StackRadar

CVE-2024-11831

Medium

Advisory

Published 10 Feb 2025In the index since 6 Sept 2026
Severity
Medium
worst across findings
CVSS
5.4
base score, highest
EPSS
0.011
64th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
82
of 17,781 indexed, latest versions
Container images
85
deployed by those charts
Fix available
1 of 2
affected packages

Cross-site Scripting (XSS) in serialize-javascript

Carried by container images the latest versions of 82 of 17,781 indexed charts deploy, on 85 images.

Affected packageAffected versionsFixed inImages
serialize-javascriptnpm6.0.0, 6.0.16.0.285
node-serialize-javascriptdeb6.0.1-1no fix listed1
OSV records
GHSA-76p7-773f-r4q5UBUNTU-CVE-2024-11831

Charts affected

82 by stars
ChartLatestAffected imagesRadar Score
user-manager-neo4jmoreillonVerified publisher0.9.72 of 6See more

user-manager-neo4j moreillon 0.9.7

2 of the 6 container images this version deploys carry CVE-2024-11831.

Container imageDigestPackageFixed in
moreillon/group-manager:v4.9.0d5a0ec8394c0
serialize-javascript@6.0.0
6.0.2
moreillon/user-manager:v5.0.2e1c9bfab5c16
serialize-javascript@6.0.0
6.0.2

Open the chart page →

30,363
nightscoutmt1905021.1.01 of 3See more

nightscout mt190502 1.1.0

1 of the 3 container images this version deploys carry CVE-2024-11831.

Container imageDigestPackageFixed in
nightscout/cgm-remote-monitor:15.0.3f604dc4c03ca
serialize-javascript@6.0.1
6.0.2

Open the chart page →

6,608
myawesomeappmyawesomapp-mitchxxx0.1.11 of 1See more

myawesomeapp myawesomapp-mitchxxx 0.1.1

1 of the 1 container images this version deploys carry CVE-2024-11831.

Container imageDigestPackageFixed in
mitchxxx/amazon:214e72480ec63a
serialize-javascript@6.0.1
6.0.2

Open the chart page →

2,116
myawesomeappmyawesomeapp1.1.01 of 1See more

myawesomeapp myawesomeapp 1.1.0

1 of the 1 container images this version deploys carry CVE-2024-11831.

Container imageDigestPackageFixed in
ooghenekaro/nodejswebapp:latestea5b71588a76
serialize-javascript@6.0.0
6.0.2

Open the chart page →

1,267
myawesomeapp14myawesomeapp140.1.11 of 1See more

myawesomeapp14 myawesomeapp14 0.1.1

1 of the 1 container images this version deploys carry CVE-2024-11831.

Container imageDigestPackageFixed in
ccjacobs14/amazon:59a9b14a6f09e
serialize-javascript@6.0.1
6.0.2

Open the chart page →

2,116
myawesomeappmyawesomeapp20.1.01 of 1See more

myawesomeapp myawesomeapp2 0.1.0

1 of the 1 container images this version deploys carry CVE-2024-11831.

Container imageDigestPackageFixed in
mpopoola1/nodejsapp:latest061fc532de7d
serialize-javascript@6.0.0
6.0.2

Open the chart page →

1,118
myawesomeapp-feb24myawesomeapp-feb240.1.11 of 1See more

myawesomeapp-feb24 myawesomeapp-feb24 0.1.1

1 of the 1 container images this version deploys carry CVE-2024-11831.

Container imageDigestPackageFixed in
josepht05/nodejs-feb24:latest36cb0c618c94
serialize-javascript@6.0.0
6.0.2

Open the chart page →

1,070
myawesomeapp-janmyawesomeapp-jan0.1.11 of 1See more

myawesomeapp-jan myawesomeapp-jan 0.1.1

1 of the 1 container images this version deploys carry CVE-2024-11831.

