StackRadar

CVE-2026-104872

Medium

Advisory

Published 5 Oct 2026In the index since 6 Oct 2026
Severity
Medium
worst across findings
CVSS
5.8
base score, highest
EPSS
0.002
14th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
46
of 18,026 indexed, latest versions
Container images
50
deployed by those charts
Fix available
8 of 8
affected packages

Multiple @opentelemetry/instrumentation-* packages expose database username via unconditional db.user span attribute

Carried by container images the latest versions of 46 of 18,026 indexed charts deploy, on 50 images.

Affected packageAffected versionsFixed inImages
@opentelemetry/instrumentation-pgnpm0.33.0, 0.41.0, 0.43.0, 0.44.0+18 more0.73.047
@opentelemetry/instrumentation-mysqlnpm0.32.0, 0.38.1, 0.40.0, 0.41.0+16 more0.67.044
@opentelemetry/instrumentation-mongoosenpm0.32.1, 0.38.1, 0.40.0, 0.42.0+16 more0.67.043
@opentelemetry/instrumentation-mysql2npm0.33.1, 0.38.1, 0.40.0, 0.41.0+16 more0.67.043
@opentelemetry/instrumentation-knexnpm0.31.1, 0.36.1, 0.38.0, 0.40.0+16 more0.65.042
@opentelemetry/instrumentation-tediousnpm0.5.1, 0.10.1, 0.12.0, 0.14.0+16 more0.40.039
@opentelemetry/instrumentation-cassandra-drivernpm0.32.1, 0.38.0, 0.40.0, 0.41.0+7 more0.66.022
@opentelemetry/instrumentation-oracledbnpm0.28.0, 0.41.0, 0.42.0, 0.43.0+2 more0.46.016
OSV records
GHSA-qqmp-wf37-98f9

Charts affected

46 by stars
ChartLatestAffected imagesRadar Score
supabasetokens-studioVerified publisher1.0.02 of 14See more

supabase tokens-studio 1.0.0

2 of the 14 container images this version deploys carry CVE-2026-104872.

Container imageDigestPackageFixed in
supabase/storage-api:v1.12.0f983fb50bd95
@opentelemetry/instrumentation-cassandra-driver@0.41.0
@opentelemetry/instrumentation-knex@0.40.0
@opentelemetry/instrumentation-mongoose@0.42.0
@opentelemetry/instrumentation-mysql@0.41.0
@opentelemetry/instrumentation-mysql2@0.41.0
@opentelemetry/instrumentation-pg@0.44.0
@opentelemetry/instrumentation-tedious@0.14.0
0.66.0
0.65.0
0.67.0
0.67.0
0.67.0
0.73.0
0.40.0
supabase/studio:20241021-9f9b08326d8070c55e9
@opentelemetry/instrumentation-mongoose@0.42.0
@opentelemetry/instrumentation-mysql@0.41.0
@opentelemetry/instrumentation-mysql2@0.41.0
@opentelemetry/instrumentation-pg@0.44.0
0.67.0
0.67.0
0.67.0
0.73.0

Open the chart page →

26,010
backstagerhdh-chartVerified publisher4.0.11 of 2See more

backstage rhdh-chart 4.0.1

1 of the 2 container images this version deploys carry CVE-2026-104872.

Container imageDigestPackageFixed in
quay.io/rhdh/rhdh-hub-rhel9:latest4f8c0f8a8ee0
@opentelemetry/instrumentation-cassandra-driver@0.65.0
@opentelemetry/instrumentation-knex@0.64.0
@opentelemetry/instrumentation-mongoose@0.66.0
@opentelemetry/instrumentation-mysql@0.66.0
@opentelemetry/instrumentation-mysql2@0.66.0
@opentelemetry/instrumentation-oracledb@0.45.0
@opentelemetry/instrumentation-pg@0.72.0
@opentelemetry/instrumentation-tedious@0.39.0
0.66.0
0.65.0
0.67.0
0.67.0
0.67.0
0.46.0
0.73.0
0.40.0

Open the chart page →

1,543
cosmocosmo-platformOfficialVerified publisher0.20.01 of 10See more

cosmo cosmo-platform 0.20.0

1 of the 10 container images this version deploys carry CVE-2026-104872.

Container imageDigestPackageFixed in
ghcr.io/wundergraph/cosmo/studio:0.111.0454f4384713a
@opentelemetry/instrumentation-knex@0.41.0
@opentelemetry/instrumentation-mongoose@0.42.0
@opentelemetry/instrumentation-mysql@0.41.0
@opentelemetry/instrumentation-mysql2@0.41.0
@opentelemetry/instrumentation-pg@0.44.0
@opentelemetry/instrumentation-tedious@0.15.0
0.65.0
0.67.0
0.67.0
0.67.0
0.73.0
0.40.0

Open the chart page →

34,276
wgerwgerOfficialVerified publisher2.0.01 of 7See more

wger wger 2.0.0

1 of the 7 container images this version deploys carry CVE-2026-104872.

Container imageDigestPackageFixed in
journeyapps/powersync-service:latest413a0c813e96
@opentelemetry/instrumentation-knex@0.48.0
@opentelemetry/instrumentation-mongoose@0.50.0
@opentelemetry/instrumentation-mysql@0.49.0
@opentelemetry/instrumentation-mysql2@0.49.0
@opentelemetry/instrumentation-pg@0.55.0
@opentelemetry/instrumentation-tedious@0.22.0
0.65.0
0.67.0
0.67.0
0.67.0
0.73.0
0.40.0

Open the chart page →

8,934
nocodbzekker6Verified publisher1.10.01 of 1See more

nocodb zekker6 1.10.0

1 of the 1 container images this version deploys carry CVE-2026-104872.

Container imageDigestPackageFixed in
nocodb/nocodb:0.301.5d9516f0bf546
@opentelemetry/instrumentation-knex@0.44.1
@opentelemetry/instrumentation-mongoose@0.46.1
@opentelemetry/instrumentation-mysql@0.45.1
@opentelemetry/instrumentation-mysql2@0.45.2
@opentelemetry/instrumentation-pg@0.51.1
@opentelemetry/instrumentation-tedious@0.18.1
0.65.0
0.67.0
0.67.0
0.67.0
0.73.0
0.40.0

Open the chart page →

5,210
growthbookgrowthbook5.1.01 of 2See more

growthbook growthbook 5.1.0

1 of the 2 container images this version deploys carry CVE-2026-104872.

Container imageDigestPackageFixed in
growthbook/growthbook:5.1.0c8a124f55dca
@opentelemetry/instrumentation-cassandra-driver@0.63.0
@opentelemetry/instrumentation-knex@0.62.0
@opentelemetry/instrumentation-mongoose@0.64.0
@opentelemetry/instrumentation-mysql@0.64.0
@opentelemetry/instrumentation-mysql2@0.59.0
@opentelemetry/instrumentation-oracledb@0.43.0
@opentelemetry/instrumentation-pg@0.65.0
@opentelemetry/instrumentation-tedious@0.32.0
0.66.0
0.65.0
0.67.0
0.67.0
0.67.0
0.46.0
0.73.0
0.40.0

Open the chart page →

926
immichimmich-helm0.3.01 of 4See more

immich immich-helm 0.3.0

1 of the 4 container images this version deploys carry CVE-2026-104872.

Container imageDigestPackageFixed in
ghcr.io/immich-app/immich-server:v2.3.1f8d06a32b1b2
@opentelemetry/instrumentation-pg@0.60.0
0.73.0

Open the chart page →

18,204
plane-enterprisemakeplaneOfficialVerified publisher3.10.23 of 13See more

plane-enterprise makeplane 3.10.2

3 of the 13 container images this version deploys carry CVE-2026-104872.

