StackRadar

CVE-2026-110725

Low

Advisory

Published 23 Oct 2026In the index since 24 Oct 2026
Severity
Low
worst across findings
CVSS
3.7
base score, highest
EPSS
0.003
16th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
201
of 18,232 indexed, latest versions
Container images
196
deployed by those charts
Fix available
1 of 1
affected package

fast-uri vulnerable to scheme injection via an unescaped first-segment colon in suffix references

Carried by container images the latest versions of 201 of 18,232 indexed charts deploy, on 196 images.

Affected packageAffected versionsFixed inImages
fast-urinpm2.1.0, 2.2.0, 2.3.0, 2.4.0+15 more2.4.8, 3.1.9, 4.2.3196
OSV records
GHSA-333x-w4r6-6crp

Charts affected

201 by stars
ChartLatestAffected imagesRadar Score
mcp-kubernetesmcp-helmVerified publisher0.2.71 of 1See more

mcp-kubernetes mcp-helm 0.2.7

1 of the 1 container images this version deploys carry CVE-2026-110725.

Container imageDigestPackageFixed in
mcp/kubernetes:latest5ffbf7f0a8aa
fast-uri@3.1.3
3.1.9

Open the chart page →

7,815
MINTmint8.0.21 of 15See more

MINT mint 8.0.2

1 of the 15 container images this version deploys carry CVE-2026-110725.

Container imageDigestPackageFixed in
mintproject/ensemble-manager:d5656dbc01623e291564d2894c72f0e7cb2408f4222e3b941a36
fast-uri@3.0.6
3.1.9

Open the chart page →

170,303
bofmojaloop5.1.61 of 1See more

bof mojaloop 5.1.6

1 of the 1 container images this version deploys carry CVE-2026-110725.

Container imageDigestPackageFixed in
mojaloop/security-role-perm-operator-svc:v3.0.212af60892c75
fast-uri@3.1.0
3.1.9

Open the chart page →

2,936
finance-portalmojaloop5.1.42 of 11See more

finance-portal mojaloop 5.1.4

2 of the 11 container images this version deploys carry CVE-2026-110725.

Container imageDigestPackageFixed in
mojaloop/reporting-events-processor-svc:v3.5.11e0d24d28512
fast-uri@3.0.6
3.1.9
mojaloop/reporting-hub-bop-experience-api-svc:v2.0.4265102a049d6
fast-uri@3.0.6
3.1.9

Open the chart page →

16,843
reporting-events-processor-svcmojaloop3.5.31 of 1See more

reporting-events-processor-svc mojaloop 3.5.3

1 of the 1 container images this version deploys carry CVE-2026-110725.

Container imageDigestPackageFixed in
mojaloop/reporting-events-processor-svc:v3.5.11e0d24d28512
fast-uri@3.0.6
3.1.9

Open the chart page →

3,043
reporting-hub-bop-experience-api-svcmojaloop1.0.31 of 1See more

reporting-hub-bop-experience-api-svc mojaloop 1.0.3

1 of the 1 container images this version deploys carry CVE-2026-110725.

Container imageDigestPackageFixed in
mojaloop/reporting-hub-bop-experience-api-svc:v2.0.4265102a049d6
fast-uri@3.0.6
3.1.9

Open the chart page →

2,909
security-role-perm-operator-svcmojaloop3.0.01 of 1See more

security-role-perm-operator-svc mojaloop 3.0.0

1 of the 1 container images this version deploys carry CVE-2026-110725.

Container imageDigestPackageFixed in
mojaloop/security-role-perm-operator-svc:v3.0.212af60892c75
fast-uri@3.1.0
3.1.9

Open the chart page →

2,936
mongo-compassmongo-compass-webVerified publisher1.1.41 of 1See more

mongo-compass mongo-compass-web 1.1.4

1 of the 1 container images this version deploys carry CVE-2026-110725.

Container imageDigestPackageFixed in
haohanyang/compass-web:0.5.1f4f8fe4e21f1
fast-uri@3.1.6
3.1.9

Open the chart page →

2,384
mongo-compassmongo-compass-web-helm1.1.01 of 1See more

mongo-compass mongo-compass-web-helm 1.1.0

1 of the 1 container images this version deploys carry CVE-2026-110725.

