StackRadar

CVE-2024-4067

Medium

Advisory

Published 14 May 2024In the index since 6 Sept 2026
Severity
Medium
worst across findings
CVSS
5.3
base score, highest
EPSS
0.014
71st percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
193
of 17,781 indexed, latest versions
Container images
185
deployed by those charts
Fix available
1 of 2
affected packages

Regular Expression Denial of Service (ReDoS) in micromatch

Carried by container images the latest versions of 193 of 17,781 indexed charts deploy, on 185 images.

Affected packageAffected versionsFixed inImages
micromatchnpm2.3.5, 2.3.11, 3.1.10, 4.0.2+3 more4.0.8185
node-micromatchdeb4.0.5+~4.0.2-1no fix listed1
OSV records
GHSA-952p-6rrq-rcjvUBUNTU-CVE-2024-4067

Charts affected

193 by stars
ChartLatestAffected imagesRadar Score
notes-project-fromt-helm-chartnotesprojectchart0.1.01 of 1See more

notes-project-fromt-helm-chart notesprojectchart 0.1.0

1 of the 1 container images this version deploys carry CVE-2024-4067.

Container imageDigestPackageFixed in
vlebediantsev/notes-project-front:latest945675fd2636
micromatch@4.0.5
4.0.8

Open the chart page →

15,206
registration-ms-front-helm-chartnotesprojectchart0.1.01 of 1See more

registration-ms-front-helm-chart notesprojectchart 0.1.0

1 of the 1 container images this version deploys carry CVE-2024-4067.

Container imageDigestPackageFixed in
vlebediantsev/registration-ms-front-app-host:latest54f69d116c50
micromatch@4.0.5
4.0.8

Open the chart page →

15,187
example-dev-toolsnoygal0.2.81 of 3See more

example-dev-tools noygal 0.2.8

1 of the 3 container images this version deploys carry CVE-2024-4067.

Container imageDigestPackageFixed in
linuxserver/codimd:latestb801bbcf6386
micromatch@2.3.11
4.0.8

Open the chart page →

27,465
ferdi-serverobeoneVerified publisher1.0.31 of 2See more

ferdi-server obeone 1.0.3

1 of the 2 container images this version deploys carry CVE-2024-4067.

Container imageDigestPackageFixed in
getferdi/ferdi-server:1.3.26e620b85afaa
micromatch@3.1.10
4.0.8

Open the chart page →

1,866
flomesh-consoleopenshift0.70.0-30-ubi81 of 2See more

flomesh-console openshift 0.70.0-30-ubi8

1 of the 2 container images this version deploys carry CVE-2024-4067.

Container imageDigestPackageFixed in
quay.io/flomesh/flomesh-console-ubi8:0.70.0-30ce6938ff6709
micromatch@3.1.10
4.0.8

Open the chart page →

9,968
codimdphntom0.1.121 of 3See more

codimd phntom 0.1.12

1 of the 3 container images this version deploys carry CVE-2024-4067.

Container imageDigestPackageFixed in
phntom/codimd:2.4.31b9aafbb62e6
micromatch@3.1.10
4.0.8

Open the chart page →

6,524
kratos-selfservice-ui-noderadar-baseVerified publisher0.43.11 of 1See more

kratos-selfservice-ui-node radar-base 0.43.1

1 of the 1 container images this version deploys carry CVE-2024-4067.

Container imageDigestPackageFixed in
oryd/kratos-selfservice-ui-node:v0.13.0-20d454c21c11bc
micromatch@4.0.5
4.0.8

Open the chart page →

2,969
relfinder-reformedrelfinderreformed2.0.01 of 2See more

relfinder-reformed relfinderreformed 2.0.0

1 of the 2 container images this version deploys carry CVE-2024-4067.

Container imageDigestPackageFixed in
ghcr.io/woodenmaiden/relfinderreformedapi:1.1.20708d30433d4
micromatch@4.0.5
4.0.8

Open the chart page →

6,282
mastodonrivals-spaceVerified publisher3.1.21 of 3See more

mastodon rivals-space 3.1.2

1 of the 3 container images this version deploys carry CVE-2024-4067.

Container imageDigestPackageFixed in
ghcr.io/rivals-space/rivals-mastodon:1.6.143b23d55e4be
micromatch@3.1.10
4.0.8

Open the chart page →

6,026
gristrlex0.1.01 of 1See more

grist rlex 0.1.0

1 of the 1 container images this version deploys carry CVE-2024-4067.

