StackRadar

CVE-2024-4068

High

Advisory

Published 14 May 2024In the index since 6 Sept 2026
Severity
High
worst across findings
CVSS
7.5
base score, highest
EPSS
0.015
72nd percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
268
of 17,781 indexed, latest versions
Container images
262
deployed by those charts
Fix available
1 of 2
affected packages

Uncontrolled resource consumption in braces

Carried by container images the latest versions of 268 of 17,781 indexed charts deploy, on 262 images.

Affected packageAffected versionsFixed inImages
bracesnpm0.1.5, 1.8.2, 1.8.5, 2.3.1+2 more3.0.3262
node-bracesdeb3.0.2+~3.0.1-1no fix listed1
OSV records
GHSA-grv7-fg5c-xmjgUBUNTU-CVE-2024-4068

Charts affected

268 by stars
ChartLatestAffected imagesRadar Score
myweatherhelmmyweather1.3.111 of 7See more

myweatherhelm myweather 1.3.11

1 of the 7 container images this version deploys carry CVE-2024-4068.

Container imageDigestPackageFixed in
hecrom/myweatherprocessingreactclient:1.3.115454b54d5b28
braces@3.0.2
3.0.3

Open the chart page →

17,929
dashynas-helm-chartsVerified publisher1.0.41 of 1See more

dashy nas-helm-charts 1.0.4

1 of the 1 container images this version deploys carry CVE-2024-4068.

Container imageDigestPackageFixed in
lissy93/dashy:2.0.51991f7be5ed0
braces@3.0.2
3.0.3

Open the chart page →

3,269
smilencsaVerified publisher1.1.02 of 23See more

smile ncsa 1.1.0

2 of the 23 container images this version deploys carry CVE-2024-4068.

Container imageDigestPackageFixed in
socialmediamacroscope/smile_graphql:0.3.1c5095e94bc65
braces@1.8.5
3.0.3
socialmediamacroscope/smile_server:0.3.31a528c794270
braces@2.3.2
3.0.3

Open the chart page →

109,294
papergirlneoskop3.2.61 of 5See more

papergirl neoskop 3.2.6

1 of the 5 container images this version deploys carry CVE-2024-4068.

Container imageDigestPackageFixed in
neoskop/papergirl:3.2.67f52b5949f03
braces@3.0.2
3.0.3

Open the chart page →

6,982
nodeapp-chartnodeapp-chart0.1.01 of 1See more

nodeapp-chart nodeapp-chart 0.1.0

1 of the 1 container images this version deploys carry CVE-2024-4068.

Container imageDigestPackageFixed in
laly9999/node-app-dockerized:latest75ae77a20c6c
braces@3.0.2
3.0.3

Open the chart page →

1,118
indexer-toolsnodeifyVerified publisher2.1.11 of 1See more

indexer-tools nodeify 2.1.1

1 of the 1 container images this version deploys carry CVE-2024-4068.

Container imageDigestPackageFixed in
ghcr.io/vincenttaglia/indexer-tools:v3.4.45bae30456ddb
braces@3.0.2
3.0.3

Open the chart page →

2,919
notes-admin-front-helm-chartnotesprojectchart0.1.01 of 1See more

notes-admin-front-helm-chart notesprojectchart 0.1.0

1 of the 1 container images this version deploys carry CVE-2024-4068.

Container imageDigestPackageFixed in
vlebediantsev/notes-admin-front:latest007c6670ff48
braces@3.0.2
3.0.3

Open the chart page →

15,132
notes-project-fromt-helm-chartnotesprojectchart0.1.01 of 1See more

notes-project-fromt-helm-chart notesprojectchart 0.1.0

1 of the 1 container images this version deploys carry CVE-2024-4068.

Container imageDigestPackageFixed in
vlebediantsev/notes-project-front:latest945675fd2636
braces@3.0.2
3.0.3

Open the chart page →

15,206
registration-ms-front-helm-chartnotesprojectchart0.1.01 of 1See more

registration-ms-front-helm-chart notesprojectchart 0.1.0

1 of the 1 container images this version deploys carry CVE-2024-4068.

