StackRadar

CVE-2026-101904

Medium

Advisory

Published 30 Sept 2026In the index since 1 Oct 2026
Severity
Medium
worst across findings
CVSS
6.9
base score, highest
EPSS
0.004
35th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
243
of 17,966 indexed, latest versions
Container images
237
deployed by those charts
Fix available
1 of 1
affected package

Axios: Header Injection via Inherited headers After Minimal Interceptor

Carried by container images the latest versions of 243 of 17,966 indexed charts deploy, on 237 images.

Affected packageAffected versionsFixed inImages
axiosnpm1.1.3, 1.2.1, 1.2.2, 1.2.3+47 more1.20.0237
OSV records
GHSA-j8rh-479h-cp32

Charts affected

243 by stars
ChartLatestAffected imagesRadar Score
redisinsightklicktippVerified publisher0.5.01 of 1See more

redisinsight klicktipp 0.5.0

1 of the 1 container images this version deploys carry CVE-2026-101904.

Container imageDigestPackageFixed in
redis/redisinsight:3.2.055542a762210
axios@1.12.2
1.20.0

Open the chart page →

1,763
visual-regression-trackerkokuwa5.1.01 of 4See more

visual-regression-tracker kokuwa 5.1.0

1 of the 4 container images this version deploys carry CVE-2026-101904.

Container imageDigestPackageFixed in
visualregressiontracker/api:5.0.11941aeb8c8bf9
axios@1.7.2
1.20.0

Open the chart page →

9,827
deployment-servicekrateo1.2.591 of 1See more

deployment-service krateo 1.2.59

1 of the 1 container images this version deploys carry CVE-2026-101904.

Container imageDigestPackageFixed in
ghcr.io/krateoplatformops/deployment-service:1.2.59da9f93f2f731
axios@1.2.3
1.20.0

Open the chart page →

10,176
event-servicekrateo1.1.61 of 1See more

event-service krateo 1.1.6

1 of the 1 container images this version deploys carry CVE-2026-101904.

Container imageDigestPackageFixed in
ghcr.io/krateoplatformops/event-service:1.1.671fd074020f4
axios@1.1.3
1.20.0

Open the chart page →

4,972
service-deploymentkrateo0.1.61 of 1See more

service-deployment krateo 0.1.6

1 of the 1 container images this version deploys carry CVE-2026-101904.

Container imageDigestPackageFixed in
ghcr.io/krateoplatformops/service-deployment:0.1.541fb833f36ee
axios@1.3.1
1.20.0

Open the chart page →

4,736
pangolinkrzwiatrzyk0.11.01 of 1See more

pangolin krzwiatrzyk 0.11.0

1 of the 1 container images this version deploys carry CVE-2026-101904.

Container imageDigestPackageFixed in
fosrl/pangolin:1.13.0c32ad797ab96
axios@1.13.2
1.20.0

Open the chart page →

3,711
ghostkubernetes-homelab-helm-chartsVerified publisher0.1.21 of 2See more

ghost kubernetes-homelab-helm-charts 0.1.2

1 of the 2 container images this version deploys carry CVE-2026-101904.

Container imageDigestPackageFixed in
library/ghost:6.39.0-alpine77196da4b0df
axios@1.16.0
1.20.0

Open the chart page →

3,254
seerrkubernetes-homelab-helm-chartsVerified publisher0.1.21 of 1See more

seerr kubernetes-homelab-helm-charts 0.1.2

1 of the 1 container images this version deploys carry CVE-2026-101904.

Container imageDigestPackageFixed in
ghcr.io/seerr-team/seerr:v3.2.0c4cbd5121236
axios@1.15.0
1.20.0

Open the chart page →

2,900
kube-mailkubernetes-replicator0.11.11 of 3See more

kube-mail kubernetes-replicator 0.11.1

1 of the 3 container images this version deploys carry CVE-2026-101904.

