StackRadar

CVE-2024-27088

Low

Advisory

Published 26 Feb 2024In the index since 5 Sept 2026
Severity
Low
worst across findings
CVSS
2.0
base score, highest
EPSS
0.005
44th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
74
of 17,781 indexed, latest versions
Container images
73
deployed by those charts
Fix available
1 of 1
affected package

es5-ext vulnerable to Regular Expression Denial of Service in `function#copy` and `function#toStringTokens`

Carried by container images the latest versions of 74 of 17,781 indexed charts deploy, on 73 images.

Affected packageAffected versionsFixed inImages
es5-extnpm0.10.11, 0.10.12, 0.10.31, 0.10.45+9 more0.10.6373
OSV records
GHSA-4gmj-3p3h-gm8h

Charts affected

74 by stars
ChartLatestAffected imagesRadar Score
mongo-expresscowboysysopVerified publisher7.0.01 of 1See more

mongo-express cowboysysop 7.0.0

1 of the 1 container images this version deploys carry CVE-2024-27088.

Container imageDigestPackageFixed in
library/mongo-express:1.0.21b23d7976f02
es5-ext@0.10.62
0.10.63

Open the chart page →

1,210
outlineoutline0.0.91 of 4See more

outline outline 0.0.9

1 of the 4 container images this version deploys carry CVE-2024-27088.

Container imageDigestPackageFixed in
outlinewiki/outline:0.69.1d060dcd8f9aa
es5-ext@0.10.61
0.10.63

Open the chart page →

4,431
microcksmicrocksOfficialVerified publisher0.8.0-helm-3.kube-1.171 of 5See more

microcks microcks 0.8.0-helm-3.kube-1.17

1 of the 5 container images this version deploys carry CVE-2024-27088.

Container imageDigestPackageFixed in
microcks/microcks-postman-runtime:latestcb72e46a1b3c
es5-ext@0.10.12
0.10.63

Open the chart page →

10,732
misskeyalytiVerified publisher1.0.01 of 1See more

misskey alyti 1.0.0

1 of the 1 container images this version deploys carry CVE-2024-27088.

Container imageDigestPackageFixed in
misskey/misskey:12.110.1e08b7c478093
es5-ext@0.10.53
0.10.63

Open the chart page →

5,251
open5gsopen5gsVerified publisher2.3.41 of 5See more

open5gs open5gs 2.3.4

1 of the 5 container images this version deploys carry CVE-2024-27088.

Container imageDigestPackageFixed in
gradiant/open5gs-webui:2.7.5fbd10c017541
es5-ext@0.10.45
0.10.63

Open the chart page →

9,261
hubotdecayofmind1.0.21 of 3See more

hubot decayofmind 1.0.2

1 of the 3 container images this version deploys carry CVE-2024-27088.

Container imageDigestPackageFixed in
decayofmind/hubot:3.3.21e18e92fe694
es5-ext@0.10.50
0.10.63

Open the chart page →

2,513
predatorzooz1.7.01 of 1See more

predator zooz 1.7.0

1 of the 1 container images this version deploys carry CVE-2024-27088.

Container imageDigestPackageFixed in
zooz/predator:1.6f491d1f7a865
es5-ext@0.10.53
0.10.63

Open the chart page →

2,851
soarv113assist-iot-cybersecurity-monitoring-soar0.1.31 of 5See more

soarv113 assist-iot-cybersecurity-monitoring-soar 0.1.3

1 of the 5 container images this version deploys carry CVE-2024-27088.

Container imageDigestPackageFixed in
assistiot/cybersecurity-monitoring_ir-kbn:latest0570b27bb7c2
es5-ext@0.10.46
0.10.63

Open the chart page →

17,896
siemassist-iot-cybersecurity-monitroting-siem0.1.01 of 3See more

siem assist-iot-cybersecurity-monitroting-siem 0.1.0

1 of the 3 container images this version deploys carry CVE-2024-27088.

Container imageDigestPackageFixed in
assistiot/cybersecurity-monitoring_id-kbn:latest2297b4350211
es5-ext@0.10.53
0.10.63

Open the chart page →

10,730
data-fairdata354-helmVerified publisher1.1.22 of 12See more

data-fair data354-helm 1.1.2

2 of the 12 container images this version deploys carry CVE-2024-27088.

