesomeapp 1.1.0

1 of the 1 container images this version deploys carry CVE-2024-11831.

Container imageDigestPackageFixed in
ooghenekaro/nodejswebapp:latestea5b71588a76
serialize-javascript@6.0.0
6.0.2

Open the chart page →

1,267
myawesomeapp14myawesomeapp140.1.11 of 1See more

myawesomeapp14 myawesomeapp14 0.1.1

1 of the 1 container images this version deploys carry CVE-2024-11831.

Container imageDigestPackageFixed in
ccjacobs14/amazon:59a9b14a6f09e
serialize-javascript@6.0.1
6.0.2

Open the chart page →

2,116
myawesomeappmyawesomeapp20.1.01 of 1See more

myawesomeapp myawesomeapp2 0.1.0

1 of the 1 container images this version deploys carry CVE-2024-11831.

Container imageDigestPackageFixed in
mpopoola1/nodejsapp:latest061fc532de7d
serialize-javascript@6.0.0
6.0.2

Open the chart page →

1,118
myawesomeapp-feb24myawesomeapp-feb240.1.11 of 1See more

myawesomeapp-feb24 myawesomeapp-feb24 0.1.1

1 of the 1 container images this version deploys carry CVE-2024-11831.

Container imageDigestPackageFixed in
josepht05/nodejs-feb24:latest36cb0c618c94
serialize-javascript@6.0.0
6.0.2

Open the chart page →

1,070
myawesomeapp-janmyawesomeapp-jan0.1.11 of 1See more

myawesomeapp-jan myawesomeapp-jan 0.1.1

1 of the 1 container images this version deploys carry CVE-2024-11831.

Container imageDigestPackageFixed in
ooghenekaro/amazon:latest03394ba1d6d8
serialize-javascript@6.0.1
6.0.2

Open the chart page →

2,144
myawesomeapp-marmyawesomeapp-mar0.1.11 of 1See more

myawesomeapp-mar myawesomeapp-mar 0.1.1

1 of the 1 container images this version deploys carry CVE-2024-11831.

Container imageDigestPackageFixed in
winfred008/amazon:910a68de5b398
serialize-javascript@6.0.0
6.0.2

Open the chart page →

2,116
myawesomeappoctmyawesomeappoct0.1.11 of 1See more

myawesomeappoct myawesomeappoct 0.1.1

1 of the 1 container images this version deploys carry CVE-2024-11831.

Container imageDigestPackageFixed in
ooghenekaro/nodejswebappoct:lateste010f5fecbc7
serialize-javascript@6.0.0
6.0.2

Open the chart page →

1,164
myawesomeappoctmyawesomeappoct20230.1.11 of 1See more

myawesomeappoct myawesomeappoct2023 0.1.1

1 of the 1 container images this version deploys carry CVE-2024-11831.

Container imageDigestPackageFixed in
hamid2021/nodejs-dockercli:latest429d99890c3c
serialize-javascript@6.0.0
6.0.2

Open the chart page →

1,118
mydannyappmydannyapp1.1.01 of 1See more

mydannyapp mydannyapp 1.1.0

1 of the 1 container images this version deploys carry CVE-2024-11831.

Container imageDigestPackageFixed in
danny1dockerhub/nodejswebapp:lateste434683fcc89
serialize-javascript@6.0.0
6.0.2

Open the chart page →

1,267
mygreatappmygreatapp0.1.01 of 1See more

mygreatapp mygreatapp 0.1.0

1 of the 1 container images this version deploys carry CVE-2024-11831.

Container imageDigestPackageFixed in
ktitilayo2/nodejswebapp:latest8bac28058688
serialize-javascript@6.0.0
6.0.2

Open the chart page →

1,164
myhelmappmyhelm-app1.1.01 of 1See more

myhelmapp myhelm-app 1.1.0

1 of the 1 container images this version deploys carry CVE-2024-11831.

