StackRadar

CVE-2024-55565

Medium

Advisory

Published 9 Dec 2024In the index since 6 Sept 2026
Severity
Medium
worst across findings
CVSS
4.3
base score, highest
EPSS
0.007
50th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
199
of 17,781 indexed, latest versions
Container images
202
deployed by those charts
Fix available
1 of 2
affected packages

Predictable results in nanoid generation when given non-integer values

Carried by container images the latest versions of 199 of 17,781 indexed charts deploy, on 202 images.

Affected packageAffected versionsFixed inImages
nanoidnpm2.1.11, 3.1.12, 3.1.16, 3.1.20+18 more3.3.8, 5.0.9202
node-postcssdeb8.4.31+~cs8.0.26-1no fix listed1
OSV records
GHSA-mwcw-c2x4-8c55UBUNTU-CVE-2024-55565

Charts affected

199 by stars
ChartLatestAffected imagesRadar Score
admin-portaladmin-web-portal1.2.11 of 2See more

admin-portal admin-web-portal 1.2.1

1 of the 2 container images this version deploys carry CVE-2024-55565.

Container imageDigestPackageFixed in
soulou2019/node-server:latest5e6ecfcc109e
nanoid@3.3.6
3.3.8

Open the chart page →

3,419
katalogalpineworks0.1.21 of 5See more

katalog alpineworks 0.1.2

1 of the 5 container images this version deploys carry CVE-2024-55565.

Container imageDigestPackageFixed in
ghcr.io/alpineworks/katalog-frontend:v1.0.734b76dcb1c10
nanoid@3.3.7
3.3.8

Open the chart page →

4,497
openhab-cloudandibraeuVerified publisher1.2.61 of 1See more

openhab-cloud andibraeu 1.2.6

1 of the 1 container images this version deploys carry CVE-2024-55565.

Container imageDigestPackageFixed in
openhab/openhab-cloud:a8138a329dd2bac8c4b
nanoid@3.3.3
3.3.8

Open the chart page →

3,437
apimap-developerapimapOfficialVerified publisher1.4.11 of 1See more

apimap-developer apimap 1.4.1

1 of the 1 container images this version deploys carry CVE-2024-55565.

Container imageDigestPackageFixed in
apimap/developer:v1.3.1406d3858e20c
nanoid@3.3.4
3.3.8

Open the chart page →

2,353
apimap-portalapimapOfficialVerified publisher2.4.01 of 1See more

apimap-portal apimap 2.4.0

1 of the 1 container images this version deploys carry CVE-2024-55565.

Container imageDigestPackageFixed in
apimap/portal:v2.4.0041a4790c65c
nanoid@3.3.4
3.3.8

Open the chart page →

2,396
openapiassist-iot-open-api-management0.2.21 of 6See more

openapi assist-iot-open-api-management 0.2.2

1 of the 6 container images this version deploys carry CVE-2024-55565.

Container imageDigestPackageFixed in
assistiot/open_api_frontend:1.0.1f11d82defc70
nanoid@3.3.4
3.3.8

Open the chart page →

18,277
astrotrekastria0.0.21 of 4See more

astrotrek astria 0.0.2

1 of the 4 container images this version deploys carry CVE-2024-55565.

Container imageDigestPackageFixed in
ghcr.io/astriaorg/astrotrek:0.1.05889bea38e56
nanoid@3.3.7
3.3.8

Open the chart page →

32,501
nas-appsawesomeVerified publisher2.0.01 of 8See more

nas-apps awesome 2.0.0

1 of the 8 container images this version deploys carry CVE-2024-55565.

Container imageDigestPackageFixed in
ltdstudio/terraforming-mars:latest0e76c6f4eac0
nanoid@3.1.23
3.3.8

Open the chart page →

7,152
awesomeblessingappawesomeblessingapp1.1.01 of 1See more

awesomeblessingapp awesomeblessingapp 1.1.0

1 of the 1 container images this version deploys carry CVE-2024-55565.

Container imageDigestPackageFixed in
bnwokoye/nodejswebapp:latest74de7dc7ebfb
nanoid@3.3.3
3.3.8

Open the chart page →

1,267
myhelmappbelihelmapp1.1.01 of 1See more

myhelmapp belihelmapp 1.1.0

1 of the 1 container images this version deploys carry CVE-2024-55565.

