StackRadar

CVE-2026-112943

Medium

Advisory

Published 20 Oct 2026In the index since 21 Oct 2026
Severity
Medium
worst across findings
CVSS
6.3
base score, highest
EPSS
—
probability of exploitation
CISA KEV
Not listed
no confirmed exploitation
Charts affected
97
of 18,208 indexed, latest versions
Container images
100
deployed by those charts
Fix available
2 of 2
affected packages

launch-editor: escapeCmdArgs() omits % escaping on Windows

Carried by container images the latest versions of 97 of 18,208 indexed charts deploy, on 100 images.

Affected packageAffected versionsFixed inImages
vitenpm2.9.15, 3.2.5, 3.2.7, 3.2.8+39 more6.4.4, 7.3.7, 8.1.6, 8.2.4+1 more62
launch-editornpm2.2.1, 2.3.0, 2.4.0, 2.6.0+6 more2.14.240
OSV records
GHSA-698v-4r3x-3vcv

Charts affected

97 by stars
ChartLatestAffected imagesRadar Score
reactive-resumehelmforgeVerified publisher1.0.21 of 4See more

reactive-resume helmforge 1.0.2

1 of the 4 container images this version deploys carry CVE-2026-112943.

Container imageDigestPackageFixed in
ghcr.io/amruthpillai/reactive-resume:v5.3.0c487ec5edcfe
vite@8.2.2
8.2.4

Open the chart page →

3,964
ryothelmforgeVerified publisher1.0.21 of 2See more

ryot helmforge 1.0.2

1 of the 2 container images this version deploys carry CVE-2026-112943.

Container imageDigestPackageFixed in
ghcr.io/ignisda/ryot:v10.5.0a752b6aee537
vite@6.0.11
6.4.4

Open the chart page →

7,227
openaevhelm-openbasVerified publisher2.0.151 of 7See more

openaev helm-openbas 2.0.15

1 of the 7 container images this version deploys carry CVE-2026-112943.

Container imageDigestPackageFixed in
openbas/caldera-server:5.1.0a277796d9724
vite@2.9.15
6.4.4

Open the chart page →

21,633
openbashelm-openbasVerified publisher1.8.141 of 7See more

openbas helm-openbas 1.8.14

1 of the 7 container images this version deploys carry CVE-2026-112943.

Container imageDigestPackageFixed in
openbas/caldera-server:5.1.0a277796d9724
vite@2.9.15
6.4.4

Open the chart page →

26,468
townsquarehuscker-chartsVerified publisher1.0.41 of 2See more

townsquare huscker-charts 1.0.4

1 of the 2 container images this version deploys carry CVE-2026-112943.

Container imageDigestPackageFixed in
ghcr.io/huscker/townsquare-backend:2.15.2e106681e7673
launch-editor@2.6.1
2.14.2

Open the chart page →

4,308
ilum-unity-catalogilumVerified publisher0.1.01 of 4See more

ilum-unity-catalog ilum 0.1.0

1 of the 4 container images this version deploys carry CVE-2026-112943.

Container imageDigestPackageFixed in
unitycatalog/unitycatalog-ui:main-aadc6fc3a688197b218
launch-editor@2.8.1
2.14.2

Open the chart page →

13,381
dtlinfradao0.0.11 of 1See more

dtl infradao 0.0.1

1 of the 1 container images this version deploys carry CVE-2026-112943.

Container imageDigestPackageFixed in
ethereumoptimism/data-transport-layer:0.5.56e07968a0e686
vite@4.0.4
6.4.4

Open the chart page →

5,997
kenerkener-chart0.0.71 of 1See more

kener kener-chart 0.0.7

1 of the 1 container images this version deploys carry CVE-2026-112943.

Container imageDigestPackageFixed in
ghcr.io/rajnandan1/kener:3.2.182b993cb232eb
vite@4.5.9
6.4.4

Open the chart page →

6,339
cdashkitwareVerified publisher0.20.01 of 3See more

cdash kitware 0.20.0

1 of the 3 container images this version deploys carry CVE-2026-112943.

