StackRadar

CVE-2025-64718

Medium

Advisory

Published 13 Nov 2025In the index since 5 Sept 2026
Severity
Medium
worst across findings
CVSS
5.3
base score, highest
EPSS
0.004
34th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
395
of 17,781 indexed, latest versions
Container images
394
deployed by those charts
Fix available
1 of 2
affected packages

js-yaml has prototype pollution in merge (<<)

Carried by container images the latest versions of 395 of 17,781 indexed charts deploy, on 394 images.

Affected packageAffected versionsFixed inImages
js-yamlnpm1.0.3, 3.5.5, 3.6.1, 3.7.0+9 more3.14.2, 4.1.1394
node-js-yamldeb4.1.0+dfsg+~4.0.5-7no fix listed1
OSV records
GHSA-mh29-5h37-fv8mUBUNTU-CVE-2025-64718

Charts affected

395 by stars
ChartLatestAffected imagesRadar Score
amundsenduyet1.1.01 of 7See more

amundsen duyet 1.1.0

1 of the 7 container images this version deploys carry CVE-2025-64718.

Container imageDigestPackageFixed in
amundsendev/amundsen-frontend:2.1.169e7915e61c1
js-yaml@3.13.1
3.14.2

Open the chart page →

11,174
orion-ldeclipse-aeriosVerified publisher1.0.01 of 2See more

orion-ld eclipse-aerios 1.0.0

1 of the 2 container images this version deploys carry CVE-2025-64718.

Container imageDigestPackageFixed in
library/mongo:7.0.12ae1cf99fa7bf
js-yaml@3.13.1
3.14.2

Open the chart page →

9,764
frontend-charteks-3-tier-app-chart0.1.01 of 1See more

frontend-chart eks-3-tier-app-chart 0.1.0

1 of the 1 container images this version deploys carry CVE-2025-64718.

Container imageDigestPackageFixed in
arfath29/3-tier-app-frontend:latest384b3e377f47
js-yaml@3.14.1
3.14.2

Open the chart page →

3,744
eoloPlanteolo-plannerVerified publisher0.1.01 of 7See more

eoloPlant eolo-planner 0.1.0

1 of the 7 container images this version deploys carry CVE-2025-64718.

Container imageDigestPackageFixed in
library/mongo:5.0-focal5e15a3f014ed
js-yaml@3.13.1
3.14.2

Open the chart page →

27,537
eoloPlannerCommunicationsKubernetes3eoloplannercommunicationskuberneteshelmVerified publisher0.1.01 of 7See more

eoloPlannerCommunicationsKubernetes3 eoloplannercommunicationskuberneteshelm 0.1.0

1 of the 7 container images this version deploys carry CVE-2025-64718.

Container imageDigestPackageFixed in
library/mongo:5.0-focal5e15a3f014ed
js-yaml@3.13.1
3.14.2

Open the chart page →

27,537
eoloplanteoloplant1.0.01 of 7See more

eoloplant eoloplant 1.0.0

1 of the 7 container images this version deploys carry CVE-2025-64718.

Container imageDigestPackageFixed in
library/mongo:5.0-focal5e15a3f014ed
js-yaml@3.13.1
3.14.2

Open the chart page →

27,537
ethstatsethereum-helm-chartsVerified publisher0.1.41 of 1See more

ethstats ethereum-helm-charts 0.1.4

1 of the 1 container images this version deploys carry CVE-2025-64718.

Container imageDigestPackageFixed in
skylenet/ethstats-server:pow-latestd757cc016198
js-yaml@3.14.1
3.14.2

Open the chart page →

1,109
testnet-faucetethereum-helm-chartsVerified publisher0.1.31 of 1See more

testnet-faucet ethereum-helm-charts 0.1.3

1 of the 1 container images this version deploys carry CVE-2025-64718.

