StackRadarChart IndexLive demo

CVE-2025-56200

Medium

Advisory

Published 30 Sept 2025In the index since 6 Sept 2026

Severity: Medium; worst across findings
CVSS: 6.1; base score, highest
EPSS: 0.003; 25th percentile
CISA KEV: Not listed; no confirmed exploitation
Charts affected: 108; of 17,781 indexed, latest versions
Container images: 103; deployed by those charts
Fix available: 1 of 1; affected package

validator.js has a URL validation bypass vulnerability in its isURL function

Carried by container images the latest versions of 108 of 17,781 indexed charts deploy, on 103 images.

Affected package	Affected versions	Fixed in	Images
validatornpm	1.5.1, 2.1.0, 3.2.1, 4.4.0+16 more	13.15.20	103

OSV records: GHSA-9965-vmph-33xx

Charts affected

108 by stars

Chart

Latest

Affected images

Radar Score

tfy-distributortruefoundry

1 of 4 See more

tfy-distributor truefoundry 0.0.1

1 of the 4 container images this version deploys carry CVE-2025-56200.

Container image	Digest	Package	Fixed in
public.ecr.aws/truefoundrycloud/async-service-distributor :5d48113bc678d694a0c8f8dabb2207c5aa2cfc53	f74851ce31f5	validator@13.11.0	13.15.20

Open the chart page →

17,323

unleash-proxyunleash

1 of 1 See more

unleash-proxy unleash 0.8.12

1 of the 1 container images this version deploys carry CVE-2025-56200.

Container image	Digest	Package	Fixed in
unleashorg/unleash-proxy :v1.4.8	2538f89e2685	validator@13.12.0	13.15.20

Open the chart page →

929

1 of 1 See more

hedgedoc vista 0.1.1

1 of the 1 container images this version deploys carry CVE-2025-56200.

Container image	Digest	Package	Fixed in
quay.io/hedgedoc/hedgedoc :1.9.4	e09967519a1d	validator@13.7.0	13.15.20

Open the chart page →

3,118

websitewaldo-vision

1 of 2 See more

website waldo-vision 0.33.0

1 of the 2 container images this version deploys carry CVE-2025-56200.

Container image	Digest	Package	Fixed in
ghcr.io/waldo-vision/web :v0.3.6	5bbc7647df07	validator@13.9.0	13.15.20

Open the chart page →

3,474

sirenwateim

1 of 1 See more

siren wateim 1.0.2

1 of the 1 container images this version deploys carry CVE-2025-56200.

Container image	Digest	Package	Fixed in
sigp/siren :v3.0.4	2c219b04758e	validator@13.15.15	13.15.20

Open the chart page →

5,984

webhookiewebhookie

1 of 1 See more

webhookie webhookie 0.1.2

1 of the 1 container images this version deploys carry CVE-2025-56200.

Container image	Digest	Package	Fixed in
hookiesolutions/webhookie :latest	0629694246ba	validator@13.6.0	13.15.20

Open the chart page →

14,364

webhookie-allwebhookie

1 of 3 See more

webhookie-all webhookie 0.1.2

1 of the 3 container images this version deploys carry CVE-2025-56200.

Container image	Digest	Package	Fixed in
hookiesolutions/webhookie :latest	0629694246ba	validator@13.6.0	13.15.20

Open the chart page →

28,605

workadventureworkadventure

1 of 9 See more

workadventure workadventure 1.1.0

1 of the 9 container images this version deploys carry CVE-2025-56200.

Container image	Digest	Package	Fixed in
thecodingmachine/workadventure-play :v1.17.7	d8f66979b9b4	validator@13.7.0	13.15.20

Open the chart page →

16,083

Container images carrying it

103 by charts deploying them

A fixed version is listed for 1 of the 1 affected package.

Container image	Digest	Package	Fixed in	Used by
quay.io/flomesh/flomesh-console-ubi8 :0.70.0-30	ce6938ff6709	validator@10.11.0	13.15.20	1
quay.io/t3n/dashkiosk :v2.7.8	c973e166a5dc	validator@3.2.1	13.15.20	1
registry.gitlab.com/timvisee/send :v3.4.20	47986cf6ef69	validator@13.7.0	13.15.20	1