Container imageDigestPackageFixed in
patdada/bella-docker:v1.0.075127147a624
serialize-javascript@6.0.0
6.0.2

Open the chart page →

1,625
myhelmappmyhelmapp0.1.11 of 1See more

myhelmapp myhelmapp 0.1.1

1 of the 1 container images this version deploys carry CVE-2024-11831.

Container imageDigestPackageFixed in
tobirachel/node-project3:v17d9f37154994
serialize-javascript@6.0.0
6.0.2

Open the chart page →

3,359
myhelmappmyhelmapp11.1.01 of 1See more

myhelmapp myhelmapp1 1.1.0

1 of the 1 container images this version deploys carry CVE-2024-11831.

Container imageDigestPackageFixed in
josepht05/titajo-docker:v1.0.0d94024965d78
serialize-javascript@6.0.0
6.0.2

Open the chart page →

1,164
myhelmappmyhelmpapp1.1.01 of 1See more

myhelmapp myhelmpapp 1.1.0

1 of the 1 container images this version deploys carry CVE-2024-11831.

Container imageDigestPackageFixed in
ooghenekaro/hans-docker:v1.0.0d1f972aa844a
serialize-javascript@6.0.0
6.0.2

Open the chart page →

1,235
myweatherhelmmyweather1.3.111 of 7See more

myweatherhelm myweather 1.3.11

1 of the 7 container images this version deploys carry CVE-2024-11831.

Container imageDigestPackageFixed in
hecrom/myweatherprocessingreactclient:1.3.115454b54d5b28
serialize-javascript@6.0.1
6.0.2

Open the chart page →

17,929
nodeapp-chartnodeapp-chart0.1.01 of 1See more

nodeapp-chart nodeapp-chart 0.1.0

1 of the 1 container images this version deploys carry CVE-2024-11831.

Container imageDigestPackageFixed in
laly9999/node-app-dockerized:latest75ae77a20c6c
serialize-javascript@6.0.0
6.0.2

Open the chart page →

1,118
notes-admin-front-helm-chartnotesprojectchart0.1.01 of 1See more

notes-admin-front-helm-chart notesprojectchart 0.1.0

1 of the 1 container images this version deploys carry CVE-2024-11831.

Container imageDigestPackageFixed in
vlebediantsev/notes-admin-front:latest007c6670ff48
serialize-javascript@6.0.1
6.0.2

Open the chart page →

15,132
notes-project-fromt-helm-chartnotesprojectchart0.1.01 of 1See more

notes-project-fromt-helm-chart notesprojectchart 0.1.0

1 of the 1 container images this version deploys carry CVE-2024-11831.

Container imageDigestPackageFixed in
vlebediantsev/notes-project-front:latest945675fd2636
serialize-javascript@6.0.1
6.0.2

Open the chart page →

15,206
registration-ms-front-helm-chartnotesprojectchart0.1.01 of 1See more

registration-ms-front-helm-chart notesprojectchart 0.1.0

1 of the 1 container images this version deploys carry CVE-2024-11831.

Container imageDigestPackageFixed in
vlebediantsev/registration-ms-front-app-host:latest54f69d116c50
serialize-javascript@6.0.1
6.0.2

Open the chart page →

15,187
nottieawesomeappnottieawesomeapp0.1.01 of 1See more

nottieawesomeapp nottieawesomeapp 0.1.0

1 of the 1 container images this version deploys carry CVE-2024-11831.

Container imageDigestPackageFixed in
nottiey/mynodejswebapp:latest9c35a24c9eb3
serialize-javascript@6.0.0
6.0.2

Open the chart page →

1,164
relfinder-reformedrelfinderreformed2.0.01 of 2See more

relfinder-reformed relfinderreformed 2.0.0

1 of the 2 container images this version deploys carry CVE-2024-11831.

Container imageDigestPackageFixed in
ghcr.io/woodenmaiden/relfinderreformedapi:1.1.20708d30433d4
serialize-javascript@6.0.1
6.0.2

Open the chart page →

6,282
joplinrubxkubeVerified publisher1.3.11 of 2See more

joplin rubxkube 1.3.1

1 of the 2 container images this version deploys carry CVE-2024-11831.

