StackRadar

CVE-2024-4067

Medium

Advisory

Published 14 May 2024In the index since 6 Sept 2026
Severity
Medium
worst across findings
CVSS
5.3
base score, highest
EPSS
0.014
71st percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
193
of 17,781 indexed, latest versions
Container images
185
deployed by those charts
Fix available
1 of 2
affected packages

Regular Expression Denial of Service (ReDoS) in micromatch

Carried by container images the latest versions of 193 of 17,781 indexed charts deploy, on 185 images.

Affected packageAffected versionsFixed inImages
micromatchnpm2.3.5, 2.3.11, 3.1.10, 4.0.2+3 more4.0.8185
node-micromatchdeb4.0.5+~4.0.2-1no fix listed1
OSV records
GHSA-952p-6rrq-rcjvUBUNTU-CVE-2024-4067

Charts affected

193 by stars
ChartLatestAffected imagesRadar Score
ackeesudaVerified publisher0.2.11 of 1See more

ackee suda 0.2.1

1 of the 1 container images this version deploys carry CVE-2024-4067.

Container imageDigestPackageFixed in
electerious/ackee:3.2.05e7173fa321c
micromatch@4.0.4
4.0.8

Open the chart page →

1,602
testhubteshubVerified publisher0.1.41 of 3See more

testhub teshub 0.1.4

1 of the 3 container images this version deploys carry CVE-2024-4067.

Container imageDigestPackageFixed in
testhubio/testhub-frontend:on-preme86c2db53be8
micromatch@3.1.10
4.0.8

Open the chart page →

7,517
wikiwenerme2.2.01 of 2See more

wiki wenerme 2.2.0

1 of the 2 container images this version deploys carry CVE-2024-4067.

Container imageDigestPackageFixed in
requarks/wiki:latest68f0d1848261
micromatch@3.1.10
4.0.8

Open the chart page →

3,833
scrapoxywiremindVerified publisher0.3.41 of 1See more

scrapoxy wiremind 0.3.4

1 of the 1 container images this version deploys carry CVE-2024-4067.

Container imageDigestPackageFixed in
wiremind/scrapoxy:lateste7048929a676
micromatch@2.3.11
4.0.8

Open the chart page →

2,154
open5gsadaptivenetlabVerified publisher1.0.31 of 3See more

open5gs adaptivenetlab 1.0.3

1 of the 3 container images this version deploys carry CVE-2024-4067.

Container imageDigestPackageFixed in
registry.gitlab.com/infinitydon/registry/open5gs-webui:v2.2.2fda21b0a0344
micromatch@3.1.10
4.0.8

Open the chart page →

25,443
akto-source-code-analyserakto0.1.51 of 3See more

akto-source-code-analyser akto 0.1.5

1 of the 3 container images this version deploys carry CVE-2024-4067.

Container imageDigestPackageFixed in
aktosecurity/akto-puppeteer-replay:doom_latest853e37321e6e
micromatch@4.0.5
4.0.8

Open the chart page →

4,880
katalogalpineworks0.1.21 of 5See more

katalog alpineworks 0.1.2

1 of the 5 container images this version deploys carry CVE-2024-4067.

Container imageDigestPackageFixed in
ghcr.io/alpineworks/katalog-frontend:v1.0.734b76dcb1c10
micromatch@4.0.5
4.0.8

Open the chart page →

4,497
openhab-cloudandibraeuVerified publisher1.2.61 of 1See more

openhab-cloud andibraeu 1.2.6

1 of the 1 container images this version deploys carry CVE-2024-4067.

Container imageDigestPackageFixed in
openhab/openhab-cloud:a8138a329dd2bac8c4b
micromatch@3.1.10
4.0.8

Open the chart page →

3,437
angular-chartangular-application0.1.01 of 1See more

angular-chart angular-application 0.1.0

1 of the 1 container images this version deploys carry CVE-2024-4067.

Container imageDigestPackageFixed in
ibarreche/cloud-front-ci:latestc8970ac1c8dc
micromatch@3.1.10
4.0.8

Open the chart page →

3,237
angular-node-chartangular-webapp2.0.01 of 1See more

angular-node-chart angular-webapp 2.0.0

1 of the 1 container images this version deploys carry CVE-2024-4067.