Container imageDigestPackageFixed in
parithoshj/testnet-faucet:9859e0dcdca426fea6d
js-yaml@3.12.1
3.14.2

Open the chart page →

3,005
bee-localchainethersphereVerified publisher0.2.01 of 1See more

bee-localchain ethersphere 0.2.0

1 of the 1 container images this version deploys carry CVE-2025-64718.

Container imageDigestPackageFixed in
ethersphere/bee-localchain:latest0558799ca992
js-yaml@4.1.0
4.1.1

Open the chart page →

2,266
bzz-token-serviceethersphereVerified publisher0.2.01 of 1See more

bzz-token-service ethersphere 0.2.0

1 of the 1 container images this version deploys carry CVE-2025-64718.

Container imageDigestPackageFixed in
ethersphere/bzz-token-service:latest7624f11a72ad
js-yaml@4.0.0
4.1.1

Open the chart page →

3,260
geth-swapethersphereVerified publisher0.6.31 of 2See more

geth-swap ethersphere 0.6.3

1 of the 2 container images this version deploys carry CVE-2025-64718.

Container imageDigestPackageFixed in
ethersphere/bee-localchain:latest0558799ca992
js-yaml@4.1.0
4.1.1

Open the chart page →

4,756
onboarding-faucetethersphereVerified publisher0.2.01 of 1See more

onboarding-faucet ethersphere 0.2.0

1 of the 1 container images this version deploys carry CVE-2025-64718.

Container imageDigestPackageFixed in
ethersphere/onboarding-faucet:0.3.0513154aab230
js-yaml@4.1.0
4.1.1

Open the chart page →

3,320
smeejasfanzynoodle0.0.11 of 1See more

smeejas fanzynoodle 0.0.1

1 of the 1 container images this version deploys carry CVE-2025-64718.

Container imageDigestPackageFixed in
fanzynoodle/smeejas:0.0.15f9916c1a287
js-yaml@4.1.0
4.1.1

Open the chart page →

4,127
fickyhelmappfickyhelmapp1.1.01 of 1See more

fickyhelmapp fickyhelmapp 1.1.0

1 of the 1 container images this version deploys carry CVE-2025-64718.

Container imageDigestPackageFixed in
tundeficky/nodejs-app:v1.0.03cf9a9ce54e8
js-yaml@4.1.0
4.1.1

Open the chart page →

3,311
business-api-ecosystemfiware1.1.01 of 4See more

business-api-ecosystem fiware 1.1.0

1 of the 4 container images this version deploys carry CVE-2025-64718.

Container imageDigestPackageFixed in
fiware/biz-ecosystem-logic-proxy:11.20.3d551a13e8278
js-yaml@3.14.1
3.14.2

Open the chart page →

64,489
flamegabe565Verified publisher0.6.01 of 1See more

flame gabe565 0.6.0

1 of the 1 container images this version deploys carry CVE-2025-64718.

Container imageDigestPackageFixed in
pawelmalak/flame:multiarch2.3.19f88b17692a0
js-yaml@4.1.0
4.1.1

Open the chart page →

2,172
scanservjsgabe565Verified publisher0.9.21 of 1See more

scanservjs gabe565 0.9.2

1 of the 1 container images this version deploys carry CVE-2025-64718.

Container imageDigestPackageFixed in
sbs20/scanservjs:release-v3.0.3dad1fd6e9a98
js-yaml@4.1.0
4.1.1

Open the chart page →

13,241
wekan-oldgabisonfire0.1.21 of 1See more

wekan-old gabisonfire 0.1.2

1 of the 1 container images this version deploys carry CVE-2025-64718.

Container imageDigestPackageFixed in
wekanteam/wekan:v4.2268a51f0327df
js-yaml@3.12.0
3.14.2

Open the chart page →

5,941
double-takegeek-cookbookVerified publisher2.3.21 of 1See more

double-take geek-cookbook 2.3.2

1 of the 1 container images this version deploys carry CVE-2025-64718.