Container imageDigestPackageFixed in
kitware/cdash:v5.4.0da5abe941506
launch-editor@2.14.1
2.14.2

Open the chart page →

13,449
logtidelogtideVerified publisher2.1.142 of 4See more

logtide logtide 2.1.14

2 of the 4 container images this version deploys carry CVE-2026-112943.

Container imageDigestPackageFixed in
ghcr.io/logtide-dev/logtide-backend:1.0.265463e02f887
vite@6.4.3
6.4.4
ghcr.io/logtide-dev/logtide-frontend:1.0.22a7da1451f86
vite@6.4.3
6.4.4

Open the chart page →

4,129
frontendluiscajl0.1.71 of 1See more

frontend luiscajl 0.1.7

1 of the 1 container images this version deploys carry CVE-2026-112943.

Container imageDigestPackageFixed in
lavandadelpatio/frontend:latest501c3f31e0bc
launch-editor@2.2.1
2.14.2

Open the chart page →

3,795
tianjimsgbyte0.1.171 of 2See more

tianji msgbyte 0.1.17

1 of the 2 container images this version deploys carry CVE-2026-112943.

Container imageDigestPackageFixed in
moonrailgun/tianji:1.11.2b528c8f8fcc4
vite@5.0.12
6.4.4

Open the chart page →

5,465
myawesomeappmyawesomapp-mitchxxx0.1.11 of 1See more

myawesomeapp myawesomapp-mitchxxx 0.1.1

1 of the 1 container images this version deploys carry CVE-2026-112943.

Container imageDigestPackageFixed in
mitchxxx/amazon:214e72480ec63a
launch-editor@2.6.0
2.14.2

Open the chart page →

2,376
myawesomeapp14myawesomeapp140.1.11 of 1See more

myawesomeapp14 myawesomeapp14 0.1.1

1 of the 1 container images this version deploys carry CVE-2026-112943.

Container imageDigestPackageFixed in
ccjacobs14/amazon:59a9b14a6f09e
launch-editor@2.6.0
2.14.2

Open the chart page →

2,376
myawesomeapp-janmyawesomeapp-jan0.1.11 of 1See more

myawesomeapp-jan myawesomeapp-jan 0.1.1

1 of the 1 container images this version deploys carry CVE-2026-112943.

Container imageDigestPackageFixed in
ooghenekaro/amazon:latest03394ba1d6d8
launch-editor@2.6.0
2.14.2

Open the chart page →

2,418
myawesomeapp-marmyawesomeapp-mar0.1.11 of 1See more

myawesomeapp-mar myawesomeapp-mar 0.1.1

1 of the 1 container images this version deploys carry CVE-2026-112943.

Container imageDigestPackageFixed in
winfred008/amazon:910a68de5b398
launch-editor@2.6.0
2.14.2

Open the chart page →

2,376
myweatherhelmmyweather1.3.111 of 7See more

myweatherhelm myweather 1.3.11

1 of the 7 container images this version deploys carry CVE-2026-112943.

Container imageDigestPackageFixed in
hecrom/myweatherprocessingreactclient:1.3.115454b54d5b28
launch-editor@2.6.0
2.14.2

Open the chart page →

20,412
dashynas-helm-chartsVerified publisher1.0.41 of 1See more

dashy nas-helm-charts 1.0.4

1 of the 1 container images this version deploys carry CVE-2026-112943.

Container imageDigestPackageFixed in
lissy93/dashy:2.0.51991f7be5ed0
launch-editor@2.3.0
2.14.2

Open the chart page →

3,467
nexus-tasksnexus-tasks2.0.01 of 5See more

nexus-tasks nexus-tasks 2.0.0

1 of the 5 container images this version deploys carry CVE-2026-112943.

Container imageDigestPackageFixed in
ghcr.io/ashvinbambhaniya/nexus-tasks-frontend:2.0.0fcbab3a24880
launch-editor@2.13.1
vite@7.3.1
2.14.2
7.3.7

Open the chart page →

5,106
indexer-toolsnodeifyVerified publisher2.1.11 of 1See more

indexer-tools nodeify 2.1.1

1 of the 1 container images this version deploys carry CVE-2026-112943.

