StackRadar

CVE-2024-43788

Medium

Advisory

Published 27 Aug 2024In the index since 6 Sept 2026
Severity
Medium
worst across findings
CVSS
6.4
base score, highest
EPSS
0.010
60th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
49
of 17,781 indexed, latest versions
Container images
50
deployed by those charts
Fix available
1 of 2
affected packages

Webpack's AutoPublicPathRuntimeModule has a DOM Clobbering Gadget that leads to XSS

Carried by container images the latest versions of 49 of 17,781 indexed charts deploy, on 50 images.

Affected packageAffected versionsFixed inImages
webpacknpm5.20.1, 5.20.2, 5.33.2, 5.38.1+19 more5.94.050
node-webpackdeb5.76.1+dfsg1+~cs17.16.16-1no fix listed1
OSV records
GHSA-4vvj-4cpr-p986UBUNTU-CVE-2024-43788

Charts affected

49 by stars
ChartLatestAffected imagesRadar Score
redisinsightheywood8-helm-chartsVerified publisher0.4.51 of 1See more

redisinsight heywood8-helm-charts 0.4.5

1 of the 1 container images this version deploys carry CVE-2024-43788.

Container imageDigestPackageFixed in
heywood8/redisinsight:2.28.00bc9ab313d37
webpack@5.80.0
5.94.0

Open the chart page →

2,828
misskeyalytiVerified publisher1.0.01 of 1See more

misskey alyti 1.0.0

1 of the 1 container images this version deploys carry CVE-2024-43788.

Container imageDigestPackageFixed in
misskey/misskey:12.110.1e08b7c478093
webpack@5.33.2
5.94.0

Open the chart page →

5,251
klusterviewklusterviewVerified publisher0.1.01 of 4See more

klusterview klusterview 0.1.0

1 of the 4 container images this version deploys carry CVE-2024-43788.

Container imageDigestPackageFixed in
kyleslugg/klusterview:latestba8c36dfdfbd
webpack@5.87.0
5.94.0

Open the chart page →

3,795
codetogethercodetogether1.4.251 of 1See more

codetogether codetogether 1.4.25

1 of the 1 container images this version deploys carry CVE-2024-43788.

Container imageDigestPackageFixed in
codetogether/codetogether:latest4348c8a38752
webpack@5.91.0
5.94.0

Open the chart page →

7,450
nightscoutgabe565Verified publisher0.13.01 of 2See more

nightscout gabe565 0.13.0

1 of the 2 container images this version deploys carry CVE-2024-43788.

Container imageDigestPackageFixed in
nightscout/cgm-remote-monitor:15.0.2ad29ca7a4de6
webpack@5.75.0
5.94.0

Open the chart page →

2,521
kobotoolboxone-acre-fundVerified publisher0.7.41 of 9See more

kobotoolbox one-acre-fund 0.7.4

1 of the 9 container images this version deploys carry CVE-2024-43788.

Container imageDigestPackageFixed in
kobotoolbox/kpi:2.022.24dbcacc01bccd4
webpack@5.72.0
5.94.0

Open the chart page →

18,517
joplin-serverdjjudas21Verified publisher5.5.81 of 1See more

joplin-server djjudas21 5.5.8

1 of the 1 container images this version deploys carry CVE-2024-43788.

Container imageDigestPackageFixed in
joplin/server:2.14.2-betab87564ef34e9
webpack@5.89.0
5.94.0

Open the chart page →

3,925
jspolicyloftVerified publisher0.2.21 of 1See more

jspolicy loft 0.2.2

1 of the 1 container images this version deploys carry CVE-2024-43788.

Container imageDigestPackageFixed in
loftsh/jspolicy:0.2.225deb9bd2683
webpack@5.75.0
5.94.0

Open the chart page →

2,309
kyoorubxkubeVerified publisher0.1.101 of 9See more

kyoo rubxkube 0.1.10

1 of the 9 container images this version deploys carry CVE-2024-43788.

Container imageDigestPackageFixed in
ghcr.io/zoriya/kyoo_front:4.7.1d7f76c9c65d9
webpack@5.93.0
5.94.0

Open the chart page →

30,234
apimap-developerapimapOfficialVerified publisher1.4.11 of 1See more

apimap-developer apimap 1.4.1

1 of the 1 container images this version deploys carry CVE-2024-43788.