Container imageDigestPackageFixed in
vlebediantsev/registration-ms-front-app-host:latest54f69d116c50
braces@3.0.2
3.0.3

Open the chart page →

15,187
nottieawesomeappnottieawesomeapp0.1.01 of 1See more

nottieawesomeapp nottieawesomeapp 0.1.0

1 of the 1 container images this version deploys carry CVE-2024-4068.

Container imageDigestPackageFixed in
nottiey/mynodejswebapp:latest9c35a24c9eb3
braces@3.0.2
3.0.3

Open the chart page →

1,164
example-dev-toolsnoygal0.2.81 of 3See more

example-dev-tools noygal 0.2.8

1 of the 3 container images this version deploys carry CVE-2024-4068.

Container imageDigestPackageFixed in
linuxserver/codimd:latestb801bbcf6386
braces@3.0.2
3.0.3

Open the chart page →

27,465
ferdi-serverobeoneVerified publisher1.0.31 of 2See more

ferdi-server obeone 1.0.3

1 of the 2 container images this version deploys carry CVE-2024-4068.

Container imageDigestPackageFixed in
getferdi/ferdi-server:1.3.26e620b85afaa
braces@2.3.2
3.0.3

Open the chart page →

1,866
alquimia-studioopenshift0.2.01 of 1See more

alquimia-studio openshift 0.2.0

1 of the 1 container images this version deploys carry CVE-2024-4068.

Container imageDigestPackageFixed in
alquimiaai/studio:certification38a1f0341982
braces@3.0.2
3.0.3

Open the chart page →

2,370
dify-enterpriseopenshift3.9.82 of 13See more

dify-enterprise openshift 3.9.8

2 of the 13 container images this version deploys carry CVE-2024-4068.

Container imageDigestPackageFixed in
langgenius/dify-ee-enterprise-frontend:3.9.8-ubi98dd9de6b6190
braces@3.0.2
3.0.3
langgenius/dify-ee-web:3.9.8-ubi9ba1dd1d0bcea
braces@3.0.2
3.0.3

Open the chart page →

4,660
flomesh-consoleopenshift0.70.0-30-ubi81 of 2See more

flomesh-console openshift 0.70.0-30-ubi8

1 of the 2 container images this version deploys carry CVE-2024-4068.

Container imageDigestPackageFixed in
quay.io/flomesh/flomesh-console-ubi8:0.70.0-30ce6938ff6709
braces@2.3.2
3.0.3

Open the chart page →

9,968
ungatep2p-avs0.1.01 of 3See more

ungate p2p-avs 0.1.0

1 of the 3 container images this version deploys carry CVE-2024-4068.

Container imageDigestPackageFixed in
xom4ekp2p/infini-route-attestators-public-mainnet-avs-webapi:latest2745b5fd8785
braces@3.0.2
3.0.3

Open the chart page →

27,373
codimdphntom0.1.121 of 3See more

codimd phntom 0.1.12

1 of the 3 container images this version deploys carry CVE-2024-4068.

Container imageDigestPackageFixed in
phntom/codimd:2.4.31b9aafbb62e6
braces@3.0.2
3.0.3

Open the chart page →

6,524
kratos-selfservice-ui-noderadar-baseVerified publisher0.43.11 of 1See more

kratos-selfservice-ui-node radar-base 0.43.1

1 of the 1 container images this version deploys carry CVE-2024-4068.

Container imageDigestPackageFixed in
oryd/kratos-selfservice-ui-node:v0.13.0-20d454c21c11bc
braces@3.0.2
3.0.3

Open the chart page →

2,969
stackrox-chartredhat-cop0.0.101 of 1See more

stackrox-chart redhat-cop 0.0.10

1 of the 1 container images this version deploys carry CVE-2024-4068.

Container imageDigestPackageFixed in
quay.io/rht-labs/stack-do500:3.0.86ba82beff18e
braces@3.0.2
3.0.3

Open the chart page →

29,227
relfinder-reformedrelfinderreformed2.0.01 of 2See more

relfinder-reformed relfinderreformed 2.0.0

1 of the 2 container images this version deploys carry CVE-2024-4068.