Container imageDigestPackageFixed in
gristlabs/grist:0.7.96e71b1914a7e
micromatch@3.1.10
4.0.8

Open the chart page →

5,215
joplinrubxkubeVerified publisher1.3.11 of 2See more

joplin rubxkube 1.3.1

1 of the 2 container images this version deploys carry CVE-2024-4067.

Container imageDigestPackageFixed in
joplin/server:3.0-beta52af57880c0e
micromatch@3.1.10
4.0.8

Open the chart page →

7,413
safe-stacksafe-global0.1.01 of 9See more

safe-stack safe-global 0.1.0

1 of the 9 container images this version deploys carry CVE-2024-4067.

Container imageDigestPackageFixed in
gjeanmart/safe-ganache-node:latest926264c8f2d1
micromatch@4.0.7
4.0.8

Open the chart page →

19,560
safe-transaction-servicesafe-global0.1.01 of 6See more

safe-transaction-service safe-global 0.1.0

1 of the 6 container images this version deploys carry CVE-2024-4067.

Container imageDigestPackageFixed in
gjeanmart/safe-ganache-node:latest926264c8f2d1
micromatch@4.0.7
4.0.8

Open the chart page →

16,620
unifi-protectschichtelVerified publisher0.10.11 of 1See more

unifi-protect schichtel 0.10.1

1 of the 1 container images this version deploys carry CVE-2024-4067.

Container imageDigestPackageFixed in
markdegroot/unifi-protect-arm64:latestd8445f2a0de6
micromatch@4.0.5
4.0.8

Open the chart page →

5,582
outlineschmitzis0.0.81 of 4See more

outline schmitzis 0.0.8

1 of the 4 container images this version deploys carry CVE-2024-4067.

Container imageDigestPackageFixed in
outlinewiki/outline:0.69.1d060dcd8f9aa
micromatch@4.0.5
4.0.8

Open the chart page →

4,431
wekanschmitzis1.1.11 of 1See more

wekan schmitzis 1.1.1

1 of the 1 container images this version deploys carry CVE-2024-4067.

Container imageDigestPackageFixed in
quay.io/wekan/wekan:v5.65cb17600883a3
micromatch@2.3.11
4.0.8

Open the chart page →

3,638
dashysergiotocaliniVerified publisher1.0.01 of 1See more

dashy sergiotocalini 1.0.0

1 of the 1 container images this version deploys carry CVE-2024-4067.

Container imageDigestPackageFixed in
ghcr.io/lissy93/dashy:2.1.1acb40032ad4b
micromatch@4.0.5
4.0.8

Open the chart page →

3,143
parkingsikalabs0.1.01 of 1See more

parking sikalabs 0.1.0

1 of the 1 container images this version deploys carry CVE-2024-4067.

Container imageDigestPackageFixed in
ondrejsika/parking:latestb1fd497416c8
micromatch@3.1.10
4.0.8

Open the chart page →

3,696
skoonerskooner0.2.21 of 1See more

skooner skooner 0.2.2

1 of the 1 container images this version deploys carry CVE-2024-4067.

Container imageDigestPackageFixed in
ghcr.io/skooner-k8s/skooner:stable60c1562e4d51
micromatch@4.0.5
4.0.8

Open the chart page →

1,341
sneakerssneakers1.0.01 of 4See more

sneakers sneakers 1.0.0

1 of the 4 container images this version deploys carry CVE-2024-4067.

Container imageDigestPackageFixed in
helga09/shoes_ukr:v1.1.17999bc8b77c0
micromatch@4.0.5
4.0.8

Open the chart page →

7,574
speedtest-trackersoblivionscall3.0.41 of 1See more

speedtest-tracker soblivionscall 3.0.4

1 of the 1 container images this version deploys carry CVE-2024-4067.

Container imageDigestPackageFixed in
henrywhitaker3/speedtest-tracker:latest47159a940229
micromatch@3.1.10
4.0.8

Open the chart page →

2,460
sorry-cypresssoftonic1.20.01 of 4See more

sorry-cypress softonic 1.20.0

1 of the 4 container images this version deploys carry CVE-2024-4067.

Container imageDigestPackageFixed in
agoldis/sorry-cypress-api:2.5.11afaa5a84051d
micromatch@4.0.2
4.0.8

Open the chart page →

4,285
pwssoketi0.2.41 of 1See more

pws soketi 0.2.4

1 of the 1 container images this version deploys carry CVE-2024-4067.

