StackRadarChart IndexLive demo

CVE-2026-106073

Medium

Advisory

Published 23 Oct 2026In the index since 24 Oct 2026

Severity: Medium; worst across findings
CVSS: 5.5; base score, highest
EPSS: —; probability of exploitation
CISA KEV: Not listed; no confirmed exploitation
Charts affected: 80; of 18,232 indexed, latest versions
Container images: 72; deployed by those charts
Fix available: None; affected package

The matching OSV records carry no description.

Carried by container images the latest versions of 80 of 18,232 indexed charts deploy, on 72 images.

Affected package	Affected versions	Fixed in	Images
nodejsdeb	4.2.6~dfsg-1ubuntu4.1, 7.10.1-2nodesource1~xenial1, 8.9.4-1nodesource1, 8.10.0~dfsg-2ubuntu0.4+48 more	no fix listed	72

OSV records: UBUNTU-CVE-2026-106073 DEBIAN-CVE-2026-106073

Charts affected

80 by stars

Chart

Latest

Affected images

Radar Score

youtubedl-materialk8s-home-lab-repo

1 of 1 See more

youtubedl-material k8s-home-lab-repo 5.1.1

1 of the 1 container images this version deploys carry CVE-2026-106073.

Container image	Digest	Package	Fixed in
tzahi12345/youtubedl-material :4.3.2	2f943d584711	nodejs@16.14.2-deb-1nodesource1	no fix listed

Open the chart page →

10,910

huekatool

1 of 1 See more

hue katool 1.0.8

1 of the 1 container images this version deploys carry CVE-2026-106073.

Container image	Digest	Package	Fixed in
gethue/hue :4.11.0	11b649636e68	nodejs@14.21.2-deb-1nodesource1	no fix listed

Open the chart page →

82,822

cdashkitware

1 of 3 See more

cdash kitware 0.21.1

1 of the 3 container images this version deploys carry CVE-2026-106073.

Container image	Digest	Package	Fixed in
kitware/cdash :v5.5.1	6fab5f5ec6f2	nodejs@24.22.1-1nodesource1	no fix listed

Open the chart page →

12,842

kubiya-runnerkubiya-helm-charts

1 of 9 See more

kubiya-runner kubiya-helm-charts 0.9.4

1 of the 9 container images this version deploys carry CVE-2026-106073.

Container image	Digest	Package	Fixed in
ghcr.io/kubiyabot/agent-manager :v0.4.13	757bdd779345	nodejs@18.20.8-1nodesource1	no fix listed

Open the chart page →

27,161

kinesaliteleprechaun-charts

1 of 1 See more

kinesalite leprechaun-charts 0.1.2

1 of the 1 container images this version deploys carry CVE-2026-106073.

Container image	Digest	Package	Fixed in
instructure/kinesalite :latest	34400d82f28f	nodejs@16.20.2-1nodesource1	no fix listed

Open the chart page →

4,702

linkdinglinkding

1 of 1 See more

linkding linkding 0.2.3

1 of the 1 container images this version deploys carry CVE-2026-106073.

Container image	Digest	Package	Fixed in
sissbruecker/linkding :1.41.0-plus	a222fb777e1f	nodejs@20.19.2-1nodesource1	no fix listed

Open the chart page →

103,357

nublado2lsst-sqre

1 of 2 See more

nublado2 lsst-sqre 0.8.5

1 of the 2 container images this version deploys carry CVE-2026-106073.

Container image	Digest	Package	Fixed in
lsstsqre/nublado2 :2.0.1	b75bf8aaafa4	nodejs@10.19.0~dfsg-3ubuntu1	no fix listed

Open the chart page →

90,558

mauticmautic-chart

1 of 3 See more

mautic mautic-chart 1.0.2

1 of the 3 container images this version deploys carry CVE-2026-106073.

Container image	Digest	Package	Fixed in
mautic/mautic :7-apache	eb8cc73d97e1	nodejs@24.15.0-1nodesource1	no fix listed

Open the chart page →

50,289

mcpomcp-helm

1 of 1 See more

mcpo mcp-helm 0.2.8

1 of the 1 container images this version deploys carry CVE-2026-106073.

