StackRadar

CVE-2026-102599

High

Advisory

Published 29 Sept 2026In the index since 30 Sept 2026
Severity
High
worst across findings
CVSS
7.5
base score, highest
EPSS
—
probability of exploitation
CISA KEV
Not listed
no confirmed exploitation
Charts affected
61
of 17,957 indexed, latest versions
Container images
48
deployed by those charts
Fix available
1 of 1
affected package

Socket.IO: Engine.IO Protocol Revision Mismatch DoS

Carried by container images the latest versions of 61 of 17,957 indexed charts deploy, on 48 images.

Affected packageAffected versionsFixed inImages
engine.ionpm6.6.1, 6.6.2, 6.6.4, 6.6.5+4 more6.6.1048
OSV records
GHSA-2gc4-cqfq-p2gv

Charts affected

61 by stars
ChartLatestAffected imagesRadar Score
uptime-kumauptime-kumaVerified publisher4.2.01 of 1See more

uptime-kuma uptime-kuma 4.2.0

1 of the 1 container images this version deploys carry CVE-2026-102599.

Container imageDigestPackageFixed in
louislam/uptime-kuma:2.5.0a8610b3b4c38
engine.io@6.6.9
6.6.10

Open the chart page →

32,872
stacks-blockchain-apihirosystemsVerified publisher6.5.11 of 5See more

stacks-blockchain-api hirosystems 6.5.1

1 of the 5 container images this version deploys carry CVE-2026-102599.

Container imageDigestPackageFixed in
hirosystems/stacks-blockchain-api:8.13.29c98b23c1515
engine.io@6.6.1
6.6.10

Open the chart page →

8,376
oneuptimeoneuptimeOfficialVerified publisher14.0.93 of 7See more

oneuptime oneuptime 14.0.9

3 of the 7 container images this version deploys carry CVE-2026-102599.

Container imageDigestPackageFixed in
oneuptime/nginx:release906acce7e252
engine.io@6.6.9
6.6.10
oneuptime/probe:release2a170032aee8
engine.io@6.6.9
6.6.10
oneuptime/runner:release86060743a718
engine.io@6.6.9
6.6.10

Open the chart page →

8,770
outlinekubitodevVerified publisher1.2.21 of 4See more

outline kubitodev 1.2.2

1 of the 4 container images this version deploys carry CVE-2026-102599.

Container imageDigestPackageFixed in
outlinewiki/outline:0.82.0494dfb9249a6
engine.io@6.6.2
6.6.10

Open the chart page →

5,826
velero-uiotwldVerified publisher0.16.01 of 1See more

velero-ui otwld 0.16.0

1 of the 1 container images this version deploys carry CVE-2026-102599.

Container imageDigestPackageFixed in
otwld/velero-ui:0.10.31c228d9ef71b
engine.io@6.6.9
6.6.10

Open the chart page →

1,552
budibasebudibase0.0.0-master1 of 7See more

budibase budibase 0.0.0-master

1 of the 7 container images this version deploys carry CVE-2026-102599.

Container imageDigestPackageFixed in
budibase/apps:3.41.344fe6feab985
engine.io@6.6.9
6.6.10

Open the chart page →

11,186
hedgedocadfinisVerified publisher0.6.11 of 2See more

hedgedoc adfinis 0.6.1

1 of the 2 container images this version deploys carry CVE-2026-102599.

Container imageDigestPackageFixed in
quay.io/hedgedoc/hedgedoc:1.12.089bd85d7817f
engine.io@6.6.9
6.6.10

Open the chart page →

3,434
netris-controllernetrisai2.8.21 of 14See more

netris-controller netrisai 2.8.2

1 of the 14 container images this version deploys carry CVE-2026-102599.

Container imageDigestPackageFixed in
netrisai/controller-web-service-backend:4.6.0-0086e865080e86c
engine.io@6.6.4
6.6.10

Open the chart page →

31,338
docmosthelmforgeVerified publisher1.4.01 of 4See more

docmost helmforge 1.4.0

1 of the 4 container images this version deploys carry CVE-2026-102599.

