CVE-2026-105482
HighAdvisory
Published 23 Oct 2026In the index since 24 Oct 2026
- Severity
- High
- worst across findings
- CVSS
- 7.4
- base score, highest
- EPSS
- —
- probability of exploitation
- CISA KEV
- Not listed
- no confirmed exploitation
- Charts affected
- 83
- of 18,232 indexed, latest versions
- Container images
- 75
- deployed by those charts
- Fix available
- 1 of 2
- affected packages
The matching OSV records carry no description.
Carried by container images the latest versions of 83 of 18,232 indexed charts deploy, on 75 images.
| Affected package | Affected versions | Fixed in | Images |
|---|---|---|---|
| nodejsdeb | 4.2.6~dfsg-1ubuntu4.1, 7.10.1-2nodesource1~xenial1, 8.9.4-1nodesource1, 8.10.0~dfsg-2ubuntu0.4+48 more | no fix listed | 72 |
| nodejs-22apk | 22.23.2-r1 | 22.23.4-r0 | 3 |
Charts affected
83 by stars
| Chart | Latest | Affected images | Radar Score |
|---|---|---|---|
| code-servernicholaswildeVerified publisher | 1.1.1 | 1 of 1See more | 18,557 |
| difydify-helmVerified publisher | 0.39.0 | 1 of 11See more | 64,891 |
| hedgedocnicholaswildeVerified publisher | 1.1.0 | 1 of 1See more | 13,574 |
| openhabhelmforgeVerified publisher | 1.2.2 | 1 of 1See more | 3,987 |
| convertigoconvertigoOfficialVerified publisher | 8.4.6 | 1 of 5See more | 79,283 |
| browserless-chromesagikazarmarkVerified publisher | 0.0.5 | 1 of 1See more | 100,726 |
| pretixtechwolf12Verified publisher | 2026.8.0 | 1 of 3See more | 11,400 |
| agentareaagentareaVerified publisher | 0.0.29 | 1 of 17See more | 13,394 |
| dawarichcogitriVerified publisher | 2.10.0 | 1 of 3See more | 7,142 |
| iobrokereugen | 0.2.6 | 1 of 1See more | 80,348 |
| calibregeek-cookbookVerified publisher | 5.4.2 | 1 of 1See more | 25,150 |
| tdarrgeek-cookbookVerified publisher | 4.6.2 | 1 of 2See more | 103,481 |
| huehue | 1.0.3 | 1 of 3See more | 67,295 |
| difykubeblocksVerified publisher | 0.5.1 | 1 of 5See more | 23,769 |
| vaultwarden-kubernetes-secretsvaultwarden-kubernetes-secrets | 0.0.0-main | 1 of 2See more | 4,877 |
| youtubedl-materialyoutubedl-materialVerified publisher | 0.0.1 | 1 of 1See more | 10,910 |
| ansible-inspecansible-inspec | 0.2.17 | 1 of 2See more | 6,207 |
| arma-reforgerarma-reforger | 0.5.3 | 1 of 8See more | 31,223 |
| huebigdata-chartsVerified publisher | 1.0.4 | 1 of 2See more | 85,358 |
| node-appbryopsida | 0.5.1 | 1 of 2See more | 95,079 |
| otbrcharts-derwitt-devVerified publisher | 0.2.0 | 1 of 1See more | 63,840 |
| arbitrumchronicleVerified publisher | 0.3.5 | 1 of 1See more | 8,445 |
| ethereumcloudnativeapp | 1.0.0 | 1 of 3See more | 82,484 |
| webpagetest-agentcloudnativeapp | 0.2.0 | 1 of 1See more | 134,088 |
| galaxy-stablecloudve | 2.0.0 | 1 of 5See more | 160,787 |
| codehubcodehubVerified publisher | 6.2.18 | 1 of 5See more | 15,588 |
| deploy-elibrarydeploy-elibrary-helm | 0.1.0 | 1 of 1See more | 7,941 |
| deploy-elibrarydeploy-elibrary-oo | 0.1.0 | 1 of 1See more | 8,852 |
| apachedevops | 0.1.0 | 1 of 4See more | 120,611 |
| laraveldevops | 0.10.3 | 1 of 4See more | 119,596 |
| dgraphdevtron | 0.0.20 | 1 of 1See more | 13,798 |
| dgraphdevtron-labs | 0.0.20 | 1 of 1See more | 13,798 |
| difydify | 1.0.0 | 1 of 4See more | 46,852 |
| dominodomino-iisasVerified publisher | 0.3.1 | 1 of 3See more | 12,396 |
| arbitrumdysnixVerified publisher | 0.1.1 | 1 of 1See more | 10,807 |
| deploy-elibraryeducative-helm-bookapp | 0.5.0 | 1 of 1See more | 5,718 |
| assertoorethereum-helm-chartsVerified publisher | 1.2.0 | 1 of 1See more | 3,813 |
| scanservjsgabe565Verified publisher | 0.9.2 | 1 of 1See more | 15,654 |
| double-takegeek-cookbookVerified publisher | 2.3.2 | 1 of 1See more | 86,239 |
| haste-servergeek-cookbookVerified publisher | 3.4.2 | 1 of 1See more | 12,817 |
| mopidygeek-cookbookVerified publisher | 0.1.2 | 1 of 1See more | 69,783 |
| puppeteergeek-cookbookVerified publisher | 1.2.2 | 1 of 1See more | 16,778 |
| geomapfishgeomapfish | 0.8.0 | 1 of 3See more | 8,072 |
| 7dtdhelm-7dtd | 0.1.0 | 1 of 1See more | 64,154 |
| countlyhelmforgeVerified publisher | 1.2.10 | 1 of 3See more | 74,001 |
| dawarichhelmforgeVerified publisher | 1.0.8 | 1 of 4See more | 12,886 |
| middlewarehelmforgeVerified publisher | 1.2.11 | 1 of 4See more | 64,802 |
| ibm-microclimateibm-charts | 0.1.0 | 1 of 8See more | 114,272 |
| deconzjanip81-helm-chartsVerified publisher | 0.1.1 | 1 of 1See more | 13,492 |
| k8s-dev-podk8s-dev-pod | 0.3.1 | 1 of 1See more | 74,842 |
Container images carrying it
75 by charts deploying them
A fixed version is listed for 1 of the 2 affected packages.
