CVE-2026-102599
HighAdvisory
Published 29 Sept 2026In the index since 30 Sept 2026
- Severity
- High
- worst across findings
- CVSS
- 7.5
- base score, highest
- EPSS
- —
- probability of exploitation
- CISA KEV
- Not listed
- no confirmed exploitation
- Charts affected
- 61
- of 17,957 indexed, latest versions
- Container images
- 48
- deployed by those charts
- Fix available
- 1 of 1
- affected package
Socket.IO: Engine.IO Protocol Revision Mismatch DoS
Carried by container images the latest versions of 61 of 17,957 indexed charts deploy, on 48 images.
| Affected package | Affected versions | Fixed in | Images |
|---|---|---|---|
| engine.ionpm | 6.6.1, 6.6.2, 6.6.4, 6.6.5+4 more | 6.6.10 | 48 |
- OSV records
- GHSA-2gc4-cqfq-p2gv
Charts affected
61 by stars
| Chart | Latest | Affected images | Radar Score |
|---|---|---|---|
| uptime-kumauptime-kumaVerified publisher | 4.2.0 | 1 of 1See more | 32,872 |
| stacks-blockchain-apihirosystemsVerified publisher | 6.5.1 | 1 of 5See more | 8,376 |
| oneuptimeoneuptimeOfficialVerified publisher | 14.0.9 | 3 of 7See more | 8,770 |
| outlinekubitodevVerified publisher | 1.2.2 | 1 of 4See more | 5,826 |
| velero-uiotwldVerified publisher | 0.16.0 | 1 of 1See more | 1,552 |
| budibasebudibase | 0.0.0-master | 1 of 7See more | 11,186 |
| hedgedocadfinisVerified publisher | 0.6.1 | 1 of 2See more | 3,434 |
| netris-controllernetrisai | 2.8.2 | 1 of 14See more | 31,338 |
| docmosthelmforgeVerified publisher | 1.4.0 | 1 of 4See more | 3,937 |
| redisinsightredisinsight-guiVerified publisher | 1.3.5 | 1 of 1See more | 1,223 |
| redisinsight-secureredisinsight-secureVerified publisher | 1.0.2 | 1 of 1See more | 1,915 |
| hedgedocrobertobochetVerified publisher | 1.4.0 | 1 of 1See more | 1,242 |
| nocodbzekker6Verified publisher | 1.10.0 | 1 of 1See more | 4,582 |
| kubedashdevopstalesOfficialVerified publisher | 4.0.0 | 1 of 8See more | 10,013 |
| jellystatdjjudas21Verified publisher | 1.0.1 | 1 of 1See more | 1,826 |
| uptime-kumahelmforgeVerified publisher | 1.5.15 | 1 of 1See more | 32,727 |
| immichimmich-helm | 0.3.0 | 1 of 4See more | 17,127 |
| uptime-kumapascaliskeVerified publisher | 3.0.0 | 1 of 1See more | 7,533 |
| peertubepeertubeVerified publisher | 0.1.3 | 1 of 1See more | 7,918 |
| portraitportraitVerified publisher | 0.2.13 | 1 of 8See more | 33,687 |
| uptime-kumasb-helm-charts | 0.4.0 | 1 of 1See more | 41,195 |
| immichsecustorVerified publisher | 2.0.7 | 1 of 1See more | 3,160 |
| u-storeunifieVerified publisher | 1.2.0 | 1 of 1See more | 16,011 |
| outlineadnoctemVerified publisher | 0.1.2 | 1 of 1See more | 1,678 |
| uptime-kumaadnoctemVerified publisher | 0.4.1 | 1 of 1See more | 32,738 |
| excalidashalekcVerified publisher | 1.4.0 | 1 of 2See more | 1,128 |
| nas-appsawesomeVerified publisher | 2.0.0 | 1 of 8See more | 6,873 |
| immichbear | 0.1.1 | 1 of 2See more | 7,555 |
| dapr-agentsdapr-agents-devVerified publisher | 0.1.5 | 1 of 31See more | 23,432 |
| decisionrules-aksdecisionrules-aksVerified publisher | 0.2.0 | 1 of 2See more | 436 |
| decisionrules-eksdecisionrules-eksVerified publisher | 0.3.0 | 1 of 2See more | 436 |
| decisionrules-ingressdecisionrules-ingressVerified publisher | 0.2.0 | 1 of 2See more | 436 |
| decisionrules-ocpdecisionrules-ocpVerified publisher | 0.1.0 | 1 of 4See more | 1,881 |
| uptime-kumaegebackVerified publisher | 2.0.12 | 1 of 1See more | 32,872 |
| hedgedocernail-hedgedoc | 5.0.0 | 1 of 1See more | 1,992 |
| uptime-kumafluent-operatorVerified publisher | 0.1.0 | 1 of 1See more | 3,748 |
| redis-uigin | 0.0.1 | 1 of 1See more | 1,298 |
| affinehelmforgeVerified publisher | 1.0.1 | 1 of 3See more | 4,221 |
| croniclehelmforgeVerified publisher | 1.1.10 | 1 of 1See more | 1,601 |
| immichhelmforgeVerified publisher | 1.2.9 | 1 of 5See more | 11,877 |
| zomboid-serverjanip81-helm-chartsVerified publisher | 0.1.21 | 1 of 3See more | 621 |
| homebridgejespernohrVerified publisher | 0.2.0 | 1 of 1See more | 39,947 |
| zwave-js-uik8sonlabVerified publisher | 0.7.12 | 1 of 1See more | 1,115 |
| redisinsightklicktippVerified publisher | 0.5.0 | 1 of 1See more | 1,639 |
| uptime-kumakubernetes-homelab-helm-chartsVerified publisher | 0.1.2 | 1 of 1See more | 6,973 |
| homebridgelbenicio-communityVerified publisher | 0.1.15 | 1 of 1See more | 39,947 |
| uptime-kumalbenicio-communityVerified publisher | 0.1.1 | 1 of 1See more | 36,169 |
| uptime-kumaloeken-at-homeVerified publisher | 2.3.2 | 1 of 1See more | 36,169 |
| redisinsightlogic3579Verified publisher | 3.4.0 | 1 of 1See more | 1,688 |
| uptime-kumancsaVerified publisher | 1.7.3 | 1 of 1See more | 32,727 |
Container images carrying it
48 by charts deploying them
A fixed version is listed for 1 of the 1 affected package.
