StackRadar

CVE-2026-102279

Low

Advisory

Published 29 Sept 2026In the index since 30 Sept 2026
Severity
Low
worst across findings
CVSS
3.1
base score, highest
EPSS
0.002
10th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
43
of 18,232 indexed, latest versions
Container images
41
deployed by those charts
Fix available
1 of 1
affected package

Laravel: XSS in Debug Page Information

Carried by container images the latest versions of 43 of 18,232 indexed charts deploy, on 41 images.

Affected packageAffected versionsFixed inImages
laravel/frameworkcomposer9.x-dev, 10.50.2, v5.0.35, v5.2.39+31 more12.69.0, 13.30.041
OSV records
GHSA-jh5r-qr3c-85q8

Charts affected

43 by stars
ChartLatestAffected imagesRadar Score
snipeitt3n3.4.11 of 2See more

snipeit t3n 3.4.1

1 of the 2 container images this version deploys carry CVE-2026-102279.

Container imageDigestPackageFixed in
snipe/snipe-it:v6.0.1455fb7636a98c
laravel/framework@v8.83.22
12.69.0

Open the chart page →

86,542
monicamonicaOfficialVerified publisher1.0.151 of 1See more

monica monica 1.0.15

1 of the 1 container images this version deploys carry CVE-2026-102279.

Container imageDigestPackageFixed in
ghcr.io/monicahq/monica-next:main8a02508cbdcf
laravel/framework@v12.22.1
12.69.0

Open the chart page →

3,214
bookstackgabe565Verified publisher0.20.01 of 1See more

bookstack gabe565 0.20.0

1 of the 1 container images this version deploys carry CVE-2026-102279.

Container imageDigestPackageFixed in
ghcr.io/linuxserver/bookstack:version-v24.12.1cc795b254b73
laravel/framework@v10.48.25
12.69.0

Open the chart page →

3,636
invoiceninjainvoiceninjaVerified publisher0.10.21 of 5See more

invoiceninja invoiceninja 0.10.2

1 of the 5 container images this version deploys carry CVE-2026-102279.

Container imageDigestPackageFixed in
invoiceninja/invoiceninja:5.6.241437916dee01
laravel/framework@v9.52.10
12.69.0

Open the chart page →

2,792
bookstackbookstack-mgVerified publisher0.3.11 of 2See more

bookstack bookstack-mg 0.3.1

1 of the 2 container images this version deploys carry CVE-2026-102279.

Container imageDigestPackageFixed in
linuxserver/bookstack:26.05.202605282ebf97852661
laravel/framework@v12.61.0
12.69.0

Open the chart page →

2,390
cachetdeliveryheroVerified publisher1.3.51 of 2See more

cachet deliveryhero 1.3.5

1 of the 2 container images this version deploys carry CVE-2026-102279.

Container imageDigestPackageFixed in
cachethq/docker:2.3.15a61ff0f67ea7
laravel/framework@v5.2.39
12.69.0

Open the chart page →

1,935
laravelrenoki-co1.0.01 of 2See more

laravel renoki-co 1.0.0

1 of the 2 container images this version deploys carry CVE-2026-102279.

Container imageDigestPackageFixed in
quay.io/renokico/laravel-helm-demo:0.6.03207f957e80c
laravel/framework@v8.37.0
12.69.0

Open the chart page →

7,746
akauntingf3k-techVerified publisher1.3121.01 of 4See more

akaunting f3k-tech 1.3121.0

1 of the 4 container images this version deploys carry CVE-2026-102279.

Container imageDigestPackageFixed in
akaunting/akaunting:3.1.21-fpm-alpine-nginxe7d5c245b1a0
laravel/framework@v10.50.0
12.69.0

Open the chart page →

5,092
firefly-iiigeek-cookbookVerified publisher0.3.01 of 1See more

firefly-iii geek-cookbook 0.3.0

1 of the 1 container images this version deploys carry CVE-2026-102279.

Container imageDigestPackageFixed in
fireflyiii/core:version-5.6.142f4283bd0cf7
laravel/framework@v8.82.0
12.69.0

Open the chart page →

3,037
monicageek-cookbookVerified publisher8.2.01 of 1See more

monica geek-cookbook 8.2.0

1 of the 1 container images this version deploys carry CVE-2026-102279.