Container imageDigestPackageFixed in
ooghenekaro/amazon:latest03394ba1d6d8
serialize-javascript@6.0.1
6.0.2

Open the chart page →

2,144
myawesomeapp-marmyawesomeapp-mar0.1.11 of 1See more

myawesomeapp-mar myawesomeapp-mar 0.1.1

1 of the 1 container images this version deploys carry CVE-2024-11831.

Container imageDigestPackageFixed in
winfred008/amazon:910a68de5b398
serialize-javascript@6.0.0
6.0.2

Open the chart page →

2,116
myawesomeappoctmyawesomeappoct0.1.11 of 1See more

myawesomeappoct myawesomeappoct 0.1.1

1 of the 1 container images this version deploys carry CVE-2024-11831.

Container imageDigestPackageFixed in
ooghenekaro/nodejswebappoct:lateste010f5fecbc7
serialize-javascript@6.0.0
6.0.2

Open the chart page →

1,164
myawesomeappoctmyawesomeappoct20230.1.11 of 1See more

myawesomeappoct myawesomeappoct2023 0.1.1

1 of the 1 container images this version deploys carry CVE-2024-11831.

Container imageDigestPackageFixed in
hamid2021/nodejs-dockercli:latest429d99890c3c
serialize-javascript@6.0.0
6.0.2

Open the chart page →

1,118
mydannyappmydannyapp1.1.01 of 1See more

mydannyapp mydannyapp 1.1.0

1 of the 1 container images this version deploys carry CVE-2024-11831.

Container imageDigestPackageFixed in
danny1dockerhub/nodejswebapp:lateste434683fcc89
serialize-javascript@6.0.0
6.0.2

Open the chart page →

1,267
mygreatappmygreatapp0.1.01 of 1See more

mygreatapp mygreatapp 0.1.0

1 of the 1 container images this version deploys carry CVE-2024-11831.

Container imageDigestPackageFixed in
ktitilayo2/nodejswebapp:latest8bac28058688
serialize-javascript@6.0.0
6.0.2

Open the chart page →

1,164
myhelmappmyhelm-app1.1.01 of 1See more

myhelmapp myhelm-app 1.1.0

1 of the 1 container images this version deploys carry CVE-2024-11831.

Container imageDigestPackageFixed in
patdada/bella-docker:v1.0.075127147a624
serialize-javascript@6.0.0
6.0.2

Open the chart page →

1,625
myhelmappmyhelmapp0.1.11 of 1See more

myhelmapp myhelmapp 0.1.1

1 of the 1 container images this version deploys carry CVE-2024-11831.

Container imageDigestPackageFixed in
tobirachel/node-project3:v17d9f37154994
serialize-javascript@6.0.0
6.0.2

Open the chart page →

3,359
myhelmappmyhelmapp11.1.01 of 1See more

myhelmapp myhelmapp1 1.1.0

1 of the 1 container images this version deploys carry CVE-2024-11831.

Container imageDigestPackageFixed in
josepht05/titajo-docker:v1.0.0d94024965d78
serialize-javascript@6.0.0
6.0.2

Open the chart page →

1,164
myhelmappmyhelmpapp1.1.01 of 1See more

myhelmapp myhelmpapp 1.1.0

1 of the 1 container images this version deploys carry CVE-2024-11831.

Container imageDigestPackageFixed in
ooghenekaro/hans-docker:v1.0.0d1f972aa844a
serialize-javascript@6.0.0
6.0.2

Open the chart page →

1,235
myweatherhelmmyweather1.3.111 of 7See more

myweatherhelm myweather 1.3.11

1 of the 7 container images this version deploys carry CVE-2024-11831.

Container imageDigestPackageFixed in
hecrom/myweatherprocessingreactclient:1.3.115454b54d5b28
serialize-javascript@6.0.1
6.0.2

Open the chart page →

17,929
nodeapp-chartnodeapp-chart0.1.01 of 1See more

nodeapp-chart nodeapp-chart 0.1.0

1 of the 1 container images this version deploys carry CVE-2024-11831.