Container imageDigestPackageFixed in
haohanyang/compass-web:0.5.054f2112602ee
fast-uri@3.1.2
3.1.9

Open the chart page →

3,041
myweatherhelmmyweather1.3.111 of 7See more

myweatherhelm myweather 1.3.11

1 of the 7 container images this version deploys carry CVE-2026-110725.

Container imageDigestPackageFixed in
hecrom/myweatherprocessingreactclient:1.3.115454b54d5b28
fast-uri@3.0.1
3.1.9

Open the chart page →

20,645
n8nn8n-openshiftVerified publisher1.18.01 of 1See more

n8n n8n-openshift 1.18.0

1 of the 1 container images this version deploys carry CVE-2026-110725.

Container imageDigestPackageFixed in
n8nio/n8n:2.36.714c4285bc303
fast-uri@3.1.5
3.1.9

Open the chart page →

2,762
ixyneoskop3.1.01 of 1See more

ixy neoskop 3.1.0

1 of the 1 container images this version deploys carry CVE-2026-110725.

Container imageDigestPackageFixed in
neoskop/ixy:3.1.0326a4d2db1c9
fast-uri@3.1.8
3.1.9

Open the chart page →

189
nexus-tasksnexus-tasks2.0.01 of 5See more

nexus-tasks nexus-tasks 2.0.0

1 of the 5 container images this version deploys carry CVE-2026-110725.

Container imageDigestPackageFixed in
ghcr.io/ashvinbambhaniya/nexus-tasks-frontend:2.0.0fcbab3a24880
fast-uri@3.1.2
3.1.9

Open the chart page →

5,086
cloakbrowser-mcpobeoneVerified publisher0.3.51 of 1See more

cloakbrowser-mcp obeone 0.3.5

1 of the 1 container images this version deploys carry CVE-2026-110725.

Container imageDigestPackageFixed in
swimmwatch/cloakbrowser-mcp:1.15.11a2604718368
fast-uri@3.1.8
3.1.9

Open the chart page →

2,495
firecrawlobeoneVerified publisher3.0.211 of 5See more

firecrawl obeone 3.0.21

1 of the 5 container images this version deploys carry CVE-2026-110725.

Container imageDigestPackageFixed in
ghcr.io/firecrawl/firecrawl:2.11.693-staginge2f493babbc5
fast-uri@3.1.8
3.1.9

Open the chart page →

12,005
nocodbone-acre-fundVerified publisher0.4.61 of 3See more

nocodb one-acre-fund 0.4.6

1 of the 3 container images this version deploys carry CVE-2026-110725.

Container imageDigestPackageFixed in
nocodb/nocodb:0.258.06779a4ddedf2
fast-uri@3.0.3
3.1.9

Open the chart page →

5,449
n8nopenshift1.18.01 of 1See more

n8n openshift 1.18.0

1 of the 1 container images this version deploys carry CVE-2026-110725.

Container imageDigestPackageFixed in
n8nio/n8n:2.36.714c4285bc303
fast-uri@3.1.5
3.1.9

Open the chart page →

2,762
walletconnect-relayparadeum-teamVerified publisher0.1.21 of 1See more

walletconnect-relay paradeum-team 0.1.2

1 of the 1 container images this version deploys carry CVE-2026-110725.

Container imageDigestPackageFixed in
quay.io/netwarps/walletconnect-relay:v2.1.3-rc.15d90b9c193e0
fast-uri@2.1.0
2.4.8

Open the chart page →

1,448
portalplatform-mesh-portal0.21.111 of 1See more

portal platform-mesh-portal 0.21.11

1 of the 1 container images this version deploys carry CVE-2026-110725.

Container imageDigestPackageFixed in
ghcr.io/platform-mesh/portal:v0.27.127f9fd5bf5cdd
fast-uri@3.1.8
3.1.9

Open the chart page →

203
prismeai-coreprismeai1.12.34 of 7See more

prismeai-core prismeai 1.12.3

4 of the 7 container images this version deploys carry CVE-2026-110725.

Open the chart page →

6,137
rancher-auto-registerrancher-auto-registerVerified publisher0.1.01 of 1See more

rancher-auto-register rancher-auto-register 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-110725.