Container imageDigestPackageFixed in
rakii8585/angular-node-webapp:latest026082a515ac
micromatch@3.1.10
4.0.8

Open the chart page →

2,616
lametric-nightscout-proxyaolde0.1.01 of 1See more

lametric-nightscout-proxy aolde 0.1.0

1 of the 1 container images this version deploys carry CVE-2024-4067.

Container imageDigestPackageFixed in
ghcr.io/aolde/lametric-nightscout-proxy:latest7d1951b6baf5
micromatch@4.0.5
4.0.8

Open the chart page →

1,186
apimap-developerapimapOfficialVerified publisher1.4.11 of 1See more

apimap-developer apimap 1.4.1

1 of the 1 container images this version deploys carry CVE-2024-4067.

Container imageDigestPackageFixed in
apimap/developer:v1.3.1406d3858e20c
micromatch@4.0.5
4.0.8

Open the chart page →

2,353
apimap-portalapimapOfficialVerified publisher2.4.01 of 1See more

apimap-portal apimap 2.4.0

1 of the 1 container images this version deploys carry CVE-2024-4067.

Container imageDigestPackageFixed in
apimap/portal:v2.4.0041a4790c65c
micromatch@4.0.4
4.0.8

Open the chart page →

2,396
openapiassist-iot-open-api-management0.2.21 of 6See more

openapi assist-iot-open-api-management 0.2.2

1 of the 6 container images this version deploys carry CVE-2024-4067.

Container imageDigestPackageFixed in
assistiot/open_api_frontend:1.0.1f11d82defc70
micromatch@4.0.5
4.0.8

Open the chart page →

18,277
astrotrekastria0.0.21 of 4See more

astrotrek astria 0.0.2

1 of the 4 container images this version deploys carry CVE-2024-4067.

Container imageDigestPackageFixed in
ghcr.io/astriaorg/astrotrek:0.1.05889bea38e56
micromatch@4.0.5
4.0.8

Open the chart page →

32,501
nas-appsawesomeVerified publisher2.0.01 of 8See more

nas-apps awesome 2.0.0

1 of the 8 container images this version deploys carry CVE-2024-4067.

Container imageDigestPackageFixed in
ltdstudio/terraforming-mars:latest0e76c6f4eac0
micromatch@4.0.4
4.0.8

Open the chart page →

7,152
opendistro-esbeeinventor1.15.11 of 3See more

opendistro-es beeinventor 1.15.1

1 of the 3 container images this version deploys carry CVE-2024-4067.

Container imageDigestPackageFixed in
amazon/opendistro-for-elasticsearch-kibana:1.13.2c740d7a89475
micromatch@3.1.10
4.0.8

Open the chart page →

5,806
mx-apibicarus-labs0.1.01 of 4See more

mx-api bicarus-labs 0.1.0

1 of the 4 container images this version deploys carry CVE-2024-4067.

Container imageDigestPackageFixed in
bicarus/mx-api-service:1.0.2-hf1dab88659ae3b
micromatch@4.0.5
4.0.8

Open the chart page →

4,455
bluerange-mosquittobluerangeOfficialVerified publisher1.0.41 of 1See more

bluerange-mosquitto bluerange 1.0.4

1 of the 1 container images this version deploys carry CVE-2024-4067.

Container imageDigestPackageFixed in
bluerange/bluerange-mosquitto:25f1bfbba84832
micromatch@4.0.2
4.0.8

Open the chart page →

1,168
registry-uibryanalves0.2.01 of 1See more

registry-ui bryanalves 0.2.0

1 of the 1 container images this version deploys carry CVE-2024-4067.

Container imageDigestPackageFixed in
konradkleine/docker-registry-frontend:v2181aad54ee64
micromatch@2.3.11
4.0.8

Open the chart page →

4,069
ghostchart-ghost0.1.51 of 2See more

ghost chart-ghost 0.1.5

1 of the 2 container images this version deploys carry CVE-2024-4067.

Container imageDigestPackageFixed in
library/ghost:6.22.0-alpine3.23ac533a6988ee
micromatch@3.1.10
4.0.8

Open the chart page →

4,083
countlychristianhuthVerified publisher5.2.12 of 3See more

countly christianhuth 5.2.1

2 of the 3 container images this version deploys carry CVE-2024-4067.

