StackRadar

CVE-2026-110180

Medium

Advisory

Published 23 Oct 2026In the index since 24 Oct 2026
Severity
Medium
worst across findings
CVSS
4.8
base score, highest
EPSS
0.002
10th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
111
of 18,232 indexed, latest versions
Container images
97
deployed by those charts
Fix available
1 of 1
affected package

fast-uri vulnerable to host confusion via unchecked WHATWG host canonicalization

Carried by container images the latest versions of 111 of 18,232 indexed charts deploy, on 97 images.

Affected packageAffected versionsFixed inImages
fast-urinpm3.1.3, 3.1.4, 3.1.5, 3.1.6+5 more3.1.9, 4.2.397
OSV records
GHSA-wjr9-j795-jxcr

Charts affected

111 by stars
ChartLatestAffected imagesRadar Score
decisionrules-aksdecisionrules-aksOfficialVerified publisher0.3.01 of 2See more

decisionrules-aks decisionrules-aks 0.3.0

1 of the 2 container images this version deploys carry CVE-2026-110180.

Container imageDigestPackageFixed in
decisionrules/server:latest6f6d024a87b8
fast-uri@3.1.8
3.1.9

Open the chart page →

606
decisionrules-eksdecisionrules-eksOfficialVerified publisher0.4.01 of 2See more

decisionrules-eks decisionrules-eks 0.4.0

1 of the 2 container images this version deploys carry CVE-2026-110180.

Container imageDigestPackageFixed in
decisionrules/server:latest6f6d024a87b8
fast-uri@3.1.8
3.1.9

Open the chart page →

606
decisionrules-ingressdecisionrules-ingressOfficialVerified publisher0.3.01 of 2See more

decisionrules-ingress decisionrules-ingress 0.3.0

1 of the 2 container images this version deploys carry CVE-2026-110180.

Container imageDigestPackageFixed in
decisionrules/server:latest6f6d024a87b8
fast-uri@3.1.8
3.1.9

Open the chart page →

606
decisionrules-ocpdecisionrules-ocpOfficialVerified publisher0.2.11 of 4See more

decisionrules-ocp decisionrules-ocp 0.2.1

1 of the 4 container images this version deploys carry CVE-2026-110180.

Container imageDigestPackageFixed in
decisionrules/server:latestbb3a93224b5a
fast-uri@3.1.8
3.1.9

Open the chart page →

2,201
dial-admindialVerified publisher0.20.01 of 3See more

dial-admin dial 0.20.0

1 of the 3 container images this version deploys carry CVE-2026-110180.

Container imageDigestPackageFixed in
epam/ai-dial-admin-frontend:0.22.07bceacad3de2
fast-uri@3.1.8
3.1.9

Open the chart page →

3,857
node-reddjdl-charts0.33.01 of 1See more

node-red djdl-charts 0.33.0

1 of the 1 container images this version deploys carry CVE-2026-110180.

Container imageDigestPackageFixed in
nodered/node-red:latestb5adb6c9dd29
fast-uri@3.1.8
3.1.9

Open the chart page →

342
openclaweasy-openclaw0.1.01 of 1See more

openclaw easy-openclaw 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-110180.

Container imageDigestPackageFixed in
ghcr.io/openclaw/openclaw:main7dbff0fe5f53
fast-uri@4.2.1
4.2.3

Open the chart page →

2,448
node-redegebackVerified publisher2.0.131 of 1See more

node-red egeback 2.0.13

1 of the 1 container images this version deploys carry CVE-2026-110180.

Container imageDigestPackageFixed in
nodered/node-red:5.0.410f40d0a83e7
fast-uri@3.1.4
3.1.9

Open the chart page →

1,658
connector-helm-chartenmeshed-connectorOfficialVerified publisher7.5.71 of 1See more

connector-helm-chart enmeshed-connector 7.5.7

1 of the 1 container images this version deploys carry CVE-2026-110180.

Container imageDigestPackageFixed in
ghcr.io/nmshd/connector:7.5.7c18dcfb81d12
fast-uri@3.1.8
3.1.9

Open the chart page →

378
edp-installepmdedpOfficialVerified publisher3.16.01 of 7See more

edp-install epmdedp 3.16.0

1 of the 7 container images this version deploys carry CVE-2026-110180.

