StackRadar

CVE-2026-106072

Medium

Advisory

Published 23 Oct 2026In the index since 24 Oct 2026
Severity
Medium
worst across findings
CVSS
6.7
base score, highest
EPSS
—
probability of exploitation
CISA KEV
Not listed
no confirmed exploitation
Charts affected
83
of 18,232 indexed, latest versions
Container images
75
deployed by those charts
Fix available
1 of 2
affected packages

The matching OSV records carry no description.

Carried by container images the latest versions of 83 of 18,232 indexed charts deploy, on 75 images.

Affected packageAffected versionsFixed inImages
nodejsdeb4.2.6~dfsg-1ubuntu4.1, 7.10.1-2nodesource1~xenial1, 8.9.4-1nodesource1, 8.10.0~dfsg-2ubuntu0.4+48 moreno fix listed72
nodejs-22apk22.23.2-r122.23.4-r03
OSV records
CGA-4xmw-vcc9-m3whDEBIAN-CVE-2026-106072UBUNTU-CVE-2026-106072
Also known as
CGA-xx5g-8f9p-53wf

Charts affected

83 by stars
ChartLatestAffected imagesRadar Score
code-servernicholaswildeVerified publisher1.1.11 of 1See more

code-server nicholaswilde 1.1.1

1 of the 1 container images this version deploys carry CVE-2026-106072.

Container imageDigestPackageFixed in
ghcr.io/linuxserver/code-server:version-v3.11.1a385ba5cb161
nodejs@14.17.6-1nodesource1
no fix listed

Open the chart page →

18,557
difydify-helmVerified publisher0.39.01 of 11See more

dify dify-helm 0.39.0

1 of the 11 container images this version deploys carry CVE-2026-106072.

Container imageDigestPackageFixed in
langgenius/dify-api:1.17.052be6088dd84
nodejs@22.21.0-1nodesource1
no fix listed

Open the chart page →

64,891
hedgedocnicholaswildeVerified publisher1.1.01 of 1See more

hedgedoc nicholaswilde 1.1.0

1 of the 1 container images this version deploys carry CVE-2026-106072.

Container imageDigestPackageFixed in
ghcr.io/linuxserver/hedgedoc:version-1.9.0792a12ee976a
nodejs@12.22.7-1nodesource1
no fix listed

Open the chart page →

13,574
openhabhelmforgeVerified publisher1.2.21 of 1See more

openhab helmforge 1.2.2

1 of the 1 container images this version deploys carry CVE-2026-106072.

Container imageDigestPackageFixed in
openhab/openhab:5.2.3fa50a6934dfd
nodejs@20.19.2+dfsg-1+deb13u3
no fix listed

Open the chart page →

3,987
convertigoconvertigoOfficialVerified publisher8.4.61 of 5See more

convertigo convertigo 8.4.6

1 of the 5 container images this version deploys carry CVE-2026-106072.

Container imageDigestPackageFixed in
baserow/baserow:1.30.1df0c42eb67e8
nodejs@21.7.3-1nodesource1
no fix listed

Open the chart page →

79,283
browserless-chromesagikazarmarkVerified publisher0.0.51 of 1See more

browserless-chrome sagikazarmark 0.0.5

1 of the 1 container images this version deploys carry CVE-2026-106072.

Container imageDigestPackageFixed in
browserless/chrome:1.48.0-chrome-stablec81ae5585b47
nodejs@16.7.0-deb-1nodesource1
no fix listed

Open the chart page →

100,726
pretixtechwolf12Verified publisher2026.8.01 of 3See more

pretix techwolf12 2026.8.0

1 of the 3 container images this version deploys carry CVE-2026-106072.

Container imageDigestPackageFixed in
pretix/standalone:2026.8.0ec17c2f761f7
nodejs@22.23.3-1nodesource1
no fix listed

Open the chart page →

11,400
agentareaagentareaVerified publisher0.0.291 of 17See more

agentarea agentarea 0.0.29

1 of the 17 container images this version deploys carry CVE-2026-106072.