Container image	Digest	Package	Fixed in
ghcr.io/open-webui/mcpo :git-39b4867	f06525afac6b	nodejs@22.17.1-1nodesource1	no fix listed

Open the chart page →

5,179

audacitynicholaswilde

1 of 1 See more

audacity nicholaswilde 0.1.4

1 of the 1 container images this version deploys carry CVE-2026-106073.

Container image	Digest	Package	Fixed in
ghcr.io/linuxserver/audacity :version-3.0.2	cdf203db1e50	nodejs@14.17.2-deb-1nodesource1	no fix listed

Open the chart page →

25,431

digikamnicholaswilde

1 of 1 See more

digikam nicholaswilde 1.0.0

1 of the 1 container images this version deploys carry CVE-2026-106073.

Container image	Digest	Package	Fixed in
ghcr.io/linuxserver/digikam :version-7.3.0	55b4c7f320ae	nodejs@14.18.2-1nodesource1	no fix listed

Open the chart page →

27,653

doublecommandernicholaswilde

1 of 1 See more

doublecommander nicholaswilde 1.0.2

1 of the 1 container images this version deploys carry CVE-2026-106073.

Container image	Digest	Package	Fixed in
ghcr.io/linuxserver/doublecommander :version-0.8.2-1	d92969a929c2	nodejs@14.18.2-1nodesource1	no fix listed

Open the chart page →

28,820

remminanicholaswilde

1 of 1 See more

remmina nicholaswilde 0.1.4

1 of the 1 container images this version deploys carry CVE-2026-106073.

Container image	Digest	Package	Fixed in
ghcr.io/linuxserver/remmina :version-1.2.0-rcgit.29dfsg-1ubuntu1	05955792e00f	nodejs@14.19.3-1nodesource1	no fix listed

Open the chart page →

25,577

sqlitebrowsernicholaswilde

1 of 1 See more

sqlitebrowser nicholaswilde 1.0.1

1 of the 1 container images this version deploys carry CVE-2026-106073.

Container image	Digest	Package	Fixed in
ghcr.io/linuxserver/sqlitebrowser :version-3.12.2-02876202105241947ubuntu18.04.1	426e79828c4b	nodejs@14.19.0-1nodesource1	no fix listed

Open the chart page →

26,898

example-dev-toolsnoygal

1 of 3 See more

example-dev-tools noygal 0.2.8

1 of the 3 container images this version deploys carry CVE-2026-106073.

Container image	Digest	Package	Fixed in
linuxserver/codimd :latest	b801bbcf6386	nodejs@10.23.0-1nodesource1	no fix listed

Open the chart page →

29,774

comacopencord

1 of 9 See more

comac opencord 1.0.0

1 of the 9 container images this version deploys carry CVE-2026-106073.

Container image	Digest	Package	Fixed in
omecproject/onos-progran :1.0.0	5715e5648aa0	nodejs@8.9.4-1nodesource1	no fix listed

Open the chart page →

249,713

onos-progranopencord

1 of 2 See more

onos-progran opencord 1.2.7

1 of the 2 container images this version deploys carry CVE-2026-106073.

Container image	Digest	Package	Fixed in
muluder/prograncontrollermcord :0.1.8	43b597a93da7	nodejs@8.9.4-1nodesource1	no fix listed

Open the chart page →

93,908

openwhiskopenwhisk

1 of 10 See more

openwhisk openwhisk 1.0.0

1 of the 10 container images this version deploys carry CVE-2026-106073.

Container image	Digest	Package	Fixed in
openwhisk/ow-utils :1.0.0	c80dba0de3aa	nodejs@8.10.0~dfsg-2ubuntu0.4	no fix listed

Open the chart page →

104,089

dgraphromholdings

1 of 1 See more

dgraph romholdings 0.0.20

1 of the 1 container images this version deploys carry CVE-2026-106073.

