StackRadar

CVE-2024-4067

Medium

Advisory

Published 14 May 2024In the index since 6 Sept 2026
Severity
Medium
worst across findings
CVSS
5.3
base score, highest
EPSS
0.014
71st percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
193
of 17,781 indexed, latest versions
Container images
185
deployed by those charts
Fix available
1 of 2
affected packages

Regular Expression Denial of Service (ReDoS) in micromatch

Carried by container images the latest versions of 193 of 17,781 indexed charts deploy, on 185 images.

Affected packageAffected versionsFixed inImages
micromatchnpm2.3.5, 2.3.11, 3.1.10, 4.0.2+3 more4.0.8185
node-micromatchdeb4.0.5+~4.0.2-1no fix listed1
OSV records
GHSA-952p-6rrq-rcjvUBUNTU-CVE-2024-4067

Charts affected

193 by stars
ChartLatestAffected imagesRadar Score
ackeesudaVerified publisher0.2.11 of 1See more

ackee suda 0.2.1

1 of the 1 container images this version deploys carry CVE-2024-4067.

Container imageDigestPackageFixed in
electerious/ackee:3.2.05e7173fa321c
micromatch@4.0.4
4.0.8

Open the chart page →

1,602
testhubteshubVerified publisher0.1.41 of 3See more

testhub teshub 0.1.4

1 of the 3 container images this version deploys carry CVE-2024-4067.

Container imageDigestPackageFixed in
testhubio/testhub-frontend:on-preme86c2db53be8
micromatch@3.1.10
4.0.8

Open the chart page →

7,517
wikiwenerme2.2.01 of 2See more

wiki wenerme 2.2.0

1 of the 2 container images this version deploys carry CVE-2024-4067.

Container imageDigestPackageFixed in
requarks/wiki:latest68f0d1848261
micromatch@3.1.10
4.0.8

Open the chart page →

3,833
scrapoxywiremindVerified publisher0.3.41 of 1See more

scrapoxy wiremind 0.3.4

1 of the 1 container images this version deploys carry CVE-2024-4067.

Container imageDigestPackageFixed in
wiremind/scrapoxy:lateste7048929a676
micromatch@2.3.11
4.0.8

Open the chart page →

2,154
open5gsadaptivenetlabVerified publisher1.0.31 of 3See more

open5gs adaptivenetlab 1.0.3

1 of the 3 container images this version deploys carry CVE-2024-4067.

Container imageDigestPackageFixed in
registry.gitlab.com/infinitydon/registry/open5gs-webui:v2.2.2fda21b0a0344
micromatch@3.1.10
4.0.8

Open the chart page →

25,443
akto-source-code-analyserakto0.1.51 of 3See more

akto-source-code-analyser akto 0.1.5

1 of the 3 container images this version deploys carry CVE-2024-4067.

Container imageDigestPackageFixed in
aktosecurity/akto-puppeteer-replay:doom_latest853e37321e6e
micromatch@4.0.5
4.0.8

Open the chart page →

4,880
katalogalpineworks0.1.21 of 5See more

katalog alpineworks 0.1.2

1 of the 5 container images this version deploys carry CVE-2024-4067.

Container imageDigestPackageFixed in
ghcr.io/alpineworks/katalog-frontend:v1.0.734b76dcb1c10
micromatch@4.0.5
4.0.8

Open the chart page →

4,497
openhab-cloudandibraeuVerified publisher1.2.61 of 1See more

openhab-cloud andibraeu 1.2.6

1 of the 1 container images this version deploys carry CVE-2024-4067.

Container imageDigestPackageFixed in
openhab/openhab-cloud:a8138a329dd2bac8c4b
micromatch@3.1.10
4.0.8

Open the chart page →

3,437
angular-chartangular-application0.1.01 of 1See more

angular-chart angular-application 0.1.0

1 of the 1 container images this version deploys carry CVE-2024-4067.

Container imageDigestPackageFixed in
ibarreche/cloud-front-ci:latestc8970ac1c8dc
micromatch@3.1.10
4.0.8

Open the chart page →

3,237
angular-node-chartangular-webapp2.0.01 of 1See more

angular-node-chart angular-webapp 2.0.0

1 of the 1 container images this version deploys carry CVE-2024-4067.