Container imageDigestPackageFixed in
quay.io/soketi/pws:0.8-16-alpine399d2e6b10ef
micromatch@4.0.4
4.0.8

Open the chart page →

3,228
nordmart-reviewstakaterVerified publisher0.0.61 of 3See more

nordmart-review stakater 0.0.6

1 of the 3 container images this version deploys carry CVE-2024-4067.

Container imageDigestPackageFixed in
stakater/stakater-nordmart-review-ui:1.0.143f4926eedc74
micromatch@4.0.4
4.0.8

Open the chart page →

11,554
nordmart-review-instancestakaterVerified publisher1.0.01 of 3See more

nordmart-review-instance stakater 1.0.0

1 of the 3 container images this version deploys carry CVE-2024-4067.

Container imageDigestPackageFixed in
stakater/stakater-nordmart-review-ui:1.0.143f4926eedc74
micromatch@4.0.4
4.0.8

Open the chart page →

11,554
fdi-dotstatsuite-dlmstatcan0.3.11 of 1See more

fdi-dotstatsuite-dlm statcan 0.3.1

1 of the 1 container images this version deploys carry CVE-2024-4067.

Container imageDigestPackageFixed in
siscc/dotstatsuite-data-lifecycle-manager:v14.0.0b6f9a7c888fc
micromatch@2.3.11
4.0.8

Open the chart page →

3,881
fdi-dotstatsuite-sfs-solrstatcan1.0.21 of 4See more

fdi-dotstatsuite-sfs-solr statcan 1.0.2

1 of the 4 container images this version deploys carry CVE-2024-4067.

Container imageDigestPackageFixed in
siscc/dotstatsuite-sdmx-faceted-search:master12c5048f7402
micromatch@3.1.10
4.0.8

Open the chart page →

6,065
fdi-dotstatsuite-sfs-solr-statefulstatcan1.0.21 of 2See more

fdi-dotstatsuite-sfs-solr-stateful statcan 1.0.2

1 of the 2 container images this version deploys carry CVE-2024-4067.

Container imageDigestPackageFixed in
siscc/dotstatsuite-sdmx-faceted-search:master12c5048f7402
micromatch@3.1.10
4.0.8

Open the chart page →

919
trudesktechpreta1.0.01 of 3See more

trudesk techpreta 1.0.0

1 of the 3 container images this version deploys carry CVE-2024-4067.

Container imageDigestPackageFixed in
polonel/trudesk:1.2.60cf6513f6fe3
micromatch@3.1.10
4.0.8

Open the chart page →

4,017
vehicle-dashboardtest-vehi-dash0.1.01 of 7See more

vehicle-dashboard test-vehi-dash 0.1.0

1 of the 7 container images this version deploys carry CVE-2024-4067.

Container imageDigestPackageFixed in
samajh/alprfrontend:latest05ef4fddbb75
micromatch@3.1.10
4.0.8

Open the chart page →

20,270
thanhvt27-lab-k8sthanh-vtVerified publisher0.1.41 of 5See more

thanhvt27-lab-k8s thanh-vt 0.1.4

1 of the 5 container images this version deploys carry CVE-2024-4067.

Container imageDigestPackageFixed in
pysga1996/python-redis-web:latestfdeec30ad482
micromatch@4.0.2
4.0.8

Open the chart page →

4,661
csmmth-chartsVerified publisher0.1.01 of 3See more

csmm th-charts 0.1.0

1 of the 3 container images this version deploys carry CVE-2024-4067.

Container imageDigestPackageFixed in
catalysm/csmm:latestf003b35f54d9
micromatch@2.3.11
4.0.8

Open the chart page →

3,576
saleor-appstrieb-work0.6.02 of 5See more

saleor-apps trieb-work 0.6.0

2 of the 5 container images this version deploys carry CVE-2024-4067.

Container imageDigestPackageFixed in
ghcr.io/trieb-work/saleor-apps/saleor-app-products-feed:1.23.11d435b4ab372
micromatch@3.1.10
4.0.8
ghcr.io/trieb-work/saleor-apps/saleor-app-smtp:1.4.357a06bfba327
micromatch@3.1.10
4.0.8

Open the chart page →

6,994
tfy-distributortruefoundryVerified publisher0.0.11 of 4See more

tfy-distributor truefoundry 0.0.1

1 of the 4 container images this version deploys carry CVE-2024-4067.

Container imageDigestPackageFixed in
public.ecr.aws/truefoundrycloud/async-service-distributor:5d48113bc678d694a0c8f8dabb2207c5aa2cfc53f74851ce31f5
micromatch@4.0.5
4.0.8

Open the chart page →

17,323
genievhdirkVerified publisher0.1.31 of 1See more

genie vhdirk 0.1.3

1 of the 1 container images this version deploys carry CVE-2024-4067.

