StackRadar

CVE-2026-114141

High

Advisory

Published 22 Oct 2026In the index since 23 Oct 2026
Severity
High
worst across findings
CVSS
8.7
base score, highest
EPSS
0.003
21st percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
25
of 18,232 indexed, latest versions
Container images
25
deployed by those charts
Fix available
1 of 1
affected package

toml-node: Quadratic-complexity DoS via many array-of-tables headers in toml.parse()

Carried by container images the latest versions of 25 of 18,232 indexed charts deploy, on 25 images.

Affected packageAffected versionsFixed inImages
tomlnpm2.3.6, 3.0.0, 4.3.0, 5.0.05.0.125
OSV records
GHSA-4qx8-w7c3-pj3p

Charts affected

25 by stars
ChartLatestAffected imagesRadar Score
n8ncommunity-chartsVerified publisher1.24.431 of 1See more

n8n community-charts 1.24.43

1 of the 1 container images this version deploys carry CVE-2026-114141.

Container imageDigestPackageFixed in
n8nio/n8n:2.41.687e0bab2c931
toml@3.0.0
5.0.1

Open the chart page →

1,696
n8nopen-8gears2.1.11 of 1See more

n8n open-8gears 2.1.1

1 of the 1 container images this version deploys carry CVE-2026-114141.

Container imageDigestPackageFixed in
n8nio/n8n:2.36.8cfe2704ff858
toml@3.0.0
5.0.1

Open the chart page →

2,570
budibasebudibase0.0.0-master1 of 7See more

budibase budibase 0.0.0-master

1 of the 7 container images this version deploys carry CVE-2026-114141.

Container imageDigestPackageFixed in
budibase/apps:3.41.344fe6feab985
toml@3.0.0
5.0.1

Open the chart page →

11,908
n8nhelmforgeVerified publisher2.1.81 of 2See more

n8n helmforge 2.1.8

1 of the 2 container images this version deploys carry CVE-2026-114141.

Container imageDigestPackageFixed in
n8nio/n8n:2.44.4c72fa9f1bd9b
toml@3.0.0
5.0.1

Open the chart page →

1,141
nocodbzekker6Verified publisher1.10.01 of 1See more

nocodb zekker6 1.10.0

1 of the 1 container images this version deploys carry CVE-2026-114141.

Container imageDigestPackageFixed in
nocodb/nocodb:0.301.5d9516f0bf546
toml@3.0.0
5.0.1

Open the chart page →

5,712
ranetogabisonfire0.1.21 of 1See more

raneto gabisonfire 0.1.2

1 of the 1 container images this version deploys carry CVE-2026-114141.

Container imageDigestPackageFixed in
ghcr.io/linuxserver/raneto:version-0.16.6ef768f3df5d0
toml@2.3.6
5.0.1

Open the chart page →

2,663
recipesgeek-cookbookVerified publisher6.6.21 of 2See more

recipes geek-cookbook 6.6.2

1 of the 2 container images this version deploys carry CVE-2026-114141.

Container imageDigestPackageFixed in
vabene1111/recipes:1.0.5.2ec4e9e2905b0
toml@3.0.0
5.0.1

Open the chart page →

9,190
growthbookgrowthbook5.1.01 of 2See more

growthbook growthbook 5.1.0

1 of the 2 container images this version deploys carry CVE-2026-114141.

Container imageDigestPackageFixed in
growthbook/growthbook:5.1.0c8a124f55dca
toml@4.3.0
5.0.1

Open the chart page →

1,390
n8nklicktippVerified publisher1.11.11 of 1See more

n8n klicktipp 1.11.1

1 of the 1 container images this version deploys carry CVE-2026-114141.

Container imageDigestPackageFixed in
n8nio/n8n:2.43.3d4eca183959b
toml@3.0.0
5.0.1

Open the chart page →

1,696
plane-enterprisemakeplaneOfficialVerified publisher3.10.123 of 13See more

plane-enterprise makeplane 3.10.12

3 of the 13 container images this version deploys carry CVE-2026-114141.