Container imageDigestPackageFixed in
rakii8585/angular-node-webapp:latest026082a515ac
micromatch@3.1.10
4.0.8

Open the chart page →

2,616
lametric-nightscout-proxyaolde0.1.01 of 1See more

lametric-nightscout-proxy aolde 0.1.0

1 of the 1 container images this version deploys carry CVE-2024-4067.

Container imageDigestPackageFixed in
ghcr.io/aolde/lametric-nightscout-proxy:latest7d1951b6baf5
micromatch@4.0.5
4.0.8

Open the chart page →

1,186
apimap-developerapimapOfficialVerified publisher1.4.11 of 1See more

apimap-developer apimap 1.4.1

1 of the 1 container images this version deploys carry CVE-2024-4067.

Container imageDigestPackageFixed in
apimap/developer:v1.3.1406d3858e20c
micromatch@4.0.5
4.0.8

Open the chart page →

2,353
apimap-portalapimapOfficialVerified publisher2.4.01 of 1See more

apimap-portal apimap 2.4.0

1 of the 1 container images this version deploys carry CVE-2024-4067.

Container imageDigestPackageFixed in
apimap/portal:v2.4.0041a4790c65c
micromatch@4.0.4
4.0.8

Open the chart page →

2,396
openapiassist-iot-open-api-management0.2.21 of 6See more

openapi assist-iot-open-api-management 0.2.2

1 of the 6 container images this version deploys carry CVE-2024-4067.

Container imageDigestPackageFixed in
assistiot/open_api_frontend:1.0.1f11d82defc70
micromatch@4.0.5
4.0.8

Open the chart page →

18,277
astrotrekastria0.0.21 of 4See more

astrotrek astria 0.0.2

1 of the 4 container images this version deploys carry CVE-2024-4067.

Container imageDigestPackageFixed in
ghcr.io/astriaorg/astrotrek:0.1.05889bea38e56
micromatch@4.0.5
4.0.8

Open the chart page →

32,501
nas-appsawesomeVerified publisher2.0.01 of 8See more

nas-apps awesome 2.0.0

1 of the 8 container images this version deploys carry CVE-2024-4067.

Container imageDigestPackageFixed in
ltdstudio/terraforming-mars:latest0e76c6f4eac0
micromatch@4.0.4
4.0.8

Open the chart page →

7,152
opendistro-esbeeinventor1.15.11 of 3See more

opendistro-es beeinventor 1.15.1

1 of the 3 container images this version deploys carry CVE-2024-4067.

Container imageDigestPackageFixed in
amazon/opendistro-for-elasticsearch-kibana:1.13.2c740d7a89475
micromatch@3.1.10
4.0.8

Open the chart page →

5,806
mx-apibicarus-labs0.1.01 of 4See more

mx-api bicarus-labs 0.1.0

1 of the 4 container images this version deploys carry CVE-2024-4067.

Container imageDigestPackageFixed in
bicarus/mx-api-service:1.0.2-hf1dab88659ae3b
micromatch@4.0.5
4.0.8

Open the chart page →

4,455
bluerange-mosquittobluerangeOfficialVerified publisher1.0.41 of 1See more

bluerange-mosquitto bluerange 1.0.4

1 of the 1 container images this version deploys carry CVE-2024-4067.

Container imageDigestPackageFixed in
bluerange/bluerange-mosquitto:25f1bfbba84832
micromatch@4.0.2
4.0.8

Open the chart page →

1,168
registry-uibryanalves0.2.01 of 1See more

registry-ui bryanalves 0.2.0

1 of the 1 container images this version deploys carry CVE-2024-4067.

Container imageDigestPackageFixed in
konradkleine/docker-registry-frontend:v2181aad54ee64
micromatch@2.3.11
4.0.8

Open the chart page →

4,069
ghostchart-ghost0.1.51 of 2See more

ghost chart-ghost 0.1.5

1 of the 2 container images this version deploys carry CVE-2024-4067.