Container imageDigestPackageFixed in
docmost/docmost:0.96.0b56947fcfd08
engine.io@6.6.9
6.6.10

Open the chart page →

3,937
redisinsightredisinsight-guiVerified publisher1.3.51 of 1See more

redisinsight redisinsight-gui 1.3.5

1 of the 1 container images this version deploys carry CVE-2026-102599.

Container imageDigestPackageFixed in
redis/redisinsight:3.8b5e19ee240ab
engine.io@6.6.2
6.6.10

Open the chart page →

1,223
redisinsight-secureredisinsight-secureVerified publisher1.0.21 of 1See more

redisinsight-secure redisinsight-secure 1.0.2

1 of the 1 container images this version deploys carry CVE-2026-102599.

Container imageDigestPackageFixed in
redis/redisinsight:2.68019fcf774631
engine.io@6.6.2
6.6.10

Open the chart page →

1,915
hedgedocrobertobochetVerified publisher1.4.01 of 1See more

hedgedoc robertobochet 1.4.0

1 of the 1 container images this version deploys carry CVE-2026-102599.

Container imageDigestPackageFixed in
quay.io/hedgedoc/hedgedoc:1.12.089bd85d7817f
engine.io@6.6.9
6.6.10

Open the chart page →

1,242
nocodbzekker6Verified publisher1.10.01 of 1See more

nocodb zekker6 1.10.0

1 of the 1 container images this version deploys carry CVE-2026-102599.

Container imageDigestPackageFixed in
nocodb/nocodb:0.301.5d9516f0bf546
engine.io@6.6.6
6.6.10

Open the chart page →

4,582
kubedashdevopstalesOfficialVerified publisher4.0.01 of 8See more

kubedash devopstales 4.0.0

1 of the 8 container images this version deploys carry CVE-2026-102599.

Container imageDigestPackageFixed in
patrikx3/p3x-redis-ui:latestf19eb45b0694
engine.io@6.6.9
6.6.10

Open the chart page →

10,013
jellystatdjjudas21Verified publisher1.0.11 of 1See more

jellystat djjudas21 1.0.1

1 of the 1 container images this version deploys carry CVE-2026-102599.

Container imageDigestPackageFixed in
cyfershepard/jellystat:1.1.12e61c759ec706
engine.io@6.6.8
6.6.10

Open the chart page →

1,826
uptime-kumahelmforgeVerified publisher1.5.151 of 1See more

uptime-kuma helmforge 1.5.15

1 of the 1 container images this version deploys carry CVE-2026-102599.

Container imageDigestPackageFixed in
louislam/uptime-kuma:2.5.5c74379ac4509
engine.io@6.6.9
6.6.10

Open the chart page →

32,727
immichimmich-helm0.3.01 of 4See more

immich immich-helm 0.3.0

1 of the 4 container images this version deploys carry CVE-2026-102599.

Container imageDigestPackageFixed in
ghcr.io/immich-app/immich-server:v2.3.1f8d06a32b1b2
engine.io@6.6.4
6.6.10

Open the chart page →

17,127
uptime-kumapascaliskeVerified publisher3.0.01 of 1See more

uptime-kuma pascaliske 3.0.0

1 of the 1 container images this version deploys carry CVE-2026-102599.

Container imageDigestPackageFixed in
louislam/uptime-kuma:2.0.2-slim-rootless9865163f92c1
engine.io@6.6.4
6.6.10

Open the chart page →

7,533
peertubepeertubeVerified publisher0.1.31 of 1See more

peertube peertube 0.1.3

1 of the 1 container images this version deploys carry CVE-2026-102599.

Container imageDigestPackageFixed in
chocobozzz/peertube:v8.1.5052712130691
engine.io@6.6.5
6.6.10

Open the chart page →

7,918
portraitportraitVerified publisher0.2.131 of 8See more

portrait portrait 0.2.13

1 of the 8 container images this version deploys carry CVE-2026-102599.

Container imageDigestPackageFixed in
treskon/portrait-ui:DEV-lateste7970783bc8d
engine.io@6.6.7
6.6.10

Open the chart page →

33,687
uptime-kumasb-helm-charts0.4.01 of 1See more

uptime-kuma sb-helm-charts 0.4.0

1 of the 1 container images this version deploys carry CVE-2026-102599.

