StackRadar

CVE-2026-110180

Medium

Advisory

Published 23 Oct 2026In the index since 24 Oct 2026
Severity
Medium
worst across findings
CVSS
4.8
base score, highest
EPSS
0.002
10th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
111
of 18,232 indexed, latest versions
Container images
97
deployed by those charts
Fix available
1 of 1
affected package

fast-uri vulnerable to host confusion via unchecked WHATWG host canonicalization

Carried by container images the latest versions of 111 of 18,232 indexed charts deploy, on 97 images.

Affected packageAffected versionsFixed inImages
fast-urinpm3.1.3, 3.1.4, 3.1.5, 3.1.6+5 more3.1.9, 4.2.397
OSV records
GHSA-wjr9-j795-jxcr

Charts affected

111 by stars
ChartLatestAffected imagesRadar Score
n8ncommunity-chartsVerified publisher1.24.431 of 1See more

n8n community-charts 1.24.43

1 of the 1 container images this version deploys carry CVE-2026-110180.

Container imageDigestPackageFixed in
n8nio/n8n:2.41.687e0bab2c931
fast-uri@3.1.6
3.1.9

Open the chart page →

1,888
n8nopen-8gears2.1.11 of 1See more

n8n open-8gears 2.1.1

1 of the 1 container images this version deploys carry CVE-2026-110180.

Container imageDigestPackageFixed in
n8nio/n8n:2.36.8cfe2704ff858
fast-uri@3.1.5
3.1.9

Open the chart page →

2,762
backstagebackstageOfficialVerified publisher2.10.21 of 1See more

backstage backstage 2.10.2

1 of the 1 container images this version deploys carry CVE-2026-110180.

Container imageDigestPackageFixed in
ghcr.io/backstage/backstage:latest68f2025a3f27
fast-uri@3.1.8
3.1.9

Open the chart page →

1,490
opensearch-dashboardsopensearch-project-helm-chartsVerified publisher3.9.01 of 1See more

opensearch-dashboards opensearch-project-helm-charts 3.9.0

1 of the 1 container images this version deploys carry CVE-2026-110180.

Container imageDigestPackageFixed in
opensearchproject/opensearch-dashboards:3.9.04bdb8ded547c
fast-uri@3.1.7
3.1.9

Open the chart page →

420
penpotpenpotOfficialVerified publisher1.11.41 of 5See more

penpot penpot 1.11.4

1 of the 5 container images this version deploys carry CVE-2026-110180.

Container imageDigestPackageFixed in
penpotapp/mcp:2.18.41d6878c698af
fast-uri@3.1.6
3.1.9

Open the chart page →

5,188
verdaccioverdaccio4.35.41 of 1See more

verdaccio verdaccio 4.35.4

1 of the 1 container images this version deploys carry CVE-2026-110180.

Container imageDigestPackageFixed in
verdaccio/verdaccio:6.10.7d394c36d62a6
fast-uri@3.1.8
3.1.9

Open the chart page →

64
openclawopenclawVerified publisher1.118.21 of 2See more

openclaw openclaw 1.118.2

1 of the 2 container images this version deploys carry CVE-2026-110180.

Container imageDigestPackageFixed in
ghcr.io/browserless/chromium:v2.57.06bac628b3d82
fast-uri@3.1.8
3.1.9

Open the chart page →

3,570
budibasebudibase0.0.0-master1 of 7See more

budibase budibase 0.0.0-master

1 of the 7 container images this version deploys carry CVE-2026-110180.

Container imageDigestPackageFixed in
budibase/apps:3.41.344fe6feab985
fast-uri@3.1.5
3.1.9

Open the chart page →

12,484
zigbee2mqttandrenarchyVerified publisher9.44.01 of 1See more

zigbee2mqtt andrenarchy 9.44.0

1 of the 1 container images this version deploys carry CVE-2026-110180.

Container imageDigestPackageFixed in
koenkk/zigbee2mqtt:2.14.1fef0de769dcd
fast-uri@3.1.6
3.1.9

Open the chart page →

335
n8nhelmforgeVerified publisher2.1.81 of 2See more

n8n helmforge 2.1.8

1 of the 2 container images this version deploys carry CVE-2026-110180.