Container imageDigestPackageFixed in
epamedp/krci-portal:0.9.0ebc7ca162d87
fast-uri@3.1.8
3.1.9

Open the chart page →

1,953
krci-portalepmdedpVerified publisher0.9.01 of 1See more

krci-portal epmdedp 0.9.0

1 of the 1 container images this version deploys carry CVE-2026-110180.

Container imageDigestPackageFixed in
epamedp/krci-portal:0.9.0ebc7ca162d87
fast-uri@3.1.8
3.1.9

Open the chart page →

273
lodestarethereum-helm-chartsVerified publisher1.2.21 of 2See more

lodestar ethereum-helm-charts 1.2.2

1 of the 2 container images this version deploys carry CVE-2026-110180.

Container imageDigestPackageFixed in
chainsafe/lodestar:latestf3d339e96267
fast-uri@4.2.1
4.2.3

Open the chart page →

3,369
consent-managerfiware0.2.01 of 1See more

consent-manager fiware 0.2.0

1 of the 1 container images this version deploys carry CVE-2026-110180.

Container imageDigestPackageFixed in
quay.io/wi_stefan/consent-manager:0.0.656399619568b
fast-uri@3.1.6
3.1.9

Open the chart page →

2,545
flanksource-uiflanksourceVerified publisher1.4.3541 of 1See more

flanksource-ui flanksource 1.4.354

1 of the 1 container images this version deploys carry CVE-2026-110180.

Container imageDigestPackageFixed in
flanksource/incident-manager-ui:v1.4.3542bb089c79fc0
fast-uri@3.1.3
3.1.9

Open the chart page →

3,657
mission-controlflanksourceVerified publisher0.1.3391 of 8See more

mission-control flanksource 0.1.339

1 of the 8 container images this version deploys carry CVE-2026-110180.

Container imageDigestPackageFixed in
flanksource/incident-manager-ui:v1.4.3228d17f0c08b20
fast-uri@3.1.3
3.1.9

Open the chart page →

12,093
redis-uigin0.0.11 of 1See more

redis-ui gin 0.0.1

1 of the 1 container images this version deploys carry CVE-2026-110180.

Container imageDigestPackageFixed in
patrikx3/p3x-redis-ui:latestf19eb45b0694
fast-uri@3.1.6
3.1.9

Open the chart page →

1,583
web-checkhajowielandVerified publisher1.0.11 of 1See more

web-check hajowieland 1.0.1

1 of the 1 container images this version deploys carry CVE-2026-110180.

Container imageDigestPackageFixed in
ghcr.io/lissy93/web-check:latest1cd3f9599dd5
fast-uri@3.1.8
3.1.9

Open the chart page →

8,462
bytestashhelmforgeVerified publisher1.0.41 of 1See more

bytestash helmforge 1.0.4

1 of the 1 container images this version deploys carry CVE-2026-110180.

Container imageDigestPackageFixed in
ghcr.io/jordan-dalby/bytestash:1.6.04326e143e2bd
fast-uri@3.1.8
3.1.9

Open the chart page →

59
documensohelmforgeVerified publisher1.0.01 of 3See more

documenso helmforge 1.0.0

1 of the 3 container images this version deploys carry CVE-2026-110180.

Container imageDigestPackageFixed in
ghcr.io/documenso/documensodigest-pinnedd9985f66c19c
fast-uri@3.1.8
3.1.9

Open the chart page →

2,196
ghosthelmforgeVerified publisher1.2.131 of 3See more

ghost helmforge 1.2.13

1 of the 3 container images this version deploys carry CVE-2026-110180.

Container imageDigestPackageFixed in
library/ghost:6.71.000032f157262
fast-uri@3.1.8
3.1.9

Open the chart page →

3,067
hoppscotchhelmforgeVerified publisher1.1.151 of 2See more

hoppscotch helmforge 1.1.15

1 of the 2 container images this version deploys carry CVE-2026-110180.

Container imageDigestPackageFixed in
hoppscotch/hoppscotch:2026.9.03160f5b3acf4
fast-uri@3.1.6
3.1.9

Open the chart page →

2,586
immichhelmforgeVerified publisher1.2.131 of 5See more

immich helmforge 1.2.13

1 of the 5 container images this version deploys carry CVE-2026-110180.