Container imageDigestPackageFixed in
quay.io/mittwald/kube-mail:latest04f1099241fc
axios@1.10.0
1.20.0

Open the chart page →

2,845
workload-operatorkubevious0.0.31 of 1See more

workload-operator kubevious 0.0.3

1 of the 1 container images this version deploys carry CVE-2026-101904.

Container imageDigestPackageFixed in
kubevious/workload-operator:1.0.20b0f4c507eb6
axios@1.3.4
1.20.0

Open the chart page →

2,132
jellyseerrlbenicio-communityVerified publisher0.1.01 of 1See more

jellyseerr lbenicio-community 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-101904.

Container imageDigestPackageFixed in
fallenbagel/jellyseerr:latest4538137bc5af
axios@1.10.0
1.20.0

Open the chart page →

3,847
node-redlmatfyVerified publisher0.1.61 of 1See more

node-red lmatfy 0.1.6

1 of the 1 container images this version deploys carry CVE-2026-101904.

Container imageDigestPackageFixed in
nodered/node-red:4.1.10-minimald73ae167cb9b
axios@1.16.0
1.20.0

Open the chart page →

2,086
redisinsightlogic3579Verified publisher3.4.01 of 1See more

redisinsight logic3579 3.4.0

1 of the 1 container images this version deploys carry CVE-2026-101904.

Container imageDigestPackageFixed in
redis/redisinsight:3.485562d67a912
axios@1.15.0
1.20.0

Open the chart page →

1,778
wudm0sh1-helm-charts0.2.01 of 1See more

wud m0sh1-helm-charts 0.2.0

1 of the 1 container images this version deploys carry CVE-2026-101904.

Container imageDigestPackageFixed in
getwud/wud:8.1.1b1cd01c43839
axios@1.7.9
1.20.0

Open the chart page →

6,936
m9sweeperm9sweeperVerified publisher1.6.01 of 6See more

m9sweeper m9sweeper 1.6.0

1 of the 6 container images this version deploys carry CVE-2026-101904.

Container imageDigestPackageFixed in
ghcr.io/m9sweeper/dash:1.6.02e27cdff8344
axios@1.6.5
1.20.0

Open the chart page →

10,204
nodecg-chartmarathon-charts0.1.51 of 2See more

nodecg-chart marathon-charts 0.1.5

1 of the 2 container images this version deploys carry CVE-2026-101904.

Container imageDigestPackageFixed in
ghcr.io/rodg/nodecg-base:latest31be4bf87070
axios@1.6.8
1.20.0

Open the chart page →

7,998
searchmcp-helmVerified publisher0.1.31 of 2See more

search mcp-helm 0.1.3

1 of the 2 container images this version deploys carry CVE-2026-101904.

Container imageDigestPackageFixed in
laituanmanh/websearch-crawler:latest63b6da557c71
axios@1.8.4
1.20.0

Open the chart page →

10,476
backstagemcwarmanVerified publisher0.10.101 of 2See more

backstage mcwarman 0.10.10

1 of the 2 container images this version deploys carry CVE-2026-101904.

Container imageDigestPackageFixed in
ghcr.io/mcwarman/backstage-sample-app/backend:main07aba09a594f
axios@1.8.2
1.20.0

Open the chart page →

10,709
MINTmint8.0.21 of 15See more

MINT mint 8.0.2

1 of the 15 container images this version deploys carry CVE-2026-101904.

Container imageDigestPackageFixed in
mintproject/ensemble-manager:d5656dbc01623e291564d2894c72f0e7cb2408f4222e3b941a36
axios@1.10.0
1.20.0

Open the chart page →

116,845
bofmojaloop5.1.61 of 1See more

bof mojaloop 5.1.6

1 of the 1 container images this version deploys carry CVE-2026-101904.

Container imageDigestPackageFixed in
mojaloop/security-role-perm-operator-svc:v3.0.212af60892c75
axios@1.13.0
1.20.0

Open the chart page →

2,818
finance-portalmojaloop5.1.44 of 11See more

finance-portal mojaloop 5.1.4

4 of the 11 container images this version deploys carry CVE-2026-101904.