Container imageDigestPackageFixed in
countly/api:25.05.4f4cc7447c4f5
micromatch@4.0.5
4.0.8
countly/frontend:25.05.42acbc11499b6
micromatch@4.0.5
4.0.8

Open the chart page →

7,295
daskcloudnativeapp2.2.11 of 2See more

dask cloudnativeapp 2.2.1

1 of the 2 container images this version deploys carry CVE-2024-4067.

Container imageDigestPackageFixed in
daskdev/dask-notebook:1.1.0052630f5ca04
micromatch@3.1.10
4.0.8

Open the chart page →

29,901
ethereumcloudnativeapp1.0.01 of 3See more

ethereum cloudnativeapp 1.0.0

1 of the 3 container images this version deploys carry CVE-2024-4067.

Container imageDigestPackageFixed in
ethereumex/eth-stats-dashboard:v0.0.1a7603aa8df4c
micromatch@2.3.11
4.0.8

Open the chart page →

27,417
hubotcloudnativeapp0.0.11 of 1See more

hubot cloudnativeapp 0.0.1

1 of the 1 container images this version deploys carry CVE-2024-4067.

Container imageDigestPackageFixed in
minddocdev/hubot:0.1.96c60b11a4fa7
micromatch@3.1.10
4.0.8

Open the chart page →

2,580
developer-dashboardcloud-native-toolkit1.4.11 of 1See more

developer-dashboard cloud-native-toolkit 1.4.1

1 of the 1 container images this version deploys carry CVE-2024-4067.

Container imageDigestPackageFixed in
quay.io/ibmgaragecloud/developer-dashboard:v1.4.47a4b9fedc724
micromatch@2.3.11
4.0.8

Open the chart page →

25,456
codehubcodehubVerified publisher6.2.181 of 5See more

codehub codehub 6.2.18

1 of the 5 container images this version deploys carry CVE-2024-4067.

Container imageDigestPackageFixed in
jupyterhub/jupyterhub:5.4.63974ba945e65
micromatch@4.0.5
node-micromatch@4.0.5+~4.0.2-1
4.0.8
no fix listed

Open the chart page →

13,220
coderstudio-strapi-devcoderstudio-strapi-devVerified publisher0.0.11 of 3See more

coderstudio-strapi-dev coderstudio-strapi-dev 0.0.1

1 of the 3 container images this version deploys carry CVE-2024-4067.

Container imageDigestPackageFixed in
rcdelacruz/my-strapi-app:js-amd6438007f358355
micromatch@4.0.5
4.0.8

Open the chart page →

5,141
docker-composecoderstudio-strapi-devVerified publisher0.0.11 of 3See more

docker-compose coderstudio-strapi-dev 0.0.1

1 of the 3 container images this version deploys carry CVE-2024-4067.

Container imageDigestPackageFixed in
rcdelacruz/my-strapi-app:js-amd6438007f358355
micromatch@4.0.5
4.0.8

Open the chart page →

5,141
strapi-devcoderstudio-strapi-devVerified publisher0.0.11 of 3See more

strapi-dev coderstudio-strapi-dev 0.0.1

1 of the 3 container images this version deploys carry CVE-2024-4067.

Container imageDigestPackageFixed in
rcdelacruz/my-strapi-app:js-amd6438007f358355
micromatch@4.0.5
4.0.8

Open the chart page →

5,141
conduction-uiconduction-ui0.1.01 of 6See more

conduction-ui conduction-ui 0.1.0

1 of the 6 container images this version deploys carry CVE-2024-4067.

Container imageDigestPackageFixed in
conduction/conduction-ui-app:devd591f5e6f2a9
micromatch@3.1.10
4.0.8

Open the chart page →

12,907
containers-security-chartscontainers-security0.1.01 of 7See more

containers-security-charts containers-security 0.1.0

1 of the 7 container images this version deploys carry CVE-2024-4067.