Container imageDigestPackageFixed in
agentarea/agentarea-mcp-runner:0.1.1066fa4a71695
nodejs@22.23.3-1nodesource1
no fix listed

Open the chart page →

13,394
dawarichcogitriVerified publisher2.10.01 of 3See more

dawarich cogitri 2.10.0

1 of the 3 container images this version deploys carry CVE-2026-106072.

Container imageDigestPackageFixed in
freikin/dawarich:1.16.0b533e6eac446
nodejs@20.19.2+dfsg-1+deb13u3
no fix listed

Open the chart page →

7,142
iobrokereugen0.2.61 of 1See more

iobroker eugen 0.2.6

1 of the 1 container images this version deploys carry CVE-2026-106072.

Container imageDigestPackageFixed in
ghcr.io/buanet/iobroker:v9.1.2ca7dc7362968
nodejs@18.20.4-1nodesource1
no fix listed

Open the chart page →

80,348
calibregeek-cookbookVerified publisher5.4.21 of 1See more

calibre geek-cookbook 5.4.2

1 of the 1 container images this version deploys carry CVE-2026-106072.

Container imageDigestPackageFixed in
linuxserver/calibre:version-v5.21.0a847b5b2d860
nodejs@14.17.0-1nodesource1
no fix listed

Open the chart page →

25,150
tdarrgeek-cookbookVerified publisher4.6.21 of 2See more

tdarr geek-cookbook 4.6.2

1 of the 2 container images this version deploys carry CVE-2026-106072.

Container imageDigestPackageFixed in
haveagitgat/tdarr_node:2.00.101e3f9328327d
nodejs@14.15.3-deb-1nodesource1
no fix listed

Open the chart page →

103,481
huehue1.0.31 of 3See more

hue hue 1.0.3

1 of the 3 container images this version deploys carry CVE-2026-106072.

Container imageDigestPackageFixed in
gethue/hue:latest7d5c1b9f8a79
nodejs@24.13.1-1nodesource1
no fix listed

Open the chart page →

67,295
difykubeblocksVerified publisher0.5.11 of 5See more

dify kubeblocks 0.5.1

1 of the 5 container images this version deploys carry CVE-2026-106072.

Container imageDigestPackageFixed in
langgenius/dify-api:0.6.11fca918260dd6
nodejs@18.19.0+dfsg-6~deb12u1
no fix listed

Open the chart page →

23,769
vaultwarden-kubernetes-secretsvaultwarden-kubernetes-secrets0.0.0-main1 of 2See more

vaultwarden-kubernetes-secrets vaultwarden-kubernetes-secrets 0.0.0-main

1 of the 2 container images this version deploys carry CVE-2026-106072.

Container imageDigestPackageFixed in
ghcr.io/antoniolago/vaultwarden-kubernetes-secrets:0.0.0-main13e267ad7d94
nodejs@20.20.0-1nodesource1
no fix listed

Open the chart page →

4,877
youtubedl-materialyoutubedl-materialVerified publisher0.0.11 of 1See more

youtubedl-material youtubedl-material 0.0.1

1 of the 1 container images this version deploys carry CVE-2026-106072.

Container imageDigestPackageFixed in
tzahi12345/youtubedl-material:latest2f943d584711
nodejs@16.14.2-deb-1nodesource1
no fix listed

Open the chart page →

10,910
ansible-inspecansible-inspec0.2.171 of 2See more

ansible-inspec ansible-inspec 0.2.17

1 of the 2 container images this version deploys carry CVE-2026-106072.

Container imageDigestPackageFixed in
ghcr.io/htunn/ansible-inspec:0.2.12cd25a5cc3f1b
nodejs@20.20.0-1nodesource1
no fix listed

Open the chart page →

6,207
arma-reforgerarma-reforger0.5.31 of 8See more

arma-reforger arma-reforger 0.5.3

1 of the 8 container images this version deploys carry CVE-2026-106072.