Container imageDigestPackageFixed in
n8nio/n8n:2.44.4c72fa9f1bd9b
fast-uri@3.1.8
3.1.9

Open the chart page →

1,358
zigbee2mqttzigbee2mqtt2.14.21 of 2See more

zigbee2mqtt zigbee2mqtt 2.14.2

1 of the 2 container images this version deploys carry CVE-2026-110180.

Container imageDigestPackageFixed in
koenkk/zigbee2mqtt:2.14.2addbfb08fcef
fast-uri@3.1.6
3.1.9

Open the chart page →

1,722
docmosthelmforgeVerified publisher1.4.41 of 4See more

docmost helmforge 1.4.4

1 of the 4 container images this version deploys carry CVE-2026-110180.

Container imageDigestPackageFixed in
docmost/docmost:0.96.0b56947fcfd08
fast-uri@3.1.7
3.1.9

Open the chart page →

4,969
libredb-studiolibredb-studioOfficialVerified publisher0.1.1021 of 1See more

libredb-studio libredb-studio 0.1.102

1 of the 1 container images this version deploys carry CVE-2026-110180.

Container imageDigestPackageFixed in
ghcr.io/libredb/libredb-studio:1.0.00cb0177dd278
fast-uri@3.1.8
3.1.9

Open the chart page →

1,560
backstagerhdh-chartVerified publisher4.0.11 of 2See more

backstage rhdh-chart 4.0.1

1 of the 2 container images this version deploys carry CVE-2026-110180.

Container imageDigestPackageFixed in
quay.io/rhdh/rhdh-hub-rhel9:lateste992092fcc9b
fast-uri@3.1.7
3.1.9

Open the chart page →

2,297
heimdallheimdallOfficialVerified publisher3.3.31 of 2See more

heimdall heimdall 3.3.3

1 of the 2 container images this version deploys carry CVE-2026-110180.

Container imageDigestPackageFixed in
mitre/heimdall2:release-latest06f6e72d416a
fast-uri@3.1.5
3.1.9

Open the chart page →

2,922
karakeephelmforgeVerified publisher1.2.111 of 3See more

karakeep helmforge 1.2.11

1 of the 3 container images this version deploys carry CVE-2026-110180.

Container imageDigestPackageFixed in
ghcr.io/browserless/chromium:v2.55.42ed0183564d7
fast-uri@3.1.5
3.1.9

Open the chart page →

11,431
umamihelmforgeVerified publisher2.4.21 of 3See more

umami helmforge 2.4.2

1 of the 3 container images this version deploys carry CVE-2026-110180.

Container imageDigestPackageFixed in
ghcr.io/umami-software/umami:3.4.085909afc45bd
fast-uri@3.1.8
3.1.9

Open the chart page →

2,206
ghostcloudpirates-ghostVerified publisher0.20.321 of 3See more

ghost cloudpirates-ghost 0.20.32

1 of the 3 container images this version deploys carry CVE-2026-110180.

Container imageDigestPackageFixed in
library/ghost:6.72.0c0d83a8d4522
fast-uri@3.1.8
3.1.9

Open the chart page →

9,293
flyte-binaryflyte2.0.521 of 4See more

flyte-binary flyte 2.0.52

1 of the 4 container images this version deploys carry CVE-2026-110180.

Container imageDigestPackageFixed in
ghcr.io/unionai-oss/flyteconsole-v2:latest7e19bbdd2e7d
fast-uri@3.1.5
3.1.9

Open the chart page →

45,483
flyte-coreflyte2.0.521 of 3See more

flyte-core flyte 2.0.52

1 of the 3 container images this version deploys carry CVE-2026-110180.

Container imageDigestPackageFixed in
ghcr.io/unionai-oss/flyteconsole-v2:latest7e19bbdd2e7d
fast-uri@3.1.5
3.1.9

Open the chart page →

1,003
ghost-on-kubernetesghost-on-kubernetes-helmVerified publisher2.0.21 of 3See more

ghost-on-kubernetes ghost-on-kubernetes-helm 2.0.2

1 of the 3 container images this version deploys carry CVE-2026-110180.