Container imageDigestPackageFixed in
jakowenko/double-take:1.6.0b858bac9e32a
js-yaml@4.1.0
4.1.1

Open the chart page →

12,222
haste-servergeek-cookbookVerified publisher3.4.21 of 1See more

haste-server geek-cookbook 3.4.2

1 of the 1 container images this version deploys carry CVE-2025-64718.

Container imageDigestPackageFixed in
ghcr.io/k8s-at-home/haste-server:latest827aa2f2389d
js-yaml@3.14.0
3.14.2

Open the chart page →

10,994
nightscoutgeek-cookbookVerified publisher1.2.21 of 1See more

nightscout geek-cookbook 1.2.2

1 of the 1 container images this version deploys carry CVE-2025-64718.

Container imageDigestPackageFixed in
nightscout/cgm-remote-monitor:14.2.500c3b4833f1b
js-yaml@3.13.1
3.14.2

Open the chart page →

4,043
node-redgeek-cookbookVerified publisher10.3.21 of 1See more

node-red geek-cookbook 10.3.2

1 of the 1 container images this version deploys carry CVE-2025-64718.

Container imageDigestPackageFixed in
nodered/node-red:2.2.2e131dcadfe92
js-yaml@3.14.1
3.14.2

Open the chart page →

2,102
mongogengxiankun-charts0.1.01 of 1See more

mongo gengxiankun-charts 0.1.0

1 of the 1 container images this version deploys carry CVE-2025-64718.

Container imageDigestPackageFixed in
library/mongo:5.041108d183e97
js-yaml@3.13.1
3.14.2

Open the chart page →

3,969
geonetwork-k8sgeonetwork-k8sVerified publisher4.2.81 of 5See more

geonetwork-k8s geonetwork-k8s 4.2.8

1 of the 5 container images this version deploys carry CVE-2025-64718.

Container imageDigestPackageFixed in
library/kibana:7.17.150172f1c538e7
js-yaml@3.14.1
3.14.2

Open the chart page →

34,754
ghostghostVerified publisher0.1.01 of 4See more

ghost ghost 0.1.0

1 of the 4 container images this version deploys carry CVE-2025-64718.

Container imageDigestPackageFixed in
library/ghost:5.79.083f7bf209844
js-yaml@4.1.0
4.1.1

Open the chart page →

9,019
qryn-helmgigapipeVerified publisher0.1.91 of 1See more

qryn-helm gigapipe 0.1.9

1 of the 1 container images this version deploys carry CVE-2025-64718.

Container imageDigestPackageFixed in
qxip/qryn:3.2.3977acc9c7a9fd
js-yaml@3.14.1
3.14.2

Open the chart page →

2,973
api-mapperglenndehaanVerified publisher1.2.01 of 1See more

api-mapper glenndehaan 1.2.0

1 of the 1 container images this version deploys carry CVE-2025-64718.

Container imageDigestPackageFixed in
glenndehaan/api-mapper:latest6ff6310683bf
js-yaml@4.1.0
4.1.1

Open the chart page →

1,158
kube-hookglenndehaanVerified publisher1.0.31 of 1See more

kube-hook glenndehaan 1.0.3

1 of the 1 container images this version deploys carry CVE-2025-64718.

Container imageDigestPackageFixed in
glenndehaan/kube-hook:latest0a7116f48bfe
js-yaml@4.1.0
4.1.1

Open the chart page →

923
Governify-Bluejaygovernify0.1.06 of 12See more

Governify-Bluejay governify 0.1.0

6 of the 12 container images this version deploys carry CVE-2025-64718.