Container imageDigestPackageFixed in
library/ghost:6.22.0-alpine3.23ac533a6988ee
micromatch@3.1.10
4.0.8

Open the chart page →

4,083
countlychristianhuthVerified publisher5.2.12 of 3See more

countly christianhuth 5.2.1

2 of the 3 container images this version deploys carry CVE-2024-4067.

Container imageDigestPackageFixed in
countly/api:25.05.4f4cc7447c4f5
micromatch@4.0.5
4.0.8
countly/frontend:25.05.42acbc11499b6
micromatch@4.0.5
4.0.8

Open the chart page →

7,295
daskcloudnativeapp2.2.11 of 2See more

dask cloudnativeapp 2.2.1

1 of the 2 container images this version deploys carry CVE-2024-4067.

Container imageDigestPackageFixed in
daskdev/dask-notebook:1.1.0052630f5ca04
micromatch@3.1.10
4.0.8

Open the chart page →

29,901
ethereumcloudnativeapp1.0.01 of 3See more

ethereum cloudnativeapp 1.0.0

1 of the 3 container images this version deploys carry CVE-2024-4067.

Container imageDigestPackageFixed in
ethereumex/eth-stats-dashboard:v0.0.1a7603aa8df4c
micromatch@2.3.11
4.0.8

Open the chart page →

27,417
hubotcloudnativeapp0.0.11 of 1See more

hubot cloudnativeapp 0.0.1

1 of the 1 container images this version deploys carry CVE-2024-4067.

Container imageDigestPackageFixed in
minddocdev/hubot:0.1.96c60b11a4fa7
micromatch@3.1.10
4.0.8

Open the chart page →

2,580
developer-dashboardcloud-native-toolkit1.4.11 of 1See more

developer-dashboard cloud-native-toolkit 1.4.1

1 of the 1 container images this version deploys carry CVE-2024-4067.

Container imageDigestPackageFixed in
quay.io/ibmgaragecloud/developer-dashboard:v1.4.47a4b9fedc724
micromatch@2.3.11
4.0.8

Open the chart page →

25,456
codehubcodehubVerified publisher6.2.181 of 5See more

codehub codehub 6.2.18

1 of the 5 container images this version deploys carry CVE-2024-4067.

Container imageDigestPackageFixed in
jupyterhub/jupyterhub:5.4.63974ba945e65
micromatch@4.0.5
node-micromatch@4.0.5+~4.0.2-1
4.0.8
no fix listed

Open the chart page →

13,220
coderstudio-strapi-devcoderstudio-strapi-devVerified publisher0.0.11 of 3See more

coderstudio-strapi-dev coderstudio-strapi-dev 0.0.1

1 of the 3 container images this version deploys carry CVE-2024-4067.

Container imageDigestPackageFixed in
rcdelacruz/my-strapi-app:js-amd6438007f358355
micromatch@4.0.5
4.0.8

Open the chart page →

5,141
docker-composecoderstudio-strapi-devVerified publisher0.0.11 of 3See more

docker-compose coderstudio-strapi-dev 0.0.1

1 of the 3 container images this version deploys carry CVE-2024-4067.

Container imageDigestPackageFixed in
rcdelacruz/my-strapi-app:js-amd6438007f358355
micromatch@4.0.5
4.0.8

Open the chart page →

5,141
strapi-devcoderstudio-strapi-devVerified publisher0.0.11 of 3See more

strapi-dev coderstudio-strapi-dev 0.0.1

1 of the 3 container images this version deploys carry CVE-2024-4067.

Container imageDigestPackageFixed in
rcdelacruz/my-strapi-app:js-amd6438007f358355
micromatch@4.0.5
4.0.8

Open the chart page →

5,141
conduction-uiconduction-ui0.1.01 of 6See more

conduction-ui conduction-ui 0.1.0

1 of the 6 container images this version deploys carry CVE-2024-4067.

Container imageDigestPackageFixed in
conduction/conduction-ui-app:devd591f5e6f2a9
micromatch@3.1.10
4.0.8

Open the chart page →

12,907
containers-security-chartscontainers-security0.1.01 of 7See more

containers-security-charts containers-security 0.1.0

1 of the 7 container images this version deploys carry CVE-2024-4067.