Container imageDigestPackageFixed in
joplin/server:3.0-beta52af57880c0e
serialize-javascript@6.0.1
6.0.2

Open the chart page →

7,413
safe-stacksafe-global0.1.02 of 9See more

safe-stack safe-global 0.1.0

2 of the 9 container images this version deploys carry CVE-2024-11831.

Container imageDigestPackageFixed in
gjeanmart/safe-ganache-node:latest926264c8f2d1
serialize-javascript@6.0.0
6.0.2
safeglobal/safe-client-gateway-nest:v1.51.012ccfd93fcaf
serialize-javascript@6.0.1
6.0.2

Open the chart page →

19,560
safe-transaction-servicesafe-global0.1.01 of 6See more

safe-transaction-service safe-global 0.1.0

1 of the 6 container images this version deploys carry CVE-2024-11831.

Container imageDigestPackageFixed in
gjeanmart/safe-ganache-node:latest926264c8f2d1
serialize-javascript@6.0.0
6.0.2

Open the chart page →

16,620
semaphoreschoenwald0.1.31 of 1See more

semaphore schoenwald 0.1.3

1 of the 1 container images this version deploys carry CVE-2024-11831.

Container imageDigestPackageFixed in
0hlov3/semaphore:v1.0.050f874ec096b
serialize-javascript@6.0.0
6.0.2

Open the chart page →

1,796
sneakerssneakers1.0.01 of 4See more

sneakers sneakers 1.0.0

1 of the 4 container images this version deploys carry CVE-2024-11831.

Container imageDigestPackageFixed in
helga09/shoes_ukr:v1.1.17999bc8b77c0
serialize-javascript@6.0.1
6.0.2

Open the chart page →

7,574
saleor-appstrieb-work0.6.03 of 5See more

saleor-apps trieb-work 0.6.0

3 of the 5 container images this version deploys carry CVE-2024-11831.

Container imageDigestPackageFixed in
ghcr.io/trieb-work/saleor-apps/saleor-app-products-feed:1.23.11d435b4ab372
serialize-javascript@6.0.1
6.0.2
ghcr.io/trieb-work/saleor-apps/saleor-app-search:1.24.328edefb6c92d
serialize-javascript@6.0.1
6.0.2
ghcr.io/trieb-work/saleor-apps/saleor-app-smtp:1.4.357a06bfba327
serialize-javascript@6.0.1
6.0.2

Open the chart page →

6,994
uoappuoapp1.1.01 of 1See more

uoapp uoapp 1.1.0

1 of the 1 container images this version deploys carry CVE-2024-11831.

Container imageDigestPackageFixed in
okaforuchena/uo-docker:V1.0.0004e81250f48
serialize-javascript@6.0.0
6.0.2

Open the chart page →

1,187
workadventureworkadventure1.1.01 of 9See more

workadventure workadventure 1.1.0

1 of the 9 container images this version deploys carry CVE-2024-11831.

Container imageDigestPackageFixed in
thecodingmachine/workadventure-map-storage:v1.17.75bdab56da2fa
serialize-javascript@6.0.1
6.0.2

Open the chart page →

16,083

Container images carrying it

85 by charts deploying them

A fixed version is listed for 1 of the 2 affected packages.