Container imageDigestPackageFixed in
governify/assets-manager:v1.4.12987672448c7
js-yaml@3.14.1
3.14.2
governify/director:v1.4.0608c6940bb98
js-yaml@3.14.1
3.14.2
governify/registry:v3.4.0d3f37f4f8168
js-yaml@4.1.0
4.1.1
governify/render:v2.2.0daeca1ce28e6
js-yaml@3.14.1
3.14.2
governify/reporter:v2.2.038595913458f
js-yaml@3.14.1
3.14.2
library/mongo:latest5211c51171f5
js-yaml@3.13.1
3.14.2

Open the chart page →

22,512
Governify-Falcongovernify0.1.07 of 10See more

Governify-Falcon governify 0.1.0

7 of the 10 container images this version deploys carry CVE-2025-64718.

Container imageDigestPackageFixed in
governify/assets-manager:v1.4.12987672448c7
js-yaml@3.14.1
3.14.2
governify/collector-dynamic:v1.3.06d3d1a5b46a9
js-yaml@3.14.1
3.14.2
governify/director:v1.4.0608c6940bb98
js-yaml@3.14.1
3.14.2
governify/registry:v3.4.0d3f37f4f8168
js-yaml@4.1.0
4.1.1
governify/render:v2.2.0daeca1ce28e6
js-yaml@3.14.1
3.14.2
governify/reporter:v2.2.038595913458f
js-yaml@3.14.1
3.14.2
library/mongo:latest5211c51171f5
js-yaml@3.13.1
3.14.2

Open the chart page →

24,319
opentelemetry-demogpg-dev0.33.81 of 27See more

opentelemetry-demo gpg-dev 0.33.8

1 of the 27 container images this version deploys carry CVE-2025-64718.

Container imageDigestPackageFixed in
ghcr.io/open-telemetry/demo:1.12.0-frontend8b348f00ca4c
js-yaml@4.1.0
4.1.1

Open the chart page →

49,025
grayloggraylogVerified publisher1.0.21 of 4See more

graylog graylog 1.0.2

1 of the 4 container images this version deploys carry CVE-2025-64718.

Container imageDigestPackageFixed in
library/mongo:85211c51171f5
js-yaml@3.13.1
3.14.2

Open the chart page →

5,261
h2ph2pVerified publisher1.0.11 of 1See more

h2p h2p 1.0.1

1 of the 1 container images this version deploys carry CVE-2025-64718.

Container imageDigestPackageFixed in
dacinfomotion/h2p:latest68fa393b472c
js-yaml@4.1.0
4.1.1

Open the chart page →

1,713
librechathajowielandVerified publisher1.1.01 of 1See more

librechat hajowieland 1.1.0

1 of the 1 container images this version deploys carry CVE-2025-64718.

Container imageDigestPackageFixed in
ghcr.io/danny-avila/librechat:v0.7.87fe76551a78e
js-yaml@4.1.0
4.1.1

Open the chart page →

2,950
irslackdhalkeye0.1.01 of 1See more

irslackd halkeye 0.1.0

1 of the 1 container images this version deploys carry CVE-2025-64718.

Container imageDigestPackageFixed in
halkeye/irslackd:latest7638bfba70b0
js-yaml@3.13.1
3.14.2

Open the chart page →

2,064
matrix-appservice-gitterhalkeye0.1.01 of 1See more

matrix-appservice-gitter halkeye 0.1.0

1 of the 1 container images this version deploys carry CVE-2025-64718.

Container imageDigestPackageFixed in
matrixdotorg/matrix-appservice-gitter:latest0d37b4d42b47
js-yaml@3.13.1
3.14.2

Open the chart page →

3,003
zigbee2mqtthelm-chart-roeiVerified publisher1.19.01 of 1See more

zigbee2mqtt helm-chart-roei 1.19.0

1 of the 1 container images this version deploys carry CVE-2025-64718.

Container imageDigestPackageFixed in
koenkk/zigbee2mqtt:1.19.15f9129b1ffbc
js-yaml@3.14.1
3.14.2

Open the chart page →

2,173
streamsheetshelm-chartsVerified publisher0.2.34 of 8See more

streamsheets helm-charts 0.2.3

4 of the 8 container images this version deploys carry CVE-2025-64718.