Container imageDigestPackageFixed in
ghcr.io/data-fair/data-fair:3cc9498b64b5b
es5-ext@0.10.62
0.10.63
ghcr.io/data-fair/processings:15a9216989707
es5-ext@0.10.62
0.10.63

Open the chart page →

38,346
mastodondefault-ghVerified publisher0.3.11 of 3See more

mastodon default-gh 0.3.1

1 of the 3 container images this version deploys carry CVE-2024-27088.

Container imageDigestPackageFixed in
ghcr.io/mastodon/mastodon:v4.1.26b18e6d0eda4
es5-ext@0.10.53
0.10.63

Open the chart page →

5,056
joplin-serverdjjudas21Verified publisher5.5.81 of 1See more

joplin-server djjudas21 5.5.8

1 of the 1 container images this version deploys carry CVE-2024-27088.

Container imageDigestPackageFixed in
joplin/server:2.14.2-betab87564ef34e9
es5-ext@0.10.53
0.10.63

Open the chart page →

3,925
zigbee2mqttgeek-cookbookVerified publisher9.4.21 of 1See more

zigbee2mqtt geek-cookbook 9.4.2

1 of the 1 container images this version deploys carry CVE-2024-27088.

Container imageDigestPackageFixed in
koenkk/zigbee2mqtt:1.19.15f9129b1ffbc
es5-ext@0.10.53
0.10.63

Open the chart page →

2,173
elasticinseefrlab2.2.01 of 2See more

elastic inseefrlab 2.2.0

1 of the 2 container images this version deploys carry CVE-2024-27088.

Container imageDigestPackageFixed in
library/kibana:7.17.3e2e2031c15be
es5-ext@0.10.46
0.10.63

Open the chart page →

17,284
open5gs-webuiopen5gs-webuiVerified publisher2.3.11 of 2See more

open5gs-webui open5gs-webui 2.3.1

1 of the 2 container images this version deploys carry CVE-2024-27088.

Container imageDigestPackageFixed in
gradiant/open5gs-webui:2.7.5fbd10c017541
es5-ext@0.10.45
0.10.63

Open the chart page →

5,300
portraitportraitVerified publisher0.2.131 of 8See more

portrait portrait 0.2.13

1 of the 8 container images this version deploys carry CVE-2024-27088.

Container imageDigestPackageFixed in
treskon/portrait-ui:DEV-lateste7970783bc8d
es5-ext@0.10.60
0.10.63

Open the chart page →

31,844
kibanaromanow-helm-chartsVerified publisher1.7.11 of 1See more

kibana romanow-helm-charts 1.7.1

1 of the 1 container images this version deploys carry CVE-2024-27088.

Container imageDigestPackageFixed in
library/kibana:7.17.8c5781ba340ef
es5-ext@0.10.46
0.10.63

Open the chart page →

6,879
splice-helmsplice-helm0.1.71 of 13See more

splice-helm splice-helm 0.1.7

1 of the 13 container images this version deploys carry CVE-2024-27088.

Container imageDigestPackageFixed in
jupyterhub/configurable-http-proxy:3.0.0c36cf3cc1c99
es5-ext@0.10.12
0.10.63

Open the chart page →

1,477
open5gsadaptivenetlabVerified publisher1.0.31 of 3See more

open5gs adaptivenetlab 1.0.3

1 of the 3 container images this version deploys carry CVE-2024-27088.

Container imageDigestPackageFixed in
registry.gitlab.com/infinitydon/registry/open5gs-webui:v2.2.2fda21b0a0344
es5-ext@0.10.45
0.10.63

Open the chart page →

25,443
mx-apibicarus-labs0.1.01 of 4See more

mx-api bicarus-labs 0.1.0

1 of the 4 container images this version deploys carry CVE-2024-27088.

Container imageDigestPackageFixed in
bicarus/mx-api-service:1.0.2-hf1dab88659ae3b
es5-ext@0.10.62
0.10.63

Open the chart page →

4,455
registry-uibryanalves0.2.01 of 1See more

registry-ui bryanalves 0.2.0

1 of the 1 container images this version deploys carry CVE-2024-27088.

Container imageDigestPackageFixed in
konradkleine/docker-registry-frontend:v2181aad54ee64
es5-ext@0.10.31
0.10.63

Open the chart page →

4,069
hubotcloudnativeapp0.0.11 of 1See more

hubot cloudnativeapp 0.0.1

1 of the 1 container images this version deploys carry CVE-2024-27088.

