StackRadar

CVE-2026-102599

High

Advisory

Published 29 Sept 2026In the index since 30 Sept 2026
Severity
High
worst across findings
CVSS
7.5
base score, highest
EPSS
—
probability of exploitation
CISA KEV
Not listed
no confirmed exploitation
Charts affected
61
of 17,957 indexed, latest versions
Container images
48
deployed by those charts
Fix available
1 of 1
affected package

Socket.IO: Engine.IO Protocol Revision Mismatch DoS

Carried by container images the latest versions of 61 of 17,957 indexed charts deploy, on 48 images.

Affected packageAffected versionsFixed inImages
engine.ionpm6.6.1, 6.6.2, 6.6.4, 6.6.5+4 more6.6.1048
OSV records
GHSA-2gc4-cqfq-p2gv

Charts affected

61 by stars
ChartLatestAffected imagesRadar Score
nocodbone-acre-fundVerified publisher0.4.61 of 3See more

nocodb one-acre-fund 0.4.6

1 of the 3 container images this version deploys carry CVE-2026-102599.

Container imageDigestPackageFixed in
nocodb/nocodb:0.258.06779a4ddedf2
engine.io@6.6.2
6.6.10

Open the chart page →

4,167
prismeai-coreprismeai1.12.31 of 7See more

prismeai-core prismeai 1.12.3

1 of the 7 container images this version deploys carry CVE-2026-102599.

Container imageDigestPackageFixed in
registry.gitlab.com/prisme.ai/prisme.ai/prisme.ai-events:prod764ca253f951
engine.io@6.6.9
6.6.10

Open the chart page →

4,365
uptime-kumaquench-uptime-kumaVerified publisher0.0.41 of 1See more

uptime-kuma quench-uptime-kuma 0.0.4

1 of the 1 container images this version deploys carry CVE-2026-102599.

Container imageDigestPackageFixed in
ghcr.io/quenchworks/images/uptime-kumadigest-pinned8037c42b1c70
engine.io@6.6.9
6.6.10

Open the chart page →

67
redisinsightredisinsightVerified publisher0.1.01 of 1See more

redisinsight redisinsight 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-102599.

Container imageDigestPackageFixed in
redis/redisinsight:latestb5e19ee240ab
engine.io@6.6.2
6.6.10

Open the chart page →

1,223
uptime-kumarubxkubeVerified publisher1.2.11 of 1See more

uptime-kuma rubxkube 1.2.1

1 of the 1 container images this version deploys carry CVE-2026-102599.

Container imageDigestPackageFixed in
louislam/uptime-kuma:2.4.091e963bfda56
engine.io@6.6.8
6.6.10

Open the chart page →

32,941
uptime-kumaschoenwald1.0.101 of 1See more

uptime-kuma schoenwald 1.0.10

1 of the 1 container images this version deploys carry CVE-2026-102599.

Container imageDigestPackageFixed in
louislam/uptime-kuma:2.5.4917318f9d7be
engine.io@6.6.9
6.6.10

Open the chart page →

32,738
hedgedocsi-gitops0.12.31 of 2See more

hedgedoc si-gitops 0.12.3

1 of the 2 container images this version deploys carry CVE-2026-102599.

Container imageDigestPackageFixed in
quay.io/hedgedoc/hedgedoc:1.12.089bd85d7817f
engine.io@6.6.9
6.6.10

Open the chart page →

3,131
its-mytabsstone0.3.01 of 1See more

its-mytabs stone 0.3.0

1 of the 1 container images this version deploys carry CVE-2026-102599.

Container imageDigestPackageFixed in
louislam/its-mytabs:1.7.02e478d3170bd
engine.io@6.6.9
6.6.10

Open the chart page →

1,791
thanhvt27-lab-k8sthanh-vtVerified publisher0.1.41 of 5See more

thanhvt27-lab-k8s thanh-vt 0.1.4

1 of the 5 container images this version deploys carry CVE-2026-102599.

Container imageDigestPackageFixed in
redis/redisinsight:latestb5e19ee240ab
engine.io@6.6.2
6.6.10

Open the chart page →

4,907
excalidashunxwaresVerified publisher2026.2.51 of 2See more

excalidash unxwares 2026.2.5

1 of the 2 container images this version deploys carry CVE-2026-102599.

Container imageDigestPackageFixed in
zimengxiong/excalidash-backend:0.4.271273af713c91
engine.io@6.6.4
6.6.10

Open the chart page →

2,798
evolution-apivcnngrVerified publisher1.0.01 of 5See more

evolution-api vcnngr 1.0.0

1 of the 5 container images this version deploys carry CVE-2026-102599.

Container imageDigestPackageFixed in
evoapicloud/evolution-api:latest966625532d90
engine.io@6.6.4
6.6.10

Open the chart page →

4,071

Container images carrying it

48 by charts deploying them

A fixed version is listed for 1 of the 1 affected package.

