StackRadarChart IndexLive demo

CVE-2024-27088

Low

Advisory

Published 26 Feb 2024In the index since 5 Sept 2026

Severity: Low; worst across findings
CVSS: 2.0; base score, highest
EPSS: 0.005; 44th percentile
CISA KEV: Not listed; no confirmed exploitation
Charts affected: 74; of 17,781 indexed, latest versions
Container images: 73; deployed by those charts
Fix available: 1 of 1; affected package

es5-ext vulnerable to Regular Expression Denial of Service in `function#copy` and `function#toStringTokens`

Carried by container images the latest versions of 74 of 17,781 indexed charts deploy, on 73 images.

Affected package	Affected versions	Fixed in	Images
es5-extnpm	0.10.11, 0.10.12, 0.10.31, 0.10.45+9 more	0.10.63	73

OSV records: GHSA-4gmj-3p3h-gm8h

Charts affected

74 by stars

Chart

Latest

Affected images

Radar Score

m9sweeperm9sweeper

1 of 6 See more

m9sweeper m9sweeper 1.6.0

1 of the 6 container images this version deploys carry CVE-2024-27088.

Container image	Digest	Package	Fixed in
ghcr.io/m9sweeper/dash :1.6.0	2e27cdff8344	es5-ext@0.10.62	0.10.63

Open the chart page →

9,774

iotmmontes

2 of 7 See more

iot mmontes 0.3.2

2 of the 7 container images this version deploys carry CVE-2024-27088.

Container image	Digest	Package	Fixed in
ghcr.io/mmontes11/iot-back :v3.11.0	96683c54ae65	es5-ext@0.10.62	0.10.63
ghcr.io/mmontes11/iot-worker :v3.11.0	491bb243f555	es5-ext@0.10.62	0.10.63

Open the chart page →

10,608

mongodb-admin-interfacemongo-db-admin-interface

1 of 2 See more

mongodb-admin-interface mongo-db-admin-interface 0.1.0

1 of the 2 container images this version deploys carry CVE-2024-27088.

Container image	Digest	Package	Fixed in
library/mongo-express :latest	1b23d7976f02	es5-ext@0.10.62	0.10.63

Open the chart page →

5,179

sample-appmongodb-helm-charts

1 of 2 See more

sample-app mongodb-helm-charts 0.1.0

1 of the 2 container images this version deploys carry CVE-2024-27088.

Container image	Digest	Package	Fixed in
quay.io/mongodb/farm-intro-frontend :0.1	99ccdfd543e1	es5-ext@0.10.53	0.10.63

Open the chart page →

6,438

sentence-collectormozilla

1 of 2 See more

sentence-collector mozilla 0.1.2

1 of the 2 container images this version deploys carry CVE-2024-27088.

Container image	Digest	Package	Fixed in
mozilla/sentencecollector :2.0.9	1da6ff5c4895	es5-ext@0.10.53	0.10.63

Open the chart page →

6,684

1 of 23 See more

smile ncsa 1.1.0

1 of the 23 container images this version deploys carry CVE-2024-27088.

Container image	Digest	Package	Fixed in
socialmediamacroscope/smile_graphql :0.3.1	c5095e94bc65	es5-ext@0.10.62	0.10.63

Open the chart page →

109,294

indexer-toolsnodeify

1 of 1 See more

indexer-tools nodeify 2.1.1

1 of the 1 container images this version deploys carry CVE-2024-27088.

Container image	Digest	Package	Fixed in
ghcr.io/vincenttaglia/indexer-tools :v3.4.4	5bae30456ddb	es5-ext@0.10.62	0.10.63

Open the chart page →

2,919

example-dev-toolsnoygal

2 of 3 See more

example-dev-tools noygal 0.2.8

2 of the 3 container images this version deploys carry CVE-2024-27088.

Container image	Digest	Package	Fixed in
linuxserver/cloud9 :latest	45c5fe102ff3	es5-ext@0.10.11	0.10.63
linuxserver/codimd :latest	b801bbcf6386	es5-ext@0.10.53	0.10.63

Open the chart page →

27,465

codimdphntom

1 of 3 See more

codimd phntom 0.1.12

1 of the 3 container images this version deploys carry CVE-2024-27088.