Container imageDigestPackageFixed in
makeplane/live-commercial:v3.3.0488a6684637c
@opentelemetry/instrumentation-cassandra-driver@0.62.0
@opentelemetry/instrumentation-knex@0.61.0
@opentelemetry/instrumentation-mongoose@0.63.0
@opentelemetry/instrumentation-mysql@0.63.0
@opentelemetry/instrumentation-mysql2@0.63.0
@opentelemetry/instrumentation-oracledb@0.42.0
@opentelemetry/instrumentation-pg@0.69.0
@opentelemetry/instrumentation-tedious@0.36.0
0.66.0
0.65.0
0.67.0
0.67.0
0.67.0
0.46.0
0.73.0
0.40.0
makeplane/silo-commercial:v3.3.027bf6bbf59bd
@opentelemetry/instrumentation-cassandra-driver@0.62.0
@opentelemetry/instrumentation-knex@0.61.0
@opentelemetry/instrumentation-mongoose@0.63.0
@opentelemetry/instrumentation-mysql@0.63.0
@opentelemetry/instrumentation-mysql2@0.63.0
@opentelemetry/instrumentation-oracledb@0.42.0
@opentelemetry/instrumentation-pg@0.69.0
@opentelemetry/instrumentation-tedious@0.36.0
0.66.0
0.65.0
0.67.0
0.67.0
0.67.0
0.46.0
0.73.0
0.40.0
makeplane/space-commercial:v3.3.03dba6a659fb9
@opentelemetry/instrumentation-cassandra-driver@0.62.0
@opentelemetry/instrumentation-knex@0.61.0
@opentelemetry/instrumentation-mongoose@0.63.0
@opentelemetry/instrumentation-mysql@0.63.0
@opentelemetry/instrumentation-mysql2@0.63.0
@opentelemetry/instrumentation-oracledb@0.42.0
@opentelemetry/instrumentation-pg@0.69.0
@opentelemetry/instrumentation-tedious@0.36.0
0.66.0
0.65.0
0.67.0
0.67.0
0.67.0
0.46.0
0.73.0
0.40.0

Open the chart page →

6,161
n8nn8n-helm2.25.71 of 1See more

n8n n8n-helm 2.25.7

1 of the 1 container images this version deploys carry CVE-2026-104872.

Container imageDigestPackageFixed in
n8nio/n8n:2.25.7761374d4eb84
@opentelemetry/instrumentation-knex@0.54.0
@opentelemetry/instrumentation-mongoose@0.56.0
@opentelemetry/instrumentation-mysql@0.56.0
@opentelemetry/instrumentation-mysql2@0.56.0
@opentelemetry/instrumentation-pg@0.62.0
@opentelemetry/instrumentation-tedious@0.29.0
0.65.0
0.67.0
0.67.0
0.67.0
0.73.0
0.40.0

Open the chart page →

3,835
growthbookone-acre-fundVerified publisher0.3.01 of 3See more

growthbook one-acre-fund 0.3.0

1 of the 3 container images this version deploys carry CVE-2026-104872.

Container imageDigestPackageFixed in
growthbook/growthbook:latest67b7cd7d12a1
@opentelemetry/instrumentation-cassandra-driver@0.63.0
@opentelemetry/instrumentation-knex@0.57.0
@opentelemetry/instrumentation-mongoose@0.64.0
@opentelemetry/instrumentation-mysql@0.59.0
@opentelemetry/instrumentation-mysql2@0.64.0
@opentelemetry/instrumentation-oracledb@0.43.0
@opentelemetry/instrumentation-pg@0.70.0
@opentelemetry/instrumentation-tedious@0.37.0
0.66.0
0.65.0
0.67.0
0.67.0
0.67.0
0.46.0
0.73.0
0.40.0

Open the chart page →

1,550
opentelemetry-demoopentelemetry-helmOfficialVerified publisher0.42.21 of 34See more

opentelemetry-demo opentelemetry-helm 0.42.2

1 of the 34 container images this version deploys carry CVE-2026-104872.

Container imageDigestPackageFixed in
ghcr.io/open-telemetry/demo:3.1.0-payment10d6bd20d8a0
@opentelemetry/instrumentation-cassandra-driver@0.65.0
@opentelemetry/instrumentation-knex@0.64.0
@opentelemetry/instrumentation-mongoose@0.66.0
@opentelemetry/instrumentation-mysql@0.66.0
@opentelemetry/instrumentation-mysql2@0.66.0
@opentelemetry/instrumentation-oracledb@0.45.0
@opentelemetry/instrumentation-pg@0.72.0
@opentelemetry/instrumentation-tedious@0.39.0
0.66.0
0.65.0
0.67.0
0.67.0
0.67.0
0.46.0
0.73.0
0.40.0

Open the chart page →

24,500
peertubepeertubeVerified publisher0.1.31 of 1See more

peertube peertube 0.1.3

1 of the 1 container images this version deploys carry CVE-2026-104872.

Container imageDigestPackageFixed in
chocobozzz/peertube:v8.1.5052712130691
@opentelemetry/instrumentation-pg@0.64.0
0.73.0

Open the chart page →

8,388
rocketadminrocketadminOfficialVerified publisher1.0.421 of 1See more

rocketadmin rocketadmin 1.0.42

1 of the 1 container images this version deploys carry CVE-2026-104872.

Container imageDigestPackageFixed in
rocketadmin/rocketadmin:1.17.710955ef540b9
@opentelemetry/instrumentation-knex@0.57.0
@opentelemetry/instrumentation-mongoose@0.59.0
@opentelemetry/instrumentation-mysql@0.59.0
@opentelemetry/instrumentation-mysql2@0.59.0
@opentelemetry/instrumentation-pg@0.65.0
@opentelemetry/instrumentation-tedious@0.32.0
0.65.0
0.67.0
0.67.0
0.67.0
0.73.0
0.40.0

Open the chart page →

6,430
speckle-serverspeckleVerified publisher2.26.31 of 4See more

speckle-server speckle 2.26.3

1 of the 4 container images this version deploys carry CVE-2026-104872.

Container imageDigestPackageFixed in
speckle/speckle-server:2.26.379f14a2bf931
@opentelemetry/instrumentation-knex@0.40.0
0.65.0

Open the chart page →

11,845
supabasesupabse0.8.02 of 11See more

supabase supabse 0.8.0

2 of the 11 container images this version deploys carry CVE-2026-104872.

Container imageDigestPackageFixed in
supabase/postgres-meta:v0.96.6a84cc713585e
@opentelemetry/instrumentation-knex@0.44.1
@opentelemetry/instrumentation-mongoose@0.46.1
@opentelemetry/instrumentation-mysql@0.45.1
@opentelemetry/instrumentation-mysql2@0.45.2
@opentelemetry/instrumentation-pg@0.51.1
@opentelemetry/instrumentation-tedious@0.18.1
0.65.0
0.67.0
0.67.0
0.67.0
0.73.0
0.40.0
supabase/storage-api:v1.60.4c8eb9858eafe
@opentelemetry/instrumentation-cassandra-driver@0.61.0
@opentelemetry/instrumentation-knex@0.60.0
@opentelemetry/instrumentation-mongoose@0.62.0
@opentelemetry/instrumentation-mysql@0.62.0
@opentelemetry/instrumentation-mysql2@0.62.0
@opentelemetry/instrumentation-oracledb@0.41.0
@opentelemetry/instrumentation-pg@0.68.0
@opentelemetry/instrumentation-tedious@0.35.0
0.66.0
0.65.0
0.67.0
0.67.0
0.67.0
0.46.0
0.73.0
0.40.0

Open the chart page →

21,495
tenuretenureVerified publisher1.0.61 of 2See more

tenure tenure 1.0.6

1 of the 2 container images this version deploys carry CVE-2026-104872.

Container imageDigestPackageFixed in
tenureai/tenure:v1.0.285f5b222df9a5
@opentelemetry/instrumentation-cassandra-driver@0.64.0
@opentelemetry/instrumentation-knex@0.63.0
@opentelemetry/instrumentation-mongoose@0.65.0
@opentelemetry/instrumentation-mysql@0.65.0
@opentelemetry/instrumentation-mysql2@0.65.0
@opentelemetry/instrumentation-oracledb@0.44.0
@opentelemetry/instrumentation-pg@0.71.0
@opentelemetry/instrumentation-tedious@0.38.0
0.66.0
0.65.0
0.67.0
0.67.0
0.67.0
0.46.0
0.73.0
0.40.0

Open the chart page →

3,223
u-storeunifieVerified publisher1.2.01 of 1See more

u-store unifie 1.2.0

1 of the 1 container images this version deploys carry CVE-2026-104872.