Container imageDigestPackageFixed in
registry.gitlab.com/xrow-public/ci-tools/tools:main90a7a94db2b0
fast-uri@3.1.8
3.1.9

Open the chart page →

2,790
etherpadredhat-cop0.0.81 of 1See more

etherpad redhat-cop 0.0.8

1 of the 1 container images this version deploys carry CVE-2026-110725.

Container imageDigestPackageFixed in
etherpad/etherpad:latest3d59d633d285
fast-uri@3.1.8
3.1.9

Open the chart page →

301
claude-relayrevolution10.1.371 of 4See more

claude-relay revolution1 0.1.37

1 of the 4 container images this version deploys carry CVE-2026-110725.

Container imageDigestPackageFixed in
ghcr.io/wei-shaw/claude-relay-service:v1.1.292398c34934453
fast-uri@3.1.0
3.1.9

Open the chart page →

6,320
web-checkrm3lVerified publisher0.2.01 of 1See more

web-check rm3l 0.2.0

1 of the 1 container images this version deploys carry CVE-2026-110725.

Container imageDigestPackageFixed in
lissy93/web-check:latest5e4feb4acbd5
fast-uri@3.1.8
3.1.9

Open the chart page →

8,897
rowflarerowflareVerified publisher0.1.01 of 1See more

rowflare rowflare 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-110725.

Container imageDigestPackageFixed in
rowflare/rowflare:0.1.09767136d308a
fast-uri@3.1.8
3.1.9

Open the chart page →

1,244
karakeeprtomik-helm-chartsVerified publisher0.0.11 of 3See more

karakeep rtomik-helm-charts 0.0.1

1 of the 3 container images this version deploys carry CVE-2026-110725.

Container imageDigestPackageFixed in
ghcr.io/karakeep-app/karakeep:0.26.0f575a34ed3f8
fast-uri@3.0.6
3.1.9

Open the chart page →

6,583
your-spotifyrubxkubeVerified publisher1.0.11 of 3See more

your-spotify rubxkube 1.0.1

1 of the 3 container images this version deploys carry CVE-2026-110725.

Container imageDigestPackageFixed in
yooooomi/your_spotify_client:1.20.0e4da90a0634c
fast-uri@3.1.2
3.1.9

Open the chart page →

6,787
rybbitrybbit-helm1.3.21 of 7See more

rybbit rybbit-helm 1.3.2

1 of the 7 container images this version deploys carry CVE-2026-110725.

Container imageDigestPackageFixed in
ghcr.io/rybbit-io/rybbit-backend:lateste0d1b397e33c
fast-uri@3.1.0
3.1.9

Open the chart page →

9,350
etherpadschoenwald0.4.11 of 1See more

etherpad schoenwald 0.4.1

1 of the 1 container images this version deploys carry CVE-2026-110725.

Container imageDigestPackageFixed in
etherpad/etherpad:3.3.698d395769b3b
fast-uri@3.1.8
3.1.9

Open the chart page →

459
secret-managersecret-managerVerified publisher1.0.01 of 4See more

secret-manager secret-manager 1.0.0

1 of the 4 container images this version deploys carry CVE-2026-110725.

Container imageDigestPackageFixed in
leonardomulticloud/svc-vault-frontend:v1.0.0e42a341e0299
fast-uri@3.0.1
3.1.9

Open the chart page →

7,796
seerr-chartseerr-chartVerified publisher3.10.11 of 1See more

seerr-chart seerr-chart 3.10.1

1 of the 1 container images this version deploys carry CVE-2026-110725.

Container imageDigestPackageFixed in
ghcr.io/seerr-team/seerr:v3.5.1d8fab675b55a
fast-uri@3.1.0
3.1.9

Open the chart page →

2,314
infisicalsinextraVerified publisher0.7.21 of 1See more

infisical sinextra 0.7.2

1 of the 1 container images this version deploys carry CVE-2026-110725.