Container image	Digest	Package	Fixed in
dgraph/dgraph :v21.12.0	3b55ea83fffe	nodejs@14.17.5-deb-1nodesource1	no fix listed

Open the chart page →

13,798

runwhen-localrunwhen-contrib

1 of 3 See more

runwhen-local runwhen-contrib 0.7.3

1 of the 3 container images this version deploys carry CVE-2026-106073.

Container image	Digest	Package	Fixed in
ghcr.io/runwhen-contrib/runwhen-local :0.12.4	914e75d9f445	nodejs@26.11.1-1nodesource1	no fix listed

Open the chart page →

4,843

dawarichschichtel

1 of 1 See more

dawarich schichtel 0.5.0

1 of the 1 container images this version deploys carry CVE-2026-106073.

Container image	Digest	Package	Fixed in
freikin/dawarich :1.16.0	b533e6eac446	nodejs@20.19.2+dfsg-1+deb13u3	no fix listed

Open the chart page →

6,919

deconzsmall-hack

1 of 1 See more

deconz small-hack 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-106073.

Container image	Digest	Package	Fixed in
deconzcommunity/deconz :2.26.1	23c86008d73f	nodejs@18.19.0+dfsg-6~deb12u1	no fix listed

Open the chart page →

14,935

grafanasvtech-public-helm-charts

1 of 2 See more

grafana svtech-public-helm-charts 1.0.0

1 of the 2 container images this version deploys carry CVE-2026-106073.

Container image	Digest	Package	Fixed in
svtechnmaa/svtech_grafana :v1.2.2	1d71314424aa	nodejs@10.19.0~dfsg-3ubuntu1.3	no fix listed

Open the chart page →

12,827

the0the0

1 of 9 See more

the0 the0 0.16.0

1 of the 9 container images this version deploys carry CVE-2026-106073.

Container image	Digest	Package	Fixed in
ghcr.io/alexanderwanyoike/the0/runtime :1.21.0	7fb8da98abeb	nodejs@22.23.4-1nodesource1	no fix listed

Open the chart page →

7,905

tdarrvhdirk

1 of 2 See more

tdarr vhdirk 5.0.5

1 of the 2 container images this version deploys carry CVE-2026-106073.

Container image	Digest	Package	Fixed in
haveagitgat/tdarr_node :2.17.01	3ff0913202dd	nodejs@18.17.1-deb-1nodesource1	no fix listed

Open the chart page →

156,714

1 of 1 See more

unmanic vhdirk 0.1.4

1 of the 1 container images this version deploys carry CVE-2026-106073.

Container image	Digest	Package	Fixed in
josh5/unmanic :0.2.6	4d49c4816260	nodejs@20.11.1-1nodesource1	no fix listed

Open the chart page →

78,945

video-dl-botvideo-dl-bot

1 of 1 See more

video-dl-bot video-dl-bot 1.4.3

1 of the 1 container images this version deploys carry CVE-2026-106073.

Container image	Digest	Package	Fixed in
ghcr.io/tarampampam/video-dl-bot :1.4.3	6daa2dc7556b	nodejs@24.20.0-1nodesource1	no fix listed

Open the chart page →

2,680

webhookiewebhookie

1 of 1 See more

webhookie webhookie 0.1.2

1 of the 1 container images this version deploys carry CVE-2026-106073.

Container image	Digest	Package	Fixed in
hookiesolutions/webhookie :latest	0629694246ba	nodejs@14.18.1-deb-1nodesource1	no fix listed

Open the chart page →

15,896

webhookie-allwebhookie

1 of 3 See more

webhookie-all webhookie 0.1.2

1 of the 3 container images this version deploys carry CVE-2026-106073.

Container image	Digest	Package	Fixed in
hookiesolutions/webhookie :latest	0629694246ba	nodejs@14.18.1-deb-1nodesource1	no fix listed

Open the chart page →

31,434

playwright-synthetic-monitoringwork-adventure

1 of 1 See more

playwright-synthetic-monitoring work-adventure 1.0.1

1 of the 1 container images this version deploys carry CVE-2026-106073.