Container imageDigestPackageFixed in
laly9999/node-app-dockerized:latest75ae77a20c6c
serialize-javascript@6.0.0
6.0.2

Open the chart page →

1,118
notes-admin-front-helm-chartnotesprojectchart0.1.01 of 1See more

notes-admin-front-helm-chart notesprojectchart 0.1.0

1 of the 1 container images this version deploys carry CVE-2024-11831.

Container imageDigestPackageFixed in
vlebediantsev/notes-admin-front:latest007c6670ff48
serialize-javascript@6.0.1
6.0.2

Open the chart page →

15,132
notes-project-fromt-helm-chartnotesprojectchart0.1.01 of 1See more

notes-project-fromt-helm-chart notesprojectchart 0.1.0

1 of the 1 container images this version deploys carry CVE-2024-11831.

Container imageDigestPackageFixed in
vlebediantsev/notes-project-front:latest945675fd2636
serialize-javascript@6.0.1
6.0.2

Open the chart page →

15,206
registration-ms-front-helm-chartnotesprojectchart0.1.01 of 1See more

registration-ms-front-helm-chart notesprojectchart 0.1.0

1 of the 1 container images this version deploys carry CVE-2024-11831.

Container imageDigestPackageFixed in
vlebediantsev/registration-ms-front-app-host:latest54f69d116c50
serialize-javascript@6.0.1
6.0.2

Open the chart page →

15,187
nottieawesomeappnottieawesomeapp0.1.01 of 1See more

nottieawesomeapp nottieawesomeapp 0.1.0

1 of the 1 container images this version deploys carry CVE-2024-11831.

Container imageDigestPackageFixed in
nottiey/mynodejswebapp:latest9c35a24c9eb3
serialize-javascript@6.0.0
6.0.2

Open the chart page →

1,164
relfinder-reformedrelfinderreformed2.0.01 of 2See more

relfinder-reformed relfinderreformed 2.0.0

1 of the 2 container images this version deploys carry CVE-2024-11831.

Container imageDigestPackageFixed in
ghcr.io/woodenmaiden/relfinderreformedapi:1.1.20708d30433d4
serialize-javascript@6.0.1
6.0.2

Open the chart page →

6,282
joplinrubxkubeVerified publisher1.3.11 of 2See more

joplin rubxkube 1.3.1

1 of the 2 container images this version deploys carry CVE-2024-11831.

Container imageDigestPackageFixed in
joplin/server:3.0-beta52af57880c0e
serialize-javascript@6.0.1
6.0.2

Open the chart page →

7,413
safe-stacksafe-global0.1.02 of 9See more

safe-stack safe-global 0.1.0

2 of the 9 container images this version deploys carry CVE-2024-11831.

Container imageDigestPackageFixed in
gjeanmart/safe-ganache-node:latest926264c8f2d1
serialize-javascript@6.0.0
6.0.2
safeglobal/safe-client-gateway-nest:v1.51.012ccfd93fcaf
serialize-javascript@6.0.1
6.0.2

Open the chart page →

19,560
safe-transaction-servicesafe-global0.1.01 of 6See more

safe-transaction-service safe-global 0.1.0

1 of the 6 container images this version deploys carry CVE-2024-11831.

Container imageDigestPackageFixed in
gjeanmart/safe-ganache-node:latest926264c8f2d1
serialize-javascript@6.0.0
6.0.2

Open the chart page →

16,620
semaphoreschoenwald0.1.31 of 1See more

semaphore schoenwald 0.1.3

1 of the 1 container images this version deploys carry CVE-2024-11831.

Container imageDigestPackageFixed in
0hlov3/semaphore:v1.0.050f874ec096b
serialize-javascript@6.0.0
6.0.2

Open the chart page →

1,796
sneakerssneakers1.0.01 of 4See more

sneakers sneakers 1.0.0

1 of the 4 container images this version deploys carry CVE-2024-11831.

