StackRadar

CVE-2024-4068

High

Advisory

Published 14 May 2024In the index since 6 Sept 2026
Severity
High
worst across findings
CVSS
7.5
base score, highest
EPSS
0.015
72nd percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
268
of 17,781 indexed, latest versions
Container images
262
deployed by those charts
Fix available
1 of 2
affected packages

Uncontrolled resource consumption in braces

Carried by container images the latest versions of 268 of 17,781 indexed charts deploy, on 262 images.

Affected packageAffected versionsFixed inImages
bracesnpm0.1.5, 1.8.2, 1.8.5, 2.3.1+2 more3.0.3262
node-bracesdeb3.0.2+~3.0.1-1no fix listed1
OSV records
GHSA-grv7-fg5c-xmjgUBUNTU-CVE-2024-4068

Charts affected

268 by stars
ChartLatestAffected imagesRadar Score
chibisafel4gVerified publisher0.1.11 of 3See more

chibisafe l4g 0.1.1

1 of the 3 container images this version deploys carry CVE-2024-4068.

Container imageDigestPackageFixed in
chibisafe/chibisafe-server:latest3da4fcbc1a18
braces@3.0.2
3.0.3

Open the chart page →

5,654
chatwootmaxcrm-chartsVerified publisher1.1.2011 of 4See more

chatwoot maxcrm-charts 1.1.201

1 of the 4 container images this version deploys carry CVE-2024-4068.

Container imageDigestPackageFixed in
chatwoot/chatwoot:v3.1.0d530ab8c1753
braces@2.3.2
3.0.3

Open the chart page →

5,940
open5gs-webuiopen5gs-webuiVerified publisher2.3.11 of 2See more

open5gs-webui open5gs-webui 2.3.1

1 of the 2 container images this version deploys carry CVE-2024-4068.

Container imageDigestPackageFixed in
gradiant/open5gs-webui:2.7.5fbd10c017541
braces@2.3.2
3.0.3

Open the chart page →

5,300
pdf-editor-helmpdf-editor-web1.0.01 of 4See more

pdf-editor-helm pdf-editor-web 1.0.0

1 of the 4 container images this version deploys carry CVE-2024-4068.

Container imageDigestPackageFixed in
dipugodocker/pdf-editor:1.0-frontendd431c37fe1cd
braces@3.0.2
3.0.3

Open the chart page →

4,206
portraitportraitVerified publisher0.2.132 of 8See more

portrait portrait 0.2.13

2 of the 8 container images this version deploys carry CVE-2024-4068.

Container imageDigestPackageFixed in
codercom/code-server:4.11.0-debian1e2cc688008e
braces@3.0.2
3.0.3
treskon/portrait-ui:DEV-lateste7970783bc8d
braces@3.0.2
3.0.3

Open the chart page →

31,844
pumejwebapppumejnodejswebapp0.1.01 of 1See more

pumejwebapp pumejnodejswebapp 0.1.0

1 of the 1 container images this version deploys carry CVE-2024-4068.

Container imageDigestPackageFixed in
pumejlab/nodejs-webapp:latestf563eabcb819
braces@3.0.2
3.0.3

Open the chart page →

1,164
kibanaromanow-helm-chartsVerified publisher1.7.11 of 1See more

kibana romanow-helm-charts 1.7.1

1 of the 1 container images this version deploys carry CVE-2024-4068.

Container imageDigestPackageFixed in
library/kibana:7.17.8c5781ba340ef
braces@3.0.2
3.0.3

Open the chart page →

6,879
ackeesudaVerified publisher0.2.11 of 1See more

ackee suda 0.2.1

1 of the 1 container images this version deploys carry CVE-2024-4068.

Container imageDigestPackageFixed in
electerious/ackee:3.2.05e7173fa321c
braces@3.0.2
3.0.3

Open the chart page →

1,602
testhubteshubVerified publisher0.1.41 of 3See more

testhub teshub 0.1.4

1 of the 3 container images this version deploys carry CVE-2024-4068.

Container imageDigestPackageFixed in
testhubio/testhub-frontend:on-preme86c2db53be8
braces@2.3.2
3.0.3

Open the chart page →

7,517
taigaunxwaresVerified publisher2026.3.81 of 6See more

taiga unxwares 2026.3.8

1 of the 6 container images this version deploys carry CVE-2024-4068.