Container imageDigestPackageFixed in
makeplane/live-commercial:v3.3.3fab034a2be8c
toml@4.3.0
5.0.1
makeplane/silo-commercial:v3.3.312c33418c1ec
toml@4.3.0
5.0.1
makeplane/space-commercial:v3.3.3c4a6236c4080
toml@4.3.0
5.0.1

Open the chart page →

7,522
n8nn8n-helm2.25.71 of 1See more

n8n n8n-helm 2.25.7

1 of the 1 container images this version deploys carry CVE-2026-114141.

Container imageDigestPackageFixed in
n8nio/n8n:2.25.7761374d4eb84
toml@3.0.0
5.0.1

Open the chart page →

4,343
growthbookone-acre-fundVerified publisher0.3.01 of 3See more

growthbook one-acre-fund 0.3.0

1 of the 3 container images this version deploys carry CVE-2026-114141.

Container imageDigestPackageFixed in
growthbook/growthbook:latestdca716a7bf47
toml@4.3.0
5.0.1

Open the chart page →

1,500
cloudpremcloudprem0.0.0-build.00306ba7288bb8d46dd8c6190af79ef5b6fbdbad1 of 6See more

cloudprem cloudprem 0.0.0-build.00306ba7288bb8d46dd8c6190af79ef5b6fbdbad

1 of the 6 container images this version deploys carry CVE-2026-114141.

Container imageDigestPackageFixed in
ghcr.io/formancehq/console:console-on.v1.1.1a4d32c2f68b3
toml@3.0.0
5.0.1

Open the chart page →

23,324
decisionrules-ocpdecisionrules-ocpOfficialVerified publisher0.2.11 of 4See more

decisionrules-ocp decisionrules-ocp 0.2.1

1 of the 4 container images this version deploys carry CVE-2026-114141.

Container imageDigestPackageFixed in
decisionrules/server:latestbb3a93224b5a
toml@3.0.0
5.0.1

Open the chart page →

1,996
desishowbiz-frontenddesishowbiz1.0.01 of 1See more

desishowbiz-frontend desishowbiz 1.0.0

1 of the 1 container images this version deploys carry CVE-2026-114141.

Container imageDigestPackageFixed in
rahulbhiwagade122/desishowbiz:latest08490b70998c
toml@3.0.0
5.0.1

Open the chart page →

3,397
Governify-Bluejaygovernify0.1.01 of 12See more

Governify-Bluejay governify 0.1.0

1 of the 12 container images this version deploys carry CVE-2026-114141.

Container imageDigestPackageFixed in
governify/registry:v3.4.0d3f37f4f8168
toml@3.0.0
5.0.1

Open the chart page →

24,234
Governify-Falcongovernify0.1.02 of 10See more

Governify-Falcon governify 0.1.0

2 of the 10 container images this version deploys carry CVE-2026-114141.

Container imageDigestPackageFixed in
governify/collector-dynamic:v1.3.06d3d1a5b46a9
toml@3.0.0
5.0.1
governify/registry:v3.4.0d3f37f4f8168
toml@3.0.0
5.0.1

Open the chart page →

26,725
infisicalinfisical-charts0.4.21 of 3See more

infisical infisical-charts 0.4.2

1 of the 3 container images this version deploys carry CVE-2026-114141.

Container imageDigestPackageFixed in
infisical/infisical:latestdbc5be2079b6
toml@5.0.0
5.0.1

Open the chart page →

2,596
infisical-standaloneinfisical-charts1.11.11 of 5See more

infisical-standalone infisical-charts 1.11.1

1 of the 5 container images this version deploys carry CVE-2026-114141.

Container imageDigestPackageFixed in
infisical/infisical:v0.167.0dbc5be2079b6
toml@5.0.0
5.0.1

Open the chart page →

2,596
nocodbinseefrlab0.2.01 of 1See more

nocodb inseefrlab 0.2.0

1 of the 1 container images this version deploys carry CVE-2026-114141.

Container imageDigestPackageFixed in
nocodb/nocodb:latest27d2fd14670d
toml@4.3.0
5.0.1

Open the chart page →

421
n8njanip81-helm-chartsVerified publisher0.1.51 of 1See more

n8n janip81-helm-charts 0.1.5

1 of the 1 container images this version deploys carry CVE-2026-114141.

