StackRadar

CVE-2024-4068

High

Advisory

Published 14 May 2024In the index since 6 Sept 2026
Severity
High
worst across findings
CVSS
7.5
base score, highest
EPSS
0.015
72nd percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
268
of 17,781 indexed, latest versions
Container images
262
deployed by those charts
Fix available
1 of 2
affected packages

Uncontrolled resource consumption in braces

Carried by container images the latest versions of 268 of 17,781 indexed charts deploy, on 262 images.

Affected packageAffected versionsFixed inImages
bracesnpm0.1.5, 1.8.2, 1.8.5, 2.3.1+2 more3.0.3262
node-bracesdeb3.0.2+~3.0.1-1no fix listed1
OSV records
GHSA-grv7-fg5c-xmjgUBUNTU-CVE-2024-4068

Charts affected

268 by stars
ChartLatestAffected imagesRadar Score
chibisafel4gVerified publisher0.1.11 of 3See more

chibisafe l4g 0.1.1

1 of the 3 container images this version deploys carry CVE-2024-4068.

Container imageDigestPackageFixed in
chibisafe/chibisafe-server:latest3da4fcbc1a18
braces@3.0.2
3.0.3

Open the chart page →

5,654
chatwootmaxcrm-chartsVerified publisher1.1.2011 of 4See more

chatwoot maxcrm-charts 1.1.201

1 of the 4 container images this version deploys carry CVE-2024-4068.

Container imageDigestPackageFixed in
chatwoot/chatwoot:v3.1.0d530ab8c1753
braces@2.3.2
3.0.3

Open the chart page →

5,940
open5gs-webuiopen5gs-webuiVerified publisher2.3.11 of 2See more

open5gs-webui open5gs-webui 2.3.1

1 of the 2 container images this version deploys carry CVE-2024-4068.

Container imageDigestPackageFixed in
gradiant/open5gs-webui:2.7.5fbd10c017541
braces@2.3.2
3.0.3

Open the chart page →

5,300
pdf-editor-helmpdf-editor-web1.0.01 of 4See more

pdf-editor-helm pdf-editor-web 1.0.0

1 of the 4 container images this version deploys carry CVE-2024-4068.

Container imageDigestPackageFixed in
dipugodocker/pdf-editor:1.0-frontendd431c37fe1cd
braces@3.0.2
3.0.3

Open the chart page →

4,206
portraitportraitVerified publisher0.2.132 of 8See more

portrait portrait 0.2.13

2 of the 8 container images this version deploys carry CVE-2024-4068.

Container imageDigestPackageFixed in
codercom/code-server:4.11.0-debian1e2cc688008e
braces@3.0.2
3.0.3
treskon/portrait-ui:DEV-lateste7970783bc8d
braces@3.0.2
3.0.3

Open the chart page →

31,844
pumejwebapppumejnodejswebapp0.1.01 of 1See more

pumejwebapp pumejnodejswebapp 0.1.0

1 of the 1 container images this version deploys carry CVE-2024-4068.

Container imageDigestPackageFixed in
pumejlab/nodejs-webapp:latestf563eabcb819
braces@3.0.2
3.0.3

Open the chart page →

1,164
kibanaromanow-helm-chartsVerified publisher1.7.11 of 1See more

kibana romanow-helm-charts 1.7.1

1 of the 1 container images this version deploys carry CVE-2024-4068.

Container imageDigestPackageFixed in
library/kibana:7.17.8c5781ba340ef
braces@3.0.2
3.0.3

Open the chart page →

6,879
ackeesudaVerified publisher0.2.11 of 1See more

ackee suda 0.2.1

1 of the 1 container images this version deploys carry CVE-2024-4068.

Container imageDigestPackageFixed in
electerious/ackee:3.2.05e7173fa321c
braces@3.0.2
3.0.3

Open the chart page →

1,602
testhubteshubVerified publisher0.1.41 of 3See more

testhub teshub 0.1.4

1 of the 3 container images this version deploys carry CVE-2024-4068.

Container imageDigestPackageFixed in
testhubio/testhub-frontend:on-preme86c2db53be8
braces@2.3.2
3.0.3

Open the chart page →

7,517
taigaunxwaresVerified publisher2026.3.81 of 6See more

taiga unxwares 2026.3.8

1 of the 6 container images this version deploys carry CVE-2024-4068.