Container imageDigestPackageFixed in
stanfordoval/almond-server:latest1a63cdccedaf
micromatch@4.0.4
4.0.8

Open the chart page →

3,129
skoonervhdirkVerified publisher0.1.41 of 1See more

skooner vhdirk 0.1.4

1 of the 1 container images this version deploys carry CVE-2024-4067.

Container imageDigestPackageFixed in
ghcr.io/skooner-k8s/skooner:stable60c1562e4d51
micromatch@4.0.5
4.0.8

Open the chart page →

1,341
websitewaldo-visionVerified publisher0.33.01 of 2See more

website waldo-vision 0.33.0

1 of the 2 container images this version deploys carry CVE-2024-4067.

Container imageDigestPackageFixed in
ghcr.io/waldo-vision/migrate:v0.3.6ae31923312ed
micromatch@4.0.5
4.0.8

Open the chart page →

3,474
cadencewenerme0.23.01 of 5See more

cadence wenerme 0.23.0

1 of the 5 container images this version deploys carry CVE-2024-4067.

Container imageDigestPackageFixed in
ubercadence/web:v3.29.58564a5b44a6d
micromatch@3.1.10
4.0.8

Open the chart page →

10,127
temporalwenerme0.15.11 of 13See more

temporal wenerme 0.15.1

1 of the 13 container images this version deploys carry CVE-2024-4067.

Container imageDigestPackageFixed in
temporalio/web:1.14.033cfa863d8ce
micromatch@3.1.10
4.0.8

Open the chart page →

22,665
wikiwikijs3.0.01 of 2See more

wiki wikijs 3.0.0

1 of the 2 container images this version deploys carry CVE-2024-4067.

Container imageDigestPackageFixed in
requarks/wiki:268f0d1848261
micromatch@3.1.10
4.0.8

Open the chart page →

5,459
opendistro-eswitcom-gmbh1.13.31 of 3See more

opendistro-es witcom-gmbh 1.13.3

1 of the 3 container images this version deploys carry CVE-2024-4067.

Container imageDigestPackageFixed in
amazon/opendistro-for-elasticsearch-kibana:1.13.2c740d7a89475
micromatch@3.1.10
4.0.8

Open the chart page →

5,806
workadventureworkadventure1.1.03 of 9See more

workadventure workadventure 1.1.0

3 of the 9 container images this version deploys carry CVE-2024-4067.

Container imageDigestPackageFixed in
thecodingmachine/workadventure-back:v1.17.764001369dad5
micromatch@4.0.5
4.0.8
thecodingmachine/workadventure-map-storage:v1.17.75bdab56da2fa
micromatch@4.0.5
4.0.8
thecodingmachine/workadventure-play:v1.17.7d8f66979b9b4
micromatch@4.0.5
4.0.8

Open the chart page →

16,083
skoonerxdVerified publisher1.1.01 of 1See more

skooner xd 1.1.0

1 of the 1 container images this version deploys carry CVE-2024-4067.

Container imageDigestPackageFixed in
ymuski/skooner:latest67819ca511b5
micromatch@4.0.4
4.0.8

Open the chart page →

1,752

Container images carrying it

185 by charts deploying them

A fixed version is listed for 1 of the 2 affected packages.