Container imageDigestPackageFixed in
minddocdev/hubot:0.1.96c60b11a4fa7
es5-ext@0.10.46
0.10.63

Open the chart page →

2,580
kube-slackcloudnativeapp1.0.01 of 1See more

kube-slack cloudnativeapp 1.0.0

1 of the 1 container images this version deploys carry CVE-2024-27088.

Container imageDigestPackageFixed in
willwill/kube-slack:v4.1.1d443017aae98
es5-ext@0.10.47
0.10.63

Open the chart page →

1,937
node-redcloudnativeapp1.2.21 of 1See more

node-red cloudnativeapp 1.2.2

1 of the 1 container images this version deploys carry CVE-2024-27088.

Container imageDigestPackageFixed in
nodered/node-red-docker:0.19.6-v8070643219ea2
es5-ext@0.10.48
0.10.63

Open the chart page →

4,790
developer-dashboardcloud-native-toolkit1.4.11 of 1See more

developer-dashboard cloud-native-toolkit 1.4.1

1 of the 1 container images this version deploys carry CVE-2024-27088.

Container imageDigestPackageFixed in
quay.io/ibmgaragecloud/developer-dashboard:v1.4.47a4b9fedc724
es5-ext@0.10.53
0.10.63

Open the chart page →

25,456
conduction-uiconduction-ui0.1.01 of 6See more

conduction-ui conduction-ui 0.1.0

1 of the 6 container images this version deploys carry CVE-2024-27088.

Container imageDigestPackageFixed in
conduction/conduction-ui-app:devd591f5e6f2a9
es5-ext@0.10.53
0.10.63

Open the chart page →

12,907
wazuhcsic-charts0.1.01 of 4See more

wazuh csic-charts 0.1.0

1 of the 4 container images this version deploys carry CVE-2024-27088.

Container imageDigestPackageFixed in
wazuh/wazuh-dashboard:4.4.11787550d2358
es5-ext@0.10.62
0.10.63

Open the chart page →

13,852
frontend-charteks-3-tier-app-chart0.1.01 of 1See more

frontend-chart eks-3-tier-app-chart 0.1.0

1 of the 1 container images this version deploys carry CVE-2024-27088.

Container imageDigestPackageFixed in
arfath29/3-tier-app-frontend:latest384b3e377f47
es5-ext@0.10.53
0.10.63

Open the chart page →

3,744
testnet-faucetethereum-helm-chartsVerified publisher0.1.31 of 1See more

testnet-faucet ethereum-helm-charts 0.1.3

1 of the 1 container images this version deploys carry CVE-2024-27088.

Container imageDigestPackageFixed in
parithoshj/testnet-faucet:9859e0dcdca426fea6d
es5-ext@0.10.47
0.10.63

Open the chart page →

3,005
bzz-token-serviceethersphereVerified publisher0.2.01 of 1See more

bzz-token-service ethersphere 0.2.0

1 of the 1 container images this version deploys carry CVE-2024-27088.

Container imageDigestPackageFixed in
ethersphere/bzz-token-service:latest7624f11a72ad
es5-ext@0.10.53
0.10.63

Open the chart page →

3,260
onboarding-faucetethersphereVerified publisher0.2.01 of 1See more

onboarding-faucet ethersphere 0.2.0

1 of the 1 container images this version deploys carry CVE-2024-27088.

Container imageDigestPackageFixed in
ethersphere/onboarding-faucet:0.3.0513154aab230
es5-ext@0.10.59
0.10.63

Open the chart page →

3,320
logentriesfairwinds-incubator0.2.21 of 1See more

logentries fairwinds-incubator 0.2.2

1 of the 1 container images this version deploys carry CVE-2024-27088.

Container imageDigestPackageFixed in
logentries/docker-logentries:0.2.1f1f90a236998
es5-ext@0.10.12
0.10.63

Open the chart page →

1,597
iotagent-ulfiware0.1.21 of 1See more

iotagent-ul fiware 0.1.2

1 of the 1 container images this version deploys carry CVE-2024-27088.

Container imageDigestPackageFixed in
fiware/iotagent-ul:1.14.0fe11f55a926d
es5-ext@0.10.53
0.10.63

Open the chart page →

3,337
keyrockfiware0.8.71 of 1See more

keyrock fiware 0.8.7

1 of the 1 container images this version deploys carry CVE-2024-27088.

Container imageDigestPackageFixed in
fiware/idm:8.3.3a1b6ed4ae84f
es5-ext@0.10.62
0.10.63

Open the chart page →

3,159
wekan-oldgabisonfire0.1.21 of 1See more

wekan-old gabisonfire 0.1.2

1 of the 1 container images this version deploys carry CVE-2024-27088.