Container imageDigestPackageFixed in
ghcr.io/brittonhayes/arma-reforger:latest6fde1edc0983
nodejs@16.19.1-deb-1nodesource1
no fix listed

Open the chart page →

31,223
huebigdata-chartsVerified publisher1.0.41 of 2See more

hue bigdata-charts 1.0.4

1 of the 2 container images this version deploys carry CVE-2026-106072.

Container imageDigestPackageFixed in
gethue/hue:4.10.05702b2c37ff9
nodejs@14.17.0-1nodesource1
no fix listed

Open the chart page →

85,358
node-appbryopsida0.5.11 of 2See more

node-app bryopsida 0.5.1

1 of the 2 container images this version deploys carry CVE-2026-106072.

Container imageDigestPackageFixed in
ghcr.io/bryopsida/k8s-dev-pod:main82d0b161161d
nodejs@22.16.0-1nodesource1
no fix listed

Open the chart page →

95,079
otbrcharts-derwitt-devVerified publisher0.2.01 of 1See more

otbr charts-derwitt-dev 0.2.0

1 of the 1 container images this version deploys carry CVE-2026-106072.

Container imageDigestPackageFixed in
openthread/otbr:latest08a8f8bfb5c5
nodejs@8.10.0~dfsg-2ubuntu0.4
no fix listed

Open the chart page →

63,840
arbitrumchronicleVerified publisher0.3.51 of 1See more

arbitrum chronicle 0.3.5

1 of the 1 container images this version deploys carry CVE-2026-106072.

Container imageDigestPackageFixed in
offchainlabs/nitro-node:v3.7.6-c0fe95e9f779fa84b7b
nodejs@18.20.4+dfsg-1~deb12u1
no fix listed

Open the chart page →

8,445
ethereumcloudnativeapp1.0.01 of 3See more

ethereum cloudnativeapp 1.0.0

1 of the 3 container images this version deploys carry CVE-2026-106072.

Container imageDigestPackageFixed in
ethereumex/eth-stats-dashboard:v0.0.1a7603aa8df4c
nodejs@4.2.6~dfsg-1ubuntu4.1
no fix listed

Open the chart page →

82,484
webpagetest-agentcloudnativeapp0.2.01 of 1See more

webpagetest-agent cloudnativeapp 0.2.0

1 of the 1 container images this version deploys carry CVE-2026-106072.

Container imageDigestPackageFixed in
timothyclarke/wptagent:2018-01-2322c41e5ca7e2
nodejs@7.10.1-2nodesource1~xenial1
no fix listed

Open the chart page →

134,088
galaxy-stablecloudve2.0.01 of 5See more

galaxy-stable cloudve 2.0.0

1 of the 5 container images this version deploys carry CVE-2026-106072.

Container imageDigestPackageFixed in
galaxy/galaxy-init:v18.010267bad550e6
nodejs@9.11.1-1nodesource1
no fix listed

Open the chart page →

160,787
codehubcodehubVerified publisher6.2.181 of 5See more

codehub codehub 6.2.18

1 of the 5 container images this version deploys carry CVE-2026-106072.

Container imageDigestPackageFixed in
jupyterhub/jupyterhub:5.4.63974ba945e65
nodejs@18.19.1+dfsg-6ubuntu5
no fix listed

Open the chart page →

15,588
deploy-elibrarydeploy-elibrary-helm0.1.01 of 1See more

deploy-elibrary deploy-elibrary-helm 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-106072.

Container imageDigestPackageFixed in
psorab/elibrary:latest53b68896c4ce
nodejs@16.20.0-deb-1nodesource1
no fix listed

Open the chart page →

7,941
deploy-elibrarydeploy-elibrary-oo0.1.01 of 1See more

deploy-elibrary deploy-elibrary-oo 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-106072.

Container imageDigestPackageFixed in
jedi132000/nextapp:latestdc2a81e92f23
nodejs@16.18.0-deb-1nodesource1
no fix listed

Open the chart page →

8,852
apachedevops0.1.01 of 4See more

apache devops 0.1.0

1 of the 4 container images this version deploys carry CVE-2026-106072.