Container imageDigestPackageFixed in
taigaio/taiga-events:latest92fc0822564f
braces@3.0.2
3.0.3

Open the chart page →

9,148
wikiwenerme2.2.01 of 2See more

wiki wenerme 2.2.0

1 of the 2 container images this version deploys carry CVE-2024-4068.

Container imageDigestPackageFixed in
requarks/wiki:latest68f0d1848261
braces@2.3.2
3.0.3

Open the chart page →

3,833
scrapoxywiremindVerified publisher0.3.41 of 1See more

scrapoxy wiremind 0.3.4

1 of the 1 container images this version deploys carry CVE-2024-4068.

Container imageDigestPackageFixed in
wiremind/scrapoxy:lateste7048929a676
braces@2.3.2
3.0.3

Open the chart page →

2,154
youtubedl-materialyoutubedl-materialVerified publisher0.0.11 of 1See more

youtubedl-material youtubedl-material 0.0.1

1 of the 1 container images this version deploys carry CVE-2024-4068.

Container imageDigestPackageFixed in
tzahi12345/youtubedl-material:latest2f943d584711
braces@3.0.2
3.0.3

Open the chart page →

9,783
open5gsadaptivenetlabVerified publisher1.0.31 of 3See more

open5gs adaptivenetlab 1.0.3

1 of the 3 container images this version deploys carry CVE-2024-4068.

Container imageDigestPackageFixed in
registry.gitlab.com/infinitydon/registry/open5gs-webui:v2.2.2fda21b0a0344
braces@2.3.2
3.0.3

Open the chart page →

25,443
adeptia-automate-mcpadeptia-automate-mcp1.0.02 of 2See more

adeptia-automate-mcp adeptia-automate-mcp 1.0.0

2 of the 2 container images this version deploys carry CVE-2024-4068.

Container imageDigestPackageFixed in
adeptiainc/adeptia-automate-mcp-server:1.0.0283001e83739
braces@3.0.2
3.0.3
adeptiainc/adeptia-automate-observe:1.0.031f295e948e6
braces@3.0.2
3.0.3

Open the chart page →

3,600
akto-source-code-analyserakto0.1.51 of 3See more

akto-source-code-analyser akto 0.1.5

1 of the 3 container images this version deploys carry CVE-2024-4068.

Container imageDigestPackageFixed in
aktosecurity/akto-puppeteer-replay:doom_latest853e37321e6e
braces@3.0.2
3.0.3

Open the chart page →

4,880
katalogalpineworks0.1.21 of 5See more

katalog alpineworks 0.1.2

1 of the 5 container images this version deploys carry CVE-2024-4068.

Container imageDigestPackageFixed in
ghcr.io/alpineworks/katalog-frontend:v1.0.734b76dcb1c10
braces@3.0.2
3.0.3

Open the chart page →

4,497
openhab-cloudandibraeuVerified publisher1.2.61 of 1See more

openhab-cloud andibraeu 1.2.6

1 of the 1 container images this version deploys carry CVE-2024-4068.

Container imageDigestPackageFixed in
openhab/openhab-cloud:a8138a329dd2bac8c4b
braces@3.0.2
3.0.3

Open the chart page →

3,437
angular-chartangular-application0.1.01 of 1See more

angular-chart angular-application 0.1.0

1 of the 1 container images this version deploys carry CVE-2024-4068.

Container imageDigestPackageFixed in
ibarreche/cloud-front-ci:latestc8970ac1c8dc
braces@1.8.5
3.0.3

Open the chart page →

3,237
angular-node-chartangular-webapp2.0.01 of 1See more

angular-node-chart angular-webapp 2.0.0

1 of the 1 container images this version deploys carry CVE-2024-4068.

Container imageDigestPackageFixed in
rakii8585/angular-node-webapp:latest026082a515ac
braces@3.0.2
3.0.3

Open the chart page →

2,616
lametric-nightscout-proxyaolde0.1.01 of 1See more

lametric-nightscout-proxy aolde 0.1.0

1 of the 1 container images this version deploys carry CVE-2024-4068.