Container imageDigestPackageFixed in
ghcr.io/vincenttaglia/indexer-tools:v3.4.45bae30456ddb
vite@3.2.5
6.4.4

Open the chart page →

4,005
notes-admin-front-helm-chartnotesprojectchart0.1.01 of 1See more

notes-admin-front-helm-chart notesprojectchart 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-112943.

Container imageDigestPackageFixed in
vlebediantsev/notes-admin-front:latest007c6670ff48
launch-editor@2.6.0
2.14.2

Open the chart page →

16,558
notes-project-fromt-helm-chartnotesprojectchart0.1.01 of 1See more

notes-project-fromt-helm-chart notesprojectchart 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-112943.

Container imageDigestPackageFixed in
vlebediantsev/notes-project-front:latest945675fd2636
launch-editor@2.6.0
2.14.2

Open the chart page →

16,636
registration-ms-front-helm-chartnotesprojectchart0.1.01 of 1See more

registration-ms-front-helm-chart notesprojectchart 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-112943.

Container imageDigestPackageFixed in
vlebediantsev/registration-ms-front-app-host:latest54f69d116c50
launch-editor@2.6.0
2.14.2

Open the chart page →

16,614
praecoone-acre-fundVerified publisher0.2.01 of 3See more

praeco one-acre-fund 0.2.0

1 of the 3 container images this version deploys carry CVE-2026-112943.

Container imageDigestPackageFixed in
praecoapp/praeco:1.8.1322be3218d7df
launch-editor@2.6.0
2.14.2

Open the chart page →

9,902
recipe-apprecipe-app0.1.01 of 2See more

recipe-app recipe-app 0.1.0

1 of the 2 container images this version deploys carry CVE-2026-112943.

Container imageDigestPackageFixed in
anamskenneth/recipe_frontend:2025-06-079ecf04f42cc3
vite@5.4.4
6.4.4

Open the chart page →

4,593
helm-redchefredchef0.1.01 of 3See more

helm-redchef redchef 0.1.0

1 of the 3 container images this version deploys carry CVE-2026-112943.

Container imageDigestPackageFixed in
sharanalwar/redchef-frontend:latest5e82950b16b7
vite@6.2.6
6.4.4

Open the chart page →

5,694
retromretsamedocVerified publisher2026.2.51 of 1See more

retrom retsamedoc 2026.2.5

1 of the 1 container images this version deploys carry CVE-2026-112943.

Container imageDigestPackageFixed in
ghcr.io/jmberesford/retrom-service:retrom-v0.7.144d763d58f11d
vite@5.4.3
6.4.4

Open the chart page →

8,440
claude-relayrevolution10.1.371 of 4See more

claude-relay revolution1 0.1.37

1 of the 4 container images this version deploys carry CVE-2026-112943.

Container imageDigestPackageFixed in
ghcr.io/wei-shaw/claude-relay-service:v1.1.292398c34934453
vite@5.4.19
6.4.4

Open the chart page →

6,168
joplinrubxkubeVerified publisher1.3.11 of 2See more

joplin rubxkube 1.3.1

1 of the 2 container images this version deploys carry CVE-2026-112943.

Container imageDigestPackageFixed in
joplin/server:3.0-beta52af57880c0e
launch-editor@2.6.1
2.14.2

Open the chart page →

8,157
rybbitrybbit-helm1.3.21 of 7See more

rybbit rybbit-helm 1.3.2

1 of the 7 container images this version deploys carry CVE-2026-112943.

Container imageDigestPackageFixed in
ghcr.io/rybbit-io/rybbit-backend:lateste0d1b397e33c
vite@7.2.7
7.3.7

Open the chart page →

9,114
outlineschmitzis0.0.81 of 4See more

outline schmitzis 0.0.8

1 of the 4 container images this version deploys carry CVE-2026-112943.