Container imageDigestPackageFixed in
louislam/uptime-kuma:2.0.24c364ef96aad
engine.io@6.6.4
6.6.10

Open the chart page →

41,195
immichsecustorVerified publisher2.0.71 of 1See more

immich secustor 2.0.7

1 of the 1 container images this version deploys carry CVE-2026-102599.

Container imageDigestPackageFixed in
ghcr.io/immich-app/immich-server:v3.2.4d317916b2809
engine.io@6.6.8
6.6.10

Open the chart page →

3,160
u-storeunifieVerified publisher1.2.01 of 1See more

u-store unifie 1.2.0

1 of the 1 container images this version deploys carry CVE-2026-102599.

Container imageDigestPackageFixed in
public.ecr.aws/g4a0y2u8/unifie-store:staging-19925a2057fabc948
engine.io@6.6.2
6.6.10

Open the chart page →

16,011
outlineadnoctemVerified publisher0.1.21 of 1See more

outline adnoctem 0.1.2

1 of the 1 container images this version deploys carry CVE-2026-102599.

Container imageDigestPackageFixed in
outlinewiki/outline:1.10.1832051f039b4
engine.io@6.6.9
6.6.10

Open the chart page →

1,678
uptime-kumaadnoctemVerified publisher0.4.11 of 1See more

uptime-kuma adnoctem 0.4.1

1 of the 1 container images this version deploys carry CVE-2026-102599.

Container imageDigestPackageFixed in
louislam/uptime-kuma:2.5.4917318f9d7be
engine.io@6.6.9
6.6.10

Open the chart page →

32,738
excalidashalekcVerified publisher1.4.01 of 2See more

excalidash alekc 1.4.0

1 of the 2 container images this version deploys carry CVE-2026-102599.

Container imageDigestPackageFixed in
zimengxiong/excalidash-backend:0.6.0cbdab75f31b2
engine.io@6.6.9
6.6.10

Open the chart page →

1,128
nas-appsawesomeVerified publisher2.0.01 of 8See more

nas-apps awesome 2.0.0

1 of the 8 container images this version deploys carry CVE-2026-102599.

Container imageDigestPackageFixed in
wettyoss/wetty:latest4f7c56d5b961
engine.io@6.6.8
6.6.10

Open the chart page →

6,873
immichbear0.1.11 of 2See more

immich bear 0.1.1

1 of the 2 container images this version deploys carry CVE-2026-102599.

Container imageDigestPackageFixed in
ghcr.io/immich-app/immich-server:v3.1.0b434cb9287ee
engine.io@6.6.8
6.6.10

Open the chart page →

7,555
dapr-agentsdapr-agents-devVerified publisher0.1.51 of 31See more

dapr-agents dapr-agents-dev 0.1.5

1 of the 31 container images this version deploys carry CVE-2026-102599.

Container imageDigestPackageFixed in
redis/redisinsight:latestb5e19ee240ab
engine.io@6.6.2
6.6.10

Open the chart page →

23,432
decisionrules-aksdecisionrules-aksVerified publisher0.2.01 of 2See more

decisionrules-aks decisionrules-aks 0.2.0

1 of the 2 container images this version deploys carry CVE-2026-102599.

Container imageDigestPackageFixed in
decisionrules/server:latest6a8f32aa11bc
engine.io@6.6.9
6.6.10

Open the chart page →

436
decisionrules-eksdecisionrules-eksVerified publisher0.3.01 of 2See more

decisionrules-eks decisionrules-eks 0.3.0

1 of the 2 container images this version deploys carry CVE-2026-102599.

Container imageDigestPackageFixed in
decisionrules/server:latest6a8f32aa11bc
engine.io@6.6.9
6.6.10

Open the chart page →

436
decisionrules-ingressdecisionrules-ingressVerified publisher0.2.01 of 2See more

decisionrules-ingress decisionrules-ingress 0.2.0

1 of the 2 container images this version deploys carry CVE-2026-102599.