Container imageDigestPackageFixed in
taigaio/taiga-events:latest92fc0822564f
braces@3.0.2
3.0.3

Open the chart page →

9,148
wikiwenerme2.2.01 of 2See more

wiki wenerme 2.2.0

1 of the 2 container images this version deploys carry CVE-2024-4068.

Container imageDigestPackageFixed in
requarks/wiki:latest68f0d1848261
braces@2.3.2
3.0.3

Open the chart page →

3,833
scrapoxywiremindVerified publisher0.3.41 of 1See more

scrapoxy wiremind 0.3.4

1 of the 1 container images this version deploys carry CVE-2024-4068.

Container imageDigestPackageFixed in
wiremind/scrapoxy:lateste7048929a676
braces@2.3.2
3.0.3

Open the chart page →

2,154
youtubedl-materialyoutubedl-materialVerified publisher0.0.11 of 1See more

youtubedl-material youtubedl-material 0.0.1

1 of the 1 container images this version deploys carry CVE-2024-4068.

Container imageDigestPackageFixed in
tzahi12345/youtubedl-material:latest2f943d584711
braces@3.0.2
3.0.3

Open the chart page →

9,783
open5gsadaptivenetlabVerified publisher1.0.31 of 3See more

open5gs adaptivenetlab 1.0.3

1 of the 3 container images this version deploys carry CVE-2024-4068.

Container imageDigestPackageFixed in
registry.gitlab.com/infinitydon/registry/open5gs-webui:v2.2.2fda21b0a0344
braces@2.3.2
3.0.3

Open the chart page →

25,443
adeptia-automate-mcpadeptia-automate-mcp1.0.02 of 2See more

adeptia-automate-mcp adeptia-automate-mcp 1.0.0

2 of the 2 container images this version deploys carry CVE-2024-4068.

Container imageDigestPackageFixed in
adeptiainc/adeptia-automate-mcp-server:1.0.0283001e83739
braces@3.0.2
3.0.3
adeptiainc/adeptia-automate-observe:1.0.031f295e948e6
braces@3.0.2
3.0.3

Open the chart page →

3,600
akto-source-code-analyserakto0.1.51 of 3See more

akto-source-code-analyser akto 0.1.5

1 of the 3 container images this version deploys carry CVE-2024-4068.

Container imageDigestPackageFixed in
aktosecurity/akto-puppeteer-replay:doom_latest853e37321e6e
braces@3.0.2
3.0.3

Open the chart page →

4,880
katalogalpineworks0.1.21 of 5See more

katalog alpineworks 0.1.2

1 of the 5 container images this version deploys carry CVE-2024-4068.

Container imageDigestPackageFixed in
ghcr.io/alpineworks/katalog-frontend:v1.0.734b76dcb1c10
braces@3.0.2
3.0.3

Open the chart page →

4,497
openhab-cloudandibraeuVerified publisher1.2.61 of 1See more

openhab-cloud andibraeu 1.2.6

1 of the 1 container images this version deploys carry CVE-2024-4068.

Container imageDigestPackageFixed in
openhab/openhab-cloud:a8138a329dd2bac8c4b
braces@3.0.2
3.0.3

Open the chart page →

3,437
angular-chartangular-application0.1.01 of 1See more

angular-chart angular-application 0.1.0

1 of the 1 container images this version deploys carry CVE-2024-4068.

Container imageDigestPackageFixed in
ibarreche/cloud-front-ci:latestc8970ac1c8dc
braces@1.8.5
3.0.3

Open the chart page →

3,237
angular-node-chartangular-webapp2.0.01 of 1See more

angular-node-chart angular-webapp 2.0.0

1 of the 1 container images this version deploys carry CVE-2024-4068.

Container imageDigestPackageFixed in
rakii8585/angular-node-webapp:latest026082a515ac
braces@3.0.2
3.0.3

Open the chart page →

2,616
lametric-nightscout-proxyaolde0.1.01 of 1See more

lametric-nightscout-proxy aolde 0.1.0

1 of the 1 container images this version deploys carry CVE-2024-4068.