Container imageDigestPackageFixed in
ghcr.io/immich-app/immich-server:v3.1.0b434cb9287ee
fast-uri@3.1.3
3.1.9

Open the chart page →

13,985
opensignhelmforgeVerified publisher1.0.01 of 3See more

opensign helmforge 1.0.0

1 of the 3 container images this version deploys carry CVE-2026-110180.

Container imageDigestPackageFixed in
opensign/opensigndigest-pinned0ebc230eed21
fast-uri@3.1.5
3.1.9

Open the chart page →

70,650
reactive-resumehelmforgeVerified publisher1.0.21 of 4See more

reactive-resume helmforge 1.0.2

1 of the 4 container images this version deploys carry CVE-2026-110180.

Container imageDigestPackageFixed in
ghcr.io/amruthpillai/reactive-resume:v5.3.0c487ec5edcfe
fast-uri@3.1.7
3.1.9

Open the chart page →

4,422
strapihelmforgeVerified publisher2.3.171 of 3See more

strapi helmforge 2.3.17

1 of the 3 container images this version deploys carry CVE-2026-110180.

Container imageDigestPackageFixed in
helmforge/strapi-base:5.52.25a6c2c449840
fast-uri@3.1.5
3.1.9

Open the chart page →

2,761
zigbee2mqtthelm-zigbee2mqttVerified publisher1.4.21 of 1See more

zigbee2mqtt helm-zigbee2mqtt 1.4.2

1 of the 1 container images this version deploys carry CVE-2026-110180.

Container imageDigestPackageFixed in
koenkk/zigbee2mqtt:2.14.1fef0de769dcd
fast-uri@3.1.6
3.1.9

Open the chart page →

335
browserlessicoretechVerified publisher0.18.41 of 1See more

browserless icoretech 0.18.4

1 of the 1 container images this version deploys carry CVE-2026-110180.

Container imageDigestPackageFixed in
ghcr.io/browserless/chromium:v2.57.340dff7c23e0e
fast-uri@3.1.8
3.1.9

Open the chart page →

1,284
infisicalinfisical-charts0.4.21 of 3See more

infisical infisical-charts 0.4.2

1 of the 3 container images this version deploys carry CVE-2026-110180.

Container imageDigestPackageFixed in
infisical/infisical:latestdbc5be2079b6
fast-uri@3.1.8
3.1.9

Open the chart page →

2,830
infisical-standaloneinfisical-charts1.11.11 of 5See more

infisical-standalone infisical-charts 1.11.1

1 of the 5 container images this version deploys carry CVE-2026-110180.

Container imageDigestPackageFixed in
infisical/infisical:v0.167.0dbc5be2079b6
fast-uri@3.1.8
3.1.9

Open the chart page →

2,830
nocodbinseefrlab0.2.01 of 1See more

nocodb inseefrlab 0.2.0

1 of the 1 container images this version deploys carry CVE-2026-110180.

Container imageDigestPackageFixed in
nocodb/nocodb:lateste8fee91b205b
fast-uri@3.1.8
3.1.9

Open the chart page →

257
homebridgejespernohrVerified publisher0.2.01 of 1See more

homebridge jespernohr 0.2.0

1 of the 1 container images this version deploys carry CVE-2026-110180.

Container imageDigestPackageFixed in
homebridge/homebridge:latestd2370beb6a02
fast-uri@4.2.2
4.2.3

Open the chart page →

25,956
cdashkitwareVerified publisher0.21.11 of 3See more

cdash kitware 0.21.1

1 of the 3 container images this version deploys carry CVE-2026-110180.

Container imageDigestPackageFixed in
kitware/cdash:v5.5.16fab5f5ec6f2
fast-uri@3.1.8
3.1.9

Open the chart page →

12,842
ghostkubernetes-homelab-helm-chartsVerified publisher0.3.01 of 2See more

ghost kubernetes-homelab-helm-charts 0.3.0

1 of the 2 container images this version deploys carry CVE-2026-110180.

