StackRadar

CVE-2024-27088

Low

Advisory

Published 26 Feb 2024In the index since 5 Sept 2026
Severity
Low
worst across findings
CVSS
2.0
base score, highest
EPSS
0.005
44th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
74
of 17,781 indexed, latest versions
Container images
73
deployed by those charts
Fix available
1 of 1
affected package

es5-ext vulnerable to Regular Expression Denial of Service in `function#copy` and `function#toStringTokens`

Carried by container images the latest versions of 74 of 17,781 indexed charts deploy, on 73 images.

Affected packageAffected versionsFixed inImages
es5-extnpm0.10.11, 0.10.12, 0.10.31, 0.10.45+9 more0.10.6373
OSV records
GHSA-4gmj-3p3h-gm8h

Charts affected

74 by stars
ChartLatestAffected imagesRadar Score
m9sweeperm9sweeperVerified publisher1.6.01 of 6See more

m9sweeper m9sweeper 1.6.0

1 of the 6 container images this version deploys carry CVE-2024-27088.

Container imageDigestPackageFixed in
ghcr.io/m9sweeper/dash:1.6.02e27cdff8344
es5-ext@0.10.62
0.10.63

Open the chart page →

9,774
iotmmontesVerified publisher0.3.22 of 7See more

iot mmontes 0.3.2

2 of the 7 container images this version deploys carry CVE-2024-27088.

Container imageDigestPackageFixed in
ghcr.io/mmontes11/iot-back:v3.11.096683c54ae65
es5-ext@0.10.62
0.10.63
ghcr.io/mmontes11/iot-worker:v3.11.0491bb243f555
es5-ext@0.10.62
0.10.63

Open the chart page →

10,608
mongodb-admin-interfacemongo-db-admin-interfaceVerified publisher0.1.01 of 2See more

mongodb-admin-interface mongo-db-admin-interface 0.1.0

1 of the 2 container images this version deploys carry CVE-2024-27088.

Container imageDigestPackageFixed in
library/mongo-express:latest1b23d7976f02
es5-ext@0.10.62
0.10.63

Open the chart page →

5,179
sample-appmongodb-helm-charts0.1.01 of 2See more

sample-app mongodb-helm-charts 0.1.0

1 of the 2 container images this version deploys carry CVE-2024-27088.

Container imageDigestPackageFixed in
quay.io/mongodb/farm-intro-frontend:0.199ccdfd543e1
es5-ext@0.10.53
0.10.63

Open the chart page →

6,438
sentence-collectormozilla0.1.21 of 2See more

sentence-collector mozilla 0.1.2

1 of the 2 container images this version deploys carry CVE-2024-27088.

Container imageDigestPackageFixed in
mozilla/sentencecollector:2.0.91da6ff5c4895
es5-ext@0.10.53
0.10.63

Open the chart page →

6,684
smilencsaVerified publisher1.1.01 of 23See more

smile ncsa 1.1.0

1 of the 23 container images this version deploys carry CVE-2024-27088.

Container imageDigestPackageFixed in
socialmediamacroscope/smile_graphql:0.3.1c5095e94bc65
es5-ext@0.10.62
0.10.63

Open the chart page →

109,294
indexer-toolsnodeifyVerified publisher2.1.11 of 1See more

indexer-tools nodeify 2.1.1

1 of the 1 container images this version deploys carry CVE-2024-27088.

Container imageDigestPackageFixed in
ghcr.io/vincenttaglia/indexer-tools:v3.4.45bae30456ddb
es5-ext@0.10.62
0.10.63

Open the chart page →

2,919
example-dev-toolsnoygal0.2.82 of 3See more

example-dev-tools noygal 0.2.8

2 of the 3 container images this version deploys carry CVE-2024-27088.

Container imageDigestPackageFixed in
linuxserver/cloud9:latest45c5fe102ff3
es5-ext@0.10.11
0.10.63
linuxserver/codimd:latestb801bbcf6386
es5-ext@0.10.53
0.10.63

Open the chart page →

27,465
codimdphntom0.1.121 of 3See more

codimd phntom 0.1.12

1 of the 3 container images this version deploys carry CVE-2024-27088.

Container imageDigestPackageFixed in
phntom/codimd:2.4.31b9aafbb62e6
es5-ext@0.10.50
0.10.63

Open the chart page →

6,524
powerdnspuckpuck2.0.01 of 4See more

powerdns puckpuck 2.0.0

1 of the 4 container images this version deploys carry CVE-2024-27088.

Container imageDigestPackageFixed in
pschiffe/pdns-admin:0.4.137ebba8c2b8f
es5-ext@0.10.62
0.10.63

Open the chart page →

4,616
mastodonrivals-spaceVerified publisher3.1.21 of 3See more

mastodon rivals-space 3.1.2

1 of the 3 container images this version deploys carry CVE-2024-27088.

Container imageDigestPackageFixed in
ghcr.io/rivals-space/rivals-mastodon:1.6.143b23d55e4be
es5-ext@0.10.53
0.10.63

Open the chart page →

6,026
joplinrubxkubeVerified publisher1.3.11 of 2See more

joplin rubxkube 1.3.1

1 of the 2 container images this version deploys carry CVE-2024-27088.