Container imageDigestPackageFixed in
wekanteam/wekan:v4.2268a51f0327df
es5-ext@0.10.46
0.10.63

Open the chart page →

5,941
galoy-paygaloymoney0.11.481 of 2See more

galoy-pay galoymoney 0.11.48

1 of the 2 container images this version deploys carry CVE-2024-27088.

Container imageDigestPackageFixed in
krtk6160/galoy-nostrdigest-pinnedcc82a694f818
es5-ext@0.10.62
0.10.63

Open the chart page →

2,528
rtlgaloymoney0.4.31 of 2See more

rtl galoymoney 0.4.3

1 of the 2 container images this version deploys carry CVE-2024-27088.

Container imageDigestPackageFixed in
shahanafarooqui/rtl:0.13.3e2195188a451
es5-ext@0.10.62
0.10.63

Open the chart page →

2,090
galoy-paygaloymoney20.11.481 of 2See more

galoy-pay galoymoney2 0.11.48

1 of the 2 container images this version deploys carry CVE-2024-27088.

Container imageDigestPackageFixed in
krtk6160/galoy-nostrdigest-pinnedcc82a694f818
es5-ext@0.10.62
0.10.63

Open the chart page →

2,528
rtlgaloymoney20.4.31 of 2See more

rtl galoymoney2 0.4.3

1 of the 2 container images this version deploys carry CVE-2024-27088.

Container imageDigestPackageFixed in
shahanafarooqui/rtl:0.13.3e2195188a451
es5-ext@0.10.62
0.10.63

Open the chart page →

2,090
geonetwork-k8sgeonetwork-k8sVerified publisher4.2.81 of 5See more

geonetwork-k8s geonetwork-k8s 4.2.8

1 of the 5 container images this version deploys carry CVE-2024-27088.

Container imageDigestPackageFixed in
library/kibana:7.17.150172f1c538e7
es5-ext@0.10.46
0.10.63

Open the chart page →

34,754
zigbee2mqtthelm-chart-roeiVerified publisher1.19.01 of 1See more

zigbee2mqtt helm-chart-roei 1.19.0

1 of the 1 container images this version deploys carry CVE-2024-27088.

Container imageDigestPackageFixed in
koenkk/zigbee2mqtt:1.19.15f9129b1ffbc
es5-ext@0.10.53
0.10.63

Open the chart page →

2,173
iofoghelm-chartsVerified publisher0.1.11 of 3See more

iofog helm-charts 0.1.1

1 of the 3 container images this version deploys carry CVE-2024-27088.

Container imageDigestPackageFixed in
quay.io/ctrontesting/iofog-controller:latest10df27bc5560
es5-ext@0.10.53
0.10.63

Open the chart page →

24,161
ibm-app-navigatoribm-charts1.0.11 of 5See more

ibm-app-navigator ibm-charts 1.0.1

1 of the 5 container images this version deploys carry CVE-2024-27088.

Container imageDigestPackageFixed in
ibmcom/app-nav-ui:1.0.1e2a86997b36b
es5-ext@0.10.50
0.10.63

Open the chart page →

32,915
dtlinfradao0.0.11 of 1See more

dtl infradao 0.0.1

1 of the 1 container images this version deploys carry CVE-2024-27088.

Container imageDigestPackageFixed in
ethereumoptimism/data-transport-layer:0.5.56e07968a0e686
es5-ext@0.10.53
0.10.63

Open the chart page →

4,944
interbtc-hydrainterlay0.1.152 of 4See more

interbtc-hydra interlay 0.1.15

2 of the 4 container images this version deploys carry CVE-2024-27088.

Container imageDigestPackageFixed in
interlayhq/interbtc-hydra-processor:master-2c6e16e-1637088364423d567d47aa
es5-ext@0.10.53
0.10.63
subsquid/hydra-indexer:5.0.0-alpha.37a7f8b9bad7ee
es5-ext@0.10.61
0.10.63

Open the chart page →

6,831
interlay-firesquidinterlay0.1.112 of 4See more

interlay-firesquid interlay 0.1.11

2 of the 4 container images this version deploys carry CVE-2024-27088.

Container imageDigestPackageFixed in
interlayhq/interbtc-hydra-processor:0.10.55b2c414307b9
es5-ext@0.10.53
0.10.63
subsquid/substrate-ingest:firesquidfa549779e9b1
es5-ext@0.10.62
0.10.63

Open the chart page →

4,667
yapijoelee2012Verified publisher0.2.01 of 1See more

yapi joelee2012 0.2.0

1 of the 1 container images this version deploys carry CVE-2024-27088.