Container imageDigestPackageFixed inUsed by
lsstsqre/squareone:0.4.09ded78e7fe03
micromatch@4.0.4
4.0.8
1
ltdstudio/terraforming-mars:latest0e76c6f4eac0
micromatch@4.0.4
4.0.8
1
markdegroot/unifi-protect-arm64:latestd8445f2a0de6
micromatch@4.0.5
4.0.8
1
minddocdev/hubot:0.1.96c60b11a4fa7
micromatch@3.1.10
4.0.8
1
misskey/misskey:12.110.1e08b7c478093
micromatch@4.0.2
4.0.8
1
mitchxxx/amazon:214e72480ec63a
micromatch@4.0.5
4.0.8
1
moonrailgun/tianji:1.11.2b528c8f8fcc4
micromatch@4.0.5
4.0.8
1
mozilla/sentencecollector:2.0.91da6ff5c4895
micromatch@4.0.2
4.0.8
1
n8nio/n8n:0.212.0a9195bc499a3
micromatch@4.0.5
4.0.8
1
n8nio/n8n:1.33.1dd171d45102a
micromatch@4.0.5
4.0.8
1
netrisai/controller-web-service-backend:4.6.0-0086e865080e86c
micromatch@2.3.11
4.0.8
1
nightscout/cgm-remote-monitor:14.2.500c3b4833f1b
micromatch@4.0.2
4.0.8
1
nightscout/cgm-remote-monitor:15.0.2ad29ca7a4de6
micromatch@4.0.5
4.0.8
1
nightscout/cgm-remote-monitor:15.0.3f604dc4c03ca
micromatch@4.0.5
4.0.8
1
ohmyform/ohmyform:1.0.3afe53f4acdb1
micromatch@4.0.4
4.0.8
1
ondrejsika/parking:latestb1fd497416c8
micromatch@3.1.10
4.0.8
1
ooghenekaro/amazon:latest03394ba1d6d8
micromatch@4.0.5
4.0.8
1
openbas/caldera-server:5.1.0a277796d9724
micromatch@4.0.5
4.0.8
1
openhab/openhab-cloud:a8138a329dd2bac8c4b
micromatch@3.1.10
4.0.8
1
openmined/syft-frontend:0.9.5d11524a3854a
micromatch@4.0.5
4.0.8
1
opensearchproject/opensearch-dashboards:2.10.0485a0019e5d6
micromatch@4.0.5
4.0.8
1
opensearchproject/opensearch-dashboards:2.15.0b7c26c60bfaf
micromatch@4.0.7
4.0.8
1
oryd/kratos-selfservice-ui-node:v0.13.0-20d454c21c11bc
micromatch@4.0.5
4.0.8
1
outlinewiki/outline:0.82.0494dfb9249a6
micromatch@4.0.5
4.0.8
1
parithoshj/testnet-faucet:9859e0dcdca426fea6d
micromatch@3.1.10
4.0.8
1
phntom/codimd:2.4.31b9aafbb62e6
micromatch@3.1.10
4.0.8
1
polonel/trudesk:1.2.60cf6513f6fe3
micromatch@3.1.10
4.0.8
1
pysga1996/python-redis-web:latestfdeec30ad482
micromatch@4.0.2
4.0.8
1
rahulbhiwagade122/desishowbiz:latest08490b70998c
micromatch@4.0.5
4.0.8
1
rakii8585/angular-node-webapp:latest026082a515ac
micromatch@3.1.10
4.0.8
1
requarks/wiki:canary-2.5.2438b5865a7386c
micromatch@3.1.10
4.0.8
1
roadiehq/community-backstage-image:latestef355bf5b639
micromatch@4.0.2
4.0.8
1
samajh/alprfrontend:latest05ef4fddbb75
micromatch@3.1.10
4.0.8
1
shinobisystems/shinobi:dev3ca746937856
micromatch@3.1.10
4.0.8
1
shinobisystems/shinobi:latestc2f5ce2e1067
micromatch@3.1.10
4.0.8
1
siscc/dotstatsuite-data-lifecycle-manager:v14.0.0b6f9a7c888fc
micromatch@2.3.11
4.0.8
1
skylenet/ethstats-server:pow-latestd757cc016198
micromatch@4.0.5
4.0.8
1
socialmediamacroscope/smile_graphql:0.3.1c5095e94bc65
micromatch@2.3.11
4.0.8
1
socialmediamacroscope/smile_server:0.3.31a528c794270
micromatch@3.1.10
4.0.8
1
solidproject/community-server:6.0.2ccc4acb7e9a1
micromatch@4.0.5
4.0.8
1
stanfordoval/almond-server:latest1a63cdccedaf
micromatch@4.0.4
4.0.8
1
temporalio/web:1.14.033cfa863d8ce
micromatch@3.1.10
4.0.8
1
testhubio/testhub-frontend:on-preme86c2db53be8
micromatch@3.1.10
4.0.8
1
thecodingmachine/workadventure-back:v1.17.764001369dad5
micromatch@4.0.5
4.0.8
1
thecodingmachine/workadventure-map-storage:v1.17.75bdab56da2fa
micromatch@4.0.5
4.0.8
1
thecodingmachine/workadventure-play:v1.17.7d8f66979b9b4
micromatch@4.0.5
4.0.8
1
treskon/portrait-ui:DEV-lateste7970783bc8d
micromatch@3.1.10
4.0.8
1
ubercadence/web:v3.29.58564a5b44a6d
micromatch@3.1.10
4.0.8
1
vabene1111/recipes:1.0.5.2ec4e9e2905b0
micromatch@4.0.4
4.0.8
1
visualregressiontracker/api:5.0.11941aeb8c8bf9
micromatch@4.0.5
4.0.8
1

syft 1.42.1 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.