Container imageDigestPackageFixed in
apimap/developer:v1.3.1406d3858e20c
webpack@5.74.0
5.94.0

Open the chart page →

2,353
apimap-portalapimapOfficialVerified publisher2.4.01 of 1See more

apimap-portal apimap 2.4.0

1 of the 1 container images this version deploys carry CVE-2024-43788.

Container imageDigestPackageFixed in
apimap/portal:v2.4.0041a4790c65c
webpack@5.73.0
5.94.0

Open the chart page →

2,396
openapiassist-iot-open-api-management0.2.21 of 6See more

openapi assist-iot-open-api-management 0.2.2

1 of the 6 container images this version deploys carry CVE-2024-43788.

Container imageDigestPackageFixed in
assistiot/open_api_frontend:1.0.1f11d82defc70
webpack@5.75.0
5.94.0

Open the chart page →

18,277
nas-appsawesomeVerified publisher2.0.01 of 8See more

nas-apps awesome 2.0.0

1 of the 8 container images this version deploys carry CVE-2024-43788.

Container imageDigestPackageFixed in
ltdstudio/terraforming-mars:latest0e76c6f4eac0
webpack@5.39.0
5.94.0

Open the chart page →

7,152
mx-apibicarus-labs0.1.01 of 4See more

mx-api bicarus-labs 0.1.0

1 of the 4 container images this version deploys carry CVE-2024-43788.

Container imageDigestPackageFixed in
bicarus/mx-api-service:1.0.2-hf1dab88659ae3b
webpack@5.74.0
5.94.0

Open the chart page →

4,455
bluerange-mosquittobluerangeOfficialVerified publisher1.0.41 of 1See more

bluerange-mosquitto bluerange 1.0.4

1 of the 1 container images this version deploys carry CVE-2024-43788.

Container imageDigestPackageFixed in
bluerange/bluerange-mosquitto:25f1bfbba84832
webpack@5.20.1
5.94.0

Open the chart page →

1,168
chatgpt-next-webchatgpt-next-web0.1.11 of 1See more

chatgpt-next-web chatgpt-next-web 0.1.1

1 of the 1 container images this version deploys carry CVE-2024-43788.

Container imageDigestPackageFixed in
yidadaa/chatgpt-next-web:latesteaaa469ddeeb
webpack@5.88.1
5.94.0

Open the chart page →

1,977
countlychristianhuthVerified publisher5.2.12 of 3See more

countly christianhuth 5.2.1

2 of the 3 container images this version deploys carry CVE-2024-43788.

Container imageDigestPackageFixed in
countly/api:25.05.4f4cc7447c4f5
webpack@5.86.0
5.94.0
countly/frontend:25.05.42acbc11499b6
webpack@5.86.0
5.94.0

Open the chart page →

7,295
codehubcodehubVerified publisher6.2.181 of 5See more

codehub codehub 6.2.18

1 of the 5 container images this version deploys carry CVE-2024-43788.

Container imageDigestPackageFixed in
jupyterhub/jupyterhub:5.4.63974ba945e65
node-webpack@5.76.1+dfsg1+~cs17.16.16-1
webpack@5.76.1
no fix listed
5.94.0

Open the chart page →

13,220
coderstudio-strapi-devcoderstudio-strapi-devVerified publisher0.0.11 of 3See more

coderstudio-strapi-dev coderstudio-strapi-dev 0.0.1

1 of the 3 container images this version deploys carry CVE-2024-43788.

Container imageDigestPackageFixed in
rcdelacruz/my-strapi-app:js-amd6438007f358355
webpack@5.89.0
5.94.0

Open the chart page →

5,141
docker-composecoderstudio-strapi-devVerified publisher0.0.11 of 3See more

docker-compose coderstudio-strapi-dev 0.0.1

1 of the 3 container images this version deploys carry CVE-2024-43788.

Container imageDigestPackageFixed in
rcdelacruz/my-strapi-app:js-amd6438007f358355
webpack@5.89.0
5.94.0

Open the chart page →

5,141
strapi-devcoderstudio-strapi-devVerified publisher0.0.11 of 3See more

strapi-dev coderstudio-strapi-dev 0.0.1

1 of the 3 container images this version deploys carry CVE-2024-43788.