Container imageDigestPackageFixed in
decisionrules/server:latest6a8f32aa11bc
engine.io@6.6.9
6.6.10

Open the chart page →

436
decisionrules-ocpdecisionrules-ocpVerified publisher0.1.01 of 4See more

decisionrules-ocp decisionrules-ocp 0.1.0

1 of the 4 container images this version deploys carry CVE-2026-102599.

Container imageDigestPackageFixed in
decisionrules/server:latest6a8f32aa11bc
engine.io@6.6.9
6.6.10

Open the chart page →

1,881
uptime-kumaegebackVerified publisher2.0.121 of 1See more

uptime-kuma egeback 2.0.12

1 of the 1 container images this version deploys carry CVE-2026-102599.

Container imageDigestPackageFixed in
louislam/uptime-kuma:2.5.0a8610b3b4c38
engine.io@6.6.9
6.6.10

Open the chart page →

32,872
hedgedocernail-hedgedoc5.0.01 of 1See more

hedgedoc ernail-hedgedoc 5.0.0

1 of the 1 container images this version deploys carry CVE-2026-102599.

Container imageDigestPackageFixed in
quay.io/hedgedoc/hedgedoc:1.10.8abdb6b08815d
engine.io@6.6.6
6.6.10

Open the chart page →

1,992
uptime-kumafluent-operatorVerified publisher0.1.01 of 1See more

uptime-kuma fluent-operator 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-102599.

Container imageDigestPackageFixed in
louislam/uptime-kuma:170233f4acb51
engine.io@6.6.4
6.6.10

Open the chart page →

3,748
redis-uigin0.0.11 of 1See more

redis-ui gin 0.0.1

1 of the 1 container images this version deploys carry CVE-2026-102599.

Container imageDigestPackageFixed in
patrikx3/p3x-redis-ui:latestf19eb45b0694
engine.io@6.6.9
6.6.10

Open the chart page →

1,298
affinehelmforgeVerified publisher1.0.11 of 3See more

affine helmforge 1.0.1

1 of the 3 container images this version deploys carry CVE-2026-102599.

Container imageDigestPackageFixed in
ghcr.io/toeverything/affine:0.27.4b649f5ce2384
engine.io@6.6.9
6.6.10

Open the chart page →

4,221
croniclehelmforgeVerified publisher1.1.101 of 1See more

cronicle helmforge 1.1.10

1 of the 1 container images this version deploys carry CVE-2026-102599.

Container imageDigestPackageFixed in
soulteary/cronicle:0.9.80ac2512fa6e39
engine.io@6.6.4
6.6.10

Open the chart page →

1,601
immichhelmforgeVerified publisher1.2.91 of 5See more

immich helmforge 1.2.9

1 of the 5 container images this version deploys carry CVE-2026-102599.

Container imageDigestPackageFixed in
ghcr.io/immich-app/immich-server:v3.1.0b434cb9287ee
engine.io@6.6.8
6.6.10

Open the chart page →

11,877
zomboid-serverjanip81-helm-chartsVerified publisher0.1.211 of 3See more

zomboid-server janip81-helm-charts 0.1.21

1 of the 3 container images this version deploys carry CVE-2026-102599.

Container imageDigestPackageFixed in
ghcr.io/fpsacha/zomboid-panel:v1.0.6605e16dd56cfb
engine.io@6.6.9
6.6.10

Open the chart page →

621
homebridgejespernohrVerified publisher0.2.01 of 1See more

homebridge jespernohr 0.2.0

1 of the 1 container images this version deploys carry CVE-2026-102599.

Container imageDigestPackageFixed in
homebridge/homebridge:latest77c685a40911
engine.io@6.6.9
6.6.10

Open the chart page →

39,947
zwave-js-uik8sonlabVerified publisher0.7.121 of 1See more

zwave-js-ui k8sonlab 0.7.12

1 of the 1 container images this version deploys carry CVE-2026-102599.