Container imageDigestPackageFixed in
library/monica:3.7.0-apacheceb1ba4196ab
laravel/framework@v8.81.0
12.69.0

Open the chart page →

2,940
leantimegissilabs1.3.01 of 2See more

leantime gissilabs 1.3.0

1 of the 2 container images this version deploys carry CVE-2026-102279.

Container imageDigestPackageFixed in
leantime/leantime:3.3.3ad4bfb0699d3
laravel/framework@v10.48.24
12.69.0

Open the chart page →

7,736
librenmsmidokura-communityVerified publisher0.3.21 of 6See more

librenms midokura-community 0.3.2

1 of the 6 container images this version deploys carry CVE-2026-102279.

Container imageDigestPackageFixed in
librenms/librenms:22.4.14f1f3d667cc7
laravel/framework@v8.80.0
12.69.0

Open the chart page →

10,107
snipe-itnicholaswildeVerified publisher1.0.51 of 1See more

snipe-it nicholaswilde 1.0.5

1 of the 1 container images this version deploys carry CVE-2026-102279.

Container imageDigestPackageFixed in
ghcr.io/linuxserver/snipe-it:version-v5.1.8ac091e4c33bd
laravel/framework@v6.20.29
12.69.0

Open the chart page →

1,044
laravel-octanerenoki-co1.0.01 of 1See more

laravel-octane renoki-co 1.0.0

1 of the 1 container images this version deploys carry CVE-2026-102279.

Container imageDigestPackageFixed in
quay.io/renokico/laravel-helm-demo:octane-0.6.0cad83090c58f
laravel/framework@v8.37.0
12.69.0

Open the chart page →

3,738
cachetadnoctemVerified publisher0.3.31 of 2See more

cachet adnoctem 0.3.3

1 of the 2 container images this version deploys carry CVE-2026-102279.

Container imageDigestPackageFixed in
cachethq/docker:2.3.15a61ff0f67ea7
laravel/framework@v5.2.39
12.69.0

Open the chart page →

1,948
linkstackadnoctemVerified publisher0.4.01 of 1See more

linkstack adnoctem 0.4.0

1 of the 1 container images this version deploys carry CVE-2026-102279.

Container imageDigestPackageFixed in
linkstackorg/linkstack:latest1c8b05399ee4
laravel/framework@9.x-dev
12.69.0

Open the chart page →

2,811
chart-appchart-app0.3.01 of 2See more

chart-app chart-app 0.3.0

1 of the 2 container images this version deploys carry CVE-2026-102279.

Container imageDigestPackageFixed in
n22107670/sample-app:0.4.08f3072db7aeb
laravel/framework@v8.83.27
12.69.0

Open the chart page →

2,954
cspconsolecspconsole1.3.111 of 5See more

cspconsole cspconsole 1.3.11

1 of the 5 container images this version deploys carry CVE-2026-102279.

Container imageDigestPackageFixed in
cspconsole/csp-control-center:1.0.1046dda4a31bd6
laravel/framework@10.50.2
12.69.0

Open the chart page →

57,844
heimdallegebackVerified publisher2.0.41 of 1See more

heimdall egeback 2.0.4

1 of the 1 container images this version deploys carry CVE-2026-102279.

Container imageDigestPackageFixed in
linuxserver/heimdall:2.6.371597f4461e4
laravel/framework@v10.44.0
12.69.0

Open the chart page →

1,758
supportpalevilgn0me0.1.61 of 1See more

supportpal evilgn0me 0.1.6

1 of the 1 container images this version deploys carry CVE-2026-102279.

Container imageDigestPackageFixed in
public.ecr.aws/supportpal/helpdesk-monolithic:4.0.4573779e57fae
laravel/framework@v8.83.12
12.69.0

Open the chart page →

23,162
firefly-iii-stackfirefly-iii0.10.22 of 4See more

firefly-iii-stack firefly-iii 0.10.2

2 of the 4 container images this version deploys carry CVE-2026-102279.

Container imageDigestPackageFixed in
fireflyiii/core:version-6.5.9fe4ecec4c2ba
laravel/framework@v12.55.1
12.69.0
fireflyiii/data-importer:version-2.2.3ab52bf932546
laravel/framework@v13.3.0
13.30.0

Open the chart page →

11,737
importerfirefly-iii1.6.01 of 1See more

importer firefly-iii 1.6.0

1 of the 1 container images this version deploys carry CVE-2026-102279.