Container imageDigestPackageFixed in
rcdelacruz/my-strapi-app:js-amd6438007f358355
webpack@5.89.0
5.94.0

Open the chart page →

5,141
containers-security-chartscontainers-security0.1.02 of 7See more

containers-security-charts containers-security 0.1.0

2 of the 7 container images this version deploys carry CVE-2024-43788.

Container imageDigestPackageFixed in
coldatom/containers-security-api:latesteae9e82da080
webpack@5.75.0
5.94.0
coldatom/containers-security-front:latest7c2fbbb41bcf
webpack@5.75.0
5.94.0

Open the chart page →

9,146
documensodocumensoVerified publisher0.0.61 of 2See more

documenso documenso 0.0.6

1 of the 2 container images this version deploys carry CVE-2024-43788.

Container imageDigestPackageFixed in
documenso/documenso:v1.8.17f16a9449f18
webpack@5.92.1
5.94.0

Open the chart page →

2,862
canary-checkerflanksourceVerified publisher1.2.01 of 2See more

canary-checker flanksource 1.2.0

1 of the 2 container images this version deploys carry CVE-2024-43788.

Container imageDigestPackageFixed in
flanksource/canary-checker-ui:v1.4.281764c84e550db
webpack@5.89.0
5.94.0

Open the chart page →

4,650
nightscoutgeek-cookbookVerified publisher1.2.21 of 1See more

nightscout geek-cookbook 1.2.2

1 of the 1 container images this version deploys carry CVE-2024-43788.

Container imageDigestPackageFixed in
nightscout/cgm-remote-monitor:14.2.500c3b4833f1b
webpack@5.20.2
5.94.0

Open the chart page →

4,043
countlyhelmforgeVerified publisher1.2.61 of 3See more

countly helmforge 1.2.6

1 of the 3 container images this version deploys carry CVE-2024-43788.

Container imageDigestPackageFixed in
countly/countly-server:25.05.4e3c238248f99
webpack@5.86.0
5.94.0

Open the chart page →

18,813
townsquarehuscker-chartsVerified publisher1.0.41 of 2See more

townsquare huscker-charts 1.0.4

1 of the 2 container images this version deploys carry CVE-2024-43788.

Container imageDigestPackageFixed in
ghcr.io/huscker/townsquare-backend:2.15.2e106681e7673
webpack@5.89.0
5.94.0

Open the chart page →

3,407
keyoxide-webittrident-oss0.2.31 of 1See more

keyoxide-web ittrident-oss 0.2.3

1 of the 1 container images this version deploys carry CVE-2024-43788.

Container imageDigestPackageFixed in
keyoxide/keyoxide:stable96f27a71269d
webpack@5.70.0
5.94.0

Open the chart page →

2,363
visual-regression-trackerkokuwa5.1.01 of 4See more

visual-regression-tracker kokuwa 5.1.0

1 of the 4 container images this version deploys carry CVE-2024-43788.

Container imageDigestPackageFixed in
visualregressiontracker/api:5.0.11941aeb8c8bf9
webpack@5.88.2
5.94.0

Open the chart page →

9,098
m9sweeperm9sweeperVerified publisher1.6.01 of 6See more

m9sweeper m9sweeper 1.6.0

1 of the 6 container images this version deploys carry CVE-2024-43788.

Container imageDigestPackageFixed in
ghcr.io/m9sweeper/dash:1.6.02e27cdff8344
webpack@5.89.0
5.94.0

Open the chart page →

9,774
nightscoutmt1905021.1.01 of 3See more

nightscout mt190502 1.1.0

1 of the 3 container images this version deploys carry CVE-2024-43788.

Container imageDigestPackageFixed in
nightscout/cgm-remote-monitor:15.0.3f604dc4c03ca
webpack@5.75.0
5.94.0

Open the chart page →

6,608
myawesomeappmyawesomapp-mitchxxx0.1.11 of 1See more

myawesomeapp myawesomapp-mitchxxx 0.1.1

1 of the 1 container images this version deploys carry CVE-2024-43788.