Container imageDigestPackageFixed in
belirta/beli-docker:v1.0.0f65ad0e23b4d
nanoid@3.3.3
3.3.8

Open the chart page →

1,187
mx-apibicarus-labs0.1.01 of 4See more

mx-api bicarus-labs 0.1.0

1 of the 4 container images this version deploys carry CVE-2024-55565.

Container imageDigestPackageFixed in
bicarus/mx-api-service:1.0.2-hf1dab88659ae3b
nanoid@3.3.4
3.3.8

Open the chart page →

4,455
overseerrbrandan-schmitz-helm-chartsVerified publisher1.4.01 of 1See more

overseerr brandan-schmitz-helm-charts 1.4.0

1 of the 1 container images this version deploys carry CVE-2024-55565.

Container imageDigestPackageFixed in
linuxserver/overseerr:1.35.06108ed066d4a
nanoid@3.3.4
3.3.8

Open the chart page →

3,071
caninecanine0.1.101 of 7See more

canine canine 0.1.10

1 of the 7 container images this version deploys carry CVE-2024-55565.

Container imageDigestPackageFixed in
ghcr.io/caninehq/canine:latesta058034ca006
nanoid@3.3.7
3.3.8

Open the chart page →

14,130
chatgpt-next-webchatgpt-next-web0.1.11 of 1See more

chatgpt-next-web chatgpt-next-web 0.1.1

1 of the 1 container images this version deploys carry CVE-2024-55565.

Container imageDigestPackageFixed in
yidadaa/chatgpt-next-web:latesteaaa469ddeeb
nanoid@3.3.7
3.3.8

Open the chart page →

1,977
countlychristianhuthVerified publisher5.2.12 of 3See more

countly christianhuth 5.2.1

2 of the 3 container images this version deploys carry CVE-2024-55565.

Container imageDigestPackageFixed in
countly/api:25.05.4f4cc7447c4f5
nanoid@3.3.3
3.3.8
countly/frontend:25.05.42acbc11499b6
nanoid@3.3.3
3.3.8

Open the chart page →

7,295
codehubcodehubVerified publisher6.2.181 of 5See more

codehub codehub 6.2.18

1 of the 5 container images this version deploys carry CVE-2024-55565.

Container imageDigestPackageFixed in
jupyterhub/jupyterhub:5.4.63974ba945e65
nanoid@4.0.2
node-postcss@8.4.31+~cs8.0.26-1
5.0.9
no fix listed

Open the chart page →

13,220
coderstudio-strapi-devcoderstudio-strapi-devVerified publisher0.0.11 of 3See more

coderstudio-strapi-dev coderstudio-strapi-dev 0.0.1

1 of the 3 container images this version deploys carry CVE-2024-55565.

Container imageDigestPackageFixed in
rcdelacruz/my-strapi-app:js-amd6438007f358355
nanoid@3.3.7
3.3.8

Open the chart page →

5,141
docker-composecoderstudio-strapi-devVerified publisher0.0.11 of 3See more

docker-compose coderstudio-strapi-dev 0.0.1

1 of the 3 container images this version deploys carry CVE-2024-55565.

Container imageDigestPackageFixed in
rcdelacruz/my-strapi-app:js-amd6438007f358355
nanoid@3.3.7
3.3.8

Open the chart page →

5,141
strapi-devcoderstudio-strapi-devVerified publisher0.0.11 of 3See more

strapi-dev coderstudio-strapi-dev 0.0.1

1 of the 3 container images this version deploys carry CVE-2024-55565.

Container imageDigestPackageFixed in
rcdelacruz/my-strapi-app:js-amd6438007f358355
nanoid@3.3.7
3.3.8

Open the chart page →

5,141
conduction-uiconduction-ui0.1.01 of 6See more

conduction-ui conduction-ui 0.1.0

1 of the 6 container images this version deploys carry CVE-2024-55565.

Container imageDigestPackageFixed in
conduction/conduction-ui-app:devd591f5e6f2a9
nanoid@3.1.20
3.3.8

Open the chart page →

12,907
containers-security-chartscontainers-security0.1.01 of 7See more

containers-security-charts containers-security 0.1.0

1 of the 7 container images this version deploys carry CVE-2024-55565.