Container imageDigestPackageFixed in
ghcr.io/ctron/streamsheets-gateway:2.4.00635f17c9d2c
js-yaml@3.14.1
3.14.2
ghcr.io/ctron/streamsheets-service-graphs:2.4.0e34964e336c1
js-yaml@3.14.0
3.14.2
ghcr.io/ctron/streamsheets-service-machines:2.4.00c5a3398d1e4
js-yaml@3.14.0
3.14.2
ghcr.io/ctron/streamsheets-service-streams:2.4.08ba040e79ca0
js-yaml@3.14.0
3.14.2

Open the chart page →

89,959
backstagehelm-charts-nr0.1.151 of 2See more

backstage helm-charts-nr 0.1.15

1 of the 2 container images this version deploys carry CVE-2025-64718.

Container imageDigestPackageFixed in
martinaif/backstage-k8s-demo-backend:test143bc40a3da0e
js-yaml@3.14.0
3.14.2

Open the chart page →

8,213
hoppscotchhelm-charts-nr0.3.11 of 1See more

hoppscotch helm-charts-nr 0.3.1

1 of the 1 container images this version deploys carry CVE-2025-64718.

Container imageDigestPackageFixed in
hoppscotch/hoppscotch:2024.8.2f1da831950b7
js-yaml@4.1.0
4.1.1

Open the chart page →

3,451
automatischhelmforgeVerified publisher1.3.71 of 4See more

automatisch helmforge 1.3.7

1 of the 4 container images this version deploys carry CVE-2025-64718.

Container imageDigestPackageFixed in
automatischio/automatisch:0.15.03bace7a12d5f
js-yaml@4.1.0
4.1.1

Open the chart page →

5,769
countlyhelmforgeVerified publisher1.2.62 of 3See more

countly helmforge 1.2.6

2 of the 3 container images this version deploys carry CVE-2025-64718.

Container imageDigestPackageFixed in
countly/countly-server:25.05.4e3c238248f99
js-yaml@4.1.0
4.1.1
library/mongo:8.3.85211c51171f5
js-yaml@3.13.1
3.14.2

Open the chart page →

18,813
mongodbhelmforgeVerified publisher1.8.01 of 1See more

mongodb helmforge 1.8.0

1 of the 1 container images this version deploys carry CVE-2025-64718.

Container imageDigestPackageFixed in
library/mongo:8.3.85211c51171f5
js-yaml@3.13.1
3.14.2

Open the chart page →

1,254
paprahelmforgeVerified publisher1.0.01 of 1See more

papra helmforge 1.0.0

1 of the 1 container images this version deploys carry CVE-2025-64718.

Container imageDigestPackageFixed in
ghcr.io/papra-hq/papra:26.6.2-rootlessa281cb44176d
js-yaml@3.14.1
3.14.2

Open the chart page →

2,538
openbashelm-openbasVerified publisher1.8.141 of 7See more

openbas helm-openbas 1.8.14

1 of the 7 container images this version deploys carry CVE-2025-64718.

Container imageDigestPackageFixed in
openbas/caldera-server:5.1.0a277796d9724
js-yaml@4.1.0
4.1.1

Open the chart page →

25,017
wikijshomeenterpriseinc1.4.01 of 1See more

wikijs homeenterpriseinc 1.4.0

1 of the 1 container images this version deploys carry CVE-2025-64718.

Container imageDigestPackageFixed in
requarks/wiki:canary-2.5.2438b5865a7386c
js-yaml@3.13.1
3.14.2

Open the chart page →

4,253
hoppscotchhoppscotch0.1.11 of 1See more

hoppscotch hoppscotch 0.1.1

1 of the 1 container images this version deploys carry CVE-2025-64718.