Container imageDigestPackageFixed in
coldatom/containers-security-front:latest7c2fbbb41bcf
micromatch@4.0.5
4.0.8

Open the chart page →

9,146
wazuhcsic-charts0.1.01 of 4See more

wazuh csic-charts 0.1.0

1 of the 4 container images this version deploys carry CVE-2024-4067.

Container imageDigestPackageFixed in
wazuh/wazuh-dashboard:4.4.11787550d2358
micromatch@3.1.10
4.0.8

Open the chart page →

13,852
desishowbiz-frontenddesishowbiz1.0.01 of 1See more

desishowbiz-frontend desishowbiz 1.0.0

1 of the 1 container images this version deploys carry CVE-2024-4067.

Container imageDigestPackageFixed in
rahulbhiwagade122/desishowbiz:latest08490b70998c
micromatch@4.0.5
4.0.8

Open the chart page →

2,529
amundsenduyet1.1.01 of 7See more

amundsen duyet 1.1.0

1 of the 7 container images this version deploys carry CVE-2024-4067.

Container imageDigestPackageFixed in
amundsendev/amundsen-frontend:2.1.169e7915e61c1
micromatch@3.1.10
4.0.8

Open the chart page →

11,174
frontend-charteks-3-tier-app-chart0.1.01 of 1See more

frontend-chart eks-3-tier-app-chart 0.1.0

1 of the 1 container images this version deploys carry CVE-2024-4067.

Container imageDigestPackageFixed in
arfath29/3-tier-app-frontend:latest384b3e377f47
micromatch@3.1.10
4.0.8

Open the chart page →

3,744
ethstatsethereum-helm-chartsVerified publisher0.1.41 of 1See more

ethstats ethereum-helm-charts 0.1.4

1 of the 1 container images this version deploys carry CVE-2024-4067.

Container imageDigestPackageFixed in
skylenet/ethstats-server:pow-latestd757cc016198
micromatch@4.0.5
4.0.8

Open the chart page →

1,109
testnet-faucetethereum-helm-chartsVerified publisher0.1.31 of 1See more

testnet-faucet ethereum-helm-charts 0.1.3

1 of the 1 container images this version deploys carry CVE-2024-4067.

Container imageDigestPackageFixed in
parithoshj/testnet-faucet:9859e0dcdca426fea6d
micromatch@3.1.10
4.0.8

Open the chart page →

3,005
bee-localchainethersphereVerified publisher0.2.01 of 1See more

bee-localchain ethersphere 0.2.0

1 of the 1 container images this version deploys carry CVE-2024-4067.

Container imageDigestPackageFixed in
ethersphere/bee-localchain:latest0558799ca992
micromatch@4.0.5
4.0.8

Open the chart page →

2,266
bzz-token-serviceethersphereVerified publisher0.2.01 of 1See more

bzz-token-service ethersphere 0.2.0

1 of the 1 container images this version deploys carry CVE-2024-4067.

Container imageDigestPackageFixed in
ethersphere/bzz-token-service:latest7624f11a72ad
micromatch@4.0.4
4.0.8

Open the chart page →

3,260
geth-swapethersphereVerified publisher0.6.31 of 2See more

geth-swap ethersphere 0.6.3

1 of the 2 container images this version deploys carry CVE-2024-4067.

Container imageDigestPackageFixed in
ethersphere/bee-localchain:latest0558799ca992
micromatch@4.0.5
4.0.8

Open the chart page →

4,756
onboarding-faucetethersphereVerified publisher0.2.01 of 1See more

onboarding-faucet ethersphere 0.2.0

1 of the 1 container images this version deploys carry CVE-2024-4067.

Container imageDigestPackageFixed in
ethersphere/onboarding-faucet:0.3.0513154aab230
micromatch@4.0.4
4.0.8

Open the chart page →

3,320
iotagent-ulfiware0.1.21 of 1See more

iotagent-ul fiware 0.1.2

1 of the 1 container images this version deploys carry CVE-2024-4067.

Container imageDigestPackageFixed in
fiware/iotagent-ul:1.14.0fe11f55a926d
micromatch@3.1.10
4.0.8

Open the chart page →

3,337
wekan-oldgabisonfire0.1.21 of 1See more

wekan-old gabisonfire 0.1.2

1 of the 1 container images this version deploys carry CVE-2024-4067.