| Container image | Digest | Package | Fixed in | Used by |
|---|---|---|---|---|
| dgraph/ | 3b55ea83fffe | nodejs | no fix listed | 3 |
| freikin/ | b533e6eac446 | nodejs | no fix listed | 3 |
| hookiesolutions/ | 0629694246ba | nodejs | no fix listed | 2 |
| tzahi12345/ | 2f943d584711 | nodejs | no fix listed | 2 |
| ghcr.io/ | 82d0b161161d | nodejs | no fix listed | 2 |
| ghcr.io/ | 5be52524664c | nodejs | no fix listed | 2 |
| agentarea/ | 066fa4a71695 | nodejs | no fix listed | 1 |
| baserow/ | df0c42eb67e8 | nodejs | no fix listed | 1 |
| browserless/ | c81ae5585b47 | nodejs | no fix listed | 1 |
| camptocamp/ | 3f916d5d2f62 | nodejs | no fix listed | 1 |
| countly/ | e3c238248f99 | nodejs | no fix listed | 1 |
| deconzcommunity/ | 062de2362641 | nodejs | no fix listed | 1 |
| deconzcommunity/ | 23c86008d73f | nodejs | no fix listed | 1 |
| ethereumex/ | a7603aa8df4c | nodejs | no fix listed | 1 |
| ethpandaops/ | 1efa2fba6711 | nodejs | no fix listed | 1 |
| galaxy/ | 0267bad550e6 | nodejs | no fix listed | 1 |
| gethue/ | 11b649636e68 | nodejs | no fix listed | 1 |
| gethue/ | 5702b2c37ff9 | nodejs | no fix listed | 1 |
| gethue/ | 7d5c1b9f8a79 | nodejs | no fix listed | 1 |
| haveagitgat/ | 1e3f9328327d | nodejs | no fix listed | 1 |
| haveagitgat/ | 3ff0913202dd | nodejs | no fix listed | 1 |
| ibmcom/ | e17bdccc5030 | nodejs | no fix listed | 1 |
| instructure/ | 34400d82f28f | nodejs | no fix listed | 1 |
| jaedb/ | 048cfbf58d57 | nodejs | no fix listed | 1 |
| jakowenko/ | b858bac9e32a | nodejs | no fix listed | 1 |
| jedi132000/ | dc2a81e92f23 | nodejs | no fix listed | 1 |
| josh5/ | 4d49c4816260 | nodejs | no fix listed | 1 |
| jupyterhub/ | 3974ba945e65 | nodejs | no fix listed | 1 |
| kitware/ | 6fab5f5ec6f2 | nodejs | no fix listed | 1 |
| langgenius/ | 066035f93856 | nodejs | no fix listed | 1 |
| langgenius/ | 52be6088dd84 | nodejs | no fix listed | 1 |
| langgenius/ | fca918260dd6 | nodejs | no fix listed | 1 |
| linuxserver/ | a847b5b2d860 | nodejs | no fix listed | 1 |
| linuxserver/ | b801bbcf6386 | nodejs | no fix listed | 1 |
| lsstsqre/ | b75bf8aaafa4 | nodejs | no fix listed | 1 |
| maksymhencha/ | 7f096a681192 | nodejs | no fix listed | 1 |
| mautic/ | eb8cc73d97e1 | nodejs | no fix listed | 1 |
| middlewareeng/ | 747d880812f1 | nodejs | no fix listed | 1 |
| muluder/ | 43b597a93da7 | nodejs | no fix listed | 1 |
| offchainlabs/ | 9f779fa84b7b | nodejs | no fix listed | 1 |
| offchainlabs/ | e95865866129 | nodejs | no fix listed | 1 |
| omecproject/ | 5715e5648aa0 | nodejs | no fix listed | 1 |
| openhab/ | fa50a6934dfd | nodejs | no fix listed | 1 |
| openthread/ | 08a8f8bfb5c5 | nodejs | no fix listed | 1 |
| openwhisk/ | c80dba0de3aa | nodejs | no fix listed | 1 |
| pretix/ | ec17c2f761f7 | nodejs | no fix listed | 1 |
| psorab/ | 53b68896c4ce | nodejs | no fix listed | 1 |
| sbs20/ | dad1fd6e9a98 | nodejs | no fix listed | 1 |
| sissbruecker/ | a222fb777e1f | nodejs | no fix listed | 1 |
| svtechnmaa/ | 1d71314424aa | nodejs | no fix listed | 1 |