Container imageDigestPackageFixed in
ghcr.io/woodenmaiden/relfinderreformedapi:1.1.20708d30433d4
braces@3.0.2
3.0.3

Open the chart page →

6,282
mastodonrivals-spaceVerified publisher3.1.21 of 3See more

mastodon rivals-space 3.1.2

1 of the 3 container images this version deploys carry CVE-2024-4068.

Container imageDigestPackageFixed in
ghcr.io/rivals-space/rivals-mastodon:1.6.143b23d55e4be
braces@3.0.2
3.0.3

Open the chart page →

6,026
gristrlex0.1.01 of 1See more

grist rlex 0.1.0

1 of the 1 container images this version deploys carry CVE-2024-4068.

Container imageDigestPackageFixed in
gristlabs/grist:0.7.96e71b1914a7e
braces@2.3.2
3.0.3

Open the chart page →

5,215
joplinrubxkubeVerified publisher1.3.11 of 2See more

joplin rubxkube 1.3.1

1 of the 2 container images this version deploys carry CVE-2024-4068.

Container imageDigestPackageFixed in
joplin/server:3.0-beta52af57880c0e
braces@3.0.2
3.0.3

Open the chart page →

7,413
unifi-protectschichtelVerified publisher0.10.11 of 1See more

unifi-protect schichtel 0.10.1

1 of the 1 container images this version deploys carry CVE-2024-4068.

Container imageDigestPackageFixed in
markdegroot/unifi-protect-arm64:latestd8445f2a0de6
braces@3.0.2
3.0.3

Open the chart page →

5,582
outlineschmitzis0.0.81 of 4See more

outline schmitzis 0.0.8

1 of the 4 container images this version deploys carry CVE-2024-4068.

Container imageDigestPackageFixed in
outlinewiki/outline:0.69.1d060dcd8f9aa
braces@3.0.2
3.0.3

Open the chart page →

4,431
wekanschmitzis1.1.11 of 1See more

wekan schmitzis 1.1.1

1 of the 1 container images this version deploys carry CVE-2024-4068.

Container imageDigestPackageFixed in
quay.io/wekan/wekan:v5.65cb17600883a3
braces@1.8.5
3.0.3

Open the chart page →

3,638
semaphoreschoenwald0.1.31 of 1See more

semaphore schoenwald 0.1.3

1 of the 1 container images this version deploys carry CVE-2024-4068.

Container imageDigestPackageFixed in
0hlov3/semaphore:v1.0.050f874ec096b
braces@3.0.2
3.0.3

Open the chart page →

1,796
dashysergiotocaliniVerified publisher1.0.01 of 1See more

dashy sergiotocalini 1.0.0

1 of the 1 container images this version deploys carry CVE-2024-4068.

Container imageDigestPackageFixed in
ghcr.io/lissy93/dashy:2.1.1acb40032ad4b
braces@3.0.2
3.0.3

Open the chart page →

3,143
parkingsikalabs0.1.01 of 1See more

parking sikalabs 0.1.0

1 of the 1 container images this version deploys carry CVE-2024-4068.

Container imageDigestPackageFixed in
ondrejsika/parking:latestb1fd497416c8
braces@3.0.2
3.0.3

Open the chart page →

3,696
skoonerskooner0.2.21 of 1See more

skooner skooner 0.2.2

1 of the 1 container images this version deploys carry CVE-2024-4068.

Container imageDigestPackageFixed in
ghcr.io/skooner-k8s/skooner:stable60c1562e4d51
braces@3.0.2
3.0.3

Open the chart page →

1,341
sneakerssneakers1.0.01 of 4See more

sneakers sneakers 1.0.0

1 of the 4 container images this version deploys carry CVE-2024-4068.

Container imageDigestPackageFixed in
helga09/shoes_ukr:v1.1.17999bc8b77c0
braces@3.0.2
3.0.3

Open the chart page →

7,574
speedtest-trackersoblivionscall3.0.41 of 1See more

speedtest-tracker soblivionscall 3.0.4

1 of the 1 container images this version deploys carry CVE-2024-4068.

Container imageDigestPackageFixed in
henrywhitaker3/speedtest-tracker:latest47159a940229
braces@2.3.2
3.0.3

Open the chart page →

2,460
sorry-cypresssoftonic1.20.02 of 4See more

sorry-cypress softonic 1.20.0

2 of the 4 container images this version deploys carry CVE-2024-4068.

