StackRadar

CVE-2024-43800

Medium

Advisory

Published 10 Sept 2024In the index since 5 Sept 2026
Severity
Medium
worst across findings
CVSS
5.0
base score, highest
EPSS
0.006
48th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
354
of 17,781 indexed, latest versions
Container images
355
deployed by those charts
Fix available
1 of 1
affected package

serve-static vulnerable to template injection that can lead to XSS

Carried by container images the latest versions of 354 of 17,781 indexed charts deploy, on 355 images.

Affected packageAffected versionsFixed inImages
serve-staticnpm1.10.0, 1.10.2, 1.10.3, 1.12.2+6 more1.16.0355
OSV records
GHSA-cm22-4g7w-348p

Charts affected

354 by stars
ChartLatestAffected imagesRadar Score
playwright-synthetic-monitoringwork-adventure1.0.11 of 1See more

playwright-synthetic-monitoring work-adventure 1.0.1

1 of the 1 container images this version deploys carry CVE-2024-43800.

Container imageDigestPackageFixed in
workadventure/playwright-synthetic-monitoring:main92b664c2a06f
serve-static@1.15.0
1.16.0

Open the chart page →

14,100
workadventureworkadventure1.1.02 of 9See more

workadventure workadventure 1.1.0

2 of the 9 container images this version deploys carry CVE-2024-43800.

Container imageDigestPackageFixed in
thecodingmachine/workadventure-map-storage:v1.17.75bdab56da2fa
serve-static@1.15.0
1.16.0
thecodingmachine/workadventure-uploader:v1.17.73ccd467543b3
serve-static@1.15.0
1.16.0

Open the chart page →

16,083
skoonerxdVerified publisher1.1.01 of 1See more

skooner xd 1.1.0

1 of the 1 container images this version deploys carry CVE-2024-43800.

Container imageDigestPackageFixed in
ymuski/skooner:latest67819ca511b5
serve-static@1.14.1
1.16.0

Open the chart page →

1,752
alertmanager-matrix-forwarderzloi-space1.0.11 of 2See more

alertmanager-matrix-forwarder zloi-space 1.0.1

1 of the 2 container images this version deploys carry CVE-2024-43800.

Container imageDigestPackageFixed in
zl0i/alertmanager-matrix-forwarder:v1.0.0e94047931739
serve-static@1.14.1
1.16.0

Open the chart page →

3,118

Container images carrying it

355 by charts deploying them

A fixed version is listed for 1 of the 1 affected package.