Container image	Digest	Package	Fixed in
phntom/codimd :2.4.3	1b9aafbb62e6	es5-ext@0.10.50	0.10.63

Open the chart page →

6,524

powerdnspuckpuck

1 of 4 See more

powerdns puckpuck 2.0.0

1 of the 4 container images this version deploys carry CVE-2024-27088.

Container image	Digest	Package	Fixed in
pschiffe/pdns-admin :0.4.1	37ebba8c2b8f	es5-ext@0.10.62	0.10.63

Open the chart page →

4,616

mastodonrivals-space

1 of 3 See more

mastodon rivals-space 3.1.2

1 of the 3 container images this version deploys carry CVE-2024-27088.

Container image	Digest	Package	Fixed in
ghcr.io/rivals-space/rivals-mastodon :1.6.1	43b23d55e4be	es5-ext@0.10.53	0.10.63

Open the chart page →

6,026

joplinrubxkube

1 of 2 See more

joplin rubxkube 1.3.1

1 of the 2 container images this version deploys carry CVE-2024-27088.

Container image	Digest	Package	Fixed in
joplin/server :3.0-beta	52af57880c0e	es5-ext@0.10.53	0.10.63

Open the chart page →

7,413

samplesample

1 of 2 See more

sample sample 0.1.0

1 of the 2 container images this version deploys carry CVE-2024-27088.

Container image	Digest	Package	Fixed in
library/mongo-express :1.0.2-20-alpine3.19	1aae00775251	es5-ext@0.10.62	0.10.63

Open the chart page →

2,309

unifi-protectschichtel

1 of 1 See more

unifi-protect schichtel 0.10.1

1 of the 1 container images this version deploys carry CVE-2024-27088.

Container image	Digest	Package	Fixed in
markdegroot/unifi-protect-arm64 :latest	d8445f2a0de6	es5-ext@0.10.62	0.10.63

Open the chart page →

5,582

outlineschmitzis

1 of 4 See more

outline schmitzis 0.0.8

1 of the 4 container images this version deploys carry CVE-2024-27088.

Container image	Digest	Package	Fixed in
outlinewiki/outline :0.69.1	d060dcd8f9aa	es5-ext@0.10.61	0.10.63

Open the chart page →

4,431

wekanschmitzis

1 of 1 See more

wekan schmitzis 1.1.1

1 of the 1 container images this version deploys carry CVE-2024-27088.

Container image	Digest	Package	Fixed in
quay.io/wekan/wekan :v5.65	cb17600883a3	es5-ext@0.10.53	0.10.63

Open the chart page →

3,638

parkingsikalabs

1 of 1 See more

parking sikalabs 0.1.0

1 of the 1 container images this version deploys carry CVE-2024-27088.

Container image	Digest	Package	Fixed in
ondrejsika/parking :latest	b1fd497416c8	es5-ext@0.10.53	0.10.63

Open the chart page →

3,696

speedtest-trackersoblivionscall

1 of 1 See more

speedtest-tracker soblivionscall 3.0.4

1 of the 1 container images this version deploys carry CVE-2024-27088.

Container image	Digest	Package	Fixed in
henrywhitaker3/speedtest-tracker :latest	47159a940229	es5-ext@0.10.53	0.10.63

Open the chart page →

2,460

alertmanager-to-alerta-botsomeblackmagic

1 of 1 See more

alertmanager-to-alerta-bot someblackmagic 0.2.0

1 of the 1 container images this version deploys carry CVE-2024-27088.

Container image	Digest	Package	Fixed in
someblackmagic/alertmanager-to-alerta-bot :latest	78bf43744ea5	es5-ext@0.10.53	0.10.63

Open the chart page →

2,121

trudesktechpreta

1 of 3 See more

trudesk techpreta 1.0.0

1 of the 3 container images this version deploys carry CVE-2024-27088.

Container image	Digest	Package	Fixed in
polonel/trudesk :1.2.6	0cf6513f6fe3	es5-ext@0.10.53	0.10.63

Open the chart page →

4,017

vehicle-dashboardtest-vehi-dash

1 of 7 See more

vehicle-dashboard test-vehi-dash 0.1.0

1 of the 7 container images this version deploys carry CVE-2024-27088.