Container imageDigestPackageFixed in
mitchxxx/amazon:214e72480ec63a
webpack@5.80.0
5.94.0

Open the chart page →

2,116
myawesomeapp14myawesomeapp140.1.11 of 1See more

myawesomeapp14 myawesomeapp14 0.1.1

1 of the 1 container images this version deploys carry CVE-2024-43788.

Container imageDigestPackageFixed in
ccjacobs14/amazon:59a9b14a6f09e
webpack@5.80.0
5.94.0

Open the chart page →

2,116
myawesomeapp-janmyawesomeapp-jan0.1.11 of 1See more

myawesomeapp-jan myawesomeapp-jan 0.1.1

1 of the 1 container images this version deploys carry CVE-2024-43788.

Container imageDigestPackageFixed in
ooghenekaro/amazon:latest03394ba1d6d8
webpack@5.80.0
5.94.0

Open the chart page →

2,144
myawesomeapp-marmyawesomeapp-mar0.1.11 of 1See more

myawesomeapp-mar myawesomeapp-mar 0.1.1

1 of the 1 container images this version deploys carry CVE-2024-43788.

Container imageDigestPackageFixed in
winfred008/amazon:910a68de5b398
webpack@5.80.0
5.94.0

Open the chart page →

2,116
myweatherhelmmyweather1.3.111 of 7See more

myweatherhelm myweather 1.3.11

1 of the 7 container images this version deploys carry CVE-2024-43788.

Container imageDigestPackageFixed in
hecrom/myweatherprocessingreactclient:1.3.115454b54d5b28
webpack@5.78.0
5.94.0

Open the chart page →

17,929
notes-admin-front-helm-chartnotesprojectchart0.1.01 of 1See more

notes-admin-front-helm-chart notesprojectchart 0.1.0

1 of the 1 container images this version deploys carry CVE-2024-43788.

Container imageDigestPackageFixed in
vlebediantsev/notes-admin-front:latest007c6670ff48
webpack@5.88.2
5.94.0

Open the chart page →

15,132
notes-project-fromt-helm-chartnotesprojectchart0.1.01 of 1See more

notes-project-fromt-helm-chart notesprojectchart 0.1.0

1 of the 1 container images this version deploys carry CVE-2024-43788.

Container imageDigestPackageFixed in
vlebediantsev/notes-project-front:latest945675fd2636
webpack@5.88.2
5.94.0

Open the chart page →

15,206
registration-ms-front-helm-chartnotesprojectchart0.1.01 of 1See more

registration-ms-front-helm-chart notesprojectchart 0.1.0

1 of the 1 container images this version deploys carry CVE-2024-43788.

Container imageDigestPackageFixed in
vlebediantsev/registration-ms-front-app-host:latest54f69d116c50
webpack@5.88.2
5.94.0

Open the chart page →

15,187
relfinder-reformedrelfinderreformed2.0.01 of 2See more

relfinder-reformed relfinderreformed 2.0.0

1 of the 2 container images this version deploys carry CVE-2024-43788.

Container imageDigestPackageFixed in
ghcr.io/woodenmaiden/relfinderreformedapi:1.1.20708d30433d4
webpack@5.89.0
5.94.0

Open the chart page →

6,282
joplinrubxkubeVerified publisher1.3.11 of 2See more

joplin rubxkube 1.3.1

1 of the 2 container images this version deploys carry CVE-2024-43788.

Container imageDigestPackageFixed in
joplin/server:3.0-beta52af57880c0e
webpack@5.89.0
5.94.0

Open the chart page →

7,413
safe-stacksafe-global0.1.01 of 9See more

safe-stack safe-global 0.1.0

1 of the 9 container images this version deploys carry CVE-2024-43788.

Container imageDigestPackageFixed in
safeglobal/safe-client-gateway-nest:v1.51.012ccfd93fcaf
webpack@5.92.1
5.94.0

Open the chart page →

19,560
semaphoreschoenwald0.1.31 of 1See more

semaphore schoenwald 0.1.3

1 of the 1 container images this version deploys carry CVE-2024-43788.

Container imageDigestPackageFixed in
0hlov3/semaphore:v1.0.050f874ec096b
webpack@5.75.0
5.94.0

Open the chart page →

1,796
sneakerssneakers1.0.01 of 4See more

sneakers sneakers 1.0.0

1 of the 4 container images this version deploys carry CVE-2024-43788.