Container imageDigestPackageFixed in
fireflyiii/data-importer:version-2.2.3ab52bf932546
laravel/framework@v13.3.0
13.30.0

Open the chart page →

5,553
linkstackfmjstudios0.2.21 of 1See more

linkstack fmjstudios 0.2.2

1 of the 1 container images this version deploys carry CVE-2026-102279.

Container imageDigestPackageFixed in
linkstackorg/linkstack:latestabd691b4293b
laravel/framework@v9.52.12
12.69.0

Open the chart page →

2,773
monicagabe565Verified publisher0.10.01 of 2See more

monica gabe565 0.10.0

1 of the 2 container images this version deploys carry CVE-2026-102279.

Container imageDigestPackageFixed in
library/monica:4.1.2-fpm-alpine1104023d0636
laravel/framework@v9.52.16
12.69.0

Open the chart page →

714
anonaddygeek-cookbookVerified publisher6.0.01 of 1See more

anonaddy geek-cookbook 6.0.0

1 of the 1 container images this version deploys carry CVE-2026-102279.

Container imageDigestPackageFixed in
anonaddy/anonaddy:0.12.3957a95565166
laravel/framework@v9.20.0
12.69.0

Open the chart page →

5,768
bookstackgeek-cookbookVerified publisher5.2.01 of 1See more

bookstack geek-cookbook 5.2.0

1 of the 1 container images this version deploys carry CVE-2026-102279.

Container imageDigestPackageFixed in
ghcr.io/linuxserver/bookstack:version-v21.12f05447347ff1
laravel/framework@v8.76.1
12.69.0

Open the chart page →

1,341
lycheegeek-cookbookVerified publisher6.4.21 of 1See more

lychee geek-cookbook 6.4.2

1 of the 1 container images this version deploys carry CVE-2026-102279.

Container imageDigestPackageFixed in
lycheeorg/lychee-laravel:v4.3.0308c0e6231da
laravel/framework@v8.37.0
12.69.0

Open the chart page →

639
cachethelm-charts-nr1.3.51 of 2See more

cachet helm-charts-nr 1.3.5

1 of the 2 container images this version deploys carry CVE-2026-102279.

Container imageDigestPackageFixed in
cachethq/docker:2.3.15a61ff0f67ea7
laravel/framework@v5.2.39
12.69.0

Open the chart page →

1,935
heimdallhelmforgeVerified publisher1.1.151 of 1See more

heimdall helmforge 1.1.15

1 of the 1 container images this version deploys carry CVE-2026-102279.

Container imageDigestPackageFixed in
linuxserver/heimdall:2.8.38e27750132a4
laravel/framework@v13.19.0
13.30.0

Open the chart page →

333
fireflyhomeenterpriseinc2.7.02 of 2See more

firefly homeenterpriseinc 2.7.0

2 of the 2 container images this version deploys carry CVE-2026-102279.

Container imageDigestPackageFixed in
fireflyiii/core:version-5.7.12c0300cfd3d76
laravel/framework@v9.29.0
12.69.0
fireflyiii/data-importer:version-0.9.1665500ce0fe66
laravel/framework@v9.29.0
12.69.0

Open the chart page →

3,917
firefly-iiikubernetes-homelab-helm-chartsVerified publisher0.2.01 of 3See more

firefly-iii kubernetes-homelab-helm-charts 0.2.0

1 of the 3 container images this version deploys carry CVE-2026-102279.

Container imageDigestPackageFixed in
fireflyiii/core:version-6.6.6ae69fdd95cde
laravel/framework@v13.18.0
13.30.0

Open the chart page →

5,429
sample-appkubeuest0.1.31 of 1See more

sample-app kubeuest 0.1.3

1 of the 1 container images this version deploys carry CVE-2026-102279.

Container imageDigestPackageFixed in
michaelepitech/sample-app:latestaf51d61c19f5
laravel/framework@v8.83.27
12.69.0

Open the chart page →

2,173
laravel-chartlaravel-application0.2.01 of 1See more

laravel-chart laravel-application 0.2.0

1 of the 1 container images this version deploys carry CVE-2026-102279.

Container imageDigestPackageFixed in
ibarreche/cloud-back-ci:lateste16a469c5791
laravel/framework@v5.8.38
12.69.0

Open the chart page →

1,909
akauntingnas-helm-chartsVerified publisher1.0.31 of 2See more

akaunting nas-helm-charts 1.0.3

1 of the 2 container images this version deploys carry CVE-2026-102279.