Container imageDigestPackageFixed in
coldatom/containers-security-front:latest7c2fbbb41bcf
nanoid@3.3.4
3.3.8

Open the chart page →

9,146
myawesomeappcuriousgeekshelmfirstapp0.1.21 of 1See more

myawesomeapp curiousgeekshelmfirstapp 0.1.2

1 of the 1 container images this version deploys carry CVE-2024-55565.

Container imageDigestPackageFixed in
srini78/nodejswebappeks:latest5d1cbdc6833a
nanoid@3.3.3
3.3.8

Open the chart page →

1,267
homarrdelerVerified publisher1.0.11 of 1See more

homarr deler 1.0.1

1 of the 1 container images this version deploys carry CVE-2024-55565.

Container imageDigestPackageFixed in
ghcr.io/ajnart/homarr:0.13.4985456bdfb46
nanoid@3.3.6
3.3.8

Open the chart page →

1,924
difydify1.0.01 of 4See more

dify dify 1.0.0

1 of the 4 container images this version deploys carry CVE-2024-55565.

Container imageDigestPackageFixed in
langgenius/dify-web:1.0.0d64914ff0d6d
nanoid@3.3.7
3.3.8

Open the chart page →

19,224
directusdirectusVerified publisher0.9.101 of 4See more

directus directus 0.9.10

1 of the 4 container images this version deploys carry CVE-2024-55565.

Container imageDigestPackageFixed in
directus/directus:11.1.0e3c8bb975350
nanoid@3.3.7
3.3.8

Open the chart page →

4,551
uptime-kumadjjudas21Verified publisher1.5.181 of 1See more

uptime-kuma djjudas21 1.5.18

1 of the 1 container images this version deploys carry CVE-2024-55565.

Container imageDigestPackageFixed in
louislam/uptime-kuma:1.23.12bc6f244ecf27
nanoid@3.3.7
3.3.8

Open the chart page →

4,217
documensodocumensoVerified publisher0.0.61 of 2See more

documenso documenso 0.0.6

1 of the 2 container images this version deploys carry CVE-2024-55565.

Container imageDigestPackageFixed in
documenso/documenso:v1.8.17f16a9449f18
nanoid@3.3.7
3.3.8

Open the chart page →

2,862
dumpstoredumpstore0.1.11 of 2See more

dumpstore dumpstore 0.1.1

1 of the 2 container images this version deploys carry CVE-2024-55565.

Container imageDigestPackageFixed in
ghcr.io/manzil-infinity180/frontend-dumpstore:226f28ca3efa6d3691044813cd09085e28d4a7b44e6394b715d9
nanoid@3.3.7
3.3.8

Open the chart page →

4,251
dashboardedu1.0.01 of 1See more

dashboard edu 1.0.0

1 of the 1 container images this version deploys carry CVE-2024-55565.

Container imageDigestPackageFixed in
sysnet4admin/dashboard:bluec5bd3bb1b5a6
nanoid@3.3.7
3.3.8

Open the chart page →

1,344
frontend-charteks-3-tier-app-chart0.1.01 of 1See more

frontend-chart eks-3-tier-app-chart 0.1.0

1 of the 1 container images this version deploys carry CVE-2024-55565.

Container imageDigestPackageFixed in
arfath29/3-tier-app-frontend:latest384b3e377f47
nanoid@3.1.23
3.3.8

Open the chart page →

3,744
blobscanethereum-helm-chartsVerified publisher0.1.11 of 1See more

blobscan ethereum-helm-charts 0.1.1

1 of the 1 container images this version deploys carry CVE-2024-55565.

Container imageDigestPackageFixed in
ethpandaops/blobscan:latest7a9ab6370657
nanoid@3.3.4
3.3.8

Open the chart page →

1,329
ethstatsethereum-helm-chartsVerified publisher0.1.41 of 1See more

ethstats ethereum-helm-charts 0.1.4

1 of the 1 container images this version deploys carry CVE-2024-55565.

