StackRadar

CVE-2024-9506

Low

Advisory

Published 15 Oct 2024In the index since 6 Sept 2026
Severity
Low
worst across findings
CVSS
3.7
base score, highest
EPSS
0.005
43rd percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
18
of 17,781 indexed, latest versions
Container images
22
deployed by those charts
Fix available
1 of 1
affected package

ReDoS vulnerability in vue package that is exploitable through inefficient regex evaluation in the parseHTML function

Carried by container images the latest versions of 18 of 17,781 indexed charts deploy, on 22 images.

Affected packageAffected versionsFixed inImages
vuenpm2.6.10, 2.6.11, 2.6.12, 2.6.14+4 more3.0.0-alpha.022
OSV records
GHSA-5j4c-8p2g-v4jx

Charts affected

18 by stars
ChartLatestAffected imagesRadar Score
convertigoconvertigoOfficialVerified publisher8.4.31 of 5See more

convertigo convertigo 8.4.3

1 of the 5 container images this version deploys carry CVE-2024-9506.

Container imageDigestPackageFixed in
baserow/baserow:1.30.1df0c42eb67e8
vue@2.7.15
3.0.0-alpha.0

Open the chart page →

17,404
mealiegeek-cookbookVerified publisher5.1.21 of 2See more

mealie geek-cookbook 5.1.2

1 of the 2 container images this version deploys carry CVE-2024-9506.

Container imageDigestPackageFixed in
hkotel/mealie:frontend-v1.0.0beta-23c04c0e85039
vue@2.6.14
3.0.0-alpha.0

Open the chart page →

7,579
zwavejs2mqttgeek-cookbookVerified publisher5.4.21 of 1See more

zwavejs2mqtt geek-cookbook 5.4.2

1 of the 1 container images this version deploys carry CVE-2024-9506.

Container imageDigestPackageFixed in
zwavejs/zwavejs2mqtt:5.0.215a6040fb468
vue@2.6.14
3.0.0-alpha.0

Open the chart page →

3,476
n8none-acre-fundVerified publisher0.1.521 of 3See more

n8n one-acre-fund 0.1.52

1 of the 3 container images this version deploys carry CVE-2024-9506.

Container imageDigestPackageFixed in
n8nio/n8n:0.212.0a9195bc499a3
vue@2.7.14
3.0.0-alpha.0

Open the chart page →

7,776
feedbacksystemthm-mni-iiVerified publisher0.47.11 of 10See more

feedbacksystem thm-mni-ii 0.47.1

1 of the 10 container images this version deploys carry CVE-2024-9506.

Container imageDigestPackageFixed in
thmmniii/fbs-qcm-frontend:v1.27.1a347f7f4d144
vue@2.6.14
3.0.0-alpha.0

Open the chart page →

28,534
data-fairdata354-helmVerified publisher1.1.26 of 12See more

data-fair data354-helm 1.1.2

6 of the 12 container images this version deploys carry CVE-2024-9506.

Container imageDigestPackageFixed in
ghcr.io/data-fair/data-fair:3cc9498b64b5b
vue@2.7.16
3.0.0-alpha.0
ghcr.io/data-fair/metrics:0a8d40779eeae
vue@2.6.14
3.0.0-alpha.0
ghcr.io/data-fair/notify:3c739b74dabb0
vue@2.7.16
3.0.0-alpha.0
ghcr.io/data-fair/portals:18b621866ceb2
vue@2.7.16
3.0.0-alpha.0
ghcr.io/data-fair/processings:15a9216989707
vue@2.7.15
3.0.0-alpha.0
ghcr.io/data-fair/simple-directory:438a4f32fad82
vue@2.6.14
3.0.0-alpha.0

Open the chart page →

38,346
recipesgeek-cookbookVerified publisher6.6.21 of 2See more

recipes geek-cookbook 6.6.2

1 of the 2 container images this version deploys carry CVE-2024-9506.

Container imageDigestPackageFixed in
vabene1111/recipes:1.0.5.2ec4e9e2905b0
vue@2.6.14
3.0.0-alpha.0

Open the chart page →

7,801
dashykrzwiatrzyk1.0.01 of 1See more

dashy krzwiatrzyk 1.0.0

1 of the 1 container images this version deploys carry CVE-2024-9506.

Container imageDigestPackageFixed in
ghcr.io/lissy93/dashy:2.1.1acb40032ad4b
vue@2.6.14
3.0.0-alpha.0

Open the chart page →

3,143
testhubteshubVerified publisher0.1.41 of 3See more

testhub teshub 0.1.4

1 of the 3 container images this version deploys carry CVE-2024-9506.

Container imageDigestPackageFixed in
testhubio/testhub-frontend:on-preme86c2db53be8
vue@2.6.11
3.0.0-alpha.0

Open the chart page →

7,517
apimap-developerapimapOfficialVerified publisher1.4.11 of 1See more

apimap-developer apimap 1.4.1

1 of the 1 container images this version deploys carry CVE-2024-9506.

Container imageDigestPackageFixed in
apimap/developer:v1.3.1406d3858e20c
vue@2.7.4
3.0.0-alpha.0

Open the chart page →

2,353
apimap-portalapimapOfficialVerified publisher2.4.01 of 1See more

apimap-portal apimap 2.4.0

1 of the 1 container images this version deploys carry CVE-2024-9506.