Container imageDigestPackageFixed inUsed by
assistiot/dlt_api:2.1.0c8a170683be7
serve-static@1.15.0
1.16.0
1
assistiot/fl_orchestrator:api-latest7473d77448e1
serve-static@1.15.0
1.16.0
1
assistiot/monitoring_notifying:2.0.068324d0fa5bb
serve-static@1.15.0
1.16.0
1
assistiot/multi-link_client:latestcf048365d042
serve-static@1.15.0
1.16.0
1
assistiot/multi-link_server:latestf38c76a4c960
serve-static@1.15.0
1.16.0
1
assistiot/open_api_frontend:1.0.1f11d82defc70
serve-static@1.15.0
1.16.0
1
assistiot/smart-orchestrator_cluster:latest4f41e1defe99
serve-static@1.15.0
1.16.0
1
assistiot/smart-orchestrator_enabler:latest89f37e88c871
serve-static@1.15.0
1.16.0
1
assistiot/smart-orchestrator_repository:latesta8b8dbed04a4
serve-static@1.15.0
1.16.0
1
automatischio/automatisch:0.15.03bace7a12d5f
serve-static@1.14.2
1.16.0
1
baserow/baserow:1.30.1df0c42eb67e8
serve-static@1.15.0
1.16.0
1
bastilimbach/docker-magicmirror:v2.15.041b0835ab31e
serve-static@1.14.1
1.16.0
1
belirta/beli-docker:v1.0.0f65ad0e23b4d
serve-static@1.15.0
1.16.0
1
bicarus/http-https-echo:2785dd6a7e805e
serve-static@1.15.0
1.16.0
1
bicarus/mx-api-service:1.0.2-hf1dab88659ae3b
serve-static@1.15.0
1.16.0
1
bnwokoye/nodejswebapp:latest74de7dc7ebfb
serve-static@1.15.0
1.16.0
1
browserless/chrome:1.48.0-chrome-stablec81ae5585b47
serve-static@1.14.1
1.16.0
1
carbonetes/carbonetes-analyzer:1.0.31b9b93c9a37f
serve-static@1.14.1
1.16.0
1
catalysm/csmm:latestf003b35f54d9
serve-static@1.13.1
1.16.0
1
ccjacobs14/amazon:59a9b14a6f09e
serve-static@1.15.0
1.16.0
1
chatwoot/chatwoot:v4.15.167ebc751c171
serve-static@1.14.1
1.16.0
1
christianhuth/node-hostname:1.0.1c07f414a3e4b
serve-static@1.13.2
1.16.0
1
cnieg/maildev:v1.1.998ee05668915
serve-static@1.14.1
1.16.0
1
coderaiser/cloudcmd:16.6.1b34a9775c7ce
serve-static@1.15.0
1.16.0
1
codercom/code-server:4.11.0-debian1e2cc688008e
serve-static@1.14.1
1.16.0
1
codercom/code-server:3.10.247605610ad8d
serve-static@1.14.1
1.16.0
1
codetogether/codetogether:latest4348c8a38752
serve-static@1.15.0
1.16.0
1
coldatom/containers-security-api:latesteae9e82da080
serve-static@1.15.0
1.16.0
1
coldatom/containers-security-front:latest7c2fbbb41bcf
serve-static@1.15.0
1.16.0
1
conduction/conduction-ui-app:devd591f5e6f2a9
serve-static@1.14.1
1.16.0
1
countly/api:25.05.4f4cc7447c4f5
serve-static@1.15.0
1.16.0
1
countly/countly-server:25.05.4e3c238248f99
serve-static@1.15.0
1.16.0
1
countly/frontend:25.05.42acbc11499b6
serve-static@1.15.0
1.16.0
1
cryptexlabs/authf:0.12.11189c07411d7c
serve-static@1.15.0
1.16.0
1
dacinfomotion/h2p:latest68fa393b472c
serve-static@1.15.0
1.16.0
1
danny1dockerhub/nodejswebapp:lateste434683fcc89
serve-static@1.15.0
1.16.0
1
datarhei/restreamer:0.6.4655e12f9eeed
serve-static@1.14.1
1.16.0
1
davdiv/musicociel:deva85f99be882c
serve-static@1.15.0
1.16.0
1
davidvmar/urjc-davidvmar-server:1.0.05663f5b24615
serve-static@1.14.1
1.16.0
1
decayofmind/hubot:3.3.21e18e92fe694
serve-static@1.14.1
1.16.0
1
defactops/defactops-backend:1.0.2307b663c0092a
serve-static@1.15.0
1.16.0
1
denisshav/backend:latest4cc8dc5a4499
serve-static@1.14.1
1.16.0
1
dessalines/lemmy-ui:0.19.20ee4c620d8e93
serve-static@1.15.0
1.16.0
1
devspacecloud/ui:0.3.3deef55ff29a7
serve-static@1.14.1
1.16.0
1
dipugodocker/pdf-editor:1.0-frontendd431c37fe1cd
serve-static@1.15.0
1.16.0
1
directus/directus:11.1.0e3c8bb975350
serve-static@1.15.0
1.16.0
1
eameti/node-app:latestf36642affa86
serve-static@1.15.0
1.16.0
1
enketo/enketo-express:3.0.4dcad9c2273f6
serve-static@1.14.1
1.16.0
1
ethereumex/eth-stats-dashboard:v0.0.1a7603aa8df4c
serve-static@1.13.1
1.16.0
1
ethereumoptimism/data-transport-layer:0.5.56e07968a0e686
serve-static@1.14.1
1.16.0
1

syft 1.42.1 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.