Container imageDigestPackageFixed in
helga09/shoes_ukr:v1.1.17999bc8b77c0
serialize-javascript@6.0.1
6.0.2

Open the chart page →

7,574
saleor-appstrieb-work0.6.03 of 5See more

saleor-apps trieb-work 0.6.0

3 of the 5 container images this version deploys carry CVE-2024-11831.

Container imageDigestPackageFixed in
ghcr.io/trieb-work/saleor-apps/saleor-app-products-feed:1.23.11d435b4ab372
serialize-javascript@6.0.1
6.0.2
ghcr.io/trieb-work/saleor-apps/saleor-app-search:1.24.328edefb6c92d
serialize-javascript@6.0.1
6.0.2
ghcr.io/trieb-work/saleor-apps/saleor-app-smtp:1.4.357a06bfba327
serialize-javascript@6.0.1
6.0.2

Open the chart page →

6,994
uoappuoapp1.1.01 of 1See more

uoapp uoapp 1.1.0

1 of the 1 container images this version deploys carry CVE-2024-11831.

Container imageDigestPackageFixed in
okaforuchena/uo-docker:V1.0.0004e81250f48
serialize-javascript@6.0.0
6.0.2

Open the chart page →

1,187
workadventureworkadventure1.1.01 of 9See more

workadventure workadventure 1.1.0

1 of the 9 container images this version deploys carry CVE-2024-11831.

Container imageDigestPackageFixed in
thecodingmachine/workadventure-map-storage:v1.17.75bdab56da2fa
serialize-javascript@6.0.1
6.0.2

Open the chart page →

16,083

Container images carrying it

85 by charts deploying them

A fixed version is listed for 1 of the 2 affected packages.