Container imageDigestPackageFixed in
ghcr.io/aolde/lametric-nightscout-proxy:latest7d1951b6baf5
braces@3.0.2
3.0.3

Open the chart page →

1,186
apimap-developerapimapOfficialVerified publisher1.4.11 of 1See more

apimap-developer apimap 1.4.1

1 of the 1 container images this version deploys carry CVE-2024-4068.

Container imageDigestPackageFixed in
apimap/developer:v1.3.1406d3858e20c
braces@3.0.2
3.0.3

Open the chart page →

2,353
apimap-portalapimapOfficialVerified publisher2.4.01 of 1See more

apimap-portal apimap 2.4.0

1 of the 1 container images this version deploys carry CVE-2024-4068.

Container imageDigestPackageFixed in
apimap/portal:v2.4.0041a4790c65c
braces@3.0.2
3.0.3

Open the chart page →

2,396
agenthttpmqttassist-iot-composite-services1.0.01 of 1See more

agenthttpmqtt assist-iot-composite-services 1.0.0

1 of the 1 container images this version deploys carry CVE-2024-4068.

Container imageDigestPackageFixed in
assistiot/composite-services-manager_agent-http-mqtt:latest16d21bc5e42e
braces@3.0.2
3.0.3

Open the chart page →

1,158
agentmqtthttpassist-iot-composite-services1.0.01 of 1See more

agentmqtthttp assist-iot-composite-services 1.0.0

1 of the 1 container images this version deploys carry CVE-2024-4068.

Container imageDigestPackageFixed in
assistiot/composite-services-manager_agent-mqtt-http:latest27d58b8911cd
braces@3.0.2
3.0.3

Open the chart page →

1,158
dltkvassist-iot-data-integrity-verification0.2.01 of 9See more

dltkv assist-iot-data-integrity-verification 0.2.0

1 of the 9 container images this version deploys carry CVE-2024-4068.

Container imageDigestPackageFixed in
assistiot/dlt_api:2.0.0e36a8922fa0c
braces@3.0.2
3.0.3

Open the chart page →

77,706
dltflassist-iot-dlt-based-fl0.2.01 of 9See more

dltfl assist-iot-dlt-based-fl 0.2.0

1 of the 9 container images this version deploys carry CVE-2024-4068.

Container imageDigestPackageFixed in
assistiot/dlt_api:2.1.0c8a170683be7
braces@3.0.2
3.0.3

Open the chart page →

77,706
fl-orchestrator-guiassist-iot-fl-orchestrator0.1.01 of 3See more

fl-orchestrator-gui assist-iot-fl-orchestrator 0.1.0

1 of the 3 container images this version deploys carry CVE-2024-4068.

Container imageDigestPackageFixed in
assistiot/fl_orchestrator:api-latest7473d77448e1
braces@3.0.2
3.0.3

Open the chart page →

9,369
monitoring-notifyingassist-iot-monitoring-notifying0.1.01 of 1See more

monitoring-notifying assist-iot-monitoring-notifying 0.1.0

1 of the 1 container images this version deploys carry CVE-2024-4068.

Container imageDigestPackageFixed in
assistiot/monitoring_notifying:2.0.068324d0fa5bb
braces@3.0.2
3.0.3

Open the chart page →

1,677
multilink-clientassist-iot-multi-link-client-app1.0.01 of 2See more

multilink-client assist-iot-multi-link-client-app 1.0.0

1 of the 2 container images this version deploys carry CVE-2024-4068.

Container imageDigestPackageFixed in
assistiot/multi-link_client:latestcf048365d042
braces@3.0.2
3.0.3

Open the chart page →

1,446
openapiassist-iot-open-api-management0.2.21 of 6See more

openapi assist-iot-open-api-management 0.2.2

1 of the 6 container images this version deploys carry CVE-2024-4068.

Container imageDigestPackageFixed in
assistiot/open_api_frontend:1.0.1f11d82defc70
braces@3.0.2
3.0.3

Open the chart page →

18,277
smartorchestratorassist-iot-smart-orchestrator4.0.03 of 14See more

smartorchestrator assist-iot-smart-orchestrator 4.0.0

3 of the 14 container images this version deploys carry CVE-2024-4068.

