StackRadar

CVE-2026-112943

Medium

Advisory

Published 20 Oct 2026In the index since 21 Oct 2026
Severity
Medium
worst across findings
CVSS
6.3
base score, highest
EPSS
—
probability of exploitation
CISA KEV
Not listed
no confirmed exploitation
Charts affected
97
of 18,208 indexed, latest versions
Container images
100
deployed by those charts
Fix available
2 of 2
affected packages

launch-editor: escapeCmdArgs() omits % escaping on Windows

Carried by container images the latest versions of 97 of 18,208 indexed charts deploy, on 100 images.

Affected packageAffected versionsFixed inImages
vitenpm2.9.15, 3.2.5, 3.2.7, 3.2.8+39 more6.4.4, 7.3.7, 8.1.6, 8.2.4+1 more62
launch-editornpm2.2.1, 2.3.0, 2.4.0, 2.6.0+6 more2.14.240
OSV records
GHSA-698v-4r3x-3vcv

Charts affected

97 by stars
ChartLatestAffected imagesRadar Score
reactive-resumehelmforgeVerified publisher1.0.21 of 4See more

reactive-resume helmforge 1.0.2

1 of the 4 container images this version deploys carry CVE-2026-112943.

Container imageDigestPackageFixed in
ghcr.io/amruthpillai/reactive-resume:v5.3.0c487ec5edcfe
vite@8.2.2
8.2.4

Open the chart page →

3,964
ryothelmforgeVerified publisher1.0.21 of 2See more

ryot helmforge 1.0.2

1 of the 2 container images this version deploys carry CVE-2026-112943.

Container imageDigestPackageFixed in
ghcr.io/ignisda/ryot:v10.5.0a752b6aee537
vite@6.0.11
6.4.4

Open the chart page →

7,227
openaevhelm-openbasVerified publisher2.0.151 of 7See more

openaev helm-openbas 2.0.15

1 of the 7 container images this version deploys carry CVE-2026-112943.

Container imageDigestPackageFixed in
openbas/caldera-server:5.1.0a277796d9724
vite@2.9.15
6.4.4

Open the chart page →

21,633
openbashelm-openbasVerified publisher1.8.141 of 7See more

openbas helm-openbas 1.8.14

1 of the 7 container images this version deploys carry CVE-2026-112943.

Container imageDigestPackageFixed in
openbas/caldera-server:5.1.0a277796d9724
vite@2.9.15
6.4.4

Open the chart page →

26,468
townsquarehuscker-chartsVerified publisher1.0.41 of 2See more

townsquare huscker-charts 1.0.4

1 of the 2 container images this version deploys carry CVE-2026-112943.

Container imageDigestPackageFixed in
ghcr.io/huscker/townsquare-backend:2.15.2e106681e7673
launch-editor@2.6.1
2.14.2

Open the chart page →

4,308
ilum-unity-catalogilumVerified publisher0.1.01 of 4See more

ilum-unity-catalog ilum 0.1.0

1 of the 4 container images this version deploys carry CVE-2026-112943.

Container imageDigestPackageFixed in
unitycatalog/unitycatalog-ui:main-aadc6fc3a688197b218
launch-editor@2.8.1
2.14.2

Open the chart page →

13,381
dtlinfradao0.0.11 of 1See more

dtl infradao 0.0.1

1 of the 1 container images this version deploys carry CVE-2026-112943.

Container imageDigestPackageFixed in
ethereumoptimism/data-transport-layer:0.5.56e07968a0e686
vite@4.0.4
6.4.4

Open the chart page →

5,997
kenerkener-chart0.0.71 of 1See more

kener kener-chart 0.0.7

1 of the 1 container images this version deploys carry CVE-2026-112943.

