StackRadarChart IndexLive demo

CVE-2024-41818

High

Advisory

Published 29 Jul 2024In the index since 6 Sept 2026

Severity: High; worst across findings
CVSS: 7.5; base score, highest
EPSS: 0.008; 55th percentile
CISA KEV: Not listed; no confirmed exploitation
Charts affected: 11; of 17,781 indexed, latest versions
Container images: 12; deployed by those charts
Fix available: 1 of 1; affected package

fast-xml-parser vulnerable to ReDOS at currency parsing

Carried by container images the latest versions of 11 of 17,781 indexed charts deploy, on 12 images.

Affected package	Affected versions	Fixed in	Images
fast-xml-parsernpm	4.3.5, 4.3.6, 4.4.0	4.4.1	12

OSV records: GHSA-mpg4-rc92-vx8v

Charts affected

11 by stars

Chart

Latest

Affected images

Radar Score

n8nn8n

1 of 1 See more

5,639

openhab-cloudandibraeu

1 of 1 See more

openhab-cloud andibraeu 1.2.6

1 of the 1 container images this version deploys carry CVE-2024-41818.

Container image	Digest	Package	Fixed in
openhab/openhab-cloud :a8138a3	29dd2bac8c4b	fast-xml-parser@4.4.0	4.4.1

Open the chart page →

3,437

countlychristianhuth

2 of 3 See more

countly christianhuth 5.2.1

2 of the 3 container images this version deploys carry CVE-2024-41818.

Container image	Digest	Package	Fixed in
countly/api :25.05.4	f4cc7447c4f5	fast-xml-parser@4.3.6	4.4.1
countly/frontend :25.05.4	2acbc11499b6	fast-xml-parser@4.3.6	4.4.1

Open the chart page →

7,295

countlyhelmforge

1 of 3 See more

countly helmforge 1.2.6

1 of the 3 container images this version deploys carry CVE-2024-41818.

Container image	Digest	Package	Fixed in
countly/countly-server :25.05.4	e3c238248f99	fast-xml-parser@4.3.6	4.4.1

Open the chart page →

18,813

backstagemcwarman

1 of 2 See more

backstage mcwarman 0.10.10

1 of the 2 container images this version deploys carry CVE-2024-41818.

Container image	Digest	Package	Fixed in
ghcr.io/mcwarman/backstage-sample-app/backend :main	07aba09a594f	fast-xml-parser@4.3.5	4.4.1

Open the chart page →

9,668

speckle-server-branch-hotfix-2.19.1speckle

2.19.2-branch.hotfix-2.19.1.124125-665e7e1

1 of 5 See more

speckle-server-branch-hotfix-2.19.1 speckle 2.19.2-branch.hotfix-2.19.1.124125-665e7e1

1 of the 5 container images this version deploys carry CVE-2024-41818.

Container image	Digest	Package	Fixed in
speckle/speckle-server :2.19.2-branch.hotfix-2.19.1.124125-665e7e1	4b6a0750d5aa	fast-xml-parser@4.4.0	4.4.1

Open the chart page →

16,368

speckle-server-branch-hotfix-2.20.2speckle

2.20.3-branch.hotfix-2.20.2.149555-37ea0cb

1 of 5 See more

speckle-server-branch-hotfix-2.20.2 speckle 2.20.3-branch.hotfix-2.20.2.149555-37ea0cb

1 of the 5 container images this version deploys carry CVE-2024-41818.

Container image	Digest	Package	Fixed in
speckle/speckle-server :2.20.3-branch.hotfix-2.20.2.149555-37ea0cb	52f8eabf5cea	fast-xml-parser@4.4.0	4.4.1

Open the chart page →

16,400

speckle-server-branch-testing1speckle

2.20.6-branch.testing1.154030-9b09114

1 of 5 See more

speckle-server-branch-testing1 speckle 2.20.6-branch.testing1.154030-9b09114

1 of the 5 container images this version deploys carry CVE-2024-41818.

Container image	Digest	Package	Fixed in
speckle/speckle-server :2.20.6-branch.testing1.154030-9b09114	e8413f57b327	fast-xml-parser@4.4.0	4.4.1

Open the chart page →

16,400

speckle-server-branch-testing4speckle

2.20.2-branch.testing4.134160-9fad4b2

1 of 5 See more

speckle-server-branch-testing4 speckle 2.20.2-branch.testing4.134160-9fad4b2

1 of the 5 container images this version deploys carry CVE-2024-41818.

Container image	Digest	Package	Fixed in
speckle/speckle-server :2.20.2-branch.testing4.134160-9fad4b2	687f43ab16f3	fast-xml-parser@4.4.0	4.4.1

Open the chart page →

16,019

speckle-server-branch-testing5speckle

2.21.3-branch.testing5.219631-2153bef

1 of 5 See more

speckle-server-branch-testing5 speckle 2.21.3-branch.testing5.219631-2153bef

1 of the 5 container images this version deploys carry CVE-2024-41818.

Container image	Digest	Package	Fixed in
speckle/speckle-server :2.21.3-branch.testing5.219631-2153bef	8fd157733393	fast-xml-parser@4.4.0	4.4.1

Open the chart page →

15,635

speckle-server-branch-testing6speckle

2.25.10-branch.testing6.645-b125c1e

1 of 4 See more

speckle-server-branch-testing6 speckle 2.25.10-branch.testing6.645-b125c1e

1 of the 4 container images this version deploys carry CVE-2024-41818.

Container image	Digest	Package	Fixed in
speckle/speckle-server :2.25.10-branch.testing6.645-b125c1e	75cdf256067b	fast-xml-parser@4.4.0	4.4.1

Open the chart page →

11,100

Container images carrying it

12 by charts deploying them

A fixed version is listed for 1 of the 1 affected package.

Container image	Digest	Package	Fixed in	Used by
countly/api :25.05.4	f4cc7447c4f5	fast-xml-parser@4.3.6	4.4.1	1
countly/countly-server :25.05.4	e3c238248f99	fast-xml-parser@4.3.6	4.4.1	1
countly/frontend :25.05.4	2acbc11499b6	fast-xml-parser@4.3.6	4.4.1	1
n8nio/n8n :1.33.1	dd171d45102a	fast-xml-parser@4.3.5	4.4.1	1
openhab/openhab-cloud :a8138a3	29dd2bac8c4b	fast-xml-parser@4.4.0	4.4.1	1
speckle/speckle-server :2.19.2-branch.hotfix-2.19.1.124125-665e7e1	4b6a0750d5aa	fast-xml-parser@4.4.0	4.4.1	1
speckle/speckle-server :2.20.3-branch.hotfix-2.20.2.149555-37ea0cb	52f8eabf5cea	fast-xml-parser@4.4.0	4.4.1	1
speckle/speckle-server :2.20.2-branch.testing4.134160-9fad4b2	687f43ab16f3	fast-xml-parser@4.4.0	4.4.1	1
speckle/speckle-server :2.25.10-branch.testing6.645-b125c1e	75cdf256067b	fast-xml-parser@4.4.0	4.4.1	1
speckle/speckle-server :2.21.3-branch.testing5.219631-2153bef	8fd157733393	fast-xml-parser@4.4.0	4.4.1	1
speckle/speckle-server :2.20.6-branch.testing1.154030-9b09114	e8413f57b327	fast-xml-parser@4.4.0	4.4.1	1
ghcr.io/mcwarman/backstage-sample-app/backend :main	07aba09a594f	fast-xml-parser@4.3.5	4.4.1	1