Container imageDigestPackageFixed in
assistiot/smart-orchestrator_cluster:latest4f41e1defe99
braces@3.0.2
3.0.3
assistiot/smart-orchestrator_enabler:latest89f37e88c871
braces@3.0.2
3.0.3
assistiot/smart-orchestrator_repository:latesta8b8dbed04a4
braces@3.0.2
3.0.3

Open the chart page →

45,363
astrotrekastria0.0.21 of 4See more

astrotrek astria 0.0.2

1 of the 4 container images this version deploys carry CVE-2024-4068.

Container imageDigestPackageFixed in
ghcr.io/astriaorg/astrotrek:0.1.05889bea38e56
braces@3.0.2
3.0.3

Open the chart page →

32,501
nas-appsawesomeVerified publisher2.0.01 of 8See more

nas-apps awesome 2.0.0

1 of the 8 container images this version deploys carry CVE-2024-4068.

Container imageDigestPackageFixed in
ltdstudio/terraforming-mars:latest0e76c6f4eac0
braces@3.0.2
3.0.3

Open the chart page →

7,152
awesomeblessingappawesomeblessingapp1.1.01 of 1See more

awesomeblessingapp awesomeblessingapp 1.1.0

1 of the 1 container images this version deploys carry CVE-2024-4068.

Container imageDigestPackageFixed in
bnwokoye/nodejswebapp:latest74de7dc7ebfb
braces@3.0.2
3.0.3

Open the chart page →

1,267
opendistro-esbeeinventor1.15.11 of 3See more

opendistro-es beeinventor 1.15.1

1 of the 3 container images this version deploys carry CVE-2024-4068.

Container imageDigestPackageFixed in
amazon/opendistro-for-elasticsearch-kibana:1.13.2c740d7a89475
braces@3.0.2
3.0.3

Open the chart page →

5,806
myhelmappbelihelmapp1.1.01 of 1See more

myhelmapp belihelmapp 1.1.0

1 of the 1 container images this version deploys carry CVE-2024-4068.

Container imageDigestPackageFixed in
belirta/beli-docker:v1.0.0f65ad0e23b4d
braces@3.0.2
3.0.3

Open the chart page →

1,187
mx-apibicarus-labs0.1.01 of 4See more

mx-api bicarus-labs 0.1.0

1 of the 4 container images this version deploys carry CVE-2024-4068.

Container imageDigestPackageFixed in
bicarus/mx-api-service:1.0.2-hf1dab88659ae3b
braces@3.0.2
3.0.3

Open the chart page →

4,455
bluerange-mosquittobluerangeOfficialVerified publisher1.0.41 of 1See more

bluerange-mosquitto bluerange 1.0.4

1 of the 1 container images this version deploys carry CVE-2024-4068.

Container imageDigestPackageFixed in
bluerange/bluerange-mosquitto:25f1bfbba84832
braces@3.0.2
3.0.3

Open the chart page →

1,168
registry-uibryanalves0.2.01 of 1See more

registry-ui bryanalves 0.2.0

1 of the 1 container images this version deploys carry CVE-2024-4068.

Container imageDigestPackageFixed in
konradkleine/docker-registry-frontend:v2181aad54ee64
braces@0.1.5
3.0.3

Open the chart page →

4,069
ghostchart-ghost0.1.51 of 2See more

ghost chart-ghost 0.1.5

1 of the 2 container images this version deploys carry CVE-2024-4068.

Container imageDigestPackageFixed in
library/ghost:6.22.0-alpine3.23ac533a6988ee
braces@2.3.2
3.0.3

Open the chart page →

4,083
daskcloudnativeapp2.2.11 of 2See more

dask cloudnativeapp 2.2.1

1 of the 2 container images this version deploys carry CVE-2024-4068.

Container imageDigestPackageFixed in
daskdev/dask-notebook:1.1.0052630f5ca04
braces@2.3.2
3.0.3

Open the chart page →

29,901
ethereumcloudnativeapp1.0.01 of 3See more

ethereum cloudnativeapp 1.0.0

1 of the 3 container images this version deploys carry CVE-2024-4068.

Container imageDigestPackageFixed in
ethereumex/eth-stats-dashboard:v0.0.1a7603aa8df4c
braces@1.8.5
3.0.3

Open the chart page →

27,417
hubotcloudnativeapp0.0.11 of 1See more

hubot cloudnativeapp 0.0.1

1 of the 1 container images this version deploys carry CVE-2024-4068.