Container imageDigestPackageFixed in
library/ghost:6.71.0-alpine8e07c5ec63d9
fast-uri@3.1.8
3.1.9

Open the chart page →

2,157
umamikubernetes-homelab-helm-chartsVerified publisher0.3.01 of 3See more

umami kubernetes-homelab-helm-charts 0.3.0

1 of the 3 container images this version deploys carry CVE-2026-110180.

Container imageDigestPackageFixed in
ghcr.io/umami-software/umami:3.4.085909afc45bd
fast-uri@3.1.8
3.1.9

Open the chart page →

1,108
homebridgelbenicio-communityVerified publisher0.1.151 of 1See more

homebridge lbenicio-community 0.1.15

1 of the 1 container images this version deploys carry CVE-2026-110180.

Container imageDigestPackageFixed in
homebridge/homebridge:latestd2370beb6a02
fast-uri@4.2.2
4.2.3

Open the chart page →

25,956
libredb-studiolibredb-studio-oci0.1.1021 of 1See more

libredb-studio libredb-studio-oci 0.1.102

1 of the 1 container images this version deploys carry CVE-2026-110180.

Container imageDigestPackageFixed in
ghcr.io/libredb/libredb-studio:1.0.00cb0177dd278
fast-uri@3.1.8
3.1.9

Open the chart page →

1,560
lynxpromptlynxpromptVerified publisher0.1.41 of 3See more

lynxprompt lynxprompt 0.1.4

1 of the 3 container images this version deploys carry CVE-2026-110180.

Container imageDigestPackageFixed in
drumsergio/lynxprompt:2.1.40e66bb00c2696
fast-uri@3.1.8
3.1.9

Open the chart page →

980
mcp-kubernetesmcp-helmVerified publisher0.2.71 of 1See more

mcp-kubernetes mcp-helm 0.2.7

1 of the 1 container images this version deploys carry CVE-2026-110180.

Container imageDigestPackageFixed in
mcp/kubernetes:latest5ffbf7f0a8aa
fast-uri@3.1.3
3.1.9

Open the chart page →

7,815
mongo-compassmongo-compass-webVerified publisher1.1.41 of 1See more

mongo-compass mongo-compass-web 1.1.4

1 of the 1 container images this version deploys carry CVE-2026-110180.

Container imageDigestPackageFixed in
haohanyang/compass-web:0.5.1f4f8fe4e21f1
fast-uri@3.1.6
3.1.9

Open the chart page →

2,384
n8nn8n-openshiftVerified publisher1.18.01 of 1See more

n8n n8n-openshift 1.18.0

1 of the 1 container images this version deploys carry CVE-2026-110180.

Container imageDigestPackageFixed in
n8nio/n8n:2.36.714c4285bc303
fast-uri@3.1.5
3.1.9

Open the chart page →

2,762
ixyneoskop3.1.01 of 1See more

ixy neoskop 3.1.0

1 of the 1 container images this version deploys carry CVE-2026-110180.

Container imageDigestPackageFixed in
neoskop/ixy:3.1.0326a4d2db1c9
fast-uri@3.1.8
3.1.9

Open the chart page →

189
cloakbrowser-mcpobeoneVerified publisher0.3.51 of 1See more

cloakbrowser-mcp obeone 0.3.5

1 of the 1 container images this version deploys carry CVE-2026-110180.

Container imageDigestPackageFixed in
swimmwatch/cloakbrowser-mcp:1.15.11a2604718368
fast-uri@3.1.8
3.1.9

Open the chart page →

2,495
firecrawlobeoneVerified publisher3.0.211 of 5See more

firecrawl obeone 3.0.21

1 of the 5 container images this version deploys carry CVE-2026-110180.

Container imageDigestPackageFixed in
ghcr.io/firecrawl/firecrawl:2.11.693-staginge2f493babbc5
fast-uri@3.1.8
3.1.9

Open the chart page →

12,005
n8nopenshift1.18.01 of 1See more

n8n openshift 1.18.0

1 of the 1 container images this version deploys carry CVE-2026-110180.

Container imageDigestPackageFixed in
n8nio/n8n:2.36.714c4285bc303
fast-uri@3.1.5
3.1.9

Open the chart page →

2,762
portalplatform-mesh-portal0.21.111 of 1See more

portal platform-mesh-portal 0.21.11

1 of the 1 container images this version deploys carry CVE-2026-110180.