Container imageDigestPackageFixed in
ghcr.io/codingducksrl/laravel:8.15be52524664c
nodejs@16.18.0-deb-1nodesource1
no fix listed

Open the chart page →

120,611
laraveldevops0.10.31 of 4See more

laravel devops 0.10.3

1 of the 4 container images this version deploys carry CVE-2026-106072.

Container imageDigestPackageFixed in
ghcr.io/codingducksrl/laravel:8.15be52524664c
nodejs@16.18.0-deb-1nodesource1
no fix listed

Open the chart page →

119,596
dgraphdevtron0.0.201 of 1See more

dgraph devtron 0.0.20

1 of the 1 container images this version deploys carry CVE-2026-106072.

Container imageDigestPackageFixed in
dgraph/dgraph:v21.12.03b55ea83fffe
nodejs@14.17.5-deb-1nodesource1
no fix listed

Open the chart page →

13,798
dgraphdevtron-labs0.0.201 of 1See more

dgraph devtron-labs 0.0.20

1 of the 1 container images this version deploys carry CVE-2026-106072.

Container imageDigestPackageFixed in
dgraph/dgraph:v21.12.03b55ea83fffe
nodejs@14.17.5-deb-1nodesource1
no fix listed

Open the chart page →

13,798
difydify1.0.01 of 4See more

dify dify 1.0.0

1 of the 4 container images this version deploys carry CVE-2026-106072.

Container imageDigestPackageFixed in
langgenius/dify-api:1.0.0066035f93856
nodejs@18.19.0+dfsg-6~deb12u2
no fix listed

Open the chart page →

46,852
dominodomino-iisasVerified publisher0.3.11 of 3See more

domino domino-iisas 0.3.1

1 of the 3 container images this version deploys carry CVE-2026-106072.

Container imageDigestPackageFixed in
ghcr.io/iisas/domino-frontend:k8s8e53861be292
nodejs@18.20.4+dfsg-1~deb12u1
no fix listed

Open the chart page →

12,396
arbitrumdysnixVerified publisher0.1.11 of 1See more

arbitrum dysnix 0.1.1

1 of the 1 container images this version deploys carry CVE-2026-106072.

Container imageDigestPackageFixed in
offchainlabs/nitro-node:v3.1.0-7d1d84ce95865866129
nodejs@18.19.0+dfsg-6~deb12u2
no fix listed

Open the chart page →

10,807
deploy-elibraryeducative-helm-bookapp0.5.01 of 1See more

deploy-elibrary educative-helm-bookapp 0.5.0

1 of the 1 container images this version deploys carry CVE-2026-106072.

Container imageDigestPackageFixed in
maksymhencha/educative-helm-bookapp:0.0.27f096a681192
nodejs@16.20.2-1nodesource1
no fix listed

Open the chart page →

5,718
assertoorethereum-helm-chartsVerified publisher1.2.01 of 1See more

assertoor ethereum-helm-charts 1.2.0

1 of the 1 container images this version deploys carry CVE-2026-106072.

Container imageDigestPackageFixed in
ethpandaops/assertoor:latest1efa2fba6711
nodejs@24.18.0-1nodesource1
no fix listed

Open the chart page →

3,813
scanservjsgabe565Verified publisher0.9.21 of 1See more

scanservjs gabe565 0.9.2

1 of the 1 container images this version deploys carry CVE-2026-106072.

Container imageDigestPackageFixed in
sbs20/scanservjs:release-v3.0.3dad1fd6e9a98
nodejs@18.13.0+dfsg1-1
no fix listed

Open the chart page →

15,654
double-takegeek-cookbookVerified publisher2.3.21 of 1See more

double-take geek-cookbook 2.3.2

1 of the 1 container images this version deploys carry CVE-2026-106072.

Container imageDigestPackageFixed in
jakowenko/double-take:1.6.0b858bac9e32a
nodejs@16.13.0-deb-1nodesource1
no fix listed

Open the chart page →

86,239
haste-servergeek-cookbookVerified publisher3.4.21 of 1See more

haste-server geek-cookbook 3.4.2

1 of the 1 container images this version deploys carry CVE-2026-106072.