Container imageDigestPackageFixed in
hoppscotch/hoppscotch:2024.11.0538fe6ded4b6
js-yaml@4.1.0
4.1.1

Open the chart page →

3,614
ibm-app-navigatoribm-charts1.0.12 of 5See more

ibm-app-navigator ibm-charts 1.0.1

2 of the 5 container images this version deploys carry CVE-2025-64718.

Container imageDigestPackageFixed in
ibmcom/app-nav-init:1.0.1240ff499eb5b
js-yaml@3.13.1
3.14.2
ibmcom/app-nav-ui:1.0.1e2a86997b36b
js-yaml@3.13.1
3.14.2

Open the chart page →

32,915
ibm-business-automation-insights-devibm-charts3.2.01 of 6See more

ibm-business-automation-insights-dev ibm-charts 3.2.0

1 of the 6 container images this version deploys carry CVE-2025-64718.

Container imageDigestPackageFixed in
ibmcom/bai-admin-dev:19.0.202d882f2836e
js-yaml@3.11.0
3.14.2

Open the chart page →

39,349
ibm-microclimateibm-charts0.1.01 of 8See more

ibm-microclimate ibm-charts 0.1.0

1 of the 8 container images this version deploys carry CVE-2025-64718.

Container imageDigestPackageFixed in
ibmcom/microclimate-portal:latested5505e5c7ec
js-yaml@3.11.0
3.14.2

Open the chart page →

57,669

Container images carrying it

394 by charts deploying them

A fixed version is listed for 1 of the 2 affected packages.