Container imageDigestPackageFixed in
coldatom/containers-security-front:latest7c2fbbb41bcf
micromatch@4.0.5
4.0.8

Open the chart page →

9,146
wazuhcsic-charts0.1.01 of 4See more

wazuh csic-charts 0.1.0

1 of the 4 container images this version deploys carry CVE-2024-4067.

Container imageDigestPackageFixed in
wazuh/wazuh-dashboard:4.4.11787550d2358
micromatch@3.1.10
4.0.8

Open the chart page →

13,852
desishowbiz-frontenddesishowbiz1.0.01 of 1See more

desishowbiz-frontend desishowbiz 1.0.0

1 of the 1 container images this version deploys carry CVE-2024-4067.

Container imageDigestPackageFixed in
rahulbhiwagade122/desishowbiz:latest08490b70998c
micromatch@4.0.5
4.0.8

Open the chart page →

2,529
amundsenduyet1.1.01 of 7See more

amundsen duyet 1.1.0

1 of the 7 container images this version deploys carry CVE-2024-4067.

Container imageDigestPackageFixed in
amundsendev/amundsen-frontend:2.1.169e7915e61c1
micromatch@3.1.10
4.0.8

Open the chart page →

11,174
frontend-charteks-3-tier-app-chart0.1.01 of 1See more

frontend-chart eks-3-tier-app-chart 0.1.0

1 of the 1 container images this version deploys carry CVE-2024-4067.

Container imageDigestPackageFixed in
arfath29/3-tier-app-frontend:latest384b3e377f47
micromatch@3.1.10
4.0.8

Open the chart page →

3,744
ethstatsethereum-helm-chartsVerified publisher0.1.41 of 1See more

ethstats ethereum-helm-charts 0.1.4

1 of the 1 container images this version deploys carry CVE-2024-4067.

Container imageDigestPackageFixed in
skylenet/ethstats-server:pow-latestd757cc016198
micromatch@4.0.5
4.0.8

Open the chart page →

1,109
testnet-faucetethereum-helm-chartsVerified publisher0.1.31 of 1See more

testnet-faucet ethereum-helm-charts 0.1.3

1 of the 1 container images this version deploys carry CVE-2024-4067.

Container imageDigestPackageFixed in
parithoshj/testnet-faucet:9859e0dcdca426fea6d
micromatch@3.1.10
4.0.8

Open the chart page →

3,005
bee-localchainethersphereVerified publisher0.2.01 of 1See more

bee-localchain ethersphere 0.2.0

1 of the 1 container images this version deploys carry CVE-2024-4067.

Container imageDigestPackageFixed in
ethersphere/bee-localchain:latest0558799ca992
micromatch@4.0.5
4.0.8

Open the chart page →

2,266
bzz-token-serviceethersphereVerified publisher0.2.01 of 1See more

bzz-token-service ethersphere 0.2.0

1 of the 1 container images this version deploys carry CVE-2024-4067.

Container imageDigestPackageFixed in
ethersphere/bzz-token-service:latest7624f11a72ad
micromatch@4.0.4
4.0.8

Open the chart page →

3,260
geth-swapethersphereVerified publisher0.6.31 of 2See more

geth-swap ethersphere 0.6.3

1 of the 2 container images this version deploys carry CVE-2024-4067.

Container imageDigestPackageFixed in
ethersphere/bee-localchain:latest0558799ca992
micromatch@4.0.5
4.0.8

Open the chart page →

4,756
onboarding-faucetethersphereVerified publisher0.2.01 of 1See more

onboarding-faucet ethersphere 0.2.0

1 of the 1 container images this version deploys carry CVE-2024-4067.

Container imageDigestPackageFixed in
ethersphere/onboarding-faucet:0.3.0513154aab230
micromatch@4.0.4
4.0.8

Open the chart page →

3,320
iotagent-ulfiware0.1.21 of 1See more

iotagent-ul fiware 0.1.2

1 of the 1 container images this version deploys carry CVE-2024-4067.

Container imageDigestPackageFixed in
fiware/iotagent-ul:1.14.0fe11f55a926d
micromatch@3.1.10
4.0.8

Open the chart page →

3,337
wekan-oldgabisonfire0.1.21 of 1See more

wekan-old gabisonfire 0.1.2

1 of the 1 container images this version deploys carry CVE-2024-4067.