Container imageDigestPackageFixed in
ghcr.io/aolde/lametric-nightscout-proxy:latest7d1951b6baf5
braces@3.0.2
3.0.3

Open the chart page →

1,186
apimap-developerapimapOfficialVerified publisher1.4.11 of 1See more

apimap-developer apimap 1.4.1

1 of the 1 container images this version deploys carry CVE-2024-4068.

Container imageDigestPackageFixed in
apimap/developer:v1.3.1406d3858e20c
braces@3.0.2
3.0.3

Open the chart page →

2,353
apimap-portalapimapOfficialVerified publisher2.4.01 of 1See more

apimap-portal apimap 2.4.0

1 of the 1 container images this version deploys carry CVE-2024-4068.

Container imageDigestPackageFixed in
apimap/portal:v2.4.0041a4790c65c
braces@3.0.2
3.0.3

Open the chart page →

2,396
agenthttpmqttassist-iot-composite-services1.0.01 of 1See more

agenthttpmqtt assist-iot-composite-services 1.0.0

1 of the 1 container images this version deploys carry CVE-2024-4068.

Container imageDigestPackageFixed in
assistiot/composite-services-manager_agent-http-mqtt:latest16d21bc5e42e
braces@3.0.2
3.0.3

Open the chart page →

1,158
agentmqtthttpassist-iot-composite-services1.0.01 of 1See more

agentmqtthttp assist-iot-composite-services 1.0.0

1 of the 1 container images this version deploys carry CVE-2024-4068.

Container imageDigestPackageFixed in
assistiot/composite-services-manager_agent-mqtt-http:latest27d58b8911cd
braces@3.0.2
3.0.3

Open the chart page →

1,158
dltkvassist-iot-data-integrity-verification0.2.01 of 9See more

dltkv assist-iot-data-integrity-verification 0.2.0

1 of the 9 container images this version deploys carry CVE-2024-4068.

Container imageDigestPackageFixed in
assistiot/dlt_api:2.0.0e36a8922fa0c
braces@3.0.2
3.0.3

Open the chart page →

77,706
dltflassist-iot-dlt-based-fl0.2.01 of 9See more

dltfl assist-iot-dlt-based-fl 0.2.0

1 of the 9 container images this version deploys carry CVE-2024-4068.

Container imageDigestPackageFixed in
assistiot/dlt_api:2.1.0c8a170683be7
braces@3.0.2
3.0.3

Open the chart page →

77,706
fl-orchestrator-guiassist-iot-fl-orchestrator0.1.01 of 3See more

fl-orchestrator-gui assist-iot-fl-orchestrator 0.1.0

1 of the 3 container images this version deploys carry CVE-2024-4068.

Container imageDigestPackageFixed in
assistiot/fl_orchestrator:api-latest7473d77448e1
braces@3.0.2
3.0.3

Open the chart page →

9,369
monitoring-notifyingassist-iot-monitoring-notifying0.1.01 of 1See more

monitoring-notifying assist-iot-monitoring-notifying 0.1.0

1 of the 1 container images this version deploys carry CVE-2024-4068.

Container imageDigestPackageFixed in
assistiot/monitoring_notifying:2.0.068324d0fa5bb
braces@3.0.2
3.0.3

Open the chart page →

1,677
multilink-clientassist-iot-multi-link-client-app1.0.01 of 2See more

multilink-client assist-iot-multi-link-client-app 1.0.0

1 of the 2 container images this version deploys carry CVE-2024-4068.

Container imageDigestPackageFixed in
assistiot/multi-link_client:latestcf048365d042
braces@3.0.2
3.0.3

Open the chart page →

1,446
openapiassist-iot-open-api-management0.2.21 of 6See more

openapi assist-iot-open-api-management 0.2.2

1 of the 6 container images this version deploys carry CVE-2024-4068.

Container imageDigestPackageFixed in
assistiot/open_api_frontend:1.0.1f11d82defc70
braces@3.0.2
3.0.3

Open the chart page →

18,277
smartorchestratorassist-iot-smart-orchestrator4.0.03 of 14See more

smartorchestrator assist-iot-smart-orchestrator 4.0.0

3 of the 14 container images this version deploys carry CVE-2024-4068.