Container imageDigestPackageFixed in
outlinewiki/outline:0.69.1d060dcd8f9aa
vite@4.1.3
6.4.4

Open the chart page →

5,649
secret-managersecret-managerVerified publisher1.0.01 of 4See more

secret-manager secret-manager 1.0.0

1 of the 4 container images this version deploys carry CVE-2026-112943.

Container imageDigestPackageFixed in
leonardomulticloud/svc-vault-frontend:v1.0.0e42a341e0299
launch-editor@2.9.1
2.14.2

Open the chart page →

7,740
dashysergiotocaliniVerified publisher1.0.01 of 1See more

dashy sergiotocalini 1.0.0

1 of the 1 container images this version deploys carry CVE-2026-112943.

Container imageDigestPackageFixed in
ghcr.io/lissy93/dashy:2.1.1acb40032ad4b
launch-editor@2.4.0
2.14.2

Open the chart page →

3,367
parkingsikalabs0.1.01 of 1See more

parking sikalabs 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-112943.

Container imageDigestPackageFixed in
ondrejsika/parking:latestb1fd497416c8
launch-editor@2.2.1
2.14.2

Open the chart page →

4,407
sneakerssneakers1.0.01 of 4See more

sneakers sneakers 1.0.0

1 of the 4 container images this version deploys carry CVE-2026-112943.

Container imageDigestPackageFixed in
helga09/shoes_ukr:v1.1.17999bc8b77c0
launch-editor@2.6.0
2.14.2

Open the chart page →

10,088
lodestar-validatorstakewise1.2.01 of 1See more

lodestar-validator stakewise 1.2.0

1 of the 1 container images this version deploys carry CVE-2026-112943.

Container imageDigestPackageFixed in
chainsafe/lodestar:v1.27.07b9fe4aa8073
vite@5.3.6
6.4.4

Open the chart page →

5,072
strapistrapi-xmv0.1.21 of 1See more

strapi strapi-xmv 0.1.2

1 of the 1 container images this version deploys carry CVE-2026-112943.

Container imageDigestPackageFixed in
ghcr.io/xmv-solutions-gmbh/strapi:latest5ffcc95d11e8
vite@5.4.21
6.4.4

Open the chart page →

701
slack-emoji-makersuminhong0.1.01 of 1See more

slack-emoji-maker suminhong 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-112943.

Container imageDigestPackageFixed in
honglab/slack-emoji-maker:v0.0.1ca075a926fe1
vite@4.5.13
6.4.4

Open the chart page →

2,524
tensorzerotensorzero2026.6.01 of 2See more

tensorzero tensorzero 2026.6.0

1 of the 2 container images this version deploys carry CVE-2026-112943.

Container imageDigestPackageFixed in
tensorzero/ui:2026.6.0f2563d54724e
vite@7.3.2
7.3.7

Open the chart page →

5,207
codegentest-opea1.0.01 of 5See more

codegen test-opea 1.0.0

1 of the 5 container images this version deploys carry CVE-2026-112943.

Container imageDigestPackageFixed in
opea/codegen-ui:1.02bee4eb66f3e
vite@4.5.5
6.4.4

Open the chart page →

32,273
codetranstest-opea1.0.01 of 5See more

codetrans test-opea 1.0.0

1 of the 5 container images this version deploys carry CVE-2026-112943.

Container imageDigestPackageFixed in
opea/codetrans-ui:1.03ef121f34610
vite@5.4.6
6.4.4

Open the chart page →

31,797
docsumtest-opea1.0.01 of 5See more

docsum test-opea 1.0.0

1 of the 5 container images this version deploys carry CVE-2026-112943.

Container imageDigestPackageFixed in
opea/docsum-ui:1.07f854e9bffaf
vite@5.4.6
6.4.4

Open the chart page →

32,300
homepagethis-is-tobi-helm-chartsVerified publisher0.1.01 of 1See more

homepage this-is-tobi-helm-charts 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-112943.