Container imageDigestPackageFixed in
zwavejs/zwave-js-ui:11.22.314d018bb689e
engine.io@6.6.4
6.6.10

Open the chart page →

1,115
redisinsightklicktippVerified publisher0.5.01 of 1See more

redisinsight klicktipp 0.5.0

1 of the 1 container images this version deploys carry CVE-2026-102599.

Container imageDigestPackageFixed in
redis/redisinsight:3.2.055542a762210
engine.io@6.6.2
6.6.10

Open the chart page →

1,639
uptime-kumakubernetes-homelab-helm-chartsVerified publisher0.1.21 of 1See more

uptime-kuma kubernetes-homelab-helm-charts 0.1.2

1 of the 1 container images this version deploys carry CVE-2026-102599.

Container imageDigestPackageFixed in
louislam/uptime-kuma:2.2.1-slim059b49d64739
engine.io@6.6.5
6.6.10

Open the chart page →

6,973
homebridgelbenicio-communityVerified publisher0.1.151 of 1See more

homebridge lbenicio-community 0.1.15

1 of the 1 container images this version deploys carry CVE-2026-102599.

Container imageDigestPackageFixed in
homebridge/homebridge:latest77c685a40911
engine.io@6.6.9
6.6.10

Open the chart page →

39,947
uptime-kumalbenicio-communityVerified publisher0.1.11 of 1See more

uptime-kuma lbenicio-community 0.1.1

1 of the 1 container images this version deploys carry CVE-2026-102599.

Container imageDigestPackageFixed in
louislam/uptime-kuma:2.3.29aeb4e51d038
engine.io@6.6.7
6.6.10

Open the chart page →

36,169
uptime-kumaloeken-at-homeVerified publisher2.3.21 of 1See more

uptime-kuma loeken-at-home 2.3.2

1 of the 1 container images this version deploys carry CVE-2026-102599.

Container imageDigestPackageFixed in
louislam/uptime-kuma:2.3.29aeb4e51d038
engine.io@6.6.7
6.6.10

Open the chart page →

36,169
redisinsightlogic3579Verified publisher3.4.01 of 1See more

redisinsight logic3579 3.4.0

1 of the 1 container images this version deploys carry CVE-2026-102599.

Container imageDigestPackageFixed in
redis/redisinsight:3.485562d67a912
engine.io@6.6.2
6.6.10

Open the chart page →

1,688
uptime-kumancsaVerified publisher1.7.31 of 1See more

uptime-kuma ncsa 1.7.3

1 of the 1 container images this version deploys carry CVE-2026-102599.

Container imageDigestPackageFixed in
louislam/uptime-kuma:2.5.5c74379ac4509
engine.io@6.6.9
6.6.10

Open the chart page →

32,727

Container images carrying it

48 by charts deploying them

A fixed version is listed for 1 of the 1 affected package.