Container imageDigestPackageFixed in
mojaloop/reporting-events-processor-svc:v3.5.11e0d24d28512
axios@1.11.0
1.20.0
mojaloop/reporting-hub-bop-api-svc:v4.1.2b45a2d6f0f2a
axios@1.8.4
1.20.0
mojaloop/reporting-hub-bop-experience-api-svc:v2.0.4265102a049d6
axios@1.9.0
1.20.0
mojaloop/role-assignment-service:v2.1.0def4bf273721
axios@1.6.7
1.20.0

Open the chart page →

16,603
reporting-events-processor-svcmojaloop3.5.31 of 1See more

reporting-events-processor-svc mojaloop 3.5.3

1 of the 1 container images this version deploys carry CVE-2026-101904.

Container imageDigestPackageFixed in
mojaloop/reporting-events-processor-svc:v3.5.11e0d24d28512
axios@1.11.0
1.20.0

Open the chart page →

2,943
reporting-hub-bop-api-svcmojaloop4.1.31 of 1See more

reporting-hub-bop-api-svc mojaloop 4.1.3

1 of the 1 container images this version deploys carry CVE-2026-101904.

Container imageDigestPackageFixed in
mojaloop/reporting-hub-bop-api-svc:v4.1.2b45a2d6f0f2a
axios@1.8.4
1.20.0

Open the chart page →

1,794
reporting-hub-bop-experience-api-svcmojaloop1.0.31 of 1See more

reporting-hub-bop-experience-api-svc mojaloop 1.0.3

1 of the 1 container images this version deploys carry CVE-2026-101904.

Container imageDigestPackageFixed in
mojaloop/reporting-hub-bop-experience-api-svc:v2.0.4265102a049d6
axios@1.9.0
1.20.0

Open the chart page →

2,839
role-assignment-servicemojaloop3.1.01 of 1See more

role-assignment-service mojaloop 3.1.0

1 of the 1 container images this version deploys carry CVE-2026-101904.

Container imageDigestPackageFixed in
mojaloop/role-assignment-service:v2.1.0def4bf273721
axios@1.6.7
1.20.0

Open the chart page →

2,473
security-role-perm-operator-svcmojaloop3.0.01 of 1See more

security-role-perm-operator-svc mojaloop 3.0.0

1 of the 1 container images this version deploys carry CVE-2026-101904.

Container imageDigestPackageFixed in
mojaloop/security-role-perm-operator-svc:v3.0.212af60892c75
axios@1.13.0
1.20.0

Open the chart page →

2,818
camera-viewermoreillonVerified publisher0.2.11 of 4See more

camera-viewer moreillon 0.2.1

1 of the 4 container images this version deploys carry CVE-2026-101904.

Container imageDigestPackageFixed in
moreillon/camera-proxy:latestce60056b50c2
axios@1.7.7
1.20.0

Open the chart page →

12,447
tianjimsgbyte0.1.171 of 2See more

tianji msgbyte 0.1.17

1 of the 2 container images this version deploys carry CVE-2026-101904.

Container imageDigestPackageFixed in
moonrailgun/tianji:1.11.2b528c8f8fcc4
axios@1.5.0
1.20.0

Open the chart page →

4,801
ghostmt1905028.25.11 of 3See more

ghost mt190502 8.25.1

1 of the 3 container images this version deploys carry CVE-2026-101904.

Container imageDigestPackageFixed in
library/ghost:6.25.12654b1e90413
axios@1.13.2
1.20.0

Open the chart page →

5,552
nightscoutmt1905021.1.01 of 3See more

nightscout mt190502 1.1.0

1 of the 3 container images this version deploys carry CVE-2026-101904.

Container imageDigestPackageFixed in
nightscout/cgm-remote-monitor:15.0.3f604dc4c03ca
axios@1.5.1
1.20.0

Open the chart page →

6,974
n8nn8n-openshiftVerified publisher1.18.01 of 1See more

n8n n8n-openshift 1.18.0

1 of the 1 container images this version deploys carry CVE-2026-101904.