Container imageDigestPackageFixed in
public.ecr.aws/g4a0y2u8/unifie-store:staging-19925a2057fabc948
@opentelemetry/instrumentation-mongoose@0.42.0
@opentelemetry/instrumentation-mysql@0.41.0
@opentelemetry/instrumentation-mysql2@0.41.0
@opentelemetry/instrumentation-pg@0.44.0
0.67.0
0.67.0
0.67.0
0.73.0

Open the chart page →

16,602
trifidzazukoOfficialVerified publisher0.2.11 of 1See more

trifid zazuko 0.2.1

1 of the 1 container images this version deploys carry CVE-2026-104872.

Container imageDigestPackageFixed in
ghcr.io/zazuko/trifid:v6.0.159bda2bf65d4
@opentelemetry/instrumentation-cassandra-driver@0.64.0
@opentelemetry/instrumentation-knex@0.63.0
@opentelemetry/instrumentation-mongoose@0.65.0
@opentelemetry/instrumentation-mysql@0.65.0
@opentelemetry/instrumentation-mysql2@0.65.0
@opentelemetry/instrumentation-oracledb@0.44.0
@opentelemetry/instrumentation-pg@0.71.0
@opentelemetry/instrumentation-tedious@0.38.0
0.66.0
0.65.0
0.67.0
0.67.0
0.67.0
0.46.0
0.73.0
0.40.0

Open the chart page →

614
immichbear0.1.11 of 2See more

immich bear 0.1.1

1 of the 2 container images this version deploys carry CVE-2026-104872.

Container imageDigestPackageFixed in
ghcr.io/immich-app/immich-server:v3.1.0b434cb9287ee
@opentelemetry/instrumentation-pg@0.72.0
0.73.0

Open the chart page →

7,816
cloudpremcloudprem0.0.0-build.00306ba7288bb8d46dd8c6190af79ef5b6fbdbad1 of 6See more

cloudprem cloudprem 0.0.0-build.00306ba7288bb8d46dd8c6190af79ef5b6fbdbad

1 of the 6 container images this version deploys carry CVE-2026-104872.

Container imageDigestPackageFixed in
ghcr.io/formancehq/console:console-on.v1.1.1a4d32c2f68b3
@opentelemetry/instrumentation-cassandra-driver@0.42.0
@opentelemetry/instrumentation-knex@0.41.0
@opentelemetry/instrumentation-mongoose@0.43.0
@opentelemetry/instrumentation-mysql@0.42.0
@opentelemetry/instrumentation-mysql2@0.42.1
@opentelemetry/instrumentation-pg@0.47.1
@opentelemetry/instrumentation-tedious@0.15.0
0.66.0
0.65.0
0.67.0
0.67.0
0.67.0
0.73.0
0.40.0

Open the chart page →

22,248
cortezacorteza1.1.01 of 3See more

corteza corteza 1.1.0

1 of the 3 container images this version deploys carry CVE-2026-104872.

Container imageDigestPackageFixed in
cortezaproject/corteza-server-corredor:2024.9.44ea78dfe5364
@opentelemetry/instrumentation-knex@0.44.0
@opentelemetry/instrumentation-mongoose@0.46.0
@opentelemetry/instrumentation-mysql@0.45.0
@opentelemetry/instrumentation-mysql2@0.45.0
@opentelemetry/instrumentation-pg@0.51.0
@opentelemetry/instrumentation-tedious@0.18.0
0.65.0
0.67.0
0.67.0
0.67.0
0.73.0
0.40.0

Open the chart page →

9,838
azuriteemberstackVerified publisher1.0.221 of 1See more

azurite emberstack 1.0.22

1 of the 1 container images this version deploys carry CVE-2026-104872.

Container imageDigestPackageFixed in
mcr.microsoft.com/azure-storage/azurite:latest830430c1da1a
@opentelemetry/instrumentation-mysql@0.66.0
@opentelemetry/instrumentation-pg@0.72.0
0.67.0
0.73.0

Open the chart page →

680
opentelemetry-demogpg-dev0.33.82 of 27See more

opentelemetry-demo gpg-dev 0.33.8

2 of the 27 container images this version deploys carry CVE-2026-104872.

Container imageDigestPackageFixed in
ghcr.io/open-telemetry/demo:1.12.0-frontend8b348f00ca4c
@opentelemetry/instrumentation-cassandra-driver@0.40.0
@opentelemetry/instrumentation-knex@0.38.0
@opentelemetry/instrumentation-mongoose@0.40.0
@opentelemetry/instrumentation-mysql@0.40.0
@opentelemetry/instrumentation-mysql2@0.40.0
@opentelemetry/instrumentation-pg@0.43.0
@opentelemetry/instrumentation-tedious@0.12.0
0.66.0
0.65.0
0.67.0
0.67.0
0.67.0
0.73.0
0.40.0
ghcr.io/open-telemetry/demo:1.12.0-paymentserviceb0f13eef3abf
@opentelemetry/instrumentation-cassandra-driver@0.38.0
@opentelemetry/instrumentation-knex@0.36.1
@opentelemetry/instrumentation-mongoose@0.38.1
@opentelemetry/instrumentation-mysql@0.38.1
@opentelemetry/instrumentation-mysql2@0.38.1
@opentelemetry/instrumentation-pg@0.41.0
@opentelemetry/instrumentation-tedious@0.10.1
0.66.0
0.65.0
0.67.0
0.67.0
0.67.0
0.73.0
0.40.0

Open the chart page →

56,631
immichhelmforgeVerified publisher1.2.91 of 5See more

immich helmforge 1.2.9

1 of the 5 container images this version deploys carry CVE-2026-104872.

Container imageDigestPackageFixed in
ghcr.io/immich-app/immich-server:v3.1.0b434cb9287ee
@opentelemetry/instrumentation-pg@0.72.0
0.73.0

Open the chart page →

12,940
bluesky-pdsijmacd1.0.01 of 2See more

bluesky-pds ijmacd 1.0.0

1 of the 2 container images this version deploys carry CVE-2026-104872.

Container imageDigestPackageFixed in
ghcr.io/bluesky-social/pds:0.405e164855fa1
@opentelemetry/instrumentation-cassandra-driver@0.64.0
@opentelemetry/instrumentation-knex@0.63.0
@opentelemetry/instrumentation-mongoose@0.65.0
@opentelemetry/instrumentation-mysql@0.65.0
@opentelemetry/instrumentation-mysql2@0.65.0
@opentelemetry/instrumentation-oracledb@0.44.0
@opentelemetry/instrumentation-pg@0.71.0
@opentelemetry/instrumentation-tedious@0.38.0
0.66.0
0.65.0
0.67.0
0.67.0
0.67.0
0.46.0
0.73.0
0.40.0

Open the chart page →

10,261
nocodbinseefrlab0.2.01 of 1See more

nocodb inseefrlab 0.2.0

1 of the 1 container images this version deploys carry CVE-2026-104872.

Container imageDigestPackageFixed in
nocodb/nocodb:latest4ccfc5114506
@opentelemetry/instrumentation-knex@0.44.1
@opentelemetry/instrumentation-mongoose@0.46.1
@opentelemetry/instrumentation-mysql@0.45.1
@opentelemetry/instrumentation-mysql2@0.45.2
@opentelemetry/instrumentation-pg@0.51.1
@opentelemetry/instrumentation-tedious@0.18.1
0.65.0
0.67.0
0.67.0
0.67.0
0.73.0
0.40.0

Open the chart page →

873
ghostjanip81-helm-chartsVerified publisher0.1.21 of 1See more

ghost janip81-helm-charts 0.1.2

1 of the 1 container images this version deploys carry CVE-2026-104872.

Container imageDigestPackageFixed in
library/ghost:6.37.01ef2e532ca4d
@opentelemetry/instrumentation-knex@0.58.0
@opentelemetry/instrumentation-mongoose@0.60.0
@opentelemetry/instrumentation-mysql@0.60.0
@opentelemetry/instrumentation-mysql2@0.60.0
@opentelemetry/instrumentation-pg@0.66.0
@opentelemetry/instrumentation-tedious@0.33.0
0.65.0
0.67.0
0.67.0
0.67.0
0.73.0
0.40.0

Open the chart page →

4,551
n8njanip81-helm-chartsVerified publisher0.1.41 of 1See more

n8n janip81-helm-charts 0.1.4

1 of the 1 container images this version deploys carry CVE-2026-104872.