Container imageDigestPackageFixed in
assistiot/smart-orchestrator_cluster:latest4f41e1defe99
braces@3.0.2
3.0.3
assistiot/smart-orchestrator_enabler:latest89f37e88c871
braces@3.0.2
3.0.3
assistiot/smart-orchestrator_repository:latesta8b8dbed04a4
braces@3.0.2
3.0.3

Open the chart page →

45,363
astrotrekastria0.0.21 of 4See more

astrotrek astria 0.0.2

1 of the 4 container images this version deploys carry CVE-2024-4068.

Container imageDigestPackageFixed in
ghcr.io/astriaorg/astrotrek:0.1.05889bea38e56
braces@3.0.2
3.0.3

Open the chart page →

32,501
nas-appsawesomeVerified publisher2.0.01 of 8See more

nas-apps awesome 2.0.0

1 of the 8 container images this version deploys carry CVE-2024-4068.

Container imageDigestPackageFixed in
ltdstudio/terraforming-mars:latest0e76c6f4eac0
braces@3.0.2
3.0.3

Open the chart page →

7,152
awesomeblessingappawesomeblessingapp1.1.01 of 1See more

awesomeblessingapp awesomeblessingapp 1.1.0

1 of the 1 container images this version deploys carry CVE-2024-4068.

Container imageDigestPackageFixed in
bnwokoye/nodejswebapp:latest74de7dc7ebfb
braces@3.0.2
3.0.3

Open the chart page →

1,267
opendistro-esbeeinventor1.15.11 of 3See more

opendistro-es beeinventor 1.15.1

1 of the 3 container images this version deploys carry CVE-2024-4068.

Container imageDigestPackageFixed in
amazon/opendistro-for-elasticsearch-kibana:1.13.2c740d7a89475
braces@3.0.2
3.0.3

Open the chart page →

5,806
myhelmappbelihelmapp1.1.01 of 1See more

myhelmapp belihelmapp 1.1.0

1 of the 1 container images this version deploys carry CVE-2024-4068.

Container imageDigestPackageFixed in
belirta/beli-docker:v1.0.0f65ad0e23b4d
braces@3.0.2
3.0.3

Open the chart page →

1,187
mx-apibicarus-labs0.1.01 of 4See more

mx-api bicarus-labs 0.1.0

1 of the 4 container images this version deploys carry CVE-2024-4068.

Container imageDigestPackageFixed in
bicarus/mx-api-service:1.0.2-hf1dab88659ae3b
braces@3.0.2
3.0.3

Open the chart page →

4,455
bluerange-mosquittobluerangeOfficialVerified publisher1.0.41 of 1See more

bluerange-mosquitto bluerange 1.0.4

1 of the 1 container images this version deploys carry CVE-2024-4068.

Container imageDigestPackageFixed in
bluerange/bluerange-mosquitto:25f1bfbba84832
braces@3.0.2
3.0.3

Open the chart page →

1,168
registry-uibryanalves0.2.01 of 1See more

registry-ui bryanalves 0.2.0

1 of the 1 container images this version deploys carry CVE-2024-4068.

Container imageDigestPackageFixed in
konradkleine/docker-registry-frontend:v2181aad54ee64
braces@0.1.5
3.0.3

Open the chart page →

4,069
ghostchart-ghost0.1.51 of 2See more

ghost chart-ghost 0.1.5

1 of the 2 container images this version deploys carry CVE-2024-4068.

Container imageDigestPackageFixed in
library/ghost:6.22.0-alpine3.23ac533a6988ee
braces@2.3.2
3.0.3

Open the chart page →

4,083
daskcloudnativeapp2.2.11 of 2See more

dask cloudnativeapp 2.2.1

1 of the 2 container images this version deploys carry CVE-2024-4068.

Container imageDigestPackageFixed in
daskdev/dask-notebook:1.1.0052630f5ca04
braces@2.3.2
3.0.3

Open the chart page →

29,901
ethereumcloudnativeapp1.0.01 of 3See more

ethereum cloudnativeapp 1.0.0

1 of the 3 container images this version deploys carry CVE-2024-4068.