Container imageDigestPackageFixed inUsed by
redis/redisinsight:2.68019fcf774631
js-yaml@4.1.0
4.1.1
1
redis/redisinsight:2.46699d341bd329
js-yaml@4.1.0
4.1.1
1
requarks/wiki:canary-2.5.2438b5865a7386c
js-yaml@3.13.1
3.14.2
1
roadiehq/community-backstage-image:latestef355bf5b639
js-yaml@4.1.0
4.1.1
1
rocketchat/account-service:8.6.144af8ac4e711
js-yaml@3.14.1
3.14.2
1
rocketchat/authorization-service:8.6.16bc18fb5d0e5
js-yaml@3.14.1
3.14.2
1
rocketchat/ddp-streamer-service:8.6.1819771c4abe4
js-yaml@3.14.1
3.14.2
1
rocketchat/presence-service:8.6.1c1170bdfe797
js-yaml@3.14.1
3.14.2
1
safeglobal/safe-client-gateway-nest:v1.51.012ccfd93fcaf
js-yaml@4.1.0
4.1.1
1
samajh/alprbackend:latestea742b4372ad
js-yaml@3.14.0
3.14.2
1
samajh/alprfrontend:latest05ef4fddbb75
js-yaml@3.14.1
3.14.2
1
sbs20/scanservjs:release-v3.0.3dad1fd6e9a98
js-yaml@4.1.0
4.1.1
1
sharanalwar/redchef-frontend:latest5e82950b16b7
js-yaml@4.1.0
4.1.1
1
sigp/siren:v3.0.42c219b04758e
js-yaml@4.1.0
4.1.1
1
siscc/dotstatsuite-data-lifecycle-manager:v14.0.0b6f9a7c888fc
js-yaml@3.14.1
3.14.2
1
skylenet/ethstats-server:pow-latestd757cc016198
js-yaml@3.14.1
3.14.2
1
socialmediamacroscope/smile_graphql:0.3.1c5095e94bc65
js-yaml@3.7.0
3.14.2
1
solidproject/community-server:6.0.2ccc4acb7e9a1
js-yaml@4.1.0
4.1.1
1
soulou2019/node-server:latest5e6ecfcc109e
js-yaml@4.1.0
4.1.1
1
speckle/speckle-preview-service:2.26.3092384dba45d
js-yaml@4.1.0
4.1.1
1
speckle/speckle-preview-service:2.20.2-branch.testing4.134160-9fad4b21f897ca906ea
js-yaml@4.1.0
4.1.1
1
speckle/speckle-preview-service:2.21.3-branch.testing5.219631-2153bef52cad5e3293e
js-yaml@4.1.0
4.1.1
1
speckle/speckle-preview-service:2.23.14-branch.testing6.334655-b4e04ee6dee853ba74a
js-yaml@4.1.0
4.1.1
1
speckle/speckle-preview-service:2.25.10-branch.testing6.645-b125c1e787adcb20a3a
js-yaml@4.1.0
4.1.1
1
speckle/speckle-preview-service:2.20.6-branch.testing1.154030-9b091148f3c1ea153ba
js-yaml@4.1.0
4.1.1
1
speckle/speckle-preview-service:2.19.2-branch.hotfix-2.19.1.124125-665e7e1c102b087481a
js-yaml@4.1.0
4.1.1
1
speckle/speckle-preview-service:2.20.3-branch.hotfix-2.20.2.149555-37ea0cbd3da0a84de98
js-yaml@4.1.0
4.1.1
1
srini78/nodejswebappeks:latest5d1cbdc6833a
js-yaml@4.1.0
4.1.1
1
stanfordoval/almond-server:latest1a63cdccedaf
js-yaml@3.14.1
3.14.2
1
subsquid/hydra-indexer:5.0.0-alpha.37a7f8b9bad7ee
js-yaml@4.1.0
4.1.1
1
subsquid/substrate-explorer:firesquid0889a857f192
js-yaml@4.1.0
4.1.1
1
sysnet4admin/colosseum-cms:loge74b43c7f492
js-yaml@4.1.0
4.1.1
1
sysnet4admin/colosseum-prm:log5802bfcd7fed
js-yaml@4.1.0
4.1.1
1
temporalio/web:1.14.033cfa863d8ce
js-yaml@3.14.0
3.14.2
1
testhubio/testhub-frontend:on-preme86c2db53be8
js-yaml@3.13.1
3.14.2
1
th0th/node-red:4.0.3-debiand06fa39f7406
js-yaml@4.1.0
4.1.1
1
thecodingmachine/workadventure-map-storage:v1.17.75bdab56da2fa
js-yaml@4.1.0
4.1.1
1
thecodingmachine/workadventure-play:v1.17.7d8f66979b9b4
js-yaml@4.1.0
4.1.1
1
thingsboard/tb-js-executor:3.4.113e1eadf8ace
js-yaml@4.1.0
4.1.1
1
thingsboard/tb-web-ui:3.4.157f98ed53b3d
js-yaml@4.1.0
4.1.1
1
thingsboard/tb-web-ui:3.6.0d388378062cc
js-yaml@4.1.0
4.1.1
1
thmmniii/fbs-qcm-frontend:v1.27.1a347f7f4d144
js-yaml@4.1.0
4.1.1
1
tobirachel/node-project3:v17d9f37154994
js-yaml@4.1.0
4.1.1
1
tooljet/tooljet-ce:v1.18.0c85a4720e42e
js-yaml@4.1.0
4.1.1
1
treskon/portrait-ui:DEV-lateste7970783bc8d
js-yaml@4.1.0
4.1.1
1
tundeficky/nodejs-app:v1.0.03cf9a9ce54e8
js-yaml@4.1.0
4.1.1
1
ubercadence/web:v3.29.58564a5b44a6d
js-yaml@3.7.0
3.14.2
1
unitycatalog/unitycatalog-ui:main-aadc6fc3a688197b218
js-yaml@3.14.1
3.14.2
1
unleashorg/unleash-proxy:v1.4.82538f89e2685
js-yaml@4.1.0
4.1.1
1
vabene1111/recipes:1.0.5.2ec4e9e2905b0
js-yaml@3.14.1
3.14.2
1

syft 1.42.1 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.