Container imageDigestPackageFixed in
agoldis/sorry-cypress-api:2.5.11afaa5a84051d
braces@3.0.2
3.0.3
agoldis/sorry-cypress-director:2.5.1110228ecd353b
braces@3.0.2
3.0.3

Open the chart page →

4,285
pwssoketi0.2.41 of 1See more

pws soketi 0.2.4

1 of the 1 container images this version deploys carry CVE-2024-4068.

Container imageDigestPackageFixed in
quay.io/soketi/pws:0.8-16-alpine399d2e6b10ef
braces@3.0.2
3.0.3

Open the chart page →

3,228
speckle-server-branch-testingspeckleVerified publisher2.17.14-branch.testing.72707.921a5f81 of 5See more

speckle-server-branch-testing speckle 2.17.14-branch.testing.72707.921a5f8

1 of the 5 container images this version deploys carry CVE-2024-4068.

Container imageDigestPackageFixed in
speckle/speckle-server:2.17.14-branch.testing.72707.921a5f849d10dcdfb91
braces@3.0.2
3.0.3

Open the chart page →

14,679
speckle-server-branch-testing2speckleVerified publisher2.18.11-branch.testing2.88634-335d4691 of 5See more

speckle-server-branch-testing2 speckle 2.18.11-branch.testing2.88634-335d469

1 of the 5 container images this version deploys carry CVE-2024-4068.

Container imageDigestPackageFixed in
speckle/speckle-server:2.18.11-branch.testing2.88634-335d469bf6a501b2210
braces@3.0.2
3.0.3

Open the chart page →

14,221
speckle-server-branch-testing3speckleVerified publisher2.18.12-branch.testing3.88744-f55b3411 of 5See more

speckle-server-branch-testing3 speckle 2.18.12-branch.testing3.88744-f55b341

1 of the 5 container images this version deploys carry CVE-2024-4068.

Container imageDigestPackageFixed in
speckle/speckle-server:2.18.12-branch.testing3.88744-f55b34189a5872375f9
braces@3.0.2
3.0.3

Open the chart page →

14,221
nordmart-reviewstakaterVerified publisher0.0.61 of 3See more

nordmart-review stakater 0.0.6

1 of the 3 container images this version deploys carry CVE-2024-4068.

Container imageDigestPackageFixed in
stakater/stakater-nordmart-review-ui:1.0.143f4926eedc74
braces@2.3.2
3.0.3

Open the chart page →

11,554
nordmart-review-instancestakaterVerified publisher1.0.01 of 3See more

nordmart-review-instance stakater 1.0.0

1 of the 3 container images this version deploys carry CVE-2024-4068.

Container imageDigestPackageFixed in
stakater/stakater-nordmart-review-ui:1.0.143f4926eedc74
braces@2.3.2
3.0.3

Open the chart page →

11,554
workshop-exercisestakaterVerified publisher0.0.2601 of 1See more

workshop-exercise stakater 0.0.260

1 of the 1 container images this version deploys carry CVE-2024-4068.

Container imageDigestPackageFixed in
stakater/workshop-exercise:0.0.26076926b7159d3
braces@3.0.2
3.0.3

Open the chart page →

992
fdi-dotstatsuite-dlmstatcan0.3.11 of 1See more

fdi-dotstatsuite-dlm statcan 0.3.1

1 of the 1 container images this version deploys carry CVE-2024-4068.

Container imageDigestPackageFixed in
siscc/dotstatsuite-data-lifecycle-manager:v14.0.0b6f9a7c888fc
braces@1.8.5
3.0.3

Open the chart page →

3,881
fdi-dotstatsuite-sfs-solrstatcan1.0.21 of 4See more

fdi-dotstatsuite-sfs-solr statcan 1.0.2

1 of the 4 container images this version deploys carry CVE-2024-4068.

Container imageDigestPackageFixed in
siscc/dotstatsuite-sdmx-faceted-search:master12c5048f7402
braces@2.3.2
3.0.3

Open the chart page →

6,065
fdi-dotstatsuite-sfs-solr-statefulstatcan1.0.21 of 2See more

fdi-dotstatsuite-sfs-solr-stateful statcan 1.0.2

1 of the 2 container images this version deploys carry CVE-2024-4068.

