StackRadar

CVE-2026-104847

High

Advisory

Published 5 Oct 2026In the index since 6 Oct 2026
Severity
High
worst across findings
CVSS
8.5
base score, highest
EPSS
0.003
21st percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
24
of 18,035 indexed, latest versions
Container images
24
deployed by those charts
Fix available
1 of 1
affected package

ProseMirror has a XSS vulnerability in prosemirror-view's paste handling

Carried by container images the latest versions of 24 of 18,035 indexed charts deploy, on 24 images.

Affected packageAffected versionsFixed inImages
prosemirror-viewnpm1.26.5, 1.30.0, 1.31.7, 1.32.4+9 more1.42.324
OSV records
GHSA-c8x8-7fp4-3x9w

Charts affected

24 by stars
ChartLatestAffected imagesRadar Score
n8ncommunity-chartsVerified publisher1.24.431 of 1See more

n8n community-charts 1.24.43

1 of the 1 container images this version deploys carry CVE-2026-104847.

Container imageDigestPackageFixed in
n8nio/n8n:2.41.687e0bab2c931
prosemirror-view@1.41.8
1.42.3

Open the chart page →

1,436
n8nopen-8gears2.1.11 of 1See more

n8n open-8gears 2.1.1

1 of the 1 container images this version deploys carry CVE-2026-104847.

Container imageDigestPackageFixed in
n8nio/n8n:2.36.8cfe2704ff858
prosemirror-view@1.41.8
1.42.3

Open the chart page →

2,298
openprojectopenproject-helm-chartsOfficialVerified publisher13.13.11 of 5See more

openproject openproject-helm-charts 13.13.1

1 of the 5 container images this version deploys carry CVE-2026-104847.

Container imageDigestPackageFixed in
openproject/hocuspocus:release-338001b288dc1359dfb5
prosemirror-view@1.41.3
1.42.3

Open the chart page →

20,916
outlinekubitodevVerified publisher1.2.21 of 4See more

outline kubitodev 1.2.2

1 of the 4 container images this version deploys carry CVE-2026-104847.

Container imageDigestPackageFixed in
outlinewiki/outline:0.82.0494dfb9249a6
prosemirror-view@1.37.1
1.42.3

Open the chart page →

6,351
outlineoutline0.0.91 of 4See more

outline outline 0.0.9

1 of the 4 container images this version deploys carry CVE-2026-104847.

Container imageDigestPackageFixed in
outlinewiki/outline:0.69.1d060dcd8f9aa
prosemirror-view@1.26.5
1.42.3

Open the chart page →

5,491
n8nhelmforgeVerified publisher2.1.31 of 2See more

n8n helmforge 2.1.3

1 of the 2 container images this version deploys carry CVE-2026-104847.

Container imageDigestPackageFixed in
n8nio/n8n:2.41.3fdce8f852ac7
prosemirror-view@1.41.8
1.42.3

Open the chart page →

1,797
homarroben01Verified publisher1.4.01 of 1See more

homarr oben01 1.4.0

1 of the 1 container images this version deploys carry CVE-2026-104847.

Container imageDigestPackageFixed in
ghcr.io/ajnart/homarr:0.16.0737ec361ed24
prosemirror-view@1.32.4
1.42.3

Open the chart page →

3,194
baserowbaserow-chartVerified publisher1.1.01 of 6See more

baserow baserow-chart 1.1.0

1 of the 6 container images this version deploys carry CVE-2026-104847.

Container imageDigestPackageFixed in
baserow/web-frontend:2.4.00d91358ed205
prosemirror-view@1.42.1
1.42.3

Open the chart page →

19,196
convertigoconvertigoOfficialVerified publisher8.4.51 of 5See more

convertigo convertigo 8.4.5

1 of the 5 container images this version deploys carry CVE-2026-104847.

Container imageDigestPackageFixed in
baserow/baserow:1.30.1df0c42eb67e8
prosemirror-view@1.32.6
1.42.3

Open the chart page →

17,306
cosmocosmo-platformOfficialVerified publisher0.21.01 of 10See more

cosmo cosmo-platform 0.21.0

1 of the 10 container images this version deploys carry CVE-2026-104847.

Container imageDigestPackageFixed in
ghcr.io/wundergraph/cosmo/controlplane:0.133.149800ff775f3
prosemirror-view@1.38.1
1.42.3

Open the chart page →

34,320
plane-enterprisemakeplaneOfficialVerified publisher3.10.33 of 13See more

plane-enterprise makeplane 3.10.3

3 of the 13 container images this version deploys carry CVE-2026-104847.