Container imageDigestPackageFixed in
infisical/infisical:v0.166.8bb8352b71cea
fast-uri@3.1.8
3.1.9

Open the chart page →

3,458
retail-store-sample-checkout-chartstacksimplifyVerified publisher1.0.01 of 1See more

retail-store-sample-checkout-chart stacksimplify 1.0.0

1 of the 1 container images this version deploys carry CVE-2026-110725.

Container imageDigestPackageFixed in
public.ecr.aws/aws-containers/retail-store-sample-checkout:1.3.0687aa68dd490
fast-uri@3.0.5
3.1.9

Open the chart page →

1,590
lodestar-validatorstakewise1.2.01 of 1See more

lodestar-validator stakewise 1.2.0

1 of the 1 container images this version deploys carry CVE-2026-110725.

Container imageDigestPackageFixed in
chainsafe/lodestar:v1.27.07b9fe4aa8073
fast-uri@3.0.1
3.1.9

Open the chart page →

5,181
strapistrapi-xmv0.1.21 of 1See more

strapi strapi-xmv 0.1.2

1 of the 1 container images this version deploys carry CVE-2026-110725.

Container imageDigestPackageFixed in
ghcr.io/xmv-solutions-gmbh/strapi:latest5ffcc95d11e8
fast-uri@3.1.7
3.1.9

Open the chart page →

839
tensorzerotensorzero2026.6.01 of 2See more

tensorzero tensorzero 2026.6.0

1 of the 2 container images this version deploys carry CVE-2026-110725.

Container imageDigestPackageFixed in
tensorzero/ui:2026.6.0f2563d54724e
fast-uri@3.1.2
3.1.9

Open the chart page →

5,351
supabaseteochenglim0.1.22 of 13See more

supabase teochenglim 0.1.2

2 of the 13 container images this version deploys carry CVE-2026-110725.

Container imageDigestPackageFixed in
supabase/storage-api:latest98ffec5d0678
fast-uri@3.1.4
3.1.9
supabase/studio:latestd878dcd9dba7
fast-uri@3.1.8
3.1.9

Open the chart page →

33,915
node-redth0ths-helm-charts0.2.11 of 2See more

node-red th0ths-helm-charts 0.2.1

1 of the 2 container images this version deploys carry CVE-2026-110725.

Container imageDigestPackageFixed in
th0th/node-red:4.0.3-debiand06fa39f7406
fast-uri@3.0.1
3.1.9

Open the chart page →

2,950
evershopunifieVerified publisher1.0.01 of 1See more

evershop unifie 1.0.0

1 of the 1 container images this version deploys carry CVE-2026-110725.

Container imageDigestPackageFixed in
evershop/evershop:latest2acdcd7ed59f
fast-uri@3.1.8
3.1.9

Open the chart page →

925
unleash-enterpriseunleash1.0.41 of 1See more

unleash-enterprise unleash 1.0.4

1 of the 1 container images this version deploys carry CVE-2026-110725.

Container imageDigestPackageFixed in
unleashorg/unleash-enterprise:7.5.0245aeba40053
fast-uri@3.1.0
3.1.9

Open the chart page →

2,528
unleash-proxyunleash0.8.131 of 1See more

unleash-proxy unleash 0.8.13

1 of the 1 container images this version deploys carry CVE-2026-110725.

Container imageDigestPackageFixed in
unleashorg/unleash-proxy:v1.4.82538f89e2685
fast-uri@3.0.2
3.1.9

Open the chart page →

1,100
evolution-apivcnngrVerified publisher1.0.01 of 5See more

evolution-api vcnngr 1.0.0

1 of the 5 container images this version deploys carry CVE-2026-110725.

Container imageDigestPackageFixed in
evoapicloud/evolution-api:latest966625532d90
fast-uri@3.1.0
3.1.9

Open the chart page →

5,216
devportalveecode-platform-nextVerified publisher1.1.21 of 1See more

devportal veecode-platform-next 1.1.2

1 of the 1 container images this version deploys carry CVE-2026-110725.

Container imageDigestPackageFixed in
veecode/devportaldigest-pinned726cc70543dd
fast-uri@3.1.7
3.1.9

Open the chart page →

1,769
colanodevictorlane0.3.31 of 3See more

colanode victorlane 0.3.3

1 of the 3 container images this version deploys carry CVE-2026-110725.