Container imageDigestPackageFixed in
wekanteam/wekan:v4.2268a51f0327df
micromatch@2.3.11
4.0.8

Open the chart page →

5,941
nightscoutgeek-cookbookVerified publisher1.2.21 of 1See more

nightscout geek-cookbook 1.2.2

1 of the 1 container images this version deploys carry CVE-2024-4067.

Container imageDigestPackageFixed in
nightscout/cgm-remote-monitor:14.2.500c3b4833f1b
micromatch@4.0.2
4.0.8

Open the chart page →

4,043
shinobigeek-cookbookVerified publisher1.2.21 of 1See more

shinobi geek-cookbook 1.2.2

1 of the 1 container images this version deploys carry CVE-2024-4067.

Container imageDigestPackageFixed in
shinobisystems/shinobi:dev3ca746937856
micromatch@3.1.10
4.0.8

Open the chart page →

4,591
geonetwork-k8sgeonetwork-k8sVerified publisher4.2.81 of 5See more

geonetwork-k8s geonetwork-k8s 4.2.8

1 of the 5 container images this version deploys carry CVE-2024-4067.

Container imageDigestPackageFixed in
library/kibana:7.17.150172f1c538e7
micromatch@4.0.4
4.0.8

Open the chart page →

34,754
ghostghostVerified publisher0.1.01 of 4See more

ghost ghost 0.1.0

1 of the 4 container images this version deploys carry CVE-2024-4067.

Container imageDigestPackageFixed in
library/ghost:5.79.083f7bf209844
micromatch@3.1.10
4.0.8

Open the chart page →

9,019
Governify-Bluejaygovernify0.1.01 of 12See more

Governify-Bluejay governify 0.1.0

1 of the 12 container images this version deploys carry CVE-2024-4067.

Container imageDigestPackageFixed in
governify/registry:v3.4.0d3f37f4f8168
micromatch@4.0.2
4.0.8

Open the chart page →

22,512
Governify-Falcongovernify0.1.02 of 10See more

Governify-Falcon governify 0.1.0

2 of the 10 container images this version deploys carry CVE-2024-4067.

Container imageDigestPackageFixed in
governify/collector-dynamic:v1.3.06d3d1a5b46a9
micromatch@4.0.2
4.0.8
governify/registry:v3.4.0d3f37f4f8168
micromatch@4.0.2
4.0.8

Open the chart page →

24,319

Container images carrying it

185 by charts deploying them

A fixed version is listed for 1 of the 2 affected packages.

