CVE-2026-105482
HighAdvisory
Published 23 Oct 2026In the index since 24 Oct 2026
- Severity
- High
- worst across findings
- CVSS
- 7.4
- base score, highest
- EPSS
- —
- probability of exploitation
- CISA KEV
- Not listed
- no confirmed exploitation
- Charts affected
- 83
- of 18,232 indexed, latest versions
- Container images
- 75
- deployed by those charts
- Fix available
- 1 of 2
- affected packages
The matching OSV records carry no description.
Carried by container images the latest versions of 83 of 18,232 indexed charts deploy, on 75 images.
| Affected package | Affected versions | Fixed in | Images |
|---|---|---|---|
| nodejsdeb | 4.2.6~dfsg-1ubuntu4.1, 7.10.1-2nodesource1~xenial1, 8.9.4-1nodesource1, 8.10.0~dfsg-2ubuntu0.4+48 more | no fix listed | 72 |
| nodejs-22apk | 22.23.2-r1 | 22.23.4-r0 | 3 |
Charts affected
83 by stars
Container images carrying it
75 by charts deploying them
A fixed version is listed for 1 of the 2 affected packages.
| Container image | Digest | Package | Fixed in | Used by |
|---|---|---|---|---|
| dgraph/ | 3b55ea83fffe | nodejs | no fix listed | 3 |
| freikin/ | b533e6eac446 | nodejs | no fix listed | 3 |
| hookiesolutions/ | 0629694246ba | nodejs | no fix listed | 2 |
| tzahi12345/ | 2f943d584711 | nodejs | no fix listed | 2 |
| ghcr.io/ | 82d0b161161d | nodejs | no fix listed | 2 |
| ghcr.io/ | 5be52524664c | nodejs | no fix listed | 2 |
| agentarea/ | 066fa4a71695 | nodejs | no fix listed | 1 |
| baserow/ | df0c42eb67e8 | nodejs | no fix listed | 1 |
| browserless/ | c81ae5585b47 | nodejs | no fix listed | 1 |
| camptocamp/ | 3f916d5d2f62 | nodejs | no fix listed | 1 |
| countly/ | e3c238248f99 | nodejs | no fix listed | 1 |
| deconzcommunity/ | 062de2362641 | nodejs | no fix listed | 1 |
| deconzcommunity/ | 23c86008d73f | nodejs | no fix listed | 1 |
| ethereumex/ | a7603aa8df4c | nodejs | no fix listed | 1 |
| ethpandaops/ | 1efa2fba6711 | nodejs | no fix listed | 1 |
| galaxy/ | 0267bad550e6 | nodejs | no fix listed | 1 |
| gethue/ | 11b649636e68 | nodejs | no fix listed | 1 |
| gethue/ | 5702b2c37ff9 | nodejs | no fix listed | 1 |
| gethue/ | 7d5c1b9f8a79 | nodejs | no fix listed | 1 |
| haveagitgat/ | 1e3f9328327d | nodejs | no fix listed | 1 |
| haveagitgat/ | 3ff0913202dd | nodejs | no fix listed | 1 |
| ibmcom/ | e17bdccc5030 | nodejs | no fix listed | 1 |
| instructure/ | 34400d82f28f | nodejs | no fix listed | 1 |
| jaedb/ | 048cfbf58d57 | nodejs | no fix listed | 1 |
| jakowenko/ | b858bac9e32a | nodejs | no fix listed | 1 |
| jedi132000/ | dc2a81e92f23 | nodejs | no fix listed | 1 |
| josh5/ | 4d49c4816260 | nodejs | no fix listed | 1 |
| jupyterhub/ | 3974ba945e65 | nodejs | no fix listed | 1 |
| kitware/ | 6fab5f5ec6f2 | nodejs | no fix listed | 1 |
| langgenius/ | 066035f93856 | nodejs | no fix listed | 1 |
| langgenius/ | 52be6088dd84 | nodejs | no fix listed | 1 |
| langgenius/ | fca918260dd6 | nodejs | no fix listed | 1 |
| linuxserver/ | a847b5b2d860 | nodejs | no fix listed | 1 |
| linuxserver/ | b801bbcf6386 | nodejs | no fix listed | 1 |
| lsstsqre/ | b75bf8aaafa4 | nodejs | no fix listed | 1 |
| maksymhencha/ | 7f096a681192 | nodejs | no fix listed | 1 |
| mautic/ | eb8cc73d97e1 | nodejs | no fix listed | 1 |
| middlewareeng/ | 747d880812f1 | nodejs | no fix listed | 1 |
| muluder/ | 43b597a93da7 | nodejs | no fix listed | 1 |
| offchainlabs/ | 9f779fa84b7b | nodejs | no fix listed | 1 |
| offchainlabs/ | e95865866129 | nodejs | no fix listed | 1 |
| omecproject/ | 5715e5648aa0 | nodejs | no fix listed | 1 |
| openhab/ | fa50a6934dfd | nodejs | no fix listed | 1 |
| openthread/ | 08a8f8bfb5c5 | nodejs | no fix listed | 1 |
| openwhisk/ | c80dba0de3aa | nodejs | no fix listed | 1 |
| pretix/ | ec17c2f761f7 | nodejs | no fix listed | 1 |
| psorab/ | 53b68896c4ce | nodejs | no fix listed | 1 |
| sbs20/ | dad1fd6e9a98 | nodejs | no fix listed | 1 |
| sissbruecker/ | a222fb777e1f | nodejs | no fix listed | 1 |
| svtechnmaa/ | 1d71314424aa | nodejs | no fix listed | 1 |