Container imageDigestPackageFixed in
ghcr.io/sredevopsorg/ghost-on-kubernetes:main305999dea18a
fast-uri@3.1.8
3.1.9

Open the chart page →

1,792
home-assistanthome-assistantVerified publisher0.5.141 of 3See more

home-assistant home-assistant 0.5.14

1 of the 3 container images this version deploys carry CVE-2026-110180.

Container imageDigestPackageFixed in
koenkk/zigbee2mqtt:2.14.2addbfb08fcef
fast-uri@3.1.6
3.1.9

Open the chart page →

4,129
betterdb-monitorbetterdb-monitorOfficialVerified publisher0.51.11 of 1See more

betterdb-monitor betterdb-monitor 0.51.1

1 of the 1 container images this version deploys carry CVE-2026-110180.

Container imageDigestPackageFixed in
betterdb/monitor:0.51.1-no-aic4910692b3fc
fast-uri@3.1.7
3.1.9

Open the chart page →

434
kubedashdevopstalesOfficialVerified publisher4.0.01 of 8See more

kubedash devopstales 4.0.0

1 of the 8 container images this version deploys carry CVE-2026-110180.

Container imageDigestPackageFixed in
patrikx3/p3x-redis-ui:latestf19eb45b0694
fast-uri@3.1.6
3.1.9

Open the chart page →

13,218
gorules-brmsgorulesVerified publisher1.18.11 of 1See more

gorules-brms gorules 1.18.1

1 of the 1 container images this version deploys carry CVE-2026-110180.

Container imageDigestPackageFixed in
gorules/brms:latest23b5efdea938
fast-uri@3.1.8
3.1.9

Open the chart page →

336
ghostgroundhog2k0.212.181 of 1See more

ghost groundhog2k 0.212.18

1 of the 1 container images this version deploys carry CVE-2026-110180.

Container imageDigestPackageFixed in
library/ghost:6.71.000032f157262
fast-uri@3.1.8
3.1.9

Open the chart page →

2,159
growthbookgrowthbook5.1.01 of 2See more

growthbook growthbook 5.1.0

1 of the 2 container images this version deploys carry CVE-2026-110180.

Container imageDigestPackageFixed in
growthbook/growthbook:5.1.0c8a124f55dca
fast-uri@3.1.8
3.1.9

Open the chart page →

1,554
immichimmich-helmVerified publisher0.5.11 of 4See more

immich immich-helm 0.5.1

1 of the 4 container images this version deploys carry CVE-2026-110180.

Container imageDigestPackageFixed in
ghcr.io/immich-app/immich-server:v3.3.4f6475c58b07a
fast-uri@3.1.4
3.1.9

Open the chart page →

10,531
keycloak-reporterkeycloak-reporterVerified publisher1.4.171 of 1See more

keycloak-reporter keycloak-reporter 1.4.17

1 of the 1 container images this version deploys carry CVE-2026-110180.

Container imageDigestPackageFixed in
continuoussecuritytooling/keycloak-reporting-cli:1.3.51be60d1bc942
fast-uri@3.1.8
3.1.9

Open the chart page →

1,114
n8nklicktippVerified publisher1.12.01 of 1See more

n8n klicktipp 1.12.0

1 of the 1 container images this version deploys carry CVE-2026-110180.

Container imageDigestPackageFixed in
n8nio/n8n:2.45.3bf88c3783fc4
fast-uri@3.1.8
3.1.9

Open the chart page →

577
stackradarlockdepVerified publisher0.2.01 of 4See more

stackradar lockdep 0.2.0

1 of the 4 container images this version deploys carry CVE-2026-110180.

Container imageDigestPackageFixed in
ghcr.io/lockdep/stackradar-server:0.2.046eed1f3046a
fast-uri@3.1.8
3.1.9

Open the chart page →

6,001
plane-enterprisemakeplaneOfficialVerified publisher3.10.123 of 13See more

plane-enterprise makeplane 3.10.12

3 of the 13 container images this version deploys carry CVE-2026-110180.

Container imageDigestPackageFixed in
makeplane/live-commercial:v3.3.3fab034a2be8c
fast-uri@3.1.6
3.1.9
makeplane/silo-commercial:v3.3.312c33418c1ec
fast-uri@3.1.6
3.1.9
makeplane/space-commercial:v3.3.3c4a6236c4080
fast-uri@3.1.6
3.1.9

Open the chart page →

7,782
observability-mcpobservability-mcpOfficialVerified publisher2.9.151 of 2See more

observability-mcp observability-mcp 2.9.15

1 of the 2 container images this version deploys carry CVE-2026-110180.