Container imageDigestPackageFixed in
ghcr.io/rajnandan1/kener:3.2.182b993cb232eb
vite@4.5.9
6.4.4

Open the chart page →

6,339
cdashkitwareVerified publisher0.20.01 of 3See more

cdash kitware 0.20.0

1 of the 3 container images this version deploys carry CVE-2026-112943.

Container imageDigestPackageFixed in
kitware/cdash:v5.4.0da5abe941506
launch-editor@2.14.1
2.14.2

Open the chart page →

13,449
logtidelogtideVerified publisher2.1.142 of 4See more

logtide logtide 2.1.14

2 of the 4 container images this version deploys carry CVE-2026-112943.

Container imageDigestPackageFixed in
ghcr.io/logtide-dev/logtide-backend:1.0.265463e02f887
vite@6.4.3
6.4.4
ghcr.io/logtide-dev/logtide-frontend:1.0.22a7da1451f86
vite@6.4.3
6.4.4

Open the chart page →

4,129
frontendluiscajl0.1.71 of 1See more

frontend luiscajl 0.1.7

1 of the 1 container images this version deploys carry CVE-2026-112943.

Container imageDigestPackageFixed in
lavandadelpatio/frontend:latest501c3f31e0bc
launch-editor@2.2.1
2.14.2

Open the chart page →

3,795
tianjimsgbyte0.1.171 of 2See more

tianji msgbyte 0.1.17

1 of the 2 container images this version deploys carry CVE-2026-112943.

Container imageDigestPackageFixed in
moonrailgun/tianji:1.11.2b528c8f8fcc4
vite@5.0.12
6.4.4

Open the chart page →

5,465
myawesomeappmyawesomapp-mitchxxx0.1.11 of 1See more

myawesomeapp myawesomapp-mitchxxx 0.1.1

1 of the 1 container images this version deploys carry CVE-2026-112943.

Container imageDigestPackageFixed in
mitchxxx/amazon:214e72480ec63a
launch-editor@2.6.0
2.14.2

Open the chart page →

2,376
myawesomeapp14myawesomeapp140.1.11 of 1See more

myawesomeapp14 myawesomeapp14 0.1.1

1 of the 1 container images this version deploys carry CVE-2026-112943.

Container imageDigestPackageFixed in
ccjacobs14/amazon:59a9b14a6f09e
launch-editor@2.6.0
2.14.2

Open the chart page →

2,376
myawesomeapp-janmyawesomeapp-jan0.1.11 of 1See more

myawesomeapp-jan myawesomeapp-jan 0.1.1

1 of the 1 container images this version deploys carry CVE-2026-112943.

Container imageDigestPackageFixed in
ooghenekaro/amazon:latest03394ba1d6d8
launch-editor@2.6.0
2.14.2

Open the chart page →

2,418
myawesomeapp-marmyawesomeapp-mar0.1.11 of 1See more

myawesomeapp-mar myawesomeapp-mar 0.1.1

1 of the 1 container images this version deploys carry CVE-2026-112943.

Container imageDigestPackageFixed in
winfred008/amazon:910a68de5b398
launch-editor@2.6.0
2.14.2

Open the chart page →

2,376
myweatherhelmmyweather1.3.111 of 7See more

myweatherhelm myweather 1.3.11

1 of the 7 container images this version deploys carry CVE-2026-112943.

Container imageDigestPackageFixed in
hecrom/myweatherprocessingreactclient:1.3.115454b54d5b28
launch-editor@2.6.0
2.14.2

Open the chart page →

20,412
dashynas-helm-chartsVerified publisher1.0.41 of 1See more

dashy nas-helm-charts 1.0.4

1 of the 1 container images this version deploys carry CVE-2026-112943.

Container imageDigestPackageFixed in
lissy93/dashy:2.0.51991f7be5ed0
launch-editor@2.3.0
2.14.2

Open the chart page →

3,467
nexus-tasksnexus-tasks2.0.01 of 5See more

nexus-tasks nexus-tasks 2.0.0

1 of the 5 container images this version deploys carry CVE-2026-112943.