Container imageDigestPackageFixed in
ghcr.io/platform-mesh/portal:v0.27.127f9fd5bf5cdd
fast-uri@3.1.8
3.1.9

Open the chart page →

203
prismeai-coreprismeai1.12.34 of 7See more

prismeai-core prismeai 1.12.3

4 of the 7 container images this version deploys carry CVE-2026-110180.

Container imageDigestPackageFixed in
registry.gitlab.com/prisme.ai/prisme.ai/prisme.ai-api-gateway:prod90779690fa2d
fast-uri@3.1.7
3.1.9
registry.gitlab.com/prisme.ai/prisme.ai/prisme.ai-events:prod9453efa2367c
fast-uri@3.1.7
3.1.9
registry.gitlab.com/prisme.ai/prisme.ai/prisme.ai-runtime:prod47f685b79ca5
fast-uri@3.1.7
3.1.9
registry.gitlab.com/prisme.ai/prisme.ai/prisme.ai-workspaces:prodaf61bebe8939
fast-uri@3.1.7
3.1.9

Open the chart page →

6,137
rancher-auto-registerrancher-auto-registerVerified publisher0.1.01 of 1See more

rancher-auto-register rancher-auto-register 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-110180.

Container imageDigestPackageFixed in
registry.gitlab.com/xrow-public/ci-tools/tools:main90a7a94db2b0
fast-uri@3.1.8
3.1.9

Open the chart page →

2,790
etherpadredhat-cop0.0.81 of 1See more

etherpad redhat-cop 0.0.8

1 of the 1 container images this version deploys carry CVE-2026-110180.

Container imageDigestPackageFixed in
etherpad/etherpad:latest3d59d633d285
fast-uri@3.1.8
3.1.9

Open the chart page →

301
web-checkrm3lVerified publisher0.2.01 of 1See more

web-check rm3l 0.2.0

1 of the 1 container images this version deploys carry CVE-2026-110180.

Container imageDigestPackageFixed in
lissy93/web-check:latest5e4feb4acbd5
fast-uri@3.1.8
3.1.9

Open the chart page →

8,897
rowflarerowflareVerified publisher0.1.01 of 1See more

rowflare rowflare 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-110180.

Container imageDigestPackageFixed in
rowflare/rowflare:0.1.09767136d308a
fast-uri@3.1.8
3.1.9

Open the chart page →

1,244

Container images carrying it

97 by charts deploying them

A fixed version is listed for 1 of the 1 affected package.