Container imageDigestPackageFixed in
ghcr.io/thotischner/observability-mcp:3.9.140eef5bfa1958
fast-uri@3.1.8
3.1.9

Open the chart page →

68
growthbookone-acre-fundVerified publisher0.3.01 of 3See more

growthbook one-acre-fund 0.3.0

1 of the 3 container images this version deploys carry CVE-2026-110180.

Container imageDigestPackageFixed in
growthbook/growthbook:latestdca716a7bf47
fast-uri@3.1.8
3.1.9

Open the chart page →

1,642
openclawopenclaw-helm-chartVerified publisher1.0.701 of 3See more

openclaw openclaw-helm-chart 1.0.70

1 of the 3 container images this version deploys carry CVE-2026-110180.

Container imageDigestPackageFixed in
ghcr.io/openclaw/openclaw:2026.10.67dbff0fe5f53
fast-uri@4.2.1
4.2.3

Open the chart page →

2,448
portraitportraitVerified publisher0.2.131 of 8See more

portrait portrait 0.2.13

1 of the 8 container images this version deploys carry CVE-2026-110180.

Container imageDigestPackageFixed in
treskon/portrait-ui:DEV-lateste7970783bc8d
fast-uri@3.1.4
3.1.9

Open the chart page →

96,248
immichsecustorVerified publisher2.0.121 of 1See more

immich secustor 2.0.12

1 of the 1 container images this version deploys carry CVE-2026-110180.

Container imageDigestPackageFixed in
ghcr.io/immich-app/immich-server:v3.3.5485d546a2e31
fast-uri@3.1.4
3.1.9

Open the chart page →

3,170
supabasesupabse0.8.01 of 11See more

supabase supabse 0.8.0

1 of the 11 container images this version deploys carry CVE-2026-110180.

Container imageDigestPackageFixed in
supabase/studio:2026.08.03-sha-022b374606aca9fdaa7
fast-uri@3.1.4
3.1.9

Open the chart page →

56,496
activepiecesadnoctemVerified publisher0.7.21 of 1See more

activepieces adnoctem 0.7.2

1 of the 1 container images this version deploys carry CVE-2026-110180.

Container imageDigestPackageFixed in
activepieces/activepieces:0.92.326daa5e1807f
fast-uri@4.2.1
4.2.3

Open the chart page →

2,151
outlineadnoctemVerified publisher0.1.31 of 1See more

outline adnoctem 0.1.3

1 of the 1 container images this version deploys carry CVE-2026-110180.

Container imageDigestPackageFixed in
outlinewiki/outline:1.11.008ee9ffdb847
fast-uri@3.1.8
3.1.9

Open the chart page →

1,757
akeyless-gatewayakeyless-services-helmVerified publisher3.8.51 of 2See more

akeyless-gateway akeyless-services-helm 3.8.5

1 of the 2 container images this version deploys carry CVE-2026-110180.

Container imageDigestPackageFixed in
akeyless/gateway:5.5.30f582fc294a0
fast-uri@3.1.8
3.1.9

Open the chart page →

1,589
browserlessalekcVerified publisher1.3.31 of 1See more

browserless alekc 1.3.3

1 of the 1 container images this version deploys carry CVE-2026-110180.

Container imageDigestPackageFixed in
ghcr.io/browserless/chrome:v2.57.3b38bf292db41
fast-uri@3.1.8
3.1.9

Open the chart page →

1,348
zigbee2mqttalekcVerified publisher1.0.21 of 2See more

zigbee2mqtt alekc 1.0.2

1 of the 2 container images this version deploys carry CVE-2026-110180.

Container imageDigestPackageFixed in
koenkk/zigbee2mqtt:2.14.2addbfb08fcef
fast-uri@3.1.6
3.1.9

Open the chart page →

108
arith-tsarith-tsVerified publisher1.1.01 of 1See more

arith-ts arith-ts 1.1.0

1 of the 1 container images this version deploys carry CVE-2026-110180.