Container imageDigestPackageFixed in
apimap/portal:v2.4.0041a4790c65c
vue@2.7.4
3.0.0-alpha.0

Open the chart page →

2,396
nas-appsawesomeVerified publisher2.0.01 of 8See more

nas-apps awesome 2.0.0

1 of the 8 container images this version deploys carry CVE-2024-9506.

Container imageDigestPackageFixed in
ltdstudio/terraforming-mars:latest0e76c6f4eac0
vue@2.6.10
3.0.0-alpha.0

Open the chart page →

7,152
townsquarehuscker-chartsVerified publisher1.0.41 of 2See more

townsquare huscker-charts 1.0.4

1 of the 2 container images this version deploys carry CVE-2024-9506.

Container imageDigestPackageFixed in
ghcr.io/huscker/townsquare-backend:2.15.2e106681e7673
vue@2.7.15
3.0.0-alpha.0

Open the chart page →

3,407
frontendluiscajl0.1.71 of 1See more

frontend luiscajl 0.1.7

1 of the 1 container images this version deploys carry CVE-2024-9506.

Container imageDigestPackageFixed in
lavandadelpatio/frontend:latest501c3f31e0bc
vue@2.6.11
3.0.0-alpha.0

Open the chart page →

3,651
dashynas-helm-chartsVerified publisher1.0.41 of 1See more

dashy nas-helm-charts 1.0.4

1 of the 1 container images this version deploys carry CVE-2024-9506.

Container imageDigestPackageFixed in
lissy93/dashy:2.0.51991f7be5ed0
vue@2.6.14
3.0.0-alpha.0

Open the chart page →

3,269
dashysergiotocaliniVerified publisher1.0.01 of 1See more

dashy sergiotocalini 1.0.0

1 of the 1 container images this version deploys carry CVE-2024-9506.

Container imageDigestPackageFixed in
ghcr.io/lissy93/dashy:2.1.1acb40032ad4b
vue@2.6.14
3.0.0-alpha.0

Open the chart page →

3,143
cadencewenerme0.23.01 of 5See more

cadence wenerme 0.23.0

1 of the 5 container images this version deploys carry CVE-2024-9506.

Container imageDigestPackageFixed in
ubercadence/web:v3.29.58564a5b44a6d
vue@2.6.12
3.0.0-alpha.0

Open the chart page →

10,127
temporalwenerme0.15.11 of 13See more

temporal wenerme 0.15.1

1 of the 13 container images this version deploys carry CVE-2024-9506.

Container imageDigestPackageFixed in
temporalio/web:1.14.033cfa863d8ce
vue@2.6.12
3.0.0-alpha.0

Open the chart page →

22,665

Container images carrying it

22 by charts deploying them

A fixed version is listed for 1 of the 1 affected package.

Container imageDigestPackageFixed inUsed by
ghcr.io/lissy93/dashy:2.1.1acb40032ad4b
vue@2.6.14
3.0.0-alpha.0
2
apimap/developer:v1.3.1406d3858e20c
vue@2.7.4
3.0.0-alpha.0
1
apimap/portal:v2.4.0041a4790c65c
vue@2.7.4
3.0.0-alpha.0
1
baserow/baserow:1.30.1df0c42eb67e8
vue@2.7.15
3.0.0-alpha.0
1
hkotel/mealie:frontend-v1.0.0beta-23c04c0e85039
vue@2.6.14
3.0.0-alpha.0
1
lavandadelpatio/frontend:latest501c3f31e0bc
vue@2.6.11
3.0.0-alpha.0
1
lissy93/dashy:2.0.51991f7be5ed0
vue@2.6.14
3.0.0-alpha.0
1
ltdstudio/terraforming-mars:latest0e76c6f4eac0
vue@2.6.10
3.0.0-alpha.0
1
n8nio/n8n:0.212.0a9195bc499a3
vue@2.7.14
3.0.0-alpha.0
1
temporalio/web:1.14.033cfa863d8ce
vue@2.6.12
3.0.0-alpha.0
1
testhubio/testhub-frontend:on-preme86c2db53be8
vue@2.6.11
3.0.0-alpha.0
1
thmmniii/fbs-qcm-frontend:v1.27.1a347f7f4d144
vue@2.6.14
3.0.0-alpha.0
1
ubercadence/web:v3.29.58564a5b44a6d
vue@2.6.12
3.0.0-alpha.0
1
vabene1111/recipes:1.0.5.2ec4e9e2905b0
vue@2.6.14
3.0.0-alpha.0
1
zwavejs/zwavejs2mqtt:5.0.215a6040fb468
vue@2.6.14
3.0.0-alpha.0
1
ghcr.io/data-fair/data-fair:3cc9498b64b5b
vue@2.7.16
3.0.0-alpha.0
1
ghcr.io/data-fair/metrics:0a8d40779eeae
vue@2.6.14
3.0.0-alpha.0
1
ghcr.io/data-fair/notify:3c739b74dabb0
vue@2.7.16
3.0.0-alpha.0
1
ghcr.io/data-fair/portals:18b621866ceb2
vue@2.7.16
3.0.0-alpha.0
1
ghcr.io/data-fair/processings:15a9216989707
vue@2.7.15
3.0.0-alpha.0
1
ghcr.io/data-fair/simple-directory:438a4f32fad82
vue@2.6.14
3.0.0-alpha.0
1
ghcr.io/huscker/townsquare-backend:2.15.2e106681e7673
vue@2.7.15
3.0.0-alpha.0
1

syft 1.42.1 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.