Container imageDigestPackageFixed in
n8nio/n8n:2.36.714c4285bc303
axios@1.18.0
1.20.0

Open the chart page →

1,595
papergirlneoskop3.2.61 of 5See more

papergirl neoskop 3.2.6

1 of the 5 container images this version deploys carry CVE-2026-101904.

Container imageDigestPackageFixed in
neoskop/papergirl:3.2.67f52b5949f03
axios@1.6.6
1.20.0

Open the chart page →

2,831
bluesky-pdsnerkho-helm-charts0.4.21 of 1See more

bluesky-pds nerkho-helm-charts 0.4.2

1 of the 1 container images this version deploys carry CVE-2026-101904.

Container imageDigestPackageFixed in
ghcr.io/bluesky-social/pds:0.4.204cbc6e3ea157d
axios@1.13.2
1.20.0

Open the chart page →

2,649
nostreamnostream0.1.01 of 1See more

nostream nostream 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-101904.

Container imageDigestPackageFixed in
ghcr.io/cameri/nostream:mainc134ac2fa289
axios@1.18.0
1.20.0

Open the chart page →

717
nocodbone-acre-fundVerified publisher0.4.61 of 3See more

nocodb one-acre-fund 0.4.6

1 of the 3 container images this version deploys carry CVE-2026-101904.

Container imageDigestPackageFixed in
nocodb/nocodb:0.258.06779a4ddedf2
axios@1.7.7
1.20.0

Open the chart page →

4,200
praecoone-acre-fundVerified publisher0.2.02 of 3See more

praeco one-acre-fund 0.2.0

2 of the 3 container images this version deploys carry CVE-2026-101904.

Container imageDigestPackageFixed in
praecoapp/elastalert-server:202302195a0d8715e8b1
axios@1.3.3
1.20.0
praecoapp/praeco:1.8.1322be3218d7df
axios@1.3.3
1.20.0

Open the chart page →

9,287
n8nopenshift1.18.01 of 1See more

n8n openshift 1.18.0

1 of the 1 container images this version deploys carry CVE-2026-101904.

Container imageDigestPackageFixed in
n8nio/n8n:2.36.714c4285bc303
axios@1.18.0
1.20.0

Open the chart page →

1,595
console-apiovrclk-20.1.11 of 1See more

console-api ovrclk-2 0.1.1

1 of the 1 container images this version deploys carry CVE-2026-101904.

Container imageDigestPackageFixed in
ghcr.io/akash-network/console-api:2.64.0ba359097329d
axios@1.7.7
1.20.0

Open the chart page →

3,954
console-webovrclk-20.1.11 of 1See more

console-web ovrclk-2 0.1.1

1 of the 1 container images this version deploys carry CVE-2026-101904.

Container imageDigestPackageFixed in
ghcr.io/akash-network/deploy-web:2.46.0ac540172c120
axios@1.7.7
1.20.0

Open the chart page →

3,032
provider-consoleovrclk-20.1.01 of 1See more

provider-console ovrclk-2 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-101904.

Container imageDigestPackageFixed in
ghcr.io/akash-network/provider-console:1.0.04d4c19a8d3ff
axios@1.7.7
1.20.0

Open the chart page →

2,561
mishtip2p-avs0.1.01 of 2See more

mishti p2p-avs 0.1.0

1 of the 2 container images this version deploys carry CVE-2026-101904.

Container imageDigestPackageFixed in
mishtinetwork/operator:latestbb3fe67a5f7c
axios@1.7.2
1.20.0

Open the chart page →

4,465
ungatep2p-avs0.1.02 of 3See more

ungate p2p-avs 0.1.0

2 of the 3 container images this version deploys carry CVE-2026-101904.

Container imageDigestPackageFixed in
xom4ekp2p/infini-route-attestators-public-mainnet-attester:latestd0e0aa238b02
axios@1.7.2
1.20.0
xom4ekp2p/infini-route-attestators-public-mainnet-avs-webapi:latest2745b5fd8785
axios@1.6.7
1.20.0

Open the chart page →

29,482
portalplatform-mesh-portal0.21.11 of 1See more

portal platform-mesh-portal 0.21.1

1 of the 1 container images this version deploys carry CVE-2026-101904.