Container imageDigestPackageFixed in
ghcr.io/giovannirco/arith-ts:1.1.0bdb04e8baef6
fast-uri@3.1.8
3.1.9

Open the chart page →

29
immichbear0.1.11 of 2See more

immich bear 0.1.1

1 of the 2 container images this version deploys carry CVE-2026-110180.

Container imageDigestPackageFixed in
ghcr.io/immich-app/immich-server:v3.1.0b434cb9287ee
fast-uri@3.1.3
3.1.9

Open the chart page →

8,756
bluerange-mosquittobluerangeOfficialVerified publisher1.1.01 of 1See more

bluerange-mosquitto bluerange 1.1.0

1 of the 1 container images this version deploys carry CVE-2026-110180.

Container imageDigestPackageFixed in
bluerange/bluerange-mosquitto:2690a4e5b92cc6
fast-uri@3.1.6
3.1.9

Open the chart page →

354
openmctbryopsida0.1.11 of 1See more

openmct bryopsida 0.1.1

1 of the 1 container images this version deploys carry CVE-2026-110180.

Container imageDigestPackageFixed in
ghcr.io/bryopsida/openmct:main38b6a50a62b2
fast-uri@4.1.2
4.2.3

Open the chart page →

1,500
openclawcabrera-evil-chartsVerified publisher0.1.11 of 1See more

openclaw cabrera-evil-charts 0.1.1

1 of the 1 container images this version deploys carry CVE-2026-110180.

Container imageDigestPackageFixed in
ghcr.io/openclaw/openclaw:latestf40d1e66fd14
fast-uri@4.2.1
4.2.3

Open the chart page →

2,496
dv-podcharonOfficialVerified publisher0.20.01 of 5See more

dv-pod charon 0.20.0

1 of the 5 container images this version deploys carry CVE-2026-110180.

Container imageDigestPackageFixed in
obolnetwork/charon-dkg-sidecar:main87902178f0e7
fast-uri@3.1.8
3.1.9

Open the chart page →

5,068
ghostchart-ghost0.1.71 of 2See more

ghost chart-ghost 0.1.7

1 of the 2 container images this version deploys carry CVE-2026-110180.

Container imageDigestPackageFixed in
library/ghost:6.69.0-alpine3.23db4c56c196d6
fast-uri@3.1.8
3.1.9

Open the chart page →

1,377

Container images carrying it

97 by charts deploying them

A fixed version is listed for 1 of the 1 affected package.