Container imageDigestPackageFixed in
n8nio/n8n:1.86.08b39ed5a2de9
@opentelemetry/instrumentation-knex@0.43.0
@opentelemetry/instrumentation-mongoose@0.45.0
@opentelemetry/instrumentation-mysql@0.44.0
@opentelemetry/instrumentation-mysql2@0.44.0
@opentelemetry/instrumentation-pg@0.49.0
@opentelemetry/instrumentation-tedious@0.17.0
0.65.0
0.67.0
0.67.0
0.67.0
0.73.0
0.40.0

Open the chart page →

7,063
ghostk8s-home-lab-repo4.1.01 of 1See more

ghost k8s-home-lab-repo 4.1.0

1 of the 1 container images this version deploys carry CVE-2026-104872.

Container imageDigestPackageFixed in
library/ghost:6.41.129773d6be407
@opentelemetry/instrumentation-knex@0.58.0
@opentelemetry/instrumentation-mongoose@0.60.0
@opentelemetry/instrumentation-mysql@0.60.0
@opentelemetry/instrumentation-mysql2@0.60.0
@opentelemetry/instrumentation-pg@0.66.0
@opentelemetry/instrumentation-tedious@0.33.0
0.65.0
0.67.0
0.67.0
0.67.0
0.73.0
0.40.0

Open the chart page →

4,062
ghostkubernetes-homelab-helm-chartsVerified publisher0.1.21 of 2See more

ghost kubernetes-homelab-helm-charts 0.1.2

1 of the 2 container images this version deploys carry CVE-2026-104872.

Container imageDigestPackageFixed in
library/ghost:6.39.0-alpine77196da4b0df
@opentelemetry/instrumentation-knex@0.58.0
@opentelemetry/instrumentation-mongoose@0.60.0
@opentelemetry/instrumentation-mysql@0.60.0
@opentelemetry/instrumentation-mysql2@0.60.0
@opentelemetry/instrumentation-pg@0.66.0
@opentelemetry/instrumentation-tedious@0.33.0
0.65.0
0.67.0
0.67.0
0.67.0
0.73.0
0.40.0

Open the chart page →

3,846
mcp-kubernetesmcp-helmVerified publisher0.2.71 of 1See more

mcp-kubernetes mcp-helm 0.2.7

1 of the 1 container images this version deploys carry CVE-2026-104872.

Container imageDigestPackageFixed in
mcp/kubernetes:latest5ffbf7f0a8aa
@opentelemetry/instrumentation-cassandra-driver@0.64.0
@opentelemetry/instrumentation-knex@0.63.0
@opentelemetry/instrumentation-mongoose@0.65.0
@opentelemetry/instrumentation-mysql@0.65.0
@opentelemetry/instrumentation-mysql2@0.65.0
@opentelemetry/instrumentation-oracledb@0.44.0
@opentelemetry/instrumentation-pg@0.71.0
@opentelemetry/instrumentation-tedious@0.38.0
0.66.0
0.65.0
0.67.0
0.67.0
0.67.0
0.46.0
0.73.0
0.40.0

Open the chart page →

6,466
middleware-odigosmiddleware-labsVerified publisher0.2.411 of 6See more

middleware-odigos middleware-labs 0.2.41

1 of the 6 container images this version deploys carry CVE-2026-104872.

Container imageDigestPackageFixed in
ghcr.io/middleware-labs/odigos-odiglet:middleware-test-0.0.103c8c835ecee
@opentelemetry/instrumentation-cassandra-driver@0.32.1
@opentelemetry/instrumentation-knex@0.31.1
@opentelemetry/instrumentation-mongoose@0.32.1
@opentelemetry/instrumentation-mysql@0.32.0
@opentelemetry/instrumentation-mysql2@0.33.1
@opentelemetry/instrumentation-pg@0.33.0
@opentelemetry/instrumentation-tedious@0.5.1
0.66.0
0.65.0
0.67.0
0.67.0
0.67.0
0.73.0
0.40.0

Open the chart page →

11,119
middleware-visionmiddleware-labsVerified publisher0.2.651 of 6See more

middleware-vision middleware-labs 0.2.65

1 of the 6 container images this version deploys carry CVE-2026-104872.

Container imageDigestPackageFixed in
ghcr.io/middleware-labs/vision-odiglet:middleware-test-0.0.3bce34c98668e
@opentelemetry/instrumentation-cassandra-driver@0.32.1
@opentelemetry/instrumentation-knex@0.31.1
@opentelemetry/instrumentation-mongoose@0.32.1
@opentelemetry/instrumentation-mysql@0.32.0
@opentelemetry/instrumentation-mysql2@0.33.1
@opentelemetry/instrumentation-pg@0.33.0
@opentelemetry/instrumentation-tedious@0.5.1
0.66.0
0.65.0
0.67.0
0.67.0
0.67.0
0.73.0
0.40.0

Open the chart page →

11,108
ghostmt1905028.25.11 of 3See more

ghost mt190502 8.25.1

1 of the 3 container images this version deploys carry CVE-2026-104872.

Container imageDigestPackageFixed in
library/ghost:6.25.12654b1e90413
@opentelemetry/instrumentation-knex@0.55.0
@opentelemetry/instrumentation-mongoose@0.57.0
@opentelemetry/instrumentation-mysql@0.57.0
@opentelemetry/instrumentation-mysql2@0.57.0
@opentelemetry/instrumentation-pg@0.63.0
@opentelemetry/instrumentation-tedious@0.30.0
0.65.0
0.67.0
0.67.0
0.67.0
0.73.0
0.40.0

Open the chart page →

6,165
console-webovrclk-20.1.11 of 1See more

console-web ovrclk-2 0.1.1

1 of the 1 container images this version deploys carry CVE-2026-104872.

Container imageDigestPackageFixed in
ghcr.io/akash-network/deploy-web:2.46.0ac540172c120
@opentelemetry/instrumentation-mongoose@0.42.0
@opentelemetry/instrumentation-mysql@0.41.0
@opentelemetry/instrumentation-mysql2@0.41.0
@opentelemetry/instrumentation-pg@0.44.0
0.67.0
0.67.0
0.67.0
0.73.0

Open the chart page →

3,154
provider-consoleovrclk-20.1.01 of 1See more

provider-console ovrclk-2 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-104872.

Container imageDigestPackageFixed in
ghcr.io/akash-network/provider-console:1.0.04d4c19a8d3ff
@opentelemetry/instrumentation-mongoose@0.42.0
@opentelemetry/instrumentation-mysql@0.41.0
@opentelemetry/instrumentation-mysql2@0.41.0
@opentelemetry/instrumentation-pg@0.44.0
0.67.0
0.67.0
0.67.0
0.73.0

Open the chart page →

2,646
rsshubsb-helm-charts0.3.01 of 1See more

rsshub sb-helm-charts 0.3.0

1 of the 1 container images this version deploys carry CVE-2026-104872.

Container imageDigestPackageFixed in
diygod/rsshub:2025-11-097a6312cac0d5
@opentelemetry/instrumentation-knex@0.49.0
@opentelemetry/instrumentation-mongoose@0.51.0
@opentelemetry/instrumentation-mysql@0.50.0
@opentelemetry/instrumentation-mysql2@0.51.0
@opentelemetry/instrumentation-pg@0.57.0
@opentelemetry/instrumentation-tedious@0.23.0
0.65.0
0.67.0
0.67.0
0.67.0
0.73.0
0.40.0

Open the chart page →

5,315
speckle-server-branch-testing5speckleVerified publisher2.21.3-branch.testing5.219631-2153bef1 of 5See more

speckle-server-branch-testing5 speckle 2.21.3-branch.testing5.219631-2153bef

1 of the 5 container images this version deploys carry CVE-2026-104872.