Container imageDigestPackageFixed inUsed by
decisionrules/server:latest6a8f32aa11bc
engine.io@6.6.9
6.6.10
4
redis/redisinsight:3.8:latestb5e19ee240ab
engine.io@6.6.2
6.6.10
4
quay.io/hedgedoc/hedgedoc:1.12.089bd85d7817f
engine.io@6.6.9
6.6.10
3
homebridge/homebridge:latest77c685a40911
engine.io@6.6.9
6.6.10
2
louislam/uptime-kuma:2.5.4917318f9d7be
engine.io@6.6.9
6.6.10
2
louislam/uptime-kuma:2.3.29aeb4e51d038
engine.io@6.6.7
6.6.10
2
louislam/uptime-kuma:2.5.0a8610b3b4c38
engine.io@6.6.9
6.6.10
2
louislam/uptime-kuma:2.5.5c74379ac4509
engine.io@6.6.9
6.6.10
2
patrikx3/p3x-redis-ui:latestf19eb45b0694
engine.io@6.6.9
6.6.10
2
ghcr.io/immich-app/immich-server:v3.1.0b434cb9287ee
engine.io@6.6.8
6.6.10
2
budibase/apps:3.41.344fe6feab985
engine.io@6.6.9
6.6.10
1
chocobozzz/peertube:v8.1.5052712130691
engine.io@6.6.5
6.6.10
1
cyfershepard/jellystat:1.1.12e61c759ec706
engine.io@6.6.8
6.6.10
1
docmost/docmost:0.96.0b56947fcfd08
engine.io@6.6.9
6.6.10
1
evoapicloud/evolution-api:latest966625532d90
engine.io@6.6.4
6.6.10
1
hirosystems/stacks-blockchain-api:8.13.29c98b23c1515
engine.io@6.6.1
6.6.10
1
louislam/its-mytabs:1.7.02e478d3170bd
engine.io@6.6.9
6.6.10
1
louislam/uptime-kuma:2.2.1-slim059b49d64739
engine.io@6.6.5
6.6.10
1
louislam/uptime-kuma:2.0.24c364ef96aad
engine.io@6.6.4
6.6.10
1
louislam/uptime-kuma:170233f4acb51
engine.io@6.6.4
6.6.10
1
louislam/uptime-kuma:2.4.091e963bfda56
engine.io@6.6.8
6.6.10
1
louislam/uptime-kuma:2.0.2-slim-rootless9865163f92c1
engine.io@6.6.4
6.6.10
1
netrisai/controller-web-service-backend:4.6.0-0086e865080e86c
engine.io@6.6.4
6.6.10
1
nocodb/nocodb:0.258.06779a4ddedf2
engine.io@6.6.2
6.6.10
1
nocodb/nocodb:0.301.5d9516f0bf546
engine.io@6.6.6
6.6.10
1
oneuptime/nginx:release906acce7e252
engine.io@6.6.9
6.6.10
1
oneuptime/probe:release2a170032aee8
engine.io@6.6.9
6.6.10
1
oneuptime/runner:release86060743a718
engine.io@6.6.9
6.6.10
1
otwld/velero-ui:0.10.31c228d9ef71b
engine.io@6.6.9
6.6.10
1
outlinewiki/outline:0.82.0494dfb9249a6
engine.io@6.6.2
6.6.10
1
outlinewiki/outline:1.10.1832051f039b4
engine.io@6.6.9
6.6.10
1
redis/redisinsight:2.68019fcf774631
engine.io@6.6.2
6.6.10
1
redis/redisinsight:3.2.055542a762210
engine.io@6.6.2
6.6.10
1
redis/redisinsight:3.485562d67a912
engine.io@6.6.2
6.6.10
1
soulteary/cronicle:0.9.80ac2512fa6e39
engine.io@6.6.4
6.6.10
1
treskon/portrait-ui:DEV-lateste7970783bc8d
engine.io@6.6.7
6.6.10
1
wettyoss/wetty:latest4f7c56d5b961
engine.io@6.6.8
6.6.10
1
zimengxiong/excalidash-backend:0.4.271273af713c91
engine.io@6.6.4
6.6.10
1
zimengxiong/excalidash-backend:0.6.0cbdab75f31b2
engine.io@6.6.9
6.6.10
1
zwavejs/zwave-js-ui:11.22.314d018bb689e
engine.io@6.6.4
6.6.10
1
ghcr.io/fpsacha/zomboid-panel:v1.0.6605e16dd56cfb
engine.io@6.6.9
6.6.10
1
ghcr.io/immich-app/immich-server:v3.2.4d317916b2809
engine.io@6.6.8
6.6.10
1
ghcr.io/immich-app/immich-server:v2.3.1f8d06a32b1b2
engine.io@6.6.4
6.6.10
1
ghcr.io/quenchworks/images/uptime-kuma8037c42b1c70
engine.io@6.6.9
6.6.10
1
ghcr.io/toeverything/affine:0.27.4b649f5ce2384
engine.io@6.6.9
6.6.10
1
public.ecr.aws/g4a0y2u8/unifie-store:staging-19925a2057fabc948
engine.io@6.6.2
6.6.10
1
quay.io/hedgedoc/hedgedoc:1.10.8abdb6b08815d
engine.io@6.6.6
6.6.10
1
registry.gitlab.com/prisme.ai/prisme.ai/prisme.ai-events:prod764ca253f951
engine.io@6.6.9
6.6.10
1

syft 1.42.1 · advisories as of 30 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.