Container imageDigestPackageFixed in
ghcr.io/colanode/server:latest7006cac874fd
fast-uri@3.1.0
3.1.9

Open the chart page →

3,117
n8nvictorlane1.0.181 of 1See more

n8n victorlane 1.0.18

1 of the 1 container images this version deploys carry CVE-2026-110725.

Container imageDigestPackageFixed in
n8nio/n8n:1.115.1ed16e560c40e
fast-uri@3.0.1
3.1.9

Open the chart page →

8,145
sirenwateim1.0.21 of 1See more

siren wateim 1.0.2

1 of the 1 container images this version deploys carry CVE-2026-110725.

Container imageDigestPackageFixed in
sigp/siren:v3.0.42c219b04758e
fast-uri@3.0.6
3.1.9

Open the chart page →

6,674
opensearch-dashboardswener3.9.01 of 1See more

opensearch-dashboards wener 3.9.0

1 of the 1 container images this version deploys carry CVE-2026-110725.

Container imageDigestPackageFixed in
opensearchproject/opensearch-dashboards:3.9.04bdb8ded547c
fast-uri@3.1.7
3.1.9

Open the chart page →

420
verdacciowener4.35.41 of 1See more

verdaccio wener 4.35.4

1 of the 1 container images this version deploys carry CVE-2026-110725.

Container imageDigestPackageFixed in
verdaccio/verdaccio:6.10.7d394c36d62a6
fast-uri@3.1.8
3.1.9

Open the chart page →

64
opensearch-dashboardswenerme3.9.01 of 1See more

opensearch-dashboards wenerme 3.9.0

1 of the 1 container images this version deploys carry CVE-2026-110725.

Container imageDigestPackageFixed in
opensearchproject/opensearch-dashboards:3.9.04bdb8ded547c
fast-uri@3.1.7
3.1.9

Open the chart page →

420
verdacciowenerme4.35.41 of 1See more

verdaccio wenerme 4.35.4

1 of the 1 container images this version deploys carry CVE-2026-110725.

Container imageDigestPackageFixed in
verdaccio/verdaccio:6.10.7d394c36d62a6
fast-uri@3.1.8
3.1.9

Open the chart page →

64

Container images carrying it

196 by charts deploying them

A fixed version is listed for 1 of the 1 affected package.