Container imageDigestPackageFixed inUsed by
rcdelacruz/my-strapi-app:js-amd6438007f358355
serialize-javascript@6.0.1
6.0.2
3
ethersphere/bee-localchain:latest0558799ca992
serialize-javascript@6.0.0
6.0.2
2
gjeanmart/safe-ganache-node:latest926264c8f2d1
serialize-javascript@6.0.0
6.0.2
2
governify/assets-manager:v1.4.12987672448c7
serialize-javascript@6.0.0
6.0.2
2
moreillon/api-proxy:a3e8b41e9e578c9653b6
serialize-javascript@6.0.0
6.0.2
2
moreillon/group-manager:v4.9.0d5a0ec8394c0
serialize-javascript@6.0.0
6.0.2
2
moreillon/user-manager:v5.0.2e1c9bfab5c16
serialize-javascript@6.0.0
6.0.2
2
tzahi12345/youtubedl-material:4.3.2:latest2f943d584711
serialize-javascript@6.0.0
6.0.2
2
0hlov3/semaphore:v1.0.050f874ec096b
serialize-javascript@6.0.0
6.0.2
1
apimap/developer:v1.3.1406d3858e20c
serialize-javascript@6.0.0
6.0.2
1
apimap/portal:v2.4.0041a4790c65c
serialize-javascript@6.0.0
6.0.2
1
assistiot/open_api_frontend:1.0.1f11d82defc70
serialize-javascript@6.0.1
6.0.2
1
baserow/baserow:1.30.1df0c42eb67e8
serialize-javascript@6.0.1
6.0.2
1
belirta/beli-docker:v1.0.0f65ad0e23b4d
serialize-javascript@6.0.0
6.0.2
1
bicarus/mx-api-service:1.0.2-hf1dab88659ae3b
serialize-javascript@6.0.0
6.0.2
1
bnwokoye/nodejswebapp:latest74de7dc7ebfb
serialize-javascript@6.0.0
6.0.2
1
ccjacobs14/amazon:59a9b14a6f09e
serialize-javascript@6.0.1
6.0.2
1
coldatom/containers-security-api:latesteae9e82da080
serialize-javascript@6.0.1
6.0.2
1
coldatom/containers-security-front:latest7c2fbbb41bcf
serialize-javascript@6.0.1
6.0.2
1
countly/api:25.05.4f4cc7447c4f5
serialize-javascript@6.0.1
6.0.2
1
countly/countly-server:25.05.4e3c238248f99
serialize-javascript@6.0.0
6.0.2
1
countly/frontend:25.05.42acbc11499b6
serialize-javascript@6.0.1
6.0.2
1
dacinfomotion/h2p:latest68fa393b472c
serialize-javascript@6.0.0
6.0.2
1
danny1dockerhub/nodejswebapp:lateste434683fcc89
serialize-javascript@6.0.0
6.0.2
1
ethereumoptimism/data-transport-layer:0.5.56e07968a0e686
serialize-javascript@6.0.0
6.0.2
1
flanksource/canary-checker-ui:v1.4.281764c84e550db
serialize-javascript@6.0.1
6.0.2
1
hamid2021/nodejs-dockercli:latest429d99890c3c
serialize-javascript@6.0.0
6.0.2
1
hecrom/myweatherprocessingreactclient:1.3.115454b54d5b28
serialize-javascript@6.0.1
6.0.2
1
helga09/shoes_ukr:v1.1.17999bc8b77c0
serialize-javascript@6.0.1
6.0.2
1
heywood8/redisinsight:2.28.00bc9ab313d37
serialize-javascript@6.0.1
6.0.2
1
joplin/server:3.0-beta52af57880c0e
serialize-javascript@6.0.1
6.0.2
1
joplin/server:2.14.2-betab87564ef34e9
serialize-javascript@6.0.1
6.0.2
1
josepht05/nodejs-feb24:latest36cb0c618c94
serialize-javascript@6.0.0
6.0.2
1
josepht05/titajo-docker:v1.0.0d94024965d78
serialize-javascript@6.0.0
6.0.2
1
jupyterhub/jupyterhub:5.4.63974ba945e65
node-serialize-javascript@6.0.1-1
serialize-javascript@6.0.1
no fix listed
6.0.2
1
keyoxide/keyoxide:stable96f27a71269d
serialize-javascript@6.0.0
6.0.2
1
kobotoolbox/kpi:2.022.24dbcacc01bccd4
serialize-javascript@6.0.0
6.0.2
1
ktitilayo2/nodejswebapp:latest8bac28058688
serialize-javascript@6.0.0
6.0.2
1
kubevious/backend:1.2.22d9ba6eb46b6
serialize-javascript@6.0.0
6.0.2
1
kubevious/collector:1.2.1f58226f9d84e
serialize-javascript@6.0.0
6.0.2
1
kubevious/parser:1.2.299ae7a5168c2
serialize-javascript@6.0.0
6.0.2
1
kubevious/workload-operator:1.0.20b0f4c507eb6
serialize-javascript@6.0.0
6.0.2
1
kyleslugg/klusterview:latestba8c36dfdfbd
serialize-javascript@6.0.1
6.0.2
1
laly9999/node-app-dockerized:latest75ae77a20c6c
serialize-javascript@6.0.0
6.0.2
1
loftsh/jspolicy:0.2.225deb9bd2683
serialize-javascript@6.0.1
6.0.2
1
misskey/misskey:12.110.1e08b7c478093
serialize-javascript@6.0.0
6.0.2
1
mitchxxx/amazon:214e72480ec63a
serialize-javascript@6.0.1
6.0.2
1
moreillon/api-proxy:2373c1953739ef6956b5
serialize-javascript@6.0.0
6.0.2
1
moreillon/api-proxy:latestd7d4a5463525
serialize-javascript@6.0.0
6.0.2
1
moreillon/face-recognition-fastapi-front:latestc1072f4ab6aa
serialize-javascript@6.0.0
6.0.2
1

syft 1.42.1 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.