Container imageDigestPackageFixed in
helga09/shoes_ukr:v1.1.17999bc8b77c0
webpack@5.82.0
5.94.0

Open the chart page →

7,574
nordmart-reviewstakaterVerified publisher0.0.61 of 3See more

nordmart-review stakater 0.0.6

1 of the 3 container images this version deploys carry CVE-2024-43788.

Container imageDigestPackageFixed in
stakater/stakater-nordmart-review-ui:1.0.143f4926eedc74
webpack@5.38.1
5.94.0

Open the chart page →

11,554
nordmart-review-instancestakaterVerified publisher1.0.01 of 3See more

nordmart-review-instance stakater 1.0.0

1 of the 3 container images this version deploys carry CVE-2024-43788.

Container imageDigestPackageFixed in
stakater/stakater-nordmart-review-ui:1.0.143f4926eedc74
webpack@5.38.1
5.94.0

Open the chart page →

11,554
saleor-appstrieb-work0.6.03 of 5See more

saleor-apps trieb-work 0.6.0

3 of the 5 container images this version deploys carry CVE-2024-43788.

Container imageDigestPackageFixed in
ghcr.io/trieb-work/saleor-apps/saleor-app-products-feed:1.23.11d435b4ab372
webpack@5.82.1
5.94.0
ghcr.io/trieb-work/saleor-apps/saleor-app-search:1.24.328edefb6c92d
webpack@5.82.1
5.94.0
ghcr.io/trieb-work/saleor-apps/saleor-app-smtp:1.4.357a06bfba327
webpack@5.82.1
5.94.0

Open the chart page →

6,994
tfy-distributortruefoundryVerified publisher0.0.11 of 4See more

tfy-distributor truefoundry 0.0.1

1 of the 4 container images this version deploys carry CVE-2024-43788.

Container imageDigestPackageFixed in
public.ecr.aws/truefoundrycloud/async-service-distributor:5d48113bc678d694a0c8f8dabb2207c5aa2cfc53f74851ce31f5
webpack@5.89.0
5.94.0

Open the chart page →

17,323
workadventureworkadventure1.1.01 of 9See more

workadventure workadventure 1.1.0

1 of the 9 container images this version deploys carry CVE-2024-43788.

Container imageDigestPackageFixed in
thecodingmachine/workadventure-map-storage:v1.17.75bdab56da2fa
webpack@5.88.2
5.94.0

Open the chart page →

16,083

Container images carrying it

50 by charts deploying them

A fixed version is listed for 1 of the 2 affected packages.