Container imageDigestPackageFixed in
joplin/server:3.0-beta52af57880c0e
es5-ext@0.10.53
0.10.63

Open the chart page →

7,413
samplesample0.1.01 of 2See more

sample sample 0.1.0

1 of the 2 container images this version deploys carry CVE-2024-27088.

Container imageDigestPackageFixed in
library/mongo-express:1.0.2-20-alpine3.191aae00775251
es5-ext@0.10.62
0.10.63

Open the chart page →

2,309
unifi-protectschichtelVerified publisher0.10.11 of 1See more

unifi-protect schichtel 0.10.1

1 of the 1 container images this version deploys carry CVE-2024-27088.

Container imageDigestPackageFixed in
markdegroot/unifi-protect-arm64:latestd8445f2a0de6
es5-ext@0.10.62
0.10.63

Open the chart page →

5,582
outlineschmitzis0.0.81 of 4See more

outline schmitzis 0.0.8

1 of the 4 container images this version deploys carry CVE-2024-27088.

Container imageDigestPackageFixed in
outlinewiki/outline:0.69.1d060dcd8f9aa
es5-ext@0.10.61
0.10.63

Open the chart page →

4,431
wekanschmitzis1.1.11 of 1See more

wekan schmitzis 1.1.1

1 of the 1 container images this version deploys carry CVE-2024-27088.

Container imageDigestPackageFixed in
quay.io/wekan/wekan:v5.65cb17600883a3
es5-ext@0.10.53
0.10.63

Open the chart page →

3,638
parkingsikalabs0.1.01 of 1See more

parking sikalabs 0.1.0

1 of the 1 container images this version deploys carry CVE-2024-27088.

Container imageDigestPackageFixed in
ondrejsika/parking:latestb1fd497416c8
es5-ext@0.10.53
0.10.63

Open the chart page →

3,696
speedtest-trackersoblivionscall3.0.41 of 1See more

speedtest-tracker soblivionscall 3.0.4

1 of the 1 container images this version deploys carry CVE-2024-27088.

Container imageDigestPackageFixed in
henrywhitaker3/speedtest-tracker:latest47159a940229
es5-ext@0.10.53
0.10.63

Open the chart page →

2,460
alertmanager-to-alerta-botsomeblackmagic0.2.01 of 1See more

alertmanager-to-alerta-bot someblackmagic 0.2.0

1 of the 1 container images this version deploys carry CVE-2024-27088.

Container imageDigestPackageFixed in
someblackmagic/alertmanager-to-alerta-bot:latest78bf43744ea5
es5-ext@0.10.53
0.10.63

Open the chart page →

2,121
trudesktechpreta1.0.01 of 3See more

trudesk techpreta 1.0.0

1 of the 3 container images this version deploys carry CVE-2024-27088.

Container imageDigestPackageFixed in
polonel/trudesk:1.2.60cf6513f6fe3
es5-ext@0.10.53
0.10.63

Open the chart page →

4,017
vehicle-dashboardtest-vehi-dash0.1.01 of 7See more

vehicle-dashboard test-vehi-dash 0.1.0

1 of the 7 container images this version deploys carry CVE-2024-27088.

Container imageDigestPackageFixed in
samajh/alprfrontend:latest05ef4fddbb75
es5-ext@0.10.62
0.10.63

Open the chart page →

20,270
csmmth-chartsVerified publisher0.1.01 of 3See more

csmm th-charts 0.1.0

1 of the 3 container images this version deploys carry CVE-2024-27088.

Container imageDigestPackageFixed in
catalysm/csmm:latestf003b35f54d9
es5-ext@0.10.53
0.10.63

Open the chart page →

3,576
cadencewenerme0.23.01 of 5See more

cadence wenerme 0.23.0

1 of the 5 container images this version deploys carry CVE-2024-27088.

Container imageDigestPackageFixed in
ubercadence/web:v3.29.58564a5b44a6d
es5-ext@0.10.53
0.10.63

Open the chart page →

10,127
temporalwenerme0.15.11 of 13See more

temporal wenerme 0.15.1

1 of the 13 container images this version deploys carry CVE-2024-27088.

Container imageDigestPackageFixed in
temporalio/web:1.14.033cfa863d8ce
es5-ext@0.10.53
0.10.63

Open the chart page →

22,665

Container images carrying it

73 by charts deploying them

A fixed version is listed for 1 of the 1 affected package.