Container imageDigestPackageFixed in
akaunting/akaunting:3.0.1552811b36ec3a
laravel/framework@v10.13.0
12.69.0

Open the chart page →

94,983
librenmsnimbolus0.5.11 of 3See more

librenms nimbolus 0.5.1

1 of the 3 container images this version deploys carry CVE-2026-102279.

Container imageDigestPackageFixed in
librenms/librenms:24.11.00920bc9117a8
laravel/framework@v10.48.23
12.69.0

Open the chart page →

2,928
firefly-iiiphntom0.2.101 of 2See more

firefly-iii phntom 0.2.10

1 of the 2 container images this version deploys carry CVE-2026-102279.

Container imageDigestPackageFixed in
phntom/fireflyiii:version-5.7.5f881ea5fbbf1
laravel/framework@v9.11.0
12.69.0

Open the chart page →

2,629
podcast-helmpodcastwala-helm0.1.01 of 2See more

podcast-helm podcastwala-helm 0.1.0

1 of the 2 container images this version deploys carry CVE-2026-102279.

Container imageDigestPackageFixed in
shivani446/podcastwala-php:v1c0d07b7b4c8d
laravel/framework@v5.0.35
12.69.0

Open the chart page →

633
laravel-workerrenoki-co1.1.01 of 1See more

laravel-worker renoki-co 1.1.0

1 of the 1 container images this version deploys carry CVE-2026-102279.

Container imageDigestPackageFixed in
quay.io/renokico/laravel-helm-demo:worker-0.6.04b188259267e
laravel/framework@v8.37.0
12.69.0

Open the chart page →

5,843
bookstackschmitzis0.1.11 of 1See more

bookstack schmitzis 0.1.1

1 of the 1 container images this version deploys carry CVE-2026-102279.

Container imageDigestPackageFixed in
solidnerd/bookstack:21.12762ffd5c51d3
laravel/framework@v8.76.1
12.69.0

Open the chart page →

3,721
snipeitschmitzis6.1.01 of 2See more

snipeit schmitzis 6.1.0

1 of the 2 container images this version deploys carry CVE-2026-102279.

Container imageDigestPackageFixed in
snipe/snipe-it:v8.3.1141ebf2386fe
laravel/framework@v11.45.1
12.69.0

Open the chart page →

69,292
cachetsergiotocaliniVerified publisher1.0.01 of 1See more

cachet sergiotocalini 1.0.0

1 of the 1 container images this version deploys carry CVE-2026-102279.

Container imageDigestPackageFixed in
cachethq/docker:2.3.15a61ff0f67ea7
laravel/framework@v5.2.39
12.69.0

Open the chart page →

1,935
apiwbstack0.36.01 of 1See more

api wbstack 0.36.0

1 of the 1 container images this version deploys carry CVE-2026-102279.

Container imageDigestPackageFixed in
ghcr.io/wbstack/api:8x.9.11eee94f9f7a53
laravel/framework@v8.83.17
12.69.0

Open the chart page →

2,939
xboardxboard0.2.01 of 1See more

xboard xboard 0.2.0

1 of the 1 container images this version deploys carry CVE-2026-102279.

Container imageDigestPackageFixed in
ghcr.io/cedar2025/xboard:latest2633d6085768
laravel/framework@v12.54.1
12.69.0

Open the chart page →

712

Container images carrying it

41 by charts deploying them

A fixed version is listed for 1 of the 1 affected package.