Container imageDigestPackageFixed inUsed by
opensign/opensign0ebc230eed21
fast-uri@3.1.5
3.1.9
1
outlinewiki/outline:1.11.008ee9ffdb847
fast-uri@3.1.8
3.1.9
1
penpotapp/mcp:2.18.41d6878c698af
fast-uri@3.1.6
3.1.9
1
qxip/qryn:3.2.3977acc9c7a9fd
fast-uri@3.0.1
3.1.9
1
rocketadmin/rocketadmin:1.23.70bd1abb0bfd1
fast-uri@3.1.2
3.1.9
1
rocketchat/account-service:8.6.144af8ac4e711
fast-uri@3.1.2
3.1.9
1
rocketchat/authorization-service:8.6.16bc18fb5d0e5
fast-uri@3.1.2
3.1.9
1
rocketchat/ddp-streamer-service:8.6.1819771c4abe4
fast-uri@3.1.2
3.1.9
1
rocketchat/presence-service:8.6.1c1170bdfe797
fast-uri@3.1.2
3.1.9
1
rowflare/rowflare:0.1.09767136d308a
fast-uri@3.1.8
3.1.9
1
sigp/siren:v3.0.42c219b04758e
fast-uri@3.0.6
3.1.9
1
supabase/postgres-meta:v0.96.6a84cc713585e
fast-uri@3.0.6
3.1.9
1
supabase/postgres-meta:v0.84.2d0a96973e9f1
fast-uri@2.2.0
2.4.8
1
supabase/storage-api:latest98ffec5d0678
fast-uri@3.1.4
3.1.9
1
supabase/storage-api:v1.60.4c8eb9858eafe
fast-uri@3.1.0
3.1.9
1
supabase/storage-api:v1.12.0f983fb50bd95
fast-uri@2.2.0
2.4.8
1
supabase/studio:2026.08.03-sha-022b374606aca9fdaa7
fast-uri@3.1.4
3.1.9
1
supabase/studio:latestd878dcd9dba7
fast-uri@3.1.8
3.1.9
1
swimmwatch/cloakbrowser-mcp:1.15.11a2604718368
fast-uri@3.1.8
3.1.9
1
sysnet4admin/colosseum-cms:loge74b43c7f492
fast-uri@3.0.6
3.1.9
1
sysnet4admin/colosseum-prm:log5802bfcd7fed
fast-uri@3.0.6
3.1.9
1
tensorzero/ui:2026.6.0f2563d54724e
fast-uri@3.1.2
3.1.9
1
tenureai/tenure:v1.0.285f5b222df9a5
fast-uri@3.1.2
3.1.9
1
th0th/node-red:4.0.3-debiand06fa39f7406
fast-uri@3.0.1
3.1.9
1
tiago2/cap:2.159f5ae4e261e
fast-uri@3.1.0
3.1.9
1
treskon/portrait-ui:DEV-lateste7970783bc8d
fast-uri@3.1.4
3.1.9
1
unitycatalog/unitycatalog-ui:main-aadc6fc3a688197b218
fast-uri@3.0.1
3.1.9
1
unleashorg/unleash-enterprise:7.5.0245aeba40053
fast-uri@3.1.0
3.1.9
1
unleashorg/unleash-proxy:v1.4.82538f89e2685
fast-uri@3.0.2
3.1.9
1
unleashorg/unleash-server:7.5.09adb37e399ba
fast-uri@3.0.1
3.1.9
1
veecode/devportal726cc70543dd
fast-uri@3.1.7
3.1.9
1
yooooomi/your_spotify_client:1.20.0e4da90a0634c
fast-uri@3.1.2
3.1.9
1
ghcr.io/amruthpillai/reactive-resume:v5.3.0c487ec5edcfe
fast-uri@3.1.7
3.1.9
1
ghcr.io/aolde/lametric-nightscout-proxy:latest7d1951b6baf5
fast-uri@2.1.0
2.4.8
1
ghcr.io/argoproj-labs/mcp-for-argocd:v0.9.0dffc6c719d86
fast-uri@3.1.0
3.1.9
1
ghcr.io/ashvinbambhaniya/nexus-tasks-frontend:2.0.0fcbab3a24880
fast-uri@3.1.2
3.1.9
1
ghcr.io/backstage/backstage:latest68f2025a3f27
fast-uri@3.1.8
3.1.9
1
ghcr.io/browserless/chrome:v2.57.3b38bf292db41
fast-uri@3.1.8
3.1.9
1
ghcr.io/browserless/chromium:v2.55.42ed0183564d7
fast-uri@3.1.5
3.1.9
1
ghcr.io/browserless/chromium:v2.57.340dff7c23e0e
fast-uri@3.1.8
3.1.9
1
ghcr.io/browserless/chromium:v2.57.06bac628b3d82
fast-uri@3.1.8
3.1.9
1
ghcr.io/bryopsida/openmct:main38b6a50a62b2
fast-uri@3.0.1
3.1.9
1
ghcr.io/bryopsida/psa-restricted-patcher:maina53ef16b024a
fast-uri@2.1.0
2.4.8
1
ghcr.io/buanet/iobroker:v9.1.2ca7dc7362968
fast-uri@3.0.1
3.1.9
1
ghcr.io/clastix/kamaji-console:v0.2.129ecf8d4fa65
fast-uri@3.0.6
3.1.9
1
ghcr.io/colanode/server:latest7006cac874fd
fast-uri@3.1.0
3.1.9
1
ghcr.io/curium-rocks/k8s-jacoco-operator:maina558ceae6cdb
fast-uri@2.1.0
2.4.8
1
ghcr.io/curium-rocks/k8s-mutating-webhook:mainaaab005242ae
fast-uri@2.1.0
2.4.8
1
ghcr.io/curium-rocks/k8s-validating-webhook:main8344061b2f22
fast-uri@2.1.0
2.4.8
1
ghcr.io/curium-rocks/kube-admission-controller-starter:maine9716966f30b
fast-uri@2.1.0
2.4.8
1

syft 1.42.1 · advisories as of 24 Oct 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.