Container imageDigestPackageFixed in
makeplane/live-commercial:v3.3.1d68fab8f6a3e
prosemirror-view@1.41.9
1.42.3
makeplane/silo-commercial:v3.3.1f0825c6b22d1
prosemirror-view@1.41.9
1.42.3
makeplane/space-commercial:v3.3.19360e65bf273
prosemirror-view@1.41.9
1.42.3

Open the chart page →

6,159
wraftwraft0.1.121 of 9See more

wraft wraft 0.1.12

1 of the 9 container images this version deploys carry CVE-2026-104847.

Container imageDigestPackageFixed in
quay.io/wraft/wraft-frontend:latestf1bbbd5e9bb9
prosemirror-view@1.41.0
1.42.3

Open the chart page →

5,841
outlineadnoctemVerified publisher0.1.21 of 1See more

outline adnoctem 0.1.2

1 of the 1 container images this version deploys carry CVE-2026-104847.

Container imageDigestPackageFixed in
outlinewiki/outline:1.10.1832051f039b4
prosemirror-view@1.41.8
1.42.3

Open the chart page →

2,001
homarrdelerVerified publisher1.0.11 of 1See more

homarr deler 1.0.1

1 of the 1 container images this version deploys carry CVE-2026-104847.

Container imageDigestPackageFixed in
ghcr.io/ajnart/homarr:0.13.4985456bdfb46
prosemirror-view@1.31.7
1.42.3

Open the chart page →

2,056
n8nn8n-openshiftVerified publisher1.18.01 of 1See more

n8n n8n-openshift 1.18.0

1 of the 1 container images this version deploys carry CVE-2026-104847.

Container imageDigestPackageFixed in
n8nio/n8n:2.36.714c4285bc303
prosemirror-view@1.41.8
1.42.3

Open the chart page →

2,298
n8nopenshift1.18.01 of 1See more

n8n openshift 1.18.0

1 of the 1 container images this version deploys carry CVE-2026-104847.

Container imageDigestPackageFixed in
n8nio/n8n:2.36.714c4285bc303
prosemirror-view@1.41.8
1.42.3

Open the chart page →

2,298
outlineschmitzis0.0.81 of 4See more

outline schmitzis 0.0.8

1 of the 4 container images this version deploys carry CVE-2026-104847.

Container imageDigestPackageFixed in
outlinewiki/outline:0.69.1d060dcd8f9aa
prosemirror-view@1.26.5
1.42.3

Open the chart page →

5,491
speckle-server-branch-hotfix-2.19.1speckleVerified publisher2.19.2-branch.hotfix-2.19.1.124125-665e7e11 of 5See more

speckle-server-branch-hotfix-2.19.1 speckle 2.19.2-branch.hotfix-2.19.1.124125-665e7e1

1 of the 5 container images this version deploys carry CVE-2026-104847.

Container imageDigestPackageFixed in
speckle/speckle-frontend-2:2.19.2-branch.hotfix-2.19.1.124125-665e7e14f9241665ae3
prosemirror-view@1.30.0
1.42.3

Open the chart page →

18,134
speckle-server-branch-hotfix-2.20.2speckleVerified publisher2.20.3-branch.hotfix-2.20.2.149555-37ea0cb1 of 5See more

speckle-server-branch-hotfix-2.20.2 speckle 2.20.3-branch.hotfix-2.20.2.149555-37ea0cb

1 of the 5 container images this version deploys carry CVE-2026-104847.

Container imageDigestPackageFixed in
speckle/speckle-frontend-2:2.20.3-branch.hotfix-2.20.2.149555-37ea0cbfdc008effc7a
prosemirror-view@1.30.0
1.42.3

Open the chart page →

18,219
speckle-server-branch-testing1speckleVerified publisher2.20.6-branch.testing1.154030-9b091141 of 5See more

speckle-server-branch-testing1 speckle 2.20.6-branch.testing1.154030-9b09114

1 of the 5 container images this version deploys carry CVE-2026-104847.

Container imageDigestPackageFixed in
speckle/speckle-frontend-2:2.20.6-branch.testing1.154030-9b0911432fc940d9b4c
prosemirror-view@1.30.0
1.42.3

Open the chart page →

18,219
speckle-server-branch-testing4speckleVerified publisher2.20.2-branch.testing4.134160-9fad4b21 of 5See more

speckle-server-branch-testing4 speckle 2.20.2-branch.testing4.134160-9fad4b2

1 of the 5 container images this version deploys carry CVE-2026-104847.