Container imageDigestPackageFixed inUsed by
cachethq/docker:2.3.15a61ff0f67ea7
laravel/framework@v5.2.39
12.69.0
4
fireflyiii/data-importer:version-2.2.3ab52bf932546
laravel/framework@v13.3.0
13.30.0
2
akaunting/akaunting:3.0.1552811b36ec3a
laravel/framework@v10.13.0
12.69.0
1
akaunting/akaunting:3.1.21-fpm-alpine-nginxe7d5c245b1a0
laravel/framework@v10.50.0
12.69.0
1
anonaddy/anonaddy:0.12.3957a95565166
laravel/framework@v9.20.0
12.69.0
1
cspconsole/csp-control-center:1.0.1046dda4a31bd6
laravel/framework@10.50.2
12.69.0
1
fireflyiii/core:version-5.6.142f4283bd0cf7
laravel/framework@v8.82.0
12.69.0
1
fireflyiii/core:version-6.6.6ae69fdd95cde
laravel/framework@v13.18.0
13.30.0
1
fireflyiii/core:version-5.7.12c0300cfd3d76
laravel/framework@v9.29.0
12.69.0
1
fireflyiii/core:version-6.5.9fe4ecec4c2ba
laravel/framework@v12.55.1
12.69.0
1
fireflyiii/data-importer:version-0.9.1665500ce0fe66
laravel/framework@v9.29.0
12.69.0
1
ibarreche/cloud-back-ci:lateste16a469c5791
laravel/framework@v5.8.38
12.69.0
1
invoiceninja/invoiceninja:5.6.241437916dee01
laravel/framework@v9.52.10
12.69.0
1
leantime/leantime:3.3.3ad4bfb0699d3
laravel/framework@v10.48.24
12.69.0
1
library/monica:4.1.2-fpm-alpine1104023d0636
laravel/framework@v9.52.16
12.69.0
1
library/monica:3.7.0-apacheceb1ba4196ab
laravel/framework@v8.81.0
12.69.0
1
librenms/librenms:24.11.00920bc9117a8
laravel/framework@v10.48.23
12.69.0
1
librenms/librenms:22.4.14f1f3d667cc7
laravel/framework@v8.80.0
12.69.0
1
linkstackorg/linkstack:latest1c8b05399ee4
laravel/framework@9.x-dev
12.69.0
1
linkstackorg/linkstack:latestabd691b4293b
laravel/framework@v9.52.12
12.69.0
1
linuxserver/bookstack:26.05.202605282ebf97852661
laravel/framework@v12.61.0
12.69.0
1
linuxserver/heimdall:2.6.371597f4461e4
laravel/framework@v10.44.0
12.69.0
1
linuxserver/heimdall:2.8.38e27750132a4
laravel/framework@v13.19.0
13.30.0
1
lycheeorg/lychee-laravel:v4.3.0308c0e6231da
laravel/framework@v8.37.0
12.69.0
1
michaelepitech/sample-app:latestaf51d61c19f5
laravel/framework@v8.83.27
12.69.0
1
n22107670/sample-app:0.4.08f3072db7aeb
laravel/framework@v8.83.27
12.69.0
1
phntom/fireflyiii:version-5.7.5f881ea5fbbf1
laravel/framework@v9.11.0
12.69.0
1
shivani446/podcastwala-php:v1c0d07b7b4c8d
laravel/framework@v5.0.35
12.69.0
1
snipe/snipe-it:v8.3.1141ebf2386fe
laravel/framework@v11.45.1
12.69.0
1
snipe/snipe-it:v6.0.1455fb7636a98c
laravel/framework@v8.83.22
12.69.0
1
solidnerd/bookstack:21.12762ffd5c51d3
laravel/framework@v8.76.1
12.69.0
1
ghcr.io/cedar2025/xboard:latest2633d6085768
laravel/framework@v12.54.1
12.69.0
1
ghcr.io/linuxserver/bookstack:version-v24.12.1cc795b254b73
laravel/framework@v10.48.25
12.69.0
1
ghcr.io/linuxserver/bookstack:version-v21.12f05447347ff1
laravel/framework@v8.76.1
12.69.0
1
ghcr.io/linuxserver/snipe-it:version-v5.1.8ac091e4c33bd
laravel/framework@v6.20.29
12.69.0
1
ghcr.io/monicahq/monica-next:main8a02508cbdcf
laravel/framework@v12.22.1
12.69.0
1
ghcr.io/wbstack/api:8x.9.11eee94f9f7a53
laravel/framework@v8.83.17
12.69.0
1
public.ecr.aws/supportpal/helpdesk-monolithic:4.0.4573779e57fae
laravel/framework@v8.83.12
12.69.0
1
quay.io/renokico/laravel-helm-demo:0.6.03207f957e80c
laravel/framework@v8.37.0
12.69.0
1
quay.io/renokico/laravel-helm-demo:worker-0.6.04b188259267e
laravel/framework@v8.37.0
12.69.0
1
quay.io/renokico/laravel-helm-demo:octane-0.6.0cad83090c58f
laravel/framework@v8.37.0
12.69.0
1

syft 1.42.1 · advisories as of 23 Oct 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.