Container imageDigestPackageFixed in
jayfong/yapi:1.10.2163e5d621910
es5-ext@0.10.53
0.10.63

Open the chart page →

6,454
kyso-frontkyso1.0.01 of 1See more

kyso-front kyso 1.0.0

1 of the 1 container images this version deploys carry CVE-2024-27088.

Container imageDigestPackageFixed in
kyso/kyso-front:lateste52595c5c16f
es5-ext@0.10.62
0.10.63

Open the chart page →

2,685
lgtv2mqttleprechaun-charts0.1.11 of 1See more

lgtv2mqtt leprechaun-charts 0.1.1

1 of the 1 container images this version deploys carry CVE-2024-27088.

Container imageDigestPackageFixed in
ghcr.io/leprechaun/lgtv2mqtt:latestac2e11c41ffb
es5-ext@0.10.53
0.10.63

Open the chart page →

1,062
nubladolsst-sqre0.9.231 of 5See more

nublado lsst-sqre 0.9.23

1 of the 5 container images this version deploys carry CVE-2024-27088.

Container imageDigestPackageFixed in
lsstsqre/sciplat-hub:latest5e0ade6bed1c
es5-ext@0.10.12
0.10.63

Open the chart page →

5,786

Container images carrying it

73 by charts deploying them

A fixed version is listed for 1 of the 1 affected package.

Container imageDigestPackageFixed inUsed by
subsquid/hydra-indexer:5.0.0-alpha.37a7f8b9bad7ee
es5-ext@0.10.61
0.10.63
1
subsquid/substrate-ingest:firesquidfa549779e9b1
es5-ext@0.10.62
0.10.63
1
temporalio/web:1.14.033cfa863d8ce
es5-ext@0.10.53
0.10.63
1
treskon/portrait-ui:DEV-lateste7970783bc8d
es5-ext@0.10.60
0.10.63
1
ubercadence/web:v3.29.58564a5b44a6d
es5-ext@0.10.53
0.10.63
1
wazuh/wazuh-dashboard:4.4.11787550d2358
es5-ext@0.10.62
0.10.63
1
wekanteam/wekan:v4.2268a51f0327df
es5-ext@0.10.46
0.10.63
1
willwill/kube-slack:v4.1.1d443017aae98
es5-ext@0.10.47
0.10.63
1
zooz/predator:1.6f491d1f7a865
es5-ext@0.10.53
0.10.63
1
ghcr.io/data-fair/data-fair:3cc9498b64b5b
es5-ext@0.10.62
0.10.63
1
ghcr.io/data-fair/processings:15a9216989707
es5-ext@0.10.62
0.10.63
1
ghcr.io/leprechaun/lgtv2mqtt:latestac2e11c41ffb
es5-ext@0.10.53
0.10.63
1
ghcr.io/m9sweeper/dash:1.6.02e27cdff8344
es5-ext@0.10.62
0.10.63
1
ghcr.io/mastodon/mastodon:v4.1.26b18e6d0eda4
es5-ext@0.10.53
0.10.63
1
ghcr.io/mmontes11/iot-back:v3.11.096683c54ae65
es5-ext@0.10.62
0.10.63
1
ghcr.io/mmontes11/iot-worker:v3.11.0491bb243f555
es5-ext@0.10.62
0.10.63
1
ghcr.io/rivals-space/rivals-mastodon:1.6.143b23d55e4be
es5-ext@0.10.53
0.10.63
1
ghcr.io/vincenttaglia/indexer-tools:v3.4.45bae30456ddb
es5-ext@0.10.62
0.10.63
1
quay.io/ctrontesting/iofog-controller:latest10df27bc5560
es5-ext@0.10.53
0.10.63
1
quay.io/ibmgaragecloud/developer-dashboard:v1.4.47a4b9fedc724
es5-ext@0.10.53
0.10.63
1
quay.io/mongodb/farm-intro-frontend:0.199ccdfd543e1
es5-ext@0.10.53
0.10.63
1
quay.io/wekan/wekan:v5.65cb17600883a3
es5-ext@0.10.53
0.10.63
1
registry.gitlab.com/infinitydon/registry/open5gs-webui:v2.2.2fda21b0a0344
es5-ext@0.10.45
0.10.63
1

syft 1.42.1 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.