Container imageDigestPackageFixed in
ghcr.io/platform-mesh/portal:v0.27.16a7ecd5a0dc2
axios@1.18.0
1.20.0

Open the chart page →

330
prismeai-coreprismeai1.12.31 of 7See more

prismeai-core prismeai 1.12.3

1 of the 7 container images this version deploys carry CVE-2026-101904.

Container imageDigestPackageFixed in
registry.gitlab.com/prisme.ai/prisme.ai/prisme.ai-api-gateway:prodf8474a665b11
axios@1.19.0
1.20.0

Open the chart page →

4,859
kratos-selfservice-ui-noderadar-baseVerified publisher0.43.11 of 1See more

kratos-selfservice-ui-node radar-base 0.43.1

1 of the 1 container images this version deploys carry CVE-2026-101904.

Container imageDigestPackageFixed in
oryd/kratos-selfservice-ui-node:v0.13.0-20d454c21c11bc
axios@1.2.6
1.20.0

Open the chart page →

3,025
readability-js-serverreadability-js-server0.1.01 of 1See more

readability-js-server readability-js-server 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-101904.

Container imageDigestPackageFixed in
phpdockerio/readability-js-server:1.8.0ea8354b42600
axios@1.13.2
1.20.0

Open the chart page →

2,085
recipe-apprecipe-app0.1.01 of 2See more

recipe-app recipe-app 0.1.0

1 of the 2 container images this version deploys carry CVE-2026-101904.

Container imageDigestPackageFixed in
anamskenneth/recipe_frontend:2025-06-079ecf04f42cc3
axios@1.7.7
1.20.0

Open the chart page →

4,013
helm-redchefredchef0.1.01 of 3See more

helm-redchef redchef 0.1.0

1 of the 3 container images this version deploys carry CVE-2026-101904.

Container imageDigestPackageFixed in
sharanalwar/redchef-frontend:latest5e82950b16b7
axios@1.8.4
1.20.0

Open the chart page →

5,273
redisinsightredisinsightVerified publisher0.1.01 of 1See more

redisinsight redisinsight 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-101904.

Container imageDigestPackageFixed in
redis/redisinsight:latestb5e19ee240ab
axios@1.16.0
1.20.0

Open the chart page →

1,337
redisinsightredisinsight-helmVerified publisher0.1.11 of 1See more

redisinsight redisinsight-helm 0.1.1

1 of the 1 container images this version deploys carry CVE-2026-101904.

Container imageDigestPackageFixed in
redis/redisinsight:2.46699d341bd329
axios@1.6.7
1.20.0

Open the chart page →

2,070

Container images carrying it

237 by charts deploying them

A fixed version is listed for 1 of the 1 affected package.