Container imageDigestPackageFixed in
skylenet/ethstats-server:pow-latestd757cc016198
nanoid@3.1.32
3.3.8

Open the chart page →

1,109
bzz-token-serviceethersphereVerified publisher0.2.01 of 1See more

bzz-token-service ethersphere 0.2.0

1 of the 1 container images this version deploys carry CVE-2024-55565.

Container imageDigestPackageFixed in
ethersphere/bzz-token-service:latest7624f11a72ad
nanoid@3.1.20
3.3.8

Open the chart page →

3,260
onboarding-faucetethersphereVerified publisher0.2.01 of 1See more

onboarding-faucet ethersphere 0.2.0

1 of the 1 container images this version deploys carry CVE-2024-55565.

Container imageDigestPackageFixed in
ethersphere/onboarding-faucet:0.3.0513154aab230
nanoid@3.3.1
3.3.8

Open the chart page →

3,320
mandefactlyVerified publisher0.5.161 of 3See more

mande factly 0.5.16

1 of the 3 container images this version deploys carry CVE-2024-55565.

Container imageDigestPackageFixed in
factly/mande-web:0.34.1742355964b0e
nanoid@3.3.6
3.3.8

Open the chart page →

4,777
fickyhelmappfickyhelmapp1.1.01 of 1See more

fickyhelmapp fickyhelmapp 1.1.0

1 of the 1 container images this version deploys carry CVE-2024-55565.

Container imageDigestPackageFixed in
tundeficky/nodejs-app:v1.0.03cf9a9ce54e8
nanoid@3.3.3
3.3.8

Open the chart page →

3,311
nightscoutgeek-cookbookVerified publisher1.2.21 of 1See more

nightscout geek-cookbook 1.2.2

1 of the 1 container images this version deploys carry CVE-2024-55565.

Container imageDigestPackageFixed in
nightscout/cgm-remote-monitor:14.2.500c3b4833f1b
nanoid@3.1.20
3.3.8

Open the chart page →

4,043
ghostghostVerified publisher0.1.01 of 4See more

ghost ghost 0.1.0

1 of the 4 container images this version deploys carry CVE-2024-55565.

Container imageDigestPackageFixed in
library/ghost:5.79.083f7bf209844
nanoid@3.3.7
3.3.8

Open the chart page →

9,019
Governify-Bluejaygovernify0.1.01 of 12See more

Governify-Bluejay governify 0.1.0

1 of the 12 container images this version deploys carry CVE-2024-55565.

Container imageDigestPackageFixed in
governify/assets-manager:v1.4.12987672448c7
nanoid@3.1.25
3.3.8

Open the chart page →

22,512
Governify-Falcongovernify0.1.01 of 10See more

Governify-Falcon governify 0.1.0

1 of the 10 container images this version deploys carry CVE-2024-55565.

Container imageDigestPackageFixed in
governify/assets-manager:v1.4.12987672448c7
nanoid@3.1.25
3.3.8

Open the chart page →

24,319
opentelemetry-demogpg-dev0.33.82 of 27See more

opentelemetry-demo gpg-dev 0.33.8

2 of the 27 container images this version deploys carry CVE-2024-55565.

Container imageDigestPackageFixed in
ghcr.io/open-telemetry/demo:1.12.0-frontend8b348f00ca4c
nanoid@3.3.7
3.3.8
ghcr.io/open-telemetry/demo:1.12.0-flagduif6bdafaa9075
nanoid@3.3.7
3.3.8

Open the chart page →

49,025
hive-appgraphql-hive1.0.01 of 1See more

hive-app graphql-hive 1.0.0

1 of the 1 container images this version deploys carry CVE-2024-55565.

Container imageDigestPackageFixed in
ghcr.io/kamilkisiela/graphql-hive/app:59b64c36c866b3555c135c70de76a884e63f8619a4a3639899f7
nanoid@3.3.4
3.3.8

Open the chart page →

2,682
hive-appgraphql-hive-subcharts1.0.01 of 1See more

hive-app graphql-hive-subcharts 1.0.0

1 of the 1 container images this version deploys carry CVE-2024-55565.