Container imageDigestPackageFixed in
ethereumex/eth-stats-dashboard:v0.0.1a7603aa8df4c
braces@1.8.5
3.0.3

Open the chart page →

27,417
hubotcloudnativeapp0.0.11 of 1See more

hubot cloudnativeapp 0.0.1

1 of the 1 container images this version deploys carry CVE-2024-4068.

Container imageDigestPackageFixed in
minddocdev/hubot:0.1.96c60b11a4fa7
braces@2.3.2
3.0.3

Open the chart page →

2,580
developer-dashboardcloud-native-toolkit1.4.11 of 1See more

developer-dashboard cloud-native-toolkit 1.4.1

1 of the 1 container images this version deploys carry CVE-2024-4068.

Container imageDigestPackageFixed in
quay.io/ibmgaragecloud/developer-dashboard:v1.4.47a4b9fedc724
braces@3.0.2
3.0.3

Open the chart page →

25,456
codehubcodehubVerified publisher6.2.181 of 5See more

codehub codehub 6.2.18

1 of the 5 container images this version deploys carry CVE-2024-4068.

Container imageDigestPackageFixed in
jupyterhub/jupyterhub:5.4.63974ba945e65
braces@3.0.2
node-braces@3.0.2+~3.0.1-1
3.0.3
no fix listed

Open the chart page →

13,220
coderstudio-strapi-devcoderstudio-strapi-devVerified publisher0.0.11 of 3See more

coderstudio-strapi-dev coderstudio-strapi-dev 0.0.1

1 of the 3 container images this version deploys carry CVE-2024-4068.

Container imageDigestPackageFixed in
rcdelacruz/my-strapi-app:js-amd6438007f358355
braces@2.3.2
3.0.3

Open the chart page →

5,141
docker-composecoderstudio-strapi-devVerified publisher0.0.11 of 3See more

docker-compose coderstudio-strapi-dev 0.0.1

1 of the 3 container images this version deploys carry CVE-2024-4068.

Container imageDigestPackageFixed in
rcdelacruz/my-strapi-app:js-amd6438007f358355
braces@2.3.2
3.0.3

Open the chart page →

5,141
strapi-devcoderstudio-strapi-devVerified publisher0.0.11 of 3See more

strapi-dev coderstudio-strapi-dev 0.0.1

1 of the 3 container images this version deploys carry CVE-2024-4068.

Container imageDigestPackageFixed in
rcdelacruz/my-strapi-app:js-amd6438007f358355
braces@2.3.2
3.0.3

Open the chart page →

5,141
conduction-uiconduction-ui0.1.01 of 6See more

conduction-ui conduction-ui 0.1.0

1 of the 6 container images this version deploys carry CVE-2024-4068.

Container imageDigestPackageFixed in
conduction/conduction-ui-app:devd591f5e6f2a9
braces@2.3.2
3.0.3

Open the chart page →

12,907

Container images carrying it

262 by charts deploying them

A fixed version is listed for 1 of the 2 affected packages.