Container imageDigestPackageFixed in
speckle/speckle-server:2.21.3-branch.testing5.219631-2153bef8fd157733393
@opentelemetry/instrumentation-knex@0.40.0
0.65.0

Open the chart page →

17,437
speckle-server-branch-testing6speckleVerified publisher2.25.10-branch.testing6.645-b125c1e1 of 4See more

speckle-server-branch-testing6 speckle 2.25.10-branch.testing6.645-b125c1e

1 of the 4 container images this version deploys carry CVE-2026-104872.

Container imageDigestPackageFixed in
speckle/speckle-server:2.25.10-branch.testing6.645-b125c1e75cdf256067b
@opentelemetry/instrumentation-knex@0.40.0
0.65.0

Open the chart page →

12,574
retail-store-sample-checkout-chartstacksimplifyVerified publisher1.0.01 of 1See more

retail-store-sample-checkout-chart stacksimplify 1.0.0

1 of the 1 container images this version deploys carry CVE-2026-104872.

Container imageDigestPackageFixed in
public.ecr.aws/aws-containers/retail-store-sample-checkout:1.3.0687aa68dd490
@opentelemetry/instrumentation-cassandra-driver@0.48.0
@opentelemetry/instrumentation-knex@0.47.0
@opentelemetry/instrumentation-mongoose@0.49.0
@opentelemetry/instrumentation-mysql@0.48.0
@opentelemetry/instrumentation-mysql2@0.48.0
@opentelemetry/instrumentation-oracledb@0.28.0
@opentelemetry/instrumentation-pg@0.54.0
@opentelemetry/instrumentation-tedious@0.21.0
0.66.0
0.65.0
0.67.0
0.67.0
0.67.0
0.46.0
0.73.0
0.40.0

Open the chart page →

1,589
supabaseteochenglim0.1.21 of 13See more

supabase teochenglim 0.1.2

1 of the 13 container images this version deploys carry CVE-2026-104872.

Container imageDigestPackageFixed in
supabase/storage-api:latest5fea789899d4
@opentelemetry/instrumentation-cassandra-driver@0.65.0
@opentelemetry/instrumentation-knex@0.64.0
@opentelemetry/instrumentation-mongoose@0.66.0
@opentelemetry/instrumentation-mysql@0.66.0
@opentelemetry/instrumentation-mysql2@0.66.0
@opentelemetry/instrumentation-oracledb@0.45.0
@opentelemetry/instrumentation-pg@0.72.0
@opentelemetry/instrumentation-tedious@0.39.0
0.66.0
0.65.0
0.67.0
0.67.0
0.67.0
0.46.0
0.73.0
0.40.0

Open the chart page →

10,655
evolution-apivcnngrVerified publisher1.0.01 of 5See more

evolution-api vcnngr 1.0.0

1 of the 5 container images this version deploys carry CVE-2026-104872.

Container imageDigestPackageFixed in
evoapicloud/evolution-api:latest966625532d90
@opentelemetry/instrumentation-knex@0.49.0
@opentelemetry/instrumentation-mongoose@0.51.0
@opentelemetry/instrumentation-mysql@0.50.0
@opentelemetry/instrumentation-mysql2@0.51.0
@opentelemetry/instrumentation-pg@0.57.0
@opentelemetry/instrumentation-tedious@0.23.0
0.65.0
0.67.0
0.67.0
0.67.0
0.73.0
0.40.0

Open the chart page →

4,536
devportalveecode-platform-nextVerified publisher1.0.11 of 1See more

devportal veecode-platform-next 1.0.1

1 of the 1 container images this version deploys carry CVE-2026-104872.

Container imageDigestPackageFixed in
veecode/devportaldigest-pinned881f936ff4a3
@opentelemetry/instrumentation-cassandra-driver@0.65.0
@opentelemetry/instrumentation-knex@0.64.0
@opentelemetry/instrumentation-mongoose@0.66.0
@opentelemetry/instrumentation-mysql@0.66.0
@opentelemetry/instrumentation-mysql2@0.66.0
@opentelemetry/instrumentation-oracledb@0.45.0
@opentelemetry/instrumentation-pg@0.72.0
@opentelemetry/instrumentation-tedious@0.39.0
0.66.0
0.65.0
0.67.0
0.67.0
0.67.0
0.46.0
0.73.0
0.40.0

Open the chart page →

1,562
browserlessvictorlane0.2.01 of 1See more

browserless victorlane 0.2.0

1 of the 1 container images this version deploys carry CVE-2026-104872.

Container imageDigestPackageFixed in
ghcr.io/browserless/chromium:v2.43.0853e6f105b51
@opentelemetry/instrumentation-knex@0.44.1
@opentelemetry/instrumentation-mongoose@0.46.1
@opentelemetry/instrumentation-mysql@0.45.1
@opentelemetry/instrumentation-mysql2@0.45.2
@opentelemetry/instrumentation-pg@0.51.1
@opentelemetry/instrumentation-tedious@0.18.1
0.65.0
0.67.0
0.67.0
0.67.0
0.73.0
0.40.0

Open the chart page →

5,214
n8nvictorlane1.0.181 of 1See more

n8n victorlane 1.0.18

1 of the 1 container images this version deploys carry CVE-2026-104872.

Container imageDigestPackageFixed in
n8nio/n8n:1.115.1ed16e560c40e
@opentelemetry/instrumentation-knex@0.44.1
@opentelemetry/instrumentation-mongoose@0.46.1
@opentelemetry/instrumentation-mysql@0.45.1
@opentelemetry/instrumentation-mysql2@0.45.2
@opentelemetry/instrumentation-pg@0.51.1
@opentelemetry/instrumentation-tedious@0.18.1
0.65.0
0.67.0
0.67.0
0.67.0
0.73.0
0.40.0

Open the chart page →

7,503
kibanawiremindVerified publisher8.5.241 of 2See more

kibana wiremind 8.5.24

1 of the 2 container images this version deploys carry CVE-2026-104872.

Container imageDigestPackageFixed in
library/kibana:8.19.2235544f1ff28a
@opentelemetry/instrumentation-cassandra-driver@0.65.0
@opentelemetry/instrumentation-knex@0.64.0
@opentelemetry/instrumentation-mongoose@0.66.0
@opentelemetry/instrumentation-mysql@0.66.0
@opentelemetry/instrumentation-mysql2@0.66.0
@opentelemetry/instrumentation-oracledb@0.45.0
@opentelemetry/instrumentation-pg@0.72.0
@opentelemetry/instrumentation-tedious@0.39.0
0.66.0
0.65.0
0.67.0
0.67.0
0.67.0
0.46.0
0.73.0
0.40.0

Open the chart page →

1,729

Container images carrying it

50 by charts deploying them

A fixed version is listed for 8 of the 8 affected packages.