Container imageDigestPackageFixed inUsed by
n8nio/n8n:2.41.687e0bab2c931
fast-uri@3.1.6
3.1.9
1
n8nio/n8n:2.45.3bf88c3783fc4
fast-uri@3.1.8
3.1.9
1
n8nio/n8n:2.44.4c72fa9f1bd9b
fast-uri@3.1.8
3.1.9
1
n8nio/n8n:2.36.8cfe2704ff858
fast-uri@3.1.5
3.1.9
1
neoskop/ixy:3.1.0326a4d2db1c9
fast-uri@3.1.8
3.1.9
1
nocodb/nocodb:lateste8fee91b205b
fast-uri@3.1.8
3.1.9
1
nodered/node-red:5.0.410f40d0a83e7
fast-uri@3.1.4
3.1.9
1
nodered/node-red:5.0.8:latestb5adb6c9dd29
fast-uri@3.1.8
3.1.9
1
obolnetwork/charon-dkg-sidecar:main87902178f0e7
fast-uri@3.1.8
3.1.9
1
opensign/opensign0ebc230eed21
fast-uri@3.1.5
3.1.9
1
outlinewiki/outline:1.11.008ee9ffdb847
fast-uri@3.1.8
3.1.9
1
penpotapp/mcp:2.18.41d6878c698af
fast-uri@3.1.6
3.1.9
1
rowflare/rowflare:0.1.09767136d308a
fast-uri@3.1.8
3.1.9
1
supabase/storage-api:latest98ffec5d0678
fast-uri@3.1.4
3.1.9
1
supabase/studio:2026.08.03-sha-022b374606aca9fdaa7
fast-uri@3.1.4
3.1.9
1
supabase/studio:latestd878dcd9dba7
fast-uri@3.1.8
3.1.9
1
swimmwatch/cloakbrowser-mcp:1.15.11a2604718368
fast-uri@3.1.8
3.1.9
1
treskon/portrait-ui:DEV-lateste7970783bc8d
fast-uri@3.1.4
3.1.9
1
veecode/devportal726cc70543dd
fast-uri@3.1.7
3.1.9
1
ghcr.io/amruthpillai/reactive-resume:v5.3.0c487ec5edcfe
fast-uri@3.1.7
3.1.9
1
ghcr.io/backstage/backstage:latest68f2025a3f27
fast-uri@3.1.8
3.1.9
1
ghcr.io/browserless/chrome:v2.57.3b38bf292db41
fast-uri@3.1.8
3.1.9
1
ghcr.io/browserless/chromium:v2.55.42ed0183564d7
fast-uri@3.1.5
3.1.9
1
ghcr.io/browserless/chromium:v2.57.340dff7c23e0e
fast-uri@3.1.8
3.1.9
1
ghcr.io/browserless/chromium:v2.57.06bac628b3d82
fast-uri@3.1.8
3.1.9
1
ghcr.io/bryopsida/openmct:main38b6a50a62b2
fast-uri@4.1.2
4.2.3
1
ghcr.io/documenso/documensod9985f66c19c
fast-uri@3.1.8
3.1.9
1
ghcr.io/firecrawl/firecrawl:2.11.693-staginge2f493babbc5
fast-uri@3.1.8
3.1.9
1
ghcr.io/giovannirco/arith-ts:1.1.0bdb04e8baef6
fast-uri@3.1.8
3.1.9
1
ghcr.io/immich-app/immich-server:v3.3.5485d546a2e31
fast-uri@3.1.4
3.1.9
1
ghcr.io/immich-app/immich-server:v3.3.4f6475c58b07a
fast-uri@3.1.4
3.1.9
1
ghcr.io/jordan-dalby/bytestash:1.6.04326e143e2bd
fast-uri@3.1.8
3.1.9
1
ghcr.io/lissy93/web-check:latest1cd3f9599dd5
fast-uri@3.1.8
3.1.9
1
ghcr.io/lockdep/stackradar-server:0.2.046eed1f3046a
fast-uri@3.1.8
3.1.9
1
ghcr.io/nmshd/connector:7.5.7c18dcfb81d12
fast-uri@3.1.8
3.1.9
1
ghcr.io/openclaw/openclaw:2026.10.5:latestf40d1e66fd14
fast-uri@4.2.1
4.2.3
1
ghcr.io/platform-mesh/portal:v0.27.127f9fd5bf5cdd
fast-uri@3.1.8
3.1.9
1
ghcr.io/sredevopsorg/ghost-on-kubernetes:main305999dea18a
fast-uri@3.1.8
3.1.9
1
ghcr.io/thotischner/observability-mcp:3.9.140eef5bfa1958
fast-uri@3.1.8
3.1.9
1
ghcr.io/xmv-solutions-gmbh/strapi:latest5ffcc95d11e8
fast-uri@3.1.7
3.1.9
1
quay.io/rhdh/rhdh-hub-rhel9:lateste992092fcc9b
fast-uri@3.1.7
3.1.9
1
quay.io/wi_stefan/consent-manager:0.0.656399619568b
fast-uri@3.1.6
3.1.9
1
registry.gitlab.com/prisme.ai/prisme.ai/prisme.ai-api-gateway:prod90779690fa2d
fast-uri@3.1.7
3.1.9
1
registry.gitlab.com/prisme.ai/prisme.ai/prisme.ai-events:prod9453efa2367c
fast-uri@3.1.7
3.1.9
1
registry.gitlab.com/prisme.ai/prisme.ai/prisme.ai-runtime:prod47f685b79ca5
fast-uri@3.1.7
3.1.9
1
registry.gitlab.com/prisme.ai/prisme.ai/prisme.ai-workspaces:prodaf61bebe8939
fast-uri@3.1.7
3.1.9
1
registry.gitlab.com/xrow-public/ci-tools/tools:main90a7a94db2b0
fast-uri@3.1.8
3.1.9
1

syft 1.42.1 · advisories as of 24 Oct 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.