Container imageDigestPackageFixed in
siscc/dotstatsuite-sdmx-faceted-search:master12c5048f7402
braces@2.3.2
3.0.3

Open the chart page →

919
swr-cache-proxyswr-cache-proxy0.2.01 of 1See more

swr-cache-proxy swr-cache-proxy 0.2.0

1 of the 1 container images this version deploys carry CVE-2024-4068.

Container imageDigestPackageFixed in
vividplanet/swr-cache-proxy:v1ae1c5b1cbecb
braces@3.0.2
3.0.3

Open the chart page →

13,719
trudesktechpreta1.0.01 of 3See more

trudesk techpreta 1.0.0

1 of the 3 container images this version deploys carry CVE-2024-4068.

Container imageDigestPackageFixed in
polonel/trudesk:1.2.60cf6513f6fe3
braces@2.3.2
3.0.3

Open the chart page →

4,017
vehicle-dashboardtest-vehi-dash0.1.02 of 7See more

vehicle-dashboard test-vehi-dash 0.1.0

2 of the 7 container images this version deploys carry CVE-2024-4068.

Container imageDigestPackageFixed in
samajh/alprbackend:latestea742b4372ad
braces@3.0.2
3.0.3
samajh/alprfrontend:latest05ef4fddbb75
braces@2.3.2
3.0.3

Open the chart page →

20,270
thanhvt27-lab-k8sthanh-vtVerified publisher0.1.41 of 5See more

thanhvt27-lab-k8s thanh-vt 0.1.4

1 of the 5 container images this version deploys carry CVE-2024-4068.

Container imageDigestPackageFixed in
pysga1996/python-redis-web:latestfdeec30ad482
braces@3.0.2
3.0.3

Open the chart page →

4,661
csmmth-chartsVerified publisher0.1.01 of 3See more

csmm th-charts 0.1.0

1 of the 3 container images this version deploys carry CVE-2024-4068.

Container imageDigestPackageFixed in
catalysm/csmm:latestf003b35f54d9
braces@1.8.5
3.0.3

Open the chart page →

3,576
pock-helm-charttinote-chart0.1.01 of 3See more

pock-helm-chart tinote-chart 0.1.0

1 of the 3 container images this version deploys carry CVE-2024-4068.

Container imageDigestPackageFixed in
denisshav/backend:latest4cc8dc5a4499
braces@3.0.2
3.0.3

Open the chart page →

6,881
joplintobiassackmann0.1.71 of 2See more

joplin tobiassackmann 0.1.7

1 of the 2 container images this version deploys carry CVE-2024-4068.

Container imageDigestPackageFixed in
joplin/server:latest3f7b852959aa
braces@3.0.2
3.0.3

Open the chart page →

5,535

Container images carrying it

262 by charts deploying them

A fixed version is listed for 1 of the 2 affected packages.