Container imageDigestPackageFixed in
ghcr.io/k8s-at-home/haste-server:latest827aa2f2389d
nodejs@14.17.2-deb-1nodesource1
no fix listed

Open the chart page →

12,817
mopidygeek-cookbookVerified publisher0.1.21 of 1See more

mopidy geek-cookbook 0.1.2

1 of the 1 container images this version deploys carry CVE-2026-106072.

Container imageDigestPackageFixed in
jaedb/iris:latest048cfbf58d57
nodejs@18.20.8-1nodesource1
no fix listed

Open the chart page →

69,783
puppeteergeek-cookbookVerified publisher1.2.21 of 1See more

puppeteer geek-cookbook 1.2.2

1 of the 1 container images this version deploys carry CVE-2026-106072.

Container imageDigestPackageFixed in
ghcr.io/jr0dd/puppeteer:v13.3.26047599cd78e
nodejs@17.5.0-deb-1nodesource1
no fix listed

Open the chart page →

16,778
geomapfishgeomapfish0.8.01 of 3See more

geomapfish geomapfish 0.8.0

1 of the 3 container images this version deploys carry CVE-2026-106072.

Container imageDigestPackageFixed in
camptocamp/geomapfishapp-geoportal:latest3f916d5d2f62
nodejs@18.19.1+dfsg-6ubuntu5
no fix listed

Open the chart page →

8,072
7dtdhelm-7dtd0.1.01 of 1See more

7dtd helm-7dtd 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-106072.

Container imageDigestPackageFixed in
vinanrra/7dtd-server:v0.4.4f9534490bd2b
nodejs@16.19.1-deb-1nodesource1
no fix listed

Open the chart page →

64,154
countlyhelmforgeVerified publisher1.2.101 of 3See more

countly helmforge 1.2.10

1 of the 3 container images this version deploys carry CVE-2026-106072.

Container imageDigestPackageFixed in
countly/countly-server:25.05.4e3c238248f99
nodejs@18.20.4-1nodesource1
no fix listed

Open the chart page →

74,001
dawarichhelmforgeVerified publisher1.0.81 of 4See more

dawarich helmforge 1.0.8

1 of the 4 container images this version deploys carry CVE-2026-106072.

Container imageDigestPackageFixed in
freikin/dawarich:1.16.0b533e6eac446
nodejs@20.19.2+dfsg-1+deb13u3
no fix listed

Open the chart page →

12,886
middlewarehelmforgeVerified publisher1.2.111 of 4See more

middleware helmforge 1.2.11

1 of the 4 container images this version deploys carry CVE-2026-106072.

Container imageDigestPackageFixed in
middlewareeng/middleware:0.3.1747d880812f1
nodejs@22.16.0-1nodesource1
no fix listed

Open the chart page →

64,802
ibm-microclimateibm-charts0.1.01 of 8See more

ibm-microclimate ibm-charts 0.1.0

1 of the 8 container images this version deploys carry CVE-2026-106072.

Container imageDigestPackageFixed in
ibmcom/microclimate-theia:lateste17bdccc5030
nodejs@4.2.6~dfsg-1ubuntu4.1
no fix listed

Open the chart page →

114,272
deconzjanip81-helm-chartsVerified publisher0.1.11 of 1See more

deconz janip81-helm-charts 0.1.1

1 of the 1 container images this version deploys carry CVE-2026-106072.

Container imageDigestPackageFixed in
deconzcommunity/deconz:2.29.2062de2362641
nodejs@18.19.0+dfsg-6~deb12u2
no fix listed

Open the chart page →

13,492
k8s-dev-podk8s-dev-pod0.3.11 of 1See more

k8s-dev-pod k8s-dev-pod 0.3.1

1 of the 1 container images this version deploys carry CVE-2026-106072.

Container imageDigestPackageFixed in
ghcr.io/bryopsida/k8s-dev-pod:main82d0b161161d
nodejs@22.16.0-1nodesource1
no fix listed

Open the chart page →

74,842

Container images carrying it

75 by charts deploying them

A fixed version is listed for 1 of the 2 affected packages.