Container imageDigestPackageFixed inUsed by
ghcr.io/immich-app/immich-server:v3.1.0b434cb9287ee
@opentelemetry/instrumentation-pg@0.72.0
0.73.0
2
chocobozzz/peertube:v8.1.5052712130691
@opentelemetry/instrumentation-pg@0.64.0
0.73.0
1
cortezaproject/corteza-server-corredor:2024.9.44ea78dfe5364
@opentelemetry/instrumentation-knex@0.44.0
@opentelemetry/instrumentation-mongoose@0.46.0
@opentelemetry/instrumentation-mysql@0.45.0
@opentelemetry/instrumentation-mysql2@0.45.0
@opentelemetry/instrumentation-pg@0.51.0
@opentelemetry/instrumentation-tedious@0.18.0
0.65.0
0.67.0
0.67.0
0.67.0
0.73.0
0.40.0
1
diygod/rsshub:2025-11-097a6312cac0d5
@opentelemetry/instrumentation-knex@0.49.0
@opentelemetry/instrumentation-mongoose@0.51.0
@opentelemetry/instrumentation-mysql@0.50.0
@opentelemetry/instrumentation-mysql2@0.51.0
@opentelemetry/instrumentation-pg@0.57.0
@opentelemetry/instrumentation-tedious@0.23.0
0.65.0
0.67.0
0.67.0
0.67.0
0.73.0
0.40.0
1
evoapicloud/evolution-api:latest966625532d90
@opentelemetry/instrumentation-knex@0.49.0
@opentelemetry/instrumentation-mongoose@0.51.0
@opentelemetry/instrumentation-mysql@0.50.0
@opentelemetry/instrumentation-mysql2@0.51.0
@opentelemetry/instrumentation-pg@0.57.0
@opentelemetry/instrumentation-tedious@0.23.0
0.65.0
0.67.0
0.67.0
0.67.0
0.73.0
0.40.0
1
growthbook/growthbook:latest67b7cd7d12a1
@opentelemetry/instrumentation-cassandra-driver@0.63.0
@opentelemetry/instrumentation-knex@0.57.0
@opentelemetry/instrumentation-mongoose@0.64.0
@opentelemetry/instrumentation-mysql@0.59.0
@opentelemetry/instrumentation-mysql2@0.64.0
@opentelemetry/instrumentation-oracledb@0.43.0
@opentelemetry/instrumentation-pg@0.70.0
@opentelemetry/instrumentation-tedious@0.37.0
0.66.0
0.65.0
0.67.0
0.67.0
0.67.0
0.46.0
0.73.0
0.40.0
1
growthbook/growthbook:5.1.0c8a124f55dca
@opentelemetry/instrumentation-cassandra-driver@0.63.0
@opentelemetry/instrumentation-knex@0.62.0
@opentelemetry/instrumentation-mongoose@0.64.0
@opentelemetry/instrumentation-mysql@0.64.0
@opentelemetry/instrumentation-mysql2@0.59.0
@opentelemetry/instrumentation-oracledb@0.43.0
@opentelemetry/instrumentation-pg@0.65.0
@opentelemetry/instrumentation-tedious@0.32.0
0.66.0
0.65.0
0.67.0
0.67.0
0.67.0
0.46.0
0.73.0
0.40.0
1
journeyapps/powersync-service:latest413a0c813e96
@opentelemetry/instrumentation-knex@0.48.0
@opentelemetry/instrumentation-mongoose@0.50.0
@opentelemetry/instrumentation-mysql@0.49.0
@opentelemetry/instrumentation-mysql2@0.49.0
@opentelemetry/instrumentation-pg@0.55.0
@opentelemetry/instrumentation-tedious@0.22.0
0.65.0
0.67.0
0.67.0
0.67.0
0.73.0
0.40.0
1
library/ghost:6.37.01ef2e532ca4d
@opentelemetry/instrumentation-knex@0.58.0
@opentelemetry/instrumentation-mongoose@0.60.0
@opentelemetry/instrumentation-mysql@0.60.0
@opentelemetry/instrumentation-mysql2@0.60.0
@opentelemetry/instrumentation-pg@0.66.0
@opentelemetry/instrumentation-tedious@0.33.0
0.65.0
0.67.0
0.67.0
0.67.0
0.73.0
0.40.0
1
library/ghost:6.25.12654b1e90413
@opentelemetry/instrumentation-knex@0.55.0
@opentelemetry/instrumentation-mongoose@0.57.0
@opentelemetry/instrumentation-mysql@0.57.0
@opentelemetry/instrumentation-mysql2@0.57.0
@opentelemetry/instrumentation-pg@0.63.0
@opentelemetry/instrumentation-tedious@0.30.0
0.65.0
0.67.0
0.67.0
0.67.0
0.73.0
0.40.0
1
library/ghost:6.41.129773d6be407
@opentelemetry/instrumentation-knex@0.58.0
@opentelemetry/instrumentation-mongoose@0.60.0
@opentelemetry/instrumentation-mysql@0.60.0
@opentelemetry/instrumentation-mysql2@0.60.0
@opentelemetry/instrumentation-pg@0.66.0
@opentelemetry/instrumentation-tedious@0.33.0
0.65.0
0.67.0
0.67.0
0.67.0
0.73.0
0.40.0
1
library/ghost:6.39.0-alpine77196da4b0df
@opentelemetry/instrumentation-knex@0.58.0
@opentelemetry/instrumentation-mongoose@0.60.0
@opentelemetry/instrumentation-mysql@0.60.0
@opentelemetry/instrumentation-mysql2@0.60.0
@opentelemetry/instrumentation-pg@0.66.0
@opentelemetry/instrumentation-tedious@0.33.0
0.65.0
0.67.0
0.67.0
0.67.0
0.73.0
0.40.0
1
library/kibana:8.19.2235544f1ff28a
@opentelemetry/instrumentation-cassandra-driver@0.65.0
@opentelemetry/instrumentation-knex@0.64.0
@opentelemetry/instrumentation-mongoose@0.66.0
@opentelemetry/instrumentation-mysql@0.66.0
@opentelemetry/instrumentation-mysql2@0.66.0
@opentelemetry/instrumentation-oracledb@0.45.0
@opentelemetry/instrumentation-pg@0.72.0
@opentelemetry/instrumentation-tedious@0.39.0
0.66.0
0.65.0
0.67.0
0.67.0
0.67.0
0.46.0
0.73.0
0.40.0
1
makeplane/live-commercial:v3.3.0488a6684637c
@opentelemetry/instrumentation-cassandra-driver@0.62.0
@opentelemetry/instrumentation-knex@0.61.0
@opentelemetry/instrumentation-mongoose@0.63.0
@opentelemetry/instrumentation-mysql@0.63.0
@opentelemetry/instrumentation-mysql2@0.63.0
@opentelemetry/instrumentation-oracledb@0.42.0
@opentelemetry/instrumentation-pg@0.69.0
@opentelemetry/instrumentation-tedious@0.36.0
0.66.0
0.65.0
0.67.0
0.67.0
0.67.0
0.46.0
0.73.0
0.40.0
1
makeplane/silo-commercial:v3.3.027bf6bbf59bd
@opentelemetry/instrumentation-cassandra-driver@0.62.0
@opentelemetry/instrumentation-knex@0.61.0
@opentelemetry/instrumentation-mongoose@0.63.0
@opentelemetry/instrumentation-mysql@0.63.0
@opentelemetry/instrumentation-mysql2@0.63.0
@opentelemetry/instrumentation-oracledb@0.42.0
@opentelemetry/instrumentation-pg@0.69.0
@opentelemetry/instrumentation-tedious@0.36.0
0.66.0
0.65.0
0.67.0
0.67.0
0.67.0
0.46.0
0.73.0
0.40.0
1
makeplane/space-commercial:v3.3.03dba6a659fb9
@opentelemetry/instrumentation-cassandra-driver@0.62.0
@opentelemetry/instrumentation-knex@0.61.0
@opentelemetry/instrumentation-mongoose@0.63.0
@opentelemetry/instrumentation-mysql@0.63.0
@opentelemetry/instrumentation-mysql2@0.63.0
@opentelemetry/instrumentation-oracledb@0.42.0
@opentelemetry/instrumentation-pg@0.69.0
@opentelemetry/instrumentation-tedious@0.36.0
0.66.0
0.65.0
0.67.0
0.67.0
0.67.0
0.46.0
0.73.0
0.40.0
1
mcp/kubernetes:latest5ffbf7f0a8aa
@opentelemetry/instrumentation-cassandra-driver@0.64.0
@opentelemetry/instrumentation-knex@0.63.0