Container imageDigestPackageFixed in
ghcr.io/kamilkisiela/graphql-hive/app:59b64c36c866b3555c135c70de76a884e63f8619a4a3639899f7
nanoid@3.3.4
3.3.8

Open the chart page →

2,682
h2ph2pVerified publisher1.0.11 of 1See more

h2p h2p 1.0.1

1 of the 1 container images this version deploys carry CVE-2024-55565.

Container imageDigestPackageFixed in
dacinfomotion/h2p:latest68fa393b472c
nanoid@3.3.3
3.3.8

Open the chart page →

1,713
hoppscotchhelm-charts-nr0.3.11 of 1See more

hoppscotch helm-charts-nr 0.3.1

1 of the 1 container images this version deploys carry CVE-2024-55565.

Container imageDigestPackageFixed in
hoppscotch/hoppscotch:2024.8.2f1da831950b7
nanoid@3.3.7
3.3.8

Open the chart page →

3,451
countlyhelmforgeVerified publisher1.2.61 of 3See more

countly helmforge 1.2.6

1 of the 3 container images this version deploys carry CVE-2024-55565.

Container imageDigestPackageFixed in
countly/countly-server:25.05.4e3c238248f99
nanoid@3.3.3
3.3.8

Open the chart page →

18,813
openbashelm-openbasVerified publisher1.8.141 of 7See more

openbas helm-openbas 1.8.14

1 of the 7 container images this version deploys carry CVE-2024-55565.

Container imageDigestPackageFixed in
openbas/caldera-server:5.1.0a277796d9724
nanoid@3.3.4
3.3.8

Open the chart page →

25,017
wikijshomeenterpriseinc1.4.01 of 1See more

wikijs homeenterpriseinc 1.4.0

1 of the 1 container images this version deploys carry CVE-2024-55565.

Container imageDigestPackageFixed in
requarks/wiki:canary-2.5.2438b5865a7386c
nanoid@3.1.22
3.3.8

Open the chart page →

4,253
hoppscotchhoppscotch0.1.11 of 1See more

hoppscotch hoppscotch 0.1.1

1 of the 1 container images this version deploys carry CVE-2024-55565.

Container imageDigestPackageFixed in
hoppscotch/hoppscotch:2024.11.0538fe6ded4b6
nanoid@3.3.7
3.3.8

Open the chart page →

3,614
townsquarehuscker-chartsVerified publisher1.0.41 of 2See more

townsquare huscker-charts 1.0.4

1 of the 2 container images this version deploys carry CVE-2024-55565.

Container imageDigestPackageFixed in
ghcr.io/huscker/townsquare-backend:2.15.2e106681e7673
nanoid@3.3.7
3.3.8

Open the chart page →

3,407

Container images carrying it

202 by charts deploying them

A fixed version is listed for 1 of the 2 affected packages.