Container imageDigestPackageFixed inUsed by
moreillon/group-manager:latest3caa8f710ee0
serialize-javascript@6.0.0
6.0.2
1
mpopoola1/nodejsapp:latest061fc532de7d
serialize-javascript@6.0.0
6.0.2
1
netrisai/controller-web-service-backend:4.6.0-0086e865080e86c
serialize-javascript@6.0.0
6.0.2
1
nightscout/cgm-remote-monitor:15.0.2ad29ca7a4de6
serialize-javascript@6.0.1
6.0.2
1
nightscout/cgm-remote-monitor:15.0.3f604dc4c03ca
serialize-javascript@6.0.1
6.0.2
1
nottiey/mynodejswebapp:latest9c35a24c9eb3
serialize-javascript@6.0.0
6.0.2
1
okaforuchena/uo-docker:V1.0.0004e81250f48
serialize-javascript@6.0.0
6.0.2
1
ooghenekaro/amazon:latest03394ba1d6d8
serialize-javascript@6.0.1
6.0.2
1
ooghenekaro/hans-docker:v1.0.0d1f972aa844a
serialize-javascript@6.0.0
6.0.2
1
ooghenekaro/nodejswebapp:latestea5b71588a76
serialize-javascript@6.0.0
6.0.2
1
ooghenekaro/nodejswebappoct:lateste010f5fecbc7
serialize-javascript@6.0.0
6.0.2
1
openhab/openhab-cloud:a8138a329dd2bac8c4b
serialize-javascript@6.0.0
6.0.2
1
patdada/bella-docker:v1.0.075127147a624
serialize-javascript@6.0.0
6.0.2
1
pumejlab/nodejs-webapp:latestf563eabcb819
serialize-javascript@6.0.0
6.0.2
1
safeglobal/safe-client-gateway-nest:v1.51.012ccfd93fcaf
serialize-javascript@6.0.1
6.0.2
1
srini78/nodejswebappeks:latest5d1cbdc6833a
serialize-javascript@6.0.0
6.0.2
1
thecodingmachine/workadventure-map-storage:v1.17.75bdab56da2fa
serialize-javascript@6.0.1
6.0.2
1
tobirachel/node-project3:v17d9f37154994
serialize-javascript@6.0.0
6.0.2
1
tundeficky/nodejs-app:v1.0.03cf9a9ce54e8
serialize-javascript@6.0.0
6.0.2
1
visualregressiontracker/api:5.0.11941aeb8c8bf9
serialize-javascript@6.0.1
6.0.2
1
vlebediantsev/notes-admin-front:latest007c6670ff48
serialize-javascript@6.0.1
6.0.2
1
vlebediantsev/notes-project-front:latest945675fd2636
serialize-javascript@6.0.1
6.0.2
1
vlebediantsev/registration-ms-front-app-host:latest54f69d116c50
serialize-javascript@6.0.1
6.0.2
1
winfred008/amazon:910a68de5b398
serialize-javascript@6.0.0
6.0.2
1
yidadaa/chatgpt-next-web:latesteaaa469ddeeb
serialize-javascript@6.0.1
6.0.2
1
ghcr.io/data-fair/data-fair:3cc9498b64b5b
serialize-javascript@6.0.1
6.0.2
1
ghcr.io/data-fair/processings:15a9216989707
serialize-javascript@6.0.1
6.0.2
1
ghcr.io/huscker/townsquare-backend:2.15.2e106681e7673
serialize-javascript@6.0.1
6.0.2
1
ghcr.io/trieb-work/saleor-apps/saleor-app-products-feed:1.23.11d435b4ab372
serialize-javascript@6.0.1
6.0.2
1
ghcr.io/trieb-work/saleor-apps/saleor-app-search:1.24.328edefb6c92d
serialize-javascript@6.0.1
6.0.2
1
ghcr.io/trieb-work/saleor-apps/saleor-app-smtp:1.4.357a06bfba327
serialize-javascript@6.0.1
6.0.2
1
ghcr.io/woodenmaiden/relfinderreformedapi:1.1.20708d30433d4
serialize-javascript@6.0.1
6.0.2
1
public.ecr.aws/jtekt-corporation/image-storage-service:v1.16.17b1493760c716
serialize-javascript@6.0.0
6.0.2
1
public.ecr.aws/jtekt-corporation/shinsei-manager:v2.8.15cd62142d6ed
serialize-javascript@6.0.0
6.0.2
1
public.ecr.aws/jtekt-corporation/time-series-storage-service:v1.5.1046ef5c9ed50
serialize-javascript@6.0.0
6.0.2
1

syft 1.42.1 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.