Container imageDigestPackageFixed inUsed by
ibmcom/app-nav-init:1.0.1240ff499eb5b
braces@1.8.2
3.0.3
1
ibmcom/app-nav-ui:1.0.1e2a86997b36b
braces@1.8.5
3.0.3
1
ibmcom/microclimate-file-watcher:latestab3fd1fdfa18
braces@2.3.1
3.0.3
1
ibmcom/microclimate-portal:latested5505e5c7ec
braces@1.8.5
3.0.3
1
interlayhq/interbtc-hydra-processor:master-2c6e16e-1637088364423d567d47aa
braces@3.0.2
3.0.3
1
jakowenko/double-take:1.6.0b858bac9e32a
braces@3.0.2
3.0.3
1
jayfong/yapi:1.10.2163e5d621910
braces@1.8.5
3.0.3
1
joplin/server:latest3f7b852959aa
braces@3.0.2
3.0.3
1
joplin/server:3.0-beta52af57880c0e
braces@3.0.2
3.0.3
1
joplin/server:2.14.2-betab87564ef34e9
braces@2.3.2
3.0.3
1
josepht05/nodejs-feb24:latest36cb0c618c94
braces@3.0.2
3.0.3
1
josepht05/titajo-docker:v1.0.0d94024965d78
braces@3.0.2
3.0.3
1
junktext/getting-started:1.0.5a70936c04aed
braces@3.0.2
3.0.3
1
junktext/getting-started:1.0.34d44adf5a4da2
braces@3.0.2
3.0.3
1
jupyterhub/jupyterhub:5.4.63974ba945e65
braces@3.0.2
node-braces@3.0.2+~3.0.1-1
3.0.3
no fix listed
1
keyoxide/keyoxide:stable96f27a71269d
braces@3.0.2
3.0.3
1
kobotoolbox/kpi:2.022.24dbcacc01bccd4
braces@2.3.2
3.0.3
1
konradkleine/docker-registry-frontend:v2181aad54ee64
braces@0.1.5
3.0.3
1
ktitilayo2/nodejswebapp:latest8bac28058688
braces@3.0.2
3.0.3
1
kubebb/bff-server:v0.2.0-202312040fbb732379bc
braces@3.0.2
3.0.3
1
kubebb/component-store:latestfd8ecbd73213
braces@3.0.2
3.0.3
1
kubevious/backend:1.2.22d9ba6eb46b6
braces@3.0.2
3.0.3
1
kubevious/collector:1.2.1f58226f9d84e
braces@3.0.2
3.0.3
1
kubevious/guard:1.2.19bf567704de2
braces@3.0.2
3.0.3
1
kubevious/parser:1.0.151acf1a1f0b47
braces@3.0.2
3.0.3
1
kubevious/parser:1.2.299ae7a5168c2
braces@3.0.2
3.0.3
1
kubevious/workload-operator:1.0.20b0f4c507eb6
braces@3.0.2
3.0.3
1
kyleslugg/klusterview:latestba8c36dfdfbd
braces@3.0.2
3.0.3
1
kyso/kyso-front:lateste52595c5c16f
braces@3.0.2
3.0.3
1
laly9999/node-app-dockerized:latest75ae77a20c6c
braces@3.0.2
3.0.3
1
langgenius/dify-ee-enterprise-frontend:3.9.8-ubi98dd9de6b6190
braces@3.0.2
3.0.3
1
langgenius/dify-ee-web:3.9.8-ubi9ba1dd1d0bcea
braces@3.0.2
3.0.3
1
lavandadelpatio/frontend:latest501c3f31e0bc
braces@3.0.2
3.0.3
1
library/ghost:6.25.12654b1e90413
braces@2.3.2
3.0.3
1
library/ghost:4.37.0767230c0f263
braces@2.3.2
3.0.3
1
library/ghost:5.79.083f7bf209844
braces@2.3.2
3.0.3
1
library/ghost:6.22.0-alpine3.23ac533a6988ee
braces@2.3.2
3.0.3
1
library/kibana:7.17.150172f1c538e7
braces@3.0.2
3.0.3
1
library/kibana:7.17.8c5781ba340ef
braces@3.0.2
3.0.3
1
library/kibana:7.17.3e2e2031c15be
braces@3.0.2
3.0.3
1
linuxserver/calibre:version-v5.21.0a847b5b2d860
braces@3.0.2
3.0.3
1
linuxserver/code-server:4.10.1a5e43a05ae79
braces@3.0.2
3.0.3
1
linuxserver/codimd:latestb801bbcf6386
braces@3.0.2
3.0.3
1
lissy93/dashy:2.0.51991f7be5ed0
braces@3.0.2
3.0.3
1
lsstsqre/squareone:0.4.09ded78e7fe03
braces@3.0.2
3.0.3
1
ltdstudio/terraforming-mars:latest0e76c6f4eac0
braces@3.0.2
3.0.3
1
markdegroot/unifi-protect-arm64:latestd8445f2a0de6
braces@3.0.2
3.0.3
1
minddocdev/hubot:0.1.96c60b11a4fa7
braces@2.3.2
3.0.3
1
misskey/misskey:12.110.1e08b7c478093
braces@3.0.2
3.0.3
1
mitchxxx/amazon:214e72480ec63a
braces@3.0.2
3.0.3
1

syft 1.42.1 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.