Container imageDigestPackageFixed in
wekanteam/wekan:v4.2268a51f0327df
micromatch@2.3.11
4.0.8

Open the chart page →

5,941
nightscoutgeek-cookbookVerified publisher1.2.21 of 1See more

nightscout geek-cookbook 1.2.2

1 of the 1 container images this version deploys carry CVE-2024-4067.

Container imageDigestPackageFixed in
nightscout/cgm-remote-monitor:14.2.500c3b4833f1b
micromatch@4.0.2
4.0.8

Open the chart page →

4,043
shinobigeek-cookbookVerified publisher1.2.21 of 1See more

shinobi geek-cookbook 1.2.2

1 of the 1 container images this version deploys carry CVE-2024-4067.

Container imageDigestPackageFixed in
shinobisystems/shinobi:dev3ca746937856
micromatch@3.1.10
4.0.8

Open the chart page →

4,591
geonetwork-k8sgeonetwork-k8sVerified publisher4.2.81 of 5See more

geonetwork-k8s geonetwork-k8s 4.2.8

1 of the 5 container images this version deploys carry CVE-2024-4067.

Container imageDigestPackageFixed in
library/kibana:7.17.150172f1c538e7
micromatch@4.0.4
4.0.8

Open the chart page →

34,754
ghostghostVerified publisher0.1.01 of 4See more

ghost ghost 0.1.0

1 of the 4 container images this version deploys carry CVE-2024-4067.

Container imageDigestPackageFixed in
library/ghost:5.79.083f7bf209844
micromatch@3.1.10
4.0.8

Open the chart page →

9,019
Governify-Bluejaygovernify0.1.01 of 12See more

Governify-Bluejay governify 0.1.0

1 of the 12 container images this version deploys carry CVE-2024-4067.

Container imageDigestPackageFixed in
governify/registry:v3.4.0d3f37f4f8168
micromatch@4.0.2
4.0.8

Open the chart page →

22,512
Governify-Falcongovernify0.1.02 of 10See more

Governify-Falcon governify 0.1.0

2 of the 10 container images this version deploys carry CVE-2024-4067.

Container imageDigestPackageFixed in
governify/collector-dynamic:v1.3.06d3d1a5b46a9
micromatch@4.0.2
4.0.8
governify/registry:v3.4.0d3f37f4f8168
micromatch@4.0.2
4.0.8

Open the chart page →

24,319

Container images carrying it

185 by charts deploying them

A fixed version is listed for 1 of the 2 affected packages.