Container imageDigestPackageFixed in
ghcr.io/ashvinbambhaniya/nexus-tasks-frontend:2.0.0fcbab3a24880
launch-editor@2.13.1
vite@7.3.1
2.14.2
7.3.7

Open the chart page →

5,106
indexer-toolsnodeifyVerified publisher2.1.11 of 1See more

indexer-tools nodeify 2.1.1

1 of the 1 container images this version deploys carry CVE-2026-112943.

Container imageDigestPackageFixed in
ghcr.io/vincenttaglia/indexer-tools:v3.4.45bae30456ddb
vite@3.2.5
6.4.4

Open the chart page →

4,005
notes-admin-front-helm-chartnotesprojectchart0.1.01 of 1See more

notes-admin-front-helm-chart notesprojectchart 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-112943.

Container imageDigestPackageFixed in
vlebediantsev/notes-admin-front:latest007c6670ff48
launch-editor@2.6.0
2.14.2

Open the chart page →

16,558
notes-project-fromt-helm-chartnotesprojectchart0.1.01 of 1See more

notes-project-fromt-helm-chart notesprojectchart 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-112943.

Container imageDigestPackageFixed in
vlebediantsev/notes-project-front:latest945675fd2636
launch-editor@2.6.0
2.14.2

Open the chart page →

16,636
registration-ms-front-helm-chartnotesprojectchart0.1.01 of 1See more

registration-ms-front-helm-chart notesprojectchart 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-112943.

Container imageDigestPackageFixed in
vlebediantsev/registration-ms-front-app-host:latest54f69d116c50
launch-editor@2.6.0
2.14.2

Open the chart page →

16,614
praecoone-acre-fundVerified publisher0.2.01 of 3See more

praeco one-acre-fund 0.2.0

1 of the 3 container images this version deploys carry CVE-2026-112943.

Container imageDigestPackageFixed in
praecoapp/praeco:1.8.1322be3218d7df
launch-editor@2.6.0
2.14.2

Open the chart page →

9,902
recipe-apprecipe-app0.1.01 of 2See more

recipe-app recipe-app 0.1.0

1 of the 2 container images this version deploys carry CVE-2026-112943.

Container imageDigestPackageFixed in
anamskenneth/recipe_frontend:2025-06-079ecf04f42cc3
vite@5.4.4
6.4.4

Open the chart page →

4,593
helm-redchefredchef0.1.01 of 3See more

helm-redchef redchef 0.1.0

1 of the 3 container images this version deploys carry CVE-2026-112943.

Container imageDigestPackageFixed in
sharanalwar/redchef-frontend:latest5e82950b16b7
vite@6.2.6
6.4.4

Open the chart page →

5,694
retromretsamedocVerified publisher2026.2.51 of 1See more

retrom retsamedoc 2026.2.5

1 of the 1 container images this version deploys carry CVE-2026-112943.

Container imageDigestPackageFixed in
ghcr.io/jmberesford/retrom-service:retrom-v0.7.144d763d58f11d
vite@5.4.3
6.4.4

Open the chart page →

8,440
claude-relayrevolution10.1.371 of 4See more

claude-relay revolution1 0.1.37

1 of the 4 container images this version deploys carry CVE-2026-112943.

Container imageDigestPackageFixed in
ghcr.io/wei-shaw/claude-relay-service:v1.1.292398c34934453
vite@5.4.19
6.4.4

Open the chart page →

6,168
joplinrubxkubeVerified publisher1.3.11 of 2See more

joplin rubxkube 1.3.1

1 of the 2 container images this version deploys carry CVE-2026-112943.

Container imageDigestPackageFixed in
joplin/server:3.0-beta52af57880c0e
launch-editor@2.6.1
2.14.2

Open the chart page →

8,157
rybbitrybbit-helm1.3.21 of 7See more

rybbit rybbit-helm 1.3.2

1 of the 7 container images this version deploys carry CVE-2026-112943.