Container imageDigestPackageFixed inUsed by
n8nio/n8n:2.41.687e0bab2c931
fast-uri@3.1.6
3.1.9
1
n8nio/n8n:2.45.3bf88c3783fc4
fast-uri@3.1.8
3.1.9
1
n8nio/n8n:2.44.4c72fa9f1bd9b
fast-uri@3.1.8
3.1.9
1
n8nio/n8n:2.36.8cfe2704ff858
fast-uri@3.1.5
3.1.9
1
neoskop/ixy:3.1.0326a4d2db1c9
fast-uri@3.1.8
3.1.9
1
nocodb/nocodb:lateste8fee91b205b
fast-uri@3.1.8
3.1.9
1
nodered/node-red:5.0.410f40d0a83e7
fast-uri@3.1.4
3.1.9
1
nodered/node-red:5.0.8:latestb5adb6c9dd29
fast-uri@3.1.8
3.1.9
1
obolnetwork/charon-dkg-sidecar:main87902178f0e7
fast-uri@3.1.8
3.1.9
1
opensign/opensign0ebc230eed21
fast-uri@3.1.5
3.1.9
1
outlinewiki/outline:1.11.008ee9ffdb847
fast-uri@3.1.8
3.1.9
1
penpotapp/mcp:2.18.41d6878c698af
fast-uri@3.1.6
3.1.9
1
rowflare/rowflare:0.1.09767136d308a
fast-uri@3.1.8
3.1.9
1
supabase/storage-api:latest98ffec5d0678
fast-uri@3.1.4
3.1.9
1
supabase/studio:2026.08.03-sha-022b374606aca9fdaa7
fast-uri@3.1.4
3.1.9
1
supabase/studio:latestd878dcd9dba7
fast-uri@3.1.8
3.1.9
1
swimmwatch/cloakbrowser-mcp:1.15.11a2604718368
fast-uri@3.1.8
3.1.9
1
treskon/portrait-ui:DEV-lateste7970783bc8d
fast-uri@3.1.4
3.1.9
1
veecode/devportal726cc70543dd
fast-uri@3.1.7
3.1.9
1
ghcr.io/amruthpillai/reactive-resume:v5.3.0c487ec5edcfe
fast-uri@3.1.7
3.1.9
1
ghcr.io/backstage/backstage:latest68f2025a3f27
fast-uri@3.1.8
3.1.9
1
ghcr.io/browserless/chrome:v2.57.3b38bf292db41
fast-uri@3.1.8
3.1.9
1
ghcr.io/browserless/chromium:v2.55.42ed0183564d7
fast-uri@3.1.5
3.1.9
1
ghcr.io/browserless/chromium:v2.57.340dff7c23e0e
fast-uri@3.1.8
3.1.9
1
ghcr.io/browserless/chromium:v2.57.06bac628b3d82
fast-uri@3.1.8
3.1.9
1
ghcr.io/bryopsida/openmct:main38b6a50a62b2
fast-uri@4.1.2
4.2.3
1
ghcr.io/documenso/documensod9985f66c19c
fast-uri@3.1.8
3.1.9
1
ghcr.io/firecrawl/firecrawl:2.11.693-staginge2f493babbc5
fast-uri@3.1.8
3.1.9
1
ghcr.io/giovannirco/arith-ts:1.1.0bdb04e8baef6
fast-uri@3.1.8
3.1.9
1
ghcr.io/immich-app/immich-server:v3.3.5485d546a2e31
fast-uri@3.1.4
3.1.9
1
ghcr.io/immich-app/immich-server:v3.3.4f6475c58b07a
fast-uri@3.1.4
3.1.9
1
ghcr.io/jordan-dalby/bytestash:1.6.04326e143e2bd
fast-uri@3.1.8
3.1.9
1
ghcr.io/lissy93/web-check:latest1cd3f9599dd5
fast-uri@3.1.8
3.1.9
1
ghcr.io/lockdep/stackradar-server:0.2.046eed1f3046a
fast-uri@3.1.8
3.1.9
1
ghcr.io/nmshd/connector:7.5.7c18dcfb81d12
fast-uri@3.1.8
3.1.9
1
ghcr.io/openclaw/openclaw:2026.10.5:latestf40d1e66fd14
fast-uri@4.2.1
4.2.3
1
ghcr.io/platform-mesh/portal:v0.27.127f9fd5bf5cdd
fast-uri@3.1.8
3.1.9
1
ghcr.io/sredevopsorg/ghost-on-kubernetes:main305999dea18a
fast-uri@3.1.8
3.1.9
1
ghcr.io/thotischner/observability-mcp:3.9.140eef5bfa1958
fast-uri@3.1.8
3.1.9
1
ghcr.io/xmv-solutions-gmbh/strapi:latest5ffcc95d11e8
fast-uri@3.1.7
3.1.9
1
quay.io/rhdh/rhdh-hub-rhel9:lateste992092fcc9b
fast-uri@3.1.7
3.1.9
1
quay.io/wi_stefan/consent-manager:0.0.656399619568b
fast-uri@3.1.6
3.1.9
1
registry.gitlab.com/prisme.ai/prisme.ai/prisme.ai-api-gateway:prod90779690fa2d
fast-uri@3.1.7
3.1.9
1
registry.gitlab.com/prisme.ai/prisme.ai/prisme.ai-events:prod9453efa2367c
fast-uri@3.1.7
3.1.9
1
registry.gitlab.com/prisme.ai/prisme.ai/prisme.ai-runtime:prod47f685b79ca5
fast-uri@3.1.7
3.1.9
1
registry.gitlab.com/prisme.ai/prisme.ai/prisme.ai-workspaces:prodaf61bebe8939
fast-uri@3.1.7
3.1.9
1
registry.gitlab.com/xrow-public/ci-tools/tools:main90a7a94db2b0
fast-uri@3.1.8
3.1.9
1

syft 1.42.1 · advisories as of 24 Oct 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.