@opentelemetry/instrumentation-mongoose@0.65.0
@opentelemetry/instrumentation-mysql@0.65.0
@opentelemetry/instrumentation-mysql2@0.65.0
@opentelemetry/instrumentation-oracledb@0.44.0
@opentelemetry/instrumentation-pg@0.71.0
@opentelemetry/instrumentation-tedious@0.38.0
0.66.0
0.65.0
0.67.0
0.67.0
0.67.0
0.46.0
0.73.0
0.40.0
1
n8nio/n8n:2.25.7761374d4eb84
@opentelemetry/instrumentation-knex@0.54.0
@opentelemetry/instrumentation-mongoose@0.56.0
@opentelemetry/instrumentation-mysql@0.56.0
@opentelemetry/instrumentation-mysql2@0.56.0
@opentelemetry/instrumentation-pg@0.62.0
@opentelemetry/instrumentation-tedious@0.29.0
0.65.0
0.67.0
0.67.0
0.67.0
0.73.0
0.40.0
1
n8nio/n8n:1.86.08b39ed5a2de9
@opentelemetry/instrumentation-knex@0.43.0
@opentelemetry/instrumentation-mongoose@0.45.0
@opentelemetry/instrumentation-mysql@0.44.0
@opentelemetry/instrumentation-mysql2@0.44.0
@opentelemetry/instrumentation-pg@0.49.0
@opentelemetry/instrumentation-tedious@0.17.0
0.65.0
0.67.0
0.67.0
0.67.0
0.73.0
0.40.0
1
n8nio/n8n:1.115.1ed16e560c40e
@opentelemetry/instrumentation-knex@0.44.1
@opentelemetry/instrumentation-mongoose@0.46.1
@opentelemetry/instrumentation-mysql@0.45.1
@opentelemetry/instrumentation-mysql2@0.45.2
@opentelemetry/instrumentation-pg@0.51.1
@opentelemetry/instrumentation-tedious@0.18.1
0.65.0
0.67.0
0.67.0
0.67.0
0.73.0
0.40.0
1
nocodb/nocodb:latest4ccfc5114506
@opentelemetry/instrumentation-knex@0.44.1
@opentelemetry/instrumentation-mongoose@0.46.1
@opentelemetry/instrumentation-mysql@0.45.1
@opentelemetry/instrumentation-mysql2@0.45.2
@opentelemetry/instrumentation-pg@0.51.1
@opentelemetry/instrumentation-tedious@0.18.1
0.65.0
0.67.0
0.67.0
0.67.0
0.73.0
0.40.0
1
nocodb/nocodb:0.301.5d9516f0bf546
@opentelemetry/instrumentation-knex@0.44.1
@opentelemetry/instrumentation-mongoose@0.46.1
@opentelemetry/instrumentation-mysql@0.45.1
@opentelemetry/instrumentation-mysql2@0.45.2
@opentelemetry/instrumentation-pg@0.51.1
@opentelemetry/instrumentation-tedious@0.18.1
0.65.0
0.67.0
0.67.0
0.67.0
0.73.0
0.40.0
1
rocketadmin/rocketadmin:1.17.710955ef540b9
@opentelemetry/instrumentation-knex@0.57.0
@opentelemetry/instrumentation-mongoose@0.59.0
@opentelemetry/instrumentation-mysql@0.59.0
@opentelemetry/instrumentation-mysql2@0.59.0
@opentelemetry/instrumentation-pg@0.65.0
@opentelemetry/instrumentation-tedious@0.32.0
0.65.0
0.67.0
0.67.0
0.67.0
0.73.0
0.40.0
1
speckle/speckle-server:2.25.10-branch.testing6.645-b125c1e75cdf256067b
@opentelemetry/instrumentation-knex@0.40.0
0.65.0
1
speckle/speckle-server:2.26.379f14a2bf931
@opentelemetry/instrumentation-knex@0.40.0
0.65.0
1
speckle/speckle-server:2.21.3-branch.testing5.219631-2153bef8fd157733393
@opentelemetry/instrumentation-knex@0.40.0
0.65.0
1
supabase/postgres-meta:v0.96.6a84cc713585e
@opentelemetry/instrumentation-knex@0.44.1
@opentelemetry/instrumentation-mongoose@0.46.1
@opentelemetry/instrumentation-mysql@0.45.1
@opentelemetry/instrumentation-mysql2@0.45.2
@opentelemetry/instrumentation-pg@0.51.1
@opentelemetry/instrumentation-tedious@0.18.1
0.65.0
0.67.0
0.67.0
0.67.0
0.73.0
0.40.0
1
supabase/storage-api:latest5fea789899d4
@opentelemetry/instrumentation-cassandra-driver@0.65.0
@opentelemetry/instrumentation-knex@0.64.0
@opentelemetry/instrumentation-mongoose@0.66.0
@opentelemetry/instrumentation-mysql@0.66.0
@opentelemetry/instrumentation-mysql2@0.66.0
@opentelemetry/instrumentation-oracledb@0.45.0
@opentelemetry/instrumentation-pg@0.72.0
@opentelemetry/instrumentation-tedious@0.39.0
0.66.0
0.65.0
0.67.0
0.67.0
0.67.0
0.46.0
0.73.0
0.40.0
1
supabase/storage-api:v1.60.4c8eb9858eafe
@opentelemetry/instrumentation-cassandra-driver@0.61.0
@opentelemetry/instrumentation-knex@0.60.0
@opentelemetry/instrumentation-mongoose@0.62.0
@opentelemetry/instrumentation-mysql@0.62.0
@opentelemetry/instrumentation-mysql2@0.62.0
@opentelemetry/instrumentation-oracledb@0.41.0
@opentelemetry/instrumentation-pg@0.68.0
@opentelemetry/instrumentation-tedious@0.35.0
0.66.0
0.65.0
0.67.0
0.67.0
0.67.0
0.46.0
0.73.0
0.40.0
1
supabase/storage-api:v1.12.0f983fb50bd95
@opentelemetry/instrumentation-cassandra-driver@0.41.0
@opentelemetry/instrumentation-knex@0.40.0
@opentelemetry/instrumentation-mongoose@0.42.0
@opentelemetry/instrumentation-mysql@0.41.0
@opentelemetry/instrumentation-mysql2@0.41.0
@opentelemetry/instrumentation-pg@0.44.0
@opentelemetry/instrumentation-tedious@0.14.0
0.66.0
0.65.0
0.67.0
0.67.0
0.67.0
0.73.0
0.40.0
1
supabase/studio:20241021-9f9b08326d8070c55e9
@opentelemetry/instrumentation-mongoose@0.42.0
@opentelemetry/instrumentation-mysql@0.41.0
@opentelemetry/instrumentation-mysql2@0.41.0
@opentelemetry/instrumentation-pg@0.44.0
0.67.0
0.67.0
0.67.0
0.73.0
1
tenureai/tenure:v1.0.285f5b222df9a5
@opentelemetry/instrumentation-cassandra-driver@0.64.0
@opentelemetry/instrumentation-knex@0.63.0
@opentelemetry/instrumentation-mongoose@0.65.0
@opentelemetry/instrumentation-mysql@0.65.0
@opentelemetry/instrumentation-mysql2@0.65.0
@opentelemetry/instrumentation-oracledb@0.44.0
@opentelemetry/instrumentation-pg@0.71.0
@opentelemetry/instrumentation-tedious@0.38.0
0.66.0
0.65.0
0.67.0
0.67.0
0.67.0
0.46.0
0.73.0
0.40.0
1
veecode/devportal881f936ff4a3
@opentelemetry/instrumentation-cassandra-driver@0.65.0
@opentelemetry/instrumentation-knex@0.64.0
@opentelemetry/instrumentation-mongoose@0.66.0
@opentelemetry/instrumentation-mysql@0.66.0
@opentelemetry/instrumentation-mysql2@0.66.0
@opentelemetry/instrumentation-oracledb@0.45.0
@opentelemetry/instrumentation-pg@0.72.0
@opentelemetry/instrumentation-tedious@0.39.0
0.66.0
0.65.0
0.67.0
0.67.0
0.67.0
0.46.0
0.73.0
0.40.0
1
ghcr.io/akash-network/deploy-web:2.46.0ac540172c120
@opentelemetry/instrumentation-mongoose@0.42.0
@opentelemetry/instrumentation-mysql@0.41.0
@opentelemetry/instrumentation-mysql2@0.41.0
@opentelemetry/instrumentation-pg@0.44.0
0.67.0
0.67.0
0.67.0
0.73.0
1
ghcr.io/akash-network/provider-console:1.0.04d4c19a8d3ff
@opentelemetry/instrumentation-mongoose@0.42.0
@opentelemetry/instrumentation-mysql@0.41.0
@opentelemetry/instrumentation-mysql2@0.41.0