Container imageDigestPackageFixed inUsed by
gradiant/open5gs-webui:2.7.5fbd10c017541
es5-ext@0.10.45
0.10.63
2
koenkk/zigbee2mqtt:1.19.15f9129b1ffbc
es5-ext@0.10.53
0.10.63
2
krtk6160/galoy-nostrcc82a694f818
es5-ext@0.10.62
0.10.63
2
library/mongo-express:1.0.2:latest1b23d7976f02
es5-ext@0.10.62
0.10.63
2
outlinewiki/outline:0.69.1d060dcd8f9aa
es5-ext@0.10.61
0.10.63
2
shahanafarooqui/rtl:0.13.3e2195188a451
es5-ext@0.10.62
0.10.63
2
arfath29/3-tier-app-frontend:latest384b3e377f47
es5-ext@0.10.53
0.10.63
1
assistiot/cybersecurity-monitoring_id-kbn:latest2297b4350211
es5-ext@0.10.53
0.10.63
1
assistiot/cybersecurity-monitoring_ir-kbn:latest0570b27bb7c2
es5-ext@0.10.46
0.10.63
1
bicarus/mx-api-service:1.0.2-hf1dab88659ae3b
es5-ext@0.10.62
0.10.63
1
catalysm/csmm:latestf003b35f54d9
es5-ext@0.10.53
0.10.63
1
conduction/conduction-ui-app:devd591f5e6f2a9
es5-ext@0.10.53
0.10.63
1
decayofmind/hubot:3.3.21e18e92fe694
es5-ext@0.10.50
0.10.63
1
ethereumoptimism/data-transport-layer:0.5.56e07968a0e686
es5-ext@0.10.53
0.10.63
1
ethersphere/bzz-token-service:latest7624f11a72ad
es5-ext@0.10.53
0.10.63
1
ethersphere/onboarding-faucet:0.3.0513154aab230
es5-ext@0.10.59
0.10.63
1
fiware/idm:8.3.3a1b6ed4ae84f
es5-ext@0.10.62
0.10.63
1
fiware/iotagent-ul:1.14.0fe11f55a926d
es5-ext@0.10.53
0.10.63
1
henrywhitaker3/speedtest-tracker:latest47159a940229
es5-ext@0.10.53
0.10.63
1
ibmcom/app-nav-ui:1.0.1e2a86997b36b
es5-ext@0.10.50
0.10.63
1
interlayhq/interbtc-hydra-processor:master-2c6e16e-1637088364423d567d47aa
es5-ext@0.10.53
0.10.63
1
interlayhq/interbtc-hydra-processor:0.10.55b2c414307b9
es5-ext@0.10.53
0.10.63
1
jayfong/yapi:1.10.2163e5d621910
es5-ext@0.10.53
0.10.63
1
joplin/server:3.0-beta52af57880c0e
es5-ext@0.10.53
0.10.63
1
joplin/server:2.14.2-betab87564ef34e9
es5-ext@0.10.53
0.10.63
1
jupyterhub/configurable-http-proxy:3.0.0c36cf3cc1c99
es5-ext@0.10.12
0.10.63
1
konradkleine/docker-registry-frontend:v2181aad54ee64
es5-ext@0.10.31
0.10.63
1
kyso/kyso-front:lateste52595c5c16f
es5-ext@0.10.62
0.10.63
1
library/kibana:7.17.150172f1c538e7
es5-ext@0.10.46
0.10.63
1
library/kibana:7.17.8c5781ba340ef
es5-ext@0.10.46
0.10.63
1
library/kibana:7.17.3e2e2031c15be
es5-ext@0.10.46
0.10.63
1
library/mongo-express:1.0.2-20-alpine3.191aae00775251
es5-ext@0.10.62
0.10.63
1
linuxserver/cloud9:latest45c5fe102ff3
es5-ext@0.10.11
0.10.63
1
linuxserver/codimd:latestb801bbcf6386
es5-ext@0.10.53
0.10.63
1
logentries/docker-logentries:0.2.1f1f90a236998
es5-ext@0.10.12
0.10.63
1
lsstsqre/sciplat-hub:latest5e0ade6bed1c
es5-ext@0.10.12
0.10.63
1
markdegroot/unifi-protect-arm64:latestd8445f2a0de6
es5-ext@0.10.62
0.10.63
1
microcks/microcks-postman-runtime:latestcb72e46a1b3c
es5-ext@0.10.12
0.10.63
1
minddocdev/hubot:0.1.96c60b11a4fa7
es5-ext@0.10.46
0.10.63
1
misskey/misskey:12.110.1e08b7c478093
es5-ext@0.10.53
0.10.63
1
mozilla/sentencecollector:2.0.91da6ff5c4895
es5-ext@0.10.53
0.10.63
1
nodered/node-red-docker:0.19.6-v8070643219ea2
es5-ext@0.10.48
0.10.63
1
ondrejsika/parking:latestb1fd497416c8
es5-ext@0.10.53
0.10.63
1
parithoshj/testnet-faucet:9859e0dcdca426fea6d
es5-ext@0.10.47
0.10.63
1
phntom/codimd:2.4.31b9aafbb62e6
es5-ext@0.10.50
0.10.63
1
polonel/trudesk:1.2.60cf6513f6fe3
es5-ext@0.10.53
0.10.63
1
pschiffe/pdns-admin:0.4.137ebba8c2b8f
es5-ext@0.10.62
0.10.63
1
samajh/alprfrontend:latest05ef4fddbb75
es5-ext@0.10.62
0.10.63
1
socialmediamacroscope/smile_graphql:0.3.1c5095e94bc65
es5-ext@0.10.62
0.10.63
1
someblackmagic/alertmanager-to-alerta-bot:latest78bf43744ea5
es5-ext@0.10.53
0.10.63
1

syft 1.42.1 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.