Container imageDigestPackageFixed inUsed by
lsstsqre/squareone:0.4.09ded78e7fe03
micromatch@4.0.4
4.0.8
1
ltdstudio/terraforming-mars:latest0e76c6f4eac0
micromatch@4.0.4
4.0.8
1
markdegroot/unifi-protect-arm64:latestd8445f2a0de6
micromatch@4.0.5
4.0.8
1
minddocdev/hubot:0.1.96c60b11a4fa7
micromatch@3.1.10
4.0.8
1
misskey/misskey:12.110.1e08b7c478093
micromatch@4.0.2
4.0.8
1
mitchxxx/amazon:214e72480ec63a
micromatch@4.0.5
4.0.8
1
moonrailgun/tianji:1.11.2b528c8f8fcc4
micromatch@4.0.5
4.0.8
1
mozilla/sentencecollector:2.0.91da6ff5c4895
micromatch@4.0.2
4.0.8
1
n8nio/n8n:0.212.0a9195bc499a3
micromatch@4.0.5
4.0.8
1
n8nio/n8n:1.33.1dd171d45102a
micromatch@4.0.5
4.0.8
1
netrisai/controller-web-service-backend:4.6.0-0086e865080e86c
micromatch@2.3.11
4.0.8
1
nightscout/cgm-remote-monitor:14.2.500c3b4833f1b
micromatch@4.0.2
4.0.8
1
nightscout/cgm-remote-monitor:15.0.2ad29ca7a4de6
micromatch@4.0.5
4.0.8
1
nightscout/cgm-remote-monitor:15.0.3f604dc4c03ca
micromatch@4.0.5
4.0.8
1
ohmyform/ohmyform:1.0.3afe53f4acdb1
micromatch@4.0.4
4.0.8
1
ondrejsika/parking:latestb1fd497416c8
micromatch@3.1.10
4.0.8
1
ooghenekaro/amazon:latest03394ba1d6d8
micromatch@4.0.5
4.0.8
1
openbas/caldera-server:5.1.0a277796d9724
micromatch@4.0.5
4.0.8
1
openhab/openhab-cloud:a8138a329dd2bac8c4b
micromatch@3.1.10
4.0.8
1
openmined/syft-frontend:0.9.5d11524a3854a
micromatch@4.0.5
4.0.8
1
opensearchproject/opensearch-dashboards:2.10.0485a0019e5d6
micromatch@4.0.5
4.0.8
1
opensearchproject/opensearch-dashboards:2.15.0b7c26c60bfaf
micromatch@4.0.7
4.0.8
1
oryd/kratos-selfservice-ui-node:v0.13.0-20d454c21c11bc
micromatch@4.0.5
4.0.8
1
outlinewiki/outline:0.82.0494dfb9249a6
micromatch@4.0.5
4.0.8
1
parithoshj/testnet-faucet:9859e0dcdca426fea6d
micromatch@3.1.10
4.0.8
1
phntom/codimd:2.4.31b9aafbb62e6
micromatch@3.1.10
4.0.8
1
polonel/trudesk:1.2.60cf6513f6fe3
micromatch@3.1.10
4.0.8
1
pysga1996/python-redis-web:latestfdeec30ad482
micromatch@4.0.2
4.0.8
1
rahulbhiwagade122/desishowbiz:latest08490b70998c
micromatch@4.0.5
4.0.8
1
rakii8585/angular-node-webapp:latest026082a515ac
micromatch@3.1.10
4.0.8
1
requarks/wiki:canary-2.5.2438b5865a7386c
micromatch@3.1.10
4.0.8
1
roadiehq/community-backstage-image:latestef355bf5b639
micromatch@4.0.2
4.0.8
1
samajh/alprfrontend:latest05ef4fddbb75
micromatch@3.1.10
4.0.8
1
shinobisystems/shinobi:dev3ca746937856
micromatch@3.1.10
4.0.8
1
shinobisystems/shinobi:latestc2f5ce2e1067
micromatch@3.1.10
4.0.8
1
siscc/dotstatsuite-data-lifecycle-manager:v14.0.0b6f9a7c888fc
micromatch@2.3.11
4.0.8
1
skylenet/ethstats-server:pow-latestd757cc016198
micromatch@4.0.5
4.0.8
1
socialmediamacroscope/smile_graphql:0.3.1c5095e94bc65
micromatch@2.3.11
4.0.8
1
socialmediamacroscope/smile_server:0.3.31a528c794270
micromatch@3.1.10
4.0.8
1
solidproject/community-server:6.0.2ccc4acb7e9a1
micromatch@4.0.5
4.0.8
1
stanfordoval/almond-server:latest1a63cdccedaf
micromatch@4.0.4
4.0.8
1
temporalio/web:1.14.033cfa863d8ce
micromatch@3.1.10
4.0.8
1
testhubio/testhub-frontend:on-preme86c2db53be8
micromatch@3.1.10
4.0.8
1
thecodingmachine/workadventure-back:v1.17.764001369dad5
micromatch@4.0.5
4.0.8
1
thecodingmachine/workadventure-map-storage:v1.17.75bdab56da2fa
micromatch@4.0.5
4.0.8
1
thecodingmachine/workadventure-play:v1.17.7d8f66979b9b4
micromatch@4.0.5
4.0.8
1
treskon/portrait-ui:DEV-lateste7970783bc8d
micromatch@3.1.10
4.0.8
1
ubercadence/web:v3.29.58564a5b44a6d
micromatch@3.1.10
4.0.8
1
vabene1111/recipes:1.0.5.2ec4e9e2905b0
micromatch@4.0.4
4.0.8
1
visualregressiontracker/api:5.0.11941aeb8c8bf9
micromatch@4.0.5
4.0.8
1

syft 1.42.1 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.