Container imageDigestPackageFixed inUsed by
assistiot/fl_orchestrator:api-latest7473d77448e1
braces@3.0.2
3.0.3
1
assistiot/monitoring_notifying:2.0.068324d0fa5bb
braces@3.0.2
3.0.3
1
assistiot/multi-link_client:latestcf048365d042
braces@3.0.2
3.0.3
1
assistiot/open_api_frontend:1.0.1f11d82defc70
braces@3.0.2
3.0.3
1
assistiot/smart-orchestrator_cluster:latest4f41e1defe99
braces@3.0.2
3.0.3
1
assistiot/smart-orchestrator_enabler:latest89f37e88c871
braces@3.0.2
3.0.3
1
assistiot/smart-orchestrator_repository:latesta8b8dbed04a4
braces@3.0.2
3.0.3
1
baserow/baserow:1.30.1df0c42eb67e8
braces@3.0.2
3.0.3
1
belirta/beli-docker:v1.0.0f65ad0e23b4d
braces@3.0.2
3.0.3
1
bicarus/mx-api-service:1.0.2-hf1dab88659ae3b
braces@3.0.2
3.0.3
1
bluerange/bluerange-mosquitto:25f1bfbba84832
braces@3.0.2
3.0.3
1
bnwokoye/nodejswebapp:latest74de7dc7ebfb
braces@3.0.2
3.0.3
1
browserless/chrome:1.48.0-chrome-stablec81ae5585b47
braces@3.0.2
3.0.3
1
catalysm/csmm:latestf003b35f54d9
braces@1.8.5
3.0.3
1
ccjacobs14/amazon:59a9b14a6f09e
braces@3.0.2
3.0.3
1
chatwoot/chatwoot:v4.15.167ebc751c171
braces@3.0.2
3.0.3
1
chibisafe/chibisafe-server:latest3da4fcbc1a18
braces@3.0.2
3.0.3
1
coderaiser/cloudcmd:16.6.1b34a9775c7ce
braces@2.3.2
3.0.3
1
codercom/code-server:4.11.0-debian1e2cc688008e
braces@3.0.2
3.0.3
1
codercom/code-server:3.10.247605610ad8d
braces@3.0.2
3.0.3
1
coldatom/containers-security-front:latest7c2fbbb41bcf
braces@3.0.2
3.0.3
1
conduction/conduction-ui-app:devd591f5e6f2a9
braces@2.3.2
3.0.3
1
dacinfomotion/h2p:latest68fa393b472c
braces@3.0.2
3.0.3
1
danny1dockerhub/nodejswebapp:lateste434683fcc89
braces@3.0.2
3.0.3
1
daskdev/dask-notebook:1.1.0052630f5ca04
braces@2.3.2
3.0.3
1
decayofmind/hubot:3.3.21e18e92fe694
braces@2.3.2
3.0.3
1
denisshav/backend:latest4cc8dc5a4499
braces@3.0.2
3.0.3
1
dipugodocker/pdf-editor:1.0-frontendd431c37fe1cd
braces@3.0.2
3.0.3
1
electerious/ackee:3.2.05e7173fa321c
braces@3.0.2
3.0.3
1
enketo/enketo-express:3.0.4dcad9c2273f6
braces@3.0.2
3.0.3
1
ethereumex/eth-stats-dashboard:v0.0.1a7603aa8df4c
braces@1.8.5
3.0.3
1
ethereumoptimism/data-transport-layer:0.5.56e07968a0e686
braces@3.0.2
3.0.3
1
ethersphere/bzz-token-service:latest7624f11a72ad
braces@3.0.2
3.0.3
1
ethersphere/onboarding-faucet:0.3.0513154aab230
braces@3.0.2
3.0.3
1
factly/mande-web:0.34.1742355964b0e
braces@3.0.2
3.0.3
1
fiware/idm:8.3.3a1b6ed4ae84f
braces@3.0.2
3.0.3
1
fiware/iotagent-ul:1.14.0fe11f55a926d
braces@2.3.2
3.0.3
1
flagsmith/flagsmith-frontend:v2.6.0df02a29e8b0c
braces@3.0.2
3.0.3
1
getferdi/ferdi-server:1.3.26e620b85afaa
braces@2.3.2
3.0.3
1
governify/collector-dynamic:v1.3.06d3d1a5b46a9
braces@3.0.2
3.0.3
1
gristlabs/grist:0.7.96e71b1914a7e
braces@2.3.2
3.0.3
1
hamid2021/nodejs-dockercli:latest429d99890c3c
braces@3.0.2
3.0.3
1
hecrom/myweatherprocessingreactclient:1.3.115454b54d5b28
braces@3.0.2
3.0.3
1
helga09/shoes_ukr:v1.1.17999bc8b77c0
braces@3.0.2
3.0.3
1
henrywhitaker3/speedtest-tracker:latest47159a940229
braces@2.3.2
3.0.3
1
heywood8/redisinsight:2.28.00bc9ab313d37
braces@2.3.2
3.0.3
1
hkotel/mealie:frontend-v1.0.0beta-23c04c0e85039
braces@3.0.2
3.0.3
1
ianw/quickchart:v1.7.1dc49dd460c37
braces@3.0.2
3.0.3
1
ibarreche/cloud-front-ci:latestc8970ac1c8dc
braces@1.8.5
3.0.3
1
ibarreche/cloud-indexer-ci:latestb7a08274e69f
braces@3.0.2
3.0.3
1

syft 1.42.1 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.