Container imageDigestPackageFixed in
ghcr.io/rybbit-io/rybbit-backend:lateste0d1b397e33c
vite@7.2.7
7.3.7

Open the chart page →

9,114
outlineschmitzis0.0.81 of 4See more

outline schmitzis 0.0.8

1 of the 4 container images this version deploys carry CVE-2026-112943.

Container imageDigestPackageFixed in
outlinewiki/outline:0.69.1d060dcd8f9aa
vite@4.1.3
6.4.4

Open the chart page →

5,649
secret-managersecret-managerVerified publisher1.0.01 of 4See more

secret-manager secret-manager 1.0.0

1 of the 4 container images this version deploys carry CVE-2026-112943.

Container imageDigestPackageFixed in
leonardomulticloud/svc-vault-frontend:v1.0.0e42a341e0299
launch-editor@2.9.1
2.14.2

Open the chart page →

7,740
dashysergiotocaliniVerified publisher1.0.01 of 1See more

dashy sergiotocalini 1.0.0

1 of the 1 container images this version deploys carry CVE-2026-112943.

Container imageDigestPackageFixed in
ghcr.io/lissy93/dashy:2.1.1acb40032ad4b
launch-editor@2.4.0
2.14.2

Open the chart page →

3,367
parkingsikalabs0.1.01 of 1See more

parking sikalabs 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-112943.

Container imageDigestPackageFixed in
ondrejsika/parking:latestb1fd497416c8
launch-editor@2.2.1
2.14.2

Open the chart page →

4,407
sneakerssneakers1.0.01 of 4See more

sneakers sneakers 1.0.0

1 of the 4 container images this version deploys carry CVE-2026-112943.

Container imageDigestPackageFixed in
helga09/shoes_ukr:v1.1.17999bc8b77c0
launch-editor@2.6.0
2.14.2

Open the chart page →

10,088
lodestar-validatorstakewise1.2.01 of 1See more

lodestar-validator stakewise 1.2.0

1 of the 1 container images this version deploys carry CVE-2026-112943.

Container imageDigestPackageFixed in
chainsafe/lodestar:v1.27.07b9fe4aa8073
vite@5.3.6
6.4.4

Open the chart page →

5,072
strapistrapi-xmv0.1.21 of 1See more

strapi strapi-xmv 0.1.2

1 of the 1 container images this version deploys carry CVE-2026-112943.

Container imageDigestPackageFixed in
ghcr.io/xmv-solutions-gmbh/strapi:latest5ffcc95d11e8
vite@5.4.21
6.4.4

Open the chart page →

701
slack-emoji-makersuminhong0.1.01 of 1See more

slack-emoji-maker suminhong 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-112943.

Container imageDigestPackageFixed in
honglab/slack-emoji-maker:v0.0.1ca075a926fe1
vite@4.5.13
6.4.4

Open the chart page →

2,524
tensorzerotensorzero2026.6.01 of 2See more

tensorzero tensorzero 2026.6.0

1 of the 2 container images this version deploys carry CVE-2026-112943.

Container imageDigestPackageFixed in
tensorzero/ui:2026.6.0f2563d54724e
vite@7.3.2
7.3.7

Open the chart page →

5,207
codegentest-opea1.0.01 of 5See more

codegen test-opea 1.0.0

1 of the 5 container images this version deploys carry CVE-2026-112943.

Container imageDigestPackageFixed in
opea/codegen-ui:1.02bee4eb66f3e
vite@4.5.5
6.4.4

Open the chart page →

32,273
codetranstest-opea1.0.01 of 5See more

codetrans test-opea 1.0.0

1 of the 5 container images this version deploys carry CVE-2026-112943.

Container imageDigestPackageFixed in
opea/codetrans-ui:1.03ef121f34610
vite@5.4.6
6.4.4

Open the chart page →

31,797
docsumtest-opea1.0.01 of 5See more

docsum test-opea 1.0.0

1 of the 5 container images this version deploys carry CVE-2026-112943.