Container imageDigestPackageFixed in
ghcr.io/gethomepage/homepage:v2.4.0643bd0be730d
vite@8.2.1
8.2.4

Open the chart page →

682
homepageunknowniq1.8.81 of 2See more

homepage unknowniq 1.8.8

1 of the 2 container images this version deploys carry CVE-2026-112943.

Container imageDigestPackageFixed in
ghcr.io/gethomepage/homepage:v2.2.0753eeb0cc22a
vite@8.2.1
8.2.4

Open the chart page →

696
kenerunxwaresVerified publisher2026.10.11 of 2See more

kener unxwares 2026.10.1

1 of the 2 container images this version deploys carry CVE-2026-112943.

Container imageDigestPackageFixed in
rajnandan1/kener:4.1.7-alpined920a2b71c20
vite@7.3.1
7.3.7

Open the chart page →

1,932
workadventure-adminwork-adventure1.0.0-21-31 of 14See more

workadventure-admin work-adventure 1.0.0-21-3

1 of the 14 container images this version deploys carry CVE-2026-112943.

Container imageDigestPackageFixed in
thecodingmachine/workadventure-map-storage:helm-chart519c31c6e7ec
vite@3.2.8
6.4.4

Open the chart page →

20,837
workadventureworkadventure1.1.01 of 9See more

workadventure workadventure 1.1.0

1 of the 9 container images this version deploys carry CVE-2026-112943.

Container imageDigestPackageFixed in
thecodingmachine/workadventure-map-storage:v1.17.75bdab56da2fa
vite@3.2.7
6.4.4

Open the chart page →

21,501

Container images carrying it

100 by charts deploying them

A fixed version is listed for 2 of the 2 affected packages.