Container imageDigestPackageFixed in
speckle/speckle-frontend-2:2.20.2-branch.testing4.134160-9fad4b210ad4ade8bf2
prosemirror-view@1.30.0
1.42.3

Open the chart page →

17,788
speckle-server-branch-testing5speckleVerified publisher2.21.3-branch.testing5.219631-2153bef1 of 5See more

speckle-server-branch-testing5 speckle 2.21.3-branch.testing5.219631-2153bef

1 of the 5 container images this version deploys carry CVE-2026-104847.

Container imageDigestPackageFixed in
speckle/speckle-frontend-2:2.21.3-branch.testing5.219631-2153befd4ca6ebf09b9
prosemirror-view@1.30.0
1.42.3

Open the chart page →

17,473
twentytwenty-crm0.1.111 of 4See more

twenty twenty-crm 0.1.11

1 of the 4 container images this version deploys carry CVE-2026-104847.

Container imageDigestPackageFixed in
twentycrm/twenty:v2.22.0e7d9948bf284
prosemirror-view@1.41.6
1.42.3

Open the chart page →

6,547
homarrvhdirkVerified publisher0.1.51 of 1See more

homarr vhdirk 0.1.5

1 of the 1 container images this version deploys carry CVE-2026-104847.

Container imageDigestPackageFixed in
ghcr.io/ajnart/homarr:lateste103abadfb52
prosemirror-view@1.32.4
1.42.3

Open the chart page →

3,395

Container images carrying it

24 by charts deploying them

A fixed version is listed for 1 of the 1 affected package.

Container imageDigestPackageFixed inUsed by
n8nio/n8n:2.36.714c4285bc303
prosemirror-view@1.41.8
1.42.3
2
outlinewiki/outline:0.69.1d060dcd8f9aa
prosemirror-view@1.26.5
1.42.3
2
baserow/baserow:1.30.1df0c42eb67e8
prosemirror-view@1.32.6
1.42.3
1
baserow/web-frontend:2.4.00d91358ed205
prosemirror-view@1.42.1
1.42.3
1
makeplane/live-commercial:v3.3.1d68fab8f6a3e
prosemirror-view@1.41.9
1.42.3
1
makeplane/silo-commercial:v3.3.1f0825c6b22d1
prosemirror-view@1.41.9
1.42.3
1
makeplane/space-commercial:v3.3.19360e65bf273
prosemirror-view@1.41.9
1.42.3
1
n8nio/n8n:2.41.687e0bab2c931
prosemirror-view@1.41.8
1.42.3
1
n8nio/n8n:2.36.8cfe2704ff858
prosemirror-view@1.41.8
1.42.3
1
n8nio/n8n:2.41.3fdce8f852ac7
prosemirror-view@1.41.8
1.42.3
1
openproject/hocuspocus:release-338001b288dc1359dfb5
prosemirror-view@1.41.3
1.42.3
1
outlinewiki/outline:0.82.0494dfb9249a6
prosemirror-view@1.37.1
1.42.3
1
outlinewiki/outline:1.10.1832051f039b4
prosemirror-view@1.41.8
1.42.3
1
speckle/speckle-frontend-2:2.20.2-branch.testing4.134160-9fad4b210ad4ade8bf2
prosemirror-view@1.30.0
1.42.3
1
speckle/speckle-frontend-2:2.20.6-branch.testing1.154030-9b0911432fc940d9b4c
prosemirror-view@1.30.0
1.42.3
1
speckle/speckle-frontend-2:2.19.2-branch.hotfix-2.19.1.124125-665e7e14f9241665ae3
prosemirror-view@1.30.0
1.42.3
1
speckle/speckle-frontend-2:2.21.3-branch.testing5.219631-2153befd4ca6ebf09b9
prosemirror-view@1.30.0
1.42.3
1
speckle/speckle-frontend-2:2.20.3-branch.hotfix-2.20.2.149555-37ea0cbfdc008effc7a
prosemirror-view@1.30.0
1.42.3
1
twentycrm/twenty:v2.22.0e7d9948bf284
prosemirror-view@1.41.6
1.42.3
1
ghcr.io/ajnart/homarr:0.16.0737ec361ed24
prosemirror-view@1.32.4
1.42.3
1
ghcr.io/ajnart/homarr:0.13.4985456bdfb46
prosemirror-view@1.31.7
1.42.3
1
ghcr.io/ajnart/homarr:lateste103abadfb52
prosemirror-view@1.32.4
1.42.3
1
ghcr.io/wundergraph/cosmo/controlplane:0.133.149800ff775f3
prosemirror-view@1.38.1
1.42.3
1
quay.io/wraft/wraft-frontend:latestf1bbbd5e9bb9
prosemirror-view@1.41.0
1.42.3
1

syft 1.42.1 · advisories as of 7 Oct 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.