| Container image | Digest | Package | Fixed in | Used by |
|---|---|---|---|---|
| decisionrules/ | 6a8f32aa11bc | engine.io | 6.6.10 | 4 |
| redis/ | b5e19ee240ab | engine.io | 6.6.10 | 4 |
| quay.io/ | 89bd85d7817f | engine.io | 6.6.10 | 3 |
| homebridge/ | 77c685a40911 | engine.io | 6.6.10 | 2 |
| louislam/ | 917318f9d7be | engine.io | 6.6.10 | 2 |
| louislam/ | 9aeb4e51d038 | engine.io | 6.6.10 | 2 |
| louislam/ | a8610b3b4c38 | engine.io | 6.6.10 | 2 |
| louislam/ | c74379ac4509 | engine.io | 6.6.10 | 2 |
| patrikx3/ | f19eb45b0694 | engine.io | 6.6.10 | 2 |
| ghcr.io/ | b434cb9287ee | engine.io | 6.6.10 | 2 |
| budibase/ | 44fe6feab985 | engine.io | 6.6.10 | 1 |
| chocobozzz/ | 052712130691 | engine.io | 6.6.10 | 1 |
| cyfershepard/ | e61c759ec706 | engine.io | 6.6.10 | 1 |
| docmost/ | b56947fcfd08 | engine.io | 6.6.10 | 1 |
| evoapicloud/ | 966625532d90 | engine.io | 6.6.10 | 1 |
| hirosystems/ | 9c98b23c1515 | engine.io | 6.6.10 | 1 |
| louislam/ | 2e478d3170bd | engine.io | 6.6.10 | 1 |
| louislam/ | 059b49d64739 | engine.io | 6.6.10 | 1 |
| louislam/ | 4c364ef96aad | engine.io | 6.6.10 | 1 |
| louislam/ | 70233f4acb51 | engine.io | 6.6.10 | 1 |
| louislam/ | 91e963bfda56 | engine.io | 6.6.10 | 1 |
| louislam/ | 9865163f92c1 | engine.io | 6.6.10 | 1 |
| netrisai/ | 6e865080e86c | engine.io | 6.6.10 | 1 |
| nocodb/ | 6779a4ddedf2 | engine.io | 6.6.10 | 1 |
| nocodb/ | d9516f0bf546 | engine.io | 6.6.10 | 1 |
| oneuptime/ | 906acce7e252 | engine.io | 6.6.10 | 1 |
| oneuptime/ | 2a170032aee8 | engine.io | 6.6.10 | 1 |
| oneuptime/ | 86060743a718 | engine.io | 6.6.10 | 1 |
| otwld/ | 1c228d9ef71b | engine.io | 6.6.10 | 1 |
| outlinewiki/ | 494dfb9249a6 | engine.io | 6.6.10 | 1 |
| outlinewiki/ | 832051f039b4 | engine.io | 6.6.10 | 1 |
| redis/ | 019fcf774631 | engine.io | 6.6.10 | 1 |
| redis/ | 55542a762210 | engine.io | 6.6.10 | 1 |
| redis/ | 85562d67a912 | engine.io | 6.6.10 | 1 |
| soulteary/ | ac2512fa6e39 | engine.io | 6.6.10 | 1 |
| treskon/ | e7970783bc8d | engine.io | 6.6.10 | 1 |
| wettyoss/ | 4f7c56d5b961 | engine.io | 6.6.10 | 1 |
| zimengxiong/ | 1273af713c91 | engine.io | 6.6.10 | 1 |
| zimengxiong/ | cbdab75f31b2 | engine.io | 6.6.10 | 1 |
| zwavejs/ | 14d018bb689e | engine.io | 6.6.10 | 1 |
| ghcr.io/ | 05e16dd56cfb | engine.io | 6.6.10 | 1 |
| ghcr.io/ | d317916b2809 | engine.io | 6.6.10 | 1 |
| ghcr.io/ | f8d06a32b1b2 | engine.io | 6.6.10 | 1 |
| ghcr.io/ | 8037c42b1c70 | engine.io | 6.6.10 | 1 |
| ghcr.io/ | b649f5ce2384 | engine.io | 6.6.10 | 1 |
| public.ecr.aws/ | a2057fabc948 | engine.io | 6.6.10 | 1 |
| quay.io/ | abdb6b08815d | engine.io | 6.6.10 | 1 |
| registry.gitlab.com/ | 764ca253f951 | engine.io | 6.6.10 | 1 |