@opentelemetry/instrumentation-pg@0.44.0
0.67.0
0.67.0
0.67.0
0.73.0
1
ghcr.io/bluesky-social/pds:0.405e164855fa1
@opentelemetry/instrumentation-cassandra-driver@0.64.0
@opentelemetry/instrumentation-knex@0.63.0
@opentelemetry/instrumentation-mongoose@0.65.0
@opentelemetry/instrumentation-mysql@0.65.0
@opentelemetry/instrumentation-mysql2@0.65.0
@opentelemetry/instrumentation-oracledb@0.44.0
@opentelemetry/instrumentation-pg@0.71.0
@opentelemetry/instrumentation-tedious@0.38.0
0.66.0
0.65.0
0.67.0
0.67.0
0.67.0
0.46.0
0.73.0
0.40.0
1
ghcr.io/browserless/chromium:v2.43.0853e6f105b51
@opentelemetry/instrumentation-knex@0.44.1
@opentelemetry/instrumentation-mongoose@0.46.1
@opentelemetry/instrumentation-mysql@0.45.1
@opentelemetry/instrumentation-mysql2@0.45.2
@opentelemetry/instrumentation-pg@0.51.1
@opentelemetry/instrumentation-tedious@0.18.1
0.65.0
0.67.0
0.67.0
0.67.0
0.73.0
0.40.0
1
ghcr.io/formancehq/console:console-on.v1.1.1a4d32c2f68b3
@opentelemetry/instrumentation-cassandra-driver@0.42.0
@opentelemetry/instrumentation-knex@0.41.0
@opentelemetry/instrumentation-mongoose@0.43.0
@opentelemetry/instrumentation-mysql@0.42.0
@opentelemetry/instrumentation-mysql2@0.42.1
@opentelemetry/instrumentation-pg@0.47.1
@opentelemetry/instrumentation-tedious@0.15.0
0.66.0
0.65.0
0.67.0
0.67.0
0.67.0
0.73.0
0.40.0
1
ghcr.io/immich-app/immich-server:v2.3.1f8d06a32b1b2
@opentelemetry/instrumentation-pg@0.60.0
0.73.0
1
ghcr.io/middleware-labs/odigos-odiglet:middleware-test-0.0.103c8c835ecee
@opentelemetry/instrumentation-cassandra-driver@0.32.1
@opentelemetry/instrumentation-knex@0.31.1
@opentelemetry/instrumentation-mongoose@0.32.1
@opentelemetry/instrumentation-mysql@0.32.0
@opentelemetry/instrumentation-mysql2@0.33.1
@opentelemetry/instrumentation-pg@0.33.0
@opentelemetry/instrumentation-tedious@0.5.1
0.66.0
0.65.0
0.67.0
0.67.0
0.67.0
0.73.0
0.40.0
1
ghcr.io/middleware-labs/vision-odiglet:middleware-test-0.0.3bce34c98668e
@opentelemetry/instrumentation-cassandra-driver@0.32.1
@opentelemetry/instrumentation-knex@0.31.1
@opentelemetry/instrumentation-mongoose@0.32.1
@opentelemetry/instrumentation-mysql@0.32.0
@opentelemetry/instrumentation-mysql2@0.33.1
@opentelemetry/instrumentation-pg@0.33.0
@opentelemetry/instrumentation-tedious@0.5.1
0.66.0
0.65.0
0.67.0
0.67.0
0.67.0
0.73.0
0.40.0
1
ghcr.io/open-telemetry/demo:3.1.0-payment10d6bd20d8a0
@opentelemetry/instrumentation-cassandra-driver@0.65.0
@opentelemetry/instrumentation-knex@0.64.0
@opentelemetry/instrumentation-mongoose@0.66.0
@opentelemetry/instrumentation-mysql@0.66.0
@opentelemetry/instrumentation-mysql2@0.66.0
@opentelemetry/instrumentation-oracledb@0.45.0
@opentelemetry/instrumentation-pg@0.72.0
@opentelemetry/instrumentation-tedious@0.39.0
0.66.0
0.65.0
0.67.0
0.67.0
0.67.0
0.46.0
0.73.0
0.40.0
1
ghcr.io/open-telemetry/demo:1.12.0-frontend8b348f00ca4c
@opentelemetry/instrumentation-cassandra-driver@0.40.0
@opentelemetry/instrumentation-knex@0.38.0
@opentelemetry/instrumentation-mongoose@0.40.0
@opentelemetry/instrumentation-mysql@0.40.0
@opentelemetry/instrumentation-mysql2@0.40.0
@opentelemetry/instrumentation-pg@0.43.0
@opentelemetry/instrumentation-tedious@0.12.0
0.66.0
0.65.0
0.67.0
0.67.0
0.67.0
0.73.0
0.40.0
1
ghcr.io/open-telemetry/demo:1.12.0-paymentserviceb0f13eef3abf
@opentelemetry/instrumentation-cassandra-driver@0.38.0
@opentelemetry/instrumentation-knex@0.36.1
@opentelemetry/instrumentation-mongoose@0.38.1
@opentelemetry/instrumentation-mysql@0.38.1
@opentelemetry/instrumentation-mysql2@0.38.1
@opentelemetry/instrumentation-pg@0.41.0
@opentelemetry/instrumentation-tedious@0.10.1
0.66.0
0.65.0
0.67.0
0.67.0
0.67.0
0.73.0
0.40.0
1
ghcr.io/wundergraph/cosmo/studio:0.111.0454f4384713a
@opentelemetry/instrumentation-knex@0.41.0
@opentelemetry/instrumentation-mongoose@0.42.0
@opentelemetry/instrumentation-mysql@0.41.0
@opentelemetry/instrumentation-mysql2@0.41.0
@opentelemetry/instrumentation-pg@0.44.0
@opentelemetry/instrumentation-tedious@0.15.0
0.65.0
0.67.0
0.67.0
0.67.0
0.73.0
0.40.0
1
ghcr.io/zazuko/trifid:v6.0.159bda2bf65d4
@opentelemetry/instrumentation-cassandra-driver@0.64.0
@opentelemetry/instrumentation-knex@0.63.0
@opentelemetry/instrumentation-mongoose@0.65.0
@opentelemetry/instrumentation-mysql@0.65.0
@opentelemetry/instrumentation-mysql2@0.65.0
@opentelemetry/instrumentation-oracledb@0.44.0
@opentelemetry/instrumentation-pg@0.71.0
@opentelemetry/instrumentation-tedious@0.38.0
0.66.0
0.65.0
0.67.0
0.67.0
0.67.0
0.46.0
0.73.0
0.40.0
1
mcr.microsoft.com/azure-storage/azurite:latest830430c1da1a
@opentelemetry/instrumentation-mysql@0.66.0
@opentelemetry/instrumentation-pg@0.72.0
0.67.0
0.73.0
1
public.ecr.aws/aws-containers/retail-store-sample-checkout:1.3.0687aa68dd490
@opentelemetry/instrumentation-cassandra-driver@0.48.0
@opentelemetry/instrumentation-knex@0.47.0
@opentelemetry/instrumentation-mongoose@0.49.0
@opentelemetry/instrumentation-mysql@0.48.0
@opentelemetry/instrumentation-mysql2@0.48.0
@opentelemetry/instrumentation-oracledb@0.28.0
@opentelemetry/instrumentation-pg@0.54.0
@opentelemetry/instrumentation-tedious@0.21.0
0.66.0
0.65.0
0.67.0
0.67.0
0.67.0
0.46.0
0.73.0
0.40.0
1
public.ecr.aws/g4a0y2u8/unifie-store:staging-19925a2057fabc948
@opentelemetry/instrumentation-mongoose@0.42.0
@opentelemetry/instrumentation-mysql@0.41.0
@opentelemetry/instrumentation-mysql2@0.41.0
@opentelemetry/instrumentation-pg@0.44.0
0.67.0
0.67.0
0.67.0
0.73.0
1
quay.io/rhdh/rhdh-hub-rhel9:latest4f8c0f8a8ee0
@opentelemetry/instrumentation-cassandra-driver@0.65.0
@opentelemetry/instrumentation-knex@0.64.0
@opentelemetry/instrumentation-mongoose@0.66.0
@opentelemetry/instrumentation-mysql@0.66.0
@opentelemetry/instrumentation-mysql2@0.66.0
@opentelemetry/instrumentation-oracledb@0.45.0
@opentelemetry/instrumentation-pg@0.72.0
@opentelemetry/instrumentation-tedious@0.39.0
0.66.0
0.65.0
0.67.0
0.67.0
0.67.0
0.46.0
0.73.0
0.40.0
1

syft 1.42.1 · advisories as of 6 Oct 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.