Container image	Digest	Package	Fixed in
samajh/alprfrontend :latest	05ef4fddbb75	es5-ext@0.10.62	0.10.63

Open the chart page →

20,270

csmmth-charts

1 of 3 See more

csmm th-charts 0.1.0

1 of the 3 container images this version deploys carry CVE-2024-27088.

Container image	Digest	Package	Fixed in
catalysm/csmm :latest	f003b35f54d9	es5-ext@0.10.53	0.10.63

Open the chart page →

3,576

cadencewenerme

1 of 5 See more

cadence wenerme 0.23.0

1 of the 5 container images this version deploys carry CVE-2024-27088.

Container image	Digest	Package	Fixed in
ubercadence/web :v3.29.5	8564a5b44a6d	es5-ext@0.10.53	0.10.63

Open the chart page →

10,127

temporalwenerme

1 of 13 See more

temporal wenerme 0.15.1

1 of the 13 container images this version deploys carry CVE-2024-27088.

Container image	Digest	Package	Fixed in
temporalio/web :1.14.0	33cfa863d8ce	es5-ext@0.10.53	0.10.63

Open the chart page →

22,665

Container images carrying it

73 by charts deploying them

A fixed version is listed for 1 of the 1 affected package.

Container image	Digest	Package	Fixed in	Used by
subsquid/hydra-indexer :5.0.0-alpha.37	a7f8b9bad7ee	es5-ext@0.10.61	0.10.63	1
subsquid/substrate-ingest :firesquid	fa549779e9b1	es5-ext@0.10.62	0.10.63	1
temporalio/web :1.14.0	33cfa863d8ce	es5-ext@0.10.53	0.10.63	1
treskon/portrait-ui :DEV-latest	e7970783bc8d	es5-ext@0.10.60	0.10.63	1
ubercadence/web :v3.29.5	8564a5b44a6d	es5-ext@0.10.53	0.10.63	1
wazuh/wazuh-dashboard :4.4.1	1787550d2358	es5-ext@0.10.62	0.10.63	1
wekanteam/wekan :v4.22	68a51f0327df	es5-ext@0.10.46	0.10.63	1
willwill/kube-slack :v4.1.1	d443017aae98	es5-ext@0.10.47	0.10.63	1
zooz/predator :1.6	f491d1f7a865	es5-ext@0.10.53	0.10.63	1
ghcr.io/data-fair/data-fair :3	cc9498b64b5b	es5-ext@0.10.62	0.10.63	1
ghcr.io/data-fair/processings :1	5a9216989707	es5-ext@0.10.62	0.10.63	1
ghcr.io/leprechaun/lgtv2mqtt :latest	ac2e11c41ffb	es5-ext@0.10.53	0.10.63	1
ghcr.io/m9sweeper/dash :1.6.0	2e27cdff8344	es5-ext@0.10.62	0.10.63	1
ghcr.io/mastodon/mastodon :v4.1.2	6b18e6d0eda4	es5-ext@0.10.53	0.10.63	1
ghcr.io/mmontes11/iot-back :v3.11.0	96683c54ae65	es5-ext@0.10.62	0.10.63	1
ghcr.io/mmontes11/iot-worker :v3.11.0	491bb243f555	es5-ext@0.10.62	0.10.63	1
ghcr.io/rivals-space/rivals-mastodon :1.6.1	43b23d55e4be	es5-ext@0.10.53	0.10.63	1
ghcr.io/vincenttaglia/indexer-tools :v3.4.4	5bae30456ddb	es5-ext@0.10.62	0.10.63	1
quay.io/ctrontesting/iofog-controller :latest	10df27bc5560	es5-ext@0.10.53	0.10.63	1
quay.io/ibmgaragecloud/developer-dashboard :v1.4.4	7a4b9fedc724	es5-ext@0.10.53	0.10.63	1
quay.io/mongodb/farm-intro-frontend :0.1	99ccdfd543e1	es5-ext@0.10.53	0.10.63	1
quay.io/wekan/wekan :v5.65	cb17600883a3	es5-ext@0.10.53	0.10.63	1
registry.gitlab.com/infinitydon/registry/open5gs-webui :v2.2.2	fda21b0a0344	es5-ext@0.10.45	0.10.63	1