Container imageDigestPackageFixed in
minddocdev/hubot:0.1.96c60b11a4fa7
braces@2.3.2
3.0.3

Open the chart page →

2,580
developer-dashboardcloud-native-toolkit1.4.11 of 1See more

developer-dashboard cloud-native-toolkit 1.4.1

1 of the 1 container images this version deploys carry CVE-2024-4068.

Container imageDigestPackageFixed in
quay.io/ibmgaragecloud/developer-dashboard:v1.4.47a4b9fedc724
braces@3.0.2
3.0.3

Open the chart page →

25,456
codehubcodehubVerified publisher6.2.181 of 5See more

codehub codehub 6.2.18

1 of the 5 container images this version deploys carry CVE-2024-4068.

Container imageDigestPackageFixed in
jupyterhub/jupyterhub:5.4.63974ba945e65
braces@3.0.2
node-braces@3.0.2+~3.0.1-1
3.0.3
no fix listed

Open the chart page →

13,220
coderstudio-strapi-devcoderstudio-strapi-devVerified publisher0.0.11 of 3See more

coderstudio-strapi-dev coderstudio-strapi-dev 0.0.1

1 of the 3 container images this version deploys carry CVE-2024-4068.

Container imageDigestPackageFixed in
rcdelacruz/my-strapi-app:js-amd6438007f358355
braces@2.3.2
3.0.3

Open the chart page →

5,141
docker-composecoderstudio-strapi-devVerified publisher0.0.11 of 3See more

docker-compose coderstudio-strapi-dev 0.0.1

1 of the 3 container images this version deploys carry CVE-2024-4068.

Container imageDigestPackageFixed in
rcdelacruz/my-strapi-app:js-amd6438007f358355
braces@2.3.2
3.0.3

Open the chart page →

5,141
strapi-devcoderstudio-strapi-devVerified publisher0.0.11 of 3See more

strapi-dev coderstudio-strapi-dev 0.0.1

1 of the 3 container images this version deploys carry CVE-2024-4068.

Container imageDigestPackageFixed in
rcdelacruz/my-strapi-app:js-amd6438007f358355
braces@2.3.2
3.0.3

Open the chart page →

5,141
conduction-uiconduction-ui0.1.01 of 6See more

conduction-ui conduction-ui 0.1.0

1 of the 6 container images this version deploys carry CVE-2024-4068.

Container imageDigestPackageFixed in
conduction/conduction-ui-app:devd591f5e6f2a9
braces@2.3.2
3.0.3

Open the chart page →

12,907

Container images carrying it

262 by charts deploying them

A fixed version is listed for 1 of the 2 affected packages.