Container image	Digest	Package	Fixed in
workadventure/playwright-synthetic-monitoring :main	92b664c2a06f	nodejs@20.15.0-1nodesource1	no fix listed

Open the chart page →

16,335

Container images carrying it

72 by charts deploying them

A fixed version is listed for 0 of the 1 affected package.

Container image	Digest	Package	Fixed in	Used by
timothyclarke/wptagent :2018-01-23	22c41e5ca7e2	nodejs@7.10.1-2nodesource1~xenial1	no fix listed	1
vinanrra/7dtd-server :v0.4.4	f9534490bd2b	nodejs@16.19.1-deb-1nodesource1	no fix listed	1
workadventure/playwright-synthetic-monitoring :main	92b664c2a06f	nodejs@20.15.0-1nodesource1	no fix listed	1
ghcr.io/alexanderwanyoike/the0/runtime :1.21.0	7fb8da98abeb	nodejs@22.23.4-1nodesource1	no fix listed	1
ghcr.io/antoniolago/vaultwarden-kubernetes-secrets :0.0.0-main	13e267ad7d94	nodejs@20.20.0-1nodesource1	no fix listed	1
ghcr.io/brittonhayes/arma-reforger :latest	6fde1edc0983	nodejs@16.19.1-deb-1nodesource1	no fix listed	1
ghcr.io/buanet/iobroker :v9.1.2	ca7dc7362968	nodejs@18.20.4-1nodesource1	no fix listed	1
ghcr.io/htunn/ansible-inspec :0.2.12	cd25a5cc3f1b	nodejs@20.20.0-1nodesource1	no fix listed	1
ghcr.io/iisas/domino-frontend :k8s	8e53861be292	nodejs@18.20.4+dfsg-1~deb12u1	no fix listed	1
ghcr.io/jr0dd/puppeteer :v13.3.2	6047599cd78e	nodejs@17.5.0-deb-1nodesource1	no fix listed	1
ghcr.io/k8s-at-home/haste-server :latest	827aa2f2389d	nodejs@14.17.2-deb-1nodesource1	no fix listed	1
ghcr.io/kubiyabot/agent-manager :v0.4.13	757bdd779345	nodejs@18.20.8-1nodesource1	no fix listed	1
ghcr.io/linuxserver/audacity :version-3.0.2	cdf203db1e50	nodejs@14.17.2-deb-1nodesource1	no fix listed	1
ghcr.io/linuxserver/code-server :version-v3.11.1	a385ba5cb161	nodejs@14.17.6-1nodesource1	no fix listed	1
ghcr.io/linuxserver/digikam :version-7.3.0	55b4c7f320ae	nodejs@14.18.2-1nodesource1	no fix listed	1
ghcr.io/linuxserver/doublecommander :version-0.8.2-1	d92969a929c2	nodejs@14.18.2-1nodesource1	no fix listed	1
ghcr.io/linuxserver/hedgedoc :version-1.9.0	792a12ee976a	nodejs@12.22.7-1nodesource1	no fix listed	1
ghcr.io/linuxserver/remmina :version-1.2.0-rcgit.29dfsg-1ubuntu1	05955792e00f	nodejs@14.19.3-1nodesource1	no fix listed	1
ghcr.io/linuxserver/sqlitebrowser :version-3.12.2-02876202105241947ubuntu18.04.1	426e79828c4b	nodejs@14.19.0-1nodesource1	no fix listed	1
ghcr.io/open-webui/mcpo :git-39b4867	f06525afac6b	nodejs@22.17.1-1nodesource1	no fix listed	1
ghcr.io/runwhen-contrib/runwhen-local :0.12.4	914e75d9f445	nodejs@26.11.1-1nodesource1	no fix listed	1
ghcr.io/tarampampam/video-dl-bot :1.4.3	6daa2dc7556b	nodejs@24.20.0-1nodesource1	no fix listed	1