Container imageDigestPackageFixed in
opea/docsum-ui:1.07f854e9bffaf
vite@5.4.6
6.4.4

Open the chart page →

32,300
homepagethis-is-tobi-helm-chartsVerified publisher0.1.01 of 1See more

homepage this-is-tobi-helm-charts 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-112943.

Container imageDigestPackageFixed in
ghcr.io/gethomepage/homepage:v2.4.0643bd0be730d
vite@8.2.1
8.2.4

Open the chart page →

682
homepageunknowniq1.8.81 of 2See more

homepage unknowniq 1.8.8

1 of the 2 container images this version deploys carry CVE-2026-112943.

Container imageDigestPackageFixed in
ghcr.io/gethomepage/homepage:v2.2.0753eeb0cc22a
vite@8.2.1
8.2.4

Open the chart page →

696
kenerunxwaresVerified publisher2026.10.11 of 2See more

kener unxwares 2026.10.1

1 of the 2 container images this version deploys carry CVE-2026-112943.

Container imageDigestPackageFixed in
rajnandan1/kener:4.1.7-alpined920a2b71c20
vite@7.3.1
7.3.7

Open the chart page →

1,932
workadventure-adminwork-adventure1.0.0-21-31 of 14See more

workadventure-admin work-adventure 1.0.0-21-3

1 of the 14 container images this version deploys carry CVE-2026-112943.

Container imageDigestPackageFixed in
thecodingmachine/workadventure-map-storage:helm-chart519c31c6e7ec
vite@3.2.8
6.4.4

Open the chart page →

20,837
workadventureworkadventure1.1.01 of 9See more

workadventure workadventure 1.1.0

1 of the 9 container images this version deploys carry CVE-2026-112943.

Container imageDigestPackageFixed in
thecodingmachine/workadventure-map-storage:v1.17.75bdab56da2fa
vite@3.2.7
6.4.4

Open the chart page →

21,501

Container images carrying it

100 by charts deploying them

A fixed version is listed for 2 of the 2 affected packages.