Container imageDigestPackageFixed inUsed by
rcdelacruz/my-strapi-app:js-amd6438007f358355
nanoid@3.3.7
3.3.8
3
ghcr.io/kamilkisiela/graphql-hive/app:59b64c36c866b3555c135c70de76a884e63f8619a4a3639899f7
nanoid@3.3.4
3.3.8
3
governify/assets-manager:v1.4.12987672448c7
nanoid@3.1.25
3.3.8
2
hookiesolutions/webhookie:latest0629694246ba
nanoid@2.1.11
3.3.8
2
hoppscotch/hoppscotch:2024.8.2f1da831950b7
nanoid@3.3.7
3.3.8
2
moreillon/api-proxy:a3e8b41e9e578c9653b6
nanoid@3.3.3
3.3.8
2
moreillon/group-manager:v4.9.0d5a0ec8394c0
nanoid@3.3.1
3.3.8
2
moreillon/user-manager:v5.0.2e1c9bfab5c16
nanoid@3.3.3
3.3.8
2
outlinewiki/outline:0.69.1d060dcd8f9aa
nanoid@3.3.4
3.3.8
2
rajnandan1/kener:3.2.1930407afca731
nanoid@4.0.2
5.0.9
2
requarks/wiki:2:latest68f0d1848261
nanoid@3.2.0
3.3.8
2
stakater/stakater-nordmart-review-ui:1.0.143f4926eedc74
nanoid@3.1.23
3.3.8
2
sysnet4admin/dashboard:bluec5bd3bb1b5a6
nanoid@3.3.7
3.3.8
2
tzahi12345/youtubedl-material:4.3.2:latest2f943d584711
nanoid@3.3.1
3.3.8
2
ghcr.io/lissy93/dashy:2.1.1acb40032ad4b
nanoid@3.3.4
3.3.8
2
quay.io/hedgedoc/hedgedoc:1.9.4e09967519a1d
nanoid@2.1.11
3.3.8
2
activepieces/activepieces:0.23.0c26188b44e62
nanoid@3.3.6
3.3.8
1
anamskenneth/recipe_frontend:2025-06-079ecf04f42cc3
nanoid@3.3.7
3.3.8
1
apimap/developer:v1.3.1406d3858e20c
nanoid@3.3.4
3.3.8
1
apimap/portal:v2.4.0041a4790c65c
nanoid@3.3.4
3.3.8
1
arfath29/3-tier-app-frontend:latest384b3e377f47
nanoid@3.1.23
3.3.8
1
assistiot/open_api_frontend:1.0.1f11d82defc70
nanoid@3.3.4
3.3.8
1
baserow/baserow:1.30.1df0c42eb67e8
nanoid@3.3.7
3.3.8
1
belirta/beli-docker:v1.0.0f65ad0e23b4d
nanoid@3.3.3
3.3.8
1
bicarus/mx-api-service:1.0.2-hf1dab88659ae3b
nanoid@3.3.4
3.3.8
1
bnwokoye/nodejswebapp:latest74de7dc7ebfb
nanoid@3.3.3
3.3.8
1
ccjacobs14/amazon:59a9b14a6f09e
nanoid@3.3.6
3.3.8
1
chibisafe/chibisafe:latest836467a50792
nanoid@3.3.7
3.3.8
1
chibisafe/chibisafe-server:latest3da4fcbc1a18
nanoid@3.3.7
3.3.8
1
coderaiser/cloudcmd:16.6.1b34a9775c7ce
nanoid@3.3.4
3.3.8
1
coldatom/containers-security-front:latest7c2fbbb41bcf
nanoid@3.3.4
3.3.8
1
conduction/conduction-ui-app:devd591f5e6f2a9
nanoid@3.1.20
3.3.8
1
countly/api:25.05.4f4cc7447c4f5
nanoid@3.3.3
3.3.8
1
countly/countly-server:25.05.4e3c238248f99
nanoid@3.3.3
3.3.8
1
countly/frontend:25.05.42acbc11499b6
nanoid@3.3.3
3.3.8
1
dacinfomotion/h2p:latest68fa393b472c
nanoid@3.3.3
3.3.8
1
danny1dockerhub/nodejswebapp:lateste434683fcc89
nanoid@3.3.3
3.3.8
1
dessalines/lemmy-ui:0.19.20ee4c620d8e93
nanoid@3.3.7
3.3.8
1
directus/directus:11.1.0e3c8bb975350
nanoid@3.3.7
3.3.8
1
documenso/documenso:v1.8.17f16a9449f18
nanoid@3.3.7
3.3.8
1
ethereumoptimism/data-transport-layer:0.5.56e07968a0e686
nanoid@3.3.4
3.3.8
1
ethersphere/bzz-token-service:latest7624f11a72ad
nanoid@3.1.20
3.3.8
1
ethersphere/onboarding-faucet:0.3.0513154aab230
nanoid@3.3.1
3.3.8
1
ethpandaops/blobscan:latest7a9ab6370657
nanoid@3.3.4
3.3.8
1
factly/mande-web:0.34.1742355964b0e
nanoid@3.3.6
3.3.8
1
fallenbagel/jellyseerr:1.7.06dcdb5ba5091
nanoid@3.3.4
3.3.8
1
glarad/mcp-management-portal-clr:0.6.8807e453354a7
nanoid@2.1.11
3.3.8
1
hamid2021/nodejs-dockercli:latest429d99890c3c
nanoid@3.3.3
3.3.8
1
haveagitgat/tdarr_node:2.17.013ff0913202dd
nanoid@2.1.11
3.3.8
1
hecrom/myweatherprocessingreactclient:1.3.115454b54d5b28
nanoid@3.3.6
3.3.8
1

syft 1.42.1 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.