Container imageDigestPackageFixed in
n8nio/n8n:1.86.08b39ed5a2de9
toml@3.0.0
5.0.1

Open the chart page →

7,259
n8nn8n-openshiftVerified publisher1.18.01 of 1See more

n8n n8n-openshift 1.18.0

1 of the 1 container images this version deploys carry CVE-2026-114141.

Container imageDigestPackageFixed in
n8nio/n8n:2.36.714c4285bc303
toml@3.0.0
5.0.1

Open the chart page →

2,570
n8nopenshift1.18.01 of 1See more

n8n openshift 1.18.0

1 of the 1 container images this version deploys carry CVE-2026-114141.

Container imageDigestPackageFixed in
n8nio/n8n:2.36.714c4285bc303
toml@3.0.0
5.0.1

Open the chart page →

2,570
infisicalsinextraVerified publisher0.7.21 of 1See more

infisical sinextra 0.7.2

1 of the 1 container images this version deploys carry CVE-2026-114141.

Container imageDigestPackageFixed in
infisical/infisical:v0.166.8bb8352b71cea
toml@3.0.0
5.0.1

Open the chart page →

3,219
n8nvictorlane1.0.181 of 1See more

n8n victorlane 1.0.18

1 of the 1 container images this version deploys carry CVE-2026-114141.

Container imageDigestPackageFixed in
n8nio/n8n:1.115.1ed16e560c40e
toml@3.0.0
5.0.1

Open the chart page →

8,074

Container images carrying it

25 by charts deploying them

A fixed version is listed for 1 of the 1 affected package.

Container imageDigestPackageFixed inUsed by
governify/registry:v3.4.0d3f37f4f8168
toml@3.0.0
5.0.1
2
infisical/infisical:latest:v0.167.0dbc5be2079b6
toml@5.0.0
5.0.1
2
n8nio/n8n:2.36.714c4285bc303
toml@3.0.0
5.0.1
2
budibase/apps:3.41.344fe6feab985
toml@3.0.0
5.0.1
1
decisionrules/server:latestbb3a93224b5a
toml@3.0.0
5.0.1
1
governify/collector-dynamic:v1.3.06d3d1a5b46a9
toml@3.0.0
5.0.1
1
growthbook/growthbook:5.1.0c8a124f55dca
toml@4.3.0
5.0.1
1
growthbook/growthbook:latestdca716a7bf47
toml@4.3.0
5.0.1
1
infisical/infisical:v0.166.8bb8352b71cea
toml@3.0.0
5.0.1
1
makeplane/live-commercial:v3.3.3fab034a2be8c
toml@4.3.0
5.0.1
1
makeplane/silo-commercial:v3.3.312c33418c1ec
toml@4.3.0
5.0.1
1
makeplane/space-commercial:v3.3.3c4a6236c4080
toml@4.3.0
5.0.1
1
n8nio/n8n:2.25.7761374d4eb84
toml@3.0.0
5.0.1
1
n8nio/n8n:2.41.687e0bab2c931
toml@3.0.0
5.0.1
1
n8nio/n8n:1.86.08b39ed5a2de9
toml@3.0.0
5.0.1
1
n8nio/n8n:2.44.4c72fa9f1bd9b
toml@3.0.0
5.0.1
1
n8nio/n8n:2.36.8cfe2704ff858
toml@3.0.0
5.0.1
1
n8nio/n8n:2.43.3d4eca183959b
toml@3.0.0
5.0.1
1
n8nio/n8n:1.115.1ed16e560c40e
toml@3.0.0
5.0.1
1
nocodb/nocodb:latest27d2fd14670d
toml@4.3.0
5.0.1
1
nocodb/nocodb:0.301.5d9516f0bf546
toml@3.0.0
5.0.1
1
rahulbhiwagade122/desishowbiz:latest08490b70998c
toml@3.0.0
5.0.1
1
vabene1111/recipes:1.0.5.2ec4e9e2905b0
toml@3.0.0
5.0.1
1
ghcr.io/formancehq/console:console-on.v1.1.1a4d32c2f68b3
toml@3.0.0
5.0.1
1
ghcr.io/linuxserver/raneto:version-0.16.6ef768f3df5d0
toml@2.3.6
5.0.1
1

syft 1.42.1 · advisories as of 23 Oct 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.