Container imageDigestPackageFixed inUsed by
decisionrules/server:latest6a8f32aa11bc
engine.io@6.6.9
6.6.10
4
redis/redisinsight:3.8:latestb5e19ee240ab
engine.io@6.6.2
6.6.10
4
quay.io/hedgedoc/hedgedoc:1.12.089bd85d7817f
engine.io@6.6.9
6.6.10
3
homebridge/homebridge:latest77c685a40911
engine.io@6.6.9
6.6.10
2
louislam/uptime-kuma:2.5.4917318f9d7be
engine.io@6.6.9
6.6.10
2
louislam/uptime-kuma:2.3.29aeb4e51d038
engine.io@6.6.7
6.6.10
2
louislam/uptime-kuma:2.5.0a8610b3b4c38
engine.io@6.6.9
6.6.10
2
louislam/uptime-kuma:2.5.5c74379ac4509
engine.io@6.6.9
6.6.10
2
patrikx3/p3x-redis-ui:latestf19eb45b0694
engine.io@6.6.9
6.6.10
2
ghcr.io/immich-app/immich-server:v3.1.0b434cb9287ee
engine.io@6.6.8
6.6.10
2
budibase/apps:3.41.344fe6feab985
engine.io@6.6.9
6.6.10
1
chocobozzz/peertube:v8.1.5052712130691
engine.io@6.6.5
6.6.10
1
cyfershepard/jellystat:1.1.12e61c759ec706
engine.io@6.6.8
6.6.10
1
docmost/docmost:0.96.0b56947fcfd08
engine.io@6.6.9
6.6.10
1
evoapicloud/evolution-api:latest966625532d90
engine.io@6.6.4
6.6.10
1
hirosystems/stacks-blockchain-api:8.13.29c98b23c1515
engine.io@6.6.1
6.6.10
1
louislam/its-mytabs:1.7.02e478d3170bd
engine.io@6.6.9
6.6.10
1
louislam/uptime-kuma:2.2.1-slim059b49d64739
engine.io@6.6.5
6.6.10
1
louislam/uptime-kuma:2.0.24c364ef96aad
engine.io@6.6.4
6.6.10
1
louislam/uptime-kuma:170233f4acb51
engine.io@6.6.4
6.6.10
1
louislam/uptime-kuma:2.4.091e963bfda56
engine.io@6.6.8
6.6.10
1
louislam/uptime-kuma:2.0.2-slim-rootless9865163f92c1
engine.io@6.6.4
6.6.10
1
netrisai/controller-web-service-backend:4.6.0-0086e865080e86c
engine.io@6.6.4
6.6.10
1
nocodb/nocodb:0.258.06779a4ddedf2
engine.io@6.6.2
6.6.10
1
nocodb/nocodb:0.301.5d9516f0bf546
engine.io@6.6.6
6.6.10
1
oneuptime/nginx:release906acce7e252
engine.io@6.6.9
6.6.10
1
oneuptime/probe:release2a170032aee8
engine.io@6.6.9
6.6.10
1
oneuptime/runner:release86060743a718
engine.io@6.6.9
6.6.10
1
otwld/velero-ui:0.10.31c228d9ef71b
engine.io@6.6.9
6.6.10
1
outlinewiki/outline:0.82.0494dfb9249a6
engine.io@6.6.2
6.6.10
1
outlinewiki/outline:1.10.1832051f039b4
engine.io@6.6.9
6.6.10
1
redis/redisinsight:2.68019fcf774631
engine.io@6.6.2
6.6.10
1
redis/redisinsight:3.2.055542a762210
engine.io@6.6.2
6.6.10
1
redis/redisinsight:3.485562d67a912
engine.io@6.6.2
6.6.10
1
soulteary/cronicle:0.9.80ac2512fa6e39
engine.io@6.6.4
6.6.10
1
treskon/portrait-ui:DEV-lateste7970783bc8d
engine.io@6.6.7
6.6.10
1
wettyoss/wetty:latest4f7c56d5b961
engine.io@6.6.8
6.6.10
1
zimengxiong/excalidash-backend:0.4.271273af713c91
engine.io@6.6.4
6.6.10
1
zimengxiong/excalidash-backend:0.6.0cbdab75f31b2
engine.io@6.6.9
6.6.10
1
zwavejs/zwave-js-ui:11.22.314d018bb689e
engine.io@6.6.4
6.6.10
1
ghcr.io/fpsacha/zomboid-panel:v1.0.6605e16dd56cfb
engine.io@6.6.9
6.6.10
1
ghcr.io/immich-app/immich-server:v3.2.4d317916b2809
engine.io@6.6.8
6.6.10
1
ghcr.io/immich-app/immich-server:v2.3.1f8d06a32b1b2
engine.io@6.6.4
6.6.10
1
ghcr.io/quenchworks/images/uptime-kuma8037c42b1c70
engine.io@6.6.9
6.6.10
1
ghcr.io/toeverything/affine:0.27.4b649f5ce2384
engine.io@6.6.9
6.6.10
1
public.ecr.aws/g4a0y2u8/unifie-store:staging-19925a2057fabc948
engine.io@6.6.2
6.6.10
1
quay.io/hedgedoc/hedgedoc:1.10.8abdb6b08815d
engine.io@6.6.6
6.6.10
1
registry.gitlab.com/prisme.ai/prisme.ai/prisme.ai-events:prod764ca253f951
engine.io@6.6.9
6.6.10
1

syft 1.42.1 · advisories as of 30 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.