Container imageDigestPackageFixed inUsed by
rcdelacruz/my-strapi-app:js-amd6438007f358355
webpack@5.89.0
5.94.0
3
stakater/stakater-nordmart-review-ui:1.0.143f4926eedc74
webpack@5.38.1
5.94.0
2
0hlov3/semaphore:v1.0.050f874ec096b
webpack@5.75.0
5.94.0
1
apimap/developer:v1.3.1406d3858e20c
webpack@5.74.0
5.94.0
1
apimap/portal:v2.4.0041a4790c65c
webpack@5.73.0
5.94.0
1
assistiot/open_api_frontend:1.0.1f11d82defc70
webpack@5.75.0
5.94.0
1
bicarus/mx-api-service:1.0.2-hf1dab88659ae3b
webpack@5.74.0
5.94.0
1
bluerange/bluerange-mosquitto:25f1bfbba84832
webpack@5.20.1
5.94.0
1
ccjacobs14/amazon:59a9b14a6f09e
webpack@5.80.0
5.94.0
1
codetogether/codetogether:latest4348c8a38752
webpack@5.91.0
5.94.0
1
coldatom/containers-security-api:latesteae9e82da080
webpack@5.75.0
5.94.0
1
coldatom/containers-security-front:latest7c2fbbb41bcf
webpack@5.75.0
5.94.0
1
countly/api:25.05.4f4cc7447c4f5
webpack@5.86.0
5.94.0
1
countly/countly-server:25.05.4e3c238248f99
webpack@5.86.0
5.94.0
1
countly/frontend:25.05.42acbc11499b6
webpack@5.86.0
5.94.0
1
documenso/documenso:v1.8.17f16a9449f18
webpack@5.92.1
5.94.0
1
flanksource/canary-checker-ui:v1.4.281764c84e550db
webpack@5.89.0
5.94.0
1
hecrom/myweatherprocessingreactclient:1.3.115454b54d5b28
webpack@5.78.0
5.94.0
1
helga09/shoes_ukr:v1.1.17999bc8b77c0
webpack@5.82.0
5.94.0
1
heywood8/redisinsight:2.28.00bc9ab313d37
webpack@5.80.0
5.94.0
1
joplin/server:3.0-beta52af57880c0e
webpack@5.89.0
5.94.0
1
joplin/server:2.14.2-betab87564ef34e9
webpack@5.89.0
5.94.0
1
jupyterhub/jupyterhub:5.4.63974ba945e65
node-webpack@5.76.1+dfsg1+~cs17.16.16-1
webpack@5.76.1
no fix listed
5.94.0
1
keyoxide/keyoxide:stable96f27a71269d
webpack@5.70.0
5.94.0
1
kobotoolbox/kpi:2.022.24dbcacc01bccd4
webpack@5.72.0
5.94.0
1
kyleslugg/klusterview:latestba8c36dfdfbd
webpack@5.87.0
5.94.0
1
loftsh/jspolicy:0.2.225deb9bd2683
webpack@5.75.0
5.94.0
1
ltdstudio/terraforming-mars:latest0e76c6f4eac0
webpack@5.39.0
5.94.0
1
misskey/misskey:12.110.1e08b7c478093
webpack@5.33.2
5.94.0
1
mitchxxx/amazon:214e72480ec63a
webpack@5.80.0
5.94.0
1
nightscout/cgm-remote-monitor:14.2.500c3b4833f1b
webpack@5.20.2
5.94.0
1
nightscout/cgm-remote-monitor:15.0.2ad29ca7a4de6
webpack@5.75.0
5.94.0
1
nightscout/cgm-remote-monitor:15.0.3f604dc4c03ca
webpack@5.75.0
5.94.0
1
ooghenekaro/amazon:latest03394ba1d6d8
webpack@5.80.0
5.94.0
1
safeglobal/safe-client-gateway-nest:v1.51.012ccfd93fcaf
webpack@5.92.1
5.94.0
1
thecodingmachine/workadventure-map-storage:v1.17.75bdab56da2fa
webpack@5.88.2
5.94.0
1
visualregressiontracker/api:5.0.11941aeb8c8bf9
webpack@5.88.2
5.94.0
1
vlebediantsev/notes-admin-front:latest007c6670ff48
webpack@5.88.2
5.94.0
1
vlebediantsev/notes-project-front:latest945675fd2636
webpack@5.88.2
5.94.0
1
vlebediantsev/registration-ms-front-app-host:latest54f69d116c50
webpack@5.88.2
5.94.0
1
winfred008/amazon:910a68de5b398
webpack@5.80.0
5.94.0
1
yidadaa/chatgpt-next-web:latesteaaa469ddeeb
webpack@5.88.1
5.94.0
1
ghcr.io/huscker/townsquare-backend:2.15.2e106681e7673
webpack@5.89.0
5.94.0
1
ghcr.io/m9sweeper/dash:1.6.02e27cdff8344
webpack@5.89.0
5.94.0
1
ghcr.io/trieb-work/saleor-apps/saleor-app-products-feed:1.23.11d435b4ab372
webpack@5.82.1
5.94.0
1
ghcr.io/trieb-work/saleor-apps/saleor-app-search:1.24.328edefb6c92d
webpack@5.82.1
5.94.0
1
ghcr.io/trieb-work/saleor-apps/saleor-app-smtp:1.4.357a06bfba327
webpack@5.82.1
5.94.0
1
ghcr.io/woodenmaiden/relfinderreformedapi:1.1.20708d30433d4
webpack@5.89.0
5.94.0
1
ghcr.io/zoriya/kyoo_front:4.7.1d7f76c9c65d9
webpack@5.93.0
5.94.0
1
public.ecr.aws/truefoundrycloud/async-service-distributor:5d48113bc678d694a0c8f8dabb2207c5aa2cfc53f74851ce31f5
webpack@5.89.0
5.94.0
1

syft 1.42.1 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.