Container imageDigestPackageFixed inUsed by
ghcr.io/skooner-k8s/skooner:stable60c1562e4d51
micromatch@4.0.5
4.0.8
4
rcdelacruz/my-strapi-app:js-amd6438007f358355
micromatch@4.0.5
4.0.8
3
ghcr.io/kamilkisiela/graphql-hive/app:59b64c36c866b3555c135c70de76a884e63f8619a4a3639899f7
micromatch@4.0.5
4.0.8
3
agoldis/sorry-cypress-api:2.5.11afaa5a84051d
micromatch@4.0.2
4.0.8
2
amazon/opendistro-for-elasticsearch-kibana:1.13.2c740d7a89475
micromatch@3.1.10
4.0.8
2
chatwoot/chatwoot:v3.1.0d530ab8c1753
micromatch@3.1.10
4.0.8
2
ethersphere/bee-localchain:latest0558799ca992
micromatch@4.0.5
4.0.8
2
gjeanmart/safe-ganache-node:latest926264c8f2d1
micromatch@4.0.7
4.0.8
2
governify/registry:v3.4.0d3f37f4f8168
micromatch@4.0.2
4.0.8
2
gradiant/open5gs-webui:2.7.5fbd10c017541
micromatch@3.1.10
4.0.8
2
martinaif/backstage-k8s-demo-backend:test143bc40a3da0e
micromatch@4.0.2
4.0.8
2
mojaloop/central-ledger:v13.14.01abc8a7aa71c
micromatch@4.0.4
4.0.8
2
mojaloop/role-assignment-service:v2.1.0def4bf273721
micromatch@4.0.5
4.0.8
2
opensearchproject/opensearch-dashboards:1.0.039695180364b
micromatch@3.1.10
4.0.8
2
outlinewiki/outline:0.69.1d060dcd8f9aa
micromatch@4.0.5
4.0.8
2
requarks/wiki:2:latest68f0d1848261
micromatch@3.1.10
4.0.8
2
siscc/dotstatsuite-sdmx-faceted-search:master12c5048f7402
micromatch@3.1.10
4.0.8
2
stakater/stakater-nordmart-review-ui:1.0.143f4926eedc74
micromatch@4.0.4
4.0.8
2
ghcr.io/lissy93/dashy:2.1.1acb40032ad4b
micromatch@4.0.5
4.0.8
2
activepieces/activepieces:0.23.0c26188b44e62
micromatch@4.0.5
4.0.8
1
aktosecurity/akto-puppeteer-replay:doom_latest853e37321e6e
micromatch@4.0.5
4.0.8
1
amazon/opendistro-for-elasticsearch-kibana:1.4.05126e2e79a1f
micromatch@3.1.10
4.0.8
1
amundsendev/amundsen-frontend:2.1.169e7915e61c1
micromatch@3.1.10
4.0.8
1
aolde/bredbandskollen-prometheus-exporter:1.0.2dc61ee713720
micromatch@4.0.4
4.0.8
1
apache/superset:9cdaa280429ec297db16d56c94fd77b5d2aff107975ab033580d
micromatch@4.0.4
4.0.8
1
apimap/developer:v1.3.1406d3858e20c
micromatch@4.0.5
4.0.8
1
apimap/portal:v2.4.0041a4790c65c
micromatch@4.0.4
4.0.8
1
arfath29/3-tier-app-frontend:latest384b3e377f47
micromatch@3.1.10
4.0.8
1
assistiot/cybersecurity-monitoring_id-kbn:latest2297b4350211
micromatch@4.0.2
4.0.8
1
assistiot/cybersecurity-monitoring_ir-kbn:latest0570b27bb7c2
micromatch@4.0.2
4.0.8
1
assistiot/open_api_frontend:1.0.1f11d82defc70
micromatch@4.0.5
4.0.8
1
baserow/baserow:1.30.1df0c42eb67e8
micromatch@3.1.10
4.0.8
1
bicarus/mx-api-service:1.0.2-hf1dab88659ae3b
micromatch@4.0.5
4.0.8
1
bluerange/bluerange-mosquitto:25f1bfbba84832
micromatch@4.0.2
4.0.8
1
browserless/chrome:1.48.0-chrome-stablec81ae5585b47
micromatch@4.0.4
4.0.8
1
catalysm/csmm:latestf003b35f54d9
micromatch@2.3.11
4.0.8
1
ccjacobs14/amazon:59a9b14a6f09e
micromatch@4.0.5
4.0.8
1
chatwoot/chatwoot:v4.15.167ebc751c171
micromatch@3.1.10
4.0.8
1
chibisafe/chibisafe-server:latest3da4fcbc1a18
micromatch@4.0.5
4.0.8
1
coderaiser/cloudcmd:16.6.1b34a9775c7ce
micromatch@3.1.10
4.0.8
1
codercom/code-server:4.11.0-debian1e2cc688008e
micromatch@4.0.5
4.0.8
1
coldatom/containers-security-front:latest7c2fbbb41bcf
micromatch@4.0.5
4.0.8
1
conduction/conduction-ui-app:devd591f5e6f2a9
micromatch@3.1.10
4.0.8
1
countly/api:25.05.4f4cc7447c4f5
micromatch@4.0.5
4.0.8
1
countly/countly-server:25.05.4e3c238248f99
micromatch@4.0.5
4.0.8
1
countly/frontend:25.05.42acbc11499b6
micromatch@4.0.5
4.0.8
1
daskdev/dask-notebook:1.1.0052630f5ca04
micromatch@3.1.10
4.0.8
1
decayofmind/hubot:3.3.21e18e92fe694
micromatch@3.1.10
4.0.8
1
dipugodocker/pdf-editor:1.0-frontendd431c37fe1cd
micromatch@4.0.5
4.0.8
1
electerious/ackee:3.2.05e7173fa321c
micromatch@4.0.4
4.0.8
1

syft 1.42.1 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.