Container imageDigestPackageFixed inUsed by
penpotapp/admin-console:2.18.0:2.18.1:2.18.2:2.18.35935b5adbf33
vite@8.3.0
8.3.3
1
praecoapp/praeco:1.8.1322be3218d7df
launch-editor@2.6.0
2.14.2
1
pretix/standalone:2026.8.0ec17c2f761f7
vite@8.0.16
8.1.6
1
rajnandan1/kener:3.2.1930407afca731
vite@4.5.9
6.4.4
1
rajnandan1/kener:4.1.7-alpined920a2b71c20
vite@7.3.1
7.3.7
1
sharanalwar/redchef-frontend:latest5e82950b16b7
vite@6.2.6
6.4.4
1
tensorzero/ui:2026.6.0f2563d54724e
vite@7.3.2
7.3.7
1
testhubio/testhub-frontend:on-preme86c2db53be8
launch-editor@2.2.1
2.14.2
1
thecodingmachine/workadventure-map-storage:helm-chart519c31c6e7ec
vite@3.2.8
6.4.4
1
thecodingmachine/workadventure-map-storage:v1.17.75bdab56da2fa
vite@3.2.7
6.4.4
1
treskon/portrait-ui:DEV-lateste7970783bc8d
launch-editor@2.9.1
2.14.2
1
unitycatalog/unitycatalog-ui:main-aadc6fc3a688197b218
launch-editor@2.8.1
2.14.2
1
vabene1111/recipes:1.0.5.2ec4e9e2905b0
launch-editor@2.2.1
2.14.2
1
vlebediantsev/notes-admin-front:latest007c6670ff48
launch-editor@2.6.0
2.14.2
1
vlebediantsev/notes-project-front:latest945675fd2636
launch-editor@2.6.0
2.14.2
1
vlebediantsev/registration-ms-front-app-host:latest54f69d116c50
launch-editor@2.6.0
2.14.2
1
winfred008/amazon:910a68de5b398
launch-editor@2.6.0
2.14.2
1
ghcr.io/amruthpillai/reactive-resume:v5.3.0c487ec5edcfe
vite@8.2.2
8.2.4
1
ghcr.io/ashvinbambhaniya/nexus-tasks-frontend:2.0.0fcbab3a24880
launch-editor@2.13.1
vite@7.3.1
2.14.2
7.3.7
1
ghcr.io/astriaorg/astrotrek:0.1.05889bea38e56
launch-editor@2.6.1
vite@5.1.4
2.14.2
6.4.4
1
ghcr.io/data-fair/data-fair:3cc9498b64b5b
launch-editor@2.6.1
2.14.2
1
ghcr.io/data-fair/metrics:0a8d40779eeae
launch-editor@2.2.1
2.14.2
1
ghcr.io/data-fair/notify:3c739b74dabb0
launch-editor@2.10.0
2.14.2
1
ghcr.io/data-fair/portals:18b621866ceb2
launch-editor@2.14.1
2.14.2
1
ghcr.io/data-fair/processings:15a9216989707
launch-editor@2.6.1
2.14.2
1
ghcr.io/data-fair/simple-directory:438a4f32fad82
launch-editor@2.3.0
2.14.2
1
ghcr.io/flanksource/facet:0.1.73a0323f4283e5
vite@6.4.3
6.4.4
1
ghcr.io/formancehq/console:console-on.v1.1.1a4d32c2f68b3
vite@5.4.11
6.4.4
1
ghcr.io/formancehq/console-v3:v1.16.0c99e8ef2c545
vite@6.3.6
6.4.4
1
ghcr.io/formancehq/portal:v1.16.06efef5d19d56
vite@6.3.6
6.4.4
1
ghcr.io/gethomepage/homepage:latest:v2.2.0753eeb0cc22a
vite@8.2.1
8.2.4
1
ghcr.io/huscker/townsquare-backend:2.15.2e106681e7673
launch-editor@2.6.1
2.14.2
1
ghcr.io/ignisda/ryot:v10.5.0a752b6aee537
vite@6.0.11
6.4.4
1
ghcr.io/jmberesford/retrom-service:retrom-v0.7.144d763d58f11d
vite@5.4.3
6.4.4
1
ghcr.io/lissy93/web-check:lateste98c0fe58157
vite@8.2.2
8.2.4
1
ghcr.io/logtide-dev/logtide-backend:1.0.265463e02f887
vite@6.4.3
6.4.4
1
ghcr.io/logtide-dev/logtide-frontend:1.0.22a7da1451f86
vite@6.4.3
6.4.4
1
ghcr.io/manzil-infinity180/frontend-dumpstore:226f28ca3efa6d3691044813cd09085e28d4a7b44e6394b715d9
vite@5.4.8
6.4.4
1
ghcr.io/openclaw/openclaw:2026.5.22dcfd14877740
vite@8.0.14
8.1.6
1
ghcr.io/papra-hq/papra:26.7.0-rootlessbf4a66e776d0
vite@8.1.0
8.1.6
1
ghcr.io/rajnandan1/kener:3.2.182b993cb232eb
vite@4.5.9
6.4.4
1
ghcr.io/rybbit-io/rybbit-backend:lateste0d1b397e33c
vite@7.2.7
7.3.7
1
ghcr.io/sdwbgn/unitycatalog-helm/docker/unitycatalog-ui:0.2.1-5d668c1ed07e7ca098d
launch-editor@2.8.1
2.14.2
1
ghcr.io/tale/headplane:0.5.50dbc52cffc19
vite@6.0.6
6.4.4
1
ghcr.io/thm-mni-ii/fbs-qcm-frontend:v2.0.9083d81d517e7
vite@5.4.11
6.4.4
1
ghcr.io/vincenttaglia/indexer-tools:v3.4.45bae30456ddb
vite@3.2.5
6.4.4
1
ghcr.io/wei-shaw/claude-relay-service:v1.1.292398c34934453
vite@5.4.19
6.4.4
1
ghcr.io/wgbh-mla/dream-aapb:main23a86c7a0b8a
vite@7.3.1
7.3.7
1
ghcr.io/wgbh-mla/ov-frontend:v1.1.0bfc3118f6565
vite@6.3.5
6.4.4
1
ghcr.io/xmv-solutions-gmbh/strapi:latest5ffcc95d11e8
vite@5.4.21
6.4.4
1

syft 1.42.1 · advisories as of 21 Oct 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.