Container imageDigestPackageFixed inUsed by
ghcr.io/krateoplatformops/deployment-service:1.2.59da9f93f2f731
axios@1.2.3
1.20.0
1
ghcr.io/krateoplatformops/event-service:1.1.671fd074020f4
axios@1.1.3
1.20.0
1
ghcr.io/krateoplatformops/service-deployment:0.1.541fb833f36ee
axios@1.3.1
1.20.0
1
ghcr.io/linkwarden/linkwarden:v2.16.30664c28a039b
axios@1.18.0
1.20.0
1
ghcr.io/linkwarden/linkwarden:v2.5.398214faf09f7
axios@1.5.1
1.20.0
1
ghcr.io/m9sweeper/dash:1.6.02e27cdff8344
axios@1.6.5
1.20.0
1
ghcr.io/mastodon/mastodon:v4.1.26b18e6d0eda4
axios@1.3.2
1.20.0
1
ghcr.io/mcwarman/backstage-sample-app/backend:main07aba09a594f
axios@1.8.2
1.20.0
1
ghcr.io/mkutlak/alluredeck-api:0.41.0fa429df90c68
axios@1.18.1
1.20.0
1
ghcr.io/platform-mesh/portal:v0.27.16a7ecd5a0dc2
axios@1.18.0
1.20.0
1
ghcr.io/rajnandan1/kener:3.2.182b993cb232eb
axios@1.8.3
1.20.0
1
ghcr.io/rivals-space/rivals-mastodon:1.6.143b23d55e4be
axios@1.3.2
1.20.0
1
ghcr.io/rodg/nodecg-base:latest31be4bf87070
axios@1.6.8
1.20.0
1
ghcr.io/sct/overseerr:1.35.06197516c9d7b
axios@1.3.4
1.20.0
1
ghcr.io/sdwbgn/unitycatalog-helm/docker/unitycatalog-ui:0.2.1-5d668c1ed07e7ca098d
axios@1.7.5
1.20.0
1
ghcr.io/seerr-team/seerr:v3.5.027602401178d
axios@1.15.0
1.20.0
1
ghcr.io/seerr-team/seerr:v3.2.0c4cbd5121236
axios@1.15.0
1.20.0
1
ghcr.io/sredevopsorg/ghost-on-kubernetes:main06adb21bfdfc
axios@1.18.1
1.20.0
1
ghcr.io/thm-mni-ii/fbs-qcm-backend:v2.0.12633b7c61fb1
axios@1.11.0
1.20.0
1
ghcr.io/thm-mni-ii/fbs-qcm-frontend:v2.0.128c98d86ed77
axios@1.7.8
1.20.0
1
ghcr.io/wei-shaw/claude-relay-service:v1.1.292398c34934453
axios@1.11.0
1.20.0
1
ghcr.io/wundergraph/cosmo/controlplane:0.133.149800ff775f3
axios@1.8.4
1.20.0
1
ghcr.io/xmv-solutions-gmbh/strapi:latesta288b4571142
axios@1.16.0
1.20.0
1
mcr.microsoft.com/azure-storage/azurite:latest830430c1da1a
axios@1.19.0
1.20.0
1
public.ecr.aws/flanksource/incident-manager-ui:v1.4.317fea799d4fb2f
axios@1.18.1
1.20.0
1
public.ecr.aws/g4a0y2u8/unifie-store:staging-19925a2057fabc948
axios@1.7.7
1.20.0
1
public.ecr.aws/jtekt-corporation/shinsei-manager:v2.8.15cd62142d6ed
axios@1.6.1
1.20.0
1
quay.io/hedgedoc/hedgedoc:1.10.8abdb6b08815d
axios@1.15.0
1.20.0
1
quay.io/mittwald/kube-mail:latest04f1099241fc
axios@1.10.0
1.20.0
1
quay.io/rhdh/rhdh-hub-rhel9:latest4f8c0f8a8ee0
axios@1.19.0
1.20.0
1
quay.io/soketi/k8soketi:0.1-18-debian4cd9ea9434c4
axios@1.1.3
1.20.0
1
quay.io/wi_stefan/consent-manager:0.0.656399619568b
axios@1.19.0
1.20.0
1
quay.io/wraft/wraft-frontend:latestf1bbbd5e9bb9
axios@1.11.0
1.20.0
1
registry.gitlab.com/enbuild-staging/vivsoft-platform-ui/enbuild-backend:1.0.31c7afac3446d6
axios@1.13.6
1.20.0
1
registry.gitlab.com/enbuild-staging/vivsoft-platform-ui/enbuild-mq-consumer:1.0.310e3cd8c7776d
axios@1.9.0
1.20.0
1
registry.gitlab.com/enbuild-staging/vivsoft-platform-ui/enbuild-user:1.0.31d8a9cd4e1ae3
axios@1.13.6
1.20.0
1
registry.gitlab.com/prisme.ai/prisme.ai/prisme.ai-api-gateway:prodf8474a665b11
axios@1.19.0
1.20.0
1

syft 1.42.1 · advisories as of 1 Oct 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.