Container imageDigestPackageFixed inUsed by
timothyclarke/wptagent:2018-01-2322c41e5ca7e2
nodejs@7.10.1-2nodesource1~xenial1
no fix listed
1
vinanrra/7dtd-server:v0.4.4f9534490bd2b
nodejs@16.19.1-deb-1nodesource1
no fix listed
1
workadventure/playwright-synthetic-monitoring:main92b664c2a06f
nodejs@20.15.0-1nodesource1
no fix listed
1
ghcr.io/alexanderwanyoike/the0/runtime:1.21.07fb8da98abeb
nodejs@22.23.4-1nodesource1
no fix listed
1
ghcr.io/antoniolago/vaultwarden-kubernetes-secrets:0.0.0-main13e267ad7d94
nodejs@20.20.0-1nodesource1
no fix listed
1
ghcr.io/brittonhayes/arma-reforger:latest6fde1edc0983
nodejs@16.19.1-deb-1nodesource1
no fix listed
1
ghcr.io/buanet/iobroker:v9.1.2ca7dc7362968
nodejs@18.20.4-1nodesource1
no fix listed
1
ghcr.io/htunn/ansible-inspec:0.2.12cd25a5cc3f1b
nodejs@20.20.0-1nodesource1
no fix listed
1
ghcr.io/iisas/domino-frontend:k8s8e53861be292
nodejs@18.20.4+dfsg-1~deb12u1
no fix listed
1
ghcr.io/jr0dd/puppeteer:v13.3.26047599cd78e
nodejs@17.5.0-deb-1nodesource1
no fix listed
1
ghcr.io/k8s-at-home/haste-server:latest827aa2f2389d
nodejs@14.17.2-deb-1nodesource1
no fix listed
1
ghcr.io/kubiyabot/agent-manager:v0.4.13757bdd779345
nodejs@18.20.8-1nodesource1
no fix listed
1
ghcr.io/linuxserver/audacity:version-3.0.2cdf203db1e50
nodejs@14.17.2-deb-1nodesource1
no fix listed
1
ghcr.io/linuxserver/code-server:version-v3.11.1a385ba5cb161
nodejs@14.17.6-1nodesource1
no fix listed
1
ghcr.io/linuxserver/digikam:version-7.3.055b4c7f320ae
nodejs@14.18.2-1nodesource1
no fix listed
1
ghcr.io/linuxserver/doublecommander:version-0.8.2-1d92969a929c2
nodejs@14.18.2-1nodesource1
no fix listed
1
ghcr.io/linuxserver/hedgedoc:version-1.9.0792a12ee976a
nodejs@12.22.7-1nodesource1
no fix listed
1
ghcr.io/linuxserver/remmina:version-1.2.0-rcgit.29dfsg-1ubuntu105955792e00f
nodejs@14.19.3-1nodesource1
no fix listed
1
ghcr.io/linuxserver/sqlitebrowser:version-3.12.2-02876202105241947ubuntu18.04.1426e79828c4b
nodejs@14.19.0-1nodesource1
no fix listed
1
ghcr.io/open-webui/mcpo:git-39b4867f06525afac6b
nodejs@22.17.1-1nodesource1
no fix listed
1
ghcr.io/quenchworks/images/grist4cfb3a7d6936
nodejs-22@22.23.2-r1
22.23.4-r0
1
ghcr.io/quenchworks/images/homepagee9d1b2799f06
nodejs-22@22.23.2-r1
22.23.4-r0
1
ghcr.io/quenchworks/images/xyopsf475b8f834ed
nodejs-22@22.23.2-r1
22.23.4-r0
1
ghcr.io/runwhen-contrib/runwhen-local:0.12.4914e75d9f445
nodejs@26.11.1-1nodesource1
no fix listed
1
ghcr.io/tarampampam/video-dl-bot:1.4.36daa2dc7556b
nodejs@24.20.0-1nodesource1
no fix listed
1

syft 1.42.1 · advisories as of 24 Oct 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.