Container imageDigestPackageFixed inUsed by
kodekloud/examplevotingapp_result:v1e510023fdf38
braces@3.0.2
3.0.3
4
ghcr.io/skooner-k8s/skooner:stable60c1562e4d51
braces@3.0.2
3.0.3
4
assistiot/dlt_api:2.0.0e36a8922fa0c
braces@3.0.2
3.0.3
3
mojaloop/account-lookup-service:v11.8.0b06d3287ea82
braces@3.0.2
3.0.3
3
rcdelacruz/my-strapi-app:js-amd6438007f358355
braces@2.3.2
3.0.3
3
ghcr.io/kamilkisiela/graphql-hive/app:59b64c36c866b3555c135c70de76a884e63f8619a4a3639899f7
braces@3.0.2
3.0.3
3
agoldis/sorry-cypress-api:2.5.11afaa5a84051d
braces@3.0.2
3.0.3
2
agoldis/sorry-cypress-director:2.5.1110228ecd353b
braces@3.0.2
3.0.3
2
amazon/opendistro-for-elasticsearch-kibana:1.13.2c740d7a89475
braces@3.0.2
3.0.3
2
chatwoot/chatwoot:v3.1.0d530ab8c1753
braces@2.3.2
3.0.3
2
ethersphere/bee-localchain:latest0558799ca992
braces@3.0.2
3.0.3
2
governify/assets-manager:v1.4.12987672448c7
braces@3.0.2
3.0.3
2
governify/director:v1.4.0608c6940bb98
braces@3.0.2
3.0.3
2
governify/registry:v3.4.0d3f37f4f8168
braces@3.0.2
3.0.3
2
governify/render:v2.2.0daeca1ce28e6
braces@3.0.2
3.0.3
2
governify/reporter:v2.2.038595913458f
braces@3.0.2
3.0.3
2
gradiant/open5gs-webui:2.7.5fbd10c017541
braces@2.3.2
3.0.3
2
martinaif/backstage-k8s-demo-backend:test143bc40a3da0e
braces@2.3.2
3.0.3
2
mojaloop/central-ledger:v13.14.01abc8a7aa71c
braces@3.0.2
3.0.3
2
mojaloop/ml-api-adapter:v11.1.6fb71d233c742
braces@3.0.2
3.0.3
2
mojaloop/role-assignment-service:v2.1.0def4bf273721
braces@3.0.2
3.0.3
2
moreillon/api-proxy:a3e8b41e9e578c9653b6
braces@3.0.2
3.0.3
2
moreillon/group-manager:v4.9.0d5a0ec8394c0
braces@3.0.2
3.0.3
2
moreillon/user-manager:v5.0.2e1c9bfab5c16
braces@3.0.2
3.0.3
2
opensearchproject/opensearch-dashboards:1.0.039695180364b
braces@3.0.2
3.0.3
2
outlinewiki/outline:0.69.1d060dcd8f9aa
braces@3.0.2
3.0.3
2
requarks/wiki:2:latest68f0d1848261
braces@2.3.2
3.0.3
2
siscc/dotstatsuite-sdmx-faceted-search:master12c5048f7402
braces@2.3.2
3.0.3
2
stakater/stakater-nordmart-review-ui:1.0.143f4926eedc74
braces@2.3.2
3.0.3
2
taigaio/taiga-events:latest92fc0822564f
braces@3.0.2
3.0.3
2
tzahi12345/youtubedl-material:4.3.2:latest2f943d584711
braces@3.0.2
3.0.3
2
ghcr.io/lissy93/dashy:2.1.1acb40032ad4b
braces@3.0.2
3.0.3
2
0hlov3/semaphore:v1.0.050f874ec096b
braces@3.0.2
3.0.3
1
activepieces/activepieces:0.23.0c26188b44e62
braces@3.0.2
3.0.3
1
adeptiainc/adeptia-automate-mcp-server:1.0.0283001e83739
braces@3.0.2
3.0.3
1
adeptiainc/adeptia-automate-observe:1.0.031f295e948e6
braces@3.0.2
3.0.3
1
aktosecurity/akto-puppeteer-replay:doom_latest853e37321e6e
braces@3.0.2
3.0.3
1
alquimiaai/studio:certification38a1f0341982
braces@3.0.2
3.0.3
1
amazon/opendistro-for-elasticsearch-kibana:1.4.05126e2e79a1f
braces@2.3.2
3.0.3
1
amundsendev/amundsen-frontend:2.1.169e7915e61c1
braces@2.3.2
3.0.3
1
aolde/bredbandskollen-prometheus-exporter:1.0.2dc61ee713720
braces@3.0.2
3.0.3
1
apache/superset:9cdaa280429ec297db16d56c94fd77b5d2aff107975ab033580d
braces@3.0.2
3.0.3
1
apimap/developer:v1.3.1406d3858e20c
braces@3.0.2
3.0.3
1
apimap/portal:v2.4.0041a4790c65c
braces@3.0.2
3.0.3
1
arfath29/3-tier-app-frontend:latest384b3e377f47
braces@2.3.2
3.0.3
1
assistiot/composite-services-manager_agent-http-mqtt:latest16d21bc5e42e
braces@3.0.2
3.0.3
1
assistiot/composite-services-manager_agent-mqtt-http:latest27d58b8911cd
braces@3.0.2
3.0.3
1
assistiot/cybersecurity-monitoring_id-kbn:latest2297b4350211
braces@3.0.2
3.0.3
1
assistiot/cybersecurity-monitoring_ir-kbn:latest0570b27bb7c2
braces@3.0.2
3.0.3
1
assistiot/dlt_api:2.1.0c8a170683be7
braces@3.0.2
3.0.3
1

syft 1.42.1 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.