Container imageDigestPackageFixed inUsed by
rcdelacruz/my-strapi-app:js-amd6438007f358355
launch-editor@2.6.1
2.14.2
3
openbas/caldera-server:5.1.0a277796d9724
vite@2.9.15
6.4.4
2
outlinewiki/outline:0.69.1d060dcd8f9aa
vite@4.1.3
6.4.4
2
patrikx3/p3x-redis-ui:latestf19eb45b0694
vite@8.2.2
8.2.4
2
ghcr.io/gethomepage/homepage:latest:v2.4.0643bd0be730d
vite@8.2.1
8.2.4
2
ghcr.io/lissy93/dashy:2.1.1acb40032ad4b
launch-editor@2.4.0
2.14.2
2
activepieces/activepieces:0.92.326daa5e1807f
vite@6.4.3
6.4.4
1
adeptiainc/adeptia-automate-mcp-server:1.0.0283001e83739
vite@7.3.1
7.3.7
1
anamskenneth/recipe_frontend:2025-06-079ecf04f42cc3
vite@5.4.4
6.4.4
1
apimap/developer:v1.3.1406d3858e20c
launch-editor@2.6.0
2.14.2
1
apimap/portal:v2.4.0041a4790c65c
launch-editor@2.2.1
2.14.2
1
automatischio/automatisch:0.15.03bace7a12d5f
vite@6.3.3
6.4.4
1
baserow/baserow:1.30.1df0c42eb67e8
launch-editor@2.6.1
2.14.2
1
betterdb/monitor:0.49.0-no-ai97dcd2d2192f
vite@8.0.16
8.1.6
1
ccjacobs14/amazon:59a9b14a6f09e
launch-editor@2.6.0
2.14.2
1
chainsafe/lodestar:v1.27.07b9fe4aa8073
vite@5.3.6
6.4.4
1
chainsafe/lodestar:latestf3d339e96267
vite@6.1.6
6.4.4
1
cyfershepard/jellystat:1.1.12e61c759ec706
vite@8.0.16
8.1.6
1
dessalines/lemmy-ui:0.19.20ee4c620d8e93
launch-editor@2.8.1
2.14.2
1
directus/directus:12.0.29c8470ea465c
vite@8.0.8
8.1.6
1
directus/directus:11.1.0e3c8bb975350
vite@4.5.2
6.4.4
1
ethereumoptimism/data-transport-layer:0.5.56e07968a0e686
vite@4.0.4
6.4.4
1
ethpandaops/ethereumjs:masterfb84b718500f
vite@7.1.12
7.3.7
1
hecrom/myweatherprocessingreactclient:1.3.115454b54d5b28
launch-editor@2.6.0
2.14.2
1
helga09/shoes_ukr:v1.1.17999bc8b77c0
launch-editor@2.6.0
2.14.2
1
hkotel/mealie:frontend-v1.0.0beta-23c04c0e85039
launch-editor@2.3.0
2.14.2
1
honglab/slack-emoji-maker:v0.0.1ca075a926fe1
vite@4.5.13
6.4.4
1
joplin/server:3.0-beta52af57880c0e
launch-editor@2.6.1
2.14.2
1
kitware/cdash:v5.4.0da5abe941506
launch-editor@2.14.1
2.14.2
1
kyleslugg/klusterview:latestba8c36dfdfbd
launch-editor@2.6.0
2.14.2
1
lavandadelpatio/frontend:latest501c3f31e0bc
launch-editor@2.2.1
2.14.2
1
leonardomulticloud/svc-vault-frontend:v1.0.0e42a341e0299
launch-editor@2.9.1
2.14.2
1
lissy93/dashy:2.0.51991f7be5ed0
launch-editor@2.3.0
2.14.2
1
makeplane/live-commercial:v3.3.3fab034a2be8c
vite@8.2.2
8.2.4
1
makeplane/silo-commercial:v3.3.312c33418c1ec
vite@8.2.2
8.2.4
1
makeplane/space-commercial:v3.3.3c4a6236c4080
vite@8.2.2
8.2.4
1
misskey/misskey:12.110.1e08b7c478093
launch-editor@2.2.1
2.14.2
1
mitchxxx/amazon:214e72480ec63a
launch-editor@2.6.0
2.14.2
1
moonrailgun/tianji:1.11.2b528c8f8fcc4
vite@5.0.12
6.4.4
1
nocodb/nocodb:0.301.5d9516f0bf546
launch-editor@2.13.1
2.14.2
1
nousresearch/hermes-agent:v2026.8.27e0df6adebddf
vite@8.2.0
8.2.4
1
nousresearch/hermes-agent:v2026.9.24fca358f12efd
vite@8.2.0
8.2.4
1
ondrejsika/parking:latestb1fd497416c8
launch-editor@2.2.1
2.14.2
1
ooghenekaro/amazon:latest03394ba1d6d8
launch-editor@2.6.0
2.14.2
1
opea/codegen-ui:1.02bee4eb66f3e
vite@4.5.5
6.4.4
1
opea/codetrans-ui:1.03ef121f34610
vite@5.4.6
6.4.4
1
opea/docsum-ui:1.07f854e9bffaf
vite@5.4.6
6.4.4
1
openmined/syft-frontend:0.9.5d11524a3854a
vite@4.5.3
6.4.4
1
outlinewiki/outline:1.11.008ee9ffdb847
vite@8.3.2
8.3.3
1
outlinewiki/outline:0.82.0494dfb9249a6
vite@5.4.12
6.4.4
1

syft 1.42.1 · advisories as of 21 Oct 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.